text:
From Dogtag
Dogtag Certificate System 10.1
What's new?
Dogtag Certificate System 10.1 represents the release being bundled with the GA release of Fedora 20, and marks the culmination of nearly a year's worth of developments by the Dogtag team.
NOTE: | Due to changes in the way tomcat is started in Fedora 20, and the corresponding changes in the Dogtag init scripts, Dogtag 10.1 will only be delivered from Fedora 20 upwards. Dogtag 10.0 will continue to be delivered and supported for Fedora 18 and 19. |
This release contains the following changes since Dogtag 10.0:
Infrastructure/ Version Changes:
- pylint was added to the build scripts, and any pylint errors and warnings in the python code were fixed. The build now fails if any new errors or warnings are generated.
- RESTEasy was updated from version 2.3.2 to 3.0.1. As part of this transition, some server code (the interceptors) was modified to implement JAX-RS 2.0.
- In Fedora 20, tomcat has changed to more properly use systemd unit files to start up, rather than system V init scripts. (Bugzilla Bug #842346 - Properly migrate tomcat to systemd)
As a result, new Dogtag systemd unit files (based on the tomcat unit files) were required. This change is the primary reason Dogtag 10.1 cannot be deployed in Fedora versions < 20.
New Testing Framework: A new test framework was added to the upstream git source tree. This framework can be used to do standalone tests or as part of a continuous integration testing framework. This framework includes:
- QE tests are added to upstream git as part of this release. These tests use the beaker libraries to generate results and are run in a beaker test bed.
- A mechanism for writing JUnit tests, with some sample tests. These tests can be run through eclipse on a local test environment or run along with the QE tests on a beaker machine. Customized Suite and RunNotifier classes are provided to generate the results using beaker libraries in place of the actual JUnit result.
- The README file in tests/dogtag provides information on how to run the tests.
REST interface enhancements:
- The interface has been updated to use standard HTTP return codes under various operations. Paging support has been added to most search operations.
- New REST interfaces have been added for managing certificate profiles on the CA. This includes:
- Methods to list, add, remove, edit, enable/disable profiles. These methods are protected by ACLs that limit authorization to agents or administrators as appropriate.
- Extensions to the pki CLI tool to perform all the above operations.
- A new method to provide enrollment templates to end-entity users for specific profiles. An enrollment template is a certificate request representation that contains all the required inputs for a given profile. End entity users can list available profiles by calling GET /certrequests/profiles, and fetch an enrollment template by navigating to GET /certrequests/profiles/{id}.
DRM Enhancements:
- Audit logging has been added to the REST interfaces for key archival and recovery.
- REST interface for asymmetric key retrieval provides ability to submit key recovery requests, approve them, and retrieve keys approved for recovery.
- Transport Key rotation provides ability to gradually migrate DRM and connected CAs from a current to a new transport key. It also provides support for simultaneous use of both transport keys.
New Stand-alone DRM:
- It is now possible to deploy a stand-alone DRM through pkispawn.
- Dogtag subsystems such as a DRMs have always required the presence of a Dogtag Certificate Authority (CA) to be part of a PKI deployment. A stand-alone DRM uses an external CA to obtain its system certificates, such that the DRM can be set up without a Dogtag CA in its PKI deployment. The DRM is not expected to communicate with any other PKI subsystems (with the exception of its clones, which will be implemented in a future release).
Potential users of this feature include CA-less IPA installation and storage of secrets, and possible integration with CloudKeep.
New Java-Based TPS:
- We have begun an effort to re-implement the TPS subsystem (which is currently written as C/C++ Apache modules) in Java. The new tomcat-tps will run in a Tomcat server like the other Java subsystems, either within the same or in a separate Tomcat instance.
There are many steps in this effort, detailed below. As of this release, steps 1,2 and the design phase of step 3 are complete. The remaining steps are slated to be delivered in the next major release.- Creation of installation/configuration code through pkispawn (either interactive or non-interactive). In particular, a new interface has been created to automate the generation and distribution of the symmetric key that acts as a shared secret between the TKS and TPS. Currently, this secret is generated and distributed using tkstool - which is a manual, error-prone process.
- Creation of new REST interface and CLI for various TPS resources and services including tokens, certificates, profiles, users, groups, self tests, configurations, and logs.
- Design and implementation of new TPS Web UI for administrators, operators and agents.
- Porting of lower level code that interacts with tokens and other subsystems.
CLI improvements:
- The "pki" CLI commands have been organized according to the target of the operations: the client, the subsystems, and the security domain. The client commands provide an interface to manage client certificates. The subsystem commands provide an interface to access various services in each subsystem. The security domain commands provide an interface for managing subsystems. The old-style commands are still available for backward compatibility.
Dogtag Certificate System 10.0.6
What's new?
Dogtag Certificate System 10.0.6 represents the sixth errata build for Dogtag 10.0.0.
This release contains the following features:
1. Some commands in the pki CLI have been renamed for better consistency. The old commands will continue to work, but they have not been deprecated, and will be displayed accordingly in the usage and man pages.
The commands that have been renamed are: * old command -> new command * client-find-cert -> client-cert-find * client-import-cert -> client-cert-import * client-remove-cert -> client-cert-del * group-add-member -> group-member-add * group-find-member -> group-member-find * group-show-member -> group-member-show * group-remove-member -> group-member-remove * user-add-cert -> user-cert-add * user-find-cert -> user-cert-find * user-show-cert -> user-cert-show * user-remove-cert -> user-cert-del * user-add-membership -> user-membership-add * user-find-membership -> user-membership-find * user-show-membership -> user-membership-show * user-remove-membership -> user-membership-del
2. The upgrade scripts have been modified to backup the files used to track the upgrade process. For instance specific upgrade scripts, this is CS.cfg.
3. A missing jar link to apache-commons-io prevented IPA replica installs from completing successfully on RHEL 7. The required link has been added. (BZ 1024679)
4. Due to a bug in the configuration code, when installing a non-cloned CA, the certificate for the admin user configured during the install was signed with SHA1 by default. With the fix, the admin cert is signed with SHA256 by default. It is possible to override this setting by changing values in the caAdminCert.cfg profile prior to configuration. (BZ 1024445)
5. ipa-cert-remove-hold <non_existent_cert_id> used to return a server error. The error handling code for this servlet has been modified to return the correct error message (BZ 999722)
6. java-abrt crashes were being generated during IPA server installs due to exceptions being thrown during tomcat shutdown. This was due to the shutdown code being called multiple times internally. This code has been fixed. (BZ 1018268)
Notes on Fedora 19:
Fedora 19 does not provide tomcat 6. Dogtag 9 style instances will therefore no longer work on Fedora 19. These instances need to be migrated to Dogtag 10.
To prevent inadvertently disabling Dogtag instances, code has been added to prevent upgrades to Fedora 19 if Dogtag 9 instances exist. Details on how to upgrade Dogtag 9 instances and workarounds can be found at: Migrating Dogtag 9 Instances to Dogtag 10
Dogtag Certificate System 10.0.5
What's new?
Dogtag Certificate System 10.0.5 represents the fifth errata build for Dogtag 10.0.0.
This release contains the following features:
- Due to changes in systemd, restarting Dogtag 10 instances using systemctl restart pki-tomcatd.target failed. Changes have been made to the systemd startup configuration to ensure that this works correctly. In addition, configuration has been added to require systemd to accept an exit status of 143 (a correct exit status for the JVM) as valid, so this exit value will no longer be reported in the system logs.
- Due to changes in the python-requests, a new exception (ProxyError) was returned when attempting to connect to a server that is not yet available. This affected pkispawn installation code when we wait for a server to restart. The code has been modified to handle this (and other) exceptions.
- In a case following a bad restart, the CS.cfg for an instance appeared to be cleared or truncated. The code has been changed to not write server status to the CS.cfg on startup, but rather to use an in-memory variable.
- Fixed LDAP search filter code to no longer return certificates expired for both reason 1 and reason 10 when searching only for reason 1.
Notes on Fedora 19:
Fedora 19 does not provide tomcat 6. Dogtag 9 style instances will therefore no longer work on Fedora 19. These instances need to be migrated to Dogtag 10.
To prevent inadvertently disabling Dogtag instances, code has been added to prevent upgrades to Fedora 19 if Dogtag 9 instances exist. Details on how to upgrade Dogtag 9 instances and workarounds can be found at: Migrating Dogtag 9 Instances to Dogtag 10
Dogtag Certificate System 10.0.4
What's new?
Dogtag Certificate System 10.0.4 represents the fourth errata build for Dogtag 10.0.0.
This release contains the following features:
- Enhanced pkispawn to provide automatic backup and restore mechanism for files modified during the upgrade process.
- Improved the summary information at the end of pkispawn to include, among other things, the location of the agent PKCS #12 file.
- Fixes to pkispawn and the installation servlets to fix cloning.
- Fix to pkispawn to correctly overwrite the pki_issuing_ca when configuring with an external CA. This resolves an issue reported by IPA in BZ #986901.
- Numerous fixes to resolve build issues on F19 and RHEL.
Notes on Fedora 19:
Fedora 19 does not provide tomcat 6. Dogtag 9 style instances will therefore no longer work on Fedora 19. These instances need to be migrated to Dogtag 10.
To prevent inadvertently disabling Dogtag instances, code has been added to prevent upgrades to Fedora 19 if Dogtag 9 instances exist. Details on how to upgrade Dogtag 9 instances and workarounds can be found at: Migrating Dogtag 9 Instances to Dogtag 10
Dogtag Certificate System 10.0.3
What's new?
Dogtag Certificate System 10.0.3 represents the third errata build for Dogtag 10.0.0.
This release contains the following features:
- Fixes for security flaws in the TPS as described in CVE-2013-1885 and CVE-2013-1886
- Added checking for sane lengths of the fields in subject DNs in the TPS, to prevent a TPS crash.
- Previously the server certificate name was partially hard-coded. Now in Tomcat-based subsystems, it can be fully configured using pki_ssl_server_nickname parameter.
- Corrections and additions to man pages and other documentation.
Notes on Fedora 19:
Fedora 19 does not provide tomcat 6. Dogtag 9 style instances will therefore no longer work on Fedora 19. These instances need to be migrated to Dogtag 10.
To prevent inadvertently disabling Dogtag instances, code has been added to prevent upgrades to Fedora 19 if Dogtag 9 instances exist. Details on how to upgrade Dogtag 9 instances and workarounds can be found at: Migrating Dogtag 9 Instances to Dogtag 10
Dogtag Certificate System 10.0.2
What's new?
Dogtag Certificate System 10.0.2 represents the second errata build for Dogtag 10.0.0.
This release contains the following features:
- A new Python client framework has been written to connect to the restful interface on the java subsystems. This interface was used for some installation functionality and will continue to be expanded.
- pkispawn and pkidestroy were modified to use the new Python client framework and the dependency on jython was eliminated.
- The installation interfaces were changed so that most of the installation interactions take place over the admin interface.
- New command line parameters have been added to pkidestroy to provide the username and password of the security domain administrator to update the security domain. Formerly, no credentials were required because we used the subsystem certificate of the subsystem for authentication. The new method provides better auditing as to exactly who is de-registering and removing a subsystem. As such, use of the new options is recommended, and will be made mandatory in a future release.
- Although it is possible to run Dogtag 9 style instances on Dogtag 10, these instances do not have the required configuration to expose the RESTful interface. A new servlet has been added to return 501 (Not implemented) on these instances when the REST URLs are accessed. This is only applicable on Fedora 18 (See Fedora 19 note below).
- A new interactive mode has been added to pkispawn and pkidestroy. In this mode, users are prompted for details in order to set up the most basic servers. Any customizations would still need to be done through configuration files. Interactive mode is an excellent way for users to set up a server and become familiar with Dogtag.
- Support has been added for the random generation of serial numbers for certificates issued. More details about this feature and how to enable it can be found here: Random Certificate Serial Numbers
- Nonces are used in Dogtag to prevent cross-site request forgery and replay attack, but they were stored in a global list. To prevent possible collisions with other user's nonces, they are now stored in each user's session.
- Previously, session IDs were generated using /dev/random, which may block under certain circumstances, making server startup slow. To avoid this, the server configuration has been changed to use PKCS11PRNG provided by JSS.
- A new upgrade framework has been added to allow instances to be automatically upgraded when new packages are installed. This framework will be used to eventually remove the need for migrations between releases. The upgrade scripts are invoked by postinstall scriptlets in the pki-base and pki-server packages. On completing an upgrade, users should check the upgrade logs in /var/log/pki/pki-upgrade-*.log and /var/log/pki/pki-server-upgrade-*.log for any errors. The upgrade scripts (pki-upgrade and pki-server-upgrade) can also be run manually. Additional troubleshooting information can be found at: Upgrade
- New CLI has been added to simplify client certificate management including importing and trusting CA certificates.
- Previously, the pki CLI tool used the same parameter (-w) to specify both user and client certificate database passwords. The CLI has been modified to use a new parameter (-c) for the database password, and -w for the user password.
- Multiple additional fixes to pkispawn, pkidestroy, pki and their man pages.
Notes on Fedora 19:
Fedora 19 does not provide tomcat 6. Dogtag 9 style instances will therefore no longer work on Fedora 19. These instances need to be migrated to Dogtag 10.
To prevent inadvertently disabling Dogtag instances, code has been added to prevent upgrades to Fedora 19 if Dogtag 9 instances exist. Details on how to upgrade Dogtag 9 instances and workarounds can be found at: Migrating Dogtag 9 Instances to Dogtag 10
Dogtag Certificate System 10.0.1
What's new?
Dogtag Certificate System 10.0.1 represents the first errata build for Dogtag 10.0.0.
This release contains the following features:
- Nonces have been added to the RESTful interface for certificate revocation to preventing cross site scripting attacks on that interface.
- A new servlet has been added to the RESTful interface to add and remove KRA connector configuration from a CA. This is used to clean up a CA when a KRA is destroyed.
- The default validity of the CA signing cert has been lengthened from 8 to 20 years.
- pkispawn has been modified to allow the user to specify the location of the generated admin cert PKCS#12 file.
- OCSP now supports ECC CRLs.
- A more robust use of interpolation has been added to pkispawn.
- pkidaemon has been repaired to display the runtime status of PKI Java-based instances
- A third-party license file has been added for Dogtag 10's use of JQuery and the JQuery.i18n.properties plug-in
Dogtag Certificate System 10.0
What's new?
Dogtag Certificate System 10.0 represents the release being bundled with the GA release of Fedora 18, and marks the culmination of over a year of development by the Dogtag team.
This release contains the following changes since Dogtag 9.0:
Infrastructure and Development Changes:
- The Dogtag code base was moved to git from svn.
- Java development is now done under Eclipse.
- Dogtag 10 uses its own public-facing TRAC project management system.
- Improvements were made to CMake modules for Java development.
- Java development uses OpenJDK 7.
- Python development uses Python 2.7 and Jython 2.2.
- Dogtag 10 Java-based instances run on Tomcat 7.
- Dogtag 10 RA and TPS instances run on Apache 2.4.
- Code has been reformatted to uniform formatting and coding standards.
- Based on feedback provided by Eclipse and Coverity, the following types of cleanup occurred:
- Removal of dead code and unnecessary code blocks.
- Removal of generic containers and implementation of type safety.
- Removal/ replacement of deprecated code, with the addition of JUnit tests to confirm correctness.
- Address various memory leaks and corruption issues, coding style issues etc.
- The Dogtag code pre-dates many of the modern Java utilities to do encoding, HTTP and XML parsing etc. As a result, custom code was written to do these functions. This code has been replaced with standard code, and a whole package (osutil) was eliminated.
- To allow easier and more intuitive interaction with the Dogtag servers, a new REST interface has been added. This interface is based on RESTEasy framework, a fully certified implementation of the JAX-RS specification. Clients interact with this framework using intuitive REST URLs, and using standard XML or JSON inputs.
- Included is a Java client proxy framework which can be used by client applications to build HTTP requests on the Dogtag servers, simply by invoking methods on the client objects. This client framework is used in the new command line interface "pki" as described below.
- The plan is to continue over time to extend the REST interface to cover all of the essential Dogtag functionality. In this release, the following functionality has been implemented:
- With a CA:
- Create, review and approve certificate requests.
- List, view, revoke, hold and release certificates.
- Get installation token from security domain
- Add/remove KRA connector configuration
- Retrieve and list certificate profiles
- With KRA:
- Retrieve transport certificate
- List/ archive and recover symmetric keys
- With all Java systems:
- Add/Remove/Modify/View users, groups and group members
- Start system installation service
- With a CA:
- Dogtag 10 includes JQuery and the Jquery.i18n.properties plug-in.
- A new intuitive command line interface has been created, based on the RESTEasy client framework. This allows administrators and agents to perform all of the operations exposed by the REST interface from the command line, or from scripts.
- The DRM provides secure encrypted storage for asymmetric keys. The KRA has been extended to provide a mechanism to securely archive and recover symmetric keys. This would be useful for storing disk encryption keys for instance.
- In Dogtag 9, we maintained a custom SELinux policy to provide mandatory access controls for interactions with the Dogtag server. In Dogtag 10, this policy has been cleaned up, simplified and integrated into the system base policy. As a result, the pki-selinux package has been retired.
- In earlier releases, Dogtag only supported ECC certificate issuance when the CA was connected to an ECC-capable external crypto token. In Dogtag 10, all CS servers (CA, OCSP, DRM, TKS, TPS) can now be issued ECC certificates and run in such environment that:
- CS servers can communicate securely with ECC SSL certificates.
- Administrators and agents can access their administration ports via SSL using ECC certificates
- ECC encryption certificates can now have their private keys archived (and recovered) by the DRM. For this feature, we used an ECC-capable HSM in our development and QE environment on the client side for development and testing. Certicom software tokens could not be used because of an issue with malformed private keys.
- The TMS testing client tool, tpsclient, can now be used to test token-based enrollment and key archival in the TMS environment (the actual smart card support will follow in a later release)
- New installer tools (pkispawn, pkidestroy) has been written in Python to create Dogtag Java-based instances (CA, KRA, OCSP, TKS). Over time, this installer will be extended to handle the remaining Apache-based instances (TPS and RA), and pkicreate/pkiremove/pkisilent will be retired and removed.
- pkispawn performs the same operations that pkicreate and the pkisilent used to do, meaning that a Dogtag Java-based instance can be installed and configured in a single non-interactive step. With the right options, though, it is still possible to configure an instance by going through the web-based installation UI panels.
- It is now possible (though not required) to install multiple Java subsystems (CA, KRA, TKS, OCSP) within a single tomcat instance. This is useful for small deployments where, for example, you might want leverage the capabilities of a CA and KRA on a single server. In keeping with this change, the directory structure of a Dogtag instance has changed.
- By default, Dogtag will install on the default tomcat ports (8443 and 8080). There will no longer be any separation of EE, admin and agent interfaces on different ports.
- The Dogtag RPM packages have been restructured to reduce the number of packages and more accurately separate client and server components. The current packages are:
- pki-base: code common to clients and server
- pki-tools: Java and native tools used by client and server.
- pki-server: code used by Java servers, only on the server.
- pki-ca, pki-kra, pki-ocsp, pki-tks, pki-ra, pki-tps: subsystem specific code
- pki-javadoc: consolidation of the pki-common-javadoc, pki-java-tools-javadoc, and pki-util-javadoc packages
- pki-symkey: provides native symmetric key operations
- pki-console: administrative tool for CA, KRA, OCSP, and TKS
- The UI packages have been rearranged and consolidated to make customizing an instance's user interfaces more straightforward, and to ensure a more consistent look and feel across subsystems. All of the subsystem-specific UI packages have been eliminated, and there is now a single UI package (dogtag-pki-server-theme) which contains all the CSS style sheets, image files and properties files for all subsystems. A customer wanting to customize the UI could simply replace the components in this package. Additionally, the pki-console requires its own UI package, dogtag-pki-console-theme.
- A meta-package (dogtag-pki) has been created to conveniently install all existing Dogtag 10 PKI packages.
Dogtag Certificate System 10.0 (Release Candidate 1)
What's new?
Dogtag Certificate System 10.0 (Release Candidate 1) builds upon Dogtag Certificate System 10.0 (Beta 2) and represents the first release candidate release of future Dogtag PKI technology.
This release contains the following features:
- Simplified and enhanced pkispawn.
- Added detailed man pages to document use of pkispawn, pkidestroy and the command line utility pki.
- Removed --dry-run option and unused respawn() code.
- Replaced links of scriptlets with lists
- Modified the way pkispawn parses configuration files. pkispawn now reads a template file for default settings, and a much smaller and simpler user-defined configuration file for customizations and overrides. Moreover, pkispawn uses interpolation to substitute in values. See the man pages for details.
- Added the ability to import an admin cert into the administrative user created for each subsystem. This allows multiple subsystems within the same instance to be more easily managed within the same browser.
- Implemented ability to install a subordinate CA using pkispawn.
- Implemented ability to install an externally signed CA using pkispawn.
- Simplified the structure of the UI packages
- All images and css files have been moved to dogtag-pki-server-theme for all subsystems.
- Removed unused and duplicated files.
- Template files have been moved to the underlying subsystem files. In future, all theme related messages in those files will be parameterized and placed in dogtag-pki-server-theme. This will significantly simplify the process of customizing or internationalizing an instance and its theme.
- Retired all the subsystem specific UI packages, reducing the number of UI packages from 7 to 1.
- Security fixes for CVE-2012-4543 Certificate System: Multiple cross-site scripting flaws by displaying CRL or processing.
- Memory fixes for the TPS
- Updated to latest version of cmake, removing obsolete modules.
Dogtag Certificate System 10.0 (Beta 2)
What's new?
Dogtag Certificate System 10.0 (Beta 2) builds upon Dogtag Certificate System 10.0 (Beta 1) and represents the second beta release of future Dogtag PKI technology.
This release contains the following features:
- Selinux policy moved into system selinux policy. For F18, pki-selinux will no longer be built and delivered by the dogtag team. The PKI policy will instead be managed by the selinux base packages team.
- Added option to install schema on a clone, rather than simply replicating it. This is to resolve an IPA issue when replicating from a non-merged to a merged database.†
- Restricted AJP to allow access from localhost only by default. This is an IPA reported issue.†
- Changes to allow the TPS and RA to install and configure correctly.
- Enabled Tomcat security manager and added mechanism to configure custom security policy.
- Added CLI tools to obtain security domain information and install tokens.
- Refactored REST client classes to support multiple operations over authenticated HTTP session.
- Added automatic recovery to the LDAP modification listener.
- Added login service to protect REST services including certificate operations, key operations, security domain, TKS and OCSP.
- Added option to pkispawn to exit before configuration, in case the installer wants to go through the UI configuration panels. In this way, pkispawn can be operated like pkicreate/pkisilent.
- Removed version numbers from jar files to comply with Fedora packaging recommendations.
† - denotes IPA related/reported issue
Dogtag Certificate System 10.0 (Beta 1)
What's new?
Dogtag Certificate System 10.0 (Beta 1) builds upon Dogtag Certificate System 10.0 (Alpha 2) and represents the first beta release of future Dogtag PKI technology.
This release contains the following features:
- Merged pki-silent into pki-server.
- Added Provides to packages replacing obsolete packages.
- Added needed link for updated d9 -> d10 instances. Found in IPA testing.†
- Backed up CS.cfg before upgrading from d9 -> d10
- New selinux policy for all components. The Java components now take advantage of a tomcat domain defined in the base selinux policy, and the RA/TPS policies have been cleaned up considerably. The policy that is now delivered is very close to the final version that will be delivered in the base policy. That will be a deliverable for beta 2.
- Selinux context for startup scripts for all components set so that runcon is not required.
- Cleaned up lock and pid files generation and removal for java processes.
- Rebuilt packages against the latest F18 base selinux policy packages to resolve an issue in installing pki-selinux due to removal of a boolean in F18 base selinux policies. This issue was reported by IPA.†
† - denotes IPA related/reported issue
Dogtag Certificate System 10.0 (Alpha 2)
What's new?
Dogtag Certificate System 10.0 (Alpha 2) builds upon Dogtag Certificate System 10.0 (Alpha 1) and represents the second alpha release of future Dogtag PKI technology.
This release contains the following features:
- Dogtag 10 can now clone from Dogtag 9 masters. We will fall back to the old installation servlet if needed.†
- Startup state of a server can be determined from the getStatus() servlet†
- Consistent database user provided during installation for client authentication (used in IPA merged database install)
- Fixed package dependency issue with pki-symkey†
- pki-setup merged into pki-server†
- Audit Cert Renewal time extended to two years†
- Versioning added to jar manifest files and VERSION file and reported in getStatus
- ECC enhancements in DRM and TMS environment
- Addition of time based searches in preparation for randomized serial numbers
- Enhanced escaping of LDAP attributes
- Improved transition control for token operations in the TPS.
Dogtag Certificate System 10.0 (Alpha 1)
What's new?
Dogtag Certificate System 10.0 (Alpha 1) builds upon Dogtag Certificate System 9.0 and represents the first alpha release of the future direction for Dogtag PKI technology.
This release contains the following features:
- Extension of the functionality of the DRM to store and retrieve symmetric keys and passphrases, rather than only asymmetric keys. This feature allows the DRM to be used as a secure vault-like storage for essentially any sensitive data. The data is stored using the same secure FIPS-compliant storage mechanism used to store PKI keys.
- The new DRM functionality is exposed through a new REST interface, provided by the RESTEasy framework. This provides an intuitive mechanism for writing clients to the interface. Both Java (using the RESTEasy client proxy framework) and Python clients have been coded. The server uses standard Java libraries to generate and parse XML or JSON input and output data.
- Extracted authentication and authorization code from the individual servlets into a standard Tomcat authentication realm. This realm has been configured to require client certificate authentication, and is being used to secure the new DRM REST interface. In the future, this authentication realm could be extended to include other kinds of authentication (such as Kerberos). This is part of a push to refactor the code to expose the core business functionality in the servlets, while extracting the ancillary tasks (authentication, authorization, XML parsing and generation, etc.) and using standard methods and libraries to accomplish these tasks.
- Enhanced Java subsystems so that they could connect to the internal database using a non-directory manager user, that is authenticated using client authentication. This resolves a number of issues with LDAP operations ignoring search limits. In addition, some changes have been made to allow integrating the Dogtag database with other systems such as IPA.
- A new package pki-deploy contains the initial framework for a Python-based installer/de-installer (pkispawn/pkidestroy) that will be used to install and configure a Dogtag instance. This will ultimately replace the pki-setup installer/de-installer (pkicreate, pkidestroy) package, and the pki-silent instance configuration (pkisilent) package.
- Much of the focus of this release was on cleaning up and modernizing the Dogtag source code.
- Dogtag source code has been moved to git.
- Java coding standards have been revised - and the code has been reformatted to match those standards.
- Initially, Eclipse reported about 13000 warnings in the dogtag code. Those have been reduced to close to 2400. This included removing dead and unused code, replacing calls to deprecated functions and replacing raw collections with type-safe generics.
- NOTE: These numbers currently exclude console code.
- OSUtil is a package that has certain utilities that were not available when the Dogtag code was originally written. These utilities are now available in current standard libraries - and so this package has been eliminated entirely.
- Improved handling of short and long lived threads which allow threads to exit gracefully on shutdown.
Dogtag Certificate System 9.0
What's new?
Dogtag Certificate System 9.0 represents the latest release of Dogtag PKI technology.
Dogtag Certificate System 9.0 builds upon Dogtag Certificate System 1.3 and provides the following significant changes:
- Designed to integrate seamlessly with FreeIPA
- Updated to utilize 'tomcat6' rather than 'tomcat5'
- Streamlined 'pkicreate'/'pkiremove'/'registry' code to be more efficient
- Improved SCEP feature support - see PKI SCEP Support In Certificate System
- Implemented Publishing Queue - see PKI Publishing Queue
- Replaced 'ant'/'autoconf'-based build system with a new 'CMake'-based build system
- SRPM source packages were re-organized - see PKI Packages
- Fixed approximately 275 Bugs - see PKI Bugs closed between Dogtag 1.3 and Dogtag 9.0
- Support for 32-bit and 64-bit versions of Fedora 15
Dogtag Certificate System 1.3
What's new?
Dogtag Certificate System 1.3 was primarily created for integration into the Fedora 13 release.
Dogtag Certificate System 1.3 builds upon Dogtag Certificate System 1.2.0 and provides the following changes:
- Spec File changes required for integration into the Fedora 13 release
- Separation of default PKI instance creation from PKI subsystem packaging via means of an integrated 'registry'
- Numerous Bug Fixes (see Bugzilla Bug Database)
- Support for 32-bit and 64-bit versions of Fedora 11, Fedora 12, and Fedora 13
- Support for 32-bit and 64-bit versions of EPEL packages on RHEL 5.5
- An additional port is now required on the CA for EE client auth interactions. This is required so that the CA can work seamlessly with the latest NSS patches that address the TLS renegotiation MITM vulnerability (CVE-2009-3555). Refer to http://kbase.redhat.com/faq/docs/DOC-23543 for more details.
- Numerous improvements to cloning, including the ability to clone a clone without referring to the original master as the master of the security domain.
- Support for asynchronous key recovery.
Currently the TPS and RA subsystems will not work on RHEL5.5 as they require a later version of mod_nss For details on this and other know issues, please review the List of Known Issues
Dogtag Certificate System 1.2.0
What's new?
Dogtag Certificate System 1.2.0 is primarily a bug fix release, with approximately 300 bugs fixed. Improvements have been made to virtually every subsystem.
Dogtag Certificate System 1.2.0 builds upon Dogtag Certificate System 1.1.0 and resolves numerous bugs including:
- Fixes to installation scripts and the configuration wizard
- Improvements for the handling of UTF8 Characters
- Migration script and tool improvements
- Fixes numerous problems related to HSM configurations
- Smartcard Middleware and TPS server improvements
- Fixes the way ECC signature requests are handled
- New platform support for 32-bit and 64-bit versions of Fedora 11
Further details on all the Dogtag bugs fixed in this release, as well as details on bugs that remain unresolved, can be found at the Bugzilla Bug Database.
Dogtag Certificate System 1.1.0
What's new?
The release of Dogtag Certificate System 1.1.0 serves as the development base for Red Hat Certificate System 8.0.0, and contains the following enhancements:
- Dogtag Certificate System 1.1.0 builds upon the open source model originally established by Dogtag Certificate System 1.0.0 and adds numerous features including:
- Enhanced integration with FreeIPA
- Supports UUID issuance natively
- Provides data storage by the latest Fedora Directory Server
- Support for IPv6
- SELinux policy integration
- Support for 3rd party ECC plugin modules
- Numerous smart card enhancements including support for additional hardware tokens and 2048-bit keys
- Certificate Renewal
- TPS Roles
- Support for using HTTP 1.1 for CRL distribution
- Port Separation of End Entity (EE), Agent, and Admin users
- Numerous bug fixes and security enhancements
- Platform support for 32-bit and 64-bit versions of Fedora 8, Fedora 9, and Fedora 10
Dogtag Certificate System 1.0.0
What's new?
This initial release of Dogtag Certificate System 1.0.0 has been heavily modeled after Red Hat Certificate System 7.3.0, and contains the following enhancements:
- The source code for Dogtag Certificate System 1.0.0 is completely open source!
- Dogtag Certificate System 1.0.0 separates the user interface (ui) information from the various six top-level subsystems:
- Certificate Authority (CA),
- Data Recovery Manager (DRM),
- Online Certificate Status Protocol (OCSP) Manager,
- Registration Authority (RA),
- Token Key Service (TKS), and
- Token Processing System (TPS).
- Dogtag Certificate System 1.0.0 provides a built-in mechanism to provide seemless data migration to future releases of this project.
- Provides a new way to store request attributes. Schema has been changed for this feature.
- Contains new build scripts
- Incorporates several new junit tests
Follow the installation instructions to install and configure the initial instance of each PKI subsystem.


text:
Hunting Bill (Programme) — 20 Dec 2000
Mr John Gummer MP, Suffolk Coastal voted in the minority (Aye).
I beg to move,
That the following provisions shall apply to the Hunting Bill--
1. Clauses 1 to 4 and any New Clauses shall be committed to a Committee of the whole House.
2. The remainder of the Bill shall be committed to a Standing Committee.
3.--(1) Proceedings in Committee of the whole House shall be completed in one allotted day.
(2) An allotted day is one on which the Bill is put down as first Government Order of the Day.
4. Sessional Order B (Programming Committees) made by the House on 7th November shall not apply to the Bill.
5. Proceedings in the Standing Committee shall (unless previously concluded) be brought to a conclusion on Thursday 8th February 2001.
The louder he talked of his honour, the faster we counted our spoons.
I beg to move amendment (a), leave out "one allotted day" and insert "two allotted days."
If the amendment is accepted by the Government, it will make only slightly more palatable a ruthless guillotine motion that is rotten in principle and malicious in its detail. The House is considering a guillotine motion that displays the typical arrogance of this most dictatorial of all Governments; a Government who have decided on Second Reading what the timetable will be in Committee for an option that has not yet been voted on.
It being forty-five minutes after the commencement of proceedings on the motion, MR. DEPUTY SPEAKER, pursuant to Order [7 November], put forthwith the Question necessary for the disposal of proceedings to be concluded at that hour.
Question put, That the amendment be made:--
The House divided: Ayes 135, Noes 319.
Party Summary
Votes by party, red entries are votes against the majority for that party.
What is Tell? '+1 tell' means that in addition one member of that party was a teller for that division lobby.
What are Boths? An MP can vote both aye and no in the same division. The boths page explains this.
What is Turnout? This is measured against the total membership of the party at the time of the vote.
Party | Majority (No) | Minority (Aye) | Both | Turnout |
Con | 0 | 100 (+2 tell) | 0 | 63.8% |
Ind | 0 | 1 | 0 | 50.0% |
Lab | 319 (+2 tell) | 2 | 0 | 77.6% |
LDem | 0 | 28 | 0 | 59.6% |
Total: | 319 | 135 | 0 | 71.8% |
Rebel Voters - sorted by party
MPs for which their vote in this division differed from the majority vote of their party. You can see all votes in this division, or every eligible MP who could have voted in this division
Sort by: Name | Constituency | Party | Vote
Name | Constituency | Party | Vote |
Mrs Llin Golding | Newcastle-under-Lyme | Lab | aye |
Mr Barry Sheerman | Huddersfield | Lab | aye |

subset: commoncrawl


text:
Credits & Info
- Uploaded
- Apr 24, 2012 | 7:02 PM EDT
Author Comments
Flash is a pain in the arse!
Rated 4 / 5 stars April 24, 2012
I can relate... Job hunting is taking a toll on my life expectancy. xP
The voice acting was great, expressive and funny without trying too hard to be expressive and funny. The animation is simplistic but gets the message across. The only thing that really bothers me is how her toothbrush never actually enters her mouth.
Rated 4 / 5 stars April 24, 2012
Pretty good... ! :) I give you four 'cause I liked the drawing style and the story's base. Lil' problem with the audio quality but I like your point of view... :3
PD: It's really hard to find a job ah? LOL
Rated 4 / 5 stars April 24, 2012
C'est la vie. Not bad animation is pretty original, and the storyline can be all to true, sadly T.T
Rated 3.5 / 5 stars April 25, 2012
Pretty decent. The only thing holding this back is, like what everyone else has already mentioned, the audio. The art style makes up for it a bit, though. :)
Rated 3.5 / 5 stars April 24, 2012
Hah! I'm loving the art style. The audio needs cleaning up (it was difficult to hear and sounded scratchy), but the overall joke makes up for these things. I thought it was funny.


text:
1UP Blog Discontinued.
Posted: October 09, 2010Hi all,
I just wanted to let you know that I have discontinued posting on my 1up.com blog. However, if you would like to keep up with my crazy adventures you still can! All you have to do is head over to my new blog at http://www.toomuchzerging.com.
There are already new posts there to read, so head on over and let me know what you think!
Starcraft 2: Beta Footage Impressions
Posted: April 17, 2010Hey all,
First I would like to apologize for not writing this article last week. I meant to write it on Monday, but started my new internship that day and came home incredibly tired. But I digress.
The topic at hand is Starcraft 2, the Beta. Let me preface this by saying that I don't have a beta key (so please send me one so I can find out how wrong I am!). Overall, I am very excited for Starcraft 2. I've watched hundreds of games on a variety of channels (see the previous blog post for a bit more information on them), and the game looks great. There seems to be a lot of strategy involved in the build orders and unit counters. The races each look and feel distinct. The transitions from early to mid to late also look like they are smooth.
For the most part, the balance looks pretty good. Blizzard is of course constantly making changes to the units and will continue to do so even after the game comes out. Also, being that I can't actually play the game yet, I will withhold my full judgement on how difficult the various counters are to execute.
That being said, I get the impression that there are a few problems with the game. Some issues that I've noticed with the game so far are as follows, in no particular order:
1.) Unit colors. As a spectator, the color of same-race matchups can be hard to discern. This is particularly bad with certain green / cyan / blue colors, and also particularly bad with the Protoss Zealot armies, or with certain Zerg units (even worse if they're on the creep). This can be alleviated by toning down the graphics of the game, turning off the special effects and turning the graphics to a 2002 level. Still, it's a little sad that the unit colors are hard to see.
2.) Clumping. This one goes with #1: the units tend to clump up and move as a giant blob. While this obviously has balance issues (related with splash damage, particularly), it makes the units difficult to count and determine. The greatest offenders are the smallest units: Zerglings and Marines. I think that increasing the collision boxes by a small amount may help with this and combined with #1, make spectating Starcraft 2 games more exciting.
3.) Unit Compositions. Perhaps it is just because the game is new and players haven't figured out the best balances, but it seems like the compositions of armies can be a single unit (type) or two. The worst offender of this was with Zerg armies prior to the Roach "adjustment" in Patch 8; in Zerg vs. Zerg battles 80% of players went straight to Roaches and pretty much stayed there. If the battle dragged on, a few Hydras would be mixed in. The Terran M&M (Marine and Marauder) ball is somewhat in the same boat, though not as bad in my opinion as it often be supported with Medivacs (MMM) or occasionally Siege Tanks. Overall, I think that as players get more experience under their belts and Still, it seems like the army should include more unit variety.
4.) Lack of new mechanics. Okay, to me this is the biggest issue with what I've seen with Starcraft 2. It is less an explicit thing and more just a gut response. It can be boiled down into this: I feel like Blizzard has played it too safe with the development of Starcraft 2. Okay, maybe that was a bit explicit.
This is not to say that all innovations are always good; in fact, they can go wrong pretty easily. Probably the worst offender of this that I have played recently is C&C 4:Tiberium Twilight and its unit caps. I get what EA was trying to do with the game, but I find the multiplayer lackluster compared with previous C&C games, and doesn't feel like a C&C game anymore. It fell too far from the C&C tree and is only a mediocre game because of it. I think that Starcraft 2 suffers from the opposite problem: it is too close to its forebear.
The original Starcraft was revolutionary. It had three sides (compared with Warcraft 2 and Command and Conquer [the original and Red Alert], which had two sides each) with wildly different art and unit mechanics. Warcraft 3 built upon that model by having four sides and the introduction of heroes. It was a much different experience than Starcraft, and even further from Warcraft 2. And all of those were great games: they took what their predecessors had done and built upon it. I guess I just don't get that feeling as much with Starcraft 2. I do like the new macro mechanics with each of the races (Spawn Larvae, Mules, and Chrono Boost for Zerg, Terran, and Protoss respectively), multiple building selection, etc., but overall just feel like SC2 could've added something, something more substantial than one more button to press every 30 seconds.
I am going to give Blizzard the benefit of the doubt; as I said, I haven't actually played the game. It looks great and I'm sure that I'll be on Battle.net soon enough getting destroyed in the Copper league and the use-map settings games that are sure to come up (but so help me, if my buddies force me to play more DotA, I will nerdrage on them).
And that is just the multiplayer component. The singleplayer component is extensive: around 30 missions for the Terran campaign alone. The other races will get their own campaigns in two expansions (Heart of the Swarm and Legacy of the Void). It is my guess that the two expansions will add in something new (apart from new units and missions, I mean), so that the complete SC2 product will be a great successor. I'm just a little nervous that the first release isn't doing quite enough to add to the genre.
Overall, I think SC2 will be a great game and I can't wait to get my hands on a copy of it (or the beta! *nudge nudge wink wink*!).
Until then, I'll be toying around in Mount & Blade: Warband (report forthcoming) and a brief relapse into Warhammer Online: Age of Reckoning.
So, until then, cheers!
Starcraft 2: Beta & Video Commentators
Posted: April 05, 2010For both of you who haven't heard, Starcraft 2 is in closed beta! And if you found this blog, then I highly doubt that I need explain what Starcraft 2 is, but just to be certain I will. Starcraft 2: Wings of Liberty is the sequel (well, first part of a trilogy that constitutes the sequel) to Starcraft, a real-time strategy game developed by Blizzard Entertainment and released in 1998. The other two parts of the Starcraft 2 trilogy are the Heart of the Swarm and the Legacy of the Void.
In Starcraft (2), there are three species that the player can take into battle: the Protoss, the Zerg, and the Terran, each with different units, styles of play and mechanics. The Protoss are the high-tech aliens, with shields protecting their warriors. Their units tend to be expensive but powerful. The Zerg, collectively named the Swarm, are vicious insectoid aliens who favor melee combat (typically). The epitome of the Zerg units is the Zergling, a small, fast, and rather nasty unit that is cheap and quick to produce; they are rather fragile and cannot attack at range. The Terran are humans, with their armies being composed of marines, tanks, vehicles, and spacecraft/aircraft.
A bit ago, around February, the closed beta for Starcraft 2: Wings of Liberty started. Since then, I've been craving my daily dose of videos. The beta is just the online melee component of the game through Battle.net 2.0 (also in beta); there is no access to the single player game or the level editor. Still, these videos will have to hold me over until A.) I get into the beta, or B.) the game comes out.
There are quite a few videos available online for those of us who aren't fortunate enough to have beta access. My favorite three commentators are HuskyStarcraft [Protoss], HDStarcraft [Zerg], and PsyStarcraft [Zerg]. They each have their own styles of commentating, but all are enjoyable. Both HD and Husky commentate their own games as well as some of the more interesting high-level games. Husky and HD also have a number of games where they play against one another or on the same team in arranged 2v2. The HD/Husky dual commentaries are particularly fun to watch and listen to. Psy seems to be quite skilled (at or near the top of his Platinum division) and commentates his own games. I recommend checking them out and tossing these guys subscriptions (or even donations) for their hard work.
I also tend to head over to http://www.teamliquid.net/sc2/ and read the articles and view the streams. I intend on playing Zerg primarily, so I've been watching the players listed as Zerg. Because they are awesome. The spreading of creep through tumors looks like it would be fun to mess around with: "I will cover the entire map with creep, muhahaha!"
I've been watching SC2 videos just about everyday since they started showing up. By now I must've watched (or listened to) over a hundred. Over the weekend I'm going to write a more indepth summation of my impressions of the game and post it. Till then,
My Contributions
- Title
- Date
- 1UP Blog Discontinued.
- Starcraft 2: Beta Footage Impressions
- Starcraft 2: Beta & Video Commentators
- You Gotta Shoot 'em in the Head!
- Fallout 3: Adventures in the Capital Wasteland
- TERA: Preview at GDC 2010
- A Bit of Brief History (Starting up a new blog)


text:
Here are the highlights from the latest report on fitness industry trends. Always an interesting read …
Market research reveals top trends in personal training
IDEA Health & Fitness Association has published the results of the 17th IDEA Fitness Programs & Equipment Trends Report. The Web-based survey, which was completed by over 2,800 fitness professionals, summarizes what fitness equipment and programs are being incorporated the most or the least in studios and facilities around North America. IDEA used the results of the survey to conduct an independent analysis of the responses from personal trainers, revealing the top personal training trends that have emerged over the past 6 years.
The data indicated the strongest trend in personal training is the move to training with more than one person at a time in small groups. Personal training sessions that included 2 people sharing a trainer increased 10 percentage points, whereas 3-5-person sessions increased 18 percentage points. "IDEA believes this reflects a practical reaction of consumers to cut costs during the ongoing recession, as well as personal trainers preserving their business base by retaining clients at lower hourly fees through shared group costs. However, trainers are actually making more per hour by increasing the number of people they train during that hour. This single cause-effect trend has changed the face of personal training by ushering in the era of small-group training," said Kathie Davis, Executive Director of IDEA.
Other highlights from the research included:
• Over the past 3 years, body-weight leverage training (body-weight only, TRX Suspension Trainer, GTS (Gravity Training System), climbing ladders, ropes, push-up and pull-up devices, etc.) has experienced a steady increase (70% to 83%).
• Outdoor activities have declined over the past 6 years, with outdoor personal training sessions decreasing by 25 percentage points and outdoor group activities declining by 10 percentage points; however, outdoor boot camps have remained relatively stable.
• Exercise programs for chronic medical conditions such as diabetes or coronary heart disease have increased by 11 percentage points.
• Personal trainers have increased the amount of lifestyle coaching they are providing (37% to 50%).
• Nutrition assessment and nutritional coaching programs have increased by 6 percentage points and 12 percentage points, respectively, over the past 6 years.
• More personal trainers are programming mind-body sessions such as yoga, group reformer, tai chi, Pilates and Pilates and yoga/mind-body fusion.
• Very slow strength training programs have increased by 25 percentage points over the past 6 years (30% to 55%).
Detailed results from the 2013 Fitness Programs & Equipment Trends Report are available at
About IDEA Health & Fitness Association
IDEA Health & Fitness Association is the world's leading organization of fitness professionals. We deliver world-class content and continuing education through three channels: our seven publications, including the award-winning IDEA Fitness Journal; our world-class fitness conferences; and hundreds of streaming videos and DVD courses available on our website www.ideafit.com. Additionally, with IDEA FitnessConnect, we have created the largest national industry-wide directory linking over 250,000 fitness professionals to more than 16 million consumers.


text:
Le Creuset Bakeware:
This beautifully designed range of professional non-stick baking and roasting tins will provide a lifetime of unrivalled performance and delicious results. The durable, PFOA-free, non-stick coating offers outstanding food release and is easy to clean and the heavy-gauge carbon steel body spreads heat evenly and gently for the perfect bake.
Each tin in the Le Creuset Toughened Non-Stick Bakeware range is made from heavy-gauge carbon steel. This material is perfect for all types of baking as heat spreads gently and efficiently for an even bake without burning. It is also strong and rigid which means the tins retain their shape and will not bend or twist. The inside and outside of each tin has a durable, PFOA-free, non-stick coating for excellent release - food simply slides out with ease.
- Steel
- Non stick coating
- Dishwasher safe
- Oven safe
- Lifetime guarantee
- Length 34 cm
- Capacity 0 L
Buy & Collect - FREE (7 days a week)
Order before 10pm for collection instore from 12 noon the NEXT DAY or on a day of your choice
(For Belfast and Dundrum please allow up to 72hrs for delivery. Our City store is closed on Sunday.)
Standard - £3 (Monday to Friday)
FREE on orders of £50 or more. Delivery within 3 - 5 working days.
Next Day - £6 (Monday to Saturday)
Order before 7pm for delivery the NEXT DAY
(For Belfast and Dundrum please allow 48hrs for delivery. Our City and Cirencester stores are closed on Sunday.)
Next Evening - £6 (Monday to Sunday 6-10pm)
Selected postcodes only. Order before Midnight for delivery the following evening
Nominated Day - £6 (Monday to Saturday)
Same Day - £6 (Monday to Friday)
Selected postcodes only. Order by 12noon for delivery between 6-9pm.
Ireland - £3
FREE on orders of £50 or more*. Delivery within 3 - 5 working days.
Find out more about delivery and charges
We hope you will love your new things but if you don't, you are welcome to return your items free of charge. Here's how to do it:
To a Store
Bring your items and proof of purchase into store within 14 days from the day your parcel arrives, for a full refund via the original payment method. Or within 28 days, when you can either exchange your items or take a Gift Card to the value of your items.
By Post
Please send your return by post or courier within 14 days from the day your parcel arrives for a full refund via the original payment method. Or within 28 days, when we will refund you with an eVoucher to the value of your items.
Paypal Refunds
You will need to return your goods by post, if PayPal was your original payment method and you would like the refund back to your account. If you make your return to a store, we will only able to give you a House of Fraser gift card to the same value.


text:
Reload the page and try again.
Academics: Challenging but manageable. You will learn as much as you want to
Academics: Unbelievable School. So many opportunities and so much research being done. Honestly if you can afford this place, its worh your time.
Academics: one of the top rated for many years in the country for good reason
Academics: The academics are top notch. The only problem is some professors see teaching as a chore and would rather focus on their research
Academics: You can't go wrong with Duke. Challenging.
{{review.SectionLabel}} at {{review.EntityName}}:
Sorry, there are no reviews.
Written by Anonymous
Students at Duke seem to have found the academic experience pretty satisfying on the whole, thanks in large part to the teachers. This is not to say that everything about Duke academics is perfect; some of the math and science professors certainly sound like they could liven up a little, and some English and history professors can lose touch with modern reality and campus life. There is also the age-old problem of distinguished faculty who are there for the research facilities more than the students. However, researching professors can be a remarkable asset if they choose to keep students involved—which many do. Even lecture classes are not exclusively impersonal, weed-out programs; many lecturers are thrilled to get to know students after class or during open office hours and appreciate the time students put into getting extra help. Most large classes will also have smaller lab, recitation, or discussion groups with TAs to help clarify the information from the lecture.
All Duke professors are well educated and established in their field, and most do their best to relay their expertise in a simple yet challenging manner. Faculty members are excited about their fields and strive to pass that excitement onto their students. Students subsequently appreciate that professors are hands-on and that they regularly emphasize the practical, real-world applications of their subject matter. Duke's professors play a vital role in the quality and success of the University's academics.
Non-registered users are limited to 5 school profile page views per month.
Register for free to gain full access!


text:
Lehman Brothers sues to recover $2.5 billion from Citigroup
Four years after the infamous downfall of Lehman Brothers Holdings Inc., the former Wall Street giant is suing Citigroup Inc. for $2.5 billion
Antitrust case against Citigroup and Discover moves forward
Yesterday, a federal judge told Citigroup Inc. and Discover Financial Services they aren't off the hook as defendants in a decade-old nationwide antitrust lawsuit.
Mortgage and foreclosure costs reach $72 billion
The economic drain of faulty mortgages has yet to cease, even as the country's largest banks come closer to reaching a settlement in the 50-state review of foreclosures.
Citigroup-SEC settlement rejected
Pending appeal could affect business and regulators alike
Reviewing 5 of January's top stories
The Kodak saga, merger mania, the indictment of Megaupload and more
Rejected Citigroup settlement didn't need to be "in the public interest," SEC says
The Securities and Exchange Commission (SEC) took issue this past November with Manhattan District Judge Jed Rakoff's rejection of a $285 million settlement between the agency and Citigroup Inc. Yesterday, it again expressed its dissatisfaction with Judge Rakoff's decision.
Judge denies Citigroup's request to overturn $54 million ruling
A U.S. judge smacked down Citigroup on Wednesday, denying its request to overturn a ruling that will cost the company $54.1 million in damages and fees.
Reviewing 6 of November's top stories
Updates on InsideCounsel's biggest stories this month
Citigroup settlement with SEC rejected
A federal judge challenged a decades-old practice of the Securities and Exchange Commission (SEC) Monday, by rejecting a $285 million settlement between the SEC and Citigroup.
7 banks targeted over MF Global collapse
Ripples from the collapse of MF Global are reaching the courtroom, as investors begin the effort to recover their money. A pair of pension funds filed a lawsuit Friday against seven banks that helped the futures brokerage sell bonds, claiming the bonds' offering prospectuses hid significant problems.


text:
CWB Four.19 Wakeskate
Key Features
14 layer maple deck
Concave design
Designed by Stu Shinn
Waterproof grip tape
You May Also Like
back to top- GET MORE INFO
- details
- |
- accessories
- |
- reviews
- |
back to topProduct Description
The Four.19 Wakeskate is top-of-the-line. The 14 layer deck is carved from maple so that it is strong, stiff, and sturdy. Concave design and subtle 3-stage rocker provide more versatility than ever before. Waterproof grip tape top. Designed by Stu Shinn. Four.19 39.5: 39.5" x 15.2". Weighs 9.4 lbs. One size fits all.


text:
Ads by Google AdSense
Be the first to rate this station!
16 Tune InsRTRFM is a community radio station based in Perth, the capital city of Western Australia and we broadcast to most of the wider metropolitan area.
Playlist, tracklist, top songs played coming soon...
PC requires Windows Media Player - Mac additionally requires Real Player - See FAQs for more info on how to listen to live streaming radio.


text:
im delta, that is all you need to know
Mod Review on Oct 7th, 2013
The only thing that would make this mod better is if the Dark Angels were playable in the campaign
Mod Review on Aug 12th, 2013 - 3 people agree
Pretty awesome. Didn't disappoint me once I figured out how to correctly install. There were a few texture bugs, glitches and historical inaccuracies (Wilhelm II is a Kaiser not a Koenig for one)
Mod Review on Mar 8th, 2013 - 1 person agrees
this is an EXCELLENT mod.It has everything I like (Star Wars, Lord of the Rings) and some of the things I hate (ponies) and playing as something you love pitted against something you hate is an outstanding feeling. All of the models and textures are excellent, I rarely get a CTD or error and just the sheer amount of content is overwhelming.
Mod Review on Mar 7th, 2013
Amazing effects and wonderful models. It's a big step up compared to the reskinned Landwehr of previous versions. However this is still a beta and the elements of a missing campaign and artilery/tank models don't fully allow me to give this a 10/10. My review is subject to change when the full version is released, but for now this will keep me occupied for a couple weeks while waiting for TGW 5.0
Mod Review on Feb 23rd, 2013 - 5 people agree 1 person doesn't
when you have a geographically accurate map of Middle earth along with accurate city models, then i'll play. as of now this mod is ****
Mod Review on Dec 26th, 2012 - 1 person agrees 1 person doesn't
This mod is just so well thought out and COMPLETELY converts M&B to star wars. I had much difficulty trying to find traces of the vanilla game its just a well done mod. almost like a completely different game. they have definitely earned my tracking, i mean it looks like something I'd pay money for.


text: Former Westlife star Shane Filan was so broke at the height of his money troubles he couldn't afford to buy toys for his children. The Flying Without Wings hitmaker was declared bankrupt last year (12) after the property company he started with his brother Finbarr imploded following the global financial crisis in 2008. The star admits he didn't realise how dire his situation was until he went to an ATM machine and discovered he only had $627 (£405) in the bank. He later hit breaking point when he couldn't afford to buy his son Patrick a cheap toy. Speaking at the launch of his new single Everything To Me, Filan says, "I went to get money out and I had £405 (in the bank). I remember my son Patrick asking if I could buy him a Spider-Man toy and crying my eyes out because I couldn't. "I had no money, no job and no end in sight. We had enough to... put food on the table, but it was scary."


text:
Added to Bag!
We'll let you know if it's back in stock!
Added to Wishlist!
The Bright Way Skirt
Final Sale: This item cannot be returned or exchanged.
- 100% Polyester.
- Fabric does not provide stretch. Left side runs approximately 16 inches longer than right side. Length measurement taken from the right side.
- Hand wash cold. Do not bleach. Hang to dry.
- Unlined. Hidden side zipper with button closure.
- Made in the United States
Size | S | M | L |
Length | 17.5 | 18 | 18.5 |
All measurements in inches.


text:
The anti-iPhone 5 episode Video
The anti-iPhone 5 episode Video Transcript
Hey I'm -- -- -- and -- Emily -- and welcome it's rumor has -- the show where we round up the week's biggest tech rumors and -- how much sounds legit and what seems like it'll never happen since Apple products are dominating the news this week -- -- a little break and devote to other players in the tech world. And remember that you can vote on all of the rumors too so keep your eye out for the pull in interactive player if you're watching on -- We get to our new Apple -- -- let's take us -- movement to pour one out for our dearly departed friend iPhone 5 rumor. Five rumors you've been with us for two years through it -- through good times and bad through Siri and retina displays through metal chassis and no forgy and you kinda until we -- -- -- like members of our family you were always Mars we'll miss you buddy. Our first rumor is that the company that makes my -- a little old Smartphone HTC. The Taiwanese brand -- -- introduced two tablets according to each species -- -- com. The hundred slates would drop on September 19. And a seven inch model would be dubbed the flyer and a ten inch would be the evo view forgy. Any suspense HTC if that's RS that they can -- -- -- -- -- words of their line up the naming convention is getting old seriously. I'm gonna go in yea -- astronomer with an -- vendor of -- -- also go if I don't care with the addition of our second -- belongs in the category of good ideas that should've happened long ago. Crunches favorite sources -- Spotify is readying a browser based app will -- who are tech -- as favorites arsonists in invisible people. This is techcrunch cared about this -- So basically invisible Obama told techcrunch that Spotify is finally ready to make things easier for you and let you use the service about downloading the software. What's that techcrunch is anonymous source. You think I should vote today okay yet. -- -- Then -- product distributors which is a wholesale media distribution company posted on the Internet last week. -- Wii U bundles along with the November 11 state. The prices -- 249 dollars -- -- 99 dollars and 349 dollars and they -- with no other real specifics. But we -- was announced at 32011. But Nintendo left out all of the specifics including the release date and the price. Nintendo is holding an event on Thursday when all of these price and release states speculations will finally be put to rest let's hope that none of these prices are true and it actually knows something cheaper I think that this is the least anticipated new gaming -- of the century and it needs to be priced competitively in orders. See I think that 250 dollars is priced -- -- I think that offering these three bundles at those prices seems pretty competitive depending of course on what you -- for -- prices I would pay through an hour and 49 dollars -- -- console if it seemed cool enough and so far that we use seems T cool. What do you guys think voter poll a week left -- Francisco about the Wii U. There been some rumors that it's gonna be priced the bundles will start at 249 go up to 349. Is that -- to sell for you. Yeah I think that's very competitive for me because. -- -- like 400 dollars the Xbox 360s so Katrina 200 dollar to fifty dollar Wii in a tablet but to be pretty good how much did you pay. Move that's a tough one under 200 dollars pool to debate how much -- think it'll cost. Probably around 500. Things I'm -- but I'm not sure. Would you be willing to pay that -- Him a friend when though currently came out we had camp out overnight actually survived. -- -- And now I. Million dollars -- would you Byron at this price it 200 dollars. Think about it haven't you have Internet access then also they need bigger TV that -- time what was your fever and Nintendo game Mario frog. Mario sixty. War -- awkward time and Mario card is. -- is fun -- isn't so -- friends. And non gamers on the street had a lot of assault for old Nintendo let's go upstairs to -- council thinks about the Wii bundle. The CNET councils composed of five editors who cast their ballots anonymously their opinions -- not endorsement by CNET or CBS act obviously because these are rumors folks. And the CNET verdict in. Yeah me. Our editors think that those are the real prices for the Wii U although one of our editors thinks that needing to bundle will come with out the -- in no way. Our comment of the week comes from Tom Hanks and who writes. -- green is the new scheme Ryan Seacrest. -- Tom -- I'll take that as a compliment because I don't actually know you mean by that did you -- the Ryan Seacrest actually used to work at CNET of course. -- -- show everybody please share your rumors that rumor has it at cnet.com or call us at 1075. Us CNET and to us and number into an exe from march hackers think -- this week sponsored today where you could get some of your own both patents.
Related Videos
Crustaceans get fresh in a viral video; Staples lets you recycle old electronics; a science fair just for brainaics; a poor man's PowerPoint; and, is that flavored water coming out of your tap?
Google's new streaming radio service goes after Spotify and Pandora in this slick app for your phone, tablet, and PC.
BOL 1070: Windows 7 cuddle party
Microsoft shows "Pink" (sort of); MMS disaster, er, feature about to launch on iPhone; Wii gets a price cut; Archos' new Windows 7 tablet looks great--too bad nobody will notice; and MIT has a synthetic eyeball on the way that amazes us. Oh yeah...and about that cuddle party...
Ep. 1442: Netflix streams to the top, Xoom zooms to the bottom
Netflix reportedly will pay about $100 million to stream every episode of Mad Men: chump change, if predictions of an $800 million streaming TV market turn out to be true. Also, it seems that everyone wants to get in on the tablet market, but given reported XOOM sales of only about 100,000, it's possible the only tablet market there is is for iPads. Plus, AT&T iPhones and their dropped calls, and Obama goes to Facebook. -- Molly
Ep. 1436: Think before you Color!
We're thrilled about Amazon's new Cloud Drive and Cloud Player, but the record labels might not be -- so good for them for potentially forcing that anti-consumer claptrap out into the open. Also, we might complain a lot about our Internet issues, but at least we don't live in Canada. Plus, the Color hack you knew was coming, and our official advice: don't use it. Plus, can the hypnotizing baby blues of Jack Dorsey turn the Twitter ship around? We'll see. --Molly
Next iPhone: Taller, thinner, faster, stronger
Barnes & Noble may be prepping a new 7-inch Nook that has a "revolutionary screen." What does that even mean? Also, an iPhone rumor is born every minute, and Microsoft finally realizes that nobody wants to pay $1 million for Windows 8.
Today we listened in on Mark Zuckerberg's awesome announcement which we found to be not so awesome. Skype is being integrated into Facebook but I think we are more excited about Spotify finally coming to the U.S! Apple Passes RIM In U.S. Smartphone Market Share and Microsoft wants Samsung to pay a smartphone fee of about $15 for every phone it makes. Yikes! And Japan Discovers Rare Minerals in the Pacific Seabed. All this as well as your calls and emails on today's Buzz Out Loud.
Stream music from the cloud on iOS devices
Amazon's Cloud Drive and Cloud Player don't really do iOS users any favors. But if you want to stream music to your iPhone, iPad, or iPod Touch, SugarSync and Dropbox are much better alternatives.
BOL 1065: HP is full of stupid
The new DreamScreen tablet from HP looks like what everyone wants from Apple at first glance. Until we dig deeper and find out it may be what nobody wants. The music publishers also seem like they're full of stupid too wanting to get a performance right for you watching a TV show alone in your room. And Cooley and me get in a knock-down over Kurt Cobain's proper presentation in Guitar Hero.


text:
See how to make your own sriracha hot sauce.
Never be left without this addictive Asian-inspired hot sauce again. In this video, Chef John shows you how to make your own homemade sriracha sauce. It's easy! Sriracha is actually a simple combination of vinegar, hot red chile peppers, garlic, salt, and a little light brown sugar. The key here is to let it ferment briefly before processing it in a blender and reducing the sauce. See how it's done! It's also a tremendous and thoughtful food gift. Watch the video, then get the recipe for Chef John's Homemade Sriracha Sauce. Try this spicy, tangy condiment on all kinds of foods including fried eggs and Asian noodles. See more Chef John videos >>
Plays 76,998
Plays 1,523
Plays 4,920
Plays 13,437
Everything you need to party like a leprechaun.
New for spring! Good-for-you food you'll love to eat.
Delicious recipes, party ideas, and helpful cooking tips! Get a year of Allrecipes magazine for just $9.99!


text: This product belongs to: Polo Shirts Category: Golf Subcategory: Polo Shirts Gender: Male Size: Adult Collar: sewn Sleeves: short Pockets: no Ships In: 5 - 10 business days (pending credit, art, and proof approval) Material: 99% Cotton / 1% Polyester Imprint Area: 4.0 in. W X 2.5 in. H Decoration Method: Embroidery, Silkscreen Weight: 0.44lb. Unisex Sizes: S, M, L, XL, XXL, XXXL, XXXXL Comfortable and elegant is the main feature of this polo shirt - Sizes: S-4XL - Made of 6.1oz, 100% colorfast cotton - Features welt collar and open hem sleeves - Has double-needle sleeves and hem - With horn-tone, two-button placket - Great as company anniversary souvenir or use as employee recognition incentive Were you able to find what you were searching for? Zero Risk ShoppingLowest Price GuaranteeIf you find a lower price, we'll give you 36 mugs FREE with your order. 100% Satisfaction Guarantee If you're not happy with your order, it's FREE. On-time Shipment Guarantee If your order does not ship on time, it's FREE. Frequently Asked Questions about this ProductQ: What is your On-Time Shipment Guarantee all about? A: Our On-Time Shipment Guarantee states that your order will ship on the date we promised you or your order will be FREE. Enjoy ZERO-risk shopping every time! Q: What types of payment does Branders accept? A: Branders.com accepts the following methods of payment: all major credit cards, a Branders.com line of credit or cash in advance. Q: Why do minimum quantities differ from product to product? A: Minimum quantity requirements vary from manufacturer to manufacturer. In cases where a manufacturer's minimum order requirement exceeds your requested quantity, a Branders.com Specialist will assist you. Call us at 1-877-272-6337. Write in your question about this product: AVAILABLE COLORSCUSTOMER REVIEWS4 reviews Everyone really likes their shirts and now want the same in different colors. Very nice shirt, we will be ordering more in the future The product came out very nice and delivery was faster than expected. PEOPLE WHO VIEWED THIS ALSO VIEWEDMORE UPSCALELOWER PRICELOWER MINIMUMSFASTER TURN AROUND |


text:
Browse our mobile site for the best experience on your device.
Sioux City's #1 Hit Music Station
Listen to 1071 KISS FM Live
Follow @#!/1071KISSFM
Rob Powers (6am-10am)
Ryan Seacrest (10am-2pm)
JJ (2pm-6pm)
Billy the Kidd (6pm-10pm)
JoJo (10pm-2am)
Sisanie (2am-6am)
Boy Toy Jesse
Trey Morgan
DJ Sticky Boots
ROMEO (Saturday Nights)
Club Kane (Sunday Nights)
Todays Top Stories
Local Weather
KISS FM Photos
Music Videos
Most Recently Played
Most Played This Week
Join VIP for Free!
Edit Your Info
Current Contests
All Events
Community Events
Submit an Event
Listen on iheartradio
Join us on Facebook
Join us on Twitter
Events Calendar
Community Involvement
Community Events
Community Involvement
Submit an Event
Spotlight on Siouxland
Advertise with Us
Prize Pick Up
The Canadian Tenors
The Canadian Tenors
The Perfect Gift
Original Release Date: October 12, 2010
Track Listing
1. O Holy Night
2. Instrument of Peace
3. Silent Night
4. The Prayer
5. Wintersong
6. Huron Carol
7. The Perfect Gift
8. Ave Maria
9. God Rest Ye Merry Gentlemen
10. O Viens Emmanuel (O Come Emmanuel)
11. What Child Is This? (Carol of the Bells)
12. Hallelujah [*]
Adolphe Adam: Composer
Giulio Caccini: Composer
Leonard Cohen: Composer
John Beasley: Programming
Sarah McLachlan: Composer, Vocals, Vocal Arrangement
David Foster: Composer
Carole Bayer Sager: Composer
Franz Gruber: Composer
Bob Ezrin: Arranger, Keyboards, Rhythm, Producer, Orchestration, String Arrangements, Mixing
Humberto Gatica: Producer
Jack Lenz: Programming, Producer
Peter Moore: Mastering
Amy Sky: Composer
Randy Waldman: Piano
Jeff Wolpert: Percussion, Arranger, Conductor, Programming, Producer, Engineer, Mixing, Recording
Kevin Breit: Guitar
William Ross: Arranger, Orchestration
Tim Lauer: Keyboards
Tony Renis: Lyric Translation
Chris Brooke: Engineer
Joseph Mohr: Composer
John Sullivan Dwight: Composer
A. Testa: Lyric Translation
John Mason Neale: Lyricist
Mark Jordan: Composer
Asher Lenz: Guitar, Programming, Producer
Tony Zorzi: Guitar
Michael Jack: Engineer, Mixing
Yuri Sazonoff: Conductor, Orchestration
Greg Kolchinsky: Engineer
William Chatterton Dix: Composer
Susan Michalek: Art Direction, Design
Mark Masri: Arranger
Stephan Moccio: Piano, Composer, Keyboards, Programming, Producer
Canadian Children's Opera Chorus: Choir, Chorus
Justin Cortelyou: Engineer
Tommy Henriksen: Bass, Rhythm, Mixing
Moscow Studio Symphony Orchestra: Orchestra
Erica Chan: Photography
Remigio Pereira: Guitar (Electric), Liner Notes, Guitar (Nylon String)
Jean de Br�beuf: Composer
Christmas Traditional: Composer
The Canadian Tenors: Arranger, Producer, Orchestration, Vocal Arrangement, Vocal Ensemble
Ian Harper: Uillean Pipes
Tomer Adaddi: Orchestration, String Arrangements
Clifton Murray: Liner Notes
Jesse Edgar Middleton: Composer
Pat Killbride: Bass
Chris Potter: Engineer
John Maharaj: Bass
Alejandro Rodrigues: Engineer
Fraser Walters: Programming, Liner Notes
Victor Micallee: Liner Notes
Vic Florencio: Producer, Mixing
Theo Van Beusekom: Treble (Vocal)
Sven Heidinga: Engineer
Rudy Waldman: Piano
Patrick Huffman: Photography, Cover Photo
Mark Inneo: Percussion, Drums
Larry Nickel: Arranger, Vocal Arrangement
Grant McCauley: Engineer
Brendan Meadows: Photography


text:
19 Things Every Man Should Own
From a passport to the perfect watch, these are the essentials that every successful man needs on-hand.
more galleries
- 3 Green Juice RecipesBurn fat, boost energy, and speed recovery.
- Burn Fat and Keep It OffThe top 10 ways to fight fat forever.
- Fit Cities: Runners-UpHarnessing geography to promote healthy living.
- Fit and Fat FactsEye-opening stats behind our city rankings.


text:
Find a copy in the library
Finding libraries that hold this item...
Named Person: | Robert Forbes |
Document Type: | Book |
All Authors / Contributors: |
Robert Forbes; J B Craven |
OCLC Number: | 181662705 |
Description: | 1 v. |
Responsibility: | edited and compiled by J.B. Craven. |
User-contributed reviews
Add a review and share your thoughts with other readers.
Be the first.
Add a review and share your thoughts with other readers.
Be the first.
Add tags for "Journals of the episcopal visitations of the Right Rev. Robert Forbes, M.A. of the Dioceses of Ross and Caithness, and of the Dioceses of Ross and Argyll, 1762 & 1770 : with a history of the Episcopal Church in the Diocese of Ross, chiefly during the 18th century : and a memoir of Bishop R. Forbes".
Be the first.


text:
With the NHL Stanley Cup Playoffs starting tonight, we have a whole host of NHL-centric press releases for you. I'll begin with CBC's efforts on TV, radio and online for the two month odyssey that starts April 11 and ends sometime in June. Not only that, CBC will also utilize social networking sites like Pinterest, Facebook and Twitter to brings fans closer to the action.
Fans can also go to SiriusXM Radio where they can talk NHL on Hockey Night in Canada Radio with host Gord Stellick for the duration of the playoffs. Gord will have various guests and CBC analysts for extended chats.
Check it all out below.
(April 10, 2012) The 2012 Stanley Cup Playoffs are here and CBC'S HOCKEY NIGHT IN CANADA is ramping up the excitement –carrying it nationally and punctuated by exclusive coverage of the Canadian teams and the 2012 Stanley Cup Final.
CBC's Hockey Night in Canada keeps fans connected to the action and insights of the playoffs no matter where they are through innovative social media applications. Hockey Night Playoff Pulse, the ultimate "second screen" experience features in-game pools, polls and plays. Whether fans are at home, work or out on the town, the Hockey Night Playoff Pulse keeps them connected with updated live pool leader boards showing top scores and rankings and daily playoff poll questions designed to keep the conversation going. In addition, a Microsoft-sponsored near-live three minute highlight package from each game will be available online and on mobile devices including tablets with game recaps going to Xbox.
Fans not already watching a live game stream on their iPhone or iPad can gain access to near-live highlights as they happen simply by downloading/updating the Hockey Night in Canada app. Watch highlights of every goal scored in the 2012 Stanley Cup Playoffs minutes after they happen.
"As a dedicated partner of the NHL we are proud of CBC's Hockey Night in Canada's long standing tradition of providing Canadians with the most comprehensive Stanley Cup coverage available," said Julie Bristow, CBC's Executive Director of Studio and Unscripted Programming. "We are focused on continuing to elevate and innovate the way hockey fans everywhere view and participate in the playoff experience across all mediums."
New in 2012, CBC's HOCKEY NIGHT IN CANADA highlights the fun, social and lighter side of the 2012 Stanley Cup Playoffs through Pinterest (http://pinterest.com/hockeynight/). Fans are encouraged to pin their favourite playoff party dishes and recipes, locations to watch games with friends, celebrity sightings or even best playoff outfits and painted faces.
In addition, fans can engage with CBC Sports and other Playoff loving fans through Facebook and Twitter by "liking" CBC Sports at facebook.com/cbcsports and following CBC'S HOCKEY NIGHT IN CANADA Twitter feed (@hockeynight) to get all the breaking news as it happens throughout the playoffs – hashtag #HNIC. Fans are also encouraged to link their playoff parties to those going on across the country by sharing photos and Tweets, with the best ones being shared through the @hockeynight account and other CBC'S HOCKEY NIGHT IN CANADA channels.
"CBC's Hockey Night in Canada continues to offer everyone from the most passionate hockey fans to casual viewers numerous different ways to engage with the Stanley Cup Playoffs," said John Collins, NHL Chief Operating Officer.
In addition to the new social media tools connecting fanatic and casual hockey fans to the playoff experience, CBC's Hockey Night in Canada, via http://cbc.ca/hockeynightincanada, provides full access game and broadcast schedules, expert analysis and blogs and all the traditional show content enjoyed throughout the years.
From Coach's Corner and Hotstove to the pregame Hockey Night in Canada Online from the I-Desk and postgame Daily Wrap, CBC's Hockey Night in Canada has fans covered with the news and insights they need when and where they need it. All shows are also available as podcasts from the iTunes Store.
In addition to television and online coverage, Hockey Night in Canada Radio on SiriusXM with host Gord Stellick offers comprehensive coverage of the 2012 Stanley Cup Playoffs on SiriusXM Satellite Radio's Channel 157 airing Monday through Friday from 3-7 p.m. ET throughout the playoffs. Hockey Night in Canada Radio on SiriusXM podcasts are also available for download from the iTunes Store.
Looking ahead, fans can help celebrate CBC's HOCKEY NIGHT IN CANADA legacy by selecting their top moments of all time (http://ithappenedonhockeynight.cbc.ca). Viewers can go online to submit their Top 10 moments, share their list via Facebook and Twitter and compare it against those of several celebrities. Between the second and third rounds of the playoffs, CBC'S HOCKEY NIGHT IN CANADA will present It Happened on Hockey Night – a 30 minute interactive television special counting down the best moments as seen on CBC'S HOCKEY NIGHT IN CANADA over the past 60 years.
The 2012 Stanley Cup Playoffs go mobile and CBC's Hockey Night in Canada has you covered and keeps you connected.
More NHL-related press releases are coming up.


text:
10) Don't put business before fun and camaraderie — The faster you talk about business, the quicker you might be tuned out. Let your prospect or playing partner address business first.
9) Don't just show up — Plan ahead if you're entertaining people on the course. Make sure that the pro shop has the right sleeve of balls for the handicap of the player; for example, good players don't play Pinnacles, but new players do. And make sure that the names are marked clearly on the carts. Know something about the players you're going to host, such as their handicaps, and give some thought to who is playing with whom.
8) Don't play for money — If you and your partners discover that you are capable of structuring a "game" after three or four holes and want to play for a dollar, fine. But never mention it before the round, and suggest the above if someone else does.
7) Don't coach others — You're not a pro, and you might make things worse. Instead, be a cheerleader. Encourage the good shots, laugh a little more, and be a friend. Courtesy and respect always win.
6) Don't be demanding — Try to make the three-footers, let the guest say "that's good." Don't take a mulligan on the first tee unless your guest does first. In fact, let your guest hit first so you have an example. Remember, you reveal your character by your requests.
5) Don't come unprepared — Golf is all about fun, but be prepared if your client wants to do business as well. If you're looking to get a signed contract, for example, have one stashed in your bag. It's perfectly legitimate, if your client says during the round that he wants to do business with you, for you to hand him the contract when you ask him to sign the scorecard.
4) Don't be a bad sport — If you're missing shots, grin and bear it. Anger and frustration don't translate well to business partnerships, and pouting and self-centeredness really are a turnoff. Remember, golf is a game.
3) Don't be ignorant about etiquette — Learn the basic rules of golf, and make sure that your staff members have rule books as well. Respect for the rules shows respect for the situation (in business, too).
2) Don't go out without warming up — That only shows that you don't prepare well. Warming up also means hitting a few balls at the range a few times before the golf date.
AND the No.1 DON'T in business golf is …
DON'T CHEAT! — If you cheat on scores or kick the ball out of the woods, you're kicking the business out the door.
Richard Brasser is the owner of Targeted Golf, Charlotte, N.C. (www.targetedgolf.com). His program, FORE! Golf, has been used by companies to introduce employees to the nuances of business golf. Parker Smith (firstname.lastname@example.com) is a former senior editor of GOLF magazine and produces major media golf events. He is also based in Charlotte.
IKEA's Big Thank You — Excellence Day in Seattle
The Letter Game — Meeting industry certifications
The Lowdown on Fams Incentives & Taxes: Your 5 Most Important Questions Answered
Rewards & Recognition Fieldbook — An excerpt from columnist Bob Nelson/s new book
PLUS: A special 16-page Technology Section!


text:
A vacation to Missouri offers visitors the chance to explore the United States' tallest national monument, the Gateway Arch; to sample some of the best food (particularly barbecue) in the country; to walk in the footsteps of world-famous figures, including Mark Twain and Walt Disney; to see countless museums and sites where history was made; to be entertained by some of the best performers in the world; and to experience unique and beautiful outdoor settings found nowhere else.
Missouri Highlights
Don't leave without tasting...
Missouri is best known for its barbecue, and one of the premier locations to chow down is Arthur Bryant's Barbecue, near downtown Kansas City.
Where locals go to relax
Missourians love floating or canoeing down the crystal-clear rivers or streams on 'float trips'. There are dozens to consider, but a good place to start is the Ozark National Scenic Riverways, which includes the Current and Jacks Fork rivers.
Breathtaking scenery
A spectacular view of the Missouri River Valley perfectly complements a bottle of wine from OakGlenn Vineyards and Winery in Hermann. The landscape stretches for miles, offering a relaxing look at nature's beauty and a reminder why this region of Missouri struck a chord with its German ancestors.
Top photo opportunities
- Take a tram ride to the top of the 630-foot Gateway Arch in St. Louis
- World's Largest Rocking Chair, Cuba
- The red paint against the beautiful natural surroundings is striking at Alley Mill in Eminence
- Be sure to see the Thomas Hart Benton mural on the third floor of the Missouri Capitol in Jefferson City.
Must-see museum
National World War I Museum at Liberty Memorial, Kansas City: it's the only American museum dedicated solely to preserving the history of World War I.
If you want to fit in...
Don't tell anyone you're from Kansas.
Don't overlook this...
The Negro Leagues Baseball Museum in Kansas City offers an important history lesson about baseball before the Major Leagues were integrated, and showcases the rise and decline of the Negro Leagues. Learn about legendary baseball talents, including Satchel Paige, Buck O'Neal, Cool Papa Bell and Josh Gibson.
Famous people from our state
- Writer Mark Twain's childhood home town, Hannibal, features the Mark Twain Boyhood Home and Museum, as well as homes connected to people depicted in his famous works
- The Harry S. Truman Library and Museum in Independence offers theatres, personal possessions, gifts from heads of states, dozens of interactive and hands-on exhibits, a replica of President Truman's Oval Office and Truman's grave
- In St. Joseph, Jesse James met his end at the hands of fellow gang member Robert Ford. A wall inside the Jesse James Home has a bullet hole from the fatal shot; among the displays are items from a 1995 exhumation of James' body
- The Walt Disney Hometown Museum, in Marceline, features more than 3,000 pieces of rare memorabilia
- Also from Missouri: scientist and educator George Washington Carver; Scott Joplin, the King of Ragtime; artist Thomas Hart Benton.
History happened here
- The Old Courthouse in St. Louis was the site of the Dred Scott Freedom Trials, said to have hastened the start of the American Civil War
- The Battle of Wilson's Creek in 1861 was the second major battle of the Civil War. More than 2,500 Union and Confederate soldiers were killed, wounded or went missing during the five hours of intense fighting
- From the Pikes Peak Stables in St. Joseph (now home to the Pony Express Museum), the first Pony Express rider began his journey—carrying mail and news from the eastern U.S.—towards California on April 3, 1860.
Outdoor excitement
The longest rails-to-trails conversion in the country is at Katy Trail State Park, where a former railway line offers more than 225 miles of flat trail for running, walking, biking and hiking. Along the route are scenic views of the Missouri River and river valley.


text:
Mesquite >
Lodging > Spanish Trails InnMon. - Sun. 24 Hours
Spanish Trails Inn is a nice resting place – You get what you pay for. We stayed there because we could no longer drive home from a long day of traveling. The hotel was really not that bad the rooms where is good shape and the service is fine.
Sign in with Facebook Sign in with Facebook to see what your friends are up to!
Do you have a review of Spanish Trails Inn on your blog? If you include the Citysearch image link (shown below) in your post, we'll automatically link to your review from the business profile page. Here's how our Linkback system works:
The Linkback system is free and automatic. It's really that easy.
To link to our business profile page, copy the html below to your web page.


text:
There was a problem sending you an sms. Check your phone number or try again later.
To get Scribd mobile enter your number and we'll send you a link to the Scribd app for iPhone & Android.
We've sent a link to the Scribd app. If you didn't receive it, try again.
We'll never share your phone number.
cualculos segun NTP
Curso para aprender los principios basicos de la electricidad del automovil.
Resumen introductorio a los motores eléctricos.
Sorry, we are unable to log you in via Facebook at this time. Please try again later.
Now bringing you back...
Please enter your email address below to reset your password. We will send you an email with instructions on how to continue.
You need to provide a login for this account as well.
Does that email address look wrong? Try again with a different email.


text:
Quick View Wizard Of Oz Collector's Edition Monopoly by USAopoly In Stock $25.00 Join Dorothy, The Tin Man, Cowardly Lion and Scarecrow and Toto as you travel to the Land of Oz in MONOPOLY®: The Wizard of Oz 75th Anniversary Edition. Now you can not only travel the Monopoly game board buying, selling and trading Munchkinland, Emerald City and more, but you can traverse INTO… See Details $25.00 was $49.95
Quick View GAME OF LIFE by Milton Bradley Out of stock $29.95 A family classic for over 30 years.Spin the wheel of fate to become a millionaire or just a poorcountry philsopher!Do good deeds to earn Life Tiles and more money down the road! See Details $29.95 was
Quick View Angry Birds Star Wars Jenga Death Star by Angry Birds In Stock $29.95 Score the most points by unleashing the birds to destroy the Death Star and take down Lord Vader. Roll the dice to find out which birds to launch and how many times. Score 1000 points for each Strom trooper pig, 3000 points if you take out Lard Vador, 5000 points See Details $29.95 was
Quick View Thomas and Friends Wooden Railway - Ascending… by Thomas & Friends Wooden Railway In Stock $27.95 Bring your layout to new heights with the Thomas and Friends Wooden Railway Ascending Track Pack! Includes 2 Ascending Track and 4 Risers. Add to any Thomas and Friends Wooden Railway play sets to expand play! See Details $27.95 was
Quick View Mexican Train Domino Game in an Aluminum Carrying… In Stock $29.95 Mexican Train Dominoes is a modern and very popular version of dominoes, played with 91 double-twelve dominoes. A unique feature of Mexican Train is the little train pieces used for game markers. Keep your train moving and be the first to finish playing. This Double Twelve Mexican Train set is… See Details $29.95 was
Quick View 5 Second Rule In Stock $29.95 It should be easy to name 3 breeds of dogs - but can you do it under the pressure of 5 seconds twisting down, and with the other players staring at you, waiting for you to get flustered? See Details $29.95 was
Quick View Teenage Mutant Ninja Turtles Clash Alley Board… by Teenage Mutant Ninja Turtles In Stock $29.95 Beat the bad guys in this action-packed 3D strategy board game! Run, climb, and leap as you race through the 3D warehouse on important missions to rescue April, recover objects—and even pick up a pizza! On the way, your Turtle must battle mutants, Kraang, and Shredder. For 2- 4 players. Ages 6+. See Details $29.95 was
Quick View The Lord of the Rings Board Game In Stock $29.95 Experience the epic journey as you join the quest to save Middle-earth from the forces of evil. This action-packed game based on The Lord of the Rings Trilogy includes awe-inspiring images and characters taken directly from the three award-winning films. For 2 to 10 players, ages 8 and up.… See Details $29.95 was
Quick View Bop It Tetris by Hasbro In Stock $29.95 Get your Bop It! on with a Tetris twist! This electronic game unit challenges you to complete puzzles, but you have to slide, spin or slam to get the shapes to fall where you want them to. Can you turn the screen at the right time to line up a shape with an open space? Can you press the slam… See Details $29.95 was
Quick View Teenage Mutant Ninja Turtles Flying Attack Game by Teenage Mutant Ninja Turtles In Stock $29.95 Send the Turtles flying to knock off Shredder's Foot Clan as they climb the big, teetering tower, or play as Shredder racing to get your ninjas to the top to win! Flipping, flying action-packed fun in a teetering tower game! For 2-5 players. Ages 6+. See Details $29.95 was
Quick View Mountain Boy Sledworks Butterfly Wagon/Sled Pad In Stock $29.95 This 3/4" thick sled pad with water-resistant nylon cover fits the Mountain Boy Butterfly Wagon/Sled. Two seams allow the pad to go up the ends of the wagon, so your child can sit comfortably. Attaches to wagon with nylon ties. Reversible for red or green. See Details $29.95 was
Quick View Space Invaders Jenga by USAopoly In Stock $29.95 Battle aliens and keep the galaxy safe! Two ways to play! Play traditional Jenga and be the last player to remove a block without the tower falling and win the game. Or play Jenga with a Space Invaders twist. The Jenga Tower transforms itself into the Space Invaders video screen. Spin the spinner… See Details $29.95 was