text:
sleeping better (not every night but most)
sudden onset of snits- including a big bottom lip (is that biological or what?!?!) and throwing oneself to the ground
at least 11 teeth
still little on the "charts" <5th -75th="" circumference="" for="" head="" p="" weight="">because he's so little it means he gets to wear all his cute little clothes for much longer!
hugging Mum lots
signing for a number of things but mostly using that "eah" sound
loves his baths- started "swimming" in the tub
Oh, and climbing. lots and lots of climbing- always wanting to be bigger!!!
|at Nasja's birthday party


text:
Centralized authentication using OpenLDAP
This guide introduces the basics of LDAP and shows you how to setup OpenLDAP for authentication purposes between a group of computers.
- 1 Getting started with OpenLDAP
- 2 OpenLDAP server setup
- 2.1 Common notes
- 2.2 Legacy configuration (flat config slapd.conf)
- 2.3 Migration from slapd.conf to OLC
- 2.4 Initial setup with OLC
- 2.5 Maintaining the directory
- 2.6 Server management with OLC
- 2.7 OpenLDAP logging
- 2.8 Access management (ACLs)
- 2.9 Replication
- 3 Configuring the OpenLDAP client tools
- 4 Client configuration for centralized authentication
- 5 Convert file userbase to LDAP
- 6 Acknowledgements
Getting started with OpenLDAP
What is LDAP?
LDAP stands for Lightweight Directory Access Protocol. Based on X.500 it encompasses most of its primary functions, but lacks the more esoteric functions that X.500 has. Now what is this X.500 and why is there an LDAP?
X.500 is a model for Directory Services in the OSI concept. It contains namespace definitions and the protocols for querying and updating the directory. However, X.500 has been found to be overkill in many situations. Enter LDAP. Like X.500 it provides a data/namespace model for the directory and a protocol. However, LDAP is designed to run directly over the TCP/IP stack. See LDAP as a slim-down version of X.500.
I don't get it. What is a directory?
A directory is a specialized database designed for frequent queries but infrequent updates. Unlike general databases they don't contain transaction support or roll-back functionality. Directories are easily replicated to increase availability and reliability. When directories are replicated, temporary inconsistencies are allowed as long as they get synchronised eventually.
How is information structured?
All information inside a directory is structured hierarchically. Even more, if you want to enter data inside a directory, the directory must know how to store this data inside a tree. Lets take a look at a fictional company and an Internet-like tree:
dc: org | dc: genfic ## (Organisation) / \ ou: People servers ## (Organisational Units) / \ .. uid: .. John ## (OU-specific data)
Since you don't feed data to the database in this ascii-art like manner, every node of such a tree must be defined. To name such nodes, LDAP uses a naming scheme. Most LDAP distributions (including OpenLDAP) already contain quite a number of predefined (and general approved) schemas, such as the inetOrgPerson, or a frequently used schema to define users which Unix/Linux boxes can use, called posixAccount. Note there are GUI web based tools to make managing LDAP painless: see Working with OpenLDAP for an non-exhaustive list.
Interested users are encouraged to read the OpenLDAP Admin Guide.
So... what can it be used for?
LDAP can be used for various things. This document focuses on centralised user management, keeping all user accounts in a single LDAP location (which doesn't mean that it's housed on a single server, LDAP supports high availability and redundancy), yet other goals can be achieved using LDAP as well.
- Public Key Infrastructure
- Shared Calendar
- Shared Addressbook
- Storage for DHCP, DNS, ...
- System Class Configuration Directives (keeping track of several server configurations)
- Centralised Authentication (PosixAccount)
- ...
OpenLDAP server setup
Common notes
The domain genfic.org is an example in this guide. You will of course want to change this. However, make sure that the top node is an official top level domain (net, com, cc, be, ...).
Let's first emerge OpenLDAP. Ensure the USE flags berkdb, crypt, gnutls, ipv6, sasl, ssl, syslog, -minimal and tcpd are used.
root #
emerge --ask openldap
OpenLDAP supports two authentication mechanisms:
- standard user-password (in LDAP terms user means binddn) named SIMPLE
- proxying authentication requests to SASL (Simple Authentication and Security Layer)
Although the OpenLDAP default is to use SASL, the initial version of this article used only password-based authentication. With the OLC add-on the article starts to describe the use of the simplest SASL mechanism called EXTERNAL, which relies on the system authentication.
OpenLDAP has a main user called "rootdn" (Root Distinguished Name), which is hardcoded in the application. Unlike the classic Unix root user, the rootdn user still needs to be assigned with proper permissions. The rootdn user may be used only in the context of the configuration, but it can also be used in the directory definition. In that case a user can authenticate himself as rootdn with either the configuration used password and the tree (directory-based) password.
User passwords (regardless if it is for rootdn users or others) for verification purposes can be stored as cleartext or hashed. Multiple different hash algorithms are available, but usage of weak algorythms (up to MD5) is not recommended. SHA is currently considered sufficiently cryptographically secure.
In the below command, a hashed value is created for a given password; the result of this command can be used in the slapd.conf configuration file, or in the internal directory definition of a user:
root #
New password: my-password Re-enter new password: my-password {SSHA}EzP6I82DZRnW+ou6lyiXHGxSpSOw2XO4
Legacy configuration (flat config slapd.conf)
Now edit the LDAP Server configuration in /etc/openldap/slapd.conf. The provided slapd.conf is from the original OpenLDAP source. Below is a sample configuration file one can use to replace it with to get things started.
include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/misc.schema pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args ## ## ServerID used in case of replication serverID 0 loglevel 0 ## ## Certificate/SSL Section TLSCipherSuite normal TLSCACertificateFile /etc/openldap/ssl/ldap.crt TLSCertificateFile /etc/openldap/ssl/ldap.pem TLSCertificateKeyFile /etc/openldap/ssl/ldap.key TLSVerifyClient never ## ## Access Controls access to dn.base="" by * read access to dn.base="cn=Subschema" by * read access to * by self write by users read by anonymous read ## ## Database definition database mdb suffix "dc=genfic,dc=org" checkpoint 32 30 maxsize 10485760 #Note: It is important to set this to as large a value as possible, #(relative to anticipated growth of the actual data over time) #since growing the size later may not be practical when the system is under heavy load. rootdn "cn=Manager,dc=genfic,dc=org" ## ## rootpwd generated earlier via slappasswd command rootpw "{SSHA}EzP6I82DZRnW+ou6lyiXHGxSpSOw2XO4" directory "/var/lib/openldap-data" index objectClass eq ## ## Synchronisation (pull from other LDAP server) syncrepl rid=000 provider=ldap://ldap2.genfic.org type=refreshAndPersist retry="5 5 300 +" searchbase="dc=genfic,dc=org" attrs="*,+" bindmethod="simple" binddn="cn=ldapreader,dc=genfic,dc=org" credentials="ldapsyncpass" index entryCSN eq index entryUUID eq mirrormode TRUE overlay syncprov syncprov-checkpoint 100 10
For a more detailed analysis of the configuration file, we suggest that you work through the OpenLDAP Administrator's Guide, although man 5 slapd.conf may be enough.
If it does not start, the first thing you must do is to check the config file. You can do it with the following command.
user $
slaptest -v -d 1 -f /etc/openldap/slapd.conf
Vary the debug level (the "-d 1" above) for more info. If all goes well you will see config file testing succeeded.
If there's an error,
slaptest will list the line number to which it applies (of the slapd.conf file).
By default slapd writes the log events to the local4 syslog facility.
Note that since version 2.4.23, OpenLDAP default finally moved from traditional flat config files (
slapd.conf) to OLC (OnLineConfiguration, also known through its
cn=config structure) as default configuration method. One of benefits of using OLC is that the dynamic backend (
cn=config) doesn't require restart of server after updating the configuration. Existing users can migrate to the new configuration method by invoking
slaptest setting both -f and -F options. Traditionally OLC is stored in ldif backend (which keep benefits of human-readability) in the
/etc/openldap/slapd.d directory. In Gentoo it is not required to convert the configuration yet, but support for the currently documented approach will be removed in the future.
Migration from slapd.conf to OLC
If you want to be able to change OpenLDAP server's configuration, you must define at least
write (or normally
manage) access to
The example below shows how to grant manage access on OLC (cn=config database) to the system administrator (root user) by adding the proper lines at the end of the slapd.conf file:
database config access to * by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage by * none
Then, we invoke the slaptest utility with the
-f and
-F options to convert the slapd.conf file into a configuration directory (slapd.d).
root #
mkdir /etc/openldap/slapd.d
root #
slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d
root #
chown -R ldap /etc/openldap/slapd.d
Running this command will transfer and translate the configuration. After that you are expected to update the configuration using specially prepared ldif files. And only if you aren't enough familiar with them, you can first edit slapd.conf and after that re-translate the slapd.conf into slapd.d/. Don't forget to check the directory's permissions.
For more instructions read the in-line comments of the generated files.
The below line will enable the slapd.d/ configuration method.
OPTS="-F /etc/openldap/slapd.d -h 'ldaps:// ldap:// ldapi://%2fvar%2frun%2fopenldap%2fslapd.sock'"
Finally, create the /var/lib/openldap-data structure:
root #
mkdir -p /var/lib/openldap-data
root #
chown -R ldap:ldap /var/lib/openldap-data
root #
chmod -R 0700 /var/lib/openldap-data
Initial setup with OLC
An initial configuration is shipped as a standard LDAP database dump, available as slapd.ldif or config.ldif.
It can be loaded (and only loaded, unlike ordinary LDAP databases) by the
slapadd utility:
root #
slapadd -d -1 -F /etc/openldap/slapd.d -n 0 -l /etc/openldap/config.ldif
The default configuration does not provide permissions to change the server's configuration to anybody.
If you need the right to change the configuration database, you must provide the proper permissions. The next example shows how these privileges are granted to the root system user:
# {0}config, config dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage by * none olcAddContentAcl: TRUE olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootDN: cn=config olcSyncUseSubentry: FALSE olcMonitoring: FALSE
See man 5 slapd-config for more details.
When using OLC, never manually edit the configuration files. The directory files can be used to check the consistency of the configuration through:
root #
slaptest -v -d 1 -F /etc/openldap/slapd.d
Maintaining the directory
slapd now that the configuration steps have been completed:
root #
service slapd start
Most users will also want the OpenLDAP daemon to start automatically:
root #
rc-update add slapd
It is now possible to use the directory server to authenticate users in apache/proftpd/qmail/samba.
The directory server can be managed with tools such as net-nds/phpldapadmin, app-admin/diradm and net-nds/jxplorer from the Gentoo ebuild repository, or app-misc/ldapexplorertool from the poly-c overlay available through Layman.
Server management with OLC
One of the benefits of using OLC-style configuration is that you don't need to restart the LDAP server to apply configuration changes.
Some examples of updates on the OLC-style configuration are mentioned below.
For instance, to change the location of the OLC configuration directory (needed after switching from a config file to config directory style):
dn: cn=config changetype: modify delete: olcConfigFile dn: cn=config changetype: modify replace: olcConfigDir olcConfigDir: /etc/openldap/slapd.d
To change the log level used by the OpenLDAP instance:
dn: cn=config changetype: modify replace: olcLogLevel olcLogLevel: stats stats2 sync
To add the syncprov overlay:
# Add indexes for replica to the frontend db. dn: olcDatabase={1}mdb,cn=config changetype: modify add: olcDbIndex olcDbIndex: entryCSN eq - add: olcDbIndex olcDbIndex: entryUUID eq # Load the syncprov module. # Skip if included statically, see slapd -VVV output for details dn: cn=module{0},cn=config changetype: modify add: olcModuleLoad olcModuleLoad: syncprov # syncrepl Provider for primary db dn: olcOverlay=syncprov,olcDatabase={1}mdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov olcSpNoPresent: TRUE olcSpCheckpoint: 100 10 olcSpSessionlog: 100
In order to apply the changes, run the following command:
root #
ldapmodify -Y EXTERNAL -H ldapi:/// -f loglevel.ldif
SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "cn=config"
On restart, the init script performs a check of the updated configuration. The ldapmodify command used above blocks only fatal errors. To get info about non-fatal errors using OLC:
root #
slaptest -F /etc/openldap/slapd.d
58b7d4c2 olcThreads: value #0: warning, threads=64 larger than twice the default (2*16=32); YMMV. config file testing succeeded
OpenLDAP logging
OpenLDAP produces numerous log events, which might not be obvious to interpret, but are necessary for debugging purposes.
As OpenLDAP by default writes the log events into the system log, it is advisable to reconfigure the system logger to direct OpenLDAP log events into a dedicated log file.
It is advisable to use the
stats stats2 log level in OpenLDAP, which results in session-related information such as the following:
root #
grep conn=1 /var/log/slapd.log
Mar 9 12:26:47 ldap1 slapd[95182]: conn=1 fd=14 ACCEPT from IP=192.168.100.9:55655 (IP=192.168.1.1:389) Mar 9 12:26:47 ldap1 slapd[95182]: conn=1 op=0 BIND dn="" method=128 Mar 9 12:26:47 ldap1 slapd[95182]: conn=1 op=0 RESULT tag=97 err=0 text= Mar 9 12:26:47 ldap1 slapd[95182]: conn=1 op=1 SRCH base="ou=People,dc=genfic,dc=org" scope=1 deref=0 filter="(&(objectClass=posixAccount)(uidNumber=1001))" Mar 9 12:26:47 ldap1 slapd[95182]: conn=1 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass shadowLastChange shadowMax shadowExpire Mar 9 12:26:47 ldap1 slapd[95182]: conn=1 op=1 ENTRY dn="uid=larry,ou=People,dc=genfic,dc=org" Mar 9 12:26:47 ldap1 slapd[95182]: conn=1 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Access management (ACLs)
The authorizations and access control mechanism used in OpenLDAP is described in the slapd.access manual page. Its base syntax is as follows:
access to <what> [ by <who> [ <access> ] [ <control> ] ]+
The following table shows the access levels available in OpenLDAP:
|Access level
|no access
|needed for information disclosure on error
|needed to authenticate (bind)
|needed to compare
|needed to apply search filters
|needed to read search results
|needed to modify/rename
|needed to manage
For details about the exact privilege settings, see the manual pages and official OpenLDAP documentation.
Remember that the rootdn user can read and write everything.
Config file
ACLs are parsed in the order they are set in the configuration, and are applied based on the specificity (meaning that, when an ACL rule is considered, the remainder of ACL rules is no longer checked). As such, more specific definitions should go first, before more generic ones are listed. For more information, see Access Control Evaluation.
For example:
… access to attrs=userPassword by dn="cn=ldapreader,dc=genfic,dc=org" read by self read by anonymous auth by * none access to dn.base="cn=Subschema" by users read access to dn.base="" by * read …
Config directory
ACLs are parsed in the order they are set in the configuration, and are applied based on the specificity (meaning that, when an ACL rule is considered, the remainder of ACL rules is no longer checked). As such, more specific definitions should go first, before more generic ones are listed. This order, when using OLC, is handled through the
olcAccess directives.
For example:
dn: olcDatabase={-1}frontend,cn=config changetype: modify add: olcAccess olcAccess: {0}to dn.base="cn=subschema" by users read olcAccess: {1}to dn.base="" by * read
The following example inserts a new ACL on top, making the existing
olcAccess entries to shift by one:
dn: olcDatabase={-1}frontend,cn=config changetype: modify add: olcAccess olcAccess: {0}to attrs=userPassword by dn="cn=ldapreader,dc=genfic,dc=org" read by self read by anonymous auth by * none
To delete an ACL:
dn: olcDatabase={-1}frontend,cn=config changetype: modify delete: olcAccess olcAccess: {1}
High availability
A common high availability setup with OpenLDAP is to use replication of changes across multiple LDAP systems.
Replication within OpenLDAP is, in this guide, set up using a specific replication account (
ldapreader ) which has read rights on the primary LDAP server and which pulls in changes from the primary LDAP server to the secondary.
This setup is then mirrored, allowing the secondary LDAP server to act as a primary. Thanks to OpenLDAP's internal structure, changes are not re-applied if they are already in the LDAP structure.
Setting up replication
To setup replication, first setup a second OpenLDAP server, similarly as above. However take care that, in the configuration file:
- The sync replication provider is pointing to the other system
- The serverID of each OpenLDAP system is different
Using a mirrored installation means that the OpenLDAP service should be configured like a single server installation, so the serverID value on each of the nodes must be the same. Instances are identified by rid values, which must be unique.
Next, create the synchronisation account. We will create an LDIF file (the format used as data input for LDAP servers) and add it to each LDAP server:
user $
slappasswd -s myreaderpassword
dn: cn=ldapreader,dc=genfic,dc=org userPassword: {SSHA}XvbdAv6rdskp9HgFaFL9YhGkJH3HSkiM objectClass: organizationalRole objectClass: simpleSecurityObject cn: ldapreader description: LDAP reader used for synchronization
user $
ldapadd -x -W -D "cn=Manager,dc=genfic,dc=org" -f ldapreader.ldif
Password: ## enter the administrative password
Configuring the OpenLDAP client tools
Edit the LDAP Client configuration file. This file is read by ldapsearch and other ldap command line tools.
BASE dc=genfic, dc=org URI ldap://ldap.genfic.org:389/ ldap://ldap1.genfic.org:389/ ldap://ldap2.genfic.org:389/ TLS_REQCERT allow TIMELIMIT 2
You can test the running server with the following command:
user $
ldapsearch -x -D "cn=Manager,dc=genfic,dc=org" -W
If you receive an error, try adding
-d 255 to increase the verbosity and solve the issue you have.
Client configuration for centralized authentication
There are numerous methods/tools that can be used for remote authentication. Some distributions also have their own easy to use configuration tool. Below there are some in no particular order. It is possible to combine local users and centrally authorized accounts at the same time. This is important because, for instance, if the LDAP server cannot be accessed one can still login as root.
- SSSD (Single Sign-on Services Daemon). Its primary function is to provide access to identity and authentication remote resource through a common framework that can provide caching and offline support to the system. It provides PAM and NSS modules, and in the future will support D-Bus interfaces for extended user information. It also provides a better database to store local users as well as extended user data.
- Use
pam_ldapto login to the LDAP server and authenticate. Passwords are not sent over the network in clear text.
- NSLCD (Name Service Look up Daemon). Similar to SSSD, but older.
- NSS (Name Service Switch) using the traditional
pam_unixmodule to fetch password hashes over the network. To permit users to update their password this has to be combined with the
The first two are demonstrated below with the minimum necessary configuration options to get working.
Client PAM configuration SSSD Method
Here is the more direct method. The three files that are required to be edited are mentioned below.
[sssd] config_file_version = 2 services = nss, pam domains = genfic debug_level = 5 [nss] filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd [domain/genfic] id_provider = ldap auth_provider = ldap ldap_search_base = dc=genfic,dc=org ldap_tls_reqcert = never # primary and backup ldap servers below [first server and],[second server] ldap_uri = ldap://X.X.X.X,ldap://X.X.X.X
Add sss to the end as shown below to enable the lookup to be handed to the sssd system service. Once you have finished editing start the sssd daemon.
passwd: files sss shadow: files sss group: files sss netgroup: files sss automount: files sss sudoers: files sss
The last file is the most critical. Open an extra root terminal as a fallback before editing this. The lines that end with
# have been added to enable remote authentication. Note the use of pam_mkhomedir.so to support creating the user home directories.
#%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth sufficient pam_sss.so use_first_pass # auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account [default=bad success=ok user_unknown=ignore] pam_sss.so # account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 password sufficient pam_unix.so md5 shadow nullok try_first_pass use_authtok password sufficient pam_sss.so use_authtok # password required pam_deny.so session required pam_mkhomedir.so skel=/etc/skel/ umask=0077 session optional pam_keyinit.so revoke session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_sss.so #
Now try logging in from another box.
Client PAM configuration the pam_ldap module method
First, we will configure PAM to allow LDAP authorization. Install sys-auth/pam_ldap so that PAM supports LDAP authorization, and sys-auth/nss_ldap so that your system can cope with LDAP servers for additional information (used by nsswitch.conf).
root #
emerge --ask pam_ldap nss_ldap
The last file is the most critical. Open a few extra root terminals as a backup before editing this. The lines that end with
# have been added to enable remote authentication.
#%PAM-1.0 auth required pam_env.so auth sufficient pam_unix.so try_first_pass likeauth nullok auth sufficient pam_ldap.so use_first_pass # auth required pam_deny.so account sufficient pam_ldap.so # account required pam_unix.so password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 try_first_pass retry=3 password sufficient pam_unix.so try_first_pass use_authtok nullok md5 shadow password sufficient pam_ldap.so use_authtok use_first_pass # password required pam_deny.so session required pam_limits.so session required pam_unix.so session optional pam_ldap.so #
Now change /etc/ldap.conf to read:
#host 127.0.0.1 #base dc=padl,dc=com base dc=genfic,dc=org #rootbinddn uid=root,ou=People,dc=genfic,dc=org bind_policy soft bind_timelimit 2 ldap_version 3 nss_base_group ou=Group,dc=genfic,dc=org nss_base_hosts ou=Hosts,dc=genfic,dc=org nss_base_passwd ou=People,dc=genfic,dc=org nss_base_shadow ou=People,dc=genfic,dc=org pam_filter objectclass=posixAccount pam_login_attribute uid pam_member_attribute memberuid pam_password exop scope one timelimit 2 uri ldap://ldap.genfic.org/ ldap://ldap1.genfic.org ldap://ldap2.genfic.org
Next, copy over the (OpenLDAP) ldap.conf file from the server to the client so the clients are aware of the LDAP environment:
root #
scp ldap-server:/etc/openldap/ldap.conf /etc/openldap
Finally, configure your clients so that they check the LDAP for system accounts:
passwd: files ldap group: files ldap shadow: files ldap
If you noticed one of the lines you pasted into your /etc/ldap.conf was commented out (the
rootbinddn line): you don't need it unless you want to change a user's password as superuser. In this case you need to echo the root password to /etc/ldap.secret in plaintext. This is DANGEROUS and should be chmoded to 600. What you might want to do is keep that file blank and when you need to change someone's password that's both in the LDAP and /etc/passwd, put the pass in there for 10 seconds while changing the users password and remove it when done.
Convert file userbase to LDAP
Configuring OpenLDAP for centralized administration and management of common Linux/Unix items isn't easy, but thanks to some tools and scripts available on the Internet, migrating a system from a single-system administrative point-of-view towards an OpenLDAP-based, centralized managed system isn't hard either.
Go to http://www.padl.com/OSS/MigrationTools.html and fetch the scripts there. You'll need the migration tools and the make_master.sh script.
Next, extract the tools and copy the make_master.sh script inside the extracted location:
root #
mktemp -d
root #
cd /tmp/tmp.zchomocO3Q
root #
tar xvzf /path/to/MigrationTools.tgz
root #
mv /path/to/make_master.sh MigrationTools-47
root #
cd MigrationTools-47
The next step now is to migrate the information of your system to OpenLDAP. The make_master.sh script will do this for you, after you have provided it with the information regarding your LDAP structure and environment.
At the time of writing, the tools require the following input:
|LDAP BaseDN
|The base location (root) of your tree
|Mail domain
|Domain used in e-mail addresses
|Mail host
|FQDN of your mail server infrastructure
|LDAP Root DN
|Administrative account information for your LDAP structure
|LDAP Root Password
| Password for the administrative account, cfr earlier
slappasswd command
The tool will also ask you which accounts and settings you want to migrate.
You don't need to make changes to pam.d/system-auth
AcknowledgementsWe would like to thank Matt Heler for lending us his box for the purpose of this guide. Thanks also go to the cool guys in #ldap on Freenode.net
This page is based on a document formerly found on our main website gentoo.org.
The following people contributed to the original document: Benjamin Coles, Sven Vermeulen (SwifT), Brandon Hale, Benny Chuang, jokey, Joshua Saddler (nightmorph)
They are listed here because wiki history does not allow for any external attribution. If you edit the wiki article, please do not add yourself here; your contributions are recorded on each article's associated history page.

subset: commoncrawl


text:
Electrical Companies Carlstadt NJ
There's no one else you need to call but O'Hara Electric when you require a residential or commercial electrician in Montclair NJ. Since 1963, business and homeowners in the local region have been depending on our premium quality services. The fact that we are so very committed to both offering the absolute best when it comes to customer service and supplying excellent quality work is the reason we have been in business so long. We're fully licensed and insured and ready to meet your needs, whatever they might happen to be. Not only do we offer premium quality work, but you're additionally capable of depending on prices which are exceptionally affordable in comparison with other local electrical contractors. Trying to find a residential or commercial electrician in Carlstadt NJ you are able to depend on? Don't hesitate to get in touch with the pros at O'Hara Electric.
Electrician Montclair NJ
We're capable of supplying you with a wide selection of services as a residential electrician in Montclair NJ or the rest of the local region. Whether you require electrical work for your new house construction or you need your old knob and tube wiring replaced, we're standing by to take care of all of your requirements. We're able to ensure the safety of your family is protected by handling smoke detector installation and outdoor lighting. When you are in need of a residential electrician in Carlstadt NJ or the rest of the local area, do not hesitate to give us a call at O'Hara Electric.
Electrical Contractor Montclair NJ
Together with our residential services, O'Hara Electric is the ideal option if you require a commercial electrical service in Montclair NJ or other local areas. You might be surprised how much money you're capable of saving with energy efficient lighting. When it comes to lighting for your business, we can help you by installing the absolute best as a lighting installations contractor. When you want to reduce liability issues and ensure security is maintained, the parking lot lighting services we're capable of supplying are important to take advantage of. When it comes to your business, you always need to hire a contractor you are able to rely on. This is why such a large number of local business owners in search of the very best commercial electrical service company in Carlstadt NJ get in touch with O'Hara Electric.
Electrical Service Contractor Montclair NJ
When you require a landscape lighting contractor in Montclair NJ, this is among the services we specialize in. Because it highlights the very best features of your property, this is a fantastic means of making certain your get the most out of your landscaping. Whether you'd such as elements which will seamlessly blend in with your landscaping or you're looking to add a touch of sophistication with lights such as post lanterns and spotlights, we have the skills needed to fit your requirements. To determine how best to fulfill your needs, we'll perform an inspection of your property. If landscape lighting installations in Carlstadt NJ are something you have been thinking about all you have to do is call our pros.
Commercial Electrician Montclair NJ
We make it easy if you require a commercial or residential electrician in Montclair NJ. You can schedule an appointment online and we'll call you within one business day. You can additionally call our office for immediate support.


text:
Historic LOLs
Posted in Shop Talk by Steven on August 15th, 2011
One of the humor sites I read is "Historic LOLs," which add humorous captions to old photos or vintage illustrations. I love the expression on this man's face. You wonder what the original circumstances were of this photo. 🙂


text:
11th August 2010
Mr P Ridley
Head of Planning
Suffolk Coastal District Council
Dear Mr Ridley
I am writing on behalf of Waldringfield Parish Council to request clarification on the use of 'interim planning policies' to determine planning applications. We have 3 simple questions, and would very much appreciate it if you would provide answers to them:
On 18th March 2010 the full council passed a resolution which said:
(ii) That the Policies be adopted as interim planning policy for the determining of planning applications and enforcement;
This makes no attempt to distinguish between routine planning applications and large scale, controversial ones. The rejection of Cllr John Kelso's proposed amendment (which sought to make this distinction) at the 18th March meeting emphasised this. However, in a press release dated 10th June 2010, Cllr Andy Smith said:
"It was the issue of major housing policies that generated the most public debate, and given the comments already made by the Government it is unclear how we should proceed with any such applications, and indeed how government inspectors would be able to deal with any appeals."
And in SCDC's Local Development Framework (LDF) Update document, dated 8th June 2010, it says:
"It is currently wholly unclear about how the major housing issue should be treated in the light of the above, … the Council has decided to print and distribute the Core Strategy, but crucially as 'Interim Planning Policy', rather than as the 'Consultation Document' for submission to the Secretary of State. That will enable its use in the large number of routine planning applications to proceed in a well structured way."
Both these quotes seem to be saying that major housing developments are to be treated differently from routine planning applications, it being unclear how the former should be determined, whilst the latter are to be tested against the 'interim planning policies'. Could you please confirm that this is the case, and that the resolution of 18th March (quoted above) does not now apply to major housing developments.
If we have understood the change correctly we welcome it, but whilst there may have been a lack of clarity with regard to the use of 'interim planning policies' in June, this is no longer the case. In the Guidance for Local Planning Authorities following the revocation of Regional Strategies (6th July 2010), Steve Quartermain, Government Chief Planning Officer, says:
4. How will this affect planning applications?
In determining planning applications local planning authorities must continue to have regard to the development plan. This will now consist only of:
- Adopted DPDs;
- Saved policies; and
- Any old style plans that have not lapsed
(Our emphasis. Note: DPD = Development Plan Document, in this context SCDC's LDF Core Strategy).
We note that this list does not include un-adopted DPDs, neither does it include 'interim planning policies' contained in un-adopted DPDs[1]. There is no lack of clarity here – the guidance quoted above clearly excludes the use of the 'interim planning policies' contained in SCDC's un-adopted LDF, for the determination of planning applications. It also says: "This guidance should be regarded as a material consideration by local planning authorities and the Planning Inspectorate in their decisions", so SCDC does not have the option of disregarding it.
Saved policies are of course in the list, and are perfectly adequate for determining most applications, large or small.
Could you please state if you intend to conform to the Government guidance quoted above, and if you do, will you please issue a clear and unambiguous statement that SCDC will not use 'interim planning policies' contained in the un-adopted and un-examined LDF to determine planning applications, particularly major ones. If this is not your intention, could you please explain how you square this with the guidance quoted above.
The Local Development Scheme (adopted May 2010), which has been agreed by GO-East, says:
"At the local level the District Council will prepare Development Plan Documents as part of its Local Development Framework. These will be adopted as interim planning policy for the purpose of determining planning applications and enforcement when the Council agrees that they be submitted for public examination."
(Our emphasis)
A few weeks earlier, at the 18th March 2010 meeting the full council passed the following resolution:
(i) That the Core Strategy as set out in Appendix 1 to report CL 03/10, including the typographical corrections circulated, be submitted for examination by an independent inspector subject to completing all relevant processes and procedures
(Our emphasis)
This hasn't happened, largely because of the changes to national policies announced by the Secretary of State in June, and it is almost certain that it won't now happen with the current version of the LDF. So according to the Local Development Scheme (quoted above), the 'interim planning policies' should never have been 'adopted', because the conditions for submitting the LDF for public examination, required by the full council, have not been fulfilled.
Could you please explain this conflict, and if it was simply an oversight, could you please rectify it by announcing that the 'adoption' of the 'interim planning policies' has been revoked as it is in conflict with the Government approved Local Development Scheme.
Apart from these quasi-legal arguments about procedure, we believe that decisions on major housing proposals should be based on independently examined policies that local people can have confidence in, because they are known to have been arrived at by following the proper processes, in particular that the views of local people have been taken into account.
There is a high probability that the 'interim planning policies' will be changed, either because they are found to be unsound at the Independent Examination stage, or they do not align with new Government policies. If major planning applications are approved using these 'interim planning policies', and they are subsequently changed, the people of the district will be in the extremely unfortunate position of having to live for decades with inappropriate housing developments that are at odds with SCDC's new policies and strategy. It would make a complete farce of strategic planning and the principle of plan-led development. The solution to this problem is very simple – do as most other Local Planning Authorities are doing: wait until the LDF has undergone external examination and been properly adopted before testing major planning application against the policies it contains.
Yours sincerely
Mrs Jean Potter
Clerk to the Parish Council
County Councillors
Rt Hon. Eric Pickles MP (Secretary of State for Communnities & Local Government)
Therese Coffey (MP for Suffolk Coastal)
Barbara Wyganowski (GO-East)
Simon Cairns (Suffolk Preservation Society)
[1] Despite SCDC's description of the 'interim planning policies' as having been 'adopted' in the resolution of 18th March, simply calling a document or set of policies 'adopted' does not confer on it the status of adopted as normally understood in the planning world, i.e. having been through the external examination stage and recommended for adoption by the Independent Inspector. The 2004 Planning & Compulsory Purchase Act states:
23 Adoption of local development documents
(2) The authority may adopt a development plan document as originally prepared if the person appointed to carry out the independent examination of the document recommends that the document as originally prepared is adopted.
(3) The authority may adopt a development plan document with modifications if the person appointed to carry out the independent examination of the document recommends the modifications.
(4) The authority must not adopt a development plan document unless they do so in accordance with subsection (2) or (3).
Since neither (2) nor (3) have happened in the case of the LDF Core Strategy, it cannot be classed as adopted. And if the LDF Core Strategy hasn't been adopted, it is meaningless to claim that the policies it contains have been adopted: simply re-branding them 'interim planning policies' doesn't alter this.


text:
September 22nd, 2016
By: Tom Dispatch
Cowboys and Indians are at it again.
Americans who don't live in the West may think that the historic clash of Native Americans and pioneering settlers is long past because the Indians were, after all, defeated and now drive cars, watch television, and shop at Walmart. Not so.
That classic American narrative is back big time, only the Indians are now the good guys and the cowboys—well, their right-wing representatives, anyway—are on the warpath, trying to grab 640 million acres of public lands that they can plunder as if it were yesteryear.
Meanwhile, in the Dakotas, America's Manifest Destiny, that historic push across the Great Plains to the Pacific (murdering and pillaging along the way), seems to be making a return trip to Sioux country in a form that could have planetary consequences.
Energy Transfer Partners is now building the Dakota Access Pipeline, a $3.7 billion oil slick of a project. It's slated to go from the Bakken gas and oil fracking fields in northern North Dakota across 1,100 miles of the rest of the Dakotas and Iowa to a pipeline hub in Illinois. From there, the oil will head for refineries on the Gulf Coast and ultimately, as the emissions from fossil fuels, into the atmosphere to help create future summers so hot no one will forget them. Keep in mind that, according to global warming's terrible new math, there's enough carbon in those Bakken fields to roast the planet—if, that is, the Sioux and tribes allied with them don't stop the pipeline.
This time, in other words, if the cavalry does ride to the rescue, the heroes on horseback will be speaking Lakota.
Last Stand at Standing Rock
If built as planned, the Dakota Access Pipeline will snake through the headwaters of the Missouri River, a life-giving source of fresh water for millions of people who live downstream, including Native Americans. It's supposed to pass under that river just a few miles from the Standing Rock Sioux Reservation that straddles North and South Dakota. Protestors point out that, eventually, the pipeline is likely to leak into that vital watershed and the contamination could prove catastrophic.
The U.S. Army Corps of Engineers, which green-lighted the project's design, and Energy Transfer Partners have continued to insist that there is no such risk—even though, suspiciously enough, they decided to change the pipeline's route to avoid the water supply of North Dakota's capital, Bismark. As ever, tribal leaders point out, they were ignored rather than consulted in the planning stages, even though the project was to pass directly through their lands.
When the Keystone XL pipeline, slated to bring especially carbon-heavy tar sands from Alberta, Canada, to the U.S. Gulf Coast, was killed thanks to years of fierce environmental protests, the stakes were raised for the Dakota Access Pipeline. Keystone was a disaster for the energy industry. In its wake, opponents claim, the new project was fast-tracked without the usual environmental reviews so that construction could be completed before a Keystone-style opposition formed. Fast as they were, it turns out that they weren't fast enough.
Keep in mind that such a project wasn't exactly a first for the native peoples of the region. In the wake of their defeat and confinement to reservations in the 19th century, they lived through a profound transformation of their landscape. Settlers let cattle loose on meadows cleared of wolves, cougars and bears. The rude stamp of progress followed: fences, roads, dams, mines, sawmills, railroads, power lines, towns, condos, resorts. And in the 21st century, vistas increasingly pockmarked with fracking's drill rigs and service roads.
In the Dakota prairies, hundreds of species of grass and flowers were replaced by monocultures of soy and corn, while millions of cattle were substituted for herds of free-roaming bison. As recently as the 1950s and 1960s, the neighboring Sioux and Cheyenne lost 200,000 more acres of valuable reservation farmland to dams built without their permission. Entire villages had to relocate. The Dakota Access Pipeline is just the latest of these assaults and yet, in every way, it's potentially more disastrous. As Lakota Chairman David Archambault puts it, "To poison water is to poison the substance of life."
Slaughter, internment and neglect were bad enough, say tribal leaders, but threatening the people's life-giving water was the last straw. As a result, thousands of Native Americans drawn from 280 tribes across the country and even around the world are now camping out at the construction site where the Dakota Access Pipeline nears the tip of the Standing Rock Sioux Reservation. Almost 2 million signatures have been gathered on a petition opposing the pipeline, dozens of environmental groups have signed on to the resistance and tribes nationwide have expressed their solidarity.
On Sept. 3, the private security guards hired by Energy Transfer Partners used pepper spray and dogs on those trying to block the pipeline. This eruption of violence halted work until U.S. District Judge James Boasberg could rule on the tribe's request for an injunction to block construction while its case was heard in court.
On Sept. 9, while conceding that "the United States' relationship with Indians has been contentious and tragic," he denied that request. Then, in a move described even by the Sioux as stunning, the Obama administration suddenly stepped between the protesters and the pipeline construction crews. The U.S. Environmental Protection Agency, the U.S. Department of the Interior and even the U.S. Army Corps of Engineers called for a halt to the process until the permitting procedure could be reviewed.
Although putting an oil pipeline under a major river should have triggered an environmental review, the Corps chose not to do one. Now, it will take a second look. The administration also committed itself to finding better ways to include Native Americans in future land-use decisions.
Where this goes next is anyone's guess. The construction halt could, of course, be lifted if the protesters were to disperse under a false sense of victory. The Sioux now plan to litigate vigorously against the pipeline. One prediction, however, is easy enough. The unity and purpose experienced by the people in that encampment will resonate powerfully for years to come. A movement has been born along the banks of the Missouri River.
Native Americans have played the crucial role in this campaign to "keep it in the ground," just as they were leaders in the successful struggle to block the Keystone XL pipeline, the proposed Northern Gateway pipeline that would have carried dirty crude across Canada to the Pacific, and the building of a massive coal export port on Canada's Pacific coast. As Native American leader Winona LaDuke puts it, "For people with nothing else but land and a river, I would not bet against them."
This Town Ain't Big Enough for the Both of Us
Meanwhile, back at the ranch, the cowboys have been engaged in a not-so-old-fashioned range war over who can best manage 640 million acres of public lands now owned collectively by the American people. Backed by the Koch Brothers and their American Legislative Exchange Council (ALEC) legislators across the American West—where most of the public lands are located—are calling on the federal government to cede control and management of them to counties and states. This would include some of our most beloved national parks.
In Utah where I live, the Republican-dominated legislature has put forward the Public Lands Initiative (PLI). It's the latest round in a 30-year feud pitting conservationists and businesses tied to tourism and recreation against ranchers and miners. At stake: whether to give the last publicly controlled wild places in the state formal wilderness status and federal protection or (though this isn't often directly said) let private interests exploit the hell out of them. Every few years the Utah legislature's "cowboy caucus" has pushed just such a "wilderness bill" filled with poison pills and potentially devastating loopholes that the local conservation community can't abide.
Billed this time as a potential grand bargain to settle who controls public lands and how they can be used, the PLI has proven no different. It was, in fact, generated by local fears that President Obama might use his wide-ranging powers under the Antiquities Act to create a new national monument in the state as he left the Oval Office. This was exactly what Bill Clinton did in 1996, establishing the Grand Staircase Escalante National Monument on 1.9 million acres of land in southern Utah's spectacular canyon country, already the home of five national parks.
That 1906 act, passed while Teddy Roosevelt was in the White House, gives the president wide-ranging authority to create national monuments from public lands in order to protect significant natural, cultural or scientific features. Since activities like drilling for oil and gas, mining, timber cutting and grazing are barred or tightly restricted on such protected lands, Western politicians tend to regard them as a tool wielded by conservationists to suppress economic development.
Grave Robbing for Fun and Profit
Sure enough, the nightmare of the cowboys is being realized. A coalition of five tribes, all either presently in Utah or claiming ancestral lands there, is now pushing a bold proposal for just such a national monument—a park co-managed by the five tribes and the U.S. National Park Service (which in itself would be a significant first for the Native American community). It would include 1.9 million acres of the ancestral grounds of the Navajo, Hopi, Zuni, Ute Mountain and Ute Indian tribes and would be known as the Bears Ears after the area's most famous landmark, twin buttes that are said to resemble a bear's ears.
Interior Secretary Sally Jewel recently toured the proposed monument and was amazed by what she saw, including spectacular cliff-house ruins, as well as paintings and rock carvings depicting clan signs, shamanic visions and ghostly herds of bighorn sheep and elk. Bears Ears would possess more than 100,000 archaeological sites, including many of the oldest and most spectacular ruins in the U.S. Members of the coalition of tribes regard them and the ground littered with their ancestors' artifacts and bones as sacred.
A grassroots group, Utah Dine Bikeyah, did extensive groundwork collecting data and interviews to create cultural maps of the region. The extraordinary archaeological and historical record they built effectively made their case that the ancestors of the coalition tribes have relied on that landscape for hunting, gathering and ceremonial activities for centuries. The Utah conservation community, which had mapped out its own plans for such a monument, stepped aside for the tribal proposal.
Protecting the Bears Ears is considered an urgent matter. A mere handful of rangers currently patrol thousands of square miles of rugged canyons where the looting of archaeological sites for fun and profit is a rural tradition. In remote outposts like Blanding, Utah, Indian grave robbing was considered an acceptable family pastime until agents from the FBI infiltrated the black market for artifacts and busted a prominent local family. Ute leader Regina Lopez-Whiteskunk expresses a motivating concern of the tribal leaders.
"Without swift action we fear that the archaeological and cultural riches of the Bears Ears will suffer shameful, disgraceful dissolution and obliteration," she said.
Read more at EcoWatch.


text:
Poison at the Park1
This poor dog just does not get a break. So we started taking her to the dog park. It is a super nice park with a side for big dogs and small dogs. Bags are provided for your dog's droppings and a doggie water fountain is there too. We just started going last week and Jingle was doing pretty OK with the other dogs and would be a little calmer at home after her romps around the park.
I was checking my Facebook page yesterday and I see a post from my vet that they found someone was leaving chunks of meat with aspirin inside around the fencing at the dog park. One dog was already suffering from the effects and was in the doggie hospital. So, guess what I stepped in that AM at my house, dog vomit. Uuuggggh. Really. My brain starts working and I send my hubby home to check on Jingle. By nighttime it is on the news and all doggie parent friends are yapping and one says you should really watch the news report because it says what to do if your dog was exposed. Now, I have already researched aspirin and dogs and know what to look for and despite our little vomit episode she is fine. Finally back at home and sitting to watch the news to find the report because for whatever reason I cannot get it on my computer or phone.
Last time we were at the park was Wednesday and it is now Friday. I am thinking I am overthinking. The report finally comes up on the news and they say, "If your dog was exposed call your vet, the poison was found at the park on Wednesday". Vet is closed as it is Friday night at 9:30 PM, but frankly I now consider our ER vet our night vet because we have now had enough interaction with them they know Jingle by name. I call up and they say bring her on it considering she was there and has vomited. They say it could be in her system and she might not show signs until it is too late. We all pile in the car and 1.5 hours later we are back home with a healthy Jingle, good blood work and a new charge of $180.00 on our credit card. We have decided to open up a Jingle account and see what she can do to pay for all her expenses in our house. Ya' think the credit card company will go for it? LOL.
The vet said just accept Jingle how she is, she probably won't change much, love her for who she is, she is sweet but she does seem to have something that draws "trouble" to her. Aaaaaaahhhh. Boy is Jingle lucky she found this household. I sure hope this household makes it.
Then when we get home Jingle goes for the peanut butter in the rat trap we had in our garage and snap…yet again she escaped harm. (BTW, didn't know hubby put those down, was not happy when I found out)
P.S. The dog that was exposed and in the doggie hospital was actually at our ER vet, they were the ones who alerted all the local vets. They told us the dog was doing fine and was going home in the AM.


text:
Thinking of letting your holiday home?
Letting your holiday home is a great way of generating an extra income but can be time consuming and difficult to manage at a distance. That's where we come in!
Our fully managed service deals with all the marketing, bookings, cleaning and maintenace and we are always on hand if the guests need anything during their stay.
Is your home suitable as a holiday let?
If you use your property for holidays it is very likely that others would be happy to pay to rent it. But there are often adjustments to furniture, equipment or even decorations which would allow you to command a higher rent. We are happy to advise you on these questions. You should also be aware that certain types of property cannot be let on a holiday basis. These are usually leasehold properties (normally flats) where the head lease prohibits or restricts letting. Your deeds will confirm this.
Thinking of investing?
Whatever stage you are at we can advise on the best type of holiday let to purchace. We work closely with local agents and are happy to give you an estimate of potential income based on our extensive knowledge of the local market.
Why choose us?
We think of everything so you don't have to. For over 70 years Rumsey's have been associated with quality accommodation in Poole, Bournemouth and the surrounding areas.
Our office on the Sandbanks peninsula is ideally located for our guests to pick up keys and pop in with any issues they have during their stay. The office is open six days a week with an out of hour's service to cover any emergency.
Our team have extensive experience in holiday letting. We do all the hard work for you, taking bookings and processing payments, arranging cleaners and contractors. We deliver excellent customer service too.
So you can rest assured that there is always someone on hand to assist your guests, making sure their experience is an enjoyable one and peace of mind that your property is being looked after whilst you are away.
Monthly accounting
Local office
Established 70yrs+
Largest selection of properties
Extensive marketing
Full colour brochure
Links with local services
Processing of winter lets
Local key holder
Where to Start
As an owner letting holiday accommodation you become responsible for the cost and enjoyment of your customers' holidays. It is therefore important that their reasonable expectations are fulfilled. Some properties will let well from the start while others my take a season or two of our joint effort to realise their full potential. This is why we do not normally take on a property to fill in a short period. In addition we do not take on an owner's main home.
Equipping the property It is important that the property is equipped and furnished to a good standard. We can help you make sure your holiday home is comfortable, beautiful and has all the facilities required.
Health and Safety. It is the responsibility of every owner to ensure that they and their properties comply with all Health and Safety legislation related to the letting of self-catering accommodation and indeed the signing of our Agency Agreement requires this. We can help you comply with the legislation including arranging Gas Safety Certificates, Periodic electrical Inspections and Fire Risk Assessments.
Maximise your bookings
Photography We take multiple photographs of your property to make sure it is shown at its best in our brochure and online.
Marketing In addition to our own website we also advertise across a number of different online travel agents and local information sites to make sure your property gets the maximum amount of exposure to those searching for a holiday home. We also produce an annual full colour brochure. Our Facebook and twitter accounts are updated daily with information about our properties and what's going on in the local area.
Managing Bookings As well as our friendly staff taking bookings by phone our sophisticated online booking system ensures that your customers can book anytime of the day or night and payments can be processed immediately. Your calendar is always up to date so it's easy to keep track of your bookings. There is no limit to the number of 'owner bookings' you can make so that you can use your holiday home as much or as little as you like, just let us know and we will update your calendar for you.
Short breaks and Winter lets In order to maximise bookings we also offer short breaks (which can only be booked four weeks in advance) and Winter lets for longer stays during low season (minimum of 8 weeks)
Income and expenditure
Holiday Charges A holiday period runs from Saturday to Saturday unless otherwise agreed commencing at 3pm and ending at 10am. The weekly charges for high, mid and low season are inclusive of all utilities (gas, electric, water, phone, TV, Broadband etc.)
Monthly accounting We pay owners monthly for transactions made in the previous calendar month and we pay direct into your bank account with commission and V.A.T. already deducted. Suppliers invoice us for your cleaning, linen and any other services and we pay them from your account with no additional charges, it's all part of the service. We email monthly statements and can even provide an annual statement for your accountant.
Council Tax, Business rates, Insurance and legal advice. We are happy to advise you on all the latest requirements and laws to make sure you are covered.
Our Fees We charge 15% for booking only and 2o% for fully managed service. Our fees are subject to V.A.T. There are no annual renewal charges or hidden extras (such as 'invoice discounting').
Day to day Maintenance
Cleaning Probably the most important item in the letting process is the cleaning. We liaise with your cleaner, letting them know when a changeover clean is needed. Most cleaning companies also hire and launder bed linen so you don't even need to worry about buying and maintaining it.
Property Maintenance From time to time the services of other contractors such as plumbers, electricians and builders may be needed. We have a list of tried and trusted tradesmen who can attend promptly to make sure disruption of your guests stay is kept to a minimum and you know your property is being looked after and kept to the same high standard.
What to do now?
Property owners, if you have a second home in Sandbanks, Poole, West Bournemouth and the surrounding areas, contact Rumsey Holiday Homes for FREE advice on holiday lettings, including an assessment of your home and the likely income to be derived from it.


text:
Troop-Rotation Plan for Iraq Could Draw Down U.S. Forces
WASHINGTON -- The Pentagon announced a troop-rotation plan for Iraq that could significantly reduce the number of U.S. forces there over the next 18 months.
Senior defense officials cautioned that the plan didn't amount to a commitment or even a formal blueprint to cut troop strength. Any move to reduce forces will depend on conditions on the ground in Iraq, these officials said.


text:
Learn to Surf and Stand Up Paddleboard with the original and best surf school in Northumberland, Northside Surf School. Based in Amble, we have easy access to the beautiful northeast coast providing a great range of locations for you to enjoy this thrilling experience. We offer surfing the... (Adventure Sports Northumberland)
Farne Island Divers offer a range of dives in a great location for those looking to discover new sites in England´s North-East. All our divers are professionally qualified and experienced with an extensive knowledge of the waters in and around the Farne Islands. From diving with the local... (Adventure Sports Northumberland)
Allout Adventures has over 13000 acres, on the grounds of beautiful Slaley Hall Hotel Estate with which to offer a great range of exciting adventures, with something for everyone. Allout Adventures offer a wide range of exhilarating outdoor activities including adult quad biking, kids quad... (Adventure Sports Northumberland)
We are an outdoor activity company offering a large range of fantastic activities. We are based in the North East but run our canyoning activities in a variety of locations, including: Cumbria / AWESOME Northumberland County Durham We cater for all levels and ages, and... (Adventure Sports Northumberland)
Join your fully qualified and experienced mountaineering instructor, Tim Hakim south west of Northumberland for a range of experiences in the great outdoors with Beyond the Horizon. From climbing, hiking and mountaineering events in Tynedale and winter skills and courses taking place in... (Adventure Sports Northumberland)
Here at The Bike Place in Kielder, we have a range of bikes to suit all abilities, from brands such as Kona, Saracen and Forme. You can explore the vast and expanding network of cycle trails within Kielder Water Forest Park from our hire centre, which is only minutes away from Green, Blue and Red... (Adventure Sports Northumberland)
Sharp-Edge is an Intelligent Mountaineering and Management Training organisation. We offer a range of experiences both in in the great outdoors and on company premises. We specialise in bespoke programmes that maximise the learning potential of both individuals and small teams. Tom and... (Adventure Sports Northumberland)
Welcome to Command Zone We provide excellent paintballing experiences throughout the year from our location in Morpeth, Northumberland. Our paintball site is an original WW2 Airfield site, and we are based in one of the original buildings and are surrounded by woodland. We have various... (Adventure Sports Northumberland)
Join KA Kitesurfing to learn about this fast growing sport in a safe and enjoyable environment. KA Kitesurfing is a recognised school in Kitesurfing, stand up paddle and now plan to run coasteering sessions at Beadnell in 2012. Kitesurfing may seem daunting at first, but after receiving... (Adventure Sports Northumberland)
Welcome to Allout Paintball We run exciting and exhilarating paintball from our location in Hexham, Northumberland. We have the highest quality equipment and paintballs to provide you with an excellent paintballing experience and a safe environment. We have over 8 years experience in... (Adventure Sports Northumberland)
Turboventure is based near Newcastle Upon Tyne City Centre and we have been offering an array of exciting outdoor activities for more than 15 years, including: Archery Canopy Clay Pigeon Shooting Paintball Quads So you could say we know what we're... (Adventure Sports Northumberland)
Welcome to Footsteps - walking the beauty of Northumberland! We are a little company led by husband and wife, who take guided groups for stunning hikes and walks around Northumberland. We happily cater to the wishes of each individual group, tailoring our routes to what you wish to see and... (Adventure Sports Northumberland)
Explore the Northumberland coastline, dotted with islands and life with Sovereign Diving. Dive with our professional and qualified instructors in some of the most amazing sights, with a cornucopia of marine life, flora and fauna as you descend into a world of amazing wrecks and seal colonies,... (Adventure Sports Northumberland)
Out There 360 Adventures is a wonderful adventure sports activity that can help you to do some really fun activities. You can do: Climbing Abseiling Hiking Orienteering Survival Breaks Boot Camps Singles Weekends Family Breaks and Activity... (Adventure Sports Northumberland)
Kielder Active would like to show you the natural beauty of Northumberland and welcome you to the wonderful world of Nordic walking. This is a fabulous activity to get outdoors, get active and to get fit! Our instructor Terry Gregg is a INWA Nordic Walking Instructor, MLTE Mountain Leader,... (Adventure Sports Northumberland)
Greenlee supports sustainable deer management in the beautiful countryside of Northumberland National Park. We offer deer management courses as well as game shooting subject to the season. We are a member of the National Gamekeepers Association and the British Association for Shooting &... (Adventure Sports Northumberland)
Adventure Sports in Northumberland by location:
Follow us!


text:
only display, without Arduino
a button send serial commands,
How to insert a delay between a characters text?
this not work...
printh "ABC"
printh "DEF"
printh "GHIJKLMNOP"
printh 38 65 66 67 38
printh 38 68 69 70 38
printh 38 71 72 73 74 75 76 77 78 79 7A 38
Your ASCII characters need to be converted to their Hex values.
Your MCU will receive the byte, you need to cast the byte as a character.
Using the printh command means printh values in the HMI are fixed and static. They do not change.
There is no known method to send contents of string variables.
it works with delay, thank you !
sorry Patrick, I have another step:
how we can insert special char. <CR><LF> after a string?
print (example) 123456<CR><LF>
printh 0X0D 0X0D (hex for <CR><LF>) but result is 0x20 0x0d 0x21 0x92 not what I need.
thank you!


text:
Hi everyone,
I'm hoping someone can help me interpret my lab results.
1.5 years ago I had a full thyroidectomy due to a thyroid cancer and have subsequently been on daily thyroxine.
Initially I was on 150 micrograms p/day, then I was increased to 175.
I had pretty bad side effects inc palpitations, breathlessness, tremor, brain fog etc... I have since been reduced back to 150 p/day.
I was/still am anaemic. I am trying to get back to a normal level by taking iron tablets. I do not take them at the same time as I take the levothyroxine as it is my understanding they would interfere with the thyroxine metabolism.
My newest results are:
TSH - 1.2 mu/L
Free T4 18.6
My previous were:
TSH - 0.29 mu/L
Free T4 26.2
My TSH is supposed to stay suppressed below 1.0... would you say my newest results indicate a healthy level of thyroid hormone?


text:
Front Door St Louis
Which has a really attractive residence may be the even consider everyone and additionally Front Door St Louis graphic stock helps these who wish to find a really relaxed home to measure within. With extraordinary layouts exhibited, Front Door St Louis photograph gallery offers you many knowledge to build a family house that preferred simply by someone. These are typically wonderful graphics accumulated out of legendary home companies, it can be a component which makes Front Door St Louis snapshot stock become the pick of many of us. Additionally content this versions that you just absolutely adore created by fantastic Front Door St Louis pic gallery. In that case, Front Door St Louis pic stock will aid you to produce a tension relieving natural environment in the house. Do not expend a whole lot of time and effort for getting almost any idea, only just see that Front Door St Louis image collection cautiously, after that you can obtain the suggestions you need.
As noun
the foremost part or surface of anything
the part or side of anything that faces forward:the front of a jacket
the part or side of anything, as a building, that seems to look out or to be directed forward:He sat in the front of the restaurant
any side or face, as of a building
a façade, considered with respect to its architectural treatment or material:a cast-iron front
a property line along a street or the like:a fifty-foot front
a place or position directly before anything:We decided to plant trees in the front
a position of leadership in a particular endeavor or field:She rose to the front of her profession
the foremost line or part of an army
a line of battle
the place where combat operations are carried on
an area of activity, conflict, or competition:news from the business front
land facing a road, river, etc
a promenade along a seashore
a distinguished person listed as an official of an organization, for the sake of prestige, and who is usually inactive
a person or thing that serves as a cover or disguise for some other activity, especially one of a secret, disreputable, or illegal nature; a blind:The store was a front for foreign agents
outward impression of rank, position, or wealth
bearing or demeanor in confronting anything:a calm front
haughtiness; self-importance:That clerk has the most outrageous front
the forehead, or the entire face:the statue's gracefully chiseled front
a coalition or movement to achieve a particular end, usually political:the people's front
something attached or worn at the breast, as a shirt front or a dickey:to spill gravy down one's front
an interface or zone of transition between two dissimilar air masses
the auditorium
the business offices of a theater
the front of the stage; downstage
As adjective
of or relating to the front
situated in or at the front:front seats
(of a speech sound) articulated with the tongue blade relatively far forward in the mouth, as the sounds of lay
As verb (used with object)
to have the front toward; face:Our house fronts the lake
to meet face to face; confront
to face in opposition, hostility, or defiance
to furnish or supply a front to:to front a building with sandstone
to serve as a front to:A long, sloping lawn fronted their house
to provide an introduction to; introduce:a recorded message that is fronted with a singing commercial
to lead (a jazz or dance band)
to articulate (a speech sound) at a position farther front in the mouth
to move (a constituent) to the beginning of a clause or sentence
As verb (used without object)
to have or turn the front in some specified direction:Our house fronts on the lake
to serve as a cover or disguise for another activity, especially something of a disreputable or illegal nature:The shop fronts for a narcotics ring
As interjection
(used to call or command someone to come, look, etc
, to the front, as in an order to troops on parade or in calling a hotel bellboy to the front desk):Front and center, on the double!
As Idioms
in front, in a forward place or position:Sit down, you in front!
in front of, ahead of: to walk in front of a moving crowd
outside the entrance of: to wait in front of a house
in the presence of: to behave badly in front of company
out front, outside the entrance: He's waiting out front
ahead of competitors: This advertising campaign ought to put our business way out front
in the audience or auditorium
candidly; frankly: Say what you mean out front
up front, Informal
in advance; before anything else: You'll have to make a payment of $, up front
frank; open; direct: I want you to be up front with me
As noun
a movable, usually solid, barrier for opening and closing an entranceway, cupboard, cabinet, or the like, commonly turning on hinges or sliding in grooves
a doorway:to go through the door
the building, house, etc
, to which a door belongs:My friend lives two doors down the street
any means of approach, admittance, or access:the doors to learning
any gateway marking an entrance or exit from one place or state to another:at heaven's door
As Idioms
lay at someone's door, to hold someone accountable for; blame; impute
leave the door open, to allow the possibility of accommodation or change; be open to reconsideration:The boss rejected our idea but left the door open for discussing it again next year
lie at someone's door, to be the responsibility of; be imputable to:One's mistakes often lie at one's own door
show someone the door, to request or order someone to leave; dismiss:She resented his remark and showed him the door
As noun, plural louis [loo-eez; French lwee] /ˈlu iz; French lwi/ (Show IPA)
louis d'or
Are all loaded with this Front Door St Louis photo stock tend to be a example of really endless style and design, this is some sort of profitable element for all of you. Because the idea choice is significant right move, then you certainly should examine this Front Door St Louis pic collection perfectly. The right gifts idea you really love because of Front Door St Louis graphic collection to bring about a host which suits your private preferences. Front Door St Louis photograph gallery but not just give stunning layouts and illustrations or photos which has a good quality. That helps make Front Door St Louis image collection often be a advisable supply of idea to develop an exciting new home. Consistently update your information in the most current your home designs by bookmarking this site or simply Front Door St Louis snapshot collection. Wish most people shortly acquire tricks to prettify the home after mastering this particular Front Door St Louis photograph gallery.
Front Door St Louis Images Album
Related Photos of Front Door St Louis
Popular Posts
- hanging bar cabinets for home
Res: 875 x 1167
Size: 149 KB
- tv cabinet wheels
Res: 600 x 600
Size: 30 KB
- out door play house
Res: 720 x 664
Size: 136 KB
- garage door window replacement glass
Res: 2448 x 1836
Size: 717 KB
- garage door repair lansing mi
Res: 1268 x 640
Size: 49 KB
- rev a shelf door mount kit
Res: 900 x 900
Size: 113 KB
- tufted leather wingback chair
Res: 768 x 768
Size: 71 KB
- fold up rocking chair
Res: 2000 x 2000
Size: 458 KB
- ohio state chairs
Res: 900 x 900
Size: 60 KB
Featured Posts
Bronze Bathroom Wall Shelf
October 8, 2017
Davis Cabinet Company Dresser
September 27, 2017
Kohler Professional Sink
October 5, 2017
Bathroom Remodle Ideas
September 22, 2017
Replacing Exterior Window Trim
September 22, 2017
Grey Bathroom Floor Tiles
September 24, 2017
What Is Gourmet Kitchen
October 1, 2017
Lateral Wood File Cabinets 2 Drawer
October 1, 2017
Plate Door
September 22, 2017
Cabinets To Ho
October 6, 2017
Framed Art For The Bathroom
September 28, 2017
Replacement Glass Patio Table
September 28, 2017
Gun Cabinet Ideas
September 25, 2017
Paint Colors For Dining Room
September 16, 2017
Rustic Wood Medicine Cabinet
September 22, 2017
Country Bathroom Rugs
September 18, 2017
Black And White Armless Chair
September 24, 2017
Bathroom Vanity 24 Inch
October 7, 2017
Peephole Door Knocker
September 17, 2017
Girls Bedroom Colors
September 28, 2017
Table Pad Protector
September 17, 2017
Contemporary Bathroom Lighting
October 6, 2017
Valances Kitchen
September 25, 2017
Cool Bedroom Layouts
September 17, 2017
Bathroom Remodels Images
October 1, 2017


text:
Anything that is free is the right price for me. Audacity is a great tool that I use regularly in my classroom to help my students gain an understanding of a certain concept or have them demonstrate what they know about a particular topic. Here is a great video which gives you an overview of the basic functionality of this tool
So how have I used it in my classroom. Before I went 1-1 (and I need to get back to this as well) I used to create a series of podcasts on particular topics that we were covering in class. I would have the kids download the podcasts onto their devices and bring them into class when required. It was a fantastic experience that the students certainly enjoyed. One of the best ideas was one that one of my students implemented this year. As I was explaining something, they were recording the audio of what I was saying. Her logic was that she knew that she didn't understand this concept and she could go back later and look at her notes along with my audio. It was a pretty impressive effort for a twelve year old kid. I have also used Audacity to slice together our class radio show. We had authentic audiences from all around the globe and the kids really looked forward to producing it each week. After about week 2, I stepped back and left the totally production up to the students. This is something that I want to dedicate more time to next year as well.
Overall, Audacity is a simple to use tool that gets the job done.


text:
Published in the Newsday 15 march 2017
Zimbabwe joined the rest of the world in commemorating the International Women's Day on the 8th of March 2017 under the theme #BeBoldForChange. Sadly, the impact of corruption on women remains least explored and discussed by key developmental and governance actors. Such impact remains least documented in policy and academic narratives and has received less and less advocacy and policy responses. Corruption is generally defined as the abuse of entrusted power for private gain. However, corruption is not restricted to money changing hands. Sexual extortion and sexual favours are also a form of corruption. Therefore, in light of the international women's day Transparency International-Zimbabwe (TI-Z) focuses this article on sexual extortion also known as sextortion, a term coined by the International Association of Women Judges.
Sextortion occurs when a person who occupies a position of authority and public trust abuses their power and demands sexual favours for some benefit that the person in authority has the power to grant or withhold. Thus, the transacting currency between the parties involved is sexual favours and women are often the victims. The sexual component need not be sexual intercourse or even physical touching. It could be any form of unwanted sexual activity, such as exposing private body parts, posing for sexual photographs, participating in phone sex, or submitting to an inappropriate touching
The 2012 Youth and Corruption Baseline study by TI-Z referred to the acronyms "STDs and TFMs. These acronyms are often used by students in institutions of higher learning in referring to what they call Sexually Transmitted Degrees and Thigh for Marks in their context. These newly coined terms and acronyms refer to a growing practice in the academic institutions where lectures are alleged to be abusing their authority and public trust through demanding sexual favours from female students in return of a passing mark. Despite this growing trend of sextortion, studies carried out by TI Z have shown that women in Zimbabwe remain disempowered to report this form of corruption due to some of factors highlighted below:
- Fear of the negative social labels and stigmatization
- Women and girls fear to lose what one would have gained through sextortion.
- The realization by victims that the damage has already been done.
- Institutions for legal redress are not properly structured to respond in time to the problem of sextortion Court cases in Zimbabwe can drag for years without a final judgement being passed.
As we celebrate women's month TI-Z is of the view that everyone has a role to play in eliminating this form of corruption. To fight this form of corruption there is need to adopt gender sensitive anti-corruption programming at national level. As a country, we need to come up with policies that include specific strategies designed to reduce women's exposure to opportunities for sexual exposure. There is need for effective collaboration for those in anti-corruption and in gender equality sectors in fighting this silent form of corruption


text:
When your roof is in trouble...
Call us on the double!
Contact Us
If your roof needs attention, call us to schedule an appointment for a free estimate on repairs or replacement of your roof.
Spread the Word
Become our friend on Facebook! We'll keep you posted on things you need to look for when it comes to maintaining your home.


text:
Get Window Tinting You Can Trust For Comfort, Style & Privacy
When shopping for window tint near Saint Stephens Church, visit a dealer you can trust to complete the project on time and on budget. Browse a variety of tint shades for your home, car, or commercial window tinting needs at your nearby location. Rest assured, our window tint is custom cut for your business, home, or car windows to ensure a perfect fit—always. With our window films, you never need to worry about the bubbling, peeling, or discoloration that often happens with lower-grade films; our films are made to last!What's more, when your window film is professionally installed by one of our factory-trained technicians, you could get the additional protection of a lifetime limited warranty. In the unlikely event that bubbling or fading does occur, give us a call. We'll remove and replace your car, office, or home window tint completely free of charge.
Install window tinting for a cooler, more comfortable drive
Continued exposure to sunlight and heat can damage the interior of your car, especially in the long-term, and cause the upholstery or dash to crack, peel, or fade. LLumar window tints give drivers superior protection and value for their money. When you tint your car windows, you help protect the interior of your car (and everyone in it) from the sun's distracting glare and harmful rays. Ranging from clear to dark charcoal, your tinting company offers a full line of car window tint shades for you to choose from. Note that some states may have legal limitations on the level of darkness you can select for your car window tint. Curious about your state's car tinting laws? Call or visit today to check out your options and to learn more!
Home window tint: For security, privacy & home energy savings
When installed by one of our expert technicians, home window tint offers your family additional protection from harmful ultraviolet rays and sometimes, important privacy. Residential window tinting could help your flooring and treasured artwork and furnishings stay in like-new condition!And did you know? It helps block up to 99% of the ultraviolet rays that cause discoloration and fading. Over the spring and summer months, it helps keep your home at a more comfortable temperature. After having their residential window tint installed, many satisfied customers have even reported that their home energy costs have gone down by as much as 15%. As an added bonus, LLumar is LEED-certified, which means you could save even more cash through tax credits and incentives from the city or government.
Office window tinting: Convey style & curb energy costs
When you choose custom window tinting for your business, you can help limit your facility's energy expenses while achieving a look that's professional, polished, and unique to your company. Choose from a wide variety of tint shades, ranging from translucent to deep charcoal. After it's installed by the professionals from your LLumar dealer, you'll see that LLumar's non-reflective window tint offers a consistent look that seamlessly complements the existing style of your building. Dual-reflective options are also available for companies that need a glossy exterior to improve solar heat rejection, but a less reflective interior for additional privacy in the evening. When it comes to commercial spaces, window tint isn't just for the exterior of buildings. Inside your building, it can add style and privacy to bland interior office windows, expansive conference rooms, and overlooked stairwells. Visit or call a LLumar window tinting dealer near Saint Stephens Church to get help designing your custom commercial tinting project today!
Get superior service from your LLumar tinting company
Your window tint installation is fast and hassle-free when you stop by your nearby LLumar company. Many window custom order window tint projects can be finished within a few days, though it depends on size of the car, home, or commercial space. For the most part, a typical installation takes around 15 minutes per window. Visit a LLumar window tint dealer for window tinting installation and service you can trust. From commercial or home window tinting that requires opaque, translucent, mirrored, reflective, or color-tinted films, we're ready to help you select the optimal one for your project. Schedule your installation today! Call or visit a LLumar installer near Saint Stephens Church to learn more about your window tint options and to get a free quote. Appointments fill up fast!Live, work, and drive in greater comfort!
Find Nearby LLumar Dealers
Find Dealers in Nearby Cities
- Dunnsville
- Weems
- Shacklefords
- Barhamsville
- Kinsale
- Chaptico
- Clements
- Lottsburg
- Avenue
- Cobb Island
- Manquin
- Issue
- Piney Point
- Mattaponi
- Caret
- Tall Timbers
- Center Cross
- Walkerton
- Bushwood
- Dahlgren
- Locust Hill
- Port Royal
- Newtown
- Champlain
- Water View
- Jamaica
- Abell
- Coltons Point
- Hustle
- King And Queen Court House
- Oldhams
- Bruington
- Little Plymouth
- Rappahannock Academy
- Church View
- Laneview
High Quality Window Tint for Homes, Cars & Offices Near Saint Stephens Church
If you live near the Saint Stephens Church area, turn to LLumar's professional dealers to install high quality tint. Live stylishly, help lower your energy costs, and drive more comfortably with commercial, residential, and car window tinting. For more than half a century, LLumar window tints have offered superior, one-of-a-kind protection from the sun's heat and destructive rays. Wherever you work or play, and whatever you drive, we're here to help you live a cooler and more comfortable life!Rest assured, your nearby window tint installer has been exclusively selected and certified to ensure that you have the finest service experience. Drop by a LLumar dealer near you in Saint Stephens Church for a free and fast window tinting estimate today!


text:
Painter in Detroit
High Quality Painting & Drywall Services (Detroit) Professional drywall, plastering & painting services for residential and commercial structures. We have over 30 years experience specializing in fire damaged properties. Free estimates and same day services.
Painter Details
|Email Address
|Phone Number
|313-743-... Confirmed
Notes made here will only be seen by you. If you want to message the owner of this listing
More in Detroit, Michigan
Looking for Painters in Detroit, MI?
Find available jobs in your city.


text:
This gallery contains 2 photos.
Judge's Report By Oz Hardwick I didn't think to count the number of poems with which I started – it was the sort of pile I'd be more inclined to weigh than count, anyway – but after careful and … Continue reading
This gallery contains 2 photos.
Judge's Report By Oz Hardwick I didn't think to count the number of poems with which I started – it was the sort of pile I'd be more inclined to weigh than count, anyway – but after careful and … Continue reading
Bone china
I begin as dust – ash and white –
crushed ossein with feldspar,
powdered glass, fluxed, now clay
slaked for the wheel's cool head.
I am in your hands, under,
between your hands. You feel
the lacuna not in bone but bole,
press out flaws with skilled fingers,
slowly pull me to form;
caress me with wet hands,
cut me with your ribs,
whirling mud in damp delight.
Giddy, I appear,
thrown, submissive, cleaved –
yet coming into my power.
Leather-hard, now leave
your mark, delicate sgraffito
beneath my coat, my fine slip,
the linear stroke, gestural score
with sharpened and blunt pen
tools. Now take your crazed bisque,
crackled and combed,
fettled and feathered, to the fire,
the point of fusion, glaze-high.
Never break me. My dust is dangerous –
stays in the lungs forever.
Yet do not put me on display,
rather let stay on your lips.
Fill me with your pleasure –
hot, steaming, fragrant.
Lee Nash. Commended
Posted in Sentinel Champions
Tagged August 2015, Bone China, Commended, Lee Nash, sentinel champions
Portrait of a Lady c.1465 National Gallery, by Alesso Baldovinetti (c. 1426-99)
For Tessa Traeger
It was easy, helping her from the frame –
the way I'd seen a footman hand a lady
from her coach – but everything looked the same:
her profile, pearls in the blonde hair, was ready
for the next Sunday visitor, while we
(her spirit, not the picture) went for tea.
'I've not been out for years,' she sighed,
'so thank you for inviting me'. 'What would
you like?' I asked. 'Just to look,' she replied.
'Seeing young people eating is so good.'
When someone scraped a chair across the floor,
she jumped, as if she'd heard a lion roar –
'which actually, I did – at Carnival one year,'
she laughed, relaxed: 'the old duke had one brought
to Florence to amuse his friends – oh dear,
the beast ran off, although it was soon caught.
Why do young women show their underclothes?'
'Street fashion,' I grumped, 'means anything goes –
but please may I ask you something? Those palms
stitched on your sleeve – are they significant?'
'Ah, my label – curators have no qualms
about regaling folk with their redundant
and hopeful speculations. No, that "symbol"
was just a joke among my girlfriends' circle –
we all wore it one month to tease our men
and naturally it worked extremely well.
So I wore it when we had the portrait done.
Any other falsehoods I should dispel?'
'I've always wondered, do you think it's you? –
assuming that a portrait can be true.'
'It's me. My husband didn't like the nose
because it isn't classically straight –
but it's correct. I like that. Also those
thin lips. The custom was to plump them out,
the bosom too, of course, but history
received reality – unflattered me.'
'If I may, as I've known you all these years,
there's one more thing. Now you've become great art,
what would you say you yearn for most, apart
from loved ones?' 'Well, love never disappears
(although it's time I went) but what we miss' –
and here she took a draught of breath – 'is this.'
Mark Haworth-Booth. Commended.
Posted in Sentinel Champions
Tagged August 2015, Commended, Mark Haworth-Booth, Portrait of a Lady, sentinel champions
The Love Song of Air
I've brought you a warm Windrush wind.
Playfully it came through the bandaged poplar colonnade,
A silver glittering glissando
Rippling with applause,
Leaves belly-up – can-canning,
Her lenticel lips parted with pleasure.
(wind never knowingly blows up skirts)
Tousling the grasses long hair
Where once the picnic blanket came billowing down
Just to come face to face with dragon and butterfly
For the delicacy of kissing winged wind.
(weathervanes, windmills, washing lines, don't dream of you)
Moving in the place like us
Amongst the festival of seconds.
Speaking to liquid adagio of Windrush River
In rippled fetch of breath.
Listening to the silence of unthinking things,
Clutching light and time to stay
Gathering a fragrant bouquet of day.
(it's just atmosphere moving)
I've brought you a Corsican choir.
Three Tenors from Calvi
Two Baritones from St Florent
Two Bass from Bonifacio.
From the Cathedral where the Virgin Mary's
Eyes always watched us.
(puffed sound waves organised)
Communion of wind inhaled
Notes to our ears Notes to our hearts
Sculpting silence they sing
The love song of air.
(vibrations becoming undetectable)
Andrew Brush. Commended.
Posted in General, Sentinel Champions
Tagged Andrew Brush, August 2015, Commended, sentinel champions, The Love Song of Air
The Sea's Return Home
Our sea comes in
in tongues riffling fast as feathers,
blurred with flap and clatter, this is Babel on wheels, the agglomerated
hurl and rive, the piling on of languages, cacophanous.
A noisy rainbow's grafted itself white.
Whisht, now, it's here;
the flags of many nations flare and are let go,
utterances marked by travel are swilled back to the mother tongue.
It broadens where it shimmies in, slicks the sea steps at talk's ebb,
whispers: wheere and theere.
It knows where's home,
our own bonny polyglot, always quick to catch on,
we all of us said it'd go far (and how!).
It fairly shot up – and out – but never despised its roots.
Scuffing on the doormat,
joggling the sneck,
it's got its proper accent pat, slotted back,
backlogged with craic and ripe for dishing it; it's been the Red Sea,
the Yellow and Black. The last lees of clatter filter out,
through the scrawp of stones, the wheezing frequencies.
Jason Lytollis. Highly Commended
The Unloved
Quietly, like the moon breathing,
she folds everything that she is
into the grey handkerchief of herself.
Into her grubby square, she drops
her dead parents' iced eyes, glazed
over with misgivings, resentments,
disappointment's cataracts.
(They never could see
the wood for the trees.)
Next, she rests, gently,
her redundant love that
nobody ever wanted. Her
odds and ends, her remnants,
her remains, withdrawn now from
her platter offered to a cruel world.
Juggling, in the cotton rag,
scraps thrown to her over
a lifetime of loneliness and warmth's
occasional crumbs that she existed on,
she starts to stride out from
her familiar neighbourhood.
Passing stark landmarks, silences,
moments frozen in a dark time,
blurry now, corners where
she was mercilessly taunted,
she walks, her hair salt candyfloss,
towards the cliffs that hold the mad sky up.
And she keeps going.
E K Wall Highly Commended
Posted in Sentinel Champions
Tagged August 2015, E.K. Wall, Highly Commended, sentinel champions, The Unloved
Coal Shed
It was there long after the outside toilet
Was demolished, lingered when the
Entire back yard – small cherry tree,
Sand pit – was concreted, even when itself
Was turned into a tool shed, it hung round,
Drawing my eye-flicking to where
It wasn't and hadn't ever
Been. The bottom board, side- and cross-slats unbound
The coal hole, blacked with slack and shadow. Bonfire
Night's dark was scrubbed up, spit-and-polished
By it, and on grey days I thought it
Pooled the parasitic floaters in my eyes
In blurs more infinite than things. Its pull
Thralled me. In comparison El
Greco's ophidian maw of hell
Is childish. Thirty-six feet cubed, half-full
Of coal then nothing, is awe. My son fears
The curtained off under-stairs. It's
Half-full of odds and sods too, bits
Of shadow and the countenance that nears
As I bend over the garden's slope, into
What's held by the bent trees tonight:
Dark, flaring lacquered anthracite,
Displays its star-annihilating truth.
Paul Connolly. Highly Commended. August 2015
Posted in Sentinel Champions
Tagged August 2015, Coal Shed, Highly Commended, Paul Connolly, sentinel champions
Fast Forward: The Poetry Museum
Manuscripts outliving attributions;
ancient phonemes juddering on the tongue,
pentameters worn catalectic.
'Daffodils': prehistoric flora (see ferns
or bryophytes). Source: Digidata.
We have a piece called 'Tintinnabulation,
words written above' unknown location claiming
resonances across the supereons
from 'henges' (no data). 'A sense sublime'
pertaining to receptors now vestigial.
Wordsworth [obscure]: a talismanic term
or else descriptor of outworn literature;
as in 'had its words' worth' see also Lord Bryan,
Shirley-Ann Keats, Blake Williams, Saint Coleridge.
Q.v. Romanticism – a reproductive kink?
This final artefact has ships, towers, domes:
a literary idyll called Westminster, home
to chimes, assumed rung out.
The reference to, 'That mighty heart', is
thought physiological, relating to
the species before homo proximus.
'The inward eye', an early digitised brain?
Why would a race with non-interposable thums
assume persistence through a billion years
or think their art could outlast its analogues?
Jason Lytollis. 3rd prize. August 2015
Lion in Chingola
strangers surround him,
touch his lifeless paws; I hold my father's hand,
watch the bare-chested men
wipe their shotguns – expect his mouth to open,
to roar, to eat me up:
he lies centre stage in a bungalow lounge,
no bones, no flesh, a mouth with no tongue;
I stroke his quilt of beige-gold skin, uli musama*
tail-swipe my brother poking sixpences
through bullet holes:
outside, men slash sun-burnt grass,
inside my mother sleeps, curtains drawn
another migraine, the air dense.
*he's beautiful (Bemba)
Audrey Ardern-Jones. 2nd prize August 2015
Posted in Sentinel Champions
Tagged Audrey Ardern-Jones, August 2015, Lion in Chingola, sentinel champions
The hunger-monger
He can be a hurdy-gurdy man, jangling
and cranking his drone for skeleton figures
to totter in a slow sardana. In another guise
he wears a long coat of piebald browns,
and flutes promises of asylum far away,
where beds are soft and walls protect.
He plays at vanishing, returns to tread
field-edge dust, kicks away the dying weeds.
In his wake a cow stands motionless;
its head drags skinny shoulders down,
scant measure of hay long gone,
and a child cries, nuzzles unappeased.
Shadowed by him a hugger-mugger crowd
drags bundles to a drab encampment
where they may be fed. After empty days
they have forgotten what it is to eat.
In presidential corridors he is spotted
dressed in minion grey. He exits the rooms
of braided colonels or ministers of state
guarding a heavy bag, lips tight. And always,
like the hungry he needs to gorge upon,
he circles in and out of borderlands.
He hides in camouflage, sharing fires
by ragged shelters with the prey he trades.
Camilla Lambert. 1st prize. August 2015
Posted in Sentinel Champions
Tagged August 2015, Camilla Lambert, sentinel champions, The hunger-monger


text:
10 comments:
Well, I'm not Santa but I now want to get this sweet little guy a new Frisbee. He's so sweet. I love him. :)ReplyDeleteReplies
Angie, you are too kind!Delete
Santa is a bit busy right now but Mother Christmas [who has a deep softness for Border Collies] has taken note....ReplyDeleteReplies
{{{{{{ xo }}}}}Delete
But of course, only if you've been a very good dog, but with that face you could've have been anything else :-)ReplyDeleteReplies
... she's been a VERY good girl this year and I admit,Delete
this is one *look* I find hard to resist ;>]]
Beautiful wreath and surely that face will ensure that the frisbee arrives.ReplyDelete
I have a sneaky suspicion that she will have her heart's desire.ReplyDelete
Thanx Maggi!
I think she deserves 2!ReplyDelete
Merry Christmas.
BTW: My Christmas present from my 18 yr old grandson came early. His name is Bosco and he is a brindle Boxer/mix. Corey knows the way to his Bama's heart ~lol~Replies
A great prezzie, Carol, will we see some pix soon??? Merry, merry to you, too!Delete