PacketFence - Change Log PacketFence - trunk =================== - 0001361: [web admin] Emptying a configuration parameter doesn't work from web admin and pfcmd (obilodeau) - resolved. - 0001352: [configuration] Misleading error message if missing management type (obilodeau) - resolved. - 0001250: [addons] pfcmd_vlan getSwitch location (obilodeau) - resolved. - 0001369: [hardware modules] thread crash with floating network devices with VoIP through SSH transport (obilodeau) - resolved. - 0001370: [hardware modules] Net::Appliance::Session privilege detection broken resulting into a thread crash (obilodeau) - resolved. - 0001368: [captive portal] passthrough doesn't work with domains without an ending slash (ex: http://www.google.co.uk) [^] (obilodeau) - resolved. - 0001358: [addons] web/custom.pm (obilodeau) - resolved. - 0001357: [logging] Spelling mistake /pf/lib/pf/node.pm (fgaudreault) - resolved. - 0001071: [web admin] most lists in the web admin don't remember your position bringing you back to page 1 on deletion (obilodeau) - resolved. PacketFence - 3.1.0 =================== - 0001320: [core] MAC violation trigger (obilodeau) - closed. - 0001349: [core] Centos 6.1 fails to start packetfence (obilodeau) - closed. - 0001335: [web admin] interface enforcement not exposed through CLI or Web Admin (obilodeau) - closed. - 0001330: [IDS] Isolation doesn't cut active connections in inline mode (obilodeau) - closed. - 0001322: [core] Slash in PID (obilodeau) - closed. - 0001327: [web admin] /soh is not found (fgaudreault) - closed. - 0001343: [dhcp] stop closing iplog when we stop packetfence (obilodeau) - closed. - 0001110: [web admin] Buttons in graphs.php of type ifoctetshistoryswitch, ifoctetshistoryuser, ifoctetshistorymac (fgaudreault) - closed. - 0001291: [core] normalize_time doesn't handle months (fgaudreault) - closed. - 0001257: [configuration] named.conf template on centos 6 (dwuelfrath) - closed. - 0001151: [dhcp] Rogue DHCP detection with IP Helpers (obilodeau) - closed. PacketFence - 3.0.3 =================== - 0001078: [web admin] Popup windows too small (fgaudreault) - closed. - 0001284: [hardware modules] SNMPv3 with Cisco Catalyst 2950 (obilodeau) - closed. - 0001286: [802.1x] 802.1x Broken on Cisco Catalyst 3750 (obilodeau) - closed. - 0001290: [web admin] CSS of navigation menu is broken when an error is displayed (obilodeau) - closed. - 0001319: [core] Does not install on RedHat 6.1 without modifications. (obilodeau) - closed. - 0001325: [core] inline mode is not working, vlan re-evaluation fails (obilodeau) - closed. - 0001328: [captive portal] pf::web::guest missing a perl include (obilodeau) - closed. - 0001333: [web admin] Request to be able to modify from the GUI, the sending email address (obilodeau) - closed. - 0001336: [dhcp] VLAN encapsulation information messes up pfdhcplistener (obilodeau) - closed. PacketFence - 3.0.2 =================== - 0001351: [configuration] i can't change email_activation_timeout - closed. - 0000989: [feature] allow authentication module to update person or node (obilodeau) - closed. - 0001302: [captive portal] People cannot confirm email registration on some cases (fgaudreault) - closed. - 0001285: [feature] add trigger or cascade to delete node_useragent when deleting a node (dwuelfrath) - closed. - 0001298: [core] nodes are not unregistered on unregdate unless an expire mode is activated (dwuelfrath) - closed. - 0001242: [configuration] Doubled allow network subnets in generated captive-portal-common.conf (fgaudreault) - closed. - 0001316: [configuration] iptables default config doesn't accept broadcasts (obilodeau) - closed. - 0001315: [core] false error on de-registration (obilodeau) - closed. - 0001309: [captive portal] Phone provider not kept in guest form (francis) - closed. - 0001308: [captive portal] guest access by sms doesn't record firstname, lastname (obilodeau) - closed. - 0001301: [web admin] Pre-registered guest unregdate not there (obilodeau) - closed. - 0001296: [security] XSS in captive portal web interface (several files) (obilodeau) - closed. - 0001234: [web admin] OS report is not visible when there are a lot of different OSes on the network (fgaudreault) - closed. - 0001294: [security] Session state shared between captive portal and guest management web interfaces (obilodeau) - closed. - 0001293: [security] Issues with LDAP-based authentication in web administration interface (login.php) (obilodeau) - closed. - 0001292: [security] XSS in web adminstration interface (login.php) (obilodeau) - closed. - 0001289: [web admin] Dashboard won't give SQL stats if MySQL is running on another machine (fgaudreault) - closed. - 0001287: [captive portal] Unreliable encoding behavior messes up with translations (francis) - closed. - 0001273: [core] enforcement calls should be executed by root (obilodeau) - closed. - 0001295: [security] Command injection in guest management and captive portal web interfaces (obilodeau) - closed. PacketFence - 3.0.1 =================== - 0001274: [error-handling] installer.pl reporting that PF is untested using CentOS 6 (fgaudreault) - closed. - 0001277: [captive portal] Cannot confirm PIN when using self-registration (SMS) (francis) - closed. - 0001280: [core] Accounting error on nodeaccounting view all (fgaudreault) - closed. - 0001282: [core] pf database user does not have rights to execute stored proc (fgaudreault) - closed. PacketFence - 3.0.0 =================== - 0001119: [web admin] Administrative actions should be done with POST instead of with GET (obilodeau) - closed. - 0001114: [captive portal] Improved translated strings integration in captive portal templates (obilodeau) - closed. - 0001227: [core] Reintroduce inline mode as a first class citizen (obilodeau) - closed. - 0001051: [radius module] radiusd restarted by PacketFence (obilodeau) - closed. - 0001238: [hardware modules] Nortel ERS breaking naming change (fgaudreault) - closed. - 0000982: [captive portal] Improve HTML of registration pages (obilodeau) - closed. - 0000762: [refactoring] All temp files are not in var/ (obilodeau) - closed. - 0000822: [captive portal] Translation of remediation pages (obilodeau) - closed. - 0001239: [core] PacketFence won't start if no inline interface (obilodeau) - closed. - 0001211: [web admin] split() is deprecated in php 5.3 (obilodeau) - closed. - 0001244: [packaging] CentOS / RHEL 6 support (fgaudreault) - closed. - 0001258: [configuration] snort pidpath (obilodeau) - closed. - 0001221: [configuration] configurator.pl does not show interfaces without IP address (obilodeau) - closed. - 0001226: [packaging] freeradius package bootstrap (fgaudreault) - closed. - 0001231: [core] Custom VLAN assignments relying on connection_type will fail on "unknown" nodes (obilodeau) - closed. - 0001243: [core] duplicate entries errors in pf::os::read_dhcp_fingerprints_conf at pfcmd service ... start or pfcmd update oui|fingerprints (obilodeau) - closed. - 0001255: [web admin] Export node missing some icons (obilodeau) - closed. - 0001182: [core] Route injection should be kept separated than dhcpd=enabled under conf/networks.conf (obilodeau) - closed. - 0001098: [core] hard-coded snmptrapd invocation fails on "printable" MAC addresses (obilodeau) - closed. - 0001080: [web admin] Show some of the latest packetfence log entries somewhere under administration (obilodeau) - closed. - 0000980: [refactoring] Merge remediation pages and registration stylesheets (CSS) (obilodeau) - closed. - 0000828: [future] Remove support for Apache pre 2.2 (obilodeau) - closed. - 0001087: [scanning] nessus scans don't work with bin/pfcmd setuid/setgid (which is the default) (obilodeau) - closed. - 0001263: [core] iptables chains too long (obilodeau) - closed. - 0001105: [configuration] Automatically detect local registration and isolation subnets for the dhcp and named template building (obilodeau) - closed. - 0001115: [configuration] Spanish translation and encoding (obilodeau) - closed. - 0001123: [configuration] trapping.testing should be deprecated (obilodeau) - closed. - 0001266: [captive portal] A ton of perl warnings in the apache error logs (obilodeau) - closed. - 0001264: [core] iptables error on first start (obilodeau) - closed. - 0001232: [hardware modules] Issue for telnet/ssh connection to MeruOS 4.1 (fgaudreault) - closed. - 0001229: [core] No locationLog entry is created if the NAS-Port field is blank in the RADIUS request (obilodeau) - closed. - 0001265: [web admin] Deleting a person with node associated to it silently fails (obilodeau) - closed. - 0001254: [configuration] IPtables not right for management interface if using guest management and missing apache allow subnet (obilodeau) - closed. - 0001256: [web admin] No more help popup when you click on a configuration variable (obilodeau) - closed. - 0001260: [captive portal] redirect loop on the captive portal because VLAN [re-]assignment failed (obilodeau) - closed. - 0001269: [configuration] iptables not starting if having more than 1 DNS server in the config - inline mode (obilodeau) - closed. - 0001268: [core] omitting ip=|mask= parameter in pf.conf will throw unexpected exception (obilodeau) - closed. - 0001240: [configuration] Missing iptables chain for heartbeat (obilodeau) - closed. - 0001246: [captive portal] auth=email (obilodeau) - closed. - 0001252: [web admin] add a pfcmd_pregrammar.pm test in checkup (obilodeau) - closed. - 0001248: [core] htpasswd uses md5 by default; login.php uses crypt (obilodeau) - closed. - 0001245: [captive portal] captive portal self registration (obilodeau) - closed. - 0001251: [web admin] eliminate php_value register_long_arrays from httpd.conf (obilodeau) - closed. - 0001199: [doc] Nortel documentation doesn't cover VoIP (fgaudreault) - closed. - 0001031: [error-handling] better validation for networks.conf file (obilodeau) - closed. - 0001191: [error-handling] verify log files ownership in pfcmd's sanity_check (obilodeau) - closed. - 0001187: [error-handling] Debian support: installer.pl script is hardcoded to use httpd as the apache exe file (obilodeau) - closed. PacketFence - 2.2.1 =================== - 0000815: [future] iPhone 3.0 / iPod touch Captive Portal Network Support User Agents (obilodeau) - closed. - 0001223: [zen] ZEN image has both conf/named-* and conf/named/named-* files (fgaudreault) - closed. - 0001216: [core] race condition when trying to categorize auto-registered nodes based on DHCP fingerprint (obilodeau) - closed. - 0000865: expire_deadline doesn't work in vlan isolation mode (obilodeau) - closed. - 0001217: [configuration] Error when using installer.pl (obilodeau) - closed. PacketFence - 2.2.0 =================== - 0000743: [doc] Wrong my.cnf configs in our admin guide (fgaudreault) - closed. - 0001175: [core] Add proper CDP discovery for IP Phones when in RADIUS mode (obilodeau) - closed. - 0001158: [packaging] freeradius2-packetfence package (fgaudreault) - closed. - 0001126: [web admin] SSID based report (fgaudreault) - closed. - 0001125: [web admin] Connection type report (fgaudreault) - closed. - 0001027: [radius module] freeradius needs to be configured manually (fgaudreault) - closed. - 0000992: [feature] validation should be performed on trigger ranges (fgaudreault) - closed. - 0001021: [feature] installer.pl - show *** for passwords fields in installer.pl (fgaudreault) - closed. - 0000748: [feature] have Log4perl reload the log.conf config file each minute (fgaudreault) - closed. - 0000769: [future] UserAgent violation should provide the same upgrade / query facilities as OS (obilodeau) - closed. - 0001192: [captive portal] useragent violations doesn't work on class ids (obilodeau) - closed. - 0000983: [feature] Add an email field to the DHCP fingerprint submit page (fgaudreault) - closed. - 0001204: [performance] Dynamic apache configuration based on system resources (obilodeau) - closed. - 0001202: [core] RADIUS VoIP authorization issues (obilodeau) - closed. - 0001209: [web admin] problematic password validation (obilodeau) - closed. - 0001183: [core] Nortel regressions (obilodeau) - closed. - 0001207: [configuration] SSL configuration should be in an external include instead of inline (obilodeau) - closed. - 0001181: [web admin] Class ID should be visible under Conf -> Fingerprints (fgaudreault) - closed. - 0001206: [web admin] Errors doing person lookups with pids using an email address format (obilodeau) - closed. - 0001180: [web admin] OS id not visible when dhcp-fingerprint view is filtered (fgaudreault) - closed. - 0001176: [error-handling] avoid warnings when a RADIUS Access-Request comes to an undefined switch (in switches.conf) (fgaudreault) - closed. - 0001058: [refactoring] get rid of pf::SNMP::connectMySQL and associated $this->{_mysqlConnection} (obilodeau) - closed. - 0001154: [core] Violation grace timer (fgaudreault) - closed. - 0001195: [core] BayStack 470 48-T VoIP autoreg (obilodeau) - closed. - 0000969: [web admin] admin ui options deconfigure users on first run (obilodeau) - closed. - 0001212: [radius module] packetfence-freeradius2 Install issue (obilodeau) - closed. - 0001198: [packaging] logrotate improvements (fgaudreault) - closed. - 0001205: [configuration] Winbind unable to map foreign SIDs (fgaudreault) - closed. - 0001196: [web admin] dashboard called instead of dashboard.php (obilodeau) - closed. - 0001166: [configuration] move configuration files from conf/templates/ to conf/ (obilodeau) - closed. PacketFence - 2.1.0 =================== - 0001185: [captive portal] Support for using apache exe name "apache2" (obilodeau) - closed. - 0001026: [core] PacketFence does not handle very well the AutoReg violation in some cases (obilodeau) - closed. - 0000767: [future] misleading registration queue size messages (obilodeau) - closed. - 0001190: [regression] pfcmd_vlan -reAssignVlan doesn't handle MAB / dot1x (obilodeau) - closed. - 0001188: [upstream] Ubuntu / NetworkManager / Linux kernel doesn't do DHCP after a 2 second link down (obilodeau) - closed. - 0001177: [error-handling] editing a node that never connected to the network generates an error (obilodeau) - closed. - 0001173: [error-handling] Warnings in node lookup on both CLI and Web interfaces (obilodeau) - closed. - 0001165: [captive portal] failing perlcritic tests in pf::web (obilodeau) - closed. - 0001025: [error-handling] check if bin/pfcmd is setuid on sanity_check (obilodeau) - closed. - 0001014: [configuration] configuration template in conf/ and generated config files in var/ (obilodeau) - closed. - 0000832: [future] Warning in vlan.pm around line 152 (obilodeau) - closed. PacketFence - 2.0.1 =================== - 0001065: [regression] pfdhcplistener warnings / crashes since 1.9.0 or mod_perl? (obilodeau) - closed. - 0000987: [hardware modules] authorizeMAC of Cisco Catalyst 2960 has a bug (obilodeau) - closed. - 0001160: [core] pfcmd initiated VLAN re-evaluation doesn't include new locationlog parameters (obilodeau) - closed. - 0001157: [regression] dot11Deauthentication traps causing warnings and potentially crashing threads (obilodeau) - closed. - 0001150: [error-handling] pfdhcplistener warning and exception if interface name provided doesn't exist (obilodeau) - closed. - 0001149: [dhcp] pfdhcplistener not properly updating iplog when configured with ip-helpers aka pfdhcplistener should update iplog on DHCP INFORM (obilodeau) - closed. - 0001148: [configuration] configurator.pl is not building clean configuration files (obilodeau) - closed. - 0001146: [configuration] installer.pl not working if providing empty root password (obilodeau) - closed. - 0001139: [refactoring] Expand support for Meru Contollers (fgaudreault) - closed. - 0001138: [configuration] Snort configuration template is missing a variable (fgaudreault) - closed. - 0001018: [upstream] iPad DHCP problems (obilodeau) - closed. - 0000994: [hardware modules] extract SSID for Cisco WISM/WLC controller (obilodeau) - closed. - 0001162: [core] Node view database query reporting wrong values (obilodeau) - closed. PacketFence - 2.0.0 =================== - 0000774: [doc] heading documentation style confusion (fgaudreault) - closed. - 0000872: [future] mac-auth, mac-bypass, 802.1x wired and 802.1x wireless are not the same and should be treated as such (obilodeau) - closed. - 0000820: [web admin] implement default sorting in the web admin (obilodeau) - closed. - 0000874: [error-handling] pfcmd_vlan should log at the same place as everyone else (obilodeau) - closed. - 0000772: [future] Support for passthrough in vlan isolation mode (obilodeau) - closed. - 0001035: [captive portal] Captive portal should be able to capture clients using a proxy (obilodeau) - closed. - 0001113: [doc] Re-validate install guide / admin guide with new dhcpd and bind handled by default (rbalzard) - closed. - 0001028: [configuration] adding radius clients needs to be performed from the command line (obilodeau) - closed. - 0001024: [regression] absolute violation URLs are not proxied appropriately with apache 2.2 (obilodeau) - closed. - 0001075: [web admin] OS # is not visible anywhere (obilodeau) - closed. - 0001086: [packaging] PacketFence package group in our yum repo (yum groupinstall ...) (fgaudreault) - closed. - 0001088: [error-handling] error reporting on file permission errors (switches.conf, pf.conf, violations.conf) (obilodeau) - closed. - 0001089: [doc] update installation guide with new yum install procedure (fgaudreault) - closed. - 0001101: [IDS] Emerging Threats Rules changes (fgaudreault) - closed. - 0001102: [configuration] installer.pl needs to be updated for emerging threats changes (obilodeau) - closed. - 0001107: [doc] database schema in Administration Guide is very outdated (obilodeau) - closed. - 0001112: [configuration] configurator.pl and conf/networks.conf (rbalzard) - closed. - 0001012: [refactoring] move radius constants in pf::config (obilodeau) - closed. - 0001010: [radius module] several SOAP issues (obilodeau) - closed. - 0000971: [feature] Forward port node categorization into new rlm-soap code (obilodeau) - closed. - 0000914: [refactoring] node table should not carry data duplicated from locationlog (obilodeau) - closed. - 0000973: [feature] Get rid of the database md5sums, they are useless (obilodeau) - closed. - 0000977: [refactoring] VLAN field in node table should be re-thought (obilodeau) - closed. - 0000995: [feature] Add an SSID field to the locationlog table (obilodeau) - closed. - 0001001: [refactoring] constants are not inherited in our <xxx>/custom.pm modules (obilodeau) - closed. - 0001002: [feature] Optional auto-registration of authenticated devices (obilodeau) - closed. - 0001034: [radius module] Our freeradius module is not aware of EAP's success or failure (obilodeau) - closed. - 0001000: [feature] add 802.1x $user_name to the method signature of pf::vlan::getNodeInfoForAutoReg (obilodeau) - closed. - 0001006: [core] Formatting issues in node lookup (obilodeau) - closed. - 0001008: [802.1x] Provide a VoIP example in pf::radius::authorize_voip (obilodeau) - closed. - 0001009: [regression] node auto-registration bug in trunk (obilodeau) - closed. - 0000332: [captive portal] Wifi and connections to wrong SSID (obilodeau) - closed. - 0000631: [1.8.x] use UNIVERSAL::require instead of string eval require (user4) - closed. - 0000510: [1.8.x] pfcmd violation edit => Use of uninitialized value in concatenation (.) or string at ./pfcmd line 1372. (user4) - closed. PacketFence - 1.9.1 =================== - 0000764: [packaging] no copyright, license info and POD doc in redir.cgi (obilodeau) - closed. - 0001068: [core] print statement in pf::node::node_modify cause all sorts of problems (obilodeau) - closed. - 0001063: [error-handling] warnings in logs for pf::vlan line 100 (obilodeau) - closed. - 0001057: [error-handling] registration.maxnodes is not enforced the same way on the captive portal and in pfcmd manage register (obilodeau) - closed. - 0001056: [web admin] viewing nodes per node category with a node category with spaces in it's name fails (obilodeau) - closed. - 0001055: [web admin] deleting a node breaks paging (obilodeau) - closed. - 0001052: [core] pf::SNMP not properly initialized or configuration parsing problem? (obilodeau) - closed. - 0001047: [packaging] missing dependency Authen::Radius for authentication::radius (conf/authentication/radius.pm) (obilodeau) - closed. - 0001037: [doc] Cisco 4500 series config ifIndexes misleading (rbalzard) - closed. - 0001036: [doc] wireless configuration documentation in the admin guide is out-dated (for FreeRADIUS 1.x) (rbalzard) - closed. - 0000965: [web admin] Admin Portal - Granular Access Control (obilodeau) - closed. - 0000879: [performance] captive portal "denial of service" (obilodeau) - closed. - 0000857: [performance] violation_trigger spawns a process for violation add then violation add says grace period not over (obilodeau) - closed. - 0001072: [doc] performance optimization regarding user-agents (rbalzard) - closed. PacketFence - 1.9.0 =================== - 0000934: [feature] PacketFence should always manage dhcpd and named (obilodeau) - closed. - 0000903: trying to find MAC address on ifIndex x30 times can be very long (obilodeau) - closed. - 0000863: web admin's node tab is slow when there are a lot of nodes (rbalzard) - closed. - 0000847: [error-handling] error handling: grammar validation errors (obilodeau) - closed. - 0000942: [regression] problem with pfcmd's locationhistorymac and locationhistoryswitch (obilodeau) - closed. - 0000940: [regression] Net-snmp 5.4 traps not regonized (obilodeau) - closed. - 0000931: [packaging] rpm package conflict between perl-gettext and perl-Locale-gettext (obilodeau) - closed. - 0000946: [packaging] pass source_release as an external rpmbuild parameter (obilodeau) - closed. - 0000927: [web admin] VLAN field in node view should be re-labeled (obilodeau) - closed. - 0000950: [doc] admin guide: two typos (obilodeau) - closed. - 0000951: [doc] talk about MySQL blocked host message in the admin guide (obilodeau) - closed. - 0000952: [web admin] VoIP option should be a dropdown in configuration -> switches (add and edit) (obilodeau) - closed. - 0001007: [radius module] missing radius attribute in freeradius 2: Client-IP-Address (obilodeau) - closed. - 0000998: [doc] routing documentation leads to a warning on startup (pf::services line 380) (rbalzard) - closed. - 0000993: [error-handling] Warnings and crash on startup if SNMPVersionTrap is not defined (obilodeau) - closed. - 0000975: [regression] configurator.pl should at least provide templates that works for packetfence in vlan isolation (obilodeau) - closed. - 0000972: [error-handling] bin/pfcmd "Command not understood." (obilodeau) - closed. - 0000968: [feature] node category support (obilodeau) - closed. - 0000964: [error-handling] Web admin error reporting regexp is too strict (obilodeau) - closed. - 0000961: [error-handling] no validation whatsoever in cgi-bin/release.cgi line 82 (obilodeau) - closed. - 0000923: [web admin] switch edit / switch duplicate dialogs are ugly because of long switch names (obilodeau) - closed. - 0000921: [future] generateFakeMac() in Cisco.pm does not work on Catalyst 2960 with Fa and Gi nor with Staked switches (obilodeau) - closed. - 0000984: [regression] multiple problems with reports (obilodeau) - closed. - 0000785: [future] when the grammar doesn't validate, it causes pfcmd calls to fail silently (obilodeau) - closed. - 0000833: [upstream] Parse::RecDescent 1.962 regression (obilodeau) - closed. - 0000858: [error-handling] pfdhcplistener crasher? (rbalzard) - closed. - 0000866: [packaging] unnecessary dependencies: modules for testing (obilodeau) - closed. - 0000868: [packaging] RPM spec wrong perl depenency (obilodeau) - closed. - 0000869: [packaging] installer confusing on upgrades regarding what to do with database (obilodeau) - closed. - 0000885: [web admin] link on PacketFence logo points to localhost on the admin page (obilodeau) - closed. - 0000886: [error-handling] cleanup: without trapping.passthrough packetfence doesn't start in vlan mode (obilodeau) - closed. - 0000888: [packaging] Packaging is mixed up between packetfence and packetfence-remote-snort-sensor (obilodeau) - closed. - 0000896: [configuration] HTC Android and iPhone DHCP fingerprint in wrong device class (obilodeau) - closed. - 0000908: updating the useragent from the captive portal triggers a VLAN change through generate_switchport_vlan_assignment (obilodeau) - closed. - 0000910: [performance] inefficient vlan_determine_for_node() and custom_getCorrectVlan() instantiate SwitchFactory unnecessarily (obilodeau) - closed. - 0000911: exclamation point (!) is not accepted as a valid parameter in grammar (obilodeau) - closed. - 0000916: [web admin] memory displayed in the dashboard should not include buffers and cache (obilodeau) - closed. - 0000766: [error-handling] better error message when switches.conf has two switches with the same IP (obilodeau) - closed. PacketFence - 1.8.5 =================== - 0000859: [error-handling] error handling: thread failed to start: Can't call method "getSecureMacAddresses" without a package or object (obilodeau) - closed. - 0000805: [packaging] packetfence's init.d script condrestart not optimal (obilodeau) - closed.