{"id":165282,"date":"2026-03-19T11:11:55","date_gmt":"2026-03-19T09:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-samba-4-24-0"},"modified":"2026-03-19T11:11:55","modified_gmt":"2026-03-19T09:11:55","slug":"vypusk-samba-4-24-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-samba-4-24-0","title":{"rendered":"Samba 4.24.0 v\u00e4ljaanne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u00e4rast 6-kuulist arendust\u00f6\u00f6d on v\u00e4lja antud Samba 4.24.0, mis j\u00e4tkab Samba 4 haru arendust ning sisaldab t\u00e4ielikku domeenikontrolleri ja Active Directory teenuse rakendust, mis on \u00fchilduv Windows Serveri rakendusega ja suudab teenindada k\u00f5iki toetatud Microsofti Windowsi klientide versioone, sealhulgas Windows 11. Samba 4 on mitmeotstarbeline serveritoot, mis pakub ka faili serveri, printimisteenuse ja identifitseerimissea (winbind). Projekti kood on kirjutatud C keeles ja jagatakse GPLv3 litsentsi alusel.      <\/p>\n<p>Samba 4.24 peamised muudatused:  <\/p>\n<ul>\n<li class=\"l\"> Uus VFS moodul vfs_aio_ratelimit, mis piirab as\u00fcnkroonsete sisend-\/v\u00e4ljundoperatsioonide (AIO) intensiivsust (rate-limit). Piirangud v\u00f5ivad olla m\u00e4\u00e4ratud baitides sekundis v\u00f5i operatsioonides sekundis. Kui m\u00e4\u00e4ratud piiri \u00fcletatakse, hakkab moodul sisestama kunstlikke viivitusi as\u00fcnkroonsetesse operatsioonidesse, et hoida m\u00e4\u00e4ratud \u00fclemist piiri.\n<li class=\"l\"> VFS moodulisse vfs_ceph_new on lisatud RPC-protokolli Keybridge ja FSCrypt re\u017eiimi tugi, et kr\u00fcpteerida andmeid ja failide nimesid CephFS failis\u00fcsteemis. Kr\u00fcptimise lubamine on v\u00f5imalik individuaalsete kataloogide tasandil.\n<li class=\"l\"> VFS-mooduli vfs_streams_xattr, mis v\u00f5imaldab salvestada NTFS alternatiivseid andmestikke (NTFS alternate data stream) failide laiendatud atribuutides (xattr) Linuxis, on lisatud seadistus \"streams_xattr:max xattrs per stream\", mis m\u00e4\u00e4ratleb lubatud xattr-de arvu andmete salvestamiseks. Linuxis on xattr suurus piiratud 65536 baitiga, kuid XFS failis\u00fcsteem v\u00f5imaldab seostada \u00fche faili k\u00fclge rohkem kui \u00fchte xattr, mis v\u00f5imaldab kasutada mitmeid xattr, et salvestada kuni 1 MB alternatiivseid andmeid.\n<li class=\"l\"> On teostatud toe kasutuselev\u00f5tt autentimisega seotud teabe auditeerimiseks. Lisatud silumisklassid \"dsdb_password_audit\" ja \"dsdb_password_json_audit\", et kajastada logis Active Directory atribuutide muudatusi: altSecurityIdentities, dNSHostName, msDS-AdditionalDnsHostName, msDS-KeyCredentialLink ja servicePrincipalName.\n<li class=\"l\"> On lisatud tugi v\u00e4listele paroolihalduse s\u00fcsteemidele Microsoft Entra ID ja Keycloak, mis kasutavad parooli muutmise korral parooli l\u00e4htestamise operatsiooni (SSPR, password reset) ilma vana parooli edastamiseta kontrollerile. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/domain\/\" title=\"domeen\" data-wpil-keyword-link=\"linked\">domeen<\/a>. Poliitikate j\u00e4rgimiseks, mis kontrollivad paroolide kehtivusaja pikkust, edastatakse parooli l\u00e4htestamisel t\u00e4iendavad parameetrid (\"paroolipoliitika vihjed\"), mis v\u00f5imaldavad toimingut k\u00e4sitleda nagu tavap\u00e4rast parooli vahetamist. N\u00fc\u00fcd arvestab Samba selliste parameetritega kohalike paroolipoliitikate rakendamisel.\n<li class=\"l\"> On lisatud toe mehhanismi autentimisele Kerberos PKINIT KeyTrust, mis v\u00f5imaldab Samba ja Heimdal KDC dom\u00e4\u00e4ni kontrollerites kasutada meetodit \"Windows Hello for Business Key-Trust logons\" PKINIT autentimise mehhanismi rakendamiseks iseliigendatud v\u00f5tmete abil. Ava v\u00f5tme lisamiseks ja vaatamiseks samba-tool utiliidi juurde on lisatud k\u00e4sk \"user|computer keytrust\". Teave avatud v\u00f5tme kohta salvestatakse konto alla msDS-KeyCredentialLink attribuudiga.\n<li class=\"l\"> Samba ja Heimdal KDC dom\u00e4\u00e4ni kontrolleritesse on lisatud toe Kerberos PKINIT protokolli laiendusele v\u00f5tmete kaardistamise jaoks (\"Windows Strong and Flexible key mappings\"), mida rakendatakse avatud v\u00f5tmete autentimise k\u00e4igus. Vaikimisi on lubatud ainult t\u00e4pne sertifikaatide vastavus (\"strong certificate binding enforcement = full\"), kuid on v\u00f5imalik ka paindlik vastavus (\"strong certificate binding enforcement = compatibility\"), mis lubab sertifikaate, mis on uuemad kui kasutajakonto. Teave sertifikaatide kaardistamise kohta salvestatakse altSecurityIdentities attribuudi alla.\n<li class=\"l\"> On lisatud toe protokolli laiendusele \"Kerberos PKINIT SID\", mis v\u00f5imaldab autentimise k\u00e4igus kasutada sertifikaate, millel on objekti SID identifikaator. Sertifikaatide allkirjastamiseks on samba-tool utiliidi juurde lisatud k\u00e4sk \"user|computer generate-csr\".\n<li class=\"l\"> KDC (Key Distribution Center) rakenduses on vaikimisi tagatud PAC (Privilege Attribute Certificate) struktuuri tagastamine, mis sisaldab kasutaja \u00f5igusi, olenemata sellest, kas PA-PAC-REQUEST v\u00e4li on kliendi p\u00e4ringus m\u00e4\u00e4ratud. Vanema k\u00e4itumise tagastamiseks on ette n\u00e4htud seadistus \"kdc always generate pac = no\".\n<li class=\"l\"> KDC-sse on lisatud seadistus \"kdc require canonicalization\", mille korral klient peab nime kanoniseerimise taotlemiseks p\u00f6\u00f6rduma. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/server\/dts-shicago\/\" title=\"serveri\" data-wpil-keyword-link=\"linked\">serveri<\/a> autentimise (AS_REQ) poole. Kui kanoniseerimist ei n\u00f5uta, tagastab server vea \"kasutaja tundmatu\". Windowsi operatsioonis\u00fcsteemi kasutavad kasutajad ei tohiks uue seadistuse aktiveerimise t\u00f5ttu probleeme tekkida, kuna Windowsi kliendid taotlevad kanoniseerimist vaikimisi alati.\n<p>Kanoniseerimise kohustuslik rakendamine kaitseb \"dollar ticket\" r\u00fcnnakute eest, mis manipuleerivad sellega, et kasutajate nimesid saab esitada erinevalt (\"user\" ja \"user$\") ja need on kanaliseeritud ja tavalises kujus erinevalt t\u00f6\u00f6deldavad. R\u00fcnnaku olemus seisneb selles, et r\u00fcndaja saab n\u00e4iteks AD-s luua arvutikonto nimega \"root$\" ja kasutada seda KDC-lt mandi (ticket) saamiseks, edastades p\u00e4ringus kasutajanime \"root\" asemel \"root$\". Kui KDC ei leia kasutajat \"root\", t\u00f6\u00f6tleb see p\u00e4ringut kasutaja \"root$\" kontekstis ja v\u00e4ljastab mandaadi, mida saab kasutada root-kasutajana SSH v\u00f5i NFS kaudu Linux serverisse SSSD-le.      <\/p>\n<li class=\"l\"> KDC-sse on lisatud alternatiivne kaitse variant \"dollar ticket\" r\u00fcnnakute eest seadistustes, kus kohustuslikud kanoniseerimise taotlused on keelatud (\"kdc require canonicalization = no\", mis kehtib vaikimisi). Vaikimisi, kui klient ei ole kanoniseerimist taotlenud ja kontrollitavat nime ei leita, teeb server lisakontrolli, kinnitades nimele s\u00fcmboli \"$\". Uue seadistuse \"kdc name match implicit dollar without canonicalization = no\" abil saab selle k\u00e4itumise keelata ja teostada ainult t\u00e4pseid kontrolle (liidese kontekstis ei kontrolli server nime \"root$\" p\u00e4ringu \"root\" puhul).\n<li class=\"l\"> Heimdal KDC-l on vaikimisi lubatud saata Kerberos teenustele ainult kanoniseeritud nimesid (sAMAccountName PAC-ist) selle asemel, et kasutada algset cname v\u00e4\u00e4rtust. Vana k\u00e4itumise taastamiseks on seadistus \u201ekrb5 acceptor report canonical client name = no\u201c.\n<li class=\"l\"> T\u00e4ielik kaitse \u201edollar ticket\u201c r\u00fcnnakute eest n\u00f5uab j\u00e4rgmiste seadete seadistamist: strong certificate binding enforcement full, kdc always include pac yes, kdc require canonicalization yes.\n<li class=\"l\"> CVE-2026-20833 haavatavuse blokeerimiseks on KDC seadetes domeeni kr\u00fcptimise meetod vaikimisi muudetud AES-iks (seade \u201ekdc default domain supported enctypes\u201c on seadistatud \u201eaes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96\u201c).              <\/ul>\n<p>Allikas: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65016\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.24.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows Server \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 Microsoft \u0432\u0435\u0440\u0441\u0438\u0438 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Windows 11. Samba 4 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u043e\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-165282","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.24.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows Server \u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-samba-4-24-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Samba 4.24.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.24.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows Server \u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-samba-4-24-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-03-19T09:11:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-03-19T09:11:55+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Samba 4.24.0 v\u00e4ljaanne | ProHoster","description":"P\u00e4rast 6 kuu arendust on v\u00e4lja antud Samba 4.24.0 versioon, mis j\u00e4tkab Samba 4 haru arengut, pakkudes t\u00e4ielikku domeinikontrolleri ja Active Directory teenuse teostust, mis on koosk\u00f5las Windows Serveri teostusega.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-samba-4-24-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Samba 4.24.0 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.24.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows Server \u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-samba-4-24-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-03-19T09:11:55+00:00","article:modified_time":"2026-03-19T09:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/165282","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=165282"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/165282\/revisions"}],"predecessor-version":[{"id":168128,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/165282\/revisions\/168128"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=165282"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=165282"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=165282"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}