Create the users. Trying to connect to Active Directory using LDAPS connection. You create a connection string based on the format used in the tnsnames. Negotiate)) Jun 1, 2018 · dSearcher. 246. Your driver or mongosh queries the record to determine which hosts are running the mongod or mongos instances. l_session := DBMS_LDAP. Path is the path inside the ADS that you like to use insert in LDAP format. ldap. Version. Apr 13, 2015 · public PrincipalContext(ContextType contextType, string name) or. Connection. More information available in the PostgreSQL documentation. into your connection string. 4. 4k 53 199 329. 9. Then connect and perform a. When I downloaded driver from Oracle site (10. LdapDirectoryIdentifier identifier = new LdapDirectoryIdentifier(TargetServer, 636); // Configure network Jan 3, 2022 · The first thing you must do in order to connect to any directory service is to create an LDAP connection string. Do I need use something different than "Data Source" or do I need to add an LDAP prefix to the server name? Jan 29, 2012 · I have a working LDAP Server with these parameters: OU=users,OU=mydomain,O=this domain LDAP://myhost:389 I successfully access with a generic ldap client, like the good Jarek Gawor's ldap browser/client with following settings: OU=users,OU=mydomain,O=this domain User info (append base DN): uid=myid password=mypwd Depending on the frequency of acces to the LDAP, i would either keep the connection alive an reuse it (and re-open it if it fail, as it could be closed unexpectedly), or get a new connection each time (closing it after each time also). Please provide me the connection string which includes server name, service name, user name and Jul 9, 2021 · cx_Oracle LDAP Connection String syntax. DirectoryServices. Click Protect to get your integration key, secret key, and API hostname. testing. com (e. MongoDB authorizes the user to perform actions on the server by mapping each returned group's Distinguished Name (DN) into a role on the admin database. In the Client-side LDAPS section, choose Disable. wordpress. 3 and LDAP server has Cent OS 5. You start at the deepest OU working back to the root of the AD, then add dc=X for every domain section until you have everything including the top level domain The logon credentials and the Negotiate Authentication are used to connect to the LDAP server. $ ldapsearch -x -LLL -h host. DirectoryServices May 27, 2017 · Port 636 is only for LDAPS. Filter = String. The service then allows the information to be shared with other devices on the network. Jun 24, 2020 · That is because the second argument is ignored when you provide an LDAP-URL as first parameter. txt PgBouncer authentication file. Your options are: Run more then 1 query and parse the result. Yes, you need to create SSL certificates on both machines. jar, then try one of the following examples. From the IP Address/DNS Name drop-down list, select whether to use the IP address or DNS name to contact your primary LDAP server. I am using this code to read properties from active directory: MembershipSection membershipSection = (MembershipSection)WebConfigurationManager. Format("(&(objectClass=user)(cn={0}))", userName); sResults = dSearcher. You will probably need to bind before calling this function, too, depending on what LDAP server you are using and what you are trying to query for. The Application Security Wizard provides the possible Active Directory connection strings for the root domain controller and for the first-level domain controllers, which is sufficient to connect to Active Directory and use Active Directory security. Sep 15, 2023 · Usually this has to be the full Distinguished Name, such as CN=myusername,OU=Users,DC=mydomain,DC=com. It checks whether the given parameters are plausible and can be used to open a connection as soon as one is needed. JDBC URL: Once the LDAP server, context, and database service name have been obtained, a JDBC URL can be constructed. Message); C# (CSharp) System. 2. One query can't search more than one DC or OU. To run this search, you have to use the “-Y” option and specify “EXTERNAL” as the authentication mechanism. A connection object includes host name, port, and authentication credentials. directory. ora parameters" but I've yet to deduce which parts of the above connection string map to which parameters. Connecting to oracle db from python. Those are fixed and need to be used for any object on that server. Direct Connection . It shows how to configure the connection string and the LDAP. com -D user -w password -b"dc=ad,dc=example,dc=com" -s sub "(objectClass=user)" givenName. The LdapConnection (LdapDirectoryIdentifier, NetworkCredential) constructor creates an instance of the LdapConnection class using the specified directory identifier and network credentials. Current Version SonarQube 7. "YOURDOMAIN" - or leave NULL for "default" domain) When passed to the initial context, the LDAPS URL string is interpreted like an LDAP URL, except that an SSL connection is used to communicate with the server. Dec 14, 2017 · In order for us to make a new connection we need to have the user name of the schema to which we want to enter in the database and its respective password. Active Directory Connection C#. For example: // Create a new, unestablished connection. Once I added the URL as LDAPS it throws an exception and does not allow users to Login. connect(address, port); Jul 22, 2011 · Throw debugging I've found antother issue with String. com with your LDAP server address and SID with the database alias. NET 3. Both domain controllers require SSL certificates because if you connect to the domain name rather than the specific domain controller host name, you could get round-robined to either domain controller so therefore you will need certificates on both of them. 5 System. OU=Your_OU,OU=other_ou,dc=example,dc=com. Oct 19, 2022 · Then you'll need to: Sign up for a Duo account. After a certificate is installed, follow these steps to verify that LDAPS is enabled: Start the Active Directory Administration Tool (Ldp. Note: This function does not open a connection. For example, to connect to a start-TLS secured LDAP server: May 9, 2010 · Your LDAP connection string actually is NOT valid - LDAP connection strings are case-sensitive; the LDAP prefix must be uppercase. Your connection string will look something like: Description. LDAPConnection c = new LDAPConnection(); c. . plugins. Active Directory Explorer is one tool I use when spelunking around in Active Directory. Connecting to oracle database using python(cx_oracle) 0. Domain, "sd. The LDAP server settings are enabled. 2. Use a filter to find the desired users/objects based off a different attribute like an AD group or by name. You need to do a ldap query to get the second part. On the Windows Server, open the Server Manager: 5. If you are using apache as I say you will have to use the httpd. This guide covers information about communicating with an LDAP server, like Microsoft Active Directory, from the Ansible host. exe). This is an integer value, and version 3 is the most recent version. I can start and successfully connect to LDAP Active Directory using “ldap. In this article, we’ll cover how to authenticate a user with LDAP using pure Java. ora parameters must be set with valid values to complete configuration. So the LDAP string is not as specific as the one targeting the specific user. Message); catch (Exception e) throw new PlatformException(e. com (Not working once changed) Below is the code to Authenticate user through LDAP. 0. In the TNS Alias field, type in the database service name. 5 Jun 20, 2016 · For the LDAP part, there are two configuration files that are required: sqlnet. ora: This is the profile configuration file for Oracle, but mine was simply containing : NAMES. 10. example. This way it is not visible. ORA files are located. to be able to do this we need to pass a ldap string to lansweeper as part of system configuration. Learn how to use the LDAP protocol, the domain name and the domain extension to connect to Active Directory or other LDAP servers in C. The first field is the user name and the second is the LDAP or Active Directory lookup string for the user The LDAP server evaluates the query and returns the list of groups to which the authenticated user belongs. AccountManagement namespace to validate user credentials against our Active Directory LDAP server over an SSL encrypted LDAP connection. I can SSH to the LDAP server using LDAP user but When in desktop login prompt, I can't login. Feb 19, 2024 · Verify an LDAPS connection. On the Connection menu, click Connect. apache. With AD, user creation and deletion is done in the default users container. Expected behavior. private const int LDAP_PORT = 389; Jun 19, 2020 · 0. You'll need this information to complete your setup. public PrincipalContext(ContextType contextType, string name, string container) So you basically need: your context type (here: ContextType. PDF RSS. But it targets all users from the domain. answered Sep 25, 2019 at 22:22. To configure an LDAP session to use SSL, just activate the SSL checkbox in the LDAP Connection dialog: If you do this, the LDAP communication port is changed automatically to 636. com/2009/10 2. searchSubtree = true grails. As of PHP 8. // Configure server and port. The New-AdfsLdapServerConnection cmdlet creates a connection object that represents the Lightweight Directory Access Protocol (LDAP) folder that serves as a claims provider trust. 5. If no explicit connection is provided, an LDAP connection will be automatically created based on the Domain, MachineAccountName and MachineAccountPassword options. I knew I was Erzeugt eine LDAP\Connection-Verbindung und prüft, ob der angegebene uri plausibel ist. Unlike Windows hosts, there are no builtin mechanisms to communicate and authenticate with an LDAP server, so the plugins that run on the Ansible host require some extra configuration to get working. From the Server list, select LDAP. amrs. 4. Domain) the domain name (try just the "Netbios" name, e. But this thing should be possible with VBA as well right? It's probably the string that's incorrect. 1. 1 LTS Enterprise. The LDAP server settings appear. In the Connection Type dropdown, select LDAP Directory Server. The ldap_server is the object you get from ldap. com LDAPS URL (NEW) : LDAPS://reg1. PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language. Use an URL like this: Replace ldap_server. // simple bind as separate operations. conf to connect to their LDAP server configuration. , password or md5). In SQL Developer you should be able to select LDAP base alias resolution: Thanks, but I have no problem in creating the New Connection manually, I can use both LDAP & TNS connection type, and they both resolve LDAP without Go to Action > Connect to…. Note that these values are completely dependent on our server configuration . open(host="host", port=389) This seems to return an instance. These are the parts that make up the domain of your LDAP server. usually something like dc=mycompany,dc=com]' grails. Jan 12, 2016 · This is my connection string from C#. conf. Escaping non special characters in string for LDAP query. Just in case, some clarification about the users groups: crew - group with all team members, it will be used as a part of authentication query; Aug 18, 2023 · 1. [1] Directory services play an important role in developing intranet and Internet applications by Connection String Formats. filter="sAMAccountName={0}" // for Active Directory you need this grails. Jun 1, 2020 · How do I build this LDAP connection string? 5. Jul 12, 2012 · This entry has two mistakes: it's not using root (dc=lcl), you also skipped one ou, should be ou=employees,ou=Users - OFMGOV,dc=ofm,dc=wa,dc=lcl. In Features View, double-click Connection Strings. Click OK. exe tool: May 8, 2020 · To create a database connection string by using the UI. To do the search and user authentication, we’ll use the directory service access Oct 17, 2017 · Here's an example generator for python-ldap. // If you don't have SSL, don't give it the SSL port. I've got VBA code that imports data from AD. Select the Enable LDAP Server check box. Question 2 : You need to map a network drive to reduce the path length. LDAP w/ SSL, aka LDAPS, uses port 636. win. This is done using the init and simple_bind_s functions. – Tom. Sep 25, 2019 · The LDAP authentication parameters need to be specified in pg_hba. ora file without the need to actually have one of these files on the client pc. I'm working on the LDAP authentication and this client desktop needs to authenticate via a LDAP server. Nov 18, 2020 · If you want to connect to an Oracle database using LDAP to specify the database name in C#, you may find this question helpful. e. Toad allows us to make three different types of connections: Direct, TNS and LDAP. ) Richard Mueller has a great post explaining Lightweight Directory Access Protocol (LDAP) is an application protocol for working with various directory services. The name parser returned by an invocation of getNameParser() returns a parser that, when given a string name, parses it into components in accordance with RFC 2253 . This URL is then used when interfacing with the Oracle JDBC thin driver to make a connection to the database. Mar 15, 2016 · I want to connect to Oracle Database via c# code using LDAP. g. This is important because LDAP requires the DN to authenticate the user. Click on Manage then Add Roles and Features: Nov 13, 2013 · Your system administrator should provide you with appropriate connection string information. Please see this link: http://randomerror. If provided, this connection will be used and the Domain, MachineAccountName and MachineAccountPassword options will not be used to create the LdapConnection. Well if they are using LDAP for their authentication they will have a LDAP server configuration which you will need the username, password, servername and LDAP driver. initialize(). Jan 24, 2023 · Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications. The Authentication Servers page opens. You can specify the MongoDB connection string by using one of the following formats: SRV Connection Format: A connection string with a hostname that corresponds to a DNS SRV record. Use: The connection attempt just times out with the following error: ORA-12170: TNS:Connect timeout occurred . 21. Click OK to connect. In that time, the protocol has expanded and evolved to meet changing IT environments and business needs. The application acts as an LDAP proxy server redirecting the requests to the domain controllers. So your connection string has three parts : "jdbc:oracle:thin" + ldap + ",cn=OracleContext,dc=mycompany,dc=com". LdapConnection) fails on ssl Sep 11, 2017 · LDAP/OID is already setup, and manually using the connection string retrieved from LDAP works. Depending on the security of your network this may have to be setup or you won't be able to query AD to authenticate the user. 4 days ago · LDAP Connection guide. LDAP URLs have a handful of common uses in LDAP: They can be returned in a referral…. Som Mar 30, 2016 · In AbstractContextSource (parent of LdapContextSource), the Javadoc for the setBase() method says the following: "Set the base suffix from which all operations should origin. Mar 13, 2015 · For OID, all ldap. springsecurity. Feb 13, 2024 · AD FS can connect to multiple replica LDAP servers and automatically fail over in case a specific LDAP server is down. Click Protect an Application and locate LDAP Proxy in the applications list. Oct 10, 2010 · I have this LDAP Connection string: connectionString="LDAP://username: password@10. I have my signer Certificates loaded into a cacerts truststore that lives in %java path%\lib\security. I need to determine if it can find the host or not? Any suggestions? python. The following connection string for mongosh authenticates an LDAP user named rob: --authenticationMechanism PLAIN \. FindAll(); But the requirement is to create a LdapConnection object using a standard access user (always the same) as shown below. If connection is successful, you will see the following message in the ldp. These are the top rated real world C# (CSharp) examples of System. The DBAs should be able to move the database to a new host or port without breaking anything. 0, the following signature is deprecated. ldap. unboundid. I'm trying to use the . On the Directory details page, choose the Networking & security tab. Connecting with a user and password: The Lightweight Directory Access Protocol ( LDAP / ˈɛldæp /) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network. And also, for Ora19 this is the connection syntax I was able to use successfully, without tnsnames An LDAP URL is a string that can be used to encapsulate the address and port of a directory server, the DN of an entry within that server, or the criteria for performing a search within that server. Working LDAP URL: LDAP://reg1. local with IP 10. To copy the connection string: Click Database in the top-left corner of Atlas. sdk. com:27017,mysecondary. private DirectoryEntry dEntry = null; private DirectorySearcher dSearch = null; //Validate User Credentials in Active Directory dEntry = new DirectoryEntry(ADPath, userName, password, AuthenticationTypes. server=myprimary. What is the best practise for similar in Mongo connection Dec 1, 2010 · The DC= prefix in the LDAP string stands for domain component (dc). Aug 3, 2016 · All was fine until our SA told us to change the URL to LDAPS. ora need to be setup to inform the oracle client that we wish to use LDAP lookup. Jan 8, 2024 · Firstly, let’s build it as a jar, rename it to ldap-connection-tool. Click Connect on the Database Deployments page. For nearly 3 decades, organizations have been using the LDAP (Lightweight Directory Access Protocol) for user management, attributes, and authentication. If a returned group DN exactly matches the name of an existing role on the admin Oct 5, 2017 at 20:30. If the LDAP server is actually an Active Directory DC then other name formats are also accepted such as NETBIOSDOMAIN\myusername. Choose the directory ID link for your directory. I have provided an example of how you can connect in c#. GetSection("system. Directory services, such as Active Directory, store user and account information, and security information like passwords. Connection Point: “Select or type a Distinguished Name or Naming Context” Enter your domain name in DN format (for example, dc=example,dc=com for example. The connection string is still valid and will be used for failover scenarios. Please help me in this. api. LdapConnection ldapConnectionObject connection. 0 the connection string "ldaps://ldap-server-1 ldaps://ldap-server-2" is not longer supported. 1. In "DNS style", this would read: (something). In AD, this would typically be something like the "Users" container in your domain, which you'd specify like this in LDAP parlance: Oct 28, 2015 · To enable LDAP for your Auth0 apps, first go to Connections -> Enterprise -> Active Directory / LDAP. Some applications use LDAP to add, remove, or search users and groups in Active Directory or to transport credentials for authenticating users in Active Directory. Similarly, authentication can be performed on the connection at the time it is created, at the time it is established, or as a separate process. Enable secure LDAP or LDAPS. In the Add Connection String dialog box, type a name for the connection string, such as MyConnection, in the Name Method 1: To disable client-side LDAPS in AWS Directory Service (AWS Management Console) In the AWS Directory Service console navigation pane, select Directories. ora and ldap. I have found a list of "all ldap. Description ¶. --username cn=rob,cn=Users,dc=ldaps-01,dc=myteam,dc=com. On the Connection Strings page, click Add in the Actions pane. ora: This file tells where to look for when resolving names using LDAP. The point of a tnsnames file, the older Oracle Names server, and the newer, recommended LDAP directory server method of resolving database names is to avoid having to hardcode hostnames, addresses, ports, etc. PageSize = 1000; dSearch. Sep 16, 2019 · hopkitj (Tom Hopkins) September 16, 2019, 4:27pm 1. When the first host is down the second one will be used. 0 - found in MVN repo) doesn't suppor two o more URL's. password is the password for the userName. Open IIS Manager and navigate to the level you want to manage. Negotiate Authentication is used. Omiting tnsnames. Introduction. Connection string is not valid The connection protection, user name and pwd are for the account that has access to query AD on behalf of the system. 5 'ojdbc14_g') all start work fine. This is another type of Oracle connection string that doesn't rely on you to have a DSN for the connection. . Follow the steps to setup the LDAP connector (you will need the LDAP server details) and then enable LDAP for your app. I'm using the current line: ldapObject = ldap. Some very old clients (or clients written with very old APIs) may still use LDAP version 2, but new applications should always be written to use LDAP version 3. Furthermore, we’ll explore how to search for a user’s distinguished name (DN). Jun 21, 2021 · 3. After speaking with an LDAP expert, it's not possible this way. From the Java app's perspective, you should use a typical connection string as though you were using any other authentication method (i. Question 1 : A connection string is a string. Third party tools like LDAP Admin or LDAP Browser by Softerra are also valid tools to use. connection_string You may use this option instead of host and port to connect to the LDAP server optReferrals Specifies whether to automatically follow referrals returned by the LDAP server options LDAP server's options as defined in ConnectionOptions. active-directory. url ldapConnection is the server adres: ldap. I want to be able to test that a connection to a host and port is valid. But as we mentioned above, you can change this port to any other valid TCP port number, according to the configuration Actually create the connection with three parts: an LdapDirectoryIdentifier (the server), and NetworkCredentials. concat() NPE Our driver (com. – Feb 13, 2017 · Ask questions, find answers and collaborate at work with Stack Overflow for Teams. com ). DIRECTORY_PATH = (LDAP) It tells the library to resolve names using LDAP only. Jun 23, 2011 · Yeah I do, but I'm not very good at SQL really. This post covers everything you need to know about LDAP, from its Mar 22, 2011 · im not sure how you add the username and password the string directly. com Ldap. Dispose(); return queryLdap(email); catch (LdapException ex) throw new BusinessException(ex. If not, change it. domain. LDAPConnectionOptions object provides an object which can be used to control a number of low-level behaviors for the SDK. In this article, we will use native Windows tools to preview the LDAP query. TBH if your really want to understand this notation I would suggest using ADSI Edit instead of ADUC that you probably use ATM - it will show you path the same way, so it will be easier to translate. client. search. LDAPConnection(SocketFactory socketFactory, LDAPConnectionOptions connectionOptions, String host, int port, String bindDN, String password) LDAP Connection Options The com. However, the automatic LDAP lookup of the connection string from an oracle client ( sqlplus ) does not! According to google, the files sqlnet. Select the database role from the Role drop down list. Let's start working with the direct connection string. Aug 11, 2021 · The Ultimate Guide. $ ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config. ORA and SQLNET. answered Aug 8, 2017 at 21:07. Jun 16, 2022 · Here we provide LDAP connection string components (port and FQDN), names of certain users groups and credentials of a service user, which will be used for querying the server. I haven't tried this against a non-Windows domain LDAP server, but I doubt it will work well. Port 389 is the non-SSL port. abc. Lightweight Directory Access Protocol (LDAP) is a standard communications protocol used to read and write data to and from Active Directory. Enter it on the second prompt. A connection string uses the following format: LDAP://DC=|SERVER NAME|[,DC=|EXTENSION|] Jul 17, 2020 · We need to pass all applications through a central application to perform two factor authentication. Here's the sample code: using (var pc = new PrincipalContext(ContextType. Apr 27, 2018 · I want to configure pgBouncer with LDAP and the documentation[1] says we need to. Not sure it's useful for you though :-) Sep 11, 2020 · If you need to create a connection string for LDAP by two attributes, such as DC=intechww,DC=com, you can find some helpful answers and examples in this Stack Overflow question. search Mar 16, 2017 · 0. hideUserNotFoundExceptions = false grails. 3. May 3, 2023 · Using jndi connect LDAP in SSL mode ,how to program client certificate in java code? 3 LDAPConnection (org. The first step in any LDAP interaction is to connect to the LDAP server and authenticate yourself. Make sure the TNS Admin Location field is set to the directory where your LDAP. Nov 28, 2012 · The syntax for using ldapsearch: ldapsearch -x -LLL -h [host] -D [user] -w [password] -b [base DN] -s sub "([filter])" [attribute list] A simple example. Protocols LdapConnection - 42 examples found. The provider runs against the specified domain or server. Feb 2, 2020 · To search for the LDAP configuration, use the “ldapsearch” command and specify “cn=config” as the search base for your LDAP tree. web Jun 18, 2017 · Download and install the Remote Server Administration Tools for Windows 10, and then once installed open Users and Computers and as long as you are logged onto the machine with a domain account of the domain which you wish to get the structure of AD to call via LDAP, this will allow you to see the correlated detail and structure of the OU's Nov 28, 2012 · How to check the LDAP connection from a client to server. LDAP Browser is also very good, and the free read-only version should help you find the correct distinguished name for your domain. Thanks to some help from the DBA, I've been able to determine the following: An LDAP bind request includes three elements: The LDAP protocol version that the client wants to use. auth. a server name, machine name etc. ml. Client machine has Cent OS 6. If you have more than one domain, you can use port 3269 for the global catalog via SSL. init(hostname => l_ldap_host, portnum => l_ldap_port); Sep 17, 2009 · Well, I think your connection string is missing a bit - specifying just the server name isn't good enough - you also need to specify a "starting point" for your search. com:27017;replicaset=MySet;safe=true;database=MyDatabase Is it correct not to include arbiter in this connection string? When I work with sql server, I set up all my connection strings with integrated security. 246 :389/DC=ABC,DC=local". The following examples use the LDAP server setup for our C# example above. Creates an LDAP\Connection connection and checks whether the given uri is plausible. As you are using ldap as scheme (which uses port 389) the port argument you are using is ignored so ldap_bind connects to port 389. Active directory server is ABC. Mar 23, 2019 · To Connect to LDAPS (LDAP over SSL), use port 636 and mark SSL. Mar 1, 2023 · Since 21. 0. Type the name of the domain controller to which you want to connect. Connection string Scope; LDAP://<domain or server>:[port] Port number is optional for ADAM and not needed for Active Directory. Mar 15, 2017 · here's some of my piece of code when connecting to LDAP and authenticating the user used. Log in to the Duo Admin Panel and navigate to Applications. Actual behavior. Sie prüft, ob die übergebenen Parameter plausibel sind, und kann verwendet werden, um eine Verbindung zu öffnen, sobald eine benötigt wird. Jun 9, 2021 · 24. Secure); dSearch = new DirectorySearcher(dEntry); dSearch. ora. Enter the following connection settings: Name: Type a name for your connection, such as Google LDAP. I can connect with via TOAD with using the same LDAP, User ID and Password from the same box. com:389", "DC=sd,DC=example,DC=com", ContextOptions. your. For such a case, you can create one AdfsLdapServerConnection for each of these replica LDAP servers and then add the array of connection objects using the -LdapServerConnection parameter of the Add-AdfsLocalClaimsProviderTrust A connection dialog will open. Hinweis: Es ist zu beachten, dass diese Funktion keine Verbindung öffnet. Type 636 as the port number. The JDBC URL for LDAP connections takes the following format: jdbc:oracle:thin:@ldap://<LDAP Server String>/<Database The LdapConnection to be used to retrieve role claims. PropertiesToLoad May 22, 2018 · Configuring an SSL session to an LDAP server. ORA file, and provides some useful links and tips. oracle ojdbc14 10. Explore Teams Create a free Team May 13, 2014 · also, I suggest not to include password into conn string. Connect And Authenticate. And use that particular LdapConnectionObject to search users using username. It says Authentication failure. zb mf us od vg bg kj ob rw pp