HDTenEightyP/NetNews huggingface dataset:
From: dave@netmgr.mmc.com (David A. Rageth)
Subject: Use of kprop and slave servers
Keywords: kprop, slave
Organization: mmc
Date: Fri, 18 Dec 1992 15:13:42 GMT

Can someone direct me to the file/documentation on how to set up a slave
kerberos server.  In looking through both the installation and the operation
documentation that came with the system, I could not find a very clear
set of instructions on how to set up a slave server.  Is there a file of
documentation that I perhaps did not bring down?


-- 
x++++++++++++++++++++++++++++++++++++++++x
 x            David Rageth                x
  x   Internet : dave@netmgr.mmc.com       x
   x   voice    : (303)977-4584             x
    x   fax      : (303) 977-2765            x
     x   USMail   : Martin Marietta           x
      x              P.O. Box 179 m/s 1084     x
       x              Denver, Colorado          x
        x                               80201    x
         x++++++++++++++++++++++++++++++++++++++++x

Newsgroups: comp.protocols.kerberos
From: dean@ksr.com
Subject: Re: installation step 4 make world
Organization: Internet-USENET Gateway at Stanford University
Date: Mon, 14 Dec 1992 19:19:12 GMT

Your first problem is called "NeXT Computer".

Your second problem is that you haven't installed the Columbia
University and Georgia Tech fixes

The long term solution is use the Next as a door stop.  :-)

In the short term, contact Alan Crosswell at Columbia as I have forgotten
the ftp address.

Dean Anderson			dean@ksr.com  | Support the League for 
KSR Computing Facilities                      | Programming Freedom! Email
Kendall Square Research                       | lpf@uunet.uu.net for info.




----------------------------------------------------------------------
From the patch:
----------------------------------------------------------------------

Columbia University (and GA Tech) patches to Kerberos 4, patchlevel 9.

This patch:

  - Includes Georgia Tech fixes and additions, including kdb_batch (posted to
    comp.protocols.kerberos by Robert Viduya <robert@shangri-la.gatech.edu>
    on 30-Oct-91)
  - Allows all of Kerberos 4 (clients *and* servers) to compile and run on
    SunOS 4.1.x, Encore Umax 4.3 (using GCC), and NeXT Mach 2.1.
  - Breaks kadmind -- current code does not work "right" as it truncates
    passwords to 8 bytes.  I recommend *not* turning on -DESP.  However,
    it is a start at adding password quality checking to kadmind.

Note: This copy of the patch does not include the ispell-based code due to
ispeel limitations on use and redistribution.

I suggest carefully looking over this stuff since I haven't done so myself:-)

Alan Crosswell, Academic Information Systems, Columbia University.
alan@columbia.edu
From: greg@whitney.eos.scg.hac.com (Greg Nakanishi)
Newsgroups: comp.protocols.kerberos
Subject: kerberos for ibm aix
Date: 11 Dec 92 23:53:46 GMT
Reply-To: greg@whitney.eos.scg.hac.com (Greg Nakanishi)
Distribution: usa
Organization: Hughes Aircraft Co., El Segundo, CA


	I've been trying to port kerberos version 4 to an IBM AIX 3.1 machine
and have been having some trouble. In particularly I've been having problems
getting rlogin to the IBM to work.  Has anyone successfully ported kerberos to 
an AIX machine?  Can it be done using the standard MIT release?  I found 
myself having to change the code to get certain features to work.  I 
appreciate any help I can get on this.

greg
Xref: sparky comp.protocols.kerberos:972 comp.unix.aix:12703
From: jah@mojo.ots.utexas.edu (Jeff Hayward)
Newsgroups: comp.protocols.kerberos,comp.unix.aix
Subject: kerberos, imake, & rs/6000?
Date: 17 Dec 92 19:24:44 GMT
Followup-To: comp.protocols.kerberos
Organization: The University of Texas

I'm sure this is some sort of rookie problem, but I'm not getting
anywhere with it.  I'm trying to build Kerberos V4 pl 10 on an IBM
rs/6000 running AIX 3.2.  The C pre-processor is complaining when
imake hands it a line like /**/# <anything>, and the makefiles
generated get errors from make complaining about missing separators.

Surely there's something simple I'm missing.  Can someone give me a
clue?  Thanks.
--
Jeff Hayward
The University of Texas System			+1 512 471 2432
Office of Telecommunication Services		j.hayward@utexas.edu
From: ccewch@nuscc.nus.sg (Wong Chee Heng)
Newsgroups: comp.protocols.kerberos
Subject: FAQ available?
Date: 10 Dec 92 06:02:58 GMT
Organization: National University of Singapore

I am new to this group. May I know if there is a FAQ?

--
Wong Chee Heng
Systems Programmer
ccewch@nuscc.nus.sg.
Newsgroups: comp.protocols.kerberos
From: alan@curta.cc.columbia.edu (Alan Crosswell)
Subject: Re: patches
Organization: Columbia University
Date: Wed, 16 Dec 1992 22:04:21 GMT

In article <9212161556.AA06288@cc.vt.edu> bagley@cc.vt.edu (Victor L. Bagley)  
writes:
> If I get the dist/921209 kerberos software from Athena.mit.edu,  
> Should I then run patch on patchlevel 10 using the  
> cukrb4.niospell.patch from Columbia.  If so has anyone done this  
> successfully?  I am trying ever so hard to port this software to a  
> Next machine.  And no I am not ready to use the machine as a door  
> stop. : )
> Thanks....

The Columbia stuff is patchlevel 9 PLUS some stuff posted to this list
by Georgia Tech that I had picked up.  So it is not compatible with
the latest MIT distribution.  Have you tried the MIT stuff on the NeXT
without the Columbia stuff?  I imagine they may have added the necessary
changes for it to work on a NeXT.
/a
Newsgroups: comp.protocols.kerberos
From: prasad@ISI.EDU (Prasad Upasani)
Subject: Re: V5 equivalent of KRBTKFILE
Reply-To: prasad@ISI.EDU
Organization: USC Information Sciences Institute.
Date: Fri, 18 Dec 1992 21:16:40 GMT

> In the MIT V5 distribution, is there an application-transparent way to tell the
> Kerberos libraries to use a different ticket cache, i.e., something equivalent
> to what KRBTKFILE does in V4?
> 

A alternative ticket cache name can be specified through the
environment variable KRB5CCNAME. The code that looks for this is in
the routine krb5_cc_default_name() in lib/os.

-Prasad
 Information Sciences Institute
From: mamros@athena.lkg.dec.com (Shawn Mamros)
Newsgroups: comp.protocols.kerberos
Subject: Re: Moira client
Date: 15 Dec 92 18:06:49 GMT
Reply-To: mamros@athena.lkg.dec.com (Shawn Mamros)
Organization: Digital Equipment Corporation


alan@curta.cc.columbia.edu (Alan Crosswell) writes:
>In article <1992Dec10.234739.9133@ericsson.se> monica@netman.ericsson.se  
>(Monica Bouchibane) writes:
>> I'm trying to include Moira (SMS) in our kerberized environment,
>> but I'm having some problems with the moira client(s)
>> 
>> The serverside seems to be running OK, but whenever I try to start
>> the client (moira, dcmmaint, listmaint....) I have mainly two things 
>> showing up.
>> .....moira: Kerberos error: Can't decode authenticator 
>> .....Authorization failed -- please run kinit
>> .....Exit 1
[...]
>Check for principal name 'moira' vs. 'sms.'  As I recall, there are a couple
>places in the code where these are used interchangeably.  This is probably
>because after the code had been called sms for a while, they decided to
>rename it Moira and some of the code still refers to it the old way.  The
>easy fix is to create two princpals: "moira.myserver" and "sms.myserver" with
>the same key.

I'm about 99% sure that the two principals needed are "moira.myserver" and
"sms" (null instance name), and that they don't need the same key at all.
"moira.myserver" is used for Moira client-server authentication, while "sms"
is used by the data control manager (DCM) to authenticate to hosts running
the update_server process (those hosts, in turn, need an "rcmd.hostname" key).

-Shawn Mamros
E-mail to: mamros@athena.lkg.dec.com
Newsgroups: comp.protocols.kerberos,news.answers
From: kdrenard@brl.mil (Kenneth D. Renard )
Newsgroups: comp.protocols.kerberos
Subject: kprop questions
Keywords: kprop
Date: 11 Dec 92 18:55:25 GMT

Version: 4 (patchlevel 9)
OS: SunOS 4.1.1

	What is the purpose of the ".dump_ok" files used with kprop?

	Is there any reason why kprop doesn't dump the database itself
and then propagate? 

	Is there a man page floating around somewhere?

krb_thanks();
-Ken Renard
Xref: sparky comp.protocols.kerberos:973 comp.unix.aix:12740
From: probe@mit.edu (Richard Basch)
Newsgroups: comp.protocols.kerberos,comp.unix.aix
Subject: Re: kerberos, imake, & rs/6000?
Followup-To: comp.protocols.kerberos,comp.unix.aix
Date: 20 Dec 1992 18:59:36 GMT
Organization: Massachusetts Institute of Technology
NNTP-Posting-Host: tardis.mit.edu
In-reply-to: jah@mojo.ots.utexas.edu's message of 17 Dec 92 19:24:44 GMT

The simple answer is to do:

	setenv IMAKECPP /usr/lpp/X11/Xamples/util/cpp/cpp

The standard cpp doesn't work well with imake on a RISC/6000.

-Richard Basch
MIT IS/Athena Development
From: trier@slc6.ins.cwru.edu (Stephen C. Trier)
Newsgroups: comp.protocols.kerberos
Subject: Re: Porting problems in V5
Date: 15 Dec 1992 22:08:44 GMT
Organization: Case Western Reserve University, Cleveland OH (USA)
NNTP-Posting-Host: slc6.ins.cwru.edu

In article <9212082146.AA07100@riipsdev.waterloo.ncr.com> harvard!scubed!riipsdev.waterloo.ncr.com!ajlill@eddie.mit.edu writes:
>For those of you lucky enough not to have dealt extensively with DOS don't
>know, the DOS time() call returns the number of seconds since midnight, Dec
>31, 1899, rather than Jan 1, 1970.

That's strange.  Every DOS C compiler I've used returns seconds since
Jan. 1, 1970.  The only time I've seen something based on 1899/1900
was in code that queried a time server for the time.  time()'s very
definition depends on the Unix epoch of 1/1/70.

Are you perhaps using a time() call that is really a NTP or Time protocol
wrapper?

No matter what, you have the right solution, I think.  A better solution,
if possible, would be to fix the offset used by your time() call.

>Pepsy (from isode 8.0) turns that into an int when it creates it's
>tables.

That's a bug in Pepsy-on-DOS, or Pepsy-on-PDP-11 for that matter.  :-)
Someone did a port of ISODE to DOS a while back.  You might see if you
can find that port, since the Pepsy there probably has this bug fixed.

-- 
Stephen Trier                      "We want to offer you a price that you
Network software type               just can't afford to take advantage of."
Case Western Reserve University         - Sales blurb from HSC Software
trier@ins.cwru.edu
Newsgroups: comp.protocols.kerberos
From: dean@ksr.com
Subject: Re: patch for the Next
Organization: Internet-USENET Gateway at Stanford University
Date: Mon, 14 Dec 1992 20:16:54 GMT

Oops!  You have been screwed by NeXT again!  Not only did they give
you an operating system that doesn't work, nor did they stop with an
incompatible, inflexibly-policy'd window system, but......

On the 100 meg version of the NeXTStep, there is no C compiler!  You
lose! Isn't that nice?  You need the 400 meg version of the OS

Are you ready to use it as a doorstop yet?  :-) :-)  

		--Dean

Dean Anderson			dean@ksr.com  | Support the League for 
KSR Computing Facilities                      | Programming Freedom! Email
Kendall Square Research                       | lpf@uunet.uu.net for info.
From: dyer@spdcc.com (Steve Dyer)
Newsgroups: comp.protocols.kerberos
Subject: Re: V5 equivalent of KRBTKFILE
Date: 16 Dec 92 16:00:59 GMT
Article-I.D.: spdcc.1992Dec16.160059.1332
Organization: S.P. Dyer Computer Consulting, Cambridge MA

In article <1gndmfINN6d3@senator-bedfellow.MIT.EDU> jik@athena.mit.edu (Jonathan I. Kamens) writes:
>In the MIT V5 distribution, is there an application-transparent way to tell the
>Kerberos libraries to use a different ticket cache, i.e., something equivalent
>to what KRBTKFILE does in V4?

/*
 * This file contains the source code for krb5_fcc_default_name.
 * 
 * Effects:
 * 
 * Forms the default credential cache name for the current user, which
 * is defined in the following way.  If it is set, the environment
 * variable "KRB5CCACHE" will be used (up to the maximum number of
 * characters of a legal operating system defined path).  Otherwise
 * TKT_ROOT (from fcc.h) and the user's uid are concatenated to
 * produce the ticket file name (e.g., "/tmp/tkt123").  The pointer
 * returned is to static storage; the name must be copied elsewhere.
 */

char *
krb5_fcc_default_name ()
{ ... }

-- 
Steve Dyer
dyer@ursa-major.spdcc.com aka {ima,harvard,rayssd,linus,m2c}!spdcc!dyer
Newsgroups: comp.protocols.iso.x400
From: acus02@ems13.corp.mot.com (David McAnally)
Subject: Re: Looking for Touch Communications Inc
Reply-To: acus02@waccvm.corp.mot.com
Organization: MOTOROLA 
Date: Tue, 15 Dec 1992 14:01:16 GMT

In article <1992Dec15.152143.9@condor> newsmgr@logica.co.uk writes:
> Does anyone know if Touch (the makers of an X.400 gateway for MS Mail
> for the Mac and other mailing systems) are accessible via Internet 
> Mail?
> 
> Many thanks
> 
> William Lees
> Logica International Limited, London UK
> leesw@logica.co.uk

We use their gateways too, although I do not have direct contact with them.  
I believe their name is now WORLDTALK.  Here is what the Internet whois  
returns on that domain.

Worldtalk Corporation (WORLDTALK-DOM)
   250 E. Hacienda Ave.
   Campbell, CA 95008

   Domain Name: WORLDTALK.COM

   Administrative Contact, Technical Contact, Zone Contact:
      McGarry, Neil  (NM33)  neilm@WORLDTALK.COM
      (408) 374-5600

   Record last updated on 16-May-92.

   Domain servers in listed order:

   NS.UU.NET			137.39.1.3
   UUCP-GW-1.PA.DEC.COM		16.1.0.18
   UUCP-GW-2.PA.DEC.COM		16.1.0.19
   NS.EU.NET			192.16.202.11
   NS1.RUTGERS.EDU		128.6.21.6

--
+-------------------------------------------------------------------------+
| David McAnally                     | EMail: acus02@waccvm.corp.mot.com  |
| Motorola Corp. Computer Services   |  Next: acus02@ems13.corp.mot.com   |
| CS / Application Engineering       |                                    |
| M/D AZ49 R3148                     |                                    |
+-------------------------------------------------------------------------+
Newsgroups: comp.protocols.iso.x400
From: crosser@pccross.msk.su (Eugene Crosser)
Subject: Re: X.400 and multimedia mail
Comment-To: unrza3@cd4680fs.rrze.uni-erlangen.de (Markus Kuhn)
Organization: == Eugene Crosser's ==
Date: Sun, 13 Dec 1992 09:34:12 GMT

unrza3@cd4680fs.rrze.uni-erlangen.de (Markus Kuhn) writes:

> - The Reliable Transfer Service Element allows to transfer even very huge
>   messages safely with recovery after connection failure or interruption
>   by high priority messages. An intelligent RTSE engine can even
>   guarantee, that huge low priority messages won't delay the transfer
>   of short high priority mails, which is especially useful for
>   exchanging software and multimedia mails over slow dialup connections.

Markus (or anyone),

Can you name any working implementations capable of transferring hi-priority
mail interrupting a low priority one "over slow dialup connections"?
That would be great here in xUSSR with it's lack of high speed lines.

Thank you,
Eugene
From: bhutchi@godiva.ssw.com (Bill Hutchison)
Subject: Re: X.400(88) Standards
             <937@gofish.cards.COM>
Newsgroups: comp.protocols.iso.x400
Date: 16 Dec 92 13:50:08 GMT

	 X.400'ers,

	   I desperately need to get a copy (electronic or paper) of the X.400
	(1988)

+1 800-666-4266 Omnicom, Inc.   OSI documents
From: dave@intercon.com (Dave Saunders)
Newsgroups: comp.protocols.iso.x400
Subject: Re: LOOKING FOR TOUCH COMMUN
Date: Wed, 16 Dec 1992 10:44:37 -0500
Organization: InterCon Systems Corporation
Distribution: world
Reply-To: dave@intercon.com (Dave Saunders)
NNTP-Posting-Host: dave.intercon.com
Keywords: touch gateway X.400 MTA
X-Newsreader: InterCon TCP/Connect II 1.1fc1

In article <5.459.Bit-MHSnews.PM171095@devcan.ca>, roy.pereira@devcan.ca (ROY 
PEREIRA) writes:
> -> Does anyone know if Touch (the makers of an X.400 gateway for MS Mail 
> -> for the Mac and other mailing systems) are accessible via Internet 
> -> Mail? 
> 
> The last I've heard of them, they went chapter 11 (bankrupt). 

This is correct. Touch no longer exists. 

A company named Jupiter (I think) actually made the gateways for Touch's 
X.400 MTA for QuickMail, MS Mail and InBox. I'm not sure if they're still 
selling those either.




----------------------------------
Dave Saunders <dave@intercon.com>
InterCon Systems Corporation
From: unrza3@cd4680fs.rrze.uni-erlangen.de (Markus Kuhn)
Newsgroups: comp.protocols.iso.x400
Subject: Re: X.400 and multimedia mail
Date: 11 Dec 1992 17:57:37 +0100
Organization: Regionales Rechenzentrum Erlangen
Distribution: inet
Reply-To: mskuhn@immd4.informatik.uni-erlangen.de
NNTP-Posting-Host: cd4680fs.rrze.uni-erlangen.de
Keywords: X.400

sl@wimsey.bc.ca (Stuart Lynne) writes:

>In article <1g4h48EINNt1v@uni-erlangen.de> mskuhn@immd4.informatik.uni-erlangen.de writes:
>>bakker@cs.rulimburg.nl (Harm Bakker) writes:
>>
>>  rare escape sequences, ...). Messages are streams of bytes delimited by
>>  length indicators, the easiest, most efficient and most robust
>>  method possible.

>Not too quible too much. But I'd hesitate to say that it's the easiest. 

>If a data producer must know exactly how much data he's going to produce
>he will have to buffer it before sending so he can count it. If you have a
>method of indicating end of data you can simply send it as you produce it.

But ASN.1/BER offers you exactly this facility: If you you have
a data type OctettString (a 100% transparent byte stream) with a value
of length 30 MB, then you can split the OctettString in a sequence of
blocks of manageable size (manageable for the sender, receiving is simpler)
and each block is delimited by a length indicator. After the final block
you send a block with the length indicator 0 and the whole value
is delimited. This facility has been part of the BER encoding of ASN.1 for
nearly 10 years now (if we go back to the early X.409 version).

So I don't understand your problem. Tell me a more efficient solution,
that avoids parsing the input stream for escape sequences and
meta-escape sequences that hide escape sequences in the data stream
(e.g. if you mail a document that describes that !@! is the delimiter
of a message, then you have to convert !@! in something less dangerous
[byte stuffing]). This costs a lot of CPU cycles if you have to look at
each of millions of multi-media bytes in your parser. Using X.400, you
can tell the DMA to transfer manageable blocks in BER encoded messages
quickly to the MPEG audio/video decompression chip. :-)

Markus

-- 
Markus Kuhn, Computer Science student -=-=- University of Erlangen, Germany
Internet: mskuhn@immd4.informatik.uni-erlangen.de  |  X.500 entry available
----- Anyone participating in the use of MS-DOS, Heroin or Cocaine is -----
---- simply not getting the most out of life possible. (Brian Downing) ----
From: pni@tik.vtt.fi (Pentti Nikula)
Newsgroups: comp.protocols.iso.x400
Subject: I need information about X.400(92)
Date: 14 Dec 1992 10:20:50 +0200
Organization: Technical Research Centre of Finland, Laboratory for Information Processing (VTT/TIK)
Distribution: comp
NNTP-Posting-Host: tik.vtt.fi

Hello X.400-folks,

I need some (general) information about X.400(92):
What is the current status?   Is it released yet?
Whats new?    Whats missing still?

and so on.
Thanks in advance

Pentti.Nikula@TIK.VTT.FI
From: pep@ambra.dk (Peter Pedersen)
Newsgroups: comp.protocols.iso.x400
Subject: X.400-SMTP Gateway
Summary: X.400-SMTP Gateway
Keywords: X.400, SMTP, Gateway
Date: 18 Dec 92 10:21:11 GMT
Organization: AmbraSoft A/S


We are looking for gateways between SMTP based mail system to X400 based.
We are especially interested in gateways that support the MIME specifications.

Please email product-, company-name, fax-number etc to pep@ambra.dk.

Thanks in advance

Peter Pedersen
Ambrasoft Int. A/S, Copenhagen, Denmark
pep@ambra.dk
From: stine@gofish.NoSubdomain.NoDomain (Greg Stine)
Newsgroups: comp.protocols.iso.x400
Subject: X.400(88) Standards
Date: 14 Dec 92 20:44:05 GMT

X.400'ers,

  I desperately need to get a copy (electronic or paper) of the X.400 (1988)
  standards.  Any help would be greatly appreciated.

Thanks in advance,
Greg Stine

P.S. Big brother is watching and filters most of the newsgroup postings before
     they get to me.  In fact, I'm not sure this request will make it very far.
     So, if you respond, please do so by email (stine@cards.com).
From: unrza3@cd4680fs.rrze.uni-erlangen.de (Markus Kuhn)
Newsgroups: comp.protocols.iso.x400
Subject: Re: Compulsory address fields
Date: 17 Dec 1992 17:50:32 +0100
Organization: Regionales Rechenzentrum Erlangen
Distribution: inet
Reply-To: mskuhn@immd4.informatik.uni-erlangen.de
NNTP-Posting-Host: cd4680fs.rrze.uni-erlangen.de

hta@boheme.er.sintef.no (Harald Tveit Alvestrand) writes:

>|> Question: what are the compulsory X.400 address fields?  Specifically,
>|> can an address contain C, ADMD, PRMD, OU and PN but NOT ORG?
>Yes. Look at the addresses used by German academic sites.
>(PRMD=university;OU1=university OU)
>I personally think that it is a bad idea, but they do not agree with me.

Oh, there are quite a number of people in the DFN (the German academic
network community) that believe, that a PRMD=dfn and a O=university XY
would have been a MUCH better approach. Today, we have a ADMD of a
PTT (dbp) although the X.400 net of DFN is not connected to the
X.400 Telebox system of dbp. It's really a bad system they've selected
here. You can't determine from a C=de ORAddress, whether it is located
in the DFN net or in the X.400 Telebox. This causes quite a lot confusion
in the gateway world.

Markus

-- 
Markus Kuhn, Computer Science student -=-=- University of Erlangen, Germany
Internet: mskuhn@immd4.informatik.uni-erlangen.de  |  X.500 entry available
----- Anyone participating in the use of MS-DOS, Heroin or Cocaine is -----
---- simply not getting the most out of life possible. (Brian Downing) ----
Newsgroups: comp.protocols.iso.x400
From: jdale@cos.com (John H. Dale)
Subject: Re: Compulsory address fields
Organization: Corporation for Open Systems
Date: Sat, 19 Dec 1992 01:43:11 GMT

>>Question: what are the compulsory X.400 address fields?  Specifically,
>>can an address contain C, ADMD, PRMD, OU and PN but NOT ORG?

Not my area, but I have the blue book handy.  There may be
other standards or profile requirements that apply.  But
in X.402 clause 18.5, it seems to say (for the mnemonic
form): 
   Must have one country and admd to specify an ADMD.
   Some combination of a prmd, org, ou, pn, cn (up to one
    of each, except several ou allowed).
   Optionally, one or more dda.
My guess is ou without org makes sense because often the
org is running the prmd.

My guess is that there are other rules that apply as well.
From: hertzh%lanf.kaiserslau-emh1.army.mil@kaiserslau-emh1.army.mil ("Harry W.Hertz")
Subject: EtherMax 2000 ?
Location: Landstuhl Hospital, Bldg. 3809, Germany
Newsgroups: comp.protocols.iso.x400
Contact: InterNet E-mail Address is:
Reply-To: hertzh%lanf@kaiserslau-emh1.army.mil
Date: 14 Dec 92 09:20:08 GMT
Phone: ETS 486-8315 or Comm +49 6371 868315
Address: 7th MEDCOM, RF&AO, ADP Sec.,APO A.E.09180

Hi,

does anyone know of a product called EtherMax 2000 ?  What does it do ?
Where can I order it ?

thanks,

Harry W. Hertz  hertzh@lanf.kaiserslau-emh1.army.mil  Germany