From kitten-bounces@lists.ietf.org Fri Jul 01 01:59:55 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoEZ9-0001hk-B4; Fri, 01 Jul 2005 01:59:55 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoEZ7-0001gM-HM for kitten@megatron.ietf.org; Fri, 01 Jul 2005 01:59:53 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA20372 for ; Fri, 1 Jul 2005 01:59:52 -0400 (EDT) Received: from biscayne-one-station.mit.edu ([18.7.7.80]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoEz0-0005AQ-Tz for kitten@ietf.org; Fri, 01 Jul 2005 02:26:40 -0400 Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.12.4/8.9.2) with ESMTP id j615xnk4019314; Fri, 1 Jul 2005 01:59:50 -0400 (EDT) Received: from [18.101.0.226] ([18.101.0.226]) (authenticated bits=0) (User authenticated as raeburn@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.1/8.12.4) with ESMTP id j615wXxP024154 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT); Fri, 1 Jul 2005 01:58:34 -0400 (EDT) In-Reply-To: <1119863504.8698.22.camel@amy.flyaway.abartlet.net> References: <1113608643.7488.274.camel@amy.samba4.abartlet.net> <42607B3A.3010806@columbia.edu> <42608663.2060506@sun.com> <200504211232.20480.mpeterson@vintela.com> <1119863504.8698.22.camel@amy.flyaway.abartlet.net> Mime-Version: 1.0 (Apple Message framework v622) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: From: Ken Raeburn Date: Fri, 1 Jul 2005 01:58:32 -0400 To: Andrew Bartlett X-Mailer: Apple Mail (2.622) X-Spam-Score: -2.799 X-Spam-Flag: NO X-Scanned-By: MIMEDefang 2.42 Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-Scan-Signature: cf4fa59384e76e63313391b70cd0dd25 Content-Transfer-Encoding: 7bit Cc: kitten@ietf.org, Sam Hartman Subject: Re: CIFS and the krb5 PRF X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Jun 27, 2005, at 05:11, Andrew Bartlett wrote: > The 'CIFS Session key' export is just one of these required extensions > - > we also need to change the GSS_Wrap arguments to support AEAD, and > closer control over the underlying Kerberos behaviour. Hm, AEAD is needed for Samba? Wish I'd know that a year ago; it might've tipped the balance in favor of getting some sort of AEAD into RFC 3961. Can you point me to some additional info on this? I don't think we can change GSS_Wrap to support AEAD without making it incompatible with previous specs. A new function would probably be needed. Ken _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 01 13:22:35 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoPDn-00069R-6P; Fri, 01 Jul 2005 13:22:35 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoPDk-00067W-O8 for kitten@megatron.ietf.org; Fri, 01 Jul 2005 13:22:33 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA17584 for ; Fri, 1 Jul 2005 13:22:29 -0400 (EDT) Received: from smtpde02.sap-ag.de ([155.56.68.170]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoPdk-0007iT-Qk for kitten@ietf.org; Fri, 01 Jul 2005 13:49:25 -0400 Received: from sap-ag.de (smtpde02) by smtpde02.sap-ag.de (out) with ESMTP id TAA08234; Fri, 1 Jul 2005 19:11:48 +0200 (MESZ) From: Martin Rex Message-Id: <200507011711.TAA11683@uw1048.wdf.sap.corp> To: hartmans-ietf@mit.edu (Sam Hartman) Date: Fri, 1 Jul 2005 19:11:48 +0200 (MET DST) In-Reply-To: from "Sam Hartman" at Jun 29, 5 06:03:26 pm MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-SAP: out X-SAP: out X-SAP: out X-Spam-Score: 0.0 (/) X-Scan-Signature: c83ccb5cc10e751496398f1233ca9c3a Content-Transfer-Encoding: 8bit Cc: kitten@ietf.org Subject: Re: request for agenda items X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: martin.rex@sap.com List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Sam Hartman wrote: > > I'd like to have a discussion on what it would take to move 2743/2744 > to draft? Would we have to respin the documents? The most important task is to demonstrate independent interoperable implementations. Formally, a WG needs to reconsider the document and remove parts that are not being used or failed to show interoperability (those parts that can be removed without breaking the spec). Since GSS-API (in particular rfc2743/2744) are a first of all a definition of a common API, this means that we need "portable" applications that show plug-and-play with different gssapi mechanisms. John Linn (the original WG chair of ietf-cat) contacted me in May 2001 about an effort to move GSS-API to draft standard, but it appears he couldn't raise enough momentum to make it happen. Maybe you should talk to him again. I do have some experience with plug-n-play of our application with more than a dozen independent gssapi mechanisms. We have set up an interoperability certification for our application with third-party gssapi mechanisms. I was given the permission to publish as OpenSource the software (called "GSSTEST") which we use to perform (GSS-)API-level testing of third-party gssapi mechanisms. (ftp://ftp.sap.com/pub/ietf-work/gssapi/gsstest/gsstest-1.26.zip) The tested functionality is focused on the functionality that we need and how we use it, and therefore a subset of GSS-API v2. GSSTEST checks characteristics which I admit to be SAP specific interoperability constraints, and things that *I* believe are general requirements, but others may disagree. :) But although it's been availabe for more than 5 years, it doesn't seem to be very popular (or known) among gssapi implementors. GSSTEST is happy with MIT Kerberos 1.2.x, HP-UX Kerberos (which seems to be very close to MIT's 1.2.1) and recent Heimdal implementations. It has serious problems with Sun's Kerberos, and if Microsoft would be using it, it would have saved them a couple of hotfixes... The things that may need to be removed because of a lack of interoperability are according to *MY* experience: - channel bindings - hostbased service names Reason: Few (if any) portable applications request and use it, and the majority of gssapi mechanisms simply doesn't implement either one. Actually, the single mechanism that I know to implement it is Kerberos, and even there Microsoft didn't implement channel bindings... Entirely removing these features is impossible without breaking the spec, and I do know that there are niches in the Kerberos area where these features are actively used. However the spec needs to be updated with guidelines on its use and a general caution that applications will encounter gssapi mechanisms that do not offer these features. Another difficult area is the use of (printable) names with GSS-API. The seriously underspecified RFC-2025 (The Simple Public Key GSS-API mechanism) does not define a mechanism specific name format, which significantly impairs interoperability in a heterogeneous environment and may outright prevent interoperability in a heterogeneous distributed environment. The definition of the name format in the Kerberos gssapi mechanism spec rfc-1964 has saved Kerberos from the most serious troubles, but the transition from just-send-8 to Unicode/UTF-8 characters exists. This is an area where GSS-API v2 can be considered underspecified. The data type when passing a printable name through a gssapi function is "octet string" with an accompanying nametype OID, and the most common implementation tradition is to use whatever 8-bit character set is the default on the platform. When printable names are the input to gssapi calls, it should be possible to add a nametype-OID for every existing with the same inpretation, just indicating that the encoding is UTF-8 rather than the default local 8-bit charset. The two difficulties that come to my mind with this approach: (1) installed base applications don't know about the UTF-8 nametypes and will continue to use the existing nametypes (2) installed base applications will probably choke when gss_display_name() suddenly returns an unknown nametype (1) should not be a problem (except constraining the use of names while older applications are still being used), but (2) is difficult: how can a gssapi mechanism distinguish when it is ok to return a newer UTF-8 style nametype from gss_display_name(), and when doing it will cause the calling (old) application to choke and break. So when we add UTF8-encoded nametypes, then we should define how an application can indicate to the gssapi-mechanism that it is a new application and aware of UTF-8 and will not break when gss_display_name returns an UTF-8 based nametype or gss_display_status returns UTF8-encoded text. -Martin _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 01 14:01:42 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoPpe-0008Vn-Bg; Fri, 01 Jul 2005 14:01:42 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoPpc-0008PH-84 for kitten@megatron.ietf.org; Fri, 01 Jul 2005 14:01:40 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA23317 for ; Fri, 1 Jul 2005 14:01:36 -0400 (EDT) Received: from smtpde02.sap-ag.de ([155.56.68.170]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoQFc-0002Z9-Ql for kitten@ietf.org; Fri, 01 Jul 2005 14:28:33 -0400 Received: from sap-ag.de (smtpde02) by smtpde02.sap-ag.de (out) with ESMTP id UAA11077; Fri, 1 Jul 2005 20:01:08 +0200 (MESZ) From: Martin Rex Message-Id: <200507011801.UAA12935@uw1048.wdf.sap.corp> To: hartmans-ietf@mit.edu (Sam Hartman) Date: Fri, 1 Jul 2005 20:01:08 +0200 (MET DST) In-Reply-To: from "Sam Hartman" at Jun 30, 5 05:23:49 pm MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-SAP: out X-SAP: out X-SAP: out X-Spam-Score: 0.0 (/) X-Scan-Signature: 4adaf050708fb13be3316a9eee889caa Content-Transfer-Encoding: 8bit Cc: kitten@ietf.org Subject: Re: request for agenda items X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: martin.rex@sap.com List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Sam Hartman wrote: > > I actually suspect Martin may well already have sufficient data to > meet the interop requirements for draft standard. I don't know if he > would be willing to share that data with us or whether his > confidentiality agreements would allow him to do so. As you mention it, it is actually surprising that with most vendors that asked for interoperability certification, they downloaded and used gsstest and sent me the output for review and comment long before they signed a formal certification agreement (because that comes with a cost). There is, of course, the expectation of privacy of those Email discussions as well as the general confidentiality agreement on work-related issues with my employer. Because of the procedure that we use for certification (there is also a test plan how to verify interoperability with our real application, not just gsstest, and we have a department with several offices worldwide which performs the real certification procedure when the vendor thinks he's ready, based on the test-plan, gsstest, and my review/comments on the output of gsstest). Myself, I have no hands-on experience with most of the gssapi mechanisms that we certified for interoperability with our application, i only know what gsstest told me about their behaviour and characteristics. It should be OK if I sent Emails to the developers who worked on the interoperability certification and ask them whether they would be willing to participate official interoperability testing for the IETF purpose to advance the GSS-API spec to draft standard. Some of the developers may have changed jobs/companies meanwhile and their Email addresses no longer work, and most of them have probably never particiated an IETF activity... But in order to get participation, we should have a plan how this is going to done -- what those developers/companies would have to do in order to help us. -Martin _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 01 14:07:47 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoPvX-000727-NE; Fri, 01 Jul 2005 14:07:47 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoPvV-000722-Jt for kitten@megatron.ietf.org; Fri, 01 Jul 2005 14:07:45 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA23980 for ; Fri, 1 Jul 2005 14:07:42 -0400 (EDT) Received: from cluster-b.mailcontrol.com ([217.68.146.190] helo=rly12b.srv.mailcontrol.com) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoQLV-0002qF-AG for kitten@ietf.org; Fri, 01 Jul 2005 14:34:38 -0400 Received: from cybersafe.ltd.uk (dsl-212-23-30-205.zen.co.uk [212.23.30.205]) by rly12b.srv.mailcontrol.com (MailControl) with ESMTP id j61I7VLh012479; Fri, 1 Jul 2005 19:07:31 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Fri, 1 Jul 2005 19:07:31 +0100 Message-ID: <0D8F2EFD3A10E24DAEEA48EA6DA07D3015347B@postman-pat.csafe.local> From: "Tim Alsop" To: , "Sam Hartman" X-Scanned-By: MailControl A-05-01-05 (www.mailcontrol.com) X-Spam-Score: 0.0 (/) X-Scan-Signature: c0bedb65cce30976f0bf60a0a39edea4 Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org Subject: RE: request for agenda items X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Martin, We regularly use gsstest, and I am willing to submit our gsstest reports for IETF consideration if required. Thanks, Tim=20 -----Original Message----- From: kitten-bounces@lists.ietf.org [mailto:kitten-bounces@lists.ietf.org] On Behalf Of Martin Rex Sent: 01 July 2005 19:01 To: Sam Hartman Cc: kitten@ietf.org Subject: Re: request for agenda items Sam Hartman wrote: >=20 > I actually suspect Martin may well already have sufficient data to=20 > meet the interop requirements for draft standard. I don't know if he=20 > would be willing to share that data with us or whether his=20 > confidentiality agreements would allow him to do so. As you mention it, it is actually surprising that with most vendors that asked for interoperability certification, they downloaded and used gsstest and sent me the output for review and comment long before they signed a formal certification agreement (because that comes with a cost). There is, of course, the expectation of privacy of those Email discussions as well as the general confidentiality agreement on work-related issues with my employer. Because of the procedure that we use for certification (there is also a test plan how to verify interoperability with our real application, not just gsstest, and we have a department with several offices worldwide which performs the real certification procedure when the vendor thinks he's ready, based on the test-plan, gsstest, and my review/comments on the output of gsstest). Myself, I have no hands-on experience with most of the gssapi mechanisms that we certified for interoperability with our application, i only know what gsstest told me about their behaviour and characteristics. It should be OK if I sent Emails to the developers who worked on the interoperability certification and ask them whether they would be willing to participate official interoperability testing for the IETF purpose to advance the GSS-API spec to draft standard. Some of the developers may have changed jobs/companies meanwhile and their Email addresses no longer work, and most of them have probably never particiated an IETF activity... But in order to get participation, we should have a plan how this is going to done -- what those developers/companies would have to do in order to help us. -Martin _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 01 15:09:27 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoQtD-00011L-7l; Fri, 01 Jul 2005 15:09:27 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoQtC-00011G-BE for kitten@megatron.ietf.org; Fri, 01 Jul 2005 15:09:26 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA00380 for ; Fri, 1 Jul 2005 15:09:20 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoRJ9-0005yn-6I for kitten@ietf.org; Fri, 01 Jul 2005 15:36:17 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id j61J9KKg020877 for ; Fri, 1 Jul 2005 12:09:20 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j61J9Jfb019880 for ; Fri, 1 Jul 2005 13:09:19 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j61J9IZm025414; Fri, 1 Jul 2005 14:09:18 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j61J9HQ8025413; Fri, 1 Jul 2005 14:09:17 -0500 (CDT) Date: Fri, 1 Jul 2005 14:09:17 -0500 From: Nicolas Williams To: Martin Rex Message-ID: <20050701190917.GB16670@binky.Central.Sun.COM> Mail-Followup-To: Martin Rex , Sam Hartman , kitten@ietf.org References: <200507011711.TAA11683@uw1048.wdf.sap.corp> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200507011711.TAA11683@uw1048.wdf.sap.corp> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: 92df29fa99cf13e554b84c8374345c17 Cc: kitten@ietf.org, Sam Hartman Subject: Re: request for agenda items X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Fri, Jul 01, 2005 at 07:11:48PM +0200, Martin Rex wrote: > The things that may need to be removed because of a lack of > interoperability are according to *MY* experience: > - channel bindings There are interoperable implementations of channel bindings. For years MIT's FTP w/ GSS-API implementation used channel bindings. > - hostbased service names There are interoperable implementations of hostbased service names. A number of NFS implementors interoperate using the Kerberos V mechanism and hostbased service names. Demonstrations can be arranged. > Another difficult area is the use of (printable) names > with GSS-API. The seriously underspecified RFC-2025 > (The Simple Public Key GSS-API mechanism) does not > define a mechanism specific name format, which significantly > impairs interoperability in a heterogeneous environment > and may outright prevent interoperability in a heterogeneous > distributed environment. I'd like SPKM to be moved to Historic. > The definition of the name format in the Kerberos gssapi mechanism spec > rfc-1964 has saved Kerberos from the most serious troubles, but > the transition from just-send-8 to Unicode/UTF-8 characters exists. > > > This is an area where GSS-API v2 can be considered underspecified. > > The data type when passing a printable name through a gssapi function > is "octet string" with an accompanying nametype OID, and the most > common implementation tradition is to use whatever 8-bit character > set is the default on the platform. RFC2744 speaks of Latin-1 -- a really poor choice. Instead the character encoding and any language settings (for localization in gss_display_status(), say) should be platform-specific, with conversions to/from UTF-8 or any other character set/encoding left to mechanisms where they require it. Most platforms nowadays have a concept of locale. POSIX should have a thread-safe notion of locale, and one could be grafted on to it, and really should be, but it's not there yet. > When printable names are the input to gssapi calls, it should be > possible to add a nametype-OID for every existing with the > same inpretation, just indicating that the encoding is UTF-8 > rather than the default local 8-bit charset. Or the application could communicate this to the GSS implemantation using locales, letting the mechanisms convert as necessary. This is not a perfect solution, to be sure, as it's not possible to enter all Unicode characters or equivalents in most non-Unicode locales. But then, if users are running in non-Unicode locales and need to enter or display Unicode characters that their non-Unicode locales don't allow for, well, then they should start using Unicode locales. I.e., I see the GSS-API I18N issues as mostly, or entirely, even, a platform- and mechanism-specific issue. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 01 18:04:52 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoTcy-0003MT-LF; Fri, 01 Jul 2005 18:04:52 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoTcw-0003GF-D9 for kitten@megatron.ietf.org; Fri, 01 Jul 2005 18:04:50 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA28305 for ; Fri, 1 Jul 2005 18:04:47 -0400 (EDT) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoU2w-000388-S3 for kitten@ietf.org; Fri, 01 Jul 2005 18:31:45 -0400 Received: from phys-d3-ha21sca-1 ([129.145.155.163]) by brmea-mail-3.sun.com (8.12.10/8.12.9) with ESMTP id j61M4k8v013046 for ; Fri, 1 Jul 2005 16:04:46 -0600 (MDT) Received: from conversion-daemon.ha21sca-mail1.sfbay.sun.com by ha21sca-mail1.sfbay.sun.com (iPlanet Messaging Server 5.2 HotFix 1.24 (built Dec 19 2003)) id <0IIY00M01YK9GC@ha21sca-mail1.sfbay.sun.com> (original mail from Seema.Malkani@Sun.COM) for kitten@ietf.org; Fri, 01 Jul 2005 15:04:46 -0700 (PDT) Received: from sun.com (vpn-129-150-33-109.Central.Sun.COM [129.150.33.109]) by ha21sca-mail1.sfbay.sun.com (iPlanet Messaging Server 5.2 HotFix 1.24 (built Dec 19 2003)) with ESMTP id <0IIY00L5JYNW4Y@ha21sca-mail1.sfbay.sun.com>; Fri, 01 Jul 2005 15:04:46 -0700 (PDT) Date: Fri, 01 Jul 2005 15:05:55 -0700 From: Seema Malkani In-reply-to: <42C335A1.5070903@columbia.edu> To: Jeffrey Altman Message-id: <42C5BE43.6090509@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.4) Gecko/20040414 References: <20050625040059.GL711@binky.Central.Sun.COM> <42BEE902.3010009@sun.com> <42C335A1.5070903@columbia.edu> X-Spam-Score: 0.0 (/) X-Scan-Signature: 67c1ea29f88502ef6a32ccec927970f0 Content-Transfer-Encoding: 7BIT Cc: kitten@ietf.org, Nicolas Williams Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Hello... back from JavaOne. I would like to clarify few things here: 1) JCP Process When RFC 2853 was published, we went through Sun's JCP process for the Java GSS bindings before providing an implementation in the JDK. Any updates to the Java GSS Bindings would also need to go though the JCP process. Here is the JSR on the Java GSS bindings: http://www.jcp.org/en/jsr/detail?id=72 2) Other GSS extensions Address all the other GSS extensions before submitting any updates to the Java GSS API. In addition ensure any update made to Java GSS API does not break backward compatibility. As for the PRF extension, we can consider extending the GSSContext Interface and add PRF to the new interface. For e.g. public interface GSSContextExt extends GSSContext { public byte[] prf(...); } I would prefer to address all the GSS extensions for Java GSS bindings in a separate draft. Seema Jeffrey Altman wrote: >Seema Malkani wrote: > > > >>To answer Ken's question : >> >>Adding a new method to a standardized interface will break existing >>applications. This means all classes that implement GSSContext interface >>will now need to add the new method. All implementations of Java GSS >>will NOT compile until the new method is added. >> >>Abstract classes don't have such a problem, since you can provide a >>default (possibly empty) implementation, and existing implementations >>will not break. It is easier to evolve an abstract class than to evolve >>an interface. Since GSSContext was defined to be an interface, we cannot >>change it. >> >>Alternatives ? >> >>We can possibly add the new method to GSSManager class, which is an >>abstract class. This class serves as a factory for three GSS interfaces: >>GSSName, GSSCredential, and GSSContext. The new method will have to be >>invoked after the GSSContext has been established. >> >>GSSManager class: >>public byte[] prf(GSSContext context, int prf_key, byte[] inBuf, int >>outlen) >> throws GSSException >> >>GSSManager mgr = GSSManager.getInstance(); >>GSSName targetName = mgt.createName("service@host", ..); >>GSSContext context = mgr.createContext(targetName, ..); >>.. >>if (context.isEstablished()) { >> // define PRF key, input.. >> int prf_key = .. >> .. >> byte[] prf_out = mgr.prf(context, prf_key, inBuf, outlen); >>} >> >>Seema >> >> > >I have given this subject much consideration. I believe that the >issues relating to Java and C# are no different than the issues related >to the C binding. What this document does is specify an >"implementation specific extension" to GSS API version 2 update 1. >As such, it is not going to be possible for a given application to be >able to expect that this functionality exists without some >implementation specific knowledge that it is there. Simply knowing that >we are using GSS API will not be enough. > >I do not believe it is appropriate for this document (or any other >document specifying an extension to GSSAPI v2 u1 that Kitten publishes >before GSSAPI v3) to describe the tools necessary for a caller to >determine whether or not the function/method is implemented by a given >implementation. The mistake that the document makes is by specifying >that the method belongs to the "GSSContext" interface. It is perfectly > reasonable for a Java class that implements the GSSContext interface to >provide the prf() method even if it is not part of the GSSContext >interface. An application that expects to use the prf() prior to the >availability of a GSSv3Context interface will need to obtain the >GSSContext reference, use introspection on the resulting class to search >for the method, and if it is found, use a class reference to access the >method. > >I believe that adding this method to the GSSManager class would violate >the abstraction model. prf is the first of many extensions this working >group will be proposing. Continuously adding new methods to GSSManager >would result in a class definition that is constantly in a state of flux >without providing any real benefit. > >Jeffrey Altman > > > > >------------------------------------------------------------------------ > >_______________________________________________ >Kitten mailing list >Kitten@lists.ietf.org >https://www1.ietf.org/mailman/listinfo/kitten > > _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 01 18:28:42 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoU02-0000hH-0g; Fri, 01 Jul 2005 18:28:42 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoU00-0000hA-IM for kitten@megatron.ietf.org; Fri, 01 Jul 2005 18:28:40 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA01598 for ; Fri, 1 Jul 2005 18:28:37 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoUQ3-0005nZ-Fu for kitten@ietf.org; Fri, 01 Jul 2005 18:55:35 -0400 Received: from [10.227.70.101] (user-0cdf825.cable.mindspring.com [24.215.160.69]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j61MScYn022291 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 1 Jul 2005 18:28:38 -0400 (EDT) Message-ID: <42C5C38A.4080902@columbia.edu> Date: Fri, 01 Jul 2005 18:28:26 -0400 From: Jeffrey Altman Organization: No Longer Affiliated with Columbia University in the City of New York User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Seema Malkani References: <20050625040059.GL711@binky.Central.Sun.COM> <42BEE902.3010009@sun.com> <42C335A1.5070903@columbia.edu> <42C5BE43.6090509@sun.com> In-Reply-To: <42C5BE43.6090509@sun.com> X-Enigmail-Version: 0.92.0.0 X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.1 (/) X-Scan-Signature: 36c793b20164cfe75332aa66ddb21196 Cc: kitten@ietf.org, Nicolas Williams Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1562295970==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org This is a cryptographically signed message in MIME format. --===============1562295970== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms020301060301040700060508" This is a cryptographically signed message in MIME format. --------------ms020301060301040700060508 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Seema Malkani wrote: > Hello... back from JavaOne. > > I would like to clarify few things here: > > 1) JCP Process > When RFC 2853 was published, we went through Sun's JCP process for the > Java GSS bindings before providing an implementation in the JDK. > Any updates to the Java GSS Bindings would also need to go though > the JCP process. Here is the JSR on the Java GSS bindings: > http://www.jcp.org/en/jsr/detail?id=72 IETF Standards Track documents are developed within the IETF and IETF processes. By working with IETF to develop a standards track specification for JGSS, Sun has given up the right to utilize the JCP. > 2) Other GSS extensions > Address all the other GSS extensions before submitting any updates to the > Java GSS API. In addition ensure any update made to Java GSS API does not > break backward compatibility. > > As for the PRF extension, we can consider extending the GSSContext > Interface and add PRF to the new interface. For e.g. > public interface GSSContextExt extends GSSContext { > public byte[] prf(...); > } > > I would prefer to address all the GSS extensions for Java GSS bindings > in a separate draft. As I stated in my e-mail, this document does not specify the inclusion of the prf() method in any standard "interface". It would be inappropriate to include prf() in "GSSContextExt" because we would then have "GSSContextExtExt" when the next new method is defined. Implementors are free to implement prf() as part of their implementation specific classes that also implement the GSSContext interface. A new interface should not be published until the GSSv3 spec is complete. Jeffrey Altman --------------ms020301060301040700060508 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAw7NrDANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNTI3MTc0MjQzWhcNMDYwNTI3MTc0MjQz WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LutDu/YyHreNfoYd+ZtOjXsL h67F2cmcVuBPBz+ZGDA+WpVEHrqXaZZO8acXBR5uAVfiwA1acE/kvD/CN5kAqx1VJuQ8Pvyk iGHhUYTd27ZTliBIrptC7C/381gVwkS+a8jQFPJPO+OktZDzAYplGRY/MQCV8dIsvXUjucox 7TwTTdoLAJYRvHtfEcaCc6mO4ph6NeXQw8Grlx3IRAlTrkE5fBGyjH6R4fqnFTXRQAh1/bG+ i8hQvE6mud3mXdL2t7NP1Qxd9wW0/F/pnWY12IFP/luc3zEzIPvAe+nJluLuSEj0LZgP16mF xBj1p+u9HPWcHRVX6q7+MQ0RWOv1AgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAUDUuzxiq8bbI8vq2 swRK513RphZp+fepyKU5mwBI6aF4GcmqITQILtfTG2SXnjSeY99d+bjOdK1DJFvVh9aOy8mh 2NbEnqMnJIZtg5+eEU64DIV5bQdDRpi99H9vA0sRATIquut+3YHba+zArj0VkVof2VI+ToBu sHdtSrZYo0gwggL6MIICY6ADAgECAgMOzawwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1MDUyNzE3NDI0M1oXDTA2 MDUyNzE3NDI0M1owazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7rQ7v2Mh63 jX6GHfmbTo17C4euxdnJnFbgTwc/mRgwPlqVRB66l2mWTvGnFwUebgFX4sANWnBP5Lw/wjeZ AKsdVSbkPD78pIhh4VGE3du2U5YgSK6bQuwv9/NYFcJEvmvI0BTyTzvjpLWQ8wGKZRkWPzEA lfHSLL11I7nKMe08E03aCwCWEbx7XxHGgnOpjuKYejXl0MPBq5cdyEQJU65BOXwRsox+keH6 pxU10UAIdf2xvovIULxOprnd5l3S9rezT9UMXfcFtPxf6Z1mNdiBT/5bnN8xMyD7wHvpyZbi 7khI9C2YD9ephcQY9afrvRz1nB0VV+qu/jENEVjr9QIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAFA1 Ls8YqvG2yPL6trMESudd0aYWafn3qcilOZsASOmheBnJqiE0CC7X0xtkl540nmPfXfm4znSt QyRb1YfWjsvJodjWxJ6jJySGbYOfnhFOuAyFeW0HQ0aYvfR/bwNLEQEyKrrrft2B22vswK49 FZFaH9lSPk6AbrB3bUq2WKNIMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMOzaww CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDUwNzAxMjIyODI2WjAjBgkqhkiG9w0BCQQxFgQUHldNOBNxq5IUA+u0kPiGnsYiY5gw UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAw7NrDB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMOzawwDQYJKoZIhvcNAQEBBQAEggEAGy1o1wvO/gzSmnFU0RjhJ/VjntS4cyGCfn1jKuYU 4fnQ/0NpP/ydPqMlg5Vf3G8RVQy+3FTn++BQQXwnnA7IhsNooEegRy7t0Mwi0NOM2LGRgBPI yBsLlK6adOrWwrCtNjlYM7Qye99VX8J5mCkEWl8lUtkkjHMkx3TS7rZZ8FS/hOFAPSBSZV/c 66ccLYeGFP57c+t8nt58HRNJvwxuuQC/6INpTnq8JdTRxrPSc6w2foDnLhE4uW8yfGd7rise KDQOUIQmJbcJbAmT+EfZQK/VHms5odYck6D6PzXJEGwL0W8N1SW9inea66rYmsnm3/KGh2CL F+RE8Lm/9SYWvwAAAAAAAA== --------------ms020301060301040700060508-- --===============1562295970== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1562295970==-- From kitten-bounces@lists.ietf.org Fri Jul 01 18:35:09 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoU6H-00037P-Cf; Fri, 01 Jul 2005 18:35:09 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoU6F-00033K-T8 for kitten@megatron.ietf.org; Fri, 01 Jul 2005 18:35:08 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA02024 for ; Fri, 1 Jul 2005 18:35:04 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoUWF-0006aE-UZ for kitten@ietf.org; Fri, 01 Jul 2005 19:02:03 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id j61MZ0FF000994 for ; Fri, 1 Jul 2005 15:35:01 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j61MYx3Z012693 for ; Fri, 1 Jul 2005 16:35:00 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j61MYwBJ025733; Fri, 1 Jul 2005 17:34:59 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j61MYuDf025732; Fri, 1 Jul 2005 17:34:56 -0500 (CDT) Date: Fri, 1 Jul 2005 17:34:56 -0500 From: Nicolas Williams To: Jeffrey Altman Message-ID: <20050701223456.GJ16670@binky.Central.Sun.COM> Mail-Followup-To: Jeffrey Altman , Seema Malkani , kitten@ietf.org References: <20050625040059.GL711@binky.Central.Sun.COM> <42BEE902.3010009@sun.com> <42C335A1.5070903@columbia.edu> <42C5BE43.6090509@sun.com> <42C5C38A.4080902@columbia.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <42C5C38A.4080902@columbia.edu> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7aefe408d50e9c7c47615841cb314bed Cc: kitten@ietf.org, Seema Malkani Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Fri, Jul 01, 2005 at 06:28:26PM -0400, Jeffrey Altman wrote: > Implementors are free to implement prf() as part of their implementation > specific classes that also implement the GSSContext interface. A new > interface should not be published until the GSSv3 spec is complete. I agree -- and I think Seema meant that we should hold off on designing new such Java interfaces until we get to the GSS-APIv3. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 01 18:51:04 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoULg-00056n-FM; Fri, 01 Jul 2005 18:51:04 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DoULf-00056e-1Y for kitten@megatron.ietf.org; Fri, 01 Jul 2005 18:51:03 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA03259 for ; Fri, 1 Jul 2005 18:50:59 -0400 (EDT) Received: from brinza.cc.columbia.edu ([128.59.29.8] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DoUlh-0008Gz-Bj for kitten@ietf.org; Fri, 01 Jul 2005 19:17:58 -0400 Received: from [10.227.70.101] (user-0cdf825.cable.mindspring.com [24.215.160.69]) (user=jaltman mech=PLAIN bits=0) by brinza.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j61Mp0Hx009546 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 1 Jul 2005 18:51:00 -0400 (EDT) Message-ID: <42C5C8C9.2050204@columbia.edu> Date: Fri, 01 Jul 2005 18:50:49 -0400 From: Jeffrey Altman Organization: No Longer Affiliated with Columbia University in the City of New York User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Nicolas Williams References: <20050625040059.GL711@binky.Central.Sun.COM> <42BEE902.3010009@sun.com> <42C335A1.5070903@columbia.edu> <42C5BE43.6090509@sun.com> <42C5C38A.4080902@columbia.edu> <20050701223456.GJ16670@binky.Central.Sun.COM> In-Reply-To: <20050701223456.GJ16670@binky.Central.Sun.COM> X-Enigmail-Version: 0.92.0.0 X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.8 X-Spam-Score: 0.1 (/) X-Scan-Signature: f66b12316365a3fe519e75911daf28a8 Cc: kitten@ietf.org, Seema Malkani Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1467597926==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org This is a cryptographically signed message in MIME format. --===============1467597926== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms060506020104010401040205" This is a cryptographically signed message in MIME format. --------------ms060506020104010401040205 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Nicolas Williams wrote: > On Fri, Jul 01, 2005 at 06:28:26PM -0400, Jeffrey Altman wrote: > >>Implementors are free to implement prf() as part of their implementation >>specific classes that also implement the GSSContext interface. A new >>interface should not be published until the GSSv3 spec is complete. > > > I agree -- and I think Seema meant that we should hold off on designing > new such Java interfaces until we get to the GSS-APIv3. Then we have consensus. :) --------------ms060506020104010401040205 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAw7NrDANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNTI3MTc0MjQzWhcNMDYwNTI3MTc0MjQz WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LutDu/YyHreNfoYd+ZtOjXsL h67F2cmcVuBPBz+ZGDA+WpVEHrqXaZZO8acXBR5uAVfiwA1acE/kvD/CN5kAqx1VJuQ8Pvyk iGHhUYTd27ZTliBIrptC7C/381gVwkS+a8jQFPJPO+OktZDzAYplGRY/MQCV8dIsvXUjucox 7TwTTdoLAJYRvHtfEcaCc6mO4ph6NeXQw8Grlx3IRAlTrkE5fBGyjH6R4fqnFTXRQAh1/bG+ i8hQvE6mud3mXdL2t7NP1Qxd9wW0/F/pnWY12IFP/luc3zEzIPvAe+nJluLuSEj0LZgP16mF xBj1p+u9HPWcHRVX6q7+MQ0RWOv1AgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAUDUuzxiq8bbI8vq2 swRK513RphZp+fepyKU5mwBI6aF4GcmqITQILtfTG2SXnjSeY99d+bjOdK1DJFvVh9aOy8mh 2NbEnqMnJIZtg5+eEU64DIV5bQdDRpi99H9vA0sRATIquut+3YHba+zArj0VkVof2VI+ToBu sHdtSrZYo0gwggL6MIICY6ADAgECAgMOzawwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1MDUyNzE3NDI0M1oXDTA2 MDUyNzE3NDI0M1owazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7rQ7v2Mh63 jX6GHfmbTo17C4euxdnJnFbgTwc/mRgwPlqVRB66l2mWTvGnFwUebgFX4sANWnBP5Lw/wjeZ AKsdVSbkPD78pIhh4VGE3du2U5YgSK6bQuwv9/NYFcJEvmvI0BTyTzvjpLWQ8wGKZRkWPzEA lfHSLL11I7nKMe08E03aCwCWEbx7XxHGgnOpjuKYejXl0MPBq5cdyEQJU65BOXwRsox+keH6 pxU10UAIdf2xvovIULxOprnd5l3S9rezT9UMXfcFtPxf6Z1mNdiBT/5bnN8xMyD7wHvpyZbi 7khI9C2YD9ephcQY9afrvRz1nB0VV+qu/jENEVjr9QIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAFA1 Ls8YqvG2yPL6trMESudd0aYWafn3qcilOZsASOmheBnJqiE0CC7X0xtkl540nmPfXfm4znSt QyRb1YfWjsvJodjWxJ6jJySGbYOfnhFOuAyFeW0HQ0aYvfR/bwNLEQEyKrrrft2B22vswK49 FZFaH9lSPk6AbrB3bUq2WKNIMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMOzaww CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDUwNzAxMjI1MDQ5WjAjBgkqhkiG9w0BCQQxFgQU/GHZOAmPQaYqkVlhmHzu+Yj7i3Ew UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAw7NrDB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMOzawwDQYJKoZIhvcNAQEBBQAEggEAIA00c6UDYBuR/XJvfOp7q1a9sXNUW3l4SCP+Cc7R FNxGxlFOmrPyfJOiuiBdTygHIaYU/gRTwniGTGenNC2B4eO2FcCVGZw9pJ6chR8uBNBnHgio 2etYIbsrQpyMedEw8WuI3zXoG244ZIwUs7BttQE3RWUiI1zTAMzF+sPYKnx069MyndkcMVjM 3/tH/T8RW8XQcZjI7xNY43pP8z22biMALPr/jbTduv9oDac3l3wtAfvnImVUgnrhuCaRq6vb lVeTrwxQCzuAY16Y4KnMFmXTHr9fK0qLnES8NDkDY2gyWRKhS+a3EzXJhRZyivIYZu13kSXV m+PFIc+ve9axFAAAAAAAAA== --------------ms060506020104010401040205-- --===============1467597926== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1467597926==-- From kitten-bounces@lists.ietf.org Sat Jul 02 19:24:05 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DorLB-0005SB-GX; Sat, 02 Jul 2005 19:24:05 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DorL7-0005Q9-1j for kitten@megatron.ietf.org; Sat, 02 Jul 2005 19:24:03 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA09744 for ; Sat, 2 Jul 2005 19:23:57 -0400 (EDT) Received: from mail3.microsoft.com ([131.107.3.123]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DorlM-0006Qt-Ss for kitten@ietf.org; Sat, 02 Jul 2005 19:51:09 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail3.microsoft.com with Microsoft SMTPSVC(6.0.3790.1830); Sat, 2 Jul 2005 16:23:46 -0700 Received: from red-hub-03.redmond.corp.microsoft.com ([157.54.2.25]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.1830); Sat, 2 Jul 2005 16:23:45 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-03.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.1830); Sat, 2 Jul 2005 16:23:45 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.88]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1830); Sat, 2 Jul 2005 16:23:44 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sat, 2 Jul 2005 16:23:38 -0700 Message-ID: Thread-Topic: request for agenda items Thread-Index: AcV+YlLJNbPF4TzbSdaUP7odLvIScwA+kiYQ From: "Liqiang\(Larry\) Zhu" To: , "Sam Hartman" X-OriginalArrivalTime: 02 Jul 2005 23:23:44.0897 (UTC) FILETIME=[17445F10:01C57F5D] X-Spam-Score: 0.0 (/) X-Scan-Signature: b1c41982e167b872076d0018e4e1dc3c Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org Subject: RE: request for agenda items X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Note that channel bindings are implemented for Kerberos SSP on WinXP and later. I believe our customers were able to use our channel bindings to interop with MIT's FTP servers. -----Original Message----- From: kitten-bounces@lists.ietf.org [mailto:kitten-bounces@lists.ietf.org] On Behalf Of Martin Rex Sent: Friday, July 01, 2005 10:12 AM To: Sam Hartman Cc: kitten@ietf.org Subject: Re: request for agenda items Sam Hartman wrote: >=20 > I'd like to have a discussion on what it would take to move 2743/2744 > to draft? Would we have to respin the documents? The most important task is to demonstrate independent interoperable implementations. Formally, a WG needs to reconsider the document and remove parts that are not being used or failed to show interoperability (those parts that can be removed without breaking the spec). Since GSS-API (in particular rfc2743/2744) are a first of all a definition of a common API, this means that we need "portable" applications that show plug-and-play with different gssapi mechanisms. John Linn (the original WG chair of ietf-cat) contacted me in May 2001 about an effort to move GSS-API to draft standard, but it appears he couldn't raise enough momentum to make it happen. Maybe you should talk to him again. I do have some experience with plug-n-play of our application with more than a dozen independent gssapi mechanisms. We have set up an interoperability certification for our application with third-party gssapi mechanisms. I was given the permission to publish as OpenSource the software (called "GSSTEST") which we use to perform (GSS-)API-level testing of third-party gssapi mechanisms. (ftp://ftp.sap.com/pub/ietf-work/gssapi/gsstest/gsstest-1.26.zip) The tested functionality is focused on the functionality that we need and how we use it, and therefore a subset of GSS-API v2. GSSTEST checks characteristics which I admit to be SAP specific interoperability constraints, and things that *I* believe are general requirements, but others may disagree. :) But although it's been availabe for more than 5 years, it doesn't seem to be very popular (or known) among gssapi implementors. GSSTEST is happy with MIT Kerberos 1.2.x, HP-UX Kerberos (which seems to be very close to MIT's 1.2.1) and recent Heimdal implementations. It has serious problems with Sun's Kerberos, and if Microsoft would be using it, it would have saved them a couple of hotfixes... The things that may need to be removed because of a lack of interoperability are according to *MY* experience: - channel bindings - hostbased service names Reason: Few (if any) portable applications request and use it, and the majority of gssapi mechanisms simply doesn't implement either one. Actually, the single mechanism that I know to implement it is Kerberos, and even there Microsoft didn't implement channel bindings... Entirely removing these features is impossible without breaking the spec, and I do know that there are niches in the Kerberos area where these features are actively used. However the spec needs to be updated with guidelines on its use and a general caution that applications will encounter gssapi mechanisms that do not offer these features. Another difficult area is the use of (printable) names with GSS-API. The seriously underspecified RFC-2025 (The Simple Public Key GSS-API mechanism) does not define a mechanism specific name format, which significantly impairs interoperability in a heterogeneous environment and may outright prevent interoperability in a heterogeneous distributed environment. The definition of the name format in the Kerberos gssapi mechanism spec rfc-1964 has saved Kerberos from the most serious troubles, but the transition from just-send-8 to Unicode/UTF-8 characters exists. This is an area where GSS-API v2 can be considered underspecified. The data type when passing a printable name through a gssapi function is "octet string" with an accompanying nametype OID, and the most common implementation tradition is to use whatever 8-bit character set is the default on the platform. When printable names are the input to gssapi calls, it should be possible to add a nametype-OID for every existing with the same inpretation, just indicating that the encoding is UTF-8 rather than the default local 8-bit charset. The two difficulties that come to my mind with this approach: (1) installed base applications don't know about the UTF-8 nametypes and will continue to use the existing nametypes (2) installed base applications will probably choke when gss_display_name() suddenly returns an unknown nametype (1) should not be a problem (except constraining the use of names while older applications are still being used), but (2) is difficult: how can a gssapi mechanism distinguish when it is ok to return a newer UTF-8 style nametype from gss_display_name(), and when doing it will cause the calling (old) application to choke and break. So when we add UTF8-encoded nametypes, then we should define how an application can indicate to the gssapi-mechanism that it is a new application and aware of UTF-8 and will not break when gss_display_name returns an UTF-8 based nametype or gss_display_status returns UTF8-encoded text. =20 -Martin _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Jul 11 14:38:02 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Ds3AI-00030m-QS; Mon, 11 Jul 2005 14:38:02 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Ds3AG-00030c-5q for kitten@megatron.ietf.org; Mon, 11 Jul 2005 14:38:00 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA08817 for ; Mon, 11 Jul 2005 14:37:58 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Ds3cG-0003fg-Hb for kitten@ietf.org; Mon, 11 Jul 2005 15:06:59 -0400 Received: by carter-zimmerman.mit.edu (Postfix, from userid 8042) id E5F85E0049; Mon, 11 Jul 2005 14:37:49 -0400 (EDT) To: Jeffrey Altman References: <20050625040059.GL711@binky.Central.Sun.COM> <42BEE902.3010009@sun.com> <42C335A1.5070903@columbia.edu> <42C5BE43.6090509@sun.com> <42C5C38A.4080902@columbia.edu> From: Sam Hartman Date: Mon, 11 Jul 2005 14:37:49 -0400 In-Reply-To: <42C5C38A.4080902@columbia.edu> (Jeffrey Altman's message of "Fri, 01 Jul 2005 18:28:26 -0400") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 21c69d3cfc2dd19218717dbe1d974352 Cc: kitten@ietf.org, Nicolas Williams , Seema Malkani Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org >>>>> "Jeffrey" == Jeffrey Altman writes: Jeffrey> Seema Malkani wrote: >> Hello... back from JavaOne. >> >> I would like to clarify few things here: >> >> 1) JCP Process When RFC 2853 was published, we went through >> Sun's JCP process for the Java GSS bindings before providing an >> implementation in the JDK. Any updates to the Java GSS >> Bindings would also need to go though the JCP process. Here is >> the JSR on the Java GSS bindings: >> http://www.jcp.org/en/jsr/detail?id=72 Jeffrey> IETF Standards Track documents are developed within the Jeffrey> IETF and IETF processes. True. Jeffrey> By working with IETF to develop Jeffrey> a standards track specification for JGSS, Sun has given Jeffrey> up the right to utilize the JCP. I don't think that follows at all. I think that if Sun chooses to continue working within the IETF to standardize Java GSS bindings then Sun should plan to implement the results of IETF standards. If that isn't going to work for Sun, then perhaps it is inappropriate for this working group to standardize Java bindings for GSS extensions. Instead, we can standardize the abstract APIs. Sun can go through whatever process they choose to define Java bindings. I'd recommend that if Sun chooses that route they publish informational RFCs notifying the IETF community what Java extensions they standardize. My hope is that Sun will find a way of working within the IETF process to standardize Java GSS extensions. However we need Sun's input on this issue rather soon in order to know what to do with the current draft. Sam Hartman Security Area Director _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Jul 18 14:17:49 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DuaBY-0002E0-WB; Mon, 18 Jul 2005 14:17:49 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DuaBX-0002Dk-7v for kitten@megatron.ietf.org; Mon, 18 Jul 2005 14:17:47 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA03075 for ; Mon, 18 Jul 2005 14:17:45 -0400 (EDT) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Duaex-00039Q-HZ for kitten@ietf.org; Mon, 18 Jul 2005 14:48:15 -0400 Received: from phys-d3-ha21sca-1 ([129.145.155.163]) by brmea-mail-3.sun.com (8.12.10/8.12.9) with ESMTP id j6IIHgvW020944 for ; Mon, 18 Jul 2005 12:17:42 -0600 (MDT) Received: from conversion-daemon.ha21sca-mail1.sfbay.sun.com by ha21sca-mail1.sfbay.sun.com (iPlanet Messaging Server 5.2 HotFix 1.24 (built Dec 19 2003)) id <0IJU00B015DRNI@ha21sca-mail1.sfbay.sun.com> (original mail from Seema.Malkani@Sun.COM) for kitten@ietf.org; Mon, 18 Jul 2005 11:17:42 -0700 (PDT) Received: from sun.com (pilatus.SFBay.Sun.COM [129.145.128.115]) by ha21sca-mail1.sfbay.sun.com (iPlanet Messaging Server 5.2 HotFix 1.24 (built Dec 19 2003)) with ESMTP id <0IJU004XD5HI5Z@ha21sca-mail1.sfbay.sun.com>; Mon, 18 Jul 2005 11:17:42 -0700 (PDT) Date: Mon, 18 Jul 2005 11:17:40 -0700 From: Seema Malkani In-reply-to: To: Sam Hartman Message-id: <42DBF244.90203@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.4) Gecko/20041214 References: <20050625040059.GL711@binky.Central.Sun.COM> <42BEE902.3010009@sun.com> <42C335A1.5070903@columbia.edu> <42C5BE43.6090509@sun.com> <42C5C38A.4080902@columbia.edu> X-Spam-Score: 0.0 (/) X-Scan-Signature: 52f7a77164458f8c7b36b66787c853da Content-Transfer-Encoding: 7BIT Cc: kitten@ietf.org, Nicolas Williams Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Sam Hartman wrote: >>>>>>"Jeffrey" == Jeffrey Altman writes: >>>>>> >>>>>> > > Jeffrey> Seema Malkani wrote: > >> Hello... back from JavaOne. > >> > >> I would like to clarify few things here: > >> > >> 1) JCP Process When RFC 2853 was published, we went through > >> Sun's JCP process for the Java GSS bindings before providing an > >> implementation in the JDK. Any updates to the Java GSS > >> Bindings would also need to go though the JCP process. Here is > >> the JSR on the Java GSS bindings: > >> http://www.jcp.org/en/jsr/detail?id=72 > > Jeffrey> IETF Standards Track documents are developed within the > Jeffrey> IETF and IETF processes. > >True. > > Jeffrey> By working with IETF to develop > Jeffrey> a standards track specification for JGSS, Sun has given > Jeffrey> up the right to utilize the JCP. > >I don't think that follows at all. I think that if Sun chooses to >continue working within the IETF to standardize Java GSS bindings then >Sun should plan to implement the results of IETF standards. > >If that isn't going to work for Sun, then perhaps it is inappropriate >for this working group to standardize Java bindings for GSS >extensions. Instead, we can standardize the abstract APIs. Sun can >go through whatever process they choose to define Java bindings. I'd >recommend that if Sun chooses that route they publish informational >RFCs notifying the IETF community what Java extensions they >standardize. > Java GSS was standardized at IETF in RFC 2853, and was also submitted to the JCP in JSR 072. Java GSS-API extensions would need to be standardized at IETF. In addition, we would also need to go through the JCP process. Seema > > >My hope is that Sun will find a way of working within the IETF process >to standardize Java GSS extensions. However we need Sun's input on >this issue rather soon in order to know what to do with the current >draft. > >Sam Hartman >Security Area Director > > >_______________________________________________ >Kitten mailing list >Kitten@lists.ietf.org >https://www1.ietf.org/mailman/listinfo/kitten > > _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Jul 18 15:07:30 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Duaxe-0005yC-Rz; Mon, 18 Jul 2005 15:07:30 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Duaxc-0005y7-Pd for kitten@megatron.ietf.org; Mon, 18 Jul 2005 15:07:28 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA06735 for ; Mon, 18 Jul 2005 15:07:27 -0400 (EDT) Received: from 216-239-45-4.google.com ([216.239.45.4]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DubR5-0004vZ-J6 for kitten@ietf.org; Mon, 18 Jul 2005 15:37:57 -0400 Received: from smtp.google.com (angband.corp.google.com [192.168.15.227]) by lois.corp.google.com (8.13.3/8.13.3) with ESMTP id j6IJ77aF011986 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Jul 2005 12:07:07 -0700 Received: from [192.168.2.5] (c-24-16-60-69.hsd1.wa.comcast.net [24.16.60.69]) (authenticated bits=0) by smtp.google.com (8.12.11/8.12.11) with ESMTP id j6IJ72JB029714 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 18 Jul 2005 12:07:06 -0700 Message-ID: <42DBFDD2.8040206@google.com> Date: Mon, 18 Jul 2005 12:06:58 -0700 From: Mayank Upadhyay User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Sam Hartman Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -4.2 (----) X-Scan-Signature: 0fa76816851382eb71b0a882ccdc29ac Content-Transfer-Encoding: 7bit Cc: kitten@ietf.org, Nicolas Williams Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org I agree with Sam's comments. It would be in JGSS's best interest if the bindings are defined at the IETF simply because the it would provide the widest review with experts in this area. Having an abstract API at the org.ietf level and an implementation at java.* level would just confuse developers. I was at Sun when RFC2853 was imported into the JDK/J2SE and was actually the JCP lead. I found that many folks on the JCP expert committee were already involved in the IETF and didn't have any fundamental differences with the RFC. The few suggestions they made were very implementation specific and can easily co-exist within the bounds of the RFC. For example, two suggestions which came out of the JCP were: 1. Every standard implementation of JGSS should provide support for Kerberos v5. This was the only way a client and server using JDK/J2SE could be guaranteed interoperability. 2. JGSS was to work hand-in-hand with JAAS. this meant that credential acquisition was to happen from the current Subject on the thread's execution context. This made it simple for developers to predict where the credentials were coming from and how they could be managed. We did provide a system property that could be set which allowed this restriction to be relaxed. In summary, I think the IETF process and the JCP are both important for these bindings, and it would be unfortunate if Sun cannot make this process work so that the two standard bodies don't collide on this. -Mayank On 7/11/05, *Sam Hartman* wrote:>>>>> "Jeffrey" == Jeffrey Altman writes: Jeffrey> Seema Malkani wrote: >> Hello... back from JavaOne. >> >> I would like to clarify few things here: >> >> 1) JCP Process When RFC 2853 was published, we went through >> Sun's JCP process for the Java GSS bindings before providing an >> implementation in the JDK. Any updates to the Java GSS >> Bindings would also need to go though the JCP process. Here is >> the JSR on the Java GSS bindings: >> http://www.jcp.org/en/jsr /detail?id=72 Jeffrey> IETF Standards Track documents are developed within the Jeffrey> IETF and IETF processes. True. Jeffrey> By working with IETF to develop Jeffrey> a standards track specification for JGSS, Sun has given Jeffrey> up the right to utilize the JCP. I don't think that follows at all. I think that if Sun chooses to continue working within the IETF to standardize Java GSS bindings then Sun should plan to implement the results of IETF standards. If that isn't going to work for Sun, then perhaps it is inappropriate for this working group to standardize Java bindings for GSS extensions. Instead, we can standardize the abstract APIs. Sun can go through whatever process they choose to define Java bindings. I'd recommend that if Sun chooses that route they publish informational RFCs notifying the IETF community what Java extensions they standardize. My hope is that Sun will find a way of working within the IETF process to standardize Java GSS extensions. However we need Sun's input on this issue rather soon in order to know what to do with the current draft. Sam Hartman Security Area Director _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Jul 18 15:25:24 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DubEy-0001H4-ME; Mon, 18 Jul 2005 15:25:24 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DubEx-0001GW-3S for kitten@megatron.ietf.org; Mon, 18 Jul 2005 15:25:23 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA08702 for ; Mon, 18 Jul 2005 15:25:21 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DubiQ-0005ZI-7Z for kitten@ietf.org; Mon, 18 Jul 2005 15:55:51 -0400 Received: from [192.168.1.11] (cpe-68-175-91-105.nyc.res.rr.com [68.175.91.105]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j6IJPKYd018343 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Mon, 18 Jul 2005 15:25:20 -0400 (EDT) Message-ID: <42DC0217.3010602@columbia.edu> Date: Mon, 18 Jul 2005 15:25:11 -0400 From: Jeffrey Altman Organization: No Longer Affiliated with Columbia University in the City of New York User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 X-Accept-Language: en-us, en MIME-Version: 1.0 References: <20050625040059.GL711@binky.Central.Sun.COM> <42BEE902.3010009@sun.com> <42C335A1.5070903@columbia.edu> <42C5BE43.6090509@sun.com> <42C5C38A.4080902@columbia.edu> <42DBF244.90203@sun.com> In-Reply-To: <42DBF244.90203@sun.com> X-Enigmail-Version: 0.92.0.0 X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.0 (/) X-Scan-Signature: e1b0e72ff1bbd457ceef31828f216a86 Cc: kitten@ietf.org Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0975926124==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org This is a cryptographically signed message in MIME format. --===============0975926124== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms020201050301090108000505" This is a cryptographically signed message in MIME format. --------------ms020201050301090108000505 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Seema Malkani wrote: >>My hope is that Sun will find a way of working within the IETF process >>to standardize Java GSS extensions. However we need Sun's input on >>this issue rather soon in order to know what to do with the current >>draft. There is nothing wrong with Sun and the Java Community using the JCP as a means of obtaining additional review as part of the process of submitting comments to this working group on its drafts. Where there is a potential conflict is if the working group comes to consensus on decisions and after that consensus is reached the JCP produces a conflicting decision. >From my perspective as a working group chair, if the JCP is going to be used, the participants in the JCP really should be active participants in this forum. Otherwise, there is tremendous potential for conflict. It is acceptable for the JCP to rubberstamp the work of the IETF, it is not acceptable for the IETF to rubberstamp the work of the JCP. Jeffrey Altman --------------ms020201050301090108000505 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAw7NrDANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNTI3MTc0MjQzWhcNMDYwNTI3MTc0MjQz WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LutDu/YyHreNfoYd+ZtOjXsL h67F2cmcVuBPBz+ZGDA+WpVEHrqXaZZO8acXBR5uAVfiwA1acE/kvD/CN5kAqx1VJuQ8Pvyk iGHhUYTd27ZTliBIrptC7C/381gVwkS+a8jQFPJPO+OktZDzAYplGRY/MQCV8dIsvXUjucox 7TwTTdoLAJYRvHtfEcaCc6mO4ph6NeXQw8Grlx3IRAlTrkE5fBGyjH6R4fqnFTXRQAh1/bG+ i8hQvE6mud3mXdL2t7NP1Qxd9wW0/F/pnWY12IFP/luc3zEzIPvAe+nJluLuSEj0LZgP16mF xBj1p+u9HPWcHRVX6q7+MQ0RWOv1AgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAUDUuzxiq8bbI8vq2 swRK513RphZp+fepyKU5mwBI6aF4GcmqITQILtfTG2SXnjSeY99d+bjOdK1DJFvVh9aOy8mh 2NbEnqMnJIZtg5+eEU64DIV5bQdDRpi99H9vA0sRATIquut+3YHba+zArj0VkVof2VI+ToBu sHdtSrZYo0gwggL6MIICY6ADAgECAgMOzawwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1MDUyNzE3NDI0M1oXDTA2 MDUyNzE3NDI0M1owazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7rQ7v2Mh63 jX6GHfmbTo17C4euxdnJnFbgTwc/mRgwPlqVRB66l2mWTvGnFwUebgFX4sANWnBP5Lw/wjeZ AKsdVSbkPD78pIhh4VGE3du2U5YgSK6bQuwv9/NYFcJEvmvI0BTyTzvjpLWQ8wGKZRkWPzEA lfHSLL11I7nKMe08E03aCwCWEbx7XxHGgnOpjuKYejXl0MPBq5cdyEQJU65BOXwRsox+keH6 pxU10UAIdf2xvovIULxOprnd5l3S9rezT9UMXfcFtPxf6Z1mNdiBT/5bnN8xMyD7wHvpyZbi 7khI9C2YD9ephcQY9afrvRz1nB0VV+qu/jENEVjr9QIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAFA1 Ls8YqvG2yPL6trMESudd0aYWafn3qcilOZsASOmheBnJqiE0CC7X0xtkl540nmPfXfm4znSt QyRb1YfWjsvJodjWxJ6jJySGbYOfnhFOuAyFeW0HQ0aYvfR/bwNLEQEyKrrrft2B22vswK49 FZFaH9lSPk6AbrB3bUq2WKNIMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMOzaww CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDUwNzE4MTkyNTExWjAjBgkqhkiG9w0BCQQxFgQUqQEqxvgZ29r8p1B5nIoD5yVkkxcw UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAw7NrDB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMOzawwDQYJKoZIhvcNAQEBBQAEggEATPBft7MY5qkIAyF2aCgBa3JcrVdJi7Uae1PmMKxd wBsD6NgpH8kKAHA2ll4ReJL9p+i+en+hOaLMG2UeK/gcia8i1OEAbqiKMQsoRbSYAXWCQ3hx rGQ9zkqTS9bd5rU0+3lLcbuoCYK2fKjgvmfIzRL3oisUyLmWoHUqlpictIpb0/uuHNevpsPx 3QGl2zBPUeimLLvavMqROefKwBfQBbTclvhQZBcI+su9/MIMBJQzLqUc3LSYM7KToOhutB7w zL1/qQdRM55/CM2RaJEmVNRM/gpgNkq4mSoi5Q3CKYhUU7oVcrpD2CNqww7k2VcpxqRSYCjy pLSkWBSJJq7TjwAAAAAAAA== --------------ms020201050301090108000505-- --===============0975926124== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============0975926124==-- From kitten-bounces@lists.ietf.org Tue Jul 19 13:38:04 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Duw2e-0004OV-2Y; Tue, 19 Jul 2005 13:38:04 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Duw2c-0004OI-04 for kitten@megatron.ietf.org; Tue, 19 Jul 2005 13:38:02 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA17080 for ; Tue, 19 Jul 2005 13:37:58 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DuwWG-000505-Sf for kitten@ietf.org; Tue, 19 Jul 2005 14:08:42 -0400 Received: by carter-zimmerman.mit.edu (Postfix, from userid 8042) id 70659E0049; Tue, 19 Jul 2005 13:37:13 -0400 (EDT) To: Seema Malkani References: <20050625040059.GL711@binky.Central.Sun.COM> <42BEE902.3010009@sun.com> <42C335A1.5070903@columbia.edu> <42C5BE43.6090509@sun.com> <42C5C38A.4080902@columbia.edu> <42DBF244.90203@sun.com> From: Sam Hartman Date: Tue, 19 Jul 2005 13:37:13 -0400 In-Reply-To: <42DBF244.90203@sun.com> (Seema Malkani's message of "Mon, 18 Jul 2005 11:17:40 -0700") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Cc: kitten@ietf.org, Nicolas Williams Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org >>>>> "Seema" == Seema Malkani writes: Seema> Java GSS-API extensions would need to be standardized at Seema> IETF. In addition, we would also need to go through the JCP Seema> process. I'm not sure this is possible given current organizational infrastructure. What happens if the IETF approves a standard but JCP does not? The IETF has done joint work with other SDOs in the past, but we are not set up to do that here and I'm not sure if the IAB and IESG would approve such a relationship for kitten. If that's the route kitten wants to go we can certainly try it out and see what happens. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Tue Jul 19 14:06:21 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DuwU1-0008LZ-4g; Tue, 19 Jul 2005 14:06:21 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DuwTy-0008JZ-Ir for kitten@megatron.ietf.org; Tue, 19 Jul 2005 14:06:19 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA19426 for ; Tue, 19 Jul 2005 14:06:15 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DuwxX-00066Q-LV for kitten@ietf.org; Tue, 19 Jul 2005 14:36:56 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id j6JI683t024739 for ; Tue, 19 Jul 2005 11:06:08 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j6JI67fb007260 for ; Tue, 19 Jul 2005 12:06:07 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j6JI65OQ005806 for ; Tue, 19 Jul 2005 13:06:05 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j6JI64da005805 for kitten@ietf.org; Tue, 19 Jul 2005 13:06:04 -0500 (CDT) Date: Tue, 19 Jul 2005 13:06:04 -0500 From: Nicolas Williams To: kitten@ietf.org Message-ID: <20050719180604.GT4303@binky.Central.Sun.COM> Mail-Followup-To: kitten@ietf.org Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="at6+YcpfzWZg/htY" Content-Disposition: inline User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: 928dbb9be0bc5529f40f1dee8de6e171 Cc: Subject: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org --at6+YcpfzWZg/htY Content-Type: text/plain; charset=us-ascii Content-Disposition: inline There's a Globus OGSA document describing what I recognize to be a sort of stackable pseudo-mechanism, but I can't find a URL for it. As soon as I find it I'll post it. Nico -- --at6+YcpfzWZg/htY Content-Type: application/pdf Content-Disposition: attachment; filename="GSS-secure-conversation-Feb15.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjQNCiXk9tzfDQoxIDAgb2JqDQo8PCAvTGVuZ3RoIDIgMCBSDQogICAvRmlsdGVy IC9GbGF0ZURlY29kZQ0KPj4NCnN0cmVhbQ0KeJzFW9uO5LgNfW+g/6GeA2xHlGzZBhYBynXJ 8yYN5ANyA4JsgOzL/n5I2bxIlN212FkEA8xMu1y2RB4eHpLqcPn5/e2/l3D5LnzAJUPEv6eF /v7p75e//O7yn+1T+vPTP9/f1s/3t4XunIbp8vm3y++fcIFw+fzH5fsAf7h8/uv9bfoY8Wb8 7PsQtyvLR+IrabuSPxa+MoRxuwbhY+CLebsU9VETfzHzlZnvmfjKsl1J+rrrdmX4mPnKGm7h vr9wwX3slx/hGZ68fn4FBNj3BHLjDBESDPvlpPuQ5fAVGPHGHK7hsX8S9cH7Y0f7qgEmXgKY bT7oKbA//YHm/8F7ZBhzxyGw4BPvYcVnX3Hd9C/Qe8L5wzb3phFt9qWDAW78NFwzuw/u+MEC vO9Zbbe0gMD1jLhCtuds9s32FGc+wXkozMG4Iwb5IOJ1tGgKa4znphsWBFBvu3Ajl0COQXxr oLEwHpM6KoQb7ifDjrqYDb72SwJMxNsXPp1o61McPlq/xlSARVtHz8IYv/LokCd6FKJ1bB81 4g4HCGaP6kZ04hSzxIrgWux9aNLwES9ToPU3r8PtoE/uiMuromEYFDlob4k5XQl9CzF8P31t WiZcY14AX9548gEDwoHiKIPsNCkK48zAirIQdNBDiCnq3jOu8SrWAvkoUrTdyDgaxykK8ajV FOOM5+OoRgvkOXhgEtIG8YySG3lzvywmfUZcblzjDf+cW5AcN11yXtrAHxEhbIxJ8eFAbQiz pelDlM/dV8ZnCmwufh/CPqaw7SSl08fietHKecgcPFFJDMGeMOsM+L8xZPxpwlBaEJAlNeDP V/wJgwtzwh05B/GCdgVARkFILOhHQAAPlBPwyh3DHpDpM353xf9PMOOndE8s/L/gvzPdhZ+N BGF+Hz0Fnw7vb/g9fCoFM961FqBHWMMAt9MtxjgSOpC4xnaLgyz8jlRMS6atzGUJIK/j5ZVX AdIRLYD9d5YbMhJJdO/kby4K75GzHGdoyj+4yciZOiZlSNo1Eg5ZkXVDVHZFguKsnfQFM0Ok lQBnyx+nxXE9EZOEe9L8tjO5/DzzLmdLCZjB0NLI/BL3JkjmSIRwlQSnH5RsQd/S9GLygxEq aCYJ8Qe/Q9b0NFGXbGbkG9Veia7iepTtB8v2V/agkhausdAd5/5o2GtguSWrFvjYDA03I5iM YVbCpFC9mPPOr4JRL0q2FVZ7eD2IkmNXE+zKFDraQeVIox0GxdoD0z6IkVRWoJF4J8GaFVUG KUNJCp71TxGZZ5fkWT261XlhtKk6p0g1Dc1WpBTpoIhEFjmRsERVI1mVsvZu01ktWEDPPkcs ZfPqg+xZuHbnYE7//LgRqTK/YK4h95WFwBpzIocHCiSV1WpFvPcql8U6M2c5RYma1oRuSwts 1SQQSBZmLhCJbIQSoqEEpZdBbdajl6hfIQmXO4KE6GUrVzAkxEtpOvf3M70C2DQ6kYV7ErgJ qT9jTEMKnMutpNsdPbU/q6DKrlbEoER/ppJrd/MlULbOFG60X0GBIg/DmQ0+qnOnFJhbYFDM tEWJLEDYVytKaPiY335qPyCb1xmUMrUgQl44oe6YZd3i2pW5etZFTyQ6Iri9k9bYiV2+3joe w/VcGpZlD/h3W0GksfUS2jqyUaythZV1HxEINZ0KMhFPSEKCxXLt7UCAd7nZpiRTh9YpSeC6 GpEhkgIJi9UzC44U9GNaqegQoWRJTxLHV5BmhJEAo9CkJo3dKioZTE4fncgKcqNlN4wDlTOm 2JZ+hm76BcYdcnSKj+vqUUP6K00+HzwKl5U99B9KhuoLlhzHGpNE9Qs7Sq6q/g0lYOcrXbeN GiQg0uVm7h0NiKkoZo6MQRfcz+L8hMPGiyY8Kw/gOOuVXT9sqrcdri0hVrkpNZlJtmWz5bNU 0Z39SsKUjDHYcrPR1Zh5MqtrlZSjOkUlpSxZYpZtxFRuQCkdTVBznddpG9yKzPps23M2TE0Z 7xXeWPQK86RSWYxlk9oKUGcF6WkIfawdzLHUJZB4b4DJjrJj6exViao1Z5pY4Mn7KUDGWJpq otCzvuyq7KuRYxtCJqft6N/qGXmYKX982E4uBr41otXAxoa/rom8F4JaBqhGSXNp7QrjnOIP fBuRrT1bLHcAggI6gikZk0Wf72mlUpCOxoapLgCybNtT1nQIJ9s/k6WJdFBp3esSU5R0KbRG lxLIvXFYiT59gFyuDGPGCZV7jUK5Vy3+s1jVRt5sU/3cqfTR2tEUW0JwxH+gi+svzeSoreB8 sq5SnC0eE09L32CTbyf5IJ2bckcbyRi4Xm5tiKaWpXXOKbZDp68dPVooujUYUTgKDaydm7uh cASYzXZRAT9UuxHvjDWbHEDSA6fx/Nz3fKw830mML7NOSStDUIVsEBx6wtTN2Tg01BF2eCIc 0YBtL6SRX+t6PnUSkml0dFI5E4hJUSYhVfvRlCTbMDXlC2VRWqiEfwWAUZ1legdurFaBT0lS +whmLrKptVVMaerngdFHSUt06VDZmgItUUk9iWwVWw8EJJqbmIebuqrXVtkeikU1uZ8dv9jC OnSmr/s6q+hK8VTRlgSzVpWgh6PaGFeTm6bebLm2N3QiisMPRtmHsmVb88dYzJzghVoqzZ0B Vdoizumckx4eI8Q4TKbmbb1krriRPCzo6EV2r5Rz0APBhFCz3WQ+UtBPjS8sNVTNQUPPuYZA XOpe7SJrEUcPUenSTIrXXvwYsWDGjd0sax5gU0JHyCGRJcmxJidL+JuW6N2IKDCCpepcVuPX X8N1Xhlda59GI8BeHLa3GsGgJS2v6FBcF/7dgN+ynRDzNxISlEvSCqsUCEKdFvajCS5+L/uY qKNAdu1lstBAdtAnOdaiddBrnSxON8szphIE123cmOY4ePjhlXIQzjWTCSQcpH3p003n9coB zPsFQHwELRBlhZ0jL40iWU5sx1FiBhfZ92g0o0glt98cOmF8CtRxdgW7YlIw5kZgRUhceQwA lfp0ptrqATHWXLvzFxQs6gcj6Te925sg+fHF1gLojy8gOs8lPURky5tDJqtV42FDqacZdTet ZrRjx101ypGjoZMCTUntT3r1JUA5HKO6+6RM930hR9RBwJIO7zk5DtXOfeHZqRrLnI5Cm2PE yLXXOgVpmPyBI1KSk6mc7Kk1l/BJNnlCJxKy3Qo77J6V1Zczx632hEk0LewOXRBf2bFlNM0j OhMnHSibxYpOLgKAV2maHRv/DAISQ5jX6nzMZEClM0Y7ULg6xx11Y8nvTNKntsEYrsjUOET6 PIK7ieUqyX8xhEGbU5K495JJZZOCc5PSYHLA1sKA86gP3xVq2ugF5SlkE32nhiyvVJu53YW6 zNsezfIKv9MH2xBgkqwR0bma5Ij6uLYG9lLdT0R740c6/Ccggwqrhke1AXfIolW3KNkc9csq fvNoc4yEMj0VbZ2eoByQNYOxJwdik+qIh3pz3A4XckCa+ehVi+2qi3d2TsJUpHA2OYdySsJH nwBJBWU8ORyhOfgU8eXs11fqZENBR/udtzNfqWFDcjVsnJlyVbukaiznK6KHIcjxuHw/bopp qqum+lujrxep2wkU34PdbYVpI25TI8Z3PMkyFPMak1bZ1GeyTBV7E8Udz+TErqTk1JXZgdcM 7ihy53DURN0vgUKwVZJrf9kxyr10YkOhbhnL2fMnVVPFatWnPeRyBqZYftugAbOjl9Ig0Wm5 aTrEusFlGyIVYVeLK0fhbv2DcL0x2QE7vs7RBsJm5HUz8DFU0CsrBlApcVIn/b8apIY7r5sU B+GYKgA59c2dwJouNf69IIfu2EGZ1zz1Uc5XchTOZ0Yrh+hNBj+cuRgeseswHZKs7dJT0M/B 15d+IJd8Lf6A+JIg/A2qnMMGRqfYcXrPqD3e5kkXRZuwrORMU7QsIt38MqyWM0OYJ6VcvvwV N5BqakpncwDMdRo2AtznVXqmUoBy1UMaYKpS12baS3Cjb+Li+s2DTSWtvsmUdUzb/eBXGeqW Ue8ASacZGF84FBjz4irHF2X4t68Xqj6+NgDNKKs0AOsG/+Tk/4uNN/pVAUd1pcN2XBVUxwwa hdJr/RRO1Cxnho++PxOahuWXkimsiGHYcnwRHh3542DR7YyaAerLE9w4zq6Aq10D/pdmXhXU GpXmd3WgtLD4O7YVL53kaj7f08TQHrHwKqZzwsIROvVQ0h3z7Cj6y/zeWC42vJaTrzI+lGXA vhBdwF9/fH+j048/75/86Y/48+U7uPx4mam/iv/79+XPXVeMQL8t09lGql34w+V/mlTw+mVu ZHN0cmVhbQ0KZW5kb2JqDQoNCjIgMCBvYmoNCiAgMzIxMQ0KZW5kb2JqDQoNCjMgMCBvYmoN Cjw8IC9MZW5ndGggNCAwIFINCiAgIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlDQo+Pg0Kc3RyZWFt DQp4nO1d247kthF9X2D/oZ8NeMIqUpQEGAH6mmcnC+QDnDhAEAeIX/z7ISXVRapqtXZmFu5u DwZYezQSxUudqlMXUmH32+dP/9uF3ffhBXYZsPzb9vXfX/+5+/t3u/9+/hReuib03W7531// 9flTH3Z9/9LvUsQdwPjUz9+NLdafes/hS72vtpva3Zd/7P50gR2E3Zefdz8E+PPuy78/f2pf mnJz+dsPAccr/UukK3G8kstrpispNOM1CC+JLubxEkpTLT2Y6UpH97R0pR+vRHndfrySXjq6 cgjHcJpe2JdxTJfP4RIu1H96BQSYxgR8YwcIEdJ0Oco4uDt0BZpyYw77cJ7+gtLw1GyjX5Wg pS6AGua5tgJT6+cy/T/aFUkplFlwlqSBgNProZXppR7xNKmRLuf32ivbzn0lXmIYH+z4fREi xoAHPOIxxtVmR9kq0z20itQqXICkBLhZmKSEe3w0EnFaznNAkpJOZGsfEE68ojwrfZl5mpXG tEjvqDfRhPKgYBgU7Hg4P/1SsZd3v03j/etfyu+772H3y66r/S3/95/d365PSe7qdM+nOkLI QKubZHWPJPYFUdzvC8ms6nkLDUncleWAGMvt3stDfp+fMg0P1c6kYoruYJHKRuz4Sveqe173 1EfLcuWKODdFsfriHOG2WsptNW0LdXcIObZFzZPm7kT/JzJHpFEGVXEQ0GGUjg9qfh2Lqbbt deL5sTjNVx8+UPeHbHkdzy4uN+A558IUF8+dQsZuYfQhEmI7ppaVrI2gJWuLzRoZLDqigJ9a psvYVuLHJpyF+1SazqVxalrrEARYN9pYWmrd0T2OopjGXcwsPpywfrR8D0rBA/e6UoAwaIWm KTJntUIE7KoiEOAXTO9DFwc3D88FyHmpElYAiu6LHgeg236mpcu949o/vwh6krRJBFPyzNKh CGAbTuWePWJ13iCsN5abMu22sWcTsmU702J1rdjjuxCWj5a3Q8ciYAuhi0uNH89FcY9xOPK5 JO4DIU6xIB16vBSVPgWSAKTXk0ZX8ZQ2HIGDe9BevRVTxaz04Bpa+xqlskN4brTSojQSs70L 6fy95N4sP562GAyskuqIPgyxifPASxRbKdJbZL+KenFAIoYqnuuMJWBZIO81jy+e5L3BXYnJ R8vbQeOI5TbYQLCBwHNlWtAPiaJ9gUkXDhO1XwHPLcIfc2VizuseAT7ki4Ojo+9dcD5a3g4j Fw0bYNT0vYm/DTA6LQETC6SEORU3hqlR6EJb86oTrC7FwVl3brDJ7osfAVAaVPmVEe37Eqzf SWR9ybvtKDRdZ4JDMZZlmaoMVDZV4rOd9DbBgT0EuVGlXdmb2ENbFGfggLDK+JiKBk4Y0e81 2hRUuggkGHo7XVQpW+OO9FEgsvZDpC1ugs/jif0jtrwOVRdyW6xL25ooWsVqhELSzgVcueZK cD1/C6kp3fWaegYwXGuHnGt0QPIMAvfR8j0A28XnFmDn7MAaD/EIGRpIlQRSQmW9uaZ3m3s+ aE8L1OLL64IV9yVWHy3fA3wtCtfj1COBbtJLb57jWPtEhKMq16GSUymgAFX6EFWhhK212JRU hRzdbj2fFvDbmea3V3WtH4z4G7a8gqrsCiJuwVWKJgZDzzUqhx6ASoNAauSLv7hnH7RhEwGt 9WBvVBBBHAbhdOaPgibvZ1JqmDblle9LWh+x5XWErSBlFWERTcgoBb+Q/mBNEaYhSkkoUzEh U/LHwU9VZh+jtN7FloDNEaA8212iYoOn2eYQ2chxOwwEdfeNN+rngfI08xk2mb7nh4az2Jug gTWauSB16EIDGgy1QBXZJREZpppVMUB2G9UQE6XQ/w1e1w1xTKdvzyPAt9ohOg2O33fvovp2 D8VZ+rSeHBrFGYINTAAe5xs2ijWPIqd7kt6e+zhG4MNhrJ+YHupEM28I49dkFit1VQp5AbPl MHTQUw/Y/bksZ7Iagwqg6Trozt6qM6q56NadnEfBE436tamzx8PHI7a8jmlH/LZgOvW9g+lh I+SxQJThi2prbxcbg+kKSd4RqVmcCVMg4JiUHoq/C+G6WXXb1xyf19FHwdcq6lLjrP1zSvBH y5vx7In7Jjx3pmwRaq173bgOyMZWKnYllKF2ztd0QbhFI5vovO2xIfnadiZ+AtkJZNy7GP4O Al7r3lxBPW4Q8DbbQDnU6ij2qsQsIQ5MMZO7VLwqCYFTrbosWkyhC0h8EVV5XsQ+mE2MOrIA KgwB/UBxD5AgkKlMQW9aniq4yAIwLaU6eZai9yiSpzqwqSNydEctC1u6kSilNVdWIWa8sgzf EvvUz+6VW1AeCRmuhG/ZrpFyYwsOoSaB3wcbhAxgUT6Ru8WgOC+9N/HnuHkT2ZN7OB7i7PWn 4i0Jf0RY2yF8UBVknaogmwOF6snikQYdgwr1BznHpOWZK7x43RbHUBNw3np8S5Bs/yH1kZxt hM8QeV8HmAuTGwXuI8AwEyvjk3SQj4GhqcRbxRrdlabsCOXAnN7AR1XqEVrpqWKACkwI2Kp6 8mCQ11PvxZXbMA8h2Gxci0mMB/QSOgbWG0mA1bNK8tQAjSS21KCaXnQ4a8RzkAZZizjHQgUO OoE6eqBjTaHOK7qMhwywClFnD9gEICz7WfTl2axdW0dERHw4VoAX2gyq3CgKLKpOVQpAZERE /0z3sp5KYyEfq0Ypd52PmOdmZC08XtU0R9b6lQQNNIbbqNFcZCnlGg6HdJljHEpLNaTYlZGy SEWp1Q2nqoMNB5IQOJs0lLFtOJAmdr1V2AdVhixdoLHz5A0TPfZa5CM2AoMjPdTKFKpDpDpH uFhqeYZUYPOgZDPPyqtBOiwtLJjkJBl81kbQPuFcDHolBhOJlN4u2+2GJWjqutZC0mka+qvm N1TntItsZzFpoO9nQVm1mJnODZj+GJX+ksoWDY+u/AEF+nMZFL2lcoGit1Q1DRMjntkzF7mr VGVrhX1yCSQXGWfDMTSjDJ6i2UohROmTwsN+SdduxKxHaW+rhM2lfabxsrzCO39lPm3qfL3M l8X0UGJLAoPAxxsq/Fqoueo+lNfbw19mUFXbCOZHDFpLKqNKYIioEyGpWqmMPjJ4kgqOrs47 5pqv9iY+YenhuunFtqZWvIft0Y2LdRSbtBB3njrg+QlK74M9gtJKQu/M2dsMSc0nAfrFbNuO 4tOngpXnQS5fkVp71KUZusV+6Wd3g3KOSGuyTbZWV/uoNPDsmEzDL+jUyaRXR0Xp9GmU3Gb7 bkqdGxS1OROxXlEL6fx1HiYsrF0oSF4zcQVnClJpXlGQSlGJvgDJ7lZ+aOXGEW8RDnUyVS5Q 7zgzP7OUPC+itUPiWQkiuBx9nVVhZpXK7/QCktcpKf8BuOwOKDMpfFLZmhrx6XgaxHB6W6q+ Kqh0JqLDqFUnSi1d60no2Eor1XK5UTE34iY5J/qYI2hno2oWfZnhpVKDXPdDIvdJWKUnkdZ/ iHVIsslyekkwpliLpEyWVq7LucVhus6FpDjn2zaa7UAzDybO7BumNYa+V+fX4qqRq3ERZokX s9ajFSElqcmZNQcOZ6Ir4hhZ3bq0adIPvR4D4rn/yN24Ep09bViKTXKrUOLq26+QyQ1AiJVi LKiax5aktEGZzGlzMKtqPiwvOdEtkmyt3iOu2P/xACWrxK7E2UQ/o5ismzszyxxb9VQvk1qG RvHpald5YMvZ17kvxoKy+9a1G8ws7oc5IWvNfdhL0Zby56UV1uCj3nTC/iv0Xc0yQZEQFx3E ZXOFx+DEZauTEqQUjTmSdq4bx7mWysnYLJdpPWc4yjKiTR3Yipw49/5VTU6l+WI3EQz5ns/a TP8q+TRnqV+RG2d6g6U4JEmKXMzZmTIH1lwnFWjW72HJwplpNy8Pm1hoCMZzuB61s9PTF2bT cyeVM+4zy5r8Gk/yY7j3zgQyYqxd1yZPOXRxirFI6qLXupgTeKA8toRMS0GQPXMYxZ2wMceb RIA6jyvCeN1l9v1W5eHqcEVFxoIdVp2qKO5a+Q2ozfOqWdBhSXg/sZRGZwuYbksrdr3xmWYH jLEATsEm5FPjUYVlJ/6ipVyLy5stv9lLsjzBBiWcWw3gQPkdA9jqvJY+pbWji93MizXwmYV6 QXla7xx+f/OUwfz4OPFwrhwep7So8u/fi+dM7sCQAZyyIypFDgcsWm+DsLZ2Mz7tph/UGK9Y VCjayztBsq/jO6kUQNv5YRcvD4RFZ9jWS5cXrMmacf/c5Ler+3sKJHgh9OqtHBye6n6TZKZl 45o/GKq/VkHtnUjy3tA7qviXZmaupZgVSXMTW4Q5t8bZIACJEvra41n8tB3RfhXIX7q2LILa fjjBDY4w63CHCrBBpyPubwqwVXdkPdA7TmTqielKurjZlB52H4XQG8lhF025K5a9FMk3tRux IBateDZGxCNLseLgSNhWZulkBJZT1dzdevpbpM6giszyt2ZWUtPkJ9HvuGENYn3ekt4gnt81 B9HTVnNpNYEYR79IXIfto0qViHihDv+ZOMdooYZI5Bb/Cxh1++GpVjvpMb2ooFOrhRwzL8jk 72blZ+WVDlZIOVxxfuz+bL7qsfueX/Y1ZNjPNVW6p4hAs+Yg7ml9pr8oRsuBOKY6jfpIwQaH C4euLmRvOPl8XQMMVtV9WB2YPvW3UbuV6QR1XjCa7IUjhnrV8kycvSzq2hCLNbOnwl/zKQdi fDGiIEGc3q2HWCmxMIhNiQwpK7QDtUMKMjUqscvbElp6VD5EVCGQEhzqA9jWLQuTiVB0iCvg Wqch1gG8hc+GZukKPaWku+Fzk8UqRhNqTA0NWWWfzQ6NeAwxJRRyvJIE5Z5cj+CmvHypjTBh j716ZVY+wLd8pRPCQaaIsm51ndR0XI9vvrJvRjBSU/qm1mAVVl0wFCwl2cnWL96rB0byoHaX 1hcrXwCX0zKbFKY72hKkVKWRqpnVbiA48dF9Snsc4hG7EKvQTZAR6mAFfXyBgbsBrqw3DSwZ 3iytR9X6wpBJ0WiZ1BORb5S6T2wp/aDiWSf+jk1aqXetMl/jqmKZ9Asvinlo2vwOuaerXo/2 ZbgjxxsVrKMY5s6Gap3I9sDipbDFo/yqHONqoKNVZGilrhfciID4xoqRnodSDcmwrpQgDwvG n85UgCpSH2RsDKlD3SYX8YYfgE21Vt48JsTTrYKP4ZMr7iJsYB+Qsss+bn0xY2Af7sPdgkdK envT5zPGXg37gzcShnhg5ZIUwBxKK+ETprTigrK2bIoSa3kp1+gs1SXS+1W+fUYf2MKwu65C csd50AGdkEPQscQjSMWKwCJYx/QdMjSgAnJRBWm90KZMimLVM3+FSYmC/tLrUWdsNOrwDdNB L9O3JHpxQxgDgvlWDO+CUSrighhTDPSRVQ3xRcmaDTCgMfsFXlBTguEo6x71MRqV2BZqH1jW r4cvbEaEvvmKJ2pAlbgWjWTLhesqqJyj8j0vofQjCDlbfuJ39XuyvetTuxgeEvGORzfPm0ra jBTzorB2AfgkxHnFh9WluLoayCny+eqkogm5LtChqrhNAJ8sudFQI3xd6YZFCT5sitGZ2GY1 1PFUprJh8VTzlQeitB+kmPNJ/kd4hw7Mv8ILs6/wVhdj5Su80z5XO4yFffpx938AUyFwZW5k c3RyZWFtDQplbmRvYmoNCg0KNCAwIG9iag0KICA0MjA3DQplbmRvYmoNCg0KNSAwIG9iag0K PDwgL0xlbmd0aCA2IDAgUg0KICAgL0ZpbHRlciAvRmxhdGVEZWNvZGUNCj4+DQpzdHJlYW0N CniczVzdruS2Db5fYN9hrgPkVJRkSwaCAjNnZnqddoE+QNoUKJoCzU1ev6RskZQo+/hsTppi kU3iH5n//EhR4y6/fP70n4u7fOte4DKDx7/TQn///PfLX7+5/PvzJ/eSJ7fkS//vn//x+dPi LtHBS77E4C8A62s/flNuhMW9zMMbaXmZhjfm/BKGN6b04oc34vgLoa6vL/qwQyhyPV4GWRsS 6pG1IaEeWRsS6ufhp4EEOLic8phUmNNLGt6Y5jGpEKeXaG6QxukP6fD2hR4kvcd0+fK3yx+e cAF3+fLj5TsHf7x8+efnTwnXdnTvO+fXKwvyv10J65X5ZalXopvWa+Dw29vFeb3kZalUX5zr lVyfSfXKsl4J8rnreiWigLYrN/fq7tsHF+Rju/xwT/es9NdPgIONJ+AHM3gIELfLQfhgcuoV mPDB2V3dY7vjZeFt2Ul/KkKqJIBi80GrwLb6A8X/vdVIjA6lMFDJBM5vn4ck4q0UsZgUp718 9z6JVjf6pH8Gt76Y+XsB0J2cv/lX/xrC4bJoW9NlXmZUWFkXLdFvrLjs7ijN20b7zMtXbews GdCw8nBND6gjWvXhEkxoAfcTtGVADbc8A1RDOyZh8KqPZHjehxgcimimP47+vruZ7AyNbRMc is7hPyhIjJV3uNJH3cNDPNbTSnRylXn5Mr1/iuzRyy3ZgOQEdKwbLilko+0z8Xf6r+CKpaFR IgvPE2RPC/pB9+W5eqlYr3Fy/MoZxkbLN4zhQpOP4FDeiVhbJY9XAyTvd1hFNgOggb6f3UgZ 7SvYvZ1hdrT4hzDrX5FZ9HrU/hOj1ZViKZxhF+JLHz3CggKbYTrD0OD1894UoHjTg72pfPaU L7lgrAbXuNYk1oX4Yx4Ga72Ph3CDm19gEdW9xQFcpjlwIGytbOKY6o/DNLg8XAjuNQmDSoSh CkMBgXv/Rcx/mKz8Rj+wcT8Aqj2gxmseho1izlav1QsmleYg1cTpneR6++nwhrZWsYVkDS4V sWcGFIxXABZL9AIPIx2LbEKqCyoSVzDxpFiycZQlADwHLzgxSZHIE137FRiSICaQmLmtUA0g ojE5+iQjm0UeftTHVVzKdVWJTPj6gzGNaxRDrFSpexDlGBiF9DIJUM0H388okgRXVi8jqStS YqFccNlzmoYs+MqE07ggfTOLaBIOn1H8nCnBAB8Xq54YldTdgjAjVy/Dry8i5UclNbGq8Wom Z2acpsh9iuRZG/mU13sC/R1w2chmuoSrykdjPSLZzFJBbOeKoSAyZmgmYofIygN5Z4PGRnmY Q+6Ya57MeRBbojcyWcN2K4rhPU34Kl6J9jFR+qUVN6140SYqGS0iKyrYeevXRR6gvDwIuabi UDbmTMqe2MzRYhRtYlZRBYvGsLbv6NsCKtgYLT2Q0fI2u9svVWoY00RVIUzCBwnshKEB6aEr RCxoOS1jzGkgFirlyTDcsC1IxXbDzDLzwso2YxUW84cx0/tSb218Bjgo8BibSVSshijunSlU MVGSEv9vnUYFvjaMO8ldnGSSuiyBonUsyDrwc5Mgi9CJxAxLqc0RiYWMOnNi9bNK6U3UV7EZ uJZJAw5FsifM10Vc1dZKp7y6zRzDvKGsbTdzsO0+e5sTD+dAkIvfssl61TTRKU+t8XuGI0qD VCWwDhVmyp2JB9H7jdAIuyCIRhXnMCs7QT+uTRrlQsE2dG7ENhkL+2Rlfj7wfXxtXssdi6Qo d1unQEwfqcvztgXGJRgLJD5VcJxEK7EmZIlrqkEFSro9D/gY6pziI0tcEMDw8WFYSsrVW+um pW3gNlFS8J3Ca+/Fu2NIqlCw0p3xqoqKnRilIDTdGxNpojZq1qyNz6AC49KDernCvvDon3Ep aGHOzDAaM4lTUDsT7tEEJ9U4VGb4WIO/jebEkYQz1WjUwpI82ywzK196h0Xn3p5rEZabAIPr pZJsNjqChgEjTVoj9Y3xq+LEJoP1Y5Klkkhb1tDBeIQ4SqaTtm2TS68qZIXdSqt6Cqdvpwwd uJLJA1akgG1Dl1co6RWJePoZNryxKo39R/wSuU7CteJZmcV0VKcRnh5AhABXdXnQWneatUcn G6b4hJElZzuzbpS43+f/vF0QpERbC+MtBih7TQfxc20GvsdTCxpVjq93ELwRFbI6rJMRVI0g HaLtR//0as3jpwkblC4ZMK9LIw4jJWrYiwJ0kW8ACCRf0D+jYWjQcJ/iSotSugI7zn+EdQfg vwQD7fteQRMLxB7nqqE4LaZrZKshky3lM1y6ysNd/hyBFyxcDjJ5AU1GfG1o0GiK9/Gkk2Vy l9nZ84vok+HW/xRE2EgrWx46ltlStPijst2gQ3IJFtZZBYCo0KFdw2tk0iSZWfd3bKJ6kuc5 jhCH5haSKb7Dw83h2FShmNzw5VSFw8Fvv6kHEoEkA4SmZtCdumHNgCG1GvMJdosav5zsyari bNFg8qFKSt/WmppyZa5jykcFZ63zVZJwKkL2rtn3FEZxyvsSidmBm8asSiR97aHcUWF6rsQW 1TXgVqXX+i3pwRi+IVnaNUJBOIMSXTAJPF5pD3vtCLAAD4A8xyXpg3chRPkro6tFsF8SlbF0 6+q0VdSnzKuCkJKe4y3GdiPHAto+OKnNt+1hOw6RmJI+KQigFtL6gFR38kyW0TmWESzIRn7Y UXXPQ7sHSn9vZLqDmNxukHqx9Pj6ts2Exdv0ehwnwc87L8arqN+zFUcpt8nvKlWqGDzZHirC fzgJ+l1nb6/YjbTdOiJM7SMowg7FlcFsOA4GabLU1yfHQTahDpZ/pwcTeys31dhCNPM8k4GS GkoFtmV+aurBCVEUXlncXuliLUIJj5LgLfEpHMBCIf+EMpKzjfKTypCrWRe5p5Q0+CxaPihk ZDqFXRSXFiPcTNgZ1/Ecy+5iwLAw7avM3qDfexrYUPQHmT1zHv+E6lw6zk4Gus+O4OYiw0S6 zc/jYbIjV7rfWEHzUiIh6WezFo5hS4jUkhvrgCZpDrYoxepxkdtIzrp1bPLBSdPcjATLlg8z kjBVIakyYG2fzuRZbyoeFvJcRRMrfi35ClSbWZtRgaUe2qOw8hsq8pHgw1gCb6mIZVBRr/B4 IiDEbBq/HxmdB8ujTgXq7RvcuTALi+llqYbIoJdlSgNBbcP9Z8mCp8QZkikOfl18PRby7Hc+ elbINzSbpJrNqgye1Uab6stQ+9epadQq7LdDaaA+jSJWPCoC1a0ZlXmFG5a6uBTUkRmVJ1+r IJmh2dE0ZS6vbC946WHDw7xwp+bycbT0uSVTKbI4o2DZuGuqRq5xT67znlwZ158xu5Iefjsv Hiy/ikKaG37SpWpUo0iqg3m+s1LjN0C7sawB61c76WCM7yOlNVg+XmMt42QYpM8TMFM7XA0e cIXIbSYRMYLFoKZoVI8wjTslpb/kQ+mYYHIQSDRJ27LkaqwjOTjWOPEblxv1DWlJsT4rLbbN vZu4KTuEwZjjOR2HVxrLlG1bn7p+hEjO93KrscHvVatl1iBGOQ2guuYiYClUwzM86tN6l/28 7UTu5rwnoPjFf3CdcCKPqY9Kani6m8ZPPkrdQ7ho9t4YK+LpxRgroleaWtALyeDkiuRZ37xQ NcsBsmcZzNLMYoRechhHcjVscGe6OCG84goebnX61YMW7xlVZTBT1h8YzUbLU+yPd/IG2b8L TtjvR5Jq+OqCF1tx05R/rrHqlJUmNwA+gYsmTK9qurCpqL3uf9dkpTYbfs3myPuykY/JnHWw HXAatxrsAJTunVsjK2tiEouzgC/X8lltgsaJ07VqPCVx4ySiSsSZmopREZ4CkL6lRoCDbMBo IHQVGXs92CNfFijv43ADbncHaZhy1J6HdQc1KTZrKt8FgwebsGZ+CkPaTXZChW+QGs5QvDse W21FjceOjnqtdaFng1Y5TdgQkyioWjanj+YfylzSY3WvE+YeZpuYn725k8FgDA1qI4R7/5Eo UzNvqdlX6YAkDX0PN72aATbVFRqN8IZmnMtuDXdrScg1mzPViJn43OjS6G1ah7DKREWm0y5b 7HGiPa49RKOxDniL+geHCgVxBH3ROKqGfvVJxDDmfAV+RYCnzO/iknqOTmNYOgPT7leGqGq7 E8YE8dzuoZ3RrdPHZGV1WER9fZ3PG7/T9ME2lQ1QsURu1X1UgLE1m8AqzbX2WfRAwk4YKo0e 2jdeZdmZx+b3g+ZRVpM3cBh5aQyD40bQ0XJWdtUuPYgbZ3bjoBzsNvlc4p7Jaypy2mMSsru1 MRVkHKdhnzvCUAaX5PyO7C+qiRy9tW8ichlpmnQVFVQVFeUsg0ps6kjj9mU9Tb2ecTT51p5X 1qGJK0c+PMc1BMfR5pRkFZDqFdVtsu3NSZHcpwApMmQn+wS2xCTz1W2L492I9kllQf1hML13 2WyrVkZEkRLptB7B6NEgEX1W1SIRs9H64TujrYqn3Uh1tC9qqkiXTzX1YV4Muj3t0m1U80vf nRyAvi3dkNbG+xVJYeH9/YpYBpyeLLJmN/bGn7VFNg8fLF0WuKrhQ8miMkCsIHasNqxHLDDV CYoRFffGc04pZQbzd1GK7FFsK6se0bppUblUEyajYbq+5mo6V6AHKOqrBxsLBjDbDSXCCTS6 wvlOeU2SPhUsOhEGwZB6tm39fYUE1yi/LOCN/uWsDdAu41vt9TWDxmRO3FFFHKS+O+jeQS9l EUMfZJTwtjTLMUNG/s6UvwA9gNsdphoBryDdfqwm+1EZhbxAGUqPlxrct2fEN6qSqSguyGcT VVSFn+3JTeuZU7Ffldi3OX4LzX7tAOL9vUIqhcVwEHI4Lj0YOKNDP2VOV3oQgjOqDKwbPLvT X1lFjIN5vxM25bxJOh967nRmddqxOhnrquXCdkefP/vaeQWU9MNywEJRaWQtC5r6cTNZdYDl NkCwesxP4/3XwYhdmSlN45nSM7Piw87QOmm9Hkm2SWb/8BWd5ZNz5n4Q6QS+1TMJg+OLJ+qU BYx5jbYAy9BkUA0u6Vkp5woHx6VaZ+ZvqBNWBsLQz2ig4l+bzpqAi/4L63Eajt5HbQ70Kjaz 8ydUywdUAd50coqNDqzntlPurp2E0Xj/kbAFZB1JGj96VeFBYo40Xhfdd81Kg6oo9p3Ze9Ve g7exkvoRB5VJ7dGuR/0NB11inziSn53tvn3IuSh/1REzGO3rnK5qkA/M6X6QR7bNzkG/2p6k tp00mi0fzmlTPcdzAPEgCex3p+Nq5Nb2H26wSbSdFrXHTwxyHZwJ8Cae6kD9dUl4MHT/xh7v wDahn6y3Ixcj2+x7meRh4Y6xYWJjnSUyzCVlYFSkTadqI0wGbIQIAT/8RD8pOF9+2e78+U/4 /5dv4fLTJVMLAP/rX5e/DD1sKiXhgA3f/sqXvBUctVVmVzZLCnKh4m77EbxMQWxekK7ot/vN nUTxaOfeTHF7595EO9o79yJVIjv36EcLx3fWXy4c31t/vHB874Dv5NJozak0kA8FVu7ZD4Y3 P5h3mdi5N3myy2Ni3IiY7y//BVe682xlbmRzdHJlYW0NCmVuZG9iag0KDQo2IDAgb2JqDQog IDQxMjYNCmVuZG9iag0KDQo3IDAgb2JqDQo8PCAvTGVuZ3RoIDggMCBSDQogICAvRmlsdGVy IC9GbGF0ZURlY29kZQ0KPj4NCnN0cmVhbQ0KeJztXNuqJbcRfR+Yf9jPBp/o1pIaTGBf8+xk IB+QxIEQB+IX/35KUquqWlXdp/eZOc7YGMPYVu9Wl+qy6qoxp58/fvjvyZy+NS/2FK2DP9Nc /vzpH6e/fnP6z8cP5iVPZs6n8d8//fPjh9mcpjTBr4N3J2vbaz980x5E/zKrDyb3ktUHwb5E 9YE3L0F9YOcXrz4wWacqzEldzpNOU0gBH/BlOJxKaoDDqaQGOJxKavBGJ9XFDT65yb6op3DB vEzqAzfrVDmbX5z6wCR8wJbtrJ7a5qCTapPXSbVwOJVUC4dTSbVwOJVU61Q1szbp+mdN1Gma J12mcDiVIjhbGFhUTKn8U4zj8qn8qhhUSKdPfz/94WHh26dPP5y+M/aPp0//+vghAQ9Mefad cW2l6POy4ttKhFMsK8FMbc0We1gWY1tytFXqL8a+kvtvUl+Z24qnz53bShHksnIxV3NbPjjD OZblu3mYR6e/f8Iau5zJ4g+zddbbsCx7OgeS01dA6N5Gczb35YmjjZdtJ/6pYFMnwbJj3ssu dtn9Duz/XkokgBolTSSTNW75PGgOsrdThGxiJx35u/XJlNVPuoc37cWM3/PWO2/cxV3d1fvd bZtuAbvXu1rTRWmLwSwUPgTLk7laYDj+eMZHACM3FFoirkcQfEa+40bemfoQHzkSifVl2QUg qgs94Fmr1Ek9cBl+bSeSLzK5Ww3Tfjt3XZcrSMO9r6CuCwvxSVhI7qJHu7o5Z0H8nTmAqW7F HFJKZ8mKqlKa6FPh3vLYs8ddAImElWGnLhaSWF+ayBQv5kbqCJz1g0Kyl4sQGAkkvgRnOnfw yXR6JCvS165I1oQ/tcZncxnVw0/EnK4g59fVOc6FhsFMIvAQaQRFmYjIKymWJR1wtnxvjRPe MYoVrILT4RdIdNFZ3J+ODCCQunZYR6onoAq2LQKaCu+BAcsrfiZ4OY86ZsCQXGoW043DRyby wmdhnaBGN8aKvPkB2NjDHmdUGs9lrrOzQUV5hPpNbxULR3Zqek3+C8wnKbQX9pC+AfbmX1Lh csHmAUHXuITbdmmgmTWcQs3sPLaPQaiFsWTRJBzdaXqOpZZAuWrEgm7OoEZUIi5Ib2busIMA KvTDCsftm+t94L7kZv1M0upUpM5cbzpmeu6sm1gG2sGQ3MCSe7FOhHOyl+6CSQsKQBVx90Bn V5qpRFRraUpot64rOVkq6GZgnjMPfk8orTuLsEvB3IG5pEsFWuqh+kuW+5LqZPiHfWAsspdB Z8LU1cKSbrrU984vTA6RbJUWJ2aXzIyAOhdx2XJFVBhSvHZg6IEEr9w/gxXQRgwdCvvxqBRZ kHlwAJyY7mTOmGWRaXCB9Xtfd5ZZLguSmJ3ecJHwrb+emWmU6AB46aRJKz8HWRbPe9d+HN0R kIoldhniVbRu5EwUim4MhxLynCNCuviUWlfMRw46Jpwnw0zUUD8oi10ZDlP/gkoiCgTmwjl7 nGfDDvHdIrVMY7HIYoAykEWLxD0pWnJDpIiQVcDciWjR5PCA1Cih42A2AaY/tfOXgCFL868u moIVp/gSs3bpJH4ioHN2ophpFXEASeSFOb/sxNXaHNDdqSDKoLsPoal6FFF92x0fJK7ZQnc6 VnFEavqEAJB4ZLbFguRcCfS7cxtg0lCOSPFG9dg3NAciH1JaCmDQY6cSoFIkTg8mEZw5LkkV Rc88T19nFmMc8mBK4jlwdu/M8jaG5eSbCKYzT/EeLRBCm/Ija1AJUV13+K9EfL7aA+QAfZ9d jQthDOi+QErM036GL2ugchSUqTDlzkW/yAmzZJhnXEz9I/uqZr4khapTK3VnKQ958plFA8KD PByT+udCMnMRIMv0NrbvVSJugokrQTNMbQYXX6nTNO2p9juEkHcT3WX3XWtLmKW9bOeWx/C0 ZZGeZSUxP3X5MK0vRQXkLrfthxLBpmfyngkS7TFSthCmV1vucMl4qBcUDFVJeFgTCXu4HO7V L3b9cus60PqoWT2qFjlKT+1YNmSZuXPT4P4tl1IBKIhH1UyMYv0gDdbIFVBlYIDclQOmL5LJ MKxcygTNOVDkENyqnjCY576PoRCNfRx3XkcKAlMWAWPSyAI9cATGhwNqlpLw/uFcaq3NGDqB ntRKwIMs8Y0ZL3d5ndiZMhMyjAnBi7PPuVZ9Xh6usgQRZUBSfBvkCW4psnpdZ1+4hAAA9gDN cz5AvrxES5653kFdqgqYmi90amSdPyEli37Q+W8jtRZ1gyKtEuD03Wzm2Rb6diqkUYV6K8wa z9Cr1+4CR7blz4VMs31sU3I6KjewACJg0QXZej2gdjGOIadsgeRX3IF1Ud0qnEmj4L8WmgNl V8U4OpUsWIBVJQoRRd0qnrshoCJ82IXJcAbOa4RlXoAzr7BvOfRUsnBxbMuARlSlu/i788Bz d8+W6IhLCtYyrnB9TRBzqSEymjx6LNcCVWANbIXGjRzD0g8VO175lgtF07TzQ9ZWOGwL3II5 T+MhDmhl8KLW+Ha9VDZ7FlkhpLVzR1OsTmfmM6leiLkuqtihI3snwoy9I69K56+wIbqND4Cm dnhzEnMo2hUdT/JpmXRVMAiySK2g2jcRBVVyW3pO8BxDXWmPv5Wh5M4ol3jF9PLGR48y+QK2 kpQkZoniqayAQnCr4jBVNF/FCReL02fEEk4EEN/NZhDm2UI0bmEruzjLyRFN185IPBDEDDbX KI5ybIod7V28cCsB1i6ZPoY1mSPEkG8euzi8OT/wNWzxNW7x9SmHWl3We9qx8oHGDApvHa9N +4BF78BTw61eyFgMsY/ul6zdTrneaqZhnt+XX9oHwjn00JSqVqMHhGQngTk8kEUYJueOZMRk nhXZVR9hLy9yvhdAKQqpUz0sCrkESjIxqXjfAMkM7QHKIsOBTCbkMbH/PNj9mn+5ha81b/qy jPBXUMiJOj28RFvb76RCjjWbqgqhAvRlShZQ1+Ko1AqUimykRwEJNb4bFiszJEVZ4dWHv/cf O1Z/E7W2ZocdwRCUQjgELykq8ek7RwHso+RYH6XBBlv27JS6d67EytH19geZubmaWXLuUtys 5RthDQVwBP7xqCC4URiF0hN8xoNIwy0Y99YIAP0gK+ZS+w8lcoUdnL24/nnL2XtEVHF6Kuh/ 3hMoHyieM9xqixKVzBtiwOALEfoH4EetZd3p2gIpOHtIT6fwVPi/m/Fom5WD4lDkxAo36yTI 8Xa02gRRxsaeiSWejA6CV+LpN5xk7qq9OQwyC6JZujOqASuU0RcD5dPrQtlqZuHIsf0sZ236 qNNC8IzWGHqjgSpvUxcRK1lt5BA1J58M7ro9GPfquIUYA8QSNpt+1YZUXbU/Gs+LO23p4k2Q CXz+DBdX/Qw+H8mKz0v8te/E56QK4kCPw9dZCe3l1dAai8Jqm+bep4LKGFDLQWB1DgFcR5nO sFRNKedsb5XcZnwrhFdme5uW5SKXNX19ZIbS+tXMDBkAuUYEp+uqy8F0bHPWaWKt/ZUm1cEJ AT2bAzJ1mtlQY9CtGuNsFIGPPo7VWQFWddhuayS3qty9owqLne/sTI61hcb+Jw+F5PjYRuey VSzplDuzJ6ClNApmuQ8RP+19y4WLi2mzHNLVbjtvxkqrDxxTaJSGD0MdUMkUZa4v0ez/A/W5 I+DyCzMq2YG5Oz8FkY1WQLnt+/VKtfryBtarqblsEHqaG7W8a1g7zWjJzKGLGezSeeb27Viw krooPNEmWiey3Fogkg3jsMnDIyrkrYj4C+IiMDGrkT1IMcu9HtjgQ3/Vg2CAxLykw1+z6DjW 9qMydryFaa5V7JXLG1qt2bWBHGaj847FVyeqtEJ9GSJCxKAhrVUoSFL6Ei1WN2qkOhdY5vwz 23mzjPWMaa898IJ6jDhFL9nYBKtsr41FubCwYSq7auyMDB6UOjwxC78iALl6WsNDj+Ww6YC2 aY7o0fRNKPNedMdqk9vXm8AacPqGT7z1MxKOFAr4rQWXxuoaTih3qAttFpVsGT/62SMlzfLk lRF1yubR53hkXCruIHipoeyKg9RQecdN8LjrAOcFn7l8lhsHdNnMMtBcJIiJB8+bR3H3eL3f fpOckBP8Z3n1TuJ9mfB4JtBsPEMzcfxBUi8H3fTxX61W26ZZiMl83JEGXspkHLsfM21Kvlm8 TSxlxM/L5qfn+okh1Or+xtuvToxBlICf3aHhOuAr8XUM4DkWysuWe/rp5iyjTppGMqL6t/Kk WXIzWJLLVzamE6mGxCcF74ImvEemT14+d9dtCRQCvzSzN4Aor/+pPeHVIBhGV+zWmL0EqhS5 TQGUdJZda+PXFVkqQ/H+sWTG5SQuI3yJAVtsxzFbf9JdHXCfB5IZF7XhlxXkidt1EvAiUHFD RCB5U+eL9S2VO0r6DKXiOM3OaK0vWuRABx69AsIBaE9XX+1DtJqsm7wYeA3FUhPzgdOezCqf Glvaa8S3yKyfjaXy2U0ROsp5MY7Nq1bNmODRzBmKiHzLU40kBlsQnmk4+ot4pUCVf7zt9/q0 VbOBOnQ6ytVjlYCNte2r0YGysKszMr8Je7O3YmvN4kQIapkKcKnK9GexQDQgVO4j3DSzvCum tFyOGLey1e/G/ZUY99CiWWW8rEVDdtBP/SQStN7vL4MENk2KN3lfJLj2qGn8i1DYral3S2zf 0T83hsYgYPyNYKBt9TsY/ErBwGQ0BZpn6IP6pBhdxaajqtKUbvJ6n/49EMNbBZ1+w4jxFUQY 1pkvBClio98B5VcKKG+OLkxWPP77YEWOugPzqr6tenVDQ4rjBbvGuIEXz7QyO7hs3a55Clqw +Jh4FySQ1rEz8ot9u6wEycL7Gi+PVQwgxJPOYV02Z0OEqxv3rELW6uYIAMvJ2Ey7tOXVZAOV xJ9sC/SNI7uWoJzaDgNf0kvRXT3W0B//NqDCE3+DM05adyDW/szZlEKh7/0xJMMuhBABf/ux /G2e8fTz8uTPf4L/P31rTz+ecsEQ+K9/n/6iym6qU7bKMfz6s9+f/gcG1kPYZW5kc3RyZWFt DQplbmRvYmoNCg0KOCAwIG9iag0KICAzNzQ0DQplbmRvYmoNCg0KOSAwIG9iag0KPDwgL0xl bmd0aCAxMCAwIFINCiAgIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlDQo+Pg0Kc3RyZWFtDQp4nO1c 247ethG+N+B3+K8DZMvhUQKCAv+x12kN9AHSpkDRFGhu8vodkpqDSEq/1lnHGyAwsLYpiSJn vvnmwNGa0y8fP/zvZE7fmhc4RbD4M83558//PP39m9N/P34wL1Mw83Rq//75Xx8/zOaUzPQy n7yzJ4D62I/flAtxTi9peGGKL3F4IYUXP7wQ/YsdXggO/z+64GFjVQ7XP7rgYnhxwwth4+XO j+93dLcetFuvNfNYGHaeXsLwwpTGC7Wx3m8tXlfDKKPhq623YwVZBxuvxl0MFWRxF0MZAe5i IA6Yhi8GBMBwqYAAGD+BmxsuFXBzw6UCbm68VGuGw1v43oL3FrqH4M6ml/9kY7p8yvdlA/Tp 9Okfpz89AN9++vTj6TsDfz59+vfHDwk3a/K174ytIzPqehlxdSTicpcRb0Idg6y3ZTDWIStT JXow0shE9yQameuIk9ed64hHjS0jF3M1t+WFM+5jGb6bh3nQ+ukVYGDZE/CNE1jUjl+GneyD l0MjEPDGaM7mvlyxMvEybdCv8pBoCaC2ec+zwDL7HcX/fa8R7w1KYaCSAMYur4ck4qUVsZjU Tlv5br0yTcNX2ocz9cGJ3+fAWWfsxV7t1bndaSu2UNzNRnpl7y8Poh1O5FEdeM0iDhZZ26jm ZGgA6wUVuKAIAuMFkgUw/sKapQveEwZZ2I8MAsYLyRyJOeGFO6tcsOAqcGh9RoHEzXw/YTxP s9oPMNjhkpe/3C/qoKGw3oxnq+CFGH99IueirzjP+M430dhoKn8Gl/end+ns71trcJO9QGCN 1S1qvTkQiiG9tRsSzQXWXMtG/koPh2P6qJqdspX/Ws2iiY2n8mdnkBtsZr9lUsW+TIeTEHph Q9rL/vtSdkQ9klZv88LW+DbiReWJik4nJOBkbgId73iVAp2owMfzWMFTMlc4dxpHLC2DJE3r GyjtAql//xPpVL3GiDJ9G4sdTPWeWPaqhqcvrY33QMYh4PbfRrWDqd4XGf+myv29cLb3b8TY 3URfhq/rql1PIhgzqmAbISJs2orKJnjkdR16FZjOE9kJYf1AFU6KsYBhUrzDxME5e4dYgnN8 Cv+2dIMLaqH4rBk86S5wsTMrxupEAKNxMiILPBVeiHkRgBRDwbqzHTLs2qM9RqkKhf+ipmuB MC6UsgXcvTAS2VIS/BS0876EzvBmTyBQDnHCZIgWwsOPNfOhHT0QXCD6Foux1iOUgiylVEiW y2eaSdCNUKDXgfLleY8QhJxFtF2e12egnYBtysp9jrcwz10k0ifLsGSvkvrJCDPQvb3HJJcw hRZW4ludNQUy54baUDgIZ84KleoU+EFB36DkW91lwNvYvzSSlCZJrVsHlzVwAc8oNJq5OQfn samA887vYumcTQMgkzHCKwCJiDKueJjX9Wj2NnXsKKouyFzLc1KVCG2TMIv1r3EICoctUSJ/ ZE/EjlIxgqWhwfrSlpBd1qXmHgx1xUZVgCpxCEr51oEiG+VmWCwOdRf+09THmo92B5scm7ch L1IBxMAgY8MDd6ILtflzRpTi5O1QDFFqkdVp96yqgPOaYar3iupQRoYAQRV8KkMpwDMNRvRv rVZnoUEMWXo9hSzX/CQ+Ew/oKpqqKSuO0e5XbHLtcfSgCQwn20hB5AJXazqepueCKoIV9j+b G5UUnUJuYF2qwZnmYPmQzxSvx+9RgSagGZAck8L7AdlZ19G8cyY62Jcf5Nrt6GGYzR0VF0su tT9JXYCBLlyvPooFJNEmujzaphdmmsnDgOK+rvSKLmdqRSdMpxy/s3cjE/pGE2GVMgtvi+Ev iJ0FL27gYDAxV3bEC0LzQm0SecIOb6yMFhR9c76gcoiqEbLOlW0Cy0XlfWV5R/M+stFdZ0Q6 FW7S5M7Zk1R3+8r2EZ9iYegm/GxjrlVjTHbOYYDkREHKHTUnUtvWvlKZq/L85F9pHSrGeVhV G9+zAD+bPvflaJdRHguXXAiH1ukYaFC7yQ7DDSG242U7b1KQU5zchUNcsUeZQwUFJawQ411H LoN0BNQRgtOJ2TCwK/7W9IFgt/LqMO8V5Lxy0fXI8inUlthaZ8WDZGW8VUnZtToIcFoTFzPI +HPlzqmwokvL2dXnmq6uG1inMq9sa438hDF2AZnmA3DMUtJ5j7x5XZS08m60E2JHa8SIu8lL 9LQR+k5Oii+suJyVEhXStJKI+A7MzHesHkT3Cp1xQ+aljJBjKTs6IQurvYf13iNj3G0iiliS PYDiSFPP5pgA4oAYd/I+GBa0kBhBeSI5XISLS44OOZUr6Y4rYSqUitm/InZxhwNv9IxNDyA0 ppcWo7AqioEmpJJhbcWmRaacjaO9b2uHIDjyz115YkCcaZW26vwLRSbOhuZSB8A9uT00e+wG CiVJ6gOazYpjZQ4VXMx7Irnkc9hBXsJpjdgYH0DJxqoz6lm+2DmQpfPdaOUcAAZVr2sJZCh7 XdlhS9DKHdO7FIesZ86SaJBZ7Ahsfeji5c1YV/YPAo5GAr8GfX2pCe+NK/piSN6GnrsvTaNg xaNpX8R1BqNrJOwRlQfW1Ye4Csr7sO4OXJBale3SMMygjamAElTopBzwo5ZGu5hktOSFEVS8 fKCQbtATljNZyi3tdhyTg5EkdRohUde59zaw47szN5obSratq2XqP1IN9C47oiYouFEApQ9N BsF33XMNvDPXLnueRTdtTazSW1vD6FmQxDIpklkpVau0C7/u6+lynbaUiDFIyUUYXuiKm69j U7jodpTPzNu2sNWcSq7WQxjQNgQqeHpe1P+CgUGpoHP1W7vkc7aATH3MXKBTv6kz6yT6UNUj KefuGNCKk3bJ54AdlAi7CTw4+hI7GLBVbZYqQiVMqOamLe2M8uBV4VYxHDoqHt6r4i3HOOQX FE931fw+ZFYBM9neyrGOzm7yghXENixBSiM0sYrgHvVQjjcjJ6cb0mjK2CoSD8IPugrKLW/s 43N4eMSrG9MFoyZldRvfIb8prLRphlfbqlCRTGClko1ijnLeEjsOzSm0PsFFHal1Z8662U4J eWRbq5x75VcryKVGow7seldJDMRhIC1G+Gce0A8bYU8/LCumn3oKKtzqBRBLNWgQSZRT00HJ ottdS0mi3X5v0iCAuzPzk97JAjw3zd2R8GrHVhMu+T+mcR9gtolcGjkSr4KuripXG4pU0qKA 0HrTuHeYky2/DxXgrBjdCzS66LYCTNUSlA9/8LQcSbM/3JVmTF2I48/KwXQlge600OtzDaZH VaduTxGTSpT7U8RDHWMuxHe27K6nUDzg4LAHMZKkjGpz6/GlNCwuIItSKKK2G/Egfr+aZedc GFYScsLPbeCISCVAgqR5FzSOKxu6pDlw442wbexry7mcRg+19dpmuNrn5Pyoz+mY4lcShti2 a/ROJJe7pH9GlbCetndZl+WmFss6wGjFI51MCLBzFbTINdhOrmpDIXN7eeBGRz9oC3J2sQyJ tvYjO2czokby7M8XPAuTvZFp7xmUPgYt/b2ludTONGy5Lxri3G/S6bBoyLySRVw+T2vB5Eyx R3JnqnKGPKFO4pIsLkhgqMObe9v2AA/OIVS3oatlZaIJOyKJY/spRtzuRxpmNhs9SCt2p8Xl 1fWmY/Zscuzx2y5ZZ6xM3zmeRv/8bNFzBq6d5oH3+axFEx6SqpXUVjVqoqJNOGFt3+XwlClw ZDXrI5FHPWDlgOTgdyO2mIdNfU8I3OGMotT9fhK2tKDHdPfmL97j34/cjIosbIg+vLBFzx80 EvuuEeGYKCfPHJHeTFQ5VlTHpGjbyQQmL8mnli9e8Ab6xslJidBdMTjty3NksLz1G2pLnIWc j+C0uRZ/4BDKxtQxEi0Nf95wJue9e2pbFaYhdCna16OD0nUrZ1AqfWBo7uPQ++5zk3eFQ8iB fOmAk5KoXF4l/U4DsqjXXvBfV3fnBe2BjFUY+q4yVR234HVe5np9y4inMdWsMSyvcze0l9zt IBydeyuqNz1rGlCtzuserViKH5Mnw1bV+OASxdcgNdKnAXaOf9V2OLizOUa72dJvRxGcRoGF fOLqOEeQzyGfULELefNDCfojfdS2nNc+C/Nw2VwvVsVfHp103faPO7/SnQcSj5G6s6lx1UqS n4Fxuda42o9Q62GDquNEfYxKDbPHCb5CtJzJ/QHR3+udW4BMW8p9V877lUFk9dnX4rPtW/ts ttK0arl+0pzq5xynjwTdl1okez9YfFlCMEzW+k9/Ps+DD0hmdYaZdAHdkXZUux132Kge8GeB iDM5TYZppiBbPHfOtK5WirZzs1AVUVzsTL1HuiH31moTM/doL1ACd1TgEn54KSzbu32YKeck eJnOOfm8iqsgqnPOsag5N7EHFAep7xwqH4jJwVnXdCMFGnztWjmrUihpls2LBaaO6M4HlFOj RIhx8FX58aWGdSSoPg2jSPBQXQJCGHjQw8ugfEmaI5vKA6uv1B2WOdWHUk8LEXWV3o8+nP5K GZ4VdCalerJT/UHaMSg4R3QjJew7FTo1oeesi4maYXctn21MyONXtNllcavv8PA56U9UIcYD GZsK4Oqrq1yqnfgJ9YWgQ9OMuX/C3J3P4T9cEYoJwXjmAo9Uj93+8eqi2vKZ7VsDcLsL1Lqj ZlqXN/h1HZ+FOw8t7tBK5DRLzgdbnnlFvW74iyq+5mGROvwpfLW8RB1IDNoMDrFX5ftp+rIb pvxbbLDLv6dm3av8W840SK9ypp2jvH0n7qbVFlX2bbIjPevzK6dax15/epV//dJAlEcLcCkN fcgXPF7QwFoEMGlV7OtouClo+j6go6VRS1z3lW5+sbshrwYuj4lrRorOfvBcqmjc9MjLgGUh soAffsq/SC6eflmu/PUv+P/Tt3D66TTlKBH/9Z/T34aqCSWWH2yj+XVH35/+D58kHgplbmRz dHJlYW0NCmVuZG9iag0KDQoxMCAwIG9iag0KICAzNjcyDQplbmRvYmoNCg0KMTEgMCBvYmoN Cjw8IC9MZW5ndGggMTIgMCBSDQogICAvRmlsdGVyIC9GbGF0ZURlY29kZQ0KPj4NCnN0cmVh bQ0KeJzNXF2v3MYNfTfg/7DPAXI7nxoJCArs3rvb57QG+gPapkDRFGhe8vfLkUTyjIbS6tqJ XQRwYu2uhkMekoccTtzl148f/ntxl+/di78MPtCfZap//vKPy1+/u/zn4wf3MmY3jZftv3/5 58cPk7sUN75MlxTDxfvlZz99N38wTOWlmB+Mw8tgflDySzI/GNJLMD/Ikf5ufJC8KVNy5WW0 PojTjkxxzC/Z/KCkl2h+MERb2Jjtx4l3gA/DZAsaSB7zNaGYqgtD2HlR9rZ5QnL2jgPJZK/h xx2ZSN2h35yfTFX7Mdmi+hJtUT1tzhTV0+ZMUT1trhe1OkD9p0L69ql+sbpBKpdPf7/84eEv 3l0+/XT5wfk/Xj796+OHQou6+tkPLixPJoLC+iQuTwZyivVJcnl55h0JtT4clkdBX1X4hwM/ Gfk7hZ9My5Ooy12XJ1Vz65Obe3Vv64IT7WN9fHcP92D5eQnv/LonL18cffDRp/Vx1H2IOPyE tBz94K7uvn4S9MXrazMulXxhETxs817f4te330n9P/YWSWS3YpkkexfW5X1R9bJEoibY6Va/ e0uW0VwyPKJbfjjKetHHEF24hdfwGuPhaytmCVyk7/a16RpVxKjmvLIi2UAxpfVrk6r20SEs FlIqWTK9HosThhr4S8X0Zwvkp1Ygdw+eVhdrB/8ilrgRDNwToWb/G4aBYN7LFCriViFClhd7 p3L4JC5Dusl1zfWDEWDH0rEH+scpsWgz4xYSJZRY+rVnAwDk2TaBVOBGNiN5qWlJliuM25BC mn0Tw+hOyXWdJ6TzhxSvVTvkqA9GPIjibyn7KVAWZx3FqB862oAT5Q0dCCDsjKJOdflIb61v ntgK7Jcpqh0eXsISvywugYXR40CgOHVId49QyP/cvMeRl4hJ5RhUOolziw0EMY0NWsRMHWJ0 236DITfW9/rCjhMSKjOdgJevga6FV7XqNvNUKy9GXRcqYuvAzqG5pQvdYc0/RbRBYTjTn6Po HOIz6k8yj6hobBRdAbW+Iyr8pm1yQ8R5j+4a+K0RFMeA85D6uk0RlFbEsVF5sWDISnmDsUK0 Nylmb7JYVjtfBaWaJx1IFVSG4l69vgHijRgxAAY1Lek7Rv3quIfKozjGCoBEv3qUOlAY1Xfl BxmdKoF9UD3BV5xIih3gN73cbuTAqO82yUENT3c2vh8hlZ9znDxNXQp7p+MYpGw4sfA4dnkq jDXu1wAjywwvEHmKGYtnnTu1fvBA31g0hn/NsNU1KUAT5HmfMenHSuISYIVs99YrWcwpavKo JK8xkE2UDft4iBrdGylrd7AEX8MgT2uzdppEEeWxB+AsDofKhti/aDTeOKxJ2guTI76gTEWd KwPDdbwihKNEXx1MIiuaxc1UsUBy0OQQNP5ozqyJDHCD+eoEGEuF86cnZUsfjvWJbPPe1SPE cUgwJhfuBYyQK6grINmeEQz3Jpt3Gs+wyPAIRKERLVsSoGDoW5yAY61kodknYgDuEmVb1dR3 EUcSVI2OZ5x9GLYx5u6vkAey2vHKyNHSip1Y0l0gD9gyk4UiQ3wQLG99dCcxdrFiLdNG0aCG c5Jg61NzjLhDEuzlF//wmlhFqtKn8BruwNOjWpbyiVfLavRRv5NkaSXxaCdxI8EsxEDQ2/Cy 3xC9Xb6ZUZid1qiTvqOrxzmg9/yDllNDKWwxkaD96n4ZLpBG1CFGxWBHaklV1w5phQD0OOEg OdEONy5SjDR8JdsNnJ+0w2G4yI6q2cjjcZJ0KneT8FQoiNZL1hRjDaBRie2Qr42MVvP+TOtW kUNAWmfFtjKzZmZlWTSUBg7BEFai5yh1FFaoHk0r4l+ri6wGBvzOtaLUUpDcrMqSIHxteAnU pgnMeFQd9lx9DevCAIghAUfr0+4cqvyUmKSBB3epKs6kCFLGUdFwMrOm2BdmfmvPrw7BnrL2 tR6DFCBK1c91rlXFehHaC9pSc9hB6EJHfcesP+z0AAPsOgKrzb2fGPBx34jaEWVdcikB1pMi MkMHdCkmuiBaiT9tutLmK2t+7rOLwDejopsl7vVhFztVn7M/c/0PVdZ9gcLWWYziqwIDCTxq 1WhCVGRYrZ24FO4n8R1DVz8xbQZWOPNmzmUdeUy416MGoMVu5ooDIid0WUpFrFTKYHzJAcnW ctHM8thi5zfvkwggDuQj2R5NS03WfutI031WB++6qdZepU8Yn+WX2eE6M/Q2M4qC+9b8/SGF uqTsWuOUxwLfIlmyo7fM23RP0qtkG6iZzhD3ULnDJnxnXyi3UZKUsA0UVI41EhTotdo9x4xr +913VV+obOYKsUnskf3jTAGSpqkr8GJ0Q7gd/tbPfUzzx6+djw8kjJ7/CD4eIfRdwPnw5oTY Zeho4W+xskWVpaNNXuLUB9PU1EMQg+CU7KanWVhPzKR8t5FPH3IoMc5JmM5NgFx5MZenwOhp r5OoQOA00kYyEIYGqHNOmxkC4zDD67Rw8hMkh/q4oxlLpDWTSbXBqnR2YH/Aqza8XYPUHOWz kdr6QmRZsgsMWKwfNoQrD9Z4c4jPIXfsriUKQMJpD92RxdwGW786HRyDrmWoRu+28YOt9jAg b5orvVV3FSPMseEw+qZlVmntqaixGi0bdlZrUOhLQDNtlyEpNbTqs4TCFACXgr6Wg1j64t43 KbhveFfcN2xfM0j7RVqDKvGWTRyCeD77qGTZAyvZLzfxLAsMnueCMAfnyLoLJtl4G0EPIUqV 9ZagKakpHYz8mhEia7mGxc5pQtFSS3a9xE0MG4f14V7D1mrucofDKIhW+AWphTVa1Vbt9gwx AvUyzhDn8moA9rQ/xxBvSGvh2Cq+Nhlp6o79zoWq0YLmoxFvQl/onMkII9eKJX+Ho3CgkjfD SHpWIArQZGVwvzd6eTmByhQ7XqV8Cvo9Qz9pcgQFaEAG8CWqruaOIdRXkFlWxUHTTwEI9YdW 4w7j4R3oBOB9tKYK3rr9nShfjQS1HhZDo9odkUo+xSuzsOwIsSEq8cRhWZp7gp82sxUGte6n PfrmTp28YMRKo7Fz11DMMMkvOTWmktzUschvK/aXTCrMgyy3mKJMCwxOEJZuvAM2fjq2a5hq EgANRXHHwtuEc2d2DDh6v1Hcf+3jxuj1VEuC1LG1YqwZw7SWEN7hpOHncak4jR09O2v4RsNI OtxOm8iH5kxTc+UTUQP57oSiigV8IkC9+ToIc13UrFrNAbTKk4LQChrnOuaVfs6I1KK59puO DTEnM1t76yRVo544YMU+AE2FNLKq55THxrEyoZ2lf58hrpgF2nB60s4+WA55bj9D7tId7Udd HU5MiDpEFVmiSOa0AANH9pTVyvYdcRNsmmg82uaHc76UU9cEeOcWuhnXldnz4I9DFLV7GzZ7 cyOPC0U9nnA5Fg6AXn0hH7cxw1gJMmxP/C/kynskWCgTnM8lJerhKEhml9gNcZvFRJfZxWfz jSuWUjSScNTE0VRYsynquCufrsaIlkoIlvUL2+pC+OGpQcdIlVGfbL/5/GV0UxdRiKoqS4ND X2FpIo2wNIkAxth1PTQzCgeZ9QOG1jVeAkxVhWS3UuYeoFd6Cz0WI6Ntj4TBg3DW028TW8eV k8fiiMd4oAFRhaoyLIcGAiO1cQekM9OOavIzzDSMxZr6fUd0+rK2ojURH9vGBRaIpe9ypNuz OOXqC2CjytSa5lDwiEiDmT2LUSFV5FsaZQlVGaciViiDFbG+mnHWqwI3A/Kzt8UnClkSYBiM EYX75sQNDoWsftPbjpW9Kt9XYmetRT9/QAWqHYS+HuGbBtrf0Sd6RFX/EZUIaIbtT2l//RhG pGJdj+ChTztUZdTx9eVWQ7jxyjC7HV7jnR8DMONEbLU/JFlAkaBdHmGe4+pk923W22jZr3pG /f7t53pNbbj8un725z/R3y/f+8vPl+Bq+5L+89+Xv9jXPHylMZadeidR5Z+tXha3ybG7MpCu Gme6IlWmPRiNOhTClSKmAcWSxqUtSs5dBln8IwWDs3/LKhuqZiBAyeo/b/nlsx1PVawQ/e+7 488g/Q0xlvUzW1Z7ken2pDNALtzuEXlxnRS6Yukf4XT9/YV/TrYy03NOvGBvbqF8VdKJ4FpV MKI1js10LgC4ybzK9M3uey2w/6JE3iHa3UNoJt9gaCXCzT89mjyFCD/2J8e/o6hBalttAffH agQusbzvG7yHwcaXzNkAiB+lYaOAiaE2Z2q3aJR8DjeVXv2N5VWOVF+Fp4hQ1L55cfPmgIpe HmkpWQIP38hl7jHxDFkoUK1wetQrQYxdBWXM8Xg8YLXykMw+0UEtHDNkD522XexKQYjMhmY6 9occzfuPn7s8d0gCnnHWGuJMhUvSm9HiSJjmoCpCqjUPqnCWStHxWU66SBzcluOWpvid3k9g ajTbFGLz7a7333AsRHyXAxM9E9Uz7eZUVOwIp6KSVPpZjb3mVl8nN1dA4NB/53hpP38xrzs6 cu4OJVTVRM23RZV5eVK2KBOEUv1Cjd+fGn7ZLbVNN8FjtjXH349bIOHEqbp3Y3+dd9AxP9H4 BNd6jeuk81jjAPATlch9SJz26qbvmvuQuwDLW4BBK6of/tvchoTFQu0XypDvCN39Lb6W+5BS zZXuCByGYuA+pKKzvQ2p4zLbYcnNXUjrSsUuyuCt4g4TnGB1xZB1G1KHCXQgF6evjWEm8zYk vKeTHG9D6ozQl96008mj9uLZes/xzFjhVHov+KI7jO2UV0wHXdTN6ERzJQtm5MG93zkjX4/2 dbwUOn37B1wtNq0Cc2dgYLfr282SbMfecqOOptE17Ta6QtrDQehw0PPBUd3wyF3mCOAgLO9P KKxXsOVWZpduEU/NXfznGJ3/t0EtRk8OqH+G7q0hmY4A8E0DyUDwZWufVTd47xMu0vC9T4lp eQMomeE+nNr5v7/GuYkLcPjxvpGqzfVOPXbZXPC0ZkZ3OrbLZEw/GKOT+aCp7SFBlSW+katl UZ1GSzfMw15XN9TIxdbvWpoqwEFDc6ythIN+ZqaYU6xtxPb23o+X/wGLyotKZW5kc3RyZWFt DQplbmRvYmoNCg0KMTIgMCBvYmoNCiAgMzc2OA0KZW5kb2JqDQoNCjEzIDAgb2JqDQo8PCAv TGVuZ3RoIDE0IDAgUg0KICAgL0ZpbHRlciAvRmxhdGVEZWNvZGUNCj4+DQpzdHJlYW0NCnic tVzJruW2Ed030P9w1wH8wkmiBBgB7pi1kwbyAc4ABHGAeOPfD0mJVYesEp9edxsGHEfvSiJr PHWqKHP57fOn/13M5QfzZi+zdenfcc3//vUfl7/94fLf7a/5n1//9fnT7cvnT2v+ZQzx8uXv lz++7MWay5d/Xn409k+XL//+/Cm+TenH6W8/GrddWd98veK3K/PbWq8EM23XrHkL9eK8XXL8 qFhvnOuVpf4m1ivrdsXz667blfC21Cs3czeP/YVr2sd++Wle5lXXX19hjd33ZOmHi3XW27Bf 9rwPWk69Yqf0w9lczXP/i+MH74+d8FXBxroEC9t85qfY/enPJP6fpEZCMEkKikoma9z+ehtZ vHVFJCbYaS/fo1fGRX2le3mz3bjQ+7z1zht3c3d393742M22krjLUx09dXXj+6xZ1Bvto1qF Bc34pO+b3f/gDJvBo+oldFLwoNb+N1V0YHe3I9ucYQnvC2Jepjch4Jju3VdlAy09aTBWc7cT 2bs1ZjEvF/L/7msKvLl7kkI1Zd5NetRMb2CZWUcX60udS1brk6Gb+mq3sEdcq6DYy+zsLD0F rP9qIy3E0OKdzcvOi09/rkKecMuhmhrJeXFzuSHtwDx4XSHyKsS6bCxvqltgX0+XWdYzyy0L tC7XvjnW6c1ZF/Kb98WyyydJX1OMeZIxBpbhlbUDqsvSMi/epIVdPuq+PcvC0sPpYmQBQTyh nQ5NL4YUfDvTm3OczBuUnrPZ2FMaIP0arnk3kxzIBrLGrnR55Y1NYKVgXs8aLTm62/0KZY1l D8JJjL5mB8tu+upjdorWi8gCOf6a7VFZi/tjZn4rmfTCtrAHfxIUyN+KNxhFT8lts106Uqvz /MbiRsUtJlaHhwhPmZdsvAYgfkPow5b8jZD+LKQ/keyl6FrXdRbCEtsFepApvvCg38MfkhKz c28WeMJ+57yv1n5ThCRFseFC6LHslTkgvMD3aSVK6uYcj35tk9mkjM5owbFgTDJ2F4t46h8n 2GzS7U1EnTBV/VhWmYMtkRHfyxN2s602mKyD0xOaTdKqBGwfMRsKqJ3RkOFyRE/iIJRF17oI nxIURDUlwmcroVwBQntsVkLCdnzHacy2u9QJ+5pcekFnX1U0IAgIipFe454Q1lmQFTlBPPpd coAljAYW+Y1KDMXaq+c61Mt8QpreCJjjAm+GLbRbZtKtFbHX56W35oCxUb/FKOgp/XROQf8l 0VAUlUHCTSRoFqJhS+23EPA1Mb3oRTrmJACqt+yUMnJ7fjnvM8MzEdk6vAZFVy/aHa1tqSzf VJ8WAu9w1naYopuPACI5fLqCLiHsQfKOCSEtSiRl+U+Yf/b3QlzwkKpmlK53DqAJII5SXFEY 4HxT4AyVY0PLTepa+jhgpDZO6kyaN+bfWTysTZApe75Ir/wMiXKSZWT/VipTEhQEAobsHnEM 69e00DhnHWcZb3GtX5ddHz65eiV+p9VOWW27XmvmM+OnB8R1zg9SfdrXHXOqY59MT3AiIKfl 8bptA3/mBl2QlWCispjBrDAoUxyGzLqBhhVfO9h6FV+D2UVJl8KmJ5dexj54zyUnpDfa3nTC b0wUpe03+E2NUoQhBE4NWFiBddguClva+zFMqOFB5gXhmNkCGpxnMDAZLUD3KMIr1YFSpyTN RTWHbDYrQ7FTkEGKlKUajgV17LIIBp/We9w8YBg6eyatPCB0cFWoMAxpDQx6ScqyTnlWghBK Rx8Vm722JY0DaEEOwvWhFZxg3mz/0CQ1U1z6aigmjmx/WiZRm2zVABsUL+sGGZadvwB8JwwQ 5AXc0GqfQjqSUUV5vadACoFxIL9aAoG4Y7uFiC7bwp6MOOpdXLJThf/GHBTQKgYRXdKFAgdK oeAdF9WR/6BAGVA3VXZhW7u505bBEq8ccmK/aN7f2YLE3+zNrXTddcFXINajbJ3LUG8VhKsF khewXsjdAT0D7FX2pxNAaYpBFkxKQa4U2A2er3cE866JHmlOE1spyeofYgMea2KHJkCDrIH/ e6E0EE/uQJOdOdX7UHRSMcFmXbCwySX8XP7rRffx2nJkL7QU8Y1gy2wGnAsfZOCgwJTvoRwY hMP7xlQaTjJcVDBEsR59DYvXmR8uitdsX4XtnWtqzfBmVzW7V2ZkBWW9s5IPsawzROc0i1Bc 6hPIZ4BO9WD8EYTMBTHwAdYg+zlB/Z9j6AHIY+9pmbVrz4V4CK3UWesh8VBGpb/U+e6zhDHD ZVIyTU5aCraorQi+IaC3drhCpWKxGPKAmHC3FoMxJ3DG0uAFDAk5n7nOeBrg2PYvSOgHsP0h w2itj2QF8Y1MN28AiUlhfgzYKTttmZIpAcb8OcdBtFSKb0aToeffMFh6rS5/SbihUUs5xUB0 WSBuKgmbUUNE7d45yA4N3a2y6wHovY1tVZAMIbZQzRLjjNEn9moIDYxYOZeQmoIqnDEcbYIx cPk5Mryk9eZlUH8Ew6fmFS9eWNuOgKrxO7UPZPPGLWg+EoJmQyaoC0oRIMMX4FIXtnIoYfaA oz8yVNUdVr2bxaI7CBUlU50zkQTvbxkGs8iRnMjVLhAA2GLS7aRGPe562jOwrdhD6xFNQckF lE6KwmQBJ3u51z3ly4r6CmMRTc7VGkgsKkYa5xjosM4Cnrplg3TsZAnoE0BrGYC2O3w2CHw1 tbWQP4yCckGIERwTWwUCcm49I4UpaMt73GqGOOTKrflH6Sk5FeQBHLBaL9LtxPJFXMWtk04q 2RCuZIsMJ3v0uqc5KJoRfohJJbuaQKX0jDyrnqRTjCrRigrLiPhedrEEuNiUKw19WzYUykMr XvrsxUQsJnBBxLqYxMjgdh30yF3FCQOGuUbESMrceDCYHJhx31xTcL7agdJLsbri1Ny+BFkp MyrdUjSKjiXPmbwgbKr9AGFvKFY02r5DZ+qUZFPYybWqlp7aXhUILKMfgwMWgDS2iTjylyaW vk5G740xwCaWm4f9B2XWDrlXIMSTXQKW6WeLhr4Q8+9bb9C448x2Qo3F3bvwhNQDdWr2yOyT MD3l2V0auDiqePNarCl1fhUag2m1HVn84QlrjYiG+sC4tdPI/YFw+Lo+zEHTWh3zwjwyoY7V qjBltmtpZ1S+D8IquQQzgApQlJxRchPmbdCmKUlCVurnmlzrU9QCrTL2kBtxeOtwIqK0ADJB f8JsZydrbdof4B/RbhplY63hkU2vYWDtgOYvQfrZC14JelxIEA28c4QcTNz6Hk13DK1y3aWN QxzN375a2hC4EMoMSNNRXoZKbFG0GXOG2Au4ek9ockRvkiUwvJS0ddCIsTZgUT6YXzyQofLQ fUAR5hc92DrPL8ohmrz6E8Y7WVE/K1Bn4rVx/1Sn8XksAjiMtveBNPcRUP32jCMA5Sg9yN5i wxhzGdrNYgzgYaF5acAG5rFum9drnf8zdU+BAq3Gwt6/5Sn9JKlDEue2NXlEDCl8AwcjcoMr t6cthHVSGwe04mayBFD7E6XSdNIidlpZ5tKYh3syGCvoqE62mNFwWDG6/DyXB1zqfANY2QMG 0+hi6KYaAwbxmTNS27MVDl3ykNItNo0VQ52ijJTmTRsm0ugZsp9KV0g/z/43JuaGIW3LNETm FiG5JvWgkoPm7xljtTlgdOGFChQuNtoJFMw2wfG0J3Q2bgqTqPGTlrwYypdHNojsHY4MLVBG EWdSUjKU04sypvtgb5ogAyQCASnT5l452xYfo/fg5KfyHr/nSYpwMImaHCQtQjalh9BBAMe+ AtuG+qPa+dUNHxTUQUej8NOjWVCt36k3asSyo5aKzhQiZhaFiGq1OugpCQmTGs+vHdV7v/98 VzNDwXahTOv0o06DQepDzC7HOMitAD8ozYDSUIT2ZkC+JsCoBNvmBxhrP9FiMY41hDUILtKc SMWiDpSs9Wq2gM0GDm3Iey3ibDMuPez9qbM7Z2oSv8pzSEaCBOOXHC9I2pArXlXW6/fpd6Ew 2/w6GeyFZmUslVfBqRpxevAADjJYWXFS5PfDKtDoahO3zJkFiWhI02sEhCTy9myhngwrgwWR vcoj5NgbuR40PQ1ks8USgZXPlRR+yRbc2l7XB6aQcj76CLZ5C5jE2QGthid2WPQJt3M2AL5d 0AuZemPIg4lSNQ0H40PDLl/bR0Y0V4gGPfvlcdR6h20YkGrjQFqL9pot822hmhxEza2d5mgt ZP43tWP22oqALTxTLDyePMkPobwNJrq1T62MN5uJlvIK5tAhFtqWrDetE05Nz8d/sAj20YuW GU7pQB+GidcmxxbSwshgcjBRsoHEsPERJE4gnR3Zat+9ytQXq8hhr0Zhyl4HE7JI7JFNCM7K PAMRSGCR+pHQnUg14Di0jK86pcTAv+G+r7KEV3Ze8RS1A0Bbz60xRzsQM18H41LcLYW2vy/j jApaQs5JHkHsJ2uG5jk7YZ65fim+WsMfjPIsddMNkZuFwbPfTaaPwtp2Ty1Er3CqwvzOXJg6 rQwdlKpUmJIClcnWPttzLQ10xelC+lmn7DfeOMuOIMt8Imqz5vktTmv+zdibAkaXm5nSOxbE BcNzIO/hRUnuovszUaIlvT4HaRmIPOVE6e+DEaW/ffQZSps763omzbkitWdCO5zemQ3ehvPU PocOJWECE8jx0ZFX7Apjq6+fJsVZRAEUG/xIPqkN17AXa0eu1JPLwBw0E3HmoF2k9ZVoVgC1 czto/3LqKsdPasKDGFF3xuPjUMXd2VcbykD51EeCFkpyuOeqW1nVCRsuja3WhuWxnKaJ0+SZ 5jTxuPdRLFA7tjhlcJOTDD/JN0dluRB1Ay5UO3+nAIbcT7BNRQjDbAZodkhkynhZWpYs1U0M VqzU3oShB5dH34PnM9fE0oG3fXCyFPlFrNS+kV/8QFny0SOrB12mp5ZdlDPuJ6zbyhNdR+Qs lQoNzTXAFMqp8QOmUMHTjy7Irl2Q/dAQ11xUv1GYnsjWwFOAM6ZBp7S0lHGgbQqg+dgI/Vwy drPK2OUYT3TAxLUT0pbs58KhX430PL9ramIOIGKPnyxyvD2I2lxugDAdElwSW5ruyFDzYBUj LXlSkt4JtacybXDCjs0sCAcng9Kpoa7jo4Z8qsSoNj2/J7nDIqVBaT6M5nBePNxQd4ifR5F1 eC2NJYrvakNwMagNjwMM1IYsuoNh+70TSstrYIuchjb9YTnkuQSrqzcIDg7O2KAdOoi7mE6g WheXehKQv3V1PfWtK+3W+nk1AMT3SpWDmT4zCheBhpAUDCCfWcfkJKgRn4Kzd+P9GCLZxZx/ nHbOVqDTPKMFwQs+AXGDJiRIwNcBvf3pPZVcgr/Ne9l/sB5m7uKGyhkxUwhaPg7sBCWJ0UOb v+8QyckialdWsOJrBcp3+9IWzynr1ONS7vV5Dplq/+Y4sdWKBBl5tG8soXKhbM3KBcjoJqSD Cfw1G7O0Mbfk0KFtzM35H5MpmDzNareJiO1tpfvbz+fa/dH4yJ9/+fwpb/+3/W9/+XP6/5cf 7OWXy5JHZ9J//efyV1Xkfo5HIh8f4dpV741Ia1/3ycZzpnHqdWf92EBPA8zHmZol6irxgPE7 n4GR35iUCTIBOMNdjrYjow5jVPi934Ft8ebECVB33+b2PDMsq0Gmyst0ldJaTrW/Roz0sezV 1IXTqPDUvoITlVlFGMQEoUo0SGofW1sCHKJJpBDQfVgx12Ij3B8cfrywDP6+n9TtamVSv51K 6tqtpj1Dw7iKv2wpMjggF/lVksqa1d+IT1MmJeZxzWz8M5k+TAlSQ4fEuCbdLRVT4Jn6r/o0 5gkRz5Oc7V7zLE4ZWGFWCCi8G4hxVasxANfrMEnYKXeStUWUcHPuLZ4wZX1tneepN035gxIF Tl5L2qGvFogUgwsapZiMVwYpxoWsZ1W4J04J2ynITyHdqevC0WDmQSkYt5dkf/lW5b0Q80Qg yRgJQUpUFe+osWxUXbYy51WWzRCG1Zh0/gFNwTtHmsowZ6SpyR8t/Yymgpcl7gQpDbszoCwY t7E2EtkAXWOvVMXve9PBiso7Cne3y3jXr0zhzRCHwl+KH77jTXVBYw3ZoYb8eiDpUxoq/fBO HrG0mniOFA5PqsNDcuSmbUzAUTufDJd6EKcVF5eDpZprNx0YmleRggjyPFoVe/m9gklTMRik +OFYxbD0gZKtCe/44eIORHBKy1Zpaj1LJz+fN4HJZc/J1hE/AVDg6BM4W0eL1ECocS2DEw2D 15wE0D4a+f5+1j5teOeYfCSe6u7uEFLId2X8P/xYBV/xE1h/FBC2+cjis8ctKq1XZl7f3+sS ZehtVJc53dp4Dty2yF/z8S9390/38I7mFFjQ/hmMf3rt8+C2XUKwchqaZoJhzE6cyjZ9SPUz ONKpPMYLGOMNP/KeqdBmyjZca2w/Xf4PtYLRGmVuZHN0cmVhbQ0KZW5kb2JqDQoNCjE0IDAg b2JqDQogIDQ3ODINCmVuZG9iag0KDQoxNSAwIG9iag0KPDwgL0xlbmd0aCAxNiAwIFINCiAg IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlDQo+Pg0Kc3RyZWFtDQp4nM1c26rsuBF9P3D+oZ8Ds6Or LzAEuu3uPE9yIB+QG4QkkLzM70eSraolVdntPTmBEMjM9O6WpbqsqlpVsrn9/PXLv27m9oP5 sLfBuvT/45z//99/vv3hV7d/bn/N//v3X79+eXz7+mXO3xzDePv2p9uvX/Zmze3bX24/Gvub 27e/ff0yfsT05fS3H43bPpk/fP3Eb58MH3P9JJi4fWbNR6gfDttHjpca6w+H+slUvzPWT+bt E8+Pu2+fhI+pfvIwi1n3B87pHPvHT/Myr7r/+ghr7H4mS1+crLPehv1jz+eg7dRPbExfHMzd PPe/OF54Xzbio4Id6xYsHPOZV7H76s8k/p+kRkIwSQqKSqI1bn+8HVm8dUckJjhpL9+jR46T +kj38mb74UTP89Y7b9zDLW7x/nTZYlvDPCeFdev6Is3JuLTXu40upH+flbUsrWWD/3D6YkNd xK9mtTEpabBjEnP6p7Npt89uYbsvjUv+8R9fv5ikp5/3v/3ut+m/bz/Y2z9u05DOnv7t77ff q6d0bk7C03b2RtGbeMbsYp2mpWM9q/WPH6ToV7XcyF5TjYG9Zkle8mKTcIEtZ7Jz79P2JZzs Xh9i+cGG3G7g/dQv0vJuTl6wsIc5ttrsHuB6Az2ubuBUZsOQNtzKLMReZsnAnuQvrnHO3qbF 1hOC1I3MLFyJCt46M/lITllPkQz6mSBjzPZXf+YtnD6Zp61/sLTcs8fFutWqnrxe+mmy+CTd ui4cmUBnAjQsPxntfkZnAHX/ZxqysXqDIz9d3DlcJIEc/NRY83JrEuVur46V4p5mkSFntXM9 rwWPWQVST1VcUXxnZCVb02OIdmZjBQJkgEtuNpJ8I4vRGHo4qFcPHMlonXnQkXiVhJsvNrEU wugXQ/L7lY3dQST06U+8FFtDCXL8hyo2myNKMuW0AVN/5wFEnJBqMhvakuV1RKAEWKM42+yN saVqALQyGE0ee2SpMqyu4UIWOIiW7Nw7l521LgaRfZMIYQhrTiKIml2kZQdWDaFnBgdpsvf6 TVaUc0nsDnTIqOzqbtlwBTrlx7832zhnQOhCqmOTTTZFwn0pj4jZLsHC3UkWxUkdo1MfsLLI Mlo550IBJ1MfGyIkPRldyVYDqowx68z0slRdkrkbMtg7slfP+OdycnhPBkDujxBuWGOgW/BF Swsl+H0VlLW0DCH2S0TXKSc0kczOwZcVyDArO5GFVUTUBgs1DEL11LSeDzmyFPBnnXJubcfI rg3WKxUbqzXjT69kRHGcRUaUd5TAcUR49IFsP8c3s2Z1bpF1txeDsDDntMVx+u5AqG7M2JZS yBRozBWfiflY3RZH8GvPbimzoqFPLNhkJ45rphjCyFYGCC4WfSRvKaUMuej4C6CpcXtS7St9 e6l2auNJOpT9qMS7h8g1s9rKH1fan4M/tf4MEMw4Jx9bP/FZ5673uiwMTlKH5mHCfnPQqI+y UHLKjE/P3HyKE3Q0AwBekm94pmM0rWkZPQTgaq6JIG0wJhGZ9IPIMfjUQkOP6VpRUd0BUiQC E/yewOgtxlaBQSKdKvJkRdWGZoyyW26zCvsskN2rL4fqzZj6HHml74L6SgSHb48oZSch+Snk KwKEexZdR3afBNsnhnGoMnJJgzyAEwlNhEoiYLK2bmZEapjZTlKBmyQVxQOykeSkDTIHOnsq lDNS1oLJgWsJpoZPRVvPit9NyYJFmAY8WPFp32sjhaAq/tSWfRCJtV/qxjhv4ESJwCsZ3Ssf NsH7oEVfI4GXtTBjQjtwuY210JjU9iL7YuuJMQ5CSArLxcAKwfTI9v0Y1ro1OvajHsAqBwAv CA64Lgeag5rRs32mE8fxvW7CHGspzoUeFQSkhpf45EopqC3ONor1WS8VruJIqIuIVsQdTsip 2N4gcmJACeXJcs5EmRBW/6n/TQCIa1ESRuqqpspe6yr/CloKRyjGEaxuPcJ3+NjkBxfL4Av2 MBolL0Jb5kfYSjJjrbmUinYsmVitNe0ZMTvklDvbNhVwM0azanmNZSfkqb6Met4yTLFRjg1Q fhTkpe1zhbQdFpJ3KAOIwmO6zhLPPhzu2b5kaYgpI9c+TBLS93IBu5EQhLWexLOlyy8SBSDQ s9vDUEjEO7AqUA5nDHxA/gYEk9OqMY9VbRMsrODtu4oOg4dh7GTiTYkCrG7Q1NNZR+kyqvBC dhXi3GdXVBqPvJMRQsMA5FT7bEgJS6ZtlN8kNaYaO5lGTZ8aPlNJ73VSqBE7CH1syoEJ9SHr 2WrjlEbD91OqopBUOe3fcgCo3oDc2X1S/k7nkYAhMliPT02u1xclUg+vUvKFjCBbmU/k93AG OJaRCaqhpCFySGhELaCe6SR93BRA5kgVWeCE/NQgwyi7DwK20jkzvbaS3UEeNGRbhQQhXKnz jK+E7MCwLkiiurrg5ApyDyRKPHRFAcKf0iNCuHITVveyN1gKAuYIk8cg84oJYTorp7FaQsiw ygX3tiHSLO2T9s72vTk7VEsA2CsZ8ntg0qktWMR2SygeXcKlikrLxlQ7pVDN8HAXKWXm5lKR ES/wJcEPH31vsTQxuD3T2paSaqfNUWoGRT76IjttXRjsgQ4NHGAoZQs/C4g2RpjYmTF92+GW R4VazvuQjehk8/nrF80hmXwP73tLgT0BA0juFPTfd7rhKBLZAJ9pLJEBDa0wnvQwMLE+5TrJ MsixuKW/e3rFIai5BQ0hHEuOHByzRnqZVHoBpH3nwc1UlqIGZsqKuNdkmE/SFjn1FxcFBdq3 Aj8jDgkR2aw0doX8H0Nr8f/N35X0gztALfkmA3fhMdIitHWDeepGA0Im4Cag7RiuGwc7NC3w MC9a1DhCIvPoyvsA9Tph4q3wSXcRbgLUFQqYcDTE8Nzmf87yNlfAAWwHgMLwAAjY8GkB7EKT EyB41/AO/Z4yGF+wVxtEQ763V10MjyQ6zuLfOdu4NYc0LqmdSQhscS+wfmBxNVBt0l1IUpYt RSatMP1WdjOlzNEg/RQM8sWy6pusbGe21mNa/8I2fFNbqYFyBYL7cDhDb6iyK2ODVM/CD/Pq R+YetdxDc520kSaXAsjl0Izulz+lA4KUoF/1yWGFYPIzvyfaMquH2K8kJW/rJVKwj7KlBJRf E+H5Y5G5F90o5MfBmky148BBnwxglWLdaXwvNhs5b3AGSZUIaZSsD0uLiKKD7zLX4qb7ok1z 6Vlc05J5Qa4kJxcC93EaX9MOXSCDSCyMEQuPVkFdk08OXXVoQAoCNtsyeHHTvbqQb/spI9C3 /5aHyyyXJLKUGbMXgDvXuF1sBmEKR2htHf0XowawtFxVo0KbHsRpSapQajrZseiK2Bov2jQJ Jv0sDNEFLqpklOjzaokJfh+M4LR/xni58XxcEdCGBJAd8l5lHMJBeIUScNuWVrNcRJ5tYewE nRrwMMuCcSxNbt4DdCtOgUNSlle6yjrDmqtnLFBPeZIcqraARWnzcTwRIYxMQtZTn2EzlbGi oX5CkbaMK0IQbkbpRtWJm9GoEbslGoMik90j7i28y0ePWNVmn00wVhnVpMQEkw9I64TLAERD z9+fI0ZRemkLioW3IuGC9cdJzgQrBHMTdQfFPLCFBQMKMOhe8gxlNvhkTqIGoNM5iST3vXsI s0N3afO5TIOKx5/yHpZNi0kZraqQZd5xAH/y8Eg7nCG9f22kMrVSOYwGTZ6MJctR3PVLpVVT lAYSNXO3bOHc0XJ9Jm+gRd+gIRmGw1VhzDcZK4TpGWQLkcDsk6KE5J6zrdIKukBY+5AHQDoT J0wkjQ8NdzU09TDI+30noYCGsUJ1ybEXBR0IIlmkizZt+iwhbbqUk9m5VhmiUw5znZSSkptf 6ZRri3tTdr0YTrVJrmsfAWqjGsa7RqjWOIndpz2rJKGqrY/h8GdbIfbN8ISpeaxlfS87N3uR z3o58A8ZEOr+mJJXwogYZPRykHHqv6Pgn81hLcUebooCFvEgZjjZpDIvPVkY1ke28ZGq/iun 2e7tuJVtFscKZRIkbyTcudcCpa2gUqkHwZTGyaQyTLXBqTCXgLEszv2jGF06taLRysHSq1Ob 3HzgLvbWTcOc1jdjbUhaQmAUkagkDANk1yR+GTGZJa1/i2fNykK5CD5fpf4/m0DFypZbWQH3 h8dKRUwHqRzsoFIKJfXWeOCjWxB9uu5OuOBLVcEhES3tQ7FeJVjriVY2czmfKxJ3TFPop5cG RN1gZAC+PsSw5ZOt8QfD0sAw/JZKPNFSPfLZNGpDN3JqSUkUSNVt3RroMQBBJ4eFjjquV5sL 6q09dj0cJ9KG6p8Mn2e30PJYCBTGo8IjEtR3Q9e+kUTTbVCJmxYKTonafSAUxmc5/ygtiB0/ 6OlQFFh3xYID5TxwcWXrMNHe/YkqOjDppqJU7BIdaM0albvHoqLMoyHdxUzmq8rEKo1AEFIM zbSE5VPwpS0YGDzuGyizXQ1z5oDiv6sTGjJTLw7suUDB3pXCVzRlG/RwFGKDK2lMLnY6zCul 2wnx6GjiANpigyg0r1yu2rkdLgaPr+DmTivY2UnR/Orw9u0M03Z7MweLC/7iJ3FppaMNjcKB HBKHEOsHmMUbOrqjdafTGfrtapx2m0mlE3Pa5IgTcOApmSnkQIO3l2wrRxjIzy1f5T7ZA7WX rPr0MvB+dY3Stqb7czzr0CChxxl+6SNHWSVDEzBs8qKzcuWjy0AIHXuUMCr8HNxdEt3nKyMZ QclvnByjh9cgNNM5MhO6EkXcIErLz3Bt2kzS+ZCdNjf5ktZRpm2dUIs+y/GS+c/5oFcK8Xwd EXBOgleT4p9f/3qKFsVZbSI4llG5C3HpnutxCxkSNdOWNKJDQ1EK/G9lhE+LniD83g5qmD4Y K+pRlvOCT1ATu0abi07tYEq4YO5Fg9/eTGpYcdegvNKku3/mwymWb+QnJSZ935QQlSy7UHEX R1BlycB61MbFy2h/qikDq5Pd5+gCzC/tHGmlRxbcNo3CNnl+oSx3rQ1GH3/mBEdDfofEd06V ldc+4E2KdiRBH6/WRgMLR6OUIxtfADcnHERgCuS2uSd34c6JM0HcYDeSHTS1Zq3SBFxOYlan ilozAAZP62B/cpY5siE4ZA3Aa9p7DXibAi8we7yk6Chn0lgV7dJ6ZzmQafQ9ZfKYTySHV4g0 w7ch0WOGpu3WRhkJ6q8OWKAg0Dl+4zUG78zQ7OwFZ4K1b2g0AsxnP2XTNKbE9PaDS0gIT0c0 3PaSAkmVNamTclnEfI9uOPAgJ3F067MqI714dwWS/YPRyFcnqE/Spkd3VjQu9FkGUphRBN3m 7sdQXoaSiw/SckDS6PrFpK3kAxaGwccv+Tmk2Rl5oe6tKcn1LvDf6TmSMDmaCuIRRYDDVRlt Ue8fdaOJAywgPfeukFz6lfO7ohBnFZwb94Ei9aVXe81c/4QRTpseUl/UU85XLtbJFy5sV+HU LqT68gBJ6/L4LjdZeEV464Xf386gZp3KGEOKzN6Zi1fac5Ysb7Qejn1axNl3rXT9ZsSFei0p VrAY6lh3bDBYTk+G8w0qczPXMbAPeik6qtnkJa/1o8jY/y+6Vt97fuJwpuBkgvPgrlC+WdTM ASgvnIIUubmkynW8wjLghV1gHrQg1rVAYEQifRy4hcvvpKCRURyj8aPIr8WbJgJ5ekPV4x2j 47kz1dKPulxuDJzj0vtXlgtWXFL9zm2FKN1s18Av9CQJP91cRm3rKyuY0fNjnXSZkQBe7Epf ZvwLsb4tAcdiJuOrkDF9Em++8DFt7+lH+7BpN7UzHiDXn/M2ySv7wQigIUVXXZYrJlrp4C4p wI8pMZgdl5B8kB7A/eIfZjQx/6CeB1+iNVm+b0YfRrY5FMejznNZLsvdXL/J9JdfaPSIh1Cv sDh+rC805DRAzl64OUTWF1X9jkyY2YQLRmmjyOfDGqIbyzuw1vJPOmNkldoHiYg2NuaT07Fo Y6PVBjPkC2jkCQK9JfckRH9f26qPxOnw1uf5VZVFOPQnqGD51Sy8RvK82S9scB5u4y7NOhas V55foiHJjZYD1wem7UFH5teGZWeq9svvF6orwhel4ENHXqbDRRIpZ/DZqPNrbtM/EzhcsEgj L1JVSySjH9gbhNEkaUayTUVK4B9Vvs0EfZUSv0rFTWQVkGkoEz8Jim0YksHzSzphXR1pkhlJ 0jYor4dmxX8fRCrvHlaKwUhq/IyrbqhcpX4YQRox4MQnhSU0J89W7Hqr41/T7vzJ7uyTouqE gDsrMBYk+B+o7705z152HBfWEGmNoB/GKTBotU34xcqLfpsx8dSxg2s3FxCxKLBqngu2UEI+ SW7sfj8iZyHGnYP8VjTsSrQ9msUcheEwkJghaOy+7e9hytqIXvajvAgSPqKXZ+8AzSBz8W3a vIGzd2lnXDl5l3a0+UUByjFC2+D+6fYfyxmEPmVuZHN0cmVhbQ0KZW5kb2JqDQoNCjE2IDAg b2JqDQogIDQ3OTkNCmVuZG9iag0KDQoxNyAwIG9iag0KPDwgL0xlbmd0aCAxOCAwIFINCiAg IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlDQo+Pg0Kc3RyZWFtDQp4nH1Ty2rDQAy8G/wPOhfiStqX DaHgxHbPaQ39gL6gNIXmkt+v3F15k9QphsUeaWekkYxwLItvQFhhReCJ5QzNdB5e4ekGvmJ0 eg7vZbEZy6KZMoMNML7A7UBACOMbrJHuYPwoi1A5SZbYGjkiTWUUMRHxVaOIRRcxwsoq6CPE mSroRa9IrTlBkSYiJsu1EbFVrcgGt9glwUb6SHCPAw5av0oQUuqJ5sSamAzZBJvcx1yOIuQk 0WOLfYpwJk607lTKUtAS6KTNfmKhxN6L/bu/E7EWxYWFkThCTvIUsr1a0WzTSaeX/l6TDPWi JA8G48V61jNk2CBveMtbY/6ljbsldv+y8szKaphyslVEx89LzHTObKmiS486LZeuj30aj+mw I6crZXxeHk9BRtSiZ5JO+4syKBWSC3jelwXKhI8p8nAv37Ai2EM9/Svy9gmPi/44WY2w1Ibh M9kd/ADrHcbwZW5kc3RyZWFtDQplbmRvYmoNCg0KMTggMCBvYmoNCiAgMzUyDQplbmRvYmoN Cg0KMTkgMCBvYmoNCjw8IC9MZW5ndGggMjAgMCBSDQogICAvRmlsdGVyIC9GbGF0ZURlY29k ZQ0KPj4NCnN0cmVhbQ0KeJztW8uOLLcN3V9g/qHXBjyRKKkegGGgq7s6aycXyAckcYDADhBv /PshpeKjSupqzeRmFwcYxzWlR4mHh4ekxl1+f/vy74u7fO/e/WXwgD/HmX7+9vfLX767/Kv8 lv732z/evixf377M9OYYx8vXv13+8PAX7y5ff7784PyPl6//fPsyvid8GX/3g4PyZH4P/CSU J8P7zE+iS+WZd++RHw7lEehUIw8c+MnE74z8ZC5Pgi53LU/i+8RPFndz923BGb9je7y6h3vw /nkJ7/z2TV5enDz44OP2OOh3yHb4iU/44uCubt1+AzrxNm2yS0U/8ha8+cyVZvHb7Cse/0+1 RWJ0eAoNkyTvYFvej3q8vCM5JvOlx/N9tuQ4NZeER3Bl4CTrBR8gOFjgBrcQTqct2HKpzAoy K/CB8ZyQ4Hwm76bmVMG7OxplwwB4BcvE8BGw3H1AXNzFfuFwgLul/f4joscfB3Pc+WT8c4QR EsIdl06M3jAoTgc/IhqubgCPh3rcht82ohv4669vXxyC6fftN3/6I/735Xt/+fUykVvi//vl 8ufmASZPZ9P4jODhtlv4J5zYb9/vgZYDN6IfRDfgWcZhxifIJj9/17AS0McNw/SeDqtEODcv TLhCa2Dw5wNDxM9qrvgCUAMxW3Mg2SL6K1zdBMkNSBJkJXZyC7GQmBIFZDXXVVQC25NRMII8 dqdFaMm4sVGYhAphxP04ngiJjueO/sijhLejw7qbPvX8EH3hKjOG487eQff2gIE4EmQDweuv 14rIFxyAu0Wu3OgPhNFXJFFlxSSzFFbEc55po+wHIekZMsXJ2eNMuB83M20YOg6B+dWc4JWP 9RwOacQVjqx7DHL+FpIcXRLTIy8GcibYHB2iOnodTmaeVQziANwDv4oJSo1QDChL6mFnKga4 C+pixX9PHS57avicn1bDYOnx0nq1Lh+thjV0x2og7sQkiNkre+ggUKiURqU9YOQTnU7esrTg 1ZBEC5k1Vn/1FIs3t2Yvxn/PbP4JTiSHqiTBCHODOiCGNHQeEieFsEKGylXISjVR5ULZ5/D9 wWDWcIusdaLREvnC9tTJa6gNlrCGR2FQOia34M9twjTr7h899gfSZceoQMAPwGY6R7nzn4xH jYFw70F6a8UurLcG3klMMtBAdTWiz/C6WJpOnfGFQV9sNbCRk4Hq0aK11TXGCHAc2w1dTcNc CROyz6Ary7pWdx/3ojp8MojDcHI9BKlM/KtsQE8DH1s8TsfldVJ0GY19yqbWn41uPIQtuw1O dpIJmIE2vfLHoCRVhscovwuMyvATcoKK+8mMQXnIJwCGxNhQelTxfszPQhW6mFJOQZhmOtXK 4VYCFn8xmlckbjscIgV4ctO+cGj4wcQ3nyASReUot51aiJXYOvX+hBIPPuP9rYGhlSocvb+5 Yo/3twb6Gyk1ORkBzKM6QpJOaKEw1lmniFLVQypevcmEqhcbDNHQnLJBpxs8eF0GsohcGzrj 9CGd1LNHjN8LLpjAoVNdBTe1JH9OexytMYoP5P1ohTvTXhrPCgWoAYliKnop83FdBYyIjkxn hkaqmkJgQjnJLMItb/bmtUwxiLfgyb/IpQoI07EIgLKcgvi1zKyJSJg1pQlHUCgDGtqvQJt1 AeGBRa9RNpXWwSSZpMQa1/pltFArJuSSjZIl+AZo5PBo8ocJqUqkBQJiUZPQUDUnf0G1JRQ+ AT+PJ5uMHbZvDhwEwQQbCd2mzLYA7LYlX01L3GUBxgXmEYv9kHNzx1SpK78C/kMgspHPOlBJ 2NjrhfKvWftRXcj3cTN++aeUWWvgi1rUxs2tFbu4uTEQZsacVknRuiK0fDihHCotHAeXRMF5 UglqP0yEbQrNU2nRoZVM4nst8FFplGlsPnGG5pSVPoNVDkAhmUlTsKqgJERJxDGJ23lNwKEu wPjv5TC0zIvj7rVPTsWPK/pt7d8DuiJVVXPmtC3gbD1PhhzFbLT6MO+0oYAYCOfIwuM4yq1Y KTc8vaq2OOZ6Aeojw3DjiVGLPJbnRk4urK5kcpR7d4PjY1nBVLNMgueVKk4GZIaAWxdDxFz8 /ARDtAaGF+lm3nZzxR6GaA10ID5oEu/R5E9SAZeyxEnh0FCGlOxMyVDsXPVu9oSCbqnNAyKU XHjLhMH+HARFQhfjLkjZSh3Ay0qdYQRBRtUEYulqpR275WzTz7rEWaeYR680WL/y8Fp38sLo JrGykbu51aSIkz1FFFeNeFhnaa4qGRefVBdE3PNphpWyrh7sjVMVxevKC6jdRcqaM/iYYyay 22ccszEQXjtmbK/Y5ZiNgf93zP/OMTUbeZ6FfRMf0szMHqzT3FVOMrsRFeFRfkIpgmlN3fZA zsESU6v4sSuznztGzgE+4xitga4nYrUGdjlGY+D/SNNyOs3VA1PFaaos27LS7MiUQgyiTIz4 RsotBErUvZTpwZQkI3vMbKpqYUS4bT0Q2AnIBLFkrdL/NQX1Ox4Mf9BZeeypcMvIfGiQaDSA dtZZiG24ohYefYB2rootfYBuDAwvBhZAt1bsAnRjoF+910wBTFPxUKHqIXrq7IBmMc8tprQl cYQLSoypodGbkSd3ky0l4yqUEAlgZJ8LFWbEW4wEQgaOlE0+ZIemVe2lS6DY87MC3JYbu7Qa e4B/gX/x3Lv4nuxZbv3ojo5Lu5FZxO8qyBJuveWeXU8g2Yo7yZ0Fw0WPwAoTZcsHZN0roky5 UGjIC0xe+hGnC8NYJ4U9TtcaWF3xqN2Ovq65Zo/btQY2erQdhdtwQ1fVardA9eEr8vajre6i kDglviosNZuZDif1vBSY3pSsc1r5zUVtvabBL4bcDZ5lo6ZSfK0QFLqyk0VcLWpiQ67Lq6QG uYiA8qWeqQUiGG2TajK8IHWdR3X+UmSZjIAOc3Wp5GmbnEnFhO1K7OXetvQXTPOz6uoV+Ugd 7THcqs+C0b9wgYLkNNQXQCokN9rwo0eh2egpNtjrsTuQycKn0izaBpDbdw417d2IAdNEJADn kjBHuzBZldWyQimckwzKinl1Cx7i4q5s22Sc0NR2u26XhFA37vs4rDGQmok9HNZas4vDGgM/ x2Hch91dysqBMB/xktlgc9+obOavuZkgvXVQ2+XyJGPLdutMyNUKaLE09du2iUx34diUo4tu g+HQk4Jwm9yiECuYXWWtE0jEiOh2huIK2ALrZXOjZkESo7wtZa10R3RSARgdQ67zgr1n40NP SoepG57AIXbP6Id1BQApMe2I0b/ocnbgob43Tf5bL90qDYk/W/c1DVMtnZv4p+68aEUjDCfG PTZtTnv1fb7v3OfKQ62BqF9e3S/Lvt9as8v3GwOdXAF7HvDV000RQ7qetglZyFXwLkHriQcj GWQHEogag6BEMc7jteD0QedB6RvxBb4/6RTo1FYYtbwEeomM+pBO05LZfAZHJQZx2NHfPirp XZnMVIJhiPYggzLTqfVgmiv1yYdqPaVR29uHtC5gw5AqMukCdmsgAvvVdTICdnPNHmC3BmI2 NB5lRp3eqW553sip7yfGFLUj91xpB4Qk3Fwsx85LBSOwju1LQ8Jyt5c3JiFI8VsXiegekZG1 srf6Gs1YMGk8rxZjeqfOTRGTC8np/S44s3PZKiX6iXVJkEiyvxrmbU033yippGUw3X/jvnmi 1lUqj4kIqwhbozIhZN88IRrqAVmKNWNX1QFzXcD434P60awg7BVyc919sEwKZMa9hA5WzTZ6 vN4s/BzMT/QN5g2lhkGXG6+5Ec3K2P6BUx91BKiSiz7qaAykC3k91NFas4s6GgO/mR4OYRaT yH2ZjnvZJZXm9M5ca8gGcu5GqUspC+hNq5Q+stn6dtsIzq3m766aESXp2ybUm7ezLJ51jKUK uRYHE+8xnP4t2mLloImaT26LssxHsuIjmPYa5GbuET9P+auc27SgpArxomNRwAX13yHht692 /zvpvSkoplkwV0C3bMOKiFn35463DYNeU3fSNnh+UbJHztfl2/3N7Argz+vLjeuOq1xyMdEM yj28xrU5d0sxh08+DhMZJm1dyE7Tob7iD7Y21jcFG9GcXAkRpDWKQtufJ9Cf60isN/FHqqgC vLU6hFqfTNr2sR3cD/R9enDqXUW7bqD7Nip4YcpC3R0TrskEtJcJ17aL/wBgBTGDZW5kc3Ry ZWFtDQplbmRvYmoNCg0KMjAgMCBvYmoNCiAgMzExMQ0KZW5kb2JqDQoNCjIxIDAgb2JqDQo8 PCAvTGVuZ3RoIDIyIDAgUg0KICAgL0ZpbHRlciAvRmxhdGVEZWNvZGUNCj4+DQpzdHJlYW0N CnicdVLLasMwELwb/A97LsTdkWTJhlBIYrvntIZ+QF9QmkJzye93jbRWkjoYhD27mpmdNdOp LH6JacUVyMPIGdrpPL7Tyx39xOr0HD/LYjuWRTt1BhdofKP7AQSm8YPWjAcav8oiVLU0S23N JiJtZRWxEfFVq4jjOmLgyinoI2QyVdCLXpFGe4IibURslttExFWNIlvecZcEW5kjwT0PPKh/ lQAjzYS5sYGBhUuwzXPMdhRBLY2eN9ynisnEibY+l3IIagFnY/YTCxJ7L/Hv/2/EOZYUFlZS g02SR8jxqqM5prNJr/O9JRmaRUkzWI4Xm1nPwhrLZmt2ZmftAi0u/y0HOa4m6ZQUt5czhWg7 7lDr4q3PK/YIEuSGvYH46a9sIBnJBl4PZcGyh1OqPD3KN61AB2qmP1revul5MZwakIaFMSQJ XAjv6Q8kjrU8ZW5kc3RyZWFtDQplbmRvYmoNCg0KMjIgMCBvYmoNCiAgMzMyDQplbmRvYmoN Cg0KMjMgMCBvYmoNCjw8IC9MZW5ndGggMjQgMCBSDQogICAvRmlsdGVyIC9GbGF0ZURlY29k ZQ0KPj4NCnN0cmVhbQ0KeJztW1uL7MYRfl/Y/6BngyddfZXABObqZycH8gPiOBDiQPziv+9q qesidc2szskOXpPDwl5amuq6fvV1SeuGX19f/ju44Vt3gCGDx+9lqt9/+cfwt2+G/7y+uMOY 3DQO25+//PP1ZXJDDv4wDTH4AWD52E/fLBc8HEbzArhDti6kaeILenkcD9G8v5SDNy/kjH9b F1K0lU0x2MomNM9WFs2ztULzgnUhonmmVnE0t44l2zrFnPiCXkbjTFUjGmeqikt3VPVwR1Vw 1nKYRlvVMBZbp4DGJfMCGmfqFNA8M9oh2vcH3/soeHdHUTfZino0zVTUo2nmxh5NMxX12RaU 7uSej/5QzAsB7uiE5pmR9mieqROgeYafYDQ3hpIMVSt+1K+KCKdP9caKIrEMn34c/nSDAXPm 00/Ddw7+PHz61+tLQd1dvfad88vKhI5sK2FZyVimbSW6tKxBta0t5mXJi6hCH8y0MtI9hVam ZSXIdsdlJaJVbeXkzu7SNqz12pav7uZupD9tAQ6aTcA3juAhQGzLQexgdWgFEt6Y3dFd2xUv gpvYpLeKUEgFUGZeqxRo0q/o/h/6iMTo0AtGSBCsfNseiriXNGI3KUu3/r23ZRnNLf0tuOWD I+8XIPjg/Mmf/TmEh2Ln3MpTrZhZrme5nlxGUn2mFUoA/1g2uPGOcAeu4NcFXT25E2ABOA8n 16KM3YYSirSvjamtxK0WlPUqMY9dYk5upPvAy3LssvyyNdvdwFFsILEeqPyFCgDE9WgRdEXY ycTcA19YZpDcA8zijCVzwt8LjPxReCQ/VfPwoy2bfZQ099XNnJCwcdnDpCjToUu24qPyxiRw ccaMPmLaEZAkudThhgd35SpRReoobohM7OaRalRqd9EBM6a5309ye/CTEawVhsAO4Q1LMPSh bRK9eI/8rMBIKR8kcQr65cjaMCZe6V72SMR0cnXDJrkoHb1WXmXqjQxNag06UMWPO8J3xM/7 YQml9wZ66NgJjBCwaI+UiD7KzWeVHVncn/ETN8E8laA6BFE2KGIdypFSREex8x4mb64sY528 0gSilXHkGAx9JJMlYsgEbnyr4PqcJSPbBQdVpyI86USZfdG5SIQoLHGoyxFhoOnjHcdK3Dwy DOCNGcRtSo5Hf56sRMS7GR2CXYhsKyriQS759KgVV1VAcELFb9V0JXM2Oo4q5kaaX5SK6ta2 xJFsCrN+QSw/43a9Q2qKstbKIXOUDb0bWFTC4HalZaoc9x3TcsZdYE+oqrpumdjKBFgZYENp 9Jx5CqWxMxkobQTpXg50HBUpQKT9NWhg9lduwMZxcrkwozO1EARLuUT3jx0ZUJ6o6HLtMrxF uc+riqCoyxWIaDjNFtNKnAD3Qkb7mnsfRC0dU8b+r0ilkIO8Iy3DFivjMRXqfBq+LmAgw0iR WDF5DgT7ipl5US6KpyjwRrYgeGZ/jtL0xHsd1GDbnLs1MMuWLTFJwNwgJiJ+JAeT/eyQ1/PN kV2YSjzvcCJGbetECZI0BoeczEi+PB+JhBXFt9IIza4M2sVTI7ueL5INCsEmsjeIHnZ5VT26 iqEeTfHp6FGQ3tTTo3BmCxT5eh96FFYOVeWXxZCuZZODHsYTPJ1b5HzXn4FHoz2NsjpqsvnZ d947WPlsq3erZGFuejc/LunhjghfBSvE1UJAT+K52/sQgwsO+TrUvo7FBpW9z+eOo8u1+VU5 wc0n1TlPqjcBz5q1Tc99fI6H4N9utzrojhUfya2GemGquFfLMKD76s942ufItRtfX/Y68i01 0Y9pch3D5bOK1NKlY4lHhScCM3SsVqe0OkqhG7OiSAQ4WMvcZMbFHx1zqg4iDRjcXXfycNIT eZ80c5OL8LSghj+ZTC2SMhgjBZSKiBck71nOUF4GZjU2dGRVn2EiqXRepin+xNqz8lAXFW1Q PTAJQHqFQbe3yySVqWOKH6hMLPV0meDv2Px6xPG5frn6/SLl0SZV+Fs4wamyUJgk/ntQJeVq wMd1l6GeuKt3EzpPpX/N9iW7dTIvueuOtRDhGJC47GEpKVY2t+UpiEkXrgJmRHruoI9j0BFY vHFFgxVDXnM8mER8pDoQcNIeaJIUc2ou4cOcnDYXHzEHEPSz6OqxhwTkThTPDSTcn2wLjLFF DBFrTIhends3mCCkaVeah/ik5nkveaF6xtqW6OeaX1Aj2J/INbcolTXKkgvJY9VBmOR7Unxu a12Kq5mB7yYGkmTLzKCx65YdZdX9OJejGp1tY3CHfn4uccYzNLoJeQK0posHdNHlwZhmJxo4 2AWbjyXVUbwlKS6pEWU64JOeCcpkerznYFpeBDG9UCf5GtY6WoyIo7HOYRFT3fq4UOTcTNxF CgOhdyY6GBHiB+rIysdE0S+MyOLqVOmGTYrJcROrTqocTEbCG54xg3dVtb25HCdnuDUwCkKW AdHDdNizVy5Wa/gj1g1cZm49Vw7XDWfeCSy6Zs2Jlkri1sXn6z3exFzYA9Vvl5Yl6Wtp3S2t +gx2bkrz4KTGb2epxdQdqJ5Washe+rJ+bqmdyd9bSsNPhNpARg1Txju3+mgUZH7wgOzZjSzO b1q9S7UZkr5W2/tXm3NGs3lOtYVSHfF/VG0foP2FXDoS/mUFaUn6WpDvXpAhZcPNTypIPE+a GCvzBvVqSTXu1gVofq1hXZXqoYldleLW+gyRa5nt2tSYoMKN6pkHkP9LNVMOuVIN5qctKifF YFDmKos46/Z4G/ZN3HeUoiEp1rd+PL1OR/aHtHmsyvGTB170+AqL67rQfsli8neZOMn74fY8 WqjEQsGU2niXb5zrWsPegcpD6TCfhy3xddpGZIi3mqSO+om9c+Zgeyk3olPyelLklJIeoWb+ 6lAVKy2zHR+njduT4fSe1WXY9xbJXlTy47SrjXxhfCzxNaGlfZIYlVd/pAj1TCDzhqfPM6Pn ATtDWMZdTzLehh9LUm1RGoCIHZHYzZu38zR6j9KpH5N/odKGpPfATHpDccZOpA06QcK0hsZd Fs/953mVZoj/UEj4wJ2tFanR/++LiSE8s2dZ4j8YJr5XrD4COs7/pfAuQGNIehY6OmcCsWbw Xh6p9QfUSnBnRrtjMyjWWDrIu27q0OboFb1Rv1OvR8pyRmgv7/JJ+BFrhO20qR82cQGoF726 V/QwDOGCCJ74nQZ1jM/zG5PH+R2SQK/UsRrQFBEF/v5z/WfCPPzarvzle/x7+BaGn4exPp3H 3/49/NV0bJrf3TDMqE/dVhv/MPwGsUuVhGVuZHN0cmVhbQ0KZW5kb2JqDQoNCjI0IDAgb2Jq DQogIDI0NDANCmVuZG9iag0KDQoyNSAwIG9iag0KPDwgL0xlbmd0aCAyNiAwIFINCiAgIC9G aWx0ZXIgL0ZsYXRlRGVjb2RlDQo+Pg0Kc3RyZWFtDQp4nM1c247cuBF9N+B/6OcFdkIWSVEC FgG6p7vznMRAPiDJBgiyAbIv+/spUqqLyGq2Zna8axge25RE1eXUlSW70y+fP/3v5E7fuxd/ mjzgz7yUnz//8/S3707//fzJvczJLfOp/fPnf33+tLhTmpYXOMUAJ+/Xx378br2QZnM5Ti+L eSGkl2xegPgymRd8eInmBQd8QS3HxdukxtmZy9NskxpTtkmNyJxJakTmTFIjMmfThMx584Lz NlVhQdWYF/JiUxWQwamXU0D2TGIDsmcSG5A9k9gA4QGxCDWbWGTPJBaQPZMqQPaCeQHZM6mC ZGoPYrJpghD5gl5G5mxSPTwgFZkzSfWLs0n12RSfn7JNqk8PEOiRuWReQOZsmpA9U9ve98vF h5RfxStcvpTbiieJ+fTlH6c/3P3Ju9OXH08/OP/H05d/f/6UkRZXrv3gYF0pOtxWwrpS/MS2 El1a13zBwLY4rUsgW2V6cKKVme7JtLKsK0Fed15Xioq3lYt7ddfthQvysS3f3N3diX56hXd+ 48nzjbMHH3zcloPwweTQikcf5id3drftCsjG27ZJvyr6TCR4xeat7OK33W8o/j/3GonRoRQM lSTvYHu9zyJeoojFpDht5fvolXk2Xwn34NYHZ35f8OgrHFzgFV5DGG67YgvFXXcF3hVIYLQn zDDeybvZ3Mp5l/HXFcW6uItHsDtwmz4TQSkkwgKDi9BN/8ZAhL9nhlJqUCi6JrzNstmdxK3W ri2LvtmJzEkQD46xHATiN8RMYiCRkv252a17nwPIrcEiKsU86Q1+RgGyGY00Oc0l8DcIyRC9 MyRXLevcOQN/RvhsDsFHkTOBWGidAJXuXdjkBiITNK0rAG0OXqSChJCX8LQR0idvZLH2vmTG bYkN3ypN6L/6G1PPfgSfLGLwmZAQnHgORw5mVu4Ob53YSsXtuFeUGi8LY/eWXDi38OldKHGd eZ9KZOxAVuV2b3hf9aoJgkWe2O5OwtDqIO/4gon2ClFxTCrmR85EsfhoUovAAjzKif2ZAoFE lYEAKjgPADsXJDbetkdIh9FKHPr54nm2a+KXq/QIK8oApl3MUbHhugsZ4t6rXGWr/NKCeK8E dyVbBgEQUjgVRyKvAB0XGfhByLmj7IhKL+QHd8GsKWpzCdB7ORXySEpkrkJSZxdFZkgPRjCD hxVZTOpORBObPehlTmI00lGe0DlU0/wl5ekdAvMX2zylvwcpT8KuV37g5hpD8vfeKvauBf2d cEN7DtE9Fdr26C5CbhO8InRtvSB+w0jhxgnF+uIEuMPReLFXu2/VfmbhRaUy7UT3uiRLkkCH vik2UfOGge/Ct+oEzvWhq/hIhH9vKkhEKI6PHZDSUMaY68JYS2tyM2Hat0krtln4owdh2j8o 3ot0KL6wij0SiJxA2nmRFQcKBiGrIavsREFmFij5pO3surdXFTygiQQopDOahwOMCBSzglOU k++TBM6n1QUhZigQqoRc4j10oUVHfNQ9ZwsKPWyT2uuZvtxre5EwfiMHM7Lq6mCd5c7Oe38B YZAmIe66SkeCsWFMYaHlMRqh/HwPGuXBp2gkT6nQKBxyHmIFWeVZETiKUeUzJZGadj5DikNt w+zGGQebcyBcFhiusONMRuXjU19cbuFWfAkkUVtXYFY4ZBXflmc4iZRliSln8epZxIfZBoNX o48NWvZMrt3ToPRGDEnm1SZ3JWPBPCcjju+M4mGqjVnIwlrh3LkPpTdqHnihKOQjwPSlT9EA k4s55Q1TUURJl4jNoLKiKyXeY+txxc28x3rkwd/EeqjsxgwvD0C0emdWz2MUc8mhfPdqNEzr NIIRe95pxypWIZmtSGeE4R5uNQRN1eVtIo7J6vqoTGDG2tLw/H2IiESRMvUArrr9mUx2e8rJ 7lHVviooepVVPPEEqpIFb+j3aAkyPU/TUvZdfhjPbI3M97ULwjeSDbvXvrEXwysl0azTLrkA 7iQSXwGf8xO3u5o8MWD5L+nWNCg/Sr1OVIHK5RRZc0tWR9TERK0eTeo3YGd8iZE2fNywLNUZ wy6LlqKqDlTWfaM906DI/eo8Y0F5ESwySGNqNytBUPUXekEkAfJ9l7vPDP54oVt5hSOzdCDj gbInTa5PRPo285M6pkje2gnTKNFk25WTrMCdETMLC0Q0RBbAyEWNFQVJJzSoSM9CmRqh7Mj2 EkzmIi2LbnTFmP4AoH25gJlJjXau9h7ObipcYS6OBuYzgJsK0MHX++pKqJ4Pbt7hOzYzDG2D xW/EaCL+/lM5n5xOv2zX/vIn/Pfpe3/6CW/LqGv8639OfzV1EHLJXy1mDsEgdkH/fSDo9nkD BCgsghsFG8z7SdOqM/FM1amUKT1171M0FHK35j5c8G+vKP9bfR4TI7N6YHUzIQNlgytSHyk7 zabSDqk65D55ep+yjZ3eoG689ey9hIRHqoszhjXrXXvlUaiRADqRl5a8CzWHv+FKET9IDijh SponVdnrGQ7+LWywC5x4bwscJxa/EIK2W1Ve06bfDAnF4MgDTMUsRqBwjwR1CBaYIHwQLIyd 3ggLjOnPYZEeUH0QFoP+fwecAhqK4wym6+oQuurwKWgKTDjYydGpxg2o6g4jnuqqzEpYqkKX BlRN8h9GGyW1EdaWkq+MsBaLR7akH2N8PVD7JdcfJnwD6XTs1Kybyvpo0TivesZ4rV3j0veZ 43nQilPpYJ8pc9NU1eYLNca4DspmI2w+RvY6yjHDoTSR1pJqs8nqrNuHv9GdY5XEIm+LubFK VC5SMlcROJe5fMzRnFwEPgAsSQJkqZNLUuEu6LQYbos06qyEn6KP91L2Dd/GNUJ+E2Dz22Qj cN0xs7ed0vImn6ZCJLjb7ug1MKHBo0u9YpIVwh1YyIy8yG9n1snzP+y6dNq8kDHlrmemRlyO drN3rLjDTqJ6x5iWQ8H4qGmIeHInnsdx0Eq+9zyK/8mjbuTjgz0iYtSoD/s2vVP7SqItgwxs Us8kHctoQoxzN62BcYjb1J3zZXxRb0OMzzjVpXsONhrdHDgCSvLB7Vd2KmfzKFdI4mDJQ1ex ZYNJepppQUqmmPZ5VsmtJbvmSmmtkV5LjVQGotaKqrT4yol3bL0zpSnyylGSkqZxlRRrv9bU 8NMkZYI6wJitJOWrgsMZJ9ghr/MQz4iea6iGyWpUvodoGQlTZydTtcZ6bON50C8oX9OdWxZf Xyf6toC1603XPq4Mz8TDoXtlFqNHd6p70FFSJqnmFnhcSDWO33Au9NyUYonVFtG/US2bXZLd 6QLXKvxajgApvIZEwxvqcIrclAoNpVNiDE0l3LhMnsRuc3ov/rziTe1oI/sCJbNRzyQUPIy8 QX4ke+mdcshxx0zNxW8mdBw44R3yEpbWaXzzdtST/F4r8qVNWw+yz2RNUYXbYWdobQCW9t/2 oCS6tpWs53Cxnq7hL4yTorlJH6Ju75R8Mg1NpIhjZCB1Jm5kIKmcRfRCtcyD9Hs0q10hNvu+ XfA+g3F9ZHIYIZ0xMbgde5axnu2hoM44U8jcTZYsqWc5ztYJ6a3qjoeuJIldygRgGST27nmu sQonu49KROmLAxFOQ6gajrxLFfk4JKu5ELZ1yUUNRyVtMRkz3Nn6fNzWQ/2KyxIP8LmzdD9a 69d9uQ9u/IG3XEyT8FJ6xB5B+qAswH4A0xqrLelyB7VytB5a905uQUtulEfnJ0dLsX50ZcAz HoyTIS0flUe/CdvU4VNozf1EZxnbeMbGUhAWakzYs4GJC30ssJvK7xsk0riUuBKkhUPoSpGi Bpfqd//qEjEO6nuQBFwueyno+s5HmuEVeXRo0/d4hYu/+xt5vbHiQu6zpXOQaZHQtwaEDnzh Xjm7RmRLpLRjo1LWEeWspML0KwhN+/BRG1/78HGoYESv0E1PvYEMSgOlqdSUhFzp14Kwi0fP K8SVShe+oZ7HG4arDgEBFuicTbhhiYEJUJJKhvcNGEaIhEV6KXdFF+sMHRnbtbiZiDUOa0P8 D2BCxfdz0CmFlkxpSxOG0NCOeAw1CXP55uCj8ZaNkdiazaCujtrkSl7uZ67fCTQayd7ldf1E ttGvPd45gbQY5P6eRzPqfKB6qO0lo0Ooo/6qRjSIfT7+gfxSlj7p07R9lj43ZO+ydH5/CvyV Hp9aqVEytqKZs1k1OHbnCK2+OOBjkcazllOSg1kNhH5UthhfPciRYWY1hilDTlHNtb3hqxeN B8ostQjHsj0GCeg/X3yDSyE7VQoXK92Hr4PRClz4NT7uQwmqRwZ+6T/Y+ZpO99ApnZ+9cYb5 VcF46CTLT4udES3yjSgIhq2z/A3ockr/Smf56hsbCOR+OIB25d2Bo/yjJ6Mrb8k8O/rdZxiu XdUTjOZFe1Z8DGaxpG5dyKgdLEkO5EuHOKuDU7IFOdTuXbjcxQlaW9/JF+VdrO8/RA4KzrxY uzJHuK3TpV/e1RXlKk5/ump86Y32KeOMJJgno08ZTNLW7men6NIQaSNzf/zbV43u3HxCnlQY t778mzA4+frUrqO6yYbL7e6TZGqm1O9yL9vn0bEDUE/h/oG4QP1mGEP4IsnUJBlWmcNtBMtz USzSUQc1lrbVqFECDh2SpZr3HDGsPqbW+7+L/7x2GffQjUgWdmCeyPtox9CvzhZ51Ulq2Dqq 7fsG0jq5bbLj9+zEPviaH021X78V2IYrOobEX1FJ5wHtqaQl52pNgT7y6KArBAygO5dgMEBu 8vV/8unZCB72/+fFn0//BxUnVkJlbmRzdHJlYW0NCmVuZG9iag0KDQoyNiAwIG9iag0KICAz NTUyDQplbmRvYmoNCg0KMjggMCBvYmoNCjw8IC9MZW5ndGggMjkgMCBSDQogICAvRmlsdGVy IC9GbGF0ZURlY29kZQ0KICAgL0xlbmd0aDEgMzU3NDgNCj4+DQpzdHJlYW0NCnic1Lx5fBRV Fj967629urq7el/TqU6nO0sHCCQhaYimkH0HWQO0BNlBZEdAkKBsBlR0BMENEBRQkQABw+KI yLgzMIMbOAozA4rORJkZZBwh3e/c6oA4v3nv8/v3pbvq3rpVXcu5Z/mepTJn1tzxSEG1iEH6 2GljZoR/+st7CKGPEML2sfPmaOv+NOcs9M8jxBdPmDFx2rAXCm0IiSpCXP3EexZMmHF+1WqE zEcRukuZNH7MuAND6wSEpsLvUftJMLAz9SBs38PCdu6kaXPm3xF9YRRs58M5J90zfewY3Olv OkLT1sL+A9PGzJ9RSX4Lx97bA7a1e8dMGz/p43YdYXsSQvbAjOmz56xHhWmEapfR/TNmjZ/x 3ILn/bC9DSG5GcYwfOifAl2ebhOG5XhBlGSTYrZYVZvd4XS5PV6fPxDMCmVr4ZxIbjSWl19Q GC9q1bpNcdt2JaVl7csrEh06Vt52e5Xe6Y7OXbp2696jZ6/effr26z9g4J2DBg8ZOmx4Nfr/ yR93CPlg8XPbkY+NIS9C6W9guUTb1OT0JbqftuQ7OLixZUFoB9qFJ6Nd6E10DF+GX+1GB1ED eg95UBf0LFqEnkQrEY9GwMjD6E74cDD+JPalG1AbtAV4aQs6AccOQw+gQ8iNvelv0RK0nDkN v1qOzCgHdUID0HT0CO6TnotGoXPsQ6gc9UH3ohm4Nj08/Wj6ifQ29CI6yLyXbkYm5Edj4XMi /T33efpPqBX8Yh3aiM7hJ6T9SIer1MKRz6FZ6GkmyeL0xPTPcAdhdB/cA4v6ohP4KInD2cej b7AXL2I6w1m2puvTx+GoIEqiSehpdAiX4e4kzI1K902fQG64xnw460a0Fx2ATyN6A53FCnc5 vS19GflQEeoJz9OAfo+PMqnmpakqSmigUgFKwJ7p6LfoXXQKR/BbZDqncO04nVuY/hg5UVs0 BO52O/zya/xv8gB8ljDvsN3SdyAL0OVxSm30O/Rn7MdtcH88lBSQ6eR5ZhYS4Ypt4TMOTQZ6 b4Czf4Xj+ABRyElmK/sKe43PSp1PW2BGYugZ9Bx6C5vhSTU8Gz+IP8V/JZ3JaPIM+QvzJLuT /aMwBp76LjQNPYJeQf/GdlyBB+KReBJehFfix/FGfAKfwpdIJzKYTCU/MJOYmcwb7B3wGcTO Zh/iVnCr+Uup4anjqT+k/p1ul16BBgI/LIW7X4eehyc7iE6iM/A5h/6COWzCFvhoOIyH4Pvh 8wB+BL+Ad+CduAGucgr/BX+L/4l/xNcIgg9PAiRMcuATIbPIfeRJ8iw5CZ9T5O/kP4yHyWHi TBlTyVQz0+GuVjJr4bOf+TPrZ0+yaaBzO249t4nbwb3CHeMu84rwoIjEj65vbS5s/iqFUqtS 61N7Uw3pPyMXzKEfqJCNKuHux8BnCsz3euC43eg0VoB2flyIb8d9gDKj8RQ8E88HSi7DT+MX jXt/DR8BKn2Gf4B7NpOgcc+tSRm5g/SHz11kPJlJ1pInSAP5lPzMCIyJsTIuppDpziSZ8cwc ZgGznqlnPmK+ZP7CXGWuwyfNymw2m8PG2DjbnR3NzmWfZ79hv+FGcR9yF3mZn8av4Bv5fwjt hduFAcJAISk8JhwQPhZrgDvfRvvR67fKPD7PLGW6MvvRo6SE9ZHfk98DP49G45i+BDiV7MCr yGLcQHK5+XxH0hH3Q5fZGND6HbKJXCUdmb64Nx6EppC2mbPxTvZlaCrZt1ETewSe7fdw5vm8 gh8gP/AK2osRScA1f8cUs3HmQ3SWOYcFdgv6gpWxBzeR7cwA4II32Nu54SjMPIteY2bixWg/ 6Qoa+5q4Bvi4H34Z9MJg3A7/xKQRQ/oBF5Uzf0UPoankc9QEcrwKPYXHsRPRo6gEL0LfoJdA Kgq4e/lC3oXfJ5PZOuLADYiwO+HpEjgXM5wTLcNJ5mn+B3IGzUUnWRl9xbwKd3+SvMb0ZS9z d+JJIAGL0Qo0M70ULeCGs3/EExGDh6Ioex602yKmHRuGdglolVGg0w6AdB8CPdCJ6QsjXuCc PsAXQ0BDPA2fDaAnWOCgySDjw0CL/R418INJI5rIWTBoHYTYD1N3ohHpl9DG9ER0b/oJ1Ar0 wcr0IjjjDnQRPYZ24OWp+9EMFALJ+Qr34bqRk1y3dCtSR86QQWT9r+cXqB3FXvQdfF5D3dDt 3GFUx36GBqGq9Jr0J8Dd+aBhN6K7US90AZ7ye7hCD+YoKkn1I3vS3ZgZ8Lzn0MD09nQ2ltGk 9D2oPzqCXhQ4NEaI65066VW331bZsUOiorystKRd2+I2rVsVxQsL8vNi0dxITljLDmUFA36f 1+N2OR12m2q1mBWTLIkCz7EMwaioa6RbjVYfq6lnY5EePVrR7cgYGBhzy0BNvQZD3X59TL1W Yxym/fpIHY6c8F9H6pkj9ZtHYlWrRJWtirSuEa3+RJeI1ohHDBwO/Ue6RKq1+iaj39forzX6 ZuiHw/ADrat3UhetHtdoXeu7zZtU17WmC5xuj0nuHOk8Xm5VhPbIJuiaoFfviczYgz23Y6ND PF077CFINMNN1fsjXbrW+yJd6B3UM9GuY8bVDxg4vGuXQDhc3aqoHnceG7m7HkXuqLfGjUNQ Z+My9XznesG4jDaZPg1are0pOlq3plFFd9fElXGRcWNGDa9nxlTTa9jicN0u9Z6FF7y/bMLJ 7Z2Hr7x1b4Cp6+qdrNHNurqVWv3mgcNv3Rum6+pqOAf8lkS71dR1g0uvASL2HqTB1cjy6uH1 eDlcUqNPQp8q83zjI13pSM0UrV6K3BGZVDelBqbGX1eP7lwQ3uv36wfT55G/q1Y3eHgkXF8V iFSP6RLc40R1dy7Y59M136/3tCrao9oyhN1jsbZ0FPOtnfE39xk943Da633nTcpiekeRnsAQ 9dpYDe5keASeqYKuxlegurEVcBj8VWP4Vf04mJHJ9VLnmjq1Ax2nv6/nompEq/sRAQdEmv7+ 65ExLSN8VP0R0S7lk5usBvtv9Ovj8frCQsoiQmeYU7jH243tslZF8xpJJDJD1aAB8qEBQNsx 1R3aAPnDYTrBqxt1dDds1NcOHJ7Z1tDdgb1IbxOvric1dM/RG3tcQ+ie2ht7bv68JgKc3GCA X1e9GLv5tapuR9dJHeqx+/9j9/jM/t6DIr0Hjhiuda2raaFt78G/2srsr7i5r6VX7+g8nAmQ lh4JMMZeYMpRNw+mG8OVejYKX95g6nGNgghcaYxgrVu9WtMjs66Ww+H/yx81pi/TXxnNLz9r uc36DvFfb3f81favbk+pY+CGwQj2Hjyirk7+1T5gtcwFe7Y0wPFo8PCw1rkeDQHJjMK3MX20 gi7VgXodSNaZHgD8lxlq2fzVgYGWfjX8Ue5sVdQNFF1dXbeI1q2upm5MY7r27oimRuoOkmPk WN2MrjU3GKcxfWh1oL7bmmqg1STcoRUi2ACfHAI0K6A7Ggi+wAuNZKPuQBx7gUGywF7AyCfy 3AXCHAGjLgHEa428cfVqZXNlP/VKZd/mSlQFffU6rNoWh21hWxRWGEzadY05el3n0DWksUep dzUt/Q13kDuNouhzvWvAGXCRmjx8l+jAdiY3F4XtHhJFIYIx7wlZmHCIlzCO5UVzNYbRiJZX QxgyqzYP52XFNBnLvtjYkd443EKyb1NfNXk1WdlXba602RNtUFVTVRO0lcYmfDEs9kTb4s4L 9C5sJBD0B31BhldiatQVy46JUTACUa85K4zcVkcYDnY6NAG2crhoGAdNnjB22mAVksJhlMvA CsXhD8fjaqVaGb/xV7gUJ1ESl0VtPBvJySVlpfbcknas2yO0JpEcnhd4l9POlrRrX25j+pBp j6VObf48talhHx7wxSaMn4jtDt99YPryY/eFK1Zi8vgDl28nVa/i5vOzZh/Ed33+KZ7dMLHx yeIZtX0HLuu/atPx1E+1Y8qxjVLVh5AwDzwxL16jdylAMVuBPeZNoPa2hL29tyfqbutp7+4d jobZhtuHedUN4gYrdWs5Ao6tyIFnq0jg21oVsMZ26tx6XY3pyn3gkGi0Vew22uojXKKkIY4Q DSMnxsjLiWLI5XW6XF67Ikkhlx26dptitWqqzamCqywpotfFWW2qggjnUjjGq1qtkiSKhGDi tdttNiT6PR6/2knCA5GGFFi7YNERhwce0DSMsc/XiFfv2ZGZZb+vb7Pf29zs9zV7+3Ud3+Vr YDs6AZk1/dg9CWxP0AnPLInEyr6t4ysXH1/Z2vt/NjBlKy3q8eOwqjx+o3frCveutw7qXW8D 8d9rl72N6asVFdUwGIXBQhg8CF4wCCHqXW+CEQuM7FN0ToeD2hbjWckwLnG4Pe3LobFD4ygB ly6WxwsYP5+6/91zuf4KgLjf/bF/JNjq67dT9x5OfZgneJyp97lD16ueWve3XOarZn/q7/9a 3cC89nM3NrlGG9/92laAqOAnIW4EzLcVZaFlekzLxp3FYBbIDbGpISsSPTFNwpI/O0vVsAb8 kQx1HEUFNkml9GqyyRDXKkNaQSDaMwFB5EVOZEWW93n9XsKbZEU2ywzvcjvdDjfDBxjgfrsF Vl4xGMZu2RZGBv8Xwh9wfYkt3M7j9rjtLiexkEg0DDzevn1ZaSwvFgk/j//zyogHqufM7rfw 8RPLU3tw4vEX23bt+9Q9/XalPuIOubL63J06eXx7KrVzTLtd7dt2/falr/9dGKJ83Qk3kilk GmimIt03g8xgSF/cF5gngoifm0EZn53xCOWNC0n1a9Smb1PbYjQTJx1lYVcnUoAb9++n1NoC 1NpFpQPl4D661W6yYHv74IjsCeK0bNbemP7LPru/FNrL+3LySm10OyuvVG1prS0t7P98X1Ys sx+OV1taul+fDZ2opVewlzbINCo4LThLmm9ZYF0ur7I+Zd5pbbResnxjVS2KotmsTpvNarMq kh08Vb9b5gH/mhXOK0luj98X8nhQOIfOI/J6rVaLGIpZnuWTWu6M3NpcJjfH2zKdkY4tEkF1 Lyg+3wVv001ZaK4ExQfDlYk2VBxsnsRKS+s4t1g9DkyZvKmsUBKsoy6LujVhVTvY7B1grBrP hMGDyJL+Svf7ErYcX8IOi0UPJtQcJyzZsLgSLWeoprPuBhDPCzD1HkeEaU1gviM2GDYmPxLe QuqOf7Twg9N984f0SV85NuTeYa3Cvf+Mtyxf3++prali7lD/9xY8+2lWNLff3NRM3HbZmgqT 0DyXKSlf0H3SCsoBh2C1Ep0ADojqXlKJZFI5Gk0Ht2o3YjfD/s3slg0GZ1OmhukvKStxHTpx 4kSLlLDNMO9mmPlhetl421Qn6a32do5URzpZkxKyWizI4zWoLdpjol/zY/j6veYWKvt+EZp+ 6szk1b5wiRbyGqJDlb3B+CECbB8OG899g+dJwRN973mi+vvU+6lV+P4jzyf7tF2Wepg7ZLGP PzDtcKq5+VUGr1ky6iGXGS61KDWQ1IBVVNFtupxnxUi1C6KqNuKSfWiTRYRWtwmbLHchRmXA FDKv2p5bY9xa89Um9Sqd+irjfnCM2ErL25eXgKkBY6NifG7d7/uOOLJ0Qd5tERDX1MAj+Cds +f5s87VT1XXrD7+Ryk7RR61KX2L2sLejYnxGv5/NceZ0kHpJXXKH5ozPWSQ9Ki3LfcnxStEx xix5/F5Pce+iTz1cgAwhRG2HZe8ocZQ0Sh5lGqWMMk8Rp0hT5CmmKcoUc0OsIc+aF8vNyy1o nztCrjaNi43LnxOZA6z8G/lZ5Yn8p4rWFW+Tdypb87bl74v9LubOagS+s4cSI8S8qCKzfi3m Yk2ts/yN5GU9mO2r8vX3jfbt9p308VZftm+675yPzfY95iO+w2QIeK0IDlNVrGOi4lMwqVjF BANK2ud0l9JWD1lspRi3HpV1TxbJCroENtjalA0znuvTHd5SXyMZuVfILYQjXw8mThXiQn87 +qtYXmFpTbuj7UhVu9p2pB0QFeciLdeacw7hKnB9CfK1LS3PyOPMvlea1KZZ/dTkzPjVmfG+ TVfiTbMMMDITuCYeT86cdUFtpuubsMSTQSV6XqtQhHMWxWyqXXWoDJ9j1gJIyhcCmGsFq5AT NsOWSADlRMyKWCAHcH6eJPNxNoCy1awARi1gxFhhA47Ely5diuCaODlrZtJR7naXUP7Mi+W1 BmhCFXQJiK9HiMUAnLicVH8brMzzkZxY1V7rw/cvml8W/c07G/t3qih8fNDiN0bY6pXZkxdN cbvbBJa9+dTQye8sPnkG3xacOmt8l9si3mi7nkv7dV+Qnx3vcf9E752j7iyPBLMccm5Jp0Wj Rmwa9iqV54eA084bceQ3DiI/UFdyeUqJ5nBTRXpZL7A7S+MOnCs63Ap2uE08km1BxoRK3FGv Ry9pX5r24KMe7OnnpzPjKm1fWu+/7Ccz/Jv99f60n/UrUcnYA4deljCSNOmUdF5ipX6+7gMM iZkZbzImB5bK5gt0aqoqEwY8NKbBz6oWs9VMkRG1iAyvskoAmUVbACAfBnO3FAAe0DZcRokE ol5mK7EB6Shp29M+U7Xok7u29ldNDSbbvQMHPtqx4dmGHtP6l80mTzTve6Rt94GDHltFEtfO AtusSF9is0E/qWDFP9VfxZxizeXKuK4cV5Vdn02ys3OCJcE7gjOy12bzHRyV7kp/H3cff1JM modbk+67/FPEe8yTrPe67/UfzT6jnPWc9f3F8XfP331/zTqfnc72aVwbaxtnMVdl1bk+1gHc BO5s1o/sz6qiuiwsT1AgCEhEdgUtJm/uKRNWTbqpxlRrYk1zsK0ElTBRQo5ivBZvxvX4Mmaz cRXujxnsC3W/weyzKN6+YjB0k0HJpipbwqAkEAl2o5nhCJAE2AzYSkWRnDwGSGUwIWU53Gp7 w6w9d++eqaf++caRqaR0yOPzXn1x7rxXuUPNPz7W/7EPZqd+SH36HF7/5pDVJz489c4J4J+V CPEx0FQR9M5BJKU/1zuZzKVR9gJ7Qfqz56LGfcJd1YhH1CKSN6BJDBMJBXlX0GSCR+Ujfp8q n4ritdHNURIF3GmJrrVhWyNO7vdG1wZwAHq6D5GSSBSfQngt2oxINqIiziBfbrQRz98XplwU 75d59uYLQISmK8lmA4vC41ZVVlYCO/VVQQfYPLf6HBbA1jGnYgtgu9lFZRV4yHAW4iW2Epch iB66ctkittKMPBo96jW4bCu3tHtpyrynsh/44PmX90VG3T7jyYbh4/os7cDG1vUbfffwQ7sP NOeR5+4Z3WHdtuanyN758wc8/XjzGeCwVSBylcBh1LNbrCf7S2ulzVK9dFQ6J12WBCRlSzOk WmlTy9B5KS3J2SA1WGAJI/HMAxjxHM/KvBDlELuJ3czWs0fZ8yx/lL3MEsRq7CnYYtl+4g3h mlVJfUEwR034BgandmnWTAfYZQZ4YVVDQwP7t5Mnr7nY2DWaGES56X+SQm4j8qDag0gGbR2J lRoy3Ak6tT64G8UsYwa5VSlulXk3qAOrmgNQzmyPKjgtiF2lrjXCDKFWWCuwSNCEzUK9cFQ4 BRbwEJkCLlH7PRMyNwec2kQB8IUrlZRbqW8I82MrKVHfzyCjqMcQ6jJbpKzEVg4TE7E5qWQT 1d+n8u57ipYt27d/vyOeH9qySb19/Atk7Bos3JN6ZE3zb/oW+Sni6A0SHQLudIFEf6WPy0ZB FxnCJLmkNMQ0npnKTZfGm0QVqVglefYz3M/Oq36hrb2Dr22wk72vv1NwoH2U787gGPs0/5jg fH6+6yq56lWRG1vNHs8Ad417hptxB61r1c0qUVU2EJQFRG2jhNc5gqzJo5sp3SSwV/VmbPZn U9sXjZXSVs8KRUqLs3G2u0TNFfTcwtJsoUroLzCCL3TDeMWBowHoxDOWC0jUfMFwogEAzaw0 5tOeyKAePHMW9lAzgWwqKmmHbE4hbKhAHKboJ4dn7jpU9P3Bb1M/YOefPsEWfP2SvHf52DXN Z8lApWLow4t24qGerQ04G/SJgvNTX6X+o2q7D03C61Z0nvQSpWQ3sBPngHNthm58RSasOWou NXcxc2XOsuAwMli+0zkoOJGM48ZLY501waPZH3OfOL70XXRcdP7g+ZvvoqED3dnZcT9VnL39 VIuCG55rbu3uQMrMvUlXczdnz+Aweah5ovki/437Z3zFomIXYzGpVtCNJsGGQDkyJm8JRlGb Naqqp2xYtem2GlutjbXNsee+KZwUzglpgb2FlANu4IAmUIqVoAiaKw0jU0mXX5TjzCToxowJ KSu1G+IPwoGdvyhHpmL88SWfzJ3y8UM169vsa9ZenTvvxR33z9+y4vk117ZuwkzdwE7E8nM3 Yv/og7feOfvRcZAkBxCuFlCkB+3TQ04JW31tfMU+cJx8zyjPmneaRb8531zvO+pjfZQj8v3Z pVmimVGsQRm7SNzpYBmwt5uc2Jl26KwnyiKGPAGOPmWjthWltNXlYHbpWrjWVq/vCD6Ewugq lhGoxKsgPpXqFcAeoPuaklQHVFIfswl8cEMDOlUbLwm8yBNeBecH2XhrAFOLunQpjgM5ZpVQ qSsrNVAJYBKqAl1UAvdu2uTwPzSvz6hARbs7u5w8yTy9ZubU0m7D7M/J3WruXnN9AnBLF5C7 PJA7M/Kht/SkXZB9Sne+hziUrxYn8pNFsVTtYO/gLvN2VXvbe7u7ekdxo6Q71aQ96b7TO42b Jo1Tp9mnucd578MuiefMI5nB3GB5pHIPM54bL9+jyJ4gK9jAjDhzBUoFR260tFjASFBB3zBC 23PUeMC4jwoZ9C25SIdDqPEgqK2fChgoIEAeM+NJcFXihrUEb8XgA+qGSYO4QdLd3N0Si5PV DrUcaIAyQAw5bmGKLtse/t0X2H3/31afSzUd3Ltyxd59y1fuJQ6c9+i81J+bT/ztQRzC5o8+ /OgPv/vwA5il5cAR7wBdbOghvWMbB1ZZHGFL2c7sIHYCO4flJZsoiZLZYZPMiBGxiSICYAEp f62IxRzNgR0kxxY1OCADqWgEWEOn0HnEon727sdbIBUgKTV5ZRZwOmAAmxF3MfQFUt9faVl8 nLL8LBokyJi6zOyCf2Jb/sLtk6tG3nX7HXd0vMsZYmNbZvbosD2ve1XNrOaPqW0YAFqgCe7f j07o3SUFZwc7Ozp7BjkGeWocNZ5nyDPM0+Zt6ja/Ipp98hQymZnCzVVmmGvNLyn7pQPyfkVx KyuUvxLGkjPaOt26xMpYMVWYPYuRjgagGjQDUSt/Hl1GErJaTeAw2kHyvaBMg1ZszbXkBKiF MsWzQQwA9/cMunJPCpjKOxHaBkpbnh98sOSsljDxQYRpSKhp1pUW4A8K1JZooyaBQhcoIQCN z7yhPFtE/wYCpxPNVO7J+uG1s6l/z/r24V1/yt7tWzJi1cvblk15FC/3vH4SZ2H5VUyW7t4S mHrP26c/PfZgBhMxXwOV3Ogj3cExvIPsUBvVvzLfOC4zVx08S4F1W4BJC1S8QT3lPe9Ne1lN dFqcbnuQgwl3m2WzRbHkmgyAbcLwNfXz0jn3U4DtvewlM7ybvfXeo17Wy5ASl7uFJez/B0t4 WtihEjRBC8puAp1AHVTKGLgFDrl5mySLsiADvo7ZeEsAW2V7Cyyi4aSZ1Gsx2MXwUH4Fi1a+ MPfLmi0DVLmhcGqP2dvZ2FO7u87o225x82yy4t5pnZ74qPkICF0v0AhBoEk+KsdZ+qOSWSr0 mf2FBebCwoS5vas80KGwZ2HSnCycYp5cWFNcZ15R8LT7Gf9Os+sl38v5B3yH84/7Tub/0fVl vtjFjbM92d54UWFpgk0U9WR7FA0Vq+MTxMnxecpK5X3lP+b/xG3lpRbMqm1ySz3twk7v6ILp BaQg2MZSZXnMssmStnCbLLstP1gYiyXIeCgLur3rnMGggLrmye3AyhSMUcegaDgXfFBdzdNR TI1pseLY7hgXa5ugtM6mqiVxNEE2J3DCE/XmtMl9kz/Jk2y+ClRq2wqDD6+0+DZNVyqbL16k 7HeBWnEaEYe9MzM+5w2ns8UMRQ13D/xBcAjphzqIVDzzbictxAfG9ERiDC9YSIZH4SCmctzB KbuPdJ/do2zq2Ym4pOuqJQuy6r33nnp41csDVMmTcyToufv49FHtpk2e9EIs66Eh3V5Z3m9p P6fF7M+Nyve2uq16pnfm6t76mF6t51++tvy2CvxlflDN79umR83I/rfd918xESWf5KtEklWM 7BKNisibGEyjIla0ibnLasm2EMur9v8dE3FEQM7A543lldCHUUkzGJx4zm15C5ceGdH3ZGog Po//fOTg+roRf7zWfPb71D9TIlx9VPob9m9w9WKU0p8dy4xlZzNzWDaaV8Ykgp2ZnkKfrK7Z XXK75Q1iqoVRWcPyH3ZY8s2xXJLL5EXbW0sjXaJd24zQhkaGRO8xTTFPtUxwjvcuMC00L7Qu Vufmzo6uYOpMD5vrrI+oy3Mfij5hXm9d7wpFcy1mExcOZoUCosCzDOFxNDcHxnguFGj1mB/7 m9yolYo1PADX4Bngm/FAhXo92ioUcjNcqJUUiPl7STFUgAv87cIxO47ZB9P4jq/tzUTJBbDP /YBKfYFZDP0E3hv14K5QpgCnxWCQFv6gqspRHiIl7Vpiubl5MYNT/ituwHqMKCDwUW5s1Ovm 0e8tnv7yoAGjOqbuGTh54gP/fHLrf1Zwh6y7dtZvSVTgM8NrF6649ty7qX9txJ+p9z4y7I7Z XbpOjHjGxMu3jp/+1rjJHy21rH506cj+JSVT8zvunzf35Ow539LIARiEcsOXWXMQcQBJyitK OQpNSssybXHbTJsTNVo96vKUWrlsbhN3jmP7w+oyx2RzM7haLs2xoLRkwmT0GD2Toc/8gD82 IXwUzAG5RamxN72beDzj31C+olvwB1rK9lADd+jnbnCPG8A7tVKPHs/VlyBiFZ0kILLzwAa9 pzCS0lPpaWUK2Ki5yDKcGcnOM8+3rDSLJsKJoJMs/Ulvpougi33Nd1jkDWQjs15YL+5gtgu8 nVgtlmKOODmOiIrZXMyJ0BWVO6130mgXEWl5oslstlhUJEqkxl5rJ/ZDZAcy47Z7OU1sxG11 WZFkTVeWgG4/RIYiCzbBHtKITbpkxUizzgCnpJEMfV3jaoBCDNdIduyzdaz2xn3ANVeSlV5w nJrAgQZ/t9J/c+NCEnkp1FNv+fgBAK7kbs26AC9lMiQhMJBvICV9DYnpTxFJf1qRyacosC/f MJ7m9E97LDIdNQLR5vTHB8IJS1E4Aa7NxwfKE5Z25UZ3fysYbdUSia6eRRVZ0khDYCPhEgaD gSPYtgHn4pHFbl8ZHo25w6mhu1PDuUPX/vl4jwHPMNd/7sZ+eK2MPX9No1hjBxj/5TB3Euqt F4LAieJjAhYExLCZCLHwrEY0EyF+Eyu1BIhlGiC+EYY3hOrCzQhxslKlMWK4I1fYWHYwX16/ SOqbB3CHdqU67GqmuHVs+hvuS+5jZEEBtESv8VuxU3U6A55AgGVV1mnymALsTs8ByzsWxuPx BoiWpdv6O/p7dP9wbrg0TB1iG+0Y4RntHeofFljt2UhUX4hh7CGT5IppcPP+2iycZY0ZGiA4 dtSNVGk/mirtexODgrVNJkHQVRRux9IEjpG7LM84dqUEhByNxatw+w9xt1caUgfePJk6tOM9 nPXZFziw4NvHf5/6jHyAp+HnjqVe/NO51Ob97+ERv039O3USl+LAPmz6TeoigNB0M0JcNVBX AM4L6WPbqMXqRHGSVKOuYtaq73Pv8EfVy6pJ5KrxUDJAnWSqV/+l/Mv8L4vEKqyZtTAmWeJY VjFbRF4QFOiLvCJQ5CEoThggDKOxihOOkEIgGSGe4RvJDF1CovKtDtNHDmETADiTblc0NF5g 7hzAnmTPscxaFrONGOumAcpR4ZzCrFWwQrdVK/h2ZIlQCzjvN9ZPPwP5B6fOBwt8vU0Z5m8C 3q/0g40FYYAv5fnFqsHz0OAb+Uf1+HHL8eMruUwL9P5FFBpYKyMKh9KXEUr/VGHIAnByBJfg CBNmHGGGJgsBcP2BDP/yleZntpzB/9jYLSdYQrUNPpLqQkbg9Qfve2Q1zG84NZD5no0hP165 zxrEVhpJ3xZM5DuHWnfLjG7WrcSq5ReXqnQFBLS7zV57nilPyTO3V9qbyywbbaZ8e76jh7va Xu2odk22T3ZMdi3g55kX2BY6F7qWm+tsa+xrHA87N8g7TEfUw7ZDzu/kb5w/mpvV/zjTwZDd alVUm90uI8bndDiidtkJG1bFalOiJtlpMskOu11RTDwT9FlRUA2SNsE3gyTYSKr2Wx26XXc2 ksG6qcqu28lo+5ugwBrxHQesOAd1Dch0l92qmXRdU4qV/gozQEkrBGbqjn1tAKfDORoC2qIJ 3jhMSzOdIr/XmCGveuWCT70A2MfvVZuMHsxZUyZTRudLpBPGwYxZoINgymgquFI83rveAnPk hTk6DOrqEjKlL+FMVtdQS870V6CL5BzQR43pS/tdCVtLVqwa4FccVFEccEdeBiqVG/lfdyb/ C14PWMklzo5FlT08thhnSk079mU8Jzv+14bUPZ1yixcNLU1N3Knm5wamWrPY/OaNc5cumkem Xntv9x3Vg6iWWgVY/yeQIxP+SPcL/FB+hMRYzf/irvLMEOY+mdh5zREuFWky055H42iXG6C1 c8ZA2BjQl8EIz7Icy5dL3VkuyreSh8v3MXPls8xfeeElHkf4mBAVE3yFVGXub65mq/nhQrW0 mF3AbZTe4f/Ifspf4L8V/s3/R3TZZZljGJbwvCBJImxIohgVeJBJngG8xMlgqGRZgg0RlKhR Si+aTEgGqbPu5XLANFn1iGb4U/61Zmw2RRGJYrz2ZmpFMf853H1CS9A1E1rtp868gV9aUp5V lTTLCfPJ3jqfgipWipWMsc7MnC5LRVkJSczKquRBQvZmJaD5eK9mNHvCGXNSbdgScEHixlzz 6aN7wwkG8MFeN22+2qsm+ExjbClGs8d0wxbR7AC9lP1LFotON1zN6aw0VvCrq3u99Md/3xPI HA7evhEqpygCxB5MlmBb1YBf/jY1Bb/5VWrLEu7Q9SO4PjWveRzJXpgaCRS5AyT9O/BsQqgQ XdZrTCbOWWSKOvuYujp5KcuXVWSKOYsiCVN7Zy9TN+dQYbhpkuln+UeXpXWkKO/2yO15ffLW Fm0uEtqH2xdUFXUzdQt3LRgcHlwwWRgbHltQU1RbdDbvUvj7yA95No+bdzWSPQ35QYdg+M2q BoCYes216CigIxp9XKx34oJBq9w1J6jIbldJtESOer2nPFj16J4aT62H9cyx4ijKyc5903rS es6atrLZ1iprf/DFffGiOeHSGxF1OqOqETVrvnCVRmip75K8QNvKFjM100OTVIZY5YEckUzs zFNWYsskrW6NlUzYbWrXec7iVV4Lnlf/xeV7//DIkYUvjf9i82+/2/jS4kU7di2cv2O4f2C0 3bgR5fWrceWXGzBes6H2+pSfTs5/hSn8w9E3P3r7nbeB3itTk9kw0NsOFD+pv6iordTb1N4q W6XVayRbK1AiWe1c7bLuyJqhrdXEDp4OgV6eXoFqcaQyyjMqMEWcqkxWp3mmBo5qp51fer/0 nw5dcF4IndfSmjvCxtW4q4ztoHZje6kj1Iumv2WlVJPNwriDRijGHbSYkMWXe0rGqqzLNXKt zMpzsKOElNijCP3P9Ex293Iv/l/5GSNBY0vcmp5x3Eg+AHwnlIB5NuYWEq7c1uGJSatOTZl7 7v4Rj7W2vTRv/ivb58zek5rMvVE3cOCa9IatqWur+3RovsZsO3H8w08+/OAz0FASWPpuoKFk 9KPeow2HC1E+E5XbgN6uUR4WH5bWKkeVy4pJUwYohCUmkciSpImcUxQ5sNAa4ZyEcBIm3Lea DGh2vIjHE5Gic1N+YoCIa8W1ImyDjTYTPT8xmuDHyCZCCB2xadwAjhQDgl3LHQW4zwGKXbXP VLMjg2JngvqP08VLtQgoD7+vCSz4f9ntjHl20pIfZJUb0//YK9kxbQDMN6a/r6ioaAGt+XBY +1+KgAwWTSJa9JPBoCWYdGp+7494cevsnFZ4zTvNxwB6flY7Y/58tsDwFmjchr4/40R7DiI3 PKEZPJYoW8Z0ZQ6ZWdAq5/Vcj6/UI9oUm5PhMLIGOcFpkpWoZERqJHxUwlI/NyWOh0Zq3Jfd ZIZ7s7venXazbuL8f43cuW4mQ2k+BJorNFCDjCi1LfFLnMbCW4SohVcC2Cxab6StUDyJDbcn wzi35qkaHjg677XeDXOnDnikkjvU/M8nktuebR5Ntqy8f9Cji5sPwz2Up79hxhhx/b66Op5M 5OeQufwq8yobLxHwZf16mA1ZJSkmy2LMlNQcWHPojgGOGgfrwDHU236gmt44DXNcpZgLtERT FeXnluy2kYLN6IKOu4UZY3tOyT9W/daDb53Am707FnWe/QDzz+u+xg+mfEVtKQ+c+jpgJjvZ A4DPiQvZApn0so20PWpjbNRQStnhUjWYlbGj+q7s3FKWVyQHH5B8do5FLG+STBbRriIH4xSC YsCUZclFUaFQjFtKUZnQQexo6cJ053Whr9jb1Nna3dbLPtJ6p32qME6caF/ALxTmiAf5Q9YD 9h/5a1K+yZaP8s15lnxrnr2NswKV2+8TV4gbmKeU7XgH2WF6SdmPDvCHLO+B/T0jXWIvWb+x X+F/loJ2xijlEzgJqGZSFFm12QAA9t7HIbvWmO6pT5CtFu1tmyBqAiC0ODARxwkWWVGiZosT 3EbRZrXGZdEJP6f1fdFMfR8iWLCzIgA4i1m2ySxjNyuKKAoCIZgHuGexINl5VTXjGjMNuTLm Rrxdl7X+Mp4uL5EJgLYhutTfhqfbltiIjW6ZVA7XGB44+Jd4+3581XF1guGV+PpeSSa9oKfg 6/c1Q/9/1/ZlklAUV9v/r0r7BIBzdKF9uvSuzx40vMGsKRo5kj6PMCyW9KkGVGzV7CBvuKLl r7p3fekgkGwxfWqPUIyNgTDIe4kh72L6/B5By4zaW7A8LZo6dcCq0XODujq1VyimZ9yLKsih zJVunvzm7zzG72zp8/tkjdVQxS0I0wLerj2BimCh0MSRyIBLGnMwPF1aWmhASofHqCtk8hjc O3X40M4qtmTnwU1ltx3YnWo4vLPgMzbW/MwF2wfk3uYNH54gE66dJYv2Xz8J3F8M/u4hwyPr r5s5EmIZ6uTyHCs1ktn7tIxj9DqvYdKGwQz092PD66V7xQMbM5VR1PcFc538WjWivFU3CoDL qMdLHKksti4V4My7dv38Lypxz4LEZRs+9nd77Caqm8ocrlKRem+CCJhRJALDiBJLiCSILKPx PJfUTFgzDTDVmGaYak2cSQTn29BqCvyyxQuvzqRXMrrsCnW8jeifEeoENmFbZ4IQmOKyBlHv ZqC5A90Sot4u022XEHJ8CVDvXx3wQbddpktHI0ZXN0USgsUJi4NuXznggG5WppsFXRft/rTn ZmUcbimxa6mSK8GglSLY9uy7DDn07vUU2IGl7JKfu7G112rhCdbDTBQCVThUoiuYsEyIQ6Ix AWS7bhEI0xJu4G8p4vw6manhpBEGGmNYf4z8EdzCf+2CA19OfYUfQifAAvfbLzNIeIVvxAP0 GGYqQXJlTIvoYEYrEV8hdOiPMuV0m+Hqm01GLd2VpJEop/NJ1zSH2ZSpj6HFdU5eyGvfvvzA iQHD2iXaMydOzFwd6+sbMxKuWwnPIXBHASd9o7fvyHXkD3Nv8oeFd8X3g0JPpVoZbJmqjLMs tC90PGw/Yr/ovxi47FfeNL3uIAE1qGapIZX/LfjCAoiLCK0EOtcfklWR5z8I+p3BoF8M+hlM RH+QMYfURrJtX3+jfMO73xxycijUSA7rVkwUebbnNHCbHo6U4sNkKZg9FVfoim1/FRlNppMl ADsOkVyUjR/bs9ogKODOqzR72VIXS1GnLaNtMrWTlhZ/HgwNlV5DkCmEmhV1hWPl7VtKXY2g uYGmaCwUHD2BFa6XE09069M/7Nh4/4PP4oOOn/5w+mqP7cdeGBXatatT5dijDxy/OGHqb56t c5w8892u4S8f2bZqTFvAnEPS37A2oCStDNrfwGs+NQgWaC/RTL8F4rhhscNiBYBwN8uvJKtM q6zvWzhJMHlJV0cfVy9f58BgxyjXKN+dganCVNNYxz2uqb6awAJyHz/PtNC6kt8grFff954l n/Kfmr6w+v0hlnOGzGbPbIlSrZhWTqkSkdZm22YbwmaBUQ3pcGtrQ++uvpHNvJpBDb+EkQzy GPRxqEZqy213qRRY5sUcKrXPNhXIJPBDpp7ePG/vnDumnN7y8YLHD+5ctGjnzgcW9UqS05jF t706el8qfTaVSr29a8Pr+LnUUz9cxpPwlO8nGxWhQ9Nfs26gTRyd1vM5s9vc1bzCzHa1DbPN CzB3uu9RpzjHueeaFzhXmOucDwdeNMucZmApE32DmxVwxKxgyjw6nOwwpi/dmnFZg6K4WO8h sg35yCQ91xUKcmyowGyfPVqbrhGtVpgdMygTwzQ1Q2JrW3kbccVe32l8CFdQAKibfiFRUSN+ Ys8NKl1podOVZIZUmXSMEXb/pQAQSJapq7hZpUfpVP4LFG/hrEyxLawRIJyhDdnrpi7Z/cLi kj5Ou2l244opk9c4G8LfvTb/g6kTxj24NnXp07fS+CHvxpX1Dy7a4nyezF889sFly7T9707c O270s61Dbzx6NPXj10AGP0WigIRkfNfrZQA0c2wJmao9sy0hue3BUpGuQMV9tw9a3NLCEZ/r UihcivJhBVuXdCknWorcsIKts/r+/NalSIOVVSlA+YDpEqhM7oG6y0PxUFItDpcm4AlksjhZ mo/uw/eRBeJ86T55JV5JVjAPC6vEOuk5tEF6XH4VvSC/gV4X9sjvo9/JZ9En8t/RX+Vr6Ipc JCNO9iK3nI9icrncH4F/z+l2dymnm8ylsiCKUUl2SpKMmJuohpNlJGdeQeAFWWIQ5tooWMkR dV2XaoHnG3Fgvw4QhQBECeiSRnScY/rujwbspNCkOen3Nl1ItiCRmyjFlvg/Yt5gB2b+Um9t lFyHfwkF4ddS9/z2QjTbG//7wdS9YKaXTZw+eB5ZlamKGgO61M1tR2Y0Q7ccN2MWvkRkJcaM qJorJpiVFPNshiGULfsbio0hfqs4W/ob6o9H49GEqYJmOl4CIuWztHCk4RZW9r1CU0AA/vuq LSXNFPMbCg7umFbP84jhhUh7u718DLN/Taqpd3vrQebBfz3M/rxrzbqUPXWt8Ytd+Dv87rP0 XlH6G5LgTiMGDTqImPRXe50Zo6k5E0+BvmY2MbsZwsxD2En/nwKG42TmEiKXAO/v3A/PuW+h l1atXsk4ZRmHLHmzXN1F4yI716aG+7i//0zPgM4BNL0GGkBGs3WNASYtncouIY+RjSL7Kosl xHOEkTisEPyBnMlTU8lFhhH1K5xutmYSRFSpFXNY43SYbJ/pEK7Ey1HmbYKZ8Rb3yHi3qYra gpbSp3g4YgPVXgZav4Rca+h0evBTf2kzh73/9kXZr3X/YDRq0d4+ww4Wot/qpR38fdx6ZKR7 WGQCc497mn9iZKF/cWiNf3XoafdO/xH/d+6vtaua4zb38+5dbqZDwTie5FHIGAGd5Q1rvJYf 6m8ZbSEWSzAH7Bw+PcBAYZMa2FDQnH0IJ5AJzJvNa+gnL0Ze1Uu8a4uAuhUNaH90tu2mArfp AMTXxt/9b9Vk1HolW4q9mgxtRA0cfZPCUEe3k7LSPD4TcEGghew2Q6nHcOkvdQszdrkXjRm0 eEB73P7wtAPXsfDOY033L/zHC6+eJR++OGf+3p2LFm/Bg9SF9/ZZ8vkMxTt0KhY/P4fVp1N/ Tf0z9U1q32tvMqXPHDj+7Jrdu+kcUxqGuZeAht/pWb39C7LqstY7tjveVj5VvgiIksNrKfQz UjFXbKKkYoBUqkN22R2ODyxWp8XhtFjNoON1h0UOuXTLZko9q+7CLlfQDvLzupXFp6n+B/Cg RygdbaPV6eoS9TGVVUHX/xctNfsRXIaseB1Yioq9lv3/S+dn/1rn/6L1K28lrg0WAFQXVoqZ NzJQRugMq3lLiXZG4zsARDOZSiCBknvIG66N9zzYsGvNsDX5Ox8lZ5pf77/s8aNYnPPIlfea ca1at/r4C0/v7V/lJv94NTVvVOrqH959fO95ypEHgaQrQL/TOtAKXWM5xAsS4StZphLzrEwq 29BKJSofW8QWDJiJGKlNN1yutsVGCScsB0+cOMFUnzhxffsJWpE7If0NNw+kPws16jVjyZQs OE8781g0A83JqkXLstaip7lXmBfNB5kG87vmU+hC1r+ybBZ7li0riynk822FQS27u3moc5hr qG8SNzXrfvtq+9PMRsvTwR14G9lh+8TiQE7kV52qn6VqZW9+wijmz8tPqFaE2YAjpDCBECup MWsvFKMvjfmzPTFNxKIvdGvS65act82wufF4koIWTGsZb31fryWzTVxOO50OtuHYbam3Lzal PntmN+587E+4qOObJcd+s/Ovo6Z9vWLrXwhp+8O1t/C9f7yIh+w5/2GrzU+8kPrh8cOpb+uO AL2Z9PfcJaCOFWWjDrhE1560P+l+xv9M6CVmh2mH+WDxx/aP3V/4vwh9UvJpe8sMUWskr+wL r8xtQ9vi1rj1YVIDUKeC3K2r/XOxNXd67pLcH3LZ3CfFdo0waELxx+LpOBN/Enlhe69oUmmD mDa0aX0aznf3vvAqtuwNcjfKI+OQgoIwwvornbBnv+LrSLUvkMigUN8mqoWv3CwNAMxisEKm RuCCERMaXFIeLcTZBTF71BIj0VDMHZOjfMwfLSksy0blUVjZrM4wwOtgGHsk6PkE6JXmt8vG 7WMV2chhVsM4i4GVy+QNowDnDaNfuU03/5YuXYqT+JakJJ0gTw5LMq9R5trLSkmuw3OzgOW/ a6nI1d/iKR+8m9p4/Hhq43sf4im/3ZQ6/fJ2XLR1Ky56aWfqj4PvD729uv5P4w7et7xeuy80 t//sdY/MGLGKO/12at3v3k5tePddPOnt3+Gpby/emvrDtq2pT7Zvx/Gt23Cbrc1q7uJ1Fz5Y 9vbYJdOyevXftnHjc5Oo3noTVkuNKoUn99OsMTFKEipuy5QmlJRm2lbFmTa/INNGMiUL+7JC mdbrz1ioNma1VOPWcrs58JDB0D4Gflo9YtsY1Wvn0GXE2TUYXAuXe4H9NOMGg4+7F7xKnKym 1dg38UembIE6i28eM6oVCOqRmsycZ28HLyMIdmqDicRJobcj6U0WKHyVq8rX27c2tDnElTpK A1WhLo4ugUGOQYGxjrGBmlBt6GP+E/vX/LfKd161gOQocXCBy5SepJsygkwmZ5QvvH91f+v7 OnCdWAG7OP1Bk2DhnUHWhCweSwmi1bRWrFp1a4211spa59j+RzVtVuhX2YFMaoDWbv93JBvN xLaWgrr2LfmAX5XSFhU+NeSN1A/TTz/wu5kvNIdfnT/7pd3z5m5NTSZix364NRY2px566dGf OzO7Tpx4+92PP32XzqQVMPE/QGeq+L7XrXZszfEZaR/9gC8xwrqeXS+CirIe5Y7yR4UPrZJV dyf8jENymf1qGe5gWoofNYlt7MPYaqHaNNzyFN4gbzC9ThqV90wfWD5SzzKfSH8wf6FelO12 nmcEUZIwz0scyzAmq1W1mM3YajWrJvDDiNnEKKrMW4lVVt9B70hEjSIJgJDEEPM7ZmyOKoxT URhZkgAN8qrZrChI7m/H9p7mB5Qc2TqGlx7QZQCzr+v8AL7WSI131i0a8wDJ6Q8P2tO26HiL G2zgW4C36kVQAkaI4ZcQnIHKWvBtssV0JazWlaIRWMusoRGMBGpLvq3B4s1KmIwASlZCyfEk GFjo9t5wQjXKiV0JnBNOSHrwRuiERrlQPElTY4D7SjwULZfTzBiTh614WWrjn7e2DhZF932W ehyv/vJsh9S3JB+n/tO9+I6Sayml+fe4V3UqSW3e8PSj3Pfcx/S/mWC7/sTo2KYY8XnLXcQU ZLPpK+DObGeEL+RaeeKxjlylp0OsD9fH0zOW5IZEhsemc/czC7k1zBpuHXqa2YZeYT5Bn7gv oouei15/kIujQq4jxya5J7zrY5/E2Ki7MFbqTsR6ensGu2Z3jfSODRWH24a4RgRHZA3NHqYN y5nMTXBNjd0fezT4aOwL759iPhfNPAaM8J5+WyBBGHc+I+THvG4wzmHG4ecI3UBcbihkZYiY GxIkf8zRi/i1wtpCUhiOaSZs8hX8uqyj75WWF3HAwrW89O5JIFuJ+r7xjgNYPDRrppH8iVJV SZNoN80e1bIw2r6l5sOo7C+P5bE/rpyVeP65rb97N3Vkdz3u+j6tA7m3+esd015Z8O3jZ1J/ wYE/TRo1cvxzyfjKxP0jj+JRZ8/gcYfeSr14dn/q3CNtks/ixF4s/yb1WQoOTv0+r6OvJUvU E/SkgwzTwZRgH3abSIG9wFGBy5kKsUKqMHewlNnLHbLdodnDpXa6soAbT7PY5pZWamlF6t6/ Bx2WHsXQFTiUJhJjC4R8U6ElZm/PdhA7mOgZe4iD2aQ4yjTCMtg+EY9np4hTTZMt4+1z2YUi LdC7z36fYwVbJ9TJ69hG8XX7O+z74mfs5+IZy6f2b9hL4iXL1/YiPiOwhriqqsNK5VVVzTbA nzdF1iGbMK8ShyQ7HNpNgTVrt0orcRjSKrYBZOrx+DVFN6oaRr+uyWvlozIDUtu4f3RLfqtR l/kGXR2gnlQZFQ7SZQ35nK5jYZrfAh1J345Pei/6mpJN4KRmXpD/bxH+VcTckGBDhjNFD7c2 GXE+3vK6xw3ZNELTJirOPpBbX8LiDSTsVJwDCUemYRvTlw4EEmJOIEFf4tkbTBjvpGQHEw6Q cQYWs8XtqXTY3Z7bRAl6DAs9Q0W0BobNsSdMSlb4NoyywpUmmfYI7SkOD4w5PDBGewR6v4YK t0KHakwLF6n2uJGIu/HevUTKU8o3WB4UadsZ551ubibxy6nHssNtXam15Dr5bWrV3KoBw/Dy 5r7X/0NMrcoGhFKY2oIXwEulmToTGqm7jNqwm4VhshQyIdF4KyCo2kuFwUwvTdbMRPabb9aJ KR1H/led2JUL8Zvv4NPXif+rVizseoHNvf48E7/+CbOM1otVvZoy76JabXpqoPAJ9wnqjoah f+vD2LCqucPhaJm5xNLV0tPbJdwtt1vP7kMHWxYWWNzRAhyTCrNiBWX+9onO0aHe6qyR4aEF Q3tWDx3vHR+dUDDPvzBrVu5y7zL/mqzV4ZUxn0UdYEHMIBpikK15xaYBJmIS3IdJD9QZ9SaH Gzp3YORs6kB1wFp8RpzED+G+ACsPH2jTI9cqYKGRPKRb1QG3o1z7ZmtusTpDJeohvBMFyPMN VRWFuXC8hCLkeV3SynCZb/iwNTe0VzN1mpJNV5ppuroJtWlqStLyZfBAqpIXmuw3XtGk9j5T sXzzxZnyEiaD98rbG4AwcgMgarnlJbyB7HPz4OhyOy1woyXAhjeVFzMwAvVtQd1ZCPtwpy0D q3dM3vrPWcOeT+TsWxsqyCobOmv5K6ldJ75LLf7kE/ybHzGP7x6+v+Sn1Mv/+Cr1cOqnzoPH LcRvYf0nvHrWmI8OfN51iNOccj84uGLRzB4rx+gzp+hbe4+c9PnSTbhq88jkM81j1lgDebcN wObHtuOc175ITfzux9TzO+sfmHx2yayL69744sqXYOO0D9/f9WHqqz9/UJjnw30e3tB52YcT Vq3vtPb3dP79wImqkV03oyt6e/twZZLytLJTeV/h+jB9zE+yjB0TESmAKTjZxAhIUczmDxjW yTAsY0ZEMbMCc5gcRiIieLMuI5aFQ9AHMttIJrzOcbKelV0KaqdcNwt6TqRUqA2XCWuthPK3 2ewsRUQlGmHIfksjXmP4u39PAnaIx6/EK9WvjcxLlXql8mrljVdAVmaKcqxW643UlhkUhd0o 4tRNJYAIWiUYNiursqX0xvivBE5FNyWU2gEJRY8BbghC21LrWU2TS7jEeDePsWGyvnkZee43 77zTkCrDo19kDlzv9WJqC2HJuuapQK2+6W9YF3cUfNNCtFfPm+rDXQTd1cXXRRthH6xNZcYJ 48Qp9nHaHHFucLm4Ivip+LHbBrJ8viFPi2hhalZs+SHdPMAMmtsZwKdHZ0IvusSFAlxOyGmm URbdRcMsqhEzUDFSVWD6tUUyDRKEcEKXqzyjPdM9Szysp5Hk7rsRfmm6ESFoCQsnM2X6N8Iv ht4VjLfpaCqB4lp7yxtBNuP9IDd23hItYK7t8xb1nDq005C7SacjExua7zu17M+pC889fGnX l83l/R/tN2vbC/cvfJkdZJlS3Lf49u//NLYm9e8/1jU9gHvjRXjnWzuOXf8y+XJ14/MbaPyF QYNaYlgeFEHF6JxeXubGBe6e7p6xr5VvizmpGC9Gi/Eido440zRLmWte6FmN6vAadoW41LRM WWF+xPOR7R2HPYemQIOanzaa1oY2rbQYpWuoQFNQyIuUQKj1ZvBz7eEQz+WH7ObQ7DclLDWS iboan23VNSCqFdC4Cvi3ET9+oJ13dj3NR5KJe3Nnu26Gtly6i7jWtv0ltJXxXH8Ju9sTyTZN LTzZQuIMmWdR98Eoa89kbm6E1xGM3FpPxNxKbjxlxj1fv3n0u6nTVj6SunrmTOrq43evmDpp +cMTJq7q0HPtoKU7dj24ZDsTKNgwZfPZc5snPFVQdHzVkTS4ZUcfewsPnrTsodFjVy67nu67 tv9LtQ++vCOTBeTuNCr7luttmZzyhCh1yJPL+PZyd3kYs4L5jBHmyWeYMzKTz61h67iX2e9E TmZxGfspSygS0qUb4IcWpO1TEvZb8RFtWdpmGe3RfXY3Hf9Kv80HV4pGwRr7fLfRMj5ZEmWO YVktU7wniaKWKeiTZcQRFhPBJCJRZghAHdAaHXRrMYc3c/XcUe48x3K9RDpmKhawJtQK9eDI NZIVusmktZjCHUZ4iXpzTUZoAXBJZWXm1WlYQASoo2G5UcdHdYcgquBR4N713kG96wNGzpxN f27kyn/BJbpNAkAiFvkSLF0Af3A0h+uGrjvjuJnsAEucCVZ3JuiD749C92bG1tAtNAyBZ86i 9X+Zwn4cxvAVbOuPkc+x0LyRPJhGzVcvc4eaC8hnza9d30C+/i7FUoSwGpxJr5FNr9CzWSaO icrxcSTYAeQJ/GssFzWgwKvic5Nu5HCvVGbejLrxn3gcYPYjoNhW40eAoSYLA9f958w6eu68 1GTcYJy7VA+yXFzgVYbEEbbzHIfJaywTFdCr0jMjKGH/x3lxuIy+WxnGDanZZ87gR1KT1/F5 60A73sXsI/cZeWcTmkurmH5qeXfiJz0nVlBq4mWBQyxGHMebvgc2AMCKBLFStmbyJLSyyGwt lb7CDFtJMI3DY58yc7th0Y3IudocTxovTBjos5ne162vhcfjDhpPZEqM9dp2J1p92fZEMbMP ey5fTn2bWdPn35L+hssx6qRm6nLMOpwdLr4vskbZk9vhKi1lO4rd2F7iPOtL3CWroCBabHJY D/KSM0aSmhtr7gFuQl+ernUzbrPxn8OM96Tht3LSRasH6A0n6b8QS868mimMNyoO46CCS2w3 Yk+0sshQATa25ti41LWPf5/6ecax7rsWf3qAO3R9z5ep61sfxeZvmf7X9765/+5jRrYDbQOp zjGQ4yRq+Y7qeXBVlglJ8mb5lExkjhCTKHIgYgKfrAVvnpgyoNEgLxwLIqOZsQYmiJbZsPRu kzPB4BpVAMmrN4sdQL1lZttg3DAtOID1tmP/T2/PAh5Vce7MnLN7zj6zm91k89jsniXJ5mkC SSCvlWwghEcaEkkgJPJakg1ZCEnIbqCoVxcVxfqIRdFqe4tyix/KpSyJQAD7AWJrBV9tLVqt b2rr7aVoq1YqSe4/c87mAej19vtud/ef+c/MPzP//PPPPzPnzJkl/3j22WE1aOwTpOUf1WRw uFbZ+UT36Olx0SEwMxxfDs35x8FYGzUJf/QaAeETweGoo6EnHyUwK/KGtxoQPhOcWFhcidna fCPfgTvUHbp31DxdDqlFQaNWa9ScRtLqrFqtTs2pNZxEsJU+cNPr1BiUCOuGSKJXo9XCiogg 0ThEErwavWaRVxum+4bwQa9Bp9NLiFtUR/rZ2ufgAH0PmSQcMhiV9c4XHnZ3clj2PpJfOAb9 N8tHgN0p7+1W0aUO2+RN9+CbwKmJ2MCK2Onue1Gv0fNHRz9D3OhnbEBolueX7IVcZk0AeLq5 N5FtvxkzFC7z+NLCTMqHz/w3dtXPmbUC2z8YPkzWc7Uj1TfdFLwf7780OPwAnbXFwWjarPoN SkZOPM17Z2ZKSQrR8JoU0hRz2HLY/rzlefuXKWpM4pCG56xIo1KbkUYUTEijE0zJWr1gSjDE CCabMVZtthktnNVmjCdxNmMiiUswJJG4ZK2dsyZrUzhrgsGhNicYnGpzslabnKzcKTIkJKTb jFabzRhH0mEqiExCulk9hA95S4ywdoWGQMkJCTYb0sZZrWbTTCNMOTgyEyU8aLA9aEg3es2l dcadRmLsc2kfTNY8CPmCfh40l8obgh4flJ7sUAbec6ZzYz6zRKaoPZqwm2uYnb1AFXby5suY yz60Ey7fYLOkTi+0uKa7LIUcBZj7cfTRSKqFviRhca1pevL5BSMXcH7TQ024vOnhpn1nanD8 yItNDy0Z+UVTHy6rGfl5In5qB163A+8baaCwY2THjpEl+KmRJaQCr0N49P2RAP+9kT/DzCfJ q8cV9HwxlMjPrmSPA6Nni3HTXXFO/smRwK230r7dgz7gy/lT9Bxzr76fC6sIp1JzIlEdIy0Q yJGWAeJVH8X1MNWuh0niXrxX4kmSyHtYD+8TmlrksYDeekeJ+Um15+GTkGSSH7vI7+BZpuM4 jON6uDOXRqC3bNmDHx0ceW7k5CDVq178OF/Gq9lznbneDJUa84IGpXM4nSNCOs+r06cSvJO8 An3ouAolaXCiSMscqxKMv3R/j4cVyLbVseGCbeDiyy6VcL+kwK3YM/zDPVfUOEz6eZhpY1hp EFpjmA1AjVVeTGuskmus3itxnEeNkkRJhVVKjT9aDvX1gJ2FKl+lxhhPpz++/NJ0Dl8a5c6Q LSO+QVyBPYMj7XRuSvdLfaycDZGNtnjreb46dUlqe2pQc7tGHUjqU/VogrrbVLfp1BnxGi4h I9sRn6LRWGId2dlZWUg+KM/pcJiRmOBWN6a79Um5KQ5lrZ4z8dCvL5S3DCYt1On73HTnhrxx QzkDbHxnhpGkYleBvCXInQqiLChma0zAHyLuPWeC7Wu29jeFT94z8gC+dkvJgprqW3888hZe v8I9u6Wsccc9I/tUR5uP+Fc8UZjxTHjNgVXTuEXm+Pba+d1ZXz0m6EvWVS/aPI22RSaI4jXe jYx4m9cQO0ReEEksLpBN+MswF7QV4ZkOZrWf9S4AJItkavJNpbhUOx9Xk2pxvqbOtAw3kkax RVNv6sStpFVcq7kRh8QbNXfjreJdmov4M5KcKLpxlpijKRV3i69jgd61PWyKKyK5sfQGz2ve DJAEKdNoiajVpmNixZhg+pYW8dGJilrrMyBDjlELNjzmaVEUVGr6hnMuEqYYHjNiZPQaVxnD xk+MKmMIaW/GeD/CdagbjdIjd2JMIRe9NT3+6gd9BHCOnTJhGma70/4A7fIH1hzK7gsw8Tny vHDDcqRMDQ9mYbdITwKTxSJSIcHVs4epeKiM5MM8NzQz00+3d74zEENrp3h/OpxcqhHjk6+l 24AHbDToS682vpRYAZLix+9cF07H6lS69xELMwpdcZnkJ8GlI3Vc2/DJ7s1r8Z+3c6J6+6bh FTdqfgh9t4H7G2mBMUEHa6w3vMt2Ju5PJBeECxbyrvCuhbwivGIhx4XjFrJf2G8hO4WdFtIv 9FvIzcLNFvKV+JWVdIqdVtIitliJXtRbidUiCjZ9jA5xMReN3EViNBCs9xiQh65R6735lm7h FqEfpuPYUmL1GA16T0yM0WtLKjL2YaFEhBkc8nBcP3SNxARlEiefp2oaPse2xzEMVdCecd7E 5u1Kt6XiR/IdZtS7YcMGvEH54OU4LpUe6VFsg4WFawKOrSel7Otzi4s4/GAU45/71e47PPVZ 1bbrm8YxkNRc7mOyUPUCk9Rb3oVMUp+In1gJFmFa8Z7wnoW8KrxqISeEExYSESIWskvYZSHb he0Wcqtwq4X0CD0W4hf9VtIgNiiSitHrOGTda6Gy0RtAZEYQFhb3CjRgKgYBEuTB2Bjj0YO8 Mgy2mXq9gYrL0EcI50EgsgxEHzavZdKiFoO+aeFhogIdPccmZufl7ZNRf7KwxuS0YQPIjR5b WUif9LP9lYUT8KaTzpzrc2dM596IIvyXIKDy67Lmxq9sGMeoVejkPsbXMlmFvO7fCB8K5IBw SiB/FfED4uMiCYq3imSx6BcJEbEIElAq7GAVxjqoMhqrHateov7fN48pg1Kr4YnbQlG02Wm7 T6zCTVfjlvLo5VrJb0HzE9Ad3gU6rNMm42Qtr9Xo6f+rCGodJgn0ZHgB8ZxoizXAzFhFz4pn R8Ub9DorL3Ai1qpVOoRMkhVbj6thBbMbpjM7vAbVbuQ1W4pQYmKPfGsxp/YzqrWe4eVguOke 8ujGTvq6e3SMLY63uTMK1QJVTkF+MAJVKHZ783bOs+Dvc9Y1W/NuueHa7u+W1S0o2Rgq2MLv u68k62BV646i3PuyjdO3La7bdu+Cxf15ibR+LbCEyWDrKjeMgSoOq/5CELdFwveDbVyrVtSF LjOUuxHyMmhbHlv8xH7++chfEBndNXIdLmNPkmPRI95aWEGqyvlC1R0qlU1UqQQexl6VBWGD jnBWPW9W6QR6XpdOLdjNMfeDVGy2JNDYdK32fh126ip0dTpOl2ix7hs/woz17oUmdngZqqhl j41ilcdG8vG5hYV3mkT5kFijaIpxiyZoK41RkA/DoyeY0QbH8j5Fuj6id1bveHqkY8oMZ/GM pwsrH57Pf/yrX1288RHj/O38sq8ee662jY7gFxCsjNmpngJoqscLK1mCea2H3lfneU6r9WiG cOKA4FGBdxj08Yz+d59TqQ3TrzKXNJ23Fch7kl0KXHgJv/MSfvvll9gHLAfbCc32vRjRVm8+ TAp0D+j+Q/eJDhQG0y2D1dolWr/2oPYDraDTGgW6H0bwqNUqI6/bq6UdI1Xl4dkWmS2wZFIL Hl5boitT5fMVPKE7tB+PiW6XUXo/eyelwjQ8PMlAIrm7I+UctInbqF9SNlJHd9REt1MD9y0w z9FDP3GgKeh2b/49SXcnk5uSbkomq5P8yWSd3mckLfpGI5lhrDLSgVrgkSnDbEaGLCt2wLR8 vzfVNcXlcWqdnilTJI/L5UArHF3aFba1aaYVkhmb16YqM1B6YMZnlOPz0YH1Cw/bsHRO3imz HD5o+XLsZgZcuWWu7EnlaV2MRKC1wm9gR/y0tGMlP9kUfDThSOLfz7wO3eG2pTOSyNBLOJAW u7a2rDxn9+qywM77H4l/6c3/emLVrtDCBas6Rx5me4myoMYRui5FHx2INdIlcJnBXDQPzxXn aTitqNOQvTwsIDHmNVoeJhzuFFdRphZfhBW9hHmYe/DaTJ29CFOHLlcHwefpstVCQyGJyiGo iU7r0CNRewwfpHNWWG0mI2Gq6BWJuEBfAfYoCSYmKvV1KNFAX3Oge2PojIM+t/HUfraBWvdL Y3NCWMawm1Ds6fgGOgNR3jR5Dvey3ZTs3pSGTHGV4gQXm1QcTCwlUxJLozOGGcXyjMEVl0Uu 1M+79DKfdOmFZm7P09zetgX79l0S1tA9/b3oPMz0D0FvKfE6UZeGXBS5LpWg1nSB5byowl0V pA5m+Yl6eX7/2XLgGZrxnMeD8tlNoWlT0+ms3iw/ZCJ4ZAPufwr3j2w4j7fvof6ekS52vj/5 qP33pcsdK2M8n6Nkkf1byK4PM7Kj/xxC7RJ7AgXLSuW/stgeUGHmyEI0e/wPRi77G6kWNb3t UIrWC/eiRNXz6MfkKVQJ/uOkFB1VLYHrUnp+K7qJR6iCD6LbAO5QP4XuxM+jbRCXBtc1ANWA W8CvAtqtQFsP+J0AC2hayGcZ0N8G6X7Af4j2QHmtqiWjw0DnAtgGdLMoPdBpWDqEioEHNdBO Bf9HEPYQ5P8U+B6AxQBLgCYJfB/lD/x3lfDFcH0E0rSr/gALvVJ0HMLmAW0MlLmU5g+wS3Si bgin6WsBGiCM5n83QAZ5Ha2g9Qf4CYSrIT6OD46+z/8n6gHopT6lhzwzoW4NAHOhbp1cCvLi O1ELfn50F7TOBYXfFqhDFk0Hsp6B3se/I7Wkh1vIdXInuZM8Vs1QPaNeoj4vVAi7xQXiOY1P c15bq31Pt1Zfo/+eocGw23ib8WcxBTEfmM6aX4/tt2RYnrHOsN4U91X89PgT8X+ypdleSGhK xImnk6SkpUl7khckf2p32n+a8kTKJcfdznVSmev7rrNTzqauT9OmnUrflf5q+iV3vfun7osZ BzJvzfxR5ttZcVlLs97KPpZTn/NRbknuntwz15Res/6aF/Pm5P06X61oTAtaCraafggyoXw0 i1pAcoD+tROE2XDSmF5VjekYZv8dhpVUApqv4BxKRfUKzgNNUMFVYF2+q+BqoL9dwQW0Hd0N qcC2wNU2nKLgGGnxbgUnsNrar+AcqsY/U3CevlKj4CqUQAwKrkZGkq7gAk4jhQouogKuScE1 6HvcXQquRYS3KLgOzeDjFFwPOlGj4AZ9NX9MwY0ImXFVYE0gFLjB3ya1+UI+6UlpWmnpVKmx wy/Vdnd1hzb3+KXZ3b093b2+UKC7K0+SKjs7pUWBNR2hoLTIH/T3bvS3VfYGfJ2L/Gv6On29 0VRlLFBSQsuW+HuDkF4qyCudymKuCKhtZN4eKRCUfFKo19fmX+/rXSd1t38tNzT3QDDk7wXu A11SCMgW5zXkSfW+kL8rJLmlxrFc6trbA61+ydfVJq33bZZW+6XeSWlb/b0hH/hr+3oDwbZA K80+mAeqEUBrAEIANyA/akMSgA+ufYA9CTANlcJ3KmCNqAMoJFQLK9AugBDajHpYyGy46gWc uj6WF6XIgxgJVaJO+EpoESupA2KD7MoPvh/oN7JSKwELQNpOFrMG9QHmg7DLyyqbQCldRluG lrAcg0r5EioAHijv42n+d4paqOf41U+BJsA4pvIIsfq1QR7rWYnrIKwbtf8TsonyTvMOMZ5k 2QdYXEjJbTFw18DkWM/S+iE2BFduVuKVvNQBL+2QRytL7QNqmieN3wz+ahba+w3ltrIQ2vby 9VqQbS+jbWO5RrkPAk+VkEs7k8q3rfOVdI1jWBWj3MTKXXNFTa5h8uqGGsh8LWQxHRBCWz6I csck1MtiAoyvBnD7mAzkNpd1uQTa/BqmhyEouwzMaD6US795QC/Xaf1lnOZBnt0Q+s+lymfp 1gOv+YyXIOsJXYyraMhKVjOKfxfSRekN9CVFkEUjmO1qgNkgdYrXQSiVUTW432HhcyCkAVza 3+aCrObAt5aFNkKYgW2I0DItlbU5yiPlW5ZxNFzWvB7grZtR9DLaqJ7/31tdQpmQivaqrAk6 GVDsQB+zAlQ3aRmbIUXfGC9Uehsn6Oh4W47zKevwekYvc0h561Q0p0vJnbYQzYX2FbkP0T7V rJTWAfEbGR3VsKj2y2WGvkFiQVZiCHTAx3KXAAIKZ73MjgZYOO03nax+7Uyq65kca1nLdCu1 6QYO/RPSblJyulopbUrvpbq+GmoQUnhdrbRTl1KX9glyGpdIK5PDuLxkTvKuqiVXlj1uCzcy +9gH7mrwZSkHmbxDV8l7MZTcycoNTmjnccnLrTLZHlGpyGUFmeRpv5ZtwrdpYYmF+BgetSrR cqndbFNGPSoveTTpnTBC5Y5R907Q0nGZfrN8KHfrWf5RLeqelEsXu+oZi6G1kuWQiaazfrKJ acY61s4T+1K7ojHjvHUDbRfrsX2sJSgHHWM1lsucqO3R0UDuu3Iv61E0J6q1l2vXN9V5oubM Z/K5snVpK9ASNkC4n+UeHUfk8ruUkafrspbqvaxVxvMOMutPR/42ZUzbCHR+4OpqOv/1OhLN T+6nfqUd2ib1wGh+V7a2LDG5BiFmF0IT+na0rXyXSfnq/fKbLFVUvt9kfVuZlKOj/GSe5BpR PSqbkNtiGDEq4boEFaFiGBOLYXwsAX8qXE9lMz6J9dwacIvgmwlhWUBTjAoBJIAZoK2lDMZz pVCt1Pzy2k201tGRgGqoj1m/K3tgD7MZPiX1RqaBAcW+9Cl20g81lpRw/1gtKRf/zPgcjcu/ jPfJYzKF7ygz5i5wVzMJy7rbx1y/0sflOi5k/egGJS6oaFuHwnH72NhP0zQwPZbY3KVdySOo WEZa4yZW46Ay1vj/JXWtH5N3D7P5QWYnMhjfspavn2ClruzVPqW3dSojTxsbB6NzAJpTH0st W6+J9s4/Kd3X2w95Zk51nVJ0Kilymdb4ISyghN0wliLIrEdICZNl1av083+lZH2M8+jcw6/M C6XLZEvHvr8xifgUqbayVG2KFelW5igfM/oA4zA4IX589JfnxpsnpGpTtEueUY+n6mMWL3dS z/MzWUVboZeNXsGxkVRSdNjPxtMmpW/SsH+NLP2K1Rm3gG2sl8raErhMW0JMW3wsX2ls3hGd twVYfGBMP6+UhU+RR4DVVpb4ZJl0T7BQPqaBGUpfl0u4Ab7d/++yUe4ZodEMujfgyk9lKorh bOgCwCgAh5zg5gPUAawE6AfYCaBmdDSkG+AWgOMAn7AYL2cb2F7oHQLvbuYNru0sYJc++XLZ cnY52NQs+7XXyX7VfJmsTCabViQH582S/Yxc2Y9NLwhTX2soOFEZz8WjVwEI6gEXk+dQDMbI iR7j4lAEgHBqJcTLxQ6muQt2Hud4hDnCYZC9c/QEhwcM5oJKLRklF1AscpK/kPNyDDk/aDQX 7KxcQD5A+wGOA3DkA/i+T95Ht5D36Ltv4FYA7AQ4DvAKwAUANXkPvu/C9x3yDlC9jfIBKgBW AuwEOA5wAUAgb4NrIr+nd9eYS/EKAEJ+D66JvAXVegvcGPImYG+SN4G13wwUlxYcYUhOvoI4 0xXElqwgsfEFQ+TXAxeznEPkw0Epx/lY5VTyGooAECjsNcj8NSQB1AOsAugBUAN2FrCzKAxw P8BjABEANaQ5C2nOQprTAC8CnEVTAbwA9QAieXUAihkirwy4Zzkr48nL5HlkA6G+RH7J/BfJ L5h/hvyc+S+A7wD/NPnFgMOJKnUQjyCNCXwT+PkQryInB9NinaOVZnIcxOMENx+gAqAOYCVA P4CaHCdTBtqcsZDJMXRaREA5gD5m/hNol4i8a51e92zQMYk67rJrAQNnp7TTTbzuhx6BS+q4 79sOGHXct98DGHXcN2wBjDruzo2AUcfdthYw6rhbVgJGHXddI2DgDJEfH07LcBbXrcNSZQzZ BFLaBFLaBFLahHiyiX7RRZ7y9sOB7GyQ2KPenKxsZ/goDj+Dw4tweBcO+3H4ZhzegsMeHF6B wzk4bMdhBw57cfgYLgFRhLH36UmXpd4EHD6Nw/twOIjDbhxOx+E0HJZwsXeIuAbmFzJvDvMG K2m/Av/amQUxwKMLJOoCtXZBtz8O7isAo+zKC0TSFJk40UH9KYPZFfJ1XllBd+U8cgoSnoJm OIXeBeChgU6BGp2CTE5BBjHgVgCsBDgBcAFglNDdUe+SKcB4P3NjwM0HqABYCXALwAUANWPn AgBB3QqL+xlj+QrTdfSKnILvFPi6iMubYrKbckzzuH47jnHgOseogxSj+HgwcbFm0TyEDYf+ bvjy7wakqdSQ+0g/SoGGuF/x+wcupjiH8A8G3MeclXH4YeTgQetwKXLjdPBLUJBdT0d2kfpF yE72gl8wYF/ipIe1unOdR7GRpjrkvGg/5/zYPkQA/ZP9mPN1aYjHA87fQsjeQ87X7Hc5X8gf EiHkGfcQBu+oxEiP2Euc+04z0i0Q8eiA82bqHXL+m32uc52dRfjliBVBuPLGOBe5W5zzIL8q +2qnNwh5HnJW2Fc4PTLVdJrmkHMqsJAjo9nAbJadFZrqYBkuLh7CHd5c4SFhqVAnzBAKhFzB JTiFFCFZsIqxokk0inpRK4qiWuRFIiLRSvfS59AHC1a1iZ0TyHZ48ww3EeoS+ekDwSJBC1DE wtWQmoZZuCZyohXVrJYiXzSkDmHtdS0RVeosHImtQTWNsyIlOTVDwuiiSHFOTUSov37pAYzv a4bQCNk2hFHj0iE8SoO2JtO/Yz+CMDZvvTeZ+plb721uRgnxGysSKmJnmkurq67irFLcCfvZ EybhKZGHahqWRp5KaY4UUGQ0pbkm8gD9v/Yj+K/4kzlVR/Cn1GteeoSbif86ZxEN52ZWNTfX DOEljA5J+FOgA435lNGJDiRROiSJDpnuUZkuHdIDXRr1gE6jQemMLl2jYXQ8pnQHgmlzqg6k pTEaG0wpGE3QJk2kOZ0ONOnpjCY+jE4zmtPxYUoTmclI7HYgcdgZCU5CdkZix0mMZMk4Sb5C ctcYyV2sJA6P09hlGsN7URrDe0CT820//lk5OXiwvLl1Gf2v+1Wpc/wAqyJ3b+xIiIRXS9KB 1mYaIUU496rVrR3U9/kjzan+qkhrapV0oHzZVaKX0ejy1KoDaNmcxqUHlnn9VQPl3vI5qb6q 5sG59UXFk8q6a6ysovqrZFZPMyuiZc0tvkp0MY2eS8sqpmUV07LmeueyshDT8fqlB0Q0q3n2 MtkfJDot6OuqZFfzrHhTz0ymvOWuhJuTj8KEZA/S5TRH9KmzIgYAGnVN5TWVNAr6FI0yQnCM EpVwc7kr+Sjeo0SZINicOgvlhPqCfShhTqBK/gXhA0GhPipw2c0Jft0H4uZEvL6qYAihmkh2 Q02k4rqWpQcEAUJX0SpFyqJhOt2codETcmAeBJbRQI4bI6RhHhqm0SiEV7Z/3/gLKUdgonFs EHsdGBaBzVzEUdNIwBQ0Kv8cfxSmS3R4CDZDBYM4BwejeTC2lRMxEK1vFEJ9CqbIIaT4cipI EoyKY+wDacBU/Q+ZM2UyDQplbmRzdHJlYW0NCmVuZG9iag0KDQoyOSAwIG9iag0KMjQ3NTUN CmVuZG9iag0KDQozMCAwIG9iag0KPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yDQogICAvRm9u dE5hbWUgL0JBQUFBQStBcmlhbE1UDQogICAvRmxhZ3MgNA0KICAgL0ZvbnRCQm94IFsgLTIy MiAtMzI0IDExNTEgMTAzNyBdDQogICAvSXRhbGljQW5nbGUgMA0KICAgL0FzY2VudCA5MDUN CiAgIC9EZXNjZW50IC0yMTENCiAgIC9DYXBIZWlnaHQgMTAzNw0KICAgL1N0ZW1WIDgwDQog ICAvRm9udEZpbGUyIDI4IDAgUg0KPj4NCmVuZG9iag0KDQozMSAwIG9iag0KPDwgL0xlbmd0 aCA2MTINCiAgIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+DQpzdHJlYW0NCnicXZTLjtpAEEX3 lvwPvZwsRri7um2QEBKPQWKRh8LkA4zdEEvBtoxZ8Pcx99aMomxA19X1OFXdNdsedoe2Gc3s x9BVxziac9PWQ7x196GK5hQvTZsm1pm6qcYPib/qWvZpMpv8j4/bGK+H9tyZ5TJNjJn9nA7c xuFhXtZ1d4pf8PH7UMehaS/m5df2yE/He9//idfYjiZLk9XK1PH8jPm17L+V12hmcH891NOJ Zny8To7/HHl/9NE4frCsrerqeOvLKg5le4lpssyylVnu96s0iW39v3W+oNfpXP0uh+dpO53O Ml+snsJBBAqhxUN4CLeDCDzmIHJa3iAKWjKIOS0UC4o5xBqiEIgNRYDYQuQMvaNg0jeKBcSe PqjNZrQggCVPTgt58hyCPPkegjwF8ljy5CjHkicHjyVPbiGUBxVY8gT6kCffQpDHo2pLHs8K yONZAXk8QysPQjvl2UAoD0biyFOgo448AaEdeXK015HHryHIUzCAzgfdceTxIHXk8UBw5HEU 5BG0ypFHWAF5BD1w5ClYDnkESYU8DthCHgG2kEeALeQRjFHII0AQ5UEeIc+aPuTxFOQpGJo8 BRoi5Am0kCfQovNhUp0P4IQ8glaJ8gDOk0cQwOv7wbC8vh8KnQ/ugdf3gyZ6fT9I6snjGU3n Ax6v9w3YXu8bmujJI5iP1/kwj84HM/XKw6Q6H3TUP3lcZhEgZBQIECwFKgjkcfAJ5HGYadD7 RkuAj0N3AnkEPQjkEVQdyBPoo/tgwz31sY+eKwtb9nMhVvdhmHYhljF24HP7NW38XNh918NP f/4Cnz9C2GVuZHN0cmVhbQ0KZW5kb2JqDQoNCjMyIDAgb2JqDQo8PCAvVHlwZSAvRm9udA0K ICAgL1N1YnR5cGUgL1RydWVUeXBlDQogICAvQmFzZUZvbnQgL0JBQUFBQStBcmlhbE1UDQog ICAvRmlyc3RDaGFyIDANCiAgIC9MYXN0Q2hhciA4OQ0KICAgL1dpZHRocyBbIDc1MCA3Nzcg OTQzIDcyMiAzMzMgNzIyIDI3NyA2NjYNCiAgICAgMjc3IDMzMyA1MDAgNTU2IDU1NiA4MzMg MjIyIDI3Nw0KICAgICA1NTYgNTU2IDI3NyA1NTYgMzMzIDUwMCA1NTYgNTU2DQogICAgIDMz MyA2NjYgMjIyIDgzMyA2MTAgNzc3IDY2NiA1MDANCiAgICAgNTAwIDU1NiA1NTYgNjY2IDU1 NiA1MDAgNzIyIDYxMA0KICAgICA3MjIgNTU2IDI3NyA1NTYgNTU2IDU1NiA1MDAgNTU2DQog ICAgIDI3NyA1NTYgNTU2IDU1NiAyNzcgNzIyIDczNiAyNzcNCiAgICAgNTU2IDUwMCA3Nzcg NjY2IDY2NiAxMDE1IDU1NiA1NTYNCiAgICAgNTU2IDY2NiAyNzcgMjc3IDM1NCA3MjIgNzIy IDY2Ng0KICAgICA1NTYgNTU2IDU4MyA1ODMgNTgzIDY2NiA1MDAgMzMzDQogICAgIDMzMyAy MjIgMzg5IDE5MCAyMjIgMTAwMCAyNzcgNTU2DQogICAgIDYxMCA1ODMgXQ0KICAgL0ZvbnRE ZXNjcmlwdG9yIDMwIDAgUg0KICAgL1RvVW5pY29kZSAzMSAwIFINCj4+DQplbmRvYmoNCg0K MzMgMCBvYmoNCjw8IC9MZW5ndGggMzQgMCBSDQogICAvRmlsdGVyIC9GbGF0ZURlY29kZQ0K ICAgL0xlbmd0aDEgMjUyMTYNCj4+DQpzdHJlYW0NCnic3bx3fJRV2jB8zrnb3FPv6SVl7skk IWQSEpKQAoEMJaF3CAkQSQgJhJYKUgSxASIqiGIXXBGwBwI4BBXsuoq6u+6ublF3Hyy7GnUV WRUzea9z7kkBd/d7vuf3e58/3pmc3q9z1XPOpK1lTR0yoi2IQ+HaVTVNt6y+aztC6E2EsK12 bZv6SeKXD0L8I4SEafVNS1e9Mv7MaYSkbEiPWrpyff3cN66fhZCxCaERS5bV1SyZ+PVBCaHx 70If+csg41D0RkhPMEI6edmqtnUXbavehzS0Rx+tbKyteezQlscRmqhAumVVzbqmRhIhkL4e 0urqmlV1P+zKPgbpAwjZSpoaW9v2Yn8UoQXnaHlTS12TdeF9BQgt5BESN0Iehi/9wHhYpGnC 8YIo6WS9wWgyWxSrze5wutwery8uPiHRrwaSgskpqYPSBqeHMjKHZGUPzcnNG5ZfgP6f+Qid yMvcQeTjU5EHoZ5PwX1Gw2hDz5e0LNrY81fyV6h8POa0zzPoNNqJOtBB+B5BCubRErQe3QTf 59Hf0Q70C7QbH0OtaAM6APFT+FnShOYDJrlRE3oRZWOu5x30ONqETUhENvQ6OovK0e6eW7Ed GZAXjUUt6CT3Gvf7ni9xGV6NCIpD49AsdIL7Er2HeTJS8AitPZlIQDJ6BZ0lU2DeVuREBWgi moYWwpwOwVxfRn/EacLYng9RAIXRbBh5PboFPYR+iW8ldWQNOcC9JsztuacHRoGedCgVlaEG qNWKrkT3wDq+wnpsx8/jjzkPf1/0m+gPPYBpaBDKQ6NRKVoDq3kJvYHeRx+j7/FcXE9CZA7X xAv80h5XzzGYcwLKQZPgOxXNRdXoKnQ1QOx+dIQ8xO2MvhT9J2AjB99MmHUBGg7rnw+wOov+ gK3Yi1PwIDwBz8YNeD++SCRSRK4hB8g/OYFLg28+9xB3nPsz9yH3D34Cv47/RDT0pPVM7lnW s65nX8/pnr8ATP0oDU2BPheiK1ANrOpKdA26Dm2H3boPvvejfehhdAJF0EnUiX6DPkR/Qd+g f2IzzsEjcDGuxyvxOvwkPo6fxm/jX5MqUkN+Qc5yQW4+jH2AR/w4fgbfyv86iqKF0Z3RI9G3 esw9R3te7fmipxug6QeYpwBEM1EFqoORb0C70d0w4mPoKdQO3070R/Qn9DeAnAxfBTuwGyfj wTgTZ+F8PAPPxPPxUtyG1+Nr8S14F74b34fbcQfM5jn8Mv4D/gx/jb8ByACYiYFYiJ8kkQyS SYaQaWQp2UZ2kcfJcfIMfN8h75L3yB/Jx+Qf5AfOyjngm8SlchO4SdxCrpFbx63nNnOPATzf 4D7iedg/C5/GZ/DX8w/zT/Fv85/zPwgG4RZhj3CX8LHwsYhERRwpzhCXiXeIEfF9iZNmSvXS Zulq6VrphA7pgrrH0VGgjiOw0gEfshA9iH6Dn0Mf4IOcgzyGZ5BDeC82cx60grsX/0qYjG4k xaQdTyUu7lu8Fq9FTu4RfB6dRycIT97DIf4Q3o+eAUraSVaQdbwFz+Mf4btxG/9rniPn0EHy JR1HdPCHYLS1wN5W4VEQW4pWoQeIA71BDsAuNKMX0AOiTHbBvt+KUskENAxPpHtDvkKfA3VY cQlaDnTSjR8S2siDeAP3GTGictxNPsQjhDZULyroGtxBpnFv4HNAec8AvkzGy0gRXoy60Sf4 F/gTMhdNJdehh/ilwrv4zziEpwnLAP8Q/xE3kasndnLqZ4zoKXQMKOEsmsK9hhbi24D6z5IQ mkga0f3cs/hv6Bi+il/KLYNZriM8vg5o4XHUwU3gDWgMOsYdQ8/hw9zvcAg9xa/Dq/GentLu KvSdeJB/kjsi5PPxPb+M/gk/jN/p6ST/QAU9v+TmRpfi+3gv0OVVQL0tACEDegza3wcc4yDS QSwF6PEWwFcn8DYZqLwMONcUdAX+BijmOoBSPk5D00gSWkFGS6roAKk3CKFwOFwyamTxiOFF hQXD8nJzhmZnDcnMCKUPThuUmpIcTAqo/sSE+Dif1+N2OR12m1WxmE1Gg17WSaIAm4hRRmmw rFptT61u51ODEyZk0nSwBjJqBmRUt6uQVXZpnXa1mlVTL60Zhpr1l9UMazXDfTWxohaj4swM tTSotp8dF1QjeP7MCojfPC5YqbZ3sfhUFudTWcIEiUAAWqilnmXj1HZcrZa2l61dtqO0ehz0 d8SgHxscW6fPzEBH9AaIGiDW7g42HcHuUZhFiLt0+BGCdCaYVbsvOK603RscR6fQzqWU1ixp nzGzonRcXCBQmZnRjsfWBhe3o+CYdkuIVUFj2TDt4th2iQ2jNtDloJvUIxlnduyMKGhxdci4 JLikZmFFO1dTScewhmDcce3uDec8/Uno3Da2YtvA0jhuR6mnQaXJHTu2qe37Z1YMLA1Qv7IS +oC2JKWsekcZDL2TQtGTBROh06dL0RZVFyylOdXL1XY5OCa4bMfyatgQ3452NGt94KjPFz7Z 8xHylao75lQEA+0lccHKmnHxRxxox6z1Hd6w6r20JDPjiGLVoHnEbIlFjKaBkbq+MhZj1Wls 8qw+cGI6o+BEQIN2tVaFmVQEYSGF1KsrRDtqC6EafCoxtGpfAtvQ0C6Prd6hDKf5tH27kKIE 1R3fIdj2YNcXl+bUxHLEFOU7RKMUOfoQDMp74+2hUHt6OsULaSxsJMxxFEsPy8xYGyH5wSZF hQDAh2ZUQLPK4VkA80CA7upNkTBaDIn2LTMrtLSKFscdReGsUGU7qaYlZ3pLnHNpyZbekr7m 1UFA32NMI3S261L7/iyKy166bHg7dv2H4jqtfPLs4OSZ8yvU0h3VMdhOnnNJSisv7CuLxdrt Yyu4OBKLkTiOlQImLuyrTBMVxnY+Bf5EhslLIpIOUJHlYLWsXameoPmV+kDgv9ko0vM1bcWC /maxabYPD12aHnFJ+pLpGXdwMGE+lUyeM3/HDv0lZWXAd3bsKAuqZTuqd9REerYsDqpKcMdJ 8jB5eEdTaXXvjkZ6Om+Kay/bWQmLWIaHZ1IhSeEtwBekgYQmHSH4FB4CGqJECo4igY/gIcc4 pJdo5DhGXp0o0HKCODy2Q17wnCekXCjuLp6mnC+e2l2MSiCu/ATe0OyANWBNAQ8jHv2kcmd+ CgvoIlL5M9QqeLXnUzEg/Aap6M2TKLHno7DVbM0b78eJ6RA6VfA8kZ7POgzWvPgIlI6GiMER 53DEj3CWKQLCST7OjxLSVL8/kSMOjiP+RHuR7TazmoYCJA1j0ZVp5hIyRdmebiMyUbgIHhV2 J/nSs/U4S4/1eVwgDXK5gD5vpicUUopxVqg4pJzB085XNU/tUi7Q1Lu4C5V0lXTZiqAQdYNT us/ptg0JCZuUl0JWW1ERpt7QbFwVgg+qCuGCACfyQXVQqlWxJefmuFxuKTU1mMQTp8OVm1Ng 58YHybWb1kd/uTd65oEb/oZr37/v++sTzvhfvHtf9IuH/3Dm9J/GkDEHux+bUv38Q2A76fCR t5ufvct554NPRB/64M9/3YxHUOjt6vlUWATQK0Dvn0QZPR91mKx56RROHogYVaM1r23ItYNJ Pp+vKwxwcj7maWEeFAZU8CTqpWTlZ95u4CwmQ3rGENE1LKEoHhXhhAQXxsOCmS5OzBwm440o gkeETYPSVVu2jVhsTTZii5DcjkI5fWik50xYD0MNfTUh3VcdT5NKUlqeGp8dT7Li34n/KJ6L j5CbOopeGwtI8l1Vc+h89/kQgLaquet8H2CtRVnKOeWc1ebuhWMVqqKBvUByuABm+cPyBqXS b+qwvPx8ClKnQ5LyBg0hwSRJBLC62RdyAfBJybvOkGnHrmo/OTTnwydKaq+46qu9HRca8bMG x5w9C/ZXjiucmPfiA8Uzynf3oId/iIJWa8ude/PUe2pLiwqrJ6eNvntx84nqda8tkJ2WUcGR c3InFCzInzs4obwsbdid1Ve+vhpMZdLze9CrvgI7TUJmtD9cphNFIup0kiDrjbyoMxuNkqiz CLJivNOIiQrklSgZYcpGYuT5GLZiyQK6B6cYLxJMZF1AECP4VNgsSTzPcUhnfMRy3bWekFc5 jzwlxQr9ngeaKinuwlZ3kbWoCHBw26aXtg3xhHoxEf62KeaXhJde2sZ8SSneprw0NDuIc+1B LsDhAJc6SJQGcyWffvPc+O6nPscl+OOigC6nWuj8sQwfjM4nI3HTH2/b/ATQdgVwhDtghRbk Q/eGCw/zh+wkwz7cvs5+o403Kz6LXTErzjg7sfoslkSEQRfDViVgMpuR1weEhYklDel8EXw6 nORMzxJLQHevFpvELaIoNsT7wcYgWLGgLBiqrMETyqoKFVfhaYAZU7s/QSUhykZC3agY0ANW LcBiYZUIVsnIzVokFRdTXEFVuTjA8MFMJDEY4OyBnHxAFyC4QAXOJUv27Vs2qbltzM27oruv 2ofHPtO+vLB+d3S70DnxyOoFz2wYZQl0P0F+mHmwasKCEFDVGtjcFbBqDt0elhUBbKQSgQiA 1x2p6Xks9ARZGB7kcOYRjoutHPgN4WC9hMgctx/JGLTXsC1YghCta/Ul5SnQ+wM82FzI/cCd wG5CxTi0YZryNTAMTxZNZYU2TFX+QRMQ1yAQKt4msIUPzYYGuAoWm4vX4NwXo2/RHYMe54Pl 8SPM10P4cHifD+dzBVKBnK+Ml8bLZcpEWyW3wLaSW8U36FbIDcYGU6Otwd7oW2+72ncjd4N1 h+0R23u2D31x+3wf+ogFGMRRsyo+03MGCeB4mHmQ4wWBiJJOJxhhaw0WxWo12x1Op83l9nic 2806WY301HUINitor2nhWU5AdyIIiTanwybobE4dxK1mh1UgVrOs1ycazA6DwUwJwuN0QA8C 9jjnE9m8UZcGwMPEY0uzWa0Gg14P0JRl0NEjeM1xAWMkE8qHgPGjjR7Z6ZQ9nj2CbDbTPRkc ymOhM4WF4WKzkmfOMuwzPGXgGg1XGz40cIYsX4mP+H6ph0lslA2GPbIq7BJItYAFweszG5we xeD2uMsep1sTouSGvYBpWcCyNnxNN2XDX6ivfNO8Qalqfp5uhxcyFa3sjJagVbzKOSpKBkTo PiogN8CDDFTCwq5ipYuic2yDY2S8TQehMDACA1GafunfeqiwsBAXFgIxNFe1AH7YXe78AkCT oD3fLko4yEiem49z/nF7gjzyVkK+i771/N3Dakuquj94do9D9npeFDp/mnTq8du7uZ0/lpHX /4lzb334p9Hc49c8/nzzT5VAEGh5z2f8aH4U8qIkdOYkCoAgkRVrnl8Fz0XFSgUIa1lMS7rJ c5OX93jH+4iEjntf9oK9n2G40rfNxyNaF8X5EGfDVksCSlZAPSUIK3gGRHg8m4/zZVh32faD dLHxqt8ouf28AQTNbeE4h6pLDSaolrBbzUMWxdJk+dDCW0Ylp47yhCjHCE3tAt1jave5XoFS RTWQ7qrmc4xZgFh5PUSZRUszFSrYTYUEFSVMOoMkCYhMMufjAOUcwSSRm9GeGv3q2bUvL30Q ozue+y/zT9/wN9ZWHYsmkzl4+4q207jBdt0Xq9654Uk8ft8Xb06b5ffecf8GvCHeuH33fqDK VoCXC+AVh3aG9UVcg2Np3J0i76GQmgtgKNLfZCUL4xqUq+T1yt06QXS4HIPlsbiCVOhES7J5 tgEnZ6NqtAvYEOJtfoPkBVigChVnA9P82uxSpdR4SwUyK2ZinpxQOFkDgwaFLuV8VZ9krToH 2gpdOohTVAUrF2HlvQtnWomoaSX5XOD4uIv7n/j9Dowffuy1o7j1ilX7F6yrqHgQX2d/9fmP Xn8Sz3jq+X3GupYd0U+v3b59K6xyHExuBOU92BG+cjyPUyXsN/pNRMYpuom4TDeP26Z7yyot lTboNlgfsZ7SnbKKvIE3E4cBuDXn9hDi8QQ1/ikbjUGT4jCZFLtflICbIlMa0ssy5FeY5FsV rChylqnEdLXpbROvmKabFpkaTbzJFCGbwpk+Gdiux1OBZBuGj5yNKANF09EiUDtRuVfGSDEB 3zW5y0f1kzfjvkCeVS2U4VYN5L4xugba10q0AqByTx9jBghT0jVTWhU04pXMmkyCTwuqagZa 5JiyAhjGATVqqAW0OA7nHF9T9+TC629Trzu+LWHCuMVH69IXCZ3dZxfPvamlcG/3zeS6ncl5 Y5Z2vBotBOqbD9iUD9g0CA1Dz4dnLsjEKfoUQ9CYkjEcT8Jilq5INy+wNMDnZaQb+Ky0VBNn QSmJwbQQZzfpc3xpoVCG3uTQ602uZL8bu2fZ/T4pVZ/j5wzuCosLuyL4xXBiliqm5lvURFSh BJuCJNiTGLba8lCiktiYyCU+Q9aBopkKPkW1T4DiLlR1KRrVXdDQraSru+rcNrMGEsSEdEw5 pnpdTLUDtS4lhoP5+QX5yQVMswOwSIMoqNwMVkCN7mCqHUBljiFnPqdc8WTtnmMzt9aMxHMn OYeUrG/ZHXi68NuTL7dWeEfEu562jEydV//AtWMaauYfrL5+5uQntlXeONtmNCdMGlqSnFNX pTxw+IqyprlN0e83T8+5Ig9/YlFkc+iKoimLFz2KYrhcBDB2o6/CM5KlYRIJkmRdPinTlZN5 xnqyXrfO+qj1NKDwm7rXrWbO5Sa8yBG3m+IvDitFTSCh+tBYgYwWBcewGeyOaNgKwk1MM7pN JqRn6ChH8NNHjRUKBGFAbNyP1KfIJuC0BHcedVfgCO4M2/uxudzTj8YA/aqp57rPQdAMAcNq Jl2KQyXFCMSPh+Eo8LxeLIVobHNAQXwppj/Zc6Wfoylg6QcHBq3orLlmj2/b8ZudE0tvej93 KZ96ctWSnWtGXN29iTy4OGvYmNe+jdoAQ0eCkEhmWpOEs8L6Q9wr3KfcdxwvU2E8Jaswb7q8 RX5H5vxylrxPfko+LffIIhiWPOaA2BHm0ogkBXnsoDm1lPpFQZTSeD3QtSSt5mWF0bWN52mH HuhwC/8ODyqPwZLHr9GBUsXHYBIj61Az1arAKj/Oh6cOKWHN5JLUEj48KoWlOianarnm0QHI daSBB+oaK0rI1sL4LC10x6rKDlo1YRBLHfUGSkIDP5U/4yIxLZb6XTExT9V0SSguBs2csYrm UDMuyJWwPZfDpaFjoei4D45/wHedPXvRzqde/APFzGlA/RxgZgb65rgh3QJSN9Lzuw4IOSpO vBC5w3Rf4L4kbi23wbvXcIeRN1DTGbSyjzogDNBa4yByA3eT54DhoIkv49Ybthu4dGNyIClY aORVo4FLSNIlQchjd7Jrlh0lYzzY57dLgn+wIUENA/dtwxlUFMu4QqXMFaMIcYSVTMpPvtap KEVJISlfu5iumzw4D7kUF/kIWMvzQ8qf14RTc2jq+aruc1UQbekClG3uk1FURIFFg60ak0DN zPTDMQOw3/5L1sw/wFTNnqZsgpl9YPUBSxmUOvd49jXl69Ylp0T/kjZ23GvHXvsVf4TfsuaK ZZmJm97JL695dVvkmmvwCsO01WXVo7PS0zd6BzdO2Hzs5J3G6qbynJxUX/78vNlXTr9rwYIF sMCxoFlvAbin44nhkWVWnBGW9Xn7Mk4FT2e87X49+CkR73bfHXzS9WTSUxmn3GKpuVw31zzP Vm++OkOUMcDTPEyXawbLMINCZbpJyeMGpxOSns44hqoUtTGOkZCYGPSrDpVmqNjvVy02W9Du cDhohgPb7Y4Uv+j1G41MKorp/kQ7CMaMCP512OSwyLYKh4Lsip3YI3hF2ORPUBIrVAX5FT/x 0xw/Ikp6BVYGcJAQmCCq4ncodkoymrzTHGUoEEztBk+LDoy9hJVzFKXhE8NsBUQAWGYxBgMx z6XRfpkYokIx1M9r3P9SMA6Mj/3geErdvqraG5wzO2pvuMF96/Hb7GOKZx6uCq48vlcZnTf1 keVJDXzqU83lDVcsqd3cMrS5ew55rjwlr3jxvoe7u8nZif688OKnfhHVA3861fOpOET4DQLA oL1h3yCSZiDr7dc7iEc1WPPc1Iunnp0SjUHJS6REkwgZol2Od9nj4vk0PMEzz84lZHKcM9Mk +9JFyhmSC/NYGJfEwjBgY94WEYszA9b0bI1O8lR6uEQh20z1swsUq6dquM90BcY7gA3bFRRQ kdUhweIBm5NJDPPzbcPySDAJncIv47HYhivnjX6lee/h9uiHdzy/4t01zW8+WPXdsU+i+0k9 3o4/jt4bffd3T9/4av6Ewzhz/zXvbVhxGru3/RHz0SupHr8AbPqjzKZX0W3hSf0LRw7Vke1o d/AWbFFBgTOAgR4X71ezcJYqjRcAXZWYoetXAxinEWIvUgJpFjDw03Uzk0CISWFrzJgPgCgE FCubyZCrimEVWzpdNrXpz1F7CEz7mFEPJF8FgGgOhagp704EmU8YEFJycwry6ZdiBWgJgQU4 B3fum7Pu0fIVTzx7zeJbo7//7P4NU/LHD5+y4Krq8Xuj3UKn27/vy9uPRP/8502J7oMJtmDm pMUX9x897XfDVvTA6g+wM5t94fw4glWkSvkcRzhZh0GWp4mSFFukQAI8RySwQEURBNBGsOf9 VABRY74jkJTHjHpjfGJeFspG7VRLj+CXT+iYcX/rSTBrekWR8g1VI2miimmVl4mG7uIBcqH/ ILEqgAMFAQkA/StsifqD/LXBaDD6D8F+6NCPXTFthVsAvMmCzoc3ytxWeY9ut8yLJpfpoO5V /m/8j5yYStL4QpxPJuD1+EYsmS2EMxCLpVfdBkPDoCnaogX4CchZCxgUYbCb2dmFDVgELA0W piBSjZrQO+hr4B0aF+FQucKW+sZJXDxgqVVMZW4BqXsSIQAUiEsGKNnsLkFhk4ulOjLdLDya aCvpl5vQPPQvdeySXsmJmM7CoNPcy0ZADlBjDVSV/Zmz7p+VP31SVuGi14rm86nvb1w76HDS u9GuaDmF1xaQoWv5VNCqouE1Xp1XvsNwQjqh/9T5sUeSdbJ8vXGr5w7pDv1j3COibpC+wLNW WqtvM67xiBk4SymyTrTyTq8HlD2X1+EC3e5qEG0uL1X2BJ1Dlw3Kng4Lgg7pvC5Z5xbTLH5i 8Hr0gi/N5dUJirvCRdU4i6eixIsV73TvIm+jl/eC7dIRBztBNcB4o5ot4HeEj4SvBS5LoIdO XrfgFnz6wufZ2TSoexS4U7vOUwOPnp6GtAOFM1TF6AKND9gyU+woP2ZHCBBhdom5j8ZA+Wa6 dwHoGzGblxIYpIKc9/RrG+9M2nL8FtvE8VN2NwRcCdXHPzh05r2b68c+ROq6K+dmFY+dtLm8 YAd+AxQT3HNXz2fcROCpHMo8QeiTCj0ZbcDDEcZXIQ5ChL9FPF6NxwGGKN3stLe4BGSBhHPx Ms5x/09feITPf3TC7lQBXU4AupTRY+F8P/bzcToOTCexh1wUeUEngzPoeVmOEacoBHQ6SUIc z04ZZaBSKYLXdCjAeCP4hROCoPDcCwSiYQ/PK/LGNsqPYsxJTznTCk3saeKuqlfenVNocK7q 3GWnj0rf8SMj0NjBIz13lAIcdVU4hzsZ7DbUcFzwp+6bhM5D0cxD3UthZfnAdBOYXhwNz60W 8HRhi/COwOmwX8gS9glPCaeFHkEi0K7vFBFxGjly3Opec9aGTqO3EdkCREhQ2ABW2TLtHLF8 UR/xgcbboim8KOyxxegOFF5EFV6WMscXQAoUXe1cknGyAi0EBRf1KriIKrgs16uRL9WUafj0 aFoYtF2q9fapvf/+5BK0XHouhfPB7I2dWxK0EijydSaJ/OjwSZQAclex5tmo3F1Ez5I40cwn eLkGY8R0wiy5zI6EwVLQOd48zyw63DgLB/QZznJ9vV4YjnP0xc7JeIx+klP0WCxGg8EhG1Gc X5YsZr0DCNH0prnC+KZiWWRptOy38JYITj4RUFQhVU09iVOYQXteE83UmKI8B+iphJ79bVPM mxjpVGGmlMaox0ZZjz0XBzET0QWa0mImnHLvI3e+vu+rda/UrTsWfetQNDtj+aSNS7Zev2T0 ioYJ9xz98N0X8Oj9p8mIH8vws41b5m559MfNtwy/6XdUMtNzZz9wKHr/NjhsQKWA5qVg/5Ti CLniqFgqRMj2Dt3wVnrV1ntzAqCltgN1aaE306NbQmczuMqzZ386dPYs5XqdPZ8K7wGFxqF9 HXt1mCk3YC44KJDNAGSFHslZ6T0QO5kaCnoA73F4SKqjRCnj1im8Yna4nF7FZiky32bARbvo tSxvyzRw3kxeRhthajVhh2Wj2ZUOVJ0lYSkv3jw2IW8sOyPQNB5lwDUPPYw6D1p+EbaB16/9 sIMpFATtR7HnB3J4pt6rkmhlDIr/zQsLo/v/GP0u+uqX7+IRf8MB99MJx2+Nfntw1wdH77pA +Lho9CdchrPxTsx9+uNvrPvu/+qt6Md//fIVCtclgGezQFKaQZ6tO4mssM7ZsPQ4aiINknF1 UlMSEYU4pyORq3TMd5YnlvsbndV+cayA25S1jo2+DYnHOCHez0s2v8FgUVE4MysPpQa8KpIU qUnipNak1LoB52/9yh2qaqbCCtZoVwo0dZewg8cCuq5RpA9vljx953dnPr89+tWdV72x4viu xuEti0ud/t2r5+5sHob34II3D3/95tPRlw8vf2H33nuzqjeOr12wa9/M+95G7KTxS3KbcBj5 0PZw+iRLvWWtZZvlLvPd9kNye/yZ+M/semDIHPJakM2QYTWCJcEZLF9bIzh6VGmzdeIospO4 DkeFbIyQuKOmNsMzJA74TxySgR8YkjNAHVDkW2VOjpBbO+IKOyj+VYXOnztP9xJ8jV66i0vo viqv001NkZg1RqVMsCDXXsDlSsGYtMGfJ44euTKc7bvm1oRbC96eeTTxyEZ3Snrxntutw9JK g5tJw04sbIpu3tl9vMmlJoGU6QaMmwp0YcHmsMOmWFUrGWQJW2dY6y3rpY+sopXyrYmZI/JE 2SUTLIqwXAKKHOIF0CFlWafXc2BnGc1mi8FAZFlvtlh0ZlnEvAVkCCh/oh621YL08hRRX2ug JzWyeQq21CJdrdRJkpBIDB30TIKCCmPHcQU1Alp14reRgrkjHexW8xzI5G5wMR9p13WaDzYt YyO6l7YpupfMxVoIMe34Xkcv6dilZ1UzU5x0PReOJg+zRHouPO2Lz9PpPSwelp3uPElvc+cV xNhuEONcMDeAr+LgoNRBmMNvRf/52vycNJzz5+gYbHxteVIo+hKJI4Znl9fg7d2fdn/7Xml9 dJMmb7mxwBdc6IXw0iAwDzzYUCR9aP/QIXhwqi3fxvEghngnZ3O6XFaII8FoMHIG2Wx1uYJI AEklmFUZO0gGZ7fZeJ4TXSC07G0Ork0BiWxrczpll6sCyTyIXplaQfS44JhbfmMnCKxepRhk xbkBcuMc8IesXtnLrjsBq/rOWKlqQxFMEpQBpyfs+AqQrGAU6dUGJYmiW9Xzv0j4hd+T21pb el1g4ahhBQ7PLxN++Tx3z847m5eMTnjAM6y2ZedP9fS9QyWsZiRIIhuKR2not+HxqZQtOqlX lNTgfDX+1QTenpYQn5bqtBuE5MEGe1p8QkJMF3HYA2lpgwYhPi4+gKvTeJKYEEizIZ07XRch e8MmczpKnp5cnbwlmU9OjuDfhhMTZHqVFR8vJyRslDWlBJUNZuKcWkx9J1gMRBum9p1IK5qW zEDXfT5mSRWXhM6Db42pKb2qsnZL6u5VVQYYVqLk0o5LICN2S8oFcgB8lBUFKgGbXrmqePG2 STfceOXamz6+OfokHvzbU8NrtkZf68LTbhhS1TbmmuPRnUKn3jp3T+X6SPag+xvWf7Cem7D9 2lHzB1/cIytTN5cuXQFreqznU/4m4QxKQOnojrBzePykeDC2Qfp4qTco3aSdUIXpOwUlfqN1 ffDK9G3poNkNSyhDS9F65Ub3jUHJ7QLN4+twCrVQUxJRmspdcE9y/cqn2oWAqje5708pEe93 +TISS0zeUIRsPTK3X5pPPR+7D+o+f6GL2VYhjT/F3mng3iMI4FawfIZCvSdLIqfpxtppBL5v yp2TDv3hFztfO/HttOIjr27a+5zpsHnF1JkH1s69p2bcXcv3LFv3FjerpOTc8z8cvRsb/vnn L45/vvrUk8qVyzf/s/tvVz2y9NfLtj74OUAFKI+fB7imRyacEB4pGPEh4yHT08ZXjOeNAm+c ZCRZUol0rXC98V7TE6ZTpjdMOkx0yCiaJL0gE51eMJgkZDSajMgUwT1hF8c7OI6HDEGv70RG QEkjZzJGsCEsC2k8b5JKiK4Tv4UIPntMn4aMUoSgji06DDbH+0dlno8QPqyXBYHetMh6fQSj sB6BXSMDl6NnfPOPWmQuQrVOCxC212wENL3xJE6PWX3aCTRVP6v6b04uQ9m/QhKqaZT9yTlK 1aHiLmRlN5/bdJu06xMd4K0FPoysQXIG7IECnMtEB2fHZMn07kdTuWG3v/hW4K3ppVu6P8Br O7jdPy3cH91BXGRJ931UFi4ESj4C0DWgl8IjQ2QwN5yEpcVE0HOEGKgdoTMZ/60ZoZcDaQaw JF5A1Iwgi54WBF4GM4JAPJwAoAIAbWS2cS/RGjWiXXE50V52k69dH7Or4CwGBo1wB5oXMbql OAoku03Rjub7DYyAtBDn8knBn35RzU0I/hRZzt0bpFZG4aEoOUhXXgZ4tZquHNtOIj1QzHqD kqcKYWEBv5y/ib+Lv0eQZB5bwMx7UP+x/ju90CBfz90pnuX4XikpAB4ZCC8KHK8jBkPMIOF4 jvC5gt5BUUQn63VBSXRIkkhfzgLbNxlFaARGi8CLhjSdBGI0giPhkJ6vzRKwsLOE3WlwJqIY KlqoFTbgGNII0Cvf+S8ssWlKFdWllE8AVMV9J+i9PA0sMV3shLE/MuBpiKQD8aAr1hVrChio X/QejolJTuLKcO6x54jyVXQEtr3y7p8mCZ0/teIfom3d9STwXPR+CksUnclvAo3Dge4Kz1Zd 2YawMezaBuRnNJhcslufbig0iTqdbDKbJYSdyI51nEVRciUzAMZsMuslhTPpLGazXi+LOj2n 2i2WCsWM4c+sr5BxJ7kNOUF1gKUr57K6sqpatOszTVugD3uwZsYzI16TeyxH4V+iq4IlWQuY 2VEAqpWdqQD0/NtQOKwgKSNv+JGjMzxW/Mdnuxcsvqu2JFr/qOINLFjGD+7+dN8+bt7Fqe0t VC92An+uZLaBH30TflDn8riIzuvxAiU4QW5zDiQLohXBPitINkhKnN4oKR6TRVLcZptodZvt nMNtdhGn2+wlTo/JR5xx+njOEadP4BweU6Jo9Zj8ojVOL0rE4Qwo+rg4FcmAUrLJ41HdZofb bY7zuM0mvYx0ipP4gY8hRfJbxd+azSYTwA7FeTxuN9IrfyXH1LUncSZits8lyhXQTnexlb0Q oo+itg18SoFjL6Isl32YCHDbg8Ny7YFhAXsuR12uM8gFnAEuaKcviOyBpfMeeXVS9CucNW/v PDxi3p3znnhjMnZF35y3tzz6yrw1ePjk6Mte/OgdeMUd+InobOruiN5xR7QcPxotJyV4BYXx sOg8/nqwPZJQLk44iVI1G3doRAtzqPgrATOEH+oYSnhPkTw3tS51yzAhJZQ9jKTYUpwlqNjP g7zOcLv1em+aKc3j9Qb1bode78bJ7GQOOPQt4VxTlt8hedLcYprfpBf9CRaPR/Z6K4Cfu0EN k91Xu7HfneXe4n7bzS9yY+TG7ghJOSYHVQVF8NvheKLeGsCBl5XUEj1G9GFkmlvRu/V5+tRF sbMnes4E1PTJhaquj5Xu0IZvwLBpYW9ezrBTO+UdFvyj7zEM8lDRq53hgcVwrhef2UHnNrMC ii87k9Iue9xu0eWO4fQAG7sglzMT7amG3eFmx+G2mM00/GmSlDJ02oEJWWm2m/c9+P5jX2z6 VXPywd8FW964YcvJBZ86ExvHVbav2r1izFUrCqqto0ZZXXOLTpff2vV+B864+5UnL/Y88uyy MVfP8pLZqwqmztyExSuvu3f87l8CB8BZoBb+DnQXA9hUiZPJJkwqMS7ST8AT9XNIhV4Ai6FT Y498BF8Mmzl9miwYQLoC1hoMMRkKgmKGpvhWHjcxSdGJJ/UJzpiYrLpMZPYdfGZ1DTg+Qc1V AbsosOvyAmBkXZ/tjX6dtA1LY9KSG6Jn+dlrxx/If3J0WtGPYRhxH0JiAfAvH3aGUz/2Ykv8 h/FksHe890r7Vm6LYavxWvsNni2+O+XfOj6VP9N/ZjfHs0vPQB57vjkWJIcC3MtqMhoMZqfL 7XZ4vD6fm3J8UU9/LUFE0YfMdreDvdNy1+r19Grbbq51OHxirQ8MgU6yBDlIHRgwbrfPVmHt xCeRgSzpOAO4FcEnO0gF9kUgbaE6Bn4+LFtANnjjbt5JtbdzzVMvNH+idF+oinoveLq900rr xn3imapc+BJIvwtovksj/i7GATDlmIw7go0VexH1L59J0UuoEFUtAsA06RspeuzJ3krRkxz2 SApjc+OT2XbCJ6YP6X45qCM5zeeOd//wDKj1gwujn/Kp0WD0fOKC+lV1JL27a/0vt36J/3rx D6Rx+OEVV3XvBXToOQ2wHwRy2ImHhp/gVUORyo817cBckX64ocg4wTDBOM481lJuKDdGDN+j 7xznnd+4zByXivKN2w03Gg+bLhgk2YB1OkEGJEPsV5I6vdnMKVabzWGxEDC3FIfTabQRi9Gp 48wGgKCBWEyc2WnU2dwunY04DQglOo20FrFYEs2cA9qbXsSYMxpg85wWM9I55yPLfHPYMN+o cvNJ2KyAyvhK2KgSZqzd5/r8l56Qd9pUKpU97/qwl8plH/YoXT4vOI+iGbnFxdQB++0SLuG8 qO8yg/JbgH4xNXyZ+fuSZgW/VEzVHHMx4wK4hdpxIWrQ2ul9bn4BDuDeLRlNnonWvPfsZIPP P+lePAaj7hH4tt9+GRySPy26lHxMfhs9dp1r6LglD+HZ3QYoe6KkduKs6BREenTReSTIzl5t 6Gx4/I0yznLMMxBk0OsBFCYTEXj68IC3CgaJmExBPXbQEvb6wCBKqtVCiGwyqSCJgJoNgKF6 qjDjznCSrA9bihYBMiv6LH2Jfrqe15fLensaplzTri/vGMA1qWLItGPgcxumfsTeELLLoMsp H1QA9lDgEsFP2SUCq1cRmF6onTxrp36UG7JzfGrA4NJQR6hbUUdlDy9N+fD4J6HCyVvH03cE P1x/j3XqU3z2xafenrwEBEY16Mi/B6i4UTL6KnxNgJq5CdQIm2fA9H2nYrNZXJ5kd5zHZZcF f4rdlex2xzRmG0UnA6CTwWYxcCnmVL/B5pa3uuKqPQEQU04UTGaqtNuSBgwE6ZKTZbe7V2cG Vng8Rfanq2K2SMSxqeyqbGyvGXGheWrXwIOBSyDT926yX2U+p3wcwzFNJRz4DAv1W7+U8qnr t4KZ+StQNLNTDANrL0ifDGsWMJjA1TiXLD3xzIq/Ry/OGLywsOmPDUUTc5atObf9EWx5pqjx lmnDr2iOJgmdIw9v6fgiOKLomh3RL7D19pWTs7rXcOmCYdr1U8KLktgdHWhYEykvQAfCyWsV nG0JW2ZYqi0tlsOmCFhxDmzgAOKJBqPDYDDiapAUO8Ne0UjETCvgnWw2pxvkamOTkYA5RsXK mXCczKVnOUoc0x27HLyj3OBKMyoGt8Glpw+o+zFuGhhlVEbHAFh1GZop5/ukMQOgdhJrL4hd CGn3QbFHWrNPKHXzR9f6Pd4/vPhh1p8eO9GJHzPNTZtZM2JU1gbecvFXf33h8F1jYbXfgwXy onAQmdC88JA2w/UGEgf65Uqh3rBZuEUQdbJFlJB5ARgFFhNolqpO4pHRVOKHps/g3yEzHo1z qILH3i7SA0W2uVXsGVlu7tDsqqoAzAwV0HtRkSMcHuyZVoWHnOxOCXKHk748+vaU29+5iL86 evDgr6InotdF74KOcwDXPWwHHg2PnWi4myNpljQrob8+F7DFajWDlHM6TU6H0cC7MQg4ziCY rdZELDgwFgSrG5uNwlZDwGQkjq3WAI7g/A4n0pmeJXthwllAQ5jsBcsYVOgsYDPtrvaTeKh2 nwBWMYAZUPaT7o9hNR9bNX6oPdlH7LULxVCFGitmhqYvFWt3dLkFGHZADA6SJLpWLEr5uQEp x04+uGtIqCole3hRFDD3W+tPXbsHZZg4f3APtypSmEX506G7f6p8IkOkP0NFuwH7toIOYwU6 bwo75zmulLZKnGTFHvrzEC/1gvTHNdo5zGfhLIjcqFwfIKmG9UpbgCvx5AbqHA3epUEhUQWC US0mWwnypsSVyL7U9eyY5ULsvWn/WwbtZKW5yp5nY6cpTodE2PFKgUPT7myxx2Xw3d24/bab yw//ZdrCA5sffPi/nsocua6h/KpN62snbCqaWZyL/9KJt3xy7cgfv/j2y+gnN6/A3OvbpjQs 2kqEAw/snDT/6u736Nnd3T2f8NfDKr0oFeWhXxxPouyM/VjITDVtetSUmAcqdkrsMdRg9q6D 3i85vV4iI2+mK5fL8KRlrvJzVYAxpgQ1hypBLlmfl5PjCKqSEFIdJneJZZB/EBkUwVlHfSVc BE/oGJZVYo3g3KfVEr0vvxce3d2g63Z91//8NtTFLvSbY6AJhTDVZWOXAaLE3i4h7TWk3aG9 c+o9fuq/WBLxW7NmVW/54/MfrNtSkTo0+rfPTv794P3rl1917/rlM7aOvnnEuql7Fky4YeX2 Z7nUzJtn3tB899t7VzyeWzBq5sqXo2+ee+zBT3HGFa13rq5aM+nqbjSyacyOlZvqr6WaLloH VHs1wC+A9j89zTItvsHHmSM9b4anmulPiOgViSXZlxJfxOVbimzhhDGJlWSVYZm93lcdVx1f m7A4cSPZyO0gO7g9cQ+LEc7tV1FCnFURODHeJ/K836Q6BNUPGvGJADKqF4JKJ4gBK341bEDe JH2Jxxe88ckBqHReM/rpuS+QCCOS2A+CUFUuvTCh3xgKDer7HZBIT/oD0rr42gN/vyVvcpL7 1mVL7wkc8V08temN+mXh6GtbrwuQXcHrjuw71Zw/bXJucd3Ntz7ge/Evy55Zctu2Of9cvr34 IKWYFvwgP5wX2Q1cflgviJiXZEQ2AtkrYb24UUA+GXt1i0+SjYzGz8Fcs+h1fK+hCTMFg9IK jh/+UyH3GnXcFYe77z0MvY/r+Yynd9x2FEQ/het9FLiJ1OMD01PWOHdYH7GetIqDrVkpJSnj neXOeqe4IYA5m8OZZCdOh42LT+ZEv52QIAbJgRG7KU72+0WJPgfz+C0GWbWVxGMUnxVfEj89 /qt4IT6e/vbGiGRC7OzQ2W4HDhb2Xv48Olm7S6677ByrBdQV7ScPmjyOGXrau+ixCys6muJx QaiqUvt9HLVbus/1X/v2n9dQhfyl3gcIodCAV9FmDlB/kGSXHP2WHXAG+jx6VfnOKXe8OmPt 5utHNuzPTF+Fr61ZtK/+mkWLDxQMFjq7z08f/cG7N/9936KsxpbX8bGk7bfcgH1Xbr39zvvX gBb+l2gDvyP6OeykL2zEGxHxCcjL/+2JAbs2NJsbFnD6+UeiDddeSynhiehMbprwG2SGvbfc b37CTCQF2YzTiO57KYK/6yDm78FUOX+ceC2rNmiHzPQhBlOESyiOYmLNs1H7TETEqdjxpPuv vrb82ZvXRC+ubY3OxBV4xTf4wTe3v7cpOjw66c8gox6Ame6JziR5bNSysLVBj/eY96P9Zs6s 6GyXjhs2GqfRf7aQRTjiUyJ49pEJvXeOdBrdsUlUYZvVASxXCuYj2zCFw3sfuPraec/c3IbF Na3Cb6KHo3u/jVaf3f7eZvwKPv4BGKQ1oCl/DvCawI8CWRFAP4aTSv3l/BWW+c4VFmG4c5i/ lJ9qmegUUvghlpCzgC+2CAo9k59ppk/HwKv0rMPrPTfiO9H3AdHrSTUW4gl4qbLMI+oCMB3C JbiJ1Ro7T1QUc0Ls2ZHbbzZY05BZVn3It8hHwCIMhJMptspWawWSt7O3D/RXU2iKjJLSKJKi JP0boy5VrvvM6Euf6feeSXf1viNiCAq2ygD81N4TsRMIBByaw30PoQl7UMrFDh16zxycOPeQ v2rPrLteW73/QPnphnVHrN6Wyfeduaa6dG3dmGiD8OztNZP//NbB6FcHp73QfZqbeOWQ0TPw oqe37Zm4+9fsJ83kk/onr5uzbJGl+DsUp2P/guGhlhdO9/47BrBZZoo/Aj4QJMf+Zw47kZRG RafR96ixTwA41MBPoQiVxCL0qlCOdgnlPb+HsIIUoTXgkPgoms+3ouVA6a0QjgNH0+Pwq2gk 5E2D8rHQ9pTwKlrA/xfqIY+yOltIUc9dkK6CevmQXkn7gzqdEF8C8VYe9XRDWAVjVULeY+Bo nP7TnzJwCNKLwA3jW3EWtNsH8zqNX+3RQbwayukY30P/ORDuBnc3uHX84yiizbFnM8zjCfJo zx6Ifw7dDUfv47uITK4nfyJ/4i38IcEnvCVukfzSWd2NcqP8rb5F/3tDo9FrHGV8zFRoOmP6 u3ml+U+WKZYLyiZrmrXDttj2of0G+/eOR51bnR+7HnI3uM97HvGq3uXez3wLfBfjrolrj6+P 3xJ/Kj6acFSDOyqEL6f9GxGkgJI3GiKDCU//+QnkubGvb5fGxVpQX4AUjrUS0cRYnENJwHK1 OOi+qDkWFyC+KRYXgRPcGItL6DZ0J7TCPBigaDseHIvTE7ojsThBRnwqFufYnmpxHnmIIRYX IB6MxUUUT0bE4hJOJvNicR3K4TbG4jLawT0Ri+sR4QticQPgQVEsbkRNfGMsbjKW8R/G4maQ 7injGpY2tDVsqFuiLqlpq1EfUYcWFWWrc5bVqVMbVze2rW+qU8c2tjQ1ttS0NTSuHqKqo1eu VGc1LF3W1qrOqmuta1lbt2R0S0PNyoltNSsbansbDWd5qpY5vLyupRVaqzlDirIHFvwsPzPW yxyWOqw2tKo1altLzZK6VTUtK9TG+n87M5jM0obWtroWWEnDarUNqs0dMnuIOqOmrW51m5qq zunrZXp9fUNtnVqzeom6qma9urhObbmkbW1dS1sNhMvXtDS0Lmmopd23DgE0aUBLwbWB24Dq 0BKkgquBdA3EHgE3FBXBNxtic9AyqKGiqagRrQbXhtajJpYzFlItEKd+DeuL1hgCJSog7Er4 qmgWG2kZlLayVB2EdVB/LRt1NMQaoO1KQNY2Fjag2p+NNHxAPfWSmvSfKNHeWmNjq2B6DWHz /nct/r/rZ142lzkDyp6EFg1sJRRObWzdS6DHVRC2oBWQ14jq/wcw0yCzlPXdxmao7UkDK2uL 9TYX5jqbwXcGa1sHpW2QSmUj/nwu02Eu9WwVdWzGq1mftHw9hItZbst/GLeW5VBYaOnlaA2D BDBi1mvv7FthTqOhl3oGlf/umn9eb05fbByreSUbd+nPVpLJ4NUIK9DmNY2VLIOcldCqFWX0 QaiFlTSwec0Gfw2DgYYBGo4XAgZkMvxsg7GHA6vNgnHpdwjU19a06rKZDoE+GyH3f9Yqi7Vb BXPNYnNpZRSyms2qN2cRWxmNr4N2vfVNwBanASzmAIaWgRsLUKfx6ZBLYVQG/hSWXwo5s8Gn dDgeYFUK36ksdw7k0X6oo1iqYXPvHOm8NRj35muY1wRza2Q1WljdXjz//7/rKkqDVpSqBg/A yYYYf1jDuAPFTTrGemixpm8uFHprB+Bo/172z1PD4VWsvjZDOreVMcxZHeud7hDthdKKRkOU pipjoy2D8rWsHsWwXuzXxmz7DxBrZSO2AQ7UsN5VcA2xmbUw/trA8indrGTrq2dQXcXgOJXt TGNsNY0ww7oBba+M9fSvRlkSo16K64thBW2xuS6O7dPq2FrqB8CpHyK1DA798NJmMuRfYsnP x+7nhWsZf1wD/mIINSi3Mni3/Yu+58LIK9m4rQP2uR/y2q5cyo8oVLSxWhnkKV1rPOG/s8Mq y6lh8V6u0jsu5ZtLYtKQwkuTGi0DJFdGX+2WAVjaD9P/DB86u1Ws/14sarykl9Us1dRXQlel wSENDWN0ciXDjBVsnwfSUn0MY/rn1gh1VzOKXcN2gs5gWd+KtTEHYnuvNNBoV6Oyphjm9GLt 5dj1n9Y8EHMmMvj8fHfpLtARmiG/jvXeK0e08VfHJM/qy3aq5bJd6e+7lXH/NbDeJTGZthbq 1cGs/hXO/3sc6e1Po9O62D4suYQCe/v7+W5rENNW0Mb4QtsA2u7dq5rLoPyv6fI/cape+P4n 7lvLoNwr5S+dk7YiikfDB/Q2FyTGaEgXojxUwP5J5VCIZ4JulAeOaoIqo9zJ4OfBNw3yBkOd ApQLTgWXD9haxFx/r9SVxVZ++eoGcuteSUAxtIZxv59TYBPjGTWx1msZBjbE+MuaGJ+sgxWr sfy6vlXSWfxP5HNvWdZlc79UJlM3JaZJrwZ/MYOwhrtrmF8Xo3FtjdMYHW2IlbXGsG1ZbMb1 fbKftpnN8Fhlukt9rI/WGGekK57HVtwakzV1/ytrndEH7ybG81sZnxjE5q1h+aoBXOrnVF0T o7aVMcmzhMnBXh2A9rSGtda410B+V3dJu3/PPzTNnOI6rbEy1iKDYU0d5DXE8jb0tWhl3KMt lqfBqiVG5/+bkK1hM+/VPepieqF6GWyp7PuWQaQmBtVa1mpJjIs0xnSUv7H6DWyGrQPK+6W/ phuvH9BqSQy7NI26v9UaxvEyLqG8Ogar3l1oYdKrtU+SqjEcrmPydF6MNmne/w4s62Jcp58D LmFUqmFLw2XY0sawRbP71D69o1dva2DlDX34+XNY1MTg0cBWq0H8Upg0DuBQNQwDB8VoXRth A3wb/6/Dhp4r9ZwHNwjt/dn/ZYXPaBu6mhxET4E7De4rcDzKBn86uEXgOBQmB4/emhuOQLCI BR3TZuZsoeGUqTksHZ6ghXqTFsrDtTA7l9Y70FG6jqYPdOQM19LpQ7V0ckrO1aMVcgBhGJj6 FvCzwJWAuxocD4Mf6HAmaM1kB232UIcvLsdymjwENR6Cdg+xKT4U1kOxbbo4XSJfjS7An9Mn Ssy/mvmLmF/C/CzmW2Klf6ejM/80859ifhbzS5g/nfmNzGf1cRd8v4Dv5/D9O/572IYyMPJj JQMrfhzOwGE/PollbDia599NX0kX5PmHqGP9OeBy1fH+DAj94DamT/Bnggukj/MXYEQvTzBB OuR2w87YrLpwBD/+dHSbqXubCckRXHI0fYp/tIyHo06eDpcP7h5w/NH0Fv9z0FplSYRU8thR /8XMCC4/6v/RH9Hho/4f/BGCw3b/9/5z/n/6T/m/80/yv57+mP8k1LrnqD/ij/BQa396hDwW tvhv8s+CyZ3zr/Ov9K9WWdHKAARhg78WGs1Pn++vUCN0lGkqG2W8H7o54S+FwnHpEYxP+MP+ G/25maxpDm16wj/U3+If4mfDZWjDDdbmlkaDE/5BMFgSG6XUP9ckm+SCXX+Sdh2Wdh2Udm2W do2Wdo2QduVLu4ZJu7KlXVnSrpC0K0XalSA5dDadojPrjDq9TqcTdbyO6JCO/f4sRA9KHaJC A5GnPs/iCqE+0U5TCdYRNAm127nJZPLsMXhy+5laNHmx2n5hdjCC9TPntwvBMbjdNhlNnjPG 014YmhyRema1F4Qmt0szFlQcwfiWSshtJ9sjGM2piGAvzbohjv7v2ZOwq94bbo6jYc8NN1dW ItfaEk+JbZS1qGzcv/CqY/6Anz56Lv0l5OQZ60/CLld0SP6REiRnQ3IXTe6iSU9C+97Jsyva H02obM+hkZ6Eysnte2arCytO4ifx46XjTuInaFBZcZLLwE+WzqL5XMa4ysrJsDWsHqD9k7Te kzSAerrfoRJaD5Xofsfq8VirF2T1AO20ei4VBVm9oEu9pF4ifoLWS6cB1HN/hBJZvUT3RwPq HekMlo47Egz29tXJ6nRqfbUXsyp+P1QJ+FkVIBU/q+LHhFUp66+SGasypK/KEDYSh/vr+LU6 JrW3jomOFPpvferGhEKlDRRXZlQc0aExlWMXaqFLaRrF9t3kHfVwXCf6Nfc5MoQq2/XBMe2G 4BhUUuJhN52isV2ELAkcrT0i4Nkc18kjfJjVNkK2KVaUOTpzNC0C7KVFZvpvkmNFns0jAnGd +HCsSIFsK4wxYJ5tbWvggzylDeP6/lpjnzWxsA1Nbk+fPbm9ZOb8iiOSVNoerh5XCXnZvXkG Q2mk54yWOQQyi2kmx/VV7MuT5VhFgMaJ6Rl4uh8XwBQqQ60wFRhoIATbWtH/AYKbLm8NCmVu ZHN0cmVhbQ0KZW5kb2JqDQoNCjM0IDAgb2JqDQoxNjY1MQ0KZW5kb2JqDQoNCjM1IDAgb2Jq DQo8PCAvVHlwZSAvRm9udERlc2NyaXB0b3INCiAgIC9Gb250TmFtZSAvREFBQUFBK0FyaWFs LUl0YWxpY01UDQogICAvRmxhZ3MgNjgNCiAgIC9Gb250QkJveCBbIC0yNjEgLTMyNCAxMTc3 IDEwMjQgXQ0KICAgL0l0YWxpY0FuZ2xlIC0zMA0KICAgL0FzY2VudCA5MDUNCiAgIC9EZXNj ZW50IC0yMTENCiAgIC9DYXBIZWlnaHQgMTAyNA0KICAgL1N0ZW1WIDgwDQogICAvRm9udEZp bGUyIDMzIDAgUg0KPj4NCmVuZG9iag0KDQozNiAwIG9iag0KPDwgL0xlbmd0aCA0NjYNCiAg IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+DQpzdHJlYW0NCnicXZNNb6MwEIbvSPwHH9tDBdiA UylCyqeUw+5Wm+4PIDDJIjUGOeSQf7/wvm5V7SXR47HH85iZZHPYHlw3quTN981RRnXuXOvl 1t99I+okl87FUaZV2zXjJ+KvudZDHCXT+ePjNsr14M69Wi7jSKnk97ThNvqHelq1/UmesfjL t+I7d1FPfzZHLh3vw/AhV3GjSuOoqlQr5znnj3r4WV9FJTj+cminHd34eJkOftvy/hhEaS5k rK3pW7kNdSO+dheJo2WaVmq531dxJK79P1oUPHU6N39rP+/Opt1pmttqBg0oDMAwkgFyRlJA wcgroARoRiwjW8ACUBaAVwJTrwgLwJrAezaEHWBL4D07gGWCPSO4J0t56R4QfHJA8CHQx2oA fSxqy+ijmYA+eQmgT7kBBB9mo49ZAeiTo7Ys+DAbfSzP0MdCO6NPyXvok6M2TR+DiKaPQQJN nxxVa/qUa0DwwVPp4INyNH1KfGBNH4O31vSxjNCnQG06fB/IafoUrI0+OSP0MUxAn4IR+hg0 hQk+SG2CD7IZ+hh8RhN8GAn9hkc0wYcJQr/B1NDHpuz2z66eGx+z+jVWzd37aaIw0pikeYY6 J19jP/QDzoWff8nx8LxlbmRzdHJlYW0NCmVuZG9iag0KDQozNyAwIG9iag0KPDwgL1R5cGUg L0ZvbnQNCiAgIC9TdWJ0eXBlIC9UcnVlVHlwZQ0KICAgL0Jhc2VGb250IC9EQUFBQUErQXJp YWwtSXRhbGljTVQNCiAgIC9GaXJzdENoYXIgMA0KICAgL0xhc3RDaGFyIDU1DQogICAvV2lk dGhzIFsgNzUwIDc3NyA2NjYgNjY2IDY2NiAyNzcgMjc3IDgzMw0KICAgICA1NTYgNTAwIDU1 NiA1NTYgNTU2IDIyMiA1MDAgODMzDQogICAgIDc3NyA3MjIgNjEwIDMzMyA1NTYgMjc3IDYx MCAyMjINCiAgICAgNTU2IDI3NyA3MjIgNTU2IDI3NyA1MDAgMjc3IDY2Ng0KICAgICA1NTYg NTU2IDY2NiA1MDAgNTAwIDU1NiA1NTYgNTU2DQogICAgIDcyMiA2NjYgMjIyIDcyMiA1MDAg NTU2IDYxMCA1NTYNCiAgICAgNTU2IDU1NiA1ODMgNTU2IDU1NiAzMzMgMzMzIDU1Ng0KICAg ICBdDQogICAvRm9udERlc2NyaXB0b3IgMzUgMCBSDQogICAvVG9Vbmljb2RlIDM2IDAgUg0K Pj4NCmVuZG9iag0KDQozOCAwIG9iag0KPDwgL0xlbmd0aCAzOSAwIFINCiAgIC9GaWx0ZXIg L0ZsYXRlRGVjb2RlDQogICAvTGVuZ3RoMSAyODgyOA0KPj4NCnN0cmVhbQ0KeJzcvXl8lNXZ MHzOufd79n3JMjOZ7ENISCaEQDR3BCIQIWE1QSMJECDIEiCsKqCCbCq4givRKihaGRKWhKVG a13rI60b2lppi6JWKm0popKZ7zpnJiFo2+99nt/vff54Zzjrfa6zXOdaz30mtC5e2oT0aC3i kDZjfmPL3QsaJyCEfo0Qts5Y1ur/+73H0yF/EiFpyKyW2fOXnkZVCCluhISrZ89bOStw6/vr EDI2IHTFK3OaGmfunvu4jNA1AIMGz4GK9dHbJChfD+X0OfNbV7yS8tgnUF4L5RPzFs5orN7F /QyhsbVQXjC/cUXLe+R3IpRfh7J/QeP8poE2NRPKXyBkzWpZuKT1Q5QbQ6jBTJ+3LG5qyX7I +BCUCxAyz4M6DF/60UNWpGXC8YIoyYqq0xuMJrPFarM7nC63x5uUnJLq8wfSgukZmVnZObmh AXkD8wsGFRaFi9H/Qx/hMEpmYTdK5jNRMkKxU70h2hw7RZ/RlHwFyEqJh8SnHT2PPsTZ2I86 8PfIhS5gDx6ERiMefQvUshf1oAeQHU1CD2IrSkdONBmNxjy0CaE78SOxZbEv0RXoXvRk7BC+ LbYHnm9Fr6ILMIM/8BiVoHHQfjJqQl9yn6G62MNIRhuQDg1DE7ATNaIP4PtPmMN96H70C3xz 7AKMake3QX9lqAJVxF6KXUS56E5+m3BCOYDuQUewGJsRa0apKA1tJqHYB7FPUSaqQz9Dz8Oc QribH4UC6Ea0Hu3AHu5VyD2AnkJRrCf13HDhRRhpNJqCFqDlaDPag97EVlwjnBDOxm6KnUYi sqFsmFMz+hIX47HkaV4fuzL2MboOdaHXYb30281fx+8WrouWxx6LvYwc6BBW8VH8klAo3N1z a+yJ2AtAkZloEGBkHIwzHd2OXkJvoL+hv5M1sTVoFJoII/8Kp2A/zgSMf0A8ZDVZzb2LBsJq 62G2S9FOFIEdOYyOoGOAm9+hk+gzbMdJeAyeju/Bfyd6MpO8wz3C7efe4zH/LOA7iDIAR63o aXQQ+Plt9A4WoP8CXIPn4oV4O34MnyQR8jX5lpf52/kf+B4hM3oy+kNsXOyfyI286Bq0Cq0B 3P4MdaD96L/Q++jv6B/oPDbjIXgOfgJH8En8NVFIGqkmLeRB8jT5OTeOu4d7iS/mr+Jv5N/m PxbuELZIjVL04q7ofdGfR38TOxT7DdCOEfrPRJWA0VuBKp5GL6J3ofeP0CfoT5R+oP9heCq+ AUZZgjfi+/HP8a/wb/BXsErEvmlkGBkBoy4kiwFPt5H7yP0w+jvwPU4+Jp+Qv5B/cgKXxg3m FnFPcBGukzvOfc6b+Ux+ID+Ir+an8jHYmULhamGi8IzwnPCycFYsE2eKLeIX0m3SOvnXPbk9 f4ii6JxoJNoBtCsDJa0CTDyOngS63w978CZg9L9gxifROdgFLw7gLJh3Ka7EVXgsvhZfj5vw bXgDvhfvwI/gJ/ELsAJYA5Fg7iFSQSaSRtJE1pEN5C6yH76HyRvkA3KCnIGZu7ggF+IGcaO5 qdx13AJYQyu3mlsHmL2H28O9w73Lnea+4M7Arrn4VH4pv4p/iN/N7+d/I1wjzIfvk8KLQrfw G+GicFEkoldMFvPFueIz4p8kURos1UibpPekf8gtOBnnwsz9/aUF8QAPppI9xM6vwWegIgXz yAQrD8E+TASu+Acq56KwL0b6HObmIB7eRiFFjY8AfCs+gorxr9AakXAgifmTqB3/npzkf0mu QO/jBuzhd3MLhDdJAD0H0mgbOUqO4KvQflJGppBHOYQ/w8+gz4DeV6D78Y14CXoOn8FD8S24 BK9B7xEnNxGvQ2WxJwmPFTwan0UwA3QrPxPd8J+lIC5Fv0dfRh/nDfzNIJ860YOwo8+jT/Gz 6HssxL4G6caBNGoEKXMn0Pt6RKVePfDZGuBHD0iQeeI7aD/VKFKJeCW/Cp1F36EvhcNAUVeB JD0dbeYf5/8cK4nlAYcBl6FngO/moKuBYz4DKjkGZVq6HjhdBVlSCFxdg6aimegWkHr3xCKx R2O3x1bGFqK3APZ7PAB/j9uAIzoBogy9Dt+t6CO8Bfjw6v+ZFojORN3oK+zGGbgQ+OGMsEzY JuwR9gu/EN4WBwG216FHgKL/BNSswgpmoN+gr9C3WIa98aABKAzzHQJzr0XzSB13DA3HXtQC PJsNcvyqxEqWQC+3AfYeBX4+BrxxFuTE9egX6AQm2AUrmgHjy9BPFeB5GrTeBTt4O+6Ampkg tXPRX2DdRjyEtMJ4GvT0IEitbpjT79HngO0Ym9cAkAsj8BTo61t0LZoJIwxGNXgfqowdBEk1 Do3gfg34TsdmdBVOw08BXANwqBGloFLhz5igAdFxsSGkmTsGOiYG9W2gvZLQFXgRzMIE6+hB DlyNiqMT0ABN08qvvKJs2NDSISXF4aLCQQX5A/MGhHJzsrMyM9KDaQG/LzUlOcnrcbucDrvN ajGbjAa9TlVkSRR4jmA0YGSwssEfyWyI8JnBUaPyaDnYCBWN/SoaIn6oqry8TcTfwJr5L2+p QctZP2qpxVtqfS2x2V+GyvIG+EcG/ZG3RwT9nXjq+FrI3zUiWOePnGH5sSy/jeUNkA8EAMA/ 0j1nhD+CG/wjI5XL5mwe2TACutunU4cHhzepeQPQPlUHWR3kIq5gyz7suhKzDHGNHLqPINkA k4p4gyNGRjzBEXQGES5jZOPMSM342pEjkgKBurwBETx8RnB6BAWviphCrAkazoaJiMMjEhvG 30xXg7b49w3o3nxnpxlNbwjpZwZnNl5fG+Ea6+gYlhCMOyLiWnXKfakInVuH127o/zSJ2zzS 3eynxc2bN/gj3eNr+z8N0LiuDvoAWJJR2bC5Eoa+E5BYNdEPo5H1dbURvB6G9NOV0FXF19cU HElrGub6I0rwquCczXMbYGu8myNowspAu9erdcVOIu9I/+ZJtcFApDwpWNc4InmfHW2esLLD o/k9lz/JG7DPbIkjdp/RlMjoDf0zTX3PWI41p7mqCX2YxXRGwdFAEBH/DD/MpDYIaxpCo6Yh aPOMIdAMPnUYoCIzYUeaI8rwhs3mobSewkeEDHPQv/mfCCggeObry2saEzVihvmfiGYpnfSR GjzvzUdCoUhuLiURaTjsKczxSlYuzhuwrJMMDraY/ZAA+lAN4Laxbmg+oD8QoBu8pVND06EQ WTu+Nl72o+lJ7UjLD9VFSAN90t37xDGZPlnb+6QPvCEIlLyf+QCOiJzZ989kdtpGzhkawc7/ 8Lgp/rxqYrBq/NRa/8jNDQncVk26rBR/PqTvWSIXsQ2v5ZJIIkeSOPYUiPL6vsa0UKuP8Bnw T2REPTPCAVGyCuyvjJgbRsXjOjUQ+LcwnZLcD6gzdpZCseQSWGKWkaGhy8vDLitfNjv9Zg7m y2eSqklTN29WL3tWCQJo8+bKoL9yc8Pmxs7Y2ulBvzm4uYvsJrs3t4xs6N3QztjhLUmRyjvr YBFz8NA8MAkotgX4goaV0FX7CY6KUicp12xI4KMcUiU+ipFHFoUo4Y7iTKSAYelG7pD5fFlP 2TjzubKxPWWoHPLmixANKghYApYMiDAo64t+rvuiJqAfkJ/vhrGYx/Mi+DQSUnFhF5JiJzSl pDQsZkMkdca6NSW7OCxqEEHphFYTyIJnEOWgXD5XyFbz9UNQiVCun4vmkiZuljBHnq1+wZnG iJjICuZUReElBYOSluxgC4gKz/sF0S4Ioqxq3pQrVTqEzpsSVjMIx4m80omPakZRIgIPTo+s d7m8qJM0ajofZqb4WszhTpKuKT4FFyhrFaIcJumIhxaKX8CCR3fDDHcIcFA/tsdzvn7RufpF 7p5xI5tGfA4IKTOXlZeNPWOxluaX9YRCZRuEgaENt7yyYaCbJpK5rGzDK68MKsBVEd3Eqkgq bH4X4mLRdplXD8eigJqL+0R+CP3U4UX1IfYJBDj44oCN44QXo79Y23NwZfRVMgyX5r75Kh4b 7RAOX9xM/D0ngYWmx04Lx4R3kR+d0CqHpFalTpGWycv06+V1+vWudUmK6BKTrC5rUrYl253t zU6VR+mu4ycpU3Vz+Zv4Ve5W70HjQfNrhlfNH5pPm41csuhHFHk+b6kPes8gGDuT80TFqhmt YWtVtQ3bNIc7bOvE2VquM88EtiL2e6ZBdZZ1CvH5/Rzx+tMK0kiaJ6tNxSbVpxaonNpJ7uwI rN4ZR+KisWfGmevPU4IynzuziGEOlfecC9WfCpWfsVA8LgqVQfWgAlSP6+txccAi8sG0dFIc tpYMLvLzLiEzM5gmOszWosLBJcVcOVldH9154PPonue7u+76LbbgogHRj33PrX35sy+O1h8Z TpK+7emcuuklPPvdz/DMaaM/e7Nk3i3n/x79IfrD6PBhWOeY2Of83wGLIFu1K7osnSkHs18d wEs2yeGyuRzuUJPQlN0qrjC0Zn+k/yCor1MnGyen1QXn6GdZZweas2cPWJ5yR8qDAb012Bk7 2ZHqC9NUa/J4w+PTxgdfSnspyC9KWxS8Ne3W4B/T/hgUQ2quIT0tPVhqCAer1CrDiLThwbmG puBKw6q0TYbNabvU3YZn0myKqhjENDHoUT0GZ5qUFlQNPHZNcWsef3ihGy9073QT92HShJJg y/SwZUk4Kc/OoVGY7uForz9cgDVwNBvwNtwG/NwNpuRfec1bagbfNC9XcX8Tc2GXZnOFXVVS VqZ3oC+rzRwxE3MV/sbiRwXAyZ68306Mb1vVxNp9SBtSN/bMuXrYwPOQhhafgY1bFDpXHzoV TxeHTlldpfX1ixaHQiAwu1Aa4CMp5UrAx/FE+ud2W2kaoAcSKL3RbqWl45rJWmrwW0tVFky0 7gvNqIc6Q6nqpsFWGur/qaPUsQjX2zKcTqCC4nBmFvsWhwdfIhFJdNhdTt4JtiFQkB+NwX7v zg1b77nimnDXXxs2rPnmWXAbXVL0hO2WW24dnT9gCI68s/TOGHox+lX0A/xJ8j0bV44Pj06y Dhw2ZeULLb+c9fc3DYtmFKeVhjPyZ80/tmX172/EmMq7B8DHugDyzgR27HItQxS67F1u7moB zxY+EIjVkmEwGlGSGdiJmJDszNorYSoGOxQdCEByp+b0pRSkNKS0pKxNEVLMJj+OI7+TbOlI HpTAP+WXseZF50PAPyB3qChmMqcsgYgiS8DvYisVJTEY9BDAShwtwQfw77Bxwuo907ePm/vG S0/uXTb8hlHFbcJhZ+CTvRs6my2Ong/5l6MNA6dX1MwxqMAPd4Kvth/Ww6GFXUiAiRaGwwKd cDCDpVq53RVGgibUCGuFk4LgExqEFuGswK8VwM8gHJIJ9xFgJgJ2P9cNDgChCzoOJR4t4Af1 CoLFCaVSDmvAjGZCsArLnThbOPx9JSBgS3Qev52/EplRMnpYGzjENspGrGGu1FBqCyeN4EYb RttGJH2XpEwRp6h11inOKe665PPSd0kyRqK3k7S2C5IdEs2p04Fj4ArI3pZUnGrJMRpNmWYz 7sQ5mq4FraV0nlJewWYF2C0zg2Q6NQ5wHcf0GfiyGYI4Gl6rGWaJs9Rm6yznLHdzslhfh+pt AQcQXSGymFEwLTMLlKI9QZMgpbZgseiFuV2YRC921W6tjp7GzrtnTb/tjhmzN/KZj9bMjP4h 2hM9H/2ocnLPl1xXx3OPdex+cifswQZQ1SVs7c9o2dsFrBjxRGGWsFTg8q21xjnGFiuvKia9 T0+26mN6Uq6v1hN9J1mu5UgSRipHRDUbKWalQGlReMW7xrrTSqZZ11j3Wo9beasZZWKOrZ+Q tSAcCPZYyrtwMoojASjtjJnq/fpF5+s9Y08hN92l8jOwSaWFcVQsQlURF6i0YlBp+9TCIYCH ANgDDBMuia5ctOA2WK4w/MYRDXXXXn3FsAn5fOb2G0cU/3NgxZ7o3wDrE2Jf8A/DGg3g327X Rn2BT8vf2r518K+RL4BtPIJHIXXmKbYpzjr3drJD3CFv13cq75PfCb9X3tefFk6LXxjMu+W3 yK/FX8qv6oWl8iZxncxZ6M6rOhfdeTsv2Uslb0NSSxJJMgaQx1sb32eqhOIbDNsLLLQIVM0i 2F2l2TwL9rbZzWO6tSBgwla6tw477G16Zka/nZ2wuefRv+Fw9I2v741+uxn7H1yw4IEHFix4 kKTdicXN0de++Vv0l+tizzz+zDNtjz7zDD0Vd4Ow+Bz0jBN1aoWDeZzL+81+Sx2/1i3I/Itu 4nBaiN3qtBhtJmQ22jAyE7sim3R4mi6mIzq6IFXEFpMTx5zYSYupZuj3LHQt2uyqUlQuV8s1 Midnm/Mt0yzE0ol5zWC0ZRL7NNTm7HYSJ3DvQUUfdnpcK7pIc3y7Q7Df1Kq7WF92rt4T3+z6 RWU9EMohKi00wQd2fRFsu62ISdjEFjscRY4gsGzQ/WjpQ0tXLMkcfuUVxb/9bfT0o3xmzR3r Jqa/Yi4dX/XJxUPcaCon74PJPs/kioSWdyGFShKLWq4pNQpZq0SUbuW48o0i+JQGZY3SBhUC J0pgoHImhDUmPzhUD6asKIgSrxIpE/PMmgykh3mPXF4WX02fVClnS+AEM7XSytgCFodsMF0M 4T7sAeL08AcxH734wxg+84ePAY2XZjiRST4th84P5BxZK0SEbuG48E1c3K0R2qBCgMmA8Uy4 TIx6Z4I8/E9mkhi7KD5uQrpVAPVnAfXbUTL+WRcyxy5olbrSh5SHDQ+anxF2q0eUI4ZOryzb 8ShytVipVqc+YzgoHvS+pr6u/0A9ob8gfWswJJuSHVpSStihGS1hk+NFxzsOzkFFtSm1nKVG F6TkLk1vMlprjA1GYnRbqX1w0JMUxkVWOu2OFH+YpWk58TSUF0/dySzVTEZTuI06bGaY9jSr FSivg9dZ3ZQC03USCuB8R6DaiI3e/NRpqQtTd6byqaaArBlMYdmT0hznuFDc7qsHw4FyHZgH mt2tZdvL3VqqCaIkM0TJlnKm3ct7mPlghUlACyudDDRiKbSjaXtvU1AkzCJgAAgeWEvppNtd NIl0KOqVrFgRKA8h2v5UCGzLeja8UQMsGemgRjq8UQNkIdYpM+ZBIZVhSxFTTqg+hAVRDPrB xDAjEAhcgBketrid4SLfY/fgL/dG/7K+GdvfPYOtYo/G3dZ41dQsbsWU68vKMJ6Q//ATB+75 BGywUPS16LFbtozC81atGT58CZUMBUALZqCFXLJAe1y0iEE5y2VxBXdYd9i3Zz2Qq0j2Sjux HjF0GV8LfBa8YDifJuYYJhuaDA/otlt3p3XppYqglj4ic3bazMwN1g32O9JuT1dKMkeKlbox hmpTZeAqsB/TszJL9MWB4rTiYHG6JKqCRQm4DVn6tLS0oJSepg1Yol9hX+lYlrM0d6NjXe7D jgdy96ftDxrW4q2uO90P5T6bGxkggmX2Vkd2bjiQSNOYyZtOyyc7fOnxMli+tKwlQeZGAx6c Vpm2w3B/2itp76WJgTS9gee9dFMOAA2iIkqNHa68cpzYLlZOywgzKzbFCzSI43Ys3wCu2lkM ToeZWbU8a2lzQkuMtRbE42n8WZ7wldk6pwZdO4tcGvTr0qBTl1ZcEnZpoYEQZeRABP2aXD7X NNdCF++a7NXS0sMmL67xxrzEW2mTXAGnFgiGnVqyL+xz4k9B3hbJgZqMrRkkQ3OnhDO8A+j0 XCAeagbgggE4fwAekBooMGNzEQ4w7jEp5SyFJnHhoBhAOIRWdFJ2uAhUBpywiPIEWD7MrDtH TSBqUtczm5p9wCeCIjhHzDwKUeIFAztO8aG4TF4En/p6Rv7psTc0RWctN2VDBDvw9UFDqd6u L6XZdj21qr/apytlJI6BykHrxe3nElBpYD2nM/u5qNB5mflMj1ZFMGwKsNe6YMb8kgy7Y3T0 +etWf/zZx+9lR7+1TKtdWOBPzsQv1dWe++ajHpwfmjA5Oznf77Bbqq6c8tDmo3dvGXTlVT5n MNWRPGtM1R33/jYCFD8ZKL4cKN6D/qiNrzXVWeucc0zN1mbnLe6Vnu1ku/5V86vuD80fuL8U v5S/tH3puCDahtiGOMZYxzgr3XX6Zr001FriLHFzy4Xlpg3CHaZNnmesu51d1oNOxcikV1KY pges9rCxyEBrPKlhlposYcNhzIPgbtWsFh3SoCnSoB0q2oYxPgxWPQ+P/C4J01rYz3wDzRji Qi5JCtgvMySoUAudOxOibix4sSHqzcJWheKmOZgWCYeVGQ8lVIykUWMREM0Piv7FOKO6+ZY1 N9bMcmB76NzbX0b/gp1nXv6MfF04cdI9e449et3C/F+8jEHXYQln7KbS4i7A3UQ+E+yIRzXX tZbZlgcFThE9Yhkps1SRKstpIpmobLbwOidSHXYwDcA+yHQ4EDX5jE7Nnx7eGzcivG5Kmk6g /m3uNjdpcZ91k2/c2K3qMhWZyX5o2ybjszKWPa6EYgNapKotQboQ4kZz73EIM6jAdAoU05Vm ZhaD2rMzaTmYZrlxQ48137jnGuzxTSgftTgXe3ZOnn7DngdJW9R9smlY9dJTuBuUMazTF/uC 3CM8BjTytpbjR34cVHNMQ41jjHUmyeNAbs7pQC6rDXw4K7FjN6dIqqR3U2FgQq42V8TFNUDS 7eJcYAi1A3qp4kIOevLVCt6lTslX8xHKx9PA/qWmUraby3RZJzvK7Tvte+1cg32tfZv9uP2s XUB2s91vL7DzsPEr2nr9l6pICVjAw9ihjj3WPaQubkeBs2Y+x+yoM+zEDJqeAp1jKUrYUfUY jCaGkBIXQxCwnSVYXFScYSGrunVZyVlj3NNvvmZVqU659Vbs5TNPRifdFkpO+ji3aPzIQQ/g d06++1R0E+DHGB3PTwA6sOHwfmu2gG1U5rr1oHWdoHolGok0EpxQR+IHO0PDQH+8QWcUzQTZ RN5GeI7D1IBsANnVifdqVp3JkG/MRn5HgaPBwZ11YGZIpGWGaapZk1PDDpfLy5dymtsTXsNR RyJLUwgrgftHS1ZcirTkweHEKYL9lQTOQmN7PBDDv8QRWii0aPFY87lTYBHU55cD+ZjLMKCq FAHCrKWQkYxm6uJSeQWf+qqIGVA+FFDezpvR4RjYvrGz+zgzZkdoTAgK9OjAYCm3mW0eiKzu cvBZz3ZAgabtUI73VWcL2GwBLBm5YFpWFmNNI+jmCzgY3TQ8Y/i1a2rGj/NcVTz9Bg+f2WMk f79IuuqnX5Fm+b1hSR2lznvA668DCeZEOzW3ZHPZpspzZL6Tx2E5bB4hjzB9aRZESmkpFslo EPU6HfhlBGc6EeM/mDh08h/4T28Ebm03GPR9bKjHZ/VYfzkb9jlqcU5MmJz9+XARdczCTAKJ Dgvz0YoKU4mDr4ueTh9fOro1RL20Le/WP1ztI6nPNw2pWdce9YFzun/4nHU30ZXqYaUNQGc6 vFbbki29zpMdUhf+PX5fOmsQZMnLu8VssQQNkUfhOnwzXiqpmTgkDcZDpUo8RtqhuyBekJQM PlPKVcP8UHU4P079JS9fo07i69SZ/Hx1Bb5FvZ9/UDqsvs//Xr2oGjhekhTVyfv5XLWIL1cr ecXBe9Sh6jj1RnU3f4h/Qz3PKxLdVqs7DE7AiQ6Hi6YnNYfeEsa8KvGIsERGisxx8ORgTl44 RokVGpmc6WEukyh2QhRB1OkSj8/qMM1qLnisy0SCHSFBFATwpWVF0SGhk8xvF4sUSDSd3FRt 2Gk4aeAMHK0mRTpabT0bN5Mp3fOoSU/p3sOEhZvavZ6xYAGzHMqP7xFE9Mg4tKj31Diew1TN IxpR2ge6X7RoMaZREcaManGA4/R4TfQefO3RV/GY6A68Kbr7xMckSLjo73F6VOn5DR4dPUS9 rtGgLQYCnQZRIR6nzZG8crKQ4vSOSRqVPDrjd+ZPLcpgT6Xn2sxZntmZd2Te67nPu8vblfSa 9/UkvSgaHE7R48wScxx1nuXkDrJLPCC+KupfDH9kJinphYMsAwzp1KpK19KyIfKkhBemX0wn 6ZUplGoLwHG4IgWjFHNKJOW7FD4lZQAuQhrUmpAPpjY5QI3vADW+A5qbGo2k9QAv6Q0qta46 4NmAhMnPUmgxgDKUZtelDsqUc5RsQ51Pv1NPfHocA84A1RbWe6vDONwA23B3AejyopzANBf+ 1IWrmanHuTxFCX8EOIYZYPXUKwnFS6co85wBfAPzgAPATjatpflgb52h9hjIJA7EUcKXpLo9 i/rCTqeDsztdAXoAyTQedZFLBpfEjwkwPZBjqh+qBhfjpljot+8c7azikjKiX+nMEjfqqfqn jk155N5fXVOzsGoSvmHwV+kltSOuGVlk1pE/DXz4/rpNh6Kdd66/JrnEI1dWtm+celdVcoY/ efzIYdHfWgvdWWXDphRmlqQ30b3eAHt9PzuJTEaPUf/pgjZIV1qSdHUSsdJTsvgZ2beSWMwP MwyzFSeN5KsMVbaRSfdLDymq3giKEPU/ObPpdCak9p6cmXPA0zVRG0KPf3xuVjb2TE/Z5z85 NWMHK8NrNR09NYufmQn0YIX5woA7a+LQzGEDU7PvaGUD9tzW/nI02tN13T7NGh69sv72dbOb 7hAO95y9P3o6+l30bPTj6+oeJblPV7fsfO7gE49RKXUvlcewdidq10Im7MOluIgUma/CV1n+ gL/DiiQ4hXRSa5ljETAmNrvFauPsBDNLKYUDeaPaHaoTIZ2aKStMRCs4pmDl34loZM90Ovpk swNTRfnvTaS+swDK9mdAs7kYLcm9J4uWuFC2XCaq8XMbjzU+Wp0SPe0ff0XlgqLoaUDBZztH tWzc2nMPGbR7avGITXf0fA2LhvWvRkjcAXyehYd1oRyYVz14HqDs9Q7RqQ9zoJXc4eAIMlIe 6R4R1Pu5/JyJSkPO2pydOU+Ju6Vd+gPiAX0k53jOyRwjysnPqYEHL+Z8miPmUF+pHMpr2UNB CvCSN8XJTtmkADuF4iWzxZKVlJycmaWCKWEyZ1ot2tTiBgteaMGWTlKpmbxJmSnJULcwGTck 42So258Blg89hG1HKCvhMNFUGwzzzoKmWVoFhDII6VnhLG3oFeH8rHeyPs3iTFm+rLVZHMry ZxVkxbL4LE/2n8t6mTrxgiChGc8D74INdn5RPU16N8DMNqH8DIhZZmnAHiwOUY7GIRtTj04X Y2xwfeiGZPVtyKW9WY25Ld2zHiyofPL6pU9mww6lZI0fNmdg9HRq+eCKOXnR03zmPc9Omjx5 0rTrR+zoqSPTHh9YNmrLg1FCKh+ZOqBy3UM9F4F/JgG/Nib4dZuWZ60T6/pOsncAS15QlJbU talkKBfWD3WEPWO4EfoxjhGehxTFzthU52W2rE4ymoAEVFeO0ZDJDrZNJuTdSnk2IHtSasv6 HXrGOTV+Qnamz0agJ9vNYnP/k+1A3IAHV8VaVOiix9r9WJRvjP5QsW/qoegP0Zfbb8OeHmv+ iFWNG9fNnrnh0evqcBaWsRF77ifmiy17rlnw9FOHnthJ1wsWawPTRfm4UGtYnrIhhVj1hpZB dxjWDuLBwCdBroCyLafh4WQ4V2eqs9dlTMmZEqrLv2C5YLMMMxQ5h2UXDagyjHBWZY8YcFbf 41LvBtmv0xt0uXpDltHpcuQZ9OC3utNx4owBdA47CrOwo6AOnT6eZufGj7mCGfF0UDh+3KU4 kpgCmSZQFPtMWTQxqnkU0zqH5PaIuTm6TBALgGbF4/F6tw7CgwDpnZqKitIDVk9BH77PJTBO afFUr1jsObe417nv1fMgDyBIsrms31m0odnUbG/OmJ0zK9Scz940uASnq1eRFMPWJA6jXMXg YBlJ0A+ax9bvhHolrpBTsqcsKMmwGVZ3f3DLdIxf/NVaLF3ZcmRr9O9/unh7w+y7N85pur0y a4gjNeAcFLzhkecPbH0f67D35w9cvPro4bllXXcbye3PPvbE40+3PQYokRCStgC96vHPNGuI C4l+XZGORyLWaeBZiJ2xtR2Qcv3Sdk+x0hk7rSn0fbwHIn1vCdGSQO2tG5wpYd4PkaQoqqj3 IoeSgzIU6Uv1tP5b5Tv1W73wmvCG+pr+Y/Se8pH6gf4r9JmiPMf/THhOfVp/hO8QjqgH9K/z ykA+TchX/fpH+PuER9QH9PLLOl7wd8YKOkRVgbRQu55Dej/iCPFjZAe3RwX7rlCn2nU68JEl yS8rdllWeJ1eX8jxdo7jdSIYWtSW1HOCqpMUWZQlSRB4noCro1dVRUGyEdyhfHCQO3GBpvrF Y7pjWj5ziwo0vZ/eMCDYY+i9ROD1jO2p97p7eryennp37z0CJpESkglcIEoNzP2hMQJdsUEY 2/9iweVJ/CioHj6JgyF2wgN2P9iKOIDBXASDETdFn8T5n2A9bsD4jzg3+mj01ejvo58Ihy9a uG8ugrn6fSU/6odO2OUKvIE0kzbEoUItQM/eCC5BiDNzfq6A47kRQtzA5ZCHf3oeXdWp+rHm z+tR/pn6QQX0gL2CZOMN9ICd6qXG2GnhBuFd5EXvaWPvUDbZNzl3oh3ia8p73Hu6f3JKhpKt zzbk2HOcS4Wlyh3gUNgkl8vmcuWQXC5DkLKFclyNHxK2K29wv9JJeIKZ/hLiLH1BSk/X3HHm VQ2Q4qmay53Hy0Z6X8FYNc2Eq03YRK8smOiVhTRrnsqZvjFOQd8g6JJgbwGoIkdWm4RNkk8q kDj6OrYjafXEy64qJI6s6RWFRafihzuQSVxPqMcCe7cMdgx9AZu4m2AxUy7ky7HvqujbXwOa N+JVOIwNz8wsjP7O+/Syn731etuyPSTpurNf4q14Kl6AH9h5Q6Ry8bqvot9Hv/r6QYo3Hdgz U6nXhf6qOYRsb35YopFII5lGHPV7IGUvQfzAbw/zWOR0sqzqdWCLECvnVbxqGsrTvabTA5LO atkp/rCKBJ0deXQZKFcXRkN1GxC4NioP9K8ASYuQV0rpKZnmTs4O6ww+Q4FBM/AGIHGzWq5W s+scBZqOJ6U6vpyv5jn+MCkAZ3atZtIXI+wHcuGw55LnEwJ/px7EX72H0TorM+VDCd1aCt4+ Vb+LQvX0iD1+/wXI1kUNaOrnHIpOwlmvD3WJRvObOBAFhPT86cBIZ14eSWVvbAYAlrrYXaPF WjBfKeALhBqlRVmrbFMkEQskg+eIhGSFnlisEbDQifM0VZSAK9EaSkJQtHDGGtJC1pJthCce uef5xI2H8bX7iEYPdc7Vx091YP6nEu/emQ9QD850ccABdtqn0bH8XdFx/MsXLvxwZfxsQPQw Ofm8ptNxmXKmDhiHOp9rNSV5aFj1Dx0WVuhReSLVnkoeCLUQiYqs/ln5WuV5sEhtJJk3Kz41 SAbwfiVfnU3m8E3KXHU5WcE/pexRDyiH1fPK96pzJ79N2am+qryhfkhO8B+AlDxNvuA/U75S DcuVFert5E7+duVOdRuRanVNZC4/W5mjLiMreWkEqeJHKFXqtfK1Sq0qudV8Y5gM5cPKMLXc KHFEz4sglB3Ey7uowz1My+NAlPLgECcEJNGpaiFHIEt04GnrQTAysSjJPiM2dmJDB72Le5gM YTcJrquP3yBwTZwUFgolTVoDcvMYPUQ6pvPr9KSTDNGs4EJr0BBp0AgVgnOnp90YBi11h8Cy Bv/MXPZXc5nXY+5Z1LOozOs2g68GFeZTi/okqZWKzP4SM8QuYdkm1nYhOXZyn85Pb1zVs0/c ZkQgMMEpAc+aGt4BbLkHH8EqlvDR6JnoJ9E/R/8AktLNfQFS8rYfVtMA+7wDISEI+6zgXZpR 4UTZw7lk3ioTeuSAOqy6cq4zvmqaarmwIK5Qku2SJHMyIRKnALoAVRxPF8zTBfOF4juUTskW zaPpanQNOq5Ft1ZH2nTdOuLXFegAzUqiU5pqxokTw0ohuzPSDTKZ3hpRKaoSt0aYKUwXeT5R YhTMNAyCsGEgXTwgaFDBcHY3be1BXbG8VlfMJnyFd2BYngiRwDm5Qk7j+EpuvbxNbpPb5VOc +Ar3jvyxDGohXw5zw+Rq+V5up9zG7ZUj3IuyLn7Vr6g4TLQidtXvpGbILwwTP40kezHUbNeU wMAwmQQRa12Z6ocSRDKRJDfhXNIAkiUNI0XSOKJJ15MpkmInSdJYMlJ6WHpOeot8RL4gp6Xv iC6LZEtjpBXSRul5ItLbJL2OAOxs7xaDBUV3mJ6BYcsO7Ce12Bb9sGcfbGwe9+73ldzRiyOo 5H0SlF2m0I0UNEVTbiQ3kS2EIzyYex3T2M7ccEhWBIz0CjqCa0GIYFKvGQTE+3g/H+F53qMe xrtxG+rdg/O9rse5+jPsWlsgYBGl4sHpJUVcZvT0w79ZgEnBKT64bWQs/Y07UO97aOyB7UzX HMA6KsmkJybxYyUPP3tZ74VEVD4WLPjEi+VejVsEMlEP80/BQW3aAfdBb1fSm/xr7uPu457j Xnl40vDk4SlTPI/wD7j38LuSZdHrR9liiXcUP9w93DPcK6e70z3pXs6ZyU/hN7ofTXo0+dGU Pcl7UmQrPcnxpwxKWZayLmVbygcpMjvmcdod4RRi1ptSqGHALvtolBKBSK1OUMvkiQ6C9aCC p2hBnz5fT/Qa1Ot32QTlhNOJq+k5qM90wryceFLffTluOlPL+fyiMmo6g+oNLToFUhfULr0Y iC1Fofj7rpRYd7ullM6h3cQSzWgu5WVzqSBbILWU9l0Ww1ScH0NJsZMoGUJK7GTiyiUocEtg sJWZ1MxoljIGp4Pr57CLksiLEq+/mGVu+/oXoaFNdbVz5OgXHiy/+tGFq8cWRc9f7cRC9If7 sfK7feXXTr6hae5NyV+8+dULMzqmV5yryaQ7MTZ2mk+CnchBv9Hy73Le5XrDwd2UvCWZ7OKe FXbbD3KHhYP2j92feGSnHQdUA+Kxy+YM+AxmvdqJ0zVFM2w1EIMBOzsx0Uw+W76N2CjybLuS BHA5phwwA80RZgEUQjW/K8sQ0XcDhvVO84k1vq2+nb69vhd9gu+kdKI6Had7Q84TruX4BPLk 9mL6TBzV7GKfpTS/PoFuGtEic5LjB/Lxf+zwi14F6bt6F0yTSpx96LuSgEcC+JPobTR6a2Ys NhsWj792+eIJg6t8i1fUjh41SxftSZr/y5Xv3DL73dXbo5//9rXo93h9YM6CdS1zb3Z8xjVf O6Z2ZsOA9TuvWzdv40tLko6ufyl69jPgNEAqPwLwqSIDekMr1fsNpYreow/pJ+pv1P9JL54x YJF38hl8tmGU4TrDbsMhw6sGBRMZ6UWDBAa8QUJ6vcHQiV/QvHH9RVWcgTMQXkWSZug2HIfC EZyNZDD69x9EPA8AYCbU7he2qlil22A1SzulF8FY9JrKyRpCiMd4GF+DRzF+P7WIvg5kFgMq LzefK+upZ8KW2fE0oWqJv8X8SuJdEDV7qBmBiyz0Lg22YLK65xly89cHD0bPRvfirPPczy7e 8G30I5KK/xnVAU3R24ZnQefo0DbtClngJTlDtPoEXCDsFYggKBxPLxqqSoYOyZJYxZFRKtJh ndfPLDnOwCv9Lxjq+18wZNYu2Dtl5+KXvWmgNLAo8WKluz2lVKBOnZcl+9ilzDpoxC7ZMDnk CCTCA3z5xS/JyR4/VyQcvhA98m100bcw++uAI4qFXSCbzFqObPTrS6wjraM9DxkeN263fmxU rBabNWAJWtdbQaBigwq7ZbVYOkmb5jQa7Eajwara/exCAFeDt7EXd/2Y4BDjgSSDvpNM1Qw+ NV8lKmUXdZedXQq3O8P0NZ5m5+yd+DnNbrH4zPlmkm8uN1ebOTNtaqZj2UwmI28yA9Mcd2HN hV1eH5gyAc1qWI6PHqe3kXaivdQBSn23C1+N+tyFc6fo22CaoQg0M4kFFaE+jqqnF54pCRiB BHAfWzGeuoyhsmyARCl+9UwCVz/9OuzWLxtbu2pl48qGU9vI6Z6/Drhh+hHMN2+NvhVDeGXK tIVbt23YcGOA/BD97rv86NmPDtz98sewy9cCxnOBZ1woiLq0YXN1S+UN8nbPbmG3/Kxxj63L eNByzNZtecdmcAiDLSPMq5wHyG/Nx+3SEfQOgPNYclvNSf4kkkRRmAQoStplMvgC+QESoAgL 7NKU40pM4ZROXN2xFzxNiqk0H58Pe6KxDXEIIHGWp56oBlPOm+E+YfWk90mfhOyJS/lzQH9n QovKIfSezdUnDkjjjhXFiJWJlcQb9P53LXlT9Kw6aXjdTebmRyM/RC+884fon3DuX3f/rueJ 1ePHzWmZNL6Fn5g6qaat5+bouff+GD2L6/AmfB+eeeTil5seWLVl6/o1QKHXAn+5gUJ16I4u xIPRMshkCas6r24oP0QdJUzR7dH9Qve27iOdGgC24iTk0+XrSL6uXFet43R0wbrD1HnGzx8C hwrYUy+D+OjIp5d+SYNmJNVg7XoNGHn0CSSUUU0HMqMn7hedYWSDe9dOr6w5REJcAau15Fru peXnb8XRv0lnXuWfwMKvl0bHRG0v4wKy4jt6ay32Oe+CvXajdFSAAwcK5BRfOLMzdkFbDpnX LK/ZPhQ+lHiHzmV0mB32peZl9nVmKRPl6gejYfpKdI1+AT9Dnm2Z41ietSFru2GH+ynDs+5n vbtSd2ftGvBsQZf3UKprue0O2x32DVn8dtjO7YCx5IE7IBdSaD6D8w3EAykWygdWDyQDD5O7 QeN2azanO9ySvDaZtIHLnSxazdk4m9mH0LIgW8sm2Z3kbs1sNfjScHladRpJo32k0UqvKPhO KMtDJ6gz7y30nOCWZ5xwegb9VIHRi2WAu/Ke+tAis6X3xQ0jpXoaGD0xrNJ7M/WhEM5M3Hih 6p7qK54dqoUH9z9G4/rl8aj5Mz579zen5zasWhPt+fD19Y8t65pWXdMwbdz4Bu/yumsXt9bN buJcA59oeOqDD56atTN30NGb3oo233xi+Wt4/KQbpk2qntbQc0Xrbbcsm33L3YjdAvyctye4 89da7TBLlaVJt0reJD8rPCvvMu6yHUBd3AFjp2W/7VfoTUu3zRK2TdHVGaZZJtgabOBkLnc+ 5PrE/KldmGPDcWb1JeUDs2pxRhXMAT8wKkW1gTFrtfKpcjbBrG1xZu1nRCTF+dXgPlFtxVZv Rpxv9f34tRfZ/45fe5GbkGYlILtIcRj13Y/G4Ut3YeqxWZ008tpVlrk7f/4DVt7+FKdGP/jm +ffIDbdMGDcb+HUhnpg6sabt4k1Y98Gn2BLdHV0aXRB99BCXvPHBm+68e/1aoLhNwK/TmD78 I/VfPukwWJjXpd3iyQtLnJmziVnKLHGv+qL6uvKW+rGqTuQaOGKQ3EqleK28TBQOKp/yZ/iL /D9FYZw0Tp4l3sLfyT/CPyo8LD4sPSyrPt4qhviQkCvmSrlyvqGKrxJUUZQUFXx1QQW/j9cJ vEh/ZKXTyZLKqaqOp6+DvUK+XOoDxm8yEF0mhtnSn9V49OU3JTQGVboeQKcb0Eod175X98yB lUFHxF8QgQeDFtfH78fTw7wAliybwOAfjadGH8Dro7+J/vN28GLO42XRm3tuwJ9sij4PAykI iUP4TKTHn2mDwAZQkUhUSVCSkJOk8hbBK9mVVNWi17Oj3KCulCsVR3GjxB3cDpHdodJWDLg6 DNYDzwu8olN5fRLy8k7BrnhUh14fRNl8lpCnZKtZ+kGoRLhSqURXk6uFUdJoZTlawS8XVigr 1OX6DWgjv0HYqGxUN+g/Qh/x7wvvKx+p7+u/Ql/xp4RTylfqKf136Dv+vHBBOq98p57X54F1 8a6mJA0N85kQgZv7MSuptKTvfYZoSWQXu4bG/WsDZHQaRIlz37GJc99rtEJ67vufznLF+Fmu mm8sNxJ6oCtXKNgI7oxI5iMdBPBosHG/H3sMr3Rhb1zl07PcxFFu/CS3/v/gKJed1qL4FTx2 Ew+kFKL+zH6dZiiF9VxoN5TCci4cNJTqND2tOduupzU0EelvZ3S0dLL3Kh9zcaiODLC7AfR6 QIDjcF00gi2vHcKmfW9hR/S56N8P7ecze0aRThp++Jg81zMZ5M8UsA6MIH/oUu/TqlaoG9Xd eI+0R9ltPKS8rshTLHXOOu8UH+gE5xzvbJ9cSkrFwcpgw2gyWhypVBp2K2+RN8RXlFcMH5Hf ie8p7xksZrffTdhb0wwQJ+5dssFnyjcRExVJpl1ISDlRzWPem2Y/ofMEfmQIUAnO5Elc7ddj 8CUsZin+HqpksAtMAHq6ykTLYIs5M5MUvr9i67bl738Q/R7iohpnSri6KJ4I3Tv2R6dFGw4+ CIyyCz9+8MEvKybNj8LnJa1i0jz6W5WXKoBPtoMEWUdPcdBirRwsalHIkPxygfyi/KnM58vb ZCLLKG5WK2BTl4vVIhEncEBJxBs/kbncplb/lU1dX3bpZzv0dv1Pbebt3JmeYWRmz6PUXn76 Qs89VD88iJBwFObmQAF0Qbut1DTadK00VzdXT3eoLXjQeEJRRVlUXbJTHWysNFaaJNmsWOxG u8luHmwcbLratNS40vyuqgNm9CxLATb03JEiKk67ojcZJxqXGtcZ7zf+zCgY/Qa93WDQm/QO g8uZYTPbcYO9zU7sduQP0KUbjEYHko30x5RZyGAGt/S9pKw2MSJ2i8fBU97QEsT+YEGQBAOO /shIGzTjEjLYD0qoo9kr6C6hgzHKhoGh+n6WceLdJD21KXQmdLTLFuAGkmDQYrn0C6fgg2Th X95f+/JLDbfM7Yg+/sHiSTfMKvvd+3PLqkel7z8tHK5+87anP0wecsdzYA+WP1cX6HmUG5de e9WY6/QCxfEb4Kr/CeQk/V3CQC2JG4JFkJuqspcjRMzEfqEAHKu98tvP0d/DUs/OXHY+8cOR 3p8TvBH/OQFnoOnFf8RPYgi6H3aPvt81Ix9aoxVlC9nq1a4mvkkv5LpKXaOcdc45TqHUNThp Q9JDwoM6wWfJwIjYrBkms+z5ye/EbGsD2B8oAHVusfqR31xgJmaKYv/lPxKr7/uVWNyD6/2p XABYyWml7gT9BgMYMFhyJShnegMxeD9JOdRwa2dDXsmssbdPf6rnXZz9yc0lo6aVlc2beOUB 4XBy5svR0/914Pa2GVW5Pv7li8VG65Rf7dlzcJbVSE86HgMeelp4AQnoCs1bI1He4rkMAck8 qBnC9acIcVBXf/aIUsYY25P4GVgRu6H2GM4mJ4UXfhj9LcViXey0cFp4l/2+7klt8nZhu7xD v8PIy1gyyibJneVeoSy3SsstKxx38JvkTfo7jOutm+wbHRtdG913ePWSVbZLXofVa/e6HV7J lmdQPHkS58zaq2KkmlV//Deqmr8gRUv8Dq8tRfSnnE0hKeasNoTp2VsBO1u9syN59S/73D2G 6/pFfT8jwlRP19vCJfT+T1HipRDCdmuf/Vg3vPDnszd14BGgtFdHj0W7oqvxoM/37fvzJ4cO nSTvndzR0h4aCibOw9HHogvxVjznu2gsFrt44QfEfjBPPp/12JffzJpmKvsnSpLZXxV58s9l l/5aFIqOl7YApqjux71/dgUh6croODT80h9i+dEfJhksQpXwGnRfChZDKZouTEFjIDwA5Tv5 P6MtXAraAOkEsge5oe4+GvglqAJCAYTJ8OwueOaDvBHy90CqhzAa8hTuXikFrYZ0Eg3SXUiC tktgvEZoo4O6AeIedA+Ud0D5yUTfRRDGQsik84D0OgjXJsLExNibYK4KpFOgj+0A/yD0+wak 90P5MXhWR9eG/oL+gu8mL3BObip3gh/DvyxcJdwnvCG+I4+SP1emgvnxrC5V16P/h2GR4W/G t0zDzUGL03KF5SPrPOsh23P2B+0f2s87jjhnOD9zjXD1uB9w/8Pza+987/fJ+uS7k3+fcnfK kdSC1BtS/5TA7GBUBKRCPwT4Ph9VAE7HkgVQR38Z7wLboRf/I/r2AtAPJZyA4tHoRJ4DrTw2 keeRiuYn8gLSo+WJvAj52xN5Cd2LtgIU5sH2QxtxIJEHMsfPJvIEybgjkeeQho8k8jyy4x8S eQH22ZTIi5DPSuQlnE7KE3kZFXIzEnkFbeYeSORVRHhfIq9Dg/neOehRC39tIm/QV/KvJfIg PiyGEc2zm1ubVzXN9M9sbG30P+sfVFpa4J80p8k/duGCha0rW5r8wxcublm4uLG1eeGCgX5/ xbx5/gnNs+e0LvFPaFrStHhZ08yKxc2N865aOG9mL8hQVuOnVUOnNC1eApD+woGlBZeqf1Kb x+Ansfwz/uYl/kZ/6+LGmU3zGxff6F8469/OCCYxu3lJa9NiWEHzAn8rNJs8cOJAf01ja9OC Vn+mf1JfL9WzZjXPaPI3Lpjpn9+40j+9yb/4MtgZTYtbGyGdu3Rx85KZzTNo90sGAnk0o9kQ WiGsQk1oJpDGTNQI5UbIPQthECqFbwHkJqE50IKSzkK0AEIrWolaWM1wKC2GPI0bWV+0xUB4 4gdCnQdfP5rARpoDT5ewUhOkTdB+GRu1AnLNADsPXQWw86Dmx6MM7dfG39dqKJrCelmSGNOP CmFcOt9/1fr/v21ev/En9at/AVo3s5lTvLSydc6E3uZDuhjdCHUL0az/AY7imJjN+m5ls4vv QTN71probTLMcyLDZw2DbYKnrVDKZCP+dC7VMJdZ0McMBt0IrWmf9PlKSKez2sX/YdwZrKaV /WE8Wp6LljJMLIE2tNfe2S9hf8RuNozV+N9Y80/bTerLjWAtl7NxZ/9kJXkMXwthBfF5jWNP 5rAda4TZDOjD0GL2pJnNayLESxkO4rsfp+khsPt5jB5bYeyhIFLzYVz6HQjt42ua/6OZDoQ+ F0Lt/wwqn8HNh7nms7ksYRyxgM2qt2YaWxnNrwC43vYGEH/jABeTQIRXQhgOWKf5aqilOKqE +BpWPxJqJkJM+e5qwNVI+I5ltZOgzsBecaiMSuPU3DtHOu84jnvr45TXAnNbyFosZm176fy/ v+t+lA1QlKty+tFkc0IeLGXSgNImHWMlQCztmwvF3rJ+NHppLy/NM07D81n7+Azp3OYlKGdB one6Q7QXyitxHqI8VZcYbQ48X8baUQrrpf74mK3/AWNL2IitQAONrHc/hObEzBYzedrM6inf zGPrm8WwOp/hcSzbmYWJ1SyEGTb1g12e6OlfjTIzwb2U1qfDCloTc52e2KcFibXM6oenSxiZ wfBwCV/xmQz8l1Ty07EvycJlTD4uhXg6pHEsL2H4bv0XfU+GkeexcZf02+dLmI/vyuXyiGIl PtYShnnK13GZ8H+yw35W08jyvVKld1wqN2cmtB/FV1xbLO6nqQb0tV7cj0ov4fQ/44fObj7r v5eKFl7WywJWaul7QlcVx0M2KmZ8spxRxo1sn/vz0qwExVya20Jou4Bx7FK2E3QGc/pWHB+z P7X3aoM478a5rCVBOb1U+2Pq+k9r7k85oxl+frq7dBfoCIugvon13qtH4uMvSGieBT/aqcU/ 2pVLfS9h0n8p09hxnbYM2jXBrP4Vzf97GuntL86nTYl9mHkZB/b299PdjmMsvoJWJhda+/F2 7141/gjL/5ov/5Ok6sXvf5K+MxiWe7X85XOKr4jS0dB+vU0GjVEB5SEojEpAJ5aAfhwCaQGU C5jl52ecWwVxGL7ZUJcDbUrAJSmBuhJwTopBo9JwqVcaKhMr//Hq+kvrXk1AKbSRSb+fcmAL kxmNCehljAKbE/JlaUJONsGK/Yn6pr5V0ln8T/Rz77P8H839cp1MwzUJy3kBxNMZhuO0u5TF TQkej69xHOOjVYlnSxLUNicx41l9up/CTGR07Ge2y6xEH0sSkpGu+Fq24iUJXdP0v7LWmj58 tzCZv4TJiSw27ziVz+8npX7K1Y0JbpuX0DwzmR7stQFoT0sZdFx69Zd3TZfB/Xv5EbfMKa3T FvMSEAMY1TRBXXOiblUfxBImPVoTdXFcLU7w+f8mZhvZzHttj6aEXej/EW6p7vsHw0hjAqsz GNTMhBRZmLBRvmTtm9kMl/R7fkn7x23jlf2gZiaoK25RX4JayiTegMs4r4nhqncXFjPttaRP k/oTNNzE9Om1Cd6kdf87uGxKSJ1LEnAm49I4tTT/iFpaGbU0sn79fXZHr93WzJ4399HnT3HR mMBHM1ttHOOX42RhPwnVyCgwK8Hr8RFWwXfh/3XcJM6PUCwLffiv/pLwMe5hZML0B/Ld3I4O s71Q6+Qe6jDZCrUKM/cAqoFAUIQbi7ohELSQuwetgUCgeVV73qDCLprpUI2FZmi/BfkhrIXA oTaIMStrEGj7LR02J+3+9naThcHd1F4Qjmc6zO7Cmgo7twJhrolbgILIx62GNBXSGZCmQDqd mwkrovPUOkzmwrUwXjk0L+ccoJh8XAXnBOfOx43gvCiJNVvaboyPs7Q9O7ewQuWGc27WxMQZ QKP5OJmT2gt9/iOcBjPVuI0dio7Ob2O72VF4jFvPScgOrdZCK5fPdIxTUT4EupJJHYqhcFuF npsEy5wEaPHBHDHayWKNW9AOHcF4I7lk5IRnN3IpyAFpJZfa7vB1H+HuY83upb3AeFe2y0U0 6TAYC7srFI7e+o5wdwPG72ajbevIHFKIKjI50MEQCCB1DeTonXMztxlym2GbNsPWbIat2Qyz 2IxE2PdN8GQTtMnnVqEWbjnaBmEn5Hno0tEOGOximfTswi7Ow7kBE+YjgDsMtd4OxUhn5m63 2lgzd4feWFh+jFuCqiEQmHxrh8tduPAIl8uWMqDDnUQBWtoVPaDOFd8LAHTSPTjGJXOpDBMp DAORCh+UMTJxPoTJm+Q4xQ55l7xP95f+0XeWvpVI306k/xVPY93keAeMonWS39L0ZEUy+Yz+ xIp8gnZCjpAj5JdgrPjIx6STzoJ8RLpQOaQnoDwT0i5IiyA93B543ddJOjsggbk/0m5w0sWS X7aH8hMZX0Yi40pKZKzOwooM8jJ5CSVDFx9Cmg7pS6QbpUH6IqEXZnykm7Si1yE9QIrRMEj3 J9JXyFFK0+QQOQjWlo90tBvpFCLtEk32tos0eaEdxUs1+b6j5AXyHPJC05+3Z3qh9pmOzHSf 6Qj0h8nTpLU9xWetUMkTuBafg0Zt6ARNkZU82V5CO9nWftTv6yLbyDbNXaJlaHnaLq4goyCv YBfnz/Dn+Uv8u/wVZnI3EgB5wLBkC8Rg3xGgHggahG1kUztfEqnogTXRdRG0FuI2lmuAuIXl EMTmvqdnWa6crEfVEAj0sRrCGghrIdyKeIhXQbgJws0QbmE1rRCWQlgO4qMFIFoAogUgWhhE C0C0AEQLQLQwiBY2OvhSDKIBIBoAogEgGhhEA0A0AEQDQDQwCDrfBoBoYBA1AFEDEDUAUcMg agCiBiBqAKKGQdQARA1A1DAIDSA0gNAAQmMQGkBoAKEBhMYgNIDQAEJjEAUAUQAQBQBRwCAK AKIAIAoAooBBFABEAUAUMAg/QPgBwg8QfgbhBwg/QPgBws8g/ADhBwg/gzADhBkgzABhZhBm gDADhBkgzAzCzPZnKQQKcRIgTgLESYA4ySBOAsRJgDgJECcZxEmAOAkQJ8nyfdzxil8ByHEA OQ4gxxnIcQA5DiDHAeQ4AzkOIMcB5Hhi6a0MGQTIZjWENRDWQqCw3QDbDbDdANvNYLsZeS2F QGEjABEBiAhARBhEBCAiABEBiAiDiABEBCAiDKININoAog0g2hhEG0C0AUQbQLQxiDZGuEsh UIj/PlH+t7eG3IprZVCuZC3OYeka9DVLV6MTLL0F7WPpzWgXS29Ct7F0FSph6XKUyVLoj6Wt yCfjdl+JqcIJIqAawjQICyHshLAXwosQJJZ7B8KnEGKkWEvjTVK1tFPaK70oCXulkxIxidXi TnGv+KIo7BVPisRfkUQMTI6CaEFbWbwG4m8ggBKBuJzlykkYxg2DnC2Gb5iENcsZ/ze5+J1c /GIu3puLt+biCoVcjXkm6cBTJDBxXKvpM6/0nYBQkpl1JUimuw9+7fK1Zw72deKj8SRHC0H6 NYR9EHZBuA1CCYRCCHkQMiD4WF0utK/V0hJdHoWQBSEAwU+HQE4n2DZWi6x1EQPe1fErA6J/ urk9KxvgjrRnFUDS2Z5VDcmh9qzpvgoFH0RZ1AzCB2DnnoN0b7vvFDz+eTx5vt13BJJn2n1h SOrbswZCcl171tu+CgOejHw8BZ2USCfCumk6od03BZqNb/flQBJqz8qkrXNhoAx4moNr0SlI MxJQ6fGRgu2+YZCktftKaWsZZdGNxyLKY9MTINCU64AJfdOFa3ms6XxnfPf5vgbwvwBigTw+ 8nfykLyTQX8nofqO5j0OjSt87RUqbQ/6YV8ijdD0gG9XxibfI9AXzjjoe8g30Hd3XqcM1XfB vDexIdp9t/k7yXOazbfWV+BrzTvlW+Ib42v0TfDVZ0B9u+9631E6TVSHa8lzB3010OFoWEVG u+/qjE42xUrfSp/my/KV+o9S/KIh8X5L8o5SDKDC+OgDAL+5GZ2UxieXdGKLliudlbZJ10lX ScOkoJQmpUopkl22ymbZKOtlVZZlUeZlIiPZTn8VFKIvQO0i/VuWSORpzLO8mdCYxN+SEiwT NAZFbFwVqZp4Fa6KdM9AVdP9kfMTg51YHT81IgSvwhFrFaqadFVkSKiqU4pNiJSEqiJSzXW1 +zC+uw5qI2RjJ0aTajtxjFatT6L/X8E+jNbfldSFMPasv6uuDrmdy8rd5dYrLaWVI/5F1PD/ lXY+LWoDUQCfRKm7bnV3YSmyVpI0xG47pKJg97BSTUhOXkrtIelJdxF2TxWSdG+2PZZePPVs L7L0NFEodaFQ8Ev4Afo9tu9N4p+W3Do6ec/3fjMvzIzGgWEmvm5tR1zYVkvsS7vjsG8ll9VQ uSu5bfYRTzOYi/tizrbmYh6F68zTA3HffoX29MByAfvNMRjNecDIYxSA7ZhERgx+T0zEoI8i rgzFgVNQAJfNkTLnytkc59ICcuFStq1QljmjEbLkzFIjWwyMGChrheUyp1RZcJASHFXmN/aE VyRJgOgSRwT4X8crkgQejFU2iBYj9TVS57FSwoaRIuboZMUcnQBD/zP1TSrMqsFwgQdEdFW7 D7nLPr+7LLAP57IcDoP45Ihy9/ziEmWvzwK1b7GhaslhdZHgXqC7qlohWdivnXDR6lvTaqtq qz3LnTUbjvFXrE/rWE4jobIGVuZgrKaR4DbQ3cRYBsYyMFaz1eSx7Csc9y+dcIeYuNcVlzNx LwtjuFtUXPPBweAFDuj5mVIYFm/TRLghe9Rl91WT5SCjSzd0A13wPUNXHk8BiV2F4ZlSvBVu YtcBmA9Vc73GkCCEO/62mdJ54+BQYa1ecp95mLi7QOwrC97w2ecZXtsk8RKTn5SCIPDwElCP kDZ72mmz57j/cCYDobqWC7ZnK1sqxW3h7q794+4XOCnchOBjONSogDuGtrIw68qI43vjjIhT BX92XKq9/QlP8PeQYR4nXk8rfL4sXs8eaTh/8WeVeiRhfopyeqzUcJXWKRRFqUWydaiDMtJG +uh0rI318SkuVf0+AaM0wUfptDJJEZ96q4YA1XdJtJEpxPs6fVjigceoUOpSjy8YJf829Xoh Kd00rBfX6vHq/VWHRHaPRHDkpMGqUBAX4c6AFwH1D+HCxEsNCmVuZHN0cmVhbQ0KZW5kb2Jq DQoNCjM5IDAgb2JqDQoxOTEwNg0KZW5kb2JqDQoNCjQwIDAgb2JqDQo8PCAvVHlwZSAvRm9u dERlc2NyaXB0b3INCiAgIC9Gb250TmFtZSAvQ0FBQUFBK0FyaWFsLUJvbGRNVA0KICAgL0Zs YWdzIDQNCiAgIC9Gb250QkJveCBbIC0xNjcgLTM3NiAxMTYzIDEwNDcgXQ0KICAgL0l0YWxp Y0FuZ2xlIDANCiAgIC9Bc2NlbnQgOTA1DQogICAvRGVzY2VudCAtMjExDQogICAvQ2FwSGVp Z2h0IDEwNDcNCiAgIC9TdGVtViA4MA0KICAgL0ZvbnRGaWxlMiAzOCAwIFINCj4+DQplbmRv YmoNCg0KNDEgMCBvYmoNCjw8IC9MZW5ndGggNDYxDQogICAvRmlsdGVyIC9GbGF0ZURlY29k ZSA+Pg0Kc3RyZWFtDQp4nF2Ty26jQBBF90j8Qy+TRQRdxSORLCTHjiUv5qFx5gMwtD1IMaA2 XvjvB+7tRKPZ2DrUgzpNV7LZb/d9N5nkpx+ag5vMqetb767DzTfOHN256+PIimm7ZvpE/DWX eoyjZK4/3K+Tu+z702BWqzgyJvk1J1wnfzcP63Y4ukc8/OFb57v+bB5+bw58dLiN44e7uH4y aRxVlWndaen5rR6/1xdnEpQ/7ds5o5vuT3PhPynv99EZ4QPL2Zqhddexbpyv+7OLo1WaVma1 21Vx5Pr2/2iurDqemj+1X7LtnJ2mma0WEICkAGWkBGSAXAE5gWkF014AJaBk5JkggBdAsQOs CQXglcAGG8IGsCXkgDd24wQ7RgA2ZQRplj5lBqBPidaWPsUbgD7lM4A+Bc7A0qfA1JY+BdPo U2wBwYfvCT44KkufnEAfYQ19Mk4dfHAGlj45ugl9MtRI+D6YWuijGFToI4zQRzG10EfxHqGP sjV9MhyV0EcJ9FGMI/RRKAh9FGcg9FGcqITv8woIPqyhj+IeaPBBa6VPjkE1+KwB4b5hUKVP hnug9MnCnf68u8v1xkZ+LU9z837eGywu9mXZlK53X8s9DiPqws9fi7rr6GVuZHN0cmVhbQ0K ZW5kb2JqDQoNCjQyIDAgb2JqDQo8PCAvVHlwZSAvRm9udA0KICAgL1N1YnR5cGUgL1RydWVU eXBlDQogICAvQmFzZUZvbnQgL0NBQUFBQStBcmlhbC1Cb2xkTVQNCiAgIC9GaXJzdENoYXIg MA0KICAgL0xhc3RDaGFyIDUzDQogICAvV2lkdGhzIFsgNzUwIDcyMiAyNzcgNzc3IDY2NiA2 NjYgMjc3IDYxMA0KICAgICAzODkgNjEwIDMzMyAyNzcgMjc3IDU1NiA1NTYgNTU2DQogICAg IDYxMCAzMzMgNTU2IDYxMCA1NTYgNTU2IDYxMCA2MTANCiAgICAgODg5IDYxMCA2MTAgOTQz IDMzMyA3MjIgNTU2IDYxMA0KICAgICA4MzMgNzIyIDU1NiAyNzcgNTU2IDU1NiA1NTYgNjY2 DQogICAgIDU1NiA1NTYgNTU2IDU1NiA1NTYgNTU2IDc3NyA1NTYNCiAgICAgNjEwIDcyMiAz MzMgNzIyIDYxMCA3NzcgXQ0KICAgL0ZvbnREZXNjcmlwdG9yIDQwIDAgUg0KICAgL1RvVW5p Y29kZSA0MSAwIFINCj4+DQplbmRvYmoNCg0KNDMgMCBvYmoNCjw8IC9MZW5ndGggNDQgMCBS DQogICAvRmlsdGVyIC9GbGF0ZURlY29kZQ0KICAgL0xlbmd0aDEgNTA0OA0KPj4NCnN0cmVh bQ0KeJzlF2twVNX5O+fcu7t5b0IIeYC56yVJw+YtAnmYbJJdBNfEkATYBR+72SxJMGG3SYim UGWkKK4St+qA1aqoqDymejcYu7EKUetjRqxWx0xH0YJSdayoY1FrNbn9zt1lIZRpO9OfvWfP d77XOd/jnLP3u4P9G72QCFuAgcXT5/anEwL4HAEgaZ6hQWn3dy/uQvwYgCis83f1vTZh3g2g O4F0Slfv8Loj+37xMEDCKZwz2u11d9aIw3qAxL1IL+pGRv10ogFpnA/zu/sGr/8j2YTyJAFp Q6/P464AJ6JJiQh0fe7r/U26RzmdjkDa4O7zqute2oj0QgB60u8bGOyE+SqAcT6X+/u9/tVZ z36EtBWADSCPgOY+RgREp9H/5494FZSLl0Mu9rnsbsgBUI9H+4lpp3pSvBbk6fXq0YIUVH4q 2iOPG/LgaiiEy+AF+AoOkQXQAhPqm+ABB70OipF/B/wWJuADsEInUMgmm0FSfw23Qz5shd1Q KWSrY3A5fGpIgQyYD1XEBzqYDV3wADkKy8GOa1TDpXAr9CNcgfzvyBKUEIiHq9D63XAfHII/ wJ8hC1csgUmiJ9+pv4NGaEMfNsE4fCA2iLfBLPglPA774Hn4Cykhe8hn7At1TD2i/hVnFUI5 LIK10IHtTngI9R6H16jMHlGz1U3qXvVVmIveH8Con4eX0Na3RCKriIc+xoan/6FuUA8AP0uz uffY6jGaZhiER1FzEn4gcdhuohKto57pVHUO6CEXJDCjfyuhD26A7bADo7gXHoQn4VNSR7rJ 6+QLmkS30MNii75Z3xx3eOod9VL1W7SRCCb0djVcC9fjzDvhLtiJMx9CW7/H9hVMkUWkmtSS 5aSV3EFuJo+Sv1MzfY/+wJJZCitiTuZim9mH7HuDOHXF9K7pN9UW9XrtPugwn3mYNSu0w5Xg hwG4Djbjjd8OI9iCmL0D2BTM52FsL8L78BG2j+FT+JxQImKM8WQBtjJs1cRCLiMryTWkiwyQ XeRpEiaHyEvkM3KKLqSLaCW9grbSLuqngzRIFRqih+kJ+jf0sorZ2AC7kR1gL7BX2VvsXQGE ywS30CNsFO4WFOEd4SvhlDAtgihjKxHd4u6ph6ft02vVfLVa7VB3qEFsn2KOL8Bo8qEA42nB XfXAOjw5fmw/xTaMuduGEe2EBzB3PHtPQxiexVP6Au7vy/AmvIvxvQ8fwnfwPSaHxzebmEgx Kcf8XkIuxbYG92mIbCZbyAi5F/McImPYJshRjHIaI1xFnfRqOkQ30x10F72PjtMJOok7oTId 7kQmu5TZ2Wq2ll3NBtlOdg/7FXuAPcjCbIK9LFChSmgR+oWtQlB4WHhSeEV4WzgqlonVYgCb Io6Jz4kf69J0ObqFujZdWK8zDBs+MUzDQXgFQjB27u0m24mRhOA35BMmsC30CHXQBDpJbhLe IAW4AzUExBHYAF+jh/PIW3QxWc08ZA3m7yayjqyF+9lc9jC7DI6IG0gbayGd0Cbsgh/FF8Et Bugoo2KATZHv6QHohhF67dQ+1UmSoY3soY/hifk51EChkA2TtFIYJ3m0kB7WP0HCUKvXsUpW ZUhBag/Df2doM6SQz8DNPsT7cxzvVit9DP8TPiZH9Vegd1PsSdT5OdSSPdOpsE90UheZS/eQ y6e2Tv2J3ac+SLLohwBTqVP1tBFP3Ep1Pz0EX8Ku6e+FY3CIvgcr8V/Do92cr/HuXYf/NKvg R5qE96kN/0f8lrq62ktqqqsqlyy+eOFFFeVlpSXFReYFhT8pyM+bL19oknIvmDc3Jzsrc07G 7PRZaanGlOSkxIT4OINeJwqMEiiyyUtdkpLvUoR8edmyYk7LbmS4z2K4FAlZS2fqKJJLU5Nm alpQc905mpaIpiWmSYxSDdQUF0k2WVJet8pSmKxZ4UB8h1V2SspJDW/ScCFfI5KQMJlwhmTL 7LZKCnFJNmXpUHfA5rLieqGE+Ea50RtfXASh+AREExBT5sj+EJlTSzSEzrFVhSgYktArJVu2 2pQs2cpdUFiezd2ptKxw2Kw5JpOzuEghjR65QwG5QUkxayrQqJlRdI2KXjMj9fBw4DYpVDQR uD1shA6XObFT7nRf6VCY28ltpJrRrlWZ87MTmWdIXDyt0XHL2dIcFrBl9kicDARukZTdKxxn S00cOp24Bs6leUtdgaVo+nbMor1NQmt0m9OhkG1oUuKR8Kgi8XllG+e41ktKnNwgdwfWu3Bv sgMKtA6bRrOzLePqMci2SYF2h2xS6nJkp9s6N5QOgdbhg1kWKWumpLgoZEyNJDaUnBJFEpPO RrwxmYZp6hyzt8YyS7hH8nI8EYrkkdATh4wxLeHAuwQCniWoho+T4CylE3ekR4lrdAWMVZzP 5ytinlGWAt8AngD55OczOe4oR5dn/AY4ys9J7Kyh/DSumM3KggX8iOgbcU/Rx1qNvri4aChM 62W/UcIB0wctmFu3s6oU028y8Q2+LWyBDiSULSscEVqCjpxRsJSanQp1ccnEacnslVyy5bQk Nt0l40l+SqvgZiuG/NgvxZgxy9ZdpZCMfyP2RuT2Ntm+Yo1DsgVc0dza22dQEfmSmCyKKbMa HSyHRjGawzQpHsorY8qccCQqQh7+dNqh7gzrDXgqNQ6RlipG17IIdMabTP/lpLD6FZ+lDWem Rd1Uqswz6eoZ9Az3EgMMHRbyqb19TSAQf7YMS2meNXzTYtGM79NqywU6vQd5ouBhEK8TPYzR 7Di94CGQZShckmluNp6qaZqqaTZ+W9NknKqBupqpGt7Ly0ypptQ8BAQE+FFiEz9aRPgBJGFC 25i36XvsCUgA0zgw8pQlOU4P2Um6rMSkL018WXPzCePHUNd0sryMpOvkC/MvXrjooooM+t7k rnsmJ+/ZNUnrI+MkRCp5ij2YXnNNSs03MM+gvQEfWfZs9Yx6l0eFHySxyh9HQ8J07dkvzXNe olR4HbrQz/WIRz5HIrYSNXscM0IpVhQAp8QUrKa4NBmeiK1zY2xNXmvdGMUpZnZbFGeQilVx BBdQ5/4oLkI2PBLFdWCA51AThDjgXy4vIU4QB5iO4QQSyYtRnEIyeSOKM7iQvB/FBdRRo7gI C2lC+7Dfu87t8Ur7pPZur9Tk2+AbRJbU6Ov3+/rdgz2+DZK/11MiWd2D7v+gVMoXk9p8vRs5 Z0BavgHnlVdWlhUjqCiR6nt7pdaeru7BAanVO+DtH/J2tg33dfh6W71dG3vd/bF1i6UIPwJX efsHuIWKkjKUNLmHpfLFRXzdRRF5UzuWrsNY4nmx2HPjq96LZfY+7O1YmHC8CXxYSPiwNI9o SVju+vCzwq9BN/J7NA0JOb04vwQxq8Z3/48rlcY8k7DY8CFvY0xnAHnLcYzYK4dKbGX40RPB KjRuPc7oxbEV53ShD4ParFZcbwB7PwwhxLIMbfRhscvX57IutNKL3vSfx99izZMz+mfjq7Q1 B2IxcB/KonOacL1hzc/FUBTzd1Hk/GqPakJXzvPUz4Y0WoAtn+aDj2TgOb1Gg1dosE6DpRzS 0tHS3NwwLRndzYei0XmFOMy3JBzPzi0vSMutKeD0HEtVb2Husf1ZucexHyioyN1eU5G7FXsp 9iGkuV7B/sJcX4Gvz3ez7xYBMjLQkbRUgyVMPhpbmR6XHhcMk8OWSn3wOX3woD7YpQ926oOr 9cGl+uAifbBEHzTrg3n64Hx9uiHNYDQkGxIN8QaDQWcQDNQAhvSwesxi5lc6XWfUbrbAoaDh Rsohjdx7SgwUv4WVWcxO7W0NyhKzPaxXW5XFZruib1nrCBEy4kSuQreHCbQ7wkTlrG05vMYZ B0LUbTtyoqPTSezKhAfsHZLybZscJvH4ty7KDURJs4O9vSETMobqMuvSalMrl1rPA1xRaD7z ZJ6Fm7lTLcPPQi7ZyD9WyeBBfe5dehTY25Ab1LhBzg1q3Mx5yk57m0PZP8+pVHBEneckB+vH LJt43eSSbV7sLuW2oe5MZUuHJIUsY9GCKt/V4enmo9urjMleq2KRrVKoftN5xJu4uF62hmCT rd0R2mTxWkfrLfU22W11jkMz6QgtGJlh7tbT5sZhAen41xXDpIMvuYBbbB45j8URLm7mFke4 xRFusdnSrFm09bQ1EHuLI2SABie+rLXxIE2Ix81y5ZicDRlGf622c9WmzBtynhGA7IUErF0S sQ5Ows5FxfXF9VyER4aLknmJHBVl3lBtynmG7I2KjMhOlRsAN2aj+ZxngD+Qaeux8o6+jKsT dMtoWm6F2Qn/BJ7TqMQNCmVuZHN0cmVhbQ0KZW5kb2JqDQoNCjQ0IDAgb2JqDQozMTk3DQpl bmRvYmoNCg0KNDUgMCBvYmoNCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvcg0KICAgL0ZvbnRO YW1lIC9FQUFBQUErU3ltYm9sTVQNCiAgIC9GbGFncyA0DQogICAvRm9udEJCb3ggWyAwIC0y MTkgMTExMSAxMDA1IF0NCiAgIC9JdGFsaWNBbmdsZSAwDQogICAvQXNjZW50IDEwMDUNCiAg IC9EZXNjZW50IC0yMTkNCiAgIC9DYXBIZWlnaHQgMTAwNQ0KICAgL1N0ZW1WIDgwDQogICAv Rm9udEZpbGUyIDQzIDAgUg0KPj4NCmVuZG9iag0KDQo0NiAwIG9iag0KPDwgL0xlbmd0aCAy MzENCiAgIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+DQpzdHJlYW0NCnicXZC9bsMgFEZ3JN7h jukQYWfJYllqU0XykB/V7QNguHaQakDXePDbB3ASVV1AfJyDPq44NJ+NNQHElZxqMUBvrCac 3EwKocPBWM7KHWijwvOYNzVKz5mIfrtMAcfG9g6qijMA8RWBKdACm3ftOnzL4YU0krEDbH4O 7Rq1s/e/OKINUHBW16CxT2+epD/LEUFkfdvoSJiwbKP4B/lePMJuDcq1m3IaJy8VkrQDclYV RQ3V8Vhzhlb/v31IXa9ukhJcJrj42K/4M09m/uyrl5qJYqU8k1wllTAWX3PzzmfvsdwBKM5v xmVuZHN0cmVhbQ0KZW5kb2JqDQoNCjQ3IDAgb2JqDQo8PCAvVHlwZSAvRm9udA0KICAgL1N1 YnR5cGUgL1RydWVUeXBlDQogICAvQmFzZUZvbnQgL0VBQUFBQStTeW1ib2xNVA0KICAgL0Zp cnN0Q2hhciAwDQogICAvTGFzdENoYXIgMQ0KICAgL1dpZHRocyBbIDYwMCA0NTkgXQ0KICAg L0ZvbnREZXNjcmlwdG9yIDQ1IDAgUg0KICAgL1RvVW5pY29kZSA0NiAwIFINCj4+DQplbmRv YmoNCg0KNDggMCBvYmoNCjw8IC9GMSAzMiAwIFINCiAgIC9GMiA0MiAwIFINCiAgIC9GMyAz NyAwIFINCiAgIC9GNCA0NyAwIFINCiAgID4+DQplbmRvYmoNCg0KNDkgMCBvYmoNCjw8DQog ICAvRm9udCA0OCAwIFINCiAgIC9Qcm9jU2V0IFsgL1BERiBdDQo+Pg0KZW5kb2JqDQoNCjUw IDAgb2JqDQo8PCAvVHlwZSAvUGFnZQ0KICAgL1BhcmVudCAyNyAwIFINCiAgIC9SZXNvdXJj ZXMgNDkgMCBSDQogICAvTWVkaWFCb3ggWyAwIDAgNjEyIDc5MiBdDQogICAvQ29udGVudHMg MSAwIFINCj4+DQplbmRvYmoNCg0KNTEgMCBvYmoNCjw8IC9UeXBlIC9QYWdlDQogICAvUGFy ZW50IDI3IDAgUg0KICAgL1Jlc291cmNlcyA0OSAwIFINCiAgIC9NZWRpYUJveCBbIDAgMCA2 MTIgNzkyIF0NCiAgIC9Db250ZW50cyAzIDAgUg0KPj4NCmVuZG9iag0KDQo1MiAwIG9iag0K PDwgL1R5cGUgL1BhZ2UNCiAgIC9QYXJlbnQgMjcgMCBSDQogICAvUmVzb3VyY2VzIDQ5IDAg Ug0KICAgL01lZGlhQm94IFsgMCAwIDYxMiA3OTIgXQ0KICAgL0NvbnRlbnRzIDUgMCBSDQo+ Pg0KZW5kb2JqDQoNCjUzIDAgb2JqDQo8PCAvVHlwZSAvUGFnZQ0KICAgL1BhcmVudCAyNyAw IFINCiAgIC9SZXNvdXJjZXMgNDkgMCBSDQogICAvTWVkaWFCb3ggWyAwIDAgNjEyIDc5MiBd DQogICAvQ29udGVudHMgNyAwIFINCj4+DQplbmRvYmoNCg0KNTQgMCBvYmoNCjw8IC9UeXBl IC9QYWdlDQogICAvUGFyZW50IDI3IDAgUg0KICAgL1Jlc291cmNlcyA0OSAwIFINCiAgIC9N ZWRpYUJveCBbIDAgMCA2MTIgNzkyIF0NCiAgIC9Db250ZW50cyA5IDAgUg0KPj4NCmVuZG9i ag0KDQo1NSAwIG9iag0KPDwgL1R5cGUgL1BhZ2UNCiAgIC9QYXJlbnQgMjcgMCBSDQogICAv UmVzb3VyY2VzIDQ5IDAgUg0KICAgL01lZGlhQm94IFsgMCAwIDYxMiA3OTIgXQ0KICAgL0Nv bnRlbnRzIDExIDAgUg0KPj4NCmVuZG9iag0KDQo1NiAwIG9iag0KPDwgL1R5cGUgL1BhZ2UN CiAgIC9QYXJlbnQgMjcgMCBSDQogICAvUmVzb3VyY2VzIDQ5IDAgUg0KICAgL01lZGlhQm94 IFsgMCAwIDYxMiA3OTIgXQ0KICAgL0NvbnRlbnRzIDEzIDAgUg0KPj4NCmVuZG9iag0KDQo1 NyAwIG9iag0KPDwgL1R5cGUgL1BhZ2UNCiAgIC9QYXJlbnQgMjcgMCBSDQogICAvUmVzb3Vy Y2VzIDQ5IDAgUg0KICAgL01lZGlhQm94IFsgMCAwIDYxMiA3OTIgXQ0KICAgL0NvbnRlbnRz IDE1IDAgUg0KPj4NCmVuZG9iag0KDQo1OCAwIG9iag0KPDwgL1R5cGUgL1BhZ2UNCiAgIC9Q YXJlbnQgMjcgMCBSDQogICAvUmVzb3VyY2VzIDQ5IDAgUg0KICAgL01lZGlhQm94IFsgMCAw IDYxMiA3OTIgXQ0KICAgL0NvbnRlbnRzIDE3IDAgUg0KPj4NCmVuZG9iag0KDQo1OSAwIG9i ag0KPDwgL1R5cGUgL1BhZ2UNCiAgIC9QYXJlbnQgMjcgMCBSDQogICAvUmVzb3VyY2VzIDQ5 IDAgUg0KICAgL01lZGlhQm94IFsgMCAwIDYxMiA3OTIgXQ0KICAgL0NvbnRlbnRzIDE5IDAg Ug0KPj4NCmVuZG9iag0KDQo2MCAwIG9iag0KPDwgL1R5cGUgL1BhZ2UNCiAgIC9QYXJlbnQg MjcgMCBSDQogICAvUmVzb3VyY2VzIDQ5IDAgUg0KICAgL01lZGlhQm94IFsgMCAwIDYxMiA3 OTIgXQ0KICAgL0NvbnRlbnRzIDIxIDAgUg0KPj4NCmVuZG9iag0KDQo2MSAwIG9iag0KPDwg L1R5cGUgL1BhZ2UNCiAgIC9QYXJlbnQgMjcgMCBSDQogICAvUmVzb3VyY2VzIDQ5IDAgUg0K ICAgL01lZGlhQm94IFsgMCAwIDYxMiA3OTIgXQ0KICAgL0NvbnRlbnRzIDIzIDAgUg0KPj4N CmVuZG9iag0KDQo2MiAwIG9iag0KPDwgL1R5cGUgL1BhZ2UNCiAgIC9QYXJlbnQgMjcgMCBS DQogICAvUmVzb3VyY2VzIDQ5IDAgUg0KICAgL01lZGlhQm94IFsgMCAwIDYxMiA3OTIgXQ0K ICAgL0NvbnRlbnRzIDI1IDAgUg0KPj4NCmVuZG9iag0KDQoyNyAwIG9iag0KPDwgL1R5cGUg L1BhZ2VzDQogICAvUmVzb3VyY2VzIDQ5IDAgUg0KICAgL01lZGlhQm94IFsgMCAwIDU5NSA4 NDIgXQ0KICAgL0tpZHMgWyA1MCAwIFINCiAgICAgICAgICAgNTEgMCBSDQogICAgICAgICAg IDUyIDAgUg0KICAgICAgICAgICA1MyAwIFINCiAgICAgICAgICAgNTQgMCBSDQogICAgICAg ICAgIDU1IDAgUg0KICAgICAgICAgICA1NiAwIFINCiAgICAgICAgICAgNTcgMCBSDQogICAg ICAgICAgIDU4IDAgUg0KICAgICAgICAgICA1OSAwIFINCiAgICAgICAgICAgNjAgMCBSDQog ICAgICAgICAgIDYxIDAgUg0KICAgICAgICAgICA2MiAwIFINCiAgICAgICAgICAgXQ0KICAg L0NvdW50IDEzDQo+Pg0KZW5kb2JqDQoNCjYzIDAgb2JqDQo8PCAvVHlwZSAvQ2F0YWxvZw0K ICAgL1BhZ2VzIDI3IDAgUg0KPj4NCmVuZG9iag0KDQo2NCAwIG9iag0KPDwgL1RpdGxlIDxG RUZGMDA0MTAwMjAwMDQ3MDA1MzAwNTMwMDQxMDA1MDAwNDkwMDJEMDA0RDAwNjUwMDYzMDA2 ODAwNjEwMDZFMDA2OTAwNzMwMDZEMDAyMDAwNjYwMDZGMDA3MjAwMjAwMDUzMDA2NTAwNjMw MDc1MDA3MjAwNjUwMDIwMDA1NzAwNjUwMDYyMDA1MzAwNjUwMDcyMDA3NjAwNjkwMDYzMDA2 NTAwNzMwMDIwMDA0MzAwNkYwMDZFMDA3NjAwNjUwMDcyMDA3MzAwNjEwMDc0MDA2OTAwNkYw MDZFMDA3Mz4NCi9BdXRob3IgPEZFRkYwMDQ2MDA3MjAwNjEwMDZFMDA2QjAwMjAwMDUzMDA2 OTAwNjUwMDYyMDA2NTAwNkUwMDZDMDA2OTAwNzMwMDc0Pg0KL0NyZWF0b3IgPEZFRkYwMDU3 MDA3MjAwNjkwMDc0MDA2NTAwNzI+DQovUHJvZHVjZXIgPEZFRkYwMDUzMDA3NDAwNjEwMDcy MDA0RjAwNjYwMDY2MDA2OTAwNjMwMDY1MDAyMDAwMzc+DQovQ3JlYXRpb25EYXRlIChEOjIw MDUwNzE5MTI1NzExLTA1JzAwJykNCj4+DQplbmRvYmoNCg0KeHJlZg0KMCA2NQ0KMDAwMDAw MDAwMCA2NTUzNSBmDQowMDAwMDAwMDE3IDAwMDAwIG4NCjAwMDAwMDMzMTMgMDAwMDAgbg0K MDAwMDAwMzM0MCAwMDAwMCBuDQowMDAwMDA3NjMyIDAwMDAwIG4NCjAwMDAwMDc2NTkgMDAw MDAgbg0KMDAwMDAxMTg3MCAwMDAwMCBuDQowMDAwMDExODk3IDAwMDAwIG4NCjAwMDAwMTU3 MjYgMDAwMDAgbg0KMDAwMDAxNTc1MyAwMDAwMCBuDQowMDAwMDE5NTExIDAwMDAwIG4NCjAw MDAwMTk1MzkgMDAwMDAgbg0KMDAwMDAyMzM5NCAwMDAwMCBuDQowMDAwMDIzNDIyIDAwMDAw IG4NCjAwMDAwMjgyOTEgMDAwMDAgbg0KMDAwMDAyODMxOSAwMDAwMCBuDQowMDAwMDMzMjA1 IDAwMDAwIG4NCjAwMDAwMzMyMzMgMDAwMDAgbg0KMDAwMDAzMzY3MiAwMDAwMCBuDQowMDAw MDMzNjk5IDAwMDAwIG4NCjAwMDAwMzY4OTcgMDAwMDAgbg0KMDAwMDAzNjkyNSAwMDAwMCBu DQowMDAwMDM3MzQ0IDAwMDAwIG4NCjAwMDAwMzczNzEgMDAwMDAgbg0KMDAwMDAzOTg5OCAw MDAwMCBuDQowMDAwMDM5OTI2IDAwMDAwIG4NCjAwMDAwNDM1NjUgMDAwMDAgbg0KMDAwMDEx NDUxNSAwMDAwMCBuDQowMDAwMDQzNTkzIDAwMDAwIG4NCjAwMDAwNjg0NTYgMDAwMDAgbg0K MDAwMDA2ODQ4MyAwMDAwMCBuDQowMDAwMDY4NzIzIDAwMDAwIG4NCjAwMDAwNjk0MTggMDAw MDAgbg0KMDAwMDA3MDAzOCAwMDAwMCBuDQowMDAwMDg2Nzk3IDAwMDAwIG4NCjAwMDAwODY4 MjQgMDAwMDAgbg0KMDAwMDA4NzA3NCAwMDAwMCBuDQowMDAwMDg3NjIzIDAwMDAwIG4NCjAw MDAwODgwODggMDAwMDAgbg0KMDAwMDEwNzMwMiAwMDAwMCBuDQowMDAwMTA3MzI5IDAwMDAw IG4NCjAwMDAxMDc1NzQgMDAwMDAgbg0KMDAwMDEwODExOCAwMDAwMCBuDQowMDAwMTA4NTY3 IDAwMDAwIG4NCjAwMDAxMTE4NzEgMDAwMDAgbg0KMDAwMDExMTg5NyAwMDAwMCBuDQowMDAw MTEyMTM2IDAwMDAwIG4NCjAwMDAxMTI0NTAgMDAwMDAgbg0KMDAwMDExMjY1MCAwMDAwMCBu DQowMDAwMTEyNzM3IDAwMDAwIG4NCjAwMDAxMTI4MDQgMDAwMDAgbg0KMDAwMDExMjkzNSAw MDAwMCBuDQowMDAwMTEzMDY2IDAwMDAwIG4NCjAwMDAxMTMxOTcgMDAwMDAgbg0KMDAwMDEx MzMyOCAwMDAwMCBuDQowMDAwMTEzNDU5IDAwMDAwIG4NCjAwMDAxMTM1OTEgMDAwMDAgbg0K MDAwMDExMzcyMyAwMDAwMCBuDQowMDAwMTEzODU1IDAwMDAwIG4NCjAwMDAxMTM5ODcgMDAw MDAgbg0KMDAwMDExNDExOSAwMDAwMCBuDQowMDAwMTE0MjUxIDAwMDAwIG4NCjAwMDAxMTQz ODMgMDAwMDAgbg0KMDAwMDExNDg4MyAwMDAwMCBuDQowMDAwMTE0OTQ0IDAwMDAwIG4NCnRy YWlsZXINCjw8IC9TaXplIDY1DQogICAvUm9vdCA2MyAwIFINCiAgIC9JbmZvIDY0IDAgUg0K Pj4NCnN0YXJ0eHJlZg0KMTE1NDM0DQolJUVPRg0K --at6+YcpfzWZg/htY Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --at6+YcpfzWZg/htY-- From kitten-bounces@lists.ietf.org Tue Jul 19 14:09:35 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DuwX9-00012j-Op; Tue, 19 Jul 2005 14:09:35 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DuwX8-000116-HY for kitten@megatron.ietf.org; Tue, 19 Jul 2005 14:09:34 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA19621 for ; Tue, 19 Jul 2005 14:09:33 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Dux0n-0006CS-BI for kitten@ietf.org; Tue, 19 Jul 2005 14:40:14 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id j6JI9Ucn013831 for ; Tue, 19 Jul 2005 11:09:30 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j6JI9Ufb009231 for ; Tue, 19 Jul 2005 12:09:30 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j6JI9TBe005825 for ; Tue, 19 Jul 2005 13:09:29 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j6JI9Txk005824 for kitten@ietf.org; Tue, 19 Jul 2005 13:09:29 -0500 (CDT) Date: Tue, 19 Jul 2005 13:09:29 -0500 From: Nicolas Williams To: kitten@ietf.org Message-ID: <20050719180929.GA5809@binky.Central.Sun.COM> Mail-Followup-To: kitten@ietf.org References: <20050719180604.GT4303@binky.Central.Sun.COM> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050719180604.GT4303@binky.Central.Sun.COM> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7aefe408d50e9c7c47615841cb314bed Cc: Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Tue, Jul 19, 2005 at 01:06:04PM -0500, Nicolas Williams wrote: > There's a Globus OGSA document describing what I recognize to be a sort > of stackable pseudo-mechanism, but I can't find a URL for it. As soon > as I find it I'll post it. Bah. It looks like the GGF has abandoned this -- don't be misled by the last update date -- that was a macro. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Tue Jul 19 14:22:47 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Duwjv-0006Cz-CD; Tue, 19 Jul 2005 14:22:47 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Duwjs-0006Cu-UE for kitten@megatron.ietf.org; Tue, 19 Jul 2005 14:22:46 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA20445 for ; Tue, 19 Jul 2005 14:22:43 -0400 (EDT) Received: from mail.ncsa.uiuc.edu ([141.142.2.28]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DuxDY-0006dP-3q for kitten@ietf.org; Tue, 19 Jul 2005 14:53:25 -0400 X-Envelope-From: vwelch@ncsa.uiuc.edu Received: from localhost (osage.ncsa.uiuc.edu [141.142.2.56]) by mail.ncsa.uiuc.edu (8.11.7/8.11.7) with ESMTP id j6JIJMd21352; Tue, 19 Jul 2005 13:19:24 -0500 X-Mailer: emacs 22.0.50.1 (via feedmail 10 I); VM 7.18 under Emacs 22.0.50.1 From: "Von Welch" MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <17117.17450.881204.232069@gargle.gargle.HOWL> Date: Tue, 19 Jul 2005 13:19:22 -0500 To: Nicolas Williams In-Reply-To: <20050719180929.GA5809@binky.Central.Sun.COM> References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> X-NCSA-MailScanner-Information: Please contact the help@ncsa.uiuc.edu for more information X-NCSA-MailScanner: Found to be clean X-Spam-Score: 0.0 (/) X-Scan-Signature: 93238566e09e6e262849b4f805833007 Content-Transfer-Encoding: 7bit Cc: kitten@ietf.org Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org I'm not sure what you mean by "abandoned". We're not moving the document forward in GGF because we deferred to kitten as the place to do so, but the document does capture what we saw as our needs and we have implemented and are using it. I'm not sure from the context of your note what part of it you were specifically interested in. I'm happy to field questions or elaborate. Von Nicolas Williams writes (13:09 July 19, 2005): > On Tue, Jul 19, 2005 at 01:06:04PM -0500, Nicolas Williams wrote: > > There's a Globus OGSA document describing what I recognize to be a sort > > of stackable pseudo-mechanism, but I can't find a URL for it. As soon > > as I find it I'll post it. > > Bah. It looks like the GGF has abandoned this -- don't be misled by the > last update date -- that was a macro. > > _______________________________________________ > Kitten mailing list > Kitten@lists.ietf.org > https://www1.ietf.org/mailman/listinfo/kitten _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Tue Jul 19 17:01:18 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DuzDG-0000wj-7T; Tue, 19 Jul 2005 17:01:14 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DuzDE-0000wD-FY for kitten@megatron.ietf.org; Tue, 19 Jul 2005 17:01:12 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA26893 for ; Tue, 19 Jul 2005 17:01:09 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Duzgu-0003xB-L5 for kitten@ietf.org; Tue, 19 Jul 2005 17:31:54 -0400 Received: by carter-zimmerman.mit.edu (Postfix, from userid 8042) id 45DDDE004B; Tue, 19 Jul 2005 17:00:19 -0400 (EDT) To: Mayank Upadhyay References: <42DBFDD2.8040206@google.com> From: Sam Hartman Date: Tue, 19 Jul 2005 17:00:19 -0400 In-Reply-To: <42DBFDD2.8040206@google.com> (Mayank Upadhyay's message of "Mon, 18 Jul 2005 12:06:58 -0700") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: d6b246023072368de71562c0ab503126 Cc: kitten@ietf.org, Nicolas Williams Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org >>>>> "Mayank" == Mayank Upadhyay writes: Mayank> I agree with Sam's comments. It would be in JGSS's best Mayank> interest if the bindings are defined at the IETF simply Mayank> because the it would provide the widest review with Mayank> experts in this area. Mayank> Having an abstract API at the org.ietf level and an Mayank> implementation at java.* level would just confuse Mayank> developers. Er, that's not quite what I meant. By abstract API I mean the language-independent API. I.E. with the current administritive structures the IETF can either do the standardization work or Sun can do the work. The option of IETF doing the work and having it reviewed after the fact in Sun's process is not OK. Joint work might be a possibility. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Tue Jul 19 18:05:08 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dv0D5-0001Go-PN; Tue, 19 Jul 2005 18:05:07 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dv0D2-0001F6-S5 for kitten@megatron.ietf.org; Tue, 19 Jul 2005 18:05:05 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA27301 for ; Tue, 19 Jul 2005 18:05:01 -0400 (EDT) Received: from 216-239-45-4.google.com ([216.239.45.4]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Dv0gh-0006qD-Su for kitten@ietf.org; Tue, 19 Jul 2005 18:35:45 -0400 Received: from smtp.google.com (mordor.corp.google.com [192.168.15.226]) by vegeta.corp.google.com (8.13.3/8.13.3) with ESMTP id j6JM4k1b006503 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 19 Jul 2005 15:04:46 -0700 Received: from [192.168.2.5] (c-24-16-60-69.hsd1.wa.comcast.net [24.16.60.69]) (authenticated bits=0) by smtp.google.com (8.12.11/8.12.11) with ESMTP id j6JM4e3o016678 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 19 Jul 2005 15:04:45 -0700 Message-ID: <42DD78F3.2050609@google.com> Date: Tue, 19 Jul 2005 15:04:35 -0700 From: Mayank Upadhyay User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Sam Hartman References: <42DBFDD2.8040206@google.com> In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -4.2 (----) X-Scan-Signature: 0bc60ec82efc80c84b8d02f4b0e4de22 Content-Transfer-Encoding: 7bit Cc: kitten@ietf.org, Nicolas Williams Subject: Re: Java Bindings do not need to be removed was Re: Proposed PRF changes to address Ken's comments X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Sam Hartman wrote: > Mayank> I agree with Sam's comments. It would be in JGSS's best > Mayank> interest if the bindings are defined at the IETF simply > Mayank> because the it would provide the widest review with > Mayank> experts in this area. > > Mayank> Having an abstract API at the org.ietf level and an > Mayank> implementation at java.* level would just confuse > Mayank> developers. > >Er, that's not quite what I meant. By abstract API I mean the >language-independent API. > > > My apologies. My view is tainted by an old contentious discussion in the CAT working group about an interfaces-only JGSS API. :) -Mayank >I.E. with the current administritive structures the IETF can either do >the standardization work or Sun can do the work. The option of IETF >doing the work and having it reviewed after the fact in Sun's process >is not OK. Joint work might be a possibility. > > _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Jul 21 10:10:55 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DvblG-0004cA-UO; Thu, 21 Jul 2005 10:10:54 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DvblE-0004c5-Uk for kitten@megatron.ietf.org; Thu, 21 Jul 2005 10:10:53 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA03253 for ; Thu, 21 Jul 2005 10:10:51 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DvcFH-0002MQ-CL for kitten@ietf.org; Thu, 21 Jul 2005 10:41:56 -0400 Received: from [192.168.1.11] (cpe-68-175-91-105.nyc.res.rr.com [68.175.91.105]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j6LEAoIc003551 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 21 Jul 2005 10:10:50 -0400 (EDT) Message-ID: <42DFACE9.2010406@columbia.edu> Date: Thu, 21 Jul 2005 10:10:49 -0400 From: Jeffrey Altman Organization: No Longer Affiliated with Columbia University in the City of New York User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Von Welch References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> In-Reply-To: <17117.17450.881204.232069@gargle.gargle.HOWL> X-Enigmail-Version: 0.92.0.0 X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.0 (/) X-Scan-Signature: 7fa173a723009a6ca8ce575a65a5d813 Cc: kitten@ietf.org, Nicolas Williams Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1068614271==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org This is a cryptographically signed message in MIME format. --===============1068614271== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms050000030102090203030907" This is a cryptographically signed message in MIME format. --------------ms050000030102090203030907 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit I believe that Nico is interested in the binding between GSS authentication and SAML data. Jeffrey Altman Von Welch wrote: > I'm not sure what you mean by "abandoned". We're not moving the > document forward in GGF because we deferred to kitten as the place to > do so, but the document does capture what we saw as our needs and we > have implemented and are using it. > > I'm not sure from the context of your note what part of it you were > specifically interested in. I'm happy to field questions or elaborate. > > Von > > Nicolas Williams writes (13:09 July 19, 2005): > > On Tue, Jul 19, 2005 at 01:06:04PM -0500, Nicolas Williams wrote: > > > There's a Globus OGSA document describing what I recognize to be a sort > > > of stackable pseudo-mechanism, but I can't find a URL for it. As soon > > > as I find it I'll post it. > > > > Bah. It looks like the GGF has abandoned this -- don't be misled by the > > last update date -- that was a macro. > > > > _______________________________________________ > > Kitten mailing list > > Kitten@lists.ietf.org > > https://www1.ietf.org/mailman/listinfo/kitten > > _______________________________________________ > Kitten mailing list > Kitten@lists.ietf.org > https://www1.ietf.org/mailman/listinfo/kitten --------------ms050000030102090203030907 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAw7NrDANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNTI3MTc0MjQzWhcNMDYwNTI3MTc0MjQz WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LutDu/YyHreNfoYd+ZtOjXsL h67F2cmcVuBPBz+ZGDA+WpVEHrqXaZZO8acXBR5uAVfiwA1acE/kvD/CN5kAqx1VJuQ8Pvyk iGHhUYTd27ZTliBIrptC7C/381gVwkS+a8jQFPJPO+OktZDzAYplGRY/MQCV8dIsvXUjucox 7TwTTdoLAJYRvHtfEcaCc6mO4ph6NeXQw8Grlx3IRAlTrkE5fBGyjH6R4fqnFTXRQAh1/bG+ i8hQvE6mud3mXdL2t7NP1Qxd9wW0/F/pnWY12IFP/luc3zEzIPvAe+nJluLuSEj0LZgP16mF xBj1p+u9HPWcHRVX6q7+MQ0RWOv1AgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAUDUuzxiq8bbI8vq2 swRK513RphZp+fepyKU5mwBI6aF4GcmqITQILtfTG2SXnjSeY99d+bjOdK1DJFvVh9aOy8mh 2NbEnqMnJIZtg5+eEU64DIV5bQdDRpi99H9vA0sRATIquut+3YHba+zArj0VkVof2VI+ToBu sHdtSrZYo0gwggL6MIICY6ADAgECAgMOzawwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1MDUyNzE3NDI0M1oXDTA2 MDUyNzE3NDI0M1owazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7rQ7v2Mh63 jX6GHfmbTo17C4euxdnJnFbgTwc/mRgwPlqVRB66l2mWTvGnFwUebgFX4sANWnBP5Lw/wjeZ AKsdVSbkPD78pIhh4VGE3du2U5YgSK6bQuwv9/NYFcJEvmvI0BTyTzvjpLWQ8wGKZRkWPzEA lfHSLL11I7nKMe08E03aCwCWEbx7XxHGgnOpjuKYejXl0MPBq5cdyEQJU65BOXwRsox+keH6 pxU10UAIdf2xvovIULxOprnd5l3S9rezT9UMXfcFtPxf6Z1mNdiBT/5bnN8xMyD7wHvpyZbi 7khI9C2YD9ephcQY9afrvRz1nB0VV+qu/jENEVjr9QIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAFA1 Ls8YqvG2yPL6trMESudd0aYWafn3qcilOZsASOmheBnJqiE0CC7X0xtkl540nmPfXfm4znSt QyRb1YfWjsvJodjWxJ6jJySGbYOfnhFOuAyFeW0HQ0aYvfR/bwNLEQEyKrrrft2B22vswK49 FZFaH9lSPk6AbrB3bUq2WKNIMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMOzaww CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDUwNzIxMTQxMDQ5WjAjBgkqhkiG9w0BCQQxFgQUcZM/3/zOehPE9Al2WwK0q7ovToEw UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAw7NrDB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMOzawwDQYJKoZIhvcNAQEBBQAEggEAqhMKow1LkL69VBsUWdXdBubhUA7egtERt7h2PajL 7QBS9iUfMxBzkob3WKS59A23b0wTAWM8dgr3OLHcWxKgpQsh8kUZYzfYSWwZCo2qD3Rc45bg CjEdwP1rSVRe3Pxp1SF+xQRAfK2PKbMrSAAFw6Weo94gr1ZkPs49opX/PCg0XX4W4CrEmXNd wC8oCtHHcirEoP1g+M0eFkNE0Yf5s+FsZWAuFKV51gsHirkixpZTKCvkXKAqBV/j3W/9JxLa m8yx3wLiLTY43NibXrPhcpWeat5YIbVYKA9QdWGtkTjOxx/jHSMhsgoq2GT1FA0VVAeR89w+ gYL/noGWmLsAawAAAAAAAA== --------------ms050000030102090203030907-- --===============1068614271== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1068614271==-- From kitten-bounces@lists.ietf.org Thu Jul 21 11:34:06 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dvd3m-0007FY-1H; Thu, 21 Jul 2005 11:34:06 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dvd3j-0007FT-J9 for kitten@megatron.ietf.org; Thu, 21 Jul 2005 11:34:03 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA10242 for ; Thu, 21 Jul 2005 11:33:59 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DvdXi-0007oQ-Aq for kitten@ietf.org; Thu, 21 Jul 2005 12:05:05 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id j6LFXucn009486 for ; Thu, 21 Jul 2005 08:33:56 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j6LFXu3X019472 for ; Thu, 21 Jul 2005 09:33:56 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j6LFXufC008168; Thu, 21 Jul 2005 10:33:56 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j6LFXrM4008167; Thu, 21 Jul 2005 10:33:53 -0500 (CDT) Date: Thu, 21 Jul 2005 10:33:53 -0500 From: Nicolas Williams To: Von Welch Message-ID: <20050721153352.GD8002@binky.Central.Sun.COM> Mail-Followup-To: Von Welch , kitten@ietf.org References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <17117.17450.881204.232069@gargle.gargle.HOWL> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: de4f315c9369b71d7dd5909b42224370 Cc: kitten@ietf.org Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Tue, Jul 19, 2005 at 01:19:22PM -0500, Von Welch wrote: > > I'm not sure what you mean by "abandoned". We're not moving the > document forward in GGF because we deferred to kitten as the place to > do so, but the document does capture what we saw as our needs and we > have implemented and are using it. > > I'm not sure from the context of your note what part of it you were > specifically interested in. I'm happy to field questions or elaborate. If you've deployed then it'd be a good idea to update this doc. I do have a few questions about this mechanism though, such as what its OID(s) is(are). Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Jul 21 12:25:18 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DvdrK-0006w6-2e; Thu, 21 Jul 2005 12:25:18 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DvdrI-0006vw-Cy for kitten@megatron.ietf.org; Thu, 21 Jul 2005 12:25:16 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA14332 for ; Thu, 21 Jul 2005 12:25:14 -0400 (EDT) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DveLL-0002nU-4F for kitten@ietf.org; Thu, 21 Jul 2005 12:56:21 -0400 Received: from centralmail1brm.Central.Sun.COM (centralmail1brm.central.sun.com [129.147.62.1]) by brmea-mail-3.sun.com (8.12.10/8.12.9) with ESMTP id j6LGP8vU008165 for ; Thu, 21 Jul 2005 10:25:08 -0600 (MDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j6LGP73Z018757 for ; Thu, 21 Jul 2005 10:25:08 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j6LGP70N008207; Thu, 21 Jul 2005 11:25:07 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j6LGP70F008206; Thu, 21 Jul 2005 11:25:07 -0500 (CDT) Date: Thu, 21 Jul 2005 11:25:07 -0500 From: Nicolas Williams To: Jeffrey Altman Message-ID: <20050721162507.GG8002@binky.Central.Sun.COM> Mail-Followup-To: Jeffrey Altman , Von Welch , kitten@ietf.org References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> <42DFACE9.2010406@columbia.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <42DFACE9.2010406@columbia.edu> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: 08e48e05374109708c00c6208b534009 Cc: kitten@ietf.org Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Thu, Jul 21, 2005 at 10:10:49AM -0400, Jeffrey Altman wrote: > I believe that Nico is interested in the binding between GSS > authentication and SAML data. Indeed. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Jul 21 13:48:33 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dvf9t-0003PM-La; Thu, 21 Jul 2005 13:48:33 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dvf9s-0003Mg-PS for kitten@megatron.ietf.org; Thu, 21 Jul 2005 13:48:32 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA21417 for ; Thu, 21 Jul 2005 13:48:31 -0400 (EDT) Received: from mail.ncsa.uiuc.edu ([141.142.2.28]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Dvfdw-0000eu-UA for kitten@ietf.org; Thu, 21 Jul 2005 14:19:38 -0400 X-Envelope-From: vwelch@ncsa.uiuc.edu Received: from localhost (osage.ncsa.uiuc.edu [141.142.2.56]) by mail.ncsa.uiuc.edu (8.11.7/8.11.7) with ESMTP id j6LHltd25525; Thu, 21 Jul 2005 12:47:57 -0500 X-Mailer: emacs 22.0.50.1 (via feedmail 10 I); VM 7.18 under Emacs 22.0.50.1 From: "Von Welch" MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <17119.57294.385654.917723@gargle.gargle.HOWL> Date: Thu, 21 Jul 2005 12:47:58 -0500 To: Nicolas Williams In-Reply-To: <20050721162507.GG8002@binky.Central.Sun.COM> References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> <42DFACE9.2010406@columbia.edu> <20050721162507.GG8002@binky.Central.Sun.COM> X-NCSA-MailScanner-Information: Please contact the help@ncsa.uiuc.edu for more information X-NCSA-MailScanner: Found to be clean X-Spam-Score: 0.0 (/) X-Scan-Signature: 93238566e09e6e262849b4f805833007 Content-Transfer-Encoding: 7bit Cc: kitten@ietf.org Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Still not entirely sure what you're looking for. We don't do any SAML-based authentication, we do PKI (with a GSS interface) for authentication and use SAML assertions to convey attributes or authorization assertions. We use a hack of putting SAML assertions into X509 extensions as a way to convey those assertions through TLS and other protocols and then use GSS extensions described in the GGF document to pull those assertions out. Von Nicolas Williams writes (11:25 July 21, 2005): > On Thu, Jul 21, 2005 at 10:10:49AM -0400, Jeffrey Altman wrote: > > I believe that Nico is interested in the binding between GSS > > authentication and SAML data. > > Indeed. > > Nico > -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Jul 21 14:06:43 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DvfRS-00047T-Uc; Thu, 21 Jul 2005 14:06:42 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DvfRQ-00047L-PM for kitten@megatron.ietf.org; Thu, 21 Jul 2005 14:06:40 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA22434 for ; Thu, 21 Jul 2005 14:06:39 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DvfvU-0001kb-U8 for kitten@ietf.org; Thu, 21 Jul 2005 14:37:46 -0400 Received: from [192.168.1.11] (cpe-68-175-91-105.nyc.res.rr.com [68.175.91.105]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j6LI6Xk1025285 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 21 Jul 2005 14:06:33 -0400 (EDT) Message-ID: <42DFE405.8030908@columbia.edu> Date: Thu, 21 Jul 2005 14:05:57 -0400 From: Jeffrey Altman Organization: No Longer Affiliated with Columbia University in the City of New York User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Von Welch References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> <42DFACE9.2010406@columbia.edu> <20050721162507.GG8002@binky.Central.Sun.COM> <17119.57294.385654.917723@gargle.gargle.HOWL> In-Reply-To: <17119.57294.385654.917723@gargle.gargle.HOWL> X-Enigmail-Version: 0.92.0.0 X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.0 (/) X-Scan-Signature: 287c806b254c6353fcb09ee0e53bbc5e Cc: kitten@ietf.org, Nicolas Williams Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1241035599==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org This is a cryptographically signed message in MIME format. --===============1241035599== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms080902060306040203010402" This is a cryptographically signed message in MIME format. --------------ms080902060306040203010402 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit SAML is not used for authentication. As you point out it is used for authorization assertions. I think the most relevant part of the document for GSS will be the interface used to pull out the assertions. Kitten should work to define a generic interface that would work equally well with assertions stored as X.509 extensions or authz-data stored in a Kerberos ticket. Jeffrey Altman Von Welch wrote: > Still not entirely sure what you're looking for. > > We don't do any SAML-based authentication, we do PKI (with a GSS > interface) for authentication and use SAML assertions to convey > attributes or authorization assertions. > > We use a hack of putting SAML assertions into X509 extensions as a > way to convey those assertions through TLS and other protocols and > then use GSS extensions described in the GGF document to pull those > assertions out. > > Von > > > Nicolas Williams writes (11:25 July 21, 2005): > > On Thu, Jul 21, 2005 at 10:10:49AM -0400, Jeffrey Altman wrote: > > > I believe that Nico is interested in the binding between GSS > > > authentication and SAML data. > > > > Indeed. > > > > Nico > > -- --------------ms080902060306040203010402 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAw7NrDANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNTI3MTc0MjQzWhcNMDYwNTI3MTc0MjQz WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LutDu/YyHreNfoYd+ZtOjXsL h67F2cmcVuBPBz+ZGDA+WpVEHrqXaZZO8acXBR5uAVfiwA1acE/kvD/CN5kAqx1VJuQ8Pvyk iGHhUYTd27ZTliBIrptC7C/381gVwkS+a8jQFPJPO+OktZDzAYplGRY/MQCV8dIsvXUjucox 7TwTTdoLAJYRvHtfEcaCc6mO4ph6NeXQw8Grlx3IRAlTrkE5fBGyjH6R4fqnFTXRQAh1/bG+ i8hQvE6mud3mXdL2t7NP1Qxd9wW0/F/pnWY12IFP/luc3zEzIPvAe+nJluLuSEj0LZgP16mF xBj1p+u9HPWcHRVX6q7+MQ0RWOv1AgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAUDUuzxiq8bbI8vq2 swRK513RphZp+fepyKU5mwBI6aF4GcmqITQILtfTG2SXnjSeY99d+bjOdK1DJFvVh9aOy8mh 2NbEnqMnJIZtg5+eEU64DIV5bQdDRpi99H9vA0sRATIquut+3YHba+zArj0VkVof2VI+ToBu sHdtSrZYo0gwggL6MIICY6ADAgECAgMOzawwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1MDUyNzE3NDI0M1oXDTA2 MDUyNzE3NDI0M1owazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7rQ7v2Mh63 jX6GHfmbTo17C4euxdnJnFbgTwc/mRgwPlqVRB66l2mWTvGnFwUebgFX4sANWnBP5Lw/wjeZ AKsdVSbkPD78pIhh4VGE3du2U5YgSK6bQuwv9/NYFcJEvmvI0BTyTzvjpLWQ8wGKZRkWPzEA lfHSLL11I7nKMe08E03aCwCWEbx7XxHGgnOpjuKYejXl0MPBq5cdyEQJU65BOXwRsox+keH6 pxU10UAIdf2xvovIULxOprnd5l3S9rezT9UMXfcFtPxf6Z1mNdiBT/5bnN8xMyD7wHvpyZbi 7khI9C2YD9ephcQY9afrvRz1nB0VV+qu/jENEVjr9QIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAFA1 Ls8YqvG2yPL6trMESudd0aYWafn3qcilOZsASOmheBnJqiE0CC7X0xtkl540nmPfXfm4znSt QyRb1YfWjsvJodjWxJ6jJySGbYOfnhFOuAyFeW0HQ0aYvfR/bwNLEQEyKrrrft2B22vswK49 FZFaH9lSPk6AbrB3bUq2WKNIMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMOzaww CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDUwNzIxMTgwNTU3WjAjBgkqhkiG9w0BCQQxFgQUZPRhmsS65HYnqeXeEvMUpgp4Na4w UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAw7NrDB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMOzawwDQYJKoZIhvcNAQEBBQAEggEApD9Iu7EndRXEW72I0e0XYS2hZJmvSglhHfpVbFm3 qMa8WXZfD6YjzYltUicgKJ4FtqrOeR3eHahvmgdM6vmeUiyBB9nfSmveVq71Za6+2/iq+UqK 9CHJTSjlAf0Qo/R6EXEKucC0LgPU4ZDLmpnFsaz7HnaovAPDDyC47ghFQ9U4Ul/N7G96xAlI P0xaSM7rTxsqBtZaHrXHOlVxIcgost4Ha20ii8sD7bh3ECkATDuwfR5WtBtyLpxZAn+hHirr oRxT/mPSmn0/Ce0xQs1zLwtlaQ+2UpsSc+3XLWy0AWb39WqlwAAsLNZzOvKWJUdo1xW+8X9H Qy/Lu3wcmwfFFgAAAAAAAA== --------------ms080902060306040203010402-- --===============1241035599== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1241035599==-- From kitten-bounces@lists.ietf.org Fri Jul 22 10:41:09 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dvyi5-0006ZC-Li; Fri, 22 Jul 2005 10:41:09 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dvyi3-0006Z6-Cr for kitten@megatron.ietf.org; Fri, 22 Jul 2005 10:41:07 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA21009 for ; Fri, 22 Jul 2005 10:41:02 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DvzCC-0008M0-H9 for kitten@ietf.org; Fri, 22 Jul 2005 11:12:21 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id j6MEewcn003852 for ; Fri, 22 Jul 2005 07:40:58 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j6MEevfd014335 for ; Fri, 22 Jul 2005 08:40:57 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j6MEeuIQ008699; Fri, 22 Jul 2005 09:40:56 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j6MEetfX008698; Fri, 22 Jul 2005 09:40:55 -0500 (CDT) Date: Fri, 22 Jul 2005 09:40:55 -0500 From: Nicolas Williams To: Von Welch Message-ID: <20050722144055.GA8694@binky.Central.Sun.COM> Mail-Followup-To: Von Welch , Jeffrey Altman , kitten@ietf.org References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> <42DFACE9.2010406@columbia.edu> <20050721162507.GG8002@binky.Central.Sun.COM> <17119.57294.385654.917723@gargle.gargle.HOWL> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <17119.57294.385654.917723@gargle.gargle.HOWL> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: cf4fa59384e76e63313391b70cd0dd25 Cc: kitten@ietf.org Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Thu, Jul 21, 2005 at 12:47:58PM -0500, Von Welch wrote: > > Still not entirely sure what you're looking for. > > We don't do any SAML-based authentication, we do PKI (with a GSS > interface) for authentication and use SAML assertions to convey > attributes or authorization assertions. Right, and that's what I'm interested in. > We use a hack of putting SAML assertions into X509 extensions as a > way to convey those assertions through TLS and other protocols and > then use GSS extensions described in the GGF document to pull those > assertions out. Ah. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 22 10:41:46 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dvyig-0006ls-D4; Fri, 22 Jul 2005 10:41:46 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dvyif-0006lC-4R for kitten@megatron.ietf.org; Fri, 22 Jul 2005 10:41:45 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA21037 for ; Fri, 22 Jul 2005 10:41:42 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DvzCt-0008NE-M8 for kitten@ietf.org; Fri, 22 Jul 2005 11:13:01 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id j6MEff3t022807 for ; Fri, 22 Jul 2005 07:41:41 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j6MEfefd014671 for ; Fri, 22 Jul 2005 08:41:41 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j6MEfeWF008706; Fri, 22 Jul 2005 09:41:40 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j6MEfe3E008705; Fri, 22 Jul 2005 09:41:40 -0500 (CDT) Date: Fri, 22 Jul 2005 09:41:40 -0500 From: Nicolas Williams To: Jeffrey Altman Message-ID: <20050722144140.GB8694@binky.Central.Sun.COM> Mail-Followup-To: Jeffrey Altman , Von Welch , kitten@ietf.org References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> <42DFACE9.2010406@columbia.edu> <20050721162507.GG8002@binky.Central.Sun.COM> <17119.57294.385654.917723@gargle.gargle.HOWL> <42DFE405.8030908@columbia.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <42DFE405.8030908@columbia.edu> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: 30ac594df0e66ffa5a93eb4c48bcb014 Cc: kitten@ietf.org Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Thu, Jul 21, 2005 at 02:05:57PM -0400, Jeffrey Altman wrote: > SAML is not used for authentication. As you point out it is used > for authorization assertions. I think the most relevant part of > the document for GSS will be the interface used to pull out > the assertions. Kitten should work to define a generic interface > that would work equally well with assertions stored as X.509 extensions > or authz-data stored in a Kerberos ticket. And, of course, KITTEN *is* working such extensions. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 22 18:32:02 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dw63m-0004g4-JM; Fri, 22 Jul 2005 18:32:02 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dw63l-0004fE-Bi for kitten@megatron.ietf.org; Fri, 22 Jul 2005 18:32:01 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA07726 for ; Fri, 22 Jul 2005 18:31:58 -0400 (EDT) Received: from mail.ncsa.uiuc.edu ([141.142.2.28]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Dw6Y3-00047Q-Fk for kitten@ietf.org; Fri, 22 Jul 2005 19:03:21 -0400 X-Envelope-From: vwelch@ncsa.uiuc.edu Received: from localhost (osage.ncsa.uiuc.edu [141.142.2.56]) by mail.ncsa.uiuc.edu (8.11.7/8.11.7) with ESMTP id j6MMVpd20057; Fri, 22 Jul 2005 17:31:52 -0500 X-Mailer: emacs 22.0.50.1 (via feedmail 10 I); VM 7.18 under Emacs 22.0.50.1 From: "Von Welch" MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <17121.29657.436997.614918@gargle.gargle.HOWL> Date: Fri, 22 Jul 2005 17:31:53 -0500 To: Nicolas Williams In-Reply-To: <20050722144055.GA8694@binky.Central.Sun.COM> References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> <42DFACE9.2010406@columbia.edu> <20050721162507.GG8002@binky.Central.Sun.COM> <17119.57294.385654.917723@gargle.gargle.HOWL> <20050722144055.GA8694@binky.Central.Sun.COM> X-NCSA-MailScanner-Information: Please contact the help@ncsa.uiuc.edu for more information X-NCSA-MailScanner: Found to be clean X-Spam-Score: 0.0 (/) X-Scan-Signature: 8b30eb7682a596edff707698f4a80f7d Content-Transfer-Encoding: 7bit Cc: kitten@ietf.org Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Ok, here's the final version of the document to make sure we have a consistent view of section numbers: http://www.ggf.org/documents/GFD.24.pdf The relevant extensions are using are described in section 2.3. In our implementation we use the first call (in 2.3.1) to pull X509 extensions from the certificate and then push those into a GAA library. Conceptually one could define an OID meaning give me any SAML attribute assertions associated with the client in the context. I also recall a conversation a while back where someone (you or Jeffrey I think) argued this would be better done as a inquiry mechanism based on the gss_name, which I agree with. Von Nicolas Williams writes (09:40 July 22, 2005): > On Thu, Jul 21, 2005 at 12:47:58PM -0500, Von Welch wrote: > > > > Still not entirely sure what you're looking for. > > > > We don't do any SAML-based authentication, we do PKI (with a GSS > > interface) for authentication and use SAML assertions to convey > > attributes or authorization assertions. > > Right, and that's what I'm interested in. > > > We use a hack of putting SAML assertions into X509 extensions as a > > way to convey those assertions through TLS and other protocols and > > then use GSS extensions described in the GGF document to pull those > > assertions out. > > Ah. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Jul 22 18:54:15 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dw6PH-0004be-O8; Fri, 22 Jul 2005 18:54:15 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dw6PF-0004Sg-BH for kitten@megatron.ietf.org; Fri, 22 Jul 2005 18:54:13 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA09090 for ; Fri, 22 Jul 2005 18:54:07 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Dw6tU-0004rA-33 for kitten@ietf.org; Fri, 22 Jul 2005 19:25:31 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id j6MMs6cn010106 for ; Fri, 22 Jul 2005 15:54:06 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j6MMs5fd025461 for ; Fri, 22 Jul 2005 16:54:05 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j6MMs4XD009575; Fri, 22 Jul 2005 17:54:04 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j6MMs3DY009574; Fri, 22 Jul 2005 17:54:03 -0500 (CDT) Date: Fri, 22 Jul 2005 17:54:03 -0500 From: Nicolas Williams To: Von Welch Message-ID: <20050722225403.GN8694@binky.Central.Sun.COM> Mail-Followup-To: Von Welch , Jeffrey Altman , kitten@ietf.org References: <20050719180604.GT4303@binky.Central.Sun.COM> <20050719180929.GA5809@binky.Central.Sun.COM> <17117.17450.881204.232069@gargle.gargle.HOWL> <42DFACE9.2010406@columbia.edu> <20050721162507.GG8002@binky.Central.Sun.COM> <17119.57294.385654.917723@gargle.gargle.HOWL> <20050722144055.GA8694@binky.Central.Sun.COM> <17121.29657.436997.614918@gargle.gargle.HOWL> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <17121.29657.436997.614918@gargle.gargle.HOWL> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7655788c23eb79e336f5f8ba8bce7906 Cc: kitten@ietf.org Subject: Re: GGF evidently needs stackable pseudo-mechs X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Fri, Jul 22, 2005 at 05:31:53PM -0500, Von Welch wrote: > Conceptually one could define an OID meaning give me any SAML > attribute assertions associated with the client in the context. > > I also recall a conversation a while back where someone (you or > Jeffrey I think) argued this would be better done as a inquiry > mechanism based on the gss_name, which I agree with. We have two KITTEN WG Internet-Drafts on this: http://www.ietf.org/internet-drafts/draft-ietf-kitten-gss-naming-02.txt http://www.ietf.org/internet-drafts/draft-ietf-kitten-gssapi-naming-exts-00.txt I don't recall anymore who suggested it -- Jeff, Sam or I, but it doesn't matter; what matters is that KITTEN is chartered to do this work, so the GGF will want to help ensure we're addressing its needs. So please review them! :) Thanks, Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Jul 25 12:44:19 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dx63v-0005PS-OB; Mon, 25 Jul 2005 12:44:19 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dx63t-0005O7-61 for kitten@megatron.ietf.org; Mon, 25 Jul 2005 12:44:18 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA06154; Mon, 25 Jul 2005 12:44:14 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Dx6Yl-0000mg-9x; Mon, 25 Jul 2005 13:16:12 -0400 Received: from [192.168.1.11] (cpe-68-175-91-105.nyc.res.rr.com [68.175.91.105]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j6PGiEDQ008075 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 25 Jul 2005 12:44:14 -0400 (EDT) Message-ID: <42E516E0.8030502@columbia.edu> Date: Mon, 25 Jul 2005 12:44:16 -0400 From: Jeffrey Altman Organization: No Longer Affiliated with Columbia University in the City of New York User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 X-Accept-Language: en-us, en MIME-Version: 1.0 To: IETF Agenda via RT X-Enigmail-Version: 0.92.0.0 X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.0 (/) X-Scan-Signature: a7d2e37451f7f22841e3b6f40c67db0f Cc: Kitten Subject: Kitten agenda IETF63 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1438841856==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org This is a cryptographically signed message in MIME format. --===============1438841856== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms040007080101080002060809" This is a cryptographically signed message in MIME format. --------------ms040007080101080002060809 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit GSS-API Next Generation WG (kitten) MONDAY, August 1, 2005 at 1030-1230 Morning Session II ====================================================== Chair(s): Jeffrey Altman AGENDA: Preliminaries - Jeffrey Altman (5 min) - Introduction - Blue Sheets - Scribe, Jabber - Agenda Bashing Document Status - Jeffrey Altman (5 min) - A PRF API extension for the GSS-API draft-ietf-kitten-gssapi-prf-04.txt - A PRF for the Kerberos V GSS-API Mechanism draft-ietf-kitten-krb5-gssapi-prf-04.txt - Corrections and Updates of GSS-API Java Bindings draft-ietf-kitten-rfc2853bis-00.txt Technical Discussion (90 min) - GSS-API Naming Extensions (Nico Williams, Sun Microsystems draft-ietf-kitten-gssapi-naming-exts-00.txt - Moving RFC2743 and RFC2744 to Draft - Review CAT and KRB-WG mailing list archives to determine contents of 'Clarifications to GSSAPIv2' as Informational Update Milestones - Chair and Participants (10 min) --------------ms040007080101080002060809 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAw7NrDANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNTI3MTc0MjQzWhcNMDYwNTI3MTc0MjQz WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LutDu/YyHreNfoYd+ZtOjXsL h67F2cmcVuBPBz+ZGDA+WpVEHrqXaZZO8acXBR5uAVfiwA1acE/kvD/CN5kAqx1VJuQ8Pvyk iGHhUYTd27ZTliBIrptC7C/381gVwkS+a8jQFPJPO+OktZDzAYplGRY/MQCV8dIsvXUjucox 7TwTTdoLAJYRvHtfEcaCc6mO4ph6NeXQw8Grlx3IRAlTrkE5fBGyjH6R4fqnFTXRQAh1/bG+ i8hQvE6mud3mXdL2t7NP1Qxd9wW0/F/pnWY12IFP/luc3zEzIPvAe+nJluLuSEj0LZgP16mF xBj1p+u9HPWcHRVX6q7+MQ0RWOv1AgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAUDUuzxiq8bbI8vq2 swRK513RphZp+fepyKU5mwBI6aF4GcmqITQILtfTG2SXnjSeY99d+bjOdK1DJFvVh9aOy8mh 2NbEnqMnJIZtg5+eEU64DIV5bQdDRpi99H9vA0sRATIquut+3YHba+zArj0VkVof2VI+ToBu sHdtSrZYo0gwggL6MIICY6ADAgECAgMOzawwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1MDUyNzE3NDI0M1oXDTA2 MDUyNzE3NDI0M1owazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7rQ7v2Mh63 jX6GHfmbTo17C4euxdnJnFbgTwc/mRgwPlqVRB66l2mWTvGnFwUebgFX4sANWnBP5Lw/wjeZ AKsdVSbkPD78pIhh4VGE3du2U5YgSK6bQuwv9/NYFcJEvmvI0BTyTzvjpLWQ8wGKZRkWPzEA lfHSLL11I7nKMe08E03aCwCWEbx7XxHGgnOpjuKYejXl0MPBq5cdyEQJU65BOXwRsox+keH6 pxU10UAIdf2xvovIULxOprnd5l3S9rezT9UMXfcFtPxf6Z1mNdiBT/5bnN8xMyD7wHvpyZbi 7khI9C2YD9ephcQY9afrvRz1nB0VV+qu/jENEVjr9QIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAFA1 Ls8YqvG2yPL6trMESudd0aYWafn3qcilOZsASOmheBnJqiE0CC7X0xtkl540nmPfXfm4znSt QyRb1YfWjsvJodjWxJ6jJySGbYOfnhFOuAyFeW0HQ0aYvfR/bwNLEQEyKrrrft2B22vswK49 FZFaH9lSPk6AbrB3bUq2WKNIMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMOzaww CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDUwNzI1MTY0NDE2WjAjBgkqhkiG9w0BCQQxFgQUYArH4rdoTfrAEqbYPvuydHlYtB0w UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAw7NrDB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMOzawwDQYJKoZIhvcNAQEBBQAEggEAg0X7bBW1TYhJ09upl2t9v7NQ+L2PO5p0CmnPRmre zMlR5HoI8uSQWrCH/Z+uiBzT3y3bBLECQrgzZMb4rYM/X7M1qVHT+iLvwvNjmdIH/ebwMPko /Iq+vye2Pup+AF/gvj2FOuOLc6mt7OkjupVktlrQwfQd2tZ9FqrtO5MQU8kymaKZGjdF+zQK n3YCr0Fcx3cAXIlGn7LGdywU4ueFaccwA5/iSPOTjEO7fOVbV6pHzoYPGxqPuvJZlYj9lwUw NdW40/LZPYMdW14sfQMWeKcgBa5FS8shhPqlBEL8WBR+ia/dotS01J3IJa7N55zs77c2X/Vy +aJ/Uzxg75ynSQAAAAAAAA== --------------ms040007080101080002060809-- --===============1438841856== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1438841856==-- From kitten-bounces@lists.ietf.org Thu Jul 28 12:53:09 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DyBd7-0006sL-OX; Thu, 28 Jul 2005 12:53:09 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DyBd6-0006sF-6J for kitten@megatron.ietf.org; Thu, 28 Jul 2005 12:53:08 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA12184 for ; Thu, 28 Jul 2005 12:53:05 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DyC8a-0003KA-D4 for kitten@ietf.org; Thu, 28 Jul 2005 13:25:41 -0400 Received: by carter-zimmerman.mit.edu (Postfix, from userid 8042) id 4119CE0049; Thu, 28 Jul 2005 12:52:10 -0400 (EDT) To: Jeffrey Altman References: <42E516E0.8030502@columbia.edu> From: Sam Hartman Date: Thu, 28 Jul 2005 12:52:10 -0400 In-Reply-To: <42E516E0.8030502@columbia.edu> (Jeffrey Altman's message of "Mon, 25 Jul 2005 12:44:16 -0400") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 2870a44b67ee17965ce5ad0177e150f4 Cc: kitten@ietf.org Subject: Re: Kitten agenda IETF63 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org Hi. I asked for draft-ietf-kitten-gss-naming to be last called but have heard nothing back from the chair, so I'd like to see this in the document status update list. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Jul 28 16:12:42 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DyEhi-0005hk-Ua; Thu, 28 Jul 2005 16:10:06 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DyEhf-0005go-Bs for kitten@megatron.ietf.org; Thu, 28 Jul 2005 16:10:03 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA25552 for ; Thu, 28 Jul 2005 16:10:01 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DyFDB-0000L1-7G for kitten@ietf.org; Thu, 28 Jul 2005 16:42:38 -0400 Received: from [192.168.1.11] (cpe-68-175-91-105.nyc.res.rr.com [68.175.91.105]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j6SK9w9E014577 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 28 Jul 2005 16:09:59 -0400 (EDT) Message-ID: <42E93BA9.5010406@columbia.edu> Date: Thu, 28 Jul 2005 16:10:17 -0400 From: Jeffrey Altman Organization: No Longer Affiliated with Columbia University in the City of New York User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Sam Hartman References: <42E516E0.8030502@columbia.edu> In-Reply-To: X-Enigmail-Version: 0.92.0.0 X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.0 (/) X-Scan-Signature: c3a18ef96977fc9bcc21a621cbf1174b Cc: kitten@ietf.org Subject: Re: Kitten agenda IETF63 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1918733381==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org This is a cryptographically signed message in MIME format. --===============1918733381== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms060707000204070906090303" This is a cryptographically signed message in MIME format. --------------ms060707000204070906090303 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sam Hartman wrote: > Hi. I asked for draft-ietf-kitten-gss-naming to be last called but > have heard nothing back from the chair, so I'd like to see this in the > document status update list. Sorry, it slipped through the cracks. We will issue a last call on this document starting the Monday after IETF63. Jeffrey Altman --------------ms060707000204070906090303 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAw7NrDANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNTI3MTc0MjQzWhcNMDYwNTI3MTc0MjQz WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LutDu/YyHreNfoYd+ZtOjXsL h67F2cmcVuBPBz+ZGDA+WpVEHrqXaZZO8acXBR5uAVfiwA1acE/kvD/CN5kAqx1VJuQ8Pvyk iGHhUYTd27ZTliBIrptC7C/381gVwkS+a8jQFPJPO+OktZDzAYplGRY/MQCV8dIsvXUjucox 7TwTTdoLAJYRvHtfEcaCc6mO4ph6NeXQw8Grlx3IRAlTrkE5fBGyjH6R4fqnFTXRQAh1/bG+ i8hQvE6mud3mXdL2t7NP1Qxd9wW0/F/pnWY12IFP/luc3zEzIPvAe+nJluLuSEj0LZgP16mF xBj1p+u9HPWcHRVX6q7+MQ0RWOv1AgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAUDUuzxiq8bbI8vq2 swRK513RphZp+fepyKU5mwBI6aF4GcmqITQILtfTG2SXnjSeY99d+bjOdK1DJFvVh9aOy8mh 2NbEnqMnJIZtg5+eEU64DIV5bQdDRpi99H9vA0sRATIquut+3YHba+zArj0VkVof2VI+ToBu sHdtSrZYo0gwggL6MIICY6ADAgECAgMOzawwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA1MDUyNzE3NDI0M1oXDTA2 MDUyNzE3NDI0M1owazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7rQ7v2Mh63 jX6GHfmbTo17C4euxdnJnFbgTwc/mRgwPlqVRB66l2mWTvGnFwUebgFX4sANWnBP5Lw/wjeZ AKsdVSbkPD78pIhh4VGE3du2U5YgSK6bQuwv9/NYFcJEvmvI0BTyTzvjpLWQ8wGKZRkWPzEA lfHSLL11I7nKMe08E03aCwCWEbx7XxHGgnOpjuKYejXl0MPBq5cdyEQJU65BOXwRsox+keH6 pxU10UAIdf2xvovIULxOprnd5l3S9rezT9UMXfcFtPxf6Z1mNdiBT/5bnN8xMyD7wHvpyZbi 7khI9C2YD9ephcQY9afrvRz1nB0VV+qu/jENEVjr9QIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAFA1 Ls8YqvG2yPL6trMESudd0aYWafn3qcilOZsASOmheBnJqiE0CC7X0xtkl540nmPfXfm4znSt QyRb1YfWjsvJodjWxJ6jJySGbYOfnhFOuAyFeW0HQ0aYvfR/bwNLEQEyKrrrft2B22vswK49 FZFaH9lSPk6AbrB3bUq2WKNIMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMOzaww CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDUwNzI4MjAxMDE3WjAjBgkqhkiG9w0BCQQxFgQUezESuWgqRyxaOFS3WDspElFURKUw UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAw7NrDB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMOzawwDQYJKoZIhvcNAQEBBQAEggEAprIv6c/64tTuwhs0BQ8QqOky5gnHfQ4YOHeH0XkM lA2cq9QQfN60xnHUi+hBbCwqXHq/LE05fXKTlzPmONH8heJs+BEt/ggmPlFD8gX8B90KsyPS bYRl+iz9WuBkj94zKJRf9i7Hxup+qJzBJNBNu32WswGb31EWipuMQouaB6gSPQwsILqnwBQM Khw1m9KjuhWzAx9me7wlu4M1ZTDC4GbPMehF9Bp00268k4osU3FYPWrMxuaQo7crzBh9DRSg 32e/VF3MkGeTun+QJx3iO0ROfN1cHevwpRUDQol7gs1ot5qoXXvxDlCtp+uRee0X5EGgG4BP K7XmiIdiYrhP6AAAAAAAAA== --------------ms060707000204070906090303-- --===============1918733381== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1918733381==-- From kitten-bounces@lists.ietf.org Thu Jul 28 17:38:24 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DyG5A-0005nX-Ah; Thu, 28 Jul 2005 17:38:24 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DyG58-0005nS-PR for kitten@megatron.ietf.org; Thu, 28 Jul 2005 17:38:22 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA00501 for ; Thu, 28 Jul 2005 17:38:17 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1DyGaa-0002gJ-QD for kitten@ietf.org; Thu, 28 Jul 2005 18:10:56 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id j6SLcF3t029767 for ; Thu, 28 Jul 2005 14:38:15 -0700 (PDT) Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id j6SLcDq4023113 for ; Thu, 28 Jul 2005 15:38:14 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3) with ESMTP id j6SLcDJY010766; Thu, 28 Jul 2005 16:38:13 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.13.3+Sun/8.13.3/Submit) id j6SLcBqe010765; Thu, 28 Jul 2005 16:38:11 -0500 (CDT) Date: Thu, 28 Jul 2005 16:38:11 -0500 From: Nicolas Williams To: Jeffrey Altman Message-ID: <20050728213811.GD11320@binky.Central.Sun.COM> Mail-Followup-To: Jeffrey Altman , Sam Hartman , kitten@ietf.org References: <42E516E0.8030502@columbia.edu> <42E93BA9.5010406@columbia.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <42E93BA9.5010406@columbia.edu> User-Agent: Mutt/1.5.7i X-Spam-Score: 0.0 (/) X-Scan-Signature: d17f825e43c9aed4fd65b7edddddec89 Cc: kitten@ietf.org, Sam Hartman Subject: Re: Kitten agenda IETF63 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org On Thu, Jul 28, 2005 at 04:10:17PM -0400, Jeffrey Altman wrote: > Sam Hartman wrote: > > > Hi. I asked for draft-ietf-kitten-gss-naming to be last called but > > have heard nothing back from the chair, so I'd like to see this in the > > document status update list. > > Sorry, it slipped through the cracks. We will issue a last call on > this document starting the Monday after IETF63. And we need to get more review of the other naming extensions doc too. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten