From nobody Wed Jan 13 05:50:23 2016 Return-Path: X-Original-To: ldapext@ietfa.amsl.com Delivered-To: ldapext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FB351B2DCD for ; Wed, 13 Jan 2016 05:50:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.903 X-Spam-Level: X-Spam-Status: No, score=-0.903 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CMZzQGtGIsQB for ; Wed, 13 Jan 2016 05:50:19 -0800 (PST) Received: from srv1.stroeder.com (srv1.stroeder.com [213.240.180.113]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 139911B2DC6 for ; Wed, 13 Jan 2016 05:50:19 -0800 (PST) Received: from srv4.stroeder.local (unknown [10.1.1.7]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.stroeder.local", Issuer "stroeder.com Server CA no. 2009-07" (verified OK)) by srv1.stroeder.com (Postfix) with ESMTPS id DFF8E1CEBD for ; Wed, 13 Jan 2016 13:50:16 +0000 (UTC) Received: from nb2.stroeder.local (nb2.stroeder.local [10.1.1.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by srv4.stroeder.local (Postfix) with ESMTPS id 440211D311 for ; Wed, 13 Jan 2016 13:50:15 +0000 (UTC) To: ldapext From: =?UTF-8?Q?Michael_Str=c3=b6der?= X-Enigmail-Draft-Status: N1110 Message-ID: <56965616.60507@stroeder.com> Date: Wed, 13 Jan 2016 14:50:14 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:42.0) Gecko/20100101 SeaMonkey/2.39 MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030902050904070203040508" Archived-At: Subject: [ldapext] support for Assertion Control X-BeenThere: ldapext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: LDAP Extension Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2016 13:50:21 -0000 This is a cryptographically signed message in MIME format. --------------ms030902050904070203040508 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable HI! I need to do some interop-testing for a work-around in case an Assertion = Control [1] is sent along with modify requests. I currently only know two LDAP se= rvers supporting it: OpenDJ OpenLDAP Any other LDAP servers supporting [1] which I should test with? Do they have attribute 'entryDN' [2] in their entries and support for at = least EQUALITY matching? Ciao, Michael. [1] https://tools.ietf.org/html/rfc4528 [2] https://tools.ietf.org/html/rfc5020 --------------ms030902050904070203040508 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DGYwggYqMIIFEqADAgECAgMPVg4wDQYJKoZIhvcNAQELBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTA5MTAxNjMwMTdaFw0xNjA5MTAxNDA3NTBaMEQxHTAb BgNVBAMMFG1pY2hhZWxAc3Ryb2VkZXIuY29tMSMwIQYJKoZIhvcNAQkBFhRtaWNoYWVsQHN0 cm9lZGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ3ulgRkFW/ozuAX 8HwDmP7ifGF09KbLcAEVVjS013fTAlEzq0TJVcMXx/57LqdWtelCi35YvCzXHURuZl6hpUlR +yOR1sev9xP2NfEJHQKUfs435wN6xFmdg/LI+ydlJ/exc3XxZVnb994vtJOlQh1HgXJvCORp 9d359fQQMY5N71TiQs0rcn8SNUBLZYHom1U2g2oEHN/QFNf2noxfXdPxTWeeeR0EuhH1Yy/0 AE2JZk2VmFW6VZYjEPoXUOfRizEzSM6HjyG347RnFd5Zh5vquxN609Z2iSg1Txuvd/eLSSuu 9sxLfw/5Qq4Xd/vhNVTrvG8d4M9L54orRVdFwmsCAwEAAaOCAtowggLWMAkGA1UdEwQCMAAw CwYDVR0PBAQDAgSwMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU ubJgGvVtleGfzm7tjClKT2uUcB4wHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIw HwYDVR0RBBgwFoEUbWljaGFlbEBzdHJvZWRlci5jb20wggFMBgNVHSAEggFDMIIBPzCCATsG CysGAQQBgbU3AQIDMIIBKjAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20v cG9saWN5LnBkZjCB9wYIKwYBBQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkwAwIBARqBvlRoaXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcg dG8gdGhlIENsYXNzIDEgVmFsaWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29t IENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4g Y29tcGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8w LTAroCmgJ4YlaHR0cDovL2NybC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYB BQUHAQEEgYEwfzA5BggrBgEFBQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9j bGFzczEvY2xpZW50L2NhMEIGCCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9j ZXJ0cy9zdWIuY2xhc3MxLmNsaWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5z dGFydHNzbC5jb20vMA0GCSqGSIb3DQEBCwUAA4IBAQAv5aQr1I7ZAg4VJJtaPIi61v/v0v9j Hs/Gl695n7shMeZx/H5F6EAwma0MWIWv1H9mtFcGhXiwr55SR1xMffy+C2Q5byyVcVKmrC+E vP1Ke+VnJ6v/l3JV5zPQf38XdCvYQACHFIODnVmD5JI59TWzS5ReudfTf60kQeNoRTZH15el 8hORNOzkoGiV70Kuuw7pCOf0ncjshttJE3NetXa2f4rTsCC5UNrMqhF8Y6NALa3m/zzCK1+i nvukFQPBU3+NFeNcrpp2nroEutsl3ftkcw6jAvQvTGEIw6AO13fgujtge+kxyoF2RuCSsEmT jmyZ7QweLwfmuU70umVTM8HUMIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQsw CQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERp Z2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNh dGlvbiBBdXRob3JpdHkwHhcNMDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkG A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdp dGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJp bWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxwmDzM4t2BqxKaQuE6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESi p7vMz39ScLpNLbL1QpOlPW/tFIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9f tTyhxvxWkf8KW37iKrueKsxw2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsW oTb7q8hmgv6Nv3Hg9rmA1/VPBIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/ 43Yksq60jExipA4l5uv9/+Hm33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IB rTCCAakwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc 4NrLAVx8fpY1TvLUuFGCMB8GA1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsG AQUFBwEBBFowWDAnBggrBgEFBQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0G CCsGAQUFBzAChiFodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQw UjAnoCWgI4YhaHR0cDovL3d3dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRw Oi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcB AgEwZjAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0 BggrBgEFBQcCARYoaHR0cDovL3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjAN BgkqhkiG9w0BAQUFAAOCAgEACoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHb WNaPeQn3oBSU8KgQZn/Kck1JxbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4 OxK9QPoSjCMxM3HbkZCDJgnlE8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0 KAkXCzeQNLeA5LlYUzFyM7kPAp8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL0 4qYK/zu+Qg1Bw0RwgigVZs/0c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0 IFiNu9IPuTGAPBn4CPxD0+Ru8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6 fDEPme+1Nbi+03pVjuZQKbGwKJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVt jYsv0L1TSm2+NwON58tO+pIVzu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm4 8ZCYfAWLb/Xj7F5JQMbZvCexglAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BI XRsF1du4qESm4/3CKuyUV7p9DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIB ATCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsT IlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29t IENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMPVg4wDQYJYIZIAWUD BAIBBQCgggIpMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE2 MDExMzEzNTAxNFowLwYJKoZIhvcNAQkEMSIEIE1xXG62H7ZxcBZ0iWTNcmXHuB7YWb7+irOF gcDFiJJ4MGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggq hkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZI hvcNAwICASgwgaUGCSsGAQQBgjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBAgMPVg4wgacGCyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEW MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVy bWVkaWF0ZSBDbGllbnQgQ0ECAw9WDjANBgkqhkiG9w0BAQEFAASCAQBLsuqovfSK3lJYJsJ2 Q7bFzFijp1nQyMkiGG22VVHRkgAbwyGMyXYOeGF+u29zzDYurNgKeH93bVd+F09LvzvZ86rJ DxAPk8LThJ5FbDGx5eEVdLxI1gUiMnf/SKoZVwnNI6O/sI9h/o8ymN089lKh9s1c4FVD9LGK 0X2/Vqe6Dt+QA5pN32+VlNw5pWsTftpUAxtTPn8wbht1WTE6NBwOv8NEr8zWMnAKd5wLa7ve BRLZkgLGOu9yc042Fle/s9TME5jhyMBgTjHzTBCqHu0wuo4vbjJIVmAEE46jUccLJe2o1YEx t4Hpn4I65GVpf1Rpbu/xgwBfiLD6EX9kphGYAAAAAAAA --------------ms030902050904070203040508-- From nobody Wed Jan 13 08:56:35 2016 Return-Path: X-Original-To: ldapext@ietfa.amsl.com Delivered-To: ldapext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B4ED1B2F39 for ; Wed, 13 Jan 2016 08:56:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Ko39dfWXS_d for ; Wed, 13 Jan 2016 08:56:33 -0800 (PST) Received: from mail-ob0-x233.google.com (mail-ob0-x233.google.com [IPv6:2607:f8b0:4003:c01::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A2E51B2F41 for ; Wed, 13 Jan 2016 08:56:31 -0800 (PST) Received: by mail-ob0-x233.google.com with SMTP id vt7so60044345obb.1 for ; Wed, 13 Jan 2016 08:56:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=unboundid.com; s=google; h=subject:to:references:from:organization:message-id:date:user-agent :mime-version:in-reply-to:content-type; bh=W4cMOtTd29Yqs8b31QGcwJW5H5CFDfyOuU2DdjvMwEs=; b=VMc8fr/t1h0Z8MSscorKEO08iLMUYrKGTi0GrUIYVgW+YEGix4H/R2++/Yh5pHu2Lp 01EoUBJ1wBxqW5MEA46O7l1uwZbo1JpbH+g1jmo7iyvvRQkO0ZyyrejC34s+FdkCe1tk iqV4P9LnVqZDAzSZYUnBXNbyo0FeZUcNiZxTk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to:content-type; bh=W4cMOtTd29Yqs8b31QGcwJW5H5CFDfyOuU2DdjvMwEs=; b=GRzr2WkG7j2aDsSH5SFTx2u2KiXr8saPEArw3iQ3EzD4G7MKuVp9ifO2yToZiz1ymJ 6bLH18cwaLgykTkQ3WzA3K7/fo4QeJfq7koLpAj3O15TQkfLiI3PEYQVLEsdZ6ujwz1y LZLk3I/JUCBulrHtnSeN0sd+cTyKtIuODkTYEC2Eo9cpLrpiiOvGLS56fu2umDaPxPUl 6AJ0s18SgGvwzmRfG8Hotttltc/JGuYVK8PMw/OpPBNO2uFtGFmlWleU3VPbqoqrVktJ cAVeQUIpBGusjJSiaeS7RNK0oqxTwGLhCommRG0g3P/Vc3YZHYNMFOTKXxvZ8OB2Z58p 0CcA== X-Gm-Message-State: ALoCoQkH0rfaO/lWEjIJL+FokWsErGh091xLQcZCAKdltskXnRLGFK2ZoD9aQ4eOa5CT+1OA5AhzaQIrA8zsUZbxP4ndY1RhQA== X-Received: by 10.60.233.132 with SMTP id tw4mr102922272oec.35.1452704190734; Wed, 13 Jan 2016 08:56:30 -0800 (PST) Received: from [10.8.1.100] (66-90-136-232.static.grandenetworks.net. [66.90.136.232]) by smtp.googlemail.com with ESMTPSA id a65sm948277oib.23.2016.01.13.08.56.29 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 13 Jan 2016 08:56:30 -0800 (PST) To: =?UTF-8?Q?Michael_Str=c3=b6der?= , ldapext References: <56965616.60507@stroeder.com> From: "Neil A. Wilson" X-Enigmail-Draft-Status: N1110 Organization: UnboundID Corp. Message-ID: <569681BD.20409@unboundid.com> Date: Wed, 13 Jan 2016 10:56:29 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <56965616.60507@stroeder.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms090405060203010202010302" Archived-At: Subject: Re: [ldapext] support for Assertion Control X-BeenThere: ldapext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: LDAP Extension Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2016 16:56:34 -0000 This is a cryptographically signed message in MIME format. --------------ms090405060203010202010302 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 01/13/2016 07:50 AM, Michael Str=F6der wrote: > HI! >=20 > I need to do some interop-testing for a work-around in case an Assertio= n Control > [1] is sent along with modify requests. I currently only know two LDAP = servers > supporting it: > OpenDJ > OpenLDAP >=20 > Any other LDAP servers supporting [1] which I should test with? > Do they have attribute 'entryDN' [2] in their entries and support for a= t least > EQUALITY matching? The UnboundID Directory Server supports both the assertion control and the entryDN operational attribute. And while not a "real" directory server intended for production use (it's more intended for testing purposes and simple interaction with small data sets), the in-memory directory server included as part of the UnboundID LDAP SDK for Java also supports both of these features. >=20 > Ciao, Michael. >=20 > [1] https://tools.ietf.org/html/rfc4528 > [2] https://tools.ietf.org/html/rfc5020 >=20 >=20 >=20 > _______________________________________________ > Ldapext mailing list > Ldapext@ietf.org > https://www.ietf.org/mailman/listinfo/ldapext >=20 --------------ms090405060203010202010302 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC ExgwggY0MIIEHKADAgECAgEeMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNVBAYTAklMMRYwFAYD VQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0 ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe Fw0wNzEwMjQyMTAxNTVaFw0xNzEwMjQyMTAxNTVaMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0 ZSBDbGllbnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCYPMzi3YGrEp pC4Tq5a+ijKDjKaIQZZVR63UbxIP6uq/I0fhCu+cQhoUfE6ERKKnu8zPf1Jwuk0tsvVCk6U9 b+0UjM0dLep3ZdE1gblK/1FwYT5Pipsu2yOMluLqwvsuz9/9f1+1PKHG/FaR/wpbfuIqu54q zHDYeqiUfsYzoVflR80DAC7hmJ+SmZnNTWyUGHJbBpA8Q89lGxahNvuryGaC/o2/ceD2uYDX 9U8Eg5DpIpGQdcbQeGarV04WgAUjjXX5r/2dabmtxWMZwhZna//jdiSyrrSMTGKkDiXm6/3/ 4ebfeZuCYKzN2P8O2F/Xe2AC/Y7zeEsnR7FOp+uXAgMBAAGjggGtMIIBqTAPBgNVHRMBAf8E BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUU3Ltkpzg2ssBXHx+ljVO8tS4UYIw HwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwZgYIKwYBBQUHAQEEWjBYMCcGCCsG AQUFBzABhhtodHRwOi8vb2NzcC5zdGFydHNzbC5jb20vY2EwLQYIKwYBBQUHMAKGIWh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tL3Nmc2NhLmNydDBbBgNVHR8EVDBSMCegJaAjhiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wu Y29tL3Nmc2NhLmNybDCBgAYDVR0gBHkwdzB1BgsrBgEEAYG1NwECATBmMC4GCCsGAQUFBwIB FiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRw Oi8vd3d3LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMA0GCSqGSIb3DQEBBQUAA4IC AQAKgwh9eKssBly4Y4xerhy5I3dNoXHYfYa8PlVLL/qtXnkFgdtY1o95CfegFJTwqBBmf8py TUnFsukDFUI22zF5bVHzuJ+GxhnSqN2sD1qetbYwBYK2iyYA5Pg7Er1A+hKMIzEzcduRkIMm CeUTyMyikfbUFvIBivtvkR8ZFAk22BZy+pJfAoedO61HTz4qSfQoCRcLN5A0t4DkuVhTMXIz uQ8CnykhExD6x4e6ebIbrjZLb7L+ocR0y4YjCl/Pd4MXU91y0vTipgr/O75CDUHDRHCCKBVm z/Rzkc/b970MEeHt5LC3NiWTgBSvrLEuVzBKM586YoRD9Dy3OHQgWI270g+5MYA8GfgI/EPT 5G7xPbCDz+zjdH89PeR3U4So4lSXur6H6vp+m9TQXPF3a0LwZrp8MQ+Z77U1uL7TelWO5lAp sbAonrqASfTpaprFVkL4nyGH+NHST2ZJPWIBk81i6Vw0ny0qZW2Niy/QvVNKbb43A43ny076 khXO7cNbBIRdJ/6qQNq9Bqb5C0Q5nEsFcj75oxQRqlKf6TcvGbjxkJh8BYtv9ePsXklAxtm8 J7GCUBthHSQgepbkOexhJ0wP8imUkyiPHQ0GvEnd83129fZjoEhdGwXV27ioRKbj/cIq7JRX un0NbeY+UdMYu9jGfIpDLtUUGSgsg2zMGs5R4jCCBjkwggUhoAMCAQICAw+clTANBgkqhkiG 9w0BAQsFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNV BAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0 Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBMB4XDTE1MTAwNTAw NDIzNVoXDTE2MTAwNTExMzgxMFowTjEiMCAGA1UEAwwZbmVpbC53aWxzb25AdW5ib3VuZGlk LmNvbTEoMCYGCSqGSIb3DQEJARYZbmVpbC53aWxzb25AdW5ib3VuZGlkLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3HUuPqB+BbQSS/WJgI9jSG5x/d7EWESVErBAv9 2ioje/kBvCDdjQQW8ZLKnJKdvcaXYPtmFQ21SenWMFViY/XTbxcbJ3jEjoXeC6i6rpNRLldT y8JFU/IrF0Rgkqoem96/GW6IcNejZBmf2P99uwOlMlembSEOByqEXu3eY8+vFAxZPGnSrTC8 gn0h3KEvsEhvHdkBjsM5RfiUuEN/xkcuBHAqex8kI7g12FCC1qmKNB71Jiti38mVAUFDAPkg bK0ZtdK1kIZEy+V72xXb8BC0UriqT82jicXdnENRg/qsj6OFyI/aP4yvLo4za2LoKaYorBD5 eqMS92v2D0hcqX8CAwEAAaOCAt8wggLbMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0GA1Ud JQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQUcZqlCKQ5NH+NDz0CdjLru8oq +u4wHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwJAYDVR0RBB0wG4EZbmVpbC53 aWxzb25AdW5ib3VuZGlkLmNvbTCCAUwGA1UdIASCAUMwggE/MIIBOwYLKwYBBAGBtTcBAgMw ggEqMC4GCCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMIH3 BggrBgEFBQcCAjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEB GoG+VGhpcyBjZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3Mg MSBWYWxpZGF0aW9uIHJlcXVpcmVtZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5LCBy ZWxpYW5jZSBvbmx5IGZvciB0aGUgaW50ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9m IHRoZSByZWx5aW5nIHBhcnR5IG9ibGlnYXRpb25zLjA2BgNVHR8ELzAtMCugKaAnhiVodHRw Oi8vY3JsLnN0YXJ0c3NsLmNvbS9jcnR1MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkG CCsGAQUFBzABhi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMS9jbGllbnQv Y2EwQgYIKwYBBQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFz czEuY2xpZW50LmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8w DQYJKoZIhvcNAQELBQADggEBAEEjLYaoeF/+X2kjbSUjQdVxxw+yIQoQOu/FjUuxTbwJTxbr qg80+Fnej2CntGDhF/FEy7ZqQsUPnOVBfOVJqJCWXzn+xCZuQJU8rCh19PCmao1nu2qqAJ5k Gvxvp35OdDCNH8Kf872XxclXZ9XbNDqrbU8EjPwT5TS4mogVftt9k9GWo5OmNu8OTsJcbZzp SnmFWAbdoWqlsVy/vCjdkyQtkn20bK1UBMHFEMUYwKSLTEojm6WMhXyuGTlj7YHMw9QDQMwD 0X1pmRe3t2YnatYlSUBaP/XDJTnc81qRG9G7SeR7bQofiwV0XPKHFDzz/q89fGp419IgsseS tAiBOUAwggafMIIEh6ADAgECAgE9MA0GCSqGSIb3DQEBCwUAMFMxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSwwKgYDVQQDEyNTdGFydENvbSBDZXJ0aWZpY2F0aW9u IEF1dGhvcml0eSBHMjAeFw0wNjA5MTcxOTQ2MzdaFw0zNjA5MTcxOTQ2MzdaMH0xCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9u IEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMGI2wm8bEZ8eJ+V e7UzkPJyYtbBNiAiJF7O6XfyQwqiBmSkzI42+DjmI/BubbE83XKjhRyh0z20MyvTL6/+6rBB WWe2xAZ9Cp50hdZ5TIA3et85BVJZ9/QbRkOk0oWF0sNx83ViNLosin8ej+7tNNARx5bNUj26 M9bdTd4LO0pLn8ImL/q1FhxyNXfKPF3myuEmixo2dlwB23QUJf7ttaCID914yi0fB5cwAS1y efpG1hMqqLmmq4NJHeXy793kAY4YCo9jUxaFYqkOGTrMtWamwmt0B+Qr4XY+tG3Y9kThc2If O8S+oFNWJWxRCfeqq8q/dv1tm/Od2789ZrwMVqqvmEiVOkvfp1hQ2Th1qVvqQwwC/5nr6GxN cFspZZzdql3MrwEx7Azr0o3o6px75m73J2YMGkjXbkLjP94hPnvhDXD7Y6qobBpUtFwlesmi yYsWprssfhdeBU1YbhIdAe4SEA3GMn8Y//z0+s1ukeg2Sb4aSGmLwpZNGhKyaRfBCpDW+nki SL+6e2n4cMf6ejfY2A3Sdk9X/5C345HS3e/CYLdnOt3+qpzw1It/ciLOxp+XtviviqAQqNn7 GMa2tVxSPIm2GSpzAQoPA7MSYPJ6L4Hbo27/JjCX9YvdiVe2rT2zryvFt3YC8KXWK5qGFCpy 9uMzjF0JSxPfu4x0E1JLAgMBAAGjggFSMIIBTjASBgNVHRMBAf8ECDAGAQH/AgECMA4GA1Ud DwEB/wQEAwIBBjAdBgNVHQ4EFgQUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwHwYDVR0jBBgwFoAU S8W0QGutHLOlHGVuRjaJhwUMDrYwbwYIKwYBBQUHAQEEYzBhMCoGCCsGAQUFBzABhh5odHRw Oi8vb2NzcC5zdGFydHNzbC5jb20vY2EtZzIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuc3Rh cnRzc2wuY29tL2NlcnRzL2NhLWcyLmNlcjAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3Js LnN0YXJ0c3NsLmNvbS9jYS1nMi5jcmwwQwYDVR0gBDwwOjA4BgRVHSAAMDAwLgYIKwYBBQUH AgEWImh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwDQYJKoZIhvcNAQELBQAD ggIBADOeU8uuVCwCibCVVgaCtEd5cJdIDwrQTTdrVV8ITy6GBFmDtwrc3agSiMEyh4vhWos5 66px3fP7FKrzm7GfM9z5wAFuJFviC7JC8r92rNaOOYNwRhWTSjMKpaIGT55zhbgeaDKRAd2+ Fj7zOAlIJB1+oaSEBRzX9T+ITmMAi9zczvucV4nooh7dVqcQEOy0XOVCElKjylLOEvykRgFa m50dqdsWiBkMnAb4YLqkTw9KcgQAeYspfChF5KvrGgelQOsx3AKG2HTSBFgLPjkA6uRPKUis iXwSXPNdu2MGsIUwohy2ZzFcTSxVzZhP04IJQv6bv8so811eikZt7wNYvoeYVTAYvB23y3lb NdVLFLfEADsXoMzPTnA1Prwl91/wGUnJDcdGJO/9PbQFs1KpJWw5aykjK5o+EtHX9K/abg96 sHmUlgDr9T94VnWi3yB7ndc4ig98P30sb1J53icXzbaj90dJcBnxf6ii2gFfm2ID72F8ap9X 8m6xhy/6FztKpF3NhNtyzqyL4SFGzWEpYuK582hAwc/6Vyik5SW3cin+npYNk0k4mrjouC8M WPtxD9ZKQy7MDl+no0++NCdWaiONROxp2lE3iFudqOs7uuMmE4kE3eRx3jXNrtlD2WHjb3Lz LlNslZgngRuUfiuJBUoRCDKDiaqYI6WXIxhLsIYZMYID7TCCA+kCAQEwgZQwgYwxCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1h cnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDD5yVMA0GCWCGSAFlAwQCAQUAoIICKTAYBgkq hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjAxMTMxNjU2MjlaMC8G CSqGSIb3DQEJBDEiBCBQR+F2boPXH/QaSLseNzfw4gru2uY0YSuxERAFR7kf0TBsBgkqhkiG 9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZI hvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGlBgkr BgEEAYI3EAQxgZcwgZQwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQu MSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQD Ey9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDD5yV MIGnBgsqhkiG9w0BCRACCzGBl6CBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcx ODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50 IENBAgMPnJUwDQYJKoZIhvcNAQEBBQAEggEApCfcCiVGqsmLJf1WiumeDefBl0q+lDQdUYxu NVfIQ66ZRg+4id5qTNDJz731IgcL45D0ZX9pyIwy0RTIc/Oe35aEe1yJ87FwKRs4UkDw+HMh 3Dp83d3EfxousTdEafasQL+kd6qwQkymf3ALfUk6myL06tEIPjGK7M6fh+KdbX9IIbn2ytTj bK8OG1v37y5nzIJNo9VkSe8gmaGutCPo8VLxaqng6qmJortz67RU7aVo/OLo/ZV+JS8R5FBg t8ljagKgW4iuqLQYUAnmwzTSiwDVeEgeH9CBwFkRiUMLJkZc7FhMkAEFcm4hGrAIqCASRRpP VtcLCAPASLS/HlaCqAAAAAAAAA== --------------ms090405060203010202010302--