From netconf-bounces@ietf.org Mon Dec 1 04:03:33 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F8063A6A6E; Mon, 1 Dec 2008 04:03:33 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5BF073A6A6E for ; Mon, 1 Dec 2008 04:03:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.567 X-Spam-Level: X-Spam-Status: No, score=-2.567 tagged_above=-999 required=5 tests=[AWL=0.032, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JLG1fBSpJ+oZ for ; Mon, 1 Dec 2008 04:03:31 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 5596A3A63EC for ; Mon, 1 Dec 2008 04:03:30 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1C3JVH010370; Mon, 1 Dec 2008 12:03:21 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 12:03:19 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 12:03:18 -0000 (GMT) Message-ID: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com> In-Reply-To: <200812010213.mB12D2i4087111@idle.juniper.net> References: <200812010213.mB12D2i4087111@idle.juniper.net> Date: Mon, 1 Dec 2008 12:03:18 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Phil Shafer" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 12:03:19.0210 (UTC) FILETIME=[CCCAE8A0:01C953AC] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 12:03:25 +0000 (GMT) Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > "Tomasz Mikolajczyk" writes: >>However, in spite of this there is also a possibility that a wrong value >>may be passed as an "xml-name", but I think this case should be correctly >>handled by the reader of such data. > > If we speak in xml and you send me bad xml, the correct thing would > be to flag it as bad xml and either let you know or kill the session > and let someone else know (syslog). > > Thanks, > Phil IMO, killing the session is not a good way to react on invalid XML. Client may send valid XML, for example: and as a result, if XML response has invalid structure, a session is closed. It may be a little surprise for the client. Regards, Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 04:03:33 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F8063A6A6E; Mon, 1 Dec 2008 04:03:33 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5BF073A6A6E for ; Mon, 1 Dec 2008 04:03:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.567 X-Spam-Level: X-Spam-Status: No, score=-2.567 tagged_above=-999 required=5 tests=[AWL=0.032, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JLG1fBSpJ+oZ for ; Mon, 1 Dec 2008 04:03:31 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 5596A3A63EC for ; Mon, 1 Dec 2008 04:03:30 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1C3JVH010370; Mon, 1 Dec 2008 12:03:21 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 12:03:19 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 12:03:18 -0000 (GMT) Message-ID: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com> In-Reply-To: <200812010213.mB12D2i4087111@idle.juniper.net> References: <200812010213.mB12D2i4087111@idle.juniper.net> Date: Mon, 1 Dec 2008 12:03:18 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Phil Shafer" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 12:03:19.0210 (UTC) FILETIME=[CCCAE8A0:01C953AC] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 12:03:25 +0000 (GMT) Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > "Tomasz Mikolajczyk" writes: >>However, in spite of this there is also a possibility that a wrong value >>may be passed as an "xml-name", but I think this case should be correctly >>handled by the reader of such data. > > If we speak in xml and you send me bad xml, the correct thing would > be to flag it as bad xml and either let you know or kill the session > and let someone else know (syslog). > > Thanks, > Phil IMO, killing the session is not a good way to react on invalid XML. Client may send valid XML, for example: and as a result, if XML response has invalid structure, a session is closed. It may be a little surprise for the client. Regards, Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 04:10:59 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ED9623A6891; Mon, 1 Dec 2008 04:10:58 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C17733A6891 for ; Mon, 1 Dec 2008 04:10:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.574 X-Spam-Level: X-Spam-Status: No, score=-2.574 tagged_above=-999 required=5 tests=[AWL=0.026, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q+iejP3RzfKJ for ; Mon, 1 Dec 2008 04:10:57 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id ABAD93A6A89 for ; Mon, 1 Dec 2008 04:10:56 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1CAnhg011739; Mon, 1 Dec 2008 12:10:50 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 12:10:49 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 12:10:49 -0000 (GMT) Message-ID: <13772.87.99.34.137.1228133449.squirrel@webmail.s3group.com> In-Reply-To: <20081201.082647.53832166.mbj@tail-f.com> References: <492EDB92.9020007@netconfcentral.com> <20081127.203623.123935533.mbj@tail-f.com> <492F0832.4020409@netconfcentral.com> <20081201.082647.53832166.mbj@tail-f.com> Date: Mon, 1 Dec 2008 12:10:49 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Martin Bjorklund" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 12:10:49.0956 (UTC) FILETIME=[D9754A40:01C953AD] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 12:10:51 +0000 (GMT) Cc: netconf@ietf.org Subject: Re: [Netconf] test-option in edit-config operation X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Andy Bierman wrote: >> I changed my mind about removing this knob. >> I forgot about test-only. The default should >> be set, since that is the right thing for candidate, >> and the same as test-then-set for running. > > Maybe the default should have been 'set', for consistency reasons. > > But I don't think that this is a bug, so we should not change it in > 4741bis. > Each specification should be very consistent and it's a good time for improvements as the 4741bis is on the desk. > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 04:10:59 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ED9623A6891; Mon, 1 Dec 2008 04:10:58 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C17733A6891 for ; Mon, 1 Dec 2008 04:10:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.574 X-Spam-Level: X-Spam-Status: No, score=-2.574 tagged_above=-999 required=5 tests=[AWL=0.026, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q+iejP3RzfKJ for ; Mon, 1 Dec 2008 04:10:57 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id ABAD93A6A89 for ; Mon, 1 Dec 2008 04:10:56 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1CAnhg011739; Mon, 1 Dec 2008 12:10:50 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 12:10:49 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 12:10:49 -0000 (GMT) Message-ID: <13772.87.99.34.137.1228133449.squirrel@webmail.s3group.com> In-Reply-To: <20081201.082647.53832166.mbj@tail-f.com> References: <492EDB92.9020007@netconfcentral.com> <20081127.203623.123935533.mbj@tail-f.com> <492F0832.4020409@netconfcentral.com> <20081201.082647.53832166.mbj@tail-f.com> Date: Mon, 1 Dec 2008 12:10:49 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Martin Bjorklund" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 12:10:49.0956 (UTC) FILETIME=[D9754A40:01C953AD] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 12:10:51 +0000 (GMT) Cc: netconf@ietf.org Subject: Re: [Netconf] test-option in edit-config operation X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Andy Bierman wrote: >> I changed my mind about removing this knob. >> I forgot about test-only. The default should >> be set, since that is the right thing for candidate, >> and the same as test-then-set for running. > > Maybe the default should have been 'set', for consistency reasons. > > But I don't think that this is a bug, so we should not change it in > 4741bis. > Each specification should be very consistent and it's a good time for improvements as the 4741bis is on the desk. > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 05:35:26 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D73AF3A6891; Mon, 1 Dec 2008 05:35:26 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 300D93A6891 for ; Mon, 1 Dec 2008 05:35:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l3OubW7Oqnre for ; Mon, 1 Dec 2008 05:35:25 -0800 (PST) Received: from exprod7og110.obsmtp.com (exprod7og110.obsmtp.com [64.18.2.173]) by core3.amsl.com (Postfix) with ESMTP id 2372A3A6847 for ; Mon, 1 Dec 2008 05:35:25 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob110.postini.com ([64.18.6.12]) with SMTP ID DSNKSTPoFlgV5HWL/zrzblZGwzfEbjEHIjcw@postini.com; Mon, 01 Dec 2008 05:35:22 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Mon, 1 Dec 2008 05:29:09 -0800 Received: from p-emlb02-sac.jnpr.net ([66.129.254.47]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 05:29:09 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb02-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 05:29:08 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 05:29:08 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB1DT8M54764; Mon, 1 Dec 2008 05:29:08 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB1DNt6l090790; Mon, 1 Dec 2008 13:23:56 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812011323.mB1DNt6l090790@idle.juniper.net> To: "Tomasz Mikolajczyk" In-Reply-To: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com> Date: Mon, 1 Dec 2008 08:23:55 -0500 From: Phil Shafer X-OriginalArrivalTime: 01 Dec 2008 13:29:08.0703 (UTC) FILETIME=[CA212EF0:01C953B8] MIME-Version: 1.0 Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org "Tomasz Mikolajczyk" writes: >and as a result, if XML response has invalid structure, a session is >closed. It may be a little surprise for the client. If a client has a protocol issue, one would expect the session to be terminated. If a client has a content issue, one would expect to receive an error. The question is: which case does invalid XML belong in. Since the protocol is encoded in XML, I see invalid XML as a serious client side issue from which the server cannot reasonable recover. So I would consider this a protocol error and terminate the session. This allows the application developer to notice the error and fix it, without expecting the server to divine the client's intent. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 05:35:26 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D73AF3A6891; Mon, 1 Dec 2008 05:35:26 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 300D93A6891 for ; Mon, 1 Dec 2008 05:35:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l3OubW7Oqnre for ; Mon, 1 Dec 2008 05:35:25 -0800 (PST) Received: from exprod7og110.obsmtp.com (exprod7og110.obsmtp.com [64.18.2.173]) by core3.amsl.com (Postfix) with ESMTP id 2372A3A6847 for ; Mon, 1 Dec 2008 05:35:25 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob110.postini.com ([64.18.6.12]) with SMTP ID DSNKSTPoFlgV5HWL/zrzblZGwzfEbjEHIjcw@postini.com; Mon, 01 Dec 2008 05:35:22 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Mon, 1 Dec 2008 05:29:09 -0800 Received: from p-emlb02-sac.jnpr.net ([66.129.254.47]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 05:29:09 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb02-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 05:29:08 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 05:29:08 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB1DT8M54764; Mon, 1 Dec 2008 05:29:08 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB1DNt6l090790; Mon, 1 Dec 2008 13:23:56 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812011323.mB1DNt6l090790@idle.juniper.net> To: "Tomasz Mikolajczyk" In-Reply-To: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com> Date: Mon, 1 Dec 2008 08:23:55 -0500 From: Phil Shafer X-OriginalArrivalTime: 01 Dec 2008 13:29:08.0703 (UTC) FILETIME=[CA212EF0:01C953B8] MIME-Version: 1.0 Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org "Tomasz Mikolajczyk" writes: >and as a result, if XML response has invalid structure, a session is >closed. It may be a little surprise for the client. If a client has a protocol issue, one would expect the session to be terminated. If a client has a content issue, one would expect to receive an error. The question is: which case does invalid XML belong in. Since the protocol is encoded in XML, I see invalid XML as a serious client side issue from which the server cannot reasonable recover. So I would consider this a protocol error and terminate the session. This allows the application developer to notice the error and fix it, without expecting the server to divine the client's intent. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 06:06:58 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 819C63A69F8; Mon, 1 Dec 2008 06:06:58 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 39E583A69F8 for ; Mon, 1 Dec 2008 06:06:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.45 X-Spam-Level: X-Spam-Status: No, score=-2.45 tagged_above=-999 required=5 tests=[AWL=-0.106, BAYES_00=-2.599, FU_ENDS_2_WRDS=0.255] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XyvGcTjl6iil for ; Mon, 1 Dec 2008 06:06:57 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 0E3E93A689F for ; Mon, 1 Dec 2008 06:06:56 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1E6ncg004828; Mon, 1 Dec 2008 14:06:49 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 14:06:49 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 14:06:48 -0000 (GMT) Message-ID: <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> In-Reply-To: <20081201.083617.60857508.mbj@tail-f.com> References: <492FAD64.6010600@s3group.com> <20081201.083617.60857508.mbj@tail-f.com> Date: Mon, 1 Dec 2008 14:06:48 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Martin Bjorklund" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 14:06:49.0150 (UTC) FILETIME=[0D7605E0:01C953BE] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 14:06:51 +0000 (GMT) Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> Hi, >> >> I read at http://www.netconfcentral.com/netconf_docs about candidate >> configuration that: > > [...] > >> There is also written that: >> "Agent platforms which support the :candidate capability usually do not >> also support the :writable-running capability, since mixing direct >> edits to would defeat the purpose of using this scratchpad >> database to collect and validate changes before applying them." > > I don't know about others, but I do know that many (most?) of our > customers have both :candidate and :writable-running. By having both, > you give the choice to the client application - either make sure > you're alone and work with the candidate or edit running directly. > Some changes might be easier to just edit to running. I absolutely agree. > >> Another point is that RFC 4741 says that all the changes in the >> candidate configuration have to be committed, otherwise running must >> remain unchanged. What if during commit a connection with the device >> would be broken, for example somebody cut the cable? How are we going to >> tell the device that a kind of rollback have to be done? > > 4741 specifies what the server MUST do. *How* it is done is up to the > implementation. Yes, but generally management layer cannot support transactions on its own. In other words it cannot be said that a management layer supports transaction unless managed device does it also, or is able to deal with kind of situations described above. So we have to understand clearly what support for :candidate or :rollback-on-error capabilities means in reality, before we announce it. > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 06:06:58 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 819C63A69F8; Mon, 1 Dec 2008 06:06:58 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 39E583A69F8 for ; Mon, 1 Dec 2008 06:06:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.45 X-Spam-Level: X-Spam-Status: No, score=-2.45 tagged_above=-999 required=5 tests=[AWL=-0.106, BAYES_00=-2.599, FU_ENDS_2_WRDS=0.255] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XyvGcTjl6iil for ; Mon, 1 Dec 2008 06:06:57 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 0E3E93A689F for ; Mon, 1 Dec 2008 06:06:56 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1E6ncg004828; Mon, 1 Dec 2008 14:06:49 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 14:06:49 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 14:06:48 -0000 (GMT) Message-ID: <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> In-Reply-To: <20081201.083617.60857508.mbj@tail-f.com> References: <492FAD64.6010600@s3group.com> <20081201.083617.60857508.mbj@tail-f.com> Date: Mon, 1 Dec 2008 14:06:48 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Martin Bjorklund" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 14:06:49.0150 (UTC) FILETIME=[0D7605E0:01C953BE] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 14:06:51 +0000 (GMT) Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> Hi, >> >> I read at http://www.netconfcentral.com/netconf_docs about candidate >> configuration that: > > [...] > >> There is also written that: >> "Agent platforms which support the :candidate capability usually do not >> also support the :writable-running capability, since mixing direct >> edits to would defeat the purpose of using this scratchpad >> database to collect and validate changes before applying them." > > I don't know about others, but I do know that many (most?) of our > customers have both :candidate and :writable-running. By having both, > you give the choice to the client application - either make sure > you're alone and work with the candidate or edit running directly. > Some changes might be easier to just edit to running. I absolutely agree. > >> Another point is that RFC 4741 says that all the changes in the >> candidate configuration have to be committed, otherwise running must >> remain unchanged. What if during commit a connection with the device >> would be broken, for example somebody cut the cable? How are we going to >> tell the device that a kind of rollback have to be done? > > 4741 specifies what the server MUST do. *How* it is done is up to the > implementation. Yes, but generally management layer cannot support transactions on its own. In other words it cannot be said that a management layer supports transaction unless managed device does it also, or is able to deal with kind of situations described above. So we have to understand clearly what support for :candidate or :rollback-on-error capabilities means in reality, before we announce it. > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 06:33:40 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B95923A684B; Mon, 1 Dec 2008 06:33:40 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 593513A67F6 for ; Mon, 1 Dec 2008 06:33:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.135 X-Spam-Level: X-Spam-Status: No, score=-2.135 tagged_above=-999 required=5 tests=[AWL=-0.391, BAYES_00=-2.599, FU_ENDS_2_WRDS=0.255, J_CHICKENPOX_64=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v0sNlyS6PlUJ for ; Mon, 1 Dec 2008 06:33:38 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id C4EFC3A684B for ; Mon, 1 Dec 2008 06:33:37 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1EXU61010407; Mon, 1 Dec 2008 14:33:30 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 14:33:30 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 14:33:30 -0000 (GMT) Message-ID: <29009.87.99.34.137.1228142010.squirrel@webmail.s3group.com> In-Reply-To: <493167C3.2060502@netconfcentral.com> References: <492FAD64.6010600@s3group.com> <49304090.3030303@netconfcentral.com> <3861.87.99.34.137.1227956239.squirrel@webmail.s3group.com> <493167C3.2060502@netconfcentral.com> Date: Mon, 1 Dec 2008 14:33:30 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Andy Bierman" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 14:33:30.0847 (UTC) FILETIME=[C82596F0:01C953C1] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 14:33:32 +0000 (GMT) Cc: NETCONF Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy Bierman wrote: > Tomasz Mikolajczyk wrote: >> Andy Bierman wrote: >>> Tomasz Mikolajczyk wrote: >>>> Hi, >>>> I read at http://www.netconfcentral.com/netconf_docs about candidate >> configuration that: >>>> "When ready, the manager can use the operation to activate >> the >>>> changes embodied in the database, and make them part of >> the >>>> configuration. This also clears out the >> database and leaves it ready for the next use." >>>> Could you point me to a relevant section in RFC 4741 that candidate >>>> has >> to be cleared after commit? >>> I will fix that text. >>> I really meant to say that the 'lockability' of the >>> candidate is reestablished. As you know, a lock operation >>> must fail if the candidate has any changes in it at all. >> >> Yes, I know. Section 7.5 says that the lock must fail if "The target >> configuration is , it has already been modified, and these >> changes have not been committed or rolled back." >> >>> Once a commit or discard-changes is done, the contents >>> of candidate are conceptually equal to the running config. >>> I will call this the 'lock-available' state instead of 'cleared', which >> implies 'emptied'. >> >> What does it mean "conceptually equal" to the running config? Could you >> explain more? >> > > has the same config=true nodes You cannot be sure about that. What if one device's parameters depends on another. In this case running may not be equal to candidate. >>>> There is also written that: >>>> "Agent platforms which support the :candidate capability usually do >>>> not >> also support the :writable-running capability, since mixing direct >> edits to would defeat the purpose of using this scratchpad >> database to collect and validate changes before applying them." Let's >> imagine the following situation. There is a simple device with >> configurable interfaces. The interfaces may be added/removed or their >> parameters can be changed (ipaddress/port/bandwidth/description etc). >> At >>>> the moment there is 10000 interfaces configured in the device with ids >> 0-9999 and an administrator have to delete instance first (id=0) and >> last (9999). How it should be performed according to the above >>>> quotations? I see it like this: >>>> - lock candidate >>>> - lock running >>>> - copy running to candidate (whole 10000 instances!) >>>> - delete instances 0 and 9999 in the candidate >>>> - commit (copying the whole 9998 instances) >>>> - unlock running >>>> - unlock candidate >>>> Is it true of am I wrong? >>> >>> This is an implementation detail. >>> I suggest keeping track of what actually changes in >>> the candidate, and when you apply the commit, >>> process only those 'dirty' nodes. >> >> Consider the following scenario on a newly started device >> (:writable-running capability is not supported): >> 1) Session A: works on candidate configuration and creates 10 interfaces >> (0-9) >> 2) Session A: executes commit operation >> 3) Session A: after commit both configuration are "conceptually equal". >> At >> least it means that running configuration has 10 interfaces configured >> 4) Session A: executes close-session >> 5) Session B: Starts. Its purpose is to remove interface 0 from the >> running >> 6) Session B: executes on running and candidate >> 7) Session B: executes on a candidate and as a result the >> instances 0-9 appear >> 8) in the meantime someone came to the managed device and took off one >> of >> the interface card, let's assume this one corresponding to the interface >> 9 >> of the running configuration >> 9) Session B: removes an instance 0 from the candidate >> 10) Session B: just to check one more time executes on >> candidate and as a result sees interfaces 1-9 >> 11) Session B: executes operation >> 12) Session B: executes running and candidate >> >> If commit operation process only 'dirty' nodes that means that after the >> , running configuration does not have interface 0 and 9, >> although >> candidate configuration before commit operation showed the instance 9. >> > > There is a difference between the config data for an > interface and the hardware card containing the interface. > This problem is not NETCONF-specific at all. Whether > the config data for the missing interface disappears > is an implementation issue at this time. > > >>> For YANG commit validation, with arbitrary XPath evaluation >>> (not the mythical hard-coded implementation described >>> in the draft), you are probably going to want to >>> re-run all the XPath tests on the full candidate config >>> before the commit. >>> >>> Of course candidate doubles the memory required to store >>> the config database. That's why it's an optional capability. >>> In order to properly perform an edit-config against the >>> running config in a YANG database, you probably need >>> to do a temp/partial copy of the running config >>> to run all the XPath and unique tests. >>> >>> It may be hard to implement, but the agent is not >>> allowed to permit changes to the running configuration >>> which leave it in an invalid state. Period. >>> That is a fundamental principle of the running config. >>> YANG referential integrity tests raise the bar quite a bit, >>> but that's by design ;-) >>> >>> >>>> Another point is that RFC 4741 says that all the changes in the >> candidate configuration have to be committed, otherwise running must >> remain unchanged. What if during commit a connection with the device >> would be broken, for example somebody cut the cable? How are we going >> to >>>> tell the device that a kind of rollback have to be done? >>> You mean the session is hung? >>> If the TCP connection doesn't break, then >>> the operator is going to need to start a new session >>> and kill-session the old one, caused the discard-changes >>> operation to be executed in the old session before it terminates. >> >> I mean a connection between a NETCONF server and a managed device has >> been >> broken. Broken connection between the server and managed device does not >> mean broken session between your NETCONF client and server. How >> discard-changes would be invoked if there is no connection anymore with >> the device? It means that device probably is in the invalid state >> because >> not all changes were committed before the connection has been broken. >> NETCONF cannot fake transactions on its own if the device does not >> support >> them. >> > > According to the protocol, the NETCONF server is the managed device. Where is that written? > Any back-end protocol you have is just an implementation detail > to NETCONF. But if you can no longer execute any RPC operations > except , you could drop the session or just > return operation-failed for every request. Yes, of course. But it must the device must be reverted to the state before commit on its own. So supporting :candidate or :rollback-on-error in any types of such management layers forces that device must be transactional on its own. > NETCONF has no proxy and no sub-agent protocol. By design. > It's complicated enough to do CM without it. > >>>> Tomasz >>> >>> Andy >>> >> >> Tomasz >> >> > > > Andy > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 06:33:40 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B95923A684B; Mon, 1 Dec 2008 06:33:40 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 593513A67F6 for ; Mon, 1 Dec 2008 06:33:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.135 X-Spam-Level: X-Spam-Status: No, score=-2.135 tagged_above=-999 required=5 tests=[AWL=-0.391, BAYES_00=-2.599, FU_ENDS_2_WRDS=0.255, J_CHICKENPOX_64=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v0sNlyS6PlUJ for ; Mon, 1 Dec 2008 06:33:38 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id C4EFC3A684B for ; Mon, 1 Dec 2008 06:33:37 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1EXU61010407; Mon, 1 Dec 2008 14:33:30 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 14:33:30 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 14:33:30 -0000 (GMT) Message-ID: <29009.87.99.34.137.1228142010.squirrel@webmail.s3group.com> In-Reply-To: <493167C3.2060502@netconfcentral.com> References: <492FAD64.6010600@s3group.com> <49304090.3030303@netconfcentral.com> <3861.87.99.34.137.1227956239.squirrel@webmail.s3group.com> <493167C3.2060502@netconfcentral.com> Date: Mon, 1 Dec 2008 14:33:30 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Andy Bierman" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 14:33:30.0847 (UTC) FILETIME=[C82596F0:01C953C1] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 14:33:32 +0000 (GMT) Cc: NETCONF Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy Bierman wrote: > Tomasz Mikolajczyk wrote: >> Andy Bierman wrote: >>> Tomasz Mikolajczyk wrote: >>>> Hi, >>>> I read at http://www.netconfcentral.com/netconf_docs about candidate >> configuration that: >>>> "When ready, the manager can use the operation to activate >> the >>>> changes embodied in the database, and make them part of >> the >>>> configuration. This also clears out the >> database and leaves it ready for the next use." >>>> Could you point me to a relevant section in RFC 4741 that candidate >>>> has >> to be cleared after commit? >>> I will fix that text. >>> I really meant to say that the 'lockability' of the >>> candidate is reestablished. As you know, a lock operation >>> must fail if the candidate has any changes in it at all. >> >> Yes, I know. Section 7.5 says that the lock must fail if "The target >> configuration is , it has already been modified, and these >> changes have not been committed or rolled back." >> >>> Once a commit or discard-changes is done, the contents >>> of candidate are conceptually equal to the running config. >>> I will call this the 'lock-available' state instead of 'cleared', which >> implies 'emptied'. >> >> What does it mean "conceptually equal" to the running config? Could you >> explain more? >> > > has the same config=true nodes You cannot be sure about that. What if one device's parameters depends on another. In this case running may not be equal to candidate. >>>> There is also written that: >>>> "Agent platforms which support the :candidate capability usually do >>>> not >> also support the :writable-running capability, since mixing direct >> edits to would defeat the purpose of using this scratchpad >> database to collect and validate changes before applying them." Let's >> imagine the following situation. There is a simple device with >> configurable interfaces. The interfaces may be added/removed or their >> parameters can be changed (ipaddress/port/bandwidth/description etc). >> At >>>> the moment there is 10000 interfaces configured in the device with ids >> 0-9999 and an administrator have to delete instance first (id=0) and >> last (9999). How it should be performed according to the above >>>> quotations? I see it like this: >>>> - lock candidate >>>> - lock running >>>> - copy running to candidate (whole 10000 instances!) >>>> - delete instances 0 and 9999 in the candidate >>>> - commit (copying the whole 9998 instances) >>>> - unlock running >>>> - unlock candidate >>>> Is it true of am I wrong? >>> >>> This is an implementation detail. >>> I suggest keeping track of what actually changes in >>> the candidate, and when you apply the commit, >>> process only those 'dirty' nodes. >> >> Consider the following scenario on a newly started device >> (:writable-running capability is not supported): >> 1) Session A: works on candidate configuration and creates 10 interfaces >> (0-9) >> 2) Session A: executes commit operation >> 3) Session A: after commit both configuration are "conceptually equal". >> At >> least it means that running configuration has 10 interfaces configured >> 4) Session A: executes close-session >> 5) Session B: Starts. Its purpose is to remove interface 0 from the >> running >> 6) Session B: executes on running and candidate >> 7) Session B: executes on a candidate and as a result the >> instances 0-9 appear >> 8) in the meantime someone came to the managed device and took off one >> of >> the interface card, let's assume this one corresponding to the interface >> 9 >> of the running configuration >> 9) Session B: removes an instance 0 from the candidate >> 10) Session B: just to check one more time executes on >> candidate and as a result sees interfaces 1-9 >> 11) Session B: executes operation >> 12) Session B: executes running and candidate >> >> If commit operation process only 'dirty' nodes that means that after the >> , running configuration does not have interface 0 and 9, >> although >> candidate configuration before commit operation showed the instance 9. >> > > There is a difference between the config data for an > interface and the hardware card containing the interface. > This problem is not NETCONF-specific at all. Whether > the config data for the missing interface disappears > is an implementation issue at this time. > > >>> For YANG commit validation, with arbitrary XPath evaluation >>> (not the mythical hard-coded implementation described >>> in the draft), you are probably going to want to >>> re-run all the XPath tests on the full candidate config >>> before the commit. >>> >>> Of course candidate doubles the memory required to store >>> the config database. That's why it's an optional capability. >>> In order to properly perform an edit-config against the >>> running config in a YANG database, you probably need >>> to do a temp/partial copy of the running config >>> to run all the XPath and unique tests. >>> >>> It may be hard to implement, but the agent is not >>> allowed to permit changes to the running configuration >>> which leave it in an invalid state. Period. >>> That is a fundamental principle of the running config. >>> YANG referential integrity tests raise the bar quite a bit, >>> but that's by design ;-) >>> >>> >>>> Another point is that RFC 4741 says that all the changes in the >> candidate configuration have to be committed, otherwise running must >> remain unchanged. What if during commit a connection with the device >> would be broken, for example somebody cut the cable? How are we going >> to >>>> tell the device that a kind of rollback have to be done? >>> You mean the session is hung? >>> If the TCP connection doesn't break, then >>> the operator is going to need to start a new session >>> and kill-session the old one, caused the discard-changes >>> operation to be executed in the old session before it terminates. >> >> I mean a connection between a NETCONF server and a managed device has >> been >> broken. Broken connection between the server and managed device does not >> mean broken session between your NETCONF client and server. How >> discard-changes would be invoked if there is no connection anymore with >> the device? It means that device probably is in the invalid state >> because >> not all changes were committed before the connection has been broken. >> NETCONF cannot fake transactions on its own if the device does not >> support >> them. >> > > According to the protocol, the NETCONF server is the managed device. Where is that written? > Any back-end protocol you have is just an implementation detail > to NETCONF. But if you can no longer execute any RPC operations > except , you could drop the session or just > return operation-failed for every request. Yes, of course. But it must the device must be reverted to the state before commit on its own. So supporting :candidate or :rollback-on-error in any types of such management layers forces that device must be transactional on its own. > NETCONF has no proxy and no sub-agent protocol. By design. > It's complicated enough to do CM without it. > >>>> Tomasz >>> >>> Andy >>> >> >> Tomasz >> >> > > > Andy > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 07:29:16 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 00E083A6A40; Mon, 1 Dec 2008 07:29:16 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CF8B93A6A40 for ; Mon, 1 Dec 2008 07:29:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.514 X-Spam-Level: X-Spam-Status: No, score=-2.514 tagged_above=-999 required=5 tests=[AWL=0.085, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A+KWGgwBF0aR for ; Mon, 1 Dec 2008 07:29:14 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id AAB413A690A for ; Mon, 1 Dec 2008 07:29:13 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1FT6ih024391 for ; Mon, 1 Dec 2008 15:29:06 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 15:29:06 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 15:29:06 -0000 (GMT) Message-ID: <25195.87.99.34.137.1228145346.squirrel@webmail.s3group.com> Date: Mon, 1 Dec 2008 15:29:06 -0000 (GMT) From: "Tomasz Mikolajczyk" To: netconf@ietf.org User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 15:29:06.0205 (UTC) FILETIME=[8C2CD4D0:01C953C9] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 15:29:07 +0000 (GMT) Subject: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org The section 8.3.1 in RFC 4741 says: "The candidate configuration may be shared among multiple sessions." and the section 8.3.5.2 says: " When a client fails with outstanding changes to the candidate configuration, recovery can be difficult. To facilitate easy recovery, any outstanding changes are discarded when the lock is released, whether explicitly with the operation or implicitly from session failure." Even though candidate may be shared, it's impossible that a session A prepares a part of candidate configuration, taking advantage of the locking mechanism, and later releases the lock (no commit) and shares result's of its work with a session B that may want to complete the candidate and perform . According to the RFC, as the result of the operation performed by session A, any outstanding changes must be discarded when the lock is released. IMO, it's a serious limitation. Another point, what does it mean "discarded? 1) the state of the must be the same as before 2) resetting the candidate configuration with the content of the running configuration (like in operation) If the 2nd is true, that means that just only and operations on an empty candidate configuration, cause that after all the candidate's content magically changes. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 07:29:16 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 00E083A6A40; Mon, 1 Dec 2008 07:29:16 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CF8B93A6A40 for ; Mon, 1 Dec 2008 07:29:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.514 X-Spam-Level: X-Spam-Status: No, score=-2.514 tagged_above=-999 required=5 tests=[AWL=0.085, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A+KWGgwBF0aR for ; Mon, 1 Dec 2008 07:29:14 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id AAB413A690A for ; Mon, 1 Dec 2008 07:29:13 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1FT6ih024391 for ; Mon, 1 Dec 2008 15:29:06 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 15:29:06 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 15:29:06 -0000 (GMT) Message-ID: <25195.87.99.34.137.1228145346.squirrel@webmail.s3group.com> Date: Mon, 1 Dec 2008 15:29:06 -0000 (GMT) From: "Tomasz Mikolajczyk" To: netconf@ietf.org User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 15:29:06.0205 (UTC) FILETIME=[8C2CD4D0:01C953C9] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 15:29:07 +0000 (GMT) Subject: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org The section 8.3.1 in RFC 4741 says: "The candidate configuration may be shared among multiple sessions." and the section 8.3.5.2 says: " When a client fails with outstanding changes to the candidate configuration, recovery can be difficult. To facilitate easy recovery, any outstanding changes are discarded when the lock is released, whether explicitly with the operation or implicitly from session failure." Even though candidate may be shared, it's impossible that a session A prepares a part of candidate configuration, taking advantage of the locking mechanism, and later releases the lock (no commit) and shares result's of its work with a session B that may want to complete the candidate and perform . According to the RFC, as the result of the operation performed by session A, any outstanding changes must be discarded when the lock is released. IMO, it's a serious limitation. Another point, what does it mean "discarded? 1) the state of the must be the same as before 2) resetting the candidate configuration with the content of the running configuration (like in operation) If the 2nd is true, that means that just only and operations on an empty candidate configuration, cause that after all the candidate's content magically changes. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 10:33:26 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DA75B3A6951; Mon, 1 Dec 2008 10:33:26 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 48F683A6951 for ; Mon, 1 Dec 2008 10:33:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PQyWk0WsuXum for ; Mon, 1 Dec 2008 10:33:24 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 3E00F3A689E for ; Mon, 1 Dec 2008 10:33:24 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.33,697,1220227200"; d="scan'208";a="204457273" Received: from sj-dkim-5.cisco.com ([171.68.10.79]) by sj-iport-6.cisco.com with ESMTP; 01 Dec 2008 18:33:20 +0000 Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-5.cisco.com (8.12.11/8.12.11) with ESMTP id mB1IXKc5007423; Mon, 1 Dec 2008 10:33:20 -0800 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mB1IXKFm023538; Mon, 1 Dec 2008 18:33:20 GMT Received: from xmb-sjc-236.amer.cisco.com ([128.107.191.121]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 1 Dec 2008 10:33:20 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Mon, 1 Dec 2008 10:33:19 -0800 Message-ID: <85B2F271FDF6B949B3672BA5A7BB62FB06C2AFF4@xmb-sjc-236.amer.cisco.com> In-Reply-To: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification Thread-Index: AclQhFYAEE41aPLfQhKlp7UsX8fH8wDXMMGg References: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> From: "Alexander Clemm (alex)" To: "Bert Wijnen (IETF)" , "Netconf" X-OriginalArrivalTime: 01 Dec 2008 18:33:20.0457 (UTC) FILETIME=[4905D390:01C953E3] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3223; t=1228156400; x=1229020400; c=relaxed/simple; s=sjdkim5002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=alex@cisco.com; z=From:=20=22Alexander=20Clemm=20(alex)=22=20 |Subject:=20RE=3A=20[Netconf]=20Calrification=3A=20confirm= 20WG=20consensus=20on=20potential=20new=20WGwork-item=3Anoti fication |Sender:=20; bh=FMK578zuzlHbB384cNknEZal4+PPFa+12ktn0AG4gmY=; b=jRLKnZtbFn7G4hB4H7FyefBj6WrLOGzKHWGSsytL1I8heXFIT+v4qaqSCm ax5ilZTL+eGwWQgDtnLGSsWerPL9DUe+8v8gL6raY0kqVh22KujxFp8orz1y +ZXDzPIovm; Authentication-Results: sj-dkim-5; header.From=alex@cisco.com; dkim=pass ( sig from cisco.com/sjdkim5002 verified; ); Subject: Re: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-TransfeFrom netconf-bounces@ietf.org Mon Dec 1 10:33:26 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DA75B3A6951; Mon, 1 Dec 2008 10:33:26 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 48F683A6951 for ; Mon, 1 Dec 2008 10:33:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PQyWk0WsuXum for ; Mon, 1 Dec 2008 10:33:24 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 3E00F3A689E for ; Mon, 1 Dec 2008 10:33:24 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.33,697,1220227200"; d="scan'208";a="204457273" Received: from sj-dkim-5.cisco.com ([171.68.10.79]) by sj-iport-6.cisco.com with ESMTP; 01 Dec 2008 18:33:20 +0000 Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-5.cisco.com (8.12.11/8.12.11) with ESMTP id mB1IXKc5007423; Mon, 1 Dec 2008 10:33:20 -0800 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mB1IXKFm023538; Mon, 1 Dec 2008 18:33:20 GMT Received: from xmb-sjc-236.amer.cisco.com ([128.107.191.121]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 1 Dec 2008 10:33:20 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Mon, 1 Dec 2008 10:33:19 -0800 Message-ID: <85B2F271FDF6B949B3672BA5A7BB62FB06C2AFF4@xmb-sjc-236.amer.cisco.com> In-Reply-To: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification Thread-Index: AclQhFYAEE41aPLfQhKlp7UsX8fH8wDXMMGg References: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> From: "Alexander Clemm (alex)" To: "Bert Wijnen (IETF)" , "Netconf" X-OriginalArrivalTime: 01 Dec 2008 18:33:20.0457 (UTC) FILETIME=[4905D390:01C953E3] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3223; t=1228156400; x=1229020400; c=relaxed/simple; s=sjdkim5002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=alex@cisco.com; z=From:=20=22Alexander=20Clemm=20(alex)=22=20 |Subject:=20RE=3A=20[Netconf]=20Calrification=3A=20confirm= 20WG=20consensus=20on=20potential=20new=20WGwork-item=3Anoti fication |Sender:=20; bh=FMK578zuzlHbB384cNknEZal4+PPFa+12ktn0AG4gmY=; b=jRLKnZtbFn7G4hB4H7FyefBj6WrLOGzKHWGSsytL1I8heXFIT+v4qaqSCm ax5ilZTL+eGwWQgDtnLGSsWerPL9DUe+8v8gL6raY0kqVh22KujxFp8orz1y +ZXDzPIovm; Authentication-Results: sj-dkim-5; header.From=alex@cisco.com; dkim=pass ( sig from cisco.com/sjdkim5002 verified; ); Subject: Re: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encor-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org I do support the draft-chisholm-netconf-not-content-00.txt, but clearly this goes beyond a minimal but aims at a comprehensive approach. I can see the reasoning that we should not distract the working group and focus only on one thing at a time. With that in mind I do support the decision to postpone this work. That being the case, I am skeptical regarding the suggestion to still define "urgently needed" notifications now. Besides the obvious question which ones are urgently needed, there might be the risk that they will result in a "special" that does not align too well with whatever is defined later. I'd rather have us not address notification content at all at this point, instead of ending up with a half-solution for some scenarios that ends up not really being helpful at all. In other words, I do not support a work item of "urgent" notification content. --- Alex -----Original Message----- From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Bert Wijnen (IETF) Sent: Thursday, November 27, 2008 3:36 AM To: Netconf Subject: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification Dear Netconf WG participants, It seems that some people who expressed their opinion in our sesion at IETF73 are changing their minds. And some people who did express their opinion are doing so again here on the mailing list. Since we only counted the number of people in favor or against this work-item and since we did NOT write down names, it becomes difficult to judge (rough) consensus. So to make that easier, we ask EVERYONE to express their opinion on the mailing list again, ALSO those who already did so at our session in Minneapolis. Bert and Mehmet ----- Original Message ----- From: Bert Wijnen (IETF) To: Netconf Sent: Wednesday, November 26, 2008 6:56 PM Subject: [Netconf] confirm WG consensus on potential new WG work-item:notification WG participants, At our NetConf Session at IETF73, the people in the room expressed strong support for the following statements: - We do not want to define extensive Notification content NOW - We just want to define content for notifications that we URGENTLY need now (within the next year). That is one or two notifications - Less urgent notification content we can define once the NETMOD results become available The WG chairs consider this to be WG consensus. If anyone on the mailing list does not agree, please speak up before Dec 3rd 2008. That is one week. We want to try and get updated charter to IESG before X-mas. The WG chairs do not want to consider draft-chisholm-netconf-not-content-00.txt as a starting point. The reason being that it wants to do much more than the minimal approach that is expressed above. The WG chairs will propose/draft new charter text that we will circulate for consensus checking. Once we have such a draft text, we will also call for volunteers to become editors of the document. Bert and Mehmet _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org I do support the draft-chisholm-netconf-not-content-00.txt, but clearly this goes beyond a minimal but aims at a comprehensive approach. I can see the reasoning that we should not distract the working group and focus only on one thing at a time. With that in mind I do support the decision to postpone this work. That being the case, I am skeptical regarding the suggestion to still define "urgently needed" notifications now. Besides the obvious question which ones are urgently needed, there might be the risk that they will result in a "special" that does not align too well with whatever is defined later. I'd rather have us not address notification content at all at this point, instead of ending up with a half-solution for some scenarios that ends up not really being helpful at all. In other words, I do not support a work item of "urgent" notification content. --- Alex -----Original Message----- From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Bert Wijnen (IETF) Sent: Thursday, November 27, 2008 3:36 AM To: Netconf Subject: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification Dear Netconf WG participants, It seems that some people who expressed their opinion in our sesion at IETF73 are changing their minds. And some people who did express their opinion are doing so again here on the mailing list. Since we only counted the number of people in favor or against this work-item and since we did NOT write down names, it becomes difficult to judge (rough) consensus. So to make that easier, we ask EVERYONE to express their opinion on the mailing list again, ALSO those who already did so at our session in Minneapolis. Bert and Mehmet ----- Original Message ----- From: Bert Wijnen (IETF) To: Netconf Sent: Wednesday, November 26, 2008 6:56 PM Subject: [Netconf] confirm WG consensus on potential new WG work-item:notification WG participants, At our NetConf Session at IETF73, the people in the room expressed strong support for the following statements: - We do not want to define extensive Notification content NOW - We just want to define content for notifications that we URGENTLY need now (within the next year). That is one or two notifications - Less urgent notification content we can define once the NETMOD results become available The WG chairs consider this to be WG consensus. If anyone on the mailing list does not agree, please speak up before Dec 3rd 2008. That is one week. We want to try and get updated charter to IESG before X-mas. The WG chairs do not want to consider draft-chisholm-netconf-not-content-00.txt as a starting point. The reason being that it wants to do much more than the minimal approach that is expressed above. The WG chairs will propose/draft new charter text that we will circulate for consensus checking. Once we have such a draft text, we will also call for volunteers to become editors of the document. Bert and Mehmet _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 11:18:49 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 609F83A6BAB; Mon, 1 Dec 2008 11:18:49 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 73CC53A6BAB for ; Mon, 1 Dec 2008 11:18:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.033 X-Spam-Level: X-Spam-Status: No, score=-2.033 tagged_above=-999 required=5 tests=[AWL=0.232, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OD4EcpnyZyxT for ; Mon, 1 Dec 2008 11:18:47 -0800 (PST) Received: from smtp128.sbc.mail.sp1.yahoo.com (smtp128.sbc.mail.sp1.yahoo.com [69.147.65.187]) by core3.amsl.com (Postfix) with SMTP id A6C073A682E for ; Mon, 1 Dec 2008 11:18:47 -0800 (PST) Received: (qmail 76928 invoked from network); 1 Dec 2008 19:18:44 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.96.95 with plain) by smtp128.sbc.mail.sp1.yahoo.com with SMTP; 1 Dec 2008 19:18:42 -0000 X-YMail-OSG: z_UTQCwVM1l3qjEYOC1mBG38CvUeHc4N6oj5M8EM8vxgv9aqRfQ0mRTfsaTkjW0NcESDVROqhzc8eO4FleIcqtxdX34PfkyqF6vlp28g__I914tadDvSdBEDXI8ilwFe.XkCRO_R3Z7AKN3QGT8Qzxvn X-Yahoo-Newman-Property: ymail-3 Message-ID: <49343891.60005@netconfcentral.com> Date: Mon, 01 Dec 2008 11:18:41 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Alexander Clemm (alex)" References: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> <85B2F271FDF6B949B3672BA5A7BB62FB06C2AFF4@xmb-sjc-236.amer.cisco.com> In-Reply-To: <85B2F271FDF6B949B3672BA5A7BB62FB06C2AFF4@xmb-sjc-236.amer.cisco.com> Cc: Netconf Subject: Re: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Alexander Clemm (alex) wrote: > I do support the draft-chisholm-netconf-not-content-00.txt, but clearly > this goes beyond a minimal but aims at a comprehensive approach. I can > see the reasoning that we should not distract the working group and > focus only on one thing at a time. With that in mind I do support the > decision to postpone this work. > > That being the case, I am skeptical regarding the suggestion to still > define "urgently needed" notifications now. Besides the obvious > question which ones are urgently needed, there might be the risk that > they will result in a "special" that does not align too well with > whatever is defined later. I'd rather have us not address notification > content at all at this point, instead of ending up with a half-solution > for some scenarios that ends up not really being helpful at all. In > other words, I do not support a work item of "urgent" notification > content. > I do not mind postponing the work either, but I do see the options as half-solution or kitchen sink of notifications. Sooner or later, we are going to want to define a constrained eventClass (enumeration), and an unconstrained extendedEventClass (identityref). Clearly, a standard notification is better for applications than N proprietary versions. These 3 small pieces to the CM picture will not likely be impacted by further refinements of the YANG language. > --- Alex Andy > > -----Original Message----- > From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On > Behalf Of Bert Wijnen (IETF) > Sent: Thursday, November 27, 2008 3:36 AM > To: Netconf > Subject: [Netconf] Calrification: confirm WG consensus on potential new > WGwork-item:notification > > Dear Netconf WG participants, > > It seems that some people who expressed their opinion in our sesion at > IETF73 > are changing their minds. And some people who did express their opinion > are > doing so again here on the mailing list. > > Since we only counted the number of people in favor or against this > work-item > and since we did NOT write down names, it becomes difficult to judge > (rough) consensus. So to make that easier, we ask EVERYONE to > express their opinion on the mailing list again, ALSO those who already > did > so at our session in Minneapolis. > > Bert and Mehmet > > ----- Original Message ----- > From: Bert Wijnen (IETF) > To: Netconf > Sent: Wednesday, November 26, 2008 6:56 PM > Subject: [Netconf] confirm WG consensus on potential new WG > work-item:notification > > > WG participants, > > At our NetConf Session at IETF73, the people in the room expressed > strong > support for the following statements: > > - We do not want to define extensive Notification content NOW > - We just want to define content for notifications that we URGENTLY > need now (within the next year). That is one or two notifications > - Less urgent notification content we can define once the NETMOD > results become available > > The WG chairs consider this to be WG consensus. If anyone on the mailing > list does not agree, please speak up before Dec 3rd 2008. That is one > week. > We want to try and get updated charter to IESG before X-mas. > > The WG chairs do not want to consider > draft-chisholm-netconf-not-content-00.txt > as a starting point. The reason being that it wants to do much more than > the > minimal approach that is expressed above. > > The WG chairs will propose/draft new charter text that we will circulate > for consensus checking. Once we have such a draft text, we will also > call for volunteers to become editors of the document. > > Bert and Mehmet > > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 11:18:49 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 609F83A6BAB; Mon, 1 Dec 2008 11:18:49 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 73CC53A6BAB for ; Mon, 1 Dec 2008 11:18:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.033 X-Spam-Level: X-Spam-Status: No, score=-2.033 tagged_above=-999 required=5 tests=[AWL=0.232, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OD4EcpnyZyxT for ; Mon, 1 Dec 2008 11:18:47 -0800 (PST) Received: from smtp128.sbc.mail.sp1.yahoo.com (smtp128.sbc.mail.sp1.yahoo.com [69.147.65.187]) by core3.amsl.com (Postfix) with SMTP id A6C073A682E for ; Mon, 1 Dec 2008 11:18:47 -0800 (PST) Received: (qmail 76928 invoked from network); 1 Dec 2008 19:18:44 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.96.95 with plain) by smtp128.sbc.mail.sp1.yahoo.com with SMTP; 1 Dec 2008 19:18:42 -0000 X-YMail-OSG: z_UTQCwVM1l3qjEYOC1mBG38CvUeHc4N6oj5M8EM8vxgv9aqRfQ0mRTfsaTkjW0NcESDVROqhzc8eO4FleIcqtxdX34PfkyqF6vlp28g__I914tadDvSdBEDXI8ilwFe.XkCRO_R3Z7AKN3QGT8Qzxvn X-Yahoo-Newman-Property: ymail-3 Message-ID: <49343891.60005@netconfcentral.com> Date: Mon, 01 Dec 2008 11:18:41 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Alexander Clemm (alex)" References: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> <85B2F271FDF6B949B3672BA5A7BB62FB06C2AFF4@xmb-sjc-236.amer.cisco.com> In-Reply-To: <85B2F271FDF6B949B3672BA5A7BB62FB06C2AFF4@xmb-sjc-236.amer.cisco.com> Cc: Netconf Subject: Re: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Alexander Clemm (alex) wrote: > I do support the draft-chisholm-netconf-not-content-00.txt, but clearly > this goes beyond a minimal but aims at a comprehensive approach. I can > see the reasoning that we should not distract the working group and > focus only on one thing at a time. With that in mind I do support the > decision to postpone this work. > > That being the case, I am skeptical regarding the suggestion to still > define "urgently needed" notifications now. Besides the obvious > question which ones are urgently needed, there might be the risk that > they will result in a "special" that does not align too well with > whatever is defined later. I'd rather have us not address notification > content at all at this point, instead of ending up with a half-solution > for some scenarios that ends up not really being helpful at all. In > other words, I do not support a work item of "urgent" notification > content. > I do not mind postponing the work either, but I do see the options as half-solution or kitchen sink of notifications. Sooner or later, we are going to want to define a constrained eventClass (enumeration), and an unconstrained extendedEventClass (identityref). Clearly, a standard notification is better for applications than N proprietary versions. These 3 small pieces to the CM picture will not likely be impacted by further refinements of the YANG language. > --- Alex Andy > > -----Original Message----- > From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On > Behalf Of Bert Wijnen (IETF) > Sent: Thursday, November 27, 2008 3:36 AM > To: Netconf > Subject: [Netconf] Calrification: confirm WG consensus on potential new > WGwork-item:notification > > Dear Netconf WG participants, > > It seems that some people who expressed their opinion in our sesion at > IETF73 > are changing their minds. And some people who did express their opinion > are > doing so again here on the mailing list. > > Since we only counted the number of people in favor or against this > work-item > and since we did NOT write down names, it becomes difficult to judge > (rough) consensus. So to make that easier, we ask EVERYONE to > express their opinion on the mailing list again, ALSO those who already > did > so at our session in Minneapolis. > > Bert and Mehmet > > ----- Original Message ----- > From: Bert Wijnen (IETF) > To: Netconf > Sent: Wednesday, November 26, 2008 6:56 PM > Subject: [Netconf] confirm WG consensus on potential new WG > work-item:notification > > > WG participants, > > At our NetConf Session at IETF73, the people in the room expressed > strong > support for the following statements: > > - We do not want to define extensive Notification content NOW > - We just want to define content for notifications that we URGENTLY > need now (within the next year). That is one or two notifications > - Less urgent notification content we can define once the NETMOD > results become available > > The WG chairs consider this to be WG consensus. If anyone on the mailing > list does not agree, please speak up before Dec 3rd 2008. That is one > week. > We want to try and get updated charter to IESG before X-mas. > > The WG chairs do not want to consider > draft-chisholm-netconf-not-content-00.txt > as a starting point. The reason being that it wants to do much more than > the > minimal approach that is expressed above. > > The WG chairs will propose/draft new charter text that we will circulate > for consensus checking. Once we have such a draft text, we will also > call for volunteers to become editors of the document. > > Bert and Mehmet > > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 12:20:32 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 684C73A69F4; Mon, 1 Dec 2008 12:20:32 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1D9183A6A4A for ; Mon, 1 Dec 2008 12:20:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.046 X-Spam-Level: X-Spam-Status: No, score=-2.046 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PQRJz99MijE7 for ; Mon, 1 Dec 2008 12:20:30 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 460BD3A69F4 for ; Mon, 1 Dec 2008 12:20:28 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id 90AE0616006; Mon, 1 Dec 2008 21:20:23 +0100 (CET) Date: Mon, 01 Dec 2008 21:20:23 +0100 (CET) Message-Id: <20081201.212023.70131938.mbj@tail-f.com> To: tomasz.mikolajczyk@s3group.com From: Martin Bjorklund In-Reply-To: <25195.87.99.34.137.1228145346.squirrel@webmail.s3group.com> References: <25195.87.99.34.137.1228145346.squirrel@webmail.s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, "Tomasz Mikolajczyk" wrote: > Even though candidate may be shared, it's impossible that a session A > prepares a part of candidate configuration, taking advantage of the > locking mechanism, and later releases the lock (no commit) and shares > result's of its work with a session B that may want to complete the > candidate and perform . According to the RFC, as the result of the > operation performed by session A, any outstanding changes must be > discarded when the lock is released. IMO, it's a serious limitation. Yes. If you want the other behavior, you can use . > Another point, what does it mean "discarded? > 1) the state of the must be the same as before > 2) resetting the candidate configuration with the content of the running > configuration (like in operation) It means 2 (it should be clarified in 4741bis). > If the 2nd is true, that means that just only and > operations on an empty candidate configuration, cause that after all the > candidate's content magically changes. Yes. This is only an issue if the box supports :candidate and :writable-running. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 12:20:32 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 684C73A69F4; Mon, 1 Dec 2008 12:20:32 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1D9183A6A4A for ; Mon, 1 Dec 2008 12:20:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.046 X-Spam-Level: X-Spam-Status: No, score=-2.046 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PQRJz99MijE7 for ; Mon, 1 Dec 2008 12:20:30 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 460BD3A69F4 for ; Mon, 1 Dec 2008 12:20:28 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id 90AE0616006; Mon, 1 Dec 2008 21:20:23 +0100 (CET) Date: Mon, 01 Dec 2008 21:20:23 +0100 (CET) Message-Id: <20081201.212023.70131938.mbj@tail-f.com> To: tomasz.mikolajczyk@s3group.com From: Martin Bjorklund In-Reply-To: <25195.87.99.34.137.1228145346.squirrel@webmail.s3group.com> References: <25195.87.99.34.137.1228145346.squirrel@webmail.s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, "Tomasz Mikolajczyk" wrote: > Even though candidate may be shared, it's impossible that a session A > prepares a part of candidate configuration, taking advantage of the > locking mechanism, and later releases the lock (no commit) and shares > result's of its work with a session B that may want to complete the > candidate and perform . According to the RFC, as the result of the > operation performed by session A, any outstanding changes must be > discarded when the lock is released. IMO, it's a serious limitation. Yes. If you want the other behavior, you can use . > Another point, what does it mean "discarded? > 1) the state of the must be the same as before > 2) resetting the candidate configuration with the content of the running > configuration (like in operation) It means 2 (it should be clarified in 4741bis). > If the 2nd is true, that means that just only and > operations on an empty candidate configuration, cause that after all the > candidate's content magically changes. Yes. This is only an issue if the box supports :candidate and :writable-running. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 14:51:15 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E5EB83A685C; Mon, 1 Dec 2008 14:51:15 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 82FD53A6B25 for ; Mon, 1 Dec 2008 14:51:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.523 X-Spam-Level: X-Spam-Status: No, score=-2.523 tagged_above=-999 required=5 tests=[AWL=0.076, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tb3t+zwPDRgf for ; Mon, 1 Dec 2008 14:51:13 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 4A5843A6991 for ; Mon, 1 Dec 2008 14:51:11 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1Mp4px031661; Mon, 1 Dec 2008 22:51:04 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 22:51:04 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 22:51:03 -0000 (GMT) Message-ID: <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> In-Reply-To: <20081201.092615.89733536.mbj@tail-f.com> References: <49301058.1050609@s3group.com> <20081201.092615.89733536.mbj@tail-f.com> Date: Mon, 1 Dec 2008 22:51:03 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Martin Bjorklund" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 22:51:04.0282 (UTC) FILETIME=[4A2E43A0:01C95407] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 22:51:06 +0000 (GMT) Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> Hi, >> >> Section 3.4 from the RFC 5277 shows in the XSD schema that the >> element MUST appear always once and the element MUST appear at >> least once, because NETCONF server has to define always at least >> "NETCONF" >> stream. What in your opinion a server should return as a response for >> the following request: >> >> >> >> >> >> >> >> >> >> >> ]]>]]> > > The server should return the streams subtree, either once or twice. > It is a bit unlcear if the "filter output" is supposed to be a proFrom netconf-bounces@ietf.org Mon Dec 1 14:51:15 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E5EB83A685C; Mon, 1 Dec 2008 14:51:15 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 82FD53A6B25 for ; Mon, 1 Dec 2008 14:51:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.523 X-Spam-Level: X-Spam-Status: No, score=-2.523 tagged_above=-999 required=5 tests=[AWL=0.076, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tb3t+zwPDRgf for ; Mon, 1 Dec 2008 14:51:13 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 4A5843A6991 for ; Mon, 1 Dec 2008 14:51:11 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1Mp4px031661; Mon, 1 Dec 2008 22:51:04 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 22:51:04 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 22:51:03 -0000 (GMT) Message-ID: <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> In-Reply-To: <20081201.092615.89733536.mbj@tail-f.com> References: <49301058.1050609@s3group.com> <20081201.092615.89733536.mbj@tail-f.com> Date: Mon, 1 Dec 2008 22:51:03 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Martin Bjorklund" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 22:51:04.0282 (UTC) FILETIME=[4A2E43A0:01C95407] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 22:51:06 +0000 (GMT) Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> Hi, >> >> Section 3.4 from the RFC 5277 shows in the XSD schema that the >> element MUST appear always once and the element MUST appear at >> least once, because NETCONF server has to define always at least >> "NETCONF" >> stream. What in your opinion a server should return as a response for >> the following request: >> >> >> >> >> >> >> >> >> >> >> ]]>]]> > > The server should return the streams subtree, either once or twice. > It is a bit unlcear if the "filter output" is supposed to beper > set or not. Since it is a subtree filter, it should not return an > error. But the rules have to be clear. What in your opinion should return the server for the following request based on examples from RFC 4741 section 6.4: root Is the second occurrence of the "name" should overwrite the first one? >> Another point. The RFC says in the section 3.2.5.1: >> >> "Available event streams for the requesting session are returned in the >> reply >> containing the and elements, where the >> element is mandatory, and its value is unique within the scope of a >> NETCONF >> server. An empty reply is returned if there are no available event >> streams, due to user-specified filters on the operation." >> >> My comments to this: >> 1) The "replaySupport" node is also mandatory according to the schema >> 2) Seems that the empty reply doesn't match the schema > > The schema describes the conceptual data store, not the PUDs. It's obvious that is impossible to describe a NETCONF request and response PDUs, that always differ one another, using the same schema. But it's not a problem with the XSD limitations. > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf a proper > set or not. Since it is a subtree filter, it should not return an > error. But the rules have to be clear. What in your opinion should return the server for the following request based on examples from RFC 4741 section 6.4: root Is the second occurrence of the "name" should overwrite the first one? >> Another point. The RFC says in the section 3.2.5.1: >> >> "Available event streams for the requesting session are returned in the >> reply >> containing the and elements, where the >> element is mandatory, and its value is unique within the scope of a >> NETCONF >> server. An empty reply is returned if there are no available event >> streams, due to user-specified filters on the operation." >> >> My comments to this: >> 1) The "replaySupport" node is also mandatory according to the schema >> 2) Seems that the empty reply doesn't match the schema > > The schema describes the conceptual data store, not the PUDs. It's obvious that is impossible to describe a NETCONF request and response PDUs, that always differ one another, using the same schema. But it's not a problem with the XSD limitations. > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 15:12:39 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5C44A3A6B25; Mon, 1 Dec 2008 15:12:39 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6CA5928C0E4 for ; Mon, 1 Dec 2008 15:12:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.531 X-Spam-Level: X-Spam-Status: No, score=-2.531 tagged_above=-999 required=5 tests=[AWL=0.068, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GR-WbylnFfrh for ; Mon, 1 Dec 2008 15:12:37 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 6C9413A69C7 for ; Mon, 1 Dec 2008 15:12:36 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1NCUjM002044; Mon, 1 Dec 2008 23:12:30 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 23:12:30 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 23:12:29 -0000 (GMT) Message-ID: <14444.87.99.34.137.1228173149.squirrel@webmail.s3group.com> In-Reply-To: <200812011323.mB1DNt6l090790@idle.juniper.net> References: <200812011323.mB1DNt6l090790@idle.juniper.net> Date: Mon, 1 Dec 2008 23:12:29 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Phil Shafer" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 23:12:30.0299 (UTC) FILETIME=[48B4E2B0:01C9540A] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 23:12:32 +0000 (GMT) Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > "Tomasz Mikolajczyk" writes: >>and as a result, if XML response has invalid structure, a session is >>closed. It may be a little surprise for the client. > > If a client has a protocol issue, one would expect the session to > be terminated. If a client has a content issue, one would expect > to receive an error. > > The question is: which case does invalid XML belong in. Since the > protocol is encoded in XML, I see invalid XML as a serious client > side issue from which the server cannot reasonable recover. > > So I would consider this a protocol error and terminate the session. > This allows the application developer to notice the error and fix > it, without expecting the server to divine the client's intent. Handling invalid XML sent by a client is no a big deal. The XML parser automatically detects it and the rpc-error describing exactly a reason (pointing to the error position in the request) may be enough to notice the client. Worse if server sends invalid XML, and it may be treated as a bug in the server and means for example wrong translation of the cli names into xml names (that you mentioned in your post earlier). > Thanks, > Phil > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 15:12:39 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5C44A3A6B25; Mon, 1 Dec 2008 15:12:39 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6CA5928C0E4 for ; Mon, 1 Dec 2008 15:12:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.531 X-Spam-Level: X-Spam-Status: No, score=-2.531 tagged_above=-999 required=5 tests=[AWL=0.068, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GR-WbylnFfrh for ; Mon, 1 Dec 2008 15:12:37 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 6C9413A69C7 for ; Mon, 1 Dec 2008 15:12:36 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB1NCUjM002044; Mon, 1 Dec 2008 23:12:30 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 1 Dec 2008 23:12:30 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Mon, 1 Dec 2008 23:12:29 -0000 (GMT) Message-ID: <14444.87.99.34.137.1228173149.squirrel@webmail.s3group.com> In-Reply-To: <200812011323.mB1DNt6l090790@idle.juniper.net> References: <200812011323.mB1DNt6l090790@idle.juniper.net> Date: Mon, 1 Dec 2008 23:12:29 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Phil Shafer" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 01 Dec 2008 23:12:30.0299 (UTC) FILETIME=[48B4E2B0:01C9540A] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Mon, 01 Dec 2008 23:12:32 +0000 (GMT) Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > "Tomasz Mikolajczyk" writes: >>and as a result, if XML response has invalid structure, a session is >>closed. It may be a little surprise for the client. > > If a client has a protocol issue, one would expect the session to > be terminated. If a client has a content issue, one would expect > to receive an error. > > The question is: which case does invalid XML belong in. Since the > protocol is encoded in XML, I see invalid XML as a serious client > side issue from which the server cannot reasonable recover. > > So I would consider this a protocol error and terminate the session. > This allows the application developer to notice the error and fix > it, without expecting the server to divine the client's intent. Handling invalid XML sent by a client is no a big deal. The XML parser automatically detects it and the rpc-error describing exactly a reason (pointing to the error position in the request) may be enough to notice the client. Worse if server sends invalid XML, and it may be treated as a bug in the server and means for example wrong translation of the cli names into xml names (that you mentioned in your post earlier). > Thanks, > Phil > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 20:00:43 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6950E3A6AB7; Mon, 1 Dec 2008 20:00:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 862163A6AB7 for ; Mon, 1 Dec 2008 20:00:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id egPIXzj0y0Wa for ; Mon, 1 Dec 2008 20:00:40 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id BE7443A693A for ; Mon, 1 Dec 2008 20:00:39 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.33,700,1220227200"; d="scan'208";a="35100622" Received: from ind-dkim-1.cisco.com ([64.104.140.57]) by ind-iport-1.cisco.com with ESMTP; 02 Dec 2008 04:00:31 +0000 Received: from india-core-1.cisco.com (india-core-1.cisco.com [64.104.129.221]) by ind-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mB240V4h022705; Tue, 2 Dec 2008 09:30:31 +0530 Received: from xbh-blr-411.apac.cisco.com (xbh-blr-411.cisco.com [64.104.140.150]) by india-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mB240V8Z008981; Tue, 2 Dec 2008 04:00:31 GMT Received: from xbh-hkg-411.apac.cisco.com ([64.104.123.72]) by xbh-blr-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 09:30:31 +0530 Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 12:00:30 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 2 Dec 2008 12:00:28 +0800 Message-ID: In-Reply-To: <200812011323.mB1DNt6l090790@idle.juniper.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] handling invalid XML tag name Thread-Index: AclTua6rcBja60s2SPOQUS2fLlg5zAAbhWuw References: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com> <200812011323.mB1DNt6l090790@idle.juniper.net> From: "James Balestriere (jbalestr)" To: "Phil Shafer" X-OriginalArrivalTime: 02 Dec 2008 04:00:30.0111 (UTC) FILETIME=[8446F2F0:01C95432] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2602; t=1228190431; x=1229054431; c=relaxed/simple; s=inddkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20handling=20invalid=20XML=20 tag=20name |Sender:=20; bh=7Hk4ZaX/4jLmEU3GkaP3HbGFu7R9OBcASAiR/aswn00=; b=O6/Csu3UyizKLeUElugQufPH8atFwOrssnAyRT386C2IQk+3nb6XeHmQ1M nSKiYAAySIdsT/vnWyZ0PmyhRUTdNdJjDFbdr9H/c2R7vq8/P+XeSc7eRy9R ICbDMh6hOs; Authentication-Results: ind-dkim-1; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/inddkim1002 verified; ); Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6950E3A6AB7; Mon, 1 Dec 2008 20:00:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 862163A6AB7 for ; Mon, 1 Dec 2008 20:00:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id egPIXzj0y0Wa for ; Mon, 1 Dec 2008 20:00:40 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id BE7443A693A for ; Mon, 1 Dec 2008 20:00:39 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.33,700,1220227200"; d="scan'208";a="35100622" Received: from ind-dkim-1.cisco.com ([64.104.140.57]) by ind-iport-1.cisco.com with ESMTP; 02 Dec 2008 04:00:31 +0000 Received: from india-core-1.cisco.com (india-core-1.cisco.com [64.104.129.221]) by ind-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mB240V4h022705; Tue, 2 Dec 2008 09:30:31 +0530 Received: from xbh-blr-411.apac.cisco.com (xbh-blr-411.cisco.com [64.104.140.150]) by india-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mB240V8Z008981; Tue, 2 Dec 2008 04:00:31 GMT Received: from xbh-hkg-411.apac.cisco.com ([64.104.123.72]) by xbh-blr-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 09:30:31 +0530 Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 12:00:30 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 2 Dec 2008 12:00:28 +0800 Message-ID: In-Reply-To: <200812011323.mB1DNt6l090790@idle.juniper.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] handling invalid XML tag name Thread-Index: AclTua6rcBja60s2SPOQUS2fLlg5zAAbhWuw References: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com> <200812011323.mB1DNt6l090790@idle.juniper.net> From: "James Balestriere (jbalestr)" To: "Phil Shafer" X-OriginalArrivalTime: 02 Dec 2008 04:00:30.0111 (UTC) FILETIME=[8446F2F0:01C95432] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2602; t=1228190431; x=1229054431; c=relaxed/simple; s=inddkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20handling=20invalid=20XML=20 tag=20name |Sender:=20; bh=7Hk4ZaX/4jLmEU3GkaP3HbGFu7R9OBcASAiR/aswn00=; b=O6/Csu3UyizKLeUElugQufPH8atFwOrssnAyRT386C2IQk+3nb6XeHmQ1M nSKiYAAySIdsT/vnWyZ0PmyhRUTdNdJjDFbdr9H/c2R7vq8/P+XeSc7eRy9R ICbDMh6hOs; Authentication-Results: ind-dkim-1; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/inddkim1002 verified; ); Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Going back and re-reading RFC4741, section 4, I would have to agree with Phil; however, like a few others, I have used the ]]>]]> for my framing. It allows me to decouple my SSH layer from my Netconf layer and get better performance and modularity, and allows my sessions to survive a bad XML request. If we use the XML tags for framing we will end up with a more complex state machine handling the SSH character interrupts. At a minimum you would have to handle the tags {, , } as well as the nesting. It is the nesting which is the problem rpc unlikely, but possible inside some data model we carry, which requires a fairly complex state machine to determine the framing. Should we reserve "rpc" and "rpc-reply" so they can't be embedded inside the message ? It also requires session hangup on bad XML, which would surprise me if I were a user. I would rather the Netconf server give me an error response to indicate bad XML and where/why the XML is bad rather than just hangup. It would be a real pain for my users to have to turn on debuging on their network boxes to diagnose XML framing errors. James. > -----Original Message----- > From: netconf-bounces@ietf.org > [mailto:netconf-bounces@ietf.org] On Behalf Of Phil Shafer > Sent: Tuesday, 2 December 2008 12:24 AM > To: Tomasz Mikolajczyk > Cc: NETCONF > Subject: Re: [Netconf] handling invalid XML tag name > > "Tomasz Mikolajczyk" writes: > >and as a result, if XML response has invalid structure, a session is > >closed. It may be a little surprise for the client. > > If a client has a protocol issue, one would expect the session to > be terminated. If a client has a content issue, one would expect > to receive an error. > > The question is: which case does invalid XML belong in. Since the > protocol is encoded in XML, I see invalid XML as a serious client > side issue from which the server cannot reasonable recover. > > So I would consider this a protocol error and terminate the session. > This allows the application developer to notice the error and fix > it, without expecting the server to divine the client's intent. > > Thanks, > Phil > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf etconf-request@ietf.org?subject=subscribe> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Going back and re-reading RFC4741, section 4, I would have to agree with Phil; however, like a few others, I have used the ]]>]]> for my framing. It allows me to decouple my SSH layer from my Netconf layer and get better performance and modularity, and allows my sessions to survive a bad XML request. If we use the XML tags for framing we will end up with a more complex state machine handling the SSH character interrupts. At a minimum you would have to handle the tags {, , } as well as the nesting. It is the nesting which is the problem rpc unlikely, but possible inside some data model we carry, which requires a fairly complex state machine to determine the framing. Should we reserve "rpc" and "rpc-reply" so they can't be embedded inside the message ? It also requires session hangup on bad XML, which would surprise me if I were a user. I would rather the Netconf server give me an error response to indicate bad XML and where/why the XML is bad rather than just hangup. It would be a real pain for my users to have to turn on debuging on their network boxes to diagnose XML framing errors. James. > -----Original Message----- > From: netconf-bounces@ietf.org > [mailto:netconf-bounces@ietf.org] On Behalf Of Phil Shafer > Sent: Tuesday, 2 December 2008 12:24 AM > To: Tomasz Mikolajczyk > Cc: NETCONF > Subject: Re: [Netconf] handling invalid XML tag name > > "Tomasz Mikolajczyk" writes: > >and as a result, if XML response has invalid structure, a session is > >closed. It may be a little surprise for the client. > > If a client has a protocol issue, one would expect the session to > be terminated. If a client has a content issue, one would expect > to receive an error. > > The question is: which case does invalid XML belong in. Since the > protocol is encoded in XML, I see invalid XML as a serious client > side issue from which the server cannot reasonable recover. > > So I would consider this a protocol error and terminate the session. > This allows the application developer to notice the error and fix > it, without expecting the server to divine the client's intent. > > Thanks, > Phil > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 20:20:14 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 748B93A6ACD; Mon, 1 Dec 2008 20:20:14 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B88223A6ACD for ; Mon, 1 Dec 2008 20:20:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.805 X-Spam-Level: X-Spam-Status: No, score=0.805 tagged_above=-999 required=5 tests=[AWL=-1.300, BAYES_50=0.001, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5BjZPLDqw57c for ; Mon, 1 Dec 2008 20:20:12 -0800 (PST) Received: from szxga02-in.huawei.com (unknown [119.145.14.65]) by core3.amsl.com (Postfix) with ESMTP id E12043A6AB7 for ; Mon, 1 Dec 2008 20:20:11 -0800 (PST) Received: from huawei.com (szxga02-in [172.24.2.6]) by szxga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KB800MNGEP9S1@szxga02-in.huawei.com> for netconf@ietf.org; Tue, 02 Dec 2008 12:19:57 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KB800ELEEP9BV@szxga02-in.huawei.com> for netconf@ietf.org; Tue, 02 Dec 2008 12:19:57 +0800 (CST) Received: from [172.24.1.18] (Forwarded-For: [10.27.141.6]) by szxmc04-in.huawei.com (mshttpd); Tue, 02 Dec 2008 12:19:53 +0800 Date: Tue, 02 Dec 2008 12:19:53 +0800 From: Washam Fan In-reply-to: <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <492FAD64.6010600@s3group.com> <20081201.083617.60857508.mbj@tail-f.com> <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, > >> Another point is that RFC 4741 says that all the changes in the > >> candidate configuration have to be committed, otherwise running > must>> remain unchanged. What if during commit a connection with > the device > >> would be broken, for example somebody cut the cable? How are we > going to > >> tell the device that a kind of rollback have to be done? > > > > 4741 specifies what the server MUST do. *How* it is done is up > to the > > implementation. > > Yes, but generally management layer cannot support transactions on its > own. In other words it cannot be said that a management layer supports > transaction unless managed device does it also, or is able to deal > withkind of situations described above. So we have to understand > clearly what > support for :candidate or :rollback-on-error capabilities means in > reality, before we announce it. > > > /martin > > > > Tomasz > > I think there exists a way that NETCONF session know underlying connection is invalid. So synchronizing candidate with running datastore can be triggered in this case. Am I missing something? washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 20:20:14 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 748B93A6ACD; Mon, 1 Dec 2008 20:20:14 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B88223A6ACD for ; Mon, 1 Dec 2008 20:20:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.805 X-Spam-Level: X-Spam-Status: No, score=0.805 tagged_above=-999 required=5 tests=[AWL=-1.300, BAYES_50=0.001, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5BjZPLDqw57c for ; Mon, 1 Dec 2008 20:20:12 -0800 (PST) Received: from szxga02-in.huawei.com (unknown [119.145.14.65]) by core3.amsl.com (Postfix) with ESMTP id E12043A6AB7 for ; Mon, 1 Dec 2008 20:20:11 -0800 (PST) Received: from huawei.com (szxga02-in [172.24.2.6]) by szxga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KB800MNGEP9S1@szxga02-in.huawei.com> for netconf@ietf.org; Tue, 02 Dec 2008 12:19:57 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KB800ELEEP9BV@szxga02-in.huawei.com> for netconf@ietf.org; Tue, 02 Dec 2008 12:19:57 +0800 (CST) Received: from [172.24.1.18] (Forwarded-For: [10.27.141.6]) by szxmc04-in.huawei.com (mshttpd); Tue, 02 Dec 2008 12:19:53 +0800 Date: Tue, 02 Dec 2008 12:19:53 +0800 From: Washam Fan In-reply-to: <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <492FAD64.6010600@s3group.com> <20081201.083617.60857508.mbj@tail-f.com> <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, > >> Another point is that RFC 4741 says that all the changes in the > >> candidate configuration have to be committed, otherwise running > must>> remain unchanged. What if during commit a connection with > the device > >> would be broken, for example somebody cut the cable? How are we > going to > >> tell the device that a kind of rollback have to be done? > > > > 4741 specifies what the server MUST do. *How* it is done is up > to the > > implementation. > > Yes, but generally management layer cannot support transactions on its > own. In other words it cannot be said that a management layer supports > transaction unless managed device does it also, or is able to deal > withkind of situations described above. So we have to understand > clearly what > support for :candidate or :rollback-on-error capabilities means in > reality, before we announce it. > > > /martin > > > > Tomasz > > I think there exists a way that NETCONF session know underlying connection is invalid. So synchronizing candidate with running datastore can be triggered in this case. Am I missing something? washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 23:28:01 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1FA903A68D2; Mon, 1 Dec 2008 23:28:01 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2992B3A67CC for ; Mon, 1 Dec 2008 23:28:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.032 X-Spam-Level: X-Spam-Status: No, score=-2.032 tagged_above=-999 required=5 tests=[AWL=0.014, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vi0iEwrzWhFI for ; Mon, 1 Dec 2008 23:27:59 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 007F53A68D2 for ; Mon, 1 Dec 2008 23:27:57 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 6DDD176C310; Tue, 2 Dec 2008 08:27:52 +0100 (CET) Date: Tue, 02 Dec 2008 08:27:52 +0100 (CET) Message-Id: <20081202.082752.179532099.mbj@tail-f.com> To: tomasz.mikolajczyk@s3group.com From: Martin Bjorklund In-Reply-To: <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> References: <49301058.1050609@s3group.com> <20081201.092615.89733536.mbj@tail-f.com> <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org "Tomasz Mikolajczyk" wrote: > Martin Bjorklund wrote: > > The server should return the streams subtree, either once or twice. > > It is a bit unlcear if the "filter output" is supposed to be a proper > > set or not. Since it is a subtree filter, it should not return an > > error. > > But the rules have to be clear. Of course. This should be clarified in 4741bis. > What in your opinion should return the > server for the following request based on examples from RFC 4741 section > 6.4: > > > > > > > > > > root > > > > > > > > Is the second occurrence of the "name" should overwrite the first one? I think you meant that the request should be: root From netconf-bounces@ietf.org Mon Dec 1 23:28:01 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1FA903A68D2; Mon, 1 Dec 2008 23:28:01 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2992B3A67CC for ; Mon, 1 Dec 2008 23:28:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.032 X-Spam-Level: X-Spam-Status: No, score=-2.032 tagged_above=-999 required=5 tests=[AWL=0.014, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vi0iEwrzWhFI for ; Mon, 1 Dec 2008 23:27:59 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 007F53A68D2 for ; Mon, 1 Dec 2008 23:27:57 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 6DDD176C310; Tue, 2 Dec 2008 08:27:52 +0100 (CET) Date: Tue, 02 Dec 2008 08:27:52 +0100 (CET) Message-Id: <20081202.082752.179532099.mbj@tail-f.com> To: tomasz.mikolajczyk@s3group.com From: Martin Bjorklund In-Reply-To: <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> References: <49301058.1050609@s3group.com> <20081201.092615.89733536.mbj@tail-f.com> <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org "Tomasz Mikolajczyk" wrote: > Martin Bjorklund wrote: > > The server should return the streams subtree, either once or twice. > > It is a bit unlcear if the "filter output" is supposed to be a proper > > set or not. Since it is a subtree filter, it should not return an > > error. > > But the rules have to be clear. Of course. This should be clarified in 4741bis. > What in your opinion should return the > server for the following request based on examples from RFC 4741 section > 6.4: > > > > > > > > > > root > > > > > > > > Is the second occurrence of the "name" should overwrite the first one? I think you meant that the request should be: root The fist "name" is a content match node, which means that the "user"s with the name "root" are selected. The second "name" is a selection node, which means that from the users with the name "root", only the "name" element is selected (the other siblings are suppressed), so assuming that there is a user called "root", you'd get: root /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf The fist "name" is a content match node, which means that the "user"s with the name "root" are selected. The second "name" is a selection node, which means that from the users with the name "root", only the "name" element is selected (the other siblings are suppressed), so assuming that there is a user called "root", you'd get: root /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 23:38:15 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 63B573A6B27; Mon, 1 Dec 2008 23:38:15 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 228183A6B27 for ; Mon, 1 Dec 2008 23:38:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.033 X-Spam-Level: X-Spam-Status: No, score=-2.033 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vU+H09Dvp3pB for ; Mon, 1 Dec 2008 23:38:13 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 5CE7E3A68D2 for ; Mon, 1 Dec 2008 23:38:13 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 38BDF76C310; Tue, 2 Dec 2008 08:38:09 +0100 (CET) Date: Tue, 02 Dec 2008 08:38:06 +0100 (CET) Message-Id: <20081202.083806.140166292.mbj@tail-f.com> To: jbalestr@cisco.com From: Martin Bjorklund In-Reply-To: References: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com> <200812011323.mB1DNt6l090790@idle.juniper.net> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi James, "James Balestriere (jbalestr)" wrote: > Going back and re-reading RFC4741, section 4, I would have to agree with > Phil; Which words in section 4 are you referring to? One sentence that I guess can be interpreted this way is The message is sent in response to an operation. So what is an " operation" - specifically, does it cover broken XML? Is this an operation: ]]>]]> ]]>]]> it's invalid XML obviously, and it doesn't have the message-id attribute. What about this: ]]>]]> ]]>]]> where the element is missing. Do you expect a is this case? /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 23:38:15 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 63B573A6B27; Mon, 1 Dec 2008 23:38:15 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 228183A6B27 for ; Mon, 1 Dec 2008 23:38:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.033 X-Spam-Level: X-Spam-Status: No, score=-2.033 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vU+H09Dvp3pB for ; Mon, 1 Dec 2008 23:38:13 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 5CE7E3A68D2 for ; Mon, 1 Dec 2008 23:38:13 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 38BDF76C310; Tue, 2 Dec 2008 08:38:09 +0100 (CET) Date: Tue, 02 Dec 2008 08:38:06 +0100 (CET) Message-Id: <20081202.083806.140166292.mbj@tail-f.com> To: jbalestr@cisco.com From: Martin Bjorklund In-Reply-To: References: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com> <200812011323.mB1DNt6l090790@idle.juniper.net> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi James, "James Balestriere (jbalestr)" wrote: > Going back and re-reading RFC4741, section 4, I would have to agree with > Phil; Which words in section 4 are you referring to? One sentence that I guess can be interpreted this way is The message is sent in response to an operation. So what is an " operation" - specifically, does it cover broken XML? Is this an operation: ]]>]]> ]]>]]> it's invalid XML obviously, and it doesn't have the message-id attribute. What about this: ]]>]]> ]]>]]> where the element is missing. Do you expect a is this case? /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 23:58:47 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 363423A6B14; Mon, 1 Dec 2008 23:58:47 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B23853A67CC for ; Mon, 1 Dec 2008 23:58:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.034 X-Spam-Level: X-Spam-Status: No, score=-2.034 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 51g1hw0FbFuW for ; Mon, 1 Dec 2008 23:58:45 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id E6D293A6B14 for ; Mon, 1 Dec 2008 23:58:44 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 4EFCA76C310; Tue, 2 Dec 2008 08:58:40 +0100 (CET) Date: Tue, 02 Dec 2008 08:58:37 +0100 (CET) Message-Id: <20081202.085837.200252925.mbj@tail-f.com> To: washam.fan@huawei.com From: Martin Bjorklund In-Reply-To: References: <20081201.083617.60857508.mbj@tail-f.com> <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, Washam Fan wrote: > I think there exists a way that NETCONF session know underlying connection is > invalid. So synchronizing candidate with running datastore can be triggered in > this case. > Am I missing something? I think Tomasz (correct me if I'm wrong) refers to a case where the NETCONF server function is implemented as two separate entities - a NETCONF stack which uses some internal mechanism to communicate with the configuration data store, and if the configuration data store does not support any transaction protocol, it will be difficult to implement :rollback-on-error for example. I think this is by design - :rollback-on-error is an optional capability which means that devices that cannot support it does not advertise it. This design allows you to add basic NETCONF support to simple or legacy devices. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 1 23:58:47 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 363423A6B14; Mon, 1 Dec 2008 23:58:47 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B23853A67CC for ; Mon, 1 Dec 2008 23:58:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.034 X-Spam-Level: X-Spam-Status: No, score=-2.034 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 51g1hw0FbFuW for ; Mon, 1 Dec 2008 23:58:45 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id E6D293A6B14 for ; Mon, 1 Dec 2008 23:58:44 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 4EFCA76C310; Tue, 2 Dec 2008 08:58:40 +0100 (CET) Date: Tue, 02 Dec 2008 08:58:37 +0100 (CET) Message-Id: <20081202.085837.200252925.mbj@tail-f.com> To: washam.fan@huawei.com From: Martin Bjorklund In-Reply-To: References: <20081201.083617.60857508.mbj@tail-f.com> <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, Washam Fan wrote: > I think there exists a way that NETCONF session know underlying connection is > invalid. So synchronizing candidate with running datastore can be triggered in > this case. > Am I missing something? I think Tomasz (correct me if I'm wrong) refers to a case where the NETCONF server function is implemented as two separate entities - a NETCONF stack which uses some internal mechanism to communicate with the configuration data store, and if the configuration data store does not support any transaction protocol, it will be difficult to implement :rollback-on-error for example. I think this is by design - :rollback-on-error is an optional capability which means that devices that cannot support it does not advertise it. This design allows you to add basic NETCONF support to simple or legacy devices. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 01:22:09 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CDF373A6AF6; Tue, 2 Dec 2008 01:22:09 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1C4623A6AF6 for ; Tue, 2 Dec 2008 01:22:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IIaVJyg4FSeS for ; Tue, 2 Dec 2008 01:22:07 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id 01EEB3A6782 for ; Tue, 2 Dec 2008 01:22:05 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.33,701,1220227200"; d="scan'208";a="35145287" Received: from hkg-dkim-1.cisco.com ([10.75.231.161]) by ind-iport-1.cisco.com with ESMTP; 02 Dec 2008 09:21:55 +0000 Received: from hkg-core-1.cisco.com (hkg-core-1.cisco.com [64.104.123.94]) by hkg-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mB29LsV7011571; Tue, 2 Dec 2008 17:21:54 +0800 Received: from xbh-hkg-412.apac.cisco.com (xbh-hkg-412.cisco.com [64.104.123.69]) by hkg-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mB29Ls7u018007; Tue, 2 Dec 2008 09:21:54 GMT Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-412.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 17:21:51 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 2 Dec 2008 17:21:49 +0800 Message-ID: In-Reply-To: <20081202.083806.140166292.mbj@tail-f.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] handling invalid XML tag name Thread-Index: AclUUPI38Am++Dp7QOmJ9R6toQwXUwAAkaOQ References: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com><200812011323.mB1DNt6l090790@idle.juniper.net> <20081202.083806.140166292.mbj@tail-f.com> From: "James Balestriere (jbalestr)" To: "Martin Bjorklund" X-OriginalArrivalTime: 02 Dec 2008 09:21:51.0773 (UTC) FILETIME=[690B14D0:01C9545F] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3620; t=1228209715; x=1229073715; c=relaxed/simple; s=hkgdkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20handling=20invalid=20XML=20 tag=20name |Sender:=20; bh=ZVVT55S+0xz5MU8HY+LhVJkyYCoW8YnYPeoEeCWoYJQ=; b=V6MczPpyKRjhFGHAsC1839oCHbAT+BLwtnl9+J9YsWYOZEOBoOjqJI2qpK 6fkqfj31CWp/g3YYW5A6r86Rs2qipSRWJdNqTy6FZ3/FvlUesnYn3uwYUS1A sd3qYuAzkd6KFz3Ux9Z6HWm6quxe+hqHIAsbczjomxF6EEyqL9zZM=; Authentication-Results: hkg-dkim-1; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/hkgdkim1002 verified; ); Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org In Section 1.1 we have The RPC layer provides a simple, transport-independent framing mechanism for encoding RPCs. Section 4 documents this protocol. Section 4 goeson to say, NETCONF peers use and elements to provide transport protocol-independent framing of NETCONF requests and responses. The keyword is "framing" SSH itself has no framing definition, so from reading all this it implies that NETCONF must be providing the framing. Nowhere in RFC4741 do I see ]]>]]> explicitly called out as the framing delimiter. My preference is to have ]]>]]> defined as the explicit framing delimiter in the absence of transport defined framing. All your examples are very good and higlight why you would want to use ]]>]]> instead of relying on the XML framing. You should add the additional use case Is it even valid to use the message-id when the XML is badly framed ? For all these scenarios I would take advantage of the ]]>]]> and send and to all of them because that is the only container for rpc-error. If message-id can be extracted from the original XML then it can be used. The example on page 14 shows that message-id is optional in a response. The issue I have with using XML and a schema to define your framing means that if your XML does not comply with the schema then you can't properly frame the message and you can't even have the sequence in the example on page 14 because the rpc is not framed properly. The only 's would be operational errors. Take your examples and strip out the ]]>]]> as was suggested earlier in this thread. What happens with this In the absence of the , When do you decide to stop waiting for more characters ? You would eventually have to timeout SSH and hang up the session. What about What exactly would we receive ? This is why I agree with Phil in that if we strictly use as the framing we really would be better off just hanging up the session when the XML goes bad. However, what I actually do is use the ]]>]]> for my framing delimter and and send rpc-error on unknown XML. (This NETCONF server perspective) I let the client work out what to do with the rpc-error. If it is a human user pasting XML into an SSH session then they get useful info. James. > -----Original Message----- > From: Martin Bjorklund [mailto:mbj@tail-f.com] > Sent: Tuesday, 2 December 2008 6:38 PM > To: James Balestriere (jbalestr) > Cc: phil@juniper.net; netconf@ietf.org > Subject: Re: [Netconf] handling invalid XML tag name > > Hi James, > > "James Balestriere (jbalestr)" wrote: > > Going back and re-reading RFC4741, section 4, I would have > to agree with > > Phil; > > Which words in section 4 are you referring to? > > One sentence that I guess can be interpreted this way is > > The message is sent in response to an operation. > > So what is an " operation" - specifically, does it cover broken > XML? Is this an operation: > > ]]>]]> > > > ]]>]]> > > it's invalid XML obviously, and it doesn't have the message-id > attribute. What about this: > > ]]>]]> > > ]]>]]> > > where the element is missing. > > Do you expect a is this case? > > > /martin > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 01:22:09 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CDF373A6AF6; Tue, 2 Dec 2008 01:22:09 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1C4623A6AF6 for ; Tue, 2 Dec 2008 01:22:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IIaVJyg4FSeS for ; Tue, 2 Dec 2008 01:22:07 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id 01EEB3A6782 for ; Tue, 2 Dec 2008 01:22:05 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.33,701,1220227200"; d="scan'208";a="35145287" Received: from hkg-dkim-1.cisco.com ([10.75.231.161]) by ind-iport-1.cisco.com with ESMTP; 02 Dec 2008 09:21:55 +0000 Received: from hkg-core-1.cisco.com (hkg-core-1.cisco.com [64.104.123.94]) by hkg-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mB29LsV7011571; Tue, 2 Dec 2008 17:21:54 +0800 Received: from xbh-hkg-412.apac.cisco.com (xbh-hkg-412.cisco.com [64.104.123.69]) by hkg-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mB29Ls7u018007; Tue, 2 Dec 2008 09:21:54 GMT Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-412.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 17:21:51 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 2 Dec 2008 17:21:49 +0800 Message-ID: In-Reply-To: <20081202.083806.140166292.mbj@tail-f.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] handling invalid XML tag name Thread-Index: AclUUPI38Am++Dp7QOmJ9R6toQwXUwAAkaOQ References: <8506.87.99.34.137.1228132998.squirrel@webmail.s3group.com><200812011323.mB1DNt6l090790@idle.juniper.net> <20081202.083806.140166292.mbj@tail-f.com> From: "James Balestriere (jbalestr)" To: "Martin Bjorklund" X-OriginalArrivalTime: 02 Dec 2008 09:21:51.0773 (UTC) FILETIME=[690B14D0:01C9545F] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3620; t=1228209715; x=1229073715; c=relaxed/simple; s=hkgdkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20handling=20invalid=20XML=20 tag=20name |Sender:=20; bh=ZVVT55S+0xz5MU8HY+LhVJkyYCoW8YnYPeoEeCWoYJQ=; b=V6MczPpyKRjhFGHAsC1839oCHbAT+BLwtnl9+J9YsWYOZEOBoOjqJI2qpK 6fkqfj31CWp/g3YYW5A6r86Rs2qipSRWJdNqTy6FZ3/FvlUesnYn3uwYUS1A sd3qYuAzkd6KFz3Ux9Z6HWm6quxe+hqHIAsbczjomxF6EEyqL9zZM=; Authentication-Results: hkg-dkim-1; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/hkgdkim1002 verified; ); Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org In Section 1.1 we have The RPC layer provides a simple, transport-independent framing mechanism for encoding RPCs. Section 4 documents this protocol. Section 4 goeson to say, NETCONF peers use and elements to provide transport protocol-independent framing of NETCONF requests and responses. The keyword is "framing" SSH itself has no framing definition, so from reading all this it implies that NETCONF must be providing the framing. Nowhere in RFC4741 do I see ]]>]]> explicitly called out as the framing delimiter. My preference is to have ]]>]]> defined as the explicit framing delimiter in the absence of transport defined framing. All your examples are very good and higlight why you would want to use ]]>]]> instead of relying on the XML framing. You should add the additional use case Is it even valid to use the message-id when the XML is badly framed ? For all these scenarios I would take advantage of the ]]>]]> and send and to all of them because that is the only container for rpc-error. If message-id can be extracted from the original XML then it can be used. The example on page 14 shows that message-id is optional in a response. The issue I have with using XML and a schema to define your framing means that if your XML does not comply with the schema then you can't properly frame the message and you can't even have the sequence in the example on page 14 because the rpc is not framed properly. The only 's would be operational errors. Take your examples and strip out the ]]>]]> as was suggested earlier in this thread. What happens with this In the absence of the , When do you decide to stop waiting for more characters ? You would eventually have to timeout SSH and hang up the session. What about What exactly would we receive ? This is why I agree with Phil in that if we strictly use as the framing we really would be better off just hanging up the session when the XML goes bad. However, what I actually do is use the ]]>]]> for my framing delimter and and send rpc-error on unknown XML. (This NETCONF server perspective) I let the client work out what to do with the rpc-error. If it is a human user pasting XML into an SSH session then they get useful info. James. > -----Original Message----- > From: Martin Bjorklund [mailto:mbj@tail-f.com] > Sent: Tuesday, 2 December 2008 6:38 PM > To: James Balestriere (jbalestr) > Cc: phil@juniper.net; netconf@ietf.org > Subject: Re: [Netconf] handling invalid XML tag name > > Hi James, > > "James Balestriere (jbalestr)" wrote: > > Going back and re-reading RFC4741, section 4, I would have > to agree with > > Phil; > > Which words in section 4 are you referring to? > > One sentence that I guess can be interpreted this way is > > The message is sent in response to an operation. > > So what is an " operation" - specifically, does it cover broken > XML? Is this an operation: > > ]]>]]> > > > ]]>]]> > > it's invalid XML obviously, and it doesn't have the message-id > attribute. What about this: > > ]]>]]> > > ]]>]]> > > where the element is missing. > > Do you expect a is this case? > > > /martin > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 02:16:07 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 861CE3A6862; Tue, 2 Dec 2008 02:16:07 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 258E33A6862 for ; Tue, 2 Dec 2008 02:16:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.495 X-Spam-Level: X-Spam-Status: No, score=0.495 tagged_above=-999 required=5 tests=[AWL=0.009, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SdUWJwjN19GL for ; Tue, 2 Dec 2008 02:16:06 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 03FBE3A67A1 for ; Tue, 2 Dec 2008 02:16:05 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB2AFtUF009731; Tue, 2 Dec 2008 11:15:58 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 11:15:55 +0100 Message-ID: <49350A72.3010109@s3group.com> Date: Tue, 02 Dec 2008 11:14:10 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <25195.87.99.34.137.1228145346.squirrel@webmail.s3group.com> <20081201.212023.70131938.mbj@tail-f.com> In-Reply-To: <20081201.212023.70131938.mbj@tail-f.com> X-OriginalArrivalTime: 02 Dec 2008 10:15:55.0408 (UTC) FILETIME=[F6668100:01C95466] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Hi, > > "Tomasz Mikolajczyk" wrote: >> Even though candidate may be shared, it's impossible that a session A >> prepares a part of candidate configuration, taking advantage of the >> locking mechanism, and later releases the lock (no commit) and shares >> result's of its work with a session B that may want to complete the >> candidate and perform . According to the RFC, as the result of the >> operation performed by session A, any outstanding changes must be >> discarded when the lock is released. IMO, it's a serious limitation. > > Yes. If you want the other behavior, you can use . What is an advantage of such behavior. Could you explain usefulness of this? >> Another point, what does it mean "discarded? >> 1) the state of the must be the same as before >> 2) resetting the candidate configuration with the content of the running >> configuration (like in operation) > > It means 2 (it should be clarified in 4741bis). > >> If the 2nd is true, that means that just only and >> operations on an empty candidate configuration, cause that after all the >> candidate's content magically changes. > > Yes. This is only an issue if the box supports :candidate and > :writable-running. It's very illogical. Is it done on purpose or is kind of side effect? Lock and unlock operation should not have anything in common with copying configuration. These operation should only allow or disallow editing the data. One more thing. One session is able to forbid do a lock on candidate for another session simply by doing any change on candidate. That's also very surprising. If a configuration is not locked any session should be able to do the changes on it. > > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 02:16:07 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 861CE3A6862; Tue, 2 Dec 2008 02:16:07 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 258E33A6862 for ; Tue, 2 Dec 2008 02:16:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.495 X-Spam-Level: X-Spam-Status: No, score=0.495 tagged_above=-999 required=5 tests=[AWL=0.009, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SdUWJwjN19GL for ; Tue, 2 Dec 2008 02:16:06 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 03FBE3A67A1 for ; Tue, 2 Dec 2008 02:16:05 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB2AFtUF009731; Tue, 2 Dec 2008 11:15:58 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 11:15:55 +0100 Message-ID: <49350A72.3010109@s3group.com> Date: Tue, 02 Dec 2008 11:14:10 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <25195.87.99.34.137.1228145346.squirrel@webmail.s3group.com> <20081201.212023.70131938.mbj@tail-f.com> In-Reply-To: <20081201.212023.70131938.mbj@tail-f.com> X-OriginalArrivalTime: 02 Dec 2008 10:15:55.0408 (UTC) FILETIME=[F6668100:01C95466] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Hi, > > "Tomasz Mikolajczyk" wrote: >> Even though candidate may be shared, it's impossible that a session A >> prepares a part of candidate configuration, taking advantage of the >> locking mechanism, and later releases the lock (no commit) and shares >> result's of its work with a session B that may want to complete the >> candidate and perform . According to the RFC, as the result of the >> operation performed by session A, any outstanding changes must be >> discarded when the lock is released. IMO, it's a serious limitation. > > Yes. If you want the other behavior, you can use . What is an advantage of such behavior. Could you explain usefulness of this? >> Another point, what does it mean "discarded? >> 1) the state of the must be the same as before >> 2) resetting the candidate configuration with the content of the running >> configuration (like in operation) > > It means 2 (it should be clarified in 4741bis). > >> If the 2nd is true, that means that just only and >> operations on an empty candidate configuration, cause that after all the >> candidate's content magically changes. > > Yes. This is only an issue if the box supports :candidate and > :writable-running. It's very illogical. Is it done on purpose or is kind of side effect? Lock and unlock operation should not have anything in common with copying configuration. These operation should only allow or disallow editing the data. One more thing. One session is able to forbid do a lock on candidate for another session simply by doing any change on candidate. That's also very surprising. If a configuration is not locked any session should be able to do the changes on it. > > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 02:32:19 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 778223A6A87; Tue, 2 Dec 2008 02:32:19 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A41B23A6A70 for ; Tue, 2 Dec 2008 02:32:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.268 X-Spam-Level: X-Spam-Status: No, score=-2.268 tagged_above=-999 required=5 tests=[AWL=-0.019, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MGEysYdTX9Fb for ; Tue, 2 Dec 2008 02:32:16 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 49CD33A6862 for ; Tue, 2 Dec 2008 02:32:15 -0800 (PST) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id F22D1C0064; Tue, 2 Dec 2008 11:32:10 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id c0uaPciJeDZw; Tue, 2 Dec 2008 11:32:01 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5353EC0063; Tue, 2 Dec 2008 11:32:01 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 2EF5288BBF9; Tue, 2 Dec 2008 11:32:00 +0100 (CET) Date: Tue, 2 Dec 2008 11:32:00 +0100 From: Juergen Schoenwaelder To: "James Balestriere (jbalestr)" Message-ID: <20081202103200.GB3183@elstar.local> Mail-Followup-To: "James Balestriere (jbalestr)" , Martin Bjorklund , netconf@ietf.org References: <20081202.083806.140166292.mbj@tail-f.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Tue, Dec 02, 2008 at 05:21:49PM +0800, James Balestriere (jbalestr) wrote: > My preference is to have ]]>]]> defined as the explicit framing > delimiter in the absence of transport defined framing. The sequence ]]>]]> is an SSH specific framing delimiter and there is no need to make this a feature for all transports. It espcapes me why anymore would use ]]>]]> in the SOAP mapping or the BEEP mapping or in other future transport mappings that preserve application layer message boundaries. For me, if I were to change something, I would raise the question whether ]]>]]> can be removed from the SSH transport mapping. There are event driven implementations that do not really need it and on the other hand there are implementations that screw up if ]]>]]> is received somewhere in the payload due to a lack of proper quoting mechanisms. But strictly speaking, this should be discussed once RFC 4742 is up for revision, which is not the case yet as far as I know. > This is why I agree with Phil in that if we strictly use as > the framing we really would be better off just hanging up the > session when the XML goes bad. If an implementation receives garbage but can recover framing synchronization, an error should be generated. If an implementation can't recover framing or attempts to recover framing fail, there is nothing one can do other than closing the transport. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 02:32:19 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 778223A6A87; Tue, 2 Dec 2008 02:32:19 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A41B23A6A70 for ; Tue, 2 Dec 2008 02:32:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.268 X-Spam-Level: X-Spam-Status: No, score=-2.268 tagged_above=-999 required=5 tests=[AWL=-0.019, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MGEysYdTX9Fb for ; Tue, 2 Dec 2008 02:32:16 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 49CD33A6862 for ; Tue, 2 Dec 2008 02:32:15 -0800 (PST) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id F22D1C0064; Tue, 2 Dec 2008 11:32:10 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id c0uaPciJeDZw; Tue, 2 Dec 2008 11:32:01 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5353EC0063; Tue, 2 Dec 2008 11:32:01 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 2EF5288BBF9; Tue, 2 Dec 2008 11:32:00 +0100 (CET) Date: Tue, 2 Dec 2008 11:32:00 +0100 From: Juergen Schoenwaelder To: "James Balestriere (jbalestr)" Message-ID: <20081202103200.GB3183@elstar.local> Mail-Followup-To: "James Balestriere (jbalestr)" , Martin Bjorklund , netconf@ietf.org References: <20081202.083806.140166292.mbj@tail-f.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Tue, Dec 02, 2008 at 05:21:49PM +0800, James Balestriere (jbalestr) wrote: > My preference is to have ]]>]]> defined as the explicit framing > delimiter in the absence of transport defined framing. The sequence ]]>]]> is an SSH specific framing delimiter and there is no need to make this a feature for all transports. It espcapes me why anymore would use ]]>]]> in the SOAP mapping or the BEEP mapping or in other future transport mappings that preserve application layer message boundaries. For me, if I were to change something, I would raise the question whether ]]>]]> can be removed from the SSH transport mapping. There are event driven implementations that do not really need it and on the other hand there are implementations that screw up if ]]>]]> is received somewhere in the payload due to a lack of proper quoting mechanisms. But strictly speaking, this should be discussed once RFC 4742 is up for revision, which is not the case yet as far as I know. > This is why I agree with Phil in that if we strictly use as > the framing we really would be better off just hanging up the > session when the XML goes bad. If an implementation receives garbage but can recover framing synchronization, an error should be generated. If an implementation can't recover framing or attempts to recover framing fail, there is nothing one can do other than closing the transport. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 05:17:34 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3125F3A67A1; Tue, 2 Dec 2008 05:17:34 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 214043A67A1 for ; Tue, 2 Dec 2008 05:17:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.494 X-Spam-Level: X-Spam-Status: No, score=0.494 tagged_above=-999 required=5 tests=[AWL=0.009, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tvymCbpcXLe0 for ; Tue, 2 Dec 2008 05:17:32 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id CE76D3A6781 for ; Tue, 2 Dec 2008 05:17:31 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB2DGvtr010746; Tue, 2 Dec 2008 14:17:00 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 14:16:57 +0100 Message-ID: <493534DF.2040003@s3group.com> Date: Tue, 02 Dec 2008 14:15:11 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <20081201.083617.60857508.mbj@tail-f.com> <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> <20081202.085837.200252925.mbj@tail-f.com> In-Reply-To: <20081202.085837.200252925.mbj@tail-f.com> X-OriginalArrivalTime: 02 Dec 2008 13:16:57.0592 (UTC) FILETIME=[40C43F80:01C95480] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Hi, > > Washam Fan wrote: >> I think there exists a way that NETCONF session know underlying connection is >> invalid. So synchronizing candidate with running datastore can be triggered in >> this case. >> Am I missing something? > > I think Tomasz (correct me if I'm wrong) refers to a case where the > NETCONF server function is implemented as two separate entities - a > NETCONF stack which uses some internal mechanism to communicate with > the configuration data store, and if the configuration data store does > not support any transaction protocol, it will be difficult to > implement :rollback-on-error for example. > > I think this is by design - :rollback-on-error is an optional > capability which means that devices that cannot support it does not > advertise it. This design allows you to add basic NETCONF support to > simple or legacy devices. > > > /martin > No. The same problem occurs if the device is a NETCONF server. Consider the classical situation with setting two variables: Let's assume that we have an application that we want to manage usFrom netconf-bounces@ietf.org Tue Dec 2 05:17:34 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3125F3A67A1; Tue, 2 Dec 2008 05:17:34 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 214043A67A1 for ; Tue, 2 Dec 2008 05:17:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.494 X-Spam-Level: X-Spam-Status: No, score=0.494 tagged_above=-999 required=5 tests=[AWL=0.009, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tvymCbpcXLe0 for ; Tue, 2 Dec 2008 05:17:32 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id CE76D3A6781 for ; Tue, 2 Dec 2008 05:17:31 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB2DGvtr010746; Tue, 2 Dec 2008 14:17:00 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 14:16:57 +0100 Message-ID: <493534DF.2040003@s3group.com> Date: Tue, 02 Dec 2008 14:15:11 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <20081201.083617.60857508.mbj@tail-f.com> <13613.87.99.34.137.1228140408.squirrel@webmail.s3group.com> <20081202.085837.200252925.mbj@tail-f.com> In-Reply-To: <20081202.085837.200252925.mbj@tail-f.com> X-OriginalArrivalTime: 02 Dec 2008 13:16:57.0592 (UTC) FILETIME=[40C43F80:01C95480] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Hi, > > Washam Fan wrote: >> I think there exists a way that NETCONF session know underlying connection is >> invalid. So synchronizing candidate with running datastore can be triggered in >> this case. >> Am I missing something? > > I think Tomasz (correct me if I'm wrong) refers to a case where the > NETCONF server function is implemented as two separate entities - a > NETCONF stack which uses some internal mechanism to communicate with > the configuration data store, and if the configuration data store does > not support any transaction protocol, it will be difficult to > implement :rollback-on-error for example. > > I think this is by design - :rollback-on-error is an optional > capability which means that devices that cannot support it does not > advertise it. This design allows you to add basic NETCONF support to > simple or legacy devices. > > > /martin > No. The same problem occurs if the device is a NETCONF server. Consider the classical situation with setting two variables: Let's assume that we have an application that we want to maning the NETCONF protocol. The application and the NETCONF server work IN THE SAME process. The application defines two variables "x" and "y" that may be managed and the following API functions to manage: int getX() int getY() bool setX(int) bool setY(int) Let's imagine that we have prepared candidate configuration with the data for x and y and we would like to invoke "commit". During commit both functions are called in the following order: 1) setX() 2) setY() Let's assume that calling setX() function was successful but setY() function for any reasons returned an error. According to the NETCONF standard if commit is not successfull the state of the device must be reverted to the state before commit, citing section 8.3.4.1 from RFC 4741: "If the device is unable to commit all of the changes in the candidate configuration datastore, then the running configuration MUST remain unchanged." It means that either a server must try to set the x variable to the old state or the device must have an appropriate logic to do it on its own. Going further another problems may appear: 1) what if the setX() function reverting old x value also fails? 2) Transaction is not only connected with atomicity. What about isolation? I mean during commit, after setX() and before setY() function, the rest of the device can see the new value of the x variable what may mean inconsistent state of the device. Usually we cannot afford to assume that all operations will be successful. What do you think about it? Maybe RFC 4741 instead of the word "MUST" in the cited part above should use "SHOULD TRY TO". Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf age using the NETCONF protocol. The application and the NETCONF server work IN THE SAME process. The application defines two variables "x" and "y" that may be managed and the following API functions to manage: int getX() int getY() bool setX(int) bool setY(int) Let's imagine that we have prepared candidate configuration with the data for x and y and we would like to invoke "commit". During commit both functions are called in the following order: 1) setX() 2) setY() Let's assume that calling setX() function was successful but setY() function for any reasons returned an error. According to the NETCONF standard if commit is not successfull the state of the device must be reverted to the state before commit, citing section 8.3.4.1 from RFC 4741: "If the device is unable to commit all of the changes in the candidate configuration datastore, then the running configuration MUST remain unchanged." It means that either a server must try to set the x variable to the old state or the device must have an appropriate logic to do it on its own. Going further another problems may appear: 1) what if the setX() function reverting old x value also fails? 2) Transaction is not only connected with atomicity. What about isolation? I mean during commit, after setX() and before setY() function, the rest of the device can see the new value of the x variable what may mean inconsistent state of the device. Usually we cannot afford to assume that all operations will be successful. What do you think about it? Maybe RFC 4741 instead of the word "MUST" in the cited part above should use "SHOULD TRY TO". Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 05:46:42 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BCDD63A6957; Tue, 2 Dec 2008 05:46:42 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F13413A6957 for ; Tue, 2 Dec 2008 05:46:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.035 X-Spam-Level: X-Spam-Status: No, score=-2.035 tagged_above=-999 required=5 tests=[AWL=0.011, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D5HD8ZXQQ8VK for ; Tue, 2 Dec 2008 05:46:41 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 28E9E3A68B6 for ; Tue, 2 Dec 2008 05:46:40 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id DF66376C310; Tue, 2 Dec 2008 14:46:35 +0100 (CET) Date: Tue, 02 Dec 2008 14:46:35 +0100 (CET) Message-Id: <20081202.144635.182534023.mbj@tail-f.com> To: tomasz.mikolajczyk@s3group.com From: Martin Bjorklund In-Reply-To: <493534DF.2040003@s3group.com> References: <20081202.085837.200252925.mbj@tail-f.com> <493534DF.2040003@s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk wrote: > Martin Bjorklund wrote: > > Hi, > > > > Washam Fan wrote: > >> I think there exists a way that NETCONF session know underlying connection > >> is > >> invalid. So synchronizing candidate with running datastore can be triggered > >> in > >> this case. > >> Am I missing something? > > > > I think Tomasz (correct me if I'm wrong) refers to a case where the > > NETCONF server function is implemented as two separate entities - a > > NETCONF stack which uses some internal mechanism to communicate with > > the configuration data store, and if the configuration data store does > > not support any transaction protocol, it will be difficult to > > implement :rollback-on-error for example. > > > > I think this is by design - :rollback-on-error is an optional > > capability which means that devices that cannot support it does not > > advertise it. This design allows you to add basic NETCONF support to > > simple or legacy devices. > > > > > > /martin > > > > No. The same problem occurs if the device is a NETCONF server. Yes of course. > "If the device is unable to commit all of the changes in the > candidate configuration datastore, then the running > configuration MUST remain unchanged." [...] > What do you think about it? Maybe RFC 4741 instead of the word "MUST" in the > cited part above should use "SHOULD TRY TO". No! Devices that cannot support :rollback-on-error should not advertise it. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 05:46:42 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BCDD63A6957; Tue, 2 Dec 2008 05:46:42 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F13413A6957 for ; Tue, 2 Dec 2008 05:46:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.035 X-Spam-Level: X-Spam-Status: No, score=-2.035 tagged_above=-999 required=5 tests=[AWL=0.011, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D5HD8ZXQQ8VK for ; Tue, 2 Dec 2008 05:46:41 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 28E9E3A68B6 for ; Tue, 2 Dec 2008 05:46:40 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id DF66376C310; Tue, 2 Dec 2008 14:46:35 +0100 (CET) Date: Tue, 02 Dec 2008 14:46:35 +0100 (CET) Message-Id: <20081202.144635.182534023.mbj@tail-f.com> To: tomasz.mikolajczyk@s3group.com From: Martin Bjorklund In-Reply-To: <493534DF.2040003@s3group.com> References: <20081202.085837.200252925.mbj@tail-f.com> <493534DF.2040003@s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk wrote: > Martin Bjorklund wrote: > > Hi, > > > > Washam Fan wrote: > >> I think there exists a way that NETCONF session know underlying connection > >> is > >> invalid. So synchronizing candidate with running datastore can be triggered > >> in > >> this case. > >> Am I missing something? > > > > I think Tomasz (correct me if I'm wrong) refers to a case where the > > NETCONF server function is implemented as two separate entities - a > > NETCONF stack which uses some internal mechanism to communicate with > > the configuration data store, and if the configuration data store does > > not support any transaction protocol, it will be difficult to > > implement :rollback-on-error for example. > > > > I think this is by design - :rollback-on-error is an optional > > capability which means that devices that cannot support it does not > > advertise it. This design allows you to add basic NETCONF support to > > simple or legacy devices. > > > > > > /martin > > > > No. The same problem occurs if the device is a NETCONF server. Yes of course. > "If the device is unable to commit all of the changes in the > candidate configuration datastore, then the running > configuration MUST remain unchanged." [...] > What do you think about it? Maybe RFC 4741 instead of the word "MUST" in the > cited part above should use "SHOULD TRY TO". No! Devices that cannot support :rollback-on-error should not advertise it. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 06:30:25 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B635428C179; Tue, 2 Dec 2008 06:30:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DFEAA28C179 for ; Tue, 2 Dec 2008 06:30:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.494 X-Spam-Level: X-Spam-Status: No, score=0.494 tagged_above=-999 required=5 tests=[AWL=0.008, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gbj8-sm5VXUW for ; Tue, 2 Dec 2008 06:30:23 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id AA46728C158 for ; Tue, 2 Dec 2008 06:30:22 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB2EU3KQ011282; Tue, 2 Dec 2008 15:30:06 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 15:30:03 +0100 Message-ID: <49354601.3040304@s3group.com> Date: Tue, 02 Dec 2008 15:28:17 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <20081202.085837.200252925.mbj@tail-f.com> <493534DF.2040003@s3group.com> <20081202.144635.182534023.mbj@tail-f.com> In-Reply-To: <20081202.144635.182534023.mbj@tail-f.com> X-OriginalArrivalTime: 02 Dec 2008 14:30:03.0650 (UTC) FILETIME=[770F9620:01C9548A] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> Martin Bjorklund wrote: >>> Hi, >>> >>> Washam Fan wrote: >>>> I think there exists a way that NETCONF session know underlying connection >>>> is >>>> invalid. So synchronizing candidate with running datastore can be triggered >>>> in >>>> this case. >>>> Am I missing something? >>> I think Tomasz (correct me if I'm wrong) refers to a case where the >>> NETCONF server function is implemented as two separate entities - a >>> NETCONF stack which uses some internal mechanism to communicate with >>> the configuration data store, and if the configuration data store does >>> not support any transaction protocol, it will be difficult to >>> implement :rollback-on-error for example. >>> >>> I think this is by design - :rollback-on-error is an optional >>> capability which means that devices that cannot support it does not >>> advertise it. This design allows you to add basic NETCONF support to >>> simple or legacy devices. >>> >>> >>> /martin >>> >> No. The same problem occurs if the device is a NETCONF server. > > Yes of course. > > >> "If the device is unable to commit all of the changes in the >> candidate configuration datastore, then the running >> configuration MUST remain unchanged." > > [...] > >> What do you think about it? Maybe RFC 4741 instead of the word "MUST" in the >> cited part above should use "SHOULD TRY TO". > > No! Devices that cannot support :rollback-on-error should not > advertise it. NETCONF server cannot support commit operation unless devices guarantee that ALL operations NEVER fail. However, as you know it is very unlikely. So going further if successful commit operation cannot be guaranteed, the :candidate capability cannot be advertised. Without :candidate capability the server may address only running configuration (and perhaps startup) and then most of the NETCONF features immediately disappear. Remaining functionality of the protocol is not more powerful than existing well known standards. It must be clearly said and understood what it means in reality and what a management layer expects from the devices creators, if they want the NETCONF support. It also means that probably most of the existing devices are not prepared on its own to be managed via NETCONF. Another question: does it make sense to define abilities for rollback and commit operations in the separate capabilities? > > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 06:30:25 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B635428C179; Tue, 2 Dec 2008 06:30:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DFEAA28C179 for ; Tue, 2 Dec 2008 06:30:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.494 X-Spam-Level: X-Spam-Status: No, score=0.494 tagged_above=-999 required=5 tests=[AWL=0.008, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gbj8-sm5VXUW for ; Tue, 2 Dec 2008 06:30:23 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id AA46728C158 for ; Tue, 2 Dec 2008 06:30:22 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB2EU3KQ011282; Tue, 2 Dec 2008 15:30:06 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Dec 2008 15:30:03 +0100 Message-ID: <49354601.3040304@s3group.com> Date: Tue, 02 Dec 2008 15:28:17 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <20081202.085837.200252925.mbj@tail-f.com> <493534DF.2040003@s3group.com> <20081202.144635.182534023.mbj@tail-f.com> In-Reply-To: <20081202.144635.182534023.mbj@tail-f.com> X-OriginalArrivalTime: 02 Dec 2008 14:30:03.0650 (UTC) FILETIME=[770F9620:01C9548A] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: netconf@ietf.org Subject: Re: [Netconf] :candidate vs :writable-running X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> Martin Bjorklund wrote: >>> Hi, >>> >>> Washam Fan wrote: >>>> I think there exists a way that NETCONF session know underlying connection >>>> is >>>> invalid. So synchronizing candidate with running datastore can be triggered >>>> in >>>> this case. >>>> Am I missing something? >>> I think Tomasz (correct me if I'm wrong) refers to a case where the >>> NETCONF server function is implemented as two separate entities - a >>> NETCONF stack which uses some internal mechanism to communicate with >>> the configuration data store, and if the configuration data store does >>> not support any transaction protocol, it will be difficult to >>> implement :rollback-on-error for example. >>> >>> I think this is by design - :rollback-on-error is an optional >>> capability which means that devices that cannot support it does not >>> advertise it. This design allows you to add basic NETCONF support to >>> simple or legacy devices. >>> >>> >>> /martin >>> >> No. The same problem occurs if the device is a NETCONF server. > > Yes of course. > > >> "If the device is unable to commit all of the changes in the >> candidate configuration datastore, then the running >> configuration MUST remain unchanged." > > [...] > >> What do you think about it? Maybe RFC 4741 instead of the word "MUST" in the >> cited part above should use "SHOULD TRY TO". > > No! Devices that cannot support :rollback-on-error should not > advertise it. NETCONF server cannot support commit operation unless devices guarantee that ALL operations NEVER fail. However, as you know it is very unlikely. So going further if successful commit operation cannot be guaranteed, the :candidate capability cannot be advertised. Without :candidate capability the server may address only running configuration (and perhaps startup) and then most of the NETCONF features immediately disappear. Remaining functionality of the protocol is not more powerful than existing well known standards. It must be clearly said and understood what it means in reality and what a management layer expects from the devices creators, if they want the NETCONF support. It also means that probably most of the existing devices are not prepared on its own to be managed via NETCONF. Another question: does it make sense to define abilities for rollback and commit operations in the separate capabilities? > > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 2 10:44:41 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2AFE63A6B34; Tue, 2 Dec 2008 10:44:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A1EF03A6A0A for ; Tue, 2 Dec 2008 10:44:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Z-nFtUApWL9 for ; Tue, 2 Dec 2008 10:44:38 -0800 (PST) Received: from exprod7og111.obsmtp.com (exprod7og111.obsmtp.com [64.18.2.175]) by core3.amsl.com (Postfix) with ESMTP id EF5513A692B for ; Tue, 2 Dec 2008 10:44:37 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob111.postini.com ([64.18.6.12]) with SMTP ID DSNKSTWCCputXznlhPaysLGrQJERMYmqP2Gh@postini.com; Tue, 02 Dec 2008 10:44:34 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Tue, 2 Dec 2008 10:43:06 -0800 Received: from p-emlb01-sac.jnpr.net ([66.129.254.46]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 2 Dec 2008 10:43:06 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 2 Dec 2008 10:43:05 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 2 Dec 2008 10:43:05 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB2Ih4M40362; Tue, 2 Dec 2008 10:43:05 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB2IbnT9002400; Tue, 2 Dec 2008 18:37:51 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812021837.mB2IbnT9002400@idle.juniper.net> To: Tomasz Mikolajczyk In-Reply-To: <49350A72.3010109@s3group.com> Date: Tue, 2 Dec 2008 13:37:48 -0500 From: Phil Shafer X-OriginalArrivalTime: 02 Dec 2008 18:43:05.0563 (UTC) FILETIME=[D02FAAB0:01C954AD] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk writes: >It's very illogical. Is it done on purpose or is kind of side effect? These questions all relate to the model with which locks are used. The current NETCONF model is that there are two cases. Either the applications treat the datastore as "owned" by one client, where only that clients is permitted to make changes, or the datastore is open to all applications, and these appplications can make changes at any time. In the first model, the lock is used to prevent other applications from changing the config while my application is changing it. This model lends itself to theFrom netconf-bounces@ietf.org Tue Dec 2 10:44:41 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2AFE63A6B34; Tue, 2 Dec 2008 10:44:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A1EF03A6A0A for ; Tue, 2 Dec 2008 10:44:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Z-nFtUApWL9 for ; Tue, 2 Dec 2008 10:44:38 -0800 (PST) Received: from exprod7og111.obsmtp.com (exprod7og111.obsmtp.com [64.18.2.175]) by core3.amsl.com (Postfix) with ESMTP id EF5513A692B for ; Tue, 2 Dec 2008 10:44:37 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob111.postini.com ([64.18.6.12]) with SMTP ID DSNKSTWCCputXznlhPaysLGrQJERMYmqP2Gh@postini.com; Tue, 02 Dec 2008 10:44:34 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Tue, 2 Dec 2008 10:43:06 -0800 Received: from p-emlb01-sac.jnpr.net ([66.129.254.46]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 2 Dec 2008 10:43:06 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 2 Dec 2008 10:43:05 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 2 Dec 2008 10:43:05 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB2Ih4M40362; Tue, 2 Dec 2008 10:43:05 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB2IbnT9002400; Tue, 2 Dec 2008 18:37:51 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812021837.mB2IbnT9002400@idle.juniper.net> To: Tomasz Mikolajczyk In-Reply-To: <49350A72.3010109@s3group.com> Date: Tue, 2 Dec 2008 13:37:48 -0500 From: Phil Shafer X-OriginalArrivalTime: 02 Dec 2008 18:43:05.0563 (UTC) FILETIME=[D02FAAB0:01C954AD] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk writes: >It's very illogical. Is it done on purpose or is kind of side effect? These questions all relate to the model with which locks are used. The current NETCONF model is that there are two cases. Either the applications treat the datastore as "owned" by one client, where only that clients is permitted to make changes, or the datastore is open to all applications, and these appplications can make changes at any time. In the first model, the lock is used to prevent other applications from changing the config while my application is changing it. This model lends itself candidate datastore, where I can make changes, check them, record them, and/or commit them as my app sees fit. I can use the "confirmed commit" mechanism to ensure that my change (and the box) are working well before releasing the lock to allow other applications to make changes. My changes can be logged accurately and the responsibility for any errors can be placed at the foot of my app. The the second model, many applications can make changes to the datastore without concern for their interactions. This concern may be addressed in out-of-band mechanisms, or could be the outcome of the network management architecture in use by the network provider, but no locking is needed. This model works well with the running datastore, where the config changes immediately affect the device and the audit mechanism would be tailored to a single payload. Partial locking takes a hybrid approach, where the applications aren't concerned with each other, but still want some measure of assuredness that no one is changing the parts of the datastore the app consider it's own. One could view it as "trust but verify", but IMHO it leaves the server open to long term locks that aren't condusive to simple clients that want to perform simple operations like "backup"; an app parked with a the partial lock prevents the client from getting the global lock needed to be able to save the complete config accurately. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf to the candidate datastore, where I can make changes, check them, record them, and/or commit them as my app sees fit. I can use the "confirmed commit" mechanism to ensure that my change (and the box) are working well before releasing the lock to allow other applications to make changes. My changes can be logged accurately and the responsibility for any errors can be placed at the foot of my app. The the second model, many applications can make changes to the datastore without concern for their interactions. This concern may be addressed in out-of-band mechanisms, or could be the outcome of the network management architecture in use by the network provider, but no locking is needed. This model works well with the running datastore, where the config changes immediately affect the device and the audit mechanism would be tailored to a single payload. Partial locking takes a hybrid approach, where the applications aren't concerned with each other, but still want some measure of assuredness that no one is changing the parts of the datastore the app consider it's own. One could view it as "trust but verify", but IMHO it leaves the server open to long term locks that aren't condusive to simple clients that want to perform simple operations like "backup"; an app parked with a the partial lock prevents the client from getting the global lock needed to be able to save the complete config accurately. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 01:16:57 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 52B0228B797; Wed, 3 Dec 2008 01:16:57 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4FCE93A6B48 for ; Wed, 3 Dec 2008 01:16:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.163 X-Spam-Level: X-Spam-Status: No, score=-6.163 tagged_above=-999 required=5 tests=[AWL=0.086, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vU9aBogV5cnb for ; Wed, 3 Dec 2008 01:16:55 -0800 (PST) Received: from mailgw3.ericsson.se (mailgw3.ericsson.se [193.180.251.60]) by core3.amsl.com (Postfix) with ESMTP id 5D4C63A6B33 for ; Wed, 3 Dec 2008 01:16:55 -0800 (PST) Received: from mailgw3.ericsson.se (unknown [127.0.0.1]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id E986520BE9; Wed, 3 Dec 2008 10:16:49 +0100 (CET) X-AuditID: c1b4fb3c-af761bb00000304c-5a-49364e819ff3 Received: from esealmw126.eemea.ericsson.se (unknown [153.88.254.123]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id D833320D38; Wed, 3 Dec 2008 10:16:49 +0100 (CET) Received: from esealmw126.eemea.ericsson.se ([153.88.254.174]) by esealmw126.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 10:16:49 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw126.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 10:16:49 +0100 Message-ID: <49364E80.8010203@ericsson.com> Date: Wed, 03 Dec 2008 10:16:48 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: Washam Fan , Martin Bjorklund References: In-Reply-To: X-OriginalArrivalTime: 03 Dec 2008 09:16:49.0120 (UTC) FILETIME=[DF0FA600:01C95527] X-Brightmail-Tracker: AAAAAA== Cc: netconf@ietf.org Subject: Re: [Netconf] global vs. partial-lock X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hello, Washam Fan wrote: > Hi, > global lock addressed failure scenarioes including outstanding changes to candidate datastore which was not addressed by partial-lock We did not want to address this, as this might have surprising side effects. See http://www.ietf.org/mail-archive/web/netconf/current/msg03995.html We wanted a lock that is simple to understand that locks the nodes, and no side effects. > partial lock addressed faulure scenarioes including outstanding commit to running datastore wich was not addressed by global lock > How do you think about them. This is case is common for global and partial locks. I hope Martin will add it to the 4741bis draft. Balazs _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 01:16:57 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 52B0228B797; Wed, 3 Dec 2008 01:16:57 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4FCE93A6B48 for ; Wed, 3 Dec 2008 01:16:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.163 X-Spam-Level: X-Spam-Status: No, score=-6.163 tagged_above=-999 required=5 tests=[AWL=0.086, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vU9aBogV5cnb for ; Wed, 3 Dec 2008 01:16:55 -0800 (PST) Received: from mailgw3.ericsson.se (mailgw3.ericsson.se [193.180.251.60]) by core3.amsl.com (Postfix) with ESMTP id 5D4C63A6B33 for ; Wed, 3 Dec 2008 01:16:55 -0800 (PST) Received: from mailgw3.ericsson.se (unknown [127.0.0.1]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id E986520BE9; Wed, 3 Dec 2008 10:16:49 +0100 (CET) X-AuditID: c1b4fb3c-af761bb00000304c-5a-49364e819ff3 Received: from esealmw126.eemea.ericsson.se (unknown [153.88.254.123]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id D833320D38; Wed, 3 Dec 2008 10:16:49 +0100 (CET) Received: from esealmw126.eemea.ericsson.se ([153.88.254.174]) by esealmw126.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 10:16:49 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw126.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 10:16:49 +0100 Message-ID: <49364E80.8010203@ericsson.com> Date: Wed, 03 Dec 2008 10:16:48 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: Washam Fan , Martin Bjorklund References: In-Reply-To: X-OriginalArrivalTime: 03 Dec 2008 09:16:49.0120 (UTC) FILETIME=[DF0FA600:01C95527] X-Brightmail-Tracker: AAAAAA== Cc: netconf@ietf.org Subject: Re: [Netconf] global vs. partial-lock X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hello, Washam Fan wrote: > Hi, > global lock addressed failure scenarioes including outstanding changes to candidate datastore which was not addressed by partial-lock We did not want to address this, as this might have surprising side effects. See http://www.ietf.org/mail-archive/web/netconf/current/msg03995.html We wanted a lock that is simple to understand that locks the nodes, and no side effects. > partial lock addressed faulure scenarioes including outstanding commit to running datastore wich was not addressed by global lock > How do you think about them. This is case is common for global and partial locks. I hope Martin will add it to the 4741bis draft. Balazs _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 04:34:45 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F074C3A6895; Wed, 3 Dec 2008 04:34:44 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 840813A6895 for ; Wed, 3 Dec 2008 04:34:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.493 X-Spam-Level: X-Spam-Status: No, score=0.493 tagged_above=-999 required=5 tests=[AWL=0.008, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lt41zxhdnhSb for ; Wed, 3 Dec 2008 04:34:42 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 2B52A3A6861 for ; Wed, 3 Dec 2008 04:34:41 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB3CYU93017787; Wed, 3 Dec 2008 13:34:33 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 13:34:30 +0100 Message-ID: <49367C69.4090008@s3group.com> Date: Wed, 03 Dec 2008 13:32:41 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <49301058.1050609@s3group.com> <20081201.092615.89733536.mbj@tail-f.com> <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> <20081202.082752.179532099.mbj@tail-f.com> In-Reply-To: <20081202.082752.179532099.mbj@tail-f.com> X-OriginalArrivalTime: 03 Dec 2008 12:34:30.0389 (UTC) FILETIME=[7CEDAA50:01C95543] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > "Tomasz Mikolajczyk" wrote: >> Martin Bjorklund wrote: >>> The server should return the streams subtree, either once or twice. >>> It is a bit unlcear if the "filter output" is supposed to be a proper >>> set or not. Since it is a subtree filter, it should not return an >>> error. >> But the rules have to be clear. > > Of course. This should be clarified in 4741bis. > >> What in your opinion should return the >> server for the following request based on examples from RFC 4741 section >> 6.4: >> >> >> >> >> >> >> >> >> >> root >> >> >> >> >> >> >> >> Is the second occurrence of the "name" should overwrite the first one? > > I think you meant tFrom netconf-bounces@ietf.org Wed Dec 3 04:34:45 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F074C3A6895; Wed, 3 Dec 2008 04:34:44 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 840813A6895 for ; Wed, 3 Dec 2008 04:34:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.493 X-Spam-Level: X-Spam-Status: No, score=0.493 tagged_above=-999 required=5 tests=[AWL=0.008, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lt41zxhdnhSb for ; Wed, 3 Dec 2008 04:34:42 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 2B52A3A6861 for ; Wed, 3 Dec 2008 04:34:41 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB3CYU93017787; Wed, 3 Dec 2008 13:34:33 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 13:34:30 +0100 Message-ID: <49367C69.4090008@s3group.com> Date: Wed, 03 Dec 2008 13:32:41 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <49301058.1050609@s3group.com> <20081201.092615.89733536.mbj@tail-f.com> <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> <20081202.082752.179532099.mbj@tail-f.com> In-Reply-To: <20081202.082752.179532099.mbj@tail-f.com> X-OriginalArrivalTime: 03 Dec 2008 12:34:30.0389 (UTC) FILETIME=[7CEDAA50:01C95543] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > "Tomasz Mikolajczyk" wrote: >> Martin Bjorklund wrote: >>> The server should return the streams subtree, either once or twice. >>> It is a bit unlcear if the "filter output" is supposed to be a proper >>> set or not. Since it is a subtree filter, it should not return an >>> error. >> But the rules have to be clear. > > Of course. This should be clarified in 4741bis. > >> What in your opinion should return the >> server for the following request based on examples from RFC 4741 section >> 6.4: >> >> >> >> >> >> >> >> >> >> root >> >> >> >> >> >> >> >> Is the second occurrence of the "name" should overwrite the first one? > > I think you meant that thhat the request should be: > > > > > > > > > > > root > > > > > > > > > The fist "name" is a content match node, which means that the "user"s > with the name "root" are selected. The second "name" is a selection > node, which means that from the users with the name "root", only the > "name" element is selected (the other siblings are suppressed), so > assuming that there is a user called "root", you'd get: > > message-id="101"> > > > > > root > > > > > > > /martin > Thank you. The section 6.2.1 from RFC 4741 says: "If namespaces are used, then the filter output will only include elements from the specified namespace." What about filter input? Question is, whether the server should analyze unknown elements. Assuming that the server has only NETCONF event stream defined, how the response should look like if an unknown tag is used (i.e. a tag unspecified in the namespace), for instance: NETCONF ]]>]]> Is it adequate to the following request: unknown ]]>]]> Note that data model used for the event streams has slightly different type. It's kind of static model (xml structure is always constant) and data models used in RFC 4741 are dynamic (xml structure depends on the content of the managed device). In the dynamic DM the generic NETCONF server cannot predict how the DM may look like, so such "unknown_tag" at the time of the request parsing cannot be treated as unknown. In the static model it's obvious which tags are known and unknown. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf e request should be: > > > > > > > > > > > root > > > > > > > > > The fist "name" is a content match node, which means that the "user"s > with the name "root" are selected. The second "name" is a selection > node, which means that from the users with the name "root", only the > "name" element is selected (the other siblings are suppressed), so > assuming that there is a user called "root", you'd get: > > message-id="101"> > > > > > root > > > > > > > /martin > Thank you. The section 6.2.1 from RFC 4741 says: "If namespaces are used, then the filter output will only include elements from the specified namespace." What about filter input? Question is, whether the server should analyze unknown elements. Assuming that the server has only NETCONF event stream defined, how the response should look like if an unknown tag is used (i.e. a tag unspecified in the namespace), for instance: NETCONF ]]>]]> Is it adequate to the following request: unknown ]]>]]> Note that data model used for the event streams has slightly different type. It's kind of static model (xml structure is always constant) and data models used in RFC 4741 are dynamic (xml structure depends on the content of the managed device). In the dynamic DM the generic NETCONF server cannot predict how the DM may look like, so such "unknown_tag" at the time of the request parsing cannot be treated as unknown. In the static model it's obvious which tags are known and unknown. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 05:17:27 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60B5F3A69EA; Wed, 3 Dec 2008 05:17:27 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8ED823A694F for ; Wed, 3 Dec 2008 05:17:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.493 X-Spam-Level: X-Spam-Status: No, score=0.493 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9a-b3LYcN+zD for ; Wed, 3 Dec 2008 05:17:24 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 8A2123A69FE for ; Wed, 3 Dec 2008 05:17:24 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB3DHFFt018016 for ; Wed, 3 Dec 2008 14:17:17 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 14:17:15 +0100 Message-ID: <4936866E.50308@s3group.com> Date: Wed, 03 Dec 2008 14:15:26 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: NETCONF X-OriginalArrivalTime: 03 Dec 2008 13:17:15.0593 (UTC) FILETIME=[75E8BB90:01C95549] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Subject: [Netconf] multiple data models in one filter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, Assuming that the following filter: returns the following output: 1 2 11 22 , and 5 6 55 66 I wonder how the response would look like for the following filter: Any suggestions? Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 05:17:27 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60B5F3A69EA; Wed, 3 Dec 2008 05:17:27 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8ED823A694F for ; Wed, 3 Dec 2008 05:17:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.493 X-Spam-Level: X-Spam-Status: No, score=0.493 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9a-b3LYcN+zD for ; Wed, 3 Dec 2008 05:17:24 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 8A2123A69FE for ; Wed, 3 Dec 2008 05:17:24 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB3DHFFt018016 for ; Wed, 3 Dec 2008 14:17:17 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 14:17:15 +0100 Message-ID: <4936866E.50308@s3group.com> Date: Wed, 03 Dec 2008 14:15:26 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: NETCONF X-OriginalArrivalTime: 03 Dec 2008 13:17:15.0593 (UTC) FILETIME=[75E8BB90:01C95549] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Subject: [Netconf] multiple data models in one filter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, Assuming that the following filter: returns the following output: 1 2 11 22 , and 5 6 55 66 I wonder how the response would look like for the following filter: Any suggestions? Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 05:31:15 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DB0303A6983; Wed, 3 Dec 2008 05:31:15 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A59B23A69EA for ; Wed, 3 Dec 2008 05:31:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.065 X-Spam-Level: X-Spam-Status: No, score=-1.065 tagged_above=-999 required=5 tests=[AWL=0.185, BAYES_00=-2.599, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IpSkCEXPsphK for ; Wed, 3 Dec 2008 05:31:14 -0800 (PST) Received: from office2.cesnet.cz (office2.cesnet.cz [195.113.144.244]) by core3.amsl.com (Postfix) with ESMTP id DDF4B3A67B3 for ; Wed, 3 Dec 2008 05:31:13 -0800 (PST) Received: from [172.29.2.201] (asus-gx.lhotka.cesnet.cz [195.113.161.161]) by office2.cesnet.cz (Postfix) with ESMTP id 4D517D800C5 for ; Wed, 3 Dec 2008 14:31:09 +0100 (CET) From: Ladislav Lhotka To: netconf@ietf.org In-Reply-To: <4936866E.50308@s3group.com> References: <4936866E.50308@s3group.com> Organization: CESNET Date: Wed, 03 Dec 2008 14:31:09 +0100 Message-Id: <1228311069.6315.89.camel@missotis> Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 Subject: Re: [Netconf] multiple data models in one filter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org VG9tYXN6IE1pa29sYWpjenlrIHDDrcWhZSB2IFN0IDAzLiAxMi4gMjAwOCB2IDE0OjE1ICswMTAw OgoKPiBJIHdvbmRlciBob3cgdGhlIHJlc3BvbnNlIHdvdWxkIGxvb2sgbGlrZSBmb3IgdGhlIGZv bGxvd2luZyBmaWx0ZXI6Cj4gCj4gPGZpbHRlciB0eXBlPSJzdWJ0cmVlIj4KPiAgICAgPHRvcCB4 bWxucz0ibmFtZXNwYWNlX2EiIHhtbG5zOng9Im5hbWVzcGFjZV94Ij4KPiAgICAgICAgIDx4OnRv cC8+Cj4gICAgIDwvdG9wPgo+IDwvZmlsdGVyPgo+IAo+IEFueSBzdWdnZXN0aW9ucz8KCklNTyB0 aGUgcmVwbHkgd2lsbCBiZSBlbXB0eSwgdGhlIHR3byB0b3AgZWxlbWVudHMgc2hvdWxkIGJlIHNp YmxpbmdzLgoKTGFkYQoKPiAKPiBUb21hc3oKPiAKPiBUaGUgaW5mb3JtYXRpb24gY29udGFpbmVk IGluIHRoaXMgZS1tYWlsIGFuZCBpbiBhbnkgYXR0YWNobWVudHMgaXMgY29uZmlkZW50aWFsIGFu ZCBpcyBkZXNpZ25hdGVkIHNvbGVseSBmb3IgdGhlIGF0dGVudGlvbiBvZiB0aGUgaW50ZW5kZWQg cmVjaXBpZW50KHMpLiBJZiB5b3UgYXJlIG5vdCBhbiBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBt dXN0IG5vdCB1c2UsIGRpc2Nsb3NlLCBjb3B5LCBkaXN0cmlidXRlIG9yIHJldGFpbiB0aGlzIGUt bWFpbCBvciBhbnkgcGFydCB0aGVyZW9mLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGUtbWFp bCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5k IGRlbGV0ZSBhbGwgY29waWVzIG9mIHRoaXMgZS1tYWlsIGZyb20geW91ciBjb21wdXRlciBzeXN0 ZW0ocykuCj4gUGxlYXNlIGRpcmVjdCBhbnkgYWRkaXRpb25hbCBxdWVyaWVzIHRvOiBjb21tdW5p Y2F0aW9uc0BzM2dyb3VwLmNvbS4KPiBUaGFuayBZb3UuCj4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18KPiBOZXRjb25mIG1haWxpbmcgbGlzdAo+IE5ldGNv bmZAaWV0Zi5vcmcKPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNv bmYKLS0gCkxhZGlzbGF2IExob3RrYSwgQ0VTTkVUClBHUCBLZXkgSUQ6IEU3NEU4QzBDCgpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpOZXRjb25mIG1haWxp bmcgbGlzdApOZXRjb25mQGlldGYub3JnCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vbmV0Y29uZgo= From netconf-bounces@ietf.org Wed Dec 3 05:31:15 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DB0303A6983; Wed, 3 Dec 2008 05:31:15 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A59B23A69EA for ; Wed, 3 Dec 2008 05:31:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.065 X-Spam-Level: X-Spam-Status: No, score=-1.065 tagged_above=-999 required=5 tests=[AWL=0.185, BAYES_00=-2.599, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IpSkCEXPsphK for ; Wed, 3 Dec 2008 05:31:14 -0800 (PST) Received: from office2.cesnet.cz (office2.cesnet.cz [195.113.144.244]) by core3.amsl.com (Postfix) with ESMTP id DDF4B3A67B3 for ; Wed, 3 Dec 2008 05:31:13 -0800 (PST) Received: from [172.29.2.201] (asus-gx.lhotka.cesnet.cz [195.113.161.161]) by office2.cesnet.cz (Postfix) with ESMTP id 4D517D800C5 for ; Wed, 3 Dec 2008 14:31:09 +0100 (CET) From: Ladislav Lhotka To: netconf@ietf.org In-Reply-To: <4936866E.50308@s3group.com> References: <4936866E.50308@s3group.com> Organization: CESNET Date: Wed, 03 Dec 2008 14:31:09 +0100 Message-Id: <1228311069.6315.89.camel@missotis> Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 Subject: Re: [Netconf] multiple data models in one filter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org VG9tYXN6IE1pa29sYWpjenlrIHDDrcWhZSB2IFN0IDAzLiAxMi4gMjAwOCB2IDE0OjE1ICswMTAw OgoKPiBJIHdvbmRlciBob3cgdGhlIHJlc3BvbnNlIHdvdWxkIGxvb2sgbGlrZSBmb3IgdGhlIGZv bGxvd2luZyBmaWx0ZXI6Cj4gCj4gPGZpbHRlciB0eXBlPSJzdWJ0cmVlIj4KPiAgICAgPHRvcCB4 bWxucz0ibmFtZXNwYWNlX2EiIHhtbG5zOng9Im5hbWVzcGFjZV94Ij4KPiAgICAgICAgIDx4OnRv cC8+Cj4gICAgIDwvdG9wPgo+IDwvZmlsdGVyPgo+IAo+IEFueSBzdWdnZXN0aW9ucz8KCklNTyB0 aGUgcmVwbHkgd2lsbCBiZSBlbXB0eSwgdGhlIHR3byB0b3AgZWxlbWVudHMgc2hvdWxkIGJlIHNp YmxpbmdzLgoKTGFkYQoKPiAKPiBUb21hc3oKPiAKPiBUaGUgaW5mb3JtYXRpb24gY29udGFpbmVk IGluIHRoaXMgZS1tYWlsIGFuZCBpbiBhbnkgYXR0YWNobWVudHMgaXMgY29uZmlkZW50aWFsIGFu ZCBpcyBkZXNpZ25hdGVkIHNvbGVseSBmb3IgdGhlIGF0dGVudGlvbiBvZiB0aGUgaW50ZW5kZWQg cmVjaXBpZW50KHMpLiBJZiB5b3UgYXJlIG5vdCBhbiBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBt dXN0IG5vdCB1c2UsIGRpc2Nsb3NlLCBjb3B5LCBkaXN0cmlidXRlIG9yIHJldGFpbiB0aGlzIGUt bWFpbCBvciBhbnkgcGFydCB0aGVyZW9mLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGUtbWFp bCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5k IGRlbGV0ZSBhbGwgY29waWVzIG9mIHRoaXMgZS1tYWlsIGZyb20geW91ciBjb21wdXRlciBzeXN0 ZW0ocykuCj4gUGxlYXNlIGRpcmVjdCBhbnkgYWRkaXRpb25hbCBxdWVyaWVzIHRvOiBjb21tdW5p Y2F0aW9uc0BzM2dyb3VwLmNvbS4KPiBUaGFuayBZb3UuCj4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18KPiBOZXRjb25mIG1haWxpbmcgbGlzdAo+IE5ldGNv bmZAaWV0Zi5vcmcKPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNv bmYKLS0gCkxhZGlzbGF2IExob3RrYSwgQ0VTTkVUClBHUCBLZXkgSUQ6IEU3NEU4QzBDCgpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpOZXRjb25mIG1haWxp bmcgbGlzdApOZXRjb25mQGlldGYub3JnCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vbmV0Y29uZgo= From netconf-bounces@ietf.org Wed Dec 3 08:23:39 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 78CD028C0DD; Wed, 3 Dec 2008 08:23:39 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D5F0B3A67E9 for ; Wed, 3 Dec 2008 08:23:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.017 X-Spam-Level: X-Spam-Status: No, score=-2.017 tagged_above=-999 required=5 tests=[AWL=0.248, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jDvI584BpEQn for ; Wed, 3 Dec 2008 08:23:37 -0800 (PST) Received: from smtp119.sbc.mail.sp1.yahoo.com (smtp119.sbc.mail.sp1.yahoo.com [69.147.64.92]) by core3.amsl.com (Postfix) with SMTP id 32B473A67ED for ; Wed, 3 Dec 2008 08:23:37 -0800 (PST) Received: (qmail 19322 invoked from network); 3 Dec 2008 16:23:33 -0000 Received: from unknown (HELO andymac.local) (andy@68.120.231.104 with plain) by smtp119.sbc.mail.sp1.yahoo.com with SMTP; 3 Dec 2008 16:23:32 -0000 X-YMail-OSG: uTBLWnoVM1knxCW6HuQ2coXhAp89nv7LJkczbePCI354P_2sTOf8hqiq535kzO6IXm9YG39.i5whfwzl3xelp45CvNeaju5Z0jbJ6b.O3Y3b9xK6bKE6Del4D8QbS1hNkH.q.lCzFmkcyITl8g2VSI05 X-Yahoo-Newman-Property: ymail-3 Message-ID: <4936B283.1000101@netconfcentral.com> Date: Wed, 03 Dec 2008 08:23:31 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Macintosh/20081105) MIME-Version: 1.0 To: Tomasz Mikolajczyk References: <4936866E.50308@s3group.com> In-Reply-To: <4936866E.50308@s3group.com> Cc: NETCONF Subject: Re: [Netconf] multiple data models in one filter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk wrote: > Hi, > > Assuming that the following filter: > > > > > > returns the following output: > > > > > 1 > 2 > > > 11 > 22 > > > > > , and > > > > > > > > > 5 > 6 > > > 55 > 66 > > > > > > I wonder how the response would look like for the following filter: > > > > > > > > Any suggestions? > > > Tomasz > Andy > The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). > Please direct any additional queries to: communications@s3group.com. > Thank You. > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 08:23:39 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 78CD028C0DD; Wed, 3 Dec 2008 08:23:39 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D5F0B3A67E9 for ; Wed, 3 Dec 2008 08:23:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.017 X-Spam-Level: X-Spam-Status: No, score=-2.017 tagged_above=-999 required=5 tests=[AWL=0.248, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jDvI584BpEQn for ; Wed, 3 Dec 2008 08:23:37 -0800 (PST) Received: from smtp119.sbc.mail.sp1.yahoo.com (smtp119.sbc.mail.sp1.yahoo.com [69.147.64.92]) by core3.amsl.com (Postfix) with SMTP id 32B473A67ED for ; Wed, 3 Dec 2008 08:23:37 -0800 (PST) Received: (qmail 19322 invoked from network); 3 Dec 2008 16:23:33 -0000 Received: from unknown (HELO andymac.local) (andy@68.120.231.104 with plain) by smtp119.sbc.mail.sp1.yahoo.com with SMTP; 3 Dec 2008 16:23:32 -0000 X-YMail-OSG: uTBLWnoVM1knxCW6HuQ2coXhAp89nv7LJkczbePCI354P_2sTOf8hqiq535kzO6IXm9YG39.i5whfwzl3xelp45CvNeaju5Z0jbJ6b.O3Y3b9xK6bKE6Del4D8QbS1hNkH.q.lCzFmkcyITl8g2VSI05 X-Yahoo-Newman-Property: ymail-3 Message-ID: <4936B283.1000101@netconfcentral.com> Date: Wed, 03 Dec 2008 08:23:31 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Macintosh/20081105) MIME-Version: 1.0 To: Tomasz Mikolajczyk References: <4936866E.50308@s3group.com> In-Reply-To: <4936866E.50308@s3group.com> Cc: NETCONF Subject: Re: [Netconf] multiple data models in one filter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk wrote: > Hi, > > Assuming that the following filter: > > > > > > returns the following output: > > > > > 1 > 2 > > > 11 > 22 > > > > > , and > > > > > > > > > 5 > 6 > > > 55 > 66 > > > > > > I wonder how the response would look like for the following filter: > > > > > > > > Any suggestions? > > > Tomasz > Andy > The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). > Please direct any additional queries to: communications@s3group.com. > Thank You. > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 08:40:11 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACF663A6B7B; Wed, 3 Dec 2008 08:40:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 063323A6B7B for ; Wed, 3 Dec 2008 08:40:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.493 X-Spam-Level: X-Spam-Status: No, score=0.493 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pgQqXauvFc3B for ; Wed, 3 Dec 2008 08:40:10 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 011D03A6822 for ; Wed, 3 Dec 2008 08:40:09 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB3GdxG3019861 for ; Wed, 3 Dec 2008 17:40:02 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 17:39:59 +0100 Message-ID: <4936B5F2.7020805@s3group.com> Date: Wed, 03 Dec 2008 17:38:10 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: NETCONF X-OriginalArrivalTime: 03 Dec 2008 16:39:59.0531 (UTC) FILETIME=[C82E5FB0:01C95565] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Subject: [Netconf] notificationComplete description in RFC X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, I found few inconsistencies in the RFC 5277: 1) The section 3.3.2 refers to the "notificationComplete" term as it would be already known. However, only the next section describes a little what it is and detailed information are in the XSD schema. IMO, a dedicated section for the predefined notification would be better 2) The same problem: replayLogAgedTime is mentioned in the section 3.3.1 but the clarification appears later and only in the XSD schema Regards, Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 08:40:11 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACF663A6B7B; Wed, 3 Dec 2008 08:40:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 063323A6B7B for ; Wed, 3 Dec 2008 08:40:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.493 X-Spam-Level: X-Spam-Status: No, score=0.493 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pgQqXauvFc3B for ; Wed, 3 Dec 2008 08:40:10 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 011D03A6822 for ; Wed, 3 Dec 2008 08:40:09 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB3GdxG3019861 for ; Wed, 3 Dec 2008 17:40:02 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 17:39:59 +0100 Message-ID: <4936B5F2.7020805@s3group.com> Date: Wed, 03 Dec 2008 17:38:10 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: NETCONF X-OriginalArrivalTime: 03 Dec 2008 16:39:59.0531 (UTC) FILETIME=[C82E5FB0:01C95565] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Subject: [Netconf] notificationComplete description in RFC X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, I found few inconsistencies in the RFC 5277: 1) The section 3.3.2 refers to the "notificationComplete" term as it would be already known. However, only the next section describes a little what it is and detailed information are in the XSD schema. IMO, a dedicated section for the predefined notification would be better 2) The same problem: replayLogAgedTime is mentioned in the section 3.3.1 but the clarification appears later and only in the XSD schema Regards, Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 08:51:09 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 575233A6930; Wed, 3 Dec 2008 08:51:09 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BD95F3A6930 for ; Wed, 3 Dec 2008 08:51:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.492 X-Spam-Level: X-Spam-Status: No, score=0.492 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ABBjfzoNt0FP for ; Wed, 3 Dec 2008 08:51:08 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 9F7CA3A6882 for ; Wed, 3 Dec 2008 08:51:07 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB3Gp0o7019976; Wed, 3 Dec 2008 17:51:00 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 17:51:00 +0100 Message-ID: <4936B886.9080704@s3group.com> Date: Wed, 03 Dec 2008 17:49:10 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Andy Bierman References: <49300A02.5050105@s3group.com> <49304FAC.8060905@netconfcentral.com> In-Reply-To: <49304FAC.8060905@netconfcentral.com> X-OriginalArrivalTime: 03 Dec 2008 16:51:00.0081 (UTC) FILETIME=[51E64E10:01C95567] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy Bierman wrote: > Tomasz Mikolajczyk wrote: >> Hi, >> >> Did you consider how a NETCONF server should handle a invalid name of >> the XML tag. For instance how to handle a parameter called "1port" of the >> "interface" class that is defined in a managed device? The following >> hypothetical response is an invalid XML: >> >> > xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"> >> >> >> >> eth0 >> <1port>1234 >> >> >> >> >> >> Such parameter's name is valid from the CLI point of view. It means >> that this kind of "dynamic-like" model may introduce limitations in the >> device modeling if someone wants to use NETCONF. The following >> "static-like" model can solve this problem: >> > > > Using the NETCONF standard means accepting the limitations > of the standard, which in this case is imposed by XML. > > >> > xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"> >> >> >> >> interface >> >> eth0 >> >> 1port >> 1234 >> >> >> >> >> >> >> > > You could internally map the CLI name to some valid XML name, > instead of this sort of double abstraction, but it is just a > DM design choice. I noticed, that similar "double abstraction" is used in the model for notification event streams and in the examples of the notification filters (section 5.1 RFC 5277). >> >> The "dynamic-like" object has limited functionality, because it can >> show only a dynamic data (instances and parameters with valid values) and >> it's hard to show another kind of data like static information about >> managed_object type. >> >> Tomasz >> > > Andy > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 08:51:09 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 575233A6930; Wed, 3 Dec 2008 08:51:09 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BD95F3A6930 for ; Wed, 3 Dec 2008 08:51:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.492 X-Spam-Level: X-Spam-Status: No, score=0.492 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ABBjfzoNt0FP for ; Wed, 3 Dec 2008 08:51:08 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 9F7CA3A6882 for ; Wed, 3 Dec 2008 08:51:07 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB3Gp0o7019976; Wed, 3 Dec 2008 17:51:00 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Dec 2008 17:51:00 +0100 Message-ID: <4936B886.9080704@s3group.com> Date: Wed, 03 Dec 2008 17:49:10 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Andy Bierman References: <49300A02.5050105@s3group.com> <49304FAC.8060905@netconfcentral.com> In-Reply-To: <49304FAC.8060905@netconfcentral.com> X-OriginalArrivalTime: 03 Dec 2008 16:51:00.0081 (UTC) FILETIME=[51E64E10:01C95567] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) Cc: NETCONF Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy Bierman wrote: > Tomasz Mikolajczyk wrote: >> Hi, >> >> Did you consider how a NETCONF server should handle a invalid name of >> the XML tag. For instance how to handle a parameter called "1port" of the >> "interface" class that is defined in a managed device? The following >> hypothetical response is an invalid XML: >> >> > xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"> >> >> >> >> eth0 >> <1port>1234 >> >> >> >> >> >> Such parameter's name is valid from the CLI point of view. It means >> that this kind of "dynamic-like" model may introduce limitations in the >> device modeling if someone wants to use NETCONF. The following >> "static-like" model can solve this problem: >> > > > Using the NETCONF standard means accepting the limitations > of the standard, which in this case is imposed by XML. > > >> > xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"> >> >> >> >> interface >> >> eth0 >> >> 1port >> 1234 >> >> >> >> >> >> >> > > You could internally map the CLI name to some valid XML name, > instead of this sort of double abstraction, but it is just a > DM design choice. I noticed, that similar "double abstraction" is used in the model for notification event streams and in the examples of the notification filters (section 5.1 RFC 5277). >> >> The "dynamic-like" object has limited functionality, because it can >> show only a dynamic data (instances and parameters with valid values) and >> it's hard to show another kind of data like static information about >> managed_object type. >> >> Tomasz >> > > Andy > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 22:18:11 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A9FE63A67E2; Wed, 3 Dec 2008 22:18:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2A25B3A67E2 for ; Wed, 3 Dec 2008 22:18:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.114 X-Spam-Level: X-Spam-Status: No, score=-1.114 tagged_above=-999 required=5 tests=[AWL=1.485, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fCBxq2BOQQsb for ; Wed, 3 Dec 2008 22:18:09 -0800 (PST) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 39C023A677D for ; Wed, 3 Dec 2008 22:18:09 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBC00ASW9FSV8@szxga04-in.huawei.com> for netconf@ietf.org; Thu, 04 Dec 2008 14:16:40 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBC00EQM9FSK1@szxga04-in.huawei.com> for netconf@ietf.org; Thu, 04 Dec 2008 14:16:40 +0800 (CST) Received: from [172.24.1.18] (Forwarded-For: [10.27.141.6]) by szxmc04-in.huawei.com (mshttpd); Thu, 04 Dec 2008 14:16:40 +0800 Date: Thu, 04 Dec 2008 14:16:40 +0800 From: Washam Fan In-reply-to: <49364E80.8010203@ericsson.com> To: Balazs Lengyel Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <49364E80.8010203@ericsson.com> Cc: netconf@ietf.org Subject: Re: [Netconf] global vs. partial-lock X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, However, I think global and partial lock should be consistent. Why leave side effects to global lock alone? washam > Hello, > > Washam Fan wrote: > > Hi, > > global lock addressed failure scenarioes including > outstanding changes to candidate datastore which was not addressed > by partial-lock > > We did not want to address this, as this might have surprising > side effects. See > http://www.ietf.org/mail-archive/web/netconf/current/msg03995.html > We wanted a lock that is simple to understand that locks the > nodes, and no side effects. > > > partial lock addressed faulure scenarioes including > outstanding commit to running datastore wich was not addressed by > global lock > > How do you think about them. > > This is case is common for global and partial locks. I hope Martin > will add it to the 4741bis > draft. > > Balazs > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 3 22:18:11 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A9FE63A67E2; Wed, 3 Dec 2008 22:18:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2A25B3A67E2 for ; Wed, 3 Dec 2008 22:18:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.114 X-Spam-Level: X-Spam-Status: No, score=-1.114 tagged_above=-999 required=5 tests=[AWL=1.485, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fCBxq2BOQQsb for ; Wed, 3 Dec 2008 22:18:09 -0800 (PST) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 39C023A677D for ; Wed, 3 Dec 2008 22:18:09 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBC00ASW9FSV8@szxga04-in.huawei.com> for netconf@ietf.org; Thu, 04 Dec 2008 14:16:40 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBC00EQM9FSK1@szxga04-in.huawei.com> for netconf@ietf.org; Thu, 04 Dec 2008 14:16:40 +0800 (CST) Received: from [172.24.1.18] (Forwarded-For: [10.27.141.6]) by szxmc04-in.huawei.com (mshttpd); Thu, 04 Dec 2008 14:16:40 +0800 Date: Thu, 04 Dec 2008 14:16:40 +0800 From: Washam Fan In-reply-to: <49364E80.8010203@ericsson.com> To: Balazs Lengyel Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <49364E80.8010203@ericsson.com> Cc: netconf@ietf.org Subject: Re: [Netconf] global vs. partial-lock X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, However, I think global and partial lock should be consistent. Why leave side effects to global lock alone? washam > Hello, > > Washam Fan wrote: > > Hi, > > global lock addressed failure scenarioes including > outstanding changes to candidate datastore which was not addressed > by partial-lock > > We did not want to address this, as this might have surprising > side effects. See > http://www.ietf.org/mail-archive/web/netconf/current/msg03995.html > We wanted a lock that is simple to understand that locks the > nodes, and no side effects. > > > partial lock addressed faulure scenarioes including > outstanding commit to running datastore wich was not addressed by > global lock > > How do you think about them. > > This is case is common for global and partial locks. I hope Martin > will add it to the 4741bis > draft. > > Balazs > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 00:38:55 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 08A263A69C3; Thu, 4 Dec 2008 00:38:55 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 513BF3A69C3 for ; Thu, 4 Dec 2008 00:38:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.038 X-Spam-Level: X-Spam-Status: No, score=-2.038 tagged_above=-999 required=5 tests=[AWL=0.008, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uTNAy8lnZrrQ for ; Thu, 4 Dec 2008 00:38:53 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 8370C3A69BB for ; Thu, 4 Dec 2008 00:38:53 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 38EC376C51F; Thu, 4 Dec 2008 09:38:47 +0100 (CET) Date: Thu, 04 Dec 2008 09:38:44 +0100 (CET) Message-Id: <20081204.093844.267092858.mbj@tail-f.com> To: tomasz.mikolajczyk@s3group.com From: Martin Bjorklund In-Reply-To: <49367C69.4090008@s3group.com> References: <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> <20081202.082752.179532099.mbj@tail-f.com> <49367C69.4090008@s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk wrote: > What about filter input? Question is, whether the server should analyze unknown > elements. Assuming that the server has only NETCONF event stream > defined, how the response should look like if an unknown tag is used (i.e. a > tag unspecified in the namespace), for instance: > > > > > > > > NETCONF > > > > > > > ]]>]]> In this case, there's a content match node for the element "unknown", which won't match, so the result is empty: > Is it adequate to the following request: > > > > > > > > unknown > > > > X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 08A263A69C3; Thu, 4 Dec 2008 00:38:55 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 513BF3A69C3 for ; Thu, 4 Dec 2008 00:38:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.038 X-Spam-Level: X-Spam-Status: No, score=-2.038 tagged_above=-999 required=5 tests=[AWL=0.008, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uTNAy8lnZrrQ for ; Thu, 4 Dec 2008 00:38:53 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 8370C3A69BB for ; Thu, 4 Dec 2008 00:38:53 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 38EC376C51F; Thu, 4 Dec 2008 09:38:47 +0100 (CET) Date: Thu, 04 Dec 2008 09:38:44 +0100 (CET) Message-Id: <20081204.093844.267092858.mbj@tail-f.com> To: tomasz.mikolajczyk@s3group.com From: Martin Bjorklund In-Reply-To: <49367C69.4090008@s3group.com> References: <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> <20081202.082752.179532099.mbj@tail-f.com> <49367C69.4090008@s3group.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk wrote: > What about filter input? Question is, whether the server should analyze unknown > elements. Assuming that the server has only NETCONF event stream > defined, how the response should look like if an unknown tag is used (i.e. a > tag unspecified in the namespace), for instance: > > > > > > > > NETCONF > > > > > > > ]]>]]> In this case, there's a content match node for the element "unknown", which won't match, so the result is empty: > Is it adequate to the following request: > > > > > > > > unknown > > > > onf> > > > ]]>]]> Here's a content match node "name" which matches a stream that does not exist so you'll get the same empty result. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf > > > ]]>]]> Here's a content match node "name" which matches a stream that does not exist so you'll get the same empty result. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 00:46:33 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 768243A677D; Thu, 4 Dec 2008 00:46:33 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 37FD93A677D for ; Thu, 4 Dec 2008 00:46:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.038 X-Spam-Level: X-Spam-Status: No, score=-2.038 tagged_above=-999 required=5 tests=[AWL=0.008, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cJGcijBFAOx1 for ; Thu, 4 Dec 2008 00:46:31 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 5A66A3A63CB for ; Thu, 4 Dec 2008 00:46:30 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 75D0476C30E; Thu, 4 Dec 2008 09:46:25 +0100 (CET) Date: Thu, 04 Dec 2008 09:46:22 +0100 (CET) Message-Id: <20081204.094622.265967797.mbj@tail-f.com> To: lhotka@cesnet.cz From: Martin Bjorklund In-Reply-To: <1228311069.6315.89.camel@missotis> References: <4936866E.50308@s3group.com> <1228311069.6315.89.camel@missotis> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] multiple data models in one filter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org TGFkaXNsYXYgTGhvdGthIDxsaG90a2FAY2VzbmV0LmN6PiB3cm90ZToNCj4gVG9tYXN6IE1pa29s YWpjenlrIHDDrcWhZSB2IFN0IDAzLiAxMi4gMjAwOCB2IDE0OjE1ICswMTAwOg0KPiANCj4gPiBJ IHdvbmRlciBob3cgdGhlIHJlc3BvbnNlIHdvdWxkIGxvb2sgbGlrZSBmb3IgdGhlIGZvbGxvd2lu ZyBmaWx0ZXI6DQo+ID4gDQo+ID4gPGZpbHRlciB0eXBlPSJzdWJ0cmVlIj4NCj4gPiAgICAgPHRv cCB4bWxucz0ibmFtZXNwYWNlX2EiIHhtbG5zOng9Im5hbWVzcGFjZV94Ij4NCj4gPiAgICAgICAg IDx4OnRvcC8+DQo+ID4gICAgIDwvdG9wPg0KPiA+IDwvZmlsdGVyPg0KPiA+IA0KPiA+IEFueSBz dWdnZXN0aW9ucz8NCj4gDQo+IElNTyB0aGUgcmVwbHkgd2lsbCBiZSBlbXB0eSwgdGhlIHR3byB0 b3AgZWxlbWVudHMgc2hvdWxkIGJlIHNpYmxpbmdzLg0KDQpZZXAsIGFuZCBpZiB0aGV5IHdlcmUg c2libGluZ3MsIHlvdSdkIGdldCBib3RoIHN1YnRyZWVzIGluIHRoZSByZXBseS4NCg0KDQovbWFy dGluDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpOZXRj b25mIG1haWxpbmcgbGlzdApOZXRjb25mQGlldGYub3JnCmh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vbmV0Y29uZgo= From netconf-bounces@ietf.org Thu Dec 4 00:46:33 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 768243A677D; Thu, 4 Dec 2008 00:46:33 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 37FD93A677D for ; Thu, 4 Dec 2008 00:46:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.038 X-Spam-Level: X-Spam-Status: No, score=-2.038 tagged_above=-999 required=5 tests=[AWL=0.008, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cJGcijBFAOx1 for ; Thu, 4 Dec 2008 00:46:31 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 5A66A3A63CB for ; Thu, 4 Dec 2008 00:46:30 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id 75D0476C30E; Thu, 4 Dec 2008 09:46:25 +0100 (CET) Date: Thu, 04 Dec 2008 09:46:22 +0100 (CET) Message-Id: <20081204.094622.265967797.mbj@tail-f.com> To: lhotka@cesnet.cz From: Martin Bjorklund In-Reply-To: <1228311069.6315.89.camel@missotis> References: <4936866E.50308@s3group.com> <1228311069.6315.89.camel@missotis> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] multiple data models in one filter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org TGFkaXNsYXYgTGhvdGthIDxsaG90a2FAY2VzbmV0LmN6PiB3cm90ZToNCj4gVG9tYXN6IE1pa29s YWpjenlrIHDDrcWhZSB2IFN0IDAzLiAxMi4gMjAwOCB2IDE0OjE1ICswMTAwOg0KPiANCj4gPiBJ IHdvbmRlciBob3cgdGhlIHJlc3BvbnNlIHdvdWxkIGxvb2sgbGlrZSBmb3IgdGhlIGZvbGxvd2lu ZyBmaWx0ZXI6DQo+ID4gDQo+ID4gPGZpbHRlciB0eXBlPSJzdWJ0cmVlIj4NCj4gPiAgICAgPHRv cCB4bWxucz0ibmFtZXNwYWNlX2EiIHhtbG5zOng9Im5hbWVzcGFjZV94Ij4NCj4gPiAgICAgICAg IDx4OnRvcC8+DQo+ID4gICAgIDwvdG9wPg0KPiA+IDwvZmlsdGVyPg0KPiA+IA0KPiA+IEFueSBz dWdnZXN0aW9ucz8NCj4gDQo+IElNTyB0aGUgcmVwbHkgd2lsbCBiZSBlbXB0eSwgdGhlIHR3byB0 b3AgZWxlbWVudHMgc2hvdWxkIGJlIHNpYmxpbmdzLg0KDQpZZXAsIGFuZCBpZiB0aGV5IHdlcmUg c2libGluZ3MsIHlvdSdkIGdldCBib3RoIHN1YnRyZWVzIGluIHRoZSByZXBseS4NCg0KDQovbWFy dGluDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpOZXRj b25mIG1haWxpbmcgbGlzdApOZXRjb25mQGlldGYub3JnCmh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vbmV0Y29uZgo= From netconf-bounces@ietf.org Thu Dec 4 00:50:45 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E96663A6906; Thu, 4 Dec 2008 00:50:45 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 873753A6906 for ; Thu, 4 Dec 2008 00:50:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.492 X-Spam-Level: X-Spam-Status: No, score=0.492 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ITf2h8q2-PWf for ; Thu, 4 Dec 2008 00:50:43 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 68B293A63CB for ; Thu, 4 Dec 2008 00:50:43 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB48oW3s025667; Thu, 4 Dec 2008 09:50:35 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 4 Dec 2008 09:50:32 +0100 Message-ID: <4937996B.1070809@s3group.com> Date: Thu, 04 Dec 2008 09:48:43 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> <20081202.082752.179532099.mbj@tail-f.com> <49367C69.4090008@s3group.com> <20081204.093844.267092858.mbj@tail-f.com> In-Reply-To: <20081204.093844.267092858.mbj@tail-f.com> X-OriginalArrivalTime: 04 Dec 2008 08:50:32.0638 (UTC) FILETIME=[5DD155E0:01C955ED] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Thu, 04 Dec 2008 09:50:37 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> What about filter input? Question is, whether the server should analyze unknown >> elements. Assuming that the server has only NETCONF event stream >> defined, how the response should look like if an unknown tag is used (i.e. a >> tag unspecified in the namespace), for instance: >> >> >> >> >> >> >> >> NETCONF >> >> >> >> >> >> >> ]]>]]> > > In this case, there's a content match node for the element "unknown", > which won't match, so the result is empty: > > > > > OK, so that means, that even if a particular part of the filter doesn't belong to the namespace is processed (not just skipped) and causes that all possibly response data are always filtered out (in case of the content match node)? That also means that the following filter returns an empty response: NETCONF ]]>]]> , where "elsewhere" is well known namespace defining another data model. >> Is it adequate to the following request: >> >> >> >> >> >> >> >> unknown >> >> >> >> >> >> >> ]]>]]> > > Here's a content match node "name" which matches a stream that does not > exist so you'll get the same empty result. > > > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 00:50:45 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E96663A6906; Thu, 4 Dec 2008 00:50:45 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 873753A6906 for ; Thu, 4 Dec 2008 00:50:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.492 X-Spam-Level: X-Spam-Status: No, score=0.492 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ITf2h8q2-PWf for ; Thu, 4 Dec 2008 00:50:43 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 68B293A63CB for ; Thu, 4 Dec 2008 00:50:43 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB48oW3s025667; Thu, 4 Dec 2008 09:50:35 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 4 Dec 2008 09:50:32 +0100 Message-ID: <4937996B.1070809@s3group.com> Date: Thu, 04 Dec 2008 09:48:43 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <4599.87.99.34.137.1228171863.squirrel@webmail.s3group.com> <20081202.082752.179532099.mbj@tail-f.com> <49367C69.4090008@s3group.com> <20081204.093844.267092858.mbj@tail-f.com> In-Reply-To: <20081204.093844.267092858.mbj@tail-f.com> X-OriginalArrivalTime: 04 Dec 2008 08:50:32.0638 (UTC) FILETIME=[5DD155E0:01C955ED] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Thu, 04 Dec 2008 09:50:37 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> What about filter input? Question is, whether the server should analyze unknown >> elements. Assuming that the server has only NETCONF event stream >> defined, how the response should look like if an unknown tag is used (i.e. a >> tag unspecified in the namespace), for instance: >> >> >> >> >> >> >> >> NETCONF >> >> >> >> >> >> >> ]]>]]> > > In this case, there's a content match node for the element "unknown", > which won't match, so the result is empty: > > > > > OK, so that means, that even if a particular part of the filter doesn't belong to the namespace is processed (not just skipped) and causes that all possibly response data are always filtered out (in case of the content match node)? That also means that the following filter returns an empty response: NETCONF ]]>]]> , where "elsewhere" is well known namespace defining another data model. >> Is it adequate to the following request: >> >> >> >> >> >> >> >> unknown >> >> >> >> >> >> >> ]]>]]> > > Here's a content match node "name" which matches a stream that does not > exist so you'll get the same empty result. > > > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 01:18:39 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 83E5E3A67F4; Thu, 4 Dec 2008 01:18:39 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 547E03A67F4 for ; Thu, 4 Dec 2008 01:18:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.039 X-Spam-Level: X-Spam-Status: No, score=-2.039 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gTJJpn-Lt5YJ for ; Thu, 4 Dec 2008 01:18:37 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 79E8E3A677E for ; Thu, 4 Dec 2008 01:18:37 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id D059B76C30E; Thu, 4 Dec 2008 10:18:32 +0100 (CET) Date: Thu, 04 Dec 2008 10:18:30 +0100 (CET) Message-Id: <20081204.101830.60516549.mbj@tail-f.com> To: andy@netconfcentral.com From: Martin Bjorklund In-Reply-To: <4936CA7A.8060105@netconfcentral.com> References: <200812031749.mB3HnBIA021558@idle.juniper.net> <4936CA7A.8060105@netconfcentral.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org I moved this thread from netmod to the netconf list. The issue is if the partial-lock spec should reuse the existing :xpath capability or define a new :partial-lock-xpath capability. The WG had this exact discussion when the notification spec was written. At that time I brought up this argument (I wanted a separate capability for notification-xpath), but consensus was to reuse the existing :xpath. Of course the WG could change its mind, but since we already have started to reuse the :xpath capability like this, I prefer to be consistent and resue it also for partial locks. /martin Andy Bierman wrote: > Phil Shafer wrote: > > Balazs Lengyel writes: > > > >> BALAZS: I could do that with introducing a new xpath-for-partial-lock > >> capability. It is not more difficult to handle, then introducing "feature > >> xpath" in the partial lock module. ( > >> On the other hand I don't want to control XPath handling for partial locking > >> separately. It wou > >> ld be confusing.) > >> > > > > Confusing .vs. not implementable. In your current scheme, you > > force devices that do one to do both. > > > > I feel we're beating the same horse again. Do we need a concensus > > call to move forward? Didn't we already have (at least) one? > > > > > > I support Phil on this one. > We do not want to force vendors to remove their :xpath advertisement > for their compliant 4741 implementations, because they choose to > implement :partial-lock but cannot adhere to all the bells and whistles > that the partial lock draft adds to the :xpath capability. > > To be more clear: > > A new capability MUST NOT add any requirements to an existing capability. > This rule is being violated by the partial-lock draft. > > > Thanks, > > Phil > > > > > > > Andy > > _______________________________________________ > netmod mailing list > netmod@ietf.org > https://www.ietf.org/mailman/listinfo/netmod > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 01:18:39 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 83E5E3A67F4; Thu, 4 Dec 2008 01:18:39 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 547E03A67F4 for ; Thu, 4 Dec 2008 01:18:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.039 X-Spam-Level: X-Spam-Status: No, score=-2.039 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gTJJpn-Lt5YJ for ; Thu, 4 Dec 2008 01:18:37 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 79E8E3A677E for ; Thu, 4 Dec 2008 01:18:37 -0800 (PST) Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id D059B76C30E; Thu, 4 Dec 2008 10:18:32 +0100 (CET) Date: Thu, 04 Dec 2008 10:18:30 +0100 (CET) Message-Id: <20081204.101830.60516549.mbj@tail-f.com> To: andy@netconfcentral.com From: Martin Bjorklund In-Reply-To: <4936CA7A.8060105@netconfcentral.com> References: <200812031749.mB3HnBIA021558@idle.juniper.net> <4936CA7A.8060105@netconfcentral.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org I moved this thread from netmod to the netconf list. The issue is if the partial-lock spec should reuse the existing :xpath capability or define a new :partial-lock-xpath capability. The WG had this exact discussion when the notification spec was written. At that time I brought up this argument (I wanted a separate capability for notification-xpath), but consensus was to reuse the existing :xpath. Of course the WG could change its mind, but since we already have started to reuse the :xpath capability like this, I prefer to be consistent and resue it also for partial locks. /martin Andy Bierman wrote: > Phil Shafer wrote: > > Balazs Lengyel writes: > > > >> BALAZS: I could do that with introducing a new xpath-for-partial-lock > >> capability. It is not more difficult to handle, then introducing "feature > >> xpath" in the partial lock module. ( > >> On the other hand I don't want to control XPath handling for partial locking > >> separately. It wou > >> ld be confusing.) > >> > > > > Confusing .vs. not implementable. In your current scheme, you > > force devices that do one to do both. > > > > I feel we're beating the same horse again. Do we need a concensus > > call to move forward? Didn't we already have (at least) one? > > > > > > I support Phil on this one. > We do not want to force vendors to remove their :xpath advertisement > for their compliant 4741 implementations, because they choose to > implement :partial-lock but cannot adhere to all the bells and whistles > that the partial lock draft adds to the :xpath capability. > > To be more clear: > > A new capability MUST NOT add any requirements to an existing capability. > This rule is being violated by the partial-lock draft. > > > Thanks, > > Phil > > > > > > > Andy > > _______________________________________________ > netmod mailing list > netmod@ietf.org > https://www.ietf.org/mailman/listinfo/netmod > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 01:27:12 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 12CA43A68C1; Thu, 4 Dec 2008 01:27:12 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E0D0A3A68C1 for ; Thu, 4 Dec 2008 01:27:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.492 X-Spam-Level: X-Spam-Status: No, score=0.492 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cmzr7rbAVrbM for ; Thu, 4 Dec 2008 01:27:10 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id A7B7E3A6893 for ; Thu, 4 Dec 2008 01:27:09 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB49QxpM025893; Thu, 4 Dec 2008 10:27:00 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 4 Dec 2008 10:26:59 +0100 Message-ID: <4937A1F5.40602@s3group.com> Date: Thu, 04 Dec 2008 10:25:09 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Phil Shafer References: <200812021837.mB2IbnT9002400@idle.juniper.net> In-Reply-To: <200812021837.mB2IbnT9002400@idle.juniper.net> X-OriginalArrivalTime: 04 Dec 2008 09:26:59.0330 (UTC) FILETIME=[75300E20:01C955F2] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Thu, 04 Dec 2008 10:27:03 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > Tomasz Mikolajczyk writes: >> It's very illogical. Is it done on purpose or is kind of side effect? > > These questions all relate to the model with which locks are used. > The current NETCONF model is that there are two cases. Either the > applications treat the datastore as "owned" by one client, where > only that clients is permitted to make changes, or the datastore > is open to all applications, and these appplications can make changes > at any time. > > In the first model, the lock is used to prevent other applications > from changing the config while my application is changing it. This > model lends itself to the candidate datastore, where I can make > changes, check them, record them, and/or commit them as my app sees > fit. I can use the "confirmed commit" mechanism to ensure that my > change (and the box) are working well before releasing the lock to > allow other applications to make changes. My changes can be logged > accurately and the responsibility for any errors can be placed at > the foot of my app. > > The the second model, many applications can make changes to the > datastore without concern for their interactions. This concern may > be addressed in out-of-band mechanisms, or could be the outcome of > the network management architecture in use by the network provider, > but no locking is needed. This model works well with the running > datastore, where the config changes immediately affect the device > and the audit mechanism would be tailored to a single > payload. I clearly understand these cases. However I still don't feel what is the purpose of the issues: 1) Lock must fail if "The target configuration is , it has already been modified, and these changes have not been committed or rolled back" 2) As the result of the operation performed by session A, any outstanding changes must be discarded when the lock is released I can't find their advantages. The server shouldn't be wiser than a user. Server should do whatever user want to do. No matter if the application (i.e. a client) knows that "owns" the datastore, or there are simultaneously sessions that may be interested in the same datastore area, a particular session should be able to do a lock anytime wants to (unless configuration is already locked). Moreover, the session that owns the lock is responsible what is left in the config after unlock. The session holding the lock is an active ruler and if wants to commit the candidate, executes commit explicitly. If wants to leave the candidate the same as running, explicit copying must be performed. What about a session timeout, I mean if the timeout occurs on a session owning the lock. Let's say Admin was preparing a huge and complicated candidate all morning and went for a cup of coffee before commit. In the meantime timeout occurred. According to the RFC, unlock must be released and running must be copied to candidate. What if running contains hundreds of managed objects and thousands of their instances? Have you ever thought about performance? > Partial locking takes a hybrid approach, where the applications > aren't concerned with each other, but still want some measure of > assuredness that no one is changing the parts of the datastore the > app consider it's own. One could view it as "trust but verify", > but IMHO it leaves the server open to long term locks that aren't > condusive to simple clients that want to perform simple operations > like "backup"; an app parked with a the partial lock prevents the > client from getting the global lock needed to be able to save the > complete config accurately. > > Thanks, > Phil > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 01:27:12 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 12CA43A68C1; Thu, 4 Dec 2008 01:27:12 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E0D0A3A68C1 for ; Thu, 4 Dec 2008 01:27:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.492 X-Spam-Level: X-Spam-Status: No, score=0.492 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cmzr7rbAVrbM for ; Thu, 4 Dec 2008 01:27:10 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id A7B7E3A6893 for ; Thu, 4 Dec 2008 01:27:09 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB49QxpM025893; Thu, 4 Dec 2008 10:27:00 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 4 Dec 2008 10:26:59 +0100 Message-ID: <4937A1F5.40602@s3group.com> Date: Thu, 04 Dec 2008 10:25:09 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Phil Shafer References: <200812021837.mB2IbnT9002400@idle.juniper.net> In-Reply-To: <200812021837.mB2IbnT9002400@idle.juniper.net> X-OriginalArrivalTime: 04 Dec 2008 09:26:59.0330 (UTC) FILETIME=[75300E20:01C955F2] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Thu, 04 Dec 2008 10:27:03 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > Tomasz Mikolajczyk writes: >> It's very illogical. Is it done on purpose or is kind of side effect? > > These questions all relate to the model with which locks are used. > The current NETCONF model is that there are two cases. Either the > applications treat the datastore as "owned" by one client, where > only that clients is permitted to make changes, or the datastore > is open to all applications, and these appplications can make changes > at any time. > > In the first model, the lock is used to prevent other applications > from changing the config while my application is changing it. This > model lends itself to the candidate datastore, where I can make > changes, check them, record them, and/or commit them as my app sees > fit. I can use the "confirmed commit" mechanism to ensure that my > change (and the box) are working well before releasing the lock to > allow other applications to make changes. My changes can be logged > accurately and the responsibility for any errors can be placed at > the foot of my app. > > The the second model, many applications can make changes to the > datastore without concern for their interactions. This concern may > be addressed in out-of-band mechanisms, or could be the outcome of > the network management architecture in use by the network provider, > but no locking is needed. This model works well with the running > datastore, where the config changes immediately affect the device > and the audit mechanism would be tailored to a single > payload. I clearly understand these cases. However I still don't feel what is the purpose of the issues: 1) Lock must fail if "The target configuration is , it has already been modified, and these changes have not been committed or rolled back" 2) As the result of the operation performed by session A, any outstanding changes must be discarded when the lock is released I can't find their advantages. The server shouldn't be wiser than a user. Server should do whatever user want to do. No matter if the application (i.e. a client) knows that "owns" the datastore, or there are simultaneously sessions that may be interested in the same datastore area, a particular session should be able to do a lock anytime wants to (unless configuration is already locked). Moreover, the session that owns the lock is responsible what is left in the config after unlock. The session holding the lock is an active ruler and if wants to commit the candidate, executes commit explicitly. If wants to leave the candidate the same as running, explicit copying must be performed. What about a session timeout, I mean if the timeout occurs on a session owning the lock. Let's say Admin was preparing a huge and complicated candidate all morning and went for a cup of coffee before commit. In the meantime timeout occurred. According to the RFC, unlock must be released and running must be copied to candidate. What if running contains hundreds of managed objects and thousands of their instances? Have you ever thought about performance? > Partial locking takes a hybrid approach, where the applications > aren't concerned with each other, but still want some measure of > assuredness that no one is changing the parts of the datastore the > app consider it's own. One could view it as "trust but verify", > but IMHO it leaves the server open to long term locks that aren't > condusive to simple clients that want to perform simple operations > like "backup"; an app parked with a the partial lock prevents the > client from getting the global lock needed to be able to save the > complete config accurately. > > Thanks, > Phil > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 06:37:37 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68CD93A6A58; Thu, 4 Dec 2008 06:37:37 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 753733A6A58 for ; Thu, 4 Dec 2008 06:37:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XCM+Nyfwa9WS for ; Thu, 4 Dec 2008 06:37:34 -0800 (PST) Received: from exprod7og115.obsmtp.com (exprod7ob115.obsmtp.com [64.18.2.216]) by core3.amsl.com (Postfix) with ESMTP id 70C513A693B for ; Thu, 4 Dec 2008 06:37:34 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob115.postini.com ([64.18.6.12]) with SMTP ID DSNKSTfrI2lIOJIYRuUebawsc0JkpR2egMIX@postini.com; Thu, 04 Dec 2008 06:37:30 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Thu, 4 Dec 2008 06:34:42 -0800 Received: from p-emlb01-sac.jnpr.net ([66.129.254.46]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 06:34:41 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 06:34:41 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 06:34:40 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB4EYeM90749; Thu, 4 Dec 2008 06:34:40 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB4ETOxb056152; Thu, 4 Dec 2008 14:29:25 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812041429.mB4ETOxb056152@idle.juniper.net> To: Tomasz Mikolajczyk In-Reply-To: <4937A1F5.40602@s3group.com> Date: Thu, 4 Dec 2008 09:29:24 -0500 From: Phil Shafer X-OriginalArrivalTime: 04 Dec 2008 14:34:40.0800 (UTC) FILETIME=[7114D200:01C9561D] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk writes: >1) Lock must fail if "The target configuration is , it has already >been > modified, and these changes have not been committed or rolled back" The client application shouldn't need to understand what outstanding changes are in the config. If there are uncommitted changes, then something's wrong and someone smarter than my app should be required to do something. >2) As the result of the operation performed by session A, any outstan >ding changes must be > discarded when the lock is released If an application crashes or network connectivity iFrom netconf-bounces@ietf.org Thu Dec 4 06:37:37 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68CD93A6A58; Thu, 4 Dec 2008 06:37:37 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 753733A6A58 for ; Thu, 4 Dec 2008 06:37:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XCM+Nyfwa9WS for ; Thu, 4 Dec 2008 06:37:34 -0800 (PST) Received: from exprod7og115.obsmtp.com (exprod7ob115.obsmtp.com [64.18.2.216]) by core3.amsl.com (Postfix) with ESMTP id 70C513A693B for ; Thu, 4 Dec 2008 06:37:34 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob115.postini.com ([64.18.6.12]) with SMTP ID DSNKSTfrI2lIOJIYRuUebawsc0JkpR2egMIX@postini.com; Thu, 04 Dec 2008 06:37:30 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Thu, 4 Dec 2008 06:34:42 -0800 Received: from p-emlb01-sac.jnpr.net ([66.129.254.46]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 06:34:41 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 06:34:41 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 06:34:40 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB4EYeM90749; Thu, 4 Dec 2008 06:34:40 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB4ETOxb056152; Thu, 4 Dec 2008 14:29:25 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812041429.mB4ETOxb056152@idle.juniper.net> To: Tomasz Mikolajczyk In-Reply-To: <4937A1F5.40602@s3group.com> Date: Thu, 4 Dec 2008 09:29:24 -0500 From: Phil Shafer X-OriginalArrivalTime: 04 Dec 2008 14:34:40.0800 (UTC) FILETIME=[7114D200:01C9561D] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk writes: >1) Lock must fail if "The target configuration is , it has already >been > modified, and these changes have not been committed or rolled back" The client application shouldn't need to understand what outstanding changes are in the config. If there are uncommitted changes, then something's wrong and someone smarter than my app should be required to do something. >2) As the result of the operation performed by session A, any outstan >ding changes must be > discarded when the lock is released If an application crashes or network connectivity is losts lost, we want the server to recover back to a known state. Discarding changes does this. When the client reconnects, it can reacquire the lock (which is possible since changes have been discarded), and redo any changes needed. >No matter if the application (i.e. a client) knows that "owns" the datastore, >or >there are simultaneously sessions that may be interested in the same datastore > area, >a particular session should be able to do a lock anytime wants to (unless conf >iguration is already locked). Multiple sessions can be interested in the same datastore, but the lock forces their write (edit and commit) operations to be performed in series. >If wants to leave the candidate the same as running, explicit copying must be >performed. But what we want to avoid is where the changes are left on the candidate and the next client has no idea what's changed or why, and can't decide what to do with them (commit or discard). >What about a session timeout, I mean if the timeout occurs on a session owning > the lock. Let's say Admin >was preparing a huge and complicated candidate all morning and went for a cup >of coffee before commit. NETCONF locks are meant to be short-lived and are not designed for applications that take coffee breaks. >In the meantime timeout occurred. According to the RFC, unlock must be release >d and running must be copied to candidate. >What if running contains hundreds of managed objects and thousands of their in >stances? Have you ever thought about performance? "ever"? Sure, once ;^) But the more important issue is about allowing clients to perform their changes without needing artificial intelligence (or wise humans) to find their way. (Are you really arguing for both performance and coffee breaks? ;^) Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf , we want the server to recover back to a known state. Discarding changes does this. When the client reconnects, it can reacquire the lock (which is possible since changes have been discarded), and redo any changes needed. >No matter if the application (i.e. a client) knows that "owns" the datastore, >or >there are simultaneously sessions that may be interested in the same datastore > area, >a particular session should be able to do a lock anytime wants to (unless conf >iguration is already locked). Multiple sessions can be interested in the same datastore, but the lock forces their write (edit and commit) operations to be performed in series. >If wants to leave the candidate the same as running, explicit copying must be >performed. But what we want to avoid is where the changes are left on the candidate and the next client has no idea what's changed or why, and can't decide what to do with them (commit or discard). >What about a session timeout, I mean if the timeout occurs on a session owning > the lock. Let's say Admin >was preparing a huge and complicated candidate all morning and went for a cup >of coffee before commit. NETCONF locks are meant to be short-lived and are not designed for applications that take coffee breaks. >In the meantime timeout occurred. According to the RFC, unlock must be release >d and running must be copied to candidate. >What if running contains hundreds of managed objects and thousands of their in >stances? Have you ever thought about performance? "ever"? Sure, once ;^) But the more important issue is about allowing clients to perform their changes without needing artificial intelligence (or wise humans) to find their way. (Are you really arguing for both performance and coffee breaks? ;^) Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 10:58:35 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B18C28C0EF; Thu, 4 Dec 2008 10:58:35 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A3CBE28C0EF for ; Thu, 4 Dec 2008 10:58:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.537 X-Spam-Level: X-Spam-Status: No, score=-2.537 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tkv5hNtek7u4 for ; Thu, 4 Dec 2008 10:58:33 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 6469B3A6B5C for ; Thu, 4 Dec 2008 10:58:33 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB4IwOB1025721; Thu, 4 Dec 2008 18:58:24 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 18:58:24 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Thu, 4 Dec 2008 18:58:24 -0000 (GMT) Message-ID: <8668.87.99.34.137.1228417104.squirrel@webmail.s3group.com> In-Reply-To: <200812041429.mB4ETOxb056152@idle.juniper.net> References: <200812041429.mB4ETOxb056152@idle.juniper.net> Date: Thu, 4 Dec 2008 18:58:24 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Phil Shafer" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 04 Dec 2008 18:58:24.0747 (UTC) FILETIME=[48E383B0:01C95642] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Thu, 04 Dec 2008 18:58:27 +0000 (GMT) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > Tomasz Mikolajczyk writes: >>1) Lock must fail if "The target configuration is , it has >> already >>been >> modified, and these changes have not been committed or rolled back" > > The client application shouldn't need to understand what outstanding > changes are in the config. If there are uncommitted changes, then > something's wrong and someone smarter than my app should be required > to do something. >>2) As the result of the operation performed by session A, any >> outstan >>ding changes must be >> discarded when the lock is released > > If an application crashes or network connectivity is lost, we > want the server to recover back to a known state. Discarding > changes does this. When the client reconnects, it can reacquire > the lock (which is possible since changes have been discarded), > and redo any changes needed. > >>No matter if the application (i.e. a client) kFrom netconf-bounces@ietf.org Thu Dec 4 10:58:35 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B18C28C0EF; Thu, 4 Dec 2008 10:58:35 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A3CBE28C0EF for ; Thu, 4 Dec 2008 10:58:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.537 X-Spam-Level: X-Spam-Status: No, score=-2.537 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tkv5hNtek7u4 for ; Thu, 4 Dec 2008 10:58:33 -0800 (PST) Received: from mailsrv.s3group.com (tales.s3group.com [193.120.90.35]) by core3.amsl.com (Postfix) with ESMTP id 6469B3A6B5C for ; Thu, 4 Dec 2008 10:58:33 -0800 (PST) Received: from exduba.dublin.ad.s3group.com (host-89-100.s3group.com [193.120.89.100] (may be forged)) by mailsrv.s3group.com with ESMTP id mB4IwOB1025721; Thu, 4 Dec 2008 18:58:24 GMT Received: from webmail.s3group.com ([193.120.90.34]) by exduba.dublin.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 18:58:24 +0000 Received: from 87.99.34.137 (SquirrelMail authenticated user tomaszmi) by webmail.s3group.com with HTTP; Thu, 4 Dec 2008 18:58:24 -0000 (GMT) Message-ID: <8668.87.99.34.137.1228417104.squirrel@webmail.s3group.com> In-Reply-To: <200812041429.mB4ETOxb056152@idle.juniper.net> References: <200812041429.mB4ETOxb056152@idle.juniper.net> Date: Thu, 4 Dec 2008 18:58:24 -0000 (GMT) From: "Tomasz Mikolajczyk" To: "Phil Shafer" User-Agent: SquirrelMail/1.4.8-6.el3 MIME-Version: 1.0 X-Priority: 3 (Normal) Importance: Normal X-OriginalArrivalTime: 04 Dec 2008 18:58:24.0747 (UTC) FILETIME=[48E383B0:01C95642] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (tales) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (mailsrv.s3group.com [193.120.90.35]); Thu, 04 Dec 2008 18:58:27 +0000 (GMT) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > Tomasz Mikolajczyk writes: >>1) Lock must fail if "The target configuration is , it has >> already >>been >> modified, and these changes have not been committed or rolled back" > > The client application shouldn't need to understand what outstanding > changes are in the config. If there are uncommitted changes, then > something's wrong and someone smarter than my app should be required > to do something. >>2) As the result of the operation performed by session A, any >> outstan >>ding changes must be >> discarded when the lock is released > > If an application crashes or network connectivity is lost, we > want the server to recover back to a known state. Discarding > changes does this. When the client reconnects, it can reacquire > the lock (which is possible since changes have been discarded), > and redo any changes needed. > >>No matter if the application (i.e. a clinows that "owns" the >> datastore, >>or >>there are simultaneously sessions that may be interested in the same >> datastore >> area, >>a particular session should be able to do a lock anytime wants to (unless >> conf >>iguration is already locked). > > Multiple sessions can be interested in the same datastore, but the > lock forces their write (edit and commit) operations to be performed > in series. Yes, I agree. Lock and unlock are very important to unable other sessions to do simultaneous changes. >>If wants to leave the candidate the same as running, explicit copying >> must be >>performed. > > But what we want to avoid is where the changes are left on the > candidate and the next client has no idea what's changed or > why, and can't decide what to do with them (commit or discard). I don't agree. I guess that the first operation that the next client would execute after lock candidate is either delete-config on candidate, or copy-config running->candidate to make sure that candidate doesn't contain any unwanted data. It's very probable that the next session doesn't know anything what was happening before, i.e whether data in candidate comes from running as the result of the previous client's unlock, or are there because the previous session made some changes in candidate without lock. Even if the next session knows that the last session made unlock or commit, shouldn't assume that candidate still corresponds to running as running can change on its own. That means that such automatic reverting candidate as the result of unlock is totally unnecessary. So I still don't understand what these rules are introduced for. >>What about a session timeout, I mean if the timeout occurs on a session >> owning >> the lock. Let's say Admin >>was preparing a huge and complicated candidate all morning and went for a >> cup >>of coffee before commit. > > NETCONF locks are meant to be short-lived and are not designed > for applications that take coffee breaks. RFC doesn't say anything about lock duration. >>In the meantime timeout occurred. According to the RFC, unlock must be >> release >>d and running must be copied to candidate. >>What if running contains hundreds of managed objects and thousands of >> their in >>stances? Have you ever thought about performance? > > "ever"? Sure, once ;^) And? > But the more important issue is about allowing clients to perform > their changes without needing artificial intelligence (or wise humans) > to find their way. > > (Are you really arguing for both performance and coffee breaks? ;^) So you assume client performing automatically lock and unlock. > Thanks, > Phil > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ent) knows that "owns" the >> datastore, >>or >>there are simultaneously sessions that may be interested in the same >> datastore >> area, >>a particular session should be able to do a lock anytime wants to (unless >> conf >>iguration is already locked). > > Multiple sessions can be interested in the same datastore, but the > lock forces their write (edit and commit) operations to be performed > in series. Yes, I agree. Lock and unlock are very important to unable other sessions to do simultaneous changes. >>If wants to leave the candidate the same as running, explicit copying >> must be >>performed. > > But what we want to avoid is where the changes are left on the > candidate and the next client has no idea what's changed or > why, and can't decide what to do with them (commit or discard). I don't agree. I guess that the first operation that the next client would execute after lock candidate is either delete-config on candidate, or copy-config running->candidate to make sure that candidate doesn't contain any unwanted data. It's very probable that the next session doesn't know anything what was happening before, i.e whether data in candidate comes from running as the result of the previous client's unlock, or are there because the previous session made some changes in candidate without lock. Even if the next session knows that the last session made unlock or commit, shouldn't assume that candidate still corresponds to running as running can change on its own. That means that such automatic reverting candidate as the result of unlock is totally unnecessary. So I still don't understand what these rules are introduced for. >>What about a session timeout, I mean if the timeout occurs on a session >> owning >> the lock. Let's say Admin >>was preparing a huge and complicated candidate all morning and went for a >> cup >>of coffee before commit. > > NETCONF locks are meant to be short-lived and are not designed > for applications that take coffee breaks. RFC doesn't say anything about lock duration. >>In the meantime timeout occurred. According to the RFC, unlock must be >> release >>d and running must be copied to candidate. >>What if running contains hundreds of managed objects and thousands of >> their in >>stances? Have you ever thought about performance? > > "ever"? Sure, once ;^) And? > But the more important issue is about allowing clients to perform > their changes without needing artificial intelligence (or wise humans) > to find their way. > > (Are you really arguing for both performance and coffee breaks? ;^) So you assume client performing automatically lock and unlock. > Thanks, > Phil > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 12:12:34 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 206B93A6A0C; Thu, 4 Dec 2008 12:12:34 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DBD4D3A6A0C for ; Thu, 4 Dec 2008 12:12:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZKrWo5MrNf4V for ; Thu, 4 Dec 2008 12:12:32 -0800 (PST) Received: from exprod7og115.obsmtp.com (exprod7ob115.obsmtp.com [64.18.2.216]) by core3.amsl.com (Postfix) with ESMTP id 0162A3A68FA for ; Thu, 4 Dec 2008 12:12:31 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob115.postini.com ([64.18.6.12]) with SMTP ID DSNKSTg5onO2GsCp3eNDtSmgkEfv4+lVAJFA@postini.com; Thu, 04 Dec 2008 12:12:28 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Thu, 4 Dec 2008 12:08:35 -0800 Received: from p-emlb02-sac.jnpr.net ([66.129.254.47]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 12:08:35 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb02-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 12:08:34 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 12:08:34 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB4K8XM42448; Thu, 4 Dec 2008 12:08:33 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB4K3IbL061806; Thu, 4 Dec 2008 20:03:18 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812042003.mB4K3IbL061806@idle.juniper.net> To: "Tomasz Mikolajczyk" In-Reply-To: <8668.87.99.34.137.1228417104.squirrel@webmail.s3group.com> Date: Thu, 4 Dec 2008 15:03:18 -0500 From: Phil Shafer X-OriginalArrivalTime: 04 Dec 2008 20:08:34.0437 (UTC) FILETIME=[160F3B50:01C9564C] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org "Tomasz Mikolajczyk" writes: >I don't agree. I guess that the first operation that the next client would >execute after lock candidate is either delete-config on candidate, or >copy-config running->candidate to make sure that candidate doesn't contain >any unwanted data. If the changes are the result of a user sitting at the CLI, discarding their changes is that very last thing you want to do. >RFC doesn't say anything about lock duration. 7.5. Description: The lock operation allows the client to lock the configuration --> system of a devicFrom netconf-bounces@ietf.org Thu Dec 4 12:12:34 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 206B93A6A0C; Thu, 4 Dec 2008 12:12:34 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DBD4D3A6A0C for ; Thu, 4 Dec 2008 12:12:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZKrWo5MrNf4V for ; Thu, 4 Dec 2008 12:12:32 -0800 (PST) Received: from exprod7og115.obsmtp.com (exprod7ob115.obsmtp.com [64.18.2.216]) by core3.amsl.com (Postfix) with ESMTP id 0162A3A68FA for ; Thu, 4 Dec 2008 12:12:31 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob115.postini.com ([64.18.6.12]) with SMTP ID DSNKSTg5onO2GsCp3eNDtSmgkEfv4+lVAJFA@postini.com; Thu, 04 Dec 2008 12:12:28 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Thu, 4 Dec 2008 12:08:35 -0800 Received: from p-emlb02-sac.jnpr.net ([66.129.254.47]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 12:08:35 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb02-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 12:08:34 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 12:08:34 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB4K8XM42448; Thu, 4 Dec 2008 12:08:33 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB4K3IbL061806; Thu, 4 Dec 2008 20:03:18 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812042003.mB4K3IbL061806@idle.juniper.net> To: "Tomasz Mikolajczyk" In-Reply-To: <8668.87.99.34.137.1228417104.squirrel@webmail.s3group.com> Date: Thu, 4 Dec 2008 15:03:18 -0500 From: Phil Shafer X-OriginalArrivalTime: 04 Dec 2008 20:08:34.0437 (UTC) FILETIME=[160F3B50:01C9564C] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org "Tomasz Mikolajczyk" writes: >I don't agree. I guess that the first operation that the next client would >execute after lock candidate is either delete-config on candidate, or >copy-config running->candidate to make sure that candidate doesn't contain >any unwanted data. If the changes are the result of a user sitting at the CLI, discarding their changes is that very last thing you want to do. >RFC doesn't say anything about lock duration. 7.5. Description: The lock operation allows the client to lock the configuration --> system of a device. Sue. Such locks are intended to be short-lived and allow a client to make a change without fear of interaction with other NETCONF clients, non-NETCONF clients (e.g., SNMP and command line interface (CLI) scripts), and human users. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ch locks are intended to be short-lived and allow a client to make a change without fear of interaction with other NETCONF clients, non-NETCONF clients (e.g., SNMP and command line interface (CLI) scripts), and human users. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 13:36:40 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68B563A6A64; Thu, 4 Dec 2008 13:36:40 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B112A3A6A64 for ; Thu, 4 Dec 2008 13:36:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LuHJsWpZvTbQ for ; Thu, 4 Dec 2008 13:36:39 -0800 (PST) Received: from exprod7og108.obsmtp.com (exprod7og108.obsmtp.com [64.18.2.169]) by core3.amsl.com (Postfix) with ESMTP id E91F13A69F4 for ; Thu, 4 Dec 2008 13:36:37 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob108.postini.com ([64.18.6.12]) with SMTP ID DSNKSThNW4GoNTB4mF41McyF4dAfk7oCyGLr@postini.com; Thu, 04 Dec 2008 13:36:34 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Thu, 4 Dec 2008 13:32:24 -0800 Received: from p-emlb02-sac.jnpr.net ([66.129.254.47]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 13:32:24 -0800 Received: from emailsmtp55.jnpr.net ([172.24.18.132]) by p-emlb02-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 13:32:23 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp55.jnpr.net with Microsoft SMTPSVC(6.0.3790.1830); Thu, 4 Dec 2008 13:32:23 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB4LWMM06458; Thu, 4 Dec 2008 13:32:23 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB4LR7RD063828; Thu, 4 Dec 2008 21:27:07 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812042127.mB4LR7RD063828@idle.juniper.net> To: Martin Bjorklund In-Reply-To: <20081204.101830.60516549.mbj@tail-f.com> Date: Thu, 4 Dec 2008 16:27:07 -0500 From: Phil Shafer X-OriginalArrivalTime: 04 Dec 2008 21:32:23.0695 (UTC) FILETIME=[CBBB19F0:01C95657] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund writes: >Of course the WG could change its mind, but since we already have >started to reuse the :xpath capability like this, I prefer to be >consistent and resue it also for partial locks. So in a few years, the :xpath capbility will be reused for the 57th time in some new YANG module. An implementor will need to decide if they can afford to support the new module, given that they supported :xpath on one of the 56 earlier uses. This forces all-or-nothing decisions that I'd like to avoid and even if we've made this mistake once, that should be enough. I'd vote for sanity over consistency. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 13:36:40 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68B563A6A64; Thu, 4 Dec 2008 13:36:40 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B112A3A6A64 for ; Thu, 4 Dec 2008 13:36:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LuHJsWpZvTbQ for ; Thu, 4 Dec 2008 13:36:39 -0800 (PST) Received: from exprod7og108.obsmtp.com (exprod7og108.obsmtp.com [64.18.2.169]) by core3.amsl.com (Postfix) with ESMTP id E91F13A69F4 for ; Thu, 4 Dec 2008 13:36:37 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob108.postini.com ([64.18.6.12]) with SMTP ID DSNKSThNW4GoNTB4mF41McyF4dAfk7oCyGLr@postini.com; Thu, 04 Dec 2008 13:36:34 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Thu, 4 Dec 2008 13:32:24 -0800 Received: from p-emlb02-sac.jnpr.net ([66.129.254.47]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 13:32:24 -0800 Received: from emailsmtp55.jnpr.net ([172.24.18.132]) by p-emlb02-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Dec 2008 13:32:23 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp55.jnpr.net with Microsoft SMTPSVC(6.0.3790.1830); Thu, 4 Dec 2008 13:32:23 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB4LWMM06458; Thu, 4 Dec 2008 13:32:23 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB4LR7RD063828; Thu, 4 Dec 2008 21:27:07 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812042127.mB4LR7RD063828@idle.juniper.net> To: Martin Bjorklund In-Reply-To: <20081204.101830.60516549.mbj@tail-f.com> Date: Thu, 4 Dec 2008 16:27:07 -0500 From: Phil Shafer X-OriginalArrivalTime: 04 Dec 2008 21:32:23.0695 (UTC) FILETIME=[CBBB19F0:01C95657] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund writes: >Of course the WG could change its mind, but since we already have >started to reuse the :xpath capability like this, I prefer to be >consistent and resue it also for partial locks. So in a few years, the :xpath capbility will be reused for the 57th time in some new YANG module. An implementor will need to decide if they can afford to support the new module, given that they supported :xpath on one of the 56 earlier uses. This forces all-or-nothing decisions that I'd like to avoid and even if we've made this mistake once, that should be enough. I'd vote for sanity over consistency. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 21:18:35 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 12A863A6B97; Thu, 4 Dec 2008 21:18:35 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7E9643A6B97 for ; Thu, 4 Dec 2008 21:18:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.485 X-Spam-Level: X-Spam-Status: No, score=-1.485 tagged_above=-999 required=5 tests=[AWL=1.114, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kbgf6x1ctLU7 for ; Thu, 4 Dec 2008 21:18:33 -0800 (PST) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id B5A8A3A67A3 for ; Thu, 4 Dec 2008 21:18:33 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00AUZ1ERQW@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 13:18:28 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00MRU1ERSU@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 13:18:27 +0800 (CST) Received: from [172.24.1.18] (Forwarded-For: [10.27.141.6]) by szxmc04-in.huawei.com (mshttpd); Fri, 05 Dec 2008 13:18:27 +0800 Date: Fri, 05 Dec 2008 13:18:27 +0800 From: Washam Fan In-reply-to: <4937A1F5.40602@s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, > I can't find their advantages. The server shouldn't be wiser than > a user. Server should do whatever user want to do. > No matter if the application (i.e. a client) knows that "owns" the > datastore, or > there are simultaneously sessions that may be interested in the > same datastore area, > a particular session should be able to do a lock anytime wants to > (unless configuration is already locked). > Moreover, the session that owns the lock is responsible what is > left in the config after unlock. > The session holding the lock is an active ruler and if wants to > commit the candidate, executes commit explicitly. > If wants to leave the candidate the same as running, explicit > copying must be performed. A primary functionality of lock is to guarantee atomicity of a transaction or a series of operations, so unlock means either the transaction effect or not at all. So IMHO, before candidate is the same as running, after candidate is still same as running. washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 21:18:35 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 12A863A6B97; Thu, 4 Dec 2008 21:18:35 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7E9643A6B97 for ; Thu, 4 Dec 2008 21:18:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.485 X-Spam-Level: X-Spam-Status: No, score=-1.485 tagged_above=-999 required=5 tests=[AWL=1.114, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kbgf6x1ctLU7 for ; Thu, 4 Dec 2008 21:18:33 -0800 (PST) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id B5A8A3A67A3 for ; Thu, 4 Dec 2008 21:18:33 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00AUZ1ERQW@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 13:18:28 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00MRU1ERSU@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 13:18:27 +0800 (CST) Received: from [172.24.1.18] (Forwarded-For: [10.27.141.6]) by szxmc04-in.huawei.com (mshttpd); Fri, 05 Dec 2008 13:18:27 +0800 Date: Fri, 05 Dec 2008 13:18:27 +0800 From: Washam Fan In-reply-to: <4937A1F5.40602@s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, > I can't find their advantages. The server shouldn't be wiser than > a user. Server should do whatever user want to do. > No matter if the application (i.e. a client) knows that "owns" the > datastore, or > there are simultaneously sessions that may be interested in the > same datastore area, > a particular session should be able to do a lock anytime wants to > (unless configuration is already locked). > Moreover, the session that owns the lock is responsible what is > left in the config after unlock. > The session holding the lock is an active ruler and if wants to > commit the candidate, executes commit explicitly. > If wants to leave the candidate the same as running, explicit > copying must be performed. A primary functionality of lock is to guarantee atomicity of a transaction or a series of operations, so unlock means either the transaction effect or not at all. So IMHO, before candidate is the same as running, after candidate is still same as running. washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 23:33:14 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 44F893A6BFB; Thu, 4 Dec 2008 23:33:14 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 390EE3A6BFB for ; Thu, 4 Dec 2008 23:33:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.492 X-Spam-Level: X-Spam-Status: No, score=0.492 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D1HUtE-U3Dua for ; Thu, 4 Dec 2008 23:33:12 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 2AC9B3A6BEC for ; Thu, 4 Dec 2008 23:33:11 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB57Ww3M008947; Fri, 5 Dec 2008 08:33:01 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 08:32:58 +0100 Message-ID: <4938D8B5.5070407@s3group.com> Date: Fri, 05 Dec 2008 08:31:01 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Phil Shafer References: <200812042003.mB4K3IbL061806@idle.juniper.net> In-Reply-To: <200812042003.mB4K3IbL061806@idle.juniper.net> X-OriginalArrivalTime: 05 Dec 2008 07:32:58.0278 (UTC) FILETIME=[B2041C60:01C956AB] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 08:33:04 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > "Tomasz Mikolajczyk" writes: >> I don't agree. I guess that the first operation that the next client would >> execute after lock candidate is either delete-config on candidate, or >> copy-config running->candidate to make sure that candidate doesn't contain >> any unwanted data. > > If the changes are the result of a user sitting at the CLI, discarding > their changes is that very last thing you want to do. What a difference if the other session doing modification for candidate without lock is CLI session or NETCONF session? Why CLI session can't do lock if has access to candidate. As I already described, it's the same when you do a lock on candidate and see data there. You are not sure if these data come from running (previous session unlock) or are prepared by other sessions working without lock (either CLI or NETCONF or whatever). If you can do a lock, do it and change whatever you want. It's another session problem if their data disappears when they work without lock. >> RFC doesn't say anything about lock duration. > > 7.5. > > Description: > > The lock operation allows the client to lock the configuration > --> system of a device. Such locks are intended to be short-lived and > allow a client to make a change without fear of interaction with > other NETCONF clients, non-NETCONF clients (e.g., SNMP and command > line interface (CLI) scripts), and human users. Yes, You've right. I missed it. > Thanks, > Phil > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 4 23:33:14 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 44F893A6BFB; Thu, 4 Dec 2008 23:33:14 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 390EE3A6BFB for ; Thu, 4 Dec 2008 23:33:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.492 X-Spam-Level: X-Spam-Status: No, score=0.492 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D1HUtE-U3Dua for ; Thu, 4 Dec 2008 23:33:12 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 2AC9B3A6BEC for ; Thu, 4 Dec 2008 23:33:11 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB57Ww3M008947; Fri, 5 Dec 2008 08:33:01 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 08:32:58 +0100 Message-ID: <4938D8B5.5070407@s3group.com> Date: Fri, 05 Dec 2008 08:31:01 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Phil Shafer References: <200812042003.mB4K3IbL061806@idle.juniper.net> In-Reply-To: <200812042003.mB4K3IbL061806@idle.juniper.net> X-OriginalArrivalTime: 05 Dec 2008 07:32:58.0278 (UTC) FILETIME=[B2041C60:01C956AB] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 08:33:04 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Phil Shafer wrote: > "Tomasz Mikolajczyk" writes: >> I don't agree. I guess that the first operation that the next client would >> execute after lock candidate is either delete-config on candidate, or >> copy-config running->candidate to make sure that candidate doesn't contain >> any unwanted data. > > If the changes are the result of a user sitting at the CLI, discarding > their changes is that very last thing you want to do. What a difference if the other session doing modification for candidate without lock is CLI session or NETCONF session? Why CLI session can't do lock if has access to candidate. As I already described, it's the same when you do a lock on candidate and see data there. You are not sure if these data come from running (previous session unlock) or are prepared by other sessions working without lock (either CLI or NETCONF or whatever). If you can do a lock, do it and change whatever you want. It's another session problem if their data disappears when they work without lock. >> RFC doesn't say anything about lock duration. > > 7.5. > > Description: > > The lock operation allows the client to lock the configuration > --> system of a device. Such locks are intended to be short-lived and > allow a client to make a change without fear of interaction with > other NETCONF clients, non-NETCONF clients (e.g., SNMP and command > line interface (CLI) scripts), and human users. Yes, You've right. I missed it. > Thanks, > Phil > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 00:11:10 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACB2C3A6C21; Fri, 5 Dec 2008 00:11:10 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E09D73A6C04 for ; Fri, 5 Dec 2008 00:11:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E8156crd-lqq for ; Fri, 5 Dec 2008 00:11:09 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id AFC513A6C21 for ; Fri, 5 Dec 2008 00:11:08 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB58Aj8n009456; Fri, 5 Dec 2008 09:10:45 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 09:10:45 +0100 Message-ID: <4938E190.8010001@s3group.com> Date: Fri, 05 Dec 2008 09:08:48 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Washam Fan References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> In-Reply-To: X-OriginalArrivalTime: 05 Dec 2008 08:10:45.0125 (UTC) FILETIME=[F9298350:01C956B0] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 09:10:47 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Washam Fan wrote: > Hi, >> I can't find their advantages. The server shouldn't be wiser than >> a user. Server should do whatever user want to do. >> No matter if the application (i.e. a client) knows that "owns" the >> datastore, or >> there are simultaneously sessions that may be interested in the >> same datastore area, >> a particular session should be able to do a lock anytime wants to >> (unless configuration is already locked). >> Moreover, the session that owns the lock is responsible what is >> left in the config after unlock. >> The session holding the lock is an active ruler and if wants to >> commit the candidate, executes commit explicitly. >> If wants to leave the candidate the same as running, explicit >> copying must be performed. > > A primary functionality of lock is to guarantee atomicity of a transaction or a series of operations, so unlock means either the transaction effect or not at all. > So IMHO, before candidate is the same as running, after candidate is still same as running. > > washam > I understand the purpose of lock and unlock. Atomicity guarantees that in transaction either all operations completely occur, or have no effects. So that means that unlock should leave candidate configuration with the same state as before lock and not with the same state as running. You can't be sure that before lock the state of candidate is the same of running. Consider the following scenario: 1) Session A starts: 1) [A] copy-config running->candidate 2) [A] series of edit-config on unlocked candidate (for example creates new interfaces, sets interfaces parameters) 3) Session B starts (session A still does changes on candidate) 4) [B] do a successful lock 5) [B] get-config on candidate. How B can be sure that the current candidate content is the same as running. Actually in this case candidate != running !! 6) [B] It can't be sure, so to make sure executes copy-config running->candidate. As is a lock holder doesn't care if other sessions uses candidate or not 7) [B] series of edit-config 8) [B] unlock What such unlock has in common with atomicity? See that after unlock state of candidate is completely different than before. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 00:11:10 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACB2C3A6C21; Fri, 5 Dec 2008 00:11:10 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E09D73A6C04 for ; Fri, 5 Dec 2008 00:11:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E8156crd-lqq for ; Fri, 5 Dec 2008 00:11:09 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id AFC513A6C21 for ; Fri, 5 Dec 2008 00:11:08 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB58Aj8n009456; Fri, 5 Dec 2008 09:10:45 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 09:10:45 +0100 Message-ID: <4938E190.8010001@s3group.com> Date: Fri, 05 Dec 2008 09:08:48 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Washam Fan References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> In-Reply-To: X-OriginalArrivalTime: 05 Dec 2008 08:10:45.0125 (UTC) FILETIME=[F9298350:01C956B0] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 09:10:47 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Washam Fan wrote: > Hi, >> I can't find their advantages. The server shouldn't be wiser than >> a user. Server should do whatever user want to do. >> No matter if the application (i.e. a client) knows that "owns" the >> datastore, or >> there are simultaneously sessions that may be interested in the >> same datastore area, >> a particular session should be able to do a lock anytime wants to >> (unless configuration is already locked). >> Moreover, the session that owns the lock is responsible what is >> left in the config after unlock. >> The session holding the lock is an active ruler and if wants to >> commit the candidate, executes commit explicitly. >> If wants to leave the candidate the same as running, explicit >> copying must be performed. > > A primary functionality of lock is to guarantee atomicity of a transaction or a series of operations, so unlock means either the transaction effect or not at all. > So IMHO, before candidate is the same as running, after candidate is still same as running. > > washam > I understand the purpose of lock and unlock. Atomicity guarantees that in transaction either all operations completely occur, or have no effects. So that means that unlock should leave candidate configuration with the same state as before lock and not with the same state as running. You can't be sure that before lock the state of candidate is the same of running. Consider the following scenario: 1) Session A starts: 1) [A] copy-config running->candidate 2) [A] series of edit-config on unlocked candidate (for example creates new interfaces, sets interfaces parameters) 3) Session B starts (session A still does changes on candidate) 4) [B] do a successful lock 5) [B] get-config on candidate. How B can be sure that the current candidate content is the same as running. Actually in this case candidate != running !! 6) [B] It can't be sure, so to make sure executes copy-config running->candidate. As is a lock holder doesn't care if other sessions uses candidate or not 7) [B] series of edit-config 8) [B] unlock What such unlock has in common with atomicity? See that after unlock state of candidate is completely different than before. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 00:24:54 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4900A3A6C25; Fri, 5 Dec 2008 00:24:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 869A03A6C28 for ; Fri, 5 Dec 2008 00:24:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.261 X-Spam-Level: X-Spam-Status: No, score=-2.261 tagged_above=-999 required=5 tests=[AWL=-0.012, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n-4rhnD9I5l7 for ; Fri, 5 Dec 2008 00:24:51 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 8F5BC3A6B14 for ; Fri, 5 Dec 2008 00:24:50 -0800 (PST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id AB7A2C0031; Fri, 5 Dec 2008 09:24:45 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id apSK8S2EqPDk; Fri, 5 Dec 2008 09:24:40 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 6FC05C0030; Fri, 5 Dec 2008 09:24:40 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 048C689E991; Fri, 5 Dec 2008 09:24:38 +0100 (CET) Date: Fri, 5 Dec 2008 09:24:38 +0100 From: Juergen Schoenwaelder To: Tomasz Mikolajczyk Message-ID: <20081205082438.GB13137@elstar.local> Mail-Followup-To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4938E190.8010001@s3group.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 05, 2008 at 09:08:48AM +0100, Tomasz Mikolajczyk wrote: > What such unlock has in common with atomicity? See that after unlock > state of candidate is completely different than before. If you don't lock, you do not get any guarantees. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 00:24:54 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4900A3A6C25; Fri, 5 Dec 2008 00:24:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 869A03A6C28 for ; Fri, 5 Dec 2008 00:24:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.261 X-Spam-Level: X-Spam-Status: No, score=-2.261 tagged_above=-999 required=5 tests=[AWL=-0.012, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n-4rhnD9I5l7 for ; Fri, 5 Dec 2008 00:24:51 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 8F5BC3A6B14 for ; Fri, 5 Dec 2008 00:24:50 -0800 (PST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id AB7A2C0031; Fri, 5 Dec 2008 09:24:45 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id apSK8S2EqPDk; Fri, 5 Dec 2008 09:24:40 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 6FC05C0030; Fri, 5 Dec 2008 09:24:40 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 048C689E991; Fri, 5 Dec 2008 09:24:38 +0100 (CET) Date: Fri, 5 Dec 2008 09:24:38 +0100 From: Juergen Schoenwaelder To: Tomasz Mikolajczyk Message-ID: <20081205082438.GB13137@elstar.local> Mail-Followup-To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4938E190.8010001@s3group.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 05, 2008 at 09:08:48AM +0100, Tomasz Mikolajczyk wrote: > What such unlock has in common with atomicity? See that after unlock > state of candidate is completely different than before. If you don't lock, you do not get any guarantees. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 00:52:02 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4E3713A6C39; Fri, 5 Dec 2008 00:52:02 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 65C503A6C39 for ; Fri, 5 Dec 2008 00:52:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UnjrgeF5qV+n for ; Fri, 5 Dec 2008 00:52:00 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id AFD9D3A6BD8 for ; Fri, 5 Dec 2008 00:51:59 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB58peMU010034; Fri, 5 Dec 2008 09:51:42 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 09:51:40 +0100 Message-ID: <4938EB27.2000507@s3group.com> Date: Fri, 05 Dec 2008 09:49:43 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> In-Reply-To: <20081205082438.GB13137@elstar.local> X-OriginalArrivalTime: 05 Dec 2008 08:51:40.0265 (UTC) FILETIME=[B08A2590:01C956B6] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 09:51:44 +0100 (CET) Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 05, 2008 at 09:08:48AM +0100, Tomasz Mikolajczyk wrote: > >> What such unlock has in common with atomicity? See that after unlock >> state of candidate is completely different than before. > > If you don't lock, you do not get any guarantees. > > /js > But the session [B] from the example did before any other operations. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 00:52:02 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4E3713A6C39; Fri, 5 Dec 2008 00:52:02 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 65C503A6C39 for ; Fri, 5 Dec 2008 00:52:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UnjrgeF5qV+n for ; Fri, 5 Dec 2008 00:52:00 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id AFD9D3A6BD8 for ; Fri, 5 Dec 2008 00:51:59 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB58peMU010034; Fri, 5 Dec 2008 09:51:42 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 09:51:40 +0100 Message-ID: <4938EB27.2000507@s3group.com> Date: Fri, 05 Dec 2008 09:49:43 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> In-Reply-To: <20081205082438.GB13137@elstar.local> X-OriginalArrivalTime: 05 Dec 2008 08:51:40.0265 (UTC) FILETIME=[B08A2590:01C956B6] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 09:51:44 +0100 (CET) Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 05, 2008 at 09:08:48AM +0100, Tomasz Mikolajczyk wrote: > >> What such unlock has in common with atomicity? See that after unlock >> state of candidate is completely different than before. > > If you don't lock, you do not get any guarantees. > > /js > But the session [B] from the example did before any other operations. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 01:00:35 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B43AE3A6C3B; Fri, 5 Dec 2008 01:00:35 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BA1783A6C3B for ; Fri, 5 Dec 2008 01:00:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[AWL=-0.011, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z-FSU4BlvFxN for ; Fri, 5 Dec 2008 01:00:33 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id BFBEC3A6BD8 for ; Fri, 5 Dec 2008 01:00:33 -0800 (PST) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 17EADC0031; Fri, 5 Dec 2008 10:00:29 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id mBxwJEGFVO88; Fri, 5 Dec 2008 10:00:24 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id F1287C003F; Fri, 5 Dec 2008 10:00:22 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 8777789EB09; Fri, 5 Dec 2008 10:00:21 +0100 (CET) Date: Fri, 5 Dec 2008 10:00:21 +0100 From: Juergen Schoenwaelder To: Tomasz Mikolajczyk Message-ID: <20081205090021.GA13293@elstar.local> Mail-Followup-To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4938EB27.2000507@s3group.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 05, 2008 at 09:49:43AM +0100, Tomasz Mikolajczyk wrote: > Juergen Schoenwaelder wrote: > > On Fri, Dec 05, 2008 at 09:08:48AM +0100, Tomasz Mikolajczyk wrote: > > > >> What such unlock has in common with atomicity? See that after unlock > >> state of candidate is completely different than before. > > > > If you don't lock, you do not get any guarantees. > > > > /js > > But the session [B] from the example did before any other operations. A lock means "nobody interferes with what you are doing as long as you own the lock". A lock is a tool to implement an atomic transaction; it is not an atomic transaction by itself. I find section 7.5 of RFC 4741 rather clear about what a lock does. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 01:00:35 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B43AE3A6C3B; Fri, 5 Dec 2008 01:00:35 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BA1783A6C3B for ; Fri, 5 Dec 2008 01:00:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[AWL=-0.011, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z-FSU4BlvFxN for ; Fri, 5 Dec 2008 01:00:33 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id BFBEC3A6BD8 for ; Fri, 5 Dec 2008 01:00:33 -0800 (PST) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 17EADC0031; Fri, 5 Dec 2008 10:00:29 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id mBxwJEGFVO88; Fri, 5 Dec 2008 10:00:24 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id F1287C003F; Fri, 5 Dec 2008 10:00:22 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 8777789EB09; Fri, 5 Dec 2008 10:00:21 +0100 (CET) Date: Fri, 5 Dec 2008 10:00:21 +0100 From: Juergen Schoenwaelder To: Tomasz Mikolajczyk Message-ID: <20081205090021.GA13293@elstar.local> Mail-Followup-To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4938EB27.2000507@s3group.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 05, 2008 at 09:49:43AM +0100, Tomasz Mikolajczyk wrote: > Juergen Schoenwaelder wrote: > > On Fri, Dec 05, 2008 at 09:08:48AM +0100, Tomasz Mikolajczyk wrote: > > > >> What such unlock has in common with atomicity? See that after unlock > >> state of candidate is completely different than before. > > > > If you don't lock, you do not get any guarantees. > > > > /js > > But the session [B] from the example did before any other operations. A lock means "nobody interferes with what you are doing as long as you own the lock". A lock is a tool to implement an atomic transaction; it is not an atomic transaction by itself. I find section 7.5 of RFC 4741 rather clear about what a lock does. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 01:13:22 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0AEC13A6BD8; Fri, 5 Dec 2008 01:13:22 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CDEA83A6BD8 for ; Fri, 5 Dec 2008 01:13:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.656 X-Spam-Level: X-Spam-Status: No, score=-0.656 tagged_above=-999 required=5 tests=[AWL=-0.161, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MZGSohuwPONb for ; Fri, 5 Dec 2008 01:13:20 -0800 (PST) Received: from szxga01-in.huawei.com (unknown [119.145.14.64]) by core3.amsl.com (Postfix) with ESMTP id 000F53A67CC for ; Fri, 5 Dec 2008 01:13:19 -0800 (PST) Received: from huawei.com (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00GZBC9SGG@szxga01-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 17:13:05 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE0038TC9SLA@szxga01-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 17:13:04 +0800 (CST) Received: from [172.24.1.18] (Forwarded-For: [10.27.141.6]) by szxmc04-in.huawei.com (mshttpd); Fri, 05 Dec 2008 17:13:04 +0800 Date: Fri, 05 Dec 2008 17:13:04 +0800 From: Washam Fan In-reply-to: <4938E190.8010001@s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org > > A primary functionality of lock is to guarantee atomicity of a > transaction or a series of operations, so unlock means either the > transaction effect or not at all. > > So IMHO, before candidate is the same as running, after > candidate is still same as running. > > > > washam > > > > I understand the purpose of lock and unlock. Atomicity guarantees > that in transaction either all operations completely occur, or > have no > effects. So that means that unlock should leave candidate > configuration with the same state as before lock and not with the > same state as > running. You can't be sure that before lock the state of candidate > is the same of running. Consider the following scenario: > > 1) Session A starts: > 1) [A] copy-config running->candidate > 2) [A] series of edit-config on unlocked candidate (for example > creates new interfaces, sets interfaces parameters) > 3) Session B starts (session A still does changes on candidate) > 4) [B] do a successful lock > 5) [B] get-config on candidate. How B can be sure that the current > candidate content is the same as running. Actually in this case > candidate != > running !! I am afraid [B] can't do a successful lock on a modified candidate datastore, which is one of the lock failure scenarios. Well, partial lock allows it, I addressed the issue in thread "global vs. partial lock" washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 01:13:22 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0AEC13A6BD8; Fri, 5 Dec 2008 01:13:22 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CDEA83A6BD8 for ; Fri, 5 Dec 2008 01:13:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.656 X-Spam-Level: X-Spam-Status: No, score=-0.656 tagged_above=-999 required=5 tests=[AWL=-0.161, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MZGSohuwPONb for ; Fri, 5 Dec 2008 01:13:20 -0800 (PST) Received: from szxga01-in.huawei.com (unknown [119.145.14.64]) by core3.amsl.com (Postfix) with ESMTP id 000F53A67CC for ; Fri, 5 Dec 2008 01:13:19 -0800 (PST) Received: from huawei.com (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00GZBC9SGG@szxga01-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 17:13:05 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE0038TC9SLA@szxga01-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 17:13:04 +0800 (CST) Received: from [172.24.1.18] (Forwarded-For: [10.27.141.6]) by szxmc04-in.huawei.com (mshttpd); Fri, 05 Dec 2008 17:13:04 +0800 Date: Fri, 05 Dec 2008 17:13:04 +0800 From: Washam Fan In-reply-to: <4938E190.8010001@s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org > > A primary functionality of lock is to guarantee atomicity of a > transaction or a series of operations, so unlock means either the > transaction effect or not at all. > > So IMHO, before candidate is the same as running, after > candidate is still same as running. > > > > washam > > > > I understand the purpose of lock and unlock. Atomicity guarantees > that in transaction either all operations completely occur, or > have no > effects. So that means that unlock should leave candidate > configuration with the same state as before lock and not with the > same state as > running. You can't be sure that before lock the state of candidate > is the same of running. Consider the following scenario: > > 1) Session A starts: > 1) [A] copy-config running->candidate > 2) [A] series of edit-config on unlocked candidate (for example > creates new interfaces, sets interfaces parameters) > 3) Session B starts (session A still does changes on candidate) > 4) [B] do a successful lock > 5) [B] get-config on candidate. How B can be sure that the current > candidate content is the same as running. Actually in this case > candidate != > running !! I am afraid [B] can't do a successful lock on a modified candidate datastore, which is one of the lock failure scenarios. Well, partial lock allows it, I addressed the issue in thread "global vs. partial lock" washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 01:24:51 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8F75D3A6C2E; Fri, 5 Dec 2008 01:24:51 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DFDB03A6C2E for ; Fri, 5 Dec 2008 01:24:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bpgq31MYCdlJ for ; Fri, 5 Dec 2008 01:24:49 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id CDD6D3A6BD8 for ; Fri, 5 Dec 2008 01:24:48 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB59OWV7010561; Fri, 5 Dec 2008 10:24:33 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 10:24:32 +0100 Message-ID: <4938F2DB.2000609@s3group.com> Date: Fri, 05 Dec 2008 10:22:35 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> In-Reply-To: <20081205090021.GA13293@elstar.local> X-OriginalArrivalTime: 05 Dec 2008 09:24:32.0430 (UTC) FILETIME=[480AA4E0:01C956BB] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 10:24:34 +0100 (CET) Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 05, 2008 at 09:49:43AM +0100, Tomasz Mikolajczyk wrote: >> Juergen Schoenwaelder wrote: >>> On Fri, Dec 05, 2008 at 09:08:48AM +0100, Tomasz Mikolajczyk wrote: >>> >>>> What such unlock has in common with atomicity? See that after unlock >>>> state of candidate is completely different than before. >>> If you don't lock, you do not get any guarantees. >>> >>> /js >> But the session [B] from the example did before any other operations. > > A lock means "nobody interferes with what you are doing as long as you > own the lock". Yes, but you don't know the history, especially if the previous sessions did changes on candidate without lock/unlock before your session using lock/unlock started. It means that those possible sessions don't interfere with what your session is doing, because they may no longer exist. > A lock is a tool to implement an atomic transaction; it > is not an atomic transaction by itself. Yes, I agree. However, my scenario presented a few posts ago shows that unlock based on the current spec. can very easy break the atomicity. I find section 7.5 of RFC 4741 > rather clear about what a lock does. > > /js > I agree sesion 7.5 is clear but 7.6. not. I mean unlock should be only unlock and not unlock and copy running->candidate. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 01:24:51 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8F75D3A6C2E; Fri, 5 Dec 2008 01:24:51 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DFDB03A6C2E for ; Fri, 5 Dec 2008 01:24:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bpgq31MYCdlJ for ; Fri, 5 Dec 2008 01:24:49 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id CDD6D3A6BD8 for ; Fri, 5 Dec 2008 01:24:48 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB59OWV7010561; Fri, 5 Dec 2008 10:24:33 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 10:24:32 +0100 Message-ID: <4938F2DB.2000609@s3group.com> Date: Fri, 05 Dec 2008 10:22:35 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> In-Reply-To: <20081205090021.GA13293@elstar.local> X-OriginalArrivalTime: 05 Dec 2008 09:24:32.0430 (UTC) FILETIME=[480AA4E0:01C956BB] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 10:24:34 +0100 (CET) Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 05, 2008 at 09:49:43AM +0100, Tomasz Mikolajczyk wrote: >> Juergen Schoenwaelder wrote: >>> On Fri, Dec 05, 2008 at 09:08:48AM +0100, Tomasz Mikolajczyk wrote: >>> >>>> What such unlock has in common with atomicity? See that after unlock >>>> state of candidate is completely different than before. >>> If you don't lock, you do not get any guarantees. >>> >>> /js >> But the session [B] from the example did before any other operations. > > A lock means "nobody interferes with what you are doing as long as you > own the lock". Yes, but you don't know the history, especially if the previous sessions did changes on candidate without lock/unlock before your session using lock/unlock started. It means that those possible sessions don't interfere with what your session is doing, because they may no longer exist. > A lock is a tool to implement an atomic transaction; it > is not an atomic transaction by itself. Yes, I agree. However, my scenario presented a few posts ago shows that unlock based on the current spec. can very easy break the atomicity. I find section 7.5 of RFC 4741 > rather clear about what a lock does. > > /js > I agree sesion 7.5 is clear but 7.6. not. I mean unlock should be only unlock and not unlock and copy running->candidate. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 01:31:41 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E3E223A6C3C; Fri, 5 Dec 2008 01:31:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 037783A6C3C for ; Fri, 5 Dec 2008 01:31:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[AWL=-0.011, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 89UUcRBcTPxA for ; Fri, 5 Dec 2008 01:31:40 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 39F403A6C31 for ; Fri, 5 Dec 2008 01:31:40 -0800 (PST) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id 8AB17C0030; Fri, 5 Dec 2008 10:31:35 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id itgHpD-z0iZg; Fri, 5 Dec 2008 10:31:30 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 55AA4C0031; Fri, 5 Dec 2008 10:31:30 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 52A3789EBB1; Fri, 5 Dec 2008 10:31:29 +0100 (CET) Date: Fri, 5 Dec 2008 10:31:29 +0100 From: Juergen Schoenwaelder To: Tomasz Mikolajczyk Message-ID: <20081205093129.GA13321@elstar.local> Mail-Followup-To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4938F2DB.2000609@s3group.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 05, 2008 at 10:22:35AM +0100, Tomasz Mikolajczyk wrote: > Yes, I agree. However, my scenario presented a few posts ago shows > that unlock based on the current spec. can very easy break the > atomicity. You might not like the unlock discard behaviour. That can be debated. But claiming that unlock breaks atomicity is IMHO non-sense. If a session does not lock candidate, anything can happen to the candidate datastore, including discard-config. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 01:31:41 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E3E223A6C3C; Fri, 5 Dec 2008 01:31:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 037783A6C3C for ; Fri, 5 Dec 2008 01:31:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[AWL=-0.011, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 89UUcRBcTPxA for ; Fri, 5 Dec 2008 01:31:40 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 39F403A6C31 for ; Fri, 5 Dec 2008 01:31:40 -0800 (PST) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id 8AB17C0030; Fri, 5 Dec 2008 10:31:35 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id itgHpD-z0iZg; Fri, 5 Dec 2008 10:31:30 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 55AA4C0031; Fri, 5 Dec 2008 10:31:30 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 52A3789EBB1; Fri, 5 Dec 2008 10:31:29 +0100 (CET) Date: Fri, 5 Dec 2008 10:31:29 +0100 From: Juergen Schoenwaelder To: Tomasz Mikolajczyk Message-ID: <20081205093129.GA13321@elstar.local> Mail-Followup-To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4938F2DB.2000609@s3group.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 05, 2008 at 10:22:35AM +0100, Tomasz Mikolajczyk wrote: > Yes, I agree. However, my scenario presented a few posts ago shows > that unlock based on the current spec. can very easy break the > atomicity. You might not like the unlock discard behaviour. That can be debated. But claiming that unlock breaks atomicity is IMHO non-sense. If a session does not lock candidate, anything can happen to the candidate datastore, including discard-config. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 02:16:36 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68DDD3A6C52; Fri, 5 Dec 2008 02:16:36 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 03E423A6C38 for ; Fri, 5 Dec 2008 02:16:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U5uFuVGRpaHv for ; Fri, 5 Dec 2008 02:16:35 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id C7A873A6BE0 for ; Fri, 5 Dec 2008 02:16:34 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB5AGFZ6011385; Fri, 5 Dec 2008 11:16:18 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 11:16:16 +0100 Message-ID: <4938FEFA.8050403@s3group.com> Date: Fri, 05 Dec 2008 11:14:18 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Washam Fan References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> In-Reply-To: X-OriginalArrivalTime: 05 Dec 2008 10:16:16.0074 (UTC) FILETIME=[81F522A0:01C956C2] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 11:16:22 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Washam Fan wrote: > >>> A primary functionality of lock is to guarantee atomicity of a >> transaction or a series of operations, so unlock means either the >> transaction effect or not at all. >>> So IMHO, before candidate is the same as running, after >> candidate is still same as running. >>> washam >>> >> I understand the purpose of lock and unlock. Atomicity guarantees >> that in transaction either all operations completely occur, or >> have no >> effects. So that means that unlock should leave candidate >> configuration with the same state as before lock and not with the >> same state as >> running. You can't be sure that before lock the state of candidate >> is the same of running. Consider the following scenario: >> >> 1) Session A starts: >> 1) [A] copy-config running->candidate >> 2) [A] series of edit-config on unlocked candidate (for example >> creates new interfaces, sets interfaces parameters) >> 3) Session B starts (session A still does changes on candidate) >> 4) [B] do a successful lock >> 5) [B] get-config on candidate. How B can be sure that the current >> candidate content is the same as running. Actually in this case >> candidate != >> running !! > I am afraid [B] can't do a successful lock on a modified candidate datastore, which is one of the lock failure scenarios. > Well, partial lock allows it, I addressed the issue in thread "global vs. partial lock" > > washam > Yes, you've right. I forgot about this feature. So corrected version of the scenario: 1) Session A starts: 2) [A] get-config on running 3) [A] get-config on candidate (assumption: running==candidate) 4) someone removes manually interface from the device 5) [A] response get-config on running shows that one interface disappeared 6) Session B starts 7) [B] do a successful lock 8) [B] get-config on candidate. How B can be sure that the current candidate content is the same as running. Actually in this case candidate != running 9) [B] It can't be sure, so to make sure executes copy-config running->candidate. As is a lock holder doesn't care if other sessions uses candidate or not 10) [B] series of edit-config 11) [B] unlock As the unlock part, copy-config running->candidate is performed, and as a result candidate content before lock != candidate content after lock. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 02:16:36 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68DDD3A6C52; Fri, 5 Dec 2008 02:16:36 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 03E423A6C38 for ; Fri, 5 Dec 2008 02:16:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U5uFuVGRpaHv for ; Fri, 5 Dec 2008 02:16:35 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id C7A873A6BE0 for ; Fri, 5 Dec 2008 02:16:34 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB5AGFZ6011385; Fri, 5 Dec 2008 11:16:18 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 11:16:16 +0100 Message-ID: <4938FEFA.8050403@s3group.com> Date: Fri, 05 Dec 2008 11:14:18 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Washam Fan References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> In-Reply-To: X-OriginalArrivalTime: 05 Dec 2008 10:16:16.0074 (UTC) FILETIME=[81F522A0:01C956C2] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 11:16:22 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Washam Fan wrote: > >>> A primary functionality of lock is to guarantee atomicity of a >> transaction or a series of operations, so unlock means either the >> transaction effect or not at all. >>> So IMHO, before candidate is the same as running, after >> candidate is still same as running. >>> washam >>> >> I understand the purpose of lock and unlock. Atomicity guarantees >> that in transaction either all operations completely occur, or >> have no >> effects. So that means that unlock should leave candidate >> configuration with the same state as before lock and not with the >> same state as >> running. You can't be sure that before lock the state of candidate >> is the same of running. Consider the following scenario: >> >> 1) Session A starts: >> 1) [A] copy-config running->candidate >> 2) [A] series of edit-config on unlocked candidate (for example >> creates new interfaces, sets interfaces parameters) >> 3) Session B starts (session A still does changes on candidate) >> 4) [B] do a successful lock >> 5) [B] get-config on candidate. How B can be sure that the current >> candidate content is the same as running. Actually in this case >> candidate != >> running !! > I am afraid [B] can't do a successful lock on a modified candidate datastore, which is one of the lock failure scenarios. > Well, partial lock allows it, I addressed the issue in thread "global vs. partial lock" > > washam > Yes, you've right. I forgot about this feature. So corrected version of the scenario: 1) Session A starts: 2) [A] get-config on running 3) [A] get-config on candidate (assumption: running==candidate) 4) someone removes manually interface from the device 5) [A] response get-config on running shows that one interface disappeared 6) Session B starts 7) [B] do a successful lock 8) [B] get-config on candidate. How B can be sure that the current candidate content is the same as running. Actually in this case candidate != running 9) [B] It can't be sure, so to make sure executes copy-config running->candidate. As is a lock holder doesn't care if other sessions uses candidate or not 10) [B] series of edit-config 11) [B] unlock As the unlock part, copy-config running->candidate is performed, and as a result candidate content before lock != candidate content after lock. Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 02:21:33 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1D5613A6C38; Fri, 5 Dec 2008 02:21:33 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 84D313A6C38 for ; Fri, 5 Dec 2008 02:21:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I2SEZX1bX4yG for ; Fri, 5 Dec 2008 02:21:30 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 783893A6BE3 for ; Fri, 5 Dec 2008 02:21:30 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB5ALJ49011458; Fri, 5 Dec 2008 11:21:19 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 11:21:19 +0100 Message-ID: <49390029.6020307@s3group.com> Date: Fri, 05 Dec 2008 11:19:21 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> <20081205093129.GA13321@elstar.local> In-Reply-To: <20081205093129.GA13321@elstar.local> X-OriginalArrivalTime: 05 Dec 2008 10:21:19.0052 (UTC) FILETIME=[368BE8C0:01C956C3] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 11:21:20 +0100 (CET) Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 05, 2008 at 10:22:35AM +0100, Tomasz Mikolajczyk wrote: > >> Yes, I agree. However, my scenario presented a few posts ago shows >> that unlock based on the current spec. can very easy break the >> atomicity. > > You might not like the unlock discard behaviour. That can be > debated. But claiming that unlock breaks atomicity is IMHO > non-sense. Yes, you've right. We cannot talking about atomicity. It's even not a transaction. If a session does not lock candidate, anything can > happen to the candidate datastore, including discard-config. > > /js > I absolutely agree. No matter if it's CLI session or NETCONF session. Another point. If unlock means also copying running->candidate it means that for any reasons unlock may fail. What's then? I expect that unlock must be successful. So does the unlock means copy running->candidate as much as you can? Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 02:21:33 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1D5613A6C38; Fri, 5 Dec 2008 02:21:33 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 84D313A6C38 for ; Fri, 5 Dec 2008 02:21:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.491 X-Spam-Level: X-Spam-Status: No, score=0.491 tagged_above=-999 required=5 tests=[AWL=0.005, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I2SEZX1bX4yG for ; Fri, 5 Dec 2008 02:21:30 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 783893A6BE3 for ; Fri, 5 Dec 2008 02:21:30 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB5ALJ49011458; Fri, 5 Dec 2008 11:21:19 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 5 Dec 2008 11:21:19 +0100 Message-ID: <49390029.6020307@s3group.com> Date: Fri, 05 Dec 2008 11:19:21 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Tomasz Mikolajczyk , Washam Fan , netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> <20081205093129.GA13321@elstar.local> In-Reply-To: <20081205093129.GA13321@elstar.local> X-OriginalArrivalTime: 05 Dec 2008 10:21:19.0052 (UTC) FILETIME=[368BE8C0:01C956C3] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Fri, 05 Dec 2008 11:21:20 +0100 (CET) Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 05, 2008 at 10:22:35AM +0100, Tomasz Mikolajczyk wrote: > >> Yes, I agree. However, my scenario presented a few posts ago shows >> that unlock based on the current spec. can very easy break the >> atomicity. > > You might not like the unlock discard behaviour. That can be > debated. But claiming that unlock breaks atomicity is IMHO > non-sense. Yes, you've right. We cannot talking about atomicity. It's even not a transaction. If a session does not lock candidate, anything can > happen to the candidate datastore, including discard-config. > > /js > I absolutely agree. No matter if it's CLI session or NETCONF session. Another point. If unlock means also copying running->candidate it means that for any reasons unlock may fail. What's then? I expect that unlock must be successful. So does the unlock means copy running->candidate as much as you can? Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 06:35:19 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 95A5B3A6C6E; Fri, 5 Dec 2008 06:35:19 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2AD8E3A6A70 for ; Fri, 5 Dec 2008 06:35:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_24=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GFfQsGaF01QE for ; Fri, 5 Dec 2008 06:35:17 -0800 (PST) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 3AC763A6888 for ; Fri, 5 Dec 2008 06:35:17 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00ITVR6MHK@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 22:35:10 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00FYWR6MN0@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 22:35:10 +0800 (CST) Received: from [172.24.1.3] (Forwarded-For: [220.249.46.106]) by szxmc04-in.huawei.com (mshttpd); Fri, 05 Dec 2008 22:35:10 +0800 Date: Fri, 05 Dec 2008 22:35:10 +0800 From: Washam Fan In-reply-to: <4938FEFA.8050403@s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <4938FEFA.8050403@s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org > 1) Session A starts: > 2) [A] get-config on running > 3) [A] get-config on candidate (assumption: running==candidate) > 4) someone removes manually interface from the device > 5) [A] response get-config on running shows that one interface > disappeared6) Session B starts > 7) [B] do a successful lock > 8) [B] get-config on candidate. How B can be sure that the current > candidate content is the same as running. Actually in this case > candidate != > running Do you mean candidate still keep the data about removed interface? I don't know what impact this kind of inconsistency would have, but any change on the interface would make no sense to running. > 9) [B] It can't be sure, so to make sure executes copy-config > running->candidate. As is a lock holder doesn't care if other > sessions uses > candidate or not > 10) [B] series of edit-config > 11) [B]From netconf-bounces@ietf.org Fri Dec 5 06:35:19 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 95A5B3A6C6E; Fri, 5 Dec 2008 06:35:19 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2AD8E3A6A70 for ; Fri, 5 Dec 2008 06:35:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_24=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GFfQsGaF01QE for ; Fri, 5 Dec 2008 06:35:17 -0800 (PST) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 3AC763A6888 for ; Fri, 5 Dec 2008 06:35:17 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00ITVR6MHK@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 22:35:10 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00FYWR6MN0@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 22:35:10 +0800 (CST) Received: from [172.24.1.3] (Forwarded-For: [220.249.46.106]) by szxmc04-in.huawei.com (mshttpd); Fri, 05 Dec 2008 22:35:10 +0800 Date: Fri, 05 Dec 2008 22:35:10 +0800 From: Washam Fan In-reply-to: <4938FEFA.8050403@s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <4938FEFA.8050403@s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org > 1) Session A starts: > 2) [A] get-config on running > 3) [A] get-config on candidate (assumption: running==candidate) > 4) someone removes manually interface from the device > 5) [A] response get-config on running shows that one interface > disappeared6) Session B starts > 7) [B] do a successful lock > 8) [B] get-config on candidate. How B can be sure that the current > candidate content is the same as running. Actually in this case > candidate != > running Do you mean candidate still keep the data about removed interface? I don't know what impact this kind of inconsistency would have, but any change on the interface would make no sense to running. > 9) [B] It can't be sure, so to make sure executes copy-config > running->candidate. As is a lock holder doesn't care if other > sessions uses > candidate or not > 10) [B] series of edit-config > 11) [B] unloc unlock You didn't commit, so unlock means discard all the changes on candidate which has the same effect as copy-config running->candidate. > As the unlock part, copy-config running->candidate is performed, > and as a result candidate content before lock != candidate content > after lock. That's OK.IMHO, candidate should be synchronized with running at every failed or every , candidate should be a mirror of running. washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf k You didn't commit, so unlock means discard all the changes on candidate which has the same effect as copy-config running->candidate. > As the unlock part, copy-config running->candidate is performed, > and as a result candidate content before lock != candidate content > after lock. That's OK.IMHO, candidate should be synchronized with running at every failed or every , candidate should be a mirror of running. washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 06:41:12 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 611EF3A6C71; Fri, 5 Dec 2008 06:41:12 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 79C793A6C7F for ; Fri, 5 Dec 2008 06:41:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xDpMJL-qO00o for ; Fri, 5 Dec 2008 06:41:10 -0800 (PST) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 9A1703A69B0 for ; Fri, 5 Dec 2008 06:40:44 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00FOVRFQXE@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 22:40:38 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE006Z5RFQBP@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 22:40:38 +0800 (CST) Received: from [172.24.1.3] (Forwarded-For: [220.249.46.106]) by szxmc04-in.huawei.com (mshttpd); Fri, 05 Dec 2008 22:40:38 +0800 Date: Fri, 05 Dec 2008 22:40:38 +0800 From: Washam Fan In-reply-to: <49390029.6020307@s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> <20081205093129.GA13321@elstar.local> <49390029.6020307@s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org > Another point. If unlock means also copying running->candidate it > means that for any reasons unlock may fail. What's then? > I expect that unlock must be successful. So does the unlock means > copy running->candidate as much as you can? Failed commit means copying running->candidate,too. When users edit-config candidate, they think all the changes they've made on candidate would take effect on running eventually. A inconsistency candidate make no sense, IMHO. washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 06:41:12 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 611EF3A6C71; Fri, 5 Dec 2008 06:41:12 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 79C793A6C7F for ; Fri, 5 Dec 2008 06:41:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xDpMJL-qO00o for ; Fri, 5 Dec 2008 06:41:10 -0800 (PST) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 9A1703A69B0 for ; Fri, 5 Dec 2008 06:40:44 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE00FOVRFQXE@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 22:40:38 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KBE006Z5RFQBP@szxga04-in.huawei.com> for netconf@ietf.org; Fri, 05 Dec 2008 22:40:38 +0800 (CST) Received: from [172.24.1.3] (Forwarded-For: [220.249.46.106]) by szxmc04-in.huawei.com (mshttpd); Fri, 05 Dec 2008 22:40:38 +0800 Date: Fri, 05 Dec 2008 22:40:38 +0800 From: Washam Fan In-reply-to: <49390029.6020307@s3group.com> To: Tomasz Mikolajczyk Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-language: zh-CN Content-disposition: inline X-Accept-Language: zh-CN Priority: normal References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> <20081205093129.GA13321@elstar.local> <49390029.6020307@s3group.com> Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org > Another point. If unlock means also copying running->candidate it > means that for any reasons unlock may fail. What's then? > I expect that unlock must be successful. So does the unlock means > copy running->candidate as much as you can? Failed commit means copying running->candidate,too. When users edit-config candidate, they think all the changes they've made on candidate would take effect on running eventually. A inconsistency candidate make no sense, IMHO. washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 09:05:28 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A83F28C1AE; Fri, 5 Dec 2008 09:05:28 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4257F28C1B4 for ; Fri, 5 Dec 2008 09:05:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.556 X-Spam-Level: X-Spam-Status: No, score=-6.556 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id usQrbmyEEITq for ; Fri, 5 Dec 2008 09:05:26 -0800 (PST) Received: from zrtps0kn.nortel.com (zrtps0kn.nortel.com [47.140.192.55]) by core3.amsl.com (Postfix) with ESMTP id 4316C28C1A6 for ; Fri, 5 Dec 2008 09:05:25 -0800 (PST) Received: from zcarhxm2.corp.nortel.com (zcarhxm2.corp.nortel.com [47.129.230.99]) by zrtps0kn.nortel.com (Switch-2.2.6/Switch-2.2.0) with ESMTP id mB5Gvv813038; Fri, 5 Dec 2008 16:57:57 GMT X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Fri, 5 Dec 2008 11:57:43 -0500 Message-ID: <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> In-Reply-To: <200812042127.mB4LR7RD063828@idle.juniper.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] [netmod] features and capabilities Thread-Index: AclWWGgqdZEkSb7TTHCBoknR5NrcbwAoRTfg References: <20081204.101830.60516549.mbj@tail-f.com> <200812042127.mB4LR7RD063828@idle.juniper.net> From: "Sharon Chisholm" To: "Phil Shafer" , "Martin Bjorklund" Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi The alternative is to have way too much granularity in capability definitions . I think the current method of using the existing :xpath advertisers makes the most sense. Really, once an implementation supports XPath for one (or 56 features), the cost of supporting xpath for a single new capability is not the same as supporting it for the first capability. And should some new fancier version of XPath ever come out, we can just create a new capability :xpath-fancy without having (3*57) capabilities. Sharon -----Original Message----- From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Phil Shafer Sent: Thursday, December 04, 2008 4:27 PM To: Martin Bjorklund Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities Martin Bjorklund writes: >Of course the WG could change its mind, but since we already have >started to reuse the :xpath capability like this, I prefer to be >consistent and resue it also for partial locks. So in a few years, the :xpath capbility will be reused for the 57th time in some new YANG module. An implementor will need to decide if they can afford to support the new module, given that they supported :xpath on one of the 56 earlier uses. This forces all-or-nothing decisions that I'd like to avoid and even if we've made this mistake once, that should be enough. I'd vote for sanity over consistency. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 09:05:28 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A83F28C1AE; Fri, 5 Dec 2008 09:05:28 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4257F28C1B4 for ; Fri, 5 Dec 2008 09:05:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.556 X-Spam-Level: X-Spam-Status: No, score=-6.556 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id usQrbmyEEITq for ; Fri, 5 Dec 2008 09:05:26 -0800 (PST) Received: from zrtps0kn.nortel.com (zrtps0kn.nortel.com [47.140.192.55]) by core3.amsl.com (Postfix) with ESMTP id 4316C28C1A6 for ; Fri, 5 Dec 2008 09:05:25 -0800 (PST) Received: from zcarhxm2.corp.nortel.com (zcarhxm2.corp.nortel.com [47.129.230.99]) by zrtps0kn.nortel.com (Switch-2.2.6/Switch-2.2.0) with ESMTP id mB5Gvv813038; Fri, 5 Dec 2008 16:57:57 GMT X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Fri, 5 Dec 2008 11:57:43 -0500 Message-ID: <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> In-Reply-To: <200812042127.mB4LR7RD063828@idle.juniper.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] [netmod] features and capabilities Thread-Index: AclWWGgqdZEkSb7TTHCBoknR5NrcbwAoRTfg References: <20081204.101830.60516549.mbj@tail-f.com> <200812042127.mB4LR7RD063828@idle.juniper.net> From: "Sharon Chisholm" To: "Phil Shafer" , "Martin Bjorklund" Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi The alternative is to have way too much granularity in capability definitions . I think the current method of using the existing :xpath advertisers makes the most sense. Really, once an implementation supports XPath for one (or 56 features), the cost of supporting xpath for a single new capability is not the same as supporting it for the first capability. And should some new fancier version of XPath ever come out, we can just create a new capability :xpath-fancy without having (3*57) capabilities. Sharon -----Original Message----- From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Phil Shafer Sent: Thursday, December 04, 2008 4:27 PM To: Martin Bjorklund Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities Martin Bjorklund writes: >Of course the WG could change its mind, but since we already have >started to reuse the :xpath capability like this, I prefer to be >consistent and resue it also for partial locks. So in a few years, the :xpath capbility will be reused for the 57th time in some new YANG module. An implementor will need to decide if they can afford to support the new module, given that they supported :xpath on one of the 56 earlier uses. This forces all-or-nothing decisions that I'd like to avoid and even if we've made this mistake once, that should be enough. I'd vote for sanity over consistency. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 10:14:17 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9398C28C1B6; Fri, 5 Dec 2008 10:14:17 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C1B7F28C1B6 for ; Fri, 5 Dec 2008 10:14:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.195 X-Spam-Level: X-Spam-Status: No, score=-2.195 tagged_above=-999 required=5 tests=[AWL=0.070, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Zc2O+bc2ZZl for ; Fri, 5 Dec 2008 10:14:16 -0800 (PST) Received: from smtp119.sbc.mail.sp1.yahoo.com (smtp119.sbc.mail.sp1.yahoo.com [69.147.64.92]) by core3.amsl.com (Postfix) with SMTP id 01B1A3A6ABA for ; Fri, 5 Dec 2008 10:14:16 -0800 (PST) Received: (qmail 74853 invoked from network); 5 Dec 2008 18:14:11 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.231.104 with plain) by smtp119.sbc.mail.sp1.yahoo.com with SMTP; 5 Dec 2008 18:14:09 -0000 X-YMail-OSG: hcIKkqUVM1mB2FJ1r_2F0Qxb.g8F68beZBQHx_FLt_iHa.rsvmWt1UA7dj0cEXiIlUKoKNkSVM5gdWi09X.9tQHrfV0w7uWAQhA5LrqTccZ0m9j.C3.KjpkEkeRP6IoerNtFpUmInRKXL.oZZcsf8YBO X-Yahoo-Newman-Property: ymail-3 Message-ID: <49396F6E.7020507@netconfcentral.com> Date: Fri, 05 Dec 2008 10:14:06 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Sharon Chisholm References: <20081204.101830.60516549.mbj@tail-f.com> <200812042127.mB4LR7RD063828@idle.juniper.net> <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> In-Reply-To: <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Sharon Chisholm wrote: > Hi > > The alternative is to have way too much granularity in capability > definitions . I think the current method of using the existing :xpath > advertisers makes the most sense. Really, once an implementation > supports XPath for one (or 56 features), the cost of supporting xpath > for a single new capability is not the same as supporting it for the > first capability. > > And should some new fancier version of XPath ever come out, we can just > create a new capability :xpath-fancy without having (3*57) capabilities. > I think Phil's proposal to make this a YANG feature is the right choice, but if the NETMOD dependency is unacceptable, then a new capability is needed instead. It is a big deal to keep piling on an existing capability. The WG decided to make some functionality optional, so it should be optional. Consider an agent implementation with sub-agents or even pluggable YANG modules, so module X is written with no knowledge of module Y. An NMS application relies on module X support of :xpath capability. Now a new module (partial-lock) is added and a different NMS app is used to control it. Except the new module, being rushed to market, is a bare-bones compliant implementation with no extras. The vendor is now hosed one way or another. Either advertise :xpath so the first app does not break, or NOT advertise :xpath so the 2nd app does not break. > Sharon Andy > > -----Original Message----- > From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On > Behalf Of Phil Shafer > Sent: Thursday, December 04, 2008 4:27 PM > To: Martin Bjorklund > Cc: netconf@ietf.org > Subject: Re: [Netconf] [netmod] features and capabilities > > Martin Bjorklund writes: >> Of course the WG could change its mind, but since we already have >> started to reuse the :xpath capability like this, I prefer to be >> consistent and resue it also for partial locks. > > So in a few years, the :xpath capbility will be reused for the 57th time > in some new YANG module. An implementor will need to decide if they can > afford to support the new module, given that they supported :xpath on > one of the 56 earlier uses. > > This forces all-or-nothing decisions that I'd like to avoid and even if > we've made this mistake once, that should be enough. I'd vote for > sanity over consistency. > > Thanks, > Phil > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 10:14:17 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9398C28C1B6; Fri, 5 Dec 2008 10:14:17 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C1B7F28C1B6 for ; Fri, 5 Dec 2008 10:14:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.195 X-Spam-Level: X-Spam-Status: No, score=-2.195 tagged_above=-999 required=5 tests=[AWL=0.070, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Zc2O+bc2ZZl for ; Fri, 5 Dec 2008 10:14:16 -0800 (PST) Received: from smtp119.sbc.mail.sp1.yahoo.com (smtp119.sbc.mail.sp1.yahoo.com [69.147.64.92]) by core3.amsl.com (Postfix) with SMTP id 01B1A3A6ABA for ; Fri, 5 Dec 2008 10:14:16 -0800 (PST) Received: (qmail 74853 invoked from network); 5 Dec 2008 18:14:11 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.231.104 with plain) by smtp119.sbc.mail.sp1.yahoo.com with SMTP; 5 Dec 2008 18:14:09 -0000 X-YMail-OSG: hcIKkqUVM1mB2FJ1r_2F0Qxb.g8F68beZBQHx_FLt_iHa.rsvmWt1UA7dj0cEXiIlUKoKNkSVM5gdWi09X.9tQHrfV0w7uWAQhA5LrqTccZ0m9j.C3.KjpkEkeRP6IoerNtFpUmInRKXL.oZZcsf8YBO X-Yahoo-Newman-Property: ymail-3 Message-ID: <49396F6E.7020507@netconfcentral.com> Date: Fri, 05 Dec 2008 10:14:06 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Sharon Chisholm References: <20081204.101830.60516549.mbj@tail-f.com> <200812042127.mB4LR7RD063828@idle.juniper.net> <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> In-Reply-To: <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Sharon Chisholm wrote: > Hi > > The alternative is to have way too much granularity in capability > definitions . I think the current method of using the existing :xpath > advertisers makes the most sense. Really, once an implementation > supports XPath for one (or 56 features), the cost of supporting xpath > for a single new capability is not the same as supporting it for the > first capability. > > And should some new fancier version of XPath ever come out, we can just > create a new capability :xpath-fancy without having (3*57) capabilities. > I think Phil's proposal to make this a YANG feature is the right choice, but if the NETMOD dependency is unacceptable, then a new capability is needed instead. It is a big deal to keep piling on an existing capability. The WG decided to make some functionality optional, so it should be optional. Consider an agent implementation with sub-agents or even pluggable YANG modules, so module X is written with no knowledge of module Y. An NMS application relies on module X support of :xpath capability. Now a new module (partial-lock) is added and a different NMS app is used to control it. Except the new module, being rushed to market, is a bare-bones compliant implementation with no extras. The vendor is now hosed one way or another. Either advertise :xpath so the first app does not break, or NOT advertise :xpath so the 2nd app does not break. > Sharon Andy > > -----Original Message----- > From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On > Behalf Of Phil Shafer > Sent: Thursday, December 04, 2008 4:27 PM > To: Martin Bjorklund > Cc: netconf@ietf.org > Subject: Re: [Netconf] [netmod] features and capabilities > > Martin Bjorklund writes: >> Of course the WG could change its mind, but since we already have >> started to reuse the :xpath capability like this, I prefer to be >> consistent and resue it also for partial locks. > > So in a few years, the :xpath capbility will be reused for the 57th time > in some new YANG module. An implementor will need to decide if they can > afford to support the new module, given that they supported :xpath on > one of the 56 earlier uses. > > This forces all-or-nothing decisions that I'd like to avoid and even if > we've made this mistake once, that should be enough. I'd vote for > sanity over consistency. > > Thanks, > Phil > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 10:17:41 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C5C3528C1CD; Fri, 5 Dec 2008 10:17:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1695D28C1CD for ; Fri, 5 Dec 2008 10:17:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.562 X-Spam-Level: X-Spam-Status: No, score=-6.562 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9WqrzXmbIPKc for ; Fri, 5 Dec 2008 10:17:40 -0800 (PST) Received: from zcars04e.nortel.com (zcars04e.nortel.com [47.129.242.56]) by core3.amsl.com (Postfix) with ESMTP id ECD3C28C1BE for ; Fri, 5 Dec 2008 10:17:39 -0800 (PST) Received: from zcarhxm2.corp.nortel.com (zcarhxm2.corp.nortel.com [47.129.230.99]) by zcars04e.nortel.com (Switch-2.2.0/Switch-2.2.0) with ESMTP id mB5IE5h14163; Fri, 5 Dec 2008 18:14:05 GMT X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Fri, 5 Dec 2008 13:17:24 -0500 Message-ID: <713043CE8B8E1348AF3C546DBE02C1B41789DC89@zcarhxm2.corp.nortel.com> In-Reply-To: <49396F6E.7020507@netconfcentral.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] [netmod] features and capabilities Thread-Index: AclXBUb8gQP/7ApoRcy2JiAvPmnU/gAAD/hw References: <20081204.101830.60516549.mbj@tail-f.com> <200812042127.mB4LR7RD063828@idle.juniper.net> <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> <49396F6E.7020507@netconfcentral.com> From: "Sharon Chisholm" To: "Andy Bierman" Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi Doesn't that violate the separation of the protocol from the data model? How does this work for all the implementations that don't currently support yang? Sharon -----Original Message----- From: Andy Bierman [mailto:andy@netconfcentral.com] Sent: Friday, December 05, 2008 1:14 PM To: Chisholm, Sharon (CAR:ZZ00) Cc: Phil Shafer; Martin Bjorklund; netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities Sharon Chisholm wrote: > Hi > > The alternative is to have way too much granularity in capability > definitions . I think the current method of using the existing :xpath > advertisers makes the most sense. Really, once an implementation > supports XPath for one (or 56 features), the cost of supporting xpath > for a single new capability is not the same as supporting it for the > first capability. > > And should some new fancier version of XPath ever come out, we can > just create a new capability :xpath-fancy without having (3*57) capabilities. > I think Phil's proposal to make this a YANG feature is the right choice, but if the NETMOD dependency is unacceptable, then a new capability is needed instead. It is a big deal to keep piling on an existing capability. The WG decided to make some functionality optional, so it should be optional. Consider an agent implementation with sub-agents or even pluggable YANG modules, so module X is written with no knowledge of module Y. An NMS application relies on module X support of :xpath capability. Now a new module (partial-lock) is added and a different NMS app is used to control it. Except the new module, being rushed to market, is a bare-bones compliant implementation with no extras. The vendor is now hosed one way or another. Either advertise :xpath so the first app does not break, or NOT advertise :xpath so the 2nd app does not break. > Sharon Andy > > -----Original Message----- > From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On > Behalf Of Phil Shafer > Sent: Thursday, December 04, 2008 4:27 PM > To: Martin Bjorklund > Cc: netconf@ietf.org > Subject: Re: [Netconf] [netmod] features and capabilities > > Martin Bjorklund writes: >> Of course the WG could change its mind, but since we already have >> started to reuse the :xpath capability like this, I prefer to be >> consistent and resue it also for partial locks. > > So in a few years, the :xpath capbility will be reused for the 57th > time in some new YANG module. An implementor will need to decide if > they can afford to support the new module, given that they supported > :xpath on one of the 56 earlier uses. > > This forces all-or-nothing decisions that I'd like to avoid and even > if we've made this mistake once, that should be enough. I'd vote for > sanity over consistency. > > Thanks, > Phil > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 10:17:41 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C5C3528C1CD; Fri, 5 Dec 2008 10:17:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1695D28C1CD for ; Fri, 5 Dec 2008 10:17:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.562 X-Spam-Level: X-Spam-Status: No, score=-6.562 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9WqrzXmbIPKc for ; Fri, 5 Dec 2008 10:17:40 -0800 (PST) Received: from zcars04e.nortel.com (zcars04e.nortel.com [47.129.242.56]) by core3.amsl.com (Postfix) with ESMTP id ECD3C28C1BE for ; Fri, 5 Dec 2008 10:17:39 -0800 (PST) Received: from zcarhxm2.corp.nortel.com (zcarhxm2.corp.nortel.com [47.129.230.99]) by zcars04e.nortel.com (Switch-2.2.0/Switch-2.2.0) with ESMTP id mB5IE5h14163; Fri, 5 Dec 2008 18:14:05 GMT X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Fri, 5 Dec 2008 13:17:24 -0500 Message-ID: <713043CE8B8E1348AF3C546DBE02C1B41789DC89@zcarhxm2.corp.nortel.com> In-Reply-To: <49396F6E.7020507@netconfcentral.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] [netmod] features and capabilities Thread-Index: AclXBUb8gQP/7ApoRcy2JiAvPmnU/gAAD/hw References: <20081204.101830.60516549.mbj@tail-f.com> <200812042127.mB4LR7RD063828@idle.juniper.net> <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> <49396F6E.7020507@netconfcentral.com> From: "Sharon Chisholm" To: "Andy Bierman" Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi Doesn't that violate the separation of the protocol from the data model? How does this work for all the implementations that don't currently support yang? Sharon -----Original Message----- From: Andy Bierman [mailto:andy@netconfcentral.com] Sent: Friday, December 05, 2008 1:14 PM To: Chisholm, Sharon (CAR:ZZ00) Cc: Phil Shafer; Martin Bjorklund; netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities Sharon Chisholm wrote: > Hi > > The alternative is to have way too much granularity in capability > definitions . I think the current method of using the existing :xpath > advertisers makes the most sense. Really, once an implementation > supports XPath for one (or 56 features), the cost of supporting xpath > for a single new capability is not the same as supporting it for the > first capability. > > And should some new fancier version of XPath ever come out, we can > just create a new capability :xpath-fancy without having (3*57) capabilities. > I think Phil's proposal to make this a YANG feature is the right choice, but if the NETMOD dependency is unacceptable, then a new capability is needed instead. It is a big deal to keep piling on an existing capability. The WG decided to make some functionality optional, so it should be optional. Consider an agent implementation with sub-agents or even pluggable YANG modules, so module X is written with no knowledge of module Y. An NMS application relies on module X support of :xpath capability. Now a new module (partial-lock) is added and a different NMS app is used to control it. Except the new module, being rushed to market, is a bare-bones compliant implementation with no extras. The vendor is now hosed one way or another. Either advertise :xpath so the first app does not break, or NOT advertise :xpath so the 2nd app does not break. > Sharon Andy > > -----Original Message----- > From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On > Behalf Of Phil Shafer > Sent: Thursday, December 04, 2008 4:27 PM > To: Martin Bjorklund > Cc: netconf@ietf.org > Subject: Re: [Netconf] [netmod] features and capabilities > > Martin Bjorklund writes: >> Of course the WG could change its mind, but since we already have >> started to reuse the :xpath capability like this, I prefer to be >> consistent and resue it also for partial locks. > > So in a few years, the :xpath capbility will be reused for the 57th > time in some new YANG module. An implementor will need to decide if > they can afford to support the new module, given that they supported > :xpath on one of the 56 earlier uses. > > This forces all-or-nothing decisions that I'd like to avoid and even > if we've made this mistake once, that should be enough. I'd vote for > sanity over consistency. > > Thanks, > Phil > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 10:29:00 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6C4D33A6B16; Fri, 5 Dec 2008 10:29:00 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D20FC3A67D2 for ; Fri, 5 Dec 2008 10:28:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.2 X-Spam-Level: X-Spam-Status: No, score=-2.2 tagged_above=-999 required=5 tests=[AWL=0.065, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sFVMK3T20R4K for ; Fri, 5 Dec 2008 10:28:58 -0800 (PST) Received: from smtp117.sbc.mail.sp1.yahoo.com (smtp117.sbc.mail.sp1.yahoo.com [69.147.64.90]) by core3.amsl.com (Postfix) with SMTP id F07CC3A63D2 for ; Fri, 5 Dec 2008 10:28:57 -0800 (PST) Received: (qmail 36024 invoked from network); 5 Dec 2008 18:28:53 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.231.104 with plain) by smtp117.sbc.mail.sp1.yahoo.com with SMTP; 5 Dec 2008 18:28:51 -0000 X-YMail-OSG: V9hnN3AVM1kp59TnyTsCci7Orl03qQwRiidVi1c23R816AlIH49r0inyVHWgKNO.g8EG23d8.lsYfbOLEk52r075G5T04o6UQcgV1iUhjZrE_mM.MR6O.OMS__4OTb5s5aMMoe9l7Wl9XRV8cYXwSOfv X-Yahoo-Newman-Property: ymail-3 Message-ID: <493972E0.9060309@netconfcentral.com> Date: Fri, 05 Dec 2008 10:28:48 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Sharon Chisholm References: <20081204.101830.60516549.mbj@tail-f.com> <200812042127.mB4LR7RD063828@idle.juniper.net> <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> <49396F6E.7020507@netconfcentral.com> <713043CE8B8E1348AF3C546DBE02C1B41789DC89@zcarhxm2.corp.nortel.com> In-Reply-To: <713043CE8B8E1348AF3C546DBE02C1B41789DC89@zcarhxm2.corp.nortel.com> Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Sharon Chisholm wrote: > Hi > > Doesn't that violate the separation of the protocol from the data model? No, because the feature is defined as "XPath 1.0 support for partial-lock", which puts it in the operations layer, not the protocol layer. > How does this work for all the implementations that don't currently > support yang? > An agent does not need to support YANG to construct a capability URI with an extra "?features=xpath-lock" on the end of it. But using a YANG feature is not important enough to wait on the normative reference. A separate capability is fine. So far there are a handful of standard capabilities and adding 1 more will not hurt. There are read by machines anyway, so what does it matter if there are 10 or a 100? > Sharon Andy > > -----Original Message----- > From: Andy Bierman [mailto:andy@netconfcentral.com] > Sent: Friday, December 05, 2008 1:14 PM > To: Chisholm, Sharon (CAR:ZZ00) > Cc: Phil Shafer; Martin Bjorklund; netconf@ietf.org > Subject: Re: [Netconf] [netmod] features and capabilities > > Sharon Chisholm wrote: >> Hi >> >> The alternative is to have way too much granularity in capability >> definitions . I think the current method of using the existing :xpath >> advertisers makes the most sense. Really, once an implementation >> supports XPath for one (or 56 features), the cost of supporting xpath >> for a single new capability is not the same as supporting it for the >> first capability. >> >> And should some new fancier version of XPath ever come out, we can >> just create a new capability :xpath-fancy without having (3*57) > capabilities. > > I think Phil's proposal to make this a YANG feature is the right choice, > but if the NETMOD dependency is unacceptable, then a new capability is > needed instead. > > It is a big deal to keep piling on an existing capability. > The WG decided to make some functionality optional, so it should be > optional. > > Consider an agent implementation with sub-agents or even pluggable YANG > modules, so module X is written with no knowledge of module Y. > An NMS application relies on module X support of :xpath capability. > Now a new module (partial-lock) is added and a different NMS app is used > to control it. Except the new module, being rushed to market, is a > bare-bones compliant implementation with no extras. > > The vendor is now hosed one way or another. > Either advertise :xpath so the first app does not break, or NOT > advertise :xpath so the 2nd app does not break. > > >> Sharon > > > Andy > > >> -----Original Message----- >> From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On >> Behalf Of Phil Shafer >> Sent: Thursday, December 04, 2008 4:27 PM >> To: Martin Bjorklund >> Cc: netconf@ietf.org >> Subject: Re: [Netconf] [netmod] features and capabilities >> >> Martin Bjorklund writes: >>> Of course the WG could change its mind, but since we already have >>> started to reuse the :xpath capability like this, I prefer to be >>> consistent and resue it also for partial locks. >> So in a few years, the :xpath capbility will be reused for the 57th >> time in some new YANG module. An implementor will need to decide if >> they can afford to support the new module, given that they supported >> :xpath on one of the 56 earlier uses. >> >> This forces all-or-nothing decisions that I'd like to avoid and even >> if we've made this mistake once, that should be enough. I'd vote for >> sanity over consistency. >> >> Thanks, >> Phil >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> >> >> > > > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 10:29:00 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6C4D33A6B16; Fri, 5 Dec 2008 10:29:00 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D20FC3A67D2 for ; Fri, 5 Dec 2008 10:28:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.2 X-Spam-Level: X-Spam-Status: No, score=-2.2 tagged_above=-999 required=5 tests=[AWL=0.065, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sFVMK3T20R4K for ; Fri, 5 Dec 2008 10:28:58 -0800 (PST) Received: from smtp117.sbc.mail.sp1.yahoo.com (smtp117.sbc.mail.sp1.yahoo.com [69.147.64.90]) by core3.amsl.com (Postfix) with SMTP id F07CC3A63D2 for ; Fri, 5 Dec 2008 10:28:57 -0800 (PST) Received: (qmail 36024 invoked from network); 5 Dec 2008 18:28:53 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.231.104 with plain) by smtp117.sbc.mail.sp1.yahoo.com with SMTP; 5 Dec 2008 18:28:51 -0000 X-YMail-OSG: V9hnN3AVM1kp59TnyTsCci7Orl03qQwRiidVi1c23R816AlIH49r0inyVHWgKNO.g8EG23d8.lsYfbOLEk52r075G5T04o6UQcgV1iUhjZrE_mM.MR6O.OMS__4OTb5s5aMMoe9l7Wl9XRV8cYXwSOfv X-Yahoo-Newman-Property: ymail-3 Message-ID: <493972E0.9060309@netconfcentral.com> Date: Fri, 05 Dec 2008 10:28:48 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Sharon Chisholm References: <20081204.101830.60516549.mbj@tail-f.com> <200812042127.mB4LR7RD063828@idle.juniper.net> <713043CE8B8E1348AF3C546DBE02C1B41789DAE9@zcarhxm2.corp.nortel.com> <49396F6E.7020507@netconfcentral.com> <713043CE8B8E1348AF3C546DBE02C1B41789DC89@zcarhxm2.corp.nortel.com> In-Reply-To: <713043CE8B8E1348AF3C546DBE02C1B41789DC89@zcarhxm2.corp.nortel.com> Cc: netconf@ietf.org Subject: Re: [Netconf] [netmod] features and capabilities X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Sharon Chisholm wrote: > Hi > > Doesn't that violate the separation of the protocol from the data model? No, because the feature is defined as "XPath 1.0 support for partial-lock", which puts it in the operations layer, not the protocol layer. > How does this work for all the implementations that don't currently > support yang? > An agent does not need to support YANG to construct a capability URI with an extra "?features=xpath-lock" on the end of it. But using a YANG feature is not important enough to wait on the normative reference. A separate capability is fine. So far there are a handful of standard capabilities and adding 1 more will not hurt. There are read by machines anyway, so what does it matter if there are 10 or a 100? > Sharon Andy > > -----Original Message----- > From: Andy Bierman [mailto:andy@netconfcentral.com] > Sent: Friday, December 05, 2008 1:14 PM > To: Chisholm, Sharon (CAR:ZZ00) > Cc: Phil Shafer; Martin Bjorklund; netconf@ietf.org > Subject: Re: [Netconf] [netmod] features and capabilities > > Sharon Chisholm wrote: >> Hi >> >> The alternative is to have way too much granularity in capability >> definitions . I think the current method of using the existing :xpath >> advertisers makes the most sense. Really, once an implementation >> supports XPath for one (or 56 features), the cost of supporting xpath >> for a single new capability is not the same as supporting it for the >> first capability. >> >> And should some new fancier version of XPath ever come out, we can >> just create a new capability :xpath-fancy without having (3*57) > capabilities. > > I think Phil's proposal to make this a YANG feature is the right choice, > but if the NETMOD dependency is unacceptable, then a new capability is > needed instead. > > It is a big deal to keep piling on an existing capability. > The WG decided to make some functionality optional, so it should be > optional. > > Consider an agent implementation with sub-agents or even pluggable YANG > modules, so module X is written with no knowledge of module Y. > An NMS application relies on module X support of :xpath capability. > Now a new module (partial-lock) is added and a different NMS app is used > to control it. Except the new module, being rushed to market, is a > bare-bones compliant implementation with no extras. > > The vendor is now hosed one way or another. > Either advertise :xpath so the first app does not break, or NOT > advertise :xpath so the 2nd app does not break. > > >> Sharon > > > Andy > > >> -----Original Message----- >> From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On >> Behalf Of Phil Shafer >> Sent: Thursday, December 04, 2008 4:27 PM >> To: Martin Bjorklund >> Cc: netconf@ietf.org >> Subject: Re: [Netconf] [netmod] features and capabilities >> >> Martin Bjorklund writes: >>> Of course the WG could change its mind, but since we already have >>> started to reuse the :xpath capability like this, I prefer to be >>> consistent and resue it also for partial locks. >> So in a few years, the :xpath capbility will be reused for the 57th >> time in some new YANG module. An implementor will need to decide if >> they can afford to support the new module, given that they supported >> :xpath on one of the 56 earlier uses. >> >> This forces all-or-nothing decisions that I'd like to avoid and even >> if we've made this mistake once, that should be enough. I'd vote for >> sanity over consistency. >> >> Thanks, >> Phil >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> >> >> > > > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 5 12:00:54 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0768B28C1FB; Fri, 5 Dec 2008 12:00:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9B51428C1FB for ; Fri, 5 Dec 2008 12:00:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.068 X-Spam-Level: X-Spam-Status: No, score=0.068 tagged_above=-999 required=5 tests=[AWL=0.510, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wG4U4arJJ6fi for ; Fri, 5 Dec 2008 12:00:45 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 6ADFD28C213 for ; Fri, 5 Dec 2008 12:00:27 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1L8gqa-0002Ge-6z for netconf@ietf.org; Fri, 05 Dec 2008 21:00:20 +0100 Message-ID: <496CAD2804D24F2F8B1BE59F885C30AA@BertLaptop> From: "Bert Wijnen \(IETF\)" To: "Netconf" References: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> In-Reply-To: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> Date: Fri, 5 Dec 2008 21:00:11 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Subject: Re: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1948065940==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============1948065940== Content-Type: multipart/alternative; boundary="----=_NextPart_000_09D1_01C9571C.76BD0650" This is a multi-part message in MIME format. ------=_NextPart_000_09D1_01C9571C.76BD0650 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Your WG chairs have come to the conclusion that we do NOT HAVE (even = ROUGH) consensus as to what to do in this space. So for now we are putting aside this = topic and will not include it in our considerations for new work. If people still feel this is urgently needed, they can continue to write = indivudial I-Ds that show what sort of things they want to do. Bert and Mehmet. ----- Original Message -----=20 From: Bert Wijnen (IETF)=20 To: Netconf=20 Sent: Thursday, November 27, 2008 12:35 PM Subject: [Netconf] Calrification: confirm WG consensus on potential = new WGwork-item:notification Dear Netconf WG participants, It seems that some people who expressed their opinion in our sesion at = IETF73 are changing their minds. And some people who did express their = opinion are doing so again here on the mailing list. Since we only counted the number of people in favor or against this=20 work-item and since we did NOT write down names, it becomes difficult to judge (rough) consensus. So to make that easier, we ask EVERYONE to express their opinion on the mailing list again, ALSO those who = already did so at our session in Minneapolis. Bert and Mehmet ----- Original Message -----=20 From: Bert Wijnen (IETF) To: Netconf Sent: Wednesday, November 26, 2008 6:56 PM Subject: [Netconf] confirm WG consensus on potential new WG=20 work-item:notification WG participants, At our NetConf Session at IETF73, the people in the room expressed = strong support for the following statements: - We do not want to define extensive Notification content NOW - We just want to define content for notifications that we URGENTLY need now (within the next year). That is one or two notifications - Less urgent notification content we can define once the NETMOD results become available The WG chairs consider this to be WG consensus. If anyone on the = mailing list does not agree, please speak up before Dec 3rd 2008. That is one = week. We want to try and get updated charter to IESG before X-mas. The WG chairs do not want to consider draft-chisholm-netconf-not-content-00.txt as a starting point. The reason being that it wants to do much more = than the minimal approach that is expressed above. The WG chairs will propose/draft new charter text that we will = circulate for consensus checking. Once we have such a draft text, we will also call for volunteers to become editors of the document. Bert and Mehmet=20 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------=_NextPart_000_09D1_01C9571C.76BD0650 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Your WG chairs have come to the conclusion that we = do NOT HAVE=20 (even ROUGH) consensus
as to what to do in this space. So for now we are = putting=20 aside this topic and will not
include it in our considerations for new = work.
 
If people still feel this is urgently needed, they = can=20 continue to write indivudial I-Ds that
show what sort of things they want to = do.
 
Bert and Mehmet.
----- Original Message -----
From:=20 Bert Wijnen=20 (IETF)
To: Netconf
Sent: Thursday, November 27, = 2008 12:35=20 PM
Subject: [Netconf] = Calrification: confirm=20 WG consensus on potential new WGwork-item:notification

Dear Netconf WG participants,

It seems that some = people=20 who expressed their opinion in our sesion at
IETF73
are = changing their=20 minds. And some people who did express their opinion are
doing so = again=20 here on the mailing list.

Since we only counted the number of = people in=20 favor or against this
work-item
and since we did NOT write down = names,=20 it becomes difficult to judge
(rough) consensus. So to make that = easier, we=20 ask EVERYONE to
express their opinion on the mailing list again, = ALSO those=20 who already did
so at our session in Minneapolis.

Bert and=20 Mehmet

----- Original Message -----
From: Bert Wijnen = (IETF)
To:=20 Netconf
Sent: Wednesday, November 26, 2008 6:56 PM
Subject: = [Netconf]=20 confirm WG consensus on potential new WG=20
work-item:notification


WG participants,

At our = NetConf=20 Session at IETF73, the people in the room expressed strong
support = for the=20 following statements:

  - We do not want to define = extensive=20 Notification content NOW
  - We just want to define content = for=20 notifications that we URGENTLY
    need now (within = the next=20 year). That is one or two notifications
  - Less urgent = notification=20 content we can define once the NETMOD
    results = become=20 available

The WG chairs consider this to be WG consensus. If = anyone on=20 the mailing
list does not agree, please speak up before Dec 3rd = 2008. =20 That is one week.
We want to try and get updated charter to IESG = before=20 X-mas.

The WG chairs do not want to=20 consider
draft-chisholm-netconf-not-content-00.txt
as a starting = point.=20 The reason being that it wants to do much more than the
minimal = approach=20 that is expressed above.

The WG chairs will propose/draft new = charter=20 text that we will circulate
for consensus checking. Once we have = such a=20 draft text, we will also
call for volunteers to become editors of = the=20 document.

Bert and Mehmet=20


_______________________________________________
Netconf = mailing=20 list
Netconf@ietf.org
https://www.ietf.o= rg/mailman/listinfo/netconf

------=_NextPart_000_09D1_01C9571C.76BD0650-- --===============1948065940== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============1948065940==-- From netconf-bounces@ietf.org Fri Dec 5 12:00:54 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0768B28C1FB; Fri, 5 Dec 2008 12:00:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9B51428C1FB for ; Fri, 5 Dec 2008 12:00:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.068 X-Spam-Level: X-Spam-Status: No, score=0.068 tagged_above=-999 required=5 tests=[AWL=0.510, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wG4U4arJJ6fi for ; Fri, 5 Dec 2008 12:00:45 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 6ADFD28C213 for ; Fri, 5 Dec 2008 12:00:27 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1L8gqa-0002Ge-6z for netconf@ietf.org; Fri, 05 Dec 2008 21:00:20 +0100 Message-ID: <496CAD2804D24F2F8B1BE59F885C30AA@BertLaptop> From: "Bert Wijnen \(IETF\)" To: "Netconf" References: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> In-Reply-To: <2885EDEF01874B00B06E4DD515C469C8@BertLaptop> Date: Fri, 5 Dec 2008 21:00:11 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Subject: Re: [Netconf] Calrification: confirm WG consensus on potential new WGwork-item:notification X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1948065940==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============1948065940== Content-Type: multipart/alternative; boundary="----=_NextPart_000_09D1_01C9571C.76BD0650" This is a multi-part message in MIME format. ------=_NextPart_000_09D1_01C9571C.76BD0650 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Your WG chairs have come to the conclusion that we do NOT HAVE (even = ROUGH) consensus as to what to do in this space. So for now we are putting aside this = topic and will not include it in our considerations for new work. If people still feel this is urgently needed, they can continue to write = indivudial I-Ds that show what sort of things they want to do. Bert and Mehmet. ----- Original Message -----=20 From: Bert Wijnen (IETF)=20 To: Netconf=20 Sent: Thursday, November 27, 2008 12:35 PM Subject: [Netconf] Calrification: confirm WG consensus on potential = new WGwork-item:notification Dear Netconf WG participants, It seems that some people who expressed their opinion in our sesion at = IETF73 are changing their minds. And some people who did express their = opinion are doing so again here on the mailing list. Since we only counted the number of people in favor or against this=20 work-item and since we did NOT write down names, it becomes difficult to judge (rough) consensus. So to make that easier, we ask EVERYONE to express their opinion on the mailing list again, ALSO those who = already did so at our session in Minneapolis. Bert and Mehmet ----- Original Message -----=20 From: Bert Wijnen (IETF) To: Netconf Sent: Wednesday, November 26, 2008 6:56 PM Subject: [Netconf] confirm WG consensus on potential new WG=20 work-item:notification WG participants, At our NetConf Session at IETF73, the people in the room expressed = strong support for the following statements: - We do not want to define extensive Notification content NOW - We just want to define content for notifications that we URGENTLY need now (within the next year). That is one or two notifications - Less urgent notification content we can define once the NETMOD results become available The WG chairs consider this to be WG consensus. If anyone on the = mailing list does not agree, please speak up before Dec 3rd 2008. That is one = week. We want to try and get updated charter to IESG before X-mas. The WG chairs do not want to consider draft-chisholm-netconf-not-content-00.txt as a starting point. The reason being that it wants to do much more = than the minimal approach that is expressed above. The WG chairs will propose/draft new charter text that we will = circulate for consensus checking. Once we have such a draft text, we will also call for volunteers to become editors of the document. Bert and Mehmet=20 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------=_NextPart_000_09D1_01C9571C.76BD0650 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Your WG chairs have come to the conclusion that we = do NOT HAVE=20 (even ROUGH) consensus
as to what to do in this space. So for now we are = putting=20 aside this topic and will not
include it in our considerations for new = work.
 
If people still feel this is urgently needed, they = can=20 continue to write indivudial I-Ds that
show what sort of things they want to = do.
 
Bert and Mehmet.
----- Original Message -----
From:=20 Bert Wijnen=20 (IETF)
To: Netconf
Sent: Thursday, November 27, = 2008 12:35=20 PM
Subject: [Netconf] = Calrification: confirm=20 WG consensus on potential new WGwork-item:notification

Dear Netconf WG participants,

It seems that some = people=20 who expressed their opinion in our sesion at
IETF73
are = changing their=20 minds. And some people who did express their opinion are
doing so = again=20 here on the mailing list.

Since we only counted the number of = people in=20 favor or against this
work-item
and since we did NOT write down = names,=20 it becomes difficult to judge
(rough) consensus. So to make that = easier, we=20 ask EVERYONE to
express their opinion on the mailing list again, = ALSO those=20 who already did
so at our session in Minneapolis.

Bert and=20 Mehmet

----- Original Message -----
From: Bert Wijnen = (IETF)
To:=20 Netconf
Sent: Wednesday, November 26, 2008 6:56 PM
Subject: = [Netconf]=20 confirm WG consensus on potential new WG=20
work-item:notification


WG participants,

At our = NetConf=20 Session at IETF73, the people in the room expressed strong
support = for the=20 following statements:

  - We do not want to define = extensive=20 Notification content NOW
  - We just want to define content = for=20 notifications that we URGENTLY
    need now (within = the next=20 year). That is one or two notifications
  - Less urgent = notification=20 content we can define once the NETMOD
    results = become=20 available

The WG chairs consider this to be WG consensus. If = anyone on=20 the mailing
list does not agree, please speak up before Dec 3rd = 2008. =20 That is one week.
We want to try and get updated charter to IESG = before=20 X-mas.

The WG chairs do not want to=20 consider
draft-chisholm-netconf-not-content-00.txt
as a starting = point.=20 The reason being that it wants to do much more than the
minimal = approach=20 that is expressed above.

The WG chairs will propose/draft new = charter=20 text that we will circulate
for consensus checking. Once we have = such a=20 draft text, we will also
call for volunteers to become editors of = the=20 document.

Bert and Mehmet=20


_______________________________________________
Netconf = mailing=20 list
Netconf@ietf.org
https://www.ietf.o= rg/mailman/listinfo/netconf

------=_NextPart_000_09D1_01C9571C.76BD0650-- --===============1948065940== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============1948065940==-- From netconf-bounces@ietf.org Mon Dec 8 05:43:18 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 57ED13A6936; Mon, 8 Dec 2008 05:43:18 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A2243A6937 for ; Mon, 8 Dec 2008 05:43:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.189 X-Spam-Level: X-Spam-Status: No, score=-6.189 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RFYldbjNil2Y for ; Mon, 8 Dec 2008 05:43:16 -0800 (PST) Received: from mailgw3.ericsson.se (mailgw3.ericsson.se [193.180.251.60]) by core3.amsl.com (Postfix) with ESMTP id 04A9B3A6782 for ; Mon, 8 Dec 2008 05:43:15 -0800 (PST) Received: from mailgw3.ericsson.se (unknown [127.0.0.1]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id 934DE20466 for ; Mon, 8 Dec 2008 14:43:09 +0100 (CET) X-AuditID: c1b4fb3c-adf5ebb00000304c-75-493d246d4d3b Received: from esealmw127.eemea.ericsson.se (unknown [153.88.254.122]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id 8272F2076A for ; Mon, 8 Dec 2008 14:43:09 +0100 (CET) Received: from esealmw129.eemea.ericsson.se ([153.88.254.177]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Mon, 8 Dec 2008 14:43:09 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Mon, 8 Dec 2008 14:43:09 +0100 Message-ID: <493D246C.4030204@ericsson.com> Date: Mon, 08 Dec 2008 14:43:08 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> <20081205093129.GA13321@elstar.local> <49390029.6020307@s3group.com> In-Reply-To: X-OriginalArrivalTime: 08 Dec 2008 13:43:09.0218 (UTC) FILETIME=[E801D820:01C9593A] X-Brightmail-Tracker: AAAAAA== Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hello, IMHO the length of this discussion alone indicates to me, that it is not trivial to understand the lock functionality. (As I remember, Tomasz is not the first one who had questions/reservations about the side effects of lock.) This is the reason why partial-lock does no less and no more then what its name indicates: "Lock part of the datastore". I think that is simple to understand. Balazs Washam Fan wrote: > >> Another point. If unlock means also copying running->candidate it >> means that for any reasons unlock may fail. WhatFrom netconf-bounces@ietf.org Mon Dec 8 05:43:18 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 57ED13A6936; Mon, 8 Dec 2008 05:43:18 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A2243A6937 for ; Mon, 8 Dec 2008 05:43:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.189 X-Spam-Level: X-Spam-Status: No, score=-6.189 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RFYldbjNil2Y for ; Mon, 8 Dec 2008 05:43:16 -0800 (PST) Received: from mailgw3.ericsson.se (mailgw3.ericsson.se [193.180.251.60]) by core3.amsl.com (Postfix) with ESMTP id 04A9B3A6782 for ; Mon, 8 Dec 2008 05:43:15 -0800 (PST) Received: from mailgw3.ericsson.se (unknown [127.0.0.1]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id 934DE20466 for ; Mon, 8 Dec 2008 14:43:09 +0100 (CET) X-AuditID: c1b4fb3c-adf5ebb00000304c-75-493d246d4d3b Received: from esealmw127.eemea.ericsson.se (unknown [153.88.254.122]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id 8272F2076A for ; Mon, 8 Dec 2008 14:43:09 +0100 (CET) Received: from esealmw129.eemea.ericsson.se ([153.88.254.177]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Mon, 8 Dec 2008 14:43:09 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Mon, 8 Dec 2008 14:43:09 +0100 Message-ID: <493D246C.4030204@ericsson.com> Date: Mon, 08 Dec 2008 14:43:08 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: netconf@ietf.org References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> <20081205093129.GA13321@elstar.local> <49390029.6020307@s3group.com> In-Reply-To: X-OriginalArrivalTime: 08 Dec 2008 13:43:09.0218 (UTC) FILETIME=[E801D820:01C9593A] X-Brightmail-Tracker: AAAAAA== Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hello, IMHO the length of this discussion alone indicates to me, that it is not trivial to understand the lock functionality. (As I remember, Tomasz is not the first one who had questions/reservations about the side effects of lock.) This is the reason why partial-lock does no less and no more then what its name indicates: "Lock part of the datastore". I think that is simple to understand. Balazs Washam Fan wrote: > >> Another point. If unlock means also copying running->candidate it >> means that for any reasons unlock may fail. What's the's then? >> I expect that unlock must be successful. So does the unlock means >> copy running->candidate as much as you can? > > Failed commit means copying running->candidate,too. When users edit-config candidate, they think all the changes they've made on candidate would take effect on running eventually. A inconsistency candidate make no sense, IMHO. > > washam > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > -- Balazs Lengyel Ericsson Hungary Ltd. TSP System Manager ECN: 831 7320 Fax: +36 1 4377792 Tel: +36-1-437-7320 email: Balazs.Lengyel@ericsson.com _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf n? >> I expect that unlock must be successful. So does the unlock means >> copy running->candidate as much as you can? > > Failed commit means copying running->candidate,too. When users edit-config candidate, they think all the changes they've made on candidate would take effect on running eventually. A inconsistency candidate make no sense, IMHO. > > washam > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > -- Balazs Lengyel Ericsson Hungary Ltd. TSP System Manager ECN: 831 7320 Fax: +36 1 4377792 Tel: +36-1-437-7320 email: Balazs.Lengyel@ericsson.com _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 06:10:10 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 030393A6A84; Mon, 8 Dec 2008 06:10:10 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 750933A6A84 for ; Mon, 8 Dec 2008 06:10:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.49 X-Spam-Level: X-Spam-Status: No, score=0.49 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HItcegTfHlun for ; Mon, 8 Dec 2008 06:10:07 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 59CFA3A692C for ; Mon, 8 Dec 2008 06:10:07 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB8E9vJ4015346; Mon, 8 Dec 2008 15:09:57 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 8 Dec 2008 15:09:56 +0100 Message-ID: <493D2A3B.9090006@s3group.com> Date: Mon, 08 Dec 2008 15:07:55 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Balazs Lengyel References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> <20081205093129.GA13321@elstar.local> <49390029.6020307@s3group.com> <493D246C.4030204@ericsson.com> In-Reply-To: <493D246C.4030204@ericsson.com> X-OriginalArrivalTime: 08 Dec 2008 14:09:56.0860 (UTC) FILETIME=[A63C8BC0:01C9593E] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Mon, 08 Dec 2008 15:09:58 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Balazs Lengyel wrote: > Hello, > IMHO the length of this discussion alone indicates to me, that it is not > trivial to understand the lock functionality. (As I remember, Tomasz is > not the first one who had questions/reservations about the side effects > of lock.) > This is the reason why partial-lock does no less and no more then what > its name indicates: "Lock part of the datastore". I think that is simple > to understand. > Balazs But introducing new functionalities will not help when the foundations are not enough strong. > Washam Fan wrote: >> >>> Another point. If unlock means also copying running->candidate it >>> means that for any reasons unlock may fail. What's then? >>> I expect that unlock must be successful. So does the unlock means >>> copy running->candidate as much as you can? >> >> Failed commit means copying running->candidate,too. When users >> edit-config candidate, they think all the changes they've made on >> candidate would take effect on running eventually. A inconsistency >> candidate make no sense, IMHO. >> >> washam >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 06:10:10 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 030393A6A84; Mon, 8 Dec 2008 06:10:10 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 750933A6A84 for ; Mon, 8 Dec 2008 06:10:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.49 X-Spam-Level: X-Spam-Status: No, score=0.49 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HItcegTfHlun for ; Mon, 8 Dec 2008 06:10:07 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 59CFA3A692C for ; Mon, 8 Dec 2008 06:10:07 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB8E9vJ4015346; Mon, 8 Dec 2008 15:09:57 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 8 Dec 2008 15:09:56 +0100 Message-ID: <493D2A3B.9090006@s3group.com> Date: Mon, 08 Dec 2008 15:07:55 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Balazs Lengyel References: <200812021837.mB2IbnT9002400@idle.juniper.net> <4937A1F5.40602@s3group.com> <4938E190.8010001@s3group.com> <20081205082438.GB13137@elstar.local> <4938EB27.2000507@s3group.com> <20081205090021.GA13293@elstar.local> <4938F2DB.2000609@s3group.com> <20081205093129.GA13321@elstar.local> <49390029.6020307@s3group.com> <493D246C.4030204@ericsson.com> In-Reply-To: <493D246C.4030204@ericsson.com> X-OriginalArrivalTime: 08 Dec 2008 14:09:56.0860 (UTC) FILETIME=[A63C8BC0:01C9593E] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Mon, 08 Dec 2008 15:09:58 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Balazs Lengyel wrote: > Hello, > IMHO the length of this discussion alone indicates to me, that it is not > trivial to understand the lock functionality. (As I remember, Tomasz is > not the first one who had questions/reservations about the side effects > of lock.) > This is the reason why partial-lock does no less and no more then what > its name indicates: "Lock part of the datastore". I think that is simple > to understand. > Balazs But introducing new functionalities will not help when the foundations are not enough strong. > Washam Fan wrote: >> >>> Another point. If unlock means also copying running->candidate it >>> means that for any reasons unlock may fail. What's then? >>> I expect that unlock must be successful. So does the unlock means >>> copy running->candidate as much as you can? >> >> Failed commit means copying running->candidate,too. When users >> edit-config candidate, they think all the changes they've made on >> candidate would take effect on running eventually. A inconsistency >> candidate make no sense, IMHO. >> >> washam >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 07:03:15 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B0C083A685D; Mon, 8 Dec 2008 07:03:15 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A0D933A685D for ; Mon, 8 Dec 2008 07:03:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u8f82y4HUhv3 for ; Mon, 8 Dec 2008 07:03:14 -0800 (PST) Received: from exprod7og115.obsmtp.com (exprod7ob115.obsmtp.com [64.18.2.216]) by core3.amsl.com (Postfix) with ESMTP id C0D923A6781 for ; Mon, 8 Dec 2008 07:03:13 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob115.postini.com ([64.18.6.12]) with SMTP ID DSNKST03LO3Sxp+mLSwG7Az1kTFaGwUst2Ke@postini.com; Mon, 08 Dec 2008 07:03:09 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Mon, 8 Dec 2008 07:01:01 -0800 Received: from p-emlb01-sac.jnpr.net ([66.129.254.46]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Dec 2008 07:01:01 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Dec 2008 07:01:00 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Dec 2008 07:01:00 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB8F0xM70119; Mon, 8 Dec 2008 07:00:59 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB8Ete0v089428; Mon, 8 Dec 2008 14:55:40 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812081455.mB8Ete0v089428@idle.juniper.net> To: Balazs Lengyel In-Reply-To: <493D246C.4030204@ericsson.com> Date: Mon, 8 Dec 2008 09:55:40 -0500 From: Phil Shafer X-OriginalArrivalTime: 08 Dec 2008 15:01:00.0578 (UTC) FILETIME=[C85AD020:01C95945] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Balazs Lengyel writes: >"Lock part of the datastore". I think that is simple to understand. The statement is simple, but the implications are the source of the issues. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 07:03:15 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B0C083A685D; Mon, 8 Dec 2008 07:03:15 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A0D933A685D for ; Mon, 8 Dec 2008 07:03:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u8f82y4HUhv3 for ; Mon, 8 Dec 2008 07:03:14 -0800 (PST) Received: from exprod7og115.obsmtp.com (exprod7ob115.obsmtp.com [64.18.2.216]) by core3.amsl.com (Postfix) with ESMTP id C0D923A6781 for ; Mon, 8 Dec 2008 07:03:13 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob115.postini.com ([64.18.6.12]) with SMTP ID DSNKST03LO3Sxp+mLSwG7Az1kTFaGwUst2Ke@postini.com; Mon, 08 Dec 2008 07:03:09 PST Received: from p-emfe01-sac.jnpr.net (66.129.254.72) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.1.311.2; Mon, 8 Dec 2008 07:01:01 -0800 Received: from p-emlb01-sac.jnpr.net ([66.129.254.46]) by p-emfe01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Dec 2008 07:01:01 -0800 Received: from emailsmtp56.jnpr.net ([172.24.60.77]) by p-emlb01-sac.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Dec 2008 07:01:00 -0800 Received: from magenta.juniper.net ([172.17.27.123]) by emailsmtp56.jnpr.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Dec 2008 07:01:00 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id mB8F0xM70119; Mon, 8 Dec 2008 07:00:59 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.13.8/8.13.8) with ESMTP id mB8Ete0v089428; Mon, 8 Dec 2008 14:55:40 GMT (envelope-from phil@idle.juniper.net) Message-ID: <200812081455.mB8Ete0v089428@idle.juniper.net> To: Balazs Lengyel In-Reply-To: <493D246C.4030204@ericsson.com> Date: Mon, 8 Dec 2008 09:55:40 -0500 From: Phil Shafer X-OriginalArrivalTime: 08 Dec 2008 15:01:00.0578 (UTC) FILETIME=[C85AD020:01C95945] MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] lock/unlock on candidate X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Balazs Lengyel writes: >"Lock part of the datastore". I think that is simple to understand. The statement is simple, but the implications are the source of the issues. Thanks, Phil _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 08:15:39 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BE0C73A68F0; Mon, 8 Dec 2008 08:15:39 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 13A543A68E3 for ; Mon, 8 Dec 2008 08:15:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.26 X-Spam-Level: X-Spam-Status: No, score=-1.26 tagged_above=-999 required=5 tests=[AWL=0.728, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id afI7w-9M9Pb7 for ; Mon, 8 Dec 2008 08:15:38 -0800 (PST) Received: from wes.hardakers.net (dcn236-43.dcn.davis.ca.us [168.150.236.43]) by core3.amsl.com (Postfix) with ESMTP id 63F613A6768 for ; Mon, 8 Dec 2008 08:15:38 -0800 (PST) Received: from localhost (wlap.dyn.hardakers.net [127.0.0.1]) by wes.hardakers.net (Postfix) with ESMTP id E9ACF39A214; Mon, 8 Dec 2008 08:15:32 -0800 (PST) From: Wes Hardaker To: Andy Bierman Organization: Sparta References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> Date: Mon, 08 Dec 2008 08:15:32 -0800 In-Reply-To: <49315EFA.3000406@netconfcentral.com> (Andy Bierman's message of "Sat, 29 Nov 2008 07:25:46 -0800") Message-ID: User-Agent: Gnus/5.110011 (No Gnus v0.11) XEmacs/21.4.21 (linux, no MULE) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org >>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman said: AB> We have attributes in the element so we AB> need a CLR that says "]]>]]>" is not allowed AB> to appear anywhere inside a NETCONF PDU. It'd be a nasty security bug if the EOM marker could be inserted as valid text inside XML. If indeed the XML directorate was wrong at the time that advice was given, you definitely need that CLR. Otherwise you risk the possibility of non-privileged users providing the system with text that includes that marker followed by a complete edit-config command and another proper marker. -- "In the bathtub of history the truth is harder to hold than the soap, and much more difficult to find." -- Terry Pratchett _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 08:15:39 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BE0C73A68F0; Mon, 8 Dec 2008 08:15:39 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 13A543A68E3 for ; Mon, 8 Dec 2008 08:15:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.26 X-Spam-Level: X-Spam-Status: No, score=-1.26 tagged_above=-999 required=5 tests=[AWL=0.728, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id afI7w-9M9Pb7 for ; Mon, 8 Dec 2008 08:15:38 -0800 (PST) Received: from wes.hardakers.net (dcn236-43.dcn.davis.ca.us [168.150.236.43]) by core3.amsl.com (Postfix) with ESMTP id 63F613A6768 for ; Mon, 8 Dec 2008 08:15:38 -0800 (PST) Received: from localhost (wlap.dyn.hardakers.net [127.0.0.1]) by wes.hardakers.net (Postfix) with ESMTP id E9ACF39A214; Mon, 8 Dec 2008 08:15:32 -0800 (PST) From: Wes Hardaker To: Andy Bierman Organization: Sparta References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> Date: Mon, 08 Dec 2008 08:15:32 -0800 In-Reply-To: <49315EFA.3000406@netconfcentral.com> (Andy Bierman's message of "Sat, 29 Nov 2008 07:25:46 -0800") Message-ID: User-Agent: Gnus/5.110011 (No Gnus v0.11) XEmacs/21.4.21 (linux, no MULE) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org >>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman said: AB> We have attributes in the element so we AB> need a CLR that says "]]>]]>" is not allowed AB> to appear anywhere inside a NETCONF PDU. It'd be a nasty security bug if the EOM marker could be inserted as valid text inside XML. If indeed the XML directorate was wrong at the time that advice was given, you definitely need that CLR. Otherwise you risk the possibility of non-privileged users providing the system with text that includes that marker followed by a complete edit-config command and another proper marker. -- "In the bathtub of history the truth is harder to hold than the soap, and much more difficult to find." -- Terry Pratchett _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 08:22:25 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 34D453A68F0; Mon, 8 Dec 2008 08:22:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7687B3A68F0 for ; Mon, 8 Dec 2008 08:22:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.259 X-Spam-Level: X-Spam-Status: No, score=-2.259 tagged_above=-999 required=5 tests=[AWL=-0.010, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N8HsYItA5qyy for ; Mon, 8 Dec 2008 08:22:22 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id D07FB3A68E3 for ; Mon, 8 Dec 2008 08:22:21 -0800 (PST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id 10BA1C0017; Mon, 8 Dec 2008 17:22:16 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id ilEBVUGCjAkm; Mon, 8 Dec 2008 17:22:10 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5DF75C0011; Mon, 8 Dec 2008 17:22:10 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 3E2578A0F85; Mon, 8 Dec 2008 17:22:09 +0100 (CET) Date: Mon, 8 Dec 2008 17:22:09 +0100 From: Juergen Schoenwaelder To: Wes Hardaker Message-ID: <20081208162209.GB16458@elstar.local> Mail-Followup-To: Wes Hardaker , Andy Bierman , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Mon, Dec 08, 2008 at 08:15:32AM -0800, Wes Hardaker wrote: > >>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman said: > > AB> We have attributes in the element so we > AB> need a CLR that says "]]>]]>" is not allowed > AB> to appear anywhere inside a NETCONF PDU. > > It'd be a nasty security bug if the EOM marker could be inserted as > valid text inside XML. If indeed the XML directorate was wrong at the > time that advice was given, you definitely need that CLR. Otherwise you > risk the possibility of non-privileged users providing the system with > text that includes that marker followed by a complete edit-config > command and another proper marker. I do not think we can ban "]]>]]>" from ever appearing in NETCONF messages, especially if we talk about user provided data. So we need to fix the protocol specifications and the relevant security considerations by making it clear that implementors must not fall into the trap of treating "]]>]]>" inside of messages as an EOM marker. This implies that the EOM marker looses most of its value since I need to parse the message to find its end but at the end this is better than pretending "]]>]]>" never appears in valid NETCONF messages. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 08:22:25 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 34D453A68F0; Mon, 8 Dec 2008 08:22:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7687B3A68F0 for ; Mon, 8 Dec 2008 08:22:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.259 X-Spam-Level: X-Spam-Status: No, score=-2.259 tagged_above=-999 required=5 tests=[AWL=-0.010, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N8HsYItA5qyy for ; Mon, 8 Dec 2008 08:22:22 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id D07FB3A68E3 for ; Mon, 8 Dec 2008 08:22:21 -0800 (PST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id 10BA1C0017; Mon, 8 Dec 2008 17:22:16 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id ilEBVUGCjAkm; Mon, 8 Dec 2008 17:22:10 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5DF75C0011; Mon, 8 Dec 2008 17:22:10 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 3E2578A0F85; Mon, 8 Dec 2008 17:22:09 +0100 (CET) Date: Mon, 8 Dec 2008 17:22:09 +0100 From: Juergen Schoenwaelder To: Wes Hardaker Message-ID: <20081208162209.GB16458@elstar.local> Mail-Followup-To: Wes Hardaker , Andy Bierman , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Mon, Dec 08, 2008 at 08:15:32AM -0800, Wes Hardaker wrote: > >>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman said: > > AB> We have attributes in the element so we > AB> need a CLR that says "]]>]]>" is not allowed > AB> to appear anywhere inside a NETCONF PDU. > > It'd be a nasty security bug if the EOM marker could be inserted as > valid text inside XML. If indeed the XML directorate was wrong at the > time that advice was given, you definitely need that CLR. Otherwise you > risk the possibility of non-privileged users providing the system with > text that includes that marker followed by a complete edit-config > command and another proper marker. I do not think we can ban "]]>]]>" from ever appearing in NETCONF messages, especially if we talk about user provided data. So we need to fix the protocol specifications and the relevant security considerations by making it clear that implementors must not fall into the trap of treating "]]>]]>" inside of messages as an EOM marker. This implies that the EOM marker looses most of its value since I need to parse the message to find its end but at the end this is better than pretending "]]>]]>" never appears in valid NETCONF messages. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 08:53:31 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E78573A6951; Mon, 8 Dec 2008 08:53:31 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 76B903A6951 for ; Mon, 8 Dec 2008 08:53:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.181 X-Spam-Level: X-Spam-Status: No, score=-2.181 tagged_above=-999 required=5 tests=[AWL=0.085, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zesw4kyZQHlT for ; Mon, 8 Dec 2008 08:53:30 -0800 (PST) Received: from smtp123.sbc.mail.sp1.yahoo.com (smtp123.sbc.mail.sp1.yahoo.com [69.147.64.96]) by core3.amsl.com (Postfix) with SMTP id C29073A6888 for ; Mon, 8 Dec 2008 08:53:30 -0800 (PST) Received: (qmail 14528 invoked from network); 8 Dec 2008 16:53:25 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.99.53 with plain) by smtp123.sbc.mail.sp1.yahoo.com with SMTP; 8 Dec 2008 16:53:23 -0000 X-YMail-OSG: EhnKdJoVM1nFZYxi6dLHVdQUuXfmyzLTIXMfSDUWwM.SG_pwFNSLr_yzNAfh7lJ_hZepvh9XGtSS8t6UUXwB9i91e9TCwbfAWcKp4aUXF8wLekszEL4uJgKSXNF1G6Vu8YYV3_nL7o2H8qVvRxslwZUw X-Yahoo-Newman-Property: ymail-3 Message-ID: <493D5101.1020700@netconfcentral.com> Date: Mon, 08 Dec 2008 08:53:21 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman said: > > AB> We have attributes in the element so we > AB> need a CLR that says "]]>]]>" is not allowed > AB> to appear anywhere inside a NETCONF PDU. > > It'd be a nasty security bug if the EOM marker could be inserted as > valid text inside XML. If indeed the XML directorate was wrong at the > time that advice was given, you definitely need that CLR. Otherwise you > risk the possibility of non-privileged users providing the system with > text that includes that marker followed by a complete edit-config > command and another proper marker. yep. This would be a non-compatible change. It requires a new RFC and 4741 changed to Historic. Recall that the reason we put this in 4741 was that it was deemed to be unreasonable to parse XML to do the framing. All it takes is 1 bad element and framing is lost. Requiring an agent to parse through all processing instructions, comments, etc. and 'guess' where the 'good' XML starts again is too difficult. Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 08:53:31 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E78573A6951; Mon, 8 Dec 2008 08:53:31 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 76B903A6951 for ; Mon, 8 Dec 2008 08:53:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.181 X-Spam-Level: X-Spam-Status: No, score=-2.181 tagged_above=-999 required=5 tests=[AWL=0.085, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zesw4kyZQHlT for ; Mon, 8 Dec 2008 08:53:30 -0800 (PST) Received: from smtp123.sbc.mail.sp1.yahoo.com (smtp123.sbc.mail.sp1.yahoo.com [69.147.64.96]) by core3.amsl.com (Postfix) with SMTP id C29073A6888 for ; Mon, 8 Dec 2008 08:53:30 -0800 (PST) Received: (qmail 14528 invoked from network); 8 Dec 2008 16:53:25 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.99.53 with plain) by smtp123.sbc.mail.sp1.yahoo.com with SMTP; 8 Dec 2008 16:53:23 -0000 X-YMail-OSG: EhnKdJoVM1nFZYxi6dLHVdQUuXfmyzLTIXMfSDUWwM.SG_pwFNSLr_yzNAfh7lJ_hZepvh9XGtSS8t6UUXwB9i91e9TCwbfAWcKp4aUXF8wLekszEL4uJgKSXNF1G6Vu8YYV3_nL7o2H8qVvRxslwZUw X-Yahoo-Newman-Property: ymail-3 Message-ID: <493D5101.1020700@netconfcentral.com> Date: Mon, 08 Dec 2008 08:53:21 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman said: > > AB> We have attributes in the element so we > AB> need a CLR that says "]]>]]>" is not allowed > AB> to appear anywhere inside a NETCONF PDU. > > It'd be a nasty security bug if the EOM marker could be inserted as > valid text inside XML. If indeed the XML directorate was wrong at the > time that advice was given, you definitely need that CLR. Otherwise you > risk the possibility of non-privileged users providing the system with > text that includes that marker followed by a complete edit-config > command and another proper marker. yep. This would be a non-compatible change. It requires a new RFC and 4741 changed to Historic. Recall that the reason we put this in 4741 was that it was deemed to be unreasonable to parse XML to do the framing. All it takes is 1 bad element and framing is lost. Requiring an agent to parse through all processing instructions, comments, etc. and 'guess' where the 'good' XML starts again is too difficult. Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 09:08:02 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D2B2F3A67F1; Mon, 8 Dec 2008 09:08:02 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 292F13A67F1 for ; Mon, 8 Dec 2008 09:08:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.184 X-Spam-Level: X-Spam-Status: No, score=-2.184 tagged_above=-999 required=5 tests=[AWL=0.081, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qV252Hoxuq0H for ; Mon, 8 Dec 2008 09:08:00 -0800 (PST) Received: from smtp123.sbc.mail.sp1.yahoo.com (smtp123.sbc.mail.sp1.yahoo.com [69.147.64.96]) by core3.amsl.com (Postfix) with SMTP id 82B573A67BD for ; Mon, 8 Dec 2008 09:08:00 -0800 (PST) Received: (qmail 47168 invoked from network); 8 Dec 2008 17:07:55 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.99.53 with plain) by smtp123.sbc.mail.sp1.yahoo.com with SMTP; 8 Dec 2008 17:07:54 -0000 X-YMail-OSG: Drl6fGIVM1kSmirLTxuUtl.C2Lgo6Noqv_exXk4TaquFgzD4njOWq7jzq1KSHqeg5y92Kg859v8aLfO2vkEy04OolSdcyyT_ryaGyjKFNrdFZIQDz0H2FWHCyZWAPsZEoJln.j61NbBecNI5CCxODQ50 X-Yahoo-Newman-Property: ymail-3 Message-ID: <493D5467.6070109@netconfcentral.com> Date: Mon, 08 Dec 2008 09:07:51 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman said: > > AB> We have attributes in the element so we > AB> need a CLR that says "]]>]]>" is not allowed > AB> to appear anywhere inside a NETCONF PDU. > > It'd be a nasty security bug if the EOM marker could be inserted as > valid text inside XML. If indeed the XML directorate was wrong at the > time that advice was given, you definitely need that CLR. Otherwise you > risk the possibility of non-privileged users providing the system with > text that includes that marker followed by a complete edit-config > command and another proper marker. Actually it depends on the implementation, if this is even a problem or not. Since the framing is done on the SSH byte stream, none of the per-NETCONF-PDU security checks have likely been started yet. In my code, embedding PDUs in an attribute might result in bad-msg1, good-msg2, bad-msg3. The 'good-msg2' would have to go through all of the security checks it would have faced if it was the entire message. Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 09:08:02 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D2B2F3A67F1; Mon, 8 Dec 2008 09:08:02 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 292F13A67F1 for ; Mon, 8 Dec 2008 09:08:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.184 X-Spam-Level: X-Spam-Status: No, score=-2.184 tagged_above=-999 required=5 tests=[AWL=0.081, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qV252Hoxuq0H for ; Mon, 8 Dec 2008 09:08:00 -0800 (PST) Received: from smtp123.sbc.mail.sp1.yahoo.com (smtp123.sbc.mail.sp1.yahoo.com [69.147.64.96]) by core3.amsl.com (Postfix) with SMTP id 82B573A67BD for ; Mon, 8 Dec 2008 09:08:00 -0800 (PST) Received: (qmail 47168 invoked from network); 8 Dec 2008 17:07:55 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.99.53 with plain) by smtp123.sbc.mail.sp1.yahoo.com with SMTP; 8 Dec 2008 17:07:54 -0000 X-YMail-OSG: Drl6fGIVM1kSmirLTxuUtl.C2Lgo6Noqv_exXk4TaquFgzD4njOWq7jzq1KSHqeg5y92Kg859v8aLfO2vkEy04OolSdcyyT_ryaGyjKFNrdFZIQDz0H2FWHCyZWAPsZEoJln.j61NbBecNI5CCxODQ50 X-Yahoo-Newman-Property: ymail-3 Message-ID: <493D5467.6070109@netconfcentral.com> Date: Mon, 08 Dec 2008 09:07:51 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman said: > > AB> We have attributes in the element so we > AB> need a CLR that says "]]>]]>" is not allowed > AB> to appear anywhere inside a NETCONF PDU. > > It'd be a nasty security bug if the EOM marker could be inserted as > valid text inside XML. If indeed the XML directorate was wrong at the > time that advice was given, you definitely need that CLR. Otherwise you > risk the possibility of non-privileged users providing the system with > text that includes that marker followed by a complete edit-config > command and another proper marker. Actually it depends on the implementation, if this is even a problem or not. Since the framing is done on the SSH byte stream, none of the per-NETCONF-PDU security checks have likely been started yet. In my code, embedding PDUs in an attribute might result in bad-msg1, good-msg2, bad-msg3. The 'good-msg2' would have to go through all of the security checks it would have faced if it was the entire message. Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:10:09 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0C0BB28C12A; Mon, 8 Dec 2008 10:10:09 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 71F3228C12A for ; Mon, 8 Dec 2008 10:10:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.046 X-Spam-Level: X-Spam-Status: No, score=-2.046 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OAPH6zq176WW for ; Mon, 8 Dec 2008 10:10:06 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id E865228C115 for ; Mon, 8 Dec 2008 10:10:05 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id B861076C50A; Mon, 8 Dec 2008 19:09:59 +0100 (CET) Date: Mon, 08 Dec 2008 19:09:59 +0100 (CET) Message-Id: <20081208.190959.195938679.mbj@tail-f.com> To: j.schoenwaelder@jacobs-university.de From: Martin Bjorklund In-Reply-To: <20081208162209.GB16458@elstar.local> References: <49315EFA.3000406@netconfcentral.com> <20081208162209.GB16458@elstar.local> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Mon, Dec 08, 2008 at 08:15:32AM -0800, Wes Hardaker wrote: > > >>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman > > >>>>> said: > > > > AB> We have attributes in the element so we > > AB> need a CLR that says "]]>]]>" is not allowed > > AB> to appear anywhere inside a NETCONF PDU. > > > > It'd be a nasty security bug if the EOM marker could be inserted as > > valid text inside XML. If indeed the XML directorate was wrong at the > > time that advice was given, you definitely need that CLR. Otherwise you > > risk the possibility of non-privileged users providing the system with > > text that includes that marker followed by a complete edit-config > > command and another proper marker. > > I do not think we can ban "]]>]]>" from ever appearing in NETCONF > messages, especially if we talk about user provided data. We talk about attributes (and comments). The sequence is not allowed in text data in elements. Maybe we can say that implementations must quote it and send instead of /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:10:09 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0C0BB28C12A; Mon, 8 Dec 2008 10:10:09 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 71F3228C12A for ; Mon, 8 Dec 2008 10:10:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.046 X-Spam-Level: X-Spam-Status: No, score=-2.046 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OAPH6zq176WW for ; Mon, 8 Dec 2008 10:10:06 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id E865228C115 for ; Mon, 8 Dec 2008 10:10:05 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id B861076C50A; Mon, 8 Dec 2008 19:09:59 +0100 (CET) Date: Mon, 08 Dec 2008 19:09:59 +0100 (CET) Message-Id: <20081208.190959.195938679.mbj@tail-f.com> To: j.schoenwaelder@jacobs-university.de From: Martin Bjorklund In-Reply-To: <20081208162209.GB16458@elstar.local> References: <49315EFA.3000406@netconfcentral.com> <20081208162209.GB16458@elstar.local> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Mon, Dec 08, 2008 at 08:15:32AM -0800, Wes Hardaker wrote: > > >>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman > > >>>>> said: > > > > AB> We have attributes in the element so we > > AB> need a CLR that says "]]>]]>" is not allowed > > AB> to appear anywhere inside a NETCONF PDU. > > > > It'd be a nasty security bug if the EOM marker could be inserted as > > valid text inside XML. If indeed the XML directorate was wrong at the > > time that advice was given, you definitely need that CLR. Otherwise you > > risk the possibility of non-privileged users providing the system with > > text that includes that marker followed by a complete edit-config > > command and another proper marker. > > I do not think we can ban "]]>]]>" from ever appearing in NETCONF > messages, especially if we talk about user provided data. We talk about attributes (and comments). The sequence is not allowed in text data in elements. Maybe we can say that implementations must quote it and send instead of /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:28:51 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 13FBD28C13B; Mon, 8 Dec 2008 10:28:51 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C432B28C13B for ; Mon, 8 Dec 2008 10:28:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.258 X-Spam-Level: X-Spam-Status: No, score=-2.258 tagged_above=-999 required=5 tests=[AWL=-0.009, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b8NMHu-COAzC for ; Mon, 8 Dec 2008 10:28:49 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id BE94728C131 for ; Mon, 8 Dec 2008 10:28:48 -0800 (PST) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 49824C001B; Mon, 8 Dec 2008 19:28:43 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id G-afL1DmNEcq; Mon, 8 Dec 2008 19:28:38 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 06FCDC0093; Mon, 8 Dec 2008 19:28:38 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 2CE4E8A114D; Mon, 8 Dec 2008 19:28:37 +0100 (CET) Date: Mon, 8 Dec 2008 19:28:37 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081208182837.GA16667@elstar.local> Mail-Followup-To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <493D5101.1020700@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Mon, Dec 08, 2008 at 08:53:21AM -0800, Andy Bierman wrote: > This would be a non-compatible change. > It requires a new RFC and 4741 changed to Historic. The framing sequence ]]>]]> is a property of NETCONF over SSH and so RFC 4742 is concerned, not RFC 4741. > Recall that the reason we put this in 4741 was > that it was deemed to be unreasonable to parse XML > to do the framing. All it takes is 1 bad element > and framing is lost. Requiring an agent to parse > through all processing instructions, comments, etc. > and 'guess' where the 'good' XML starts again is too > difficult. I believe when RFC 4742 was designed, people thought they can get away with an non-event-driven XML parser, but it now appears that the EOM sequence is not as good as we believed back then. And yes, not well-formed XML kills you and the only sensible reaction is IMHO to close the session. And this not different with other encodings; if you send multiple BER encoded PDUs over a stream based connection (e.g. SNMP over TCP or SSH), you face the same problem when you hit a parsing error. Since XML is so much easier than BER, hitting non well-formed XML documents should be rare in practice. ;-) /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:28:51 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 13FBD28C13B; Mon, 8 Dec 2008 10:28:51 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C432B28C13B for ; Mon, 8 Dec 2008 10:28:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.258 X-Spam-Level: X-Spam-Status: No, score=-2.258 tagged_above=-999 required=5 tests=[AWL=-0.009, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b8NMHu-COAzC for ; Mon, 8 Dec 2008 10:28:49 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id BE94728C131 for ; Mon, 8 Dec 2008 10:28:48 -0800 (PST) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 49824C001B; Mon, 8 Dec 2008 19:28:43 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id G-afL1DmNEcq; Mon, 8 Dec 2008 19:28:38 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 06FCDC0093; Mon, 8 Dec 2008 19:28:38 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 2CE4E8A114D; Mon, 8 Dec 2008 19:28:37 +0100 (CET) Date: Mon, 8 Dec 2008 19:28:37 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081208182837.GA16667@elstar.local> Mail-Followup-To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <493D5101.1020700@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Mon, Dec 08, 2008 at 08:53:21AM -0800, Andy Bierman wrote: > This would be a non-compatible change. > It requires a new RFC and 4741 changed to Historic. The framing sequence ]]>]]> is a property of NETCONF over SSH and so RFC 4742 is concerned, not RFC 4741. > Recall that the reason we put this in 4741 was > that it was deemed to be unreasonable to parse XML > to do the framing. All it takes is 1 bad element > and framing is lost. Requiring an agent to parse > through all processing instructions, comments, etc. > and 'guess' where the 'good' XML starts again is too > difficult. I believe when RFC 4742 was designed, people thought they can get away with an non-event-driven XML parser, but it now appears that the EOM sequence is not as good as we believed back then. And yes, not well-formed XML kills you and the only sensible reaction is IMHO to close the session. And this not different with other encodings; if you send multiple BER encoded PDUs over a stream based connection (e.g. SNMP over TCP or SSH), you face the same problem when you hit a parsing error. Since XML is so much easier than BER, hitting non well-formed XML documents should be rare in practice. ;-) /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:38:40 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 50C9228C15D; Mon, 8 Dec 2008 10:38:40 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E923A28C158 for ; Mon, 8 Dec 2008 10:38:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.258 X-Spam-Level: X-Spam-Status: No, score=-2.258 tagged_above=-999 required=5 tests=[AWL=-0.009, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fc6g-9MQ6ezP for ; Mon, 8 Dec 2008 10:38:38 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id DB9F528C15C for ; Mon, 8 Dec 2008 10:38:37 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5C3E8C001B; Mon, 8 Dec 2008 19:38:32 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id fhqeMgaBc4Wi; Mon, 8 Dec 2008 19:38:27 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 07405C0093; Mon, 8 Dec 2008 19:38:27 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 024EC8A11AF; Mon, 8 Dec 2008 19:38:25 +0100 (CET) Date: Mon, 8 Dec 2008 19:38:25 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081208183825.GB16667@elstar.local> Mail-Followup-To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5467.6070109@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <493D5467.6070109@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Mon, Dec 08, 2008 at 09:07:51AM -0800, Andy Bierman wrote: > Actually it depends on the implementation, if this is even a > problem or not. Since the framing is done on the SSH byte stream, > none of the per-NETCONF-PDU security checks have likely been started yet. > In my code, embedding PDUs in an attribute might result in > bad-msg1, good-msg2, bad-msg3. The 'good-msg2' would have to > go through all of the security checks it would have faced > if it was the entire message. It can imagine a situation where a NETCONF client is trusted and has credentials installed on the server to do certaiFrom netconf-bounces@ietf.org Mon Dec 8 10:38:40 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 50C9228C15D; Mon, 8 Dec 2008 10:38:40 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E923A28C158 for ; Mon, 8 Dec 2008 10:38:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.258 X-Spam-Level: X-Spam-Status: No, score=-2.258 tagged_above=-999 required=5 tests=[AWL=-0.009, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fc6g-9MQ6ezP for ; Mon, 8 Dec 2008 10:38:38 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id DB9F528C15C for ; Mon, 8 Dec 2008 10:38:37 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5C3E8C001B; Mon, 8 Dec 2008 19:38:32 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id fhqeMgaBc4Wi; Mon, 8 Dec 2008 19:38:27 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 07405C0093; Mon, 8 Dec 2008 19:38:27 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 024EC8A11AF; Mon, 8 Dec 2008 19:38:25 +0100 (CET) Date: Mon, 8 Dec 2008 19:38:25 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081208183825.GB16667@elstar.local> Mail-Followup-To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5467.6070109@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <493D5467.6070109@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Mon, Dec 08, 2008 at 09:07:51AM -0800, Andy Bierman wrote: > Actually it depends on the implementation, if this is even a > problem or not. Since the framing is done on the SSH byte stream, > none of the per-NETCONF-PDU security checks have likely been started yet. > In my code, embedding PDUs in an attribute might result in > bad-msg1, good-msg2, bad-msg3. The 'good-msg2' would have to > go through all of the security checks it would have faced > if it was the entire message. It can imagine a situation where a NETCONF client is trusted and has credentials installed on the server to do n useful things. If now someone manages to send carefully crafted input to this client resulting in bad-msg1, good-msg2, bad-msg3, then the good-msg2 might be executed with rights it should not receive. Sure, you can argue that the server is not to blame since the client did allow something to slip through it should not have allowed. But then there is also some evidence from the Web that this sort of stuff causes security problems and the question is whether we want to be proactive or whether we are willing to wait for a CERT advisory. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf certain useful things. If now someone manages to send carefully crafted input to this client resulting in bad-msg1, good-msg2, bad-msg3, then the good-msg2 might be executed with rights it should not receive. Sure, you can argue that the server is not to blame since the client did allow something to slip through it should not have allowed. But then there is also some evidence from the Web that this sort of stuff causes security problems and the question is whether we want to be proactive or whether we are willing to wait for a CERT advisory. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:42:47 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BA68828C174; Mon, 8 Dec 2008 10:42:47 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A4A3428C173 for ; Mon, 8 Dec 2008 10:42:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.188 X-Spam-Level: X-Spam-Status: No, score=-2.188 tagged_above=-999 required=5 tests=[AWL=0.077, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IQHyK652islc for ; Mon, 8 Dec 2008 10:42:45 -0800 (PST) Received: from smtp121.sbc.mail.sp1.yahoo.com (smtp121.sbc.mail.sp1.yahoo.com [69.147.64.94]) by core3.amsl.com (Postfix) with SMTP id 6633B28C16F for ; Mon, 8 Dec 2008 10:42:45 -0800 (PST) Received: (qmail 22087 invoked from network); 8 Dec 2008 18:42:40 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.99.53 with plain) by smtp121.sbc.mail.sp1.yahoo.com with SMTP; 8 Dec 2008 18:42:38 -0000 X-YMail-OSG: PCwNL4kVM1lSXfJj_hFbz8JP18yfdBZmZuWFFs8wbd6NpNGuRZ3ZP8yhAseUGUI9wimu3n76.i1N1MLn9Jo7x4oS4eQOsL5spvyCz7bJWWMaa36Hwfcq5lnmplHUYQ5fQZYnRzIRwfBlXMsslgmIAo6J X-Yahoo-Newman-Property: ymail-3 Message-ID: <493D6A9D.4010307@netconfcentral.com> Date: Mon, 08 Dec 2008 10:42:37 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49315EFA.3000406@netconfcentral.com> <20081208162209.GB16458@elstar.local> <20081208.190959.195938679.mbj@tail-f.com> In-Reply-To: <20081208.190959.195938679.mbj@tail-f.com> Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Juergen Schoenwaelder wrote: >> On Mon, Dec 08, 2008 at 08:15:32AM -0800, Wes Hardaker wrote: >>>>>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman >>>>>>>> said: >>> AB> We have attributes in the element so we >>> AB> need a CLR that says "]]>]]>" is not allowed >>> AB> to appear anywhere inside a NETCONF PDU. >>> >>> It'd be a nasty security bug if the EOM marker could be inserted as >>> valid text inside XML. If indeed the XML directorate was wrong at the >>> time that advice was given, you definitely need that CLR. Otherwise you >>> risk the possibility of non-privileged users providing the system with >>> text that includes that marker followed by a complete edit-config >>> command and another proper marker. >> I do not think we can ban "]]>]]>" from ever appearing in NETCONF >> messages, especially if we talk about user provided data. > > We talk about attributes (and comments). The sequence is not allowed > in text data in elements. > > Maybe we can say that implementations must quote it and send > > > > instead of > > > I was going to point this out. The '>' char cannot appear at all within a text() node. It has to be written as a character entity. I don't think this is a big deal. Should we worry about comment nodes? The client implementation that generated the EOM sequence inside an attribute value is broken, right? > > /martin Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:42:47 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BA68828C174; Mon, 8 Dec 2008 10:42:47 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A4A3428C173 for ; Mon, 8 Dec 2008 10:42:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.188 X-Spam-Level: X-Spam-Status: No, score=-2.188 tagged_above=-999 required=5 tests=[AWL=0.077, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IQHyK652islc for ; Mon, 8 Dec 2008 10:42:45 -0800 (PST) Received: from smtp121.sbc.mail.sp1.yahoo.com (smtp121.sbc.mail.sp1.yahoo.com [69.147.64.94]) by core3.amsl.com (Postfix) with SMTP id 6633B28C16F for ; Mon, 8 Dec 2008 10:42:45 -0800 (PST) Received: (qmail 22087 invoked from network); 8 Dec 2008 18:42:40 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.99.53 with plain) by smtp121.sbc.mail.sp1.yahoo.com with SMTP; 8 Dec 2008 18:42:38 -0000 X-YMail-OSG: PCwNL4kVM1lSXfJj_hFbz8JP18yfdBZmZuWFFs8wbd6NpNGuRZ3ZP8yhAseUGUI9wimu3n76.i1N1MLn9Jo7x4oS4eQOsL5spvyCz7bJWWMaa36Hwfcq5lnmplHUYQ5fQZYnRzIRwfBlXMsslgmIAo6J X-Yahoo-Newman-Property: ymail-3 Message-ID: <493D6A9D.4010307@netconfcentral.com> Date: Mon, 08 Dec 2008 10:42:37 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49315EFA.3000406@netconfcentral.com> <20081208162209.GB16458@elstar.local> <20081208.190959.195938679.mbj@tail-f.com> In-Reply-To: <20081208.190959.195938679.mbj@tail-f.com> Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Juergen Schoenwaelder wrote: >> On Mon, Dec 08, 2008 at 08:15:32AM -0800, Wes Hardaker wrote: >>>>>>>> On Sat, 29 Nov 2008 07:25:46 -0800, Andy Bierman >>>>>>>> said: >>> AB> We have attributes in the element so we >>> AB> need a CLR that says "]]>]]>" is not allowed >>> AB> to appear anywhere inside a NETCONF PDU. >>> >>> It'd be a nasty security bug if the EOM marker could be inserted as >>> valid text inside XML. If indeed the XML directorate was wrong at the >>> time that advice was given, you definitely need that CLR. Otherwise you >>> risk the possibility of non-privileged users providing the system with >>> text that includes that marker followed by a complete edit-config >>> command and another proper marker. >> I do not think we can ban "]]>]]>" from ever appearing in NETCONF >> messages, especially if we talk about user provided data. > > We talk about attributes (and comments). The sequence is not allowed > in text data in elements. > > Maybe we can say that implementations must quote it and send > > > > instead of > > > I was going to point this out. The '>' char cannot appear at all within a text() node. It has to be written as a character entity. I don't think this is a big deal. Should we worry about comment nodes? The client implementation that generated the EOM sequence inside an attribute value is broken, right? > > /martin Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:48:37 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 77A2328C157; Mon, 8 Dec 2008 10:48:37 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 027EC28C157 for ; Mon, 8 Dec 2008 10:48:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.191 X-Spam-Level: X-Spam-Status: No, score=-2.191 tagged_above=-999 required=5 tests=[AWL=0.074, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dJ4ZCs8+l00i for ; Mon, 8 Dec 2008 10:48:35 -0800 (PST) Received: from smtp120.sbc.mail.sp1.yahoo.com (smtp120.sbc.mail.sp1.yahoo.com [69.147.64.93]) by core3.amsl.com (Postfix) with SMTP id 5A79728C155 for ; Mon, 8 Dec 2008 10:48:35 -0800 (PST) Received: (qmail 33256 invoked from network); 8 Dec 2008 18:48:29 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.99.53 with plain) by smtp120.sbc.mail.sp1.yahoo.com with SMTP; 8 Dec 2008 18:48:28 -0000 X-YMail-OSG: fCK5a4EVM1nAGDWK.Vjkl41gzbrds4d6hfP.0MvFSue8SFvCzahBUa2OQtjvR57b716sGjmFkCme0rsx2uwH3lNk1TcLfYC6vsob589JGiMFzUxjC3Pla1KzIMq9fFetGIE- X-Yahoo-Newman-Property: ymail-3 Message-ID: <493D6BFA.4060907@netconfcentral.com> Date: Mon, 08 Dec 2008 10:48:26 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5467.6070109@netconfcentral.com> <20081208183825.GB16667@elstar.local> In-Reply-To: <20081208183825.GB16667@elstar.local> Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Mon, Dec 08, 2008 at 09:07:51AM -0800, Andy Bierman wrote: > >> Actually it depends on the implementation, if this is even a >> problem or not. Since the framing is done on the SSH byte stream, >> none of the per-NETCONF-PDU security checks have likely been started yet. >> In my code, embedding PDUs in an attribute might result in >> bad-msg1, good-msg2, bad-msg3. The 'good-msg2' would have to >> go through all of the security checks it would have faced >> if it was the entire message. > > It can imagine a situation where a NETCONF client is trusted and has > credentials installed on the server to do certain useful things. If > now someone manages to send carefully crafted input to this client > resulting in bad-msg1, good-msg2, bad-msg3, then the good-msg2 might > be executed with rights it should not receive. Sure, you can argue > that the server is not to blame since the client did allow something > to slip through it should not have allowed. But then there is also > some evidence from the Web that this sort of stuff causes security > problems and the question is whether we want to be proactive or > whether we are willing to wait for a CERT advisory. > There is certainly a Trojan horse vulnerability on the client side. If the access control (oh, that again!) is really loose on the agent, then an application may be hijacked to invoke RPCs that the agent will allow. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 10:48:37 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 77A2328C157; Mon, 8 Dec 2008 10:48:37 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 027EC28C157 for ; Mon, 8 Dec 2008 10:48:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.191 X-Spam-Level: X-Spam-Status: No, score=-2.191 tagged_above=-999 required=5 tests=[AWL=0.074, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dJ4ZCs8+l00i for ; Mon, 8 Dec 2008 10:48:35 -0800 (PST) Received: from smtp120.sbc.mail.sp1.yahoo.com (smtp120.sbc.mail.sp1.yahoo.com [69.147.64.93]) by core3.amsl.com (Postfix) with SMTP id 5A79728C155 for ; Mon, 8 Dec 2008 10:48:35 -0800 (PST) Received: (qmail 33256 invoked from network); 8 Dec 2008 18:48:29 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.99.53 with plain) by smtp120.sbc.mail.sp1.yahoo.com with SMTP; 8 Dec 2008 18:48:28 -0000 X-YMail-OSG: fCK5a4EVM1nAGDWK.Vjkl41gzbrds4d6hfP.0MvFSue8SFvCzahBUa2OQtjvR57b716sGjmFkCme0rsx2uwH3lNk1TcLfYC6vsob589JGiMFzUxjC3Pla1KzIMq9fFetGIE- X-Yahoo-Newman-Property: ymail-3 Message-ID: <493D6BFA.4060907@netconfcentral.com> Date: Mon, 08 Dec 2008 10:48:26 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5467.6070109@netconfcentral.com> <20081208183825.GB16667@elstar.local> In-Reply-To: <20081208183825.GB16667@elstar.local> Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Mon, Dec 08, 2008 at 09:07:51AM -0800, Andy Bierman wrote: > >> Actually it depends on the implementation, if this is even a >> problem or not. Since the framing is done on the SSH byte stream, >> none of the per-NETCONF-PDU security checks have likely been started yet. >> In my code, embedding PDUs in an attribute might result in >> bad-msg1, good-msg2, bad-msg3. The 'good-msg2' would have to >> go through all of the security checks it would have faced >> if it was the entire message. > > It can imagine a situation where a NETCONF client is trusted and has > credentials installed on the server to do certain useful things. If > now someone manages to send carefully crafted input to this client > resulting in bad-msg1, good-msg2, bad-msg3, then the good-msg2 might > be executed with rights it should not receive. Sure, you can argue > that the server is not to blame since the client did allow something > to slip through it should not have allowed. But then there is also > some evidence from the Web that this sort of stuff causes security > problems and the question is whether we want to be proactive or > whether we are willing to wait for a CERT advisory. > There is certainly a Trojan horse vulnerability on the client side. If the access control (oh, that again!) is really loose on the agent, then an application may be hijacked to invoke RPCs that the agent will allow. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 8 11:22:03 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6BE483A6902; Mon, 8 Dec 2008 11:22:03 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8F3833A6902 for ; Mon, 8 Dec 2008 11:22:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.104 X-Spam-Level: X-Spam-Status: No, score=-1.104 tagged_above=-999 required=5 tests=[AWL=0.146, BAYES_00=-2.599, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Knxe+USx6p8l for ; Mon, 8 Dec 2008 11:22:00 -0800 (PST) Received: from office2.cesnet.cz (office2.cesnet.cz [195.113.144.244]) by core3.amsl.com (Postfix) with ESMTP id BC8D33A63D2 for ; Mon, 8 Dec 2008 11:22:00 -0800 (PST) Received: from [172.29.2.201] (asus-gx.lhotka.cesnet.cz [195.113.161.161]) by office2.cesnet.cz (Postfix) with ESMTP id B89B9D800C7 for ; Mon, 8 Dec 2008 20:21:54 +0100 (CET) From: Ladislav Lhotka To: netconf@ietf.org In-Reply-To: <493D6A9D.4010307@netconfcentral.com> References: <49315EFA.3000406@netconfcentral.com> <20081208162209.GB16458@elstar.local> <20081208.190959.195938679.mbj@tail-f.com> <493D6A9D.4010307@netconfcentral.com> Organization: CESNET Date: Mon, 08 Dec 2008 20:21:54 +0100 Message-Id: <1228764114.6318.27.camel@missotis> Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org QW5keSBCaWVybWFuIHDDrcWhZSB2IFBvIDA4LiAxMi4gMjAwOCB2IDEwOjQyIC0wODAwOgoKPiA+ IAo+ID4gTWF5YmUgd2UgY2FuIHNheSB0aGF0IGltcGxlbWVudGF0aW9ucyBtdXN0IHF1b3RlIGl0 IGFuZCBzZW5kCj4gPiAKPiA+ICAgPGZvbyB4PSJdXSZndDtdXSZndDsiLz4KPiA+IAo+ID4gaW5z dGVhZCBvZgo+ID4gCj4gPiAgIDxmb28geD0iXV0+XV0+Ii8+Cj4gPiAKPiAKPiBJIHdhcyBnb2lu ZyB0byBwb2ludCB0aGlzIG91dC4KCkZvciBleGFtcGxlIHhtbGxpbnQgaW5kZWVkIHJlcGxhY2Vz ICddXT4nIHdpdGggJ11dJmd0OycgaW4gYXR0cmlidXRlCnZhbHVlcy4KCj4gVGhlICc+JyBjaGFy IGNhbm5vdCBhcHBlYXIgYXQgYWxsIHdpdGhpbiBhIHRleHQoKSBub2RlLgo+IEl0IGhhcyB0byBi ZSB3cml0dGVuIGFzIGEgY2hhcmFjdGVyIGVudGl0eS4KCk5vdCB0cnVlLiBYTUwgMS4wIHNwZWM6 IFRoZSByaWdodCBhbmdsZSBicmFja2V0ICg+KSBtYXkgYmUgcmVwcmVzZW50ZWQKdXNpbmcgdGhl IHN0cmluZyAiJmd0OyIsIGFuZCBNVVNULCBmb3IgY29tcGF0aWJpbGl0eSwgYmUgZXNjYXBlZCB1 c2luZwplaXRoZXIgIiZndDsiIG9yIGEgY2hhcmFjdGVyIHJlZmVyZW5jZSB3aGVuIGl0IGFwcGVh cnMgaW4gdGhlIHN0cmluZwoiXV0+IiBpbiBjb250ZW50LCB3aGVuIHRoYXQgc3RyaW5nIGlzIG5v dCBtYXJraW5nIHRoZSBlbmQgb2YgYSBDREFUQQpzZWN0aW9uLgoKTGVmdCBhbmdsZSBicmFja2V0 ICc8JyBtdXN0IG5vdCBhcHBlYXIgYXMgbGl0ZXJhbC4KCkxhZGEKCj4gCj4gSSBkb24ndCB0aGlu ayB0aGlzIGlzIGEgYmlnIGRlYWwuICBTaG91bGQgd2UKPiB3b3JyeSBhYm91dCBjb21tZW50IG5v ZGVzPwo+IAo+IFRoZSBjbGllbnQgaW1wbGVtZW50YXRpb24gdGhhdCBnZW5lcmF0ZWQgdGhlIEVP TSBzZXF1ZW5jZQo+IGluc2lkZSBhbiBhdHRyaWJ1dGUgdmFsdWUgaXMgYnJva2VuLCByaWdodD8K PiAKPiA+IAo+ID4gL21hcnRpbgo+IAo+IAo+IEFuZHkKPiAKPiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+IE5ldGNvbmYgbWFpbGluZyBsaXN0Cj4gTmV0 Y29uZkBpZXRmLm9yZwo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV0 Y29uZgotLSAKTGFkaXNsYXYgTGhvdGthLCBDRVNORVQKUEdQIEtleSBJRDogRTc0RThDMEMKCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYgbWFp bGluZyBsaXN0Ck5ldGNvbmZAaWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9uZXRjb25mCg== From netconf-bounces@ietf.org Mon Dec 8 11:22:03 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6BE483A6902; Mon, 8 Dec 2008 11:22:03 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8F3833A6902 for ; Mon, 8 Dec 2008 11:22:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.104 X-Spam-Level: X-Spam-Status: No, score=-1.104 tagged_above=-999 required=5 tests=[AWL=0.146, BAYES_00=-2.599, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Knxe+USx6p8l for ; Mon, 8 Dec 2008 11:22:00 -0800 (PST) Received: from office2.cesnet.cz (office2.cesnet.cz [195.113.144.244]) by core3.amsl.com (Postfix) with ESMTP id BC8D33A63D2 for ; Mon, 8 Dec 2008 11:22:00 -0800 (PST) Received: from [172.29.2.201] (asus-gx.lhotka.cesnet.cz [195.113.161.161]) by office2.cesnet.cz (Postfix) with ESMTP id B89B9D800C7 for ; Mon, 8 Dec 2008 20:21:54 +0100 (CET) From: Ladislav Lhotka To: netconf@ietf.org In-Reply-To: <493D6A9D.4010307@netconfcentral.com> References: <49315EFA.3000406@netconfcentral.com> <20081208162209.GB16458@elstar.local> <20081208.190959.195938679.mbj@tail-f.com> <493D6A9D.4010307@netconfcentral.com> Organization: CESNET Date: Mon, 08 Dec 2008 20:21:54 +0100 Message-Id: <1228764114.6318.27.camel@missotis> Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org QW5keSBCaWVybWFuIHDDrcWhZSB2IFBvIDA4LiAxMi4gMjAwOCB2IDEwOjQyIC0wODAwOgoKPiA+ IAo+ID4gTWF5YmUgd2UgY2FuIHNheSB0aGF0IGltcGxlbWVudGF0aW9ucyBtdXN0IHF1b3RlIGl0 IGFuZCBzZW5kCj4gPiAKPiA+ICAgPGZvbyB4PSJdXSZndDtdXSZndDsiLz4KPiA+IAo+ID4gaW5z dGVhZCBvZgo+ID4gCj4gPiAgIDxmb28geD0iXV0+XV0+Ii8+Cj4gPiAKPiAKPiBJIHdhcyBnb2lu ZyB0byBwb2ludCB0aGlzIG91dC4KCkZvciBleGFtcGxlIHhtbGxpbnQgaW5kZWVkIHJlcGxhY2Vz ICddXT4nIHdpdGggJ11dJmd0OycgaW4gYXR0cmlidXRlCnZhbHVlcy4KCj4gVGhlICc+JyBjaGFy IGNhbm5vdCBhcHBlYXIgYXQgYWxsIHdpdGhpbiBhIHRleHQoKSBub2RlLgo+IEl0IGhhcyB0byBi ZSB3cml0dGVuIGFzIGEgY2hhcmFjdGVyIGVudGl0eS4KCk5vdCB0cnVlLiBYTUwgMS4wIHNwZWM6 IFRoZSByaWdodCBhbmdsZSBicmFja2V0ICg+KSBtYXkgYmUgcmVwcmVzZW50ZWQKdXNpbmcgdGhl IHN0cmluZyAiJmd0OyIsIGFuZCBNVVNULCBmb3IgY29tcGF0aWJpbGl0eSwgYmUgZXNjYXBlZCB1 c2luZwplaXRoZXIgIiZndDsiIG9yIGEgY2hhcmFjdGVyIHJlZmVyZW5jZSB3aGVuIGl0IGFwcGVh cnMgaW4gdGhlIHN0cmluZwoiXV0+IiBpbiBjb250ZW50LCB3aGVuIHRoYXQgc3RyaW5nIGlzIG5v dCBtYXJraW5nIHRoZSBlbmQgb2YgYSBDREFUQQpzZWN0aW9uLgoKTGVmdCBhbmdsZSBicmFja2V0 ICc8JyBtdXN0IG5vdCBhcHBlYXIgYXMgbGl0ZXJhbC4KCkxhZGEKCj4gCj4gSSBkb24ndCB0aGlu ayB0aGlzIGlzIGEgYmlnIGRlYWwuICBTaG91bGQgd2UKPiB3b3JyeSBhYm91dCBjb21tZW50IG5v ZGVzPwo+IAo+IFRoZSBjbGllbnQgaW1wbGVtZW50YXRpb24gdGhhdCBnZW5lcmF0ZWQgdGhlIEVP TSBzZXF1ZW5jZQo+IGluc2lkZSBhbiBhdHRyaWJ1dGUgdmFsdWUgaXMgYnJva2VuLCByaWdodD8K PiAKPiA+IAo+ID4gL21hcnRpbgo+IAo+IAo+IEFuZHkKPiAKPiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+IE5ldGNvbmYgbWFpbGluZyBsaXN0Cj4gTmV0 Y29uZkBpZXRmLm9yZwo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV0 Y29uZgotLSAKTGFkaXNsYXYgTGhvdGthLCBDRVNORVQKUEdQIEtleSBJRDogRTc0RThDMEMKCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYgbWFp bGluZyBsaXN0Ck5ldGNvbmZAaWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9uZXRjb25mCg== From netconf-bounces@ietf.org Tue Dec 9 00:24:24 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9A79B28C114; Tue, 9 Dec 2008 00:24:24 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E0CBC28C114 for ; Tue, 9 Dec 2008 00:24:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.49 X-Spam-Level: X-Spam-Status: No, score=0.49 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4FE0RCY4nabG for ; Tue, 9 Dec 2008 00:24:23 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id CE45628C10C for ; Tue, 9 Dec 2008 00:24:22 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB98NVtQ030151; Tue, 9 Dec 2008 09:23:33 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 9 Dec 2008 09:23:30 +0100 Message-ID: <493E2A85.7070609@s3group.com> Date: Tue, 09 Dec 2008 09:21:25 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Ladislav Lhotka References: <49315EFA.3000406@netconfcentral.com> <20081208162209.GB16458@elstar.local> <20081208.190959.195938679.mbj@tail-f.com> <493D6A9D.4010307@netconfcentral.com> <1228764114.6318.27.camel@missotis> In-Reply-To: <1228764114.6318.27.camel@missotis> X-OriginalArrivalTime: 09 Dec 2008 08:23:30.0952 (UTC) FILETIME=[6B487080:01C959D7] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Tue, 09 Dec 2008 09:23:35 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org TGFkaXNsYXYgTGhvdGthIHdyb3RlOgo+IEFuZHkgQmllcm1hbiBww63FoWUgdiBQbyAwOC4gMTIu IDIwMDggdiAxMDo0MiAtMDgwMDoKPiAKPj4+IE1heWJlIHdlIGNhbiBzYXkgdGhhdCBpbXBsZW1l bnRhdGlvbnMgbXVzdCBxdW90ZSBpdCBhbmQgc2VuZAo+Pj4KPj4+ICAgPGZvbyB4PSJdXSZndDtd XSZndDsiLz4KPj4+Cj4+PiBpbnN0ZWFkIG9mCj4+Pgo+Pj4gICA8Zm9vIHg9Il1dPl1dPiIvPgo+ Pj4KPj4gSSB3YXMgZ29pbmcgdG8gcG9pbnQgdGhpcyBvdXQuCj4gCj4gRm9yIGV4YW1wbGUgeG1s bGludCBpbmRlZWQgcmVwbGFjZXMgJ11dPicgd2l0aCAnXV0mZ3Q7JyBpbiBhdHRyaWJ1dGUKPiB2 YWx1ZXMuCj4gCj4+IFRoZSAnPicgY2hhciBjYW5ub3QgYXBwZWFyIGF0IGFsbCB3aXRoaW4gYSB0 ZXh0KCkgbm9kZS4KPj4gSXQgaGFzIHRvIGJlIHdyaXR0ZW4gYXMgYSBjaGFyYWN0ZXIgZW50aXR5 Lgo+IAo+IE5vdCB0cnVlLiBYTUwgMS4wIHNwZWM6IFRoZSByaWdodCBhbmdsZSBicmFja2V0ICg+ KSBtYXkgYmUgcmVwcmVzZW50ZWQKPiB1c2luZyB0aGUgc3RyaW5nICImZ3Q7IiwgYW5kIE1VU1Qs IGZvciBjb21wYXRpYmlsaXR5LCBiZSBlc2NhcGVkIHVzaW5nCj4gZWl0aGVyICImZ3Q7IiBvciBh IGNoYXJhY3RlciByZWZlcmVuY2Ugd2hlbiBpdCBhcHBlYXJzIGluIHRoZSBzdHJpbmcKPiAiXV0+ IiBpbiBjb250ZW50LCFrom netconf-bounces@ietf.org Tue Dec 9 00:24:24 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9A79B28C114; Tue, 9 Dec 2008 00:24:24 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E0CBC28C114 for ; Tue, 9 Dec 2008 00:24:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.49 X-Spam-Level: X-Spam-Status: No, score=0.49 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4FE0RCY4nabG for ; Tue, 9 Dec 2008 00:24:23 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id CE45628C10C for ; Tue, 9 Dec 2008 00:24:22 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mB98NVtQ030151; Tue, 9 Dec 2008 09:23:33 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 9 Dec 2008 09:23:30 +0100 Message-ID: <493E2A85.7070609@s3group.com> Date: Tue, 09 Dec 2008 09:21:25 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Ladislav Lhotka References: <49315EFA.3000406@netconfcentral.com> <20081208162209.GB16458@elstar.local> <20081208.190959.195938679.mbj@tail-f.com> <493D6A9D.4010307@netconfcentral.com> <1228764114.6318.27.camel@missotis> In-Reply-To: <1228764114.6318.27.camel@missotis> X-OriginalArrivalTime: 09 Dec 2008 08:23:30.0952 (UTC) FILETIME=[6B487080:01C959D7] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Tue, 09 Dec 2008 09:23:35 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org TGFkaXNsYXYgTGhvdGthIHdyb3RlOgo+IEFuZHkgQmllcm1hbiBww63FoWUgdiBQbyAwOC4gMTIu IDIwMDggdiAxMDo0MiAtMDgwMDoKPiAKPj4+IE1heWJlIHdlIGNhbiBzYXkgdGhhdCBpbXBsZW1l bnRhdGlvbnMgbXVzdCBxdW90ZSBpdCBhbmQgc2VuZAo+Pj4KPj4+ICAgPGZvbyB4PSJdXSZndDtd XSZndDsiLz4KPj4+Cj4+PiBpbnN0ZWFkIG9mCj4+Pgo+Pj4gICA8Zm9vIHg9Il1dPl1dPiIvPgo+ Pj4KPj4gSSB3YXMgZ29pbmcgdG8gcG9pbnQgdGhpcyBvdXQuCj4gCj4gRm9yIGV4YW1wbGUgeG1s bGludCBpbmRlZWQgcmVwbGFjZXMgJ11dPicgd2l0aCAnXV0mZ3Q7JyBpbiBhdHRyaWJ1dGUKPiB2 YWx1ZXMuCj4gCj4+IFRoZSAnPicgY2hhciBjYW5ub3QgYXBwZWFyIGF0IGFsbCB3aXRoaW4gYSB0 ZXh0KCkgbm9kZS4KPj4gSXQgaGFzIHRvIGJlIHdyaXR0ZW4gYXMgYSBjaGFyYWN0ZXIgZW50aXR5 Lgo+IAo+IE5vdCB0cnVlLiBYTUwgMS4wIHNwZWM6IFRoZSByaWdodCBhbmdsZSBicmFja2V0ICg+ KSBtYXkgYmUgcmVwcmVzZW50ZWQKPiB1c2luZyB0aGUgc3RyaW5nICImZ3Q7IiwgYW5kIE1VU1Qs IGZvciBjb21wYXRpYmlsaXR5LCBiZSBlc2NhcGVkIHVzaW5nCj4gZWl0aGVyICImZ3Q7IiBvciBh IGNoYXJhY3RlciByZWZlcmVuY2Ugd2hlbiBpdCBhcHBlYXJzIGluIHRoZSBzdHJpbmcKPiAiXV0+ IiBpbiBjb250B3aGVuIHRoYXQgc3RyaW5nIGlzIG5vdCBtYXJraW5nIHRoZSBlbmQgb2Yg YSBDREFUQQo+IHNlY3Rpb24uCgpTbyBpZiBzb21lb25lIG5lZWQgIl1dPl1dPiIgbWFya3MgaW4g YW4gYXR0cmlidXRlLCBwYXNzaW5nIHRoZW0gYXMgIl1dJmd0O11dJmd0OyIgb3IgIl1dJiM2Mjtd XSYjNjI7IiBpcyBmdWxseSBzdWZmaWNpZW50LgoKVG9tYXN6Cgo+IExlZnQgYW5nbGUgYnJhY2tl dCAnPCcgbXVzdCBub3QgYXBwZWFyIGFzIGxpdGVyYWwuCj4gCj4gTGFkYQo+IAo+PiBJIGRvbid0 IHRoaW5rIHRoaXMgaXMgYSBiaWcgZGVhbC4gIFNob3VsZCB3ZQo+PiB3b3JyeSBhYm91dCBjb21t ZW50IG5vZGVzPwo+Pgo+PiBUaGUgY2xpZW50IGltcGxlbWVudGF0aW9uIHRoYXQgZ2VuZXJhdGVk IHRoZSBFT00gc2VxdWVuY2UKPj4gaW5zaWRlIGFuIGF0dHJpYnV0ZSB2YWx1ZSBpcyBicm9rZW4s IHJpZ2h0Pwo+Pgo+Pj4gL21hcnRpbgo+Pgo+PiBBbmR5Cj4+CgoKVGhlIGluZm9ybWF0aW9uIGNv bnRhaW5lZCBpbiB0aGlzIGUtbWFpbCBhbmQgaW4gYW55IGF0dGFjaG1lbnRzIGlzIGNvbmZpZGVu dGlhbCBhbmQgaXMgZGVzaWduYXRlZCBzb2xlbHkgZm9yIHRoZSBhdHRlbnRpb24gb2YgdGhlIGlu dGVuZGVkIHJlY2lwaWVudChzKS4gSWYgeW91IGFyZSBub3QgYW4gaW50ZW5kZWQgcmVjaXBpZW50 LCB5b3UgbXVzdCBub3QgdXNlLCBkaXNjbG9zZSwgY29weSwgZGlzdHJpYnV0ZSBvciByZXRhaW4g dGhpcyBlLW1haWwgb3IgYW55IHBhcnQgdGhlcmVvZi4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhp cyBlLW1haWwgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBieSByZXR1cm4gZS1t YWlsIGFuZCBkZWxldGUgYWxsIGNvcGllcyBvZiB0aGlzIGUtbWFpbCBmcm9tIHlvdXIgY29tcHV0 ZXIgc3lzdGVtKHMpLgpQbGVhc2UgZGlyZWN0IGFueSBhZGRpdGlvbmFsIHF1ZXJpZXMgdG86IGNv bW11bmljYXRpb25zQHMzZ3JvdXAuY29tLgpUaGFuayBZb3UuCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYgbWFpbGluZyBsaXN0Ck5ldGNvbmZA aWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZXRjb25mCg== ZW50LCB3aGVuIHRoYXQgc3RyaW5nIGlzIG5vdCBtYXJraW5nIHRoZSBlbmQgb2Yg YSBDREFUQQo+IHNlY3Rpb24uCgpTbyBpZiBzb21lb25lIG5lZWQgIl1dPl1dPiIgbWFya3MgaW4g YW4gYXR0cmlidXRlLCBwYXNzaW5nIHRoZW0gYXMgIl1dJmd0O11dJmd0OyIgb3IgIl1dJiM2Mjtd XSYjNjI7IiBpcyBmdWxseSBzdWZmaWNpZW50LgoKVG9tYXN6Cgo+IExlZnQgYW5nbGUgYnJhY2tl dCAnPCcgbXVzdCBub3QgYXBwZWFyIGFzIGxpdGVyYWwuCj4gCj4gTGFkYQo+IAo+PiBJIGRvbid0 IHRoaW5rIHRoaXMgaXMgYSBiaWcgZGVhbC4gIFNob3VsZCB3ZQo+PiB3b3JyeSBhYm91dCBjb21t ZW50IG5vZGVzPwo+Pgo+PiBUaGUgY2xpZW50IGltcGxlbWVudGF0aW9uIHRoYXQgZ2VuZXJhdGVk IHRoZSBFT00gc2VxdWVuY2UKPj4gaW5zaWRlIGFuIGF0dHJpYnV0ZSB2YWx1ZSBpcyBicm9rZW4s IHJpZ2h0Pwo+Pgo+Pj4gL21hcnRpbgo+Pgo+PiBBbmR5Cj4+CgoKVGhlIGluZm9ybWF0aW9uIGNv bnRhaW5lZCBpbiB0aGlzIGUtbWFpbCBhbmQgaW4gYW55IGF0dGFjaG1lbnRzIGlzIGNvbmZpZGVu dGlhbCBhbmQgaXMgZGVzaWduYXRlZCBzb2xlbHkgZm9yIHRoZSBhdHRlbnRpb24gb2YgdGhlIGlu dGVuZGVkIHJlY2lwaWVudChzKS4gSWYgeW91IGFyZSBub3QgYW4gaW50ZW5kZWQgcmVjaXBpZW50 LCB5b3UgbXVzdCBub3QgdXNlLCBkaXNjbG9zZSwgY29weSwgZGlzdHJpYnV0ZSBvciByZXRhaW4g dGhpcyBlLW1haWwgb3IgYW55IHBhcnQgdGhlcmVvZi4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhp cyBlLW1haWwgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBieSByZXR1cm4gZS1t YWlsIGFuZCBkZWxldGUgYWxsIGNvcGllcyBvZiB0aGlzIGUtbWFpbCBmcm9tIHlvdXIgY29tcHV0 ZXIgc3lzdGVtKHMpLgpQbGVhc2UgZGlyZWN0IGFueSBhZGRpdGlvbmFsIHF1ZXJpZXMgdG86IGNv bW11bmljYXRpb25zQHMzZ3JvdXAuY29tLgpUaGFuayBZb3UuCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYgbWFpbGluZyBsaXN0Ck5ldGNvbmZA aWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZXRjb25mCg== From netconf-bounces@ietf.org Tue Dec 9 01:18:31 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 93A6B3A6B09; Tue, 9 Dec 2008 01:18:31 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 119413A6B08 for ; Tue, 9 Dec 2008 01:18:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.026 X-Spam-Level: X-Spam-Status: No, score=0.026 tagged_above=-999 required=5 tests=[AWL=0.468, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rbmEPPsFWQcA for ; Tue, 9 Dec 2008 01:18:28 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 6FD233A6A7C for ; Tue, 9 Dec 2008 01:18:28 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1L9yjU-0001Lu-BD; Tue, 09 Dec 2008 10:18:20 +0100 Message-ID: <24BDD62F7E45492BB74122FBD47640B0@BertLaptop> From: "Bert Wijnen \(IETF\)" To: "Netconf" , "Ted Goddard" , "Margaret Wasserman" Date: Tue, 9 Dec 2008 10:17:39 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: Pasi.Eronen@nokia.com Subject: [Netconf] Fw: [Technical Errata Reported] RFC4742 (1628) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0272441092==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0272441092== Content-Type: multipart/alternative; boundary="----=_NextPart_000_070F_01C959E7.5D2E4280" This is a multi-part message in MIME format. ------=_NextPart_000_070F_01C959E7.5D2E4280 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable NETCONF WG members, We have received the following reported Technical errata. We have had a few interactions between the authors, WG chairs, AD and = Pasi. It seems that the Errata report is indeed correct. It also seems a bit heavy to issue a new RFC just for this. So we (WG chairs) are suggesting that Ted and Margaret compose a fix = (can be based mainly on the text that Pasi already provided) in the form of: on page xxxx replace =20 old text with=20 =20 new text And that we all get a chance on the mailing list to review and comment. Once we're OK with the text, we can pass it to the RFC-Editor. And also put it in our queue for the time that rfc4742 needs revision. Maybve... while we do rfc4741 revision we find other things that could = also have an impact on 4742, and we can then decide if that is serious enough = to also reissue rfc4742. So Ted and Marageret, pls send proposed text. Bert and Mehmet ----- Original Message -----=20 From: RFC Errata System=20 To: margaret@thingmagic.com ; ted.goddard@icesoft.com ; = dromasca@avaya.com ; rbonica@juniper.net ; bertietf@bwijnen.net ; = mehmet.ersue@nsn.com=20 Cc: pasi.eronen@nokia.com ; rfc-editor@rfc-editor.org=20 Sent: Thursday, December 04, 2008 7:20 PM Subject: [Technical Errata Reported] RFC4742 (1628) The following errata report has been submitted for RFC4742, "Using the NETCONF Configuration Protocol over Secure SHell (SSH)". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=3D4742&eid=3D1628 -------------------------------------- Type: Technical Reported by: Pasi Eronen Section: 7 Original Text ------------- IANA is also requested to assign "netconf" as an SSH Service Name as defined in [RFC4250], as follows: Service Name Reference ------------- --------- netconf RFC 4742 Corrected Text -------------- IANA is also requested to assign "netconf" as an SSH Connection Protocol Subsystem Name as defined in [RFC4250], as follows: Subsystem Name Reference ------------- --------- netconf RFC 4742 Notes ----- The IANA registry (http://www.iana.org/assignments/ssh-parameters) also needs to be fixed. Instructions: ------------- This errata is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary.=20 -------------------------------------- RFC4742 (draft-ietf-netconf-ssh-06) -------------------------------------- Title : Using the NETCONF Configuration Protocol over = Secure SHell (SSH) Publication Date : December 2006 Author(s) : M. Wasserman, T. Goddard Category : PROPOSED STANDARD Source : Network Configuration Area : Operations and Management Stream : IETF Verifying Party : IESG ------=_NextPart_000_070F_01C959E7.5D2E4280 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
NETCONF WG members,
 
We have received the following reported Technical=20 errata.
We have had a few interactions between the authors, = WG chairs,=20 AD and Pasi.
It seems that the Errata report is indeed=20 correct.
It also seems a bit heavy to issue a new RFC just = for=20 this.
So we (WG chairs) are suggesting that Ted and = Margaret compose=20 a fix (can be
based mainly on the text that Pasi already provided) = in the=20 form of:
 
on page xxxx replace
  
    old text
 
with
 
   new text
 
And that we all get a chance on the mailing list to = review and=20 comment.
Once we're OK with the text, we can pass it to the=20 RFC-Editor.
And also put it in our queue for the time that = rfc4742 needs=20 revision.
Maybve... while we do rfc4741 revision we find other = things=20 that could also
have an impact on 4742, and we can then decide if = that is=20 serious enough to
also reissue rfc4742.
 
So Ted and Marageret, pls send proposed = text.
 
Bert and Mehmet
 
 
----- Original Message -----=20
From: RFC=20 Errata System
To: margaret@thingmagic.com ; ted.goddard@icesoft.com ; dromasca@avaya.com=20 ; rbonica@juniper.net ; bertietf@bwijnen.net ; mehmet.ersue@nsn.com
Cc: pasi.eronen@nokia.com ; rfc-editor@rfc-editor.org =
Sent: Thursday, December 04, 2008 7:20 PM
Subject: [Technical Errata Reported] RFC4742 = (1628)


The following errata report has been submitted for=20 RFC4742,
"Using the NETCONF Configuration Protocol over Secure SHell=20 (SSH)".

--------------------------------------
You may review = the=20 report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=3D4742&eid=3D16= 28

--------------------------------------
Type:=20 Technical
Reported by: Pasi Eronen <pasi.eronen@nokia.com>
Section:=20 7

Original Text
-------------
IANA is also requested to = assign=20 "netconf" as an SSH Service Name as
defined in [RFC4250], as=20 follows:

         Service = Name           &nb= sp;     =20 Reference
        =20 -------------          =       =20 ---------
        =20 netconf           =            =20 RFC 4742


Corrected Text
--------------
IANA is also = requested=20 to assign "netconf" as an SSH Connection
Protocol Subsystem Name as = defined=20 in [RFC4250], as=20 follows:

         = Subsystem=20 Name           &nb= sp;   =20 Reference
        =20 -------------          =       =20 ---------
        =20 netconf           =            =20 RFC 4742


Notes
-----
The IANA registry (http://www.iana.o= rg/assignments/ssh-parameters)
also=20 needs to be fixed.

Instructions:
-------------
This errata = is=20 currently posted as "Reported". If necessary, please
use "Reply All" = to=20 discuss whether it should be verified or
rejected. When a decision is = reached, the verifying party (IESG)
can log in to change the status = and edit=20 the report, if necessary.=20

--------------------------------------
RFC4742=20 (draft-ietf-netconf-ssh-06)
--------------------------------------
= Title           &n= bsp;  =20 : Using the NETCONF Configuration Protocol over Secure SHell=20 (SSH)
Publication Date    : December=20 2006
Author(s)         &n= bsp; :=20 M. Wasserman, T.=20 Goddard
Category         =   =20 : PROPOSED=20 STANDARD
Source         &= nbsp;   =20 : Network=20 Configuration
Area        &nbs= p;      =20 : Operations and=20 Management
Stream         = ;    =20 : IETF
Verifying Party     : = IESG
------=_NextPart_000_070F_01C959E7.5D2E4280-- --===============0272441092== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0272441092==-- From netconf-bounces@ietf.org Tue Dec 9 01:18:31 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 93A6B3A6B09; Tue, 9 Dec 2008 01:18:31 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 119413A6B08 for ; Tue, 9 Dec 2008 01:18:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.026 X-Spam-Level: X-Spam-Status: No, score=0.026 tagged_above=-999 required=5 tests=[AWL=0.468, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rbmEPPsFWQcA for ; Tue, 9 Dec 2008 01:18:28 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 6FD233A6A7C for ; Tue, 9 Dec 2008 01:18:28 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1L9yjU-0001Lu-BD; Tue, 09 Dec 2008 10:18:20 +0100 Message-ID: <24BDD62F7E45492BB74122FBD47640B0@BertLaptop> From: "Bert Wijnen \(IETF\)" To: "Netconf" , "Ted Goddard" , "Margaret Wasserman" Date: Tue, 9 Dec 2008 10:17:39 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: Pasi.Eronen@nokia.com Subject: [Netconf] Fw: [Technical Errata Reported] RFC4742 (1628) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0272441092==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0272441092== Content-Type: multipart/alternative; boundary="----=_NextPart_000_070F_01C959E7.5D2E4280" This is a multi-part message in MIME format. ------=_NextPart_000_070F_01C959E7.5D2E4280 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable NETCONF WG members, We have received the following reported Technical errata. We have had a few interactions between the authors, WG chairs, AD and = Pasi. It seems that the Errata report is indeed correct. It also seems a bit heavy to issue a new RFC just for this. So we (WG chairs) are suggesting that Ted and Margaret compose a fix = (can be based mainly on the text that Pasi already provided) in the form of: on page xxxx replace =20 old text with=20 =20 new text And that we all get a chance on the mailing list to review and comment. Once we're OK with the text, we can pass it to the RFC-Editor. And also put it in our queue for the time that rfc4742 needs revision. Maybve... while we do rfc4741 revision we find other things that could = also have an impact on 4742, and we can then decide if that is serious enough = to also reissue rfc4742. So Ted and Marageret, pls send proposed text. Bert and Mehmet ----- Original Message -----=20 From: RFC Errata System=20 To: margaret@thingmagic.com ; ted.goddard@icesoft.com ; = dromasca@avaya.com ; rbonica@juniper.net ; bertietf@bwijnen.net ; = mehmet.ersue@nsn.com=20 Cc: pasi.eronen@nokia.com ; rfc-editor@rfc-editor.org=20 Sent: Thursday, December 04, 2008 7:20 PM Subject: [Technical Errata Reported] RFC4742 (1628) The following errata report has been submitted for RFC4742, "Using the NETCONF Configuration Protocol over Secure SHell (SSH)". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=3D4742&eid=3D1628 -------------------------------------- Type: Technical Reported by: Pasi Eronen Section: 7 Original Text ------------- IANA is also requested to assign "netconf" as an SSH Service Name as defined in [RFC4250], as follows: Service Name Reference ------------- --------- netconf RFC 4742 Corrected Text -------------- IANA is also requested to assign "netconf" as an SSH Connection Protocol Subsystem Name as defined in [RFC4250], as follows: Subsystem Name Reference ------------- --------- netconf RFC 4742 Notes ----- The IANA registry (http://www.iana.org/assignments/ssh-parameters) also needs to be fixed. Instructions: ------------- This errata is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary.=20 -------------------------------------- RFC4742 (draft-ietf-netconf-ssh-06) -------------------------------------- Title : Using the NETCONF Configuration Protocol over = Secure SHell (SSH) Publication Date : December 2006 Author(s) : M. Wasserman, T. Goddard Category : PROPOSED STANDARD Source : Network Configuration Area : Operations and Management Stream : IETF Verifying Party : IESG ------=_NextPart_000_070F_01C959E7.5D2E4280 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
NETCONF WG members,
 
We have received the following reported Technical=20 errata.
We have had a few interactions between the authors, = WG chairs,=20 AD and Pasi.
It seems that the Errata report is indeed=20 correct.
It also seems a bit heavy to issue a new RFC just = for=20 this.
So we (WG chairs) are suggesting that Ted and = Margaret compose=20 a fix (can be
based mainly on the text that Pasi already provided) = in the=20 form of:
 
on page xxxx replace
  
    old text
 
with
 
   new text
 
And that we all get a chance on the mailing list to = review and=20 comment.
Once we're OK with the text, we can pass it to the=20 RFC-Editor.
And also put it in our queue for the time that = rfc4742 needs=20 revision.
Maybve... while we do rfc4741 revision we find other = things=20 that could also
have an impact on 4742, and we can then decide if = that is=20 serious enough to
also reissue rfc4742.
 
So Ted and Marageret, pls send proposed = text.
 
Bert and Mehmet
 
 
----- Original Message -----=20
From: RFC=20 Errata System
To: margaret@thingmagic.com ; ted.goddard@icesoft.com ; dromasca@avaya.com=20 ; rbonica@juniper.net ; bertietf@bwijnen.net ; mehmet.ersue@nsn.com
Cc: pasi.eronen@nokia.com ; rfc-editor@rfc-editor.org =
Sent: Thursday, December 04, 2008 7:20 PM
Subject: [Technical Errata Reported] RFC4742 = (1628)


The following errata report has been submitted for=20 RFC4742,
"Using the NETCONF Configuration Protocol over Secure SHell=20 (SSH)".

--------------------------------------
You may review = the=20 report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=3D4742&eid=3D16= 28

--------------------------------------
Type:=20 Technical
Reported by: Pasi Eronen <pasi.eronen@nokia.com>
Section:=20 7

Original Text
-------------
IANA is also requested to = assign=20 "netconf" as an SSH Service Name as
defined in [RFC4250], as=20 follows:

         Service = Name           &nb= sp;     =20 Reference
        =20 -------------          =       =20 ---------
        =20 netconf           =            =20 RFC 4742


Corrected Text
--------------
IANA is also = requested=20 to assign "netconf" as an SSH Connection
Protocol Subsystem Name as = defined=20 in [RFC4250], as=20 follows:

         = Subsystem=20 Name           &nb= sp;   =20 Reference
        =20 -------------          =       =20 ---------
        =20 netconf           =            =20 RFC 4742


Notes
-----
The IANA registry (http://www.iana.o= rg/assignments/ssh-parameters)
also=20 needs to be fixed.

Instructions:
-------------
This errata = is=20 currently posted as "Reported". If necessary, please
use "Reply All" = to=20 discuss whether it should be verified or
rejected. When a decision is = reached, the verifying party (IESG)
can log in to change the status = and edit=20 the report, if necessary.=20

--------------------------------------
RFC4742=20 (draft-ietf-netconf-ssh-06)
--------------------------------------
= Title           &n= bsp;  =20 : Using the NETCONF Configuration Protocol over Secure SHell=20 (SSH)
Publication Date    : December=20 2006
Author(s)         &n= bsp; :=20 M. Wasserman, T.=20 Goddard
Category         =   =20 : PROPOSED=20 STANDARD
Source         &= nbsp;   =20 : Network=20 Configuration
Area        &nbs= p;      =20 : Operations and=20 Management
Stream         = ;    =20 : IETF
Verifying Party     : = IESG
------=_NextPart_000_070F_01C959E7.5D2E4280-- --===============0272441092== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0272441092==-- From netconf-bounces@ietf.org Tue Dec 9 01:34:58 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CD3E73A6982; Tue, 9 Dec 2008 01:34:58 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D35893A6915 for ; Tue, 9 Dec 2008 01:34:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.019 X-Spam-Level: X-Spam-Status: No, score=-1.019 tagged_above=-999 required=5 tests=[AWL=-0.279, BAYES_20=-0.74] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kOaxWSReNH5Z for ; Tue, 9 Dec 2008 01:34:57 -0800 (PST) Received: from mta2.huaweisymantec.com (mta2.huaweisymantec.com [121.15.168.143]) by core3.amsl.com (Postfix) with ESMTP id 85AA23A6884 for ; Tue, 9 Dec 2008 01:34:56 -0800 (PST) MIME-version: 1.0 Content-disposition: inline Received: from hstml01-in.huaweisymantec.com ([172.26.3.42]) by hstga02-in.huaweisymantec.com (Sun Java(tm) System Messaging Server 6.3-5.02 (built Oct 12 2007; 32bit)) with ESMTP id <0KBL0062QRXZCC80@hstga02-in.huaweisymantec.com> for netconf@ietf.org; Tue, 09 Dec 2008 17:34:49 +0800 (CST) Received: from huaweisymantec.com ([127.0.0.1]) by hstml01-in.huaweisymantec.com (Sun Java(tm) System Messaging Server 6.3-5.02 (built Oct 12 2007; 32bit)) with ESMTP id <0KBL00KR2RXY5J00@hstml01-in.huaweisymantec.com> for netconf@ietf.org; Tue, 09 Dec 2008 17:34:47 +0800 (CST) Received: from [172.19.6.63] by hstml01-in.huaweisymantec.com (mshttpd); Tue, 09 Dec 2008 17:34:46 +0800 From: WashamFan To: netconf@ietf.org Message-id: Date: Tue, 09 Dec 2008 17:34:46 +0800 X-Mailer: Sun Java(tm) System Messenger Express 6.3-5.02 (built Oct 12 2007; 32bit) Content-language: zh-CN X-Accept-Language: zh-CN Priority: normal Subject: [Netconf] sessionId and lockId uniqueness X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, Is sessionId used to differentiate active sessions or all activated sessions before reboot? Is lockId used to differentiate active locks or all activated locks before reboot? Thanks in advance! washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 9 01:34:58 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CD3E73A6982; Tue, 9 Dec 2008 01:34:58 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D35893A6915 for ; Tue, 9 Dec 2008 01:34:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.019 X-Spam-Level: X-Spam-Status: No, score=-1.019 tagged_above=-999 required=5 tests=[AWL=-0.279, BAYES_20=-0.74] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kOaxWSReNH5Z for ; Tue, 9 Dec 2008 01:34:57 -0800 (PST) Received: from mta2.huaweisymantec.com (mta2.huaweisymantec.com [121.15.168.143]) by core3.amsl.com (Postfix) with ESMTP id 85AA23A6884 for ; Tue, 9 Dec 2008 01:34:56 -0800 (PST) MIME-version: 1.0 Content-disposition: inline Received: from hstml01-in.huaweisymantec.com ([172.26.3.42]) by hstga02-in.huaweisymantec.com (Sun Java(tm) System Messaging Server 6.3-5.02 (built Oct 12 2007; 32bit)) with ESMTP id <0KBL0062QRXZCC80@hstga02-in.huaweisymantec.com> for netconf@ietf.org; Tue, 09 Dec 2008 17:34:49 +0800 (CST) Received: from huaweisymantec.com ([127.0.0.1]) by hstml01-in.huaweisymantec.com (Sun Java(tm) System Messaging Server 6.3-5.02 (built Oct 12 2007; 32bit)) with ESMTP id <0KBL00KR2RXY5J00@hstml01-in.huaweisymantec.com> for netconf@ietf.org; Tue, 09 Dec 2008 17:34:47 +0800 (CST) Received: from [172.19.6.63] by hstml01-in.huaweisymantec.com (mshttpd); Tue, 09 Dec 2008 17:34:46 +0800 From: WashamFan To: netconf@ietf.org Message-id: Date: Tue, 09 Dec 2008 17:34:46 +0800 X-Mailer: Sun Java(tm) System Messenger Express 6.3-5.02 (built Oct 12 2007; 32bit) Content-language: zh-CN X-Accept-Language: zh-CN Priority: normal Subject: [Netconf] sessionId and lockId uniqueness X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, Is sessionId used to differentiate active sessions or all activated sessions before reboot? Is lockId used to differentiate active locks or all activated locks before reboot? Thanks in advance! washam _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 9 09:08:46 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E12123A6914; Tue, 9 Dec 2008 09:08:46 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B42FD3A68BF for ; Tue, 9 Dec 2008 09:08:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.194 X-Spam-Level: X-Spam-Status: No, score=-6.194 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dxc1KAqLu-p0 for ; Tue, 9 Dec 2008 09:08:46 -0800 (PST) Received: from mailgw4.ericsson.se (mailgw4.ericsson.se [193.180.251.62]) by core3.amsl.com (Postfix) with ESMTP id DAA0B3A6914 for ; Tue, 9 Dec 2008 09:08:45 -0800 (PST) Received: from mailgw4.ericsson.se (unknown [127.0.0.1]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id A9F18207B8 for ; Tue, 9 Dec 2008 18:08:38 +0100 (CET) X-AuditID: c1b4fb3e-abf80bb00000537b-fa-493ea6161569 Received: from esealmw127.eemea.ericsson.se (unknown [153.88.254.122]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 8D8062036E for ; Tue, 9 Dec 2008 18:08:38 +0100 (CET) Received: from esealmw129.eemea.ericsson.se ([153.88.254.177]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Tue, 9 Dec 2008 18:08:38 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Tue, 9 Dec 2008 18:08:38 +0100 Message-ID: <493EA615.8050807@ericsson.com> Date: Tue, 09 Dec 2008 18:08:37 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: netconf mailing list X-OriginalArrivalTime: 09 Dec 2008 17:08:38.0177 (UTC) FILETIME=[C70D7110:01C95A20] X-Brightmail-Tracker: AAAAAA== Subject: [Netconf] [Fwd: New Version Notification for draft-ietf-netconf-partial-lock-05] X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org -------- Original Message -------- Subject: New Version Notification for draft-ietf-netconf-partial-lock-05 Date: Tue, 9 Dec 2008 09:07:55 -0800 (PST) From: IETF I-D Submission Tool To: balazs.lengyel@ericsson.com CC: mbj@tail-f.com A new version of I-D, draft-ietf-netconf-partial-lock-05.txt has been successfuly submitted by Balazs Lengyel and posted to the IETF repository. Filename: draft-ietf-netconf-partial-lock Revision: 05 Title: Partial Lock RPC for NETCONF Creation_date: 2008-12-08 WG ID: netconf Number_of_pages: 26 Abstract: The NETCONF protocol defines the lock and unlock RPCs, used to lock entire configuration datastores. In some situations, a way to lock only parts of a configuration datastore is required. This document defines a capability-based extension to the NETCONF protocol for locking portions of a configuration datastore. The IETF Secretariat. -- Balazs Lengyel From netconf-bounces@ietf.org Tue Dec 9 09:08:46 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E12123A6914; Tue, 9 Dec 2008 09:08:46 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B42FD3A68BF for ; Tue, 9 Dec 2008 09:08:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.194 X-Spam-Level: X-Spam-Status: No, score=-6.194 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dxc1KAqLu-p0 for ; Tue, 9 Dec 2008 09:08:46 -0800 (PST) Received: from mailgw4.ericsson.se (mailgw4.ericsson.se [193.180.251.62]) by core3.amsl.com (Postfix) with ESMTP id DAA0B3A6914 for ; Tue, 9 Dec 2008 09:08:45 -0800 (PST) Received: from mailgw4.ericsson.se (unknown [127.0.0.1]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id A9F18207B8 for ; Tue, 9 Dec 2008 18:08:38 +0100 (CET) X-AuditID: c1b4fb3e-abf80bb00000537b-fa-493ea6161569 Received: from esealmw127.eemea.ericsson.se (unknown [153.88.254.122]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 8D8062036E for ; Tue, 9 Dec 2008 18:08:38 +0100 (CET) Received: from esealmw129.eemea.ericsson.se ([153.88.254.177]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Tue, 9 Dec 2008 18:08:38 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Tue, 9 Dec 2008 18:08:38 +0100 Message-ID: <493EA615.8050807@ericsson.com> Date: Tue, 09 Dec 2008 18:08:37 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: netconf mailing list X-OriginalArrivalTime: 09 Dec 2008 17:08:38.0177 (UTC) FILETIME=[C70D7110:01C95A20] X-Brightmail-Tracker: AAAAAA== Subject: [Netconf] [Fwd: New Version Notification for draft-ietf-netconf-partial-lock-05] X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org -------- Original Message -------- Subject: New Version Notification for draft-ietf-netconf-partial-lock-05 Date: Tue, 9 Dec 2008 09:07:55 -0800 (PST) From: IETF I-D Submission Tool To: balazs.lengyel@ericsson.com CC: mbj@tail-f.com A new version of I-D, draft-ietf-netconf-partial-lock-05.txt has been successfuly submitted by Balazs Lengyel and posted to the IETF repository. Filename: draft-ietf-netconf-partial-lock Revision: 05 Title: Partial Lock RPC for NETCONF Creation_date: 2008-12-08 WG ID: netconf Number_of_pages: 26 Abstract: The NETCONF protocol defines the lock and unlock RPCs, used to lock entire configuration datastores. In some situations, a way to lock only parts of a configuration datastore is required. This document defines a capability-based extension to the NETCONF protocol for locking portions of a configuration datastore. The IETF Secretariat. -- Balazs Lengyel Ericsson Hungary Ltd. TSP System Manager ECN: 831 7320 Fax: +36 1 4377792 Tel: +36-1-437-7320 email: Balazs.Lengyel@ericsson.com _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf Ericsson Hungary Ltd. TSP System Manager ECN: 831 7320 Fax: +36 1 4377792 Tel: +36-1-437-7320 email: Balazs.Lengyel@ericsson.com _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 9 09:15:02 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 563F23A6B24; Tue, 9 Dec 2008 09:15:02 -0800 (PST) X-Original-To: netconf@ietf.org Delivered-To: netconf@core3.amsl.com Received: by core3.amsl.com (Postfix, from userid 0) id 8B06B3A6B24; Tue, 9 Dec 2008 09:15:01 -0800 (PST) From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 Message-Id: <20081209171501.8B06B3A6B24@core3.amsl.com> Date: Tue, 9 Dec 2008 09:15:01 -0800 (PST) Cc: netconf@ietf.org Subject: [Netconf] I-D Action:draft-ietf-netconf-partial-lock-05.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration Working Group of the IETF. Title : Partial Lock RPC for NETCONF Author(s) : B. Lengyel, M. Bjorklund Filename : draft-ietf-netconf-partial-lock-05.txt Pages : 26 Date : 2008-12-09 The NETCONF protocol defines the lock and unlock RPCs, used to lock entire configuration datastores. In some situations, a way to lock only parts of a configuration datastore is required. This document defines a capability-based extension to the NETCONF protocol for locking portions of a configuration datastore. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-netconf-partial-lock-05.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-netconf-partial-lock-05.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-12-09090755.I-D@ietf.org> --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --NextPart-- From netconf-bounces@ietf.org Tue Dec 9 09:15:02 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 563F23A6B24; Tue, 9 Dec 2008 09:15:02 -0800 (PST) X-Original-To: netconf@ietf.org Delivered-To: netconf@core3.amsl.com Received: by core3.amsl.com (Postfix, from userid 0) id 8B06B3A6B24; Tue, 9 Dec 2008 09:15:01 -0800 (PST) From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 Message-Id: <20081209171501.8B06B3A6B24@core3.amsl.com> Date: Tue, 9 Dec 2008 09:15:01 -0800 (PST) Cc: netconf@ietf.org Subject: [Netconf] I-D Action:draft-ietf-netconf-partial-lock-05.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration Working Group of the IETF. Title : Partial Lock RPC for NETCONF Author(s) : B. Lengyel, M. Bjorklund Filename : draft-ietf-netconf-partial-lock-05.txt Pages : 26 Date : 2008-12-09 The NETCONF protocol defines the lock and unlock RPCs, used to lock entire configuration datastores. In some situations, a way to lock only parts of a configuration datastore is required. This document defines a capability-based extension to the NETCONF protocol for locking portions of a configuration datastore. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-netconf-partial-lock-05.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-netconf-partial-lock-05.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-12-09090755.I-D@ietf.org> --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --NextPart-- From netconf-bounces@ietf.org Wed Dec 10 08:55:30 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6079B3A69E0; Wed, 10 Dec 2008 08:55:30 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A12DF3A69E0 for ; Wed, 10 Dec 2008 08:55:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[AWL=0.437, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vn1JO3flLldk for ; Wed, 10 Dec 2008 08:55:28 -0800 (PST) Received: from wes.hardakers.net (dcn236-43.dcn.davis.ca.us [168.150.236.43]) by core3.amsl.com (Postfix) with ESMTP id DC0963A68DD for ; Wed, 10 Dec 2008 08:55:27 -0800 (PST) Received: from localhost (wlap.dyn.hardakers.net [127.0.0.1]) by wes.hardakers.net (Postfix) with ESMTP id 1211C39A214; Wed, 10 Dec 2008 08:55:22 -0800 (PST) From: Wes Hardaker To: Andy Bierman Organization: Sparta References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> Date: Wed, 10 Dec 2008 08:55:21 -0800 In-Reply-To: <20081208182837.GA16667@elstar.local> (Juergen Schoenwaelder's message of "Mon, 8 Dec 2008 19:28:37 +0100") Message-ID: User-Agent: Gnus/5.110011 (No Gnus v0.11) XEmacs/21.4.21 (linux, no MULE) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org >>>>> On Mon, 8 Dec 2008 19:28:37 +0100, Juergen Schoenwaelder said: JS> Since XML is so much easier than BER, hitting non well-formed XML JS> documents should be rare in practice. ;-) The general rule is: you must do the eval if you're the one acting on the message. IE, don't trust the client to have properly escaped ]]>]]> for you; don't trust the other side's implementation when it comes to security (and you're right: we see this all the time with web-browser vulnerabilities) non-well-formed XML documents are not necessarily going to be rare in practice. If we're designing netconf to be easily script-able (which was an early goal) then we have to expect bad scripts to be written by operators in a hurry who fail to consider where the input to the script is coming from. echo "What is your name?" set a=$< echo "$i" | netconf-client or worse: echo "$i" | raw-ssh-client host:netconfport They're obviously not checking if the user had put ]]>]]> as their user name. The only choice from a security perspective is to drop the connection when the first mesFrom netconf-bounces@ietf.org Wed Dec 10 08:55:30 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6079B3A69E0; Wed, 10 Dec 2008 08:55:30 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A12DF3A69E0 for ; Wed, 10 Dec 2008 08:55:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[AWL=0.437, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vn1JO3flLldk for ; Wed, 10 Dec 2008 08:55:28 -0800 (PST) Received: from wes.hardakers.net (dcn236-43.dcn.davis.ca.us [168.150.236.43]) by core3.amsl.com (Postfix) with ESMTP id DC0963A68DD for ; Wed, 10 Dec 2008 08:55:27 -0800 (PST) Received: from localhost (wlap.dyn.hardakers.net [127.0.0.1]) by wes.hardakers.net (Postfix) with ESMTP id 1211C39A214; Wed, 10 Dec 2008 08:55:22 -0800 (PST) From: Wes Hardaker To: Andy Bierman Organization: Sparta References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> Date: Wed, 10 Dec 2008 08:55:21 -0800 In-Reply-To: <20081208182837.GA16667@elstar.local> (Juergen Schoenwaelder's message of "Mon, 8 Dec 2008 19:28:37 +0100") Message-ID: User-Agent: Gnus/5.110011 (No Gnus v0.11) XEmacs/21.4.21 (linux, no MULE) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org >>>>> On Mon, 8 Dec 2008 19:28:37 +0100, Juergen Schoenwaelder said: JS> Since XML is so much easier than BER, hitting non well-formed XML JS> documents should be rare in practice. ;-) The general rule is: you must do the eval if you're the one acting on the message. IE, don't trust the client to have properly escaped ]]>]]> for you; don't trust the other side's implementation when it comes to security (and you're right: we see this all the time with web-browser vulnerabilities) non-well-formed XML documents are not necessarily going to be rare in practice. If we're designing netconf to be easily script-able (which was an early goal) then we have to expect bad scripts to be written by operators in a hurry who fail to consider where the input to the script is coming from. echo "What is your name?" set a=$< echo "$i" | netconf-client or worse: echo "$i" | raw-ssh-client host:netconfport They're obviously not checking if the user had put ]]>]]> as their user name. The only choice from a security perspective is to drop the connection when the firsage (the rpc) fails to be fully parsed. Back then, we took the word of the xml-directorate that ]]>]]> couldn't exist in a legal XML document. Turns out that may be suspect even for legal documents and worse it doesn't matter if you can't control the legality of what's coming in anyway. SSH doesn't do framing and trying to force in a framing mechanism into the data-stream was the likely mistake. -- "In the bathtub of history the truth is harder to hold than the soap, and much more difficult to find." -- Terry Pratchett _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf st message (the rpc) fails to be fully parsed. Back then, we took the word of the xml-directorate that ]]>]]> couldn't exist in a legal XML document. Turns out that may be suspect even for legal documents and worse it doesn't matter if you can't control the legality of what's coming in anyway. SSH doesn't do framing and trying to force in a framing mechanism into the data-stream was the likely mistake. -- "In the bathtub of history the truth is harder to hold than the soap, and much more difficult to find." -- Terry Pratchett _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 10 09:24:33 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4765F3A68EB; Wed, 10 Dec 2008 09:24:33 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 608EB3A677E for ; Wed, 10 Dec 2008 09:24:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.21 X-Spam-Level: X-Spam-Status: No, score=-2.21 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DUGbvejTvtqd for ; Wed, 10 Dec 2008 09:24:31 -0800 (PST) Received: from smtp116.sbc.mail.sp1.yahoo.com (smtp116.sbc.mail.sp1.yahoo.com [69.147.64.89]) by core3.amsl.com (Postfix) with SMTP id 935DD3A68EB for ; Wed, 10 Dec 2008 09:24:31 -0800 (PST) Received: (qmail 85131 invoked from network); 10 Dec 2008 17:24:25 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.68.196 with plain) by smtp116.sbc.mail.sp1.yahoo.com with SMTP; 10 Dec 2008 17:24:24 -0000 X-YMail-OSG: Whb..0QVM1l4OUqXceerPeIzeh9abGpe5zl15m5C9PqMo.Mhp7tdJLxa_2pkFj37OeELNEkPRbvAUua4brT0BYQqYQbLqCY4aAH1EMgpkPZ9gi3LsAu.1twRJemq91go8oD8xL_iUdm9b8_VmRlBK_8H X-Yahoo-Newman-Property: ymail-3 Message-ID: <493FFB46.10103@netconfcentral.com> Date: Wed, 10 Dec 2008 09:24:22 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Mon, 8 Dec 2008 19:28:37 +0100, Juergen Schoenwaelder said: > > JS> Since XML is so much easier than BER, hitting non well-formed XML > JS> documents should be rare in practice. ;-) > > The general rule is: you must do the eval if you're the one acting on > the message. IE, don't trust the client to have properly escaped ]]>]]> > for you; don't trust the other side's implementation when it comes to > security (and you're right: we see this all the time with web-browser > vulnerabilities) > > non-well-formed XML documents are not necessarily going to be rare in > practice. If we're designing netconf to be easily script-able (which was > an early goal) then we have to expect bad scripts to be written by > operators in a hurry who fail to consider where the input to the script > is coming from. > > echo "What is your name?" > set a=$< > echo "$i" | netconf-client > > or worse: > > echo "$i" | raw-ssh-client host:netconfport > > They're obviously not checking if the user had put > > ]]>]]> > I don't know who 'they' are, but the NETCONF protocol is designed a little better than that, and implementations can take advantage. When a session starts, it must go through a state machine that begins with the exchange. The agent will not accept anything but and it doesn't go well, the connection will be dropped right away. Before the , everything is handled by the 'master' SSH agent (openssh), which would not do anything except barf if it got an embedded in the username. Only the 'netconf' subsystem has access to the config databases. Avoiding the netconf subsystem with raw SSH will not help. After the session is established, each EOM seen at the SSH channel layer input stream will cause a message to be sent to the dispatcher, which will go through all the security checks that are supported by the agent. I do not see how the EOM marker can cause an agent to invoke an RPC as if it were a different one. It can certainly disrupt the session, but that's just garbage-in, garbage-out. > as their user name. The only choice from a security perspective is to > drop the connection when the first message (the rpc) > fails to be fully parsed. > > Back then, we took the word of the xml-directorate that ]]>]]> couldn't > exist in a legal XML document. Turns out that may be suspect even for > legal documents and worse it doesn't matter if you can't control the > legality of what's coming in anyway. SSH doesn't do framing and trying > to force in a framing mechanism into the data-stream was the likely > mistake. > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 10 09:24:33 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4765F3A68EB; Wed, 10 Dec 2008 09:24:33 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 608EB3A677E for ; Wed, 10 Dec 2008 09:24:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.21 X-Spam-Level: X-Spam-Status: No, score=-2.21 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DUGbvejTvtqd for ; Wed, 10 Dec 2008 09:24:31 -0800 (PST) Received: from smtp116.sbc.mail.sp1.yahoo.com (smtp116.sbc.mail.sp1.yahoo.com [69.147.64.89]) by core3.amsl.com (Postfix) with SMTP id 935DD3A68EB for ; Wed, 10 Dec 2008 09:24:31 -0800 (PST) Received: (qmail 85131 invoked from network); 10 Dec 2008 17:24:25 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.68.196 with plain) by smtp116.sbc.mail.sp1.yahoo.com with SMTP; 10 Dec 2008 17:24:24 -0000 X-YMail-OSG: Whb..0QVM1l4OUqXceerPeIzeh9abGpe5zl15m5C9PqMo.Mhp7tdJLxa_2pkFj37OeELNEkPRbvAUua4brT0BYQqYQbLqCY4aAH1EMgpkPZ9gi3LsAu.1twRJemq91go8oD8xL_iUdm9b8_VmRlBK_8H X-Yahoo-Newman-Property: ymail-3 Message-ID: <493FFB46.10103@netconfcentral.com> Date: Wed, 10 Dec 2008 09:24:22 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Mon, 8 Dec 2008 19:28:37 +0100, Juergen Schoenwaelder said: > > JS> Since XML is so much easier than BER, hitting non well-formed XML > JS> documents should be rare in practice. ;-) > > The general rule is: you must do the eval if you're the one acting on > the message. IE, don't trust the client to have properly escaped ]]>]]> > for you; don't trust the other side's implementation when it comes to > security (and you're right: we see this all the time with web-browser > vulnerabilities) > > non-well-formed XML documents are not necessarily going to be rare in > practice. If we're designing netconf to be easily script-able (which was > an early goal) then we have to expect bad scripts to be written by > operators in a hurry who fail to consider where the input to the script > is coming from. > > echo "What is your name?" > set a=$< > echo "$i" | netconf-client > > or worse: > > echo "$i" | raw-ssh-client host:netconfport > > They're obviously not checking if the user had put > > ]]>]]> > I don't know who 'they' are, but the NETCONF protocol is designed a little better than that, and implementations can take advantage. When a session starts, it must go through a state machine that begins with the exchange. The agent will not accept anything but and it doesn't go well, the connection will be dropped right away. Before the , everything is handled by the 'master' SSH agent (openssh), which would not do anything except barf if it got an embedded in the username. Only the 'netconf' subsystem has access to the config databases. Avoiding the netconf subsystem with raw SSH will not help. After the session is established, each EOM seen at the SSH channel layer input stream will cause a message to be sent to the dispatcher, which will go through all the security checks that are supported by the agent. I do not see how the EOM marker can cause an agent to invoke an RPC as if it were a different one. It can certainly disrupt the session, but that's just garbage-in, garbage-out. > as their user name. The only choice from a security perspective is to > drop the connection when the first message (the rpc) > fails to be fully parsed. > > Back then, we took the word of the xml-directorate that ]]>]]> couldn't > exist in a legal XML document. Turns out that may be suspect even for > legal documents and worse it doesn't matter if you can't control the > legality of what's coming in anyway. SSH doesn't do framing and trying > to force in a framing mechanism into the data-stream was the likely > mistake. > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 10 14:07:41 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2D15C3A69CF; Wed, 10 Dec 2008 14:07:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CCE6A28C1D4 for ; Wed, 10 Dec 2008 14:07:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.257 X-Spam-Level: X-Spam-Status: No, score=-2.257 tagged_above=-999 required=5 tests=[AWL=-0.008, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wLmcCMnqSldk for ; Wed, 10 Dec 2008 14:07:38 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 853A828C1DA for ; Wed, 10 Dec 2008 14:07:38 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id 58279C00D9; Wed, 10 Dec 2008 23:07:32 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id TBzJvJESHTla; Wed, 10 Dec 2008 23:07:26 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id A0E0AC006A; Wed, 10 Dec 2008 23:07:26 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 9A5FE8AC7E4; Wed, 10 Dec 2008 23:07:25 +0100 (CET) Date: Wed, 10 Dec 2008 23:07:25 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081210220725.GA27498@elstar.local> Mail-Followup-To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <493FFB46.10103@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Wed, Dec 10, 2008 at 09:24:22AM -0800, Andy Bierman wrote: > After the session is established, each EOM seen at the SSH channel > layer input stream will cause a message to be sent to the dispatcher, > which will go through all the security checks that are > supported by the agent. I do not see how the EOM marker can cause > an agent to invoke an RPC as if it were a different one. We seem to agree that the EOM marker may be used to ship an "unwanted" RPC call through a naive client imFrom netconf-bounces@ietf.org Wed Dec 10 14:07:41 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2D15C3A69CF; Wed, 10 Dec 2008 14:07:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CCE6A28C1D4 for ; Wed, 10 Dec 2008 14:07:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.257 X-Spam-Level: X-Spam-Status: No, score=-2.257 tagged_above=-999 required=5 tests=[AWL=-0.008, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wLmcCMnqSldk for ; Wed, 10 Dec 2008 14:07:38 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 853A828C1DA for ; Wed, 10 Dec 2008 14:07:38 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id 58279C00D9; Wed, 10 Dec 2008 23:07:32 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id TBzJvJESHTla; Wed, 10 Dec 2008 23:07:26 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id A0E0AC006A; Wed, 10 Dec 2008 23:07:26 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 9A5FE8AC7E4; Wed, 10 Dec 2008 23:07:25 +0100 (CET) Date: Wed, 10 Dec 2008 23:07:25 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081210220725.GA27498@elstar.local> Mail-Followup-To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <493FFB46.10103@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Wed, Dec 10, 2008 at 09:24:22AM -0800, Andy Bierman wrote: > After the session is established, each EOM seen at the SSH channel > layer input stream will cause a message to be sent to the dispatcher, > which will go through all the security checks that are > supported by the agent. I do not see how the EOM marker can cause > an agent to invoke an RPC as if it were a different one. We seem to agree that the EOM marker may be used to ship an "unwanted" RPC call through a naive cliplementation. If this is paired with a loose access control configuration where the server trusts a certain client, the problem is real. You seem to take the position that (a) there should not be access control rules that allow more access than absolutely necessary and (b) there should not be clients that pass user input unfiltered to a NETCONF server. While I agree with (a) and (b) in theory, there happens to be evidence that in real world installations often violate (a) and (b). [And I like to add that there is no common way to do (a) yet - so it is unclear how strict access control actually can be.] I believe the usefulness of the EOM marker needs to be revisited now that we have some implementation experience. If the WG after having implementation experience reaches the some conclusion that the benefits are worth to keep the EOM marker, then I think there needs to be security considerations text discussing the implications of having clients not controlling EOM markers contained in the messages they generate and it might spell out implementation guidelines to protect against misuse via creative EOM markers. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ent implementation. If this is paired with a loose access control configuration where the server trusts a certain client, the problem is real. You seem to take the position that (a) there should not be access control rules that allow more access than absolutely necessary and (b) there should not be clients that pass user input unfiltered to a NETCONF server. While I agree with (a) and (b) in theory, there happens to be evidence that in real world installations often violate (a) and (b). [And I like to add that there is no common way to do (a) yet - so it is unclear how strict access control actually can be.] I believe the usefulness of the EOM marker needs to be revisited now that we have some implementation experience. If the WG after having implementation experience reaches the some conclusion that the benefits are worth to keep the EOM marker, then I think there needs to be security considerations text discussing the implications of having clients not controlling EOM markers contained in the messages they generate and it might spell out implementation guidelines to protect against misuse via creative EOM markers. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 10 15:00:00 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E508728C1F2; Wed, 10 Dec 2008 15:00:00 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8D99F28C1F2 for ; Wed, 10 Dec 2008 15:00:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.38 X-Spam-Level: X-Spam-Status: No, score=-2.38 tagged_above=-999 required=5 tests=[AWL=0.219, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9M5VEH3493TB for ; Wed, 10 Dec 2008 14:59:59 -0800 (PST) Received: from smtp113.sbc.mail.mud.yahoo.com (smtp113.sbc.mail.mud.yahoo.com [68.142.198.212]) by core3.amsl.com (Postfix) with SMTP id 9F54E28C1E4 for ; Wed, 10 Dec 2008 14:59:59 -0800 (PST) Received: (qmail 42621 invoked from network); 10 Dec 2008 22:59:53 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.68.196 with plain) by smtp113.sbc.mail.mud.yahoo.com with SMTP; 10 Dec 2008 22:59:51 -0000 X-YMail-OSG: 2FLGUc0VM1mF9P9fhh168Zr0SKjnhDayleFFgw6JFfZT6fwdbS3tOb6yZ.RBfF..WLk3Hm2EmAnZnHwVnH13qCECX_2uL23hAlx3wXkDBpkOB.PfT5LvxUPx.MIuQ2qfiqc- X-Yahoo-Newman-Property: ymail-3 Message-ID: <494049E5.8000009@netconfcentral.com> Date: Wed, 10 Dec 2008 14:59:49 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <20081210220725.GA27498@elstar.local> In-Reply-To: <20081210220725.GA27498@elstar.local> Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Wed, Dec 10, 2008 at 09:24:22AM -0800, Andy Bierman wrote: > >> After the session is established, each EOM seen at the SSH channel >> layer input stream will cause a message to be sent to the dispatcher, >> which will go through all the security checks that are >> supported by the agent. I do not see how the EOM marker can cause >> an agent to invoke an RPC as if it were a different one. > > We seem to agree that the EOM marker may be used to ship an "unwanted" > RPC call through a naive client implementation. If this is paired with > a loose access control configuration where the server trusts a certain > client, the problem is real. > > You seem to take the position that (a) there should not be access > control rules that allow more access than absolutely necessary and (b) > there should not be clients that pass user input unfiltered to a > NETCONF server. While I agree with (a) and (b) in theory, there > happens to be evidence that in real world installations often violate > (a) and (b). [And I like to add that there is no common way to do (a) > yet - so it is unclear how strict access control actually can be.] > > I believe the usefulness of the EOM marker needs to be revisited now > that we have some implementation experience. If the WG after having > implementation experience reaches the some conclusion that the > benefits are worth to keep the EOM marker, then I think there needs to > be security considerations text discussing the implications of having > clients not controlling EOM markers contained in the messages they > generate and it might spell out implementation guidelines to protect > against misuse via creative EOM markers. > I think all aspects of NETCONF 1.0 interoperability and security should be open to discussion for NETCONF 1.1. I pushed for an access control model several times but the NETCONF community is happy with proprietary ACMs for now, so other work is being done instead. I guess it would be prudent for an agent to drop the session if it gets any bad XML at all. Not very Postel-like though. It should be configurable on the agent (operation-failed or drop-session). Why doesn't NETCONF have standard configurable security, like SNMP? I thought SNMP was the 'read-only' protocol. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 10 15:00:00 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E508728C1F2; Wed, 10 Dec 2008 15:00:00 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8D99F28C1F2 for ; Wed, 10 Dec 2008 15:00:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.38 X-Spam-Level: X-Spam-Status: No, score=-2.38 tagged_above=-999 required=5 tests=[AWL=0.219, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9M5VEH3493TB for ; Wed, 10 Dec 2008 14:59:59 -0800 (PST) Received: from smtp113.sbc.mail.mud.yahoo.com (smtp113.sbc.mail.mud.yahoo.com [68.142.198.212]) by core3.amsl.com (Postfix) with SMTP id 9F54E28C1E4 for ; Wed, 10 Dec 2008 14:59:59 -0800 (PST) Received: (qmail 42621 invoked from network); 10 Dec 2008 22:59:53 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.68.196 with plain) by smtp113.sbc.mail.mud.yahoo.com with SMTP; 10 Dec 2008 22:59:51 -0000 X-YMail-OSG: 2FLGUc0VM1mF9P9fhh168Zr0SKjnhDayleFFgw6JFfZT6fwdbS3tOb6yZ.RBfF..WLk3Hm2EmAnZnHwVnH13qCECX_2uL23hAlx3wXkDBpkOB.PfT5LvxUPx.MIuQ2qfiqc- X-Yahoo-Newman-Property: ymail-3 Message-ID: <494049E5.8000009@netconfcentral.com> Date: Wed, 10 Dec 2008 14:59:49 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <20081210220725.GA27498@elstar.local> In-Reply-To: <20081210220725.GA27498@elstar.local> Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Wed, Dec 10, 2008 at 09:24:22AM -0800, Andy Bierman wrote: > >> After the session is established, each EOM seen at the SSH channel >> layer input stream will cause a message to be sent to the dispatcher, >> which will go through all the security checks that are >> supported by the agent. I do not see how the EOM marker can cause >> an agent to invoke an RPC as if it were a different one. > > We seem to agree that the EOM marker may be used to ship an "unwanted" > RPC call through a naive client implementation. If this is paired with > a loose access control configuration where the server trusts a certain > client, the problem is real. > > You seem to take the position that (a) there should not be access > control rules that allow more access than absolutely necessary and (b) > there should not be clients that pass user input unfiltered to a > NETCONF server. While I agree with (a) and (b) in theory, there > happens to be evidence that in real world installations often violate > (a) and (b). [And I like to add that there is no common way to do (a) > yet - so it is unclear how strict access control actually can be.] > > I believe the usefulness of the EOM marker needs to be revisited now > that we have some implementation experience. If the WG after having > implementation experience reaches the some conclusion that the > benefits are worth to keep the EOM marker, then I think there needs to > be security considerations text discussing the implications of having > clients not controlling EOM markers contained in the messages they > generate and it might spell out implementation guidelines to protect > against misuse via creative EOM markers. > I think all aspects of NETCONF 1.0 interoperability and security should be open to discussion for NETCONF 1.1. I pushed for an access control model several times but the NETCONF community is happy with proprietary ACMs for now, so other work is being done instead. I guess it would be prudent for an agent to drop the session if it gets any bad XML at all. Not very Postel-like though. It should be configurable on the agent (operation-failed or drop-session). Why doesn't NETCONF have standard configurable security, like SNMP? I thought SNMP was the 'read-only' protocol. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 10 16:06:10 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B262E3A67C1; Wed, 10 Dec 2008 16:06:10 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ABB8B3A67C1 for ; Wed, 10 Dec 2008 16:06:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.624 X-Spam-Level: X-Spam-Status: No, score=-1.624 tagged_above=-999 required=5 tests=[AWL=0.364, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3m9Up2UROAUJ for ; Wed, 10 Dec 2008 16:06:08 -0800 (PST) Received: from wes.hardakers.net (dcn236-43.dcn.davis.ca.us [168.150.236.43]) by core3.amsl.com (Postfix) with ESMTP id C27E23A676A for ; Wed, 10 Dec 2008 16:06:08 -0800 (PST) Received: from localhost (wlap.dyn.hardakers.net [127.0.0.1]) by wes.hardakers.net (Postfix) with ESMTP id 51C8539A214; Wed, 10 Dec 2008 16:06:03 -0800 (PST) From: Wes Hardaker To: Andy Bierman Organization: Sparta References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> Date: Wed, 10 Dec 2008 16:06:02 -0800 In-Reply-To: <493FFB46.10103@netconfcentral.com> (Andy Bierman's message of "Wed, 10 Dec 2008 09:24:22 -0800") Message-ID: User-Agent: Gnus/5.110011 (No Gnus v0.11) XEmacs/21.4.21 (linux, no MULE) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org >>>>> On Wed, 10 Dec 2008 09:24:22 -0800, Andy Bierman said: AB> I don't know who 'they' are, but the NETCONF protocol is designed AB> a little better than that, and implementations can take advantage. Andy, Sorry for my brevity. I sliced a finger open the other day and didn't want to type a full-length message out because my typing speed is a bit reduced. I thought you'd pick up on what I was trying to get across (Juergen did I'm pretty sure at least) but I failed. netconf is designed to be scripted such that messages need not necessarily be passed through a netconf-aware application. IE, openssh (which you referenced) may be an end-tool through which a script passes data to a netconf server without requiring a specialized program like "snmpset" and similar tools exist for SNMP. I've already seen real code written that does not invoke a "smart" netconf client but constructs hopefully-valid XML on the fly from the "script" to pass to a server. My example didn't include and capability exchanges, you're right. It was a terse example. It also didn't include namespaces and other necessary "stuff". Picture a ISP's operators having quickly hacked together a web-sign-up sheet for offering a new account to their system. They fail to implement decent security checks against the "preferred" user name or email address (sorry, but this is actually more common than you'd like). The take the entered data from the user and later use it to populate a netconf message sent to a netconf agent on the router for adding a new account name that should be granted access through the PPP modem pool. So, if a bad-dude enters a user-name in the web form that includes ]]>]]> followed by a syntactically valid edit-config and the operator's script sends it to the router as part of the update then currently the user's edit-config gets executed. Because the SSH transport uses the ]]>]]> as a valid framing marker and allows the transport to take the first part of the message stream (the invalid update to the users table that gets truncated by the ]]>]]>), toss it aside as invalid and then keep trying to execute further data (the trailing inserted by the bad-dude). Now, I know "the operator gets what he deserves" for writing such a bad script. But as we know, performing all the right "checks" rarely gets done perfectly. Simply put, I don't by the assumption that 100% of all netconf clients are always going to properly check their input for ]]>]]> markers and properly escape them. Maybe they do get what they deserve. Maybe we should require smarter operators. But one of the early goals of netconf was to make things easier so they didn't have to understand as much of the nitty-gritty protocol details like BER and other nasty encoding rules. AB> After the session is established, each EOM seen at the SSH channel AB> layer input stream will cause a message to be sent to the dispatcher, AB> which will go through all the security checks that are AB> supported by the agent. Yep. And malicious users may be able to insert EOM markers in the middle of their form-data to add additional commands to the stream. This is exactly what sql injection attacks do and they work because not everyone carefully checks input like they should. Yes, the operators writing the code get what they deserve for sql injection attacks too. But wouldn't it be better if the operators didn't have to worry about it? Unfortunately, it's too late and I don't know what could be done other than to say if you are parsing a stream and get bad data you should drop the connection rather than discard the message and keep reading from the stream. That's the only path forward that makes the most sense. -- "In the bathtub of history the truth is harder to hold than the soap, and much more difficult to find." -- Terry Pratchett _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Wed Dec 10 16:06:10 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B262E3A67C1; Wed, 10 Dec 2008 16:06:10 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ABB8B3A67C1 for ; Wed, 10 Dec 2008 16:06:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.624 X-Spam-Level: X-Spam-Status: No, score=-1.624 tagged_above=-999 required=5 tests=[AWL=0.364, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3m9Up2UROAUJ for ; Wed, 10 Dec 2008 16:06:08 -0800 (PST) Received: from wes.hardakers.net (dcn236-43.dcn.davis.ca.us [168.150.236.43]) by core3.amsl.com (Postfix) with ESMTP id C27E23A676A for ; Wed, 10 Dec 2008 16:06:08 -0800 (PST) Received: from localhost (wlap.dyn.hardakers.net [127.0.0.1]) by wes.hardakers.net (Postfix) with ESMTP id 51C8539A214; Wed, 10 Dec 2008 16:06:03 -0800 (PST) From: Wes Hardaker To: Andy Bierman Organization: Sparta References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> Date: Wed, 10 Dec 2008 16:06:02 -0800 In-Reply-To: <493FFB46.10103@netconfcentral.com> (Andy Bierman's message of "Wed, 10 Dec 2008 09:24:22 -0800") Message-ID: User-Agent: Gnus/5.110011 (No Gnus v0.11) XEmacs/21.4.21 (linux, no MULE) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org >>>>> On Wed, 10 Dec 2008 09:24:22 -0800, Andy Bierman said: AB> I don't know who 'they' are, but the NETCONF protocol is designed AB> a little better than that, and implementations can take advantage. Andy, Sorry for my brevity. I sliced a finger open the other day and didn't want to type a full-length message out because my typing speed is a bit reduced. I thought you'd pick up on what I was trying to get across (Juergen did I'm pretty sure at least) but I failed. netconf is designed to be scripted such that messages need not necessarily be passed through a netconf-aware application. IE, openssh (which you referenced) may be an end-tool through which a script passes data to a netconf server without requiring a specialized program like "snmpset" and similar tools exist for SNMP. I've already seen real code written that does not invoke a "smart" netconf client but constructs hopefully-valid XML on the fly from the "script" to pass to a server. My example didn't include and capability exchanges, you're right. It was a terse example. It also didn't include namespaces and other necessary "stuff". Picture a ISP's operators having quickly hacked together a web-sign-up sheet for offering a new account to their system. They fail to implement decent security checks against the "preferred" user name or email address (sorry, but this is actually more common than you'd like). The take the entered data from the user and later use it to populate a netconf message sent to a netconf agent on the router for adding a new account name that should be granted access through the PPP modem pool. So, if a bad-dude enters a user-name in the web form that includes ]]>]]> followed by a syntactically valid edit-config and the operator's script sends it to the router as part of the update then currently the user's edit-config gets executed. Because the SSH transport uses the ]]>]]> as a valid framing marker and allows the transport to take the first part of the message stream (the invalid update to the users table that gets truncated by the ]]>]]>), toss it aside as invalid and then keep trying to execute further data (the trailing inserted by the bad-dude). Now, I know "the operator gets what he deserves" for writing such a bad script. But as we know, performing all the right "checks" rarely gets done perfectly. Simply put, I don't by the assumption that 100% of all netconf clients are always going to properly check their input for ]]>]]> markers and properly escape them. Maybe they do get what they deserve. Maybe we should require smarter operators. But one of the early goals of netconf was to make things easier so they didn't have to understand as much of the nitty-gritty protocol details like BER and other nasty encoding rules. AB> After the session is established, each EOM seen at the SSH channel AB> layer input stream will cause a message to be sent to the dispatcher, AB> which will go through all the security checks that are AB> supported by the agent. Yep. And malicious users may be able to insert EOM markers in the middle of their form-data to add additional commands to the stream. This is exactly what sql injection attacks do and they work because not everyone carefully checks input like they should. Yes, the operators writing the code get what they deserve for sql injection attacks too. But wouldn't it be better if the operators didn't have to worry about it? Unfortunately, it's too late and I don't know what could be done other than to say if you are parsing a stream and get bad data you should drop the connection rather than discard the message and keep reading from the stream. That's the only path forward that makes the most sense. -- "In the bathtub of history the truth is harder to hold than the soap, and much more difficult to find." -- Terry Pratchett _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 04:31:44 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AE3583A6A06; Thu, 11 Dec 2008 04:31:44 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E6C663A67B3 for ; Thu, 11 Dec 2008 04:31:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.49 X-Spam-Level: X-Spam-Status: No, score=0.49 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hOkIEN6hf0Xf for ; Thu, 11 Dec 2008 04:31:42 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id C7B283A6A06 for ; Thu, 11 Dec 2008 04:31:41 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mBBCVUhZ017507; Thu, 11 Dec 2008 13:31:31 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 11 Dec 2008 13:31:30 +0100 Message-ID: <49410796.8020905@s3group.com> Date: Thu, 11 Dec 2008 13:29:10 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <49301058.1050609@s3group.com> <20081201.092615.89733536.mbj@tail-f.com> In-Reply-To: <20081201.092615.89733536.mbj@tail-f.com> X-OriginalArrivalTime: 11 Dec 2008 12:31:30.0675 (UTC) FILETIME=[651D7C30:01C95B8C] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Thu, 11 Dec 2008 13:31:32 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> Hi, >> >> Section 3.4 from the RFC 5277 shows in the XSD schema that the >> element MUST appear always once and the element MUST appear at >> least once, because NETCONF server has to define always at least "NETCONF" >> stream. What in your opinion a server should return as a response for >> the following request: >> >> >> >> >> >> >> >> >> >> >> ]]>]]> > > The server should return the streams subtree, either once or twice. > It is a bit unlcear if the "filter output" is supposed to be a proper > set or not. Since it is a subtree filter, it should not return an > error. The section 2.1.1 from RFC 5277 says: "Subscription requests will fail if a filter with invalid syntaxFrom netconf-bounces@ietf.org Thu Dec 11 04:31:44 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AE3583A6A06; Thu, 11 Dec 2008 04:31:44 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E6C663A67B3 for ; Thu, 11 Dec 2008 04:31:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.49 X-Spam-Level: X-Spam-Status: No, score=0.49 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hOkIEN6hf0Xf for ; Thu, 11 Dec 2008 04:31:42 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id C7B283A6A06 for ; Thu, 11 Dec 2008 04:31:41 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mBBCVUhZ017507; Thu, 11 Dec 2008 13:31:31 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 11 Dec 2008 13:31:30 +0100 Message-ID: <49410796.8020905@s3group.com> Date: Thu, 11 Dec 2008 13:29:10 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: Martin Bjorklund References: <49301058.1050609@s3group.com> <20081201.092615.89733536.mbj@tail-f.com> In-Reply-To: <20081201.092615.89733536.mbj@tail-f.com> X-OriginalArrivalTime: 11 Dec 2008 12:31:30.0675 (UTC) FILETIME=[651D7C30:01C95B8C] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Thu, 11 Dec 2008 13:31:32 +0100 (CET) Cc: netconf@ietf.org Subject: Re: [Netconf] filtering notification streams X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Tomasz Mikolajczyk wrote: >> Hi, >> >> Section 3.4 from the RFC 5277 shows in the XSD schema that the >> element MUST appear always once and the element MUST appear at >> least once, because NETCONF server has to define always at least "NETCONF" >> stream. What in your opinion a server should return as a response for >> the following request: >> >> >> >> >> >> >> >> >> >> >> ]]>]]> > > The server should return the streams subtree, either once or twice. > It is a bit unlcear if the "filter output" is supposed to be a proper > set or not. Since it is a subtree filter, it should not return an > error. The section 2.1.1 from RFC 5277 says: "Subscription requests will fail if a filter with invalid is provided or if the name of a non-existent stream is provided." What does it mean invalid syntax? If not such syntax that causes XML parser error, this means that it's possible that a filter may be invalid. Is it coherent with the filtering mechanism in get operation? In the get type operations not matching data are just skipped according to the known filtering rules. The above example with the double element may be treated as the request with an invalid syntax and returning an error in this case is acceptable. >> Another point. The RFC says in the section 3.2.5.1: >> >> "Available event streams for the requesting session are returned in the reply >> containing the and elements, where the >> element is mandatory, and its value is unique within the scope of a NETCONF >> server. An empty reply is returned if there are no available event >> streams, due to user-specified filters on the operation." >> >> My comments to this: >> 1) The "replaySupport" node is also mandatory according to the schema >> 2) Seems that the empty reply doesn't match the schema > > The schema describes the conceptual data store, not the PUDs. > > > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf syntax is provided or if the name of a non-existent stream is provided." What does it mean invalid syntax? If not such syntax that causes XML parser error, this means that it's possible that a filter may be invalid. Is it coherent with the filtering mechanism in get operation? In the get type operations not matching data are just skipped according to the known filtering rules. The above example with the double element may be treated as the request with an invalid syntax and returning an error in this case is acceptable. >> Another point. The RFC says in the section 3.2.5.1: >> >> "Available event streams for the requesting session are returned in the reply >> containing the and elements, where the >> element is mandatory, and its value is unique within the scope of a NETCONF >> server. An empty reply is returned if there are no available event >> streams, due to user-specified filters on the operation." >> >> My comments to this: >> 1) The "replaySupport" node is also mandatory according to the schema >> 2) Seems that the empty reply doesn't match the schema > > The schema describes the conceptual data store, not the PUDs. > > > /martin > Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 07:02:32 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 108B13A6C3E; Thu, 11 Dec 2008 07:02:32 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 184CA3A6782 for ; Thu, 11 Dec 2008 07:02:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.965 X-Spam-Level: X-Spam-Status: No, score=-1.965 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6kXAj6AiB4Ra for ; Thu, 11 Dec 2008 07:02:29 -0800 (PST) Received: from smtp119.sbc.mail.sp1.yahoo.com (smtp119.sbc.mail.sp1.yahoo.com [69.147.64.92]) by core3.amsl.com (Postfix) with SMTP id 3C01F3A6979 for ; Thu, 11 Dec 2008 07:02:29 -0800 (PST) Received: (qmail 48182 invoked from network); 11 Dec 2008 15:02:23 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp119.sbc.mail.sp1.yahoo.com with SMTP; 11 Dec 2008 15:02:21 -0000 X-YMail-OSG: dpVus.kVM1lZw1fLy2S3pGNIknyFtNKbb5hJcEZdmFulVKuhFAaYSbzCN..tZ_BzboLuO3PE5XqKjn7igmFX8__YB7H4xOZABVSkub7KSw_8_z4f5ewNrxu4rCsihsp6kHiVhOUW7irNYWhWfFedEe1B X-Yahoo-Newman-Property: ymail-3 Message-ID: <49412B7B.8070809@netconfcentral.com> Date: Thu, 11 Dec 2008 07:02:19 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Wed, 10 Dec 2008 09:24:22 -0800, Andy Bierman said: > > AB> I don't know who 'they' are, but the NETCONF protocol is designed > AB> a little better than that, and implementations can take advantage. > > Andy, > > Sorry for my brevity. I sliced a finger open the other day and didn't > want to type a full-length message out because my typing speed is a bit > reduced. I thought you'd pick up on what I was trying to get across > (Juergen did I'm pretty sure at least) but I failed. > So the solution is to drop the session if any bad XML is received? The dumb script inserting user data without checking it cannot 'undo' the already seen by the agent, so truncating it will prevent the 'bad PDU' from being executed. OK, but... Why can't the attacker just figure out exactly where the data is getting inserted and figure out how to close off the XML properly? Then issue the bad PDU, aFrom netconf-bounces@ietf.org Thu Dec 11 07:02:32 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 108B13A6C3E; Thu, 11 Dec 2008 07:02:32 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 184CA3A6782 for ; Thu, 11 Dec 2008 07:02:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.965 X-Spam-Level: X-Spam-Status: No, score=-1.965 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6kXAj6AiB4Ra for ; Thu, 11 Dec 2008 07:02:29 -0800 (PST) Received: from smtp119.sbc.mail.sp1.yahoo.com (smtp119.sbc.mail.sp1.yahoo.com [69.147.64.92]) by core3.amsl.com (Postfix) with SMTP id 3C01F3A6979 for ; Thu, 11 Dec 2008 07:02:29 -0800 (PST) Received: (qmail 48182 invoked from network); 11 Dec 2008 15:02:23 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp119.sbc.mail.sp1.yahoo.com with SMTP; 11 Dec 2008 15:02:21 -0000 X-YMail-OSG: dpVus.kVM1lZw1fLy2S3pGNIknyFtNKbb5hJcEZdmFulVKuhFAaYSbzCN..tZ_BzboLuO3PE5XqKjn7igmFX8__YB7H4xOZABVSkub7KSw_8_z4f5ewNrxu4rCsihsp6kHiVhOUW7irNYWhWfFedEe1B X-Yahoo-Newman-Property: ymail-3 Message-ID: <49412B7B.8070809@netconfcentral.com> Date: Thu, 11 Dec 2008 07:02:19 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Wed, 10 Dec 2008 09:24:22 -0800, Andy Bierman said: > > AB> I don't know who 'they' are, but the NETCONF protocol is designed > AB> a little better than that, and implementations can take advantage. > > Andy, > > Sorry for my brevity. I sliced a finger open the other day and didn't > want to type a full-length message out because my typing speed is a bit > reduced. I thought you'd pick up on what I was trying to get across > (Juergen did I'm pretty sure at least) but I failed. > So the solution is to drop the session if any bad XML is received? The dumb script inserting user data without checking it cannot 'undo' the already seen by the agent, so truncating it will prevent the 'bad PDU' from being executed. OK, but... Why can't the attacker just figure out exactly where the data is getting inserted and figure out how to close off the XML properly? Then issue the bad PDU, and whend when the truncated end of the real PDU is detected, it is already too late (or insert a after the to keep the operator a little more in the dark.) It doesn't seem like the SSH EOM marker is relevant to this attack. It seems like only a real (properly configured) ACM is going to help. > netconf is designed to be scripted such that messages need not > necessarily be passed through a netconf-aware application. IE, openssh > (which you referenced) may be an end-tool through which a script passes > data to a netconf server without requiring a specialized program like > "snmpset" and similar tools exist for SNMP. I've already seen real code > written that does not invoke a "smart" netconf client but constructs > hopefully-valid XML on the fly from the "script" to pass to a server. > > My example didn't include and capability exchanges, you're > right. It was a terse example. It also didn't include namespaces and > other necessary "stuff". > > Picture a ISP's operators having quickly hacked together a web-sign-up > sheet for offering a new account to their system. They fail to > implement decent security checks against the "preferred" user name or > email address (sorry, but this is actually more common than you'd like). > The take the entered data from the user and later use it to populate a > netconf message sent to a netconf agent on the router for adding a new > account name that should be granted access through the PPP modem pool. > > So, if a bad-dude enters a user-name in the web form that includes > ]]>]]> followed by a syntactically valid edit-config and the operator's > script sends it to the router as part of the update then currently the > user's edit-config gets executed. Because the SSH transport uses the > ]]>]]> as a valid framing marker and allows the transport to take the > first part of the message stream (the invalid update to the users table > that gets truncated by the ]]>]]>), toss it aside as invalid and then > keep trying to execute further data (the trailing inserted > by the bad-dude). > > Now, I know "the operator gets what he deserves" for writing such a bad > script. But as we know, performing all the right "checks" rarely gets > done perfectly. Simply put, I don't by the assumption that 100% of all > netconf clients are always going to properly check their input for > ]]>]]> markers and properly escape them. Maybe they do get what they > deserve. Maybe we should require smarter operators. But one of the > early goals of netconf was to make things easier so they didn't have to > understand as much of the nitty-gritty protocol details like BER and > other nasty encoding rules. > > AB> After the session is established, each EOM seen at the SSH channel > AB> layer input stream will cause a message to be sent to the dispatcher, > AB> which will go through all the security checks that are > AB> supported by the agent. > > Yep. And malicious users may be able to insert EOM markers in the > middle of their form-data to add additional commands to the stream. > This is exactly what sql injection attacks do and they work because not > everyone carefully checks input like they should. Yes, the operators > writing the code get what they deserve for sql injection attacks too. > But wouldn't it be better if the operators didn't have to worry about > it? > > Unfortunately, it's too late and I don't know what could be done other > than to say if you are parsing a stream and get bad data you should drop > the connection rather than discard the message and keep reading from > the stream. That's the only path forward that makes the most sense. Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf n the truncated end of the real PDU is detected, it is already too late (or insert a after the to keep the operator a little more in the dark.) It doesn't seem like the SSH EOM marker is relevant to this attack. It seems like only a real (properly configured) ACM is going to help. > netconf is designed to be scripted such that messages need not > necessarily be passed through a netconf-aware application. IE, openssh > (which you referenced) may be an end-tool through which a script passes > data to a netconf server without requiring a specialized program like > "snmpset" and similar tools exist for SNMP. I've already seen real code > written that does not invoke a "smart" netconf client but constructs > hopefully-valid XML on the fly from the "script" to pass to a server. > > My example didn't include and capability exchanges, you're > right. It was a terse example. It also didn't include namespaces and > other necessary "stuff". > > Picture a ISP's operators having quickly hacked together a web-sign-up > sheet for offering a new account to their system. They fail to > implement decent security checks against the "preferred" user name or > email address (sorry, but this is actually more common than you'd like). > The take the entered data from the user and later use it to populate a > netconf message sent to a netconf agent on the router for adding a new > account name that should be granted access through the PPP modem pool. > > So, if a bad-dude enters a user-name in the web form that includes > ]]>]]> followed by a syntactically valid edit-config and the operator's > script sends it to the router as part of the update then currently the > user's edit-config gets executed. Because the SSH transport uses the > ]]>]]> as a valid framing marker and allows the transport to take the > first part of the message stream (the invalid update to the users table > that gets truncated by the ]]>]]>), toss it aside as invalid and then > keep trying to execute further data (the trailing inserted > by the bad-dude). > > Now, I know "the operator gets what he deserves" for writing such a bad > script. But as we know, performing all the right "checks" rarely gets > done perfectly. Simply put, I don't by the assumption that 100% of all > netconf clients are always going to properly check their input for > ]]>]]> markers and properly escape them. Maybe they do get what they > deserve. Maybe we should require smarter operators. But one of the > early goals of netconf was to make things easier so they didn't have to > understand as much of the nitty-gritty protocol details like BER and > other nasty encoding rules. > > AB> After the session is established, each EOM seen at the SSH channel > AB> layer input stream will cause a message to be sent to the dispatcher, > AB> which will go through all the security checks that are > AB> supported by the agent. > > Yep. And malicious users may be able to insert EOM markers in the > middle of their form-data to add additional commands to the stream. > This is exactly what sql injection attacks do and they work because not > everyone carefully checks input like they should. Yes, the operators > writing the code get what they deserve for sql injection attacks too. > But wouldn't it be better if the operators didn't have to worry about > it? > > Unfortunately, it's too late and I don't know what could be done other > than to say if you are parsing a stream and get bad data you should drop > the connection rather than discard the message and keep reading from > the stream. That's the only path forward that makes the most sense. Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 08:29:28 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5120B3A6C53; Thu, 11 Dec 2008 08:29:28 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 05C363A6931 for ; Thu, 11 Dec 2008 08:29:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.017 X-Spam-Level: X-Spam-Status: No, score=-3.017 tagged_above=-999 required=5 tests=[AWL=-0.419, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8aZzppB2yPTU for ; Thu, 11 Dec 2008 08:29:24 -0800 (PST) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id F3BDA3A6C53 for ; Thu, 11 Dec 2008 08:29:22 -0800 (PST) Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id mBBGTC1P029185 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 11 Dec 2008 17:29:12 +0100 Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id mBBGTCSG029221; Thu, 11 Dec 2008 17:29:12 +0100 Received: from DEMUEXC005.nsn-intra.net ([10.150.128.17]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 11 Dec 2008 17:29:12 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C95BAD.982040D1" Date: Thu, 11 Dec 2008 17:29:09 +0100 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Request for charter change Thread-Index: AclbdHZf/bbsfx3rRWKprcOcWgquqgAAfHCQ From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Romascanu, Dan (Dan)" , , X-OriginalArrivalTime: 11 Dec 2008 16:29:12.0613 (UTC) FILETIME=[99E48550:01C95BAD] Subject: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C95BAD.982040D1 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Dear ADs (and WG), based on the consensus after IETF 73 we prepared an update=20 for the NETCONF WG charter.=20 Dan, Ron: Could you please approve that the extended charter=20 text be posted as our current WG charter page and forward it to=20 iesg-secretary if approve <<081211_NETCONF WG Charter text.txt>> d=20 <> ?=20 =20 Thank you. Bert and Mehmet Attached is the new charter and a rfcdiff of old and new charter. And here is the main body of the charter text: Configuration of networks of devices has become a critical requirement for operators in today's highly interoperable networks. Operators from large to small have developed their own mechanisms or used vendor specific mechanisms to transFrom netconf-bounces@ietf.org Thu Dec 11 08:29:28 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5120B3A6C53; Thu, 11 Dec 2008 08:29:28 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 05C363A6931 for ; Thu, 11 Dec 2008 08:29:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.017 X-Spam-Level: X-Spam-Status: No, score=-3.017 tagged_above=-999 required=5 tests=[AWL=-0.419, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8aZzppB2yPTU for ; Thu, 11 Dec 2008 08:29:24 -0800 (PST) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id F3BDA3A6C53 for ; Thu, 11 Dec 2008 08:29:22 -0800 (PST) Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id mBBGTC1P029185 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 11 Dec 2008 17:29:12 +0100 Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id mBBGTCSG029221; Thu, 11 Dec 2008 17:29:12 +0100 Received: from DEMUEXC005.nsn-intra.net ([10.150.128.17]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Thu, 11 Dec 2008 17:29:12 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C95BAD.982040D1" Date: Thu, 11 Dec 2008 17:29:09 +0100 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Request for charter change Thread-Index: AclbdHZf/bbsfx3rRWKprcOcWgquqgAAfHCQ From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Romascanu, Dan (Dan)" , , X-OriginalArrivalTime: 11 Dec 2008 16:29:12.0613 (UTC) FILETIME=[99E48550:01C95BAD] Subject: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C95BAD.982040D1 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Dear ADs (and WG), based on the consensus after IETF 73 we prepared an update=20 for the NETCONF WG charter.=20 Dan, Ron: Could you please approve that the extended charter=20 text be posted as our current WG charter page and forward it to=20 iesg-secretary if approve <<081211_NETCONF WG Charter text.txt>> d=20 <> ?=20 =20 Thank you. Bert and Mehmet Attached is the new charter and a rfcdiff of old and new charter. And here is the main body of the charter text: Configuration of networks of devices has become a critical requirement for operators in today's highly interoperable networks. Operators from large to small have developed their own mechanisms or used vendor specific mechanisms tofer configuration data to and from a device, and for examining device state information which may impact the configuration. Each of these mechanisms may be different in various aspects, such as session establishment, user authentication, configuration data exchange, and error responses. The NETCONF Working Group is chartered to produce a protocol suitable for network configuration, with the following characteristics: - Provides retrieval mechanisms which can differentiate between configuration data and non-configuration data - Is extensible enough so that vendors will provide access to all configuration data on the device using a single protocol - Has a programmatic interface (avoids screen scraping and formatting-related changes between releases) - Uses a textual data representation, that can be easily manipulated using non-specialized text manipulation tools. - Supports integration with existing user authentication methods - Supports integration with existing configuration database systems - Supports network wide configuration transactions (with features such as locking and rollback capability) - Is as transport-independent as possible - Provides support for asynchronous notifications. The NETCONF protocol is using XML for data encoding purposes, because XML is a widely deployed standard which is supported by a large number of applications. The NETCONF protocol should be independent of the data definition language and data models used to describe configuration and state data. However, the authorization model used in the protocol is dependent on the data model. Although these issues must be fully addressed to develop standard data models, only a small part of this work will be initially addressed. This group will specify requirements for standard data models in order to fully support the NETCONF protocol, such as: - identification of principals, such as user names or distinguished names - mechanism to distinguish configuration from non-configuration data - XML namespace conventions - XML usage guidelines The initial work started in 2003 and has already been completed and was restricted to following items: a) NETCONF Protocol Specification, which defines the operational model, protocol operations, transaction model, data model requirements, security requirements, and transport layer requirements. b) NETCONF over SSH Specification: Implementation Mandatory, c) NETCONF over BEEP Specification: Implementation Optional, d) NETCONF over SOAP Specification: Implementation Optional. These documents define how the NETCONF protocol is used with each transport protocol selected by the working group, and how it meets the security and transport layer requirements of the NETCONF Protocol Specification. e) NETCONF Notification Specification, which defines mechanisms that provide an asynchronous message notification delivery service for the NETCONF protocol. NETCONF Notification is an optional capability built on top of the base NETCONF definition and provides the capabilities and operations necessary to support this service. The NETCONF notification specification has been finished now as well. In the current phase of the incremental development of NETCONF the workgroup will focus on following items: 1. Fine-grain locking: The base NETCONF protocol only provides a lock for the entire configuration datastore, which is not deemed to meet important operational and security requirements. The NETCONF working group will produce a standards-track RFC specifying a mechanism for fine-grain locking of the NETCONF configuration datastore. 2. NETCONF monitoring: It is considered best practice for IETF working groups to include management of their protocols within the scope of the solution they are providing. The NETCONF working group will produce a standards-track RFC with mechanisms allowing NETCONF itself to be used to monitor some aspects of NETCONF operation. 3. Schema advertisement: Currently the NETCONF protocol is able to advertise wh transfer configuration data to and from a device, and for examining device state information which may impact the configuration. Each of these mechanisms may be different in various aspects, such as session establishment, user authentication, configuration data exchange, and error responses. The NETCONF Working Group is chartered to produce a protocol suitable for network configuration, with the following characteristics: - Provides retrieval mechanisms which can differentiate between configuration data and non-configuration data - Is extensible enough so that vendors will provide access to all configuration data on the device using a single protocol - Has a programmatic interface (avoids screen scraping and formatting-related changes between releases) - Uses a textual data representation, that can be easily manipulated using non-specialized text manipulation tools. - Supports integration with existing user authentication methods - Supports integration with existing configuration database systems - Supports network wide configuration transactions (with features such as locking and rollback capability) - Is as transport-independent as possible - Provides support for asynchronous notifications. The NETCONF protocol is using XML for data encoding purposes, because XML is a widely deployed standard which is supported by a large number of applications. The NETCONF protocol should be independent of the data definition language and data models used to describe configuration and state data. However, the authorization model used in the protocol is dependent on the data model. Although these issues must be fully addressed to develop standard data models, only a small part of this work will be initially addressed. This group will specify requirements for standard data models in order to fully support the NETCONF protocol, such as: - identification of principals, such as user names or distinguished names - mechanism to distinguish configuration from non-configuration data - XML namespace conventions - XML usage guidelines The initial work started in 2003 and has already been completed and was restricted to following items: a) NETCONF Protocol Specification, which defines the operational model, protocol operations, transaction model, data model requirements, security requirements, and transport layer requirements. b) NETCONF over SSH Specification: Implementation Mandatory, c) NETCONF over BEEP Specification: Implementation Optional, d) NETCONF over SOAP Specification: Implementation Optional. These documents define how the NETCONF protocol is used with each transport protocol selected by the working group, and how it meets the security and transport layer requirements of the NETCONF Protocol Specification. e) NETCONF Notification Specification, which defines mechanisms that provide an asynchronous message notification delivery service for the NETCONF protocol. NETCONF Notification is an optional capability built on top of the base NETCONF definition and provides the capabilities and operations necessary to support this service. The NETCONF notification specification has been finished now as well. In the current phase of the incremental development of NETCONF the workgroup will focus on following items: 1. Fine-grain locking: The base NETCONF protocol only provides a lock for the entire configuration datastore, which is not deemed to meet important operational and security requirements. The NETCONF working group will produce a standards-track RFC specifying a mechanism for fine-grain locking of the NETCONF configuration datastore. 2. NETCONF monitoring: It is considered best practice for IETF working groups to include management of their protocols within the scope of the solution they are providing. The NETCONF working group will produce a standards-track RFC with mechanisms allowing NETCONF itself to be used to monitor some aspects of NETCONF operation. 3. Schema advertisement: Currently the NETCONF protocol is able to advertich protocol features are supported on a particular netconf-capable device. However, there is currently no way to discover which XML Schema are supported on the device. The NETCONF working group will produce a standards-track RFC with mechanisms making this discovery possible (this item may be merged with "NETCONF monitoring" into a single document). Note: The schema-advertisement material has been merged into the NETCONF monitoring document based on WG consensus. 4. NETCONF over TLS: Based on implementation experience there is a need for a standards track document to define NETCONF over TLS as an optional transport for the NETCONF protocol. 5. NETCONF default handling: NETCONF today does not define whether default values should be returned by the server in replies to requests for reading configuration and state data. Different clients have different needs to receive or not to receive default data. The NETCONF working group will produce a standards-track RFC defining a mechanism that allows NETCONF clients to control whether default data is returned by the netconf server. 6. NETCONF implementations have shown that the specification in RFC4741 is not 100% clear and has lead to different interpretations and implementations.=20 Also some errors have been uncovered. So the WG will do an rfc4741bis with following constraints: - bug fixes are to be done - clarifications can be done - no extensions (i.e. we are not doing a NETCONF V2) - The work can be started based on the discussion in IETF #73 (see http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). Note: A technical errata has been posted on rfc4742. If the work on rfc4741bis uncovers any additional fixes/clarifications that need to be made to rfc4742, the WG may consider to also do a rfc4742bis as part of this work-item. The following items have been identified as important but are currently not considered in scope for re-chartering and may be candidates for work when there is community consensus to take them on: - NETCONF Notification content - Access Control requirements - NETCONF access to SMI-based MIB data Goals and Milestones: Done Working Group formed Done Submit initial Netconf Protocol draft Done Submit initial Netconf over (transport-TBD) draft Done Begin Working Group Last Call for the Netconf Protocol draft Done Begin Working Group Last Call for the Netconf over (transport-TBD) draft Done Submit final version of the Netconf Protocol draft to the IESG Done Submit final version of the Netconf over SOAP draft to the IESG Done Submit final version of the Netconf over BEEP draft to the IESG Done Submit final version of the Netconf over SSH draft to the IESG Done Update charter Done Submit first version of NETCONF Notifications document Done Begin WGLC of NETCONF Notifications document Done Submit final version of NETCONF Notifications document to IESG for consideration as Proposed Standard Done -00 draft for fine Grain Locking Done -00 draft for NETCONF over TLS Done -00 draft for NETCONF Monitoring Done -00 draft for Schema Advertisement Done Early Review of client authentication approach (for NETCONF over TLS) with the security community at IETF 71 N.A. WG Last Call on Schema Advertisement after IETF72 Schema Advertisement has been merged into Monitoring Done WG Last Call on NETCONF over TLS after IETF72 Done Netconf over TLS to IESG for consideration as Proposed Standards Dec 2008 WG Last Call on Fine Grain Locking after IETF73 Dec 2008 Send Partial Locking to IESG for consideration as Proposed Standards Jan 2009 Initial WG draft for with-defaults capability Feb 2009 Initial WG draft for rfc4741bis Mar 2009 WG Last Call on NETCONF Monitoring after IETF73 Apr 2009 WG Last Call on rfc4741bis Apr 2009 WG Last Call on with-defaults Jun 2009 rfc4741bis to IESG for considerations as Proposed Standard Jun 2009 with-defaults capability to IESG for coise which protocol features are supported on a particular netconf-capable device. However, there is currently no way to discover which XML Schema are supported on the device. The NETCONF working group will produce a standards-track RFC with mechanisms making this discovery possible (this item may be merged with "NETCONF monitoring" into a single document). Note: The schema-advertisement material has been merged into the NETCONF monitoring document based on WG consensus. 4. NETCONF over TLS: Based on implementation experience there is a need for a standards track document to define NETCONF over TLS as an optional transport for the NETCONF protocol. 5. NETCONF default handling: NETCONF today does not define whether default values should be returned by the server in replies to requests for reading configuration and state data. Different clients have different needs to receive or not to receive default data. The NETCONF working group will produce a standards-track RFC defining a mechanism that allows NETCONF clients to control whether default data is returned by the netconf server. 6. NETCONF implementations have shown that the specification in RFC4741 is not 100% clear and has lead to different interpretations and implementations.=20 Also some errors have been uncovered. So the WG will do an rfc4741bis with following constraints: - bug fixes are to be done - clarifications can be done - no extensions (i.e. we are not doing a NETCONF V2) - The work can be started based on the discussion in IETF #73 (see http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). Note: A technical errata has been posted on rfc4742. If the work on rfc4741bis uncovers any additional fixes/clarifications that need to be made to rfc4742, the WG may consider to also do a rfc4742bis as part of this work-item. The following items have been identified as important but are currently not considered in scope for re-chartering and may be candidates for work when there is community consensus to take them on: - NETCONF Notification content - Access Control requirements - NETCONF access to SMI-based MIB data Goals and Milestones: Done Working Group formed Done Submit initial Netconf Protocol draft Done Submit initial Netconf over (transport-TBD) draft Done Begin Working Group Last Call for the Netconf Protocol draft Done Begin Working Group Last Call for the Netconf over (transport-TBD) draft Done Submit final version of the Netconf Protocol draft to the IESG Done Submit final version of the Netconf over SOAP draft to the IESG Done Submit final version of the Netconf over BEEP draft to the IESG Done Submit final version of the Netconf over SSH draft to the IESG Done Update charter Done Submit first version of NETCONF Notifications document Done Begin WGLC of NETCONF Notifications document Done Submit final version of NETCONF Notifications document to IESG for consideration as Proposed Standard Done -00 draft for fine Grain Locking Done -00 draft for NETCONF over TLS Done -00 draft for NETCONF Monitoring Done -00 draft for Schema Advertisement Done Early Review of client authentication approach (for NETCONF over TLS) with the security community at IETF 71 N.A. WG Last Call on Schema Advertisement after IETF72 Schema Advertisement has been merged into Monitoring Done WG Last Call on NETCONF over TLS after IETF72 Done Netconf over TLS to IESG for consideration as Proposed Standards Dec 2008 WG Last Call on Fine Grain Locking after IETF73 Dec 2008 Send Partial Locking to IESG for consideration as Proposed Standards Jan 2009 Initial WG draft for with-defaults capability Feb 2009 Initial WG draft for rfc4741bis Mar 2009 WG Last Call on NETCONF Monitoring after IETF73 Apr 2009 WG Last Call on rfc4741bis Apr 2009 WG Last Call on with-defaults Jun 2009 rfc4741bis to IESG for considerations as Proposed Standard Jun 2009 with-defaults capability to IESG nsiderations as Proposed Standard ------_=_NextPart_001_01C95BAD.982040D1 Content-Type: text/plain; name="081211_NETCONF WG Charter text.txt" Content-Transfer-Encoding: base64 Content-Description: 081211_NETCONF WG Charter text.txt Content-Disposition: attachment; filename="081211_NETCONF WG Charter text.txt" LS0tLSBkcmFmdCBORVRDT05GIGNoYXJ0ZXIsIDExIGRlYyAyMDA4Li4uIGJ5IEJlcnQgJiBNZWht ZXQgLS0tLQ0KDQpOZXR3b3JrIENvbmZpZ3VyYXRpb24gKG5ldGNvbmYpIENoYXJ0ZXINCg0KTmV0 d29yayBDb25maWd1cmF0aW9uIChuZXRjb25mKQ0KDQpJbiBhZGRpdGlvbiB0byB0aGlzIG9mZmlj aWFsIGNoYXJ0ZXIgbWFpbnRhaW5lZCBieSB0aGUgSUVURiBTZWNyZXRhcmlhdCwgDQp0aGVyZQ0K aXMgYWRkaXRpb25hbCBpbmZvcm1hdGlvbiBhYm91dCB0aGlzIHdvcmtpbmcgZ3JvdXAgb24gdGhl IFdlYiBhdDoNCg0KICAgICAgIEFkZGl0aW9uYWwgTkVUQ09ORiBXZWIgUGFnZQ0KDQpMYXN0IE1v ZGlmaWVkOiAyMDA4LTEyLTExDQpBZGRpdGlvbmFsIGluZm9ybWF0aW9uIGlzIGF2YWlsYWJsZSBh dCB0b29scy5pZXRmLm9yZy93Zy9uZXRjb25mDQoNCkNoYWlyKHMpOg0KQmVydCBXaWpuZW4gPGJl cnRpZXRmQGJ3aWpuZW4ubmV0Pg0KTWVobWV0IEVyc3VlIDxtZWhtZXQuZXJzdWVAbnNuLmNvbT4N Cg0KDQpPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IEFyZWEgRGlyZWN0b3Iocyk6DQpEYW4gUm9t YXNjYW51IDxkcm9tYXNjYUBhdmF5YS5jb20+DQpSb25hbGQgQm9uaWNhIDxyYm9uaWNhQGp1bmlw ZXIubmV0Pg0KDQpPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IEFyZWEgQWR2aXNvcjoNCkRhbiBS b21hc2NhbnUgPGRyb21hc2NhQGF2YXlhLmNvbT4NCg0KVGVjaG5pY2FsIEFkdmlzb3Iocyk6DQpD aGFybGllIEthdWZtYW4gPGNoYXJsaWVrQG1pY3Jvc29mdC5jb20+DQoNCk1haWxpbmcgTGlzdHM6 DQpHZW5lcmFsIERpc2N1c3Npb246IG5ldGNvbmZAb3BzLmlldGYub3JnDQpUbyBTdWJzY3JpYmU6 IG5ldGNvbmYtcmVxdWVzdEBvcHMuaWV0Zi5vcmcNCkluIEJvZHk6IGluIG1zZyBib2R5OiBzdWJz Y3JpYmUNCkFyY2hpdmU6IGh0dHBzOi8vb3BzLmlldGYub3JnL2xpc3RzL25ldGNvbmYNCg0KRGVz Y3JpcHRpb24gb2YgV29ya2luZyBHcm91cDoNCkNoYXJsaWUgS2F1Zm1hbiBpcyBUZWNobmljYWwg QWR2aXNvciBmb3IgU2VjdXJpdHkgTWF0dGVycw0KDQpDb25maWd1cmF0aW9uIG9mIG5ldHdvcmtz IG9mIGRldmljZXMgaGFzIGJlY29tZSBhIGNyaXRpY2FsIHJlcXVpcmVtZW50DQpmb3Igb3BlcmF0 b3JzIGluIHRvZGF5J3MgaGlnaGx5IGludGVyb3BlcmFibGUgbmV0d29ya3MuIE9wZXJhdG9ycyBm cm9tDQpsYXJnZSB0byBzbWFsbCBoYXZlIGRldmVsb3BlZCB0aGVpciBvd24gbWVjaGFuaXNtcyBv ciB1c2VkIHZlbmRvcg0Kc3BlY2lmaWMgbWVjaGFuaXNtcyB0byB0cmFuc2ZlciBjb25maWd1cmF0 aW9uIGRhdGEgdG8gYW5kIGZyb20gYQ0KZGV2aWNlLCBhbmQgZm9yIGV4YW1pbmluZyBkZXZpY2Ug c3RhdGUgaW5mb3JtYXRpb24gd2hpY2ggbWF5IGltcGFjdA0KdGhlIGNvbmZpZ3VyYXRpb24uIEVh Y2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBtYXkgYmUgZGlmZmVyZW50IGluDQp2YXJpb3VzIGFzcGVj dHMsIHN1Y2ggYXMgc2Vzc2lvbiBlc3RhYmxpc2htZW50LCB1c2VyIGF1dGhlbnRpY2F0aW9uLA0K Y29uZmlndXJhdGlvbiBkYXRhIGV4Y2hhbmdlLCBhbmQgZXJyb3IgcmVzcG9uc2VzLg0KDQpUaGUg TkVUQ09ORiBXb3JraW5nIEdyb3VwIGlzIGNoYXJ0ZXJlZCB0byBwcm9kdWNlIGEgcHJvdG9jb2wg c3VpdGFibGUNCmZvciBuZXR3b3JrIGNvbmZpZ3VyYXRpb24sIHdpdGggdGhlIGZvbGxvd2luZyBj aGFyYWN0ZXJpc3RpY3M6DQoNCi0gUHJvdmlkZXMgcmV0cmlldmFsIG1lY2hhbmlzbXMgd2hpY2gg Y2FuIGRpZmZlcmVudGlhdGUgYmV0d2Vlbg0KICBjb25maWd1cmF0aW9uIGRhdGEgYW5kIG5vbi1j b25maWd1cmF0aW9uIGRhdGENCi0gSXMgZXh0ZW5zaWJsZSBlbm91Z2ggc28gdGhhdCB2ZW5kb3Jz IHdpbGwgcHJvdmlkZSBhY2Nlc3MgdG8gYWxsDQogIGNvbmZpZ3VyYXRpb24gZGF0YSBvbiB0aGUg ZGV2aWNlIHVzaW5nIGEgc2luZ2xlIHByb3RvY29sDQotIEhhcyBhIHByb2dyYW1tYXRpYyBpbnRl cmZhY2UgKGF2b2lkcyBzY3JlZW4gc2NyYXBpbmcgYW5kDQogIGZvcm1hdHRpbmctcmVsYXRlZCBj aGFuZ2VzIGJldHdlZW4gcmVsZWFzZXMpDQotIFVzZXMgYSB0ZXh0dWFsIGRhdGEgcmVwcmVzZW50 YXRpb24sIHRoYXQgY2FuIGJlIGVhc2lseSBtYW5pcHVsYXRlZA0KICB1c2luZyBub24tc3BlY2lh bGl6ZWQgdGV4dCBtYW5pcHVsYXRpb24gdG9vbHMuDQotIFN1cHBvcnRzIGludGVncmF0aW9uIHdp dGggZXhpc3RpbmcgdXNlciBhdXRoZW50aWNhdGlvbiBtZXRob2RzDQotIFN1cHBvcnRzIGludGVn cmF0aW9uIHdpdGggZXhpc3RpbmcgY29uZmlndXJhdGlvbiBkYXRhYmFzZSBzeXN0ZW1zDQotIFN1 cHBvcnRzIG5ldHdvcmsgd2lkZSBjb25maWd1cmF0aW9uIHRyYW5zYWN0aW9ucyAod2l0aCBmZWF0 dXJlcyBzdWNoDQogIGFzIGxvY2tpbmcgYW5kIHJvbGxiYWNrIGNhcGFiaWxpdHkpDQotIElzIGFz IHRyYW5zcG9ydC1pbmRlcGVuZGVudCBhcyBwb3NzaWJsZQ0KLSBQcm92aWRlcyBzdXBwb3J0IGZv ciBhc3luY2hyb25vdXMgbm90aWZpY2F0aW9ucy4NCg0KVGhlIE5FVENPTkYgcHJvdG9jb2wgaXMg dXNpbmcgWE1MIGZvciBkYXRhIGVuY29kaW5nIHB1cnBvc2VzLCBiZWNhdXNlDQpYTUwgaXMgYSB3 aWRlbHkgZGVwbG95ZWQgc3RhbmRhcmQgd2hpY2ggaXMgc3VwcG9ydGVkIGJ5IGEgbGFyZ2UgbnVt YmVyDQpvZiBhcHBsaWNhdGlvbnMuDQoNClRoZSBORVRDT05GIHByb3RvY29sIHNob3VsZCBiZSBp bmRlcGVuZGVudCBvZiB0aGUgZGF0YSBkZWZpbml0aW9uDQpsYW5ndWFnZSBhbmQgZGF0YSBtb2Rl bHMgdXNlfor considerations as Proposed Standard ------_=_NextPart_001_01C95BAD.982040D1 Content-Type: text/plain; name="081211_NETCONF WG Charter text.txt" Content-Transfer-Encoding: base64 Content-Description: 081211_NETCONF WG Charter text.txt Content-Disposition: attachment; filename="081211_NETCONF WG Charter text.txt" LS0tLSBkcmFmdCBORVRDT05GIGNoYXJ0ZXIsIDExIGRlYyAyMDA4Li4uIGJ5IEJlcnQgJiBNZWht ZXQgLS0tLQ0KDQpOZXR3b3JrIENvbmZpZ3VyYXRpb24gKG5ldGNvbmYpIENoYXJ0ZXINCg0KTmV0 d29yayBDb25maWd1cmF0aW9uIChuZXRjb25mKQ0KDQpJbiBhZGRpdGlvbiB0byB0aGlzIG9mZmlj aWFsIGNoYXJ0ZXIgbWFpbnRhaW5lZCBieSB0aGUgSUVURiBTZWNyZXRhcmlhdCwgDQp0aGVyZQ0K aXMgYWRkaXRpb25hbCBpbmZvcm1hdGlvbiBhYm91dCB0aGlzIHdvcmtpbmcgZ3JvdXAgb24gdGhl IFdlYiBhdDoNCg0KICAgICAgIEFkZGl0aW9uYWwgTkVUQ09ORiBXZWIgUGFnZQ0KDQpMYXN0IE1v ZGlmaWVkOiAyMDA4LTEyLTExDQpBZGRpdGlvbmFsIGluZm9ybWF0aW9uIGlzIGF2YWlsYWJsZSBh dCB0b29scy5pZXRmLm9yZy93Zy9uZXRjb25mDQoNCkNoYWlyKHMpOg0KQmVydCBXaWpuZW4gPGJl cnRpZXRmQGJ3aWpuZW4ubmV0Pg0KTWVobWV0IEVyc3VlIDxtZWhtZXQuZXJzdWVAbnNuLmNvbT4N Cg0KDQpPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IEFyZWEgRGlyZWN0b3Iocyk6DQpEYW4gUm9t YXNjYW51IDxkcm9tYXNjYUBhdmF5YS5jb20+DQpSb25hbGQgQm9uaWNhIDxyYm9uaWNhQGp1bmlw ZXIubmV0Pg0KDQpPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IEFyZWEgQWR2aXNvcjoNCkRhbiBS b21hc2NhbnUgPGRyb21hc2NhQGF2YXlhLmNvbT4NCg0KVGVjaG5pY2FsIEFkdmlzb3Iocyk6DQpD aGFybGllIEthdWZtYW4gPGNoYXJsaWVrQG1pY3Jvc29mdC5jb20+DQoNCk1haWxpbmcgTGlzdHM6 DQpHZW5lcmFsIERpc2N1c3Npb246IG5ldGNvbmZAb3BzLmlldGYub3JnDQpUbyBTdWJzY3JpYmU6 IG5ldGNvbmYtcmVxdWVzdEBvcHMuaWV0Zi5vcmcNCkluIEJvZHk6IGluIG1zZyBib2R5OiBzdWJz Y3JpYmUNCkFyY2hpdmU6IGh0dHBzOi8vb3BzLmlldGYub3JnL2xpc3RzL25ldGNvbmYNCg0KRGVz Y3JpcHRpb24gb2YgV29ya2luZyBHcm91cDoNCkNoYXJsaWUgS2F1Zm1hbiBpcyBUZWNobmljYWwg QWR2aXNvciBmb3IgU2VjdXJpdHkgTWF0dGVycw0KDQpDb25maWd1cmF0aW9uIG9mIG5ldHdvcmtz IG9mIGRldmljZXMgaGFzIGJlY29tZSBhIGNyaXRpY2FsIHJlcXVpcmVtZW50DQpmb3Igb3BlcmF0 b3JzIGluIHRvZGF5J3MgaGlnaGx5IGludGVyb3BlcmFibGUgbmV0d29ya3MuIE9wZXJhdG9ycyBm cm9tDQpsYXJnZSB0byBzbWFsbCBoYXZlIGRldmVsb3BlZCB0aGVpciBvd24gbWVjaGFuaXNtcyBv ciB1c2VkIHZlbmRvcg0Kc3BlY2lmaWMgbWVjaGFuaXNtcyB0byB0cmFuc2ZlciBjb25maWd1cmF0 aW9uIGRhdGEgdG8gYW5kIGZyb20gYQ0KZGV2aWNlLCBhbmQgZm9yIGV4YW1pbmluZyBkZXZpY2Ug c3RhdGUgaW5mb3JtYXRpb24gd2hpY2ggbWF5IGltcGFjdA0KdGhlIGNvbmZpZ3VyYXRpb24uIEVh Y2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBtYXkgYmUgZGlmZmVyZW50IGluDQp2YXJpb3VzIGFzcGVj dHMsIHN1Y2ggYXMgc2Vzc2lvbiBlc3RhYmxpc2htZW50LCB1c2VyIGF1dGhlbnRpY2F0aW9uLA0K Y29uZmlndXJhdGlvbiBkYXRhIGV4Y2hhbmdlLCBhbmQgZXJyb3IgcmVzcG9uc2VzLg0KDQpUaGUg TkVUQ09ORiBXb3JraW5nIEdyb3VwIGlzIGNoYXJ0ZXJlZCB0byBwcm9kdWNlIGEgcHJvdG9jb2wg c3VpdGFibGUNCmZvciBuZXR3b3JrIGNvbmZpZ3VyYXRpb24sIHdpdGggdGhlIGZvbGxvd2luZyBj aGFyYWN0ZXJpc3RpY3M6DQoNCi0gUHJvdmlkZXMgcmV0cmlldmFsIG1lY2hhbmlzbXMgd2hpY2gg Y2FuIGRpZmZlcmVudGlhdGUgYmV0d2Vlbg0KICBjb25maWd1cmF0aW9uIGRhdGEgYW5kIG5vbi1j b25maWd1cmF0aW9uIGRhdGENCi0gSXMgZXh0ZW5zaWJsZSBlbm91Z2ggc28gdGhhdCB2ZW5kb3Jz IHdpbGwgcHJvdmlkZSBhY2Nlc3MgdG8gYWxsDQogIGNvbmZpZ3VyYXRpb24gZGF0YSBvbiB0aGUg ZGV2aWNlIHVzaW5nIGEgc2luZ2xlIHByb3RvY29sDQotIEhhcyBhIHByb2dyYW1tYXRpYyBpbnRl cmZhY2UgKGF2b2lkcyBzY3JlZW4gc2NyYXBpbmcgYW5kDQogIGZvcm1hdHRpbmctcmVsYXRlZCBj aGFuZ2VzIGJldHdlZW4gcmVsZWFzZXMpDQotIFVzZXMgYSB0ZXh0dWFsIGRhdGEgcmVwcmVzZW50 YXRpb24sIHRoYXQgY2FuIGJlIGVhc2lseSBtYW5pcHVsYXRlZA0KICB1c2luZyBub24tc3BlY2lh bGl6ZWQgdGV4dCBtYW5pcHVsYXRpb24gdG9vbHMuDQotIFN1cHBvcnRzIGludGVncmF0aW9uIHdp dGggZXhpc3RpbmcgdXNlciBhdXRoZW50aWNhdGlvbiBtZXRob2RzDQotIFN1cHBvcnRzIGludGVn cmF0aW9uIHdpdGggZXhpc3RpbmcgY29uZmlndXJhdGlvbiBkYXRhYmFzZSBzeXN0ZW1zDQotIFN1 cHBvcnRzIG5ldHdvcmsgd2lkZSBjb25maWd1cmF0aW9uIHRyYW5zYWN0aW9ucyAod2l0aCBmZWF0 dXJlcyBzdWNoDQogIGFzIGxvY2tpbmcgYW5kIHJvbGxiYWNrIGNhcGFiaWxpdHkpDQotIElzIGFz IHRyYW5zcG9ydC1pbmRlcGVuZGVudCBhcyBwb3NzaWJsZQ0KLSBQcm92aWRlcyBzdXBwb3J0IGZv ciBhc3luY2hyb25vdXMgbm90aWZpY2F0aW9ucy4NCg0KVGhlIE5FVENPTkYgcHJvdG9jb2wgaXMg dXNpbmcgWE1MIGZvciBkYXRhIGVuY29kaW5nIHB1cnBvc2VzLCBiZWNhdXNlDQpYTUwgaXMgYSB3 aWRlbHkgZGVwbG95ZWQgc3RhbmRhcmQgd2hpY2ggaXMgc3VwcG9ydGVkIGJ5IGEgbGFyZ2UgbnVt YmVyDQpvZiBhcHBsaWNhdGlvbnMuDQoNClRoZSBORVRDT05GIHByb3RvY29sIHNob3VsZCBiZSBp bmRlcGVuZGVudCBvZiB0aGUgZGF0YSBkZWZpbml0aW9uDQpsYW5ndWFnZSBhbmQgZGF0YSBtb2Rl bHZCB0byBkZXNjcmliZSBjb25maWd1cmF0aW9uIGFuZCBzdGF0ZQ0KZGF0YS4NCg0KSG93 ZXZlciwgdGhlIGF1dGhvcml6YXRpb24gbW9kZWwgdXNlZCBpbiB0aGUgcHJvdG9jb2wgaXMgZGVw ZW5kZW50IG9uDQp0aGUgZGF0YSBtb2RlbC4gQWx0aG91Z2ggdGhlc2UgaXNzdWVzIG11c3QgYmUg ZnVsbHkgYWRkcmVzc2VkIHRvDQpkZXZlbG9wIHN0YW5kYXJkIGRhdGEgbW9kZWxzLCBvbmx5IGEg c21hbGwgcGFydCBvZiB0aGlzIHdvcmsgd2lsbCBiZQ0KaW5pdGlhbGx5IGFkZHJlc3NlZC4gVGhp cyBncm91cCB3aWxsIHNwZWNpZnkgcmVxdWlyZW1lbnRzIGZvciBzdGFuZGFyZA0KZGF0YSBtb2Rl bHMgaW4gb3JkZXIgdG8gZnVsbHkgc3VwcG9ydCB0aGUgTkVUQ09ORiBwcm90b2NvbCwgc3VjaCBh czoNCg0KLSBpZGVudGlmaWNhdGlvbiBvZiBwcmluY2lwYWxzLCBzdWNoIGFzIHVzZXIgbmFtZXMg b3IgZGlzdGluZ3Vpc2hlZCBuYW1lcw0KLSBtZWNoYW5pc20gdG8gZGlzdGluZ3Vpc2ggY29uZmln dXJhdGlvbiBmcm9tIG5vbi1jb25maWd1cmF0aW9uIGRhdGENCi0gWE1MIG5hbWVzcGFjZSBjb252 ZW50aW9ucw0KLSBYTUwgdXNhZ2UgZ3VpZGVsaW5lcw0KDQpUaGUgaW5pdGlhbCB3b3JrIHN0YXJ0 ZWQgaW4gMjAwMyBhbmQgaGFzIGFscmVhZHkgYmVlbiBjb21wbGV0ZWQgYW5kIHdhcw0KcmVzdHJp Y3RlZCB0byBmb2xsb3dpbmcgaXRlbXM6DQoNCiAgYSkgTkVUQ09ORiBQcm90b2NvbCBTcGVjaWZp Y2F0aW9uLCB3aGljaCBkZWZpbmVzIHRoZSBvcGVyYXRpb25hbCBtb2RlbCwNCiAgICAgcHJvdG9j b2wgb3BlcmF0aW9ucywgdHJhbnNhY3Rpb24gbW9kZWwsIGRhdGEgbW9kZWwgcmVxdWlyZW1lbnRz LA0KICAgICBzZWN1cml0eSByZXF1aXJlbWVudHMsIGFuZCB0cmFuc3BvcnQgbGF5ZXIgcmVxdWly ZW1lbnRzLg0KICBiKSBORVRDT05GIG92ZXIgU1NIIFNwZWNpZmljYXRpb246IEltcGxlbWVudGF0 aW9uIE1hbmRhdG9yeSwNCiAgYykgTkVUQ09ORiBvdmVyIEJFRVAgU3BlY2lmaWNhdGlvbjogSW1w bGVtZW50YXRpb24gT3B0aW9uYWwsDQogIGQpIE5FVENPTkYgb3ZlciBTT0FQIFNwZWNpZmljYXRp b246IEltcGxlbWVudGF0aW9uIE9wdGlvbmFsLg0KDQogIFRoZXNlIGRvY3VtZW50cyBkZWZpbmUg aG93IHRoZSBORVRDT05GIHByb3RvY29sIGlzIHVzZWQgd2l0aCBlYWNoDQogIHRyYW5zcG9ydCBw cm90b2NvbCBzZWxlY3RlZCBieSB0aGUgd29ya2luZyBncm91cCwgYW5kIGhvdyBpdCBtZWV0cw0K ICB0aGUgc2VjdXJpdHkgYW5kIHRyYW5zcG9ydCBsYXllciByZXF1aXJlbWVudHMgb2YgdGhlIE5F VENPTkYgUHJvdG9jb2wNCiAgU3BlY2lmaWNhdGlvbi4NCg0KICBlKSBORVRDT05GIE5vdGlmaWNh dGlvbiBTcGVjaWZpY2F0aW9uLCB3aGljaCBkZWZpbmVzIG1lY2hhbmlzbXMgdGhhdA0KICAgICBw cm92aWRlIGFuIGFzeW5jaHJvbm91cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2 aWNlIGZvcg0KICAgICB0aGUgTkVUQ09ORiBwcm90b2NvbC4gIE5FVENPTkYgTm90aWZpY2F0aW9u IGlzIGFuIG9wdGlvbmFsDQogICAgIGNhcGFiaWxpdHkgYnVpbHQgb24gdG9wIG9mIHRoZSBiYXNl IE5FVENPTkYgZGVmaW5pdGlvbiBhbmQNCiAgICAgcHJvdmlkZXMgdGhlIGNhcGFiaWxpdGllcyBh bmQgb3BlcmF0aW9ucyBuZWNlc3NhcnkgdG8gc3VwcG9ydA0KICAgICB0aGlzIHNlcnZpY2UuDQoN CiAgVGhlIE5FVENPTkYgbm90aWZpY2F0aW9uIHNwZWNpZmljYXRpb24gaGFzIGJlZW4gZmluaXNo ZWQgbm93IGFzIHdlbGwuDQoNCkluIHRoZSBjdXJyZW50IHBoYXNlIG9mIHRoZSBpbmNyZW1lbnRh bCBkZXZlbG9wbWVudCBvZiBORVRDT05GIHRoZQ0Kd29ya2dyb3VwIHdpbGwgZm9jdXMgb24gZm9s bG93aW5nIGl0ZW1zOg0KDQoxLiBGaW5lLWdyYWluIGxvY2tpbmc6IFRoZSBiYXNlIE5FVENPTkYg cHJvdG9jb2wgb25seSBwcm92aWRlcyBhIGxvY2sNCiAgIGZvciB0aGUgZW50aXJlIGNvbmZpZ3Vy YXRpb24gZGF0YXN0b3JlLCB3aGljaCBpcyBub3QgZGVlbWVkIHRvIG1lZXQNCiAgIGltcG9ydGFu dCBvcGVyYXRpb25hbCBhbmQgc2VjdXJpdHkgcmVxdWlyZW1lbnRzLiBUaGUgTkVUQ09ORiB3b3Jr aW5nDQogICBncm91cCB3aWxsIHByb2R1Y2UgYSBzdGFuZGFyZHMtdHJhY2sgUkZDIHNwZWNpZnlp bmcgYSBtZWNoYW5pc20gZm9yDQogICBmaW5lLWdyYWluIGxvY2tpbmcgb2YgdGhlIE5FVENPTkYg Y29uZmlndXJhdGlvbiBkYXRhc3RvcmUuDQoNCjIuIE5FVENPTkYgbW9uaXRvcmluZzogSXQgaXMg Y29uc2lkZXJlZCBiZXN0IHByYWN0aWNlIGZvciBJRVRGIHdvcmtpbmcNCiAgIGdyb3VwcyB0byBp bmNsdWRlIG1hbmFnZW1lbnQgb2YgdGhlaXIgcHJvdG9jb2xzIHdpdGhpbiB0aGUgc2NvcGUgb2YN CiAgIHRoZSBzb2x1dGlvbiB0aGV5IGFyZSBwcm92aWRpbmcuIFRoZSBORVRDT05GIHdvcmtpbmcg Z3JvdXAgd2lsbA0KICAgcHJvZHVjZSBhIHN0YW5kYXJkcy10cmFjayBSRkMgd2l0aCBtZWNoYW5p c21zIGFsbG93aW5nIE5FVENPTkYNCiAgIGl0c2VsZiB0byBiZSB1c2VkIHRvIG1vbml0b3Igc29t ZSBhc3BlY3RzIG9mIE5FVENPTkYgb3BlcmF0aW9uLg0KDQozLiBTY2hlbWEgYWR2ZXJ0aXNlbWVu dDogQ3VycmVudGx5IHRoZSBORVRDT05GIHByb3RvY29sIGlzIGFibGUgdG8NCiAgIGFkdmVydGlz ZSB3aGljaCBwcm90b2NvbCBmZWF0dXJlcyBhcmUgc3VwcG9ydGVkIG9uIGEgcGFydGljdWxhcg0K ICAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMgY3VycmVudGx5IG5v IHdheSB0byBkaXNjb3Zlcg0KICAgd2hpY2ggWE1MIFNjaGVtYSBhcmUgc3VwcG9ydGVkIG9uIHRo ZSBkZXZpY2UuIFRoZSBORVRDT05GIHdvcmtpbmcNCiAgIGdyb3VwIHdpbGwgcHJvZHVjZSBhIHN0 YW5kYXJkcy10cmFjayBSRkMgd2l0aCBtZWNoYW5pc21zIG1ha2luZyB0aGlzDQogICBkaXNjb3Zl cnkgcG9zc2libGUgKHRoaXMgaXRlbSBtYXkgYmUgbWVyZ2VkIHdpdGggIk5FVENPTkYgbW9uaXRv cmluZyINCiAgIGludG8gYSBMgdXNlZCB0byBkZXNjcmliZSBjb25maWd1cmF0aW9uIGFuZCBzdGF0ZQ0KZGF0YS4NCg0KSG93 ZXZlciwgdGhlIGF1dGhvcml6YXRpb24gbW9kZWwgdXNlZCBpbiB0aGUgcHJvdG9jb2wgaXMgZGVw ZW5kZW50IG9uDQp0aGUgZGF0YSBtb2RlbC4gQWx0aG91Z2ggdGhlc2UgaXNzdWVzIG11c3QgYmUg ZnVsbHkgYWRkcmVzc2VkIHRvDQpkZXZlbG9wIHN0YW5kYXJkIGRhdGEgbW9kZWxzLCBvbmx5IGEg c21hbGwgcGFydCBvZiB0aGlzIHdvcmsgd2lsbCBiZQ0KaW5pdGlhbGx5IGFkZHJlc3NlZC4gVGhp cyBncm91cCB3aWxsIHNwZWNpZnkgcmVxdWlyZW1lbnRzIGZvciBzdGFuZGFyZA0KZGF0YSBtb2Rl bHMgaW4gb3JkZXIgdG8gZnVsbHkgc3VwcG9ydCB0aGUgTkVUQ09ORiBwcm90b2NvbCwgc3VjaCBh czoNCg0KLSBpZGVudGlmaWNhdGlvbiBvZiBwcmluY2lwYWxzLCBzdWNoIGFzIHVzZXIgbmFtZXMg b3IgZGlzdGluZ3Vpc2hlZCBuYW1lcw0KLSBtZWNoYW5pc20gdG8gZGlzdGluZ3Vpc2ggY29uZmln dXJhdGlvbiBmcm9tIG5vbi1jb25maWd1cmF0aW9uIGRhdGENCi0gWE1MIG5hbWVzcGFjZSBjb252 ZW50aW9ucw0KLSBYTUwgdXNhZ2UgZ3VpZGVsaW5lcw0KDQpUaGUgaW5pdGlhbCB3b3JrIHN0YXJ0 ZWQgaW4gMjAwMyBhbmQgaGFzIGFscmVhZHkgYmVlbiBjb21wbGV0ZWQgYW5kIHdhcw0KcmVzdHJp Y3RlZCB0byBmb2xsb3dpbmcgaXRlbXM6DQoNCiAgYSkgTkVUQ09ORiBQcm90b2NvbCBTcGVjaWZp Y2F0aW9uLCB3aGljaCBkZWZpbmVzIHRoZSBvcGVyYXRpb25hbCBtb2RlbCwNCiAgICAgcHJvdG9j b2wgb3BlcmF0aW9ucywgdHJhbnNhY3Rpb24gbW9kZWwsIGRhdGEgbW9kZWwgcmVxdWlyZW1lbnRz LA0KICAgICBzZWN1cml0eSByZXF1aXJlbWVudHMsIGFuZCB0cmFuc3BvcnQgbGF5ZXIgcmVxdWly ZW1lbnRzLg0KICBiKSBORVRDT05GIG92ZXIgU1NIIFNwZWNpZmljYXRpb246IEltcGxlbWVudGF0 aW9uIE1hbmRhdG9yeSwNCiAgYykgTkVUQ09ORiBvdmVyIEJFRVAgU3BlY2lmaWNhdGlvbjogSW1w bGVtZW50YXRpb24gT3B0aW9uYWwsDQogIGQpIE5FVENPTkYgb3ZlciBTT0FQIFNwZWNpZmljYXRp b246IEltcGxlbWVudGF0aW9uIE9wdGlvbmFsLg0KDQogIFRoZXNlIGRvY3VtZW50cyBkZWZpbmUg aG93IHRoZSBORVRDT05GIHByb3RvY29sIGlzIHVzZWQgd2l0aCBlYWNoDQogIHRyYW5zcG9ydCBw cm90b2NvbCBzZWxlY3RlZCBieSB0aGUgd29ya2luZyBncm91cCwgYW5kIGhvdyBpdCBtZWV0cw0K ICB0aGUgc2VjdXJpdHkgYW5kIHRyYW5zcG9ydCBsYXllciByZXF1aXJlbWVudHMgb2YgdGhlIE5F VENPTkYgUHJvdG9jb2wNCiAgU3BlY2lmaWNhdGlvbi4NCg0KICBlKSBORVRDT05GIE5vdGlmaWNh dGlvbiBTcGVjaWZpY2F0aW9uLCB3aGljaCBkZWZpbmVzIG1lY2hhbmlzbXMgdGhhdA0KICAgICBw cm92aWRlIGFuIGFzeW5jaHJvbm91cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2 aWNlIGZvcg0KICAgICB0aGUgTkVUQ09ORiBwcm90b2NvbC4gIE5FVENPTkYgTm90aWZpY2F0aW9u IGlzIGFuIG9wdGlvbmFsDQogICAgIGNhcGFiaWxpdHkgYnVpbHQgb24gdG9wIG9mIHRoZSBiYXNl IE5FVENPTkYgZGVmaW5pdGlvbiBhbmQNCiAgICAgcHJvdmlkZXMgdGhlIGNhcGFiaWxpdGllcyBh bmQgb3BlcmF0aW9ucyBuZWNlc3NhcnkgdG8gc3VwcG9ydA0KICAgICB0aGlzIHNlcnZpY2UuDQoN CiAgVGhlIE5FVENPTkYgbm90aWZpY2F0aW9uIHNwZWNpZmljYXRpb24gaGFzIGJlZW4gZmluaXNo ZWQgbm93IGFzIHdlbGwuDQoNCkluIHRoZSBjdXJyZW50IHBoYXNlIG9mIHRoZSBpbmNyZW1lbnRh bCBkZXZlbG9wbWVudCBvZiBORVRDT05GIHRoZQ0Kd29ya2dyb3VwIHdpbGwgZm9jdXMgb24gZm9s bG93aW5nIGl0ZW1zOg0KDQoxLiBGaW5lLWdyYWluIGxvY2tpbmc6IFRoZSBiYXNlIE5FVENPTkYg cHJvdG9jb2wgb25seSBwcm92aWRlcyBhIGxvY2sNCiAgIGZvciB0aGUgZW50aXJlIGNvbmZpZ3Vy YXRpb24gZGF0YXN0b3JlLCB3aGljaCBpcyBub3QgZGVlbWVkIHRvIG1lZXQNCiAgIGltcG9ydGFu dCBvcGVyYXRpb25hbCBhbmQgc2VjdXJpdHkgcmVxdWlyZW1lbnRzLiBUaGUgTkVUQ09ORiB3b3Jr aW5nDQogICBncm91cCB3aWxsIHByb2R1Y2UgYSBzdGFuZGFyZHMtdHJhY2sgUkZDIHNwZWNpZnlp bmcgYSBtZWNoYW5pc20gZm9yDQogICBmaW5lLWdyYWluIGxvY2tpbmcgb2YgdGhlIE5FVENPTkYg Y29uZmlndXJhdGlvbiBkYXRhc3RvcmUuDQoNCjIuIE5FVENPTkYgbW9uaXRvcmluZzogSXQgaXMg Y29uc2lkZXJlZCBiZXN0IHByYWN0aWNlIGZvciBJRVRGIHdvcmtpbmcNCiAgIGdyb3VwcyB0byBp bmNsdWRlIG1hbmFnZW1lbnQgb2YgdGhlaXIgcHJvdG9jb2xzIHdpdGhpbiB0aGUgc2NvcGUgb2YN CiAgIHRoZSBzb2x1dGlvbiB0aGV5IGFyZSBwcm92aWRpbmcuIFRoZSBORVRDT05GIHdvcmtpbmcg Z3JvdXAgd2lsbA0KICAgcHJvZHVjZSBhIHN0YW5kYXJkcy10cmFjayBSRkMgd2l0aCBtZWNoYW5p c21zIGFsbG93aW5nIE5FVENPTkYNCiAgIGl0c2VsZiB0byBiZSB1c2VkIHRvIG1vbml0b3Igc29t ZSBhc3BlY3RzIG9mIE5FVENPTkYgb3BlcmF0aW9uLg0KDQozLiBTY2hlbWEgYWR2ZXJ0aXNlbWVu dDogQ3VycmVudGx5IHRoZSBORVRDT05GIHByb3RvY29sIGlzIGFibGUgdG8NCiAgIGFkdmVydGlz ZSB3aGljaCBwcm90b2NvbCBmZWF0dXJlcyBhcmUgc3VwcG9ydGVkIG9uIGEgcGFydGljdWxhcg0K ICAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMgY3VycmVudGx5IG5v IHdheSB0byBkaXNjb3Zlcg0KICAgd2hpY2ggWE1MIFNjaGVtYSBhcmUgc3VwcG9ydGVkIG9uIHRo ZSBkZXZpY2UuIFRoZSBORVRDT05GIHdvcmtpbmcNCiAgIGdyb3VwIHdpbGwgcHJvZHVjZSBhIHN0 YW5kYXJkcy10cmFjayBSRkMgd2l0aCBtZWNoYW5pc21zIG1ha2luZyB0aGlzDQogICBkaXNjb3Zl cnkgcG9zc2libGUgKHRoaXMgaXRlbSBtYXkgYmUgbWVyZ2VkIHdpdGggIk5FVENPTkYgbW9uaXRv cmluZyINCiAgIGludzaW5nbGUgZG9jdW1lbnQpLg0KDQogICBOb3RlOiBUaGUgc2NoZW1h LWFkdmVydGlzZW1lbnQgbWF0ZXJpYWwgaGFzIGJlZW4gbWVyZ2VkIGludG8gdGhlDQogICBORVRD T05GIG1vbml0b3JpbmcgZG9jdW1lbnQgYmFzZWQgb24gV0cgY29uc2Vuc3VzLg0KDQo0LiBORVRD T05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmllbmNlIHRoZXJlIGlz IGENCiAgIG5lZWQgZm9yIGEgc3RhbmRhcmRzIHRyYWNrIGRvY3VtZW50IHRvIGRlZmluZSBORVRD T05GIG92ZXIgVExTIGFzIGFuDQogICBvcHRpb25hbCB0cmFuc3BvcnQgZm9yIHRoZSBORVRDT05G IHByb3RvY29sLg0KDQo1LiBORVRDT05GIGRlZmF1bHQgaGFuZGxpbmc6IE5FVENPTkYgdG9kYXkg ZG9lcyBub3QgZGVmaW5lIHdoZXRoZXINCiAgIGRlZmF1bHQgdmFsdWVzIHNob3VsZCBiZSByZXR1 cm5lZCBieSB0aGUgc2VydmVyIGluIHJlcGxpZXMNCiAgIHRvIHJlcXVlc3RzIGZvciByZWFkaW5n IGNvbmZpZ3VyYXRpb24gYW5kIHN0YXRlIGRhdGEuIERpZmZlcmVudA0KICAgY2xpZW50cyBoYXZl IGRpZmZlcmVudCBuZWVkcyB0byByZWNlaXZlIG9yIG5vdCB0byByZWNlaXZlDQogICBkZWZhdWx0 IGRhdGEuIFRoZSBORVRDT05GIHdvcmtpbmcgZ3JvdXAgd2lsbCBwcm9kdWNlIGENCiAgIHN0YW5k YXJkcy10cmFjayBSRkMgZGVmaW5pbmcgYSBtZWNoYW5pc20gdGhhdCBhbGxvd3MNCiAgIE5FVENP TkYgY2xpZW50cyB0byBjb250cm9sIHdoZXRoZXIgZGVmYXVsdCBkYXRhIGlzIHJldHVybmVkDQog ICBieSB0aGUgbmV0Y29uZiBzZXJ2ZXIuDQoNCjYuIE5FVENPTkYgaW1wbGVtZW50YXRpb25zIGhh dmUgc2hvd24gdGhhdCB0aGUgc3BlY2lmaWNhdGlvbiBpbiBSRkM0NzQxDQogICBpcyBub3QgMTAw JSBjbGVhciBhbmQgaGFzIGxlYWQgdG8gZGlmZmVyZW50IGludGVycHJldGF0aW9ucyBhbmQgaW1w bGVtZW50YXRpb25zLiANCiAgIEFsc28gc29tZSBlcnJvcnMgaGF2ZSBiZWVuIHVuY292ZXJlZC4g U28gdGhlIFdHIHdpbGwgZG8gYW4gcmZjNDc0MWJpcyB3aXRoDQogICBmb2xsb3dpbmcgY29uc3Ry YWludHM6DQoNCiAgICAgLSBidWcgZml4ZXMgYXJlIHRvIGJlIGRvbmUNCiAgICAgLSBjbGFyaWZp Y2F0aW9ucyBjYW4gYmUgZG9uZQ0KICAgICAtIG5vIGV4dGVuc2lvbnMgKGkuZS4gd2UgYXJlIG5v dCBkb2luZyBhIE5FVENPTkYgVjIpDQogICAgIC0gVGhlIHdvcmsgY2FuIGJlIHN0YXJ0ZWQgYmFz ZWQgb24gdGhlIGRpc2N1c3Npb24gaW4gSUVURiAjNzMgKHNlZQ0KICAgICAgICBodHRwOi8vd3d3 LmlldGYub3JnL3Byb2NlZWRpbmdzLzA4bm92L3NsaWRlcy9uZXRjb25mLTMucGRmKS4NCg0KICAg Tm90ZTogQSB0ZWNobmljYWwgZXJyYXRhIGhhcyBiZWVuIHBvc3RlZCBvbiByZmM0NzQyLiBJZiB0 aGUgd29yayBvbg0KICAgcmZjNDc0MWJpcyB1bmNvdmVycyBhbnkgYWRkaXRpb25hbCBmaXhlcy9j bGFyaWZpY2F0aW9ucyB0aGF0IG5lZWQNCiAgIHRvIGJlIG1hZGUgdG8gcmZjNDc0MiwgdGhlIFdH IG1heSBjb25zaWRlciB0byBhbHNvIGRvIGEgcmZjNDc0MmJpcw0KICAgYXMgcGFydCBvZiB0aGlz IHdvcmstaXRlbS4NCg0KVGhlIGZvbGxvd2luZyBpdGVtcyBoYXZlIGJlZW4gaWRlbnRpZmllZCBh cyBpbXBvcnRhbnQgYnV0IGFyZSBjdXJyZW50bHkNCm5vdCBjb25zaWRlcmVkIGluIHNjb3BlIGZv ciByZS1jaGFydGVyaW5nIGFuZCBtYXkgYmUgY2FuZGlkYXRlcyBmb3Igd29yaw0Kd2hlbiB0aGVy ZSBpcyBjb21tdW5pdHkgY29uc2Vuc3VzIHRvIHRha2UgdGhlbSBvbjoNCg0KLSBORVRDT05GIE5v dGlmaWNhdGlvbiBjb250ZW50DQotIEFjY2VzcyBDb250cm9sIHJlcXVpcmVtZW50cw0KLSBORVRD T05GIGFjY2VzcyB0byBTTUktYmFzZWQgTUlCIGRhdGENCg0KDQpHb2FscyBhbmQgTWlsZXN0b25l czoNCkRvbmUgICBXb3JraW5nIEdyb3VwIGZvcm1lZA0KRG9uZSAgIFN1Ym1pdCBpbml0aWFsIE5l dGNvbmYgUHJvdG9jb2wgZHJhZnQNCkRvbmUgICBTdWJtaXQgaW5pdGlhbCBOZXRjb25mIG92ZXIg KHRyYW5zcG9ydC1UQkQpIGRyYWZ0DQpEb25lICAgQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENh bGwgZm9yIHRoZSBOZXRjb25mIFByb3RvY29sIGRyYWZ0DQpEb25lICAgQmVnaW4gV29ya2luZyBH cm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRjb25mIG92ZXIgKHRyYW5zcG9ydC1UQkQpDQogICAg ICAgICAgICBkcmFmdA0KRG9uZSAgIFN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRjb25m IFByb3RvY29sIGRyYWZ0IHRvIHRoZSBJRVNHDQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24g b2YgdGhlIE5ldGNvbmYgb3ZlciBTT0FQIGRyYWZ0IHRvIHRoZSBJRVNHDQpEb25lICAgU3VibWl0 IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBCRUVQIGRyYWZ0IHRvIHRoZSBJRVNH DQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBTU0ggZHJh ZnQgdG8gdGhlIElFU0cNCkRvbmUgICBVcGRhdGUgY2hhcnRlcg0KRG9uZSAgIFN1Ym1pdCBmaXJz dCB2ZXJzaW9uIG9mIE5FVENPTkYgTm90aWZpY2F0aW9ucyBkb2N1bWVudA0KRG9uZSAgIEJlZ2lu IFdHTEMgb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50DQpEb25lICAgU3VibWl0IGZp bmFsIHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50IHRvIElFU0cNCiAg ICAgICAgICAgIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bvc2VkIFN0YW5kYXJkDQpEb25lICAg LTAwIGRyYWZ0IGZvciBmaW5lIEdyYWluIExvY2tpbmcNCkRvbmUgICAtMDAgZHJhZnQgZm9yIE5F VENPTkYgb3ZlciBUTFMNCkRvbmUgICAtMDAgZHJhZnQgZm9yIE5FVENPTkYgTW9uaXRvcmluZw0K RG9uZSAgIC0wMCBkcmFmdCBmb3IgU2NoZW1hIEFkdmVydGlzZW1lbnQNCkRvbmUgICBFYXJseSBS ZXZpZXcgb2YgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFwcHJvYWNoIChmb3IgTkVUQ09ORiBvdmVy DQogICAgICAgICAgICBUTFMpIHdpdGggdGhlIHG8gYSBzaW5nbGUgZG9jdW1lbnQpLg0KDQogICBOb3RlOiBUaGUgc2NoZW1h LWFkdmVydGlzZW1lbnQgbWF0ZXJpYWwgaGFzIGJlZW4gbWVyZ2VkIGludG8gdGhlDQogICBORVRD T05GIG1vbml0b3JpbmcgZG9jdW1lbnQgYmFzZWQgb24gV0cgY29uc2Vuc3VzLg0KDQo0LiBORVRD T05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmllbmNlIHRoZXJlIGlz IGENCiAgIG5lZWQgZm9yIGEgc3RhbmRhcmRzIHRyYWNrIGRvY3VtZW50IHRvIGRlZmluZSBORVRD T05GIG92ZXIgVExTIGFzIGFuDQogICBvcHRpb25hbCB0cmFuc3BvcnQgZm9yIHRoZSBORVRDT05G IHByb3RvY29sLg0KDQo1LiBORVRDT05GIGRlZmF1bHQgaGFuZGxpbmc6IE5FVENPTkYgdG9kYXkg ZG9lcyBub3QgZGVmaW5lIHdoZXRoZXINCiAgIGRlZmF1bHQgdmFsdWVzIHNob3VsZCBiZSByZXR1 cm5lZCBieSB0aGUgc2VydmVyIGluIHJlcGxpZXMNCiAgIHRvIHJlcXVlc3RzIGZvciByZWFkaW5n IGNvbmZpZ3VyYXRpb24gYW5kIHN0YXRlIGRhdGEuIERpZmZlcmVudA0KICAgY2xpZW50cyBoYXZl IGRpZmZlcmVudCBuZWVkcyB0byByZWNlaXZlIG9yIG5vdCB0byByZWNlaXZlDQogICBkZWZhdWx0 IGRhdGEuIFRoZSBORVRDT05GIHdvcmtpbmcgZ3JvdXAgd2lsbCBwcm9kdWNlIGENCiAgIHN0YW5k YXJkcy10cmFjayBSRkMgZGVmaW5pbmcgYSBtZWNoYW5pc20gdGhhdCBhbGxvd3MNCiAgIE5FVENP TkYgY2xpZW50cyB0byBjb250cm9sIHdoZXRoZXIgZGVmYXVsdCBkYXRhIGlzIHJldHVybmVkDQog ICBieSB0aGUgbmV0Y29uZiBzZXJ2ZXIuDQoNCjYuIE5FVENPTkYgaW1wbGVtZW50YXRpb25zIGhh dmUgc2hvd24gdGhhdCB0aGUgc3BlY2lmaWNhdGlvbiBpbiBSRkM0NzQxDQogICBpcyBub3QgMTAw JSBjbGVhciBhbmQgaGFzIGxlYWQgdG8gZGlmZmVyZW50IGludGVycHJldGF0aW9ucyBhbmQgaW1w bGVtZW50YXRpb25zLiANCiAgIEFsc28gc29tZSBlcnJvcnMgaGF2ZSBiZWVuIHVuY292ZXJlZC4g U28gdGhlIFdHIHdpbGwgZG8gYW4gcmZjNDc0MWJpcyB3aXRoDQogICBmb2xsb3dpbmcgY29uc3Ry YWludHM6DQoNCiAgICAgLSBidWcgZml4ZXMgYXJlIHRvIGJlIGRvbmUNCiAgICAgLSBjbGFyaWZp Y2F0aW9ucyBjYW4gYmUgZG9uZQ0KICAgICAtIG5vIGV4dGVuc2lvbnMgKGkuZS4gd2UgYXJlIG5v dCBkb2luZyBhIE5FVENPTkYgVjIpDQogICAgIC0gVGhlIHdvcmsgY2FuIGJlIHN0YXJ0ZWQgYmFz ZWQgb24gdGhlIGRpc2N1c3Npb24gaW4gSUVURiAjNzMgKHNlZQ0KICAgICAgICBodHRwOi8vd3d3 LmlldGYub3JnL3Byb2NlZWRpbmdzLzA4bm92L3NsaWRlcy9uZXRjb25mLTMucGRmKS4NCg0KICAg Tm90ZTogQSB0ZWNobmljYWwgZXJyYXRhIGhhcyBiZWVuIHBvc3RlZCBvbiByZmM0NzQyLiBJZiB0 aGUgd29yayBvbg0KICAgcmZjNDc0MWJpcyB1bmNvdmVycyBhbnkgYWRkaXRpb25hbCBmaXhlcy9j bGFyaWZpY2F0aW9ucyB0aGF0IG5lZWQNCiAgIHRvIGJlIG1hZGUgdG8gcmZjNDc0MiwgdGhlIFdH IG1heSBjb25zaWRlciB0byBhbHNvIGRvIGEgcmZjNDc0MmJpcw0KICAgYXMgcGFydCBvZiB0aGlz IHdvcmstaXRlbS4NCg0KVGhlIGZvbGxvd2luZyBpdGVtcyBoYXZlIGJlZW4gaWRlbnRpZmllZCBh cyBpbXBvcnRhbnQgYnV0IGFyZSBjdXJyZW50bHkNCm5vdCBjb25zaWRlcmVkIGluIHNjb3BlIGZv ciByZS1jaGFydGVyaW5nIGFuZCBtYXkgYmUgY2FuZGlkYXRlcyBmb3Igd29yaw0Kd2hlbiB0aGVy ZSBpcyBjb21tdW5pdHkgY29uc2Vuc3VzIHRvIHRha2UgdGhlbSBvbjoNCg0KLSBORVRDT05GIE5v dGlmaWNhdGlvbiBjb250ZW50DQotIEFjY2VzcyBDb250cm9sIHJlcXVpcmVtZW50cw0KLSBORVRD T05GIGFjY2VzcyB0byBTTUktYmFzZWQgTUlCIGRhdGENCg0KDQpHb2FscyBhbmQgTWlsZXN0b25l czoNCkRvbmUgICBXb3JraW5nIEdyb3VwIGZvcm1lZA0KRG9uZSAgIFN1Ym1pdCBpbml0aWFsIE5l dGNvbmYgUHJvdG9jb2wgZHJhZnQNCkRvbmUgICBTdWJtaXQgaW5pdGlhbCBOZXRjb25mIG92ZXIg KHRyYW5zcG9ydC1UQkQpIGRyYWZ0DQpEb25lICAgQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENh bGwgZm9yIHRoZSBOZXRjb25mIFByb3RvY29sIGRyYWZ0DQpEb25lICAgQmVnaW4gV29ya2luZyBH cm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRjb25mIG92ZXIgKHRyYW5zcG9ydC1UQkQpDQogICAg ICAgICAgICBkcmFmdA0KRG9uZSAgIFN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRjb25m IFByb3RvY29sIGRyYWZ0IHRvIHRoZSBJRVNHDQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24g b2YgdGhlIE5ldGNvbmYgb3ZlciBTT0FQIGRyYWZ0IHRvIHRoZSBJRVNHDQpEb25lICAgU3VibWl0 IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBCRUVQIGRyYWZ0IHRvIHRoZSBJRVNH DQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBTU0ggZHJh ZnQgdG8gdGhlIElFU0cNCkRvbmUgICBVcGRhdGUgY2hhcnRlcg0KRG9uZSAgIFN1Ym1pdCBmaXJz dCB2ZXJzaW9uIG9mIE5FVENPTkYgTm90aWZpY2F0aW9ucyBkb2N1bWVudA0KRG9uZSAgIEJlZ2lu IFdHTEMgb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50DQpEb25lICAgU3VibWl0IGZp bmFsIHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50IHRvIElFU0cNCiAg ICAgICAgICAgIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bvc2VkIFN0YW5kYXJkDQpEb25lICAg LTAwIGRyYWZ0IGZvciBmaW5lIEdyYWluIExvY2tpbmcNCkRvbmUgICAtMDAgZHJhZnQgZm9yIE5F VENPTkYgb3ZlciBUTFMNCkRvbmUgICAtMDAgZHJhZnQgZm9yIE5FVENPTkYgTW9uaXRvcmluZw0K RG9uZSAgIC0wMCBkcmFmdCBmb3IgU2NoZW1hIEFkdmVydGlzZW1lbnQNCkRvbmUgICBFYXJseSBS ZXZpZXcgb2YgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFwcHJvYWNoIChmb3IgTkVUQ09ORiBvdmVy DQogICAgICAgICAgICBUTFMpIHdpdGggNlY3VyaXR5IGNvbW11bml0eSBhdCBJRVRGIDcx DQpOLkEuICAgICBXRyBMYXN0IENhbGwgb24gU2NoZW1hIEFkdmVydGlzZW1lbnQgYWZ0ZXIgSUVU RjcyDQogICAgICAgICAgICBTY2hlbWEgQWR2ZXJ0aXNlbWVudCBoYXMgYmVlbiBtZXJnZWQgaW50 byBNb25pdG9yaW5nDQpEb25lICAgIFdHIExhc3QgQ2FsbCBvbiBORVRDT05GIG92ZXIgVExTIGFm dGVyIElFVEY3Mg0KRG9uZSAgICBOZXRjb25mIG92ZXIgVExTIHRvIElFU0cgZm9yIGNvbnNpZGVy YXRpb24gYXMgUHJvcG9zZWQgU3RhbmRhcmRzDQpEZWMgMjAwOCAgV0cgTGFzdCBDYWxsIG9uIEZp bmUgR3JhaW4gTG9ja2luZyBhZnRlciBJRVRGNzMNCkRlYyAyMDA4ICBTZW5kIFBhcnRpYWwgTG9j a2luZyB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bvc2VkIFN0YW5kYXJkcw0KSmFu IDIwMDkgICBJbml0aWFsIFdHIGRyYWZ0IGZvciB3aXRoLWRlZmF1bHRzIGNhcGFiaWxpdHkNCkZl YiAyMDA5ICAgSW5pdGlhbCBXRyBkcmFmdCBmb3IgcmZjNDc0MWJpcw0KTWFyIDIwMDkgICBXRyBM YXN0IENhbGwgb24gTkVUQ09ORiBNb25pdG9yaW5nIGFmdGVyIElFVEY3Mw0KQXByIDIwMDkgICBX RyBMYXN0IENhbGwgb24gcmZjNDc0MWJpcw0KQXByIDIwMDkgICBXRyBMYXN0IENhbGwgb24gd2l0 aC1kZWZhdWx0cw0KSnVuIDIwMDkgICByZmM0NzQxYmlzIHRvIElFU0cgZm9yIGNvbnNpZGVyYXRp b25zIGFzIFByb3Bvc2VkIFN0YW5kYXJkDQpKdW4gMjAwOSAgIHdpdGgtZGVmYXVsdHMgY2FwYWJp bGl0eSB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9ucyBhcyBQcm9wb3NlZCBTdGFuZGFyZA0KDQoN CkludGVybmV0LURyYWZ0czoNCk5FVENPTkYgb3ZlciBUTFMgKDE4Mjg3IGJ5dGVzKQ0KUGFydGlh bCBMb2NrIFJQQyBmb3IgTkVUQ09ORiAoMjA4NzYgYnl0ZXMpDQpORVRDT05GIE1vbml0b3Jpbmcg U2NoZW1hICgyMDc4NSBieXRlcykNCg0KUmVxdWVzdCBGb3IgQ29tbWVudHM6DQpORVRDT05GIENv bmZpZ3VyYXRpb24gUHJvdG9jb2wgKFJGQyA0NzQxKSAoMTczOTE0IGJ5dGVzKQ0KVXNpbmcgdGhl IE5FVENPTkYgQ29uZmlndXJhdGlvbiBQcm90b2NvbCBvdmVyIFNlY3VyZSBTaGVsbCAoU1NIKSAo UkZDIDQ3NDIpDQooMTc4MDcgYnl0ZXMpDQpVc2luZyB0aGUgTkVUQ09ORiBQcm90b2NvbCBvdmVy IEJsb2NrcyBFeHRlbnNpYmxlIEV4Y2hhbmdlIFByb3RvY29sIChCRUVQKSANCihSRkMNCjQ3NDQp ICgxOTI4NyBieXRlcykNClVzaW5nIHRoZSBOZXR3b3JrIENvbmZpZ3VyYXRpb24gUHJvdG9jb2wg KE5FVENPTkYpIE92ZXIgdGhlIFNpbXBsZSBPYmplY3QgDQpBY2Nlc3MNClByb3RvY29sIChTT0FQ KSAoUkZDIDQ3NDMpICgzOTczNCBieXRlcykNCk5FVENPTkYgRXZlbnQgTm90aWZpY2F0aW9ucyAo UkZDIDUyNzcpICg3MDg3OCBieXRlcykgDQoNCg0KDQoNCg0K ------_=_NextPart_001_01C95BAD.982040D1 Content-Type: text/html; name="Diff WGCharter-20080821-WGCharter-20081211.htm" Content-Transfer-Encoding: base64 Content-Description: Diff WGCharter-20080821-WGCharter-20081211.htm Content-Disposition: attachment; filename="Diff WGCharter-20080821-WGCharter-20081211.htm" CjwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgWEhUTUwgMS4wIFRyYW5zaXRpb25h bC8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRtbDEvRFREL3hodG1sMS10cmFuc2l0aW9u YWwuZHRkIj4gCjwhLS0gR2VuZXJhdGVkIGJ5IHJmY2RpZmYgMS4zNTogcmZjZGlmZiAgLS0+IAo8 IS0tIDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5zaXRp b25hbCIgPiAtLT4KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAyLjYuMjQtMS02ODYgIzEg U01QIFRodSBNYXkgOCAwMjoxNjozOSBVVEMgMjAwOCBpNjg2IEdOVS9MaW51eCAtLT4gCjwhLS0g VXNpbmcgYXdrOiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDMuMS41IC0tPiAKPCEtLSBVc2luZyBk aWZmOiAvdXNyL2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAyLjguMSAtLT4gCjwhLS0g VXNpbmcgd2RpZmY6IC91c3IvYmluL3dkaWZmOiBHTlUgd2RpZmYgMC41IC0tPiAKPGh0bWw+IAo8 aGVhZD4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0 bWw7IGNoYXJzZXQ9aXNvLTg4NTktMSIgLz4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1T dHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2NzcyIgLz4gCiAgPHRpdGxlPkRpZmY6IDA4MDgyMS1O RVRDT05GLWNoYXJ0ZXIudHh0IC0gMDgxMjExLU5FVENPTkYtQ2hhcnRlci50eHQ8L3RpdGxlPiAK ICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAKICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBt YXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0 ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9w OyBmb250LXNpemU6IDAuODZlbTt9IAogICAgdGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9 IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTogMC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9u dC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29s b3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAg IC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tn cm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAuaW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhG RjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvadGhlIHNlY3VyaXR5IGNvbW11bml0eSBhdCBJRVRGIDcx DQpOLkEuICAgICBXRyBMYXN0IENhbGwgb24gU2NoZW1hIEFkdmVydGlzZW1lbnQgYWZ0ZXIgSUVU RjcyDQogICAgICAgICAgICBTY2hlbWEgQWR2ZXJ0aXNlbWVudCBoYXMgYmVlbiBtZXJnZWQgaW50 byBNb25pdG9yaW5nDQpEb25lICAgIFdHIExhc3QgQ2FsbCBvbiBORVRDT05GIG92ZXIgVExTIGFm dGVyIElFVEY3Mg0KRG9uZSAgICBOZXRjb25mIG92ZXIgVExTIHRvIElFU0cgZm9yIGNvbnNpZGVy YXRpb24gYXMgUHJvcG9zZWQgU3RhbmRhcmRzDQpEZWMgMjAwOCAgV0cgTGFzdCBDYWxsIG9uIEZp bmUgR3JhaW4gTG9ja2luZyBhZnRlciBJRVRGNzMNCkRlYyAyMDA4ICBTZW5kIFBhcnRpYWwgTG9j a2luZyB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bvc2VkIFN0YW5kYXJkcw0KSmFu IDIwMDkgICBJbml0aWFsIFdHIGRyYWZ0IGZvciB3aXRoLWRlZmF1bHRzIGNhcGFiaWxpdHkNCkZl YiAyMDA5ICAgSW5pdGlhbCBXRyBkcmFmdCBmb3IgcmZjNDc0MWJpcw0KTWFyIDIwMDkgICBXRyBM YXN0IENhbGwgb24gTkVUQ09ORiBNb25pdG9yaW5nIGFmdGVyIElFVEY3Mw0KQXByIDIwMDkgICBX RyBMYXN0IENhbGwgb24gcmZjNDc0MWJpcw0KQXByIDIwMDkgICBXRyBMYXN0IENhbGwgb24gd2l0 aC1kZWZhdWx0cw0KSnVuIDIwMDkgICByZmM0NzQxYmlzIHRvIElFU0cgZm9yIGNvbnNpZGVyYXRp b25zIGFzIFByb3Bvc2VkIFN0YW5kYXJkDQpKdW4gMjAwOSAgIHdpdGgtZGVmYXVsdHMgY2FwYWJp bGl0eSB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9ucyBhcyBQcm9wb3NlZCBTdGFuZGFyZA0KDQoN CkludGVybmV0LURyYWZ0czoNCk5FVENPTkYgb3ZlciBUTFMgKDE4Mjg3IGJ5dGVzKQ0KUGFydGlh bCBMb2NrIFJQQyBmb3IgTkVUQ09ORiAoMjA4NzYgYnl0ZXMpDQpORVRDT05GIE1vbml0b3Jpbmcg U2NoZW1hICgyMDc4NSBieXRlcykNCg0KUmVxdWVzdCBGb3IgQ29tbWVudHM6DQpORVRDT05GIENv bmZpZ3VyYXRpb24gUHJvdG9jb2wgKFJGQyA0NzQxKSAoMTczOTE0IGJ5dGVzKQ0KVXNpbmcgdGhl IE5FVENPTkYgQ29uZmlndXJhdGlvbiBQcm90b2NvbCBvdmVyIFNlY3VyZSBTaGVsbCAoU1NIKSAo UkZDIDQ3NDIpDQooMTc4MDcgYnl0ZXMpDQpVc2luZyB0aGUgTkVUQ09ORiBQcm90b2NvbCBvdmVy IEJsb2NrcyBFeHRlbnNpYmxlIEV4Y2hhbmdlIFByb3RvY29sIChCRUVQKSANCihSRkMNCjQ3NDQp ICgxOTI4NyBieXRlcykNClVzaW5nIHRoZSBOZXR3b3JrIENvbmZpZ3VyYXRpb24gUHJvdG9jb2wg KE5FVENPTkYpIE92ZXIgdGhlIFNpbXBsZSBPYmplY3QgDQpBY2Nlc3MNClByb3RvY29sIChTT0FQ KSAoUkZDIDQ3NDMpICgzOTczNCBieXRlcykNCk5FVENPTkYgRXZlbnQgTm90aWZpY2F0aW9ucyAo UkZDIDUyNzcpICg3MDg3OCBieXRlcykgDQoNCg0KDQoNCg0K ------_=_NextPart_001_01C95BAD.982040D1 Content-Type: text/html; name="Diff WGCharter-20080821-WGCharter-20081211.htm" Content-Transfer-Encoding: base64 Content-Description: Diff WGCharter-20080821-WGCharter-20081211.htm Content-Disposition: attachment; filename="Diff WGCharter-20080821-WGCharter-20081211.htm" CjwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgWEhUTUwgMS4wIFRyYW5zaXRpb25h bC8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRtbDEvRFREL3hodG1sMS10cmFuc2l0aW9u YWwuZHRkIj4gCjwhLS0gR2VuZXJhdGVkIGJ5IHJmY2RpZmYgMS4zNTogcmZjZGlmZiAgLS0+IAo8 IS0tIDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5zaXRp b25hbCIgPiAtLT4KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAyLjYuMjQtMS02ODYgIzEg U01QIFRodSBNYXkgOCAwMjoxNjozOSBVVEMgMjAwOCBpNjg2IEdOVS9MaW51eCAtLT4gCjwhLS0g VXNpbmcgYXdrOiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDMuMS41IC0tPiAKPCEtLSBVc2luZyBk aWZmOiAvdXNyL2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAyLjguMSAtLT4gCjwhLS0g VXNpbmcgd2RpZmY6IC91c3IvYmluL3dkaWZmOiBHTlUgd2RpZmYgMC41IC0tPiAKPGh0bWw+IAo8 aGVhZD4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0 bWw7IGNoYXJzZXQ9aXNvLTg4NTktMSIgLz4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1T dHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2NzcyIgLz4gCiAgPHRpdGxlPkRpZmY6IDA4MDgyMS1O RVRDT05GLWNoYXJ0ZXIudHh0IC0gMDgxMjExLU5FVENPTkYtQ2hhcnRlci50eHQ8L3RpdGxlPiAK ICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAKICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBt YXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0 ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9w OyBmb250LXNpemU6IDAuODZlbTt9IAogICAgdGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9 IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTogMC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9u dC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29s b3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAg IC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tn cm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAuaW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhG RjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IAogICAWQg ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1j b2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAog ICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6 ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlw c2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJpZ2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog I0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAog ICAgLnJibG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0 IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBi YWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0 aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IAogIDwvc3R5bGU+ IAo8L2hlYWQ+IAo8Ym9keSA+IAogIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBj ZWxsc3BhY2luZz0iMCI+IAogIDx0ciBiZ2NvbG9yPSJvcmFuZ2UiPjx0aD48L3RoPjx0aD4mbmJz cDswODA4MjEtTkVUQ09ORi1jaGFydGVyLnR4dCZuYnNwOzwvdGg+PHRoPiA8L3RoPjx0aD4mbmJz cDswODEyMTEtTkVUQ09ORi1DaGFydGVyLnR4dCZuYnNwOzwvdGg+PHRoPjwvdGg+PC90cj4gCiAg ICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDEiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5MYXN0 IE1vZGlmaWVkOiA8c3BhbiBjbGFzcz0iZGVsZXRlIj4yMDA4LTA4LTIxPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5MYXN0IE1vZGlmaWVkOiA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4yMDA4LTEyLTExPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPkFkZGl0aW9uYWwgaW5mb3JtYXRpb24gaXMgYXZhaWxhYmxlIGF0IHRvb2xz LmlldGYub3JnL3dnL25ldGNvbmY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BZGRp dGlvbmFsIGluZm9ybWF0aW9uIGlzIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy93Zy9uZXRj b25mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMiIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPkNoYWlyKHMpOjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+IyBCZXJ0IFdpam5lbiAmbHQ7YmVydGlldGZAYndp am5lbi5uZXQmZ3Q7PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMyIgLz48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IE1laG1ldCBFcnN1 ZSAmbHQ7bWVobWV0LmVyc3VlQG5zbi5jb20mZ3Q7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkNoYWlyKHMpOjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+QmVydCBXaWpuZW4gJmx0 O2JlcnRpZXRmQGJ3aWpuZW4ubmV0Jmd0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+TWVobWV0IEVyc3VlICZsdDttZWhtZXQuZXJzdWVAbnNuLmNvbSZndDs8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRgLnZvaWQg ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1j b2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAog ICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6 ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlw c2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJpZ2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog I0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAog ICAgLnJibG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0 IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBi YWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0 aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IAogIDwvc3R5bGU+ IAo8L2hlYWQ+IAo8Ym9keSA+IAogIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBj ZWxsc3BhY2luZz0iMCI+IAogIDx0ciBiZ2NvbG9yPSJvcmFuZ2UiPjx0aD48L3RoPjx0aD4mbmJz cDswODA4MjEtTkVUQ09ORi1jaGFydGVyLnR4dCZuYnNwOzwvdGg+PHRoPiA8L3RoPjx0aD4mbmJz cDswODEyMTEtTkVUQ09ORi1DaGFydGVyLnR4dCZuYnNwOzwvdGg+PHRoPjwvdGg+PC90cj4gCiAg ICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDEiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5MYXN0 IE1vZGlmaWVkOiA8c3BhbiBjbGFzcz0iZGVsZXRlIj4yMDA4LTA4LTIxPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5MYXN0IE1vZGlmaWVkOiA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4yMDA4LTEyLTExPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPkFkZGl0aW9uYWwgaW5mb3JtYXRpb24gaXMgYXZhaWxhYmxlIGF0IHRvb2xz LmlldGYub3JnL3dnL25ldGNvbmY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BZGRp dGlvbmFsIGluZm9ybWF0aW9uIGlzIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy93Zy9uZXRj b25mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMiIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPkNoYWlyKHMpOjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+IyBCZXJ0IFdpam5lbiAmbHQ7YmVydGlldGZAYndp am5lbi5uZXQmZ3Q7PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMyIgLz48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IE1laG1ldCBFcnN1 ZSAmbHQ7bWVobWV0LmVyc3VlQG5zbi5jb20mZ3Q7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkNoYWlyKHMpOjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+QmVydCBXaWpuZW4gJmx0 O2JlcnRpZXRmQGJ3aWpuZW4ubmV0Jmd0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+TWVobWV0IEVyc3VlICZsdDttZWhtZXQuZXJzdWVAbnNuLmNvbSZndDs8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPk9wZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgQXJlYSBEaXJl Y3RvcihzKTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5PcGVyYXRpb25zIGFuZCBN YW5hZ2VtZW50IEFyZWEgRGlyZWN0b3Iocyk6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNCIgLz48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IERhbiBSb21hc2Nh bnUgJmx0O2Ryb21hc2NhQGF2YXlhLmNvbSZndDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+RGFuIFJvbWFzY2FudSAmbHQ7ZHJvbWFzY2FAYXZheWEuY29tJmd0OzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNz PSJkZWxldGUiPiM8L3NwYW4+IFJvbmFsZCBCb25pY2EgJmx0O3Jib25pY2FAanVuaXBlci5uZXQm Z3Q7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPlJvbmFsZCBCb25pY2EgJmx0O3Ji b25pY2FAanVuaXBlci5uZXQmZ3Q7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBBcmVhIEFkdmlzb3I6PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBBcmVh IEFkdmlzb3I6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IERhbiBSb21hc2NhbnUgJmx0O2Ryb21hc2NhQGF2 YXlhLmNvbSZndDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RGFuIFJvbWFzY2Fu dSAmbHQ7ZHJvbWFzY2FAYXZheWEuY29tJmd0OzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPlRlY2huaWNhbCBBZHZpc29yKHMpOjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPlRlY2huaWNhbCBBZHZpc29yKHMpOjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MDYiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4jPC9zcGFuPiBD aGFybGllIEthdWZtYW4gJmx0O2NoYXJsaWVrQG1pY3Jvc29mdC5jb20mZ3Q7PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPkNoYXJsaWUgS2F1Zm1hbiAmbHQ7Y2hhcmxpZWtAbWljcm9z b2Z0LmNvbSZndDs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5NYWlsaW5nIExpc3RzOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPk1haWxpbmcg TGlzdHM6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNyIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkdlbmVy YWwgRGlzY3Vzc2lvbjogPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bmV0Y29uZkBpZXRmLm9yZzwvc3Bh bj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+R2VuZXJhbCBEaXNjdXNzaW9uOiA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5uZXRjb25mQG9wcy5pZXRmLm9yZzwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ2GQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPk9wZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgQXJlYSBEaXJl Y3RvcihzKTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5PcGVyYXRpb25zIGFuZCBN YW5hZ2VtZW50IEFyZWEgRGlyZWN0b3Iocyk6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNCIgLz48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IERhbiBSb21hc2Nh bnUgJmx0O2Ryb21hc2NhQGF2YXlhLmNvbSZndDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+RGFuIFJvbWFzY2FudSAmbHQ7ZHJvbWFzY2FAYXZheWEuY29tJmd0OzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNz PSJkZWxldGUiPiM8L3NwYW4+IFJvbmFsZCBCb25pY2EgJmx0O3Jib25pY2FAanVuaXBlci5uZXQm Z3Q7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPlJvbmFsZCBCb25pY2EgJmx0O3Ji b25pY2FAanVuaXBlci5uZXQmZ3Q7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBBcmVhIEFkdmlzb3I6PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBBcmVh IEFkdmlzb3I6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IERhbiBSb21hc2NhbnUgJmx0O2Ryb21hc2NhQGF2 YXlhLmNvbSZndDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RGFuIFJvbWFzY2Fu dSAmbHQ7ZHJvbWFzY2FAYXZheWEuY29tJmd0OzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPlRlY2huaWNhbCBBZHZpc29yKHMpOjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPlRlY2huaWNhbCBBZHZpc29yKHMpOjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MDYiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4jPC9zcGFuPiBD aGFybGllIEthdWZtYW4gJmx0O2NoYXJsaWVrQG1pY3Jvc29mdC5jb20mZ3Q7PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPkNoYXJsaWUgS2F1Zm1hbiAmbHQ7Y2hhcmxpZWtAbWljcm9z b2Z0LmNvbSZndDs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5NYWlsaW5nIExpc3RzOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPk1haWxpbmcg TGlzdHM6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNyIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkdlbmVy YWwgRGlzY3Vzc2lvbjogPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bmV0Y29uZkBpZXRmLm9yZzwvc3Bh bj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+R2VuZXJhbCBEaXNjdXNzaW9uOiA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5uZXRjb25mQG9wcy5pZXRmLm9yZzwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5UbyBTdWJzY3Jp YmU6IDxzcGFuIGNsYXNzPSJkZWxldGUiPm5ldGNvbmYtcmVxdWVzdEBpZXRmLm9yZzwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+VG8gU3Vic2NyaWJlOiA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5uZXRjb25mLXJlcXVlc3RAb3BzLmlldGYub3JnPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbiBCb2R5OiBpbiBt c2cgYm9keTogc3Vic2NyaWJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+SW4gQm9k eTogaW4gbXNnIGJvZHk6IHN1YnNjcmliZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDgiIC8+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj5BcmNoaXZlOiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5odHRwOi8vd3d3Lmll dGYub3JnL21haWwtYXJjaGl2ZS93ZWIvbmV0Y29uZi88L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPkFyY2hpdmU6IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmh0dHBzOi8vb3Bz LmlldGYub3JnL2xpc3RzL25ldGNvbmY8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RGVzY3JpcHRpb24gb2YgV29ya2luZyBHcm91cDo8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5EZXNjcmlwdGlvbiBvZiBXb3JraW5nIEdyb3VwOjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5DaGFy bGllIEthdWZtYW4gaXMgVGVjaG5pY2FsIEFkdmlzb3IgZm9yIFNlY3VyaXR5IE1hdHRlcnM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5DaGFybGllIEthdWZtYW4gaXMgVGVjaG5pY2Fs IEFkdmlzb3IgZm9yIFNlY3VyaXR5IE1hdHRlcnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PkNvbmZpZ3VyYXRpb24gb2YgbmV0d29ya3Mgb2YgZGV2aWNlcyBoYXMgYmVjb21lIGEgY3JpdGlj YWwgcmVxdWlyZW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Db25maWd1cmF0 aW9uIG9mIG5ldHdvcmtzIG9mIGRldmljZXMgaGFzIGJlY29tZSBhIGNyaXRpY2FsIHJlcXVpcmVt ZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PmZvciBvcGVyYXRvcnMgaW4gdG9kYXkncyBoaWdobHkgaW50ZXJvcGVyYWJsZSBuZXR3b3Jrcy4g T3BlcmF0b3JzIGZyb208L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5mb3Igb3BlcmF0 b3JzIGluIHRvZGF5J3MgaGlnaGx5IGludGVyb3BlcmFibGUgbmV0d29ya3MuIE9wZXJhdG9ycyBm cm9tPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PmxhcmdlIHRvIHNtYWxsIGhhdmUgZGV2ZWxvcGVkIHRoZWlyIG93biBtZWNoYW5pc21zIG9yIHVz ZWQgdmVuZG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+bGFyZ2UgdG8gc21hbGwg aGF2ZSBkZXZlbG9wZWQgdGhlaXIgb3duIG1lY2hhbmlzbXMgb3IgdXNlZCB2ZW5kb3I8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+c3BlY2lmaWMg bWVjaGFuaXNtcyB0byB0cmFuc2ZlciBjb25maWd1cmF0aW9uIGRhdGEgdG8gYW5kIGZyb20gYTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPnNwZWNpZmljIG1lY2hhbmlzbXMgdG8gdHJh bnNmZXIgY29uZmlndXJhdGlvbiBkYXRhIHRvIGFuZCBmcm9tIGE8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ZGV2aWNlLCBhbmQgZm9yIGV4YW1p bmluZyBkZXZpY2Ugc3RhdGUgaW5mb3JtYXRpb24gd2hpY2ggbWF5IGltcGFjdDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPmRldmljZSwgYW5kIGZvciBleGFtaW5pbmcgZGV2aWNlIHN0 YXRlIGluZm9ybWF0aW9uIHdoaWNoIG1heSBpbXBhYYWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5UbyBTdWJzY3Jp YmU6IDxzcGFuIGNsYXNzPSJkZWxldGUiPm5ldGNvbmYtcmVxdWVzdEBpZXRmLm9yZzwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+VG8gU3Vic2NyaWJlOiA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5uZXRjb25mLXJlcXVlc3RAb3BzLmlldGYub3JnPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbiBCb2R5OiBpbiBt c2cgYm9keTogc3Vic2NyaWJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+SW4gQm9k eTogaW4gbXNnIGJvZHk6IHN1YnNjcmliZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDgiIC8+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj5BcmNoaXZlOiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5odHRwOi8vd3d3Lmll dGYub3JnL21haWwtYXJjaGl2ZS93ZWIvbmV0Y29uZi88L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPkFyY2hpdmU6IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmh0dHBzOi8vb3Bz LmlldGYub3JnL2xpc3RzL25ldGNvbmY8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RGVzY3JpcHRpb24gb2YgV29ya2luZyBHcm91cDo8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5EZXNjcmlwdGlvbiBvZiBXb3JraW5nIEdyb3VwOjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5DaGFy bGllIEthdWZtYW4gaXMgVGVjaG5pY2FsIEFkdmlzb3IgZm9yIFNlY3VyaXR5IE1hdHRlcnM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5DaGFybGllIEthdWZtYW4gaXMgVGVjaG5pY2Fs IEFkdmlzb3IgZm9yIFNlY3VyaXR5IE1hdHRlcnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PkNvbmZpZ3VyYXRpb24gb2YgbmV0d29ya3Mgb2YgZGV2aWNlcyBoYXMgYmVjb21lIGEgY3JpdGlj YWwgcmVxdWlyZW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Db25maWd1cmF0 aW9uIG9mIG5ldHdvcmtzIG9mIGRldmljZXMgaGFzIGJlY29tZSBhIGNyaXRpY2FsIHJlcXVpcmVt ZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PmZvciBvcGVyYXRvcnMgaW4gdG9kYXkncyBoaWdobHkgaW50ZXJvcGVyYWJsZSBuZXR3b3Jrcy4g T3BlcmF0b3JzIGZyb208L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5mb3Igb3BlcmF0 b3JzIGluIHRvZGF5J3MgaGlnaGx5IGludGVyb3BlcmFibGUgbmV0d29ya3MuIE9wZXJhdG9ycyBm cm9tPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PmxhcmdlIHRvIHNtYWxsIGhhdmUgZGV2ZWxvcGVkIHRoZWlyIG93biBtZWNoYW5pc21zIG9yIHVz ZWQgdmVuZG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+bGFyZ2UgdG8gc21hbGwg aGF2ZSBkZXZlbG9wZWQgdGhlaXIgb3duIG1lY2hhbmlzbXMgb3IgdXNlZCB2ZW5kb3I8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+c3BlY2lmaWMg bWVjaGFuaXNtcyB0byB0cmFuc2ZlciBjb25maWd1cmF0aW9uIGRhdGEgdG8gYW5kIGZyb20gYTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPnNwZWNpZmljIG1lY2hhbmlzbXMgdG8gdHJh bnNmZXIgY29uZmlndXJhdGlvbiBkYXRhIHRvIGFuZCBmcm9tIGE8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ZGV2aWNlLCBhbmQgZm9yIGV4YW1p bmluZyBkZXZpY2Ugc3RhdGUgaW5mb3JtYXRpb24gd2hpY2ggbWF5IGltcGFjdDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPmRldmljZSwgYW5kIGZvciBleGFtaW5pbmcgZGV2aWNlIHN0 YXRlIGluZm9ybWF0aW9uIHdoaWNoIG1heSB3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+dGhlIGNvbmZpZ3VyYXRpb24uIEVhY2ggb2Yg dGhlc2UgbWVjaGFuaXNtcyBtYXkgYmUgZGlmZmVyZW50IGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+dGhlIGNvbmZpZ3VyYXRpb24uIEVhY2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBt YXkgYmUgZGlmZmVyZW50IGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPnZhcmlvdXMgYXNwZWN0cywgc3VjaCBhcyBzZXNzaW9uIGVzdGFibGlz aG1lbnQsIHVzZXIgYXV0aGVudGljYXRpb24sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+dmFyaW91cyBhc3BlY3RzLCBzdWNoIGFzIHNlc3Npb24gZXN0YWJsaXNobWVudCwgdXNlciBh dXRoZW50aWNhdGlvbiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5IiA+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9 InBhcnQtbDIiIC8+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBsaW5l IDkyPC9lbT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yMiIgLz48c21hbGw+c2tp cHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IGxpbmUgOTU8L2VtPjwvdGg+PHRkPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgdGhlIHNlY3VyaXR5IGFuZCB0cmFuc3BvcnQgbGF5ZXIgcmVxdWlyZW1l bnRzIG9mIHRoZSBORVRDT05GIFByb3RvY29sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICB0aGUgc2VjdXJpdHkgYW5kIHRyYW5zcG9ydCBsYXllciByZXF1aXJlbWVudHMgb2YgdGhl IE5FVENPTkYgUHJvdG9jb2w8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICBTcGVjaWZpY2F0aW9uLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgU3BlY2lmaWNhdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgZSkg TkVUQ09ORiBOb3RpZmljYXRpb24gU3BlY2lmaWNhdGlvbiwgd2hpY2ggZGVmaW5lcyBtZWNoYW5p c21zIHRoYXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGUpIE5FVENPTkYgTm90 aWZpY2F0aW9uIFNwZWNpZmljYXRpb24sIHdoaWNoIGRlZmluZXMgbWVjaGFuaXNtcyB0aGF0PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICBw cm92aWRlIGFuIGFzeW5jaHJvbm91cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2 aWNlIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICBwcm92aWRlIGFuIGFz eW5jaHJvbm91cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2aWNlIGZvcjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgdGhl IE5FVENPTkYgcHJvdG9jb2wuICBORVRDT05GIE5vdGlmaWNhdGlvbiBpcyBhbiBvcHRpb25hbDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICB0aGUgTkVUQ09ORiBwcm90b2NvbC4g IE5FVENPTkYgTm90aWZpY2F0aW9uIGlzIGFuIG9wdGlvbmFsPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICBjYXBhYmlsaXR5IGJ1aWx0IG9u IHRvcCBvZiB0aGUgYmFzZSBORVRDT05GIGRlZmluaXRpb24gYW5kPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgIGNhcGFiaWxpdHkgYnVpbHQgb24gdG9wIG9mIHRoZSBiYXNlIE5F VENPTkYgZGVmaW5pdGlvbiBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgIHByb3ZpZGVzIHRoZSBjYXBhYmlsaXRpZXMgYW5kIG9wZXJh dGlvbnMgbmVjZXNzYXJ5IHRvIHN1cHBvcnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgcHJvdmlkZXMgdGhlIGNhcGFiaWxpdGllcyBhbmQgb3BlcmF0aW9ucyBuZWNlc3Nhcnkg dG8gc3VwcG9ydDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgdGhpcyBzZXJ2aWNlLjwvdGQ+PHRkPiA8L3RkPjx0pbXBhY3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+dGhlIGNvbmZpZ3VyYXRpb24uIEVhY2ggb2Yg dGhlc2UgbWVjaGFuaXNtcyBtYXkgYmUgZGlmZmVyZW50IGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+dGhlIGNvbmZpZ3VyYXRpb24uIEVhY2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBt YXkgYmUgZGlmZmVyZW50IGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPnZhcmlvdXMgYXNwZWN0cywgc3VjaCBhcyBzZXNzaW9uIGVzdGFibGlz aG1lbnQsIHVzZXIgYXV0aGVudGljYXRpb24sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+dmFyaW91cyBhc3BlY3RzLCBzdWNoIGFzIHNlc3Npb24gZXN0YWJsaXNobWVudCwgdXNlciBh dXRoZW50aWNhdGlvbiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5IiA+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9 InBhcnQtbDIiIC8+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBsaW5l IDkyPC9lbT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yMiIgLz48c21hbGw+c2tp cHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IGxpbmUgOTU8L2VtPjwvdGg+PHRkPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgdGhlIHNlY3VyaXR5IGFuZCB0cmFuc3BvcnQgbGF5ZXIgcmVxdWlyZW1l bnRzIG9mIHRoZSBORVRDT05GIFByb3RvY29sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICB0aGUgc2VjdXJpdHkgYW5kIHRyYW5zcG9ydCBsYXllciByZXF1aXJlbWVudHMgb2YgdGhl IE5FVENPTkYgUHJvdG9jb2w8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICBTcGVjaWZpY2F0aW9uLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgU3BlY2lmaWNhdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgZSkg TkVUQ09ORiBOb3RpZmljYXRpb24gU3BlY2lmaWNhdGlvbiwgd2hpY2ggZGVmaW5lcyBtZWNoYW5p c21zIHRoYXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGUpIE5FVENPTkYgTm90 aWZpY2F0aW9uIFNwZWNpZmljYXRpb24sIHdoaWNoIGRlZmluZXMgbWVjaGFuaXNtcyB0aGF0PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICBw cm92aWRlIGFuIGFzeW5jaHJvbm91cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2 aWNlIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICBwcm92aWRlIGFuIGFz eW5jaHJvbm91cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2aWNlIGZvcjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgdGhl IE5FVENPTkYgcHJvdG9jb2wuICBORVRDT05GIE5vdGlmaWNhdGlvbiBpcyBhbiBvcHRpb25hbDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICB0aGUgTkVUQ09ORiBwcm90b2NvbC4g IE5FVENPTkYgTm90aWZpY2F0aW9uIGlzIGFuIG9wdGlvbmFsPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICBjYXBhYmlsaXR5IGJ1aWx0IG9u IHRvcCBvZiB0aGUgYmFzZSBORVRDT05GIGRlZmluaXRpb24gYW5kPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgIGNhcGFiaWxpdHkgYnVpbHQgb24gdG9wIG9mIHRoZSBiYXNlIE5F VENPTkYgZGVmaW5pdGlvbiBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgIHByb3ZpZGVzIHRoZSBjYXBhYmlsaXRpZXMgYW5kIG9wZXJh dGlvbnMgbmVjZXNzYXJ5IHRvIHN1cHBvcnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgcHJvdmlkZXMgdGhlIGNhcGFiaWxpdGllcyBhbmQgb3BlcmF0aW9ucyBuZWNlc3Nhcnkg dG8gc3VwcG9ydDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgdGhpcyBzZXJ2aWNlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICB0aGlzIHNlcnZpY2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMDkiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGUgTkVUQ09ORiBub3RpZmlj YXRpb24gc3BlY2lmaWNhdGlvbiBoYXMgYmVlbiBmaW5pc2hlZCBub3cgYXMgd2VsbC48L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+SW4gdGhlIGN1 cnJlbnQgcGhhc2Ugb2YgdGhlIGluY3JlbWVudGFsIGRldmVsb3BtZW50IG9mIE5FVENPTkYgdGhl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+SW4gdGhlIGN1cnJlbnQgcGhhc2Ugb2Yg dGhlIGluY3JlbWVudGFsIGRldmVsb3BtZW50IG9mIE5FVENPTkYgdGhlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPndvcmtncm91cCB3aWxsIGZv Y3VzIG9uIGZvbGxvd2luZyBpdGVtczo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij53 b3JrZ3JvdXAgd2lsbCBmb2N1cyBvbiBmb2xsb3dpbmcgaXRlbXM6PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4xLiBGaW5lLWdyYWluIGxvY2tpbmc6IFRoZSBiYXNlIE5FVENPTkYgcHJvdG9j b2wgb25seSBwcm92aWRlcyBhIGxvY2s8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4x LiBGaW5lLWdyYWluIGxvY2tpbmc6IFRoZSBiYXNlIE5FVENPTkYgcHJvdG9jb2wgb25seSBwcm92 aWRlcyBhIGxvY2s8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICBmb3IgdGhlIGVudGlyZSBjb25maWd1cmF0aW9uIGRhdGFzdG9yZSwgd2hpY2gg aXMgbm90IGRlZW1lZCB0byBtZWV0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBm b3IgdGhlIGVudGlyZSBjb25maWd1cmF0aW9uIGRhdGFzdG9yZSwgd2hpY2ggaXMgbm90IGRlZW1l ZCB0byBtZWV0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgaW1wb3J0YW50IG9wZXJhdGlvbmFsIGFuZCBzZWN1cml0eSByZXF1aXJlbWVudHMu IFRoZSBORVRDT05GIHdvcmtpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGlt cG9ydGFudCBvcGVyYXRpb25hbCBhbmQgc2VjdXJpdHkgcmVxdWlyZW1lbnRzLiBUaGUgTkVUQ09O RiB3b3JraW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgZ3JvdXAgd2lsbCBwcm9kdWNlIGEgc3RhbmRhcmRzLXRyYWNrIFJGQyBzcGVjaWZ5 aW5nIGEgbWVjaGFuaXNtIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgZ3Jv dXAgd2lsbCBwcm9kdWNlIGEgc3RhbmRhcmRzLXRyYWNrIFJGQyBzcGVjaWZ5aW5nIGEgbWVjaGFu aXNtIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gIGZpbmUtZ3JhaW4gbG9ja2luZyBvZiB0aGUgTkVUQ09ORiBjb25maWd1cmF0aW9uIGRh dGFzdG9yZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGZpbmUtZ3JhaW4gbG9j a2luZyBvZiB0aGUgTkVUQ09ORiBjb25maWd1cmF0aW9uIGRhdGFzdG9yZS48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjIuIE5FVENPTkYgbW9uaXRvcmluZzogSXQgaXMgY29uc2lkZXJlZCBi ZXN0IHByYWN0aWNlIGZvciBJRVRGIHdvcmtpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4yLiBORVRDT05GIG1vbml0b3Jpbmc6IEl0IGlzIGNvbnNpZGVyZWQgYmVzdCBwcmFjdGlj ZSBmb3IgSUVURiB3b3JraW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHIgYmdjb2xvcj0iZ3JheSIgPjx0ZD48L3RkPjx0aD48YSBu YW1lPSJwYXJ0LWwzIiAvPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4g bGluZSAxMTU8L2VtPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIzIiAvPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gbGluZSAxMjA8L2VtPjwvdGg+PHRk PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgaXRzZWxmIHRvIGJlIHVzZWQgdG8gbW9uaXRvciBzb21lIGFz cGVjdHMgb2YgTkVUQ09ORiBvcGVyYXRpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICBpdHNlbGYgdG8gYmUgdXNlZCB0byBtb25pdG9yIHNvbWUgYXNwZWN0cyBvZiBORVRDT05G IG9wZXJhdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjMuIFNjaGVtYSBhZHZlcnRp c2VtZW50OiBDdXJyZW50bHkgdGhlIE5FVENPTkYgcHJvdG9jb2wgaXMgYWJsZSB0bzwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjMuIFNjaGVtYSBhZHZlcnRpc2VtZW50OiBDdXJyZW50 bHkgdGhlIE5FVENPTkYgcHJvdG9jb2wgaXMgYWJsZSB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIGFkdmVydGlzZSB3aGljaCBwcm90b2Nv bCBmZWF0dXJlcyBhcmUgc3VwcG9ydGVkIG9uIGEgcGFydGljdWxhcjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgYWR2ZXJ0aXNlIHdoaWNoIHByb3RvY29sIGZlYXR1cmVzIGFyZSBz dXBwb3J0ZWQgb24gYSBwYXJ0aWN1bGFyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwg dGhlcmUgaXMgY3VycmVudGx5IG5vIHdheSB0byBkaXNjb3ZlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMg Y3VycmVudGx5IG5vIHdheSB0byBkaXNjb3ZlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIHdoaWNoIFhNTCBTY2hlbWEgYXJlIHN1cHBvcnRl ZCBvbiB0aGUgZGV2aWNlLiBUaGUgTkVUQ09ORiB3b3JraW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICB3aGljaCBYTUwgU2NoZW1hIGFyZSBzdXBwb3J0ZWQgb24gdGhlIGRldmlj ZS4gVGhlIE5FVENPTkYgd29ya2luZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIGdyb3VwIHdpbGwgcHJvZHVjZSBhIHN0YW5kYXJkcy10cmFj ayBSRkMgd2l0aCBtZWNoYW5pc21zIG1ha2luZyB0aGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICBncm91cCB3aWxsIHByb2R1Y2UgYSBzdGFuZGFyZHMtdHJhY2sgUkZDIHdpdGgg bWVjaGFuaXNtcyBtYWtpbmcgdGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIGRpc2NvdmVyeSBwb3NzaWJsZSAodGhpcyBpdGVtIG1heSBi ZSBtZXJnZWQgd2l0aCAiTkVUQ09ORiBtb25pdG9yaW5nIjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgZGlzY292ZXJ5IHBvc3NpYmxlICh0aGlzIGl0ZW0gbWF5IGJlIG1lcmdlZCB3 aXRoICJORVRDT05GIG1vbml0b3JpbmciPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgaW50byBhIHNpbmdsZSBkb2N1bWVudCkuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBpbnRvIGEgc2luZ2xlIGRvY3VtZW50KS48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMCIgLz48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij5Ob3RlOiBUaGUgc2NoZW1hLWFkdmVydGlzZW1lbnQgbWF0ZXJpYWwgaGFz IGJlZW4gbWVyZ2VkIGludG8gdGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBORVRDT05GIG1vbml0b3JpbmcgZG9jdW1lbnQg YmFzZWQgb24gV0cgY29uc2Vuc3VzLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LiBORVRDT05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1l bnRhdGlvbiBleHBlcmllbmNlIHRoZXJlIGlzIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij40LiBORVRDT05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmll bmNlIHRoZXJlIGlzIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICBuZWVkIGZvciBhIHN0YW5kYXJkcyB0cmFjayBkb2N1bWVudCB0byBkZWZp bmUgTkVUQ09ORiBvdmVyIFRMUyBhcyBhbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgbmVlZCBmb3IgYSBzdGFuZGFyZHMgdHJhY2sgZG9jdW1lbnQgdG8gZGVmaW5lIE5FVENPTkYg b3ZlciBUTFMgYXMgYW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICBvcHRpb25hbCB0cmFuc3BvcnQgZm9yIHRoZSBORVRDT05GIHByb3RvY29s LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgb3B0aW9uYWwgdHJhbnNwb3J0IGZv ciB0aGUgTkVUQ09ORiBwcm90b2NvbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZD48YSBuYW1lPSJkaWZmMDAxMSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij41LiBORVRDT05GIGRlZmF1 bHQgaGFuZGxpbmc6IE5FVENPTkYgdG9kYXkgZG9lcyBub3QgZGVmaW5lIHdoZXRoZXI8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg IGRlZmF1bHQgdmFsdWVzIHNob3VsZCBiZSByZXR1cm5lZCBieSB0aGUgc2VydmVyIGluIHJlcGxp ZXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgIHRvIHJlcXVlc3RzIGZvciByZWFkaW5nIGNvbmZpZ3VyYXRpb24gYW5kIHN0YXRl IGRhdGEuIERpZmZlcmVudDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgY2xpZW50cyBoYXZlIGRpZmZlcmVudCBuZWVkcyB0byBy ZWNlaXZlIG9yIG5vdCB0byByZWNlaXZlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBkZWZhdWx0IGRhdGEuIFRoZSBORVRDT05G IHdvcmtpbmcgZ3JvdXAgd2lsbCBwcm9kdWNlIGE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHN0YW5kYXJkcy10cmFjayBSRkMg ZGVmaW5pbmcgYSBtZWZCBjbGFzcz0icmlnaHQi PiAgICB0aGlzIHNlcnZpY2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMDkiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGUgTkVUQ09ORiBub3RpZmlj YXRpb24gc3BlY2lmaWNhdGlvbiBoYXMgYmVlbiBmaW5pc2hlZCBub3cgYXMgd2VsbC48L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+SW4gdGhlIGN1 cnJlbnQgcGhhc2Ugb2YgdGhlIGluY3JlbWVudGFsIGRldmVsb3BtZW50IG9mIE5FVENPTkYgdGhl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+SW4gdGhlIGN1cnJlbnQgcGhhc2Ugb2Yg dGhlIGluY3JlbWVudGFsIGRldmVsb3BtZW50IG9mIE5FVENPTkYgdGhlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPndvcmtncm91cCB3aWxsIGZv Y3VzIG9uIGZvbGxvd2luZyBpdGVtczo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij53 b3JrZ3JvdXAgd2lsbCBmb2N1cyBvbiBmb2xsb3dpbmcgaXRlbXM6PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4xLiBGaW5lLWdyYWluIGxvY2tpbmc6IFRoZSBiYXNlIE5FVENPTkYgcHJvdG9j b2wgb25seSBwcm92aWRlcyBhIGxvY2s8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4x LiBGaW5lLWdyYWluIGxvY2tpbmc6IFRoZSBiYXNlIE5FVENPTkYgcHJvdG9jb2wgb25seSBwcm92 aWRlcyBhIGxvY2s8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICBmb3IgdGhlIGVudGlyZSBjb25maWd1cmF0aW9uIGRhdGFzdG9yZSwgd2hpY2gg aXMgbm90IGRlZW1lZCB0byBtZWV0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBm b3IgdGhlIGVudGlyZSBjb25maWd1cmF0aW9uIGRhdGFzdG9yZSwgd2hpY2ggaXMgbm90IGRlZW1l ZCB0byBtZWV0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgaW1wb3J0YW50IG9wZXJhdGlvbmFsIGFuZCBzZWN1cml0eSByZXF1aXJlbWVudHMu IFRoZSBORVRDT05GIHdvcmtpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGlt cG9ydGFudCBvcGVyYXRpb25hbCBhbmQgc2VjdXJpdHkgcmVxdWlyZW1lbnRzLiBUaGUgTkVUQ09O RiB3b3JraW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgZ3JvdXAgd2lsbCBwcm9kdWNlIGEgc3RhbmRhcmRzLXRyYWNrIFJGQyBzcGVjaWZ5 aW5nIGEgbWVjaGFuaXNtIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgZ3Jv dXAgd2lsbCBwcm9kdWNlIGEgc3RhbmRhcmRzLXRyYWNrIFJGQyBzcGVjaWZ5aW5nIGEgbWVjaGFu aXNtIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gIGZpbmUtZ3JhaW4gbG9ja2luZyBvZiB0aGUgTkVUQ09ORiBjb25maWd1cmF0aW9uIGRh dGFzdG9yZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGZpbmUtZ3JhaW4gbG9j a2luZyBvZiB0aGUgTkVUQ09ORiBjb25maWd1cmF0aW9uIGRhdGFzdG9yZS48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjIuIE5FVENPTkYgbW9uaXRvcmluZzogSXQgaXMgY29uc2lkZXJNoYW5pc20gdGhhdCBhbGxvd3M8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIE5FVENPTkYgY2xpZW50cyB0 byBjb250cm9sIHdoZXRoZXIgZGVmYXVsdCBkYXRhIGlzIHJldHVybmVkPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBieSB0aGUg bmV0Y29uZiBzZXJ2ZXIuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjYuIE5FVENPTkYgaW1wbGVtZW50YXRpb25zIGhhdmUg c2hvd24gdGhhdCB0aGUgc3BlY2lmaWNhdGlvbiBpbiBSRkM0NzQxPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBpcyBub3QgMTAw JSBjbGVhciBhbmQgaGFzIGxlYWQgdG8gZGlmZmVyZW50IGludGVycHJldGF0aW9ucyBhbmQgaW1w bGVtZW50YXRpb25zLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgQWxzbyBzb21lIGVycm9ycyBoYXZlIGJlZW4gdW5jb3ZlcmVk LiBTbyB0aGUgV0cgd2lsbCBkbyBhbiByZmM0NzQxYmlzIHdpdGg8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGZvbGxvd2luZyBj b25zdHJhaW50czo8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAtIGJ1ZyBmaXhlcyBhcmUgdG8gYmUgZG9uZTwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAtIGNsYXJpZmljYXRpb25zIGNhbiBiZSBkb25lPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIC0gbm8gZXh0ZW5zaW9u cyAoaS5lLiB3ZSBhcmUgbm90IGRvaW5nIGEgTkVUQ09ORiBWMik8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgLSBUaGUgd29y ayBjYW4gYmUgc3RhcnRlZCBiYXNlZCBvbiB0aGUgZGlzY3Vzc2lvbiBpbiBJRVRGICM3MyAoc2Vl PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICAgICAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvMDhub3Yvc2xpZGVz L25ldGNvbmYtMy5wZGYpLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48LlZCBi ZXN0IHByYWN0aWNlIGZvciBJRVRGIHdvcmtpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4yLiBORVRDT05GIG1vbml0b3Jpbmc6IEl0IGlzIGNvbnNpZGVyZWQgYmVzdCBwcmFjdGlj ZSBmb3IgSUVURiB3b3JraW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHIgYmdjb2xvcj0iZ3JheSIgPjx0ZD48L3RkPjx0aD48YSBu YW1lPSJwYXJ0LWwzIiAvPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4g bGluZSAxMTU8L2VtPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIzIiAvPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gbGluZSAxMjA8L2VtPjwvdGg+PHRk PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgaXRzZWxmIHRvIGJlIHVzZWQgdG8gbW9uaXRvciBzb21lIGFz cGVjdHMgb2YgTkVUQ09ORiBvcGVyYXRpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICBpdHNlbGYgdG8gYmUgdXNlZCB0byBtb25pdG9yIHNvbWUgYXNwZWN0cyBvZiBORVRDT05G IG9wZXJhdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjMuIFNjaGVtYSBhZHZlcnRp c2VtZW50OiBDdXJyZW50bHkgdGhlIE5FVENPTkYgcHJvdG9jb2wgaXMgYWJsZSB0bzwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjMuIFNjaGVtYSBhZHZlcnRpc2VtZW50OiBDdXJyZW50 bHkgdGhlIE5FVENPTkYgcHJvdG9jb2wgaXMgYWJsZSB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIGFkdmVydGlzZSB3aGljaCBwcm90b2Nv bCBmZWF0dXJlcyBhcmUgc3VwcG9ydGVkIG9uIGEgcGFydGljdWxhcjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgYWR2ZXJ0aXNlIHdoaWNoIHByb3RvY29sIGZlYXR1cmVzIGFyZSBz dXBwb3J0ZWQgb24gYSBwYXJ0aWN1bGFyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwg dGhlcmUgaXMgY3VycmVudGx5IG5vIHdheSB0byBkaXNjb3ZlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMg Y3VycmVudGx5IG5vIHdheSB0byBkaXNjb3ZlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIHdoaWNoIFhNTCBTY2hlbWEgYXJlIHN1cHBvcnRl ZCBvbiB0aGUgZGV2aWNlLiBUaGUgTkVUQ09ORiB3b3JraW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICB3aGljaCBYTUwgU2NoZW1hIGFyZSBzdXBwb3J0ZWQgb24gdGhlIGRldmlj ZS4gVGhlIE5FVENPTkYgd29ya2luZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIGdyb3VwIHdpbGwgcHJvZHVjZSBhIHN0YW5kYXJkcy10cmFj ayBSRkMgd2l0aCBtZWNoYW5pc21zIG1ha2luZyB0aGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICBncm91cCB3aWxsIHByb2R1Y2UgYSBzdGFuZGFyZHMtdHJhY2sgUkZDIHdpdGgg bWVjaGFuaXNtcyBtYWtpbmcgdGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIGRpc2NvdmVyeSBwb3NzaWJsZSAodGhpcyBpdGVtIG1heSBi ZSBtZXJnZWQgd2l0aCAiTkVUQ09ORiBtb25pdG9yaW5nIjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgZGlzY292ZXJ5IHBvc3NpYmxlICh0aGlzIGl0ZW0gbWF5IGJlIG1lcmdlZCB3 aXRoICJORVRDT05GIG1vbml0b3JpbmciPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgaW50byBhIHNpbmdsZSBkb2N1bWVudCkuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBpbnRvIGEgc2luZ2xlIGRvY3VtZW50KS48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMCIgLz48L3RkPjwv dHI+CiAgI3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBOb3RlOiBBIHRlY2huaWNhbCBlcnJhdGEgaGFz IGJlZW4gcG9zdGVkIG9uIHJmYzQ3NDIuIElmIHRoZSB3b3JrIG9uPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICByZmM0NzQxYmlz IHVuY292ZXJzIGFueSBhZGRpdGlvbmFsIGZpeGVzL2NsYXJpZmljYXRpb25zIHRoYXQgbmVlZDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgdG8gYmUgbWFkZSB0byByZmM0NzQyLCB0aGUgV0cgbWF5IGNvbnNpZGVyIHRvIGFsc28g ZG8gYSByZmM0NzQyYmlzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhcyBwYXJ0IG9mIHRoaXMgd29yay1pdGVtLjwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5UaGUgZm9sbG93 aW5nIGl0ZW1zIGhhdmUgYmVlbiBpZGVudGlmaWVkIGFzIGltcG9ydGFudCBidXQgYXJlIGN1cnJl bnRseTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlRoZSBmb2xsb3dpbmcgaXRlbXMg aGF2ZSBiZWVuIGlkZW50aWZpZWQgYXMgaW1wb3J0YW50IGJ1dCBhcmUgY3VycmVudGx5PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPm5vdCBjb25z aWRlcmVkIGluIHNjb3BlIGZvciByZS1jaGFydGVyaW5nIGFuZCBtYXkgYmUgY2FuZGlkYXRlcyBm b3Igd29yazwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPm5vdCBjb25zaWRlcmVkIGlu IHNjb3BlIGZvciByZS1jaGFydGVyaW5nIGFuZCBtYXkgYmUgY2FuZGlkYXRlcyBmb3Igd29yazwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij53aGVu IHRoZXJlIGlzIGNvbW11bml0eSBjb25zZW5zdXMgdG8gdGFrZSB0aGVtIG9uOjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPndoZW4gdGhlcmUgaXMgY29tbXVuaXR5IGNvbnNlbnN1cyB0 byB0YWtlIHRoZW0gb246PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMTIiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4tIDxzcGFuIGNsYXNzPSJkZWxldGUi PkdlbmVyYWwgaW1wcm92ZW1lbnRzIHRvIHRoZSBiYXNlIHByb3RvY29sPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4tIDxzcGFuIGNsYXNzPSJpbnNlcnQiPk5FVENPTkYg Tm90aWZpY2F0aW9uIGNvbnRlbnQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPi0gQWNjZXNzIENvbnRyb2wgcmVxdWlyZW1lbnRzPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+LSBBY2Nlc3MgQ29udHJvbCByZXF1aXJlbWVu dHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ LSBORVRDT05GIGFjY2VzcyB0byBTTUktYmFzZWQgTUlCIGRhdGE8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4tIE5FVENPTkYgYWNjZXNzIHRvIFNNSS1iYXNlZCBNSUIgZGF0YTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwMTMiIC8+PC90ZD48L3RyPgogICAgCAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij5Ob3RlOiBUaGUgc2NoZW1hLWFkdmVydGlzZW1lbnQgbWF0ZXJpYWwgaGFz IGJlZW4gbWVyZ2VkIGludG8gdGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBORVRDT05GIG1vbml0b3JpbmcgZG9jdW1lbnQg YmFzZWQgb24gV0cgY29uc2Vuc3VzLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LiBORVRDT05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1l bnRhdGlvbiBleHBlcmllbmNlIHRoZXJlIGlzIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij40LiBORVRDT05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmll bmNlIHRoZXJlIGlzIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICBuZWVkIGZvciBhIHN0YW5kYXJkcyB0cmFjayBkb2N1bWVudCB0byBkZWZp bmUgTkVUQ09ORiBvdmVyIFRMUyBhcyBhbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgbmVlZCBmb3IgYSBzdGFuZGFyZHMgdHJhY2sgZG9jdW1lbnQgdG8gZGVmaW5lIE5FVENPTkYg b3ZlciBUTFMgYXMgYW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICBvcHRpb25hbCB0cmFuc3BvcnQgZm9yIHRoZSBORVRDT05GIHByb3RvY29s LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgb3B0aW9uYWwgdHJhbnNwb3J0IGZv ciB0aGUgTkVUQ09ORiBwcm90b2NvbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZD48YSBuYW1lPSJkaWZmMDAxMSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij41LiBORVRDT05GIGRlZmF1 bHQgaGFuZGxpbmc6IE5FVENPTkYgdG9kYXkgZG9lcyBub3QgZGVmaW5lIHdoZXRoZXI8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg IGRlZmF1bHQgdmFsdWVzIHNob3VsZCBiZSByZXR1cm5lZCBieSB0aGUgc2VydmVyIGluIHJlcGxp ZXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgIHRvIHJlcXVlc3RzIGZvciByZWFkaW5nIGNvbmZpZ3VyYXRpb24gYW5kIHN0YXRl IGRhdGEuIERpZmZlcmVudDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgY2xpZW50cyBoYXZlIGRpZmZlcmVudCBuZWVkcyB0byBy ZWNlaXZlIG9yIG5vdCB0byByZWNlaXZlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBkZWZhdWx0IGRhdGEuIFRoZSBORVRDT05G IHdvcmtpbmcgZ3JvdXAgd2lsbCBwcm9kdWNlIGE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHN0YW5kYXJkcy10cmFjayBSRkMg ZGVmaW5pbmcgYSBtZWNoYW5pICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+R29hbHMgYW5kIE1pbGVzdG9uZXM6PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ R29hbHMgYW5kIE1pbGVzdG9uZXM6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJV29ya2luZyBHcm91cCBmb3JtZWQ8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVdvcmtpbmcgR3JvdXAgZm9ybWVkPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJ U3VibWl0IGluaXRpYWwgTmV0Y29uZiBQcm90b2NvbCBkcmFmdDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPkRvbmUJICAJU3VibWl0IGluaXRpYWwgTmV0Y29uZiBQcm90b2NvbCBkcmFm dDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5E b25lCSAgCVN1Ym1pdCBpbml0aWFsIE5ldGNvbmYgb3ZlciAodHJhbnNwb3J0LVRCRCkgZHJhZnQ8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVN1Ym1pdCBpbml0aWFsIE5l dGNvbmYgb3ZlciAodHJhbnNwb3J0LVRCRCkgZHJhZnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlCZWdpbiBXb3JraW5nIEdyb3Vw IExhc3QgQ2FsbCBmb3IgdGhlIE5ldGNvbmYgUHJvdG9jb2wgZHJhZnQ8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCUJlZ2luIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxsIGZv ciB0aGUgTmV0Y29uZiBQcm90b2NvbCBkcmFmdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTQiIC8+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj5Eb25lCSAgCUJlZ2luIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxsIGZv ciB0aGUgTmV0Y29uZiBvdmVyICh0cmFuc3BvcnQtVEJEKSBkcmFmdDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj5Eb25lICAgQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9y IHRoZSBOZXRjb25mIG92ZXIgKHRyYW5zcG9ydC1UQkQpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgICAgICAgICAgIGRyYWZ0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2Yg dGhlIE5ldGNvbmYgUHJvdG9jb2wgZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRjb25m IFByb3RvY29sIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2Yg dGhlIE5ldGNvbmYgb3ZlciBTT0FQIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBvZiB0aGUgTmV0Y29u ZiBvdmVyIFNPQVAgZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBv ZiB0aGUgTmV0Y29uZiBvdmVyIEJFRVAgZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRj b25mIG92ZXIgQkVFUCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9u IG9mIHRoZSBOZXRjb25mIG92ZXIgU1NIIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBvZiB0aGUgTmV0 Y29uZiBvdmVyIFNTSCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkIGNsYXNzPSJc20gdGhhdCBhbGxvd3M8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIE5FVENPTkYgY2xpZW50cyB0 byBjb250cm9sIHdoZXRoZXIgZGVmYXVsdCBkYXRhIGlzIHJldHVybmVkPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBieSB0aGUg bmV0Y29uZiBzZXJ2ZXIuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjYuIE5FVENPTkYgaW1wbGVtZW50YXRpb25zIGhhdmUg c2hvd24gdGhhdCB0aGUgc3BlY2lmaWNhdGlvbiBpbiBSRkM0NzQxPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBpcyBub3QgMTAw JSBjbGVhciBhbmQgaGFzIGxlYWQgdG8gZGlmZmVyZW50IGludGVycHJldGF0aW9ucyBhbmQgaW1w bGVtZW50YXRpb25zLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgQWxzbyBzb21lIGVycm9ycyBoYXZlIGJlZW4gdW5jb3ZlcmVk LiBTbyB0aGUgV0cgd2lsbCBkbyBhbiByZmM0NzQxYmlzIHdpdGg8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGZvbGxvd2luZyBj b25zdHJhaW50czo8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAtIGJ1ZyBmaXhlcyBhcmUgdG8gYmUgZG9uZTwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAtIGNsYXJpZmljYXRpb25zIGNhbiBiZSBkb25lPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIC0gbm8gZXh0ZW5zaW9u cyAoaS5lLiB3ZSBhcmUgbm90IGRvaW5nIGEgTkVUQ09ORiBWMik8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgLSBUaGUgd29y ayBjYW4gYmUgc3RhcnRlZCBiYXNlZCBvbiB0aGUgZGlzY3Vzc2lvbiBpbiBJRVRGICM3MyAoc2Vl PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICAgICAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvMDhub3Yvc2xpZGVz L25ldGNvbmYtMy5wZGYpLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjxsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCVVwZGF0ZSBjaGFydGVyPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAlVcGRhdGUgY2hhcnRlcjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCVN1 Ym1pdCBmaXJzdCB2ZXJzaW9uIG9mIE5FVENPTkYgTm90aWZpY2F0aW9ucyBkb2N1bWVudDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkRvbmUJICAJU3VibWl0IGZpcnN0IHZlcnNpb24g b2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJQmVnaW4gV0dMQyBvZiBORVRD T05GIE5vdGlmaWNhdGlvbnMgZG9jdW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij5Eb25lCSAgCUJlZ2luIFdHTEMgb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZD48YSBuYW1lPSJkaWZmMDAxNSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkRvbmUJICAJU3VibWl0 IGZpbmFsIHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50IHRvIElFU0cg Zm9yIGNvbnNpZGVyYXRpb24gYXMgUHJvcG9zZWQgU3RhbmRhcmQ8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+RG9uZSAgIFN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIE5FVENPTkYgTm90 aWZpY2F0aW9ucyBkb2N1bWVudCB0byBJRVNHPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+RG9uZQkgIAktMDAgZHJhZnQgZm9yIDxzcGFuIGNs YXNzPSJkZWxldGUiPk5FVENPTkYgTW9uaXRvcmluZzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgICAgICAgICAgZm9yIGNvbnNpZGVyYXRpb24gYXMgUHJvcG9zZWQg U3RhbmRhcmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj5Eb25lCSAgCS0wMCBkcmFmdCBmb3IgRmluZTwv c3Bhbj4gR3JhaW4gTG9ja2luZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5Eb25l ICAgLTAwIGRyYWZ0IGZvciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5maW5lPC9zcGFuPiBHcmFpbiBM b2NraW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPkRvbmUJICAJLTAwIGRyYWZ0IGZvciBORVRDT05GIG92ZXIgVExTPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAktMDAgZHJhZnQgZm9yIE5FVENPTkYgb3ZlciBUTFM8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkPjxhIG5hbWU9ImRpZmYwMDE2IiAvPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkRvbmUgICAtMDAgZHJh ZnQgZm9yIE5FVENPTkYgTW9uaXRvcmluZzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAktMDAgZHJhZnQgZm9yIFNjaGVt YSBBZHZlcnRpc2VtZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAkt MDAgZHJhZnQgZm9yIFNjaGVtYSBBZHZlcnRpc2VtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNyIg Lz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPk1hciAyMDA4PC9zcGFu PgkgIAlFYXJseSBSZXZpZXcgb2YgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFwcHJvYWNoIChmb3Ig TkVUQ09ORiBvdmVyIFRMUykgd2l0aCB0aGUgc2VjdXJpdHkgY29tbXVuaXR5IGF0IElFVEYgNzE8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+RG9u ZTwvc3Bhbj4gICBFYXJseSBSZXZpZXcgb2YgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFwcHJvYWNo IChmb3IgTkVUQ09ORiBvdmVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+QXVnIDIwMDg8L3NwYW4+CSAg CVdHIExhc3QgQ2FsbCBvbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ORVRDT05GIE1vbml0b3Jpbmc8 L3NwYW4+IGFmdGVyIElFVEY3MjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAg I0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBOb3RlOiBBIHRlY2huaWNhbCBlcnJhdGEgaGFz IGJlZW4gcG9zdGVkIG9uIHJmYzQ3NDIuIElmIHRoZSB3b3JrIG9uPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICByZmM0NzQxYmlz IHVuY292ZXJzIGFueSBhZGRpdGlvbmFsIGZpeGVzL2NsYXJpZmljYXRpb25zIHRoYXQgbmVlZDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgdG8gYmUgbWFkZSB0byByZmM0NzQyLCB0aGUgV0cgbWF5IGNvbnNpZGVyIHRvIGFsc28g ZG8gYSByZmM0NzQyYmlzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhcyBwYXJ0IG9mIHRoaXMgd29yay1pdGVtLjwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5UaGUgZm9sbG93 aW5nIGl0ZW1zIGhhdmUgYmVlbiBpZGVudGlmaWVkIGFzIGltcG9ydGFudCBidXQgYXJlIGN1cnJl bnRseTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlRoZSBmb2xsb3dpbmcgaXRlbXMg aGF2ZSBiZWVuIGlkZW50aWZpZWQgYXMgaW1wb3J0YW50IGJ1dCBhcmUgY3VycmVudGx5PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPm5vdCBjb25z aWRlcmVkIGluIHNjb3BlIGZvciByZS1jaGFydGVyaW5nIGFuZCBtYXkgYmUgY2FuZGlkYXRlcyBm b3Igd29yazwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPm5vdCBjb25zaWRlcmVkIGlu IHNjb3BlIGZvciByZS1jaGFydGVyaW5nIGFuZCBtYXkgYmUgY2FuZGlkYXRlcyBmb3Igd29yazwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij53aGVu IHRoZXJlIGlzIGNvbW11bml0eSBjb25zZW5zdXMgdG8gdGFrZSB0aGVtIG9uOjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPndoZW4gdGhlcmUgaXMgY29tbXVuaXR5IGNvbnNlbnN1cyB0 byB0YWtlIHRoZW0gb246PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMTIiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4tIDxzcGFuIGNsYXNzPSJkZWxldGUi PkdlbmVyYWwgaW1wcm92ZW1lbnRzIHRvIHRoZSBiYXNlIHByb3RvY29sPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4tIDxzcGFuIGNsYXNzPSJpbnNlcnQiPk5FVENPTkYg Tm90aWZpY2F0aW9uIGNvbnRlbnQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPi0gQWNjZXNzIENvbnRyb2wgcmVxdWlyZW1lbnRzPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+LSBBY2Nlc3MgQ29udHJvbCByZXF1aXJlbWVu dHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ LSBORVRDT05GIGFjY2VzcyB0byBTTUktYmFzZWQgTUlCIGRhdGE8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4tIE5FVENPTkYgYWNjZXNzIHRvIFNNSS1iYXNlZCBNSUIgZGF0YTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwMTMiIC8+PC90ZD48L3RyPgogICAgICA8dHCAgICAgICBUTFMpIHdpdGggdGhlIHNlY3VyaXR5IGNvbW11bml0eSBhdCBJRVRGIDcxPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+QXVnIDIwMDg8L3NwYW4+CSAgCVdHIExhc3QgQ2FsbCBvbiA8c3BhbiBj bGFzcz0iZGVsZXRlIj5TY2hlbWEgQWR2ZXJ0aXNlbWVudDwvc3Bhbj4gYWZ0ZXIgSUVURjcyPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPk4uQS48 L3NwYW4+ICAgICBXRyBMYXN0IENhbGwgb24gPHNwYW4gY2xhc3M9Imluc2VydCI+U2NoZW1hIEFk dmVydGlzZW1lbnQ8L3NwYW4+IGFmdGVyIElFVEY3MjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPkF1Zzwv c3Bhbj4gMjAwOAkgIAlXRyBMYXN0IENhbGwgb24gRmluZSBHcmFpbiBMb2NraW5nIGFmdGVyIDxz cGFuIGNsYXNzPSJkZWxldGUiPklFVEY3Mjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+U2NoZW1hIEFkdmVydGlz ZW1lbnQgaGFzIGJlZW4gbWVyZ2VkIGludG8gTW9uaXRvcmluZzwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj5BdWc8L3NwYW4+IDIwMDgJICAJV0cgTGFzdCBDYWxsIG9uIE5FVENPTkYgPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+b3ZlciBUTFM8L3NwYW4+IGFmdGVyIDxzcGFuIGNsYXNzPSJkZWxldGUi PklFVEY3Mjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+RG9uZTwvc3Bhbj4gICAgV0cgTGFzdCBDYWxsIG9uIDxzcGFuIGNsYXNzPSJp bnNlcnQiPk5FVENPTkYgb3ZlciBUTFM8L3NwYW4+IGFmdGVyIElFVEY3MjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPkF1ZyAyMDA4CSAgCVNlbmQgZm91ciBkb2N1bWVudHM8L3NwYW4+IHRvIDxzcGFuIGNs YXNzPSJkZWxldGUiPnRoZTwvc3Bhbj4gSUVTRyBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y29u c2lkZXJhdGlvbjwvc3Bhbj4gYXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cHJvcG9zZWQgc3RhbmRh cmRzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij5Eb25lICAgIE5ldGNvbmYgb3ZlciBUTFMgdG8gSUVTRyBmb3IgY29uc2lkZXJhdGlv biBhcyBQcm9wb3NlZCBTdGFuZGFyZHM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkRlYzwvc3Bhbj4gMjAwOCAgV0cgTGFzdCBDYWxs IG9uIEZpbmUgR3JhaW4gTG9ja2luZyBhZnRlciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5JRVRGNzM8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPkRlYzwvc3Bhbj4gMjAwOCAgPHNwYW4gY2xhc3M9Imluc2VydCI+U2VuZCBQYXJ0aWFsIExv Y2tpbmcgdG8gSUVTRyBmb3IgY29uc2lkZXJhdGlvbiBhcyBQcm9wb3NlZCBTdGFuZGFyZHM8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PkphbiAyMDA5ICAgSW5pdGlhbCBXRyBkcmFmdCBmb3Igd2l0aC1kZWZhdWx0cyBjYXBhYmlsaXR5 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5GZWIgMjAwOSAgIEluaXRpYWwgV0cgZHJhZnQgZm9yIHJmYzQ3NDFiaXM8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPk1hciAy MDA5PC9zcGFuPiAgIFdHIExhc3QgQ2FsbCBvbiBORVRDT05GIDxzcGFuIGNsYXNzPSJpbnNlcnQi Pk1vbml0b3Jpbmc8L3NwYW4+IGFmdGVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklFVEY3Mzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+R29hbHMgYW5kIE1pbGVzdG9uZXM6PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ R29hbHMgYW5kIE1pbGVzdG9uZXM6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJV29ya2luZyBHcm91cCBmb3JtZWQ8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVdvcmtpbmcgR3JvdXAgZm9ybWVkPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJ U3VibWl0IGluaXRpYWwgTmV0Y29uZiBQcm90b2NvbCBkcmFmdDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPkRvbmUJICAJU3VibWl0IGluaXRpYWwgTmV0Y29uZiBQcm90b2NvbCBkcmFm dDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5E b25lCSAgCVN1Ym1pdCBpbml0aWFsIE5ldGNvbmYgb3ZlciAodHJhbnNwb3J0LVRCRCkgZHJhZnQ8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVN1Ym1pdCBpbml0aWFsIE5l dGNvbmYgb3ZlciAodHJhbnNwb3J0LVRCRCkgZHJhZnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlCZWdpbiBXb3JraW5nIEdyb3Vw IExhc3QgQ2FsbCBmb3IgdGhlIE5ldGNvbmYgUHJvdG9jb2wgZHJhZnQ8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCUJlZ2luIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxsIGZv ciB0aGUgTmV0Y29uZiBQcm90b2NvbCBkcmFmdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTQiIC8+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj5Eb25lCSAgCUJlZ2luIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxsIGZv ciB0aGUgTmV0Y29uZiBvdmVyICh0cmFuc3BvcnQtVEJEKSBkcmFmdDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj5Eb25lICAgQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9y IHRoZSBOZXRjb25mIG92ZXIgKHRyYW5zcG9ydC1UQkQpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgICAgICAgICAgIGRyYWZ0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2Yg dGhlIE5ldGNvbmYgUHJvdG9jb2wgZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRjb25m IFByb3RvY29sIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2Yg dGhlIE5ldGNvbmYgb3ZlciBTT0FQIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBvZiB0aGUgTmV0Y29u ZiBvdmVyIFNPQVAgZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBv ZiB0aGUgTmV0Y29uZiBvdmVyIEJFRVAgZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRj b25mIG92ZXIgQkVFUCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9u IG9mIHRoZSBOZXRjb25mIG92ZXIgU1NIIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBvZiB0aGUgTmV0 Y29uZiBvdmVyIFNTSCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkIGNsYXNzPSJsaW5lbPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ QXByIDIwMDkgICBXRyBMYXN0IENhbGwgb24gcmZjNDc0MWJpczwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+QXByIDIwMDkgICBXRyBM YXN0IENhbGwgb24gd2l0aC1kZWZhdWx0czwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+SnVuIDIwMDkgICByZmM0NzQxYmlzPC9zcGFu PiB0byBJRVNHIGZvciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jb25zaWRlcmF0aW9ucyBhcyBQcm9w b3NlZCBTdGFuZGFyZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+SnVuIDIwMDkgICB3aXRoLWRlZmF1bHRzIGNhcGFiaWxpdHkgdG8g SUVTRyBmb3IgY29uc2lkZXJhdGlvbnM8L3NwYW4+IGFzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlBy b3Bvc2VkIFN0YW5kYXJkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CgogICAgIDx0cj48dGQ+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkPjwvdGQ+PC90cj4KICAgICA8dHIgYmdj b2xvcj0iZ3JheSI+PHRoIGNvbHNwYW49IjUiIGFsaWduPSJjZW50ZXIiPjxhIG5hbWU9ImVuZCI+ Jm5ic3A7RW5kIG9mIGNoYW5nZXMuIDE3IGNoYW5nZSBibG9ja3MuJm5ic3A7PC9hPjwvdGg+PC90 cj4KICAgICA8dHIgY2xhc3M9InN0YXRzIj48dGQ+PC90ZD48dGg+PGk+MTcgbGluZXMgY2hhbmdl ZCBvciBkZWxldGVkPC9pPjwvdGg+PHRoPjxpPiA8L2k+PC90aD48dGg+PGk+NTMgbGluZXMgY2hh bmdlZCBvciBhZGRlZDwvaT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgPHRyPjx0ZCBjb2xzcGFu PSI1IiBhbGlnbj0iY2VudGVyIiBjbGFzcz0ic21hbGwiPjxici8+VGhpcyBodG1sIGRpZmYgd2Fz IHByb2R1Y2VkIGJ5IHJmY2RpZmYgMS4zNS4gVGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2YWlsYWJs ZSBmcm9tIDxhIGhyZWY9Imh0dHA6Ly93d3cudG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi8i ID5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi88L2E+IDwvdGQ+PC90cj4KICAg PC90YWJsZT4KICAgPC9ib2R5PgogICA8L2h0bWw+Cg== ------_=_NextPart_001_01C95BAD.982040D1 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------_=_NextPart_001_01C95BAD.982040D1-- m8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCVVwZGF0ZSBjaGFydGVyPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAlVcGRhdGUgY2hhcnRlcjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCVN1 Ym1pdCBmaXJzdCB2ZXJzaW9uIG9mIE5FVENPTkYgTm90aWZpY2F0aW9ucyBkb2N1bWVudDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkRvbmUJICAJU3VibWl0IGZpcnN0IHZlcnNpb24g b2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJQmVnaW4gV0dMQyBvZiBORVRD T05GIE5vdGlmaWNhdGlvbnMgZG9jdW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij5Eb25lCSAgCUJlZ2luIFdHTEMgb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZD48YSBuYW1lPSJkaWZmMDAxNSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkRvbmUJICAJU3VibWl0 IGZpbmFsIHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50IHRvIElFU0cg Zm9yIGNvbnNpZGVyYXRpb24gYXMgUHJvcG9zZWQgU3RhbmRhcmQ8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+RG9uZSAgIFN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIE5FVENPTkYgTm90 aWZpY2F0aW9ucyBkb2N1bWVudCB0byBJRVNHPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+RG9uZQkgIAktMDAgZHJhZnQgZm9yIDxzcGFuIGNs YXNzPSJkZWxldGUiPk5FVENPTkYgTW9uaXRvcmluZzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgICAgICAgICAgZm9yIGNvbnNpZGVyYXRpb24gYXMgUHJvcG9zZWQg U3RhbmRhcmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj5Eb25lCSAgCS0wMCBkcmFmdCBmb3IgRmluZTwv c3Bhbj4gR3JhaW4gTG9ja2luZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5Eb25l ICAgLTAwIGRyYWZ0IGZvciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5maW5lPC9zcGFuPiBHcmFpbiBM b2NraW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPkRvbmUJICAJLTAwIGRyYWZ0IGZvciBORVRDT05GIG92ZXIgVExTPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAktMDAgZHJhZnQgZm9yIE5FVENPTkYgb3ZlciBUTFM8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkPjxhIG5hbWU9ImRpZmYwMDE2IiAvPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkRvbmUgICAtMDAgZHJh ZnQgZm9yIE5FVENPTkYgTW9uaXRvcmluZzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAktMDAgZHJhZnQgZm9yIFNjaGVt YSBBZHZlcnRpc2VtZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAkt MDAgZHJhZnQgZm9yIFNjaGVtYSBBZHZlcnRpc2VtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNyIg Lz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPk1hciAyMDA4PC9zcGFu PgkgIAlFYXJseSBSZXZpZXcgb2YgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFwcHJvYWNoIChmb3Ig TkVUQ09ORiBvdmVyIFRMUykgd2l0aCB0aGUgc2VjdXJpdHkgY29tbXVuaXR5IGF0IElFVEYgNzE8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+RG9u ZTwvc3Bhbj4gICBFYXJseSBSZXZpZXcgb2YgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFwcHJvYWNo IChmb3IgTkVUQ09ORiBvdmVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+QXVnIDIwMDg8L3NwYW4+CSAg CVdHIExhc3QgQ2FsbCBvbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ORVRDT05GIE1vbml0b3Jpbmc8 L3NwYW4+IGFmdGVyIElFVEY3MjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAg ICAgICAgICBUTFMpIHdpdGggdGhlIHNlY3VyaXR5IGNvbW11bml0eSBhdCBJRVRGIDcxPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+QXVnIDIwMDg8L3NwYW4+CSAgCVdHIExhc3QgQ2FsbCBvbiA8c3BhbiBj bGFzcz0iZGVsZXRlIj5TY2hlbWEgQWR2ZXJ0aXNlbWVudDwvc3Bhbj4gYWZ0ZXIgSUVURjcyPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPk4uQS48 L3NwYW4+ICAgICBXRyBMYXN0IENhbGwgb24gPHNwYW4gY2xhc3M9Imluc2VydCI+U2NoZW1hIEFk dmVydGlzZW1lbnQ8L3NwYW4+IGFmdGVyIElFVEY3MjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPkF1Zzwv c3Bhbj4gMjAwOAkgIAlXRyBMYXN0IENhbGwgb24gRmluZSBHcmFpbiBMb2NraW5nIGFmdGVyIDxz cGFuIGNsYXNzPSJkZWxldGUiPklFVEY3Mjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+U2NoZW1hIEFkdmVydGlz ZW1lbnQgaGFzIGJlZW4gbWVyZ2VkIGludG8gTW9uaXRvcmluZzwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj5BdWc8L3NwYW4+IDIwMDgJICAJV0cgTGFzdCBDYWxsIG9uIE5FVENPTkYgPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+b3ZlciBUTFM8L3NwYW4+IGFmdGVyIDxzcGFuIGNsYXNzPSJkZWxldGUi PklFVEY3Mjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+RG9uZTwvc3Bhbj4gICAgV0cgTGFzdCBDYWxsIG9uIDxzcGFuIGNsYXNzPSJp bnNlcnQiPk5FVENPTkYgb3ZlciBUTFM8L3NwYW4+IGFmdGVyIElFVEY3MjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPkF1ZyAyMDA4CSAgCVNlbmQgZm91ciBkb2N1bWVudHM8L3NwYW4+IHRvIDxzcGFuIGNs YXNzPSJkZWxldGUiPnRoZTwvc3Bhbj4gSUVTRyBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y29u c2lkZXJhdGlvbjwvc3Bhbj4gYXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cHJvcG9zZWQgc3RhbmRh cmRzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij5Eb25lICAgIE5ldGNvbmYgb3ZlciBUTFMgdG8gSUVTRyBmb3IgY29uc2lkZXJhdGlv biBhcyBQcm9wb3NlZCBTdGFuZGFyZHM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkRlYzwvc3Bhbj4gMjAwOCAgV0cgTGFzdCBDYWxs IG9uIEZpbmUgR3JhaW4gTG9ja2luZyBhZnRlciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5JRVRGNzM8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPkRlYzwvc3Bhbj4gMjAwOCAgPHNwYW4gY2xhc3M9Imluc2VydCI+U2VuZCBQYXJ0aWFsIExv Y2tpbmcgdG8gSUVTRyBmb3IgY29uc2lkZXJhdGlvbiBhcyBQcm9wb3NlZCBTdGFuZGFyZHM8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PkphbiAyMDA5ICAgSW5pdGlhbCBXRyBkcmFmdCBmb3Igd2l0aC1kZWZhdWx0cyBjYXBhYmlsaXR5 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5GZWIgMjAwOSAgIEluaXRpYWwgV0cgZHJhZnQgZm9yIHJmYzQ3NDFiaXM8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPk1hciAy MDA5PC9zcGFuPiAgIFdHIExhc3QgQ2FsbCBvbiBORVRDT05GIDxzcGFuIGNsYXNzPSJpbnNlcnQi Pk1vbml0b3Jpbmc8L3NwYW4+IGFmdGVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklFVEY3Mzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ QXByIDIwMDkgICBXRyBMYXN0IENhbGwgb24gcmZjNDc0MWJpczwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+QXByIDIwMDkgICBXRyBM YXN0IENhbGwgb24gd2l0aC1kZWZhdWx0czwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+SnVuIDIwMDkgICByZmM0NzQxYmlzPC9zcGFu PiB0byBJRVNHIGZvciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jb25zaWRlcmF0aW9ucyBhcyBQcm9w b3NlZCBTdGFuZGFyZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+SnVuIDIwMDkgICB3aXRoLWRlZmF1bHRzIGNhcGFiaWxpdHkgdG8g SUVTRyBmb3IgY29uc2lkZXJhdGlvbnM8L3NwYW4+IGFzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlBy b3Bvc2VkIFN0YW5kYXJkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CgogICAgIDx0cj48dGQ+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkPjwvdGQ+PC90cj4KICAgICA8dHIgYmdj b2xvcj0iZ3JheSI+PHRoIGNvbHNwYW49IjUiIGFsaWduPSJjZW50ZXIiPjxhIG5hbWU9ImVuZCI+ Jm5ic3A7RW5kIG9mIGNoYW5nZXMuIDE3IGNoYW5nZSBibG9ja3MuJm5ic3A7PC9hPjwvdGg+PC90 cj4KICAgICA8dHIgY2xhc3M9InN0YXRzIj48dGQ+PC90ZD48dGg+PGk+MTcgbGluZXMgY2hhbmdl ZCBvciBkZWxldGVkPC9pPjwvdGg+PHRoPjxpPiA8L2k+PC90aD48dGg+PGk+NTMgbGluZXMgY2hh bmdlZCBvciBhZGRlZDwvaT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgPHRyPjx0ZCBjb2xzcGFu PSI1IiBhbGlnbj0iY2VudGVyIiBjbGFzcz0ic21hbGwiPjxici8+VGhpcyBodG1sIGRpZmYgd2Fz IHByb2R1Y2VkIGJ5IHJmY2RpZmYgMS4zNS4gVGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2YWlsYWJs ZSBmcm9tIDxhIGhyZWY9Imh0dHA6Ly93d3cudG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi8i ID5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi88L2E+IDwvdGQ+PC90cj4KICAg PC90YWJsZT4KICAgPC9ib2R5PgogICA8L2h0bWw+Cg== ------_=_NextPart_001_01C95BAD.982040D1 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------_=_NextPart_001_01C95BAD.982040D1-- From netconf-bounces@ietf.org Thu Dec 11 08:41:04 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 10F3E3A68AA; Thu, 11 Dec 2008 08:41:04 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BABBA3A68AA for ; Thu, 11 Dec 2008 08:41:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.478 X-Spam-Level: X-Spam-Status: No, score=-2.478 tagged_above=-999 required=5 tests=[AWL=0.121, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ojboqVkBAUuT for ; Thu, 11 Dec 2008 08:41:01 -0800 (PST) Received: from nj300815-nj-outbound.avaya.com (nj300815-nj-outbound.net.avaya.com [198.152.12.100]) by core3.amsl.com (Postfix) with ESMTP id 3523E3A684C for ; Thu, 11 Dec 2008 08:41:00 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.33,753,1220241600"; d="scan'208";a="145188238" Received: from unknown (HELO nj300815-nj-erheast.avaya.com) ([198.152.6.5]) by nj300815-nj-outbound.avaya.com with ESMTP; 11 Dec 2008 11:40:54 -0500 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by nj300815-nj-erheast-out.avaya.com with ESMTP; 11 Dec 2008 11:40:54 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Thu, 11 Dec 2008 17:40:52 +0100 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Request for charter change Thread-Index: AclbdHZf/bbsfx3rRWKprcOcWgquqgAAfHCQAA4llOA= References: From: "Romascanu, Dan (Dan)" To: "Ersue, Mehmet (NSN - DE/Munich)" , , Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org I would suggest that we let a few days for the WG members to read and raise objections if any, before bringing this to the IESG for approval. If I am not mistaken it is the firs time the new charter text is distributed on the list. Dan > -----Original Message----- > From: Ersue, Mehmet (NSN - DE/Munich) [mailto:mehmet.ersue@nsn.com] > Sent: Thursday, December 11, 2008 6:29 PM > To: Romascanu, Dan (Dan); rbonica@juniper.net; netconf@ietf.org > Subject: Request for charter change > > > Dear ADs (and WG), > > based on the consensus after IETF 73 we prepared an update > for the NETCONF WG charter. > > Dan, Ron: Could you please approve that the extended charter > text be posted as our current WG charter page and forward it > to iesg-secretary if approve <<081211_NETCONF WG Charter > text.txt>> d <> ? > > Thank you. > > Bert and Mehmet > > Attached is the new charter and a rfcdiff of old and new charter. > And here is the main body of the charter text: > > Configuration of networks of devices has become a critiFrom netconf-bounces@ietf.org Thu Dec 11 08:41:04 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 10F3E3A68AA; Thu, 11 Dec 2008 08:41:04 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BABBA3A68AA for ; Thu, 11 Dec 2008 08:41:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.478 X-Spam-Level: X-Spam-Status: No, score=-2.478 tagged_above=-999 required=5 tests=[AWL=0.121, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ojboqVkBAUuT for ; Thu, 11 Dec 2008 08:41:01 -0800 (PST) Received: from nj300815-nj-outbound.avaya.com (nj300815-nj-outbound.net.avaya.com [198.152.12.100]) by core3.amsl.com (Postfix) with ESMTP id 3523E3A684C for ; Thu, 11 Dec 2008 08:41:00 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.33,753,1220241600"; d="scan'208";a="145188238" Received: from unknown (HELO nj300815-nj-erheast.avaya.com) ([198.152.6.5]) by nj300815-nj-outbound.avaya.com with ESMTP; 11 Dec 2008 11:40:54 -0500 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by nj300815-nj-erheast-out.avaya.com with ESMTP; 11 Dec 2008 11:40:54 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Thu, 11 Dec 2008 17:40:52 +0100 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Request for charter change Thread-Index: AclbdHZf/bbsfx3rRWKprcOcWgquqgAAfHCQAA4llOA= References: From: "Romascanu, Dan (Dan)" To: "Ersue, Mehmet (NSN - DE/Munich)" , , Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org I would suggest that we let a few days for the WG members to read and raise objections if any, before bringing this to the IESG for approval. If I am not mistaken it is the firs time the new charter text is distributed on the list. Dan > -----Original Message----- > From: Ersue, Mehmet (NSN - DE/Munich) [mailto:mehmet.ersue@nsn.com] > Sent: Thursday, December 11, 2008 6:29 PM > To: Romascanu, Dan (Dan); rbonica@juniper.net; netconf@ietf.org > Subject: Request for charter change > > > Dear ADs (and WG), > > based on the consensus after IETF 73 we prepared an update > for the NETCONF WG charter. > > Dan, Ron: Could you please approve that the extended charter > text be posted as our current WG charter page and forward it > to iesg-secretary if approve <<081211_NETCONF WG Charter > text.txt>> d <> ? > > Thank you. > > Bert and Mehmet > > Attached is the new charter and a rfcdiff of old and new charter. > And here is the main body of the charter text: > > Configuration of networks of devices has become acal > requirement for operators in today's highly interoperable > networks. Operators from large to small have developed their > own mechanisms or used vendor specific mechanisms to transfer > configuration data to and from a device, and for examining > device state information which may impact the configuration. > Each of these mechanisms may be different in various aspects, > such as session establishment, user authentication, > configuration data exchange, and error responses. > > The NETCONF Working Group is chartered to produce a protocol > suitable for network configuration, with the following > characteristics: > > - Provides retrieval mechanisms which can differentiate between > configuration data and non-configuration data > - Is extensible enough so that vendors will provide access to all > configuration data on the device using a single protocol > - Has a programmatic interface (avoids screen scraping and > formatting-related changes between releases) > - Uses a textual data representation, that can be easily manipulated > using non-specialized text manipulation tools. > - Supports integration with existing user authentication methods > - Supports integration with existing configuration database systems > - Supports network wide configuration transactions (with features such > as locking and rollback capability) > - Is as transport-independent as possible > - Provides support for asynchronous notifications. > > The NETCONF protocol is using XML for data encoding purposes, > because XML is a widely deployed standard which is supported > by a large number of applications. > > The NETCONF protocol should be independent of the data > definition language and data models used to describe > configuration and state data. > > However, the authorization model used in the protocol is > dependent on the data model. Although these issues must be > fully addressed to develop standard data models, only a small > part of this work will be initially addressed. This group > will specify requirements for standard data models in order > to fully support the NETCONF protocol, such as: > > - identification of principals, such as user names or > distinguished names > - mechanism to distinguish configuration from non-configuration data > - XML namespace conventions > - XML usage guidelines > > The initial work started in 2003 and has already been > completed and was restricted to following items: > > a) NETCONF Protocol Specification, which defines the > operational model, > protocol operations, transaction model, data model requirements, > security requirements, and transport layer requirements. > b) NETCONF over SSH Specification: Implementation Mandatory, > c) NETCONF over BEEP Specification: Implementation Optional, > d) NETCONF over SOAP Specification: Implementation Optional. > > These documents define how the NETCONF protocol is used with each > transport protocol selected by the working group, and how it meets > the security and transport layer requirements of the > NETCONF Protocol > Specification. > > e) NETCONF Notification Specification, which defines mechanisms that > provide an asynchronous message notification delivery service for > the NETCONF protocol. NETCONF Notification is an optional > capability built on top of the base NETCONF definition and > provides the capabilities and operations necessary to support > this service. > > The NETCONF notification specification has been finished > now as well. > > In the current phase of the incremental development of > NETCONF the workgroup will focus on following items: > > 1. Fine-grain locking: The base NETCONF protocol only provides a lock > for the entire configuration datastore, which is not deemed to meet > important operational and security requirements. The > NETCONF working > group will produce a standards-track RFC specifying a mechanism for > fine-grain locking of the NETCONF configuration datastore. > > 2. NETCONF monitoring: It is considered best critical > requirement for operators in today's highly interoperable > networks. Operators from large to small have developed their > own mechanisms or used vendor specific mechanisms to transfer > configuration data to and from a device, and for examining > device state information which may impact the configuration. > Each of these mechanisms may be different in various aspects, > such as session establishment, user authentication, > configuration data exchange, and error responses. > > The NETCONF Working Group is chartered to produce a protocol > suitable for network configuration, with the following > characteristics: > > - Provides retrieval mechanisms which can differentiate between > configuration data and non-configuration data > - Is extensible enough so that vendors will provide access to all > configuration data on the device using a single protocol > - Has a programmatic interface (avoids screen scraping and > formatting-related changes between releases) > - Uses a textual data representation, that can be easily manipulated > using non-specialized text manipulation tools. > - Supports integration with existing user authentication methods > - Supports integration with existing configuration database systems > - Supports network wide configuration transactions (with features such > as locking and rollback capability) > - Is as transport-independent as possible > - Provides support for asynchronous notifications. > > The NETCONF protocol is using XML for data encoding purposes, > because XML is a widely deployed standard which is supported > by a large number of applications. > > The NETCONF protocol should be independent of the data > definition language and data models used to describe > configuration and state data. > > However, the authorization model used in the protocol is > dependent on the data model. Although these issues must be > fully addressed to develop standard data models, only a small > part of this work will be initially addressed. This group > will specify requirements for standard data models in order > to fully support the NETCONF protocol, such as: > > - identification of principals, such as user names or > distinguished names > - mechanism to distinguish configuration from non-configuration data > - XML namespace conventions > - XML usage guidelines > > The initial work started in 2003 and has already been > completed and was restricted to following items: > > a) NETCONF Protocol Specification, which defines the > operational model, > protocol operations, transaction model, data model requirements, > security requirements, and transport layer requirements. > b) NETCONF over SSH Specification: Implementation Mandatory, > c) NETCONF over BEEP Specification: Implementation Optional, > d) NETCONF over SOAP Specification: Implementation Optional. > > These documents define how the NETCONF protocol is used with each > transport protocol selected by the working group, and how it meets > the security and transport layer requirements of the > NETCONF Protocol > Specification. > > e) NETCONF Notification Specification, which defines mechanisms that > provide an asynchronous message notification delivery service for > the NETCONF protocol. NETCONF Notification is an optional > capability built on top of the base NETCONF definition and > provides the capabilities and operations necessary to support > this service. > > The NETCONF notification specification has been finished > now as well. > > In the current phase of the incremental development of > NETCONF the workgroup will focus on following items: > > 1. Fine-grain locking: The base NETCONF protocol only provides a lock > for the entire configuration datastore, which is not deemed to meet > important operational and security requirements. The > NETCONF working > group will produce a standards-track RFC specifying a mechanism for > fine-grain locking of the NETCONF configuration datastore. > > 2. NETCONF monitoring: It is considered best practice for IETF working > groups to include management of their protocols within the scope of > the solution they are providing. The NETCONF working group will > produce a standards-track RFC with mechanisms allowing NETCONF > itself to be used to monitor some aspects of NETCONF operation. > > 3. Schema advertisement: Currently the NETCONF protocol is able to > advertise which protocol features are supported on a particular > netconf-capable device. However, there is currently no way > to discover > which XML Schema are supported on the device. The NETCONF working > group will produce a standards-track RFC with mechanisms > making this > discovery possible (this item may be merged with "NETCONF > monitoring" > into a single document). > > Note: The schema-advertisement material has been merged into the > NETCONF monitoring document based on WG consensus. > > 4. NETCONF over TLS: Based on implementation experience there is a > need for a standards track document to define NETCONF over > TLS as an > optional transport for the NETCONF protocol. > > 5. NETCONF default handling: NETCONF today does not define whether > default values should be returned by the server in replies > to requests for reading configuration and state data. Different > clients have different needs to receive or not to receive > default data. The NETCONF working group will produce a > standards-track RFC defining a mechanism that allows > NETCONF clients to control whether default data is returned > by the netconf server. > > 6. NETCONF implementations have shown that the specification > in RFC4741 > is not 100% clear and has lead to different > interpretations and implementations. > Also some errors have been uncovered. So the WG will do an > rfc4741bis with > following constraints: > > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > - The work can be started based on the discussion in > IETF #73 (see > http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). > > Note: A technical errata has been posted on rfc4742. If the work on > rfc4741bis uncovers any additional fixes/clarifications that need > to be made to rfc4742, the WG may consider to also do a rfc4742bis > as part of this work-item. > > The following items have been identified as important but are > currently not considered in scope for re-chartering and may > be candidates for work when there is community consensus to > take them on: > > - NETCONF Notification content > - Access Control requirements > - NETCONF access to SMI-based MIB data > > > Goals and Milestones: > Done Working Group formed > Done Submit initial Netconf Protocol draft > Done Submit initial Netconf over (transport-TBD) draft > Done Begin Working Group Last Call for the Netconf Protocol draft > Done Begin Working Group Last Call for the Netconf over > (transport-TBD) > draft > Done Submit final version of the Netconf Protocol draft to the IESG > Done Submit final version of the Netconf over SOAP draft to the IESG > Done Submit final version of the Netconf over BEEP draft to the IESG > Done Submit final version of the Netconf over SSH draft to the IESG > Done Update charter > Done Submit first version of NETCONF Notifications document > Done Begin WGLC of NETCONF Notifications document > Done Submit final version of NETCONF Notifications document to IESG > for consideration as Proposed Standard > Done -00 draft for fine Grain Locking > Done -00 draft for NETCONF over TLS > Done -00 draft for NETCONF Monitoring > Done -00 draft for Schema Advertisement > Done Early Review of client authentication approach (for > NETCONF over > TLS) with the security community at IETF 71 > N.A. WG Last Call on Schema Advertisement after IETF72 > Schema Advertisement has been merged into Monitoring > Done WG Last Call on NETCONF over TLS after IETF72 > Done Netconf over TLS to IESG for consideration as > Proposed Standards > Dec 2008 WG Last Call on Fine Grain Locking after IETF73 Dec > 2008 Send Partial Locking to IESG for consideration as > Proposed Standards > Jan 2009 Initial WG draft for with-defaults capability > Feb 2009 Initial WG draft for rfc4741bis > Mar 2009 WG Last Call on NETCONF Monitoring after IETF73 > Apr 2009 WG Last Call on rfc4741bis > Apr 2009 WG Last Call on with-defaults > Jun 2009 rfc4741bis to IESG for considerations as Proposed Standard > Jun 2009 with-defaults capability to IESG for considerations as > Proposed Standard > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf practice for IETF working > groups to include management of their protocols within the scope of > the solution they are providing. The NETCONF working group will > produce a standards-track RFC with mechanisms allowing NETCONF > itself to be used to monitor some aspects of NETCONF operation. > > 3. Schema advertisement: Currently the NETCONF protocol is able to > advertise which protocol features are supported on a particular > netconf-capable device. However, there is currently no way > to discover > which XML Schema are supported on the device. The NETCONF working > group will produce a standards-track RFC with mechanisms > making this > discovery possible (this item may be merged with "NETCONF > monitoring" > into a single document). > > Note: The schema-advertisement material has been merged into the > NETCONF monitoring document based on WG consensus. > > 4. NETCONF over TLS: Based on implementation experience there is a > need for a standards track document to define NETCONF over > TLS as an > optional transport for the NETCONF protocol. > > 5. NETCONF default handling: NETCONF today does not define whether > default values should be returned by the server in replies > to requests for reading configuration and state data. Different > clients have different needs to receive or not to receive > default data. The NETCONF working group will produce a > standards-track RFC defining a mechanism that allows > NETCONF clients to control whether default data is returned > by the netconf server. > > 6. NETCONF implementations have shown that the specification > in RFC4741 > is not 100% clear and has lead to different > interpretations and implementations. > Also some errors have been uncovered. So the WG will do an > rfc4741bis with > following constraints: > > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > - The work can be started based on the discussion in > IETF #73 (see > http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). > > Note: A technical errata has been posted on rfc4742. If the work on > rfc4741bis uncovers any additional fixes/clarifications that need > to be made to rfc4742, the WG may consider to also do a rfc4742bis > as part of this work-item. > > The following items have been identified as important but are > currently not considered in scope for re-chartering and may > be candidates for work when there is community consensus to > take them on: > > - NETCONF Notification content > - Access Control requirements > - NETCONF access to SMI-based MIB data > > > Goals and Milestones: > Done Working Group formed > Done Submit initial Netconf Protocol draft > Done Submit initial Netconf over (transport-TBD) draft > Done Begin Working Group Last Call for the Netconf Protocol draft > Done Begin Working Group Last Call for the Netconf over > (transport-TBD) > draft > Done Submit final version of the Netconf Protocol draft to the IESG > Done Submit final version of the Netconf over SOAP draft to the IESG > Done Submit final version of the Netconf over BEEP draft to the IESG > Done Submit final version of the Netconf over SSH draft to the IESG > Done Update charter > Done Submit first version of NETCONF Notifications document > Done Begin WGLC of NETCONF Notifications document > Done Submit final version of NETCONF Notifications document to IESG > for consideration as Proposed Standard > Done -00 draft for fine Grain Locking > Done -00 draft for NETCONF over TLS > Done -00 draft for NETCONF Monitoring > Done -00 draft for Schema Advertisement > Done Early Review of client authentication approach (for > NETCONF over > TLS) with the security community at IETF 71 > N.A. WG Last Call on Schema Advertisement after IETF72 > Schema Advertisement has been merged into Monitoring > Done WG Last Call on NETCONF over TLS after IETF72 > Done Netconf over TLS to IESG for consideration as > Proposed Standards > Dec 2008 WG Last Call on Fine Grain Locking after IETF73 Dec > 2008 Send Partial Locking to IESG for consideration as > Proposed Standards > Jan 2009 Initial WG draft for with-defaults capability > Feb 2009 Initial WG draft for rfc4741bis > Mar 2009 WG Last Call on NETCONF Monitoring after IETF73 > Apr 2009 WG Last Call on rfc4741bis > Apr 2009 WG Last Call on with-defaults > Jun 2009 rfc4741bis to IESG for considerations as Proposed Standard > Jun 2009 with-defaults capability to IESG for considerations as > Proposed Standard > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 10:24:48 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 314F828C1FB; Thu, 11 Dec 2008 10:24:48 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C9E2128C1FB for ; Thu, 11 Dec 2008 10:24:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.165 X-Spam-Level: X-Spam-Status: No, score=-2.165 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S7y-QCx1JmVT for ; Thu, 11 Dec 2008 10:24:47 -0800 (PST) Received: from smtp118.sbc.mail.sp1.yahoo.com (smtp118.sbc.mail.sp1.yahoo.com [69.147.64.91]) by core3.amsl.com (Postfix) with SMTP id 0982128C1F5 for ; Thu, 11 Dec 2008 10:24:47 -0800 (PST) Received: (qmail 51058 invoked from network); 11 Dec 2008 18:24:40 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp118.sbc.mail.sp1.yahoo.com with SMTP; 11 Dec 2008 18:24:38 -0000 X-YMail-OSG: lWZ.q.8VM1m7p7_YIbkZ691.ME8tHleN8.lQzndWqg64cwZCYneRJp5z.6fo6uhvkPfpku4ZzFavgzD4r5PTB_ylm5_YAWAxX4XXyeRvSvY_6AOkr9t6JHlRdb60tg.4aig- X-Yahoo-Newman-Property: ymail-3 Message-ID: <49415AE4.6070708@netconfcentral.com> Date: Thu, 11 Dec 2008 10:24:36 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Ersue, Mehmet (NSN - DE/Munich)" References: In-Reply-To: Cc: netconf@ietf.org, rbonica@juniper.net Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Ersue, Mehmet (NSN - DE/Munich) wrote: > Dear ADs (and WG), > > based on the consensus after IETF 73 we prepared an update > for the NETCONF WG charter. > ... > 6. NETCONF implementations have shown that the specification in RFC4741 > is not 100% clear and has lead to different interpretations and > implementations. > Also some errors have been uncovered. So the WG will do an rfc4741bis > with > following constraints: > Please document the implementation experience first, before changing the protocol based on it. I believe there was 1 interop test done awhile back, and Juergen has done some private testing on his own. What level of interoperability is the WG trying to achieve? Is it the RPC operation layer? The content layer? Are there multiple independent implementations of the same read-write data model(s)? Is the WG attempting to gather interoperability experience, document it, and advance the protocol to Draft Standard? Is the WG ready to move some transports to Historic if there are not at least 2 independent implementations? If not, why not? It's been published for 2 years already. When does the WG estimate that NETCONF will advance to DS? > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) What about the 'test-only' enumeration for test-option? IMO, the WG needs some flexibility in the solution space to deal with usability problems found. It has been determined that 'test-then-set' and are somewhat worthless, and a 'test-only' mode for would have been much better in the first place. Is that a new feature or a bugfix? Is the WG allowed to make non-backward-compatible changes to the protocol or transports? The base URI for the NETCONF protocol is going to change (it better) if any observable changes are made to protocol behavior. Are there any 1.0 to 1.1 protocol migration concerns? Are there any issues related to mixing 1.0 and 1.1 agents in the same network? IMO, this 4741-bis work item does not fully address the scope and complexity of the problem space. thanks, Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 10:24:48 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 314F828C1FB; Thu, 11 Dec 2008 10:24:48 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C9E2128C1FB for ; Thu, 11 Dec 2008 10:24:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.165 X-Spam-Level: X-Spam-Status: No, score=-2.165 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S7y-QCx1JmVT for ; Thu, 11 Dec 2008 10:24:47 -0800 (PST) Received: from smtp118.sbc.mail.sp1.yahoo.com (smtp118.sbc.mail.sp1.yahoo.com [69.147.64.91]) by core3.amsl.com (Postfix) with SMTP id 0982128C1F5 for ; Thu, 11 Dec 2008 10:24:47 -0800 (PST) Received: (qmail 51058 invoked from network); 11 Dec 2008 18:24:40 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp118.sbc.mail.sp1.yahoo.com with SMTP; 11 Dec 2008 18:24:38 -0000 X-YMail-OSG: lWZ.q.8VM1m7p7_YIbkZ691.ME8tHleN8.lQzndWqg64cwZCYneRJp5z.6fo6uhvkPfpku4ZzFavgzD4r5PTB_ylm5_YAWAxX4XXyeRvSvY_6AOkr9t6JHlRdb60tg.4aig- X-Yahoo-Newman-Property: ymail-3 Message-ID: <49415AE4.6070708@netconfcentral.com> Date: Thu, 11 Dec 2008 10:24:36 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Ersue, Mehmet (NSN - DE/Munich)" References: In-Reply-To: Cc: netconf@ietf.org, rbonica@juniper.net Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Ersue, Mehmet (NSN - DE/Munich) wrote: > Dear ADs (and WG), > > based on the consensus after IETF 73 we prepared an update > for the NETCONF WG charter. > ... > 6. NETCONF implementations have shown that the specification in RFC4741 > is not 100% clear and has lead to different interpretations and > implementations. > Also some errors have been uncovered. So the WG will do an rfc4741bis > with > following constraints: > Please document the implementation experience first, before changing the protocol based on it. I believe there was 1 interop test done awhile back, and Juergen has done some private testing on his own. What level of interoperability is the WG trying to achieve? Is it the RPC operation layer? The content layer? Are there multiple independent implementations of the same read-write data model(s)? Is the WG attempting to gather interoperability experience, document it, and advance the protocol to Draft Standard? Is the WG ready to move some transports to Historic if there are not at least 2 independent implementations? If not, why not? It's been published for 2 years already. When does the WG estimate that NETCONF will advance to DS? > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) What about the 'test-only' enumeration for test-option? IMO, the WG needs some flexibility in the solution space to deal with usability problems found. It has been determined that 'test-then-set' and are somewhat worthless, and a 'test-only' mode for would have been much better in the first place. Is that a new feature or a bugfix? Is the WG allowed to make non-backward-compatible changes to the protocol or transports? The base URI for the NETCONF protocol is going to change (it better) if any observable changes are made to protocol behavior. Are there any 1.0 to 1.1 protocol migration concerns? Are there any issues related to mixing 1.0 and 1.1 agents in the same network? IMO, this 4741-bis work item does not fully address the scope and complexity of the problem space. thanks, Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 10:32:43 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 454B528C1F5; Thu, 11 Dec 2008 10:32:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 87CD628C1FB for ; Thu, 11 Dec 2008 10:32:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.48 X-Spam-Level: X-Spam-Status: No, score=-2.48 tagged_above=-999 required=5 tests=[AWL=0.119, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TMBHJduVXAU6 for ; Thu, 11 Dec 2008 10:32:40 -0800 (PST) Received: from co300216-co-outbound.avaya.com (co300216-co-outbound.net.avaya.com [198.152.13.100]) by core3.amsl.com (Postfix) with ESMTP id 9C96328C1F5 for ; Thu, 11 Dec 2008 10:32:40 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,206,1228107600"; d="scan'208";a="154237944" Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by co300216-co-outbound.avaya.com with ESMTP; 11 Dec 2008 13:32:30 -0500 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by co300216-co-erhwest-out.avaya.com with ESMTP; 11 Dec 2008 13:32:29 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Thu, 11 Dec 2008 19:32:28 +0100 Message-ID: In-Reply-To: <49415AE4.6070708@netconfcentral.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] Request for charter change Thread-Index: Aclbvb0oVfGBxmKxRhG2wp6mraj4BwAAHNHw References: <49415AE4.6070708@netconfcentral.com> From: "Romascanu, Dan (Dan)" To: "Andy Bierman" , "Ersue, Mehmet (NSN - DE/Munich)" Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy, Some of the issues that you are mentioning have been discussed in Minneapolis. I believe that the chairs have made a reasonable effort to catch the consensus in Minneapolis, which of course needs to be confirmed by this discussion. Your question about 'when shall we go to PS' is in conflict with: > Is the WG allowed to make non-backward-compatible changes > to the protocol or transports? If we answer here is 'yes' then we must recycle at PS and it will more look like a 2.0 than a 1.1 BTW - we talk about the protocol in 4741bis, not sure what you mention transports. Dan (speaking as contributor) > -----Original Message----- > From: Andy Bierman [mailto:andy@netconfcentral.com] > Sent: Thursday, December 11, 2008 8:25 PM > To: Ersue, Mehmet (NSN - DE/Munich) > Cc: Romascanu, Dan (Dan); rbonica@juniper.net; netconf@ietf.org > Subject: Re: [Netconf] Request for charter change > > Ersue, Mehmet (NSN - DE/Munich) wrote: > > Dear ADs (and WG), > > > > based on the consensus after IETF 73 we prepared an update for the > > NETCONF WG charter. > > > > > ... > > > 6. NETCONF implementations have shown that the > specification in RFC4741 > > is not 100% clear and has lead to different interpretations and > > implementations. > > Also some errors have been uncovered. So the WG will do > an rfc4741bis > > with > > following constraints: > > > > Please document the implementation experience first, > before changing the protocol based on it. I believe > there was 1 interop test done awhile back, and Juergen > has done some private testing on his own. > > What level of interoperability is the WG trying to achieve? > Is it the RPC operation layer? The content layer? > Are there multiple independent implementations of the > same read-write data model(s)? > > Is the WG attempting to gather interoperability experience, > document it, and advance the protocol to Draft Standard? > Is the WG ready to move some transports to Historic if > there are not at least 2 independent implementations? > > If not, why not? > It's been published for 2 years already. > When does the WG estimate that NETCONF will advance to DS? > > > - bug fixes are to be done > > - clarifications can be done > > - no extensions (i.e. we are not doing a NETCONF V2) > > What about the 'test-only' enumeration for test-option? > IMO, the WG needs some flexibility in the solution space > to deal with usability problems found. It has been determined > that 'test-then-set' and are somewhat worthless, > and a 'test-only' mode for would have been much > better in the first place. Is that a new feature or a bugfix? > > Is the WG allowed to make non-backward-compatible changes > to the protocol or transports? > > The base URI for the NETCONF protocol is going to change > (it better) if any observable changes are made to protocol > behavior. Are there any 1.0 to 1.1 protocol migration > concerns? Are there any issues related to mixing 1.0 > and 1.1 agents in the same network? > > IMO, this 4741-bis work item does not fully address the > scope and complexity of the problem space. > > > thanks, > Andy > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 10:32:43 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 454B528C1F5; Thu, 11 Dec 2008 10:32:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 87CD628C1FB for ; Thu, 11 Dec 2008 10:32:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.48 X-Spam-Level: X-Spam-Status: No, score=-2.48 tagged_above=-999 required=5 tests=[AWL=0.119, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TMBHJduVXAU6 for ; Thu, 11 Dec 2008 10:32:40 -0800 (PST) Received: from co300216-co-outbound.avaya.com (co300216-co-outbound.net.avaya.com [198.152.13.100]) by core3.amsl.com (Postfix) with ESMTP id 9C96328C1F5 for ; Thu, 11 Dec 2008 10:32:40 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,206,1228107600"; d="scan'208";a="154237944" Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by co300216-co-outbound.avaya.com with ESMTP; 11 Dec 2008 13:32:30 -0500 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by co300216-co-erhwest-out.avaya.com with ESMTP; 11 Dec 2008 13:32:29 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Thu, 11 Dec 2008 19:32:28 +0100 Message-ID: In-Reply-To: <49415AE4.6070708@netconfcentral.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] Request for charter change Thread-Index: Aclbvb0oVfGBxmKxRhG2wp6mraj4BwAAHNHw References: <49415AE4.6070708@netconfcentral.com> From: "Romascanu, Dan (Dan)" To: "Andy Bierman" , "Ersue, Mehmet (NSN - DE/Munich)" Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy, Some of the issues that you are mentioning have been discussed in Minneapolis. I believe that the chairs have made a reasonable effort to catch the consensus in Minneapolis, which of course needs to be confirmed by this discussion. Your question about 'when shall we go to PS' is in conflict with: > Is the WG allowed to make non-backward-compatible changes > to the protocol or transports? If we answer here is 'yes' then we must recycle at PS and it will more look like a 2.0 than a 1.1 BTW - we talk about the protocol in 4741bis, not sure what you mention transports. Dan (speaking as contributor) > -----Original Message----- > From: Andy Bierman [mailto:andy@netconfcentral.com] > Sent: Thursday, December 11, 2008 8:25 PM > To: Ersue, Mehmet (NSN - DE/Munich) > Cc: Romascanu, Dan (Dan); rbonica@juniper.net; netconf@ietf.org > Subject: Re: [Netconf] Request for charter change > > Ersue, Mehmet (NSN - DE/Munich) wrote: > > Dear ADs (and WG), > > > > based on the consensus after IETF 73 we prepared an update for the > > NETCONF WG charter. > > > > > ... > > > 6. NETCONF implementations have shown that the > specification in RFC4741 > > is not 100% clear and has lead to different interpretations and > > implementations. > > Also some errors have been uncovered. So the WG will do > an rfc4741bis > > with > > following constraints: > > > > Please document the implementation experience first, > before changing the protocol based on it. I believe > there was 1 interop test done awhile back, and Juergen > has done some private testing on his own. > > What level of interoperability is the WG trying to achieve? > Is it the RPC operation layer? The content layer? > Are there multiple independent implementations of the > same read-write data model(s)? > > Is the WG attempting to gather interoperability experience, > document it, and advance the protocol to Draft Standard? > Is the WG ready to move some transports to Historic if > there are not at least 2 independent implementations? > > If not, why not? > It's been published for 2 years already. > When does the WG estimate that NETCONF will advance to DS? > > > - bug fixes are to be done > > - clarifications can be done > > - no extensions (i.e. we are not doing a NETCONF V2) > > What about the 'test-only' enumeration for test-option? > IMO, the WG needs some flexibility in the solution space > to deal with usability problems found. It has been determined > that 'test-then-set' and are somewhat worthless, > and a 'test-only' mode for would have been much > better in the first place. Is that a new feature or a bugfix? > > Is the WG allowed to make non-backward-compatible changes > to the protocol or transports? > > The base URI for the NETCONF protocol is going to change > (it better) if any observable changes are made to protocol > behavior. Are there any 1.0 to 1.1 protocol migration > concerns? Are there any issues related to mixing 1.0 > and 1.1 agents in the same network? > > IMO, this 4741-bis work item does not fully address the > scope and complexity of the problem space. > > > thanks, > Andy > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 11:25:19 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CF1B73A688C; Thu, 11 Dec 2008 11:25:18 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 233193A68BF for ; Thu, 11 Dec 2008 11:25:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.234 X-Spam-Level: X-Spam-Status: No, score=-2.234 tagged_above=-999 required=5 tests=[AWL=0.015, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OtgzGB6Uy4gH for ; Thu, 11 Dec 2008 11:25:12 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id DC87F3A6881 for ; Thu, 11 Dec 2008 11:25:11 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id B77F0C011B; Thu, 11 Dec 2008 20:25:05 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id BwcoKc6tsRVb; Thu, 11 Dec 2008 20:25:00 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id CBE42C003C; Thu, 11 Dec 2008 20:24:59 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 21B608AD7FF; Thu, 11 Dec 2008 20:24:59 +0100 (CET) Date: Thu, 11 Dec 2008 20:24:59 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081211192459.GB28388@elstar.local> Mail-Followup-To: Andy Bierman , "Ersue, Mehmet (NSN - DE/Munich)" , netconf@ietf.org, rbonica@juniper.net References: <49415AE4.6070708@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <49415AE4.6070708@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Thu, Dec 11, 2008 at 10:24:36AM -0800, Andy Bierman wrote: > Please document the implementation experience first, > before changing the protocol based on it. I believe > there was 1 interop test done awhile back, and Juergen > has done some private testing on his own. I will post a report shortly providing a high level overview of the testing we have done so far. In short, we have written a test suite in Python using the Python unit testing framework. And yes, we love to get more implementations to test - so far we had three independent impementations under test and I sure there are more implementations out there. > What level of interoperability is the WG trying to achieve? > Is it the RPC operation layer? The content layer? > Are there multiple independent implementations of the > same read-write data model(s)? Right now, some tests are duplicated for the different data models boxes support. Right after the interim, I wrote together with Martin a YANG model for VACM and we have test cases against this data model. We hope that implementors can support this VACM data model so that we have a common data model for edit-config tests. In short, we try to test the messaging (hello and rpc messages), the operations and their features (filtering etc.) and to a lesser extend at the moment data model specifics (due to a lack of common data models). /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 11:25:19 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CF1B73A688C; Thu, 11 Dec 2008 11:25:18 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 233193A68BF for ; Thu, 11 Dec 2008 11:25:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.234 X-Spam-Level: X-Spam-Status: No, score=-2.234 tagged_above=-999 required=5 tests=[AWL=0.015, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OtgzGB6Uy4gH for ; Thu, 11 Dec 2008 11:25:12 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id DC87F3A6881 for ; Thu, 11 Dec 2008 11:25:11 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id B77F0C011B; Thu, 11 Dec 2008 20:25:05 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id BwcoKc6tsRVb; Thu, 11 Dec 2008 20:25:00 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id CBE42C003C; Thu, 11 Dec 2008 20:24:59 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 21B608AD7FF; Thu, 11 Dec 2008 20:24:59 +0100 (CET) Date: Thu, 11 Dec 2008 20:24:59 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081211192459.GB28388@elstar.local> Mail-Followup-To: Andy Bierman , "Ersue, Mehmet (NSN - DE/Munich)" , netconf@ietf.org, rbonica@juniper.net References: <49415AE4.6070708@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <49415AE4.6070708@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Thu, Dec 11, 2008 at 10:24:36AM -0800, Andy Bierman wrote: > Please document the implementation experience first, > before changing the protocol based on it. I believe > there was 1 interop test done awhile back, and Juergen > has done some private testing on his own. I will post a report shortly providing a high level overview of the testing we have done so far. In short, we have written a test suite in Python using the Python unit testing framework. And yes, we love to get more implementations to test - so far we had three independent impementations under test and I sure there are more implementations out there. > What level of interoperability is the WG trying to achieve? > Is it the RPC operation layer? The content layer? > Are there multiple independent implementations of the > same read-write data model(s)? Right now, some tests are duplicated for the different data models boxes support. Right after the interim, I wrote together with Martin a YANG model for VACM and we have test cases against this data model. We hope that implementors can support this VACM data model so that we have a common data model for edit-config tests. In short, we try to test the messaging (hello and rpc messages), the operations and their features (filtering etc.) and to a lesser extend at the moment data model specifics (due to a lack of common data models). /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 16:41:04 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A22C228C140; Thu, 11 Dec 2008 16:41:04 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 111E728C140 for ; Thu, 11 Dec 2008 16:41:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.618 X-Spam-Level: X-Spam-Status: No, score=-1.618 tagged_above=-999 required=5 tests=[AWL=0.370, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WqbpxumeF0nb for ; Thu, 11 Dec 2008 16:41:02 -0800 (PST) Received: from wes.hardakers.net (dcn236-43.dcn.davis.ca.us [168.150.236.43]) by core3.amsl.com (Postfix) with ESMTP id 5D9F228C135 for ; Thu, 11 Dec 2008 16:41:02 -0800 (PST) Received: from localhost (wlap.dyn.hardakers.net [127.0.0.1]) by wes.hardakers.net (Postfix) with ESMTP id 8B9B839A214; Thu, 11 Dec 2008 16:40:56 -0800 (PST) From: Wes Hardaker To: Andy Bierman Organization: Sparta References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> Date: Thu, 11 Dec 2008 16:40:56 -0800 In-Reply-To: <49412B7B.8070809@netconfcentral.com> (Andy Bierman's message of "Thu, 11 Dec 2008 07:02:19 -0800") Message-ID: User-Agent: Gnus/5.110011 (No Gnus v0.11) XEmacs/21.4.21 (linux, no MULE) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org >>>>> On Thu, 11 Dec 2008 07:02:19 -0800, Andy Bierman said: AB> Why can't the attacker just figure out exactly where the AB> data is getting inserted and figure out how to close AB> off the XML properly? That's possible too, but a lot harder. It requires knowledge of the entire XML stream sent to the agent before the insertion point. It's doable, but takes a *lot* more effort as opposed to almost none for inserting an EOM and hoping it's not checked. Ask yourself how you would figure out how to close an existing session properly. Your choices are guessing a lot at all the open tags in use (possibly including unknown name space prefixes) or sniffing the wire (which fortunately we've made pretty hard). Can it be done? Yes. Easily? No. It'll take many attempts to likely get it right. An EOM marker, on the other hand, looks like it'll succeed the first time. AB> It seems like only a real (properly configured) ACM is going to AB> help. An ACM will only help if the web-based application is very limited in what ACM rights it has. We know this is smarFrom netconf-bounces@ietf.org Thu Dec 11 16:41:04 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A22C228C140; Thu, 11 Dec 2008 16:41:04 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 111E728C140 for ; Thu, 11 Dec 2008 16:41:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.618 X-Spam-Level: X-Spam-Status: No, score=-1.618 tagged_above=-999 required=5 tests=[AWL=0.370, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WqbpxumeF0nb for ; Thu, 11 Dec 2008 16:41:02 -0800 (PST) Received: from wes.hardakers.net (dcn236-43.dcn.davis.ca.us [168.150.236.43]) by core3.amsl.com (Postfix) with ESMTP id 5D9F228C135 for ; Thu, 11 Dec 2008 16:41:02 -0800 (PST) Received: from localhost (wlap.dyn.hardakers.net [127.0.0.1]) by wes.hardakers.net (Postfix) with ESMTP id 8B9B839A214; Thu, 11 Dec 2008 16:40:56 -0800 (PST) From: Wes Hardaker To: Andy Bierman Organization: Sparta References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> Date: Thu, 11 Dec 2008 16:40:56 -0800 In-Reply-To: <49412B7B.8070809@netconfcentral.com> (Andy Bierman's message of "Thu, 11 Dec 2008 07:02:19 -0800") Message-ID: User-Agent: Gnus/5.110011 (No Gnus v0.11) XEmacs/21.4.21 (linux, no MULE) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org >>>>> On Thu, 11 Dec 2008 07:02:19 -0800, Andy Bierman said: AB> Why can't the attacker just figure out exactly where the AB> data is getting inserted and figure out how to close AB> off the XML properly? That's possible too, but a lot harder. It requires knowledge of the entire XML stream sent to the agent before the insertion point. It's doable, but takes a *lot* more effort as opposed to almost none for inserting an EOM and hoping it's not checked. Ask yourself how you would figure out how to close an existing session properly. Your choices are guessing a lot at all the open tags in use (possibly including unknown name space prefixes) or sniffing the wire (which fortunately we've made pretty hard). Can it be done? Yes. Easily? No. It'll take many attempts to likely get it right. An EOM marker, on the other hand, looks like it'll succeed the first time. AB> It seems like only a real (properly configured) ACM is going to AB> help. An ACM will only help if the web-based application is very limited in what ACM rights it has. We know this it. However we know from experience that not enough people put decent ACM systems in place too (financial institutions and large companies do a better job than mom-and-pop ISPs). -- "In the bathtub of history the truth is harder to hold than the soap, and much more difficult to find." -- Terry Pratchett _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf s smart. However we know from experience that not enough people put decent ACM systems in place too (financial institutions and large companies do a better job than mom-and-pop ISPs). -- "In the bathtub of history the truth is harder to hold than the soap, and much more difficult to find." -- Terry Pratchett _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 17:09:26 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 443933A6A19; Thu, 11 Dec 2008 17:09:26 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C4A6D3A6A19 for ; Thu, 11 Dec 2008 17:09:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.19 X-Spam-Level: X-Spam-Status: No, score=-2.19 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dkpgC2ylXXKa for ; Thu, 11 Dec 2008 17:09:24 -0800 (PST) Received: from smtp116.sbc.mail.sp1.yahoo.com (smtp116.sbc.mail.sp1.yahoo.com [69.147.64.89]) by core3.amsl.com (Postfix) with SMTP id 2C02E3A686D for ; Thu, 11 Dec 2008 17:09:23 -0800 (PST) Received: (qmail 75944 invoked from network); 12 Dec 2008 01:09:17 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp116.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 01:09:16 -0000 X-YMail-OSG: d0YUI.YVM1n8KZlpCntIfI09UGO8j6Gu4MEXOz_X_gpHW62qsHrSO23izw1n95ek0XNQh0KbQzPvqL2Gov9HoxdZF0VxpjcCbZXLJsg19JCR4PulfG77.vbFNQULasHIHhHaE.2U6N7Y6Y96cDc94jKF X-Yahoo-Newman-Property: ymail-3 Message-ID: <4941B9BA.9090906@netconfcentral.com> Date: Thu, 11 Dec 2008 17:09:14 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Thu, 11 Dec 2008 07:02:19 -0800, Andy Bierman said: > > AB> Why can't the attacker just figure out exactly where the > AB> data is getting inserted and figure out how to close > AB> off the XML properly? > > That's possible too, but a lot harder. It requires knowledge of the > entire XML stream sent to the agent before the insertion point. It's > doable, but takes a *lot* more effort as opposed to almost none for > inserting an EOM and hoping it's not checked. > > Ask yourself how you would figure out how to close an existing session > properly. Your choices are guessing a lot at all the open tags in > use (possibly including unknown name space prefixes) or sniffing the > wire (which fortunately we've made pretty hard). Can it be done? Yes. > Easily? No. It'll take many attempts to likely get it right. An EOM > marker, on the other hand, looks like it'll succeed the first time. > The only top-level element of interest is , so no need to guess that. The injected PDU is going to have to be in an attribute in that start tag. It is easy to finish off the start tag, then put in whatever PDU you want. It is also easy to begin another start tag when your done, so the next attribute (after the bad one) will simply continue the RPC message stream. You do not need to guess at anything, but it is a bit more work. > AB> It seems like only a real (properly configured) ACM is going to > AB> help. > > An ACM will only help if the web-based application is very limited in > what ACM rights it has. We know this is smart. However we know from > experience that not enough people put decent ACM systems in place too > (financial institutions and large companies do a better job than > mom-and-pop ISPs). > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 17:09:26 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 443933A6A19; Thu, 11 Dec 2008 17:09:26 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C4A6D3A6A19 for ; Thu, 11 Dec 2008 17:09:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.19 X-Spam-Level: X-Spam-Status: No, score=-2.19 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dkpgC2ylXXKa for ; Thu, 11 Dec 2008 17:09:24 -0800 (PST) Received: from smtp116.sbc.mail.sp1.yahoo.com (smtp116.sbc.mail.sp1.yahoo.com [69.147.64.89]) by core3.amsl.com (Postfix) with SMTP id 2C02E3A686D for ; Thu, 11 Dec 2008 17:09:23 -0800 (PST) Received: (qmail 75944 invoked from network); 12 Dec 2008 01:09:17 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp116.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 01:09:16 -0000 X-YMail-OSG: d0YUI.YVM1n8KZlpCntIfI09UGO8j6Gu4MEXOz_X_gpHW62qsHrSO23izw1n95ek0XNQh0KbQzPvqL2Gov9HoxdZF0VxpjcCbZXLJsg19JCR4PulfG77.vbFNQULasHIHhHaE.2U6N7Y6Y96cDc94jKF X-Yahoo-Newman-Property: ymail-3 Message-ID: <4941B9BA.9090906@netconfcentral.com> Date: Thu, 11 Dec 2008 17:09:14 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Wes Hardaker References: <49306372.7020700@netconfcentral.com> <20081129.113257.140268253.mbj@tail-f.com> <49311C45.6000302@netconfcentral.com> <20081129.114323.85229311.mbj@tail-f.com> <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Wes Hardaker wrote: >>>>>> On Thu, 11 Dec 2008 07:02:19 -0800, Andy Bierman said: > > AB> Why can't the attacker just figure out exactly where the > AB> data is getting inserted and figure out how to close > AB> off the XML properly? > > That's possible too, but a lot harder. It requires knowledge of the > entire XML stream sent to the agent before the insertion point. It's > doable, but takes a *lot* more effort as opposed to almost none for > inserting an EOM and hoping it's not checked. > > Ask yourself how you would figure out how to close an existing session > properly. Your choices are guessing a lot at all the open tags in > use (possibly including unknown name space prefixes) or sniffing the > wire (which fortunately we've made pretty hard). Can it be done? Yes. > Easily? No. It'll take many attempts to likely get it right. An EOM > marker, on the other hand, looks like it'll succeed the first time. > The only top-level element of interest is , so no need to guess that. The injected PDU is going to have to be in an attribute in that start tag. It is easy to finish off the start tag, then put in whatever PDU you want. It is also easy to begin another start tag when your done, so the next attribute (after the bad one) will simply continue the RPC message stream. You do not need to guess at anything, but it is a bit more work. > AB> It seems like only a real (properly configured) ACM is going to > AB> help. > > An ACM will only help if the web-based application is very limited in > what ACM rights it has. We know this is smart. However we know from > experience that not enough people put decent ACM systems in place too > (financial institutions and large companies do a better job than > mom-and-pop ISPs). > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 11 23:36:13 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 23B753A6A83; Thu, 11 Dec 2008 23:36:13 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A1F893A6A83 for ; Thu, 11 Dec 2008 23:36:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.236 X-Spam-Level: X-Spam-Status: No, score=-2.236 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uDrDvcY4WMJh for ; Thu, 11 Dec 2008 23:36:11 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id EA88C3A69EC for ; Thu, 11 Dec 2008 23:36:10 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id AAA8BC005B; Fri, 12 Dec 2008 08:36:04 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id AM7wuC4fNCGq; Fri, 12 Dec 2008 08:35:58 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 0F443C0045; Fri, 12 Dec 2008 08:35:57 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 2979A8AE1B4; Fri, 12 Dec 2008 08:35:57 +0100 (CET) Date: Fri, 12 Dec 2008 08:35:57 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081212073557.GA29041@elstar.local> Mail-Followup-To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4941B9BA.9090906@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman wrote: > The only top-level element of interest is , > so no need to guess that. The injected PDU is going to > have to be in an attribute in that start tag. Why? /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list NetcFrom netconf-bounces@ietf.org Thu Dec 11 23:36:13 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 23B753A6A83; Thu, 11 Dec 2008 23:36:13 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A1F893A6A83 for ; Thu, 11 Dec 2008 23:36:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.236 X-Spam-Level: X-Spam-Status: No, score=-2.236 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uDrDvcY4WMJh for ; Thu, 11 Dec 2008 23:36:11 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id EA88C3A69EC for ; Thu, 11 Dec 2008 23:36:10 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id AAA8BC005B; Fri, 12 Dec 2008 08:36:04 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id AM7wuC4fNCGq; Fri, 12 Dec 2008 08:35:58 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 0F443C0045; Fri, 12 Dec 2008 08:35:57 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 2979A8AE1B4; Fri, 12 Dec 2008 08:35:57 +0100 (CET) Date: Fri, 12 Dec 2008 08:35:57 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081212073557.GA29041@elstar.local> Mail-Followup-To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4941B9BA.9090906@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman wrote: > The only top-level element of interest is , > so no need to guess that. The injected PDU is going to > have to be in an attribute in that start tag. Why? /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing lisonf@ietf.org https://www.ietf.org/mailman/listinfo/netconf t Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 01:47:49 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2A6343A684C; Fri, 12 Dec 2008 01:47:49 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A732E3A684C for ; Fri, 12 Dec 2008 01:47:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.045 X-Spam-Level: X-Spam-Status: No, score=-2.045 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AQmJ1-PQAvBv for ; Fri, 12 Dec 2008 01:47:47 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 5A8513A6844 for ; Fri, 12 Dec 2008 01:47:47 -0800 (PST) Received: from [192.168.1.3] (1-1-10-25a.has.sth.bostream.se [82.182.131.89]) by mail.tail-f.com (Postfix) with ESMTPSA id A43EE76C53E; Fri, 12 Dec 2008 10:47:40 +0100 (CET) Message-Id: From: Jan Lindblad To: netconf@ietf.org In-Reply-To: <20081212073557.GA29041@elstar.local> Mime-Version: 1.0 (Apple Message framework v929.2) Date: Fri, 12 Dec 2008 10:47:39 +0100 References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> X-Mailer: Apple Mail (2.929.2) Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0756188594==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --===============0756188594== Content-Type: multipart/signed; boundary=Apple-Mail-265--487526627; micalg=sha1; protocol="application/pkcs7-signature" --Apple-Mail-265--487526627 Content-Type: multipart/alternative; boundary=Apple-Mail-264--487526753 --Apple-Mail-264--487526753 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit 12 dec 2008 kl. 08.35 skrev Juergen Schoenwaelder: > On Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman wrote: > >> The only top-level element of interest is , >> so no need to guess that. The injected PDU is going to >> have to be in an attribute in that start tag. > > Why? The hard lesson learned by the "SQL injection" crisis is that a client that doesn't properly and completely check it's input, effectively transfers any trust/authority it may have to whoever is capable of providing such input. This is a fact of life, and has very little to do with start tags or ]]>]]> EOM markers. Just as a simple example, consider an application that prompts for a name and inserts it in its XML stream: """ %s almost-nothing """ And someone responds with: "cool-hackertop-secretsomeone-else" The good news is that it's very easy to fix this. Simply by removing (or XML escaping) all > characters in the user input (plus quotes if it inserts text in attributes), the application is safe. > That's possible too, but a lot harder. It requires knowledge of the > entire XML stream sent to the agent before the insertion point. It's > doable, but takes a *lot* more effort as opposed to almost none for > inserting an EOM and hoping it's not checked. This appeals to the security-by-obscurity principle. It was (mostly) abandoned ca 1973. /Jan Lindblad -- Jan Lindblad, janl@tail-f.com, +46 702855728 Tail-f Systems, Professional Services, www.tail-f.com --Apple-Mail-264--487526753 Content-Type: text/html; charset=US-ASCII Content-Transfer-Encoding: quoted-printable
12 = dec 2008 kl. 08.35 skrev Juergen = Schoenwaelder:

On = Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman = wrote:

The only top-level element of = interest is <rpc>,
so no = need to guess that.  The injected PDU is going = to
have to be in an attribute = in that start = tag.

Why?

The = hard lesson learned by the "SQL injection" crisis is that a client that = doesn't properly and completely check it's input, effectively transfers = any trust/authority it may have to whoever is capable of providing such = input. This is a fact of life, and has very little to do with start tags = or ]]>]]> EOM markers.

Just as a simple = example, consider an application that prompts for a name and inserts it = in its XML = stream:

"""
<edit-config>
   &= lt;users>
       <user>
 =           <name>%s<= ;/name>
          &nb= sp;<privileges>almost-nothing</privileges>
   &nbs= p;   </user>
   </users>
<edi= t-config>
"""

And someone responds = with:
"cool-hacker</name><privileges>top-secret</privil= eges></user><user><name>someone-else"

The = good news is that it's very easy to fix this. Simply by removing (or XML = escaping) all > characters in the user input (plus quotes if it inserts = text in attributes), the application is = safe.

That's= possible too, but a lot harder.  It requires knowledge of = the
entire XML stream sent to the agent before the insertion point. =  It's
doable, but takes a *lot* more effort as opposed to almost = none for
inserting an EOM and hoping it's not = checked.

This appeals to the = security-by-obscurity principle. It was (mostly) abandoned ca = 1973.

/Jan Lindblad
janl@tail-f.com, +46 = 702855728
Tail-f Systems, Professional Services, www.tail-f.com

= --Apple-Mail-264--487526753-- --Apple-Mail-265--487526627 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGHzCCAtgw ggJBoAMCAQICEEWKgsybmpBlGydDD9KtfaUwDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UEBhMCWkEx JTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQ ZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA4MDYxODIwNTEwMloXDTA5MDYxODIwNTEw MlowQTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEeMBwGCSqGSIb3DQEJARYPamFu bEB0YWlsLWYuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gb1QID40kDl7Gm5 yilEygTfJlD50PH5yQ1s5mtPLq//DPP7WIazYhWQYZrpxP/8zk9WlQmWTQmUw+H1dFXTBVVKgzXc h0i4eZXA/j2NjHtPheBzfj2gZIKf3EHHPR8tujK1QR/U/6YUQd04gGbd05oUyKBzYxJw4AGBFfU9 GXQlzKNYET7/yLDXtxKYe5OOSUXOT9JmCkpp2SYLmuU3cDZRwWiIJN0LRhBQ3dThHAC6L0dT3CR7 +p2Lm6qFJdPdZOWWFtTPUCZL1Ig3YzLP//oiD+F0Ka76rw6IPnbd2LDnCd6keFi0hqtuay8aswCE RCmG3enT9GgbFU/GDogP3wIDAQABoywwKjAaBgNVHREEEzARgQ9qYW5sQHRhaWwtZi5jb20wDAYD VR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOBgQAaWX+TEZKRYn9weUXAwGqGZBjNQuoPQjcXZRql dcDzBJI9ND5N8kf++/TQOrWYw27z0h4tZW8guv+U48qcWs8zO4iQCH9W9qrn6vENiaWGGuUgXmK/ qsU3fOnkSkrrI1S6YDw0f8DxjjLgdeMNJpAEN2VZgez9lXBHWFgV1RJ+BTCCAz8wggKooAMCAQIC AQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUx EjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsT H0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25h bCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQK ExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwg RnJlZW1haWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065 yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FW y688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5k GXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0 dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQE AwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcN AQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNwPP2t 4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq726jTlEBpb NU1341YheILcIRk13iSx0x1G/11fZU8xggMQMIIDDAIBATB2MGIxCzAJBgNVBAYTAlpBMSUwIwYD VQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29u YWwgRnJlZW1haWwgSXNzdWluZyBDQQIQRYqCzJuakGUbJ0MP0q19pTAJBgUrDgMCGgUAoIIBbzAY BgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wODEyMTIwOTQ3NDBaMCMG CSqGSIb3DQEJBDEWBBTlM7K6sBNrB6BUTFMTwDOoAzKe4jCBhQYJKwYBBAGCNxAEMXgwdjBiMQsw CQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECEEWKgsybmpBlGydDD9KtfaUw gYcGCyqGSIb3DQEJEAILMXigdjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1 bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3Vp bmcgQ0ECEEWKgsybmpBlGydDD9KtfaUwDQYJKoZIhvcNAQEBBQAEggEAeg9p7/8tEXNtBqNc6iY2 Rd1MLjvK45toHZ8MkQsXxuwMewUTpjGxafHUn2UC0GSoTWDzJ0+uY5FZuEgfW8CM8bjo1OcE0p6m BO3KJ2oUQmR1v+sposrWMWAqA+iHm3lhstTD7KTcbT/rcKvPO6MnDWZIAqJYyDDJbi06hH43wAbl pTaAvvFHiISvMOUUHymuKvs/tThSP54u2AHtyoUO9gMR6so6Kftd3P14zlaKSU0NOVK8HnXQYyDp SixRuevVQT17v9TAgR6UF0FM3LkDjK7gWf7dyJ9T2L6La4uDoo+MNvD3lknucXyLm+lFFnpE9wOK H3y+lRnuf/vxyblLkQAAAAAAAA== --Apple-Mail-265--487526627-- --===============0756188594== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0756188594==-- From netconf-bounces@ietf.org Fri Dec 12 01:47:49 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2A6343A684C; Fri, 12 Dec 2008 01:47:49 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A732E3A684C for ; Fri, 12 Dec 2008 01:47:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.045 X-Spam-Level: X-Spam-Status: No, score=-2.045 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AQmJ1-PQAvBv for ; Fri, 12 Dec 2008 01:47:47 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 5A8513A6844 for ; Fri, 12 Dec 2008 01:47:47 -0800 (PST) Received: from [192.168.1.3] (1-1-10-25a.has.sth.bostream.se [82.182.131.89]) by mail.tail-f.com (Postfix) with ESMTPSA id A43EE76C53E; Fri, 12 Dec 2008 10:47:40 +0100 (CET) Message-Id: From: Jan Lindblad To: netconf@ietf.org In-Reply-To: <20081212073557.GA29041@elstar.local> Mime-Version: 1.0 (Apple Message framework v929.2) Date: Fri, 12 Dec 2008 10:47:39 +0100 References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> X-Mailer: Apple Mail (2.929.2) Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0756188594==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --===============0756188594== Content-Type: multipart/signed; boundary=Apple-Mail-265--487526627; micalg=sha1; protocol="application/pkcs7-signature" --Apple-Mail-265--487526627 Content-Type: multipart/alternative; boundary=Apple-Mail-264--487526753 --Apple-Mail-264--487526753 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit 12 dec 2008 kl. 08.35 skrev Juergen Schoenwaelder: > On Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman wrote: > >> The only top-level element of interest is , >> so no need to guess that. The injected PDU is going to >> have to be in an attribute in that start tag. > > Why? The hard lesson learned by the "SQL injection" crisis is that a client that doesn't properly and completely check it's input, effectively transfers any trust/authority it may have to whoever is capable of providing such input. This is a fact of life, and has very little to do with start tags or ]]>]]> EOM markers. Just as a simple example, consider an application that prompts for a name and inserts it in its XML stream: """ %s almost-nothing """ And someone responds with: "cool-hackertop-secretsomeone-else" The good news is that it's very easy to fix this. Simply by removing (or XML escaping) all > characters in the user input (plus quotes if it inserts text in attributes), the application is safe. > That's possible too, but a lot harder. It requires knowledge of the > entire XML stream sent to the agent before the insertion point. It's > doable, but takes a *lot* more effort as opposed to almost none for > inserting an EOM and hoping it's not checked. This appeals to the security-by-obscurity principle. It was (mostly) abandoned ca 1973. /Jan Lindblad -- Jan Lindblad, janl@tail-f.com, +46 702855728 Tail-f Systems, Professional Services, www.tail-f.com --Apple-Mail-264--487526753 Content-Type: text/html; charset=US-ASCII Content-Transfer-Encoding: quoted-printable
12 = dec 2008 kl. 08.35 skrev Juergen = Schoenwaelder:

On = Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman = wrote:

The only top-level element of = interest is <rpc>,
so no = need to guess that.  The injected PDU is going = to
have to be in an attribute = in that start = tag.

Why?

The = hard lesson learned by the "SQL injection" crisis is that a client that = doesn't properly and completely check it's input, effectively transfers = any trust/authority it may have to whoever is capable of providing such = input. This is a fact of life, and has very little to do with start tags = or ]]>]]> EOM markers.

Just as a simple = example, consider an application that prompts for a name and inserts it = in its XML = stream:

"""
<edit-config>
   &= lt;users>
       <user>
 =           <name>%s<= ;/name>
          &nb= sp;<privileges>almost-nothing</privileges>
   &nbs= p;   </user>
   </users>
<edi= t-config>
"""

And someone responds = with:
"cool-hacker</name><privileges>top-secret</privil= eges></user><user><name>someone-else"

The = good news is that it's very easy to fix this. Simply by removing (or XML = escaping) all > characters in the user input (plus quotes if it inserts = text in attributes), the application is = safe.

That's= possible too, but a lot harder.  It requires knowledge of = the
entire XML stream sent to the agent before the insertion point. =  It's
doable, but takes a *lot* more effort as opposed to almost = none for
inserting an EOM and hoping it's not = checked.

This appeals to the = security-by-obscurity principle. It was (mostly) abandoned ca = 1973.

/Jan Lindblad
janl@tail-f.com, +46 = 702855728
Tail-f Systems, Professional Services, www.tail-f.com

= --Apple-Mail-264--487526753-- --Apple-Mail-265--487526627 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGHzCCAtgw ggJBoAMCAQICEEWKgsybmpBlGydDD9KtfaUwDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UEBhMCWkEx JTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQ ZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA4MDYxODIwNTEwMloXDTA5MDYxODIwNTEw MlowQTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEeMBwGCSqGSIb3DQEJARYPamFu bEB0YWlsLWYuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gb1QID40kDl7Gm5 yilEygTfJlD50PH5yQ1s5mtPLq//DPP7WIazYhWQYZrpxP/8zk9WlQmWTQmUw+H1dFXTBVVKgzXc h0i4eZXA/j2NjHtPheBzfj2gZIKf3EHHPR8tujK1QR/U/6YUQd04gGbd05oUyKBzYxJw4AGBFfU9 GXQlzKNYET7/yLDXtxKYe5OOSUXOT9JmCkpp2SYLmuU3cDZRwWiIJN0LRhBQ3dThHAC6L0dT3CR7 +p2Lm6qFJdPdZOWWFtTPUCZL1Ig3YzLP//oiD+F0Ka76rw6IPnbd2LDnCd6keFi0hqtuay8aswCE RCmG3enT9GgbFU/GDogP3wIDAQABoywwKjAaBgNVHREEEzARgQ9qYW5sQHRhaWwtZi5jb20wDAYD VR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOBgQAaWX+TEZKRYn9weUXAwGqGZBjNQuoPQjcXZRql dcDzBJI9ND5N8kf++/TQOrWYw27z0h4tZW8guv+U48qcWs8zO4iQCH9W9qrn6vENiaWGGuUgXmK/ qsU3fOnkSkrrI1S6YDw0f8DxjjLgdeMNJpAEN2VZgez9lXBHWFgV1RJ+BTCCAz8wggKooAMCAQIC AQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUx EjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsT H0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25h bCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQK ExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwg RnJlZW1haWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065 yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FW y688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5k GXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0 dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQE AwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcN AQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNwPP2t 4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq726jTlEBpb NU1341YheILcIRk13iSx0x1G/11fZU8xggMQMIIDDAIBATB2MGIxCzAJBgNVBAYTAlpBMSUwIwYD VQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29u YWwgRnJlZW1haWwgSXNzdWluZyBDQQIQRYqCzJuakGUbJ0MP0q19pTAJBgUrDgMCGgUAoIIBbzAY BgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wODEyMTIwOTQ3NDBaMCMG CSqGSIb3DQEJBDEWBBTlM7K6sBNrB6BUTFMTwDOoAzKe4jCBhQYJKwYBBAGCNxAEMXgwdjBiMQsw CQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECEEWKgsybmpBlGydDD9KtfaUw gYcGCyqGSIb3DQEJEAILMXigdjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1 bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3Vp bmcgQ0ECEEWKgsybmpBlGydDD9KtfaUwDQYJKoZIhvcNAQEBBQAEggEAeg9p7/8tEXNtBqNc6iY2 Rd1MLjvK45toHZ8MkQsXxuwMewUTpjGxafHUn2UC0GSoTWDzJ0+uY5FZuEgfW8CM8bjo1OcE0p6m BO3KJ2oUQmR1v+sposrWMWAqA+iHm3lhstTD7KTcbT/rcKvPO6MnDWZIAqJYyDDJbi06hH43wAbl pTaAvvFHiISvMOUUHymuKvs/tThSP54u2AHtyoUO9gMR6so6Kftd3P14zlaKSU0NOVK8HnXQYyDp SixRuevVQT17v9TAgR6UF0FM3LkDjK7gWf7dyJ9T2L6La4uDoo+MNvD3lknucXyLm+lFFnpE9wOK H3y+lRnuf/vxyblLkQAAAAAAAA== --Apple-Mail-265--487526627-- --===============0756188594== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0756188594==-- From netconf-bounces@ietf.org Fri Dec 12 06:50:16 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C0E8B3A6870; Fri, 12 Dec 2008 06:50:16 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9DF2A3A6861 for ; Fri, 12 Dec 2008 06:50:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.215 X-Spam-Level: X-Spam-Status: No, score=-2.215 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Mjju4TNdzY1 for ; Fri, 12 Dec 2008 06:50:15 -0800 (PST) Received: from smtp118.sbc.mail.sp1.yahoo.com (smtp118.sbc.mail.sp1.yahoo.com [69.147.64.91]) by core3.amsl.com (Postfix) with SMTP id 04E503A67F7 for ; Fri, 12 Dec 2008 06:50:15 -0800 (PST) Received: (qmail 89729 invoked from network); 12 Dec 2008 14:50:09 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp118.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 14:50:07 -0000 X-YMail-OSG: IfFjeC8VM1mEywr7VBD03acDOe0hxTM5eESaXGDzbFll2sQqIv11ljzVcOvuFySQiNonJM1TcAnuP9fwBlIvFRoB0icUMUBt7KxLrWFuoVou6Jymxrnsb5V_4MtKWGXwO9w- X-Yahoo-Newman-Property: ymail-3 Message-ID: <49427A1D.7070102@netconfcentral.com> Date: Fri, 12 Dec 2008 06:50:05 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> In-Reply-To: <20081212073557.GA29041@elstar.local> Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman wrote: > >> The only top-level element of interest is , >> so no need to guess that. The injected PDU is going to >> have to be in an attribute in that start tag. > > Why? > There is the 'official' attribute hole in , making it more likely. But an implementation could be filling leafs blindly too, so this could show up anywhere in the PDU. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 06:50:16 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C0E8B3A6870; Fri, 12 Dec 2008 06:50:16 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9DF2A3A6861 for ; Fri, 12 Dec 2008 06:50:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.215 X-Spam-Level: X-Spam-Status: No, score=-2.215 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Mjju4TNdzY1 for ; Fri, 12 Dec 2008 06:50:15 -0800 (PST) Received: from smtp118.sbc.mail.sp1.yahoo.com (smtp118.sbc.mail.sp1.yahoo.com [69.147.64.91]) by core3.amsl.com (Postfix) with SMTP id 04E503A67F7 for ; Fri, 12 Dec 2008 06:50:15 -0800 (PST) Received: (qmail 89729 invoked from network); 12 Dec 2008 14:50:09 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp118.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 14:50:07 -0000 X-YMail-OSG: IfFjeC8VM1mEywr7VBD03acDOe0hxTM5eESaXGDzbFll2sQqIv11ljzVcOvuFySQiNonJM1TcAnuP9fwBlIvFRoB0icUMUBt7KxLrWFuoVou6Jymxrnsb5V_4MtKWGXwO9w- X-Yahoo-Newman-Property: ymail-3 Message-ID: <49427A1D.7070102@netconfcentral.com> Date: Fri, 12 Dec 2008 06:50:05 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Andy Bierman , Wes Hardaker , netconf@ietf.org References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> In-Reply-To: <20081212073557.GA29041@elstar.local> Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman wrote: > >> The only top-level element of interest is , >> so no need to guess that. The injected PDU is going to >> have to be in an attribute in that start tag. > > Why? > There is the 'official' attribute hole in , making it more likely. But an implementation could be filling leafs blindly too, so this could show up anywhere in the PDU. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 07:30:56 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D66643A6B76; Fri, 12 Dec 2008 07:30:56 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 178FE3A6B30 for ; Fri, 12 Dec 2008 07:30:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.222 X-Spam-Level: X-Spam-Status: No, score=-2.222 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xRIB4gPyFAez for ; Fri, 12 Dec 2008 07:30:54 -0800 (PST) Received: from smtp117.sbc.mail.sp1.yahoo.com (smtp117.sbc.mail.sp1.yahoo.com [69.147.64.90]) by core3.amsl.com (Postfix) with SMTP id 6C47B3A6B22 for ; Fri, 12 Dec 2008 07:30:54 -0800 (PST) Received: (qmail 86472 invoked from network); 12 Dec 2008 15:30:48 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp117.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 15:30:46 -0000 X-YMail-OSG: vLNkLVEVM1mRrLf0_3rAJ2JpOb7h1mDJ6YMRU6jSoI2QYYbkI6FRDesWQl0Z5JK50jpsfbZhe5dPx_1W3y0rMjsXUUKLHvjtbumXT3goy30FkG1GZbaGuQd1aczb1cATIVA- X-Yahoo-Newman-Property: ymail-3 Message-ID: <494283A4.4030703@netconfcentral.com> Date: Fri, 12 Dec 2008 07:30:44 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Jan Lindblad References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Jan Lindblad wrote: > 12 dec 2008 kl. 08.35 skrev Juergen Schoenwaelder: > >> On Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman wrote: >> >>> The only top-level element of interest is , >>> so no need to guess that. The injected PDU is going to >>> have to be in an attribute in that start tag. >> >> Why? > > The hard lesson learned by the "SQL injection" crisis is that a client > that doesn't properly and completely check it's input, effectively > transfers any trust/authority it may have to whoever is capable of > providing such input. This is a fact of life, and has very little to do > with start tags or ]]>]]> EOM markers. > > Just as a simple example, consider an application that prompts for a > name and inserts it in its XML stream: > > """ > > > > %s > almost-nothing > > > > """ > > And someone responds with: > "cool-hackertop-secretsomeone-else" > > The good news is that it's very easy to fix this. Simply by removing (or > XML escaping) all > characters in the user input (plus quotes if it > inserts text in attributes), the application is safe. > >> That's possible too, but a lot harder. It requires knowledge of the >> entire XML stream sent to the agent before the insertion point. It's >> doable, but takes a *lot* more effort as opposed to almost none for >> inserting an EOM and hoping it's not checked. > > This appeals to the security-by-obscurity principle. It was (mostly) > abandoned ca 1973. > great example... Isn't part of the responsibility on the manager? In your example, almost no ACM or agent mechanism is really going to help. If the user correctly establishes a session, and has write access to the /users/user node, then injecting an extra entry is going to be accepted. (The super-fine VACM mode "let user X set leaf Y to value Z" is way too hard to really be useful.) > /Jan Lindblad Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 07:30:56 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D66643A6B76; Fri, 12 Dec 2008 07:30:56 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 178FE3A6B30 for ; Fri, 12 Dec 2008 07:30:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.222 X-Spam-Level: X-Spam-Status: No, score=-2.222 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xRIB4gPyFAez for ; Fri, 12 Dec 2008 07:30:54 -0800 (PST) Received: from smtp117.sbc.mail.sp1.yahoo.com (smtp117.sbc.mail.sp1.yahoo.com [69.147.64.90]) by core3.amsl.com (Postfix) with SMTP id 6C47B3A6B22 for ; Fri, 12 Dec 2008 07:30:54 -0800 (PST) Received: (qmail 86472 invoked from network); 12 Dec 2008 15:30:48 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp117.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 15:30:46 -0000 X-YMail-OSG: vLNkLVEVM1mRrLf0_3rAJ2JpOb7h1mDJ6YMRU6jSoI2QYYbkI6FRDesWQl0Z5JK50jpsfbZhe5dPx_1W3y0rMjsXUUKLHvjtbumXT3goy30FkG1GZbaGuQd1aczb1cATIVA- X-Yahoo-Newman-Property: ymail-3 Message-ID: <494283A4.4030703@netconfcentral.com> Date: Fri, 12 Dec 2008 07:30:44 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Jan Lindblad References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Jan Lindblad wrote: > 12 dec 2008 kl. 08.35 skrev Juergen Schoenwaelder: > >> On Thu, Dec 11, 2008 at 05:09:14PM -0800, Andy Bierman wrote: >> >>> The only top-level element of interest is , >>> so no need to guess that. The injected PDU is going to >>> have to be in an attribute in that start tag. >> >> Why? > > The hard lesson learned by the "SQL injection" crisis is that a client > that doesn't properly and completely check it's input, effectively > transfers any trust/authority it may have to whoever is capable of > providing such input. This is a fact of life, and has very little to do > with start tags or ]]>]]> EOM markers. > > Just as a simple example, consider an application that prompts for a > name and inserts it in its XML stream: > > """ > > > > %s > almost-nothing > > > > """ > > And someone responds with: > "cool-hackertop-secretsomeone-else" > > The good news is that it's very easy to fix this. Simply by removing (or > XML escaping) all > characters in the user input (plus quotes if it > inserts text in attributes), the application is safe. > >> That's possible too, but a lot harder. It requires knowledge of the >> entire XML stream sent to the agent before the insertion point. It's >> doable, but takes a *lot* more effort as opposed to almost none for >> inserting an EOM and hoping it's not checked. > > This appeals to the security-by-obscurity principle. It was (mostly) > abandoned ca 1973. > great example... Isn't part of the responsibility on the manager? In your example, almost no ACM or agent mechanism is really going to help. If the user correctly establishes a session, and has write access to the /users/user node, then injecting an extra entry is going to be accepted. (The super-fine VACM mode "let user X set leaf Y to value Z" is way too hard to really be useful.) > /Jan Lindblad Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 07:33:44 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 43B6D3A6B30; Fri, 12 Dec 2008 07:33:44 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EF2913A6B22 for ; Fri, 12 Dec 2008 07:33:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S8nv6+imeXTC for ; Fri, 12 Dec 2008 07:33:42 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 937913A6821 for ; Fri, 12 Dec 2008 07:33:40 -0800 (PST) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id E80E4C005C for ; Fri, 12 Dec 2008 16:33:33 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id tcoVBhBwoF-f; Fri, 12 Dec 2008 16:33:25 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id D8B5AC0054; Fri, 12 Dec 2008 16:33:24 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id DD1098B0AD9; Fri, 12 Dec 2008 16:33:23 +0100 (CET) Date: Fri, 12 Dec 2008 16:33:23 +0100 From: Juergen Schoenwaelder To: netconf@ietf.org Message-ID: <20081212153323.GD20922@elstar.local> Mail-Followup-To: netconf@ietf.org MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="aM3YZ0Iwxop3KEKx" Content-Disposition: inline User-Agent: Mutt/1.5.18 (2008-05-17) Subject: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --aM3YZ0Iwxop3KEKx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Hi, I am attaching a draft report of the interoperability tests we have done at Jacobs University. We plan to continue this work and we are of course interested to get more implementations so that we get a more complete picture. If you want to help us, please get in touch with me. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 --aM3YZ0Iwxop3KEKx Content-Type: application/pdf Content-Disposition: attachment; filename="NOT.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjQKMyAwIG9iaiA8PAovTGVuZ3RoIDM3ODYgICAgICAKL0ZpbHRlciAvRmxhdGVE ZWNvZGUKPj4Kc3RyZWFtCnjajRrZkts28j1foUdOlcUlAIIg92kTr52jYsdrz252y/EDRUIj xhQp8/Bk/n77AEhKoiapqRoAjSaOvruhzZeNVGEcCa03EfzJKEy10JIGxfEbQR2x0aFRJmbY 5ssmCuMsy9INdNIkicRms5168xyjR2GmNw8bar6fFtwuV/zu/pu/vVZ6k4VZIpPN/X4jRJho ncL0ffkx+Ofdp/ufCMOEmYFNAMOESSaEQ3h/t01k8C38F8Fr6t/jJ9+8up82jEUYK2XcmfBA y9MoDcslyl3wX+vHXMB1FAohso2Rq+vFmb6x0c0ZoWSYSYkocZgpmS6RrpYRqQojFW+2idFh lBg5kzHZiDhUcSKJjmkaAnPVZsJDcr19df/yl7dAKKmj4MdmsN2dSIP2ZLt8V9XV8MQz93eZ DGw/VM3DxABgTKY1rb01QFGTAfEMCE1KK//4lJf+41gH4zHv7uIoeMGwH3Ju3+TNwWMpHXR5 4xB+wn3g/BK4HwPVw0hnvPBvME2TIGggXQrbaXKk8z/Yhlf5UBwINU6BosjUv7hM2zzSnBQh oN38LkmADsvv8roECtKslGkoIqCJUGEWG0PzL9vjaUQiu9NVtimsv3FetLue+/9uqjupg693 Qge26yc+fNfZo/Uk+t52x7xBlCdmijRLpkShNio933+/xj0NmmQSpz9VOFyw6hAOM1t+D/vi 0Fogj4iC3PrrXu4tQCvihLQIF334023/8TvdfjteXzzRQVjaSyX2aqczEwqdqVUV80jbJdak G4vjxnCYLE42OjGhNCKmM3276+HmxeAOny2M0haULpMGmC/jEISUlen+YO+2Ssngx1f3r7l3 yHvuwA3gSl9tDbpVMijnprHDY9t95kHRNr9FkXxAOdZBPlRtwxPA6S0Llj/31CHBQ3484D8U kAG+MSo4dah57dAWbc2QIq9r2h76k+rj4PFQFbjjwQ3p2LjEuKur/gDf4N7RxaaAFAvh9zm1 Pa4dwyH6IW9KkCJlgpJxqoZbGUVJeLc1YE+IXIg9nWSxGB/6bFNBm7p5vOrXqrSoMJkKjpaP nzdVf3SwoeW2auA4dQ0SrKIYCVmdxjofLC7hgHBaxi1tbWGGvz/YtVuvsiiOwWruuZ0YGsfG 870q8KQ4u3viduzRmFI3dwu8+mOwTV/t6tV93+Td5/EE503j4Oe8eRgXPEeoCn6LdPTfNz9D IxhtlxNHcK7Mh5yBYHLakvZGOMkXQIfWLd3u16juzHVfHU+15f57e2wH13/HTClsORLTHfgl kJ17eLT3717y0RBQ50/oa4DhIVv6SaplKFIjnEJVyMskDXjVU9sNOM6ArH3RVTvrpnNuZm8G g4q8GQmmZVZNHg0WGMCbPadQRCAZgQbUyB4JQjIc8oFhdCqAjERehJCsIQ4sy5DHgwUB6hg8 Hyy6VEucro7bVVGvSZlJxFAf4dhHa1G54XoDGRsAzXoM0AuVh+n+ZIsKBbagdcI10XKGK3XH xx4KM0EOTHpCyIAspT1Z+Nc4vHl3GJB0LI68spUTD7KFeU3s08HuTkbB+ECjmEwFQnuHxsyr Gbhgsb7cD+yK0nHw66G61CDhNRcs+lgMzFyZeHZBrwBV6dHJKUHSBKA97f/Ig/4Asle0R/i0 ZwhSSErDjCCUmdLbtas7NqL0P9qlmlRITvrSupApn/DqOnT+58xjwdIxOPgYXCwuDUoloogi OA7gSrwl6Lb3u2fxNEu7TEIIW5JZAGS2FNQMBXUSUpiarmdLb1d54v3rlwyITSwY9FF84k5p 15WMGYKrNajDKjPkDrMELTlbcYaiYiF4trrWoaPJxg4Y9PzBMhaaXjSI7E8zM+1/wQqyxyAu OtXBjyjJMbjjum4x9njE88QiKGqIzoaeJ+kY0HZ26Co7hygOdTqc99iAuu/aI/fgVKunmI+q owQ9hZw8BQLaDlsmAY7zsuROQ5iPPLjaG4H8CclmfyfwmDi6IoY4IwakPc4SmKVVgcEsCMqg 5yKWATznpnOewKGSF1h3neQPFBDuzB8oEQenvMvL6uGITIk0JnAIZR7wJ+S3aGc0Bw0jwBoM 6OyXkY0XDKpmbXdwjSCUQPKP8hN32O1jvAImreduNXBLFh1xPEbnglIeO/d9hlHAtdGEgAIC VxpLKrhK8rbDe3EgiF8ik3qyzlsdZ94en++qJFJ6GDvyBTD5WA0HBhM1AALU2L5/9e5nkKso +N+q+bX9CayQMzxMUmdzKpczAZmedckoTHJhKXAwCwiO+vGEnrrn0ZSj0Ghvc7iCdXOdfc4H fxmrDk+nwcruSRugcy3v0tsAjnw12eSceilaWsuwOi8+u/z1kh14dfQcLXts7J5bEq3OtkAE f2V0GiqFgKb67EMxmKXjYod8yB85hU0r/Pjw9s07dDoglOoT+q9oEZgjmFLxgeIcHCGPgOF9 y2Mfz2MfI7x+aDuPi8K9KgEnQGHLJmPl3FccXxMWZ8nJQZszjrdRIK6F+yzvFxgqYAc7Et/o i7ZY1YARKYmJgHCJAMaeCzsDo7KigsOI+QeKPNjqHUQ/AnhqGx53Y9O4UJYusGpml7ciF280 JijdgNG0NNHlzXuGsnEwcFPoVWVOse459m03j4pMFRVUTIGmu0I4yopmG4P6Cvfl7IDtGkGq I2DODsbByf8gU/u+4hBNeP3H2cONeKftINL3KYqUnKJIclhgrDoSZoRf8Z6QwA+jY0UEZ15X QzpnRbUzmYnXfwYiFyFSpwiPLB4Cr2UNgW4/XAJLDn1e3AwjmW6TQTZoKheFA4oWAbjwqahc AHkN9Khrqio4UZjVzVxyBCF4zhoyiRumYwpXyA4oBSeQGK2iwHAoIDC4PHHyUVlGky58ERgD TsdmTwf+vR0WEftl5UNmJkywqpGKZwuDE96WEa9LqypKwzTBIsqy7DFzDyT1Y/xpxRkkKlvk DZDl5tWRO5Q2xGiAq557ncvasO9hzrTu27rEuCMSwJauH5A0RoJ6M5bP8dwWzziKRdTq8r65 ggn24oknBlfApIFL6zLvK+jLntsRM4+gdF+189drAjDneeC4nTFdhE84WMTRMLpMkgjIeZ1f YkXg53gsjc7spLjM8Bilci0F54iFwTnaWyD2Bwv6V75YDUnJyGVgWyhzhx7obzH2eMw0cvcD aLuj0ES6AkjPUGcyMU7px3pwUEdg6EES5SJXXMwPVojq9pkSNFBTxzCA7duR9wEz3h4d4kKL L/NCRvA55oubJkxB4DwdEAdkpqHtFjqac/0Mw3Fu9nbxxXmWiBAQD8pYMCg/uM7EsO16kOwN h+EwmTgIZoHTKwRPxsPNGZyTPphOWM/QtlQuoIE+kQpPStygVdarDrvqYWxHl4C2rlQ9tAOZ TVcFqsl537QL5PaAWuB+eHvOSBB0zKcwCT0GkQSmT/mJMck3FFVvfZxfOoTOIvSFc33uM9TU 22aBpQiCMBfJlTyaUgWpkRz8VhCz6NP0ngv0Meu+xvIgJ9JxtEykdRQa6R+mulOxkmxLLINr jzLvC1Gx7XtMW/n0RoQiUxclN7q6Fo5IWi6ugeA5lKc5ugfCiTY0v+dg1mWvAFq/RyrDWAsz X2QLNrt+WrnOdsK9lVSAw3Q3C9mY/3qXErdxxlPWuOwKYqsz58uxrjcnYNhG93xzXXdeuUYU QuIo/YsDpNwgSPvqYeUaCayVSv84gQVZCeHO8HSCuHjwxSHpCztiPhfDm/zoJioHGWztExkD BErxYeDMnMHSGNdkYLso6lWQn3HNBYwSrtfzNNeUIm/2ANKPFUf/AM07t4o7KkPpEIh55Gqr xLTgtG7nbPgQvlh5QhUZhApJ7CjynzujMAOHG76kJ9Q3a6Idh1KlmfuEjQHoZJhFkViJEnSM OTreSsdcO0PIwFOT/iMMjReClpkEwnMHh6jBF2r+frfNwJ992zxjBJaR4tdqMtYm5ljFeCNk 4mXN4ywXMXwohlLuxG8oXKrEafCoq7bUWXKdBRIDHUWYM1Bhk16mARrLrJBAHvMZM9+148DY zhwAw5/6wR5Xw2NwkKT7rtDNvZ2FRV3R2FWP08U0O1jsVa7YDJFUh5VEui2NuZ3vAIP4dkVZ JmZZrzWXoRmV4tE1UGiUsLt7+wu+Pd67l4KEg0ZsfThY+rXWCD4fLYsDjfFOLIJ3na0hrWry 7oknrqMXlSlWL5zmkJVunTkeQ3vNY7ngMfrFhBtPZ/KbB9dxAo5ddHD1yAnGou4yHR0H5lbV V6ahhmSJdpau6nv2iP/LV/KvHT+Q2cc/KwHLZSgPtmxWAimWSgBTVNVFsKsASn7DhIbehbjQ qChbdAVB6MMSz9V4XLEQRCn25cHksjwIU/xcRHNzzg/w8zxQ0atBMS1IWaQrReEceJ0VBu7p LbtAieQkH7I4iOGOY1P5WEyqGGsPXHjA+Zxhvj5JIApKAZjzeFG7gziDjL4mMq+LLR8abMqH g62d1UEyfPjwgyMDzH3Un87tkbNdGFc1kHG2JOEAn6iA9s1TYVV6ORxUmLPirmppBgEKN0S+ ciFc+YBM6cX1ev6M1UdxKZYLdwjmyoW+fuOSyzeu82cP99p4tLl/MCHHqCnzAdFiF026c2VQ MGlN1pPWdJZ0kS1Mk8iShaTjVIGmEME7h3vKu4EqOHgtBCBVGrwbDiAj6bgHcvqctBOxpDF8 U2h9RuSSFLIFAH5d8UMH9jFrU5mPFwAw85OGi+zSGK8obuLG4wf7GRDHnJtJWiJ9KfkIOuVU aIr0rAOLfEbPVfpIX1cdWcCvlCHxPwBQcFKu4s+nV3z6pVM0/EAEzfKByKSu0gpwKmavXpjF BfQf9uFHwsQ7KH0edMLYEzCheKUqp49b9yxJL+UE2Dv/5ZfCa6xs71dUWD+dnryk0t6KcCin OCIhU5NTMK0uTqfIGYF3/Iq5bMuJlDc6DoFIiV8e7XBYf3ugl440cfVDmRos+W/nt4A0odcY WIDFNeXsDdvFjyfow6mOt0r3KWiGOKNH24q0TybapytlQHzap18q0Av+0Nt6z1CMh9xjv6N3 hp8PKHi3fhoESZWQ4i/9Ku//ea7ee2VuZHN0cmVhbQplbmRvYmoKMiAwIG9iaiA8PAovVHlw ZSAvUGFnZQovQ29udGVudHMgMyAwIFIKL1Jlc291cmNlcyAxIDAgUgovTWVkaWFCb3ggWzAg MCA2MTIgNzkyXQovUGFyZW50IDE5IDAgUgo+PiBlbmRvYmoKMSAwIG9iaiA8PAovRm9udCA8 PCAvRjM1IDYgMCBSIC9GMzYgOSAwIFIgL0YyNyAxMiAwIFIgL0YzOSAxNSAwIFIgL0Y0MCAx OCAwIFIgPj4KL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0KPj4gZW5kb2JqCjIzIDAgb2JqIDw8 Ci9MZW5ndGggNDQ1MSAgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrN PNuO47ix7/MVfjtuIGZ4v8zbJtk52ABng2w6OA+deVDb6mmdtS2vJG9n8vWnikXqYst2B/EA i0a3yBIvxbqxiir24peFVExzYcyCw4/kzBthZKysdx9ELIiFYU45TbDFLwvOdAjBL6DgreVi sVj1peEdNecsmMWXRXz8dz/gajziHx4//P6TMovAgpV28fiyEIJZYzy8ftw8Lf/08Pnxz7GF Y8HBJNDCMRuESA1+elhZufwO/orlp1h+xC4fvn/sJ9SCaaVcwgkRGmOjDAxnVVrgX+fRHMEN Z0KIsHBydjwdzIWJjDbUc5W6nq+9H1twxpVTcYXb4mvZPKyk4cumbKtNtf9CteK5fhBm+Sv+ KQnUvaZCfSiboqvqfUt1GsSYJUPqIJGDAV6vhGLcSB8nesTOIsjlj98//vEvP37Cilgemrqr 1/WWXrXHw6FuupZqu+O2qw7b1G1d7//BufxypJnjRKthplTAmTZFV7RdDcthDyvFDfJPKns2 AgDN0JjaVG0Cl9h0X24IXLT0JArA+7bsCFK/REx4RkFEFM6nEn5ZP/9fucbFYaUpfzlWTRxf hGVXE/RLHBYKBT025YMEHlTrkuovTb2jHlUeqNpXXVVsp1gkQpQvDwI4CXSEttIt267ocCQJ C93HOQFY0GMD3Cd84G3PYBh46BnJKSMno95oPtasoEHfbUia0xz3e5SlrGBDw1Xfcp5rKFKB GGE8CEjZlvsuAff0TILol89Fm9rv6k25pWKx3+S+JMIVrG3SMSzXx+ZB8uVqjnkNzLf9CmsN ZlmsuyqyIKkBwk6YC1Rx2ix/2Kcem02F4N89rLQSg7TjO5Dv1RyjktArDcjPkFYJprjPRmsN 66s2yMhz2hrHpPMmtexJCriAsVm+vVbrV5oGyatQy6n6jMQ4vuBKX9AcIKx7LTpqBDOSunnP jAfDMUH+GUlq7XJX7KvDcQuIbQhAfIACwhoqruvdrur6JlEGLenVjEg5wbyWNyVKgzwFGUar JiqDflimYC1T/maSaM8JR7Dfs3Q3mnHv8l4AKtB0x8Pc/JYJq/L8Z7qvlZ6wQruQWYGvgBVk yzhnElCcEHdbFxsyQnz5/JWeJMQyTK0DvCArxZcHQJRKYJ1iy2Qkqn/1lo8DCmUqVal1Uz7X ddfOSWjd7xGIUTL7T/ozO90O8yZjrGBOejm/WTGB/FoJLWHfdTbt/oKlFukJ0F9GW6kMTAHJ ga3cMa2twQa//2EnFn+qP/x1sruCRATcC7XwzBlu+w1R2xHfHEiHd2YBozKv0j71qQLOIUGd XwpGz16JsXKIliNvWwjZFgj5irYW5BwMRUvwJ3GZPgqMoHU8zNMnNVqNW51v6FYybkE+lcP2 QU/wV04sJT74sn2tUVDeWoJG+cHCsPlibbypY6+k//DmNa6vN4EAeS7LqzvwsHtaD9t6jU+1 pN2oISBKMwIjNgjoiYyVN2xaNz9HdwQBX5oadC/2ON1yac44jgHcfvj+8dMDqDbDKu1WEY4o NW1H0I4moDejlc8YIQNSEoxN2g079Ao0/KWaM0TWMG29Tk3RtpyPB/oIVs3qqU0qYdO4Mi4U hTTDBgCWQ7hoeUHCl8cWKY0QtKc6ehdFgpCBA9BgnlNTMrmLVR58Qk1ApYvbLviJ0YooIFpB 1d6WAYWtc5f8AeGYCTq8i24QKniXDX3PDpqu332EF2CPpZjZflQmglTJmVKZCAgptlsCRTMG ALSQbQK9pDZUbQ/lukJRyaOd7/aK2wtr5v8mU6X3dmbR4EiDO0NYtFSPK1BGxxUggGw8liJ3 sAk94gJWPWvjFBOC5cUpP+MSgz2c8NeBq/k3HBEdQexRdF1TkbvQReSgQ7l7Lje4Tc2oJbps CtwjMjp68J6wZnEZxa7syOeIL7smGiSo9O6KyfzCYlwu9OwewDBBaLA8GXfWpRvWZ3nyfYCz ICDgifwurbrclkOtKQ/bYh3JZHkiOjiZaN7RS9+g6INwROOCLYAW3axrVx8GpkZdxAIRAwpl 09TkiI7b9USJiEYu4WqJMMYO3X9Fsw7b+qaYnTuPqPLMKndVYNP3m220rsrIJEOK8MGwyYpw Sa+NYo7zwds5fL0u431IUB+yWyZh27fhxC3r5V/C5kO8QRW1gbTW8cyUlmpoBfEtmKmKNmw+ E3cBcIgsZmj0VnUoY1Yn0liTbV9L4Egai8yroUVDQHBjDyguuXaqRdaM3NCTGVOQo6xIbLHi gv8LO4+TWmW/NgroZVp7jBLcnD2BCahzm6bFR4yoE0OE8owrccKQkzVxNY7RFNfQwPB5zAPy 3Zn3eO7eGnXJc57OSahCF4G+2nS7KvbAHvJKn9MhRVJoQFLcOJaYizwg0AlZcLf1+ucZ5KVl nHt1dbeHAER7nUOI4/7CUMpBUZlT3sUQH5gXTwdQuosmxrsA+9IUMRoGMI6ZGYlHO1ycmmDU 8pBEGZ4FPUZCHPSEt9gmiiYUcPQ2wZoUAVeoIDEuQTDut/h8nlUwcD5jNAJWZjsKpdGCKrCl /wOGLQX9akleIzWOC4ybMLxAJNLJlAQrvAbrVbW7lupF7v6eoF5yD4jSWNxPznm4pwMGeFKI BYXoTMZSDHZWMlza+wV4405YP/g7cyKD7NHuXEdxhpGjA0NJYWYcHdx3ydGBEp3goF2EPbkc H1PEt6+pkNUvVs4tpEx2aNIHSIkUm9/RxmdDoGj5VMmkeJOOFUgFc4B6RQN7v9+BK96WbUuC j7Xo6boYb9AT9sRdtacjBqwf27gwhx79LFfm45P1tm7LVZprzpRycF2Nua7ZeNSSlf/naru9 Mp6DKE64cKbeIFBa9hvtOEyUwUEXCUZ9HCCeBoqwJqnBTOHhw0wcKZjmPuARugreUDj99Jkv NtDyzx8S9A0qED6GIBe7D1KBJ66kzJDth799GIXVCdrT8uKI1I4vdrmYe5wMqNBegdYsVg5i equtGiJdOzkBs7BSiKwcLlnJEAn5l15/TqingHpeCWg+GvU/xDQPeQNTzTXtChNMv2sw3Pxy 3EW/4vRIQCtmuPJ3xBb5CL/3Yz3aAAbg37gU2aDACeJi/ryklyKLBz7eunFkSkHJJUEaD3wv QbqObC9IE2Tb+tisk7F9QpS3YBI/X5So+6Hd8/SbsA19V63DLbZ5zYKCfXEcXN/gWxzZ3JVt w5DXuDbGtStS3Jhc1KfRl5lVvx1cYeO9VnF/LnrHnAk+n9beicQQNyoPo96gscPjY0vnnk8x BKcw+nMi82l4neCXpGag92j+37LaGAeDa3tLbaxgXIp8sHdAyfv6DtUZjX43xl7FeGDsGONT 5Ukm8CLv7ob2t+WdNky7oG/xTgfGrT05ALjBuNHQd2PcVXQHxo3QHfHtIq/uhukpr8RdeQWD GzyIucEriOIhAA+TM4N5Do0GvBuHriI5cGiM5HtYdDdUv606ScGMDTcdP2mYMMadnMbMM2k0 5N2YdBXNgUljNN/DpLuh+m2ZxAMEteqmmycgeOHcjM9R5jk0Gu9uHLqK48ChMY7vccTvhuo3 tXQGjx2M97c4xPHgwej5w5RZXo1H/o+wFbBngOOn7+FxflNpN94wx9Ut78z4wGTgcvYcaZ6U o4HvJfbXke3FfoJswnNVbS6K/f1Q/bascoo5ZMYNVjnHlCKd31Ttumg2KzyK/lK2l5k1Gvo3 K/f3tSGY+RPULW/JWMOUC+SIDB8yu/IyKUcD303uryI7yP0Y2RsByP3Q/LYyD666V/6Wx2QM 4CC1S8EjZu9dZtBoyLsx6CqaA4PGaD6lEKnZ0fejPuJvdquu2pX1sbu8U99vEd+WfeDHey9v +VIG09NtIJtFH9VX7fG5XTfV4erJ+Xj8u/HyKs4DL8c4P7UdYL37fHbkSfWYlDlU6sMVxt5t RXc/XV8FtC744Y8pLWZzJoVmQetLtwyEARIbDyQWgQmYaD7hUeE1DOGAKLnZJGPQy6XEz7J+ nLYMwGnGI76e5ApCC8wEKC5/fM0fPmJWZPzGCs/nplhjj5/L/KbIeZd0Wlds8dt9SqXUZ4xV 3DNvRcBLEYxbcjLOSZNbrcbNiDSTHOt+NIvfJn1434dCwazic4lrQaekW8q6CCp/df8Cyy5f jlsCxgn6r/OUZJ3GPM9uVHgNIn2YhUr/tZTevL1W25LgF9KpMe3G93nkt75Zgruh5PmnavpC HTyzoy/UxOaXuqHsnPFdkfzJlj42j78R54SaeKhHeMx8JhbKDvdHMJ0nC8dcwgyeVbiM84yL drLGIJkyaoZ9MZdoWxZNyjXqkyWFQWNmxVn6SUrJB/KHmTwWAE7yK0JMf6W2dB6bkjRC5nQY Z83cvF4C1iPd6FDO5wTfMMHLzWT5Q9ssNS4M3a5Q+CQX4NeRz3Z6FQGayTBDWzBwuLYWS2rs +fVv169lzDnB9xlW0CNSMSW75BmmipLyFrlIyXnRWl1cj+eYzOb6BKTs35zupxC9g183o+c+ 5RN6kRIzEBIZAZBhPEASbK8y1k85STSXc5mY0lDypLSjViOGQnUsU9A8TjtuPitCJ9dtZlWO 9t7vKAOrLTEhMc7J5ZAgux4laR2Oz9uqfY3rhzZ4EQHBP336IwFQKwn05D5TocRUlX+urmSR Y45R1D+XrAkU0oUfKI1y8u00Y8q5SVoPVGnLcYQPFrTTYo4qL5hqaJRZgm2aLBJhOWUSxEsI q0G+kPP4Jj83NWYvYQnVG594Gwg1G8vde3KGL/hoZ9cYwTr3uUZjwyXSnRYsVJhMuzmuKfkH APuYj/M2nydDI07IgVR4qdZFd3GL8KZPS9+BCS/QzoKiapDUpiGjhlp8Ss7YgtIsSf5WeazJ /H9AI8lDTvPBYkGP0wERRp4ippXh7UWoFWtMm6W7WErqeM8FX1YAbal4qGHfeY4WkMfM8dnU sXU5vQQmwySXjSBTlFoCFun5VsYE7hEkJrN+zeV13VA+3Wig2ezRdc4cuqi1J67b4LbJXiAo cTtnA8MLnJLMWcoF9ph3fyieq211VUWreMnSAYvRWHjT9+pwaV4n46ghaN6V1OLluF+TPe4b pasmPt6QO2zLPk1m9pKHVCLbAcVHdgDAJ8aJUZ7qd9RyjBo2prue8NxgCnFKi5/hf9yqJTlw Ui6P+wrMxI5gTZkzMvDVaKSG3qNj/PeffqAk1AihXQka0xIQNKU0Pycx3oB15B5jYWTdsJq0 QwS7/PtPP6bGL/V2S7d+0stkRLGwK7vXepPHQjvzfDl5XwJ/yG5CQUGcjSWw4x7TIXFLHhgA 4EMZs9axLRl4cr4IMrmv5nVc92y8ELlUUaK3yhfVnM7bgBocX6xUqV32tzcfMZndLf839VO5 n+5xnctT7X1pma5HqnjReU93AnRYlkW8jgCvcZVUQv4+1zGFHCVsW5FvLtMtVCy0ZUNmoqFw Bhvujm03jwT1krP3EWVgnC6TY9vXEjk846uALQjKTa0yDYomt6goGZQmgYcAW9Z2BIi6L2VW SCjhUv8Lr3a31Had71ZayU4TxpN6JZugRNohMSJJU4S09Air9uvtcVMSOLm9fMyi0+VzyxRE HWllH6MCzdwv7tudGM5e+3Mfy4JTPvl36EkqZkX6qiHmKAvhE17QHDXDqxImLD8hg6cap2zy N5S10d9AKQIVfSsJBKaipgsEbsCtKtNlUK0Y+CmnV53QEIl8gU+IqbGF+r7YpTeHJtqIf1Ku NcHSVQdBFwCwe71NeyN4UHgtlxAXfQB5vhO23TSI68M8MHLsYoTu8eSFPvOfBuh8IZkJXL3n EAXvjQe8MTV7hjJE+oFjVoEbHzMZumcaj8YCJlfLhVfMi5SDLHpxG/4RRLyTBtI0tDo2+49V 2b18jBd02o/7ssPbGFEQPwrGL67feSYsnz+gkAavqMLTMa7pMOnyfVDYRYSQFw5DZTAMXqpF boU4y/PzsPSPIkZj5Qn/H2/AV+RlbmRzdHJlYW0KZW5kb2JqCjIyIDAgb2JqIDw8Ci9UeXBl IC9QYWdlCi9Db250ZW50cyAyMyAwIFIKL1Jlc291cmNlcyAyMSAwIFIKL01lZGlhQm94IFsw IDAgNjEyIDc5Ml0KL1BhcmVudCAxOSAwIFIKPj4gZW5kb2JqCjIwIDAgb2JqIDw8Ci9UeXBl IC9YT2JqZWN0Ci9TdWJ0eXBlIC9Gb3JtCi9Gb3JtVHlwZSAxCi9QVEVYLkZpbGVOYW1lICgu L05FVENPTkZfQXJjaC5wZGYpCi9QVEVYLlBhZ2VOdW1iZXIgMQovUFRFWC5JbmZvRGljdCAy NyAwIFIgCi9NYXRyaXggWzEuMDAwMDAwMDAgMC4wMDAwMDAwMCAwLjAwMDAwMDAwIDEuMDAw MDAwMDAgMC4wMDAwMDAwMCAwLjAwMDAwMDAwXQovQkJveCBbMzI5LjM5NjIwMDAwIDIwNy40 NDY1MDAwMCA1NTMuNjEwMDAwMDAgMzM3LjQyNTgwMDAwXQovUmVzb3VyY2VzIDw8Ci9Qcm9j U2V0IFsgL1BERiAvVGV4dCBdCi9Db2xvclNwYWNlIDw8Ci9DczEgMjggMCBSCi9DczIgMjkg MCBSCj4+L0V4dEdTdGF0ZSA8PAovR3MxIDMwIDAgUgo+Pi9Gb250IDw8IC9GNC4wIDMxIDAg Ui9GMy4wIDMyIDAgUi9GMy4xIDMzIDAgUi9GMi4wIDM0IDAgUi9GNS4wIDM1IDAgUi9GNS4x IDM2IDAgUi9GMS4wIDM5IDAgUiAvRjYuMCA0MiAwIFIgPj4KPj4KL0xlbmd0aCA0MyAwIFIK L0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngBzZ1bc2THjeff61OceaMc7lKdS91i NybC7pFmNeuxNO7e0IM1D1R1qZs2Ly1epNHXnHnXZ9nfH5nIzHNOkawii3LLYakOmFcAiUQi AeSP1X9UP1Yz/reom2q5bqrrbfVtdVn98W21mK6X7Sr8Mfycz9fTedetquV8MV0t6lX19qL6 /Mt6OqvqydsfqpPms+rt36ov3lqri27azZvVslrM6umqqduqaetp26y6qm6X01lX195bN102 XTOvfq4+f31TT16/sV5n1ZvX1ef/elNX7280yumsXdXLdqbh8r/8Oe5pc1E1K3pbtpNmuZpP m/W6SqCqWSzr6bqtzqs3jFRdVpub2OXNxrrq9+Rfo44mdASqappbrxfWhP9u1tPZajavmvlq ulitA6oaoaoSqr66/OHq+uL09uzqMiJtYqSYel9hjv416rm6v+duwYQXa7peNpCpmRiVctd/ 3t7+fHX99+rN7ent3U11evmuJNts3xE8MPeuW4Pfbnnf5L/ZXtvsLzfbqkTEJHPP3sN4ABHt qpk2TTev2m4xncOGQ0y82V7/dMYY/v308vT99mJ7eXt0TNTLKWy/rtq2AbHLbsgHb365ud1e 3BybB5bddLaes57vm/o3V+dnm19ecOb1bD7tWmTEC86cxRRX3iv/IdAM9l9UdbOaLtfrIc3/ ZSuSP4fOu3ttEHcQuKpnq+mqRnAOVt3rq8sfzt7fXYcl3+P0g+Taes20mraq1+t6umiri8kQ cl6tF82Uvzep0BrumyOxAfCnWVMVgAY6IZ82CTapZ0iQxXKNgMzlZgi0ep6bRuBN5+1qUXn3 CbAB9WFsDpqcI/Ihh+p7tbqdL6dL4Ss0nL9j5zTjRdZxjGrGak18Ht6sY8N79u9N9cGEvLYP l6WPSNYo13ZTeT2ftqAv8taQxgPemhzQaxRjO3ttZutpt0ScOm8NebrPW8UeXGySj+2Zmna9 QnDP1oltxhAosKrhJZZX5L96iZRls0kUCd9QKDFWKpL5KoMi9WOrmT3iUBww2VRN3Wm1ZxY6 B7RcTeews3NV07D8UDWcq/J34qoIygOkGa8VV4c363P0nv37yFzVrGDOFrQHifVbcdW6m87r +uW5Cl0E/hWHRImFAtaHQIEFcgmVzMs0i7adtllexe9MNNjBi2SuyqDAVd5qZo/YsQPEVcjJ aSsxFuXZecUKR4avMqidocQxgSiq0mfiqQDJo1MboUrkKG8yzS/26t9H5qiWkbVLRvybclS7 1PnAZHrYA19KTrVz5NQqb28X1RACAeZ1i96fOKrtVi2KeJJT8TvTbIOuFItkjsqgwFHeauIW 79gBcFS76hq26Mw+DGYFajjgeKmqXUtNQIo6S6XvzFMBlAdIM17KuSo261zkPfv3kbmqm8+m HefE35arOs4+89VvsPt13Ww2RWF17F1UQ8h51bULuCjvfl3bomlzoo0Uid+ZaBuqxCKZqzIo cJW3mtjDO3YAXNUt1q32ZgehnHVLqqPUJVC35IQu3TByVf5OXBVBeYBqJtbyOcRmHQ/es38/ nauykp71nKZrp6tuUXXwVrOaDze/kWozieaFvfW5Bw6IzaKezmcYJhYszvlqKK7+eLr5+93H 5xwVdk54jjmkXcJnaOKrZnRQ+Mv249XN2e3V9S/9Q+FBpwR22BnTqrEEcETAEgAPrutJM19z EuY4ilXEuAnrBKYc1P9oLtGJPQDYGVfSS1YZ1KzZTuYyaYRWJg0Woim08442Sdc+aLDtTOpA h6kGuxJmFMR5gNAwqm8N19MTewtj4agiQZqGG7+lDjAjTSRAmCpyA1U9N+GA2AtVHLKedZzZ UhNs1h3nH+9k4t9SFsIwHJLGGVtI36mPcPzAxtRgY5rMKuxL9VJoRSFawh6I9CUTLmAzTq0t EmWBDWU2qylFcSnlAOh36QBkQr3gLDjr1g4yAMpsZ4DYzAobiEFiZ6Fagq1Xq8WkaKjhqIEE yZ0FgGqlAcUy5TzUTJrFJM1sU/3wuyfY7pbLuaQq1kPm3q4n4mAHzaGNGBiFsRUjdNB4iYFH 9OI3RFpi+bPa9qd6FcpZPXjMv0PTVt5BTCFX5pwtu11qO36rfet60qxSER+bNeAfqYPAA/WS hbVk70jIEdkDDIQ52YG066YgO80t12x/zgdioDnHe6jkoBpzz5KjbyL7pIBksudSnKMCvVJD TtLUWSQ7LaUBeZliHrGZAmIMfTjZdfxs1h3jYR1GsktwJVAkuwwSIquRfV1D9kz3NYbmuoEu VmC1wiBDwVhx5d+JLMi3WERkC5Up70QNjWcqa/V756mMD9ha8I/UQyC87Lpuv51gUpdNtmNu DssGcs5BGBiWnIV3wlLdc6wadQvSIfMEATCtl0uJzVqbaIeBPcE4r2cYRp0GiSgrSqhLuRGM 9grYGvkivpKAXGPd6tWN/Wo03/6OS4PxhEYW/0m8X+hb/KtnW/zNeiF7N6uiWaLHsQEKIesV 7A+HOCiY/EuKZEzfO1i/gyjQllHePogiR+VkXPdcovEBPBx04xGsN2Ie7WLMeWWz554D6hWz r1ehzLJmXzVyRkCsBC0nuhTpYSjx3eE8m/ndeFa8iJaJnEJxXS3mxrMoIou1tqwllhuWs3iW rXu5lhDEmoPpy2Doau2snSwbRGUzWxSwqgdL7RV1h/0Gnp3sxbO7b6lGPDt5yi1VvYJ/Fl3V cielswcSb7ZYTDt0DlOImeSIHI/fpyWGjfhme9mF7wI/Abd9PI5x9sPvJsdiWLRyziCYXlB/ 2tlqOV3M7YpuxlmEG0amv5yiBSERZ2LVRdXWNX3PRfVhtfPJWNBWR2PaZtYiVeYwY4PBfdU0 RqQZlki2FyEW1URMy0Cxg6KjGtNy+WIwKStL41kxLIqYvg3P4RsEYL+0ZhpUXxUZdvepyFeu 09CwuVJKvNrO11zkQpuZFFGN/gBm9a3AmXU8cS2GHfgZojDgCxxH8hxdsLaLjunVsCCLdY2h lgPKQpQEFzN0MbYabDMLzkKILPiUxRQg/Wrcgrwsn6Lpw32+fQt7jFF3OwkWOTDA0vYt63ez yoqESsW2ijJYFFHGSlUglfJdLioCkz0UgZcUqh066EARaFm4U86/T9IDfKyZUyO+4ryF6Qew U+CwT6GSUSfB96G3qxykAcjM0S7ZRZZLHXJsexefImLZV4qJx0JJT4B1QzUKhWrOpwf1bwo8 6oUMDnNOGu0cuQZmhiCYq56jp9W5VFMjWDjh4lsyXXb1apIAYsOayyV071iGRYaFAsmrdkI1 OZMssN+khpcowet6zvkxdD5JAIyzaBMaYgIx/bkOX5zLvBo2XY6d7EvesAO8cxl5Y5m5D1Ht hGo+jdRwQod3ngCbF9250JxAFjdmnDcwmnCqQCPGhrteAdGlHcYEtlPsUR2GNyu0NreYGsE1 Y7FPQCuyLOpkAUa5DKMxDP6qK9sL3i7S3YadfjK6Vs2FUrKVwpoNcmrVTBI1Dtq+hkLB5w3O esge42cHHnfg7Mi6FleayylLDE3LHAE0/TlCa8Uy1I0purhWFDd0OnzCHSuMfAbq13tZXauW s9QcPhKTcXK1U4yMtKuutlE5z2KBwWGsA4Z0haxiYwyENd5OC1lzkRkZRKkEorGunuOUBseu Vxj5VGzY6SfDsWsssBhE8C2ToVBGAyZtm8+RmDZO3RZ6ge8xigJyS0zuwFo+0B5lO2s6trMF Ugj5jHSx7UQyVlsFiFlgvhWHduz2bYv1QbyLZ4JAVhGnxlgx7mjmYpeUk2ecENLpwnS6mmP2 Cjsh2GHHqBmVLHsJxkX2yoaF8yKHBWO9ISTUk5+Ml4ktCYK/hQvoyOu58VTs07DBuF2+FLPB ETNv9weJ2eEpocBrgesdGIqoTvjxirB6gmV+ja6nT1e/TP2REwvWt8UCHsWapOXqk1/JPcxc qrBIwrvwq5eCXwcVX/ikUOMRO5+jgblchF1RjxcdSpAJVOwxkotcqHCJzkgLZYHboY6dIwsM lQswykWhHepiUurL2WG3n4qYDYeDUjXgECfL+LFUgzjxtDUJ33JGGOJnFx4HpDr+mcHkS82Z LYpPDg1SrKUZZCGLCysIQW/MErUNFUu5a8fblxKy7IFrfLmNy0wnBYtciaPRRAU36q64Nc3Q YkumxUqBa0dUcdGDJWeHMDG8PKI605ezOjvqNnDtP97c3c11G1E4LkG4VhcT3bFE7Wjqwvgu FA3QW51j2htSq2Tco0hbDlM4+Ae10JRV5o/GaNpBVmlx4OHmG5S44ss5bVDxpaUtS0bO5xUe tXgb4IIEGmfsQegfwLiC4gIX5gPUybq4QOGezSEsMKquF+uJStUsygyyig7SpGucHlVzTfuh Yr/PT0XWRv0VFY27O4yJ4AKdRqZg82Y+SDcYHcEipsFXgemdyAGrPRSOaFSy61GU2bqBwKv5 BDMnd9t2OSV/Vo44zB27h5ENg0X0rZWjhbFFqIaFKVSLmqwuaLKZ7XiaLJ5rHKJgJR085vgW QR+Mnhw+xF7cpGOXF3+hheOKLf7NzIojD44ggafXrWRsHxLrdU2HikRb3HDYZeSoz09FwgYn msyo8TLxSbw60mNHswbTYHWMnR5WDYeBRpNEo5JXjyJaMRwjNLk45G5iajyw5oyF2xBTX+D+ JsbknoqtgJt43c9gURKkV+uFLQXpCMRtZ203Z67hG1N2K7YGWDAep2DTHgTkhWq5SAHw4wRM 2rR4G6mQH+dSsU/rwJXlqR85jsOmw3nDpek8WqInHLcSchxfBZ5f6LCFfCTECmbNh60Gtyn8 FoxL42ErlcqHLQe98Pava8EVxwkTeeilDJNrmbW8swvhqQsErig4L2Uhq8svHdPKhe6wLKBt 3eGtFuRzlKnDTl2i5i3j8UvkB256dRHypOvu5DCYhGq8mHkSsw73f5+16UsJ1SPUBKz2Mdin USlQj7L5c1HK3olrUhSWupiRZLLN3yVqu8ADggNOlLq6ULBahYhN94eZkEfb+xtcRGtEuLGg qZawKlcgc3kolqwKDPNOYOigu6oqxypt/UHxYk2NYNohdKOykvU1aarjXp1X/9HuRNEGUGiq fuJ6ErMOFYDxxAO6d+Cnh1oOV+OqJcMeRQPo+CeyZ9BEcYafYwbiyMLso7radfjWsfVn3XRY LcnW5wRZBwfuyS5fanyvsKqxZEKk89B53COd3159vDq/el84VMu/SRFxg7D3H4nOFriuXmHC 459GToJoF7PoRQ7rLznKqUz8KceuteJNuWnDs8/DrS0oXpHef61Ovjs5/e6zz6pXip040Zg+ q9bVCSHYwNr5rDo5I/43/Lr9QGhq+PmX7ebq+t1nk/+s3v5biKnXoFuOTexcuEvh5Ip3tFyo EiwJ9XPuUlm5pqFr/1H0/fkkwVJdrbUO89260xpH0V/h/02LMqnPG6KiBCOEWjq/YEusRKxL 7JeIL4iLToVVSDdGHGVwPJOqtBuGjkg7VhcHJys26NZ4xfwIx/PJrnlEPCxXnBsf8iPEzXrP zAHjnuSGGm22CDS82+c13scdh2nt4mYjRPZJtXBXl3Eb947W982dKId9Rijahd0x2p6uWY3G LjN2R1wJvi2aLMZHRQ0LARit5Rcu1UoWN+jcoaooxnimUD0dAEYVn7L8R0N6YPl77Egjp1o2 fAu5xpUg5lgYxY7YMnogKveevlOUuYmGGHHOTRO+jKw/2Bp/xBA7kvv+l9Pb0+9Pb/YKNB91 Kyrcl1ZijmlS67rG27glv8Zw0m+vTy9vzk+JH1H4yGPRMqOuo5zbJWwbBSstCWyzq1Zuj4dz 7uG7Egb2iZ0ZDeGB2UvedxzJ2JTRODDxDmc/kvi9QPvdEeCjATyEA8vqAas1LZeOq/WI7mU6 i14g9p59PzB5y+uBf+8jUy/Sehx58iGth87890z+vrweR0ZEzOtBUg3MZcT3jBb+jrwex0aF 5fVgQ8Mghkq7XAzXQj+vh/lTi2HK/DX+NeK/B3gA56XZeoFj7H1TH+f1OPLMQ14PVt4LzjxH B+7I66GYRwTfcOXvn3thhO+43nf3inS3vB70+rDA68u6+wLgRp2L2DGFRrjLMfViF8zzeuDQ qet1KxfzcxBsrKATtLdJhrAtr+a4xaXMHvgZwz5dgx6TMntARxRFvMK6mNpD7qIEnuHFQFuc P8k1Ite4AKEtz7CRQBjHYm6PBIpZOnCGjW0T/mB5O3Ci9hHQksPWPlI1Fcv5fFLjPuWJD8AB jCkci+Wu6GtKO3X+GiE96hS7KY7WQ5wdoTj78JkFt+3Za1zXO3tNOT7EZ0Pe7m2s/W19bz7T lGN+j0KNxQk/JNooYFBB/gi4rCQUe7qOTJWY9SORTlFplghkkigsq2nIDeJskBrOnOK9J4hc PTlMYNBzEFqkJ+RwUMrYkVr2FB6pd9qJWT3SGDk5OyiultRwmql3ngBP4K4H6czFinJ97Mdd T9BVd3OXrm2V6+MlpZhn9Uio4yhV5NsweQUpY6aPVCom7YABXYRliAsGiBmyfRQCRE3p5IE0 y1wQG3c+mfgAHCBP4ph6I4EwtMWEHwkUs3ekdmN+j4K5YonMWzSCRxwpHpy1vNE80dixA/Ai fqLgQri5gl5skJ70I7LWUCMZbJDHElwp6cdLCi5cqy3hh6NORo8AYo+KW6HspSHlRwJ59o5M k5jhI5FNDuHmipM2JqSNgzL5Y8OZP+J4EoB2iDpV1o8EOp941o8E4hrVsn7khiOgZKwISkNk PAE0ydMo0onYsvLO08yfwFoPSS3P/PHbSq2U+eMlpVaZaiOqXiMQpo2Y9yMhOKbwKKRWhmSp lWCJwGrK8oEUUssbdz6Z+AAcgNTyJBwJREMxT0cCeSKPxF6e7CP1Tjsx2UfBXgnkkssbzpMt co8IRz3JdZAGoit1ZWXg8IBBjZbYIxRcrBP1mmFi2CC8HsWVT/w08Yxxa5x/I8AJabD0DF5i LcFL+ghvwLJSkPUx9gH2ZKuTerj3WLUYPJkD7nBzRXZlCD3hvoAVkB9ceDDYFUNAZYyWw/ip XQvhsloTRB7+nhJOeP0I8C6o4RASESjc0dNaoDPgMThTU5bXVL5eBrAdLYwigdLIYyPpO87E pAN+ejEtBdsJaSlw68SnA7WL2Vq2Oax+CUSgxBLzH2cH1FNFgXEsIk3B2iCzOfavBFFL+DHM FdKbSslHYKlEFUBCSxkSu6NehNHWAvcoLJBFS+QtmeN4oBGoP1qKEPWXRpVK+VxCQ5M8k9Qb VtODWEIKdMxCMWkb2cXtzjnmpWgbfCZxvfO8FG0j3y3dTFhqCv+EwDE7RYSkhBS5gZCNwrtQ DYfoukVdhPwWFoeJgT72waDk9c63qoTsGAnk6TPwZohthCwVuZegipCChyZqKFAwgYEK0lGm 7pTIIpGXpcqOKKJEthBRMFTPCeZKMEFwzA9sEdkpQRJZilKJCVJLibypv4IJ0qhSKR94asgB oTfE2JOYIOakcNzBFgECBSITxEQRTnXSYVqiCv+GQDHdhEM8F0VsgVUeclN4H9RIkEjB1EKk eu4ks0EYR+YMT6eR2GAwlVJtOEhWJqlE2N2UiAyEZQKZGDafoSeJYY8gtBBGZBAtx5hCh+h8 GEIKHeKhgZbpmQNC/OY4oJtqTBzgM0YPEvOEbArRT1APr5EGBzj8sPQjtooTvO7QAIT4Rq7T DKA4wBhP6CAsKx5PmEAeGJgazoDQN82E2ME8QDXDFqncFcpWrUNODFP0OaaeFdMKXp5Ou4gJ v+/iakHWTfy/yUSwnrGsuWwb3XalO8R8/zh5+P4x30mmurp/bOF0vFzwx2RDaxGX2miJWsXV Bc9Xh0kLDjDKsYfghSRU57oPw/Au7QiZoj0ZUNmxe3Vjv8nzYGwvGl3p+XX+I14yj6UuH/Uk xaP2RCZGB/zYAHkiEwcddP/og/UA5gJtBcoDigy9YxQ5ejnUDMn1HOeD3fOPOUnkza6YGU2f NaAVmafPUrRsJyjP/UwmXqv0P0zdJM7LXJsTwOy8NU9cSyqTeONuXCtuxJubeHiOdAouENeC JTQDYMTrcYoUlzHKVSsTKu6/Lf4RBpPrT6eIe0QPV2oFjHIFLLVX1B32G7iWVCZpkmkZjrj2 wWtz1MB4bf6Yb9e4JzMuohNJA1rjcW8OmSGVCWnXSeyGLs8SP4hrfbCJayPKQdsulBcoCujt o3KMtqdH2O6af8pmQjZf0i5wOGCjitlMUMfQi2AMdqqYziTsjsHzP+Yz8Yrp1vyZ/h73cC5X +fjCEtyr7GEYErSj4tvDzSr5nYRaU/45XnLTTBFC5cW50vUFQ2HjtsA4d8miLGCG7gRjfyTf ZWhP3jGqO+z3U+FcT2ySOTcmNoFxCd3qJTYZk/7eReZ86xO3JG8J4bsQFJDbR+QYaUfmW89u whlVriWSYzG5ScODIHilivCe3aQhYWU/u4lXg5gpc1RCUhKZzxW3nYIlWw6eafMX04IvgBkW GTTA0qbudUtlwmHUzeUQUjUrstARimK+AaKxfPu7f7y0TTlOfEcU2ZTjROLWYc8Stz5305lM 3xLKH0JRxuSIWqWOcKhHbeKmtK/JOOOpTuL+r+nDrew7xexTYpOkE3g9SrneEH1quWpJHT2D bZNfnklxojlwlUOJXyiLYzM3WZthJDdam0agQy+vLqjcLlioS4tFudieYErjwIW46pJOzDyx ch+pXIxXSJNM2BwJMFcXX0K3bVbiDajkZyodFAOIsGQOPNoqRoeNx8eahO1o5jJj7cJQwrhj CCPRkFol2x7qVztCtFR71D4Oc3Kihf2UWbGcPmhgWTN/EmDiWleUEqhf8YWVhFYJNlbEFMiv U1or6wsTJglpgw+n/D+1LZB0o67Z5ws/UVXFaYCzlvuTavsIsOxjGuouFxzF5E8afEJHvX4q GkIwvljmc3MJBR0Wtpgs5Afx7EixDci2EOyEbFzdxsgRXns4HJKpZNijyNkaOwk+VrwJQ7Qx 9mhNHJ5Q2GJ2BaUQWoH8BaLDKFf/oZ68Q62eKGnL+kXkrE5eS/xQjV9x0DZ+5czfiDVhL+wL UlVbBZlisg/sOrMckjqg1QuuJFSuJZMdK2sEs7rgQStW5YQDgw27DQxLcPho9eM0R1pOlrE8 aMyH+bcQs8mmk00IT+NZH6zL2d0Y34WiAXrxQx/XLdn2OHJ2hnKIn6gCWpBGKYZRj0bMyLCo iw4dxshbiN1UMI6UIWJsUPOFBW3ec7g+JguHODfD8Guec/fMUPPOP4YhOGLdslwJ8/3Pbi0s Qjz3kct9GpptUgeUn4plm3ZI7r9ZvspO/ixp6zPPWCs1hBJDriFkDHldhEDC+JGPY2mj55ZL HJymX8kEyK2X9LukIMRChX6QIC96HMM2wK1b2LvJ9CemZcGhyIXtiQjMcORnCri8ljJYZgXU m6XtdqjEFjISYZTTFCPMT3dZ3qpur9tPRz8Il7KFuE2nsafJ26GO4FMHbWxTCePh/NvHkLDb x+QIazli5ChKAmog1yodSoJeKjNTqA4jbL6FsMWqwMWcZK1FLtj+GeqplNVzJUHRYpP9nuQc 77No2ffFTsBdC9YP5zAUzpE3b4wdMD/ez79kj4hhJP+UILhd2eOd3569KwI7MNMRcfR4LBkO YmTufyiWTFccZF14MJTs+xhK1lYn/7q93PKeYIoY++Knz7i7qU6217/cfji7fP9ZlWLH0LpC 1FqKbHt8NCSaw9djTjYZFmVHUgh/7XViWCCw7cuz91MPV6v1C+dwwtne5iC2/3483G1Shrv9 jzf3001quYiJ++/Hpvw/n8XmTj9+vL463XzY5tC6K297c3X5a3qJMUbbXRRPgEasWSKjR7CG rZ4kWhB/hmul/UxYwwuHZKbx4Vc05oQ1e3D1FU7l1Uki2A3vwBrFAvzs5uZuaxiwYm8gMZpB Ln56zjyJfCSK8KNY4Opa07Sy1zwfc3275U3X8P3u7rpo2HCZuAIHiPvmF73BHpgfh+qlEig6 V4S1AVd89Yc/qvMGTlCk40SRjjcfrnhIJwBvP5zyzqr/ZmriWWIzA+RXPUcbfp7lYmcX4nLa nJxAvZu7izgndXIrwlp3F6dnl7f8v2D8Z00Rd0K8bRbjKcJb769P9WwrzLtQLKfx3bw6udlc n328TX+Ic5XAPmFsvHtrsZ+neoE0VP357PaD/abEuzP+3HSTkx+21/YYbSjS45LU9BVl+TvV CLM6Dkktto8rnBFJN1cXLBARxuJVz88ut77Q+rNi0e4zlBhxMeYu2RgaOf5wh4TciU8ylcG0 yJy7a2MGTEV6cRo25wcMFtbIz2ElAAIt4W9//uLt66///KUtGeDvth/PKUwI7i/hyd/YwmZ7 eXp9diW5Y01+Zeynxk9vXu03r0dXjYVW1tyHjFAMT5usUqbHE2MbVrh+2zT047KIHH71s21B ocRGC6CmAFIt/IqvzDIRVTTutF+EQZ9tigWnv974C8R7Em7C7jomnIs9WY0XC1b0aIJ3NzY/ Lr40P1GQn5MTJ459ViesrNurzdW5/Rm5YIvb6mz1YratG/scCHFra/Ph9PK9etlzKlIUHpgK c+Imtw2O1CUP6s3uV9z+Es0dWUufUAAO+v7cZK/9VVqCyW1eHDZpTqEJT3977Zu7jda+VRWZ Y6Uee/5+VCARcSKpeZypYo1cEiAwnuq767P+3qPBk460z44GYzcKuyiRpyoyOTnd3AY5TeS5 VpFX1VwNlKYSNgBr9912c6btMJdBxJRh8PdvWveKlcSdWHiXcmAdcefZ5eb87l1YgTWEtVWH QaCgcCf45vwMyTxlcPYpVYd1qr+EudvmpXo92nvx3Ms+ZHtcmli+UWxxo+lo+CaqnUGjWnTD i+euJFoRmDZRySoYlcIvb2NAJRyRJnC6rcYoQK38xysIJczY19dsT8eZJO5NKyXQHU1yc3V3 fbPVAul4rdWEimQmP2+2t3q4jw8okbcG8ZT9XSpC+JW3E9Wz7UQ/rrc/3p1dww5qkDZcZ9Hf jDX0o4+Xo0xW3jVrHJfHk81LS/HPJ5vTS8ZmP29jxLeJVP3tw9n7D1sWIcrnyatzl0GR7CZZ VcpGfxZkMqlppJ5oH7EmS+Z1WBC4x9oIuZrDI5gLsRFVw95187+sX8RG5mDC/NnMLs+lK5JK xjaLMKuf2A0lXQwaN5dYIO0mqhxnuJQWeXFxd3m2sePTPqR7VLYo/GaGe8dYttDXx/NtOKdh aJYGm84fGrWiDU+iejX8O0S2P6etLXzaROwPJam0x+S5yH0kCD6krxJMSathr1F2ScIqsY7P FnWy63Lk5oVClHj9D3dwN/QqO7plrSTQiowiKPzKlYizSF1hMsV1kMbxDzQr2Lyw3YaGcCgK TtZ4wC5mFpVpbvjxczQ8XZHhQ8K/sAjo9UMCBpRtiEM7opsfaw1YFwl6jnC2Cg8DhXFh4s4w 5dzkroRecWJRmDY29yXvwsm3k+f0FIEQIPhwYv7HJMUll8MsJXyctDc0QgP1MoxwSZJYpnYs Dkm5MVJvDlFvcUgOKkatZigQZjZJGC/8lPfHI1cZGY/EWYTvhZyzFBshY4zCC8xjC3lgv+Rm LFct/4ORIlbp0QWsxW8LdtGbfbHeUu9u4HfM3/mFZ6v3pM84plinP0L3Xw1M8gTGCc3xdqYY J03YGSnYjB23PGKEGY1XQrBcZhjxB2QT4morkQjeJ6cPlHWu0UUXECZWUDvCCn7whhKHxO7E bRmmCyGyuuaWFG+hXHG5P4cUfBNBDMpXAPEPsaEEibM7mHOkc/QQCYLiNwum5Bx7NdYIrV8F 59gf4BwCckKVwCmRMCppbKWonRXsnjhHF3OBc/Sr4Bw+eQ9N3Ox1+iN0zjlE0mie/XH5d59h ntamtyHjPXlbFQei1Gh60o6rZPxk4noL09UaBCt67EHWST715KwijHK1MGNvN0Q0ydeeSwG9 lmZJbpNobkvRPMHY+wxhTGIosrpCGaLDlBBrhyBWinKok0ahJZVgZHzDO8U4Gpdd3NgRPAQI BK5HuksSB4itDXlx4oTmMFZLmqO3lCFx1lpTqRT6E1l2eeLDG0qC3x6FzIIflGuZxUGlUmng 1lCaCRRJvaWgkf2FMYFiEY8XilPjt0zfLCeL2pAg1oMetuHZ66X+pcVCOIcEsoMgRKqOg6LT RyXtt97TprhXMwFvbTqbEYuSJb8Ny6rEcYnWvqCeKorjsFbmN5KHGETwISsKpSsOK7aV0PjE thK6tNq5h9DKVOI2iR5cYW1hJkQPKcEbJLZAYwFGxl2sFqm3kEYX12daBZbrGpeBcmXwwgAO T9psAhOy3aNALtBotB+EleEQcbgztMMyz6eW4iqgJeXWpr9yZRDTgdxFJcot+b6V+yt2tzSq VMqXRmppNL8nbTdhPZQEXrERl2tjSZhMXhv+VayNCHK+i9WN2GrX18aK6/5ybYSHz8NrwbaF saBtbfAH57tYxUgb2gqOLPZsliISlQeHhG5yiNmpF1cohgjgJyg0yF2tdMU9sNXfowXjL8gV ax6FWCzB7AEPhC9uWqx+CV/5YfF6GrdMSqXVJogJXyRHg6gpSikmxOaYWkqQOGuxWIJxxsBV D+mbWnJhn/uLENVLo/JSeeTeUoak/p4ifldcOBsmtSNzPYqlTeJX27HFkWKmwzMHlZX9Tb/g GOUoldy1PwRKeB2+QmsqZjTShCnrdZIIsQb9i9Lem4M0GJqK1cPIoPezBLCpNol1mPACRwoJ OtLVBUGHA4w0kNGUV5hapIHYHwhQQbjhTBxrFYML5y/nMj/HlJyHYYoYQxKGJxrH0yO84Zzn 50lxgvOLwzJP5Zacy2J/xrEJRtQhjF225MI09xchJedFYYounWbjLWUI4SSEaECUAznPCGFo 09nHOU9R+z3Oc6UucJ9/FRwYQQQHitdS/fBlh6z4F7xGSy50QRkbjkI0cSHSMslVLYllrJ5G 7Fx4yI6dmS/OOTHi4Tv2bvxJHsbDHDlO17xMg8DSOxn8iCK4p/+Kak8XwXojEYEZ9597deB0 pvORsBgcBvOgk/JCvFgfxzNWHhCl0TV2JQBVJ+YAMaZm98eTMsG4H43zzC05JM0cps4w0ieR IY2lFlsqBDq8rP4SRIshjirB0shbLgRjSygBerqk6O/AxSD7mQ5cCJSIzfANdnnYWbv9kksI Kaa4ByKzeFzXfsGuertFktj+EAhiVSSDC+qopH2jUGkZeLUgwNWeflHKOwryT9YmvBuoogXR ay/s9E/SgsW7LTkrOC4hBu3VOtNgnIOiFevQpdUqF69ZVvTkOecxdrBnN6lRuijIzQaVYy7j nsl7zieEWODYGs2AygIAm8qh0vQeGeaewBMYYtQ9lgJNZtS9m/sOQZSxmuyS+CCHQxXPEeC7 w5Py0qKe2mQYadBT43E8yE9cRM21ubS3EvKJr6I5no6MnDgYIyZm5LpLZtkMmqSa8obSu2zY WGUYIci7Dg+yZBh7FXn6EIc1toOlnFqJ8B/C0GRj3V65AsYuyjGYumh52IhVbNitBgNwVvMi AUuYThTPeJFgrCHpDuxG55XSJqPTMLudsFg3l8vtAZOCigsudTUqay52CyhVjcEsI9TeZ97G m6CwTacV7UbuQ7hLK3uFNJFxiwUobzd9IjQttpdgwt5vW/87GORRgzxvLCh63JGeZ29IHyEp 49yRNBlXjX7WO3FxMA6ghgkgvQ2DA71imwwvmEj5FFeu4EqzGaUiwIbVkoP1mOnYRPF5HfFm YvWChQO/lqz+FFnUcUVhL+V2wYIsYnLxgHMisok1Sqxk+ru+y/J8h/3iUESST6e/TbBwBjK9 d5WTBAROtxipMCQh6cL1jmIX7hctGn8QShqq+pgjDkvGKmBhNdOgkhHgn6ljQVrhBcy5rSxX wLBMz/AWiKvZmht2GwbjnbisknaQYDQY5FweYJRzvRa9rgbtvZQwH0ySc0UXgZdobl/R4h66 D4iWHEe/v6UQSyrklNJwQQIOfrucYWijXeY+IeJjc/k2nqfQuwMdu7CWqJCWG0srz3ry+o35 P1r2gEN4X9s0xgW4XW9ThxUXZ59W3FyB9P53VlivfFpxmdpxh7C0Yj69tJFkLOSNZFSVRg+U HNoQbJxJyjnlsiS0cae/ax7Mq/iOkmOCvCRIad+rUl7kKJQcNYe07SrlR5O16KmKThBIOk9F vTULJG9y93sevZH7PIYySmSXg3ZjXMN/EEq8O95xL0x4of4JN+jsLpjNeEHDPQCqnRks9+pT JOr1iShb8X40nRPnGHwQcn9fXd7cXuOOhy/prTkivf1beIBD3O3TMh0ifQ0nOepQfMYscRUO s+TAY54Pudfo5zCcZUgBu9csR5jFxK1pcmwLs5x8/mXu7yVmaVa1NTdSv+UsMaLr4RWsm7/R LLmQ4XEUFhobVPTvzmhV7nk53xyBZ3T8pqOX7oZnYtSNDl8vOx3O/fOWfvR+0Qhvr82x7jh4 42jMA7TscMjB4TL7w8eP+MDawsb35ghU4qCjab34rJBW9EN+ComS0bRe/+mr48wG74IVMbLo kThoDZHnMmrU2767luRi32qjb+6RzD7NicquyBeYeGWgHlmClLJGBmr+gLEGA5tu3zqvNrDe SFt6jsSWOUobxA5mdTx8I3/qX6p/t+ARX/TEjYT7dryoClNavGEuDIO6UsbkLit5MsHFS2ZZ xGWoK6+dC3Oel8omP28pQ2J/2TDItSAaHNle6c8Ng27M8f6yeac0DOZSwQxYtpQMg6m/J6hP wfCmC2rppTLCKXlAaRQ0FwQzCoYL6mTdsz+Y3S9UiUbBeNkd/oBTZWkQdGNTMDL6V2EYTAb3 MJRYPXyYr8bTDnqB8eMse6bLoNofojzbQkojcqy5afVp7dUEtaJ+BQHND64JyURs8oavlAbw 0GHKKCDaWIvBRiA9gU/P9XFoixhyJR2sjSMN0ox7xSjt+5nDtOe8jzvM+Zzb6mKY9v3MYc6J OoQYPOzmRJrzgwNE2GqeQ3rzb8rNonVbR9rBntMsa6fAQhwtQuOZzeJgxD9YZWF7/eSH7MZ+ nHJL+MHcKlP0cZvsFlzYPdzkS5iMMBKTaxFH6mRRloUuwYKVBjtFzYUNWbxVLlluCliyI+yG kYFugXt9tEZbc6mLVBXTOAmyJUuTVZixJFCyVBFxSypplUoGrQxKdqqdoHDfke3QufVQ7x9v KzIh5fYhtk775hVxcW/N8IhNxBgdvzFs2PehBmnYfvItGU3cljREA/3W8W6oxJWjvcCx0as0 9vfsSNVT7UjaCnkOiweMMIBEQ3TATLa/4B5LhK7/HUz0yrvl1nk5m5HF331+BI272XbMo1KE DrTokGQpW6BFUVHQLdBGUdyZCntYv7zP40XWPi+/46zMqcotquAmw8I612Jlya94FLW39jMs LeCiXAHjKFVzU16s/dxFKobtGo81rhjQVNyShwaUYWn14xdB1IOdEexyivFlUOLMnSB640yX bYe59U9l9WOcy9ZheMW+dQ0lPrFYh3glpd9PWPUVq37iq77AbsRbwPgASY7uArcDSjG44yx7 rF2TOU8w5mUdUYD9yS+g0JZ4kScv+355Xy7Oxr1lr1RWBStq2e/k4uGqCObjQ5f9ctFf9oFk wQxu5MS3qVz2vfI+j0MVkyBc5E/jgsbPQk87PwR/Bx3a4Y3gLhadmvPVhcymjz26nFJTRCsq 3i+DR5eDuRX9DEVjrrxfoygyT00Bf540U6KoiKsgAMyDyQi60l/GoeAGvomh4IrNUrEQthlC WQEQ2Op/6YcAhtI5Uq9FTfXALrVDtRye9SNWAmFjnJHj8WnjqcVFfTTPlJHJewfqawIKYP7u BFvOd5/1AsceHRmng0HWC0wxFrev3HCkfNsRv6hI2eoVZwGCK4lPJKL3FalsiOE7vVacvf3B UhoYNIVlGlxhmQbOoZyKm7O/iRT8baJ5OOznD2cWWG0Fbk/P/07pfRAfDOiT8fQSv8l3T4fP Eb9lxmqwPMZAw/UisApxK4pJ7YXeWjGLQ7VfPPUtq/GrXm04T5GDFmRLsKdaicGN6uOHu0vi q68uT8/Pbg8KBH9ogvh2k5tyPD/i8nOopYKcFePPaK6v7t5/EC3Dp9FYP6EGPBXAGTcY9uJr 51aeoM2z95cWLx/qX3lL39PQ/hR7IIhfz5USFboj4vsjE1Jw/s8k5bhTVCzP2SuC3yYUvyzM suNJgpMiDn6i+WmiVoGJhkQtqv366saSRuj3DZzJFdrJT8gNcas1Y2HtVk+EJLhYJcsQziNN mxtu+RrvmLaHf1++0wvRSCxE1E1IJmG/FVgcwTHU1sAQhEhUE2KbD2fM3vIaxJhiSwyihpS/ JDTJ9CxLh1UO79ubMAx/n9Dl5XuFJofSF9vbD1e0chSS4zLScvO1Y+6BnIQqnWwt0QpraLsx ghHR1wvLZWA8VQMsZpSAUirigiX8zTBlcLFrqHDz4fQ6JN9R+dPN9dVNX/gQDLBb6sfbu/uF Dw55YBMB6sInZRSK6WguuNUgu8crHFZ827GfH+7YkhzuCYP8O+ZvmaiKZ6lQ/bcfjGrWgKRQ jBTXn0Iw/D60ijvZ/XNS0ChGljyncOVLFqEg6HgxAfbcMGixH/EKJyHtjcBFiSxhrEyRRMQa CPynOuQ6uDs9J4I8tvY9SaKC4LWCzAxE7TOzR6lFcFGHbXoHF/7tzoSEbb/9pR+25DI8HBma RvN4Dq8xnlscZemIlGL3pqPSrilNYPhfun41txwnxRi4ULmPf+/VWlodouZYdEZjSMT+gr64 wD15q/+Si+Bb9Y08+dq+q5O/xP/+3/2Gci9xWhzS1nrTwIcyCNY/eV1eot0309j8WC1V9oYZ d3T3NQ9b+4z+rBkx4y9NaeHHv8Yp/r/BlP/wWWXLEY7FFGBU0n+tHarRTmKQB4hzL0b0OAF2 03uHfPLNszDCEsABDC+mexAORkRbnhO3GeEvazygpeqYgiQ2c//+U5rxPgnaOH3OZdXFse8t D2GPFVcZy9aI+nsGiIIchYvy7nFdbO188dbuFh9mkB1qFs99yaGepaBrVjz3kixPS+Gt6cm6 JveOmX+rBB2lVNOf/1r/p/2Jnx9C1hZBpQ9TXJu6dEcvcX76CxuybdQ873Zyes0ufrvd7JnO 4172kTc4zy02lR6nWs+6HcmSbmO6LmW2sGF2+pU1+UuGaKCQlEV/jNo/m66+Wkki+xVwYz+z xLfPzVXICabyJu0NKlzYj4iLybOWSpprx7tEa3IHDIQHvHy9vbgKeT4wuYhgmy3594wIAmzY ekQQ/f7u5C/fvLZcjmxZkxOjj//t+u4yZgO0oldR847alqltauJmuykatzQwr56ZKCnPccX1 /7rdsX0pvaBpvGT9zLke+fkmDUd/ePNhGyarj+9O3rz5P0yWXVeff+2Mc/UzbM36Fbdz/URd eaekhkr0YhVsbur4oLU/Xu15eroWQFyz/nCKKk/QnumHtXkSyKV49Jj3yfR4HcNiDkf9pTzX Wb4gqxnYUT9jKiEtPWspKKFqJB/u4p/C8rD6THTy9t/c7exhQbNDrOWJEtkyW7WLMa9ebE8v NZ9G24lpVfYLpoWHg62DW3hGqbSFpjV+f2YnTVLQVidak1b+a+gmjrSPgk4BcEEeznD+2Wfp 3asu5ukQa0qS3R1yE7XbRgH7vNv+qkMlJ2Z8RYLM4Sikk975eRg3H0GWWImgEnOSDujgj74a rRppoM7eCSFqkD+G7G/6dWtJLUMbOvnYn42PjzRbOUFIurrGn3YJZAf94SDmY2Vl6QPqRWER MyIZ9OYjOdV+1dEA73AmYDlD43ytQEwnRAMsvbOPd+dKixSbPCjv0+MbRcdboWSOHvNjzlmo k9MNvpdbE/w6hgVi2VGr1I6ZECexyQnCwkS9Kp7d3mzPRQwrTZIyy9JpBzajTIDTyq1l2DwS oYgjZQHsSMTmnESIr0RB4iQu7mHN751aUbQzbCsYRmo/e8QySGxSDciwaS0FBNmf0864z9T2 oJeChdHgxgSLXBV9ZDnIg31lYLX8XPb1bnt6rjVlH57olKZO3itzsZ1V7U+9ORokMKRavN7e Xg/tDcfaBfQeBIGScsUd7AJRvsvyc3FFWlbtRGarGbKfSmRelTXnD0rMZsae03fvzoKBzmpT 8t3VxvyKvbW/ztkI96HT45IRGxfeyBhoRrLCxKGRQTabAtcscEECrvXr5u575a81a0b5J1j3 kj3h1+A2KYKqtGwjl9tAYCWtjRnMvMl9pvU4+5FwbNrxevOY/a63m+1Z3w6lkWGcLQcbNBUB LZ0rfybTnSFDeUjZMmTM+y/kY0iZbNWjCmC/ezQ0SInAI82RMxiP742n+POZqVB4UVQnRhQz AbMhX1+9u0O1ZL72t2hGplQQHBQjh/Bd1LytCILQS18EXTkYpdPOYKXC1UVI6pjm9jS7QzwX oNxyVcHVi7NlMFqdfLy7/nhFRlhEvPvg6ta6VUaVmUU14I3DcsKCoqd2CN8jvNTcEGKiOoxo ZF0vEtX9iNO5H/VkYctfo0aH0QAk4eE6mUtS0n9EMqAehs325Iv/Og0HKR9nDn0Zuyz0B5CO nsMRaDmbt1FNr2RClbcR0eALnBRIk99zNHpKi/VM7kFHa20BPZ7bGg/IaZI4xqo1vADTd4d3 VHHfeMB8cxuab9HmmhcrDaPPbDdRpmhbAukZbVu+RGuhRVshoJdDCiz+DKpbi2mkR2sx8tCR xmdUP8bYSJJkzCh6h99P559QP/CO/X4m31gbiRJxfDv4pc/i/rVLRvRiltAxF5zkKr1ZFMRp FlJ/McND9Y1bHKrXdnaNIstiiLyfQ2XjkiezhHNcOoKelHt9q8yzOpar45ho1aXk/uI46jY5 IAzvdG0ByMbxRL8uzi7H6Aq3ZLRAxBL5aEdYfe2nhCP0JAdELOH0BCJNEtqOmJGJheT31Zuv //DN76s/fvEF/377pze/r6ZTdPzDu4+KVcapfJxWOGgY96j7oG3k7v/39cfNP/++0n9sS/78 S15filvgPyWIb4q8MnH+yz/HvdvssHm7PZTBCD9aEJYQ6D0a1vstRh8Q8PB4UMt/OHuv8W/R uXOFqG2MJxArxBnESJH9lsiIXzn5kRoDI/d9TMTQ7sLxtgpH1UjQ56xLYmYWvB0edJbhwvyT rL39uSVdJJAnfQ7FDpwzCVs1qkmxUfVVE4usQcm615VnVr1iFfNPdOaJSNtxZ+IWZDQ9kp/S qWuKydiBOViWALswwxiMLw+j75nH9Ynpw3M9W0k7JqPpJz22uB65Z3Q7DIZusBdplRp2NLh0 3H7VyrnhlJdb9JADZyt9+lEie0cYeHCKNJidIjVNlQ23nNagN9W/KtxnVo+frmreJV+RanR8 9AhuAHPyIoaTx3yJKY1VjwkDu4kdPeyPZrK0P8oCA4irfYJnuWYNtw32p+LYa5UiVuy3d0Tz OuIU80o35UNq7TEv3jNfdZgPnFzpqnyXOcFMs3ZdH96e0c9sB0t//S4d319dYZIwLES/AH9t yBypgoXpq8veZGBmLTz9u78w9piMgpXXTXyvqrRVu9NQy0Ps8RgvJwuZXcRIgiarC/DzU2QC IgPzi5hKfy4Z8eb3XimcIs11o1xVqnBz99EuAIrJFefDJ0yONEJr+ZWMKPXrOXbnaIfWXfDF VgaHsxuz5xFKlRaX/UbdwZYm2wNvDvGQBn8OTzVoKdoDG2bmsD/s4gGv5Onl1YA42irILqJt aJdJ/glT5pS5XjU7ro/CqpcwixTQz5JEiMFigdzLU1HYPiTOoltUQnsStlmezdEeMr0xNEoc Xdyd356Fe0X7ezk60GVltMfdcH0T3jyxYn8oBv4sfgmOTXDiiF+GI+FUZYZhG4mGRgoTIVMP RMkARO4TSGwGFvt5phct5EKDfZ/JqvTldvsuiDqVFQPtg/3HV3TwUCJjvE8iYd+0Hd5GQQKZ PDXXM8SiGPsnXpHRuAX7gVsa/43FWwMW+OwSg6Mtfvt8JzcnzRKieWnfZmJ5WxX2O7AcP7Gn Y6c28X2c6QbHpW7HdAc0C5cVbvm3r7e6Dt9nGPfyPI+zoHjjUeDDCKzD89sB6yfptjVrZQcL a7lR4C3O4cyctEi16qRNO09aFVDCphbMkLq1EcUgk15L4+MXM0+G2xzbbRMCeg4Phwue4GyF j8V95m7SU4j2ZgLWIDoBAl/YT66b9S6ZGfg7onPt6ZjPiOjJT9N5rZKyUt6svvbE8MvNqmw5 BXGfseObuxWvb4zxngWauS/mDYwd0DQ0LSr7KRu3Xe4RPeEqmHk87r5U35sAHVoWqaIWvJGK T1h6IiRzIGvy2h6syQe9gzlwThT8Wi9f9ztJ6kJvH8lHg//4/4u2EdZlbmRzdHJlYW0KZW5k b2JqCjI3IDAgb2JqCjw8Ci9Qcm9kdWNlciAoTWFjIE9TIFggMTAuNS4zIFF1YXJ0eiBQREZD b250ZXh0KQovQ3JlYXRpb25EYXRlIChEOjIwMDgxMTExMTMzNDI0WjAwJzAwJykKL01vZERh dGUgKEQ6MjAwODExMTExMzM0MjRaMDAnMDAnKQo+PgplbmRvYmoKMjggMCBvYmoKWy9JQ0NC YXNlZCA0NCAwIFJdCmVuZG9iagoyOSAwIG9iagpbL0lDQ0Jhc2VkIDQ1IDAgUl0KZW5kb2Jq CjMwIDAgb2JqCjw8Ci9UeXBlIC9FeHRHU3RhdGUKL09QTSAxCj4+CmVuZG9iagozMSAwIG9i ago8PAovVHlwZSAvRm9udAovU3VidHlwZSAvVHJ1ZVR5cGUKL0Jhc2VGb250IC9aUkJCV0Mj MkJIZWx2ZXRpY2EtQm9sZAovRm9udERlc2NyaXB0b3IgNDYgMCBSCi9XaWR0aHMgNDcgMCBS Ci9GaXJzdENoYXIgMzIKL0xhc3RDaGFyIDEyMQovRW5jb2RpbmcgL01hY1JvbWFuRW5jb2Rp bmcKPj4KZW5kb2JqCjMyIDAgb2JqCjw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBlIC9UcnVlVHlw ZQovQmFzZUZvbnQgL0hVQ1ZFUCMyQkhlbHZldGljYS1Cb2xkCi9Gb250RGVzY3JpcHRvciA0 OCAwIFIKL1dpZHRocyA0OSAwIFIKL0ZpcnN0Q2hhciAzMgovTGFzdENoYXIgMTIxCi9FbmNv ZGluZyAvTWFjUm9tYW5FbmNvZGluZwo+PgplbmRvYmoKMzMgMCBvYmoKPDwKL1R5cGUgL0Zv bnQKL1N1YnR5cGUgL1RydWVUeXBlCi9CYXNlRm9udCAvWkRBWEVTIzJCSGVsdmV0aWNhLUJv bGQKL0ZvbnREZXNjcmlwdG9yIDUwIDAgUgovV2lkdGhzIDUxIDAgUgovRmlyc3RDaGFyIDMz Ci9MYXN0Q2hhciAzMwovVG9Vbmljb2RlIDUyIDAgUgo+PgplbmRvYmoKMzQgMCBvYmoKPDwK L1R5cGUgL0ZvbnQKL1N1YnR5cGUgL1RydWVUeXBlCi9CYXNlRm9udCAvTFdJWkpQIzJCSGVs dmV0aWNhLUJvbGQKL0ZvbnREZXNjcmlwdG9yIDUzIDAgUgovV2lkdGhzIDU0IDAgUgovRmly c3RDaGFyIDMyCi9MYXN0Q2hhciAxMjEKL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nCj4+ CmVuZG9iagozNSAwIG9iago8PAovVHlwZSAvRm9udAovU3VidHlwZSAvVHJ1ZVR5cGUKL0Jh c2VGb250IC9OQkFWQlcjMkJIZWx2ZXRpY2EtQm9sZAovRm9udERlc2NyaXB0b3IgNTUgMCBS Ci9XaWR0aHMgNTYgMCBSCi9GaXJzdENoYXIgMzIKL0xhc3RDaGFyIDEyMQovRW5jb2Rpbmcg L01hY1JvbWFuRW5jb2RpbmcKPj4KZW5kb2JqCjM2IDAgb2JqCjw8Ci9UeXBlIC9Gb250Ci9T dWJ0eXBlIC9UcnVlVHlwZQovQmFzZUZvbnQgL1pEQVhFUyMyQkhlbHZldGljYS1Cb2xkCi9G b250RGVzY3JpcHRvciA1NyAwIFIKL1dpZHRocyA1OCAwIFIKL0ZpcnN0Q2hhciAzMwovTGFz dENoYXIgMzMKL1RvVW5pY29kZSA1OSAwIFIKPj4KZW5kb2JqCjM3IDAgb2JqCjw8Ci9UeXBl IC9Gb250RGVzY3JpcHRvcgovQXNjZW50IDkyNAovQ2FwSGVpZ2h0IDgyMQovRGVzY2VudCAt MjgxCi9GbGFncyAzMgovRm9udEJCb3ggWyAtMTk5IC0zMTIgMTAzMSA5NTVdCi9JdGFsaWNB bmdsZSAwCi9TdGVtViA4NQovTWF4V2lkdGggMTIzMAovU3RlbUggMzAKL1hIZWlnaHQgNjE2 Ci9Gb250TmFtZSA2MCAwIFIKL0ZvbnRGaWxlIDUgMCBSCj4+CmVuZG9iagozOSAwIG9iago8 PAovVHlwZSAvRm9udAovU3VidHlwZSAvVHlwZTEKL0ZvbnREZXNjcmlwdG9yIDM3IDAgUgov V2lkdGhzIDYxIDAgUgovRmlyc3RDaGFyIDQwCi9MYXN0Q2hhciAyMjIKL0Jhc2VGb250IDYw IDAgUgovRW5jb2RpbmcgMzggMCBSCj4+CmVuZG9iago0MCAwIG9iago8PAovVHlwZSAvRm9u dERlc2NyaXB0b3IKL0FzY2VudCA4MTEKL0NhcEhlaWdodCA3MjEKL0Rlc2NlbnQgLTIzNwov RmxhZ3MgMzIKL0ZvbnRCQm94IFsgLTQzIC0yNjggNjgxIDg0Ml0KL0l0YWxpY0FuZ2xlIDAK L1N0ZW1WIDQxCi9NYXhXaWR0aCA3MjQKL1N0ZW1IIDQzCi9YSGVpZ2h0IDU0MQovRm9udE5h bWUgNjIgMCBSCi9Gb250RmlsZSAxNyAwIFIKPj4KZW5kb2JqCjQyIDAgb2JqCjw8Ci9UeXBl IC9Gb250Ci9TdWJ0eXBlIC9UeXBlMQovRm9udERlc2NyaXB0b3IgNDAgMCBSCi9XaWR0aHMg NjMgMCBSCi9GaXJzdENoYXIgOTcKL0xhc3RDaGFyIDExNwovQmFzZUZvbnQgNjIgMCBSCi9F bmNvZGluZyA0MSAwIFIKPj4KZW5kb2JqCjQzIDAgb2JqCjE1MjM4CmVuZG9iago0NCAwIG9i ago8PAovTGVuZ3RoIDY0IDAgUgovTiAzCi9BbHRlcm5hdGUgL0RldmljZVJHQgovRmlsdGVy IC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAGFlE1IFGEYx/+zjQSxBtGXCMXQwSRUJgtSAtP1 K1O2ZdVMCWKdfXedHGenmd0tRSKE6Jh1jC5WRIeITuGhQ6c6RASZdYmgo0UQBV4itv87k7tj VL4wM795nv/7fL3DAFWPUo5jRTRgys67yd6Ydnp0TNv8GlWoRhRcKcNzOhKJAZ+plc/1a/Ut FGlZapSx1vs2fKt2mRBQNCp3ZAM+LHk84OOSL+SdPDVnJBsTqTTZITe4Q8lO8i3y1myIx0Oc Fp4BVLVTkzMcl3EiO8gtRSMrYz4g63batMnvpT3tGVPUsN/INzkL2rjy/UDbHmDTi4ptzAMe 3AN211Vs9TXAzhFg8VDF9j3pz0fZ9crLHGr2wynRGGv6UCp9rwM23wB+Xi+VftwulX7eYQ7W 8dQyCm7R17Iw5SUQ1BvsZvzkGv2Lg558VQuwwDmObAH6rwA3PwL7HwLbHwOJamCoFZHLbDe4 8uIi5wJ05pxp18xO5LVmXT+idfBohdZnG00NWsqyNN/laa7whFsU6SZMWQXO2V/beI8Ke3iQ T/YXuSS87t+szKVTXZwlmtjWp7To6iY3kO9nzJ4+cj2v9xm3Zzhg5YCZ7xsKOHLKtuI8F6mJ 1Njj8ZNkxldUJx+T85A85xUHZUzffi51IkGupT05meuXml3c2z4zMcQzkqxYMxOd8d/8xi0k Zd591Nx1LP+bZ22RZxiFBQETNu82NCTRixga4cBFDhl6TCpMWqVf0GrCw+RflRYS5V0WFb1Y 4Z4Vf895FLhbxj+FWBxzDeUImv5O/6Iv6wv6Xf3zfG2hvuKZc8+axqtrXxlXZpbVyLhBjTK+ rCmIb7DaDnotZGmd4hX05JX1jeHqMvZ8bdmjyRzianw11KUIZWrEOOPJrmX3RbLFN+HnW8v2 r+lR+3z2SU0l17K6eGYp+nw2XA1r/7OrYNKyq/DkjZAuPGuh7lUPqn1qi9oKTT2mtqttahff jqoD5R3DnJWJC6zbZfUp9mBjmt7KSVdmi+Dfwi+G/6VeYQvXNDT5D024uYxpCd8R3DZwh5T/ w1+zAw3eZW5kc3RyZWFtCmVuZG9iago0NSAwIG9iago8PAovTGVuZ3RoIDY1IDAgUgovTiAx Ci9BbHRlcm5hdGUgL0RldmljZUdyYXkKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFt CngBhVJPSBRRHP7NNhKEiEGFeIh3CgmVKaysoNp2dVmVbVuV0qIYZ9+6o7Mz05vZNcWTBF2i PHUPomN07NChm5eiwKxL1yCpIAg8dej7zezqKIRveTvf+/39ft97RG2dpu87KUFUc0OVK6Wn bk5Ni4MfKUUd1E5YphX46WJxjLHruZK/u9fWZ9LYst7HtXb79j21lWVgIeottrcQ+iGRZgAf mZ8oZYCzwB2Wr9g+ATxYDqwa8COiAw+auTDT0Zx0pbItkVPmoigqr2I7Sa77+bnGvou1iYP+ XI9m1o69s+qq0UzUtPdEobwPrkQZz19U9mw1FKcN45xIQxop8q7V3ytMxxGRKxBKBlI1ZLmf ak6ddeB1GLtdupPj+PYQpT7JYKiJtemymR2FfQB2KsvsEPAF6PGyYg/ngXth/1tRw5PAJ2E/ ZId51q0f9heuU+B7hD014M4UrsXx2oofXi0BQ/dUI2iMc03E09c5c6SI7zHUGZj3RjmmCzF3 lqoTN4A7YR9ZqmYKsV37ruol7nsCd9PjO9GbOQtcoBxJcrEV2RTQPAlYFH2LsEkOPD7OHlXg d6iYwBy5idzNKPce1REbZ6NSgVZ6jVfGT+O58cX4ZWwYz4B+rHbXe3z/6eMVdde2Pjz5jXrc Oa69nRtVYVZxZQvd/8cyhI/ZJzmmwdOhWVhr2HbkD5rMTLAMKMR/BT6X+pITVdzV7u24RRLM UD4sbCW6S1RuKdTqPYNKrBwr2AB2cJLELFocuFNrujl4d9giem35TVey64b++vZ6+9ryHm3K qCkoE82zRGaUsVuj5N142/1mkRGfODq+572KWsn+SUUQP4U5WiryFFX0VlDWxG9nDn4btn5c P6Xn9UH9PAk9rZ/Rr+ijEb4MdEnPwnNRH6NJ8LBpIeISoIqDM9ROVGONA+Ip8fK0W2SR/Q9A Gf1mZW5kc3RyZWFtCmVuZG9iago0NiAwIG9iago8PAovVHlwZSAvRm9udERlc2NyaXB0b3IK L0FzY2VudCA3NzAKL0NhcEhlaWdodCA3MzEKL0Rlc2NlbnQgLTIzMAovRmxhZ3MgMzIKL0Zv bnRCQm94IFsgLTEwMTggLTQ4MSAxNDM2IDExNTldCi9Gb250TmFtZSAvWlJCQldDIzJCSGVs dmV0aWNhLUJvbGQKL0l0YWxpY0FuZ2xlIDAKL1N0ZW1WIDE0OQovTWF4V2lkdGggMTUwMAov U3RlbUggMTI0Ci9YSGVpZ2h0IDU0MAovRm9udEZpbGUyIDY2IDAgUgo+PgplbmRvYmoKNDcg MCBvYmoKWyAyNzggMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDcyMiAwIDcyMiA3MjIgNjY3IDYxMSAwIDAgMjc4IDAg MCA2MTEgODMzIDcyMiA3NzggNjY3IDAgMCA2NjcgNjExIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDU1NiAwIDU1NiAwIDU1NiAwIDYxMSAwIDI3OCAwIDAgMjc4IDg4OSA2MTEgNjExIDYx MSAwIDM4OSA1NTYgMzMzIDYxMSA1NTYgMCAwIDU1Nl0KZW5kb2JqCjQ4IDAgb2JqCjw8Ci9U eXBlIC9Gb250RGVzY3JpcHRvcgovQXNjZW50IDc3MAovQ2FwSGVpZ2h0IDczMQovRGVzY2Vu dCAtMjMwCi9GbGFncyAzMgovRm9udEJCb3ggWyAtMTAxOCAtNDgxIDE0MzYgMTE1OV0KL0Zv bnROYW1lIC9IVUNWRVAjMkJIZWx2ZXRpY2EtQm9sZAovSXRhbGljQW5nbGUgMAovU3RlbVYg MTQ5Ci9NYXhXaWR0aCAxNTAwCi9TdGVtSCAxMjQKL1hIZWlnaHQgNTQwCi9Gb250RmlsZTIg NjcgMCBSCj4+CmVuZG9iago0OSAwIG9iagpbIDI3OCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDcyMiA3MjIg MCAwIDAgMCAyNzggMCAwIDAgODMzIDcyMiAwIDY2NyAwIDAgNjY3IDYxMSAwIDAgOTQ0IDAg MCAwIDAgMCAwIDAgMCAwIDU1NiA2MTEgNTU2IDYxMSA1NTYgMzMzIDYxMSAwIDI3OCAwIDU1 NiAyNzggODg5IDYxMSA2MTEgNjExIDAgMzg5IDU1NiAzMzMgNjExIDU1NiA3NzggMCA1NTZd CmVuZG9iago1MCAwIG9iago8PAovVHlwZSAvRm9udERlc2NyaXB0b3IKL0FzY2VudCA3NzAK L0NhcEhlaWdodCA3MzEKL0Rlc2NlbnQgLTIzMAovRmxhZ3MgNAovRm9udEJCb3ggWyAtMTAx OCAtNDgxIDE0MzYgMTE1OV0KL0ZvbnROYW1lIC9aREFYRVMjMkJIZWx2ZXRpY2EtQm9sZAov SXRhbGljQW5nbGUgMAovU3RlbVYgMTQ5Ci9NYXhXaWR0aCAxNTAwCi9TdGVtSCAxMjQKL1hI ZWlnaHQgNTQwCi9Gb250RmlsZTIgNjggMCBSCj4+CmVuZG9iago1MSAwIG9iagpbIDU4NF0K ZW5kb2JqCjUyIDAgb2JqCjw8Ci9MZW5ndGggNjkgMCBSCi9GaWx0ZXIgL0ZsYXRlRGVjb2Rl Cj4+CnN0cmVhbQp4AV2QsW7EIBBEe75iy7vihO0aIUUXneQiySlOPgDD2kKKF7TGhf8+QJyL lGILZubBsPLaP/fkE8g7BztggsmTY1zDxhZhxNmTaDtw3qbjVDW7mChkhod9Tbj0NAVQSgDI 94ysiXc4Pbkw4rlob+yQPc1w+rwOVRm2GL9wQUrQCK3B4ZSvezHx1SwIsqKX3mXfp/2Sqb/E xx4RcqNMtD+VbHC4RmORDc0oVNNodbtpgeT+WQcwTkeya7Wq07Vdzf86BS1ffFSyG3NuU/dQ i5YCnvCxqhhiebDON2+5cBdlbmRzdHJlYW0KZW5kb2JqCjUzIDAgb2JqCjw8Ci9UeXBlIC9G b250RGVzY3JpcHRvcgovQXNjZW50IDc3MAovQ2FwSGVpZ2h0IDczMQovRGVzY2VudCAtMjMw Ci9GbGFncyAzMgovRm9udEJCb3ggWyAtMTAxOCAtNDgxIDE0MzYgMTE1OV0KL0ZvbnROYW1l IC9MV0laSlAjMkJIZWx2ZXRpY2EtQm9sZAovSXRhbGljQW5nbGUgMAovU3RlbVYgMTQ5Ci9N YXhXaWR0aCAxNTAwCi9TdGVtSCAxMjQKL1hIZWlnaHQgNTQwCi9Gb250RmlsZTIgNzAgMCBS Cj4+CmVuZG9iago1NCAwIG9iagpbIDI3OCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA3MjIgNzIyIDcyMiAwIDAg MCAwIDI3OCAwIDAgMCA4MzMgNzIyIDAgNjY3IDAgNzIyIDY2NyA2MTEgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgNTU2IDAgNTU2IDYxMSA1NTYgMzMzIDYxMSAwIDI3OCAwIDU1NiAyNzgg ODg5IDYxMSA2MTEgNjExIDAgMzg5IDU1NiAzMzMgNjExIDU1NiA3NzggMCA1NTZdCmVuZG9i ago1NSAwIG9iago8PAovVHlwZSAvRm9udERlc2NyaXB0b3IKL0FzY2VudCA3NzAKL0NhcEhl aWdodCA3MzEKL0Rlc2NlbnQgLTIzMAovRmxhZ3MgMzIKL0ZvbnRCQm94IFsgLTEwMTggLTQ4 MSAxNDM2IDExNTldCi9Gb250TmFtZSAvTkJBVkJXIzJCSGVsdmV0aWNhLUJvbGQKL0l0YWxp Y0FuZ2xlIDAKL1N0ZW1WIDE0OQovTWF4V2lkdGggMTUwMAovU3RlbUggMTI0Ci9YSGVpZ2h0 IDU0MAovRm9udEZpbGUyIDcxIDAgUgo+PgplbmRvYmoKNTYgMCBvYmoKWyAyNzggMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDI3OCAwIDI3OCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDU4 NCAwIDU4NCAwIDAgNzIyIDcyMiA3MjIgMCA2NjcgMCAwIDcyMiAwIDAgMCA2MTEgMCAwIDc3 OCA2NjcgMCA3MjIgNjY3IDYxMSAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA1NTYgMCA1NTYg NjExIDU1NiAzMzMgNjExIDAgMjc4IDAgMCAyNzggODg5IDYxMSA2MTEgNjExIDAgMzg5IDU1 NiAzMzMgNjExIDAgMCA1NTYgNTU2XQplbmRvYmoKNTcgMCBvYmoKPDwKL1R5cGUgL0ZvbnRE ZXNjcmlwdG9yCi9Bc2NlbnQgNzcwCi9DYXBIZWlnaHQgNzMxCi9EZXNjZW50IC0yMzAKL0Zs YWdzIDQKL0ZvbnRCQm94IFsgLTEwMTggLTQ4MSAxNDM2IDExNTldCi9Gb250TmFtZSAvWkRB WEVTIzJCSGVsdmV0aWNhLUJvbGQKL0l0YWxpY0FuZ2xlIDAKL1N0ZW1WIDE0OQovTWF4V2lk dGggMTUwMAovU3RlbUggMTI0Ci9YSGVpZ2h0IDU0MAovRm9udEZpbGUyIDcyIDAgUgo+Pgpl bmRvYmoKNTggMCBvYmoKWyA1ODRdCmVuZG9iago1OSAwIG9iago8PAovTGVuZ3RoIDczIDAg UgovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAFdkLFuxCAQRHu+Ysu74oTtGiFF F53kIskpTj4Aw9pCihe0xoX/PkCci5RiC2bmwbDy2j/35BPIOwc7YILJk2Ncw8YWYcTZk2g7 cN6m41Q1u5goZIaHfU249DQFUEoAyPeMrIl3OD25MOK5aG/skD3NcPq8DlUZthi/cEFK0Ait weGUr3sx8dUsCLKil95l36f9kqm/xMceEXKjTLQ/lWxwuEZjkQ3NKFTTaHW7aYHk/lkHME5H smu1qtO1Xc3/OgUtX3xUshtzblP3UIuWAp7wsaoYYnmwzjdvuXAXZW5kc3RyZWFtCmVuZG9i ago2MSAwIG9iagpbIDMzMyAzMzMgMCAwIDI1MCAzMzMgMjUwIDAgMCA1MDAgNTAwIDUwMCA1 MDAgNTAwIDAgMCAwIDAgMCAyNzggMCAwIDAgMCAwIDcyMiA2NjcgNjY3IDAgNjExIDU1NiA3 MjIgNzIyIDMzMyAwIDcyMiA2MTEgMCA3MjIgNzIyIDU1NiAwIDY2NyA1NTYgNjExIDcyMiAw IDk0NCAwIDAgMCAzMzMgMCAzMzMgMCAwIDAgNDQ0IDUwMCA0NDQgNTAwIDQ0NCAzMzMgNTAw IDUwMCAyNzggMjc4IDUwMCAyNzggNzc4IDUwMCA1MDAgNTAwIDUwMCAzMzMgMzg5IDI3OCA1 MDAgNTAwIDcyMiA1MDAgNTAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNDQ0IDQ0NCAwIDAgMCAwIDAgMCAw IDAgMCAwIDU1Nl0KZW5kb2JqCjYzIDAgb2JqClsgNjAwIDAgMCAwIDAgMCA2MDAgMCA2MDAg MCAwIDAgMCA2MDAgMCA2MDAgMCA2MDAgNjAwIDYwMCA2MDBdCmVuZG9iago2NCAwIG9iago3 OTIKZW5kb2JqCjY1IDAgb2JqCjcwNAplbmRvYmoKNjYgMCBvYmoKPDwKL0xlbmd0aCA3NCAw IFIKL0xlbmd0aDEgMTA5NDgKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngBvVoL eFRFlj5V99m3H+nupJ95dHe6O533iySdQCA3IS8IgZDwSDBoAoQJCArKBJHBRUADUUedUUBk Rx1QGdTZTnBCo6sfy+DgiMz6XBUZ0Rl8YmR0UdTQt/fc7pARd775/Hbnm75dt95Vp/5z6tSp qgsEAHSwERiQF6/sXkV6yW8w5UV0LyzuW+P+UXWWDEB2AjC3Ll31o5Uv9Xy4F4BzA0iJP1qx bunqB//wFEBCCYAVenu6l/xlzjPnAPwYh7JeTNDcKvgxvgLjvt6Va264e4FOjd+F8Z+suHZx 98wlbVg/Q4dxeWX3DavEzdJFjM/AuPua7pU9w/+V8luMq/UDq669fg3jZAsxfg/Gu1Zd17Mq 0rptKcbPI33/iWkEH/WnAx6eRd8NC8ZSYsn/xxfFegywwGGr6k+IvUXQgARa7Ev96cEQ8//W KwETjehM6MzoEtEBJIEFQbOBHcMOcEIypEBqLCcNET4MJu4I5HE7IJWtUdOjJ9G9rfpKW/Qc 9xJI0Uh0hEGkSbrqTo+SJPg3pO0g3IS0vgL7iQa8MEKK4S2SSrLhTVDgbfgT9nQbPIjvOviI fIVj+JhkYpky2AS/gAeiq2AVVOHzEeGQvnL4OLo++nz0G6iBAThKBJJIUqOHoAD68dkFu4mO LooO4hhmwFqUok3wezgZHYp+gu2XwfvERArYSdE/AkXsnFAB22A/HCQe4iXZ5Iro+5huRxo7 YX+0OdqH9c5hqQKYCeuxt/eIi2SQHLKLvMOMRDdGf4pjS8G8ubAYn5VwM+yE3fBErNQiNoWz YPu10IR5P0X5/Qi+QGHIIjXkBvo68wnzF3YSuyt6FOmYi/11wQOEQVR8ZC5ZQlaRJ8iT5Lfk Kxqk3UwF8zq7in0IaZsLW+EheAaOwavwRzgLI/AtRAiLNE0hs8h68q9Y7090Al1IN9Db6Ul6 jili3mEF9jbuFu7pKBt9Pfot0pwG2TAJGmA2tEMPPkvhGvgx/AtsIQLsgEH4LVJ7Gk4TiRhJ ASkiDWQOuYJcTdbB3WQveYqcImfIB+RjpC6RuqiXFtA+7G8T3UafoEP0EB1hTMwaZgNzmHmH +Yq1sAvZw/ic5vK4NXwK3yTMVu5RTkfzondFdyFfrPj4IAvyYAphEcWVsAU5uQ0x2w174TH4 NQzBUHSUVMBReBnpeg/OwQXkWAo+HlJMykkLmY0UriAryb+QnUjhfjKMVD5NnoY3yBtkFB8F HFRD8+gVtJuuw2cX7KSvxvDRMR4mk8ljmpi26OfME8wg8wXrZxewq9n17AC7k32AS+Emc/O5 Bdwq7l5umDvO/Rd3jjvPp/L9/F7+Sf5VQRRKhJ2CQtKRFjfxw5M4zzfBdmYVxn0wlWxBrs6D F1F6R+A5GIVv4DA8SlJBYVRuZkQfgnB0K3LzGfgN8xOohLvpz+n0aBWzj9GQ4ugFbKsQ+XXp ATk7KzOQ4fd50z1uV1pqSrLTYbdZLUmJZpMxwaDXaSWNKPAcy1ACuXXe+i53KKMrxGZ4Gxvz 1Li3GxO6v5PQFXJjUv3lZUJutV43Zl1WUsaSS79XUo6XlMdLEqO7Eirzct11XnfoRK3XHSYL Zrdj+I5ab4c7NBILN8fCd8XCegx7PFjBXWfvrXWHSJe7LlTf1ztQ11Wbl0sOyaiDpLxcOAQg g1ZtOARTuzf02tFTS9SFnN7aupDDi2HMY/x13UtCLbPb62qTPZ6OvNwQmbrYuygE3ppQQs5Y dbWeG4u2tmPfebnLQkg/3KZb4l1yW1iGRV1qqLuzPcR0d4Rol9qHKSdk89aGbDe+b/9r9FKo 7vbvZIaov767Z6A+JHfdhqCr0S411n07xpra3NgsvaWjPURuQeJUImK0x0fR461TU7qWu0Ma b423d2B5F2IOLe1DTtlZ5+2q7QhBa/uQQ3bEInm5h+w3TfIgKIfyqvOqVX+Sx35T3P9wczz9 lcOqb7/p6LvoN7WO40LUnrzTkMyQezF2glggreXqq6ccBhaXI3z46yA4ymVIz9QQRVFi/CHO P607tLFtjIzu3tox4pbXDmkczjocQ1dNB5bvGjBORAZieaPXPfAlIGe9I59entI9lsL7jV+C mqnyf1yEQqT7UrgvBkydt7vX7u1V2dcXYzXGvfa67yRgHAvV5oUhO7cpDJqW9kFCftoRJtFb wlCbeggXGOaqKzE7RxW4ZbXYHUZyczEh24MhpKAeB1mvSoZ7wD0wbcmAu97diyLF+mM+ZvQM dBQgYG3tCAvMafeE5I7k8WBPR8dEbCdfbQerYPGBDmxh+VgL6MeSCiJYqCC3CZmQ0dI+uz20 sTY5JNd2IOgoxIdb2kOHUX47OrBU4TilSPGGZfYxmouQ5sJszC+Ot9KGbWATHQMDaptt7V5P 6PDAQPKAOuvi8TCB7yfIYwlhUIvgwOvCZGML1kXP60lWE7werwfJ6lAxnYACfEmAwlDy9xEu Hacba5YhtaUxhIP/IITLfwjCFT8I4YnjlF6G8CSkeaKKcOU/D+HJlyE85e8jXDVONxIpI7VV MYSr/0EI1/wQhKf+IIRrxym9DOE6pLlWRbj+n4dww2UIN/59hKeN041ETkdqp8UQbvoHITzj hyDc/IMQnjlO6WUIz0KaZ6oIt/zzEJ59GcKtfx/htnG6kcg5SG1bDOG5/yCE5/0QhOf/IITb xym9DOEOpLldRXjBPw/hK76DMODOYBfu0Cbj/oxB+36K7OH4VLT/WCGVAYljUxmGOjW8kErA IWr2e1ZU2nNyZp6vbI5UzjR+VdlsjFRCVWWkUnVFhRNMHlMA3S52T/jiCe7It1PCbOvor9EI w9Zxd8ftw35obKd5Sr66l5IAlymV80FNI98r3SBtZbfyu5h72Z38fuZhdh8fJmHpefK89Cbz pmQhAs9TEDUafElE4GiSJPnNGE3iOL8Z8wQxGzfMVNKiActrJIYTtXqbzamVWJ4Lk6QhDUPR G5Ycup4fX2fP6ZtpPG9vjlRU4N9U4ZhZ11P7gb0AqmyVzVWVleaKigIcEtefn7PB2IRLLHs4 OcQe7ejPt48lMJjAHO0wYUn89xsrKwV0RYVkISwkHi1uMDy4QfAQWkD6wo+RTiopQ1dF3luq PEufwv1ELZn97RRSoLwcQ6Qz+ga3njuH+ysXrJGz5kv3CPeIzBW0I7k9dSm7lmzjfpU0xB6U fsce056kbyf90X46+Wu70RYmWtnrFEWnrtrFMOZqp8ZlDdrEoCtNcHoSgmkOt+c+zxPzYjxr HkGONZsqRl4bwWGOVFWOmCsKjCNxis3BMo/bZrV5MgIZ3nRqSbJOKA6WBT08eNyBDBPp/M8n iZWsefwqQXkxrWDOw/uOnPjFL+cWuEhRpnJQiSpHhofpXez8l4fPbxtYXtalfP711xeWV1z3 ufLKiydID+NEru9G/q/H0WrwnKBNLl5rJoIYEAK6dvNy83r2dmaAHTDvZHayO81PMHqabdFk W6lF5INGp4P4LQ67I0zcBzytY4OJqIMZgaqqkUtDICYPklxakuEtw4FYzRajQLMwkRwjKSfn FdzxyjNX3N/VXN73oDIUuYWuZ49cnPJG3573PlfSJmy9JgprlJMvKiNIH+Apy8NIK8WwFgrC 0JjzFB6WaKApJwy8MQzkJXgK54qICU9hCYj56plKU05hEfGg/I897DsXz9MXIyVM4egetoJ9 RjkWBeUW5YLaCVHxYAe5w9hwULYJ2SyrYbKBakS+jzi1jOjXOCRtmKTgkB+L8y825ZrP4Jgj yLlIUWHieE+7WUsklfZH1il/4A4rEeWJKES2I+ZbsKNh7nTsxKdQNrGUEpHlcVaw4CcOjn+K NIGHlA6uG+uhIjYNUDyqUJJV8AJkWPkDKb6PO4LHNnGa9yP5HGTJCUBpNScyToH6wcELl9M6 0/gBVDVHqi5RuZuU0JOjX3BHRhuUCzGMdwDwmdiWGQ7Ld2lAEEUNZ7KKDk0WBMQcjc+UbQ4K pWKlpty8HHpM6+DHpm1wq2kXbDftg0dMx+CC+LUmhRMljVW0a1jB7BScks2cDl5TgXmyUCVV mW80H9IMm4+ZDQlCgkSlBLNJIwJnEChjlgTGYAJqEBkxCfGgLBOg5gS9IZDgSGxFOFA7oI5z GE+dskcqjTFYUNGhnjPbKghOevRMFUWFsHohwb/KiJKyUpz0SVaLyn7CriRPK+9R5WPldeUs Vd4jh4lOVYjM+zn3Z4/msK9n359zMRnhWKfqYMSCq+WeQ1mQYL5cINL5lFJeIEK2mRCKqk1i CBV5UZIIL9IA59Th3NE4tLrDHpVY1MhxhdwcMVWg5kJK4zqMRf1l7N9wFAldmOhBfiJl+N9B ptIm4lJejDyCNC5CKkZZ7tsprG30YyQCpaUH9dEnqI+0sZO8ajlg1VnNjiSHc4eT46pTbIy2 OkGTQoMpicnONDGY6EhNO+05+z09M6Zl1L595tISGtMr5gk+gY/pFGNc5ZgIc/qNNw4ePHny ID1y+lHlqHL00XfffZRUkspHT0emnCKGb74mCcoX33yjfHHjq48//iq5g9x7/PHHjytXM3hc SWEPYqdFORLxLHKKnLKD7OCpDqeTgclOQP4idU4Lo/cbHEmWMEn9jgZRV7C4CsHpFNeDGV5E qLisFFg1gEHWwpxctxLZ51q5jhQpX3+pHFP+QDe9g9Ooa5Eyc/n1SuTNyGfckTN4Uoy0zI2e 5AyIWz6e/O2Rl4sJgkfIcGgdCTaPLWOprke/LP39PG2WMcuS6cwITLSUOw9ZXrCcsrySezbx rPWbxG+t3+QlGMCkTbe7/DbRn27Qsvb813Lsr6VUFyQxbHWOpsC+vcBkmyVuz3QWucpM86Es 31FYFCZpB/6q6M/HVP3IeVT2Y0xALWmKC666YKEbW6hQUaqKvrQkkFFAUPeXlgAOemwZ4C1J NquLYBlLEq4DUErIekNW0/DK2ptledvuD9rvJW5i+5hME5U3xRWNV6/9aX3ez5VH525Rjisf KO8qw3Q2OdZTfIU9f8O0zECat2Ty0rd+R/gLZ28p93fNmxVweidnTu197gXlSyJ8wGaifvGg TjyOvBSgXNYRPlugrKjB6Qlh0j5E/biOt8saHi2Rwx51DVfl/nwkEpudzapeVNdflW/4sMeV BuUFpY47ooyOTmWfwVM0BiZF32HL2avwfLsCJsKd8qxJtLRsHdlG2DfTSMZ/f5D9odeg5/CE N9GZg+dkbEZ+Rn62msAma9OTrbkTXUK2pM0t1k5MbIbm/Iml2VMynJXO5uQ8sbnUMany34kD x9BIfg1x4kbinDhjqjjx/vsxVqChdALxt6lGA+oR1CLocsa4YSAJhBcQdmRKWTBQFl/O0gVe 8GDYU4yMMCXZ0ojN4sknASzpTUeO4TqdSN9JDhbKCwI1syd23s88MSt98sIFPdlpkjKiaVhN Eg/cdhtlUlKUF/QSM6m5c809/3H/3IdXUbPJotEZbYHWadUr7jwnJTiDUycU+6vu7LyroeE5 RVcyvTxTn+2Z6JfzSn91/+8XFFnIayjmKOcN0ZNsCeKYihbLNXLdfdZ9VtqfQqZZ2s295huk deaw5Vji8xbRTnk29RXWl+YUrAZJZzyo8yVp04xlCS4oS7OlOt1imc3hcvd7GmeOARa3USLn Y4I7omozNFRivorRarStYhaKCpIquqqJouoTWmqECSi4hDGKnsKeu0pTUibcsWSOhnilObcq 3yioQ8yfnyCcXUmmT08uqrlzxk03TNu6Yt6mNU+T8m+Ig5SHPyZ7cWwMFERPsRNxbGj6QDo8 Jk+rF/uTdpD70I4kGo43cs4mrt44zX0ruSWh3yUxVsaWaE20NYozrDNs05yd1k7bAucp8jb7 ceqH7gtu43RSb9zKbTayaH7eK0+YZbjKcK2BMRiSeV+6R7CZc5O1VoamM2W29elpXbqNOqpz +qjLcG+aw+vbOY5M5AxCsxDttzMjBTh/0YI7ETfhFqIlEF+GAOUkn3jLcMLarIJnbG7HEPKm g8kIkwh5aaWBPC2sv2LryQY5UUsjVr57Ult7MM1GvNoFt198STlCXO8nMWt+snz1j88uvaZ7 Y9Mde2uyipMLu5c8QHQknySTfFUGGKhRatgrESc96rpCWCAbB9JQoDlfYYFg5v16X1aYVMnu FHeuPaGQuswuf6AwN9FZnLIlOU9TlusoKsax1V02TUwVkfNncJZETlSNVKAJgmxXme6LGXU4 C2IsN+PgSj2mJOR6ui9waZCT1XmDC0xpiXlCkD4zsPma7RVp7onbtZN7ZWJpuFF55GXlawMp 0yXnr9xVkp5VMHfrK6NfvHPFJzsevv+XdzRdc9X0AeY6R871/zr61atXh/fuKbYGflSzu77e W00CF/+bNDHqmCneLQDZzx3H0QswSU6fATNIJ3TiNcogqghekGK6ig8QAVXUkKclPrzYZknd XqCGqmrGhUbdIOAqrLr9ymniiTsWr6SUtaN41UfwVguIuldiwC8nUiASpyrBAHGw3HizzXG9 h43GTTWyT/kzScVKWH8j2la72QV4M3KkuhmCSDlBeaZ4X0LBj24ZJMByvJ9ah/6N6G9DfwD9 +9C/D/1foTuE7kO0AAxY3oO3LAzuTfR435KH91zq248YuLDVVLTgRLRbCtCut2EdHm/LNCQB a5igGZIwlAZuLBVA36GujMSL7bXgnV2c+ZGjxvMjFecvjQZtrKrK5vh6FVeLEJNnC4Mmlro5 QTlA9f6doMeCynECKkeb6nN33l6Rb5SociopY2lfnk15L8m37MZsG4JsKS1o27KheYq7vK19 BbugvL6iLbg8MpsOT8mcsahkWmQt3dadO2tWXkdkFSs/MNcnBye0dOXl4fj7cV3qRllX7zib 5DyOWIifBEm7tlfLE7OR1/hwwhlYycaV2RKo02FS7Ui749lLItAcORpXbKpaQ9tspKoivgLH rMX/NZYAM/CGcsqW3Xd3WYpyhiQGi9r7l7Gdgyci6XTHvPw566t7IkNI4hx/jSqYOBdRH+9m e5Bb6h1ss5xpY4io26rbamRsenvCUj3D+exJgtZn0NrtIi2zOZ1imcnhcIZJ34FxFRO3Gkyq /ahuDxH96+C61WPTL7Yq+WJmANoIbrAQevbWWzds6O/fQPOVT5UP8fmUJKEqdZCkyKu/H9q7 d3Bw796hpcpjZO5fPiULlEc+pTJiuUFpY3ehbOpRKqbLWbZEUUpxUp9bcPKSL1HrMIh6u77M 6EznXckue8Dh8KTv9LSMrQ+oIGJWW0wDIpVVqCNMuJbipIqLRnxVKDWr6s6bHshQjyPiAsKs uf7m+yem9VS2rt2QSjRK5MVN8wrylA+IKb/kqs30gSM/n3nDs8154ftoBVov59B+eaXaVxd5 njv3UEPWNIQZ59AmVAKjbCdamtMPAUMaDtAEPR5TNMiOREHP6yQ3LaQyZSzqjsKgDehiNueS A56WpZdk/bW4sbJQ1QVI+2uqOrDaTKi2xwQ7Tiz9ozYxOVv/+CQP2p7GmqKWjWwnIcophq6q 2hy5wNY8uzJzqkoTRd6/jfeO3ZADuXCTPEtj5DMcekbDerTaJmmatsFT627MeoMRU9PdOom1 5rBWZ26uWWBzM7W5uQkWyZ1qbU4XLHlCs9+Zr4PU5oQ8aM5x5OV/Z1U+j2cFMdxVkxIXZYQ/ LiSRE8YTaFgWFV658EqyUDUVcU1WrUl/zJjEaXmZMakuTJYk3uvOQFtysSat9M45izMzleih GTNG3niRkETlz7yjYPXCWdnZ0f1z53x+UYl+iZewnTPcFcXFhQ7H5Py62o073trzfNA9cWKg yGorz5zduv6XJ97ax+BEIGCJfkJv4Hpxnk4fNuYmuHS5pqfIamBJp2wVoJMnvB1Zk8CfZzUB +BnyyR4mhgOeLpU9r1WeiVSer1T58xkak3j6M1KF4oYb2FL1XGuCxWuK22UWgUdD2WTZSZyD g+nz9amG/hemFzIrj5NC5aXjkcNTPYS8zgnNRUvpA6q8Rz9i56LuUL+LmCHnS1anNdtabp0n 9Ai8U5CAtxr0Eod2kVMvBZx2rTOFlNkdySl/VR7qvDRXNEdei2GuWkSo8hFttAURbjQSVRkv NRDBgFKkkuYnD1kD1/2sDK+5lbOs2zp1w5wv5hSQT9mayLULC9r65GV09uizu7jixMrcX3c9 Te9OReycqOPm4/cZPPxCnhXg5/BL+If53+B9ME+MtAGzbqRrmLUs30C2Qj+3g3uUO8g9z3xI LhAN42bZgJnjeOomJGDGJnjKsbjkMFQSKS4+YaIbYjicKbph1iH0qHg7vnsA5zD+zh7ftOLJ 2/ih240dR8fP2zCsjnm1aung0kk8iYyfFCtrlVeVdUT+M1sz+ixbc/EU4m1RGtgWxDsRv0p5 S14VkOZJS6V7pb3SqxLP4f6ZTxFM+jzBrZ8sFOmbhIWCqsXXCuv0eltCmb5fs1W7UxvW8klJ OlFP3TpdwKzVSrxAXaIYwPNGNaiXLDotntQIGnDR3ESXMSFJsKJgGfRaHY7xAGZI6Mu6xJ+J jh6L9VdxCevD7coZ+0W0aVU3duSIiqD5TOQMLnqxU0ecWQQ37RyeOrbecONzE8YAUMPqsUPB JRBwW1YWnEICxJOMaFB1JxAgg77sGU5HDqusIpM/ew9PFwdW3PRMRn4+2fQypZLZtELHXnfx FOMbfUl54V7C8EnqnIm54tVDH16VUPklmERVq8BzVRO7xn2LUsPvxl0twfMJtbz6Q5/PUrLw 8yRy4dTFt7U3jefE8wFc3DHYRStwd34MStB1otvNzYOH2T/Dbkzfovr8ftiB6Tv4CujBvD3o 5mK6h70eJqFrQFeA8Rosvw3dbUIqbMR4v5qGbgOTCpuwTA3dDxY1jmEnOgsSUYLPEVJCBsi/ k8+olVbSI4zEdDGPsPVsH+fktuIXJdv5F/hPhJ8JfxLLxe3iu5qlmpDESr14qKeO04U2EgMr 0Lqh+M2TEb+1AeEjKRFP+uKomcfGzKv9LWitqZk/NaexZ0Vfz5pli7vzaq5dsUTVz7FfVP1a 5m/9XJjIoD2VgfZRJtpMuTFrugiKYQLaUUH8CqgeGmE6fpM0C22m2dAKbfgtzzyYj1/gdEBn GFrxVLIR3RR0JeiycwZF+SlyFyQtPC9riIsFretNx2fPotmuhw9i7xDJl3V60CzeXOlavHlz Y1a1Bs8BgzhhXaQOfDG/dsj3mCtMpgz5vOhNjnt0KJiKMZA1QZ8rElzkuhgMi0ROdn3t+7nr ArqvfFWuL31Frpex3EvBBteJaswfch3PDlP0XvCFWSInuJ733ez6TTDL9WRwkmsogGlDrsFq 9IZde4M3u/ZsiaX8MjvmPeQLk11DrgdVb9j1ALa/fXMs4954xU1xb9WWWEfXHoh51xwI08eG XSt9Ga5FWJHIWtdC3wpXp6/CNac6TPxDrma12rBrRuCEq0ntesglxzsqi7de6otRXBzvNtf3 tCsz3kO6WlpOdLl9M1yp2H7ug9tdub4rXdXZYbLvYGNmtq8xsL0sTM7H+lA9JFT1rol7iwPP kEfxC6ossgCPYO870JiFNJO7hlyb0dt1oDEz6A8zH8lm14FAY2ALujJ0fnRzw2SOnCvsEJYI c4UJQo6QJWTg6VKakCwkiWbRKBpEnSiJIp4SsiIVQUwKR9+Vc1RJTuLxiz3Uxqz6ZmNhI8ol iQknijIeClMUsTAPt1j7quxV5immivrav/HqiiV21eb89YcL5/jPTlJD2/GSP7Q/tSNUrAai qR3juf+/QE8N1m9qXXegdd3ZebHvRLx1PV34uUjotj78nGfjIrd78Ow6NUP9YqFr0eJe1e/u Ca3z9tSGznpr3YOtsXrfy56nZrd6awdhXt2c9sF5ck/tUKvcqn4H0nGgpa4RzQHs5FJf28b7 aqz7G33VqY01qn21xOp9r6+ZanaL2tdMta+Zal8tckusr5ycumVtNfA/b+Qtw2VuZHN0cmVh bQplbmRvYmoKNjcgMCBvYmoKPDwKL0xlbmd0aCA3NSAwIFIKL0xlbmd0aDEgMTE2NjAKL0Zp bHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngBvXoLeFTV1fba5z7XzEwy11xmJjPJ5H6D XAYCOQlJCIRACAQSTCQBQoGCAmIwUCwCEgh4axUQ+WpVahFrOwSNgxR/foqiKN/nBYsiaq2A IEbUoqjJnPnXngkp9O/Tx+f5+jQne/b17L32u9dae629DxAA0MJaYEGeu6R9KVlFjmDJ6xiO z+1c4fpJeboMQHYAsBvnL/3Jkjc6Pt0NwLsA1LE/Wdw1X566JgkgZiSA7Y8LOtrnfeU6dBnA 9yW+X7QAC1QbxVSAtDTMexcsWXHHg59qsjA/CfNrF986t30+M3sx5ul4FUva71gqbVAPAqQb MO+6pX1Jx/MXv3sb83mY9y299bYVbJBbgfkmzM9Zurxjaahh83zM/xHp+x8sI/jQPy0I8CLG Lpg1VBIp/l/8MIjQtT9uKMHjKABiJCeBKhKrh+qujzRIjw70EAMGMGKFCUMsxIEZLGAFG+bs 4IB4SIBEQDTBiQgfBiN/BLL57ZDIVWA5hE9jeJ/GyrTwZf4NUIdD4X4WkSfJNHw0QOLgD0jN 83AncPAW7CUq8EA/KYD3SCLJgHdBgffhrzjSFvg1/lbBBfItUn2RpGGbIlgHv4JHw0thKZTh c4HwSF8JXAyvDr8S/h4qoAeOEpHEksTwAciFbnx2wi6iZeaE9+EcJsFK5KJ18CqcDveGP8P+ i+AcMZJcbnT4A2CAxxI/bIa98DxxEw/JIDeFz2G5DWlsgb3hunAnvncZW+XCZFiNo31MnCSV ZJKd5EO2P7w2fC/OLQHrGmEuPkvgLtgBu+CZSKs5XAJvxv4roRbr7kX+vQBfIzOkkwpyB/MO +xn7JTea2xk+inQ04nht8ChhERUvaSTzyFLyDHmW/Il8yxQz7ayffYdbyj2GtDXCJngMDsEx eBs+gEvQDz9AiHBI01gyhawm/4Xv/ZUZwbQya5itzGnmMpvPfsiJ3Bb+bv5gmAu/E/4BaU6C DBgN42EqNEEHPvPhFrgdfg4biAjbYR/8Can9CD4iamIguSSfjCfTyU3kp6QLHiC7yQvkDDlL zpOLSF0s42Q8TC7TieOtYzYzzzC9zAGmnzWyK9g17GH2Q/Zbzsy1cofx+YjP5lcICUKtOFV5 UPkonB2+P7wT18WCjxfSIRvGEg5RXAIbcCU3I2a7YDc8Db+HXugNDxA/HIU3ka6P4TJcxRVL wMdNCkgJqSdTkcLFZAn5OdmBFO4lfUjlQXIQTpFTZAAfBeyMislmbmLamS58dsIO5u0IPlrW zaax2WwtOy38FfsMu4/9mkvhZnHLuNVcD7eDe5RP4MfwM/lZ/FL+Ib6Pf43/M3+ZvyIkCt3C buFZ4W1REkeKO0SFJCMtLpICz6Kcr4Nt7FLMe2Ec2YCrOgNeR+7th5dgAL6Hw/BbkggKS1cz NfwYBMObcDUPwXPsz6AUHmB+yUwMl7F7WBUpCF/FvvJwva49IGekp/lSU7yeZLfLmZSYEO+w 26wWc1ysyWiI0eu0GrVKEgWeYxkCWVWe6jZXILUtwKV6amqyad7TjgXt1xW0BVxYVH1jm4CL vteOVTe0lLHl/H9oKUdbysMticFVCqXZWa4qjytwotLjCpJZU5swfU+lp9kV6I+k6yLp+yNp HabdbnzBVWVbUOkKkDZXVaC6c0FPVVtldhY5IKMGUmdnwQEAGTS04wCMa1+zwIYRbVEVcHgq qwJ2D6axjk2pap8XqJ/aVFUZ73Y3Z2cFyLi5njkB8FQEYjKHXqfvubBpQxOOnZ21MID0wxbt PM+8LUEZ5rTRVHtLU4Btbw4wbXQMY2bA6qkMWFeds/09ey1VtfW6ygCTUt3e0VMdkNu2IOg0 20Zz7VsxVzvNhd0ydzc3BcjdSBwlIkJ7dBYdnipa0rbIFVB5KjwLeha1IeZQ39TrkB1VnrbK 5gA0NPXaZXskk511wHbnaDeCciC7PLucxqPdtjuj8afro+VvHaax7c6jf8G4tmEYF0JH8kxA MgOuuTgIYoG0ltCfjhLomVuC8OFfM8FZLkR6xgUYZCU2JcCnTGgPrJ02REb7gsoh4hZV9qrs jiqcQ1tFM7Zv6zGMwgXE9gaPq+cbwJX19H9+Y0n7UImQYvgGaCVd/2EWCpD2a+nOCDBVnvYF Ns8CunydkaXGvMdWdV0B5rFRZXYQMrJqg6Cqb9pHyL3NQRK+OwiViQdwg2Fn34zVmZThFlbi cJjJysKCDDemkIJqnGQ15QxXj6tnwrweV7VrAbIUlxKJsaKjpzkXAZvWhLDA9CZ3QG6OH052 NDePwn5yaD/4CjbvacYeFg31gHGkKDeEjXKzanERUuubpjYF1lbGB+TKZgQdmfhwfVPgMPJv czO2yhumFCles9A2RHM+0pyXgfUF0V6mYR/YRXNPD+1zWpPHHTjc0xPfQ6Uumg8S+McCeagg CLQJTrwqSNbW47sYedzxtMDj9riRrGaK6Qhk4GsMFISR/xrhwmG68c0ipLYwgnDxvwnhkh+D sP9HITxqmNIbEB6NNI+iCJf+5xAecwPCY/81wmXDdCORMlJbFkG4/N+EcMWPQXjcj0K4cpjS GxCuQporKcLV/zmEx9+AcM2/RnjCMN1I5ESkdkIE4dp/E8KTfgzCdT8K4cnDlN6A8BSkeTJF uP4/h/DUGxBu+NcITxumG4mcjtROiyDc+G9CeMaPQXjmj0K4aZjSGxBuRpqbKMKz/nMI33Qd woCewU700Magf8aifT9WdvNCItp/nJjIgprnElmWcagEMZGAXVLtdS8utWVmTr5SWhcqnWz4 trTOECqFstJQKQ35eSOMbqMPw07uieDgCf7ID2ODXMPA79EIw3Fawqf41fxl9CGcsEJOn6l+ UHxQYm9imuObEudzK8lm/qm4Xu559cvcMc1p5v24D2wfxX9nM1iDRCN7HJLk0JY7WdZU7lA5 LcVWqdiZJDrcMcVJdpf7YfczMyJ01fUjVXVGf//J/lwo6y8r7Tf5cw39+XmkFVpNxUVul9Vi daf6Uj3JjDnOMqKguKjYLYDb5Us1kpb/eZZYyIrfzRaV15Nyp/9mz5ETv3q8MddJ8tOU55Ww cqSvj7mfm/lm35XNPYuK2pSvvvvu6iL/8q+Ut14/QTpYB85xF2K5GrFUoS88TS5YaSKi5BN9 2ibTItNqbivbw/WYdrA7uB2mZ1gdk2FWZVgYsyQUGxx2kmK22+xB4trvbhiaTIhOph/Kyvqv TYEY3Uhy4chUTxFOxGIyG0QmHQvJMZJwekbuPW8duumRtrqSzl8rvaG7mdXckcGxpzqf+Pgr JWnEplvCsEI5/brSj/TR9dgAQPr4j3DdOciTjRzDEIkTrFYHBynEzgsvkFpwk8J9XVFkQ/7J VR2V5xHWMlxpOqiP9Cn/TQoe5o+gS0/Q/wMhDfs2wWH5fhWIkqTijRbJrkoHn5Sp8hozTMVi oVSqKjEtgg5jF9xu3AwbjTthm3EPPGk8Blel71QJvKRWWSSbihNNDtGhtpqSwWPMNY0Ry9Rl plWmA6o+0zGTPkaMUTPqGJNRJQGvFxnWpBZZvREYvcRKcTgHhmN9jClGp/fF2GMbcAqTDVeQ Z+2GM2dsoVJDZCrIuMi3JqufGE1+jIz+/DxY1krw341MPLKoEL3EOIsZ027CLSEHlY8Z5aLy jnKJUT4mh4mWMjh7LvORjIFM7p2MRzIH4/kjA10UW8SCr+RfQj5Qw0w5V2JmMgwjiETMMBHC MKKkZgkjCZJaTQSJ8fEOLfKJyq7RHnZTYlHCogJWFzL6/X7EHAktNfn9XHdOpqF7zVEktDXW jWuAlOH/djKOqSVO5fXQk0jjHKRigON/GMtZBy4iEUjPE0iPBtdGwrOasXLCdrJdYLQZHKdn M2IQM6k41mFmdSl6e5w5SBKv40Aq5VEWREGKylGqB0ctKCoEjiYwyZnZ011LEBLnki6Sr3z3 jXJM+W9m3YfITm1zlMmLblNC74a+4I+cxdM0pKUxfJrXox7IwdORJ+RFUozoFlPtGnuM1W1N na/t0C1MPpetSTekm9Mcqb5R5hLHAfNx8xnzW1mXYi9Zvo/9wfJ9dowejJpkmzPFKqUk6zWc Ledkpu1kQnluHMuVZ6pybdtyjdYp0rY0R76zyDgTinLseflBkrT/74riSkRV9F9BZTGkKlDK jFFmQH7wY4iqDYKCRhVF4Uhfai5B3VE4EnDSQ2pEMMdZLU7axhyHegQKCVmtT6/tW1J5lyxv 3nW+6SHiItaLZIKkvCstrvnpynurs3+p/LZxg/Kacl75i9LHTCXHOgpusuWsmZDmS/KMHDP/ vZeJcPXS3SUpbTOm+ByeMWnjFrx0XPmGiOe5NJQzNwD3Gq6lCCWylggZIsNJKmR5CJKmXiaF x0hWCaitD7tvXx7lpSuhUITj61B4qZ5Gnok83GvKeOW4UsUfUQYGxnGH8KSB0FM78VYqx2SR /LWa43mVVjBM5Kr4Gu0mrpvv0W7SdcdsNLzHneLf1/7ZYLSAg4vj7TprDI+sDSzHIaeLvKRS iTpJb9MzKpb2IgiSRjCKJqvaqrFpu9gurpPvFDqNL7AvcM/yzwmvsq9yL/MvC++x73F/5v8s XGQvcuf584KziZ3FNfIzhZnGhexCbj4/X1igmW/UUKrsWovhOc1B4znNOeNV9Teavxk1GjVj V6eYVKLKaGLsphQ8n2SogjByvEpt4oExGrQaVE0aVs0LWlYvAjGyJpYzsHqGKg71iyQIIiHA YNCTYJ/JHttxDnHsRA1iqwudPRuyR7E0osqgWiMa2ag2KS2zUn3Co5SuqW24Y5XhaLfhWooy 07Jl0IpF+hsCVixfRmKtxbHuyA9xa1g3IR1/ysh8klT9ITv7JeJX2pXTvSNH9ip/VW7mjww+ e+k8OxV//8o2oga6mSQqnww+jkuGfyyMDn/IlXCz8YzWD6PgPnnKaKawqItsJty7SST1b+cz PvXodTyeYsY6MvEsiEvNSc3JoAVcvCY53pI1yilmqDVZBZpRsXVQlzOqMGNsqqPUURefLdUV 2keX/pHYkQdryO9haMuNStJZo//EuXMRUUJj4EQUFz/VrVGMMoekSU9iiCCi2KBQFRX7iqLb WbIoiG5MuwtQkIxx1iRiNbtziA9bepJR4nCfjmU+jC/Ok2f5KqaOanmEfWZK8pjWWR0ZSWql XzUeAdy/ZQvDJiQox3VqdnRdy4oH/+8jjb9ZypiMZpXWYPU1TChffN9ldYyjeNyIgpSy+1ru Hz/+JUU7cmJJmi7DPSpFzi586pFXZ+WbyUmKIwOrw59wu/jDuJ+5oEJOUbk0epMW7F6TqFG7 vLzGvIFxJCc61U6dT2N3J+9w108e0txXzg5pzX7cusuMUVUCJnMc40n2pfrMVPhwriNMEZ3i wblTNNin/vblqe6GfL9ykSQUldetTFmV5H/4kVFJP/s5N0s5/o2i9Ba56jfzh0NXJqUVDK7o fWDFpPvvqV25NRild3z4NDcS152eu98iVz1s2WNhuhPIBHOTaYHpDnWXKWg+FvuKWbIxApf4 FudNcogWvVpreF7rjdMkGYpinFCUZE10uKQiq93p6nbXDM1nyKYKXYkoyn66I6FhFYkjTA2t VCtGp0FVJTWpRMHtYgoNMAIVJWENkjuv4/7ChIQR98ybriIe9fSNyvfK998R01cnCG9T4pmD Y/Ir7pt05x0TNi2esW7FQVLyPbGTkuBFsjuyFmXI0x24Fgac3RQ564KWIGaJjIEFq9cgCupE r1pjZh2xTsHJ+jiH01Gksyc5d7hrqoZ4lC5I6MpZVOrULIyuip9qeGgFi5Uqw0I98SQDJfna skRWhVm1M4+4lUtjdq34P8oAIaeev7NjbMOa21d2cS0z6xjpB3l7exMp/JpYiTy4/Nn7Xpkx 8tDW7c+hHOaGz3CjcD3QvIRkeFqeUC11x20nD6s5gah4wcA7avlqwwTXRnJ3TLdTzVpYa6wl 1lojTbJMsk5wtFharLMcZ8j73MXET11XXYaJpNqwiV9v4JggeUgeMUU/W3+rntXr4wVvslu0 mrLiNRaWSWaLrKuTk9q0a7WM1uFlnPqHkuweL0JxjTspc7aijXy2PzcKx4momdwaumb+AMpi DvEU4aZmtYjuof0vsqoIkdEAowl5Y4meHBRX37Tp9Hg5VsOELEL76GlNxUlW4tHM2jr4hnKE OM/FsSt+tmjZ7Zfm39K+tvae3RXpBfF57fMeJVqSQ+JJDuVbgjczwGzh30SL+a7yXMyxkIXS 54QpaJfOxoCKCUus2FKD69+C8qhCTPVoWdmx1Iq3LGpszeKtFL2DUoEP65xo5/wCW9vxTsZO 9LgCbXhXMbQZng35/aUnrwzZgGXUlynrb73ST7nBYjXnEFx48wizB7nCUziC6p4RTEFWqm1Z 5sGDytlHd40e28+/ybIXWLbQ5Sp9dfAB9tZXq/9QMQdpqFAquJtxzXVo2+TBLNnQk4QKkPfm 5YomIUXnTQ+SMtmV4MqyxeQxTpMzxZeXFesoSNgQn60qyrLnF1zHslG1avQj26JWDZ0o6/ej 6Y1iR4XOG3ECIpoDRc6EC1XoNsah1CV7fdcWbAzVs+joFI40jShmDvWsv2WbP8k1aptmzAKZ mMevUp58U/lOT4q08TlLdo5MTs9t3PTWwNcf3vTZ9t888vg9tbfMntjDLrdn3vZfA9++/dPg 7icKLL6fVOyqrvaUE9/g30gtG9U7m3ER9/Kv4exFGC0nT4JJpAVa8GppH66cIKojtongIyKa JL3u+qhERhxI6k+gRVJWh4YlKhEUwkjYq3yEEhcJHF7TKSsH8PqT4G0GcEv4Q8gFX8q9MlPN n2TOMVwM+guN/Gb+Pule1Uv8cek98SPpjEojCTYhl83l0vhsoZgtESaxNUIr2ywsYhcKd3Cb uO3sQ+JT7B+4vcIesQ8vYl9G68NRK0wUZ/CbuPXSUf4ViRoiH4inJQ2vUlH7RaPhJEbEJN6R qBkXy75m4jisYhlOYFRqjhXUIt6YCg4dUftA49LkaWQNp7Frdd3u+k8o7w22Rqz6L6gLhY4H 3Ryt/u66nExujaF2atOq5qNgwjK/P6bbIJWKBmqpLWtFlyTWbSRuFXojotG9jtjIXNKurCdb lT3KQKdygT80eJ7sVGaH5pG3VitPUay24M8eNAhYSJFjGSBqnhqIPmLn+OElqIvahEhM1J0j e5RPSCK1IgisxXns4mbhzdqR8jooRhkkKHMMyhcDKRgW4v3vIpS8LoxXYbwZ4x6MH8b4YYyf wnAAw6e4Wnps78ZbOhalUof3ddkok/Q3BfnFib0mokRLKMO5Q9Is4G2risTgG0aogzhMJeEO nIhynYTyjF4D8WB/9XjnO7TdHjWg7F65Nhs0wlCko7Z81ORAocbHzKJLN7RNoWRfl3Sb6WaM hoeVxvx9W/05BjWjnIlLnd+ZbVU+jvMuXJVhRYY0F+ZO27CmbqyrZFrTYm5WSbV/WvGi0FSm b2zapDkjJ4RWMpvbs6ZMyW4OLeXkRxu9cvGI+rbsbJx/N/JuO+oFekdeK2fzxExSSDFp0izQ CMRkEFReVLR6Tm3li6wxjMNupH6rzf7iNXGpCx2lO1jUV0He6S/zR72TiHf6/83Fx/acUs5Y MzofKEpQzpLY4vym7oVcy74ToWRm+4yc6avLO0K9SOL0lAoqxKi30HbYxXXgatE7/Do5zcoS SbtJu8nAWnW2mPk6lvfa4kSNV6+x2SSmyOpwSEVGu90RJJ37h7eWqEdlpP4qPXpB9JfD8mVD qiqym3ojLhL6Ty4wE+bSxo1r1nR3r2FylM+VT/H5nMThtm8ncaG3X+3dvXvfvt27e+crT5PG Lz8ns5QnP2dkxHKNMo3bibypQ66YKKdbYyV1goPxukSHoPbGaux6SWfTFRkcyYIz3mnz2f+p bRbZ+SKWAJpnUUPgegum0ES3uYi1Rm2DCIOwK267C62xjtKGlWsSiUoJvb5uRm62cp4Yc0bO Xs88euSXk+94sS47+DDjR8/uMvp2b5V7q0Kv8JcfG58+AWGO6jBmgGvB3WniAWDJ+P1MjE4I kvGyPVbUCVq1i8ljZIY10xMMvcanjfjj8/a76+df4/WTUeejlepN3AtOUtWJBgxu13QzGCaW +UATG5+h+91oN/rlhor8+rVcCyHKGZZZWrY+dJWreHFJ2jhKE4Nr/z7eW7dDJu6yd8pTVAYh 1a5jVZxbo6lVT9CMd1e6atJPsVJiskur5iyZnMWRlWUSuaw0TVZWjFntSrTUJYvmbLEuxZGj hcS6mGyoy7Rn51xnQV7Bc7iITUzdbVRwCH+USUInDCdQCebn3dx6M2mNutoRqzgl4mijWN7g aEcEOU7wuFLRz56rSiq8b/rctDQlfGDSpP5TrxMSq3wi2HOXtU7JyAjvbZz+1aAS/gYv8Vsm ufwFBXl2+5icqsq129974pVi16hRvnyLtSRtasPqx0+8t4dFQUBbJPwZcwe/AOV0Yp8hK8ap zTK+QJYBR1pkiwgtAhFsuDQxwhVO5YNf4DrZgkS/391Gl+dk6dlQ6ZVSuj5foKONB6L9Zbh3 5+fFFtJzUWpQRH0esyjgIYLRvIM49u1LnqlL1Hcfn5jHLnmN5ClvvBY6PA69v3d4sS5/PvMo 5ffwBa4RdQf9rmaSnKO2OCwZlhLLDLFDFBy44wgWvU7Now3v0Kl9DpvGkUCKbPb4hL8rDyqX Jn9d6GQEc2q9o8pHtNHPQnMdHTDKNmj/itQEpqSlkMcsvuW/KMLPJJRLnMsybs30r6fnks+5 itCtrbnTOuWFzNSBF3fyBbGlWb9vO8g8kIjYOVDHzcTvewT4lTzFJ0wX5gm/EZ7D7wkEYmDG Y9UqZgW7khPGk03QzW/nf8s/z7/CfkquEhXr4jifCfdYxkWIz4RdCAzP4ZbDMmoJzxRIkGh7 WR4lRdvH2cUOird9yCH3+9Gcsxtepg44dcFNUfd7aEPtzrFlXttc6ZyX0QM+NDOIO5ZNIQXK SuVtpYvIn3AVAy9yFYNncB563PvcOA8t+PEiOBOCwOcGQcIAGFgM6twXcF14AGTjF3AXu5bS DqXy8ok7no6hiQzEdBP3k3tJunJUef/pZ5R36aHpXhzsMmsceJF1DJ7H9NdRWTQr47l6XGv6 RdV78lKfeoZ6vvoh9W7122o0OoggJIhGXbbo0o0R83W1YqtId5CVYpcOT1+KdN2qTZodmqBG iIvTSjrGpdX6THggIoiMU5J8JpWKJnVqs1ajkgRRBU4mK9ZpiIkTLcjUep1Gi/juxwo1xrI2 9heSvcNseSrK3Z14JHnWNoi+Hw3RIxCEvKzubOgsbriR00mEg+DRB4+A4+HHSyOGwKdpesSa e20B8LisqHgs8UVRYqiH7yP7vBmTHPZMTllKxnzxMclVehbfeSg1J4ese5Nh1CbjYi23fPAM 6x14Qzn+EGGFOCqvkdC849bE2TGl34BRoijCS2Wj2oZjvVKBp1mXsa0q0p5W4HtCupKOn9aR q2cG39fcOVxDa+mfiz8GOxk/npoegxYMuzC9QdgL2zG9nZ8BT2Bo5D4Bt3gPJHG3wWhMr8Z4 PMZlGOcye8GM6Qp8bzPm12G8RUyEtVjWTcsxrGETYR3WVQy1XYNph+AHPcboE8FIfJ6EQfyu ay/5milh3mUl9gK3lTvLN/C/E2ThSdElThc/k9RSr4pRNan61KDeqH5D49Vs0rysvRl7oPi4 0E5jYTFaWAz6Q9R/AvGCOhZ9qih6pkiMgNAxaxrHzaiqz6zpWNzZsWLh3PbsilsXz6N7ROQv TL/4+md/LixkIRUttCz0evJhBFpwxXj2VIk2WjV+LVYDE2AiflU3GX26evx2rAGm4fdoM2Am fkXWjF81Ik1BaMgMQg2GsRhGYsjI3CfJL5D7Ia71iqwiTg40znftX7xIcnDnPx/5DZAcWasD 1dz1pc6569fXpJer8M6iGBWHk1SBNxJX9nqfdgbJ2F6vB6Mx0YjpLU7EHMiqYq8zVDzHOVgc lIgc7/zO+0vnVQzfesuc33jznW9iuzeKxztPlGN9r/O1jCCD0XFvkCNyjPMV713O54rTnc8W j3b2+rCs17mvHKM+5+7iu5xPbIiUPJ4RiR7zBsnOXuevadTnfBT737Y+UvFQ9MV10WjphshA t+6PRLfsDzJP9zmXeFOdc/BFImucrd7Fzhav3zm9PEhSep119LU+5yTfCWctHbrXKUcHKor2 XuiNUFwQHTbLe9CZFh0hmbaWY50u7yRnIvaf9ettzizvzc7yjCDZ83xNWoa3xretKEiuRMag ERJKo1ui0VzfIfJbXNt0Mguvix7eX5OONJP7e53rMdq5vyatOCXIXpBNzv2+Gt8GDEUYUjA0 Bsl0OUvcLs4TG8URYqaYLqbiDUCSGC/GSSbJIOklLfK0hLcj6G9JIMUFw3+RMyk3xwn4LS3u Chz95SJpA/ImntUiAyI74wUWg4wWFOBuS2eZrcw01uivrvwnP22RwrbKzL//4QY+/GcjiYFt +LFKYG9ic6CAJsKJzcO1/7tERwW+X9vQtb+h69KMyPdOnqqONvzsKbClEz9LWzvH5dp3qYtW 0C9v2ubMXUDj9o5Al6ejMnDJU+na1xB57x+qZ9DqBk/lPphRNb1p3wy5o7K3QW6g3zM176+v qkGzBAe5Ntbm4bFqqv7JWFW0sxo6Vn3kvX8YazKtrqdjTaZjTaZj1cv1kbEyM6sWTquA/wf9 L8ZZZW5kc3RyZWFtCmVuZG9iago2OCAwIG9iago8PAovTGVuZ3RoIDc2IDAgUgovTGVuZ3Ro MSA1MDcyCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ab1YC3BU1Rn+//vYRwiy 4aGbhPXucjfvXcNLAiQmN2E3BAMx2RDc5aG7SRYTmkCsNJVSECGoLNbBsSLN0CKVGS0We7NB 3MhoMwqjrTL1MVbrC7U+UEzTOjyqIbn9z92wEoZhMlOGe+bc//z/+R/f/c5Jck4AASAZNgEP SkNrqA1MUEiW16lbG9rX2u8ozVFo/DkAf9/Ktjta3wh/tQ9AaAFImnBHy7qV08v77wS4ZhP5 7GsKhxr7s/9M43FO0mc1kcF8n9FE+nLSnU2ta+9Ougv+STr5gKllTUMIfDCT9AdIN7SG7m4z hZPOkb6DdPvqUGv42W+TjpKukp7VtuautVozhEl/j/TMtp+G2wZ921YCWEjl/0YvpMaeZDBQ B3Awi9gLKeJL4BYfA5tQBjYA7X3qHzA5VKv1i29Akjao9fGEBKewfnwAJ8KfwAjPwUYQ4C3Y j2aQoQ+nwz/QhrnwHgzBB/AZpMF2eJzeXjiBZ8AMX2M2+cyCzfA72KO1QRuUUDuBIkyC2fC1 tl57VfseyiACR9CIE9Cm9UA+3E+tE3ZjMlevdYEVFsLPaUU2w1/gfS2qfUP5Z8EXmIL5QqH2 EXAgkmUObIP98Bw6UMZcXKZ9QXYrYVwO+7VFWjvF9ZNXPlTBeqr2KUqYiXnYiR/zfdom7SH6 tsk0VwcN1FrhXtgFu+GA7lUvTBYnUX4PVNLcQ7QXTsB3RGMOluHd3Dv8N/y/hUKhUztCOOqo XhD2IE+sOLEOG7END+BBfBnPcAVciJ/DvyO0CXsJWx08AHvhBXgF3oaP4CT0wQ8wiAJhKsZb cD3+luI+42ZwK7gN3IPc+1w/P43/WDAK28Wt4mFN0N7RfiDM10Mu7c/5UAN+2gdhWAmr4Wdw D3SgER6DLniZ0B6H45iEFszHaTgfF+My/Amug4dxHz6PH+Ln+CV+TegmcBInc/lcO9XbzG3j DnBRrofr41P4tfwGvpf/mD8jTBJWCL3Ujotuca1hsqHSWDP066HjmlvboXXSulxLzQk54IZi FIjFVuigldxGnO2GffA0PANRiGoDOAeOwJuE61Poh7O0YpOpOXA6zsZqrCGELdiK9+AuQrgf DxHKw3gY3sV3cYDaEKRyZs7NLeNC3DpqnbCLe1vnJ5l38Nm8m6/ka7X/8Af4Lv47IUNYKtwp rBciwi5hjzhZvEm8VVwqtomPiofE18S/i/3iKYPNcL9hn+Gg4W2jyTjTuMs4hFMIix0z4CC8 SLtuJ99GuhPmYQet6hJ4nXZvHxyFAfgeeuFJtMEQz1YzU9sLMe0BWs0X4Fn+l1AED3OPcDdr JfxTvBmna2cp11Rar/MNlNyc7KzMDKc8xWGXrrdNTk9LtV537aSJE8anWMZdMzZ5TJLZZDSI As8huLxyedCuZgZVIVOuqHAzXQ6RIXSBIajayVQ+0ke1s7gQTY3wVMhz5UWeStxTSXiixV4E RW6X3Svb1WMe2R7DpTV+Gv/KIwfsap8+XqSPd+jjsTR2OCjA7rU2eewqBu1etby9KeINetwu 7FHod1CS2wU9AAqMYYlVmBfa0GQlwTy8aprs8aqpMo1pjs/whhrV6hq/15PucATcLhXnNcj1 Kshl6ri84XAWZydXn59qu13NKuGH7cmNcuP2mAL1QTYKLferfCigckFWIyVPvU72qNf94gvr j+r5kffBCyZVLqM8FI6Uq0pwO5HO1CDTQg+SVllrp7Tc1oBfxa0EjoHQsce/Iix7mSW4yq6a 5TK5KbIqSJxDtT+apqR55aAnoILPH01VUnXF7eqxbix0ECk97lJ3KZOFDuvGuPxqS9z+Vi+T 1o1HPiFZ6UvwgqySvIBgqvYGKkJcENbZ7BWeDZGG2UQfPQGkr2wmPPNUjrYSn6GKGQtC6qba YRihJs8wuFWeqDk1zUvfECwLkH8wYplLC0j+FtkeOQ20snLftyMtoWGLIcNyGtgkW//EFlIx dH7crhPjlUNNVrmJLV+7vtSky1bvBQbSycnjjkGuqzIG5mp/F+JDgRhqW2PgsfXQHxj+9tto Oo9tuGYPlSPF5SJDroNGhKCcPrKc7Qx7xB5Z0Bixl9ubaEsJGbqkiXAkkE+E1fqJFljsd6hK ID0xDAcCcynPDSwPhZB7JEAZVg1nIKmb8gfJKd9VSYuQWe2v8aubPOmq4gkQ6bSJe6v9ai/t 30CAvKYmkBLiDc3WYczTCPPUXJqfHs9SSzkoRSASYTlr/bJD7Y1E0iPspy6uxxAuNijDhhgw F/pwbww3VVMsCdmRzgyyQ3YQrADjdAZt4PMbKAYzL8/wjQncFDmL0N6oM1xwhRiePRqG54yK 4bkJpCMYLiTMcxnDRVeP4ZtGMFx8eYZLErgJpEJoS3SGS68Qw2WjYXjeqBj2JJCOYNhLmD2M 4fKrx/D8EQxXXJ7hBQncBPJmQrtAZ7jyCjG8cDQMLxoVw1UJpCMYvoUwVzGGq68ewzUjGPZd nuHaBG4CuZjQ1uoM110hhpeMhuFbR8WwP4F0BMMBwuxnDC+9egwvu4BhoJtBJwCdU1+iG6gR ihWHaLDR+U8w2nhIEgUbz3NpZoPRhpBqMu93tBRZ8/KqThUtGiyqspwpWmQZLIKSosEi1qdN nZHiSMmi3ik8ETt3THzph+KY4Bt4hg5hdA9cgLuFDm4v1ZEUCzeFxzSRSxUE8Q+OVeUsqeWU 5cwiyB+cNhUphdAxcJTbOzRAh1/9Tkn3yuYnsh69fVzRaUihKy09R0vmBhNywfBXIP2Rjt9B 9ThDzlAOXUfx7IfnPhizMTHDwtjDia9Ap/BHoGi6B/vozWI5WEW9he7iHF1tLXTHAuOJpAl0 E2WzCOOH8xjoVglLPaV+b21eRbilPby2uSHkLlvT0shy6I/GbkmXeobnY+DLi0EF9WLqM6nn 5nWZlOdxB0xccUoxoyTAGOm91H+9iDfAWPhSf6t4g5I8FswNW4qkhi1bKnJKzVgJBQKChF5w 6tITdT4txbA46pRJ3BQXXLTARhoo5gKnNFhQL50riJlQSZf+63xEOkv9jLNEOu2cJr1Jfm8U zJeOldJ8VHotN8aR+KszJqAyTnrVea/0bEGOdLCgUIpmkS0qdZWSOCTtK7hXeqJDt/w+Vxd7 nTHsjEqPM3FI2kP5d27RJx6NB26Oi7YOvdCabl2s7o5xTx+SWp2ZUj0FojJGWuFskZY750iL S2OYEZUWsbBD0sKsY1IlKx2VlHihWfHsNzp1xNPjZV3Ow1J2vMIU5q1MkOzOhZKN8rse3ym5 nLdJpbkxfOq5iuxcZ0XWzlkxPKXXYIKAMrE6LhqyXsAn6Qacg0shA3/TXZFDmHFHVNpCorO7 IrsgI8afUMZL3VkVWR3UZ1HPoF4Xw8WKy/iYsdFYZ5xhzDPmGDONDuP1xnTjRNN4k8V0jSnZ lGQymQwmwcSZwDQxpn2i5LH9NtFA/2BBMAjsLehjC+0f1DcZbUkOTRzcDDEDbL22vcRaMr44 ZU655xKvoG4MevJ+fOgnL/FY0abupEOaut8WUKezgWYLJGb/v0G4jOIrfeu6fetOLtHP+bI3 HKTjvrq9na5jm+rt9q6T69gEO3EG6xuamAyF1XVy2KOelD32Lp8ed9H0Ejbtkz1dsMS72N+1 RAl7oj7Fx87xge5qb0XViFrbErUqvJeo5WXJKlitaj3uolpVbLqa1apitapYrWqlWq+Vl+dt ri2D/wG8wnfNZW5kc3RyZWFtCmVuZG9iago2OSAwIG9iagoyMjIKZW5kb2JqCjcwIDAgb2Jq Cjw8Ci9MZW5ndGggNzcgMCBSCi9MZW5ndGgxIDExNDg4Ci9GaWx0ZXIgL0ZsYXRlRGVjb2Rl Cj4+CnN0cmVhbQp4Ab1aC3hTVZ7/n/vOo2mSNs82TdKkTZumTVvoI1DobekLSqGUV4uttEAR GEBQBIHBQUALxeeMAgI7vhhFHGdCcTDI4LIsioLM+sBVEXVcER9YGV0UteRm/ycpHXHnm89v d77p7cl53HPv+Z/f/3nOuUAAQAtrgQV59qKuJWQ5eQFbXsZ0fPbyZa7rqnJlALINgL197pLr Fr3S/fEuAN4FoE65buHKubufKN0BkDwcwKqf19015y9Nhy4A+Grw+dJ52KC6XczG+s+x7p23 aNnN9/GaN7H+ENbXLrx+dtesce05ADkurFcv6rp5ibRBfRnrc7DuWty1qPvQF+QNrG/Aum/J 9TcuYx/hurH+W6zPWnJD95Joy6a5ALl6pO8/sI3gRf+0IMBzmLtgxmBLvPn//MMgPtzQ0/xg SQARSxImFahBM3T/xwUtNiSBDpJBDwYsGzGlQCqYwAwWsGLNBnZIg3RwQAbWnIjwYTDwRyCf 3woOrhrbIXYa0zs0VybHLvCvgDoWjfWziDzJpOn9AZIKv0eKnoFbkNbXYA9RgQf6STG8TRzE D2+BAu/Af+FIm+Eh/K2FT8g3SPmnJAf7lMI6+DU8GFsCS6ASr08Ij/SVw6ex1bEXY99BNfTC USKSFOKIHYAg9OC1HXYSLTMrthfnMB5WwFp8x0twOtYX+wzfXwofEQMJciNj7wIDPLaEYBPs gWeIm3iIn1wT+wjbrUhjO+yJNcWW43MXsFcQJsBqHO0D4iTZJI9sJ++x/bG1sbtwbul4byrM xmsR3ArbYCc8Fe81i0vnTfj+GmjEe3eh/H4CX6Ew5JJqcjPzBvsZ+xduJLc9dhTpmIrjdcKD hEVUvGQqmUOWkKfI0+TfyTdMGdPFhtg3uCXcw0jbVNgID8MhOAavw7twHvrhe4gSDmkaTSaS 1eRf8Ln/YoYxHcwa5g7mNHOBLWLf40RuM38bfzDGxd6IfY80Z4AfRkI9TIJW6MZrLiyGm+AX sIGIsBX2wr8jte/D+0RN9CRIikg9mUKuIT8jK+Fesos8S86Qs+Qc+RSpS2GcjIcJMstxvHXM JuYppo85wPSzBnYZu4Y9zL7HfsOZuA7uMF7v8/n8MiFdaBQnKfcp78fyY/fEtiNfzHh5IRfy YTThEMVFsAE5uQkx2wm74En4HfRBX2yAhOAovIp0fQAX4BJyLB0vNykm5aSZTEIKF5JF5Bdk G1K4h+xHKg+Sg/AmeZMM4KWAjVEx+cw1TBezEq/tsI15PY6PlnWzOWw+28hOjn3JPsXuZb/i srgZ3FJuNdfLbeMe5NP5Ufx0fga/hL+f38+f4P+Tv8BfFBxCj7BLeFp4XZTE4eI2USGZSIuL ZMHTqOfrYAu7BOteGEM2IFenwcsovf3wPAzAd3AYHicOUFjKzezYwxCJbURuHoI/sD+HCriX +RUzLlbJ7mZVpDh2Cd9ViPy6coHsz83xZWd5PZlulzPDkZ5mt1ktZlNqitGgT9YlaTVqlSQK PMcyBAK1nrpOVzi7M8xlexoa8mnd04UNXT9o6Ay7sKnu6j5hF32uC29d1VPGnnN/1FNO9JSH ehK9qwIq8gOuWo8rfLLG44qQGZNasXxnjafNFe6Pl5vi5Xvi5SQsu934gKvWOq/GFSadrtpw 3fJ5vbWdNfkBckBGC6TOD8ABABk09MVhGNO1Zp4VM9qjNmz31NSGbR4s4z02q7ZrTrh5Umtt TZrb3ZYfCJMxsz2zwuCpDifnDT5On3Nh15ZWHDs/MD+M9MNm7RzPnM0RGWZ10lJXe2uY7WoL M510DENe2OKpCVtWfWT9a/VKqfaOH9wMM1l1Xd29dWG5czOCTqudtNZ1B9YaJ7vwtcxtba1h chsSR4mI056YRbenlrZ0LnCFVZ5qz7zeBZ2IOTS39tlle62ns6YtDC2tfTbZFq/kBw5Ybxnp RlAO5FflV9F8pNt6SyL/eH2i/bXDNLfecvTPmDe2DOFC6EiesUhm2DUbB0EskNZy+tNdDr2z yxE+/GsjOMv5SM+YMIOixGaF+ayxXeG1kwfJ6JpXM0jcgpo+lc1ei3PorG7D/p29+hHIQOyv 97h6vwbkrKf/86tbugZbhCz910BvUv4PiVCYdF0pL48DU+vpmmf1zKPsWx5nNdY91tofNGAd O9XkR8AfaIyAqrl1LyF3tUVI7LYI1DgOoINhZ16Lt/OowM2vweGwEghgg9+NJaSgDidZRyXD 1evqHTun11XnmocixWXFc7zR3dsWRMAmtyIsMKXVHZbb0oaK3W1tI/A9BfQ9+Ah2723DNywY fAPm8aZgFDsFA43IhOzm1kmt4bU1aWG5pg1BRyE+3NwaPozy29aGvQqHKEWK18y3DtJchDQX +vF+ceItk/Ed+Iq23l76zsmtHnf4cG9vWi/VukQ9QuDHDfJgQwRoF5x4bYSsbcZnMfO402iD x+1xI1ltFNNhKMBXBCgCw/8+wiVDdOOTpUhtSRzhsn8QwuU/BeHQT0J4xBClVyE8EmkeQRGu +OchPOoqhEf/fYQrh+hGImWktjKOcNU/COHqn4LwmJ+EcM0QpVchXIs011CE6/55CNdfhXDD 30d47BDdSOQ4pHZsHOHGfxDC438Kwk0/CeEJQ5RehfBEpHkCRbj5n4fwpKsQbvn7CE8eohuJ nILUTo4jPPUfhPC0n4Lw9J+EcOsQpVch3IY0t1KEZ/zzEL7mBwgDrgy24wptFK7PWIzvR8tu XnBg/MeJDhbUPOdgWcauEkQHAZuk2uNeWGHNy5twsaIpWjFB/01Fkz5aAZUV0QqaigqHGdwG H6bt3KORyyf5I9+PjnAtA7/DIAzf/jCO04XjqHC1mAttcuAJ7nHxcSO7wtxjZtLVfkJ84M9h NH6flK7nS60T9WVOex5osnw2f94fSQa4oQWXfvHxE8M39V/sN4agsr8yagwFo6GiQtIBHcTg Li4tGe7L9tBSWbzoAxroioKYQeKZjnjcBjc5RhZ0rWyu/ZnyRyyUzppZ0knqltbUZI9bemO1 v7L+35ZG5zAvc0eUg2M7rnNboseUFfbCjTfmWQlb8sC163taCrJz+36xfl5tsDQHJ4ZYtsfe 5FfzF3Cd5IRlcu509X3ifRJ7DdOW1uqYy60gm/gnUvu4Z9QvcMc0p5l3Ut+1vp/2rVVviRCN 7LFLkl1b5WRZY5Vd5TSXWaQyZ4ZodyeXZdhc7gfcT01LzL0fkW8yhPpP9Qfp3CsQg6C+PzF5 Y1mp22UxW9zZOP9MxpRqHoYQlLkFcLt82QbS/h9PEzNZ9tuZovJyRnDKb3YfOfnrR6YGnaQo R3lGiSlH9u9n7uGmv7r/4qbeBaWdypfffntpQeiGL5XXXj5Julk7znEn8nF1nI8WmCwXrzAS UfKJPm2rcYFxNXcH28v1Grex27htxqfYJMZvUvnNjEkSyvR2G8ky2ay2CHHtc7cMTiZKJ9MP lZX9V6ZwhWvZnlKciNlo0otMLjYit9JPTwve+dqha3Z0NpUvf0jpi97GrOaOXB795vJHP/hS yRi2cXEMlimnX1b6KTuQ1g0AZD//fnzHo1A2cAxDJE6wWOwcZBEbLzxLGsFNSvauHJSq0ITa 7ppzCGslSjMd1Ef2K38ixQ/wR3DbguAaFwTKaiMclu9RgShJKt5glmyqXPBJeSqvwW8sE0uk ClW5cQF0G1bCTYZNcLthO2wx7IbHDMfgkvStKp2X1CqzZFVxotEu2tUWYyZ4DEHjKLFSXWlc ZTyg2m88ZtQli8lqRp1sNKgk4HUiwxrVIqszAKOTWCkV58BwrI8xJifpfMm2lBacwgT9RVQM m/7MGWu0Qh+fCion6qbREiIGYwgzAyoJLO0g+I8KYBheWoIr4VSzCctuwi0iB5UPGOVT5Q3l PKN8QA4TLVVi9qO8Hf6BPO4N/468y2n8kYGVFFvEgq/hn4/vF02XgxIznWEYQSSi30gIw4iS miWMJEhqNREkxsfbtSgnKptGe9hNiUUrMqjFUUMoFELMkdAKYyjE9RTk6XvWHEVCO1LcyAOk DP+3kjFMI3EqL0cfQxpnIRUDHP/9aM4y8CkSgfQ8ivRokDcS7keNltO3kq0Co/VznI71JyNm UlmK3cQmZelsqaYIcfxAAqklS4ggKlJCj7KpeUArAhwtYJEzsadXLkJInItWkiLl26+VY8qf mHXvoTh1zlImLLhRib4V/YI/chZ3DAdpWYq0qHH13Sr7XZ40q4n3pWSjkXOAP5fxOSSHKzNF sGQKZZa06Xp7AHxZOba8QIRk/Jiys0ejR5F5CBKFiCp7NGSwUGM3ZN48pWYLtWzUvjlIKqqN iRqAICmI2zlE7xXSMW94e1vxnHceH1FYvmDV3KmSNqA8pRO0yKrZG5UjyuvM62jplln9P7+9 wB6tqynfOH3+CX/u1h2zu72htKyijNFVm+68Nvoczgp3k2KneR3auQLc4XpUXiAli24x26ax JVvcluy52u6k+Zkf5Wty9bmmHHu2b4Sp3H7AdNx0xvRa4HzKefN3Kd+bv8tP1oFBk2l1Zlmk rEydhrMWnMqznkqvCqayXFWeKmjdEjRYJkpbcuxFzlLDdCgtsBUWxfEZMoQX46aw/yIaw0FT iFYEsaHCjv80DfoENCTUEFK3ECQITclwQKYOmknBhJA5CfYxpaKdhBJCVutyG/cvqrlVljft PNd6P3ERy6dkrKS8JS1s+NmKu+ryf6U8PnWDckI5p/xZ2c9MIse6i6+xFqwZm+PL8AwfNfft F4hw6fxt5Vmd0yb67J5ROWPmPX9c+ZqI57gctCNuAO4EIilCuawlgl9kOEmFKg0R0trHZPGY ySoBPe5h9003JHTlYjQa1+gmNE7U1yL34xd3QqlXjiu1/BFlYGAMdwh3i1gYGXuPK+dm4j5t CEbA3fLEkUxJ6UqyiXBvZZDs/z7n/9ijS+JxJzPFnof7QVx2QXaBnzZwaZrMNHNghFP0qzWB Ys2IlCZoKhhR4h+dba+wN6XlS00ltpEVfyQ2nEMD+d2gO0ZHTJXorCF08qOP4qzAgOAk4m8J IRuQHWh5MOUNckNHkokgIuzIlNIyXyllDLor9M9uLLuLkRGGVJRoFOMC4sOenkzkGPqxFOa9 tLJCeYavetKI9h3sUxMzR3XM6PZnqJV+Vf1SkrJv82aGTU9Xjiep2ZFN7cvu+7cdU3+zhDEa TCqt3uJrGVu18O4L6mR72ZhhxVmVd7ffU1//vKIdPq48J8nvHpEl55c8seOlGUUmcgrVGOW8 PnaaG4440r3sxXLtA+bdZqYnnYw1tRrnGW9WrzRGTMdSXjRJVkbgHK9x3gy7aNaptfpntN5U TYa+NNkJpRkWh90llVpsTlePu2HCVT48ejEuuP3UAqIjj+cUo6UYxsQ9OAWJii514aLgdjEl ehiGgktYveQu7L6nJD192J1zpqiIRz3lduU75btvifHLk4S3KmnMwVFF1XePv+XmsRsXTlu3 7CAp/47YSHnkU7IrPrdKlJFu/jDu4ztgohz4REtwMAejZ8Hi1YuC2uFVa0ysPcUpOFkfZ3fa S5NsGc5t7obaH0whevEsKhkNQ/DfgEaKahx0gNlChbME46xMoCQbExFZZpznzKrthcStnB+1 c9m/KgOEvPnMLd2jW9bctGIl1z69iZG+l7d2tZKSr4iFyJdvePruF6cNP3TH1j+gXAdjZ7gR yA8MZyATnpTH1kk9qVvJA2pOICpe0PP2Rr5OP9Z1O7ktucepZs2sJcWcYmmQxpvHW8ba283t lhn2M+Qd7lPHx65LLv04UqffyK/Xc0yE3C8Pm6ibqbtex+p0aYI30y1ajIE0jZllMtlSy+rM jE7tWi2jtXsZp+7+DJvHi1AMcjN6FqW/A2Oys/3BBBwnE2FZR/SKuwWUbbTGaKjxEt2D9ijO VYTIoIeRhLyySEcOiquv2Xi6Xk7RMFGz0DVycmtZhoV4NDPuuPyKcoQ4P0pll/18wdKbzs9d 3LW28c5d1bnFaYVdcx4kWjT2aaSAyi3B0w5gNvOv4onMrVVBrLEQQGl2wkQ8TZmJCRUdWyzY U4P8b8d4RoWY6tBf2bDVgicXauzN4kkPPddRgQ/vOdGv/hJ72/Ccw0Z0yIFO3P8fNE5no6FQ xamLgzFHJV0fVPZ3XOyn0oDeqIAg403DTB6UCk/JMKrLw5jiQLZ1ad7Bg8rZB3eOHN3Pv8qy n7BsictV8dLle9nrX6r7ffUspKFaqeauRZ4noa8phBmyvjcDDQrvLQyKRiEryZsbIZWyK90V sCYXMk6jM8tXGEixF6dvSMtXlQZsRcU/ENmEmTKEUGzRSkVPVvaHMNRDtaNK571iheIqZ0RG lbgNuGhwZ3p9Vxg2itotDKxLhhuHlTGHetcv3hLKcI3Yohk1Tyam+lXKY68q3+pIqTatYNH2 4Zm5wakbXxv46r1rPtv6mx2P3Nm4eOa4XvYGW96N/zLwzes/i+x6tNjsu656Z12dp4r4Lv83 aWQp/xg8wwCyhz+BsxdhpJw5HsaTdmjH45q9yDlBVMd9heAjIrqIPndzQiPjizIav6KHqGzC QAaNCCphPO1R3keNiycOj76UFQN4pEjwhAC4RfwhlIK/yH0yU8efYj5iuGSMT6fym/i7pbtU z/PHpbfF96UzKo0kWIUgG+Ry+HyhjC0XxrMNQgfbJixg5ws3cxu5rez94hPs77k9wm5xPxvh XmBf4uyNwjhxGr+RWy8d5V+U3mbf5t4VT0saXqXieF7QaDiJEbGI5w5qxsWyJ4wch7dYhhMY lZpjBbWoxpjbnkTUPtC4NIUaWcNpbNqkHnfzh1T2LnfEo8gvaMiOgS51NpZQT1NBHrdG3zip dVXbUTBiWyiU3KOXKkQ99ZxLOzAETnEbiFuF0a9ocK8jVjKbdCnryR3KbmVgufIJf+jyObJd mRmdQ15brTxBsdqMP7vRZ7OQJacwQNQ8ddg+YuP4IRY0JXw0EpNYPpDdyofEgQ/h82txHju5 GXhadaSqCcqQywR1jkH9YiAL03w8U12AmrcS81WYb8K8F/MHMH8A8ycwHcD0MXJLh/3duIpm USuT8AwsH3WS/mahvDjxrQ7UaAl1ODiozQKeYKpIMj5hgCZIxVIGuLCXD3MbjeKIB9/XjOeo CX2OHtWj7l68MhtcQ6BKJ2KrhAtHpcbLxOISgi400XOgZv+g6DahIx+GjtxCc/7uO0IFejWj nEnNnrs836J8kOqdv8pvQYE0lQQnb1jTNNpVPrl1ITejvC40uWxBdBKzf3TO+FnDx0ZXMJu6 AhMn5rdFl3Dyg1O9ctmw5s78fJx/D8puF9oFeu7cKOfzxESySBlp1czTCMSoF1ReNLQ6Tm3h Sy3JjN1moOskq+25K+rSFD1KY5ZE7Iiy018ZSkSL8dXQ/5qLj+19Uzlj8S+/tzRdOUtSyopa e+Zz7XtPRjOZrdMKpqyu6o72IYlTsqqpEqPdwthhJ57wa5A+KzTJORaWSNqN2o161pJkTZ6b xPJea6qo8eo0VqvElFrsdqnUYLPZI2T5viHXkohwDXR9RJf6iP4NcMPSQVMV96beeMiK8awL TIQ5f/vta9b09KxhCpTPlY/x+pykotu3kdTo6y/17dq1d++uXX1zlSfJ1L98TmYoj33OyIjl GmUytx1lMwmlYpyca0mR1Ol2xusS7YLam6Kx6aQka1Kp3p4pONOcVp/N5s7c5m6+4v0uUvfX 1B/3fPFIYCgQSIhGIoIpMVI358n0ZdMtooSAsMtuvHXHiIzuipYVaxxEpURfXjctmK+cI4aC 4TPXMw8e+dWEm59ryo88wIQw0r6AsfZrVd7a6Iv8hYfrc8cizAkbxgxw7eidxh0AltTvY5KT hAipl20pYpKgVbuYQkZmWBNdMes0Pm18/Tdnn7t57hVZP5UIrDuo3URfcIqaTgxg0F0PCnaC WOZdTUqaP+m3I924DtRXFzWv5doJUc6wzJLK9dFLXPVzi3LGUJoY5P07eBbcBXnoZW+RJ6r0 QrYtiVVxbo2mUT1WU++ucTXkvslKjkyXVs2Z8zizPRAwilwgRxMIJJvULoe5KVM05YtNWfYC LTiakvOhKc+WX/CDCJLufcVxp8sfNHAIf0JIoif1J+MLxGs7riUddFmD8SNd+WTFFz6ollct fOKKnCp4XNm47pmtyii5e8rsnBwldmD8+P43XyYkRflQsAWXdkz0+2N7pk758rIS+xoPxtvH u0LFxYU226iC2pq1W99+9MUy14gRviKzpTxnUsvqR06+vZtFRcBYJPYZczM/D/V03H59INmp DRieJUuBI+2yWYR2gQhWZE2ycJFT+eCXyCdrhOj2uTspe05VnI1WXKyg/PkCFz64yYh7fRfP FhWmlNC9RhpQJNYQJlHARZ3BtI3Y9+7NnJ7k0PUcH1fILjpBCpVXTkQPj3ET8gYvNhXNZR6k 8h77hJuKtoN+qzJeLlCb7Wa/udw8TewWBTt6HMGsS1LzGMPbk9Q+u1VjTyelVlta+l+NB9VL Y6gpeiqOOY3e0eQj2rhuQbhxQUNlHONfkYbAlLQs8rDZd8MvS/HTA+U85zKPWTPlqylB8jlX Hb2+Izh5uTyfmTTw3Ha+OKUi8LvOg8y9DsTOjjZuOn4zI8Cv5Yk+YYowR/iN8Ac8oxeInqnH W6uYZewKTqgnG6GH38o/zj/Dv8h+TC4RFeviOJ8RfSzjwp1VI75CYHgOXQ7LqCUGnU+EaPtY HjVFu5+zid0Ub9ty3EKyNmEsh/82/QvWxKYMulUeN2WuONSeAutQmc55Kd1QwjCDuFPYLFKs rFBeV1YS+UOueuA5rvryGZyHDn2fG+ehhRAeruZBBPhgBCRMgInFpA4+i3zBr5FQjJ9FL3al pB0sFRYRdxodQxMfiOkh7sf2kFzlqPLOk08pb9FNuj042AXWMPAca798DstfJXTRpNRzzchr +pXS2/ISn3qaeq76fvUu9etqDDqIIKSLhqR80ZU0SixKahQ7ROpBVogrk5IsyaVJPaqNmm2a iEZITdVKSYxLq/UZNRq1IDJOSfIZVSpaTFKbtBqVJIgqcDKBFKc+OVU0o1DrkjRaxHcf3lBj LmtTfinZuk3mJxLSvRy3wM5aL+PajyZb3Aoh5JVNZ6Nn0eHGd8MQDoLY8wh+y82rnh82CD4t 012O4BUG4PZFadlo4kugxNAVs4/s9frH2215nLKEjPriAxJUehfecii7oICse5Vh1EbDQi13 w+UzrHfgFeX4/YQVUqm+xlPPF1/fODO54msw0E/CAJ6vHNE5lOuUamEn7v4QXBnQ/vQPcyFX ycXP1cilM5ff0dwydCdxH8DFH4PtTAh36Y7Bw5jaMe3E+gZhD2zF8lZ+GjyK+aOYT+U+BDd3 I4zEVI/lSsyDzB4wYbkan9mE9XWYbxYdsBbbemg7pjWsA9bhverBvmuwbBdCoMMc10QwHK/H MNhbTLYw6cwcZg9rZ59lP+Pu4i7z0/jPhGbhuKCI94lPS+3Sb1WMqlO1R12oXqX+k6ZYs0RL oaDzdWGcxsJCjLAYXA/R9ROIn6hTcE1F7xKMvWiOgNAxx08fO2Ncc15D98Ll3cvmz+7Kr75+ 4RzqI+J/MfoV1d/6c2EjRpqQjTFaANc9RTAMSjCKK8PvwurwC6wGGAvj8Eu1Cbima8bvsVpg Mn7jNQ2m45dZbfilINIUgZa8CDRgGo1pOCZ/3l5JfpbcA6kdF2UVcXKgcb5l++I5UoCe/1z8 N0wKZG0SqGavr3DOXr++IbdKhXvkZWg4nKQWvPG8ps/7pDNCRvd5PZiNSmRMX5kDayCryrzO aNks5+WyiETkNOe33l85L2H6xlvp/Npb5HwV+71SVu88WYX3+5wn/BEGs+PeCEfkZOeL3lud fyjLdT5dNtLZ58O2PufeKsz2O3eV3ep8dEO85RF/PHvYGyHb+5wP0Wy/80F8/5b18Rv3Jx5c l8iWbIgPdP2+eLZ4X4R5cr9zkTfbOQsfJLLG2eFd6Gz3hpxTqiIkq8/ZRB/b7xzvO+lspEP3 OeXEQKWJt5d44xQXJ4YNeA86cxIjZNLecorT5R3vdOD7Aw9tcQa81zqr/BGy+5mGHL+3wbel NEIuxsegGRJKs8WJbLbvEHkceZtLZuDxxAP7GnKRZnJPn3M9Ztv3NeSUZUXYT2Sjc5+vwbcB UymmLExTI2SKHBC3inPEqeIwMU/MFbNxRzZDTBNTJaOkl3SSVlJLEu7G43pLAik1EvuznEdl NVXA703RK3D0l4uX9SibJC6gKMZ4YMKgoEUEuM28vNJaaRxtCNXV/I2fznhjZ03eX//QgQ/9 WYkjvAU/AAnvcbSFi2kh5mgbuvv/K3RX4/ONLSv3taw8Py3+DZGntrsTPyUKb16On3qtneVy 7T2/kt6gX7N0zpo9j+Zd3eGVnu6a8HlPjWtvS/y5H92eRm+3eGr2wrTaKa17p8ndNX0tcgv9 RqhtX3NtAxpsHOTKWJuGxmqo/Rtj1dKXNdCxmuPP/WisCfR2Mx1rAh1rAh2rWW6Oj5WXVzt/ cjX8D8Wem3RlbmRzdHJlYW0KZW5kb2JqCjcxIDAgb2JqCjw8Ci9MZW5ndGggNzggMCBSCi9M ZW5ndGgxIDExNzUyCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ab16C3hTVbb/ 2ueZnCRtkjbPNk3SpE2bpk/6CpT2tPRJKZTyarGVFigWBC3KgMjgIKiFouNjRBAZHyNeFHUM xYEg4p/LxUFF5qo4gyKK3kF8YGXGW0UtOfmvc1Iq+Pfz8/v+801Pd/bz7L3Ob629HvscIACg hTVAgzhvSVcv2UglYsvrmF6bt3yZ65rKTBGAbAGg71jQe82SN7o/2Q7AugCEhGsWr1yw7H0S AogvBLAxPd1d8/8x/cB5gIxSvL+4BxvUd/CZWO/FurdnybKbHh7Q3ov1+7F+5+Lr53V1Tbzm DEAmzgf1S7pu6lX1CRex3oN113VdS7r/9NnwEayvx7qv9/obl9FLmFVYxzWhp/eG7t5Iy4YF AH4r0vff2Ebwkv+0wMFLmLtg9kiL0nzFD4U1+oqWKysMVlmliQMeVFhSKzVB+QXQKLkWdJjH QTzoR9r/38yATUZIgEQwgRnLFmWIFWxghyRIxpoDUsCJ1Mp/bkjFhQ+CgT0E2exmcDBV2A/R k5jek3NpWvQ8+wYI0Uh0kEbkCY4nqaeHSSI8h5TuhVuAgbdgJ1GDBwZJAbxLHMQP74AE78H/ 4Job4VH8rYFPyTf4TJ+RDBxTDGvhYXgk2gu9UIHXp4RFakvhs+iq6CvR76AK+uEw4UkCcUT3 QS704bUVthEtNTe6C6wwCVbAGpzjVTgZHYh+jvMXw8fEQHKZcdH3gUIk7RCEDbAT9hI38RA/ uSr6MbZbkcZ22Bltii7H+87jqFyYDKtwtY+Ik6STLLKVfEAPRtdEf4vPlox9M2AeXkvgVtgC 2+BZZdRcJpk14fzV0Ih9v0X5/RS+QmHIJFXkJuqv9Of0P5hxzNboYaRjBq7XCY8QGlHxkhlk Puklz5LnyX+Rb6gSqosO0n9lepnHkLYZsB4egwNwBI7D+3AOBuF7iBAGaSonU8gq8nu873+o MVQHtZq6kzpJnafz6Q8YntnI3s7ujzLRv0a/R5pTwA/joA6mQit047UAroNfwW/gNsLDZtgF /4XUnobTRCB6kkvySR2ZTq4i15KVcC/ZTl4gp8gZcpZ8htQlUE7KQ+VSy3G9tdQG6llqgNpH DdIGehm9mj5If0B/w5iYDuYgXqfZbHYZl8w18lOl+6XT0ezoPdGtyBczXl7IhGwoJwyiuARu Q05uQMy2wXZ4Gv4IAzAQHSZBOAxvIl0fwXm4gBxLxstNCkgpaSZTkcLFZAn5DdmCFO4ke5DK /WQ/nCAnyDBeEtgoNZVNXUV1USvx2gpbqOMKPlraTWfQ2XQjPS36T/pZehf9FZPGzGaWMquY fmYL8wibzI5nZ7Gz2V52E7uHPcr+jT3PDnEOro/bzj3PHedVfCG/hZdIKtLiImnwPO7ztfAA 3Yt1L0wgtyFXZ8LrKL2D8DIMw3dwEHYQB0i0zM306GMQjq5Hbh6AP9G/hjK4l/odNTFaQT9J q0lB9ALOlYf8unSB6M/M8KWneT2pbpczxZGcZLdZLWZTYoLRoI+P02k1glrFcyxDUwQCNZ7a TlcovTPEpHvq67PluqcLG7oua+gMubCp9soxIZd8Xxd2XTFSxJELfjRSjI0UR0cSvasMyrID rhqPK3Ss2uMKk9lTW7F8V7WnzRUaVMpNSvkepazDstuNN7hqrD3VrhDpdNWEapf39Nd0VmcH yD4RdZCQHYB9ACJo5IlDMKFrdY8VM3lETcjuqa4J2TxYxj46raZrfqh5amtNdZLb3ZYdCJEJ 8zxzQ+CpCsVnjdwu3+fCoS2tuHZ2YGEI6YeN2vme+RvDIsztlEtd7a0huqstRHXKaxiyQhZP dchy88fWH6qXSjV3XtYZotJqu7r7a0Ni50YEXa52yrWuO7HWOM2F01K3t7WGyO1InEyEQnvs Kbo9NXJL5yJXSO2p8vT0L+pEzKG5dcAu2ms8ndVtIWhpHbCJNqWSHdhnvWWcG0HZl12ZXSnn 49zWW2L5J+ti7W8dlHPrLYc/xLyxZRQXIq/kaUAyQ655uAhigbSWyj/dpdA/rxThw782gk+5 EOmZEKJQlOi0EJvW0BVaM22EjK6e6hHiFlUPqG32GnyGzqo2HN/Zrx+LDMTxeo+r/2tAznoG v7iypWukhUvTfw1yp8z/UREKka5L5eUKMDWerh6rp0dm33KF1Vj3WGsua8A6DqrODoM/0BgG dXPrLkJ+2xYm0dvDUO3YhwaGnnM1dmfJArewGpfDSiCADX43lpCCWnzIWlkyXP2u/ob5/a5a Vw+KFJOm5NjR3d+Wi4BNa0VYYHqrOyS2JY0Wu9vaxuI8OfI8eAsO72/DGRaNzIC50pQbwUG5 gUZkQnpz69TW0JrqpJBY3YagoxAfbG4NHUT5bWvDUXmjlCLFqxdaR2jOR5rz/NhfEJtlGs6B U7T198tzTmv1uEMH+/uT+uVdF6uHCfy4QRxpCIM8BB+8JkzWNOO9mHncSXKDx+1xI1ltMqZj UIAvCVAYCn8e4aJRuvHOYqS2SEG45F+EcOkvQTj4ixAeO0rpFQiPQ5rHygiX/fsQHn8FwuU/ j3DFKN1IpIjUVigIV/6LEK76JQhP+EUIV49SegXCNUhztYxw7b8P4borEK7/eYQbRulGIici tQ0Kwo3/IoQn/RKEm34RwpNHKb0C4SlI82QZ4eZ/H8JTr0C45ecRnjZKNxI5HamdpiA841+E 8MxfgvCsX4Rw6yilVyDchjS3ygjP/vchfNVlCANGBlsxQhuP8RmN/n256GY5B/p/DO+gQWAZ B01TdjXHOwjYVOqd7sVl1qysyUNlTZGyyfpvypr0kTKoKIuUySk/b4zBbfBh2so8Hr54jD30 fXmYaRn+IzphGLkul55A/9qPMeY40QlfCipGt5TNYIR4i8WuFujZXC8wtrj4XvdvRtcYDAYn 13RXn22CisEhQzA4mJ9nKSclHlwikePjiGf5zKncs6TQm190d9Kgtbeb+CWp+v7iseNwvTW4 6HO4Hg3pYgLJoAUWFyK9GNyzo2s0RZT5oaIJp05wG9xrSK70Js7ytxjNlugHzC7maozA54mF NHrGTKqRZTmaohkq1UgITs4yFE0YjgWK7OcYej+rIXYV2HjVTvc1dTJYZ/RnbVBhbYoEg/iP T0EMljJjkOnLyVKt1r+MuVUpIAHEoMYw08JsvbiXbhheQD1MDkqfSSekv0mfk4Myhj/Qc60Y rOfIT5GEDjxhKA6DfEqmaz9Q9H6iAbuK+nmijEGj5aeogg4kSqaL2TW8gJ54cQ+zlTwsicSM cW8msUjlCAJG7uyTKEMUCHiWcEq8tociPjZDKOVK1PVcj3CTsJ5Zz22lNzFbuJ30E8yTXJiE hVfIK8I79DuCifAcR4FKrcYfgfAslSgIaUasJrJsmhH7eJUfD0MoQYMs4FBYWJVGh9zUCPiA YZI4oKYpzPYINm33r26wZi2frB/6AXCbwmNrLlRYypoqyhD7YC6KK4sMWK1vRPeJOZgUYg63 yYyINdDYQB9uM+BI/O/Tl5XxmPLzSAd0ELcGg0c3Bn9uQuWS5eGnSTslSANzIh8tkF6iXsBY sZpM/b5cFiRlVz2G2HRhSY1nJpnQJgaeYnbwO4z0CnOfmUoW/IT4wJ9Bafw+VbKeLbZO0Zc4 7VmgSfPZ/FkvkhQ8RGlBMVb2XWzbNQ0ODRqDuCcqIsZgbiQ4QpjBXVBcVOhL9xAslShFH8gB Hs/xKUTJcMugkJMjZFHXyuaaa6UXsVA8d05RJ6ldWl2dPnHpjVX+irr/XBqZT73OHJL2N3Rc 47ZEjkgr7Hnrb8yyErrowavX9bXkpGcO/GZdT01ucQY+GHK9PXqCXcWeV05+lomZs4T7+ftV 9FVUW1KrYwGzgmxgn0ocYPYKf2aOaE5S7yW+bz2d9K1VbwkTjeixq1R2baWTpo2VdrXTXGJR lThTeLs7viTF5nI/6H52ZuzZB1HjNBmCg28PIisHK8oQg1w97luZK8aSYrfLYra40/H5UylT onkMQlDi5sDt8qUbSPt/P48Cu+yZObz0ekru9CeePHTs4T/MyHWS/AxprxSVDu3ZQ93DzHpz z9CG/kXFndI/v/32wqLgDf+U3nr9GOmm7bj3nkA+Uvi4GsgNQ33WC6gU1NCYFQZOHwbyBryA +lOFDS/gCFByGs+uGrPy8glifuliPrg4RL0eKaTzhh9ngswB6UgUpNulCzKOZFQXa6BIRNGg aZaiNCoVq0rj7TpKkwY2re6gu2Xl5cKgaOCKMhSEmAK+tNRWkk+JpED6S+QgeyjyF6rg+3Lq vsh1SBvB8xFgduKSLGSK8UBRlayKtvMUzs/xYZK8293y9MgSk/VnUTtGKmLq0eDeRgqpk8Nf sYeG66QLOBcN3cj7z5H3GuX8r1L0mbVmoy3RZt9sZ9nKZAutqYxXJ1MlyQlJ9hRVSYLNkXLa fe5HPB3haH4edHiNRYWUwkPjGC/PKfzTx9hrIPTpEyf27j15ci916PQO6bB0eMeHH+4gZaRs x+lI+SkS9923JF766rvvpK9uPv7MM8fJXWTT0WeeOSpdS2tlOX0ceajB51bhCWa5mLyZbOYo rZ9h4mh/PBWnQursJlqXFmdLNIWJA2EYIVOxdk2DUFEhC11M5tLlrYQ7Dhi5gEXGRJ9cuUTC s74lK0m+9O3X0hHpL9TaD4iK6ZwrTV50oxR5J/Ile+gMniqP0LIUaRHwhKZV9Ls8SVYT60tI R4XgAH8m5XOoHK7UBM6SypVYkmbp7QHwpWXYsgJhkvJjys4cjhxGbYXGBa2xQmMkaLDIimFU FXiKzRZZC8i6wEESca+Y5M2SS3IUnYBa4Q3S0VPY3lYw/70dY/NKF928YIZKG5CejeO0hKLm rZcOScep46gVlln9v74jxx6prS5dP2vhUX/m5ofmdXuDSWn5KeWVG+66OvISPhWeOEZPsnEo Fzl4Cvq4uEgVz7v5dJvGFm9xW9IXaLt1C1M/ztZk6jNNGfZ031hTqX2f6TXTKdNbgXMJ58zf JXxv/i47Pg4MmlSrM82iSkuN0zDWnLezrG8nV+Ym0kxlljrX+kCuwTJF9UCGPd9ZbJgFxTm2 vHwFn1GlMaSoDdl9uKQ2BvWDiA2R8ULtjmlEf5otitKQVWguQWiKCgGZOqJSOBNC5iQ4xpSI OgWKCFkVl9m4Z0n1raK4YdvZ1k3ERSyfkQaV9I5qcf21K35bm/07aceM26Sj0lnpQ2kPNZUc 6S64ypqzuiHDl+IpHL/g3T8T7sK520vTOmdO8dk94zMm9Lz8mvQ14c8yGbhH3bhHjyKSPJSK WsL5eYpRqdHoQZi0DlBpaPdaRTWHXtlBt2zz0CtrGorE/Bn0lypkfwy5r1zMUalOek2qYQ9J w8MTmAN4okjDOPRtSpk5eN4fhLFwtzhlHFVUvJJsIMw7KST9f8/6P/HE6Vg87U6wZ+GZIZOe k57jlxuYJE1qkjkw1sn7BU2gQDM2oQmacsYW+cvT7WX2pqRsVVORbVzZi8SGz1BP/jhiutBo yQr8jCF47OOPlf2OTuMxxN8iG1lkh0UpZ41wI47EE45H2JEpxSW+YtmgoWpHW+bGsrsAGWFI RIlGMc4hPhzpSUWOoc5PoD5IKskTZ/uqpo5tf4h+dkrq+I7Z3f4UQRpU1y0lCbs3bqTo5GTp NZ1Aj2tqX3b/fz4044leymgwqbV6i6+loXLx3eeFeHvJhDEFaRV3t99TV/eypC2cWJqh87vH ponZRU899OrsfBN5G7cxynld9CRTiDjK7z2uE2seND9ppvqSSYOp1dhjvElYaQybjiS8YlJZ KY5xvMV4U+y8OU7Q6vdqvYmaFH1xvBOKUywOu0tVbLE5XX3u+slX2LvIkCK4g7i5g2j0lFzG aCn6Ioq1k0GSRVc2d7K+pIr0MAYFl9B6lTuv+56i5OQxd82friYeYfod0ncS6kjjP48R1iol UfvH51fdPemWmxrWL565dtl+UvodsZHS8Gdku/JsFSgj3exBfB/kgCli4FMtemomB6WnweLV 85zg8AoaE21PcHJO2sfYnfZinS3FucVdX3PZI0SGzuAmk002/htQSck7DjrAbJGFswh9klSQ STbGvJdUhefUzVvziFs6N37bsv8jDRNyYu8t3eUtq3+1YiXTPquJUn0vbu5qJUVfEQsRL97w /N2vzCw8cOfmP6Fc50ZPMWORH2j68e3T02JDraovcTN5EH1FomY5PWtvZGv1Da47yO3xfU6B NtOWBHOCpV41yTzJ0mBvN7dbZttPkfeYzxyfuC649BNJrX49u07PoIu5SRwzJW5O3PVxdFxc EudNdfMWYyBJY6apVLrYsio1pVO7Rktp7V7KGbcpxebxIhQj3IycQenvQP/lzGBuDI5jMRem A+02LO0gSzsAZRu1MSpqvHj3iD5SuIoQGfQwjpA3lsSR/fyqq9afrBMTNFTEzHWNm9ZakmIh Hs3sOy++IR0izo8T6WW/XrT0V+cWXNe1pvGu7VWZBUl5XfMfIVpU9kkkR5Zbgm/EgNrIvolv 8G6tzMUaDQGUZidMQa9lDibc6NhiwZEa5H87vvVTI6ZxaK9s2GrBt1sCjqYxnpPfBKrBh31O tKv34WgbvguzkTjkQCe+IxpRTmcw/Cl7e2gk4qqQY8iKwY6hQVka0BrlEGS8aYxJju48RWPk vTyGKgikW5dm7d8vnXlk27jyQfZNmv6UpotcrrJXL95LX/9q7XNVc5GGKqmKuRp5rkNbkwez RX1/CioU1puXyxu5NJ03M0wqRFeyK2CNz6OcRmeaLy+QYC9Ivi0pW10csOUXXCayMTVlCKLY opaKHKsYDFYgpwyKmfBe0kLKljMio4owFsVdl+r1XWLYeFlvoQNTVGgcU0Id6F933QPBFNfY BzTje0RiqrtZ+o83pW/jSLE2KWfJ1sLUzNwZ698a/uqDqz7f/MRDf7ir8bo5E/vpG2xZN/5+ +Jvj14a3P15g9l1Tta221lNJfBf/lzTSMv8ofM8FZCd7FJ+ex4g6dRJMIu3Qjq/0diHnOF5Q bAXnIzyaiAF3c2xHKoG7HFKjhVCCXjmgQdsvp53SadxxSmLw9ai0YhhfOxN8wwpEju1oSBMT KCBKHA0+gnH06LSjcTT6iZkE53pS+jtx4E14/xoAbhszG9/SHapsghKknKAcUSgzFKRhWojv mxehNK3E/GbMN2Dej/mDmD+I+VOY9mH6BOUwDse7MYqiUdJ04MU5rcpvGmLgxFkdKKUqlMvc EQnl8M2tmsTjHQZogkQspYALR/kwt8meCfHgfM34/jgmo5HDepTHoUunAmVlyPmmmL8QM0so qHiZaLdBDrTQGplQWi8ruk1onMagcbLIOXv3ncEcvUBJpxLTFyzPtkgfJXoX3uy3IMimotxp t61uKneVTmtdzMwurQ1OK1kUmUrtKc+YNLewIbKC2tAVmDIluy3Sy4iPzPCKJWOaO7Oz8fn7 0C/oQlk34zM2itksMZE0UkJaNT0ajhj1nNqLyiOOESxssSWestsMcb54m9X20iURaIocHgmk ULzx4GawIhjzgNCg/sSz+Oj+E9Ipi3/5vcXJ0hmSUJLf2reQad91LJJKbZ6ZM31VZXdkAEmc nlYlCybuRbSH25hu5JYFudMkZlhootKu167X0xadNX6Bjma91kRe443TWK0qqthit6uKDTab PUyW7x5VlzGvzRAcDQzIDXDD0pHtp1gIr+KGoY/mAhOhzt1xx+rVfX2rqRzpC+kTvL4giWjK bCQxcvzVge3bd+3avn1ggfQ0mfGPL8hs6T++oETEcrU0jdmKsqlDqZgoZloSVEKynfK6eDsn eBM0tjiVzqor1ttTOWeS0+qz2dypW9zNlzT6kKzSmwYVba5Yt1HjFhONmFUuMsqq25PqS5eP xmICQi+78daHxqZ0l7WsWO0gainy+tqZudnSWWLIKZyzjnrk0O8m3/RSU3b4QSqI3uN59B/f qvTWRF5hzz9Wl9mAMOMeWotKYJhpR407cR/QpG43Fa/DY5U60ZbA6zit4KLyKJGiTegyUnEa n1aJaebvdjcvuCTrb8cO1zpkXYD67W2Ma2SjjCZoRLBjxFLvaxKS/LpnxrkxttFX5TevYdoJ kU7RVG/FusgFpuqlJRkTZJoo5P17+A68C7LQctwiTlHruXSbjlYzbo2mUWjQ1LmrXfWZJ2iV I9WlFRhzFmO2BwJGnglkaAKBeJPgcpibUnlTNt+UZs/RgqMpPhuasmzZOZd5RfLZh4K77NKj U4Twx4Qkckx/TAl6ru64mnTIrjr6RLI3n6Y487gtr3DmlY2cyHlc6ejLz1OnFN09fV5GhhTd N2nS4InXCUmQ/s7Zcpd2TPH7oztnTP/nRSn6NX4Q0D7JFSwoyLPZxufUVK/Z/O7jr5S4xo71 5ZstpRlTW1b94di7T9K4EdC+Rj+nbmJ7cJ9O3KMPxDu1AcMLZCkwpF0089DOEc6KrInnhhi1 D+5DPlnDJG63u1Nmz9tlZyJlQ2Uyf75EZx5Pq/CsZ+gMBuFF8hmrbCRjfrGJ5zBQMZi2EPuu XamzdI64vtcm5tFLjpI86Y2jkYMT3IT8leWb8hdQj8jyHv2UmYG6Q/5aZ5KYI5jtZr+51DyT 7+Y5Oy8AZ47TCSz6pXad4LNbNfZkUmy1JSX/oDzkfWkMNkXeVjCXPVJU+Yg2+uIINzrpsoyj TyefzqLIFxnSyGNm3w33FeMnF9I5xmWesHr6V9NzyRdMVeT6jtxpy8WF1NThl7ayBQllgT92 7qfudSB2dtRxzQy+sie0uFmFaoTimQTGLtA+ysukc36hmAkKNUyDMINpEzYxDwqPMs8JzzN7 +f3CYeY14S3mPeFj5gJjYWgrw9I+I4VHoayVoVmfEW2zoLYKGrXPyKtUgsYqqDU+I65JGF5g gGPxhFGjRiOi5llOQxNBkA9TKZDPG1VP4QFMt1b3VIxLI8eMsfPFplzrYf1hlEcMZuRAXI7E 0X5gwsCG6PvwjBfPGm9u079s1bN9WatVl9dG+9g+vXwaPNInu8lLSccYNXEnETf+4tkyWSZt Ix17Bsg0aSuWf//iASqDskqHSVlkMHKc1En7kM8mqQ7xm6N8p/Wu2OsTZgoLhE3CduG4wLEC 4bhk3qDL5l268Xy+rpHv4GXrsYJfqdNZ4ot1fer1mi2asIZLTNSqdJRLq/UZNRqB4ymnSuXD c1m5qBNMWsSJ49XgpAIJTn18Im9GjOJ0Gm2YaHdjh4C5qE24T2XrNplHMRtqOmO9iPjIaeRo FhVQ05nIGTS2yuks7miCh7MsHsa23HTzy2NGDmblshy158ain6UdGI4Xl5QTn4IOoeQI0Ed2 ef2T7LYsRuol47/8CE9h+xffciA9J4esfZOiBKNhsZa54eIp2jv8hvTaJkJzifJeVdIXXfXP zYkv+xoM8gdyAC9XjO0czU1SFbcNTzMIerryePkPcy5Twm8CteTCqYvvaW4Z7Yn1A3jYI7CV CqJqDMJyTGuYZ8AiJ2wvxPQYpnZ2Jjwhj2P+Dtu4IHRj/XGsP475DGxzMzfCOEx1WK7APJfa CSYsV+F8GzBt5B0479+hT27DtJp2wFocVzUybjWW7ZjQ38dz+kJYjN9H/Y2kkhCVSt1P/Zn6 nnbRy+kXmQDzOnORfZSL43q4i/xc/pRKr8pTvaPOUN+iPiWkC88I32gmaj7XrlWe0oM+G41z qVDa9Ep8APynQgLGDDE05R0l/3HyupOrKmdWzcqq7168vHvZwnld2VXXL54v2wvlLyp/SfZT fx5spNELNKBv50Y/Lw3SIQNtSy4UwBgoQt+uBL+Sq8Xv0eqhASbid3tT0JebCi0wDb93mwmz 8Cu1q6A9DC14SluPqRxTISZ/1i6V+AK5BxI7hkQ1cTKgcb5j+/IlDI10cFb5DZEcUasD9bx1 Zc5569bVZ1aqSSOUMAScpAa8Sl494H3aGSblA14PZuNjGTVQ4sAaiOoSrzNSMtd5sSSsImKS 81vv75wXMH3jrXB+7c13vonj3iipcx6rxP4B51F/mMLsNW+YIWK88xXvrc4/lWQ6ny8Z5xzw YduAc1clZnuc20tudT5+m9LyB7+SPeYNk60DzkflbI/zEZz/gXVKx6bYjWtjWe9tykLX71ay 63aHqaf3OJd4051z8UYiapwd3sXOdm/QOb0yTNIGnE3ybXuck3zHnI3y0gNOMbZQcWz2Iq9C cUFs2YB3vzMjtkKqPFpMcLq8k5wOnD/w6APOgPdqZ6U/TJ7cW5/h99b7HigOkyFlDTlDQuXs ulg2z3eA7ECuZpLZkEYe3F2fiTSTewac6zDburs+oyQtTH8qGp27ffW+2zAVY0rDNCNMposB fjM/n5/Bj+Gz+Ew+HU8dU/gkPlFlRHmOU2lVgkql4lSMilKBKjEc/VDMkndyIoffvGJgwsi/ jFLWo3wSRUhRlCmCNmAihDm43by8wlphLDcEa6t/4qdTaeyszvrhDw366J+VOEIP4IcwoZ2O tlCBXIg62kZ7//8K3VV4f2PLyt0tK8/NVL6l8tR0d+InVaGNy/GTtzVzXa5d51bKHfJXPZ1z 5/XIeVd3aKWnuzp0zlPt2tWi3Pej7plyd4unehfMrJneumum2F090CK2yN9Kte1urqlHNwUX ubTWhtG16mt+Yq0aebJ6ea1m5b4frTVZ7m6W15osrzVZXqtZbFbWysqqWTitCv4vGH/jNmVu ZHN0cmVhbQplbmRvYmoKNzIgMCBvYmoKPDwKL0xlbmd0aCA3OSAwIFIKL0xlbmd0aDEgNTA3 MgovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAG9WAtwVNUZ/v/72EcIsuGhm4T1 7nI3713DSwIkJjdhNwQDMdkQ3OWhu0kWE5pArDSVUhAhqCzWwbEizdAilRktFnuzQdzIaDMK o60y9TFW6wu1PlBM0zo8qiG5/c/dsBKGYTJThnvm3P/8//kf3/3OSXJOAAEgGTYBD0pDa6gN TFBIltepWxva19rvKM1RaPw5AH/fyrY7Wt8If7UPQGgBSJpwR8u6ldPL++8EuGYT+exrCoca +7P/TONxTtJnNZHBfJ/RRPpy0p1NrWvvTroL/kk6+YCpZU1DCHwwk/QHSDe0hu5uM4WTzpG+ g3T76lBr+Nlvk46SrpKe1bbmrrVaM4RJf4/0zLafhtsGfdtWAlhI5f9GL6TGnmQwUAdwMIvY CyniS+AWHwObUAY2AO196h8wOVSr9YtvQJI2qPXxhASnsH58ACfCn8AIz8FGEOAt2I9mkKEP p8M/0Ia58B4MwQfwGaTBdnic3l44gWfADF9jNvnMgs3wO9ijtUEblFA7gSJMgtnwtbZee1X7 HsogAkfQiBPQpvVAPtxPrRN2YzJXr3WBFRbCz2lFNsNf4H0tqn1D+WfBF5iC+UKh9hFwIJJl DmyD/fAcOlDGXFymfUF2K2FcDvu1RVo7xfWTVz5UwXqq9ilKmIl52Ikf833aJu0h+rbJNFcH DdRa4V7YBbvhgO5VL0wWJ1F+D1TS3EO0F07Ad0RjDpbh3dw7/Df8v4VCoVM7QjjqqF4Q9iBP rDixDhuxDQ/gQXwZz3AFXIifw78jtAl7CVsdPAB74QV4Bd6Gj+Ak9MEPMIgCYSrGW3A9/pbi PuNmcCu4DdyD3PtcPz+N/1gwCtvFreJhTdDe0X4gzNdDLu3P+VADftoHYVgJq+FncA90oBEe gy54mdAeh+OYhBbMx2k4HxfjMvwJroOHcR8+jx/i5/glfk3oJnASJ3P5XDvV28xt4w5wUa6H 6+NT+LX8Br6X/5g/I0wSVgi91I6LbnGtYbKh0lgz9Ouh45pb26F10rpcS80JOeCGYhSIxVbo oJXcRpzthn3wNDwDUYhqAzgHjsCbhOtT6IeztGKTqTlwOs7GaqwhhC3YivfgLkK4Hw8RysN4 GN7Fd3GA2hCkcmbOzS3jQtw6ap2wi3tb5yeZd/DZvJuv5Gu1//AH+C7+OyFDWCrcKawXIsIu YY84WbxJvFVcKraJj4qHxNfEv4v94imDzXC/YZ/hoOFto8k407jLOIRTCIsdM+AgvEi7biff RroT5mEHreoSeJ12bx8chQH4HnrhSbTBEM9WM1PbCzHtAVrNF+BZ/pdQBA9zj3A3ayX8U7wZ p2tnKddUWq/zDZTcnOyszAynPMVhl663TU5PS7Ved+2kiRPGp1jGXTM2eUyS2WQ0iALPIbi8 cnnQrmYGVSFTrqhwM10OkSF0gSGo2slUPtJHtbO4EE2N8FTIc+VFnkrcU0l4osVeBEVul90r 29VjHtkew6U1fhr/yiMH7GqfPl6kj3fo47E0djgowO61NnnsKgbtXrW8vSniDXrcLuxR6HdQ ktsFPQAKjGGJVZgX2tBkJcE8vGqa7PGqqTKNaY7P8IYa1eoav9eT7nAE3C4V5zXI9SrIZeq4 vOFwFmcnV5+fartdzSrhh+3JjXLj9pgC9UE2Ci33q3wooHJBViMlT71O9qjX/eIL64/q+ZH3 wQsmVS6jPBSOlKtKcDuRztQg00IPklZZa6e03NaAX8WtBI6B0LHHvyIse5kluMqumuUyuSmy KkicQ7U/mqakeeWgJ6CCzx9NVVJ1xe3qsW4sdBApPe5SdymThQ7rxrj8akvc/lYvk9aNRz4h WelL8IKskryAYKr2BipCXBDW2ewVng2RhtlEHz0BpK9sJjzzVI62Ep+hihkLQuqm2mEYoSbP MLhVnqg5Nc1L3xAsC5B/MGKZSwtI/hbZHjkNtLJy37cjLaFhiyHDchrYJFv/xBZSMXR+3K4T 45VDTVa5iS1fu77UpMtW7wUG0snJ445BrqsyBuZqfxfiQ4EYaltj4LH10B8Y/vbbaDqPbbhm D5UjxeUiQ66DRoSgnD6ynO0Me8QeWdAYsZfbm2hLCRm6pIlwJJBPhNX6iRZY7HeoSiA9MQwH AnMpzw0sD4WQeyRAGVYNZyCpm/IHySnfVUmLkFntr/GrmzzpquIJEOm0iXur/Wov7d9AgLym JpAS4g3N1mHM0wjz1Fyanx7PUks5KEUgEmE5a/2yQ+2NRNIj7KcurscQLjYow4YYMBf6cG8M N1VTLAnZkc4MskN2EKwA43QGbeDzGygGMy/P8I0J3BQ5i9DeqDNccIUYnj0ahueMiuG5CaQj GC4kzHMZw0VXj+GbRjBcfHmGSxK4CaRCaEt0hkuvEMNlo2F43qgY9iSQjmDYS5g9jOHyq8fw /BEMV1ye4QUJ3ATyZkK7QGe48goxvHA0DC8aFcNVCaQjGL6FMFcxhquvHsM1Ixj2XZ7h2gRu ArmY0NbqDNddIYaXjIbhW0fFsD+BdATDAcLsZwwvvXoML7uAYaCbQScAnVNfohuoEYoVh2iw 0flPMNp4SBIFG89zaWaD0YaQajLvd7QUWfPyqk4VLRosqrKcKVpkGSyCkqLBItanTZ2R4kjJ ot4pPBE7d0x86YfimOAbeIYOYXQPXIC7hQ5uL9WRFAs3hcc0kUsVBPEPjlXlLKnllOXMIsgf nDYVKYXQMXCU2zs0QIdf/U5J98rmJ7IevX1c0WlIoSstPUdL5gYTcsHwVyD9kY7fQfU4Q85Q Dl1H8eyH5z4YszExw8LYw4mvQKfwR6Bougf76M1iOVhFvYXu4hxdbS10xwLjiaQJdBNlswjj h/MY6FYJSz2lfm9tXkW4pT28trkh5C5b09LIcuiPxm5Jl3qG52Pgy4tBBfVi6jOp5+Z1mZTn cQdMXHFKMaMkwBjpvdR/vYg3wFj4Un+reIOSPBbMDVuKpIYtWypySs1YCQUCgoRecOrSE3U+ LcWwOOqUSdwUF1y0wEYaKOYCpzRYUC+dK4iZUEmX/ut8RDpL/YyzRDrtnCa9SX5vFMyXjpXS fFR6LTfGkfirMyagMk561Xmv9GxBjnSwoFCKZpEtKnWVkjgk7Su4V3qiQ7f8PlcXe50x7IxK jzNxSNpD+Xdu0ScejQdujou2Dr3Qmm5drO6OcU8fklqdmVI9BaIyRlrhbJGWO+dIi0tjmBGV FrGwQ9LCrGNSJSsdlZR4oVnx7Dc6dcTT42VdzsNSdrzCFOatTJDszoWSjfK7Ht8puZy3SaW5 MXzquYrsXGdF1s5ZMTyl12CCgDKxOi4asl7AJ+kGnINLIQN/012RQ5hxR1TaQqKzuyK7ICPG n1DGS91ZFVkd1GdRz6BeF8PFisv4mLHRWGecYcwz5hgzjQ7j9cZ040TTeJPFdI0p2ZRkMpkM JsHEmcA0MaZ9ouSx/TbRQP9gQTAI7C3oYwvtH9Q3GW1JDk0c3AwxA2y9tr3EWjK+OGVOuecS r6BuDHryfnzoJy/xWNGm7qRDmrrfFlCns4FmCyRm/79BuIziK33run3rTi7Rz/myNxyk4766 vZ2uY5vq7fauk+vYBDtxBusbmpgMhdV1ctijnpQ99i6fHnfR9BI27ZM9XbDEu9jftUQJe6I+ xcfO8YHuam9F1Yha2xK1KryXqOVlySpYrWo97qJaVWy6mtWqYrWqWK1qpVqvlZfnba4tg/8B vMJ3zWVuZHN0cmVhbQplbmRvYmoKNzMgMCBvYmoKMjIyCmVuZG9iago3NCAwIG9iago3NDQ5 CmVuZG9iago3NSAwIG9iago4MDIxCmVuZG9iago3NiAwIG9iagoyNzc5CmVuZG9iago3NyAw IG9iago3ODgxCmVuZG9iago3OCAwIG9iago4MDAwCmVuZG9iago3OSAwIG9iagoyNzc5CmVu ZG9iago0MSAwIG9iaiA8PAovVHlwZSAvRW5jb2RpbmcKL0RpZmZlcmVuY2VzIFsgMCAvLm5v dGRlZiAzMi9zcGFjZS9leGNsYW0vcXVvdGVkYmwvbnVtYmVyc2lnbi9kb2xsYXIvcGVyY2Vu dC9hbXBlcnNhbmQvcXVvdGVzaW5nbGUvcGFyZW5sZWZ0L3BhcmVucmlnaHQvYXN0ZXJpc2sv cGx1cy9jb21tYS9oeXBoZW4vcGVyaW9kL3NsYXNoL3plcm8vb25lL3R3by90aHJlZS9mb3Vy L2ZpdmUvc2l4L3NldmVuL2VpZ2h0L25pbmUvY29sb24vc2VtaWNvbG9uL2xlc3MvZXF1YWwv Z3JlYXRlci9xdWVzdGlvbi9hdC9BL0IvQy9EL0UvRi9HL0gvSS9KL0svTC9NL04vTy9QL1Ev Ui9TL1QvVS9WL1cvWC9ZL1ovYnJhY2tldGxlZnQvYmFja3NsYXNoL2JyYWNrZXRyaWdodC9h c2NpaWNpcmN1bS91bmRlcnNjb3JlL2dyYXZlL2EvYi9jL2QvZS9mL2cvaC9pL2ovay9sL20v bi9vL3AvcS9yL3MvdC91L3Yvdy94L3kvei9icmFjZWxlZnQvYmFyL2JyYWNlcmlnaHQvYXNj aWl0aWxkZSAxMjcvLm5vdGRlZiAxMjgvQWRpZXJlc2lzL0FyaW5nL0NjZWRpbGxhL0VhY3V0 ZS9OdGlsZGUvT2RpZXJlc2lzL1VkaWVyZXNpcy9hYWN1dGUvYWdyYXZlL2FjaXJjdW1mbGV4 L2FkaWVyZXNpcy9hdGlsZGUvYXJpbmcvY2NlZGlsbGEvZWFjdXRlL2VncmF2ZS9lY2lyY3Vt ZmxleC9lZGllcmVzaXMvaWFjdXRlL2lncmF2ZS9pY2lyY3VtZmxleC9pZGllcmVzaXMvbnRp bGRlL29hY3V0ZS9vZ3JhdmUvb2NpcmN1bWZsZXgvb2RpZXJlc2lzL290aWxkZS91YWN1dGUv dWdyYXZlL3VjaXJjdW1mbGV4L3VkaWVyZXNpcy9kYWdnZXIvZGVncmVlL2NlbnQvc3Rlcmxp bmcvc2VjdGlvbi9idWxsZXQvcGFyYWdyYXBoL2dlcm1hbmRibHMvcmVnaXN0ZXJlZC9jb3B5 cmlnaHQvdHJhZGVtYXJrL2FjdXRlL2RpZXJlc2lzL25vdGVxdWFsL0FFL09zbGFzaC9pbmZp bml0eS9wbHVzbWludXMvbGVzc2VxdWFsL2dyZWF0ZXJlcXVhbC95ZW4vbXUvcGFydGlhbGRp ZmYvc3VtbWF0aW9uL3Byb2R1Y3QvcGkvaW50ZWdyYWwvb3JkZmVtaW5pbmUvb3JkbWFzY3Vs aW5lL09tZWdhL2FlL29zbGFzaC9xdWVzdGlvbmRvd24vZXhjbGFtZG93bi9sb2dpY2Fsbm90 L3JhZGljYWwvZmxvcmluL2FwcHJveGVxdWFsL0RlbHRhL2d1aWxsZW1vdGxlZnQvZ3VpbGxl bW90cmlnaHQvZWxsaXBzaXMvc3BhY2UvQWdyYXZlL0F0aWxkZS9PdGlsZGUvT0Uvb2UvZW5k YXNoL2VtZGFzaC9xdW90ZWRibGxlZnQvcXVvdGVkYmxyaWdodC9xdW90ZWxlZnQvcXVvdGVy aWdodC9kaXZpZGUvbG96ZW5nZS95ZGllcmVzaXMvWWRpZXJlc2lzL2ZyYWN0aW9uL2N1cnJl bmN5L2d1aWxzaW5nbGxlZnQvZ3VpbHNpbmdscmlnaHQvZmkvZmwvZGFnZ2VyZGJsL3Blcmlv ZGNlbnRlcmVkL3F1b3Rlc2luZ2xiYXNlL3F1b3RlZGJsYmFzZS9wZXJ0aG91c2FuZC9BY2ly Y3VtZmxleC9FY2lyY3VtZmxleC9BYWN1dGUvRWRpZXJlc2lzL0VncmF2ZS9JYWN1dGUvSWNp cmN1bWZsZXgvSWRpZXJlc2lzL0lncmF2ZS9PYWN1dGUvT2NpcmN1bWZsZXgvYXBwbGUvT2dy YXZlL1VhY3V0ZS9VY2lyY3VtZmxleC9VZ3JhdmUvZG90bGVzc2kvY2lyY3VtZmxleC90aWxk ZS9tYWNyb24vYnJldmUvZG90YWNjZW50L3JpbmcvY2VkaWxsYS9odW5nYXJ1bWxhdXQvb2dv bmVrL2Nhcm9uXQo+PiBlbmRvYmoKMzggMCBvYmogPDwKL1R5cGUgL0VuY29kaW5nCi9EaWZm ZXJlbmNlcyBbIDAgLy5ub3RkZWYgMzIvc3BhY2UvZXhjbGFtL3F1b3RlZGJsL251bWJlcnNp Z24vZG9sbGFyL3BlcmNlbnQvYW1wZXJzYW5kL3F1b3Rlc2luZ2xlL3BhcmVubGVmdC9wYXJl bnJpZ2h0L2FzdGVyaXNrL3BsdXMvY29tbWEvaHlwaGVuL3BlcmlvZC9zbGFzaC96ZXJvL29u ZS90d28vdGhyZWUvZm91ci9maXZlL3NpeC9zZXZlbi9laWdodC9uaW5lL2NvbG9uL3NlbWlj b2xvbi9sZXNzL2VxdWFsL2dyZWF0ZXIvcXVlc3Rpb24vYXQvQS9CL0MvRC9FL0YvRy9IL0kv Si9LL0wvTS9OL08vUC9RL1IvUy9UL1UvVi9XL1gvWS9aL2JyYWNrZXRsZWZ0L2JhY2tzbGFz aC9icmFja2V0cmlnaHQvYXNjaWljaXJjdW0vdW5kZXJzY29yZS9ncmF2ZS9hL2IvYy9kL2Uv Zi9nL2gvaS9qL2svbC9tL24vby9wL3Evci9zL3QvdS92L3cveC95L3ovYnJhY2VsZWZ0L2Jh ci9icmFjZXJpZ2h0L2FzY2lpdGlsZGUgMTI3Ly5ub3RkZWYgMTI4L0FkaWVyZXNpcy9Bcmlu Zy9DY2VkaWxsYS9FYWN1dGUvTnRpbGRlL09kaWVyZXNpcy9VZGllcmVzaXMvYWFjdXRlL2Fn cmF2ZS9hY2lyY3VtZmxleC9hZGllcmVzaXMvYXRpbGRlL2FyaW5nL2NjZWRpbGxhL2VhY3V0 ZS9lZ3JhdmUvZWNpcmN1bWZsZXgvZWRpZXJlc2lzL2lhY3V0ZS9pZ3JhdmUvaWNpcmN1bWZs ZXgvaWRpZXJlc2lzL250aWxkZS9vYWN1dGUvb2dyYXZlL29jaXJjdW1mbGV4L29kaWVyZXNp cy9vdGlsZGUvdWFjdXRlL3VncmF2ZS91Y2lyY3VtZmxleC91ZGllcmVzaXMvZGFnZ2VyL2Rl Z3JlZS9jZW50L3N0ZXJsaW5nL3NlY3Rpb24vYnVsbGV0L3BhcmFncmFwaC9nZXJtYW5kYmxz L3JlZ2lzdGVyZWQvY29weXJpZ2h0L3RyYWRlbWFyay9hY3V0ZS9kaWVyZXNpcy9ub3RlcXVh bC9BRS9Pc2xhc2gvaW5maW5pdHkvcGx1c21pbnVzL2xlc3NlcXVhbC9ncmVhdGVyZXF1YWwv eWVuL211L3BhcnRpYWxkaWZmL3N1bW1hdGlvbi9wcm9kdWN0L3BpL2ludGVncmFsL29yZGZl bWluaW5lL29yZG1hc2N1bGluZS9PbWVnYS9hZS9vc2xhc2gvcXVlc3Rpb25kb3duL2V4Y2xh bWRvd24vbG9naWNhbG5vdC9yYWRpY2FsL2Zsb3Jpbi9hcHByb3hlcXVhbC9EZWx0YS9ndWls bGVtb3RsZWZ0L2d1aWxsZW1vdHJpZ2h0L2VsbGlwc2lzL3NwYWNlL0FncmF2ZS9BdGlsZGUv T3RpbGRlL09FL29lL2VuZGFzaC9lbWRhc2gvcXVvdGVkYmxsZWZ0L3F1b3RlZGJscmlnaHQv cXVvdGVsZWZ0L3F1b3RlcmlnaHQvZGl2aWRlL2xvemVuZ2UveWRpZXJlc2lzL1lkaWVyZXNp cy9mcmFjdGlvbi9jdXJyZW5jeS9ndWlsc2luZ2xsZWZ0L2d1aWxzaW5nbHJpZ2h0L2ZpL2Zs L2RhZ2dlcmRibC9wZXJpb2RjZW50ZXJlZC9xdW90ZXNpbmdsYmFzZS9xdW90ZWRibGJhc2Uv cGVydGhvdXNhbmQvQWNpcmN1bWZsZXgvRWNpcmN1bWZsZXgvQWFjdXRlL0VkaWVyZXNpcy9F Z3JhdmUvSWFjdXRlL0ljaXJjdW1mbGV4L0lkaWVyZXNpcy9JZ3JhdmUvT2FjdXRlL09jaXJj dW1mbGV4L2FwcGxlL09ncmF2ZS9VYWN1dGUvVWNpcmN1bWZsZXgvVWdyYXZlL2RvdGxlc3Np L2NpcmN1bWZsZXgvdGlsZGUvbWFjcm9uL2JyZXZlL2RvdGFjY2VudC9yaW5nL2NlZGlsbGEv aHVuZ2FydW1sYXV0L29nb25lay9jYXJvbl0KPj4gZW5kb2JqCjIxIDAgb2JqIDw8Ci9Gb250 IDw8IC9GMzUgNiAwIFIgL0Y0MCAxOCAwIFIgL0Y0NiAyNiAwIFIgL0YzNiA5IDAgUiA+Pgov WE9iamVjdCA8PCAvSW0xIDIwIDAgUiA+PgovUHJvY1NldCBbIC9QREYgL1RleHQgXQo+PiBl bmRvYmoKODIgMCBvYmogPDwKL0xlbmd0aCA1Mzk4ICAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVj b2RlCj4+CnN0cmVhbQp42uU8a4/cNpLf/Sv6Yw/g1opPUb5PuWy8FyPn7K29uAVy/qCRNNM6 q6WOpPZk8uuvikXq1VLPLqLFOVgMME0WX8VivUixuPt5x0UgQ6bULoQ/HgZGMcVtJj29YjbB diqIRCQJtvt5FwYyjmOzg4TROmS73aFPDWVUPQxitXvc2Z8/9R0exj3++8dXf3gr1C4OYs31 7uPDjrFAK2Wg+GP20/6Pd58+vrM1oiCOYBCoEQU6ZsxV+MvdQfP9N/Cf7d/a9Eds8uq7j/2A kgVSiMjhhAiNsREKutPCTfC/ltEcwVUYMMbiXcQX+5OxWhlISUUtD64pzV3jjGMFhIep9Z2z MAhFJOwUxd2BhWG4//DcdvmpvTtwFe7/WmV5Q8mPdzHf523Xk2pCTNv1gesgNqG2/X085ncH qfW+9R1KrfaXNs8I/FA3lOiootq//+7jtz++f0vQourypj7nTXJflEX3jMPuDv1I/WxgpA6w KqpHQFOofVqfzk3R5pT7tmjTmpLMhJxS2PUdU/vHJukQGy4Aybz5UqR5SzWa+gKjt68xZ/bv Lgc7euiHZXbYqjgTbcT+nRZhiEk5bgq5pMooYSeJVT/emXCfFOXhgfLf1tXDH6lOWz90T3cM ihtX2dIIi9K6muFAU/+fMOSPF5hHUVdQMwr3p6RKHvNTXnXB3UFEjNaBQ8KPBJVmIwGkaOk3 qaiyJdAvXV61xeLA9yU2jON9lt9xtf+C1fOyPuPAMC7wUVfX5eeio1rdMXHgpCxrbPHUUgkw ROOSXe2qZBkBKtv3E0FhYReX4VxXMCZ0Ibje3z/jL7RpCmIJBCb0AzSckguB7TlPCwSnPVAR 2Ucts6RLlohwqrO8hCrG0EILE+/LOsloZIDaVcfEY17ljtuwUn3/v3naTVqafZse81NCFRCj ErhxYVDiCRE6lhLMsjwRAZc8FKChYDVm1WDRk8+45K5R/UBQoEpbgIBWKTZ6vgM5tGwv90+u XZM/WD6HRrBCCytAI8iBw+QVh0Fh0lJJX3siCdjE6gk7hcgVEpdBXUZV7psiB9KIZ4Jm+SJv tmlT3FtRjrgbziaa3EnCuUw6IOOJCkhGx1U/fPgPqthezue66QhqKXbd4xICpPFwKpI7AdQD ebQTNwAVVduBRFgtpEOHimYjXs0dBIUDqzSXigC1+02WluSHorr8Qnr7b9+9p8SXoukuSUmZ U5IeiyqnzE/xp2BuzryNUCIKBOdsydhwGBFtJNhmERuFVX5+9dOncJdB1XevHPQJMtBZHPMd 2PuYB1wbDyhffXg1MoYWKgZirnZIrcPdySd9i1mHEYDBwoFZ5BLMlZFjizgYsCiGnpXeKW4C BZ4KkpDs4JwsjIGJ4xKrDh3+Nhz7Ll9AksFKRKGOJlj+GVkZtSSy8xzXWAchi+ItcfVdvoAr Dzn0I6e4klgBv31wYjXDl2sZsIhFm+LLg1CbaDMWRTkDpudfN7ODX6c55yvMboLQhGqnmAx4 aIxdm3eo/S/k0qyy/KjbzVj+CtWJYwmMYOI4muH61/c/fnA6zfodzZ1Se9S2YG/iIFyXg+0m MMjBzQnwELYRSk7xv0aaBeoP/BrxQSA2RHxjgZixMduQjWVscFy9zMZGIG2AjUMGW0pnee0m hXyKNS4e97oVF19jOuViQDVkcopq7/gvcTEPVMBX+XjDKfR8fHsKnAE+lpHHU1jCe52Jt8T6 n8vEW+piaVQQMxmvMDFHYwL7eRMHQFqyk7RpXeXfUYeb8e8VklP+jQNjZkh+v66CGQ/kOu9u h/7AuzfR73l3gv8/yLsbYr0170bgaoWCqKCYHjwyOfEewSOLYsN3Ukcwp15f2m0WbtTsVisy YIvodzgHgszFnQNBsnNnQFebBexaBWFk+PLBFNU5jCtdL5ZG6kTAaxISoZBjLBFD3N5y/JH7 c5O3bucPQNpqQ6I/RcJMmpzp/KjIW2qVVFV9qVLYVi0dKNHuCU8RZOz6xMRwhAUZRwtbAWgR 4LmZiN15Vzw94RkauzR5vosbe9gH3h1guzVDGiF0GpPm5w7zdK5gj+FkODmGk0EURdydWb6B rSXs+M4LB3YKbSf3p5/9eHb3j/OBQjsfIhEwTKymuLpzNRFpd34BiXfOfYSMGiiGJf02GjMP dKhDFfV8hVyHC1va5HxOGljvEhZHabc4mHC4KM33xelc2rMvd5iDxQ/2FOKOo6aCf/UFj5uw IKGfrMDTw7RbIOh8W79KTwmWLQZxI3ricVHb1XjwoaXZPx2L0iYjwhlhPa0QOsPaEt33OD36 WZoKV+4MYIa8MIEJw2GNq6wAxPIlbtAwVs82I+yx66eiO1IqrU8ne56n/EEFAJu6LO+T9DNh HYNox2a6bm7xUauAb/Y9rAqLIzzjK2iNMIeHG/YX6QN6fcYVWFTiIVVG6cI1G+kFbMTx4Co0 +zxJj+vHMn4CpAbcOXc7OsVs/BnJuanPTZHDqj8TYIxVsKIDhQBnXjC9pAPDwHDU1H+/5udC BjoEz+SG28I3dFtgEhHMYAcGMQYVEa25LcCdJlI7wcGoaOnclkGNzI1/FEJ9aXbjXn+jGfVd voApi3QgNSzHBNUbu130FkSo9Ia49l2+gCvnLJCGyymu61sajiwn5aao+i5fQhV0hoB5zThg yXHl4JYIycWWWIJUSLadHP1Dhzr/fyIZysAIcEZ7/26s7kH1wjqA/gkN0MbQN70390mbr0hj tBt3uIk0RgtI8mgsjaA4jBTICyqQMaPzkPO6DG6G4UgGb2LIuQEfSvCXMOxFbzsMB9G7jaEW 4MijRruNYS9222G4sdjNZIVtKCvgagQyMmxZVhTsZ2PYgnHcQYIHRrKC3wzRmTg0l6rCT3hr cjPu/DfhK8Fd4mFMX/K34u+rqa/wdwh7AGHYC/y92VxH/P0Chj1/38bQ8/eGGP5z+XtLW8AN VORSLvO3sY4mBxoBKRkR8M1kB7DM16NOt7IHV4gu2wMew8yMcyPW7cF2GI7k5SaGvby8gGEv L1thKBSURtEmuuF3xNc6AnKH0Qt6O2KBUO7e0pu0rh6K5pRnB7dDXeXvUeeb8fcc4RX+jsAr A9fsJf7eDMMRf9/EcODv2xj2/L0Vhr8f/t7UL1Hgs7FozS/RQRzGMVA7xsNP55f4I5ZDXR3y pqmbdQYf9f4VOibzua8woganLIpedEy2muu/qKKVAlxfseZAiMDA8nOpA00W782XpHzBexj1 uJl2nWO5ol0V+DlcvOg9bIbhiKlvYjgw9W0Me6beCsN/UaYWkArjFe/BaNhXRGaH6HG8iz3/ SLLM1qM+vxKdKnBDv41yHvZkc9It78m4BM9Lxy+dOWxGtN8V9zEDXqleOZ4DRaCEPeKNJacb 8m8uTbnOd0Nvm2nTGYIrypSD88E0e0mZboXfSJfewm9Qpbfx61XpZvgNMnITv15EbuPXi8hm +P2OvN8QXLuQrzgdMYcFVnIHSjJQJiYR+eWcdMd1IRl1+BU6vPPprjA0Ay9L8xd9g63m+jX7 BkCSOMS7BiAcki1eJGESNKhci36KgtAo/AJtooBrHi1fhvG3TPpaC3dhBJd7HlBAyHCnBICz GwsAoU/c+PF5TyEe0OQev9A/L32GdvEDZrgj8ffesGHxjoGa4RK8mNUrNhj6Na61fseGyRAl zozCtfDex/j6ig+PwER/ZwEz0zsLLQEvbe7b0O/oq3rV3bhwkzXFqCaGTbD9OWna/n6WMtJi aENUbHFW029Vd5SgaJPC5SiEBxJ0L0jy/UOTnCgwB6DpMWmStKPPv1f3BPKfL3mV2nYhRSVJ DINpz7W96zICJr4MWtirQMq4iCsE+1syfXALpbN6ObKHphJiMJqtGioXEqX3R3frA+njSui+ k57R2JZdkROqOXLatKUN1EvceGWetK5p4UDXOLIBR7B1dBkGk3gRq07ztqUQPChy1Gip9FJ1 RUkFxPkA69cCocNa2LJ2OajHLwnewzgm7trGfY7Tw1STp/lo0tnV9QweR4EGjWImkSxXIuSr HUafJybCIzCCFc8dJsGTtOSgCoZLUJCZX0dCvVA4neHumjxTrsyrgkL2lOBD/BY2oLtfiQt+ W5YfGOY13a+xF3SMDRjsiupi77eY2RJBfrRERkxYiMqLB/qlFcP+ysKyF6Zv86/AJbRyItTi xSSwtTKM/MWkY44BgdeXkgRoMGb8paQTIJ885tS9pYzwIiAG5DBtkbMph47CyePcvhSZu9EW mQBHmQr9hb7+4R00sf/bf/5AiSqBoc9J6uDuspvwCB0Kl0+6rimszr90eDnooKO4v0I3k6Ge R7hUVzyCsP6WoM0l9FMmzR3DSELKVpfTve/DRqbJfgkzIBAgshwb18c7Ypit2dsIW6vCAedY K3tBCwv8BS3gK8WF5SsENznaqZYyLnI3Bmh3aao8WxqRSBkLy5K0TJDBK1z4iwoU2LZr8vzQ ds0lhY5yKnIxo1i5pd8mLwHXUbzpM8FBfbnUcoBikyeWH5lbPxGSngOAD8xsCUzIUkzlyV0u xdqVgyYt1aT4SSyiO3kd3hlDcL5O+qZGugkmQW092Pt1AiaRljWJJRYQRzMrvlWeIv1RJYRy /41rmvTl3kq9poG742Io4sBrIbvmNYS19DvoI8wRRTFl4w5DJFRHCWvkMUGBqARpXC9Px8UF KItx6KntEtQcmJ2mItCxdpG+CO+OQJCWCqxVr5vPVIKXEetLR0UXp86wRV2XrkENhGh8P0m1 eNHW3flLYeHTo7vrl2STm42hr5VeulnBGYylM0Qu+LlIc2tvhkB4Bi5WLEe2gYMfMw39Vr7H IUpdqWu/ylaky5h6f7oQvqANQP9QqqvLW6YBuBtlToI6ejrm1i8zE3OAJUV1vrhKVmtiHWRM K2EIfah92Hbf5i9vv10irowkszzLxg4bcm7Z1pQibYFpr2gBaGOsbapwRT2rn0D/dpQBhq8x vPr1Yjh2URWn4leSJn+bFLYg+xxUZZZZzxzAT8eiA2XjlDreRa0y3+DSUosmzy6puwMyZ+bB FsFytsWvpO7jeP/fdxIVC3EoFp7tAwaUtiwKsgq7GlI+hqKAqV7edc+UzgobzmlV9KXs1iPA wVU6Xk5J5dwsig8WTtdZiPe2yHNtLZ5CMaviradVn1wNq9fQg9CWaq0DUwR3vYTDNZ9yRiyD SR8kzdlIk1EBMSGWDFW8bwHF6DosOp5FWdKjDXcgD+hPRsKzLSYHzWCttC/PirR/G0G4CG7v h0ZImaT1hURVSHiNvLZ1E8D8E/2sgWGQpljQWgm1VRxN+wW3MFet62PxbSO7ELj6uV38B3dZ Pr6yZ474FXIaaey2KyxJvEpyD02E+6emrh6zGlXponKirt4WVVKWPuxfhsqG/aNHM+hsERF7 4e8ZOuyoArE5lpGh9oRFUB8fMDjBh1sveHgHWRrvwMnIb+3MKH4AoL2XkFGhcyv+DQVX74sg D9Ai4hbVWm+qYYPpF61y/xqE5CMXBTMonfib0M99WaefKYl8hL+TC+IIsEFR1NEJRHOZk5+a 5HzOneovKtLslmUhb/UhAvKyf8SDa2v+bTWqNTX/XEVLF9g14rnKxPadjS/YKLHRMABh49gZ 8GzyBMncUhFtqEPcaYGn6+ye1bShs41Y6wTaeZHMD89krNHujhbQWtj5uxzWslpzQJfuK9p0 2v2es8XnM+gM2uTNH7cJ8UpPIJg71ZHuWZv++RrbwZ9Lcg1uPGQDGz1aL6suLZvTIymw9+0V WuSeyQBgltO7EwStL06b9CS1XRACAD4DAri2xr2DUd+QjtPwcAePvdo0bmNoVxycFKdgY1Jy Q73YDtq6JoNt8So3dm4Ip/dXsBaNlp9n/aTe0ZgtbdlTQ7tnRXTYD4og2regkqrAWmavyVA9 uVcxMnLoi8y/dEGkwycviFrQG1LLP5hBho7ZWQw8v/guCbWPld3cWfMnYZf0DcF8qaRSAtoV jmnPFaOclcPsYrfRGrVVfkdggVYN2tZNvqy2O9w9oagwThoVfu9z+qWXkcYlNAqmSL7AJ3IC Xjw8UwFYU/J3bf2j68ofLC6pOzpmRFl13aPU5rl/tId0w0QTMNRzXQ20oNz1kzkhW3igyK1B UlRe0Asn2+g52gT6iu4FEvZp5mWPK3FXSX+65WaPXowBX07gj7ZhQy1BiJEB5lcvcnxBaRo5 1r5eNGyxY+1WPhq1pZVfl1o7W8koGsmm7Gj+fRv/Ck5X270jJoctvZMj2cuA5DDeHXRhsYWc ZVQ8yLw0PigOsyYKllbhRxIpMZNFr2+1c40072VO9JytRS90oi/mA+m0cK/ZiOFwMCsaEJvy edl7nWwlJi/qOPbuwGsrCVImz8DuvqJ7cAmT7bBlRFtf0e/b4vHSuM7Y8LzP6im8xK1nU/wK dp9WIVwh0WhJhiMTakCMg2sx+TCAkKJafy8p0tOeIG8nS8nEgerK1T0Vj8eOkqT4QQqtd2Bi /8SXHvmz2r3oBbXb5YMg4JrCun5gLo1TutBX0oHqOHeUsctu3HYodzA6EoQm9lCNVuxIuw4o zi5uufzzVwgkjBfxGGxX5PQr/HbA6jSnXtdGqtfTWLG3yQ4w+paihm8pykfoCvv9oHDlZb4Y YWpnO+z8Ty4GErQi0r589lps9nqcWuMZLHiYeeVd74JY+Xrp2ACfxTvVbUep+6QtUkpSP5hy VMFk4R7Z68ODJw8aMoHh79wfqf7JPmP4nX3S8P0oPTx1yPc/LMW6qiBkTLleZngETiHGGHVn 4ulSfw81tX3aLy0vGcoI5qgHrb1GtUDrbWKCzudKyozlBfO02cKmSXsrfNcdQtUUpjp/HkAE MQulm8/rhX5MwAzzZLtUK/0IFRit1Ev9+IHsXvnQ4ilMveSKRvjYk9EvdSdchc+wP77VGwsi wW50duBCBJGK5XTJMtjHJU12SI9J9Zi3Cz2bONBamBtdq0Bz4/EcXyOcM1aEUQtR35M9HnXa e9YlrBkwsqf1cO375pIE9LCkc7fBCvP+Syt+q8f3BmD0BSMB5v8+d1/gCntKAOafHIKRt9BH FwPQKyDnbOBcQkNOZTQcd8R6OO6YTxA0gYD9rEN9heUOfbXZcbf/uANlzncEO5Ue8/SzA7pP J3hyn6R+7x26Q+1RMT6LOXkoQ0Vm9HlKhtPPU4sPyDGMi2a3P1iPKi084BGrAApF3xU9Vzof zz98ujDg/wHeMF2VZW5kc3RyZWFtCmVuZG9iago4MSAwIG9iaiA8PAovVHlwZSAvUGFnZQov Q29udGVudHMgODIgMCBSCi9SZXNvdXJjZXMgODAgMCBSCi9NZWRpYUJveCBbMCAwIDYxMiA3 OTJdCi9QYXJlbnQgMTkgMCBSCj4+IGVuZG9iago4MCAwIG9iaiA8PAovRm9udCA8PCAvRjM1 IDYgMCBSIC9GMzYgOSAwIFIgL0Y0NiAyNiAwIFIgL0Y0MCAxOCAwIFIgL0YyNyAxMiAwIFIg Pj4KL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0KPj4gZW5kb2JqCjg1IDAgb2JqIDw8Ci9MZW5n dGggNDY3MiAgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrVO11z20aS 7/4VfFuqysRhPgE4T44j57wV27mYm+yWkweIhCRUSEAGQDvaX7/9NQAIgpLvVle1KVeZg0Gj p6e7pz9Hi08LbSIbK+cWMfzTcZQ65TQ9bPbPFA3UwkWJSSzPLT4t4shmWZYuYJB6H6vFYtWP hncMHkeZW9ws6Of7HuFqjPHb9bP/em3cIosyr/1ifb1QKvLOpfB6vf24/O7it/VfCSKJsgQW AYgk8plSAvDTxcrr5Uv4Xy1f03iNnzy7XPcLWhVZYxKhCQkaU2McoPNGNvg/82SO5l0cKaWy RaJn8dnMnVno7BujAaOxyEiTpQ5BPj37+Fu82ALoX5/J7Bd4gKWzTC9AOImOYm10mNk9+/Bs RLrMroCXmQORnsXIcPFiH4bhiwnCFJfzMEhi4L4FdvWy8yPZZS5SsQfeABqgLiMJrS8yvSza 7mKlXbz8cCi7YiohZbNIK2MWY/T/HsU9ykdIBvUH3KBYRzS/O+yvioYprq/593gfr/K2aKf7 0M5Gsc2edB+JilL9hMoRA84Ipv+z9cxnJjIxiGVkIwYLAHqWOOsXcHCjNPUJyex7Ov2XZAne jcaDhdDLH85q3njBp9K8uU2MNA+Jt4DnaBcqO6tUT0giKZXJntrkmP8XVUjBgVhv51VBwUlz gNmnNnLA9KkmrM9LnPG6J5X4COdDEh8Rq9R5gT8dhX8qgfs0cplOz5z9GMEWHqhTSWbnBT5l vI+UJSIQejUTU5goVc4LwCtC935kSV6/oYfvzyvTiOYnU6YZPswp05gTyp/Xpqcj8U+lTc6D X8/OeJI0jSx87F0GO3JsglmPviPBvxlCyhP+RzpLHtWp5N/QqRHlT6ZTM9yY06kxP5Q7r1NP R+KfSqcsyDZ1Z12SoZDN2ySyoCHIw58vEoMxiFaiCW/Pi32E/MnEPkPwnNhHFOsHLMnTUfj0 UgchaaCU92xTyEbCnu1R3K81bNXCnjUkLRYSTs5V0niZX12oeLkrQFpJujQR/64vfCzhPzxR GnMS/4fc0GsLCyk3mwcGoNUY6lQoAcxlFrZhFNF3tyueX0DKmi1z+DHpsiOKILtdbiAh4bl9 eXPb8bAtqi2/ztlA2fgo1c6ixPtgw3b15vcZQ6eTSCcm5NtN8ekAa7ayfC3YK37Od02Rb+8R C6pfEsVmfAL7VYC/BRCmM7vc5l3ednWD7M4cYJL57raoePT5Qrll0ZTX9wzS3eZdD8ODtmgE ip+Big3SiOBfyu6WCIoDIczLHF+b5V1T3/FnkN01Td3w9L5o2/ymAOFb2Nf6tpgx8EolUZIp I6z56gRkwmDQU1gxSIEliiS0lCoTYfmurXmyI+Yzf72K4tS6Y/4ST0ySLG+KqmjyHT6ky+u6 2SPX8AUmtPg7EmWSMOMRtCnau7qC7Bb27jOsqgBjkS34ssCHP/L96pijeqSdWtuwCZWSWqIg FGjobQGip9kvtwXQ2fBDWJChhPGtfF5XXV5W/NAFKRxp8USs8v2q3M6w2usILQJzOu+6pry6 0PHygHw2oJTMBKVEx3Cq7HgG2AcbaHmSmQyzny806OzuIN8DucyZlax0LBrYCam9A7QV/7IK w0CkwQ+99iGugGKlwLS5mAO9NX2XalB9WBSRpiawHWdFd2BYtvzbndFhBbk01bm+KpLOIgcH TKBpFTwicbJ8IyuLxGTRnAnb1LtVMAqg7VZPbEKx6cqajrvnegv8hoPgex3CSTn7wHS2GB44 2YGVY3PiySLh75W8PbTTNwNe4chUg36NY73rSDsTDaLY3OZV2e75kahL9BldzFzklArFy5ui m7OnceStDkqIxifHzUd4wPxw2nCRcNrkYMH5y2V13APzE3MbZ5NjhooziDUfupbH/akzsREV htn2vu2KvYAcgJMND8W1wKgpukNTtfLdhVryp2ZZVLN2oCtJNmBUUBmKSnwmsy4RlR/etvzE r9PhNbzqETWHqiqrG4aA71BGN4cmX80JkHXJ2IScC4482KZDy3O8cZjqWU9GEt60Xd7Juy/k fXCyqvl30Ap8XwoyVK9ojgd0Pk2K3qps0KikNhxKnKXv6e3cocxUZLw2X3smKbtVT5PdTnAb FyWxmRz3RFk67riB4bjTdga9JOd/qpV0jtHm74DXW37gkxkkD4PRCYSn8QnMRI2yc95AJZ7j uv4IroDE6/JmZnOrHvhIfUZH8mHza5wDx3poIL6gcZCvE/m6s/J1kVVxEMiT5pv/Vynb2KcT MUNkzGLG/VSb3WFb9JGH4wTg+NiTwbBGB0Hj8BptGQ7mxZUAIq9DklxsywfE5bHqa4LveT6H DVxLErR1U9/dfz2ylZUYiDaolY28Ao6chFYzGmcjl/XC3Ba7oivOr5tCWK/d1PhjrGXAiX4o MJ6QUBbNkraGFd6KxQbfGTwYTG1CF2KxgjQhQfEfqbKcTjpo1nLQYe0ZrfRgR7LkP0cpLeDu 6QkBDVDPnt9ase442tfAd2ZJe1dsSjQgG9FVbSIfZ5MomdMMA9lBwb+3uUyQMYLfEr3uHjzw EpgGASHOYqIxFZBxEpPzVxX/bstrBLwuGnZ/uBJmPfm9AG4PxazrrFkRcv7Z5Rgxm5ijIpzZ 1Ps9ebe4924wov2jElnIX9e3ZH1gmuOHrhEooqBufhdMuaC5mo2CmmJ72LDipMvyWn6ZKeC2 m5ZnPmP8XO8OMEX22oo5txkAA/MEnmdyBpA9zGxfJAqxPu0IU+8s47pJSpla3RLTVcqGBQft YXPLI/l0goRSEhde/uNCAcEv333PjyFrhLnZUKblsHQSnpwaAevAY/fK+uHd2x9XP7+5/GX1 7csPl9+tXr56u3r75tu5A2QSyO7tyA7hWhSyJ+no+LIqp5BUOKuOBXWSSeR3dxAQl38cty87 0goc3eWY8IJRfzS9sA40kG1Nn9NZN5xF9nNHFmUaDlvTm8bP+WY/Fw/7CCKpbOJ8TJxySmFH zoePP09CSgFpQ8gqjIkS7PFP4lASnsuECaFcgjMhFnGirzAVXoZABKbeXa5fvX/3mmdB/7oa lhWUve2e05v85gJUDuKibiKcny8UnP6XFzZevnrLU6KvmPaJGYPhr7GL22IiUZhUkbDQ94Lj HFinUZIqVgkHFiuOpy1reqrr0QLv3iMda0Q7p5tBMUBCSZp6Qv0LVsiQrDgDm4nnho8Qzwz2 YcsTOf90vGyMfAex4UswRbI8vyB6enYjrpBKDwo6jvGL5j1K4KrclR0WhmILmBIq0XGiABO4 LG1Onvg3P3Q1ZPMlkiJfsqGkjWyoGEDwt2EQotqpceAiIFWcRODoLlqpTuVSm6L8iqs3kl5R 7QqQosEGDrw/yNzAEKz0MM9g+ipvhdi5okvRYHGnnejZNRyPGl3QF+YGWoJeY1+cK1wqayOj 0uThwuUYigqXEMCNIqs4ihPrB1ycU6tkuiiEYLFzjywagE4XPdLVBBY1EPodLQrms8LKQmAA H/R4KaetFwyMg2AQqj8wh3b4NPD1w4f/Pss8iDS00o9UfcdQDzAvQD3KvIcWHZg3XXSeeeNF h6rrKRPKquxKcMQzETgEhIkKfvC2QCWcCe10ZJI0+AUpdp1la6zxVpF+hK0jqAfYGqAeZetD iw5snS46z9bxoseWZmBtr3S9Y4qXV/dT8gLKVM0SFl6vUjV/2ymlqz8WvycO6NMuT+ohdgdP emaJ8PpoifGuMzHSsgR2IPpd5tPNHhU9OSan2U1RUpw9/bIvFU9bU1kC+ZqeEH1y0U5FCpK+ hdcZ8snO3wckR4pMTFTcg52y0tg4SizwUsDMWY4aCA4TDTzrIWfXDVCrMdgpfw2ofAI+7Xjd yWnFXsxVTXUJI+EMDnp2U6+GW0NHr0MhHp+uQ812khhM3UpvFTYNuMOmFFFtC0zC+nr31T3/ /vT6FQ9sYhWPPqrfohOexWmUemyl+RRVdl4Ze6jVGOz0+INHwI6sH7CdO/8GTGAau8fWDVCn 607snOjS0bpNcVc33Sn/rilBLHeHRibqZgIBqc4GjOVxYF/klP+Ec0UhE+XfEDEZ7BBpPwrp fR9YwIiid/gFtSghxERRQU5ODTOaxwwRf//+9gce3OVNS36S0ASgfHf/z4BbSurToE3LzqW1 hF2BTFK4LO61l9J2ClG+wQwAYsCoiJ5zEijFwTjQAIGSvDncUZgPCKeGI4u573ma2zIdlG5l GNgjAZ9LzjESblskZrkrud8rNRj4LTi8bflJOAWjT4e86jD6g1jUu6UgnkMzlyyMG1Etp6uC WntBPeA1bA0BRvBq6Zlgknvc0tJUq5AOVcugbGUlIZ4imatISBEBOeyR+R3VGSB3/gVlwGSm PuSXKTZkuNsIYnweOraFALHqpZ6rDzjYFh3EaIK9btty1uhcUTs+xTQhNjlS9CUoUVPveSSr ZIOaPedKsVQI4E0uHw39R5ysEN89P4iA5zhBVRUQwr5sOTDEB2qMej8gwUnpI+MwfMQ9FGwW 4B0cqR97N43TEdVjPVbsPOhle8ufUSNCha6GHnOfJ6hyZEmnEXBk5C2f9frQ8QOR3cpXzZwY uIbVYCvmNIkweO8lhXTfoVnOrH3IF6966NUYnC9qjCPK3sb3YFRqXK0uf7h8e/kOkiWPme4/ frz8MClnjA3P3WYFZhfTPYSmbBf/LiC1Rh1D1r+PQVbOREmWmmMuwOIv1+uf3nz7t/XldHkH ljfxxzhHLekRbghC0jSZtIj/2O+wlzKiwGCF3LnHKPj55Q9/+1+Q8PHwFxXHyV9++ypSABqU 90VZdNcvwALk+/YFvH3xqzKWV5zjEqSZVdFhIfwFJLDFC3BFstwqzSLvzaS6DntaX/5d5Pnj y5/WvJtERclUSB9/m+vmuCxKEpcee71QrzBg1Y/rFSZR0h020s+lqR/v4URUPHmoqPsvDVc+ oAByDRygOvCooAowH1XMgcwZ78cOGMzhzPc0XeRgI/pOt7SpXV+vIHOKteD2Nm9CV/sre6GG 4wWjM4jIu8MdT0kICIHF7aHbsj0R6D0YyHqLFtRg4bZp8upGKrk9MhOPrqNMjWXFhXQjhTqq O5D7Ci4IXpWQdWNlS2rk5ig0MuJ1Teh8GLn9QtVBF+7knFbQ0cUYvISS80UjtGjo77bsCqsO k02CYJaQf2plahACoagZYJ+Xcg8FZ3OeRCewm62dh8IDlx+lCYaDfLfjQWgZ4BynPVrKE3p5 09QoIBwObVJHm8cAo+UnYbDjYMXp4Y5FPHu54husuallEd1QRBWHq0QrldGljU3RULCuMiXB B71oit6Rwyf7ejsK0hgkNM2mpXxshDEHtB5XS+mZezhaNks71MiBm+CXtfBDIxNWh1bAJXoB wnZFXs0qPOmK3EFiTQJZFRUGK5/Lpq6kHQEQRd6WO4qrIr7osO6/5ThFk3+HUIeKe1X5Tw6i +lo4vB86cGcOgJrrGenxqWAo1nUVUIcu6nNuF1VgMahYeQTBBUgBoasxM4RMqrSYixWF9Ay2 Zbs5tO30UtKHQXkhUZu2CWyk8U+byLrelhyPjAIQOYAwdZtLcMIL4ksxuDAnucz1gYqwhKGW X05RMcap9w+lE6NWHyUfW2Z0uSExQSYzFNHhbTUEsp6uTeEWsTqM/IOwq+wkx4EgtGjbgONU eh4j+vnorOz6dq4HfXpdNm23C5E7ug7yJzZd7iCGXfLFHJtyaIYX8trD/m64vTK6+EAXV2qG 7i+ZnZj6iu6hJeF+mg89DZxqDhUP5GpLIlfbAKioNvVBeno4PzZf+LyrW3nzUNdShas1eImv bK8KUbySQmElLUx4OVw4godw4Qi/5oq4U6SAdbUdOGcskF3u5he/lct3slfV19D4Rt6ewj4c s1nDEVUhcIBViOe9E5C7fz2edtOUd10rAJyMPmRy7kpIQHnIGZmF9bfBpvDVNRj1XZKJNbGj I48FFHSNAsJ21J5eWZueBDHM2iuxlTAYxQjDWyKQXu4hHxBi+nkJiHACqStmTXwvSHLNNdsk SKaxcTxx3MNdU4TpA4Dw0dEV3+Pv+suoM4x/XVbUFglaEsI4NRtj4TTSUbJ7hyeyL6Sb4065 mn50HTQYeHUmKSs34qd1fz1DiwX/hq12cLw6GXumc/dilEkjHfdXi89dzfaR0n1/tfexwW3K VuXKjo2MVtn0GoTUkIbtU50J7F9v/0PXhGg4rkdh5xJj++hc7d4p+D1TROtL9yOg0xKaxr8p 1sCIAIVk25P1rDu74L8AgGdYdWVuZHN0cmVhbQplbmRvYmoKODQgMCBvYmogPDwKL1R5cGUg L1BhZ2UKL0NvbnRlbnRzIDg1IDAgUgovUmVzb3VyY2VzIDgzIDAgUgovTWVkaWFCb3ggWzAg MCA2MTIgNzkyXQovUGFyZW50IDE5IDAgUgo+PiBlbmRvYmoKODMgMCBvYmogPDwKL0ZvbnQg PDwgL0YzNSA2IDAgUiAvRjM2IDkgMCBSIC9GNDYgMjYgMCBSIC9GNDAgMTggMCBSIC9GMjcg MTIgMCBSID4+Ci9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdCj4+IGVuZG9iago4OCAwIG9iaiA8 PAovTGVuZ3RoIDU1NDkgICAgICAKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnja 1Vxtj+S2kf6+v6JhnAEN4Fb4LilwHNiO19gg2b2L5+4CxP6g6dbM6Nzdakvd3mx+fapYJPXS lMaG5eACGztUkaKKZD1VxWKxNz9shEwV41pvGPwnWJprroV92B1fcVvgG51mMlNE2/ywYakq iiLfQCE3hvHNZhtKfR01Z2mhN08b++fr0OF22OMX969+81rqTZEWRpjN/eOG89RonUP1/f5v yR/uvrv/o22RpUUGH4EWWWoKzl2Dv9xtjUg+h3958tqW7/GVV1/dhw8qniopM8cTMjTkRmro zkg3wP+Kszmga5ZyzotNJqL9qULPfEgrTW9u3as0doMjLjRMPAwtdM5ZymQm7RDN3ZYzxpL/ bO94nlSH+lifyvbD3VZolrx76Cqgs+RH/Ke81M2pC3M2mlX7DXgnVUbltuP/vctZUkE/UiXP 5Z2wnWhPuXbVnkqXZ0d6++5OMZhgeJDJpWkOrr5xf6vuMnmj+9BdqmNHD/uq27X1A3QLDG62 gacwAcBTfYK2mU6+qXY4FnqQ6d1W5kCsT7uKSPQFKLRVdz1cqNw8jiqN5agjWtm6F7pztau/ ZUzsXOOmfwn5Yp4hbhna1493QiePVVud4DOy4Mnbr+6/fPf2NT3Ux/OhOkIdzf0nd1slTPK+ wlqRnOGrPOncq4I4w9faajv+Gg0fx9LR/D58oFlrK/h2fXrys05/aWJppQEMg5VmJs25zhw+ /hoXBmmYci3K0566fO/W7FBNZEEmzfXiPu8X9liez8iUW8k85Znh47HAakTY46nOjF7iTqSS S+Fa4HilKNzEQSFIFD70EmUfUXjwbxAefEDh0SpL3jaXyvdVXqj0npYcRpTmeWGmK48Tow2M 9XQtDweLuAxXbvdc7b6nOpoQKDxa/NUHCxpo5sAANbuyqzoiWukGUtPuAbXUQUNVVQvNYiLx gItxfeoI79QD899l4Tsswak4X7p0qv+8UtFFkXKTmZh2QpHQRqAyl0WusckPr/72Hdvsoekf Xznqe3iAzopCbI6vBJepllnmKYdX37waqE9HDUOZ7ZHasc3RF/0bkw4NT4XJQX3qHCVcFkMd 2otPJlIlMhgsWCPGtJ3CbwJYhvPCYQBGCLEZdvjLeAxdvsAkFyrNcoDgmM3rbld13Q2fBiwe 6Iw1+fRdvsRnlqdZAXZoxOdrVIgg6lcySFN+BbgSfNVp9T2+wK0QJhVFno+5fdM6u1mhQiMz Cep4ynSm0pyBYlqRaxAGKXO1HqhQM6RA/n+OT4SggQ/7RRoZgFymBcM1ykzKtCIX5/N5bA46 Ww2bUwYn9gdcTSPFmEOVpeLjeWSux2WPzGUuc5huLvmYS67S4uNZPK7GZI/HRR7BTwDtYSZr LbMYjwF+6zG5Ovx+TcwYNNJqFjKG49wYmWaMGTuNX8xDpu9rNcRM2JsBzJC/XKT5AmBW47HH yyKPObIm8zGPRQTTAS1rcdiDZYlBAbAQOew3x5OYsgWorMbhr40UviZSQBNnuHuZg0omclg9 DQ6tyuwkfjmPlEFfq0Flyt8MVgYM8iyVC1BZj8keK8tMBtsyZJJFmAxgWY3HHi2LLPamZcAi mo4FuKzH4/p44UUqhZFQyFNwY+N7NDDuSs1Fl7KU5TqHgoBdntQyzJsaushGpMxksLK+Fc7b PcaBygf0jMFJ3qrcJCrFvxlUGZbYHSZSfawFy931eCxbDE0lH4jStOhgP5Wn+h+WjDth7MNu YD/EtrYuTpMPwkTwcD3R5hiKdnM7t51lGiSF1vN2Olyj7bDVrRj56VCgN2A7VgynA6dCcpgK /KMxkoNhnI6IFI7gffgJiRh+QpqrNH28zFJtvAzJjzBT44Yw/m00KEaRCD83LMyNKezcYFwM ivc0jyz5VgjZ0S4SioqIFOCBZljrwxTXtupb7JrD9Xhyn6hP+zoam9qVl2oUfODJuWp3NraF VBt9g7/nsqPQITSgbwNxHB4Zhi1CeASDYhicu9S4v6Tw0+HDndHJJzF23j/Xdomkj6pBAUdY ty3u9WwXuE89XWigUko3UGqL48QhdZM+wpjwBbukWOsEcRod9MwX0kWVRCGAeDo1F6I+VEQr z+dDbQdfuCAeEulxFJEEsovt2br91XVA78ikii8OsI9gLPLwNpZ3zQn7fbq2JQXEkNi4huPI JdHObQOCj9KGT98yzar0Kf1kDrw2eqfY0Hao1BgAEkXvfix3x0iID/bpivkI/r68lCQJx2Zf HVyYy4W7aB6R4Jmt9sAVT13cDrQYZ9l4TUJYW2QYy2xPdtqF8SsEZBJgYYLiiQUqRSqZ9iP5 PDKMAnyNQg7CqJFeTGpUCGZ+EQt3Mgx3+vOOXQPj/EBMtlXZNSdQRB+cagB/r1DgIo5hUB2s WlHJ+/ryTCWnV1Tyl9dfdhj+ZJx0BNLmI8cSdmmKy4URA7O6KHzk2GO6o45p82mLpAkHjAT8 bLnCKWFmqlssjsAikcrAwrFBFSG1607b6PPRNcJoPhYA64DhPbWzwWLtotRYeCi7ekdFULrH su8vguW2+uFqtRL4E44LZW3euTl1FZGPoFnLJ8sqPFk9rpw4YWME2+FStb7x7hmsYXd0rR9/ FowUKzxEnqpLDEUMw7k+0N+A3rJARpvg11uAApxd74KlGazmsmyKghvXAj6Ak4jIFAoU28UO FD9BkodU0tqtl1g8XBO5HI/40Srn9yQYQ7tgTSKtANR4kYAiLQbUOpEIEqa9SGCj1skaKL1d RajHFpa5yHI72WTOTBzqvdODSKPuWfLXP/8Jp7PA8OHRm3+KwuPfXmTgwcsGuk4FswsQW+/3 OGJU5lwtqB9wYIwu9KL2AWeWv6R9NDjzyyvM89zL0OQQkA/W0z6FlcOH3lSIoHyExzwWAhis LOQGD3AnymuAEHQ96PyOzWAik2khct1jYgsr/Vg/RYZlMIiUT5HhPtL2H4ECT664aoEBJ7gG fHjYNNxITASqOhUq6MRqXy/xlae5yLNbxlDEyC1kYLVB81/q09MneEil0CzWjx/sCSDWuqWG GVUpy/LJoRtY0OpCbXN5a/+R6EUZ5DRjznlE+rxhyHPYN4YjxS/jR4pGBXENmoKMNAM1kk8P es9N01pFWRhvuaAE2xj+MRVv/TiiOw1RhIM1LJKGgALPyAgVoxO5GPzJAc2dA4qgDVozn/ir OZs2xyJ3Z8o5662Qbdq4v6EvZ3rwlbgRcHoEB8P8YJgOtsfRST785gPqB+YGyENzw+gw3Le+ lVoBG03JM7FoYbau1USBD0zNzN5MwH6WZXROMd2bAYoleE0/Z+8sgIuM66VYk1wxKqslpsIU KLkmzUD648dNBjSaFBkMlqGnqNzmEXz1sLf55lpfbs7HuOApwzDMsPtfGNnxXb7AMpcC+oH1 HPE8d+6Y6ZRpsyqfvsuX+ARrASZEjPl88dwxS7XMixX5DV2+wK+QEmr1RBZ+4sljLlLYtupV 2cZ8DLEiyH7eyeNPwKtYG6/YYQFbtkyYYaynTxszsJR45M4LDb0UpMq+tiljX9n0sbeDcp9W JpI/zQAY+Bl8cBUAzwxiCGCdyhwGNBoFoOo28BmwtiKXAb4vcGkdhjGPuHX8eBay6/HYQ3aZ R6EEBrmzCZcK/Y85hK7J5doI/RVhlbOU8byIwyorUsVZYU/YDNP6Blb38/AZdLwafCLMxuAz 5FYWi/BZj8sePstcOvgMedR8ET6r8TiAzyKPQqkUtnNqzGWxiJ4Vmfw3Qg8euhnqMWKUOLma POOpgL16HD1T+TApVyE4tI2kSEtMATVhv4bdvRvYuNdv7MPX88gcML0aMiMTEUPmcCbAxc4W kLkelz0yl7ksFKyXycZcsgVgrsbiAJiLLPZ2bcgi+KdyAZkrcvkrI5OviEwNIsf5nLvIUpFl +YbrPM2LnNwDwuQfLIje9LcNbqQkFUXYWs/iM/sF+Bywvho+I9MRw+dwPsAI6AV8rsdlj89l LguOp73ZmEsRTfPxCF2NyQFCF5nsETpkUi8jdEUu/41sJ8xUobM5z1NjzBFWUJlUK0UeyP/c ZRL3bYI7XP15HkSD3lcDUYTjGIiGLAsYxwKI1uOyB9EylwFEQy6ziCXuQbQakwMQLTLZg2jI ZNRf6EG0Ipergwi/xAq1QgYQXi6QUuTLGUCh1UwGkP7XZgC5+DrmAmHMtJuLLHOG14P0C1k/ w1bzWT85n+b74GGmppPMtjo3rb2LJfyFMiiE3BbhTiWRODorEOEeHNT4swIoNjYW+HSHJxn1 P+hMYiSlBfhgXCBTg6HdDNE321K728FJBkbFTO8Q0mUy3d/f8nf1tJ9vS21coBLP/KYvNJfy QLTT9fhA9XQOi7T2ejq5S2rDzmkCIscvdNglmL/YxYcXu0Kek21AeU5aCDydsYe8QC19IZyn Yh9tBRL5ffdbEDvNbPpKjdkiVBkOQkZWhOHp3eQQ7cUNWJGyQvj9lZ1AHG6eNA+XsraJVLKw 2T1Ae66fnongMovotBFbPxJ9JD8yYAFq7PR9AmXF+nM/zBVUPBuzbMfqBqsYmxmsFGlwO/+l u8ypkGrcRunp4fWod9CDRnB/rrqq570Czx41ONe06lQ+NHRE7jJ2dFrkPB+LvhMDm3fGXYYZ HydCwLM75oSSP+aEIizJx4gFLUOWk323uZ78a3S3UXKf0MaTYxnNGPu/pq0vH9z9zkcC7lgS 5eBGr9dkQHxsm2N/zTeycDBTiumfKmaApT5DKmBJUgqYvf/qz1bD9dfwZXS1VapULqZo8Aej Nq9skGUwyFOMH4zCDt9IWbyUeaOAi9vMG2KJyRQMkJhmpQGGKUki92o1n1wbzXU4Z7an23c8 oaNmQ/c+of5Yn/aoEApN93WBNMnaAMqhab6/c/YXX34od98P00v59M413bL1ypgXIXGMF0Hp QjEo3a7qUzRbNAv0MhiAjlq+7zX1sE+i1F1MHquachiFBNeiOVKqCWXsySwpjw/107W5dtTA JnEA2VolmzAHDzhfMJMnmxbLTPLmRPSn6oS3sIFRp0pnrnpbBgUrku65uR5w7mAOzy0ZxXpf UeWxsaf+ULWvLn7lmL+LfKYb+Lbe2jisqtrWFoHW1ZcoGq9leNGlwAkuQF6IcAQb4oo2oRSq ThWe2dLvAHAHDFvt0rKgyQ46vLRWNdkmlJgjk921RYnZxjMRThc7n0qiYOOrSiQVmOM9EUMy g3JqQ8k+DQrbEvOW6jPn8ClkzkUmvnP3+g1lK8B0IwdGuxkEsiX+vcQkUKqBVW98MhLUl+1D DUO1swGPLqXratEz7Ke8XNqablRfKroqPZ2B19cWBRGXGRNwMp/FqHInwaoXECw/VPT3et67 TER4cBktUNphCiplBBZuGNGJt2NDzGEq2Tco/y6Zur3Uu+uhbH1ibEej0s4HwsKh7i4+sfqh chPz26mHGTxDzUCVgXsc/z0M32o7bGb9TJENzSHHXCbYWoRmpHh5dvNdvF2PmbTL3/Wtbr87 NsOwjcpyvJI8/O69vw5PGMaJejrBCnaT2/I2nw8L+2oHc0pZUXP8wtYl5YaZRYe853vYnPZd bJMD30aN+A7NkO9Pf//3I6hPA57Dj1XbATf/8buPeMo+Ilp12jV70Kq/++i/719v849+/1nE GjH7+wUZ7miCZ415bX1Skcg8LDPeJxWhrOEvbZCsZXx4C0Mk+4aIlIENBJJdq/Lj1wOuZLk1 Ob5moBUkZWG6X5FAkJNx16NlsFUuqx/rmoE98PcjWPRihJDArlX6LHlzIUJXhTqf9y38Pk4m b766f00k2j6039PmBaqe2uZ6piIZZ7Ku8E9zbaOWi37CgU0NMSLUOSAw+eWl8b/ZEhPCdBat imFw/gWs9o0WkOoavYjTpS/20j7+Yhyjgy8SQvlIlVtz534VA2oIu0BQmeJEah4v1gYBsTmS NTTJqQRjci6tyYAKmMWoQPqpxa8o5XCh1NBa+U28pfbWSg1zeTHn8t2JbGKfAhuzYgE+aoQW BwxF9z3gz8hc9sDoG4DPcbaiD+V+sJEhjuFjsyRdDKJ2EQgSb/Jm4PG5OpypBE5fZT9TPtQH 2gjga4+TgMeLFgsz6rPhZ/ARPA/aEuHDYLnwccCzf9k6i5EZ7X0csOHzCEFxY9yIFzAybLaA ktDsRZwsfzcg5ea7cayMvktQAJfDQQFKKDU1WTR75YCcsDwp9/saJ9NGZ/B55OIQzV1eo4f6 9DPuIWBys/L75U/b8y5mgSTGVfOQAk35xYQcykLNUbIxx7lPmAeaA5l7uHryg6P4n0gCw5oK JvlE9V/dxR4jSYEYMTMGLVMhmRyMYdtW58OHz+IJ2jJjNyPBj1hn13gbYgb+Le2sBE/BZGfT BHc3RAUDClAHtQhIdX4u1uD+lFplNpIDxosqOv9LRlijUk5UZAX/XuJXDMhNBW8XhYduS22N zkEFo9nFCidLbpmAAE7q3tXZvaDxWcZQCIn+EYQCdC1zAnbuu2fKoS4dZSSIRKJ8dFnvLh21 JT/5pnVHNNi4RTUP7rdtbFlyG9lUPtyBhfG1Nhh6riUo8GhtrHPcLbr+Bczx/no+2HuC7vkG Xm7JSPPaRbGbVGaBpgbXS4gIxt9G6aKTaX0fXsBO+9T0N/puL+ohkI6DYK27r1dS3ZBl21l8 yzlaHXRHKLhPjtDgp6Z+rJuDNzGD8EnwtFHK5pUzZv/DALMXlPOw2YJyDs1eVM7L3w3K+ea7 ceU8+q4duRHMKWcshe1o5577/Sg+wjacYiP4YB0RI+YCUJhkqLjy+go0iL8aTBWTKzSoXrb1 PqLLlEl5EQKoI7lFVJgieW0jeUpmHj3uF/PwR+xy+kE4rHThRVuNZoeUsut9HEka/xgevANu wQXDWC3+aKFVA9xtx7AAu5DOqbfC+3pI95oyAhLULhJg5WIqWHQ3eemCi6IbPlIiRtBIEA0D IVbF4gMJekcPpMKkmlsPFtXo8Sk3IpUgp7EpJ+NBlopbR88MPUGgBVuBNc6DcldofL/jkNGJ nDO8Ml25GyP4mrO9yqlkJJcdUcLNEfD4XOAO21npjIlizlKlCx+c/e67z+D/2D2R0HC0VBTz 8rdteY5ftbJgXRV4nv0wnlSH+1uf/mbO7dCgPLQPNKcYFS2Sd4/00R3u1jCCY4/qiBb8avj2 26/sVY1w7Z6lhZR6PMP0K482GHuoyRHIR74uVtEGOc+C4SAyTT6W+juj2IpiXTMOmIt8KQMK pWuodGtFwP0DK5JS9Re0d4Ct0on+0mwjwe2foTm4FzZqbJtVRNuVpxi+rEASlMg1p16kHgXZ vJNPsuZ+2RDb9A6e9pdo6TcTo7926XdcuFWe2tXBLXC3jX6sSgC0a+/27TagrlnYg3fXM57b zv8IIoe/gr/woxF9o0jmQYG/KMFl6Mpm79x8z//aa+SD/wS4wH1xZW5kc3RyZWFtCmVuZG9i ago4NyAwIG9iaiA8PAovVHlwZSAvUGFnZQovQ29udGVudHMgODggMCBSCi9SZXNvdXJjZXMg ODYgMCBSCi9NZWRpYUJveCBbMCAwIDYxMiA3OTJdCi9QYXJlbnQgMTkgMCBSCj4+IGVuZG9i ago4NiAwIG9iaiA8PAovRm9udCA8PCAvRjM1IDYgMCBSIC9GMzYgOSAwIFIgL0YxMSA5MSAw IFIgL0Y0NiAyNiAwIFIgL0Y0MCAxOCAwIFIgL0YyNyAxMiAwIFIgPj4KL1Byb2NTZXQgWyAv UERGIC9UZXh0IF0KPj4gZW5kb2JqCjk0IDAgb2JqIDw8Ci9MZW5ndGggMzc4MiAgICAgIAov RmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNqlWltz2zYWfu+v0My+UDMWQxC87pvj 2I2zsZNa7m47bR9gCpa4oQiVlybeX7/nAlKURNGZ3fGMAR4c8AA437mBmv0586UbeCIMZx78 +Z6bhCL06SHb/iCoI2ahG8s4YNrsz5nnBmmaJjPoJFHkidls0ff2Y8zuuWk4W8+o+bF/4WL4 xrePP7y5keEsddPIj2aPzzMh3CgMExh+XP3mvJv/8fiBOGI3jUEIcMRulAphGR7mi8h3LuG/ cG6o/4hTfrh+7AUGwg2kjO2acEHD1cgQXhdJu8Gfxpc5oIeeK4RIZ7E/+r4gDc8ICoOQZy7s 1NO9R77rRbGYxcJzPRlL2uHSbPV8IYPAMc/cNhsihE7e6G3NtCKvG73ivnoycxE6f+E/O1VV dspWq/LrJp8Lp7AUlTX53O/Yixc8vtkC1JCGgAbbEbSUVV5nbV2jHN9LHVNim/B6kHB//Xj1 6f6GqV/nwnNM9SUv1zy6rky74+5W5YWlJ7R0JqtyRdK9vXwU270JmKRw8prbXaHKkpYiPacx TIRt4lbyWvPzw80Vd4I4EHZ+yVNMtdIVk7rZv3ue/427T3Pfc9q1lXVmYTQv9JysUFX+/MIP fBrQ2VUm03XN+4RnVB+2+1OChy1wqLWuXQv0aNYLeEZxfoRPIYmL5wvheZ5zZcqsaOsczr+z jgP7YcX5gYu4xon/miceIsFPI2ejcGcdNvw0dDJVVTkdJAybtuFOTbDD3uD4gZuUDtT9LuAh Lxtdmd1iFDt8VrpST6D0Bk5JitRpdN3AybjzRSgS53GDWkX6XpiEZap8a+mq4dY81br6i86U XkOmAJyZ2e6KfHGoJUatKjNgChCwz9z2a8eHHCbqrS4b1cCJ1kz8mjcb7hGCsIMIguXGSeLc NmNoUEUNeBBpYJdNvYbbfAUCACK0cCKUGQhDoy2zXNcdkVvalYDDfgA7vbly+aHTInIcaHFk LYC9nWFDjaWjuMEzx15AtsM0uwoGKTwTSKFFU9h7BZ7VzZdO3YLrAcwuZJw61yrbDBhGNEDs 6G1QT3DQeUleS+DCkFi22ye0Reyzk/OsMGTKVK1rS9wQDqAHRxXgAcApmGLv6Tx+pXDQ7IrR ozE7gCKq2sqrDuZZJzVcSaULZX0rEGFQgCxwNYwXRHAiAMF6fN0jK9C43G+7wuR4nH7i1Hp/ 1JUqkBg7qt7prKmZg9QCLfszGLX+DEg5OoMVKxAG2P0A/dlUW9X000fUUuk/W7ta9r3UqXS9 g31pfur80wXqug89KeGjaFhpyJVtVJnXW36s291iFJWmooP0o8R5QncZxZ2fAUqvGBTmx/7A xcBopnbsQHLdjdOScQzsbkzRpYveyeqG7Ip2K1LZYerElGjwSWtriJlZ4XqRCC7OHFindO4/ IQYfLdWYAtflhQ7EV7CIMU/UNgZ0gpIPIgUDglaQtQzNYcCwdge9qi05UsxGfeyUn4+clv0B eBIWjE682wE+4A66nuVjwUjZVNrOWeXPiNZnXYFL62PBPPWdKffPipSwmiN/i/bjxc6ntuLh HZhbvs1LVb0wgT0+iuwctBQYcUZ9/SrPVEPuKrbOgntEinpHg0T2dLHzjBEH8hF2lnHv5aIO JEjMbUu+4DBdIvomX2/GMPhs7LYY5rjy+qXGtA0NClOPTVszR6Xy2sa1yNoZUMlC2VnhWTxz a4ej8bDnD8Ken1gcxRQsa0uyi2A6Bzsks3uJ+2An03QPKmiOQAWMHPRwrDRo22Peny2cXdVh 0GMitmnn2pKBa7MaRA+5MW2x4v6T5glqtQJfVevR1Cy3NqS4eW6btrLW1ueIp4ZGaQj2ViZr EaNTxrbJC+tXeIccwcEnahtP2W2Ax0KXjqMw0hbNGb8TDPyOecIgqVcXE8k4L1akw5zJh+wQ hBcFD6CDzys6aBw4jjLIAtZYDaoF3HNNbjNwbvKqbi44M7cpPsZvYh5FHLx1jbj0fAYqtKRU 7LBSpSfJ8SOFMYwdjkHQ6yI9dEutV7aL3ogmWn67DXQIRauacf1TbAh8TBSySityfQEkjCgd yQAe0lHXRxvDM8FnXhBy2wURk21xYXrljgH9pq1gU9XWVBqPLQXhCN9EWg0xghOfEQzkMmcT 5T1iW+lVm9lRPnMgrvROl5BAZnj0Lzx4HNFtQUJTgj5Vg17nxLB+LLk99uBIUo3i3hZCXkGp nUd5ebXCvQTh/t37oBFw2BtbSW+wMuXtyhOs2VEuvpCrabggowQCcwUUASWSqewL2NtlnI3R 3DMJZ7fptI8CaTKeMiLLFowy3xX2aVDYYGZW1zZKBaHv3OAsg2pG943FQ3O+YOX9Q4pD+4fW qhsSFtozUI78KVAUNzYWA6t6KnRH43atS0yUOiprGrOgFst6zi4wnWpH10a+LpLOr3MBoi/v f8RHvwMADOwBEMTOJadYXA+AgUC8i0IHERFFjG6Ye7Bdabfr703U7kDiDkbT0J0mHXVOwbdO oeauDU/QU9xAtT2HonFNaEFf0UV163iwPca4t08nx6LFcQ2IgOf0kjDOhGPHw9SNQcpXayS9 3fW+HsnwfpU13H9uR53nPj7V5rmhI1VjEcsGKF4cdAqtbK+7jbD2EnpdWb4vvUF333PRcJl9 KQ2u4CtkRWs8l++8aOAqyJPDMt5Dr9Zl/jiGoRlbDmA4vlM7qiRwsObWegCe49ugIbugIZ3r q4lk83bJ+ej13eX97dXSXrvoZhAoB1H/+lumi0JzugTPv3uh9zewoDCAnvie83rQgDOEJL6k Pr5/7G4MhQzdJPTS8dtBy7QYcp3eEIah66VS7t+F4n8TfxzLjCI39tJoWmbH9IrMWLhR6qWH Mh+64r8k5xhDbdg7TqRfmRJdxrrta20gfq5MYzJT2AmYHIxYAqYKF6yKD22ZEzSOFFjb8Xc6 09b24Qnyk8g9e/oewFR48pXTH3BNnH7HRafvnz/9KZn705+U2Z/+UCZeCWFatoTDeWLorRd3 2U8tZJB4NPD8wbJ8xuCiTJETPXaukQ6neKcKmAgB0dLZocCExzmoxjK9rdRLZwDpYFFHGrv+ Bhl9nbOfDwS8u/pCV73Q/6jKdatQb2v8ZznQxn65+4gGhgTfEa435mMi4UpYlL3sd/li5er6 YR5BBnLB71rqrKs8O/aD+GI6V6k5zbPY+ZQ1Zggd7wQ6kA24EcIiEUMNHmsSZPnhLPJTvLMP xj8yeImbRHT3z1f7wbiypZBuEkj/8AvAb/IEYdIP3SAE9PSMo2I7rsWQbUSs9NwggHM7EPuB TDxxriCZurCXoZZ015arLhMIQKvvLJ3BVmHxYmfwtRIMvbUsy0ZzvKQA16AriFLndrycbyoD +TA7EJTDWT10LneUCHY3ykhaQvDm+oWfqfTGzi1GwVKPZkMwqVypiqAfAG5LqGC2NmOQzk2l tvvVgt9Bs4i6MhkmABo9sh/pLO/vPo9JeICaW1UZJoy+L46iEMy7rGuT5fZSSARgL08GfKap 7D0XzLmu8gy4youxIzpxgf4Jjnv0RYHv+ql4DaNDtrMYlfu3EUaD8xidFttj9BWxHUYPxCJG AyhLl/bCDaKy8GEewDhIE2L5Hc6F3YPnJhL3Nxg05Veu8GNwxkl0bh4o83CeKla99wxk7NzZ dbz9N02BtCGVsf/9y6i+FGBS9mWMcngbmJMQjr2HWW4UZhkhpnCLBIofgJL1e6nEFYbnvpoF SXwaj5E4xDs+t3wBhd3RZFnsS2sEW19CjIUICKmh9ALrudHfwwY7mFZz2Cbdev6VU/OVIsFp AAgT14+6b70XPcaT8xgP0wTwFCavYHzINoHxno0wHp7H+LTYHuOviO0wfiC2C8j4sfbXwpS6 tB9u+cY+omwACR8NV7h5ho4qioLuq0SIMbLlT8ARAEnjBRGSUS3L5fvu8I99V5evcS18CV4s b3SGlQp9t7PXOzgW+KGwJTG8j2lXZruF/C1T4/XOvpahxZEfx6crU+2spq/yOrNFzbK/Nf3O vG8PiDBwI6j/XgPEgG0KEB0bASKaAMSk2D0gpsX2gBiKRWeDcYFuZlVd62pLn/N8YW3T9/ZZ HBB/NCuMcS7fb/xsv0j7ovtWJKZK4xPH4fvREBjwNLjTqZjSwY36DDfsDuDmMljOlwC+VfXt 1TUWxPwAu4I0LtuUpjBrGyCRp8zc/wUZkO3ESRC+howB2xQyOjZCRjyBjEmxe2RMi+2RMRS7 RB3DEV1Bab0xxRbTFZuDIfm9y4THuQz7S4XSYOzy5fBzG9R1rE/KhGDmvWnGP64jNrL+S47s kyM4/NCPY6uVeyzli6FV9wVe8fI9Xj2IEzf1AvGKqoZsE6rq2UhVyXlVTYvtVfWK2E5VB2LJ iCXknFoVBf8SQvp44cbk2+vHG+79/HCPHfDh7dOihIS03im6qoAxynFx7IGi6HrU0+L3lop/ syOHlgv5q83X4aXAQvf+YTLIbsNQUnbrW6cONHLqo0hAT/9/OXUo9nWPBTmBBQlleJS8ZrZD tiksdGyEhXQCC5Ni91iYFttjYSi2z/NQlW9VtVFbPBPIkd5a4rtKrdnN5hkNJc4/7BAUKfW+ koc5SzvwXlFGibx9NCByVeX1xRhSLl3+8PmezDORVO8h4V63a/2k2r0cGLy1g58hMjSWZl1N 1L+KY1SFbkIXGIKCIHB+0eXZbzYAOnvLF8Jb8BsAUuh7ErT/xMI/r5pWFfl/CG6Y6UBUuy1H clAhE1cK6Hs2nZlDzmMyrfHbTz18M39x5UuEbtIBukWKl9D4A4/LuQQQ3/HD8mW7M3Xe4g8f JP8iDsmf8NJK0Bdr+qIb9Fjnh89VXmbjn213Bd8gntyEYLUQHWbCx1cYE0Yjo9iVvv+a0QzZ RtB78ja+fvTOW8203N5qXpHbWc2B3M8vzYYOnH7cUOLXCOo23fdXienO82kNP3Lqm6bZ/f3N mx3yvOC73Nq0VabRwdKnBrfUzRuXtfdR0QdL0LfK8Bd+/S+SqL0ffk4d9ZRDlSVnLywhRxLC F9P3lQOm02Pz0xCqYSH7V6Hw6ERe97vUEYH/BZm990dlbmRzdHJlYW0KZW5kb2JqCjkzIDAg b2JqIDw8Ci9UeXBlIC9QYWdlCi9Db250ZW50cyA5NCAwIFIKL1Jlc291cmNlcyA5MiAwIFIK L01lZGlhQm94IFswIDAgNjEyIDc5Ml0KL1BhcmVudCAxOSAwIFIKPj4gZW5kb2JqCjkyIDAg b2JqIDw8Ci9Gb250IDw8IC9GMzUgNiAwIFIgL0YzNiA5IDAgUiAvRjM5IDE1IDAgUiA+Pgov UHJvY1NldCBbIC9QREYgL1RleHQgXQo+PiBlbmRvYmoKOTcgMCBvYmogPDwKL0xlbmd0aCAx MTYxICAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp42u1XSW/cNhS++1cI Rg52UdFctKdok3hDgtpZLCBNlwNH4szQlaiJFidu4f8eUqQkzlg2EqAFeqh9ICm+973vLSTf OB8dHIDAI7HnQPmPCUAhgX6/yMo91E+Q4wGPkEh/cz46EHhxHEeOnERBAJHjuONs2tPiEMS+ s3L64XwEdG3EF+ne0ZkHnQjEQeA56dJBECBIlHCa/3ZwcvhH+qqXCBU9pCR8EKMwNALvDl3k w4PnejjTQ6q09k7T0SYJAYQYG1qKk02IYOAHkWd8fDvP1PruS4oIOyGehfNi/wE7vuf3iq7R 7J0ngYOQjJCPe98MtIwCJCHpXVS+QQgPri4v3hy6WPr34TDyD6hY6dVFlXcF23VZ2SIwcKRj yvfYZnSP2SDs2tL3c9OzQ/GEqeiV2rwbSIqNKDd69rfio5IZ+nHouBippEW9wlG/5QMSylpx kYx9jPqN7ywdGZVp48nLPJkMgNvedbUkECI9wxBGMkwu8vQaeYkfJJj8avSydcXEJ7140tvB oScpwDkKhpv1XXN2ceyDKP4md6D8pk5AFD/u41tkXHy/pq2etZUeczPSRdWZrQ2rSyqYMMuq 1mPNaF6J4tbo08WQGClZc9b8pN0YzLtIVj6OvsbzUcV2XdCSNRuaGSP7XS0SztplsqE1LZvk c1kkoklUvhKVuf2ncyHZ1GzJPxuIbTHbGBdZ0eXMknOzqiwrMY86I35Ds3Ieu6pXVPC/aMsr sZ1OC3H/5Wl6pvEuT9OL1yd6/jv0oVwfv740mye0pXomTyYr+FCsP8swdHTFpIIp2vdV/ee4 fV5X3eC6O9i3SWaVaGnWPszvNOdtVcsyQpHEe9WxesWEBr/S9U9ZkbNaI8RAAW8h/FBSXrRV cg0aW/7ZNc2qReN2gt+wuuHtLcjZjwPVwAO+H+5wzVmT1XzzeDzTNW80PfsO6d3kwuzQ4WNR sKyH0wW/1OOH55fn5pDIIhJcSRjNZVU/aFraWPJVV4/B13erPikrLpjBuOF0TLhKMJgrnuNq c1vz1bqd6uF4ynG6Nn5N1ZPWXWMJq6tLyQOZONxrDGHpo73rcqu2Zwp+CoUdzQFKnsh2G+fd 2bGe/CL/npprkrHBCNuR4m3DiuUUWj3pimKOS8FWtNAiomp5xhowlMt091jyR0c71k5zkAxX 2qYYbxhFVc8+8XZtKiRru8HYqC+6csEMSSryAaqsbpgVxYEgm0trzW74FP3xfUH337cdZ3Zr f3wEty8TVawD78HW9yZZ3aLgzZoZ3rSZydgYUMnZRzHZhr+by8p/IsrubE9wp/u87WZIJSQG EBPcy7y41wcd9/f/XE901S3KR9siTGRzh73g69oiW/rhtmiUUmybkcHYuJj36l9vkIydrT4J BXYdIxcSvYaR6pP82PRJ5eL6mbx9C3cJJIjdLhEvBkEUkW9pl0iIAIahv+3eghWVWDXu0N7M N43Bw02CUnjsNrn7/4n/J594+/gMpS5fK/k7Bc3/zDEyriWkf+r4TiwPDQ7UoVGttNwkI5Ri F96z1/9kmjf4BUsrrW9lbmRzdHJlYW0KZW5kb2JqCjk2IDAgb2JqIDw8Ci9UeXBlIC9QYWdl Ci9Db250ZW50cyA5NyAwIFIKL1Jlc291cmNlcyA5NSAwIFIKL01lZGlhQm94IFswIDAgNjEy IDc5Ml0KL1BhcmVudCA5OCAwIFIKPj4gZW5kb2JqCjk1IDAgb2JqIDw8Ci9Gb250IDw8IC9G NDAgMTggMCBSIC9GMzYgOSAwIFIgL0YzNSA2IDAgUiA+PgovUHJvY1NldCBbIC9QREYgL1Rl eHQgXQo+PiBlbmRvYmoKMTAxIDAgb2JqIDw8Ci9MZW5ndGggMTA0NiAgICAgIAovRmlsdGVy IC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrNV8lu40YQvfsrCJ9sI2x1N/f45HisgQOMM7F5 SJDkQFMlqREuGi6aGEH+fXolKYpSpGQCxALMXqqrXr2q6sX6ZFEf+a4TuRbmP+ogEjjYk500 vyCyQSwXuY4TqjHrk4WRG0VRaPFG6PuYWJbdtfo5JY5R5FkrS37edwrtocbv4ovZ3MVWiCLf d614aRGMCHaEcLz45erd9W/x91IiEPCIkPBQRIJACzxf28TDV3fqM1efWKy6eIg7m06AMKZU wxKYhoAcijw/dLWPP04jHYx7HCKhVkAn1bmRd8CO53pyoa1X7jvvcy4D4lsBZwE7gSNdXECd VmzTsLIQfnH/nYCzbBNBbBhJmct4zepr28f4qm5f83LRZqC6aVk0CSv0ZGIGswxSqVH2y6UZ z3Mz9vPd03vVWsCSFUxI1wcBLMuqs7dkq7ZixUoNvDx9+KhaUKxYARrJlmksTw/x/Q9PcyRV Y8umRMQ3lFrvy81bxVbrRon+ij18z/8R1Y3X2sfHh3iuh6q2HghTjEMhj3heULnCsLSFqt5z vxHTGsbQuZ6KIbNG1Sapml09z/N71fiJ/93qsAAYIzCSYk0NmV7a8bhss2wKSwarJFMiRdmw FGp0eSsFhVjgRf6u/Gw2svawQN+qVgWbLEmhh6pan1mz1tmSNq0x1q0v2vwVNMikWBhVebmF AYsGIEyFtYIt69kXQeKQbeKq/p9yyaQz41JQQsGoFh5FshrcxtY3Oljta8bqNWjcST0RsY5Q jtkjkbOr/q+pqPwfWZ7tFivf4yIiJ25ubuSUcW8wdWhj6Iu43kDKlizVW0PS6DJu3jagiofi CIXEmTRJfETEiTOYmmmuPYpCj3i7PgitfPvRPCxyVth10+8tR1JFrNSIDywIxoVVrExILjFC 1PN2Cys4IQ9O2qufYVNBDUVTj+L7UuSbO+HkywCySVG5C5u8ZcUoXxyXkC5vp6xWsIQKihSO 4Boq09l7pw3dVemaNTw12gpGO9U76fPrxIb/ISmSFeTcU9WfV0kOn8vq97pjVufDNLMHM4Et uE6ehaZCTsqD4+lzLBsIQg79j5LhsXPFZIMhuK1NtJtSVzqnzxwZkNe7qdCdKz3/5ixOjkLo a7huygpGux89NzbiwgF/NF8tMP7xMh0Hxv9ageluFzsO9airvSqeoL9fKGKH/mXa15DafQ6c ze3tKVxM6uvJ2IVwDht8Jb8VNm8TdPzDTMs3Nr+PQXYGHW3RHW0nyQM/h0HXz99tGULWOM+9 dLAUV7fNJGu1Rqzvg5OJ2asQvG2JvrbuayFnaKGpgT7WQs/Q4hzE4uxoObI/Dl9k+g3Fr+b8 Q6afS0rEHsjIF5PjWRF/MVFfvJhoxN9UlN82jJSwFu5Z0y+vCXNfAKx1zCFlbmRzdHJlYW0K ZW5kb2JqCjEwMCAwIG9iaiA8PAovVHlwZSAvUGFnZQovQ29udGVudHMgMTAxIDAgUgovUmVz b3VyY2VzIDk5IDAgUgovTWVkaWFCb3ggWzAgMCA2MTIgNzkyXQovUGFyZW50IDk4IDAgUgo+ PiBlbmRvYmoKOTkgMCBvYmogPDwKL0ZvbnQgPDwgL0Y0MCAxOCAwIFIgL0YzNSA2IDAgUiA+ PgovUHJvY1NldCBbIC9QREYgL1RleHQgXQo+PiBlbmRvYmoKMTA0IDAgb2JqIDw8Ci9MZW5n dGggODc3ICAgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrlV0tv20YQ vvtXLIwcrAK72ffDuTR16qIFXLSxWqAJcqColcxUWioUqcIo8t+7D4qiJMqP9NCihQ77+nbm m29npBH4BKhEkjPDAfYfyhBRDIu4yJdnJE4I4IgzptMe+AQw4sYYDfxES4kJALCb7c4SHCMj wBzE4bvOIOxb/GZ89vKaY6CRkZKD8QwQjAhmATyevr94M/ow/iEiVKBHAkIgQ5RqAW9HkAh8 8ToN12kYh1tn3447n0whjCltaQVOfUKMIiE1b2P8eZhpb194ioQCRQfNcSNO+BFcxIuwvXkc vKaIGWyA8ipgplgMsb5f2RGUGF8UrmY0Tf8MIQaxlDASQBJE1ibiq8zN2wvnGCFKuOKaSa7O X8VLcPDW5/6ZGjrDB27szFbW5TYeCsSUMfuI87fXV4wTcpnIvHbtWOV3RW3zuqlamrOySpM3 dp1XxaRw87S+/fHmpzS7yVw2t0vr6rS+rrKl/aOsfl93UUlEmNd+mDklIWt0J+jUzpKhtc3h spzaxaO67t6hcUXpjvHqFN66ZmmrrB68deAlYBMoc/cjyHCEx41Ntmhai/hVGgdfZmci6Lch vijooBXyDCs031I/tEKfZuWX25uT4bA9Ew8lKD6l8b+9NvQ/Xxv8S2pjYTfPqo0Hc12dSg5X wqyp76AfV1WxOZVqT0zYfVOU/520jbaSIU6fnrz/oyyxbl44W0yfkSSeX1bdP5ofC2+6vmvL VSDE6H6Z/rdFzktXZ17Z1unaLVePSjyNzFax+k7Kej4uV/26PnDUhbkLq7KLrLbTDj4r5k2/ xjM3PSnvus7qZp1w5eSjF3SNtmL4DlQbQx74tpX7mnxO/SCTgPhdIWjomrxujCCsiYyYK/97 hzv61PeDv44IE75HFOLi6iZt/TbSwtOep9VtM/E9QLOwh41j6NgY9t4oR5oJ2e/rjvq7LRj2 0cdNXmwfidnZjCp1DLrHhpssXw7WSF+Rl/vC+07W6xkOvtrLkt7Bi++nlwde0H22zWWGiWy/ IDHWkBCIWdtz6EshL4V5l5bLycevfdos4AzlZcvzRfTpe2ZkqFYDdFqevf3EHzLp/z1wZfaD m9hF6eZrWJeDNdB/qa2qgoQemww34C0G9kDxfZgAxr8PleF9qPHvSAnrTAUm5shfbOaHHf4F sYpIHmVuZHN0cmVhbQplbmRvYmoKMTAzIDAgb2JqIDw8Ci9UeXBlIC9QYWdlCi9Db250ZW50 cyAxMDQgMCBSCi9SZXNvdXJjZXMgMTAyIDAgUgovTWVkaWFCb3ggWzAgMCA2MTIgNzkyXQov UGFyZW50IDk4IDAgUgo+PiBlbmRvYmoKMTAyIDAgb2JqIDw8Ci9Gb250IDw8IC9GNDAgMTgg MCBSIC9GMzYgOSAwIFIgL0YzNSA2IDAgUiA+PgovUHJvY1NldCBbIC9QREYgL1RleHQgXQo+ PiBlbmRvYmoKMTA3IDAgb2JqIDw8Ci9MZW5ndGggMTI4MCAgICAgIAovRmlsdGVyIC9GbGF0 ZURlY29kZQo+PgpzdHJlYW0KeNrtWFtvpDYYfc+vQHnJpYtjYzCQVG3T3NRVk93ujratdvPA gGfGKQOzBjJNm/73+grMhMmlqqqq6q4iDP58zvkufPbgfHY8AoiPY9+B4r+HAQoxDNRNOt9C aoAcH/gYR/qZ89mBwI/jOHLEICIEIsdx21E3p80hiANn6qjLRQvo9hG/HW0dnPvQiUBMiO+M Jg6CAEEsjUfZx93TvevRa2URSnlIWgQgRmFoDN7tuSiAu8f6cq4vI7lq62zUcuIQQOh5RpbU 1BeEPRCQyDc+/jCstPc8EBKR54TeIJwfBxt4Aj9QC12z8qHzIQIES2gRBYhDrFxccDphv+65 BMLdqpgvjqR3jitMwiAmahAHUaxs/1Bz0HE9JKMUqYesSPMmoxphW0K4aTmfl8X20ZB5yadJ wX5LalYWaj4AOBRpXSHa/u5sdK4Rr85Gl29O9fgTDKC4P3lzZSZPkzrRo8syozkrpvru+6SY NsmUigVIP/mx5L+00xe8bBZGnmv5+yLTsqiTtN6s7yxjdckPRUFEAu91Q/mUFhr8fTorabFM aJ5RrhFiIIFXEL6cJyyvy8MbUPXtv7lJ0nJcuU3BbimvWH0HMvqVlUp8EAThmtaMVilni8fj OZqxyuS4Gc/LrMlNwpSnrDCTiX2Y5zRViOq+nOjrz8dXF3qUiaIpmLQwKycl38guOCZs2vA2 /vXMsH9gdOmOk4pm+v44TWllEE+EMl7mvfR2RfDh+OSyy62QZwqtz/r+6vKtnr9lSVtLsnbA UF2elIs7zqazumM56ShGVnFXmCPeVD1jD8JI2gNRE55aYSOuErkeylpOD6juQtzPkoVaJLxe xXl3fqIHP4l/RybFlK7FubVidUXzSZcyPWjyfEhLTqeJCXpR1kykBmw/1h4ODtbYzjJwqEec LvIkpZ1UPVqyemYqL60bS9auL5r5mBqRSZFZqHl5S3tRtALpUFo5vWVd9GWShGQXmbT+rpYM OrP+WmmjcL1PyZfA6rZcr0yymnHOqpmt7aQayFgbUKE5QDHe0G//7VE+WH33xYYXIzWxv7+v pqx7valNTUa+26aOFzRlE5aaltP2+vpuQfXL48EYRAgPUiICkDx+9KYOTKwDD0QBClZ9kKii rdmWIRpTkczpk3Uil3W75yHLaFEL0ZQfDSXvmc2aDqroqESiOa0Ek+3bdu9pe14XRQlisieQ wPq212cWRwHKaZHSzdpE1WAfBYd/Z/9uG5HsV4oZA8HsrfVzNl/YfnhF66XY0A12Uoitfi6i oe/f8rIu07JHJ8Mi6dp9NAYxDp9zuFkpiqk8NvxHqkL58n9ZDJRF+NKyWLI8SxOeueX4RjQ0 t0v2wzIJN5ZJ3R2PHqmrRVLXlJu87kgn7N9Hsatd339C2DerPeAhQlZbYz+BvecyCApHrAYt IHLx9dcCNr6W833oEAhh/kug1d+OOTtEEfBEoFc9+8L4dG/5vY7Rj4CPohcQ9v2A98Yb4Yd4 nql1EQQkDvGLXOj0dJv1XwsAISAMfX84AA8SMehATECESfQPOrBWlE8v3DlayTd5xtnmZY3w qRfvmZ1xE5FGNefmNejlTHTE9gdVN2vwU0swpis/rKziV0POtyJt2xzf2cUq4wj4IrabQh/3 Q2/aef8jhfmsIH6giAsa/oKgTdyejfqIgANHdEbiEfkRwYs9QDAkLZLkQ/ABnfkaMcD3J8p5 mKdlbmRzdHJlYW0KZW5kb2JqCjEwNiAwIG9iaiA8PAovVHlwZSAvUGFnZQovQ29udGVudHMg MTA3IDAgUgovUmVzb3VyY2VzIDEwNSAwIFIKL01lZGlhQm94IFswIDAgNjEyIDc5Ml0KL1Bh cmVudCA5OCAwIFIKPj4gZW5kb2JqCjEwNSAwIG9iaiA8PAovRm9udCA8PCAvRjQwIDE4IDAg UiAvRjM1IDYgMCBSID4+Ci9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdCj4+IGVuZG9iagoxMTAg MCBvYmogPDwKL0xlbmd0aCA5NDcgICAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0 cmVhbQp42q1X32/TPhB/319h9WmbvnbtOHEaeOrYQHylImDReAAevNRtI5qkpOlgQvzv+FcS p03WiqFNixOf7z539/HdDXwHHkPMp5EPsPzxKCIhxYF+SbIzohcE+MindGK+ge8AIz+KogmQ iwljmAAAm1W7Z8QxigKwBPrxplEIXY1X8dn4tY/BBEWM+SBeAIIRwVQJx/PP59cXX+P/tUSo 4BElEaCIhKEV+HgBSYDPp+bx2jxidersJm5s0hBh7HkWlsLkAqIeCtjEtz5+6EfqfA8kROKB 0OtV50fBgJ3AD/RBaE8eOs9kLEPCQCijgGlItYu/lTdSA/SI8nyiP/LdMhN5dQEZxufjbZ5t Xqg/5v2XPiF1hEHEuueSIq94movSSD7wJDs8EwJIVNYmUX1mkS6NWFXuxMsakCs0F9ukTDdV WuR6O0A0lFzoyIxeaU27kmsxrbBYWMUrYRZ3qfgB7/lWzM37NEnEdmvW8nxVFmvzMivmwi6/ 4ADfTV/N5JOgkcEHawSu++MuNpn3iOiNy8tLvSWFAxJR4Gwty2JnAzsXizRPW/DKrgrhrUh2 ZVo9xsUbJRzz+7VQWIxKylCo0t5jjjBEqCSMs2UgQi+MZCrwXvrW6dbm3EG1l2434t/Eo5HJ efaMvM34ZpPmy27Gttbpd1K1+cLzeXfLSdGGp6XNYppXxaAt7ZcV5ElSlPPGsDzVpcpQ6Buc Pf42h2/fzd7Du7c3n+DV9PbmGkr6wNnbq4Y+vddnLfiiDejR8FePG+GkCz4vC3ENvbXd3p7U xkxdA8dk645mmt9V2VtaWo5lIruvK8UpJBvJvGsfR71OZmkOxVqoumXBkr8PxvQQ4vFgNBWl j1ZK+D+zFA+ifGxtRz0UteZ3daxW/KG+BfaL5Eq9WeTChbvHsXCIY3U4j1bolmemE9hzJ0W3 N6Ut1w5veR1mflCI9ryra+kJlJMuw5Z3Cn/Wlo4nHD+VUj0B0gb+wWXs1DoLYpfPa1L+WKXJ ap+XnaAOmaiF+SlM7172JyIPe/P9e4+PRzM27t6OoUbquZ2NO518qJOabt9toNITxELKnuig fl8HNX2XDFU3F84TFGurm8N0NUaJn/10Va9rWUHWo79n1/VeeJo752Au0+XKIlgUpUOD491z yO5eBgYmtGd2ztMml/bGygSUYnE0Txte2Xs2Qmgsf7WdcduO3H8I7Agvp0WiGNI7rRsR6Mjo gZ0GIJIDu8fUwO5FHmJUTmm1lEJCyIE5O/n32PsD5r9zvmVuZHN0cmVhbQplbmRvYmoKMTA5 IDAgb2JqIDw8Ci9UeXBlIC9QYWdlCi9Db250ZW50cyAxMTAgMCBSCi9SZXNvdXJjZXMgMTA4 IDAgUgovTWVkaWFCb3ggWzAgMCA2MTIgNzkyXQovUGFyZW50IDk4IDAgUgo+PiBlbmRvYmoK MTA4IDAgb2JqIDw8Ci9Gb250IDw8IC9GNDAgMTggMCBSIC9GMzUgNiAwIFIgPj4KL1Byb2NT ZXQgWyAvUERGIC9UZXh0IF0KPj4gZW5kb2JqCjExMyAwIG9iaiA8PAovTGVuZ3RoIDczMCAg ICAgICAKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnja5ZZJT9wwFMfvfAqLE6DG 2HGcpZyKWioqgbpEvbQ9hMQzYzUbiQdIq373OrazQUZiYCQOaA527Lf8389O5oFrYLvQdUjg ACR/NoHYI4iqhzjbw2qCgQMdQny9Bq4Bgk4QBD6QE991EQbA6mfDnjZHMKBgCdTwsQ9ojSOe hnvHZw4CPgxc1wHhAmAEMSKtcZj8OHh/+Cv8pCy8Vh5uLSgMsOcZg6+HFqbo4J0ezvQQtl57 H8I+J/EgQrZtZLWaxoKIDanrO6bGL/NKR+tUSsQ28OzZcE5AN+ShDlWOlvGcK57I4pCMLTEg 4hFV47+2HBnCwi1KP1CLCavjipeCF7nappB4kv3EZj9csUPLRehgWRXrUk9FocfbFY9XZqkz i+KY1bWeV3y5EmYelWXawP0TlcnCLsREVjnJ1Yu0cXs+vlpMWbTQEeIiF+xO6Ie/ylZ6ezTw pmFEUxotdZ6Vb43byfMJTAT8RBSVFVvwOznDem2dJ6x6CTQ1i62sSFi6LZzecQd4ZKx1xUWj n0ZyXhRLym6ehkU57gBLxnOerbM5RiNt2zPalHmKTYKhOCBbYdPX2soi0el4FDmWlaJ5OrDz IXvNcvHmHoHJy5etazMr8rS7cIPc3klXYiwXm5EZsOx6zWoB9VOnJ7oayYlyU+tdFIsHeXk9 BOIVS551ChWLEuuGs9stjqA1t/IoYzu4t22YntwU68X56ZBvg823y4vPMycXrcWqqPgfni83 amgrH1/7Z2G8la8be50cVek7A5kXgi+a10lS174tSkuzcR+B+XiaWjaTAVYbR0dHaqtLM9oa Sk3kVy7nimLfm9xEcfZdWoQVY2dRxtMmjK5SppoVFdCWTTC1ndls3Z/taOvYlOvKVlMuTS8J 7z7H87fjHoHfrBkO9DH3YtyHm86Z4nbA802yNrFGNqpPJhQEsk+23bZPtgMbugS5faQ2L7Yf pDMN90y+/0GIUSBlbmRzdHJlYW0KZW5kb2JqCjExMiAwIG9iaiA8PAovVHlwZSAvUGFnZQov Q29udGVudHMgMTEzIDAgUgovUmVzb3VyY2VzIDExMSAwIFIKL01lZGlhQm94IFswIDAgNjEy IDc5Ml0KL1BhcmVudCA5OCAwIFIKPj4gZW5kb2JqCjExMSAwIG9iaiA8PAovRm9udCA8PCAv RjQwIDE4IDAgUiAvRjM1IDYgMCBSID4+Ci9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdCj4+IGVu ZG9iagoxMTYgMCBvYmogPDwKL0xlbmd0aCA2MTYgICAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVj b2RlCj4+CnN0cmVhbQp42tVVQW/aMBS+91dYnOjBnh3HdqyeYMDUSUzbGrHDtENITOuNJDSE dqjaf5/jGEJKaJHWy4SEn+PP33vf5yc9cA88inxMGAPY/DyMAkaYZzdxekFsQABDggq//gbu AUa+lDIAJgg4xwQAuI+asxqOkWTgFtjlw54QHjIOw4t3E8qARJJ7HIQLQAjijAXmOEy+90eX P8KPFiGQFCaJQQjEJSEO8PUScq8/MP+kP7FxWF25GIf7hD5BPqXC1VQVdFgNZYaOUyfwS3eZ B98ZRoQQCYTXyedLdiIR81l9E7qrVruPQWC0c79SJgPEKKZAEIwwFdQq7I3UQme61Hlm9GHc zxf1Or0e1sGDVo/rOoziOC8Snd3W2zJ3652qXDGPSYV5IEiqNwmk5X+I4nRmGMJCqUmU6uU2 jOZL1c5VEdjg5tP0M5xdj7/B4eBmPIKD91NoCkG9K5ugYhZMcgA9giQRgU2xVJHjyaLUET1Z /B5+WFG5XalGGazu1Oy4jUvUOi70yjpzSl0v3FXepG5EaWfbzMjoMLVRxRGh0m9T/9nV1JKq 12VNsN7MS2Ppq2p/qW2N6eU6WfeuOln3BlaYY0pxysBHvUziqEhgPv+p4hLqRGWlXmhVnOXo s+PeoGZd2DZpm+nkuuJ0Fi83iUp2u+eGn7C5S0ynzfFdrmOnsVH7giVplCVRmReu6rLYdPdU 43RbwlntqtJVuX2DVj3D31d8Vh02n9fM3Wao3/+BGe0iF0We/qMdLzUk7JR/9tlbch4Ou914 YsSsHumeRA4DD0DHg9iTHuIU8z1VlY/Qo4S7sdaR8S8BDw3gZW5kc3RyZWFtCmVuZG9iagox MTUgMCBvYmogPDwKL1R5cGUgL1BhZ2UKL0NvbnRlbnRzIDExNiAwIFIKL1Jlc291cmNlcyAx MTQgMCBSCi9NZWRpYUJveCBbMCAwIDYxMiA3OTJdCi9QYXJlbnQgMTE3IDAgUgo+PiBlbmRv YmoKMTE0IDAgb2JqIDw8Ci9Gb250IDw8IC9GMzUgNiAwIFIgL0Y0MCAxOCAwIFIgPj4KL1By b2NTZXQgWyAvUERGIC9UZXh0IF0KPj4gZW5kb2JqCjkwIDAgb2JqIDw8Ci9MZW5ndGgxIDc5 MAovTGVuZ3RoMiAxODE2Ci9MZW5ndGgzIDUzMgovTGVuZ3RoIDIzOTIgICAgICAKL0ZpbHRl ciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnja7VJrPJRpHxZ506jNYIuyeSTCZE7MMDM5jZyW Ec0kOdRM8zzDZOZ57GNGI4cOTsWKrW1kvSQqhUonh01aSk7VSnKoDK0pCR02CSU7aXv397Yf 3/fT+3uf+8t9/f/Xff2v57pvMxM/trULiGyF3BFYYk3Ck+iAK4vlRSICqj2RiDEzc0UhnkSI wGt5EogOkGg0KvCtVASQbQCiHZ1iQ6fYYcwAVyQyBhWGhUsAC1fLjyQ7wEUMoUI+DwZYPEk4 JFZp8HkigI3whZAkBg+4iETA+o8nooD1UBSERkMgHkMiAaCQLwG2QmFCGEP46MkLFiCA3acy KI383IqG0CiVKcBi1qYloDIJIrAoBgAhAYbgi6imQSov/w1bX4q7S0UiX574o/xsUn/r88RC UcyfDEQcKZVAKMBCQAiFv6RuhD6ZY0GgUCr+susl4YmEfBc4TAQB1iRbPNH2U10Y5S6UQaCf UMIPBwQ8URQ0W4dg8EsnqvxmfRDYLkw22xv359XONv14QljCiYmEAOJf7FlM+gurQkKFMiCY iCcSSSqian3ehX4xzA3mI6AQDgPIFCrAQ1FeDEb1iFSIAsSSACEMQjIAkqkcE/AwIlEdAVTJ xAMCBMV8vFcqBSC4fCx9QlSAwPwL2QEE138he3uAEDiL/v63TCYii7W2IQPWZIpqOtHWHrCj EOP/jciXoigES2ZflCqzz1ggVMUMQTKIj+npRPiMpG3ZFSmnEtyK2ko0LaOMcoqTbtYmX8xh 4IcVDN0OtPJXDrT8d2wydpuwVEc+6n2aAAoo/YYVLnGNsWxCcje2caG+5dGf2PNe8IdDNqs3 HblRv0ict2+wx1gZWYl7cd/0TV90reZZnyGSXaHhaNrcU12d068TInbe6u/RPgyaPpZjQo9c 9jkEBTzty2qdGvFAipCe401LQn56o/ehx7C+tz3i4cIcWvoRlsa9HIf384mWMsGjWxhSboRx T2A+7Vs2XcuI2hFQkAOoLXUwyQl0rK7yZj3XGrhjSRswyVnQ7rUnXu650WvD+LKSo7r8U8tE Dh7HDedA5fVBV8WOcF2qstx/j25EeRvZ4UdSZOUhs/XcyWmz31dmzB0LffdO8XYm3fDqC36s iZrBGfWNOPtcp2gL3LDlTaKh5t29jSabeOEHByUuTp4Kbef0G+LbTo/iqidYQCDt3i79zpN7 TXvImCH6pDi7YDUrCHe+qvFAiJtMjbbpOrzmUeHLZ9evpueSN7u7Biu4NZwuXFPZpV+K1uqV pc4Nbaxydy9aWaWFdA8wl5g46hkxvtZxCVFygPD9PXXtsqyR8CtxupSpyW9K6dS89veMx7/K NzRWjhZTv0nQfJy4LGI/foRjFWv/XKPWu4wb02ZfdqGxefGqbJATZ+2fHVF6yvtUijjmFW3+ oRJa+UuSRkHclTGXqgbBETQLOGvhvfONleUNsy0tZa8kOll+7wq5eHSTU83VehiFlWcmY6PJ Neu2UBghYR/aHYvXHzsem7nzxasu22/2bcHQtR91D9AMI912yBNmksa7PaTaWLeqm8E98GBJ Tm9zv5A2kHjlGFZq6hB42tzxquHZX36bcPa3JmMFnFiiaBMubc6jKTOwulBcpm8G6iubmLww ix6DRpbeNa8xA7ixOjI9xV1idmL6QpE8gJCg7Ha+SDWR+EwU0mG2uVeFyEpNvXfuxGu5gfIN ujvvrqfdpYL9oNPDo35B40enHPruTEl36bWMpt16cNmGJWDNBLMPcZcIvityamA735pbr3Cf 3k2o/25pcpds/IdRcyPYpynxTn0PuiHfeNIWx8y421D/bm9FhuGAzDffP25R5s32kFbM/a7k +D7/luf70kNr1KqLp9O8R89vK7l5P4CBJTia+9WNn8vS7pD1t9bOvFpzreccYsbKPx/FwHl1 0BTbOCfDHyT3F799OW/gJ9qk5VuPcr0Di5L2LXGlpZ4onzA9QK8/b51dEuoqezjyhmssGkzf HB52J/4WszS6N3Cvk0ZDd3nFQ5873o+3VN1ePF4U6HR7R8RGTWe49wcjSBTVj0VOCsVdi/vy q5jtdanatQ1pA2urNHyQ+HPaq41ygSqmFker/JXPsOljjzMl8sw5c5sj8uTNKwqeUynNhytD wOtBoDrjdMp2XHzv5W8XzteQfT3DyNqgpiC/qN4ZPzzOvf96hw3rnMZRXdbxXPWwF9M3mrPt PCb97B+gtzFjMzdHhoFGY7xGlVWThvdFxS+EMU91161REWSrjW1budT3e9T3ns7jLHl08aA/ vpdxekViG0KlblbvKzuGs2+ukTEq5m0/p3yv8A0q9eq3W9AybqQn+yDmrEusjdBcN7Q5fSpx Jtuy4WkLCWwdC+6srz6fWSSwgYOWW7AGniUY9OlfW7TZJ4d+wn+OZPJ9jOvZYP0cycES9+IB fHL5Fr+S1oMb0Q0j1vGHQd+s8dSlnn0fDrzNClD4mO3w1bap0DF/mVhimm/0VVT09+wyeKQV W7y+JMm/S/8wXUvnhLv52q9m9BdIubty/8HYr6BXoPrYBdMew0pLP//MgHsXEOnldERQA+1x sA0RvOwVCs8tbQWzTA2m53dabZ9ubyalGO0//JSXhzZQTPSTnmCTpgLrGjLQyrtzfHDZlI6k UvmHsHfMgtamY6Kvg4nHm1c4NvqFGyT/vMbaVlEpDRqtm87P7UzwNh0KOrG2aFBtcEzuyV3d XUEAWMo0yabO6hpvzw1uh5S6bYupyw0zFtYFP5OQ45+u2BWHf3WJEw64ehTMacEttb+gmzEz LE8aL7jvrjc676uzEc4+qY2ByWcKLxn9uGWwny5/6gGm4U6ucvQLMKpdpVNmDl/VXR685HZa LpuluT7A1EqwzSN9wRCo5p0KrrxryEnZfrts3wXu2fgJRdQzxV3S5fBjWoi787TemaUxQwlV T+om9ritYxZWe6lnHePM7L54Ytmyjl2X00uh7JpkWguQGVqnZZx3TRb5fXHp6wV9ctETfcNc AzxkHYjNeeKooWHMKE5pd2r2qJgYuqdkeCi4OtpddVnMTO4Vz0hf25Byz39a0JfLnVlv7otb RRm+ysds6RphaAf2DEDera9XmzvUb4z3f0/uy+69tFXT+d1of+jJ2ntRa9fs/e2B565C6c8r fy268PZ6Wwb35daGru/Hif/hh/m/wP+EAF8E8VAJIuahEZg/AEYh4FtlbmRzdHJlYW0KZW5k b2JqCjkxIDAgb2JqIDw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBlIC9UeXBlMQovRW5jb2Rpbmcg MTE4IDAgUgovRmlyc3RDaGFyIDY1Ci9MYXN0Q2hhciA4OAovV2lkdGhzIDExOSAwIFIKL0Jh c2VGb250IC9TQUJTU0srQ01NSTEwCi9Gb250RGVzY3JpcHRvciA4OSAwIFIKPj4gZW5kb2Jq Cjg5IDAgb2JqIDw8Ci9Bc2NlbnQgNjk0Ci9DYXBIZWlnaHQgNjgzCi9EZXNjZW50IC0xOTQK L0ZvbnROYW1lIC9TQUJTU0srQ01NSTEwCi9JdGFsaWNBbmdsZSAtMTQuMDQKL1N0ZW1WIDcy Ci9YSGVpZ2h0IDQzMQovRm9udEJCb3ggWy0zMiAtMjUwIDEwNDggNzUwXQovRmxhZ3MgNAov Q2hhclNldCAoL0EvQi9DL1gpCi9Gb250RmlsZSA5MCAwIFIKPj4gZW5kb2JqCjExOSAwIG9i agpbNzUwIDc1OSA3MTUgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDgyOCBdCmVuZG9iagoxMTggMCBvYmogPDwKL1R5cGUgL0VuY29kaW5nCi9EaWZmZXJlbmNl cyBbIDAgLy5ub3RkZWYgNjUvQS9CL0MgNjgvLm5vdGRlZiA4OC9YIDg5Ly5ub3RkZWZdCj4+ IGVuZG9iagoxMjAgMCBvYmogPDwKL1R5cGUgL0VuY29kaW5nCi9EaWZmZXJlbmNlcyBbIDAg Ly5ub3RkZWYgMS9kb3RhY2NlbnQvZmkvZmwvZnJhY3Rpb24vaHVuZ2FydW1sYXV0L0xzbGFz aC9sc2xhc2gvb2dvbmVrL3JpbmcgMTAvLm5vdGRlZiAxMS9icmV2ZS9taW51cyAxMy8ubm90 ZGVmIDE0L1pjYXJvbi96Y2Fyb24vY2Fyb24vZG90bGVzc2kvZG90bGVzc2ovZmYvZmZpL2Zm bC9ub3RlcXVhbC9pbmZpbml0eS9sZXNzZXF1YWwvZ3JlYXRlcmVxdWFsL3BhcnRpYWxkaWZm L3N1bW1hdGlvbi9wcm9kdWN0L3BpL2dyYXZlL3F1b3Rlc2luZ2xlL3NwYWNlL2V4Y2xhbS9x dW90ZWRibC9udW1iZXJzaWduL2RvbGxhci9wZXJjZW50L2FtcGVyc2FuZC9xdW90ZXJpZ2h0 L3BhcmVubGVmdC9wYXJlbnJpZ2h0L2FzdGVyaXNrL3BsdXMvY29tbWEvaHlwaGVuL3Blcmlv ZC9zbGFzaC96ZXJvL29uZS90d28vdGhyZWUvZm91ci9maXZlL3NpeC9zZXZlbi9laWdodC9u aW5lL2NvbG9uL3NlbWljb2xvbi9sZXNzL2VxdWFsL2dyZWF0ZXIvcXVlc3Rpb24vYXQvQS9C L0MvRC9FL0YvRy9IL0kvSi9LL0wvTS9OL08vUC9RL1IvUy9UL1UvVi9XL1gvWS9aL2JyYWNr ZXRsZWZ0L2JhY2tzbGFzaC9icmFja2V0cmlnaHQvYXNjaWljaXJjdW0vdW5kZXJzY29yZS9x dW90ZWxlZnQvYS9iL2MvZC9lL2YvZy9oL2kvai9rL2wvbS9uL28vcC9xL3Ivcy90L3Uvdi93 L3gveS96L2JyYWNlbGVmdC9iYXIvYnJhY2VyaWdodC9hc2NpaXRpbGRlIDEyNy8ubm90ZGVm IDEyOC9FdXJvL2ludGVncmFsL3F1b3Rlc2luZ2xiYXNlL2Zsb3Jpbi9xdW90ZWRibGJhc2Uv ZWxsaXBzaXMvZGFnZ2VyL2RhZ2dlcmRibC9jaXJjdW1mbGV4L3BlcnRob3VzYW5kL1NjYXJv bi9ndWlsc2luZ2xsZWZ0L09FL09tZWdhL3JhZGljYWwvYXBwcm94ZXF1YWwgMTQ0Ly5ub3Rk ZWYgMTQ3L3F1b3RlZGJsbGVmdC9xdW90ZWRibHJpZ2h0L2J1bGxldC9lbmRhc2gvZW1kYXNo L3RpbGRlL3RyYWRlbWFyay9zY2Fyb24vZ3VpbHNpbmdscmlnaHQvb2UvRGVsdGEvbG96ZW5n ZS9ZZGllcmVzaXMgMTYwLy5ub3RkZWYgMTYxL2V4Y2xhbWRvd24vY2VudC9zdGVybGluZy9j dXJyZW5jeS95ZW4vYnJva2VuYmFyL3NlY3Rpb24vZGllcmVzaXMvY29weXJpZ2h0L29yZGZl bWluaW5lL2d1aWxsZW1vdGxlZnQvbG9naWNhbG5vdC9oeXBoZW4vcmVnaXN0ZXJlZC9tYWNy b24vZGVncmVlL3BsdXNtaW51cy90d29zdXBlcmlvci90aHJlZXN1cGVyaW9yL2FjdXRlL211 L3BhcmFncmFwaC9wZXJpb2RjZW50ZXJlZC9jZWRpbGxhL29uZXN1cGVyaW9yL29yZG1hc2N1 bGluZS9ndWlsbGVtb3RyaWdodC9vbmVxdWFydGVyL29uZWhhbGYvdGhyZWVxdWFydGVycy9x dWVzdGlvbmRvd24vQWdyYXZlL0FhY3V0ZS9BY2lyY3VtZmxleC9BdGlsZGUvQWRpZXJlc2lz L0FyaW5nL0FFL0NjZWRpbGxhL0VncmF2ZS9FYWN1dGUvRWNpcmN1bWZsZXgvRWRpZXJlc2lz L0lncmF2ZS9JYWN1dGUvSWNpcmN1bWZsZXgvSWRpZXJlc2lzL0V0aC9OdGlsZGUvT2dyYXZl L09hY3V0ZS9PY2lyY3VtZmxleC9PdGlsZGUvT2RpZXJlc2lzL211bHRpcGx5L09zbGFzaC9V Z3JhdmUvVWFjdXRlL1VjaXJjdW1mbGV4L1VkaWVyZXNpcy9ZYWN1dGUvVGhvcm4vZ2VybWFu ZGJscy9hZ3JhdmUvYWFjdXRlL2FjaXJjdW1mbGV4L2F0aWxkZS9hZGllcmVzaXMvYXJpbmcv YWUvY2NlZGlsbGEvZWdyYXZlL2VhY3V0ZS9lY2lyY3VtZmxleC9lZGllcmVzaXMvaWdyYXZl L2lhY3V0ZS9pY2lyY3VtZmxleC9pZGllcmVzaXMvZXRoL250aWxkZS9vZ3JhdmUvb2FjdXRl L29jaXJjdW1mbGV4L290aWxkZS9vZGllcmVzaXMvZGl2aWRlL29zbGFzaC91Z3JhdmUvdWFj dXRlL3VjaXJjdW1mbGV4L3VkaWVyZXNpcy95YWN1dGUvdGhvcm4veWRpZXJlc2lzXQo+PiBl bmRvYmoKMjUgMCBvYmogPDwKL0xlbmd0aDEgMTYwOAovTGVuZ3RoMiA4MzA5Ci9MZW5ndGgz IDUzMgovTGVuZ3RoIDkxNTcgICAgICAKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFt Cnja7XRlUJzdsi5uwV3DENzd3SW4O0EGGBhsZnAnhGDBPUAI7u7uCR6cYIHgHlxDLsl39t6n vrt/nbN/3bpTNVXv6u719NP99Gp6Gk0ddmkbFyuggoszjJ2bg0sEoA5ysnKH6lg6q7LLuIBt AE9Gfgx6elkI0BIGcnGWs4QBRQAGQBuAHNAawMMD4BYWFsagB8i6uHpDQHb2MACTnrYBMysr 278sv0MAVt7/8DzdhILsnAEMTx8eQLCLqxPQGfYE8T++qAMEAmD2QIAtCAwEyGpoGimrKwKY FNX1AIpAZyDEEgzQdLcCg6wBqiBroDMUyAywdYEAwH8dANYuzjag36VBOZ6wpKEASwDUFWgN eroG9LIGuv52sQFcgRAnEBT69A0AQQF2EEtn2FMPYC4AkLM12N3mN4Enu63LH0KuEJenCKcn 3xOYpgsUBrWGgFxhgKesmnIKf/GE2VvCfueGgp7cABfbp0gbF2v33yX98T3BPHlhliBnKAAG 9IL9zmUFBNiAoK5gS++n3E9grhDQHxruUJCz3b8YsAEgQDtLiA0YCIU+wTxh/+7Ov+oE/Lfq LV1dwd5/brv8ifonBxAMCgTbcmBw8zzltIY95bYDOWNw/h4UZWdbFwA31192G3fXf/g8gJA/ DWL6PTPMTyQsbVycwd4AG6AtBqe6C+wpJYDpf6Yyx39O5P+AxP8Rgf8j8v7vxP27Rv/tEf9v 3/PfoRXcwWB1S6enAfhrwQCeNgwUoAr4vWP+r1hLJxDY+99E/z3QAPgXw38HogyzfGqDtLPd kxRcHFx/GUFQBZAX0EYTBLO2B9hagp969Meu52wDhIBBzsAnLf+0EcDOzc//N5+uPcja0fl3 0wWE/7iAzjZ/Z/4kzx/enKpqmrIaeqx/36Z/ojSfVIfpers+EfuvOtRcbP55+I0hI+PiBfBl 5xbkBbDzcgk+PTYuXoAwn7D/v8n3B4j7X2c1SxgE5AUweSqai/tP6f/1/9fJ7G8w8s7WLja/ 50QHZuls8zRa/zT8dlu7QyBPiv557U8l/+P8Z8iBQC+gNcbXORdr0VCHtPfpsGqSD4Ojcia9 3dyIg29ci+p083ODKl26AtPC14TLXj1UveGoHxd5bPGe3Xf9uanCsvW5mxjM2JUCPP5I6U/L 3JOLt8LQJsi6FcJpXoSVfmAQ7Xsyo/oNyViAS39rfVRL27zwAYVqvI0XgnZyzRxE65EbREh3 5YodYJ1aG0vUjlsPh1+dt3/AkLh7fcXYP/RpcKDrFLlnk4I1OxadXtQDCYshKsgtm0LSWK/M 951VIXdif2VSd1iPHhPvysIpccM3XoDxDnpdqfWi70ENsBESHOKrdG++dITwsaDbS2PAn+/t YkEyoHWRYuM+Ndk2nY6HcvPCdixGMiCmV1nlOOj7io9SYRj5ZcuP0VIVzu/VfGn7w2OOmcKD xWcb2Sht1ZYTHH1BeRx3X5riUl82jIpXoScoEuqnQK08V/mCJRnL9hIRbhzrpxLzAkNtAwLF Hzcn9iYLPQog0ZUNLzgvsUoCYLVjB9f098OuRB/DIygjBR2zFgpl+mtCa9rOzz0K5zaen37m V/sWJDwCuCsb4ZuBvReLfgeCjNegNBeUblRKlVBTs+Lp2ZNnDvHeuDMNZbAi2NeLSIRkB4ou WI9oJ6NCO96jci8rJ+hS+e/k6A0DV6a4A0mQe7GoE5kpRulVW1tlTBFZRYmQsaQXCX+t182F HuczoRvD73Gnzdwo1wpXZHlfaHIiuFXdYzIHcvL53mcSeIbYuNjEesJ5NFsYJ3wY22dE5JUE kTaf0lsFRmma2sdwnRmuTlZOsIUdjYX3JigXo5FwQ92S75oq2nRhonNAPDK1Y3ri5Pe5qPDf v0Jl6EJSZXTjr4YUnw+VxFhjQdXKySDUz3jkeD7P5zRpyUtGXMNF5fn2x6BxH0uMLOTkJsyJ PUQ8Y7pKzmYuF1Vb8ioMF02AjPPl4BezrHY3NkpvJGHIRqJHT3QNIMu1aJT/zPJZy/hiDSC6 oeL0fHAKyufoobJbKKEUBBN83pBT/baqxvL8C400jpqDemqQyp5yRzxX0hQ32tB0qP4pLv33 KWVhvJeOEwYZiEQDnGIf23vDcHpyWu4jBSs5ezFxZtRoLHqroIFfeN+jYulu2yDgS6FS2ppt kmDdkbKrC+m/uZfOXTAMryHMzvAA15+j139vzY0+vRnF70GmJgnkiK1m+ABXnD90Rd23r9kM l5SYQJWAbFu2YYxEBX8WZs4qYaCSneG169jQFO4m2QxHicSfW8XcWRXFb1T4iVFp2E8nAb5z zcZz+UXL3QhlB/OWjTv3VVLXjyPPotBAPxh5phj14483BcV+Qz/fKhsp0Ok2zAj367fp3QfX f7ZTP72GZC6RwTKGM6fT88smmO4ZPn2NyOBGXVSyhGvKmV3Mk6JwSJ9jFRs6rLADBl1IYi2p nlK8Yv0g93HuCEmrm2o0oTkfHsOiRYH3836acalLDxJBHrRkbWXcGbMWLtROkDFfLfGHPXeI ftHldZQAbQfPqq3Hz6xbVNvw19u+M/s5FPIBWr5M9PumIKJ2hpp86/OzZYUVVS9FkvfdZeEz cB9JDzCX+yPaPy7tJ1W5CCLA+L5zDAmQAk11z5qjUYaYvER2Ntg+/RBdlnLWKyjHRhANf0GX 1MOgFaHy7qs/Y5gv8y9Mxpj0mV2KwWLsYkaIVr4DsrqIwkpUh4fP9EmnYvawiTtz665jmpnj NkH+F08mOpPK7NKjQbjqE+C7yfyFDiPV50ZoSisxdyL+zXVu7h8ifhyouSXFkde+PenZ4/dk iz8skT9wx1XmonJ6hVByrEJOuuqQ2qgrJ+GLn/pQbinC1yCYxO2ls6lDZeE35rF/erqanYlW 3LPiE+CL7TktbSk8LwvGnK+gmTrLqdx2FyNOYelWoZRpmHURqJncAKLQfKlTrOlA2XLSdvne j17rlq0P/nZtWOgoRovgdgs1vD4RVdS3C5+Z5WZE3TorQXA8N9RCK28t8tfDTxIT8G/pZElb jqVtp3211e/E1JrPJaahnPBl8RcjPI3c/jJcvQij4zUJ7kUek0IKg+IN+BihggQR+/SNhunG AZFKS9D7/kJXKjtgSy9SykS7xqSQ7jtSsci1rxPSlR/mcXEPtQdaxiiPcTrHndM+Do6bEefe hTgEgbG8qBpzHvBN/IThlaPCkLriWMjwc2zLKkvzNYLtvRNJ0Ov3ceKibGary36htCmW5WR8 xpXXAiet19vO01gdsLZzZOOTMG8ibsUTkJCbXI6lOcDGiKlKRg2NfyylhJhu+nl91ymzahMi Qz0W9GtempEi7o9QLpnsHIk2KrnwkKS3LSogKOyh1swqyDj+Ptv2Hrchag9rYzTbZ8kBbAT0 YyO/uaZBPC2SttB2YDvvcQxCDe03oLHlwLFyeXOmwLhXIPTRbOPGJFjlnXBku2UcA5plVlZL x5a7STcSkXuAyLU5FPwrSku7M0lBhSwZDdH5inNNmWs6xOWjmAQEEd4g+S51vmTzWTir+S+2 BmizRFuDABZkvyBXCs3gBhF/Sp/m6zHAYJLlA0/pbJd4coJAdzpTcvNr7EirFyazpeQGy9jJ RMw8iq8xdrh5dloq+biy/eH9ROoayWMt2ecVsKcHh1p7NHi7Ut/WRCtM+IpIeXWD+m1CusUZ w1tpX4l48YnG8LFxBdYW84WcaRJncVtOaXcaLI1S3EUfieidjlljFOKkms1QmD5qKfM4nXzq qc1Q1WWciYmobOKj5gufCdb4WW+HLl81oCTbGvDpNCauuu9TcP9FP971eyraYp9F7un8aLe4 RsrqZDq0WWTqsmiDGOxZnpLsFl38fRFYh6lyoDCe9Bm6RkyZ6tAz/HWcyIM5SklvHMdn4nN3 Ez4S3IMObpolSoVT97iymgRXU/eU9UmeHvMaTQedECWnhABleh2G0PyS8z2vQRP5T4Fp0529 LLm437uYP8/aQlxhhVUVkzeWvDcmtlS5H3g3S0l7R23sXV223G/DlCRGvRXbW+hzCq+bdZAG HLq8EVb234sZfwuMTucZywiqyVNJWXo1b1VBIYXNJAO6zLglFYO3xfOGY2z2wUE4vmplAJof zISTWwmXgz38whszvBMwa29Y5Ut8fuQvGhxdsLxaNFPJPVJH32BRWtZ8dcO44+GWwf/ryvNN XpndPJlAzxfpK9x0HnJXzpz2wVtFgNkuJzVDimWJ8eCw/s569aXcEQItVN040L7FAS8UnQqf pe25UMJO7Gs/xxhHlkMJPSl63qnmnYiAlRLpezcaIhOCIz0HYy2+ZtMrqjXV7A8XhdsRScaT swe0m+cvuhZY11AXWGnH8cn0RSvORguw20DUG4XWfDcWVTUSSauMqfuaZssYhjJjhdtbSi+H gwthPzjGMMb3tSgAM7PX9MB+SQTmiGX8xC5k3mP3F4LCtf04z0JjLChNSwpX8qYbsJOmUPFF TJAfygK/YrNkqFeTuUTLrJA5rSO85LI4VgtoXBKiLyONxesehqPYm3GsQ9GRhYdNaW/cAVxr MjsE3RwU0cROSslHpENPPr9gSDxmTsMF61KC9ZIM+JPDCGVMjSQsqGF7dCPuj4VCqDK7IC9c yV4cV5O3FjV8uzK5WjQHni7MPxCPGGoepiwITHGXte8xsmrspmzs3T7PA/FlB/DuXgw2h78x IL0lVs9B/DhJobVUgcRa/AguO11tSVPoII3EdebPJCK1Sf8UZaQhr8jutfzsWeuC0hEyJ/cI Se93LHtlfCV58mFrCrLHvoH17A3hHuzGBuFEhjFTdK21WhzpRsJ+SeOxeIZUeJrqU8dNDJ95 OSRWfQOFXrxzNAJrzICdZW6kt4Laww8WcezOcHdU7Z44e1EhbwsIQ7kgBq10zsv+yg/JivsO r78WlAEnyOPcv1wRhlfA0D3Rfm2R0WkLwDGr7Oq5v/wMl2ZsYPOM1RK5dmoo5WqS11pd9AoV q6Lw3SzzJl2c5o6GPOXkTsHlGQs9CvpP4+pV2ig4CikTZSeMiJFQIamAzoIcm/CiEVeYp0Of o+w91U8HGkpJ6eL2VBWnHUSSr/mSDSAeZc/4yk+cd2JhGghoBhHpetbzNLZwR1oasX00+oKP RXlIAwk8yB3KY1YBzAuEm9b871xXfQdbH8cEfZWsxeHh013BqyHYHVvcOagL8/ftYnqTqCYu Svlw8ka6sly20eT3nCsqkOPj6Fx8MgAunBG/EyvbjKxbFUsX/0m/eso13TpbLOZtQCUdx8NO 8elr2cy3TM32LQ/G1SXYSkCOzAnGw1CMkekfqYdeN5cscFLPYp3SmE/66Ttlhdt4G9A5xEKZ H04qYlx0KmJ2huNCuA5EV2zCmCbuyMxprUX6tBCeOe3fOPKevwODT/qNKvcMu1zg7kqRaA5y UapMS1wmVUvwxlg/prio50GofH0Qu0O+MDRrh4yE61hhYpVM2D6M/4xUp5aiXSUvEifh9cke PLaoKxExPVGiTyX9kIfysj4gRWxfTDW/ObHhlXGHmuMr1J98QmUk9a0+Am9amriTpWQo9iMW 8ULd6WiaLuuVRUzeTL1RbA6ovoGSTi8h96FYdPZ9b0jv998b2H9mgXwbJN0jwpLG73M6uukE KtlSfCCubY1nJTLS7RZPzU8qsB/0OTyNb9fBqJUWkEnh2/SwM+Opf/y+fBRBG6q3quaKcyUW SeKwaFJbo2QWQ4DEED3jtgR+JJ5+JVBpydUhrhFIS1JlQEz8UyI/HsX74CfCj2gU+UHZ8lVL xXgdFXGAS8FDdg9E/pc45pHcoha1dEEMmiECtDAcjxsDqRt9N4E3MIPkGEFo6rF8tkwwtrHZ JIpohK9ywUjgTbyXTHqRWQ1iX6WbK63mHEBpMvmdwLrfiTOiv9+8XaVmqEghrqFYH+mgM30B uvG2X9uLNFZ+LZtUJqT05vWw/Ij7yPWOBAJvR1L2z5Zs6ASRWkxtr7BhIqZFD6OzloP+7N8a 5AmtcKKRUCv6lM/5usWmMhsbfx724L5R+5jptk2JpnzCK8HbA9ZzeOVTdV/PNXt9SVASLKjk M00jl4SRB7sdGFe4tJIJt/k2hLmHANSkCfMxAw2fET0g7nrRZJqsjtlxvAiQXGxkcu9Ydfhu XdvaTEw3j+L0dkS974qdYTEfe5dvDGcVB4rB+iw4aEsoQ7fZZPDDuW/0mtfIY6UK/5HpgMRG bDCmsuoqrcRCeQCIQaH0NqJcBeZm+uBRc2UIXP2uzm/TfKHp0ynZHgL5FQILQ0obhJTqTL1Y UG13pvPC5POTKi2gHg402O0wow1WrSsuH+43HY/nWwfcLA8dwjQkRZdYeuWuyngdSplDOBAW qsd2AU5vtYpvxXWJtcYQ/JdSchhttjXMUyWutG+vZ3w9O3jtx/Ry1xf3QWTvxXh1Rk8831vB acuqpGP3wYPh6SR4W3BmIxaOfTbZqM/jZGol0ZYJgGYQ6WOoBG16wY/w+QEQdUqEmifokmKl 62DjuWl6E2upYbEHTcHjUkdtd7Gp1RCucgANdtYg53OSj/UVdzA0Q+Skt9K3jDVNkbtMBjeq RWGf6fBezrVXW4TgTvQUHb+Jz0vhK4Jh8HyNJK1PKfd8JYu3r6KvDDz9Zt8+gF3Gmtn2pnxg sUXqQIJo3apKxvqTTMZ5d/+M+fOWJviEZzGLk7O142Qvtr5NWJs0wFuevmlAI/yugYMUrBgf CCIQngl8Q/9l4DFGjEkMIR9oavD+jEJn8qdgOtie7jOaes5wXUwxaTplzkWdWwsRX6E9GO3i ZmUOIkakGoc90v6FBDhtNF+HgAlcus0tszswEceCOjhy3SQlYhQKQSaMX1xNz6DZV+0e80hZ zKavThrF5zhStao3oAglbucdSMx6mLBLMCEVtgqjqGbeESU70EwwTSQiGrHGxbO8FaXISksj XuOcMa4FSH1SFenewNMi/35wP7AZqHuUmyeuArI00VuVOsyW16kLeCgWelmW4oJLDlko5vQr pmznA2HWF/I6gZlDQho5i6YJp7ZXsiv7kNLl5ARbtgdp2DGDOjnlVX7JZl0DVaTXdOUrzQWs hT2X9OOc1ML5f0pXXUaCLo+yZRsxrib9d0WwQkoOCs5Fxs0SslOuLI5v87YbdIl7YJJkOYg3 2Z4qDlCjZG/KMlDy0RUJOAcv8buatYHpy7WKjLmOrSG7MWjwdcuQOxVyVnPBhvSYSsdOzQiC PsEWnysriDlKwMYY1BJKu5KjQvpNF/f4cH1T6VaY1YYXfUbx1EbFzak+uEEdqxOvsOKGz9fw VH9vf/AQ8cb19RedB73arzWhiR/0TaHxC0UouEPpZopfxM0E54NlqM6jAHuKfHlqk+iZSjuk ZMhDbt+OqwOdyJlWvekLk3Jl69un0mw0ohQX+NzPKooz5kULyM2dWiGMsx/7a3KIs2PjAh+t XpIfGefCl4H9mcpOT16oWqh/qAp9zsijmRfumaBmVu9kfO/VFVw6506eN+D6+FMo+OATId5l NmBwZWPIDDw9EGj5hol9seTUfrtaUD8y907FzlHhBePxSXXsQrkth4e/YJ2gJY1uMJ5v3ARO 5Ev421OY0reh3sRRUV4uan2Cej/mcXM6MTTLbUbtBPjTImw6MzltniNpBtAWvVWuY1TRkkb9 wGGS5dXqmW3M8czD3habhirgWf5JlbfFGkltrRo78O7TtCSf4Dtn49N6U4tA2RlbGZ3qLD3l As6r/IvO8aXssbHbUSnjY2/GaKlLm0anPpw2g/wYipGCl5NO9OVSmEetgtoWIcH0LW9x9ac6 gx6qd/NefkgYWNj2R4iKEA4ZVJViR8It4Jna6FYMR0zYcYp2wUgifVM4c8NHf2Ejy0dCZtvQ fjME77pG+BjLXfCTfwR2gvNRzKlIzdOpCpUglh9k1MwTWAqep9w6BN36Ui2bfvPXIkcSpZ9R 9D197GoK2mKt9pRsckD+FQ7lmmyb39/OfAVMi9NAZtE8CX0hhxbk8j4S66LQ7j3zD8VoZ8Gy FdOAApwbTYV9W55fAfqM7+PVbFFN65b9v6n5hUDpSi8X5406hGmIpLqZA3s6PrRMNUTGr+43 6JMGNC+5dpk+PF8n3+xDv81YTGWlzre8RUVIaiCKFb3opfpldqqI3cJ/1RlINzl8Kzt6UWix HzEy926+xwk+xdVrNrRCgfzLgpmedMhyVXocO7vtLXvR9cf3yuUPbgTESf3I5+BYt2cKPnUw zkudUJYLcYNrVFLl2AVzn/T9JhnxUj3jzjUPJWNqJbgCLpEvqKLXdgnFTYkM0FYKT97jAjhc DmHtBPxGc3dgufEPgEBGuaiRVoPBHJsn09zGqeiakXBv4e0Z+zzXvnD765S38ihNU13+5we5 ELnjVRuhxSy6ZTKvqgVvviqTx3K4o62lZYsynSKZWKZhl89Gbc1yiB66sJCPbZ5R5Te8wjn5 W6elZC85PxuJ77nWfn79szor3SZU7vWPtUF49yABvfQVLpo+l5UgKZH9memvdua0B8d8N5vj dt2N4A9I/YY3eHF97xBfvPYeSvATRWYtPPKQ/xyPKfiglg7OHgKInx2tNvds4WMJ0eC1CW6y Q3po6O3YH1lqORh9yS/j8f2Kc2Pq43+GxrsxPY/AtCMFDyN79LSTO4VTVIO/bMBbf0p30Da8 YeGOGIxax1IRyoPTeiRcVUPCkx8ON5Kce26MNRSQu1nKDkZtZ4bd4hliJCs2jjVdjE6rV8nr nWsE0daYu2oC8X0py5rV6IQ7w40cic3NCsOcMbaOxL2btpGG8Pf9y2P4NSj3Mz0mcQzItg5O iSz4fn5tU0/QS3lUW0wED+IDCF6klj93CmddjGYA3VS7ZdJUzHI09sGGMyXWZwkCvfwTKsPh p7Wnb5DRn7YO2totjXJQt75I4Vi8H9iTimpPnismo2PNIzkldoQSo6caqeyKwiBMEuMt6464 ORlPb1PmF00tyXzCHMnWpltDpoeC0Oi5qyIZ0gi2t6Vvx7RArmR88qIQYRkV15gALNP4F3fS 6AfvVN0IxhTchL6AyG6MsaSwXL96xH0aWmHC2OHgTQ2j2y+M/e6+T6STpumf+tP8/WHf8a81 nTdfv9ZDNnkBwDaS68b8GbvsT9l9iS0xNUR5XJ63GO6ovAhtu3MV+l18OyMfDqdlvdMVxxaa UX6S7kJVYws46ZyrseLTpc97I129R66MZ/1nrgo3fVBef/sCJYJvsLeWMDrFPWmNxC2yzkRs tGw85dHGgmOo69syJKquQHOQ/hTZZMpBFc0mj3KEl8BpJrqyFw2Lup/U0OSjKqoT2m/zNiwA I5K2oPeNRwXWjQFUrsYK7Jl3N6LTYgb11snU0KUm6VGbaVsxhDUlGey/cLImqY67R3NrYD0C TsbD1gpQygZ2F+BPrRObnr8kXVjB43qWyOGkL7FQCndcLMeFMLHO8I3GQV7ocO6QpLdgL/0K w1NUn3DYR3DWbpC+BMVZ4taoVh75lGd4N6BA5zDZbovydbVJl/m4XzNmDcjC3iZEHEvoTBrn pI5nOu+HMCn03Xa5dcMVMUzk8XZjbCAbbFAmHBGBwUKkss7bGeGASbMc1SXSstZkNzWms7q1 vqV1AxihK+fyFqIz8DGAM/kcl6vshzZY9MrO7+7U0wk3j3OJoYJBHLlCndTNh7N79Ssa+j3v m8uClZDnFIRfhmOE2B7QRuXGSPfM71dGXyr7kFuY6NVeNxhV3xgy9VR+2BPVi+mOQrMI6dg/ 2vkszJd2ODaC6uDQxu4GYqhIOfM1e6ZpbKY968L1WflClAa5vAnhVdEjg5JRLJDqkoNigs2t cXmDttBIJhBZllUp7qW2qVkdi+7m3GyFlBhFtTC/AiHcXaeHOrXWTczVcRbU4GsQZFI3+7MX 3cZq4aLXfYLgI479j+zXQnL7KCkcXPiya6cBKu01w+5p8Job3M0H31JW6erq54yP95yItzNT A2btlLYLtGkWx2i5kRCah3+x4JxezgTr4o9rxW/l+frVnTjR5ODwGXLpu46qu9ethYmVuM8h fZ/MjWdWcryHE8ixGuS4R2xUYkP8Gcl+0ihIeDyWol0T6CvqOmQKP70QugaU+rgoaYczRRON lK8qEVmheR4hRKJvYEaSU479Q+UFCB+b95FemfXAzeiQn0AOgyvSkSIB2fWaQEaDTCKTgyb4 gf7udXIFN/ichVjrDnN07EfWK5B7zBn2PBaZTMfDmd2MXSpsUVyBIPFj9GeeKb5JAK0yAZ11 RpGeyqN4UMTVnEBVyeTEGHG0vM+YTGFMfgLFc6ni4oogWCkpGn3jQXNHLskd2QiK8EjXBe+0 RtMLgiaEhROryeG8mx72YIryYsbFz8iveDHPy1OEQntblWfAQ6MraZFvGunfxweOdpC7SM0l L+u/3vH46FBQf4kULU+FJnx+XSIpzv2g0axaq+fE0e9wsHzqL8VJcl07GvrTbzIrULcw4l0f kg2z0TKbwEXcRegbVdEGwR/Mw/M6kRcqaPyguJaYOOe9jkOHLo4vvd/dhOc5K7RsIRmmmlge VbmzftXVJeOVv+6/oo4Irgpk5wbCLxQYk3aezBLq2T6/xNHv7MxukLzwRXSTq1TIbozWpMbQ +A7IsDdWVROqIsnkMTAyzKgLRsepHKQSe0HIENQ5HcQJu+mlyHd+LQFOQOugtp4u2jYMXHVK j3KiVt7CmLBUSknasI9xwO7etri3HrRTwG/gXeY6BMYNisJsD0l179Eevmr5fWLhRCAPPhnJ P2UI4+KtnBM2DEdCD1vV3SQezbZc/s7Gv0+2LJ73qXt0pzLljOBO8P6d9jDtREHcObzuz2wq XT1aDYExiNYVcjS3j6vYtUEsor3gyCIZf9rLHPGz55luRsCiIdjz5q0C8Lbx3soZK+PXkAzG kbsbLy++H1iKmO3DE6nuX7Gov9kE2zGGUMV+J4yLECgkiJmkzEXenYQCaBTKTl3WvxW8b7e2 VVKIRssJzPV+P/csDIO8E2uqoLESv+XuDlhFkUbKzJGPgEg7RehRWIBNo3sz5L9g/nG24bid 6nWGEqqQ+Q1fYDWF2bKDuYXVjYpG71BKtv4AcUuj3A9ZF/pn00mvpG7Wx5DqUIDh8V/bX8+F Rm6Mzekn0yFI5248H52ghaeUzBrMmQyosGsV9qVUMLf6+uKgnn+H+63F8/VRjomMgBWsZRXa LtGgl7xgIKthVmisNTeyuniHaFXh7HQBCm05zQgjCY6J/RVFM7Fb4UUVKRkvNxb4csaQOWeZ pspV2OHby2QfTlap6R6FKXVVPrxSjDKvdlxeDVvOrz3ERkyozFHtXR6Y4ievzc5YVZbqLsNS bOEHhBgqW/kpJ2ndzLOlZGxs1eky1twRXAufb0/Bv9mhkTDIYJumE6c9eJe0OzuOfv+K6ggG YWSMV7dl0hQQ11RBMR0lboOD5rJHkvK0cuiz4fcmln07P4w22XvUeTGbyoQxf8P53Iw7SHy3 dEz5JuyUToHWcLFkmTtkKkuZqnTKdDe/9dlVXCoETWrDgAOZt0z4dGrvpLbFhh0WiEnzdVVx TdYmETKbBX2YHUvAHq1G0gm2ep1a+hqCV9TiwRTLBZeisR5GFGW+7Zi90B6PY68cUnR/hZj6 JeVV2bUpSYiaw3uDyW/5EY38ldq4mAe6NTzLvDim4/rhEkxKL8VUsvbjFp5HpX6RwLOvo1fp iUj7xfRrt0c/G7dIyRO66T0+GjiAmGZ2oGE7kyQaHke6MKLP5NQp4Nih87xD6gqTeTTwl633 s8U2jwMvkzTXTaHeDySv3zXSQn2qqyhbZiOc1sfgC8/p+3Pw5GsJ4sYtShSPP5Bnjn/mjRat uW/9dnSdb3QQKgZ4P/6LlDGe8L18imibFhXh4OXHxyDcl/j+24xxJQqzl+ThulPWPzVLjuvP hEauN0uLW9e2feEbcQyYJk98lL7Jd9YuPmMOe4bDKEBfGVuBnwHEP2WziDRabAa7pS644xqy Efa9y2iunlt62wl1vXhEUP/QO5fA76PdPT6sVw1fSdDIXfbwOJFbzKRU0+NbkiKe/M4Q6qe3 20uSn20+6uZpyH6DORBeHVqelQUpfJ+gVomgo1pDPqvBBZFlWrhA5ffbQTVGxzRoJ/mA2lD6 WZRK3VX3CEPoUAg8hPvDT1On8+Ui3G4In4e+xyqhc+2RSprmzA2EuPzX5cQ8fMGiZmkPgetR fI9CFtf/8ofx/wH+nwCwBgMtITAXJ0uII8b/AZ2Skh5lbmRzdHJlYW0KZW5kb2JqCjI2IDAg b2JqIDw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBlIC9UeXBlMQovRW5jb2RpbmcgMTIwIDAgUgov Rmlyc3RDaGFyIDQwCi9MYXN0Q2hhciAxMjIKL1dpZHRocyAxMjEgMCBSCi9CYXNlRm9udCAv TE1QQ09VK05pbWJ1c1NhbkwtQm9sZAovRm9udERlc2NyaXB0b3IgMjQgMCBSCj4+IGVuZG9i agoyNCAwIG9iaiA8PAovQXNjZW50IDcyMgovQ2FwSGVpZ2h0IDcyMgovRGVzY2VudCAtMjE3 Ci9Gb250TmFtZSAvTE1QQ09VK05pbWJ1c1NhbkwtQm9sZAovSXRhbGljQW5nbGUgMAovU3Rl bVYgMTQxCi9YSGVpZ2h0IDUzMgovRm9udEJCb3ggWy0xNzMgLTMwNyAxMDAzIDk0OV0KL0Zs YWdzIDQKL0NoYXJTZXQgKC9wYXJlbmxlZnQvcGFyZW5yaWdodC9oeXBoZW4vcGVyaW9kL29u ZS90d28vdGhyZWUvZm91ci9maXZlL0MvRS9GL04vTy9TL1QvYnJhY2tldGxlZnQvYnJhY2tl dHJpZ2h0L2EvYi9jL2QvZS9nL2gvaS9rL2wvbS9uL28vcC9yL3MvdC91L3kveikKL0ZvbnRG aWxlIDI1IDAgUgo+PiBlbmRvYmoKMTIxIDAgb2JqClszMzMgMzMzIDAgMCAwIDMzMyAyNzgg MCAwIDU1NiA1NTYgNTU2IDU1NiA1NTYgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA3MjIg MCA2NjcgNjExIDAgMCAwIDAgMCAwIDAgNzIyIDc3OCAwIDAgMCA2NjcgNjExIDAgMCAwIDAg MCAwIDMzMyAwIDMzMyAwIDAgMCA1NTYgNjExIDU1NiA2MTEgNTU2IDAgNjExIDYxMSAyNzgg MCA1NTYgMjc4IDg4OSA2MTEgNjExIDYxMSAwIDM4OSA1NTYgMzMzIDYxMSAwIDAgMCA1NTYg NTAwIF0KZW5kb2JqCjE3IDAgb2JqIDw8Ci9MZW5ndGgxIDE2MTIKL0xlbmd0aDIgNDM1NzgK L0xlbmd0aDMgNTMyCi9MZW5ndGggNDQ0ODIgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+ PgpzdHJlYW0KeNqsuGVYnF2zJYxrcPfG3SW4uwV3hwYa9+AS3N3d3d0dgrtbCO6uQSbP+86Z M9f55vszc370dd27qvaqVbVq7+6+KUmVVBlFzOxNgJL2di6MrEwsvABFkK2Jq7OCvZ08owrQ whXw18iJQEkp5gQ0dgHZ24kbuwB5AZpAM4A40BTAxgZg5eHhQaAEiNk7eDiBLCxdADTqKpq0 9PQM/2n5JwRg4vEfnr87nUEWdgCqvw9uQBt7B1ugnctfiP/rjapAIMDFEggwB9kAAWLflLRl FKUANFKK6gApoB3QydgGoORqYgMyBciDTIF2zkBagLm9E8Dm3wuAqb2dGeif0pyZ/mKJOAOM Ac4OQFPQ321Ad1Ogwz8uBoAD0MkW5Oz89xkAcgZYOBnbufztgYs9AGRnauNq9g+Bv3Zz+38R cnCy/xth+9f3F0zJ3tnF2dQJ5OAC+JtVSVzy3zxdLI1d/sntDPrrBtib/400szd1/aekf/n+ wvz1uhiD7JwBLkB3l39ymQABZiBnBxtjj7+5/4I5OIH+RcPVGWRn8Z8MGABOQAtjJzMboLPz X5i/2P905z/rBPxv1Rs7ONh4/Gu3/b+i/hcHkIsz0MacCYGV7W9OU5e/uS1AdgjM/wyKjJ25 PYCV5d92M1eH//C5AZ3+1SCaf2aG9i8JYzN7OxsPgBnQHIFZ0d7lb0oAzf+dykz/fSL/N0j8 3yLwf4u8/2/i/leN/rdD/P96nv8rtKSrjY2ise3fAfj3BQP4e8PYA+QB/9wxNsZO/59wY1uQ jcf/YcN/DdQE/pvk/w+OjIvx32aI2Fn8FYSFieXfRpCzJMgdaKYEcjG1BJgb2/zt1L/s6nZm QCcbkB3wr6L/aiaAkZWF5b/41CxBptZ2/7Se898uoJ3ZfyX/V6R/UWdWlBFXkZCk/6936r+i lP5q76Lm4fCX2P8sRcHe7H8t/sEQFbV3B3gx/j2BjGzsXwFcfxNys7L6/B+y/QuG9T/XCsYu TiB3gO7fkllY/1X4//z850r/v8BI2Jnam/0zK6ouxnZmf8frfxn+cZu6Ojn9VfVfJ/5vwf+x /tegA4HuQFOEtWV7U74gq7TMdJc6nNyRSXHdgT5WyJFgh9JGtaIC/xr7Xr+0sF88lUZvtcFM TdO8H+0eS6cO7/uydAc/+7BtqHtTgJf5hD7ktP0FaFtUnV/pD34wG5QipZ9pRnldLcrvQOlw sWgc7E4qqxiUvMEQTXeyO8FdPdH6k7sV+GNSPDog+5qmNsRidaE2gaHXFZ6eUSUePz1SD42N jgz33kD37xPQ58TCU/K5QSFRRfo75hAI6ahXeoXTwqQ3fyG46bj6INHs8TLIo6TAp4iwlX9V sshft+uQf0uCTu8Q4k9UcJJu26/Swr6en47kF0mc5pnL/dxwpZRwxuFvJpwKHLidtaYInMmE bSAeeYC4phlwDvOqs62he+1Hzl0YnVHuKm343gqzT8nCOBruWoUs1ubgTOmptyIqZwl8K8sO s4tNHnpc1DQR6Oybs649kzfL1Xeqy8RVYjptCT3BOmnmKjRuuhEfnJIfCWy+1lGckCYvPlP2 6PS9jHQbIKCIL3eHe2SN1NJFrE67Z24qVe9qlV9Qe0r62VPcjtJuSbAUlC1B4cuT+CWMIo4c GdtkIWs8VPfzdPAow33bDj2t8iTA8yTEdQibDGF2oRDof8lMh1ORT2EjYqtVNMzcSVVx1/Kk xV4bw1ueQhpdW+z4Z3R8DXk6K4w/QCAWO8ogpPMVBUGv0Y6TcX8873mBzM9pGNr6j+649csI MqQnsrgFQjR/Vwbencd4dCOiI4lyRJQriBR/9Ivk5XytSaEfeeRsN/oyJNuh88hRUONZ4e0R cXpiu28E97OSdKJvcizh6pudOaq0mjGnRhvqK8kjWrtZMhwhlBrj08d18PYI3mZU0KSmpQAp DUY2plNEITX57pwh3fM1B9lM7c63cGZKTbQf3mlwlQqCfXZfkP2wS+fcCFajZFqssxqaONpl BNeChMO+PEAS3unMijTfjsoa02v82PcjnjuGUZkNtEPZrZkyN3WMTbexNZyOak7icqZjtI0Z 6BSVs4tzt2ER0IaVQn7wYz254UvKJPhJ6jFEA2GQLIhAyQTO4jMFepS4KGIna36or8415k9/ lEaBReN+U7haZPwxPFqEDD/xDCt/N2p1AZnNp5U3Cf+9/8pTyU1WDsNNzr5FhJ9wkxpFt3x+ HN5N9qrcsRDzbvH3h9SbhKLLxuCSer3jiS3Y3DdworsGKCuGI9HIsjr76cjtl6bHAw5x7SMc yXl/D2LGyz7b6zJ8fZdVE2v0zU0LvXOty2b1MBeYOV3ix5+kurlqjAHYE60REE6Egv5MCC+3 MYo+dWX6iDBYgPjN+/3SMZXyQuWLMwJfzXcqcbH9QeFit9KUjAQ5ZLgPeqTi6QjBHl8zw4nV CGolOXCF6egEBr6Dx+nrnN9E3A16+hybLfTXec/m750EulNXZcQyh+K2heZ6b3ViDtLGAbyv bVLyh+bcO5VgEM9a6a4/eIAVCqUhtKenpu6O3xRw0VBcHz6XUPSwkPbchVmtZ+Ni4GqmIuco hS2urwIiI4UM8sxw71YU51SDo+h85HXiuHxmZyrA11vV6aXVHEm3+XZgtrlO6BPndl5pNWxg CPxwu0ehL1JsWjTIyN5Aw/7C5KuMOtcC0+xVGF/CXmn8HECLQT9T149YR3mprFmBX3OFoct/ YURLwBvVqNPzqqjaQji9E/wAFPgrax/A/7zmIBB+pnojl6SMZwwV1zCPmmQdmyx2DNsbQv1e /pDEvNSFQWHyBI9f6OjkK3TKd6S8xa2URfmLFExMdLZOJfAQy57fXEQdfWA+ZgryTDKt7MZH wzB2h1y9oKvclD6OTHYtuM7QUwIKLm0drucXfg1whwtzn9QW6QFPS2C9/D2LOj7NFidihFgT ZQbpp7RXPjtP+CQLtqGbcEABV8ZTvDwW4VdP7FPTVRPXnnj/i+ZiDNU+ZYaMc40pE1I+I6W4 gtlrlYsbOYokTzv5OzrNIjfFL0lO3TMEKUqUzRhR6wpYp57vvvedtpiLJsPByKZqb+9koNtT D2W0jSMXnyOrRxcCs5ANC1IffCijFJTjpLzoxuNe28dfgwY9BsHK9wGZv5d3jzDq0HlYxZes f4dEBXbSBp1h2I3r5N14kV3LHPNaBAa3V5yjlCJYHXa4763E04U2lxyQuI8lh+hF2vruK3WV DoXdvQaN3Oi7b09oHh2d5vuUDsyKWvhp0rtWXmAYGU1Y16almVGTRMgWP+RF9S+Zms3wcccN HDWVYQ7LrNUGrj9zXci5ePB+S/LwR7b+ov3jHRPHqMhy9/xHpbA9aKroUz3THGyiQrWGYE0x RxaKlthfANNjiN8R5/i68dq+6rFtIfESQfPZj+LhSsHEXEFWkiN2qRvVAz8jkqePCDOCNz2t vGFLhT4s1tp3FBtfi1f5GyFBH6PRC1V9Rv2c0Aevo5Pplw7OJT7QOO40V5oDg25D9Zh4lHJn VKtIvSAv7+5Zfk6RBOVP5GEuLVc0a4th7h9UtUJdnSXFCfFuU3HBUh11vQ0viAVa+/2XIprU SvttatYWKnR9yZghdyd8WXZLMHtzk444PKeaxmRW1TjG5KuSZF+Lol2lQDjgzL3QlkG3/MnQ Nk3d3+NfTqIrM4VSeFFkTTBoiFoeUGZsApk6dBkeSDX1q26FpwxwYco+N4RSGYY3yRDA0aw6 gWpWenRCaOZ4sIH1pejWz3Ctwr7SjAtzdakEFXlosRqeiWtD3lcs72uuZVecgykfagBH2/o/ 8TBdHsfLvzW3HWLiAh+DXxUFeBjqLmNFuZj6WGBGcxbHTEcBSk6simefS6oECJThyCXOWBSG 6o/2X8/HUipzpdIpXF2lfWOSsAlxWBExLdbosfaLr8AwHsklCQlt/VBaylvw22Bl42iz/lR7 CGazRWQdBKI+MWkYBBEIp5HFypq4nFsV1y/lRE7NcUOd0AxPvqHt4yfmOMpy5omI59sPIa1x ol0q7ZI/OngbTAQ/nIe/4Gi8+I1iw0UQxqpvU3Hv2OWa9SANSI/B4zHbh63sfNvDVBzfW4wr Uiib546ag1wkxtOXjjxY9dWoRUP3/Kr1VMhny6pMEjw/HxzOysqyp9+UXiF6arqQS2a7RoCS SpCUodW6sPfOkXs0iHTcMMRttpAZSBAfJzj5kzaZbTgJUiMwNtwP8DS+6VIQlitVnltm/Lud eN+jApxswy3vQ65wRKr316moW8lon+gx+fxdK9kuqRyWZuQW+bU6TKzyZEj5Dyx7rF5hIa/f Ld2wyBuXGrX2hsgCJfi7fIdnLKVD/D1fTSLLUdXvvLG/moicmwC0Vg7Qk2WGkxb4WGqWN2ZE Q5oWgZqrEYTvAWj24cIvyTer9jH9DMS5ujQLjHCepGFdCdHUpMYD2WVeB/jSYmYByQFfiaCo BsF/L8NLBywCo2T23MkrM2toaZIWuSlhtMHk0wnteNVwab4M8wuk1NpNx6HOxGkTaFlUf5IW 9jSOaJYqAHq/wMm7CBfaHyugWCZe5fSW3pw1xnlP6K4hpD06we1i5JKKvEKWn9+NvaeDpRKZ +CQxizKpiwUrOkaWb4btGOjIyJNgVlPrSLsPc1YEl/LmTc3TqZ6fiz3el/c/3jh4PJosJ5gG gLqHua2oLFimCHjUv09/JFb0WA+ZpDz/ydfqqcTNUp2vGP1++R3Moiou+MOE8nJpjlZW2H3N HFgEq7Yc6gBSvcP3f304gsr6QNpQbOFz8X6TUagaHTkiSmetRLs8E0Hv+TyxjlebySTOXj7C FiCWPaS+LDqU/XYtuVAJlp0TKzh2GiGCOPHeMUSz1eO8O7qXMdisxIzfJvqLXhX4WEXYEuGS Mi7+qYCzG6oLnidOuKoVq2u6S4jmsm1iDE52k9h7CFv3oxyOp+N+L+PoWeO8yV7CmKDpuXt3 pKnGK+JiE6cbVsIgkYzSrgh9SsRrzMKOBw6FoEkTKmbROa9Yrx10JoYDdun6rJ4ohjodErsU 6KDbUAe+/+WDzHaxU1fw+sQvEbGdREMBzHIxIEL4kz2RLiqrCXbEGyyNymAreoauqmrH2t/j qsJaABJ69jXA3aLy5dXZwf7PQuenmjI3WXFI4vbwcGJBDSGG8S8JGrO2ewPU0WecwFBdjSE1 x59oZpJxiEGWAgOrJDiy5evldhwNSUSdCM4ndATVMzUKkZgXAvPJyOoZdc/9EvsOmB7o/QLt INiR+9wTYvzUTPXSboxy6nBKzc0HHyUAUe2C4Tpq367A8Y+1CVobUCHZ1fya7VcQsAPRy0+V Qn5utk/+xTIAzKKIb+rp8sBQf++OeMsTFVgRGoNz5gKRNl/5Z+MVjmnSiYxDn32xefpk89t2 0csoBzlxCd+wtd9qJnDf9AaLhqYdy3Z9v2n1zgNnpJHLQBVZpFXD221mSqN4AiTG5UzJ8bQQ NC/bTqHmP8mjv6UgPvwoah5Ty/6+2SYAjCqt9TbHfSGpubXAhIaHkkfrjfi2013E3U31ySQq bkYY5EjIQ3qH34e3a/0t8y42NfrakK0K+wqHY8EAoQrK7WPSsfoOr0LpWrl6TY0tftJyxZFO DDNmFHu5FlCrVzvHTfYDHq33GETf5Ef6SnD2gnWBLuVT1FBszYBDr4ipPG7Mdu9H/vD9fY3A YRb6hmg6zXxS+QzMuPTcwUoOmi+sKo3V04CQ/RAWF/1xwbONElOTBfFo8FwxibZRB77qHBve R0aiO9+K7teVIBs79MkEriS9oLzv8wa0S37mMm90PLoJ3MQHuonIuvndn+htt7bSQ4JJxkIl lRGK29Ker8dFJaSzz1ipbEykrqFRp5uy6lFsvt4i+K113dgQW/7z4YpH75lOgbVGKeAdm7Ea hW+mX7gcUUmPbmtsBwkrIQ3twkS571ogT4PCr/CELuj54dDY/M0FknfrRDNQsidrODUJS7Bz Sc2Diux/bXl6JE/b+q+73vIwDbrVYP9qNKCB5zb96Xiw99H1OzRxCJoDfA4pw75giWFdhfb8 SzqL/HMrl8YQ9gATs+UNaJHiqp6OmBIuRyIpRFb4eesExcnEdOM9hbO5UvSMdvz1d2V6ZUls daDnq0KrcZIGbVpt3s2e33d3IWResCLdknmSLjQTIfoGAaF2SILtoAhLg1XPC+1UeVvxJlvX vcJMAGwWC5LftSFBqJ4A6X0LonSz+TtM+vtasFZfGfjwvo3qqIkpCenbuzhHeLplEQ/Fp8jQ CavxIeqj4OUKpEGAst8vf6KAobPJiovORugmmQDgRwzJyNIGec5vO3wBIQ+N5LRuCNz8kDmd vms6R4qk875h9CWqW48/HQcKM3ohX6Ki24fQl0MQhpSdiCav03pch78Y+rIS3SzxOm8hHxyY Gk9RXwvgaRopMLjhifzBgZscY/j88aUNN9mQuMy9rF6YFNsj4KYLmEmCtxVMschng62Jiaej U3M8Odw4GQX6cir76W7ViZLhEec5iprbh16LDLuHn4ZKDBJXwHtToNBo6zMMt7nglOwRo233 fSNdDE6rRWkqDCG0KFoaEWXCpySFwyFh7sjFnc+KOEbP4TRm+k4QDnV5NglolntShhpckXnl P8YcsOuRx0GR7taVbPdYQoLDfBaB3Y/rGqGScEy3UjTmf+jbkqGG9b+OrR7xkF4Hp6SFMuNK kNbujpx7TgwQ9keeY+AG44wR3KSsmuvSbeI31uiY6BtZwL7A2IEcS6VOcbyAIV9rXC9VjQp3 XvrdIuZ8i5TcbGM62X90YW0bAL4/ALNjFU99zuH5ci62On9/6N2FioZQvnU8k0SmPm6WcK/E EwzT9UD8c0J0WdOljMTCqFIkmhPhYzxQlSq51d4uPeCIN7Z73TNvTBVkvXcRj0DZIAvNHK/S RqmdyXHV9dMqjNLJ5NcznHw0fIbravap2VKp9H6nFPB2J6LhzxO2wmIdQxFF1lhHiUTGRcto uWVnZ6O4VebyYpVxwotHsfe8N82SSEtFSFbSIMw5Fb1Yzdy5X0JRWZ3asT2NDcx+7kQmb8XZ xLcuOgXuNJ3Jz1hFGU3GM+dS1fBHkLkP1Ep+5bbwe7Z7EHck4WtNG2CQXhhb+u8PtLuuatoP 4Wj9SpHThG0MW6hDvtT3jTrqdP+lKefY20cvfsKf4tntmBcmlggu13x8y7fLqPYBZFm/r8Wd sjLgFmx493Ncii2ygpbBW8zleajF0xwkcOBLoKb3cegGhFKrnxjZv0OF2CA0Otwy471+d1TS uvkhMBS3SNpWwuVdkz9Ju7kiqENLQR31vKwE88Ern9DSyRvsdIt8M/Ta18/usjTFeId4s0FI Jju5RuPwLmIHO7fvzE5r+FjISebEmIp2g9QZ0fElycD1ScwIsE5uG63oJZ2yIdTCiDhZHRxq kokD3RLqHc/Bj67xKEYnczEAkZCV2KhvH7EuX7FqPGjCsK8l/Fx8U/7Zil9YOt4bAOGmlKRj uDQFI4BudUJ3XYM5EBThLCCoDX1m5owpFx7f6loPo+sB/WeRIfsZsDPfDi0kJHZCkR/0QkIn C9d5vsyCjyBeeWJ4p3rMKepLI6ndJ/+Vim1FciMlfrIcf4A1WZP6hk+VB1SfO/NbIxBxEFBb KPCIHKFMi4ArM3OTjaPmjFAkgqxDJTWYwSYZsCP7W1t7pIIxfJ7MoWleTyXGxKaebL685Xnz 09pALb53Qbirsu1Sb35mD7M/kMKQwJkfR/XgzZX6vv/acR7tGGyE9bRyUK03ypUNQGDMK9kj ONl9ubZ/0Ny67xxuPnlUyIOZWQzkDLA/JY8XDz6ulj/W0tGlFVu49bGTuv+TArGVj6A4kPra apeJ1nNeMl1TcTdnoi2yV+R+nShYr73J2ECK6AVnUG1QQZyXJkauSdb8xT0McTJhVNI44xu4 XeH7dok55YDg+kLFwtAnPDYV1vtwA/4WekKGJsWUThpaJwIIMJELIX5k/tMhD+aP1ZHYVoLa D3yfpzOJ99RV4J9uL93nl2wBH2BBTHnoSoORMIV/pCjCrk6OakQvNBPqGfL0WLo4BTnfJJX+ x6jpfsAVCX/wgalBQgDHciDUgSSyzmH6xUAj/NkE0ONn6hiXg9CoiugEEzcMDFd5gTLmNEWQ pM6y6U9tLLqKSYl8ZFhM7DttG4cSQof5u9EjYzSXr9G9X6CZ1c2C7sVK+EFl3N7kw9FWRLtr FnxvXEBM7cLFRPwpVGtkv5fgZuTuNfxq5OI6IjIKcIczNBebj1pc6/g09mdfRNGSjHFNf1pw uXJKAwvL4PWsc3EVCwa8WK5plIm25PHNHxCmCdZvVOt/sHfU73+WFlMteIeY8mWjKo8pMGyV Hq5TAJpoNG6Fxji5OXneZjFKRdWN4+33X+yLoclQ4+qGkFiQ2w9rGvnethubmzbMvNCaHTS8 k2/O3PvL9T4eltkKN9H3niHoFSv95iasI4+xPHmav7sDZr1F1hze8jRQH3HFqx4AE+Hher96 xcK6RO2ny1rMOrPUG8DuyPrYmsHWtaVoA/q/UkhknmjcxB+dmhEXhujK8SCmmAZW5HofJIIR YCWRsBRn67Rt9cIrnISHVHXpuOdh8asN53CU/WKUEd6x/r1nSY4VYPme+W1NLNl+fo46cdKT byY920hb6Cv33vQxDrJgRa9CVWLjL9V0bF8ephdH1Ox9YEIIwxClXrjQd5kh0P433nHFFaut zbUfIUz0sMf06D9o8EXdZU8/MO0h0h+ESliCqZBsvGFo/aB/6pARB7EL+u0JcCa2EBwKten0 dE2zFUrlj4kj50Ce9XYobc2SlbFXQo4au7HsVcF1CCnTLA0E2Ev9LtfjNf+4qspKt7KYlZSx FfpD7e230cXfOsSefPzdVSoBmOPbIWnEJyuLCSYhE539uWqVJ6+APFTQtltVd3+sprJn+Uxg vW2WCYqJ7lkb0HE4MkSf56OHxc+wkkeZdq5JlPGebXuSx3KMq31JqETfjVX0cCAnKyCal/Uz TxB61TTGk7CFBRfffswWTypnCVi7YDdvv7UNL6dyvjxMrd6dH6OgK/KwxIXJSrNsrIjZTVhj +0AT/9E2UmJ/w4+0gwNXX255xvb3v8iaw349FcsAEJNV7DTGN39ofafadNvn28+KCURCeR8M jVi44DEP9lNKwmXXTIbiP7MfHwW9nDCrvnfZ2CCXHIxDlyBD2Es4LtV+Wt7K2zyOFt1BWP8i LzI8rSC3r7oq0gPPpp063PPFMSQ/Y6GTl3vC97M4FWPy59suKL2GWpnaseh6ywZhn5l0IVTS rT0GDj0MyBkmBZGim7lz+Fa9oVUaM0a1JYNP4diy18ll7WlLF6h0hVHguKfuUbCtAiBzF2HK YkdzGiwSfu0S7EkQkXS2eYt5aD//7bF0rBtpAKbR7XqrgQwKYG92E25WZxqSQFc3ekuL1zv3 4LeU/uFYUXtsrHnQChdOzLCEjGrUBcchKN8El9+BH0snQemZNtR+CpW6WK7MXRZpOYLWAaxc PtYyj4o0yyEXfHpela47+feUnKs+OGjepe/SEwz7C4sd32aEit/z6iX9r/3UIz5xU7OslF1W DjZNy8Ayk3ghdiZRDtRBWaLIo7lcNtlcCCXbCp6wrF938RzcqbqLRke6H0n8zdYPEjrfY0hS aLu5MHwDFRGBE/nGd1KNDsZJALgLyHgOp3REsq9tj0EgMC+Tx9GGsnfSfKg1mLbElY4tZTe7 rE2icsTbIqyE7AlRvcnpAsQHPjGbgTx9Y3bw5aKdKYAyPxr3qRXsNGc0DvhyMhMJ5l7pOF84 kRP1n4JwGtNeuLhPPZIuMeNrqX17wiVt7v0xmCr0OGLeB/svWkcivAM/IU6yiYwpCpvWlJlV jBtoCnZUH49VRyG1YuZWrZ4Goh5pOd3cJWRfnxmfqalC4WonvpQp9maYGxMouLhs3pwuPy5J Wr+flLVCF7l+dPMz0dX9iNbj0cMzq4wRt+bmpYRez6hLG4VH2rBMjC4VJHqU/LCPdWZ/deNt 9dgr8MmJQlSREm8E5YqAzCNatNjxoiBTDLUpo44VguOgm2yPl4iVueTSspQZ88yXt4cMd5xr dG67xMlv3xQyyDZhWAxL3B5LexalmdJZpbxxWiDV7RtwnA28x8Gh/2SP5cJaYee6ESy70Iw9 s9qw50AFWiV9v+Z7WOhEfwtGr0L36lGPRG1+Uykj9DoxjSe9ZLW6yPMeYGvd66bWVplRCldv h6qqcvAyzMrTB+h3B4V8SgqzCBjCBdvjjLgHQcm1G31cMh4fVxcpqIhpWSflC7EWKuepbjs0 8Sd1CldvA8Wnzz3x1ZVCTgeaR6/38dHGJT7nNvBDYdqDcYVbLf2/zkClIBtpP/ZQxTlizJLX CoBwsF5mH71fdS0ts98mBZ1feESJFkr0FwTomJwetbjEFWUxuZUwUkolRKUgbXsU9QuUfOKt OUXiM82/1Cp9JbLBUUPrftdkQ9N83u8Iapfh2WyJMVEGKfhDcP2h7qZWkpfuTz9xpx/kex3q 5fjzfQ4WSE8FrpCRyjKi/oUCq6xraSy0xUggpxz2GItifcE1fZAE9TD48gchjXPGA3ci7QdR vZRBhy1bGTc8TgoD7tXbCw79AEHx8BcOLa8iAttSM7UcLbxgzouDNbJN/W83haUSahkM0eta 5ERFol/HhGxUBPzfsnJ5/VF0KGSMvj4kOFFJD+WU0vdHXREeFceEdEUlBl7LmEcyJ6JZqg6h kiPcxcQ3J6p+d1MWPqFODHKi8u1taTBno/NyWFrdmn9DL/AT8FhUNJTYvdQEaKgxnDwT8+Jo DyDLr0jt5pYvowQgfrySY8XB73h5TgEgUoV2rdITI7pEOSEpejdX2pt0jr6lQCbrD7I/zhW3 7K4WkKPuvrLZajorha320lwwqGnVrGrq5bbblR1GJyZI0ruVxHRluLHzdVkxIxkM+NiWA977 5H6Wqwh77dAP7e+0jB5VJGA/cHanxR6m92Y/lMTZbIYp7TuhOGH7PcTZmi/atnncl94/i2AU a5FDtkE9n5eOHgmtKnL/dlObv9CPS3CgXb+f7ktLotNMbuVZUG4FhFF4HZSdzl06/jD+hQum /fwSoCvgtZstlhLoGB9hWj0tZ++EhpP6527LK0A2xfFb29BgpxeTQcsqBVlPRYyblOEnS8HS J/M+rhrVAQfW01e6uFzTX2gRA6Rz4ksZBbxU+qUrUbqv2wBIph5Jcx9M3pQxvbRG4a4mQzKh Lz6F8ECsuFEIj9wmFOCQqzlDaOw3OmkFdNPNRLP6tUkxLBzfnZLvn+A9jrm287D72x+nqVfE B1GjRh1PgttJUrqW6OqDVOJmb20BliUijnMEYm4QuIMdDodP8XmRqA7HST9U3X9c3hir+jP3 VBRYFBghNJZU1/+goAticYEsb5XguQ/Wk/9oaCQaVbm1HNqi6v4dg5AD7c8CCrYB590AYW/v aI9L12z1/rDaQV8OpHSh9L2jz9iS/lko0QfXEFXSUn6mXL75clnG8EhdPFsqBnn/M+X6jYuk HW57QztilY/L/Ya4ZG/vspb9G2V8ekIN9lRgBV4LKdRU3S8zsCPwBeEUVVhlwT+NhvsKA7oU 08sfVl9zeldjpkkzS/IK05K4iN7607i9VKMr3PLqvTlcqWIrP/o1oXW+kmtl7Hbu4OrCVJrD Q3pJ8NLrzcwWjuo7ROOtsnp932w6Nwzbs+ID4QodkUGQsI9x0B3nnT0F0LqUVGjRLWXQZ+/f aAi5Nzw9Tl5Hv04v6mbp3HDcMbLTe8x4phXMngaq2c5g/NEGoJpGtHL0d8JafBMpRU0ZRUSJ tZYTeWJtDq+WV2asK9hJfXtmiY88WzOBerebRL7Za1Ya7xwHdc7+Jv/QaiSCjd48x7XsF9XZ EeVY0SXYbMvCoywnP82WYvm6lVolRHDBfZxv90zw7ibsng5V1kL6UsqEosrGdCmBku3ASx6h lCUgKB47+BLRjtquiebdfVfytY24+XDVsvJ7cgT8QbQ+Tw5ae8FQbu4QFwqCG9xRPAnZdB0x VVoXOLJGgbtUheZwiWsQt/bFZ9BwlcT3LemD7SuRJYskJJDbwRymmAhQ3PYbFTeFWI+KLq58 b/e375Fn/Aay+SFpzFLrUmSmUH9akUrZs/uWE1BraArZY3tKv5NgL2YrRxUCLUQIfLSvuGLN UPrj40VAiPQsdLJap6IjM3Z5q4ighZfrHUrNdLecC6hjMLWePBhJRKE0yrVDYRPIIob4z2+B xK9RSkYqfH089NCIByJemUevYCuyv1+WPTJf6HfuFjf5JxbLG8gR64+1XZmb3bBwseSeMAmJ WHbP9S85G2XysESlaxoLFsCyJRkMIuLN33z97IaGFO4gFtU6T4tQxKpYWKkccq8D26xX6kgD aknN0AwnGRChYsC5mY+cwFLHDQlCX2OratvBtL4F7aPK/GlaAT78bByl1tvHTCuykcU4kGGY 5NRG8r2rM7hm5Y9R0j4o2CaGiN9KHSrvm8hLdUC12xnJJHq0EZSaHlVkiB1akCFeJj1qwr/6 6NTAosBRF7K1uiHSdrUUhuczJQKYsn4wpJeLp5lhUhERsRjBUD8ozG/exzcQ/1JaXAxrYp7S fQRUWx9ZBTCSw1FAqtkRJZE1+9LxaeLfaNrzNpkP9lNuTZ9V8zB6EVFGuseYmtrwzdwwM6yF gYutv/OjDW982eBh8evuLuBnKZnJIwH+yER3QIv0lgPB6TOU0WCzKMHghakS/BroH+Whkykx qdjn1jcwKKqfVf3QeqUf41Za7amVscVNkHjS6YwMrnwLlJaTUMKHnd96mSW3HVAnr+Xf3B5k oGKV5Ctl3iJBtSLi+nW0bAIvposcaocpFt2agbWPB60rMRLMtdEaVrfSpOXrHok9xNX7574A wozr1ofh6SsTLw+7PzJDWw6/OW+ZBsIR5BLX7UXSS5P+6QNKguIilo8jzMZcG20KfJ+INFUh jeYH+6C3Mf5brzZXqbtPfDPTVtQCuHED6lPfKGnAgyArdFu4uFyhX1TsJiJtFHmBrL4JaMcQ fhgBcBLKGncADRlPN3YScX4MftHMEIameqzSTzXeGfSD6Nb2XD5nbDywtr0Q/gwrk21DtKYh ofHFyhTRmUySK8Ub//h2fhkz8b0ATUPynxffND+M50ImrUjbtEq9BRkhT0mwGoxilkld2Czw vwyg3ovDJXE+BRz9yutfFYFoIZXIl04bTK81sPhYwim2fGjDkWvvCpet1+jYwo25XQaZSOQz AtWcIWFgA8nJg3+o1xLvsxbbyd0Js8VxEfGPD977oVlgrncmMxmvEyuBcnJzbpfsxxl2GEAR jZmkMfxx216xSDfBfbho0vNr9Uxlu9qwPgfxVgYSjgvpL9hw0UkyA8GoFZ3Smfd2V/BgNzIs RIUAg1hubjbgfneB7pUCumsUhJZG7cw3dN64kYcvCVrXMLiLab2Z6xdtxLen6E9SmIU6Awno kFRm+FN/JpFMr3sa0Hqw7l4wxx/Ve02SqUhLZPqlh2uJIS9CrtPbjHkZn8GAeQ5b3mesG5vl kUYPTPzK3PfOpGexlX0WYbp658DQVUle2tSelEhdcqKutcn716xLpW+ji68ZCDiXxjDbWDME Ck76zve7/OqdP5zRILkBwusI+xN51v3UP79CkU649edUkKAMBEe4RLmcBxvQU2gWtq6Eh/+6 DboEWiy4uS/LU5JNvnS8ah5cHrmj4WCB01hneqD/ma+Sn0kJ5vf4Hc/Dut2UPorfjrIV5HXx 6eS7rtA8EtojKzOwKzsT2ChV+ZNxRaBiz8vHpDrkmeLQkNhD8uWCw2vtFcTOeKjtphVZ+Msa 6PvqP73rAPGNDlms9n2swBwa40eumnioBapupbGHb4gaE9YahQm2YvVPczQRQVNZjEkbDqQu c0C8O+mhMTbNVj5Ykw2XeOzvjeaSDjN448iwqXK/iS4OpDIQYgerxTuQOxRsW/jejBH9lKa2 AUf+ZCDrNlEpC6LMtILrjbYrsEwIO9fEUp8DcO0uQ+6oSZrtYZzDyP91S1eVEtcou1p/Zey7 EU8uCdxLBIxaoMXuFYV4jdrSyCfN+4V/IRIiUYe01iICoxe+nwaAwUYKaJqZMGCVkIRnZV/c qPpN2fXQeno2MoWhViMIc3oPtdS780D5A50EBYs9p0iCDOoisbFaL90ofalmh71YQnEbv5Dm 0UzbVSj5VU6JdDzoSVwIEXYhTLs8FMXJ/E/K9NzZ1xWQYWVj9UgVsgIN5q7rS1GjRjLWsTI0 Nex9QfR6/A2Wdbsqj/NGWHDvC/VxK1DF7KB44vODr1mhEBHi2cJcljp5kTCjKJiqDEGQEcdU ojGN/z9eUJS7Vd2yRAyTHgIE6x8GtptrG7vxwL2etLSkFUEQqdeAZCvjMUHWxLBXu202smSG si8cXjzNB+tco0hXxnjlZwqqBQDUL0M/YTOrkSTSO07JpjQWVfSaWeOriAYWAOQ2nYg3u7PF 0dYtJfwd7tG4dRYa25zKAWxHRDf5CMj6HckLMZ/JEbu+Ud9rrTF5g8obQTCtlwj+IIucqW9e DDQrPX7eJi1r3USAHsR+vVWcjFaW3SZaK6xmjA9yZMDlL3enUHRDbDMhS0t0g+RWe67kutaP lyPLk3yojvN93oY4Bi49uK4KznPbKHh9oB6d5dcICor7+50wxfojJDmMgWDnsqdeqHNWmM3W 5QNYSrTTjbQ23ztjOOw/g+14xOn0zzyNXHwHcAZFa/mAsFYMVJDL23AkuKEVhbjr+aswNyTW CUwUJFM+Pm8y8uQO4fzJBI6xAoJpBw8auOKVkLzWxWORLJsSFqkRtL+jOm7Kbe/6fWSD9Xbk tSik2JQjujW/zNx5xVEk31UtVFNXhXdt1hWiIvIdP0OgbVmn3h5BhZzBgkRkOeL6Bnk85Cui XI3TNkwip7V6unPItqMXeFdneyugSXdkB3YblIPm+2fC0Z4f1bxSQD3CrFM0S435uaSpLuZX bduwsrUo9G8Rgsne3ABsr/NOhxKyS/Qneul+51WL4ERfHFfCI8day1b6RB8T3D4YhdZjJ1SB ONZbWv9HPKCObD4+Dut1VP2dy8ddb3iYws3GbH14qkSDnDA8dl4ya3m7DRJ8UEIGznd2oopj jrmOOvquM2kdYytym98W8IZkov0Eyvn2rbt9OYvwhQ/jOcV/oFqeO/QT86GG7e07R3i/r6QH HTOI5W7Galf8rFAzO3J2Y4RDOI1T7C9pW9pxITDkVA7DSxBRnCK5clYFjKZM+W6pEnl47rf4 jNTw8aCAGNG67vnDlOyZEoSrSLQjtMTmxksSd4wAjmPDabLxJCbSJN1QeP61OQWWyW0hTiNU bpZUKClGDVPNHulOG3oHsmvzhgwQbQNHt4NtHNYeAp9YLdX5U1Bmcf15fYoErfAP0Z6yYz49 O+lXLCb0kgN2dG7ynu5um98qxpfyv4/VVWDgcq8l3HzPOnDTpRuQn0TCRWUHqNdWX7AbitHv pD50goK/Zw9rlFLUZpnX/JgIGVcjrokYtMWeV+sgl/KAqe+UNK/d3GFq1VNojK24rCbRmT5c cfwd9vAadFn0JBRgjueDosIGunvw+f2juQWGNkh2mIlNYROt1Tnrqkul3m/4K71JidYl49YO DLFtacNQ6f10ya2gD4RKk8wWn3qDbkO0lZwERC1ke42hOlE1svXCV87+jYQoC5g/obR0mfFF DRMYqcIMx/K/o699L499q0jiikvIs28TAhmoko8yERR/iMiEH4/n/FLD70LtUAn1ZTbuudSo Fyu3OTnfVHfzthsdZ4ENkuP/wH4TbeGKgeBhD1Qi6lHapv/RzVizk8Q4l4qeYEeONLtO4Oj5 ucN6waosbnN6bDy0bTNkY47jB4AM76siyKf7+/VGFT9bm2GnH8PXA7z7lSAZ0S+F6SWZgPJT wC/6BSBMeM6USmIlCmWE5wfw2E8f10l3RaCr93KRZ658Yvsj8uwJREa+oIXKz1yB/TEumcal /okalp3VFL8GE4v60yvHDSay+JQsXs31oTlZVwQl/aKVXggV427VUCnb0MQ+bkC/2DL6ipKq hUp0hvweXDjfn5rueh9Jh5dJ1xNGloHw06MbNnNhP5SF+RP5bCzdeUlTeZY70OVekkv+uUsy MENMiCADujpFbxIQW07iTsl0xVGy4T0FY1hhvzdPrIe3EW6SkbnibBA4ua3t794L1IWdfl6A UglUFhOV7gyi5HMHfGTAKoVlNCU7m58d7Ektje+45XL4UGR0U7PrlGblCcttzHEhvh7lrtzm P7hov59wJc7TttwdBMxVpxR+sv50x2WTnYw8GIMW83zmXpl4pKrbaTw4CQhJhexPVcFLDdpQ I4qmzdJjNuHUGaofNheHeyxtS40Fb5VF1rbldBwLEObGN19xEeQnbJm9yu0jNlzIVYO9jNgr ztVwjDcgjUKeGR0UdHXulBYmkqdFb/zwkI+vcni10aASEf5jQ4H2/ryM9KRWql3OPVAiAwbD EguZK0NEGPmLu5osetfod2LyCOINt5g2fphEjUebWGUmzDwa0np44bjRGLD19RfRFIbBFLNa Ff5s6HUreApMYBXWnJaU6e388YfcEO9b9ErN691PvpACUteEeTeFtMQ2lqXC/amMe+IiHxM3 eVJXJGdgakmAbgbj4xgvF4fDuYPe/GRe+0bb9FxEMYUOEwtKC+G00/zpmynB0A4sK7r3bNDa IRvUyne4daJNSWr5xlRU3fPmH2ZLW+nv2mlqLehfxoQ47p4WrpC0Dr4KfLm0lnT0HLCCgrwj ntJjuOAFx/igMYoly9ca6LxzJ/AWpTKoxs/UYl2phlruOlNqPWA8a8HZeb0Xer/RS0btzEzu 8Izr1lGYiLiM4QeL+k7eDW9oKUGmzdoPcetT3aPz2fV8o2zaRUCM7l5eE81M+RI+7xGeC+k1 sbLDHGJByruYxge7qGyNlnRCwdLh9kIDEVhr/Bu1qApixRkH0ffRg+QLpRliwaBwA7A9fJce DQP5CW2RVcrA1V59XkzCsXCCfYbeNosUB2e6PcnsYjeiqOD+tGWIIsrhfklJhbyHHqnS2rMo BePbTj+RK2JkTsapaLnDdNfNjHjor3K2+1B+8EmXAcs4e84sDF+ujBFNil+7pK3UA93G8klF WjQaHfN9vxkby7Metukr3CkbJBfiORaJ3j29dIfDbj5wTuOrEdCyNyAHhRJVOFIr62PJ+TmN zv0dbmIKjGXI++AhFtfq+QtCfSNvpcbx3pu56XXJ1kwilHogGdW3k6m0mvi7ugxiVQesq8V1 X4E2cBzyYlS1yrJUy9+6kq9BTle/zCs/p09Loq19YUh9XuC4k9xDEFq+EIYgvpOtUoy50Xj9 kRSxmllm8Jkfc4FXEgQIsWNDfKD0S+P0TYjM1wZCfYjnti7kJUBWu0r5ePzxvESCz9e4X0bt DLhGSDBoPsWVYvN04BHisRZFYdFerMo9FRQ3/q76DlMc8vYeSFK15IexIDzWT7yHlrTAMxaT BO6cyaHKfOjV9DU78Hjo+PFRoMkjA9z2e2+UjiaoNoeFGt4VtIrtecEtfHKPMFxEprWJJpR2 ayvSeP9c6S2XiO6xSF7jV5Mnx2xEKB8GWQG4Wx2ML37fmSWDZ3QWb8Py6Qng1haTLfs0f0Ns /kprYliuKoE2Gxa43X24sOsb3zyxcySm57EpvwhTfDGB66UV12Og5J27qgucPJJsKTD9WUzW HNxhjWFXC162zDEKARnlaD6Fw8X7iBfgCTZz8lbqRRdg0y/HaGOiQfLNQH+FJwSCyzSdu7jA 1GUJXZpNMPxZ24s6M3au/UKRIUKBKhqrpPRxNMH16phKyWUVnKKZzIr/0O6ZlnpHXAhVM/Fl aaQ63Z9ycvXxgj1v9HvZ4+5XT1zh94waX7IICNJ6W+MnyIuu463FyD8h3y72osm9Dikrk5WE bKb0NdORXzihGFlkQp6KXS+dwlZtzfK/bCURMZMO7is64XMRnIWco/apZqhq0q2tzZXMpLQ3 YBPbNsHIKqDLEtdyB3yS+8Zz/o6x/BzKOC2uSKuLr5mGeWjeXD444rirVf9p7a2fO2kbr+xb 1PiR8WHXCfCfjgvNQYd51FJGanhZt9Q6NCoeA2pu/STfIS2+7KCJ7ScOBCQyUHsM1sHVjui8 dgSKvSprUb4+xlT/1Ji/WXSeqpszzv/1Na32q70Whu5M8XaI81k39HdPYR4r/kFyRwxcBkgx NQhDzaRuzdGs5NGkOOMbrpgba1To3i5Au8WDMd4KbujWixuqc7HrFqIgXve3TWpgyuJQRA6o Goo0VOuGiO49L3//AEESPctvlQMzod25EhoFgJSkO7lgh/8H0u09wZkQGqMAeSWhkdPu7RQp 57GcU1Aio9oC58D7EpRFG9Z9zfF9BUv1tc6CBZp4/Q11nvYuJt6jR/hqmeKMJjakD5ZKGJMN 4qqMQ7BFHO1hOgPcKrxz8nBIukpvt3WvW3PbfecEWTSpm7QaQ6UyqyW5h2+q8k3Rh98E8KfD g9LbLOUhfsmpgR975e6wei0LYjXcXC11e9PnONveu6N25pexlOR8ikxfxooO9dLCcoWou0AU +xAJ0zs7t25IvZiT5oN+AR9zU5n1+hWDMxb62iLPono16bFDeGpOYxBxIvV9DoKaAySfBNWc gnfPCnv9j7OswS1IDH7i0PC7PF0CRnG6w+Dqmg5SfLPxmB79KhNvLc4ohYbSya2hAS/7vuSr HNHYZJBHBUGZ6NHQNxZ5TIKFVC517zaUA+K4DI8NX1svKJfPWszRcebjRFPKGTpUmjWWtDTC wGYGwIyT5Aa5sZMkCrOfKyRSxZvbRavlmxsRPk57X8OSSOfxwbxbSOikFH5OdhlOaYXi/g5N HH3HcsPEKtp1Df3HltRQqPNXAkxSrnxqX8qUuObkKEtNg2cdA/CtskPT/VMCEvfNXEWPHq5o j0/azXp78+aGh7HR9KzWlpEyGNLZ8fFxXo3aZn0NsqPILiL1+19SfkAMTo+UUXmPAFh6AOdj 40rerGGO3bc9XyfzpEJO7HaWKz3NhxACe9OEN0hR/3StmoYbg8XvFrzvPqjNSYi9wYTPAwUb i4L9Pgz3K7wa0KP1WYt5xmBjcAo/DNCyMuxSu8HqMRRtjQKpfSKUwmSw5UhbKHSTOVWgA1vd XqWA0XAXPPDsaSM35dwc5+viIVnNaGkzq8e+2zpipfUaexPxbIQCP1sZn7rUO0SGZZt/o85R daedSvvARnO7co9M2mfEUSRBBUYpklVxukA6cKyxDU16f2GS567il60va+5smFMRcmA9gYy6 GiLId8po0zprwQutM2226FREl15t48SZX7c4G/KXQRse+DiaWCbhUFyYOjX++EbL3H2uXsMi RIPLYLgMlj2kRedmtY5UuEW/aY2qf1SiOaCUouqOX536aGqVoJD1eYIRvTukE+Al5B3JWkeK 1m2M13oqVRxx7oqVveWT9mB+eWZh8qWHjvogRC5xGPtUB4yiPmRN4Af8mGKYazpFbsXoNgH4 A/qm9MCfv70Ejdsed3GPbcfbuSsvPZxOq2yaiAEI+Q8UVLQpSzS3WUJ2UwYpcYW2mgiUTOQK rrLSUQ6wTfsAyxjer6RvJEnsRfQ82a6lvLszQYncqlZlDUl3OJGlgD3zQJQSKgh3x+Fy+6yh 6WqoJHrLeNYXssxpJUzJkyAXbVqzuBjtUJHtDzo2Aii69cG+jdXFKAIIR0sD+aqFT6OTb5H0 OUMI+noMfFi4B2qMvInuIGfv/i4HyJXIvG8/Ode5KsmRBeIZ/LBQuHXLXC82vpXZn2LWcMJI dJ7C6Iyc1oJHkZm3Lk44HHIq0EbmVleJ+O9ZZekF6mDNWLYjFyKps2utJWSQFWvD3DR7PlDi mmRnNnQzO49lN8WTgi5kIncNRlytrFprluy+OsAHhFd4Bnv7G/DeJgp+eXj6iDsuOzqZJapZ Jylu68pUA7v2qDE6V6EAftqwrFTQbnoq7PCCNX1OEWZr+wwNX11XyJVekvSnO92bSmkwj0Nf 7hQaQLQaic0sU7bF8j73FdG3H7w/jIH0oLiWfGBUvBbsmbIrqfdPvpV9tbeTaMiwuHmi0DRc AgffPL7Y3ONSIXeXtTYFmFIAOMpzuMv3eixAxJVIJ5x+E+V0ZgWZJLeNmzS8S/aaAbGCQXlB uZhnyD4Aw+wIs/Ko5YEExrMI67yc/DnOJUNnvVS73a9hgY51ePWu0bXUGN9fPRFDmhx8ay/s cAXYu48GSOp2ehDqSj7KMd3a5BT6c+K7Dn4hNR2cN6WYgjq474tVUk9W2+/FzLGa7gU+Jz3I lF6pGrkQ3OgBk5tZqXjf99anBToCWzffteLoTR1FXOYxOyYK3CY2JsMzeKpo0hzxuBC8f+0D u+nYpkn22DLJGR5iwsYbxpkiPaHsyn4PT1CLoMCf5G7OD3pP7nTcODA5QJND5wX8xPycX4OI y638ZDNGHip3F+3CsPVeNAATCF7VEwpa0/zQLb6y8RgenOytjgRUloRgSeYFLWwOVw7v8KNu KNBayZjhtPp32tTbrja0D4fzo8JwIqMra/cxchifeOcPfOo2vgecbAcjk/jK/lZ5wNPE7+IL w3jNneTLWxsW6a43RfqIXABD3zYoLe9z3YOQ0KoHk6buzdbltBoSOgZc3oU3CV8NvdHihM7/ VrNWQtjhdp5RdBtZK+ZQn43+0HaQ201fIbNbVpC0Kky3jGhbdiuoaA8tCNQUjBMUx2ynSeRd YOTwekj0VfGoyE5O4p/0+JTvDyLKW0RerafMOsPQnkGMoJomWBBXkWL1/07o7ljCR+LNkr1q x1eH5/FV6NbwOJvXK8CtMVPxolyWZpNRsOiLP5jxNyhwzK8wy988JcWqhjdpfbIs7FVrvPDB GwzGVeJv1JXcbkcFkF+cMUaA2fabuD8ICvZ3Nc4r+f9wu53BoQeIa9s1ik1SM5fADoXbTSMG uHDXjhluEgr9eGMNvWS9U42jDe7zfBjk7grw5QkLHaQJLk/SOai2/YPC96VjKZSdtkGWxmWT ZZXKO0wigjHKGpYLwUgXJUjuIw4rQ0LS1f5MXZROQ9Ldm2huaMuEDvqWlWEj2vFJLFsxTbHN 0v4hQcqPU2mMEyFbo7J1obBvRzkUJb7BtfIMFFWZq9ZppSM64cOwhyqWeNpzachFNvf0logW oaJVSsnPse47y+OmW9pP+8uAmgniqm+tLQVa0Egcg/Hx5avb7ZcCDBxLVWgzgSm+tF/K1eGw HzIDvy+oL2irIny2ZZOvzizc9bN79RxRIWH/3N3r7S9aohmsbivhD+se5kKXTiSR8fb92gYP uXKGNu7B9ccU71cWlZqkMZN78xp1a5Fq+H1ns/4ugC71WKdj4NlpQHqaxvlKfkpydwj4glbg s0hRPBMgpRJV8HbpwnFZfX9zXohuJZ85hdhggCkvEXxKMYRkrbnm3RWmXwlDUWlUG8m0dOBK uBc0/raF1DgpFL3FViD8LlND045Hd2/kNUjONum7OwVxgJzTib5+EAdPVYkJRo4T+uRv4Adg hlnuozQY2kv5vk5E+8UgJvxHn4OXdmkd25vhI1qY90OYLD2i6+jRcZVqroljyEV7bI9Ry5MM weQCAJMwM/JkAbKWgN542gpCapTh08U1XZL93T906+CDrTdOKvqmkSZToDNHbizR3nI2ymBI ReXx/mMYf0MiiVRdNVEE+pokRqJjE/mwv8sLVN/hJSTPdO4wGTHxw9T+BfCONBE+bqhTZsjD 133n0ag6H7cT/wl1dLCDJ4zuWHCwPDvCjAD/TTF/OHSrB+ct9gHMNZE9amKG3ATdCT9IhZth VnA5AXRbfFfQx77Aa41O+BOFmMBPp/5rQwusdW0PoMem53MfrcMTXBmLhuy7Br3G02idGfRJ 1qE9GrPMIS+22Pi+ogPRty3mQl5Y7azYzDvzfTs7huaJtvRfNbsySc9VaRmWcTI3+UWs0PF0 6jQkA4HU2lx2Rj0vR8vPtcMjhz0Sc3X810BanxVTh5M02uFGg1jWBs4qtC6F2VICBw7uoIP3 eBMzmPCRRE/d2HetbfYONvsl/Ek1jsi5vs5Zt5JgPzLYjxJKSrggso2JCqLQxLzr7yJ72bQO 9jyIuE5t/RhCNcSYjxvWpvQYYcKKg1w+5qvhxPrn9N685bncWFE0mFIKq0y/UZdFq3+Gj9RB qBrTFw6nl9XfSZxoouP5LAiDrTX+DwAOQPG/5nQtjGvJoGuSLYyxLxlCjh8Ezt9CykIX5VeK /GGwGg2Hw9mMrfHpJOYq/YjVbXq+yeZqj3nOjlRGmo4w/xT8G9sM7538UdwBO7pDGqcJged6 pQkXM4Hsp4bpMCZHE5ovtieDTNl/WoPYH/jCxPZBycjQ2GF3sKz4Pbz7EpgJukqVTMn7OB1N hduSBVgQbj6EAMFpu7iuqf2n04CPtrlWk4xpURpxdd8ntcYsQ2DSfkNmvaEczAXAMh0dWrGD LBD3AkfIijOUrFhb5UPKVvsZ4gaBL9qnw0wu0g7Dl+0NYUD1wfQaBU7RF533HCV+MoGD5yrY hxUQbo/KDAZmwxz14NH9IDNGaWOmIp9jsJA4rmn2iHDWBmKcXbbfiI5x944Ty4hFggB1AUO9 RhxIdOog+MMBlvrbzHJTurMxDThcmen+schvQq2YJzPL4sx1hwuaO1mxeO/j1/udFy60S8G5 5WmogF8hLPk8ixYyNg5ZOAaIGsK7tGz4VDUj/TClZ6MsEjKy/ukGMdZ76MyM1cp//bjER0Ef uVnTQ7bPPPygYMfcoIPSfn7GeyLJ1aJ2fGim+LjeW3DirzUJZt6OsEHHdgILZUkuRNI5Hr1m naKaa3T33IOEVEQF84LjRmRs6uXmbBx3BEwsNXrm13ui2TA2hBojycz6BZgUwSPKYkc9+NZi pHG6OAXAd69UV9TOrrLbPvxkhWUNAHEE52LEXhZXhdx7CFlW4gs0OuwIyCp+iI276JV13KJg 46e8xUt0T3T7NYieetcwg3hfKO4N0Aaie238C1yyHIvIORO1hk4o4RQi0lCHOgz5MGKmMZdN HKV1zrDYakHPBquWdfNxlwnwlFfOeoxHSin56a44Y9s0ObcbAasp0+HDQRqSZ+VD5vSdPzOo DVKQjYeRwTglKVvcmPGIC6/tKaUbIHUkvmoWwPNiyIeOVwEHVnzsD18RdwZPsPHDaciPlNWk +Ag58Mf7e42bwtaZJi0pHlXHptdkc/KlMbPccB2wFPB7qI+N4igrwjIm4yio9EbEFenlVRZA 93AFP3MKzwYi1Eittz4ZCmEtRSTqorujOCRz+HnwBK+ByPNWvkZAP7F7JU6cuP05ZNiRqOBy ZqvL3J+mrZEp4L4p3Dc5gr9VnGo7w35ORhF7EcyfuP+RE1GJQ/wHRZ7Kny+q20qcvx7ReLn3 6z+CgFviGszLD9mNk5UWWNICFnGeJ+76UhFVhyK/voRPOf5MsAy3gLUaog0aUxKiQ14IHX4p VYZ/hkWvsm1g/oyAUWOmlX0+0UZAx9qZ6O4Gkrl+BUFcSW5Akbd+n0pvGOnB1JzgEvIUtASk SDvIRG9ej41yDevrj4ZcHYN6kR7qlMI1Uv4wBakVxRawFTOLMcYOytf+u3N2mF4L7KF5t0B3 OpUbui70T9UuAP/brgSaPR33MvEKXD2k9pYrXtt1Ufo6IL23NaUQIGmEHt8hJ8OhDdX0+9MY QLvDBTqWo6CwAVicjM/UtautDyYyZv3rOmTCQ3OClRfWKyd0WcX/rzeBE/iRAfwjk+TCGSmW 4sa1HNvO6timi2v5BRM1gpf0Z3wnO5j1x6nWnAJQm9v3YtHv4I2aPjxv7XoA+V7SM2TcTSuD V6QRxFQ9hpkJ4oygBoLBXo54Hg1qoNcHzG298NKqXSZ2Y1eNsJubtCMIw99bPbixVrlQ+sbi UntoJVKAjagTeS9oiYx+144P/9BnLrO69ffXp1TBhGNEbk7snKTnXlj45QcZlS6hX1CKomBB zlkKIRriBPOkUKAWXzRrZUwlJzyNbjAIlTQ+D6HCt35H+T0XtaNo+p6jzAdGnLZiIBdBnef6 GzwxVcTCyRjIkQYnmxiZAVdvrEhaA5/3frt4DwWC8T8nVr48fPLRZdJOu3vqY9KjD5zemV4G AkBPnEbXZFPlUuggjdAZ9PFKPz3CqGrRC9FoMqyu3znluPDpgN6fGBW1T1ZumINFMvl2Tn+K itd9vd1p7vRBZ36+W+S8ZV+XcEPcjelTz/xWzm9Q1VR2+kuaC9KpclsEf5zY7E5oUviA7kJi oVbHwJv0Q+dqbYqDUk18fQuyX6UJmOBiIcWsWBHdCX6wBlsewLA4x42/oChSPKXYU2Rb8ykf toBxPHUkE6JtSviYUJwrHIOUehRzlzP5Aa/JBPGFyBNLfOo3nqR6Ixz/FMLo3m6QkpH+1cFw YXIZKVrxTgh5WILqp2UlDN5IbdclVAwL1w7AqrcW3jHCv8LLykTd/z5Hu2NSXS3npBZiPhVV w9TQUmCYcf4BKE6NQJ48thwFWrjh4PzFGnH2K7If7sh+sIPYvbNOLb9yDrEvgWWWxAVvbri5 SBfWO15rItDTVKcKpbcWZ5fDaKwGDdMIzi7IAx/7Yv1rZq0T3OC7kEwgHBju9TmvTCsjer+O q7a0oywIk+2b5574UBAzM213rubmPVZBrpj6Oz7EXpTSlIBa592iGOpTc6xeO7dJOMC3PLed 5Bq3WGE6+hol0I/R554rQm34T5AhmnburKvT7ifns1mgv768uMDCnXxkY5xVYNt1RcorIx5C WLKplaqEjKvdsV9hvmbYlHYKjYKWaDFv846OoW8PXZ4TGpPXhAtIxk096xPTA68xC8wKN0cv 6m8IDWIpLck7wUJBW8lA75o6BIc5/+cN4BXNotLxeU9C9iXf4zNQpJ6HbTtOxi/srFuuXf9+ ybkjIh076xtpVwm3+ZAvZDaKQFlQfvLgFegBd/RujZRTCdbKPHdz8dZFjKVUQJuCg4B7E+aB NaYXemXffuu8/FUpFVyp1xhfY3rcQDmXo7pMZ7mJ+T7lb0W57+q8SXo9lMKE4CnsobnUpe62 j7Hy/1Z7Ri0sENNnT3LRsmtjrdEpwuFFejrZya8vul3nH9Fg9IVXryeC4XYPxEQ/ZXvFHlzv Ye6cjFDcnRE0RU0Ev+VZ95RUsoKm3g9vQ0JAqrEX6icMvFnXelliKrpgPJ/UhhNhyG0nNAKN sJkKD6+904XINOTk/uRMDYDLJq4UUDmciMaF50624naH0/47QNUFTP1lyD2t4DAFN+nkEWzY X0tet+0k1iSVp+uT0SafCxGENoP1Fr9eCHPTjwCFTwE8QqKAm50PMV4wHfEUGEbQhyh+uvOP ijcaEyY2nj2I/rqVV2B4z2ziuycE55OciZbGxDQNJrWr8QXL38wQUjj/iPFZTuv4goF2PbZR Ne6rkuP+0U5kygluirKnhi1+koHEbgyU01/5yyZL8/hJepR16hY1Nm2VnRhxvsV1u6BzY4fQ gaZJ53X6oSmFt4ch3IP8YqE+Fz28wTpwT5tiXwX47SUyU2jUaxWEgQzR58qQl7ZcHkIhA9kC B1thxd6p+D7l0BDeFyGtaPzdeN/3abvGJQ54mZGmn79B980P8dVvALNzPXXJY8W1ca8ZqrQv D9lfTMUDKSa+FWnr2vLXwZJOZAhxiSNdb+eOzVaUs15GHChc9mC0P2wJ3EB3a4N34kMD4sLt +mI6aRpibYHSWHjORMna2z9vG/PYvuOLCtlJss66w93YHQdBXAVaAsh+6IHA8W/1i7Ur3Tve WyEfdbmK2Stv3oLfToJudrwkZKfePNbsSF6ZX/x/u+M2F5Eiiw0SeYl/hlAMifmsg7z36hSp 3Ous5DAhtBaRLHD3SV6LhPdNw5UqSrnjoeCSdkJvuoVkVOCM+/BS0dtC7Dn/mrAJaPjm3dOg xBLe9otJ2qn6I3+I7tGIipXuEM3Fj3AfY97xwPRt/wnaKRnMFnykwuayzzU1MSBYsOIaE3Pq GJXQVxmagq/UDKkAkjDDJdLEj76e3kUiIqmRvZKWUyY1uYxQGGAyTqBOlAPtcPf6FNefJFuU axhDauv3DQxaMLBv2YBFSQI3LAl4CicDBSnx6gFJ5GxMR0mwdjTKCyaI0S9Afp6HuQrmwqil RE6EnJuCi84gyNbmsSejgJ8zz9xjZD5tV/WjqvefQUglgV2aUnH7hxLnF5pU6REplfBArtal QZo2zeOvZZwbwRQKn6HrmeWdIHTQ5OBaFgZxORz7Ahgra3ovj3ucIf7s1Rxw75ah01pTn8B2 9Ij4jXqkpsCbln19vh4vvK7Z2ONFTLVS+KkOcy8Zkj3S8PZuwoy42a1KT9BvVmhtBaVn/QRk jDB5nJ8f1x2S8ANoEZq2driKArADSyw2I34AFcSTJh7ioxNQ5TURkZn4X43fvEl31sQ+UpXe sEc54MEy9ahAsnkbzLJCgqLXKrho94YtMZGd12JK2sdhPtLuLt3VkfngNj0MJOXs75SXIyEI E/GtDxD6skNrTCxmm/yrk8GrTFduJKladdrlM8G8VXts+wQKoPC9PLswuZtmcbHBmtv9kw+n +Wj2MIdy92aBdlbB0wjFfMJpbGzdfy8/2uhjMqYyTgLAVYwGOLoLSYcmXeLo3sah288DBfP4 ZC7iGSmlUwAP/NecWzC1ISD/00JScbkNU4eFhoBW6KW+4eAoYJC5cPHhMa3sgesB6GxYr8oO od7Y87lB+4VWM6N8moJ2WSRN+dIt7H1ycpkilw15/5aH9BBwP+3dzqvYGzwNR4uY+pLJTzAb uJghjmqh2vYlxTn16eL74BT2HtLIgo/Lc4lXvqUG81VeLDwTNwjBDvGF/iIXaBId7Fe9ruAf J+0A2/qoLaMa+Ht+CNrgvXRw/sHsUZbgEQZajmCUz5CdFOC3a8NtFlpw2mi/sq1FJNfSrdu+ Jx8F8P8jCB3ajQgAuhQR88OhoROlbaDiXLriu8z8YTMLWJ2v5Jud1RYc9uGvjCpPe5AnKzvG brDdVRvSxaq4K22lNDAPi0nUoVMQymdAipbCMpsRwA+I1JupFJAbkyQISi5Eb67TcOaSgwTD 241znwBvsLY61iE5cz23b9WQNYuhlGE04vv8id+vrlmQnZ6zAW+/f8Mv4j/lhe0iESvttuE1 ujnlLPwox0dHU6OH5P+gfUPVOKXqFX1aunSQ3RnjaCXbbtAbQl7tL9nYYhoGeskShxdXdGeL T8dMVpPtGaT3I7Lfk0LUq8fa07OKYcFtZmM4a8P+PQbK724HBxgM0wywXAqsDW/Yg9fFdN/N kZ7Ln+4TA5xpQzrV2ghaeUOCJ8yGLKZlJMwSTSOh2zNE6Gz72ZWKu5FysaE6SCPmRe/EwsoK a2ZHGLlTQLV6fk7Fd5lUgn4/xs5U79xQ5lhMbl4doRDW+vElUjfQImywNNHyYaDUX603e6Sn TCXjmeeXNcanJYp54s7DgYHppVDmajCvziDO7V5KlwgK4yvJ81pBN+gd7jC9b03Cm0CcA8n0 7WTNABwV2Cz/kZqDqYOEIMTsDZDM9cVMGr562YxLJ05mDbAfZihpFXX7/7yzVRB8kGz0cEI7 NNpQJC02B72U6eiJIMBLA9WhhsUjBB4m8fCnF4a03Q3y2oMdeeImme8SH2BDOWkdn9Fm/6p6 4gYkngCE/Xc/WXnVUjx6Bmq9L255PDHrLWA+8d3kE/qPeey0oRggEJhpbvBdrh5cxLiqFWdf rhjS0xioytxSmis3hFx55zIB8OJsAs6DODpncrPSupZRGpOBAzAq9LdEGCmY2XojKupHnwxI FAtHVYpVSRuHYwWN9icF+KDtfpOkckW7X8MtmGqz0k+t9b9utHtOtcIGmZEH1n8OYXRqSUmU ehO8Ee8S1JjRDAg/hXsbDznCkxuKiFek27qQtMPOcIL6rm39p2eWekOzKOsa8qM3SymDpfU2 yqmoTwZH7EY1q2vKbk0Ysiy8kJ+yGZ3NCJmBvovs+cpRtsE60JNG23yG+yUKgoWJLGnAFVPp b9W+bZS/FoqJOvbSl7IgMRaImyppYLp77jgnmfYqmo/4m+3KiEzHOuNicoZUQOLe47UWeWUG 0Z779NQjzzbOM/PjXOpdQw+LUbGK0fJ/m9OeeuMu48hf9zeA4LsnleyQK8aok/LdC2WDoU5g EkfFXZyf3DPaPMsrwRVDcxYZ8v6LzFmVJ+50tJPhRmHdfk3M8hhY1U9wmr2tvH7kwjw7/oFd H9+ky4DEHu8Xmp6VGmsO4O+iziLG6QRMGovMwjJcOBV1MsTRdELIOeK02rw7Xs/3uVie8Y4a 9x4YTbfwM9txldoMJSq1IOAe1/8rOgTjIlWkH5QTPb6Dvt6kGRhD2OU+jBZWjFnNVm9VMzYH zRJ8oRt7GNlsD7KzdFB0eiN9sK3zwA98PwFF/FsKJxMU/Up37888LfvSeA46eMwPKwuq9x9D rmgckh4kXIeTt7qiuMYKL3+ehlX2xiP+tw/yMXyORQavgLF+CNc6M+Gxvs6z+jt1pYR1tDuQ PBmVA0cLV29zLyjJQt71Z6B5Uo3gnWlOUSIx9ZO2Tlp9EHpUoZaD5nan6dmKOJzZELz9HvVc fgCTzBDhSrkyS7e4emKtM4PIq5Ts2lhzHCJumAaf2pKaOiArs7TMMRJZweEKrVEThSWTYL1r NfI54lvNhtuTSNWYPgTaud+E4Uaeg0Wpez7/fXHfv8h1jzeK28vDlDIvz9p39fIxTrMsUSj/ JLEvtzfAF6NSt233KkI50lLad6/2NlbmWHKe9TN0w0wQq56acdA4r0c2I6xlA5sS/TN9oyqe d1eIrpizPkXgnyycyGykJkJxrYqBGt+2FvFZegygw4g/an56yoWgEfNv/P7p0q6JMZgtfwCd b0CXiJa4Nt5QfF4uaUElmhRgEL9kqlz82kJMCtT1HpjTXsXzCYtSzmaHZvDNPMI4Uf1dBhSV MmhAZyuXzfDjhzlLXMpWuDNZQkXDTadBa4dgkO41Q3Ix6+PheIEIvkgY4zgn/BQCjJdVrLvB 2k/NmD1bpnGdMYLeX/SEut7mS/9va2ow52tubhbWD5iGY4i/Ef/NHCOKGFDCTEJRpekukfXJ n5zAZBi4FTbZaJQvEP8galVrFhhKEFCs4YKSVt48czhrAh9sTzDnodOrMj2bhrPkHPoTygbq 2XFezIb8ZeEgJ9rZISIqka1o8GGBIMwsPJDpVse+z7ETocFkm8o1ycYyEZnkVny0N5+U6cLO LX+GxDR6yON/CTpEucXUm+EIfwuPzrl7cJHvPN73MXn545h6idApOIpq/YdrFyaBnQTzpo6R yb1rqoR28rFk+rnYyRpgCTdEW3wTKfoiTGTLIlJKsR1ORi8PXFckrjyeK4wZRcRoZdE9/ONE J1rlxWFzaca/mA5j+pg03+Z+LcfHBExTlB9k+VmkbzirHWnrHHZY/g+lbLA5ZPo42XwfSBNz 2AZcxayRtDXkDLLV4TZ5ZIRODBXiasm+JmC5wz/AFOMgsgF03xdWsmcHsdkQAVyl9vy30LI9 fLoLrFZg8qfA4/ViqTk3O9CdUysHt5xvOTWIQIHL4+huMT6Cx1KNxbJQeSqDJWdqQU956Jqo ph2ZZNGf71lm8Sc4OTZmWXPk20HNDzHcoWjZnlJkLUwm0SXctdcSpT3iDcELJ6ktCjUsRodi GsWRQ9jW+F5PMPIcu+s3c7RxXuosPsodOxVQtcNAwHTBJFfFZ4X/KeJthdxf9b7yc5gNR84f t2jfU/ukMQxA97G6e3uBDxDCNTv3+TEyCUYefCwg6WqBXOkxNx6ecWjv7duxr7c5YePquZWb AF58bJF4n/jWo8LdTMPGo9K7kscU+AP3bcC2y8KYfmtDruDs47TJsVAD4QB7/Ae84Gf53XG+ 9/ZAObs6pbkyrMdoNHh1EBr970oiAQ1WS14arGRK41i4QyBs8J6meKZrrQwGd1JsnF+ahBep /BfbyMDcWneVoBGyAfNVVtnToWxplkm61+PqczYua05qzRgCzWiZkCDfw1rde7Wmd70eKiYG fAEsBh4WtFDpBTGYElUA8KrXlaERYxgCGhaJNv9vf9vi/goQWRfAuq2xFl6GvdVe5YT9soPX 8UjWY7Y5JpCSNxE5reZbBpmDqbCqYRFltCQYBaVY6aZzuavW6EwnZ9GqfSiy1H2/XERajMYY 1+loxdJJBkxTd5RWgJAAM2Y5ViYGAqDbw0wQr1KiUB2aiXa+muTfije6Aw1jb9ZUVKQ2IJMA rmOhWn10fm1V6QVEYiZTY0fUHyliS35hqSNX5CuaCvYcr9PEqe3o97KaYlWM/Z3pJuZ4qHfP sBGkkgRA9tQ/8weMBVBWrPvnnjTt33K6aV46fVNwC85oO4sMEe6kGU4783QUbZDpHVtuH+mV M7wnOcOGm0LMyVIy0L5StmM3WFKGpyq3/wl6ilupXRG5/uteEPePshH7nwLvmJM1T0DyRZHb H4Ru7ggSeZZm0oZWmReT2N/EjoJ1f5TvVM/M/5fLzf/NFJqMnLNuKgQKpnGfDnU0MXe4NBc/ lHg5+zbLbMmGA8EFOSc47CtLTg9GsyMIpELhHmAQRpjpvCO98NUL9ZUCF3+KnRoahjacyEzK bExxJmKVRuBAD2kEn5fHAf4LlA0xQJ+W/AUdUZQXB4yagbzedNQRRfxTSXhTh7aostJZ+2wn gfVksjwVKo7uivzfW00gaDRj2BMaoGeuHj2YVwZmmy/7WpjLZ1CFbQ0JYLvtFRHDmWgvH4lC T2aPs0Y6I9m69GqQXZ+Aw+JaobUUcTWGaVwHVkP5XJ5W4N0v56Ua0HqgsEY87h6o70CSD36y TsgDx0kvSnfgPi1nNhCxDxHK6DjukQCAASb8FF33jURB5cob7Rj3fBRQLadYgMHzfkH7RWU4 FF0qErq39a5skCUCisIeTVcE2uK0HLwvSrlNrm6y0Ts1695KXlJeK8X4tV2zv0ylPKwR4yjQ BDAwH0CloMCoANoWX2uneYj9QrwypnihWFxn/XQ8ub8uLWQ63rSp5Wu97NwWI62YDHl7Sl0Z QcBlTuK67gTznD22TgFQ5m8U1f2uQGdf03ut4Xw5CBhSObpfICDMl5CIOQMiNd3QMglW0hRM Qyfe+5mlTIjD3HX0PLd+Qu72VU6bYVXjfNev/XV7984GKtDAvLLzpTEjtcGbNtQH0iORMNCH 3MR7bzMdtk4UIoiy4fuP/EaDbL4rCixLqCvzMraZFzz30Jz65x3I34aeXkXziiSlQJqY6Oer kFFz7T/ffOznzFcPAsl5VQOFGjLKRKL6p+oIYX5nW0I/x71ZbNpMsGegaDAe7kCiurci3IMj M8FPnXInF68JSeMSn8KxV5dwVhPBPLJE1l3dW0CYj596nzVB4dT8gGZDdVi4Jwzs4z6vTDsO pTdJNk8G0woHTqfsC0hPyMjWN/Yi/uOQeML+cP8ljTWd3+XRC6HOAsXXu+qTtOA6gArX4bc3 /ZXTEQM+K0EM0zieqJrAn9r2sTC45zwutbRL6CKDxIfz3bBWIXL3Ga+OCC7v73NvoJ4+s7g6 VcTfGZIFfNxT3vGIih89L9dbAg1/fuJcHPBU4HEK8ryq0+i04mn5T8ybaUb6N9myTuCpMJA6 PktKAi1m+plK69bSP2rcgpo9CsikbQFLGe7eiLtesZfMi43H5oDXbvvcecFuPGXpsOfNvjtm bkh/joQL/pu2z0Ge/jgWBGqsanCJOUfzd+IFRC1TonCiRUsVl7te7oE24YPBipD7Dh2W61hM ducEBT36Vyu4WGrSzbLqjqie48gH/SNndrqx4ERYInCZVqSCReyLgTIJ69kFvqef0lLG6TkO 8Q1KCCIFuhcwXxaLSmf9d1Q4HpxTvYpaoqYgbxYshjE/e/6O3+bNXqU5Hz6caSG+BCHL4ECi rvy+/8SHCETKSTMzazrGe/CxlHW8GVP/mB0wQss0sQJVCQFWLUdFKygz85l5nJD0Xwx7SgH5 bza9Kp9kldbdZrNFgY029+Zj/B5y9gGwmDl3AmDdWZav2dL/vZVvU2DirtS69srAftpcQecy DpA/LH5xE2rs9b9ANj0rmdO5MZFwjrga0bKVA3jNJCzGLr81WKu8r4g+M5+O2Noxuu6+cyqd PCGJgo+GDSarpLQkNoN5m73fedvSYJIE6L9x8jYNXy4gSOLvKTaedTa+UqfhH9w2mOpKBm6I UDLxOZxJRNjuFxQUyIqbK+/w0LU+b2l7/EOuPJPs4tA+8/9GNN0H/DalB/7DcD6RgJHBXntU ozodb29YEk8EpUU0oDKXtkN2IApuQ+gGv9Mm4V784xFfFT2VBUcE/4x7oVS/M/x5DAC/GcO1 bAtVeQvCL1oi5abGrcPYm/4XO87cGLxG976R0z3DQl6eWWYIzIqlBq+CPVilXuuz8ctef52f bUYqgT1n7M3L91Vzmh3+rDE2TvpUePx11DOlTLOe62Nym8AMEN5GCbUnZGXS6xq0M2bmV2JU +Qg5WUJyP7hTjYl/3TBEI21yfPYQpiAxu9hQxbh7kL97bkW0+GfyN9THh16dDmZNCsUm/OW/ aLHIuYi4Ox7AJprcm2lSTv7E0C8t1PnzgqhXYTvoYsJHXgzSYPw+MpI6Kabmsecb8fn/Ux2/ yyS8tMKHzLUJw26mkwTXHzavEd60W1yueqAMbcBephDoImv+4/SUiiA9w5NvEveJhHsMjC37 Z/fh6dwhIZ85Ldvq9O8C1Truco479espWhUPY0JNHVCYnGg8OlObCkBPRI9uYAIl28EwYl4H b+vuXdN8N3cwDuslNIRDmQ0N2a7jofviQEyMVxy1rITuF0JrJMTPMXOUN8JUSQ0rtSAVvdH8 vhdfoePdW8iQcIRP7cMX1wUhfROqUtyfKCe6wZb631Vr+0F8pYk3Lx/XnDdiEr1GEQBVWvh3 lzpNgZGOhvvi+a27p/G7Y4QvF71fNQTGjYsMGjva+lXctKyTLaIGH24Or98U7dHq99Eh7IJ1 BB4SCd+3eGbNkbvXQ/PwDqi6rFXocuO6AftpPKTk/7V7nsY0TQ3EUrgWwn4GajoEAnjl03YT 882fA8XJr2DNUOqF7LwF7ALRfIf01rT4biK0ZRzDXrJPkS3RRb41yHWDkeztG2hhKkeXaoVZ hX3/JZW9DCWqRIsPckc/JPN83pdhWDSRa2xxlS8PH6fmUstax+1x9iE7u+Gs7n4/AscygnNu fgQuv+4tvVTxWDTERraClWwCeqfAVvUlUh7ey26keX4GejgbEJ3RpakvuHkmwzBuqKtuTxGM jEC/QtQnGCvarB7ex1NemfZhbpbGgdUKIwO7jE6+qKojyyaCa8oawcZfFASdeR1OfEw5ES/3 0mYIAdlvlNchMiSYYDciST0xVc64S5QB7ln69bvRlJue7XcLh7GRs6IvqidvmJkuSvC4YhXO fnaDGnLAhiH+ig3TmxNXmdwU/MEVsSjn6YzJ//CXrmVGH5D8sQ7NCyIKrYv6UuhPThCLdDfq bdtWEUgw5Ma2/92zZ2ILwOlFqkIgqBZW41H94N8sa9yWyYn+RjrUF4uMWDVjlIu8QDEiPwHM pw1i2wktBgcfaCOovifhwgwsZt0nfeILeeJwgH9aJSqhyZoELZzKZh1FkGNnrkXuaEAPXqKP 3VKws7fRFCXIBgBOFxsmuIEoAz55bPTY9X/q/zwzQpX0X9sGD9y3RKVH0J3RkTs5WGUezIWQ lqm0ENZmqygyp1Xe2jahrAxe3i8BGDoxx5sR5VTs7IDNUN0w9eQQg+XHUrW788O6bmzVqhOL rs1IoR/yx06dGOb+nT6NWTaPF1EF5i4FUhJHU8GU2BVnU1iR9U3fNiggwFLnhwUlzqVCvfPH HMHFX/Eb1wt969Ff2TZU9FfLqbTlSVwqXcEe8qYC2eJFKBjFPyob3xU3wqtoVnXK8b6PHByP EAEvG65freOwCNhyd45xdS+sLZ6FBKudhQYIG73B/qVmvDkga2/RVGhuboeAmB61YDJFVajw dZp5obeRk7I2DYxhP1tNtaUImOteaxHjIzJ0dJmXrBAgthoB86V8iasNdMff2uXVd2TdQrbq lsAnXKY7CMmBZ5DDiOxAUB58a26qKH5J+KlMTY9mntrJzRaHpPhqyzoCfZa2lB5d2KOWsNuE qtRvVPdoRlGpgeAPt9aDLwNoFRAP0HAkbe4gymz4ToJtnA3bwdNEOeC97GKdBE9xrgnPWTsZ 4qhS7jSfStoBpQNQHQ9ivxYNbDjyz9bG1/OqYS4P3aZtNxO0ZJMYkeCwnY3RwHcm6ZFlj/VH wo+U5EXZ/QA4fowdd3r8CEz4Q7766U1RLp4PBc7UX4Af3mFBmRwcvp/h1yUsSr6M00jXR6i3 jh/NzJn8SapgULOVhJLM1AddofNdy26ylPcs3+nlZZWPPrY4Ql275WZsLKFIYVzLhAg/qy/6 Iw+3qUa11DAyJmt3PaRrtQYRZD3fxmMLwxp7gtRqtYjmKATaSjl8rE7PRnhveuHUlJzeuQPv C+HOKsZiZWCDn8W+zD10t6rsUODcyzNr/5t5T+4UtysSNFGj8f+vJegVL5prA2kYtYUp2R3g EabHL2uKRdfd0EPMB3L7xMlvhQk46Hlhlc0EPAkOPwmCdFnzNbTaHz7iri+s8Zxa9Vf87YD4 /kq/pAgCSkzxGqoE/YhwTX1y0ejZT5maB/G2IudOqPBb/c+KDvVK5mhu6wahfVDWrg6WQoNr HrgSc2M+rc4tRUlItrsDZfLNsSLJrVYkWUAowOgg9vsNtvH+1dINuG9+C/gauy5ao7DTNW1E 5+Esp9JC+eU/WRpJWOIAE14KIpGC2JcmxrzfGX4Pd4v8r8VLx7wOdhKhdpHxNiunlCgvXQih 9AmS48/57gftSXFrvjpSIlNkjCNVZsTPeWKoaybzq6hzwI2ywrN65xM2NliIOIgnIAovU3mR 5NaSKs0J8kQrrFVaI8HY2ibZCB6zFkJytYJnluBNA+cvEKfpA/DqwN+eZZiA7mHpb7V93LqD ubAdL6MESfM+MvQ6yaU6HR4ERg9d1qHrSy9j2jGWadtl1bwDl+dxoZeLtVKCuHRP8lSUwBDU 2HAZKWafcAMrZtkwn5xZO6O7V/dVaFskyegQTmIHJ6/KEwI+N8n5ju5IPoeKuYoztdRjK1z1 SexZS6lFlSB5VtsM/jVSpFQrJEvHHlH4xqMDwcYZdI3VSxoT1fBEi28bKuhiB+sudIDhILLr iE9zl2Y74rgYCwANKABi0dSGj1hB46R48JM+sejwdSFBRKD3f/eN1hOAXr1G7NyN9l3R9sqc BoMuC81CmyV5HJJM5VL+cxvwlHbARgalTCtB1px7SPrKoMPMD11Ro8G6tONu66RY8hRCH4c0 f8ImLKG2r16z443RUX1flhaFvl8pHEdZHeTkDuwKYs9hL5+hejHWGMLiXbfA3tQjf8ZksYBI vf3btNntGeuuDcERwdI81wMJOSBf6kM9WlNTvJK2p/5J1rSYNzwLwsVqoKETLnniw1ZEi8Z3 lg+C+Xq//q8s9nRcuT8VGHIhp/W1X788WB+VJoL9f0RLDBXgxFGrFTJkpHKd8njhU8fY+Yqd lsWn6+ZjFtpgrVz3dw51NSuETKR+46j7uUNfKfPS/qTlCFlDfQ2mnfAfmMgzlllvedDHIxzo dtQS+9g6z1YhOHjdZOoSJJSxMr1cFMOhiPienJRn916gKcQjwwxu/yyX7r24szw9hsMcqmE9 vm85oLUAOvziyKrZttiK3UpIPN/gZ+5r08FMf64grvspyp6ABXB1TOXT63u1aPOmbNCrMQoi ciuI2gpISFiPYRMxy7VN+5EIwogaNe3SDF8AiJGsWy3K+OXSEc2xbVp2aC41Um9bBvw5FCQJ s5+F26mtK/qv9384W4ls3x8TmwNaVhw3ZGUF03GI+CyTfwy/nABQzJKRnLMGpQNyX+PbPc+z T81j/jhDhet8Q2w8+OBUE/MrQmPwYgZsr1TZQSegPMOtynOwJdEyLk7YL1uA7lYhucQ3O90B q62OGriNg4L+GPsCQ9HwzlL8vWQq+lGrHUC3XELvggqkZRmtlHGO1Ok1X/Y89jUwMnN0ivKv 2ZI9B9FUZjBzG0z8QtP1sQuxw4TQjzqVcYualIGjkRUhUZi8ogbhzKM+8u+5Y5z314OanOEK rdrUayPxqz3uWKmdwmB3PN4KknO0wU9vlihTprposcObBKQHbt7MxNVZOBeK5X7Qov+xBXrv tWlN8/4iymKQIS2E2tiamZz2pWFa1MZw6KIl+Abh25fUh2Q0/HDCTrmM9ftDw+fD/dsyUp11 GZY/TGh/6cuQ2XeROMoH62EV0HdOSxv+3OfQ4qk0VbqJLzwTj/F2po0o7HVKSqP064CiWtB7 9Dc9/XBLqERmbMvyJED2q2vwXFiMpcTM6DGTvl9P7soqjyjv4koVGGjeCsF1zr6hRI4r33iq edEzVkiKVYIzKvqtOjvQlFQvSHHAgrs9hF+6mK2d9Na6vCpewoCdwN9+6OUcS/Zt7ZH7zOR0 FBXhkPZWBRWImhoLuI0ERnCaWwd8qDavOfed1Wxo+34x5fq6WP0+sVT9l+jZdDuBOEH76kI1 IoJgzX//AcVqX5+M8PxaXaG47Nkz779FZ5x2KHsMmiLHhn9kAJx8eGFiEWp6w1VijWGuM42Y pBDsepKLYDT5wu5y6ANTLrCadbQsjQvwybpnqW6yzQ12dqTkMHHETZGki92HTf7elmKVd6Dz psvjgXEDo7TY5yYqJ8QB6Lm+nI7JXSQf1KDG1ltTt9qKN+fTpmwZlOYV0DE4+CEL+ge3Q1ay LTHXkfDrXOzlTVoVy4uwj1ClTn0hGtifSqfGVTHpCV1jgpEtWyN7UZNFXMPJjD3VKXKL/PmO 51MwOazmSN6N8IVF4+4kdBnOOyeUoA+HASY7N3XG1TdhmUkcS0m8I1XCNEjnmFGL7xCRwtbd R8Jex1zENTS6SvXYJVqvGS+ndK+PD1626iQOvxPgpi0swXJzxh7h3VsPwXyuwozNHnZ3ey72 7HlS+juBVi8Um1mIqKp6wEcvbBGq3LLpIN3i0pqxIoqGem7nhdFSXfkPCbmUaVYO2W7B4/kw 27ZMryNoUj4PpewJuoIWuzgdv3VswheedcLLpEXUg6yWQ+Y/Gy6zdY3kPgqRYwEqRnR2O+Tg FnBVzudmJJgFLIk9xmJ3oN7GM7xERMqUYdxISNl3V/hD8ALz4x8iE7OuOGU1qHtC+NDPL9J2 v0Yn/wtd0lFdUfdcxJmj9ljfJ3/QUef2UE1O/6fIEs6klIi/mtBObh1gwFIBBtrZYwO0vL2C 3a0gz188q85EbStN1sZyzopdxwk4BW6Fi4PHHN7LQTfjlsAQXzTTJhVJlDmt7VXz/I59o3KM NMs6mkY7MIqb0R7FNcNPJulYC4Yu0wSfk64USFDgsHHkNchvFi2168FrLO68+Q/mGPIFdO2s i/dGTaxyx5+3N0w3HL7aOoobu25KV/B8vOQUccKjo3CB11KflEmLtayDyNiHK1cflUWt3S63 bvayA/27CmUkE6LGrP/nDd5fMSVvJh4oLBLyVfioYFbiHfNc3wyBh+JfhiX5DHbv1VS5YfDG wxyuPZKYNcx0ZCRmnKaI0BqrCbB8gsKhmWhvXzmZjHcaUFGthSPetW0rmG3cVJ8uKy5l1gF5 wWv6I3rZ1BxPr7EQruqNWRHaqPP6yrJwfEQAvlzeYkzPhpc2jIyGrfeawVcvPnfELN5QIU0d JZYzl8nUg3kGDc9JSXctHrWn9CJJlhI6J280g6uQK7pjeLRDFHLvgAXndS4F0FTOZypmb5la IOLEZ4zQCE8d+g5eG32L+l8Wt5VwM1cOCg5DmaeLfbB8CO/PeS4v+oRA+BBxMegu78oBQKyu LpEdJCvGru4fVOeYDReY0rjLYxkurzyJSfts287tG8b7zARSZoGGg0hMh38aggnlNbIFMbos H8X6kddeAI8NNZrnEhTYPAcfr9pS/XnX1J7c/5MNGP+kVQ1ChTklZAYbaYWxK0vWYJdwy0vJ OBUOpwzGSBCAS4mn/9UBSHPnaUGSXnQVBmj5Q9c2CpG9MqdV9mOh0fLPNNPjAErAqxJduL8g nnZ7HxFVvg9xgcASc70/M47vLuc2/Q3v8U3w0xW/QZKGGc1IDkLVQfYFP0aaiPTexOixQ76a 8PH1FOqfzqt9h+S6W3Nl4WkKBmG3mVmHj/5XxSkDOmAXIFsu+WtoLrZlU3/rrNW84A47QYHu UWA9ny7hRtk9u1N2Rj9YMI0+ieh7mcUCtC8a6YZpml7VgLgYUeslWeLSG1Jz4BugiQ/08Nbt f0gigd9nsTXI8GXfT/y/wgVPy+v9AA1hwoHmZnZX9sN8y4DlXgLBrCwOWZiEpc4Aq4MYWxo8 X9eVlemlJ1XsPMDSzDqnsF8yt7g6I4Nn/VDg/QysNBWylwturD2FEGONK+dmbFITd6DnYG65 dCHc3+HxLeJ/xbFM4vexz6A/xCYNWfIMfnwBztcH7l/e+6ovxbH7UcSuhyaiOJXAQZ2n4HXH Pozi53xC78CNwJnCnvO8RoLiabiJyHh8w2ipA8BsoAeXRA4f1GRIVdt1/vLI+vRa+GOEj27w fTr0O7TbK3c0UMnZnNg8ScMp6ob/+u9B0OrMLrORCBP/Eu+VGLF0mfCjm0ygNNDR7cCYG5j8 FfVN3CcmryENGnD5M2UmR9LC+oT9DKSv9jS4p40P2vLfO1oNWwIHitdUFYLbdZ9Mw797KV+4 4yywIHm0zwQBpk0crb+6RXs2rIi7SRI73sZdjSMBHMS18L/OL4Fg48bmXfkXjqYDsfUW7C3x gRyZtUpR4bVjj2Pk5+GnZYOd0F6A6/qzssv0X4aO7C8rqqoRxmr7UKwcsROgFbcPUk8iA+gu jhrK1FC4TYGu33FUgXs4vUdslyreMVUPLLdkxAOsmiBxrylWAdYNCEaFZLSmDTa6fyZa4auE UFpabGUiSTuEfdNpmkGCvZ+1aT3I/jlAwKO5Qt7ofk13RAQKoyIPHXP3+Ky81XuC8JYe8XZt mhLlkI3edWKMfGAen7QXbs5hcqXNHhKmhhK//gkMpk7zIfenP7CSDYqCyaQak5G2Iqb6Hl5u 1A2jcf3wmOojChr+WkrKPq3b49PC37VEgPWNZnMdiJU8G9P0Th8lPMOs2ni0Wx8OlZd2/cx/ OB+dlNaU3D+fpSHH3SuuzF89/X8jOJSsRU2i6ZN/qfbSIOpbyQBXPHoDX8yglcFmrrkV1KGc GBDSZJn3JtX480c5g0ncPg6d+BNKo86Do4tGMm91kwM8KUB6BzBYep44VUWtBIpCOl+MORjz jqxvh4R0lJ2SxvL2xjWiweKJ5LASfrWY3uCKA61Jp9VfUpwpkdHk3Flja7TrjIJEYwA+IuUS c9mrmbB8CaaobuJCuDtxVRSi4xV44cv3yHgxPrNC3B6GTGWwz4Kiy9jdyGPRJ867YEjD6bLp DMAZ/IiAV+y0coIhjaTRF6SVDL3ImaUNSDVMhull1RLwKUBKRBfkQ2+WmTanZ9rNr50/tPiL Z5k09nKTFz10DZx4Ee5/JqZaG828xYzSp+xNLsyIuR9sH6Vf5QPtthgIWxAVFOEpZJlAZnKu dqZ56kR7lBriYE9ydg6Izmyy90AEt1Eo62JzZ5Bc32rgMZ1FtPptlitv3CUwpAWHEqy9U5cK 1U4JMnsuj/B2iCIP3cjjzAu7k0RLD7tknV5MQvdPBZNoBRSH/IuN1AdF13uy6mzZjNsF9DCE G0s6dCsE2OiLLEDm7QSQADoJM25eOuywKLDJwV3TW9tLRR4ac016rlWItVlNnI+rPM+Jww5g FtVqa5HwsOaatrFxB2KOMsl/VTeq8DGqRVm7w0+Gl3SdEGNn4WrcJT5nPqF0EbRF2veLvwYM RRzbMZme0G44mh6k7GPtRz+5i/JvQ6aMAFoFEkb+2ZqLj4XEO2Va5JEANFOHVEy7km5Mk1ER k/6uiGqnSrzlTUtJbGeGpj49wTZ1ybyUreQeNloq+bQcYVXg81t40w1DAA1lvob9Vn9YIRAs yOp1/NUSA/iYEZtQbM+SKCwXKX8KBkFYVkyqgjcl+6H1868xgNr0yTiXKAgeD+27wyLIg/y0 lxMDDOE/M2YHsvD8AcoQJwOJBYsbZD4VY5+WrULN5PVtJfDwHnAyF71/gtkhB8NbFlCKmV2S WDrz2LlRS4nKsr2omCfEtTRmCS7R5cfYRHGCv97rgj+Jedh0ONLS3QEacsiD6qsrMamz/KmT 2sb00lQNz5BU+uOOJdMMt+HWHE+eXQzRK1ZY219hVvmlqWXh+sm3a602c6GMjh12jLewNttk DdsY4qNWTVGfUIlTah/M61QYcupxqiTEErB7oKcCfFyKoNyQOtgetbjUkb7r7IqHowwN5/NN 5xEUi6uiDjMi53pxw4d2mg4HpQDHNelleK04EIFNVt+nWJfbFFiS6IbrNf5SinLyT4DqYmB+ dKzgXgP++uS8POKHzp/QPYiiaic0Be39UtFZNWw/seuQvroEuYF/FKy0QlojZKDPacF9Ogo6 E3uJEpCiZDAJ9z5oVoFxDWo3fOL00WuFawU42W4r2BDUAT5ntRXC6LzCitgsNWLSdvTLivDp 4IEozg5Zfg8gNYuMJtvW7vbzWSx58iGmTBMHwo5h/CSwo3ZF+uHUSHdCgyNcbR/0HAAHWx85 4xrvvNzvOMSB1xUFfoKS4ObkDRko8JaEnz+1NBgZfENgMl9WSZI6Yn9TBHKHmyFFDbvFBRw6 bd5c5LlHp1x5Ioaw/fB6teFeu4pZFdDX/kyLijQUV0LNunr1V0N1bK4ugPDgwmBQTPo7TRs2 swy7TKTxOD1pvtIwQmanp7LD+Kn3v8Xy89FX5VZUlaWXg3VLrKn7ZwZQrsEmZEiOdy0h+aan 1IOviivRPXw3u2vGVOVrKVxTwxsHVEjgt1Ho8ZnwGE9PpxNDozNv+SOy97pcs8YVepFe3fXm hXMDS75OoSmJTjuVmwhS3hxW9z4/4/tIFldzcL9jffQWuXdXML8d+ddXl6GcxCkn/UKbIYCZ dsvcMOZKXr4hx4vQoHPb/aUfplUxEq1u1WcLDc4+547RFdXbMtJEXJlXPj3/sk8jqT6EbGcX lU6Yt4NDn5h0/3ZadjDxCFtUDWAvRkcHCiLe2Ycs3qGJhtJC4EHbV3YWc7et40pg+7F8+E38 cvugkSjlzJXJ5w3/Rv2rdimqw+PJgsPAGYmAdnb86E5OSIpLvuf//TB7oPYX1ah1QCVVqO2A FNVDByN4WBFMjOzklwbosrIbtG4ADR/x10vmEyF44OH7lzLOCQaMuXR2hIAAis1IAM4P90Jr p0tcL5C7APRTtv0G+FmtnIGrEontFxpfxcoAdZoU2p9nE13IG48b/tmKtkp/UWTWV0QYDXcY KKCBIny5q+P7IlsVSri8mdJrBiFohYGUJjZ/x1PjaC8kZJhh7eN42cKVZhKXjSeJqR8D11zS UXAbJC9+MyRkiDrPhcxE1CroOSgD1KYdChCswLTcwmohZ1Z01SNY9EXwWZVKpK1U+KGs0HWw BTUam5xI0WLcRKGdoxqepyn5MleSBQAe6tfWsvzuy4/mFFojwLIbDApD8ZnOVMbEr+xP1liI BRYxKToYH1Nkni91TxbEFVq+rx4D5D3qRqpR+ZXEL6yHXvtr+cMeCUxSDP9IqFY9bNsxqEiu rvZFdIf40jgFaGuk3trv18FHEGJqqjsNiyblz9rI89z9VQoInqQsFvOz1qFu/B/rrVPlvcJ9 XmdmVz6HDkNfC6G9TBZv6Kozrhba6DG3sU0FF7+aVM6UH2BsbTqsjr5wv5bXyJ/bTV33jHEV KtZneZt4dmVWrKiO2l2ueTBr4r6z4FHLXGqvzww5pghCd+DBEEHsVXVy7cZFgAV6jpgnax/u VXtQlQ//X+ljmdq3Y4NXKOVm+0eXdDqKYv2WhH07MP8WvhaBXUrtqWuFbGzchRWptFr5xNtV 3YB8YYdEtUb7QteSKKeffdLHeMh2/goM6l9VLNFhT/6YgZ2jXJHcZPDbETfdfrenLrU7myPp 0bZPblnsWSuZ+dK44v3jUCd9KqJHaRLud+zHScgHG/MdolYQBZpLua+VIU9HwoOyQTOHBn0L u9EUZw/QnNe0L57aBNFMAVEo/lcQtMTkUZMMBOmWUWcGbYq6fwgtPsJf9V2Yi2L1IRal9Pzo HJrkBiE7W0ihojmyO6TEiPsHyfyV5B3qz2N+5ROZ3o8Ddxj+de4RenmEn6fYI4JbeLyKhRpx BxC+AsWUtOyJmabHUKgm9ouM7PTe8Al6Js7VfCY5bPPmXj5yw3PL11Z0uSxS7GQPuXAyYOiW 8FCjsxDwUVyfVYi/FAwCZInNrqxjU73JtoGJr7yuT8KWVVBWH+608u7AbndZOw5R+vSaVoUD PQmN4kQRs6eCzP6AHfMr8R7U5DunNS4eba/7LZUl47TgV6DM0hMmMYNRy0yGwK8ELCt4DOwk YDcv2qS2nWze20VcT6EyRv/JYIY1p2hFlnw6w4grZ9zUPVONBgfVV+To3PRwIXgv13tIaQx/ 0nNL5/HanvuF1aj/hjWgv2XxEdFlO37rL01DGTurdd8Vfg6IjJfXbUfxtxQwNyRhZgaEWCaO qaw78ukx54dRum25jJOwEqVYyaFRF555aazkTqTSShSS1VMdp6U/y0ipnzRqt5yxQzN1VuOZ TlVXE/lsOCjjbvm1XjbDhcvs8c74YxmXLV4/1pVqXdyIUwrjNmtq9v7XSlADJJUBaDZdzunK gGLTwGKw23uPGZ5edyWYPP3IHv5o4BzrCcKeINAEF+daNd3WX1/OcOTO15EXTE3mU7UmSxWg ellGrP48nnk2YoFrGuSwoeYcufBPVpmu30tHSszZrD+Mk/ALnH9cwwraFbiVz0kk1LdHmwoD 0zuKwqiKi5MC/BJzZEICZdNCO/AxNmFFLWdT3Lgp9tQs29Db0Tbjh2K2zDOxkI6Vm2fNlePh fIAzIcMZVhzfp01QuJutDn/Q1HAF0ZA5CTYMGtOe72ZI2fpOVgkExEHeHE4wgJJh2z9V7apC Fyt/vwgS77tAdiHE4pv9EGVNhx4ppAErQTxsOJl6556AqkY6+kDkiySOj/Lh2M18d7LWnouG 7DPPcCtVvPAnPet0W6nHr5u0cNMxsCZtlZ9Aiem+Lm7D8NuNgSH7SH+LWdFlN819ptVMGcJ4 3G5RLwCuWvpOeT6qZkdgucWX4WEKME4VyP3jw16Lj93+7T8u0hwj9yWTkkiqWxFD2sltGO52 pEQtdStisXqidKHblZH8/Mn6A1uZmIGVAq9LHxA4GpNLhHgNO7jFbP+jexGkftT/N6yeD7fS ajc1Kuhm3KlwMggvbM/nMoMnlrYVyB1g2dC9NnMghHtsHbKWCBH6DqESepLtRFUdmBtGAbMh 3acDl4+3WYCxme70OiwyVqkearFNIotYdVZEyycD8rC7qnCNTPJhrXuAfdVjyq8qVd5GpEcr udOzAxqqv/qQvf064s+xNPw/D1t6QVEt/AGEHi0Amv3o2PCJ3vmxagouIQA1dBW7UGmiirBq e80N8yZCGLOorkrpRABEnbZIibP7s7WZOp3I5klI/7QEFDlff/7iYSshuWRxD7YVeooVQDo+ 3iQVWp3nXqknUjUEhUhIyBX+oNtjyKTmNdiiM8rFztrIOxwaSCdEdUjh8Gz6yw9BMw4givaq CgPgcItGK2xFZjDipT15OZP6VNxVYjbza3t2/rW0dxiCc7MjWMI0xWVzrmUkHrXMbhfqIHg0 gbz9WBhnareaTvXcs4aH/R3g3xtfQoCkujNOp2Wv4Ch05SrgN3n9zpw5iqhYM6mFFaSOt+T+ Erby2R6xRcAKMVdStwOYeOxQviL87U4CEdIXW/dDaf+mSfTMl3yb8gVK54XwCPWfukiRpKvS ELqbLCM4CjSS+H5GL3r5vs/wQ9Qk057iZMltjkX6dA4vw0rlbTTYeIPzl2rqyy89VjS0/ImM HlSodlDADZvAdydisQa1Ki8a3oiA0QuHG77KcLTbnaEujEJ5J5viAlczIZQQEONh9QftUt84 BOsTHOJsdBpl7ZLDdiUAogBj27Ztu2PbvrFt27Y7tm3btt2xnTf/8HZzpj6gTi0Kc+eQhcyu eJOJnSGOyqGHmTDfm05f2rvPhsgF+Zo2dZ/mytnY2Ms0YKPpRhmHsV2iGeoyDIFDb1lFx9zC WpTfmprya6U3Jb8lG3X19xb+XF+vP4qrlQrR9wwlUoriugbvBmhxaP/508WcRAaTTp8JUvz0 PxGV45I+WciMTtGC+zSTCjDfaYhhULGwY4c6JY2UwDh+6uABRmPxb0AfV2Oru0jvhKLf+Xh1 VtVWHKdctEvg4yU0UQbtfXPXqcbWnYVPAhFlFflCsweTT/1OUaFvU/vXFqlxgKO2tYKRT0ki dA+0NK+bzduZQNEMxE3uGBKdIhhThQX6gJFIO7bwjWNvJ77LWZctwZWkdd2YXSkSb5TCQ8lc cD5Xp9qGoTge8fUAJEY/Iiiqb/imtnw0MJUXJAfaX5pzr/Mp6Si7ps1dzRl8+ANmSFkD6NXE GBnevKSzZIwXnRm4vK0cDl+HOHpnSVPtZzae6K/xPBF9t0ZrUgAFuVi8RxVKuBdraYqs8YIC T+Rz5rsXl5uxsOqERiGDlJiCXcmPZ4H9WhERUBy5ChyLfj+U99VQHm0XZmvfwlfPC4h6y0Hw HWxdlNjOSixRHapgBbphIvwiUEVpTlJYddD2veeN9+OTMWQfh6hcT+W+f7/UONuvsM7zFUTi dBfv7ZZz/eLRHANPR/GFFNh30evTZJmCA2ITQgG1bdTVZ5+LYK1kllMsVgyND3F176yR2ynb hWmbWZzqjiZRzavt3YybYuEA2vAtGTIppdlvRL4Nb2yKa38bxSRuspnLGNUD3yYzsFF6dJ94 fdQY5dLsh6HYmuLyOC7UmBsqGG6kt/03rVPtRLJ7EO9jhZtYacNoKI2MjST5BoyNPnTkwShq aO7fg1T8RcOF4P5lh7KJ0xtQ2vx1aJugVgGGeW65pRu7KcFoLeQ6rfSmby3s6sdoMlQsPciq crqbl+e0oQql21dYc4KJuUH/iOJVTg9r0ovcwqX9EgXm4srM6mioQxfD4k2qp04jPZws6SqV 5chYDT8aboaI/fv14wI/qfPIsZdf85LuoYaXEF01F9PYRAJ57jmDXjFzgakmeJtd1owkhTnZ u/I2StsDUedlaGnYfBwqiL0eGWBGWS0Vgto4s4akUf2/qCvKQ9dWHiscLj9YDmBla6rfsKxv rvJL8SXLl7hAONz2R08bZxC3Cxcz9lnVfRKtIBZXVoUiDuLzjbGQcGrBoxHTmRek0QTcnfWV RVZl6Ln3bxQjOuGV2gVXnwKp1j+d58RnOYilMThzsFX0f5Sir3THsljlYxYzeYl7UyNgZnuN DzXixiWMvlh0Y26VL7YorwaqgRz9UsJzsnPWlmijMej8y1O3p9a31ELHBJa/fYjyDUTxWwLx DbqJrtAZ13nV2A0FPQ1zrcmXhFsZnGzg1rRW6HBjBSZcdoayHuWdnchwWdV69QgTfzul+ydp chZC5iKe7JR/1cCZWrFXZjbwMXjR9kiW3JfxQ1DEqOPJ7t1WwyZ7pxZFRwPFLj0Zq0px1QfK rfJkojcadvz1+wj0mqDGpc/UcT/Koy4zen+xSfSQJN+5fKP0g6ejeArtSYTu8X2Aq3zC9wSF b1JgeFoxx2vMmEuQNC/EAqn5v9yUrXMOv7a9Qm59l/sCHzcEjUJ7rS5kA4W9XXM7z95s7oBW 6koKvbijHkStbrp1MKf0APbmQd91mE3z74BIOq/DVhO1aXjD7lJMSj2mhzK7TADoOpzWEy5x ZNufvkTJVzybs5OVshUouRqS9kB3oQ5deljBqF5xHFI/4WfMxqmebVY9xMWfCgG8x/bphvgw /nx2UMhum5KzWYmm0WWj/Mq52UOR9IfhY81IMdsHt/PKDnrpNl5R0LDboZ9KRMN3a8GgTZ43 DvFjjgrIKofjnT65TNNtz42P2cvn1rPxwI3oGSv59pbDGOopXj4CvPwPIGirZ947MVOPXPBW mYO4nkQd7+9RULluKv2K8sjD6z+J+lShA6MYr/Q6/GAJHLVAFIWl+PqET3P3Z7Gw/bZm6YLg Ss9KnravurnPiGvtJlnZEk4FJnSwzKvs060UZv4ReGbqIgQH6EUqQFZ+v7B0i9c0LIgUgjDI BAFbI87Cg5S6JjKs7RCw91LA7aIufWargQfscJdxkbxQ36im6I1i+zeg3KyWeqMuM3k2w98C KgwHsEyY/erevJGxTTikeMgKfiF7OYNSkxhy7T5OwDLcu4BXwe2wiONFKAGkfcbjrvSz2LSn w6Lk5RGIbFOMUOUMB3ZPeKok/ELKj9NOiatzMxv/nUszNoWeCaOV8QNmWfeTZrwzJvm0dBpF BWCvRZtt7cNQhPsHQbOVNjcP3X+8t+B4r4eGIKXg881vTJwLUlgIZP6TYjfqbGQqNZeYxYiT ilf5yrxttporWTr7gVXj6FdHWKDgKLyCid7/DCjB5AO93/QNR1remKvQzSNXJPXe4r1asxvN mXeiztLw+//S+JbN5vvG6tcHr8M6+BdGaZ6IQR8wvJ9hmUa7gZ8TNyfh/9zipUNH/2XMsqeb DDrMGIl/g5SNC5v9wLY3G3q4V12npxc7nI7Vzwl0iIPUKZ5FDQ7/yL9H68HcPgiFY3Xt4Adn kXdlXd8LIXvx6uEyAFUkr+i9ACo7oVYdD0GkkTbo11VKSUdOYeSDQGVXiwEVPgIO0ia8JAzs DYwX/7mT6ZFNBa+N6iWIw/FD40Vw+/Uk6hJ5lpgnWB7tCgPYBbewylbXY40/Xu0SNuJDdmCi DCZY9pYqIg8vXRZ7uJ3ReacABRRmtaJOYifJe15/lpNscM96BqmAayczRsQiFu7epRNArde2 K3veqdIsQwrwTs+bapUitK9vZtUkxLVdn8hWxR1LDceCsqnpeV+Q0rYFW8vQzE6nct/oSdil e8nc02YPHzVeVG0cdxVVGrW5DQZeBIRvdXKVRlq6BpoBbwhc0CIcJd4utIYyIgRogP+0JZAP TMY7HTg3SIqd4AZmWgCGYZ1uCbXdhorRp0YspcWe8d0GvyIL3pnvDfx6tSH36tc3AInLAuwP vCLOsvV1rl06lCFRTT4r0lRPIveePbtQXmecx0wb/3Q4DKO7E578NFa82CZ7emWm05em904Q qcReUxJzN5DZrCB2YYPKQUTWkPigoNMRmjjBVIWrejmvs3yD1SwSTiWV+01/c1/3x7kFFsLD 12uB+aoMkKApVWMdE0U7ZjP8cDlvwo5yZWM/4pnNQEiJIY4MLk+wMlQluMvp9ri4JSwRUp51 mjFqVUQgV2L2d923i+cwJ/oRLzqW+vO1ttj9tn3xXsO4PwOCfVpwNtiADyGoOHPrakZpTxM/ 0mApGP3UG4U1oJ0BnGe3aoxpOhKfXSeFqhhsckwMq2djvrAMRWjMv5z3s/uPB4aKkXgpxY0t eDp2liXLyufRk5GBxtrzrLQpgTXqLViKIbkDm6a5Nox3Fkriyu+BeZooJbQukSfY+E32cY3Q LjnrWgBxQjIopIkPEthAy2LhBg5nf2I35ODcU390I3noYdz9b6kndrS8t1kV33+pINNQ7d35 FMnxbKHgWseDdJsxb+1jhayoEq+kF4DqXmg1+0p7jnzVMc4Wiumuhi/PFa+mXpwEa/vuojRj n3k8Y9vmmISNVzAWPbmq4ezk+3BMz5dPgFta//3u3KBlP0tUcNnxgEmKqDuhFab4OAB9uocg 9FX1TzI6Bw1VJ6Z4esDMjMwwKMXeH8hnVUzZM5/vWUa5Df+MaYqFv21OD0iT0V8/Ys0kWnnQ lQ0TJ5hGFP3Pcd9b4rWDQBQPIc27IIwVpre+iXG8ShkZdYrqPW335MnKgxvYBDbJG04TbH7i My3KvmQQ86I7XxKGB/4ov5E41Q4zrxmIhrDv6G6cNVOzwB4pW3F5pKFzDRc/Oja+DYMqmJVK BMFgPLspcbgjCxQTSXiPRUDLqWkCCPBPWakTrAgZl0FnzRHwoWYX0x6/s+Dbqu0iO8fYbxiK lPoxpyPiXsdSoITsILPWt29gyBAq8XDUqMU4x/SSVWTU7GeVGUq/XQS18DyKn3joHDJG5L4F pPEUPJSSGjAanLx9EoL7XC6ijIIn0CPkRA6xen93mR7oSJ8uHTSMUkEx57S9cvxxWEsRmiM9 bFBlFMx+WNPn0JOuoOkwPZgBXV4bBeC9hIiDwMm2PyACDVzrk1D0mmNIWTZH9hm1GgWnaPcP c4k/PGO4kiq5uY7lhVKnS4XNJPzwIy3vIGlZjAzBm8razUNg93gO6gZnT1h7kLvU4frp25h4 WZAHgbm2++YB6LA02l/oNqBgXDe9q+bAwo+oyIKzRU1UBDzHbi1vXmWEKvrXwaxGG5cFBHsb VX9jkU+WOC6ustIsaJBUWA0EKj/sXzCSP+5BKyFQqPWts1Kezwpt8r50romyTiswAUbWqgHV Lo5NpUWgVhSi4q2wUthNz50FOfcWPUBYUD2BwtISUuQ4nqIP44T2B+CBIpu0uMz8z3jh01wJ ln81ZQgQj9++PHlEMlQY4cysgx4T9g+/JK3K6ulI1xc7EtGrX2xLSQshTCdA1sTC4zI0KUTG qhQPkpmZ5xw2+b1KwXEJXCRud8ID6HdTQdakRSQAp/J19vyg+RCqhZ019WyIy3YoZuH1jXkd LIvCtEGT4bNwDFDWYa/BA4lkwM4L+G8RPlw4sTiKtvwUqmA1PgwbfRh8eEaEOKMXK6EMj6PP vk5A9aw6s/JhKBxO893FtZx+x73Y92LbD9HX1+U4cgjKE65eClgboadex75MdUZ3VZWsRb5k eoWFxt0QT/RbrTahC+tyhJ8FFQhkyqou6S3QMFx1mylG43U2tBAdiQ0pts7uDxE0J9LDv38G BjYf1yKz2XnOF+usngzuFH6zqDo8rafZnNGuqLE9ysux4mTmS06yFqbdAQnItmqOjxsaf8rq 5zAGyni4gQvkxKpUa01sOs7jL0JMbSs+NEJr8rEjDcmCmQvxiGlc9qluJB4roKFqBmhQRP4J BSNlxTLjtpyocpjoxqi8idbHGFPnUI4u1cnrVMdcBSOKP90469oR7FclGEGyRg4/bNEo1sWQ ThEa6eLBEH4iUhKnR66eY8n2laEmVHY32CkIJlcOdsODjTu+B5C7mJNn19wZ9RWFTxjtttb3 cNPXzXxfEbt1zOuWZxwMAfF4DrvnZpsQHXEywkjK3Gf7513ucsIjR92snsqhF36oFojUn8/z DP35EpqCXR6ObXD1ab/VemoUS/ol0YA1VZdU9ZnuoKxM6a99eyoZTq5oBRZgQCvlxr0C2dSd k5So42DwbMAKJBlds4gKMhX9MWRFQ9EZnc7lt3tpl8TyTNIg/gc76glXc86RXF44NXkfqZ7p yWq6jZvbEcl0m8++WbLQiXmsPDtow60z6FIPIB28lpC52s+nWEM3u2r7U8GzbePManclvk/H KhHipFLG+LBz1miRSOh+lflkA9mCvY2OelPwwzAXF6L04Q7dPkK5MZ0HvOQ8IZqMS51rwlkc 2YDQqZbkWMw7jNMdUgrYOj76oaNXPhPRuRBMBPrSCyi6QbTSkdkBMgzTK+R+vwUPgK3V8UtD sYfGY7AS7HmgGObEgmubU7x2bCkYRbhyNJc2Q8nr6nOAOX7HGWjdEWg4LXZyb4x2BwSH9oi6 +cAMdtiGexqN+R0qLYolICt7s0p4X5mqcUBoqniNq1If8GIMN91xqzM/JevZS4zOIZpKKsqf 0kezD+OaxSNujY+eh+02pYVrqXZmL6JdoCn7xRehZKGxcAGgdeUDUncDvf+mLXce/kF30tyj LWcxi4GLHGGNyu6O70KECWXFh05sncVekzVaNNtSGsLR7a1R/c6codbaOBvvpJD4Q3nzDsEM 8tecSIma1ikR9ExWyr7miabJzITsFgDDVE/6wZpp7pSo+g6X3vch1tvlSLJDdiuFOU5jyE00 rOTGyoU6N2uhsAQVt9ehppcdjajNEidAf5a+H8bgtKc8aTVF4XjCHGzXWI0I0CeZ+xRB7n/y o9ZsU1vOXQp0958QGoLWEjpBrN06uelnBkwnikZ1E4i9ZGtErZmNiceMcaCy1Xp6tVb/Wpqr xn1xxPFXsJIn5GpKIdMT5qal+w0Ute1dTdwEnLrAmTIOMBbeYRB/h7/kyrJf4zu5K8H+AzK+ L+eMEUfyizSDYDw7odwTJHTi55HJ5N+Jpv2LiflyP/bI8Zy++I7q6CkZ/0pX3IxGoDPiegrb o4yW2MiXQAh1U/Y8lJ+19y23LXrBx40HEq9k21lOxm5Y2ZiXNOl4+oUaN1n8BDINGWoisU6O 1SZpH6Frq7u9Rr5Adg1FIJ7QyHWyEyM4WIAAfodAQjReFA2M4ddWzvQ6iNBPtntJaf5G2cHi Edc9VTqvZo6rl9gK2rC0KzUdujDUAkTzp8dyR0PaiLUUOlv3DrFo2mDRzKDaERCkGZv96T3L 68P+U0dIr9A+tU8QGSukXiW89LcDZ7R5xptdfEZjsB+QmWv/8sUTVBafCHgacfPyY8aWRn/3 +OqxrJC7o4pe+TZHdx66JHEQeQN4o3i6HIV/HnEdfjjaOVgBIsNEkkEueRBE4Hy7wlG3xnNI IKZtmV3yxhRrgR6K3fHeVH/Itl4381XpCE0sVFdqiJ5RspISQlg+BwMuxDCtSo9Y2wgqj2uJ otjxeJP2Thi7O2rfpwh/14gfxoi6ghzEWKYyqpjoZdZifioDh/5kyf6Czz8RKCXkwt2lDvA7 f9ecdojuTXXXGpwOCrVm/WmFx/PfvJFHUeuj5kxHe5IPNM3y8uzmWCGPKb6gVGbXF2lCSuCu Ytfpenev0j2RzGYuDyAw4qh7aYNG+CSpem53512nx/lA/jhIwCqREQLoo1JqzmhjuIpOEVUq mo8momzIoJH8BgQkTQ/97N85m2NtUoSolU1RLmgS27z77UgXazC4E+W21nZyl4PwlKai5mmw udEyehEhjrMjlWJaoaZFueR8Z5zMNcY1qagKBZ/1pRMS/Q3IS8tggzA2lG3p4ogSoccJG/k8 CPQE3VcXwlBdfCxbPyflZlUH7YVhDP5HkYEAcvcFgkg7aFFh0Iy6/QbQPL8R34u2ifPj1gxC 5PLb3sCr+NTwWOKJnBCIyoGQEXFeRaal+9SHKKKsKuH26eLGliPYU84P4GAj7KkL0l2berGn nZCy/kVi4WczvPpu7vZe4+QjHhJ9H6IvhrCmGMqNuQXdGblDFEjpTVAIh83QRImSTU4/j7fj lMI3d4xq/uKRI7MJa+rQMtwMTtREHjOTIyXJUbdNOsOFUn9N4/XCNxov0ZnBq6I4Nu+w193K C9Rf6OqDnn/QYdjlFYRjznnV3+7jEyon/Wga8sHlkZfS7K9M2C6dhjd2RBjPoIn8GNdD96MN l2Tm1aMkrzJsEY7nEqv4Ri+n7eUYAQPemt/qAM5kMgTK/1LKnHfILTj5UhwNxB+SqnVVPofs F2MyHwBH6LM98pJwDQWfS3zziv/ejXdTebfbmu45ZS4ghUjY+GwywtdgZj6R9WKqBbuppPNP d5+/Ni3lSwlfCozOsBY2NjvDDV03Qs9IDwm3RDTQ7aB24L/EDjzdK+/SWiIK/3XtF+VQIbzV YQYjdXgz76rC2DAc7HsGQkVGYvfz/fZA/LHHyhMbTwjBkcRZm8fMZbsF0XP748xjvhE3AqXH EVNsxfeYg4TB3cvoMfEbes1rQ6PMmalFNEGf3oXlJhMLwVtv73Nfvil2nkjpQXYzv3FZhUUJ g0VFK/ZEaGjVgtCFmCuFQsBcRk/H+DJaSdjusBMUArAItKGvFNv6yRqRtHcVDHnqJ7x2iljD KcHssWUjcy67dmBiiLt1zeaGwv3eefZ8tHjPSh07Q5psgdNgrw055BGte3VgOz8RGPvjgvoV wimCJis+xnQ04z2GjJlFGbMTgCE2iPRLOispGCToUy1+Cs3dIv5o9mwohEqfNaWX9idXZ4mk DzsM9YtZIDWplBe9uWYgdQ5Zaby5n57//QceSnhbikMEMoZzorUimzXZw1+rQNpKd2SHFvdM AffWm6QphQryQ96C4JbvNsV1O7bfyL5bAMapp85kSf/3AM2Pyw3eYaRKsPy7isBmAtKZDvEY PA5n+1VIMswJ//ysYYflndsrvQZnT/x3328C9AxnhfTYkia3tMO4FKDu+4408QiWHvqLAvs3 3ZLcEYEFIguKaGHZvavfjJE8YNvWyLIB8tFt57KOQEqhwHAZ7/dle60zWUZk3Lx+jk83GHhK ubFsfh3VtYkzYsi1Y5cAYlLFDzmiRbXakQU1ODdYuUBiEIQtoA7ZLfHotG3z8AIztk2P8G10 4m+vbkIsOq46KXVAou1hmA0+GxqjrLhBSozwn/Ku3QQk3aj+68W/zExn8NbN0PKxncD+sMCt CMmq3m+XJ7ZkRqZWQIEdM0g0wwiH/bRAF2vQjME0xFVGduiU7uwXyUDgHaCnV2bgy4t+PMtb I91/waV08y76IJ4u85I+z85kMxmdfSHctHfW297Tszx/ILnJIUkZe7K7zSunP2LnrV1YLMIs 6CbfknJMrfrZKrTiEs/9Zw4Wi5TPpsNmA6+NV4qIC6Jmk1rfxMOiJBlZUu6GYIv/6SlG0z1c nxAGcq1D2CBbIrjZom3NGdPro2Ty5M2QvHgQ1AXCm25DYkQkXIZTA5PSuRRFa+hORrZJ9UYg /z5n0upoxJ1RJ5yU2fm/LCILkjqAy8iMmOpDZbX4O8Fbq8RUNOOOHY7F2h6+7Pb4KS+xdvtk 8IwcFvEapY8kI7xuhsrM1jsHPbHsHk5yA+3d54071jqErrKVdaIONBQaMb25rK/vafhHb7KP UocYdL4+y/lZQfEc+Oz4xhuizJs9wzTwtHXDlUrGllSynanJULcQB8N6QEavMfcMZ6ZpSXyy nedYUikhBZTCZbpBuqhpT/Ln+q4CjikcccrXJKqTAF9oCVRFnvGxxHAhsqraZXz/4Ji1aOXg O2+4iw/jqUQ/2NyN49Jm0RXplQwE2p04j7mCE+hyg/cXxZiWHhVo4dEKOCF1mPBpZLY6pJHL hKoXY2ivyHsYBr95X/6NHu4AizK30eZvgZbcl+9IihzAnaJuIj50XLj6QKrIRwWuqKwxur/v e+zTizeD78fpfvF5HI74smqQoAZ16gc5DbpFg3rimClj2Ouz1XI5mvGbx91casFqOikClRfg Yvu2yA77M23XjGSORCsem7z4gxo/9k95O0S3i/EbNuNopQO8UjurHoU4LyAVjwIj+6wRC0xu TZY1fqeO8WoT06sp6EKRAQjX++BBjiRzDmT4bp5Pu8jQN6gIcdpkoe0/Ww5zoIEoCRlXZVHn BxlcLGgIBeP/Nj9kPNA13xu+TpFMnle9FxrN+w9pSNZmhNg+ZxNuaGaHNrLgsxUDwoFCFPV3 dRU5gJfZerUfCEZ5TJWfbDdAXMaK0588Ys7SVLaf8pV8dn7ls15gdWoBaGaGmnwFNMykymWE ak0h3dfMC1/Ic+IZWjLrOdQ9MFLMxfrNU2moIBXmiOSnm2ublLTgtUosKfmJ2ummTEh5Mfr4 EKuQeGmM7U2hReyg/d9O2R5xI7Mn2u8s2h92m+BKoNXOxIFkxHFXa1/4UgG+381NLXihv94P AwfmCX9SSZCoskYdbzpLaUbyr1nmCt1SfW0+5ecLlb6XJLdTI9n898AnggMU090jieBmm5n/ 0NNuS6Caz/A7WokWlb7LLXqz7e7gqirqF414UvcTzFsfKd6oCuOwY2zj25cy5YcTa+fwHdq6 pKeKrAej7/HvKH1NHVaQjYFmlPPzbg0jrquTnwuAAgJEfrosz3Zi9jFJB25jXvp001G/NW0t 0E3K4K9AW1cxmJ7H2CFbkQre/YqywV2gfN/XI1SLGkJH8Ze0w8da3MKBo7oL4rSBtZFOWG9j lJhYeX1msRoQZ4mxt6Zt+UCn2ixDSQSKnzCS2JV90OkA9E5xwPwa6B4ZytO64yBTYcM/78v3 ZxB5UaPHcFtf/yrFBaFdSINh8PKHjt996Y741dNN8BFnMbqghvJ9WeYuV0L+QiScZcRv9Xh9 YqeNCFT4VDf+xGNEcbc1HAboxriIuIa8cGeshUG+Pyc1WAYFUPjhGLYl0leiI2ZD64h6aS2x KmQZmxLHt47JKi0lMGgXTuSKyERBWi88pk1dywpNcv5DD+GYhX0styZQoWfRnq+YN5PfYowY Tyi+CrhNTXauVENMeTry0ZNHqXMufZXXS3dG+SGx31TGhEqPEhcQyEL9F00bYO2ma1YIDwwM 6gZ+8rOsmJ4hDJbD+u/TCK9srF38c8TqW1WsRIZBXqRD3buJ4x9d9hpuhW4E3y4ocPsHgPhp +ozV4fLXlXJ2m+4xNvY6ptwQ9sB8+4I31a1wNs1CZmDozwHaSPA7uE3mjHXCgJlVwhxyO07S o/cYd3B3tMW2xbIP1DchY2zy9LzOCwpSbrFGIO464pX6MhRGGUlOLjIOuh5PE8bVJyB7dTl4 /12qV1RCs1XWVJOkbW+zJfpNKJw/aGlGME+G2hd8mP31IroshlbZcGOG1B1r05rO1K81iaCI KkjU/ZzNgcNWzZty22W9N+cfx78jc9snhMp9eZm3nzV+6DMmfTaPicShCATb6xqbj3jarCDG FwdM8GlSJS/RynNztjwwl0SYGc5DGDjprG55O54Z4Ev/r6AGfHUrS5qv1mxn84nzG7733WmB n2h9K0UFn0xsvez6F3LgfNZF8KvjixgPWbdHpzUQSn0MzGQLdC90ApUJbfHJeR+WtdMSrBHq +cdO0tz3YmLeUX2xKWPNid+/MGWk1kBm+mOM1eyyzAXT8o9Lz5ICWO0pJD/tEP/ZG0dRxFBw rGeQj6YSqwEM9pmTDHjwNx2mBNyhcrl0bf17hpY+1in1VIzwrJh9Vabj9kV0AcFG//Oxuv/y kIhfqZkedu8nwnuZ6NddEfplEYITz56s/SZXNGag4imckNhmt6LA0Ipw5OWMYFaO8zV9R8aS Mm9tlIM3FwHQjfVKuKpuhJ3A4BeBefFa7wXV9oRzlDz0yCqpOkKbeCn0bVxJoNKpQwYOktxm xeINcxK8TWKLjZX/LOFOGFwhZ+VxAX//OKGq4JZFiamydyQLU9XxSGj9zlKuMrcaQtm+8BIK 1ns2erW923PMxy3ruPYcgjStfEyDqP+uNZ6ZuwcmUyEZULlcEl8fOT4DhpA9/h328fFn3j6u EKu+rzOkXDZ7GHrwHbzn6daPYKx+37Mv4ImQXnY9HI2BahD29EaZx3OSxKzZMgYOILxSlp+5 wLSU+q1p07mPrwd6MEXiWj36w8A87mrJ5MQ4EcZllw3JbMmGtPpao3I8M4iPo4AMbMGuSwR5 nsxaB0xo5MEQ2OBZNWly5t+aQUYuOvhogIcMCtgMlnCGDrb9Hb+wvQPJIy1sh2t8OuFctUfT 0gfEFfqFnLwQAjWDXbgImHBK/zX9NI2S93JBoTxWDw34SLQCluosxZ10hbzQFZl5iBE7iM3V iKjtjR3NMQ4kIruJrHViuOwS6DKDRkNoBy85/6OHAjuVgp1j6qkjPRfo0peLWzlvtvHdouFL JUXwb+MluFNankwcz0RJUSsjxnx7KkTRgkNHj1zO8a1/h2eliUNYGndjlEYIglLwOR9AZd89 WyjIO5byaRMsBVI2xv8VQX5dDIpeziqUYkNCANsl9lFzQqBrFALhWxe36xeXcT2XzwNLlbAI dqLLn6SmvTn6dVYxGouyD1G+XwtyNnxOCw1pN3CEBRQJhzSE5hYCnoawJJ8Ke2MPdwFOmVyS FpOy2GCZrxBVGNIMD8LcH3PAYxCkvLb7ireEySZ8P9oQyYoQO8+zJ79JQD/XUZI114gB4Sz9 IMXRQxsvvlrgpwC+G7G6h+5QvnwgRzDZ8VQOf312oda6vy+4aRgiwRS7kVm44j1wD6rnB+IN h0aPrH2eDb50M8PuCL28JuCGMye3+gFlYtBcte0sphwOYq7gJ2SadSDqF3ifv3J0G1QjAF3w cyzwne1TZ9XGKqYaPGygBDEyNDNJRRk5NTusqq7bD1IimH+IP7sUypfQuODqbLaB0cLDQMcX VZWimEyT7PLa13A/rZ9ov5FEm5d4khG2lieBJGhHGHBITZN4IYbcDteTXPXn0kn+5Z+1FvOx 3pFv1BiyUsLU3wVepWdslfFm5z5C15MckzP7cOaLUF0UVMg5eXaBetlfoLF1fTXU2UZGq8ZU Gd8utxT4dUeP7rMM6D3taZyUu0KSILUTVr1raEtiNi61dhVEJrUAL7GYE2yPcbGVhO0yrg7T Sq1tLKFXvJKIQdyV+wuld/kAm3ijlpDs3DnCkaNGbdKmpRU9I1JzY8aSKYJAXfuQmZ4m+L39 z4qVp1IKLI6dUGbKPcTskhgVLwFxoXbYVUkfbIF9FWzFPkvrGFX6kS0s2QbLXYikCUoEjEGB h0+DzCdo9HNgQ4Gtqi/kNgq9kXp2oWnz6ehqmpKyRu1NPikZHrP4Pe36Lll5O5CBpbvxx/nF 2XETEcrPPrHMpq+ROo2BR/z+Bx36VReR0Z5kiETED9qVvy3nt7Iih4tTWhe2VXs2kpwdU1nQ XNQrsmXkeRW3LIPF+air+L1+t6+F1k/7r21O0lP1S5njphxkd5gXwUC4rrwdBfyrv9SdhSUu p2Dh9wzfNVI3Rdm13UxJW67nA75Vf/DUJhJGykDaTsV4MZws24ncZMwy2qDZfGQxxcXfla16 lxdJ5XyX+HpW7pLROZCsHUgI8EtMgv50tXs7Gef2PhDQf0R/nSOjzj9lkQRiow9jwAV7xMJJ HtWnR50ar7jrj14wZ1wJIaFrqcrQ/mr5W6GCJW3m6u1ysDPdkZUnxGdXH8V3hOrzZTPvNAkb trl173BqiYSoSiDP18AcO7Er5PMdjd+cRbBQsnAW5B7LyRjcW1aaBC99/insHKmZEBEqkPQ4 ct5mocA33XhTXEbAqMreK57FXmpb8kxfsWH4J29SB0cWkBkxVnbNn9ntRr41amFB6jL9sFYa jIVSVhzJs4nHTmMG8n4RPT2Y3Aks8PnpNzZFrY71dFjBiVellj2OktoMmquDyZoC+sldlYwb T5YB8FP47DiiKJUX0R3D3hifJD9NiYDcys7/1sS8FHh0+/IqQsXAL1r7Pg0AN52R4Btp1gZq MWKT/8FBBVgK7i/NEm8/vKPGDFaBTWQDkkYrCfTMZKhd7mTNFJABCudv4++4gWDbKkVApGZE WHymM8E3dntuj6jhtL/YZEwAHZfJiAGnHVctwpMAGgzUBmBwnu1/oJcwxIQ+8ITfR2RSqjZZ 3W55LFJ4R1285niUDJWvuOG/Bv88rldxRNBs4zCp/7U18iNMWyzUg26XM9jDOiuPJui9GSJU Hewzu3jRgYLVTkDobaOZp7KtxCXhR/Vsq5VW9yBWCc18r/7aczU4jaUawakhP1oyvsenhF6e r7svapTr9xDdXlRFoWro8hvC1lj1noY7drkHFxSr2Z3ShOZGZRhk0UZOKkusZchFL1UmiKPs VsJz/vA30g+NWqA5TglVOgIyZzEB2m4Ze5UORutCW6zXvA7FEhGQJRrRZb22OcnMBfIVWYzS lbtzdl4riyLpsBSv/Ow282WHrLolpOK3yBpAs0qE0sGoUnaC/OwrdJ23h/RnDmoBU63CvMo8 Ej04UzXd18IOoOvDcnFcAm5GTfRdnbxzDAUYF0mP/xJJJ4H7QYP8yYa24OsPdwdvFlGhPB6P CgzAHwhQ+DilJNLy3G3qIRO1cjiGxJCrTR/sqhSr1nOfJVNe4SqnJni6mVTJwdvCk584qe/L +eIt/p7k6krQJjeQwxQkZYhI2Na1DoMhmEBNjWtldlyGl1C2dOWTAJvpGd7kwFKPnxr96eYJ 8vCRYSn7Ifyehml3Ot8g9llTYS/CT1Y7kqO0uIF7EPZCHPWmypDBz+azru6KSFS1DET9LaSb Wk+J5lC3BAcqiQWLMjD3TViaCoyI6c6zcJqZkbzE9BuJ+1wsY5EqB9oMLHIu5iftNAI2Nlam XR8UVdlqITTwSjiqS8QThZZe1LanTY6wkxLvnhgJHEHeF5yDyXugsgl2ju13LWFA0SsFhVeR ti/NHhhFK7kK2NtPGsmQ4AwSPPCOX/4w7mfnvNVdC+1/Wbit5totocMyIz+g36Qx3yX4caTU qbQwpYrDtvDry8tERMyRycMPHdNVzuxCdgp8QgWR/njP2lqkuWEn/2ikfNj1KTQkuyWBEgJd ptvcRaSBKTe8FifDRwvQybt8eNXTlmXYg9RC3qPzdxl6QdbwQGGFBw3k/HnDRKZzgZiuJLvD KQxw9o7M36bInUB1uLH+PCyeZU2RZE+b1CrvIRCvoXOYToniHlgp8bEWbOcUrrP0KJPckvOm M5BEbZLgbYnKQn5NYRv2sr+Ww2w7zZUN2prrF0MGVcnh/zrV93KOKtqVFpuTqhPAde8hJZhD xK1MGZTCZxJdFNApu+MuhsZ/urhLvBisW5Dakj5CUgzsu3RHgOw3kuysUyKPm/d0R8PDMcaX 5nHZAkEto1toPnFEKj0X5YhWrwdzikhpU5drJ7PgVjwqvK6be0V7BrT3r6nWaH6+U+j9SdDA n1zRdS84jC5Cz3cvKzQopCK6hT1xhmY6PBVUkOlMfCIL1OpRHBci5IboD1iiwNowq9+gpcjd DsNWAVDN3zcnT2vn3HOqyv0rb/1xRLnknIHgNoOcHnEDH2p6XadoRtpY9WShQpnZ2yuGpp3O T2a5Rs+Cx/Q8vrXw+UHT5N4OaD3OrNC+PSG+qu8Whmpbu9Vv15vAaRRQjJSPuv77nLwbCoUw W1u77KcLF1QI9fT2+IqJgJClYJrSfsnvIvAodQ/Bj10M69yx2MU+OfQunrzvRFdgxu0709dF dQhGveVOpB3GD71mme8pd/KuglBnbIHdC3lCMj/TZvXMStRNs/GXaMQFbbLAtW+rZscOsHIF n7gaXShQ/+a5BUjzaxv7TKAWUtsOkvs7flm1fAhF6+V+ESMg5vXRmCOU5BK3hSmiAbsEUHqF DU+IffGM//IXB/HtAzJ6u0zrg1EQgEVfd43Od3PQFsd/WulpirrIV9J6mM2ond9ogJ/HfcY6 1MlAtmz6h0NLKGB1gVHvIPkFPXBeQIkYvn57B2VE8WBgMhffTxWve0NdTjDObbVkv36Qy/Ew 2owNJ1Mh2jTcWmYzrIOgR0yqmEBFzPT/BOZ/gv8KAcDG1MjJxd7WyMka5v8AGzVASmVuZHN0 cmVhbQplbmRvYmoKNjIgMCBvYmoKL05JRFJFRitOaW1idXNNb25MLVJlZ3UKZW5kb2JqCjE4 IDAgb2JqIDw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBlIC9UeXBlMQovRW5jb2RpbmcgMTIwIDAg UgovRmlyc3RDaGFyIDM0Ci9MYXN0Q2hhciAxMjUKL1dpZHRocyAxMjIgMCBSCi9CYXNlRm9u dCA2MiAwIFIKL0ZvbnREZXNjcmlwdG9yIDE2IDAgUgo+PiBlbmRvYmoKMTYgMCBvYmogPDwK L0FzY2VudCA2MjUKL0NhcEhlaWdodCA1NTcKL0Rlc2NlbnQgLTE0NwovRm9udE5hbWUgNjIg MCBSCi9JdGFsaWNBbmdsZSAwCi9TdGVtViA0MQovWEhlaWdodCA0MjYKL0ZvbnRCQm94IFst MTIgLTIzNyA2NTAgODExXQovRmxhZ3MgNAovQ2hhclNldCAoL3F1b3RlZGJsL2RvbGxhci9x dW90ZXJpZ2h0L3BhcmVubGVmdC9wYXJlbnJpZ2h0L2FzdGVyaXNrL3BsdXMvY29tbWEvaHlw aGVuL3BlcmlvZC9zbGFzaC96ZXJvL29uZS90d28vdGhyZWUvZm91ci9maXZlL3NpeC9zZXZl bi9laWdodC9uaW5lL2NvbG9uL3NlbWljb2xvbi9sZXNzL2VxdWFsL2dyZWF0ZXIvcXVlc3Rp b24vYXQvQS9CL0MvRC9FL0YvRy9JL0ovTC9NL04vTy9QL1EvUi9TL1QvVS9WL1cvWC9ZL1ov YnJhY2tldGxlZnQvYmFja3NsYXNoL2JyYWNrZXRyaWdodC9hL2IvYy9kL2UvZi9nL2gvaS9q L2svbC9tL24vby9wL3Evci9zL3QvdS92L3cveC95L3ovYnJhY2VsZWZ0L2Jhci9icmFjZXJp Z2h0KQovRm9udEZpbGUgMTcgMCBSCj4+IGVuZG9iagoxMjIgMCBvYmoKWzYwMCAwIDYwMCAw IDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgMCA2MDAgNjAwIDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgMCAwIDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCBdCmVuZG9iagoxNCAwIG9iaiA8PAovTGVuZ3RoMSAxNjQ3Ci9M ZW5ndGgyIDEyNzIwCi9MZW5ndGgzIDUzMgovTGVuZ3RoIDEzNjAwICAgICAKL0ZpbHRlciAv RmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnja7XRlUCTckiXubo1Tjbu7Ng6NN+7QUDiFu1vjro1b 4+7uLo27u0PjDsv3vZl5E293/uzMr42tiKqomyfzZOY9eZPis6Iyg7CxzXeghA3IkYGFkZkX IG9u/d3J4ZuNtbwNjyzDN6Cpk7SjoRXgA+NAoKAQtQcaOprbgMQMHYG8AHWgMUAMaARgZQWw 8PDwIFAARG1s3ezNTc0cAdSq39Rp6Ojo/2n5ywXw3e3fkY9IB3NTEIDy448z0MrG1hoIcvyg +L8OVAYCAY5mQICJuRUQIKqgqCktLwmglpRXBUgCQUD7jyYUnb5bmRsBZM2NgCAHIA3AxMYe YPWPA8DIBmRs/ldrDowfXMIOAEOAgy3QyPwjDOhqBLT9C6IH2ALtrc0dHD7+A8wdAKb2hiDH jztwtAGYg4ysnIz/KuDDbmLzd0G29jYfHtYf2AeZoo2Do4ORvbmtI+Ajq6KYxD/qdDQzdPwr t4P5BwywMfnwNLYxcvqrpb+xD5oP1NHQHOQAcAS6Ov6V6zsQYGzuYGtl6PaR+4PM1t787zKc HMxBpv+sgB5gDzQ1tDe2Ajo4fNB8cP91O//sE/Cfuje0tbVy+zva5m+v/6jB3NEBaGXCiMDC +pHTyPEjt6k5CIHpr3mRBpnYAFiY/2E3drL9d8wZaP/3BVH/NTM0H0UYGtuArNwAxkATBCZ5 G8ePlADq/zuVGf/nRP4fkPh/ROD/EXn/e+L+q0b/6RH/d9/zv1JLOFlZyRtafwzAP/YM4GPR GIIAH7sGIAv4a9lYGdoD/lo45kb/W6ihtbmV238V/K/e6sB/VP1vnP8K/yOFMMj0QyEGFg5G jn+YzR0kzF2BxormjkZmABNDq4/L+9uuCjIG2luZg4AfIv99vx9BzMz/gqmYmRtZgv5Sg+Mf EBBk/K89fOj2dwdMChKqYoqydP/Ftv3bWfFjKhxV3GyBgH/LpC5nY/wfh7+oRERsXAEeDCyc PAAGVi7mj8f48Rx5WNm9/g9p/yZi+edZztDR3twVoM3MyMzMAvj4/ffvP0+6/0IjDjKyMf5r jpQdDUHGH6P3H4a/YCMne/sPxf/eBh+d//v570cABLoCjRCW5m2M+AItUtJ+OlZ9yhoYE9Pu 6WKBHAiyLaxVyc/1rbDp9EkJ2eQpNXipDGKs+8371uw2d2z7uvuVdm+oC8eKqjMJeJ5D6EVG 052LvkbZykW358+kV4j880Q9wuNiVnYDSouTWW1va0zpm17BCwzR71Y2e7iLexpfMudcXyzy O1sUb6PkmmjsNrQ6MIyqvOMTyvjD+zuqvuHBgf7OS+juXQK6zGh4Cj5nKGTKcF+7TAIhLdVS jyhMOdn60t8zqQMcy2DEP9m7Uwofm8/AqIv0UjehPm8sHue18snI7uoC4iHJPOZw4d/kQuDB qs9rOMuKPLLuTvabEwoQbuc9x0Ta1VxodNhBdQN0q8RXjJteJUvUG43sqn9ir8nhzoyZmx0/ mfFeuUPahWGDhEAeIAVGPxdF/kWGlRtVd/6JmyGNCvf7izOr/s+5ASKilomCEor1bnSHermP oSfWKebQBSR54UlbrUPMjWLm2KhV9SmFCa++U3C2cF+D7R2KFenZ1fYuHDlQQHx7PwTDc4JO NJ+Da4EmlXYARNBM6BS1l3ycHlsNt+CkbvBs0I/9lOf+ue9nGWHwp4IlBCTMEOSVgB4hytzj VUc1CrvlwNpYOSLfaqqBd0mYQSjLVi5aMMzN0oQ/PW4SGtx20/adCoCnwMMMR92D1qKgMfgW +81b5jP5+6kfMvymYN5LIWDUIhxcTAi2wxjbxEH4zw8YONqRjxjj+OCCVCSI7G6mwVZmFbLC sBdhU5e2sd/RIGVNeL5mJBOYPb+gs+z4dLueJHfXZN86lC8tdHUmyANpHOQeCi9UpLTzuHR6 UTJZQ0Ud+Ns56Lq1YYa0n78m/RSJHaRFqQh8BkclIJ/E0G/qtjZQI3podS9ce0uUrmxEIg4V EcEyyFoXTsWijttBhXBSmGb/XdufSgvVZVnqvosSvd4PrdnE7hzIQ+gEH+zLoPKtz5MYUZ+U 4Sj7vPIcbyHpnUuLmPhPxRnBSN9N0EvFVtiphi5+hu8Nrt1avv4FcYV/fygLborHiVwmuw7V oHDWvp6Uch001yLpjsLlZjs13jTxHWwKhuZhFtqX3AW4BQlujRJlP6fUvoybtfUa+FzXN4N2 Criy7BsL8lTohm+7g50Epuai431GNboWE9cG4k8DIvw618qWGqsplyGIlWc0vyg7A8+/roTl QXoRY8eiuWgUUUCbIPrFXTsabWAfeI09RPR2r62SYGTe+98Gb+hBIFLdMnvP2jYTGaMGM3A1 Mlq1Yj6sfVeXBg8j7k7H/pmSXyLPxPVGmbwD8uGvuqSmGocajKOxwT3MdhdVW7JAKitcxcGO 33TZ7WVPKCcWLpp40FGg1crWA3BuKHH24sbc9YeQn/xsK9vV2yxrtGDAqf9FV7iof6e3wKj9 KTMEYw7aHjBc4XoTXLhC2cTFgYP5Y9Y25dGf8R5WphwR07Cq+GZkMwWlwzAsm1LOWFOGE1f7 5XNnIBzyTcWwwTnf+BnnWy9xSYdY3b5WX2DMff8AwwPbSto9lng3p+kP7ZnM/DKUCc5eVOfy E4yzr8ItG0ypSiTtLtgt7nltp6jjrZvAfFgLOQn3Toh9CrbHa7OMrIjczuvHGb9R7jDs9w3W JhhqA54DRZG5mCu56KNbZI5Ta1wFEF6pzXaDvW6UUjxjyLWn07Q1v8P7cixO3eHoGVOTXYzY RPkX2k5SqKv0LI7YNVmawE94Cg44MNEyjcvOJfQhn11mqWHmVtVGXj2KzOIaW2pbqiHIm9eS cjjWyeuIYU+SUJ8tuUEDo40oXqGr55L4uLQA3aCGFaC+8RLZ8kpgLv48g5npb7He0txpzW13 GIqp+rDkqy70DnWjEouXABccdTmqlycneXGURW6MudiUELXIXVy8LEYeWlGjr37C7e1s4e4A lZ8PZTwEqjYB5hARo4l/LhiPD9rIV1MP7zu1wKvZD3/mgaB8ZTcsUZWfbNq0Unkz/GlcmkQY 7Q2nPVVJCLMI9X43/xJT1x0siDskSpOqRg6f0LpJzwnViOv3p9hkSOQftju6UGC6UHY2Yt64 40pTchxbpP/CP4gAS7tkXsXBO35a798Nr6HvHwPMJclQT5/ehJHXYD00eOT6w+bKK0b2Ofbr GMU+vDvAKhYuXjVxOei72i8Ow2DpV5wvq5DxqJx1wW591tPtNY17Tn7LeZR6W86yqGtVUvfM DlcKoUTAUpTgOI99vomSqc5CUrb6ZCWxkk46yx5//9bP3ssHKyXWCr1ytIeb8VCLtzNRpLM1 VYHpyvLbvcul6kSBKUxnPYeqimzVyxsrul+Yhpxu1rHYWJUr60iCX3avuiNkLQktYpzFhh8/ mZiFOKHsg3zsNldPoW/9jp1VqCOYB4QzN9v6ZTGUUvbvUFtMooM+BcMmGUVNN7bidPg4WrR0 cScYf5odpvtqI+NdZKvP68Y7FHhYR/mFLaL8Wut9aIuQA/Kanlhn398dZYylqX32J/eJqInw UgqUXWgr4wvJTFFoIzme0G+BjgcfNWgHaNspuUht824bJ1RJuD+XNa9RKpdmqYmyCdI4yZn0 +IQYVp/WcPJihVaWxvjApvNyIlGkjh/oy4WxKxDJMBWVgSE63vx2X+Q5KzZOqh5m0/u8lLeI HFkIr/3w+ZkTny5MGr6o3I8EZDNPPFYRW4f19jidDkTC1A0RjYivPWgStoLxaQ8pZJsgQriv EZLD80vGDKCEpGTK84aH+tHSucehqCYpJiQrBBhI2VFZtxuZH4L6XVQMjpYHS9s4VZEUqc2H sGhhhY5nXTkfWvPPTos089RKgbjn5jRFctcyexj2kssbGfnoqMM+bsvgF+UnzM1ri93WrSDw 89rVN8mA27wVQgOEyvJIw5Y7UmqMxYey+AA6hKM9E1SNiudXqczEM5OHDbWiEs8dDNc1SYbD 0lr6h1uPAzbTAvzYRuFq828RRazK+xlme06h+YO4YhSXMGwwi6z1+9kVHIPgYMg19UyrHdTt vPInpjdDOxkIrr1fgwVnyuEcJoFpGhG/F1lT2SmB0tcasVra0Hb92AzVrIaWbDJBChxdZtly ksefDm1K5eObeEuCm8CiVRxCfjQGGEFCbD1xGRq4DM3Z8tB1U+lXgCscrwaCfI8QHXjJThcf A21C0RXppJ9sinh51qI9vGEu6BT4IEbqPTL6O1Mig9GCwvDDW2M1mFOPMlTaoHAFb+XVrt/z Jy+Sa0ICns5PF5p3ny9SQ7603rESg6zolw0HuDqbulrWDAVcpwnk2OXXXFA8EEGCSLupeRmm dpOggfopZitdxJx++75EyBc5HX+FFiUiyYBLAn3c0PRthmFSrro5fUmSTpHjp3zz2zu6R4Jq VbqJAj6etYyJmzqYYep8rCeSkbQIDk2GbKgWHpWakPGBGCcDiK0pC2kNtZ8g8BmXEHSnd3fe iaebTzJ7jZ0utMENSSBpa7ZPVyAiOZXyHeahytU/sHeRXElfLqHa9jLsmpkhwCWrNx41F2JS U7RByAJ1ZmGjOrJU1NtCsvj7lKXRNlp7IXSS3cmvqqzRZH69W5wjUmNs9MwR5JzHCdF9zcnD /kzNG98nD6oAPxPMKeyrEDuYoePVK9GdSiVJM17TItrjZO6IAGwpClUimy1M+W1IhIH4HWTj D+VEz/6W4MWuG4gmc5V9BYQ7AdqT4Dpgw8tiqNFyt2S9GVcsqQbbbKOzzIaCmlAaljraCMpg HrttpwF6zxNrcTn8gUTWTniTRfGjicFlh6aNMas+8+YvvAF8b737KnEJ/diRp3LqhnQ9Winp B1p3FG7jVMeiZhsT6AUtP33hEPdXzX5IJph03F5xvkuVwGJGtxSwbB+mJXggu0WqJ4VLiByZ vtUYWiEI3FzHhmAWvdGE1csEOXfreox+v6PxThCPdvgGs6tQUlw+rVaTy2jf1U+h7PcEWoEz lXDLy+wqvOdpU+a/N5NyFnPVG1QZ6nfhgCRw15gaCwofrJuvM/BzG+qk/inJ2tbvFRc+FNB0 YGAJOwchidmtNu65Ehz2JTsRojbph2e8ePV+q31UDfyzFuK1VMxCebEJgvbcggzsL0o957GQ 7yMij31dPA/H2rtfJYDAF6WkkHRoRs4vEMQ3CxomF13gL1XApTohXYftUCkqSLV0x32lE9Pu jT+xFsJa6TahPKI52JvVjUZmZrqtj6toiNcYfbwLzCtLxRMXNb8uyLYhA9LZkUP65pFr5lNb kkwFeeK5m0PI5DOTcE72U8oz5TtRDId4CUikykaw3DCjIl5Txz5dZn1T3UsovUPOXG8LDX+L eEoxH0sHw9TcsL5lSODrCaqCncLUDeaEl6UMwEiPpR2vcz/deXQFSfKExPbJJgswhnupQTp3 HR5l0TJuzV/SQqT2tiDIPKh6KqzmZ+efF37lrA3mG06TDtl2Ndw1uXAtxY4W4MJQVyJPHPc0 MVYnmxItml2Qi97vuveAmyWjNw0eJPMbPQCGHbI5zvbMKAyGWAwqKvzsaxb2cXBc9xoSohMw eRreQ5s7zpZmJv9KfNg6xHjGD/kzgEbWzWQln6oTTgKBr3ySDzm+fyBHT+strApUCy48zRGB JDSuZbPu88m1jqNpHHHwQEFol2tgfce4uuULgafJOjChHekTxOuYPeomnvA98b1xjHXE0xVZ IodEm1VM3nhWHXtAVfdh0TMl+bIEgfrGmtJuuRKxxlECqxRmrP6VQc7MTLJF68tilb98ulTG vktmJyZBtx/33VaoynH/5WnMPo4gevM86T4U3Yx8eHy2y3zXS58iQOpw42hE4pjg03hj42MK bcD7d7Ph3d3Ir/avikwr7l/ujBnFnRTWu3deESUGExl8eFcC3cR+De9Ct0zpy3tp3NSQlBjJ ZVINfNcixuZx3fr0XiDin5D7kzH4F/IIY8f2czyegyQBU4PIyeneb2YWxyUICowq97GxyZeQ kaefAUmMg4/OigyKsB5HJThmHd/tQn9yuVXu64mltVBJaI/7oPOnE8Sjm63rnj7iWE+Sqhaa pfrLqMmYZ0gpBdO3gf9e63NW7DSUtcm56iunyTOa3rzf4B95g5rI5nv8rBsfkcmK4Yal7AsP ewGccTSXKhdjf6gjWXzG9SK/Yh1YTLP3vDseOQQagXSenNx/bf4uJf8qXuPnDOikHofOOxMV t5N4I6CASYM92+daxIk/jT64M+4PqG87pV6HiKxIMJamDLp6ZUOXR6U04Id0XpxpOz6N05gj SAVPUX+gQ+5hEBHJlfXHJbTNLfZMUSJf7HrGo8r6UWEVYcmn+7VuoswYdZiZq8p6wYnHM1DC NSU9BmB66ifbr3qGCz69tRmKgg8acrai/iGQo3BSYgfAiwcmkLgoRFT/8VJJaQjTgDQpxMHb WLSVeoLCsT0R6xm8R1faz91LN6EzOjdzv8tPI+ft9RV7vzHOIX8PDWpeHEy9e2UDG/4W0iEi L6A/ncV82tY50EwZmBPM/9PCCwyirvNaK/u5Ui6BzxzXElBcnEThvjud99nRlMWo3/xPOPtl m26smf1a40gxv2LuADWcTEjDZ7cuukIDKyMGpc3PV0vJWBjbWR3MUHGSp3HjehwJMUrneQJe MI2flsoRluAheXZ4uHQNijrkXGP6OWelUPjUwHr17J8phS0NtgcPV/j0kq8dWGRW1cjeDK2O 0Jye0zGvhKMLIrvu7wkVmYNoJ64EbLz2vFK+NeRp21RefMYJOIm2uWpVjGFtpcpfZPYVM7ng hFXd6HSC6rqVZSFxVKZ4/yFIIBq5Y4vrnLsNPygbUDKh0CRbgMHLnHN1fiZ9Dcv//kdZUQZo lqjIiPt7tf4guuiL6c+pL+gFesxHKka/sMgefCRKoQDY7yN+iV/ynp6+e5+yfiZ8tpckGfz5 zFk3QVj+rL9HSsum4LjmNTytkwYvUD3bCXJI2cnQ/f47DUsHNTOxPxMr6UHAC2RDHSNrEdhv abNQE/U2PhZcnwvstTvQUvFldzeAu6fSjDnZW4CPN36tmoF6PN0vRhdZUo2/yJojThFlZNmd D3ghGlmOyIoZLbS9ayhQXa09PsFc4bZTz7KX492DrgaYVoJRfaG/ayqdT6Hv92JwKKzRzYx1 LlAtKwiZoWh6tknTReFy/n6d14KXGm2MsbauQlBbFeIA5YtScUzey6/WeWabTK3ZcRaJnkwj VPKo4gilUYH+5TZ6eMIed9Qt7s6eccQ6GJp4YPILR5hVPtaFmUq7Fq1aZ+L+RZhtvjXxLRmn YsCPUP+XoQ5LBSr9VEtKfFv/M8JrcpHO9ol9ZfZs5DQE4gvliiIVpXfkvB+qqCdd2NOCerUq Y6+9Ehw2GeuD7eCM/rx88jXIRA+LYq2SeCqZUyuqXIG0ReFzc2EiUWPe4WSU8ELNknVRV+PJ 302m3mWyVCng8Iuhu7LsFntXVGVXonKfZrIkEnePbZKIvHltsm62IbNzMVyULl6wGr9HY3rn 2pzAAiJ7EieCgTt5PUSwy1Ysh5FMd9x4JjTtEWsT4eI4Tk1/1jv9xlGg9k3dykVLiZAs1T0U KsQKiJlIX/Xb3Ni0LttryT5ZZPYWRN6AZxxDRz/JxT4yLQuhL9uMH+TZ6IiidEOxgG/VsP+y eJ/9PC3KNrErGhp+NQ1xDzbtyYgv708jqp8/5RnpaacwIGXJJqn04LT3e4gamSkZ/9o/LhWH vdf8zNAWu/IHjBvS5VuV+Z89AAswkdhUiV5BbRQIfz1dBHepE6iPd0kD83sGX+e0JVzSfF0I ed0TVI4A2FsKiBqrtPT/BdjQ+cN4ZieKowEttE0h0U4RwSjWsrGvHnZKMQ7XPzYRi3POTPSH T6+IT7zXZt5rqO9RzYEHOUjA36XUVGM+Cl3Ne8Yfo1plLchyJ+C09couKWSNfh8Y8MDY0yPs aPySzkrGmVuV9UAy8Y4E1yReGvdnAD6GZnJOIftA6wst5cNMw/rZ3AhkK5ne20v0Yb3PXQ1I 0+K9DKyd/O0l6FcWH2n0YXDgkOFbRA87YmkR09H09VqEoapXSp2G2ahxxIl9oCX/rCVzPhXD GEN2eeG0lD28T6qP2iOuC0RWrxk+fExKJ/9xu6m2uzrc59eXq2UL9DmErPG6fJPP599wCRto 8y3ifKytr1q4cND6DHS5C9fCHk7OkVRaFn3zwu+F5Ig1LeexHo17Nq1o1guuwnvxKCzcht5Z P5M0ew7YBP96sJP5Ej9Yqp/bdNZ4cM2QtMEMDSoxzseATJY0/85pOpQGgYNI8HVmHXVGqzB3 REYVaeK4lvI2V4sq0XNiuERRl/D8wFinCE48lL5VzahSPO/ri1iDW+v8fb7ifZ7Bq5AC9TXv MEy8Vk9nbLSpSP0VWAWdnxB2ggBOL5zkjZe8KfWDoLb6SdGOom0PYchsSIyRSTvbLhvzAmP0 06AghkLWDt77RK6l0gIUTJAAieG3L4ntZ7jB3sM0fc0heS4W7OYOPh1M48y+UoTOvlgKa8HU LXL+jfUwMDvsX6sK4V4MntlOu2pvuGZ9OmO/Cxe+vyAcxtMaKzna4Zg3PBngbpISBIpMyKPM Y5az9cscJZPH6lQ/2Ws1sp29Ysg/+b2hyJhhMLoRw9EXrsnqgvGnjv0SaMMhwha86CINeoKE tWE6d+3FbhQU7R58GZyQyvYCNMta+2xR9WAHzVtZuK/MH9sZrWF+L/rt/qkbRrbJsL2Haikf A+koz+xuQ+bc7RaKrrC7DZajYEr6d7ZhpoB9LMV659PzVeja/g/ch09PUX64JVon6k04Fu43 kxkjOuPZYHo8O+g2h8WGzuUvg8D6TuoO9eOIOgEnoacEziNx/ZBMWwpw6FZ4tVkRh4xHmGGP jh/l1KmNMlX0W7E5PlFQgTDsI0JevKXSNnZ0TgpDqFrLsN3RVd+nrgrWKNoUld+99Tq3rkpo ZMHsQvDeVT5TopV7bq4C3t1zrUDMTrJ9NpKgybNmzty4+H408CJEQ1LJZc+60qU6NA6nhq2Z KFK/+ffIzJjTWbDa6IWbTd6pqPxleTAy26JezXQGVKxLa3G9jHrGzdN1xQGprNkXt7B13DgO qmVczoOFjH26UQ9PTt1nLkmEryW3WhyKs6XdAb+4KYh3O3rYkrOZlbe67uYozMqbKmFGVVYR t77ezTpK8MZy1EVewmSnyovBKvnnXGtOj5qwhIlphV35hSZPet3W2bM3Gji/HhAYBZalqLNv Br4JhIV06dRm/fBLwAd6Y333ayjh/JxbBpmKSVcpVMzJsjExjCQZJsfl9L3XtG4ie9kKNauY DqExNJPkUMBzIvpCYK1lU9vLj+HsxzFa0ZWjsexoDkN5iuomav4VkIiX3rgv6s+XsVuBNGsc Yff4g8PKT5IV8keCgaBJ8SPpbX20Kx8j8J966saBeYx1DZiJQJbpmqJK9SE/ZfldrsMxW22a xUuu/cMpQ4RTekhR7IazT+uv4ZWbMWwFOiW/3R6ZCtbuE6hrl3J60/DvYpyrDdc1TC4JgjCK 4p5WbxNCPea7ML99/4xCItXJHvXyVErjSVqV1bH3PAsm3imKD15O8dD+48EoRtbP8aubyhh6 KRlz74yMD+4KvVtfsB55om+jnZjwbRmb143P61cHtvGEjIHdARx04MtPjq1ZH2za24ARm7Jr 8SlGDexxcVRunxYiDTH1ajX9TUbK83SOV6gtuideRNzDTi3ylGnVXBOsTMZS60blyI3fCWJA g3hUE17H2xnLBXLfDclPwttmfDhPmLkURjOm7Mg8eK4ebpFzKSOXlAdRqhQmUurOhcOfj811 b0UTxdUmVBIVVRk+KdWntrxQkV5Uy0Km1PYi59YoPY9IEeUK6Knl0o6poPmL5dc2WgAkM0wu V1Z8sHTMkuGsDbG+jF0FhfK3FEllY+DbrWBDWlZm7yLtnJaM5s1lu9boyWRm10QfT4YehqOe MnjjCVbQP1yR7doO3JVdOp136zWPyrJ2LqzvniV9i68lMTAiVQT3o0yQRUfmcROLM760mI8s FUtvpp3jG2IHFfA0WcEd1ggRpNLpYOCdqChIpRnWyzhhJFTqMSEGp+q3DtJaPPL4H7pmhetz PTA4HlTSsGEkQhzfKafQazgakX+9ozvWI7vl+GL80v26UKqh5lntbV0Soc2YviIS8EhcX6QI 0MRv+RG2PGJvgNcvLnAZkOs+2i0wvvpz2Pg0YutIXEyZuhVsg5K791cpAaVYv6D6bEqhui3u ITYsxMAlJ2THce2b50ExBiNPxUJOQofo2PBo10LSY4YMl+sehONdWhN+C/EpgfSezuf1AKhb ucEKh8FxALyn2tjMPYfGz3VbknmRO3xlzhRfgWdaAClIg/GddxI5yRDzLZPQlZC/w1gLlY6D n4feyxGG9A4ar+uYcmWccvqUqIboqL2ryzmUHT/q8yWejP9b2LRN43kqGzp0jISCzqwCX+J4 rJoyUzyVZ8zsRj4FG0sr/7jVz+D+9iEpFWvq33tyI9PSvvQktPaqq+Ujfc6fp9WtE1IilVT0 77vfxEqoGOjFEAU/cz8cgIi0z08k9828LOl+FPeu9IdXGAW2aPWd3E+jRabaiUOaNR5b0TuM VLrk9laWjjZDniYo/5yPEMQYa9XncUUzNhJcFX60uSzYhWIdhV+d0KG21quS1/JKZLQDBYbu /hipH5xcqjQvytp7ONcZ/cqo4lAmYesWfLhvf/NDldz3fWcOdHkK/gJqF6NdP8mEiy2g03bT 33qOugFzXSlN7BjO+JR1SjqtUXw/AcMSkE0VFrkn6LVLy+PtX33k9vxywDK+vLWE5SgVwUKr ScjvZaOwutvCHRS+eKYfoHgSvfgWl8d/V5yZ9cRQh86PUZpuaAMr4twXCF+wlY3CZwH7xVd0 9Gkpr2XtxWx1wnQH4ltB4CJ4PApBi/Ydfp8UB65jCRme1/b6GEH1udxUCeTGUNlQ5+TLiNPN Syh+ZOSbqFqpPhP3AmqhcvIhhs/MrNfoxO3FDnGR/OHN0pJdJVUlrvEk7kXD59d3uW/puaJW iDEOzWPP2JStcl7GPFWqB7N4rCAIuuLxq8dTjkS+P472Vx5dU+hShU0c81ZuD1NJ3sg8Khkk /hs+Sm45V0ZJEuL8n8s7lsFxk+Ao5W5Nj8h10EqMB5WL/QsLI71bBtzOOzP59gGMoS7OiV+f zsWziBz9FmrU14VgDNc8Z2ouS/aolM9jPQlC01XFCRiRvfe7IEFS2DGutjdPQSJit2ENtdjr 9kGX3YOAFTercHuzi71zS6QuV/wzTMWOs9yg0ZEk+igYdQEpinbcREdsoejN3YuVIm3Iepyn LyFhsVWiZeQ24NKPiY7EcCO6N+imRVGSCQyeQhBhpaXcv2I1p6NOpKzZjzvQvtfwUkgpSmlw g935ZraePKSzF6Zba+1tiNYX80V4FUzZGPdOBE57W8lNFix6H8m7CqTxMiUPMVOs2VMUTK9z U/NURLimGvHcz1hXbhn5SyWt0rsrGniFsbW4bpDfs5v5uScLN2/Ziqv3G/Y2PD9D3MSVLc4P UMjPTtvSxsrz+aA5sFEU3cOfztL2AVZ+B+5ABVXPKDTIgFESEpbvRaReInKKvR+nb+hd2A2G R/IUL2DST4qaUI1KSt/9uRYupu2nF2wUz36DCNFpjklZODwVkMxpFNnz4/iMx/6DJ1SlJ5qp of3uzeU6KM3LOCX7T6+q0BYvNTxo2q2mhfr9N1Gx1xJPhyhVAhDt7tCbT87pCH9QUovJK1Jr XPNgIayJfQmph8S7zdHL4hg/w327jGEskaz5XdgW8snnmfNyKDqpMuYYFYRdoRqCpMB3w6BF 3tKfa2X++8a/ELHHpBswf/TyVrJi9D4LHo4gXD5V9aWjqyHOwKRqP5Pi5gaWwlSpCuFb+yV0 kBtofchQen4I020RfAZs6ydNwK5eH2YduvlVpJSZqzb340LP+9NW+ZoEJsy3moGWrhORK5fj u7z0bRceEnGYXw60j74FHomRGYJcGm0YoO1G9XlF1FGCqXBe43daSpVjUjKRZz4tpG/kxELR fvq/PWG4b9lYpU5D7Er9Lid+r4WEsNYPvRa7kDFaHAiusB7TPotIQgIssPdE3PlBofeKBWu4 8JqqjioxHhmOW73DtHex0INt0JHe1xOEMsMxkhg9hJxBX0BnjSlyUqKwz7BjQZm1yRoP7wgQ nO1CkiW8o02/4T9vy+skekDMyUTNe4ggXId1i/ZwJt8Ra/ohLNY77E5aLJUmd6cqRu8VIVkH 4t4gibOKMQu4SFvIyFGcmL68Ml8i2UARRbi5rsRh1R/0zj61kE175Wc/NLGoDBYJqXo3gCIU JpdsALrtuiWqC92eizAYzUElBE2FfGxXmO3WO6Gahv0KvupvEDWkkrZ44/MY/lLq6xA32z0h 6gnIrwMKvTJU6mi8PD4V3sFXw5KyPvwnvuPemcPbySGcFMpLQLfoOxoPqCrJgW92/aKNG0B+ 6sdkao0DLh6pZUUmlJP6/rE/X/IrSRBNITIOUWKXKYqtnvu/SJxVvfD8+eY/8z3/KL/HNYFw B/3Uo5ITsRa/0hvKS5+xKQXVx0r/vmDP0MWx0Hx5683xWc8lhduyoe0HThOJBdEOQ5bawFX8 18kBLrC6byRiz0c5m2Kq5tyhyFXxPR5jLBNp05FhR1HU/qJZQpRvmV0MDPzapi8+PkQ9drzt W7dhyOPIh7yho8mDdFH2DTpeXsXfEEfl2cvwv0bzsuQcBoulvqF8QoB9+Lz4Cx0EGUcxIz+f UFHy012aDAargC4W0krBQOKyd+cFOwKMeG6Hq4J4jeZRqN85C8WJ76dEv6qeyGokO5VGKCxd LhPiNwravDimemGoU9tYan3sXXj/OdN1RQIsTmp2fOIHcTds741IzLoiTYn7sgNbsW+2FRyX a0kpXoOJzz2GMEh3r7vDMU8CbLFp94i/68hCo25l9nQMhvKDe8umrRPajrb/2Ej3Fh8c1OyQ IV0AHdukv5oGdmz18JLqR4SQakIiMaAxyBQKURNhcTijKh7qV67ctQa8frOCai61TBSthWh2 04ujikBA0+c5wLULxVAUC4pAwGm/j09JWpsDss4V3FMYE4GKf2HVuUHDW3M+37k5/YwDU+sL 90Cv5Sc/JU7XGCgj34yRcS+HCODSZiLRAEvqFCq9rDOGvfqEL0BS447jVYF8tPDN+cpEY/O7 qtrY0yws92B92F3E22hmVtQZB/Gaz5ffy5Vhw9t6pS2ZtJfYe6kKZBintoS0L9/unE7rVOfO +uh1nYf5T+uyfJPcktEOBzavyDELvNjxOfolwdp3NhRYXZ7fVqyJlcmJOXnn+5+9BwrL5BGF 0BDtH09sMslJVXNr71FH60cx8BA4OZHaujIKWyTFpX/86Xj9bX72O5WPq0JDLBGgIcy4xHuz 5yFlwhzGlC+CDnfwbjWl90qmDS4Z3Hb12uTKG3VCtX7vd2QmOG5lUVpDt3Cu0yr+SMcZvjwK c3G4qMln4Y1ERtr5Y1BXhcHoz6ZEt7C+Al6Dn2luq6WiFe8IxSatcAuO4KUZR+cCD7y1WlpH m3lnjNOdvr8vkUvjIdbU7qGthX1BetmbUdMgxcIkUx+dlWaI4dXoIwATTcJmAaeIeh1KfvbA eju9bHaN7aHVhxQqmtTuorukKbUL3OpTeqYUkoSC/gNnt7M5aFi3jZ37IJJyga0u7doaRUKz FfKIauL24HMl63TgDEwrOABTGfMI9907h7/ypMWJV4ZlF/ER5IaoWH/fKj/9+s6DzENERzX4 xwMvXk8Sc1zxQazYF0uZ9QH4Bz2rOrwz3ejEfw+HYRBpjr4oWKThpuOeACf0LtvrexL1AY+F d/Ni+ZBGyCp0Roef4flkNaaZO1JS37bC0hcF/G93Ayz6tsnuSsPclpV0XC4I3MsPdFW9L+9N hcuTRntEY9ArW163ZGZC8s0N0dM6Lwedoe2NpTJ0IgS/esl1SrSr4TZVPu9SrZ0+bmJd8da6 1heajhjq9s+GXuCS8sJHrsO6MRtirZo7mYKrNXsYiH1OGHnRiIjmjBPuoaXW8pp6ms3HpKQ4 kJFu3k7N7ibXif0WhfhGI2Aqvr6PwtbcK237sWwbrqkwk0bTqJhhGWFmnXVJwCdNB1S1T2bQ f3VAZLuPhNs9yAhN4IbzBQgglMwzTHYzjFkX6bw1K4jiPLLNjUUWQ4ml+zhDBU1L4E38WvPt PkJHR6eWiRAaHJ7W7EniWkMl6TSK/UmhRoVVVYXVh6CAEb48L+zBv2i+j7lwqKGfW4+6n5gZ ZgGUitokY98bdTp5yqwN79LbaX1Rsl41CJpgCKr+beMr7W66kHOPn933wjNN5E6vQ+nOtyMT hQ9P/Msf6pHj5JW1kZjznprDNwrMJVjraF5XwpNzbCq22uJxUwzGSPmpfCOWUTDWt1jJ74lT M4TRjuDPDfXF0lnfCj+Oze/kCXbDdEhzydc5QiJslbl2UaS6XP5jOLGKKJR7MOl5vm3u3Eji 8KWIUrv4cfgk9apZS4n7oU0V8DgtJsEV6iUh8+YnIgSJsvO52am4wnJ2itwYlYFy9FykypPc AIGLui15761xsEnxJ34URx9C+MqA6eNoy7gym1ag1YW4852QGKTyUPQII6Urz0SJB4iCQtWz EW36e/UpGKQxpyFqq17V6WZKPFhIIzIGGl3Og+jlsLvDtXxo0bYssDMfWkbk9rvDidCwQ42k 4QLsFat+2SUTzq+OVOiftQE7TrkbN7qEghr5wCLdJ0+0uplTuBy6qz9Bn3OcTwejk+ilcHMN pCu3Yaaa49X11zgCjskuvz0iOfgPdeZqszQjfn3gdJBy542BYX+oKM6RVGzPWem6rLE6wG6h 0etQo5WA4dTLXe4SYOJP7iJuRUduZUUe3GQXMnsz1TPayfIKYdbOTQLAEUbvt5Bx8aKhBUKm 4FJviI1/etioHJvcj1kobYWdiZy8vzTvRjgkIyrhhRAWiy/j7RoppIgomFsd+QnDbk6JBFJt vmWVpfjdU5JYeIxDiOV8rJ0zGJngmlWLcaxhqAwHG1nuhqylPj3c7Xm7baAztCqxI8XwB1+w O2CYHjcDIRtLii8PFh3K43DgMqDxvBQ3/gfigCjsa18QaSjHIEXYvrMBQyxPmcd4s9plYxQB iNCMLj6LfdDnU0nZVD9OJibCl55QV9EbhcUT9y9LdT2/MX5HbJG6t9guP4aEvVFM7MX+4b+5 aWhEIInbfpn0+hxOyMUh3gbejKJuq7+m3FA8JEzrOp0JSy1U67xnXO0AlQQYM2GBgyuHT7+t 0tabDfo1iZtnjDQXaA/+fu6fGWE23ZW/DCINEaDBN+UkiaU0Sz/sC4tEa3NalaAyJKVhVH8o mZ+ZwwiMUM4tgMOt32jn9s7bCT9jRga/crS4m4vAbpgdGBIAuZRnAUwbI9AOCY+xzx2wSVUL kUTQ2ZmhSZyEo3OYUszqP0spz5j3PBJl2su2zhWLfCoccd1oXZs1AZcRNq92INARcPtkLKi2 eM6fggHOKhJD/S0f+jATfsOkGer0pMmMkYGRl7t/VPa1XNONYow35/AZY7yDOVQAmARLSmWj S5x8+aN0RZXJrg9hOEbDNIWl87NZpX91xB/ltEQItk6+93ZN9K/OCOH5b9/XVKdtaUortF/a Em0L07O+k9XbymGvF6CSb8mUDkEtVGRBq7sCRTNQrYeDuJGoSw1BX5MlVBy5I85+dZDKglTM Q9akIqqUklBRarJCktMuU0TvTH3pKBY0ofuf3b3Z90mMXQ3TJHr0xDoQXNYjADR6+XY0YtLu cVzRZbkT8Nh1v/w6d2fwAsUiRrodeGOcE00cGSK8ds2lfp571+SqVjuXfiehcMNzMizXtJml 4b0nciZ7xwyvmHZUQ0lTlKjPdOrAOz4272S3m9RTS6Ncds78mnRuBhaGmehP/Z6QQEroFB6S UcWBuoG7iYaRPU8AJ0MI7kVdsEEPcyfo8+eI4hsSpyrhGZuuqPV4WcAnaujKtDpiWGHi2gpo LsIcLr11572go33jzC5ew9B37QuCHLPQeVep1h4H7aVr/JPJnkvaOlTeskiyE7fRjAl7sV7z /MH9Q29fVlcQVLWYAHZAkyy2WYQhUGPtEp7cCLnagQEIW4zLz5iY9cgiT8XCaElSWMtVR3Dv /3nJd3pATbx1JYZQBu6F7s59EdsNOHImt27uKBpX/D3vOiAJJig9hht+6iXW3y+RT3nBVEYX i/kBGhEYP6toSN9cC6YgEqFob1JCGQg1516uYIJ6i+dhjx+ci8Fh2gfCnjmMxSrSDBVUL4o2 K5quax4wVGqCS8yuIf8hBXSpaCttxI9MvEzMoGrHwRQvTXt0yV57zWoo7HTndbsg0vEE68KF Xqn8FWmOEXF0AVzfFcSiUMzeN7+reoJK2PJ2auvI5uezmImbLvz5BgrrE+is9X3wk3qI2AvY Xm3gdOe9rSrVmk5Z2u2zc8RcFHOx1BwfmRCHHcPQy0tG8vGjv/5xeLaXgs68/wMZ7+5LothN VcDaoXONftaFxzcrARL3Hyr+pcmZzTlg81wmzaAE0RJbcS6xMe5C2DSERdQrplAZM2VUplRV txSLfFe8s3GXR5/X4nJrNJX9GAx89pFTWky6zjR4Jb7TwBegWyYPzhEil1LuZB701SXsWL93 Y0isOxVLk9IjyPfHWyYbGBndDr9FQtm3KW/BqqKSG5fg3AmC9inWoojquXFO9EAVAvr6PvhH wVnHXLySIEOF0i9+ZjrXYSNnGcUMSnX8pna2+o/N6wBLdpaTg2MM5zIhFwxrKlEf1gLFtj1z RjgiqMKJY8PDT7bjbvv8MOLc+6xQ+PiKVgFrfkLpz6DJDentVmpFJx4WeCvrmhYquIgJi2hW 2u0CZdTt6lCQBsuRUiA63UOk3fx0fymBRRn4QaWiDWFqWidGs1y64wx+SX+CkwJOhIdz2HfH bZM78eYu3ggMzzXQMbrVWjjBph3eHvCKXiK7PaI0nYwbPzHZHYLGjhn9nFDi+clch8zsEK4i QrOMwbs9eQfiat3rOpSwEE6iPwDQNSkUoOb43lGXPnTALqk7X0tn06ALIP9qu/8Qa2snpsi9 498kS4QKuEoZ5BATORizyQidzxiHWwRPFl6C8VfpIxdVvI0TRqSgMQ6+Nbjm9+XUdjbJ/EOb HzKY+FN+Zn5jR4dIbJrHU0yVyrIuXwmWdetILCPBUoMAQgBCgbHKrBlPTto29FsVjySa3c2C dIEZivR22Y104siJaQQP/po0jjv6JrekIt1NDlQbFsuToYc+UlKzzh2WQDmlIFCtHkluOHUL AGuIqSlpqxccGRFFKIJGyIqvjJ7TANRCYSb3HNV/4dRaVPTTQPwT6KCiooSfv78QM0l/CWjr U+EpUsNRxmzQarf6DXml8300sCk6gdY+7V0V2qgUXaK0uTAAeqbl8cjJT6qbpQZIMbXewoDk feX2ZXLGbrBwimYJ++2ZSDMK0rnJ+8x/BS0M7yA/5+s5bp1TXO94AxojjPAxTgRNVbpnTe2f DJ2GBENnWvsgczQwrF096fPN4DG2k23qxMKRfA0cp6NodA2LT5vsMF5tiOB99E9FRP3teRta eBZVYQJvKYl4MX+sLG4wRsMBBerE7fLYOhiYW+LefywGi8tmicjoi7FuMMCNj5V4bbgmwcC8 78XOM3DK6BRDjL1Pd6CwWoeRGezYCIur0V58ASZaX9mN36T550nrYcektb59iyzBcI6OwxXD ntQtO9pYtxH2QlxywqL7cjpVHVMhi9CVl5dqABP+sp4T99vgrk/dGsoLKqrQHfqhNuCak4AS yz2+jcL93KywPKrK8mR4LytgQobvPh3aShyv2ScPCkmrnTYJJbCa8sdLH+QzfCwD7Y8IMPlS Fs1w2fEecaF9i5+dsnMsHj+LHxa6EmGRXi2gtZatImbRhft/PkP3pqPb3rp2nzTbb2rnLO92 oYtPl28xqH7edrxezfDcOtkkxGUQIg1puKnP7NqWHEMecL2bxFMRD70XafHcGjxeGKpErayS lLhXiTkFzySVIRFsfXfIU7kTGtGKR22u9NQA5kJ751npNqiYfbKKZv5vfhD+P8H/EwRGVkBD e0cba0N7S4T/BUdMf5tlbmRzdHJlYW0KZW5kb2JqCjE1IDAgb2JqIDw8Ci9UeXBlIC9Gb250 Ci9TdWJ0eXBlIC9UeXBlMQovRW5jb2RpbmcgMTIwIDAgUgovRmlyc3RDaGFyIDIKL0xhc3RD aGFyIDEyMQovV2lkdGhzIDEyMyAwIFIKL0Jhc2VGb250IC9PRlVEUEwrTmltYnVzUm9tTm85 TC1SZWd1SXRhbAovRm9udERlc2NyaXB0b3IgMTMgMCBSCj4+IGVuZG9iagoxMyAwIG9iaiA8 PAovQXNjZW50IDY2OQovQ2FwSGVpZ2h0IDY2OQovRGVzY2VudCAtMTkzCi9Gb250TmFtZSAv T0ZVRFBMK05pbWJ1c1JvbU5vOUwtUmVndUl0YWwKL0l0YWxpY0FuZ2xlIC0xNS41Ci9TdGVt ViA3OAovWEhlaWdodCA0NDEKL0ZvbnRCQm94IFstMTY5IC0yNzAgMTAxMCA5MjRdCi9GbGFn cyA0Ci9DaGFyU2V0ICgvZmkvcGFyZW5sZWZ0L3BhcmVucmlnaHQvY29tbWEvaHlwaGVuL3Bl cmlvZC96ZXJvL29uZS90d28vc2l4L25pbmUvQS9DL0UvRi9JL0wvTS9OL08vUC9SL1MvVC9X L1gvYS9iL2MvZC9lL2YvZy9oL2kvay9sL20vbi9vL3Avci9zL3QvdS92L3cveC95KQovRm9u dEZpbGUgMTQgMCBSCj4+IGVuZG9iagoxMjMgMCBvYmoKWzUwMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDMzMyAzMzMgMCAwIDI1MCAzMzMgMjUwIDAgNTAwIDUwMCA1MDAgMCAwIDAgNTAwIDAg MCA1MDAgMCAwIDAgMCAwIDAgMCA2MTEgMCA2NjcgMCA2MTEgNjExIDAgMCAzMzMgMCAwIDU1 NiA4MzMgNjY3IDcyMiA2MTEgMCA2MTEgNTAwIDU1NiAwIDAgODMzIDYxMSAwIDAgMCAwIDAg MCAwIDAgNTAwIDUwMCA0NDQgNTAwIDQ0NCAyNzggNTAwIDUwMCAyNzggMCA0NDQgMjc4IDcy MiA1MDAgNTAwIDUwMCAwIDM4OSAzODkgMjc4IDUwMCA0NDQgNjY3IDQ0NCA0NDQgXQplbmRv YmoKMTEgMCBvYmogPDwKL0xlbmd0aDEgODE4Ci9MZW5ndGgyIDEwOTYKL0xlbmd0aDMgNTMy Ci9MZW5ndGggMTY4MiAgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrt Um1YU+cZtk6lHjKgZhpBUl4FRgFJcpAQQbEjoYHIV0JMwSK1h+QEDiTnwOEEE5GvadShQLtZ 5UIsRhhW/AZRHE5glAp+UD6USTe4JHwMAWnrFGFU2AG03ejP7deunffPee7nfp/3vu77cV4r lXv4q4hYVEzglAfMgX2BKFS+HeYBmMODnJ1FJIpQGIEHIBTqC2AfHxj46+IAzAc8ga8nz5cv gJyBiEgykFhcPAXeEbnOkgTAX4uSmBLBQShCxaNaeoYS0QA5ocRQysAB/hoNiJi9kQIi0BSU TEVVHAiGgQpTUiAWjcNwiDurSIKrCSCYh1W6pNetVJRMoUWBd2iRroCWqCJwjQGoUDXEDSPo t1BayX9D1MLhYp1GE4ZoZ8fPufSTPqLFNIZXDEKbpKNQEoQSKpTEF1Ij0XlxoagK02kXdiUU osGU/nicBgUesBeHt4E/38BSxJgeVUkxShkP1IgmBZ3DUVy1UApt35wQbkBARFBQmPurXOea UgTDqW2GJBTwfmTP1fCPNe0SielBNI/D48E0kT6v/2IWPPYeriRUGB4HPPneACFJxADRG0RX fJAGAwxXoXqA6mnFXA5OUPQVQFuTDtQECc3GSq8TN5a2FqVm8XmI50ljJKJENaj6X+ENr+D5 bH/AYZpOIqq5RGfBn5ohFBL6NA9PH+Dh402Lg2FvIBDw0/+NqNSRJIpTc/tGW/q6VmN0DCiq R5VQVyeh3LQv4djV/Wcy3itpLV/KXT7ZdP5xl0VdVHXGcUyVLud/JlsbR5UOm8xVeQ2sxLbV W5WbPmWSV2xzww5/+OwU81xVzsmyqI+z+LWch3KWYW/O0Z9Pu7sMSxqS3y8oMprX+NaSfYW/ cVzf9cwxs4nxmWpI+EHJzRc9nZYr3CJ+67bOTtD1uUX3G6tYhu6/dTg8rc48dstPOXbv6xCJ lJUiznFpU2+xjH2GjPdDMerUtjZ32aB//f0h867Vqu9twg/XRutH2QfXHXD+7gt5mf55Tsaa tD/fTrJgtR8cyTU93xO+HKplCxu7Wxv23TJz87MCb7JD7Jv6NsRP2TW5hx39RRyvZ8PiisFq 2zsJ/YrLF+EDM0MWdr/PmChDEouuHWEHjO5OPl3j90LByk3nBF8t2P5NaU2DZWfNSpj57v0u Uf5k8fKwu8tyPEN1VeNHq+PzRrisgSdedztbA0v7srSLGLYn9shirkG54Yh4ellu/UDPocYk 3rmB3RDcfPxJhezk6Hm9s2/l2sV+K2cyFSUt2bKQtzNSnRgOlZr7B0L/kmrf4Pz8wcEkS9cg SefHk/xffiPKEV6vuiQ17hsWqDt2RufKvogavT7V7iuJxM8u+8OdjLKORQWKRXt3hg8cu296 i5F3dvD7li0On37VUeokfipXbGQHJnKn8KeBtVFlM42jViF/srgpDtqZZ8G3FPz18/r9YbGI yNPU0dzT3SlZm32kcL1XQfOoW3b9s5mCQvG2Pt3z5e2hR48faz9zxPqiqKZi/yPj9rqJrrhg yDXYu+Ok9EXPwyYrtuObK8arN6axjuS3F38rNZc3jgx0Jbx80yAP4wZXr2KaIlnSya+EK22L f5ftlx0dY2/otbO+c9Xl3gA2cZiyf7A4dteumqV5t+uOJ9z9x23sen52/KUqU9kIc2hfZdBU xbnJkdXWuMuDTOPPkhmPBCVbJy5HglWRTc7m0iunscSoa2cO1n0oGiSsn+46jYUodmy7eLmD q+1dzCSabHr/XtVS6pQ6fKt8ysfKM6Ji1Yl7Y7in0eKPVk4pW43lp5SP2seDez+iFDeMkcYb LhOV1o9ZVxzPbs521fG3Cx8rpHYTH2xmDHl/YjduGA44n5C+xA2VMAKtXyLhlVIb3tCS6Hpt 37lkIZtTpGa+NEmMUJuXvHn6a6/336WQFtFlc2MfN3EmaKg4gp02Pei/Lkk4PTZ+NT1vU7oH vFtXzszZMTGlgWGrQqd4D5nVvZ7S4v6lWb57bcZ+3d83TeY57WnoNHePTrvu4De6mvhbHGT7 f2V0mJbemnHPYH9p4xfavsgRXvpg1N5jW6vk5QVd80OLb3POQ2WM9RCzoy7i0EP5shtTEWkV NZnfXVjf21Lo8DYV49Z2aPPkY8VQYaRl30aGWFfUZnv4yyzZW8Fa1Sc1p16MKS3NIUVq7Udr Suv3tIqdsi+U1N5I7n3CTZebHp24dAgsYQW+0byixqc/n/cfftD/B/xPDFBqUISkCC1CJkL/ BBf+jihlbmRzdHJlYW0KZW5kb2JqCjEyIDAgb2JqIDw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBl IC9UeXBlMQovRW5jb2RpbmcgMTI0IDAgUgovRmlyc3RDaGFyIDE1Ci9MYXN0Q2hhciAxMTIK L1dpZHRocyAxMjUgMCBSCi9CYXNlRm9udCAvRERSSEhOK0NNU1kxMAovRm9udERlc2NyaXB0 b3IgMTAgMCBSCj4+IGVuZG9iagoxMCAwIG9iaiA8PAovQXNjZW50IDc1MAovQ2FwSGVpZ2h0 IDY4MwovRGVzY2VudCAtMTk0Ci9Gb250TmFtZSAvRERSSEhOK0NNU1kxMAovSXRhbGljQW5n bGUgLTE0LjAzNQovU3RlbVYgODUKL1hIZWlnaHQgNDMxCi9Gb250QkJveCBbLTI5IC05NjAg MTExNiA3NzVdCi9GbGFncyA0Ci9DaGFyU2V0ICgvYnVsbGV0L2JyYWNlbGVmdC9icmFjZXJp Z2h0L3JhZGljYWwpCi9Gb250RmlsZSAxMSAwIFIKPj4gZW5kb2JqCjEyNSAwIG9iagpbNTAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCA1MDAgNTAwIDAgMCAwIDAgMCAwIDAgMCA4MzMgXQplbmRvYmoKMTI0IDAg b2JqIDw8Ci9UeXBlIC9FbmNvZGluZwovRGlmZmVyZW5jZXMgWyAwIC8ubm90ZGVmIDE1L2J1 bGxldCAxNi8ubm90ZGVmIDEwMi9icmFjZWxlZnQvYnJhY2VyaWdodCAxMDQvLm5vdGRlZiAx MTIvcmFkaWNhbCAxMTMvLm5vdGRlZl0KPj4gZW5kb2JqCjggMCBvYmogPDwKL0xlbmd0aDEg MTYyNgovTGVuZ3RoMiAxMjc3NAovTGVuZ3RoMyA1MzIKL0xlbmd0aCAxMzY0NiAgICAgCi9G aWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp42u12ZVBdXZMursHdD+7u7i7B3Q5wkOAc 3N09OAQIwd3d3SE4JFhwDW5BLu/7zcw39d25f+7Mr1t3V+2qvbp7Pf10P71WbWpyVQ1mcQtH M5CMo4MrMzsLmwBAxcbezA2s7miv4sivxKwMsrABvNu5kaipJV1AQFcbRwcpoCtIAKADsgBI gcwBHBwAdn5+fiRqgKSjk5eLjZW1K4BOS12HnpGR6Z+Wv0IAZl7/7nnfCbaxcgDQvH+4g+wc nexBDq7vEP/XGzVAIICrNQhgaWMHAkh+VNWTV5EF0MmqaAFkQQ4gF6AdQNXNzM7GHKBkYw5y AIPoAZaOLgC7fywA5o4OFjZ/lQZmeccSBwOAALATyNzmfRvI0xzk9JeLCeAEcrG3AYPfvwE2 YICVC9DB9b0Hro4AGwdzOzeLvwi82y0d/ybk5OL4HmH/7nsHU3UEu4LNXWycXAHvWVWlZP7B 09Ua6PpXbrDNuxvgaPkeaeFo7vZXSX/73mHeva5AGwcwwBXk6fpXLjMQwMIG7GQH9HrP/Q7m 5GLzNw03sI2D1T8ZMAFcQFZAFws7EBj8DvOO/Vd3/lkn4D9VD3RysvP6e7fj31H/wcHGFQyy s2RBYud4z2nu+p7bysYBifWvWZF3sHQEsLP9w27h5vTvPneQy98NovtrZujfSQAtHB3svAAW IEskVhVH1/eUALr/O5VZ/udE/h+Q+H9E4P8Ref974v6rRv/pEP93z/O/Qsu42dmpAO3fB+Af dwzg/ZIBOgDe7xmAEuCvi8bN/n/bArS3sfP6P23612gd0D/YSjjaWfyrT94V+N4ScQerd1nY WNj+YbQBy9h4gixUbVzNrQGWQLv3fv1t13KwALnY2TiA3nX9u6UAZnY2tn/xaVrbmNs6/CUA 9z9cIAeLf6X/LtXf5FlVdSUVpbQY/4vL9e9A1fchcNX0cnrn9m+lKDta/MfiLxgJCUdPgA8z Ow8fgJmTi/397L0T4udh8/svUv4NxP7PtTLQ1cXGE2DwXjcb+9/V/9v7z5XRv8BIO5g7Wvw1 NhquQAeL90n7D8NfbnM3F5d3gf8+/O9V//v675kHgTxB5kirS47mgqGfMrIzXWvx8oYnpQz6 e9mhh8OcSho0CwsCqx17AjIit/grTJ9rwlgapwVe27wWj51edhUY9kZ7ce1oe9JA51+J/Sjp +wow1mk6eBn3glmNS1AyT3RifX4vKG3C6POwae9tT6qpGxc/w5FMd3C6IPy+pw+kdC8IxKa6 c0L1N0+vT8DpRG+EwKz9dnxC8/nw/o52cGxkeKjnErZvl4gxNwGRWtAdBoUmJtA5l0hUX6vC Jx4vgqMKFcvEgwLn2L/l2F18HgdquyMNeFB76FZ9BAOBlcBQoxAePiJSLrU33mjlgSSMeRTo U5lerxD/B5XWyvTmlnQEU0iy0zFuJotV/lOSS5BoI/AlAt6czVbaCk6jzBPtBrGFa6ZECXMK BxmaSyI1KVZl5fMfM6SUTDHFkBEM9R5W5h73RIjvuIvnNEqQDjvbVOj4t6lSk3si+qeYSndD Wcp+fmqkk1kv8pYIVeuUYN3lmRhlYoPvOLGbzBY2q10O9ulmp9fKxEK0JjaJqCiYNdnklxq6 OhJHmRHI58Jv5ohTwWnxHWKr/TZTknAghQorLhwMjg3xFHiqsBcE1g7754aXt1yy0biUkOhi RV1qen7PkQ+5val1Ieo9P7kau3M+fw7doSOatMVHKG4mHdz1aa7EroN9Kzn7dJRFnN9g+r2o XwWtQ2vYURejaAqOGiSjCSLwKh0cAAI08YnnIaYkvq+Ol+sm4S+NTBmXluUP8y9qpLAtQOPf tPCv0RH2MP5yN5K6MSCPqUvezv2zfu/hH8H25NcLIpoysj5xFVJbnV7UhIYikb73rTD2j2IU JoswKrWDRqKMkPNrH/XSkT+UP/0smZNLcQL4TgK/hoZ4/ll70SAOJUzrsvY0Y4TOvMF9XtIB fYO1riJFY20N8suExd2sXoVAan1MiqQqzFhpl2grKuOXrR22WR4KgVVQI52I/WhgARZk2FRF r8YQzedpUVWtAHVl3/HsLYO31PSq2++DHL0fkFHi+8dDeawNFK9/oRtEPdmNRLS481JFpPXf 8Lk09IxCYuj1s/xwlq+K4uBBiiygnDSPOaP2h0kM5KgqUb108brnxIgaoJgwXm12UKWX7q47 ta4b6eylpPi9ZNNPXx+7PTvRC2HyaDVbyCdCrxH9hLVAIqcMzpXzk/c7XrkDhnobBS/7JZFn zVg6aKsn88nS7cUTyiVqxopwNWIVF6kOZpLHB8xI2ih1V0ECCabD1EyM13am5ATzr2klD75G OUVfTDi21zOMXvHAvJ1u8Y3yyTIVIm30IMhWkEijwj8u4tPNGf0s9tp52pPh+ua9XVTiyWOo zxRNa4GgP+JWicU0QzuOqyRLfudjvsjCF4OHyYqzt8mP6zrZPHa2A7+cyw9hnY62VUEOzasV JnU4rtcVU+XHMmkjS8qC/LbgEc1C3pcm7YXynVj/c9+A4LbgJ+41qYjV82y+QiKA/LPFL7pl 9qzOzcKCbIT8uBVJZJXhgOLTAuy12W54ayhqcf1x1lG7F44JM/Q2UdMJbwZ6vbXxvFhrX0zY Lby74+DC0NgpUncPH5a7Uy/1ag8MPxEdWedInmNYSxpQahU/FrJeV3aPKB82F4CiLf2C4mw1 MIbVRH6qh6drhOyDK+lzKzwdlpeQ5SS2C9nJiq6lOk83n3KJUKZp2XR0d9KOtST8OdmNsioa vqPOHHN5qk3Ibdxe3lyLoDILIaSczH7gjACtNgpJ1tWS1g+Y7LIdbmB6KzxJ1i16vFoYnnz8 NJTW6CCmWUQXxWuLNQXhYmYqxTbvA8LPN84FOA7YEAJBM8jtxyeCN/miyBDuAkyYPzn0zbQ0 WH3qHYc283tGGKtuqRFXIT9NC5z8C9iA6p5xdVjfdmSbvDx/DEi9EQd5e/LUrFR+TLuidAf8 Lhtk8hmL/DqPGiNJm+sGw5AjLhQS175NxK4vaGvSx010woYUWvS2fXMgULvqiT3mjsH4Zf8D Yw7W3hsFlJ0jjSRmTJLWo0cE8bCVZLVXiY9KnpPvJ1TMLJaFTRRRyXnteZPcSB0dWtQ88qJ6 wV5EPZ+NwgNSZwtOyujR8CV+gBN72deZEh+YP1s6qTIbzXVzVhA+eHEVlO2Dbu1OU/VaShjD 1gNZy7+hZ6JZ3sj5Sa4nS86YbptG62+8XP8cWmdb4BCsZ8AWLa+u6Mi9xKyh7/dvhcoZ71M8 zEb0fSjDkfKEgjf35BA0+ooXlzyzfDR+b5wec3/RUMx/rabxkcDS4CKn+IBk6+C3g9KkwNNq mn5ygi9Vb6ef1vdPAyv8+VoDtoVvuWZmqRp5o3rH3gpso+FGpKOoWFmQzilneAlVG/JfcXz9 yHYPEeETPNem9TV7nUj51MSkfBsyoQPCYD6nadBwt8Wq4n/VDn3sHMla+uF2wlmxCQ8vXfhE PWUtHmvs+QLvtCWK6eAJZ1hPMEazoGZ+cndIejEQ6B4awpCkU4PhViFL8QWNK77MZpPHXgQT UZ1zjaQyAfL3/HCM1h8pNlRkjNSPPAs5vpmx2oTdkJ3HAbzL0TGXedB7b90tSIeebc9ZEogY /d0F/Y7u8bvConzkcCS0mW80B44nWZN5R35qh184Lqpcvus61G4jr+tTNM3InsMCNekW/TPJ 1szxcSSXApv8A/6UaikzoMiFmzwbFI54W6DVyg4ZFoRWTx8D8zLKm8z+YLR9n+mWLbJ5Odyx LZ/8E8p1phAG5zo9fzGcOI0/wMLOsPkVCfZN/ln45nxvoLjfqjRil/Ka1QdThUEhrHzcwlLI +Fb5afZbOaxpSneEwHO8niNwNcG79KMXLCvNdj2VxHbgbj2b88lGjj5Z4Cx1S8n7Ab3lDEj4 3CEYzTP0i0u/OHASCuuO7Uc9QVZcb2y5L+9QDw6UzSfW4dHotPIwQWX4tlAh5JwJMyyDS9z1 aMoqJkb+aciuRxkRotqMvVTCMwz9o4XhtQ6JfmgtnsP7TcxEOEiqFZoOGxgOU8IwDGC8MFl5 8Vrl9LwvZpBn/n3GTRdO034oxLCTPf1mjFx/m1ZuAO2FBASZoN/T72DwWBeUsAE++tD4wXAO 6eetuvqjRcV6fOcY72F3h3LHGBqyinlATW8Q7y6djE6AZaMebt72lxnwEB/yD7wI3q1T8vsp PXuJ0lDd1vTw/rtVe8ueX6tBF8yHmLxBA6RaftpFH+c1bR5eELq5QhOOIXAm6do/cxd9xrAA Jur/aHO6PKYDVqs6KawQk0nUlPZnel3MxZLEoMk4CO4bXsbv0T5bEpEufq0kWk9aaI0ZvlnI 63HoTQmPZFlCFTn8bnFc6KVRpaKZaEI9ady3jiIZUWuh+iEswDWfk/RgFWZkMl7QXmvHrBQ5 g5osiaA5JB5ZqBtGFgXLgpN387FOXGwabDWBOMpb+u2++Tj5ceRK0niXNa/YxR+3TOgC6wd1 aOYWv934QQ8Cjlw6ZMMhcH9Pjr7n8sB9WIMyRQ0frxxeQnV3dIWMrJqrNLGNeSJBruIKhv8x 51J+dJ2YGU/+p7m062UmG5dWS0ANZm8HVN+ix8RFDGLNWjVXoSTpCbL+lu9FfprDTAqUTDZG S/J8cqYvkZL96TkjywDKrWFfoTcdrK1JdjhA/Fv4YNFSVF0sZnnXrxtN6L7tKMXxBms7YXup soTPDyMi6FFHKQxv4m16LvoDOJ2ofYaKWe1vFU98x7eias480h6ugxbXKxKQkOMXTeCRY/85 J2Mnd3FYiDYR0H5nrTxX30wZcQ4IcXp3IJVp5TidYCbsJKzulcRXC2UJktU/n8v7KnCQhADq gXr8zIqoPHKRWLW8ek2VepcYkDLJzJs9B751Kicnl+me0BilSCAJ43fwNRLcqSVLUuzsTnDc G1Et0A1o55nwzLP6FKL/XFjsloKTvWshprIxud6flsFhqk0OoZMxIPgiBwwzkmZMxqJcKi7I hevhZ602YvzY3hpUt1fsohACGjKH25tuNqmgQ/55Xir2grY10GK0NkGegGyO/s0kltd0Qidf 7miaMReeRnwTL46YSwO7vAkNQf9egxqjoyE/J+9WeZFHDMJoqIY0GyExC9b+Kzw44DnRk8dd P40Hq7BHWg5+1fT9j73EsnJjAjOuRibeXlWw8cmhnvfhLOUnVLIZfv/glW9fhSB4tGbn4/GF d4U8kMTbal7gq3moDF/bqTr2iUfop823+B6U2iet78Qwn/RGk/IeLokPeMk3pdioNphKtpZO ipZbomCsX+Rsa+8HO6U/WlG/xrdtcrwIXnzydW5bIkQL59xw33z6VspKtUH/quo42jF56voL ptkRGMIqxkucGH8NPTtN9dOjeEWZIlvtAU2cc1Js6QMCZ5V1HYb21wcuc8ZtXnk2InnWD7jH 0X8W6jAKTmmTL8JF0Sb37hPNxP+4ZXCFtB5dicAt//TSIxZm4bXVibKr+FAElF74yDyMSs9i WHy/syYVn5CfILgJyPyeLUWv/cIhLrrF5yrFKrqH2N4KNFNFL8FO0tT8DTf3kWbkMyYC5P7z oGR17RRmaN8w36XLbYjuGhH7sGCktTWdI7NFLZNy7+m9kO+fQ+y3kkXMomrlmH3b6XpCdPil C1O/pKWm3EUnUmWOEPZGcAZyqZV71hDb5zb9cmYgX5rLZ5GS/hh2KAoC9fxg0nboGKxemApO ODynMMSxuLHMVmLhJV5pM2WOV86CuitU0fgXRCIpZWL9PN5pTNGJ4upU+q5wI6rqcHtF8oo2 5wdtp4SvBZ9RJ1zjFjLULX+WFP4pGXCAtfbDKZ5O6M+V8QRbcroMpId/w+Vez/+SBinOCk4c FMo8qXMrS5t02/hkMTUHiyr349XDeNVS356gOS7NYGUZ2BseVUzTXvroMMlcb/OQoIDph5Ak eB9N2hx9gUybRtvjkbAi6Fk4QcEdrtiLtpGhP66W+XbP4TmrUu6mcdwhIq+vQrXaFGAUDyI0 Ld2or/QPiOxngKl0CJ5gYptcQxa1mobrgow4QXqobD8u+L2cbaicpr9cWK1QBRDqrNAEXYYH u9orfaJ7nP/grD6icMnZN6ILJvwmV8H4HWuh/3bw9MzAk5KLStHdvwVEdtECF3RYM6ELMiK5 DmVl+mwmrgI9PHDu8zy3MlxaqUvcniZrJHBtJe/AVbAvbCMMYXd9aL9/Zh85J+LG1t9hwFo1 1KCwASfVe30WgeaAdFRC9Y39g9AhF9pID2BUozohTbRhA+N+837BN23QhS4TDm30EX29cLpm Z33wT4JM1x/OlwBTth33Zv3WSAr8k8XOFEM9wy98tRubR9gQ0h7HRgVdm4HDx7lr3zOagnE+ T9sIyG34pF5X/9qHMUjFJmhu3toD7lO3ajJRL1PKkVD7C3NjSnNtdDDxsTVoMiA25xTKse63 XpL0XRHsXZNQxOKCN+87g9BLnD7SNhmMED42Vmk3fFfH/MGka32Cz4JBFz6dsnSaumL3qKaP NR1aG44jKLqWWBd6R1TDn8d8+A30kELvbRPTxiyN98KBXjGV9twYjfRQs3TlxqdUAZUZ3IhI VDnS+2gOgf24T3CceVRt5MHlkK7ZMlyqEPmRPG55xZoRwmlXihTNCw0Cxhdisxcac5Uh4AIZ cpPXpR0/hUW/YOyLhGJ03e03cY0PkXcS8mONAZv9Wq7UaYLF3ACVqIcPFQJaHC1NlXfB60dJ lTFQmulhLNCd8CTlzAkPfOVFQ1yav7y6qeY3yq1Wzrwhb5imzDCvFk3BMTIfhm2fhqXt1GQc Er3azadkb9sI4U0MdhkEL5345irHXdymt0h6E/6UJmWq0eYRbqaiHtKF4RrRsakT+vz6TZIp 6gbMrSQS8JZ0J0AKwzSS9TBlBTNPrrWQ1pu1lvq9JL6N6p3czwUuTLcLnqcgPviqQwZOyEd4 lTVzyMVyu9Hwb5cop7nvHiUnbdSOzMvVpsv6PQwPUE3OpBnye1+2PEY/WJ/N99hv4Ntxuoqb QLsDtdltY15fkN3zygh1+2LYii/d8kuIokHECB8oGQ+CtkRaR+nG8baD3NBVexxYELPdq//9 v29t2pEuAuM3DOo8cECvpq+K8ftYPEEoRBTeMqucoRO1D0ispkIfQtOoPMXG5eUX3AgSohO3 ZsaHT8PyZdWEogUoP+wWBrSrlBL5lPgHr2TKMLsgejtVPinizdYZ3OgLraFJcfTKP2ENI5fp 5WM8T9fV3RUbAupvjEPyqL+gWv/U5musuhBDj8+OYyke1xzxbe+SOVBZE266CNV1hS8QzMz6 mt9Ww5Mktb9uFI9i7c6IEycbDZEML3jaq33DeOpGUcEpTjouuxFQ5rrZkMjunUCECC8eCdfw wynFxhxvnq7HnX03D6LlJjjikuq6TV34zV3NC3LCE/YptS/o/BMZ18hQETTrFbmIxBgBdVg3 uIqZkSdhqRRB0df6hDK6vh69/DuVll/RabVkqGk2CoS244/RLIHwr9nrUBN3DgAlsiCKEZyT iezffGpLRRiZEChhjvtewBJybGO3+tSbrrK9Q/vAxG2x0k8To7dZtsZW0HqCb3BcLAFlr4on 6aiDJt7arnFxO2k20rQIEb2VinBs5d+fkY0lK+Uxk89CWofysj5xdSOjGTxl1tzD+Et8EFIi bmEU/jqmlSwz9gSOoFXr5ilNuTyprsSfoJzEDIkwc/2s2anGala03EwX080Hj1iN18Hc4dFl LrB+pu3FE+GQ1iYNW+mAxhiUBP7mmY7gQ1WtI+4eotTIbaI/s3cIX8HwyiYIX0jMts0c6z6C f6Vt74u/tsRDM1ylz2VD3CQR+KneShefs4T8u2uxgdrOYRmiWkYctlrRl6ZJ4NgJTflNM6qK Fv6gzFgGrR0503qvJr9edUCLyXBaRkGAQM7X4euGt+69qo97Qb6ZVfc7IZCowd/lAp7KnFgM dk+PPnfpj0yL6okJEnAp18wWnAvjSsyRZj7MYAFeIgMs9ymoxkJ3EVd+/77rZVFv4XJismOs GaiFCZddX2KRLzrW/PP7QIQOYfcw7VztDUAA3yLqSAXrAc0lHxHIIn9Wph7jFyD5i1GuHvoP /8kWdWABysyiTjMJoIG9+Ji8iWQLY+X1aZWaaw0Vwf2JY7C8Uxj9ttsFbTlPIOZ1HYUGRj9I 48uLzKq/+NFr+MMN4ua1qJlq8J84M/xLe9NHBNRtW+q0jR4KGwRlqGlGuIz+zWbXXS+tWb1s ViTn7MNTBRNM9a+2cKOMEn7qu+Y7SNxCLYAcg4jC2hlxdcUQz5+fi8GJstlGd71sOx568iVq Ge79nmv6VpU6yZAfj1ANXIQapaA1sjLsV+GxY1723KlASrmeFsgKvfwBMfCASOjrRW+uRk3T kS74XdXvw1FxBc0rXMZ2QxzYQI4w/Gqi5ccvKRe/ueTCUnpmAzRPLVQOtl7MLqvQf2/drQHK UbuWYL4vc6+N7Vpa2EFg4FAB7X8yEuTcJ56ZmcEIWDBbFj6hI3pu57MMmA1baYplVMvuPW4F gmm2k2kKn9nHgmOvKgNbhH65x8BpmvyyancHhtKGrMf/ok02TXP+IpnEihyfbHIO38SFFg3U nIQoxdqDSAz64CI+IKGdOO0R1Y8zIQjcm04+qvJlwenqFlUnCcwjOgjc25+QE4bVY5CKXYIp hL437NsrDvLFu5MSW409lcdffsVmrRF/niMaPteeSzYHkWteDsxs9/V7YJE//ORKbha9/WPg 4wYOMo9c2H9CDSBHI+Ueui13cFVA/E11zjUhifekrOxohM0MbdxfKul3e8GQOURTZLgKq1c/ O5fAufcD02ung+tlTH2dRyFJjmphWPM5nJzOU6XIbyLS1au11Lg0l2IiD5JFOgRDlV1IHDjd Xv1wjFdUImmR+mH2+MKaMi03vFcZpoofiPykP0y/dgv+iqSbUZwxbrHIfggX/ItWB1VTsS8t ZY958MQrdK5SaSYNQlbt5xm29dWFsdh433ETS1g22qNII1W3+Al9+IJPjZ2QTFBFkVJzQefD I29vmV0AbWsvC/ZPEoS5eZodP6ze6OeUOsJA65xj0p69z1rjeFR0W4bPSgVpuzQoVfp7YcKG 9mdQyo5oEL95dfgmOWzvBL9yEuWQ5LxmRxgnpDBbonuxQ62LyRm5qFDxWAZIcufDTAt8Rrwn SJ3V1y+EE4MOtfX7JYzAw+HB+AAim0a+Fx24CYkLPsLtZ9REntvZ1LRcj69ejhVE3qtGZD1B /ro/h0s3UkNnk36+nKs/znXxSEN0jF3JnY6bD+x+lCMylGzKXUhdCe+8EUNzbHV2KuCArPeP yLH9stceHhT8q7VWBzp8vcYeeJMbfjTZaOncS9rgZlL1mbCqsHAMJ8svDRu3VFEfFdhYRuBG SxdQHmYXZCHCgI2bYIZ8GYXkCjc0KkWtfuiMq24RnqVsPBTpN/k5+4s335fDLjqaBZu0zvV8 WHAqxU3xN5/kAa0x/yT8HnLFZ4FgCYaFH5+xLgGEFOyUMizth4lz3D+BnD1vsFFvNC0l9j3J yI+pkbWl91rzm1cQduNC6TlKzvMB1bQTzdyUsTy4fMnXGkXLEHDuZXA78jOXI6tCNfc84xPQ V12yV3LSuzVxVOVP/MOo2xr5LTKmLx+3qq5ZjQxMc8Pw4WU47jrg+H+Vk3RcyyK8tCKtBEnd GPAVXYvzaiV0rN2b503GMgV2luiSEcnFuo+dhn5bhTV5QEwm0cE13mPvZfW56gJUyzCUOkgH bsAHCNotD1MSikmItlDys4hmSmUovkog/BHCnrATAq2vuZfvBkj2OvxQPLmU5mrkQHfFS0ho y89DUahRIKb/hRO8+nU44vtLyTO6XfNlo8LGGO5anXk6YxQiBoRWTYtCNhgVJT0kvzPlu9JI FpNtLV6pQarsrm8F5nD5ccnai9RY6uiIEBwHVFv7pxndw4L7i2pxj9cBE9hvf2Lz9Nm+VIJ9 YVvGwRDi4ed2lZZvT2h4qSHHMKeIIhKFCYJYlZLlwPDeJyedsbtME6NAHiTZGq9qRTMZ+ew6 COuEPFK4+5WS0Acbpecfy6EuXMNKv6vgwnO/U7wGDAGp800tqLr6otNeE7K/+iDcuO/wC5kB DbEWUeH88JGEEFArKB+3z2saeUySEEolB+m+o/LM3R98LtvPpGH2HJSPNmNBptlus5GFzyMn K1en3XkaDumqH38TOZdWaNWKHwVtbHqSKCQuMcz7ppdXf3xVf0z0WL2R1p2ftEP72phH8wEF DUfwx/WeiJpTsuxopXsy8SmnvTPagjMudn2yHzsZjer5qFT+NocwoyOT4FD7D3a7K5UImmon bn3KTTKcThav8xaOSAI26zQ4JwskkSfJYCv1fjiKFuljHmmuYG4z9D86Lm5nH2RkooHO3zZz 9MyJdTFmJ71+DvUv8+NURBzuF8+KULlBufo5Kn1td0JJnyKKKtDBkKCMzFh07MgNcJpUmMbW KiYXUpz7s8LYDZXEBXEh/ufWIMziU/xlzllqsa2Pboy4z6xm12GImI40MlfwlKdoeKq9FGfh 3M0AAzJsiLhXSqICit+v8Qfkw1qYKMvloFVPwoP0j16mrd9FNqQSLBaDjUan0L0CKOgjOVjG fFeARS8IiUVB5t1rVfQI3zBWZpvF3gogAw2698AXos68Q7Xl2YdPFr4IJPsSiO7PI5vFVH4o 1dBgT/OfLqQQ4h3CP9ldXosS+WDlt/lvP3A4o5XrccTw6N3qFe3JSmMkrcRzmh6LsPG1YHs4 60Oso92ieavGP9ar0Ijn+ZfQ+H5QbI8oFxnBBTq1IoO1DqEMehIFgWb+E/yL7QHxiAZ5YSwm nLWa6vbohnlfJWJXXKhH3uj8KNSReN88mNg9VPTGInrjYud7on/ZyT0GbGzGj0ThMgWUpv6c WCk5eNB0wjKnAhlLPP9Qq9l6m2Ay70zX43plI28jmoJadTb+Yvymm0K1QQxuOuvLZPo1UuVX upmM8wo7LERdFYKh6O35w6S/JouHzZhHYpa+8c81FpKXQtcx9oCwIKdg1ylVfWd+t3aZ9zQb SAsn66irQI+DtQ3CrQwlWy9alNM+Ysxz7rCKxIVFrxLGK0mcFetlR0kHxefg0xi2gvdjlzms 7lUMb08pJD3gGn8I+FtvoJ34lSvrDNLqVepg9tQNgEK5ikSWElEy2PCoR5vryub/Yyds/3Ad nXjMoVmlNN25Th0zWRmZqmBXAX9TE/38dHubw55sEXb+D5vm5o2js8DZA0coYumOJb4ZLdW9 9xkYfd9VwDAECJ/eVfNKauY4pXHCUssFUY8W8eDsyGSYhl0TPItsnWrOgt0eXnf3oSvqhsoo qpJ7qHf8LYTRopL5Z5XvR7xyo2Jk6i/LK9cNSzecTUvmlS2eqg+6X1nPBQgtU7RlZeDqsAFP JXup6WQsAl2Dg1Aj2PJHyEvHoNaD9U6bkvtzbSt43UZZrsqkuVw3DYxKjORApkxuzMytsYdM XY/RA76sBkGktEDNuip5lv4jvivfemN7r0jnWQsUpEnoKcaFBPzTYAEjZQdtU6vB5dCUlJ0V 1TBmj7cAS+FofBOr/gelg+FQVt6Z2cEhmosTG/oe7QyHHWm6QH6vqY6pMVsTL1IvapUprCsd rx4RXr3XJiBFxxYNEjCbU3Hdv0jJYNVB2jh5STj2pkN8hrtqSlftF/bPxPJi/RPfQSrwQ8eL Xri6/qOGPsBzXUSVCCZfHmGz9wk2XNX2y6dfEmy/tOvLnNk/dQ5MERk7lXxVT1VdNJICI4l2 feg0ragzjjGyy+vHu+8eUPocK2qylf8hzIrGAmobl7yIxkRve5vaw7DGG8k5ydLprC1ljL4/ qKH84OV8UWBtTUYfTdvLbMBF8G6fdLIdX04fBxnKpNK37QjzsMxSqxY8DHc6uaZwC/H7gg5l QGqB49LX9Vb8O4a9PNC5KjrEEONPHc1T1NcVb+IQDZQYZdJWRgKCaVlrOUkkb+cxcKcSngRV C+QzdPGFeuoroWtw5+lrZlmDGQqzLyKj9ConFKjJ1jCe/p4491au9RCZOWb/50Kuj5mwDS+a 5cZGBPdSQEo0FMZ3ckkUjEPv4j5ASH1WdVnaU3L1nQzQu28t94cAy6KR/PrGE/CYDHJttgjh k2z+qfMCbu6kftalIQ+ZUv5EdNPw+Vu7r4wYFx2bVqHlD1cFidqX5A8qZhSC4eZ0EtaMUypn tJbFuXdt7loVJWW8KwT+xbQIX5yPC7ehR3ug9x2FIww4LqyVG30CjVlNPfLurWqY3spLrl7z vbaHfTZQ+NRgRnrByL9TNoWz63GJVHqDQL8Ra9Z0fRD3yFcddMt+3cYn8xNfsPPZiC6i81qt 3706vsnbolvrtCd9bFTfsxeFHUd5069rJ0axkKp5LA9wZjMhOrLPuBAjoZY+epqCiFH4oXqS B8/cSie07aendmBuPu3vCg/XqHtUuk6bNbabhuF/qD8ZBHXe4YX9oFzigbwPl6AJva5ApVTN 1YLxQwuV3N/ceW0gQiG28eI5hThZV97bctpFHut6l5z5VxTZ8n1/Vx7xVQ8VPllCRSKsZ7QB ZHyOgfaRpBhel3TeTJS3m1nlEwwMvDdlqAzipfQTOIuvc+Bsd7qMNyzJiH9QIbP7I8YGb+bl NyH7xzij++KWikahow3O9L1uSWwqp6hZD2HhDBpr5/SEJ8FXNYd6zYrr3/lVnfykiN2+Drvo NWuq8dnAMPr7qfj8UnPlC406K9cH5Gy/8eajTJWJKdV7e1zSgxSAioZxIOEzzAdFEwUSgtgd GhGq9BCPDgbmJZ/0yMLVg80Fw/QzHU8fsvV2bLqQZadJak3wEin9+p3CFyTV5RypSWY93YqR yxljWQF1m2GkSqdyJowervW3F5jvIpLS/BTRLy6Lw+ImBbhp+TmOHHKSQuu4Dxpj1htMwbTo hodR4DjMFXKv8cSB0QkzRsJATUbhPybHwc5LsMIgtQsUKGk5WQ7zTxZCNltKyT0qN1MEX7mW 8U0G8n5XQlj9SKV1NECodSBdfxIhe3ViGL0ODRRz8eHaf0LeJYU+TKicl2jrkt1F4MSZ0Usr TPD4RHVOZXRqYqIeKm0AZ5T5SXQBPYOFEuctvtmYmRHanPXj0GlJsKMmG2OMrw0kAtjCdNvJ rqqDgRf2GyJrSXyBhBq6RGWbVAHORH2I8IJe1YEcorTGvvBwR4cG+5euFGRVnS8G6QqcU/1f Gkh/dt5SHtS1m+DonUDzFjzLYg0g8qiM3YFMnTaLG6gDSeqb4KpkgQrrF2LbI/6XvfsR7SiA /FpFik7D9KwP5wPCpS426QKtwZOcdcKS+Cla4F3D6p4DK+IuCzE9olbmBN6CDZ2okKLYLY2g bIOH1/SXOEUt3ksfs0jOX6YPB7eOR/HoTnehQvZ40ySEHSINFd+Sm7bXfQjsBj2GuXZvNftd h4ME9tQMDzVJ7XdeuAjs4/tP0poehaETPcAe6s+dovFyhI4QbnG3SwhN4VIGXYowqkziFtEv ijYB+Dt1ZTv9JJ+ZLzuUqlGAMx6tcyBK6SFfHTRqvNBj3Rix4AVgowIN/QKtwEfZdqDN1znO LJTM4zl6oyUzAQTshArKcvxZ2VXufKOrrNEWoMChnaiK7rU+Fe9xvqCq3aYWztTdoRFc6sm9 RgQfYpvroFtDTi/lWkr6+BHMmdkhqMppQBmcNwdw3Bwby9r+sgfPDdd8VP683N9oDeXXV+iP wa4T4O87kjUTRucfYVwxOrQ2ItNUeyWm/HKGQRHf6tK/r6LML3ZTi1jzu635y0qIreYcbGoK NJQq2sZ6ZAd5oKR1FvmgB15LD7iPFsgga8XVxjgxQ0tzTTCUKd0/1Q4PYKQRylh29aWuWvZK X9y/s+DY9y405L9JNPBFv0zXvzYfUvjpp83WZxUfeVpX8hWeeDL1Mp+BJaMr0T6LMGXTi0nV Ty44+nWX75PY24vRuKJi0jJHukeq7puyyjK+TLV9paCMaMIptbx4NheNs3JcVGxzAW2j7sQc +WPpV00g1A1LV8Ak9/DhihSroQrQbLCZGmeX82TlWm+72w4Ll4Sw5IGR5jK9euyqowtydlpe c4OOXsEDi8u++AEerZGUqNc0HmSG0aF7IaCz5crpmCjys10st3nCZO5gZSoIa8qFYEMXtvJJ OCReeHzqVxM1rpZcbKZhMR/PdIkh69m6VJh/spNpyD0ZiKKPNwzRcY7VTxjRu9Ikpoy1Ajwu fWL0PWAO4eOxZAQ50rkyRMAgcaFf4EMGMhyfGmGN3KZT1MWA8QjCQsI85disqao5L333Afyx sDIfMciZgoc4iLt+iDvipK9pa3eOlB3/z3SHTNjD+Skc0VASiR4x+dqrZfLK852rhuxEdjdm K5K6BiT+3un3wzApbPVcSrGOGgcIOWuCubKbCdqkaJwPoUckNEtOAbEkZOfx+tYfG6WSrbN6 nMX8U8H8iC+pjyL9XlUB2J9sH48fsZHDk5y5jzAabDMyxutpPjKQ7/KDeMp1tW+Ish4zwKoD q50lZk24jkqtqJHWVHlfFYKksAdOq4cm00Rg87LNKCEeYpvT2YFlX3nuNXjO4m/IXawCUyGG sdg+rk7sgT+3zJ2Nw5PJaEce+U+n2tTed46l4QyIU/jBgqpak/SuDQ7ivnDgsL2p03A0gUHa i+VVl2IaupW2L0lfQjbD2j/u5oR5cJCnXduOXn3RWrunE9XbnXalcm3CI/SsNZB4iHiYr5Cv XBS752GcXCEohJTXxylRhsYQZF05wXpp7sKfQR7bRsSH+wk3v3VsZxfG2l0h4oVmiyy89DST vnRV+aNF4gdbrDvjlUGgtNqFcWtbKHHN2vG0MVLXC6qttMn0h1PIT0/jeZQhxnXU6jw6Z7va vwrcyf2/9pAhh62cBiTCFCOiZLqtBs9RkUmZdBf+Ihv/zaODxWRpGn/7uDRzXByn08TOiIvk Gz7925ZfX+dNaioYFxOkKOSW24qxDG506xXIdllw+q5NdXRM8kcbhsqQqBi4NrYnPQ7DZ5FY WuTBJnOthLXb+Jtqa6AjMjWmLGM7UK88wqbuUQDGdEL5t1CWPSA6GK705gSrrS5QYN51nzmm 9PJM+gpN2CoB8mjX06Pny718KbPejn09rlySzoT1p4nxjGIXSeVMBPwC4bPC/kbXNdlEcHZE MQqZFaYRr+pObQWGA94wv8LhUD0dJImfXeKAJvtjcaF/HEXUDIP6548t+5D+Cfw5eLQpBBkh 2JjPAbNNRreu0LkzT7N1HFa40VsaNScIV+TkVCWfp/OE+bd2XPIqMH0itHgsutrIvbAGWDgG 8NxKkWJTY3PPtffKoSFJfkBQQuQIiqkm5QZ0WITWyNhwCtFFI9lQfRMVihVZa8Mg/hSO6gG6 cNQ00vqV+GvIrBmBIg9K0Ky5rP6VCsy96jJTwdfh324iRzLH43WQs107caSx7zab31TfehuY OxXF8i37jxIRu77dDMoK5cdvpzCCNUaa+r2uyRkPaXAZ25a+Xx0uFQSDlkgarpWevFejfAoV NTX4iUW1NvqXmBCm/eMDB0aJD3ZK116HNzmGZ25wbxTN3d90+CSgTfXYD26dd67HhnFpvm03 b38MKWUgr1rDEFod+j0e/dUD7KUO8ialHotPTv8sLozxAYuOYTYRtcE2oYSiHwMxQgN7WKlK 3QsYcPBARHK3bkevySCeOxRnW/DrkrLeX+x22IsnarYmiyw7aPZ2rANcnYdhF1VyNua5IfVt tw5nsSDDXbHJSdZo6FM6owZfSKMKRts+ozYXA8JF6W8u3A3xDWXcO7/ObxqUcGAABOnI5DTb byvEAiHas0iZ6Q7le9ZHFdR52kWC76OMTE1XeLGDW+1WDE86kZ77Iq3eh/YGDlq+Wuw1qGxZ 9gWdY5gu6iDnWu0cFjKdWUpneZ8CUpQPqOd6VgihYu0NlYv1ug3XnDefGMa47XG6dNYN+wzi B2eixblvlvtrtzoqxRy7BOMflcjtth7bspBE5iQ3TQaXaO5OIoNesYTRTqHNeU5pq9k/AFRA 4LnKvGMRKaCHBnpbfuyRiNuq0XZCMdct/c5DP+4C6omMtsjkORsFxA8UBL5TREPRVuK2i53p Km8CK7TSQw/hIcwnroSXr16qhxxLWSql7dLSroK+hkXyiABYLeJ7/l7txTn6PXUmDg0hD0YJ lWiz7ChRFlPHml02S7K9aJHg1Bz8MuhNNyOC2x0UXyFNSI2M8/yOpz9pR9RsbVF4K3ZDfs9k YqYSJSBwkNBKJLqZh/B6H/ss9xWL6A3/AqxKz+eO5GAjdUyf8M8hH1n6bg5K4EhvJ9Opm+jU 8+1u8RbgYz83DyLP6tTyLMZcRlq64Zwin9j82Ovw/OIwr3bpg1mpXnzGp4nqf0ksKybqWWk6 f4wTyqkcbVwkfBoQ0MZkmEWtaGH4Cib0TT4UH/tzesA4qQSRXZEAWXK1XsggfZ5GLYDxyEIy 74wG+h3B8TEDJJlxm8y4Jg6lFGdtlB07E9MFMMxHK6qrZHOk7WBJxO9hsY0yHThK3l75qR9e cQDaBPuOy5mG9F2sX3s9rPhrrbYT3VWNqM03868jobNb4UMEtFhXRCvv33VXnMpJtzm5lnAE CcgXgr3dcugJ7Xh6J9L1khhpWxFT4NDJGG8VqS1FU/ZrTwmv3YkSJWUPmn08KRy+eCWJx0Ph ztqCqhsm4mwF/RQpN2N4ztWWf8r7Tnt1mDWxqHxYyag5IfJwk4bAm8ixqozg+xGJykrJypng XAWQB0BBKx0FOfzQiUxHVTj5wkhY4rmNUW99AnWozt5uquTGPAdVPh3zZUSSFomKdJ4Xl3eU yCQlhMzDaZcwuwIyvMsvc7PYDn5Jsp6KmAi3PSxEKfFx9+Zn1W7tVcIa997lT61cU78vcq0n 6J9ajE+orOF+WMt9DINAaIicHyUqIWbffVtvzYCPPrHeiKGAxU8z1Wjs5l/QjNHTDcwT/rSj EG8qaS6Gr/XpCTAb12BK2Knx3JVUTb/SUX4rCzA6ZCWjSbsxYn50+N4WBJMR3sXR9DrDItvO /noOueX0zT9ogUbWTmvYRsI4w42hksGfSzwb58Liz7FkGAhEbnLzE7+i4OZocH/SFHzlRxem OBJNzPKjdYL44/HHFhvx/vpXWl+KYJmjcSyl6d2hdBOipnIPxBrGTBToqx1vZcYmDuHMySto zesmLM4SS5/lg3jDK1igReWzTxFMniNTAdyBDkerAJEsf35FS3MTU96XIRn6J9aUvn4Dd8H8 tsXmeXMcRH6G+7haYQbiIu7vgsz9rcE7A7wn6HtzDLM9Iebq5eQTCf0Cx9sT46PxJb1zVpUI 2OU/hOf/ZNlcnzAktY7n3In0ZCIroC2hVuop5tg2uPTOGUwTX933s0F3PJzG8NJcI07rl9Op YVLXVES5P9MgLzG4X+jt1B/673sOfKg/A3fcyV6iGht1TJP/DkNgT1L3uLgLOVo4u3lD823Q WaWreFAj8Daz4x4QMi267M5pIzsyQENljDhJE43blZ6UmjSa6OR6SJ2CNOsT2TMIqjwmci3o GJKBLlXAlKQbgpy2y9N80aAfykYSsAppfWDn7f2wPyw3gAiVU+Hn8FZJvj1577/j/uOeOVLi SQe75nFPXphbzJpbue9zMHtUvsOx8fTELPR2ssreeBBDSrkX2VTLxxMWDnXjaDPqEREJqUCs cGzb0H3FADtEvcnpPzPokB9yeOIRCUwbvVszUqgo2KVATljj92OageEUWWuDqbGGdX4N+4yB etVu0jVA2mA9Gj6ioV5KFAmg4tBwHd0tIhYPkM090mDVxdNvNDfjy9JOw5I/8ashc8+g61zw xr7DICu2zvOezg8Fs3xbTQlpMWuWx/RLSTRtIikMEYr9U1J3QhMDrfr7Jr2OpiPvAMuRT7ei I16/mHjJnwIvf1rD+SOreXj4mUZ1UWZqfZ+Cu9JjdvMBWG0I07GjmGf8mlUoU43avYhenbsl buSN8ZdReNnO3JWAGHMFLLE51bMmfQ/KbbWcm7ZYznmGvn0DEbmwsnN49aXWbah8Ynwaoxyo 18Ob3iX8Lfmje46wOTmZlwuJulkWLbWT+C6eimCh+an/cUtrIGKbmvhtnP8S44rPb+yXlCdL kEBRypzJc79fE/YUnVfUdJtQa13cY955acKB28OvefC3PzWwXMdObP/NB+n/A/w/AWBuBwK6 uDraA11skf4XPrJUw2VuZHN0cmVhbQplbmRvYmoKOSAwIG9iaiA8PAovVHlwZSAvRm9udAov U3VidHlwZSAvVHlwZTEKL0VuY29kaW5nIDEyMCAwIFIKL0ZpcnN0Q2hhciA0MAovTGFzdENo YXIgMTUwCi9XaWR0aHMgMTI2IDAgUgovQmFzZUZvbnQgL1BYQ0tEVStOaW1idXNSb21ObzlM LU1lZGkKL0ZvbnREZXNjcmlwdG9yIDcgMCBSCj4+IGVuZG9iago3IDAgb2JqIDw8Ci9Bc2Nl bnQgNjkwCi9DYXBIZWlnaHQgNjkwCi9EZXNjZW50IC0yMDkKL0ZvbnROYW1lIC9QWENLRFUr TmltYnVzUm9tTm85TC1NZWRpCi9JdGFsaWNBbmdsZSAwCi9TdGVtViAxNDAKL1hIZWlnaHQg NDYxCi9Gb250QkJveCBbLTE2OCAtMzQxIDEwMDAgOTYwXQovRmxhZ3MgNAovQ2hhclNldCAo L3BhcmVubGVmdC9wYXJlbnJpZ2h0L2h5cGhlbi9vbmUvdHdvL3RocmVlL2ZvdXIvZml2ZS9z aXgvc2V2ZW4vQS9CL0MvRS9GL0gvSS9KL00vTi9PL1AvUi9TL1QvVS9WL1kvYS9iL2MvZC9l L2YvZy9pL2svbC9tL24vby9wL3Ivcy90L3Uvdi93L3kvZW5kYXNoKQovRm9udEZpbGUgOCAw IFIKPj4gZW5kb2JqCjEyNiAwIG9iagpbMzMzIDMzMyAwIDAgMCAzMzMgMCAwIDAgNTAwIDUw MCA1MDAgNTAwIDUwMCA1MDAgNTAwIDAgMCAwIDAgMCAwIDAgMCAwIDcyMiA2NjcgNzIyIDAg NjY3IDYxMSAwIDc3OCAzODkgNTAwIDAgMCA5NDQgNzIyIDc3OCA2MTEgMCA3MjIgNTU2IDY2 NyA3MjIgNzIyIDAgMCA3MjIgMCAwIDAgMCAwIDAgMCA1MDAgNTU2IDQ0NCA1NTYgNDQ0IDMz MyA1MDAgMCAyNzggMCA1NTYgMjc4IDgzMyA1NTYgNTAwIDU1NiAwIDQ0NCAzODkgMzMzIDU1 NiA1MDAgNzIyIDAgNTAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgNTAwIF0KZW5kb2JqCjUgMCBvYmogPDwKL0xlbmd0aDEgMTYz MAovTGVuZ3RoMiA0MzgxOAovTGVuZ3RoMyA1MzIKL0xlbmd0aCA0NDcyNSAgICAgCi9GaWx0 ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp42qy3Y3RmXbcmHNt27tisuGLbtu7YtipOxajY tm1bFdup2NZXz/ue7tPjfN1/us+PPcZeE9fENdcce1OQKKowCJnaGwPF7e1cGFgYmXkA8pa2 xq7Oyva28vbcsgzKQHNXwF85OxwFhYgT0MjF0t5O1MgFyAPQAJoCRIEmAFZWAAs3NzccBUDE 3sHTydLcwgVAraasQUNHR/+fkn9MAMae/0Pz19PZ0twOQPn3xQ1oY+9gC7Rz+Qvxf+2oAgQC XCyAADNLGyBAREFRS0peAkAtIa8GkADaAZ2MbACKrsY2liYAWUsToJ0zkAZgZu8EsPn3AWBi b2dq+U9pzox/sYScAUYAZwegieVfN6CHCdDhHxU9wAHoZGvp7Pz3HWDpDDB3MrJz+dsDF3uA pZ2JjavpPwn8lZvZ/yshByf7vxa2f3V/wRTtnV2cTZwsHVwAf6Mqior/O08XCyOXf2I7W/5V A+zN/lqa2pu4/lPSv3R/Yf5qXYws7ZwBLkAPl39iGQMBppbODjZGnn9j/wVzcLL8VxquzpZ2 5v+ZAT3ACWhu5GRqA3R2/gvzF/uf7vxnnYD/pXojBwcbz3952//L6n/mYOniDLQxY4RjYf0b 08Tlb2xzSzs4pn9mRcrOzB7Awvxvuamrw//QuQGd/tUg6n9mhuZvEkam9nY2ngBToBkck7y9 y9+QAOr/O5YZ//tI/m+g+L+F4P8Wev/fyP2vHP0vl/j/9T7/V2hxVxsbeSPbvwPw7x0D+Ltk jOwAf/cMQBbwz6KxMXL6//kY2VraeP6fvP6rtQbw3+n+H8CkXIz+tkXIzvwvNcyMzP8WWjqL W3oATRUtXUwsAGZGNn979i+5mp0p0MnG0g74l9t/tRXAwMLM/F90qhaWJtZ2/5DA/m8V0M70 v1bwl65/5c8koSErLi9H979ZsP8yVPw7CC6qng5/c/uPauTsTf/n4R8YYWF7D4A3AwsHF4CB lYvl7/37mxA3K5vv/ybkv4BY/vMsZ+TiZOkB0PlbNzPLv6r/j+c/T3r/BUbMzsTe9J/RUXEx sjP9O23/U/CP2sTVyekvyf9aAH+r/h/nf809EOgBNIFbXbI3+R5slZqR5lKLnTM8KarT38sC PhziUNKgWpgfUG3f458avsNdYfheE8LYOM3z2ea5eOrwcSBNezjai2VD1ZMCvMwj8CWj6ctH 3aTs4KQ7DGLSL0FMO9P46X21ILsNoc3BrH64O6mkrF/8DkU43fHNCebqiSaAzC0/AIP80QHJ z+RXfSxmJ0ojCFptwekZZeKfp0eqwbGR4aGeG8i+A3y67FhYiu9uEIiUUQGO2fgC2moV3jGY tIKHcUIJUrcHA0Zaz4cyKuQW+5bAglBxD7zalseCP0ofKOOF6dt9h+JM8+dGiht2uMrMio8Y PySLjKqiGalIrp6LHCa+icO56CTYhCdC9P5S6V+OrR1P3rA9bB0id6X/YUjkl+O8bQblcq29 woNlW9Ydcct02iVDCUxBtm/qZE2IQWPuRztcyryE/4aa5xyJ6uK1Z4JiibVyYkBRryMzXFP7 3bOiTW9NKUqoMEkTlZAW41uviLHfizgiq8InaaKBgm1pVFR8dXKDPIxgJNt5TKUAsLman5+C PNTvZD7O4plIxOleAv6ycan7Uu5FvXsSocU/OA7Vm7T+zXWM6wJOHxAd3slVXxGV+XazyBzc fM93xyFJNA6Xv8jiPSrQu7uwDjrb4uB3ReKXVPISgsJwQbXypxb26cq2DT/+OOr1uMsiBqVh I33EZ+uPRLnc6LkHOZEWH+W5l6GlkVJ+tQrFMsdJNmjXxJalRk7C5TmpjLnG5YZpiapah5ne PS2S7HFbxt3xkn3s+0/0l+W8L68sg6dKEW5zzxuCDJCf3/Ih+CSb8cNrWSDqhA1gzXXUMguZ 6UGI/iDSOWf2fqCQ9SgQv/QSRTBqTZb0G6K27jTPZ/bnjFAlfBQdL67EvMRmtacgpKjIcmeq hupXhCLn7yyNDMqo8Vdiuizqezq4yEkkfL1tHL2JALs6aYAdjNlrqztn182AdSHt1aBfD9U/ VkdQRMw0juUo/3BrjIhF/BDhBNd2BQ3glngMh3c4tOIRlDVe9A7Oog6Q7UbWDBbRRkLbGGsX ku5wpnurJnMAfdDYKjpxaofhKhgZO3Mtl4ZEzC2i6frqiUMdMFRXmPMC6ws3rLEOvVrY66Ow sEnXR5VPHiEeTdc7GYroOayECJh5wmJTBs6L6K8d+bxLgur0xnhJLv2oXI/fMRDPRIjAXebR g86brHPeR3KzgJuABSuE40eNN0rtsrzJtwv/hqxoyYCohX2S7QXaQCXET15+ElMYfKD566ha zvJX85+OR4IkqBOsRcuQCbr5X38q3+1mGEgDq4ItrX1smoK7QiYB7RhVvzv5Kdbj0WThZkhP wHjfrmUHEfdZ0ojiXOdpmy6RgjPYQBSPBrGHTUuCZtWk1hkfnG4S6/roxNn7GzRdHMS3NLUS eHRaXm4g9cl0ss/kMkSZ1uMXF25S3TwMyB4QsHFWyvjvMbnsSYMd6A2s3+3TthOudfPb7viv AA7tATD7Zqbp7qiilSYqm6+ZYWj6GwrLXpC6g5yeFugcpLQM4eL8JeyleUhhz3eGMJRaX3PX g0FMTPsWD1iqV/HEZE9ASpOB+WGOSSofvbvGOioN86SRTukZLd5SZH7Evec4FvtI+5gEp9a6 PKpsWRVkJtkdbmkSNWdRChXuRnpCy7PvIuhSnJoFMvQPiwYtoP3Be09Py1Elj7ZyaMxZbiI1 ROGg7mpdM7EAyzMo5Dc0dHWzZXAp8dIABaVOQeatOubs+MbmIcdt4bNBHN5BGtwaBEbz7X6R 7pMIcD+YKws3BN/YF5s/RaMvIa5HHWWSK1wFMQY/E2DZbuYoKQsKC93z1uWsPAJ9evQIe24t ZsKHG2DN26YGVfCGpqNYQLmyvpvTG1rVdy5XJJaGVF8wrmScmb9E9BPyP1ZJaIL/8TxbOLzY 2r1SKFy907DZWLjFABFwbDnthYNbLVjUbbej+9xvst2X8Rpwnm44XB4M1mJtAeRlmR+Bf05z Ktgojp6wcfDW9iuPZcKw7jYkMMabX0ufKvaxtRdU5VyJ4y+hxHXZ+QtwxKjHZ5RDs6nUS2II /I60CgQIcYt97JCIOFdciZ6xWAbWTTvyfLyd9DHmsGdqPqj97KHm692qgOsI8lHg6q/hxqX+ quVUkdH/ksbIRFIL1VsfCbf8PFlJE021wex+81FEV6728MCcuJ4svChDdtQ95MUsAxNx7lmA f+Xd707UAHtWErtWqS5Eqf48UzKoZGNE4/vWakjap+waZH+2gqiUBymQ0hW4Mb19Q/oWsPxQ 2hvqLLxymU2kaZFAMUdrfE9haqkwKWWzutRkczIXNtpOeYz+MBh6TQQH6b13vLd0SyfKYmNX YXLa80Vy88QpCvXj2M6n8O6GzOLKvK733RI9MvFjDtmvcX8vU6lVNyrPOOvzNkbquKOAHgYP vGANVJSkCfEVuhIc0C7MoKI8NhOAxcyigJxl2yITZCiPICO7+SL1dOUGRct07L/HRJbNjY9o di0ex2KkNaQEokEkpPvqW430lfW+ciQguuqU/k7kHskL6Sa98kF2y+NS1CYIpSXzp/GpjJSz MmmVuqTvVfjX7Q735OGXpslKOmiiNA2Zoq4dJUUkCRzmwOmYv13w+8RvLEieaVg57NpvUsl9 6pnfv4WgEUdLJA4C5HwnmqCWbLi2ZkYVWiOs9czWk/BF07vuJ3P2WlgF3fdMWgxCkgWyysc7 NdS53uC0mvCsTHtT9cgEPNBGiosm+NFb4WLuZ6xf7eruIQ0DZZB61+Ab2Li2uaphkn97vctq B4rPexDKk7Lbdic++OAkmnwGSIRIoaZ0bCn6v1dYHbCcTXSBSnXSUE8ae9wZsJG1QYOyz3Cm 1K7RE8Pf6JJsX8eUVKLjY3n/uot11sXe5qpSgtsj2ughtHtckq5Ilov8aB/Jj1jbXHCEt/g7 nXLrXvFfXo7KBlIAvF66QrJt/efyDDFnEckvZ3oMnZr6PE61IogYCWFO2NjcZ6od9Hk2f8ef 5+5JRH9Kh8yETAMEkdPHrtEmmyRp8wTYpNm5JHNgSwDUVgZwGU1Gbz1CCggX1LI87Ms6AToK bJTiA7YqfslGA8UwyeHEZvc8oq0eelqNglnO3TLNpKRweUGZSp7hsvN7P3Oww6/8cn6nl54K EbIIFxihHCa1oJ8tDn2i6syaVyafwlVLmlYAVD+1UECn4paUzvZEYH+zWMU2rriLQBldm1bd qPN1cX4jxWvwUmzMLnOnr6GLIUhqAM9EM69/n4RdqylwCFxWzkmS6pY2hGw6dxyeM6uZKpT9 mIeVYdPlZZ1yfx8rUxluJdUEgbeFeSSQ53caCkYp667sBcZYFtFaOMPRZ+ULSw4ipHxj9Ley 69au932LY8ogU7tnYDUoe/CHpjZXuldYFljjR3TSTy9wD1tM8/SS+OhSooSh/5lkAdCyMTxE wZORbUttJN0NLKC6j40y4g898uyhC5osX23MwxEsZE2WOps6YEgN1wLpA6eNuC1M53PT4Z4C pSkCwhNUbqnvzkngWf5BOXBTvODz0+d41377NFCc23CCju12GcWPMfD6jogfs/pYHlb+uY3N yQy6QnNh4+C4AENOtmDXCvpM8y1An2n1Vr/kKB8a2Nqtte0puCpWFZ5IK+wFERl9q3wlxzac CftYX/RR6gMjXIUDgabs4FWcoHSRmt2V9tW0zPGs55FegawNjnJA4yIjtg2uEcPpy5n8Kw1M p6JEcOdjUxvDX1EGJxh9KSqJiyjR9BpJHKzUwZv62q4lhcI4b5eBRVDwdI+6iHf0Pnx6pRoU ufXOwp1FFdvneCY+UXUV9kQrsPxPXUI8hiw1WAWskvOvIb3wmJvll/Lsfea8ovdh4d4r8vvb Lt9PpiWPxJgiKj9MzFR43ngVwo1ErpUluM36e5Abj8KbHdA0zDaBLA45QXqIx8L3j0rlgRR1 TRW7iC+Kz3q2qWAlddLpFA+bfupNa21aYovNd5MPKDLj7LCCrcO4qyvjWd1sB83VK+NsiHYb RV3zRL6npGVY4dWBAaR3vvwMzj3ESaUWU8fEgAcZhP3PS1njHpvy8y8SV0wOk+jbYupOpf4N Fx0nwOUPlOf3sPx0daLlVRF/uLEvuaFt09uEc4AYc0lCx/AdB/V0EJVPFqiqorjjjJNKd1at CZFTxxmBT4udCpPeOTM5Lq2W4ULyz3rah89rbAHI4bghcfWNgJKP6tPg9eHsfoIOOItb4MsV 8teUBbCJIIZIRxJ9Mos6W0OGW/d35j62dto45X3O00O2DVBtNmg0ovEx1EKY8Aakx53gou+8 75KGPzRdSI/8eoQw8am/gZRFsoDBl9Luhg/nUxxUY7cNagfeMHGKUnvx2Y3aGzH91PeVyTGp +M6uW4ZoxQeaP1pif926Q+qb57vFYgxwb3ffE9ubb+vxUnxVFddKd9Gd9+KigIATefPrC34S oTLAObJXIYUIHGVna6IjbTqVv9B4vd8uUvpAjtrNawlDqHaFCwG4hkSCS2eRV5uSWPFw4A5G 4T0I2htK0zp3JKuv9RApkgdp7ZrflKZH0BNzvPHeK1O0tSPJcp0cAp7zdX+FftMHJZ8iej+F HkKIT7gVD3WCHx2aicksuPtcoS5xa0DVsU4ZLP4qPW5PLrjlGhMKMMhtX0Hg32xYZU9RqZ90 Kl+6QnyaUiw30QKPAd1nKpaykrTALMZEgP/yIHOtsb5DYPsYRy1vV6XWuwg2rYvN/AC6Vd5O 3UERKgRSc6qN3W9m94FjFuHPIES43Nwpj+Pw5NW92DErVz5/nuNZhRBz3NSJtt/aH6GrRYr0 7oZNdfkxzLtITAUTYmnBivrj/h5wt12zi0MQzh26Wyv8Yi67oKlsTbh9BLczBTnNWHnd1+sx xRLwrBJCDmTBHeHaF8BwvJ0rPa1j2ogNt5525wCnyhm6js9bm93Mgpw1Ep1X3FdP60v7rkzI 0ua1nYOb8vZjkdL6W2X+HeCEZypegQYJOU9Cp3qXXzljfYNvWk30akH5iA4nC8TVfiA6QLBI eqedbscMQ1ZZbfBXV74pffwJyM/EMYmNjCjypEofo0moSfJGXzOnmgMlqS/ZYu8VUnSNgASt dx1Hu0GHPGy/thkj4bnNWU9fArJLcBDHN2ifHXcix26PvYqjvLUsJFuy2mV6dZcV6F7b/jXG d1654A8yxZ0m5yZVzo7+t1nexaYBr/h4NgM6adxrLMd2A5XSCbYYzNa4PeKgPJt96BtH8xPa HX7tCfFIHD9aW8+piQ6sfJ5id2yOA21QyMgBEDeCtszM7/p4J/SbBZU2CGhLg35Hqu1khRW/ maKs9phwfqQo4iTlrPYAD4de5pvpgmme/OtO+x4SxEaT6lRsts7+WAlEfXbaxG66lO2hg5IY Pan5XzngFWMyXvIaQBGTCa+9dOgwRyOMQ12dPctdJCSZ1dHS8fddBeWzS5SEUyBEjJEe2Nf5 fuvnf9LNC81nQgCpMVPyhNUMPR952s1jsV98Ho8w4FmULn6hvwbhtalNIMyx0EnMWGVbq3Xl bLb4+POI8GaT2/+5JzvMiXpXgPvSPdQcrl5J73Gvpq4uaBihHNGZhPexeienj7xheCKHojDb FCqMBffMRGjDb0Qx3W0Hhh6oXpP57fdNHDKPHj0bhd3VIUlQrFLRTjPBU4VIicWaQ53pvNCZ ky9LoZM7xb6GtdtcuNokVoR92UZ9UnXCOb2ppXEPKUsmmKQ1M57F98a5gRHtSMRUqABFYiPO gwOIqkmHDQWcdqM1IkXL7Jy0WMYbaqTecwORjYSGjLYu32EPINIXn7Io7pamkCQvUQHUMcF9 lf1DW+hhondhguzE0Bja1n2s2hUGMGNi9mhygrtVgWKoxWBq/UOKZ3qPTxqa93hTBiKBC708 IcBPXut28bKV7ZBM2PGx83EVzFA1sBLfjEFD5xg12vGUOu2BiMnC66Sc6a2w/aG2CIZSJ73V eqxvkVsKccS2mNpFM76O49xprFF+jz/Um6oo/RFHurq0XD0+8JPn5Zk1uSvYTXI1K+Tnuy8b j/8azP3L+DBxqpMLPcZ29XOzv0p+57tqB64Rw+p1yq3M7HOWu2tDuyIebnOyUtmbZsSAsEar tBkkZoMQLypSvT4afFOLeAAGXjIpWZI5Ham48uzAsO5+jhMVcObgQSnAXIcu7Wgo4ERJEf2g vElWPiRR38pyKDSSErF0p6CYO/pE7VVtU6Y8vobMjHf9lyAnKwqIgP+2falPxRqx4IhZcL+S 6Txz48sgS7pIJPGUYqmcaQBrQax/bk1AhUzgqlXRYy2qanAMc7ReV/iNcO8CFOJsc+FjGuTx QHhLg2GzqSgCgfEz4Zv/qNZ3Uav7XoegK2W8FBy+/aZP75087JDbtFHktRtRpGJ345wc+aS3 JTufbFvaWgOGkTfxxVaywY9v0tpWBW1vdRYlQ78S3apZ1OELBhCjKoruNsAFx5j4pEv56bHy 9jLfhC48PojCqt3eM7oSKdiYTPJVjblsBlcC00vgDrMDRBDbiHpka8dengeOSibyTi3cyRLF qZUjwi5SnSD7XargyGZaHll2fsZYDN2RmG7avRn0DpZ7f+cSYTnnSru1GVsmdF5VPYGqT8ou hwQ1xpmaa/0T4zEIpH3i+/l4f08AAZwfk7jtpPeJjzDmvAwa41St1TDGD4Uss8mpC1l19PQ+ dmfrxpKRP1pIXM5LSWheE4bRcy5x7rJRI+UA7kvLo8B9prqND0eUBOrPZj0/ywALXKgiXPB/ ISg9xZBbvYacmDYTRlgXi3L/Lh7UPlDG8D3DQ7M/8Am2S9qPk0Bs6VDfwlAN72W2IYbjjbOZ IAiF6Ipa25M9g4IW21I7g2qZ+NDnIO67h3GLq4snGqDSqbAbN1NSbIvZRrAxXKm6jnPVc17K GLotxb6MM3lARZMtqDDGOzjqiqKFYKr4khwvhxk5LhjckPNZbP8acqYyRqikdmIL/kqXSRF6 LIMEXZt7FYrb7AYHx3bk0zzAh1kDxO5EyXovCgrwwcZoye7ADp/1ZCZIO/haFbDoyTr63MlB l5jEvUNyV7+qJNNENYoPIs6T0f5RNc5H5uJ0a1ZF8i6sQPFRpDcY36NhkXQAU3ThvtgSMeLU ao5GpwABvKJJfuw0Up9BIjYhXHYMdEMa1KwnyHAtcAw02poR47MjMlB05jceeArJn+iGGYl+ ho9Gsg5lnvBdar8c1UWNr+4va5xR1D+9JOCgp2PsDxbGX2S9Nd4XwWKdaJPaMMZNEX+8RNya j+lpBSJ0xQreXMw9AuqioqnNxRJsBZoqm1GhqJ+CCKk+yZ6z1b/GGK59xMC0+r7iuv1fa0gQ INI75MKcCg7Q0mb4fmoghxqJr8zvxCNfYCizmwWV3HsZZuX0euZA+zn8XuKMRBzL8mMDlYFs uok35QiGl/vRbtpBnQL6UN5NY7jqdwLyw7lMkxC8e+65bq9TsH63ZaSI2hSGe2+cXYU7Uw23 OO9nVCzFEKTH00AbgTj2sfw3JrNtTjgwrE9Q/NfrDk70FzncYPKvaBSYmetmqOAvm+jP/RCc wDSslmTQdNmk7zt2pk5WYAoGZAHCMfae5NRtCyOWHyZW0iiRqOa8zOBQE/qoedsa9fn8x7Qt iGxfMtcOzlt0gSAIpudKwhP+7VjKsgiMtqQpj9O+OAlopIcCw7oWLXW2fCXkZO7j/r/SYUMl oXx+fh2aR4/qNwa1vXa/1Y8vd80XSgzPIp5fdPa9nm9/HA+PrkQ2Uec2iZQlQzP2nn7U+1FC B4T5Sfw+QGNozV+lpJ3T/7MguYxMntIhAt4mq3VH381+VMbFoyls2MaHn7KRpz40yvMJ7YL4 3DqUB059MLIe4N08ZOELkl3zQjrhs2kwrkTZuIQg/xYI9gXLTgKZ0f8LKuDnTrZYWCuMEJjI 5YLelj+nlbSpwCjTvlBXnKcpCxvJ9kNerB2Od0z4zx+KeK1cNd5ehoh/ysqpxyVfNoJQHP1t c/dcyrk2+5waCDX0iUwbdhBdeebMSdVmgBwf1QRS1npIPrtPtKxcLUu30PYSJAQcOK6DdI8E US6wNP4Ns83GqfZy8fhhxftD6Et+MpC4RtVfE8Hkyd8kRm38PJFJZ3Lh7RJdBv3x4fxi7ZsH nY/kLl2vRHxSwWT5F2qY2G6PwH+UtQc1NvglJ74gB9KhV7HWR421gXHMNOvV5UGJzwbDbR+l oiiEpI85QM30rkRfwXOJtpb6wHKPXGZqat1C5Im8SpphbAyx9D7dzpBGfvMymUh2rMdtiCCT +5TWixBv/+xajVNoqGswznRM0XPzkT0hDk+5US3m2CxUriL9+tEV6o1hSn+SfF+NnNJKdUgw Ssfu0zBbND3yy8hprF57MV5qDF3f2W0dv4pN8r7jfUlJ+kREY1Q0gvNS58LqqFG7ipxZiVjS wgrBmGthW5ZkbTblQhdZjKrpsmi8r1tee74+1BTPRpoFD0H5AoREcapuRC2+BGaU12TLxs9N 6jc3Dio5DqhlkEjSXXwjvY8BfH8etjln9yFTHcMViXMLhzNVSkBFL+yMKU1XkaG4CWzhkvwz VGw7wUtYXA04lFZCc/I6LCqedjR/3viVP0xRQRIhQcDW3hHZh6QW8vllTDpcPrH1oZBnU1Xg iCOj542D6Pbv9QQ0i56vzmBfXVh4+OBF7AiXNIkj3KElqzSe9juZesJLPthouDF/i1octHrc T1LEuCLEh/wTGGWvEN1e8OZitFxYF/BjVrJZ0yAUAtwBNhduKMM+SXhmwG0etUDmIdksb3Ag iW0i6bk7uA5X50BoEyyl159ADGFYNFMj2hBx0pNSSDk+axOtJeTyJOoYuBE6DkuMH5K8ribR EEE97p8U1UxmOJ9V0eEdWuCChiLlJPxWvPTaxiJjpHea4co3AeGIw9iZgUKujn7aS7sDcyW+ R2lRhXTjSSBp+QvcUdjkeQYYL8/OE0goHf0bHtrIAcPRwsPRxR+VVT4rAAYZb76LJjvuvanU 6OdJjgCoknlitfoRpu8/y+hZ+huxPwID9sCQzVtrEAT9r8NhqKfTO0+atpdORjAYWuQ2s6DI EXiCQJYNbf4MImwfpO3JdCyeeI/EWcm18TraABg//3xv1rGEWwg2VYh8H1aF05CrlFRYgeAR yU+6L7l28LT6iTYpCKrYgOuT2/LG9aqqrOimnSUjJWqKS0xEKsWrR9IN0+FJawjBAQOCrYK+ 2ip787onT8O4Q4Vzxp6IZqTCgTWvzEMR3wRpiLqYS9eoLNSQ6013TZMSXJ0mJzpSd2gGuarE hTH+4cyGTfKW9IxnIShdSXWN3VdtEGT+GjymBA/aLlwUmA/+9IqVBtnZ1akbn8puqFzkkU+x lV7HwIzRHDdK/Y5oDWHm0MPqVDgrp0OFUUjdRkQ3F+Jtr2i4rHa2TW56rs0PN4Ve6xucPkl4 DTJH3SwjDoe4CiaK4H+/GNZt7pV7BP919BK6dzkde5uxEsyluJQ2JcN9EgHLNmB7XYqn57K9 xLDnjU4U3yoUICoNh9MH7U64YcduhBWtzMLXHSO8UAfNzBIFZCnU15pbJNJOcpRuB0qhnjM+ askaLrLIzDsRJQ29qNYgGKNRy6Hmst/tSJsJmkWam96gFbjvZal4CyrCy8TSzoeRHBkWabzT 4kPJEW61UrUye1PcFM343jg0nB7nxTdg6+NGijjGW4+Ke4EIqwXrhFjnqpF+Y43RDBIu+WGI cBp6QTyuoGXUoFvQw455K4dSrFDx+YhJ1iILPtX5K51SN8m+4DneUq2/NoFMG+Kr83u1hn1o i35zgUMxEkfwTVI0Nt4Shc3uRnpxc8WUtBDL0Brq9Qu3Zv9Tgg0qCRmDMLAnUm7AIGKOkmuE CL8eudK5tt/PEgvO3D86e1mE9tq9tDRzNB689xLLhRDfgxDk0brrda0YZxdR4BBn16MKtUHj O4aCGPL2aq4YBaoTJzoYLCPfF1PLXguL4vHL72OBbv/7WKJRsXZ29ONPJ+V8Jzm4xJ/s573o I7z8IpLd8xORgaE42hui8XT19nOFgnzFmFu3UoGMMfH2Cp+diEppaE0XJta/gzKU6yVkyLbH 5kJCNm2Rfmfl2vjgId1qQ/pQNw0SO4XYeZ0Hpbssg0Qs8CabG2FlJVeEKcxpAvoDvHl3EHq3 aazWQMVmmaEzC1ZYGET5UX/zcGTTRUh8GGgTiccz/BSQ1UQOULVmwI1lNfzlYawHJOBqq8d9 hw1n32VWyk6YfefPDlQLTDMfmS7ui5KXjycU9frEx3yQSCvCwR3lPBv7Q633oXGNHRtr1h5R jwS3eKqCcbD61Vyq6uXb+dXlWLk8xepTjy6ItfZjwLzBw2HCzJj6HhbAvZEOQZOVx/f592ZU MD+ufcPnjSYSNDeiMJjrZbwPDuX8PWE5cM62ZU+4VRbgtYzUwe4SLsfatoT/uh7wmFYQckjL T1nbQxUJ1nemTjQxCxkD6Qb608UiqA8YLA/4scQhmOKJE4jOUzd9mbZauYByomIYrbagK4mC KGHM7OG5Z6BTg6W+BeoqvsCaOhCq+/7Ntu+qeyJouerjsn/ecTGesv0Vp20KsSo+4IApJD69 pCxldSgLXxCgRbJEwzIDlO83+x249RuRkNdAY8S+JzvwODsPVNz6HC95LeUgI9X6VG+NN2jJ QeLNq3NUxCJYP4CHCHUhTgM77wTUTswgqg/ay/FwTJk6Q5NShF31XeX0lUe7y/sAR+pAfTbk LmF1GHySNY/t8zcXT8HtnO/5ppaW/mphfXnxdAB3PwjGKMnmkdel0PasuqpsvcjglLX4jD24 13PTbGJESutsQRqs4sLyPh7nSDkCt2r5KBmdmjmCbzwn97i0Nc6BCXu0w5b3sGT59TfbknSe EmBfDITP4CL1mBKTsv95XK5b/ZqV7kdFk3Uxr/1OwXxCSUAqhLAVNBfGzPwKyI0tddTsbKVt aTZwCbySLjK0Hzq65lxUwsAMadCwBI+OImOic17OVx0qtXcp7hUN2U4eg+iMEOOp8uhS6lPQ oZjDbWIRrjviYU0CUZJxWsfou4k/rpEMqxDx3Srtbpakw5wyYyZ47oZzBoWvcVWFtlVHx+8a cF1j8HUfVwsjq+bt1hMSZwnnb+t7g/EXswuq1uqxwkkstmfmnyv6I3Xvv9yHdLG5xRSbpUav uYXEJKom9JNb7DmSa1tey96p0NgCadVK98egNk34hIvU2SHZVoOeVTiTmXeKuyT3M3L/RCKT sMRYepB+OY8VRJbWKNxL0u77JnaySj0dtxxlJr5Zfh/5SRILGARzlET1UdXHq40CCdDPNUoU RTq3/83dbn6ir46uwlV0J8SpFtsxuEtY5t0UDh6cMSAt2ODi77E0ZPGEAd2Z1cZ3+Sj+4nJN WNpsY/Xnl3/ZUYMTnZOHTDqkGm+nPETEaxZT7wwXJ2qzM7b4bocZ4R1b7v0I3/vx4e2Z+fMg yISBIMvdOtkHnri84SJB3nONsRRKvnYjJ7ZlBHfRMq9qqVREc2CzxAnNWD1+cPSujkPQ4itx MkrkRRmU5cFZlw0ebZu9l74gLrYep9XiS1WfT0Xn6NpqMnQ4Ealg4lrmjYf5Bu2P/nDQDMjU mV4wXiLKprEJT7amhlhKPoufVWHosITA3y/hWmDCpXYYuimzpEyHSYlTGgWlm4/d8mSWjNUx sTUU699tzVN8sNfYf8nTXOzI8gaZqZQbrzTzHFf9TJb4quGgtNusg9wnc9Z/bbDS409yeoJr ysSWUnYuHh/GhZNidwcvfLm+/MBRWLuka2INkOUO0yT1o5Tb1ErnathP9uLzktzYh7iVio3T I6zTHJAJ6zMj7PT8sHNFIiAKmzic2HzFQDuTqUAQZJyDlgZj0SN/0q5rS0IRd2LDQeiBq5Q4 UCRA4mn+zJNalOzsjrU/HFHMzy11DkqvXhrSiC7J4lSL+XziD3P6WGt1BIQLMHSQXwtAsYSi Qi8rJQE8jNIAB+efwtO1mTSN+QzZ6XPfyo8l6AOJsEJEJOG4i372mQiFOI8evV9170gECDOM pbwQ4LlBzaFt8CxB8pedP9/ZFAEFue96aBAXBfTeYbLmc12nYMWfBcF4YRX5v+3csDBG+aqD u/X+MWF8N2b9E+IKkxUemLWcNE5vIqyHP8mOlpz/QzDlbuRB7k/s97IrkRqL+YlQcRnCRzbu jf/4Kh+RnkDlj1oe1rG08nkbcoCdwBf/YeDIZzFJy1d4we5Zx60DXMD+RnJORDuF1HAA/+0E xmYOx5scxZblfQE52ZvmgPwpfSls9P5CJyBrTNaAj5nsjRhGm3rrUpOH/n6ap5rXdc+gzsdd 2OFm36TP6uj6mDU9T1UQAEvP41Q3QeQnDvk2xH+MblNoW/N5Fs2z+barcq2JJNgektcmwZPr Ry0iD8PMILILwwVQDus/a5uF0EFazQOZFKYp3J+h7hOAEuquMMvLR6dklJPutu3R/Tyykk3r Fy3uj6w90l2WcHBbvbbt2fVUZyBHIxI5+VVypYMqhFvmzqo9b4wV4pDglQjbXKBe+Nn3LTwb xp/kYpC8pNfaRypYFuPM6iSxTnxXu6ErG6GFnkrK7yofu+Duw2Dw1KSUilokieqb5d5Xrb2u riPgjT76sNznhGYB8mJXBaXkJLMtUdGShU9UrJYEk/dqL+3SRZupaEZrqH1Tc02qG9ZlxOQL eX4axqt/qRfsMSa+uiAGO7dO1nh5tcTt1aBP/2x/aufYQJHMxATuJB1PIIMz38MVSrL+trdo gyNv5nc0q59s/UwVOY7ho2DhbEx6xfcBpLtutx1NmrTDvQtuQqshGBj4dU84gg8TrbNXPGGE MTOpqim0Z+791FTNQe14HVG1rq9QdE+x2PgpgR+t4wLoG3vzfDAQxV3IlFDVDqQFbDsl/D6e H0J58BDFdXSfGsAv3nGJstme3wiKM62aShxgybEL6dJc4nEgb3f41ZnGRdr2HUy5aT2qJARc veOnEfVU/CB4yuUsLx+/uYmQyFavunxTw6liu3xec9FEcvleGBS0d+cYOOaUmdgJA41kl/nX fY4SGyfhjEejjqBEI2Ww05zerjkeT49bAedSm8G+Y0F/GIC20948KPV0EtNff1J0NQHfqbam N3crOk8/eRHycQfucPDqiyjkqvizU2+HH2d3u3eHhICP3GfckVyG55iZ8mzu81R8SWOevQju s034W2KCkj6EEXfxILqJE7LV4z2hWFXJSEQcHhT2xHxwXdTUOemw99KUbZ5nK6JJfN55fTSF BYLk3xmAcsLbX4T1Badfymc8O9/FSLjvj+eAdBfTKmjNvLsohi73Gqxr1NvwPVn2CIZCH7Rv 8aSi36F08iQFNygiji+O5+TIErrDSnXjh2FBxLG/IvebAyvqn1MVTp0wQSRAwPWXAxeSjkI+ hbh/upy6YiyjKo2EDUrXqFcjCTqtWo77U1r7QEHeaUK+jDRfsIHB0xByUXco53kwI6UaCpX1 GpWSU8kdjJdYueJgCFEZsrAT6CpYagHEog8H+ZNgk+QF46k1Db3QcKZVr1cwFZZKR88zTOxV nghbdGIPUkg73EEsEN0G09LvKS7JfqcJwvhp2Ves97Xih3EhZ19lKcKJRSQkGLnywBp5qFK2 zXLtUapQ8NQwyomvDdn9mJuszbUsJLqc167h3f1YVcbZKoadiTn+pQC57ROCimrIwddr8pYB oogOG00Qabki+Mpr1ZXywJJBwukx7fKwbeRgajGafHKMgK1vUH1xVLBNdak5DY81xeLI4xt7 qkyOKE62znUxHDF4o9XgsYWs+Kf9RUS/Z7b7LP2n8z2MtULLWDRuVSewatAqRZg9FwYrNbAK iX/x6RjGfl8kVeKoo5BTVVfCLSwhPQjnN0svKXQwv8JI6Rs5zYn3PnlAV7G1spacpgkyrj1M LvICUaMgGVRidna0Cpc4LWHgPiSpAgNGygqL98fDjI2xauxoyYgOODroxOlvUBlf/07DkCcX zEGGqWoYgF3FwxGRnyWL8u2ypyr8KZ8Qx9bTMmtMnnHRLjHQPyJWuy2U9Z2JloJnjqKV0sXg SjsSPlLMV8rZOkift5SmJEjKJ3zc3kYTLhCL+VaVxAfUmljzyiI6iydU47QWmxWqCLCjONah B94WIIv38lDhG9hCU2j9PvLNIjaG3nVZHGG3qVF2ZIS2QBS9mnVI33f5Rb1mmM4qvIuYPfU5 a+bkNlgOu2MDG44mn0tp3P4DNSu7YAhQUT7g1kuFgY5RzwizWwYv0VsYBLn59xeArMo1tuGW Vl8gZB+H9pphBquitg0ph1yU4aTmKHY0njU1KH/fGp7BdITOF59GMGgM8KadjPTTQh/rG7rv rACRiQshjuYV+wip/vTn2AF2FDtX86xHD/TZVy2CiY6I13mUN8s8fVX5QO8w7/v31+y3K7vI JYOlsppqo83rkmcdk299mfF/urF0V3orbpfW36pbcfUE9hlKAtfVtoYXIZxOZ1xuQODQ9qzs BBCwkie+QTm4sTwMoxu51WCY9IXRAuGF6ACWK51FDUDRasiyCvZY+mZ4gxTUDbhgCcUIPVXQ EZNjXrCmAUKyJgS6bznj9Y9BGxded1V/iE/ia9Bj5ucdL7sK2nt6eDK2l0ZA1snleLmvDo1R LFOf3l7dtTn6K1Pl5M6XUvFnj8LmXbiTHveNz6eBq+QcW1M9lBOx7E7D6JPDLVN1XXb8EVJM A2CoIJCFwlbedqBkVYlMaYVOyZZ6DCmy8xZd1Ev5n7RCcIWI8Ingdt0vwK+qzmAV77cuTSNv hfKoBdcj3ReIb53LwjLjK0umLJDU9FxCMHCGMid+hBCgJe8Li9cjhOV4OpukDSj1frC/etoV LCV2KW0Ox7mqKE0Hc0fIMCUwPcJwejXPBbSUmjSW6N2pab2KJFRqJCLQ6O12jNiipW+GbmIk NTQsRd3H9dgE/TSIf2FSPZ9KSbH1BHajs5gNRItzJxoW6e2UwCbpkDZG0d8gYCJ01s5InQmx rHra6uOlNP55ZtitmPztztO9Mv8Ui+RaLZRO97XblvQI+QImoiXOsSGXlm0DBcwsqSZ9f6nx tMl6XPvCbK7Km4IwzXZUbAiXJylWUCz3VYk4tF5jXaJAkuAVNa5+0qLIL8cGvtDMZ9eIxhVU 9wSCYab4KSwQbBoumfrjDAI6D6tqVO2E7VWIpQUyFRw6qQzrsc4LSXN+aH6ID719ysPtll3d dLkbYwRBq4X/bHjWMM4NxwZ2PIVMU386oxvuay+B/Fj+iJUADXCMJLQTC7fXR+4dG2aZCRlA FqaLVFWjqPQjAlAg8VS89Bpx4x9xc8tHaevoLsb/lJK6Q5F9obInVYC2w8WDGK8q4mYoqNpa LdveiUWQZGv9JLIHpJk8aRl5PGb9omIYbYCmax9vtNOBczRxFFxyi4Cq6FF0iHcvQg9cOB7L unjBFfXExAl7/4Xedlmji3LuIG3hqgvcQN0B0zE4JVYjsPzxXvz7V3FL5byYMeRuGcQe9GTT myB09/W8WJqFT4xCK7MtGah5oqblOZK/8q+VJNH54po3PyOfhCtujp9nOnoQSOGWMPShFagb 37KMSrUNtaB8fm+KZaj0mQ5N+oH9aSfhFFRPKL1CYcjDBHTTSbxqHRhmB3HyVYah+RFiP8cE k+vQVFnvyhNaL7wtER5vtg70L6GhiatEoGXykQ6pW0TCeRSDoCYH52IrJtcp662yr1w/XLJC 5svzDgTxV0/MX1CRNLDX7BtQhGdaYZ/5LgzL5Rkg/7Fxkz+nB7O1k2mFoEC3n40KJNixiRzy cVXgfh+PuLDMAf09xSpv0RW7ufMSXeLZqYCVm8G9wj49AV6QPe0ki3b3oSbCTOCCFySDRZo0 zhb74JFP+AyyoPCcRpIm8+CjjVYXccAHu5A2UEvMv6h6UGSNNsPmJ7aqkVn+JVrDoEJ7y41J X6vXEP77TN8sK6TN5IZik1iwvmRpUJdZT16/L7lD49JZM1KEZK+84g0xqDr+1QFaO4GpmipF nrFya/+HkZy63DQpdBkdOIpechpn+xs3uoOe3B/NcOy81wsPBq/AkLN4JWkHn6Y5jL4lZlBe YiskNsbjgzHfiliSeu25OsjpWpCL5vDmDiksNVPxuWGOvVcu0ld1IvHAaOYhIX2icmpFZfF2 nZXWQbu5xhIT2YAxr7puf5oom/tY1ki4jnWEc0vi/DwLtGXNRn596k2npFAH5eIaeidlGqU6 toGGgfS2mHf4NVATn8tjvGOppNTjctBfZxySzS+yge4anG2wHWOT5WWBlqm19QYGkbmbYwMt /a0ECIQLrG/KnDEDh3OXXOLDgERZCGgwPAUY3ZVmdhn6TWg/L8ENwx5erh07TuOgsf52WJzR LnYVpgqRBAxezwvcyODz8514JFLOH7eSc4C9WoTThUrrJ0OzyZz6L+vhDeikVKm+y9kOc2Xn HMA4z60UwYydVtCG3I8k0cJ1a9MmXQcWNW3RsSDwznDUp1vUVrsgv6tUPU9jbw9yaacgYa2B CRajzXj3myMshP469IexIC42OlSKrS+QYcR67/hX5K4C/qaPCMUrjw5Ob0f0QDkDQYLdGM5j hugvHWkDp/KABJZn3V+cYheWBFYDqUf2avabTHYoYUXOHp3zk9dceCC7zgyGJt+1+lccH68w letSk3KOhzKI3wR3on2yHtQlHjvro3QIJ7enVdjuqgKNjy+OrO2jGnvBdok54afxAfueS8HI TMYqnj+yALIkTdn3it+BJaAqRBUo3sjp8LGSqkSfC62tuJFGVH3GHmdrIqSHyCnVgo3N+2uN 7tqbhZf2cHoPPn9K+UA/Va+O6Wfnu1rYDRrUrS+qhoTKSH60X1Hdg5+V9IxnNBhcGxfppyHG FbFKyxMcCYvaa7GQNqX2TpObLomYkD5rfmAIs7b5iN43LpUmt3qp6kbBKC+qmD9gVP2QoFH5 +QdUtwgpv/TuaLEjzxDEqSDI9YwjwKEYENEE2XRHeZYU5Q4gPp53LZc/bJaSfwchlHbpG/sR i+0UMFxI+DGRUMEkaoRckJ2yLtAshjBm1WXyRqVfS4Y+wmMz6nX7ZpLXfAPj7W0+0lp/BvLN e3IN/2OF2IupT6sjEARRYpMIxCJF9ESrc4pYutoVNlPmugYVh9KXeMlj4cLOxEaNmIVKC3+8 /hk3+MdqHD0priQxI2OLIHcJpsz2dZP/9b2cr+PKb7KkBvhyD6F18TqoijN3AdOGggdEe4Aq 5qgAK9kZln0F/XTr90qfH31LddD04Ov8rmsykVPyPs+IzsoHmZ9FbKmNW3zUVlc+82qT6swB NQhsa9MSzpr4A8ENmFtOITd9g+liQLCHD7T5vFc2zd8/gIxHbv49OFmJaBt8hVtQVRSuLfXf 72u5MJ/0JVXqHZea/FUWIYhzM753/npN4+qdqKzE5z2v0cGDYBEmd72/jIg4GueuCBzmJYvP uNJvgxx3WlSl4X+PSzGQd/5MsbzTLl1O3mYLGPbTrPCPPsIUQ8nvqDax3UzOLs8jqOUd6KCO YX7s7D/r4gQ/2a+MoBehRq8Ujd+dUvgWu7gD7J+OAduN3d94JI8zR/dASkDIyO9QMkaFKHrR RVcdgM/IFxAo3tZ463f5TE9gHtx1GxVubNYLgx+TUHP9BFXEi/EMBIBKZlPHrX+GpUTggHhi Y9B2UHo7WSwh9grTcbtPTW6K+pznUOnmBliCdNC1uQ1C2r5RXasc50GUduQoWJhOAw0gJX2N df0cuL2fBprWBWnplilIJiuFjbA3SxYhRna/CGjdFBpbLGUOxX8qF06tZxB4gkXZAk+uobNK SQPEdMvTGFq73T0SrR0+MLr66wc8TlTx2rVd98ZLfty3p4guNxVLlwyybD/KrZ9MVrv2e53a OEI+AN1QwDU9ks7YXYJCfkcGBSaqio+Cd05wUIwXR5yHqStcIk5D5Okq+yEV+t+3R/TpPzcK cydzkBf5NHi8gDzzzUC4b/vbZ7pE+St4iMH3yMXrhane6iJs6TUAPEDoMuR79apy5vu+Kp+z hfCUq6w84Fid1kUhdbjWeBI7ix1h8TyUskNMv7vqDlkF6IyEBJRceUK9BMzJIjfg0iuMCIoj M5fzVGbZzGPbsfITawnVldvk0DsGD6fRkMnYJ+0MaIK7C//QcIFvbH6lGNCXI+wcV60r6svT HLj3bfrAfX/kXoIOHdx+EwgIhdatKZ/TZiE7Schma9H7Llez/Yp5ZW3jwq4ojJXrclkmKid9 S9r9WoUbzjvfpy/S46e5cd9SqFu1q0cA2lO8UrHGV0/MFTR/9qFcbxxg0JYvknRC33N/VWfN p+HY4L/IT8vsYsFiawUie5ecKrnZhczIOyne/emM12P1+QwMVc7lgZDVI9VHLDgC4f31cLlA pUP44lbORBL2KAl7KuRz/KgMi7WmnfwJEeng2pxYT5t+7qNuD+Itedu6sWRHpCbAvHZIEyNk gaDkagRSoxSU7MFBon7Q06H43PKtxmZ338BAW4+Zcaat6ebFyXDz5x4ng8ZaizhzeGPBuhOU LWJIWPvHZ0qjkZPga1DRS6B12HW0QrHq3Yhie6yRgwK1Tq9jz76XCz+UxPzAgvgXu6Ore8Ni JjiykydK6haLWvlYu+12dd4zk/vPX7ANnvV2Vmc0gjZCPlyieSZH2Nwb1Slj/nUJLleVZxHn JYC+lAojl8D7HdXzfO5CuD3kAMNEq7uvy7tgEt4gPDDJJGR7e7rBJP8so8njp4vyMqx4uLKz FF/4pDMRgwyJLNkrEPzDC2MMA2AhzJJinKEEMuELezvIO2GSgL79u0+rawuBedFTIBUqor9a DdigjK4VA2wf0wVnphY6RTg9bD5vG/a+1RiFDSaJPXSQUDqrebaF5sEvTmKIZ/WcYvWQRVKr pIiDR8v9P4M/sjsY8wa72Dk0VSKcv5k274a+/eJCP7V/+GOO0H7JnYTHtJklZdGmxfOxuzic jieF0V/XktQET1rBtZRveBch0cEIKeKUWY+TdKMKX9lspIPRWGFALpuZg6JqdiVCLOISHAVZ Dx0qGeheOvriNuNgJkD/fPBpyz/f9afTGOboyHhId/xmahhRCvUqiIGknIrcG4u/TedDOuHV a3uxVH46yFW8nCj6DOez+4YfuZGs93ecS0cyu6x35Qb8LwoCzf5tHpc+MfZjrJ5yoKPjbZFL vsZzc2uo9GyY6jOXt3KmXEtkZhx+1IDlau9NwYbyQpWejv50MA4YXVEewYcvS+FBSEB31z4X jGihuK0Ko4KUf8jkQW94M2YrKra7k6uXPnn9GtDrN87cKY/et9+gpDXKWaQ3YGpenZn32JTd D4u7nLNXR6M/QiF3g820dycGhSKNZnix36uow8K67Jf3DxUFEPG1wr3dTu02GehWWp/OrG21 vufT9fk5b+nGMtJMspgN1bwql/1iWqaWF/azUzlg8XgH73B++bNqHf1RC0ecI/Ej2CG18Exm hDIJlLguh5tdgUxwGIJcFYV9IclDt+ZqY9ssTiXiVAX5jdNnqzPQGgy9zMm5x1xgHpXx7DPi 9rsU4eFhqQ0a4/cA1BxSbrIooRPYQk3uvMCjQ012cebxHUH46ERj6DyeEEHrMULQM3z5R7Ou Sqy1klC8U8/D3MQO1H4YOzxL6HzW4SgNvUYeSl5cK6Ql6JHBNSYnCt5ZseFCdBUfri8jmGdE r+ZKxyBXNGakFAxvPOUZXfgvzXzX4wCBg9TT349dQa1F81k8HAPMzR2cQJLkfFtaMoN8CINc llslz9qv7yVmTH0NMrAQffYDRp2mDuILu/X9/QtzLcKDBFLnVSKveAbeP+9Kt4NoUVIQ+0n7 qA+gCetjcsd5saEJSfrT+DYpnnNxN28qVTpMYpXsB0lephnrKkEVYqSYj1n7oOfFlPMoOvog WyCEcss/B4nrV0/ddHlQyXxXHtdUU/CBFiY5fDZB3Kuth4j+tco1JnLavSMHchKeeYwWoBVa TdAmBVXuqWf4nBKW0hbMjo8sRWRTV0UkTZGF7wPPqLz6RXtjMFN2ToXZJCeSIIomMiDfN9XD mr+va+hV5/iFc1tesN1W2PULLY/zrkDn44EhgicF5eZu2Iu9TFq6utMiRFyStk13dSKkoUcq esit1k9K2jBZMYZ6ouwBCLknhkukhof/XsYfltZKdxUq376PKWHD90QqoeLMfL6IjY2Ra3d2 SMO7YIJPJX+g/OG+Hv6c9h6eLMqF7RdBTSbElXsxWRMZd630J/aPZ1zcmnaUp851w0DpefWB SmnCOoFowSXtTNpzGfsVRlGOE5ohQjVNyvkVR5KLxkFCCf2tX5PJNNgnKt5ICZ6jnvkqPx8O uM29GoklIoa5brHDl4cwJ+VMuM3UrKEPwXf6s0h4k0zNvTkAvB0jIwiWLb8BWwtVT/kBO3RI VymMghszJbGRFjVNIUALRPOoicM9kz5B4ABrRfY2kpvr4jIrrqL4zJ+JiCNB2BT2dz5izeUo +r6sA6iKn+Ayk8bcy2PFS4klnoKXqzqcduNp67YvSanwiuPe+huRsIwz1bE4cnhnQwNeL17h N7Nswhyx7LzDVe0wZNSabce0TDjJphPOiSrNwz1M/HhPA/yq2MOKM0XuPaqA8GrIlSKmoejx keCA36vVsx2j+s+GxD1/RHnGfOUrG9y5iJ0bcMqBVBNIBDoZP4+y79vcrb1whLU3kO0KbGzL bI/ErnFftjqsIZfRfndgEYZzYcreM5bsljhskyHdLBDnSVVDeLRfwDLW4vRHlntB7GyoQagt uuKIfbE6nsH+tOhgXftwRzh84MVfTcIaEVqkGepDtn8JzVHXh8405r8Qg2tmLrABp3QWXZqX oiRgaa7a9RwrncE30Pb0jLNzavB7AnNOm2Fbr9QhGuD3XAObLUmq1R9C6MmNh9kqw8Jktr2C BH2g2wkg8OzIvLz3BDdOgiGVgwaDvtKIIHGmNEvlMT/qlNGD+ILxpDLZbtqQgRlRuZquZ5Vh 9k6HlstTZJSoYeXqMCTqIMhjbJevPy2JYR480sjJHJzVkEaXyNEXxcRLGrk6ec8wC+7ZMx2v EkB7uy8pimp9GgMPKB2GvzjwFLXAu0wg9KrR5J/stt9hTe/CgN0DuWFpHAzkoaAufdZQpu++ cXd9uKd/sqKVZYLihzvHOaslDOU8/SMUU49Gn/3/ARFA7r8lyOiepb0fUMn5ikjXRfUo7f5u UdaIILaDu6O54eDeG5r+dF/dlxb2i9QOdjN7svQ6wRbNs94b6rvIim/RYjmwJr3ImG/lb80L sSs0J1/am95+5zPq3izVullvXwaUsSylPvsF9CgUrVag6Vd0EdPL+YDbnoWfkq/YLR2G64eb Wu4BF4SNDspEqtJN1ad8uQqz8WL+Q/Ygu8PCbwvrcXRQg7Hn0M8adAtrWo2Z18KOs5a9z64O mWDxGPiR7UU2NWMD2t16GQe4vLQYiASciHh5sn1UyCrwNrtFfJpppRjkMC/UP+kl7u/A693T uTRSnrYv/M8/LJ8RKUijBXX9hghT398KyhzwXHn4ngEGkaWLYBByFNT1F5jl2P+XU1aWNTu6 5jgd3NMZu3Pw1gn6pC99LLwzwoZsGQQ5oM2DbmhY2IVnt6tYPI4IjvudK37wT/O2r+qDDNBb pzN6Ty90JCPyyGWM2f9VktU/jXEYhTav/voAtpcsVQ2GwtYGj16gdsvqkVShqXmqpn9d3Bwv VwvUHahwsODEVMjFdzUDiRIb/BKntyYhnF+c4SNn8GO4FBiS1m49JyIGVQlC8h5yF7cD8/V8 FTeDGmZn2/MdefUmWYzCnf2qcHes1j2iF+r6lBjo2Za9gyxW7/zJiMc9NgIyNRLV2Y67X8bG +X6Rwg3zxWPqu3tM58tqaYUTwHsnFv2XGQ0dqDlxG5b3ExzWAZ1jmfw5iDulpWCZT8+5y9by 4EBTBLwaRQfBF7dVSaHp85JpE9pLwyd+/Zx/PdT1j7SyrkZL7PWGzvbjJ7gFFuXPkyLV2Yer CaVW75YzAQ7Pb9IpPHNIZ4a3sdlf9wJhdJxJJzBuIXExHetKumZVmAahc2IpsvU6MnFL9aaJ /LNkBI0Mcatwwli33j7tkepAcFm61cZdZrK3f6+JsSVqNMU/v6+2G2vKVHi1fuSl3oxp7X8i br9kS7E62YmVJbISyIGaDrjiPKWsg/zP6lmccZIexWtygU/w32VwLkp6c7QZILovzod3OzDI hEdDeauwFD6py9Tm6KDLCMqyWxvDHdAOJdxehltRrbVZWzM6BlnIm8vufocSehKviJI3K0XA bcU01vK54MnJtK5qtdVndk/KHezTKOzYmgTEYFtpo+AyFnBYMR5HvDVp0onY8/C/F8JWNU4C X5CUdVqPn3wg6uNqYXmJmeHaXbfdiWlTIeRxI4C9pmtSWU1YigfEYYaICV7VmpSNBgmYb2tu gvlIfJ/mDqBST/XGloBz0PC+lDG9+nsor98FBcB+ZLLUzE0u0TGduWGyUVOKh2+WQLusCUvH SmNhbHTZYWbha/jwiY5N+JsyhJGs9cDHdcJa/09QBHH9BCebe4ysXGjCuQPXCftCKLDS+hOR x/rDIO6fPwmD+viwuSC0IwHySE4BJN1yMPUrJVRlgMm5BujODcKYF3nQLtu+HHZFmwkZmPvh mRNqJEFDNHXMqo3UW0+HkuUjc5gmdQhVgWOfrIKOAVLzeiSu2cEJX32uShHT+DKxu27uuawa lzVzTGFsrCQfbfDE7udVpSFOPd4WH6XDyr3VxEfxf5E6z1khzSNnhd9L1TvJsSyc0WIV7v1z HD5TgHuylGdzVQR3C09OyEwgY2I2YlF5LXS99nS4SfGgz+3Vs+7aszUEQZm3IhaAPclpTmeA KTkzNLSzMl//usLg+KwNvhiZuUISkNCp4Zq2COpegW22qQHOSURlheuEwBQvrqUFneby2ZUb nXsiGwI0fUEF9ZfZ7fU0H23aczY22vW7OwdvnO3A6L20zRwBAbfNohk65JQuv5JMeG9n3Son 36NHabbtfXyWvFJ7iGhCQY498pMmXKEFiBqH4VycsOpbm/RcljJuw/AvJsjgbdnd3ezvGACY 7qnVORrYnhtgsL3gZJ7usD6moeiCchhswljwKvem9OQkLaRIAgVCwXIkjAgP3NHI3dE2STlO UW8f/vTcwRE0t+8m0Q7gwUTcZnidOXJtkw5LsDpH1GpnOQdVIbvJ8A0a2S1ewn+yZZ0TyH3q wonQkrxfuRS12TtJuzCC/yfrb+nChQtsFo8tlkUwwVnrlwGdXovOtPPn68kjfhiBiLLWy4qv sunfSSIiv9OEVboHGFE9f/GnudCFK3tSOnAkLOlT1BXjXOALiqdgjGp+hOX2KRlmlBXY5Fa4 818+axhOEpP14tdjC23/phj+Tc0Kh2YOLUisGGaqGRo84xB6UCaifOViU4wUoHcUHzEIf72S D9wNMudfPOmM4PyIipmGT0MkDDYyrmFyqtTk6/IBp9IxflSrluaNYTH1jXycmXl8GEAeUP7T izYN9YGA1PQIXS77Z33k18OAYLTF/xgJYholSYthW9TNKzg1SD/rh07DjGn+aX9BH9tM1y2a UUSahAuEiR01JEpXxI7RdX3eFT3yciHmMMJRZyF9lMgd/dVM1+z8fityMglIqXqRekEXrYem 0grw4ihNIyR2A7L6oP6ZV7sipkcjtNTPBEjgpKNZhRs8rRkbO/wbfdZiumi4+7/k+NaIGalB 19aUWlmYDOdxB2uxi+EDkm5zgsv8SO9qKYOFfiPO8qkjyN+vdqYSha6JXL6RCei0+l8Oy93O /KPSI/iRFKatg8q+C+uFDmpAu3v3FFX/pqe5UeM8fvXxq8jk8w0FGpkEjk6Dd64FEggWuol2 BcdsXaepBmT6dcOvMH8mi1ou1YYBV6nZO2tlERBc9lOzN/gI/1d5EBReq9VUiuuHYpx81SKz i8L/yy6KFk3S63+kUitJkrw73ZBONBzCrzQ97UtcSwe3pxWUzkymDEP2W1wb7B/nqeZrScTz UdV99oXYE7g/HXCD/ic0A8VezFzSeLm3qfwij2/g4SP4HmDnOgDqY3ZP63GP6SBMipAE1Z6H cZa/Nno2SHe5akCPjiPiFDjkRrbuu8D6/C9P8cP9LDMl+d4jZoMWjDMpfDoja90A5TaJLv7X 3FnJk0GjCpZGGktnxlee18QpCiFvi5+ikGOmlP2umWKKpqQakbJvg5bS+R1n+LqcF4DG+aaq ejW4YUhRz+X631LdqPKjkE+VyREG584VejyHPdqCRHlwRgyN9LqltSdaiaRmXTCy4w2NabtW 5zeaS5biIhvoW8LgYi7Q8sQHNN4AjDN7Pkc8KLA9bliibWoE8Vm9/iXlBToCyAVw5+oYRLIX Ut/LdI+JBn7cM/BomTrFx2hJKrYn3uj3RG5NGLI7ljpNOtzFjJxXCTLhRWuHOaOepVYdokBH Uszcmr1MP479oZXQZO/SYupDDONLKcXqlxZnnsxqcDuzmJMN5eMsvEzbACn6NpSL2UdmVh72 hzaxOJ1sv/VELQ0yD8dSmbp2KyEFOtKDS3zCJntgzhbm5fyjxq2CCiEfKaZt/y4YG8jmPY3t yTYxuNz8/PNb0Bm71YCNBxr0t2j4ZuVAmzVVrYZQMZP3LkyxdgD3QnRAsdsMpM22A0JX8MG1 jRLf2PZnDNzDiZQCKpeHKPBUXR4adsoRhtk3A9gNsKztN+k/lWXN8LnggcdabFqmbjK9DbLs yf2OYVir3JfsBxGPt6T3JxvBLLcc2gozt7eIlb7EAoFnHtioC9wJ4MM7ab+iz27uT/mqTuQK 87vfaMxANOBTBSqj1UoPa9MFQeQGwQ1OuleJn6t9oivJ9XfTxeidlEfIIrydAYJEK2gPopaa 7Za3mZIpU7SrBCb0rzJWCUNHRzXY2hqzNUwVvTqY/CFCtgFr+tNLDC0xNKNcm8+E8h1BsFtj zg+YMq7D9hZBEKbZZg6+GbLsG5Nfwo6Z9nbSRepHtL9qrDS3z/VtICuXtjf+gCqFWShUgwhg 4JmUESJTIwMvHUsSZn8CIcZeI8EOZF3k618HtwKOcf7+LDDhKXCpNPEquNT/RpDwWGz/SInu XzONPEgqulevPZ3eXwZdAZXNWiOR5J3ozoGqoU8gnyt1qNZlM3f7XTw/kjKe5bodHfdXxNpw LEml5JbCwUV3eT3X1lwNTW2QeTdutdsWhubop+xNvrmRn+u5gvo+jIYlnWicjts+/06CjTI4 gvuQFsGVI5W+BvOFOljM+WkG5wZCLxQBhdCxsKzi3v4xzWdLIMAqOWeHQWFDaCxP6eaypbhu ub/MkRzKQwdGyViFOVDlbzYRgizaCfP0uz/dkAvI3nG51e29kpaUaPMjItladIShL4lraWhE tbcXiOkkm5On5Dx8Med3mqbvjNFaMJ4P+x1nyIVQE3jPspULbudjcSUsFQLB6//X3KfABa1n WrTomX4VGuMOSGOlXlWD86iqXvHO7+uGnNr7RNdh5dhhiUChzdugOKQ3NCvR6RBaLgCs7tQu /R/gP1qgYWrvSmRB8zpVl9csLtgh3yFH+kdlr8psHKFIQo9LTbPRQpSx3p/eBtRdhmye6buB D7vN6ZxHu5pvnaZgJf877SYCp42KUBHLd/BDTvckUJS2LlIhSKVZEN6JYB+GoOCceDWWAx3f CEDDYrW0+DcTAPBK1RZ2CmIRP4gj324jDjrsde9rxO2NOsEH/cubcSky6sIjd/7ahKn9Da43 Fy9TxATmfWvIQSu5in/MR9dvIuXn96duo9w5LBv52bcG+5dYl+4QNQGi3jMLSRqdW3QdbhFj QV3E+l7GvVqq+FWVaaEg+boh5yV+Ajrr5aOqLTNgsG/5ZWb6AvZ9Bho2K4+cz8rTDScP3qpE MmXvoitKt5VpVnh0McV/++SHXy2OWElPSeED/5jZakgUzwr+XZ+uxAu8hPgtD+aFhDSXB+s9 Lj6a1bTtEizjZWz9xrcHaZw8ATGWWxu5cAciEWfzfefFZFct0m7nZAc4uIC2mMRZDjexhlkh eJaHEusYh9GwRyiqSTL851xhLBuTV4qS50hycSAR2kF93ZHKNyLS45UH8vt0Na6NVJg3O4eK rVNg63uSEe+ErF/5r5ykXNXn20TYD45M253TQfQk384Zrjlwt9kwXkh9z/fW8i5+gwr0GbHV Oorij6So4DBOLDrWZEsXq4oPGuwfl7rxdKWDXH8zwePeUhpzPqHkhyiblTHd8VLLU3wgFnDU NVHrnwyFb71K6o8mUBkFUcIZgFQl0gfGdzKVmgxy+ih6zzNU6hQNPqIaealUIhnViWrKAbKY mQYBLQAuyK1dhleaZTp1I2YAJ/1eMX3EjxoVeQOBojRN7T4DB2Oe23TbysUhS0ofLRy5J2QA PzWykCWetsbNgOD2f0SDE4bcL8piv70D+QfyLcJ2wKefu5o0rNC4pMSwevb0kuJGY+DSmQAB JAWnOvehnVfO362JBd6QkO85kUIOfkwGnaSUL0mIR6cD7NKYo3NtUaARihgx3VEgLcM4veRu jceDw7KRsmtdqLnVTG5VX7EvNJ2NON0lLfkprVPBpPEMLLxzuRMDt/sH/XhVGNY27m4HQFzl p+pcD+jY+YOzQGZb8u84o15LE8ciYu3DZNc/e2YhjS6y+1C+5K0tUnikctLi/WNwTrp00+0B UUuMYP+Od2rZ/MzKniglTLsJuHY49XFh2iyeCer/hLrtsOLe96zolZpdIxQcEr8xFVK/HxBa QAMqRo85yudLMMbOgpJJHzCa0Q2NTLA6X99V2EY9W3sX/7vRz6kdDiLVRrdprkc6+Juvy0JM 2GnAiBdZtN0FQa40XTI3hiQIol0B2ahl6Ohvt3scI5f0SMRroWQPC+eAqQJb+L1utUv/iAcS X2VVex6ZSTpv+RcSWYTVdgh1kqOQPm1CaKZH6OD0wEND4arkCwbaG/y8AE+DFJt7fkPZRp2e +zx7gOE8Y1sbhPaqzaSeJDcxFRdZmW536YQzneGzOdNucf/SbtpUJo+dE4sa9lSIHwsxt7Fu Is7VVYT5oK4Qva25ltdFDR8bHRfWqZXOeVlG5rhJ2xbadtS25MmwqB/SwscDMf+YZ3qh971F XbPg+fpNqBwayp9AXpZPA5HNNgo0L2+JQC/pIhZtWkmtN7z8l+fCn58LMDyfj9pj2MXcb2+q cYlHdpFz2/D+nd4MDrlYlUcroaRb9ETk7yKJLJjHyKoHmXIq3+bFlZL52tba4T/m0R8l6CS1 fj4f15fKCcceJ9DQSlSEHGLWx8xlplscPAuMa2A3na1sMJqGbXy4ihwgF9eM1nK72um2da6z U5t+ltF3I4pkacwrQk6Es6Ac7LsN1oSvDqN0mW6wo4lbGkuajtwjFDimnIJsq2WAwARB/Z0z yo42oluM6WFEnuIkLlnwR0sLSDqevSbc2MlqGJgOJEEN63cIQG13s7I7uiH+9HK1F6ieSYSI gqwfQyYjws9QceJ1XPCAsRLIHem837r4JU400zZo3EFFS05+dTUmxquHMLv4oK6GN8gYsc9p i5ZasoIlicYO2G9Ey5KDrfpk79BFy6naKauL0xkSpPkBIUdGfVl9gz3rCQFw0HYaGEV5TijJ 8tNMnVcF++hVqlLmrYX1SOys9ZBe82uLyPvFlvf9KsCETTkNhhn7GQsd7OLQd618W97ZFbTI VKsn78+7mbkB6Im4EesqR0laUl3XMvrJ5aMJzlqD2DzXiarCv1aZAapJWXt8QGdxyBx5mggI +7PF4yZEIwPyK0d8nBw9f8lo2hjrQK4Y1uk6ccXdccEvhPusE6xY+nawFW8OOU3H80j1Tvb3 jlvUN47QHIqd9CsaMHYCtcRBq8IUPb6J/cn7NeDmNO1cxT7jj4EM1jhkN6j5exMDIVbk9VsH RpvM+aSR9wG4M7ejMdErItHNekqNnHOBZKQ/KapX+ZAI4Vf8Q3gANHfhdOT+bM55KJEpXaa2 oVBh4nVZhxX5bZEnaSLIQ90AIHV/7ReNKtN2Tgre5dmHlfsKCMgLB9z7elNSonQYY80W8HBT avkLmBK/v1d7XscXBAoz2avramBq/J/bVBwb3n1emibMEgsq3crNMJjAdH8WqrI3rhxlQobp cf4fPwFkO9bcEVQi4pStzZShz9gU7Dq37SrcekzAf3/hiCmB6yK1//02qHvgRicMubo/XxQz S8CBM/29CgTdDSiCUJ5DoV8tka8iYImcZAgeWEZhDp8yPNfyOyTTjwkHuy93M0wvLNSycSlY OczZ7+eGWCrc9GLc1gPBOvvEczaWTMZrJmpqETPYFRoAoJ+IM+geW/dhCxNUNID0kGc4EtWg jY4vdogfQ6EIxzAUwe1uoVIlcZAOQ5jTLagoPQppFnKOjeW7RZTsmngHGPMLaFjb1k0O3ETk ysK6kLnUXhyVaMDokUikeRyKlWmOJjchuF/U0k2wPXWSVur3fHn6hW9/v7PuTos+7oo8mdfp lHAnJuyUl82GUMffzwWIvPeYJYFW+zC6RcQF9rgD3BVm5yq47gJvS0ZVDS2T/Bt8nqi3V1PV IdwUUkrMSuD1EHqAJaSGLJPIFBY6IA0O98sTnQdFVf32Sd2SIPJb4MkptnIQuKUv0HT+uOhI iWMEUEOzzwlZups+prSCPUmAA3F2+vjAoXiLCozu/7M+oIk6chfpfKV5SLGhr4gv4Twx/sCJ FeZrmnrQ7EWsm838T1KrZXgRKzOIXaWTm/pDX+XPzTkxywfi/SSWSSr5DWJ/YbfAToxVPb5e gVvCEEeB+NaxLXgix/INCsh2NjmAwwpUOM+i+dMneqTeEfsCeEeXH8wsL4zIOLQsrpT7XR0w CxO8QJrATWmyRJrCJOHGubD8/3TUlbv79asZGZVSkjCDO2wdYAOAEVicY2bYgAmnG5ZGZIUq 4LQClV0AN8JyqWCrIkDThwNHvP9TI72/hbUbe1Yh7BnEggdiwlV3vr5EFJ22qHA4pHoWGKam 2fHdU4DoukP9qIoNtK0R8ly8vOYbsmd6N1mqm3VFfyp3fqFVY/+q35FuIooH6TQ2rUJkWRC8 R+0h9NdPrhtWhGKx9rmpGS4Ql6tCe4/bMMBABv95KQUeMvbwRw3ijstyBRHpdU89PvgDESdA MJG2ii5SWVSD4qRqFQRPr+J/JvG6XKouzPAIqFdaQsRP7AwHvZwdq88p9HA8tZk9fy9qzTLb blbAEQnxcN2KmhtuA+AGAISHt2qY8roMNpfWFkRT9RGQwMPDmLPb69C8JslHJTnnlGYAfHuu 0kkIAeIGBkVzKqJehep+tVNPSvzpzQH6Y+9S3rVa2yTMIPQWbstQeU8ir4Fxasz7/n4wYole 75BqnFoLg1WVrxCOA5XoTQQxNvlG8qTIDCMn/VdLWoonNt9qj+CfyMWerXo+FlM5QMO6AUe6 pAsOyhNxwcPaoPFAtPbRbqjKXOzY/srSQ/DRb8I82Op/TNfeluE+ILTgQXlJAHFXvUQxjfTI JH68rLJ6g2sa1zaqkaDOAlqKWljN1wpgyrUcK/ordLxwDCeCFv1B/fK9R/sctErFfTewY1BE HKbRAJrpDzb/8VeCtx/ogNaT4v26fX64Pyhy4mhYhA1KQp8xBIetmke/nTXHKkhvLhAYhgz5 Ic4VgBPa2BWKGzU8HJYdkhj0XMObwrgYhdWup4klZ76kbwhMynggk0ej1e0A9wqDHGNaRtZq LdDoOImma3EvCjNTSs+ssHTlL9YX8ZWevTeHiV+vw1qA+FXRfT+/AqJbwWi6pEsw2gFrJe2T HuS4Wxg+gq9g9MSbIX6igGM3tl1cNGUW2GCu69gDajXcf/l7TUhXajQvA2lpULY5HbyZTJFn y6tuo3H9iFiZzCLVdbjpAPXrPJc+gtXkNmB4SlV3ILkCdzEvFPtp9R/8JJ6u5n1zEt6d4CWD T4UDvC/P/LDZERTYJ0CRRx4so1Q/wGyWSlQd9uTP5D/JIshXPMmY8SaOi65830r9qwS8TXA+ rDDsCjcdUIsMttua8nRRXM95Qc2LL87amZlNxbSAXVlCFj0pdrMsQrm/LTnILwis53U/7Fpw o4e00srF8CEnMwZPLobTACD01OQ9anu5mQVvFzuvA9QZgBYV1sPXqg3JBC9EqNX3PGi5cQlf Xv2ftMxM9jSLum4fhdndp/xQXUUCVV9xJybvYDsXhEU+tDJlkYM9FmZ+OaF8lR0Pwki36k1B dYywhxpHsJzwsljjMO3j/KpajcEICKzTnClULWNY4YnG4s+8wpMGTJkHjv5tArhBC1Ljqd4L QSVYhkXNny8gD3PqgCKDvOvQYGy8xLSHLaMzlk6lb3YcgZ03QVM64gS/yeG2H9kOxUyKZxf8 fsZt+xYdxfxe+4Zw2n+5qZkGOb2pBO6ccmd4F2ti7AOpSfIzY161vfOfbOA7sbo/jr7UM56L Ghk9Qd1VAuD06D4ZYVMe0z0ZofupeUEBh+NePUQ6KtGh9R+SvFu+1tXVwx66ZHCgFVxigWhf teoHfH7ozHGqS7hNrc1Hm0O5TV+I9XmHrb76zSusdKnAG27IvbhVK6Aa7q8dMVoW1isdVb7I 41YNriyLKK32csXGAX/GKNa0hqfeFX7TyENeRjxlB8hAAn2hvbBJvupwmSnnDvoZBjrDFnUy jKAFM11hMnjhPZBHcqNa0iIajgzhxWwWCjX7zwBMGLP8MS1nhgZ3eY+xXaEKqLHzorHefTZ1 XOH5rlwiqsXI396KR64TPuvpm5Maw3hKS1pkXBiDffceFqvk6YUwFYjpOZHieFTaNoXxlg3J SEd2yz2OJH0ubUfrVt29XKQhDaI+J99coIYM3jHdlPUM2gSQRFwjBcfac5H3Xh1Kzl6hKJtI LxlNzHpmOtE+0MvPDnv6LxMEeMKgphQvrZBzWL604nP9PiSn1Kw7PRYIxIKxkMf+sE6PLg0R NlwAXsx3RqO3sUUH9Y/qUH8pOeR0qY8ewk/+1qggTbSsAC51YvQb1cbdbPqxQ2HYBux10NTR 3Eep7tUKqT7a4wA9XBYcjoqyzffF8irpXuwKJM0JxXDnIg3TObozSfsbipV/dw+9vE981/jh q6OtkQNTE62QoY5cPTfA4ePSdhUhxX1EsBNcHav0ty5vCbbL9ALXvcLCR0iuVKBdwHNDwiD7 PnwCgdvN14CXuQtZkhck+7tdqz1IKdNlfcDF1JZAJiduSZZWkMsUhnkMrweYak7ODfQS/73y ENgdH3sk22wWw7xLqMS9gPTN3cmkqx6W8P6wz4qVz2Z7dzTYw6reChbSQZbtFS1rdpIPRba+ eiqLKe1nIKxpLokyNn/UE352LFhrzPUdL1hAjIiPVHxVwzYIqEGN/nvbcgm8fEpmmqLZBbi8 WuwcS2URv9ODkERZFuDp2+ZxMRbeAxvYSV/Jn1lOjhqdcifkZAKggaNZiqhdGkDfUxhbsaN0 SjMv1gJQNx932QujnBTljKNIOm1JJNArf+2Ue67ObQxuP1eaNZKNYFIgmaVN5Nb2u6UPyaAE 389TqxCJqRnbXM4k90koYx2cXT2xV/2D1rbP+zRnaobIVSEnVyp6pgTNikuOnwxLrDLrzMg7 D5kulKO85QcMRlJafd1fZTNIUNJiS8jwo7+zgKE4/2BajnFPSbZNy2DwcvNRgq+Ka49Y+ui0 w2AO+NqBTFtyX2z8XVYvnP27nXno6CNTG7SNK57k+HeVsCcmqpGdpa0L9b4+jzx85QiXPwI3 u1XwujSOh36eTJLHCkyaNlEsdUy9CHE/OlAmTsxswhlVQwZ4DsI2y5JmJDs4FQ31tj4EvXKj qc1diE7twDXY0mhlvQdmgt28gRhFjgUTJmyLSeQyvMMQfS05KLTXYWE/qkyyYg10JqYbmxPz H8Tk7iZX1jAtUIqGMvSFyaTdljwE7dgyzjYGhvq7sBjtFao3UXmGy8JPcevy4hY+raTdnwgC YOcHJdJ7764Ux5oB6It2NjiHrwVZH++7FoLsQZIKS8dpuxLxDSzIgdUACqK8BA8CmWcJm86Z hkReSFU39AHk4BL7XKxzPi5GfqeLeiCUu0ebMMinYXjK9iIyw5tv7V/EctQaUDVdg2xLz0sP N7+2E/D3XR4nXo54goe+/k/QTE1B/vtlryeTW6/n+FbjIGJxkLMgIz4jDlBPWvcxkTK9OwG6 Z+7lpht6jjlQXuk3iYqHEePF1pWU2aFEJBFkTF/SXa2Kxk9XPI7d4AktR426sxXmErRXoPdt mvbRNE+PvDuzVtvLzdKvEZfYoNHJh4nGZzuTtsFEY9mwgMuF//A6mCpkHyKKKJBHr5VXXd1O UTZQBA+ZrpainWrHVeyv2fy/mXJ7IzhltQPDNzwpW3vf66XDh15xUcbGs5ASzt89tRlJ+UI5 ISyzM2EI4/WPSpr80REvzwa6gGo5F+Wk/Wn0D2SyIWs7Ke3/6gQ3U38mmJv2MoYQOTasieG0 i6LwVcO89tn93P+nzl5vocqyJdcz4SMwvvmJNUy1Zymw/nKtOvtuhbqJfAsAXuBELS5IfJQl xQ7Cel+hkC8eXcHQToeA1JhNjPyitzNsiCq/Wgh9HrjHTb/y0tJUctglyeTejFY3X0hZs44u kZojgRhmcyVgmS97ijmSzMcq+mLtchPgGGkupcq1wyh8ho7OKdQGljfVJG5kjEQ6bbEi6Blx YHpGvQowrBDg7UrDrGp5Uf/UKC8rJ1YBNEFI4s16qaAPz61oOgNG1jPNiwTfDjxfsvq3w3tf emB2XYs9/Q/dhQlkvcsVU1PPBCO/AqYu5OOwplwjC5w2jiPOVhNpRo7Y+JesXGiusIowNNYM S6agH8VWTEkQz4o4lh2X6sUNUgLhWQQwBnOAMUrmoikxs3TxNcI4Ynq9sRVhyWzm215wl6yD +Fqp2F80UInPuMyWXAZNtfeyEKFvGHmYuGwHg7e/C5KC7Nikqu5wwLQzjQvXxCdax4QoBtFM oa5DTeGreiD1Fq5xWzOmjQr4hXauabiCzYEvOp3mqlsoPOyQCXEDlaSfRlBd4DIB0kjT/veS 1EzXBB3bKBdJzX+6moUXKj1jezfwd3W24a61YcMYUexCxyKdorxSLD+vN7UnG9QciUXTsUYV wKmDTfxH1MOQ6Qp71udKjLCjNfRK/xqou6YiqgQJ/kUIk90K8eL5ZDXCuST3i4RrobGyv+Nq U51lLmL1twpjjlu8ulDFOvbZxR3jsbIYBDrcq2Ct6ad15eMEkej/r2yBepQKHeeS2PC8aXYC 5aSRpOhmOv20I+JG6loJb77iTtpvaDjZ/mDiAfoKACm0v1DA9kFmJDJujAK3Mnqba9+ewgsA 9ZCjO7Emz9NoDCpvQkGkTCCVyKDvjCSe6ChAyHHMZeMP4VVLJLSNjJu/Dz6aTEAlZgspeBUC cikhX21CbBAl5lqf0leQOBWTczLL7UVb8YxqQIs+cYS6smzPP0ebag7QqEy3BU+PdSdLXagJ 0unnwOM7yvy+1sOEuelmOhCORlO3XvDIx2uhsaG2jZI/5eeyQnuMArYmiH46yca5SK59alYU xMGBuaFgmr3jnhApDPWme/b4kHjpdeV47hK4Sbm//smoLjCqpwIci2dbIDzOcEh1QlXiR1VA JLIXCSwLgaYpnO/UjoHTfIQpjzDMsc5aQ5pcs7jOz59yP65oXlg9RLUcZQXtBQEp8DmBIdv7 Rjbm6jI92+PqG94TP8IB/5fkXZVYQjVFA0pxg/RuCgE9/yLE8/N6MZOxfDyj0KbiN/WCi8Nk Ka5FnCVDfDHPr8x4lDwhW8pqB2FWPKXOolyPyAvjiB7VkflP72sUE3jF54JZ/cMZyds3B+2w KLH9ofh7zMsR5fEhkq4Wq/fgVjiGIjg90LEg8oFBJXbL7+891PMFtU0wOusDwzu77LFFVh2E tWwLuhffGjbfhvwbsjWyrQ2+TYPz59hqtiMQxYpgL+aIB2iOM4MdJjtGe3kGPeZCnyvLuHxX m9srAqsB2rA2EFEeloZeEjepQ0De+iI7s8rGhyrfaFVFJXBYDveKPVWrX4KnhIMMHYvR85bT o7MuuZ+fi8Cj/nGXCEjlzM4Rz0RLU5P3oMXtfJuPH7ldWclyAoHlleZwfHu4giFEChTUjWqG SgpntABuRRPjLs3bA4WIX9V6eZxwx9uC3+pD/Vicdl2kTL/iwLqVMwjGEtXQaybZaUhBBDST dg7xZv4jHojcYVuSSF0NunKXEea5ymbro4/QElwQVapPQ3pzEtGRdNU4TSJh9OiFaeOV1sq9 pjHUdqJiHm+7wBzRY2X9XhaU4U5qNrzwuZLLMIK99YckeT7MT6G7pu3WrG5VYi6M6+LTg4f6 EDFTjXznJsa020dfnh+mMcI8yF0sZAiO/XI7Bk1HEmBcGW0T9eJy2lOOiVKgEWrL3T6VPiVx ElWtV5fUJuCyKS83Uqc31aIGaF54BltDDWRUeesq4PWmZuMkF6XA5k2MAReeNzBhovXkEb4Y bSBp7qyNRCbTy5gwMZ7lMJlXiNLZ5MJjE8htdsqjqKsukVYNXezjLsMhuM8Pjfkvy1E5kmnw wssuUpPqXwJZ3bLuYxLCeiz7c+xUtAs1sb33HdK2lGREl4Ue8WYFBdvZlApl3ANorwgFPqMI nL26CUYJ4ly3mshNUNHHXAeaqJugXx2BJd3KEQqEQGSI1BNMjGWy+77QKkuKHO/8lMa1/wNw MXvk1AGWWxuWbseNmDEclYLcru8UQmMg9RQ+8WgjoI/++b35Stwc8i5IVM57MWpMJFAW2Ig4 bSd3Dk2vGAxCMF/aEQmKGb/ezxSlBFK9egvST592YLQF7H4PjnUGSgTTCqUK+F072zcF6JYV k3y0u66O9fqEXcugFMWi4d5jFKXoRj+77xMpZ4M75gDsNwi2nI9BPz5UlC1CegBKsSuD5v8m OgALvoopxhzxxUIFR3oSEGm9YEG9B+jI72K4QZVZcwQ0NbYHXsN/sbRJyrqxI4ieuB/lG2TT /9cdAL17VrMyZnSJkY+0l+7XMjJNlc4UKwqSWObpL1nFpO4LP/lWcWBV9r77FN2vNoAhkQSy IZfqBKVAnDcP9aoDceegV0F8zCf/SnQPO9C1/Kb/bSud3nTZIbldF/Z+icTdYTTKjZT9STlQ 84vHJoJbaNKF9u32GhSpasgmvcqRJqMmL9cqZxpp4QulHfUtDJa1/4Bv8Ey4WsPH6udR5K4B PEzFlEkooIhLeJV+aoFhp0JDr+oDavmDNkdPT6H7j2JawnQ+DGwegskoLBN0GnVdaTeE6E8a hpXWA36EdsHmwZ47J1ofdk70QgHe+dk6dWAccxHOZbZQj1YYrkWTXHD54QfbTq5jJ2LG54Rq raNYnP2qKZ4TvPhT+mW0eg2PGWTJ1wjnocEdpBdbn2ODu8VlpkdK4tCMz98vDYC+71iBKA7g zXEw2U4F1leBrAWkgExrmyqnkjrNuQApUiPJw+0e+Eyx1f6OPjEu7zAVqvY4HQARISsaAY01 FhIjjMJDf6rXSiq6d1+oc41/ZzGmBuE6Z+t2NXXgndFyw2LfEGHvwAxHM+MMpMBbFTLGfWsV lkGvmZLdEtCEt1J+8VbOV2B4p2QmB9BTliNeDiL1N22zQU+G2FaiRGQDF8ncrz9kBNMTtzha sDePcAdqreUOQYUakgvz3z2dIVBTlt1DbjWZie3ES24HZLCz0Yy5cOo5z4vRrndrp1nZex1R 6jOgjj2to//7q0JXxpN0vPDiSd8zH5Y7JPIG6rNYdiCIVcIiQ4FPzZGIBinRNyOfkOy1WOyz 3i8RbL5kQ1pvzwx+TAQbI9Oy1U6a2TkwJ1yCZlv5TS0Av7yALB+KGqjTH0HZ27oKLCLYmvOA j3qRdDuLX6RkAQc5wFSXYeo2Bh0rXWAFUJBaL9xhPrxxgWrfqysjdeDile2JNHw6md8+QS4f kibnEznOufmxyxNp4081pztUQFLrKQIHAQtaVVpB+koMir7uIKTN0OcWgdWs7UODssl4N/iD 0MZQGitosMiweMbfMsrGlVkpLRbxTslj8iBCD4wQTV5gsStONbvyFp6lCE0ujcqMer4/ZVkM WCAEEwrQYc6m8aTSkFEzKLMl6kNBGMtMvUt+3Nu14FSNAdom6C20YbwQB5n8tozRSdXE08IB +4+peSN8NULTlDAcB9zG6jCz3zU/EUVLi9F1Hj4iPbbJ/yQcE0dYTnRwROQl/62c9ikzsi7I zUhNZP2WryXlTNvtQCXB5g2bZ512GxYiZeUKzYROM2feTSemMRoNXDmXpeXTv8Zy3cWPQVzi TTHNeuBuMN4b8EybZgFdmKxmYt9G/o1ORARTWOY2zBANGjOGtoAc2v8IZQK9m5ByvQzhpvEc JrC2qx2DWVD1JNI4DMn9jFhbJzc4ouzvTRlzOlm/Vf++LwqGCoAprVExkjOUS/gkEi7ki+ld Oi1YZUDYb9B2MVpBA6GnHyS1v/dduL0rup6oQHQfTjxc7eeY2afzbZPIXVS0B5LHIchWimj+ 5jZD26lAfzX3rYf/3PxFA7i0hF4zWj4POYDOsEgakl6Gxx9ISAb6yontGroQrdPHxj25Lz53 tVzikQ82vVHoXVRkPWjcoPPUYOa+K5wn65ogz1CNUgjh4wGb/clxCmyfVa1mPzejSZcONuNJ wd4OamWRcOJlf/jpQMuaNSyIMR8sDysW5sh4E8+BNOEZmb8L42k81k4PPxBgd25rCxoF8Fdx GHRFo2xe5HIU2I2WptTNi2bKYGV8oEBS2uW6N4TUcW0ZnrBTlrX0zlNdvaiArAayMa7W13xt fN4c5XPMGGCmjdrnBzmsOibLazhmiRdkKpEjMjunCPI5OtBR1iinf3rV7zERKTwJHxAENhzO KVJdqvS758lJj/PqgaFRJCECMozqNBxb2uA97Cj4odizf2Neyx9FI+NWCc6nUcoKJisWvGDE 0BsL73leurlgj3nZwCPlRBGOD55Is1kWz5prr23QdODIF6e2ltpQ8iowQDDUlORMGrmorTa3 0ObjZCpUyalD/968i8tC1iCMq8p9N6WAWRPu7DWI9b6KJNrIjKzyAmAcTT6Y+iJMZM3LnA1n qcF6s+PcrEpK3arA1ce+oW4ZnE4ipD29/VHfRBhOjNisGJDlWAB0eraZMJBoCq1eMPYaw6ew CE2lgkIf1al5pzTy5HIeewDNRJrBwIcfUiz2oSnoWnNiqVR90GafLTHfdVec0kzLWunhL5/G h2Tb5958SdGIUrId1VUo69ZN6T780npRxZBslxjAO/1midDRUjFyZsQl9YHJnQPXVPxhnj0Q toqwvePQyYNGVv9stQuHwoHDsPR/1JZ6sx+nmu5AhhYSV/8io5vPh6B/vOGVUMtpCEt+F02g vx4GNNgwOxlme0qfsuDP+eECxphrrAlLpiLLsi4MdcEw1SeZVlIkhIxR6nnOQH3v+nkPKv3Y RcvUnJt8wxEfJtYYe4QOsy0VNwa9BbG8ND90jamMSbDiL27YESy4sOrXLn7jlU3fAKrPCZlD eZbuLhzyRBUyNKWmO2fcHdgzrP+UbdPrfpvnN3NalHzRA4OdGvGTl0oK0l81uge5mbzFpoMD 4J/crzOnA3tr2irTMj8y1ewWqFzlCgfXC7CCqChUA0j5a9SvLqqmI9kp6H3S1pcs800hBkBQ fqBEOv839d53ms6AiCBj/uB4b1ZKHB4pCO4KJCGQIoBXiMo2iFrS6j8svZy0QX5zKgrqkpHq c6137YZkntMum8NuU6bZniGEeKtVsnHNbEKeEL3wrCBRyEcVExSz878ECcQdsL5LFNv4gCFb BP9Oy5rZPZFK1uvo6XADa/yjKRLctj/oiimwWARjU2r+ePlPlGMB6Y859EiUfQWM2uZhN4wN oIJdWYdPVT1CXiIwDddCz4j4zjEv7QdwUzd/DPlMU/tpvq5cr9dXS60b18Xv3BRlMDziikNc 6lME6+19WSbhWjU/xAxLJQFr3oEto3DxzWHh8oqoNrSs3GQl+5HknuaTQp7Gzoxk89QzmeCf rmQ1BKn8oSwIuP7wtvbCldLW7ykOjHCxisw+dsuFhoYqjLhbhgfFy/CDv7K5Wn1KP7FheyP2 V5EGtikLJFq9JTUgs2LBo265pKI2pTQLxjHcBqZE3BhoG+cofCEL5mug7jnYTXUDCAwHV91k uzgDL4bEH41wdF5mDQqMBczGgOmFtEXM5AC71TmuIv4arXrffQ/EKmV9Xp42IzbuVqgXTVf8 77u3QWPUMi5uoTsnVRJQ82P33TmwQSLLPbwv0dvP3471+QUSFACrjsaTS17eXOQYAS/e08j9 B2+8MrGlbMXMfgLouiE3aO0Bj0TRd6by/K+Kh59fddXn8twN6fo1rFFt+pFIfjkb9QQRFf4c 9GL5OjY5B3Bkb65ZkFRzKJvv2kWlzD1q/zr4tD456tetWC2oDS39FPkbAqZDpCBfPv+Zg1eX wyIFD9RcXNp7hLiinDzzarUnY6BBpMJwrzmTT87jV4htWda9ZmWydCIOO7g1jKQ03P8JN5an a3rOLNBsNjGjA/TJZpJm2fyMCLKe5QHgFSs9InFvZDBt/JDRY24yPt7nDd8vkiy7OAmC+QWt SyrSRY3l6fq6rQouGFsDV/tnGfjwiUxlmmFTRTrFcf9NdbayyMskgUV4fnXe1OgIANkQ1VQB Z+0Zo6R8C3wpTbdQK9X+feTHR+vMwhlxIDwoiIV4ll4qAMjLbEsNPJ7SquMx54kcGh9MxtbZ Z/PoMS/A8aJIrD7967bmL9NaJpy+iFmHlmFkNJrrgEVNmMm0puoYEZkpBuFI2iVHXoACxXqn fVjdLPJRJU82rSdvzlKjn5fVAWmbOY5Uea4r6IbZ2QInUPUQ97zxsOyU1lmvCdWJjf7w/SGN IoCHKElXdYHdVjpvr2oFvv30PVl/aOy3aufP2WmFgHxFBXdNPITHgn80NoBrElJlax72Zkec Icwtha7uTSZoVE31Z5f1qGDNaGn0NSdb1F2HtOD40cy33/tMeZstFjyhJe6PONwrWaNfvtTE xdgPMGIqjhrB8X02Jp2FvvYKLw3ohyllvcT0+sUPt3sreILHl/xhJyakBm+u5ZsRyINb7oCr a0Q6qO4u7UHOjaXFDp5PxLVSrPx6FrGoHISsSnC3npzvfJ/sJ8IFCbCuBUzUD/BcpvlqD2IK JxOUMTf8FPn/cv0WxG63LYsbGpgoL787g+lWi2i6uabBZyvA/NSH+4jR1iLaIrMvqyykmVQc IGCC8ZRtuJFw1TwlYTQGDFjw8lW+m1DRFiJvXhq80LV/+KKcsBZ1h2tsrr/6pslp7ORvuLT9 0qIBVJSF7Q5Ml2YjtlzF72Nz8KyTx2ydvvzl0yht9U3cjbzBUPKWhU6/w9VyNuqUP3ZQQtFz XEpxtIy5H2mNDfOoSdPURIQ7NNNx09FU+Y/sSbOu5UQxxqwadQhyAZzwTcQWaPBl/5b9U80F D/KguQQVLT7GThHY1iiiY8WPZirIkpPzlpGto/2fSpnQIj0oW3Qw48Z0l1TAZbgTmz8UttCy TzdcxFM5qZKCI4WWuUZgRtjh4LGnT6B6xT6Z2Q+HTZvUSJ5jSEkYh9mgMKks4FR2AawsLfFh hD1SYMNuKAhx/b40tRVuma2TK11w6Th9nHuOpWEu143llvwUP9OTIf+XDtM0A3sy9i8y0RJV 3n6gAHxFTmDTSZP2TEikNAqowOh8wWeg5c4YiJxNqUGmuMEMjN3v8mkcU5sE0pwuE0rmwBtm KK2oD+jULD70ADr6w3QxakzMr2H4aGqXX2MlmBZoelVPyE9+E+uyDZrRoZ4WOO1+o0FWVaF1 p/l9FVDsbdesvlgDHtmdVJNTIrxRE+2Ce9bTqSuOCyqGKoXlHzOq1cmEnPMDU1Hd9AeHbh0h R9K24tuBqy2KTS+Lj1Hs4csyDiSubCjtQG7c00YYrUjzvx1p8JGumaymNgrLBcfOXHJRLRlv jY7ZuGh6JS8371eWM+fuuTYkOIvEHMGYFFkq9rkDOG9PXq+kbIoyVkkByD7ngbrCzD61G+bM GQo2cH6XV4P3XabyqMhbASSYsoMjwyKqSHldrLQm6HZCYWKZFs6qpLuCsa6kOKgmyMGyd8R3 qavityjheVWkq25tflY6jTyIz6aDH2sT2KpPg4/p+Q7HXUbN4tOkvaHjaqNAF5bJbfI+ZT4h JKerLjFK8GbA/QB1gP+w+fg1vnTTnXW0hcJ/n/2WAsi/awsLCJJqERbC3j+qAnkfUb3PEVmX xRz8q4NCL3Rw73y3+QpGr32zSVjPsg506E6i9114PiPohUFAsuDqgj3NBNLAeIrS+4vIQ0LP UEeTUiWR4AU1LOr/ZoEEKB/xg94+/4PGpGxPmsd2ckCFBMPBqHuqK2fxHNTVqUb3/aDKyaQt zN4y8Kp5AG3nanWwdfXnpCEaOBS8AKzz8aoiQEIBWPir920F4/mUrIQ4VqFUeZLJJ121rwMk rTNh7XD4XrUqwF/pdQW5HkGsjJdXJorGAzyu8hGqxsfesVOo8xgjBQ45i5WHFsSgXlM6a3uT FSWKuVuQVZpeLWTcnHhtSpS2VS5y+CUT1gLQEmt6tjRBNUwf1IzSZ2aB+idX4yDWkYF0wF4j oAmzPctl+hvOEFim7LWURdRd1IQXfLXmv6AiZvrp0Defk0ZoccLCSnHtA/8Nk1ffiO5eMEam X3Ou2VBRvZHvuEt/fPNc7n16f8OKmO+bRMKgixQQ0iMl9RsuXJepo8BgoDWZu7NuQtBrfq1Y 2s+bqhs2qkoHEaHnJDf7rkLbonZQjdXjcySUUL+n0k2KFEYTh0dn+zHoH08Of1/t3+ZaXdSq 3Ba5Y2/e32oCYLRCIb7aDAjK4Oipr1h1nZ/6fwu/gHrclnTpO3YCrimh0a1dGOisQi1amPte Q0DCOrUMUgPB0hfN5ppopgHRN6EeE7YqHIecKiXjllh/YQTSflCBCipSJx1/F27UIzisDFqA om8HCak8AFIMI//Mq/9zi+tEve/0wWZHIKb4Q5xqiw/5ppN4KZN06uUwzp4POdwqZPv5e32X 1Yu/xrw+TjofiqruJv8aF+PQF31O9/DAvbLTWcc+s8FPesVeQVj/YPcQ5uUaZKYTK5NWsNjd ubkoXsSj9xyMjma8XYFGWUUAJ4Nj81lZMhB8+RLthAkawyghUdYWXpCHyjkyN0iS1/jh9cmp LWPjqJ8MG9D9eS6Q2ylg7SxiTAoZdFg3VCzhYIJAZofH1SHKxqT6Bafd8i5bnqaTRsL82Vpx y0GA5PYUFsM5joPaTgnr4Z8VEk+1YSbVhCltt/Yb9DMguK+OS+jbE+oRiBi8paDjGIqpA4dN n7kwqaRjMrECD1YA9QQVx7uEt8fQ86TD9XqQDCJnKPw8g5WBoHTN2rpBv5kpAq5SH0IVY+tO bmESAxFVazovWoKEqi8Pygy/YW2Nfh9J6ffjMJ9S36RfBv2qf4LvCmHJl8ntCqfFMW91BcY9 nl/sx6qLJFIdxNXmv0ROboLHTWRndiXb/tpiGMNBqRyoWJ/FYEedzvqME0ITv1K2HxS6bfiQ YRwSlGbC8q7OKReYF6mlDus/mw4Jh/KjX4M1O2FhhMpSQBG6CmgS8NKXEk70d5La8tQ9mel/ VueVlLWiR8A6kUyZhOrbkLCrWBBb/U1gWv1XMueDSjFiEkQDAJ3Moelpm3t7/uD0dUYwfFuK CdmYKXa1sEvFAToeKADuEecgk/kTdZawVo3SLTyxuB/AJoFCY8MDNLAZlEIe4zOdLvu3nPTs 6GRJjYb6ey7dnpj88ASjgHrISkDhRKLglqfjZhsVBmVpHWZwsvW1zGVMRKtmd5FtbP0mdj65 rtEMhW8qX7+QHSIS58sr339uevU4NQMhqMvWzAN0ZAhkwj0p0o1DtpTBeQA5S35du5qjvEJl VNjHOOANHh7BBVj08tssMB8Sx3DAI9xa8A7i8IWwa/46QplNN+XqsM+dNCo8GaOn1Qkk1RxV FQ+A2VIzP6PyBKW6jKBPMhTsrTmPNqCAsl/MglPN27ZSwvtyup05QKW3kfJ5xPeVO5H01glR 0KuGMrV+npE86Wd4KnZC6pwNP4z2bemR9UBNA8hgUQ2HoJL1Ytg+so5gxI+90bsRaID/4OTT m2WYmX94MNgJZiHoGlmcuy8xpkNCd0MCfbSIv5c1M5I6OEw+CJyscYcVQoD6Tj03scAEUaZl EClfFYKtnX9amXxt+JWZ8snP+xLtuK+pkf566mYTS6LUFQddpAu7Io6rWB8+6kXLQKPRNb/+ ZWp/3HyrB+4iLGKn0p8bUIYzo7iHDIDdKbcsE/GhfzGwEogqvuAkM0Nl5pimhAYKr8pcjGNw abZvR7i/SQgeULGus8CaLhmxSBUtezvMS0ISx2dVihsTpvQXYQciJUHTp88qHteR9MklIDdD 0zjZdZZH345I5Ns+p7UI1ibgalva8WyeIkGGn5O2xEkDllm3GBbu3lsLMG1ZUBNLqEaHu1J9 Iglyx5t/JQ0qiticO0CrPD3kTOI6vhxrorVTgmhzIOEkv8zzxgZPjzc5Qi5ARywSJnc/Stcn mEb+QjH04QVx4M7iL7PTRxA+eMGqv0ZhK3jAo0MBNWXR1H+wajCfOk2jyHdxI6Jl8jWsGGjk jMBBxTppej1xoJxWUpbhhxIrGZQQWyfHSxHeRFjGy46tJLL43i9Uv/tCtJBBqeYO7aL+fN2r Vo64k3lXNKnUD+XBpnbqRgVjO1RgR0j0bk+YSc4x8jIoZfmMmiinVV+g4iWG9zfi7JkPhBuQ 3TaBZ9PYQNDmf5d3F6CNh4JFt+hyuLZOx2g13kMVI5TEDF1PsiqJoh7spW7enELFHvKdoAT4 l+lE5EWXNS2P0aOXKkDVSAkToDcOlNdSJTyUpVF6r8OBcyE8DtX4s8JeJ1zdU3fC5yQRIlur Xg75iMy43xlsFllVQtg4TLSk49fUvUeBGE+ijtcLuXLvjG88mwdxDY8u+ISCJWpIL7BkWisA SLxuj62delm31dAV5j0krKZRZ1oDt0EsPy82ZL3+ZYEGGhozSOuB8uUInI7t3G/6Rx89Yza3 BnsKWtNUPZ8IWULRlASgnPPt5jztl0OWKApgBdu2bdu2bdu2bdvu17Zt27Zt2/l7yCwntYCa 1r20JVWC4CpLRTes5bZxACzIUzzciivU52lecadK8JQgQFKfKmdIUhBr6i8ysVsgmCgjrJ+U 3RnnGvoSPL3jAnZTZepW7/hGHA+J9HmNYrQvtFib+2LmwyCjTKYkJDNwxwsL8qJUMP5Drd/g 1uIFu7fqqICrlI5SkSfYjemTS1GemUdf658K+Fkg+xuTlr8S606neoHdeuouhGlRK3uER2aq EK52N+ZSTSnHwH5GeGD7PruFh6/IyJHag8Mhtd4Hmu54Ys+u5k+VA+E249DCCsLBN7qbQX+m wGEfpYHwEbBGJEfqIhW9fcXrLhxd8XAXQiJcJPq9ZZhgzFjO4mpaNjWUZLtkSVgma3SZ3ASI oO7QACwaHIHyNfy8ZLAPsZv1nVoMhFFt+D316WpVsLLc3iMPKZIKEfmlbgDkHtfkeR5Mx39N w1m+2jVfua+S6x5UM0zdya7TtQlKigiLLcqWPaFq5Eic5wZEEJWTra+Px1xw7fU6+ylThmvP LooSwqX1rjJirI6Knn/zgZbfTIUbrW3XIqT5abSkbtuMmAjNPkXmrZmn4I6hVEH2nrwghnco 0SsZ6ENbM+/Sf/f8qvTnbGupIChR4A1X0qQwXCP0HOswdaU62q7spO67IdL8pQeaEGY/k5zZ 6cdtzD8VfBNdS9TYzzlN4zv59hph1ANgGO92fI5b/eg/vG4LgkpJarA+s/X5MOM5Z4Wt3SUf YBWom2wOVbk5uIhMpZL1PquqvRQfJ0DEy2jE1cH+qwTuiGgSHHLNRkEBNcvAf++tRorsi1E0 R5573qY03OWBiFL/jK/TAJiQi+mFZ3OlUizu+v8iSGFTQVrj8LgwSisB+ZdqWLfuZ7zrLebb 1NcmPmG6c8paT29e+Oi3RTDxGRcs3Juo6S0ZO90QTgj0fuM0TE2WENobAwBPHmzP7H2nLP0a hy2KsWKq5csQDqRbyfZPfaBuk0aphdNUtrh00f1pxSEBY34b4+BUkMtf4/yrj+aynCTy3JPm bp3Vf4FZBG3aAgj3K8TfTni1d/p3zTPVRv6ghRblOV1fgWEd4LHgo2WpQTNPFRcnJAACxWjZ 1UzxfY5wKA6MgjeWXZnl0RRdLtiWkDFoA3XHwWHzsXCevOQnVowEcnAkQyjkGDms/LKSSFm0 ixLS1PEwtww9+GYcPggtLCJ6OkzmB3roSW4PJLTqTmh5tRTzFHj5fb+RBQvIMmA8EjzX2cFQ MaXrcojPh0dAdplgYuBs3ywDLXoDGsp0IhllcqaE2fo6fxjmIEhO4YPZKdXdqA3by1gqVkVH Gf0bYs5LxALNnmDfpnru3ATtqaYCkol8XUN09mr86UdOT0bzLTPWS5pVpxFMGSjzJ5B1SYxR zgtnEOgbpi/a5dU80kLLkZR2PXIHirZ+JSyzuLabF5mhM/VCjZp8QpnmeDWelZUV6Asn1MQS jz2KLH07JSJi4aDXu0IZN12fSw2Sp0v+7pZdyJHi+eW0UoGKG3zT0yfqzFibObSk38d4ecVr AsD8l24PRUiraMOHPbRLua6qbpYCwdl6HmGVJxNNkR5jOXYN2o2j0G834lDTszGEgxqMxJb7 DaEA5F20NOdY+Md0hyq1tTVALDInRoRPNkJUkjfocVvjNnYeTdxTLe3nRBT+KVnknJcblYVO LogEXg7M3dhH6E07sAON7NWhlF6YvTrMpna/Qsw6jaLE4VjT0R7C8tNkrKOAUOJYL70c1xVM F9DAAWTPrDBNvQpgVMBaI3ekA+G5wi2jK0/IcnkPARmQIcp0tll9NI0AaCW7al61gkGJAfuN BNGd5i4ut/zy2fpbc3+HjqEyxCaap8PhshobuqsBV02g3Hg3YnDdJ5QLQxkyXWvNP/RBTTpw DbADxJJofb9DFO57H41N3hNCzHywHBFrFuBnSjcaddtskZFsuCnA22BLAXHDS4ZU3jlgFE9e Cr8y3eE63QIHbmKok1RNOlgfr6sOzcke/NrUBUyCA8QpD1R3rbed9LmYYoun81oMZyETcpSV yK1lWG9V1z6wpQ+Vi7wrPPupwlTBq0ExCwImv6UR5lCg3w/emMvVNHH2Go8OIh4V/SieMZVv CkfEdZo4/rhdUenbEL+8a6G2NhHPd16h8ZtsNB4209vhQW0+bj+8xmLqlrv7sKGtoa6E99rt iO0nThRed7MNsYnGYR0i8ezun8MIKoHuylPQaPOd5RYsM79zmwogPOvLV+SI/eNloC5sEyo1 H/V35Ehepjhn0lJ1P3uO9EDmuB7QFrDGBx1eNTM7Zatdy+vIZmGKQAsxdC+it9VFeF+WBJcZ XbcL9OtmrzVk9MDF55iuOt4H7TMSvaYyBBd3ae+vzsIn0n5hu3SLeHI8tIUBrRUa+F5yNraT Y9hPRfjr12mjjev9oWCqUNIucB5XSccvao6GwwphqQUxT2Jmr5irNBvlZ9c8SllLURDF02rj qvNG4jBXF0JUQo6pfEyHH4HI8EldLUjAIgygKSOYr996an7MA+X5SGaKlkC6WTYMtykNSn6L ltNRbWRX3cUfDHhkFfhu2wOsJkWCN+UufVNDkYNnJ9fXKUtb2FtgWh7aQ7LaEqOWxjPtP+Lm 9bIhXcVUIB+U0Lp0AgKmfQjOpcS3tvhmiszlfmU0MCUi82WMQE/IPHFx0wlwXk+IPB8/Y+q1 HAe/liF9anhoRzejgviSyqgOPfjdhf9GNu9J3PeVHE9UBwRixQHZjdr9ss5PL+gt7veORDJI y/0uV/KivWqo4dBqkGihn0/vu3/pRBqSv/R/gmwkUlpPghLP/WmDTKGYNjm0YvVGMkcVIf3Z arAgXocgantcpeiULL6iFjZJyMRSf5dQSHDyroJzN8e5jJ959OdmHgz+xX5Pyj1MobMYSfk8 sTnKGMDZGhRgF+KrZpePEyCGOdaWw2wWkNkduv/6mS+kIfMD4aSeZxQYV4L1SPyswF8NClMu M7DS35JFpTvQFswDOGig3RYgUemNfJQOECSk4yNtOs6O66o6iEnLLRhgsX7/V7uKOhXC2jCl DyOT8lMLdRAB9Alj2elLXjIIVimaVIVoS8HvZqAVFb9XUSFxenUs5gb6Fe2lWDzHJpbK4Piu MXqPvcaQcmJAe3Xgd7AhRMOuMm0xDS3M/7VKrytE51KolZz6pJjdZw39poL4pGAJAUju9MNB tpQOFq1w81mueWYvLRJfOsvwjCboRlSDcgWSSyf0JJiV3xdP+yb2oaDdwDv93r/8qKAJ4HV7 vBADtq9mMddpmzXZdD0cp54P8Iy7ZetV0ipz3HuuC9/PNpMHt3vaADcHL1SGayxFGZbLFbbz IrXb10Tp8012qncrjDRJgsb3oWhyyJ/7iHsLh8isVVOKNDb4g7St9jEU7kfPKRUzxWJZiESS qNasGXj8PkFhzr+/gsoejzv/3I9jC++d3kXNCzBNlt0ZEhBLjBN44lz3POata/8mlaa5mgR8 LFIZ/GGiQBC+S4nABXSD23/zatwodRfG9dwvndMQK4600AdlYQ5SwyoUBUspLAFTua4HyWLv sEZI9w/KysIvfUAner0KUNZvq15vkcqbYWpXylmBrFHjTMzx7BEEHg/ux0RzhcGWAv/hKJP7 FZTLilNru89dkoLVsxUiPPJ3Z6U8eF0eGhG/6jKBepT7r66TE66sJ/mgMxn8Y2XmNzqOeA5f kg4bgN5GFUbHeb2iFiNY7Ivqw2CbqXmvGp6hjwf0VNFDyNFvGV2MXizLYaCv+B3LrSN5UWUc 2OFnSKGhxCF7nbxzWpel2i5XPsoUMXjnua9J5JU6ISuZEHnSoIIr5L74+Y5T44QpuN9kVjLC ZwVsV1wdQk8ISYPM5Y8nyHby4qdgSZg90DdwFhl8bwvc+ORE2hjj2gbvDiPYBU6X0Guw7mKv iX9mbiSeoVRDY4DmmlqDkxOApEGAO/2E4nVkMV8dY3GKv51opPcyxEAvf6k1Plnmyf2h6kXY CzyWm0XoJUBYbIBMMJo3r7WCcGRgsdS1BQgxR3sDrQxrFu2aTy4ctWK09+SzOeqMyJk1tpPn qcTcKdY/nDOMM+AuuhG4eoB4/dnLBdi0VgwxwE3E/dzdHDYjiFfCmFbX9gwYVuNzNf9TyQTM BP7UwF6G7KQejD7SVOgKgXYPXhRQkl/yw4zfUyZ/OvD6r6/b3mO+w/gL2DOFpzNk4m8KzPZI TqlII4mYdzdzmyLI8I0VlI4EI1wXHOOqMLPnLpN7ok6AdXaq93GL/XS4nHyCpASDAMW2tmtx od21yUlJDf7COy6zICs/KI0RdVlTJ4yEhbg7/k6RpUJM3lHoVmkk1W0ftXTCPPwvzwz6X3xS oNL35ELJqHIBWbYNJUK2tyXgx75O2uuTBag+ACGmbASlYQx0iBEYum17FH9oCNkocdqAK8Fy fPv8hZriAq69mrCBVBPhCX9j2So3M24zWPRFLkOcXsXzQViRYKCisCvobIQK3VF2oWFxMu5T 7kEA1D4UDn1qp5KIWMqDdIv/eyW6WEjdEAHQnR6zclZPI1rAcIBDiG54ooK6Oa+gDH6YFbEC DBpi0G1NN4dOv0vxghRO2Si9O3jpnagzVOHw4XTYeXMymw82UefRwUsNt+r4ovPLG7cxzjxi VVfqKexsBCoSN+AKYVI6ikTwFPCCjSBgvUzPZgbdglqLS03OCEm88vZadOGuMHZBxg7SjD4C 52cOE0vNOzjIpLP/t3wvvcOvWgMXJX+VSuiiUTFFt5SQpHUhEEIEZnJmJHBcDxAmtxaLJ/qZ 6xjJYQkXOWJuMbroVm5cN43V9Qgpy60yq82R2oROt77xoem/r9btBTm1H/0ZWQZ9Z7yZK6T9 5qnJ952Cgn8cS6HZ4/Gr81mKyDAjVXmDC3/LrpDnl0qeB6xTDyMHkdN/jqKuLOGEr7CmXn1R IyyGSq4LL26O29zUL5wCyZiSazn+QltUEV74H8VOqHc2RrGi6sqK2XC/wckuLkzYOwMmLBmp 5byAyf7xJ7ZHxQKjGa+ng9lusPXDaYcWl2Pab+ulF7iru8jX7zfpVd/6bmwNXAisqMKZjx4W lzzEI+4DA1s0o6JcP+nxMbQ1efDF85xT2FIQT0BTs4lKbkdWs+xCnte98ijncIJz4+c6tRLP 5rzQqF1CE1bURQX2eOypz9t9GYgXe08vXR217LZWN+XFcOMQKJPLivLiIyY66COiBSeJ5ZAM GcPZQCsp4noExdbE8KopNcpz2LC/4l5yy0TvsD0ifynSJE/qWZCXlBh3AnuyChMlN46LBJsO Oc22QFy7DT0JebWAMcL6YejUnPUo2qSGewGagx4VvxikdTKZ/8yiCIptJuzR/xxYuX+aidje lc7D91gnzGfGDLQHcXtUTDxeigquHDutccprKWOXHpbSj5ezyOSifoeUDXow51bfZYOFXxFQ TBoj5xzOJO/TWHyzPvL3NsdaubXyRDmPzIy+KUNxy5v+MbfJ2P7T4HDkC7VCLmWuEz4deFwu 9SSV2AmI4rKQt3+ZoDtATHmrCAR7g01DQPZhgefmwxz33NrrPGaTBBhT2cDZq7zQCDEP0Xp6 Qb3aUg+z78THzDpSkHyVCkvk8sqVec7Odnd9wPcvyIKXTVQAJ0u0rKKbciqVhd+gvDcvkfqZ PUQBTpNSzCo1oq36gNCYK05ffztAPojHbkKVk21zc7I4QlW0O7PnshlxknFF/YnO1HIH7QJw ptlPxGxqJe1C/0w2XbWMh0zQB2vrUBaX4WA5Cs5MQMozBBr62BRwYlSo5SuG9vHsy33XUuJ2 p4RJSmmfOdu/R42rMn8zdH9hgg9DmORChuBZJwLkEXSmDZLVuIS0FC2pztvo3ZxRPZek65T6 V+C7ILYEO/nRtRFtWwind+AEJENeZ5rwHjHGJxBkILaVmv82CZgN0xPKnuLDBXYQ5ReJXtSU /E0+MjR5I5AW6VMluO2P+BSSs7MumhXWRNmCpLFZqoAxNwPMLYF2Fwsw3rUO+fy7mNd8hEt7 NaEByXI+zH2ZOZ2ZmhNV5kPpQPxPQlOoROdY6qQ19KOrru0KfSO6BwHxCqLVxEA5UhcIRgSC yPXf8DSefU5dqdcKeSAZDSfRWKxEvpibWr3e9dst5qlqMd3geokVjXVByDOBuJmO2yuH/ySz 6z0zFay6zIbrzOfONBoDAtpx4+pxPG8//HsOOlvYcA4b+NwrXTBhP9w3N4F9Qq8JJq7TpKYK I3po3gwjfeBLwa43DB+NV8j0PZg0AYDbU/FRIJJ4V3UidDPr2YVbXpxJcQhzdkK/AY1wTsND ERsvmT5RascHffvPyQnc2M/5fScKLaOA0JQJShqv9Shu2iQOOKX7TKWbbMsVOt9DYeMAv6+Z T4cN1seGsuG1bZRO82EAHrfBrsmzSgoQXRxv8gdjb1e6tYCrG6xwC4WX+7iQiHB8+SDV2maK PFhKeY51tbd/HkVPNefcavM2LGtIvQAyFT2kORoiKXcbli6RkpcycbI6JXKY0G7mWmOzS4zE uBpWPMsvM8DMoBqyEJ/2FEkM4laj94bc9ln0zmqc4TnbzAkV1I1BGD9+6apJK7ENjdEcEwiA BHsfLwjFbaXcVlaPD6kBtx8+ifmNBgAKtmr6Y8hJZFwfffn7J+SD/M15rXKzAuoO3mzRdl9P n4q+X3o1/qVEmBjWPXotAoJrC91fhF2AivsoPFXsmRPIF4mgFYFHGRYfyyy+XbFMHVbIW82c dVKtZIxg3GyMtIhwE5zxDYVI8GQe8Q5DHVmYXy6cTwaM8KOKmgpEqqNKVtpjQw26eeN2z87s K29Rd6BKP8TpK/XOmOEidNuGR6zb+1GqR0i0PO5DNTBLCKeF5zcaJcHv9oWNzruneMuQQntC PoUY1YW3tDXicIoEOSNPSTmrqDlevTGYuzX7eUeSIJeKGIaTrD8lSIV/oWo4RAKrhR/RnX2g Nu1ce7U+tXkucyr3Mplk3tq5/FkyBAhkNtaQtdM4ZiuEDRhXdUtPMJVP0ywotMHFMHhBQ9mh m3xLsoo+eVX+cXbCO4yFv0t1KbFuUZP3Hz6ixDBWwYqScjj0nsIr3hSFAz1/Zgs1kQ2ArLdo v8bdK1WBOYqkQKGy7W6xRyQXIY+q3lYzYXZMlQpBQ4iCC+DP7EilgksHnj4+Bl9L3jxwbWzq xxiwWcKNnqygSd/wHSGG5RI1qTH0MXrkm3GEsx3ETpJ3KR43udZlaQp1MGVkpm/9In6mLYg4 zTkeo+GshY9zU2zEiWnPFTJVYHsL59B7RM9cpr8vyQJBvM4tBVh2cYV9EB5fGhXZmx2hzmg7 qUc3J4Kb0tVjcFdSyI35MvS+RW8mG2kUiQ1bA3858LAg2pI7Gnl0Q/9GHCmIe66Nofve2VX2 mXwTBpNSli8OAzOV0ehukJwnui4L9Tq+PldjHHNDZoSIHlsJu3E3mmdc4zb1zlZMeMpvj8aR qZ+l9ARaF17frKtownQBKbZTUAJwRXt7AW48w1w0/cQIqZOUZyPfFVLtpPPwcbw/1ZIO7FVg 6HH3fMHxgOz1fgRObdk7P08F9aIL20JQciqUC01PLlNjRSW4dA2QyARYsQUxRnRXwL4TJh+H Abi+PjPai/ZvSXC7qszO61sbGzxZJUTyVtjYpgNrXqGl1qUwS4Otvxs1ejZwbPDAuSXjgbY0 kOUyFsAxqh5D6pWIXFKc3H6186Beooixq7lYUkCcpA5enxtjeitcHNIVihVb4ShKQo0dcdU9 38XWCkbA2N8D9J1kJI5E7CzGUSTvZpRLJsL4yUpQEkugZfekwvlNqaAwmBoevtuIC0LIOwyX 1acwRBacmpAjv0AIGOgLi8qYSMrQUiTR4EJoO7S40I4jcDpOev/5gtbwsNZM0+bgbtNdq/B8 rDKlZhtOIgOCnQgwQ/i8gRc6M0DDszKPYbuKJydXlDo9UHSi1ThY4QeiXgu5neHUb/nP+0Vo 9QJ3MpxRQs4NHLIQ4kl8ewpcBcjQcr6EYmtyiskrAgGe+DbTDu/B1hh6JXvaUJmjo4Fr7piw 5vEs6EAQWTxYv9nnyoEfN2Xc5xNSbaXywjqUTYM9jQgRhLzHykr4xWISgHZwjXIgDQS1QgpI 7BJvy9Qb2wxNHPjnrTxJlR5m8jbnFER1NLGdvH1b8dyzsxcjHakNJXhKOm7ogenJJnX4bpaL pkV74LWfPMxlPALx8ATGVbRr7U6CK1uBoOzIHFtz78Mp5PEoMrY8rCuNzHjMLK9/25SFkXJS eGryWzl52tJ2p45sXZ2dOd563nMp8YGqmbfdqmMPQ1GqII+U+4fL3t/0QPmCYFsJmORQSSG6 6aHG4ZoqmF2qEh35mCuP493TSkiA+ZHder7X7PeBZUGh1pUxBjCrqZHViG0qnqKPBYgrXsXf odh8HU5ZAoQ2uip2T5iNWKZuuouMeoxjJFUavdvGYgwyOfGNuzqP0WegRcz857QHUCHFPcMk DaDT6smbOvXnwfB8YuuLcAndCQqpL0eEiiAo9U/L7qHsxlHu1bJTOeiPHs513+nQCY8UPPrh mcW7zPNKC2rA7YbDDJjN8l41F8ncyqAWbqBSt6iAZLPs+w/j0TBIeRS0avdOm8hd2wf+94zi Qlhhznrtbi4seUY9/SVELxQoE8hhTWMv9MlzWwBPzqntDYOZtMRmAyuNuFyYHoS0+/Y/ggRa LUjGWwjawj20W56NPRAP4Hi0FpKea8jNxxnvOadgZYlIor7IlfmuZrLWiKwn7xcSqeZqseTx uVl4/xWlVerxaI04rPJ+rNObxex5hctyWzwevIXFVS5CJa1VfeefEQ9lcV/Kfalmf/3HHjuZ 6Vqk7sRuy45MSfiXHmjJr3qWvHzd17kUDCY4WmaSicKnQtq+fXrguGJIeUE2MK2p73oh111A xotuNDlSdJ0ayuuAXEzXE82Si70+bzWg4LDrqm2d8x+bOD263BmEAtS4lQhl+yjxl+k5Rz+Z sGgu39Ake2jzHVNPBNFD/MvmEVk9JCwduwlZPE3ROrlJ5rMUwEiwUuinoxTM6b90lp8x3qus OdJ7/r8YU31Q09yCOosNW1MtFNHly5EioL9If/E9pNZVKelR0dHUc4ybVcImA43RfQ+ADgQG WFEcCN0Ptcp/XsgO1hHYIf/CCSj6pjcz/N8iGhC6DaNnEBhjcFVxXNvdTLuNwS8XnaA3zPNk sH4b+xsm/v66/9uxDbiXJQHcIG5Yntkm150gUbCtVPIaXHOj2mSG8qNriKN6ta5tC+hjfhbb ehyIE6/5HxRoHIHh271twu4IYg4K+XXGXFxBPVdGmbu04p/DwHUeLu8IWaDcZnFF32QNqqmO VppYUN1wCuwHpSXqzf0b4b50hhZ0fQkfOul/V4j+KEfWu1vTOxP80w8voojRyqIChrMdZlOm lg7CQM4YNLXRY4y+CSO0+FJUIiTWvOHKJenCji7RaxR0SLoHEPkGmnp6jvmH6wpy6ZptVEZX OyYdacC+HdBCo4gUba7Jep4uNljFZVo/s8hn0yY2lvLyx43CfTu+n7Wp6I+Cq+MKUKI9pSMu NtwmUeb0GfMU1uwm/aUtIWLikQ3f6NnQT7S45txy5G3i60mNnsx6HIMZ8zQzxg44PJKQbbp1 4+094qx6fxfKDlhD8OvXvH7+JVuciUEsiqYwoRQ7ayS+7cgR2yQsmm0C4vkAbNZEEVbKoNj3 VQRZc9t0wn6LCizc5uhWqxY1PxEK9Vp3zIXRAwisxpTR4KcwVHU78zppksI4AYNxWLjQkRsn dlvVFzhlYaKur6Bf4ZRU2YnFjd1QxqasaBrQHzPf+pri+rs/EFqVyScfjYbTqsilCNu0FyWG fPehTZhZi4QpneeBcwK/g3F4l42mxXmMArc6QhR+MnrxDasXXH7jfqpUO+FrhaGj6EmNkKJk eXnDTrKZjSZEtztQEeriBTejjIxCY/CI6FhdV5VoLyQddVFbY3X4wVRUt8oW0PcCwbB6DWS/ TKbIryocrViZRJU5hT+bxd5yP8+CjgiR+pvXGhonJcM0RD8fqPz68H1bvT0CmKAIjPDQ3ttg UUG0Jus2ZNXDPkNkSx7G21FdG4cNWzfP38vONaJFcX9cxGid72Fj6fHhNFAqmFxS/gFEhUYV ISUbj/8dTQO1jcPzWAMWfZZF0mk/Anx/Wu1KbiSJlubFD9ik5aHFDJDFJ2SZjBae9XgUJy9F KhUMYZZQ5b7A1agUFkIu1MC8L2pR1pOixa6TX5NjTE3K3TYRAUHRFnZaGW/6Jma76XPWxxDu Rk3gdyxxc0MmOHuEJivFuBwcrB0XbaCy/spR/1xmUZ1S4X6YFKlqfNl55ZOQJVWzWJ/8YmRO PnrLgl30jJgwenY8V8AV+dRoBmrYmFsfbcfqF1a9Uyd+XOYhWrYspf2/BJVYWJSU7G7WJx7l Jik3LkRkMU6mDYFCYrNMzZ1973HSfqtCAq/MxQnpHExOpZ90QLLyhLpYKvaUSt8znnwhp1nf ZQzGR7xoPsn766Co1PYtCKDCTZT3ZVbSwXSQkJoeaJQPagq2nT5aodD8VlMoosoBSLmSBK1Z qhRs05UGmjQkScWD1oRURP2IngD4EaEIeXLSXI/iF3u7Mo4+B6ouGhhhI7vm8zHdQ99cx9Gu jgOioWBwf0cTRekCrdoSF5HXeAUlXefgFyIZ5eL+Ro0LbHGX5KN30UJaRa0NeCHkbjVrWL3S B6sfltDt7KZCrtYPSBiSQvvyEigP25a6LHbqQXMd5DvADKaBKUAjotxuHSFvtferojKCgjZn kEEctjJ7IEX31nOJgRId+GKIh7/MUj8KXpXpDQhZhs5w0/bhcOoXm3tTbOioWHzLb4sXKuxw /JFMao6XOxmr+hnDRVwM2QSqMoJSspjhtpPdMfFMxBlDqHzD6EOKA7mKJsMUDySILEkdZJWE Czc0MqftUtG9ykh/9wtrVUAPUK/gV/ztpIhj40uf40XHQbB/eBAd3hJ4z4VOkuEpR3YbIz4H 7HiBtHpnOJtgzlSOwHJTnpLvup1JvTy2h0GAYY2M7YY2VoXBxRxsKdYU7SedLkSPBR6lPk5n SCQvMXHvEPXJmrWYvCYjxwVF7ktLW9F7SxYyw0qJxkdvfkPOWJCpu1l5tl9JlZV6sP+opPAD Sg39JTrrHzRKbn5cL15pqXnf3DH8jPuMSoXAEGPe7xGveppxWmiRdUgdX0UgfdrQWLMTERfk AYpw5JLB0G7FGXehP34PfPmNOet5yJLv5BW+4HeUJqiTGiMv8c8N++serZiIWPG6dwyU2GTJ dQqmf5MigHpo4kmXYxH3bHP9KrlJ5hM9+N72uwUrqdPKJYWvt/yfXrtXJCl0jC0g4Ky7ZFD2 LSQh8MxXupVf4x/7MQ+BYXK59WfEtvUAv/Uk18mUbAKjhARKIWC/brs6Bt7tJlIn56EaML1u Sdi83D+25QLLpMiS8pVDIc4DxElJhFpKD+js78A2Ldadk8JvbxBCKpGxjWOjYJ+eH0ut1YvL hHtZJBTswwCDVIjY6viIqFt6xGPUQ4UQeBbBxjvvJ60gonBN5PtI/WKgNQWZIfNxarKnUapv K7uTFvjQA2beeFQ9ZobbrISnQ9seFF4yf+6jQ2Ey8caRTVkPTZmLMmK0Pc7sU7+q3Gup28Ds 4fvlupCNN+xrHlT15KaAvPfk8n6zxXpFLsiyXz0juO1EjWO7S7xOPbiLXK5qDyUOmRDAGp6/ K0wL3eSbumiwcSJ7iHLPxYsuyZlyL2dXg3FR3p2HzGjao8jW3vXLXIa+HZrzGE67jqqSAC9S 4BW0w1rNX5oYyEdpt/awmYLrBr9HyDpg2NCM5/2K1XvrMatMf0elaHpqSjomgKaU/BEAcaa4 SueoluR5AD2GvjgaDsWMjXnysLu4gydZQVjFFb9XJhPTxlhtkfaMnka+u4ts6U3xmxEkNrme EJHrQV42auZ5A4u4et4FMckIJKqzS+jxzvNdQcfw8/LDP6zUxIuvRQRN5K6XoIpPr5HGQerp mKdlBLmT+iYvnk9Hff4tvtle9DOHndiXBQ36ozAgZo2T3gv/l1QYv5KlUwLafStm2NZzbO5J mTVuag69ERj4dlJRv8z5ll+TswUs0Hb1hqCDklwiZTuQf6BKf5nTYMOYkduewYonER34lMtb DMIgVbXjPBvkrE0l0gNx4gcdo9iuUHiCSHzLXWDULX+rQ7npql0OiNIKfHyi3V3NVM20cxk4 Z479AJ8d6bpCZYWlHxc9LYS15vMS2MJEcDlyhGY9J/pI5CG2f96c3z+L80MbFJtOFxeiDgAn Z/XCsE8UhZUKnUFHn8by8bTcBy4esoSTydHVCadsoqTHgI6kdE+QCsdqvoJ3Aef5/n1UWZrz hFz2bAY+liCA4brHJOkKfWuwIF+2fBd64QiA/dhO8qiBQipMAVqkPJ45M4bSTAqZ97dZBXvK 2frmunlr2S9+D3VWi+enjzTvylOWcLK51iJKQh1x5A+oENAQm4/+J5+bnfSvrgVrNedyXUZr FQQGann78qnHGgcGbEIsIv6NVpyqjFd6zuhktW9CyHM5KDvfTuVzVb/2ppwyo70ROxBlJQ1j d9OVWO88RBKhBcRgKHnlvXi1hDsEnMaRtUukHL+ed4Ov7uU8Ts5n5H5v4kimJ0JYSQJKY+sK JMxVXpNB3GIBGC7wifrumgJBcw8Dc8xI66/Pfhz4eYJMrZbNUJ+uZ0pTRyAzW5hfZIVAWvSW DsPZ/iunTbSe4CJ3LRO2HExZ5Jdkt3HpAuTleQLWxwLv6aaxXWvjFLxowZ/g9GdwWbRAFZ2r XOEvMvKww3ksCvdR9IZkn5ilyIq1A2dtPklq+BxlLaau5PpNztVz2YkwLQV5AO3ZG8LNWX0q LG2qDc8XDPtaaenBCQu6+gSGSGrlG8iPfNtzvW6W5a+W2RAa1YCAz1oOzQwSf2atMldtmDAu 82ouR3qPv2hAkOAzpnUR0tLzS4VSjZBFRY81LIC15Zvqf3H7u2hAZWWd9tdffB/e26c3eDwd 877ugDhWxnvbreKnSJf8gYOJx6R7nA9KP4Po2GCs2q/e9ZtI1uGxjjhGG2xi7QRVU9IBiHo5 Zy4L0s6hfn/WMAoJvxQSwYnLtjdBFa3sAypzvq3JCnyRtnwwS5Gbq9LBjTSS1OtvmxS7U8sm /MWr3O6B5eYlE9DU71N9FFjLwWgiZdb9s/9UW1GZpTxaBSQ3yOlSBjKWj+UR0Jh8gRGK+UG2 /zGztQTORZY49g8DGrNRx5Rr+/bIjF+FCcL16/cXz/lHS4/FI6SZeySTno1p1CLUrwpwQ8l/ GEr+TpYS7p+Xg4m2/qTkuf3cqPCPhuP4sp9TtvOSlLpDPlKz8mNSanp8YiGyYAm32u/6vQea SnAyyEy1qpCMn14+PsdLcAwRb11mQOK8niBnM9wtN1lKkQ0bQiKkXV9wmXmoH9KoDeGN35Rk L3MybosdMxdUFkxiJxWIKgOL9Mxr8L/ZomgZ3PN98sOu/AG3FH4FuO8jRkOnA6EMxft54r9m s6fyyX25PUZzbiMyeUh4Pdt5m6W2xwGSkUQ5fO/3XXG2e+jTmi4CQ8SENENkAJUxPXIatsKS I+d+v4fCOuDz1sY7XNZlDIxMoR2L7TtlTAHTnQZTcmWjDyAB7290JylqEGV5DbtejIi1j1qg 9wcB0mlUrcBKoGzsTDslU1hRR+NvjTG2YOhz/iQDmHmFOPRcOIhGW/pcQT4RDURBGGMuAwI4 IGJOxVKEvyUVftiXYmHzi1g4HDknPxeeu4498obXNbdX0WNt7EXDWBVSHloA1aRbHiOOgf7D FeeHhv3sTRSK221QPDqTwEKR8sS9oQFNenjUkLdWxbSOelA+i9aebb9ep8DVD2RF9UoMFsWH CQCoM9fKzdQ36NspH7X9IkgzDQ0MabKFMol5OhFo/SpMOLw3FVwAh4HnSRMgDGdyODpk1xig c78njVNYRDnC4kH7HkBzQrhts0X7LdMnc/+7JVYLQOj6TczLfL1wfu5+ScRUKQuvDneeeWWF TgBBjQV5+iZ+KPD/ks0/CxnmUzUTP+aucXG8mcXJkTK8Bp8+vp4UdEsLqqtkiDNsnwD52gFt o6znnwq8nng4oKdNqYYxHVtLas77S0QJjFsjqEPoRGxV7c5kmI6r3wMk0q64Zl7ASRcD1Uj1 gkB8QkblIwN8y54QPGNLcoKnx/os9ttg3wfKfOSIFtmVqWvaPBrKxmOMJXgP9gjhN//IIS7y bzc4amZ8gHB6xIeOlO2XLFaJQM/JIrwWXKO8mGGQ7pOeCR3EbbTu5VsVuwylViuNJMeO4NuJ oPKyAsMdIz+dHmgh+NhkG0iE6qdVSCTUGeqvQWPCihXU5RrpIttUd5UeRrho30p5ylcCXoln 5OtBE8tqN5hobYmBvx49pVs4cLZDaARa7ZMcMCZvbGXbrMBF23BMWHAST7n4hUjh4mUxtShU AjKHY+HCMVbS4OI46d17edZGMmfJn/rz1TMqiGxH/gOJRc4cozl6rDkQECBGKSjeH2eAF/JI wz01rbopXqlx1qJyk9Qpi+ndptTGl1hf++wSnKsZhzs/SNwXb1t/TGFVA4gNJ5SuVMHTlWEh hkUW5kRbBlG92fmylTqP5rdUrOp+ocQSXviJGY2j4Fbke0ly/15FhZJlgD+a93SEd0mY69M/ xxVSNJaYZPdd7FUz3WRN9y/f3OrysG6bw8goJjaEg3Oe0LYCJ5oYuzkFmRwivJx2RDZo1ls0 nZC9XM7UGNlSYKkAG73XkXrc2BM7OGkavXMeURyqXWAqzk4IZGLtZq0PIAZS+Yx8/j1ecjNr aNbimXu8F9lTM+UnneXtSX+uiY8COEpYeWU872BW+hDP6+KvcPT8nQATzP30drm/0Ocz/7ey W39Tkhta4zM1BM30ZCwoWKoYahJXmGQvKt5gYUE06WuLy5mCtdmc4jMR3DHwrwxuJtmlOhPI dsrnvNzMmtqCC8xVAWrOykakW3QmT7PoDDDtpo1VJKeuN8ByLKfQBWss9x+QSjEj216cqo30 MLU9JvyvYLYZdHlt6eCVdS/WOsU2wozJjv/UekTgoBHRrvL4viPdM40f8zBq7PlJleGzCtuQ wmfNmqWdhsOg0itXHINDoCIvRx3XP1jrLD4VMAzOA/DuZtzOPD1jQo+Ku2YrxmXTEYxhTME4 c5XJp/ms5tMhSgvvMzQ6JeCYxWZ6mIc1MRTZXKR2EEUOWqruuN4Xzc3WbdkUEJA6SglqquiY Q/npEly6nTGa84b9PG6685jCWiG0ylLU57ksLuS6GTXnSx/EDYaVASXm3JsO3W1lbLe06E9i 2i8ls62ZmEWHRtHFpb+aaE29BZIe7adNzuZQZcgHxv559yqjt71agzL1E14wh0e4ocwxfQcp ZGb5+1uNgJIKG66Djs9CWValivYZRJOs619Oa7No0ZngKuR0y6jb3D2VCHAMWyTLHAP8FwR0 AxOEn7oIMPEtEdZ3rzTplz8z4l2qXloojxnAJ6vKaPNBl/S6V94nColHqZdL2b1GqV24ZeDS pZGizu79GqH1X0Jchv8lUP8v+D8hMLYxNXRysbc1dLKG+h9kKExeZW5kc3RyZWFtCmVuZG9i ago2MCAwIG9iagovR1dMRk5NK05pbWJ1c1JvbU5vOUwtUmVndQplbmRvYmoKNiAwIG9iaiA8 PAovVHlwZSAvRm9udAovU3VidHlwZSAvVHlwZTEKL0VuY29kaW5nIDEyMCAwIFIKL0ZpcnN0 Q2hhciAyCi9MYXN0Q2hhciAxNjgKL1dpZHRocyAxMjcgMCBSCi9CYXNlRm9udCA2MCAwIFIK L0ZvbnREZXNjcmlwdG9yIDQgMCBSCj4+IGVuZG9iago0IDAgb2JqIDw8Ci9Bc2NlbnQgNjc4 Ci9DYXBIZWlnaHQgNjUxCi9EZXNjZW50IC0yMTYKL0ZvbnROYW1lIDYwIDAgUgovSXRhbGlj QW5nbGUgMAovU3RlbVYgODUKL1hIZWlnaHQgNDUwCi9Gb250QkJveCBbLTE2OCAtMjgxIDEw MDAgOTI0XQovRmxhZ3MgNAovQ2hhclNldCAoL2ZpL2ZsL251bWJlcnNpZ24vcGVyY2VudC9x dW90ZXJpZ2h0L3BhcmVubGVmdC9wYXJlbnJpZ2h0L2NvbW1hL2h5cGhlbi9wZXJpb2Qvc2xh c2gvemVyby9vbmUvdHdvL3RocmVlL2ZvdXIvZml2ZS9zaXgvc2V2ZW4vZWlnaHQvbmluZS9j b2xvbi9zZW1pY29sb24vYXQvQS9CL0MvRC9FL0YvRy9IL0kvSi9LL0wvTS9OL08vUC9RL1Iv Uy9UL1UvVi9XL1gvWS9icmFja2V0bGVmdC9icmFja2V0cmlnaHQvYS9iL2MvZC9lL2YvZy9o L2kvai9rL2wvbS9uL28vcC9xL3Ivcy90L3Uvdi93L3gveS96L3F1b3RlZGJsbGVmdC9xdW90 ZWRibHJpZ2h0L2RpZXJlc2lzKQovRm9udEZpbGUgNSAwIFIKPj4gZW5kb2JqCjEyNyAwIG9i agpbNTU2IDU1NiAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDUwMCAwIDgzMyAwIDMzMyAzMzMgMzMzIDAgMCAyNTAgMzMz IDI1MCAyNzggNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwIDI3OCAy NzggMCAwIDAgMCA5MjEgNzIyIDY2NyA2NjcgNzIyIDYxMSA1NTYgNzIyIDcyMiAzMzMgMzg5 IDcyMiA2MTEgODg5IDcyMiA3MjIgNTU2IDcyMiA2NjcgNTU2IDYxMSA3MjIgNzIyIDk0NCA3 MjIgNzIyIDAgMzMzIDAgMzMzIDAgMCAwIDQ0NCA1MDAgNDQ0IDUwMCA0NDQgMzMzIDUwMCA1 MDAgMjc4IDI3OCA1MDAgMjc4IDc3OCA1MDAgNTAwIDUwMCA1MDAgMzMzIDM4OSAyNzggNTAw IDUwMCA3MjIgNTAwIDUwMCA0NDQgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgNDQ0IDQ0NCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDMzMyBdCmVuZG9iagoxOSAwIG9iaiA8PAovVHlwZSAvUGFnZXMKL0NvdW50IDYK L1BhcmVudCAxMjggMCBSCi9LaWRzIFsyIDAgUiAyMiAwIFIgODEgMCBSIDg0IDAgUiA4NyAw IFIgOTMgMCBSXQo+PiBlbmRvYmoKOTggMCBvYmogPDwKL1R5cGUgL1BhZ2VzCi9Db3VudCA2 Ci9QYXJlbnQgMTI4IDAgUgovS2lkcyBbOTYgMCBSIDEwMCAwIFIgMTAzIDAgUiAxMDYgMCBS IDEwOSAwIFIgMTEyIDAgUl0KPj4gZW5kb2JqCjExNyAwIG9iaiA8PAovVHlwZSAvUGFnZXMK L0NvdW50IDEKL1BhcmVudCAxMjggMCBSCi9LaWRzIFsxMTUgMCBSXQo+PiBlbmRvYmoKMTI4 IDAgb2JqIDw8Ci9UeXBlIC9QYWdlcwovQ291bnQgMTMKL0tpZHMgWzE5IDAgUiA5OCAwIFIg MTE3IDAgUl0KPj4gZW5kb2JqCjEyOSAwIG9iaiA8PAovVHlwZSAvQ2F0YWxvZwovUGFnZXMg MTI4IDAgUgo+PiBlbmRvYmoKMTMwIDAgb2JqIDw8Ci9Qcm9kdWNlciAocGRmZVRlWC0xLjIx YSkKL0NyZWF0b3IgKFRlWCkKL0NyZWF0aW9uRGF0ZSAoRDoyMDA4MTIxMjE2MjMzMyswMScw MCcpCi9QVEVYLkZ1bGxiYW5uZXIgKFRoaXMgaXMgcGRmZVRlWCwgVmVyc2lvbiAzLjE0MTU5 Mi0xLjIxYS0yLjIgKFdlYjJDIDcuNS40KSBrcGF0aHNlYSB2ZXJzaW9uIDMuNS42KQo+PiBl bmRvYmoKeHJlZgowIDEzMQowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAwMDM5NzggMDAwMDAg biAKMDAwMDAwMzg3MyAwMDAwMCBuIAowMDAwMDAwMDA5IDAwMDAwIG4gCjAwMDAyMzk4NDYg MDAwMDAgbiAKMDAwMDE5NDgwOSAwMDAwMCBuIAowMDAwMjM5Njk3IDAwMDAwIG4gCjAwMDAx OTQxMTQgMDAwMDAgbiAKMDAwMDE4MDE3OCAwMDAwMCBuIAowMDAwMTkzOTQ0IDAwMDAwIG4g CjAwMDAxNzk1NzAgMDAwMDAgbiAKMDAwMDE3NzYwOSAwMDAwMCBuIAowMDAwMTc5NDEwIDAw MDAwIG4gCjAwMDAxNzY4OTQgMDAwMDAgbiAKMDAwMDE2Mjk5OCAwMDAwMCBuIAowMDAwMTc2 NzE5IDAwMDAwIG4gCjAwMDAxNjIwOTYgMDAwMDAgbiAKMDAwMDExNzMwMSAwMDAwMCBuIAow MDAwMTYxOTQ0IDAwMDAwIG4gCjAwMDAyNDA4NjAgMDAwMDAgbiAKMDAwMDAwODczMSAwMDAw MCBuIAowMDAwMDcyOTkxIDAwMDAwIG4gCjAwMDAwMDg2MjMgMDAwMDAgbiAKMDAwMDAwNDA5 MyAwMDAwMCBuIAowMDAwMTE2Njk2IDAwMDAwIG4gCjAwMDAxMDcyNTAgMDAwMDAgbiAKMDAw MDExNjUyNyAwMDAwMCBuIAowMDAwMDI0NTIwIDAwMDAwIG4gCjAwMDAwMjQ2NjMgMDAwMDAg biAKMDAwMDAyNDY5OCAwMDAwMCBuIAowMDAwMDI0NzMzIDAwMDAwIG4gCjAwMDAwMjQ3Nzkg MDAwMDAgbiAKMDAwMDAyNDk2MSAwMDAwMCBuIAowMDAwMDI1MTQzIDAwMDAwIG4gCjAwMDAw MjUzMTQgMDAwMDAgbiAKMDAwMDAyNTQ5NiAwMDAwMCBuIAowMDAwMDI1Njc4IDAwMDAwIG4g CjAwMDAwMjU4NDkgMDAwMDAgbiAKMDAwMDA3MTM1NSAwMDAwMCBuIAowMDAwMDI2MDcyIDAw MDAwIG4gCjAwMDAwMjYyMjIgMDAwMDAgbiAKMDAwMDA2OTcxOSAwMDAwMCBuIAowMDAwMDI2 NDQzIDAwMDAwIG4gCjAwMDAwMjY1OTMgMDAwMDAgbiAKMDAwMDAyNjYxNSAwMDAwMCBuIAow MDAwMDI3NTA5IDAwMDAwIG4gCjAwMDAwMjgzMTYgMDAwMDAgbiAKMDAwMDAyODU2MyAwMDAw MCBuIAowMDAwMDI4ODIyIDAwMDAwIG4gCjAwMDAwMjkwNjkgMDAwMDAgbiAKMDAwMDAyOTMz MCAwMDAwMCBuIAowMDAwMDI5NTc2IDAwMDAwIG4gCjAwMDAwMjk1OTkgMDAwMDAgbiAKMDAw MDAyOTg5NiAwMDAwMCBuIAowMDAwMDMwMTQzIDAwMDAwIG4gCjAwMDAwMzA0MDQgMDAwMDAg biAKMDAwMDAzMDY1MSAwMDAwMCBuIAowMDAwMDMwOTE4IDAwMDAwIG4gCjAwMDAwMzExNjQg MDAwMDAgbiAKMDAwMDAzMTE4NyAwMDAwMCBuIAowMDAwMjM5NjU0IDAwMDAwIG4gCjAwMDAw MzE0ODQgMDAwMDAgbiAKMDAwMDE2MTkwNCAwMDAwMCBuIAowMDAwMDMxOTg3IDAwMDAwIG4g CjAwMDAwMzIwNjYgMDAwMDAgbiAKMDAwMDAzMjA4NiAwMDAwMCBuIAowMDAwMDMyMTA2IDAw MDAwIG4gCjAwMDAwMzk2NDUgMDAwMDAgbiAKMDAwMDA0Nzc1NiAwMDAwMCBuIAowMDAwMDUw NjI0IDAwMDAwIG4gCjAwMDAwNTA2NDQgMDAwMDAgbiAKMDAwMDA1ODYxNSAwMDAwMCBuIAow MDAwMDY2NzA1IDAwMDAwIG4gCjAwMDAwNjk1NzMgMDAwMDAgbiAKMDAwMDA2OTU5MyAwMDAw MCBuIAowMDAwMDY5NjE0IDAwMDAwIG4gCjAwMDAwNjk2MzUgMDAwMDAgbiAKMDAwMDA2OTY1 NiAwMDAwMCBuIAowMDAwMDY5Njc3IDAwMDAwIG4gCjAwMDAwNjk2OTggMDAwMDAgbiAKMDAw MDA3ODcwNyAwMDAwMCBuIAowMDAwMDc4NTk5IDAwMDAwIG4gCjAwMDAwNzMxMjIgMDAwMDAg biAKMDAwMDA4MzY4MiAwMDAwMCBuIAowMDAwMDgzNTc0IDAwMDAwIG4gCjAwMDAwNzg4MjMg MDAwMDAgbiAKMDAwMDA4OTUzNCAwMDAwMCBuIAowMDAwMDg5NDI2IDAwMDAwIG4gCjAwMDAw ODM3OTggMDAwMDAgbiAKMDAwMDEwNDk3NyAwMDAwMCBuIAowMDAwMTAyMzA3IDAwMDAwIG4g CjAwMDAxMDQ4MTggMDAwMDAgbiAKMDAwMDA5MzYzMSAwMDAwMCBuIAowMDAwMDkzNTIzIDAw MDAwIG4gCjAwMDAwODk2NjIgMDAwMDAgbiAKMDAwMDA5NTA3MSAwMDAwMCBuIAowMDAwMDk0 OTYzIDAwMDAwIG4gCjAwMDAwOTM3MjMgMDAwMDAgbiAKMDAwMDI0MDk2OSAwMDAwMCBuIAow MDAwMDk2Mzk5IDAwMDAwIG4gCjAwMDAwOTYyODkgMDAwMDAgbiAKMDAwMDA5NTE2MyAwMDAw MCBuIAowMDAwMDk3NTQ4IDAwMDAwIG4gCjAwMDAwOTc0MzcgMDAwMDAgbiAKMDAwMDA5NjQ4 MCAwMDAwMCBuIAowMDAwMDk5MTEyIDAwMDAwIG4gCjAwMDAwOTkwMDEgMDAwMDAgbiAKMDAw MDA5NzY0MSAwMDAwMCBuIAowMDAwMTAwMzMyIDAwMDAwIG4gCjAwMDAxMDAyMjEgMDAwMDAg biAKMDAwMDA5OTE5NCAwMDAwMCBuIAowMDAwMTAxMzM1IDAwMDAwIG4gCjAwMDAxMDEyMjQg MDAwMDAgbiAKMDAwMDEwMDQxNCAwMDAwMCBuIAowMDAwMTAyMjI1IDAwMDAwIG4gCjAwMDAx MDIxMTMgMDAwMDAgbiAKMDAwMDEwMTQxNyAwMDAwMCBuIAowMDAwMjQxMDg0IDAwMDAwIG4g CjAwMDAxMDUyNjAgMDAwMDAgbiAKMDAwMDEwNTE4NCAwMDAwMCBuIAowMDAwMTA1MzYyIDAw MDAwIG4gCjAwMDAxMTcwMzkgMDAwMDAgbiAKMDAwMDE2MjYyNiAwMDAwMCBuIAowMDAwMTc3 MjUxIDAwMDAwIG4gCjAwMDAxODAwMzAgMDAwMDAgbiAKMDAwMDE3OTgwNiAwMDAwMCBuIAow MDAwMTk0NDY3IDAwMDAwIG4gCjAwMDAyNDAzNDYgMDAwMDAgbiAKMDAwMDI0MTE2MSAwMDAw MCBuIAowMDAwMjQxMjM3IDAwMDAwIG4gCjAwMDAyNDEyOTAgMDAwMDAgbiAKdHJhaWxlcgo8 PAovU2l6ZSAxMzEKL1Jvb3QgMTI5IDAgUgovSW5mbyAxMzAgMCBSCi9JRCBbPEZFRURDQkJG MzYxQTlGMTc0OUQ1RUEwOEJBRDQ2M0MxPiA8RkVFRENCQkYzNjFBOUYxNzQ5RDVFQTA4QkFE NDYzQzE+XQo+PgpzdGFydHhyZWYKMjQxNDk0CiUlRU9GCg== --aM3YZ0Iwxop3KEKx Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --aM3YZ0Iwxop3KEKx-- From netconf-bounces@ietf.org Fri Dec 12 07:33:44 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 43B6D3A6B30; Fri, 12 Dec 2008 07:33:44 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EF2913A6B22 for ; Fri, 12 Dec 2008 07:33:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S8nv6+imeXTC for ; Fri, 12 Dec 2008 07:33:42 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 937913A6821 for ; Fri, 12 Dec 2008 07:33:40 -0800 (PST) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id E80E4C005C for ; Fri, 12 Dec 2008 16:33:33 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id tcoVBhBwoF-f; Fri, 12 Dec 2008 16:33:25 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id D8B5AC0054; Fri, 12 Dec 2008 16:33:24 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id DD1098B0AD9; Fri, 12 Dec 2008 16:33:23 +0100 (CET) Date: Fri, 12 Dec 2008 16:33:23 +0100 From: Juergen Schoenwaelder To: netconf@ietf.org Message-ID: <20081212153323.GD20922@elstar.local> Mail-Followup-To: netconf@ietf.org MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="aM3YZ0Iwxop3KEKx" Content-Disposition: inline User-Agent: Mutt/1.5.18 (2008-05-17) Subject: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --aM3YZ0Iwxop3KEKx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Hi, I am attaching a draft report of the interoperability tests we have done at Jacobs University. We plan to continue this work and we are of course interested to get more implementations so that we get a more complete picture. If you want to help us, please get in touch with me. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 --aM3YZ0Iwxop3KEKx Content-Type: application/pdf Content-Disposition: attachment; filename="NOT.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjQKMyAwIG9iaiA8PAovTGVuZ3RoIDM3ODYgICAgICAKL0ZpbHRlciAvRmxhdGVE ZWNvZGUKPj4Kc3RyZWFtCnjajRrZkts28j1foUdOlcUlAIIg92kTr52jYsdrz252y/EDRUIj xhQp8/Bk/n77AEhKoiapqRoAjSaOvruhzZeNVGEcCa03EfzJKEy10JIGxfEbQR2x0aFRJmbY 5ssmCuMsy9INdNIkicRms5168xyjR2GmNw8bar6fFtwuV/zu/pu/vVZ6k4VZIpPN/X4jRJho ncL0ffkx+Ofdp/ufCMOEmYFNAMOESSaEQ3h/t01k8C38F8Fr6t/jJ9+8up82jEUYK2XcmfBA y9MoDcslyl3wX+vHXMB1FAohso2Rq+vFmb6x0c0ZoWSYSYkocZgpmS6RrpYRqQojFW+2idFh lBg5kzHZiDhUcSKJjmkaAnPVZsJDcr19df/yl7dAKKmj4MdmsN2dSIP2ZLt8V9XV8MQz93eZ DGw/VM3DxABgTKY1rb01QFGTAfEMCE1KK//4lJf+41gH4zHv7uIoeMGwH3Ju3+TNwWMpHXR5 4xB+wn3g/BK4HwPVw0hnvPBvME2TIGggXQrbaXKk8z/Yhlf5UBwINU6BosjUv7hM2zzSnBQh oN38LkmADsvv8roECtKslGkoIqCJUGEWG0PzL9vjaUQiu9NVtimsv3FetLue+/9uqjupg693 Qge26yc+fNfZo/Uk+t52x7xBlCdmijRLpkShNio933+/xj0NmmQSpz9VOFyw6hAOM1t+D/vi 0Fogj4iC3PrrXu4tQCvihLQIF334023/8TvdfjteXzzRQVjaSyX2aqczEwqdqVUV80jbJdak G4vjxnCYLE42OjGhNCKmM3276+HmxeAOny2M0haULpMGmC/jEISUlen+YO+2Ssngx1f3r7l3 yHvuwA3gSl9tDbpVMijnprHDY9t95kHRNr9FkXxAOdZBPlRtwxPA6S0Llj/31CHBQ3484D8U kAG+MSo4dah57dAWbc2QIq9r2h76k+rj4PFQFbjjwQ3p2LjEuKur/gDf4N7RxaaAFAvh9zm1 Pa4dwyH6IW9KkCJlgpJxqoZbGUVJeLc1YE+IXIg9nWSxGB/6bFNBm7p5vOrXqrSoMJkKjpaP nzdVf3SwoeW2auA4dQ0SrKIYCVmdxjofLC7hgHBaxi1tbWGGvz/YtVuvsiiOwWruuZ0YGsfG 870q8KQ4u3viduzRmFI3dwu8+mOwTV/t6tV93+Td5/EE503j4Oe8eRgXPEeoCn6LdPTfNz9D IxhtlxNHcK7Mh5yBYHLakvZGOMkXQIfWLd3u16juzHVfHU+15f57e2wH13/HTClsORLTHfgl kJ17eLT3717y0RBQ50/oa4DhIVv6SaplKFIjnEJVyMskDXjVU9sNOM6ArH3RVTvrpnNuZm8G g4q8GQmmZVZNHg0WGMCbPadQRCAZgQbUyB4JQjIc8oFhdCqAjERehJCsIQ4sy5DHgwUB6hg8 Hyy6VEucro7bVVGvSZlJxFAf4dhHa1G54XoDGRsAzXoM0AuVh+n+ZIsKBbagdcI10XKGK3XH xx4KM0EOTHpCyIAspT1Z+Nc4vHl3GJB0LI68spUTD7KFeU3s08HuTkbB+ECjmEwFQnuHxsyr Gbhgsb7cD+yK0nHw66G61CDhNRcs+lgMzFyZeHZBrwBV6dHJKUHSBKA97f/Ig/4Asle0R/i0 ZwhSSErDjCCUmdLbtas7NqL0P9qlmlRITvrSupApn/DqOnT+58xjwdIxOPgYXCwuDUoloogi OA7gSrwl6Lb3u2fxNEu7TEIIW5JZAGS2FNQMBXUSUpiarmdLb1d54v3rlwyITSwY9FF84k5p 15WMGYKrNajDKjPkDrMELTlbcYaiYiF4trrWoaPJxg4Y9PzBMhaaXjSI7E8zM+1/wQqyxyAu OtXBjyjJMbjjum4x9njE88QiKGqIzoaeJ+kY0HZ26Co7hygOdTqc99iAuu/aI/fgVKunmI+q owQ9hZw8BQLaDlsmAY7zsuROQ5iPPLjaG4H8CclmfyfwmDi6IoY4IwakPc4SmKVVgcEsCMqg 5yKWATznpnOewKGSF1h3neQPFBDuzB8oEQenvMvL6uGITIk0JnAIZR7wJ+S3aGc0Bw0jwBoM 6OyXkY0XDKpmbXdwjSCUQPKP8hN32O1jvAImreduNXBLFh1xPEbnglIeO/d9hlHAtdGEgAIC VxpLKrhK8rbDe3EgiF8ik3qyzlsdZ94en++qJFJ6GDvyBTD5WA0HBhM1AALU2L5/9e5nkKso +N+q+bX9CayQMzxMUmdzKpczAZmedckoTHJhKXAwCwiO+vGEnrrn0ZSj0Ghvc7iCdXOdfc4H fxmrDk+nwcruSRugcy3v0tsAjnw12eSceilaWsuwOi8+u/z1kh14dfQcLXts7J5bEq3OtkAE f2V0GiqFgKb67EMxmKXjYod8yB85hU0r/Pjw9s07dDoglOoT+q9oEZgjmFLxgeIcHCGPgOF9 y2Mfz2MfI7x+aDuPi8K9KgEnQGHLJmPl3FccXxMWZ8nJQZszjrdRIK6F+yzvFxgqYAc7Et/o i7ZY1YARKYmJgHCJAMaeCzsDo7KigsOI+QeKPNjqHUQ/AnhqGx53Y9O4UJYusGpml7ciF280 JijdgNG0NNHlzXuGsnEwcFPoVWVOse459m03j4pMFRVUTIGmu0I4yopmG4P6Cvfl7IDtGkGq I2DODsbByf8gU/u+4hBNeP3H2cONeKftINL3KYqUnKJIclhgrDoSZoRf8Z6QwA+jY0UEZ15X QzpnRbUzmYnXfwYiFyFSpwiPLB4Cr2UNgW4/XAJLDn1e3AwjmW6TQTZoKheFA4oWAbjwqahc AHkN9Khrqio4UZjVzVxyBCF4zhoyiRumYwpXyA4oBSeQGK2iwHAoIDC4PHHyUVlGky58ERgD TsdmTwf+vR0WEftl5UNmJkywqpGKZwuDE96WEa9LqypKwzTBIsqy7DFzDyT1Y/xpxRkkKlvk DZDl5tWRO5Q2xGiAq557ncvasO9hzrTu27rEuCMSwJauH5A0RoJ6M5bP8dwWzziKRdTq8r65 ggn24oknBlfApIFL6zLvK+jLntsRM4+gdF+189drAjDneeC4nTFdhE84WMTRMLpMkgjIeZ1f YkXg53gsjc7spLjM8Bilci0F54iFwTnaWyD2Bwv6V75YDUnJyGVgWyhzhx7obzH2eMw0cvcD aLuj0ES6AkjPUGcyMU7px3pwUEdg6EES5SJXXMwPVojq9pkSNFBTxzCA7duR9wEz3h4d4kKL L/NCRvA55oubJkxB4DwdEAdkpqHtFjqac/0Mw3Fu9nbxxXmWiBAQD8pYMCg/uM7EsO16kOwN h+EwmTgIZoHTKwRPxsPNGZyTPphOWM/QtlQuoIE+kQpPStygVdarDrvqYWxHl4C2rlQ9tAOZ TVcFqsl537QL5PaAWuB+eHvOSBB0zKcwCT0GkQSmT/mJMck3FFVvfZxfOoTOIvSFc33uM9TU 22aBpQiCMBfJlTyaUgWpkRz8VhCz6NP0ngv0Meu+xvIgJ9JxtEykdRQa6R+mulOxkmxLLINr jzLvC1Gx7XtMW/n0RoQiUxclN7q6Fo5IWi6ugeA5lKc5ugfCiTY0v+dg1mWvAFq/RyrDWAsz X2QLNrt+WrnOdsK9lVSAw3Q3C9mY/3qXErdxxlPWuOwKYqsz58uxrjcnYNhG93xzXXdeuUYU QuIo/YsDpNwgSPvqYeUaCayVSv84gQVZCeHO8HSCuHjwxSHpCztiPhfDm/zoJioHGWztExkD BErxYeDMnMHSGNdkYLso6lWQn3HNBYwSrtfzNNeUIm/2ANKPFUf/AM07t4o7KkPpEIh55Gqr xLTgtG7nbPgQvlh5QhUZhApJ7CjynzujMAOHG76kJ9Q3a6Idh1KlmfuEjQHoZJhFkViJEnSM OTreSsdcO0PIwFOT/iMMjReClpkEwnMHh6jBF2r+frfNwJ992zxjBJaR4tdqMtYm5ljFeCNk 4mXN4ywXMXwohlLuxG8oXKrEafCoq7bUWXKdBRIDHUWYM1Bhk16mARrLrJBAHvMZM9+148DY zhwAw5/6wR5Xw2NwkKT7rtDNvZ2FRV3R2FWP08U0O1jsVa7YDJFUh5VEui2NuZ3vAIP4dkVZ JmZZrzWXoRmV4tE1UGiUsLt7+wu+Pd67l4KEg0ZsfThY+rXWCD4fLYsDjfFOLIJ3na0hrWry 7oknrqMXlSlWL5zmkJVunTkeQ3vNY7ngMfrFhBtPZ/KbB9dxAo5ddHD1yAnGou4yHR0H5lbV V6ahhmSJdpau6nv2iP/LV/KvHT+Q2cc/KwHLZSgPtmxWAimWSgBTVNVFsKsASn7DhIbehbjQ qChbdAVB6MMSz9V4XLEQRCn25cHksjwIU/xcRHNzzg/w8zxQ0atBMS1IWaQrReEceJ0VBu7p LbtAieQkH7I4iOGOY1P5WEyqGGsPXHjA+Zxhvj5JIApKAZjzeFG7gziDjL4mMq+LLR8abMqH g62d1UEyfPjwgyMDzH3Un87tkbNdGFc1kHG2JOEAn6iA9s1TYVV6ORxUmLPirmppBgEKN0S+ ciFc+YBM6cX1ev6M1UdxKZYLdwjmyoW+fuOSyzeu82cP99p4tLl/MCHHqCnzAdFiF026c2VQ MGlN1pPWdJZ0kS1Mk8iShaTjVIGmEME7h3vKu4EqOHgtBCBVGrwbDiAj6bgHcvqctBOxpDF8 U2h9RuSSFLIFAH5d8UMH9jFrU5mPFwAw85OGi+zSGK8obuLG4wf7GRDHnJtJWiJ9KfkIOuVU aIr0rAOLfEbPVfpIX1cdWcCvlCHxPwBQcFKu4s+nV3z6pVM0/EAEzfKByKSu0gpwKmavXpjF BfQf9uFHwsQ7KH0edMLYEzCheKUqp49b9yxJL+UE2Dv/5ZfCa6xs71dUWD+dnryk0t6KcCin OCIhU5NTMK0uTqfIGYF3/Iq5bMuJlDc6DoFIiV8e7XBYf3ugl440cfVDmRos+W/nt4A0odcY WIDFNeXsDdvFjyfow6mOt0r3KWiGOKNH24q0TybapytlQHzap18q0Av+0Nt6z1CMh9xjv6N3 hp8PKHi3fhoESZWQ4i/9Ku//ea7ee2VuZHN0cmVhbQplbmRvYmoKMiAwIG9iaiA8PAovVHlw ZSAvUGFnZQovQ29udGVudHMgMyAwIFIKL1Jlc291cmNlcyAxIDAgUgovTWVkaWFCb3ggWzAg MCA2MTIgNzkyXQovUGFyZW50IDE5IDAgUgo+PiBlbmRvYmoKMSAwIG9iaiA8PAovRm9udCA8 PCAvRjM1IDYgMCBSIC9GMzYgOSAwIFIgL0YyNyAxMiAwIFIgL0YzOSAxNSAwIFIgL0Y0MCAx OCAwIFIgPj4KL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0KPj4gZW5kb2JqCjIzIDAgb2JqIDw8 Ci9MZW5ndGggNDQ1MSAgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrN PNuO47ix7/MVfjtuIGZ4v8zbJtk52ABng2w6OA+deVDb6mmdtS2vJG9n8vWnikXqYst2B/EA i0a3yBIvxbqxiir24peFVExzYcyCw4/kzBthZKysdx9ELIiFYU45TbDFLwvOdAjBL6DgreVi sVj1peEdNecsmMWXRXz8dz/gajziHx4//P6TMovAgpV28fiyEIJZYzy8ftw8Lf/08Pnxz7GF Y8HBJNDCMRuESA1+elhZufwO/orlp1h+xC4fvn/sJ9SCaaVcwgkRGmOjDAxnVVrgX+fRHMEN Z0KIsHBydjwdzIWJjDbUc5W6nq+9H1twxpVTcYXb4mvZPKyk4cumbKtNtf9CteK5fhBm+Sv+ KQnUvaZCfSiboqvqfUt1GsSYJUPqIJGDAV6vhGLcSB8nesTOIsjlj98//vEvP37Cilgemrqr 1/WWXrXHw6FuupZqu+O2qw7b1G1d7//BufxypJnjRKthplTAmTZFV7RdDcthDyvFDfJPKns2 AgDN0JjaVG0Cl9h0X24IXLT0JArA+7bsCFK/REx4RkFEFM6nEn5ZP/9fucbFYaUpfzlWTRxf hGVXE/RLHBYKBT025YMEHlTrkuovTb2jHlUeqNpXXVVsp1gkQpQvDwI4CXSEttIt267ocCQJ C93HOQFY0GMD3Cd84G3PYBh46BnJKSMno95oPtasoEHfbUia0xz3e5SlrGBDw1Xfcp5rKFKB GGE8CEjZlvsuAff0TILol89Fm9rv6k25pWKx3+S+JMIVrG3SMSzXx+ZB8uVqjnkNzLf9CmsN ZlmsuyqyIKkBwk6YC1Rx2ix/2Kcem02F4N89rLQSg7TjO5Dv1RyjktArDcjPkFYJprjPRmsN 66s2yMhz2hrHpPMmtexJCriAsVm+vVbrV5oGyatQy6n6jMQ4vuBKX9AcIKx7LTpqBDOSunnP jAfDMUH+GUlq7XJX7KvDcQuIbQhAfIACwhoqruvdrur6JlEGLenVjEg5wbyWNyVKgzwFGUar JiqDflimYC1T/maSaM8JR7Dfs3Q3mnHv8l4AKtB0x8Pc/JYJq/L8Z7qvlZ6wQruQWYGvgBVk yzhnElCcEHdbFxsyQnz5/JWeJMQyTK0DvCArxZcHQJRKYJ1iy2Qkqn/1lo8DCmUqVal1Uz7X ddfOSWjd7xGIUTL7T/ozO90O8yZjrGBOejm/WTGB/FoJLWHfdTbt/oKlFukJ0F9GW6kMTAHJ ga3cMa2twQa//2EnFn+qP/x1sruCRATcC7XwzBlu+w1R2xHfHEiHd2YBozKv0j71qQLOIUGd XwpGz16JsXKIliNvWwjZFgj5irYW5BwMRUvwJ3GZPgqMoHU8zNMnNVqNW51v6FYybkE+lcP2 QU/wV04sJT74sn2tUVDeWoJG+cHCsPlibbypY6+k//DmNa6vN4EAeS7LqzvwsHtaD9t6jU+1 pN2oISBKMwIjNgjoiYyVN2xaNz9HdwQBX5oadC/2ON1yac44jgHcfvj+8dMDqDbDKu1WEY4o NW1H0I4moDejlc8YIQNSEoxN2g079Ao0/KWaM0TWMG29Tk3RtpyPB/oIVs3qqU0qYdO4Mi4U hTTDBgCWQ7hoeUHCl8cWKY0QtKc6ehdFgpCBA9BgnlNTMrmLVR58Qk1ApYvbLviJ0YooIFpB 1d6WAYWtc5f8AeGYCTq8i24QKniXDX3PDpqu332EF2CPpZjZflQmglTJmVKZCAgptlsCRTMG ALSQbQK9pDZUbQ/lukJRyaOd7/aK2wtr5v8mU6X3dmbR4EiDO0NYtFSPK1BGxxUggGw8liJ3 sAk94gJWPWvjFBOC5cUpP+MSgz2c8NeBq/k3HBEdQexRdF1TkbvQReSgQ7l7Lje4Tc2oJbps CtwjMjp68J6wZnEZxa7syOeIL7smGiSo9O6KyfzCYlwu9OwewDBBaLA8GXfWpRvWZ3nyfYCz ICDgifwurbrclkOtKQ/bYh3JZHkiOjiZaN7RS9+g6INwROOCLYAW3axrVx8GpkZdxAIRAwpl 09TkiI7b9USJiEYu4WqJMMYO3X9Fsw7b+qaYnTuPqPLMKndVYNP3m220rsrIJEOK8MGwyYpw Sa+NYo7zwds5fL0u431IUB+yWyZh27fhxC3r5V/C5kO8QRW1gbTW8cyUlmpoBfEtmKmKNmw+ E3cBcIgsZmj0VnUoY1Yn0liTbV9L4Egai8yroUVDQHBjDyguuXaqRdaM3NCTGVOQo6xIbLHi gv8LO4+TWmW/NgroZVp7jBLcnD2BCahzm6bFR4yoE0OE8owrccKQkzVxNY7RFNfQwPB5zAPy 3Zn3eO7eGnXJc57OSahCF4G+2nS7KvbAHvJKn9MhRVJoQFLcOJaYizwg0AlZcLf1+ucZ5KVl nHt1dbeHAER7nUOI4/7CUMpBUZlT3sUQH5gXTwdQuosmxrsA+9IUMRoGMI6ZGYlHO1ycmmDU 8pBEGZ4FPUZCHPSEt9gmiiYUcPQ2wZoUAVeoIDEuQTDut/h8nlUwcD5jNAJWZjsKpdGCKrCl /wOGLQX9akleIzWOC4ybMLxAJNLJlAQrvAbrVbW7lupF7v6eoF5yD4jSWNxPznm4pwMGeFKI BYXoTMZSDHZWMlza+wV4405YP/g7cyKD7NHuXEdxhpGjA0NJYWYcHdx3ydGBEp3goF2EPbkc H1PEt6+pkNUvVs4tpEx2aNIHSIkUm9/RxmdDoGj5VMmkeJOOFUgFc4B6RQN7v9+BK96WbUuC j7Xo6boYb9AT9sRdtacjBqwf27gwhx79LFfm45P1tm7LVZprzpRycF2Nua7ZeNSSlf/naru9 Mp6DKE64cKbeIFBa9hvtOEyUwUEXCUZ9HCCeBoqwJqnBTOHhw0wcKZjmPuARugreUDj99Jkv NtDyzx8S9A0qED6GIBe7D1KBJ66kzJDth799GIXVCdrT8uKI1I4vdrmYe5wMqNBegdYsVg5i equtGiJdOzkBs7BSiKwcLlnJEAn5l15/TqingHpeCWg+GvU/xDQPeQNTzTXtChNMv2sw3Pxy 3EW/4vRIQCtmuPJ3xBb5CL/3Yz3aAAbg37gU2aDACeJi/ryklyKLBz7eunFkSkHJJUEaD3wv QbqObC9IE2Tb+tisk7F9QpS3YBI/X5So+6Hd8/SbsA19V63DLbZ5zYKCfXEcXN/gWxzZ3JVt w5DXuDbGtStS3Jhc1KfRl5lVvx1cYeO9VnF/LnrHnAk+n9beicQQNyoPo96gscPjY0vnnk8x BKcw+nMi82l4neCXpGag92j+37LaGAeDa3tLbaxgXIp8sHdAyfv6DtUZjX43xl7FeGDsGONT 5Ukm8CLv7ob2t+WdNky7oG/xTgfGrT05ALjBuNHQd2PcVXQHxo3QHfHtIq/uhukpr8RdeQWD GzyIucEriOIhAA+TM4N5Do0GvBuHriI5cGiM5HtYdDdUv606ScGMDTcdP2mYMMadnMbMM2k0 5N2YdBXNgUljNN/DpLuh+m2ZxAMEteqmmycgeOHcjM9R5jk0Gu9uHLqK48ChMY7vccTvhuo3 tXQGjx2M97c4xPHgwej5w5RZXo1H/o+wFbBngOOn7+FxflNpN94wx9Ut78z4wGTgcvYcaZ6U o4HvJfbXke3FfoJswnNVbS6K/f1Q/bascoo5ZMYNVjnHlCKd31Ttumg2KzyK/lK2l5k1Gvo3 K/f3tSGY+RPULW/JWMOUC+SIDB8yu/IyKUcD303uryI7yP0Y2RsByP3Q/LYyD666V/6Wx2QM 4CC1S8EjZu9dZtBoyLsx6CqaA4PGaD6lEKnZ0fejPuJvdquu2pX1sbu8U99vEd+WfeDHey9v +VIG09NtIJtFH9VX7fG5XTfV4erJ+Xj8u/HyKs4DL8c4P7UdYL37fHbkSfWYlDlU6sMVxt5t RXc/XV8FtC744Y8pLWZzJoVmQetLtwyEARIbDyQWgQmYaD7hUeE1DOGAKLnZJGPQy6XEz7J+ nLYMwGnGI76e5ApCC8wEKC5/fM0fPmJWZPzGCs/nplhjj5/L/KbIeZd0Wlds8dt9SqXUZ4xV 3DNvRcBLEYxbcjLOSZNbrcbNiDSTHOt+NIvfJn1434dCwazic4lrQaekW8q6CCp/df8Cyy5f jlsCxgn6r/OUZJ3GPM9uVHgNIn2YhUr/tZTevL1W25LgF9KpMe3G93nkt75Zgruh5PmnavpC HTyzoy/UxOaXuqHsnPFdkfzJlj42j78R54SaeKhHeMx8JhbKDvdHMJ0nC8dcwgyeVbiM84yL drLGIJkyaoZ9MZdoWxZNyjXqkyWFQWNmxVn6SUrJB/KHmTwWAE7yK0JMf6W2dB6bkjRC5nQY Z83cvF4C1iPd6FDO5wTfMMHLzWT5Q9ssNS4M3a5Q+CQX4NeRz3Z6FQGayTBDWzBwuLYWS2rs +fVv169lzDnB9xlW0CNSMSW75BmmipLyFrlIyXnRWl1cj+eYzOb6BKTs35zupxC9g183o+c+ 5RN6kRIzEBIZAZBhPEASbK8y1k85STSXc5mY0lDypLSjViOGQnUsU9A8TjtuPitCJ9dtZlWO 9t7vKAOrLTEhMc7J5ZAgux4laR2Oz9uqfY3rhzZ4EQHBP336IwFQKwn05D5TocRUlX+urmSR Y45R1D+XrAkU0oUfKI1y8u00Y8q5SVoPVGnLcYQPFrTTYo4qL5hqaJRZgm2aLBJhOWUSxEsI q0G+kPP4Jj83NWYvYQnVG594Gwg1G8vde3KGL/hoZ9cYwTr3uUZjwyXSnRYsVJhMuzmuKfkH APuYj/M2nydDI07IgVR4qdZFd3GL8KZPS9+BCS/QzoKiapDUpiGjhlp8Ss7YgtIsSf5WeazJ /H9AI8lDTvPBYkGP0wERRp4ippXh7UWoFWtMm6W7WErqeM8FX1YAbal4qGHfeY4WkMfM8dnU sXU5vQQmwySXjSBTlFoCFun5VsYE7hEkJrN+zeV13VA+3Wig2ezRdc4cuqi1J67b4LbJXiAo cTtnA8MLnJLMWcoF9ph3fyieq211VUWreMnSAYvRWHjT9+pwaV4n46ghaN6V1OLluF+TPe4b pasmPt6QO2zLPk1m9pKHVCLbAcVHdgDAJ8aJUZ7qd9RyjBo2prue8NxgCnFKi5/hf9yqJTlw Ui6P+wrMxI5gTZkzMvDVaKSG3qNj/PeffqAk1AihXQka0xIQNKU0Pycx3oB15B5jYWTdsJq0 QwS7/PtPP6bGL/V2S7d+0stkRLGwK7vXepPHQjvzfDl5XwJ/yG5CQUGcjSWw4x7TIXFLHhgA 4EMZs9axLRl4cr4IMrmv5nVc92y8ELlUUaK3yhfVnM7bgBocX6xUqV32tzcfMZndLf839VO5 n+5xnctT7X1pma5HqnjReU93AnRYlkW8jgCvcZVUQv4+1zGFHCVsW5FvLtMtVCy0ZUNmoqFw Bhvujm03jwT1krP3EWVgnC6TY9vXEjk846uALQjKTa0yDYomt6goGZQmgYcAW9Z2BIi6L2VW SCjhUv8Lr3a31Had71ZayU4TxpN6JZugRNohMSJJU4S09Air9uvtcVMSOLm9fMyi0+VzyxRE HWllH6MCzdwv7tudGM5e+3Mfy4JTPvl36EkqZkX6qiHmKAvhE17QHDXDqxImLD8hg6cap2zy N5S10d9AKQIVfSsJBKaipgsEbsCtKtNlUK0Y+CmnV53QEIl8gU+IqbGF+r7YpTeHJtqIf1Ku NcHSVQdBFwCwe71NeyN4UHgtlxAXfQB5vhO23TSI68M8MHLsYoTu8eSFPvOfBuh8IZkJXL3n EAXvjQe8MTV7hjJE+oFjVoEbHzMZumcaj8YCJlfLhVfMi5SDLHpxG/4RRLyTBtI0tDo2+49V 2b18jBd02o/7ssPbGFEQPwrGL67feSYsnz+gkAavqMLTMa7pMOnyfVDYRYSQFw5DZTAMXqpF boU4y/PzsPSPIkZj5Qn/H2/AV+RlbmRzdHJlYW0KZW5kb2JqCjIyIDAgb2JqIDw8Ci9UeXBl IC9QYWdlCi9Db250ZW50cyAyMyAwIFIKL1Jlc291cmNlcyAyMSAwIFIKL01lZGlhQm94IFsw IDAgNjEyIDc5Ml0KL1BhcmVudCAxOSAwIFIKPj4gZW5kb2JqCjIwIDAgb2JqIDw8Ci9UeXBl IC9YT2JqZWN0Ci9TdWJ0eXBlIC9Gb3JtCi9Gb3JtVHlwZSAxCi9QVEVYLkZpbGVOYW1lICgu L05FVENPTkZfQXJjaC5wZGYpCi9QVEVYLlBhZ2VOdW1iZXIgMQovUFRFWC5JbmZvRGljdCAy NyAwIFIgCi9NYXRyaXggWzEuMDAwMDAwMDAgMC4wMDAwMDAwMCAwLjAwMDAwMDAwIDEuMDAw MDAwMDAgMC4wMDAwMDAwMCAwLjAwMDAwMDAwXQovQkJveCBbMzI5LjM5NjIwMDAwIDIwNy40 NDY1MDAwMCA1NTMuNjEwMDAwMDAgMzM3LjQyNTgwMDAwXQovUmVzb3VyY2VzIDw8Ci9Qcm9j U2V0IFsgL1BERiAvVGV4dCBdCi9Db2xvclNwYWNlIDw8Ci9DczEgMjggMCBSCi9DczIgMjkg MCBSCj4+L0V4dEdTdGF0ZSA8PAovR3MxIDMwIDAgUgo+Pi9Gb250IDw8IC9GNC4wIDMxIDAg Ui9GMy4wIDMyIDAgUi9GMy4xIDMzIDAgUi9GMi4wIDM0IDAgUi9GNS4wIDM1IDAgUi9GNS4x IDM2IDAgUi9GMS4wIDM5IDAgUiAvRjYuMCA0MiAwIFIgPj4KPj4KL0xlbmd0aCA0MyAwIFIK L0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngBzZ1bc2THjeff61OceaMc7lKdS91i NybC7pFmNeuxNO7e0IM1D1R1qZs2Ly1epNHXnHnXZ9nfH5nIzHNOkawii3LLYakOmFcAiUQi AeSP1X9UP1Yz/reom2q5bqrrbfVtdVn98W21mK6X7Sr8Mfycz9fTedetquV8MV0t6lX19qL6 /Mt6OqvqydsfqpPms+rt36ov3lqri27azZvVslrM6umqqduqaetp26y6qm6X01lX195bN102 XTOvfq4+f31TT16/sV5n1ZvX1ef/elNX7280yumsXdXLdqbh8r/8Oe5pc1E1K3pbtpNmuZpP m/W6SqCqWSzr6bqtzqs3jFRdVpub2OXNxrrq9+Rfo44mdASqappbrxfWhP9u1tPZajavmvlq ulitA6oaoaoSqr66/OHq+uL09uzqMiJtYqSYel9hjv416rm6v+duwYQXa7peNpCpmRiVctd/ 3t7+fHX99+rN7ent3U11evmuJNts3xE8MPeuW4Pfbnnf5L/ZXtvsLzfbqkTEJHPP3sN4ABHt qpk2TTev2m4xncOGQ0y82V7/dMYY/v308vT99mJ7eXt0TNTLKWy/rtq2AbHLbsgHb365ud1e 3BybB5bddLaes57vm/o3V+dnm19ecOb1bD7tWmTEC86cxRRX3iv/IdAM9l9UdbOaLtfrIc3/ ZSuSP4fOu3ttEHcQuKpnq+mqRnAOVt3rq8sfzt7fXYcl3+P0g+Taes20mraq1+t6umiri8kQ cl6tF82Uvzep0BrumyOxAfCnWVMVgAY6IZ82CTapZ0iQxXKNgMzlZgi0ep6bRuBN5+1qUXn3 CbAB9WFsDpqcI/Ihh+p7tbqdL6dL4Ss0nL9j5zTjRdZxjGrGak18Ht6sY8N79u9N9cGEvLYP l6WPSNYo13ZTeT2ftqAv8taQxgPemhzQaxRjO3ttZutpt0ScOm8NebrPW8UeXGySj+2Zmna9 QnDP1oltxhAosKrhJZZX5L96iZRls0kUCd9QKDFWKpL5KoMi9WOrmT3iUBww2VRN3Wm1ZxY6 B7RcTeews3NV07D8UDWcq/J34qoIygOkGa8VV4c363P0nv37yFzVrGDOFrQHifVbcdW6m87r +uW5Cl0E/hWHRImFAtaHQIEFcgmVzMs0i7adtllexe9MNNjBi2SuyqDAVd5qZo/YsQPEVcjJ aSsxFuXZecUKR4avMqidocQxgSiq0mfiqQDJo1MboUrkKG8yzS/26t9H5qiWkbVLRvybclS7 1PnAZHrYA19KTrVz5NQqb28X1RACAeZ1i96fOKrtVi2KeJJT8TvTbIOuFItkjsqgwFHeauIW 79gBcFS76hq26Mw+DGYFajjgeKmqXUtNQIo6S6XvzFMBlAdIM17KuSo261zkPfv3kbmqm8+m HefE35arOs4+89VvsPt13Ww2RWF17F1UQ8h51bULuCjvfl3bomlzoo0Uid+ZaBuqxCKZqzIo cJW3mtjDO3YAXNUt1q32ZgehnHVLqqPUJVC35IQu3TByVf5OXBVBeYBqJtbyOcRmHQ/es38/ nauykp71nKZrp6tuUXXwVrOaDze/kWozieaFvfW5Bw6IzaKezmcYJhYszvlqKK7+eLr5+93H 5xwVdk54jjmkXcJnaOKrZnRQ+Mv249XN2e3V9S/9Q+FBpwR22BnTqrEEcETAEgAPrutJM19z EuY4ilXEuAnrBKYc1P9oLtGJPQDYGVfSS1YZ1KzZTuYyaYRWJg0Woim08442Sdc+aLDtTOpA h6kGuxJmFMR5gNAwqm8N19MTewtj4agiQZqGG7+lDjAjTSRAmCpyA1U9N+GA2AtVHLKedZzZ UhNs1h3nH+9k4t9SFsIwHJLGGVtI36mPcPzAxtRgY5rMKuxL9VJoRSFawh6I9CUTLmAzTq0t EmWBDWU2qylFcSnlAOh36QBkQr3gLDjr1g4yAMpsZ4DYzAobiEFiZ6Fagq1Xq8WkaKjhqIEE yZ0FgGqlAcUy5TzUTJrFJM1sU/3wuyfY7pbLuaQq1kPm3q4n4mAHzaGNGBiFsRUjdNB4iYFH 9OI3RFpi+bPa9qd6FcpZPXjMv0PTVt5BTCFX5pwtu11qO36rfet60qxSER+bNeAfqYPAA/WS hbVk70jIEdkDDIQ52YG066YgO80t12x/zgdioDnHe6jkoBpzz5KjbyL7pIBksudSnKMCvVJD TtLUWSQ7LaUBeZliHrGZAmIMfTjZdfxs1h3jYR1GsktwJVAkuwwSIquRfV1D9kz3NYbmuoEu VmC1wiBDwVhx5d+JLMi3WERkC5Up70QNjWcqa/V756mMD9ha8I/UQyC87Lpuv51gUpdNtmNu DssGcs5BGBiWnIV3wlLdc6wadQvSIfMEATCtl0uJzVqbaIeBPcE4r2cYRp0GiSgrSqhLuRGM 9grYGvkivpKAXGPd6tWN/Wo03/6OS4PxhEYW/0m8X+hb/KtnW/zNeiF7N6uiWaLHsQEKIesV 7A+HOCiY/EuKZEzfO1i/gyjQllHePogiR+VkXPdcovEBPBx04xGsN2Ie7WLMeWWz554D6hWz r1ehzLJmXzVyRkCsBC0nuhTpYSjx3eE8m/ndeFa8iJaJnEJxXS3mxrMoIou1tqwllhuWs3iW rXu5lhDEmoPpy2Doau2snSwbRGUzWxSwqgdL7RV1h/0Gnp3sxbO7b6lGPDt5yi1VvYJ/Fl3V cielswcSb7ZYTDt0DlOImeSIHI/fpyWGjfhme9mF7wI/Abd9PI5x9sPvJsdiWLRyziCYXlB/ 2tlqOV3M7YpuxlmEG0amv5yiBSERZ2LVRdXWNX3PRfVhtfPJWNBWR2PaZtYiVeYwY4PBfdU0 RqQZlki2FyEW1URMy0Cxg6KjGtNy+WIwKStL41kxLIqYvg3P4RsEYL+0ZhpUXxUZdvepyFeu 09CwuVJKvNrO11zkQpuZFFGN/gBm9a3AmXU8cS2GHfgZojDgCxxH8hxdsLaLjunVsCCLdY2h lgPKQpQEFzN0MbYabDMLzkKILPiUxRQg/Wrcgrwsn6Lpw32+fQt7jFF3OwkWOTDA0vYt63ez yoqESsW2ijJYFFHGSlUglfJdLioCkz0UgZcUqh066EARaFm4U86/T9IDfKyZUyO+4ryF6Qew U+CwT6GSUSfB96G3qxykAcjM0S7ZRZZLHXJsexefImLZV4qJx0JJT4B1QzUKhWrOpwf1bwo8 6oUMDnNOGu0cuQZmhiCYq56jp9W5VFMjWDjh4lsyXXb1apIAYsOayyV071iGRYaFAsmrdkI1 OZMssN+khpcowet6zvkxdD5JAIyzaBMaYgIx/bkOX5zLvBo2XY6d7EvesAO8cxl5Y5m5D1Ht hGo+jdRwQod3ngCbF9250JxAFjdmnDcwmnCqQCPGhrteAdGlHcYEtlPsUR2GNyu0NreYGsE1 Y7FPQCuyLOpkAUa5DKMxDP6qK9sL3i7S3YadfjK6Vs2FUrKVwpoNcmrVTBI1Dtq+hkLB5w3O esge42cHHnfg7Mi6FleayylLDE3LHAE0/TlCa8Uy1I0purhWFDd0OnzCHSuMfAbq13tZXauW s9QcPhKTcXK1U4yMtKuutlE5z2KBwWGsA4Z0haxiYwyENd5OC1lzkRkZRKkEorGunuOUBseu Vxj5VGzY6SfDsWsssBhE8C2ToVBGAyZtm8+RmDZO3RZ6ge8xigJyS0zuwFo+0B5lO2s6trMF Ugj5jHSx7UQyVlsFiFlgvhWHduz2bYv1QbyLZ4JAVhGnxlgx7mjmYpeUk2ecENLpwnS6mmP2 Cjsh2GHHqBmVLHsJxkX2yoaF8yKHBWO9ISTUk5+Ml4ktCYK/hQvoyOu58VTs07DBuF2+FLPB ETNv9weJ2eEpocBrgesdGIqoTvjxirB6gmV+ja6nT1e/TP2REwvWt8UCHsWapOXqk1/JPcxc qrBIwrvwq5eCXwcVX/ikUOMRO5+jgblchF1RjxcdSpAJVOwxkotcqHCJzkgLZYHboY6dIwsM lQswykWhHepiUurL2WG3n4qYDYeDUjXgECfL+LFUgzjxtDUJ33JGGOJnFx4HpDr+mcHkS82Z LYpPDg1SrKUZZCGLCysIQW/MErUNFUu5a8fblxKy7IFrfLmNy0wnBYtciaPRRAU36q64Nc3Q YkumxUqBa0dUcdGDJWeHMDG8PKI605ezOjvqNnDtP97c3c11G1E4LkG4VhcT3bFE7Wjqwvgu FA3QW51j2htSq2Tco0hbDlM4+Ae10JRV5o/GaNpBVmlx4OHmG5S44ss5bVDxpaUtS0bO5xUe tXgb4IIEGmfsQegfwLiC4gIX5gPUybq4QOGezSEsMKquF+uJStUsygyyig7SpGucHlVzTfuh Yr/PT0XWRv0VFY27O4yJ4AKdRqZg82Y+SDcYHcEipsFXgemdyAGrPRSOaFSy61GU2bqBwKv5 BDMnd9t2OSV/Vo44zB27h5ENg0X0rZWjhbFFqIaFKVSLmqwuaLKZ7XiaLJ5rHKJgJR085vgW QR+Mnhw+xF7cpGOXF3+hheOKLf7NzIojD44ggafXrWRsHxLrdU2HikRb3HDYZeSoz09FwgYn msyo8TLxSbw60mNHswbTYHWMnR5WDYeBRpNEo5JXjyJaMRwjNLk45G5iajyw5oyF2xBTX+D+ JsbknoqtgJt43c9gURKkV+uFLQXpCMRtZ203Z67hG1N2K7YGWDAep2DTHgTkhWq5SAHw4wRM 2rR4G6mQH+dSsU/rwJXlqR85jsOmw3nDpek8WqInHLcSchxfBZ5f6LCFfCTECmbNh60Gtyn8 FoxL42ErlcqHLQe98Pava8EVxwkTeeilDJNrmbW8swvhqQsErig4L2Uhq8svHdPKhe6wLKBt 3eGtFuRzlKnDTl2i5i3j8UvkB256dRHypOvu5DCYhGq8mHkSsw73f5+16UsJ1SPUBKz2Mdin USlQj7L5c1HK3olrUhSWupiRZLLN3yVqu8ADggNOlLq6ULBahYhN94eZkEfb+xtcRGtEuLGg qZawKlcgc3kolqwKDPNOYOigu6oqxypt/UHxYk2NYNohdKOykvU1aarjXp1X/9HuRNEGUGiq fuJ6ErMOFYDxxAO6d+Cnh1oOV+OqJcMeRQPo+CeyZ9BEcYafYwbiyMLso7radfjWsfVn3XRY LcnW5wRZBwfuyS5fanyvsKqxZEKk89B53COd3159vDq/el84VMu/SRFxg7D3H4nOFriuXmHC 459GToJoF7PoRQ7rLznKqUz8KceuteJNuWnDs8/DrS0oXpHef61Ovjs5/e6zz6pXip040Zg+ q9bVCSHYwNr5rDo5I/43/Lr9QGhq+PmX7ebq+t1nk/+s3v5biKnXoFuOTexcuEvh5Ip3tFyo EiwJ9XPuUlm5pqFr/1H0/fkkwVJdrbUO89260xpH0V/h/02LMqnPG6KiBCOEWjq/YEusRKxL 7JeIL4iLToVVSDdGHGVwPJOqtBuGjkg7VhcHJys26NZ4xfwIx/PJrnlEPCxXnBsf8iPEzXrP zAHjnuSGGm22CDS82+c13scdh2nt4mYjRPZJtXBXl3Eb947W982dKId9Rijahd0x2p6uWY3G LjN2R1wJvi2aLMZHRQ0LARit5Rcu1UoWN+jcoaooxnimUD0dAEYVn7L8R0N6YPl77Egjp1o2 fAu5xpUg5lgYxY7YMnogKveevlOUuYmGGHHOTRO+jKw/2Bp/xBA7kvv+l9Pb0+9Pb/YKNB91 Kyrcl1ZijmlS67rG27glv8Zw0m+vTy9vzk+JH1H4yGPRMqOuo5zbJWwbBSstCWyzq1Zuj4dz 7uG7Egb2iZ0ZDeGB2UvedxzJ2JTRODDxDmc/kvi9QPvdEeCjATyEA8vqAas1LZeOq/WI7mU6 i14g9p59PzB5y+uBf+8jUy/Sehx58iGth87890z+vrweR0ZEzOtBUg3MZcT3jBb+jrwex0aF 5fVgQ8Mghkq7XAzXQj+vh/lTi2HK/DX+NeK/B3gA56XZeoFj7H1TH+f1OPLMQ14PVt4LzjxH B+7I66GYRwTfcOXvn3thhO+43nf3inS3vB70+rDA68u6+wLgRp2L2DGFRrjLMfViF8zzeuDQ qet1KxfzcxBsrKATtLdJhrAtr+a4xaXMHvgZwz5dgx6TMntARxRFvMK6mNpD7qIEnuHFQFuc P8k1Ite4AKEtz7CRQBjHYm6PBIpZOnCGjW0T/mB5O3Ci9hHQksPWPlI1Fcv5fFLjPuWJD8AB jCkci+Wu6GtKO3X+GiE96hS7KY7WQ5wdoTj78JkFt+3Za1zXO3tNOT7EZ0Pe7m2s/W19bz7T lGN+j0KNxQk/JNooYFBB/gi4rCQUe7qOTJWY9SORTlFplghkkigsq2nIDeJskBrOnOK9J4hc PTlMYNBzEFqkJ+RwUMrYkVr2FB6pd9qJWT3SGDk5OyiultRwmql3ngBP4K4H6czFinJ97Mdd T9BVd3OXrm2V6+MlpZhn9Uio4yhV5NsweQUpY6aPVCom7YABXYRliAsGiBmyfRQCRE3p5IE0 y1wQG3c+mfgAHCBP4ph6I4EwtMWEHwkUs3ekdmN+j4K5YonMWzSCRxwpHpy1vNE80dixA/Ai fqLgQri5gl5skJ70I7LWUCMZbJDHElwp6cdLCi5cqy3hh6NORo8AYo+KW6HspSHlRwJ59o5M k5jhI5FNDuHmipM2JqSNgzL5Y8OZP+J4EoB2iDpV1o8EOp941o8E4hrVsn7khiOgZKwISkNk PAE0ydMo0onYsvLO08yfwFoPSS3P/PHbSq2U+eMlpVaZaiOqXiMQpo2Y9yMhOKbwKKRWhmSp lWCJwGrK8oEUUssbdz6Z+AAcgNTyJBwJREMxT0cCeSKPxF6e7CP1Tjsx2UfBXgnkkssbzpMt co8IRz3JdZAGoit1ZWXg8IBBjZbYIxRcrBP1mmFi2CC8HsWVT/w08Yxxa5x/I8AJabD0DF5i LcFL+ghvwLJSkPUx9gH2ZKuTerj3WLUYPJkD7nBzRXZlCD3hvoAVkB9ceDDYFUNAZYyWw/ip XQvhsloTRB7+nhJOeP0I8C6o4RASESjc0dNaoDPgMThTU5bXVL5eBrAdLYwigdLIYyPpO87E pAN+ejEtBdsJaSlw68SnA7WL2Vq2Oax+CUSgxBLzH2cH1FNFgXEsIk3B2iCzOfavBFFL+DHM FdKbSslHYKlEFUBCSxkSu6NehNHWAvcoLJBFS+QtmeN4oBGoP1qKEPWXRpVK+VxCQ5M8k9Qb VtODWEIKdMxCMWkb2cXtzjnmpWgbfCZxvfO8FG0j3y3dTFhqCv+EwDE7RYSkhBS5gZCNwrtQ DYfoukVdhPwWFoeJgT72waDk9c63qoTsGAnk6TPwZohthCwVuZegipCChyZqKFAwgYEK0lGm 7pTIIpGXpcqOKKJEthBRMFTPCeZKMEFwzA9sEdkpQRJZilKJCVJLibypv4IJ0qhSKR94asgB oTfE2JOYIOakcNzBFgECBSITxEQRTnXSYVqiCv+GQDHdhEM8F0VsgVUeclN4H9RIkEjB1EKk eu4ks0EYR+YMT6eR2GAwlVJtOEhWJqlE2N2UiAyEZQKZGDafoSeJYY8gtBBGZBAtx5hCh+h8 GEIKHeKhgZbpmQNC/OY4oJtqTBzgM0YPEvOEbArRT1APr5EGBzj8sPQjtooTvO7QAIT4Rq7T DKA4wBhP6CAsKx5PmEAeGJgazoDQN82E2ME8QDXDFqncFcpWrUNODFP0OaaeFdMKXp5Ou4gJ v+/iakHWTfy/yUSwnrGsuWwb3XalO8R8/zh5+P4x30mmurp/bOF0vFzwx2RDaxGX2miJWsXV Bc9Xh0kLDjDKsYfghSRU57oPw/Au7QiZoj0ZUNmxe3Vjv8nzYGwvGl3p+XX+I14yj6UuH/Uk xaP2RCZGB/zYAHkiEwcddP/og/UA5gJtBcoDigy9YxQ5ejnUDMn1HOeD3fOPOUnkza6YGU2f NaAVmafPUrRsJyjP/UwmXqv0P0zdJM7LXJsTwOy8NU9cSyqTeONuXCtuxJubeHiOdAouENeC JTQDYMTrcYoUlzHKVSsTKu6/Lf4RBpPrT6eIe0QPV2oFjHIFLLVX1B32G7iWVCZpkmkZjrj2 wWtz1MB4bf6Yb9e4JzMuohNJA1rjcW8OmSGVCWnXSeyGLs8SP4hrfbCJayPKQdsulBcoCujt o3KMtqdH2O6af8pmQjZf0i5wOGCjitlMUMfQi2AMdqqYziTsjsHzP+Yz8Yrp1vyZ/h73cC5X +fjCEtyr7GEYErSj4tvDzSr5nYRaU/45XnLTTBFC5cW50vUFQ2HjtsA4d8miLGCG7gRjfyTf ZWhP3jGqO+z3U+FcT2ySOTcmNoFxCd3qJTYZk/7eReZ86xO3JG8J4bsQFJDbR+QYaUfmW89u whlVriWSYzG5ScODIHilivCe3aQhYWU/u4lXg5gpc1RCUhKZzxW3nYIlWw6eafMX04IvgBkW GTTA0qbudUtlwmHUzeUQUjUrstARimK+AaKxfPu7f7y0TTlOfEcU2ZTjROLWYc8Stz5305lM 3xLKH0JRxuSIWqWOcKhHbeKmtK/JOOOpTuL+r+nDrew7xexTYpOkE3g9SrneEH1quWpJHT2D bZNfnklxojlwlUOJXyiLYzM3WZthJDdam0agQy+vLqjcLlioS4tFudieYErjwIW46pJOzDyx ch+pXIxXSJNM2BwJMFcXX0K3bVbiDajkZyodFAOIsGQOPNoqRoeNx8eahO1o5jJj7cJQwrhj CCPRkFol2x7qVztCtFR71D4Oc3Kihf2UWbGcPmhgWTN/EmDiWleUEqhf8YWVhFYJNlbEFMiv U1or6wsTJglpgw+n/D+1LZB0o67Z5ws/UVXFaYCzlvuTavsIsOxjGuouFxzF5E8afEJHvX4q GkIwvljmc3MJBR0Wtpgs5Afx7EixDci2EOyEbFzdxsgRXns4HJKpZNijyNkaOwk+VrwJQ7Qx 9mhNHJ5Q2GJ2BaUQWoH8BaLDKFf/oZ68Q62eKGnL+kXkrE5eS/xQjV9x0DZ+5czfiDVhL+wL UlVbBZlisg/sOrMckjqg1QuuJFSuJZMdK2sEs7rgQStW5YQDgw27DQxLcPho9eM0R1pOlrE8 aMyH+bcQs8mmk00IT+NZH6zL2d0Y34WiAXrxQx/XLdn2OHJ2hnKIn6gCWpBGKYZRj0bMyLCo iw4dxshbiN1UMI6UIWJsUPOFBW3ec7g+JguHODfD8Guec/fMUPPOP4YhOGLdslwJ8/3Pbi0s Qjz3kct9GpptUgeUn4plm3ZI7r9ZvspO/ixp6zPPWCs1hBJDriFkDHldhEDC+JGPY2mj55ZL HJymX8kEyK2X9LukIMRChX6QIC96HMM2wK1b2LvJ9CemZcGhyIXtiQjMcORnCri8ljJYZgXU m6XtdqjEFjISYZTTFCPMT3dZ3qpur9tPRz8Il7KFuE2nsafJ26GO4FMHbWxTCePh/NvHkLDb x+QIazli5ChKAmog1yodSoJeKjNTqA4jbL6FsMWqwMWcZK1FLtj+GeqplNVzJUHRYpP9nuQc 77No2ffFTsBdC9YP5zAUzpE3b4wdMD/ez79kj4hhJP+UILhd2eOd3569KwI7MNMRcfR4LBkO YmTufyiWTFccZF14MJTs+xhK1lYn/7q93PKeYIoY++Knz7i7qU6217/cfji7fP9ZlWLH0LpC 1FqKbHt8NCSaw9djTjYZFmVHUgh/7XViWCCw7cuz91MPV6v1C+dwwtne5iC2/3483G1Shrv9 jzf3001quYiJ++/Hpvw/n8XmTj9+vL463XzY5tC6K297c3X5a3qJMUbbXRRPgEasWSKjR7CG rZ4kWhB/hmul/UxYwwuHZKbx4Vc05oQ1e3D1FU7l1Uki2A3vwBrFAvzs5uZuaxiwYm8gMZpB Ln56zjyJfCSK8KNY4Opa07Sy1zwfc3275U3X8P3u7rpo2HCZuAIHiPvmF73BHpgfh+qlEig6 V4S1AVd89Yc/qvMGTlCk40SRjjcfrnhIJwBvP5zyzqr/ZmriWWIzA+RXPUcbfp7lYmcX4nLa nJxAvZu7izgndXIrwlp3F6dnl7f8v2D8Z00Rd0K8bRbjKcJb769P9WwrzLtQLKfx3bw6udlc n328TX+Ic5XAPmFsvHtrsZ+neoE0VP357PaD/abEuzP+3HSTkx+21/YYbSjS45LU9BVl+TvV CLM6Dkktto8rnBFJN1cXLBARxuJVz88ut77Q+rNi0e4zlBhxMeYu2RgaOf5wh4TciU8ylcG0 yJy7a2MGTEV6cRo25wcMFtbIz2ElAAIt4W9//uLt66///KUtGeDvth/PKUwI7i/hyd/YwmZ7 eXp9diW5Y01+Zeynxk9vXu03r0dXjYVW1tyHjFAMT5usUqbHE2MbVrh+2zT047KIHH71s21B ocRGC6CmAFIt/IqvzDIRVTTutF+EQZ9tigWnv974C8R7Em7C7jomnIs9WY0XC1b0aIJ3NzY/ Lr40P1GQn5MTJ459ViesrNurzdW5/Rm5YIvb6mz1YratG/scCHFra/Ph9PK9etlzKlIUHpgK c+Imtw2O1CUP6s3uV9z+Es0dWUufUAAO+v7cZK/9VVqCyW1eHDZpTqEJT3977Zu7jda+VRWZ Y6Uee/5+VCARcSKpeZypYo1cEiAwnuq767P+3qPBk460z44GYzcKuyiRpyoyOTnd3AY5TeS5 VpFX1VwNlKYSNgBr9912c6btMJdBxJRh8PdvWveKlcSdWHiXcmAdcefZ5eb87l1YgTWEtVWH QaCgcCf45vwMyTxlcPYpVYd1qr+EudvmpXo92nvx3Ms+ZHtcmli+UWxxo+lo+CaqnUGjWnTD i+euJFoRmDZRySoYlcIvb2NAJRyRJnC6rcYoQK38xysIJczY19dsT8eZJO5NKyXQHU1yc3V3 fbPVAul4rdWEimQmP2+2t3q4jw8okbcG8ZT9XSpC+JW3E9Wz7UQ/rrc/3p1dww5qkDZcZ9Hf jDX0o4+Xo0xW3jVrHJfHk81LS/HPJ5vTS8ZmP29jxLeJVP3tw9n7D1sWIcrnyatzl0GR7CZZ VcpGfxZkMqlppJ5oH7EmS+Z1WBC4x9oIuZrDI5gLsRFVw95187+sX8RG5mDC/NnMLs+lK5JK xjaLMKuf2A0lXQwaN5dYIO0mqhxnuJQWeXFxd3m2sePTPqR7VLYo/GaGe8dYttDXx/NtOKdh aJYGm84fGrWiDU+iejX8O0S2P6etLXzaROwPJam0x+S5yH0kCD6krxJMSathr1F2ScIqsY7P FnWy63Lk5oVClHj9D3dwN/QqO7plrSTQiowiKPzKlYizSF1hMsV1kMbxDzQr2Lyw3YaGcCgK TtZ4wC5mFpVpbvjxczQ8XZHhQ8K/sAjo9UMCBpRtiEM7opsfaw1YFwl6jnC2Cg8DhXFh4s4w 5dzkroRecWJRmDY29yXvwsm3k+f0FIEQIPhwYv7HJMUll8MsJXyctDc0QgP1MoxwSZJYpnYs Dkm5MVJvDlFvcUgOKkatZigQZjZJGC/8lPfHI1cZGY/EWYTvhZyzFBshY4zCC8xjC3lgv+Rm LFct/4ORIlbp0QWsxW8LdtGbfbHeUu9u4HfM3/mFZ6v3pM84plinP0L3Xw1M8gTGCc3xdqYY J03YGSnYjB23PGKEGY1XQrBcZhjxB2QT4morkQjeJ6cPlHWu0UUXECZWUDvCCn7whhKHxO7E bRmmCyGyuuaWFG+hXHG5P4cUfBNBDMpXAPEPsaEEibM7mHOkc/QQCYLiNwum5Bx7NdYIrV8F 59gf4BwCckKVwCmRMCppbKWonRXsnjhHF3OBc/Sr4Bw+eQ9N3Ox1+iN0zjlE0mie/XH5d59h ntamtyHjPXlbFQei1Gh60o6rZPxk4noL09UaBCt67EHWST715KwijHK1MGNvN0Q0ydeeSwG9 lmZJbpNobkvRPMHY+wxhTGIosrpCGaLDlBBrhyBWinKok0ahJZVgZHzDO8U4Gpdd3NgRPAQI BK5HuksSB4itDXlx4oTmMFZLmqO3lCFx1lpTqRT6E1l2eeLDG0qC3x6FzIIflGuZxUGlUmng 1lCaCRRJvaWgkf2FMYFiEY8XilPjt0zfLCeL2pAg1oMetuHZ66X+pcVCOIcEsoMgRKqOg6LT RyXtt97TprhXMwFvbTqbEYuSJb8Ny6rEcYnWvqCeKorjsFbmN5KHGETwISsKpSsOK7aV0PjE thK6tNq5h9DKVOI2iR5cYW1hJkQPKcEbJLZAYwFGxl2sFqm3kEYX12daBZbrGpeBcmXwwgAO T9psAhOy3aNALtBotB+EleEQcbgztMMyz6eW4iqgJeXWpr9yZRDTgdxFJcot+b6V+yt2tzSq VMqXRmppNL8nbTdhPZQEXrERl2tjSZhMXhv+VayNCHK+i9WN2GrX18aK6/5ybYSHz8NrwbaF saBtbfAH57tYxUgb2gqOLPZsliISlQeHhG5yiNmpF1cohgjgJyg0yF2tdMU9sNXfowXjL8gV ax6FWCzB7AEPhC9uWqx+CV/5YfF6GrdMSqXVJogJXyRHg6gpSikmxOaYWkqQOGuxWIJxxsBV D+mbWnJhn/uLENVLo/JSeeTeUoak/p4ifldcOBsmtSNzPYqlTeJX27HFkWKmwzMHlZX9Tb/g GOUoldy1PwRKeB2+QmsqZjTShCnrdZIIsQb9i9Lem4M0GJqK1cPIoPezBLCpNol1mPACRwoJ OtLVBUGHA4w0kNGUV5hapIHYHwhQQbjhTBxrFYML5y/nMj/HlJyHYYoYQxKGJxrH0yO84Zzn 50lxgvOLwzJP5Zacy2J/xrEJRtQhjF225MI09xchJedFYYounWbjLWUI4SSEaECUAznPCGFo 09nHOU9R+z3Oc6UucJ9/FRwYQQQHitdS/fBlh6z4F7xGSy50QRkbjkI0cSHSMslVLYllrJ5G 7Fx4yI6dmS/OOTHi4Tv2bvxJHsbDHDlO17xMg8DSOxn8iCK4p/+Kak8XwXojEYEZ9597deB0 pvORsBgcBvOgk/JCvFgfxzNWHhCl0TV2JQBVJ+YAMaZm98eTMsG4H43zzC05JM0cps4w0ieR IY2lFlsqBDq8rP4SRIshjirB0shbLgRjSygBerqk6O/AxSD7mQ5cCJSIzfANdnnYWbv9kksI Kaa4ByKzeFzXfsGuertFktj+EAhiVSSDC+qopH2jUGkZeLUgwNWeflHKOwryT9YmvBuoogXR ay/s9E/SgsW7LTkrOC4hBu3VOtNgnIOiFevQpdUqF69ZVvTkOecxdrBnN6lRuijIzQaVYy7j nsl7zieEWODYGs2AygIAm8qh0vQeGeaewBMYYtQ9lgJNZtS9m/sOQZSxmuyS+CCHQxXPEeC7 w5Py0qKe2mQYadBT43E8yE9cRM21ubS3EvKJr6I5no6MnDgYIyZm5LpLZtkMmqSa8obSu2zY WGUYIci7Dg+yZBh7FXn6EIc1toOlnFqJ8B/C0GRj3V65AsYuyjGYumh52IhVbNitBgNwVvMi AUuYThTPeJFgrCHpDuxG55XSJqPTMLudsFg3l8vtAZOCigsudTUqay52CyhVjcEsI9TeZ97G m6CwTacV7UbuQ7hLK3uFNJFxiwUobzd9IjQttpdgwt5vW/87GORRgzxvLCh63JGeZ29IHyEp 49yRNBlXjX7WO3FxMA6ghgkgvQ2DA71imwwvmEj5FFeu4EqzGaUiwIbVkoP1mOnYRPF5HfFm YvWChQO/lqz+FFnUcUVhL+V2wYIsYnLxgHMisok1Sqxk+ru+y/J8h/3iUESST6e/TbBwBjK9 d5WTBAROtxipMCQh6cL1jmIX7hctGn8QShqq+pgjDkvGKmBhNdOgkhHgn6ljQVrhBcy5rSxX wLBMz/AWiKvZmht2GwbjnbisknaQYDQY5FweYJRzvRa9rgbtvZQwH0ySc0UXgZdobl/R4h66 D4iWHEe/v6UQSyrklNJwQQIOfrucYWijXeY+IeJjc/k2nqfQuwMdu7CWqJCWG0srz3ry+o35 P1r2gEN4X9s0xgW4XW9ThxUXZ59W3FyB9P53VlivfFpxmdpxh7C0Yj69tJFkLOSNZFSVRg+U HNoQbJxJyjnlsiS0cae/ax7Mq/iOkmOCvCRIad+rUl7kKJQcNYe07SrlR5O16KmKThBIOk9F vTULJG9y93sevZH7PIYySmSXg3ZjXMN/EEq8O95xL0x4of4JN+jsLpjNeEHDPQCqnRks9+pT JOr1iShb8X40nRPnGHwQcn9fXd7cXuOOhy/prTkivf1beIBD3O3TMh0ifQ0nOepQfMYscRUO s+TAY54Pudfo5zCcZUgBu9csR5jFxK1pcmwLs5x8/mXu7yVmaVa1NTdSv+UsMaLr4RWsm7/R LLmQ4XEUFhobVPTvzmhV7nk53xyBZ3T8pqOX7oZnYtSNDl8vOx3O/fOWfvR+0Qhvr82x7jh4 42jMA7TscMjB4TL7w8eP+MDawsb35ghU4qCjab34rJBW9EN+ComS0bRe/+mr48wG74IVMbLo kThoDZHnMmrU2767luRi32qjb+6RzD7NicquyBeYeGWgHlmClLJGBmr+gLEGA5tu3zqvNrDe SFt6jsSWOUobxA5mdTx8I3/qX6p/t+ARX/TEjYT7dryoClNavGEuDIO6UsbkLit5MsHFS2ZZ xGWoK6+dC3Oel8omP28pQ2J/2TDItSAaHNle6c8Ng27M8f6yeac0DOZSwQxYtpQMg6m/J6hP wfCmC2rppTLCKXlAaRQ0FwQzCoYL6mTdsz+Y3S9UiUbBeNkd/oBTZWkQdGNTMDL6V2EYTAb3 MJRYPXyYr8bTDnqB8eMse6bLoNofojzbQkojcqy5afVp7dUEtaJ+BQHND64JyURs8oavlAbw 0GHKKCDaWIvBRiA9gU/P9XFoixhyJR2sjSMN0ox7xSjt+5nDtOe8jzvM+Zzb6mKY9v3MYc6J OoQYPOzmRJrzgwNE2GqeQ3rzb8rNonVbR9rBntMsa6fAQhwtQuOZzeJgxD9YZWF7/eSH7MZ+ nHJL+MHcKlP0cZvsFlzYPdzkS5iMMBKTaxFH6mRRloUuwYKVBjtFzYUNWbxVLlluCliyI+yG kYFugXt9tEZbc6mLVBXTOAmyJUuTVZixJFCyVBFxSypplUoGrQxKdqqdoHDfke3QufVQ7x9v KzIh5fYhtk775hVxcW/N8IhNxBgdvzFs2PehBmnYfvItGU3cljREA/3W8W6oxJWjvcCx0as0 9vfsSNVT7UjaCnkOiweMMIBEQ3TATLa/4B5LhK7/HUz0yrvl1nk5m5HF331+BI272XbMo1KE DrTokGQpW6BFUVHQLdBGUdyZCntYv7zP40XWPi+/46zMqcotquAmw8I612Jlya94FLW39jMs LeCiXAHjKFVzU16s/dxFKobtGo81rhjQVNyShwaUYWn14xdB1IOdEexyivFlUOLMnSB640yX bYe59U9l9WOcy9ZheMW+dQ0lPrFYh3glpd9PWPUVq37iq77AbsRbwPgASY7uArcDSjG44yx7 rF2TOU8w5mUdUYD9yS+g0JZ4kScv+355Xy7Oxr1lr1RWBStq2e/k4uGqCObjQ5f9ctFf9oFk wQxu5MS3qVz2vfI+j0MVkyBc5E/jgsbPQk87PwR/Bx3a4Y3gLhadmvPVhcymjz26nFJTRCsq 3i+DR5eDuRX9DEVjrrxfoygyT00Bf540U6KoiKsgAMyDyQi60l/GoeAGvomh4IrNUrEQthlC WQEQ2Op/6YcAhtI5Uq9FTfXALrVDtRye9SNWAmFjnJHj8WnjqcVFfTTPlJHJewfqawIKYP7u BFvOd5/1AsceHRmng0HWC0wxFrev3HCkfNsRv6hI2eoVZwGCK4lPJKL3FalsiOE7vVacvf3B UhoYNIVlGlxhmQbOoZyKm7O/iRT8baJ5OOznD2cWWG0Fbk/P/07pfRAfDOiT8fQSv8l3T4fP Eb9lxmqwPMZAw/UisApxK4pJ7YXeWjGLQ7VfPPUtq/GrXm04T5GDFmRLsKdaicGN6uOHu0vi q68uT8/Pbg8KBH9ogvh2k5tyPD/i8nOopYKcFePPaK6v7t5/EC3Dp9FYP6EGPBXAGTcY9uJr 51aeoM2z95cWLx/qX3lL39PQ/hR7IIhfz5USFboj4vsjE1Jw/s8k5bhTVCzP2SuC3yYUvyzM suNJgpMiDn6i+WmiVoGJhkQtqv366saSRuj3DZzJFdrJT8gNcas1Y2HtVk+EJLhYJcsQziNN mxtu+RrvmLaHf1++0wvRSCxE1E1IJmG/FVgcwTHU1sAQhEhUE2KbD2fM3vIaxJhiSwyihpS/ JDTJ9CxLh1UO79ubMAx/n9Dl5XuFJofSF9vbD1e0chSS4zLScvO1Y+6BnIQqnWwt0QpraLsx ghHR1wvLZWA8VQMsZpSAUirigiX8zTBlcLFrqHDz4fQ6JN9R+dPN9dVNX/gQDLBb6sfbu/uF Dw55YBMB6sInZRSK6WguuNUgu8crHFZ827GfH+7YkhzuCYP8O+ZvmaiKZ6lQ/bcfjGrWgKRQ jBTXn0Iw/D60ijvZ/XNS0ChGljyncOVLFqEg6HgxAfbcMGixH/EKJyHtjcBFiSxhrEyRRMQa CPynOuQ6uDs9J4I8tvY9SaKC4LWCzAxE7TOzR6lFcFGHbXoHF/7tzoSEbb/9pR+25DI8HBma RvN4Dq8xnlscZemIlGL3pqPSrilNYPhfun41txwnxRi4ULmPf+/VWlodouZYdEZjSMT+gr64 wD15q/+Si+Bb9Y08+dq+q5O/xP/+3/2Gci9xWhzS1nrTwIcyCNY/eV1eot0309j8WC1V9oYZ d3T3NQ9b+4z+rBkx4y9NaeHHv8Yp/r/BlP/wWWXLEY7FFGBU0n+tHarRTmKQB4hzL0b0OAF2 03uHfPLNszDCEsABDC+mexAORkRbnhO3GeEvazygpeqYgiQ2c//+U5rxPgnaOH3OZdXFse8t D2GPFVcZy9aI+nsGiIIchYvy7nFdbO188dbuFh9mkB1qFs99yaGepaBrVjz3kixPS+Gt6cm6 JveOmX+rBB2lVNOf/1r/p/2Jnx9C1hZBpQ9TXJu6dEcvcX76CxuybdQ873Zyes0ufrvd7JnO 4172kTc4zy02lR6nWs+6HcmSbmO6LmW2sGF2+pU1+UuGaKCQlEV/jNo/m66+Wkki+xVwYz+z xLfPzVXICabyJu0NKlzYj4iLybOWSpprx7tEa3IHDIQHvHy9vbgKeT4wuYhgmy3594wIAmzY ekQQ/f7u5C/fvLZcjmxZkxOjj//t+u4yZgO0oldR847alqltauJmuykatzQwr56ZKCnPccX1 /7rdsX0pvaBpvGT9zLke+fkmDUd/ePNhGyarj+9O3rz5P0yWXVeff+2Mc/UzbM36Fbdz/URd eaekhkr0YhVsbur4oLU/Xu15eroWQFyz/nCKKk/QnumHtXkSyKV49Jj3yfR4HcNiDkf9pTzX Wb4gqxnYUT9jKiEtPWspKKFqJB/u4p/C8rD6THTy9t/c7exhQbNDrOWJEtkyW7WLMa9ebE8v NZ9G24lpVfYLpoWHg62DW3hGqbSFpjV+f2YnTVLQVidak1b+a+gmjrSPgk4BcEEeznD+2Wfp 3asu5ukQa0qS3R1yE7XbRgH7vNv+qkMlJ2Z8RYLM4Sikk975eRg3H0GWWImgEnOSDujgj74a rRppoM7eCSFqkD+G7G/6dWtJLUMbOvnYn42PjzRbOUFIurrGn3YJZAf94SDmY2Vl6QPqRWER MyIZ9OYjOdV+1dEA73AmYDlD43ytQEwnRAMsvbOPd+dKixSbPCjv0+MbRcdboWSOHvNjzlmo k9MNvpdbE/w6hgVi2VGr1I6ZECexyQnCwkS9Kp7d3mzPRQwrTZIyy9JpBzajTIDTyq1l2DwS oYgjZQHsSMTmnESIr0RB4iQu7mHN751aUbQzbCsYRmo/e8QySGxSDciwaS0FBNmf0864z9T2 oJeChdHgxgSLXBV9ZDnIg31lYLX8XPb1bnt6rjVlH57olKZO3itzsZ1V7U+9ORokMKRavN7e Xg/tDcfaBfQeBIGScsUd7AJRvsvyc3FFWlbtRGarGbKfSmRelTXnD0rMZsae03fvzoKBzmpT 8t3VxvyKvbW/ztkI96HT45IRGxfeyBhoRrLCxKGRQTabAtcscEECrvXr5u575a81a0b5J1j3 kj3h1+A2KYKqtGwjl9tAYCWtjRnMvMl9pvU4+5FwbNrxevOY/a63m+1Z3w6lkWGcLQcbNBUB LZ0rfybTnSFDeUjZMmTM+y/kY0iZbNWjCmC/ezQ0SInAI82RMxiP742n+POZqVB4UVQnRhQz AbMhX1+9u0O1ZL72t2hGplQQHBQjh/Bd1LytCILQS18EXTkYpdPOYKXC1UVI6pjm9jS7QzwX oNxyVcHVi7NlMFqdfLy7/nhFRlhEvPvg6ta6VUaVmUU14I3DcsKCoqd2CN8jvNTcEGKiOoxo ZF0vEtX9iNO5H/VkYctfo0aH0QAk4eE6mUtS0n9EMqAehs325Iv/Og0HKR9nDn0Zuyz0B5CO nsMRaDmbt1FNr2RClbcR0eALnBRIk99zNHpKi/VM7kFHa20BPZ7bGg/IaZI4xqo1vADTd4d3 VHHfeMB8cxuab9HmmhcrDaPPbDdRpmhbAukZbVu+RGuhRVshoJdDCiz+DKpbi2mkR2sx8tCR xmdUP8bYSJJkzCh6h99P559QP/CO/X4m31gbiRJxfDv4pc/i/rVLRvRiltAxF5zkKr1ZFMRp FlJ/McND9Y1bHKrXdnaNIstiiLyfQ2XjkiezhHNcOoKelHt9q8yzOpar45ho1aXk/uI46jY5 IAzvdG0ByMbxRL8uzi7H6Aq3ZLRAxBL5aEdYfe2nhCP0JAdELOH0BCJNEtqOmJGJheT31Zuv //DN76s/fvEF/377pze/r6ZTdPzDu4+KVcapfJxWOGgY96j7oG3k7v/39cfNP/++0n9sS/78 S15filvgPyWIb4q8MnH+yz/HvdvssHm7PZTBCD9aEJYQ6D0a1vstRh8Q8PB4UMt/OHuv8W/R uXOFqG2MJxArxBnESJH9lsiIXzn5kRoDI/d9TMTQ7sLxtgpH1UjQ56xLYmYWvB0edJbhwvyT rL39uSVdJJAnfQ7FDpwzCVs1qkmxUfVVE4usQcm615VnVr1iFfNPdOaJSNtxZ+IWZDQ9kp/S qWuKydiBOViWALswwxiMLw+j75nH9Ynpw3M9W0k7JqPpJz22uB65Z3Q7DIZusBdplRp2NLh0 3H7VyrnhlJdb9JADZyt9+lEie0cYeHCKNJidIjVNlQ23nNagN9W/KtxnVo+frmreJV+RanR8 9AhuAHPyIoaTx3yJKY1VjwkDu4kdPeyPZrK0P8oCA4irfYJnuWYNtw32p+LYa5UiVuy3d0Tz OuIU80o35UNq7TEv3jNfdZgPnFzpqnyXOcFMs3ZdH96e0c9sB0t//S4d319dYZIwLES/AH9t yBypgoXpq8veZGBmLTz9u78w9piMgpXXTXyvqrRVu9NQy0Ps8RgvJwuZXcRIgiarC/DzU2QC IgPzi5hKfy4Z8eb3XimcIs11o1xVqnBz99EuAIrJFefDJ0yONEJr+ZWMKPXrOXbnaIfWXfDF VgaHsxuz5xFKlRaX/UbdwZYm2wNvDvGQBn8OTzVoKdoDG2bmsD/s4gGv5Onl1YA42irILqJt aJdJ/glT5pS5XjU7ro/CqpcwixTQz5JEiMFigdzLU1HYPiTOoltUQnsStlmezdEeMr0xNEoc Xdyd356Fe0X7ezk60GVltMfdcH0T3jyxYn8oBv4sfgmOTXDiiF+GI+FUZYZhG4mGRgoTIVMP RMkARO4TSGwGFvt5phct5EKDfZ/JqvTldvsuiDqVFQPtg/3HV3TwUCJjvE8iYd+0Hd5GQQKZ PDXXM8SiGPsnXpHRuAX7gVsa/43FWwMW+OwSg6Mtfvt8JzcnzRKieWnfZmJ5WxX2O7AcP7Gn Y6c28X2c6QbHpW7HdAc0C5cVbvm3r7e6Dt9nGPfyPI+zoHjjUeDDCKzD89sB6yfptjVrZQcL a7lR4C3O4cyctEi16qRNO09aFVDCphbMkLq1EcUgk15L4+MXM0+G2xzbbRMCeg4Phwue4GyF j8V95m7SU4j2ZgLWIDoBAl/YT66b9S6ZGfg7onPt6ZjPiOjJT9N5rZKyUt6svvbE8MvNqmw5 BXGfseObuxWvb4zxngWauS/mDYwd0DQ0LSr7KRu3Xe4RPeEqmHk87r5U35sAHVoWqaIWvJGK T1h6IiRzIGvy2h6syQe9gzlwThT8Wi9f9ztJ6kJvH8lHg//4/4u2EdZlbmRzdHJlYW0KZW5k b2JqCjI3IDAgb2JqCjw8Ci9Qcm9kdWNlciAoTWFjIE9TIFggMTAuNS4zIFF1YXJ0eiBQREZD b250ZXh0KQovQ3JlYXRpb25EYXRlIChEOjIwMDgxMTExMTMzNDI0WjAwJzAwJykKL01vZERh dGUgKEQ6MjAwODExMTExMzM0MjRaMDAnMDAnKQo+PgplbmRvYmoKMjggMCBvYmoKWy9JQ0NC YXNlZCA0NCAwIFJdCmVuZG9iagoyOSAwIG9iagpbL0lDQ0Jhc2VkIDQ1IDAgUl0KZW5kb2Jq CjMwIDAgb2JqCjw8Ci9UeXBlIC9FeHRHU3RhdGUKL09QTSAxCj4+CmVuZG9iagozMSAwIG9i ago8PAovVHlwZSAvRm9udAovU3VidHlwZSAvVHJ1ZVR5cGUKL0Jhc2VGb250IC9aUkJCV0Mj MkJIZWx2ZXRpY2EtQm9sZAovRm9udERlc2NyaXB0b3IgNDYgMCBSCi9XaWR0aHMgNDcgMCBS Ci9GaXJzdENoYXIgMzIKL0xhc3RDaGFyIDEyMQovRW5jb2RpbmcgL01hY1JvbWFuRW5jb2Rp bmcKPj4KZW5kb2JqCjMyIDAgb2JqCjw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBlIC9UcnVlVHlw ZQovQmFzZUZvbnQgL0hVQ1ZFUCMyQkhlbHZldGljYS1Cb2xkCi9Gb250RGVzY3JpcHRvciA0 OCAwIFIKL1dpZHRocyA0OSAwIFIKL0ZpcnN0Q2hhciAzMgovTGFzdENoYXIgMTIxCi9FbmNv ZGluZyAvTWFjUm9tYW5FbmNvZGluZwo+PgplbmRvYmoKMzMgMCBvYmoKPDwKL1R5cGUgL0Zv bnQKL1N1YnR5cGUgL1RydWVUeXBlCi9CYXNlRm9udCAvWkRBWEVTIzJCSGVsdmV0aWNhLUJv bGQKL0ZvbnREZXNjcmlwdG9yIDUwIDAgUgovV2lkdGhzIDUxIDAgUgovRmlyc3RDaGFyIDMz Ci9MYXN0Q2hhciAzMwovVG9Vbmljb2RlIDUyIDAgUgo+PgplbmRvYmoKMzQgMCBvYmoKPDwK L1R5cGUgL0ZvbnQKL1N1YnR5cGUgL1RydWVUeXBlCi9CYXNlRm9udCAvTFdJWkpQIzJCSGVs dmV0aWNhLUJvbGQKL0ZvbnREZXNjcmlwdG9yIDUzIDAgUgovV2lkdGhzIDU0IDAgUgovRmly c3RDaGFyIDMyCi9MYXN0Q2hhciAxMjEKL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nCj4+ CmVuZG9iagozNSAwIG9iago8PAovVHlwZSAvRm9udAovU3VidHlwZSAvVHJ1ZVR5cGUKL0Jh c2VGb250IC9OQkFWQlcjMkJIZWx2ZXRpY2EtQm9sZAovRm9udERlc2NyaXB0b3IgNTUgMCBS Ci9XaWR0aHMgNTYgMCBSCi9GaXJzdENoYXIgMzIKL0xhc3RDaGFyIDEyMQovRW5jb2Rpbmcg L01hY1JvbWFuRW5jb2RpbmcKPj4KZW5kb2JqCjM2IDAgb2JqCjw8Ci9UeXBlIC9Gb250Ci9T dWJ0eXBlIC9UcnVlVHlwZQovQmFzZUZvbnQgL1pEQVhFUyMyQkhlbHZldGljYS1Cb2xkCi9G b250RGVzY3JpcHRvciA1NyAwIFIKL1dpZHRocyA1OCAwIFIKL0ZpcnN0Q2hhciAzMwovTGFz dENoYXIgMzMKL1RvVW5pY29kZSA1OSAwIFIKPj4KZW5kb2JqCjM3IDAgb2JqCjw8Ci9UeXBl IC9Gb250RGVzY3JpcHRvcgovQXNjZW50IDkyNAovQ2FwSGVpZ2h0IDgyMQovRGVzY2VudCAt MjgxCi9GbGFncyAzMgovRm9udEJCb3ggWyAtMTk5IC0zMTIgMTAzMSA5NTVdCi9JdGFsaWNB bmdsZSAwCi9TdGVtViA4NQovTWF4V2lkdGggMTIzMAovU3RlbUggMzAKL1hIZWlnaHQgNjE2 Ci9Gb250TmFtZSA2MCAwIFIKL0ZvbnRGaWxlIDUgMCBSCj4+CmVuZG9iagozOSAwIG9iago8 PAovVHlwZSAvRm9udAovU3VidHlwZSAvVHlwZTEKL0ZvbnREZXNjcmlwdG9yIDM3IDAgUgov V2lkdGhzIDYxIDAgUgovRmlyc3RDaGFyIDQwCi9MYXN0Q2hhciAyMjIKL0Jhc2VGb250IDYw IDAgUgovRW5jb2RpbmcgMzggMCBSCj4+CmVuZG9iago0MCAwIG9iago8PAovVHlwZSAvRm9u dERlc2NyaXB0b3IKL0FzY2VudCA4MTEKL0NhcEhlaWdodCA3MjEKL0Rlc2NlbnQgLTIzNwov RmxhZ3MgMzIKL0ZvbnRCQm94IFsgLTQzIC0yNjggNjgxIDg0Ml0KL0l0YWxpY0FuZ2xlIDAK L1N0ZW1WIDQxCi9NYXhXaWR0aCA3MjQKL1N0ZW1IIDQzCi9YSGVpZ2h0IDU0MQovRm9udE5h bWUgNjIgMCBSCi9Gb250RmlsZSAxNyAwIFIKPj4KZW5kb2JqCjQyIDAgb2JqCjw8Ci9UeXBl IC9Gb250Ci9TdWJ0eXBlIC9UeXBlMQovRm9udERlc2NyaXB0b3IgNDAgMCBSCi9XaWR0aHMg NjMgMCBSCi9GaXJzdENoYXIgOTcKL0xhc3RDaGFyIDExNwovQmFzZUZvbnQgNjIgMCBSCi9F bmNvZGluZyA0MSAwIFIKPj4KZW5kb2JqCjQzIDAgb2JqCjE1MjM4CmVuZG9iago0NCAwIG9i ago8PAovTGVuZ3RoIDY0IDAgUgovTiAzCi9BbHRlcm5hdGUgL0RldmljZVJHQgovRmlsdGVy IC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAGFlE1IFGEYx/+zjQSxBtGXCMXQwSRUJgtSAtP1 K1O2ZdVMCWKdfXedHGenmd0tRSKE6Jh1jC5WRIeITuGhQ6c6RASZdYmgo0UQBV4itv87k7tj VL4wM795nv/7fL3DAFWPUo5jRTRgys67yd6Ydnp0TNv8GlWoRhRcKcNzOhKJAZ+plc/1a/Ut FGlZapSx1vs2fKt2mRBQNCp3ZAM+LHk84OOSL+SdPDVnJBsTqTTZITe4Q8lO8i3y1myIx0Oc Fp4BVLVTkzMcl3EiO8gtRSMrYz4g63batMnvpT3tGVPUsN/INzkL2rjy/UDbHmDTi4ptzAMe 3AN211Vs9TXAzhFg8VDF9j3pz0fZ9crLHGr2wynRGGv6UCp9rwM23wB+Xi+VftwulX7eYQ7W 8dQyCm7R17Iw5SUQ1BvsZvzkGv2Lg558VQuwwDmObAH6rwA3PwL7HwLbHwOJamCoFZHLbDe4 8uIi5wJ05pxp18xO5LVmXT+idfBohdZnG00NWsqyNN/laa7whFsU6SZMWQXO2V/beI8Ke3iQ T/YXuSS87t+szKVTXZwlmtjWp7To6iY3kO9nzJ4+cj2v9xm3Zzhg5YCZ7xsKOHLKtuI8F6mJ 1Njj8ZNkxldUJx+T85A85xUHZUzffi51IkGupT05meuXml3c2z4zMcQzkqxYMxOd8d/8xi0k Zd591Nx1LP+bZ22RZxiFBQETNu82NCTRixga4cBFDhl6TCpMWqVf0GrCw+RflRYS5V0WFb1Y 4Z4Vf895FLhbxj+FWBxzDeUImv5O/6Iv6wv6Xf3zfG2hvuKZc8+axqtrXxlXZpbVyLhBjTK+ rCmIb7DaDnotZGmd4hX05JX1jeHqMvZ8bdmjyRzianw11KUIZWrEOOPJrmX3RbLFN+HnW8v2 r+lR+3z2SU0l17K6eGYp+nw2XA1r/7OrYNKyq/DkjZAuPGuh7lUPqn1qi9oKTT2mtqttahff jqoD5R3DnJWJC6zbZfUp9mBjmt7KSVdmi+Dfwi+G/6VeYQvXNDT5D024uYxpCd8R3DZwh5T/ w1+zAw3eZW5kc3RyZWFtCmVuZG9iago0NSAwIG9iago8PAovTGVuZ3RoIDY1IDAgUgovTiAx Ci9BbHRlcm5hdGUgL0RldmljZUdyYXkKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFt CngBhVJPSBRRHP7NNhKEiEGFeIh3CgmVKaysoNp2dVmVbVuV0qIYZ9+6o7Mz05vZNcWTBF2i PHUPomN07NChm5eiwKxL1yCpIAg8dej7zezqKIRveTvf+/39ft97RG2dpu87KUFUc0OVK6Wn bk5Ni4MfKUUd1E5YphX46WJxjLHruZK/u9fWZ9LYst7HtXb79j21lWVgIeottrcQ+iGRZgAf mZ8oZYCzwB2Wr9g+ATxYDqwa8COiAw+auTDT0Zx0pbItkVPmoigqr2I7Sa77+bnGvou1iYP+ XI9m1o69s+qq0UzUtPdEobwPrkQZz19U9mw1FKcN45xIQxop8q7V3ytMxxGRKxBKBlI1ZLmf ak6ddeB1GLtdupPj+PYQpT7JYKiJtemymR2FfQB2KsvsEPAF6PGyYg/ngXth/1tRw5PAJ2E/ ZId51q0f9heuU+B7hD014M4UrsXx2oofXi0BQ/dUI2iMc03E09c5c6SI7zHUGZj3RjmmCzF3 lqoTN4A7YR9ZqmYKsV37ruol7nsCd9PjO9GbOQtcoBxJcrEV2RTQPAlYFH2LsEkOPD7OHlXg d6iYwBy5idzNKPce1REbZ6NSgVZ6jVfGT+O58cX4ZWwYz4B+rHbXe3z/6eMVdde2Pjz5jXrc Oa69nRtVYVZxZQvd/8cyhI/ZJzmmwdOhWVhr2HbkD5rMTLAMKMR/BT6X+pITVdzV7u24RRLM UD4sbCW6S1RuKdTqPYNKrBwr2AB2cJLELFocuFNrujl4d9giem35TVey64b++vZ6+9ryHm3K qCkoE82zRGaUsVuj5N142/1mkRGfODq+572KWsn+SUUQP4U5WiryFFX0VlDWxG9nDn4btn5c P6Xn9UH9PAk9rZ/Rr+ijEb4MdEnPwnNRH6NJ8LBpIeISoIqDM9ROVGONA+Ip8fK0W2SR/Q9A Gf1mZW5kc3RyZWFtCmVuZG9iago0NiAwIG9iago8PAovVHlwZSAvRm9udERlc2NyaXB0b3IK L0FzY2VudCA3NzAKL0NhcEhlaWdodCA3MzEKL0Rlc2NlbnQgLTIzMAovRmxhZ3MgMzIKL0Zv bnRCQm94IFsgLTEwMTggLTQ4MSAxNDM2IDExNTldCi9Gb250TmFtZSAvWlJCQldDIzJCSGVs dmV0aWNhLUJvbGQKL0l0YWxpY0FuZ2xlIDAKL1N0ZW1WIDE0OQovTWF4V2lkdGggMTUwMAov U3RlbUggMTI0Ci9YSGVpZ2h0IDU0MAovRm9udEZpbGUyIDY2IDAgUgo+PgplbmRvYmoKNDcg MCBvYmoKWyAyNzggMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDcyMiAwIDcyMiA3MjIgNjY3IDYxMSAwIDAgMjc4IDAg MCA2MTEgODMzIDcyMiA3NzggNjY3IDAgMCA2NjcgNjExIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDU1NiAwIDU1NiAwIDU1NiAwIDYxMSAwIDI3OCAwIDAgMjc4IDg4OSA2MTEgNjExIDYx MSAwIDM4OSA1NTYgMzMzIDYxMSA1NTYgMCAwIDU1Nl0KZW5kb2JqCjQ4IDAgb2JqCjw8Ci9U eXBlIC9Gb250RGVzY3JpcHRvcgovQXNjZW50IDc3MAovQ2FwSGVpZ2h0IDczMQovRGVzY2Vu dCAtMjMwCi9GbGFncyAzMgovRm9udEJCb3ggWyAtMTAxOCAtNDgxIDE0MzYgMTE1OV0KL0Zv bnROYW1lIC9IVUNWRVAjMkJIZWx2ZXRpY2EtQm9sZAovSXRhbGljQW5nbGUgMAovU3RlbVYg MTQ5Ci9NYXhXaWR0aCAxNTAwCi9TdGVtSCAxMjQKL1hIZWlnaHQgNTQwCi9Gb250RmlsZTIg NjcgMCBSCj4+CmVuZG9iago0OSAwIG9iagpbIDI3OCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDcyMiA3MjIg MCAwIDAgMCAyNzggMCAwIDAgODMzIDcyMiAwIDY2NyAwIDAgNjY3IDYxMSAwIDAgOTQ0IDAg MCAwIDAgMCAwIDAgMCAwIDU1NiA2MTEgNTU2IDYxMSA1NTYgMzMzIDYxMSAwIDI3OCAwIDU1 NiAyNzggODg5IDYxMSA2MTEgNjExIDAgMzg5IDU1NiAzMzMgNjExIDU1NiA3NzggMCA1NTZd CmVuZG9iago1MCAwIG9iago8PAovVHlwZSAvRm9udERlc2NyaXB0b3IKL0FzY2VudCA3NzAK L0NhcEhlaWdodCA3MzEKL0Rlc2NlbnQgLTIzMAovRmxhZ3MgNAovRm9udEJCb3ggWyAtMTAx OCAtNDgxIDE0MzYgMTE1OV0KL0ZvbnROYW1lIC9aREFYRVMjMkJIZWx2ZXRpY2EtQm9sZAov SXRhbGljQW5nbGUgMAovU3RlbVYgMTQ5Ci9NYXhXaWR0aCAxNTAwCi9TdGVtSCAxMjQKL1hI ZWlnaHQgNTQwCi9Gb250RmlsZTIgNjggMCBSCj4+CmVuZG9iago1MSAwIG9iagpbIDU4NF0K ZW5kb2JqCjUyIDAgb2JqCjw8Ci9MZW5ndGggNjkgMCBSCi9GaWx0ZXIgL0ZsYXRlRGVjb2Rl Cj4+CnN0cmVhbQp4AV2QsW7EIBBEe75iy7vihO0aIUUXneQiySlOPgDD2kKKF7TGhf8+QJyL lGILZubBsPLaP/fkE8g7BztggsmTY1zDxhZhxNmTaDtw3qbjVDW7mChkhod9Tbj0NAVQSgDI 94ysiXc4Pbkw4rlob+yQPc1w+rwOVRm2GL9wQUrQCK3B4ZSvezHx1SwIsqKX3mXfp/2Sqb/E xx4RcqNMtD+VbHC4RmORDc0oVNNodbtpgeT+WQcwTkeya7Wq07Vdzf86BS1ffFSyG3NuU/dQ i5YCnvCxqhhiebDON2+5cBdlbmRzdHJlYW0KZW5kb2JqCjUzIDAgb2JqCjw8Ci9UeXBlIC9G b250RGVzY3JpcHRvcgovQXNjZW50IDc3MAovQ2FwSGVpZ2h0IDczMQovRGVzY2VudCAtMjMw Ci9GbGFncyAzMgovRm9udEJCb3ggWyAtMTAxOCAtNDgxIDE0MzYgMTE1OV0KL0ZvbnROYW1l IC9MV0laSlAjMkJIZWx2ZXRpY2EtQm9sZAovSXRhbGljQW5nbGUgMAovU3RlbVYgMTQ5Ci9N YXhXaWR0aCAxNTAwCi9TdGVtSCAxMjQKL1hIZWlnaHQgNTQwCi9Gb250RmlsZTIgNzAgMCBS Cj4+CmVuZG9iago1NCAwIG9iagpbIDI3OCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA3MjIgNzIyIDcyMiAwIDAg MCAwIDI3OCAwIDAgMCA4MzMgNzIyIDAgNjY3IDAgNzIyIDY2NyA2MTEgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgNTU2IDAgNTU2IDYxMSA1NTYgMzMzIDYxMSAwIDI3OCAwIDU1NiAyNzgg ODg5IDYxMSA2MTEgNjExIDAgMzg5IDU1NiAzMzMgNjExIDU1NiA3NzggMCA1NTZdCmVuZG9i ago1NSAwIG9iago8PAovVHlwZSAvRm9udERlc2NyaXB0b3IKL0FzY2VudCA3NzAKL0NhcEhl aWdodCA3MzEKL0Rlc2NlbnQgLTIzMAovRmxhZ3MgMzIKL0ZvbnRCQm94IFsgLTEwMTggLTQ4 MSAxNDM2IDExNTldCi9Gb250TmFtZSAvTkJBVkJXIzJCSGVsdmV0aWNhLUJvbGQKL0l0YWxp Y0FuZ2xlIDAKL1N0ZW1WIDE0OQovTWF4V2lkdGggMTUwMAovU3RlbUggMTI0Ci9YSGVpZ2h0 IDU0MAovRm9udEZpbGUyIDcxIDAgUgo+PgplbmRvYmoKNTYgMCBvYmoKWyAyNzggMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDI3OCAwIDI3OCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDU4 NCAwIDU4NCAwIDAgNzIyIDcyMiA3MjIgMCA2NjcgMCAwIDcyMiAwIDAgMCA2MTEgMCAwIDc3 OCA2NjcgMCA3MjIgNjY3IDYxMSAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA1NTYgMCA1NTYg NjExIDU1NiAzMzMgNjExIDAgMjc4IDAgMCAyNzggODg5IDYxMSA2MTEgNjExIDAgMzg5IDU1 NiAzMzMgNjExIDAgMCA1NTYgNTU2XQplbmRvYmoKNTcgMCBvYmoKPDwKL1R5cGUgL0ZvbnRE ZXNjcmlwdG9yCi9Bc2NlbnQgNzcwCi9DYXBIZWlnaHQgNzMxCi9EZXNjZW50IC0yMzAKL0Zs YWdzIDQKL0ZvbnRCQm94IFsgLTEwMTggLTQ4MSAxNDM2IDExNTldCi9Gb250TmFtZSAvWkRB WEVTIzJCSGVsdmV0aWNhLUJvbGQKL0l0YWxpY0FuZ2xlIDAKL1N0ZW1WIDE0OQovTWF4V2lk dGggMTUwMAovU3RlbUggMTI0Ci9YSGVpZ2h0IDU0MAovRm9udEZpbGUyIDcyIDAgUgo+Pgpl bmRvYmoKNTggMCBvYmoKWyA1ODRdCmVuZG9iago1OSAwIG9iago8PAovTGVuZ3RoIDczIDAg UgovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAFdkLFuxCAQRHu+Ysu74oTtGiFF F53kIskpTj4Aw9pCihe0xoX/PkCci5RiC2bmwbDy2j/35BPIOwc7YILJk2Ncw8YWYcTZk2g7 cN6m41Q1u5goZIaHfU249DQFUEoAyPeMrIl3OD25MOK5aG/skD3NcPq8DlUZthi/cEFK0Ait weGUr3sx8dUsCLKil95l36f9kqm/xMceEXKjTLQ/lWxwuEZjkQ3NKFTTaHW7aYHk/lkHME5H smu1qtO1Xc3/OgUtX3xUshtzblP3UIuWAp7wsaoYYnmwzjdvuXAXZW5kc3RyZWFtCmVuZG9i ago2MSAwIG9iagpbIDMzMyAzMzMgMCAwIDI1MCAzMzMgMjUwIDAgMCA1MDAgNTAwIDUwMCA1 MDAgNTAwIDAgMCAwIDAgMCAyNzggMCAwIDAgMCAwIDcyMiA2NjcgNjY3IDAgNjExIDU1NiA3 MjIgNzIyIDMzMyAwIDcyMiA2MTEgMCA3MjIgNzIyIDU1NiAwIDY2NyA1NTYgNjExIDcyMiAw IDk0NCAwIDAgMCAzMzMgMCAzMzMgMCAwIDAgNDQ0IDUwMCA0NDQgNTAwIDQ0NCAzMzMgNTAw IDUwMCAyNzggMjc4IDUwMCAyNzggNzc4IDUwMCA1MDAgNTAwIDUwMCAzMzMgMzg5IDI3OCA1 MDAgNTAwIDcyMiA1MDAgNTAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNDQ0IDQ0NCAwIDAgMCAwIDAgMCAw IDAgMCAwIDU1Nl0KZW5kb2JqCjYzIDAgb2JqClsgNjAwIDAgMCAwIDAgMCA2MDAgMCA2MDAg MCAwIDAgMCA2MDAgMCA2MDAgMCA2MDAgNjAwIDYwMCA2MDBdCmVuZG9iago2NCAwIG9iago3 OTIKZW5kb2JqCjY1IDAgb2JqCjcwNAplbmRvYmoKNjYgMCBvYmoKPDwKL0xlbmd0aCA3NCAw IFIKL0xlbmd0aDEgMTA5NDgKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngBvVoL eFRFlj5V99m3H+nupJ95dHe6O533iySdQCA3IS8IgZDwSDBoAoQJCArKBJHBRUADUUedUUBk Rx1QGdTZTnBCo6sfy+DgiMz6XBUZ0Rl8YmR0UdTQt/fc7pARd775/Hbnm75dt95Vp/5z6tSp qgsEAHSwERiQF6/sXkV6yW8w5UV0LyzuW+P+UXWWDEB2AjC3Ll31o5Uv9Xy4F4BzA0iJP1qx bunqB//wFEBCCYAVenu6l/xlzjPnAPwYh7JeTNDcKvgxvgLjvt6Va264e4FOjd+F8Z+suHZx 98wlbVg/Q4dxeWX3DavEzdJFjM/AuPua7pU9w/+V8luMq/UDq669fg3jZAsxfg/Gu1Zd17Mq 0rptKcbPI33/iWkEH/WnAx6eRd8NC8ZSYsn/xxfFegywwGGr6k+IvUXQgARa7Ev96cEQ8//W KwETjehM6MzoEtEBJIEFQbOBHcMOcEIypEBqLCcNET4MJu4I5HE7IJWtUdOjJ9G9rfpKW/Qc 9xJI0Uh0hEGkSbrqTo+SJPg3pO0g3IS0vgL7iQa8MEKK4S2SSrLhTVDgbfgT9nQbPIjvOviI fIVj+JhkYpky2AS/gAeiq2AVVOHzEeGQvnL4OLo++nz0G6iBAThKBJJIUqOHoAD68dkFu4mO LooO4hhmwFqUok3wezgZHYp+gu2XwfvERArYSdE/AkXsnFAB22A/HCQe4iXZ5Iro+5huRxo7 YX+0OdqH9c5hqQKYCeuxt/eIi2SQHLKLvMOMRDdGf4pjS8G8ubAYn5VwM+yE3fBErNQiNoWz YPu10IR5P0X5/Qi+QGHIIjXkBvo68wnzF3YSuyt6FOmYi/11wQOEQVR8ZC5ZQlaRJ8iT5Lfk Kxqk3UwF8zq7in0IaZsLW+EheAaOwavwRzgLI/AtRAiLNE0hs8h68q9Y7090Al1IN9Db6Ul6 jili3mEF9jbuFu7pKBt9Pfot0pwG2TAJGmA2tEMPPkvhGvgx/AtsIQLsgEH4LVJ7Gk4TiRhJ ASkiDWQOuYJcTdbB3WQveYqcImfIB+RjpC6RuqiXFtA+7G8T3UafoEP0EB1hTMwaZgNzmHmH +Yq1sAvZw/ic5vK4NXwK3yTMVu5RTkfzondFdyFfrPj4IAvyYAphEcWVsAU5uQ0x2w174TH4 NQzBUHSUVMBReBnpeg/OwQXkWAo+HlJMykkLmY0UriAryb+QnUjhfjKMVD5NnoY3yBtkFB8F HFRD8+gVtJuuw2cX7KSvxvDRMR4mk8ljmpi26OfME8wg8wXrZxewq9n17AC7k32AS+Emc/O5 Bdwq7l5umDvO/Rd3jjvPp/L9/F7+Sf5VQRRKhJ2CQtKRFjfxw5M4zzfBdmYVxn0wlWxBrs6D F1F6R+A5GIVv4DA8SlJBYVRuZkQfgnB0K3LzGfgN8xOohLvpz+n0aBWzj9GQ4ugFbKsQ+XXp ATk7KzOQ4fd50z1uV1pqSrLTYbdZLUmJZpMxwaDXaSWNKPAcy1ACuXXe+i53KKMrxGZ4Gxvz 1Li3GxO6v5PQFXJjUv3lZUJutV43Zl1WUsaSS79XUo6XlMdLEqO7Eirzct11XnfoRK3XHSYL Zrdj+I5ab4c7NBILN8fCd8XCegx7PFjBXWfvrXWHSJe7LlTf1ztQ11Wbl0sOyaiDpLxcOAQg g1ZtOARTuzf02tFTS9SFnN7aupDDi2HMY/x13UtCLbPb62qTPZ6OvNwQmbrYuygE3ppQQs5Y dbWeG4u2tmPfebnLQkg/3KZb4l1yW1iGRV1qqLuzPcR0d4Rol9qHKSdk89aGbDe+b/9r9FKo 7vbvZIaov767Z6A+JHfdhqCr0S411n07xpra3NgsvaWjPURuQeJUImK0x0fR461TU7qWu0Ma b423d2B5F2IOLe1DTtlZ5+2q7QhBa/uQQ3bEInm5h+w3TfIgKIfyqvOqVX+Sx35T3P9wczz9 lcOqb7/p6LvoN7WO40LUnrzTkMyQezF2glggreXqq6ccBhaXI3z46yA4ymVIz9QQRVFi/CHO P607tLFtjIzu3tox4pbXDmkczjocQ1dNB5bvGjBORAZieaPXPfAlIGe9I59entI9lsL7jV+C mqnyf1yEQqT7UrgvBkydt7vX7u1V2dcXYzXGvfa67yRgHAvV5oUhO7cpDJqW9kFCftoRJtFb wlCbeggXGOaqKzE7RxW4ZbXYHUZyczEh24MhpKAeB1mvSoZ7wD0wbcmAu97diyLF+mM+ZvQM dBQgYG3tCAvMafeE5I7k8WBPR8dEbCdfbQerYPGBDmxh+VgL6MeSCiJYqCC3CZmQ0dI+uz20 sTY5JNd2IOgoxIdb2kOHUX47OrBU4TilSPGGZfYxmouQ5sJszC+Ot9KGbWATHQMDaptt7V5P 6PDAQPKAOuvi8TCB7yfIYwlhUIvgwOvCZGML1kXP60lWE7werwfJ6lAxnYACfEmAwlDy9xEu Hacba5YhtaUxhIP/IITLfwjCFT8I4YnjlF6G8CSkeaKKcOU/D+HJlyE85e8jXDVONxIpI7VV MYSr/0EI1/wQhKf+IIRrxym9DOE6pLlWRbj+n4dww2UIN/59hKeN041ETkdqp8UQbvoHITzj hyDc/IMQnjlO6WUIz0KaZ6oIt/zzEJ59GcKtfx/htnG6kcg5SG1bDOG5/yCE5/0QhOf/IITb xym9DOEOpLldRXjBPw/hK76DMODOYBfu0Cbj/oxB+36K7OH4VLT/WCGVAYljUxmGOjW8kErA IWr2e1ZU2nNyZp6vbI5UzjR+VdlsjFRCVWWkUnVFhRNMHlMA3S52T/jiCe7It1PCbOvor9EI w9Zxd8ftw35obKd5Sr66l5IAlymV80FNI98r3SBtZbfyu5h72Z38fuZhdh8fJmHpefK89Cbz pmQhAs9TEDUafElE4GiSJPnNGE3iOL8Z8wQxGzfMVNKiActrJIYTtXqbzamVWJ4Lk6QhDUPR G5Ycup4fX2fP6ZtpPG9vjlRU4N9U4ZhZ11P7gb0AqmyVzVWVleaKigIcEtefn7PB2IRLLHs4 OcQe7ejPt48lMJjAHO0wYUn89xsrKwV0RYVkISwkHi1uMDy4QfAQWkD6wo+RTiopQ1dF3luq PEufwv1ELZn97RRSoLwcQ6Qz+ga3njuH+ysXrJGz5kv3CPeIzBW0I7k9dSm7lmzjfpU0xB6U fsce056kbyf90X46+Wu70RYmWtnrFEWnrtrFMOZqp8ZlDdrEoCtNcHoSgmkOt+c+zxPzYjxr HkGONZsqRl4bwWGOVFWOmCsKjCNxis3BMo/bZrV5MgIZ3nRqSbJOKA6WBT08eNyBDBPp/M8n iZWsefwqQXkxrWDOw/uOnPjFL+cWuEhRpnJQiSpHhofpXez8l4fPbxtYXtalfP711xeWV1z3 ufLKiydID+NEru9G/q/H0WrwnKBNLl5rJoIYEAK6dvNy83r2dmaAHTDvZHayO81PMHqabdFk W6lF5INGp4P4LQ67I0zcBzytY4OJqIMZgaqqkUtDICYPklxakuEtw4FYzRajQLMwkRwjKSfn FdzxyjNX3N/VXN73oDIUuYWuZ49cnPJG3573PlfSJmy9JgprlJMvKiNIH+Apy8NIK8WwFgrC 0JjzFB6WaKApJwy8MQzkJXgK54qICU9hCYj56plKU05hEfGg/I897DsXz9MXIyVM4egetoJ9 RjkWBeUW5YLaCVHxYAe5w9hwULYJ2SyrYbKBakS+jzi1jOjXOCRtmKTgkB+L8y825ZrP4Jgj yLlIUWHieE+7WUsklfZH1il/4A4rEeWJKES2I+ZbsKNh7nTsxKdQNrGUEpHlcVaw4CcOjn+K NIGHlA6uG+uhIjYNUDyqUJJV8AJkWPkDKb6PO4LHNnGa9yP5HGTJCUBpNScyToH6wcELl9M6 0/gBVDVHqi5RuZuU0JOjX3BHRhuUCzGMdwDwmdiWGQ7Ld2lAEEUNZ7KKDk0WBMQcjc+UbQ4K pWKlpty8HHpM6+DHpm1wq2kXbDftg0dMx+CC+LUmhRMljVW0a1jB7BScks2cDl5TgXmyUCVV mW80H9IMm4+ZDQlCgkSlBLNJIwJnEChjlgTGYAJqEBkxCfGgLBOg5gS9IZDgSGxFOFA7oI5z GE+dskcqjTFYUNGhnjPbKghOevRMFUWFsHohwb/KiJKyUpz0SVaLyn7CriRPK+9R5WPldeUs Vd4jh4lOVYjM+zn3Z4/msK9n359zMRnhWKfqYMSCq+WeQ1mQYL5cINL5lFJeIEK2mRCKqk1i CBV5UZIIL9IA59Th3NE4tLrDHpVY1MhxhdwcMVWg5kJK4zqMRf1l7N9wFAldmOhBfiJl+N9B ptIm4lJejDyCNC5CKkZZ7tsprG30YyQCpaUH9dEnqI+0sZO8ajlg1VnNjiSHc4eT46pTbIy2 OkGTQoMpicnONDGY6EhNO+05+z09M6Zl1L595tISGtMr5gk+gY/pFGNc5ZgIc/qNNw4ePHny ID1y+lHlqHL00XfffZRUkspHT0emnCKGb74mCcoX33yjfHHjq48//iq5g9x7/PHHjytXM3hc SWEPYqdFORLxLHKKnLKD7OCpDqeTgclOQP4idU4Lo/cbHEmWMEn9jgZRV7C4CsHpFNeDGV5E qLisFFg1gEHWwpxctxLZ51q5jhQpX3+pHFP+QDe9g9Ooa5Eyc/n1SuTNyGfckTN4Uoy0zI2e 5AyIWz6e/O2Rl4sJgkfIcGgdCTaPLWOprke/LP39PG2WMcuS6cwITLSUOw9ZXrCcsrySezbx rPWbxG+t3+QlGMCkTbe7/DbRn27Qsvb813Lsr6VUFyQxbHWOpsC+vcBkmyVuz3QWucpM86Es 31FYFCZpB/6q6M/HVP3IeVT2Y0xALWmKC666YKEbW6hQUaqKvrQkkFFAUPeXlgAOemwZ4C1J NquLYBlLEq4DUErIekNW0/DK2ptledvuD9rvJW5i+5hME5U3xRWNV6/9aX3ez5VH525Rjisf KO8qw3Q2OdZTfIU9f8O0zECat2Ty0rd+R/gLZ28p93fNmxVweidnTu197gXlSyJ8wGaifvGg TjyOvBSgXNYRPlugrKjB6Qlh0j5E/biOt8saHi2Rwx51DVfl/nwkEpudzapeVNdflW/4sMeV BuUFpY47ooyOTmWfwVM0BiZF32HL2avwfLsCJsKd8qxJtLRsHdlG2DfTSMZ/f5D9odeg5/CE N9GZg+dkbEZ+Rn62msAma9OTrbkTXUK2pM0t1k5MbIbm/Iml2VMynJXO5uQ8sbnUMany34kD x9BIfg1x4kbinDhjqjjx/vsxVqChdALxt6lGA+oR1CLocsa4YSAJhBcQdmRKWTBQFl/O0gVe 8GDYU4yMMCXZ0ojN4sknASzpTUeO4TqdSN9JDhbKCwI1syd23s88MSt98sIFPdlpkjKiaVhN Eg/cdhtlUlKUF/QSM6m5c809/3H/3IdXUbPJotEZbYHWadUr7jwnJTiDUycU+6vu7LyroeE5 RVcyvTxTn+2Z6JfzSn91/+8XFFnIayjmKOcN0ZNsCeKYihbLNXLdfdZ9VtqfQqZZ2s295huk deaw5Vji8xbRTnk29RXWl+YUrAZJZzyo8yVp04xlCS4oS7OlOt1imc3hcvd7GmeOARa3USLn Y4I7omozNFRivorRarStYhaKCpIquqqJouoTWmqECSi4hDGKnsKeu0pTUibcsWSOhnilObcq 3yioQ8yfnyCcXUmmT08uqrlzxk03TNu6Yt6mNU+T8m+Ig5SHPyZ7cWwMFERPsRNxbGj6QDo8 Jk+rF/uTdpD70I4kGo43cs4mrt44zX0ruSWh3yUxVsaWaE20NYozrDNs05yd1k7bAucp8jb7 ceqH7gtu43RSb9zKbTayaH7eK0+YZbjKcK2BMRiSeV+6R7CZc5O1VoamM2W29elpXbqNOqpz +qjLcG+aw+vbOY5M5AxCsxDttzMjBTh/0YI7ETfhFqIlEF+GAOUkn3jLcMLarIJnbG7HEPKm g8kIkwh5aaWBPC2sv2LryQY5UUsjVr57Ult7MM1GvNoFt198STlCXO8nMWt+snz1j88uvaZ7 Y9Mde2uyipMLu5c8QHQknySTfFUGGKhRatgrESc96rpCWCAbB9JQoDlfYYFg5v16X1aYVMnu FHeuPaGQuswuf6AwN9FZnLIlOU9TlusoKsax1V02TUwVkfNncJZETlSNVKAJgmxXme6LGXU4 C2IsN+PgSj2mJOR6ui9waZCT1XmDC0xpiXlCkD4zsPma7RVp7onbtZN7ZWJpuFF55GXlawMp 0yXnr9xVkp5VMHfrK6NfvHPFJzsevv+XdzRdc9X0AeY6R871/zr61atXh/fuKbYGflSzu77e W00CF/+bNDHqmCneLQDZzx3H0QswSU6fATNIJ3TiNcogqghekGK6ig8QAVXUkKclPrzYZknd XqCGqmrGhUbdIOAqrLr9ymniiTsWr6SUtaN41UfwVguIuldiwC8nUiASpyrBAHGw3HizzXG9 h43GTTWyT/kzScVKWH8j2la72QV4M3KkuhmCSDlBeaZ4X0LBj24ZJMByvJ9ah/6N6G9DfwD9 +9C/D/1foTuE7kO0AAxY3oO3LAzuTfR435KH91zq248YuLDVVLTgRLRbCtCut2EdHm/LNCQB a5igGZIwlAZuLBVA36GujMSL7bXgnV2c+ZGjxvMjFecvjQZtrKrK5vh6FVeLEJNnC4Mmlro5 QTlA9f6doMeCynECKkeb6nN33l6Rb5SociopY2lfnk15L8m37MZsG4JsKS1o27KheYq7vK19 BbugvL6iLbg8MpsOT8mcsahkWmQt3dadO2tWXkdkFSs/MNcnBye0dOXl4fj7cV3qRllX7zib 5DyOWIifBEm7tlfLE7OR1/hwwhlYycaV2RKo02FS7Ui749lLItAcORpXbKpaQ9tspKoivgLH rMX/NZYAM/CGcsqW3Xd3WYpyhiQGi9r7l7Gdgyci6XTHvPw566t7IkNI4hx/jSqYOBdRH+9m e5Bb6h1ss5xpY4io26rbamRsenvCUj3D+exJgtZn0NrtIi2zOZ1imcnhcIZJ34FxFRO3Gkyq /ahuDxH96+C61WPTL7Yq+WJmANoIbrAQevbWWzds6O/fQPOVT5UP8fmUJKEqdZCkyKu/H9q7 d3Bw796hpcpjZO5fPiULlEc+pTJiuUFpY3ehbOpRKqbLWbZEUUpxUp9bcPKSL1HrMIh6u77M 6EznXckue8Dh8KTv9LSMrQ+oIGJWW0wDIpVVqCNMuJbipIqLRnxVKDWr6s6bHshQjyPiAsKs uf7m+yem9VS2rt2QSjRK5MVN8wrylA+IKb/kqs30gSM/n3nDs8154ftoBVov59B+eaXaVxd5 njv3UEPWNIQZ59AmVAKjbCdamtMPAUMaDtAEPR5TNMiOREHP6yQ3LaQyZSzqjsKgDehiNueS A56WpZdk/bW4sbJQ1QVI+2uqOrDaTKi2xwQ7Tiz9ozYxOVv/+CQP2p7GmqKWjWwnIcophq6q 2hy5wNY8uzJzqkoTRd6/jfeO3ZADuXCTPEtj5DMcekbDerTaJmmatsFT627MeoMRU9PdOom1 5rBWZ26uWWBzM7W5uQkWyZ1qbU4XLHlCs9+Zr4PU5oQ8aM5x5OV/Z1U+j2cFMdxVkxIXZYQ/ LiSRE8YTaFgWFV658EqyUDUVcU1WrUl/zJjEaXmZMakuTJYk3uvOQFtysSat9M45izMzleih GTNG3niRkETlz7yjYPXCWdnZ0f1z53x+UYl+iZewnTPcFcXFhQ7H5Py62o073trzfNA9cWKg yGorz5zduv6XJ97ax+BEIGCJfkJv4Hpxnk4fNuYmuHS5pqfIamBJp2wVoJMnvB1Zk8CfZzUB +BnyyR4mhgOeLpU9r1WeiVSer1T58xkak3j6M1KF4oYb2FL1XGuCxWuK22UWgUdD2WTZSZyD g+nz9amG/hemFzIrj5NC5aXjkcNTPYS8zgnNRUvpA6q8Rz9i56LuUL+LmCHnS1anNdtabp0n 9Ai8U5CAtxr0Eod2kVMvBZx2rTOFlNkdySl/VR7qvDRXNEdei2GuWkSo8hFttAURbjQSVRkv NRDBgFKkkuYnD1kD1/2sDK+5lbOs2zp1w5wv5hSQT9mayLULC9r65GV09uizu7jixMrcX3c9 Te9OReycqOPm4/cZPPxCnhXg5/BL+If53+B9ME+MtAGzbqRrmLUs30C2Qj+3g3uUO8g9z3xI LhAN42bZgJnjeOomJGDGJnjKsbjkMFQSKS4+YaIbYjicKbph1iH0qHg7vnsA5zD+zh7ftOLJ 2/ih240dR8fP2zCsjnm1aung0kk8iYyfFCtrlVeVdUT+M1sz+ixbc/EU4m1RGtgWxDsRv0p5 S14VkOZJS6V7pb3SqxLP4f6ZTxFM+jzBrZ8sFOmbhIWCqsXXCuv0eltCmb5fs1W7UxvW8klJ OlFP3TpdwKzVSrxAXaIYwPNGNaiXLDotntQIGnDR3ESXMSFJsKJgGfRaHY7xAGZI6Mu6xJ+J jh6L9VdxCevD7coZ+0W0aVU3duSIiqD5TOQMLnqxU0ecWQQ37RyeOrbecONzE8YAUMPqsUPB JRBwW1YWnEICxJOMaFB1JxAgg77sGU5HDqusIpM/ew9PFwdW3PRMRn4+2fQypZLZtELHXnfx FOMbfUl54V7C8EnqnIm54tVDH16VUPklmERVq8BzVRO7xn2LUsPvxl0twfMJtbz6Q5/PUrLw 8yRy4dTFt7U3jefE8wFc3DHYRStwd34MStB1otvNzYOH2T/Dbkzfovr8ftiB6Tv4CujBvD3o 5mK6h70eJqFrQFeA8Rosvw3dbUIqbMR4v5qGbgOTCpuwTA3dDxY1jmEnOgsSUYLPEVJCBsi/ k8+olVbSI4zEdDGPsPVsH+fktuIXJdv5F/hPhJ8JfxLLxe3iu5qlmpDESr14qKeO04U2EgMr 0Lqh+M2TEb+1AeEjKRFP+uKomcfGzKv9LWitqZk/NaexZ0Vfz5pli7vzaq5dsUTVz7FfVP1a 5m/9XJjIoD2VgfZRJtpMuTFrugiKYQLaUUH8CqgeGmE6fpM0C22m2dAKbfgtzzyYj1/gdEBn GFrxVLIR3RR0JeiycwZF+SlyFyQtPC9riIsFretNx2fPotmuhw9i7xDJl3V60CzeXOlavHlz Y1a1Bs8BgzhhXaQOfDG/dsj3mCtMpgz5vOhNjnt0KJiKMZA1QZ8rElzkuhgMi0ROdn3t+7nr ArqvfFWuL31Frpex3EvBBteJaswfch3PDlP0XvCFWSInuJ733ez6TTDL9WRwkmsogGlDrsFq 9IZde4M3u/ZsiaX8MjvmPeQLk11DrgdVb9j1ALa/fXMs4954xU1xb9WWWEfXHoh51xwI08eG XSt9Ga5FWJHIWtdC3wpXp6/CNac6TPxDrma12rBrRuCEq0ntesglxzsqi7de6otRXBzvNtf3 tCsz3kO6WlpOdLl9M1yp2H7ug9tdub4rXdXZYbLvYGNmtq8xsL0sTM7H+lA9JFT1rol7iwPP kEfxC6ossgCPYO870JiFNJO7hlyb0dt1oDEz6A8zH8lm14FAY2ALujJ0fnRzw2SOnCvsEJYI c4UJQo6QJWTg6VKakCwkiWbRKBpEnSiJIp4SsiIVQUwKR9+Vc1RJTuLxiz3Uxqz6ZmNhI8ol iQknijIeClMUsTAPt1j7quxV5immivrav/HqiiV21eb89YcL5/jPTlJD2/GSP7Q/tSNUrAai qR3juf+/QE8N1m9qXXegdd3ZebHvRLx1PV34uUjotj78nGfjIrd78Ow6NUP9YqFr0eJe1e/u Ca3z9tSGznpr3YOtsXrfy56nZrd6awdhXt2c9sF5ck/tUKvcqn4H0nGgpa4RzQHs5FJf28b7 aqz7G33VqY01qn21xOp9r6+ZanaL2tdMta+Zal8tckusr5ycumVtNfA/b+Qtw2VuZHN0cmVh bQplbmRvYmoKNjcgMCBvYmoKPDwKL0xlbmd0aCA3NSAwIFIKL0xlbmd0aDEgMTE2NjAKL0Zp bHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngBvXoLeFTV1fba5z7XzEwy11xmJjPJ5H6D XAYCOQlJCIRACAQSTCQBQoGCAmIwUCwCEgh4axUQ+WpVahFrOwSNgxR/foqiKN/nBYsiaq2A IEbUoqjJnPnXngkp9O/Tx+f5+jQne/b17L32u9dae629DxAA0MJaYEGeu6R9KVlFjmDJ6xiO z+1c4fpJeboMQHYAsBvnL/3Jkjc6Pt0NwLsA1LE/Wdw1X566JgkgZiSA7Y8LOtrnfeU6dBnA 9yW+X7QAC1QbxVSAtDTMexcsWXHHg59qsjA/CfNrF986t30+M3sx5ul4FUva71gqbVAPAqQb MO+6pX1Jx/MXv3sb83mY9y299bYVbJBbgfkmzM9Zurxjaahh83zM/xHp+x8sI/jQPy0I8CLG Lpg1VBIp/l/8MIjQtT9uKMHjKABiJCeBKhKrh+qujzRIjw70EAMGMGKFCUMsxIEZLGAFG+bs 4IB4SIBEQDTBiQgfBiN/BLL57ZDIVWA5hE9jeJ/GyrTwZf4NUIdD4X4WkSfJNHw0QOLgD0jN 83AncPAW7CUq8EA/KYD3SCLJgHdBgffhrzjSFvg1/lbBBfItUn2RpGGbIlgHv4JHw0thKZTh c4HwSF8JXAyvDr8S/h4qoAeOEpHEksTwAciFbnx2wi6iZeaE9+EcJsFK5KJ18CqcDveGP8P+ i+AcMZJcbnT4A2CAxxI/bIa98DxxEw/JIDeFz2G5DWlsgb3hunAnvncZW+XCZFiNo31MnCSV ZJKd5EO2P7w2fC/OLQHrGmEuPkvgLtgBu+CZSKs5XAJvxv4roRbr7kX+vQBfIzOkkwpyB/MO +xn7JTea2xk+inQ04nht8ChhERUvaSTzyFLyDHmW/Il8yxQz7ayffYdbyj2GtDXCJngMDsEx eBs+gEvQDz9AiHBI01gyhawm/4Xv/ZUZwbQya5itzGnmMpvPfsiJ3Bb+bv5gmAu/E/4BaU6C DBgN42EqNEEHPvPhFrgdfg4biAjbYR/8Can9CD4iamIguSSfjCfTyU3kp6QLHiC7yQvkDDlL zpOLSF0s42Q8TC7TieOtYzYzzzC9zAGmnzWyK9g17GH2Q/Zbzsy1cofx+YjP5lcICUKtOFV5 UPkonB2+P7wT18WCjxfSIRvGEg5RXAIbcCU3I2a7YDc8Db+HXugNDxA/HIU3ka6P4TJcxRVL wMdNCkgJqSdTkcLFZAn5OdmBFO4lfUjlQXIQTpFTZAAfBeyMislmbmLamS58dsIO5u0IPlrW zaax2WwtOy38FfsMu4/9mkvhZnHLuNVcD7eDe5RP4MfwM/lZ/FL+Ib6Pf43/M3+ZvyIkCt3C buFZ4W1REkeKO0SFJCMtLpICz6Kcr4Nt7FLMe2Ec2YCrOgNeR+7th5dgAL6Hw/BbkggKS1cz NfwYBMObcDUPwXPsz6AUHmB+yUwMl7F7WBUpCF/FvvJwva49IGekp/lSU7yeZLfLmZSYEO+w 26wWc1ysyWiI0eu0GrVKEgWeYxkCWVWe6jZXILUtwKV6amqyad7TjgXt1xW0BVxYVH1jm4CL vteOVTe0lLHl/H9oKUdbysMticFVCqXZWa4qjytwotLjCpJZU5swfU+lp9kV6I+k6yLp+yNp HabdbnzBVWVbUOkKkDZXVaC6c0FPVVtldhY5IKMGUmdnwQEAGTS04wCMa1+zwIYRbVEVcHgq qwJ2D6axjk2pap8XqJ/aVFUZ73Y3Z2cFyLi5njkB8FQEYjKHXqfvubBpQxOOnZ21MID0wxbt PM+8LUEZ5rTRVHtLU4Btbw4wbXQMY2bA6qkMWFeds/09ey1VtfW6ygCTUt3e0VMdkNu2IOg0 20Zz7VsxVzvNhd0ydzc3BcjdSBwlIkJ7dBYdnipa0rbIFVB5KjwLeha1IeZQ39TrkB1VnrbK 5gA0NPXaZXskk511wHbnaDeCciC7PLucxqPdtjuj8afro+VvHaax7c6jf8G4tmEYF0JH8kxA MgOuuTgIYoG0ltCfjhLomVuC8OFfM8FZLkR6xgUYZCU2JcCnTGgPrJ02REb7gsoh4hZV9qrs jiqcQ1tFM7Zv6zGMwgXE9gaPq+cbwJX19H9+Y0n7UImQYvgGaCVd/2EWCpD2a+nOCDBVnvYF Ns8CunydkaXGvMdWdV0B5rFRZXYQMrJqg6Cqb9pHyL3NQRK+OwiViQdwg2Fn34zVmZThFlbi cJjJysKCDDemkIJqnGQ15QxXj6tnwrweV7VrAbIUlxKJsaKjpzkXAZvWhLDA9CZ3QG6OH052 NDePwn5yaD/4CjbvacYeFg31gHGkKDeEjXKzanERUuubpjYF1lbGB+TKZgQdmfhwfVPgMPJv czO2yhumFCles9A2RHM+0pyXgfUF0V6mYR/YRXNPD+1zWpPHHTjc0xPfQ6Uumg8S+McCeagg CLQJTrwqSNbW47sYedzxtMDj9riRrGaK6Qhk4GsMFISR/xrhwmG68c0ipLYwgnDxvwnhkh+D sP9HITxqmNIbEB6NNI+iCJf+5xAecwPCY/81wmXDdCORMlJbFkG4/N+EcMWPQXjcj0K4cpjS GxCuQporKcLV/zmEx9+AcM2/RnjCMN1I5ESkdkIE4dp/E8KTfgzCdT8K4cnDlN6A8BSkeTJF uP4/h/DUGxBu+NcITxumG4mcjtROiyDc+G9CeMaPQXjmj0K4aZjSGxBuRpqbKMKz/nMI33Qd woCewU700Magf8aifT9WdvNCItp/nJjIgprnElmWcagEMZGAXVLtdS8utWVmTr5SWhcqnWz4 trTOECqFstJQKQ35eSOMbqMPw07uieDgCf7ID2ODXMPA79EIw3Fawqf41fxl9CGcsEJOn6l+ UHxQYm9imuObEudzK8lm/qm4Xu559cvcMc1p5v24D2wfxX9nM1iDRCN7HJLk0JY7WdZU7lA5 LcVWqdiZJDrcMcVJdpf7YfczMyJ01fUjVXVGf//J/lwo6y8r7Tf5cw39+XmkFVpNxUVul9Vi daf6Uj3JjDnOMqKguKjYLYDb5Us1kpb/eZZYyIrfzRaV15Nyp/9mz5ETv3q8MddJ8tOU55Ww cqSvj7mfm/lm35XNPYuK2pSvvvvu6iL/8q+Ut14/QTpYB85xF2K5GrFUoS88TS5YaSKi5BN9 2ibTItNqbivbw/WYdrA7uB2mZ1gdk2FWZVgYsyQUGxx2kmK22+xB4trvbhiaTIhOph/Kyvqv TYEY3Uhy4chUTxFOxGIyG0QmHQvJMZJwekbuPW8duumRtrqSzl8rvaG7mdXckcGxpzqf+Pgr JWnEplvCsEI5/brSj/TR9dgAQPr4j3DdOciTjRzDEIkTrFYHBynEzgsvkFpwk8J9XVFkQ/7J VR2V5xHWMlxpOqiP9Cn/TQoe5o+gS0/Q/wMhDfs2wWH5fhWIkqTijRbJrkoHn5Sp8hozTMVi oVSqKjEtgg5jF9xu3AwbjTthm3EPPGk8Blel71QJvKRWWSSbihNNDtGhtpqSwWPMNY0Ry9Rl plWmA6o+0zGTPkaMUTPqGJNRJQGvFxnWpBZZvREYvcRKcTgHhmN9jClGp/fF2GMbcAqTDVeQ Z+2GM2dsoVJDZCrIuMi3JqufGE1+jIz+/DxY1krw341MPLKoEL3EOIsZ027CLSEHlY8Z5aLy jnKJUT4mh4mWMjh7LvORjIFM7p2MRzIH4/kjA10UW8SCr+RfQj5Qw0w5V2JmMgwjiETMMBHC MKKkZgkjCZJaTQSJ8fEOLfKJyq7RHnZTYlHCogJWFzL6/X7EHAktNfn9XHdOpqF7zVEktDXW jWuAlOH/djKOqSVO5fXQk0jjHKRigON/GMtZBy4iEUjPE0iPBtdGwrOasXLCdrJdYLQZHKdn M2IQM6k41mFmdSl6e5w5SBKv40Aq5VEWREGKylGqB0ctKCoEjiYwyZnZ011LEBLnki6Sr3z3 jXJM+W9m3YfITm1zlMmLblNC74a+4I+cxdM0pKUxfJrXox7IwdORJ+RFUozoFlPtGnuM1W1N na/t0C1MPpetSTekm9Mcqb5R5hLHAfNx8xnzW1mXYi9Zvo/9wfJ9dowejJpkmzPFKqUk6zWc Ledkpu1kQnluHMuVZ6pybdtyjdYp0rY0R76zyDgTinLseflBkrT/74riSkRV9F9BZTGkKlDK jFFmQH7wY4iqDYKCRhVF4Uhfai5B3VE4EnDSQ2pEMMdZLU7axhyHegQKCVmtT6/tW1J5lyxv 3nW+6SHiItaLZIKkvCstrvnpynurs3+p/LZxg/Kacl75i9LHTCXHOgpusuWsmZDmS/KMHDP/ vZeJcPXS3SUpbTOm+ByeMWnjFrx0XPmGiOe5NJQzNwD3Gq6lCCWylggZIsNJKmR5CJKmXiaF x0hWCaitD7tvXx7lpSuhUITj61B4qZ5Gnok83GvKeOW4UsUfUQYGxnGH8KSB0FM78VYqx2SR /LWa43mVVjBM5Kr4Gu0mrpvv0W7SdcdsNLzHneLf1/7ZYLSAg4vj7TprDI+sDSzHIaeLvKRS iTpJb9MzKpb2IgiSRjCKJqvaqrFpu9gurpPvFDqNL7AvcM/yzwmvsq9yL/MvC++x73F/5v8s XGQvcuf584KziZ3FNfIzhZnGhexCbj4/X1igmW/UUKrsWovhOc1B4znNOeNV9Teavxk1GjVj V6eYVKLKaGLsphQ8n2SogjByvEpt4oExGrQaVE0aVs0LWlYvAjGyJpYzsHqGKg71iyQIIiHA YNCTYJ/JHttxDnHsRA1iqwudPRuyR7E0osqgWiMa2ag2KS2zUn3Co5SuqW24Y5XhaLfhWooy 07Jl0IpF+hsCVixfRmKtxbHuyA9xa1g3IR1/ysh8klT9ITv7JeJX2pXTvSNH9ip/VW7mjww+ e+k8OxV//8o2oga6mSQqnww+jkuGfyyMDn/IlXCz8YzWD6PgPnnKaKawqItsJty7SST1b+cz PvXodTyeYsY6MvEsiEvNSc3JoAVcvCY53pI1yilmqDVZBZpRsXVQlzOqMGNsqqPUURefLdUV 2keX/pHYkQdryO9haMuNStJZo//EuXMRUUJj4EQUFz/VrVGMMoekSU9iiCCi2KBQFRX7iqLb WbIoiG5MuwtQkIxx1iRiNbtziA9bepJR4nCfjmU+jC/Ok2f5KqaOanmEfWZK8pjWWR0ZSWql XzUeAdy/ZQvDJiQox3VqdnRdy4oH/+8jjb9ZypiMZpXWYPU1TChffN9ldYyjeNyIgpSy+1ru Hz/+JUU7cmJJmi7DPSpFzi586pFXZ+WbyUmKIwOrw59wu/jDuJ+5oEJOUbk0epMW7F6TqFG7 vLzGvIFxJCc61U6dT2N3J+9w108e0txXzg5pzX7cusuMUVUCJnMc40n2pfrMVPhwriNMEZ3i wblTNNin/vblqe6GfL9ykSQUldetTFmV5H/4kVFJP/s5N0s5/o2i9Ba56jfzh0NXJqUVDK7o fWDFpPvvqV25NRild3z4NDcS152eu98iVz1s2WNhuhPIBHOTaYHpDnWXKWg+FvuKWbIxApf4 FudNcogWvVpreF7rjdMkGYpinFCUZE10uKQiq93p6nbXDM1nyKYKXYkoyn66I6FhFYkjTA2t VCtGp0FVJTWpRMHtYgoNMAIVJWENkjuv4/7ChIQR98ybriIe9fSNyvfK998R01cnCG9T4pmD Y/Ir7pt05x0TNi2esW7FQVLyPbGTkuBFsjuyFmXI0x24Fgac3RQ564KWIGaJjIEFq9cgCupE r1pjZh2xTsHJ+jiH01Gksyc5d7hrqoZ4lC5I6MpZVOrULIyuip9qeGgFi5Uqw0I98SQDJfna skRWhVm1M4+4lUtjdq34P8oAIaeev7NjbMOa21d2cS0z6xjpB3l7exMp/JpYiTy4/Nn7Xpkx 8tDW7c+hHOaGz3CjcD3QvIRkeFqeUC11x20nD6s5gah4wcA7avlqwwTXRnJ3TLdTzVpYa6wl 1lojTbJMsk5wtFharLMcZ8j73MXET11XXYaJpNqwiV9v4JggeUgeMUU/W3+rntXr4wVvslu0 mrLiNRaWSWaLrKuTk9q0a7WM1uFlnPqHkuweL0JxjTspc7aijXy2PzcKx4momdwaumb+AMpi DvEU4aZmtYjuof0vsqoIkdEAowl5Y4meHBRX37Tp9Hg5VsOELEL76GlNxUlW4tHM2jr4hnKE OM/FsSt+tmjZ7Zfm39K+tvae3RXpBfF57fMeJVqSQ+JJDuVbgjczwGzh30SL+a7yXMyxkIXS 54QpaJfOxoCKCUus2FKD69+C8qhCTPVoWdmx1Iq3LGpszeKtFL2DUoEP65xo5/wCW9vxTsZO 9LgCbXhXMbQZng35/aUnrwzZgGXUlynrb73ST7nBYjXnEFx48wizB7nCUziC6p4RTEFWqm1Z 5sGDytlHd40e28+/ybIXWLbQ5Sp9dfAB9tZXq/9QMQdpqFAquJtxzXVo2+TBLNnQk4QKkPfm 5YomIUXnTQ+SMtmV4MqyxeQxTpMzxZeXFesoSNgQn60qyrLnF1zHslG1avQj26JWDZ0o6/ej 6Y1iR4XOG3ECIpoDRc6EC1XoNsah1CV7fdcWbAzVs+joFI40jShmDvWsv2WbP8k1aptmzAKZ mMevUp58U/lOT4q08TlLdo5MTs9t3PTWwNcf3vTZ9t888vg9tbfMntjDLrdn3vZfA9++/dPg 7icKLL6fVOyqrvaUE9/g30gtG9U7m3ER9/Kv4exFGC0nT4JJpAVa8GppH66cIKojtongIyKa JL3u+qhERhxI6k+gRVJWh4YlKhEUwkjYq3yEEhcJHF7TKSsH8PqT4G0GcEv4Q8gFX8q9MlPN n2TOMVwM+guN/Gb+Pule1Uv8cek98SPpjEojCTYhl83l0vhsoZgtESaxNUIr2ywsYhcKd3Cb uO3sQ+JT7B+4vcIesQ8vYl9G68NRK0wUZ/CbuPXSUf4ViRoiH4inJQ2vUlH7RaPhJEbEJN6R qBkXy75m4jisYhlOYFRqjhXUIt6YCg4dUftA49LkaWQNp7Frdd3u+k8o7w22Rqz6L6gLhY4H 3Ryt/u66nExujaF2atOq5qNgwjK/P6bbIJWKBmqpLWtFlyTWbSRuFXojotG9jtjIXNKurCdb lT3KQKdygT80eJ7sVGaH5pG3VitPUay24M8eNAhYSJFjGSBqnhqIPmLn+OElqIvahEhM1J0j e5RPSCK1IgisxXns4mbhzdqR8jooRhkkKHMMyhcDKRgW4v3vIpS8LoxXYbwZ4x6MH8b4YYyf wnAAw6e4Wnps78ZbOhalUof3ddkok/Q3BfnFib0mokRLKMO5Q9Is4G2risTgG0aogzhMJeEO nIhynYTyjF4D8WB/9XjnO7TdHjWg7F65Nhs0wlCko7Z81ORAocbHzKJLN7RNoWRfl3Sb6WaM hoeVxvx9W/05BjWjnIlLnd+ZbVU+jvMuXJVhRYY0F+ZO27CmbqyrZFrTYm5WSbV/WvGi0FSm b2zapDkjJ4RWMpvbs6ZMyW4OLeXkRxu9cvGI+rbsbJx/N/JuO+oFekdeK2fzxExSSDFp0izQ CMRkEFReVLR6Tm3li6wxjMNupH6rzf7iNXGpCx2lO1jUV0He6S/zR72TiHf6/83Fx/acUs5Y MzofKEpQzpLY4vym7oVcy74ToWRm+4yc6avLO0K9SOL0lAoqxKi30HbYxXXgatE7/Do5zcoS SbtJu8nAWnW2mPk6lvfa4kSNV6+x2SSmyOpwSEVGu90RJJ37h7eWqEdlpP4qPXpB9JfD8mVD qiqym3ojLhL6Ty4wE+bSxo1r1nR3r2FylM+VT/H5nMThtm8ncaG3X+3dvXvfvt27e+crT5PG Lz8ns5QnP2dkxHKNMo3bibypQ66YKKdbYyV1goPxukSHoPbGaux6SWfTFRkcyYIz3mnz2f+p bRbZ+SKWAJpnUUPgegum0ES3uYi1Rm2DCIOwK267C62xjtKGlWsSiUoJvb5uRm62cp4Yc0bO Xs88euSXk+94sS47+DDjR8/uMvp2b5V7q0Kv8JcfG58+AWGO6jBmgGvB3WniAWDJ+P1MjE4I kvGyPVbUCVq1i8ljZIY10xMMvcanjfjj8/a76+df4/WTUeejlepN3AtOUtWJBgxu13QzGCaW +UATG5+h+91oN/rlhor8+rVcCyHKGZZZWrY+dJWreHFJ2jhKE4Nr/z7eW7dDJu6yd8pTVAYh 1a5jVZxbo6lVT9CMd1e6atJPsVJiskur5iyZnMWRlWUSuaw0TVZWjFntSrTUJYvmbLEuxZGj hcS6mGyoy7Rn51xnQV7Bc7iITUzdbVRwCH+USUInDCdQCebn3dx6M2mNutoRqzgl4mijWN7g aEcEOU7wuFLRz56rSiq8b/rctDQlfGDSpP5TrxMSq3wi2HOXtU7JyAjvbZz+1aAS/gYv8Vsm ufwFBXl2+5icqsq129974pVi16hRvnyLtSRtasPqx0+8t4dFQUBbJPwZcwe/AOV0Yp8hK8ap zTK+QJYBR1pkiwgtAhFsuDQxwhVO5YNf4DrZgkS/391Gl+dk6dlQ6ZVSuj5foKONB6L9Zbh3 5+fFFtJzUWpQRH0esyjgIYLRvIM49u1LnqlL1Hcfn5jHLnmN5ClvvBY6PA69v3d4sS5/PvMo 5ffwBa4RdQf9rmaSnKO2OCwZlhLLDLFDFBy44wgWvU7Now3v0Kl9DpvGkUCKbPb4hL8rDyqX Jn9d6GQEc2q9o8pHtNHPQnMdHTDKNmj/itQEpqSlkMcsvuW/KMLPJJRLnMsybs30r6fnks+5 itCtrbnTOuWFzNSBF3fyBbGlWb9vO8g8kIjYOVDHzcTvewT4lTzFJ0wX5gm/EZ7D7wkEYmDG Y9UqZgW7khPGk03QzW/nf8s/z7/CfkquEhXr4jifCfdYxkWIz4RdCAzP4ZbDMmoJzxRIkGh7 WR4lRdvH2cUOird9yCH3+9Gcsxtepg44dcFNUfd7aEPtzrFlXttc6ZyX0QM+NDOIO5ZNIQXK SuVtpYvIn3AVAy9yFYNncB563PvcOA8t+PEiOBOCwOcGQcIAGFgM6twXcF14AGTjF3AXu5bS DqXy8ok7no6hiQzEdBP3k3tJunJUef/pZ5R36aHpXhzsMmsceJF1DJ7H9NdRWTQr47l6XGv6 RdV78lKfeoZ6vvoh9W7122o0OoggJIhGXbbo0o0R83W1YqtId5CVYpcOT1+KdN2qTZodmqBG iIvTSjrGpdX6THggIoiMU5J8JpWKJnVqs1ajkgRRBU4mK9ZpiIkTLcjUep1Gi/juxwo1xrI2 9heSvcNseSrK3Z14JHnWNoi+Hw3RIxCEvKzubOgsbriR00mEg+DRB4+A4+HHSyOGwKdpesSa e20B8LisqHgs8UVRYqiH7yP7vBmTHPZMTllKxnzxMclVehbfeSg1J4ese5Nh1CbjYi23fPAM 6x14Qzn+EGGFOCqvkdC849bE2TGl34BRoijCS2Wj2oZjvVKBp1mXsa0q0p5W4HtCupKOn9aR q2cG39fcOVxDa+mfiz8GOxk/npoegxYMuzC9QdgL2zG9nZ8BT2Bo5D4Bt3gPJHG3wWhMr8Z4 PMZlGOcye8GM6Qp8bzPm12G8RUyEtVjWTcsxrGETYR3WVQy1XYNph+AHPcboE8FIfJ6EQfyu ay/5milh3mUl9gK3lTvLN/C/E2ThSdElThc/k9RSr4pRNan61KDeqH5D49Vs0rysvRl7oPi4 0E5jYTFaWAz6Q9R/AvGCOhZ9qih6pkiMgNAxaxrHzaiqz6zpWNzZsWLh3PbsilsXz6N7ROQv TL/4+md/LixkIRUttCz0evJhBFpwxXj2VIk2WjV+LVYDE2AiflU3GX26evx2rAGm4fdoM2Am fkXWjF81Ik1BaMgMQg2GsRhGYsjI3CfJL5D7Ia71iqwiTg40znftX7xIcnDnPx/5DZAcWasD 1dz1pc6569fXpJer8M6iGBWHk1SBNxJX9nqfdgbJ2F6vB6Mx0YjpLU7EHMiqYq8zVDzHOVgc lIgc7/zO+0vnVQzfesuc33jznW9iuzeKxztPlGN9r/O1jCCD0XFvkCNyjPMV713O54rTnc8W j3b2+rCs17mvHKM+5+7iu5xPbIiUPJ4RiR7zBsnOXuevadTnfBT737Y+UvFQ9MV10WjphshA t+6PRLfsDzJP9zmXeFOdc/BFImucrd7Fzhav3zm9PEhSep119LU+5yTfCWctHbrXKUcHKor2 XuiNUFwQHTbLe9CZFh0hmbaWY50u7yRnIvaf9ettzizvzc7yjCDZ83xNWoa3xretKEiuRMag ERJKo1ui0VzfIfJbXNt0Mguvix7eX5OONJP7e53rMdq5vyatOCXIXpBNzv2+Gt8GDEUYUjA0 Bsl0OUvcLs4TG8URYqaYLqbiDUCSGC/GSSbJIOklLfK0hLcj6G9JIMUFw3+RMyk3xwn4LS3u Chz95SJpA/ImntUiAyI74wUWg4wWFOBuS2eZrcw01uivrvwnP22RwrbKzL//4QY+/GcjiYFt +LFKYG9ic6CAJsKJzcO1/7tERwW+X9vQtb+h69KMyPdOnqqONvzsKbClEz9LWzvH5dp3qYtW 0C9v2ubMXUDj9o5Al6ejMnDJU+na1xB57x+qZ9DqBk/lPphRNb1p3wy5o7K3QW6g3zM176+v qkGzBAe5Ntbm4bFqqv7JWFW0sxo6Vn3kvX8YazKtrqdjTaZjTaZj1cv1kbEyM6sWTquA/wf9 L8ZZZW5kc3RyZWFtCmVuZG9iago2OCAwIG9iago8PAovTGVuZ3RoIDc2IDAgUgovTGVuZ3Ro MSA1MDcyCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ab1YC3BU1Rn+//vYRwiy 4aGbhPXucjfvXcNLAiQmN2E3BAMx2RDc5aG7SRYTmkCsNJVSECGoLNbBsSLN0CKVGS0We7NB 3MhoMwqjrTL1MVbrC7U+UEzTOjyqIbn9z92wEoZhMlOGe+bc//z/+R/f/c5Jck4AASAZNgEP SkNrqA1MUEiW16lbG9rX2u8ozVFo/DkAf9/Ktjta3wh/tQ9AaAFImnBHy7qV08v77wS4ZhP5 7GsKhxr7s/9M43FO0mc1kcF8n9FE+nLSnU2ta+9Ougv+STr5gKllTUMIfDCT9AdIN7SG7m4z hZPOkb6DdPvqUGv42W+TjpKukp7VtuautVozhEl/j/TMtp+G2wZ921YCWEjl/0YvpMaeZDBQ B3Awi9gLKeJL4BYfA5tQBjYA7X3qHzA5VKv1i29Akjao9fGEBKewfnwAJ8KfwAjPwUYQ4C3Y j2aQoQ+nwz/QhrnwHgzBB/AZpMF2eJzeXjiBZ8AMX2M2+cyCzfA72KO1QRuUUDuBIkyC2fC1 tl57VfseyiACR9CIE9Cm9UA+3E+tE3ZjMlevdYEVFsLPaUU2w1/gfS2qfUP5Z8EXmIL5QqH2 EXAgkmUObIP98Bw6UMZcXKZ9QXYrYVwO+7VFWjvF9ZNXPlTBeqr2KUqYiXnYiR/zfdom7SH6 tsk0VwcN1FrhXtgFu+GA7lUvTBYnUX4PVNLcQ7QXTsB3RGMOluHd3Dv8N/y/hUKhUztCOOqo XhD2IE+sOLEOG7END+BBfBnPcAVciJ/DvyO0CXsJWx08AHvhBXgF3oaP4CT0wQ8wiAJhKsZb cD3+luI+42ZwK7gN3IPc+1w/P43/WDAK28Wt4mFN0N7RfiDM10Mu7c/5UAN+2gdhWAmr4Wdw D3SgER6DLniZ0B6H45iEFszHaTgfF+My/Amug4dxHz6PH+Ln+CV+TegmcBInc/lcO9XbzG3j DnBRrofr41P4tfwGvpf/mD8jTBJWCL3Ujotuca1hsqHSWDP066HjmlvboXXSulxLzQk54IZi FIjFVuigldxGnO2GffA0PANRiGoDOAeOwJuE61Poh7O0YpOpOXA6zsZqrCGELdiK9+AuQrgf DxHKw3gY3sV3cYDaEKRyZs7NLeNC3DpqnbCLe1vnJ5l38Nm8m6/ka7X/8Af4Lv47IUNYKtwp rBciwi5hjzhZvEm8VVwqtomPiofE18S/i/3iKYPNcL9hn+Gg4W2jyTjTuMs4hFMIix0z4CC8 SLtuJ99GuhPmYQet6hJ4nXZvHxyFAfgeeuFJtMEQz1YzU9sLMe0BWs0X4Fn+l1AED3OPcDdr JfxTvBmna2cp11Rar/MNlNyc7KzMDKc8xWGXrrdNTk9LtV537aSJE8anWMZdMzZ5TJLZZDSI As8huLxyedCuZgZVIVOuqHAzXQ6RIXSBIajayVQ+0ke1s7gQTY3wVMhz5UWeStxTSXiixV4E RW6X3Svb1WMe2R7DpTV+Gv/KIwfsap8+XqSPd+jjsTR2OCjA7rU2eewqBu1etby9KeINetwu 7FHod1CS2wU9AAqMYYlVmBfa0GQlwTy8aprs8aqpMo1pjs/whhrV6hq/15PucATcLhXnNcj1 Kshl6ri84XAWZydXn59qu13NKuGH7cmNcuP2mAL1QTYKLferfCigckFWIyVPvU72qNf94gvr j+r5kffBCyZVLqM8FI6Uq0pwO5HO1CDTQg+SVllrp7Tc1oBfxa0EjoHQsce/Iix7mSW4yq6a 5TK5KbIqSJxDtT+apqR55aAnoILPH01VUnXF7eqxbix0ECk97lJ3KZOFDuvGuPxqS9z+Vi+T 1o1HPiFZ6UvwgqySvIBgqvYGKkJcENbZ7BWeDZGG2UQfPQGkr2wmPPNUjrYSn6GKGQtC6qba YRihJs8wuFWeqDk1zUvfECwLkH8wYplLC0j+FtkeOQ20snLftyMtoWGLIcNyGtgkW//EFlIx dH7crhPjlUNNVrmJLV+7vtSky1bvBQbSycnjjkGuqzIG5mp/F+JDgRhqW2PgsfXQHxj+9tto Oo9tuGYPlSPF5SJDroNGhKCcPrKc7Qx7xB5Z0Bixl9ubaEsJGbqkiXAkkE+E1fqJFljsd6hK ID0xDAcCcynPDSwPhZB7JEAZVg1nIKmb8gfJKd9VSYuQWe2v8aubPOmq4gkQ6bSJe6v9ai/t 30CAvKYmkBLiDc3WYczTCPPUXJqfHs9SSzkoRSASYTlr/bJD7Y1E0iPspy6uxxAuNijDhhgw F/pwbww3VVMsCdmRzgyyQ3YQrADjdAZt4PMbKAYzL8/wjQncFDmL0N6oM1xwhRiePRqG54yK 4bkJpCMYLiTMcxnDRVeP4ZtGMFx8eYZLErgJpEJoS3SGS68Qw2WjYXjeqBj2JJCOYNhLmD2M 4fKrx/D8EQxXXJ7hBQncBPJmQrtAZ7jyCjG8cDQMLxoVw1UJpCMYvoUwVzGGq68ewzUjGPZd nuHaBG4CuZjQ1uoM110hhpeMhuFbR8WwP4F0BMMBwuxnDC+9egwvu4BhoJtBJwCdU1+iG6gR ihWHaLDR+U8w2nhIEgUbz3NpZoPRhpBqMu93tBRZ8/KqThUtGiyqspwpWmQZLIKSosEi1qdN nZHiSMmi3ik8ETt3THzph+KY4Bt4hg5hdA9cgLuFDm4v1ZEUCzeFxzSRSxUE8Q+OVeUsqeWU 5cwiyB+cNhUphdAxcJTbOzRAh1/9Tkn3yuYnsh69fVzRaUihKy09R0vmBhNywfBXIP2Rjt9B 9ThDzlAOXUfx7IfnPhizMTHDwtjDia9Ap/BHoGi6B/vozWI5WEW9he7iHF1tLXTHAuOJpAl0 E2WzCOOH8xjoVglLPaV+b21eRbilPby2uSHkLlvT0shy6I/GbkmXeobnY+DLi0EF9WLqM6nn 5nWZlOdxB0xccUoxoyTAGOm91H+9iDfAWPhSf6t4g5I8FswNW4qkhi1bKnJKzVgJBQKChF5w 6tITdT4txbA46pRJ3BQXXLTARhoo5gKnNFhQL50riJlQSZf+63xEOkv9jLNEOu2cJr1Jfm8U zJeOldJ8VHotN8aR+KszJqAyTnrVea/0bEGOdLCgUIpmkS0qdZWSOCTtK7hXeqJDt/w+Vxd7 nTHsjEqPM3FI2kP5d27RJx6NB26Oi7YOvdCabl2s7o5xTx+SWp2ZUj0FojJGWuFskZY750iL S2OYEZUWsbBD0sKsY1IlKx2VlHihWfHsNzp1xNPjZV3Ow1J2vMIU5q1MkOzOhZKN8rse3ym5 nLdJpbkxfOq5iuxcZ0XWzlkxPKXXYIKAMrE6LhqyXsAn6Qacg0shA3/TXZFDmHFHVNpCorO7 IrsgI8afUMZL3VkVWR3UZ1HPoF4Xw8WKy/iYsdFYZ5xhzDPmGDONDuP1xnTjRNN4k8V0jSnZ lGQymQwmwcSZwDQxpn2i5LH9NtFA/2BBMAjsLehjC+0f1DcZbUkOTRzcDDEDbL22vcRaMr44 ZU655xKvoG4MevJ+fOgnL/FY0abupEOaut8WUKezgWYLJGb/v0G4jOIrfeu6fetOLtHP+bI3 HKTjvrq9na5jm+rt9q6T69gEO3EG6xuamAyF1XVy2KOelD32Lp8ed9H0Ejbtkz1dsMS72N+1 RAl7oj7Fx87xge5qb0XViFrbErUqvJeo5WXJKlitaj3uolpVbLqa1apitapYrWqlWq+Vl+dt ri2D/wG8wnfNZW5kc3RyZWFtCmVuZG9iago2OSAwIG9iagoyMjIKZW5kb2JqCjcwIDAgb2Jq Cjw8Ci9MZW5ndGggNzcgMCBSCi9MZW5ndGgxIDExNDg4Ci9GaWx0ZXIgL0ZsYXRlRGVjb2Rl Cj4+CnN0cmVhbQp4Ab1aC3hTVZ7/n/vOo2mSNs82TdKkTZumTVvoI1DobekLSqGUV4uttEAR GEBQBIHBQUALxeeMAgI7vhhFHGdCcTDI4LIsioLM+sBVEXVcER9YGV0UteRm/ycpHXHnm89v d77p7cl53HPv+Z/f/3nOuUAAQAtrgQV59qKuJWQ5eQFbXsZ0fPbyZa7rqnJlALINgL197pLr Fr3S/fEuAN4FoE65buHKubufKN0BkDwcwKqf19015y9Nhy4A+Grw+dJ52KC6XczG+s+x7p23 aNnN9/GaN7H+ENbXLrx+dtesce05ADkurFcv6rp5ibRBfRnrc7DuWty1qPvQF+QNrG/Aum/J 9TcuYx/hurH+W6zPWnJD95Joy6a5ALl6pO8/sI3gRf+0IMBzmLtgxmBLvPn//MMgPtzQ0/xg SQARSxImFahBM3T/xwUtNiSBDpJBDwYsGzGlQCqYwAwWsGLNBnZIg3RwQAbWnIjwYTDwRyCf 3woOrhrbIXYa0zs0VybHLvCvgDoWjfWziDzJpOn9AZIKv0eKnoFbkNbXYA9RgQf6STG8TRzE D2+BAu/Af+FIm+Eh/K2FT8g3SPmnJAf7lMI6+DU8GFsCS6ASr08Ij/SVw6ex1bEXY99BNfTC USKSFOKIHYAg9OC1HXYSLTMrthfnMB5WwFp8x0twOtYX+wzfXwofEQMJciNj7wIDPLaEYBPs gWeIm3iIn1wT+wjbrUhjO+yJNcWW43MXsFcQJsBqHO0D4iTZJI9sJ++x/bG1sbtwbul4byrM xmsR3ArbYCc8Fe81i0vnTfj+GmjEe3eh/H4CX6Ew5JJqcjPzBvsZ+xduJLc9dhTpmIrjdcKD hEVUvGQqmUOWkKfI0+TfyTdMGdPFhtg3uCXcw0jbVNgID8MhOAavw7twHvrhe4gSDmkaTSaS 1eRf8Ln/YoYxHcwa5g7mNHOBLWLf40RuM38bfzDGxd6IfY80Z4AfRkI9TIJW6MZrLiyGm+AX sIGIsBX2wr8jte/D+0RN9CRIikg9mUKuIT8jK+Fesos8S86Qs+Qc+RSpS2GcjIcJMstxvHXM JuYppo85wPSzBnYZu4Y9zL7HfsOZuA7uMF7v8/n8MiFdaBQnKfcp78fyY/fEtiNfzHh5IRfy YTThEMVFsAE5uQkx2wm74En4HfRBX2yAhOAovIp0fQAX4BJyLB0vNykm5aSZTEIKF5JF5Bdk G1K4h+xHKg+Sg/AmeZMM4KWAjVEx+cw1TBezEq/tsI15PY6PlnWzOWw+28hOjn3JPsXuZb/i srgZ3FJuNdfLbeMe5NP5Ufx0fga/hL+f38+f4P+Tv8BfFBxCj7BLeFp4XZTE4eI2USGZSIuL ZMHTqOfrYAu7BOteGEM2IFenwcsovf3wPAzAd3AYHicOUFjKzezYwxCJbURuHoI/sD+HCriX +RUzLlbJ7mZVpDh2Cd9ViPy6coHsz83xZWd5PZlulzPDkZ5mt1ktZlNqitGgT9YlaTVqlSQK PMcyBAK1nrpOVzi7M8xlexoa8mnd04UNXT9o6Ay7sKnu6j5hF32uC29d1VPGnnN/1FNO9JSH ehK9qwIq8gOuWo8rfLLG44qQGZNasXxnjafNFe6Pl5vi5Xvi5SQsu934gKvWOq/GFSadrtpw 3fJ5vbWdNfkBckBGC6TOD8ABABk09MVhGNO1Zp4VM9qjNmz31NSGbR4s4z02q7ZrTrh5Umtt TZrb3ZYfCJMxsz2zwuCpDifnDT5On3Nh15ZWHDs/MD+M9MNm7RzPnM0RGWZ10lJXe2uY7WoL M510DENe2OKpCVtWfWT9a/VKqfaOH9wMM1l1Xd29dWG5czOCTqudtNZ1B9YaJ7vwtcxtba1h chsSR4mI056YRbenlrZ0LnCFVZ5qz7zeBZ2IOTS39tlle62ns6YtDC2tfTbZFq/kBw5Ybxnp RlAO5FflV9F8pNt6SyL/eH2i/bXDNLfecvTPmDe2DOFC6EiesUhm2DUbB0EskNZy+tNdDr2z yxE+/GsjOMv5SM+YMIOixGaF+ayxXeG1kwfJ6JpXM0jcgpo+lc1ei3PorG7D/p29+hHIQOyv 97h6vwbkrKf/86tbugZbhCz910BvUv4PiVCYdF0pL48DU+vpmmf1zKPsWx5nNdY91tofNGAd O9XkR8AfaIyAqrl1LyF3tUVI7LYI1DgOoINhZ16Lt/OowM2vweGwEghgg9+NJaSgDidZRyXD 1evqHTun11XnmocixWXFc7zR3dsWRMAmtyIsMKXVHZbb0oaK3W1tI/A9BfQ9+Ah2723DNywY fAPm8aZgFDsFA43IhOzm1kmt4bU1aWG5pg1BRyE+3NwaPozy29aGvQqHKEWK18y3DtJchDQX +vF+ceItk/Ed+Iq23l76zsmtHnf4cG9vWi/VukQ9QuDHDfJgQwRoF5x4bYSsbcZnMfO402iD x+1xI1ltFNNhKMBXBCgCw/8+wiVDdOOTpUhtSRzhsn8QwuU/BeHQT0J4xBClVyE8EmkeQRGu +OchPOoqhEf/fYQrh+hGImWktjKOcNU/COHqn4LwmJ+EcM0QpVchXIs011CE6/55CNdfhXDD 30d47BDdSOQ4pHZsHOHGfxDC438Kwk0/CeEJQ5RehfBEpHkCRbj5n4fwpKsQbvn7CE8eohuJ nILUTo4jPPUfhPC0n4Lw9J+EcOsQpVch3IY0t1KEZ/zzEL7mBwgDrgy24wptFK7PWIzvR8tu XnBg/MeJDhbUPOdgWcauEkQHAZuk2uNeWGHNy5twsaIpWjFB/01Fkz5aAZUV0QqaigqHGdwG H6bt3KORyyf5I9+PjnAtA7/DIAzf/jCO04XjqHC1mAttcuAJ7nHxcSO7wtxjZtLVfkJ84M9h NH6flK7nS60T9WVOex5osnw2f94fSQa4oQWXfvHxE8M39V/sN4agsr8yagwFo6GiQtIBHcTg Li4tGe7L9tBSWbzoAxroioKYQeKZjnjcBjc5RhZ0rWyu/ZnyRyyUzppZ0knqltbUZI9bemO1 v7L+35ZG5zAvc0eUg2M7rnNboseUFfbCjTfmWQlb8sC163taCrJz+36xfl5tsDQHJ4ZYtsfe 5FfzF3Cd5IRlcu509X3ifRJ7DdOW1uqYy60gm/gnUvu4Z9QvcMc0p5l3Ut+1vp/2rVVviRCN 7LFLkl1b5WRZY5Vd5TSXWaQyZ4ZodyeXZdhc7gfcT01LzL0fkW8yhPpP9Qfp3CsQg6C+PzF5 Y1mp22UxW9zZOP9MxpRqHoYQlLkFcLt82QbS/h9PEzNZ9tuZovJyRnDKb3YfOfnrR6YGnaQo R3lGiSlH9u9n7uGmv7r/4qbeBaWdypfffntpQeiGL5XXXj5Julk7znEn8nF1nI8WmCwXrzAS UfKJPm2rcYFxNXcH28v1Grex27htxqfYJMZvUvnNjEkSyvR2G8ky2ay2CHHtc7cMTiZKJ9MP lZX9V6ZwhWvZnlKciNlo0otMLjYit9JPTwve+dqha3Z0NpUvf0jpi97GrOaOXB795vJHP/hS yRi2cXEMlimnX1b6KTuQ1g0AZD//fnzHo1A2cAxDJE6wWOwcZBEbLzxLGsFNSvauHJSq0ITa 7ppzCGslSjMd1Ef2K38ixQ/wR3DbguAaFwTKaiMclu9RgShJKt5glmyqXPBJeSqvwW8sE0uk ClW5cQF0G1bCTYZNcLthO2wx7IbHDMfgkvStKp2X1CqzZFVxotEu2tUWYyZ4DEHjKLFSXWlc ZTyg2m88ZtQli8lqRp1sNKgk4HUiwxrVIqszAKOTWCkV58BwrI8xJifpfMm2lBacwgT9RVQM m/7MGWu0Qh+fCion6qbREiIGYwgzAyoJLO0g+I8KYBheWoIr4VSzCctuwi0iB5UPGOVT5Q3l PKN8QA4TLVVi9qO8Hf6BPO4N/468y2n8kYGVFFvEgq/hn4/vF02XgxIznWEYQSSi30gIw4iS miWMJEhqNREkxsfbtSgnKptGe9hNiUUrMqjFUUMoFELMkdAKYyjE9RTk6XvWHEVCO1LcyAOk DP+3kjFMI3EqL0cfQxpnIRUDHP/9aM4y8CkSgfQ8ivRokDcS7keNltO3kq0Co/VznI71JyNm UlmK3cQmZelsqaYIcfxAAqklS4ggKlJCj7KpeUArAhwtYJEzsadXLkJInItWkiLl26+VY8qf mHXvoTh1zlImLLhRib4V/YI/chZ3DAdpWYq0qHH13Sr7XZ40q4n3pWSjkXOAP5fxOSSHKzNF sGQKZZa06Xp7AHxZOba8QIRk/Jiys0ejR5F5CBKFiCp7NGSwUGM3ZN48pWYLtWzUvjlIKqqN iRqAICmI2zlE7xXSMW94e1vxnHceH1FYvmDV3KmSNqA8pRO0yKrZG5UjyuvM62jplln9P7+9 wB6tqynfOH3+CX/u1h2zu72htKyijNFVm+68Nvoczgp3k2KneR3auQLc4XpUXiAli24x26ax JVvcluy52u6k+Zkf5Wty9bmmHHu2b4Sp3H7AdNx0xvRa4HzKefN3Kd+bv8tP1oFBk2l1Zlmk rEydhrMWnMqznkqvCqayXFWeKmjdEjRYJkpbcuxFzlLDdCgtsBUWxfEZMoQX46aw/yIaw0FT iFYEsaHCjv80DfoENCTUEFK3ECQITclwQKYOmknBhJA5CfYxpaKdhBJCVutyG/cvqrlVljft PNd6P3ERy6dkrKS8JS1s+NmKu+ryf6U8PnWDckI5p/xZ2c9MIse6i6+xFqwZm+PL8AwfNfft F4hw6fxt5Vmd0yb67J5ROWPmPX9c+ZqI57gctCNuAO4EIilCuawlgl9kOEmFKg0R0trHZPGY ySoBPe5h9003JHTlYjQa1+gmNE7U1yL34xd3QqlXjiu1/BFlYGAMdwh3i1gYGXuPK+dm4j5t CEbA3fLEkUxJ6UqyiXBvZZDs/z7n/9ijS+JxJzPFnof7QVx2QXaBnzZwaZrMNHNghFP0qzWB Ys2IlCZoKhhR4h+dba+wN6XlS00ltpEVfyQ2nEMD+d2gO0ZHTJXorCF08qOP4qzAgOAk4m8J IRuQHWh5MOUNckNHkokgIuzIlNIyXyllDLor9M9uLLuLkRGGVJRoFOMC4sOenkzkGPqxFOa9 tLJCeYavetKI9h3sUxMzR3XM6PZnqJV+Vf1SkrJv82aGTU9Xjiep2ZFN7cvu+7cdU3+zhDEa TCqt3uJrGVu18O4L6mR72ZhhxVmVd7ffU1//vKIdPq48J8nvHpEl55c8seOlGUUmcgrVGOW8 PnaaG4440r3sxXLtA+bdZqYnnYw1tRrnGW9WrzRGTMdSXjRJVkbgHK9x3gy7aNaptfpntN5U TYa+NNkJpRkWh90llVpsTlePu2HCVT48ejEuuP3UAqIjj+cUo6UYxsQ9OAWJii514aLgdjEl ehiGgktYveQu7L6nJD192J1zpqiIRz3lduU75btvifHLk4S3KmnMwVFF1XePv+XmsRsXTlu3 7CAp/47YSHnkU7IrPrdKlJFu/jDu4ztgohz4REtwMAejZ8Hi1YuC2uFVa0ysPcUpOFkfZ3fa S5NsGc5t7obaH0whevEsKhkNQ/DfgEaKahx0gNlChbME46xMoCQbExFZZpznzKrthcStnB+1 c9m/KgOEvPnMLd2jW9bctGIl1z69iZG+l7d2tZKSr4iFyJdvePruF6cNP3TH1j+gXAdjZ7gR yA8MZyATnpTH1kk9qVvJA2pOICpe0PP2Rr5OP9Z1O7ktucepZs2sJcWcYmmQxpvHW8ba283t lhn2M+Qd7lPHx65LLv04UqffyK/Xc0yE3C8Pm6ibqbtex+p0aYI30y1ajIE0jZllMtlSy+rM jE7tWi2jtXsZp+7+DJvHi1AMcjN6FqW/A2Oys/3BBBwnE2FZR/SKuwWUbbTGaKjxEt2D9ijO VYTIoIeRhLyySEcOiquv2Xi6Xk7RMFGz0DVycmtZhoV4NDPuuPyKcoQ4P0pll/18wdKbzs9d 3LW28c5d1bnFaYVdcx4kWjT2aaSAyi3B0w5gNvOv4onMrVVBrLEQQGl2wkQ8TZmJCRUdWyzY U4P8b8d4RoWY6tBf2bDVgicXauzN4kkPPddRgQ/vOdGv/hJ72/Ccw0Z0yIFO3P8fNE5no6FQ xamLgzFHJV0fVPZ3XOyn0oDeqIAg403DTB6UCk/JMKrLw5jiQLZ1ad7Bg8rZB3eOHN3Pv8qy n7BsictV8dLle9nrX6r7ffUspKFaqeauRZ4noa8phBmyvjcDDQrvLQyKRiEryZsbIZWyK90V sCYXMk6jM8tXGEixF6dvSMtXlQZsRcU/ENmEmTKEUGzRSkVPVvaHMNRDtaNK571iheIqZ0RG lbgNuGhwZ3p9Vxg2itotDKxLhhuHlTGHetcv3hLKcI3Yohk1Tyam+lXKY68q3+pIqTatYNH2 4Zm5wakbXxv46r1rPtv6mx2P3Nm4eOa4XvYGW96N/zLwzes/i+x6tNjsu656Z12dp4r4Lv83 aWQp/xg8wwCyhz+BsxdhpJw5HsaTdmjH45q9yDlBVMd9heAjIrqIPndzQiPjizIav6KHqGzC QAaNCCphPO1R3keNiycOj76UFQN4pEjwhAC4RfwhlIK/yH0yU8efYj5iuGSMT6fym/i7pbtU z/PHpbfF96UzKo0kWIUgG+Ry+HyhjC0XxrMNQgfbJixg5ws3cxu5rez94hPs77k9wm5xPxvh XmBf4uyNwjhxGr+RWy8d5V+U3mbf5t4VT0saXqXieF7QaDiJEbGI5w5qxsWyJ4wch7dYhhMY lZpjBbWoxpjbnkTUPtC4NIUaWcNpbNqkHnfzh1T2LnfEo8gvaMiOgS51NpZQT1NBHrdG3zip dVXbUTBiWyiU3KOXKkQ99ZxLOzAETnEbiFuF0a9ocK8jVjKbdCnryR3KbmVgufIJf+jyObJd mRmdQ15brTxBsdqMP7vRZ7OQJacwQNQ8ddg+YuP4IRY0JXw0EpNYPpDdyofEgQ/h82txHju5 GXhadaSqCcqQywR1jkH9YiAL03w8U12AmrcS81WYb8K8F/MHMH8A8ycwHcD0MXJLh/3duIpm USuT8AwsH3WS/mahvDjxrQ7UaAl1ODiozQKeYKpIMj5hgCZIxVIGuLCXD3MbjeKIB9/XjOeo CX2OHtWj7l68MhtcQ6BKJ2KrhAtHpcbLxOISgi400XOgZv+g6DahIx+GjtxCc/7uO0IFejWj nEnNnrs836J8kOqdv8pvQYE0lQQnb1jTNNpVPrl1ITejvC40uWxBdBKzf3TO+FnDx0ZXMJu6 AhMn5rdFl3Dyg1O9ctmw5s78fJx/D8puF9oFeu7cKOfzxESySBlp1czTCMSoF1ReNLQ6Tm3h Sy3JjN1moOskq+25K+rSFD1KY5ZE7Iiy018ZSkSL8dXQ/5qLj+19Uzlj8S+/tzRdOUtSyopa e+Zz7XtPRjOZrdMKpqyu6o72IYlTsqqpEqPdwthhJ57wa5A+KzTJORaWSNqN2o161pJkTZ6b xPJea6qo8eo0VqvElFrsdqnUYLPZI2T5viHXkohwDXR9RJf6iP4NcMPSQVMV96beeMiK8awL TIQ5f/vta9b09KxhCpTPlY/x+pykotu3kdTo6y/17dq1d++uXX1zlSfJ1L98TmYoj33OyIjl GmUytx1lMwmlYpyca0mR1Ol2xusS7YLam6Kx6aQka1Kp3p4pONOcVp/N5s7c5m6+4v0uUvfX 1B/3fPFIYCgQSIhGIoIpMVI358n0ZdMtooSAsMtuvHXHiIzuipYVaxxEpURfXjctmK+cI4aC 4TPXMw8e+dWEm59ryo88wIQw0r6AsfZrVd7a6Iv8hYfrc8cizAkbxgxw7eidxh0AltTvY5KT hAipl20pYpKgVbuYQkZmWBNdMes0Pm18/Tdnn7t57hVZP5UIrDuo3URfcIqaTgxg0F0PCnaC WOZdTUqaP+m3I924DtRXFzWv5doJUc6wzJLK9dFLXPVzi3LGUJoY5P07eBbcBXnoZW+RJ6r0 QrYtiVVxbo2mUT1WU++ucTXkvslKjkyXVs2Z8zizPRAwilwgRxMIJJvULoe5KVM05YtNWfYC LTiakvOhKc+WX/CDCJLufcVxp8sfNHAIf0JIoif1J+MLxGs7riUddFmD8SNd+WTFFz6ollct fOKKnCp4XNm47pmtyii5e8rsnBwldmD8+P43XyYkRflQsAWXdkz0+2N7pk758rIS+xoPxtvH u0LFxYU226iC2pq1W99+9MUy14gRviKzpTxnUsvqR06+vZtFRcBYJPYZczM/D/V03H59INmp DRieJUuBI+2yWYR2gQhWZE2ycJFT+eCXyCdrhOj2uTspe05VnI1WXKyg/PkCFz64yYh7fRfP FhWmlNC9RhpQJNYQJlHARZ3BtI3Y9+7NnJ7k0PUcH1fILjpBCpVXTkQPj3ET8gYvNhXNZR6k 8h77hJuKtoN+qzJeLlCb7Wa/udw8TewWBTt6HMGsS1LzGMPbk9Q+u1VjTyelVlta+l+NB9VL Y6gpeiqOOY3e0eQj2rhuQbhxQUNlHONfkYbAlLQs8rDZd8MvS/HTA+U85zKPWTPlqylB8jlX Hb2+Izh5uTyfmTTw3Ha+OKUi8LvOg8y9DsTOjjZuOn4zI8Cv5Yk+YYowR/iN8Ac8oxeInqnH W6uYZewKTqgnG6GH38o/zj/Dv8h+TC4RFeviOJ8RfSzjwp1VI75CYHgOXQ7LqCUGnU+EaPtY HjVFu5+zid0Ub9ty3EKyNmEsh/82/QvWxKYMulUeN2WuONSeAutQmc55Kd1QwjCDuFPYLFKs rFBeV1YS+UOueuA5rvryGZyHDn2fG+ehhRAeruZBBPhgBCRMgInFpA4+i3zBr5FQjJ9FL3al pB0sFRYRdxodQxMfiOkh7sf2kFzlqPLOk08pb9FNuj042AXWMPAca798DstfJXTRpNRzzchr +pXS2/ISn3qaeq76fvUu9etqDDqIIKSLhqR80ZU0SixKahQ7ROpBVogrk5IsyaVJPaqNmm2a iEZITdVKSYxLq/UZNRq1IDJOSfIZVSpaTFKbtBqVJIgqcDKBFKc+OVU0o1DrkjRaxHcf3lBj LmtTfinZuk3mJxLSvRy3wM5aL+PajyZb3Aoh5JVNZ6Nn0eHGd8MQDoLY8wh+y82rnh82CD4t 012O4BUG4PZFadlo4kugxNAVs4/s9frH2215nLKEjPriAxJUehfecii7oICse5Vh1EbDQi13 w+UzrHfgFeX4/YQVUqm+xlPPF1/fODO54msw0E/CAJ6vHNE5lOuUamEn7v4QXBnQ/vQPcyFX ycXP1cilM5ff0dwydCdxH8DFH4PtTAh36Y7Bw5jaMe3E+gZhD2zF8lZ+GjyK+aOYT+U+BDd3 I4zEVI/lSsyDzB4wYbkan9mE9XWYbxYdsBbbemg7pjWsA9bhverBvmuwbBdCoMMc10QwHK/H MNhbTLYw6cwcZg9rZ59lP+Pu4i7z0/jPhGbhuKCI94lPS+3Sb1WMqlO1R12oXqX+k6ZYs0RL oaDzdWGcxsJCjLAYXA/R9ROIn6hTcE1F7xKMvWiOgNAxx08fO2Ncc15D98Ll3cvmz+7Kr75+ 4RzqI+J/MfoV1d/6c2EjRpqQjTFaANc9RTAMSjCKK8PvwurwC6wGGAvj8Eu1Cbima8bvsVpg Mn7jNQ2m45dZbfilINIUgZa8CDRgGo1pOCZ/3l5JfpbcA6kdF2UVcXKgcb5l++I5UoCe/1z8 N0wKZG0SqGavr3DOXr++IbdKhXvkZWg4nKQWvPG8ps/7pDNCRvd5PZiNSmRMX5kDayCryrzO aNks5+WyiETkNOe33l85L2H6xlvp/Npb5HwV+71SVu88WYX3+5wn/BEGs+PeCEfkZOeL3lud fyjLdT5dNtLZ58O2PufeKsz2O3eV3ep8dEO85RF/PHvYGyHb+5wP0Wy/80F8/5b18Rv3Jx5c l8iWbIgPdP2+eLZ4X4R5cr9zkTfbOQsfJLLG2eFd6Gz3hpxTqiIkq8/ZRB/b7xzvO+lspEP3 OeXEQKWJt5d44xQXJ4YNeA86cxIjZNLecorT5R3vdOD7Aw9tcQa81zqr/BGy+5mGHL+3wbel NEIuxsegGRJKs8WJbLbvEHkceZtLZuDxxAP7GnKRZnJPn3M9Ztv3NeSUZUXYT2Sjc5+vwbcB UymmLExTI2SKHBC3inPEqeIwMU/MFbNxRzZDTBNTJaOkl3SSVlJLEu7G43pLAik1EvuznEdl NVXA703RK3D0l4uX9SibJC6gKMZ4YMKgoEUEuM28vNJaaRxtCNXV/I2fznhjZ03eX//QgQ/9 WYkjvAU/AAnvcbSFi2kh5mgbuvv/K3RX4/ONLSv3taw8Py3+DZGntrsTPyUKb16On3qtneVy 7T2/kt6gX7N0zpo9j+Zd3eGVnu6a8HlPjWtvS/y5H92eRm+3eGr2wrTaKa17p8ndNX0tcgv9 RqhtX3NtAxpsHOTKWJuGxmqo/Rtj1dKXNdCxmuPP/WisCfR2Mx1rAh1rAh2rWW6Oj5WXVzt/ cjX8D8Wem3RlbmRzdHJlYW0KZW5kb2JqCjcxIDAgb2JqCjw8Ci9MZW5ndGggNzggMCBSCi9M ZW5ndGgxIDExNzUyCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ab16C3hTVbb/ 2ueZnCRtkjbPNk3SpE2bpk/6CpT2tPRJKZTyarGVFigWBC3KgMjgIKiFouNjRBAZHyNeFHUM xYEg4p/LxUFF5qo4gyKK3kF8YGXGW0UtOfmvc1Iq+Pfz8/v+801Pd/bz7L3Ob629HvscIACg hTVAgzhvSVcv2UglYsvrmF6bt3yZ65rKTBGAbAGg71jQe82SN7o/2Q7AugCEhGsWr1yw7H0S AogvBLAxPd1d8/8x/cB5gIxSvL+4BxvUd/CZWO/FurdnybKbHh7Q3ov1+7F+5+Lr53V1Tbzm DEAmzgf1S7pu6lX1CRex3oN113VdS7r/9NnwEayvx7qv9/obl9FLmFVYxzWhp/eG7t5Iy4YF AH4r0vff2Ebwkv+0wMFLmLtg9kiL0nzFD4U1+oqWKysMVlmliQMeVFhSKzVB+QXQKLkWdJjH QTzoR9r/38yATUZIgEQwgRnLFmWIFWxghyRIxpoDUsCJ1Mp/bkjFhQ+CgT0E2exmcDBV2A/R k5jek3NpWvQ8+wYI0Uh0kEbkCY4nqaeHSSI8h5TuhVuAgbdgJ1GDBwZJAbxLHMQP74AE78H/ 4Job4VH8rYFPyTf4TJ+RDBxTDGvhYXgk2gu9UIHXp4RFakvhs+iq6CvR76AK+uEw4UkCcUT3 QS704bUVthEtNTe6C6wwCVbAGpzjVTgZHYh+jvMXw8fEQHKZcdH3gUIk7RCEDbAT9hI38RA/ uSr6MbZbkcZ22Bltii7H+87jqFyYDKtwtY+Ik6STLLKVfEAPRtdEf4vPlox9M2AeXkvgVtgC 2+BZZdRcJpk14fzV0Ih9v0X5/RS+QmHIJFXkJuqv9Of0P5hxzNboYaRjBq7XCY8QGlHxkhlk Puklz5LnyX+Rb6gSqosO0n9lepnHkLYZsB4egwNwBI7D+3AOBuF7iBAGaSonU8gq8nu873+o MVQHtZq6kzpJnafz6Q8YntnI3s7ujzLRv0a/R5pTwA/joA6mQit047UAroNfwW/gNsLDZtgF /4XUnobTRCB6kkvySR2ZTq4i15KVcC/ZTl4gp8gZcpZ8htQlUE7KQ+VSy3G9tdQG6llqgNpH DdIGehm9mj5If0B/w5iYDuYgXqfZbHYZl8w18lOl+6XT0ezoPdGtyBczXl7IhGwoJwyiuARu Q05uQMy2wXZ4Gv4IAzAQHSZBOAxvIl0fwXm4gBxLxstNCkgpaSZTkcLFZAn5DdmCFO4ke5DK /WQ/nCAnyDBeEtgoNZVNXUV1USvx2gpbqOMKPlraTWfQ2XQjPS36T/pZehf9FZPGzGaWMquY fmYL8wibzI5nZ7Gz2V52E7uHPcr+jT3PDnEOro/bzj3PHedVfCG/hZdIKtLiImnwPO7ztfAA 3Yt1L0wgtyFXZ8LrKL2D8DIMw3dwEHYQB0i0zM306GMQjq5Hbh6AP9G/hjK4l/odNTFaQT9J q0lB9ALOlYf8unSB6M/M8KWneT2pbpczxZGcZLdZLWZTYoLRoI+P02k1glrFcyxDUwQCNZ7a TlcovTPEpHvq67PluqcLG7oua+gMubCp9soxIZd8Xxd2XTFSxJELfjRSjI0UR0cSvasMyrID rhqPK3Ss2uMKk9lTW7F8V7WnzRUaVMpNSvkepazDstuNN7hqrD3VrhDpdNWEapf39Nd0VmcH yD4RdZCQHYB9ACJo5IlDMKFrdY8VM3lETcjuqa4J2TxYxj46raZrfqh5amtNdZLb3ZYdCJEJ 8zxzQ+CpCsVnjdwu3+fCoS2tuHZ2YGEI6YeN2vme+RvDIsztlEtd7a0huqstRHXKaxiyQhZP dchy88fWH6qXSjV3XtYZotJqu7r7a0Ni50YEXa52yrWuO7HWOM2F01K3t7WGyO1InEyEQnvs Kbo9NXJL5yJXSO2p8vT0L+pEzKG5dcAu2ms8ndVtIWhpHbCJNqWSHdhnvWWcG0HZl12ZXSnn 49zWW2L5J+ti7W8dlHPrLYc/xLyxZRQXIq/kaUAyQ655uAhigbSWyj/dpdA/rxThw782gk+5 EOmZEKJQlOi0EJvW0BVaM22EjK6e6hHiFlUPqG32GnyGzqo2HN/Zrx+LDMTxeo+r/2tAznoG v7iypWukhUvTfw1yp8z/UREKka5L5eUKMDWerh6rp0dm33KF1Vj3WGsua8A6DqrODoM/0BgG dXPrLkJ+2xYm0dvDUO3YhwaGnnM1dmfJArewGpfDSiCADX43lpCCWnzIWlkyXP2u/ob5/a5a Vw+KFJOm5NjR3d+Wi4BNa0VYYHqrOyS2JY0Wu9vaxuI8OfI8eAsO72/DGRaNzIC50pQbwUG5 gUZkQnpz69TW0JrqpJBY3YagoxAfbG4NHUT5bWvDUXmjlCLFqxdaR2jOR5rz/NhfEJtlGs6B U7T198tzTmv1uEMH+/uT+uVdF6uHCfy4QRxpCIM8BB+8JkzWNOO9mHncSXKDx+1xI1ltMqZj UIAvCVAYCn8e4aJRuvHOYqS2SEG45F+EcOkvQTj4ixAeO0rpFQiPQ5rHygiX/fsQHn8FwuU/ j3DFKN1IpIjUVigIV/6LEK76JQhP+EUIV49SegXCNUhztYxw7b8P4borEK7/eYQbRulGIici tQ0Kwo3/IoQn/RKEm34RwpNHKb0C4SlI82QZ4eZ/H8JTr0C45ecRnjZKNxI5HamdpiA841+E 8MxfgvCsX4Rw6yilVyDchjS3ygjP/vchfNVlCANGBlsxQhuP8RmN/n256GY5B/p/DO+gQWAZ B01TdjXHOwjYVOqd7sVl1qysyUNlTZGyyfpvypr0kTKoKIuUySk/b4zBbfBh2so8Hr54jD30 fXmYaRn+IzphGLkul55A/9qPMeY40QlfCipGt5TNYIR4i8WuFujZXC8wtrj4XvdvRtcYDAYn 13RXn22CisEhQzA4mJ9nKSclHlwikePjiGf5zKncs6TQm190d9Kgtbeb+CWp+v7iseNwvTW4 6HO4Hg3pYgLJoAUWFyK9GNyzo2s0RZT5oaIJp05wG9xrSK70Js7ytxjNlugHzC7maozA54mF NHrGTKqRZTmaohkq1UgITs4yFE0YjgWK7OcYej+rIXYV2HjVTvc1dTJYZ/RnbVBhbYoEg/iP T0EMljJjkOnLyVKt1r+MuVUpIAHEoMYw08JsvbiXbhheQD1MDkqfSSekv0mfk4Myhj/Qc60Y rOfIT5GEDjxhKA6DfEqmaz9Q9H6iAbuK+nmijEGj5aeogg4kSqaL2TW8gJ54cQ+zlTwsicSM cW8msUjlCAJG7uyTKEMUCHiWcEq8tociPjZDKOVK1PVcj3CTsJ5Zz22lNzFbuJ30E8yTXJiE hVfIK8I79DuCifAcR4FKrcYfgfAslSgIaUasJrJsmhH7eJUfD0MoQYMs4FBYWJVGh9zUCPiA YZI4oKYpzPYINm33r26wZi2frB/6AXCbwmNrLlRYypoqyhD7YC6KK4sMWK1vRPeJOZgUYg63 yYyINdDYQB9uM+BI/O/Tl5XxmPLzSAd0ELcGg0c3Bn9uQuWS5eGnSTslSANzIh8tkF6iXsBY sZpM/b5cFiRlVz2G2HRhSY1nJpnQJgaeYnbwO4z0CnOfmUoW/IT4wJ9Bafw+VbKeLbZO0Zc4 7VmgSfPZ/FkvkhQ8RGlBMVb2XWzbNQ0ODRqDuCcqIsZgbiQ4QpjBXVBcVOhL9xAslShFH8gB Hs/xKUTJcMugkJMjZFHXyuaaa6UXsVA8d05RJ6ldWl2dPnHpjVX+irr/XBqZT73OHJL2N3Rc 47ZEjkgr7Hnrb8yyErrowavX9bXkpGcO/GZdT01ucQY+GHK9PXqCXcWeV05+lomZs4T7+ftV 9FVUW1KrYwGzgmxgn0ocYPYKf2aOaE5S7yW+bz2d9K1VbwkTjeixq1R2baWTpo2VdrXTXGJR lThTeLs7viTF5nI/6H52ZuzZB1HjNBmCg28PIisHK8oQg1w97luZK8aSYrfLYra40/H5UylT onkMQlDi5sDt8qUbSPt/P48Cu+yZObz0ekru9CeePHTs4T/MyHWS/AxprxSVDu3ZQ93DzHpz z9CG/kXFndI/v/32wqLgDf+U3nr9GOmm7bj3nkA+Uvi4GsgNQ33WC6gU1NCYFQZOHwbyBryA +lOFDS/gCFByGs+uGrPy8glifuliPrg4RL0eKaTzhh9ngswB6UgUpNulCzKOZFQXa6BIRNGg aZaiNCoVq0rj7TpKkwY2re6gu2Xl5cKgaOCKMhSEmAK+tNRWkk+JpED6S+QgeyjyF6rg+3Lq vsh1SBvB8xFgduKSLGSK8UBRlayKtvMUzs/xYZK8293y9MgSk/VnUTtGKmLq0eDeRgqpk8Nf sYeG66QLOBcN3cj7z5H3GuX8r1L0mbVmoy3RZt9sZ9nKZAutqYxXJ1MlyQlJ9hRVSYLNkXLa fe5HPB3haH4edHiNRYWUwkPjGC/PKfzTx9hrIPTpEyf27j15ci916PQO6bB0eMeHH+4gZaRs x+lI+SkS9923JF766rvvpK9uPv7MM8fJXWTT0WeeOSpdS2tlOX0ceajB51bhCWa5mLyZbOYo rZ9h4mh/PBWnQursJlqXFmdLNIWJA2EYIVOxdk2DUFEhC11M5tLlrYQ7Dhi5gEXGRJ9cuUTC s74lK0m+9O3X0hHpL9TaD4iK6ZwrTV50oxR5J/Ile+gMniqP0LIUaRHwhKZV9Ls8SVYT60tI R4XgAH8m5XOoHK7UBM6SypVYkmbp7QHwpWXYsgJhkvJjys4cjhxGbYXGBa2xQmMkaLDIimFU FXiKzRZZC8i6wEESca+Y5M2SS3IUnYBa4Q3S0VPY3lYw/70dY/NKF928YIZKG5CejeO0hKLm rZcOScep46gVlln9v74jxx6prS5dP2vhUX/m5ofmdXuDSWn5KeWVG+66OvISPhWeOEZPsnEo Fzl4Cvq4uEgVz7v5dJvGFm9xW9IXaLt1C1M/ztZk6jNNGfZ031hTqX2f6TXTKdNbgXMJ58zf JXxv/i47Pg4MmlSrM82iSkuN0zDWnLezrG8nV+Ym0kxlljrX+kCuwTJF9UCGPd9ZbJgFxTm2 vHwFn1GlMaSoDdl9uKQ2BvWDiA2R8ULtjmlEf5otitKQVWguQWiKCgGZOqJSOBNC5iQ4xpSI OgWKCFkVl9m4Z0n1raK4YdvZ1k3ERSyfkQaV9I5qcf21K35bm/07aceM26Sj0lnpQ2kPNZUc 6S64ypqzuiHDl+IpHL/g3T8T7sK520vTOmdO8dk94zMm9Lz8mvQ14c8yGbhH3bhHjyKSPJSK WsL5eYpRqdHoQZi0DlBpaPdaRTWHXtlBt2zz0CtrGorE/Bn0lypkfwy5r1zMUalOek2qYQ9J w8MTmAN4okjDOPRtSpk5eN4fhLFwtzhlHFVUvJJsIMw7KST9f8/6P/HE6Vg87U6wZ+GZIZOe k57jlxuYJE1qkjkw1sn7BU2gQDM2oQmacsYW+cvT7WX2pqRsVVORbVzZi8SGz1BP/jhiutBo yQr8jCF47OOPlf2OTuMxxN8iG1lkh0UpZ41wI47EE45H2JEpxSW+YtmgoWpHW+bGsrsAGWFI RIlGMc4hPhzpSUWOoc5PoD5IKskTZ/uqpo5tf4h+dkrq+I7Z3f4UQRpU1y0lCbs3bqTo5GTp NZ1Aj2tqX3b/fz4044leymgwqbV6i6+loXLx3eeFeHvJhDEFaRV3t99TV/eypC2cWJqh87vH ponZRU899OrsfBN5G7cxynld9CRTiDjK7z2uE2seND9ppvqSSYOp1dhjvElYaQybjiS8YlJZ KY5xvMV4U+y8OU7Q6vdqvYmaFH1xvBOKUywOu0tVbLE5XX3u+slX2LvIkCK4g7i5g2j0lFzG aCn6Ioq1k0GSRVc2d7K+pIr0MAYFl9B6lTuv+56i5OQxd82friYeYfod0ncS6kjjP48R1iol UfvH51fdPemWmxrWL565dtl+UvodsZHS8Gdku/JsFSgj3exBfB/kgCli4FMtemomB6WnweLV 85zg8AoaE21PcHJO2sfYnfZinS3FucVdX3PZI0SGzuAmk002/htQSck7DjrAbJGFswh9klSQ STbGvJdUhefUzVvziFs6N37bsv8jDRNyYu8t3eUtq3+1YiXTPquJUn0vbu5qJUVfEQsRL97w /N2vzCw8cOfmP6Fc50ZPMWORH2j68e3T02JDraovcTN5EH1FomY5PWtvZGv1Da47yO3xfU6B NtOWBHOCpV41yTzJ0mBvN7dbZttPkfeYzxyfuC649BNJrX49u07PoIu5SRwzJW5O3PVxdFxc EudNdfMWYyBJY6apVLrYsio1pVO7Rktp7V7KGbcpxebxIhQj3IycQenvQP/lzGBuDI5jMRem A+02LO0gSzsAZRu1MSpqvHj3iD5SuIoQGfQwjpA3lsSR/fyqq9afrBMTNFTEzHWNm9ZakmIh Hs3sOy++IR0izo8T6WW/XrT0V+cWXNe1pvGu7VWZBUl5XfMfIVpU9kkkR5Zbgm/EgNrIvolv 8G6tzMUaDQGUZidMQa9lDibc6NhiwZEa5H87vvVTI6ZxaK9s2GrBt1sCjqYxnpPfBKrBh31O tKv34WgbvguzkTjkQCe+IxpRTmcw/Cl7e2gk4qqQY8iKwY6hQVka0BrlEGS8aYxJju48RWPk vTyGKgikW5dm7d8vnXlk27jyQfZNmv6UpotcrrJXL95LX/9q7XNVc5GGKqmKuRp5rkNbkwez RX1/CioU1puXyxu5NJ03M0wqRFeyK2CNz6OcRmeaLy+QYC9Ivi0pW10csOUXXCayMTVlCKLY opaKHKsYDFYgpwyKmfBe0kLKljMio4owFsVdl+r1XWLYeFlvoQNTVGgcU0Id6F933QPBFNfY BzTje0RiqrtZ+o83pW/jSLE2KWfJ1sLUzNwZ698a/uqDqz7f/MRDf7ir8bo5E/vpG2xZN/5+ +Jvj14a3P15g9l1Tta221lNJfBf/lzTSMv8ofM8FZCd7FJ+ex4g6dRJMIu3Qjq/0diHnOF5Q bAXnIzyaiAF3c2xHKoG7HFKjhVCCXjmgQdsvp53SadxxSmLw9ai0YhhfOxN8wwpEju1oSBMT KCBKHA0+gnH06LSjcTT6iZkE53pS+jtx4E14/xoAbhszG9/SHapsghKknKAcUSgzFKRhWojv mxehNK3E/GbMN2Dej/mDmD+I+VOY9mH6BOUwDse7MYqiUdJ04MU5rcpvGmLgxFkdKKUqlMvc EQnl8M2tmsTjHQZogkQspYALR/kwt8meCfHgfM34/jgmo5HDepTHoUunAmVlyPmmmL8QM0so qHiZaLdBDrTQGplQWi8ruk1onMagcbLIOXv3ncEcvUBJpxLTFyzPtkgfJXoX3uy3IMimotxp t61uKneVTmtdzMwurQ1OK1kUmUrtKc+YNLewIbKC2tAVmDIluy3Sy4iPzPCKJWOaO7Oz8fn7 0C/oQlk34zM2itksMZE0UkJaNT0ajhj1nNqLyiOOESxssSWestsMcb54m9X20iURaIocHgmk ULzx4GawIhjzgNCg/sSz+Oj+E9Ipi3/5vcXJ0hmSUJLf2reQad91LJJKbZ6ZM31VZXdkAEmc nlYlCybuRbSH25hu5JYFudMkZlhootKu167X0xadNX6Bjma91kRe443TWK0qqthit6uKDTab PUyW7x5VlzGvzRAcDQzIDXDD0pHtp1gIr+KGoY/mAhOhzt1xx+rVfX2rqRzpC+kTvL4giWjK bCQxcvzVge3bd+3avn1ggfQ0mfGPL8hs6T++oETEcrU0jdmKsqlDqZgoZloSVEKynfK6eDsn eBM0tjiVzqor1ttTOWeS0+qz2dypW9zNlzT6kKzSmwYVba5Yt1HjFhONmFUuMsqq25PqS5eP xmICQi+78daHxqZ0l7WsWO0gainy+tqZudnSWWLIKZyzjnrk0O8m3/RSU3b4QSqI3uN59B/f qvTWRF5hzz9Wl9mAMOMeWotKYJhpR407cR/QpG43Fa/DY5U60ZbA6zit4KLyKJGiTegyUnEa n1aJaebvdjcvuCTrb8cO1zpkXYD67W2Ma2SjjCZoRLBjxFLvaxKS/LpnxrkxttFX5TevYdoJ kU7RVG/FusgFpuqlJRkTZJoo5P17+A68C7LQctwiTlHruXSbjlYzbo2mUWjQ1LmrXfWZJ2iV I9WlFRhzFmO2BwJGnglkaAKBeJPgcpibUnlTNt+UZs/RgqMpPhuasmzZOZd5RfLZh4K77NKj U4Twx4Qkckx/TAl6ru64mnTIrjr6RLI3n6Y487gtr3DmlY2cyHlc6ejLz1OnFN09fV5GhhTd N2nS4InXCUmQ/s7Zcpd2TPH7oztnTP/nRSn6NX4Q0D7JFSwoyLPZxufUVK/Z/O7jr5S4xo71 5ZstpRlTW1b94di7T9K4EdC+Rj+nbmJ7cJ9O3KMPxDu1AcMLZCkwpF0089DOEc6KrInnhhi1 D+5DPlnDJG63u1Nmz9tlZyJlQ2Uyf75EZx5Pq/CsZ+gMBuFF8hmrbCRjfrGJ5zBQMZi2EPuu XamzdI64vtcm5tFLjpI86Y2jkYMT3IT8leWb8hdQj8jyHv2UmYG6Q/5aZ5KYI5jtZr+51DyT 7+Y5Oy8AZ47TCSz6pXad4LNbNfZkUmy1JSX/oDzkfWkMNkXeVjCXPVJU+Yg2+uIINzrpsoyj TyefzqLIFxnSyGNm3w33FeMnF9I5xmWesHr6V9NzyRdMVeT6jtxpy8WF1NThl7ayBQllgT92 7qfudSB2dtRxzQy+sie0uFmFaoTimQTGLtA+ysukc36hmAkKNUyDMINpEzYxDwqPMs8JzzN7 +f3CYeY14S3mPeFj5gJjYWgrw9I+I4VHoayVoVmfEW2zoLYKGrXPyKtUgsYqqDU+I65JGF5g gGPxhFGjRiOi5llOQxNBkA9TKZDPG1VP4QFMt1b3VIxLI8eMsfPFplzrYf1hlEcMZuRAXI7E 0X5gwsCG6PvwjBfPGm9u079s1bN9WatVl9dG+9g+vXwaPNInu8lLSccYNXEnETf+4tkyWSZt Ix17Bsg0aSuWf//iASqDskqHSVlkMHKc1En7kM8mqQ7xm6N8p/Wu2OsTZgoLhE3CduG4wLEC 4bhk3qDL5l268Xy+rpHv4GXrsYJfqdNZ4ot1fer1mi2asIZLTNSqdJRLq/UZNRqB4ymnSuXD c1m5qBNMWsSJ49XgpAIJTn18Im9GjOJ0Gm2YaHdjh4C5qE24T2XrNplHMRtqOmO9iPjIaeRo FhVQ05nIGTS2yuks7miCh7MsHsa23HTzy2NGDmblshy158ain6UdGI4Xl5QTn4IOoeQI0Ed2 ef2T7LYsRuol47/8CE9h+xffciA9J4esfZOiBKNhsZa54eIp2jv8hvTaJkJzifJeVdIXXfXP zYkv+xoM8gdyAC9XjO0czU1SFbcNTzMIerryePkPcy5Twm8CteTCqYvvaW4Z7Yn1A3jYI7CV CqJqDMJyTGuYZ8AiJ2wvxPQYpnZ2Jjwhj2P+Dtu4IHRj/XGsP475DGxzMzfCOEx1WK7APJfa CSYsV+F8GzBt5B0479+hT27DtJp2wFocVzUybjWW7ZjQ38dz+kJYjN9H/Y2kkhCVSt1P/Zn6 nnbRy+kXmQDzOnORfZSL43q4i/xc/pRKr8pTvaPOUN+iPiWkC88I32gmaj7XrlWe0oM+G41z qVDa9Ep8APynQgLGDDE05R0l/3HyupOrKmdWzcqq7168vHvZwnld2VXXL54v2wvlLyp/SfZT fx5spNELNKBv50Y/Lw3SIQNtSy4UwBgoQt+uBL+Sq8Xv0eqhASbid3tT0JebCi0wDb93mwmz 8Cu1q6A9DC14SluPqRxTISZ/1i6V+AK5BxI7hkQ1cTKgcb5j+/IlDI10cFb5DZEcUasD9bx1 Zc5569bVZ1aqSSOUMAScpAa8Sl494H3aGSblA14PZuNjGTVQ4sAaiOoSrzNSMtd5sSSsImKS 81vv75wXMH3jrXB+7c13vonj3iipcx6rxP4B51F/mMLsNW+YIWK88xXvrc4/lWQ6ny8Z5xzw YduAc1clZnuc20tudT5+m9LyB7+SPeYNk60DzkflbI/zEZz/gXVKx6bYjWtjWe9tykLX71ay 63aHqaf3OJd4051z8UYiapwd3sXOdm/QOb0yTNIGnE3ybXuck3zHnI3y0gNOMbZQcWz2Iq9C cUFs2YB3vzMjtkKqPFpMcLq8k5wOnD/w6APOgPdqZ6U/TJ7cW5/h99b7HigOkyFlDTlDQuXs ulg2z3eA7ECuZpLZkEYe3F2fiTSTewac6zDburs+oyQtTH8qGp27ffW+2zAVY0rDNCNMposB fjM/n5/Bj+Gz+Ew+HU8dU/gkPlFlRHmOU2lVgkql4lSMilKBKjEc/VDMkndyIoffvGJgwsi/ jFLWo3wSRUhRlCmCNmAihDm43by8wlphLDcEa6t/4qdTaeyszvrhDw366J+VOEIP4IcwoZ2O tlCBXIg62kZ7//8K3VV4f2PLyt0tK8/NVL6l8tR0d+InVaGNy/GTtzVzXa5d51bKHfJXPZ1z 5/XIeVd3aKWnuzp0zlPt2tWi3Pej7plyd4unehfMrJneumum2F090CK2yN9Kte1urqlHNwUX ubTWhtG16mt+Yq0aebJ6ea1m5b4frTVZ7m6W15osrzVZXqtZbFbWysqqWTitCv4vGH/jNmVu ZHN0cmVhbQplbmRvYmoKNzIgMCBvYmoKPDwKL0xlbmd0aCA3OSAwIFIKL0xlbmd0aDEgNTA3 MgovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAG9WAtwVNUZ/v/72EcIsuGhm4T1 7nI3713DSwIkJjdhNwQDMdkQ3OWhu0kWE5pArDSVUhAhqCzWwbEizdAilRktFnuzQdzIaDMK o60y9TFW6wu1PlBM0zo8qiG5/c/dsBKGYTJThnvm3P/8//kf3/3OSXJOAAEgGTYBD0pDa6gN TFBIltepWxva19rvKM1RaPw5AH/fyrY7Wt8If7UPQGgBSJpwR8u6ldPL++8EuGYT+exrCoca +7P/TONxTtJnNZHBfJ/RRPpy0p1NrWvvTroL/kk6+YCpZU1DCHwwk/QHSDe0hu5uM4WTzpG+ g3T76lBr+Nlvk46SrpKe1bbmrrVaM4RJf4/0zLafhtsGfdtWAlhI5f9GL6TGnmQwUAdwMIvY CyniS+AWHwObUAY2AO196h8wOVSr9YtvQJI2qPXxhASnsH58ACfCn8AIz8FGEOAt2I9mkKEP p8M/0Ia58B4MwQfwGaTBdnic3l44gWfADF9jNvnMgs3wO9ijtUEblFA7gSJMgtnwtbZee1X7 HsogAkfQiBPQpvVAPtxPrRN2YzJXr3WBFRbCz2lFNsNf4H0tqn1D+WfBF5iC+UKh9hFwIJJl DmyD/fAcOlDGXFymfUF2K2FcDvu1RVo7xfWTVz5UwXqq9ilKmIl52Ikf833aJu0h+rbJNFcH DdRa4V7YBbvhgO5VL0wWJ1F+D1TS3EO0F07Ad0RjDpbh3dw7/Df8v4VCoVM7QjjqqF4Q9iBP rDixDhuxDQ/gQXwZz3AFXIifw78jtAl7CVsdPAB74QV4Bd6Gj+Ak9MEPMIgCYSrGW3A9/pbi PuNmcCu4DdyD3PtcPz+N/1gwCtvFreJhTdDe0X4gzNdDLu3P+VADftoHYVgJq+FncA90oBEe gy54mdAeh+OYhBbMx2k4HxfjMvwJroOHcR8+jx/i5/glfk3oJnASJ3P5XDvV28xt4w5wUa6H 6+NT+LX8Br6X/5g/I0wSVgi91I6LbnGtYbKh0lgz9Ouh45pb26F10rpcS80JOeCGYhSIxVbo oJXcRpzthn3wNDwDUYhqAzgHjsCbhOtT6IeztGKTqTlwOs7GaqwhhC3YivfgLkK4Hw8RysN4 GN7Fd3GA2hCkcmbOzS3jQtw6ap2wi3tb5yeZd/DZvJuv5Gu1//AH+C7+OyFDWCrcKawXIsIu YY84WbxJvFVcKraJj4qHxNfEv4v94imDzXC/YZ/hoOFto8k407jLOIRTCIsdM+AgvEi7biff RroT5mEHreoSeJ12bx8chQH4HnrhSbTBEM9WM1PbCzHtAVrNF+BZ/pdQBA9zj3A3ayX8U7wZ p2tnKddUWq/zDZTcnOyszAynPMVhl663TU5PS7Ved+2kiRPGp1jGXTM2eUyS2WQ0iALPIbi8 cnnQrmYGVSFTrqhwM10OkSF0gSGo2slUPtJHtbO4EE2N8FTIc+VFnkrcU0l4osVeBEVul90r 29VjHtkew6U1fhr/yiMH7GqfPl6kj3fo47E0djgowO61NnnsKgbtXrW8vSniDXrcLuxR6HdQ ktsFPQAKjGGJVZgX2tBkJcE8vGqa7PGqqTKNaY7P8IYa1eoav9eT7nAE3C4V5zXI9SrIZeq4 vOFwFmcnV5+fartdzSrhh+3JjXLj9pgC9UE2Ci33q3wooHJBViMlT71O9qjX/eIL64/q+ZH3 wQsmVS6jPBSOlKtKcDuRztQg00IPklZZa6e03NaAX8WtBI6B0LHHvyIse5kluMqumuUyuSmy KkicQ7U/mqakeeWgJ6CCzx9NVVJ1xe3qsW4sdBApPe5SdymThQ7rxrj8akvc/lYvk9aNRz4h WelL8IKskryAYKr2BipCXBDW2ewVng2RhtlEHz0BpK9sJjzzVI62Ep+hihkLQuqm2mEYoSbP MLhVnqg5Nc1L3xAsC5B/MGKZSwtI/hbZHjkNtLJy37cjLaFhiyHDchrYJFv/xBZSMXR+3K4T 45VDTVa5iS1fu77UpMtW7wUG0snJ445BrqsyBuZqfxfiQ4EYaltj4LH10B8Y/vbbaDqPbbhm D5UjxeUiQ66DRoSgnD6ynO0Me8QeWdAYsZfbm2hLCRm6pIlwJJBPhNX6iRZY7HeoSiA9MQwH AnMpzw0sD4WQeyRAGVYNZyCpm/IHySnfVUmLkFntr/GrmzzpquIJEOm0iXur/Wov7d9AgLym JpAS4g3N1mHM0wjz1Fyanx7PUks5KEUgEmE5a/2yQ+2NRNIj7KcurscQLjYow4YYMBf6cG8M N1VTLAnZkc4MskN2EKwA43QGbeDzGygGMy/P8I0J3BQ5i9DeqDNccIUYnj0ahueMiuG5CaQj GC4kzHMZw0VXj+GbRjBcfHmGSxK4CaRCaEt0hkuvEMNlo2F43qgY9iSQjmDYS5g9jOHyq8fw /BEMV1ye4QUJ3ATyZkK7QGe48goxvHA0DC8aFcNVCaQjGL6FMFcxhquvHsM1Ixj2XZ7h2gRu ArmY0NbqDNddIYaXjIbhW0fFsD+BdATDAcLsZwwvvXoML7uAYaCbQScAnVNfohuoEYoVh2iw 0flPMNp4SBIFG89zaWaD0YaQajLvd7QUWfPyqk4VLRosqrKcKVpkGSyCkqLBItanTZ2R4kjJ ot4pPBE7d0x86YfimOAbeIYOYXQPXIC7hQ5uL9WRFAs3hcc0kUsVBPEPjlXlLKnllOXMIsgf nDYVKYXQMXCU2zs0QIdf/U5J98rmJ7IevX1c0WlIoSstPUdL5gYTcsHwVyD9kY7fQfU4Q85Q Dl1H8eyH5z4YszExw8LYw4mvQKfwR6Bougf76M1iOVhFvYXu4hxdbS10xwLjiaQJdBNlswjj h/MY6FYJSz2lfm9tXkW4pT28trkh5C5b09LIcuiPxm5Jl3qG52Pgy4tBBfVi6jOp5+Z1mZTn cQdMXHFKMaMkwBjpvdR/vYg3wFj4Un+reIOSPBbMDVuKpIYtWypySs1YCQUCgoRecOrSE3U+ LcWwOOqUSdwUF1y0wEYaKOYCpzRYUC+dK4iZUEmX/ut8RDpL/YyzRDrtnCa9SX5vFMyXjpXS fFR6LTfGkfirMyagMk561Xmv9GxBjnSwoFCKZpEtKnWVkjgk7Su4V3qiQ7f8PlcXe50x7IxK jzNxSNpD+Xdu0ScejQdujou2Dr3Qmm5drO6OcU8fklqdmVI9BaIyRlrhbJGWO+dIi0tjmBGV FrGwQ9LCrGNSJSsdlZR4oVnx7Dc6dcTT42VdzsNSdrzCFOatTJDszoWSjfK7Ht8puZy3SaW5 MXzquYrsXGdF1s5ZMTyl12CCgDKxOi4asl7AJ+kGnINLIQN/012RQ5hxR1TaQqKzuyK7ICPG n1DGS91ZFVkd1GdRz6BeF8PFisv4mLHRWGecYcwz5hgzjQ7j9cZ040TTeJPFdI0p2ZRkMpkM JsHEmcA0MaZ9ouSx/TbRQP9gQTAI7C3oYwvtH9Q3GW1JDk0c3AwxA2y9tr3EWjK+OGVOuecS r6BuDHryfnzoJy/xWNGm7qRDmrrfFlCns4FmCyRm/79BuIziK33run3rTi7Rz/myNxyk4766 vZ2uY5vq7fauk+vYBDtxBusbmpgMhdV1ctijnpQ99i6fHnfR9BI27ZM9XbDEu9jftUQJe6I+ xcfO8YHuam9F1Yha2xK1KryXqOVlySpYrWo97qJaVWy6mtWqYrWqWK1qpVqvlZfnba4tg/8B vMJ3zWVuZHN0cmVhbQplbmRvYmoKNzMgMCBvYmoKMjIyCmVuZG9iago3NCAwIG9iago3NDQ5 CmVuZG9iago3NSAwIG9iago4MDIxCmVuZG9iago3NiAwIG9iagoyNzc5CmVuZG9iago3NyAw IG9iago3ODgxCmVuZG9iago3OCAwIG9iago4MDAwCmVuZG9iago3OSAwIG9iagoyNzc5CmVu ZG9iago0MSAwIG9iaiA8PAovVHlwZSAvRW5jb2RpbmcKL0RpZmZlcmVuY2VzIFsgMCAvLm5v dGRlZiAzMi9zcGFjZS9leGNsYW0vcXVvdGVkYmwvbnVtYmVyc2lnbi9kb2xsYXIvcGVyY2Vu dC9hbXBlcnNhbmQvcXVvdGVzaW5nbGUvcGFyZW5sZWZ0L3BhcmVucmlnaHQvYXN0ZXJpc2sv cGx1cy9jb21tYS9oeXBoZW4vcGVyaW9kL3NsYXNoL3plcm8vb25lL3R3by90aHJlZS9mb3Vy L2ZpdmUvc2l4L3NldmVuL2VpZ2h0L25pbmUvY29sb24vc2VtaWNvbG9uL2xlc3MvZXF1YWwv Z3JlYXRlci9xdWVzdGlvbi9hdC9BL0IvQy9EL0UvRi9HL0gvSS9KL0svTC9NL04vTy9QL1Ev Ui9TL1QvVS9WL1cvWC9ZL1ovYnJhY2tldGxlZnQvYmFja3NsYXNoL2JyYWNrZXRyaWdodC9h c2NpaWNpcmN1bS91bmRlcnNjb3JlL2dyYXZlL2EvYi9jL2QvZS9mL2cvaC9pL2ovay9sL20v bi9vL3AvcS9yL3MvdC91L3Yvdy94L3kvei9icmFjZWxlZnQvYmFyL2JyYWNlcmlnaHQvYXNj aWl0aWxkZSAxMjcvLm5vdGRlZiAxMjgvQWRpZXJlc2lzL0FyaW5nL0NjZWRpbGxhL0VhY3V0 ZS9OdGlsZGUvT2RpZXJlc2lzL1VkaWVyZXNpcy9hYWN1dGUvYWdyYXZlL2FjaXJjdW1mbGV4 L2FkaWVyZXNpcy9hdGlsZGUvYXJpbmcvY2NlZGlsbGEvZWFjdXRlL2VncmF2ZS9lY2lyY3Vt ZmxleC9lZGllcmVzaXMvaWFjdXRlL2lncmF2ZS9pY2lyY3VtZmxleC9pZGllcmVzaXMvbnRp bGRlL29hY3V0ZS9vZ3JhdmUvb2NpcmN1bWZsZXgvb2RpZXJlc2lzL290aWxkZS91YWN1dGUv dWdyYXZlL3VjaXJjdW1mbGV4L3VkaWVyZXNpcy9kYWdnZXIvZGVncmVlL2NlbnQvc3Rlcmxp bmcvc2VjdGlvbi9idWxsZXQvcGFyYWdyYXBoL2dlcm1hbmRibHMvcmVnaXN0ZXJlZC9jb3B5 cmlnaHQvdHJhZGVtYXJrL2FjdXRlL2RpZXJlc2lzL25vdGVxdWFsL0FFL09zbGFzaC9pbmZp bml0eS9wbHVzbWludXMvbGVzc2VxdWFsL2dyZWF0ZXJlcXVhbC95ZW4vbXUvcGFydGlhbGRp ZmYvc3VtbWF0aW9uL3Byb2R1Y3QvcGkvaW50ZWdyYWwvb3JkZmVtaW5pbmUvb3JkbWFzY3Vs aW5lL09tZWdhL2FlL29zbGFzaC9xdWVzdGlvbmRvd24vZXhjbGFtZG93bi9sb2dpY2Fsbm90 L3JhZGljYWwvZmxvcmluL2FwcHJveGVxdWFsL0RlbHRhL2d1aWxsZW1vdGxlZnQvZ3VpbGxl bW90cmlnaHQvZWxsaXBzaXMvc3BhY2UvQWdyYXZlL0F0aWxkZS9PdGlsZGUvT0Uvb2UvZW5k YXNoL2VtZGFzaC9xdW90ZWRibGxlZnQvcXVvdGVkYmxyaWdodC9xdW90ZWxlZnQvcXVvdGVy aWdodC9kaXZpZGUvbG96ZW5nZS95ZGllcmVzaXMvWWRpZXJlc2lzL2ZyYWN0aW9uL2N1cnJl bmN5L2d1aWxzaW5nbGxlZnQvZ3VpbHNpbmdscmlnaHQvZmkvZmwvZGFnZ2VyZGJsL3Blcmlv ZGNlbnRlcmVkL3F1b3Rlc2luZ2xiYXNlL3F1b3RlZGJsYmFzZS9wZXJ0aG91c2FuZC9BY2ly Y3VtZmxleC9FY2lyY3VtZmxleC9BYWN1dGUvRWRpZXJlc2lzL0VncmF2ZS9JYWN1dGUvSWNp cmN1bWZsZXgvSWRpZXJlc2lzL0lncmF2ZS9PYWN1dGUvT2NpcmN1bWZsZXgvYXBwbGUvT2dy YXZlL1VhY3V0ZS9VY2lyY3VtZmxleC9VZ3JhdmUvZG90bGVzc2kvY2lyY3VtZmxleC90aWxk ZS9tYWNyb24vYnJldmUvZG90YWNjZW50L3JpbmcvY2VkaWxsYS9odW5nYXJ1bWxhdXQvb2dv bmVrL2Nhcm9uXQo+PiBlbmRvYmoKMzggMCBvYmogPDwKL1R5cGUgL0VuY29kaW5nCi9EaWZm ZXJlbmNlcyBbIDAgLy5ub3RkZWYgMzIvc3BhY2UvZXhjbGFtL3F1b3RlZGJsL251bWJlcnNp Z24vZG9sbGFyL3BlcmNlbnQvYW1wZXJzYW5kL3F1b3Rlc2luZ2xlL3BhcmVubGVmdC9wYXJl bnJpZ2h0L2FzdGVyaXNrL3BsdXMvY29tbWEvaHlwaGVuL3BlcmlvZC9zbGFzaC96ZXJvL29u ZS90d28vdGhyZWUvZm91ci9maXZlL3NpeC9zZXZlbi9laWdodC9uaW5lL2NvbG9uL3NlbWlj b2xvbi9sZXNzL2VxdWFsL2dyZWF0ZXIvcXVlc3Rpb24vYXQvQS9CL0MvRC9FL0YvRy9IL0kv Si9LL0wvTS9OL08vUC9RL1IvUy9UL1UvVi9XL1gvWS9aL2JyYWNrZXRsZWZ0L2JhY2tzbGFz aC9icmFja2V0cmlnaHQvYXNjaWljaXJjdW0vdW5kZXJzY29yZS9ncmF2ZS9hL2IvYy9kL2Uv Zi9nL2gvaS9qL2svbC9tL24vby9wL3Evci9zL3QvdS92L3cveC95L3ovYnJhY2VsZWZ0L2Jh ci9icmFjZXJpZ2h0L2FzY2lpdGlsZGUgMTI3Ly5ub3RkZWYgMTI4L0FkaWVyZXNpcy9Bcmlu Zy9DY2VkaWxsYS9FYWN1dGUvTnRpbGRlL09kaWVyZXNpcy9VZGllcmVzaXMvYWFjdXRlL2Fn cmF2ZS9hY2lyY3VtZmxleC9hZGllcmVzaXMvYXRpbGRlL2FyaW5nL2NjZWRpbGxhL2VhY3V0 ZS9lZ3JhdmUvZWNpcmN1bWZsZXgvZWRpZXJlc2lzL2lhY3V0ZS9pZ3JhdmUvaWNpcmN1bWZs ZXgvaWRpZXJlc2lzL250aWxkZS9vYWN1dGUvb2dyYXZlL29jaXJjdW1mbGV4L29kaWVyZXNp cy9vdGlsZGUvdWFjdXRlL3VncmF2ZS91Y2lyY3VtZmxleC91ZGllcmVzaXMvZGFnZ2VyL2Rl Z3JlZS9jZW50L3N0ZXJsaW5nL3NlY3Rpb24vYnVsbGV0L3BhcmFncmFwaC9nZXJtYW5kYmxz L3JlZ2lzdGVyZWQvY29weXJpZ2h0L3RyYWRlbWFyay9hY3V0ZS9kaWVyZXNpcy9ub3RlcXVh bC9BRS9Pc2xhc2gvaW5maW5pdHkvcGx1c21pbnVzL2xlc3NlcXVhbC9ncmVhdGVyZXF1YWwv eWVuL211L3BhcnRpYWxkaWZmL3N1bW1hdGlvbi9wcm9kdWN0L3BpL2ludGVncmFsL29yZGZl bWluaW5lL29yZG1hc2N1bGluZS9PbWVnYS9hZS9vc2xhc2gvcXVlc3Rpb25kb3duL2V4Y2xh bWRvd24vbG9naWNhbG5vdC9yYWRpY2FsL2Zsb3Jpbi9hcHByb3hlcXVhbC9EZWx0YS9ndWls bGVtb3RsZWZ0L2d1aWxsZW1vdHJpZ2h0L2VsbGlwc2lzL3NwYWNlL0FncmF2ZS9BdGlsZGUv T3RpbGRlL09FL29lL2VuZGFzaC9lbWRhc2gvcXVvdGVkYmxsZWZ0L3F1b3RlZGJscmlnaHQv cXVvdGVsZWZ0L3F1b3RlcmlnaHQvZGl2aWRlL2xvemVuZ2UveWRpZXJlc2lzL1lkaWVyZXNp cy9mcmFjdGlvbi9jdXJyZW5jeS9ndWlsc2luZ2xsZWZ0L2d1aWxzaW5nbHJpZ2h0L2ZpL2Zs L2RhZ2dlcmRibC9wZXJpb2RjZW50ZXJlZC9xdW90ZXNpbmdsYmFzZS9xdW90ZWRibGJhc2Uv cGVydGhvdXNhbmQvQWNpcmN1bWZsZXgvRWNpcmN1bWZsZXgvQWFjdXRlL0VkaWVyZXNpcy9F Z3JhdmUvSWFjdXRlL0ljaXJjdW1mbGV4L0lkaWVyZXNpcy9JZ3JhdmUvT2FjdXRlL09jaXJj dW1mbGV4L2FwcGxlL09ncmF2ZS9VYWN1dGUvVWNpcmN1bWZsZXgvVWdyYXZlL2RvdGxlc3Np L2NpcmN1bWZsZXgvdGlsZGUvbWFjcm9uL2JyZXZlL2RvdGFjY2VudC9yaW5nL2NlZGlsbGEv aHVuZ2FydW1sYXV0L29nb25lay9jYXJvbl0KPj4gZW5kb2JqCjIxIDAgb2JqIDw8Ci9Gb250 IDw8IC9GMzUgNiAwIFIgL0Y0MCAxOCAwIFIgL0Y0NiAyNiAwIFIgL0YzNiA5IDAgUiA+Pgov WE9iamVjdCA8PCAvSW0xIDIwIDAgUiA+PgovUHJvY1NldCBbIC9QREYgL1RleHQgXQo+PiBl bmRvYmoKODIgMCBvYmogPDwKL0xlbmd0aCA1Mzk4ICAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVj b2RlCj4+CnN0cmVhbQp42uU8a4/cNpLf/Sv6Yw/g1opPUb5PuWy8FyPn7K29uAVy/qCRNNM6 q6WOpPZk8uuvikXq1VLPLqLFOVgMME0WX8VivUixuPt5x0UgQ6bULoQ/HgZGMcVtJj29YjbB diqIRCQJtvt5FwYyjmOzg4TROmS73aFPDWVUPQxitXvc2Z8/9R0exj3++8dXf3gr1C4OYs31 7uPDjrFAK2Wg+GP20/6Pd58+vrM1oiCOYBCoEQU6ZsxV+MvdQfP9N/Cf7d/a9Eds8uq7j/2A kgVSiMjhhAiNsREKutPCTfC/ltEcwVUYMMbiXcQX+5OxWhlISUUtD64pzV3jjGMFhIep9Z2z MAhFJOwUxd2BhWG4//DcdvmpvTtwFe7/WmV5Q8mPdzHf523Xk2pCTNv1gesgNqG2/X085ncH qfW+9R1KrfaXNs8I/FA3lOiootq//+7jtz++f0vQourypj7nTXJflEX3jMPuDv1I/WxgpA6w KqpHQFOofVqfzk3R5pT7tmjTmpLMhJxS2PUdU/vHJukQGy4Aybz5UqR5SzWa+gKjt68xZ/bv Lgc7euiHZXbYqjgTbcT+nRZhiEk5bgq5pMooYSeJVT/emXCfFOXhgfLf1tXDH6lOWz90T3cM ihtX2dIIi9K6muFAU/+fMOSPF5hHUVdQMwr3p6RKHvNTXnXB3UFEjNaBQ8KPBJVmIwGkaOk3 qaiyJdAvXV61xeLA9yU2jON9lt9xtf+C1fOyPuPAMC7wUVfX5eeio1rdMXHgpCxrbPHUUgkw ROOSXe2qZBkBKtv3E0FhYReX4VxXMCZ0Ibje3z/jL7RpCmIJBCb0AzSckguB7TlPCwSnPVAR 2Ucts6RLlohwqrO8hCrG0EILE+/LOsloZIDaVcfEY17ljtuwUn3/v3naTVqafZse81NCFRCj ErhxYVDiCRE6lhLMsjwRAZc8FKChYDVm1WDRk8+45K5R/UBQoEpbgIBWKTZ6vgM5tGwv90+u XZM/WD6HRrBCCytAI8iBw+QVh0Fh0lJJX3siCdjE6gk7hcgVEpdBXUZV7psiB9KIZ4Jm+SJv tmlT3FtRjrgbziaa3EnCuUw6IOOJCkhGx1U/fPgPqthezue66QhqKXbd4xICpPFwKpI7AdQD ebQTNwAVVduBRFgtpEOHimYjXs0dBIUDqzSXigC1+02WluSHorr8Qnr7b9+9p8SXoukuSUmZ U5IeiyqnzE/xp2BuzryNUCIKBOdsydhwGBFtJNhmERuFVX5+9dOncJdB1XevHPQJMtBZHPMd 2PuYB1wbDyhffXg1MoYWKgZirnZIrcPdySd9i1mHEYDBwoFZ5BLMlZFjizgYsCiGnpXeKW4C BZ4KkpDs4JwsjIGJ4xKrDh3+Nhz7Ll9AksFKRKGOJlj+GVkZtSSy8xzXWAchi+ItcfVdvoAr Dzn0I6e4klgBv31wYjXDl2sZsIhFm+LLg1CbaDMWRTkDpudfN7ODX6c55yvMboLQhGqnmAx4 aIxdm3eo/S/k0qyy/KjbzVj+CtWJYwmMYOI4muH61/c/fnA6zfodzZ1Se9S2YG/iIFyXg+0m MMjBzQnwELYRSk7xv0aaBeoP/BrxQSA2RHxjgZixMduQjWVscFy9zMZGIG2AjUMGW0pnee0m hXyKNS4e97oVF19jOuViQDVkcopq7/gvcTEPVMBX+XjDKfR8fHsKnAE+lpHHU1jCe52Jt8T6 n8vEW+piaVQQMxmvMDFHYwL7eRMHQFqyk7RpXeXfUYeb8e8VklP+jQNjZkh+v66CGQ/kOu9u h/7AuzfR73l3gv8/yLsbYr0170bgaoWCqKCYHjwyOfEewSOLYsN3Ukcwp15f2m0WbtTsVisy YIvodzgHgszFnQNBsnNnQFebBexaBWFk+PLBFNU5jCtdL5ZG6kTAaxISoZBjLBFD3N5y/JH7 c5O3bucPQNpqQ6I/RcJMmpzp/KjIW2qVVFV9qVLYVi0dKNHuCU8RZOz6xMRwhAUZRwtbAWgR 4LmZiN15Vzw94RkauzR5vosbe9gH3h1guzVDGiF0GpPm5w7zdK5gj+FkODmGk0EURdydWb6B rSXs+M4LB3YKbSf3p5/9eHb3j/OBQjsfIhEwTKymuLpzNRFpd34BiXfOfYSMGiiGJf02GjMP dKhDFfV8hVyHC1va5HxOGljvEhZHabc4mHC4KM33xelc2rMvd5iDxQ/2FOKOo6aCf/UFj5uw IKGfrMDTw7RbIOh8W79KTwmWLQZxI3ricVHb1XjwoaXZPx2L0iYjwhlhPa0QOsPaEt33OD36 WZoKV+4MYIa8MIEJw2GNq6wAxPIlbtAwVs82I+yx66eiO1IqrU8ne56n/EEFAJu6LO+T9DNh HYNox2a6bm7xUauAb/Y9rAqLIzzjK2iNMIeHG/YX6QN6fcYVWFTiIVVG6cI1G+kFbMTx4Co0 +zxJj+vHMn4CpAbcOXc7OsVs/BnJuanPTZHDqj8TYIxVsKIDhQBnXjC9pAPDwHDU1H+/5udC BjoEz+SG28I3dFtgEhHMYAcGMQYVEa25LcCdJlI7wcGoaOnclkGNzI1/FEJ9aXbjXn+jGfVd voApi3QgNSzHBNUbu130FkSo9Ia49l2+gCvnLJCGyymu61sajiwn5aao+i5fQhV0hoB5zThg yXHl4JYIycWWWIJUSLadHP1Dhzr/fyIZysAIcEZ7/26s7kH1wjqA/gkN0MbQN70390mbr0hj tBt3uIk0RgtI8mgsjaA4jBTICyqQMaPzkPO6DG6G4UgGb2LIuQEfSvCXMOxFbzsMB9G7jaEW 4MijRruNYS9222G4sdjNZIVtKCvgagQyMmxZVhTsZ2PYgnHcQYIHRrKC3wzRmTg0l6rCT3hr cjPu/DfhK8Fd4mFMX/K34u+rqa/wdwh7AGHYC/y92VxH/P0Chj1/38bQ8/eGGP5z+XtLW8AN VORSLvO3sY4mBxoBKRkR8M1kB7DM16NOt7IHV4gu2wMew8yMcyPW7cF2GI7k5SaGvby8gGEv L1thKBSURtEmuuF3xNc6AnKH0Qt6O2KBUO7e0pu0rh6K5pRnB7dDXeXvUeeb8fcc4RX+jsAr A9fsJf7eDMMRf9/EcODv2xj2/L0Vhr8f/t7UL1Hgs7FozS/RQRzGMVA7xsNP55f4I5ZDXR3y pqmbdQYf9f4VOibzua8woganLIpedEy2muu/qKKVAlxfseZAiMDA8nOpA00W782XpHzBexj1 uJl2nWO5ol0V+DlcvOg9bIbhiKlvYjgw9W0Me6beCsN/UaYWkArjFe/BaNhXRGaH6HG8iz3/ SLLM1qM+vxKdKnBDv41yHvZkc9It78m4BM9Lxy+dOWxGtN8V9zEDXqleOZ4DRaCEPeKNJacb 8m8uTbnOd0Nvm2nTGYIrypSD88E0e0mZboXfSJfewm9Qpbfx61XpZvgNMnITv15EbuPXi8hm +P2OvN8QXLuQrzgdMYcFVnIHSjJQJiYR+eWcdMd1IRl1+BU6vPPprjA0Ay9L8xd9g63m+jX7 BkCSOMS7BiAcki1eJGESNKhci36KgtAo/AJtooBrHi1fhvG3TPpaC3dhBJd7HlBAyHCnBICz GwsAoU/c+PF5TyEe0OQev9A/L32GdvEDZrgj8ffesGHxjoGa4RK8mNUrNhj6Na61fseGyRAl zozCtfDex/j6ig+PwER/ZwEz0zsLLQEvbe7b0O/oq3rV3bhwkzXFqCaGTbD9OWna/n6WMtJi aENUbHFW029Vd5SgaJPC5SiEBxJ0L0jy/UOTnCgwB6DpMWmStKPPv1f3BPKfL3mV2nYhRSVJ DINpz7W96zICJr4MWtirQMq4iCsE+1syfXALpbN6ObKHphJiMJqtGioXEqX3R3frA+njSui+ k57R2JZdkROqOXLatKUN1EvceGWetK5p4UDXOLIBR7B1dBkGk3gRq07ztqUQPChy1Gip9FJ1 RUkFxPkA69cCocNa2LJ2OajHLwnewzgm7trGfY7Tw1STp/lo0tnV9QweR4EGjWImkSxXIuSr HUafJybCIzCCFc8dJsGTtOSgCoZLUJCZX0dCvVA4neHumjxTrsyrgkL2lOBD/BY2oLtfiQt+ W5YfGOY13a+xF3SMDRjsiupi77eY2RJBfrRERkxYiMqLB/qlFcP+ysKyF6Zv86/AJbRyItTi xSSwtTKM/MWkY44BgdeXkgRoMGb8paQTIJ885tS9pYzwIiAG5DBtkbMph47CyePcvhSZu9EW mQBHmQr9hb7+4R00sf/bf/5AiSqBoc9J6uDuspvwCB0Kl0+6rimszr90eDnooKO4v0I3k6Ge R7hUVzyCsP6WoM0l9FMmzR3DSELKVpfTve/DRqbJfgkzIBAgshwb18c7Ypit2dsIW6vCAedY K3tBCwv8BS3gK8WF5SsENznaqZYyLnI3Bmh3aao8WxqRSBkLy5K0TJDBK1z4iwoU2LZr8vzQ ds0lhY5yKnIxo1i5pd8mLwHXUbzpM8FBfbnUcoBikyeWH5lbPxGSngOAD8xsCUzIUkzlyV0u xdqVgyYt1aT4SSyiO3kd3hlDcL5O+qZGugkmQW092Pt1AiaRljWJJRYQRzMrvlWeIv1RJYRy /41rmvTl3kq9poG742Io4sBrIbvmNYS19DvoI8wRRTFl4w5DJFRHCWvkMUGBqARpXC9Px8UF KItx6KntEtQcmJ2mItCxdpG+CO+OQJCWCqxVr5vPVIKXEetLR0UXp86wRV2XrkENhGh8P0m1 eNHW3flLYeHTo7vrl2STm42hr5VeulnBGYylM0Qu+LlIc2tvhkB4Bi5WLEe2gYMfMw39Vr7H IUpdqWu/ylaky5h6f7oQvqANQP9QqqvLW6YBuBtlToI6ejrm1i8zE3OAJUV1vrhKVmtiHWRM K2EIfah92Hbf5i9vv10irowkszzLxg4bcm7Z1pQibYFpr2gBaGOsbapwRT2rn0D/dpQBhq8x vPr1Yjh2URWn4leSJn+bFLYg+xxUZZZZzxzAT8eiA2XjlDreRa0y3+DSUosmzy6puwMyZ+bB FsFytsWvpO7jeP/fdxIVC3EoFp7tAwaUtiwKsgq7GlI+hqKAqV7edc+UzgobzmlV9KXs1iPA wVU6Xk5J5dwsig8WTtdZiPe2yHNtLZ5CMaviradVn1wNq9fQg9CWaq0DUwR3vYTDNZ9yRiyD SR8kzdlIk1EBMSGWDFW8bwHF6DosOp5FWdKjDXcgD+hPRsKzLSYHzWCttC/PirR/G0G4CG7v h0ZImaT1hURVSHiNvLZ1E8D8E/2sgWGQpljQWgm1VRxN+wW3MFet62PxbSO7ELj6uV38B3dZ Pr6yZ474FXIaaey2KyxJvEpyD02E+6emrh6zGlXponKirt4WVVKWPuxfhsqG/aNHM+hsERF7 4e8ZOuyoArE5lpGh9oRFUB8fMDjBh1sveHgHWRrvwMnIb+3MKH4AoL2XkFGhcyv+DQVX74sg D9Ai4hbVWm+qYYPpF61y/xqE5CMXBTMonfib0M99WaefKYl8hL+TC+IIsEFR1NEJRHOZk5+a 5HzOneovKtLslmUhb/UhAvKyf8SDa2v+bTWqNTX/XEVLF9g14rnKxPadjS/YKLHRMABh49gZ 8GzyBMncUhFtqEPcaYGn6+ye1bShs41Y6wTaeZHMD89krNHujhbQWtj5uxzWslpzQJfuK9p0 2v2es8XnM+gM2uTNH7cJ8UpPIJg71ZHuWZv++RrbwZ9Lcg1uPGQDGz1aL6suLZvTIymw9+0V WuSeyQBgltO7EwStL06b9CS1XRACAD4DAri2xr2DUd+QjtPwcAePvdo0bmNoVxycFKdgY1Jy Q73YDtq6JoNt8So3dm4Ip/dXsBaNlp9n/aTe0ZgtbdlTQ7tnRXTYD4og2regkqrAWmavyVA9 uVcxMnLoi8y/dEGkwycviFrQG1LLP5hBho7ZWQw8v/guCbWPld3cWfMnYZf0DcF8qaRSAtoV jmnPFaOclcPsYrfRGrVVfkdggVYN2tZNvqy2O9w9oagwThoVfu9z+qWXkcYlNAqmSL7AJ3IC Xjw8UwFYU/J3bf2j68ofLC6pOzpmRFl13aPU5rl/tId0w0QTMNRzXQ20oNz1kzkhW3igyK1B UlRe0Asn2+g52gT6iu4FEvZp5mWPK3FXSX+65WaPXowBX07gj7ZhQy1BiJEB5lcvcnxBaRo5 1r5eNGyxY+1WPhq1pZVfl1o7W8koGsmm7Gj+fRv/Ck5X270jJoctvZMj2cuA5DDeHXRhsYWc ZVQ8yLw0PigOsyYKllbhRxIpMZNFr2+1c40072VO9JytRS90oi/mA+m0cK/ZiOFwMCsaEJvy edl7nWwlJi/qOPbuwGsrCVImz8DuvqJ7cAmT7bBlRFtf0e/b4vHSuM7Y8LzP6im8xK1nU/wK dp9WIVwh0WhJhiMTakCMg2sx+TCAkKJafy8p0tOeIG8nS8nEgerK1T0Vj8eOkqT4QQqtd2Bi /8SXHvmz2r3oBbXb5YMg4JrCun5gLo1TutBX0oHqOHeUsctu3HYodzA6EoQm9lCNVuxIuw4o zi5uufzzVwgkjBfxGGxX5PQr/HbA6jSnXtdGqtfTWLG3yQ4w+paihm8pykfoCvv9oHDlZb4Y YWpnO+z8Ty4GErQi0r589lps9nqcWuMZLHiYeeVd74JY+Xrp2ACfxTvVbUep+6QtUkpSP5hy VMFk4R7Z68ODJw8aMoHh79wfqf7JPmP4nX3S8P0oPTx1yPc/LMW6qiBkTLleZngETiHGGHVn 4ulSfw81tX3aLy0vGcoI5qgHrb1GtUDrbWKCzudKyozlBfO02cKmSXsrfNcdQtUUpjp/HkAE MQulm8/rhX5MwAzzZLtUK/0IFRit1Ev9+IHsXvnQ4ilMveSKRvjYk9EvdSdchc+wP77VGwsi wW50duBCBJGK5XTJMtjHJU12SI9J9Zi3Cz2bONBamBtdq0Bz4/EcXyOcM1aEUQtR35M9HnXa e9YlrBkwsqf1cO375pIE9LCkc7fBCvP+Syt+q8f3BmD0BSMB5v8+d1/gCntKAOafHIKRt9BH FwPQKyDnbOBcQkNOZTQcd8R6OO6YTxA0gYD9rEN9heUOfbXZcbf/uANlzncEO5Ue8/SzA7pP J3hyn6R+7x26Q+1RMT6LOXkoQ0Vm9HlKhtPPU4sPyDGMi2a3P1iPKi084BGrAApF3xU9Vzof zz98ujDg/wHeMF2VZW5kc3RyZWFtCmVuZG9iago4MSAwIG9iaiA8PAovVHlwZSAvUGFnZQov Q29udGVudHMgODIgMCBSCi9SZXNvdXJjZXMgODAgMCBSCi9NZWRpYUJveCBbMCAwIDYxMiA3 OTJdCi9QYXJlbnQgMTkgMCBSCj4+IGVuZG9iago4MCAwIG9iaiA8PAovRm9udCA8PCAvRjM1 IDYgMCBSIC9GMzYgOSAwIFIgL0Y0NiAyNiAwIFIgL0Y0MCAxOCAwIFIgL0YyNyAxMiAwIFIg Pj4KL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0KPj4gZW5kb2JqCjg1IDAgb2JqIDw8Ci9MZW5n dGggNDY3MiAgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrVO11z20aS 7/4VfFuqysRhPgE4T44j57wV27mYm+yWkweIhCRUSEAGQDvaX7/9NQAIgpLvVle1KVeZg0Gj p6e7pz9Hi08LbSIbK+cWMfzTcZQ65TQ9bPbPFA3UwkWJSSzPLT4t4shmWZYuYJB6H6vFYtWP hncMHkeZW9ws6Of7HuFqjPHb9bP/em3cIosyr/1ifb1QKvLOpfB6vf24/O7it/VfCSKJsgQW AYgk8plSAvDTxcrr5Uv4Xy1f03iNnzy7XPcLWhVZYxKhCQkaU2McoPNGNvg/82SO5l0cKaWy RaJn8dnMnVno7BujAaOxyEiTpQ5BPj37+Fu82ALoX5/J7Bd4gKWzTC9AOImOYm10mNk9+/Bs RLrMroCXmQORnsXIcPFiH4bhiwnCFJfzMEhi4L4FdvWy8yPZZS5SsQfeABqgLiMJrS8yvSza 7mKlXbz8cCi7YiohZbNIK2MWY/T/HsU9ykdIBvUH3KBYRzS/O+yvioYprq/593gfr/K2aKf7 0M5Gsc2edB+JilL9hMoRA84Ipv+z9cxnJjIxiGVkIwYLAHqWOOsXcHCjNPUJyex7Ov2XZAne jcaDhdDLH85q3njBp9K8uU2MNA+Jt4DnaBcqO6tUT0giKZXJntrkmP8XVUjBgVhv51VBwUlz gNmnNnLA9KkmrM9LnPG6J5X4COdDEh8Rq9R5gT8dhX8qgfs0cplOz5z9GMEWHqhTSWbnBT5l vI+UJSIQejUTU5goVc4LwCtC935kSV6/oYfvzyvTiOYnU6YZPswp05gTyp/Xpqcj8U+lTc6D X8/OeJI0jSx87F0GO3JsglmPviPBvxlCyhP+RzpLHtWp5N/QqRHlT6ZTM9yY06kxP5Q7r1NP R+KfSqcsyDZ1Z12SoZDN2ySyoCHIw58vEoMxiFaiCW/Pi32E/MnEPkPwnNhHFOsHLMnTUfj0 UgchaaCU92xTyEbCnu1R3K81bNXCnjUkLRYSTs5V0niZX12oeLkrQFpJujQR/64vfCzhPzxR GnMS/4fc0GsLCyk3mwcGoNUY6lQoAcxlFrZhFNF3tyueX0DKmi1z+DHpsiOKILtdbiAh4bl9 eXPb8bAtqi2/ztlA2fgo1c6ixPtgw3b15vcZQ6eTSCcm5NtN8ekAa7ayfC3YK37Od02Rb+8R C6pfEsVmfAL7VYC/BRCmM7vc5l3ednWD7M4cYJL57raoePT5Qrll0ZTX9wzS3eZdD8ODtmgE ip+Big3SiOBfyu6WCIoDIczLHF+b5V1T3/FnkN01Td3w9L5o2/ymAOFb2Nf6tpgx8EolUZIp I6z56gRkwmDQU1gxSIEliiS0lCoTYfmurXmyI+Yzf72K4tS6Y/4ST0ySLG+KqmjyHT6ky+u6 2SPX8AUmtPg7EmWSMOMRtCnau7qC7Bb27jOsqgBjkS34ssCHP/L96pijeqSdWtuwCZWSWqIg FGjobQGip9kvtwXQ2fBDWJChhPGtfF5XXV5W/NAFKRxp8USs8v2q3M6w2usILQJzOu+6pry6 0PHygHw2oJTMBKVEx3Cq7HgG2AcbaHmSmQyzny806OzuIN8DucyZlax0LBrYCam9A7QV/7IK w0CkwQ+99iGugGKlwLS5mAO9NX2XalB9WBSRpiawHWdFd2BYtvzbndFhBbk01bm+KpLOIgcH TKBpFTwicbJ8IyuLxGTRnAnb1LtVMAqg7VZPbEKx6cqajrvnegv8hoPgex3CSTn7wHS2GB44 2YGVY3PiySLh75W8PbTTNwNe4chUg36NY73rSDsTDaLY3OZV2e75kahL9BldzFzklArFy5ui m7OnceStDkqIxifHzUd4wPxw2nCRcNrkYMH5y2V13APzE3MbZ5NjhooziDUfupbH/akzsREV htn2vu2KvYAcgJMND8W1wKgpukNTtfLdhVryp2ZZVLN2oCtJNmBUUBmKSnwmsy4RlR/etvzE r9PhNbzqETWHqiqrG4aA71BGN4cmX80JkHXJ2IScC4482KZDy3O8cZjqWU9GEt60Xd7Juy/k fXCyqvl30Ap8XwoyVK9ojgd0Pk2K3qps0KikNhxKnKXv6e3cocxUZLw2X3smKbtVT5PdTnAb FyWxmRz3RFk67riB4bjTdga9JOd/qpV0jtHm74DXW37gkxkkD4PRCYSn8QnMRI2yc95AJZ7j uv4IroDE6/JmZnOrHvhIfUZH8mHza5wDx3poIL6gcZCvE/m6s/J1kVVxEMiT5pv/Vynb2KcT MUNkzGLG/VSb3WFb9JGH4wTg+NiTwbBGB0Hj8BptGQ7mxZUAIq9DklxsywfE5bHqa4LveT6H DVxLErR1U9/dfz2ylZUYiDaolY28Ao6chFYzGmcjl/XC3Ba7oivOr5tCWK/d1PhjrGXAiX4o MJ6QUBbNkraGFd6KxQbfGTwYTG1CF2KxgjQhQfEfqbKcTjpo1nLQYe0ZrfRgR7LkP0cpLeDu 6QkBDVDPnt9ase442tfAd2ZJe1dsSjQgG9FVbSIfZ5MomdMMA9lBwb+3uUyQMYLfEr3uHjzw EpgGASHOYqIxFZBxEpPzVxX/bstrBLwuGnZ/uBJmPfm9AG4PxazrrFkRcv7Z5Rgxm5ijIpzZ 1Ps9ebe4924wov2jElnIX9e3ZH1gmuOHrhEooqBufhdMuaC5mo2CmmJ72LDipMvyWn6ZKeC2 m5ZnPmP8XO8OMEX22oo5txkAA/MEnmdyBpA9zGxfJAqxPu0IU+8s47pJSpla3RLTVcqGBQft YXPLI/l0goRSEhde/uNCAcEv333PjyFrhLnZUKblsHQSnpwaAevAY/fK+uHd2x9XP7+5/GX1 7csPl9+tXr56u3r75tu5A2QSyO7tyA7hWhSyJ+no+LIqp5BUOKuOBXWSSeR3dxAQl38cty87 0goc3eWY8IJRfzS9sA40kG1Nn9NZN5xF9nNHFmUaDlvTm8bP+WY/Fw/7CCKpbOJ8TJxySmFH zoePP09CSgFpQ8gqjIkS7PFP4lASnsuECaFcgjMhFnGirzAVXoZABKbeXa5fvX/3mmdB/7oa lhWUve2e05v85gJUDuKibiKcny8UnP6XFzZevnrLU6KvmPaJGYPhr7GL22IiUZhUkbDQ94Lj HFinUZIqVgkHFiuOpy1reqrr0QLv3iMda0Q7p5tBMUBCSZp6Qv0LVsiQrDgDm4nnho8Qzwz2 YcsTOf90vGyMfAex4UswRbI8vyB6enYjrpBKDwo6jvGL5j1K4KrclR0WhmILmBIq0XGiABO4 LG1Onvg3P3Q1ZPMlkiJfsqGkjWyoGEDwt2EQotqpceAiIFWcRODoLlqpTuVSm6L8iqs3kl5R 7QqQosEGDrw/yNzAEKz0MM9g+ipvhdi5okvRYHGnnejZNRyPGl3QF+YGWoJeY1+cK1wqayOj 0uThwuUYigqXEMCNIqs4ihPrB1ycU6tkuiiEYLFzjywagE4XPdLVBBY1EPodLQrms8LKQmAA H/R4KaetFwyMg2AQqj8wh3b4NPD1w4f/Pss8iDS00o9UfcdQDzAvQD3KvIcWHZg3XXSeeeNF h6rrKRPKquxKcMQzETgEhIkKfvC2QCWcCe10ZJI0+AUpdp1la6zxVpF+hK0jqAfYGqAeZetD iw5snS46z9bxoseWZmBtr3S9Y4qXV/dT8gLKVM0SFl6vUjV/2ymlqz8WvycO6NMuT+ohdgdP emaJ8PpoifGuMzHSsgR2IPpd5tPNHhU9OSan2U1RUpw9/bIvFU9bU1kC+ZqeEH1y0U5FCpK+ hdcZ8snO3wckR4pMTFTcg52y0tg4SizwUsDMWY4aCA4TDTzrIWfXDVCrMdgpfw2ofAI+7Xjd yWnFXsxVTXUJI+EMDnp2U6+GW0NHr0MhHp+uQ812khhM3UpvFTYNuMOmFFFtC0zC+nr31T3/ /vT6FQ9sYhWPPqrfohOexWmUemyl+RRVdl4Ze6jVGOz0+INHwI6sH7CdO/8GTGAau8fWDVCn 607snOjS0bpNcVc33Sn/rilBLHeHRibqZgIBqc4GjOVxYF/klP+Ec0UhE+XfEDEZ7BBpPwrp fR9YwIiid/gFtSghxERRQU5ODTOaxwwRf//+9gce3OVNS36S0ASgfHf/z4BbSurToE3LzqW1 hF2BTFK4LO61l9J2ClG+wQwAYsCoiJ5zEijFwTjQAIGSvDncUZgPCKeGI4u573ma2zIdlG5l GNgjAZ9LzjESblskZrkrud8rNRj4LTi8bflJOAWjT4e86jD6g1jUu6UgnkMzlyyMG1Etp6uC WntBPeA1bA0BRvBq6Zlgknvc0tJUq5AOVcugbGUlIZ4imatISBEBOeyR+R3VGSB3/gVlwGSm PuSXKTZkuNsIYnweOraFALHqpZ6rDzjYFh3EaIK9btty1uhcUTs+xTQhNjlS9CUoUVPveSSr ZIOaPedKsVQI4E0uHw39R5ysEN89P4iA5zhBVRUQwr5sOTDEB2qMej8gwUnpI+MwfMQ9FGwW 4B0cqR97N43TEdVjPVbsPOhle8ufUSNCha6GHnOfJ6hyZEmnEXBk5C2f9frQ8QOR3cpXzZwY uIbVYCvmNIkweO8lhXTfoVnOrH3IF6966NUYnC9qjCPK3sb3YFRqXK0uf7h8e/kOkiWPme4/ frz8MClnjA3P3WYFZhfTPYSmbBf/LiC1Rh1D1r+PQVbOREmWmmMuwOIv1+uf3nz7t/XldHkH ljfxxzhHLekRbghC0jSZtIj/2O+wlzKiwGCF3LnHKPj55Q9/+1+Q8PHwFxXHyV9++ypSABqU 90VZdNcvwALk+/YFvH3xqzKWV5zjEqSZVdFhIfwFJLDFC3BFstwqzSLvzaS6DntaX/5d5Pnj y5/WvJtERclUSB9/m+vmuCxKEpcee71QrzBg1Y/rFSZR0h020s+lqR/v4URUPHmoqPsvDVc+ oAByDRygOvCooAowH1XMgcwZ78cOGMzhzPc0XeRgI/pOt7SpXV+vIHOKteD2Nm9CV/sre6GG 4wWjM4jIu8MdT0kICIHF7aHbsj0R6D0YyHqLFtRg4bZp8upGKrk9MhOPrqNMjWXFhXQjhTqq O5D7Ci4IXpWQdWNlS2rk5ig0MuJ1Teh8GLn9QtVBF+7knFbQ0cUYvISS80UjtGjo77bsCqsO k02CYJaQf2plahACoagZYJ+Xcg8FZ3OeRCewm62dh8IDlx+lCYaDfLfjQWgZ4BynPVrKE3p5 09QoIBwObVJHm8cAo+UnYbDjYMXp4Y5FPHu54husuallEd1QRBWHq0QrldGljU3RULCuMiXB B71oit6Rwyf7ejsK0hgkNM2mpXxshDEHtB5XS+mZezhaNks71MiBm+CXtfBDIxNWh1bAJXoB wnZFXs0qPOmK3EFiTQJZFRUGK5/Lpq6kHQEQRd6WO4qrIr7osO6/5ThFk3+HUIeKe1X5Tw6i +lo4vB86cGcOgJrrGenxqWAo1nUVUIcu6nNuF1VgMahYeQTBBUgBoasxM4RMqrSYixWF9Ay2 Zbs5tO30UtKHQXkhUZu2CWyk8U+byLrelhyPjAIQOYAwdZtLcMIL4ksxuDAnucz1gYqwhKGW X05RMcap9w+lE6NWHyUfW2Z0uSExQSYzFNHhbTUEsp6uTeEWsTqM/IOwq+wkx4EgtGjbgONU eh4j+vnorOz6dq4HfXpdNm23C5E7ug7yJzZd7iCGXfLFHJtyaIYX8trD/m64vTK6+EAXV2qG 7i+ZnZj6iu6hJeF+mg89DZxqDhUP5GpLIlfbAKioNvVBeno4PzZf+LyrW3nzUNdShas1eImv bK8KUbySQmElLUx4OVw4godw4Qi/5oq4U6SAdbUdOGcskF3u5he/lct3slfV19D4Rt6ewj4c s1nDEVUhcIBViOe9E5C7fz2edtOUd10rAJyMPmRy7kpIQHnIGZmF9bfBpvDVNRj1XZKJNbGj I48FFHSNAsJ21J5eWZueBDHM2iuxlTAYxQjDWyKQXu4hHxBi+nkJiHACqStmTXwvSHLNNdsk SKaxcTxx3MNdU4TpA4Dw0dEV3+Pv+suoM4x/XVbUFglaEsI4NRtj4TTSUbJ7hyeyL6Sb4065 mn50HTQYeHUmKSs34qd1fz1DiwX/hq12cLw6GXumc/dilEkjHfdXi89dzfaR0n1/tfexwW3K VuXKjo2MVtn0GoTUkIbtU50J7F9v/0PXhGg4rkdh5xJj++hc7d4p+D1TROtL9yOg0xKaxr8p 1sCIAIVk25P1rDu74L8AgGdYdWVuZHN0cmVhbQplbmRvYmoKODQgMCBvYmogPDwKL1R5cGUg L1BhZ2UKL0NvbnRlbnRzIDg1IDAgUgovUmVzb3VyY2VzIDgzIDAgUgovTWVkaWFCb3ggWzAg MCA2MTIgNzkyXQovUGFyZW50IDE5IDAgUgo+PiBlbmRvYmoKODMgMCBvYmogPDwKL0ZvbnQg PDwgL0YzNSA2IDAgUiAvRjM2IDkgMCBSIC9GNDYgMjYgMCBSIC9GNDAgMTggMCBSIC9GMjcg MTIgMCBSID4+Ci9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdCj4+IGVuZG9iago4OCAwIG9iaiA8 PAovTGVuZ3RoIDU1NDkgICAgICAKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnja 1Vxtj+S2kf6+v6JhnAEN4Fb4LilwHNiO19gg2b2L5+4CxP6g6dbM6Nzdakvd3mx+fapYJPXS lMaG5eACGztUkaKKZD1VxWKxNz9shEwV41pvGPwnWJprroV92B1fcVvgG51mMlNE2/ywYakq iiLfQCE3hvHNZhtKfR01Z2mhN08b++fr0OF22OMX969+81rqTZEWRpjN/eOG89RonUP1/f5v yR/uvrv/o22RpUUGH4EWWWoKzl2Dv9xtjUg+h3958tqW7/GVV1/dhw8qniopM8cTMjTkRmro zkg3wP+Kszmga5ZyzotNJqL9qULPfEgrTW9u3as0doMjLjRMPAwtdM5ZymQm7RDN3ZYzxpL/ bO94nlSH+lifyvbD3VZolrx76Cqgs+RH/Ke81M2pC3M2mlX7DXgnVUbltuP/vctZUkE/UiXP 5Z2wnWhPuXbVnkqXZ0d6++5OMZhgeJDJpWkOrr5xf6vuMnmj+9BdqmNHD/uq27X1A3QLDG62 gacwAcBTfYK2mU6+qXY4FnqQ6d1W5kCsT7uKSPQFKLRVdz1cqNw8jiqN5agjWtm6F7pztau/ ZUzsXOOmfwn5Yp4hbhna1493QiePVVud4DOy4Mnbr+6/fPf2NT3Ux/OhOkIdzf0nd1slTPK+ wlqRnOGrPOncq4I4w9faajv+Gg0fx9LR/D58oFlrK/h2fXrys05/aWJppQEMg5VmJs25zhw+ /hoXBmmYci3K0566fO/W7FBNZEEmzfXiPu8X9liez8iUW8k85Znh47HAakTY46nOjF7iTqSS S+Fa4HilKNzEQSFIFD70EmUfUXjwbxAefEDh0SpL3jaXyvdVXqj0npYcRpTmeWGmK48Tow2M 9XQtDweLuAxXbvdc7b6nOpoQKDxa/NUHCxpo5sAANbuyqzoiWukGUtPuAbXUQUNVVQvNYiLx gItxfeoI79QD899l4Tsswak4X7p0qv+8UtFFkXKTmZh2QpHQRqAyl0WusckPr/72Hdvsoekf Xznqe3iAzopCbI6vBJepllnmKYdX37waqE9HDUOZ7ZHasc3RF/0bkw4NT4XJQX3qHCVcFkMd 2otPJlIlMhgsWCPGtJ3CbwJYhvPCYQBGCLEZdvjLeAxdvsAkFyrNcoDgmM3rbld13Q2fBiwe 6Iw1+fRdvsRnlqdZAXZoxOdrVIgg6lcySFN+BbgSfNVp9T2+wK0QJhVFno+5fdM6u1mhQiMz Cep4ynSm0pyBYlqRaxAGKXO1HqhQM6RA/n+OT4SggQ/7RRoZgFymBcM1ykzKtCIX5/N5bA46 Ww2bUwYn9gdcTSPFmEOVpeLjeWSux2WPzGUuc5huLvmYS67S4uNZPK7GZI/HRR7BTwDtYSZr LbMYjwF+6zG5Ovx+TcwYNNJqFjKG49wYmWaMGTuNX8xDpu9rNcRM2JsBzJC/XKT5AmBW47HH yyKPObIm8zGPRQTTAS1rcdiDZYlBAbAQOew3x5OYsgWorMbhr40UviZSQBNnuHuZg0omclg9 DQ6tyuwkfjmPlEFfq0Flyt8MVgYM8iyVC1BZj8keK8tMBtsyZJJFmAxgWY3HHi2LLPamZcAi mo4FuKzH4/p44UUqhZFQyFNwY+N7NDDuSs1Fl7KU5TqHgoBdntQyzJsaushGpMxksLK+Fc7b PcaBygf0jMFJ3qrcJCrFvxlUGZbYHSZSfawFy931eCxbDE0lH4jStOhgP5Wn+h+WjDth7MNu YD/EtrYuTpMPwkTwcD3R5hiKdnM7t51lGiSF1vN2Olyj7bDVrRj56VCgN2A7VgynA6dCcpgK /KMxkoNhnI6IFI7gffgJiRh+QpqrNH28zFJtvAzJjzBT44Yw/m00KEaRCD83LMyNKezcYFwM ivc0jyz5VgjZ0S4SioqIFOCBZljrwxTXtupb7JrD9Xhyn6hP+zoam9qVl2oUfODJuWp3NraF VBt9g7/nsqPQITSgbwNxHB4Zhi1CeASDYhicu9S4v6Tw0+HDndHJJzF23j/Xdomkj6pBAUdY ty3u9WwXuE89XWigUko3UGqL48QhdZM+wpjwBbukWOsEcRod9MwX0kWVRCGAeDo1F6I+VEQr z+dDbQdfuCAeEulxFJEEsovt2br91XVA78ikii8OsI9gLPLwNpZ3zQn7fbq2JQXEkNi4huPI JdHObQOCj9KGT98yzar0Kf1kDrw2eqfY0Hao1BgAEkXvfix3x0iID/bpivkI/r68lCQJx2Zf HVyYy4W7aB6R4Jmt9sAVT13cDrQYZ9l4TUJYW2QYy2xPdtqF8SsEZBJgYYLiiQUqRSqZ9iP5 PDKMAnyNQg7CqJFeTGpUCGZ+EQt3Mgx3+vOOXQPj/EBMtlXZNSdQRB+cagB/r1DgIo5hUB2s WlHJ+/ryTCWnV1Tyl9dfdhj+ZJx0BNLmI8cSdmmKy4URA7O6KHzk2GO6o45p82mLpAkHjAT8 bLnCKWFmqlssjsAikcrAwrFBFSG1607b6PPRNcJoPhYA64DhPbWzwWLtotRYeCi7ekdFULrH su8vguW2+uFqtRL4E44LZW3euTl1FZGPoFnLJ8sqPFk9rpw4YWME2+FStb7x7hmsYXd0rR9/ FowUKzxEnqpLDEUMw7k+0N+A3rJARpvg11uAApxd74KlGazmsmyKghvXAj6Ak4jIFAoU28UO FD9BkodU0tqtl1g8XBO5HI/40Srn9yQYQ7tgTSKtANR4kYAiLQbUOpEIEqa9SGCj1skaKL1d RajHFpa5yHI72WTOTBzqvdODSKPuWfLXP/8Jp7PA8OHRm3+KwuPfXmTgwcsGuk4FswsQW+/3 OGJU5lwtqB9wYIwu9KL2AWeWv6R9NDjzyyvM89zL0OQQkA/W0z6FlcOH3lSIoHyExzwWAhis LOQGD3AnymuAEHQ96PyOzWAik2khct1jYgsr/Vg/RYZlMIiUT5HhPtL2H4ECT664aoEBJ7gG fHjYNNxITASqOhUq6MRqXy/xlae5yLNbxlDEyC1kYLVB81/q09MneEil0CzWjx/sCSDWuqWG GVUpy/LJoRtY0OpCbXN5a/+R6EUZ5DRjznlE+rxhyHPYN4YjxS/jR4pGBXENmoKMNAM1kk8P es9N01pFWRhvuaAE2xj+MRVv/TiiOw1RhIM1LJKGgALPyAgVoxO5GPzJAc2dA4qgDVozn/ir OZs2xyJ3Z8o5662Qbdq4v6EvZ3rwlbgRcHoEB8P8YJgOtsfRST785gPqB+YGyENzw+gw3Le+ lVoBG03JM7FoYbau1USBD0zNzN5MwH6WZXROMd2bAYoleE0/Z+8sgIuM66VYk1wxKqslpsIU KLkmzUD648dNBjSaFBkMlqGnqNzmEXz1sLf55lpfbs7HuOApwzDMsPtfGNnxXb7AMpcC+oH1 HPE8d+6Y6ZRpsyqfvsuX+ARrASZEjPl88dwxS7XMixX5DV2+wK+QEmr1RBZ+4sljLlLYtupV 2cZ8DLEiyH7eyeNPwKtYG6/YYQFbtkyYYaynTxszsJR45M4LDb0UpMq+tiljX9n0sbeDcp9W JpI/zQAY+Bl8cBUAzwxiCGCdyhwGNBoFoOo28BmwtiKXAb4vcGkdhjGPuHX8eBay6/HYQ3aZ R6EEBrmzCZcK/Y85hK7J5doI/RVhlbOU8byIwyorUsVZYU/YDNP6Blb38/AZdLwafCLMxuAz 5FYWi/BZj8sePstcOvgMedR8ET6r8TiAzyKPQqkUtnNqzGWxiJ4Vmfw3Qg8euhnqMWKUOLma POOpgL16HD1T+TApVyE4tI2kSEtMATVhv4bdvRvYuNdv7MPX88gcML0aMiMTEUPmcCbAxc4W kLkelz0yl7ksFKyXycZcsgVgrsbiAJiLLPZ2bcgi+KdyAZkrcvkrI5OviEwNIsf5nLvIUpFl +YbrPM2LnNwDwuQfLIje9LcNbqQkFUXYWs/iM/sF+Bywvho+I9MRw+dwPsAI6AV8rsdlj89l LguOp73ZmEsRTfPxCF2NyQFCF5nsETpkUi8jdEUu/41sJ8xUobM5z1NjzBFWUJlUK0UeyP/c ZRL3bYI7XP15HkSD3lcDUYTjGIiGLAsYxwKI1uOyB9EylwFEQy6ziCXuQbQakwMQLTLZg2jI ZNRf6EG0Ipergwi/xAq1QgYQXi6QUuTLGUCh1UwGkP7XZgC5+DrmAmHMtJuLLHOG14P0C1k/ w1bzWT85n+b74GGmppPMtjo3rb2LJfyFMiiE3BbhTiWRODorEOEeHNT4swIoNjYW+HSHJxn1 P+hMYiSlBfhgXCBTg6HdDNE321K728FJBkbFTO8Q0mUy3d/f8nf1tJ9vS21coBLP/KYvNJfy QLTT9fhA9XQOi7T2ejq5S2rDzmkCIscvdNglmL/YxYcXu0Kek21AeU5aCDydsYe8QC19IZyn Yh9tBRL5ffdbEDvNbPpKjdkiVBkOQkZWhOHp3eQQ7cUNWJGyQvj9lZ1AHG6eNA+XsraJVLKw 2T1Ae66fnongMovotBFbPxJ9JD8yYAFq7PR9AmXF+nM/zBVUPBuzbMfqBqsYmxmsFGlwO/+l u8ypkGrcRunp4fWod9CDRnB/rrqq570Czx41ONe06lQ+NHRE7jJ2dFrkPB+LvhMDm3fGXYYZ HydCwLM75oSSP+aEIizJx4gFLUOWk323uZ78a3S3UXKf0MaTYxnNGPu/pq0vH9z9zkcC7lgS 5eBGr9dkQHxsm2N/zTeycDBTiumfKmaApT5DKmBJUgqYvf/qz1bD9dfwZXS1VapULqZo8Aej Nq9skGUwyFOMH4zCDt9IWbyUeaOAi9vMG2KJyRQMkJhmpQGGKUki92o1n1wbzXU4Z7an23c8 oaNmQ/c+of5Yn/aoEApN93WBNMnaAMqhab6/c/YXX34od98P00v59M413bL1ypgXIXGMF0Hp QjEo3a7qUzRbNAv0MhiAjlq+7zX1sE+i1F1MHquachiFBNeiOVKqCWXsySwpjw/107W5dtTA JnEA2VolmzAHDzhfMJMnmxbLTPLmRPSn6oS3sIFRp0pnrnpbBgUrku65uR5w7mAOzy0ZxXpf UeWxsaf+ULWvLn7lmL+LfKYb+Lbe2jisqtrWFoHW1ZcoGq9leNGlwAkuQF6IcAQb4oo2oRSq ThWe2dLvAHAHDFvt0rKgyQ46vLRWNdkmlJgjk921RYnZxjMRThc7n0qiYOOrSiQVmOM9EUMy g3JqQ8k+DQrbEvOW6jPn8ClkzkUmvnP3+g1lK8B0IwdGuxkEsiX+vcQkUKqBVW98MhLUl+1D DUO1swGPLqXratEz7Ke8XNqablRfKroqPZ2B19cWBRGXGRNwMp/FqHInwaoXECw/VPT3et67 TER4cBktUNphCiplBBZuGNGJt2NDzGEq2Tco/y6Zur3Uu+uhbH1ibEej0s4HwsKh7i4+sfqh chPz26mHGTxDzUCVgXsc/z0M32o7bGb9TJENzSHHXCbYWoRmpHh5dvNdvF2PmbTL3/Wtbr87 NsOwjcpyvJI8/O69vw5PGMaJejrBCnaT2/I2nw8L+2oHc0pZUXP8wtYl5YaZRYe853vYnPZd bJMD30aN+A7NkO9Pf//3I6hPA57Dj1XbATf/8buPeMo+Ilp12jV70Kq/++i/719v849+/1nE GjH7+wUZ7miCZ415bX1Skcg8LDPeJxWhrOEvbZCsZXx4C0Mk+4aIlIENBJJdq/Lj1wOuZLk1 Ob5moBUkZWG6X5FAkJNx16NlsFUuqx/rmoE98PcjWPRihJDArlX6LHlzIUJXhTqf9y38Pk4m b766f00k2j6039PmBaqe2uZ6piIZZ7Ku8E9zbaOWi37CgU0NMSLUOSAw+eWl8b/ZEhPCdBat imFw/gWs9o0WkOoavYjTpS/20j7+Yhyjgy8SQvlIlVtz534VA2oIu0BQmeJEah4v1gYBsTmS NTTJqQRjci6tyYAKmMWoQPqpxa8o5XCh1NBa+U28pfbWSg1zeTHn8t2JbGKfAhuzYgE+aoQW BwxF9z3gz8hc9sDoG4DPcbaiD+V+sJEhjuFjsyRdDKJ2EQgSb/Jm4PG5OpypBE5fZT9TPtQH 2gjga4+TgMeLFgsz6rPhZ/ARPA/aEuHDYLnwccCzf9k6i5EZ7X0csOHzCEFxY9yIFzAybLaA ktDsRZwsfzcg5ea7cayMvktQAJfDQQFKKDU1WTR75YCcsDwp9/saJ9NGZ/B55OIQzV1eo4f6 9DPuIWBys/L75U/b8y5mgSTGVfOQAk35xYQcykLNUbIxx7lPmAeaA5l7uHryg6P4n0gCw5oK JvlE9V/dxR4jSYEYMTMGLVMhmRyMYdtW58OHz+IJ2jJjNyPBj1hn13gbYgb+Le2sBE/BZGfT BHc3RAUDClAHtQhIdX4u1uD+lFplNpIDxosqOv9LRlijUk5UZAX/XuJXDMhNBW8XhYduS22N zkEFo9nFCidLbpmAAE7q3tXZvaDxWcZQCIn+EYQCdC1zAnbuu2fKoS4dZSSIRKJ8dFnvLh21 JT/5pnVHNNi4RTUP7rdtbFlyG9lUPtyBhfG1Nhh6riUo8GhtrHPcLbr+Bczx/no+2HuC7vkG Xm7JSPPaRbGbVGaBpgbXS4gIxt9G6aKTaX0fXsBO+9T0N/puL+ohkI6DYK27r1dS3ZBl21l8 yzlaHXRHKLhPjtDgp6Z+rJuDNzGD8EnwtFHK5pUzZv/DALMXlPOw2YJyDs1eVM7L3w3K+ea7 ceU8+q4duRHMKWcshe1o5577/Sg+wjacYiP4YB0RI+YCUJhkqLjy+go0iL8aTBWTKzSoXrb1 PqLLlEl5EQKoI7lFVJgieW0jeUpmHj3uF/PwR+xy+kE4rHThRVuNZoeUsut9HEka/xgevANu wQXDWC3+aKFVA9xtx7AAu5DOqbfC+3pI95oyAhLULhJg5WIqWHQ3eemCi6IbPlIiRtBIEA0D IVbF4gMJekcPpMKkmlsPFtXo8Sk3IpUgp7EpJ+NBlopbR88MPUGgBVuBNc6DcldofL/jkNGJ nDO8Ml25GyP4mrO9yqlkJJcdUcLNEfD4XOAO21npjIlizlKlCx+c/e67z+D/2D2R0HC0VBTz 8rdteY5ftbJgXRV4nv0wnlSH+1uf/mbO7dCgPLQPNKcYFS2Sd4/00R3u1jCCY4/qiBb8avj2 26/sVY1w7Z6lhZR6PMP0K482GHuoyRHIR74uVtEGOc+C4SAyTT6W+juj2IpiXTMOmIt8KQMK pWuodGtFwP0DK5JS9Re0d4Ct0on+0mwjwe2foTm4FzZqbJtVRNuVpxi+rEASlMg1p16kHgXZ vJNPsuZ+2RDb9A6e9pdo6TcTo7926XdcuFWe2tXBLXC3jX6sSgC0a+/27TagrlnYg3fXM57b zv8IIoe/gr/woxF9o0jmQYG/KMFl6Mpm79x8z//aa+SD/wS4wH1xZW5kc3RyZWFtCmVuZG9i ago4NyAwIG9iaiA8PAovVHlwZSAvUGFnZQovQ29udGVudHMgODggMCBSCi9SZXNvdXJjZXMg ODYgMCBSCi9NZWRpYUJveCBbMCAwIDYxMiA3OTJdCi9QYXJlbnQgMTkgMCBSCj4+IGVuZG9i ago4NiAwIG9iaiA8PAovRm9udCA8PCAvRjM1IDYgMCBSIC9GMzYgOSAwIFIgL0YxMSA5MSAw IFIgL0Y0NiAyNiAwIFIgL0Y0MCAxOCAwIFIgL0YyNyAxMiAwIFIgPj4KL1Byb2NTZXQgWyAv UERGIC9UZXh0IF0KPj4gZW5kb2JqCjk0IDAgb2JqIDw8Ci9MZW5ndGggMzc4MiAgICAgIAov RmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNqlWltz2zYWfu+v0My+UDMWQxC87pvj 2I2zsZNa7m47bR9gCpa4oQiVlybeX7/nAlKURNGZ3fGMAR4c8AA437mBmv0586UbeCIMZx78 +Z6bhCL06SHb/iCoI2ahG8s4YNrsz5nnBmmaJjPoJFHkidls0ff2Y8zuuWk4W8+o+bF/4WL4 xrePP7y5keEsddPIj2aPzzMh3CgMExh+XP3mvJv/8fiBOGI3jUEIcMRulAphGR7mi8h3LuG/ cG6o/4hTfrh+7AUGwg2kjO2acEHD1cgQXhdJu8Gfxpc5oIeeK4RIZ7E/+r4gDc8ICoOQZy7s 1NO9R77rRbGYxcJzPRlL2uHSbPV8IYPAMc/cNhsihE7e6G3NtCKvG73ivnoycxE6f+E/O1VV dspWq/LrJp8Lp7AUlTX53O/Yixc8vtkC1JCGgAbbEbSUVV5nbV2jHN9LHVNim/B6kHB//Xj1 6f6GqV/nwnNM9SUv1zy6rky74+5W5YWlJ7R0JqtyRdK9vXwU270JmKRw8prbXaHKkpYiPacx TIRt4lbyWvPzw80Vd4I4EHZ+yVNMtdIVk7rZv3ue/427T3Pfc9q1lXVmYTQv9JysUFX+/MIP fBrQ2VUm03XN+4RnVB+2+1OChy1wqLWuXQv0aNYLeEZxfoRPIYmL5wvheZ5zZcqsaOsczr+z jgP7YcX5gYu4xon/miceIsFPI2ejcGcdNvw0dDJVVTkdJAybtuFOTbDD3uD4gZuUDtT9LuAh Lxtdmd1iFDt8VrpST6D0Bk5JitRpdN3AybjzRSgS53GDWkX6XpiEZap8a+mq4dY81br6i86U XkOmAJyZ2e6KfHGoJUatKjNgChCwz9z2a8eHHCbqrS4b1cCJ1kz8mjcb7hGCsIMIguXGSeLc NmNoUEUNeBBpYJdNvYbbfAUCACK0cCKUGQhDoy2zXNcdkVvalYDDfgA7vbly+aHTInIcaHFk LYC9nWFDjaWjuMEzx15AtsM0uwoGKTwTSKFFU9h7BZ7VzZdO3YLrAcwuZJw61yrbDBhGNEDs 6G1QT3DQeUleS+DCkFi22ye0Reyzk/OsMGTKVK1rS9wQDqAHRxXgAcApmGLv6Tx+pXDQ7IrR ozE7gCKq2sqrDuZZJzVcSaULZX0rEGFQgCxwNYwXRHAiAMF6fN0jK9C43G+7wuR4nH7i1Hp/ 1JUqkBg7qt7prKmZg9QCLfszGLX+DEg5OoMVKxAG2P0A/dlUW9X000fUUuk/W7ta9r3UqXS9 g31pfur80wXqug89KeGjaFhpyJVtVJnXW36s291iFJWmooP0o8R5QncZxZ2fAUqvGBTmx/7A xcBopnbsQHLdjdOScQzsbkzRpYveyeqG7Ip2K1LZYerElGjwSWtriJlZ4XqRCC7OHFindO4/ IQYfLdWYAtflhQ7EV7CIMU/UNgZ0gpIPIgUDglaQtQzNYcCwdge9qi05UsxGfeyUn4+clv0B eBIWjE682wE+4A66nuVjwUjZVNrOWeXPiNZnXYFL62PBPPWdKffPipSwmiN/i/bjxc6ntuLh HZhbvs1LVb0wgT0+iuwctBQYcUZ9/SrPVEPuKrbOgntEinpHg0T2dLHzjBEH8hF2lnHv5aIO JEjMbUu+4DBdIvomX2/GMPhs7LYY5rjy+qXGtA0NClOPTVszR6Xy2sa1yNoZUMlC2VnhWTxz a4ej8bDnD8Ken1gcxRQsa0uyi2A6Bzsks3uJ+2An03QPKmiOQAWMHPRwrDRo22Peny2cXdVh 0GMitmnn2pKBa7MaRA+5MW2x4v6T5glqtQJfVevR1Cy3NqS4eW6btrLW1ueIp4ZGaQj2ViZr EaNTxrbJC+tXeIccwcEnahtP2W2Ax0KXjqMw0hbNGb8TDPyOecIgqVcXE8k4L1akw5zJh+wQ hBcFD6CDzys6aBw4jjLIAtZYDaoF3HNNbjNwbvKqbi44M7cpPsZvYh5FHLx1jbj0fAYqtKRU 7LBSpSfJ8SOFMYwdjkHQ6yI9dEutV7aL3ogmWn67DXQIRauacf1TbAh8TBSySityfQEkjCgd yQAe0lHXRxvDM8FnXhBy2wURk21xYXrljgH9pq1gU9XWVBqPLQXhCN9EWg0xghOfEQzkMmcT 5T1iW+lVm9lRPnMgrvROl5BAZnj0Lzx4HNFtQUJTgj5Vg17nxLB+LLk99uBIUo3i3hZCXkGp nUd5ebXCvQTh/t37oBFw2BtbSW+wMuXtyhOs2VEuvpCrabggowQCcwUUASWSqewL2NtlnI3R 3DMJZ7fptI8CaTKeMiLLFowy3xX2aVDYYGZW1zZKBaHv3OAsg2pG943FQ3O+YOX9Q4pD+4fW qhsSFtozUI78KVAUNzYWA6t6KnRH43atS0yUOiprGrOgFst6zi4wnWpH10a+LpLOr3MBoi/v f8RHvwMADOwBEMTOJadYXA+AgUC8i0IHERFFjG6Ye7Bdabfr703U7kDiDkbT0J0mHXVOwbdO oeauDU/QU9xAtT2HonFNaEFf0UV163iwPca4t08nx6LFcQ2IgOf0kjDOhGPHw9SNQcpXayS9 3fW+HsnwfpU13H9uR53nPj7V5rmhI1VjEcsGKF4cdAqtbK+7jbD2EnpdWb4vvUF333PRcJl9 KQ2u4CtkRWs8l++8aOAqyJPDMt5Dr9Zl/jiGoRlbDmA4vlM7qiRwsObWegCe49ugIbugIZ3r q4lk83bJ+ej13eX97dXSXrvoZhAoB1H/+lumi0JzugTPv3uh9zewoDCAnvie83rQgDOEJL6k Pr5/7G4MhQzdJPTS8dtBy7QYcp3eEIah66VS7t+F4n8TfxzLjCI39tJoWmbH9IrMWLhR6qWH Mh+64r8k5xhDbdg7TqRfmRJdxrrta20gfq5MYzJT2AmYHIxYAqYKF6yKD22ZEzSOFFjb8Xc6 09b24Qnyk8g9e/oewFR48pXTH3BNnH7HRafvnz/9KZn705+U2Z/+UCZeCWFatoTDeWLorRd3 2U8tZJB4NPD8wbJ8xuCiTJETPXaukQ6neKcKmAgB0dLZocCExzmoxjK9rdRLZwDpYFFHGrv+ Bhl9nbOfDwS8u/pCV73Q/6jKdatQb2v8ZznQxn65+4gGhgTfEa435mMi4UpYlL3sd/li5er6 YR5BBnLB71rqrKs8O/aD+GI6V6k5zbPY+ZQ1Zggd7wQ6kA24EcIiEUMNHmsSZPnhLPJTvLMP xj8yeImbRHT3z1f7wbiypZBuEkj/8AvAb/IEYdIP3SAE9PSMo2I7rsWQbUSs9NwggHM7EPuB TDxxriCZurCXoZZ015arLhMIQKvvLJ3BVmHxYmfwtRIMvbUsy0ZzvKQA16AriFLndrycbyoD +TA7EJTDWT10LneUCHY3ykhaQvDm+oWfqfTGzi1GwVKPZkMwqVypiqAfAG5LqGC2NmOQzk2l tvvVgt9Bs4i6MhkmABo9sh/pLO/vPo9JeICaW1UZJoy+L46iEMy7rGuT5fZSSARgL08GfKap 7D0XzLmu8gy4youxIzpxgf4Jjnv0RYHv+ql4DaNDtrMYlfu3EUaD8xidFttj9BWxHUYPxCJG AyhLl/bCDaKy8GEewDhIE2L5Hc6F3YPnJhL3Nxg05Veu8GNwxkl0bh4o83CeKla99wxk7NzZ dbz9N02BtCGVsf/9y6i+FGBS9mWMcngbmJMQjr2HWW4UZhkhpnCLBIofgJL1e6nEFYbnvpoF SXwaj5E4xDs+t3wBhd3RZFnsS2sEW19CjIUICKmh9ALrudHfwwY7mFZz2Cbdev6VU/OVIsFp AAgT14+6b70XPcaT8xgP0wTwFCavYHzINoHxno0wHp7H+LTYHuOviO0wfiC2C8j4sfbXwpS6 tB9u+cY+omwACR8NV7h5ho4qioLuq0SIMbLlT8ARAEnjBRGSUS3L5fvu8I99V5evcS18CV4s b3SGlQp9t7PXOzgW+KGwJTG8j2lXZruF/C1T4/XOvpahxZEfx6crU+2spq/yOrNFzbK/Nf3O vG8PiDBwI6j/XgPEgG0KEB0bASKaAMSk2D0gpsX2gBiKRWeDcYFuZlVd62pLn/N8YW3T9/ZZ HBB/NCuMcS7fb/xsv0j7ovtWJKZK4xPH4fvREBjwNLjTqZjSwY36DDfsDuDmMljOlwC+VfXt 1TUWxPwAu4I0LtuUpjBrGyCRp8zc/wUZkO3ESRC+howB2xQyOjZCRjyBjEmxe2RMi+2RMRS7 RB3DEV1Bab0xxRbTFZuDIfm9y4THuQz7S4XSYOzy5fBzG9R1rE/KhGDmvWnGP64jNrL+S47s kyM4/NCPY6uVeyzli6FV9wVe8fI9Xj2IEzf1AvGKqoZsE6rq2UhVyXlVTYvtVfWK2E5VB2LJ iCXknFoVBf8SQvp44cbk2+vHG+79/HCPHfDh7dOihIS03im6qoAxynFx7IGi6HrU0+L3lop/ syOHlgv5q83X4aXAQvf+YTLIbsNQUnbrW6cONHLqo0hAT/9/OXUo9nWPBTmBBQlleJS8ZrZD tiksdGyEhXQCC5Ni91iYFttjYSi2z/NQlW9VtVFbPBPIkd5a4rtKrdnN5hkNJc4/7BAUKfW+ koc5SzvwXlFGibx9NCByVeX1xRhSLl3+8PmezDORVO8h4V63a/2k2r0cGLy1g58hMjSWZl1N 1L+KY1SFbkIXGIKCIHB+0eXZbzYAOnvLF8Jb8BsAUuh7ErT/xMI/r5pWFfl/CG6Y6UBUuy1H clAhE1cK6Hs2nZlDzmMyrfHbTz18M39x5UuEbtIBukWKl9D4A4/LuQQQ3/HD8mW7M3Xe4g8f JP8iDsmf8NJK0Bdr+qIb9Fjnh89VXmbjn213Bd8gntyEYLUQHWbCx1cYE0Yjo9iVvv+a0QzZ RtB78ja+fvTOW8203N5qXpHbWc2B3M8vzYYOnH7cUOLXCOo23fdXienO82kNP3Lqm6bZ/f3N mx3yvOC73Nq0VabRwdKnBrfUzRuXtfdR0QdL0LfK8Bd+/S+SqL0ffk4d9ZRDlSVnLywhRxLC F9P3lQOm02Pz0xCqYSH7V6Hw6ERe97vUEYH/BZm990dlbmRzdHJlYW0KZW5kb2JqCjkzIDAg b2JqIDw8Ci9UeXBlIC9QYWdlCi9Db250ZW50cyA5NCAwIFIKL1Jlc291cmNlcyA5MiAwIFIK L01lZGlhQm94IFswIDAgNjEyIDc5Ml0KL1BhcmVudCAxOSAwIFIKPj4gZW5kb2JqCjkyIDAg b2JqIDw8Ci9Gb250IDw8IC9GMzUgNiAwIFIgL0YzNiA5IDAgUiAvRjM5IDE1IDAgUiA+Pgov UHJvY1NldCBbIC9QREYgL1RleHQgXQo+PiBlbmRvYmoKOTcgMCBvYmogPDwKL0xlbmd0aCAx MTYxICAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp42u1XSW/cNhS++1cI Rg52UdFctKdok3hDgtpZLCBNlwNH4szQlaiJFidu4f8eUqQkzlg2EqAFeqh9ICm+973vLSTf OB8dHIDAI7HnQPmPCUAhgX6/yMo91E+Q4wGPkEh/cz46EHhxHEeOnERBAJHjuONs2tPiEMS+ s3L64XwEdG3EF+ne0ZkHnQjEQeA56dJBECBIlHCa/3ZwcvhH+qqXCBU9pCR8EKMwNALvDl3k w4PnejjTQ6q09k7T0SYJAYQYG1qKk02IYOAHkWd8fDvP1PruS4oIOyGehfNi/wE7vuf3iq7R 7J0ngYOQjJCPe98MtIwCJCHpXVS+QQgPri4v3hy6WPr34TDyD6hY6dVFlXcF23VZ2SIwcKRj yvfYZnSP2SDs2tL3c9OzQ/GEqeiV2rwbSIqNKDd69rfio5IZ+nHouBippEW9wlG/5QMSylpx kYx9jPqN7ywdGZVp48nLPJkMgNvedbUkECI9wxBGMkwu8vQaeYkfJJj8avSydcXEJ7140tvB oScpwDkKhpv1XXN2ceyDKP4md6D8pk5AFD/u41tkXHy/pq2etZUeczPSRdWZrQ2rSyqYMMuq 1mPNaF6J4tbo08WQGClZc9b8pN0YzLtIVj6OvsbzUcV2XdCSNRuaGSP7XS0SztplsqE1LZvk c1kkoklUvhKVuf2ncyHZ1GzJPxuIbTHbGBdZ0eXMknOzqiwrMY86I35Ds3Ieu6pXVPC/aMsr sZ1OC3H/5Wl6pvEuT9OL1yd6/jv0oVwfv740mye0pXomTyYr+FCsP8swdHTFpIIp2vdV/ee4 fV5X3eC6O9i3SWaVaGnWPszvNOdtVcsyQpHEe9WxesWEBr/S9U9ZkbNaI8RAAW8h/FBSXrRV cg0aW/7ZNc2qReN2gt+wuuHtLcjZjwPVwAO+H+5wzVmT1XzzeDzTNW80PfsO6d3kwuzQ4WNR sKyH0wW/1OOH55fn5pDIIhJcSRjNZVU/aFraWPJVV4/B13erPikrLpjBuOF0TLhKMJgrnuNq c1vz1bqd6uF4ynG6Nn5N1ZPWXWMJq6tLyQOZONxrDGHpo73rcqu2Zwp+CoUdzQFKnsh2G+fd 2bGe/CL/npprkrHBCNuR4m3DiuUUWj3pimKOS8FWtNAiomp5xhowlMt091jyR0c71k5zkAxX 2qYYbxhFVc8+8XZtKiRru8HYqC+6csEMSSryAaqsbpgVxYEgm0trzW74FP3xfUH337cdZ3Zr f3wEty8TVawD78HW9yZZ3aLgzZoZ3rSZydgYUMnZRzHZhr+by8p/IsrubE9wp/u87WZIJSQG EBPcy7y41wcd9/f/XE901S3KR9siTGRzh73g69oiW/rhtmiUUmybkcHYuJj36l9vkIydrT4J BXYdIxcSvYaR6pP82PRJ5eL6mbx9C3cJJIjdLhEvBkEUkW9pl0iIAIahv+3eghWVWDXu0N7M N43Bw02CUnjsNrn7/4n/J594+/gMpS5fK/k7Bc3/zDEyriWkf+r4TiwPDQ7UoVGttNwkI5Ri F96z1/9kmjf4BUsrrW9lbmRzdHJlYW0KZW5kb2JqCjk2IDAgb2JqIDw8Ci9UeXBlIC9QYWdl Ci9Db250ZW50cyA5NyAwIFIKL1Jlc291cmNlcyA5NSAwIFIKL01lZGlhQm94IFswIDAgNjEy IDc5Ml0KL1BhcmVudCA5OCAwIFIKPj4gZW5kb2JqCjk1IDAgb2JqIDw8Ci9Gb250IDw8IC9G NDAgMTggMCBSIC9GMzYgOSAwIFIgL0YzNSA2IDAgUiA+PgovUHJvY1NldCBbIC9QREYgL1Rl eHQgXQo+PiBlbmRvYmoKMTAxIDAgb2JqIDw8Ci9MZW5ndGggMTA0NiAgICAgIAovRmlsdGVy IC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrNV8lu40YQvfsrCJ9sI2x1N/f45HisgQOMM7F5 SJDkQFMlqREuGi6aGEH+fXolKYpSpGQCxALMXqqrXr2q6sX6ZFEf+a4TuRbmP+ogEjjYk500 vyCyQSwXuY4TqjHrk4WRG0VRaPFG6PuYWJbdtfo5JY5R5FkrS37edwrtocbv4ovZ3MVWiCLf d614aRGMCHaEcLz45erd9W/x91IiEPCIkPBQRIJACzxf28TDV3fqM1efWKy6eIg7m06AMKZU wxKYhoAcijw/dLWPP04jHYx7HCKhVkAn1bmRd8CO53pyoa1X7jvvcy4D4lsBZwE7gSNdXECd VmzTsLIQfnH/nYCzbBNBbBhJmct4zepr28f4qm5f83LRZqC6aVk0CSv0ZGIGswxSqVH2y6UZ z3Mz9vPd03vVWsCSFUxI1wcBLMuqs7dkq7ZixUoNvDx9+KhaUKxYARrJlmksTw/x/Q9PcyRV Y8umRMQ3lFrvy81bxVbrRon+ij18z/8R1Y3X2sfHh3iuh6q2HghTjEMhj3heULnCsLSFqt5z vxHTGsbQuZ6KIbNG1Sapml09z/N71fiJ/93qsAAYIzCSYk0NmV7a8bhss2wKSwarJFMiRdmw FGp0eSsFhVjgRf6u/Gw2svawQN+qVgWbLEmhh6pan1mz1tmSNq0x1q0v2vwVNMikWBhVebmF AYsGIEyFtYIt69kXQeKQbeKq/p9yyaQz41JQQsGoFh5FshrcxtY3Oljta8bqNWjcST0RsY5Q jtkjkbOr/q+pqPwfWZ7tFivf4yIiJ25ubuSUcW8wdWhj6Iu43kDKlizVW0PS6DJu3jagiofi CIXEmTRJfETEiTOYmmmuPYpCj3i7PgitfPvRPCxyVth10+8tR1JFrNSIDywIxoVVrExILjFC 1PN2Cys4IQ9O2qufYVNBDUVTj+L7UuSbO+HkywCySVG5C5u8ZcUoXxyXkC5vp6xWsIQKihSO 4Boq09l7pw3dVemaNTw12gpGO9U76fPrxIb/ISmSFeTcU9WfV0kOn8vq97pjVufDNLMHM4Et uE6ehaZCTsqD4+lzLBsIQg79j5LhsXPFZIMhuK1NtJtSVzqnzxwZkNe7qdCdKz3/5ixOjkLo a7huygpGux89NzbiwgF/NF8tMP7xMh0Hxv9ageluFzsO9airvSqeoL9fKGKH/mXa15DafQ6c ze3tKVxM6uvJ2IVwDht8Jb8VNm8TdPzDTMs3Nr+PQXYGHW3RHW0nyQM/h0HXz99tGULWOM+9 dLAUV7fNJGu1Rqzvg5OJ2asQvG2JvrbuayFnaKGpgT7WQs/Q4hzE4uxoObI/Dl9k+g3Fr+b8 Q6afS0rEHsjIF5PjWRF/MVFfvJhoxN9UlN82jJSwFu5Z0y+vCXNfAKx1zCFlbmRzdHJlYW0K ZW5kb2JqCjEwMCAwIG9iaiA8PAovVHlwZSAvUGFnZQovQ29udGVudHMgMTAxIDAgUgovUmVz b3VyY2VzIDk5IDAgUgovTWVkaWFCb3ggWzAgMCA2MTIgNzkyXQovUGFyZW50IDk4IDAgUgo+ PiBlbmRvYmoKOTkgMCBvYmogPDwKL0ZvbnQgPDwgL0Y0MCAxOCAwIFIgL0YzNSA2IDAgUiA+ PgovUHJvY1NldCBbIC9QREYgL1RleHQgXQo+PiBlbmRvYmoKMTA0IDAgb2JqIDw8Ci9MZW5n dGggODc3ICAgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrlV0tv20YQ vvtXLIwcrAK72ffDuTR16qIFXLSxWqAJcqColcxUWioUqcIo8t+7D4qiJMqP9NCihQ77+nbm m29npBH4BKhEkjPDAfYfyhBRDIu4yJdnJE4I4IgzptMe+AQw4sYYDfxES4kJALCb7c4SHCMj wBzE4bvOIOxb/GZ89vKaY6CRkZKD8QwQjAhmATyevr94M/ow/iEiVKBHAkIgQ5RqAW9HkAh8 8ToN12kYh1tn3447n0whjCltaQVOfUKMIiE1b2P8eZhpb194ioQCRQfNcSNO+BFcxIuwvXkc vKaIGWyA8ipgplgMsb5f2RGUGF8UrmY0Tf8MIQaxlDASQBJE1ibiq8zN2wvnGCFKuOKaSa7O X8VLcPDW5/6ZGjrDB27szFbW5TYeCsSUMfuI87fXV4wTcpnIvHbtWOV3RW3zuqlamrOySpM3 dp1XxaRw87S+/fHmpzS7yVw2t0vr6rS+rrKl/aOsfl93UUlEmNd+mDklIWt0J+jUzpKhtc3h spzaxaO67t6hcUXpjvHqFN66ZmmrrB68deAlYBMoc/cjyHCEx41Ntmhai/hVGgdfZmci6Lch vijooBXyDCs031I/tEKfZuWX25uT4bA9Ew8lKD6l8b+9NvQ/Xxv8S2pjYTfPqo0Hc12dSg5X wqyp76AfV1WxOZVqT0zYfVOU/520jbaSIU6fnrz/oyyxbl44W0yfkSSeX1bdP5ofC2+6vmvL VSDE6H6Z/rdFzktXZ17Z1unaLVePSjyNzFax+k7Kej4uV/26PnDUhbkLq7KLrLbTDj4r5k2/ xjM3PSnvus7qZp1w5eSjF3SNtmL4DlQbQx74tpX7mnxO/SCTgPhdIWjomrxujCCsiYyYK/97 hzv61PeDv44IE75HFOLi6iZt/TbSwtOep9VtM/E9QLOwh41j6NgY9t4oR5oJ2e/rjvq7LRj2 0cdNXmwfidnZjCp1DLrHhpssXw7WSF+Rl/vC+07W6xkOvtrLkt7Bi++nlwde0H22zWWGiWy/ IDHWkBCIWdtz6EshL4V5l5bLycevfdos4AzlZcvzRfTpe2ZkqFYDdFqevf3EHzLp/z1wZfaD m9hF6eZrWJeDNdB/qa2qgoQemww34C0G9kDxfZgAxr8PleF9qPHvSAnrTAUm5shfbOaHHf4F sYpIHmVuZHN0cmVhbQplbmRvYmoKMTAzIDAgb2JqIDw8Ci9UeXBlIC9QYWdlCi9Db250ZW50 cyAxMDQgMCBSCi9SZXNvdXJjZXMgMTAyIDAgUgovTWVkaWFCb3ggWzAgMCA2MTIgNzkyXQov UGFyZW50IDk4IDAgUgo+PiBlbmRvYmoKMTAyIDAgb2JqIDw8Ci9Gb250IDw8IC9GNDAgMTgg MCBSIC9GMzYgOSAwIFIgL0YzNSA2IDAgUiA+PgovUHJvY1NldCBbIC9QREYgL1RleHQgXQo+ PiBlbmRvYmoKMTA3IDAgb2JqIDw8Ci9MZW5ndGggMTI4MCAgICAgIAovRmlsdGVyIC9GbGF0 ZURlY29kZQo+PgpzdHJlYW0KeNrtWFtvpDYYfc+vQHnJpYtjYzCQVG3T3NRVk93ujratdvPA gGfGKQOzBjJNm/73+grMhMmlqqqq6q4iDP58zvkufPbgfHY8AoiPY9+B4r+HAQoxDNRNOt9C aoAcH/gYR/qZ89mBwI/jOHLEICIEIsdx21E3p80hiANn6qjLRQvo9hG/HW0dnPvQiUBMiO+M Jg6CAEEsjUfZx93TvevRa2URSnlIWgQgRmFoDN7tuSiAu8f6cq4vI7lq62zUcuIQQOh5RpbU 1BeEPRCQyDc+/jCstPc8EBKR54TeIJwfBxt4Aj9QC12z8qHzIQIES2gRBYhDrFxccDphv+65 BMLdqpgvjqR3jitMwiAmahAHUaxs/1Bz0HE9JKMUqYesSPMmoxphW0K4aTmfl8X20ZB5yadJ wX5LalYWaj4AOBRpXSHa/u5sdK4Rr85Gl29O9fgTDKC4P3lzZSZPkzrRo8syozkrpvru+6SY NsmUigVIP/mx5L+00xe8bBZGnmv5+yLTsqiTtN6s7yxjdckPRUFEAu91Q/mUFhr8fTorabFM aJ5RrhFiIIFXEL6cJyyvy8MbUPXtv7lJ0nJcuU3BbimvWH0HMvqVlUp8EAThmtaMVilni8fj OZqxyuS4Gc/LrMlNwpSnrDCTiX2Y5zRViOq+nOjrz8dXF3qUiaIpmLQwKycl38guOCZs2vA2 /vXMsH9gdOmOk4pm+v44TWllEE+EMl7mvfR2RfDh+OSyy62QZwqtz/r+6vKtnr9lSVtLsnbA UF2elIs7zqazumM56ShGVnFXmCPeVD1jD8JI2gNRE55aYSOuErkeylpOD6juQtzPkoVaJLxe xXl3fqIHP4l/RybFlK7FubVidUXzSZcyPWjyfEhLTqeJCXpR1kykBmw/1h4ODtbYzjJwqEec LvIkpZ1UPVqyemYqL60bS9auL5r5mBqRSZFZqHl5S3tRtALpUFo5vWVd9GWShGQXmbT+rpYM OrP+WmmjcL1PyZfA6rZcr0yymnHOqpmt7aQayFgbUKE5QDHe0G//7VE+WH33xYYXIzWxv7+v pqx7valNTUa+26aOFzRlE5aaltP2+vpuQfXL48EYRAgPUiICkDx+9KYOTKwDD0QBClZ9kKii rdmWIRpTkczpk3Uil3W75yHLaFEL0ZQfDSXvmc2aDqroqESiOa0Ek+3bdu9pe14XRQlisieQ wPq212cWRwHKaZHSzdpE1WAfBYd/Z/9uG5HsV4oZA8HsrfVzNl/YfnhF66XY0A12Uoitfi6i oe/f8rIu07JHJ8Mi6dp9NAYxDp9zuFkpiqk8NvxHqkL58n9ZDJRF+NKyWLI8SxOeueX4RjQ0 t0v2wzIJN5ZJ3R2PHqmrRVLXlJu87kgn7N9Hsatd339C2DerPeAhQlZbYz+BvecyCApHrAYt IHLx9dcCNr6W833oEAhh/kug1d+OOTtEEfBEoFc9+8L4dG/5vY7Rj4CPohcQ9v2A98Yb4Yd4 nql1EQQkDvGLXOj0dJv1XwsAISAMfX84AA8SMehATECESfQPOrBWlE8v3DlayTd5xtnmZY3w qRfvmZ1xE5FGNefmNejlTHTE9gdVN2vwU0swpis/rKziV0POtyJt2xzf2cUq4wj4IrabQh/3 Q2/aef8jhfmsIH6giAsa/oKgTdyejfqIgANHdEbiEfkRwYs9QDAkLZLkQ/ABnfkaMcD3J8p5 mKdlbmRzdHJlYW0KZW5kb2JqCjEwNiAwIG9iaiA8PAovVHlwZSAvUGFnZQovQ29udGVudHMg MTA3IDAgUgovUmVzb3VyY2VzIDEwNSAwIFIKL01lZGlhQm94IFswIDAgNjEyIDc5Ml0KL1Bh cmVudCA5OCAwIFIKPj4gZW5kb2JqCjEwNSAwIG9iaiA8PAovRm9udCA8PCAvRjQwIDE4IDAg UiAvRjM1IDYgMCBSID4+Ci9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdCj4+IGVuZG9iagoxMTAg MCBvYmogPDwKL0xlbmd0aCA5NDcgICAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0 cmVhbQp42q1X32/TPhB/319h9WmbvnbtOHEaeOrYQHylImDReAAevNRtI5qkpOlgQvzv+FcS p03WiqFNixOf7z539/HdDXwHHkPMp5EPsPzxKCIhxYF+SbIzohcE+MindGK+ge8AIz+KogmQ iwljmAAAm1W7Z8QxigKwBPrxplEIXY1X8dn4tY/BBEWM+SBeAIIRwVQJx/PP59cXX+P/tUSo 4BElEaCIhKEV+HgBSYDPp+bx2jxidersJm5s0hBh7HkWlsLkAqIeCtjEtz5+6EfqfA8kROKB 0OtV50fBgJ3AD/RBaE8eOs9kLEPCQCijgGlItYu/lTdSA/SI8nyiP/LdMhN5dQEZxufjbZ5t Xqg/5v2XPiF1hEHEuueSIq94movSSD7wJDs8EwJIVNYmUX1mkS6NWFXuxMsakCs0F9ukTDdV WuR6O0A0lFzoyIxeaU27kmsxrbBYWMUrYRZ3qfgB7/lWzM37NEnEdmvW8nxVFmvzMivmwi6/ 4ADfTV/N5JOgkcEHawSu++MuNpn3iOiNy8tLvSWFAxJR4Gwty2JnAzsXizRPW/DKrgrhrUh2 ZVo9xsUbJRzz+7VQWIxKylCo0t5jjjBEqCSMs2UgQi+MZCrwXvrW6dbm3EG1l2434t/Eo5HJ efaMvM34ZpPmy27Gttbpd1K1+cLzeXfLSdGGp6XNYppXxaAt7ZcV5ElSlPPGsDzVpcpQ6Buc Pf42h2/fzd7Du7c3n+DV9PbmGkr6wNnbq4Y+vddnLfiiDejR8FePG+GkCz4vC3ENvbXd3p7U xkxdA8dk645mmt9V2VtaWo5lIruvK8UpJBvJvGsfR71OZmkOxVqoumXBkr8PxvQQ4vFgNBWl j1ZK+D+zFA+ifGxtRz0UteZ3daxW/KG+BfaL5Eq9WeTChbvHsXCIY3U4j1bolmemE9hzJ0W3 N6Ut1w5veR1mflCI9ryra+kJlJMuw5Z3Cn/Wlo4nHD+VUj0B0gb+wWXs1DoLYpfPa1L+WKXJ ap+XnaAOmaiF+SlM7172JyIPe/P9e4+PRzM27t6OoUbquZ2NO518qJOabt9toNITxELKnuig fl8HNX2XDFU3F84TFGurm8N0NUaJn/10Va9rWUHWo79n1/VeeJo752Au0+XKIlgUpUOD491z yO5eBgYmtGd2ztMml/bGygSUYnE0Txte2Xs2Qmgsf7WdcduO3H8I7Agvp0WiGNI7rRsR6Mjo gZ0GIJIDu8fUwO5FHmJUTmm1lEJCyIE5O/n32PsD5r9zvmVuZHN0cmVhbQplbmRvYmoKMTA5 IDAgb2JqIDw8Ci9UeXBlIC9QYWdlCi9Db250ZW50cyAxMTAgMCBSCi9SZXNvdXJjZXMgMTA4 IDAgUgovTWVkaWFCb3ggWzAgMCA2MTIgNzkyXQovUGFyZW50IDk4IDAgUgo+PiBlbmRvYmoK MTA4IDAgb2JqIDw8Ci9Gb250IDw8IC9GNDAgMTggMCBSIC9GMzUgNiAwIFIgPj4KL1Byb2NT ZXQgWyAvUERGIC9UZXh0IF0KPj4gZW5kb2JqCjExMyAwIG9iaiA8PAovTGVuZ3RoIDczMCAg ICAgICAKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnja5ZZJT9wwFMfvfAqLE6DG 2HGcpZyKWioqgbpEvbQ9hMQzYzUbiQdIq373OrazQUZiYCQOaA527Lf8389O5oFrYLvQdUjg ACR/NoHYI4iqhzjbw2qCgQMdQny9Bq4Bgk4QBD6QE991EQbA6mfDnjZHMKBgCdTwsQ9ojSOe hnvHZw4CPgxc1wHhAmAEMSKtcZj8OHh/+Cv8pCy8Vh5uLSgMsOcZg6+HFqbo4J0ezvQQtl57 H8I+J/EgQrZtZLWaxoKIDanrO6bGL/NKR+tUSsQ28OzZcE5AN+ShDlWOlvGcK57I4pCMLTEg 4hFV47+2HBnCwi1KP1CLCavjipeCF7nappB4kv3EZj9csUPLRehgWRXrUk9FocfbFY9XZqkz i+KY1bWeV3y5EmYelWXawP0TlcnCLsREVjnJ1Yu0cXs+vlpMWbTQEeIiF+xO6Ie/ylZ6ezTw pmFEUxotdZ6Vb43byfMJTAT8RBSVFVvwOznDem2dJ6x6CTQ1i62sSFi6LZzecQd4ZKx1xUWj n0ZyXhRLym6ehkU57gBLxnOerbM5RiNt2zPalHmKTYKhOCBbYdPX2soi0el4FDmWlaJ5OrDz IXvNcvHmHoHJy5etazMr8rS7cIPc3klXYiwXm5EZsOx6zWoB9VOnJ7oayYlyU+tdFIsHeXk9 BOIVS551ChWLEuuGs9stjqA1t/IoYzu4t22YntwU68X56ZBvg823y4vPMycXrcWqqPgfni83 amgrH1/7Z2G8la8be50cVek7A5kXgi+a10lS174tSkuzcR+B+XiaWjaTAVYbR0dHaqtLM9oa Sk3kVy7nimLfm9xEcfZdWoQVY2dRxtMmjK5SppoVFdCWTTC1ndls3Z/taOvYlOvKVlMuTS8J 7z7H87fjHoHfrBkO9DH3YtyHm86Z4nbA802yNrFGNqpPJhQEsk+23bZPtgMbugS5faQ2L7Yf pDMN90y+/0GIUSBlbmRzdHJlYW0KZW5kb2JqCjExMiAwIG9iaiA8PAovVHlwZSAvUGFnZQov Q29udGVudHMgMTEzIDAgUgovUmVzb3VyY2VzIDExMSAwIFIKL01lZGlhQm94IFswIDAgNjEy IDc5Ml0KL1BhcmVudCA5OCAwIFIKPj4gZW5kb2JqCjExMSAwIG9iaiA8PAovRm9udCA8PCAv RjQwIDE4IDAgUiAvRjM1IDYgMCBSID4+Ci9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdCj4+IGVu ZG9iagoxMTYgMCBvYmogPDwKL0xlbmd0aCA2MTYgICAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVj b2RlCj4+CnN0cmVhbQp42tVVQW/aMBS+91dYnOjBnh3HdqyeYMDUSUzbGrHDtENITOuNJDSE dqjaf5/jGEJKaJHWy4SEn+PP33vf5yc9cA88inxMGAPY/DyMAkaYZzdxekFsQABDggq//gbu AUa+lDIAJgg4xwQAuI+asxqOkWTgFtjlw54QHjIOw4t3E8qARJJ7HIQLQAjijAXmOEy+90eX P8KPFiGQFCaJQQjEJSEO8PUScq8/MP+kP7FxWF25GIf7hD5BPqXC1VQVdFgNZYaOUyfwS3eZ B98ZRoQQCYTXyedLdiIR81l9E7qrVruPQWC0c79SJgPEKKZAEIwwFdQq7I3UQme61Hlm9GHc zxf1Or0e1sGDVo/rOoziOC8Snd3W2zJ3652qXDGPSYV5IEiqNwmk5X+I4nRmGMJCqUmU6uU2 jOZL1c5VEdjg5tP0M5xdj7/B4eBmPIKD91NoCkG9K5ugYhZMcgA9giQRgU2xVJHjyaLUET1Z /B5+WFG5XalGGazu1Oy4jUvUOi70yjpzSl0v3FXepG5EaWfbzMjoMLVRxRGh0m9T/9nV1JKq 12VNsN7MS2Ppq2p/qW2N6eU6WfeuOln3BlaYY0pxysBHvUziqEhgPv+p4hLqRGWlXmhVnOXo s+PeoGZd2DZpm+nkuuJ0Fi83iUp2u+eGn7C5S0ynzfFdrmOnsVH7giVplCVRmReu6rLYdPdU 43RbwlntqtJVuX2DVj3D31d8Vh02n9fM3Wao3/+BGe0iF0We/qMdLzUk7JR/9tlbch4Ou914 YsSsHumeRA4DD0DHg9iTHuIU8z1VlY/Qo4S7sdaR8S8BDw3gZW5kc3RyZWFtCmVuZG9iagox MTUgMCBvYmogPDwKL1R5cGUgL1BhZ2UKL0NvbnRlbnRzIDExNiAwIFIKL1Jlc291cmNlcyAx MTQgMCBSCi9NZWRpYUJveCBbMCAwIDYxMiA3OTJdCi9QYXJlbnQgMTE3IDAgUgo+PiBlbmRv YmoKMTE0IDAgb2JqIDw8Ci9Gb250IDw8IC9GMzUgNiAwIFIgL0Y0MCAxOCAwIFIgPj4KL1By b2NTZXQgWyAvUERGIC9UZXh0IF0KPj4gZW5kb2JqCjkwIDAgb2JqIDw8Ci9MZW5ndGgxIDc5 MAovTGVuZ3RoMiAxODE2Ci9MZW5ndGgzIDUzMgovTGVuZ3RoIDIzOTIgICAgICAKL0ZpbHRl ciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnja7VJrPJRpHxZ506jNYIuyeSTCZE7MMDM5jZyW Ec0kOdRM8zzDZOZ57GNGI4cOTsWKrW1kvSQqhUonh01aSk7VSnKoDK0pCR02CSU7aXv397Yf 3/fT+3uf+8t9/f/Xff2v57pvMxM/trULiGyF3BFYYk3Ck+iAK4vlRSICqj2RiDEzc0UhnkSI wGt5EogOkGg0KvCtVASQbQCiHZ1iQ6fYYcwAVyQyBhWGhUsAC1fLjyQ7wEUMoUI+DwZYPEk4 JFZp8HkigI3whZAkBg+4iETA+o8nooD1UBSERkMgHkMiAaCQLwG2QmFCGEP46MkLFiCA3acy KI383IqG0CiVKcBi1qYloDIJIrAoBgAhAYbgi6imQSov/w1bX4q7S0UiX574o/xsUn/r88RC UcyfDEQcKZVAKMBCQAiFv6RuhD6ZY0GgUCr+susl4YmEfBc4TAQB1iRbPNH2U10Y5S6UQaCf UMIPBwQ8URQ0W4dg8EsnqvxmfRDYLkw22xv359XONv14QljCiYmEAOJf7FlM+gurQkKFMiCY iCcSSSqian3ehX4xzA3mI6AQDgPIFCrAQ1FeDEb1iFSIAsSSACEMQjIAkqkcE/AwIlEdAVTJ xAMCBMV8vFcqBSC4fCx9QlSAwPwL2QEE138he3uAEDiL/v63TCYii7W2IQPWZIpqOtHWHrCj EOP/jciXoigES2ZflCqzz1ggVMUMQTKIj+npRPiMpG3ZFSmnEtyK2ko0LaOMcoqTbtYmX8xh 4IcVDN0OtPJXDrT8d2wydpuwVEc+6n2aAAoo/YYVLnGNsWxCcje2caG+5dGf2PNe8IdDNqs3 HblRv0ict2+wx1gZWYl7cd/0TV90reZZnyGSXaHhaNrcU12d068TInbe6u/RPgyaPpZjQo9c 9jkEBTzty2qdGvFAipCe401LQn56o/ehx7C+tz3i4cIcWvoRlsa9HIf384mWMsGjWxhSboRx T2A+7Vs2XcuI2hFQkAOoLXUwyQl0rK7yZj3XGrhjSRswyVnQ7rUnXu650WvD+LKSo7r8U8tE Dh7HDedA5fVBV8WOcF2qstx/j25EeRvZ4UdSZOUhs/XcyWmz31dmzB0LffdO8XYm3fDqC36s iZrBGfWNOPtcp2gL3LDlTaKh5t29jSabeOEHByUuTp4Kbef0G+LbTo/iqidYQCDt3i79zpN7 TXvImCH6pDi7YDUrCHe+qvFAiJtMjbbpOrzmUeHLZ9evpueSN7u7Biu4NZwuXFPZpV+K1uqV pc4Nbaxydy9aWaWFdA8wl5g46hkxvtZxCVFygPD9PXXtsqyR8CtxupSpyW9K6dS89veMx7/K NzRWjhZTv0nQfJy4LGI/foRjFWv/XKPWu4wb02ZfdqGxefGqbJATZ+2fHVF6yvtUijjmFW3+ oRJa+UuSRkHclTGXqgbBETQLOGvhvfONleUNsy0tZa8kOll+7wq5eHSTU83VehiFlWcmY6PJ Neu2UBghYR/aHYvXHzsem7nzxasu22/2bcHQtR91D9AMI912yBNmksa7PaTaWLeqm8E98GBJ Tm9zv5A2kHjlGFZq6hB42tzxquHZX36bcPa3JmMFnFiiaBMubc6jKTOwulBcpm8G6iubmLww ix6DRpbeNa8xA7ixOjI9xV1idmL6QpE8gJCg7Ha+SDWR+EwU0mG2uVeFyEpNvXfuxGu5gfIN ujvvrqfdpYL9oNPDo35B40enHPruTEl36bWMpt16cNmGJWDNBLMPcZcIvityamA735pbr3Cf 3k2o/25pcpds/IdRcyPYpynxTn0PuiHfeNIWx8y421D/bm9FhuGAzDffP25R5s32kFbM/a7k +D7/luf70kNr1KqLp9O8R89vK7l5P4CBJTia+9WNn8vS7pD1t9bOvFpzreccYsbKPx/FwHl1 0BTbOCfDHyT3F799OW/gJ9qk5VuPcr0Di5L2LXGlpZ4onzA9QK8/b51dEuoqezjyhmssGkzf HB52J/4WszS6N3Cvk0ZDd3nFQ5873o+3VN1ePF4U6HR7R8RGTWe49wcjSBTVj0VOCsVdi/vy q5jtdanatQ1pA2urNHyQ+HPaq41ygSqmFker/JXPsOljjzMl8sw5c5sj8uTNKwqeUynNhytD wOtBoDrjdMp2XHzv5W8XzteQfT3DyNqgpiC/qN4ZPzzOvf96hw3rnMZRXdbxXPWwF9M3mrPt PCb97B+gtzFjMzdHhoFGY7xGlVWThvdFxS+EMU91161REWSrjW1budT3e9T3ns7jLHl08aA/ vpdxekViG0KlblbvKzuGs2+ukTEq5m0/p3yv8A0q9eq3W9AybqQn+yDmrEusjdBcN7Q5fSpx Jtuy4WkLCWwdC+6srz6fWSSwgYOWW7AGniUY9OlfW7TZJ4d+wn+OZPJ9jOvZYP0cycES9+IB fHL5Fr+S1oMb0Q0j1vGHQd+s8dSlnn0fDrzNClD4mO3w1bap0DF/mVhimm/0VVT09+wyeKQV W7y+JMm/S/8wXUvnhLv52q9m9BdIubty/8HYr6BXoPrYBdMew0pLP//MgHsXEOnldERQA+1x sA0RvOwVCs8tbQWzTA2m53dabZ9ubyalGO0//JSXhzZQTPSTnmCTpgLrGjLQyrtzfHDZlI6k UvmHsHfMgtamY6Kvg4nHm1c4NvqFGyT/vMbaVlEpDRqtm87P7UzwNh0KOrG2aFBtcEzuyV3d XUEAWMo0yabO6hpvzw1uh5S6bYupyw0zFtYFP5OQ45+u2BWHf3WJEw64ehTMacEttb+gmzEz LE8aL7jvrjc676uzEc4+qY2ByWcKLxn9uGWwny5/6gGm4U6ucvQLMKpdpVNmDl/VXR685HZa LpuluT7A1EqwzSN9wRCo5p0KrrxryEnZfrts3wXu2fgJRdQzxV3S5fBjWoi787TemaUxQwlV T+om9ritYxZWe6lnHePM7L54Ytmyjl2X00uh7JpkWguQGVqnZZx3TRb5fXHp6wV9ctETfcNc AzxkHYjNeeKooWHMKE5pd2r2qJgYuqdkeCi4OtpddVnMTO4Vz0hf25Byz39a0JfLnVlv7otb RRm+ysds6RphaAf2DEDera9XmzvUb4z3f0/uy+69tFXT+d1of+jJ2ntRa9fs/e2B565C6c8r fy268PZ6Wwb35daGru/Hif/hh/m/wP+EAF8E8VAJIuahEZg/AEYh4FtlbmRzdHJlYW0KZW5k b2JqCjkxIDAgb2JqIDw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBlIC9UeXBlMQovRW5jb2Rpbmcg MTE4IDAgUgovRmlyc3RDaGFyIDY1Ci9MYXN0Q2hhciA4OAovV2lkdGhzIDExOSAwIFIKL0Jh c2VGb250IC9TQUJTU0srQ01NSTEwCi9Gb250RGVzY3JpcHRvciA4OSAwIFIKPj4gZW5kb2Jq Cjg5IDAgb2JqIDw8Ci9Bc2NlbnQgNjk0Ci9DYXBIZWlnaHQgNjgzCi9EZXNjZW50IC0xOTQK L0ZvbnROYW1lIC9TQUJTU0srQ01NSTEwCi9JdGFsaWNBbmdsZSAtMTQuMDQKL1N0ZW1WIDcy Ci9YSGVpZ2h0IDQzMQovRm9udEJCb3ggWy0zMiAtMjUwIDEwNDggNzUwXQovRmxhZ3MgNAov Q2hhclNldCAoL0EvQi9DL1gpCi9Gb250RmlsZSA5MCAwIFIKPj4gZW5kb2JqCjExOSAwIG9i agpbNzUwIDc1OSA3MTUgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDgyOCBdCmVuZG9iagoxMTggMCBvYmogPDwKL1R5cGUgL0VuY29kaW5nCi9EaWZmZXJlbmNl cyBbIDAgLy5ub3RkZWYgNjUvQS9CL0MgNjgvLm5vdGRlZiA4OC9YIDg5Ly5ub3RkZWZdCj4+ IGVuZG9iagoxMjAgMCBvYmogPDwKL1R5cGUgL0VuY29kaW5nCi9EaWZmZXJlbmNlcyBbIDAg Ly5ub3RkZWYgMS9kb3RhY2NlbnQvZmkvZmwvZnJhY3Rpb24vaHVuZ2FydW1sYXV0L0xzbGFz aC9sc2xhc2gvb2dvbmVrL3JpbmcgMTAvLm5vdGRlZiAxMS9icmV2ZS9taW51cyAxMy8ubm90 ZGVmIDE0L1pjYXJvbi96Y2Fyb24vY2Fyb24vZG90bGVzc2kvZG90bGVzc2ovZmYvZmZpL2Zm bC9ub3RlcXVhbC9pbmZpbml0eS9sZXNzZXF1YWwvZ3JlYXRlcmVxdWFsL3BhcnRpYWxkaWZm L3N1bW1hdGlvbi9wcm9kdWN0L3BpL2dyYXZlL3F1b3Rlc2luZ2xlL3NwYWNlL2V4Y2xhbS9x dW90ZWRibC9udW1iZXJzaWduL2RvbGxhci9wZXJjZW50L2FtcGVyc2FuZC9xdW90ZXJpZ2h0 L3BhcmVubGVmdC9wYXJlbnJpZ2h0L2FzdGVyaXNrL3BsdXMvY29tbWEvaHlwaGVuL3Blcmlv ZC9zbGFzaC96ZXJvL29uZS90d28vdGhyZWUvZm91ci9maXZlL3NpeC9zZXZlbi9laWdodC9u aW5lL2NvbG9uL3NlbWljb2xvbi9sZXNzL2VxdWFsL2dyZWF0ZXIvcXVlc3Rpb24vYXQvQS9C L0MvRC9FL0YvRy9IL0kvSi9LL0wvTS9OL08vUC9RL1IvUy9UL1UvVi9XL1gvWS9aL2JyYWNr ZXRsZWZ0L2JhY2tzbGFzaC9icmFja2V0cmlnaHQvYXNjaWljaXJjdW0vdW5kZXJzY29yZS9x dW90ZWxlZnQvYS9iL2MvZC9lL2YvZy9oL2kvai9rL2wvbS9uL28vcC9xL3Ivcy90L3Uvdi93 L3gveS96L2JyYWNlbGVmdC9iYXIvYnJhY2VyaWdodC9hc2NpaXRpbGRlIDEyNy8ubm90ZGVm IDEyOC9FdXJvL2ludGVncmFsL3F1b3Rlc2luZ2xiYXNlL2Zsb3Jpbi9xdW90ZWRibGJhc2Uv ZWxsaXBzaXMvZGFnZ2VyL2RhZ2dlcmRibC9jaXJjdW1mbGV4L3BlcnRob3VzYW5kL1NjYXJv bi9ndWlsc2luZ2xsZWZ0L09FL09tZWdhL3JhZGljYWwvYXBwcm94ZXF1YWwgMTQ0Ly5ub3Rk ZWYgMTQ3L3F1b3RlZGJsbGVmdC9xdW90ZWRibHJpZ2h0L2J1bGxldC9lbmRhc2gvZW1kYXNo L3RpbGRlL3RyYWRlbWFyay9zY2Fyb24vZ3VpbHNpbmdscmlnaHQvb2UvRGVsdGEvbG96ZW5n ZS9ZZGllcmVzaXMgMTYwLy5ub3RkZWYgMTYxL2V4Y2xhbWRvd24vY2VudC9zdGVybGluZy9j dXJyZW5jeS95ZW4vYnJva2VuYmFyL3NlY3Rpb24vZGllcmVzaXMvY29weXJpZ2h0L29yZGZl bWluaW5lL2d1aWxsZW1vdGxlZnQvbG9naWNhbG5vdC9oeXBoZW4vcmVnaXN0ZXJlZC9tYWNy b24vZGVncmVlL3BsdXNtaW51cy90d29zdXBlcmlvci90aHJlZXN1cGVyaW9yL2FjdXRlL211 L3BhcmFncmFwaC9wZXJpb2RjZW50ZXJlZC9jZWRpbGxhL29uZXN1cGVyaW9yL29yZG1hc2N1 bGluZS9ndWlsbGVtb3RyaWdodC9vbmVxdWFydGVyL29uZWhhbGYvdGhyZWVxdWFydGVycy9x dWVzdGlvbmRvd24vQWdyYXZlL0FhY3V0ZS9BY2lyY3VtZmxleC9BdGlsZGUvQWRpZXJlc2lz L0FyaW5nL0FFL0NjZWRpbGxhL0VncmF2ZS9FYWN1dGUvRWNpcmN1bWZsZXgvRWRpZXJlc2lz L0lncmF2ZS9JYWN1dGUvSWNpcmN1bWZsZXgvSWRpZXJlc2lzL0V0aC9OdGlsZGUvT2dyYXZl L09hY3V0ZS9PY2lyY3VtZmxleC9PdGlsZGUvT2RpZXJlc2lzL211bHRpcGx5L09zbGFzaC9V Z3JhdmUvVWFjdXRlL1VjaXJjdW1mbGV4L1VkaWVyZXNpcy9ZYWN1dGUvVGhvcm4vZ2VybWFu ZGJscy9hZ3JhdmUvYWFjdXRlL2FjaXJjdW1mbGV4L2F0aWxkZS9hZGllcmVzaXMvYXJpbmcv YWUvY2NlZGlsbGEvZWdyYXZlL2VhY3V0ZS9lY2lyY3VtZmxleC9lZGllcmVzaXMvaWdyYXZl L2lhY3V0ZS9pY2lyY3VtZmxleC9pZGllcmVzaXMvZXRoL250aWxkZS9vZ3JhdmUvb2FjdXRl L29jaXJjdW1mbGV4L290aWxkZS9vZGllcmVzaXMvZGl2aWRlL29zbGFzaC91Z3JhdmUvdWFj dXRlL3VjaXJjdW1mbGV4L3VkaWVyZXNpcy95YWN1dGUvdGhvcm4veWRpZXJlc2lzXQo+PiBl bmRvYmoKMjUgMCBvYmogPDwKL0xlbmd0aDEgMTYwOAovTGVuZ3RoMiA4MzA5Ci9MZW5ndGgz IDUzMgovTGVuZ3RoIDkxNTcgICAgICAKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFt Cnja7XRlUJzdsi5uwV3DENzd3SW4O0EGGBhsZnAnhGDBPUAI7u7uCR6cYIHgHlxDLsl39t6n vrt/nbN/3bpTNVXv6u719NP99Gp6Gk0ddmkbFyuggoszjJ2bg0sEoA5ysnKH6lg6q7LLuIBt AE9Gfgx6elkI0BIGcnGWs4QBRQAGQBuAHNAawMMD4BYWFsagB8i6uHpDQHb2MACTnrYBMysr 278sv0MAVt7/8DzdhILsnAEMTx8eQLCLqxPQGfYE8T++qAMEAmD2QIAtCAwEyGpoGimrKwKY FNX1AIpAZyDEEgzQdLcCg6wBqiBroDMUyAywdYEAwH8dANYuzjag36VBOZ6wpKEASwDUFWgN eroG9LIGuv52sQFcgRAnEBT69A0AQQF2EEtn2FMPYC4AkLM12N3mN4Enu63LH0KuEJenCKcn 3xOYpgsUBrWGgFxhgKesmnIKf/GE2VvCfueGgp7cABfbp0gbF2v33yX98T3BPHlhliBnKAAG 9IL9zmUFBNiAoK5gS++n3E9grhDQHxruUJCz3b8YsAEgQDtLiA0YCIU+wTxh/+7Ov+oE/Lfq LV1dwd5/brv8ifonBxAMCgTbcmBw8zzltIY95bYDOWNw/h4UZWdbFwA31192G3fXf/g8gJA/ DWL6PTPMTyQsbVycwd4AG6AtBqe6C+wpJYDpf6Yyx39O5P+AxP8Rgf8j8v7vxP27Rv/tEf9v 3/PfoRXcwWB1S6enAfhrwQCeNgwUoAr4vWP+r1hLJxDY+99E/z3QAPgXw38HogyzfGqDtLPd kxRcHFx/GUFQBZAX0EYTBLO2B9hagp969Meu52wDhIBBzsAnLf+0EcDOzc//N5+uPcja0fl3 0wWE/7iAzjZ/Z/4kzx/enKpqmrIaeqx/36Z/ojSfVIfpers+EfuvOtRcbP55+I0hI+PiBfBl 5xbkBbDzcgk+PTYuXoAwn7D/v8n3B4j7X2c1SxgE5AUweSqai/tP6f/1/9fJ7G8w8s7WLja/ 50QHZuls8zRa/zT8dlu7QyBPiv557U8l/+P8Z8iBQC+gNcbXORdr0VCHtPfpsGqSD4Ojcia9 3dyIg29ci+p083ODKl26AtPC14TLXj1UveGoHxd5bPGe3Xf9uanCsvW5mxjM2JUCPP5I6U/L 3JOLt8LQJsi6FcJpXoSVfmAQ7Xsyo/oNyViAS39rfVRL27zwAYVqvI0XgnZyzRxE65EbREh3 5YodYJ1aG0vUjlsPh1+dt3/AkLh7fcXYP/RpcKDrFLlnk4I1OxadXtQDCYshKsgtm0LSWK/M 951VIXdif2VSd1iPHhPvysIpccM3XoDxDnpdqfWi70ENsBESHOKrdG++dITwsaDbS2PAn+/t YkEyoHWRYuM+Ndk2nY6HcvPCdixGMiCmV1nlOOj7io9SYRj5ZcuP0VIVzu/VfGn7w2OOmcKD xWcb2Sht1ZYTHH1BeRx3X5riUl82jIpXoScoEuqnQK08V/mCJRnL9hIRbhzrpxLzAkNtAwLF Hzcn9iYLPQog0ZUNLzgvsUoCYLVjB9f098OuRB/DIygjBR2zFgpl+mtCa9rOzz0K5zaen37m V/sWJDwCuCsb4ZuBvReLfgeCjNegNBeUblRKlVBTs+Lp2ZNnDvHeuDMNZbAi2NeLSIRkB4ou WI9oJ6NCO96jci8rJ+hS+e/k6A0DV6a4A0mQe7GoE5kpRulVW1tlTBFZRYmQsaQXCX+t182F HuczoRvD73Gnzdwo1wpXZHlfaHIiuFXdYzIHcvL53mcSeIbYuNjEesJ5NFsYJ3wY22dE5JUE kTaf0lsFRmma2sdwnRmuTlZOsIUdjYX3JigXo5FwQ92S75oq2nRhonNAPDK1Y3ri5Pe5qPDf v0Jl6EJSZXTjr4YUnw+VxFhjQdXKySDUz3jkeD7P5zRpyUtGXMNF5fn2x6BxH0uMLOTkJsyJ PUQ8Y7pKzmYuF1Vb8ioMF02AjPPl4BezrHY3NkpvJGHIRqJHT3QNIMu1aJT/zPJZy/hiDSC6 oeL0fHAKyufoobJbKKEUBBN83pBT/baqxvL8C400jpqDemqQyp5yRzxX0hQ32tB0qP4pLv33 KWVhvJeOEwYZiEQDnGIf23vDcHpyWu4jBSs5ezFxZtRoLHqroIFfeN+jYulu2yDgS6FS2ppt kmDdkbKrC+m/uZfOXTAMryHMzvAA15+j139vzY0+vRnF70GmJgnkiK1m+ABXnD90Rd23r9kM l5SYQJWAbFu2YYxEBX8WZs4qYaCSneG169jQFO4m2QxHicSfW8XcWRXFb1T4iVFp2E8nAb5z zcZz+UXL3QhlB/OWjTv3VVLXjyPPotBAPxh5phj14483BcV+Qz/fKhsp0Ok2zAj367fp3QfX f7ZTP72GZC6RwTKGM6fT88smmO4ZPn2NyOBGXVSyhGvKmV3Mk6JwSJ9jFRs6rLADBl1IYi2p nlK8Yv0g93HuCEmrm2o0oTkfHsOiRYH3836acalLDxJBHrRkbWXcGbMWLtROkDFfLfGHPXeI ftHldZQAbQfPqq3Hz6xbVNvw19u+M/s5FPIBWr5M9PumIKJ2hpp86/OzZYUVVS9FkvfdZeEz cB9JDzCX+yPaPy7tJ1W5CCLA+L5zDAmQAk11z5qjUYaYvER2Ntg+/RBdlnLWKyjHRhANf0GX 1MOgFaHy7qs/Y5gv8y9Mxpj0mV2KwWLsYkaIVr4DsrqIwkpUh4fP9EmnYvawiTtz665jmpnj NkH+F08mOpPK7NKjQbjqE+C7yfyFDiPV50ZoSisxdyL+zXVu7h8ifhyouSXFkde+PenZ4/dk iz8skT9wx1XmonJ6hVByrEJOuuqQ2qgrJ+GLn/pQbinC1yCYxO2ls6lDZeE35rF/erqanYlW 3LPiE+CL7TktbSk8LwvGnK+gmTrLqdx2FyNOYelWoZRpmHURqJncAKLQfKlTrOlA2XLSdvne j17rlq0P/nZtWOgoRovgdgs1vD4RVdS3C5+Z5WZE3TorQXA8N9RCK28t8tfDTxIT8G/pZElb jqVtp3211e/E1JrPJaahnPBl8RcjPI3c/jJcvQij4zUJ7kUek0IKg+IN+BihggQR+/SNhunG AZFKS9D7/kJXKjtgSy9SykS7xqSQ7jtSsci1rxPSlR/mcXEPtQdaxiiPcTrHndM+Do6bEefe hTgEgbG8qBpzHvBN/IThlaPCkLriWMjwc2zLKkvzNYLtvRNJ0Ov3ceKibGary36htCmW5WR8 xpXXAiet19vO01gdsLZzZOOTMG8ibsUTkJCbXI6lOcDGiKlKRg2NfyylhJhu+nl91ymzahMi Qz0W9GtempEi7o9QLpnsHIk2KrnwkKS3LSogKOyh1swqyDj+Ptv2Hrchag9rYzTbZ8kBbAT0 YyO/uaZBPC2SttB2YDvvcQxCDe03oLHlwLFyeXOmwLhXIPTRbOPGJFjlnXBku2UcA5plVlZL x5a7STcSkXuAyLU5FPwrSku7M0lBhSwZDdH5inNNmWs6xOWjmAQEEd4g+S51vmTzWTir+S+2 BmizRFuDABZkvyBXCs3gBhF/Sp/m6zHAYJLlA0/pbJd4coJAdzpTcvNr7EirFyazpeQGy9jJ RMw8iq8xdrh5dloq+biy/eH9ROoayWMt2ecVsKcHh1p7NHi7Ut/WRCtM+IpIeXWD+m1CusUZ w1tpX4l48YnG8LFxBdYW84WcaRJncVtOaXcaLI1S3EUfieidjlljFOKkms1QmD5qKfM4nXzq qc1Q1WWciYmobOKj5gufCdb4WW+HLl81oCTbGvDpNCauuu9TcP9FP971eyraYp9F7un8aLe4 RsrqZDq0WWTqsmiDGOxZnpLsFl38fRFYh6lyoDCe9Bm6RkyZ6tAz/HWcyIM5SklvHMdn4nN3 Ez4S3IMObpolSoVT97iymgRXU/eU9UmeHvMaTQedECWnhABleh2G0PyS8z2vQRP5T4Fp0529 LLm437uYP8/aQlxhhVUVkzeWvDcmtlS5H3g3S0l7R23sXV223G/DlCRGvRXbW+hzCq+bdZAG HLq8EVb234sZfwuMTucZywiqyVNJWXo1b1VBIYXNJAO6zLglFYO3xfOGY2z2wUE4vmplAJof zISTWwmXgz38whszvBMwa29Y5Ut8fuQvGhxdsLxaNFPJPVJH32BRWtZ8dcO44+GWwf/ryvNN XpndPJlAzxfpK9x0HnJXzpz2wVtFgNkuJzVDimWJ8eCw/s569aXcEQItVN040L7FAS8UnQqf pe25UMJO7Gs/xxhHlkMJPSl63qnmnYiAlRLpezcaIhOCIz0HYy2+ZtMrqjXV7A8XhdsRScaT swe0m+cvuhZY11AXWGnH8cn0RSvORguw20DUG4XWfDcWVTUSSauMqfuaZssYhjJjhdtbSi+H gwthPzjGMMb3tSgAM7PX9MB+SQTmiGX8xC5k3mP3F4LCtf04z0JjLChNSwpX8qYbsJOmUPFF TJAfygK/YrNkqFeTuUTLrJA5rSO85LI4VgtoXBKiLyONxesehqPYm3GsQ9GRhYdNaW/cAVxr MjsE3RwU0cROSslHpENPPr9gSDxmTsMF61KC9ZIM+JPDCGVMjSQsqGF7dCPuj4VCqDK7IC9c yV4cV5O3FjV8uzK5WjQHni7MPxCPGGoepiwITHGXte8xsmrspmzs3T7PA/FlB/DuXgw2h78x IL0lVs9B/DhJobVUgcRa/AguO11tSVPoII3EdebPJCK1Sf8UZaQhr8jutfzsWeuC0hEyJ/cI Se93LHtlfCV58mFrCrLHvoH17A3hHuzGBuFEhjFTdK21WhzpRsJ+SeOxeIZUeJrqU8dNDJ95 OSRWfQOFXrxzNAJrzICdZW6kt4Laww8WcezOcHdU7Z44e1EhbwsIQ7kgBq10zsv+yg/JivsO r78WlAEnyOPcv1wRhlfA0D3Rfm2R0WkLwDGr7Oq5v/wMl2ZsYPOM1RK5dmoo5WqS11pd9AoV q6Lw3SzzJl2c5o6GPOXkTsHlGQs9CvpP4+pV2ig4CikTZSeMiJFQIamAzoIcm/CiEVeYp0Of o+w91U8HGkpJ6eL2VBWnHUSSr/mSDSAeZc/4yk+cd2JhGghoBhHpetbzNLZwR1oasX00+oKP RXlIAwk8yB3KY1YBzAuEm9b871xXfQdbH8cEfZWsxeHh013BqyHYHVvcOagL8/ftYnqTqCYu Svlw8ka6sly20eT3nCsqkOPj6Fx8MgAunBG/EyvbjKxbFUsX/0m/eso13TpbLOZtQCUdx8NO 8elr2cy3TM32LQ/G1SXYSkCOzAnGw1CMkekfqYdeN5cscFLPYp3SmE/66Ttlhdt4G9A5xEKZ H04qYlx0KmJ2huNCuA5EV2zCmCbuyMxprUX6tBCeOe3fOPKevwODT/qNKvcMu1zg7kqRaA5y UapMS1wmVUvwxlg/prio50GofH0Qu0O+MDRrh4yE61hhYpVM2D6M/4xUp5aiXSUvEifh9cke PLaoKxExPVGiTyX9kIfysj4gRWxfTDW/ObHhlXGHmuMr1J98QmUk9a0+Am9amriTpWQo9iMW 8ULd6WiaLuuVRUzeTL1RbA6ovoGSTi8h96FYdPZ9b0jv998b2H9mgXwbJN0jwpLG73M6uukE KtlSfCCubY1nJTLS7RZPzU8qsB/0OTyNb9fBqJUWkEnh2/SwM+Opf/y+fBRBG6q3quaKcyUW SeKwaFJbo2QWQ4DEED3jtgR+JJ5+JVBpydUhrhFIS1JlQEz8UyI/HsX74CfCj2gU+UHZ8lVL xXgdFXGAS8FDdg9E/pc45pHcoha1dEEMmiECtDAcjxsDqRt9N4E3MIPkGEFo6rF8tkwwtrHZ JIpohK9ywUjgTbyXTHqRWQ1iX6WbK63mHEBpMvmdwLrfiTOiv9+8XaVmqEghrqFYH+mgM30B uvG2X9uLNFZ+LZtUJqT05vWw/Ij7yPWOBAJvR1L2z5Zs6ASRWkxtr7BhIqZFD6OzloP+7N8a 5AmtcKKRUCv6lM/5usWmMhsbfx724L5R+5jptk2JpnzCK8HbA9ZzeOVTdV/PNXt9SVASLKjk M00jl4SRB7sdGFe4tJIJt/k2hLmHANSkCfMxAw2fET0g7nrRZJqsjtlxvAiQXGxkcu9Ydfhu XdvaTEw3j+L0dkS974qdYTEfe5dvDGcVB4rB+iw4aEsoQ7fZZPDDuW/0mtfIY6UK/5HpgMRG bDCmsuoqrcRCeQCIQaH0NqJcBeZm+uBRc2UIXP2uzm/TfKHp0ynZHgL5FQILQ0obhJTqTL1Y UG13pvPC5POTKi2gHg402O0wow1WrSsuH+43HY/nWwfcLA8dwjQkRZdYeuWuyngdSplDOBAW qsd2AU5vtYpvxXWJtcYQ/JdSchhttjXMUyWutG+vZ3w9O3jtx/Ry1xf3QWTvxXh1Rk8831vB acuqpGP3wYPh6SR4W3BmIxaOfTbZqM/jZGol0ZYJgGYQ6WOoBG16wY/w+QEQdUqEmifokmKl 62DjuWl6E2upYbEHTcHjUkdtd7Gp1RCucgANdtYg53OSj/UVdzA0Q+Skt9K3jDVNkbtMBjeq RWGf6fBezrVXW4TgTvQUHb+Jz0vhK4Jh8HyNJK1PKfd8JYu3r6KvDDz9Zt8+gF3Gmtn2pnxg sUXqQIJo3apKxvqTTMZ5d/+M+fOWJviEZzGLk7O142Qvtr5NWJs0wFuevmlAI/yugYMUrBgf CCIQngl8Q/9l4DFGjEkMIR9oavD+jEJn8qdgOtie7jOaes5wXUwxaTplzkWdWwsRX6E9GO3i ZmUOIkakGoc90v6FBDhtNF+HgAlcus0tszswEceCOjhy3SQlYhQKQSaMX1xNz6DZV+0e80hZ zKavThrF5zhStao3oAglbucdSMx6mLBLMCEVtgqjqGbeESU70EwwTSQiGrHGxbO8FaXISksj XuOcMa4FSH1SFenewNMi/35wP7AZqHuUmyeuArI00VuVOsyW16kLeCgWelmW4oJLDlko5vQr pmznA2HWF/I6gZlDQho5i6YJp7ZXsiv7kNLl5ARbtgdp2DGDOjnlVX7JZl0DVaTXdOUrzQWs hT2X9OOc1ML5f0pXXUaCLo+yZRsxrib9d0WwQkoOCs5Fxs0SslOuLI5v87YbdIl7YJJkOYg3 2Z4qDlCjZG/KMlDy0RUJOAcv8buatYHpy7WKjLmOrSG7MWjwdcuQOxVyVnPBhvSYSsdOzQiC PsEWnysriDlKwMYY1BJKu5KjQvpNF/f4cH1T6VaY1YYXfUbx1EbFzak+uEEdqxOvsOKGz9fw VH9vf/AQ8cb19RedB73arzWhiR/0TaHxC0UouEPpZopfxM0E54NlqM6jAHuKfHlqk+iZSjuk ZMhDbt+OqwOdyJlWvekLk3Jl69un0mw0ohQX+NzPKooz5kULyM2dWiGMsx/7a3KIs2PjAh+t XpIfGefCl4H9mcpOT16oWqh/qAp9zsijmRfumaBmVu9kfO/VFVw6506eN+D6+FMo+OATId5l NmBwZWPIDDw9EGj5hol9seTUfrtaUD8y907FzlHhBePxSXXsQrkth4e/YJ2gJY1uMJ5v3ARO 5Ev421OY0reh3sRRUV4uan2Cej/mcXM6MTTLbUbtBPjTImw6MzltniNpBtAWvVWuY1TRkkb9 wGGS5dXqmW3M8czD3habhirgWf5JlbfFGkltrRo78O7TtCSf4Dtn49N6U4tA2RlbGZ3qLD3l As6r/IvO8aXssbHbUSnjY2/GaKlLm0anPpw2g/wYipGCl5NO9OVSmEetgtoWIcH0LW9x9ac6 gx6qd/NefkgYWNj2R4iKEA4ZVJViR8It4Jna6FYMR0zYcYp2wUgifVM4c8NHf2Ejy0dCZtvQ fjME77pG+BjLXfCTfwR2gvNRzKlIzdOpCpUglh9k1MwTWAqep9w6BN36Ui2bfvPXIkcSpZ9R 9D197GoK2mKt9pRsckD+FQ7lmmyb39/OfAVMi9NAZtE8CX0hhxbk8j4S66LQ7j3zD8VoZ8Gy FdOAApwbTYV9W55fAfqM7+PVbFFN65b9v6n5hUDpSi8X5406hGmIpLqZA3s6PrRMNUTGr+43 6JMGNC+5dpk+PF8n3+xDv81YTGWlzre8RUVIaiCKFb3opfpldqqI3cJ/1RlINzl8Kzt6UWix HzEy926+xwk+xdVrNrRCgfzLgpmedMhyVXocO7vtLXvR9cf3yuUPbgTESf3I5+BYt2cKPnUw zkudUJYLcYNrVFLl2AVzn/T9JhnxUj3jzjUPJWNqJbgCLpEvqKLXdgnFTYkM0FYKT97jAjhc DmHtBPxGc3dgufEPgEBGuaiRVoPBHJsn09zGqeiakXBv4e0Z+zzXvnD765S38ihNU13+5we5 ELnjVRuhxSy6ZTKvqgVvviqTx3K4o62lZYsynSKZWKZhl89Gbc1yiB66sJCPbZ5R5Te8wjn5 W6elZC85PxuJ77nWfn79szor3SZU7vWPtUF49yABvfQVLpo+l5UgKZH9memvdua0B8d8N5vj dt2N4A9I/YY3eHF97xBfvPYeSvATRWYtPPKQ/xyPKfiglg7OHgKInx2tNvds4WMJ0eC1CW6y Q3po6O3YH1lqORh9yS/j8f2Kc2Pq43+GxrsxPY/AtCMFDyN79LSTO4VTVIO/bMBbf0p30Da8 YeGOGIxax1IRyoPTeiRcVUPCkx8ON5Kce26MNRSQu1nKDkZtZ4bd4hliJCs2jjVdjE6rV8nr nWsE0daYu2oC8X0py5rV6IQ7w40cic3NCsOcMbaOxL2btpGG8Pf9y2P4NSj3Mz0mcQzItg5O iSz4fn5tU0/QS3lUW0wED+IDCF6klj93CmddjGYA3VS7ZdJUzHI09sGGMyXWZwkCvfwTKsPh p7Wnb5DRn7YO2totjXJQt75I4Vi8H9iTimpPnismo2PNIzkldoQSo6caqeyKwiBMEuMt6464 ORlPb1PmF00tyXzCHMnWpltDpoeC0Oi5qyIZ0gi2t6Vvx7RArmR88qIQYRkV15gALNP4F3fS 6AfvVN0IxhTchL6AyG6MsaSwXL96xH0aWmHC2OHgTQ2j2y+M/e6+T6STpumf+tP8/WHf8a81 nTdfv9ZDNnkBwDaS68b8GbvsT9l9iS0xNUR5XJ63GO6ovAhtu3MV+l18OyMfDqdlvdMVxxaa UX6S7kJVYws46ZyrseLTpc97I129R66MZ/1nrgo3fVBef/sCJYJvsLeWMDrFPWmNxC2yzkRs tGw85dHGgmOo69syJKquQHOQ/hTZZMpBFc0mj3KEl8BpJrqyFw2Lup/U0OSjKqoT2m/zNiwA I5K2oPeNRwXWjQFUrsYK7Jl3N6LTYgb11snU0KUm6VGbaVsxhDUlGey/cLImqY67R3NrYD0C TsbD1gpQygZ2F+BPrRObnr8kXVjB43qWyOGkL7FQCndcLMeFMLHO8I3GQV7ocO6QpLdgL/0K w1NUn3DYR3DWbpC+BMVZ4taoVh75lGd4N6BA5zDZbovydbVJl/m4XzNmDcjC3iZEHEvoTBrn pI5nOu+HMCn03Xa5dcMVMUzk8XZjbCAbbFAmHBGBwUKkss7bGeGASbMc1SXSstZkNzWms7q1 vqV1AxihK+fyFqIz8DGAM/kcl6vshzZY9MrO7+7U0wk3j3OJoYJBHLlCndTNh7N79Ssa+j3v m8uClZDnFIRfhmOE2B7QRuXGSPfM71dGXyr7kFuY6NVeNxhV3xgy9VR+2BPVi+mOQrMI6dg/ 2vkszJd2ODaC6uDQxu4GYqhIOfM1e6ZpbKY968L1WflClAa5vAnhVdEjg5JRLJDqkoNigs2t cXmDttBIJhBZllUp7qW2qVkdi+7m3GyFlBhFtTC/AiHcXaeHOrXWTczVcRbU4GsQZFI3+7MX 3cZq4aLXfYLgI479j+zXQnL7KCkcXPiya6cBKu01w+5p8Job3M0H31JW6erq54yP95yItzNT A2btlLYLtGkWx2i5kRCah3+x4JxezgTr4o9rxW/l+frVnTjR5ODwGXLpu46qu9ethYmVuM8h fZ/MjWdWcryHE8ixGuS4R2xUYkP8Gcl+0ihIeDyWol0T6CvqOmQKP70QugaU+rgoaYczRRON lK8qEVmheR4hRKJvYEaSU479Q+UFCB+b95FemfXAzeiQn0AOgyvSkSIB2fWaQEaDTCKTgyb4 gf7udXIFN/ichVjrDnN07EfWK5B7zBn2PBaZTMfDmd2MXSpsUVyBIPFj9GeeKb5JAK0yAZ11 RpGeyqN4UMTVnEBVyeTEGHG0vM+YTGFMfgLFc6ni4oogWCkpGn3jQXNHLskd2QiK8EjXBe+0 RtMLgiaEhROryeG8mx72YIryYsbFz8iveDHPy1OEQntblWfAQ6MraZFvGunfxweOdpC7SM0l L+u/3vH46FBQf4kULU+FJnx+XSIpzv2g0axaq+fE0e9wsHzqL8VJcl07GvrTbzIrULcw4l0f kg2z0TKbwEXcRegbVdEGwR/Mw/M6kRcqaPyguJaYOOe9jkOHLo4vvd/dhOc5K7RsIRmmmlge VbmzftXVJeOVv+6/oo4Irgpk5wbCLxQYk3aezBLq2T6/xNHv7MxukLzwRXSTq1TIbozWpMbQ +A7IsDdWVROqIsnkMTAyzKgLRsepHKQSe0HIENQ5HcQJu+mlyHd+LQFOQOugtp4u2jYMXHVK j3KiVt7CmLBUSknasI9xwO7etri3HrRTwG/gXeY6BMYNisJsD0l179Eevmr5fWLhRCAPPhnJ P2UI4+KtnBM2DEdCD1vV3SQezbZc/s7Gv0+2LJ73qXt0pzLljOBO8P6d9jDtREHcObzuz2wq XT1aDYExiNYVcjS3j6vYtUEsor3gyCIZf9rLHPGz55luRsCiIdjz5q0C8Lbx3soZK+PXkAzG kbsbLy++H1iKmO3DE6nuX7Gov9kE2zGGUMV+J4yLECgkiJmkzEXenYQCaBTKTl3WvxW8b7e2 VVKIRssJzPV+P/csDIO8E2uqoLESv+XuDlhFkUbKzJGPgEg7RehRWIBNo3sz5L9g/nG24bid 6nWGEqqQ+Q1fYDWF2bKDuYXVjYpG71BKtv4AcUuj3A9ZF/pn00mvpG7Wx5DqUIDh8V/bX8+F Rm6Mzekn0yFI5248H52ghaeUzBrMmQyosGsV9qVUMLf6+uKgnn+H+63F8/VRjomMgBWsZRXa LtGgl7xgIKthVmisNTeyuniHaFXh7HQBCm05zQgjCY6J/RVFM7Fb4UUVKRkvNxb4csaQOWeZ pspV2OHby2QfTlap6R6FKXVVPrxSjDKvdlxeDVvOrz3ERkyozFHtXR6Y4ievzc5YVZbqLsNS bOEHhBgqW/kpJ2ndzLOlZGxs1eky1twRXAufb0/Bv9mhkTDIYJumE6c9eJe0OzuOfv+K6ggG YWSMV7dl0hQQ11RBMR0lboOD5rJHkvK0cuiz4fcmln07P4w22XvUeTGbyoQxf8P53Iw7SHy3 dEz5JuyUToHWcLFkmTtkKkuZqnTKdDe/9dlVXCoETWrDgAOZt0z4dGrvpLbFhh0WiEnzdVVx TdYmETKbBX2YHUvAHq1G0gm2ep1a+hqCV9TiwRTLBZeisR5GFGW+7Zi90B6PY68cUnR/hZj6 JeVV2bUpSYiaw3uDyW/5EY38ldq4mAe6NTzLvDim4/rhEkxKL8VUsvbjFp5HpX6RwLOvo1fp iUj7xfRrt0c/G7dIyRO66T0+GjiAmGZ2oGE7kyQaHke6MKLP5NQp4Nih87xD6gqTeTTwl633 s8U2jwMvkzTXTaHeDySv3zXSQn2qqyhbZiOc1sfgC8/p+3Pw5GsJ4sYtShSPP5Bnjn/mjRat uW/9dnSdb3QQKgZ4P/6LlDGe8L18imibFhXh4OXHxyDcl/j+24xxJQqzl+ThulPWPzVLjuvP hEauN0uLW9e2feEbcQyYJk98lL7Jd9YuPmMOe4bDKEBfGVuBnwHEP2WziDRabAa7pS644xqy Efa9y2iunlt62wl1vXhEUP/QO5fA76PdPT6sVw1fSdDIXfbwOJFbzKRU0+NbkiKe/M4Q6qe3 20uSn20+6uZpyH6DORBeHVqelQUpfJ+gVomgo1pDPqvBBZFlWrhA5ffbQTVGxzRoJ/mA2lD6 WZRK3VX3CEPoUAg8hPvDT1On8+Ui3G4In4e+xyqhc+2RSprmzA2EuPzX5cQ8fMGiZmkPgetR fI9CFtf/8ofx/wH+nwCwBgMtITAXJ0uII8b/AZ2Skh5lbmRzdHJlYW0KZW5kb2JqCjI2IDAg b2JqIDw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBlIC9UeXBlMQovRW5jb2RpbmcgMTIwIDAgUgov Rmlyc3RDaGFyIDQwCi9MYXN0Q2hhciAxMjIKL1dpZHRocyAxMjEgMCBSCi9CYXNlRm9udCAv TE1QQ09VK05pbWJ1c1NhbkwtQm9sZAovRm9udERlc2NyaXB0b3IgMjQgMCBSCj4+IGVuZG9i agoyNCAwIG9iaiA8PAovQXNjZW50IDcyMgovQ2FwSGVpZ2h0IDcyMgovRGVzY2VudCAtMjE3 Ci9Gb250TmFtZSAvTE1QQ09VK05pbWJ1c1NhbkwtQm9sZAovSXRhbGljQW5nbGUgMAovU3Rl bVYgMTQxCi9YSGVpZ2h0IDUzMgovRm9udEJCb3ggWy0xNzMgLTMwNyAxMDAzIDk0OV0KL0Zs YWdzIDQKL0NoYXJTZXQgKC9wYXJlbmxlZnQvcGFyZW5yaWdodC9oeXBoZW4vcGVyaW9kL29u ZS90d28vdGhyZWUvZm91ci9maXZlL0MvRS9GL04vTy9TL1QvYnJhY2tldGxlZnQvYnJhY2tl dHJpZ2h0L2EvYi9jL2QvZS9nL2gvaS9rL2wvbS9uL28vcC9yL3MvdC91L3kveikKL0ZvbnRG aWxlIDI1IDAgUgo+PiBlbmRvYmoKMTIxIDAgb2JqClszMzMgMzMzIDAgMCAwIDMzMyAyNzgg MCAwIDU1NiA1NTYgNTU2IDU1NiA1NTYgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA3MjIg MCA2NjcgNjExIDAgMCAwIDAgMCAwIDAgNzIyIDc3OCAwIDAgMCA2NjcgNjExIDAgMCAwIDAg MCAwIDMzMyAwIDMzMyAwIDAgMCA1NTYgNjExIDU1NiA2MTEgNTU2IDAgNjExIDYxMSAyNzgg MCA1NTYgMjc4IDg4OSA2MTEgNjExIDYxMSAwIDM4OSA1NTYgMzMzIDYxMSAwIDAgMCA1NTYg NTAwIF0KZW5kb2JqCjE3IDAgb2JqIDw8Ci9MZW5ndGgxIDE2MTIKL0xlbmd0aDIgNDM1NzgK L0xlbmd0aDMgNTMyCi9MZW5ndGggNDQ0ODIgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+ PgpzdHJlYW0KeNqsuGVYnF2zJYxrcPfG3SW4uwV3hwYa9+AS3N3d3d0dgrtbCO6uQSbP+86Z M9f55vszc370dd27qvaqVbVq7+6+KUmVVBlFzOxNgJL2di6MrEwsvABFkK2Jq7OCvZ08owrQ whXw18iJQEkp5gQ0dgHZ24kbuwB5AZpAM4A40BTAxgZg5eHhQaAEiNk7eDiBLCxdADTqKpq0 9PQM/2n5JwRg4vEfnr87nUEWdgCqvw9uQBt7B1ugnctfiP/rjapAIMDFEggwB9kAAWLflLRl FKUANFKK6gApoB3QydgGoORqYgMyBciDTIF2zkBagLm9E8Dm3wuAqb2dGeif0pyZ/mKJOAOM Ac4OQFPQ321Ad1Ogwz8uBoAD0MkW5Oz89xkAcgZYOBnbufztgYs9AGRnauNq9g+Bv3Zz+38R cnCy/xth+9f3F0zJ3tnF2dQJ5OAC+JtVSVzy3zxdLI1d/sntDPrrBtib/400szd1/aekf/n+ wvz1uhiD7JwBLkB3l39ymQABZiBnBxtjj7+5/4I5OIH+RcPVGWRn8Z8MGABOQAtjJzMboLPz X5i/2P905z/rBPxv1Rs7ONh4/Gu3/b+i/hcHkIsz0MacCYGV7W9OU5e/uS1AdgjM/wyKjJ25 PYCV5d92M1eH//C5AZ3+1SCaf2aG9i8JYzN7OxsPgBnQHIFZ0d7lb0oAzf+dykz/fSL/N0j8 3yLwf4u8/2/i/leN/rdD/P96nv8rtKSrjY2ise3fAfj3BQP4e8PYA+QB/9wxNsZO/59wY1uQ jcf/YcN/DdQE/pvk/w+OjIvx32aI2Fn8FYSFieXfRpCzJMgdaKYEcjG1BJgb2/zt1L/s6nZm QCcbkB3wr6L/aiaAkZWF5b/41CxBptZ2/7Se898uoJ3ZfyX/V6R/UWdWlBFXkZCk/6936r+i lP5q76Lm4fCX2P8sRcHe7H8t/sEQFbV3B3gx/j2BjGzsXwFcfxNys7L6/B+y/QuG9T/XCsYu TiB3gO7fkllY/1X4//z850r/v8BI2Jnam/0zK6ouxnZmf8frfxn+cZu6Ojn9VfVfJ/5vwf+x /tegA4HuQFOEtWV7U74gq7TMdJc6nNyRSXHdgT5WyJFgh9JGtaIC/xr7Xr+0sF88lUZvtcFM TdO8H+0eS6cO7/uydAc/+7BtqHtTgJf5hD7ktP0FaFtUnV/pD34wG5QipZ9pRnldLcrvQOlw sWgc7E4qqxiUvMEQTXeyO8FdPdH6k7sV+GNSPDog+5qmNsRidaE2gaHXFZ6eUSUePz1SD42N jgz33kD37xPQ58TCU/K5QSFRRfo75hAI6ahXeoXTwqQ3fyG46bj6INHs8TLIo6TAp4iwlX9V sshft+uQf0uCTu8Q4k9UcJJu26/Swr6en47kF0mc5pnL/dxwpZRwxuFvJpwKHLidtaYInMmE bSAeeYC4phlwDvOqs62he+1Hzl0YnVHuKm343gqzT8nCOBruWoUs1ubgTOmptyIqZwl8K8sO s4tNHnpc1DQR6Oybs649kzfL1Xeqy8RVYjptCT3BOmnmKjRuuhEfnJIfCWy+1lGckCYvPlP2 6PS9jHQbIKCIL3eHe2SN1NJFrE67Z24qVe9qlV9Qe0r62VPcjtJuSbAUlC1B4cuT+CWMIo4c GdtkIWs8VPfzdPAow33bDj2t8iTA8yTEdQibDGF2oRDof8lMh1ORT2EjYqtVNMzcSVVx1/Kk xV4bw1ueQhpdW+z4Z3R8DXk6K4w/QCAWO8ogpPMVBUGv0Y6TcX8873mBzM9pGNr6j+649csI MqQnsrgFQjR/Vwbencd4dCOiI4lyRJQriBR/9Ivk5XytSaEfeeRsN/oyJNuh88hRUONZ4e0R cXpiu28E97OSdKJvcizh6pudOaq0mjGnRhvqK8kjWrtZMhwhlBrj08d18PYI3mZU0KSmpQAp DUY2plNEITX57pwh3fM1B9lM7c63cGZKTbQf3mlwlQqCfXZfkP2wS+fcCFajZFqssxqaONpl BNeChMO+PEAS3unMijTfjsoa02v82PcjnjuGUZkNtEPZrZkyN3WMTbexNZyOak7icqZjtI0Z 6BSVs4tzt2ER0IaVQn7wYz254UvKJPhJ6jFEA2GQLIhAyQTO4jMFepS4KGIna36or8415k9/ lEaBReN+U7haZPwxPFqEDD/xDCt/N2p1AZnNp5U3Cf+9/8pTyU1WDsNNzr5FhJ9wkxpFt3x+ HN5N9qrcsRDzbvH3h9SbhKLLxuCSer3jiS3Y3DdworsGKCuGI9HIsjr76cjtl6bHAw5x7SMc yXl/D2LGyz7b6zJ8fZdVE2v0zU0LvXOty2b1MBeYOV3ix5+kurlqjAHYE60REE6Egv5MCC+3 MYo+dWX6iDBYgPjN+/3SMZXyQuWLMwJfzXcqcbH9QeFit9KUjAQ5ZLgPeqTi6QjBHl8zw4nV CGolOXCF6egEBr6Dx+nrnN9E3A16+hybLfTXec/m750EulNXZcQyh+K2heZ6b3ViDtLGAbyv bVLyh+bcO5VgEM9a6a4/eIAVCqUhtKenpu6O3xRw0VBcHz6XUPSwkPbchVmtZ+Ni4GqmIuco hS2urwIiI4UM8sxw71YU51SDo+h85HXiuHxmZyrA11vV6aXVHEm3+XZgtrlO6BPndl5pNWxg CPxwu0ehL1JsWjTIyN5Aw/7C5KuMOtcC0+xVGF/CXmn8HECLQT9T149YR3mprFmBX3OFoct/ YURLwBvVqNPzqqjaQji9E/wAFPgrax/A/7zmIBB+pnojl6SMZwwV1zCPmmQdmyx2DNsbQv1e /pDEvNSFQWHyBI9f6OjkK3TKd6S8xa2URfmLFExMdLZOJfAQy57fXEQdfWA+ZgryTDKt7MZH wzB2h1y9oKvclD6OTHYtuM7QUwIKLm0drucXfg1whwtzn9QW6QFPS2C9/D2LOj7NFidihFgT ZQbpp7RXPjtP+CQLtqGbcEABV8ZTvDwW4VdP7FPTVRPXnnj/i+ZiDNU+ZYaMc40pE1I+I6W4 gtlrlYsbOYokTzv5OzrNIjfFL0lO3TMEKUqUzRhR6wpYp57vvvedtpiLJsPByKZqb+9koNtT D2W0jSMXnyOrRxcCs5ANC1IffCijFJTjpLzoxuNe28dfgwY9BsHK9wGZv5d3jzDq0HlYxZes f4dEBXbSBp1h2I3r5N14kV3LHPNaBAa3V5yjlCJYHXa4763E04U2lxyQuI8lh+hF2vruK3WV DoXdvQaN3Oi7b09oHh2d5vuUDsyKWvhp0rtWXmAYGU1Y16almVGTRMgWP+RF9S+Zms3wcccN HDWVYQ7LrNUGrj9zXci5ePB+S/LwR7b+ov3jHRPHqMhy9/xHpbA9aKroUz3THGyiQrWGYE0x RxaKlthfANNjiN8R5/i68dq+6rFtIfESQfPZj+LhSsHEXEFWkiN2qRvVAz8jkqePCDOCNz2t vGFLhT4s1tp3FBtfi1f5GyFBH6PRC1V9Rv2c0Aevo5Pplw7OJT7QOO40V5oDg25D9Zh4lHJn VKtIvSAv7+5Zfk6RBOVP5GEuLVc0a4th7h9UtUJdnSXFCfFuU3HBUh11vQ0viAVa+/2XIprU SvttatYWKnR9yZghdyd8WXZLMHtzk444PKeaxmRW1TjG5KuSZF+Lol2lQDjgzL3QlkG3/MnQ Nk3d3+NfTqIrM4VSeFFkTTBoiFoeUGZsApk6dBkeSDX1q26FpwxwYco+N4RSGYY3yRDA0aw6 gWpWenRCaOZ4sIH1pejWz3Ctwr7SjAtzdakEFXlosRqeiWtD3lcs72uuZVecgykfagBH2/o/ 8TBdHsfLvzW3HWLiAh+DXxUFeBjqLmNFuZj6WGBGcxbHTEcBSk6simefS6oECJThyCXOWBSG 6o/2X8/HUipzpdIpXF2lfWOSsAlxWBExLdbosfaLr8AwHsklCQlt/VBaylvw22Bl42iz/lR7 CGazRWQdBKI+MWkYBBEIp5HFypq4nFsV1y/lRE7NcUOd0AxPvqHt4yfmOMpy5omI59sPIa1x ol0q7ZI/OngbTAQ/nIe/4Gi8+I1iw0UQxqpvU3Hv2OWa9SANSI/B4zHbh63sfNvDVBzfW4wr Uiib546ag1wkxtOXjjxY9dWoRUP3/Kr1VMhny6pMEjw/HxzOysqyp9+UXiF6arqQS2a7RoCS SpCUodW6sPfOkXs0iHTcMMRttpAZSBAfJzj5kzaZbTgJUiMwNtwP8DS+6VIQlitVnltm/Lud eN+jApxswy3vQ65wRKr316moW8lon+gx+fxdK9kuqRyWZuQW+bU6TKzyZEj5Dyx7rF5hIa/f Ld2wyBuXGrX2hsgCJfi7fIdnLKVD/D1fTSLLUdXvvLG/moicmwC0Vg7Qk2WGkxb4WGqWN2ZE Q5oWgZqrEYTvAWj24cIvyTer9jH9DMS5ujQLjHCepGFdCdHUpMYD2WVeB/jSYmYByQFfiaCo BsF/L8NLBywCo2T23MkrM2toaZIWuSlhtMHk0wnteNVwab4M8wuk1NpNx6HOxGkTaFlUf5IW 9jSOaJYqAHq/wMm7CBfaHyugWCZe5fSW3pw1xnlP6K4hpD06we1i5JKKvEKWn9+NvaeDpRKZ +CQxizKpiwUrOkaWb4btGOjIyJNgVlPrSLsPc1YEl/LmTc3TqZ6fiz3el/c/3jh4PJosJ5gG gLqHua2oLFimCHjUv09/JFb0WA+ZpDz/ydfqqcTNUp2vGP1++R3Moiou+MOE8nJpjlZW2H3N HFgEq7Yc6gBSvcP3f304gsr6QNpQbOFz8X6TUagaHTkiSmetRLs8E0Hv+TyxjlebySTOXj7C FiCWPaS+LDqU/XYtuVAJlp0TKzh2GiGCOPHeMUSz1eO8O7qXMdisxIzfJvqLXhX4WEXYEuGS Mi7+qYCzG6oLnidOuKoVq2u6S4jmsm1iDE52k9h7CFv3oxyOp+N+L+PoWeO8yV7CmKDpuXt3 pKnGK+JiE6cbVsIgkYzSrgh9SsRrzMKOBw6FoEkTKmbROa9Yrx10JoYDdun6rJ4ohjodErsU 6KDbUAe+/+WDzHaxU1fw+sQvEbGdREMBzHIxIEL4kz2RLiqrCXbEGyyNymAreoauqmrH2t/j qsJaABJ69jXA3aLy5dXZwf7PQuenmjI3WXFI4vbwcGJBDSGG8S8JGrO2ewPU0WecwFBdjSE1 x59oZpJxiEGWAgOrJDiy5evldhwNSUSdCM4ndATVMzUKkZgXAvPJyOoZdc/9EvsOmB7o/QLt INiR+9wTYvzUTPXSboxy6nBKzc0HHyUAUe2C4Tpq367A8Y+1CVobUCHZ1fya7VcQsAPRy0+V Qn5utk/+xTIAzKKIb+rp8sBQf++OeMsTFVgRGoNz5gKRNl/5Z+MVjmnSiYxDn32xefpk89t2 0csoBzlxCd+wtd9qJnDf9AaLhqYdy3Z9v2n1zgNnpJHLQBVZpFXD221mSqN4AiTG5UzJ8bQQ NC/bTqHmP8mjv6UgPvwoah5Ty/6+2SYAjCqt9TbHfSGpubXAhIaHkkfrjfi2013E3U31ySQq bkYY5EjIQ3qH34e3a/0t8y42NfrakK0K+wqHY8EAoQrK7WPSsfoOr0LpWrl6TY0tftJyxZFO DDNmFHu5FlCrVzvHTfYDHq33GETf5Ef6SnD2gnWBLuVT1FBszYBDr4ipPG7Mdu9H/vD9fY3A YRb6hmg6zXxS+QzMuPTcwUoOmi+sKo3V04CQ/RAWF/1xwbONElOTBfFo8FwxibZRB77qHBve R0aiO9+K7teVIBs79MkEriS9oLzv8wa0S37mMm90PLoJ3MQHuonIuvndn+htt7bSQ4JJxkIl lRGK29Ker8dFJaSzz1ipbEykrqFRp5uy6lFsvt4i+K113dgQW/7z4YpH75lOgbVGKeAdm7Ea hW+mX7gcUUmPbmtsBwkrIQ3twkS571ogT4PCr/CELuj54dDY/M0FknfrRDNQsidrODUJS7Bz Sc2Diux/bXl6JE/b+q+73vIwDbrVYP9qNKCB5zb96Xiw99H1OzRxCJoDfA4pw75giWFdhfb8 SzqL/HMrl8YQ9gATs+UNaJHiqp6OmBIuRyIpRFb4eesExcnEdOM9hbO5UvSMdvz1d2V6ZUls daDnq0KrcZIGbVpt3s2e33d3IWResCLdknmSLjQTIfoGAaF2SILtoAhLg1XPC+1UeVvxJlvX vcJMAGwWC5LftSFBqJ4A6X0LonSz+TtM+vtasFZfGfjwvo3qqIkpCenbuzhHeLplEQ/Fp8jQ CavxIeqj4OUKpEGAst8vf6KAobPJiovORugmmQDgRwzJyNIGec5vO3wBIQ+N5LRuCNz8kDmd vms6R4qk875h9CWqW48/HQcKM3ohX6Ki24fQl0MQhpSdiCav03pch78Y+rIS3SzxOm8hHxyY Gk9RXwvgaRopMLjhifzBgZscY/j88aUNN9mQuMy9rF6YFNsj4KYLmEmCtxVMschng62Jiaej U3M8Odw4GQX6cir76W7ViZLhEec5iprbh16LDLuHn4ZKDBJXwHtToNBo6zMMt7nglOwRo233 fSNdDE6rRWkqDCG0KFoaEWXCpySFwyFh7sjFnc+KOEbP4TRm+k4QDnV5NglolntShhpckXnl P8YcsOuRx0GR7taVbPdYQoLDfBaB3Y/rGqGScEy3UjTmf+jbkqGG9b+OrR7xkF4Hp6SFMuNK kNbujpx7TgwQ9keeY+AG44wR3KSsmuvSbeI31uiY6BtZwL7A2IEcS6VOcbyAIV9rXC9VjQp3 XvrdIuZ8i5TcbGM62X90YW0bAL4/ALNjFU99zuH5ci62On9/6N2FioZQvnU8k0SmPm6WcK/E EwzT9UD8c0J0WdOljMTCqFIkmhPhYzxQlSq51d4uPeCIN7Z73TNvTBVkvXcRj0DZIAvNHK/S RqmdyXHV9dMqjNLJ5NcznHw0fIbravap2VKp9H6nFPB2J6LhzxO2wmIdQxFF1lhHiUTGRcto uWVnZ6O4VebyYpVxwotHsfe8N82SSEtFSFbSIMw5Fb1Yzdy5X0JRWZ3asT2NDcx+7kQmb8XZ xLcuOgXuNJ3Jz1hFGU3GM+dS1fBHkLkP1Ep+5bbwe7Z7EHck4WtNG2CQXhhb+u8PtLuuatoP 4Wj9SpHThG0MW6hDvtT3jTrqdP+lKefY20cvfsKf4tntmBcmlggu13x8y7fLqPYBZFm/r8Wd sjLgFmx493Ncii2ygpbBW8zleajF0xwkcOBLoKb3cegGhFKrnxjZv0OF2CA0Otwy471+d1TS uvkhMBS3SNpWwuVdkz9Ju7kiqENLQR31vKwE88Ern9DSyRvsdIt8M/Ta18/usjTFeId4s0FI Jju5RuPwLmIHO7fvzE5r+FjISebEmIp2g9QZ0fElycD1ScwIsE5uG63oJZ2yIdTCiDhZHRxq kokD3RLqHc/Bj67xKEYnczEAkZCV2KhvH7EuX7FqPGjCsK8l/Fx8U/7Zil9YOt4bAOGmlKRj uDQFI4BudUJ3XYM5EBThLCCoDX1m5owpFx7f6loPo+sB/WeRIfsZsDPfDi0kJHZCkR/0QkIn C9d5vsyCjyBeeWJ4p3rMKepLI6ndJ/+Vim1FciMlfrIcf4A1WZP6hk+VB1SfO/NbIxBxEFBb KPCIHKFMi4ArM3OTjaPmjFAkgqxDJTWYwSYZsCP7W1t7pIIxfJ7MoWleTyXGxKaebL685Xnz 09pALb53Qbirsu1Sb35mD7M/kMKQwJkfR/XgzZX6vv/acR7tGGyE9bRyUK03ypUNQGDMK9kj ONl9ubZ/0Ny67xxuPnlUyIOZWQzkDLA/JY8XDz6ulj/W0tGlFVu49bGTuv+TArGVj6A4kPra apeJ1nNeMl1TcTdnoi2yV+R+nShYr73J2ECK6AVnUG1QQZyXJkauSdb8xT0McTJhVNI44xu4 XeH7dok55YDg+kLFwtAnPDYV1vtwA/4WekKGJsWUThpaJwIIMJELIX5k/tMhD+aP1ZHYVoLa D3yfpzOJ99RV4J9uL93nl2wBH2BBTHnoSoORMIV/pCjCrk6OakQvNBPqGfL0WLo4BTnfJJX+ x6jpfsAVCX/wgalBQgDHciDUgSSyzmH6xUAj/NkE0ONn6hiXg9CoiugEEzcMDFd5gTLmNEWQ pM6y6U9tLLqKSYl8ZFhM7DttG4cSQof5u9EjYzSXr9G9X6CZ1c2C7sVK+EFl3N7kw9FWRLtr FnxvXEBM7cLFRPwpVGtkv5fgZuTuNfxq5OI6IjIKcIczNBebj1pc6/g09mdfRNGSjHFNf1pw uXJKAwvL4PWsc3EVCwa8WK5plIm25PHNHxCmCdZvVOt/sHfU73+WFlMteIeY8mWjKo8pMGyV Hq5TAJpoNG6Fxji5OXneZjFKRdWN4+33X+yLoclQ4+qGkFiQ2w9rGvnethubmzbMvNCaHTS8 k2/O3PvL9T4eltkKN9H3niHoFSv95iasI4+xPHmav7sDZr1F1hze8jRQH3HFqx4AE+Hher96 xcK6RO2ny1rMOrPUG8DuyPrYmsHWtaVoA/q/UkhknmjcxB+dmhEXhujK8SCmmAZW5HofJIIR YCWRsBRn67Rt9cIrnISHVHXpuOdh8asN53CU/WKUEd6x/r1nSY4VYPme+W1NLNl+fo46cdKT byY920hb6Cv33vQxDrJgRa9CVWLjL9V0bF8ephdH1Ox9YEIIwxClXrjQd5kh0P433nHFFaut zbUfIUz0sMf06D9o8EXdZU8/MO0h0h+ESliCqZBsvGFo/aB/6pARB7EL+u0JcCa2EBwKten0 dE2zFUrlj4kj50Ce9XYobc2SlbFXQo4au7HsVcF1CCnTLA0E2Ev9LtfjNf+4qspKt7KYlZSx FfpD7e230cXfOsSefPzdVSoBmOPbIWnEJyuLCSYhE539uWqVJ6+APFTQtltVd3+sprJn+Uxg vW2WCYqJ7lkb0HE4MkSf56OHxc+wkkeZdq5JlPGebXuSx3KMq31JqETfjVX0cCAnKyCal/Uz TxB61TTGk7CFBRfffswWTypnCVi7YDdvv7UNL6dyvjxMrd6dH6OgK/KwxIXJSrNsrIjZTVhj +0AT/9E2UmJ/w4+0gwNXX255xvb3v8iaw349FcsAEJNV7DTGN39ofafadNvn28+KCURCeR8M jVi44DEP9lNKwmXXTIbiP7MfHwW9nDCrvnfZ2CCXHIxDlyBD2Es4LtV+Wt7K2zyOFt1BWP8i LzI8rSC3r7oq0gPPpp063PPFMSQ/Y6GTl3vC97M4FWPy59suKL2GWpnaseh6ywZhn5l0IVTS rT0GDj0MyBkmBZGim7lz+Fa9oVUaM0a1JYNP4diy18ll7WlLF6h0hVHguKfuUbCtAiBzF2HK YkdzGiwSfu0S7EkQkXS2eYt5aD//7bF0rBtpAKbR7XqrgQwKYG92E25WZxqSQFc3ekuL1zv3 4LeU/uFYUXtsrHnQChdOzLCEjGrUBcchKN8El9+BH0snQemZNtR+CpW6WK7MXRZpOYLWAaxc PtYyj4o0yyEXfHpela47+feUnKs+OGjepe/SEwz7C4sd32aEit/z6iX9r/3UIz5xU7OslF1W DjZNy8Ayk3ghdiZRDtRBWaLIo7lcNtlcCCXbCp6wrF938RzcqbqLRke6H0n8zdYPEjrfY0hS aLu5MHwDFRGBE/nGd1KNDsZJALgLyHgOp3REsq9tj0EgMC+Tx9GGsnfSfKg1mLbElY4tZTe7 rE2icsTbIqyE7AlRvcnpAsQHPjGbgTx9Y3bw5aKdKYAyPxr3qRXsNGc0DvhyMhMJ5l7pOF84 kRP1n4JwGtNeuLhPPZIuMeNrqX17wiVt7v0xmCr0OGLeB/svWkcivAM/IU6yiYwpCpvWlJlV jBtoCnZUH49VRyG1YuZWrZ4Goh5pOd3cJWRfnxmfqalC4WonvpQp9maYGxMouLhs3pwuPy5J Wr+flLVCF7l+dPMz0dX9iNbj0cMzq4wRt+bmpYRez6hLG4VH2rBMjC4VJHqU/LCPdWZ/deNt 9dgr8MmJQlSREm8E5YqAzCNatNjxoiBTDLUpo44VguOgm2yPl4iVueTSspQZ88yXt4cMd5xr dG67xMlv3xQyyDZhWAxL3B5LexalmdJZpbxxWiDV7RtwnA28x8Gh/2SP5cJaYee6ESy70Iw9 s9qw50AFWiV9v+Z7WOhEfwtGr0L36lGPRG1+Uykj9DoxjSe9ZLW6yPMeYGvd66bWVplRCldv h6qqcvAyzMrTB+h3B4V8SgqzCBjCBdvjjLgHQcm1G31cMh4fVxcpqIhpWSflC7EWKuepbjs0 8Sd1CldvA8Wnzz3x1ZVCTgeaR6/38dHGJT7nNvBDYdqDcYVbLf2/zkClIBtpP/ZQxTlizJLX CoBwsF5mH71fdS0ts98mBZ1feESJFkr0FwTomJwetbjEFWUxuZUwUkolRKUgbXsU9QuUfOKt OUXiM82/1Cp9JbLBUUPrftdkQ9N83u8Iapfh2WyJMVEGKfhDcP2h7qZWkpfuTz9xpx/kex3q 5fjzfQ4WSE8FrpCRyjKi/oUCq6xraSy0xUggpxz2GItifcE1fZAE9TD48gchjXPGA3ci7QdR vZRBhy1bGTc8TgoD7tXbCw79AEHx8BcOLa8iAttSM7UcLbxgzouDNbJN/W83haUSahkM0eta 5ERFol/HhGxUBPzfsnJ5/VF0KGSMvj4kOFFJD+WU0vdHXREeFceEdEUlBl7LmEcyJ6JZqg6h kiPcxcQ3J6p+d1MWPqFODHKi8u1taTBno/NyWFrdmn9DL/AT8FhUNJTYvdQEaKgxnDwT8+Jo DyDLr0jt5pYvowQgfrySY8XB73h5TgEgUoV2rdITI7pEOSEpejdX2pt0jr6lQCbrD7I/zhW3 7K4WkKPuvrLZajorha320lwwqGnVrGrq5bbblR1GJyZI0ruVxHRluLHzdVkxIxkM+NiWA977 5H6Wqwh77dAP7e+0jB5VJGA/cHanxR6m92Y/lMTZbIYp7TuhOGH7PcTZmi/atnncl94/i2AU a5FDtkE9n5eOHgmtKnL/dlObv9CPS3CgXb+f7ktLotNMbuVZUG4FhFF4HZSdzl06/jD+hQum /fwSoCvgtZstlhLoGB9hWj0tZ++EhpP6527LK0A2xfFb29BgpxeTQcsqBVlPRYyblOEnS8HS J/M+rhrVAQfW01e6uFzTX2gRA6Rz4ksZBbxU+qUrUbqv2wBIph5Jcx9M3pQxvbRG4a4mQzKh Lz6F8ECsuFEIj9wmFOCQqzlDaOw3OmkFdNPNRLP6tUkxLBzfnZLvn+A9jrm287D72x+nqVfE B1GjRh1PgttJUrqW6OqDVOJmb20BliUijnMEYm4QuIMdDodP8XmRqA7HST9U3X9c3hir+jP3 VBRYFBghNJZU1/+goAticYEsb5XguQ/Wk/9oaCQaVbm1HNqi6v4dg5AD7c8CCrYB590AYW/v aI9L12z1/rDaQV8OpHSh9L2jz9iS/lko0QfXEFXSUn6mXL75clnG8EhdPFsqBnn/M+X6jYuk HW57QztilY/L/Ya4ZG/vspb9G2V8ekIN9lRgBV4LKdRU3S8zsCPwBeEUVVhlwT+NhvsKA7oU 08sfVl9zeldjpkkzS/IK05K4iN7607i9VKMr3PLqvTlcqWIrP/o1oXW+kmtl7Hbu4OrCVJrD Q3pJ8NLrzcwWjuo7ROOtsnp932w6Nwzbs+ID4QodkUGQsI9x0B3nnT0F0LqUVGjRLWXQZ+/f aAi5Nzw9Tl5Hv04v6mbp3HDcMbLTe8x4phXMngaq2c5g/NEGoJpGtHL0d8JafBMpRU0ZRUSJ tZYTeWJtDq+WV2asK9hJfXtmiY88WzOBerebRL7Za1Ya7xwHdc7+Jv/QaiSCjd48x7XsF9XZ EeVY0SXYbMvCoywnP82WYvm6lVolRHDBfZxv90zw7ibsng5V1kL6UsqEosrGdCmBku3ASx6h lCUgKB47+BLRjtquiebdfVfytY24+XDVsvJ7cgT8QbQ+Tw5ae8FQbu4QFwqCG9xRPAnZdB0x VVoXOLJGgbtUheZwiWsQt/bFZ9BwlcT3LemD7SuRJYskJJDbwRymmAhQ3PYbFTeFWI+KLq58 b/e375Fn/Aay+SFpzFLrUmSmUH9akUrZs/uWE1BraArZY3tKv5NgL2YrRxUCLUQIfLSvuGLN UPrj40VAiPQsdLJap6IjM3Z5q4ighZfrHUrNdLecC6hjMLWePBhJRKE0yrVDYRPIIob4z2+B xK9RSkYqfH089NCIByJemUevYCuyv1+WPTJf6HfuFjf5JxbLG8gR64+1XZmb3bBwseSeMAmJ WHbP9S85G2XysESlaxoLFsCyJRkMIuLN33z97IaGFO4gFtU6T4tQxKpYWKkccq8D26xX6kgD aknN0AwnGRChYsC5mY+cwFLHDQlCX2OratvBtL4F7aPK/GlaAT78bByl1tvHTCuykcU4kGGY 5NRG8r2rM7hm5Y9R0j4o2CaGiN9KHSrvm8hLdUC12xnJJHq0EZSaHlVkiB1akCFeJj1qwr/6 6NTAosBRF7K1uiHSdrUUhuczJQKYsn4wpJeLp5lhUhERsRjBUD8ozG/exzcQ/1JaXAxrYp7S fQRUWx9ZBTCSw1FAqtkRJZE1+9LxaeLfaNrzNpkP9lNuTZ9V8zB6EVFGuseYmtrwzdwwM6yF gYutv/OjDW982eBh8evuLuBnKZnJIwH+yER3QIv0lgPB6TOU0WCzKMHghakS/BroH+Whkykx qdjn1jcwKKqfVf3QeqUf41Za7amVscVNkHjS6YwMrnwLlJaTUMKHnd96mSW3HVAnr+Xf3B5k oGKV5Ctl3iJBtSLi+nW0bAIvposcaocpFt2agbWPB60rMRLMtdEaVrfSpOXrHok9xNX7574A wozr1ofh6SsTLw+7PzJDWw6/OW+ZBsIR5BLX7UXSS5P+6QNKguIilo8jzMZcG20KfJ+INFUh jeYH+6C3Mf5brzZXqbtPfDPTVtQCuHED6lPfKGnAgyArdFu4uFyhX1TsJiJtFHmBrL4JaMcQ fhgBcBLKGncADRlPN3YScX4MftHMEIameqzSTzXeGfSD6Nb2XD5nbDywtr0Q/gwrk21DtKYh ofHFyhTRmUySK8Ub//h2fhkz8b0ATUPynxffND+M50ImrUjbtEq9BRkhT0mwGoxilkld2Czw vwyg3ovDJXE+BRz9yutfFYFoIZXIl04bTK81sPhYwim2fGjDkWvvCpet1+jYwo25XQaZSOQz AtWcIWFgA8nJg3+o1xLvsxbbyd0Js8VxEfGPD977oVlgrncmMxmvEyuBcnJzbpfsxxl2GEAR jZmkMfxx216xSDfBfbho0vNr9Uxlu9qwPgfxVgYSjgvpL9hw0UkyA8GoFZ3Smfd2V/BgNzIs RIUAg1hubjbgfneB7pUCumsUhJZG7cw3dN64kYcvCVrXMLiLab2Z6xdtxLen6E9SmIU6Awno kFRm+FN/JpFMr3sa0Hqw7l4wxx/Ve02SqUhLZPqlh2uJIS9CrtPbjHkZn8GAeQ5b3mesG5vl kUYPTPzK3PfOpGexlX0WYbp658DQVUle2tSelEhdcqKutcn716xLpW+ji68ZCDiXxjDbWDME Ck76zve7/OqdP5zRILkBwusI+xN51v3UP79CkU649edUkKAMBEe4RLmcBxvQU2gWtq6Eh/+6 DboEWiy4uS/LU5JNvnS8ah5cHrmj4WCB01hneqD/ma+Sn0kJ5vf4Hc/Dut2UPorfjrIV5HXx 6eS7rtA8EtojKzOwKzsT2ChV+ZNxRaBiz8vHpDrkmeLQkNhD8uWCw2vtFcTOeKjtphVZ+Msa 6PvqP73rAPGNDlms9n2swBwa40eumnioBapupbGHb4gaE9YahQm2YvVPczQRQVNZjEkbDqQu c0C8O+mhMTbNVj5Ykw2XeOzvjeaSDjN448iwqXK/iS4OpDIQYgerxTuQOxRsW/jejBH9lKa2 AUf+ZCDrNlEpC6LMtILrjbYrsEwIO9fEUp8DcO0uQ+6oSZrtYZzDyP91S1eVEtcou1p/Zey7 EU8uCdxLBIxaoMXuFYV4jdrSyCfN+4V/IRIiUYe01iICoxe+nwaAwUYKaJqZMGCVkIRnZV/c qPpN2fXQeno2MoWhViMIc3oPtdS780D5A50EBYs9p0iCDOoisbFaL90ofalmh71YQnEbv5Dm 0UzbVSj5VU6JdDzoSVwIEXYhTLs8FMXJ/E/K9NzZ1xWQYWVj9UgVsgIN5q7rS1GjRjLWsTI0 Nex9QfR6/A2Wdbsqj/NGWHDvC/VxK1DF7KB44vODr1mhEBHi2cJcljp5kTCjKJiqDEGQEcdU ojGN/z9eUJS7Vd2yRAyTHgIE6x8GtptrG7vxwL2etLSkFUEQqdeAZCvjMUHWxLBXu202smSG si8cXjzNB+tco0hXxnjlZwqqBQDUL0M/YTOrkSTSO07JpjQWVfSaWeOriAYWAOQ2nYg3u7PF 0dYtJfwd7tG4dRYa25zKAWxHRDf5CMj6HckLMZ/JEbu+Ud9rrTF5g8obQTCtlwj+IIucqW9e DDQrPX7eJi1r3USAHsR+vVWcjFaW3SZaK6xmjA9yZMDlL3enUHRDbDMhS0t0g+RWe67kutaP lyPLk3yojvN93oY4Bi49uK4KznPbKHh9oB6d5dcICor7+50wxfojJDmMgWDnsqdeqHNWmM3W 5QNYSrTTjbQ23ztjOOw/g+14xOn0zzyNXHwHcAZFa/mAsFYMVJDL23AkuKEVhbjr+aswNyTW CUwUJFM+Pm8y8uQO4fzJBI6xAoJpBw8auOKVkLzWxWORLJsSFqkRtL+jOm7Kbe/6fWSD9Xbk tSik2JQjujW/zNx5xVEk31UtVFNXhXdt1hWiIvIdP0OgbVmn3h5BhZzBgkRkOeL6Bnk85Cui XI3TNkwip7V6unPItqMXeFdneyugSXdkB3YblIPm+2fC0Z4f1bxSQD3CrFM0S435uaSpLuZX bduwsrUo9G8Rgsne3ABsr/NOhxKyS/Qneul+51WL4ERfHFfCI8day1b6RB8T3D4YhdZjJ1SB ONZbWv9HPKCObD4+Dut1VP2dy8ddb3iYws3GbH14qkSDnDA8dl4ya3m7DRJ8UEIGznd2oopj jrmOOvquM2kdYytym98W8IZkov0Eyvn2rbt9OYvwhQ/jOcV/oFqeO/QT86GG7e07R3i/r6QH HTOI5W7Galf8rFAzO3J2Y4RDOI1T7C9pW9pxITDkVA7DSxBRnCK5clYFjKZM+W6pEnl47rf4 jNTw8aCAGNG67vnDlOyZEoSrSLQjtMTmxksSd4wAjmPDabLxJCbSJN1QeP61OQWWyW0hTiNU bpZUKClGDVPNHulOG3oHsmvzhgwQbQNHt4NtHNYeAp9YLdX5U1Bmcf15fYoErfAP0Z6yYz49 O+lXLCb0kgN2dG7ynu5um98qxpfyv4/VVWDgcq8l3HzPOnDTpRuQn0TCRWUHqNdWX7AbitHv pD50goK/Zw9rlFLUZpnX/JgIGVcjrokYtMWeV+sgl/KAqe+UNK/d3GFq1VNojK24rCbRmT5c cfwd9vAadFn0JBRgjueDosIGunvw+f2juQWGNkh2mIlNYROt1Tnrqkul3m/4K71JidYl49YO DLFtacNQ6f10ya2gD4RKk8wWn3qDbkO0lZwERC1ke42hOlE1svXCV87+jYQoC5g/obR0mfFF DRMYqcIMx/K/o699L499q0jiikvIs28TAhmoko8yERR/iMiEH4/n/FLD70LtUAn1ZTbuudSo Fyu3OTnfVHfzthsdZ4ENkuP/wH4TbeGKgeBhD1Qi6lHapv/RzVizk8Q4l4qeYEeONLtO4Oj5 ucN6waosbnN6bDy0bTNkY47jB4AM76siyKf7+/VGFT9bm2GnH8PXA7z7lSAZ0S+F6SWZgPJT wC/6BSBMeM6USmIlCmWE5wfw2E8f10l3RaCr93KRZ658Yvsj8uwJREa+oIXKz1yB/TEumcal /okalp3VFL8GE4v60yvHDSay+JQsXs31oTlZVwQl/aKVXggV427VUCnb0MQ+bkC/2DL6ipKq hUp0hvweXDjfn5rueh9Jh5dJ1xNGloHw06MbNnNhP5SF+RP5bCzdeUlTeZY70OVekkv+uUsy MENMiCADujpFbxIQW07iTsl0xVGy4T0FY1hhvzdPrIe3EW6SkbnibBA4ua3t794L1IWdfl6A UglUFhOV7gyi5HMHfGTAKoVlNCU7m58d7Ektje+45XL4UGR0U7PrlGblCcttzHEhvh7lrtzm P7hov59wJc7TttwdBMxVpxR+sv50x2WTnYw8GIMW83zmXpl4pKrbaTw4CQhJhexPVcFLDdpQ I4qmzdJjNuHUGaofNheHeyxtS40Fb5VF1rbldBwLEObGN19xEeQnbJm9yu0jNlzIVYO9jNgr ztVwjDcgjUKeGR0UdHXulBYmkqdFb/zwkI+vcni10aASEf5jQ4H2/ryM9KRWql3OPVAiAwbD EguZK0NEGPmLu5osetfod2LyCOINt5g2fphEjUebWGUmzDwa0np44bjRGLD19RfRFIbBFLNa Ff5s6HUreApMYBXWnJaU6e388YfcEO9b9ErN691PvpACUteEeTeFtMQ2lqXC/amMe+IiHxM3 eVJXJGdgakmAbgbj4xgvF4fDuYPe/GRe+0bb9FxEMYUOEwtKC+G00/zpmynB0A4sK7r3bNDa IRvUyne4daJNSWr5xlRU3fPmH2ZLW+nv2mlqLehfxoQ47p4WrpC0Dr4KfLm0lnT0HLCCgrwj ntJjuOAFx/igMYoly9ca6LxzJ/AWpTKoxs/UYl2phlruOlNqPWA8a8HZeb0Xer/RS0btzEzu 8Izr1lGYiLiM4QeL+k7eDW9oKUGmzdoPcetT3aPz2fV8o2zaRUCM7l5eE81M+RI+7xGeC+k1 sbLDHGJByruYxge7qGyNlnRCwdLh9kIDEVhr/Bu1qApixRkH0ffRg+QLpRliwaBwA7A9fJce DQP5CW2RVcrA1V59XkzCsXCCfYbeNosUB2e6PcnsYjeiqOD+tGWIIsrhfklJhbyHHqnS2rMo BePbTj+RK2JkTsapaLnDdNfNjHjor3K2+1B+8EmXAcs4e84sDF+ujBFNil+7pK3UA93G8klF WjQaHfN9vxkby7Metukr3CkbJBfiORaJ3j29dIfDbj5wTuOrEdCyNyAHhRJVOFIr62PJ+TmN zv0dbmIKjGXI++AhFtfq+QtCfSNvpcbx3pu56XXJ1kwilHogGdW3k6m0mvi7ugxiVQesq8V1 X4E2cBzyYlS1yrJUy9+6kq9BTle/zCs/p09Loq19YUh9XuC4k9xDEFq+EIYgvpOtUoy50Xj9 kRSxmllm8Jkfc4FXEgQIsWNDfKD0S+P0TYjM1wZCfYjnti7kJUBWu0r5ePzxvESCz9e4X0bt DLhGSDBoPsWVYvN04BHisRZFYdFerMo9FRQ3/q76DlMc8vYeSFK15IexIDzWT7yHlrTAMxaT BO6cyaHKfOjV9DU78Hjo+PFRoMkjA9z2e2+UjiaoNoeFGt4VtIrtecEtfHKPMFxEprWJJpR2 ayvSeP9c6S2XiO6xSF7jV5Mnx2xEKB8GWQG4Wx2ML37fmSWDZ3QWb8Py6Qng1haTLfs0f0Ns /kprYliuKoE2Gxa43X24sOsb3zyxcySm57EpvwhTfDGB66UV12Og5J27qgucPJJsKTD9WUzW HNxhjWFXC162zDEKARnlaD6Fw8X7iBfgCTZz8lbqRRdg0y/HaGOiQfLNQH+FJwSCyzSdu7jA 1GUJXZpNMPxZ24s6M3au/UKRIUKBKhqrpPRxNMH16phKyWUVnKKZzIr/0O6ZlnpHXAhVM/Fl aaQ63Z9ycvXxgj1v9HvZ4+5XT1zh94waX7IICNJ6W+MnyIuu463FyD8h3y72osm9Dikrk5WE bKb0NdORXzihGFlkQp6KXS+dwlZtzfK/bCURMZMO7is64XMRnIWco/apZqhq0q2tzZXMpLQ3 YBPbNsHIKqDLEtdyB3yS+8Zz/o6x/BzKOC2uSKuLr5mGeWjeXD444rirVf9p7a2fO2kbr+xb 1PiR8WHXCfCfjgvNQYd51FJGanhZt9Q6NCoeA2pu/STfIS2+7KCJ7ScOBCQyUHsM1sHVjui8 dgSKvSprUb4+xlT/1Ji/WXSeqpszzv/1Na32q70Whu5M8XaI81k39HdPYR4r/kFyRwxcBkgx NQhDzaRuzdGs5NGkOOMbrpgba1To3i5Au8WDMd4KbujWixuqc7HrFqIgXve3TWpgyuJQRA6o Goo0VOuGiO49L3//AEESPctvlQMzod25EhoFgJSkO7lgh/8H0u09wZkQGqMAeSWhkdPu7RQp 57GcU1Aio9oC58D7EpRFG9Z9zfF9BUv1tc6CBZp4/Q11nvYuJt6jR/hqmeKMJjakD5ZKGJMN 4qqMQ7BFHO1hOgPcKrxz8nBIukpvt3WvW3PbfecEWTSpm7QaQ6UyqyW5h2+q8k3Rh98E8KfD g9LbLOUhfsmpgR975e6wei0LYjXcXC11e9PnONveu6N25pexlOR8ikxfxooO9dLCcoWou0AU +xAJ0zs7t25IvZiT5oN+AR9zU5n1+hWDMxb62iLPono16bFDeGpOYxBxIvV9DoKaAySfBNWc gnfPCnv9j7OswS1IDH7i0PC7PF0CRnG6w+Dqmg5SfLPxmB79KhNvLc4ohYbSya2hAS/7vuSr HNHYZJBHBUGZ6NHQNxZ5TIKFVC517zaUA+K4DI8NX1svKJfPWszRcebjRFPKGTpUmjWWtDTC wGYGwIyT5Aa5sZMkCrOfKyRSxZvbRavlmxsRPk57X8OSSOfxwbxbSOikFH5OdhlOaYXi/g5N HH3HcsPEKtp1Df3HltRQqPNXAkxSrnxqX8qUuObkKEtNg2cdA/CtskPT/VMCEvfNXEWPHq5o j0/azXp78+aGh7HR9KzWlpEyGNLZ8fFxXo3aZn0NsqPILiL1+19SfkAMTo+UUXmPAFh6AOdj 40rerGGO3bc9XyfzpEJO7HaWKz3NhxACe9OEN0hR/3StmoYbg8XvFrzvPqjNSYi9wYTPAwUb i4L9Pgz3K7wa0KP1WYt5xmBjcAo/DNCyMuxSu8HqMRRtjQKpfSKUwmSw5UhbKHSTOVWgA1vd XqWA0XAXPPDsaSM35dwc5+viIVnNaGkzq8e+2zpipfUaexPxbIQCP1sZn7rUO0SGZZt/o85R daedSvvARnO7co9M2mfEUSRBBUYpklVxukA6cKyxDU16f2GS567il60va+5smFMRcmA9gYy6 GiLId8po0zprwQutM2226FREl15t48SZX7c4G/KXQRse+DiaWCbhUFyYOjX++EbL3H2uXsMi RIPLYLgMlj2kRedmtY5UuEW/aY2qf1SiOaCUouqOX536aGqVoJD1eYIRvTukE+Al5B3JWkeK 1m2M13oqVRxx7oqVveWT9mB+eWZh8qWHjvogRC5xGPtUB4yiPmRN4Af8mGKYazpFbsXoNgH4 A/qm9MCfv70Ejdsed3GPbcfbuSsvPZxOq2yaiAEI+Q8UVLQpSzS3WUJ2UwYpcYW2mgiUTOQK rrLSUQ6wTfsAyxjer6RvJEnsRfQ82a6lvLszQYncqlZlDUl3OJGlgD3zQJQSKgh3x+Fy+6yh 6WqoJHrLeNYXssxpJUzJkyAXbVqzuBjtUJHtDzo2Aii69cG+jdXFKAIIR0sD+aqFT6OTb5H0 OUMI+noMfFi4B2qMvInuIGfv/i4HyJXIvG8/Ode5KsmRBeIZ/LBQuHXLXC82vpXZn2LWcMJI dJ7C6Iyc1oJHkZm3Lk44HHIq0EbmVleJ+O9ZZekF6mDNWLYjFyKps2utJWSQFWvD3DR7PlDi mmRnNnQzO49lN8WTgi5kIncNRlytrFprluy+OsAHhFd4Bnv7G/DeJgp+eXj6iDsuOzqZJapZ Jylu68pUA7v2qDE6V6EAftqwrFTQbnoq7PCCNX1OEWZr+wwNX11XyJVekvSnO92bSmkwj0Nf 7hQaQLQaic0sU7bF8j73FdG3H7w/jIH0oLiWfGBUvBbsmbIrqfdPvpV9tbeTaMiwuHmi0DRc AgffPL7Y3ONSIXeXtTYFmFIAOMpzuMv3eixAxJVIJ5x+E+V0ZgWZJLeNmzS8S/aaAbGCQXlB uZhnyD4Aw+wIs/Ko5YEExrMI67yc/DnOJUNnvVS73a9hgY51ePWu0bXUGN9fPRFDmhx8ay/s cAXYu48GSOp2ehDqSj7KMd3a5BT6c+K7Dn4hNR2cN6WYgjq474tVUk9W2+/FzLGa7gU+Jz3I lF6pGrkQ3OgBk5tZqXjf99anBToCWzffteLoTR1FXOYxOyYK3CY2JsMzeKpo0hzxuBC8f+0D u+nYpkn22DLJGR5iwsYbxpkiPaHsyn4PT1CLoMCf5G7OD3pP7nTcODA5QJND5wX8xPycX4OI y638ZDNGHip3F+3CsPVeNAATCF7VEwpa0/zQLb6y8RgenOytjgRUloRgSeYFLWwOVw7v8KNu KNBayZjhtPp32tTbrja0D4fzo8JwIqMra/cxchifeOcPfOo2vgecbAcjk/jK/lZ5wNPE7+IL w3jNneTLWxsW6a43RfqIXABD3zYoLe9z3YOQ0KoHk6buzdbltBoSOgZc3oU3CV8NvdHihM7/ VrNWQtjhdp5RdBtZK+ZQn43+0HaQ201fIbNbVpC0Kky3jGhbdiuoaA8tCNQUjBMUx2ynSeRd YOTwekj0VfGoyE5O4p/0+JTvDyLKW0RerafMOsPQnkGMoJomWBBXkWL1/07o7ljCR+LNkr1q x1eH5/FV6NbwOJvXK8CtMVPxolyWZpNRsOiLP5jxNyhwzK8wy988JcWqhjdpfbIs7FVrvPDB GwzGVeJv1JXcbkcFkF+cMUaA2fabuD8ICvZ3Nc4r+f9wu53BoQeIa9s1ik1SM5fADoXbTSMG uHDXjhluEgr9eGMNvWS9U42jDe7zfBjk7grw5QkLHaQJLk/SOai2/YPC96VjKZSdtkGWxmWT ZZXKO0wigjHKGpYLwUgXJUjuIw4rQ0LS1f5MXZROQ9Ldm2huaMuEDvqWlWEj2vFJLFsxTbHN 0v4hQcqPU2mMEyFbo7J1obBvRzkUJb7BtfIMFFWZq9ZppSM64cOwhyqWeNpzachFNvf0logW oaJVSsnPse47y+OmW9pP+8uAmgniqm+tLQVa0Egcg/Hx5avb7ZcCDBxLVWgzgSm+tF/K1eGw HzIDvy+oL2irIny2ZZOvzizc9bN79RxRIWH/3N3r7S9aohmsbivhD+se5kKXTiSR8fb92gYP uXKGNu7B9ccU71cWlZqkMZN78xp1a5Fq+H1ns/4ugC71WKdj4NlpQHqaxvlKfkpydwj4glbg s0hRPBMgpRJV8HbpwnFZfX9zXohuJZ85hdhggCkvEXxKMYRkrbnm3RWmXwlDUWlUG8m0dOBK uBc0/raF1DgpFL3FViD8LlND045Hd2/kNUjONum7OwVxgJzTib5+EAdPVYkJRo4T+uRv4Adg hlnuozQY2kv5vk5E+8UgJvxHn4OXdmkd25vhI1qY90OYLD2i6+jRcZVqroljyEV7bI9Ry5MM weQCAJMwM/JkAbKWgN542gpCapTh08U1XZL93T906+CDrTdOKvqmkSZToDNHbizR3nI2ymBI ReXx/mMYf0MiiVRdNVEE+pokRqJjE/mwv8sLVN/hJSTPdO4wGTHxw9T+BfCONBE+bqhTZsjD 133n0ag6H7cT/wl1dLCDJ4zuWHCwPDvCjAD/TTF/OHSrB+ct9gHMNZE9amKG3ATdCT9IhZth VnA5AXRbfFfQx77Aa41O+BOFmMBPp/5rQwusdW0PoMem53MfrcMTXBmLhuy7Br3G02idGfRJ 1qE9GrPMIS+22Pi+ogPRty3mQl5Y7azYzDvzfTs7huaJtvRfNbsySc9VaRmWcTI3+UWs0PF0 6jQkA4HU2lx2Rj0vR8vPtcMjhz0Sc3X810BanxVTh5M02uFGg1jWBs4qtC6F2VICBw7uoIP3 eBMzmPCRRE/d2HetbfYONvsl/Ek1jsi5vs5Zt5JgPzLYjxJKSrggso2JCqLQxLzr7yJ72bQO 9jyIuE5t/RhCNcSYjxvWpvQYYcKKg1w+5qvhxPrn9N685bncWFE0mFIKq0y/UZdFq3+Gj9RB qBrTFw6nl9XfSZxoouP5LAiDrTX+DwAOQPG/5nQtjGvJoGuSLYyxLxlCjh8Ezt9CykIX5VeK /GGwGg2Hw9mMrfHpJOYq/YjVbXq+yeZqj3nOjlRGmo4w/xT8G9sM7538UdwBO7pDGqcJged6 pQkXM4Hsp4bpMCZHE5ovtieDTNl/WoPYH/jCxPZBycjQ2GF3sKz4Pbz7EpgJukqVTMn7OB1N hduSBVgQbj6EAMFpu7iuqf2n04CPtrlWk4xpURpxdd8ntcYsQ2DSfkNmvaEczAXAMh0dWrGD LBD3AkfIijOUrFhb5UPKVvsZ4gaBL9qnw0wu0g7Dl+0NYUD1wfQaBU7RF533HCV+MoGD5yrY hxUQbo/KDAZmwxz14NH9IDNGaWOmIp9jsJA4rmn2iHDWBmKcXbbfiI5x944Ty4hFggB1AUO9 RhxIdOog+MMBlvrbzHJTurMxDThcmen+schvQq2YJzPL4sx1hwuaO1mxeO/j1/udFy60S8G5 5WmogF8hLPk8ixYyNg5ZOAaIGsK7tGz4VDUj/TClZ6MsEjKy/ukGMdZ76MyM1cp//bjER0Ef uVnTQ7bPPPygYMfcoIPSfn7GeyLJ1aJ2fGim+LjeW3DirzUJZt6OsEHHdgILZUkuRNI5Hr1m naKaa3T33IOEVEQF84LjRmRs6uXmbBx3BEwsNXrm13ui2TA2hBojycz6BZgUwSPKYkc9+NZi pHG6OAXAd69UV9TOrrLbPvxkhWUNAHEE52LEXhZXhdx7CFlW4gs0OuwIyCp+iI276JV13KJg 46e8xUt0T3T7NYieetcwg3hfKO4N0Aaie238C1yyHIvIORO1hk4o4RQi0lCHOgz5MGKmMZdN HKV1zrDYakHPBquWdfNxlwnwlFfOeoxHSin56a44Y9s0ObcbAasp0+HDQRqSZ+VD5vSdPzOo DVKQjYeRwTglKVvcmPGIC6/tKaUbIHUkvmoWwPNiyIeOVwEHVnzsD18RdwZPsPHDaciPlNWk +Ag58Mf7e42bwtaZJi0pHlXHptdkc/KlMbPccB2wFPB7qI+N4igrwjIm4yio9EbEFenlVRZA 93AFP3MKzwYi1Eittz4ZCmEtRSTqorujOCRz+HnwBK+ByPNWvkZAP7F7JU6cuP05ZNiRqOBy ZqvL3J+mrZEp4L4p3Dc5gr9VnGo7w35ORhF7EcyfuP+RE1GJQ/wHRZ7Kny+q20qcvx7ReLn3 6z+CgFviGszLD9mNk5UWWNICFnGeJ+76UhFVhyK/voRPOf5MsAy3gLUaog0aUxKiQ14IHX4p VYZ/hkWvsm1g/oyAUWOmlX0+0UZAx9qZ6O4Gkrl+BUFcSW5Akbd+n0pvGOnB1JzgEvIUtASk SDvIRG9ej41yDevrj4ZcHYN6kR7qlMI1Uv4wBakVxRawFTOLMcYOytf+u3N2mF4L7KF5t0B3 OpUbui70T9UuAP/brgSaPR33MvEKXD2k9pYrXtt1Ufo6IL23NaUQIGmEHt8hJ8OhDdX0+9MY QLvDBTqWo6CwAVicjM/UtautDyYyZv3rOmTCQ3OClRfWKyd0WcX/rzeBE/iRAfwjk+TCGSmW 4sa1HNvO6timi2v5BRM1gpf0Z3wnO5j1x6nWnAJQm9v3YtHv4I2aPjxv7XoA+V7SM2TcTSuD V6QRxFQ9hpkJ4oygBoLBXo54Hg1qoNcHzG298NKqXSZ2Y1eNsJubtCMIw99bPbixVrlQ+sbi UntoJVKAjagTeS9oiYx+144P/9BnLrO69ffXp1TBhGNEbk7snKTnXlj45QcZlS6hX1CKomBB zlkKIRriBPOkUKAWXzRrZUwlJzyNbjAIlTQ+D6HCt35H+T0XtaNo+p6jzAdGnLZiIBdBnef6 GzwxVcTCyRjIkQYnmxiZAVdvrEhaA5/3frt4DwWC8T8nVr48fPLRZdJOu3vqY9KjD5zemV4G AkBPnEbXZFPlUuggjdAZ9PFKPz3CqGrRC9FoMqyu3znluPDpgN6fGBW1T1ZumINFMvl2Tn+K itd9vd1p7vRBZ36+W+S8ZV+XcEPcjelTz/xWzm9Q1VR2+kuaC9KpclsEf5zY7E5oUviA7kJi oVbHwJv0Q+dqbYqDUk18fQuyX6UJmOBiIcWsWBHdCX6wBlsewLA4x42/oChSPKXYU2Rb8ykf toBxPHUkE6JtSviYUJwrHIOUehRzlzP5Aa/JBPGFyBNLfOo3nqR6Ixz/FMLo3m6QkpH+1cFw YXIZKVrxTgh5WILqp2UlDN5IbdclVAwL1w7AqrcW3jHCv8LLykTd/z5Hu2NSXS3npBZiPhVV w9TQUmCYcf4BKE6NQJ48thwFWrjh4PzFGnH2K7If7sh+sIPYvbNOLb9yDrEvgWWWxAVvbri5 SBfWO15rItDTVKcKpbcWZ5fDaKwGDdMIzi7IAx/7Yv1rZq0T3OC7kEwgHBju9TmvTCsjer+O q7a0oywIk+2b5574UBAzM213rubmPVZBrpj6Oz7EXpTSlIBa592iGOpTc6xeO7dJOMC3PLed 5Bq3WGE6+hol0I/R554rQm34T5AhmnburKvT7ifns1mgv768uMDCnXxkY5xVYNt1RcorIx5C WLKplaqEjKvdsV9hvmbYlHYKjYKWaDFv846OoW8PXZ4TGpPXhAtIxk096xPTA68xC8wKN0cv 6m8IDWIpLck7wUJBW8lA75o6BIc5/+cN4BXNotLxeU9C9iXf4zNQpJ6HbTtOxi/srFuuXf9+ ybkjIh076xtpVwm3+ZAvZDaKQFlQfvLgFegBd/RujZRTCdbKPHdz8dZFjKVUQJuCg4B7E+aB NaYXemXffuu8/FUpFVyp1xhfY3rcQDmXo7pMZ7mJ+T7lb0W57+q8SXo9lMKE4CnsobnUpe62 j7Hy/1Z7Ri0sENNnT3LRsmtjrdEpwuFFejrZya8vul3nH9Fg9IVXryeC4XYPxEQ/ZXvFHlzv Ye6cjFDcnRE0RU0Ev+VZ95RUsoKm3g9vQ0JAqrEX6icMvFnXelliKrpgPJ/UhhNhyG0nNAKN sJkKD6+904XINOTk/uRMDYDLJq4UUDmciMaF50624naH0/47QNUFTP1lyD2t4DAFN+nkEWzY X0tet+0k1iSVp+uT0SafCxGENoP1Fr9eCHPTjwCFTwE8QqKAm50PMV4wHfEUGEbQhyh+uvOP ijcaEyY2nj2I/rqVV2B4z2ziuycE55OciZbGxDQNJrWr8QXL38wQUjj/iPFZTuv4goF2PbZR Ne6rkuP+0U5kygluirKnhi1+koHEbgyU01/5yyZL8/hJepR16hY1Nm2VnRhxvsV1u6BzY4fQ gaZJ53X6oSmFt4ch3IP8YqE+Fz28wTpwT5tiXwX47SUyU2jUaxWEgQzR58qQl7ZcHkIhA9kC B1thxd6p+D7l0BDeFyGtaPzdeN/3abvGJQ54mZGmn79B980P8dVvALNzPXXJY8W1ca8ZqrQv D9lfTMUDKSa+FWnr2vLXwZJOZAhxiSNdb+eOzVaUs15GHChc9mC0P2wJ3EB3a4N34kMD4sLt +mI6aRpibYHSWHjORMna2z9vG/PYvuOLCtlJss66w93YHQdBXAVaAsh+6IHA8W/1i7Ur3Tve WyEfdbmK2Stv3oLfToJudrwkZKfePNbsSF6ZX/x/u+M2F5Eiiw0SeYl/hlAMifmsg7z36hSp 3Ous5DAhtBaRLHD3SV6LhPdNw5UqSrnjoeCSdkJvuoVkVOCM+/BS0dtC7Dn/mrAJaPjm3dOg xBLe9otJ2qn6I3+I7tGIipXuEM3Fj3AfY97xwPRt/wnaKRnMFnykwuayzzU1MSBYsOIaE3Pq GJXQVxmagq/UDKkAkjDDJdLEj76e3kUiIqmRvZKWUyY1uYxQGGAyTqBOlAPtcPf6FNefJFuU axhDauv3DQxaMLBv2YBFSQI3LAl4CicDBSnx6gFJ5GxMR0mwdjTKCyaI0S9Afp6HuQrmwqil RE6EnJuCi84gyNbmsSejgJ8zz9xjZD5tV/WjqvefQUglgV2aUnH7hxLnF5pU6REplfBArtal QZo2zeOvZZwbwRQKn6HrmeWdIHTQ5OBaFgZxORz7Ahgra3ovj3ucIf7s1Rxw75ah01pTn8B2 9Ij4jXqkpsCbln19vh4vvK7Z2ONFTLVS+KkOcy8Zkj3S8PZuwoy42a1KT9BvVmhtBaVn/QRk jDB5nJ8f1x2S8ANoEZq2driKArADSyw2I34AFcSTJh7ioxNQ5TURkZn4X43fvEl31sQ+UpXe sEc54MEy9ahAsnkbzLJCgqLXKrho94YtMZGd12JK2sdhPtLuLt3VkfngNj0MJOXs75SXIyEI E/GtDxD6skNrTCxmm/yrk8GrTFduJKladdrlM8G8VXts+wQKoPC9PLswuZtmcbHBmtv9kw+n +Wj2MIdy92aBdlbB0wjFfMJpbGzdfy8/2uhjMqYyTgLAVYwGOLoLSYcmXeLo3sah288DBfP4 ZC7iGSmlUwAP/NecWzC1ISD/00JScbkNU4eFhoBW6KW+4eAoYJC5cPHhMa3sgesB6GxYr8oO od7Y87lB+4VWM6N8moJ2WSRN+dIt7H1ycpkilw15/5aH9BBwP+3dzqvYGzwNR4uY+pLJTzAb uJghjmqh2vYlxTn16eL74BT2HtLIgo/Lc4lXvqUG81VeLDwTNwjBDvGF/iIXaBId7Fe9ruAf J+0A2/qoLaMa+Ht+CNrgvXRw/sHsUZbgEQZajmCUz5CdFOC3a8NtFlpw2mi/sq1FJNfSrdu+ Jx8F8P8jCB3ajQgAuhQR88OhoROlbaDiXLriu8z8YTMLWJ2v5Jud1RYc9uGvjCpPe5AnKzvG brDdVRvSxaq4K22lNDAPi0nUoVMQymdAipbCMpsRwA+I1JupFJAbkyQISi5Eb67TcOaSgwTD 241znwBvsLY61iE5cz23b9WQNYuhlGE04vv8id+vrlmQnZ6zAW+/f8Mv4j/lhe0iESvttuE1 ujnlLPwox0dHU6OH5P+gfUPVOKXqFX1aunSQ3RnjaCXbbtAbQl7tL9nYYhoGeskShxdXdGeL T8dMVpPtGaT3I7Lfk0LUq8fa07OKYcFtZmM4a8P+PQbK724HBxgM0wywXAqsDW/Yg9fFdN/N kZ7Ln+4TA5xpQzrV2ghaeUOCJ8yGLKZlJMwSTSOh2zNE6Gz72ZWKu5FysaE6SCPmRe/EwsoK a2ZHGLlTQLV6fk7Fd5lUgn4/xs5U79xQ5lhMbl4doRDW+vElUjfQImywNNHyYaDUX603e6Sn TCXjmeeXNcanJYp54s7DgYHppVDmajCvziDO7V5KlwgK4yvJ81pBN+gd7jC9b03Cm0CcA8n0 7WTNABwV2Cz/kZqDqYOEIMTsDZDM9cVMGr562YxLJ05mDbAfZihpFXX7/7yzVRB8kGz0cEI7 NNpQJC02B72U6eiJIMBLA9WhhsUjBB4m8fCnF4a03Q3y2oMdeeImme8SH2BDOWkdn9Fm/6p6 4gYkngCE/Xc/WXnVUjx6Bmq9L255PDHrLWA+8d3kE/qPeey0oRggEJhpbvBdrh5cxLiqFWdf rhjS0xioytxSmis3hFx55zIB8OJsAs6DODpncrPSupZRGpOBAzAq9LdEGCmY2XojKupHnwxI FAtHVYpVSRuHYwWN9icF+KDtfpOkckW7X8MtmGqz0k+t9b9utHtOtcIGmZEH1n8OYXRqSUmU ehO8Ee8S1JjRDAg/hXsbDznCkxuKiFek27qQtMPOcIL6rm39p2eWekOzKOsa8qM3SymDpfU2 yqmoTwZH7EY1q2vKbk0Ysiy8kJ+yGZ3NCJmBvovs+cpRtsE60JNG23yG+yUKgoWJLGnAFVPp b9W+bZS/FoqJOvbSl7IgMRaImyppYLp77jgnmfYqmo/4m+3KiEzHOuNicoZUQOLe47UWeWUG 0Z779NQjzzbOM/PjXOpdQw+LUbGK0fJ/m9OeeuMu48hf9zeA4LsnleyQK8aok/LdC2WDoU5g EkfFXZyf3DPaPMsrwRVDcxYZ8v6LzFmVJ+50tJPhRmHdfk3M8hhY1U9wmr2tvH7kwjw7/oFd H9+ky4DEHu8Xmp6VGmsO4O+iziLG6QRMGovMwjJcOBV1MsTRdELIOeK02rw7Xs/3uVie8Y4a 9x4YTbfwM9txldoMJSq1IOAe1/8rOgTjIlWkH5QTPb6Dvt6kGRhD2OU+jBZWjFnNVm9VMzYH zRJ8oRt7GNlsD7KzdFB0eiN9sK3zwA98PwFF/FsKJxMU/Up37888LfvSeA46eMwPKwuq9x9D rmgckh4kXIeTt7qiuMYKL3+ehlX2xiP+tw/yMXyORQavgLF+CNc6M+Gxvs6z+jt1pYR1tDuQ PBmVA0cLV29zLyjJQt71Z6B5Uo3gnWlOUSIx9ZO2Tlp9EHpUoZaD5nan6dmKOJzZELz9HvVc fgCTzBDhSrkyS7e4emKtM4PIq5Ts2lhzHCJumAaf2pKaOiArs7TMMRJZweEKrVEThSWTYL1r NfI54lvNhtuTSNWYPgTaud+E4Uaeg0Wpez7/fXHfv8h1jzeK28vDlDIvz9p39fIxTrMsUSj/ JLEvtzfAF6NSt233KkI50lLad6/2NlbmWHKe9TN0w0wQq56acdA4r0c2I6xlA5sS/TN9oyqe d1eIrpizPkXgnyycyGykJkJxrYqBGt+2FvFZegygw4g/an56yoWgEfNv/P7p0q6JMZgtfwCd b0CXiJa4Nt5QfF4uaUElmhRgEL9kqlz82kJMCtT1HpjTXsXzCYtSzmaHZvDNPMI4Uf1dBhSV MmhAZyuXzfDjhzlLXMpWuDNZQkXDTadBa4dgkO41Q3Ix6+PheIEIvkgY4zgn/BQCjJdVrLvB 2k/NmD1bpnGdMYLeX/SEut7mS/9va2ow52tubhbWD5iGY4i/Ef/NHCOKGFDCTEJRpekukfXJ n5zAZBi4FTbZaJQvEP8galVrFhhKEFCs4YKSVt48czhrAh9sTzDnodOrMj2bhrPkHPoTygbq 2XFezIb8ZeEgJ9rZISIqka1o8GGBIMwsPJDpVse+z7ETocFkm8o1ycYyEZnkVny0N5+U6cLO LX+GxDR6yON/CTpEucXUm+EIfwuPzrl7cJHvPN73MXn545h6idApOIpq/YdrFyaBnQTzpo6R yb1rqoR28rFk+rnYyRpgCTdEW3wTKfoiTGTLIlJKsR1ORi8PXFckrjyeK4wZRcRoZdE9/ONE J1rlxWFzaca/mA5j+pg03+Z+LcfHBExTlB9k+VmkbzirHWnrHHZY/g+lbLA5ZPo42XwfSBNz 2AZcxayRtDXkDLLV4TZ5ZIRODBXiasm+JmC5wz/AFOMgsgF03xdWsmcHsdkQAVyl9vy30LI9 fLoLrFZg8qfA4/ViqTk3O9CdUysHt5xvOTWIQIHL4+huMT6Cx1KNxbJQeSqDJWdqQU956Jqo ph2ZZNGf71lm8Sc4OTZmWXPk20HNDzHcoWjZnlJkLUwm0SXctdcSpT3iDcELJ6ktCjUsRodi GsWRQ9jW+F5PMPIcu+s3c7RxXuosPsodOxVQtcNAwHTBJFfFZ4X/KeJthdxf9b7yc5gNR84f t2jfU/ukMQxA97G6e3uBDxDCNTv3+TEyCUYefCwg6WqBXOkxNx6ecWjv7duxr7c5YePquZWb AF58bJF4n/jWo8LdTMPGo9K7kscU+AP3bcC2y8KYfmtDruDs47TJsVAD4QB7/Ae84Gf53XG+ 9/ZAObs6pbkyrMdoNHh1EBr970oiAQ1WS14arGRK41i4QyBs8J6meKZrrQwGd1JsnF+ahBep /BfbyMDcWneVoBGyAfNVVtnToWxplkm61+PqczYua05qzRgCzWiZkCDfw1rde7Wmd70eKiYG fAEsBh4WtFDpBTGYElUA8KrXlaERYxgCGhaJNv9vf9vi/goQWRfAuq2xFl6GvdVe5YT9soPX 8UjWY7Y5JpCSNxE5reZbBpmDqbCqYRFltCQYBaVY6aZzuavW6EwnZ9GqfSiy1H2/XERajMYY 1+loxdJJBkxTd5RWgJAAM2Y5ViYGAqDbw0wQr1KiUB2aiXa+muTfije6Aw1jb9ZUVKQ2IJMA rmOhWn10fm1V6QVEYiZTY0fUHyliS35hqSNX5CuaCvYcr9PEqe3o97KaYlWM/Z3pJuZ4qHfP sBGkkgRA9tQ/8weMBVBWrPvnnjTt33K6aV46fVNwC85oO4sMEe6kGU4783QUbZDpHVtuH+mV M7wnOcOGm0LMyVIy0L5StmM3WFKGpyq3/wl6ilupXRG5/uteEPePshH7nwLvmJM1T0DyRZHb H4Ru7ggSeZZm0oZWmReT2N/EjoJ1f5TvVM/M/5fLzf/NFJqMnLNuKgQKpnGfDnU0MXe4NBc/ lHg5+zbLbMmGA8EFOSc47CtLTg9GsyMIpELhHmAQRpjpvCO98NUL9ZUCF3+KnRoahjacyEzK bExxJmKVRuBAD2kEn5fHAf4LlA0xQJ+W/AUdUZQXB4yagbzedNQRRfxTSXhTh7aostJZ+2wn gfVksjwVKo7uivzfW00gaDRj2BMaoGeuHj2YVwZmmy/7WpjLZ1CFbQ0JYLvtFRHDmWgvH4lC T2aPs0Y6I9m69GqQXZ+Aw+JaobUUcTWGaVwHVkP5XJ5W4N0v56Ua0HqgsEY87h6o70CSD36y TsgDx0kvSnfgPi1nNhCxDxHK6DjukQCAASb8FF33jURB5cob7Rj3fBRQLadYgMHzfkH7RWU4 FF0qErq39a5skCUCisIeTVcE2uK0HLwvSrlNrm6y0Ts1695KXlJeK8X4tV2zv0ylPKwR4yjQ BDAwH0CloMCoANoWX2uneYj9QrwypnihWFxn/XQ8ub8uLWQ63rSp5Wu97NwWI62YDHl7Sl0Z QcBlTuK67gTznD22TgFQ5m8U1f2uQGdf03ut4Xw5CBhSObpfICDMl5CIOQMiNd3QMglW0hRM Qyfe+5mlTIjD3HX0PLd+Qu72VU6bYVXjfNev/XV7984GKtDAvLLzpTEjtcGbNtQH0iORMNCH 3MR7bzMdtk4UIoiy4fuP/EaDbL4rCixLqCvzMraZFzz30Jz65x3I34aeXkXziiSlQJqY6Oer kFFz7T/ffOznzFcPAsl5VQOFGjLKRKL6p+oIYX5nW0I/x71ZbNpMsGegaDAe7kCiurci3IMj M8FPnXInF68JSeMSn8KxV5dwVhPBPLJE1l3dW0CYj596nzVB4dT8gGZDdVi4Jwzs4z6vTDsO pTdJNk8G0woHTqfsC0hPyMjWN/Yi/uOQeML+cP8ljTWd3+XRC6HOAsXXu+qTtOA6gArX4bc3 /ZXTEQM+K0EM0zieqJrAn9r2sTC45zwutbRL6CKDxIfz3bBWIXL3Ga+OCC7v73NvoJ4+s7g6 VcTfGZIFfNxT3vGIih89L9dbAg1/fuJcHPBU4HEK8ryq0+i04mn5T8ybaUb6N9myTuCpMJA6 PktKAi1m+plK69bSP2rcgpo9CsikbQFLGe7eiLtesZfMi43H5oDXbvvcecFuPGXpsOfNvjtm bkh/joQL/pu2z0Ge/jgWBGqsanCJOUfzd+IFRC1TonCiRUsVl7te7oE24YPBipD7Dh2W61hM ducEBT36Vyu4WGrSzbLqjqie48gH/SNndrqx4ERYInCZVqSCReyLgTIJ69kFvqef0lLG6TkO 8Q1KCCIFuhcwXxaLSmf9d1Q4HpxTvYpaoqYgbxYshjE/e/6O3+bNXqU5Hz6caSG+BCHL4ECi rvy+/8SHCETKSTMzazrGe/CxlHW8GVP/mB0wQss0sQJVCQFWLUdFKygz85l5nJD0Xwx7SgH5 bza9Kp9kldbdZrNFgY029+Zj/B5y9gGwmDl3AmDdWZav2dL/vZVvU2DirtS69srAftpcQecy DpA/LH5xE2rs9b9ANj0rmdO5MZFwjrga0bKVA3jNJCzGLr81WKu8r4g+M5+O2Noxuu6+cyqd PCGJgo+GDSarpLQkNoN5m73fedvSYJIE6L9x8jYNXy4gSOLvKTaedTa+UqfhH9w2mOpKBm6I UDLxOZxJRNjuFxQUyIqbK+/w0LU+b2l7/EOuPJPs4tA+8/9GNN0H/DalB/7DcD6RgJHBXntU ozodb29YEk8EpUU0oDKXtkN2IApuQ+gGv9Mm4V784xFfFT2VBUcE/4x7oVS/M/x5DAC/GcO1 bAtVeQvCL1oi5abGrcPYm/4XO87cGLxG976R0z3DQl6eWWYIzIqlBq+CPVilXuuz8ctef52f bUYqgT1n7M3L91Vzmh3+rDE2TvpUePx11DOlTLOe62Nym8AMEN5GCbUnZGXS6xq0M2bmV2JU +Qg5WUJyP7hTjYl/3TBEI21yfPYQpiAxu9hQxbh7kL97bkW0+GfyN9THh16dDmZNCsUm/OW/ aLHIuYi4Ox7AJprcm2lSTv7E0C8t1PnzgqhXYTvoYsJHXgzSYPw+MpI6Kabmsecb8fn/Ux2/ yyS8tMKHzLUJw26mkwTXHzavEd60W1yueqAMbcBephDoImv+4/SUiiA9w5NvEveJhHsMjC37 Z/fh6dwhIZ85Ldvq9O8C1Truco479espWhUPY0JNHVCYnGg8OlObCkBPRI9uYAIl28EwYl4H b+vuXdN8N3cwDuslNIRDmQ0N2a7jofviQEyMVxy1rITuF0JrJMTPMXOUN8JUSQ0rtSAVvdH8 vhdfoePdW8iQcIRP7cMX1wUhfROqUtyfKCe6wZb631Vr+0F8pYk3Lx/XnDdiEr1GEQBVWvh3 lzpNgZGOhvvi+a27p/G7Y4QvF71fNQTGjYsMGjva+lXctKyTLaIGH24Or98U7dHq99Eh7IJ1 BB4SCd+3eGbNkbvXQ/PwDqi6rFXocuO6AftpPKTk/7V7nsY0TQ3EUrgWwn4GajoEAnjl03YT 882fA8XJr2DNUOqF7LwF7ALRfIf01rT4biK0ZRzDXrJPkS3RRb41yHWDkeztG2hhKkeXaoVZ hX3/JZW9DCWqRIsPckc/JPN83pdhWDSRa2xxlS8PH6fmUstax+1x9iE7u+Gs7n4/AscygnNu fgQuv+4tvVTxWDTERraClWwCeqfAVvUlUh7ey26keX4GejgbEJ3RpakvuHkmwzBuqKtuTxGM jEC/QtQnGCvarB7ex1NemfZhbpbGgdUKIwO7jE6+qKojyyaCa8oawcZfFASdeR1OfEw5ES/3 0mYIAdlvlNchMiSYYDciST0xVc64S5QB7ln69bvRlJue7XcLh7GRs6IvqidvmJkuSvC4YhXO fnaDGnLAhiH+ig3TmxNXmdwU/MEVsSjn6YzJ//CXrmVGH5D8sQ7NCyIKrYv6UuhPThCLdDfq bdtWEUgw5Ma2/92zZ2ILwOlFqkIgqBZW41H94N8sa9yWyYn+RjrUF4uMWDVjlIu8QDEiPwHM pw1i2wktBgcfaCOovifhwgwsZt0nfeILeeJwgH9aJSqhyZoELZzKZh1FkGNnrkXuaEAPXqKP 3VKws7fRFCXIBgBOFxsmuIEoAz55bPTY9X/q/zwzQpX0X9sGD9y3RKVH0J3RkTs5WGUezIWQ lqm0ENZmqygyp1Xe2jahrAxe3i8BGDoxx5sR5VTs7IDNUN0w9eQQg+XHUrW788O6bmzVqhOL rs1IoR/yx06dGOb+nT6NWTaPF1EF5i4FUhJHU8GU2BVnU1iR9U3fNiggwFLnhwUlzqVCvfPH HMHFX/Eb1wt969Ff2TZU9FfLqbTlSVwqXcEe8qYC2eJFKBjFPyob3xU3wqtoVnXK8b6PHByP EAEvG65freOwCNhyd45xdS+sLZ6FBKudhQYIG73B/qVmvDkga2/RVGhuboeAmB61YDJFVajw dZp5obeRk7I2DYxhP1tNtaUImOteaxHjIzJ0dJmXrBAgthoB86V8iasNdMff2uXVd2TdQrbq lsAnXKY7CMmBZ5DDiOxAUB58a26qKH5J+KlMTY9mntrJzRaHpPhqyzoCfZa2lB5d2KOWsNuE qtRvVPdoRlGpgeAPt9aDLwNoFRAP0HAkbe4gymz4ToJtnA3bwdNEOeC97GKdBE9xrgnPWTsZ 4qhS7jSfStoBpQNQHQ9ivxYNbDjyz9bG1/OqYS4P3aZtNxO0ZJMYkeCwnY3RwHcm6ZFlj/VH wo+U5EXZ/QA4fowdd3r8CEz4Q7766U1RLp4PBc7UX4Af3mFBmRwcvp/h1yUsSr6M00jXR6i3 jh/NzJn8SapgULOVhJLM1AddofNdy26ylPcs3+nlZZWPPrY4Ql275WZsLKFIYVzLhAg/qy/6 Iw+3qUa11DAyJmt3PaRrtQYRZD3fxmMLwxp7gtRqtYjmKATaSjl8rE7PRnhveuHUlJzeuQPv C+HOKsZiZWCDn8W+zD10t6rsUODcyzNr/5t5T+4UtysSNFGj8f+vJegVL5prA2kYtYUp2R3g EabHL2uKRdfd0EPMB3L7xMlvhQk46Hlhlc0EPAkOPwmCdFnzNbTaHz7iri+s8Zxa9Vf87YD4 /kq/pAgCSkzxGqoE/YhwTX1y0ejZT5maB/G2IudOqPBb/c+KDvVK5mhu6wahfVDWrg6WQoNr HrgSc2M+rc4tRUlItrsDZfLNsSLJrVYkWUAowOgg9vsNtvH+1dINuG9+C/gauy5ao7DTNW1E 5+Esp9JC+eU/WRpJWOIAE14KIpGC2JcmxrzfGX4Pd4v8r8VLx7wOdhKhdpHxNiunlCgvXQih 9AmS48/57gftSXFrvjpSIlNkjCNVZsTPeWKoaybzq6hzwI2ywrN65xM2NliIOIgnIAovU3mR 5NaSKs0J8kQrrFVaI8HY2ibZCB6zFkJytYJnluBNA+cvEKfpA/DqwN+eZZiA7mHpb7V93LqD ubAdL6MESfM+MvQ6yaU6HR4ERg9d1qHrSy9j2jGWadtl1bwDl+dxoZeLtVKCuHRP8lSUwBDU 2HAZKWafcAMrZtkwn5xZO6O7V/dVaFskyegQTmIHJ6/KEwI+N8n5ju5IPoeKuYoztdRjK1z1 SexZS6lFlSB5VtsM/jVSpFQrJEvHHlH4xqMDwcYZdI3VSxoT1fBEi28bKuhiB+sudIDhILLr iE9zl2Y74rgYCwANKABi0dSGj1hB46R48JM+sejwdSFBRKD3f/eN1hOAXr1G7NyN9l3R9sqc BoMuC81CmyV5HJJM5VL+cxvwlHbARgalTCtB1px7SPrKoMPMD11Ro8G6tONu66RY8hRCH4c0 f8ImLKG2r16z443RUX1flhaFvl8pHEdZHeTkDuwKYs9hL5+hejHWGMLiXbfA3tQjf8ZksYBI vf3btNntGeuuDcERwdI81wMJOSBf6kM9WlNTvJK2p/5J1rSYNzwLwsVqoKETLnniw1ZEi8Z3 lg+C+Xq//q8s9nRcuT8VGHIhp/W1X788WB+VJoL9f0RLDBXgxFGrFTJkpHKd8njhU8fY+Yqd lsWn6+ZjFtpgrVz3dw51NSuETKR+46j7uUNfKfPS/qTlCFlDfQ2mnfAfmMgzlllvedDHIxzo dtQS+9g6z1YhOHjdZOoSJJSxMr1cFMOhiPienJRn916gKcQjwwxu/yyX7r24szw9hsMcqmE9 vm85oLUAOvziyKrZttiK3UpIPN/gZ+5r08FMf64grvspyp6ABXB1TOXT63u1aPOmbNCrMQoi ciuI2gpISFiPYRMxy7VN+5EIwogaNe3SDF8AiJGsWy3K+OXSEc2xbVp2aC41Um9bBvw5FCQJ s5+F26mtK/qv9384W4ls3x8TmwNaVhw3ZGUF03GI+CyTfwy/nABQzJKRnLMGpQNyX+PbPc+z T81j/jhDhet8Q2w8+OBUE/MrQmPwYgZsr1TZQSegPMOtynOwJdEyLk7YL1uA7lYhucQ3O90B q62OGriNg4L+GPsCQ9HwzlL8vWQq+lGrHUC3XELvggqkZRmtlHGO1Ok1X/Y89jUwMnN0ivKv 2ZI9B9FUZjBzG0z8QtP1sQuxw4TQjzqVcYualIGjkRUhUZi8ogbhzKM+8u+5Y5z314OanOEK rdrUayPxqz3uWKmdwmB3PN4KknO0wU9vlihTprposcObBKQHbt7MxNVZOBeK5X7Qov+xBXrv tWlN8/4iymKQIS2E2tiamZz2pWFa1MZw6KIl+Abh25fUh2Q0/HDCTrmM9ftDw+fD/dsyUp11 GZY/TGh/6cuQ2XeROMoH62EV0HdOSxv+3OfQ4qk0VbqJLzwTj/F2po0o7HVKSqP064CiWtB7 9Dc9/XBLqERmbMvyJED2q2vwXFiMpcTM6DGTvl9P7soqjyjv4koVGGjeCsF1zr6hRI4r33iq edEzVkiKVYIzKvqtOjvQlFQvSHHAgrs9hF+6mK2d9Na6vCpewoCdwN9+6OUcS/Zt7ZH7zOR0 FBXhkPZWBRWImhoLuI0ERnCaWwd8qDavOfed1Wxo+34x5fq6WP0+sVT9l+jZdDuBOEH76kI1 IoJgzX//AcVqX5+M8PxaXaG47Nkz779FZ5x2KHsMmiLHhn9kAJx8eGFiEWp6w1VijWGuM42Y pBDsepKLYDT5wu5y6ANTLrCadbQsjQvwybpnqW6yzQ12dqTkMHHETZGki92HTf7elmKVd6Dz psvjgXEDo7TY5yYqJ8QB6Lm+nI7JXSQf1KDG1ltTt9qKN+fTpmwZlOYV0DE4+CEL+ge3Q1ay LTHXkfDrXOzlTVoVy4uwj1ClTn0hGtifSqfGVTHpCV1jgpEtWyN7UZNFXMPJjD3VKXKL/PmO 51MwOazmSN6N8IVF4+4kdBnOOyeUoA+HASY7N3XG1TdhmUkcS0m8I1XCNEjnmFGL7xCRwtbd R8Jex1zENTS6SvXYJVqvGS+ndK+PD1626iQOvxPgpi0swXJzxh7h3VsPwXyuwozNHnZ3ey72 7HlS+juBVi8Um1mIqKp6wEcvbBGq3LLpIN3i0pqxIoqGem7nhdFSXfkPCbmUaVYO2W7B4/kw 27ZMryNoUj4PpewJuoIWuzgdv3VswheedcLLpEXUg6yWQ+Y/Gy6zdY3kPgqRYwEqRnR2O+Tg FnBVzudmJJgFLIk9xmJ3oN7GM7xERMqUYdxISNl3V/hD8ALz4x8iE7OuOGU1qHtC+NDPL9J2 v0Yn/wtd0lFdUfdcxJmj9ljfJ3/QUef2UE1O/6fIEs6klIi/mtBObh1gwFIBBtrZYwO0vL2C 3a0gz188q85EbStN1sZyzopdxwk4BW6Fi4PHHN7LQTfjlsAQXzTTJhVJlDmt7VXz/I59o3KM NMs6mkY7MIqb0R7FNcNPJulYC4Yu0wSfk64USFDgsHHkNchvFi2168FrLO68+Q/mGPIFdO2s i/dGTaxyx5+3N0w3HL7aOoobu25KV/B8vOQUccKjo3CB11KflEmLtayDyNiHK1cflUWt3S63 bvayA/27CmUkE6LGrP/nDd5fMSVvJh4oLBLyVfioYFbiHfNc3wyBh+JfhiX5DHbv1VS5YfDG wxyuPZKYNcx0ZCRmnKaI0BqrCbB8gsKhmWhvXzmZjHcaUFGthSPetW0rmG3cVJ8uKy5l1gF5 wWv6I3rZ1BxPr7EQruqNWRHaqPP6yrJwfEQAvlzeYkzPhpc2jIyGrfeawVcvPnfELN5QIU0d JZYzl8nUg3kGDc9JSXctHrWn9CJJlhI6J280g6uQK7pjeLRDFHLvgAXndS4F0FTOZypmb5la IOLEZ4zQCE8d+g5eG32L+l8Wt5VwM1cOCg5DmaeLfbB8CO/PeS4v+oRA+BBxMegu78oBQKyu LpEdJCvGru4fVOeYDReY0rjLYxkurzyJSfts287tG8b7zARSZoGGg0hMh38aggnlNbIFMbos H8X6kddeAI8NNZrnEhTYPAcfr9pS/XnX1J7c/5MNGP+kVQ1ChTklZAYbaYWxK0vWYJdwy0vJ OBUOpwzGSBCAS4mn/9UBSHPnaUGSXnQVBmj5Q9c2CpG9MqdV9mOh0fLPNNPjAErAqxJduL8g nnZ7HxFVvg9xgcASc70/M47vLuc2/Q3v8U3w0xW/QZKGGc1IDkLVQfYFP0aaiPTexOixQ76a 8PH1FOqfzqt9h+S6W3Nl4WkKBmG3mVmHj/5XxSkDOmAXIFsu+WtoLrZlU3/rrNW84A47QYHu UWA9ny7hRtk9u1N2Rj9YMI0+ieh7mcUCtC8a6YZpml7VgLgYUeslWeLSG1Jz4BugiQ/08Nbt f0gigd9nsTXI8GXfT/y/wgVPy+v9AA1hwoHmZnZX9sN8y4DlXgLBrCwOWZiEpc4Aq4MYWxo8 X9eVlemlJ1XsPMDSzDqnsF8yt7g6I4Nn/VDg/QysNBWylwturD2FEGONK+dmbFITd6DnYG65 dCHc3+HxLeJ/xbFM4vexz6A/xCYNWfIMfnwBztcH7l/e+6ovxbH7UcSuhyaiOJXAQZ2n4HXH Pozi53xC78CNwJnCnvO8RoLiabiJyHh8w2ipA8BsoAeXRA4f1GRIVdt1/vLI+vRa+GOEj27w fTr0O7TbK3c0UMnZnNg8ScMp6ob/+u9B0OrMLrORCBP/Eu+VGLF0mfCjm0ygNNDR7cCYG5j8 FfVN3CcmryENGnD5M2UmR9LC+oT9DKSv9jS4p40P2vLfO1oNWwIHitdUFYLbdZ9Mw797KV+4 4yywIHm0zwQBpk0crb+6RXs2rIi7SRI73sZdjSMBHMS18L/OL4Fg48bmXfkXjqYDsfUW7C3x gRyZtUpR4bVjj2Pk5+GnZYOd0F6A6/qzssv0X4aO7C8rqqoRxmr7UKwcsROgFbcPUk8iA+gu jhrK1FC4TYGu33FUgXs4vUdslyreMVUPLLdkxAOsmiBxrylWAdYNCEaFZLSmDTa6fyZa4auE UFpabGUiSTuEfdNpmkGCvZ+1aT3I/jlAwKO5Qt7ofk13RAQKoyIPHXP3+Ky81XuC8JYe8XZt mhLlkI3edWKMfGAen7QXbs5hcqXNHhKmhhK//gkMpk7zIfenP7CSDYqCyaQak5G2Iqb6Hl5u 1A2jcf3wmOojChr+WkrKPq3b49PC37VEgPWNZnMdiJU8G9P0Th8lPMOs2ni0Wx8OlZd2/cx/ OB+dlNaU3D+fpSHH3SuuzF89/X8jOJSsRU2i6ZN/qfbSIOpbyQBXPHoDX8yglcFmrrkV1KGc GBDSZJn3JtX480c5g0ncPg6d+BNKo86Do4tGMm91kwM8KUB6BzBYep44VUWtBIpCOl+MORjz jqxvh4R0lJ2SxvL2xjWiweKJ5LASfrWY3uCKA61Jp9VfUpwpkdHk3Flja7TrjIJEYwA+IuUS c9mrmbB8CaaobuJCuDtxVRSi4xV44cv3yHgxPrNC3B6GTGWwz4Kiy9jdyGPRJ867YEjD6bLp DMAZ/IiAV+y0coIhjaTRF6SVDL3ImaUNSDVMhull1RLwKUBKRBfkQ2+WmTanZ9rNr50/tPiL Z5k09nKTFz10DZx4Ee5/JqZaG828xYzSp+xNLsyIuR9sH6Vf5QPtthgIWxAVFOEpZJlAZnKu dqZ56kR7lBriYE9ydg6Izmyy90AEt1Eo62JzZ5Bc32rgMZ1FtPptlitv3CUwpAWHEqy9U5cK 1U4JMnsuj/B2iCIP3cjjzAu7k0RLD7tknV5MQvdPBZNoBRSH/IuN1AdF13uy6mzZjNsF9DCE G0s6dCsE2OiLLEDm7QSQADoJM25eOuywKLDJwV3TW9tLRR4ac016rlWItVlNnI+rPM+Jww5g FtVqa5HwsOaatrFxB2KOMsl/VTeq8DGqRVm7w0+Gl3SdEGNn4WrcJT5nPqF0EbRF2veLvwYM RRzbMZme0G44mh6k7GPtRz+5i/JvQ6aMAFoFEkb+2ZqLj4XEO2Va5JEANFOHVEy7km5Mk1ER k/6uiGqnSrzlTUtJbGeGpj49wTZ1ybyUreQeNloq+bQcYVXg81t40w1DAA1lvob9Vn9YIRAs yOp1/NUSA/iYEZtQbM+SKCwXKX8KBkFYVkyqgjcl+6H1868xgNr0yTiXKAgeD+27wyLIg/y0 lxMDDOE/M2YHsvD8AcoQJwOJBYsbZD4VY5+WrULN5PVtJfDwHnAyF71/gtkhB8NbFlCKmV2S WDrz2LlRS4nKsr2omCfEtTRmCS7R5cfYRHGCv97rgj+Jedh0ONLS3QEacsiD6qsrMamz/KmT 2sb00lQNz5BU+uOOJdMMt+HWHE+eXQzRK1ZY219hVvmlqWXh+sm3a602c6GMjh12jLewNttk DdsY4qNWTVGfUIlTah/M61QYcupxqiTEErB7oKcCfFyKoNyQOtgetbjUkb7r7IqHowwN5/NN 5xEUi6uiDjMi53pxw4d2mg4HpQDHNelleK04EIFNVt+nWJfbFFiS6IbrNf5SinLyT4DqYmB+ dKzgXgP++uS8POKHzp/QPYiiaic0Be39UtFZNWw/seuQvroEuYF/FKy0QlojZKDPacF9Ogo6 E3uJEpCiZDAJ9z5oVoFxDWo3fOL00WuFawU42W4r2BDUAT5ntRXC6LzCitgsNWLSdvTLivDp 4IEozg5Zfg8gNYuMJtvW7vbzWSx58iGmTBMHwo5h/CSwo3ZF+uHUSHdCgyNcbR/0HAAHWx85 4xrvvNzvOMSB1xUFfoKS4ObkDRko8JaEnz+1NBgZfENgMl9WSZI6Yn9TBHKHmyFFDbvFBRw6 bd5c5LlHp1x5Ioaw/fB6teFeu4pZFdDX/kyLijQUV0LNunr1V0N1bK4ugPDgwmBQTPo7TRs2 swy7TKTxOD1pvtIwQmanp7LD+Kn3v8Xy89FX5VZUlaWXg3VLrKn7ZwZQrsEmZEiOdy0h+aan 1IOviivRPXw3u2vGVOVrKVxTwxsHVEjgt1Ho8ZnwGE9PpxNDozNv+SOy97pcs8YVepFe3fXm hXMDS75OoSmJTjuVmwhS3hxW9z4/4/tIFldzcL9jffQWuXdXML8d+ddXl6GcxCkn/UKbIYCZ dsvcMOZKXr4hx4vQoHPb/aUfplUxEq1u1WcLDc4+547RFdXbMtJEXJlXPj3/sk8jqT6EbGcX lU6Yt4NDn5h0/3ZadjDxCFtUDWAvRkcHCiLe2Ycs3qGJhtJC4EHbV3YWc7et40pg+7F8+E38 cvugkSjlzJXJ5w3/Rv2rdimqw+PJgsPAGYmAdnb86E5OSIpLvuf//TB7oPYX1ah1QCVVqO2A FNVDByN4WBFMjOzklwbosrIbtG4ADR/x10vmEyF44OH7lzLOCQaMuXR2hIAAis1IAM4P90Jr p0tcL5C7APRTtv0G+FmtnIGrEontFxpfxcoAdZoU2p9nE13IG48b/tmKtkp/UWTWV0QYDXcY KKCBIny5q+P7IlsVSri8mdJrBiFohYGUJjZ/x1PjaC8kZJhh7eN42cKVZhKXjSeJqR8D11zS UXAbJC9+MyRkiDrPhcxE1CroOSgD1KYdChCswLTcwmohZ1Z01SNY9EXwWZVKpK1U+KGs0HWw BTUam5xI0WLcRKGdoxqepyn5MleSBQAe6tfWsvzuy4/mFFojwLIbDApD8ZnOVMbEr+xP1liI BRYxKToYH1Nkni91TxbEFVq+rx4D5D3qRqpR+ZXEL6yHXvtr+cMeCUxSDP9IqFY9bNsxqEiu rvZFdIf40jgFaGuk3trv18FHEGJqqjsNiyblz9rI89z9VQoInqQsFvOz1qFu/B/rrVPlvcJ9 XmdmVz6HDkNfC6G9TBZv6Kozrhba6DG3sU0FF7+aVM6UH2BsbTqsjr5wv5bXyJ/bTV33jHEV KtZneZt4dmVWrKiO2l2ueTBr4r6z4FHLXGqvzww5pghCd+DBEEHsVXVy7cZFgAV6jpgnax/u VXtQlQ//X+ljmdq3Y4NXKOVm+0eXdDqKYv2WhH07MP8WvhaBXUrtqWuFbGzchRWptFr5xNtV 3YB8YYdEtUb7QteSKKeffdLHeMh2/goM6l9VLNFhT/6YgZ2jXJHcZPDbETfdfrenLrU7myPp 0bZPblnsWSuZ+dK44v3jUCd9KqJHaRLud+zHScgHG/MdolYQBZpLua+VIU9HwoOyQTOHBn0L u9EUZw/QnNe0L57aBNFMAVEo/lcQtMTkUZMMBOmWUWcGbYq6fwgtPsJf9V2Yi2L1IRal9Pzo HJrkBiE7W0ihojmyO6TEiPsHyfyV5B3qz2N+5ROZ3o8Ddxj+de4RenmEn6fYI4JbeLyKhRpx BxC+AsWUtOyJmabHUKgm9ouM7PTe8Al6Js7VfCY5bPPmXj5yw3PL11Z0uSxS7GQPuXAyYOiW 8FCjsxDwUVyfVYi/FAwCZInNrqxjU73JtoGJr7yuT8KWVVBWH+608u7AbndZOw5R+vSaVoUD PQmN4kQRs6eCzP6AHfMr8R7U5DunNS4eba/7LZUl47TgV6DM0hMmMYNRy0yGwK8ELCt4DOwk YDcv2qS2nWze20VcT6EyRv/JYIY1p2hFlnw6w4grZ9zUPVONBgfVV+To3PRwIXgv13tIaQx/ 0nNL5/HanvuF1aj/hjWgv2XxEdFlO37rL01DGTurdd8Vfg6IjJfXbUfxtxQwNyRhZgaEWCaO qaw78ukx54dRum25jJOwEqVYyaFRF555aazkTqTSShSS1VMdp6U/y0ipnzRqt5yxQzN1VuOZ TlVXE/lsOCjjbvm1XjbDhcvs8c74YxmXLV4/1pVqXdyIUwrjNmtq9v7XSlADJJUBaDZdzunK gGLTwGKw23uPGZ5edyWYPP3IHv5o4BzrCcKeINAEF+daNd3WX1/OcOTO15EXTE3mU7UmSxWg ellGrP48nnk2YoFrGuSwoeYcufBPVpmu30tHSszZrD+Mk/ALnH9cwwraFbiVz0kk1LdHmwoD 0zuKwqiKi5MC/BJzZEICZdNCO/AxNmFFLWdT3Lgp9tQs29Db0Tbjh2K2zDOxkI6Vm2fNlePh fIAzIcMZVhzfp01QuJutDn/Q1HAF0ZA5CTYMGtOe72ZI2fpOVgkExEHeHE4wgJJh2z9V7apC Fyt/vwgS77tAdiHE4pv9EGVNhx4ppAErQTxsOJl6556AqkY6+kDkiySOj/Lh2M18d7LWnouG 7DPPcCtVvPAnPet0W6nHr5u0cNMxsCZtlZ9Aiem+Lm7D8NuNgSH7SH+LWdFlN819ptVMGcJ4 3G5RLwCuWvpOeT6qZkdgucWX4WEKME4VyP3jw16Lj93+7T8u0hwj9yWTkkiqWxFD2sltGO52 pEQtdStisXqidKHblZH8/Mn6A1uZmIGVAq9LHxA4GpNLhHgNO7jFbP+jexGkftT/N6yeD7fS ajc1Kuhm3KlwMggvbM/nMoMnlrYVyB1g2dC9NnMghHtsHbKWCBH6DqESepLtRFUdmBtGAbMh 3acDl4+3WYCxme70OiwyVqkearFNIotYdVZEyycD8rC7qnCNTPJhrXuAfdVjyq8qVd5GpEcr udOzAxqqv/qQvf064s+xNPw/D1t6QVEt/AGEHi0Amv3o2PCJ3vmxagouIQA1dBW7UGmiirBq e80N8yZCGLOorkrpRABEnbZIibP7s7WZOp3I5klI/7QEFDlff/7iYSshuWRxD7YVeooVQDo+ 3iQVWp3nXqknUjUEhUhIyBX+oNtjyKTmNdiiM8rFztrIOxwaSCdEdUjh8Gz6yw9BMw4givaq CgPgcItGK2xFZjDipT15OZP6VNxVYjbza3t2/rW0dxiCc7MjWMI0xWVzrmUkHrXMbhfqIHg0 gbz9WBhnareaTvXcs4aH/R3g3xtfQoCkujNOp2Wv4Ch05SrgN3n9zpw5iqhYM6mFFaSOt+T+ Erby2R6xRcAKMVdStwOYeOxQviL87U4CEdIXW/dDaf+mSfTMl3yb8gVK54XwCPWfukiRpKvS ELqbLCM4CjSS+H5GL3r5vs/wQ9Qk057iZMltjkX6dA4vw0rlbTTYeIPzl2rqyy89VjS0/ImM HlSodlDADZvAdydisQa1Ki8a3oiA0QuHG77KcLTbnaEujEJ5J5viAlczIZQQEONh9QftUt84 BOsTHOJsdBpl7ZLDdiUAogBj27Ztu2PbvrFt27Y7tm3btt2xnTf/8HZzpj6gTi0Kc+eQhcyu eJOJnSGOyqGHmTDfm05f2rvPhsgF+Zo2dZ/mytnY2Ms0YKPpRhmHsV2iGeoyDIFDb1lFx9zC WpTfmprya6U3Jb8lG3X19xb+XF+vP4qrlQrR9wwlUoriugbvBmhxaP/508WcRAaTTp8JUvz0 PxGV45I+WciMTtGC+zSTCjDfaYhhULGwY4c6JY2UwDh+6uABRmPxb0AfV2Oru0jvhKLf+Xh1 VtVWHKdctEvg4yU0UQbtfXPXqcbWnYVPAhFlFflCsweTT/1OUaFvU/vXFqlxgKO2tYKRT0ki dA+0NK+bzduZQNEMxE3uGBKdIhhThQX6gJFIO7bwjWNvJ77LWZctwZWkdd2YXSkSb5TCQ8lc cD5Xp9qGoTge8fUAJEY/Iiiqb/imtnw0MJUXJAfaX5pzr/Mp6Si7ps1dzRl8+ANmSFkD6NXE GBnevKSzZIwXnRm4vK0cDl+HOHpnSVPtZzae6K/xPBF9t0ZrUgAFuVi8RxVKuBdraYqs8YIC T+Rz5rsXl5uxsOqERiGDlJiCXcmPZ4H9WhERUBy5ChyLfj+U99VQHm0XZmvfwlfPC4h6y0Hw HWxdlNjOSixRHapgBbphIvwiUEVpTlJYddD2veeN9+OTMWQfh6hcT+W+f7/UONuvsM7zFUTi dBfv7ZZz/eLRHANPR/GFFNh30evTZJmCA2ITQgG1bdTVZ5+LYK1kllMsVgyND3F176yR2ynb hWmbWZzqjiZRzavt3YybYuEA2vAtGTIppdlvRL4Nb2yKa38bxSRuspnLGNUD3yYzsFF6dJ94 fdQY5dLsh6HYmuLyOC7UmBsqGG6kt/03rVPtRLJ7EO9jhZtYacNoKI2MjST5BoyNPnTkwShq aO7fg1T8RcOF4P5lh7KJ0xtQ2vx1aJugVgGGeW65pRu7KcFoLeQ6rfSmby3s6sdoMlQsPciq crqbl+e0oQql21dYc4KJuUH/iOJVTg9r0ovcwqX9EgXm4srM6mioQxfD4k2qp04jPZws6SqV 5chYDT8aboaI/fv14wI/qfPIsZdf85LuoYaXEF01F9PYRAJ57jmDXjFzgakmeJtd1owkhTnZ u/I2StsDUedlaGnYfBwqiL0eGWBGWS0Vgto4s4akUf2/qCvKQ9dWHiscLj9YDmBla6rfsKxv rvJL8SXLl7hAONz2R08bZxC3Cxcz9lnVfRKtIBZXVoUiDuLzjbGQcGrBoxHTmRek0QTcnfWV RVZl6Ln3bxQjOuGV2gVXnwKp1j+d58RnOYilMThzsFX0f5Sir3THsljlYxYzeYl7UyNgZnuN DzXixiWMvlh0Y26VL7YorwaqgRz9UsJzsnPWlmijMej8y1O3p9a31ELHBJa/fYjyDUTxWwLx DbqJrtAZ13nV2A0FPQ1zrcmXhFsZnGzg1rRW6HBjBSZcdoayHuWdnchwWdV69QgTfzul+ydp chZC5iKe7JR/1cCZWrFXZjbwMXjR9kiW3JfxQ1DEqOPJ7t1WwyZ7pxZFRwPFLj0Zq0px1QfK rfJkojcadvz1+wj0mqDGpc/UcT/Koy4zen+xSfSQJN+5fKP0g6ejeArtSYTu8X2Aq3zC9wSF b1JgeFoxx2vMmEuQNC/EAqn5v9yUrXMOv7a9Qm59l/sCHzcEjUJ7rS5kA4W9XXM7z95s7oBW 6koKvbijHkStbrp1MKf0APbmQd91mE3z74BIOq/DVhO1aXjD7lJMSj2mhzK7TADoOpzWEy5x ZNufvkTJVzybs5OVshUouRqS9kB3oQ5deljBqF5xHFI/4WfMxqmebVY9xMWfCgG8x/bphvgw /nx2UMhum5KzWYmm0WWj/Mq52UOR9IfhY81IMdsHt/PKDnrpNl5R0LDboZ9KRMN3a8GgTZ43 DvFjjgrIKofjnT65TNNtz42P2cvn1rPxwI3oGSv59pbDGOopXj4CvPwPIGirZ947MVOPXPBW mYO4nkQd7+9RULluKv2K8sjD6z+J+lShA6MYr/Q6/GAJHLVAFIWl+PqET3P3Z7Gw/bZm6YLg Ss9KnravurnPiGvtJlnZEk4FJnSwzKvs060UZv4ReGbqIgQH6EUqQFZ+v7B0i9c0LIgUgjDI BAFbI87Cg5S6JjKs7RCw91LA7aIufWargQfscJdxkbxQ36im6I1i+zeg3KyWeqMuM3k2w98C KgwHsEyY/erevJGxTTikeMgKfiF7OYNSkxhy7T5OwDLcu4BXwe2wiONFKAGkfcbjrvSz2LSn w6Lk5RGIbFOMUOUMB3ZPeKok/ELKj9NOiatzMxv/nUszNoWeCaOV8QNmWfeTZrwzJvm0dBpF BWCvRZtt7cNQhPsHQbOVNjcP3X+8t+B4r4eGIKXg881vTJwLUlgIZP6TYjfqbGQqNZeYxYiT ilf5yrxttporWTr7gVXj6FdHWKDgKLyCid7/DCjB5AO93/QNR1remKvQzSNXJPXe4r1asxvN mXeiztLw+//S+JbN5vvG6tcHr8M6+BdGaZ6IQR8wvJ9hmUa7gZ8TNyfh/9zipUNH/2XMsqeb DDrMGIl/g5SNC5v9wLY3G3q4V12npxc7nI7Vzwl0iIPUKZ5FDQ7/yL9H68HcPgiFY3Xt4Adn kXdlXd8LIXvx6uEyAFUkr+i9ACo7oVYdD0GkkTbo11VKSUdOYeSDQGVXiwEVPgIO0ia8JAzs DYwX/7mT6ZFNBa+N6iWIw/FD40Vw+/Uk6hJ5lpgnWB7tCgPYBbewylbXY40/Xu0SNuJDdmCi DCZY9pYqIg8vXRZ7uJ3ReacABRRmtaJOYifJe15/lpNscM96BqmAayczRsQiFu7epRNArde2 K3veqdIsQwrwTs+bapUitK9vZtUkxLVdn8hWxR1LDceCsqnpeV+Q0rYFW8vQzE6nct/oSdil e8nc02YPHzVeVG0cdxVVGrW5DQZeBIRvdXKVRlq6BpoBbwhc0CIcJd4utIYyIgRogP+0JZAP TMY7HTg3SIqd4AZmWgCGYZ1uCbXdhorRp0YspcWe8d0GvyIL3pnvDfx6tSH36tc3AInLAuwP vCLOsvV1rl06lCFRTT4r0lRPIveePbtQXmecx0wb/3Q4DKO7E578NFa82CZ7emWm05em904Q qcReUxJzN5DZrCB2YYPKQUTWkPigoNMRmjjBVIWrejmvs3yD1SwSTiWV+01/c1/3x7kFFsLD 12uB+aoMkKApVWMdE0U7ZjP8cDlvwo5yZWM/4pnNQEiJIY4MLk+wMlQluMvp9ri4JSwRUp51 mjFqVUQgV2L2d923i+cwJ/oRLzqW+vO1ttj9tn3xXsO4PwOCfVpwNtiADyGoOHPrakZpTxM/ 0mApGP3UG4U1oJ0BnGe3aoxpOhKfXSeFqhhsckwMq2djvrAMRWjMv5z3s/uPB4aKkXgpxY0t eDp2liXLyufRk5GBxtrzrLQpgTXqLViKIbkDm6a5Nox3Fkriyu+BeZooJbQukSfY+E32cY3Q LjnrWgBxQjIopIkPEthAy2LhBg5nf2I35ODcU390I3noYdz9b6kndrS8t1kV33+pINNQ7d35 FMnxbKHgWseDdJsxb+1jhayoEq+kF4DqXmg1+0p7jnzVMc4Wiumuhi/PFa+mXpwEa/vuojRj n3k8Y9vmmISNVzAWPbmq4ezk+3BMz5dPgFta//3u3KBlP0tUcNnxgEmKqDuhFab4OAB9uocg 9FX1TzI6Bw1VJ6Z4esDMjMwwKMXeH8hnVUzZM5/vWUa5Df+MaYqFv21OD0iT0V8/Ys0kWnnQ lQ0TJ5hGFP3Pcd9b4rWDQBQPIc27IIwVpre+iXG8ShkZdYrqPW335MnKgxvYBDbJG04TbH7i My3KvmQQ86I7XxKGB/4ov5E41Q4zrxmIhrDv6G6cNVOzwB4pW3F5pKFzDRc/Oja+DYMqmJVK BMFgPLspcbgjCxQTSXiPRUDLqWkCCPBPWakTrAgZl0FnzRHwoWYX0x6/s+Dbqu0iO8fYbxiK lPoxpyPiXsdSoITsILPWt29gyBAq8XDUqMU4x/SSVWTU7GeVGUq/XQS18DyKn3joHDJG5L4F pPEUPJSSGjAanLx9EoL7XC6ijIIn0CPkRA6xen93mR7oSJ8uHTSMUkEx57S9cvxxWEsRmiM9 bFBlFMx+WNPn0JOuoOkwPZgBXV4bBeC9hIiDwMm2PyACDVzrk1D0mmNIWTZH9hm1GgWnaPcP c4k/PGO4kiq5uY7lhVKnS4XNJPzwIy3vIGlZjAzBm8razUNg93gO6gZnT1h7kLvU4frp25h4 WZAHgbm2++YB6LA02l/oNqBgXDe9q+bAwo+oyIKzRU1UBDzHbi1vXmWEKvrXwaxGG5cFBHsb VX9jkU+WOC6ustIsaJBUWA0EKj/sXzCSP+5BKyFQqPWts1Kezwpt8r50romyTiswAUbWqgHV Lo5NpUWgVhSi4q2wUthNz50FOfcWPUBYUD2BwtISUuQ4nqIP44T2B+CBIpu0uMz8z3jh01wJ ln81ZQgQj9++PHlEMlQY4cysgx4T9g+/JK3K6ulI1xc7EtGrX2xLSQshTCdA1sTC4zI0KUTG qhQPkpmZ5xw2+b1KwXEJXCRud8ID6HdTQdakRSQAp/J19vyg+RCqhZ019WyIy3YoZuH1jXkd LIvCtEGT4bNwDFDWYa/BA4lkwM4L+G8RPlw4sTiKtvwUqmA1PgwbfRh8eEaEOKMXK6EMj6PP vk5A9aw6s/JhKBxO893FtZx+x73Y92LbD9HX1+U4cgjKE65eClgboadex75MdUZ3VZWsRb5k eoWFxt0QT/RbrTahC+tyhJ8FFQhkyqou6S3QMFx1mylG43U2tBAdiQ0pts7uDxE0J9LDv38G BjYf1yKz2XnOF+usngzuFH6zqDo8rafZnNGuqLE9ysux4mTmS06yFqbdAQnItmqOjxsaf8rq 5zAGyni4gQvkxKpUa01sOs7jL0JMbSs+NEJr8rEjDcmCmQvxiGlc9qluJB4roKFqBmhQRP4J BSNlxTLjtpyocpjoxqi8idbHGFPnUI4u1cnrVMdcBSOKP90469oR7FclGEGyRg4/bNEo1sWQ ThEa6eLBEH4iUhKnR66eY8n2laEmVHY32CkIJlcOdsODjTu+B5C7mJNn19wZ9RWFTxjtttb3 cNPXzXxfEbt1zOuWZxwMAfF4DrvnZpsQHXEywkjK3Gf7513ucsIjR92snsqhF36oFojUn8/z DP35EpqCXR6ObXD1ab/VemoUS/ol0YA1VZdU9ZnuoKxM6a99eyoZTq5oBRZgQCvlxr0C2dSd k5So42DwbMAKJBlds4gKMhX9MWRFQ9EZnc7lt3tpl8TyTNIg/gc76glXc86RXF44NXkfqZ7p yWq6jZvbEcl0m8++WbLQiXmsPDtow60z6FIPIB28lpC52s+nWEM3u2r7U8GzbePManclvk/H KhHipFLG+LBz1miRSOh+lflkA9mCvY2OelPwwzAXF6L04Q7dPkK5MZ0HvOQ8IZqMS51rwlkc 2YDQqZbkWMw7jNMdUgrYOj76oaNXPhPRuRBMBPrSCyi6QbTSkdkBMgzTK+R+vwUPgK3V8UtD sYfGY7AS7HmgGObEgmubU7x2bCkYRbhyNJc2Q8nr6nOAOX7HGWjdEWg4LXZyb4x2BwSH9oi6 +cAMdtiGexqN+R0qLYolICt7s0p4X5mqcUBoqniNq1If8GIMN91xqzM/JevZS4zOIZpKKsqf 0kezD+OaxSNujY+eh+02pYVrqXZmL6JdoCn7xRehZKGxcAGgdeUDUncDvf+mLXce/kF30tyj LWcxi4GLHGGNyu6O70KECWXFh05sncVekzVaNNtSGsLR7a1R/c6codbaOBvvpJD4Q3nzDsEM 8tecSIma1ikR9ExWyr7miabJzITsFgDDVE/6wZpp7pSo+g6X3vch1tvlSLJDdiuFOU5jyE00 rOTGyoU6N2uhsAQVt9ehppcdjajNEidAf5a+H8bgtKc8aTVF4XjCHGzXWI0I0CeZ+xRB7n/y o9ZsU1vOXQp0958QGoLWEjpBrN06uelnBkwnikZ1E4i9ZGtErZmNiceMcaCy1Xp6tVb/Wpqr xn1xxPFXsJIn5GpKIdMT5qal+w0Ute1dTdwEnLrAmTIOMBbeYRB/h7/kyrJf4zu5K8H+AzK+ L+eMEUfyizSDYDw7odwTJHTi55HJ5N+Jpv2LiflyP/bI8Zy++I7q6CkZ/0pX3IxGoDPiegrb o4yW2MiXQAh1U/Y8lJ+19y23LXrBx40HEq9k21lOxm5Y2ZiXNOl4+oUaN1n8BDINGWoisU6O 1SZpH6Frq7u9Rr5Adg1FIJ7QyHWyEyM4WIAAfodAQjReFA2M4ddWzvQ6iNBPtntJaf5G2cHi Edc9VTqvZo6rl9gK2rC0KzUdujDUAkTzp8dyR0PaiLUUOlv3DrFo2mDRzKDaERCkGZv96T3L 68P+U0dIr9A+tU8QGSukXiW89LcDZ7R5xptdfEZjsB+QmWv/8sUTVBafCHgacfPyY8aWRn/3 +OqxrJC7o4pe+TZHdx66JHEQeQN4o3i6HIV/HnEdfjjaOVgBIsNEkkEueRBE4Hy7wlG3xnNI IKZtmV3yxhRrgR6K3fHeVH/Itl4381XpCE0sVFdqiJ5RspISQlg+BwMuxDCtSo9Y2wgqj2uJ otjxeJP2Thi7O2rfpwh/14gfxoi6ghzEWKYyqpjoZdZifioDh/5kyf6Czz8RKCXkwt2lDvA7 f9ecdojuTXXXGpwOCrVm/WmFx/PfvJFHUeuj5kxHe5IPNM3y8uzmWCGPKb6gVGbXF2lCSuCu Ytfpenev0j2RzGYuDyAw4qh7aYNG+CSpem53512nx/lA/jhIwCqREQLoo1JqzmhjuIpOEVUq mo8momzIoJH8BgQkTQ/97N85m2NtUoSolU1RLmgS27z77UgXazC4E+W21nZyl4PwlKai5mmw udEyehEhjrMjlWJaoaZFueR8Z5zMNcY1qagKBZ/1pRMS/Q3IS8tggzA2lG3p4ogSoccJG/k8 CPQE3VcXwlBdfCxbPyflZlUH7YVhDP5HkYEAcvcFgkg7aFFh0Iy6/QbQPL8R34u2ifPj1gxC 5PLb3sCr+NTwWOKJnBCIyoGQEXFeRaal+9SHKKKsKuH26eLGliPYU84P4GAj7KkL0l2berGn nZCy/kVi4WczvPpu7vZe4+QjHhJ9H6IvhrCmGMqNuQXdGblDFEjpTVAIh83QRImSTU4/j7fj lMI3d4xq/uKRI7MJa+rQMtwMTtREHjOTIyXJUbdNOsOFUn9N4/XCNxov0ZnBq6I4Nu+w193K C9Rf6OqDnn/QYdjlFYRjznnV3+7jEyon/Wga8sHlkZfS7K9M2C6dhjd2RBjPoIn8GNdD96MN l2Tm1aMkrzJsEY7nEqv4Ri+n7eUYAQPemt/qAM5kMgTK/1LKnHfILTj5UhwNxB+SqnVVPofs F2MyHwBH6LM98pJwDQWfS3zziv/ejXdTebfbmu45ZS4ghUjY+GwywtdgZj6R9WKqBbuppPNP d5+/Ni3lSwlfCozOsBY2NjvDDV03Qs9IDwm3RDTQ7aB24L/EDjzdK+/SWiIK/3XtF+VQIbzV YQYjdXgz76rC2DAc7HsGQkVGYvfz/fZA/LHHyhMbTwjBkcRZm8fMZbsF0XP748xjvhE3AqXH EVNsxfeYg4TB3cvoMfEbes1rQ6PMmalFNEGf3oXlJhMLwVtv73Nfvil2nkjpQXYzv3FZhUUJ g0VFK/ZEaGjVgtCFmCuFQsBcRk/H+DJaSdjusBMUArAItKGvFNv6yRqRtHcVDHnqJ7x2iljD KcHssWUjcy67dmBiiLt1zeaGwv3eefZ8tHjPSh07Q5psgdNgrw055BGte3VgOz8RGPvjgvoV wimCJis+xnQ04z2GjJlFGbMTgCE2iPRLOispGCToUy1+Cs3dIv5o9mwohEqfNaWX9idXZ4mk DzsM9YtZIDWplBe9uWYgdQ5Zaby5n57//QceSnhbikMEMoZzorUimzXZw1+rQNpKd2SHFvdM AffWm6QphQryQ96C4JbvNsV1O7bfyL5bAMapp85kSf/3AM2Pyw3eYaRKsPy7isBmAtKZDvEY PA5n+1VIMswJ//ysYYflndsrvQZnT/x3328C9AxnhfTYkia3tMO4FKDu+4408QiWHvqLAvs3 3ZLcEYEFIguKaGHZvavfjJE8YNvWyLIB8tFt57KOQEqhwHAZ7/dle60zWUZk3Lx+jk83GHhK ubFsfh3VtYkzYsi1Y5cAYlLFDzmiRbXakQU1ODdYuUBiEIQtoA7ZLfHotG3z8AIztk2P8G10 4m+vbkIsOq46KXVAou1hmA0+GxqjrLhBSozwn/Ku3QQk3aj+68W/zExn8NbN0PKxncD+sMCt CMmq3m+XJ7ZkRqZWQIEdM0g0wwiH/bRAF2vQjME0xFVGduiU7uwXyUDgHaCnV2bgy4t+PMtb I91/waV08y76IJ4u85I+z85kMxmdfSHctHfW297Tszx/ILnJIUkZe7K7zSunP2LnrV1YLMIs 6CbfknJMrfrZKrTiEs/9Zw4Wi5TPpsNmA6+NV4qIC6Jmk1rfxMOiJBlZUu6GYIv/6SlG0z1c nxAGcq1D2CBbIrjZom3NGdPro2Ty5M2QvHgQ1AXCm25DYkQkXIZTA5PSuRRFa+hORrZJ9UYg /z5n0upoxJ1RJ5yU2fm/LCILkjqAy8iMmOpDZbX4O8Fbq8RUNOOOHY7F2h6+7Pb4KS+xdvtk 8IwcFvEapY8kI7xuhsrM1jsHPbHsHk5yA+3d54071jqErrKVdaIONBQaMb25rK/vafhHb7KP UocYdL4+y/lZQfEc+Oz4xhuizJs9wzTwtHXDlUrGllSynanJULcQB8N6QEavMfcMZ6ZpSXyy nedYUikhBZTCZbpBuqhpT/Ln+q4CjikcccrXJKqTAF9oCVRFnvGxxHAhsqraZXz/4Ji1aOXg O2+4iw/jqUQ/2NyN49Jm0RXplQwE2p04j7mCE+hyg/cXxZiWHhVo4dEKOCF1mPBpZLY6pJHL hKoXY2ivyHsYBr95X/6NHu4AizK30eZvgZbcl+9IihzAnaJuIj50XLj6QKrIRwWuqKwxur/v e+zTizeD78fpfvF5HI74smqQoAZ16gc5DbpFg3rimClj2Ouz1XI5mvGbx91casFqOikClRfg Yvu2yA77M23XjGSORCsem7z4gxo/9k95O0S3i/EbNuNopQO8UjurHoU4LyAVjwIj+6wRC0xu TZY1fqeO8WoT06sp6EKRAQjX++BBjiRzDmT4bp5Pu8jQN6gIcdpkoe0/Ww5zoIEoCRlXZVHn BxlcLGgIBeP/Nj9kPNA13xu+TpFMnle9FxrN+w9pSNZmhNg+ZxNuaGaHNrLgsxUDwoFCFPV3 dRU5gJfZerUfCEZ5TJWfbDdAXMaK0588Ys7SVLaf8pV8dn7ls15gdWoBaGaGmnwFNMykymWE ak0h3dfMC1/Ic+IZWjLrOdQ9MFLMxfrNU2moIBXmiOSnm2ublLTgtUosKfmJ2ummTEh5Mfr4 EKuQeGmM7U2hReyg/d9O2R5xI7Mn2u8s2h92m+BKoNXOxIFkxHFXa1/4UgG+381NLXihv94P AwfmCX9SSZCoskYdbzpLaUbyr1nmCt1SfW0+5ecLlb6XJLdTI9n898AnggMU090jieBmm5n/ 0NNuS6Caz/A7WokWlb7LLXqz7e7gqirqF414UvcTzFsfKd6oCuOwY2zj25cy5YcTa+fwHdq6 pKeKrAej7/HvKH1NHVaQjYFmlPPzbg0jrquTnwuAAgJEfrosz3Zi9jFJB25jXvp001G/NW0t 0E3K4K9AW1cxmJ7H2CFbkQre/YqywV2gfN/XI1SLGkJH8Ze0w8da3MKBo7oL4rSBtZFOWG9j lJhYeX1msRoQZ4mxt6Zt+UCn2ixDSQSKnzCS2JV90OkA9E5xwPwa6B4ZytO64yBTYcM/78v3 ZxB5UaPHcFtf/yrFBaFdSINh8PKHjt996Y741dNN8BFnMbqghvJ9WeYuV0L+QiScZcRv9Xh9 YqeNCFT4VDf+xGNEcbc1HAboxriIuIa8cGeshUG+Pyc1WAYFUPjhGLYl0leiI2ZD64h6aS2x KmQZmxLHt47JKi0lMGgXTuSKyERBWi88pk1dywpNcv5DD+GYhX0styZQoWfRnq+YN5PfYowY Tyi+CrhNTXauVENMeTry0ZNHqXMufZXXS3dG+SGx31TGhEqPEhcQyEL9F00bYO2ma1YIDwwM 6gZ+8rOsmJ4hDJbD+u/TCK9srF38c8TqW1WsRIZBXqRD3buJ4x9d9hpuhW4E3y4ocPsHgPhp +ozV4fLXlXJ2m+4xNvY6ptwQ9sB8+4I31a1wNs1CZmDozwHaSPA7uE3mjHXCgJlVwhxyO07S o/cYd3B3tMW2xbIP1DchY2zy9LzOCwpSbrFGIO464pX6MhRGGUlOLjIOuh5PE8bVJyB7dTl4 /12qV1RCs1XWVJOkbW+zJfpNKJw/aGlGME+G2hd8mP31IroshlbZcGOG1B1r05rO1K81iaCI KkjU/ZzNgcNWzZty22W9N+cfx78jc9snhMp9eZm3nzV+6DMmfTaPicShCATb6xqbj3jarCDG FwdM8GlSJS/RynNztjwwl0SYGc5DGDjprG55O54Z4Ev/r6AGfHUrS5qv1mxn84nzG7733WmB n2h9K0UFn0xsvez6F3LgfNZF8KvjixgPWbdHpzUQSn0MzGQLdC90ApUJbfHJeR+WtdMSrBHq +cdO0tz3YmLeUX2xKWPNid+/MGWk1kBm+mOM1eyyzAXT8o9Lz5ICWO0pJD/tEP/ZG0dRxFBw rGeQj6YSqwEM9pmTDHjwNx2mBNyhcrl0bf17hpY+1in1VIzwrJh9Vabj9kV0AcFG//Oxuv/y kIhfqZkedu8nwnuZ6NddEfplEYITz56s/SZXNGag4imckNhmt6LA0Ipw5OWMYFaO8zV9R8aS Mm9tlIM3FwHQjfVKuKpuhJ3A4BeBefFa7wXV9oRzlDz0yCqpOkKbeCn0bVxJoNKpQwYOktxm xeINcxK8TWKLjZX/LOFOGFwhZ+VxAX//OKGq4JZFiamydyQLU9XxSGj9zlKuMrcaQtm+8BIK 1ns2erW923PMxy3ruPYcgjStfEyDqP+uNZ6ZuwcmUyEZULlcEl8fOT4DhpA9/h328fFn3j6u EKu+rzOkXDZ7GHrwHbzn6daPYKx+37Mv4ImQXnY9HI2BahD29EaZx3OSxKzZMgYOILxSlp+5 wLSU+q1p07mPrwd6MEXiWj36w8A87mrJ5MQ4EcZllw3JbMmGtPpao3I8M4iPo4AMbMGuSwR5 nsxaB0xo5MEQ2OBZNWly5t+aQUYuOvhogIcMCtgMlnCGDrb9Hb+wvQPJIy1sh2t8OuFctUfT 0gfEFfqFnLwQAjWDXbgImHBK/zX9NI2S93JBoTxWDw34SLQCluosxZ10hbzQFZl5iBE7iM3V iKjtjR3NMQ4kIruJrHViuOwS6DKDRkNoBy85/6OHAjuVgp1j6qkjPRfo0peLWzlvtvHdouFL JUXwb+MluFNankwcz0RJUSsjxnx7KkTRgkNHj1zO8a1/h2eliUNYGndjlEYIglLwOR9AZd89 WyjIO5byaRMsBVI2xv8VQX5dDIpeziqUYkNCANsl9lFzQqBrFALhWxe36xeXcT2XzwNLlbAI dqLLn6SmvTn6dVYxGouyD1G+XwtyNnxOCw1pN3CEBRQJhzSE5hYCnoawJJ8Ke2MPdwFOmVyS FpOy2GCZrxBVGNIMD8LcH3PAYxCkvLb7ireEySZ8P9oQyYoQO8+zJ79JQD/XUZI114gB4Sz9 IMXRQxsvvlrgpwC+G7G6h+5QvnwgRzDZ8VQOf312oda6vy+4aRgiwRS7kVm44j1wD6rnB+IN h0aPrH2eDb50M8PuCL28JuCGMye3+gFlYtBcte0sphwOYq7gJ2SadSDqF3ifv3J0G1QjAF3w cyzwne1TZ9XGKqYaPGygBDEyNDNJRRk5NTusqq7bD1IimH+IP7sUypfQuODqbLaB0cLDQMcX VZWimEyT7PLa13A/rZ9ov5FEm5d4khG2lieBJGhHGHBITZN4IYbcDteTXPXn0kn+5Z+1FvOx 3pFv1BiyUsLU3wVepWdslfFm5z5C15MckzP7cOaLUF0UVMg5eXaBetlfoLF1fTXU2UZGq8ZU Gd8utxT4dUeP7rMM6D3taZyUu0KSILUTVr1raEtiNi61dhVEJrUAL7GYE2yPcbGVhO0yrg7T Sq1tLKFXvJKIQdyV+wuld/kAm3ijlpDs3DnCkaNGbdKmpRU9I1JzY8aSKYJAXfuQmZ4m+L39 z4qVp1IKLI6dUGbKPcTskhgVLwFxoXbYVUkfbIF9FWzFPkvrGFX6kS0s2QbLXYikCUoEjEGB h0+DzCdo9HNgQ4Gtqi/kNgq9kXp2oWnz6ehqmpKyRu1NPikZHrP4Pe36Lll5O5CBpbvxx/nF 2XETEcrPPrHMpq+ROo2BR/z+Bx36VReR0Z5kiETED9qVvy3nt7Iih4tTWhe2VXs2kpwdU1nQ XNQrsmXkeRW3LIPF+air+L1+t6+F1k/7r21O0lP1S5njphxkd5gXwUC4rrwdBfyrv9SdhSUu p2Dh9wzfNVI3Rdm13UxJW67nA75Vf/DUJhJGykDaTsV4MZws24ncZMwy2qDZfGQxxcXfla16 lxdJ5XyX+HpW7pLROZCsHUgI8EtMgv50tXs7Gef2PhDQf0R/nSOjzj9lkQRiow9jwAV7xMJJ HtWnR50ar7jrj14wZ1wJIaFrqcrQ/mr5W6GCJW3m6u1ysDPdkZUnxGdXH8V3hOrzZTPvNAkb trl173BqiYSoSiDP18AcO7Er5PMdjd+cRbBQsnAW5B7LyRjcW1aaBC99/insHKmZEBEqkPQ4 ct5mocA33XhTXEbAqMreK57FXmpb8kxfsWH4J29SB0cWkBkxVnbNn9ntRr41amFB6jL9sFYa jIVSVhzJs4nHTmMG8n4RPT2Y3Aks8PnpNzZFrY71dFjBiVellj2OktoMmquDyZoC+sldlYwb T5YB8FP47DiiKJUX0R3D3hifJD9NiYDcys7/1sS8FHh0+/IqQsXAL1r7Pg0AN52R4Btp1gZq MWKT/8FBBVgK7i/NEm8/vKPGDFaBTWQDkkYrCfTMZKhd7mTNFJABCudv4++4gWDbKkVApGZE WHymM8E3dntuj6jhtL/YZEwAHZfJiAGnHVctwpMAGgzUBmBwnu1/oJcwxIQ+8ITfR2RSqjZZ 3W55LFJ4R1285niUDJWvuOG/Bv88rldxRNBs4zCp/7U18iNMWyzUg26XM9jDOiuPJui9GSJU Hewzu3jRgYLVTkDobaOZp7KtxCXhR/Vsq5VW9yBWCc18r/7aczU4jaUawakhP1oyvsenhF6e r7svapTr9xDdXlRFoWro8hvC1lj1noY7drkHFxSr2Z3ShOZGZRhk0UZOKkusZchFL1UmiKPs VsJz/vA30g+NWqA5TglVOgIyZzEB2m4Ze5UORutCW6zXvA7FEhGQJRrRZb22OcnMBfIVWYzS lbtzdl4riyLpsBSv/Ow282WHrLolpOK3yBpAs0qE0sGoUnaC/OwrdJ23h/RnDmoBU63CvMo8 Ej04UzXd18IOoOvDcnFcAm5GTfRdnbxzDAUYF0mP/xJJJ4H7QYP8yYa24OsPdwdvFlGhPB6P CgzAHwhQ+DilJNLy3G3qIRO1cjiGxJCrTR/sqhSr1nOfJVNe4SqnJni6mVTJwdvCk584qe/L +eIt/p7k6krQJjeQwxQkZYhI2Na1DoMhmEBNjWtldlyGl1C2dOWTAJvpGd7kwFKPnxr96eYJ 8vCRYSn7Ifyehml3Ot8g9llTYS/CT1Y7kqO0uIF7EPZCHPWmypDBz+azru6KSFS1DET9LaSb Wk+J5lC3BAcqiQWLMjD3TViaCoyI6c6zcJqZkbzE9BuJ+1wsY5EqB9oMLHIu5iftNAI2Nlam XR8UVdlqITTwSjiqS8QThZZe1LanTY6wkxLvnhgJHEHeF5yDyXugsgl2ju13LWFA0SsFhVeR ti/NHhhFK7kK2NtPGsmQ4AwSPPCOX/4w7mfnvNVdC+1/Wbit5totocMyIz+g36Qx3yX4caTU qbQwpYrDtvDry8tERMyRycMPHdNVzuxCdgp8QgWR/njP2lqkuWEn/2ikfNj1KTQkuyWBEgJd ptvcRaSBKTe8FifDRwvQybt8eNXTlmXYg9RC3qPzdxl6QdbwQGGFBw3k/HnDRKZzgZiuJLvD KQxw9o7M36bInUB1uLH+PCyeZU2RZE+b1CrvIRCvoXOYToniHlgp8bEWbOcUrrP0KJPckvOm M5BEbZLgbYnKQn5NYRv2sr+Ww2w7zZUN2prrF0MGVcnh/zrV93KOKtqVFpuTqhPAde8hJZhD xK1MGZTCZxJdFNApu+MuhsZ/urhLvBisW5Dakj5CUgzsu3RHgOw3kuysUyKPm/d0R8PDMcaX 5nHZAkEto1toPnFEKj0X5YhWrwdzikhpU5drJ7PgVjwqvK6be0V7BrT3r6nWaH6+U+j9SdDA n1zRdS84jC5Cz3cvKzQopCK6hT1xhmY6PBVUkOlMfCIL1OpRHBci5IboD1iiwNowq9+gpcjd DsNWAVDN3zcnT2vn3HOqyv0rb/1xRLnknIHgNoOcHnEDH2p6XadoRtpY9WShQpnZ2yuGpp3O T2a5Rs+Cx/Q8vrXw+UHT5N4OaD3OrNC+PSG+qu8Whmpbu9Vv15vAaRRQjJSPuv77nLwbCoUw W1u77KcLF1QI9fT2+IqJgJClYJrSfsnvIvAodQ/Bj10M69yx2MU+OfQunrzvRFdgxu0709dF dQhGveVOpB3GD71mme8pd/KuglBnbIHdC3lCMj/TZvXMStRNs/GXaMQFbbLAtW+rZscOsHIF n7gaXShQ/+a5BUjzaxv7TKAWUtsOkvs7flm1fAhF6+V+ESMg5vXRmCOU5BK3hSmiAbsEUHqF DU+IffGM//IXB/HtAzJ6u0zrg1EQgEVfd43Od3PQFsd/WulpirrIV9J6mM2ond9ogJ/HfcY6 1MlAtmz6h0NLKGB1gVHvIPkFPXBeQIkYvn57B2VE8WBgMhffTxWve0NdTjDObbVkv36Qy/Ew 2owNJ1Mh2jTcWmYzrIOgR0yqmEBFzPT/BOZ/gv8KAcDG1MjJxd7WyMka5v8AGzVASmVuZHN0 cmVhbQplbmRvYmoKNjIgMCBvYmoKL05JRFJFRitOaW1idXNNb25MLVJlZ3UKZW5kb2JqCjE4 IDAgb2JqIDw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBlIC9UeXBlMQovRW5jb2RpbmcgMTIwIDAg UgovRmlyc3RDaGFyIDM0Ci9MYXN0Q2hhciAxMjUKL1dpZHRocyAxMjIgMCBSCi9CYXNlRm9u dCA2MiAwIFIKL0ZvbnREZXNjcmlwdG9yIDE2IDAgUgo+PiBlbmRvYmoKMTYgMCBvYmogPDwK L0FzY2VudCA2MjUKL0NhcEhlaWdodCA1NTcKL0Rlc2NlbnQgLTE0NwovRm9udE5hbWUgNjIg MCBSCi9JdGFsaWNBbmdsZSAwCi9TdGVtViA0MQovWEhlaWdodCA0MjYKL0ZvbnRCQm94IFst MTIgLTIzNyA2NTAgODExXQovRmxhZ3MgNAovQ2hhclNldCAoL3F1b3RlZGJsL2RvbGxhci9x dW90ZXJpZ2h0L3BhcmVubGVmdC9wYXJlbnJpZ2h0L2FzdGVyaXNrL3BsdXMvY29tbWEvaHlw aGVuL3BlcmlvZC9zbGFzaC96ZXJvL29uZS90d28vdGhyZWUvZm91ci9maXZlL3NpeC9zZXZl bi9laWdodC9uaW5lL2NvbG9uL3NlbWljb2xvbi9sZXNzL2VxdWFsL2dyZWF0ZXIvcXVlc3Rp b24vYXQvQS9CL0MvRC9FL0YvRy9JL0ovTC9NL04vTy9QL1EvUi9TL1QvVS9WL1cvWC9ZL1ov YnJhY2tldGxlZnQvYmFja3NsYXNoL2JyYWNrZXRyaWdodC9hL2IvYy9kL2UvZi9nL2gvaS9q L2svbC9tL24vby9wL3Evci9zL3QvdS92L3cveC95L3ovYnJhY2VsZWZ0L2Jhci9icmFjZXJp Z2h0KQovRm9udEZpbGUgMTcgMCBSCj4+IGVuZG9iagoxMjIgMCBvYmoKWzYwMCAwIDYwMCAw IDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgMCA2MDAgNjAwIDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgMCAwIDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCBdCmVuZG9iagoxNCAwIG9iaiA8PAovTGVuZ3RoMSAxNjQ3Ci9M ZW5ndGgyIDEyNzIwCi9MZW5ndGgzIDUzMgovTGVuZ3RoIDEzNjAwICAgICAKL0ZpbHRlciAv RmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnja7XRlUCTckiXubo1Tjbu7Ng6NN+7QUDiFu1vjro1b 4+7uLo27u0PjDsv3vZl5E293/uzMr42tiKqomyfzZOY9eZPis6Iyg7CxzXeghA3IkYGFkZkX IG9u/d3J4ZuNtbwNjyzDN6Cpk7SjoRXgA+NAoKAQtQcaOprbgMQMHYG8AHWgMUAMaARgZQWw 8PDwIFAARG1s3ezNTc0cAdSq39Rp6Ojo/2n5ywXw3e3fkY9IB3NTEIDy448z0MrG1hoIcvyg +L8OVAYCAY5mQICJuRUQIKqgqCktLwmglpRXBUgCQUD7jyYUnb5bmRsBZM2NgCAHIA3AxMYe YPWPA8DIBmRs/ldrDowfXMIOAEOAgy3QyPwjDOhqBLT9C6IH2ALtrc0dHD7+A8wdAKb2hiDH jztwtAGYg4ysnIz/KuDDbmLzd0G29jYfHtYf2AeZoo2Do4ORvbmtI+Ajq6KYxD/qdDQzdPwr t4P5BwywMfnwNLYxcvqrpb+xD5oP1NHQHOQAcAS6Ov6V6zsQYGzuYGtl6PaR+4PM1t787zKc HMxBpv+sgB5gDzQ1tDe2Ajo4fNB8cP91O//sE/Cfuje0tbVy+zva5m+v/6jB3NEBaGXCiMDC +pHTyPEjt6k5CIHpr3mRBpnYAFiY/2E3drL9d8wZaP/3BVH/NTM0H0UYGtuArNwAxkATBCZ5 G8ePlADq/zuVGf/nRP4fkPh/ROD/EXn/e+L+q0b/6RH/d9/zv1JLOFlZyRtafwzAP/YM4GPR GIIAH7sGIAv4a9lYGdoD/lo45kb/W6ihtbmV238V/K/e6sB/VP1vnP8K/yOFMMj0QyEGFg5G jn+YzR0kzF2BxormjkZmABNDq4/L+9uuCjIG2luZg4AfIv99vx9BzMz/gqmYmRtZgv5Sg+Mf EBBk/K89fOj2dwdMChKqYoqydP/Ftv3bWfFjKhxV3GyBgH/LpC5nY/wfh7+oRERsXAEeDCyc PAAGVi7mj8f48Rx5WNm9/g9p/yZi+edZztDR3twVoM3MyMzMAvj4/ffvP0+6/0IjDjKyMf5r jpQdDUHGH6P3H4a/YCMne/sPxf/eBh+d//v570cABLoCjRCW5m2M+AItUtJ+OlZ9yhoYE9Pu 6WKBHAiyLaxVyc/1rbDp9EkJ2eQpNXipDGKs+8371uw2d2z7uvuVdm+oC8eKqjMJeJ5D6EVG 052LvkbZykW358+kV4j880Q9wuNiVnYDSouTWW1va0zpm17BCwzR71Y2e7iLexpfMudcXyzy O1sUb6PkmmjsNrQ6MIyqvOMTyvjD+zuqvuHBgf7OS+juXQK6zGh4Cj5nKGTKcF+7TAIhLdVS jyhMOdn60t8zqQMcy2DEP9m7Uwofm8/AqIv0UjehPm8sHue18snI7uoC4iHJPOZw4d/kQuDB qs9rOMuKPLLuTvabEwoQbuc9x0Ta1VxodNhBdQN0q8RXjJteJUvUG43sqn9ir8nhzoyZmx0/ mfFeuUPahWGDhEAeIAVGPxdF/kWGlRtVd/6JmyGNCvf7izOr/s+5ASKilomCEor1bnSHermP oSfWKebQBSR54UlbrUPMjWLm2KhV9SmFCa++U3C2cF+D7R2KFenZ1fYuHDlQQHx7PwTDc4JO NJ+Da4EmlXYARNBM6BS1l3ycHlsNt+CkbvBs0I/9lOf+ue9nGWHwp4IlBCTMEOSVgB4hytzj VUc1CrvlwNpYOSLfaqqBd0mYQSjLVi5aMMzN0oQ/PW4SGtx20/adCoCnwMMMR92D1qKgMfgW +81b5jP5+6kfMvymYN5LIWDUIhxcTAi2wxjbxEH4zw8YONqRjxjj+OCCVCSI7G6mwVZmFbLC sBdhU5e2sd/RIGVNeL5mJBOYPb+gs+z4dLueJHfXZN86lC8tdHUmyANpHOQeCi9UpLTzuHR6 UTJZQ0Ud+Ns56Lq1YYa0n78m/RSJHaRFqQh8BkclIJ/E0G/qtjZQI3podS9ce0uUrmxEIg4V EcEyyFoXTsWijttBhXBSmGb/XdufSgvVZVnqvosSvd4PrdnE7hzIQ+gEH+zLoPKtz5MYUZ+U 4Sj7vPIcbyHpnUuLmPhPxRnBSN9N0EvFVtiphi5+hu8Nrt1avv4FcYV/fygLborHiVwmuw7V oHDWvp6Uch001yLpjsLlZjs13jTxHWwKhuZhFtqX3AW4BQlujRJlP6fUvoybtfUa+FzXN4N2 Criy7BsL8lTohm+7g50Epuai431GNboWE9cG4k8DIvw618qWGqsplyGIlWc0vyg7A8+/roTl QXoRY8eiuWgUUUCbIPrFXTsabWAfeI09RPR2r62SYGTe+98Gb+hBIFLdMnvP2jYTGaMGM3A1 Mlq1Yj6sfVeXBg8j7k7H/pmSXyLPxPVGmbwD8uGvuqSmGocajKOxwT3MdhdVW7JAKitcxcGO 33TZ7WVPKCcWLpp40FGg1crWA3BuKHH24sbc9YeQn/xsK9vV2yxrtGDAqf9FV7iof6e3wKj9 KTMEYw7aHjBc4XoTXLhC2cTFgYP5Y9Y25dGf8R5WphwR07Cq+GZkMwWlwzAsm1LOWFOGE1f7 5XNnIBzyTcWwwTnf+BnnWy9xSYdY3b5WX2DMff8AwwPbSto9lng3p+kP7ZnM/DKUCc5eVOfy E4yzr8ItG0ypSiTtLtgt7nltp6jjrZvAfFgLOQn3Toh9CrbHa7OMrIjczuvHGb9R7jDs9w3W JhhqA54DRZG5mCu56KNbZI5Ta1wFEF6pzXaDvW6UUjxjyLWn07Q1v8P7cixO3eHoGVOTXYzY RPkX2k5SqKv0LI7YNVmawE94Cg44MNEyjcvOJfQhn11mqWHmVtVGXj2KzOIaW2pbqiHIm9eS cjjWyeuIYU+SUJ8tuUEDo40oXqGr55L4uLQA3aCGFaC+8RLZ8kpgLv48g5npb7He0txpzW13 GIqp+rDkqy70DnWjEouXABccdTmqlycneXGURW6MudiUELXIXVy8LEYeWlGjr37C7e1s4e4A lZ8PZTwEqjYB5hARo4l/LhiPD9rIV1MP7zu1wKvZD3/mgaB8ZTcsUZWfbNq0Unkz/GlcmkQY 7Q2nPVVJCLMI9X43/xJT1x0siDskSpOqRg6f0LpJzwnViOv3p9hkSOQftju6UGC6UHY2Yt64 40pTchxbpP/CP4gAS7tkXsXBO35a798Nr6HvHwPMJclQT5/ehJHXYD00eOT6w+bKK0b2Ofbr GMU+vDvAKhYuXjVxOei72i8Ow2DpV5wvq5DxqJx1wW591tPtNY17Tn7LeZR6W86yqGtVUvfM DlcKoUTAUpTgOI99vomSqc5CUrb6ZCWxkk46yx5//9bP3ssHKyXWCr1ytIeb8VCLtzNRpLM1 VYHpyvLbvcul6kSBKUxnPYeqimzVyxsrul+Yhpxu1rHYWJUr60iCX3avuiNkLQktYpzFhh8/ mZiFOKHsg3zsNldPoW/9jp1VqCOYB4QzN9v6ZTGUUvbvUFtMooM+BcMmGUVNN7bidPg4WrR0 cScYf5odpvtqI+NdZKvP68Y7FHhYR/mFLaL8Wut9aIuQA/Kanlhn398dZYylqX32J/eJqInw UgqUXWgr4wvJTFFoIzme0G+BjgcfNWgHaNspuUht824bJ1RJuD+XNa9RKpdmqYmyCdI4yZn0 +IQYVp/WcPJihVaWxvjApvNyIlGkjh/oy4WxKxDJMBWVgSE63vx2X+Q5KzZOqh5m0/u8lLeI HFkIr/3w+ZkTny5MGr6o3I8EZDNPPFYRW4f19jidDkTC1A0RjYivPWgStoLxaQ8pZJsgQriv EZLD80vGDKCEpGTK84aH+tHSucehqCYpJiQrBBhI2VFZtxuZH4L6XVQMjpYHS9s4VZEUqc2H sGhhhY5nXTkfWvPPTos089RKgbjn5jRFctcyexj2kssbGfnoqMM+bsvgF+UnzM1ri93WrSDw 89rVN8mA27wVQgOEyvJIw5Y7UmqMxYey+AA6hKM9E1SNiudXqczEM5OHDbWiEs8dDNc1SYbD 0lr6h1uPAzbTAvzYRuFq828RRazK+xlme06h+YO4YhSXMGwwi6z1+9kVHIPgYMg19UyrHdTt vPInpjdDOxkIrr1fgwVnyuEcJoFpGhG/F1lT2SmB0tcasVra0Hb92AzVrIaWbDJBChxdZtly ksefDm1K5eObeEuCm8CiVRxCfjQGGEFCbD1xGRq4DM3Z8tB1U+lXgCscrwaCfI8QHXjJThcf A21C0RXppJ9sinh51qI9vGEu6BT4IEbqPTL6O1Mig9GCwvDDW2M1mFOPMlTaoHAFb+XVrt/z Jy+Sa0ICns5PF5p3ny9SQ7603rESg6zolw0HuDqbulrWDAVcpwnk2OXXXFA8EEGCSLupeRmm dpOggfopZitdxJx++75EyBc5HX+FFiUiyYBLAn3c0PRthmFSrro5fUmSTpHjp3zz2zu6R4Jq VbqJAj6etYyJmzqYYep8rCeSkbQIDk2GbKgWHpWakPGBGCcDiK0pC2kNtZ8g8BmXEHSnd3fe iaebTzJ7jZ0utMENSSBpa7ZPVyAiOZXyHeahytU/sHeRXElfLqHa9jLsmpkhwCWrNx41F2JS U7RByAJ1ZmGjOrJU1NtCsvj7lKXRNlp7IXSS3cmvqqzRZH69W5wjUmNs9MwR5JzHCdF9zcnD /kzNG98nD6oAPxPMKeyrEDuYoePVK9GdSiVJM17TItrjZO6IAGwpClUimy1M+W1IhIH4HWTj D+VEz/6W4MWuG4gmc5V9BYQ7AdqT4Dpgw8tiqNFyt2S9GVcsqQbbbKOzzIaCmlAaljraCMpg HrttpwF6zxNrcTn8gUTWTniTRfGjicFlh6aNMas+8+YvvAF8b737KnEJ/diRp3LqhnQ9Winp B1p3FG7jVMeiZhsT6AUtP33hEPdXzX5IJph03F5xvkuVwGJGtxSwbB+mJXggu0WqJ4VLiByZ vtUYWiEI3FzHhmAWvdGE1csEOXfreox+v6PxThCPdvgGs6tQUlw+rVaTy2jf1U+h7PcEWoEz lXDLy+wqvOdpU+a/N5NyFnPVG1QZ6nfhgCRw15gaCwofrJuvM/BzG+qk/inJ2tbvFRc+FNB0 YGAJOwchidmtNu65Ehz2JTsRojbph2e8ePV+q31UDfyzFuK1VMxCebEJgvbcggzsL0o957GQ 7yMij31dPA/H2rtfJYDAF6WkkHRoRs4vEMQ3CxomF13gL1XApTohXYftUCkqSLV0x32lE9Pu jT+xFsJa6TahPKI52JvVjUZmZrqtj6toiNcYfbwLzCtLxRMXNb8uyLYhA9LZkUP65pFr5lNb kkwFeeK5m0PI5DOTcE72U8oz5TtRDId4CUikykaw3DCjIl5Txz5dZn1T3UsovUPOXG8LDX+L eEoxH0sHw9TcsL5lSODrCaqCncLUDeaEl6UMwEiPpR2vcz/deXQFSfKExPbJJgswhnupQTp3 HR5l0TJuzV/SQqT2tiDIPKh6KqzmZ+efF37lrA3mG06TDtl2Ndw1uXAtxY4W4MJQVyJPHPc0 MVYnmxItml2Qi97vuveAmyWjNw0eJPMbPQCGHbI5zvbMKAyGWAwqKvzsaxb2cXBc9xoSohMw eRreQ5s7zpZmJv9KfNg6xHjGD/kzgEbWzWQln6oTTgKBr3ySDzm+fyBHT+strApUCy48zRGB JDSuZbPu88m1jqNpHHHwQEFol2tgfce4uuULgafJOjChHekTxOuYPeomnvA98b1xjHXE0xVZ IodEm1VM3nhWHXtAVfdh0TMl+bIEgfrGmtJuuRKxxlECqxRmrP6VQc7MTLJF68tilb98ulTG vktmJyZBtx/33VaoynH/5WnMPo4gevM86T4U3Yx8eHy2y3zXS58iQOpw42hE4pjg03hj42MK bcD7d7Ph3d3Ir/avikwr7l/ujBnFnRTWu3deESUGExl8eFcC3cR+De9Ct0zpy3tp3NSQlBjJ ZVINfNcixuZx3fr0XiDin5D7kzH4F/IIY8f2czyegyQBU4PIyeneb2YWxyUICowq97GxyZeQ kaefAUmMg4/OigyKsB5HJThmHd/tQn9yuVXu64mltVBJaI/7oPOnE8Sjm63rnj7iWE+Sqhaa pfrLqMmYZ0gpBdO3gf9e63NW7DSUtcm56iunyTOa3rzf4B95g5rI5nv8rBsfkcmK4Yal7AsP ewGccTSXKhdjf6gjWXzG9SK/Yh1YTLP3vDseOQQagXSenNx/bf4uJf8qXuPnDOikHofOOxMV t5N4I6CASYM92+daxIk/jT64M+4PqG87pV6HiKxIMJamDLp6ZUOXR6U04Id0XpxpOz6N05gj SAVPUX+gQ+5hEBHJlfXHJbTNLfZMUSJf7HrGo8r6UWEVYcmn+7VuoswYdZiZq8p6wYnHM1DC NSU9BmB66ifbr3qGCz69tRmKgg8acrai/iGQo3BSYgfAiwcmkLgoRFT/8VJJaQjTgDQpxMHb WLSVeoLCsT0R6xm8R1faz91LN6EzOjdzv8tPI+ft9RV7vzHOIX8PDWpeHEy9e2UDG/4W0iEi L6A/ncV82tY50EwZmBPM/9PCCwyirvNaK/u5Ui6BzxzXElBcnEThvjud99nRlMWo3/xPOPtl m26smf1a40gxv2LuADWcTEjDZ7cuukIDKyMGpc3PV0vJWBjbWR3MUHGSp3HjehwJMUrneQJe MI2flsoRluAheXZ4uHQNijrkXGP6OWelUPjUwHr17J8phS0NtgcPV/j0kq8dWGRW1cjeDK2O 0Jye0zGvhKMLIrvu7wkVmYNoJ64EbLz2vFK+NeRp21RefMYJOIm2uWpVjGFtpcpfZPYVM7ng hFXd6HSC6rqVZSFxVKZ4/yFIIBq5Y4vrnLsNPygbUDKh0CRbgMHLnHN1fiZ9Dcv//kdZUQZo lqjIiPt7tf4guuiL6c+pL+gFesxHKka/sMgefCRKoQDY7yN+iV/ynp6+e5+yfiZ8tpckGfz5 zFk3QVj+rL9HSsum4LjmNTytkwYvUD3bCXJI2cnQ/f47DUsHNTOxPxMr6UHAC2RDHSNrEdhv abNQE/U2PhZcnwvstTvQUvFldzeAu6fSjDnZW4CPN36tmoF6PN0vRhdZUo2/yJojThFlZNmd D3ghGlmOyIoZLbS9ayhQXa09PsFc4bZTz7KX492DrgaYVoJRfaG/ayqdT6Hv92JwKKzRzYx1 LlAtKwiZoWh6tknTReFy/n6d14KXGm2MsbauQlBbFeIA5YtScUzey6/WeWabTK3ZcRaJnkwj VPKo4gilUYH+5TZ6eMIed9Qt7s6eccQ6GJp4YPILR5hVPtaFmUq7Fq1aZ+L+RZhtvjXxLRmn YsCPUP+XoQ5LBSr9VEtKfFv/M8JrcpHO9ol9ZfZs5DQE4gvliiIVpXfkvB+qqCdd2NOCerUq Y6+9Ehw2GeuD7eCM/rx88jXIRA+LYq2SeCqZUyuqXIG0ReFzc2EiUWPe4WSU8ELNknVRV+PJ 302m3mWyVCng8Iuhu7LsFntXVGVXonKfZrIkEnePbZKIvHltsm62IbNzMVyULl6wGr9HY3rn 2pzAAiJ7EieCgTt5PUSwy1Ysh5FMd9x4JjTtEWsT4eI4Tk1/1jv9xlGg9k3dykVLiZAs1T0U KsQKiJlIX/Xb3Ni0LttryT5ZZPYWRN6AZxxDRz/JxT4yLQuhL9uMH+TZ6IiidEOxgG/VsP+y eJ/9PC3KNrErGhp+NQ1xDzbtyYgv708jqp8/5RnpaacwIGXJJqn04LT3e4gamSkZ/9o/LhWH vdf8zNAWu/IHjBvS5VuV+Z89AAswkdhUiV5BbRQIfz1dBHepE6iPd0kD83sGX+e0JVzSfF0I ed0TVI4A2FsKiBqrtPT/BdjQ+cN4ZieKowEttE0h0U4RwSjWsrGvHnZKMQ7XPzYRi3POTPSH T6+IT7zXZt5rqO9RzYEHOUjA36XUVGM+Cl3Ne8Yfo1plLchyJ+C09couKWSNfh8Y8MDY0yPs aPySzkrGmVuV9UAy8Y4E1yReGvdnAD6GZnJOIftA6wst5cNMw/rZ3AhkK5ne20v0Yb3PXQ1I 0+K9DKyd/O0l6FcWH2n0YXDgkOFbRA87YmkR09H09VqEoapXSp2G2ahxxIl9oCX/rCVzPhXD GEN2eeG0lD28T6qP2iOuC0RWrxk+fExKJ/9xu6m2uzrc59eXq2UL9DmErPG6fJPP599wCRto 8y3ifKytr1q4cND6DHS5C9fCHk7OkVRaFn3zwu+F5Ig1LeexHo17Nq1o1guuwnvxKCzcht5Z P5M0ew7YBP96sJP5Ej9Yqp/bdNZ4cM2QtMEMDSoxzseATJY0/85pOpQGgYNI8HVmHXVGqzB3 REYVaeK4lvI2V4sq0XNiuERRl/D8wFinCE48lL5VzahSPO/ri1iDW+v8fb7ifZ7Bq5AC9TXv MEy8Vk9nbLSpSP0VWAWdnxB2ggBOL5zkjZe8KfWDoLb6SdGOom0PYchsSIyRSTvbLhvzAmP0 06AghkLWDt77RK6l0gIUTJAAieG3L4ntZ7jB3sM0fc0heS4W7OYOPh1M48y+UoTOvlgKa8HU LXL+jfUwMDvsX6sK4V4MntlOu2pvuGZ9OmO/Cxe+vyAcxtMaKzna4Zg3PBngbpISBIpMyKPM Y5az9cscJZPH6lQ/2Ws1sp29Ysg/+b2hyJhhMLoRw9EXrsnqgvGnjv0SaMMhwha86CINeoKE tWE6d+3FbhQU7R58GZyQyvYCNMta+2xR9WAHzVtZuK/MH9sZrWF+L/rt/qkbRrbJsL2Haikf A+koz+xuQ+bc7RaKrrC7DZajYEr6d7ZhpoB9LMV659PzVeja/g/ch09PUX64JVon6k04Fu43 kxkjOuPZYHo8O+g2h8WGzuUvg8D6TuoO9eOIOgEnoacEziNx/ZBMWwpw6FZ4tVkRh4xHmGGP jh/l1KmNMlX0W7E5PlFQgTDsI0JevKXSNnZ0TgpDqFrLsN3RVd+nrgrWKNoUld+99Tq3rkpo ZMHsQvDeVT5TopV7bq4C3t1zrUDMTrJ9NpKgybNmzty4+H408CJEQ1LJZc+60qU6NA6nhq2Z KFK/+ffIzJjTWbDa6IWbTd6pqPxleTAy26JezXQGVKxLa3G9jHrGzdN1xQGprNkXt7B13DgO qmVczoOFjH26UQ9PTt1nLkmEryW3WhyKs6XdAb+4KYh3O3rYkrOZlbe67uYozMqbKmFGVVYR t77ezTpK8MZy1EVewmSnyovBKvnnXGtOj5qwhIlphV35hSZPet3W2bM3Gji/HhAYBZalqLNv Br4JhIV06dRm/fBLwAd6Y333ayjh/JxbBpmKSVcpVMzJsjExjCQZJsfl9L3XtG4ie9kKNauY DqExNJPkUMBzIvpCYK1lU9vLj+HsxzFa0ZWjsexoDkN5iuomav4VkIiX3rgv6s+XsVuBNGsc Yff4g8PKT5IV8keCgaBJ8SPpbX20Kx8j8J966saBeYx1DZiJQJbpmqJK9SE/ZfldrsMxW22a xUuu/cMpQ4RTekhR7IazT+uv4ZWbMWwFOiW/3R6ZCtbuE6hrl3J60/DvYpyrDdc1TC4JgjCK 4p5WbxNCPea7ML99/4xCItXJHvXyVErjSVqV1bH3PAsm3imKD15O8dD+48EoRtbP8aubyhh6 KRlz74yMD+4KvVtfsB55om+jnZjwbRmb143P61cHtvGEjIHdARx04MtPjq1ZH2za24ARm7Jr 8SlGDexxcVRunxYiDTH1ajX9TUbK83SOV6gtuideRNzDTi3ylGnVXBOsTMZS60blyI3fCWJA g3hUE17H2xnLBXLfDclPwttmfDhPmLkURjOm7Mg8eK4ebpFzKSOXlAdRqhQmUurOhcOfj811 b0UTxdUmVBIVVRk+KdWntrxQkV5Uy0Km1PYi59YoPY9IEeUK6Knl0o6poPmL5dc2WgAkM0wu V1Z8sHTMkuGsDbG+jF0FhfK3FEllY+DbrWBDWlZm7yLtnJaM5s1lu9boyWRm10QfT4YehqOe MnjjCVbQP1yR7doO3JVdOp136zWPyrJ2LqzvniV9i68lMTAiVQT3o0yQRUfmcROLM760mI8s FUtvpp3jG2IHFfA0WcEd1ggRpNLpYOCdqChIpRnWyzhhJFTqMSEGp+q3DtJaPPL4H7pmhetz PTA4HlTSsGEkQhzfKafQazgakX+9ozvWI7vl+GL80v26UKqh5lntbV0Soc2YviIS8EhcX6QI 0MRv+RG2PGJvgNcvLnAZkOs+2i0wvvpz2Pg0YutIXEyZuhVsg5K791cpAaVYv6D6bEqhui3u ITYsxMAlJ2THce2b50ExBiNPxUJOQofo2PBo10LSY4YMl+sehONdWhN+C/EpgfSezuf1AKhb ucEKh8FxALyn2tjMPYfGz3VbknmRO3xlzhRfgWdaAClIg/GddxI5yRDzLZPQlZC/w1gLlY6D n4feyxGG9A4ar+uYcmWccvqUqIboqL2ryzmUHT/q8yWejP9b2LRN43kqGzp0jISCzqwCX+J4 rJoyUzyVZ8zsRj4FG0sr/7jVz+D+9iEpFWvq33tyI9PSvvQktPaqq+Ujfc6fp9WtE1IilVT0 77vfxEqoGOjFEAU/cz8cgIi0z08k9828LOl+FPeu9IdXGAW2aPWd3E+jRabaiUOaNR5b0TuM VLrk9laWjjZDniYo/5yPEMQYa9XncUUzNhJcFX60uSzYhWIdhV+d0KG21quS1/JKZLQDBYbu /hipH5xcqjQvytp7ONcZ/cqo4lAmYesWfLhvf/NDldz3fWcOdHkK/gJqF6NdP8mEiy2g03bT 33qOugFzXSlN7BjO+JR1SjqtUXw/AcMSkE0VFrkn6LVLy+PtX33k9vxywDK+vLWE5SgVwUKr ScjvZaOwutvCHRS+eKYfoHgSvfgWl8d/V5yZ9cRQh86PUZpuaAMr4twXCF+wlY3CZwH7xVd0 9Gkpr2XtxWx1wnQH4ltB4CJ4PApBi/Ydfp8UB65jCRme1/b6GEH1udxUCeTGUNlQ5+TLiNPN Syh+ZOSbqFqpPhP3AmqhcvIhhs/MrNfoxO3FDnGR/OHN0pJdJVUlrvEk7kXD59d3uW/puaJW iDEOzWPP2JStcl7GPFWqB7N4rCAIuuLxq8dTjkS+P472Vx5dU+hShU0c81ZuD1NJ3sg8Khkk /hs+Sm45V0ZJEuL8n8s7lsFxk+Ao5W5Nj8h10EqMB5WL/QsLI71bBtzOOzP59gGMoS7OiV+f zsWziBz9FmrU14VgDNc8Z2ouS/aolM9jPQlC01XFCRiRvfe7IEFS2DGutjdPQSJit2ENtdjr 9kGX3YOAFTercHuzi71zS6QuV/wzTMWOs9yg0ZEk+igYdQEpinbcREdsoejN3YuVIm3Iepyn LyFhsVWiZeQ24NKPiY7EcCO6N+imRVGSCQyeQhBhpaXcv2I1p6NOpKzZjzvQvtfwUkgpSmlw g935ZraePKSzF6Zba+1tiNYX80V4FUzZGPdOBE57W8lNFix6H8m7CqTxMiUPMVOs2VMUTK9z U/NURLimGvHcz1hXbhn5SyWt0rsrGniFsbW4bpDfs5v5uScLN2/Ziqv3G/Y2PD9D3MSVLc4P UMjPTtvSxsrz+aA5sFEU3cOfztL2AVZ+B+5ABVXPKDTIgFESEpbvRaReInKKvR+nb+hd2A2G R/IUL2DST4qaUI1KSt/9uRYupu2nF2wUz36DCNFpjklZODwVkMxpFNnz4/iMx/6DJ1SlJ5qp of3uzeU6KM3LOCX7T6+q0BYvNTxo2q2mhfr9N1Gx1xJPhyhVAhDt7tCbT87pCH9QUovJK1Jr XPNgIayJfQmph8S7zdHL4hg/w327jGEskaz5XdgW8snnmfNyKDqpMuYYFYRdoRqCpMB3w6BF 3tKfa2X++8a/ELHHpBswf/TyVrJi9D4LHo4gXD5V9aWjqyHOwKRqP5Pi5gaWwlSpCuFb+yV0 kBtofchQen4I020RfAZs6ydNwK5eH2YduvlVpJSZqzb340LP+9NW+ZoEJsy3moGWrhORK5fj u7z0bRceEnGYXw60j74FHomRGYJcGm0YoO1G9XlF1FGCqXBe43daSpVjUjKRZz4tpG/kxELR fvq/PWG4b9lYpU5D7Er9Lid+r4WEsNYPvRa7kDFaHAiusB7TPotIQgIssPdE3PlBofeKBWu4 8JqqjioxHhmOW73DtHex0INt0JHe1xOEMsMxkhg9hJxBX0BnjSlyUqKwz7BjQZm1yRoP7wgQ nO1CkiW8o02/4T9vy+skekDMyUTNe4ggXId1i/ZwJt8Ra/ohLNY77E5aLJUmd6cqRu8VIVkH 4t4gibOKMQu4SFvIyFGcmL68Ml8i2UARRbi5rsRh1R/0zj61kE175Wc/NLGoDBYJqXo3gCIU JpdsALrtuiWqC92eizAYzUElBE2FfGxXmO3WO6Gahv0KvupvEDWkkrZ44/MY/lLq6xA32z0h 6gnIrwMKvTJU6mi8PD4V3sFXw5KyPvwnvuPemcPbySGcFMpLQLfoOxoPqCrJgW92/aKNG0B+ 6sdkao0DLh6pZUUmlJP6/rE/X/IrSRBNITIOUWKXKYqtnvu/SJxVvfD8+eY/8z3/KL/HNYFw B/3Uo5ITsRa/0hvKS5+xKQXVx0r/vmDP0MWx0Hx5683xWc8lhduyoe0HThOJBdEOQ5bawFX8 18kBLrC6byRiz0c5m2Kq5tyhyFXxPR5jLBNp05FhR1HU/qJZQpRvmV0MDPzapi8+PkQ9drzt W7dhyOPIh7yho8mDdFH2DTpeXsXfEEfl2cvwv0bzsuQcBoulvqF8QoB9+Lz4Cx0EGUcxIz+f UFHy012aDAargC4W0krBQOKyd+cFOwKMeG6Hq4J4jeZRqN85C8WJ76dEv6qeyGokO5VGKCxd LhPiNwravDimemGoU9tYan3sXXj/OdN1RQIsTmp2fOIHcTds741IzLoiTYn7sgNbsW+2FRyX a0kpXoOJzz2GMEh3r7vDMU8CbLFp94i/68hCo25l9nQMhvKDe8umrRPajrb/2Ej3Fh8c1OyQ IV0AHdukv5oGdmz18JLqR4SQakIiMaAxyBQKURNhcTijKh7qV67ctQa8frOCai61TBSthWh2 04ujikBA0+c5wLULxVAUC4pAwGm/j09JWpsDss4V3FMYE4GKf2HVuUHDW3M+37k5/YwDU+sL 90Cv5Sc/JU7XGCgj34yRcS+HCODSZiLRAEvqFCq9rDOGvfqEL0BS447jVYF8tPDN+cpEY/O7 qtrY0yws92B92F3E22hmVtQZB/Gaz5ffy5Vhw9t6pS2ZtJfYe6kKZBintoS0L9/unE7rVOfO +uh1nYf5T+uyfJPcktEOBzavyDELvNjxOfolwdp3NhRYXZ7fVqyJlcmJOXnn+5+9BwrL5BGF 0BDtH09sMslJVXNr71FH60cx8BA4OZHaujIKWyTFpX/86Xj9bX72O5WPq0JDLBGgIcy4xHuz 5yFlwhzGlC+CDnfwbjWl90qmDS4Z3Hb12uTKG3VCtX7vd2QmOG5lUVpDt3Cu0yr+SMcZvjwK c3G4qMln4Y1ERtr5Y1BXhcHoz6ZEt7C+Al6Dn2luq6WiFe8IxSatcAuO4KUZR+cCD7y1WlpH m3lnjNOdvr8vkUvjIdbU7qGthX1BetmbUdMgxcIkUx+dlWaI4dXoIwATTcJmAaeIeh1KfvbA eju9bHaN7aHVhxQqmtTuorukKbUL3OpTeqYUkoSC/gNnt7M5aFi3jZ37IJJyga0u7doaRUKz FfKIauL24HMl63TgDEwrOABTGfMI9907h7/ypMWJV4ZlF/ER5IaoWH/fKj/9+s6DzENERzX4 xwMvXk8Sc1zxQazYF0uZ9QH4Bz2rOrwz3ejEfw+HYRBpjr4oWKThpuOeACf0LtvrexL1AY+F d/Ni+ZBGyCp0Roef4flkNaaZO1JS37bC0hcF/G93Ayz6tsnuSsPclpV0XC4I3MsPdFW9L+9N hcuTRntEY9ArW163ZGZC8s0N0dM6Lwedoe2NpTJ0IgS/esl1SrSr4TZVPu9SrZ0+bmJd8da6 1heajhjq9s+GXuCS8sJHrsO6MRtirZo7mYKrNXsYiH1OGHnRiIjmjBPuoaXW8pp6ms3HpKQ4 kJFu3k7N7ibXif0WhfhGI2Aqvr6PwtbcK237sWwbrqkwk0bTqJhhGWFmnXVJwCdNB1S1T2bQ f3VAZLuPhNs9yAhN4IbzBQgglMwzTHYzjFkX6bw1K4jiPLLNjUUWQ4ml+zhDBU1L4E38WvPt PkJHR6eWiRAaHJ7W7EniWkMl6TSK/UmhRoVVVYXVh6CAEb48L+zBv2i+j7lwqKGfW4+6n5gZ ZgGUitokY98bdTp5yqwN79LbaX1Rsl41CJpgCKr+beMr7W66kHOPn933wjNN5E6vQ+nOtyMT hQ9P/Msf6pHj5JW1kZjznprDNwrMJVjraF5XwpNzbCq22uJxUwzGSPmpfCOWUTDWt1jJ74lT M4TRjuDPDfXF0lnfCj+Oze/kCXbDdEhzydc5QiJslbl2UaS6XP5jOLGKKJR7MOl5vm3u3Eji 8KWIUrv4cfgk9apZS4n7oU0V8DgtJsEV6iUh8+YnIgSJsvO52am4wnJ2itwYlYFy9FykypPc AIGLui15761xsEnxJ34URx9C+MqA6eNoy7gym1ag1YW4852QGKTyUPQII6Urz0SJB4iCQtWz EW36e/UpGKQxpyFqq17V6WZKPFhIIzIGGl3Og+jlsLvDtXxo0bYssDMfWkbk9rvDidCwQ42k 4QLsFat+2SUTzq+OVOiftQE7TrkbN7qEghr5wCLdJ0+0uplTuBy6qz9Bn3OcTwejk+ilcHMN pCu3Yaaa49X11zgCjskuvz0iOfgPdeZqszQjfn3gdJBy542BYX+oKM6RVGzPWem6rLE6wG6h 0etQo5WA4dTLXe4SYOJP7iJuRUduZUUe3GQXMnsz1TPayfIKYdbOTQLAEUbvt5Bx8aKhBUKm 4FJviI1/etioHJvcj1kobYWdiZy8vzTvRjgkIyrhhRAWiy/j7RoppIgomFsd+QnDbk6JBFJt vmWVpfjdU5JYeIxDiOV8rJ0zGJngmlWLcaxhqAwHG1nuhqylPj3c7Xm7baAztCqxI8XwB1+w O2CYHjcDIRtLii8PFh3K43DgMqDxvBQ3/gfigCjsa18QaSjHIEXYvrMBQyxPmcd4s9plYxQB iNCMLj6LfdDnU0nZVD9OJibCl55QV9EbhcUT9y9LdT2/MX5HbJG6t9guP4aEvVFM7MX+4b+5 aWhEIInbfpn0+hxOyMUh3gbejKJuq7+m3FA8JEzrOp0JSy1U67xnXO0AlQQYM2GBgyuHT7+t 0tabDfo1iZtnjDQXaA/+fu6fGWE23ZW/DCINEaDBN+UkiaU0Sz/sC4tEa3NalaAyJKVhVH8o mZ+ZwwiMUM4tgMOt32jn9s7bCT9jRga/crS4m4vAbpgdGBIAuZRnAUwbI9AOCY+xzx2wSVUL kUTQ2ZmhSZyEo3OYUszqP0spz5j3PBJl2su2zhWLfCoccd1oXZs1AZcRNq92INARcPtkLKi2 eM6fggHOKhJD/S0f+jATfsOkGer0pMmMkYGRl7t/VPa1XNONYow35/AZY7yDOVQAmARLSmWj S5x8+aN0RZXJrg9hOEbDNIWl87NZpX91xB/ltEQItk6+93ZN9K/OCOH5b9/XVKdtaUortF/a Em0L07O+k9XbymGvF6CSb8mUDkEtVGRBq7sCRTNQrYeDuJGoSw1BX5MlVBy5I85+dZDKglTM Q9akIqqUklBRarJCktMuU0TvTH3pKBY0ofuf3b3Z90mMXQ3TJHr0xDoQXNYjADR6+XY0YtLu cVzRZbkT8Nh1v/w6d2fwAsUiRrodeGOcE00cGSK8ds2lfp571+SqVjuXfiehcMNzMizXtJml 4b0nciZ7xwyvmHZUQ0lTlKjPdOrAOz4272S3m9RTS6Ncds78mnRuBhaGmehP/Z6QQEroFB6S UcWBuoG7iYaRPU8AJ0MI7kVdsEEPcyfo8+eI4hsSpyrhGZuuqPV4WcAnaujKtDpiWGHi2gpo LsIcLr11572go33jzC5ew9B37QuCHLPQeVep1h4H7aVr/JPJnkvaOlTeskiyE7fRjAl7sV7z /MH9Q29fVlcQVLWYAHZAkyy2WYQhUGPtEp7cCLnagQEIW4zLz5iY9cgiT8XCaElSWMtVR3Dv /3nJd3pATbx1JYZQBu6F7s59EdsNOHImt27uKBpX/D3vOiAJJig9hht+6iXW3y+RT3nBVEYX i/kBGhEYP6toSN9cC6YgEqFob1JCGQg1516uYIJ6i+dhjx+ci8Fh2gfCnjmMxSrSDBVUL4o2 K5quax4wVGqCS8yuIf8hBXSpaCttxI9MvEzMoGrHwRQvTXt0yV57zWoo7HTndbsg0vEE68KF Xqn8FWmOEXF0AVzfFcSiUMzeN7+reoJK2PJ2auvI5uezmImbLvz5BgrrE+is9X3wk3qI2AvY Xm3gdOe9rSrVmk5Z2u2zc8RcFHOx1BwfmRCHHcPQy0tG8vGjv/5xeLaXgs68/wMZ7+5LothN VcDaoXONftaFxzcrARL3Hyr+pcmZzTlg81wmzaAE0RJbcS6xMe5C2DSERdQrplAZM2VUplRV txSLfFe8s3GXR5/X4nJrNJX9GAx89pFTWky6zjR4Jb7TwBegWyYPzhEil1LuZB701SXsWL93 Y0isOxVLk9IjyPfHWyYbGBndDr9FQtm3KW/BqqKSG5fg3AmC9inWoojquXFO9EAVAvr6PvhH wVnHXLySIEOF0i9+ZjrXYSNnGcUMSnX8pna2+o/N6wBLdpaTg2MM5zIhFwxrKlEf1gLFtj1z RjgiqMKJY8PDT7bjbvv8MOLc+6xQ+PiKVgFrfkLpz6DJDentVmpFJx4WeCvrmhYquIgJi2hW 2u0CZdTt6lCQBsuRUiA63UOk3fx0fymBRRn4QaWiDWFqWidGs1y64wx+SX+CkwJOhIdz2HfH bZM78eYu3ggMzzXQMbrVWjjBph3eHvCKXiK7PaI0nYwbPzHZHYLGjhn9nFDi+clch8zsEK4i QrOMwbs9eQfiat3rOpSwEE6iPwDQNSkUoOb43lGXPnTALqk7X0tn06ALIP9qu/8Qa2snpsi9 498kS4QKuEoZ5BATORizyQidzxiHWwRPFl6C8VfpIxdVvI0TRqSgMQ6+Nbjm9+XUdjbJ/EOb HzKY+FN+Zn5jR4dIbJrHU0yVyrIuXwmWdetILCPBUoMAQgBCgbHKrBlPTto29FsVjySa3c2C dIEZivR22Y104siJaQQP/po0jjv6JrekIt1NDlQbFsuToYc+UlKzzh2WQDmlIFCtHkluOHUL AGuIqSlpqxccGRFFKIJGyIqvjJ7TANRCYSb3HNV/4dRaVPTTQPwT6KCiooSfv78QM0l/CWjr U+EpUsNRxmzQarf6DXml8300sCk6gdY+7V0V2qgUXaK0uTAAeqbl8cjJT6qbpQZIMbXewoDk feX2ZXLGbrBwimYJ++2ZSDMK0rnJ+8x/BS0M7yA/5+s5bp1TXO94AxojjPAxTgRNVbpnTe2f DJ2GBENnWvsgczQwrF096fPN4DG2k23qxMKRfA0cp6NodA2LT5vsMF5tiOB99E9FRP3teRta eBZVYQJvKYl4MX+sLG4wRsMBBerE7fLYOhiYW+LefywGi8tmicjoi7FuMMCNj5V4bbgmwcC8 78XOM3DK6BRDjL1Pd6CwWoeRGezYCIur0V58ASZaX9mN36T550nrYcektb59iyzBcI6OwxXD ntQtO9pYtxH2QlxywqL7cjpVHVMhi9CVl5dqABP+sp4T99vgrk/dGsoLKqrQHfqhNuCak4AS yz2+jcL93KywPKrK8mR4LytgQobvPh3aShyv2ScPCkmrnTYJJbCa8sdLH+QzfCwD7Y8IMPlS Fs1w2fEecaF9i5+dsnMsHj+LHxa6EmGRXi2gtZatImbRhft/PkP3pqPb3rp2nzTbb2rnLO92 oYtPl28xqH7edrxezfDcOtkkxGUQIg1puKnP7NqWHEMecL2bxFMRD70XafHcGjxeGKpErayS lLhXiTkFzySVIRFsfXfIU7kTGtGKR22u9NQA5kJ751npNqiYfbKKZv5vfhD+P8H/EwRGVkBD e0cba0N7S4T/BUdMf5tlbmRzdHJlYW0KZW5kb2JqCjE1IDAgb2JqIDw8Ci9UeXBlIC9Gb250 Ci9TdWJ0eXBlIC9UeXBlMQovRW5jb2RpbmcgMTIwIDAgUgovRmlyc3RDaGFyIDIKL0xhc3RD aGFyIDEyMQovV2lkdGhzIDEyMyAwIFIKL0Jhc2VGb250IC9PRlVEUEwrTmltYnVzUm9tTm85 TC1SZWd1SXRhbAovRm9udERlc2NyaXB0b3IgMTMgMCBSCj4+IGVuZG9iagoxMyAwIG9iaiA8 PAovQXNjZW50IDY2OQovQ2FwSGVpZ2h0IDY2OQovRGVzY2VudCAtMTkzCi9Gb250TmFtZSAv T0ZVRFBMK05pbWJ1c1JvbU5vOUwtUmVndUl0YWwKL0l0YWxpY0FuZ2xlIC0xNS41Ci9TdGVt ViA3OAovWEhlaWdodCA0NDEKL0ZvbnRCQm94IFstMTY5IC0yNzAgMTAxMCA5MjRdCi9GbGFn cyA0Ci9DaGFyU2V0ICgvZmkvcGFyZW5sZWZ0L3BhcmVucmlnaHQvY29tbWEvaHlwaGVuL3Bl cmlvZC96ZXJvL29uZS90d28vc2l4L25pbmUvQS9DL0UvRi9JL0wvTS9OL08vUC9SL1MvVC9X L1gvYS9iL2MvZC9lL2YvZy9oL2kvay9sL20vbi9vL3Avci9zL3QvdS92L3cveC95KQovRm9u dEZpbGUgMTQgMCBSCj4+IGVuZG9iagoxMjMgMCBvYmoKWzUwMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDMzMyAzMzMgMCAwIDI1MCAzMzMgMjUwIDAgNTAwIDUwMCA1MDAgMCAwIDAgNTAwIDAg MCA1MDAgMCAwIDAgMCAwIDAgMCA2MTEgMCA2NjcgMCA2MTEgNjExIDAgMCAzMzMgMCAwIDU1 NiA4MzMgNjY3IDcyMiA2MTEgMCA2MTEgNTAwIDU1NiAwIDAgODMzIDYxMSAwIDAgMCAwIDAg MCAwIDAgNTAwIDUwMCA0NDQgNTAwIDQ0NCAyNzggNTAwIDUwMCAyNzggMCA0NDQgMjc4IDcy MiA1MDAgNTAwIDUwMCAwIDM4OSAzODkgMjc4IDUwMCA0NDQgNjY3IDQ0NCA0NDQgXQplbmRv YmoKMTEgMCBvYmogPDwKL0xlbmd0aDEgODE4Ci9MZW5ndGgyIDEwOTYKL0xlbmd0aDMgNTMy Ci9MZW5ndGggMTY4MiAgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNrt Um1YU+cZtk6lHjKgZhpBUl4FRgFJcpAQQbEjoYHIV0JMwSK1h+QEDiTnwOEEE5GvadShQLtZ 5UIsRhhW/AZRHE5glAp+UD6USTe4JHwMAWnrFGFU2AG03ejP7deunffPee7nfp/3vu77cV4r lXv4q4hYVEzglAfMgX2BKFS+HeYBmMODnJ1FJIpQGIEHIBTqC2AfHxj46+IAzAc8ga8nz5cv gJyBiEgykFhcPAXeEbnOkgTAX4uSmBLBQShCxaNaeoYS0QA5ocRQysAB/hoNiJi9kQIi0BSU TEVVHAiGgQpTUiAWjcNwiDurSIKrCSCYh1W6pNetVJRMoUWBd2iRroCWqCJwjQGoUDXEDSPo t1BayX9D1MLhYp1GE4ZoZ8fPufSTPqLFNIZXDEKbpKNQEoQSKpTEF1Ij0XlxoagK02kXdiUU osGU/nicBgUesBeHt4E/38BSxJgeVUkxShkP1IgmBZ3DUVy1UApt35wQbkBARFBQmPurXOea UgTDqW2GJBTwfmTP1fCPNe0SielBNI/D48E0kT6v/2IWPPYeriRUGB4HPPneACFJxADRG0RX fJAGAwxXoXqA6mnFXA5OUPQVQFuTDtQECc3GSq8TN5a2FqVm8XmI50ljJKJENaj6X+ENr+D5 bH/AYZpOIqq5RGfBn5ohFBL6NA9PH+Dh402Lg2FvIBDw0/+NqNSRJIpTc/tGW/q6VmN0DCiq R5VQVyeh3LQv4djV/Wcy3itpLV/KXT7ZdP5xl0VdVHXGcUyVLud/JlsbR5UOm8xVeQ2sxLbV W5WbPmWSV2xzww5/+OwU81xVzsmyqI+z+LWch3KWYW/O0Z9Pu7sMSxqS3y8oMprX+NaSfYW/ cVzf9cwxs4nxmWpI+EHJzRc9nZYr3CJ+67bOTtD1uUX3G6tYhu6/dTg8rc48dstPOXbv6xCJ lJUiznFpU2+xjH2GjPdDMerUtjZ32aB//f0h867Vqu9twg/XRutH2QfXHXD+7gt5mf55Tsaa tD/fTrJgtR8cyTU93xO+HKplCxu7Wxv23TJz87MCb7JD7Jv6NsRP2TW5hx39RRyvZ8PiisFq 2zsJ/YrLF+EDM0MWdr/PmChDEouuHWEHjO5OPl3j90LByk3nBF8t2P5NaU2DZWfNSpj57v0u Uf5k8fKwu8tyPEN1VeNHq+PzRrisgSdedztbA0v7srSLGLYn9shirkG54Yh4ellu/UDPocYk 3rmB3RDcfPxJhezk6Hm9s2/l2sV+K2cyFSUt2bKQtzNSnRgOlZr7B0L/kmrf4Pz8wcEkS9cg SefHk/xffiPKEV6vuiQ17hsWqDt2RufKvogavT7V7iuJxM8u+8OdjLKORQWKRXt3hg8cu296 i5F3dvD7li0On37VUeokfipXbGQHJnKn8KeBtVFlM42jViF/srgpDtqZZ8G3FPz18/r9YbGI yNPU0dzT3SlZm32kcL1XQfOoW3b9s5mCQvG2Pt3z5e2hR48faz9zxPqiqKZi/yPj9rqJrrhg yDXYu+Ok9EXPwyYrtuObK8arN6axjuS3F38rNZc3jgx0Jbx80yAP4wZXr2KaIlnSya+EK22L f5ftlx0dY2/otbO+c9Xl3gA2cZiyf7A4dteumqV5t+uOJ9z9x23sen52/KUqU9kIc2hfZdBU xbnJkdXWuMuDTOPPkhmPBCVbJy5HglWRTc7m0iunscSoa2cO1n0oGiSsn+46jYUodmy7eLmD q+1dzCSabHr/XtVS6pQ6fKt8ysfKM6Ji1Yl7Y7in0eKPVk4pW43lp5SP2seDez+iFDeMkcYb LhOV1o9ZVxzPbs521fG3Cx8rpHYTH2xmDHl/YjduGA44n5C+xA2VMAKtXyLhlVIb3tCS6Hpt 37lkIZtTpGa+NEmMUJuXvHn6a6/336WQFtFlc2MfN3EmaKg4gp02Pei/Lkk4PTZ+NT1vU7oH vFtXzszZMTGlgWGrQqd4D5nVvZ7S4v6lWb57bcZ+3d83TeY57WnoNHePTrvu4De6mvhbHGT7 f2V0mJbemnHPYH9p4xfavsgRXvpg1N5jW6vk5QVd80OLb3POQ2WM9RCzoy7i0EP5shtTEWkV NZnfXVjf21Lo8DYV49Z2aPPkY8VQYaRl30aGWFfUZnv4yyzZW8Fa1Sc1p16MKS3NIUVq7Udr Suv3tIqdsi+U1N5I7n3CTZebHp24dAgsYQW+0byixqc/n/cfftD/B/xPDFBqUISkCC1CJkL/ BBf+jihlbmRzdHJlYW0KZW5kb2JqCjEyIDAgb2JqIDw8Ci9UeXBlIC9Gb250Ci9TdWJ0eXBl IC9UeXBlMQovRW5jb2RpbmcgMTI0IDAgUgovRmlyc3RDaGFyIDE1Ci9MYXN0Q2hhciAxMTIK L1dpZHRocyAxMjUgMCBSCi9CYXNlRm9udCAvRERSSEhOK0NNU1kxMAovRm9udERlc2NyaXB0 b3IgMTAgMCBSCj4+IGVuZG9iagoxMCAwIG9iaiA8PAovQXNjZW50IDc1MAovQ2FwSGVpZ2h0 IDY4MwovRGVzY2VudCAtMTk0Ci9Gb250TmFtZSAvRERSSEhOK0NNU1kxMAovSXRhbGljQW5n bGUgLTE0LjAzNQovU3RlbVYgODUKL1hIZWlnaHQgNDMxCi9Gb250QkJveCBbLTI5IC05NjAg MTExNiA3NzVdCi9GbGFncyA0Ci9DaGFyU2V0ICgvYnVsbGV0L2JyYWNlbGVmdC9icmFjZXJp Z2h0L3JhZGljYWwpCi9Gb250RmlsZSAxMSAwIFIKPj4gZW5kb2JqCjEyNSAwIG9iagpbNTAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCA1MDAgNTAwIDAgMCAwIDAgMCAwIDAgMCA4MzMgXQplbmRvYmoKMTI0IDAg b2JqIDw8Ci9UeXBlIC9FbmNvZGluZwovRGlmZmVyZW5jZXMgWyAwIC8ubm90ZGVmIDE1L2J1 bGxldCAxNi8ubm90ZGVmIDEwMi9icmFjZWxlZnQvYnJhY2VyaWdodCAxMDQvLm5vdGRlZiAx MTIvcmFkaWNhbCAxMTMvLm5vdGRlZl0KPj4gZW5kb2JqCjggMCBvYmogPDwKL0xlbmd0aDEg MTYyNgovTGVuZ3RoMiAxMjc3NAovTGVuZ3RoMyA1MzIKL0xlbmd0aCAxMzY0NiAgICAgCi9G aWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp42u12ZVBdXZMursHdD+7u7i7B3Q5wkOAc 3N09OAQIwd3d3SE4JFhwDW5BLu/7zcw39d25f+7Mr1t3V+2qvbp7Pf10P71WbWpyVQ1mcQtH M5CMo4MrMzsLmwBAxcbezA2s7miv4sivxKwMsrABvNu5kaipJV1AQFcbRwcpoCtIAKADsgBI gcwBHBwAdn5+fiRqgKSjk5eLjZW1K4BOS12HnpGR6Z+Wv0IAZl7/7nnfCbaxcgDQvH+4g+wc nexBDq7vEP/XGzVAIICrNQhgaWMHAkh+VNWTV5EF0MmqaAFkQQ4gF6AdQNXNzM7GHKBkYw5y AIPoAZaOLgC7fywA5o4OFjZ/lQZmeccSBwOAALATyNzmfRvI0xzk9JeLCeAEcrG3AYPfvwE2 YICVC9DB9b0Hro4AGwdzOzeLvwi82y0d/ybk5OL4HmH/7nsHU3UEu4LNXWycXAHvWVWlZP7B 09Ua6PpXbrDNuxvgaPkeaeFo7vZXSX/73mHeva5AGwcwwBXk6fpXLjMQwMIG7GQH9HrP/Q7m 5GLzNw03sI2D1T8ZMAFcQFZAFws7EBj8DvOO/Vd3/lkn4D9VD3RysvP6e7fj31H/wcHGFQyy s2RBYud4z2nu+p7bysYBifWvWZF3sHQEsLP9w27h5vTvPneQy98NovtrZujfSQAtHB3svAAW IEskVhVH1/eUALr/O5VZ/udE/h+Q+H9E4P8Ref974v6rRv/pEP93z/O/Qsu42dmpAO3fB+Af dwzg/ZIBOgDe7xmAEuCvi8bN/n/bArS3sfP6P23612gd0D/YSjjaWfyrT94V+N4ScQerd1nY WNj+YbQBy9h4gixUbVzNrQGWQLv3fv1t13KwALnY2TiA3nX9u6UAZnY2tn/xaVrbmNs6/CUA 9z9cIAeLf6X/LtXf5FlVdSUVpbQY/4vL9e9A1fchcNX0cnrn9m+lKDta/MfiLxgJCUdPgA8z Ow8fgJmTi/397L0T4udh8/svUv4NxP7PtTLQ1cXGE2DwXjcb+9/V/9v7z5XRv8BIO5g7Wvw1 NhquQAeL90n7D8NfbnM3F5d3gf8+/O9V//v675kHgTxB5kirS47mgqGfMrIzXWvx8oYnpQz6 e9mhh8OcSho0CwsCqx17AjIit/grTJ9rwlgapwVe27wWj51edhUY9kZ7ce1oe9JA51+J/Sjp +wow1mk6eBn3glmNS1AyT3RifX4vKG3C6POwae9tT6qpGxc/w5FMd3C6IPy+pw+kdC8IxKa6 c0L1N0+vT8DpRG+EwKz9dnxC8/nw/o52cGxkeKjnErZvl4gxNwGRWtAdBoUmJtA5l0hUX6vC Jx4vgqMKFcvEgwLn2L/l2F18HgdquyMNeFB76FZ9BAOBlcBQoxAePiJSLrU33mjlgSSMeRTo U5lerxD/B5XWyvTmlnQEU0iy0zFuJotV/lOSS5BoI/AlAt6czVbaCk6jzBPtBrGFa6ZECXMK BxmaSyI1KVZl5fMfM6SUTDHFkBEM9R5W5h73RIjvuIvnNEqQDjvbVOj4t6lSk3si+qeYSndD Wcp+fmqkk1kv8pYIVeuUYN3lmRhlYoPvOLGbzBY2q10O9ulmp9fKxEK0JjaJqCiYNdnklxq6 OhJHmRHI58Jv5ohTwWnxHWKr/TZTknAghQorLhwMjg3xFHiqsBcE1g7754aXt1yy0biUkOhi RV1qen7PkQ+5val1Ieo9P7kau3M+fw7doSOatMVHKG4mHdz1aa7EroN9Kzn7dJRFnN9g+r2o XwWtQ2vYURejaAqOGiSjCSLwKh0cAAI08YnnIaYkvq+Ol+sm4S+NTBmXluUP8y9qpLAtQOPf tPCv0RH2MP5yN5K6MSCPqUvezv2zfu/hH8H25NcLIpoysj5xFVJbnV7UhIYikb73rTD2j2IU JoswKrWDRqKMkPNrH/XSkT+UP/0smZNLcQL4TgK/hoZ4/ll70SAOJUzrsvY0Y4TOvMF9XtIB fYO1riJFY20N8suExd2sXoVAan1MiqQqzFhpl2grKuOXrR22WR4KgVVQI52I/WhgARZk2FRF r8YQzedpUVWtAHVl3/HsLYO31PSq2++DHL0fkFHi+8dDeawNFK9/oRtEPdmNRLS481JFpPXf 8Lk09IxCYuj1s/xwlq+K4uBBiiygnDSPOaP2h0kM5KgqUb108brnxIgaoJgwXm12UKWX7q47 ta4b6eylpPi9ZNNPXx+7PTvRC2HyaDVbyCdCrxH9hLVAIqcMzpXzk/c7XrkDhnobBS/7JZFn zVg6aKsn88nS7cUTyiVqxopwNWIVF6kOZpLHB8xI2ih1V0ECCabD1EyM13am5ATzr2klD75G OUVfTDi21zOMXvHAvJ1u8Y3yyTIVIm30IMhWkEijwj8u4tPNGf0s9tp52pPh+ua9XVTiyWOo zxRNa4GgP+JWicU0QzuOqyRLfudjvsjCF4OHyYqzt8mP6zrZPHa2A7+cyw9hnY62VUEOzasV JnU4rtcVU+XHMmkjS8qC/LbgEc1C3pcm7YXynVj/c9+A4LbgJ+41qYjV82y+QiKA/LPFL7pl 9qzOzcKCbIT8uBVJZJXhgOLTAuy12W54ayhqcf1x1lG7F44JM/Q2UdMJbwZ6vbXxvFhrX0zY Lby74+DC0NgpUncPH5a7Uy/1ag8MPxEdWedInmNYSxpQahU/FrJeV3aPKB82F4CiLf2C4mw1 MIbVRH6qh6drhOyDK+lzKzwdlpeQ5SS2C9nJiq6lOk83n3KJUKZp2XR0d9KOtST8OdmNsioa vqPOHHN5qk3Ibdxe3lyLoDILIaSczH7gjACtNgpJ1tWS1g+Y7LIdbmB6KzxJ1i16vFoYnnz8 NJTW6CCmWUQXxWuLNQXhYmYqxTbvA8LPN84FOA7YEAJBM8jtxyeCN/miyBDuAkyYPzn0zbQ0 WH3qHYc283tGGKtuqRFXIT9NC5z8C9iA6p5xdVjfdmSbvDx/DEi9EQd5e/LUrFR+TLuidAf8 Lhtk8hmL/DqPGiNJm+sGw5AjLhQS175NxK4vaGvSx010woYUWvS2fXMgULvqiT3mjsH4Zf8D Yw7W3hsFlJ0jjSRmTJLWo0cE8bCVZLVXiY9KnpPvJ1TMLJaFTRRRyXnteZPcSB0dWtQ88qJ6 wV5EPZ+NwgNSZwtOyujR8CV+gBN72deZEh+YP1s6qTIbzXVzVhA+eHEVlO2Dbu1OU/VaShjD 1gNZy7+hZ6JZ3sj5Sa4nS86YbptG62+8XP8cWmdb4BCsZ8AWLa+u6Mi9xKyh7/dvhcoZ71M8 zEb0fSjDkfKEgjf35BA0+ooXlzyzfDR+b5wec3/RUMx/rabxkcDS4CKn+IBk6+C3g9KkwNNq mn5ygi9Vb6ef1vdPAyv8+VoDtoVvuWZmqRp5o3rH3gpso+FGpKOoWFmQzilneAlVG/JfcXz9 yHYPEeETPNem9TV7nUj51MSkfBsyoQPCYD6nadBwt8Wq4n/VDn3sHMla+uF2wlmxCQ8vXfhE PWUtHmvs+QLvtCWK6eAJZ1hPMEazoGZ+cndIejEQ6B4awpCkU4PhViFL8QWNK77MZpPHXgQT UZ1zjaQyAfL3/HCM1h8pNlRkjNSPPAs5vpmx2oTdkJ3HAbzL0TGXedB7b90tSIeebc9ZEogY /d0F/Y7u8bvConzkcCS0mW80B44nWZN5R35qh184Lqpcvus61G4jr+tTNM3InsMCNekW/TPJ 1szxcSSXApv8A/6UaikzoMiFmzwbFI54W6DVyg4ZFoRWTx8D8zLKm8z+YLR9n+mWLbJ5Odyx LZ/8E8p1phAG5zo9fzGcOI0/wMLOsPkVCfZN/ln45nxvoLjfqjRil/Ka1QdThUEhrHzcwlLI +Fb5afZbOaxpSneEwHO8niNwNcG79KMXLCvNdj2VxHbgbj2b88lGjj5Z4Cx1S8n7Ab3lDEj4 3CEYzTP0i0u/OHASCuuO7Uc9QVZcb2y5L+9QDw6UzSfW4dHotPIwQWX4tlAh5JwJMyyDS9z1 aMoqJkb+aciuRxkRotqMvVTCMwz9o4XhtQ6JfmgtnsP7TcxEOEiqFZoOGxgOU8IwDGC8MFl5 8Vrl9LwvZpBn/n3GTRdO034oxLCTPf1mjFx/m1ZuAO2FBASZoN/T72DwWBeUsAE++tD4wXAO 6eetuvqjRcV6fOcY72F3h3LHGBqyinlATW8Q7y6djE6AZaMebt72lxnwEB/yD7wI3q1T8vsp PXuJ0lDd1vTw/rtVe8ueX6tBF8yHmLxBA6RaftpFH+c1bR5eELq5QhOOIXAm6do/cxd9xrAA Jur/aHO6PKYDVqs6KawQk0nUlPZnel3MxZLEoMk4CO4bXsbv0T5bEpEufq0kWk9aaI0ZvlnI 63HoTQmPZFlCFTn8bnFc6KVRpaKZaEI9ady3jiIZUWuh+iEswDWfk/RgFWZkMl7QXmvHrBQ5 g5osiaA5JB5ZqBtGFgXLgpN387FOXGwabDWBOMpb+u2++Tj5ceRK0niXNa/YxR+3TOgC6wd1 aOYWv934QQ8Cjlw6ZMMhcH9Pjr7n8sB9WIMyRQ0frxxeQnV3dIWMrJqrNLGNeSJBruIKhv8x 51J+dJ2YGU/+p7m062UmG5dWS0ANZm8HVN+ix8RFDGLNWjVXoSTpCbL+lu9FfprDTAqUTDZG S/J8cqYvkZL96TkjywDKrWFfoTcdrK1JdjhA/Fv4YNFSVF0sZnnXrxtN6L7tKMXxBms7YXup soTPDyMi6FFHKQxv4m16LvoDOJ2ofYaKWe1vFU98x7eias480h6ugxbXKxKQkOMXTeCRY/85 J2Mnd3FYiDYR0H5nrTxX30wZcQ4IcXp3IJVp5TidYCbsJKzulcRXC2UJktU/n8v7KnCQhADq gXr8zIqoPHKRWLW8ek2VepcYkDLJzJs9B751Kicnl+me0BilSCAJ43fwNRLcqSVLUuzsTnDc G1Et0A1o55nwzLP6FKL/XFjsloKTvWshprIxud6flsFhqk0OoZMxIPgiBwwzkmZMxqJcKi7I hevhZ602YvzY3hpUt1fsohACGjKH25tuNqmgQ/55Xir2grY10GK0NkGegGyO/s0kltd0Qidf 7miaMReeRnwTL46YSwO7vAkNQf9egxqjoyE/J+9WeZFHDMJoqIY0GyExC9b+Kzw44DnRk8dd P40Hq7BHWg5+1fT9j73EsnJjAjOuRibeXlWw8cmhnvfhLOUnVLIZfv/glW9fhSB4tGbn4/GF d4U8kMTbal7gq3moDF/bqTr2iUfop823+B6U2iet78Qwn/RGk/IeLokPeMk3pdioNphKtpZO ipZbomCsX+Rsa+8HO6U/WlG/xrdtcrwIXnzydW5bIkQL59xw33z6VspKtUH/quo42jF56voL ptkRGMIqxkucGH8NPTtN9dOjeEWZIlvtAU2cc1Js6QMCZ5V1HYb21wcuc8ZtXnk2InnWD7jH 0X8W6jAKTmmTL8JF0Sb37hPNxP+4ZXCFtB5dicAt//TSIxZm4bXVibKr+FAElF74yDyMSs9i WHy/syYVn5CfILgJyPyeLUWv/cIhLrrF5yrFKrqH2N4KNFNFL8FO0tT8DTf3kWbkMyYC5P7z oGR17RRmaN8w36XLbYjuGhH7sGCktTWdI7NFLZNy7+m9kO+fQ+y3kkXMomrlmH3b6XpCdPil C1O/pKWm3EUnUmWOEPZGcAZyqZV71hDb5zb9cmYgX5rLZ5GS/hh2KAoC9fxg0nboGKxemApO ODynMMSxuLHMVmLhJV5pM2WOV86CuitU0fgXRCIpZWL9PN5pTNGJ4upU+q5wI6rqcHtF8oo2 5wdtp4SvBZ9RJ1zjFjLULX+WFP4pGXCAtfbDKZ5O6M+V8QRbcroMpId/w+Vez/+SBinOCk4c FMo8qXMrS5t02/hkMTUHiyr349XDeNVS356gOS7NYGUZ2BseVUzTXvroMMlcb/OQoIDph5Ak eB9N2hx9gUybRtvjkbAi6Fk4QcEdrtiLtpGhP66W+XbP4TmrUu6mcdwhIq+vQrXaFGAUDyI0 Ld2or/QPiOxngKl0CJ5gYptcQxa1mobrgow4QXqobD8u+L2cbaicpr9cWK1QBRDqrNAEXYYH u9orfaJ7nP/grD6icMnZN6ILJvwmV8H4HWuh/3bw9MzAk5KLStHdvwVEdtECF3RYM6ELMiK5 DmVl+mwmrgI9PHDu8zy3MlxaqUvcniZrJHBtJe/AVbAvbCMMYXd9aL9/Zh85J+LG1t9hwFo1 1KCwASfVe30WgeaAdFRC9Y39g9AhF9pID2BUozohTbRhA+N+837BN23QhS4TDm30EX29cLpm Z33wT4JM1x/OlwBTth33Zv3WSAr8k8XOFEM9wy98tRubR9gQ0h7HRgVdm4HDx7lr3zOagnE+ T9sIyG34pF5X/9qHMUjFJmhu3toD7lO3ajJRL1PKkVD7C3NjSnNtdDDxsTVoMiA25xTKse63 XpL0XRHsXZNQxOKCN+87g9BLnD7SNhmMED42Vmk3fFfH/MGka32Cz4JBFz6dsnSaumL3qKaP NR1aG44jKLqWWBd6R1TDn8d8+A30kELvbRPTxiyN98KBXjGV9twYjfRQs3TlxqdUAZUZ3IhI VDnS+2gOgf24T3CceVRt5MHlkK7ZMlyqEPmRPG55xZoRwmlXihTNCw0Cxhdisxcac5Uh4AIZ cpPXpR0/hUW/YOyLhGJ03e03cY0PkXcS8mONAZv9Wq7UaYLF3ACVqIcPFQJaHC1NlXfB60dJ lTFQmulhLNCd8CTlzAkPfOVFQ1yav7y6qeY3yq1Wzrwhb5imzDCvFk3BMTIfhm2fhqXt1GQc Er3azadkb9sI4U0MdhkEL5345irHXdymt0h6E/6UJmWq0eYRbqaiHtKF4RrRsakT+vz6TZIp 6gbMrSQS8JZ0J0AKwzSS9TBlBTNPrrWQ1pu1lvq9JL6N6p3czwUuTLcLnqcgPviqQwZOyEd4 lTVzyMVyu9Hwb5cop7nvHiUnbdSOzMvVpsv6PQwPUE3OpBnye1+2PEY/WJ/N99hv4Ntxuoqb QLsDtdltY15fkN3zygh1+2LYii/d8kuIokHECB8oGQ+CtkRaR+nG8baD3NBVexxYELPdq//9 v29t2pEuAuM3DOo8cECvpq+K8ftYPEEoRBTeMqucoRO1D0ispkIfQtOoPMXG5eUX3AgSohO3 ZsaHT8PyZdWEogUoP+wWBrSrlBL5lPgHr2TKMLsgejtVPinizdYZ3OgLraFJcfTKP2ENI5fp 5WM8T9fV3RUbAupvjEPyqL+gWv/U5musuhBDj8+OYyke1xzxbe+SOVBZE266CNV1hS8QzMz6 mt9Ww5Mktb9uFI9i7c6IEycbDZEML3jaq33DeOpGUcEpTjouuxFQ5rrZkMjunUCECC8eCdfw wynFxhxvnq7HnX03D6LlJjjikuq6TV34zV3NC3LCE/YptS/o/BMZ18hQETTrFbmIxBgBdVg3 uIqZkSdhqRRB0df6hDK6vh69/DuVll/RabVkqGk2CoS244/RLIHwr9nrUBN3DgAlsiCKEZyT iezffGpLRRiZEChhjvtewBJybGO3+tSbrrK9Q/vAxG2x0k8To7dZtsZW0HqCb3BcLAFlr4on 6aiDJt7arnFxO2k20rQIEb2VinBs5d+fkY0lK+Uxk89CWofysj5xdSOjGTxl1tzD+Et8EFIi bmEU/jqmlSwz9gSOoFXr5ilNuTyprsSfoJzEDIkwc/2s2anGala03EwX080Hj1iN18Hc4dFl LrB+pu3FE+GQ1iYNW+mAxhiUBP7mmY7gQ1WtI+4eotTIbaI/s3cIX8HwyiYIX0jMts0c6z6C f6Vt74u/tsRDM1ylz2VD3CQR+KneShefs4T8u2uxgdrOYRmiWkYctlrRl6ZJ4NgJTflNM6qK Fv6gzFgGrR0503qvJr9edUCLyXBaRkGAQM7X4euGt+69qo97Qb6ZVfc7IZCowd/lAp7KnFgM dk+PPnfpj0yL6okJEnAp18wWnAvjSsyRZj7MYAFeIgMs9ymoxkJ3EVd+/77rZVFv4XJismOs GaiFCZddX2KRLzrW/PP7QIQOYfcw7VztDUAA3yLqSAXrAc0lHxHIIn9Wph7jFyD5i1GuHvoP /8kWdWABysyiTjMJoIG9+Ji8iWQLY+X1aZWaaw0Vwf2JY7C8Uxj9ttsFbTlPIOZ1HYUGRj9I 48uLzKq/+NFr+MMN4ua1qJlq8J84M/xLe9NHBNRtW+q0jR4KGwRlqGlGuIz+zWbXXS+tWb1s ViTn7MNTBRNM9a+2cKOMEn7qu+Y7SNxCLYAcg4jC2hlxdcUQz5+fi8GJstlGd71sOx568iVq Ge79nmv6VpU6yZAfj1ANXIQapaA1sjLsV+GxY1723KlASrmeFsgKvfwBMfCASOjrRW+uRk3T kS74XdXvw1FxBc0rXMZ2QxzYQI4w/Gqi5ccvKRe/ueTCUnpmAzRPLVQOtl7MLqvQf2/drQHK UbuWYL4vc6+N7Vpa2EFg4FAB7X8yEuTcJ56ZmcEIWDBbFj6hI3pu57MMmA1baYplVMvuPW4F gmm2k2kKn9nHgmOvKgNbhH65x8BpmvyyancHhtKGrMf/ok02TXP+IpnEihyfbHIO38SFFg3U nIQoxdqDSAz64CI+IKGdOO0R1Y8zIQjcm04+qvJlwenqFlUnCcwjOgjc25+QE4bVY5CKXYIp hL437NsrDvLFu5MSW409lcdffsVmrRF/niMaPteeSzYHkWteDsxs9/V7YJE//ORKbha9/WPg 4wYOMo9c2H9CDSBHI+Ueui13cFVA/E11zjUhifekrOxohM0MbdxfKul3e8GQOURTZLgKq1c/ O5fAufcD02ung+tlTH2dRyFJjmphWPM5nJzOU6XIbyLS1au11Lg0l2IiD5JFOgRDlV1IHDjd Xv1wjFdUImmR+mH2+MKaMi03vFcZpoofiPykP0y/dgv+iqSbUZwxbrHIfggX/ItWB1VTsS8t ZY958MQrdK5SaSYNQlbt5xm29dWFsdh433ETS1g22qNII1W3+Al9+IJPjZ2QTFBFkVJzQefD I29vmV0AbWsvC/ZPEoS5eZodP6ze6OeUOsJA65xj0p69z1rjeFR0W4bPSgVpuzQoVfp7YcKG 9mdQyo5oEL95dfgmOWzvBL9yEuWQ5LxmRxgnpDBbonuxQ62LyRm5qFDxWAZIcufDTAt8Rrwn SJ3V1y+EE4MOtfX7JYzAw+HB+AAim0a+Fx24CYkLPsLtZ9REntvZ1LRcj69ejhVE3qtGZD1B /ro/h0s3UkNnk36+nKs/znXxSEN0jF3JnY6bD+x+lCMylGzKXUhdCe+8EUNzbHV2KuCArPeP yLH9stceHhT8q7VWBzp8vcYeeJMbfjTZaOncS9rgZlL1mbCqsHAMJ8svDRu3VFEfFdhYRuBG SxdQHmYXZCHCgI2bYIZ8GYXkCjc0KkWtfuiMq24RnqVsPBTpN/k5+4s335fDLjqaBZu0zvV8 WHAqxU3xN5/kAa0x/yT8HnLFZ4FgCYaFH5+xLgGEFOyUMizth4lz3D+BnD1vsFFvNC0l9j3J yI+pkbWl91rzm1cQduNC6TlKzvMB1bQTzdyUsTy4fMnXGkXLEHDuZXA78jOXI6tCNfc84xPQ V12yV3LSuzVxVOVP/MOo2xr5LTKmLx+3qq5ZjQxMc8Pw4WU47jrg+H+Vk3RcyyK8tCKtBEnd GPAVXYvzaiV0rN2b503GMgV2luiSEcnFuo+dhn5bhTV5QEwm0cE13mPvZfW56gJUyzCUOkgH bsAHCNotD1MSikmItlDys4hmSmUovkog/BHCnrATAq2vuZfvBkj2OvxQPLmU5mrkQHfFS0ho y89DUahRIKb/hRO8+nU44vtLyTO6XfNlo8LGGO5anXk6YxQiBoRWTYtCNhgVJT0kvzPlu9JI FpNtLV6pQarsrm8F5nD5ccnai9RY6uiIEBwHVFv7pxndw4L7i2pxj9cBE9hvf2Lz9Nm+VIJ9 YVvGwRDi4ed2lZZvT2h4qSHHMKeIIhKFCYJYlZLlwPDeJyedsbtME6NAHiTZGq9qRTMZ+ew6 COuEPFK4+5WS0Acbpecfy6EuXMNKv6vgwnO/U7wGDAGp800tqLr6otNeE7K/+iDcuO/wC5kB DbEWUeH88JGEEFArKB+3z2saeUySEEolB+m+o/LM3R98LtvPpGH2HJSPNmNBptlus5GFzyMn K1en3XkaDumqH38TOZdWaNWKHwVtbHqSKCQuMcz7ppdXf3xVf0z0WL2R1p2ftEP72phH8wEF DUfwx/WeiJpTsuxopXsy8SmnvTPagjMudn2yHzsZjer5qFT+NocwoyOT4FD7D3a7K5UImmon bn3KTTKcThav8xaOSAI26zQ4JwskkSfJYCv1fjiKFuljHmmuYG4z9D86Lm5nH2RkooHO3zZz 9MyJdTFmJ71+DvUv8+NURBzuF8+KULlBufo5Kn1td0JJnyKKKtDBkKCMzFh07MgNcJpUmMbW KiYXUpz7s8LYDZXEBXEh/ufWIMziU/xlzllqsa2Pboy4z6xm12GImI40MlfwlKdoeKq9FGfh 3M0AAzJsiLhXSqICit+v8Qfkw1qYKMvloFVPwoP0j16mrd9FNqQSLBaDjUan0L0CKOgjOVjG fFeARS8IiUVB5t1rVfQI3zBWZpvF3gogAw2698AXos68Q7Xl2YdPFr4IJPsSiO7PI5vFVH4o 1dBgT/OfLqQQ4h3CP9ldXosS+WDlt/lvP3A4o5XrccTw6N3qFe3JSmMkrcRzmh6LsPG1YHs4 60Oso92ieavGP9ar0Ijn+ZfQ+H5QbI8oFxnBBTq1IoO1DqEMehIFgWb+E/yL7QHxiAZ5YSwm nLWa6vbohnlfJWJXXKhH3uj8KNSReN88mNg9VPTGInrjYud7on/ZyT0GbGzGj0ThMgWUpv6c WCk5eNB0wjKnAhlLPP9Qq9l6m2Ay70zX43plI28jmoJadTb+Yvymm0K1QQxuOuvLZPo1UuVX upmM8wo7LERdFYKh6O35w6S/JouHzZhHYpa+8c81FpKXQtcx9oCwIKdg1ylVfWd+t3aZ9zQb SAsn66irQI+DtQ3CrQwlWy9alNM+Ysxz7rCKxIVFrxLGK0mcFetlR0kHxefg0xi2gvdjlzms 7lUMb08pJD3gGn8I+FtvoJ34lSvrDNLqVepg9tQNgEK5ikSWElEy2PCoR5vryub/Yyds/3Ad nXjMoVmlNN25Th0zWRmZqmBXAX9TE/38dHubw55sEXb+D5vm5o2js8DZA0coYumOJb4ZLdW9 9xkYfd9VwDAECJ/eVfNKauY4pXHCUssFUY8W8eDsyGSYhl0TPItsnWrOgt0eXnf3oSvqhsoo qpJ7qHf8LYTRopL5Z5XvR7xyo2Jk6i/LK9cNSzecTUvmlS2eqg+6X1nPBQgtU7RlZeDqsAFP JXup6WQsAl2Dg1Aj2PJHyEvHoNaD9U6bkvtzbSt43UZZrsqkuVw3DYxKjORApkxuzMytsYdM XY/RA76sBkGktEDNuip5lv4jvivfemN7r0jnWQsUpEnoKcaFBPzTYAEjZQdtU6vB5dCUlJ0V 1TBmj7cAS+FofBOr/gelg+FQVt6Z2cEhmosTG/oe7QyHHWm6QH6vqY6pMVsTL1IvapUprCsd rx4RXr3XJiBFxxYNEjCbU3Hdv0jJYNVB2jh5STj2pkN8hrtqSlftF/bPxPJi/RPfQSrwQ8eL Xri6/qOGPsBzXUSVCCZfHmGz9wk2XNX2y6dfEmy/tOvLnNk/dQ5MERk7lXxVT1VdNJICI4l2 feg0ragzjjGyy+vHu+8eUPocK2qylf8hzIrGAmobl7yIxkRve5vaw7DGG8k5ydLprC1ljL4/ qKH84OV8UWBtTUYfTdvLbMBF8G6fdLIdX04fBxnKpNK37QjzsMxSqxY8DHc6uaZwC/H7gg5l QGqB49LX9Vb8O4a9PNC5KjrEEONPHc1T1NcVb+IQDZQYZdJWRgKCaVlrOUkkb+cxcKcSngRV C+QzdPGFeuoroWtw5+lrZlmDGQqzLyKj9ConFKjJ1jCe/p4491au9RCZOWb/50Kuj5mwDS+a 5cZGBPdSQEo0FMZ3ckkUjEPv4j5ASH1WdVnaU3L1nQzQu28t94cAy6KR/PrGE/CYDHJttgjh k2z+qfMCbu6kftalIQ+ZUv5EdNPw+Vu7r4wYFx2bVqHlD1cFidqX5A8qZhSC4eZ0EtaMUypn tJbFuXdt7loVJWW8KwT+xbQIX5yPC7ehR3ug9x2FIww4LqyVG30CjVlNPfLurWqY3spLrl7z vbaHfTZQ+NRgRnrByL9TNoWz63GJVHqDQL8Ra9Z0fRD3yFcddMt+3cYn8xNfsPPZiC6i81qt 3706vsnbolvrtCd9bFTfsxeFHUd5069rJ0axkKp5LA9wZjMhOrLPuBAjoZY+epqCiFH4oXqS B8/cSie07aendmBuPu3vCg/XqHtUuk6bNbabhuF/qD8ZBHXe4YX9oFzigbwPl6AJva5ApVTN 1YLxQwuV3N/ceW0gQiG28eI5hThZV97bctpFHut6l5z5VxTZ8n1/Vx7xVQ8VPllCRSKsZ7QB ZHyOgfaRpBhel3TeTJS3m1nlEwwMvDdlqAzipfQTOIuvc+Bsd7qMNyzJiH9QIbP7I8YGb+bl NyH7xzij++KWikahow3O9L1uSWwqp6hZD2HhDBpr5/SEJ8FXNYd6zYrr3/lVnfykiN2+Drvo NWuq8dnAMPr7qfj8UnPlC406K9cH5Gy/8eajTJWJKdV7e1zSgxSAioZxIOEzzAdFEwUSgtgd GhGq9BCPDgbmJZ/0yMLVg80Fw/QzHU8fsvV2bLqQZadJak3wEin9+p3CFyTV5RypSWY93YqR yxljWQF1m2GkSqdyJowervW3F5jvIpLS/BTRLy6Lw+ImBbhp+TmOHHKSQuu4Dxpj1htMwbTo hodR4DjMFXKv8cSB0QkzRsJATUbhPybHwc5LsMIgtQsUKGk5WQ7zTxZCNltKyT0qN1MEX7mW 8U0G8n5XQlj9SKV1NECodSBdfxIhe3ViGL0ODRRz8eHaf0LeJYU+TKicl2jrkt1F4MSZ0Usr TPD4RHVOZXRqYqIeKm0AZ5T5SXQBPYOFEuctvtmYmRHanPXj0GlJsKMmG2OMrw0kAtjCdNvJ rqqDgRf2GyJrSXyBhBq6RGWbVAHORH2I8IJe1YEcorTGvvBwR4cG+5euFGRVnS8G6QqcU/1f Gkh/dt5SHtS1m+DonUDzFjzLYg0g8qiM3YFMnTaLG6gDSeqb4KpkgQrrF2LbI/6XvfsR7SiA /FpFik7D9KwP5wPCpS426QKtwZOcdcKS+Cla4F3D6p4DK+IuCzE9olbmBN6CDZ2okKLYLY2g bIOH1/SXOEUt3ksfs0jOX6YPB7eOR/HoTnehQvZ40ySEHSINFd+Sm7bXfQjsBj2GuXZvNftd h4ME9tQMDzVJ7XdeuAjs4/tP0poehaETPcAe6s+dovFyhI4QbnG3SwhN4VIGXYowqkziFtEv ijYB+Dt1ZTv9JJ+ZLzuUqlGAMx6tcyBK6SFfHTRqvNBj3Rix4AVgowIN/QKtwEfZdqDN1znO LJTM4zl6oyUzAQTshArKcvxZ2VXufKOrrNEWoMChnaiK7rU+Fe9xvqCq3aYWztTdoRFc6sm9 RgQfYpvroFtDTi/lWkr6+BHMmdkhqMppQBmcNwdw3Bwby9r+sgfPDdd8VP683N9oDeXXV+iP wa4T4O87kjUTRucfYVwxOrQ2ItNUeyWm/HKGQRHf6tK/r6LML3ZTi1jzu635y0qIreYcbGoK NJQq2sZ6ZAd5oKR1FvmgB15LD7iPFsgga8XVxjgxQ0tzTTCUKd0/1Q4PYKQRylh29aWuWvZK X9y/s+DY9y405L9JNPBFv0zXvzYfUvjpp83WZxUfeVpX8hWeeDL1Mp+BJaMr0T6LMGXTi0nV Ty44+nWX75PY24vRuKJi0jJHukeq7puyyjK+TLV9paCMaMIptbx4NheNs3JcVGxzAW2j7sQc +WPpV00g1A1LV8Ak9/DhihSroQrQbLCZGmeX82TlWm+72w4Ll4Sw5IGR5jK9euyqowtydlpe c4OOXsEDi8u++AEerZGUqNc0HmSG0aF7IaCz5crpmCjys10st3nCZO5gZSoIa8qFYEMXtvJJ OCReeHzqVxM1rpZcbKZhMR/PdIkh69m6VJh/spNpyD0ZiKKPNwzRcY7VTxjRu9Ikpoy1Ajwu fWL0PWAO4eOxZAQ50rkyRMAgcaFf4EMGMhyfGmGN3KZT1MWA8QjCQsI85disqao5L333Afyx sDIfMciZgoc4iLt+iDvipK9pa3eOlB3/z3SHTNjD+Skc0VASiR4x+dqrZfLK852rhuxEdjdm K5K6BiT+3un3wzApbPVcSrGOGgcIOWuCubKbCdqkaJwPoUckNEtOAbEkZOfx+tYfG6WSrbN6 nMX8U8H8iC+pjyL9XlUB2J9sH48fsZHDk5y5jzAabDMyxutpPjKQ7/KDeMp1tW+Ish4zwKoD q50lZk24jkqtqJHWVHlfFYKksAdOq4cm00Rg87LNKCEeYpvT2YFlX3nuNXjO4m/IXawCUyGG sdg+rk7sgT+3zJ2Nw5PJaEce+U+n2tTed46l4QyIU/jBgqpak/SuDQ7ivnDgsL2p03A0gUHa i+VVl2IaupW2L0lfQjbD2j/u5oR5cJCnXduOXn3RWrunE9XbnXalcm3CI/SsNZB4iHiYr5Cv XBS752GcXCEohJTXxylRhsYQZF05wXpp7sKfQR7bRsSH+wk3v3VsZxfG2l0h4oVmiyy89DST vnRV+aNF4gdbrDvjlUGgtNqFcWtbKHHN2vG0MVLXC6qttMn0h1PIT0/jeZQhxnXU6jw6Z7va vwrcyf2/9pAhh62cBiTCFCOiZLqtBs9RkUmZdBf+Ihv/zaODxWRpGn/7uDRzXByn08TOiIvk Gz7925ZfX+dNaioYFxOkKOSW24qxDG506xXIdllw+q5NdXRM8kcbhsqQqBi4NrYnPQ7DZ5FY WuTBJnOthLXb+Jtqa6AjMjWmLGM7UK88wqbuUQDGdEL5t1CWPSA6GK705gSrrS5QYN51nzmm 9PJM+gpN2CoB8mjX06Pny718KbPejn09rlySzoT1p4nxjGIXSeVMBPwC4bPC/kbXNdlEcHZE MQqZFaYRr+pObQWGA94wv8LhUD0dJImfXeKAJvtjcaF/HEXUDIP6548t+5D+Cfw5eLQpBBkh 2JjPAbNNRreu0LkzT7N1HFa40VsaNScIV+TkVCWfp/OE+bd2XPIqMH0itHgsutrIvbAGWDgG 8NxKkWJTY3PPtffKoSFJfkBQQuQIiqkm5QZ0WITWyNhwCtFFI9lQfRMVihVZa8Mg/hSO6gG6 cNQ00vqV+GvIrBmBIg9K0Ky5rP6VCsy96jJTwdfh324iRzLH43WQs107caSx7zab31TfehuY OxXF8i37jxIRu77dDMoK5cdvpzCCNUaa+r2uyRkPaXAZ25a+Xx0uFQSDlkgarpWevFejfAoV NTX4iUW1NvqXmBCm/eMDB0aJD3ZK116HNzmGZ25wbxTN3d90+CSgTfXYD26dd67HhnFpvm03 b38MKWUgr1rDEFod+j0e/dUD7KUO8ialHotPTv8sLozxAYuOYTYRtcE2oYSiHwMxQgN7WKlK 3QsYcPBARHK3bkevySCeOxRnW/DrkrLeX+x22IsnarYmiyw7aPZ2rANcnYdhF1VyNua5IfVt tw5nsSDDXbHJSdZo6FM6owZfSKMKRts+ozYXA8JF6W8u3A3xDWXcO7/ObxqUcGAABOnI5DTb byvEAiHas0iZ6Q7le9ZHFdR52kWC76OMTE1XeLGDW+1WDE86kZ77Iq3eh/YGDlq+Wuw1qGxZ 9gWdY5gu6iDnWu0cFjKdWUpneZ8CUpQPqOd6VgihYu0NlYv1ug3XnDefGMa47XG6dNYN+wzi B2eixblvlvtrtzoqxRy7BOMflcjtth7bspBE5iQ3TQaXaO5OIoNesYTRTqHNeU5pq9k/AFRA 4LnKvGMRKaCHBnpbfuyRiNuq0XZCMdct/c5DP+4C6omMtsjkORsFxA8UBL5TREPRVuK2i53p Km8CK7TSQw/hIcwnroSXr16qhxxLWSql7dLSroK+hkXyiABYLeJ7/l7txTn6PXUmDg0hD0YJ lWiz7ChRFlPHml02S7K9aJHg1Bz8MuhNNyOC2x0UXyFNSI2M8/yOpz9pR9RsbVF4K3ZDfs9k YqYSJSBwkNBKJLqZh/B6H/ss9xWL6A3/AqxKz+eO5GAjdUyf8M8hH1n6bg5K4EhvJ9Opm+jU 8+1u8RbgYz83DyLP6tTyLMZcRlq64Zwin9j82Ovw/OIwr3bpg1mpXnzGp4nqf0ksKybqWWk6 f4wTyqkcbVwkfBoQ0MZkmEWtaGH4Cib0TT4UH/tzesA4qQSRXZEAWXK1XsggfZ5GLYDxyEIy 74wG+h3B8TEDJJlxm8y4Jg6lFGdtlB07E9MFMMxHK6qrZHOk7WBJxO9hsY0yHThK3l75qR9e cQDaBPuOy5mG9F2sX3s9rPhrrbYT3VWNqM03868jobNb4UMEtFhXRCvv33VXnMpJtzm5lnAE CcgXgr3dcugJ7Xh6J9L1khhpWxFT4NDJGG8VqS1FU/ZrTwmv3YkSJWUPmn08KRy+eCWJx0Ph ztqCqhsm4mwF/RQpN2N4ztWWf8r7Tnt1mDWxqHxYyag5IfJwk4bAm8ixqozg+xGJykrJypng XAWQB0BBKx0FOfzQiUxHVTj5wkhY4rmNUW99AnWozt5uquTGPAdVPh3zZUSSFomKdJ4Xl3eU yCQlhMzDaZcwuwIyvMsvc7PYDn5Jsp6KmAi3PSxEKfFx9+Zn1W7tVcIa997lT61cU78vcq0n 6J9ajE+orOF+WMt9DINAaIicHyUqIWbffVtvzYCPPrHeiKGAxU8z1Wjs5l/QjNHTDcwT/rSj EG8qaS6Gr/XpCTAb12BK2Knx3JVUTb/SUX4rCzA6ZCWjSbsxYn50+N4WBJMR3sXR9DrDItvO /noOueX0zT9ogUbWTmvYRsI4w42hksGfSzwb58Liz7FkGAhEbnLzE7+i4OZocH/SFHzlRxem OBJNzPKjdYL44/HHFhvx/vpXWl+KYJmjcSyl6d2hdBOipnIPxBrGTBToqx1vZcYmDuHMySto zesmLM4SS5/lg3jDK1igReWzTxFMniNTAdyBDkerAJEsf35FS3MTU96XIRn6J9aUvn4Dd8H8 tsXmeXMcRH6G+7haYQbiIu7vgsz9rcE7A7wn6HtzDLM9Iebq5eQTCf0Cx9sT46PxJb1zVpUI 2OU/hOf/ZNlcnzAktY7n3In0ZCIroC2hVuop5tg2uPTOGUwTX933s0F3PJzG8NJcI07rl9Op YVLXVES5P9MgLzG4X+jt1B/673sOfKg/A3fcyV6iGht1TJP/DkNgT1L3uLgLOVo4u3lD823Q WaWreFAj8Daz4x4QMi267M5pIzsyQENljDhJE43blZ6UmjSa6OR6SJ2CNOsT2TMIqjwmci3o GJKBLlXAlKQbgpy2y9N80aAfykYSsAppfWDn7f2wPyw3gAiVU+Hn8FZJvj1577/j/uOeOVLi SQe75nFPXphbzJpbue9zMHtUvsOx8fTELPR2ssreeBBDSrkX2VTLxxMWDnXjaDPqEREJqUCs cGzb0H3FADtEvcnpPzPokB9yeOIRCUwbvVszUqgo2KVATljj92OageEUWWuDqbGGdX4N+4yB etVu0jVA2mA9Gj6ioV5KFAmg4tBwHd0tIhYPkM090mDVxdNvNDfjy9JOw5I/8ashc8+g61zw xr7DICu2zvOezg8Fs3xbTQlpMWuWx/RLSTRtIikMEYr9U1J3QhMDrfr7Jr2OpiPvAMuRT7ei I16/mHjJnwIvf1rD+SOreXj4mUZ1UWZqfZ+Cu9JjdvMBWG0I07GjmGf8mlUoU43avYhenbsl buSN8ZdReNnO3JWAGHMFLLE51bMmfQ/KbbWcm7ZYznmGvn0DEbmwsnN49aXWbah8Ynwaoxyo 18Ob3iX8Lfmje46wOTmZlwuJulkWLbWT+C6eimCh+an/cUtrIGKbmvhtnP8S44rPb+yXlCdL kEBRypzJc79fE/YUnVfUdJtQa13cY955acKB28OvefC3PzWwXMdObP/NB+n/A/w/AWBuBwK6 uDraA11skf4XPrJUw2VuZHN0cmVhbQplbmRvYmoKOSAwIG9iaiA8PAovVHlwZSAvRm9udAov U3VidHlwZSAvVHlwZTEKL0VuY29kaW5nIDEyMCAwIFIKL0ZpcnN0Q2hhciA0MAovTGFzdENo YXIgMTUwCi9XaWR0aHMgMTI2IDAgUgovQmFzZUZvbnQgL1BYQ0tEVStOaW1idXNSb21ObzlM LU1lZGkKL0ZvbnREZXNjcmlwdG9yIDcgMCBSCj4+IGVuZG9iago3IDAgb2JqIDw8Ci9Bc2Nl bnQgNjkwCi9DYXBIZWlnaHQgNjkwCi9EZXNjZW50IC0yMDkKL0ZvbnROYW1lIC9QWENLRFUr TmltYnVzUm9tTm85TC1NZWRpCi9JdGFsaWNBbmdsZSAwCi9TdGVtViAxNDAKL1hIZWlnaHQg NDYxCi9Gb250QkJveCBbLTE2OCAtMzQxIDEwMDAgOTYwXQovRmxhZ3MgNAovQ2hhclNldCAo L3BhcmVubGVmdC9wYXJlbnJpZ2h0L2h5cGhlbi9vbmUvdHdvL3RocmVlL2ZvdXIvZml2ZS9z aXgvc2V2ZW4vQS9CL0MvRS9GL0gvSS9KL00vTi9PL1AvUi9TL1QvVS9WL1kvYS9iL2MvZC9l L2YvZy9pL2svbC9tL24vby9wL3Ivcy90L3Uvdi93L3kvZW5kYXNoKQovRm9udEZpbGUgOCAw IFIKPj4gZW5kb2JqCjEyNiAwIG9iagpbMzMzIDMzMyAwIDAgMCAzMzMgMCAwIDAgNTAwIDUw MCA1MDAgNTAwIDUwMCA1MDAgNTAwIDAgMCAwIDAgMCAwIDAgMCAwIDcyMiA2NjcgNzIyIDAg NjY3IDYxMSAwIDc3OCAzODkgNTAwIDAgMCA5NDQgNzIyIDc3OCA2MTEgMCA3MjIgNTU2IDY2 NyA3MjIgNzIyIDAgMCA3MjIgMCAwIDAgMCAwIDAgMCA1MDAgNTU2IDQ0NCA1NTYgNDQ0IDMz MyA1MDAgMCAyNzggMCA1NTYgMjc4IDgzMyA1NTYgNTAwIDU1NiAwIDQ0NCAzODkgMzMzIDU1 NiA1MDAgNzIyIDAgNTAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgNTAwIF0KZW5kb2JqCjUgMCBvYmogPDwKL0xlbmd0aDEgMTYz MAovTGVuZ3RoMiA0MzgxOAovTGVuZ3RoMyA1MzIKL0xlbmd0aCA0NDcyNSAgICAgCi9GaWx0 ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp42qy3Y3RmXbcmHNt27tisuGLbtu7YtipOxajY tm1bFdup2NZXz/ue7tPjfN1/us+PPcZeE9fENdcce1OQKKowCJnaGwPF7e1cGFgYmXkA8pa2 xq7Oyva28vbcsgzKQHNXwF85OxwFhYgT0MjF0t5O1MgFyAPQAJoCRIEmAFZWAAs3NzccBUDE 3sHTydLcwgVAraasQUNHR/+fkn9MAMae/0Pz19PZ0twOQPn3xQ1oY+9gC7Rz+Qvxf+2oAgQC XCyAADNLGyBAREFRS0peAkAtIa8GkADaAZ2MbACKrsY2liYAWUsToJ0zkAZgZu8EsPn3AWBi b2dq+U9pzox/sYScAUYAZwegieVfN6CHCdDhHxU9wAHoZGvp7Pz3HWDpDDB3MrJz+dsDF3uA pZ2JjavpPwn8lZvZ/yshByf7vxa2f3V/wRTtnV2cTZwsHVwAf6Mqior/O08XCyOXf2I7W/5V A+zN/lqa2pu4/lPSv3R/Yf5qXYws7ZwBLkAPl39iGQMBppbODjZGnn9j/wVzcLL8VxquzpZ2 5v+ZAT3ACWhu5GRqA3R2/gvzF/uf7vxnnYD/pXojBwcbz3952//L6n/mYOniDLQxY4RjYf0b 08Tlb2xzSzs4pn9mRcrOzB7Awvxvuamrw//QuQGd/tUg6n9mhuZvEkam9nY2ngBToBkck7y9 y9+QAOr/O5YZ//tI/m+g+L+F4P8Wev/fyP2vHP0vl/j/9T7/V2hxVxsbeSPbvwPw7x0D+Ltk jOwAf/cMQBbwz6KxMXL6//kY2VraeP6fvP6rtQbw3+n+H8CkXIz+tkXIzvwvNcyMzP8WWjqL W3oATRUtXUwsAGZGNn979i+5mp0p0MnG0g74l9t/tRXAwMLM/F90qhaWJtZ2/5DA/m8V0M70 v1bwl65/5c8koSErLi9H979ZsP8yVPw7CC6qng5/c/uPauTsTf/n4R8YYWF7D4A3AwsHF4CB lYvl7/37mxA3K5vv/ybkv4BY/vMsZ+TiZOkB0PlbNzPLv6r/j+c/T3r/BUbMzsTe9J/RUXEx sjP9O23/U/CP2sTVyekvyf9aAH+r/h/nf809EOgBNIFbXbI3+R5slZqR5lKLnTM8KarT38sC PhziUNKgWpgfUG3f458avsNdYfheE8LYOM3z2ea5eOrwcSBNezjai2VD1ZMCvMwj8CWj6ctH 3aTs4KQ7DGLSL0FMO9P46X21ILsNoc3BrH64O6mkrF/8DkU43fHNCebqiSaAzC0/AIP80QHJ z+RXfSxmJ0ojCFptwekZZeKfp0eqwbGR4aGeG8i+A3y67FhYiu9uEIiUUQGO2fgC2moV3jGY tIKHcUIJUrcHA0Zaz4cyKuQW+5bAglBxD7zalseCP0ofKOOF6dt9h+JM8+dGiht2uMrMio8Y PySLjKqiGalIrp6LHCa+icO56CTYhCdC9P5S6V+OrR1P3rA9bB0id6X/YUjkl+O8bQblcq29 woNlW9Ydcct02iVDCUxBtm/qZE2IQWPuRztcyryE/4aa5xyJ6uK1Z4JiibVyYkBRryMzXFP7 3bOiTW9NKUqoMEkTlZAW41uviLHfizgiq8InaaKBgm1pVFR8dXKDPIxgJNt5TKUAsLman5+C PNTvZD7O4plIxOleAv6ycan7Uu5FvXsSocU/OA7Vm7T+zXWM6wJOHxAd3slVXxGV+XazyBzc fM93xyFJNA6Xv8jiPSrQu7uwDjrb4uB3ReKXVPISgsJwQbXypxb26cq2DT/+OOr1uMsiBqVh I33EZ+uPRLnc6LkHOZEWH+W5l6GlkVJ+tQrFMsdJNmjXxJalRk7C5TmpjLnG5YZpiapah5ne PS2S7HFbxt3xkn3s+0/0l+W8L68sg6dKEW5zzxuCDJCf3/Ih+CSb8cNrWSDqhA1gzXXUMguZ 6UGI/iDSOWf2fqCQ9SgQv/QSRTBqTZb0G6K27jTPZ/bnjFAlfBQdL67EvMRmtacgpKjIcmeq hupXhCLn7yyNDMqo8Vdiuizqezq4yEkkfL1tHL2JALs6aYAdjNlrqztn182AdSHt1aBfD9U/ VkdQRMw0juUo/3BrjIhF/BDhBNd2BQ3glngMh3c4tOIRlDVe9A7Oog6Q7UbWDBbRRkLbGGsX ku5wpnurJnMAfdDYKjpxaofhKhgZO3Mtl4ZEzC2i6frqiUMdMFRXmPMC6ws3rLEOvVrY66Ow sEnXR5VPHiEeTdc7GYroOayECJh5wmJTBs6L6K8d+bxLgur0xnhJLv2oXI/fMRDPRIjAXebR g86brHPeR3KzgJuABSuE40eNN0rtsrzJtwv/hqxoyYCohX2S7QXaQCXET15+ElMYfKD566ha zvJX85+OR4IkqBOsRcuQCbr5X38q3+1mGEgDq4ItrX1smoK7QiYB7RhVvzv5Kdbj0WThZkhP wHjfrmUHEfdZ0ojiXOdpmy6RgjPYQBSPBrGHTUuCZtWk1hkfnG4S6/roxNn7GzRdHMS3NLUS eHRaXm4g9cl0ss/kMkSZ1uMXF25S3TwMyB4QsHFWyvjvMbnsSYMd6A2s3+3TthOudfPb7viv AA7tATD7Zqbp7qiilSYqm6+ZYWj6GwrLXpC6g5yeFugcpLQM4eL8JeyleUhhz3eGMJRaX3PX g0FMTPsWD1iqV/HEZE9ASpOB+WGOSSofvbvGOioN86SRTukZLd5SZH7Evec4FvtI+5gEp9a6 PKpsWRVkJtkdbmkSNWdRChXuRnpCy7PvIuhSnJoFMvQPiwYtoP3Be09Py1Elj7ZyaMxZbiI1 ROGg7mpdM7EAyzMo5Dc0dHWzZXAp8dIABaVOQeatOubs+MbmIcdt4bNBHN5BGtwaBEbz7X6R 7pMIcD+YKws3BN/YF5s/RaMvIa5HHWWSK1wFMQY/E2DZbuYoKQsKC93z1uWsPAJ9evQIe24t ZsKHG2DN26YGVfCGpqNYQLmyvpvTG1rVdy5XJJaGVF8wrmScmb9E9BPyP1ZJaIL/8TxbOLzY 2r1SKFy907DZWLjFABFwbDnthYNbLVjUbbej+9xvst2X8Rpwnm44XB4M1mJtAeRlmR+Bf05z Ktgojp6wcfDW9iuPZcKw7jYkMMabX0ufKvaxtRdU5VyJ4y+hxHXZ+QtwxKjHZ5RDs6nUS2II /I60CgQIcYt97JCIOFdciZ6xWAbWTTvyfLyd9DHmsGdqPqj97KHm692qgOsI8lHg6q/hxqX+ quVUkdH/ksbIRFIL1VsfCbf8PFlJE021wex+81FEV6728MCcuJ4svChDdtQ95MUsAxNx7lmA f+Xd707UAHtWErtWqS5Eqf48UzKoZGNE4/vWakjap+waZH+2gqiUBymQ0hW4Mb19Q/oWsPxQ 2hvqLLxymU2kaZFAMUdrfE9haqkwKWWzutRkczIXNtpOeYz+MBh6TQQH6b13vLd0SyfKYmNX YXLa80Vy88QpCvXj2M6n8O6GzOLKvK733RI9MvFjDtmvcX8vU6lVNyrPOOvzNkbquKOAHgYP vGANVJSkCfEVuhIc0C7MoKI8NhOAxcyigJxl2yITZCiPICO7+SL1dOUGRct07L/HRJbNjY9o di0ex2KkNaQEokEkpPvqW430lfW+ciQguuqU/k7kHskL6Sa98kF2y+NS1CYIpSXzp/GpjJSz MmmVuqTvVfjX7Q735OGXpslKOmiiNA2Zoq4dJUUkCRzmwOmYv13w+8RvLEieaVg57NpvUsl9 6pnfv4WgEUdLJA4C5HwnmqCWbLi2ZkYVWiOs9czWk/BF07vuJ3P2WlgF3fdMWgxCkgWyysc7 NdS53uC0mvCsTHtT9cgEPNBGiosm+NFb4WLuZ6xf7eruIQ0DZZB61+Ab2Li2uaphkn97vctq B4rPexDKk7Lbdic++OAkmnwGSIRIoaZ0bCn6v1dYHbCcTXSBSnXSUE8ae9wZsJG1QYOyz3Cm 1K7RE8Pf6JJsX8eUVKLjY3n/uot11sXe5qpSgtsj2ughtHtckq5Ilov8aB/Jj1jbXHCEt/g7 nXLrXvFfXo7KBlIAvF66QrJt/efyDDFnEckvZ3oMnZr6PE61IogYCWFO2NjcZ6od9Hk2f8ef 5+5JRH9Kh8yETAMEkdPHrtEmmyRp8wTYpNm5JHNgSwDUVgZwGU1Gbz1CCggX1LI87Ms6AToK bJTiA7YqfslGA8UwyeHEZvc8oq0eelqNglnO3TLNpKRweUGZSp7hsvN7P3Oww6/8cn6nl54K EbIIFxihHCa1oJ8tDn2i6syaVyafwlVLmlYAVD+1UECn4paUzvZEYH+zWMU2rriLQBldm1bd qPN1cX4jxWvwUmzMLnOnr6GLIUhqAM9EM69/n4RdqylwCFxWzkmS6pY2hGw6dxyeM6uZKpT9 mIeVYdPlZZ1yfx8rUxluJdUEgbeFeSSQ53caCkYp667sBcZYFtFaOMPRZ+ULSw4ipHxj9Ley 69au932LY8ogU7tnYDUoe/CHpjZXuldYFljjR3TSTy9wD1tM8/SS+OhSooSh/5lkAdCyMTxE wZORbUttJN0NLKC6j40y4g898uyhC5osX23MwxEsZE2WOps6YEgN1wLpA6eNuC1M53PT4Z4C pSkCwhNUbqnvzkngWf5BOXBTvODz0+d41377NFCc23CCju12GcWPMfD6jogfs/pYHlb+uY3N yQy6QnNh4+C4AENOtmDXCvpM8y1An2n1Vr/kKB8a2Nqtte0puCpWFZ5IK+wFERl9q3wlxzac CftYX/RR6gMjXIUDgabs4FWcoHSRmt2V9tW0zPGs55FegawNjnJA4yIjtg2uEcPpy5n8Kw1M p6JEcOdjUxvDX1EGJxh9KSqJiyjR9BpJHKzUwZv62q4lhcI4b5eBRVDwdI+6iHf0Pnx6pRoU ufXOwp1FFdvneCY+UXUV9kQrsPxPXUI8hiw1WAWskvOvIb3wmJvll/Lsfea8ovdh4d4r8vvb Lt9PpiWPxJgiKj9MzFR43ngVwo1ErpUluM36e5Abj8KbHdA0zDaBLA45QXqIx8L3j0rlgRR1 TRW7iC+Kz3q2qWAlddLpFA+bfupNa21aYovNd5MPKDLj7LCCrcO4qyvjWd1sB83VK+NsiHYb RV3zRL6npGVY4dWBAaR3vvwMzj3ESaUWU8fEgAcZhP3PS1njHpvy8y8SV0wOk+jbYupOpf4N Fx0nwOUPlOf3sPx0daLlVRF/uLEvuaFt09uEc4AYc0lCx/AdB/V0EJVPFqiqorjjjJNKd1at CZFTxxmBT4udCpPeOTM5Lq2W4ULyz3rah89rbAHI4bghcfWNgJKP6tPg9eHsfoIOOItb4MsV 8teUBbCJIIZIRxJ9Mos6W0OGW/d35j62dto45X3O00O2DVBtNmg0ovEx1EKY8Aakx53gou+8 75KGPzRdSI/8eoQw8am/gZRFsoDBl9Luhg/nUxxUY7cNagfeMHGKUnvx2Y3aGzH91PeVyTGp +M6uW4ZoxQeaP1pif926Q+qb57vFYgxwb3ffE9ubb+vxUnxVFddKd9Gd9+KigIATefPrC34S oTLAObJXIYUIHGVna6IjbTqVv9B4vd8uUvpAjtrNawlDqHaFCwG4hkSCS2eRV5uSWPFw4A5G 4T0I2htK0zp3JKuv9RApkgdp7ZrflKZH0BNzvPHeK1O0tSPJcp0cAp7zdX+FftMHJZ8iej+F HkKIT7gVD3WCHx2aicksuPtcoS5xa0DVsU4ZLP4qPW5PLrjlGhMKMMhtX0Hg32xYZU9RqZ90 Kl+6QnyaUiw30QKPAd1nKpaykrTALMZEgP/yIHOtsb5DYPsYRy1vV6XWuwg2rYvN/AC6Vd5O 3UERKgRSc6qN3W9m94FjFuHPIES43Nwpj+Pw5NW92DErVz5/nuNZhRBz3NSJtt/aH6GrRYr0 7oZNdfkxzLtITAUTYmnBivrj/h5wt12zi0MQzh26Wyv8Yi67oKlsTbh9BLczBTnNWHnd1+sx xRLwrBJCDmTBHeHaF8BwvJ0rPa1j2ogNt5525wCnyhm6js9bm93Mgpw1Ep1X3FdP60v7rkzI 0ua1nYOb8vZjkdL6W2X+HeCEZypegQYJOU9Cp3qXXzljfYNvWk30akH5iA4nC8TVfiA6QLBI eqedbscMQ1ZZbfBXV74pffwJyM/EMYmNjCjypEofo0moSfJGXzOnmgMlqS/ZYu8VUnSNgASt dx1Hu0GHPGy/thkj4bnNWU9fArJLcBDHN2ifHXcix26PvYqjvLUsJFuy2mV6dZcV6F7b/jXG d1654A8yxZ0m5yZVzo7+t1nexaYBr/h4NgM6adxrLMd2A5XSCbYYzNa4PeKgPJt96BtH8xPa HX7tCfFIHD9aW8+piQ6sfJ5id2yOA21QyMgBEDeCtszM7/p4J/SbBZU2CGhLg35Hqu1khRW/ maKs9phwfqQo4iTlrPYAD4de5pvpgmme/OtO+x4SxEaT6lRsts7+WAlEfXbaxG66lO2hg5IY Pan5XzngFWMyXvIaQBGTCa+9dOgwRyOMQ12dPctdJCSZ1dHS8fddBeWzS5SEUyBEjJEe2Nf5 fuvnf9LNC81nQgCpMVPyhNUMPR952s1jsV98Ho8w4FmULn6hvwbhtalNIMyx0EnMWGVbq3Xl bLb4+POI8GaT2/+5JzvMiXpXgPvSPdQcrl5J73Gvpq4uaBihHNGZhPexeienj7xheCKHojDb FCqMBffMRGjDb0Qx3W0Hhh6oXpP57fdNHDKPHj0bhd3VIUlQrFLRTjPBU4VIicWaQ53pvNCZ ky9LoZM7xb6GtdtcuNokVoR92UZ9UnXCOb2ppXEPKUsmmKQ1M57F98a5gRHtSMRUqABFYiPO gwOIqkmHDQWcdqM1IkXL7Jy0WMYbaqTecwORjYSGjLYu32EPINIXn7Io7pamkCQvUQHUMcF9 lf1DW+hhondhguzE0Bja1n2s2hUGMGNi9mhygrtVgWKoxWBq/UOKZ3qPTxqa93hTBiKBC708 IcBPXut28bKV7ZBM2PGx83EVzFA1sBLfjEFD5xg12vGUOu2BiMnC66Sc6a2w/aG2CIZSJ73V eqxvkVsKccS2mNpFM76O49xprFF+jz/Um6oo/RFHurq0XD0+8JPn5Zk1uSvYTXI1K+Tnuy8b j/8azP3L+DBxqpMLPcZ29XOzv0p+57tqB64Rw+p1yq3M7HOWu2tDuyIebnOyUtmbZsSAsEar tBkkZoMQLypSvT4afFOLeAAGXjIpWZI5Ham48uzAsO5+jhMVcObgQSnAXIcu7Wgo4ERJEf2g vElWPiRR38pyKDSSErF0p6CYO/pE7VVtU6Y8vobMjHf9lyAnKwqIgP+2falPxRqx4IhZcL+S 6Txz48sgS7pIJPGUYqmcaQBrQax/bk1AhUzgqlXRYy2qanAMc7ReV/iNcO8CFOJsc+FjGuTx QHhLg2GzqSgCgfEz4Zv/qNZ3Uav7XoegK2W8FBy+/aZP75087JDbtFHktRtRpGJ345wc+aS3 JTufbFvaWgOGkTfxxVaywY9v0tpWBW1vdRYlQ78S3apZ1OELBhCjKoruNsAFx5j4pEv56bHy 9jLfhC48PojCqt3eM7oSKdiYTPJVjblsBlcC00vgDrMDRBDbiHpka8dengeOSibyTi3cyRLF qZUjwi5SnSD7XargyGZaHll2fsZYDN2RmG7avRn0DpZ7f+cSYTnnSru1GVsmdF5VPYGqT8ou hwQ1xpmaa/0T4zEIpH3i+/l4f08AAZwfk7jtpPeJjzDmvAwa41St1TDGD4Uss8mpC1l19PQ+ dmfrxpKRP1pIXM5LSWheE4bRcy5x7rJRI+UA7kvLo8B9prqND0eUBOrPZj0/ywALXKgiXPB/ ISg9xZBbvYacmDYTRlgXi3L/Lh7UPlDG8D3DQ7M/8Am2S9qPk0Bs6VDfwlAN72W2IYbjjbOZ IAiF6Ipa25M9g4IW21I7g2qZ+NDnIO67h3GLq4snGqDSqbAbN1NSbIvZRrAxXKm6jnPVc17K GLotxb6MM3lARZMtqDDGOzjqiqKFYKr4khwvhxk5LhjckPNZbP8acqYyRqikdmIL/kqXSRF6 LIMEXZt7FYrb7AYHx3bk0zzAh1kDxO5EyXovCgrwwcZoye7ADp/1ZCZIO/haFbDoyTr63MlB l5jEvUNyV7+qJNNENYoPIs6T0f5RNc5H5uJ0a1ZF8i6sQPFRpDcY36NhkXQAU3ThvtgSMeLU ao5GpwABvKJJfuw0Up9BIjYhXHYMdEMa1KwnyHAtcAw02poR47MjMlB05jceeArJn+iGGYl+ ho9Gsg5lnvBdar8c1UWNr+4va5xR1D+9JOCgp2PsDxbGX2S9Nd4XwWKdaJPaMMZNEX+8RNya j+lpBSJ0xQreXMw9AuqioqnNxRJsBZoqm1GhqJ+CCKk+yZ6z1b/GGK59xMC0+r7iuv1fa0gQ INI75MKcCg7Q0mb4fmoghxqJr8zvxCNfYCizmwWV3HsZZuX0euZA+zn8XuKMRBzL8mMDlYFs uok35QiGl/vRbtpBnQL6UN5NY7jqdwLyw7lMkxC8e+65bq9TsH63ZaSI2hSGe2+cXYU7Uw23 OO9nVCzFEKTH00AbgTj2sfw3JrNtTjgwrE9Q/NfrDk70FzncYPKvaBSYmetmqOAvm+jP/RCc wDSslmTQdNmk7zt2pk5WYAoGZAHCMfae5NRtCyOWHyZW0iiRqOa8zOBQE/qoedsa9fn8x7Qt iGxfMtcOzlt0gSAIpudKwhP+7VjKsgiMtqQpj9O+OAlopIcCw7oWLXW2fCXkZO7j/r/SYUMl oXx+fh2aR4/qNwa1vXa/1Y8vd80XSgzPIp5fdPa9nm9/HA+PrkQ2Uec2iZQlQzP2nn7U+1FC B4T5Sfw+QGNozV+lpJ3T/7MguYxMntIhAt4mq3VH381+VMbFoyls2MaHn7KRpz40yvMJ7YL4 3DqUB059MLIe4N08ZOELkl3zQjrhs2kwrkTZuIQg/xYI9gXLTgKZ0f8LKuDnTrZYWCuMEJjI 5YLelj+nlbSpwCjTvlBXnKcpCxvJ9kNerB2Od0z4zx+KeK1cNd5ehoh/ysqpxyVfNoJQHP1t c/dcyrk2+5waCDX0iUwbdhBdeebMSdVmgBwf1QRS1npIPrtPtKxcLUu30PYSJAQcOK6DdI8E US6wNP4Ns83GqfZy8fhhxftD6Et+MpC4RtVfE8Hkyd8kRm38PJFJZ3Lh7RJdBv3x4fxi7ZsH nY/kLl2vRHxSwWT5F2qY2G6PwH+UtQc1NvglJ74gB9KhV7HWR421gXHMNOvV5UGJzwbDbR+l oiiEpI85QM30rkRfwXOJtpb6wHKPXGZqat1C5Im8SpphbAyx9D7dzpBGfvMymUh2rMdtiCCT +5TWixBv/+xajVNoqGswznRM0XPzkT0hDk+5US3m2CxUriL9+tEV6o1hSn+SfF+NnNJKdUgw Ssfu0zBbND3yy8hprF57MV5qDF3f2W0dv4pN8r7jfUlJ+kREY1Q0gvNS58LqqFG7ipxZiVjS wgrBmGthW5ZkbTblQhdZjKrpsmi8r1tee74+1BTPRpoFD0H5AoREcapuRC2+BGaU12TLxs9N 6jc3Dio5DqhlkEjSXXwjvY8BfH8etjln9yFTHcMViXMLhzNVSkBFL+yMKU1XkaG4CWzhkvwz VGw7wUtYXA04lFZCc/I6LCqedjR/3viVP0xRQRIhQcDW3hHZh6QW8vllTDpcPrH1oZBnU1Xg iCOj542D6Pbv9QQ0i56vzmBfXVh4+OBF7AiXNIkj3KElqzSe9juZesJLPthouDF/i1octHrc T1LEuCLEh/wTGGWvEN1e8OZitFxYF/BjVrJZ0yAUAtwBNhduKMM+SXhmwG0etUDmIdksb3Ag iW0i6bk7uA5X50BoEyyl159ADGFYNFMj2hBx0pNSSDk+axOtJeTyJOoYuBE6DkuMH5K8ribR EEE97p8U1UxmOJ9V0eEdWuCChiLlJPxWvPTaxiJjpHea4co3AeGIw9iZgUKujn7aS7sDcyW+ R2lRhXTjSSBp+QvcUdjkeQYYL8/OE0goHf0bHtrIAcPRwsPRxR+VVT4rAAYZb76LJjvuvanU 6OdJjgCoknlitfoRpu8/y+hZ+huxPwID9sCQzVtrEAT9r8NhqKfTO0+atpdORjAYWuQ2s6DI EXiCQJYNbf4MImwfpO3JdCyeeI/EWcm18TraABg//3xv1rGEWwg2VYh8H1aF05CrlFRYgeAR yU+6L7l28LT6iTYpCKrYgOuT2/LG9aqqrOimnSUjJWqKS0xEKsWrR9IN0+FJawjBAQOCrYK+ 2ip787onT8O4Q4Vzxp6IZqTCgTWvzEMR3wRpiLqYS9eoLNSQ6013TZMSXJ0mJzpSd2gGuarE hTH+4cyGTfKW9IxnIShdSXWN3VdtEGT+GjymBA/aLlwUmA/+9IqVBtnZ1akbn8puqFzkkU+x lV7HwIzRHDdK/Y5oDWHm0MPqVDgrp0OFUUjdRkQ3F+Jtr2i4rHa2TW56rs0PN4Ve6xucPkl4 DTJH3SwjDoe4CiaK4H+/GNZt7pV7BP919BK6dzkde5uxEsyluJQ2JcN9EgHLNmB7XYqn57K9 xLDnjU4U3yoUICoNh9MH7U64YcduhBWtzMLXHSO8UAfNzBIFZCnU15pbJNJOcpRuB0qhnjM+ askaLrLIzDsRJQ29qNYgGKNRy6Hmst/tSJsJmkWam96gFbjvZal4CyrCy8TSzoeRHBkWabzT 4kPJEW61UrUye1PcFM343jg0nB7nxTdg6+NGijjGW4+Ke4EIqwXrhFjnqpF+Y43RDBIu+WGI cBp6QTyuoGXUoFvQw455K4dSrFDx+YhJ1iILPtX5K51SN8m+4DneUq2/NoFMG+Kr83u1hn1o i35zgUMxEkfwTVI0Nt4Shc3uRnpxc8WUtBDL0Brq9Qu3Zv9Tgg0qCRmDMLAnUm7AIGKOkmuE CL8eudK5tt/PEgvO3D86e1mE9tq9tDRzNB689xLLhRDfgxDk0brrda0YZxdR4BBn16MKtUHj O4aCGPL2aq4YBaoTJzoYLCPfF1PLXguL4vHL72OBbv/7WKJRsXZ29ONPJ+V8Jzm4xJ/s573o I7z8IpLd8xORgaE42hui8XT19nOFgnzFmFu3UoGMMfH2Cp+diEppaE0XJta/gzKU6yVkyLbH 5kJCNm2Rfmfl2vjgId1qQ/pQNw0SO4XYeZ0Hpbssg0Qs8CabG2FlJVeEKcxpAvoDvHl3EHq3 aazWQMVmmaEzC1ZYGET5UX/zcGTTRUh8GGgTiccz/BSQ1UQOULVmwI1lNfzlYawHJOBqq8d9 hw1n32VWyk6YfefPDlQLTDMfmS7ui5KXjycU9frEx3yQSCvCwR3lPBv7Q633oXGNHRtr1h5R jwS3eKqCcbD61Vyq6uXb+dXlWLk8xepTjy6ItfZjwLzBw2HCzJj6HhbAvZEOQZOVx/f592ZU MD+ufcPnjSYSNDeiMJjrZbwPDuX8PWE5cM62ZU+4VRbgtYzUwe4SLsfatoT/uh7wmFYQckjL T1nbQxUJ1nemTjQxCxkD6Qb608UiqA8YLA/4scQhmOKJE4jOUzd9mbZauYByomIYrbagK4mC KGHM7OG5Z6BTg6W+BeoqvsCaOhCq+/7Ntu+qeyJouerjsn/ecTGesv0Vp20KsSo+4IApJD69 pCxldSgLXxCgRbJEwzIDlO83+x249RuRkNdAY8S+JzvwODsPVNz6HC95LeUgI9X6VG+NN2jJ QeLNq3NUxCJYP4CHCHUhTgM77wTUTswgqg/ay/FwTJk6Q5NShF31XeX0lUe7y/sAR+pAfTbk LmF1GHySNY/t8zcXT8HtnO/5ppaW/mphfXnxdAB3PwjGKMnmkdel0PasuqpsvcjglLX4jD24 13PTbGJESutsQRqs4sLyPh7nSDkCt2r5KBmdmjmCbzwn97i0Nc6BCXu0w5b3sGT59TfbknSe EmBfDITP4CL1mBKTsv95XK5b/ZqV7kdFk3Uxr/1OwXxCSUAqhLAVNBfGzPwKyI0tddTsbKVt aTZwCbySLjK0Hzq65lxUwsAMadCwBI+OImOic17OVx0qtXcp7hUN2U4eg+iMEOOp8uhS6lPQ oZjDbWIRrjviYU0CUZJxWsfou4k/rpEMqxDx3Srtbpakw5wyYyZ47oZzBoWvcVWFtlVHx+8a cF1j8HUfVwsjq+bt1hMSZwnnb+t7g/EXswuq1uqxwkkstmfmnyv6I3Xvv9yHdLG5xRSbpUav uYXEJKom9JNb7DmSa1tey96p0NgCadVK98egNk34hIvU2SHZVoOeVTiTmXeKuyT3M3L/RCKT sMRYepB+OY8VRJbWKNxL0u77JnaySj0dtxxlJr5Zfh/5SRILGARzlET1UdXHq40CCdDPNUoU RTq3/83dbn6ir46uwlV0J8SpFtsxuEtY5t0UDh6cMSAt2ODi77E0ZPGEAd2Z1cZ3+Sj+4nJN WNpsY/Xnl3/ZUYMTnZOHTDqkGm+nPETEaxZT7wwXJ2qzM7b4bocZ4R1b7v0I3/vx4e2Z+fMg yISBIMvdOtkHnri84SJB3nONsRRKvnYjJ7ZlBHfRMq9qqVREc2CzxAnNWD1+cPSujkPQ4itx MkrkRRmU5cFZlw0ebZu9l74gLrYep9XiS1WfT0Xn6NpqMnQ4Ealg4lrmjYf5Bu2P/nDQDMjU mV4wXiLKprEJT7amhlhKPoufVWHosITA3y/hWmDCpXYYuimzpEyHSYlTGgWlm4/d8mSWjNUx sTUU699tzVN8sNfYf8nTXOzI8gaZqZQbrzTzHFf9TJb4quGgtNusg9wnc9Z/bbDS409yeoJr ysSWUnYuHh/GhZNidwcvfLm+/MBRWLuka2INkOUO0yT1o5Tb1ErnathP9uLzktzYh7iVio3T I6zTHJAJ6zMj7PT8sHNFIiAKmzic2HzFQDuTqUAQZJyDlgZj0SN/0q5rS0IRd2LDQeiBq5Q4 UCRA4mn+zJNalOzsjrU/HFHMzy11DkqvXhrSiC7J4lSL+XziD3P6WGt1BIQLMHSQXwtAsYSi Qi8rJQE8jNIAB+efwtO1mTSN+QzZ6XPfyo8l6AOJsEJEJOG4i372mQiFOI8evV9170gECDOM pbwQ4LlBzaFt8CxB8pedP9/ZFAEFue96aBAXBfTeYbLmc12nYMWfBcF4YRX5v+3csDBG+aqD u/X+MWF8N2b9E+IKkxUemLWcNE5vIqyHP8mOlpz/QzDlbuRB7k/s97IrkRqL+YlQcRnCRzbu jf/4Kh+RnkDlj1oe1rG08nkbcoCdwBf/YeDIZzFJy1d4we5Zx60DXMD+RnJORDuF1HAA/+0E xmYOx5scxZblfQE52ZvmgPwpfSls9P5CJyBrTNaAj5nsjRhGm3rrUpOH/n6ap5rXdc+gzsdd 2OFm36TP6uj6mDU9T1UQAEvP41Q3QeQnDvk2xH+MblNoW/N5Fs2z+barcq2JJNgektcmwZPr Ry0iD8PMILILwwVQDus/a5uF0EFazQOZFKYp3J+h7hOAEuquMMvLR6dklJPutu3R/Tyykk3r Fy3uj6w90l2WcHBbvbbt2fVUZyBHIxI5+VVypYMqhFvmzqo9b4wV4pDglQjbXKBe+Nn3LTwb xp/kYpC8pNfaRypYFuPM6iSxTnxXu6ErG6GFnkrK7yofu+Duw2Dw1KSUilokieqb5d5Xrb2u riPgjT76sNznhGYB8mJXBaXkJLMtUdGShU9UrJYEk/dqL+3SRZupaEZrqH1Tc02qG9ZlxOQL eX4axqt/qRfsMSa+uiAGO7dO1nh5tcTt1aBP/2x/aufYQJHMxATuJB1PIIMz38MVSrL+trdo gyNv5nc0q59s/UwVOY7ho2DhbEx6xfcBpLtutx1NmrTDvQtuQqshGBj4dU84gg8TrbNXPGGE MTOpqim0Z+791FTNQe14HVG1rq9QdE+x2PgpgR+t4wLoG3vzfDAQxV3IlFDVDqQFbDsl/D6e H0J58BDFdXSfGsAv3nGJstme3wiKM62aShxgybEL6dJc4nEgb3f41ZnGRdr2HUy5aT2qJARc veOnEfVU/CB4yuUsLx+/uYmQyFavunxTw6liu3xec9FEcvleGBS0d+cYOOaUmdgJA41kl/nX fY4SGyfhjEejjqBEI2Ww05zerjkeT49bAedSm8G+Y0F/GIC20948KPV0EtNff1J0NQHfqbam N3crOk8/eRHycQfucPDqiyjkqvizU2+HH2d3u3eHhICP3GfckVyG55iZ8mzu81R8SWOevQju s034W2KCkj6EEXfxILqJE7LV4z2hWFXJSEQcHhT2xHxwXdTUOemw99KUbZ5nK6JJfN55fTSF BYLk3xmAcsLbX4T1Badfymc8O9/FSLjvj+eAdBfTKmjNvLsohi73Gqxr1NvwPVn2CIZCH7Rv 8aSi36F08iQFNygiji+O5+TIErrDSnXjh2FBxLG/IvebAyvqn1MVTp0wQSRAwPWXAxeSjkI+ hbh/upy6YiyjKo2EDUrXqFcjCTqtWo77U1r7QEHeaUK+jDRfsIHB0xByUXco53kwI6UaCpX1 GpWSU8kdjJdYueJgCFEZsrAT6CpYagHEog8H+ZNgk+QF46k1Db3QcKZVr1cwFZZKR88zTOxV nghbdGIPUkg73EEsEN0G09LvKS7JfqcJwvhp2Ves97Xih3EhZ19lKcKJRSQkGLnywBp5qFK2 zXLtUapQ8NQwyomvDdn9mJuszbUsJLqc167h3f1YVcbZKoadiTn+pQC57ROCimrIwddr8pYB oogOG00Qabki+Mpr1ZXywJJBwukx7fKwbeRgajGafHKMgK1vUH1xVLBNdak5DY81xeLI4xt7 qkyOKE62znUxHDF4o9XgsYWs+Kf9RUS/Z7b7LP2n8z2MtULLWDRuVSewatAqRZg9FwYrNbAK iX/x6RjGfl8kVeKoo5BTVVfCLSwhPQjnN0svKXQwv8JI6Rs5zYn3PnlAV7G1spacpgkyrj1M LvICUaMgGVRidna0Cpc4LWHgPiSpAgNGygqL98fDjI2xauxoyYgOODroxOlvUBlf/07DkCcX zEGGqWoYgF3FwxGRnyWL8u2ypyr8KZ8Qx9bTMmtMnnHRLjHQPyJWuy2U9Z2JloJnjqKV0sXg SjsSPlLMV8rZOkift5SmJEjKJ3zc3kYTLhCL+VaVxAfUmljzyiI6iydU47QWmxWqCLCjONah B94WIIv38lDhG9hCU2j9PvLNIjaG3nVZHGG3qVF2ZIS2QBS9mnVI33f5Rb1mmM4qvIuYPfU5 a+bkNlgOu2MDG44mn0tp3P4DNSu7YAhQUT7g1kuFgY5RzwizWwYv0VsYBLn59xeArMo1tuGW Vl8gZB+H9pphBquitg0ph1yU4aTmKHY0njU1KH/fGp7BdITOF59GMGgM8KadjPTTQh/rG7rv rACRiQshjuYV+wip/vTn2AF2FDtX86xHD/TZVy2CiY6I13mUN8s8fVX5QO8w7/v31+y3K7vI JYOlsppqo83rkmcdk299mfF/urF0V3orbpfW36pbcfUE9hlKAtfVtoYXIZxOZ1xuQODQ9qzs BBCwkie+QTm4sTwMoxu51WCY9IXRAuGF6ACWK51FDUDRasiyCvZY+mZ4gxTUDbhgCcUIPVXQ EZNjXrCmAUKyJgS6bznj9Y9BGxded1V/iE/ia9Bj5ucdL7sK2nt6eDK2l0ZA1snleLmvDo1R LFOf3l7dtTn6K1Pl5M6XUvFnj8LmXbiTHveNz6eBq+QcW1M9lBOx7E7D6JPDLVN1XXb8EVJM A2CoIJCFwlbedqBkVYlMaYVOyZZ6DCmy8xZd1Ev5n7RCcIWI8Ingdt0vwK+qzmAV77cuTSNv hfKoBdcj3ReIb53LwjLjK0umLJDU9FxCMHCGMid+hBCgJe8Li9cjhOV4OpukDSj1frC/etoV LCV2KW0Ox7mqKE0Hc0fIMCUwPcJwejXPBbSUmjSW6N2pab2KJFRqJCLQ6O12jNiipW+GbmIk NTQsRd3H9dgE/TSIf2FSPZ9KSbH1BHajs5gNRItzJxoW6e2UwCbpkDZG0d8gYCJ01s5InQmx rHra6uOlNP55ZtitmPztztO9Mv8Ui+RaLZRO97XblvQI+QImoiXOsSGXlm0DBcwsqSZ9f6nx tMl6XPvCbK7Km4IwzXZUbAiXJylWUCz3VYk4tF5jXaJAkuAVNa5+0qLIL8cGvtDMZ9eIxhVU 9wSCYab4KSwQbBoumfrjDAI6D6tqVO2E7VWIpQUyFRw6qQzrsc4LSXN+aH6ID719ysPtll3d dLkbYwRBq4X/bHjWMM4NxwZ2PIVMU386oxvuay+B/Fj+iJUADXCMJLQTC7fXR+4dG2aZCRlA FqaLVFWjqPQjAlAg8VS89Bpx4x9xc8tHaevoLsb/lJK6Q5F9obInVYC2w8WDGK8q4mYoqNpa LdveiUWQZGv9JLIHpJk8aRl5PGb9omIYbYCmax9vtNOBczRxFFxyi4Cq6FF0iHcvQg9cOB7L unjBFfXExAl7/4Xedlmji3LuIG3hqgvcQN0B0zE4JVYjsPzxXvz7V3FL5byYMeRuGcQe9GTT myB09/W8WJqFT4xCK7MtGah5oqblOZK/8q+VJNH54po3PyOfhCtujp9nOnoQSOGWMPShFagb 37KMSrUNtaB8fm+KZaj0mQ5N+oH9aSfhFFRPKL1CYcjDBHTTSbxqHRhmB3HyVYah+RFiP8cE k+vQVFnvyhNaL7wtER5vtg70L6GhiatEoGXykQ6pW0TCeRSDoCYH52IrJtcp662yr1w/XLJC 5svzDgTxV0/MX1CRNLDX7BtQhGdaYZ/5LgzL5Rkg/7Fxkz+nB7O1k2mFoEC3n40KJNixiRzy cVXgfh+PuLDMAf09xSpv0RW7ufMSXeLZqYCVm8G9wj49AV6QPe0ki3b3oSbCTOCCFySDRZo0 zhb74JFP+AyyoPCcRpIm8+CjjVYXccAHu5A2UEvMv6h6UGSNNsPmJ7aqkVn+JVrDoEJ7y41J X6vXEP77TN8sK6TN5IZik1iwvmRpUJdZT16/L7lD49JZM1KEZK+84g0xqDr+1QFaO4GpmipF nrFya/+HkZy63DQpdBkdOIpechpn+xs3uoOe3B/NcOy81wsPBq/AkLN4JWkHn6Y5jL4lZlBe YiskNsbjgzHfiliSeu25OsjpWpCL5vDmDiksNVPxuWGOvVcu0ld1IvHAaOYhIX2icmpFZfF2 nZXWQbu5xhIT2YAxr7puf5oom/tY1ki4jnWEc0vi/DwLtGXNRn596k2npFAH5eIaeidlGqU6 toGGgfS2mHf4NVATn8tjvGOppNTjctBfZxySzS+yge4anG2wHWOT5WWBlqm19QYGkbmbYwMt /a0ECIQLrG/KnDEDh3OXXOLDgERZCGgwPAUY3ZVmdhn6TWg/L8ENwx5erh07TuOgsf52WJzR LnYVpgqRBAxezwvcyODz8514JFLOH7eSc4C9WoTThUrrJ0OzyZz6L+vhDeikVKm+y9kOc2Xn HMA4z60UwYydVtCG3I8k0cJ1a9MmXQcWNW3RsSDwznDUp1vUVrsgv6tUPU9jbw9yaacgYa2B CRajzXj3myMshP469IexIC42OlSKrS+QYcR67/hX5K4C/qaPCMUrjw5Ob0f0QDkDQYLdGM5j hugvHWkDp/KABJZn3V+cYheWBFYDqUf2avabTHYoYUXOHp3zk9dceCC7zgyGJt+1+lccH68w letSk3KOhzKI3wR3on2yHtQlHjvro3QIJ7enVdjuqgKNjy+OrO2jGnvBdok54afxAfueS8HI TMYqnj+yALIkTdn3it+BJaAqRBUo3sjp8LGSqkSfC62tuJFGVH3GHmdrIqSHyCnVgo3N+2uN 7tqbhZf2cHoPPn9K+UA/Va+O6Wfnu1rYDRrUrS+qhoTKSH60X1Hdg5+V9IxnNBhcGxfppyHG FbFKyxMcCYvaa7GQNqX2TpObLomYkD5rfmAIs7b5iN43LpUmt3qp6kbBKC+qmD9gVP2QoFH5 +QdUtwgpv/TuaLEjzxDEqSDI9YwjwKEYENEE2XRHeZYU5Q4gPp53LZc/bJaSfwchlHbpG/sR i+0UMFxI+DGRUMEkaoRckJ2yLtAshjBm1WXyRqVfS4Y+wmMz6nX7ZpLXfAPj7W0+0lp/BvLN e3IN/2OF2IupT6sjEARRYpMIxCJF9ESrc4pYutoVNlPmugYVh9KXeMlj4cLOxEaNmIVKC3+8 /hk3+MdqHD0priQxI2OLIHcJpsz2dZP/9b2cr+PKb7KkBvhyD6F18TqoijN3AdOGggdEe4Aq 5qgAK9kZln0F/XTr90qfH31LddD04Ov8rmsykVPyPs+IzsoHmZ9FbKmNW3zUVlc+82qT6swB NQhsa9MSzpr4A8ENmFtOITd9g+liQLCHD7T5vFc2zd8/gIxHbv49OFmJaBt8hVtQVRSuLfXf 72u5MJ/0JVXqHZea/FUWIYhzM753/npN4+qdqKzE5z2v0cGDYBEmd72/jIg4GueuCBzmJYvP uNJvgxx3WlSl4X+PSzGQd/5MsbzTLl1O3mYLGPbTrPCPPsIUQ8nvqDax3UzOLs8jqOUd6KCO YX7s7D/r4gQ/2a+MoBehRq8Ujd+dUvgWu7gD7J+OAduN3d94JI8zR/dASkDIyO9QMkaFKHrR RVcdgM/IFxAo3tZ463f5TE9gHtx1GxVubNYLgx+TUHP9BFXEi/EMBIBKZlPHrX+GpUTggHhi Y9B2UHo7WSwh9grTcbtPTW6K+pznUOnmBliCdNC1uQ1C2r5RXasc50GUduQoWJhOAw0gJX2N df0cuL2fBprWBWnplilIJiuFjbA3SxYhRna/CGjdFBpbLGUOxX8qF06tZxB4gkXZAk+uobNK SQPEdMvTGFq73T0SrR0+MLr66wc8TlTx2rVd98ZLfty3p4guNxVLlwyybD/KrZ9MVrv2e53a OEI+AN1QwDU9ks7YXYJCfkcGBSaqio+Cd05wUIwXR5yHqStcIk5D5Okq+yEV+t+3R/TpPzcK cydzkBf5NHi8gDzzzUC4b/vbZ7pE+St4iMH3yMXrhane6iJs6TUAPEDoMuR79apy5vu+Kp+z hfCUq6w84Fid1kUhdbjWeBI7ix1h8TyUskNMv7vqDlkF6IyEBJRceUK9BMzJIjfg0iuMCIoj M5fzVGbZzGPbsfITawnVldvk0DsGD6fRkMnYJ+0MaIK7C//QcIFvbH6lGNCXI+wcV60r6svT HLj3bfrAfX/kXoIOHdx+EwgIhdatKZ/TZiE7Schma9H7Llez/Yp5ZW3jwq4ojJXrclkmKid9 S9r9WoUbzjvfpy/S46e5cd9SqFu1q0cA2lO8UrHGV0/MFTR/9qFcbxxg0JYvknRC33N/VWfN p+HY4L/IT8vsYsFiawUie5ecKrnZhczIOyne/emM12P1+QwMVc7lgZDVI9VHLDgC4f31cLlA pUP44lbORBL2KAl7KuRz/KgMi7WmnfwJEeng2pxYT5t+7qNuD+Itedu6sWRHpCbAvHZIEyNk gaDkagRSoxSU7MFBon7Q06H43PKtxmZ338BAW4+Zcaat6ebFyXDz5x4ng8ZaizhzeGPBuhOU LWJIWPvHZ0qjkZPga1DRS6B12HW0QrHq3Yhie6yRgwK1Tq9jz76XCz+UxPzAgvgXu6Ore8Ni JjiykydK6haLWvlYu+12dd4zk/vPX7ANnvV2Vmc0gjZCPlyieSZH2Nwb1Slj/nUJLleVZxHn JYC+lAojl8D7HdXzfO5CuD3kAMNEq7uvy7tgEt4gPDDJJGR7e7rBJP8so8njp4vyMqx4uLKz FF/4pDMRgwyJLNkrEPzDC2MMA2AhzJJinKEEMuELezvIO2GSgL79u0+rawuBedFTIBUqor9a DdigjK4VA2wf0wVnphY6RTg9bD5vG/a+1RiFDSaJPXSQUDqrebaF5sEvTmKIZ/WcYvWQRVKr pIiDR8v9P4M/sjsY8wa72Dk0VSKcv5k274a+/eJCP7V/+GOO0H7JnYTHtJklZdGmxfOxuzic jieF0V/XktQET1rBtZRveBch0cEIKeKUWY+TdKMKX9lspIPRWGFALpuZg6JqdiVCLOISHAVZ Dx0qGeheOvriNuNgJkD/fPBpyz/f9afTGOboyHhId/xmahhRCvUqiIGknIrcG4u/TedDOuHV a3uxVH46yFW8nCj6DOez+4YfuZGs93ecS0cyu6x35Qb8LwoCzf5tHpc+MfZjrJ5yoKPjbZFL vsZzc2uo9GyY6jOXt3KmXEtkZhx+1IDlau9NwYbyQpWejv50MA4YXVEewYcvS+FBSEB31z4X jGihuK0Ko4KUf8jkQW94M2YrKra7k6uXPnn9GtDrN87cKY/et9+gpDXKWaQ3YGpenZn32JTd D4u7nLNXR6M/QiF3g820dycGhSKNZnix36uow8K67Jf3DxUFEPG1wr3dTu02GehWWp/OrG21 vufT9fk5b+nGMtJMspgN1bwql/1iWqaWF/azUzlg8XgH73B++bNqHf1RC0ecI/Ej2CG18Exm hDIJlLguh5tdgUxwGIJcFYV9IclDt+ZqY9ssTiXiVAX5jdNnqzPQGgy9zMm5x1xgHpXx7DPi 9rsU4eFhqQ0a4/cA1BxSbrIooRPYQk3uvMCjQ012cebxHUH46ERj6DyeEEHrMULQM3z5R7Ou Sqy1klC8U8/D3MQO1H4YOzxL6HzW4SgNvUYeSl5cK6Ql6JHBNSYnCt5ZseFCdBUfri8jmGdE r+ZKxyBXNGakFAxvPOUZXfgvzXzX4wCBg9TT349dQa1F81k8HAPMzR2cQJLkfFtaMoN8CINc llslz9qv7yVmTH0NMrAQffYDRp2mDuILu/X9/QtzLcKDBFLnVSKveAbeP+9Kt4NoUVIQ+0n7 qA+gCetjcsd5saEJSfrT+DYpnnNxN28qVTpMYpXsB0lephnrKkEVYqSYj1n7oOfFlPMoOvog WyCEcss/B4nrV0/ddHlQyXxXHtdUU/CBFiY5fDZB3Kuth4j+tco1JnLavSMHchKeeYwWoBVa TdAmBVXuqWf4nBKW0hbMjo8sRWRTV0UkTZGF7wPPqLz6RXtjMFN2ToXZJCeSIIomMiDfN9XD mr+va+hV5/iFc1tesN1W2PULLY/zrkDn44EhgicF5eZu2Iu9TFq6utMiRFyStk13dSKkoUcq esit1k9K2jBZMYZ6ouwBCLknhkukhof/XsYfltZKdxUq376PKWHD90QqoeLMfL6IjY2Ra3d2 SMO7YIJPJX+g/OG+Hv6c9h6eLMqF7RdBTSbElXsxWRMZd630J/aPZ1zcmnaUp851w0DpefWB SmnCOoFowSXtTNpzGfsVRlGOE5ohQjVNyvkVR5KLxkFCCf2tX5PJNNgnKt5ICZ6jnvkqPx8O uM29GoklIoa5brHDl4cwJ+VMuM3UrKEPwXf6s0h4k0zNvTkAvB0jIwiWLb8BWwtVT/kBO3RI VymMghszJbGRFjVNIUALRPOoicM9kz5B4ABrRfY2kpvr4jIrrqL4zJ+JiCNB2BT2dz5izeUo +r6sA6iKn+Ayk8bcy2PFS4klnoKXqzqcduNp67YvSanwiuPe+huRsIwz1bE4cnhnQwNeL17h N7Nswhyx7LzDVe0wZNSabce0TDjJphPOiSrNwz1M/HhPA/yq2MOKM0XuPaqA8GrIlSKmoejx keCA36vVsx2j+s+GxD1/RHnGfOUrG9y5iJ0bcMqBVBNIBDoZP4+y79vcrb1whLU3kO0KbGzL bI/ErnFftjqsIZfRfndgEYZzYcreM5bsljhskyHdLBDnSVVDeLRfwDLW4vRHlntB7GyoQagt uuKIfbE6nsH+tOhgXftwRzh84MVfTcIaEVqkGepDtn8JzVHXh8405r8Qg2tmLrABp3QWXZqX oiRgaa7a9RwrncE30Pb0jLNzavB7AnNOm2Fbr9QhGuD3XAObLUmq1R9C6MmNh9kqw8Jktr2C BH2g2wkg8OzIvLz3BDdOgiGVgwaDvtKIIHGmNEvlMT/qlNGD+ILxpDLZbtqQgRlRuZquZ5Vh 9k6HlstTZJSoYeXqMCTqIMhjbJevPy2JYR480sjJHJzVkEaXyNEXxcRLGrk6ec8wC+7ZMx2v EkB7uy8pimp9GgMPKB2GvzjwFLXAu0wg9KrR5J/stt9hTe/CgN0DuWFpHAzkoaAufdZQpu++ cXd9uKd/sqKVZYLihzvHOaslDOU8/SMUU49Gn/3/ARFA7r8lyOiepb0fUMn5ikjXRfUo7f5u UdaIILaDu6O54eDeG5r+dF/dlxb2i9QOdjN7svQ6wRbNs94b6rvIim/RYjmwJr3ImG/lb80L sSs0J1/am95+5zPq3izVullvXwaUsSylPvsF9CgUrVag6Vd0EdPL+YDbnoWfkq/YLR2G64eb Wu4BF4SNDspEqtJN1ad8uQqz8WL+Q/Ygu8PCbwvrcXRQg7Hn0M8adAtrWo2Z18KOs5a9z64O mWDxGPiR7UU2NWMD2t16GQe4vLQYiASciHh5sn1UyCrwNrtFfJpppRjkMC/UP+kl7u/A693T uTRSnrYv/M8/LJ8RKUijBXX9hghT398KyhzwXHn4ngEGkaWLYBByFNT1F5jl2P+XU1aWNTu6 5jgd3NMZu3Pw1gn6pC99LLwzwoZsGQQ5oM2DbmhY2IVnt6tYPI4IjvudK37wT/O2r+qDDNBb pzN6Ty90JCPyyGWM2f9VktU/jXEYhTav/voAtpcsVQ2GwtYGj16gdsvqkVShqXmqpn9d3Bwv VwvUHahwsODEVMjFdzUDiRIb/BKntyYhnF+c4SNn8GO4FBiS1m49JyIGVQlC8h5yF7cD8/V8 FTeDGmZn2/MdefUmWYzCnf2qcHes1j2iF+r6lBjo2Za9gyxW7/zJiMc9NgIyNRLV2Y67X8bG +X6Rwg3zxWPqu3tM58tqaYUTwHsnFv2XGQ0dqDlxG5b3ExzWAZ1jmfw5iDulpWCZT8+5y9by 4EBTBLwaRQfBF7dVSaHp85JpE9pLwyd+/Zx/PdT1j7SyrkZL7PWGzvbjJ7gFFuXPkyLV2Yer CaVW75YzAQ7Pb9IpPHNIZ4a3sdlf9wJhdJxJJzBuIXExHetKumZVmAahc2IpsvU6MnFL9aaJ /LNkBI0Mcatwwli33j7tkepAcFm61cZdZrK3f6+JsSVqNMU/v6+2G2vKVHi1fuSl3oxp7X8i br9kS7E62YmVJbISyIGaDrjiPKWsg/zP6lmccZIexWtygU/w32VwLkp6c7QZILovzod3OzDI hEdDeauwFD6py9Tm6KDLCMqyWxvDHdAOJdxehltRrbVZWzM6BlnIm8vufocSehKviJI3K0XA bcU01vK54MnJtK5qtdVndk/KHezTKOzYmgTEYFtpo+AyFnBYMR5HvDVp0onY8/C/F8JWNU4C X5CUdVqPn3wg6uNqYXmJmeHaXbfdiWlTIeRxI4C9pmtSWU1YigfEYYaICV7VmpSNBgmYb2tu gvlIfJ/mDqBST/XGloBz0PC+lDG9+nsor98FBcB+ZLLUzE0u0TGduWGyUVOKh2+WQLusCUvH SmNhbHTZYWbha/jwiY5N+JsyhJGs9cDHdcJa/09QBHH9BCebe4ysXGjCuQPXCftCKLDS+hOR x/rDIO6fPwmD+viwuSC0IwHySE4BJN1yMPUrJVRlgMm5BujODcKYF3nQLtu+HHZFmwkZmPvh mRNqJEFDNHXMqo3UW0+HkuUjc5gmdQhVgWOfrIKOAVLzeiSu2cEJX32uShHT+DKxu27uuawa lzVzTGFsrCQfbfDE7udVpSFOPd4WH6XDyr3VxEfxf5E6z1khzSNnhd9L1TvJsSyc0WIV7v1z HD5TgHuylGdzVQR3C09OyEwgY2I2YlF5LXS99nS4SfGgz+3Vs+7aszUEQZm3IhaAPclpTmeA KTkzNLSzMl//usLg+KwNvhiZuUISkNCp4Zq2COpegW22qQHOSURlheuEwBQvrqUFneby2ZUb nXsiGwI0fUEF9ZfZ7fU0H23aczY22vW7OwdvnO3A6L20zRwBAbfNohk65JQuv5JMeG9n3Son 36NHabbtfXyWvFJ7iGhCQY498pMmXKEFiBqH4VycsOpbm/RcljJuw/AvJsjgbdnd3ezvGACY 7qnVORrYnhtgsL3gZJ7usD6moeiCchhswljwKvem9OQkLaRIAgVCwXIkjAgP3NHI3dE2STlO UW8f/vTcwRE0t+8m0Q7gwUTcZnidOXJtkw5LsDpH1GpnOQdVIbvJ8A0a2S1ewn+yZZ0TyH3q wonQkrxfuRS12TtJuzCC/yfrb+nChQtsFo8tlkUwwVnrlwGdXovOtPPn68kjfhiBiLLWy4qv sunfSSIiv9OEVboHGFE9f/GnudCFK3tSOnAkLOlT1BXjXOALiqdgjGp+hOX2KRlmlBXY5Fa4 818+axhOEpP14tdjC23/phj+Tc0Kh2YOLUisGGaqGRo84xB6UCaifOViU4wUoHcUHzEIf72S D9wNMudfPOmM4PyIipmGT0MkDDYyrmFyqtTk6/IBp9IxflSrluaNYTH1jXycmXl8GEAeUP7T izYN9YGA1PQIXS77Z33k18OAYLTF/xgJYholSYthW9TNKzg1SD/rh07DjGn+aX9BH9tM1y2a UUSahAuEiR01JEpXxI7RdX3eFT3yciHmMMJRZyF9lMgd/dVM1+z8fityMglIqXqRekEXrYem 0grw4ihNIyR2A7L6oP6ZV7sipkcjtNTPBEjgpKNZhRs8rRkbO/wbfdZiumi4+7/k+NaIGalB 19aUWlmYDOdxB2uxi+EDkm5zgsv8SO9qKYOFfiPO8qkjyN+vdqYSha6JXL6RCei0+l8Oy93O /KPSI/iRFKatg8q+C+uFDmpAu3v3FFX/pqe5UeM8fvXxq8jk8w0FGpkEjk6Dd64FEggWuol2 BcdsXaepBmT6dcOvMH8mi1ou1YYBV6nZO2tlERBc9lOzN/gI/1d5EBReq9VUiuuHYpx81SKz i8L/yy6KFk3S63+kUitJkrw73ZBONBzCrzQ97UtcSwe3pxWUzkymDEP2W1wb7B/nqeZrScTz UdV99oXYE7g/HXCD/ic0A8VezFzSeLm3qfwij2/g4SP4HmDnOgDqY3ZP63GP6SBMipAE1Z6H cZa/Nno2SHe5akCPjiPiFDjkRrbuu8D6/C9P8cP9LDMl+d4jZoMWjDMpfDoja90A5TaJLv7X 3FnJk0GjCpZGGktnxlee18QpCiFvi5+ikGOmlP2umWKKpqQakbJvg5bS+R1n+LqcF4DG+aaq ejW4YUhRz+X631LdqPKjkE+VyREG584VejyHPdqCRHlwRgyN9LqltSdaiaRmXTCy4w2NabtW 5zeaS5biIhvoW8LgYi7Q8sQHNN4AjDN7Pkc8KLA9bliibWoE8Vm9/iXlBToCyAVw5+oYRLIX Ut/LdI+JBn7cM/BomTrFx2hJKrYn3uj3RG5NGLI7ljpNOtzFjJxXCTLhRWuHOaOepVYdokBH Uszcmr1MP479oZXQZO/SYupDDONLKcXqlxZnnsxqcDuzmJMN5eMsvEzbACn6NpSL2UdmVh72 hzaxOJ1sv/VELQ0yD8dSmbp2KyEFOtKDS3zCJntgzhbm5fyjxq2CCiEfKaZt/y4YG8jmPY3t yTYxuNz8/PNb0Bm71YCNBxr0t2j4ZuVAmzVVrYZQMZP3LkyxdgD3QnRAsdsMpM22A0JX8MG1 jRLf2PZnDNzDiZQCKpeHKPBUXR4adsoRhtk3A9gNsKztN+k/lWXN8LnggcdabFqmbjK9DbLs yf2OYVir3JfsBxGPt6T3JxvBLLcc2gozt7eIlb7EAoFnHtioC9wJ4MM7ab+iz27uT/mqTuQK 87vfaMxANOBTBSqj1UoPa9MFQeQGwQ1OuleJn6t9oivJ9XfTxeidlEfIIrydAYJEK2gPopaa 7Za3mZIpU7SrBCb0rzJWCUNHRzXY2hqzNUwVvTqY/CFCtgFr+tNLDC0xNKNcm8+E8h1BsFtj zg+YMq7D9hZBEKbZZg6+GbLsG5Nfwo6Z9nbSRepHtL9qrDS3z/VtICuXtjf+gCqFWShUgwhg 4JmUESJTIwMvHUsSZn8CIcZeI8EOZF3k618HtwKOcf7+LDDhKXCpNPEquNT/RpDwWGz/SInu XzONPEgqulevPZ3eXwZdAZXNWiOR5J3ozoGqoU8gnyt1qNZlM3f7XTw/kjKe5bodHfdXxNpw LEml5JbCwUV3eT3X1lwNTW2QeTdutdsWhubop+xNvrmRn+u5gvo+jIYlnWicjts+/06CjTI4 gvuQFsGVI5W+BvOFOljM+WkG5wZCLxQBhdCxsKzi3v4xzWdLIMAqOWeHQWFDaCxP6eaypbhu ub/MkRzKQwdGyViFOVDlbzYRgizaCfP0uz/dkAvI3nG51e29kpaUaPMjItladIShL4lraWhE tbcXiOkkm5On5Dx8Med3mqbvjNFaMJ4P+x1nyIVQE3jPspULbudjcSUsFQLB6//X3KfABa1n WrTomX4VGuMOSGOlXlWD86iqXvHO7+uGnNr7RNdh5dhhiUChzdugOKQ3NCvR6RBaLgCs7tQu /R/gP1qgYWrvSmRB8zpVl9csLtgh3yFH+kdlr8psHKFIQo9LTbPRQpSx3p/eBtRdhmye6buB D7vN6ZxHu5pvnaZgJf877SYCp42KUBHLd/BDTvckUJS2LlIhSKVZEN6JYB+GoOCceDWWAx3f CEDDYrW0+DcTAPBK1RZ2CmIRP4gj324jDjrsde9rxO2NOsEH/cubcSky6sIjd/7ahKn9Da43 Fy9TxATmfWvIQSu5in/MR9dvIuXn96duo9w5LBv52bcG+5dYl+4QNQGi3jMLSRqdW3QdbhFj QV3E+l7GvVqq+FWVaaEg+boh5yV+Ajrr5aOqLTNgsG/5ZWb6AvZ9Bho2K4+cz8rTDScP3qpE MmXvoitKt5VpVnh0McV/++SHXy2OWElPSeED/5jZakgUzwr+XZ+uxAu8hPgtD+aFhDSXB+s9 Lj6a1bTtEizjZWz9xrcHaZw8ATGWWxu5cAciEWfzfefFZFct0m7nZAc4uIC2mMRZDjexhlkh eJaHEusYh9GwRyiqSTL851xhLBuTV4qS50hycSAR2kF93ZHKNyLS45UH8vt0Na6NVJg3O4eK rVNg63uSEe+ErF/5r5ykXNXn20TYD45M253TQfQk384Zrjlwt9kwXkh9z/fW8i5+gwr0GbHV Oorij6So4DBOLDrWZEsXq4oPGuwfl7rxdKWDXH8zwePeUhpzPqHkhyiblTHd8VLLU3wgFnDU NVHrnwyFb71K6o8mUBkFUcIZgFQl0gfGdzKVmgxy+ih6zzNU6hQNPqIaealUIhnViWrKAbKY mQYBLQAuyK1dhleaZTp1I2YAJ/1eMX3EjxoVeQOBojRN7T4DB2Oe23TbysUhS0ofLRy5J2QA PzWykCWetsbNgOD2f0SDE4bcL8piv70D+QfyLcJ2wKefu5o0rNC4pMSwevb0kuJGY+DSmQAB JAWnOvehnVfO362JBd6QkO85kUIOfkwGnaSUL0mIR6cD7NKYo3NtUaARihgx3VEgLcM4veRu jceDw7KRsmtdqLnVTG5VX7EvNJ2NON0lLfkprVPBpPEMLLxzuRMDt/sH/XhVGNY27m4HQFzl p+pcD+jY+YOzQGZb8u84o15LE8ciYu3DZNc/e2YhjS6y+1C+5K0tUnikctLi/WNwTrp00+0B UUuMYP+Od2rZ/MzKniglTLsJuHY49XFh2iyeCer/hLrtsOLe96zolZpdIxQcEr8xFVK/HxBa QAMqRo85yudLMMbOgpJJHzCa0Q2NTLA6X99V2EY9W3sX/7vRz6kdDiLVRrdprkc6+Juvy0JM 2GnAiBdZtN0FQa40XTI3hiQIol0B2ahl6Ohvt3scI5f0SMRroWQPC+eAqQJb+L1utUv/iAcS X2VVex6ZSTpv+RcSWYTVdgh1kqOQPm1CaKZH6OD0wEND4arkCwbaG/y8AE+DFJt7fkPZRp2e +zx7gOE8Y1sbhPaqzaSeJDcxFRdZmW536YQzneGzOdNucf/SbtpUJo+dE4sa9lSIHwsxt7Fu Is7VVYT5oK4Qva25ltdFDR8bHRfWqZXOeVlG5rhJ2xbadtS25MmwqB/SwscDMf+YZ3qh971F XbPg+fpNqBwayp9AXpZPA5HNNgo0L2+JQC/pIhZtWkmtN7z8l+fCn58LMDyfj9pj2MXcb2+q cYlHdpFz2/D+nd4MDrlYlUcroaRb9ETk7yKJLJjHyKoHmXIq3+bFlZL52tba4T/m0R8l6CS1 fj4f15fKCcceJ9DQSlSEHGLWx8xlplscPAuMa2A3na1sMJqGbXy4ihwgF9eM1nK72um2da6z U5t+ltF3I4pkacwrQk6Es6Ac7LsN1oSvDqN0mW6wo4lbGkuajtwjFDimnIJsq2WAwARB/Z0z yo42oluM6WFEnuIkLlnwR0sLSDqevSbc2MlqGJgOJEEN63cIQG13s7I7uiH+9HK1F6ieSYSI gqwfQyYjws9QceJ1XPCAsRLIHem837r4JU400zZo3EFFS05+dTUmxquHMLv4oK6GN8gYsc9p i5ZasoIlicYO2G9Ey5KDrfpk79BFy6naKauL0xkSpPkBIUdGfVl9gz3rCQFw0HYaGEV5TijJ 8tNMnVcF++hVqlLmrYX1SOys9ZBe82uLyPvFlvf9KsCETTkNhhn7GQsd7OLQd618W97ZFbTI VKsn78+7mbkB6Im4EesqR0laUl3XMvrJ5aMJzlqD2DzXiarCv1aZAapJWXt8QGdxyBx5mggI +7PF4yZEIwPyK0d8nBw9f8lo2hjrQK4Y1uk6ccXdccEvhPusE6xY+nawFW8OOU3H80j1Tvb3 jlvUN47QHIqd9CsaMHYCtcRBq8IUPb6J/cn7NeDmNO1cxT7jj4EM1jhkN6j5exMDIVbk9VsH RpvM+aSR9wG4M7ejMdErItHNekqNnHOBZKQ/KapX+ZAI4Vf8Q3gANHfhdOT+bM55KJEpXaa2 oVBh4nVZhxX5bZEnaSLIQ90AIHV/7ReNKtN2Tgre5dmHlfsKCMgLB9z7elNSonQYY80W8HBT avkLmBK/v1d7XscXBAoz2avramBq/J/bVBwb3n1emibMEgsq3crNMJjAdH8WqrI3rhxlQobp cf4fPwFkO9bcEVQi4pStzZShz9gU7Dq37SrcekzAf3/hiCmB6yK1//02qHvgRicMubo/XxQz S8CBM/29CgTdDSiCUJ5DoV8tka8iYImcZAgeWEZhDp8yPNfyOyTTjwkHuy93M0wvLNSycSlY OczZ7+eGWCrc9GLc1gPBOvvEczaWTMZrJmpqETPYFRoAoJ+IM+geW/dhCxNUNID0kGc4EtWg jY4vdogfQ6EIxzAUwe1uoVIlcZAOQ5jTLagoPQppFnKOjeW7RZTsmngHGPMLaFjb1k0O3ETk ysK6kLnUXhyVaMDokUikeRyKlWmOJjchuF/U0k2wPXWSVur3fHn6hW9/v7PuTos+7oo8mdfp lHAnJuyUl82GUMffzwWIvPeYJYFW+zC6RcQF9rgD3BVm5yq47gJvS0ZVDS2T/Bt8nqi3V1PV IdwUUkrMSuD1EHqAJaSGLJPIFBY6IA0O98sTnQdFVf32Sd2SIPJb4MkptnIQuKUv0HT+uOhI iWMEUEOzzwlZups+prSCPUmAA3F2+vjAoXiLCozu/7M+oIk6chfpfKV5SLGhr4gv4Twx/sCJ FeZrmnrQ7EWsm838T1KrZXgRKzOIXaWTm/pDX+XPzTkxywfi/SSWSSr5DWJ/YbfAToxVPb5e gVvCEEeB+NaxLXgix/INCsh2NjmAwwpUOM+i+dMneqTeEfsCeEeXH8wsL4zIOLQsrpT7XR0w CxO8QJrATWmyRJrCJOHGubD8/3TUlbv79asZGZVSkjCDO2wdYAOAEVicY2bYgAmnG5ZGZIUq 4LQClV0AN8JyqWCrIkDThwNHvP9TI72/hbUbe1Yh7BnEggdiwlV3vr5EFJ22qHA4pHoWGKam 2fHdU4DoukP9qIoNtK0R8ly8vOYbsmd6N1mqm3VFfyp3fqFVY/+q35FuIooH6TQ2rUJkWRC8 R+0h9NdPrhtWhGKx9rmpGS4Ql6tCe4/bMMBABv95KQUeMvbwRw3ijstyBRHpdU89PvgDESdA MJG2ii5SWVSD4qRqFQRPr+J/JvG6XKouzPAIqFdaQsRP7AwHvZwdq88p9HA8tZk9fy9qzTLb blbAEQnxcN2KmhtuA+AGAISHt2qY8roMNpfWFkRT9RGQwMPDmLPb69C8JslHJTnnlGYAfHuu 0kkIAeIGBkVzKqJehep+tVNPSvzpzQH6Y+9S3rVa2yTMIPQWbstQeU8ir4Fxasz7/n4wYole 75BqnFoLg1WVrxCOA5XoTQQxNvlG8qTIDCMn/VdLWoonNt9qj+CfyMWerXo+FlM5QMO6AUe6 pAsOyhNxwcPaoPFAtPbRbqjKXOzY/srSQ/DRb8I82Op/TNfeluE+ILTgQXlJAHFXvUQxjfTI JH68rLJ6g2sa1zaqkaDOAlqKWljN1wpgyrUcK/ordLxwDCeCFv1B/fK9R/sctErFfTewY1BE HKbRAJrpDzb/8VeCtx/ogNaT4v26fX64Pyhy4mhYhA1KQp8xBIetmke/nTXHKkhvLhAYhgz5 Ic4VgBPa2BWKGzU8HJYdkhj0XMObwrgYhdWup4klZ76kbwhMynggk0ej1e0A9wqDHGNaRtZq LdDoOImma3EvCjNTSs+ssHTlL9YX8ZWevTeHiV+vw1qA+FXRfT+/AqJbwWi6pEsw2gFrJe2T HuS4Wxg+gq9g9MSbIX6igGM3tl1cNGUW2GCu69gDajXcf/l7TUhXajQvA2lpULY5HbyZTJFn y6tuo3H9iFiZzCLVdbjpAPXrPJc+gtXkNmB4SlV3ILkCdzEvFPtp9R/8JJ6u5n1zEt6d4CWD T4UDvC/P/LDZERTYJ0CRRx4so1Q/wGyWSlQd9uTP5D/JIshXPMmY8SaOi65830r9qwS8TXA+ rDDsCjcdUIsMttua8nRRXM95Qc2LL87amZlNxbSAXVlCFj0pdrMsQrm/LTnILwis53U/7Fpw o4e00srF8CEnMwZPLobTACD01OQ9anu5mQVvFzuvA9QZgBYV1sPXqg3JBC9EqNX3PGi5cQlf Xv2ftMxM9jSLum4fhdndp/xQXUUCVV9xJybvYDsXhEU+tDJlkYM9FmZ+OaF8lR0Pwki36k1B dYywhxpHsJzwsljjMO3j/KpajcEICKzTnClULWNY4YnG4s+8wpMGTJkHjv5tArhBC1Ljqd4L QSVYhkXNny8gD3PqgCKDvOvQYGy8xLSHLaMzlk6lb3YcgZ03QVM64gS/yeG2H9kOxUyKZxf8 fsZt+xYdxfxe+4Zw2n+5qZkGOb2pBO6ccmd4F2ti7AOpSfIzY161vfOfbOA7sbo/jr7UM56L Ghk9Qd1VAuD06D4ZYVMe0z0ZofupeUEBh+NePUQ6KtGh9R+SvFu+1tXVwx66ZHCgFVxigWhf teoHfH7ozHGqS7hNrc1Hm0O5TV+I9XmHrb76zSusdKnAG27IvbhVK6Aa7q8dMVoW1isdVb7I 41YNriyLKK32csXGAX/GKNa0hqfeFX7TyENeRjxlB8hAAn2hvbBJvupwmSnnDvoZBjrDFnUy jKAFM11hMnjhPZBHcqNa0iIajgzhxWwWCjX7zwBMGLP8MS1nhgZ3eY+xXaEKqLHzorHefTZ1 XOH5rlwiqsXI396KR64TPuvpm5Maw3hKS1pkXBiDffceFqvk6YUwFYjpOZHieFTaNoXxlg3J SEd2yz2OJH0ubUfrVt29XKQhDaI+J99coIYM3jHdlPUM2gSQRFwjBcfac5H3Xh1Kzl6hKJtI LxlNzHpmOtE+0MvPDnv6LxMEeMKgphQvrZBzWL604nP9PiSn1Kw7PRYIxIKxkMf+sE6PLg0R NlwAXsx3RqO3sUUH9Y/qUH8pOeR0qY8ewk/+1qggTbSsAC51YvQb1cbdbPqxQ2HYBux10NTR 3Eep7tUKqT7a4wA9XBYcjoqyzffF8irpXuwKJM0JxXDnIg3TObozSfsbipV/dw+9vE981/jh q6OtkQNTE62QoY5cPTfA4ePSdhUhxX1EsBNcHav0ty5vCbbL9ALXvcLCR0iuVKBdwHNDwiD7 PnwCgdvN14CXuQtZkhck+7tdqz1IKdNlfcDF1JZAJiduSZZWkMsUhnkMrweYak7ODfQS/73y ENgdH3sk22wWw7xLqMS9gPTN3cmkqx6W8P6wz4qVz2Z7dzTYw6reChbSQZbtFS1rdpIPRba+ eiqLKe1nIKxpLokyNn/UE352LFhrzPUdL1hAjIiPVHxVwzYIqEGN/nvbcgm8fEpmmqLZBbi8 WuwcS2URv9ODkERZFuDp2+ZxMRbeAxvYSV/Jn1lOjhqdcifkZAKggaNZiqhdGkDfUxhbsaN0 SjMv1gJQNx932QujnBTljKNIOm1JJNArf+2Ue67ObQxuP1eaNZKNYFIgmaVN5Nb2u6UPyaAE 389TqxCJqRnbXM4k90koYx2cXT2xV/2D1rbP+zRnaobIVSEnVyp6pgTNikuOnwxLrDLrzMg7 D5kulKO85QcMRlJafd1fZTNIUNJiS8jwo7+zgKE4/2BajnFPSbZNy2DwcvNRgq+Ka49Y+ui0 w2AO+NqBTFtyX2z8XVYvnP27nXno6CNTG7SNK57k+HeVsCcmqpGdpa0L9b4+jzx85QiXPwI3 u1XwujSOh36eTJLHCkyaNlEsdUy9CHE/OlAmTsxswhlVQwZ4DsI2y5JmJDs4FQ31tj4EvXKj qc1diE7twDXY0mhlvQdmgt28gRhFjgUTJmyLSeQyvMMQfS05KLTXYWE/qkyyYg10JqYbmxPz H8Tk7iZX1jAtUIqGMvSFyaTdljwE7dgyzjYGhvq7sBjtFao3UXmGy8JPcevy4hY+raTdnwgC YOcHJdJ7764Ux5oB6It2NjiHrwVZH++7FoLsQZIKS8dpuxLxDSzIgdUACqK8BA8CmWcJm86Z hkReSFU39AHk4BL7XKxzPi5GfqeLeiCUu0ebMMinYXjK9iIyw5tv7V/EctQaUDVdg2xLz0sP N7+2E/D3XR4nXo54goe+/k/QTE1B/vtlryeTW6/n+FbjIGJxkLMgIz4jDlBPWvcxkTK9OwG6 Z+7lpht6jjlQXuk3iYqHEePF1pWU2aFEJBFkTF/SXa2Kxk9XPI7d4AktR426sxXmErRXoPdt mvbRNE+PvDuzVtvLzdKvEZfYoNHJh4nGZzuTtsFEY9mwgMuF//A6mCpkHyKKKJBHr5VXXd1O UTZQBA+ZrpainWrHVeyv2fy/mXJ7IzhltQPDNzwpW3vf66XDh15xUcbGs5ASzt89tRlJ+UI5 ISyzM2EI4/WPSpr80REvzwa6gGo5F+Wk/Wn0D2SyIWs7Ke3/6gQ3U38mmJv2MoYQOTasieG0 i6LwVcO89tn93P+nzl5vocqyJdcz4SMwvvmJNUy1Zymw/nKtOvtuhbqJfAsAXuBELS5IfJQl xQ7Cel+hkC8eXcHQToeA1JhNjPyitzNsiCq/Wgh9HrjHTb/y0tJUctglyeTejFY3X0hZs44u kZojgRhmcyVgmS97ijmSzMcq+mLtchPgGGkupcq1wyh8ho7OKdQGljfVJG5kjEQ6bbEi6Blx YHpGvQowrBDg7UrDrGp5Uf/UKC8rJ1YBNEFI4s16qaAPz61oOgNG1jPNiwTfDjxfsvq3w3tf emB2XYs9/Q/dhQlkvcsVU1PPBCO/AqYu5OOwplwjC5w2jiPOVhNpRo7Y+JesXGiusIowNNYM S6agH8VWTEkQz4o4lh2X6sUNUgLhWQQwBnOAMUrmoikxs3TxNcI4Ynq9sRVhyWzm215wl6yD +Fqp2F80UInPuMyWXAZNtfeyEKFvGHmYuGwHg7e/C5KC7Nikqu5wwLQzjQvXxCdax4QoBtFM oa5DTeGreiD1Fq5xWzOmjQr4hXauabiCzYEvOp3mqlsoPOyQCXEDlaSfRlBd4DIB0kjT/veS 1EzXBB3bKBdJzX+6moUXKj1jezfwd3W24a61YcMYUexCxyKdorxSLD+vN7UnG9QciUXTsUYV wKmDTfxH1MOQ6Qp71udKjLCjNfRK/xqou6YiqgQJ/kUIk90K8eL5ZDXCuST3i4RrobGyv+Nq U51lLmL1twpjjlu8ulDFOvbZxR3jsbIYBDrcq2Ct6ad15eMEkej/r2yBepQKHeeS2PC8aXYC 5aSRpOhmOv20I+JG6loJb77iTtpvaDjZ/mDiAfoKACm0v1DA9kFmJDJujAK3Mnqba9+ewgsA 9ZCjO7Emz9NoDCpvQkGkTCCVyKDvjCSe6ChAyHHMZeMP4VVLJLSNjJu/Dz6aTEAlZgspeBUC cikhX21CbBAl5lqf0leQOBWTczLL7UVb8YxqQIs+cYS6smzPP0ebag7QqEy3BU+PdSdLXagJ 0unnwOM7yvy+1sOEuelmOhCORlO3XvDIx2uhsaG2jZI/5eeyQnuMArYmiH46yca5SK59alYU xMGBuaFgmr3jnhApDPWme/b4kHjpdeV47hK4Sbm//smoLjCqpwIci2dbIDzOcEh1QlXiR1VA JLIXCSwLgaYpnO/UjoHTfIQpjzDMsc5aQ5pcs7jOz59yP65oXlg9RLUcZQXtBQEp8DmBIdv7 Rjbm6jI92+PqG94TP8IB/5fkXZVYQjVFA0pxg/RuCgE9/yLE8/N6MZOxfDyj0KbiN/WCi8Nk Ka5FnCVDfDHPr8x4lDwhW8pqB2FWPKXOolyPyAvjiB7VkflP72sUE3jF54JZ/cMZyds3B+2w KLH9ofh7zMsR5fEhkq4Wq/fgVjiGIjg90LEg8oFBJXbL7+891PMFtU0wOusDwzu77LFFVh2E tWwLuhffGjbfhvwbsjWyrQ2+TYPz59hqtiMQxYpgL+aIB2iOM4MdJjtGe3kGPeZCnyvLuHxX m9srAqsB2rA2EFEeloZeEjepQ0De+iI7s8rGhyrfaFVFJXBYDveKPVWrX4KnhIMMHYvR85bT o7MuuZ+fi8Cj/nGXCEjlzM4Rz0RLU5P3oMXtfJuPH7ldWclyAoHlleZwfHu4giFEChTUjWqG SgpntABuRRPjLs3bA4WIX9V6eZxwx9uC3+pD/Vicdl2kTL/iwLqVMwjGEtXQaybZaUhBBDST dg7xZv4jHojcYVuSSF0NunKXEea5ymbro4/QElwQVapPQ3pzEtGRdNU4TSJh9OiFaeOV1sq9 pjHUdqJiHm+7wBzRY2X9XhaU4U5qNrzwuZLLMIK99YckeT7MT6G7pu3WrG5VYi6M6+LTg4f6 EDFTjXznJsa020dfnh+mMcI8yF0sZAiO/XI7Bk1HEmBcGW0T9eJy2lOOiVKgEWrL3T6VPiVx ElWtV5fUJuCyKS83Uqc31aIGaF54BltDDWRUeesq4PWmZuMkF6XA5k2MAReeNzBhovXkEb4Y bSBp7qyNRCbTy5gwMZ7lMJlXiNLZ5MJjE8htdsqjqKsukVYNXezjLsMhuM8Pjfkvy1E5kmnw wssuUpPqXwJZ3bLuYxLCeiz7c+xUtAs1sb33HdK2lGREl4Ue8WYFBdvZlApl3ANorwgFPqMI nL26CUYJ4ly3mshNUNHHXAeaqJugXx2BJd3KEQqEQGSI1BNMjGWy+77QKkuKHO/8lMa1/wNw MXvk1AGWWxuWbseNmDEclYLcru8UQmMg9RQ+8WgjoI/++b35Stwc8i5IVM57MWpMJFAW2Ig4 bSd3Dk2vGAxCMF/aEQmKGb/ezxSlBFK9egvST592YLQF7H4PjnUGSgTTCqUK+F072zcF6JYV k3y0u66O9fqEXcugFMWi4d5jFKXoRj+77xMpZ4M75gDsNwi2nI9BPz5UlC1CegBKsSuD5v8m OgALvoopxhzxxUIFR3oSEGm9YEG9B+jI72K4QZVZcwQ0NbYHXsN/sbRJyrqxI4ieuB/lG2TT /9cdAL17VrMyZnSJkY+0l+7XMjJNlc4UKwqSWObpL1nFpO4LP/lWcWBV9r77FN2vNoAhkQSy IZfqBKVAnDcP9aoDceegV0F8zCf/SnQPO9C1/Kb/bSud3nTZIbldF/Z+icTdYTTKjZT9STlQ 84vHJoJbaNKF9u32GhSpasgmvcqRJqMmL9cqZxpp4QulHfUtDJa1/4Bv8Ey4WsPH6udR5K4B PEzFlEkooIhLeJV+aoFhp0JDr+oDavmDNkdPT6H7j2JawnQ+DGwegskoLBN0GnVdaTeE6E8a hpXWA36EdsHmwZ47J1ofdk70QgHe+dk6dWAccxHOZbZQj1YYrkWTXHD54QfbTq5jJ2LG54Rq raNYnP2qKZ4TvPhT+mW0eg2PGWTJ1wjnocEdpBdbn2ODu8VlpkdK4tCMz98vDYC+71iBKA7g zXEw2U4F1leBrAWkgExrmyqnkjrNuQApUiPJw+0e+Eyx1f6OPjEu7zAVqvY4HQARISsaAY01 FhIjjMJDf6rXSiq6d1+oc41/ZzGmBuE6Z+t2NXXgndFyw2LfEGHvwAxHM+MMpMBbFTLGfWsV lkGvmZLdEtCEt1J+8VbOV2B4p2QmB9BTliNeDiL1N22zQU+G2FaiRGQDF8ncrz9kBNMTtzha sDePcAdqreUOQYUakgvz3z2dIVBTlt1DbjWZie3ES24HZLCz0Yy5cOo5z4vRrndrp1nZex1R 6jOgjj2to//7q0JXxpN0vPDiSd8zH5Y7JPIG6rNYdiCIVcIiQ4FPzZGIBinRNyOfkOy1WOyz 3i8RbL5kQ1pvzwx+TAQbI9Oy1U6a2TkwJ1yCZlv5TS0Av7yALB+KGqjTH0HZ27oKLCLYmvOA j3qRdDuLX6RkAQc5wFSXYeo2Bh0rXWAFUJBaL9xhPrxxgWrfqysjdeDile2JNHw6md8+QS4f kibnEznOufmxyxNp4081pztUQFLrKQIHAQtaVVpB+koMir7uIKTN0OcWgdWs7UODssl4N/iD 0MZQGitosMiweMbfMsrGlVkpLRbxTslj8iBCD4wQTV5gsStONbvyFp6lCE0ujcqMer4/ZVkM WCAEEwrQYc6m8aTSkFEzKLMl6kNBGMtMvUt+3Nu14FSNAdom6C20YbwQB5n8tozRSdXE08IB +4+peSN8NULTlDAcB9zG6jCz3zU/EUVLi9F1Hj4iPbbJ/yQcE0dYTnRwROQl/62c9ikzsi7I zUhNZP2WryXlTNvtQCXB5g2bZ512GxYiZeUKzYROM2feTSemMRoNXDmXpeXTv8Zy3cWPQVzi TTHNeuBuMN4b8EybZgFdmKxmYt9G/o1ORARTWOY2zBANGjOGtoAc2v8IZQK9m5ByvQzhpvEc JrC2qx2DWVD1JNI4DMn9jFhbJzc4ouzvTRlzOlm/Vf++LwqGCoAprVExkjOUS/gkEi7ki+ld Oi1YZUDYb9B2MVpBA6GnHyS1v/dduL0rup6oQHQfTjxc7eeY2afzbZPIXVS0B5LHIchWimj+ 5jZD26lAfzX3rYf/3PxFA7i0hF4zWj4POYDOsEgakl6Gxx9ISAb6yontGroQrdPHxj25Lz53 tVzikQ82vVHoXVRkPWjcoPPUYOa+K5wn65ogz1CNUgjh4wGb/clxCmyfVa1mPzejSZcONuNJ wd4OamWRcOJlf/jpQMuaNSyIMR8sDysW5sh4E8+BNOEZmb8L42k81k4PPxBgd25rCxoF8Fdx GHRFo2xe5HIU2I2WptTNi2bKYGV8oEBS2uW6N4TUcW0ZnrBTlrX0zlNdvaiArAayMa7W13xt fN4c5XPMGGCmjdrnBzmsOibLazhmiRdkKpEjMjunCPI5OtBR1iinf3rV7zERKTwJHxAENhzO KVJdqvS758lJj/PqgaFRJCECMozqNBxb2uA97Cj4odizf2Neyx9FI+NWCc6nUcoKJisWvGDE 0BsL73leurlgj3nZwCPlRBGOD55Is1kWz5prr23QdODIF6e2ltpQ8iowQDDUlORMGrmorTa3 0ObjZCpUyalD/968i8tC1iCMq8p9N6WAWRPu7DWI9b6KJNrIjKzyAmAcTT6Y+iJMZM3LnA1n qcF6s+PcrEpK3arA1ce+oW4ZnE4ipD29/VHfRBhOjNisGJDlWAB0eraZMJBoCq1eMPYaw6ew CE2lgkIf1al5pzTy5HIeewDNRJrBwIcfUiz2oSnoWnNiqVR90GafLTHfdVec0kzLWunhL5/G h2Tb5958SdGIUrId1VUo69ZN6T780npRxZBslxjAO/1midDRUjFyZsQl9YHJnQPXVPxhnj0Q toqwvePQyYNGVv9stQuHwoHDsPR/1JZ6sx+nmu5AhhYSV/8io5vPh6B/vOGVUMtpCEt+F02g vx4GNNgwOxlme0qfsuDP+eECxphrrAlLpiLLsi4MdcEw1SeZVlIkhIxR6nnOQH3v+nkPKv3Y RcvUnJt8wxEfJtYYe4QOsy0VNwa9BbG8ND90jamMSbDiL27YESy4sOrXLn7jlU3fAKrPCZlD eZbuLhzyRBUyNKWmO2fcHdgzrP+UbdPrfpvnN3NalHzRA4OdGvGTl0oK0l81uge5mbzFpoMD 4J/crzOnA3tr2irTMj8y1ewWqFzlCgfXC7CCqChUA0j5a9SvLqqmI9kp6H3S1pcs800hBkBQ fqBEOv839d53ms6AiCBj/uB4b1ZKHB4pCO4KJCGQIoBXiMo2iFrS6j8svZy0QX5zKgrqkpHq c6137YZkntMum8NuU6bZniGEeKtVsnHNbEKeEL3wrCBRyEcVExSz878ECcQdsL5LFNv4gCFb BP9Oy5rZPZFK1uvo6XADa/yjKRLctj/oiimwWARjU2r+ePlPlGMB6Y859EiUfQWM2uZhN4wN oIJdWYdPVT1CXiIwDddCz4j4zjEv7QdwUzd/DPlMU/tpvq5cr9dXS60b18Xv3BRlMDziikNc 6lME6+19WSbhWjU/xAxLJQFr3oEto3DxzWHh8oqoNrSs3GQl+5HknuaTQp7Gzoxk89QzmeCf rmQ1BKn8oSwIuP7wtvbCldLW7ykOjHCxisw+dsuFhoYqjLhbhgfFy/CDv7K5Wn1KP7FheyP2 V5EGtikLJFq9JTUgs2LBo265pKI2pTQLxjHcBqZE3BhoG+cofCEL5mug7jnYTXUDCAwHV91k uzgDL4bEH41wdF5mDQqMBczGgOmFtEXM5AC71TmuIv4arXrffQ/EKmV9Xp42IzbuVqgXTVf8 77u3QWPUMi5uoTsnVRJQ82P33TmwQSLLPbwv0dvP3471+QUSFACrjsaTS17eXOQYAS/e08j9 B2+8MrGlbMXMfgLouiE3aO0Bj0TRd6by/K+Kh59fddXn8twN6fo1rFFt+pFIfjkb9QQRFf4c 9GL5OjY5B3Bkb65ZkFRzKJvv2kWlzD1q/zr4tD456tetWC2oDS39FPkbAqZDpCBfPv+Zg1eX wyIFD9RcXNp7hLiinDzzarUnY6BBpMJwrzmTT87jV4htWda9ZmWydCIOO7g1jKQ03P8JN5an a3rOLNBsNjGjA/TJZpJm2fyMCLKe5QHgFSs9InFvZDBt/JDRY24yPt7nDd8vkiy7OAmC+QWt SyrSRY3l6fq6rQouGFsDV/tnGfjwiUxlmmFTRTrFcf9NdbayyMskgUV4fnXe1OgIANkQ1VQB Z+0Zo6R8C3wpTbdQK9X+feTHR+vMwhlxIDwoiIV4ll4qAMjLbEsNPJ7SquMx54kcGh9MxtbZ Z/PoMS/A8aJIrD7967bmL9NaJpy+iFmHlmFkNJrrgEVNmMm0puoYEZkpBuFI2iVHXoACxXqn fVjdLPJRJU82rSdvzlKjn5fVAWmbOY5Uea4r6IbZ2QInUPUQ97zxsOyU1lmvCdWJjf7w/SGN IoCHKElXdYHdVjpvr2oFvv30PVl/aOy3aufP2WmFgHxFBXdNPITHgn80NoBrElJlax72Zkec Icwtha7uTSZoVE31Z5f1qGDNaGn0NSdb1F2HtOD40cy33/tMeZstFjyhJe6PONwrWaNfvtTE xdgPMGIqjhrB8X02Jp2FvvYKLw3ohyllvcT0+sUPt3sreILHl/xhJyakBm+u5ZsRyINb7oCr a0Q6qO4u7UHOjaXFDp5PxLVSrPx6FrGoHISsSnC3npzvfJ/sJ8IFCbCuBUzUD/BcpvlqD2IK JxOUMTf8FPn/cv0WxG63LYsbGpgoL787g+lWi2i6uabBZyvA/NSH+4jR1iLaIrMvqyykmVQc IGCC8ZRtuJFw1TwlYTQGDFjw8lW+m1DRFiJvXhq80LV/+KKcsBZ1h2tsrr/6pslp7ORvuLT9 0qIBVJSF7Q5Ml2YjtlzF72Nz8KyTx2ydvvzl0yht9U3cjbzBUPKWhU6/w9VyNuqUP3ZQQtFz XEpxtIy5H2mNDfOoSdPURIQ7NNNx09FU+Y/sSbOu5UQxxqwadQhyAZzwTcQWaPBl/5b9U80F D/KguQQVLT7GThHY1iiiY8WPZirIkpPzlpGto/2fSpnQIj0oW3Qw48Z0l1TAZbgTmz8UttCy TzdcxFM5qZKCI4WWuUZgRtjh4LGnT6B6xT6Z2Q+HTZvUSJ5jSEkYh9mgMKks4FR2AawsLfFh hD1SYMNuKAhx/b40tRVuma2TK11w6Th9nHuOpWEu143llvwUP9OTIf+XDtM0A3sy9i8y0RJV 3n6gAHxFTmDTSZP2TEikNAqowOh8wWeg5c4YiJxNqUGmuMEMjN3v8mkcU5sE0pwuE0rmwBtm KK2oD+jULD70ADr6w3QxakzMr2H4aGqXX2MlmBZoelVPyE9+E+uyDZrRoZ4WOO1+o0FWVaF1 p/l9FVDsbdesvlgDHtmdVJNTIrxRE+2Ce9bTqSuOCyqGKoXlHzOq1cmEnPMDU1Hd9AeHbh0h R9K24tuBqy2KTS+Lj1Hs4csyDiSubCjtQG7c00YYrUjzvx1p8JGumaymNgrLBcfOXHJRLRlv jY7ZuGh6JS8371eWM+fuuTYkOIvEHMGYFFkq9rkDOG9PXq+kbIoyVkkByD7ngbrCzD61G+bM GQo2cH6XV4P3XabyqMhbASSYsoMjwyKqSHldrLQm6HZCYWKZFs6qpLuCsa6kOKgmyMGyd8R3 qavityjheVWkq25tflY6jTyIz6aDH2sT2KpPg4/p+Q7HXUbN4tOkvaHjaqNAF5bJbfI+ZT4h JKerLjFK8GbA/QB1gP+w+fg1vnTTnXW0hcJ/n/2WAsi/awsLCJJqERbC3j+qAnkfUb3PEVmX xRz8q4NCL3Rw73y3+QpGr32zSVjPsg506E6i9114PiPohUFAsuDqgj3NBNLAeIrS+4vIQ0LP UEeTUiWR4AU1LOr/ZoEEKB/xg94+/4PGpGxPmsd2ckCFBMPBqHuqK2fxHNTVqUb3/aDKyaQt zN4y8Kp5AG3nanWwdfXnpCEaOBS8AKzz8aoiQEIBWPir920F4/mUrIQ4VqFUeZLJJ121rwMk rTNh7XD4XrUqwF/pdQW5HkGsjJdXJorGAzyu8hGqxsfesVOo8xgjBQ45i5WHFsSgXlM6a3uT FSWKuVuQVZpeLWTcnHhtSpS2VS5y+CUT1gLQEmt6tjRBNUwf1IzSZ2aB+idX4yDWkYF0wF4j oAmzPctl+hvOEFim7LWURdRd1IQXfLXmv6AiZvrp0Defk0ZoccLCSnHtA/8Nk1ffiO5eMEam X3Ou2VBRvZHvuEt/fPNc7n16f8OKmO+bRMKgixQQ0iMl9RsuXJepo8BgoDWZu7NuQtBrfq1Y 2s+bqhs2qkoHEaHnJDf7rkLbonZQjdXjcySUUL+n0k2KFEYTh0dn+zHoH08Of1/t3+ZaXdSq 3Ba5Y2/e32oCYLRCIb7aDAjK4Oipr1h1nZ/6fwu/gHrclnTpO3YCrimh0a1dGOisQi1amPte Q0DCOrUMUgPB0hfN5ppopgHRN6EeE7YqHIecKiXjllh/YQTSflCBCipSJx1/F27UIzisDFqA om8HCak8AFIMI//Mq/9zi+tEve/0wWZHIKb4Q5xqiw/5ppN4KZN06uUwzp4POdwqZPv5e32X 1Yu/xrw+TjofiqruJv8aF+PQF31O9/DAvbLTWcc+s8FPesVeQVj/YPcQ5uUaZKYTK5NWsNjd ubkoXsSj9xyMjma8XYFGWUUAJ4Nj81lZMhB8+RLthAkawyghUdYWXpCHyjkyN0iS1/jh9cmp LWPjqJ8MG9D9eS6Q2ylg7SxiTAoZdFg3VCzhYIJAZofH1SHKxqT6Bafd8i5bnqaTRsL82Vpx y0GA5PYUFsM5joPaTgnr4Z8VEk+1YSbVhCltt/Yb9DMguK+OS+jbE+oRiBi8paDjGIqpA4dN n7kwqaRjMrECD1YA9QQVx7uEt8fQ86TD9XqQDCJnKPw8g5WBoHTN2rpBv5kpAq5SH0IVY+tO bmESAxFVazovWoKEqi8Pygy/YW2Nfh9J6ffjMJ9S36RfBv2qf4LvCmHJl8ntCqfFMW91BcY9 nl/sx6qLJFIdxNXmv0ROboLHTWRndiXb/tpiGMNBqRyoWJ/FYEedzvqME0ITv1K2HxS6bfiQ YRwSlGbC8q7OKReYF6mlDus/mw4Jh/KjX4M1O2FhhMpSQBG6CmgS8NKXEk70d5La8tQ9mel/ VueVlLWiR8A6kUyZhOrbkLCrWBBb/U1gWv1XMueDSjFiEkQDAJ3Moelpm3t7/uD0dUYwfFuK CdmYKXa1sEvFAToeKADuEecgk/kTdZawVo3SLTyxuB/AJoFCY8MDNLAZlEIe4zOdLvu3nPTs 6GRJjYb6ey7dnpj88ASjgHrISkDhRKLglqfjZhsVBmVpHWZwsvW1zGVMRKtmd5FtbP0mdj65 rtEMhW8qX7+QHSIS58sr339uevU4NQMhqMvWzAN0ZAhkwj0p0o1DtpTBeQA5S35du5qjvEJl VNjHOOANHh7BBVj08tssMB8Sx3DAI9xa8A7i8IWwa/46QplNN+XqsM+dNCo8GaOn1Qkk1RxV FQ+A2VIzP6PyBKW6jKBPMhTsrTmPNqCAsl/MglPN27ZSwvtyup05QKW3kfJ5xPeVO5H01glR 0KuGMrV+npE86Wd4KnZC6pwNP4z2bemR9UBNA8hgUQ2HoJL1Ytg+so5gxI+90bsRaID/4OTT m2WYmX94MNgJZiHoGlmcuy8xpkNCd0MCfbSIv5c1M5I6OEw+CJyscYcVQoD6Tj03scAEUaZl EClfFYKtnX9amXxt+JWZ8snP+xLtuK+pkf566mYTS6LUFQddpAu7Io6rWB8+6kXLQKPRNb/+ ZWp/3HyrB+4iLGKn0p8bUIYzo7iHDIDdKbcsE/GhfzGwEogqvuAkM0Nl5pimhAYKr8pcjGNw abZvR7i/SQgeULGus8CaLhmxSBUtezvMS0ISx2dVihsTpvQXYQciJUHTp88qHteR9MklIDdD 0zjZdZZH345I5Ns+p7UI1ibgalva8WyeIkGGn5O2xEkDllm3GBbu3lsLMG1ZUBNLqEaHu1J9 Iglyx5t/JQ0qiticO0CrPD3kTOI6vhxrorVTgmhzIOEkv8zzxgZPjzc5Qi5ARywSJnc/Stcn mEb+QjH04QVx4M7iL7PTRxA+eMGqv0ZhK3jAo0MBNWXR1H+wajCfOk2jyHdxI6Jl8jWsGGjk jMBBxTppej1xoJxWUpbhhxIrGZQQWyfHSxHeRFjGy46tJLL43i9Uv/tCtJBBqeYO7aL+fN2r Vo64k3lXNKnUD+XBpnbqRgVjO1RgR0j0bk+YSc4x8jIoZfmMmiinVV+g4iWG9zfi7JkPhBuQ 3TaBZ9PYQNDmf5d3F6CNh4JFt+hyuLZOx2g13kMVI5TEDF1PsiqJoh7spW7enELFHvKdoAT4 l+lE5EWXNS2P0aOXKkDVSAkToDcOlNdSJTyUpVF6r8OBcyE8DtX4s8JeJ1zdU3fC5yQRIlur Xg75iMy43xlsFllVQtg4TLSk49fUvUeBGE+ijtcLuXLvjG88mwdxDY8u+ISCJWpIL7BkWisA SLxuj62delm31dAV5j0krKZRZ1oDt0EsPy82ZL3+ZYEGGhozSOuB8uUInI7t3G/6Rx89Yza3 BnsKWtNUPZ8IWULRlASgnPPt5jztl0OWKApgBdu2bdu2bdu2bdvu17Zt27Zt2/l7yCwntYCa 1r20JVWC4CpLRTes5bZxACzIUzzciivU52lecadK8JQgQFKfKmdIUhBr6i8ysVsgmCgjrJ+U 3RnnGvoSPL3jAnZTZepW7/hGHA+J9HmNYrQvtFib+2LmwyCjTKYkJDNwxwsL8qJUMP5Drd/g 1uIFu7fqqICrlI5SkSfYjemTS1GemUdf658K+Fkg+xuTlr8S606neoHdeuouhGlRK3uER2aq EK52N+ZSTSnHwH5GeGD7PruFh6/IyJHag8Mhtd4Hmu54Ys+u5k+VA+E249DCCsLBN7qbQX+m wGEfpYHwEbBGJEfqIhW9fcXrLhxd8XAXQiJcJPq9ZZhgzFjO4mpaNjWUZLtkSVgma3SZ3ASI oO7QACwaHIHyNfy8ZLAPsZv1nVoMhFFt+D316WpVsLLc3iMPKZIKEfmlbgDkHtfkeR5Mx39N w1m+2jVfua+S6x5UM0zdya7TtQlKigiLLcqWPaFq5Eic5wZEEJWTra+Px1xw7fU6+ylThmvP LooSwqX1rjJirI6Knn/zgZbfTIUbrW3XIqT5abSkbtuMmAjNPkXmrZmn4I6hVEH2nrwghnco 0SsZ6ENbM+/Sf/f8qvTnbGupIChR4A1X0qQwXCP0HOswdaU62q7spO67IdL8pQeaEGY/k5zZ 6cdtzD8VfBNdS9TYzzlN4zv59hph1ANgGO92fI5b/eg/vG4LgkpJarA+s/X5MOM5Z4Wt3SUf YBWom2wOVbk5uIhMpZL1PquqvRQfJ0DEy2jE1cH+qwTuiGgSHHLNRkEBNcvAf++tRorsi1E0 R5573qY03OWBiFL/jK/TAJiQi+mFZ3OlUizu+v8iSGFTQVrj8LgwSisB+ZdqWLfuZ7zrLebb 1NcmPmG6c8paT29e+Oi3RTDxGRcs3Juo6S0ZO90QTgj0fuM0TE2WENobAwBPHmzP7H2nLP0a hy2KsWKq5csQDqRbyfZPfaBuk0aphdNUtrh00f1pxSEBY34b4+BUkMtf4/yrj+aynCTy3JPm bp3Vf4FZBG3aAgj3K8TfTni1d/p3zTPVRv6ghRblOV1fgWEd4LHgo2WpQTNPFRcnJAACxWjZ 1UzxfY5wKA6MgjeWXZnl0RRdLtiWkDFoA3XHwWHzsXCevOQnVowEcnAkQyjkGDms/LKSSFm0 ixLS1PEwtww9+GYcPggtLCJ6OkzmB3roSW4PJLTqTmh5tRTzFHj5fb+RBQvIMmA8EjzX2cFQ MaXrcojPh0dAdplgYuBs3ywDLXoDGsp0IhllcqaE2fo6fxjmIEhO4YPZKdXdqA3by1gqVkVH Gf0bYs5LxALNnmDfpnru3ATtqaYCkol8XUN09mr86UdOT0bzLTPWS5pVpxFMGSjzJ5B1SYxR zgtnEOgbpi/a5dU80kLLkZR2PXIHirZ+JSyzuLabF5mhM/VCjZp8QpnmeDWelZUV6Asn1MQS jz2KLH07JSJi4aDXu0IZN12fSw2Sp0v+7pZdyJHi+eW0UoGKG3zT0yfqzFibObSk38d4ecVr AsD8l24PRUiraMOHPbRLua6qbpYCwdl6HmGVJxNNkR5jOXYN2o2j0G834lDTszGEgxqMxJb7 DaEA5F20NOdY+Md0hyq1tTVALDInRoRPNkJUkjfocVvjNnYeTdxTLe3nRBT+KVnknJcblYVO LogEXg7M3dhH6E07sAON7NWhlF6YvTrMpna/Qsw6jaLE4VjT0R7C8tNkrKOAUOJYL70c1xVM F9DAAWTPrDBNvQpgVMBaI3ekA+G5wi2jK0/IcnkPARmQIcp0tll9NI0AaCW7al61gkGJAfuN BNGd5i4ut/zy2fpbc3+HjqEyxCaap8PhshobuqsBV02g3Hg3YnDdJ5QLQxkyXWvNP/RBTTpw DbADxJJofb9DFO57H41N3hNCzHywHBFrFuBnSjcaddtskZFsuCnA22BLAXHDS4ZU3jlgFE9e Cr8y3eE63QIHbmKok1RNOlgfr6sOzcke/NrUBUyCA8QpD1R3rbed9LmYYoun81oMZyETcpSV yK1lWG9V1z6wpQ+Vi7wrPPupwlTBq0ExCwImv6UR5lCg3w/emMvVNHH2Go8OIh4V/SieMZVv CkfEdZo4/rhdUenbEL+8a6G2NhHPd16h8ZtsNB4209vhQW0+bj+8xmLqlrv7sKGtoa6E99rt iO0nThRed7MNsYnGYR0i8ezun8MIKoHuylPQaPOd5RYsM79zmwogPOvLV+SI/eNloC5sEyo1 H/V35Ehepjhn0lJ1P3uO9EDmuB7QFrDGBx1eNTM7Zatdy+vIZmGKQAsxdC+it9VFeF+WBJcZ XbcL9OtmrzVk9MDF55iuOt4H7TMSvaYyBBd3ae+vzsIn0n5hu3SLeHI8tIUBrRUa+F5yNraT Y9hPRfjr12mjjev9oWCqUNIucB5XSccvao6GwwphqQUxT2Jmr5irNBvlZ9c8SllLURDF02rj qvNG4jBXF0JUQo6pfEyHH4HI8EldLUjAIgygKSOYr996an7MA+X5SGaKlkC6WTYMtykNSn6L ltNRbWRX3cUfDHhkFfhu2wOsJkWCN+UufVNDkYNnJ9fXKUtb2FtgWh7aQ7LaEqOWxjPtP+Lm 9bIhXcVUIB+U0Lp0AgKmfQjOpcS3tvhmiszlfmU0MCUi82WMQE/IPHFx0wlwXk+IPB8/Y+q1 HAe/liF9anhoRzejgviSyqgOPfjdhf9GNu9J3PeVHE9UBwRixQHZjdr9ss5PL+gt7veORDJI y/0uV/KivWqo4dBqkGihn0/vu3/pRBqSv/R/gmwkUlpPghLP/WmDTKGYNjm0YvVGMkcVIf3Z arAgXocgantcpeiULL6iFjZJyMRSf5dQSHDyroJzN8e5jJ959OdmHgz+xX5Pyj1MobMYSfk8 sTnKGMDZGhRgF+KrZpePEyCGOdaWw2wWkNkduv/6mS+kIfMD4aSeZxQYV4L1SPyswF8NClMu M7DS35JFpTvQFswDOGig3RYgUemNfJQOECSk4yNtOs6O66o6iEnLLRhgsX7/V7uKOhXC2jCl DyOT8lMLdRAB9Alj2elLXjIIVimaVIVoS8HvZqAVFb9XUSFxenUs5gb6Fe2lWDzHJpbK4Piu MXqPvcaQcmJAe3Xgd7AhRMOuMm0xDS3M/7VKrytE51KolZz6pJjdZw39poL4pGAJAUju9MNB tpQOFq1w81mueWYvLRJfOsvwjCboRlSDcgWSSyf0JJiV3xdP+yb2oaDdwDv93r/8qKAJ4HV7 vBADtq9mMddpmzXZdD0cp54P8Iy7ZetV0ipz3HuuC9/PNpMHt3vaADcHL1SGayxFGZbLFbbz IrXb10Tp8012qncrjDRJgsb3oWhyyJ/7iHsLh8isVVOKNDb4g7St9jEU7kfPKRUzxWJZiESS qNasGXj8PkFhzr+/gsoejzv/3I9jC++d3kXNCzBNlt0ZEhBLjBN44lz3POata/8mlaa5mgR8 LFIZ/GGiQBC+S4nABXSD23/zatwodRfG9dwvndMQK4600AdlYQ5SwyoUBUspLAFTua4HyWLv sEZI9w/KysIvfUAner0KUNZvq15vkcqbYWpXylmBrFHjTMzx7BEEHg/ux0RzhcGWAv/hKJP7 FZTLilNru89dkoLVsxUiPPJ3Z6U8eF0eGhG/6jKBepT7r66TE66sJ/mgMxn8Y2XmNzqOeA5f kg4bgN5GFUbHeb2iFiNY7Ivqw2CbqXmvGp6hjwf0VNFDyNFvGV2MXizLYaCv+B3LrSN5UWUc 2OFnSKGhxCF7nbxzWpel2i5XPsoUMXjnua9J5JU6ISuZEHnSoIIr5L74+Y5T44QpuN9kVjLC ZwVsV1wdQk8ISYPM5Y8nyHby4qdgSZg90DdwFhl8bwvc+ORE2hjj2gbvDiPYBU6X0Guw7mKv iX9mbiSeoVRDY4DmmlqDkxOApEGAO/2E4nVkMV8dY3GKv51opPcyxEAvf6k1Plnmyf2h6kXY CzyWm0XoJUBYbIBMMJo3r7WCcGRgsdS1BQgxR3sDrQxrFu2aTy4ctWK09+SzOeqMyJk1tpPn qcTcKdY/nDOMM+AuuhG4eoB4/dnLBdi0VgwxwE3E/dzdHDYjiFfCmFbX9gwYVuNzNf9TyQTM BP7UwF6G7KQejD7SVOgKgXYPXhRQkl/yw4zfUyZ/OvD6r6/b3mO+w/gL2DOFpzNk4m8KzPZI TqlII4mYdzdzmyLI8I0VlI4EI1wXHOOqMLPnLpN7ok6AdXaq93GL/XS4nHyCpASDAMW2tmtx od21yUlJDf7COy6zICs/KI0RdVlTJ4yEhbg7/k6RpUJM3lHoVmkk1W0ftXTCPPwvzwz6X3xS oNL35ELJqHIBWbYNJUK2tyXgx75O2uuTBag+ACGmbASlYQx0iBEYum17FH9oCNkocdqAK8Fy fPv8hZriAq69mrCBVBPhCX9j2So3M24zWPRFLkOcXsXzQViRYKCisCvobIQK3VF2oWFxMu5T 7kEA1D4UDn1qp5KIWMqDdIv/eyW6WEjdEAHQnR6zclZPI1rAcIBDiG54ooK6Oa+gDH6YFbEC DBpi0G1NN4dOv0vxghRO2Si9O3jpnagzVOHw4XTYeXMymw82UefRwUsNt+r4ovPLG7cxzjxi VVfqKexsBCoSN+AKYVI6ikTwFPCCjSBgvUzPZgbdglqLS03OCEm88vZadOGuMHZBxg7SjD4C 52cOE0vNOzjIpLP/t3wvvcOvWgMXJX+VSuiiUTFFt5SQpHUhEEIEZnJmJHBcDxAmtxaLJ/qZ 6xjJYQkXOWJuMbroVm5cN43V9Qgpy60yq82R2oROt77xoem/r9btBTm1H/0ZWQZ9Z7yZK6T9 5qnJ952Cgn8cS6HZ4/Gr81mKyDAjVXmDC3/LrpDnl0qeB6xTDyMHkdN/jqKuLOGEr7CmXn1R IyyGSq4LL26O29zUL5wCyZiSazn+QltUEV74H8VOqHc2RrGi6sqK2XC/wckuLkzYOwMmLBmp 5byAyf7xJ7ZHxQKjGa+ng9lusPXDaYcWl2Pab+ulF7iru8jX7zfpVd/6bmwNXAisqMKZjx4W lzzEI+4DA1s0o6JcP+nxMbQ1efDF85xT2FIQT0BTs4lKbkdWs+xCnte98ijncIJz4+c6tRLP 5rzQqF1CE1bURQX2eOypz9t9GYgXe08vXR217LZWN+XFcOMQKJPLivLiIyY66COiBSeJ5ZAM GcPZQCsp4noExdbE8KopNcpz2LC/4l5yy0TvsD0ifynSJE/qWZCXlBh3AnuyChMlN46LBJsO Oc22QFy7DT0JebWAMcL6YejUnPUo2qSGewGagx4VvxikdTKZ/8yiCIptJuzR/xxYuX+aidje lc7D91gnzGfGDLQHcXtUTDxeigquHDutccprKWOXHpbSj5ezyOSifoeUDXow51bfZYOFXxFQ TBoj5xzOJO/TWHyzPvL3NsdaubXyRDmPzIy+KUNxy5v+MbfJ2P7T4HDkC7VCLmWuEz4deFwu 9SSV2AmI4rKQt3+ZoDtATHmrCAR7g01DQPZhgefmwxz33NrrPGaTBBhT2cDZq7zQCDEP0Xp6 Qb3aUg+z78THzDpSkHyVCkvk8sqVec7Odnd9wPcvyIKXTVQAJ0u0rKKbciqVhd+gvDcvkfqZ PUQBTpNSzCo1oq36gNCYK05ffztAPojHbkKVk21zc7I4QlW0O7PnshlxknFF/YnO1HIH7QJw ptlPxGxqJe1C/0w2XbWMh0zQB2vrUBaX4WA5Cs5MQMozBBr62BRwYlSo5SuG9vHsy33XUuJ2 p4RJSmmfOdu/R42rMn8zdH9hgg9DmORChuBZJwLkEXSmDZLVuIS0FC2pztvo3ZxRPZek65T6 V+C7ILYEO/nRtRFtWwind+AEJENeZ5rwHjHGJxBkILaVmv82CZgN0xPKnuLDBXYQ5ReJXtSU /E0+MjR5I5AW6VMluO2P+BSSs7MumhXWRNmCpLFZqoAxNwPMLYF2Fwsw3rUO+fy7mNd8hEt7 NaEByXI+zH2ZOZ2ZmhNV5kPpQPxPQlOoROdY6qQ19KOrru0KfSO6BwHxCqLVxEA5UhcIRgSC yPXf8DSefU5dqdcKeSAZDSfRWKxEvpibWr3e9dst5qlqMd3geokVjXVByDOBuJmO2yuH/ySz 6z0zFay6zIbrzOfONBoDAtpx4+pxPG8//HsOOlvYcA4b+NwrXTBhP9w3N4F9Qq8JJq7TpKYK I3po3gwjfeBLwa43DB+NV8j0PZg0AYDbU/FRIJJ4V3UidDPr2YVbXpxJcQhzdkK/AY1wTsND ERsvmT5RascHffvPyQnc2M/5fScKLaOA0JQJShqv9Shu2iQOOKX7TKWbbMsVOt9DYeMAv6+Z T4cN1seGsuG1bZRO82EAHrfBrsmzSgoQXRxv8gdjb1e6tYCrG6xwC4WX+7iQiHB8+SDV2maK PFhKeY51tbd/HkVPNefcavM2LGtIvQAyFT2kORoiKXcbli6RkpcycbI6JXKY0G7mWmOzS4zE uBpWPMsvM8DMoBqyEJ/2FEkM4laj94bc9ln0zmqc4TnbzAkV1I1BGD9+6apJK7ENjdEcEwiA BHsfLwjFbaXcVlaPD6kBtx8+ifmNBgAKtmr6Y8hJZFwfffn7J+SD/M15rXKzAuoO3mzRdl9P n4q+X3o1/qVEmBjWPXotAoJrC91fhF2AivsoPFXsmRPIF4mgFYFHGRYfyyy+XbFMHVbIW82c dVKtZIxg3GyMtIhwE5zxDYVI8GQe8Q5DHVmYXy6cTwaM8KOKmgpEqqNKVtpjQw26eeN2z87s K29Rd6BKP8TpK/XOmOEidNuGR6zb+1GqR0i0PO5DNTBLCKeF5zcaJcHv9oWNzruneMuQQntC PoUY1YW3tDXicIoEOSNPSTmrqDlevTGYuzX7eUeSIJeKGIaTrD8lSIV/oWo4RAKrhR/RnX2g Nu1ce7U+tXkucyr3Mplk3tq5/FkyBAhkNtaQtdM4ZiuEDRhXdUtPMJVP0ywotMHFMHhBQ9mh m3xLsoo+eVX+cXbCO4yFv0t1KbFuUZP3Hz6ixDBWwYqScjj0nsIr3hSFAz1/Zgs1kQ2ArLdo v8bdK1WBOYqkQKGy7W6xRyQXIY+q3lYzYXZMlQpBQ4iCC+DP7EilgksHnj4+Bl9L3jxwbWzq xxiwWcKNnqygSd/wHSGG5RI1qTH0MXrkm3GEsx3ETpJ3KR43udZlaQp1MGVkpm/9In6mLYg4 zTkeo+GshY9zU2zEiWnPFTJVYHsL59B7RM9cpr8vyQJBvM4tBVh2cYV9EB5fGhXZmx2hzmg7 qUc3J4Kb0tVjcFdSyI35MvS+RW8mG2kUiQ1bA3858LAg2pI7Gnl0Q/9GHCmIe66Nofve2VX2 mXwTBpNSli8OAzOV0ehukJwnui4L9Tq+PldjHHNDZoSIHlsJu3E3mmdc4zb1zlZMeMpvj8aR qZ+l9ARaF17frKtownQBKbZTUAJwRXt7AW48w1w0/cQIqZOUZyPfFVLtpPPwcbw/1ZIO7FVg 6HH3fMHxgOz1fgRObdk7P08F9aIL20JQciqUC01PLlNjRSW4dA2QyARYsQUxRnRXwL4TJh+H Abi+PjPai/ZvSXC7qszO61sbGzxZJUTyVtjYpgNrXqGl1qUwS4Otvxs1ejZwbPDAuSXjgbY0 kOUyFsAxqh5D6pWIXFKc3H6186Beooixq7lYUkCcpA5enxtjeitcHNIVihVb4ShKQo0dcdU9 38XWCkbA2N8D9J1kJI5E7CzGUSTvZpRLJsL4yUpQEkugZfekwvlNqaAwmBoevtuIC0LIOwyX 1acwRBacmpAjv0AIGOgLi8qYSMrQUiTR4EJoO7S40I4jcDpOev/5gtbwsNZM0+bgbtNdq/B8 rDKlZhtOIgOCnQgwQ/i8gRc6M0DDszKPYbuKJydXlDo9UHSi1ThY4QeiXgu5neHUb/nP+0Vo 9QJ3MpxRQs4NHLIQ4kl8ewpcBcjQcr6EYmtyiskrAgGe+DbTDu/B1hh6JXvaUJmjo4Fr7piw 5vEs6EAQWTxYv9nnyoEfN2Xc5xNSbaXywjqUTYM9jQgRhLzHykr4xWISgHZwjXIgDQS1QgpI 7BJvy9Qb2wxNHPjnrTxJlR5m8jbnFER1NLGdvH1b8dyzsxcjHakNJXhKOm7ogenJJnX4bpaL pkV74LWfPMxlPALx8ATGVbRr7U6CK1uBoOzIHFtz78Mp5PEoMrY8rCuNzHjMLK9/25SFkXJS eGryWzl52tJ2p45sXZ2dOd563nMp8YGqmbfdqmMPQ1GqII+U+4fL3t/0QPmCYFsJmORQSSG6 6aHG4ZoqmF2qEh35mCuP493TSkiA+ZHder7X7PeBZUGh1pUxBjCrqZHViG0qnqKPBYgrXsXf odh8HU5ZAoQ2uip2T5iNWKZuuouMeoxjJFUavdvGYgwyOfGNuzqP0WegRcz857QHUCHFPcMk DaDT6smbOvXnwfB8YuuLcAndCQqpL0eEiiAo9U/L7qHsxlHu1bJTOeiPHs513+nQCY8UPPrh mcW7zPNKC2rA7YbDDJjN8l41F8ncyqAWbqBSt6iAZLPs+w/j0TBIeRS0avdOm8hd2wf+94zi Qlhhznrtbi4seUY9/SVELxQoE8hhTWMv9MlzWwBPzqntDYOZtMRmAyuNuFyYHoS0+/Y/ggRa LUjGWwjawj20W56NPRAP4Hi0FpKea8jNxxnvOadgZYlIor7IlfmuZrLWiKwn7xcSqeZqseTx uVl4/xWlVerxaI04rPJ+rNObxex5hctyWzwevIXFVS5CJa1VfeefEQ9lcV/Kfalmf/3HHjuZ 6Vqk7sRuy45MSfiXHmjJr3qWvHzd17kUDCY4WmaSicKnQtq+fXrguGJIeUE2MK2p73oh111A xotuNDlSdJ0ayuuAXEzXE82Si70+bzWg4LDrqm2d8x+bOD263BmEAtS4lQhl+yjxl+k5Rz+Z sGgu39Ake2jzHVNPBNFD/MvmEVk9JCwduwlZPE3ROrlJ5rMUwEiwUuinoxTM6b90lp8x3qus OdJ7/r8YU31Q09yCOosNW1MtFNHly5EioL9If/E9pNZVKelR0dHUc4ybVcImA43RfQ+ADgQG WFEcCN0Ptcp/XsgO1hHYIf/CCSj6pjcz/N8iGhC6DaNnEBhjcFVxXNvdTLuNwS8XnaA3zPNk sH4b+xsm/v66/9uxDbiXJQHcIG5Yntkm150gUbCtVPIaXHOj2mSG8qNriKN6ta5tC+hjfhbb ehyIE6/5HxRoHIHh271twu4IYg4K+XXGXFxBPVdGmbu04p/DwHUeLu8IWaDcZnFF32QNqqmO VppYUN1wCuwHpSXqzf0b4b50hhZ0fQkfOul/V4j+KEfWu1vTOxP80w8voojRyqIChrMdZlOm lg7CQM4YNLXRY4y+CSO0+FJUIiTWvOHKJenCji7RaxR0SLoHEPkGmnp6jvmH6wpy6ZptVEZX OyYdacC+HdBCo4gUba7Jep4uNljFZVo/s8hn0yY2lvLyx43CfTu+n7Wp6I+Cq+MKUKI9pSMu NtwmUeb0GfMU1uwm/aUtIWLikQ3f6NnQT7S45txy5G3i60mNnsx6HIMZ8zQzxg44PJKQbbp1 4+094qx6fxfKDlhD8OvXvH7+JVuciUEsiqYwoRQ7ayS+7cgR2yQsmm0C4vkAbNZEEVbKoNj3 VQRZc9t0wn6LCizc5uhWqxY1PxEK9Vp3zIXRAwisxpTR4KcwVHU78zppksI4AYNxWLjQkRsn dlvVFzhlYaKur6Bf4ZRU2YnFjd1QxqasaBrQHzPf+pri+rs/EFqVyScfjYbTqsilCNu0FyWG fPehTZhZi4QpneeBcwK/g3F4l42mxXmMArc6QhR+MnrxDasXXH7jfqpUO+FrhaGj6EmNkKJk eXnDTrKZjSZEtztQEeriBTejjIxCY/CI6FhdV5VoLyQddVFbY3X4wVRUt8oW0PcCwbB6DWS/ TKbIryocrViZRJU5hT+bxd5yP8+CjgiR+pvXGhonJcM0RD8fqPz68H1bvT0CmKAIjPDQ3ttg UUG0Jus2ZNXDPkNkSx7G21FdG4cNWzfP38vONaJFcX9cxGid72Fj6fHhNFAqmFxS/gFEhUYV ISUbj/8dTQO1jcPzWAMWfZZF0mk/Anx/Wu1KbiSJlubFD9ik5aHFDJDFJ2SZjBae9XgUJy9F KhUMYZZQ5b7A1agUFkIu1MC8L2pR1pOixa6TX5NjTE3K3TYRAUHRFnZaGW/6Jma76XPWxxDu Rk3gdyxxc0MmOHuEJivFuBwcrB0XbaCy/spR/1xmUZ1S4X6YFKlqfNl55ZOQJVWzWJ/8YmRO PnrLgl30jJgwenY8V8AV+dRoBmrYmFsfbcfqF1a9Uyd+XOYhWrYspf2/BJVYWJSU7G7WJx7l Jik3LkRkMU6mDYFCYrNMzZ1973HSfqtCAq/MxQnpHExOpZ90QLLyhLpYKvaUSt8znnwhp1nf ZQzGR7xoPsn766Co1PYtCKDCTZT3ZVbSwXSQkJoeaJQPagq2nT5aodD8VlMoosoBSLmSBK1Z qhRs05UGmjQkScWD1oRURP2IngD4EaEIeXLSXI/iF3u7Mo4+B6ouGhhhI7vm8zHdQ99cx9Gu jgOioWBwf0cTRekCrdoSF5HXeAUlXefgFyIZ5eL+Ro0LbHGX5KN30UJaRa0NeCHkbjVrWL3S B6sfltDt7KZCrtYPSBiSQvvyEigP25a6LHbqQXMd5DvADKaBKUAjotxuHSFvtferojKCgjZn kEEctjJ7IEX31nOJgRId+GKIh7/MUj8KXpXpDQhZhs5w0/bhcOoXm3tTbOioWHzLb4sXKuxw /JFMao6XOxmr+hnDRVwM2QSqMoJSspjhtpPdMfFMxBlDqHzD6EOKA7mKJsMUDySILEkdZJWE Czc0MqftUtG9ykh/9wtrVUAPUK/gV/ztpIhj40uf40XHQbB/eBAd3hJ4z4VOkuEpR3YbIz4H 7HiBtHpnOJtgzlSOwHJTnpLvup1JvTy2h0GAYY2M7YY2VoXBxRxsKdYU7SedLkSPBR6lPk5n SCQvMXHvEPXJmrWYvCYjxwVF7ktLW9F7SxYyw0qJxkdvfkPOWJCpu1l5tl9JlZV6sP+opPAD Sg39JTrrHzRKbn5cL15pqXnf3DH8jPuMSoXAEGPe7xGveppxWmiRdUgdX0UgfdrQWLMTERfk AYpw5JLB0G7FGXehP34PfPmNOet5yJLv5BW+4HeUJqiTGiMv8c8N++serZiIWPG6dwyU2GTJ dQqmf5MigHpo4kmXYxH3bHP9KrlJ5hM9+N72uwUrqdPKJYWvt/yfXrtXJCl0jC0g4Ky7ZFD2 LSQh8MxXupVf4x/7MQ+BYXK59WfEtvUAv/Uk18mUbAKjhARKIWC/brs6Bt7tJlIn56EaML1u Sdi83D+25QLLpMiS8pVDIc4DxElJhFpKD+js78A2Ldadk8JvbxBCKpGxjWOjYJ+eH0ut1YvL hHtZJBTswwCDVIjY6viIqFt6xGPUQ4UQeBbBxjvvJ60gonBN5PtI/WKgNQWZIfNxarKnUapv K7uTFvjQA2beeFQ9ZobbrISnQ9seFF4yf+6jQ2Ey8caRTVkPTZmLMmK0Pc7sU7+q3Gup28Ds 4fvlupCNN+xrHlT15KaAvPfk8n6zxXpFLsiyXz0juO1EjWO7S7xOPbiLXK5qDyUOmRDAGp6/ K0wL3eSbumiwcSJ7iHLPxYsuyZlyL2dXg3FR3p2HzGjao8jW3vXLXIa+HZrzGE67jqqSAC9S 4BW0w1rNX5oYyEdpt/awmYLrBr9HyDpg2NCM5/2K1XvrMatMf0elaHpqSjomgKaU/BEAcaa4 SueoluR5AD2GvjgaDsWMjXnysLu4gydZQVjFFb9XJhPTxlhtkfaMnka+u4ts6U3xmxEkNrme EJHrQV42auZ5A4u4et4FMckIJKqzS+jxzvNdQcfw8/LDP6zUxIuvRQRN5K6XoIpPr5HGQerp mKdlBLmT+iYvnk9Hff4tvtle9DOHndiXBQ36ozAgZo2T3gv/l1QYv5KlUwLafStm2NZzbO5J mTVuag69ERj4dlJRv8z5ll+TswUs0Hb1hqCDklwiZTuQf6BKf5nTYMOYkduewYonER34lMtb DMIgVbXjPBvkrE0l0gNx4gcdo9iuUHiCSHzLXWDULX+rQ7npql0OiNIKfHyi3V3NVM20cxk4 Z479AJ8d6bpCZYWlHxc9LYS15vMS2MJEcDlyhGY9J/pI5CG2f96c3z+L80MbFJtOFxeiDgAn Z/XCsE8UhZUKnUFHn8by8bTcBy4esoSTydHVCadsoqTHgI6kdE+QCsdqvoJ3Aef5/n1UWZrz hFz2bAY+liCA4brHJOkKfWuwIF+2fBd64QiA/dhO8qiBQipMAVqkPJ45M4bSTAqZ97dZBXvK 2frmunlr2S9+D3VWi+enjzTvylOWcLK51iJKQh1x5A+oENAQm4/+J5+bnfSvrgVrNedyXUZr FQQGann78qnHGgcGbEIsIv6NVpyqjFd6zuhktW9CyHM5KDvfTuVzVb/2ppwyo70ROxBlJQ1j d9OVWO88RBKhBcRgKHnlvXi1hDsEnMaRtUukHL+ed4Ov7uU8Ts5n5H5v4kimJ0JYSQJKY+sK JMxVXpNB3GIBGC7wifrumgJBcw8Dc8xI66/Pfhz4eYJMrZbNUJ+uZ0pTRyAzW5hfZIVAWvSW DsPZ/iunTbSe4CJ3LRO2HExZ5Jdkt3HpAuTleQLWxwLv6aaxXWvjFLxowZ/g9GdwWbRAFZ2r XOEvMvKww3ksCvdR9IZkn5ilyIq1A2dtPklq+BxlLaau5PpNztVz2YkwLQV5AO3ZG8LNWX0q LG2qDc8XDPtaaenBCQu6+gSGSGrlG8iPfNtzvW6W5a+W2RAa1YCAz1oOzQwSf2atMldtmDAu 82ouR3qPv2hAkOAzpnUR0tLzS4VSjZBFRY81LIC15Zvqf3H7u2hAZWWd9tdffB/e26c3eDwd 877ugDhWxnvbreKnSJf8gYOJx6R7nA9KP4Po2GCs2q/e9ZtI1uGxjjhGG2xi7QRVU9IBiHo5 Zy4L0s6hfn/WMAoJvxQSwYnLtjdBFa3sAypzvq3JCnyRtnwwS5Gbq9LBjTSS1OtvmxS7U8sm /MWr3O6B5eYlE9DU71N9FFjLwWgiZdb9s/9UW1GZpTxaBSQ3yOlSBjKWj+UR0Jh8gRGK+UG2 /zGztQTORZY49g8DGrNRx5Rr+/bIjF+FCcL16/cXz/lHS4/FI6SZeySTno1p1CLUrwpwQ8l/ GEr+TpYS7p+Xg4m2/qTkuf3cqPCPhuP4sp9TtvOSlLpDPlKz8mNSanp8YiGyYAm32u/6vQea SnAyyEy1qpCMn14+PsdLcAwRb11mQOK8niBnM9wtN1lKkQ0bQiKkXV9wmXmoH9KoDeGN35Rk L3MybosdMxdUFkxiJxWIKgOL9Mxr8L/ZomgZ3PN98sOu/AG3FH4FuO8jRkOnA6EMxft54r9m s6fyyX25PUZzbiMyeUh4Pdt5m6W2xwGSkUQ5fO/3XXG2e+jTmi4CQ8SENENkAJUxPXIatsKS I+d+v4fCOuDz1sY7XNZlDIxMoR2L7TtlTAHTnQZTcmWjDyAB7290JylqEGV5DbtejIi1j1qg 9wcB0mlUrcBKoGzsTDslU1hRR+NvjTG2YOhz/iQDmHmFOPRcOIhGW/pcQT4RDURBGGMuAwI4 IGJOxVKEvyUVftiXYmHzi1g4HDknPxeeu4498obXNbdX0WNt7EXDWBVSHloA1aRbHiOOgf7D FeeHhv3sTRSK221QPDqTwEKR8sS9oQFNenjUkLdWxbSOelA+i9aebb9ep8DVD2RF9UoMFsWH CQCoM9fKzdQ36NspH7X9IkgzDQ0MabKFMol5OhFo/SpMOLw3FVwAh4HnSRMgDGdyODpk1xig c78njVNYRDnC4kH7HkBzQrhts0X7LdMnc/+7JVYLQOj6TczLfL1wfu5+ScRUKQuvDneeeWWF TgBBjQV5+iZ+KPD/ks0/CxnmUzUTP+aucXG8mcXJkTK8Bp8+vp4UdEsLqqtkiDNsnwD52gFt o6znnwq8nng4oKdNqYYxHVtLas77S0QJjFsjqEPoRGxV7c5kmI6r3wMk0q64Zl7ASRcD1Uj1 gkB8QkblIwN8y54QPGNLcoKnx/os9ttg3wfKfOSIFtmVqWvaPBrKxmOMJXgP9gjhN//IIS7y bzc4amZ8gHB6xIeOlO2XLFaJQM/JIrwWXKO8mGGQ7pOeCR3EbbTu5VsVuwylViuNJMeO4NuJ oPKyAsMdIz+dHmgh+NhkG0iE6qdVSCTUGeqvQWPCihXU5RrpIttUd5UeRrho30p5ylcCXoln 5OtBE8tqN5hobYmBvx49pVs4cLZDaARa7ZMcMCZvbGXbrMBF23BMWHAST7n4hUjh4mUxtShU AjKHY+HCMVbS4OI46d17edZGMmfJn/rz1TMqiGxH/gOJRc4cozl6rDkQECBGKSjeH2eAF/JI wz01rbopXqlx1qJyk9Qpi+ndptTGl1hf++wSnKsZhzs/SNwXb1t/TGFVA4gNJ5SuVMHTlWEh hkUW5kRbBlG92fmylTqP5rdUrOp+ocQSXviJGY2j4Fbke0ly/15FhZJlgD+a93SEd0mY69M/ xxVSNJaYZPdd7FUz3WRN9y/f3OrysG6bw8goJjaEg3Oe0LYCJ5oYuzkFmRwivJx2RDZo1ls0 nZC9XM7UGNlSYKkAG73XkXrc2BM7OGkavXMeURyqXWAqzk4IZGLtZq0PIAZS+Yx8/j1ecjNr aNbimXu8F9lTM+UnneXtSX+uiY8COEpYeWU872BW+hDP6+KvcPT8nQATzP30drm/0Ocz/7ey W39Tkhta4zM1BM30ZCwoWKoYahJXmGQvKt5gYUE06WuLy5mCtdmc4jMR3DHwrwxuJtmlOhPI dsrnvNzMmtqCC8xVAWrOykakW3QmT7PoDDDtpo1VJKeuN8ByLKfQBWss9x+QSjEj216cqo30 MLU9JvyvYLYZdHlt6eCVdS/WOsU2wozJjv/UekTgoBHRrvL4viPdM40f8zBq7PlJleGzCtuQ wmfNmqWdhsOg0itXHINDoCIvRx3XP1jrLD4VMAzOA/DuZtzOPD1jQo+Ku2YrxmXTEYxhTME4 c5XJp/ms5tMhSgvvMzQ6JeCYxWZ6mIc1MRTZXKR2EEUOWqruuN4Xzc3WbdkUEJA6SglqquiY Q/npEly6nTGa84b9PG6685jCWiG0ylLU57ksLuS6GTXnSx/EDYaVASXm3JsO3W1lbLe06E9i 2i8ls62ZmEWHRtHFpb+aaE29BZIe7adNzuZQZcgHxv559yqjt71agzL1E14wh0e4ocwxfQcp ZGb5+1uNgJIKG66Djs9CWValivYZRJOs619Oa7No0ZngKuR0y6jb3D2VCHAMWyTLHAP8FwR0 AxOEn7oIMPEtEdZ3rzTplz8z4l2qXloojxnAJ6vKaPNBl/S6V94nColHqZdL2b1GqV24ZeDS pZGizu79GqH1X0Jchv8lUP8v+D8hMLYxNXRysbc1dLKG+h9kKExeZW5kc3RyZWFtCmVuZG9i ago2MCAwIG9iagovR1dMRk5NK05pbWJ1c1JvbU5vOUwtUmVndQplbmRvYmoKNiAwIG9iaiA8 PAovVHlwZSAvRm9udAovU3VidHlwZSAvVHlwZTEKL0VuY29kaW5nIDEyMCAwIFIKL0ZpcnN0 Q2hhciAyCi9MYXN0Q2hhciAxNjgKL1dpZHRocyAxMjcgMCBSCi9CYXNlRm9udCA2MCAwIFIK L0ZvbnREZXNjcmlwdG9yIDQgMCBSCj4+IGVuZG9iago0IDAgb2JqIDw8Ci9Bc2NlbnQgNjc4 Ci9DYXBIZWlnaHQgNjUxCi9EZXNjZW50IC0yMTYKL0ZvbnROYW1lIDYwIDAgUgovSXRhbGlj QW5nbGUgMAovU3RlbVYgODUKL1hIZWlnaHQgNDUwCi9Gb250QkJveCBbLTE2OCAtMjgxIDEw MDAgOTI0XQovRmxhZ3MgNAovQ2hhclNldCAoL2ZpL2ZsL251bWJlcnNpZ24vcGVyY2VudC9x dW90ZXJpZ2h0L3BhcmVubGVmdC9wYXJlbnJpZ2h0L2NvbW1hL2h5cGhlbi9wZXJpb2Qvc2xh c2gvemVyby9vbmUvdHdvL3RocmVlL2ZvdXIvZml2ZS9zaXgvc2V2ZW4vZWlnaHQvbmluZS9j b2xvbi9zZW1pY29sb24vYXQvQS9CL0MvRC9FL0YvRy9IL0kvSi9LL0wvTS9OL08vUC9RL1Iv Uy9UL1UvVi9XL1gvWS9icmFja2V0bGVmdC9icmFja2V0cmlnaHQvYS9iL2MvZC9lL2YvZy9o L2kvai9rL2wvbS9uL28vcC9xL3Ivcy90L3Uvdi93L3gveS96L3F1b3RlZGJsbGVmdC9xdW90 ZWRibHJpZ2h0L2RpZXJlc2lzKQovRm9udEZpbGUgNSAwIFIKPj4gZW5kb2JqCjEyNyAwIG9i agpbNTU2IDU1NiAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDUwMCAwIDgzMyAwIDMzMyAzMzMgMzMzIDAgMCAyNTAgMzMz IDI1MCAyNzggNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwIDI3OCAy NzggMCAwIDAgMCA5MjEgNzIyIDY2NyA2NjcgNzIyIDYxMSA1NTYgNzIyIDcyMiAzMzMgMzg5 IDcyMiA2MTEgODg5IDcyMiA3MjIgNTU2IDcyMiA2NjcgNTU2IDYxMSA3MjIgNzIyIDk0NCA3 MjIgNzIyIDAgMzMzIDAgMzMzIDAgMCAwIDQ0NCA1MDAgNDQ0IDUwMCA0NDQgMzMzIDUwMCA1 MDAgMjc4IDI3OCA1MDAgMjc4IDc3OCA1MDAgNTAwIDUwMCA1MDAgMzMzIDM4OSAyNzggNTAw IDUwMCA3MjIgNTAwIDUwMCA0NDQgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgNDQ0IDQ0NCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDMzMyBdCmVuZG9iagoxOSAwIG9iaiA8PAovVHlwZSAvUGFnZXMKL0NvdW50IDYK L1BhcmVudCAxMjggMCBSCi9LaWRzIFsyIDAgUiAyMiAwIFIgODEgMCBSIDg0IDAgUiA4NyAw IFIgOTMgMCBSXQo+PiBlbmRvYmoKOTggMCBvYmogPDwKL1R5cGUgL1BhZ2VzCi9Db3VudCA2 Ci9QYXJlbnQgMTI4IDAgUgovS2lkcyBbOTYgMCBSIDEwMCAwIFIgMTAzIDAgUiAxMDYgMCBS IDEwOSAwIFIgMTEyIDAgUl0KPj4gZW5kb2JqCjExNyAwIG9iaiA8PAovVHlwZSAvUGFnZXMK L0NvdW50IDEKL1BhcmVudCAxMjggMCBSCi9LaWRzIFsxMTUgMCBSXQo+PiBlbmRvYmoKMTI4 IDAgb2JqIDw8Ci9UeXBlIC9QYWdlcwovQ291bnQgMTMKL0tpZHMgWzE5IDAgUiA5OCAwIFIg MTE3IDAgUl0KPj4gZW5kb2JqCjEyOSAwIG9iaiA8PAovVHlwZSAvQ2F0YWxvZwovUGFnZXMg MTI4IDAgUgo+PiBlbmRvYmoKMTMwIDAgb2JqIDw8Ci9Qcm9kdWNlciAocGRmZVRlWC0xLjIx YSkKL0NyZWF0b3IgKFRlWCkKL0NyZWF0aW9uRGF0ZSAoRDoyMDA4MTIxMjE2MjMzMyswMScw MCcpCi9QVEVYLkZ1bGxiYW5uZXIgKFRoaXMgaXMgcGRmZVRlWCwgVmVyc2lvbiAzLjE0MTU5 Mi0xLjIxYS0yLjIgKFdlYjJDIDcuNS40KSBrcGF0aHNlYSB2ZXJzaW9uIDMuNS42KQo+PiBl bmRvYmoKeHJlZgowIDEzMQowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAwMDM5NzggMDAwMDAg biAKMDAwMDAwMzg3MyAwMDAwMCBuIAowMDAwMDAwMDA5IDAwMDAwIG4gCjAwMDAyMzk4NDYg MDAwMDAgbiAKMDAwMDE5NDgwOSAwMDAwMCBuIAowMDAwMjM5Njk3IDAwMDAwIG4gCjAwMDAx OTQxMTQgMDAwMDAgbiAKMDAwMDE4MDE3OCAwMDAwMCBuIAowMDAwMTkzOTQ0IDAwMDAwIG4g CjAwMDAxNzk1NzAgMDAwMDAgbiAKMDAwMDE3NzYwOSAwMDAwMCBuIAowMDAwMTc5NDEwIDAw MDAwIG4gCjAwMDAxNzY4OTQgMDAwMDAgbiAKMDAwMDE2Mjk5OCAwMDAwMCBuIAowMDAwMTc2 NzE5IDAwMDAwIG4gCjAwMDAxNjIwOTYgMDAwMDAgbiAKMDAwMDExNzMwMSAwMDAwMCBuIAow MDAwMTYxOTQ0IDAwMDAwIG4gCjAwMDAyNDA4NjAgMDAwMDAgbiAKMDAwMDAwODczMSAwMDAw MCBuIAowMDAwMDcyOTkxIDAwMDAwIG4gCjAwMDAwMDg2MjMgMDAwMDAgbiAKMDAwMDAwNDA5 MyAwMDAwMCBuIAowMDAwMTE2Njk2IDAwMDAwIG4gCjAwMDAxMDcyNTAgMDAwMDAgbiAKMDAw MDExNjUyNyAwMDAwMCBuIAowMDAwMDI0NTIwIDAwMDAwIG4gCjAwMDAwMjQ2NjMgMDAwMDAg biAKMDAwMDAyNDY5OCAwMDAwMCBuIAowMDAwMDI0NzMzIDAwMDAwIG4gCjAwMDAwMjQ3Nzkg MDAwMDAgbiAKMDAwMDAyNDk2MSAwMDAwMCBuIAowMDAwMDI1MTQzIDAwMDAwIG4gCjAwMDAw MjUzMTQgMDAwMDAgbiAKMDAwMDAyNTQ5NiAwMDAwMCBuIAowMDAwMDI1Njc4IDAwMDAwIG4g CjAwMDAwMjU4NDkgMDAwMDAgbiAKMDAwMDA3MTM1NSAwMDAwMCBuIAowMDAwMDI2MDcyIDAw MDAwIG4gCjAwMDAwMjYyMjIgMDAwMDAgbiAKMDAwMDA2OTcxOSAwMDAwMCBuIAowMDAwMDI2 NDQzIDAwMDAwIG4gCjAwMDAwMjY1OTMgMDAwMDAgbiAKMDAwMDAyNjYxNSAwMDAwMCBuIAow MDAwMDI3NTA5IDAwMDAwIG4gCjAwMDAwMjgzMTYgMDAwMDAgbiAKMDAwMDAyODU2MyAwMDAw MCBuIAowMDAwMDI4ODIyIDAwMDAwIG4gCjAwMDAwMjkwNjkgMDAwMDAgbiAKMDAwMDAyOTMz MCAwMDAwMCBuIAowMDAwMDI5NTc2IDAwMDAwIG4gCjAwMDAwMjk1OTkgMDAwMDAgbiAKMDAw MDAyOTg5NiAwMDAwMCBuIAowMDAwMDMwMTQzIDAwMDAwIG4gCjAwMDAwMzA0MDQgMDAwMDAg biAKMDAwMDAzMDY1MSAwMDAwMCBuIAowMDAwMDMwOTE4IDAwMDAwIG4gCjAwMDAwMzExNjQg MDAwMDAgbiAKMDAwMDAzMTE4NyAwMDAwMCBuIAowMDAwMjM5NjU0IDAwMDAwIG4gCjAwMDAw MzE0ODQgMDAwMDAgbiAKMDAwMDE2MTkwNCAwMDAwMCBuIAowMDAwMDMxOTg3IDAwMDAwIG4g CjAwMDAwMzIwNjYgMDAwMDAgbiAKMDAwMDAzMjA4NiAwMDAwMCBuIAowMDAwMDMyMTA2IDAw MDAwIG4gCjAwMDAwMzk2NDUgMDAwMDAgbiAKMDAwMDA0Nzc1NiAwMDAwMCBuIAowMDAwMDUw NjI0IDAwMDAwIG4gCjAwMDAwNTA2NDQgMDAwMDAgbiAKMDAwMDA1ODYxNSAwMDAwMCBuIAow MDAwMDY2NzA1IDAwMDAwIG4gCjAwMDAwNjk1NzMgMDAwMDAgbiAKMDAwMDA2OTU5MyAwMDAw MCBuIAowMDAwMDY5NjE0IDAwMDAwIG4gCjAwMDAwNjk2MzUgMDAwMDAgbiAKMDAwMDA2OTY1 NiAwMDAwMCBuIAowMDAwMDY5Njc3IDAwMDAwIG4gCjAwMDAwNjk2OTggMDAwMDAgbiAKMDAw MDA3ODcwNyAwMDAwMCBuIAowMDAwMDc4NTk5IDAwMDAwIG4gCjAwMDAwNzMxMjIgMDAwMDAg biAKMDAwMDA4MzY4MiAwMDAwMCBuIAowMDAwMDgzNTc0IDAwMDAwIG4gCjAwMDAwNzg4MjMg MDAwMDAgbiAKMDAwMDA4OTUzNCAwMDAwMCBuIAowMDAwMDg5NDI2IDAwMDAwIG4gCjAwMDAw ODM3OTggMDAwMDAgbiAKMDAwMDEwNDk3NyAwMDAwMCBuIAowMDAwMTAyMzA3IDAwMDAwIG4g CjAwMDAxMDQ4MTggMDAwMDAgbiAKMDAwMDA5MzYzMSAwMDAwMCBuIAowMDAwMDkzNTIzIDAw MDAwIG4gCjAwMDAwODk2NjIgMDAwMDAgbiAKMDAwMDA5NTA3MSAwMDAwMCBuIAowMDAwMDk0 OTYzIDAwMDAwIG4gCjAwMDAwOTM3MjMgMDAwMDAgbiAKMDAwMDI0MDk2OSAwMDAwMCBuIAow MDAwMDk2Mzk5IDAwMDAwIG4gCjAwMDAwOTYyODkgMDAwMDAgbiAKMDAwMDA5NTE2MyAwMDAw MCBuIAowMDAwMDk3NTQ4IDAwMDAwIG4gCjAwMDAwOTc0MzcgMDAwMDAgbiAKMDAwMDA5NjQ4 MCAwMDAwMCBuIAowMDAwMDk5MTEyIDAwMDAwIG4gCjAwMDAwOTkwMDEgMDAwMDAgbiAKMDAw MDA5NzY0MSAwMDAwMCBuIAowMDAwMTAwMzMyIDAwMDAwIG4gCjAwMDAxMDAyMjEgMDAwMDAg biAKMDAwMDA5OTE5NCAwMDAwMCBuIAowMDAwMTAxMzM1IDAwMDAwIG4gCjAwMDAxMDEyMjQg MDAwMDAgbiAKMDAwMDEwMDQxNCAwMDAwMCBuIAowMDAwMTAyMjI1IDAwMDAwIG4gCjAwMDAx MDIxMTMgMDAwMDAgbiAKMDAwMDEwMTQxNyAwMDAwMCBuIAowMDAwMjQxMDg0IDAwMDAwIG4g CjAwMDAxMDUyNjAgMDAwMDAgbiAKMDAwMDEwNTE4NCAwMDAwMCBuIAowMDAwMTA1MzYyIDAw MDAwIG4gCjAwMDAxMTcwMzkgMDAwMDAgbiAKMDAwMDE2MjYyNiAwMDAwMCBuIAowMDAwMTc3 MjUxIDAwMDAwIG4gCjAwMDAxODAwMzAgMDAwMDAgbiAKMDAwMDE3OTgwNiAwMDAwMCBuIAow MDAwMTk0NDY3IDAwMDAwIG4gCjAwMDAyNDAzNDYgMDAwMDAgbiAKMDAwMDI0MTE2MSAwMDAw MCBuIAowMDAwMjQxMjM3IDAwMDAwIG4gCjAwMDAyNDEyOTAgMDAwMDAgbiAKdHJhaWxlcgo8 PAovU2l6ZSAxMzEKL1Jvb3QgMTI5IDAgUgovSW5mbyAxMzAgMCBSCi9JRCBbPEZFRURDQkJG MzYxQTlGMTc0OUQ1RUEwOEJBRDQ2M0MxPiA8RkVFRENCQkYzNjFBOUYxNzQ5RDVFQTA4QkFE NDYzQzE+XQo+PgpzdGFydHhyZWYKMjQxNDk0CiUlRU9GCg== --aM3YZ0Iwxop3KEKx Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --aM3YZ0Iwxop3KEKx-- From netconf-bounces@ietf.org Fri Dec 12 13:13:48 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 56F9428C17B; Fri, 12 Dec 2008 13:13:48 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A85EE28C173 for ; Fri, 12 Dec 2008 13:13:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.238 X-Spam-Level: X-Spam-Status: No, score=-2.238 tagged_above=-999 required=5 tests=[AWL=0.027, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZMJP0+7CqNIR for ; Fri, 12 Dec 2008 13:13:45 -0800 (PST) Received: from smtp123.sbc.mail.sp1.yahoo.com (smtp123.sbc.mail.sp1.yahoo.com [69.147.64.96]) by core3.amsl.com (Postfix) with SMTP id D823728C153 for ; Fri, 12 Dec 2008 13:13:45 -0800 (PST) Received: (qmail 35249 invoked from network); 12 Dec 2008 21:13:39 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp123.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 21:13:37 -0000 X-YMail-OSG: DqbJ9w0VM1mjhHl0TrBxq7yRVqCQrTpRhJ.Bi8nDPSaIqv.7UPkXVhyfBAlEMmefBGDYoKAlcEkEBdX5qlR35_EaA3MTkvvdQ4fqSdK6Pw.TNEQxmVGV3WF0rvqoGfY1dEH5gipH82NbvzusT7DwR36v X-Yahoo-Newman-Property: ymail-3 Message-ID: <4942D3FF.8000908@netconfcentral.com> Date: Fri, 12 Dec 2008 13:13:35 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Romascanu, Dan (Dan)" References: <49415AE4.6070708@netconfcentral.com> In-Reply-To: Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Romascanu, Dan (Dan) wrote: > Andy, > > Some of the issues that you are mentioning have been discussed in > Minneapolis. I believe that the chairs have made a reasonable effort to > catch the consensus in Minneapolis, which of course needs to be > confirmed by this discussion. > > Your question about 'when shall we go to PS' is in conflict with: > >> Is the WG allowed to make non-backward-compatible changes >> to the protocol or transports? > > If we answer here is 'yes' then we must recycle at PS and it will more > look like a 2.0 than a 1.1 > I don't mind cycling at Proposed Standard, but I do mind wasting a revision cycle (which is N years in the IETF) on fixing typos and clarifying text if the WG decides that some of the functionality itself needs to be updated. I do not want to introduce hack-based design into the NETCONF protocol. If it changes AT ALL, then the capability URI needs to be updated. The option of 'leave the version the same and NETCONF peers can just guess what the other side really implements' is not a good plan. I am glad there are going to be 2 interoperability test reports to start wiFrom netconf-bounces@ietf.org Fri Dec 12 13:13:48 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 56F9428C17B; Fri, 12 Dec 2008 13:13:48 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A85EE28C173 for ; Fri, 12 Dec 2008 13:13:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.238 X-Spam-Level: X-Spam-Status: No, score=-2.238 tagged_above=-999 required=5 tests=[AWL=0.027, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZMJP0+7CqNIR for ; Fri, 12 Dec 2008 13:13:45 -0800 (PST) Received: from smtp123.sbc.mail.sp1.yahoo.com (smtp123.sbc.mail.sp1.yahoo.com [69.147.64.96]) by core3.amsl.com (Postfix) with SMTP id D823728C153 for ; Fri, 12 Dec 2008 13:13:45 -0800 (PST) Received: (qmail 35249 invoked from network); 12 Dec 2008 21:13:39 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp123.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 21:13:37 -0000 X-YMail-OSG: DqbJ9w0VM1mjhHl0TrBxq7yRVqCQrTpRhJ.Bi8nDPSaIqv.7UPkXVhyfBAlEMmefBGDYoKAlcEkEBdX5qlR35_EaA3MTkvvdQ4fqSdK6Pw.TNEQxmVGV3WF0rvqoGfY1dEH5gipH82NbvzusT7DwR36v X-Yahoo-Newman-Property: ymail-3 Message-ID: <4942D3FF.8000908@netconfcentral.com> Date: Fri, 12 Dec 2008 13:13:35 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Romascanu, Dan (Dan)" References: <49415AE4.6070708@netconfcentral.com> In-Reply-To: Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Romascanu, Dan (Dan) wrote: > Andy, > > Some of the issues that you are mentioning have been discussed in > Minneapolis. I believe that the chairs have made a reasonable effort to > catch the consensus in Minneapolis, which of course needs to be > confirmed by this discussion. > > Your question about 'when shall we go to PS' is in conflict with: > >> Is the WG allowed to make non-backward-compatible changes >> to the protocol or transports? > > If we answer here is 'yes' then we must recycle at PS and it will more > look like a 2.0 than a 1.1 > I don't mind cycling at Proposed Standard, but I do mind wasting a revision cycle (which is N years in the IETF) on fixing typos and clarifying text if the WG decides that some of the functionality itself needs to be updated. I do not want to introduce hack-based design into the NETCONF protocol. If it changes AT ALL, then the capability URI needs to be updated. The option of 'leave the version the same and NETCONF peers can just guess what the other side really implements' is not a good plan. I am glad there are going to be 2 interoperability test reports to stth. The charter should include an issue (or sentence) saying that the WG will address any 1.0 and 1.1 co-existence issues as well. > BTW - we talk about the protocol in 4741bis, not sure what you mention > transports. > There has been some talk of removing the SSH EOM marker, and that would be an incompatible change in 4742. The charter does mention that 4742 may get updated as well. > Dan > (speaking as contributor) > > Andy > >> -----Original Message----- >> From: Andy Bierman [mailto:andy@netconfcentral.com] >> Sent: Thursday, December 11, 2008 8:25 PM >> To: Ersue, Mehmet (NSN - DE/Munich) >> Cc: Romascanu, Dan (Dan); rbonica@juniper.net; netconf@ietf.org >> Subject: Re: [Netconf] Request for charter change >> >> Ersue, Mehmet (NSN - DE/Munich) wrote: >>> Dear ADs (and WG), >>> >>> based on the consensus after IETF 73 we prepared an update for the >>> NETCONF WG charter. >>> >> >> ... >> >>> 6. NETCONF implementations have shown that the >> specification in RFC4741 >>> is not 100% clear and has lead to different interpretations and >>> implementations. >>> Also some errors have been uncovered. So the WG will do >> an rfc4741bis >>> with >>> following constraints: >>> >> Please document the implementation experience first, >> before changing the protocol based on it. I believe >> there was 1 interop test done awhile back, and Juergen >> has done some private testing on his own. >> >> What level of interoperability is the WG trying to achieve? >> Is it the RPC operation layer? The content layer? >> Are there multiple independent implementations of the >> same read-write data model(s)? >> >> Is the WG attempting to gather interoperability experience, >> document it, and advance the protocol to Draft Standard? >> Is the WG ready to move some transports to Historic if >> there are not at least 2 independent implementations? >> >> If not, why not? >> It's been published for 2 years already. >> When does the WG estimate that NETCONF will advance to DS? >> >>> - bug fixes are to be done >>> - clarifications can be done >>> - no extensions (i.e. we are not doing a NETCONF V2) >> What about the 'test-only' enumeration for test-option? >> IMO, the WG needs some flexibility in the solution space >> to deal with usability problems found. It has been determined >> that 'test-then-set' and are somewhat worthless, >> and a 'test-only' mode for would have been much >> better in the first place. Is that a new feature or a bugfix? >> >> Is the WG allowed to make non-backward-compatible changes >> to the protocol or transports? >> >> The base URI for the NETCONF protocol is going to change >> (it better) if any observable changes are made to protocol >> behavior. Are there any 1.0 to 1.1 protocol migration >> concerns? Are there any issues related to mixing 1.0 >> and 1.1 agents in the same network? >> >> IMO, this 4741-bis work item does not fully address the >> scope and complexity of the problem space. >> >> >> thanks, >> Andy >> >> > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf art with. The charter should include an issue (or sentence) saying that the WG will address any 1.0 and 1.1 co-existence issues as well. > BTW - we talk about the protocol in 4741bis, not sure what you mention > transports. > There has been some talk of removing the SSH EOM marker, and that would be an incompatible change in 4742. The charter does mention that 4742 may get updated as well. > Dan > (speaking as contributor) > > Andy > >> -----Original Message----- >> From: Andy Bierman [mailto:andy@netconfcentral.com] >> Sent: Thursday, December 11, 2008 8:25 PM >> To: Ersue, Mehmet (NSN - DE/Munich) >> Cc: Romascanu, Dan (Dan); rbonica@juniper.net; netconf@ietf.org >> Subject: Re: [Netconf] Request for charter change >> >> Ersue, Mehmet (NSN - DE/Munich) wrote: >>> Dear ADs (and WG), >>> >>> based on the consensus after IETF 73 we prepared an update for the >>> NETCONF WG charter. >>> >> >> ... >> >>> 6. NETCONF implementations have shown that the >> specification in RFC4741 >>> is not 100% clear and has lead to different interpretations and >>> implementations. >>> Also some errors have been uncovered. So the WG will do >> an rfc4741bis >>> with >>> following constraints: >>> >> Please document the implementation experience first, >> before changing the protocol based on it. I believe >> there was 1 interop test done awhile back, and Juergen >> has done some private testing on his own. >> >> What level of interoperability is the WG trying to achieve? >> Is it the RPC operation layer? The content layer? >> Are there multiple independent implementations of the >> same read-write data model(s)? >> >> Is the WG attempting to gather interoperability experience, >> document it, and advance the protocol to Draft Standard? >> Is the WG ready to move some transports to Historic if >> there are not at least 2 independent implementations? >> >> If not, why not? >> It's been published for 2 years already. >> When does the WG estimate that NETCONF will advance to DS? >> >>> - bug fixes are to be done >>> - clarifications can be done >>> - no extensions (i.e. we are not doing a NETCONF V2) >> What about the 'test-only' enumeration for test-option? >> IMO, the WG needs some flexibility in the solution space >> to deal with usability problems found. It has been determined >> that 'test-then-set' and are somewhat worthless, >> and a 'test-only' mode for would have been much >> better in the first place. Is that a new feature or a bugfix? >> >> Is the WG allowed to make non-backward-compatible changes >> to the protocol or transports? >> >> The base URI for the NETCONF protocol is going to change >> (it better) if any observable changes are made to protocol >> behavior. Are there any 1.0 to 1.1 protocol migration >> concerns? Are there any issues related to mixing 1.0 >> and 1.1 agents in the same network? >> >> IMO, this 4741-bis work item does not fully address the >> scope and complexity of the problem space. >> >> >> thanks, >> Andy >> >> > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 13:30:24 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2D5D328C23A; Fri, 12 Dec 2008 13:30:24 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 075D928C239 for ; Fri, 12 Dec 2008 13:30:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.237 X-Spam-Level: X-Spam-Status: No, score=-2.237 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vEBFyZcJcYhZ for ; Fri, 12 Dec 2008 13:30:22 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 1A9A528C230 for ; Fri, 12 Dec 2008 13:30:22 -0800 (PST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id AC3F6C0047; Fri, 12 Dec 2008 22:30:15 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id 7UnsLVhecXB3; Fri, 12 Dec 2008 22:30:08 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id C2ECAC0008; Fri, 12 Dec 2008 22:30:07 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 221DC8B1658; Fri, 12 Dec 2008 22:30:07 +0100 (CET) Date: Fri, 12 Dec 2008 22:30:07 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081212213007.GB22745@elstar.local> Mail-Followup-To: Andy Bierman , "Romascanu, Dan (Dan)" , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <4942D3FF.8000908@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4942D3FF.8000908@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org, rbonica@juniper.net Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 12, 2008 at 01:13:35PM -0800, Andy Bierman wrote: > I do not want to introduce hack-based design into > the NETCONF protocol. Who proposed to do that? /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 13:30:24 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2D5D328C23A; Fri, 12 Dec 2008 13:30:24 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 075D928C239 for ; Fri, 12 Dec 2008 13:30:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.237 X-Spam-Level: X-Spam-Status: No, score=-2.237 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vEBFyZcJcYhZ for ; Fri, 12 Dec 2008 13:30:22 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 1A9A528C230 for ; Fri, 12 Dec 2008 13:30:22 -0800 (PST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id AC3F6C0047; Fri, 12 Dec 2008 22:30:15 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id 7UnsLVhecXB3; Fri, 12 Dec 2008 22:30:08 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id C2ECAC0008; Fri, 12 Dec 2008 22:30:07 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 221DC8B1658; Fri, 12 Dec 2008 22:30:07 +0100 (CET) Date: Fri, 12 Dec 2008 22:30:07 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081212213007.GB22745@elstar.local> Mail-Followup-To: Andy Bierman , "Romascanu, Dan (Dan)" , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <4942D3FF.8000908@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <4942D3FF.8000908@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org, rbonica@juniper.net Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 12, 2008 at 01:13:35PM -0800, Andy Bierman wrote: > I do not want to introduce hack-based design into > the NETCONF protocol. Who proposed to do that? /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 14:31:26 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 221AA3A6887; Fri, 12 Dec 2008 14:31:26 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 583F13A6887 for ; Fri, 12 Dec 2008 14:31:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.046 X-Spam-Level: X-Spam-Status: No, score=-2.046 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4q7dpTyW4YNh for ; Fri, 12 Dec 2008 14:31:24 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 320BA3A686C for ; Fri, 12 Dec 2008 14:31:24 -0800 (PST) Received: from [192.168.1.3] (1-1-10-25a.has.sth.bostream.se [82.182.131.89]) by mail.tail-f.com (Postfix) with ESMTPSA id 8159676C523; Fri, 12 Dec 2008 23:31:16 +0100 (CET) Message-Id: From: Jan Lindblad To: Andy Bierman In-Reply-To: <494283A4.4030703@netconfcentral.com> Mime-Version: 1.0 (Apple Message framework v929.2) Date: Fri, 12 Dec 2008 23:31:14 +0100 References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> X-Mailer: Apple Mail (2.929.2) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0823227703==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --===============0823227703== Content-Type: multipart/signed; boundary=Apple-Mail-300--441711807; micalg=sha1; protocol="application/pkcs7-signature" --Apple-Mail-300--441711807 Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes Content-Transfer-Encoding: quoted-printable >> The hard lesson learned by the "SQL injection" crisis is that a =20 >> client that doesn't properly and completely check it's input, =20 >> effectively transfers any trust/authority it may have to whoever is =20= >> capable of providing such input. This is a fact of life, and has =20 >> very little to do with start tags or ]]>]]> EOM markers. >> Just as a simple example, consider an application that prompts for =20= >> a name and inserts it in its XML stream: >> """ >> >> >> >> %s >> almost-nothing >> >> >> >> """ >> And someone responds with: >> "cool-hackertop-secret> user>someone-else" >> The good news is that it's very easy to fix this. Simply by =20 >> removing (or XML escaping) all > characters in the user input (plus =20= >> quotes if it inserts text in attributes), the application is safe. >>> That's possible too, but a lot harder. It requires knowledge of the >>> entire XML stream sent to the agent before the insertion point. =20 >>> It's >>> doable, but takes a *lot* more effort as opposed to almost none for >>> inserting an EOM and hoping it's not checked. >> This appeals to the security-by-obscurity principle. It was =20 >> (mostly) abandoned ca 1973. > > great example... > > Isn't part of the responsibility on the manager? I don't think so. The server will not be able to tell whether the =20 above request is a legitimate creation of two users or a result of a =20 na=EFve client being tricked. Look at a decade's worth of experience in the SQL injection defense. =20 It's all happening on the client side. There are basically two defense =20= mechanisms: - All user provided data is sent out-of-band, or - All user provided data is cleaned from "control characters" or =20 control characters are escaped. Doing something out-of-band on an SSH session seems complicated, but =20 with XML, cleaning is easy. Basically removing (or escaping) any =20 occurrences of > (in CDATA) and quotes (in attributes) will make it =20 impossible for a malicious user to modify the XML document structure. > In your example, almost no ACM or agent mechanism is really going > to help. If the user correctly establishes a session, > and has write access to the /users/user node, then injecting > an extra entry is going to be accepted. > > (The super-fine VACM mode "let user X set leaf Y to value Z" is > way too hard to really be useful.) And even if ACM rules like this could be expressed, it wouldn't help =20 when the client really has the authority to create users with top-=20 secret privileges. The server could not distinguish between a sane and =20= tricked client. /Jan Lindblad --Apple-Mail-300--441711807 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGHzCCAtgw ggJBoAMCAQICEEWKgsybmpBlGydDD9KtfaUwDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UEBhMCWkEx JTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQ ZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA4MDYxODIwNTEwMloXDTA5MDYxODIwNTEw MlowQTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEeMBwGCSqGSIb3DQEJARYPamFu bEB0YWlsLWYuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gb1QID40kDl7Gm5 yilEygTfJlD50PH5yQ1s5mtPLq//DPP7WIazYhWQYZrpxP/8zk9WlQmWTQmUw+H1dFXTBVVKgzXc h0i4eZXA/j2NjHtPheBzfj2gZIKf3EHHPR8tujK1QR/U/6YUQd04gGbd05oUyKBzYxJw4AGBFfU9 GXQlzKNYET7/yLDXtxKYe5OOSUXOT9JmCkpp2SYLmuU3cDZRwWiIJN0LRhBQ3dThHAC6L0dT3CR7 +p2Lm6qFJdPdZOWWFtTPUCZL1Ig3YzLP//oiD+F0Ka76rw6IPnbd2LDnCd6keFi0hqtuay8aswCE RCmG3enT9GgbFU/GDogP3wIDAQABoywwKjAaBgNVHREEEzARgQ9qYW5sQHRhaWwtZi5jb20wDAYD VR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOBgQAaWX+TEZKRYn9weUXAwGqGZBjNQuoPQjcXZRql dcDzBJI9ND5N8kf++/TQOrWYw27z0h4tZW8guv+U48qcWs8zO4iQCH9W9qrn6vENiaWGGuUgXmK/ qsU3fOnkSkrrI1S6YDw0f8DxjjLgdeMNJpAEN2VZgez9lXBHWFgV1RJ+BTCCAz8wggKooAMCAQIC AQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUx EjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsT H0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25h bCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQK ExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwg RnJlZW1haWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065 yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FW y688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5k GXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0 dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQE AwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcN AQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNwPP2t 4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq726jTlEBpb NU1341YheILcIRk13iSx0x1G/11fZU8xggMQMIIDDAIBATB2MGIxCzAJBgNVBAYTAlpBMSUwIwYD VQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29u YWwgRnJlZW1haWwgSXNzdWluZyBDQQIQRYqCzJuakGUbJ0MP0q19pTAJBgUrDgMCGgUAoIIBbzAY BgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wODEyMTIyMjMxMTVaMCMG CSqGSIb3DQEJBDEWBBQhn+iMIRs8S3LVAeEtNBYwLoE4pjCBhQYJKwYBBAGCNxAEMXgwdjBiMQsw CQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECEEWKgsybmpBlGydDD9KtfaUw gYcGCyqGSIb3DQEJEAILMXigdjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1 bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3Vp bmcgQ0ECEEWKgsybmpBlGydDD9KtfaUwDQYJKoZIhvcNAQEBBQAEggEAdkxdovTQ4NDVI3ohzUSC eo2J2q3jdS2BtxmRSubywvI3PC1pfiO3QzD4Peo1efAQ1yIcJi8jdWtfcE0nN8nGHYNJ1owedBJc dbcdMq1iGyAoUjM9pe7LNkW4YUSUg2/RL0zqoG5BHND+tMqF1C/FwsVKvXU1wT5Jz7XlGmyGu360 7x6w19XJKTt6DteSffzRbPtznRfRMGYngVkNzAlEavTC4XF3KyCcJ16nG7f+spT57MjtpPFFdkw2 bElMkECrG9Qazj3q9SZ4PeX1Eu7w+BxX3er4OOB+KMd2VnAcgKXnmDlOz8AhKUlIPsRmdcTLA3y1 N1hd9QjSN80+vOeiygAAAAAAAA== --Apple-Mail-300--441711807-- --===============0823227703== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0823227703==-- From netconf-bounces@ietf.org Fri Dec 12 14:31:26 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 221AA3A6887; Fri, 12 Dec 2008 14:31:26 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 583F13A6887 for ; Fri, 12 Dec 2008 14:31:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.046 X-Spam-Level: X-Spam-Status: No, score=-2.046 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4q7dpTyW4YNh for ; Fri, 12 Dec 2008 14:31:24 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 320BA3A686C for ; Fri, 12 Dec 2008 14:31:24 -0800 (PST) Received: from [192.168.1.3] (1-1-10-25a.has.sth.bostream.se [82.182.131.89]) by mail.tail-f.com (Postfix) with ESMTPSA id 8159676C523; Fri, 12 Dec 2008 23:31:16 +0100 (CET) Message-Id: From: Jan Lindblad To: Andy Bierman In-Reply-To: <494283A4.4030703@netconfcentral.com> Mime-Version: 1.0 (Apple Message framework v929.2) Date: Fri, 12 Dec 2008 23:31:14 +0100 References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> X-Mailer: Apple Mail (2.929.2) Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0823227703==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --===============0823227703== Content-Type: multipart/signed; boundary=Apple-Mail-300--441711807; micalg=sha1; protocol="application/pkcs7-signature" --Apple-Mail-300--441711807 Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes Content-Transfer-Encoding: quoted-printable >> The hard lesson learned by the "SQL injection" crisis is that a =20 >> client that doesn't properly and completely check it's input, =20 >> effectively transfers any trust/authority it may have to whoever is =20= >> capable of providing such input. This is a fact of life, and has =20 >> very little to do with start tags or ]]>]]> EOM markers. >> Just as a simple example, consider an application that prompts for =20= >> a name and inserts it in its XML stream: >> """ >> >> >> >> %s >> almost-nothing >> >> >> >> """ >> And someone responds with: >> "cool-hackertop-secret> user>someone-else" >> The good news is that it's very easy to fix this. Simply by =20 >> removing (or XML escaping) all > characters in the user input (plus =20= >> quotes if it inserts text in attributes), the application is safe. >>> That's possible too, but a lot harder. It requires knowledge of the >>> entire XML stream sent to the agent before the insertion point. =20 >>> It's >>> doable, but takes a *lot* more effort as opposed to almost none for >>> inserting an EOM and hoping it's not checked. >> This appeals to the security-by-obscurity principle. It was =20 >> (mostly) abandoned ca 1973. > > great example... > > Isn't part of the responsibility on the manager? I don't think so. The server will not be able to tell whether the =20 above request is a legitimate creation of two users or a result of a =20 na=EFve client being tricked. Look at a decade's worth of experience in the SQL injection defense. =20 It's all happening on the client side. There are basically two defense =20= mechanisms: - All user provided data is sent out-of-band, or - All user provided data is cleaned from "control characters" or =20 control characters are escaped. Doing something out-of-band on an SSH session seems complicated, but =20 with XML, cleaning is easy. Basically removing (or escaping) any =20 occurrences of > (in CDATA) and quotes (in attributes) will make it =20 impossible for a malicious user to modify the XML document structure. > In your example, almost no ACM or agent mechanism is really going > to help. If the user correctly establishes a session, > and has write access to the /users/user node, then injecting > an extra entry is going to be accepted. > > (The super-fine VACM mode "let user X set leaf Y to value Z" is > way too hard to really be useful.) And even if ACM rules like this could be expressed, it wouldn't help =20 when the client really has the authority to create users with top-=20 secret privileges. The server could not distinguish between a sane and =20= tricked client. /Jan Lindblad --Apple-Mail-300--441711807 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGHzCCAtgw ggJBoAMCAQICEEWKgsybmpBlGydDD9KtfaUwDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UEBhMCWkEx JTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQ ZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA4MDYxODIwNTEwMloXDTA5MDYxODIwNTEw MlowQTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEeMBwGCSqGSIb3DQEJARYPamFu bEB0YWlsLWYuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gb1QID40kDl7Gm5 yilEygTfJlD50PH5yQ1s5mtPLq//DPP7WIazYhWQYZrpxP/8zk9WlQmWTQmUw+H1dFXTBVVKgzXc h0i4eZXA/j2NjHtPheBzfj2gZIKf3EHHPR8tujK1QR/U/6YUQd04gGbd05oUyKBzYxJw4AGBFfU9 GXQlzKNYET7/yLDXtxKYe5OOSUXOT9JmCkpp2SYLmuU3cDZRwWiIJN0LRhBQ3dThHAC6L0dT3CR7 +p2Lm6qFJdPdZOWWFtTPUCZL1Ig3YzLP//oiD+F0Ka76rw6IPnbd2LDnCd6keFi0hqtuay8aswCE RCmG3enT9GgbFU/GDogP3wIDAQABoywwKjAaBgNVHREEEzARgQ9qYW5sQHRhaWwtZi5jb20wDAYD VR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOBgQAaWX+TEZKRYn9weUXAwGqGZBjNQuoPQjcXZRql dcDzBJI9ND5N8kf++/TQOrWYw27z0h4tZW8guv+U48qcWs8zO4iQCH9W9qrn6vENiaWGGuUgXmK/ qsU3fOnkSkrrI1S6YDw0f8DxjjLgdeMNJpAEN2VZgez9lXBHWFgV1RJ+BTCCAz8wggKooAMCAQIC AQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUx EjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsT H0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25h bCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQK ExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwg RnJlZW1haWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065 yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FW y688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5k GXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0 dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQE AwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcN AQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNwPP2t 4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq726jTlEBpb NU1341YheILcIRk13iSx0x1G/11fZU8xggMQMIIDDAIBATB2MGIxCzAJBgNVBAYTAlpBMSUwIwYD VQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29u YWwgRnJlZW1haWwgSXNzdWluZyBDQQIQRYqCzJuakGUbJ0MP0q19pTAJBgUrDgMCGgUAoIIBbzAY BgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wODEyMTIyMjMxMTVaMCMG CSqGSIb3DQEJBDEWBBQhn+iMIRs8S3LVAeEtNBYwLoE4pjCBhQYJKwYBBAGCNxAEMXgwdjBiMQsw CQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECEEWKgsybmpBlGydDD9KtfaUw gYcGCyqGSIb3DQEJEAILMXigdjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1 bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3Vp bmcgQ0ECEEWKgsybmpBlGydDD9KtfaUwDQYJKoZIhvcNAQEBBQAEggEAdkxdovTQ4NDVI3ohzUSC eo2J2q3jdS2BtxmRSubywvI3PC1pfiO3QzD4Peo1efAQ1yIcJi8jdWtfcE0nN8nGHYNJ1owedBJc dbcdMq1iGyAoUjM9pe7LNkW4YUSUg2/RL0zqoG5BHND+tMqF1C/FwsVKvXU1wT5Jz7XlGmyGu360 7x6w19XJKTt6DteSffzRbPtznRfRMGYngVkNzAlEavTC4XF3KyCcJ16nG7f+spT57MjtpPFFdkw2 bElMkECrG9Qazj3q9SZ4PeX1Eu7w+BxX3er4OOB+KMd2VnAcgKXnmDlOz8AhKUlIPsRmdcTLA3y1 N1hd9QjSN80+vOeiygAAAAAAAA== --Apple-Mail-300--441711807-- --===============0823227703== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0823227703==-- From netconf-bounces@ietf.org Fri Dec 12 15:14:11 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 17A383A6923; Fri, 12 Dec 2008 15:14:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 72FAB3A6923 for ; Fri, 12 Dec 2008 15:14:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.24 X-Spam-Level: X-Spam-Status: No, score=-2.24 tagged_above=-999 required=5 tests=[AWL=0.025, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6HUjtOITyVo5 for ; Fri, 12 Dec 2008 15:14:09 -0800 (PST) Received: from smtp121.sbc.mail.sp1.yahoo.com (smtp121.sbc.mail.sp1.yahoo.com [69.147.64.94]) by core3.amsl.com (Postfix) with SMTP id C48583A691E for ; Fri, 12 Dec 2008 15:14:09 -0800 (PST) Received: (qmail 24671 invoked from network); 12 Dec 2008 23:14:03 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp121.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 23:14:01 -0000 X-YMail-OSG: vnEeN6kVM1lwSOuHxrSrvhqHXwiu1LRGHTZVlWDtLFAeKvVZsYfNVsvW8RpjvkPkRR8KJt_562iSm.Hq8C6qRC8Z5REtRGRiAgHv1LbmiggGCBO_ZFdDKE1JX1K5ZrPLuKlVCf9trmdl6P2y2L0r.1iC X-Yahoo-Newman-Property: ymail-3 Message-ID: <4942F037.9090308@netconfcentral.com> Date: Fri, 12 Dec 2008 15:13:59 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Andy Bierman , "Romascanu, Dan (Dan)" , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <4942D3FF.8000908@netconfcentral.com> <20081212213007.GB22745@elstar.local> In-Reply-To: <20081212213007.GB22745@elstar.local> Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 12, 2008 at 01:13:35PM -0800, Andy Bierman wrote: > >> I do not want to introduce hack-based design into >> the NETCONF protocol. > > Who proposed to do that? > Nobody, because nobody is going to suggest that we should leave the base capability URI the same if a compliant 1.0 manager or agent is not 1.1 compliant as well. If there is no 1.1 URI, then there is no 1.1 protocol, just clarifying non-changes. However, the IETF has been known to stretch the meaning of a clarifying non-change, which IMO is wrong. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 12 15:14:11 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 17A383A6923; Fri, 12 Dec 2008 15:14:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 72FAB3A6923 for ; Fri, 12 Dec 2008 15:14:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.24 X-Spam-Level: X-Spam-Status: No, score=-2.24 tagged_above=-999 required=5 tests=[AWL=0.025, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6HUjtOITyVo5 for ; Fri, 12 Dec 2008 15:14:09 -0800 (PST) Received: from smtp121.sbc.mail.sp1.yahoo.com (smtp121.sbc.mail.sp1.yahoo.com [69.147.64.94]) by core3.amsl.com (Postfix) with SMTP id C48583A691E for ; Fri, 12 Dec 2008 15:14:09 -0800 (PST) Received: (qmail 24671 invoked from network); 12 Dec 2008 23:14:03 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp121.sbc.mail.sp1.yahoo.com with SMTP; 12 Dec 2008 23:14:01 -0000 X-YMail-OSG: vnEeN6kVM1lwSOuHxrSrvhqHXwiu1LRGHTZVlWDtLFAeKvVZsYfNVsvW8RpjvkPkRR8KJt_562iSm.Hq8C6qRC8Z5REtRGRiAgHv1LbmiggGCBO_ZFdDKE1JX1K5ZrPLuKlVCf9trmdl6P2y2L0r.1iC X-Yahoo-Newman-Property: ymail-3 Message-ID: <4942F037.9090308@netconfcentral.com> Date: Fri, 12 Dec 2008 15:13:59 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Andy Bierman , "Romascanu, Dan (Dan)" , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <4942D3FF.8000908@netconfcentral.com> <20081212213007.GB22745@elstar.local> In-Reply-To: <20081212213007.GB22745@elstar.local> Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 12, 2008 at 01:13:35PM -0800, Andy Bierman wrote: > >> I do not want to introduce hack-based design into >> the NETCONF protocol. > > Who proposed to do that? > Nobody, because nobody is going to suggest that we should leave the base capability URI the same if a compliant 1.0 manager or agent is not 1.1 compliant as well. If there is no 1.1 URI, then there is no 1.1 protocol, just clarifying non-changes. However, the IETF has been known to stretch the meaning of a clarifying non-change, which IMO is wrong. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sat Dec 13 05:45:28 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 46F043A691B; Sat, 13 Dec 2008 05:45:28 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 758F33A691B for ; Sat, 13 Dec 2008 05:45:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.803 X-Spam-Level: X-Spam-Status: No, score=-1.803 tagged_above=-999 required=5 tests=[AWL=0.797, BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yU92TVHktZlH for ; Sat, 13 Dec 2008 05:45:25 -0800 (PST) Received: from hadron.switch.ch (hadron.switch.ch [IPv6:2001:620:0:4:203:baff:fe4c:d99b]) by core3.amsl.com (Postfix) with ESMTP id 41A283A67E1 for ; Sat, 13 Dec 2008 05:45:24 -0800 (PST) Received: from hadron.switch.ch (localhost [IPv6:::1]) by hadron.switch.ch (8.14.3+Sun/8.14.3) with ESMTP id mBDDjFn7026341; Sat, 13 Dec 2008 14:45:15 +0100 (CET) Received: (from leinen@localhost) by hadron.switch.ch (8.14.3+Sun/8.14.3/Submit) id mBDDjFwi026340; Sat, 13 Dec 2008 14:45:15 +0100 (CET) X-Authentication-Warning: hadron.switch.ch: leinen set sender to simon.leinen@switch.ch using -f To: Jan Lindblad X-Face: 1Nk*r=:$IBBb8|TyRB'2WSY6u:BzMO7N)#id#-4_}MsU5?vTI?dez|JiutW4sKBLjp.l7, F 7QOld^hORRtpCUj)!cP]gtK_SyK5FW(+o"!or:v^C^]OxX^3+IPd\z, @ttmwYVO7l`6OXXYR` From: Simon Leinen In-Reply-To: (Jan Lindblad's message of "Fri, 12 Dec 2008 23:31:14 +0100") References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> Date: Sat, 13 Dec 2008 14:45:15 +0100 Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (usg-unix-v) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org SmFuIExpbmRibGFkIHdyaXRlczoKPltxdW90aW5nIEFuZHldCj4+W3F1b3RpbmcgSmFuXQo+Pj4g QW5kIHNvbWVvbmUgcmVzcG9uZHMgd2l0aDoKPj4+ICJjb29sLWhhY2tlcjwvbmFtZT48cHJpdmls ZWdlcz50b3Atc2VjcmV0PC9wcml2aWxlZ2VzPjwvCnVzZXI+IDx1c2VyPjxuYW1lPnNvbWVvbmUt ZWxzZSIKPj4+IFRoZSBnb29kIG5ld3MgaXMgdGhhdCBpdCdzIHZlcnkgZWFzeSB0byBmaXggdGhp cy4gWy4uLl0KCj4+IGdyZWF0IGV4YW1wbGUuLi4KPj4gCj4+IElzbid0IHBhcnQgb2YgdGhlIHJl c3BvbnNpYmlsaXR5IG9uIHRoZSBtYW5hZ2VyPwoKPiBJIGRvbid0IHRoaW5rIHNvLiBUaGUgc2Vy dmVyIHdpbGwgbm90IGJlIGFibGUgdG8gdGVsbCB3aGV0aGVyIHRoZQo+IGFib3ZlIHJlcXVlc3Qg aXMgYSBsZWdpdGltYXRlIGNyZWF0aW9uIG9mIHR3byB1c2VycyBvciBhIHJlc3VsdCBvZiBhCj4g bmHDr3ZlIGNsaWVFrom netconf-bounces@ietf.org Sat Dec 13 05:45:28 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 46F043A691B; Sat, 13 Dec 2008 05:45:28 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 758F33A691B for ; Sat, 13 Dec 2008 05:45:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.803 X-Spam-Level: X-Spam-Status: No, score=-1.803 tagged_above=-999 required=5 tests=[AWL=0.797, BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yU92TVHktZlH for ; Sat, 13 Dec 2008 05:45:25 -0800 (PST) Received: from hadron.switch.ch (hadron.switch.ch [IPv6:2001:620:0:4:203:baff:fe4c:d99b]) by core3.amsl.com (Postfix) with ESMTP id 41A283A67E1 for ; Sat, 13 Dec 2008 05:45:24 -0800 (PST) Received: from hadron.switch.ch (localhost [IPv6:::1]) by hadron.switch.ch (8.14.3+Sun/8.14.3) with ESMTP id mBDDjFn7026341; Sat, 13 Dec 2008 14:45:15 +0100 (CET) Received: (from leinen@localhost) by hadron.switch.ch (8.14.3+Sun/8.14.3/Submit) id mBDDjFwi026340; Sat, 13 Dec 2008 14:45:15 +0100 (CET) X-Authentication-Warning: hadron.switch.ch: leinen set sender to simon.leinen@switch.ch using -f To: Jan Lindblad X-Face: 1Nk*r=:$IBBb8|TyRB'2WSY6u:BzMO7N)#id#-4_}MsU5?vTI?dez|JiutW4sKBLjp.l7, F 7QOld^hORRtpCUj)!cP]gtK_SyK5FW(+o"!or:v^C^]OxX^3+IPd\z, @ttmwYVO7l`6OXXYR` From: Simon Leinen In-Reply-To: (Jan Lindblad's message of "Fri, 12 Dec 2008 23:31:14 +0100") References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> Date: Sat, 13 Dec 2008 14:45:15 +0100 Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (usg-unix-v) MIME-Version: 1.0 Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org SmFuIExpbmRibGFkIHdyaXRlczoKPltxdW90aW5nIEFuZHldCj4+W3F1b3RpbmcgSmFuXQo+Pj4g QW5kIHNvbWVvbmUgcmVzcG9uZHMgd2l0aDoKPj4+ICJjb29sLWhhY2tlcjwvbmFtZT48cHJpdmls ZWdlcz50b3Atc2VjcmV0PC9wcml2aWxlZ2VzPjwvCnVzZXI+IDx1c2VyPjxuYW1lPnNvbWVvbmUt ZWxzZSIKPj4+IFRoZSBnb29kIG5ld3MgaXMgdGhhdCBpdCdzIHZlcnkgZWFzeSB0byBmaXggdGhp cy4gWy4uLl0KCj4+IGdyZWF0IGV4YW1wbGUuLi4KPj4gCj4+IElzbid0IHBhcnQgb2YgdGhlIHJl c3BvbnNpYmlsaXR5IG9uIHRoZSBtYW5hZ2VyPwoKPiBJIGRvbid0IHRoaW5rIHNvLiBUaGUgc2Vy dmVyIHdpbGwgbm90IGJlIGFibGUgdG8gdGVsbCB3aGV0aGVyIHRoZQo+IGFib3ZlIHJlcXVlc3Qg aXMgYSBsZWdpdGltYXRlIGNyZWF0aW9uIG9mIHR3byB1c2VycyBvciBhIHJlc3VsdCBvZiBhCj4g bmHDr3ZlIGNsaWVudCBiZWluZyB0cmlja2VkLgoKSSB0aGluayB0aGF0IHRoZSAibWFuYWdlciIg QW5keSBpcyB0YWxraW5nIGFib3V0IGlzIHRoZSBwaWVjZSBvZgpzb2Z0d2FyZSBnZW5lcmF0aW5n IE5FVENPTkYgcmVxdWVzdHMgZnJvbSB1c2VyIGlucHV0LCB0aGUgc2FtZSB0aGluZwp0aGF0IHlv dSBjYWxsIHRoZSAiY2xpZW50IiAKClNvIHRoZSB0d28gb2YgeW91IHNlZW0gdG8gYmUgaW4gdmlv bGVudCBhZ3JlZW1lbnQuCgpGb3IgdGhlIHJlY29yZCwgSSBhZ3JlZSB0aGF0IHRoaXMgcHJvYmxl bSBtdXN0IGJlIHNvbHZlZCBieSBlZHVjYXRpbmcKcHJvZ3JhbW1lcnMgb24gdGhlIE5FVENPTkYg Y2xpZW50IChtYW5hZ2VyKSBzaWRlIHRvIHNhbml0aXplIHVzZXIKaW5wdXQsIGFuZCB0byBwcm92 aWRlIHRoZW0gd2l0aCB0aGUgYXBwcm9wcmlhdGUgdG9vbHMgLSB2aXouIG1vZGVybgpkZXZlbG9w bWVudCB0b29sa2l0cyBzdWNoIGFzIFJhaWxzIG1ha2luZyBpdCBpbmNyZWFzaW5nbHkgZGlmZmlj dWx0IHRvCndyaXRlIHByb2dyYW1zIHZ1bG5lcmFibGUgdG8gU1FMIGluamVjdGlvbiBhbmQgc2lt aWxhciBhdHRhY2tzLgoKV2Ugc2hvdWxkbid0IHRyeSB0byBzb2x2ZSB0aGlzIGJ5IG1ha2luZyB0 aGUgcHJvdG9jb2wgbW9yZSBjb21wbGV4LCBvcgpieSBkZXBlbmRpbmcgb24gYSBmaW5lLWdyYWlu ZWQgYXV0aG9yaXphdGlvbiBzY2hlbWUgbm9ib2R5IHdpbGwgdXNlCihBbmR5IGFscmVhZHkgbWVu dGlvbmVkIHRoZSBTTk1QIFZBQ00pLgotLSAKU2ltb24uCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYgbWFpbGluZyBsaXN0Ck5ldGNvbmZAaWV0 Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZXRjb25mCg== udCBiZWluZyB0cmlja2VkLgoKSSB0aGluayB0aGF0IHRoZSAibWFuYWdlciIg QW5keSBpcyB0YWxraW5nIGFib3V0IGlzIHRoZSBwaWVjZSBvZgpzb2Z0d2FyZSBnZW5lcmF0aW5n IE5FVENPTkYgcmVxdWVzdHMgZnJvbSB1c2VyIGlucHV0LCB0aGUgc2FtZSB0aGluZwp0aGF0IHlv dSBjYWxsIHRoZSAiY2xpZW50IiAKClNvIHRoZSB0d28gb2YgeW91IHNlZW0gdG8gYmUgaW4gdmlv bGVudCBhZ3JlZW1lbnQuCgpGb3IgdGhlIHJlY29yZCwgSSBhZ3JlZSB0aGF0IHRoaXMgcHJvYmxl bSBtdXN0IGJlIHNvbHZlZCBieSBlZHVjYXRpbmcKcHJvZ3JhbW1lcnMgb24gdGhlIE5FVENPTkYg Y2xpZW50IChtYW5hZ2VyKSBzaWRlIHRvIHNhbml0aXplIHVzZXIKaW5wdXQsIGFuZCB0byBwcm92 aWRlIHRoZW0gd2l0aCB0aGUgYXBwcm9wcmlhdGUgdG9vbHMgLSB2aXouIG1vZGVybgpkZXZlbG9w bWVudCB0b29sa2l0cyBzdWNoIGFzIFJhaWxzIG1ha2luZyBpdCBpbmNyZWFzaW5nbHkgZGlmZmlj dWx0IHRvCndyaXRlIHByb2dyYW1zIHZ1bG5lcmFibGUgdG8gU1FMIGluamVjdGlvbiBhbmQgc2lt aWxhciBhdHRhY2tzLgoKV2Ugc2hvdWxkbid0IHRyeSB0byBzb2x2ZSB0aGlzIGJ5IG1ha2luZyB0 aGUgcHJvdG9jb2wgbW9yZSBjb21wbGV4LCBvcgpieSBkZXBlbmRpbmcgb24gYSBmaW5lLWdyYWlu ZWQgYXV0aG9yaXphdGlvbiBzY2hlbWUgbm9ib2R5IHdpbGwgdXNlCihBbmR5IGFscmVhZHkgbWVu dGlvbmVkIHRoZSBTTk1QIFZBQ00pLgotLSAKU2ltb24uCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYgbWFpbGluZyBsaXN0Ck5ldGNvbmZAaWV0 Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZXRjb25mCg== From netconf-bounces@ietf.org Sat Dec 13 09:02:04 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C13EB3A6866; Sat, 13 Dec 2008 09:02:04 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACBB23A6866 for ; Sat, 13 Dec 2008 09:02:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.222 X-Spam-Level: X-Spam-Status: No, score=-2.222 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XvUXUjaQ2C+E for ; Sat, 13 Dec 2008 09:02:02 -0800 (PST) Received: from smtp117.sbc.mail.sp1.yahoo.com (smtp117.sbc.mail.sp1.yahoo.com [69.147.64.90]) by core3.amsl.com (Postfix) with SMTP id D6DFE3A684F for ; Sat, 13 Dec 2008 09:02:02 -0800 (PST) Received: (qmail 71196 invoked from network); 13 Dec 2008 17:01:56 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp117.sbc.mail.sp1.yahoo.com with SMTP; 13 Dec 2008 17:01:54 -0000 X-YMail-OSG: MYlQBa0VM1kKD6nvIJ.S4o4L_4BtoEMatbEwOKun7WPJ4cob2Kq10SVkPyomdlIkNbI7pvev9t86qXLv6h38xuSpwR61skccNGtuAHj6MWk8pSQVtuNI2dtzmQ5YQnI8pTW0isFfGSPNUHRiNJV6RTyF X-Yahoo-Newman-Property: ymail-3 Message-ID: <4943EA80.5020908@netconfcentral.com> Date: Sat, 13 Dec 2008 09:01:52 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Simon Leinen References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: [Netconf] security-tagging (was: Re: handling invalid XML tag name) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org U2ltb24gTGVpbmVuIHdyb3RlOgo+IEphbiBMaW5kYmxhZCB3cml0ZXM6Cj4+IFtxdW90aW5nIEFu ZHldCj4+PiBbcXVvdGluZyBKYW5dCj4+Pj4gQW5kIHNvbWVvbmUgcmVzcG9uZHMgd2l0aDoKPj4+ PiAiY29vbC1oYWNrZXI8L25hbWU+PHByaXZpbGVnZXM+dG9wLXNlY3JldDwvcHJpdmlsZWdlcz48 Lwo+IHVzZXI+IDx1c2VyPjxuYW1lPnNvbWVvbmUtZWxzZSIKPj4+PiBUaGUgZ29vZCBuZXdzIGlz IHRoYXQgaXQncyB2ZXJ5IGVhc3kgdG8gZml4IHRoaXMuIFsuLi5dCj4gCj4+PiBncmVhdCBleGFt cGxlLi4uCj4+Pgo+Pj4gSXNuJ3QgcGFydCBvZiB0aGUgcmVzcG9uc2liaWxpdHkgb24gdGhlIG1h bmFnZXI/Cj4gCj4+IEkgZG9uJ3QgdGhpbmsgc28uIFRoZSBzZXJ2ZXIgd2lsbCBub3QgYmUgYWJs ZSB0byB0ZWxsIHdoZXRoZXIgdGhlCj4+IGFib3ZlIHJlcXVlc3QgaXMgYSBsZWdpdGltYXRlIGNy ZWF0aW9uIG9mIHR3byB1c2VycyBvciBhIHJlc3VsdCBvZiBhCj4+IG5hw692ZSBjbGllbnQgYmVp bmcgdHJpY2tlZC4KPiAKPiBJIHRoaW5rIHRoYXQgdGhlICJtYW5hZ2VyIiBBbmR5IGlzIHRhbGtp bmcgYWJvdFrom netconf-bounces@ietf.org Sat Dec 13 09:02:04 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C13EB3A6866; Sat, 13 Dec 2008 09:02:04 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACBB23A6866 for ; Sat, 13 Dec 2008 09:02:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.222 X-Spam-Level: X-Spam-Status: No, score=-2.222 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XvUXUjaQ2C+E for ; Sat, 13 Dec 2008 09:02:02 -0800 (PST) Received: from smtp117.sbc.mail.sp1.yahoo.com (smtp117.sbc.mail.sp1.yahoo.com [69.147.64.90]) by core3.amsl.com (Postfix) with SMTP id D6DFE3A684F for ; Sat, 13 Dec 2008 09:02:02 -0800 (PST) Received: (qmail 71196 invoked from network); 13 Dec 2008 17:01:56 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.126.130.78 with plain) by smtp117.sbc.mail.sp1.yahoo.com with SMTP; 13 Dec 2008 17:01:54 -0000 X-YMail-OSG: MYlQBa0VM1kKD6nvIJ.S4o4L_4BtoEMatbEwOKun7WPJ4cob2Kq10SVkPyomdlIkNbI7pvev9t86qXLv6h38xuSpwR61skccNGtuAHj6MWk8pSQVtuNI2dtzmQ5YQnI8pTW0isFfGSPNUHRiNJV6RTyF X-Yahoo-Newman-Property: ymail-3 Message-ID: <4943EA80.5020908@netconfcentral.com> Date: Sat, 13 Dec 2008 09:01:52 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Simon Leinen References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: [Netconf] security-tagging (was: Re: handling invalid XML tag name) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org U2ltb24gTGVpbmVuIHdyb3RlOgo+IEphbiBMaW5kYmxhZCB3cml0ZXM6Cj4+IFtxdW90aW5nIEFu ZHldCj4+PiBbcXVvdGluZyBKYW5dCj4+Pj4gQW5kIHNvbWVvbmUgcmVzcG9uZHMgd2l0aDoKPj4+ PiAiY29vbC1oYWNrZXI8L25hbWU+PHByaXZpbGVnZXM+dG9wLXNlY3JldDwvcHJpdmlsZWdlcz48 Lwo+IHVzZXI+IDx1c2VyPjxuYW1lPnNvbWVvbmUtZWxzZSIKPj4+PiBUaGUgZ29vZCBuZXdzIGlz IHRoYXQgaXQncyB2ZXJ5IGVhc3kgdG8gZml4IHRoaXMuIFsuLi5dCj4gCj4+PiBncmVhdCBleGFt cGxlLi4uCj4+Pgo+Pj4gSXNuJ3QgcGFydCBvZiB0aGUgcmVzcG9uc2liaWxpdHkgb24gdGhlIG1h bmFnZXI/Cj4gCj4+IEkgZG9uJ3QgdGhpbmsgc28uIFRoZSBzZXJ2ZXIgd2lsbCBub3QgYmUgYWJs ZSB0byB0ZWxsIHdoZXRoZXIgdGhlCj4+IGFib3ZlIHJlcXVlc3QgaXMgYSBsZWdpdGltYXRlIGNy ZWF0aW9uIG9mIHR3byB1c2VycyBvciBhIHJlc3VsdCBvZiBhCj4+IG5hw692ZSBjbGllbnQgYmVp bmcgdHJpY2tlZC4KPiAKPiBJIHRoaW5rIHRoYXQgdGhlICJtYW5hZ2VyIiBBbmR5IGlzIHRhbGtp bmcXQgaXMgdGhlIHBpZWNlIG9mCj4gc29mdHdhcmUgZ2VuZXJhdGluZyBORVRDT05GIHJl cXVlc3RzIGZyb20gdXNlciBpbnB1dCwgdGhlIHNhbWUgdGhpbmcKPiB0aGF0IHlvdSBjYWxsIHRo ZSAiY2xpZW50IiAKPiAKPiBTbyB0aGUgdHdvIG9mIHlvdSBzZWVtIHRvIGJlIGluIHZpb2xlbnQg YWdyZWVtZW50Lgo+IAo+IEZvciB0aGUgcmVjb3JkLCBJIGFncmVlIHRoYXQgdGhpcyBwcm9ibGVt IG11c3QgYmUgc29sdmVkIGJ5IGVkdWNhdGluZwo+IHByb2dyYW1tZXJzIG9uIHRoZSBORVRDT05G IGNsaWVudCAobWFuYWdlcikgc2lkZSB0byBzYW5pdGl6ZSB1c2VyCj4gaW5wdXQsIGFuZCB0byBw cm92aWRlIHRoZW0gd2l0aCB0aGUgYXBwcm9wcmlhdGUgdG9vbHMgLSB2aXouIG1vZGVybgo+IGRl dmVsb3BtZW50IHRvb2xraXRzIHN1Y2ggYXMgUmFpbHMgbWFraW5nIGl0IGluY3JlYXNpbmdseSBk aWZmaWN1bHQgdG8KPiB3cml0ZSBwcm9ncmFtcyB2dWxuZXJhYmxlIHRvIFNRTCBpbmplY3Rpb24g YW5kIHNpbWlsYXIgYXR0YWNrcy4KPiAKPiBXZSBzaG91bGRuJ3QgdHJ5IHRvIHNvbHZlIHRoaXMg YnkgbWFraW5nIHRoZSBwcm90b2NvbCBtb3JlIGNvbXBsZXgsIG9yCj4gYnkgZGVwZW5kaW5nIG9u IGEgZmluZS1ncmFpbmVkIGF1dGhvcml6YXRpb24gc2NoZW1lIG5vYm9keSB3aWxsIHVzZQo+IChB bmR5IGFscmVhZHkgbWVudGlvbmVkIHRoZSBTTk1QIFZBQ00pLgoKSXMgdGhlcmUgYW55dGhpbmcg dGhhdCBjYW4gYmUgZG9uZSBpbiBZQU5HPwoKSSBoYXZlIGJlZW4gdGhpbmtpbmcgb2YgYWRkaW5n ICdzZWN1cml0eS10YWdnaW5nJyB0byBteSB0b29sc2V0LgpJIGFtIG5vdCBzdXJlIGhvdyBvcGVy YXRvcnMgbGlrZSB0byBjbGFzc2lmeSB0aGlzIHNvcnQgb2YgcmlzaywKc28gSSBqdXN0IGhhdmUg aGlnaGVyIG51bWJlcnMgYXJlIG1vcmUgb2YgYSB0aHJlYXQ6CgpFLmcuLCBmb3IgdGhlIGN1cnJl bnQgZXhhbXBsZToKCiAgICBjb250YWluZXIgdXNlcnMgewogICAgICAgbmN4OnNlY3VyaXR5LWxl dmVsIDI7CgogICAgICAgbGlzdCB1c2VyIHsKICAgICAgICAgIGtleSBuYW1lOwoKICAgICAgICAg IGxlYWYgbmFtZSB7CiAgICAgICAgICAgICB0eXBlIHN0cmluZzsKICAgICAgICAgIH0KCiAgICAg ICAgICBlbnVtZXJhdGlvbiBwcml2aWxlZ2VzIHsKICAgICAgICAgICAgIG5jeDpzZWN1cml0eS1s ZXZlbCAgMzsKICAgICAgICAgICAgIGVudW0gYWxtb3N0LW5vdGhpbmc7CiAgICAgICAgICAgICBl bnVtIGEtbGl0dGxlLW1vcmUgewogICAgICAgICAgICAgICAgbmN4OnNlY3VyaXR5LWxldmVsIDQ7 CiAgICAgICAgICAgICB9CiAgICAgICAgICAgICBlbnVtIGEtd2hvbGUtbG90IHsKICAgICAgICAg ICAgICAgIG5jeDpzZWN1cml0eS1sZXZlbCA1OwogICAgICAgICAgICAgfQogICAgICAgICAgfQog ICAgICAgfQogICAgfQoKClRoZSBpZGVhIGlzIHRvIG1vdmUgYXMgbXVjaCB3b3JrIGZyb20gdGhl IGh1bWFuIHRvIHRoZSBhdXRvbWF0ZWQgdG9vbHMsCmJ5IGFubm90YXRpbmcgdGhlIFlBTkcgZmls ZSB3aXRoIHRoZXNlIHNvcnQgb2YgZXh0ZW5zaW9ucy4KSW4gdGhpcyBleGFtcGxlLCBBQ00gY291 bGQgYmUgYXV0b21hdGljYWxseSBjb25maWd1cmVkIG9uIHRoZQphZ2VudC4gIFVzZXIgd2Fybmlu Z3MgYW5kIGV2ZW4gc29tZSBzZWN1cml0eSBjb3VsZCBiZSBlbmZvcmNlZApvbiB0aGUgY2xpZW50 LgoKVGhlIEFDTSBjb25maWd1cmF0aW9uIGNvdWxkIGJlIGFzIHNpbXBsZSBhcyAibGV0IHVzZXIg WApoYXZlIHNlY3VyaXR5LWxldmVsIDMgYWNjZXNzIi4KCk5vdyB0aGUgcHJvYmxlbSBzaGlmdHMg dG8gdGhlIGRhdGEgbW9kZWwgZGVzaWduZXJzIHRvIHRhZwpjb3JyZWN0bHksIGJ1dCB0aGV5IGFy ZSB0aGUgb25lcyB3aG8gbW9zdCB1bmRlcnN0YW5kIHRoZQpzZWN1cml0eSByaXNrcy4gIFNvbWUg b3BlcmF0b3JzIHdpbGwgd2FudCB0byBvdmVycmlkZQp0aGUgZGVmYXVsdCBzZXR0aW5ncywgYnV0 IHRoYXQgaXMgdGhlIGV4Y2VwdGlvbi4gIFRoZSBtYWpvcml0eQpkbyBub3Qgd2FudCB0byBmdXNz IHdpdGggZmluZSBncmFudWxhcml0eSBWQUNNIGNvbmZpZ3VyYXRpb24uCgpZQU5HIGlzIHZlcnkg cmljaCBpbiBzZW1hbnRpY3MsIGJ1dCBmcm9tIGEgc2VjdXJpdHkgUE9WCml0IHRyZWF0cyB0aGUg a25vYiB0byBjaGFuZ2UgdGhlIGljb24gY29sb3IgdGhlIHNhbWUgYXMKdGhlIGtub2IgdG8gZGVs ZXRlIGFsbCBQVkNzIGluIE5vcnRoZXJuIENhbGlmb3JuaWEuCgoKCkFuZHkKCgoKCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYgbWFpbGluZyBs aXN0Ck5ldGNvbmZAaWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9uZXRjb25mCg== gYWJvdXQgaXMgdGhlIHBpZWNlIG9mCj4gc29mdHdhcmUgZ2VuZXJhdGluZyBORVRDT05GIHJl cXVlc3RzIGZyb20gdXNlciBpbnB1dCwgdGhlIHNhbWUgdGhpbmcKPiB0aGF0IHlvdSBjYWxsIHRo ZSAiY2xpZW50IiAKPiAKPiBTbyB0aGUgdHdvIG9mIHlvdSBzZWVtIHRvIGJlIGluIHZpb2xlbnQg YWdyZWVtZW50Lgo+IAo+IEZvciB0aGUgcmVjb3JkLCBJIGFncmVlIHRoYXQgdGhpcyBwcm9ibGVt IG11c3QgYmUgc29sdmVkIGJ5IGVkdWNhdGluZwo+IHByb2dyYW1tZXJzIG9uIHRoZSBORVRDT05G IGNsaWVudCAobWFuYWdlcikgc2lkZSB0byBzYW5pdGl6ZSB1c2VyCj4gaW5wdXQsIGFuZCB0byBw cm92aWRlIHRoZW0gd2l0aCB0aGUgYXBwcm9wcmlhdGUgdG9vbHMgLSB2aXouIG1vZGVybgo+IGRl dmVsb3BtZW50IHRvb2xraXRzIHN1Y2ggYXMgUmFpbHMgbWFraW5nIGl0IGluY3JlYXNpbmdseSBk aWZmaWN1bHQgdG8KPiB3cml0ZSBwcm9ncmFtcyB2dWxuZXJhYmxlIHRvIFNRTCBpbmplY3Rpb24g YW5kIHNpbWlsYXIgYXR0YWNrcy4KPiAKPiBXZSBzaG91bGRuJ3QgdHJ5IHRvIHNvbHZlIHRoaXMg YnkgbWFraW5nIHRoZSBwcm90b2NvbCBtb3JlIGNvbXBsZXgsIG9yCj4gYnkgZGVwZW5kaW5nIG9u IGEgZmluZS1ncmFpbmVkIGF1dGhvcml6YXRpb24gc2NoZW1lIG5vYm9keSB3aWxsIHVzZQo+IChB bmR5IGFscmVhZHkgbWVudGlvbmVkIHRoZSBTTk1QIFZBQ00pLgoKSXMgdGhlcmUgYW55dGhpbmcg dGhhdCBjYW4gYmUgZG9uZSBpbiBZQU5HPwoKSSBoYXZlIGJlZW4gdGhpbmtpbmcgb2YgYWRkaW5n ICdzZWN1cml0eS10YWdnaW5nJyB0byBteSB0b29sc2V0LgpJIGFtIG5vdCBzdXJlIGhvdyBvcGVy YXRvcnMgbGlrZSB0byBjbGFzc2lmeSB0aGlzIHNvcnQgb2YgcmlzaywKc28gSSBqdXN0IGhhdmUg aGlnaGVyIG51bWJlcnMgYXJlIG1vcmUgb2YgYSB0aHJlYXQ6CgpFLmcuLCBmb3IgdGhlIGN1cnJl bnQgZXhhbXBsZToKCiAgICBjb250YWluZXIgdXNlcnMgewogICAgICAgbmN4OnNlY3VyaXR5LWxl dmVsIDI7CgogICAgICAgbGlzdCB1c2VyIHsKICAgICAgICAgIGtleSBuYW1lOwoKICAgICAgICAg IGxlYWYgbmFtZSB7CiAgICAgICAgICAgICB0eXBlIHN0cmluZzsKICAgICAgICAgIH0KCiAgICAg ICAgICBlbnVtZXJhdGlvbiBwcml2aWxlZ2VzIHsKICAgICAgICAgICAgIG5jeDpzZWN1cml0eS1s ZXZlbCAgMzsKICAgICAgICAgICAgIGVudW0gYWxtb3N0LW5vdGhpbmc7CiAgICAgICAgICAgICBl bnVtIGEtbGl0dGxlLW1vcmUgewogICAgICAgICAgICAgICAgbmN4OnNlY3VyaXR5LWxldmVsIDQ7 CiAgICAgICAgICAgICB9CiAgICAgICAgICAgICBlbnVtIGEtd2hvbGUtbG90IHsKICAgICAgICAg ICAgICAgIG5jeDpzZWN1cml0eS1sZXZlbCA1OwogICAgICAgICAgICAgfQogICAgICAgICAgfQog ICAgICAgfQogICAgfQoKClRoZSBpZGVhIGlzIHRvIG1vdmUgYXMgbXVjaCB3b3JrIGZyb20gdGhl IGh1bWFuIHRvIHRoZSBhdXRvbWF0ZWQgdG9vbHMsCmJ5IGFubm90YXRpbmcgdGhlIFlBTkcgZmls ZSB3aXRoIHRoZXNlIHNvcnQgb2YgZXh0ZW5zaW9ucy4KSW4gdGhpcyBleGFtcGxlLCBBQ00gY291 bGQgYmUgYXV0b21hdGljYWxseSBjb25maWd1cmVkIG9uIHRoZQphZ2VudC4gIFVzZXIgd2Fybmlu Z3MgYW5kIGV2ZW4gc29tZSBzZWN1cml0eSBjb3VsZCBiZSBlbmZvcmNlZApvbiB0aGUgY2xpZW50 LgoKVGhlIEFDTSBjb25maWd1cmF0aW9uIGNvdWxkIGJlIGFzIHNpbXBsZSBhcyAibGV0IHVzZXIg WApoYXZlIHNlY3VyaXR5LWxldmVsIDMgYWNjZXNzIi4KCk5vdyB0aGUgcHJvYmxlbSBzaGlmdHMg dG8gdGhlIGRhdGEgbW9kZWwgZGVzaWduZXJzIHRvIHRhZwpjb3JyZWN0bHksIGJ1dCB0aGV5IGFy ZSB0aGUgb25lcyB3aG8gbW9zdCB1bmRlcnN0YW5kIHRoZQpzZWN1cml0eSByaXNrcy4gIFNvbWUg b3BlcmF0b3JzIHdpbGwgd2FudCB0byBvdmVycmlkZQp0aGUgZGVmYXVsdCBzZXR0aW5ncywgYnV0 IHRoYXQgaXMgdGhlIGV4Y2VwdGlvbi4gIFRoZSBtYWpvcml0eQpkbyBub3Qgd2FudCB0byBmdXNz IHdpdGggZmluZSBncmFudWxhcml0eSBWQUNNIGNvbmZpZ3VyYXRpb24uCgpZQU5HIGlzIHZlcnkg cmljaCBpbiBzZW1hbnRpY3MsIGJ1dCBmcm9tIGEgc2VjdXJpdHkgUE9WCml0IHRyZWF0cyB0aGUg a25vYiB0byBjaGFuZ2UgdGhlIGljb24gY29sb3IgdGhlIHNhbWUgYXMKdGhlIGtub2IgdG8gZGVs ZXRlIGFsbCBQVkNzIGluIE5vcnRoZXJuIENhbGlmb3JuaWEuCgoKCkFuZHkKCgoKCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYgbWFpbGluZyBs aXN0Ck5ldGNvbmZAaWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9uZXRjb25mCg== From netconf-bounces@ietf.org Sun Dec 14 02:45:43 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 17F753A6929; Sun, 14 Dec 2008 02:45:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68EA93A6929 for ; Sun, 14 Dec 2008 02:45:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.025 X-Spam-Level: X-Spam-Status: No, score=-2.025 tagged_above=-999 required=5 tests=[AWL=0.021, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G5ok1LtsdtTQ for ; Sun, 14 Dec 2008 02:45:41 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 910663A682E for ; Sun, 14 Dec 2008 02:45:41 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id 3DE5D76C30A; Sun, 14 Dec 2008 11:45:33 +0100 (CET) Date: Sun, 14 Dec 2008 11:45:31 +0100 (CET) Message-Id: <20081214.114531.134024997.mbj@tail-f.com> To: andy@netconfcentral.com From: Martin Bjorklund In-Reply-To: <49415AE4.6070708@netconfcentral.com> References: <49415AE4.6070708@netconfcentral.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, Andy Bierman wrote: > > - bug fixes are to be done > > - clarifications can be done > > - no extensions (i.e. we are not doing a NETCONF V2) > > What about the 'test-only' enumeration for test-option? > IMO, the WG needs some flexibility in the solution space > to deal with usability problems found. It has been determined > that 'test-then-set' and are somewhat worthless, > and a 'test-only' mode for would have been much > better in the first place. Is that a new feature or a bugfix? This particular case could be handled by incrementing the minor version for the :validate capability so that the URI is: urn:ietf:params:netconf:capability:validate:1.1 This 1.1 version is backwards compatible, but an old client will not understand that, so a server that wants to support both old and new clients would advertise both versions: urn:ietf:params:netconf:capability:validate:1.0 urn:ietf:params:netconf:capability:validate:1.1 The proposed charter text says: - no extensions (i.e. we are not doing a NETCONF V2) I guess this would be an extension, but it's not really "netconf v2". > The base URI for the NETCONF protocol is going to change > (it better) if any observable changes are made to protocol > behavior. I don't think that any changes has been proposed that would affect the base capability. *maybe* some subtree filtering changes could fall into this category. > Are there any 1.0 to 1.1 protocol migration > concerns?From netconf-bounces@ietf.org Sun Dec 14 02:45:43 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 17F753A6929; Sun, 14 Dec 2008 02:45:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68EA93A6929 for ; Sun, 14 Dec 2008 02:45:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.025 X-Spam-Level: X-Spam-Status: No, score=-2.025 tagged_above=-999 required=5 tests=[AWL=0.021, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G5ok1LtsdtTQ for ; Sun, 14 Dec 2008 02:45:41 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 910663A682E for ; Sun, 14 Dec 2008 02:45:41 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id 3DE5D76C30A; Sun, 14 Dec 2008 11:45:33 +0100 (CET) Date: Sun, 14 Dec 2008 11:45:31 +0100 (CET) Message-Id: <20081214.114531.134024997.mbj@tail-f.com> To: andy@netconfcentral.com From: Martin Bjorklund In-Reply-To: <49415AE4.6070708@netconfcentral.com> References: <49415AE4.6070708@netconfcentral.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, Andy Bierman wrote: > > - bug fixes are to be done > > - clarifications can be done > > - no extensions (i.e. we are not doing a NETCONF V2) > > What about the 'test-only' enumeration for test-option? > IMO, the WG needs some flexibility in the solution space > to deal with usability problems found. It has been determined > that 'test-then-set' and are somewhat worthless, > and a 'test-only' mode for would have been much > better in the first place. Is that a new feature or a bugfix? This particular case could be handled by incrementing the minor version for the :validate capability so that the URI is: urn:ietf:params:netconf:capability:validate:1.1 This 1.1 version is backwards compatible, but an old client will not understand that, so a server that wants to support both old and new clients would advertise both versions: urn:ietf:params:netconf:capability:validate:1.0 urn:ietf:params:netconf:capability:validate:1.1 The proposed charter text says: - no extensions (i.e. we are not doing a NETCONF V2) I guess this would be an extension, but it's not really "netconf v2". > The base URI for the NETCONF protocol is going to change > (it better) if any observable changes are made to protocol > behavior. I don't think that any changes has been proposed that would affect the base capability. *maybe* some subtree filtering changes could fall into this category. > Are there any 1.0 to 1.1 protocol migration > concerns? Are there any issues related to mixing 1.0 > and 1.1 agents in the same network? > > IMO, this 4741-bis work item does not fully address the > scope and complexity of the problem space. I'm not sure I understand this - do you want to see such changes, or are you worried that the charter allows such changes? /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf Are there any issues related to mixing 1.0 > and 1.1 agents in the same network? > > IMO, this 4741-bis work item does not fully address the > scope and complexity of the problem space. I'm not sure I understand this - do you want to see such changes, or are you worried that the charter allows such changes? /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 05:30:19 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A55AE3A695D; Sun, 14 Dec 2008 05:30:19 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9E5563A695D for ; Sun, 14 Dec 2008 05:30:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.199 X-Spam-Level: X-Spam-Status: No, score=-2.199 tagged_above=-999 required=5 tests=[AWL=0.066, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gzp7Yl-Eph3P for ; Sun, 14 Dec 2008 05:30:17 -0800 (PST) Received: from smtp124.sbc.mail.sp1.yahoo.com (smtp124.sbc.mail.sp1.yahoo.com [69.147.64.97]) by core3.amsl.com (Postfix) with SMTP id E1ADF3A694D for ; Sun, 14 Dec 2008 05:30:17 -0800 (PST) Received: (qmail 65668 invoked from network); 14 Dec 2008 13:30:11 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp124.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 13:30:10 -0000 X-YMail-OSG: 1xrkZ8cVM1n7JTootFUDcJ2amddXuyDXWBagN2neYFI_9QZ4WECyIhlJDQBzAT_HFk9NwQCqe_rcw5wkhRWren4.9p57gC6KnYcFuuUca.x5IuUW9Nozk7rmuyrCRi9zG6QPUHsKNz5IN8oibk9kPpAYuAWzVdyXlxh4bbSxZYtlAlEQlKfnpLkw2pj9J8Fhc07KunWoSW.NHQoaXLw0bQ-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <49450A5F.2050401@netconfcentral.com> Date: Sun, 14 Dec 2008 05:30:07 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> In-Reply-To: <20081214.114531.134024997.mbj@tail-f.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Hi, > > Andy Bierman wrote: >>> - bug fixes are to be done >>> - clarifications can be done >>> - no extensions (i.e. we are not doing a NETCONF V2) >> What about the 'test-only' enumeration for test-option? >> IMO, the WG needs some flexibility in the solution space >> to deal with usability problems found. It has been determined >> that 'test-then-set' and are somewhat worthless, >> and a 'test-only' mode for would have been much >> better in the first place. Is that a new feature or a bugfix? > > This particular case could be handled by incrementing the minor > version for the :validate capability so that the URI is: > > urn:ietf:params:netconf:capability:validate:1.1 > > This 1.1 version is backwards compatible, but an old client will not > understand that, so a server that wants to support both old and new > clients would advertise both versions: > > urn:ietf:params:netconf:capability:validate:1.0 > urn:ietf:params:netconf:capability:validate:1.1 > There are lots of ways the protocol could get changed, such as addingFrom netconf-bounces@ietf.org Sun Dec 14 05:30:19 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A55AE3A695D; Sun, 14 Dec 2008 05:30:19 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9E5563A695D for ; Sun, 14 Dec 2008 05:30:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.199 X-Spam-Level: X-Spam-Status: No, score=-2.199 tagged_above=-999 required=5 tests=[AWL=0.066, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gzp7Yl-Eph3P for ; Sun, 14 Dec 2008 05:30:17 -0800 (PST) Received: from smtp124.sbc.mail.sp1.yahoo.com (smtp124.sbc.mail.sp1.yahoo.com [69.147.64.97]) by core3.amsl.com (Postfix) with SMTP id E1ADF3A694D for ; Sun, 14 Dec 2008 05:30:17 -0800 (PST) Received: (qmail 65668 invoked from network); 14 Dec 2008 13:30:11 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp124.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 13:30:10 -0000 X-YMail-OSG: 1xrkZ8cVM1n7JTootFUDcJ2amddXuyDXWBagN2neYFI_9QZ4WECyIhlJDQBzAT_HFk9NwQCqe_rcw5wkhRWren4.9p57gC6KnYcFuuUca.x5IuUW9Nozk7rmuyrCRi9zG6QPUHsKNz5IN8oibk9kPpAYuAWzVdyXlxh4bbSxZYtlAlEQlKfnpLkw2pj9J8Fhc07KunWoSW.NHQoaXLw0bQ-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <49450A5F.2050401@netconfcentral.com> Date: Sun, 14 Dec 2008 05:30:07 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> In-Reply-To: <20081214.114531.134024997.mbj@tail-f.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Hi, > > Andy Bierman wrote: >>> - bug fixes are to be done >>> - clarifications can be done >>> - no extensions (i.e. we are not doing a NETCONF V2) >> What about the 'test-only' enumeration for test-option? >> IMO, the WG needs some flexibility in the solution space >> to deal with usability problems found. It has been determined >> that 'test-then-set' and are somewhat worthless, >> and a 'test-only' mode for would have been much >> better in the first place. Is that a new feature or a bugfix? > > This particular case could be handled by incrementing the minor > version for the :validate capability so that the URI is: > > urn:ietf:params:netconf:capability:validate:1.1 > > This 1.1 version is backwards compatible, but an old client will not > understand that, so a server that wants to support both old and new > clients would advertise both versions: > > urn:ietf:params:netconf:capability:validate:1.0 > urn:ietf:params:netconf:capability:validate:1.1 > There are lots of ways the protocol could get changed, such as new capabilities, without bumping the base capability. What matters is whether the 1.0 client continues to work even though it does not know about these new capabilities. > The proposed charter text says: > > - no extensions (i.e. we are not doing a NETCONF V2) > > I guess this would be an extension, but it's not really "netconf v2". > >> The base URI for the NETCONF protocol is going to change >> (it better) if any observable changes are made to protocol >> behavior. > > I don't think that any changes has been proposed that would affect the > base capability. *maybe* some subtree filtering changes could fall > into this category. > >> Are there any 1.0 to 1.1 protocol migration >> concerns? Are there any issues related to mixing 1.0 >> and 1.1 agents in the same network? >> >> IMO, this 4741-bis work item does not fully address the >> scope and complexity of the problem space. > > I'm not sure I understand this - do you want to see such changes, or > are you worried that the charter allows such changes? > If the IESG is happy with the charter, then fine. It looks a bit unclear to me. IMO it is a waste of 2 - 3 years work to cycle at Proposed Standard for a few penny-ante tweaks and bug-fixes. > > /martin > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf adding new capabilities, without bumping the base capability. What matters is whether the 1.0 client continues to work even though it does not know about these new capabilities. > The proposed charter text says: > > - no extensions (i.e. we are not doing a NETCONF V2) > > I guess this would be an extension, but it's not really "netconf v2". > >> The base URI for the NETCONF protocol is going to change >> (it better) if any observable changes are made to protocol >> behavior. > > I don't think that any changes has been proposed that would affect the > base capability. *maybe* some subtree filtering changes could fall > into this category. > >> Are there any 1.0 to 1.1 protocol migration >> concerns? Are there any issues related to mixing 1.0 >> and 1.1 agents in the same network? >> >> IMO, this 4741-bis work item does not fully address the >> scope and complexity of the problem space. > > I'm not sure I understand this - do you want to see such changes, or > are you worried that the charter allows such changes? > If the IESG is happy with the charter, then fine. It looks a bit unclear to me. IMO it is a waste of 2 - 3 years work to cycle at Proposed Standard for a few penny-ante tweaks and bug-fixes. > > /martin > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 05:58:08 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C79643A67B3; Sun, 14 Dec 2008 05:58:08 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CB9463A67B3 for ; Sun, 14 Dec 2008 05:58:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.237 X-Spam-Level: X-Spam-Status: No, score=-2.237 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p4GJFJ3wRjn3 for ; Sun, 14 Dec 2008 05:58:07 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id DA1EE3A65A5 for ; Sun, 14 Dec 2008 05:58:06 -0800 (PST) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 38E4BC001F; Sun, 14 Dec 2008 14:57:58 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id wqUofYGvLAVO; Sun, 14 Dec 2008 14:57:53 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 985EBC0019; Sun, 14 Dec 2008 14:57:52 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id F29B18B215A; Sun, 14 Dec 2008 14:57:51 +0100 (CET) Date: Sun, 14 Dec 2008 14:57:51 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081214135751.GA24264@elstar.local> Mail-Followup-To: Andy Bierman , Martin Bjorklund , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <49450A5F.2050401@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Sun, Dec 14, 2008 at 05:30:07AM -0800, Andy Bierman wrote: > IMO it is a waste of 2 - 3 years work to cycle at Proposed Standard > for a few penny-ante tweaks and bug-fixes. It takes 2-3 if _we_ make it take 2-3 years. The charter has a much shorter time plan and it is up to us to stick to it. Our testing experience is that there are things that implementors have done differently and I believe we do this exercise with the goal to improve and document interoperability. I believe this is worth it. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 05:58:08 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C79643A67B3; Sun, 14 Dec 2008 05:58:08 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CB9463A67B3 for ; Sun, 14 Dec 2008 05:58:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.237 X-Spam-Level: X-Spam-Status: No, score=-2.237 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p4GJFJ3wRjn3 for ; Sun, 14 Dec 2008 05:58:07 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id DA1EE3A65A5 for ; Sun, 14 Dec 2008 05:58:06 -0800 (PST) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 38E4BC001F; Sun, 14 Dec 2008 14:57:58 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id wqUofYGvLAVO; Sun, 14 Dec 2008 14:57:53 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 985EBC0019; Sun, 14 Dec 2008 14:57:52 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id F29B18B215A; Sun, 14 Dec 2008 14:57:51 +0100 (CET) Date: Sun, 14 Dec 2008 14:57:51 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081214135751.GA24264@elstar.local> Mail-Followup-To: Andy Bierman , Martin Bjorklund , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <49450A5F.2050401@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Sun, Dec 14, 2008 at 05:30:07AM -0800, Andy Bierman wrote: > IMO it is a waste of 2 - 3 years work to cycle at Proposed Standard > for a few penny-ante tweaks and bug-fixes. It takes 2-3 if _we_ make it take 2-3 years. The charter has a much shorter time plan and it is up to us to stick to it. Our testing experience is that there are things that implementors have done differently and I believe we do this exercise with the goal to improve and document interoperability. I believe this is worth it. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 06:30:43 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D0E053A6809; Sun, 14 Dec 2008 06:30:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B0523A6809 for ; Sun, 14 Dec 2008 06:30:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.201 X-Spam-Level: X-Spam-Status: No, score=-2.201 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cF03F3ncDlCm for ; Sun, 14 Dec 2008 06:30:41 -0800 (PST) Received: from smtp118.sbc.mail.sp1.yahoo.com (smtp118.sbc.mail.sp1.yahoo.com [69.147.64.91]) by core3.amsl.com (Postfix) with SMTP id 93D1F3A67B4 for ; Sun, 14 Dec 2008 06:30:41 -0800 (PST) Received: (qmail 57314 invoked from network); 14 Dec 2008 14:30:34 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp118.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 14:30:32 -0000 X-YMail-OSG: 5svo9_EVM1nnZ3omhtY_uEvHb9xHXa6WN.CTF82t8e_f8oqRmENDCdeBr5c0VJDZVchqLaTZTcsnQDuh8_AcwdbwFUqzAiYQfrKl5Bu4Kj5AIRmh6jpLBj2pfl7XARlaKPdSbI4u9qMYsW62EZBqPvjb X-Yahoo-Newman-Property: ymail-3 Message-ID: <49451886.3090605@netconfcentral.com> Date: Sun, 14 Dec 2008 06:30:30 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Andy Bierman , Martin Bjorklund , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> <20081214135751.GA24264@elstar.local> In-Reply-To: <20081214135751.GA24264@elstar.local> Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Sun, Dec 14, 2008 at 05:30:07AM -0800, Andy Bierman wrote: > >> IMO it is a waste of 2 - 3 years work to cycle at Proposed Standard >> for a few penny-ante tweaks and bug-fixes. > > It takes 2-3 if _we_ make it take 2-3 years. The charter has a much > shorter time plan and it is up to us to stick to it. > > Our testing experience is that there are things that implementors have > done differently and I believe we do this exercise with the goal to > improve and document interoperability. I believe this is worth it. > IMO, lots of protocol versions (and capability-based variants) over the years has a high cost. In the long run, lots of little versions aren't really better that 2 or 3 big versions. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 06:30:43 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D0E053A6809; Sun, 14 Dec 2008 06:30:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B0523A6809 for ; Sun, 14 Dec 2008 06:30:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.201 X-Spam-Level: X-Spam-Status: No, score=-2.201 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cF03F3ncDlCm for ; Sun, 14 Dec 2008 06:30:41 -0800 (PST) Received: from smtp118.sbc.mail.sp1.yahoo.com (smtp118.sbc.mail.sp1.yahoo.com [69.147.64.91]) by core3.amsl.com (Postfix) with SMTP id 93D1F3A67B4 for ; Sun, 14 Dec 2008 06:30:41 -0800 (PST) Received: (qmail 57314 invoked from network); 14 Dec 2008 14:30:34 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp118.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 14:30:32 -0000 X-YMail-OSG: 5svo9_EVM1nnZ3omhtY_uEvHb9xHXa6WN.CTF82t8e_f8oqRmENDCdeBr5c0VJDZVchqLaTZTcsnQDuh8_AcwdbwFUqzAiYQfrKl5Bu4Kj5AIRmh6jpLBj2pfl7XARlaKPdSbI4u9qMYsW62EZBqPvjb X-Yahoo-Newman-Property: ymail-3 Message-ID: <49451886.3090605@netconfcentral.com> Date: Sun, 14 Dec 2008 06:30:30 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Andy Bierman , Martin Bjorklund , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> <20081214135751.GA24264@elstar.local> In-Reply-To: <20081214135751.GA24264@elstar.local> Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Sun, Dec 14, 2008 at 05:30:07AM -0800, Andy Bierman wrote: > >> IMO it is a waste of 2 - 3 years work to cycle at Proposed Standard >> for a few penny-ante tweaks and bug-fixes. > > It takes 2-3 if _we_ make it take 2-3 years. The charter has a much > shorter time plan and it is up to us to stick to it. > > Our testing experience is that there are things that implementors have > done differently and I believe we do this exercise with the goal to > improve and document interoperability. I believe this is worth it. > IMO, lots of protocol versions (and capability-based variants) over the years has a high cost. In the long run, lots of little versions aren't really better that 2 or 3 big versions. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 07:16:14 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 588AE3A6803; Sun, 14 Dec 2008 07:16:14 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6338A3A6803 for ; Sun, 14 Dec 2008 07:16:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.203 X-Spam-Level: X-Spam-Status: No, score=-2.203 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2mmhcdS9oeij for ; Sun, 14 Dec 2008 07:16:12 -0800 (PST) Received: from smtp116.sbc.mail.sp1.yahoo.com (smtp116.sbc.mail.sp1.yahoo.com [69.147.64.89]) by core3.amsl.com (Postfix) with SMTP id C109A3A67DF for ; Sun, 14 Dec 2008 07:16:12 -0800 (PST) Received: (qmail 11199 invoked from network); 14 Dec 2008 15:16:06 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp116.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 15:16:04 -0000 X-YMail-OSG: 5RX.DV0VM1noDPiVfHNwZRoTr1.Tp6.8TTLG17fFTujLsdbNSHvueR_KcRRyM2HffV9xSfKd1hJc9X7_xydTdGbcgYLjy5StEHg9Gaq3izydbdss7dL1Q4pYseJs5kUXXYbUqH58n2CPeBEtHYegf1CO X-Yahoo-Newman-Property: ymail-3 Message-ID: <49452332.1070603@netconfcentral.com> Date: Sun, 14 Dec 2008 07:16:02 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> In-Reply-To: <20081214.114531.134024997.mbj@tail-f.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Hi, ... > The proposed charter text says: > > - no extensions (i.e. we are not doing a NETCONF V2) > > I guess this would be an extension, but it's not really "netconf v2". > I do not understand the premise of this statement, or real purpose of this charter. Why are extensions to the protocol bad, but optional capabilities are good? Is the purpose of the charter to clarify the document without changing the protocol, or to make both the document and the protocol better? Several NMS developers (including our former NETMOD co-Chair) have stated in the past that optional agent features are not that useful to them. NETCONF seems to be very agent-centric, focusing on flexibility rather than avoiding it. In the long run, 200 permutations of a feature set has its drawbacks, especially wrt/ NMS complexity and a large, complicated document set. > > /martin > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 07:16:14 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 588AE3A6803; Sun, 14 Dec 2008 07:16:14 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6338A3A6803 for ; Sun, 14 Dec 2008 07:16:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.203 X-Spam-Level: X-Spam-Status: No, score=-2.203 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2mmhcdS9oeij for ; Sun, 14 Dec 2008 07:16:12 -0800 (PST) Received: from smtp116.sbc.mail.sp1.yahoo.com (smtp116.sbc.mail.sp1.yahoo.com [69.147.64.89]) by core3.amsl.com (Postfix) with SMTP id C109A3A67DF for ; Sun, 14 Dec 2008 07:16:12 -0800 (PST) Received: (qmail 11199 invoked from network); 14 Dec 2008 15:16:06 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp116.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 15:16:04 -0000 X-YMail-OSG: 5RX.DV0VM1noDPiVfHNwZRoTr1.Tp6.8TTLG17fFTujLsdbNSHvueR_KcRRyM2HffV9xSfKd1hJc9X7_xydTdGbcgYLjy5StEHg9Gaq3izydbdss7dL1Q4pYseJs5kUXXYbUqH58n2CPeBEtHYegf1CO X-Yahoo-Newman-Property: ymail-3 Message-ID: <49452332.1070603@netconfcentral.com> Date: Sun, 14 Dec 2008 07:16:02 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> In-Reply-To: <20081214.114531.134024997.mbj@tail-f.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Hi, ... > The proposed charter text says: > > - no extensions (i.e. we are not doing a NETCONF V2) > > I guess this would be an extension, but it's not really "netconf v2". > I do not understand the premise of this statement, or real purpose of this charter. Why are extensions to the protocol bad, but optional capabilities are good? Is the purpose of the charter to clarify the document without changing the protocol, or to make both the document and the protocol better? Several NMS developers (including our former NETMOD co-Chair) have stated in the past that optional agent features are not that useful to them. NETCONF seems to be very agent-centric, focusing on flexibility rather than avoiding it. In the long run, 200 permutations of a feature set has its drawbacks, especially wrt/ NMS complexity and a large, complicated document set. > > /martin > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 08:43:54 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BC3233A67A1; Sun, 14 Dec 2008 08:43:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 296C73A6867 for ; Sun, 14 Dec 2008 08:43:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.016 X-Spam-Level: X-Spam-Status: No, score=-0.016 tagged_above=-999 required=5 tests=[AWL=0.427, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KntKo9kSjhJk for ; Sun, 14 Dec 2008 08:43:52 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 66D813A67A1 for ; Sun, 14 Dec 2008 08:43:50 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1LBu4C-0001XL-AS; Sun, 14 Dec 2008 17:43:40 +0100 Message-ID: From: "Bert Wijnen \(IETF\)" To: "Andy Bierman" , "Martin Bjorklund" References: <49415AE4.6070708@netconfcentral.com><20081214.114531.134024997.mbj@tail-f.com> <49452332.1070603@netconfcentral.com> In-Reply-To: <49452332.1070603@netconfcentral.com> Date: Sun, 14 Dec 2008 17:43:12 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy writes: > The proposed charter text says: > > - no extensions (i.e. we are not doing a NETCONF V2) > > I guess this would be an extension, but it's not really "netconf v2". > I do not understand the premise of this statement, or real purpose of this charter. Why are extensions to the protocol bad, but optional capabilities are good? Is the purpose of the charter to clarify the document without changing the protocol, or to make both the document and the protocol better? The PURSPOSE of the charter is to CLARIFY things that have caused variations of implementation (because of mis-understanding) and to FIX any BUGS that we have uncovered. And as such, we have set ourselves a ratehr SHORT TIMELINE, namely we want to submit to thge IESG by JUNE 2009! That is how I (for one) understood the consensus we had at IETF73 and as it was confirmed (or not opposed) on the mailing list. Bert _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 08:43:54 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BC3233A67A1; Sun, 14 Dec 2008 08:43:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 296C73A6867 for ; Sun, 14 Dec 2008 08:43:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.016 X-Spam-Level: X-Spam-Status: No, score=-0.016 tagged_above=-999 required=5 tests=[AWL=0.427, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KntKo9kSjhJk for ; Sun, 14 Dec 2008 08:43:52 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 66D813A67A1 for ; Sun, 14 Dec 2008 08:43:50 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1LBu4C-0001XL-AS; Sun, 14 Dec 2008 17:43:40 +0100 Message-ID: From: "Bert Wijnen \(IETF\)" To: "Andy Bierman" , "Martin Bjorklund" References: <49415AE4.6070708@netconfcentral.com><20081214.114531.134024997.mbj@tail-f.com> <49452332.1070603@netconfcentral.com> In-Reply-To: <49452332.1070603@netconfcentral.com> Date: Sun, 14 Dec 2008 17:43:12 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy writes: > The proposed charter text says: > > - no extensions (i.e. we are not doing a NETCONF V2) > > I guess this would be an extension, but it's not really "netconf v2". > I do not understand the premise of this statement, or real purpose of this charter. Why are extensions to the protocol bad, but optional capabilities are good? Is the purpose of the charter to clarify the document without changing the protocol, or to make both the document and the protocol better? The PURSPOSE of the charter is to CLARIFY things that have caused variations of implementation (because of mis-understanding) and to FIX any BUGS that we have uncovered. And as such, we have set ourselves a ratehr SHORT TIMELINE, namely we want to submit to thge IESG by JUNE 2009! That is how I (for one) understood the consensus we had at IETF73 and as it was confirmed (or not opposed) on the mailing list. Bert _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 09:04:29 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E82FB3A68B3; Sun, 14 Dec 2008 09:04:29 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACAA23A68B3 for ; Sun, 14 Dec 2008 09:04:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.041 X-Spam-Level: X-Spam-Status: No, score=-0.041 tagged_above=-999 required=5 tests=[AWL=0.401, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WjJ46ZFpwK31 for ; Sun, 14 Dec 2008 09:04:27 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 6E94B3A6768 for ; Sun, 14 Dec 2008 09:04:27 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1LBu4B-0001XL-U6; Sun, 14 Dec 2008 17:43:40 +0100 Message-ID: <36181F2A2FBC470192ED0164CA5B80FB@BertLaptop> From: "Bert Wijnen \(IETF\)" To: , "Andy Bierman" References: <49415AE4.6070708@netconfcentral.com><20081214.114531.134024997.mbj@tail-f.com><49450A5F.2050401@netconfcentral.com> <20081214135751.GA24264@elstar.local> In-Reply-To: <20081214135751.GA24264@elstar.local> Date: Sun, 14 Dec 2008 17:39:14 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0181318779==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0181318779== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0EEB_01C95E12.E184D150" This is a multi-part message in MIME format. ------=_NextPart_000_0EEB_01C95E12.E184D150 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Exactly. Andy, do you want to add to the charter: If the WG turns out not to get consensus on the new document by June = 2009, then we will abolish the effort at that time. That would make it clear to everyone that we're are NOT going to drag = this piece of work out forever. I am willing to take responsibility for that as one of = the co-chairs. If we (that is the WG) are eager to do what we set out to do, then it = should NOT drag out. Bert ----- Original Message -----=20 From: Juergen Schoenwaelder=20 To: Andy Bierman=20 Cc: rbonica@juniper.net ; netconf@ietf.org=20 Sent: Sunday, December 14, 2008 2:57 PM Subject: Re: [Netconf] Request for charter change On Sun, Dec 14, 2008 at 05:30:07AM -0800, Andy Bierman wrote: > IMO it is a waste of 2 - 3 years work to cycle at Proposed Standard From netconf-bounces@ietf.org Sun Dec 14 09:04:29 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E82FB3A68B3; Sun, 14 Dec 2008 09:04:29 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACAA23A68B3 for ; Sun, 14 Dec 2008 09:04:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.041 X-Spam-Level: X-Spam-Status: No, score=-0.041 tagged_above=-999 required=5 tests=[AWL=0.401, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WjJ46ZFpwK31 for ; Sun, 14 Dec 2008 09:04:27 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 6E94B3A6768 for ; Sun, 14 Dec 2008 09:04:27 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1LBu4B-0001XL-U6; Sun, 14 Dec 2008 17:43:40 +0100 Message-ID: <36181F2A2FBC470192ED0164CA5B80FB@BertLaptop> From: "Bert Wijnen \(IETF\)" To: , "Andy Bierman" References: <49415AE4.6070708@netconfcentral.com><20081214.114531.134024997.mbj@tail-f.com><49450A5F.2050401@netconfcentral.com> <20081214135751.GA24264@elstar.local> In-Reply-To: <20081214135751.GA24264@elstar.local> Date: Sun, 14 Dec 2008 17:39:14 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0181318779==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0181318779== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0EEB_01C95E12.E184D150" This is a multi-part message in MIME format. ------=_NextPart_000_0EEB_01C95E12.E184D150 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Exactly. Andy, do you want to add to the charter: If the WG turns out not to get consensus on the new document by June = 2009, then we will abolish the effort at that time. That would make it clear to everyone that we're are NOT going to drag = this piece of work out forever. I am willing to take responsibility for that as one of = the co-chairs. If we (that is the WG) are eager to do what we set out to do, then it = should NOT drag out. Bert ----- Original Message -----=20 From: Juergen Schoenwaelder=20 To: Andy Bierman=20 Cc: rbonica@juniper.net ; netconf@ietf.org=20 Sent: Sunday, December 14, 2008 2:57 PM Subject: Re: [Netconf] Request for charter change On Sun, Dec 14, 2008 at 05:30:07AM -0800, Andy Bierman wrote: > IMO it is a waste of 2 - 3 years work to cycle at Proposed Standard > for > for a few penny-ante tweaks and bug-fixes. It takes 2-3 if _we_ make it take 2-3 years. The charter has a much shorter time plan and it is up to us to stick to it. Our testing experience is that there are things that implementors have done differently and I believe we do this exercise with the goal to improve and document interoperability. I believe this is worth it. /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------=_NextPart_000_0EEB_01C95E12.E184D150 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Exactly.
Andy, do you want to add to the = charter:
 
    If the WG turns out not to get = consensus on=20 the new document by June 2009,
    then we will abolish the effort = at that=20 time.
 
That would make it clear to everyone that we're are = NOT going=20 to drag this piece of
work out forever. I am willing to take = responsibility for that=20 as one of the co-chairs.
 
If we (that is the WG) are eager to do what we set = out to do,=20 then it should NOT drag out.
 
Bert
----- Original Message -----
From:=20 Juergen = Schoenwaelder=20
Cc: rbonica@juniper.net ; netconf@ietf.org=20
Sent: Sunday, December 14, 2008 = 2:57=20 PM
Subject: Re: [Netconf] Request = for=20 charter change

On Sun, Dec 14, 2008 at 05:30:07AM -0800, Andy Bierman=20 wrote:

> IMO it is a waste of 2 - 3 years work to cycle at = Proposed=20 Standard
> for a few penny-ante tweaks and bug-fixes.

It = takes=20 2-3 if _we_ make it take 2-3 years. The charter has a much
shorter = time=20 plan and it is up to us to stick to it.

Our testing experience = is that=20 there are things that implementors have
done differently and I = believe we=20 do this exercise with the goal to
improve and document = interoperability. I=20 believe this is worth it.

/js

--
Juergen=20 = Schoenwaelder          = =20 Jacobs University Bremen gGmbH
Phone: +49 421 200=20 3587         Campus Ring 1, = 28759=20 Bremen, Germany
Fax:   +49 421 200=20 3103         < a few penny-ante tweaks and bug-fixes. It takes 2-3 if _we_ make it take 2-3 years. The charter has a much shorter time plan and it is up to us to stick to it. Our testing experience is that there are things that implementors have done differently and I believe we do this exercise with the goal to improve and document interoperability. I believe this is worth it. /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------=_NextPart_000_0EEB_01C95E12.E184D150 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Exactly.
Andy, do you want to add to the = charter:
 
    If the WG turns out not to get = consensus on=20 the new document by June 2009,
    then we will abolish the effort = at that=20 time.
 
That would make it clear to everyone that we're are = NOT going=20 to drag this piece of
work out forever. I am willing to take = responsibility for that=20 as one of the co-chairs.
 
If we (that is the WG) are eager to do what we set = out to do,=20 then it should NOT drag out.
 
Bert
----- Original Message -----
From:=20 Juergen = Schoenwaelder=20
Cc: rbonica@juniper.net ; netconf@ietf.org=20
Sent: Sunday, December 14, 2008 = 2:57=20 PM
Subject: Re: [Netconf] Request = for=20 charter change

On Sun, Dec 14, 2008 at 05:30:07AM -0800, Andy Bierman=20 wrote:

> IMO it is a waste of 2 - 3 years work to cycle at = Proposed=20 Standard
> for a few penny-ante tweaks and bug-fixes.

It = takes=20 2-3 if _we_ make it take 2-3 years. The charter has a much
shorter = time=20 plan and it is up to us to stick to it.

Our testing experience = is that=20 there are things that implementors have
done differently and I = believe we=20 do this exercise with the goal to
improve and document = interoperability. I=20 believe this is worth it.

/js

--
Juergen=20 = Schoenwaelder          = =20 Jacobs University Bremen gGmbH
Phone: +49 421 200=20 3587         Campus Ring 1, = 28759=20 Bremen, Germany
Fax:   +49 421 200=20 3103         <http://www.jacobs-university.de= />
_______________________________________________
Netconf=20 mailing list
Netconf@ietf.org
https://www.ietf.o= rg/mailman/listinfo/netconf
------=_NextPart_000_0EEB_01C95E12.E184D150-- --===============0181318779== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0181318779==-- = href=3D"http://www.jacobs-university.de/">http://www.jacobs-university.de= />
_______________________________________________
Netconf=20 mailing list
Netconf@ietf.org
https://www.ietf.o= rg/mailman/listinfo/netconf
------=_NextPart_000_0EEB_01C95E12.E184D150-- --===============0181318779== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0181318779==-- From netconf-bounces@ietf.org Sun Dec 14 09:50:38 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D31FA3A6867; Sun, 14 Dec 2008 09:50:38 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F18D83A6867 for ; Sun, 14 Dec 2008 09:50:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.205 X-Spam-Level: X-Spam-Status: No, score=-2.205 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hwnHo9lzU7Zg for ; Sun, 14 Dec 2008 09:50:37 -0800 (PST) Received: from smtp115.sbc.mail.sp1.yahoo.com (smtp115.sbc.mail.sp1.yahoo.com [69.147.64.88]) by core3.amsl.com (Postfix) with SMTP id 5CD9D3A67A8 for ; Sun, 14 Dec 2008 09:50:37 -0800 (PST) Received: (qmail 29968 invoked from network); 14 Dec 2008 17:50:29 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp115.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 17:50:28 -0000 X-YMail-OSG: O6Ej.KcVM1kvKrVtpyngGanmuIOThTFpIxbN9e6NOKOl2trlFv0HiPIj2.NFZsYMNfMgxoRVLybvMc1rncPwyMFfbtoPn6B4BsOvfyIGPbtxwmDr1.wDuwV_IevdOgVzUI7BLsy7i.wPe8tDnECgIarc X-Yahoo-Newman-Property: ymail-3 Message-ID: <49454762.5070606@netconfcentral.com> Date: Sun, 14 Dec 2008 09:50:26 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Bert Wijnen (IETF)" References: <49415AE4.6070708@netconfcentral.com><20081214.114531.134024997.mbj@tail-f.com><49450A5F.2050401@netconfcentral.com> <20081214135751.GA24264@elstar.local> <36181F2A2FBC470192ED0164CA5B80FB@BertLaptop> In-Reply-To: <36181F2A2FBC470192ED0164CA5B80FB@BertLaptop> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Bert Wijnen (IETF) wrote: > Exactly. > Andy, do you want to add to the charter: > > If the WG turns out not to get consensus on the new document by June > 2009, > then we will abolish the effort at that time. > No, I do not want to add artificial deadlines to the charter. I never really got an answer on the very real corner-case (test-only enum), if this is in scope for 4741-bis or is this going to be (yet another) little optional capability added in the future. Of course it is good to have the NETCONF protocol be as clear as possible for everybody to understand. Publishing a 4741-bis is just one way to fix errata and clarify details. Some WGs use an Implementation Guidelines RFC for that purpose, for example. I prefer a 2 year effort to produce NETCONF 2.0, starting some time after NETMOD is done, instead of a 'small-as-possible' update to NETCONF 1.0. I think we will find opportunities for protocol improvement as more YANG content is implemented. I do not object to the current charter, because with Bert in charge, there isn't going to be any missed milestones. I do not think the WG will have any problem finishing 4741-bis before YANG is done, but I'm not so sure about RFC publication. > That would make it clear to everyone that we're are NOT going to drag > this piece of > work out forever. I am willing to take responsibility for that as one of > the co-chairs. > > If we (that is the WG) are eager to do what we set out to do, then it > should NOT drag out. > > Bert > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 09:50:38 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D31FA3A6867; Sun, 14 Dec 2008 09:50:38 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F18D83A6867 for ; Sun, 14 Dec 2008 09:50:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.205 X-Spam-Level: X-Spam-Status: No, score=-2.205 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hwnHo9lzU7Zg for ; Sun, 14 Dec 2008 09:50:37 -0800 (PST) Received: from smtp115.sbc.mail.sp1.yahoo.com (smtp115.sbc.mail.sp1.yahoo.com [69.147.64.88]) by core3.amsl.com (Postfix) with SMTP id 5CD9D3A67A8 for ; Sun, 14 Dec 2008 09:50:37 -0800 (PST) Received: (qmail 29968 invoked from network); 14 Dec 2008 17:50:29 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp115.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 17:50:28 -0000 X-YMail-OSG: O6Ej.KcVM1kvKrVtpyngGanmuIOThTFpIxbN9e6NOKOl2trlFv0HiPIj2.NFZsYMNfMgxoRVLybvMc1rncPwyMFfbtoPn6B4BsOvfyIGPbtxwmDr1.wDuwV_IevdOgVzUI7BLsy7i.wPe8tDnECgIarc X-Yahoo-Newman-Property: ymail-3 Message-ID: <49454762.5070606@netconfcentral.com> Date: Sun, 14 Dec 2008 09:50:26 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Bert Wijnen (IETF)" References: <49415AE4.6070708@netconfcentral.com><20081214.114531.134024997.mbj@tail-f.com><49450A5F.2050401@netconfcentral.com> <20081214135751.GA24264@elstar.local> <36181F2A2FBC470192ED0164CA5B80FB@BertLaptop> In-Reply-To: <36181F2A2FBC470192ED0164CA5B80FB@BertLaptop> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Bert Wijnen (IETF) wrote: > Exactly. > Andy, do you want to add to the charter: > > If the WG turns out not to get consensus on the new document by June > 2009, > then we will abolish the effort at that time. > No, I do not want to add artificial deadlines to the charter. I never really got an answer on the very real corner-case (test-only enum), if this is in scope for 4741-bis or is this going to be (yet another) little optional capability added in the future. Of course it is good to have the NETCONF protocol be as clear as possible for everybody to understand. Publishing a 4741-bis is just one way to fix errata and clarify details. Some WGs use an Implementation Guidelines RFC for that purpose, for example. I prefer a 2 year effort to produce NETCONF 2.0, starting some time after NETMOD is done, instead of a 'small-as-possible' update to NETCONF 1.0. I think we will find opportunities for protocol improvement as more YANG content is implemented. I do not object to the current charter, because with Bert in charge, there isn't going to be any missed milestones. I do not think the WG will have any problem finishing 4741-bis before YANG is done, but I'm not so sure about RFC publication. > That would make it clear to everyone that we're are NOT going to drag > this piece of > work out forever. I am willing to take responsibility for that as one of > the co-chairs. > > If we (that is the WG) are eager to do what we set out to do, then it > should NOT drag out. > > Bert > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 11:08:00 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 32C2D3A68F0; Sun, 14 Dec 2008 11:08:00 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D99233A68F0 for ; Sun, 14 Dec 2008 11:07:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.913 X-Spam-Level: X-Spam-Status: No, score=-2.913 tagged_above=-999 required=5 tests=[AWL=-0.314, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LDmiXqFg-UOw for ; Sun, 14 Dec 2008 11:07:57 -0800 (PST) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id 06E6D3A68B8 for ; Sun, 14 Dec 2008 11:07:56 -0800 (PST) Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id mBEJ7ihB006660 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Sun, 14 Dec 2008 20:07:44 +0100 Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id mBEJ7iVV021176; Sun, 14 Dec 2008 20:07:44 +0100 Received: from DEMUEXC005.nsn-intra.net ([10.150.128.17]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Sun, 14 Dec 2008 20:07:44 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Sun, 14 Dec 2008 20:07:41 +0100 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] Request for charter change Thread-Index: AclbdHZf/bbsfx3rRWKprcOcWgquqgAAfHCQAKmtvtA= References: From: "Ersue, Mehmet (NSN - DE/Munich)" To: X-OriginalArrivalTime: 14 Dec 2008 19:07:44.0531 (UTC) FILETIME=[3EAD4630:01C95E1F] Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Dear NETCONF Members, Dan agreed to bring the charter update proposal to the IESG telechat on 12/18 to enable the approval before Christmas. Please speak up if you disagree with the proposed new charter text by 12/16 5pm ET. Cheers, Mehmet > -----Original Message----- > From: netconf-bounces@ietf.org > [mailto:netconf-bounces@ietf.org] On Behalf Of ext Ersue, > Mehmet (NSN - DE/Munich) > Sent: Thursday, December 11, 2008 5:29 PM > To: ext Romascanu, Dan (Dan); rbonica@juniper.net; netconf@ietf.org > Subject: [Netconf] Request for charter change > > > Dear ADs (and WG), > > based on the consensus after IETF 73 we prepared an update > for the NETCONF WG charter. > > Dan, Ron: Could you please approve that the extended charter > text be posted as our current WG charter page and forward it to > iesg-secretary if approve <<081211_NETCONF WG Charter text.txt>> d > <> ? > > Thank you. > > Bert and Mehmet > > Attached is the new charter and a rfcdiff of old and new charter. > And here is the main body of the charter text: > > Configuration of networks of devices has become a critical requirement > for operators in today's highly interoperable networks. Operators from > large to small have developed their own mechanisms or used vendor > specific mechanisms to transfer configuration data to and from a > device, and for examining device state information which may impact > the configuration. Each of these mechanisms may be different in > various aspects, such as session establishment, user authentication, > configuration data exchange, and error responses. > > The NETCONF Working Group is chartered to produce a protocol suitable > for network configuration, with the following characteristics: > > - Provides retrieval mechanisms which can differentiate between > configuration data and non-configuration data > - Is extensible enough so that vendors will provide access to all > configuration data on the device using a single protocol > - Has a programmatic interface (avoids screen scraping and > formatting-related changes between releases) > - Uses a textual data representation, that can be easily manipulated > using non-specialized text manipulation tools. > - Supports integration with existing user authentication methods > - Supports integration with existing configuration database systems > - Supports network wide configuration transactions (with features such > as locking and rollback capability) > - Is as transport-independent as possible > - Provides support for asynchronous notifications. > > The NETCONF protocol is using XML for data encoding purposes, because > XML is a widely deployed standard which is supported by a large number > of applications. > > The NETCONF protocol should be independent of the data definition > language and data models used to describe configuration and state > data. > > However, the authorization model used in the protocol is dependent on > the data model. Although these issues must be fully addressed to > develop standard data models, only a small part of this work will be > initially addressed. This group will specify requirements for standard > data models in order to fully support the NETCONF protocol, such as: > > - identification of principals, such as user names or distinguished > names > - mechanism to distinguish configuration from non-configuration data > - XML namespace conventions > - XML usage guidelines > > The initial work started in 2003 and has already been > completed and was > restricted to following items: > > a) NETCONF Protocol Specification, which defines the operational > model, > protocol operations, transaction model, data model requirements, > security requirements, and transport layer requirements. > b) NETCONF over SSH Specification: Implementation Mandatory, > c) NETCONF over BEEP Specification: Implementation Optional, > d) NETCONF over SOAP Specification: Implementation Optional. > > These documents define how the NETCONF protocol is used with each > transport protocol selected by the working group, and how it meets > the security and transport layer requirements of the > NETCONF Protocol > Specification. > > e) NETCONF Notification Specification, which defines mechanisms that > provide an asynchronous message notification delivery service for > the NETCONF protocol. NETCONF Notification is an optional > capability built on top of the base NETCONF definition and > provides the capabilities and operations necessary to support > this service. > > The NETCONF notification specification has been finished > now as well. > > In the current phase of the incremental development of NETCONF the > workgroup will focus on following items: > > 1. Fine-grain locking: The base NETCONF protocol only provides a lock > for the entire configuration datastore, which is not deemed to meet > important operational and security requirements. The > NETCONF working > group will produce a standards-track RFC specifying a mechanism for > fine-grain locking of the NETCONF configuration datastore. > > 2. NETCONF monitoring: It is considered best practice for IETF working > groups to include management of their protocols within the scope of > the solution they are providing. The NETCONF working group will > produce a standards-track RFC with mechanisms allowing NETCONF > itself to be used to monitor some aspects of NETCONF operation. > > 3. Schema advertisement: Currently the NETCONF protocol is able to > advertise which protocol features are supported on a particular > netconf-capable device. However, there is currently no way to > discover > which XML Schema are supported on the device. The NETCONF working > group will produce a standards-track RFC with mechanisms > making this > discovery possible (this item may be merged with "NETCONF > monitoring" > into a single document). > > Note: The schema-advertisement material has been merged into the > NETCONF monitoring document based on WG consensus. > > 4. NETCONF over TLS: Based on implementation experience there is a > need for a standards track document to define NETCONF over > TLS as an > optional transport for the NETCONF protocol. > > 5. NETCONF default handling: NETCONF today does not define whether > default values should be returned by the server in replies > to requests for reading configuration and state data. Different > clients have different needs to receive or not to receive > default data. The NETCONF working group will produce a > standards-track RFC defining a mechanism that allows > NETCONF clients to control whether default data is returned > by the netconf server. > > 6. NETCONF implementations have shown that the specification > in RFC4741 > is not 100% clear and has lead to different interpretations and > implementations. > Also some errors have been uncovered. So the WG will do an > rfc4741bis > with > following constraints: > > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > - The work can be started based on the discussion in > IETF #73 (see > http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). > > Note: A technical errata has been posted on rfc4742. If the work on > rfc4741bis uncovers any additional fixes/clarifications that need > to be made to rfc4742, the WG may consider to also do a rfc4742bis > as part of this work-item. > > The following items have been identified as important but are > currently > not considered in scope for re-chartering and may be > candidates for work > when there is community consensus to take them on: > > - NETCONF Notification content > - Access Control requirements > - NETCONF access to SMI-based MIB data > > > Goals and Milestones: > Done Working Group formed > Done Submit initial Netconf Protocol draft > Done Submit initial Netconf over (transport-TBD) draft > Done Begin Working Group Last Call for the Netconf Protocol draft > Done Begin Working Group Last Call for the Netconf over > (transport-TBD) > draft > Done Submit final version of the Netconf Protocol draft to the IESG > Done Submit final version of the Netconf over SOAP draft to the IESG > Done Submit final version of the Netconf over BEEP draft to the IESG > Done Submit final version of the Netconf over SSH draft to the IESG > Done Update charter > Done Submit first version of NETCONF Notifications document > Done Begin WGLC of NETCONF Notifications document > Done Submit final version of NETCONF Notifications document to IESG > for consideration as Proposed Standard > Done -00 draft for fine Grain Locking > Done -00 draft for NETCONF over TLS > Done -00 draft for NETCONF Monitoring > Done -00 draft for Schema Advertisement > Done Early Review of client authentication approach (for > NETCONF over > TLS) with the security community at IETF 71 > N.A. WG Last Call on Schema Advertisement after IETF72 > Schema Advertisement has been merged into Monitoring > Done WG Last Call on NETCONF over TLS after IETF72 > Done Netconf over TLS to IESG for consideration as > Proposed Standards > Dec 2008 WG Last Call on Fine Grain Locking after IETF73 > Dec 2008 Send Partial Locking to IESG for consideration as Proposed > Standards > Jan 2009 Initial WG draft for with-defaults capability > Feb 2009 Initial WG draft for rfc4741bis > Mar 2009 WG Last Call on NETCONF Monitoring after IETF73 > Apr 2009 WG Last Call on rfc4741bis > Apr 2009 WG Last Call on with-defaults > Jun 2009 rfc4741bis to IESG for considerations as Proposed Standard > Jun 2009 with-defaults capability to IESG for considerations as > Proposed Standard > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 11:08:00 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 32C2D3A68F0; Sun, 14 Dec 2008 11:08:00 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D99233A68F0 for ; Sun, 14 Dec 2008 11:07:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.913 X-Spam-Level: X-Spam-Status: No, score=-2.913 tagged_above=-999 required=5 tests=[AWL=-0.314, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LDmiXqFg-UOw for ; Sun, 14 Dec 2008 11:07:57 -0800 (PST) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id 06E6D3A68B8 for ; Sun, 14 Dec 2008 11:07:56 -0800 (PST) Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id mBEJ7ihB006660 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Sun, 14 Dec 2008 20:07:44 +0100 Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id mBEJ7iVV021176; Sun, 14 Dec 2008 20:07:44 +0100 Received: from DEMUEXC005.nsn-intra.net ([10.150.128.17]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Sun, 14 Dec 2008 20:07:44 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Sun, 14 Dec 2008 20:07:41 +0100 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] Request for charter change Thread-Index: AclbdHZf/bbsfx3rRWKprcOcWgquqgAAfHCQAKmtvtA= References: From: "Ersue, Mehmet (NSN - DE/Munich)" To: X-OriginalArrivalTime: 14 Dec 2008 19:07:44.0531 (UTC) FILETIME=[3EAD4630:01C95E1F] Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Dear NETCONF Members, Dan agreed to bring the charter update proposal to the IESG telechat on 12/18 to enable the approval before Christmas. Please speak up if you disagree with the proposed new charter text by 12/16 5pm ET. Cheers, Mehmet > -----Original Message----- > From: netconf-bounces@ietf.org > [mailto:netconf-bounces@ietf.org] On Behalf Of ext Ersue, > Mehmet (NSN - DE/Munich) > Sent: Thursday, December 11, 2008 5:29 PM > To: ext Romascanu, Dan (Dan); rbonica@juniper.net; netconf@ietf.org > Subject: [Netconf] Request for charter change > > > Dear ADs (and WG), > > based on the consensus after IETF 73 we prepared an update > for the NETCONF WG charter. > > Dan, Ron: Could you please approve that the extended charter > text be posted as our current WG charter page and forward it to > iesg-secretary if approve <<081211_NETCONF WG Charter text.txt>> d > <> ? > > Thank you. > > Bert and Mehmet > > Attached is the new charter and a rfcdiff of old and new charter. > And here is the main body of the charter text: > > Configuration of networks of devices has become a critical requirement > for operators in today's highly interoperable networks. Operators from > large to small have developed their own mechanisms or used vendor > specific mechanisms to transfer configuration data to and from a > device, and for examining device state information which may impact > the configuration. Each of these mechanisms may be different in > various aspects, such as session establishment, user authentication, > configuration data exchange, and error responses. > > The NETCONF Working Group is chartered to produce a protocol suitable > for network configuration, with the following characteristics: > > - Provides retrieval mechanisms which can differentiate between > configuration data and non-configuration data > - Is extensible enough so that vendors will provide access to all > configuration data on the device using a single protocol > - Has a programmatic interface (avoids screen scraping and > formatting-related changes between releases) > - Uses a textual data representation, that can be easily manipulated > using non-specialized text manipulation tools. > - Supports integration with existing user authentication methods > - Supports integration with existing configuration database systems > - Supports network wide configuration transactions (with features such > as locking and rollback capability) > - Is as transport-independent as possible > - Provides support for asynchronous notifications. > > The NETCONF protocol is using XML for data encoding purposes, because > XML is a widely deployed standard which is supported by a large number > of applications. > > The NETCONF protocol should be independent of the data definition > language and data models used to describe configuration and state > data. > > However, the authorization model used in the protocol is dependent on > the data model. Although these issues must be fully addressed to > develop standard data models, only a small part of this work will be > initially addressed. This group will specify requirements for standard > data models in order to fully support the NETCONF protocol, such as: > > - identification of principals, such as user names or distinguished > names > - mechanism to distinguish configuration from non-configuration data > - XML namespace conventions > - XML usage guidelines > > The initial work started in 2003 and has already been > completed and was > restricted to following items: > > a) NETCONF Protocol Specification, which defines the operational > model, > protocol operations, transaction model, data model requirements, > security requirements, and transport layer requirements. > b) NETCONF over SSH Specification: Implementation Mandatory, > c) NETCONF over BEEP Specification: Implementation Optional, > d) NETCONF over SOAP Specification: Implementation Optional. > > These documents define how the NETCONF protocol is used with each > transport protocol selected by the working group, and how it meets > the security and transport layer requirements of the > NETCONF Protocol > Specification. > > e) NETCONF Notification Specification, which defines mechanisms that > provide an asynchronous message notification delivery service for > the NETCONF protocol. NETCONF Notification is an optional > capability built on top of the base NETCONF definition and > provides the capabilities and operations necessary to support > this service. > > The NETCONF notification specification has been finished > now as well. > > In the current phase of the incremental development of NETCONF the > workgroup will focus on following items: > > 1. Fine-grain locking: The base NETCONF protocol only provides a lock > for the entire configuration datastore, which is not deemed to meet > important operational and security requirements. The > NETCONF working > group will produce a standards-track RFC specifying a mechanism for > fine-grain locking of the NETCONF configuration datastore. > > 2. NETCONF monitoring: It is considered best practice for IETF working > groups to include management of their protocols within the scope of > the solution they are providing. The NETCONF working group will > produce a standards-track RFC with mechanisms allowing NETCONF > itself to be used to monitor some aspects of NETCONF operation. > > 3. Schema advertisement: Currently the NETCONF protocol is able to > advertise which protocol features are supported on a particular > netconf-capable device. However, there is currently no way to > discover > which XML Schema are supported on the device. The NETCONF working > group will produce a standards-track RFC with mechanisms > making this > discovery possible (this item may be merged with "NETCONF > monitoring" > into a single document). > > Note: The schema-advertisement material has been merged into the > NETCONF monitoring document based on WG consensus. > > 4. NETCONF over TLS: Based on implementation experience there is a > need for a standards track document to define NETCONF over > TLS as an > optional transport for the NETCONF protocol. > > 5. NETCONF default handling: NETCONF today does not define whether > default values should be returned by the server in replies > to requests for reading configuration and state data. Different > clients have different needs to receive or not to receive > default data. The NETCONF working group will produce a > standards-track RFC defining a mechanism that allows > NETCONF clients to control whether default data is returned > by the netconf server. > > 6. NETCONF implementations have shown that the specification > in RFC4741 > is not 100% clear and has lead to different interpretations and > implementations. > Also some errors have been uncovered. So the WG will do an > rfc4741bis > with > following constraints: > > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > - The work can be started based on the discussion in > IETF #73 (see > http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). > > Note: A technical errata has been posted on rfc4742. If the work on > rfc4741bis uncovers any additional fixes/clarifications that need > to be made to rfc4742, the WG may consider to also do a rfc4742bis > as part of this work-item. > > The following items have been identified as important but are > currently > not considered in scope for re-chartering and may be > candidates for work > when there is community consensus to take them on: > > - NETCONF Notification content > - Access Control requirements > - NETCONF access to SMI-based MIB data > > > Goals and Milestones: > Done Working Group formed > Done Submit initial Netconf Protocol draft > Done Submit initial Netconf over (transport-TBD) draft > Done Begin Working Group Last Call for the Netconf Protocol draft > Done Begin Working Group Last Call for the Netconf over > (transport-TBD) > draft > Done Submit final version of the Netconf Protocol draft to the IESG > Done Submit final version of the Netconf over SOAP draft to the IESG > Done Submit final version of the Netconf over BEEP draft to the IESG > Done Submit final version of the Netconf over SSH draft to the IESG > Done Update charter > Done Submit first version of NETCONF Notifications document > Done Begin WGLC of NETCONF Notifications document > Done Submit final version of NETCONF Notifications document to IESG > for consideration as Proposed Standard > Done -00 draft for fine Grain Locking > Done -00 draft for NETCONF over TLS > Done -00 draft for NETCONF Monitoring > Done -00 draft for Schema Advertisement > Done Early Review of client authentication approach (for > NETCONF over > TLS) with the security community at IETF 71 > N.A. WG Last Call on Schema Advertisement after IETF72 > Schema Advertisement has been merged into Monitoring > Done WG Last Call on NETCONF over TLS after IETF72 > Done Netconf over TLS to IESG for consideration as > Proposed Standards > Dec 2008 WG Last Call on Fine Grain Locking after IETF73 > Dec 2008 Send Partial Locking to IESG for consideration as Proposed > Standards > Jan 2009 Initial WG draft for with-defaults capability > Feb 2009 Initial WG draft for rfc4741bis > Mar 2009 WG Last Call on NETCONF Monitoring after IETF73 > Apr 2009 WG Last Call on rfc4741bis > Apr 2009 WG Last Call on with-defaults > Jun 2009 rfc4741bis to IESG for considerations as Proposed Standard > Jun 2009 with-defaults capability to IESG for considerations as > Proposed Standard > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 13:25:12 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1DEFD3A657C; Sun, 14 Dec 2008 13:25:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 964313A6782 for ; Sun, 14 Dec 2008 13:25:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.026 X-Spam-Level: X-Spam-Status: No, score=-2.026 tagged_above=-999 required=5 tests=[AWL=0.020, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kGJCrXiS7inV for ; Sun, 14 Dec 2008 13:25:07 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 1CEF83A68B5 for ; Sun, 14 Dec 2008 13:25:06 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id 9DF4976C30A; Sun, 14 Dec 2008 22:24:58 +0100 (CET) Date: Sun, 14 Dec 2008 22:24:58 +0100 (CET) Message-Id: <20081214.222458.257559594.mbj@tail-f.com> To: andy@netconfcentral.com From: Martin Bjorklund In-Reply-To: <49450A5F.2050401@netconfcentral.com> References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy Bierman wrote: > Martin Bjorklund wrote: > > Hi, > > Andy Bierman wrote: > >>> - bug fixes are to be done > >>> - clarifications can be done > >>> - no extensions (i.e. we are not doing a NETCONF V2) > >> What about the 'test-only' enumeration for test-option? > >> IMO, the WG needs some flexibility in the solution space > >> to deal with usability problems found. It has been determined > >> that 'test-then-set' and are somewhat worthless, > >> and a 'test-only' mode for would have been much > >> better in the first place. Is that a new feature or a bugfix? > > This particular case could be handled by incrementing the minor > > version for the :validate capability so that the URI is: > > urn:ietf:params:netconf:capability:validate:1.1 > > This 1.1 version is backwards compatible, but an old client will not > > understand that, so a server that wants to support both old and new > > clients would advertise both versions: > > urn:ietf:params:netconf:capability:validate:1.0 > > urn:ietf:params:netconf:capability:validate:1.1 > > > > There are lots of ways the protocol could get changed, > such as adding new capabilities, without bumping > the base capability. What matters is whether the 1.0 > client continues to work even though it does > not know about these new capabilities. So is your opinion that the proposed charter text allows us to bump the version of this (or other) capability? /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 13:25:12 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1DEFD3A657C; Sun, 14 Dec 2008 13:25:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 964313A6782 for ; Sun, 14 Dec 2008 13:25:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.026 X-Spam-Level: X-Spam-Status: No, score=-2.026 tagged_above=-999 required=5 tests=[AWL=0.020, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kGJCrXiS7inV for ; Sun, 14 Dec 2008 13:25:07 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 1CEF83A68B5 for ; Sun, 14 Dec 2008 13:25:06 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id 9DF4976C30A; Sun, 14 Dec 2008 22:24:58 +0100 (CET) Date: Sun, 14 Dec 2008 22:24:58 +0100 (CET) Message-Id: <20081214.222458.257559594.mbj@tail-f.com> To: andy@netconfcentral.com From: Martin Bjorklund In-Reply-To: <49450A5F.2050401@netconfcentral.com> References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy Bierman wrote: > Martin Bjorklund wrote: > > Hi, > > Andy Bierman wrote: > >>> - bug fixes are to be done > >>> - clarifications can be done > >>> - no extensions (i.e. we are not doing a NETCONF V2) > >> What about the 'test-only' enumeration for test-option? > >> IMO, the WG needs some flexibility in the solution space > >> to deal with usability problems found. It has been determined > >> that 'test-then-set' and are somewhat worthless, > >> and a 'test-only' mode for would have been much > >> better in the first place. Is that a new feature or a bugfix? > > This particular case could be handled by incrementing the minor > > version for the :validate capability so that the URI is: > > urn:ietf:params:netconf:capability:validate:1.1 > > This 1.1 version is backwards compatible, but an old client will not > > understand that, so a server that wants to support both old and new > > clients would advertise both versions: > > urn:ietf:params:netconf:capability:validate:1.0 > > urn:ietf:params:netconf:capability:validate:1.1 > > > > There are lots of ways the protocol could get changed, > such as adding new capabilities, without bumping > the base capability. What matters is whether the 1.0 > client continues to work even though it does > not know about these new capabilities. So is your opinion that the proposed charter text allows us to bump the version of this (or other) capability? /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 15:28:01 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B2EB3A67F1; Sun, 14 Dec 2008 15:28:01 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A0463A6804 for ; Sun, 14 Dec 2008 15:28:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.207 X-Spam-Level: X-Spam-Status: No, score=-2.207 tagged_above=-999 required=5 tests=[AWL=0.058, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1yYn6weR2Gvx for ; Sun, 14 Dec 2008 15:27:59 -0800 (PST) Received: from smtp121.sbc.mail.sp1.yahoo.com (smtp121.sbc.mail.sp1.yahoo.com [69.147.64.94]) by core3.amsl.com (Postfix) with SMTP id 4305B3A67F1 for ; Sun, 14 Dec 2008 15:27:59 -0800 (PST) Received: (qmail 45764 invoked from network); 14 Dec 2008 23:27:52 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp121.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 23:27:50 -0000 X-YMail-OSG: RUZM1WoVM1kxrV7PJI2gB4J.HyrApUNWp2NPA.aANL3ojIwkrWqlha4h40zmvtEFWn078Zqz2a9RA9Arq2bpur84th__mkfNhC8jMynebxceIwsFUSTGwvMxDocCQJNWPMfaV9Bf9Gzp0bXv_8_zDkiySVodbwuiZine0B0AUWFEHc4vBelj.BYNY.fbaYIUzRASFaX7ymNMN7CCnNIxrQ-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <49459674.7010707@netconfcentral.com> Date: Sun, 14 Dec 2008 15:27:48 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> <20081214.222458.257559594.mbj@tail-f.com> In-Reply-To: <20081214.222458.257559594.mbj@tail-f.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Andy Bierman wrote: >> Martin Bjorklund wrote: >>> Hi, >>> Andy Bierman wrote: >>>>> - bug fixes are to be done >>>>> - clarifications can be done >>>>> - no extensions (i.e. we are not doing a NETCONF V2) >>>> What about the 'test-only' enumeration for test-option? >>>> IMO, the WG needs some flexibility in the solution space >>>> to deal with usability problems found. It has been determined >>>> that 'test-then-set' and are somewhat worthless, >>>> and a 'test-only' mode for would have been much >>>> better in the first place. Is that a new feature or a bugfix? >>> This particular case could be handled by incrementing the minor >>> version for the :validate capability so that the URI is: >>> urn:ietf:params:netconf:capability:validate:1.1 >>> This 1.1 version is backwards compatible, but an old client will not >>> understand that, so a server that wants to support both old and new >>> clients would advertise both versions: >>> urn:ietf:params:netconf:capability:validate:1.0 >>> urn:ietf:paramFrom netconf-bounces@ietf.org Sun Dec 14 15:28:01 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B2EB3A67F1; Sun, 14 Dec 2008 15:28:01 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A0463A6804 for ; Sun, 14 Dec 2008 15:28:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.207 X-Spam-Level: X-Spam-Status: No, score=-2.207 tagged_above=-999 required=5 tests=[AWL=0.058, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1yYn6weR2Gvx for ; Sun, 14 Dec 2008 15:27:59 -0800 (PST) Received: from smtp121.sbc.mail.sp1.yahoo.com (smtp121.sbc.mail.sp1.yahoo.com [69.147.64.94]) by core3.amsl.com (Postfix) with SMTP id 4305B3A67F1 for ; Sun, 14 Dec 2008 15:27:59 -0800 (PST) Received: (qmail 45764 invoked from network); 14 Dec 2008 23:27:52 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp121.sbc.mail.sp1.yahoo.com with SMTP; 14 Dec 2008 23:27:50 -0000 X-YMail-OSG: RUZM1WoVM1kxrV7PJI2gB4J.HyrApUNWp2NPA.aANL3ojIwkrWqlha4h40zmvtEFWn078Zqz2a9RA9Arq2bpur84th__mkfNhC8jMynebxceIwsFUSTGwvMxDocCQJNWPMfaV9Bf9Gzp0bXv_8_zDkiySVodbwuiZine0B0AUWFEHc4vBelj.BYNY.fbaYIUzRASFaX7ymNMN7CCnNIxrQ-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <49459674.7010707@netconfcentral.com> Date: Sun, 14 Dec 2008 15:27:48 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> <20081214.222458.257559594.mbj@tail-f.com> In-Reply-To: <20081214.222458.257559594.mbj@tail-f.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Andy Bierman wrote: >> Martin Bjorklund wrote: >>> Hi, >>> Andy Bierman wrote: >>>>> - bug fixes are to be done >>>>> - clarifications can be done >>>>> - no extensions (i.e. we are not doing a NETCONF V2) >>>> What about the 'test-only' enumeration for test-option? >>>> IMO, the WG needs some flexibility in the solution space >>>> to deal with usability problems found. It has been determined >>>> that 'test-then-set' and are somewhat worthless, >>>> and a 'test-only' mode for would have been much >>>> better in the first place. Is that a new feature or a bugfix? >>> This particular case could be handled by incrementing the minor >>> version for the :validate capability so that the URI is: >>> urn:ietf:params:netconf:capability:validate:1.1 >>> This 1.1 version is backwards compatible, but an old client will not >>> understand that, so a server that wants to support both old and new >>> clients would advertise both versions: >>> urn:ietf:params:netconf:capability:validate:1.0 >>> urn:ietfs:netconf:capability:validate:1.1 >>> >> There are lots of ways the protocol could get changed, >> such as adding new capabilities, without bumping >> the base capability. What matters is whether the 1.0 >> client continues to work even though it does >> not know about these new capabilities. > > So is your opinion that the proposed charter text allows us to bump > the version of this (or other) capability? > > I am not as thrilled with the "base + capabilities" model as I used to be. A new capability cannot change the contract of an old capability. In theory anyways. It didn't work out that way for :xpath, but it could for other capabilities. Perhaps people are unfamiliar with the "no options" logic: A) If FOO is an optional feature, I cannot count on it being implemented on all the platforms I need to support. B) Since FOO is optional and I cannot count on it, how important is the feature anyway? C) If it's some minor knob that every platform can do without, then what is the value to me to spend any effort to implement the knob at all? D) If it's some major feature, that I cannot do without, then I must invest in some workaround (hopefully) that all platforms can support. E) If I have invest in a widely supported work-around, why should I also invest in implementing the optional way of doing the same thing (i.e., FOO). From this perspective, capabilities such as :url, :validate, :rollback-on-error, :confirmed-commit, :xpath, :interleave, or even :notifications do not seem so helpful. > /martin > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf :params:netconf:capability:validate:1.1 >>> >> There are lots of ways the protocol could get changed, >> such as adding new capabilities, without bumping >> the base capability. What matters is whether the 1.0 >> client continues to work even though it does >> not know about these new capabilities. > > So is your opinion that the proposed charter text allows us to bump > the version of this (or other) capability? > > I am not as thrilled with the "base + capabilities" model as I used to be. A new capability cannot change the contract of an old capability. In theory anyways. It didn't work out that way for :xpath, but it could for other capabilities. Perhaps people are unfamiliar with the "no options" logic: A) If FOO is an optional feature, I cannot count on it being implemented on all the platforms I need to support. B) Since FOO is optional and I cannot count on it, how important is the feature anyway? C) If it's some minor knob that every platform can do without, then what is the value to me to spend any effort to implement the knob at all? D) If it's some major feature, that I cannot do without, then I must invest in some workaround (hopefully) that all platforms can support. E) If I have invest in a widely supported work-around, why should I also invest in implementing the optional way of doing the same thing (i.e., FOO). From this perspective, capabilities such as :url, :validate, :rollback-on-error, :confirmed-commit, :xpath, :interleave, or even :notifications do not seem so helpful. > /martin > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Sun Dec 14 23:32:41 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 88BB63A67C0; Sun, 14 Dec 2008 23:32:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AC1283A67C0 for ; Sun, 14 Dec 2008 23:32:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.238 X-Spam-Level: X-Spam-Status: No, score=-2.238 tagged_above=-999 required=5 tests=[AWL=0.011, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id huqBil9Em+5e for ; Sun, 14 Dec 2008 23:32:39 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 9B4C53A657C for ; Sun, 14 Dec 2008 23:32:38 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id 3F9B6C00C0; Mon, 15 Dec 2008 08:32:31 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id j9IJwGfXW-A5; Mon, 15 Dec 2008 08:32:26 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 94959C0037; Mon, 15 Dec 2008 08:32:25 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 094C28B2748; Mon, 15 Dec 2008 08:32:25 +0100 (CET) Date: Mon, 15 Dec 2008 08:32:24 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081215073224.GB24664@elstar.local> Mail-Followup-To: Andy Bierman , Martin Bjorklund , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> <20081214.222458.257559594.mbj@tail-f.com> <49459674.7010707@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <49459674.7010707@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Sun, Dec 14, 2008 at 03:27:48PM -0800, Andy Bierman wrote: > Perhaps people are unfamiliar with the "no options" logic: [...] > From this perspective, capabilities such as :url, :validate, > :rollback-on-error, :confirmed-commit, :xpath, :interleave, > or even :notifications do not seem so helpful. There is also the other extreme where everybody claims to implement a complex standard but in reality only different subsets are supported. While I agree with you that we should not create too many little capabilities (understanding all the possible interactions alone is becoming difficult), I believe a set of well defined caFrom netconf-bounces@ietf.org Sun Dec 14 23:32:41 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 88BB63A67C0; Sun, 14 Dec 2008 23:32:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AC1283A67C0 for ; Sun, 14 Dec 2008 23:32:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.238 X-Spam-Level: X-Spam-Status: No, score=-2.238 tagged_above=-999 required=5 tests=[AWL=0.011, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id huqBil9Em+5e for ; Sun, 14 Dec 2008 23:32:39 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 9B4C53A657C for ; Sun, 14 Dec 2008 23:32:38 -0800 (PST) Received: from localhost (demetrius3.jacobs-university.de [212.201.44.48]) by hermes.jacobs-university.de (Postfix) with ESMTP id 3F9B6C00C0; Mon, 15 Dec 2008 08:32:31 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius3.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id j9IJwGfXW-A5; Mon, 15 Dec 2008 08:32:26 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 94959C0037; Mon, 15 Dec 2008 08:32:25 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 094C28B2748; Mon, 15 Dec 2008 08:32:25 +0100 (CET) Date: Mon, 15 Dec 2008 08:32:24 +0100 From: Juergen Schoenwaelder To: Andy Bierman Message-ID: <20081215073224.GB24664@elstar.local> Mail-Followup-To: Andy Bierman , Martin Bjorklund , rbonica@juniper.net, netconf@ietf.org References: <49415AE4.6070708@netconfcentral.com> <20081214.114531.134024997.mbj@tail-f.com> <49450A5F.2050401@netconfcentral.com> <20081214.222458.257559594.mbj@tail-f.com> <49459674.7010707@netconfcentral.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <49459674.7010707@netconfcentral.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Sun, Dec 14, 2008 at 03:27:48PM -0800, Andy Bierman wrote: > Perhaps people are unfamiliar with the "no options" logic: [...] > From this perspective, capabilities such as :url, :validate, > :rollback-on-error, :confirmed-commit, :xpath, :interleave, > or even :notifications do not seem so helpful. There is also the other extreme where everybody claims to implement a complex standard but in reality only different subsets are supported. While I agree with you that we should not create too many little capabilities (understanding all the possible interactions alone is becoming difficult), I believe a set of well defined capabilipabilities is not a bad thing. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ties is not a bad thing. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 01:51:37 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 94CA93A6800; Mon, 15 Dec 2008 01:51:37 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A19D3A6800 for ; Mon, 15 Dec 2008 01:51:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z40sGF681FMY for ; Mon, 15 Dec 2008 01:51:35 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id 5516C3A67B5 for ; Mon, 15 Dec 2008 01:51:34 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,223,1228089600"; d="scan'208";a="36288910" Received: from ind-dkim-1.cisco.com ([64.104.140.57]) by ind-iport-1.cisco.com with ESMTP; 15 Dec 2008 09:51:24 +0000 Received: from india-core-1.cisco.com (india-core-1.cisco.com [64.104.129.221]) by ind-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mBF9pOUM011368; Mon, 15 Dec 2008 15:21:24 +0530 Received: from xbh-blr-411.apac.cisco.com (xbh-blr-411.cisco.com [64.104.140.150]) by india-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mBF9pOYE018524; Mon, 15 Dec 2008 09:51:24 GMT Received: from xbh-hkg-411.apac.cisco.com ([64.104.123.72]) by xbh-blr-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 15:21:24 +0530 Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 17:51:23 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Mon, 15 Dec 2008 17:51:21 +0800 Message-ID: In-Reply-To: <20081212153323.GD20922@elstar.local> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] interoperability testing report Thread-Index: AclcbySxuFdIt8ASRlyFas2Aq0E5bQCKiltA References: <20081212153323.GD20922@elstar.local> From: "James Balestriere (jbalestr)" To: , X-OriginalArrivalTime: 15 Dec 2008 09:51:23.0075 (UTC) FILETIME=[B0311130:01C95E9A] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1516; t=1229334684; x=1230198684; c=relaxed/simple; s=inddkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20interoperability=20testing= 20report |Sender:=20; bh=ggo0RNEMZB5D2sIznh6NSRQbryb83cRrpQrTtkFHchQ=; b=bWwMqZ6W+P2UYv05gJgIMeOXRRFfbUdnUcUzLLXw+97aMHdHqZ6A6M+5Ur 6TfeaCbnkG7vKwjr7Ncc1t9D1SIVk7I4ogRm8P3sw5hF5rsLYLl4DX7SS07K POMDM2P5aC; Authentication-Results: ind-dkim-1; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/inddkim1002 verified; ); Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi Juergen, I am curious about the treatment of the hello (or the absence). In Section 8.1 of the RFC we see " When the NETCONF session is opened, each peer (both client and server) MUST send a element containing a list of that peer's capabilities. Each peer MUST send at least the base NETCONF capability, "urn:ietf:params:netconf:base:1.0". " The is MUST requirement. What is not clear is what needs to be done if the first message received is not a HELLO. Later in the section we are told if the is the wrong format to hang up. I seem to recall the standard once said to hangup but maybe I am recollecting an earlier draft draft. Perhaps we need to clarify the RFC in this regards ? James. -----Original Message----- From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Juergen Schoenwaelder Sent: Saturday, December 13, 2008 2:33 AM To: netconf@ietf.org Subject: [Netconf] interoperability testing report Hi, I am attaching a draft report of the interoperability tests we have done at Jacobs University. We plan to continue this work and we are of course interested to get more implementations so that we get a more complete picture. If you want to help us, please get in touch with me. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 01:51:37 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 94CA93A6800; Mon, 15 Dec 2008 01:51:37 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A19D3A6800 for ; Mon, 15 Dec 2008 01:51:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z40sGF681FMY for ; Mon, 15 Dec 2008 01:51:35 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id 5516C3A67B5 for ; Mon, 15 Dec 2008 01:51:34 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,223,1228089600"; d="scan'208";a="36288910" Received: from ind-dkim-1.cisco.com ([64.104.140.57]) by ind-iport-1.cisco.com with ESMTP; 15 Dec 2008 09:51:24 +0000 Received: from india-core-1.cisco.com (india-core-1.cisco.com [64.104.129.221]) by ind-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mBF9pOUM011368; Mon, 15 Dec 2008 15:21:24 +0530 Received: from xbh-blr-411.apac.cisco.com (xbh-blr-411.cisco.com [64.104.140.150]) by india-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mBF9pOYE018524; Mon, 15 Dec 2008 09:51:24 GMT Received: from xbh-hkg-411.apac.cisco.com ([64.104.123.72]) by xbh-blr-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 15:21:24 +0530 Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 17:51:23 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Mon, 15 Dec 2008 17:51:21 +0800 Message-ID: In-Reply-To: <20081212153323.GD20922@elstar.local> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] interoperability testing report Thread-Index: AclcbySxuFdIt8ASRlyFas2Aq0E5bQCKiltA References: <20081212153323.GD20922@elstar.local> From: "James Balestriere (jbalestr)" To: , X-OriginalArrivalTime: 15 Dec 2008 09:51:23.0075 (UTC) FILETIME=[B0311130:01C95E9A] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1516; t=1229334684; x=1230198684; c=relaxed/simple; s=inddkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20interoperability=20testing= 20report |Sender:=20; bh=ggo0RNEMZB5D2sIznh6NSRQbryb83cRrpQrTtkFHchQ=; b=bWwMqZ6W+P2UYv05gJgIMeOXRRFfbUdnUcUzLLXw+97aMHdHqZ6A6M+5Ur 6TfeaCbnkG7vKwjr7Ncc1t9D1SIVk7I4ogRm8P3sw5hF5rsLYLl4DX7SS07K POMDM2P5aC; Authentication-Results: ind-dkim-1; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/inddkim1002 verified; ); Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi Juergen, I am curious about the treatment of the hello (or the absence). In Section 8.1 of the RFC we see " When the NETCONF session is opened, each peer (both client and server) MUST send a element containing a list of that peer's capabilities. Each peer MUST send at least the base NETCONF capability, "urn:ietf:params:netconf:base:1.0". " The is MUST requirement. What is not clear is what needs to be done if the first message received is not a HELLO. Later in the section we are told if the is the wrong format to hang up. I seem to recall the standard once said to hangup but maybe I am recollecting an earlier draft draft. Perhaps we need to clarify the RFC in this regards ? James. -----Original Message----- From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Juergen Schoenwaelder Sent: Saturday, December 13, 2008 2:33 AM To: netconf@ietf.org Subject: [Netconf] interoperability testing report Hi, I am attaching a draft report of the interoperability tests we have done at Jacobs University. We plan to continue this work and we are of course interested to get more implementations so that we get a more complete picture. If you want to help us, please get in touch with me. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 02:01:25 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 322C73A6873; Mon, 15 Dec 2008 02:01:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3B9223A6873 for ; Mon, 15 Dec 2008 02:01:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.238 X-Spam-Level: X-Spam-Status: No, score=-2.238 tagged_above=-999 required=5 tests=[AWL=0.011, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UzQkqJWGeKuO for ; Mon, 15 Dec 2008 02:01:23 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 6A89E3A67B5 for ; Mon, 15 Dec 2008 02:01:23 -0800 (PST) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 6D164C0037; Mon, 15 Dec 2008 11:01:16 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id TPU3WoL376Ru; Mon, 15 Dec 2008 11:01:11 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5CAE2C001D; Mon, 15 Dec 2008 11:01:11 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id DA0EA8B2C63; Mon, 15 Dec 2008 11:01:10 +0100 (CET) Date: Mon, 15 Dec 2008 11:01:10 +0100 From: Juergen Schoenwaelder To: "James Balestriere (jbalestr)" Message-ID: <20081215100110.GA24923@elstar.local> Mail-Followup-To: "James Balestriere (jbalestr)" , netconf@ietf.org References: <20081212153323.GD20922@elstar.local> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Mon, Dec 15, 2008 at 05:51:21PM +0800, James Balestriere (jbalestr) wrote: > I am curious about the treatment of the hello (or the absence). > In Section 8.1 of the RFC we see > " > When the NETCONF session is opened, each peer > (both client and server) MUST send a element containing a > list of that peer's capabilities. Each peer MUST send at least the > base NETCONF capability, "urn:ietf:params:netconf:base:1.0". > " > The is MUST requirement. What is not clear is what needs to be > done if the first message received is not a HELLO. This is just one instance of RFC 4741 not being totally clear how errors are to be handled. Some people might say this is goodness since a server can be lenient and deal with clients not sending a message. Other people might claim that a client not sending is a fatal error. Ideally, this would be worked out. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 02:01:25 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 322C73A6873; Mon, 15 Dec 2008 02:01:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3B9223A6873 for ; Mon, 15 Dec 2008 02:01:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.238 X-Spam-Level: X-Spam-Status: No, score=-2.238 tagged_above=-999 required=5 tests=[AWL=0.011, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UzQkqJWGeKuO for ; Mon, 15 Dec 2008 02:01:23 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 6A89E3A67B5 for ; Mon, 15 Dec 2008 02:01:23 -0800 (PST) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 6D164C0037; Mon, 15 Dec 2008 11:01:16 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id TPU3WoL376Ru; Mon, 15 Dec 2008 11:01:11 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5CAE2C001D; Mon, 15 Dec 2008 11:01:11 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id DA0EA8B2C63; Mon, 15 Dec 2008 11:01:10 +0100 (CET) Date: Mon, 15 Dec 2008 11:01:10 +0100 From: Juergen Schoenwaelder To: "James Balestriere (jbalestr)" Message-ID: <20081215100110.GA24923@elstar.local> Mail-Followup-To: "James Balestriere (jbalestr)" , netconf@ietf.org References: <20081212153323.GD20922@elstar.local> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Mon, Dec 15, 2008 at 05:51:21PM +0800, James Balestriere (jbalestr) wrote: > I am curious about the treatment of the hello (or the absence). > In Section 8.1 of the RFC we see > " > When the NETCONF session is opened, each peer > (both client and server) MUST send a element containing a > list of that peer's capabilities. Each peer MUST send at least the > base NETCONF capability, "urn:ietf:params:netconf:base:1.0". > " > The is MUST requirement. What is not clear is what needs to be > done if the first message received is not a HELLO. This is just one instance of RFC 4741 not being totally clear how errors are to be handled. Some people might say this is goodness since a server can be lenient and deal with clients not sending a message. Other people might claim that a client not sending is a fatal error. Ideally, this would be worked out. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 04:04:02 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3B0763A69DF; Mon, 15 Dec 2008 04:04:02 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 41FDB3A69DF for ; Mon, 15 Dec 2008 04:04:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.209 X-Spam-Level: X-Spam-Status: No, score=-2.209 tagged_above=-999 required=5 tests=[AWL=0.056, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zpHJ5Qiuzmf9 for ; Mon, 15 Dec 2008 04:04:00 -0800 (PST) Received: from smtp122.sbc.mail.sp1.yahoo.com (smtp122.sbc.mail.sp1.yahoo.com [69.147.64.95]) by core3.amsl.com (Postfix) with SMTP id 9834E3A69DD for ; Mon, 15 Dec 2008 04:04:00 -0800 (PST) Received: (qmail 60919 invoked from network); 15 Dec 2008 12:03:53 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp122.sbc.mail.sp1.yahoo.com with SMTP; 15 Dec 2008 12:03:52 -0000 X-YMail-OSG: NU_7Un8VM1nSoTKsGYgULpbcf2Ec0JEISB6aSuR3ewX9UprXbxIFnSvt1Mct4bCDLP0QgvzwLt1C5uDdpMS1m69_Qfcel5x6q6FJO1rzfe341HaFgl6bIyARF7pizyC_HmRdj.hM1gunvyiwqIYTyzrF X-Yahoo-Newman-Property: ymail-3 Message-ID: <494647A6.6020006@netconfcentral.com> Date: Mon, 15 Dec 2008 04:03:50 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "James Balestriere (jbalestr)" , netconf@ietf.org References: <20081212153323.GD20922@elstar.local> <20081215100110.GA24923@elstar.local> In-Reply-To: <20081215100110.GA24923@elstar.local> Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Mon, Dec 15, 2008 at 05:51:21PM +0800, James Balestriere (jbalestr) wrote: > >> I am curious about the treatment of the hello (or the absence). >> In Section 8.1 of the RFC we see >> " >> When the NETCONF session is opened, each peer >> (both client and server) MUST send a element containing a >> list of that peer's capabilities. Each peer MUST send at least the >> base NETCONF capability, "urn:ietf:params:netconf:base:1.0". >> " >> The is MUST requirement. What is not clear is what needs to be >> done if the first message received is not a HELLO. > > This is just one instance of RFC 4741 not being totally clear how > errors are to be handled. Some people might say this is goodness since > a server can be lenient and deal with clients not sending a > message. Other people might claim that a client not sending is > a fatal error. Ideally, this would be worked out. > It is hard to interpret 8.1, para 3 in this way. You really have to try hard. However, the last sentence could be changed: s/both cases/all cases/ It was very clearly the intent of the WG that the MUST be sent by both peers and both peers MUST From netconf-bounces@ietf.org Mon Dec 15 04:04:02 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3B0763A69DF; Mon, 15 Dec 2008 04:04:02 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 41FDB3A69DF for ; Mon, 15 Dec 2008 04:04:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.209 X-Spam-Level: X-Spam-Status: No, score=-2.209 tagged_above=-999 required=5 tests=[AWL=0.056, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zpHJ5Qiuzmf9 for ; Mon, 15 Dec 2008 04:04:00 -0800 (PST) Received: from smtp122.sbc.mail.sp1.yahoo.com (smtp122.sbc.mail.sp1.yahoo.com [69.147.64.95]) by core3.amsl.com (Postfix) with SMTP id 9834E3A69DD for ; Mon, 15 Dec 2008 04:04:00 -0800 (PST) Received: (qmail 60919 invoked from network); 15 Dec 2008 12:03:53 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp122.sbc.mail.sp1.yahoo.com with SMTP; 15 Dec 2008 12:03:52 -0000 X-YMail-OSG: NU_7Un8VM1nSoTKsGYgULpbcf2Ec0JEISB6aSuR3ewX9UprXbxIFnSvt1Mct4bCDLP0QgvzwLt1C5uDdpMS1m69_Qfcel5x6q6FJO1rzfe341HaFgl6bIyARF7pizyC_HmRdj.hM1gunvyiwqIYTyzrF X-Yahoo-Newman-Property: ymail-3 Message-ID: <494647A6.6020006@netconfcentral.com> Date: Mon, 15 Dec 2008 04:03:50 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "James Balestriere (jbalestr)" , netconf@ietf.org References: <20081212153323.GD20922@elstar.local> <20081215100110.GA24923@elstar.local> In-Reply-To: <20081215100110.GA24923@elstar.local> Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Mon, Dec 15, 2008 at 05:51:21PM +0800, James Balestriere (jbalestr) wrote: > >> I am curious about the treatment of the hello (or the absence). >> In Section 8.1 of the RFC we see >> " >> When the NETCONF session is opened, each peer >> (both client and server) MUST send a element containing a >> list of that peer's capabilities. Each peer MUST send at least the >> base NETCONF capability, "urn:ietf:params:netconf:base:1.0". >> " >> The is MUST requirement. What is not clear is what needs to be >> done if the first message received is not a HELLO. > > This is just one instance of RFC 4741 not being totally clear how > errors are to be handled. Some people might say this is goodness since > a server can be lenient and deal with clients not sending a > message. Other people might claim that a client not sending is > a fatal error. Ideally, this would be worked out. > It is hard to interpret 8.1, para 3 in this way. You really have to try hard. However, the last sentence could be changed: s/both cases/all cases/ It was very clearly the intent of the WG that the MUST be sent by both peers and both peersaccept the others base capability. If not, the transport session MUST be terminated instead of proceeding with session setup. Phil is the one always reminding us that we need to future-proof our YANG modules, yet the whole point of the exchange MUST requirement seems to be missed by the Juniper implementation. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf MUST accept the others base capability. If not, the transport session MUST be terminated instead of proceeding with session setup. Phil is the one always reminding us that we need to future-proof our YANG modules, yet the whole point of the exchange MUST requirement seems to be missed by the Juniper implementation. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 09:30:28 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 969753A69E4; Mon, 15 Dec 2008 09:30:28 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0B90C3A67D8 for ; Mon, 15 Dec 2008 09:30:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.199 X-Spam-Level: X-Spam-Status: No, score=-6.199 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dd-Tb9bSDqlf for ; Mon, 15 Dec 2008 09:30:27 -0800 (PST) Received: from mailgw3.ericsson.se (mailgw3.ericsson.se [193.180.251.60]) by core3.amsl.com (Postfix) with ESMTP id 38A9C3A6A1E for ; Mon, 15 Dec 2008 09:30:27 -0800 (PST) Received: from mailgw3.ericsson.se (unknown [127.0.0.1]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id 4670C20997 for ; Mon, 15 Dec 2008 18:30:19 +0100 (CET) X-AuditID: c1b4fb3c-abf5abb00000304c-ad-4946942bcb27 Received: from esealmw128.eemea.ericsson.se (unknown [153.88.253.124]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id 27A9E208FA for ; Mon, 15 Dec 2008 18:30:19 +0100 (CET) Received: from esealmw126.eemea.ericsson.se ([153.88.254.170]) by esealmw128.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 18:30:18 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw126.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 18:30:18 +0100 Message-ID: <4946942A.5040805@ericsson.com> Date: Mon, 15 Dec 2008 18:30:18 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: netconf mailing list X-OriginalArrivalTime: 15 Dec 2008 17:30:18.0628 (UTC) FILETIME=[CCA90440:01C95EDA] X-Brightmail-Tracker: AAAAAA== Subject: [Netconf] get-config on X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hello, Is it possible to call get-config against a file, or even a remote file? In the XSD I see In the text there is no mention about URLs neither in chapter 7.1 nor in chapter 8.8 URL capability. I think if edit-config is allowed for URLs/local files then get-config should be as well. Anyway this should be clarified by the 4741bis. Martin, Jurgen please add it to your list. The same question is valid for lock/unlock (others?) as well. Balazs _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 09:30:28 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 969753A69E4; Mon, 15 Dec 2008 09:30:28 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0B90C3A67D8 for ; Mon, 15 Dec 2008 09:30:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.199 X-Spam-Level: X-Spam-Status: No, score=-6.199 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dd-Tb9bSDqlf for ; Mon, 15 Dec 2008 09:30:27 -0800 (PST) Received: from mailgw3.ericsson.se (mailgw3.ericsson.se [193.180.251.60]) by core3.amsl.com (Postfix) with ESMTP id 38A9C3A6A1E for ; Mon, 15 Dec 2008 09:30:27 -0800 (PST) Received: from mailgw3.ericsson.se (unknown [127.0.0.1]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id 4670C20997 for ; Mon, 15 Dec 2008 18:30:19 +0100 (CET) X-AuditID: c1b4fb3c-abf5abb00000304c-ad-4946942bcb27 Received: from esealmw128.eemea.ericsson.se (unknown [153.88.253.124]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id 27A9E208FA for ; Mon, 15 Dec 2008 18:30:19 +0100 (CET) Received: from esealmw126.eemea.ericsson.se ([153.88.254.170]) by esealmw128.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 18:30:18 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw126.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 18:30:18 +0100 Message-ID: <4946942A.5040805@ericsson.com> Date: Mon, 15 Dec 2008 18:30:18 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: netconf mailing list X-OriginalArrivalTime: 15 Dec 2008 17:30:18.0628 (UTC) FILETIME=[CCA90440:01C95EDA] X-Brightmail-Tracker: AAAAAA== Subject: [Netconf] get-config on X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hello, Is it possible to call get-config against a file, or even a remote file? In the XSD I see In the text there is no mention about URLs neither in chapter 7.1 nor in chapter 8.8 URL capability. I think if edit-config is allowed for URLs/local files then get-config should be as well. Anyway this should be clarified by the 4741bis. Martin, Jurgen please add it to your list. The same question is valid for lock/unlock (others?) as well. Balazs _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 10:41:14 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5E5123A6804; Mon, 15 Dec 2008 10:41:14 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A2C93A6804 for ; Mon, 15 Dec 2008 10:41:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.213 X-Spam-Level: X-Spam-Status: No, score=-2.213 tagged_above=-999 required=5 tests=[AWL=0.052, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GFEab6Qnq+m5 for ; Mon, 15 Dec 2008 10:41:12 -0800 (PST) Received: from smtp115.sbc.mail.sp1.yahoo.com (smtp115.sbc.mail.sp1.yahoo.com [69.147.64.88]) by core3.amsl.com (Postfix) with SMTP id A084D3A67F7 for ; Mon, 15 Dec 2008 10:41:12 -0800 (PST) Received: (qmail 75955 invoked from network); 15 Dec 2008 18:41:05 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp115.sbc.mail.sp1.yahoo.com with SMTP; 15 Dec 2008 18:41:03 -0000 X-YMail-OSG: RQe_I1UVM1kywH5zJAWhzUig4882jHrH2M8UkfoqSEQy10vhsz5PVBW2JLMEvzKEcLvy2SNBZ0n3Y9lcBjiciF3qXVQL.jYLjCTiZdtSl9J8c_IIY2ppWbnXfMtcVB3VpphiPag5FrkK4yJApD1nXqBK X-Yahoo-Newman-Property: ymail-3 Message-ID: <4946A4BD.1070900@netconfcentral.com> Date: Mon, 15 Dec 2008 10:41:01 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Balazs Lengyel References: <4946942A.5040805@ericsson.com> In-Reply-To: <4946942A.5040805@ericsson.com> Cc: netconf mailing list Subject: Re: [Netconf] get-config on X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Balazs Lengyel wrote: > Hello, > Is it possible to call get-config against a file, or even a remote file? > In the XSD I see > > > > > > > > > In the text there is no mention about URLs neither in chapter 7.1 > nor in chapter 8.8 URL capability. > > I think if edit-config is allowed for URLs/local files then get-config > should be as well. > Anyway this should be clarified by the 4741bis. Martin, Jurgen please > add it to your list. > > The same question is valid for lock/unlock (others?) as well. > This issue was discussed at length when 4741 was being written, and the WG consensus at that time was that the standard needed to be very loose about URL-based databases, and the as well. Several people strongly objected to extending the edit operation to URLs at that time. It was ignored in the document on purpose. Only the operations that have URL extensions in the XSD had WG consensus to be supported. IMO, we should focus on the 3 standard databases, but clarifications are always good. Maybe new capabilities are needed (instead of piling on :url!) > Balazs Andy ________________________From netconf-bounces@ietf.org Mon Dec 15 10:41:14 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5E5123A6804; Mon, 15 Dec 2008 10:41:14 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A2C93A6804 for ; Mon, 15 Dec 2008 10:41:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.213 X-Spam-Level: X-Spam-Status: No, score=-2.213 tagged_above=-999 required=5 tests=[AWL=0.052, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GFEab6Qnq+m5 for ; Mon, 15 Dec 2008 10:41:12 -0800 (PST) Received: from smtp115.sbc.mail.sp1.yahoo.com (smtp115.sbc.mail.sp1.yahoo.com [69.147.64.88]) by core3.amsl.com (Postfix) with SMTP id A084D3A67F7 for ; Mon, 15 Dec 2008 10:41:12 -0800 (PST) Received: (qmail 75955 invoked from network); 15 Dec 2008 18:41:05 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp115.sbc.mail.sp1.yahoo.com with SMTP; 15 Dec 2008 18:41:03 -0000 X-YMail-OSG: RQe_I1UVM1kywH5zJAWhzUig4882jHrH2M8UkfoqSEQy10vhsz5PVBW2JLMEvzKEcLvy2SNBZ0n3Y9lcBjiciF3qXVQL.jYLjCTiZdtSl9J8c_IIY2ppWbnXfMtcVB3VpphiPag5FrkK4yJApD1nXqBK X-Yahoo-Newman-Property: ymail-3 Message-ID: <4946A4BD.1070900@netconfcentral.com> Date: Mon, 15 Dec 2008 10:41:01 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Balazs Lengyel References: <4946942A.5040805@ericsson.com> In-Reply-To: <4946942A.5040805@ericsson.com> Cc: netconf mailing list Subject: Re: [Netconf] get-config on X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Balazs Lengyel wrote: > Hello, > Is it possible to call get-config against a file, or even a remote file? > In the XSD I see > > > > > > > > > In the text there is no mention about URLs neither in chapter 7.1 > nor in chapter 8.8 URL capability. > > I think if edit-config is allowed for URLs/local files then get-config > should be as well. > Anyway this should be clarified by the 4741bis. Martin, Jurgen please > add it to your list. > > The same question is valid for lock/unlock (others?) as well. > This issue was discussed at length when 4741 was being written, and the WG consensus at that time was that the standard needed to be very loose about URL-based databases, and the as well. Several people strongly objected to extending the edit operation to URLs at that time. It was ignored in the document on purpose. Only the operations that have URL extensions in the XSD had WG consensus to be supported. IMO, we should focus on the 3 standard databases, but clarifications are always good. Maybe new capabilities are needed (instead of piling on :url!) > Balazs Andy _____________________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf _________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 13:23:45 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6ADF83A6A44; Mon, 15 Dec 2008 13:23:45 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 53E693A6A44 for ; Mon, 15 Dec 2008 13:23:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 736WaYIYzSYv for ; Mon, 15 Dec 2008 13:23:43 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id 787F03A6A43 for ; Mon, 15 Dec 2008 13:23:42 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,226,1228089600"; d="scan'208";a="36324419" Received: from hkg-dkim-2.cisco.com ([10.75.231.163]) by ind-iport-1.cisco.com with ESMTP; 15 Dec 2008 21:23:26 +0000 Received: from hkg-core-1.cisco.com (hkg-core-1.cisco.com [64.104.123.94]) by hkg-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id mBFLNMOi027001; Tue, 16 Dec 2008 05:23:22 +0800 Received: from xbh-hkg-411.apac.cisco.com (xbh-hkg-411.cisco.com [64.104.123.72]) by hkg-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mBFLNL8V028931; Mon, 15 Dec 2008 21:23:21 GMT Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 05:23:21 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 16 Dec 2008 05:23:19 +0800 Message-ID: In-Reply-To: <494647A6.6020006@netconfcentral.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] interoperability testing report Thread-Index: AclerUVN4mLakyRMRWaoxiEPJKru9wASrM3w References: <20081212153323.GD20922@elstar.local> <20081215100110.GA24923@elstar.local> <494647A6.6020006@netconfcentral.com> From: "James Balestriere (jbalestr)" To: "Andy Bierman" , X-OriginalArrivalTime: 15 Dec 2008 21:23:21.0796 (UTC) FILETIME=[5B472040:01C95EFB] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2612; t=1229376202; x=1230240202; c=relaxed/simple; s=hkgdkim2001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20interoperability=20testing= 20report |Sender:=20; bh=zixwOWvVlp9jidlhzkLUxVVM18PnjNBJ7PmOBH+pLI4=; b=D0v4p471aNbtJarOlZQR9P0somWB+mWmIGwkQaakLOMyffhelagW+g8gFt zC4xrOMkzN32T3SWaCZ2rZh3+AydeHb8Kzj6cFkRfWM7lYA9cWUhF20TNOCy MrW4vkq6nEtyndgFryLeGO5JtOouJQPLCvBE+NUIoXRNPCVPLE0mc=; Authentication-Results: hkg-dkim-2; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/hkgdkim2001 verified; ); Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Yes, it is one thing to handle errors to an identified peer, but when you consider the weight of the MUST requirement, without the HELLO it is hard to determine you have connected to a NETCONF peer, let alone a client or server peer, in the first place. Then considering Andy's point where you haven't established an overlap of capabilities, What is a sensible reply to send when you don't know the capabilities and supported schemas of the peer ? When you consider the defined handling of the SESSION-ID whose intent seems to be to stop client-client and server-server peers accidentally establishing, I think it is a small inference to say if the peer does not identify it role or capabilities it should be terminated. James. -----Original Message----- From: Andy Bierman [mailto:andy@netconfcentral.com] Sent: Monday, December 15, 2008 11:04 PM To: James Balestriere (jbalestr); netconf@ietf.org Subject: Re: [Netconf] interoperability testing report Juergen Schoenwaelder wrote: > On Mon, Dec 15, 2008 at 05:51:21PM +0800, James Balestriere (jbalestr) wrote: > >> I am curious about the treatment of the hello (or the absence). >> In Section 8.1 of the RFC we see >> " >> When the NETCONF session is opened, each peer >> (both client and server) MUST send a element containing a >> list of that peer's capabilities. Each peer MUST send at least the >> base NETCONF capability, "urn:ietf:params:netconf:base:1.0". >> " >> The is MUST requirement. What is not clear is what needs to >> be done if the first message received is not a HELLO. > > This is just one instance of RFC 4741 not being totally clear how > errors are to be handled. Some people might say this is goodness since > a server can be lenient and deal with clients not sending a > message. Other people might claim that a client not sending is > a fatal error. Ideally, this would be worked out. > It is hard to interpret 8.1, para 3 in this way. You really have to try hard. However, the last sentence could be changed: s/both cases/all cases/ It was very clearly the intent of the WG that the MUST be sent by both peers and both peers MUST accept the others base capability. If not, the transport session MUST be terminated instead of proceeding with session setup. Phil is the one always reminding us that we need to future-proof our YANG modules, yet the whole point of the exchange MUST requirement seems to be missed by the Juniper implementation. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 13:23:45 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6ADF83A6A44; Mon, 15 Dec 2008 13:23:45 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 53E693A6A44 for ; Mon, 15 Dec 2008 13:23:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 736WaYIYzSYv for ; Mon, 15 Dec 2008 13:23:43 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id 787F03A6A43 for ; Mon, 15 Dec 2008 13:23:42 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,226,1228089600"; d="scan'208";a="36324419" Received: from hkg-dkim-2.cisco.com ([10.75.231.163]) by ind-iport-1.cisco.com with ESMTP; 15 Dec 2008 21:23:26 +0000 Received: from hkg-core-1.cisco.com (hkg-core-1.cisco.com [64.104.123.94]) by hkg-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id mBFLNMOi027001; Tue, 16 Dec 2008 05:23:22 +0800 Received: from xbh-hkg-411.apac.cisco.com (xbh-hkg-411.cisco.com [64.104.123.72]) by hkg-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mBFLNL8V028931; Mon, 15 Dec 2008 21:23:21 GMT Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 05:23:21 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 16 Dec 2008 05:23:19 +0800 Message-ID: In-Reply-To: <494647A6.6020006@netconfcentral.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] interoperability testing report Thread-Index: AclerUVN4mLakyRMRWaoxiEPJKru9wASrM3w References: <20081212153323.GD20922@elstar.local> <20081215100110.GA24923@elstar.local> <494647A6.6020006@netconfcentral.com> From: "James Balestriere (jbalestr)" To: "Andy Bierman" , X-OriginalArrivalTime: 15 Dec 2008 21:23:21.0796 (UTC) FILETIME=[5B472040:01C95EFB] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2612; t=1229376202; x=1230240202; c=relaxed/simple; s=hkgdkim2001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20interoperability=20testing= 20report |Sender:=20; bh=zixwOWvVlp9jidlhzkLUxVVM18PnjNBJ7PmOBH+pLI4=; b=D0v4p471aNbtJarOlZQR9P0somWB+mWmIGwkQaakLOMyffhelagW+g8gFt zC4xrOMkzN32T3SWaCZ2rZh3+AydeHb8Kzj6cFkRfWM7lYA9cWUhF20TNOCy MrW4vkq6nEtyndgFryLeGO5JtOouJQPLCvBE+NUIoXRNPCVPLE0mc=; Authentication-Results: hkg-dkim-2; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/hkgdkim2001 verified; ); Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Yes, it is one thing to handle errors to an identified peer, but when you consider the weight of the MUST requirement, without the HELLO it is hard to determine you have connected to a NETCONF peer, let alone a client or server peer, in the first place. Then considering Andy's point where you haven't established an overlap of capabilities, What is a sensible reply to send when you don't know the capabilities and supported schemas of the peer ? When you consider the defined handling of the SESSION-ID whose intent seems to be to stop client-client and server-server peers accidentally establishing, I think it is a small inference to say if the peer does not identify it role or capabilities it should be terminated. James. -----Original Message----- From: Andy Bierman [mailto:andy@netconfcentral.com] Sent: Monday, December 15, 2008 11:04 PM To: James Balestriere (jbalestr); netconf@ietf.org Subject: Re: [Netconf] interoperability testing report Juergen Schoenwaelder wrote: > On Mon, Dec 15, 2008 at 05:51:21PM +0800, James Balestriere (jbalestr) wrote: > >> I am curious about the treatment of the hello (or the absence). >> In Section 8.1 of the RFC we see >> " >> When the NETCONF session is opened, each peer >> (both client and server) MUST send a element containing a >> list of that peer's capabilities. Each peer MUST send at least the >> base NETCONF capability, "urn:ietf:params:netconf:base:1.0". >> " >> The is MUST requirement. What is not clear is what needs to >> be done if the first message received is not a HELLO. > > This is just one instance of RFC 4741 not being totally clear how > errors are to be handled. Some people might say this is goodness since > a server can be lenient and deal with clients not sending a > message. Other people might claim that a client not sending is > a fatal error. Ideally, this would be worked out. > It is hard to interpret 8.1, para 3 in this way. You really have to try hard. However, the last sentence could be changed: s/both cases/all cases/ It was very clearly the intent of the WG that the MUST be sent by both peers and both peers MUST accept the others base capability. If not, the transport session MUST be terminated instead of proceeding with session setup. Phil is the one always reminding us that we need to future-proof our YANG modules, yet the whole point of the exchange MUST requirement seems to be missed by the Juniper implementation. > /js > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 13:58:43 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 39BC03A6A41; Mon, 15 Dec 2008 13:58:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A6193A63D2 for ; Mon, 15 Dec 2008 13:58:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.215 X-Spam-Level: X-Spam-Status: No, score=-2.215 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Od2oE7HWxlds for ; Mon, 15 Dec 2008 13:58:41 -0800 (PST) Received: from smtp127.sbc.mail.sp1.yahoo.com (smtp127.sbc.mail.sp1.yahoo.com [69.147.65.186]) by core3.amsl.com (Postfix) with SMTP id 93B1D3A6810 for ; Mon, 15 Dec 2008 13:58:41 -0800 (PST) Received: (qmail 39548 invoked from network); 15 Dec 2008 21:58:34 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp127.sbc.mail.sp1.yahoo.com with SMTP; 15 Dec 2008 21:58:33 -0000 X-YMail-OSG: Rz4kopIVM1n0AOvIU9gvbDbv2fop8NQBOzvmEDOZ2w1e5PyU4l22ex67Twu2jrF.6669nugjR2iE5OMg.IxjoBmPr_EEL_.QBmqBdQAfV9Tgy94ngJwChi32QnZTKQozITHCBA2jvkNlauLNhz_sjn6j_gz45RhSiqAANbL1dQ6RbaxFVuimAdFo X-Yahoo-Newman-Property: ymail-3 Message-ID: <4946D307.6030305@netconfcentral.com> Date: Mon, 15 Dec 2008 13:58:31 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "James Balestriere (jbalestr)" References: <20081212153323.GD20922@elstar.local> <20081215100110.GA24923@elstar.local> <494647A6.6020006@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org James Balestriere (jbalestr) wrote: > Yes, it is one thing to handle errors to an identified peer, but when > you consider > the weight of the MUST requirement, without the HELLO it is hard to > determine you > have connected to a NETCONF peer, let alone a client or server peer, in > the first place. > Then considering Andy's point where you haven't established an overlap > of capabilities, > What is a sensible reply to send when you don't know the capabilities > and supported > schemas of the peer ? > > When you consider the defined handling of the SESSION-ID whose intent > seems to be to stop > client-client and server-server peers accidentally establishing, > I think it is a small inference to say if the peer does not identify it > role or capabilities > it should be terminated. > My main point was that it hard to change the protocol in the future in non-backward compatible ways if the check is skipped by the agent. We want to force an application to recognize that a down-rev protocol version is needed for some agent (agent terminates session will get its attention). This is better than letting the manager silently assume the agent supports the new version. The base capability exchange needs lots of clarification in 4741-bis. Let's say there is a new base URI someday (2.0)? Does each peer send all the versions they support, and both peers figure out which is the newest version they have in common? Does the client sent the new URI, see if it works, and if not, try again with the old one? I don't think these protocol procedures are spelled out in the current text. > James. Andy > > -----Original Message----- > From: Andy Bierman [mailto:andy@netconfcentral.com] > Sent: Monday, December 15, 2008 11:04 PM > To: James Balestriere (jbalestr); netconf@ietf.org > Subject: Re: [Netconf] interoperability testing report > > Juergen Schoenwaelder wrote: >> On Mon, Dec 15, 2008 at 05:51:21PM +0800, James Balestriere (jbalestr) > wrote: >> >>> I am curious about the treatment of the hello (or the absence). >>> In Section 8.1 of the RFC we see >>> " >>> When the NETCONF session is opened, each peer >>> (both client and server) MUST send a element containing a >>> list of that peer's capabilities. Each peer MUST send at least > the >>> base NETCONF capability, "urn:ietf:params:netconf:base:1.0". >>> " >>> The is MUST requirement. What is not clear is what needs to >>> be done if the first message received is not a HELLO. >> This is just one instance of RFC 4741 not being totally clear how >> errors are to be handled. Some people might say this is goodness since > >> a server can be lenient and deal with clients not sending a >> message. Other people might claim that a client not sending is > >> a fatal error. Ideally, this would be worked out. >> > > It is hard to interpret 8.1, para 3 in this way. > You really have to try hard. However, the last sentence could be > changed: s/both cases/all cases/ > > It was very clearly the intent of the WG that the MUST be sent > by both peers and both peers MUST accept the others base capability. If > not, the transport session MUST be terminated instead of proceeding with > session setup. > > > Phil is the one always reminding us that we need to future-proof our > YANG modules, yet the whole point of the exchange MUST > requirement seems to be missed by the Juniper implementation. > > >> /js >> > > Andy > > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 13:58:43 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 39BC03A6A41; Mon, 15 Dec 2008 13:58:43 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A6193A63D2 for ; Mon, 15 Dec 2008 13:58:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.215 X-Spam-Level: X-Spam-Status: No, score=-2.215 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Od2oE7HWxlds for ; Mon, 15 Dec 2008 13:58:41 -0800 (PST) Received: from smtp127.sbc.mail.sp1.yahoo.com (smtp127.sbc.mail.sp1.yahoo.com [69.147.65.186]) by core3.amsl.com (Postfix) with SMTP id 93B1D3A6810 for ; Mon, 15 Dec 2008 13:58:41 -0800 (PST) Received: (qmail 39548 invoked from network); 15 Dec 2008 21:58:34 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp127.sbc.mail.sp1.yahoo.com with SMTP; 15 Dec 2008 21:58:33 -0000 X-YMail-OSG: Rz4kopIVM1n0AOvIU9gvbDbv2fop8NQBOzvmEDOZ2w1e5PyU4l22ex67Twu2jrF.6669nugjR2iE5OMg.IxjoBmPr_EEL_.QBmqBdQAfV9Tgy94ngJwChi32QnZTKQozITHCBA2jvkNlauLNhz_sjn6j_gz45RhSiqAANbL1dQ6RbaxFVuimAdFo X-Yahoo-Newman-Property: ymail-3 Message-ID: <4946D307.6030305@netconfcentral.com> Date: Mon, 15 Dec 2008 13:58:31 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "James Balestriere (jbalestr)" References: <20081212153323.GD20922@elstar.local> <20081215100110.GA24923@elstar.local> <494647A6.6020006@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] interoperability testing report X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org James Balestriere (jbalestr) wrote: > Yes, it is one thing to handle errors to an identified peer, but when > you consider > the weight of the MUST requirement, without the HELLO it is hard to > determine you > have connected to a NETCONF peer, let alone a client or server peer, in > the first place. > Then considering Andy's point where you haven't established an overlap > of capabilities, > What is a sensible reply to send when you don't know the capabilities > and supported > schemas of the peer ? > > When you consider the defined handling of the SESSION-ID whose intent > seems to be to stop > client-client and server-server peers accidentally establishing, > I think it is a small inference to say if the peer does not identify it > role or capabilities > it should be terminated. > My main point was that it hard to change the protocol in the future in non-backward compatible ways if the check is skipped by the agent. We want to force an application to recognize that a down-rev protocol version is needed for some agent (agent terminates session will get its attention). This is better than letting the manager silently assume the agent supports the new version. The base capability exchange needs lots of clarification in 4741-bis. Let's say there is a new base URI someday (2.0)? Does each peer send all the versions they support, and both peers figure out which is the newest version they have in common? Does the client sent the new URI, see if it works, and if not, try again with the old one? I don't think these protocol procedures are spelled out in the current text. > James. Andy > > -----Original Message----- > From: Andy Bierman [mailto:andy@netconfcentral.com] > Sent: Monday, December 15, 2008 11:04 PM > To: James Balestriere (jbalestr); netconf@ietf.org > Subject: Re: [Netconf] interoperability testing report > > Juergen Schoenwaelder wrote: >> On Mon, Dec 15, 2008 at 05:51:21PM +0800, James Balestriere (jbalestr) > wrote: >> >>> I am curious about the treatment of the hello (or the absence). >>> In Section 8.1 of the RFC we see >>> " >>> When the NETCONF session is opened, each peer >>> (both client and server) MUST send a element containing a >>> list of that peer's capabilities. Each peer MUST send at least > the >>> base NETCONF capability, "urn:ietf:params:netconf:base:1.0". >>> " >>> The is MUST requirement. What is not clear is what needs to >>> be done if the first message received is not a HELLO. >> This is just one instance of RFC 4741 not being totally clear how >> errors are to be handled. Some people might say this is goodness since > >> a server can be lenient and deal with clients not sending a >> message. Other people might claim that a client not sending is > >> a fatal error. Ideally, this would be worked out. >> > > It is hard to interpret 8.1, para 3 in this way. > You really have to try hard. However, the last sentence could be > changed: s/both cases/all cases/ > > It was very clearly the intent of the WG that the MUST be sent > by both peers and both peers MUST accept the others base capability. If > not, the transport session MUST be terminated instead of proceeding with > session setup. > > > Phil is the one always reminding us that we need to future-proof our > YANG modules, yet the whole point of the exchange MUST > requirement seems to be missed by the Juniper implementation. > > >> /js >> > > Andy > > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 15:50:17 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DC4393A695D; Mon, 15 Dec 2008 15:50:17 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 33F573A695D for ; Mon, 15 Dec 2008 15:50:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BALYss++Zn5J for ; Mon, 15 Dec 2008 15:50:16 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id 6A4DF3A6944 for ; Mon, 15 Dec 2008 15:50:15 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,226,1228089600"; d="scan'208";a="36331210" Received: from hkg-dkim-1.cisco.com ([10.75.231.161]) by ind-iport-1.cisco.com with ESMTP; 15 Dec 2008 23:50:05 +0000 Received: from hkg-core-1.cisco.com (hkg-core-1.cisco.com [64.104.123.94]) by hkg-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mBFNo42J016522 for ; Tue, 16 Dec 2008 07:50:04 +0800 Received: from xbh-hkg-411.apac.cisco.com (xbh-hkg-411.cisco.com [64.104.123.72]) by hkg-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mBFNmwvR011071 for ; Mon, 15 Dec 2008 23:50:04 GMT Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 07:50:01 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 16 Dec 2008 07:50:01 +0800 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] handling invalid XML tag name Thread-Index: AcldKR0Ono1qe0nJRxq6ERQFRVOSWgB5IAYA References: <49315EFA.3000406@netconfcentral.com><493D5101.1020700@netconfcentral.com><20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com><49412B7B.8070809@netconfcentral.com><4941B9BA.9090906@netconfcentral.com><20081212073557.GA29041@elstar.local><494283A4.4030703@netconfcentral.com> From: "James Balestriere (jbalestr)" To: X-OriginalArrivalTime: 15 Dec 2008 23:50:01.0949 (UTC) FILETIME=[D893E8D0:01C95F0F] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1790; t=1229385005; x=1230249005; c=relaxed/simple; s=hkgdkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20handling=20invalid=20XML=20 tag=20name |Sender:=20; bh=4EP+GgBfm8cY5VDf3cFxHXB8bMajJZWuEbBtJN7Ltds=; b=b9x7FbQpNZlOyGtGVv9blyEVYDd3X1ewFTruNTH88amf+eO4Hxs5gbaqZp nMsLUPE4Ok4TvKgx05O0ABKph3/BbYx6iFgrRvu5qXJcaS038YJlBT/P/T1G L1YkX/vMy6OlCkRijPz4VXRsPxVbcECLctOon6y9Jqg1+oIutOUjc=; Authentication-Results: hkg-dkim-1; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/hkgdkim1002 verified; ); Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org So where did we get to with the ]]>]]> = Are we still looking to deprecate its usage ? James. -----Original Message----- From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf = Of Simon Leinen Sent: Sunday, December 14, 2008 12:45 AM To: Jan Lindblad Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name Jan Lindblad writes: >[quoting Andy] >>[quoting Jan] >>> And someone responds with: >>> "cool-hackertop-secret someone-else" >>> The good news is that it's very easy to fix this. [...] >> great example... >> = >> Isn't part of the responsibility on the manager? > I don't think so. The server will not be able to tell whether the = > above request is a legitimate creation of two users or a result of a = > na=EFve client being tricked. I think that the "manager" Andy is talking about is the piece of software g= enerating NETCONF requests from user input, the same thing that you call th= e "client" = So the two of you seem to be in violent agreement. For the record, I agree that this problem must be solved by educating progr= ammers on the NETCONF client (manager) side to sanitize user input, and to = provide them with the appropriate tools - viz. modern development toolkits = such as Rails making it increasingly difficult to write programs vulnerable= to SQL injection and similar attacks. We shouldn't try to solve this by making the protocol more complex, or by d= epending on a fine-grained authorization scheme nobody will use (Andy alrea= dy mentioned the SNMP VACM). -- Simon. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 15:50:17 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DC4393A695D; Mon, 15 Dec 2008 15:50:17 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 33F573A695D for ; Mon, 15 Dec 2008 15:50:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BALYss++Zn5J for ; Mon, 15 Dec 2008 15:50:16 -0800 (PST) Received: from ind-iport-1.cisco.com (ind-iport-1.cisco.com [64.104.129.195]) by core3.amsl.com (Postfix) with ESMTP id 6A4DF3A6944 for ; Mon, 15 Dec 2008 15:50:15 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,226,1228089600"; d="scan'208";a="36331210" Received: from hkg-dkim-1.cisco.com ([10.75.231.161]) by ind-iport-1.cisco.com with ESMTP; 15 Dec 2008 23:50:05 +0000 Received: from hkg-core-1.cisco.com (hkg-core-1.cisco.com [64.104.123.94]) by hkg-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mBFNo42J016522 for ; Tue, 16 Dec 2008 07:50:04 +0800 Received: from xbh-hkg-411.apac.cisco.com (xbh-hkg-411.cisco.com [64.104.123.72]) by hkg-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mBFNmwvR011071 for ; Mon, 15 Dec 2008 23:50:04 GMT Received: from xmb-hkg-411.apac.cisco.com ([64.104.123.77]) by xbh-hkg-411.apac.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 07:50:01 +0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 16 Dec 2008 07:50:01 +0800 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] handling invalid XML tag name Thread-Index: AcldKR0Ono1qe0nJRxq6ERQFRVOSWgB5IAYA References: <49315EFA.3000406@netconfcentral.com><493D5101.1020700@netconfcentral.com><20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com><49412B7B.8070809@netconfcentral.com><4941B9BA.9090906@netconfcentral.com><20081212073557.GA29041@elstar.local><494283A4.4030703@netconfcentral.com> From: "James Balestriere (jbalestr)" To: X-OriginalArrivalTime: 15 Dec 2008 23:50:01.0949 (UTC) FILETIME=[D893E8D0:01C95F0F] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1790; t=1229385005; x=1230249005; c=relaxed/simple; s=hkgdkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=jbalestr@cisco.com; z=From:=20=22James=20Balestriere=20(jbalestr)=22=20 |Subject:=20RE=3A=20[Netconf]=20handling=20invalid=20XML=20 tag=20name |Sender:=20; bh=4EP+GgBfm8cY5VDf3cFxHXB8bMajJZWuEbBtJN7Ltds=; b=b9x7FbQpNZlOyGtGVv9blyEVYDd3X1ewFTruNTH88amf+eO4Hxs5gbaqZp nMsLUPE4Ok4TvKgx05O0ABKph3/BbYx6iFgrRvu5qXJcaS038YJlBT/P/T1G L1YkX/vMy6OlCkRijPz4VXRsPxVbcECLctOon6y9Jqg1+oIutOUjc=; Authentication-Results: hkg-dkim-1; header.From=jbalestr@cisco.com; dkim=pass ( sig from cisco.com/hkgdkim1002 verified; ); Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org So where did we get to with the ]]>]]> = Are we still looking to deprecate its usage ? James. -----Original Message----- From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf = Of Simon Leinen Sent: Sunday, December 14, 2008 12:45 AM To: Jan Lindblad Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name Jan Lindblad writes: >[quoting Andy] >>[quoting Jan] >>> And someone responds with: >>> "cool-hackertop-secret someone-else" >>> The good news is that it's very easy to fix this. [...] >> great example... >> = >> Isn't part of the responsibility on the manager? > I don't think so. The server will not be able to tell whether the = > above request is a legitimate creation of two users or a result of a = > na=EFve client being tricked. I think that the "manager" Andy is talking about is the piece of software g= enerating NETCONF requests from user input, the same thing that you call th= e "client" = So the two of you seem to be in violent agreement. For the record, I agree that this problem must be solved by educating progr= ammers on the NETCONF client (manager) side to sanitize user input, and to = provide them with the appropriate tools - viz. modern development toolkits = such as Rails making it increasingly difficult to write programs vulnerable= to SQL injection and similar attacks. We shouldn't try to solve this by making the protocol more complex, or by d= epending on a fine-grained authorization scheme nobody will use (Andy alrea= dy mentioned the SNMP VACM). -- Simon. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 15 17:06:41 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 629363A6A2A; Mon, 15 Dec 2008 17:06:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 89CD63A6A2A for ; Mon, 15 Dec 2008 17:06:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.216 X-Spam-Level: X-Spam-Status: No, score=-2.216 tagged_above=-999 required=5 tests=[AWL=0.049, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GTVYSb0P8gJl for ; Mon, 15 Dec 2008 17:06:39 -0800 (PST) Received: from smtp127.sbc.mail.sp1.yahoo.com (smtp127.sbc.mail.sp1.yahoo.com [69.147.65.186]) by core3.amsl.com (Postfix) with SMTP id D509F3A6861 for ; Mon, 15 Dec 2008 17:06:39 -0800 (PST) Received: (qmail 45569 invoked from network); 16 Dec 2008 01:06:33 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp127.sbc.mail.sp1.yahoo.com with SMTP; 16 Dec 2008 01:06:31 -0000 X-YMail-OSG: cFUQqEYVM1k0wFGBFz3iRlaVeb6EMFYpO7cTlNTaHakloRxlipHxG1jSGQD04B6DLQeT6w3hJLrIP0qbgXDmjrqjXKANzhI64LLKMEvz5sUx1auSIstkUBSrkKNdUBv.kC0vNimmiUsDdaNmoJgmFzuUwsWvbSptyGnFugURNjE2SUef3ao1GFxO X-Yahoo-Newman-Property: ymail-3 Message-ID: <4946FF15.8020003@netconfcentral.com> Date: Mon, 15 Dec 2008 17:06:29 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "James Balestriere (jbalestr)" References: <49315EFA.3000406@netconfcentral.com><493D5101.1020700@netconfcentral.com><20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com><49412B7B.8070809@netconfcentral.com><4941B9BA.9090906@netconfcentral.com><20081212073557.GA29041@elstar.local><494283A4.4030703@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org James Balestriere (jbalestr) wrote: > So where did we get to with the ]]>]]> = > Are we still looking to deprecate its usage ? > = Why are we doing that? I am opposed to changing the SSH transport. I do not see any reason to do so. A note to developers in the 4741-bis about using caution, generating proper character entities, etc. should be sufficient. > James. Andy > = > -----Original Message----- > From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behal= f Of Simon Leinen > Sent: Sunday, December 14, 2008 12:45 AM > To: Jan Lindblad > Cc: netconf@ietf.org > Subject: Re: [Netconf] handling invalid XML tag naFrom netconf-bounces@ietf.org Mon Dec 15 17:06:41 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 629363A6A2A; Mon, 15 Dec 2008 17:06:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 89CD63A6A2A for ; Mon, 15 Dec 2008 17:06:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.216 X-Spam-Level: X-Spam-Status: No, score=-2.216 tagged_above=-999 required=5 tests=[AWL=0.049, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GTVYSb0P8gJl for ; Mon, 15 Dec 2008 17:06:39 -0800 (PST) Received: from smtp127.sbc.mail.sp1.yahoo.com (smtp127.sbc.mail.sp1.yahoo.com [69.147.65.186]) by core3.amsl.com (Postfix) with SMTP id D509F3A6861 for ; Mon, 15 Dec 2008 17:06:39 -0800 (PST) Received: (qmail 45569 invoked from network); 16 Dec 2008 01:06:33 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp127.sbc.mail.sp1.yahoo.com with SMTP; 16 Dec 2008 01:06:31 -0000 X-YMail-OSG: cFUQqEYVM1k0wFGBFz3iRlaVeb6EMFYpO7cTlNTaHakloRxlipHxG1jSGQD04B6DLQeT6w3hJLrIP0qbgXDmjrqjXKANzhI64LLKMEvz5sUx1auSIstkUBSrkKNdUBv.kC0vNimmiUsDdaNmoJgmFzuUwsWvbSptyGnFugURNjE2SUef3ao1GFxO X-Yahoo-Newman-Property: ymail-3 Message-ID: <4946FF15.8020003@netconfcentral.com> Date: Mon, 15 Dec 2008 17:06:29 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "James Balestriere (jbalestr)" References: <49315EFA.3000406@netconfcentral.com><493D5101.1020700@netconfcentral.com><20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com><49412B7B.8070809@netconfcentral.com><4941B9BA.9090906@netconfcentral.com><20081212073557.GA29041@elstar.local><494283A4.4030703@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] handling invalid XML tag name X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org James Balestriere (jbalestr) wrote: > So where did we get to with the ]]>]]> = > Are we still looking to deprecate its usage ? > = Why are we doing that? I am opposed to changing the SSH transport. I do not see any reason to do so. A note to developers in the 4741-bis about using caution, generating proper character entities, etc. should be sufficient. > James. Andy > = > -----Original Message----- > From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behal= f Of Simon Leinen > Sent: Sunday, December 14, 2008 12:45 AM > To: Jan Lindblad > Cc: netconf@ietf.org > Subject: Re: [Netconf] handling invalid XML tag name > =me > = > Jan Lindblad writes: >> [quoting Andy] >>> [quoting Jan] >>>> And someone responds with: >>>> "cool-hackertop-secret user> someone-else" >>>> The good news is that it's very easy to fix this. [...] > = >>> great example... >>> >>> Isn't part of the responsibility on the manager? > = >> I don't think so. The server will not be able to tell whether the = >> above request is a legitimate creation of two users or a result of a = >> na=EFve client being tricked. > = > I think that the "manager" Andy is talking about is the piece of software= generating NETCONF requests from user input, the same thing that you call = the "client" = > = > So the two of you seem to be in violent agreement. > = > For the record, I agree that this problem must be solved by educating pro= grammers on the NETCONF client (manager) side to sanitize user input, and t= o provide them with the appropriate tools - viz. modern development toolkit= s such as Rails making it increasingly difficult to write programs vulnerab= le to SQL injection and similar attacks. > = > We shouldn't try to solve this by making the protocol more complex, or by= depending on a fine-grained authorization scheme nobody will use (Andy alr= eady mentioned the SNMP VACM). > -- > Simon. > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > = > = > = _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf > Jan Lindblad writes: >> [quoting Andy] >>> [quoting Jan] >>>> And someone responds with: >>>> "cool-hackertop-secret user> someone-else" >>>> The good news is that it's very easy to fix this. [...] > = >>> great example... >>> >>> Isn't part of the responsibility on the manager? > = >> I don't think so. The server will not be able to tell whether the = >> above request is a legitimate creation of two users or a result of a = >> na=EFve client being tricked. > = > I think that the "manager" Andy is talking about is the piece of software= generating NETCONF requests from user input, the same thing that you call = the "client" = > = > So the two of you seem to be in violent agreement. > = > For the record, I agree that this problem must be solved by educating pro= grammers on the NETCONF client (manager) side to sanitize user input, and t= o provide them with the appropriate tools - viz. modern development toolkit= s such as Rails making it increasingly difficult to write programs vulnerab= le to SQL injection and similar attacks. > = > We shouldn't try to solve this by making the protocol more complex, or by= depending on a fine-grained authorization scheme nobody will use (Andy alr= eady mentioned the SNMP VACM). > -- > Simon. > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > = > = > = _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 01:20:11 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 306AF3A6840; Tue, 16 Dec 2008 01:20:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CD4173A6840 for ; Tue, 16 Dec 2008 01:20:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.49 X-Spam-Level: X-Spam-Status: No, score=0.49 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VNTwVxlA9WQe for ; Tue, 16 Dec 2008 01:20:09 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 96FC63A67AD for ; Tue, 16 Dec 2008 01:20:08 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mBG9JksM019112; Tue, 16 Dec 2008 10:19:49 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 10:19:46 +0100 Message-ID: <49477227.9000000@s3group.com> Date: Tue, 16 Dec 2008 10:17:27 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: "Ersue, Mehmet (NSN - DE/Munich)" References: In-Reply-To: X-OriginalArrivalTime: 16 Dec 2008 09:19:46.0654 (UTC) FILETIME=[703FEFE0:01C95F5F] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Tue, 16 Dec 2008 10:19:55 +0100 (CET) Cc: netconf@ietf.org, rbonica@juniper.net Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, I have a few objections regarding this text. It may mislead unfamiliar readers. Ersue, Mehmet (NSN - DE/Munich) wrote: > Dear ADs (and WG), > > The NETCONF Working Group is chartered to produce a protocol suitable > for network configuration, with the following characteristics: > > - Supports integration with existing user authentication methods How? Leaving authentication for the underlying transport protocol is a support? It rather means "We don't care how authentication is performed", however "NETCONF connection must be authenticated". > - Supports integration with existing configuration database systems How? Which existing databases? Could you give the names? There is no one word about it. > - Supports network wide configuration transactions (with features such > as locking and rollback capability) How? Telling "we give you possibility to advertise rollback-on-error capability but it's your problem to implement underlying transaction mechanism" is a support? Why NETCONF boast about locking but From netconf-bounces@ietf.org Tue Dec 16 01:20:11 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 306AF3A6840; Tue, 16 Dec 2008 01:20:11 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CD4173A6840 for ; Tue, 16 Dec 2008 01:20:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.49 X-Spam-Level: X-Spam-Status: No, score=0.49 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VNTwVxlA9WQe for ; Tue, 16 Dec 2008 01:20:09 -0800 (PST) Received: from ormo.s3group.com.pl (ormo.s3group.com.pl [212.160.116.194]) by core3.amsl.com (Postfix) with ESMTP id 96FC63A67AD for ; Tue, 16 Dec 2008 01:20:08 -0800 (PST) Received: from exwro.wroclaw.ad.s3group.com (exwro.wroclaw.s3group.com [192.168.88.33]) by ormo.s3group.com.pl with ESMTP id mBG9JksM019112; Tue, 16 Dec 2008 10:19:49 +0100 Received: from [0.0.0.0] ([192.168.88.91]) by exwro.wroclaw.ad.s3group.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 10:19:46 +0100 Message-ID: <49477227.9000000@s3group.com> Date: Tue, 16 Dec 2008 10:17:27 +0100 From: Tomasz Mikolajczyk User-Agent: Thunderbird 2.0.0.18 (X11/20081112) MIME-Version: 1.0 To: "Ersue, Mehmet (NSN - DE/Munich)" References: In-Reply-To: X-OriginalArrivalTime: 16 Dec 2008 09:19:46.0654 (UTC) FILETIME=[703FEFE0:01C95F5F] X-Scanner: InterScan AntiVirus for Sendmail X-Filter-Version: 1.11,S3-1.6 (ormo.s3group.com.pl) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ormo.s3group.com.pl [212.160.116.194]); Tue, 16 Dec 2008 10:19:55 +0100 (CET) Cc: netconf@ietf.org, rbonica@juniper.net Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Hi, I have a few objections regarding this text. It may mislead unfamiliar readers. Ersue, Mehmet (NSN - DE/Munich) wrote: > Dear ADs (and WG), > > The NETCONF Working Group is chartered to produce a protocol suitable > for network configuration, with the following characteristics: > > - Supports integration with existing user authentication methods How? Leaving authentication for the underlying transport protocol is a support? It rather means "We don't care how authentication is performed", however "NETCONF connection must be authenticated". > - Supports integration with existing configuration database systems How? Which existing databases? Could you give the names? There is no one word about it. > - Supports network wide configuration transactions (with features such > as locking and rollback capability) How? Telling "we give you possibility to advertise rollback-on-error capability but it's your problem to implement underlying transaction mechanism" is a support? Why NETCONF boast about lockindoesn't say anything about isolation or about the whole ACID properties? Maybe because isolation is the underlying transaction implementation matter. But the same as locking/unlocking. I omit fact that specified unlock operation is illogical (it was described in many my posts in the past). IMO, defining a custom capability with the operations like: - open-transaction-on-configuration - commit-configuration - rollback-configuration would be much clearer and is the same level of "support" for transactions like the existing one. Moreover, when you are able to call this operations using other protocol managers (for instance CLI) why you need NETCONF? Where is this support for transactions? I don't agree NETCONF supports them. Too big words. > In the current phase of the incremental development of NETCONF the > workgroup will focus on following items: > > 1. Fine-grain locking: The base NETCONF protocol only provides a lock > for the entire configuration datastore, which is not deemed to meet > important operational and security requirements. The NETCONF working > group will produce a standards-track RFC specifying a mechanism for > fine-grain locking of the NETCONF configuration datastore. IMO, First of all the existing unlock should be corrected before new features are introduced. > > 6. NETCONF implementations have shown that the specification in RFC4741 > is not 100% clear and has lead to different interpretations and > implementations. > Also some errors have been uncovered. So the WG will do an rfc4741bis > with > following constraints: > > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > - The work can be started based on the discussion in IETF #73 (see > http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). > What about default value of the . IMO, the default one should be "set". I explained it in my posts. Martin said that's not a bug. The question is if a mistake is a bug or not. Regards, Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf g but doesn't say anything about isolation or about the whole ACID properties? Maybe because isolation is the underlying transaction implementation matter. But the same as locking/unlocking. I omit fact that specified unlock operation is illogical (it was described in many my posts in the past). IMO, defining a custom capability with the operations like: - open-transaction-on-configuration - commit-configuration - rollback-configuration would be much clearer and is the same level of "support" for transactions like the existing one. Moreover, when you are able to call this operations using other protocol managers (for instance CLI) why you need NETCONF? Where is this support for transactions? I don't agree NETCONF supports them. Too big words. > In the current phase of the incremental development of NETCONF the > workgroup will focus on following items: > > 1. Fine-grain locking: The base NETCONF protocol only provides a lock > for the entire configuration datastore, which is not deemed to meet > important operational and security requirements. The NETCONF working > group will produce a standards-track RFC specifying a mechanism for > fine-grain locking of the NETCONF configuration datastore. IMO, First of all the existing unlock should be corrected before new features are introduced. > > 6. NETCONF implementations have shown that the specification in RFC4741 > is not 100% clear and has lead to different interpretations and > implementations. > Also some errors have been uncovered. So the WG will do an rfc4741bis > with > following constraints: > > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > - The work can be started based on the discussion in IETF #73 (see > http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). > What about default value of the . IMO, the default one should be "set". I explained it in my posts. Martin said that's not a bug. The question is if a mistake is a bug or not. Regards, Tomasz The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 02:23:53 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6385E3A6A5F; Tue, 16 Dec 2008 02:23:53 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AEAA03A6A5F for ; Tue, 16 Dec 2008 02:23:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.034 X-Spam-Level: X-Spam-Status: No, score=-0.034 tagged_above=-999 required=5 tests=[AWL=0.408, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MBdlEaIAm7e8 for ; Tue, 16 Dec 2008 02:23:51 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 175F43A67AD for ; Tue, 16 Dec 2008 02:23:50 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1LCX5a-0004jH-G7; Tue, 16 Dec 2008 11:23:42 +0100 Message-ID: <7A18C5CB0D6F47FBABA88F1958BD767D@BertLaptop> From: "Bert Wijnen \(IETF\)" To: "Tomasz Mikolajczyk" , "Ersue, Mehmet \(NSN - DE/Munich\)" References: <49477227.9000000@s3group.com> In-Reply-To: <49477227.9000000@s3group.com> Date: Tue, 16 Dec 2008 11:22:49 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0477424260==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0477424260== Content-Type: multipart/alternative; boundary="----=_NextPart_000_12A4_01C95F70.A0877EA0" This is a multi-part message in MIME format. ------=_NextPart_000_12A4_01C95F70.A0877EA0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Tomasz, can you try to get rid of your email trailer. It says that your posting is CONFIDENTIAL. AS you MUST/SHOULD know from = the NOTE WELL, there is NOTHING CONFIDENTIAL on any IETF mailing list. W.r.t. to your comments: - most of it is about already completed WG work items. We do NOT intend = to change any charter text in that space. - the piece that is about the rfc4741bis, your topic is one that can be = discussed as part of the WG deliberations on the topic. We do not have to = explicitly list all items that can/will be discussed in the WG. So I see no objections that we need to take into account. Bert ----- Original Message -----=20 From: Tomasz Mikolajczyk=20 To: Ersue, Mehmet (NSN - DE/Munich)=20 Cc: netconf@ietf.org ; rbonica@juniper.net=20 Sent: Tuesday, December 16, 2008 10:17 AM Subject: Re: [Netconf] Request for charter change Hi, I have a few objections regarding this text. It may mislead unfamiliar = readers. Ersue, Mehmet (NSN - DE/Munich) wrote: > Dear ADs (and WG), >=20 > The NETCONF Working Group is chartered to produce a protocol = suitable > for network configuration, with the following characteristics: >=20 > - Supports integration with existing user authentication methods How? Leaving authentication for the underlying transport protocol is a = support? It rather means "We don't care how authentication is performed", however "NETCONF = connection must be authenticated". > - Supports integration with existing configuration database systems How? Which existing databases? Could you give the names? There is no = one word about it. > - Supports network wide configuration transactions (with features = such > as locking and rollback capability) How? Telling "we give you possibility to advertise rollback-on-error capability but it's your problem to implement underlying transaction = mechanism" is a support? Why NETCONF boast about locking but doesn't say anything about = isolation or about the whole ACID properties? Maybe because isolation is the underlying transaction implementation = matter. But the same as locking/unlocking. I omit fact that specified unlock operation is illogical (it was = described in many my posts in the past). IMO, defining a custom capability with the operations like: - open-transaction-on-configuration - commit-configuration - rollback-configuration would be much clearer and is the same level of "support" for = transactions like the existing one. Moreover, when you are able to call this operations using other protocol managers (for instance CLI) = why you need NETCONF? Where is this support for transactions? I don't agree NETCONF supports them. Too big = words. > In the current phase of the incremental development of NETCONF the > workgroup will focus on following items: >=20 > 1. Fine-grain locking: The base NETCONF protocol only provides a = lock > for the entire configuration datastore, which is not deemed to = meet > important operational and security requirements. The NETCONF = working > group will produce a standards-track RFC specifying a mechanism = for > fine-grain locking of the NETCONF configuration datastore. IMO, First of all the existing unlock should be corrected before new = features are introduced. >=20 > 6. NETCONF implementations have shown that the specification in = RFC4741 > is not 100% clear and has lead to different interpretations and > implementations.=20 > Also some errors have been uncovered. So the WG will do an = rfc4741bis > with > following constraints: >=20 > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > - The work can be started based on the discussion in IETF #73 = (see > http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). >=20 What about default value of the . IMO, the default one = should be "set". I explained it in my posts. Martin said that's not a bug. The question is if a mistake is a bug or = not. Regards, Tomasz The information contained in this e-mail and in any attachments is = confidential and is designated solely for the attention of the intended = recipient(s). If you are not an intended recipient, you must not use, = disclose, copy, distribute or retain this e-mail or any part thereof. If = you have received this e-mail in error, please notify the sender by = return e-mail and delete all copies of this e-mail from your computer = system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------=_NextPart_000_12A4_01C95F70.A0877EA0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Tomasz, can you try to get rid of your email=20 trailer.
It says that your posting is CONFIDENTIAL. AS you = MUST/SHOULD=20 know from the
NOTE WELL, there is NOTHING CONFIDENTIAL on any IETF = mailing=20 list.
 
W.r.t. to your comments:
 
- most of it is about already completed WG work = items. We do=20 NOT intend to
  change any charter text in that = space.
- the piece that is about the rfc4741bis, your topic = is one=20 that can be discussed
  as part of the WG deliberations on the topic. = We do not=20 have to explicitly list
  all items that can/will be discussed in the=20 WG.
 
So I see no objections that we need to take into=20 account.
 
Bert
----- Original Message -----
From:=20 Tomasz Mikolajczyk =
Cc: netconf@ietf.org ; rbonica@juniper.net
Sent: Tuesday, December 16, = 2008 10:17=20 AM
Subject: Re: [Netconf] Request = for=20 charter change

Hi,

I have a few objections regarding this text. = It may=20 mislead unfamiliar readers.

Ersue, Mehmet (NSN - DE/Munich)=20 wrote:
> Dear ADs (and WG),
>
> The NETCONF Working = Group=20 is chartered to produce a protocol suitable
> for network = configuration,=20 with the following characteristics:
>
> - Supports = integration=20 with existing user authentication methods

How? Leaving = authentication=20 for the underlying transport protocol is a support? It rather = means
"We=20 don't care how authentication is performed", however "NETCONF = connection must=20 be authenticated".

> - Supports integration with existing=20 configuration database systems

How? Which existing databases? = Could you=20 give the names? There is no one word about it.

> - Supports = network=20 wide configuration transactions (with features = such
>   as=20 locking and rollback capability)

How? Telling "we give you = possibility=20 to advertise rollback-on-error
capability but it's your problem to=20 implement underlying transaction mechanism" is a support?
Why = NETCONF boast=20 about locking but doesn't say anything about isolation or about the = whole ACID=20 properties?
Maybe because isolation is the underlying transaction=20 implementation matter. But the same as locking/unlocking.
I omit = fact that=20 specified unlock operation is illogical (it was described in many my = posts in=20 the past).

IMO, defining a custom capability with the = operations=20 like:
 - open-transaction-on-configuration
 -=20 commit-configuration
 - rollback-configuration

would be = much=20 clearer and is the same level of "support" for transactions like the = existing=20 one. Moreover, when you are able to
call this operations using = other=20 protocol managers (for instance CLI) why you need NETCONF? Where is=20 this
support for transactions? I don't agree NETCONF supports them. = Too big=20 words.

> In the current phase of the incremental development = of=20 NETCONF the
> workgroup will focus on following items:
> =
>=20 1. Fine-grain locking: The base NETCONF protocol only provides a=20 lock
>    for the entire configuration datastore, = which=20 is not deemed to meet
>    important operational = and=20 security requirements. The NETCONF working
>    = group=20 will produce a standards-track RFC specifying a mechanism=20 for
>    fine-grain locking of the NETCONF = configuration=20 datastore.

IMO, First of all the existing unlock should be = corrected=20 before new features are introduced.

>
> 6. NETCONF=20 implementations have shown that the specification in=20 RFC4741
>    is not 100% clear and has lead to = different=20 interpretations and
> implementations. =
>    Also=20 some errors have been uncovered. So the WG will do an = rfc4741bis
>=20 with
>    following constraints:
>=20
>      - bug fixes are to be=20 done
>      - clarifications can be=20 done
>      - no extensions (i.e. we = are not=20 doing a NETCONF V2)
>      - The work = can be=20 started based on the discussion in IETF #73=20 (see
>         http:= //www.ietf.org/proceedings/08nov/slides/netconf-3.pdf).
>=20

What about default value of the <test-option>. IMO, the = default=20 one should be "set". I explained it in my posts.
Martin said that's = not a=20 bug. The question is if a mistake is a bug or=20 not.

Regards,
Tomasz


The information contained in = this=20 e-mail and in any attachments is confidential and is designated solely = for the=20 attention of the intended recipient(s). If you are not an intended = recipient,=20 you must not use, disclose, copy, distribute or retain this e-mail or = any part=20 thereof. If you have received this e-mail in error, please notify the = sender=20 by return e-mail and delete all copies of this e-mail from your = computer=20 system(s).
Please direct any additional queries to: communications@s3group.com= .
Thank=20 You.
_______________________________________________
Netconf = mailing=20 list
Netconf@ietf.org
https://www.ietf.o= rg/mailman/listinfo/netconf
------=_NextPart_000_12A4_01C95F70.A0877EA0-- --===============0477424260== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0477424260==-- From netconf-bounces@ietf.org Tue Dec 16 02:23:53 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6385E3A6A5F; Tue, 16 Dec 2008 02:23:53 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AEAA03A6A5F for ; Tue, 16 Dec 2008 02:23:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.034 X-Spam-Level: X-Spam-Status: No, score=-0.034 tagged_above=-999 required=5 tests=[AWL=0.408, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MBdlEaIAm7e8 for ; Tue, 16 Dec 2008 02:23:51 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id 175F43A67AD for ; Tue, 16 Dec 2008 02:23:50 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1LCX5a-0004jH-G7; Tue, 16 Dec 2008 11:23:42 +0100 Message-ID: <7A18C5CB0D6F47FBABA88F1958BD767D@BertLaptop> From: "Bert Wijnen \(IETF\)" To: "Tomasz Mikolajczyk" , "Ersue, Mehmet \(NSN - DE/Munich\)" References: <49477227.9000000@s3group.com> In-Reply-To: <49477227.9000000@s3group.com> Date: Tue, 16 Dec 2008 11:22:49 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0477424260==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0477424260== Content-Type: multipart/alternative; boundary="----=_NextPart_000_12A4_01C95F70.A0877EA0" This is a multi-part message in MIME format. ------=_NextPart_000_12A4_01C95F70.A0877EA0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Tomasz, can you try to get rid of your email trailer. It says that your posting is CONFIDENTIAL. AS you MUST/SHOULD know from = the NOTE WELL, there is NOTHING CONFIDENTIAL on any IETF mailing list. W.r.t. to your comments: - most of it is about already completed WG work items. We do NOT intend = to change any charter text in that space. - the piece that is about the rfc4741bis, your topic is one that can be = discussed as part of the WG deliberations on the topic. We do not have to = explicitly list all items that can/will be discussed in the WG. So I see no objections that we need to take into account. Bert ----- Original Message -----=20 From: Tomasz Mikolajczyk=20 To: Ersue, Mehmet (NSN - DE/Munich)=20 Cc: netconf@ietf.org ; rbonica@juniper.net=20 Sent: Tuesday, December 16, 2008 10:17 AM Subject: Re: [Netconf] Request for charter change Hi, I have a few objections regarding this text. It may mislead unfamiliar = readers. Ersue, Mehmet (NSN - DE/Munich) wrote: > Dear ADs (and WG), >=20 > The NETCONF Working Group is chartered to produce a protocol = suitable > for network configuration, with the following characteristics: >=20 > - Supports integration with existing user authentication methods How? Leaving authentication for the underlying transport protocol is a = support? It rather means "We don't care how authentication is performed", however "NETCONF = connection must be authenticated". > - Supports integration with existing configuration database systems How? Which existing databases? Could you give the names? There is no = one word about it. > - Supports network wide configuration transactions (with features = such > as locking and rollback capability) How? Telling "we give you possibility to advertise rollback-on-error capability but it's your problem to implement underlying transaction = mechanism" is a support? Why NETCONF boast about locking but doesn't say anything about = isolation or about the whole ACID properties? Maybe because isolation is the underlying transaction implementation = matter. But the same as locking/unlocking. I omit fact that specified unlock operation is illogical (it was = described in many my posts in the past). IMO, defining a custom capability with the operations like: - open-transaction-on-configuration - commit-configuration - rollback-configuration would be much clearer and is the same level of "support" for = transactions like the existing one. Moreover, when you are able to call this operations using other protocol managers (for instance CLI) = why you need NETCONF? Where is this support for transactions? I don't agree NETCONF supports them. Too big = words. > In the current phase of the incremental development of NETCONF the > workgroup will focus on following items: >=20 > 1. Fine-grain locking: The base NETCONF protocol only provides a = lock > for the entire configuration datastore, which is not deemed to = meet > important operational and security requirements. The NETCONF = working > group will produce a standards-track RFC specifying a mechanism = for > fine-grain locking of the NETCONF configuration datastore. IMO, First of all the existing unlock should be corrected before new = features are introduced. >=20 > 6. NETCONF implementations have shown that the specification in = RFC4741 > is not 100% clear and has lead to different interpretations and > implementations.=20 > Also some errors have been uncovered. So the WG will do an = rfc4741bis > with > following constraints: >=20 > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > - The work can be started based on the discussion in IETF #73 = (see > http://www.ietf.org/proceedings/08nov/slides/netconf-3.pdf). >=20 What about default value of the . IMO, the default one = should be "set". I explained it in my posts. Martin said that's not a bug. The question is if a mistake is a bug or = not. Regards, Tomasz The information contained in this e-mail and in any attachments is = confidential and is designated solely for the attention of the intended = recipient(s). If you are not an intended recipient, you must not use, = disclose, copy, distribute or retain this e-mail or any part thereof. If = you have received this e-mail in error, please notify the sender by = return e-mail and delete all copies of this e-mail from your computer = system(s). Please direct any additional queries to: communications@s3group.com. Thank You. _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------=_NextPart_000_12A4_01C95F70.A0877EA0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Tomasz, can you try to get rid of your email=20 trailer.
It says that your posting is CONFIDENTIAL. AS you = MUST/SHOULD=20 know from the
NOTE WELL, there is NOTHING CONFIDENTIAL on any IETF = mailing=20 list.
 
W.r.t. to your comments:
 
- most of it is about already completed WG work = items. We do=20 NOT intend to
  change any charter text in that = space.
- the piece that is about the rfc4741bis, your topic = is one=20 that can be discussed
  as part of the WG deliberations on the topic. = We do not=20 have to explicitly list
  all items that can/will be discussed in the=20 WG.
 
So I see no objections that we need to take into=20 account.
 
Bert
----- Original Message -----
From:=20 Tomasz Mikolajczyk =
Cc: netconf@ietf.org ; rbonica@juniper.net
Sent: Tuesday, December 16, = 2008 10:17=20 AM
Subject: Re: [Netconf] Request = for=20 charter change

Hi,

I have a few objections regarding this text. = It may=20 mislead unfamiliar readers.

Ersue, Mehmet (NSN - DE/Munich)=20 wrote:
> Dear ADs (and WG),
>
> The NETCONF Working = Group=20 is chartered to produce a protocol suitable
> for network = configuration,=20 with the following characteristics:
>
> - Supports = integration=20 with existing user authentication methods

How? Leaving = authentication=20 for the underlying transport protocol is a support? It rather = means
"We=20 don't care how authentication is performed", however "NETCONF = connection must=20 be authenticated".

> - Supports integration with existing=20 configuration database systems

How? Which existing databases? = Could you=20 give the names? There is no one word about it.

> - Supports = network=20 wide configuration transactions (with features = such
>   as=20 locking and rollback capability)

How? Telling "we give you = possibility=20 to advertise rollback-on-error
capability but it's your problem to=20 implement underlying transaction mechanism" is a support?
Why = NETCONF boast=20 about locking but doesn't say anything about isolation or about the = whole ACID=20 properties?
Maybe because isolation is the underlying transaction=20 implementation matter. But the same as locking/unlocking.
I omit = fact that=20 specified unlock operation is illogical (it was described in many my = posts in=20 the past).

IMO, defining a custom capability with the = operations=20 like:
 - open-transaction-on-configuration
 -=20 commit-configuration
 - rollback-configuration

would be = much=20 clearer and is the same level of "support" for transactions like the = existing=20 one. Moreover, when you are able to
call this operations using = other=20 protocol managers (for instance CLI) why you need NETCONF? Where is=20 this
support for transactions? I don't agree NETCONF supports them. = Too big=20 words.

> In the current phase of the incremental development = of=20 NETCONF the
> workgroup will focus on following items:
> =
>=20 1. Fine-grain locking: The base NETCONF protocol only provides a=20 lock
>    for the entire configuration datastore, = which=20 is not deemed to meet
>    important operational = and=20 security requirements. The NETCONF working
>    = group=20 will produce a standards-track RFC specifying a mechanism=20 for
>    fine-grain locking of the NETCONF = configuration=20 datastore.

IMO, First of all the existing unlock should be = corrected=20 before new features are introduced.

>
> 6. NETCONF=20 implementations have shown that the specification in=20 RFC4741
>    is not 100% clear and has lead to = different=20 interpretations and
> implementations. =
>    Also=20 some errors have been uncovered. So the WG will do an = rfc4741bis
>=20 with
>    following constraints:
>=20
>      - bug fixes are to be=20 done
>      - clarifications can be=20 done
>      - no extensions (i.e. we = are not=20 doing a NETCONF V2)
>      - The work = can be=20 started based on the discussion in IETF #73=20 (see
>         http:= //www.ietf.org/proceedings/08nov/slides/netconf-3.pdf).
>=20

What about default value of the <test-option>. IMO, the = default=20 one should be "set". I explained it in my posts.
Martin said that's = not a=20 bug. The question is if a mistake is a bug or=20 not.

Regards,
Tomasz


The information contained in = this=20 e-mail and in any attachments is confidential and is designated solely = for the=20 attention of the intended recipient(s). If you are not an intended = recipient,=20 you must not use, disclose, copy, distribute or retain this e-mail or = any part=20 thereof. If you have received this e-mail in error, please notify the = sender=20 by return e-mail and delete all copies of this e-mail from your = computer=20 system(s).
Please direct any additional queries to: communications@s3group.com= .
Thank=20 You.
_______________________________________________
Netconf = mailing=20 list
Netconf@ietf.org
https://www.ietf.o= rg/mailman/listinfo/netconf
------=_NextPart_000_12A4_01C95F70.A0877EA0-- --===============0477424260== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0477424260==-- From netconf-bounces@ietf.org Tue Dec 16 08:33:41 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 90CF63A695B; Tue, 16 Dec 2008 08:33:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B4B863A695B for ; Tue, 16 Dec 2008 08:33:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.217 X-Spam-Level: X-Spam-Status: No, score=-2.217 tagged_above=-999 required=5 tests=[AWL=0.048, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NNV9yiQqDyCD for ; Tue, 16 Dec 2008 08:33:40 -0800 (PST) Received: from smtp118.sbc.mail.sp1.yahoo.com (smtp118.sbc.mail.sp1.yahoo.com [69.147.64.91]) by core3.amsl.com (Postfix) with SMTP id 20C363A67AC for ; Tue, 16 Dec 2008 08:33:40 -0800 (PST) Received: (qmail 75560 invoked from network); 16 Dec 2008 16:33:33 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp118.sbc.mail.sp1.yahoo.com with SMTP; 16 Dec 2008 16:33:31 -0000 X-YMail-OSG: HB1M_toVM1lAHUNoikcLfabjTG7TQoFu5WLde3Oc1zTKjL69oKdujUa08gHeDyxlLtud6yXa6tjgBeFfLcdEHCOtCVLGTQfSH3P0jtARHRZUKUf3rlsNYsfe9MtTmJXNuej8yC6DkFtP44WGyv7q1LGu X-Yahoo-Newman-Property: ymail-3 Message-ID: <4947D859.9020300@netconfcentral.com> Date: Tue, 16 Dec 2008 08:33:29 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Tomasz Mikolajczyk References: <49477227.9000000@s3group.com> In-Reply-To: <49477227.9000000@s3group.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk wrote: ... > What about default value of the . IMO, the default one should be "set". I explained it in my posts. > Martin said that's not a bug. The question is if a mistake is a bug or not. > > Regards, > Tomasz > I think the test-option parameter needs a lot of work. The most useful value (test-only) is not there. Both values that are defined are unclear, and the default is wrong. The default that makes sense is target-dependent. For candidate, the default needs to be 'set'. For running, the only value can be 'test-then-set'. The value 'set' should do the same as 'test-then-set'. The manager cannot ask the agent to leave the running config in an invalid state. That's only for the candidate config. I think Martin's suggestion about a :validate.1.1 capability will work fine for test-only, because it is a pure extension, and that is what capabilities were designed to address. (Not the creeping :xpath or :url design!) Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 08:33:41 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 90CF63A695B; Tue, 16 Dec 2008 08:33:41 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B4B863A695B for ; Tue, 16 Dec 2008 08:33:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.217 X-Spam-Level: X-Spam-Status: No, score=-2.217 tagged_above=-999 required=5 tests=[AWL=0.048, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NNV9yiQqDyCD for ; Tue, 16 Dec 2008 08:33:40 -0800 (PST) Received: from smtp118.sbc.mail.sp1.yahoo.com (smtp118.sbc.mail.sp1.yahoo.com [69.147.64.91]) by core3.amsl.com (Postfix) with SMTP id 20C363A67AC for ; Tue, 16 Dec 2008 08:33:40 -0800 (PST) Received: (qmail 75560 invoked from network); 16 Dec 2008 16:33:33 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp118.sbc.mail.sp1.yahoo.com with SMTP; 16 Dec 2008 16:33:31 -0000 X-YMail-OSG: HB1M_toVM1lAHUNoikcLfabjTG7TQoFu5WLde3Oc1zTKjL69oKdujUa08gHeDyxlLtud6yXa6tjgBeFfLcdEHCOtCVLGTQfSH3P0jtARHRZUKUf3rlsNYsfe9MtTmJXNuej8yC6DkFtP44WGyv7q1LGu X-Yahoo-Newman-Property: ymail-3 Message-ID: <4947D859.9020300@netconfcentral.com> Date: Tue, 16 Dec 2008 08:33:29 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Tomasz Mikolajczyk References: <49477227.9000000@s3group.com> In-Reply-To: <49477227.9000000@s3group.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Tomasz Mikolajczyk wrote: ... > What about default value of the . IMO, the default one should be "set". I explained it in my posts. > Martin said that's not a bug. The question is if a mistake is a bug or not. > > Regards, > Tomasz > I think the test-option parameter needs a lot of work. The most useful value (test-only) is not there. Both values that are defined are unclear, and the default is wrong. The default that makes sense is target-dependent. For candidate, the default needs to be 'set'. For running, the only value can be 'test-then-set'. The value 'set' should do the same as 'test-then-set'. The manager cannot ask the agent to leave the running config in an invalid state. That's only for the candidate config. I think Martin's suggestion about a :validate.1.1 capability will work fine for test-only, because it is a pure extension, and that is what capabilities were designed to address. (Not the creeping :xpath or :url design!) Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 08:34:57 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B9C193A6A9A; Tue, 16 Dec 2008 08:34:57 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 387AD3A6A9A for ; Tue, 16 Dec 2008 08:34:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.203 X-Spam-Level: X-Spam-Status: No, score=-6.203 tagged_above=-999 required=5 tests=[AWL=0.046, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Te4Av48fji0L for ; Tue, 16 Dec 2008 08:34:55 -0800 (PST) Received: from mailgw4.ericsson.se (mailgw4.ericsson.se [193.180.251.62]) by core3.amsl.com (Postfix) with ESMTP id 34D983A695B for ; Tue, 16 Dec 2008 08:34:55 -0800 (PST) Received: from mailgw4.ericsson.se (unknown [127.0.0.1]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 8E15C213F5; Tue, 16 Dec 2008 17:34:46 +0100 (CET) X-AuditID: c1b4fb3e-ab77fbb00000537b-83-4947d42a7ac8 Received: from esealmw127.eemea.ericsson.se (unknown [153.88.253.125]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id AC3F422557; Tue, 16 Dec 2008 17:15:38 +0100 (CET) Received: from esealmw127.eemea.ericsson.se ([153.88.254.175]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 17:15:36 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 17:15:36 +0100 Message-ID: <4947D428.1050204@ericsson.com> Date: Tue, 16 Dec 2008 17:15:36 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: Andy Bierman References: <4946942A.5040805@ericsson.com> <4946A4BD.1070900@netconfcentral.com> In-Reply-To: <4946A4BD.1070900@netconfcentral.com> X-OriginalArrivalTime: 16 Dec 2008 16:15:36.0843 (UTC) FILETIME=[87B8A5B0:01C95F99] X-Brightmail-Tracker: AAAAAA== Cc: netconf mailing list Subject: Re: [Netconf] get-config on X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org The problem, again, is that the text and the XSD say different things. So the 4741bis should clarify it. Balazs Andy Bierman wrote: > Balazs Lengyel wrote: >> Hello, >> Is it possible to call get-config against a file, or even a remote >> file? In the XSD I see >> >> >> >> >> >> >> >> >> In the text there is no mention about URLs neither in chapter 7.1 >> nor in chapter 8.8 URL capability. >> >> I think if edit-config is allowed for URLs/local files then get-config >> should be as well. >> Anyway this should be clarified by the 4741bis. Martin, Jurgen please >> add it to your list. >> >> The same question is valid for lock/unlock (others?) as well. >> > > This issue was discussed at length when 4741 was being written, > and the WG consensus at that time was that the standard needed > to be very loose about URL-based databases, and the > as well. Several people strongly objected to extending > the edit operation to URLs at that time. It was ignored in > the document on purpose. Only the operations that have > URL extensions in the XSD had WG consensus to be supported. > > IMO, we should focus on the 3 standard databases, > but clarifications are always good. Maybe new > capabilities are needed (instead of piling on :url!) > > >> Balazs > > Andy > > -- Balazs Lengyel Ericsson Hungary Ltd. TSP System Manager ECN: 831 7320 Fax: +36 1 4377792 Tel: +36-1-437-7320 email: Balazs.Lengyel@ericsson.com _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 08:34:57 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B9C193A6A9A; Tue, 16 Dec 2008 08:34:57 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 387AD3A6A9A for ; Tue, 16 Dec 2008 08:34:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.203 X-Spam-Level: X-Spam-Status: No, score=-6.203 tagged_above=-999 required=5 tests=[AWL=0.046, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Te4Av48fji0L for ; Tue, 16 Dec 2008 08:34:55 -0800 (PST) Received: from mailgw4.ericsson.se (mailgw4.ericsson.se [193.180.251.62]) by core3.amsl.com (Postfix) with ESMTP id 34D983A695B for ; Tue, 16 Dec 2008 08:34:55 -0800 (PST) Received: from mailgw4.ericsson.se (unknown [127.0.0.1]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 8E15C213F5; Tue, 16 Dec 2008 17:34:46 +0100 (CET) X-AuditID: c1b4fb3e-ab77fbb00000537b-83-4947d42a7ac8 Received: from esealmw127.eemea.ericsson.se (unknown [153.88.253.125]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id AC3F422557; Tue, 16 Dec 2008 17:15:38 +0100 (CET) Received: from esealmw127.eemea.ericsson.se ([153.88.254.175]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 17:15:36 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Tue, 16 Dec 2008 17:15:36 +0100 Message-ID: <4947D428.1050204@ericsson.com> Date: Tue, 16 Dec 2008 17:15:36 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: Andy Bierman References: <4946942A.5040805@ericsson.com> <4946A4BD.1070900@netconfcentral.com> In-Reply-To: <4946A4BD.1070900@netconfcentral.com> X-OriginalArrivalTime: 16 Dec 2008 16:15:36.0843 (UTC) FILETIME=[87B8A5B0:01C95F99] X-Brightmail-Tracker: AAAAAA== Cc: netconf mailing list Subject: Re: [Netconf] get-config on X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org The problem, again, is that the text and the XSD say different things. So the 4741bis should clarify it. Balazs Andy Bierman wrote: > Balazs Lengyel wrote: >> Hello, >> Is it possible to call get-config against a file, or even a remote >> file? In the XSD I see >> >> >> >> >> >> >> >> >> In the text there is no mention about URLs neither in chapter 7.1 >> nor in chapter 8.8 URL capability. >> >> I think if edit-config is allowed for URLs/local files then get-config >> should be as well. >> Anyway this should be clarified by the 4741bis. Martin, Jurgen please >> add it to your list. >> >> The same question is valid for lock/unlock (others?) as well. >> > > This issue was discussed at length when 4741 was being written, > and the WG consensus at that time was that the standard needed > to be very loose about URL-based databases, and the > as well. Several people strongly objected to extending > the edit operation to URLs at that time. It was ignored in > the document on purpose. Only the operations that have > URL extensions in the XSD had WG consensus to be supported. > > IMO, we should focus on the 3 standard databases, > but clarifications are always good. Maybe new > capabilities are needed (instead of piling on :url!) > > >> Balazs > > Andy > > -- Balazs Lengyel Ericsson Hungary Ltd. TSP System Manager ECN: 831 7320 Fax: +36 1 4377792 Tel: +36-1-437-7320 email: Balazs.Lengyel@ericsson.com _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 09:26:25 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B94B3A6A9C; Tue, 16 Dec 2008 09:26:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 118723A6AA1 for ; Tue, 16 Dec 2008 09:26:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.028 X-Spam-Level: X-Spam-Status: No, score=-2.028 tagged_above=-999 required=5 tests=[AWL=0.018, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xbOAPtPcTCgh for ; Tue, 16 Dec 2008 09:26:23 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 4D0D73A69AF for ; Tue, 16 Dec 2008 09:26:23 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id 60B9F76C535; Tue, 16 Dec 2008 18:26:15 +0100 (CET) Date: Tue, 16 Dec 2008 18:26:09 +0100 (CET) Message-Id: <20081216.182609.197852496.mbj@tail-f.com> To: andy@netconfcentral.com From: Martin Bjorklund In-Reply-To: <4947D859.9020300@netconfcentral.com> References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy Bierman wrote: > I think Martin's suggestion about a :validate.1.1 capability > will work fine for test-only, because it is a pure extension, So maybe the proposed charter text: - no extensions (i.e. we are not doing a NETCONF V2) can be changed to "extensions can be done only when needed to fix bugs or inconsistencies" or something similar. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 09:26:25 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B94B3A6A9C; Tue, 16 Dec 2008 09:26:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 118723A6AA1 for ; Tue, 16 Dec 2008 09:26:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.028 X-Spam-Level: X-Spam-Status: No, score=-2.028 tagged_above=-999 required=5 tests=[AWL=0.018, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xbOAPtPcTCgh for ; Tue, 16 Dec 2008 09:26:23 -0800 (PST) Received: from mail.tail-f.com (de-0316.d.ipeer.se [213.180.79.212]) by core3.amsl.com (Postfix) with ESMTP id 4D0D73A69AF for ; Tue, 16 Dec 2008 09:26:23 -0800 (PST) Received: from localhost (c213-100-167-236.swipnet.se [213.100.167.236]) by mail.tail-f.com (Postfix) with ESMTPSA id 60B9F76C535; Tue, 16 Dec 2008 18:26:15 +0100 (CET) Date: Tue, 16 Dec 2008 18:26:09 +0100 (CET) Message-Id: <20081216.182609.197852496.mbj@tail-f.com> To: andy@netconfcentral.com From: Martin Bjorklund In-Reply-To: <4947D859.9020300@netconfcentral.com> References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com> X-Mailer: Mew version 6.0.51 on Emacs 22.2 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Andy Bierman wrote: > I think Martin's suggestion about a :validate.1.1 capability > will work fine for test-only, because it is a pure extension, So maybe the proposed charter text: - no extensions (i.e. we are not doing a NETCONF V2) can be changed to "extensions can be done only when needed to fix bugs or inconsistencies" or something similar. /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 09:39:37 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AAB693A6AB7; Tue, 16 Dec 2008 09:39:37 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 814C83A6AB0 for ; Tue, 16 Dec 2008 09:39:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.22 X-Spam-Level: X-Spam-Status: No, score=-2.22 tagged_above=-999 required=5 tests=[AWL=0.045, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ys85tM42O-gZ for ; Tue, 16 Dec 2008 09:39:35 -0800 (PST) Received: from smtp121.sbc.mail.sp1.yahoo.com (smtp121.sbc.mail.sp1.yahoo.com [69.147.64.94]) by core3.amsl.com (Postfix) with SMTP id BB4563A69AF for ; Tue, 16 Dec 2008 09:39:35 -0800 (PST) Received: (qmail 32986 invoked from network); 16 Dec 2008 17:39:27 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp121.sbc.mail.sp1.yahoo.com with SMTP; 16 Dec 2008 17:39:26 -0000 X-YMail-OSG: py.iFnkVM1lJLclAs89UgaCAUXzrjOnsqyiDjFrd52hFW89MOaMcEgb5h6xNt1yJoDpRl9yHnXDDQP.upZgIJ7yr7eBMxsbQHHlIOSb0awTrEvJLlNzAJbFY6X6rLBqbJeLxfur_T.lnI.JPRz4wdOzcY3gqlzo4Sbgz.TvCejk9DTJRDGEDloe5vH3ENYbWIZmKO1wxtK_T2G4ZCXOTVw-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <4947E7CC.9070700@netconfcentral.com> Date: Tue, 16 Dec 2008 09:39:24 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com> <20081216.182609.197852496.mbj@tail-f.com> In-Reply-To: <20081216.182609.197852496.mbj@tail-f.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Andy Bierman wrote: >> I think Martin's suggestion about a :validate.1.1 capability >> will work fine for test-only, because it is a pure extension, > > So maybe the proposed charter text: > > - no extensions (i.e. we are not doing a NETCONF V2) > > can be changed to "extensions can be done only when needed to fix bugs > or inconsistencies" or something similar. > > That would make me very happy. I want to address real interoperability issues, even if that means changing 1.0 in a non-backward compatible way. You reminded me that we have lots of capabilities besides the base capability that can be incremented. Of course, the default is not to add or change anything, and there are very few actual changes actually proposed. > /martin > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 09:39:37 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AAB693A6AB7; Tue, 16 Dec 2008 09:39:37 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 814C83A6AB0 for ; Tue, 16 Dec 2008 09:39:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.22 X-Spam-Level: X-Spam-Status: No, score=-2.22 tagged_above=-999 required=5 tests=[AWL=0.045, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ys85tM42O-gZ for ; Tue, 16 Dec 2008 09:39:35 -0800 (PST) Received: from smtp121.sbc.mail.sp1.yahoo.com (smtp121.sbc.mail.sp1.yahoo.com [69.147.64.94]) by core3.amsl.com (Postfix) with SMTP id BB4563A69AF for ; Tue, 16 Dec 2008 09:39:35 -0800 (PST) Received: (qmail 32986 invoked from network); 16 Dec 2008 17:39:27 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@67.127.172.8 with plain) by smtp121.sbc.mail.sp1.yahoo.com with SMTP; 16 Dec 2008 17:39:26 -0000 X-YMail-OSG: py.iFnkVM1lJLclAs89UgaCAUXzrjOnsqyiDjFrd52hFW89MOaMcEgb5h6xNt1yJoDpRl9yHnXDDQP.upZgIJ7yr7eBMxsbQHHlIOSb0awTrEvJLlNzAJbFY6X6rLBqbJeLxfur_T.lnI.JPRz4wdOzcY3gqlzo4Sbgz.TvCejk9DTJRDGEDloe5vH3ENYbWIZmKO1wxtK_T2G4ZCXOTVw-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <4947E7CC.9070700@netconfcentral.com> Date: Tue, 16 Dec 2008 09:39:24 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Martin Bjorklund References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com> <20081216.182609.197852496.mbj@tail-f.com> In-Reply-To: <20081216.182609.197852496.mbj@tail-f.com> Cc: rbonica@juniper.net, netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Martin Bjorklund wrote: > Andy Bierman wrote: >> I think Martin's suggestion about a :validate.1.1 capability >> will work fine for test-only, because it is a pure extension, > > So maybe the proposed charter text: > > - no extensions (i.e. we are not doing a NETCONF V2) > > can be changed to "extensions can be done only when needed to fix bugs > or inconsistencies" or something similar. > > That would make me very happy. I want to address real interoperability issues, even if that means changing 1.0 in a non-backward compatible way. You reminded me that we have lots of capabilities besides the base capability that can be incremented. Of course, the default is not to add or change anything, and there are very few actual changes actually proposed. > /martin > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 13:53:01 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C4DEA28C1A7; Tue, 16 Dec 2008 13:53:01 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC80E28C1A7 for ; Tue, 16 Dec 2008 13:53:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.85 X-Spam-Level: X-Spam-Status: No, score=-4.85 tagged_above=-999 required=5 tests=[AWL=1.749, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7FFn5f3ClSUT for ; Tue, 16 Dec 2008 13:52:59 -0800 (PST) Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [217.115.75.233]) by core3.amsl.com (Postfix) with ESMTP id 8359728C19D for ; Tue, 16 Dec 2008 13:52:59 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id mBGLqor3029488 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 16 Dec 2008 22:52:50 +0100 Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id mBGLqnJA025991; Tue, 16 Dec 2008 22:52:49 +0100 Received: from DEMUEXC005.nsn-intra.net ([10.150.128.17]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 16 Dec 2008 22:52:49 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 16 Dec 2008 22:52:44 +0100 Message-ID: In-Reply-To: <4947E7CC.9070700@netconfcentral.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] Request for charter change Thread-Index: AclfpUoRmt8ZOqYXTvyxEHcYC2QumwAIxO8Q References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com> <4947E7CC.9070700@netconfcentral.com> From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Andy Bierman" , "Martin Bjorklund" X-OriginalArrivalTime: 16 Dec 2008 21:52:49.0359 (UTC) FILETIME=[A33D95F0:01C95FC8] Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org > Martin Bjorklund wrote: > > Andy Bierman wrote: > >> I think Martin's suggestion about a :validate.1.1 capability > >> will work fine for test-only, because it is a pure extension, > > > > So maybe the proposed charter text: > > > > - no extensions (i.e. we are not doing a NETCONF V2) > > > > can be changed to "extensions can be done only when needed > to fix bugs > > or inconsistencies" or something similar. > > > > > > That would make me very happy. > I want to address real interoperability issues, even if > that means changing 1.0 in a non-backward compatible way. Whether chanFrom netconf-bounces@ietf.org Tue Dec 16 13:53:01 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C4DEA28C1A7; Tue, 16 Dec 2008 13:53:01 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC80E28C1A7 for ; Tue, 16 Dec 2008 13:53:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.85 X-Spam-Level: X-Spam-Status: No, score=-4.85 tagged_above=-999 required=5 tests=[AWL=1.749, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7FFn5f3ClSUT for ; Tue, 16 Dec 2008 13:52:59 -0800 (PST) Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [217.115.75.233]) by core3.amsl.com (Postfix) with ESMTP id 8359728C19D for ; Tue, 16 Dec 2008 13:52:59 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id mBGLqor3029488 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 16 Dec 2008 22:52:50 +0100 Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id mBGLqnJA025991; Tue, 16 Dec 2008 22:52:49 +0100 Received: from DEMUEXC005.nsn-intra.net ([10.150.128.17]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Tue, 16 Dec 2008 22:52:49 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 16 Dec 2008 22:52:44 +0100 Message-ID: In-Reply-To: <4947E7CC.9070700@netconfcentral.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] Request for charter change Thread-Index: AclfpUoRmt8ZOqYXTvyxEHcYC2QumwAIxO8Q References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com> <4947E7CC.9070700@netconfcentral.com> From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Andy Bierman" , "Martin Bjorklund" X-OriginalArrivalTime: 16 Dec 2008 21:52:49.0359 (UTC) FILETIME=[A33D95F0:01C95FC8] Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org > Martin Bjorklund wrote: > > Andy Bierman wrote: > >> I think Martin's suggestion about a :validate.1.1 capability > >> will work fine for test-only, because it is a pure extension, > > > > So maybe the proposed charter text: > > > > - no extensions (i.e. we are not doing a NETCONF V2) > > > > can be changed to "extensions can be done only when needed > to fix bugs > > or inconsistencies" or something similar. > > > > > > That would make me very happy. > I want to address real interoperability issues, even if > that means changing 1.0 in a non-backward compatible way. Whetheging 1.0 in a non-backward compatible way is really needed has to be discussed and decided by the WG. This is not excluded by the proposed charter text. Current charter text proposal says: - bug fixes are to be done - clarifications can be done - no extensions (i.e. we are not doing a NETCONF V2) The bullets above include IMO also fixing inconsistencies. How about changing the third bullet above to: - extensions can be done only when needed to fix bugs or inconsistencies (i.e. we are not doing a NETCONF V2) With this text the WG needs to discuss to find out which extensions are fixes to inconsistencies and do not produce a NETCONF V2. Mehmet > You reminded me that we have lots of capabilities besides > the base capability that can be incremented. > > Of course, the default is not to add or change anything, > and there are very few actual changes actually proposed. > > > > /martin > > > > > > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf r changing 1.0 in a non-backward compatible way is really needed has to be discussed and decided by the WG. This is not excluded by the proposed charter text. Current charter text proposal says: - bug fixes are to be done - clarifications can be done - no extensions (i.e. we are not doing a NETCONF V2) The bullets above include IMO also fixing inconsistencies. How about changing the third bullet above to: - extensions can be done only when needed to fix bugs or inconsistencies (i.e. we are not doing a NETCONF V2) With this text the WG needs to discuss to find out which extensions are fixes to inconsistencies and do not produce a NETCONF V2. Mehmet > You reminded me that we have lots of capabilities besides > the base capability that can be incremented. > > Of course, the default is not to add or change anything, > and there are very few actual changes actually proposed. > > > > /martin > > > > > > > > Andy _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 16 15:32:06 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 07BFE3A68E0; Tue, 16 Dec 2008 15:32:06 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3878028C1C3 for ; Tue, 16 Dec 2008 15:32:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.141 X-Spam-Level: X-Spam-Status: No, score=-5.141 tagged_above=-999 required=5 tests=[AWL=1.457, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q25gXzxpVkCJ for ; Tue, 16 Dec 2008 15:31:59 -0800 (PST) Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [217.115.75.233]) by core3.amsl.com (Postfix) with ESMTP id E5CAC3A68A9 for ; Tue, 16 Dec 2008 15:31:53 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id mBGNVhLG018640 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 17 Dec 2008 00:31:43 +0100 Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id mBGNVevC008131; Wed, 17 Dec 2008 00:31:42 +0100 Received: from DEMUEXC005.nsn-intra.net ([10.150.128.17]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Wed, 17 Dec 2008 00:31:40 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C95FD6.705C79DE" Date: Wed, 17 Dec 2008 00:31:35 +0100 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Approval of NETCONF Charter Update WAS:RE: Request for charter change Thread-Index: AclbdHZf/bbsfx3rRWKprcOcWgquqgAAfHCQAA4llOAAAVA50AAs1ErwADaiqvAApMv7EA== References: From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Romascanu, Dan (Dan)" , X-OriginalArrivalTime: 16 Dec 2008 23:31:40.0484 (UTC) FILETIME=[72777040:01C95FD6] Cc: netconf@ietf.org Subject: [Netconf] Approval of NETCONF Charter Update WAS:RE: Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C95FD6.705C79DE Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Dan, Ron, we think we have WG consensus now for the updated=20 charter text.=20 We would like to ask you to bring it to the IESG telechat=20 on 12/18. Thanks. Bert & Mehmet ------_=_NextPart_001_01C95FD6.705C79DE Content-Type: text/plain; name="081216-NETCONF-Charter.txt" Content-Transfer-Encoding: base64 Content-Description: 081216-NETCONF-Charter.txt Content-Disposition: attachment; filename="081216-NETCONF-Charter.txt" TGFzdCBNb2RpZmllZDogMjAwOC0xMi0xNg0KDQpBZGRpdGlvbmFsIGluZm9ybWF0aW9uIGlzIGF2 YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy93Zy9uZXRjb25mDQoNCkNoYWlyKHMpOg0KQmVydCBX aWpuZW4gPGJlcnRpZXRmQGJ3aWpuZW4ubmV0Pg0KTWVobWV0IEVyc3VlIDxtZWhtZXQuZXJzdWVA bnNuLmNvbT4NCg0KDQpPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IEFyZWEgRGlyZWN0b3Iocyk6 DQpEYW4gUm9tYXNjYW51IDxkcm9tYXNjYUBhdmF5YS5jb20+DQpSb25hbGQgQm9uaWNhIDxyYm9u aWNhQGp1bmlwZXIubmV0Pg0KDQpPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IEFyZWEgQWR2aXNv cjoNCkRhbiBSb21hc2NhbnUgPGRyb21hc2NhQGF2YXlhLmNvbT4NCg0KVGVjaG5pY2FsIEFkdmlz b3Iocyk6DQpDaGFybGllIEthdWZtYW4gPGNoYXJsaWVrQG1pY3Jvc29mdC5jb20+DQoNCk1haWxp bmcgTGlzdHM6DQpHZW5lcmFsIERpc2N1c3Npb246IG5ldGNvbmZAaWV0Zi5vcmcNClRvIFN1YnNj cmliZTogbmV0Y29uZi1yZXF1ZXN0QGlldGYub3JnDQpJbiBCb2R5OiBpbiBtc2cgYm9keTogc3Vi c2NyaWJlDQpBcmNoaXZlOiBodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvbmV0 Y29uZi8NCg0KRGVzY3JpcHRpb24gb2YgV29ya2luZyBHcm91cDoNCkNoYXJsaWUgS2F1Zm1hbiBp cyBUZWNobmljYWwgQWR2aXNvciBmb3IgU2VjdXJpdHkgTWF0dGVycw0KDQpDb25maWd1cmF0aW9u IG9mIG5ldHdvcmtzIG9mIGRldmljZXMgaGFzIGJlY29tZSBhIGNyaXRpY2FsIHJlcXVpcmVtZW50 DQpmb3Igb3BlcmF0b3JzIGluIHRvZGF5J3MgaGlnaGx5IGludGVyb3BlcmFibGUgbmV0d29ya3Mu IE9wZXJhdG9ycyBmcm9tDQpsYXJnZSB0byBzbWFsbCBoYXZlIGRldmVsb3BlZCB0aGVpciBvd24g bWVjaGFuaXNtcyBvciB1c2VkIHZlbmRvcg0Kc3BlY2lmaWMgbWVjaGFuaXNtcyB0byB0cmFuc2Zl ciBjb25maWd1cmF0aW9uIGRhdGEgdG8gYW5kIGZyb20gYQ0KZGV2aWNlLCBhbmQgZm9yIGV4YW1p bmluZyBkZXZpY2Ugc3RhdGUgaW5mb3JtYXRpb24gd2hpY2ggbWF5IGltcGFjdA0KdGhlIGNvbmZp Z3VyYXRpb24uIEVhY2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBtYXkgYmUgZGlmZmVyZW50IGluDQp2 YXJpb3VzIGFzcGVjdHMsIHN1Y2ggYXMgc2Vzc2lvbiBlc3RhYmxpc2htZW50LCB1c2VyIGF1dGhl bnRpY2F0aW9uLA0KY29uZmlndXJhdGlvbiBkYXRhIGV4Y2hhbmdlLCBhbmQgZXJyb3IgcmVzcG9u c2VzLg0KDQpUaGUgTkVUQ09ORiBXb3JraW5nIEdyb3VwIGlzIGNoYXJ0ZXJlZCB0byBwcm9kdWNl IGEgcHJvdG9jb2wgc3VpdGFibGUNCmZvciBuZXR3b3JrIGNvbmZpZ3VyYXRpb24sIHdpdGggdGhl IGZvbGxvd2luZyBjaGFyYWN0ZXJpc3RpY3M6DQoNCi0gUHJvdmlkZXMgcmV0cmlldmFsIG1lY2hh bmlzbXMgd2hpY2ggY2FuIGRpZmZlcmVudGlhdGUgYmV0d2Vlbg0KICBjb25maWd1cmF0aW9uIGRh dGEgYW5kIG5vbi1jb25maWd1cmF0aW9uIGRhdGENCi0gSXMgZXh0ZW5zaWJsZSBlbm91Z2ggc28g dGhhdCB2ZW5kb3JzIHdpbGwgcHJvdmlkZSBhY2Nlc3MgdG8gYWxsDQogIGNvbmZpZ3VyYXRpb24g ZGF0YSBvbiB0aGUgZGV2aWNlIHVzaW5nIGEgc2luZ2xlIHByb3RvY29sDQotIEhhcyBhIHByb2dy YW1tYXRpYyBpbnRlcmZhY2UgKGF2b2lkcyBzY3JlZW4gc2NyYXBpbmcgYW5kDQogIGZvcm1hdHRp bmctcmVsYXRlZCBjaGFuZ2VzIGJldHdlZW4gcmVsZWFzZXMpDQotIFVzZXMgYSB0ZXh0dWFsIGRh dGEgcmVwcmVzZW50YXRpb24sIHRoYXQgY2FuIGJlIGVhc2lseSBtYW5pcHVsYXRlZA0KICB1c2lu ZyBub24tc3BlY2lhbGl6ZWQgdGV4dCBtYW5pcHVsYXRpb24gdG9vbHMuDQotIFN1cHBvcnRzIGlu dGVncmF0aW9uIHdpdGggZXhpc3RpbmcgdXNlciBhdXRoZW50aWNhdGlvbiBtZXRob2RzDQotIFN1 cHBvcnRzIGludGVncmF0aW9uIHdpdGggZXhpc3RpbmcgY29uZmlndXJhdGlvbiBkYXRhYmFzZSBz eXN0ZW1zDQotIFN1cHBvcnRzIG5ldHdvcmsgd2lkZSBjb25maWd1cmF0aW9uIHRyYW5zYWN0aW9u cyAod2l0aCBmZWF0dXJlcyBzdWNoDQogIGFzIGxvY2tpbmcgYW5kIHJvbGxiYWNrIGNhcGFiaWxp dHkpDQotIElzIGFzIHRyYW5zcG9ydC1pbmRlcGVuZGVudCBhcyBwb3NzaWJsZQ0KLSBQcm92aWRl cyBzdXBwb3J0IGZvciBhc3luY2hyb25vdXMgbm90aWZpY2F0aW9ucy4NCg0KVGhlIE5FVENPTkYg cHJvdG9jb2wgaXMgdXNpbmcgWE1MIGZvciBkYXRhIGVuY29kaW5nIHB1cnBvc2VzLCBiZWNhdXNl DQpYTUwgaXMgYSB3aWRlbHkgZGVwbG95ZWQgc3RhbmRhcmQgd2hpY2ggaXMgc3VwcG9ydGVkIGJ5 IGEgbGFyZ2UgbnVtYmVyDQpvZiBhcHBsaWNhdGlvbnMuDQoNClRoZSBORVRDT05GIHByb3RvY29s IHNob3VsZCBiZSBpbmRlcGVuZGVudCBvZiB0aGUgZGF0YSBkZWZpbml0aW9uDQpsYW5ndWFnZSBh bmQgZGF0YSBtb2RlbHMgdXNlZCB0byBkZXNjcmliZSBjb25maWd1cmF0aW9uIGFuZCBzdGF0ZQ0K ZGF0YS4NCg0KSG93ZXZlciwgdGhlIGF1dGhvcml6YXRpb24gbW9kZWwgdXNlZCBpbiB0aGUgcHJv dG9jb2wgaXMgZGVwZW5kZW50IG9uDQp0aGUgZGF0YSBtb2RlbC4gQWx0aG91Z2ggdGhlc2UgaXNz dWVzIG11c3QgYmUgZnVsbHkgYWRkcmVzc2VkIHRvDQpkZXZlbG9wIHN0YW5kYXJkIGRhdGEgbW9k ZWxzLCBvbmx5IGEgc21hbGwgcGFydCBvZiB0aGlzIHdvcmsgd2lsbCBiZQ0KaW5pdGlhbGx5IGFk ZHJlc3NlZC4gVGhpcyBncm91cCB3aWxsIHNwZWNpZnkgcmVxdWlyZW1lbnRzIGZvciBzdGFuZGFy ZA0KZGF0YSBtb2RlbHMgaW4gb3JkZXIgdG8gZnVsbHkgc3VwcG9ydCB0aGUgTkVUQ09ORiBwcm90 b2NvbCwgc3VjaCBhczoNCg0KLSBpZGVudGlmaWNhdGlvbiBvZiBwcmluY2lwYWxzLCBzdWNoIGFz IHVzZXIgbmFtZXMgb3IgZGlzdGluZ3Vpc2hlZCBuYW1lcw0KLSBtZWNoYW5pc20gdG8gZGlzdGlu Z3Vpc2ggY29uZmlndXJhdGlvbiBmcm9tIG5vbi1jb25maWd1cmF0aW9uIGRhdGENCi0gWE1MIG5h bWVzcGFjZSBjb252ZW50aW9ucw0KLSBYTUwgdXNhZ2UgZ3VpZGVsaW5lcw0KDQpUaGUgaW5pdGlh bCB3b3JrIHN0YXJ0ZWQgaW4gMjAwMyBhbmQgaGFzIGFscmVhZHkgYmVlbiBjb21wbGV0ZWQgYW5k IHdhcw0KcmVzdHJpY3RlZCB0byBmb2xsb3dpbmcgaXRlbXM6DQoNCiAgYSkgTkVUQ09ORiBQcm90 b2NvbCBTcGVjaWZpY2F0aW9uLCB3aGljaCBkZWZpbmVzIHRoZSBvcGVyYXRpb25hbCBtb2RlbCwN CiAgICAgcHJvdG9jb2wgb3BlcmF0aW9ucywgdHJhbnNhY3Rpb24gbW9kZWwsIGRhdGEgbW9kZWwg cmVxdWlyZW1lbnRzLA0KICAgICBzZWN1cml0eSByZXF1aXJlbWVudHMsIGFuZCB0cmFuc3BvcnQg bGF5ZXIgcmVxdWlyZW1lbnRzLg0KICBiKSBORVRDT05GIG92ZXIgU1NIIFNwZWNpZmljYXRpb246 IEltcGxlbWVudGF0aW9uIE1hbmRhdG9yeSwNCiAgYykgTkVUQ09ORiBvdmVyIEJFRVAgU3BlY2lm aWNhdGlvbjogSW1wbGVtZW50YXRpb24gT3B0aW9uYWwsDQogIGQpIE5FVENPTkYgb3ZlciBTT0FQ IFNwZWNpZmljYXRpb246IEltcGxlbWVudGF0aW9uIE9wdGlvbmFsLg0KDQogIFRoZXNlIGRvY3Vt ZW50cyBkZWZpbmUgaG93IHRoZSBORVRDT05GIHByb3RvY29sIGlzIHVzZWQgd2l0aCBlYWNoDQog IHRyYW5zcG9ydCBwcm90b2NvbCBzZWxlY3RlZCBieSB0aGUgd29ya2luZyBncm91cCwgYW5kIGhv dyBpdCBtZWV0cw0KICB0aGUgc2VjdXJpdHkgYW5kIHRyYW5zcG9ydCBsYXllciByZXF1aXJlbWVu dHMgb2YgdGhlIE5FVENPTkYgUHJvdG9jb2wNCiAgU3BlY2lmaWNhdGlvbi4NCg0KICBlKSBORVRD T05GIE5vdGlmaWNhdGlvbiBTcGVjaWZpY2F0aW9uLCB3aGljaCBkZWZpbmVzIG1lY2hhbmlzbXMg dGhhdA0KICAgICBwcm92aWRlIGFuIGFzeW5jaHJvbm91cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBk ZWxpdmVyeSBzZXJ2aWNlIGZvcg0KICAgICB0aGUgTkVUQ09ORiBwcm90b2NvbC4gIE5FVENPTkYg Tm90aWZpY2F0aW9uIGlzIGFuIG9wdGlvbmFsDQogICAgIGNhcGFiaWxpdHkgYnVpbHQgb24gdG9w IG9mIHRoZSBiYXNlIE5FVENPTkYgZGVmaW5pdGlvbiBhbmQNCiAgICAgcHJvdmlkZXMgdGhlIGNh cGFiaWxpdGllcyBhbmQgb3BlcmF0aW9ucyBuZWNlc3NhcnkgdG8gc3VwcG9ydA0KICAgICB0aGlz IHNlcnZpY2UuDQoNCiAgVGhlIE5FVENPTkYgbm90aWZpY2F0aW9uIHNwZWNpZmljYXRpb24gaGFz IGJlZW4gZmluaXNoZWQgbm93IGFzIHdlbGwuDQoNCkluIHRoZSBjdXJyZW50IHBoYXNlIG9mIHRo ZSBpbmNyZW1lbnRhbCBkZXZlbG9wbWVudCBvZiBORVRDT05GIHRoZQ0Kd29ya2dyb3VwIHdpbGwg Zm9jdXMgb24gZm9sbG93aW5nIGl0ZW1zOg0KDQoxLiBGaW5lLWdyYWluIGxvY2tpbmc6IFRoZSBi YXNlIE5FVENPTkYgcHJvdG9jb2wgb25seSBwcm92aWRlcyBhIGxvY2sNCiAgIGZvciB0aGUgZW50 aXJlIGNvbmZpZ3VyYXRpb24gZGF0YXN0b3JlLCB3aGljaCBpcyBub3QgZGVlbWVkIHRvIG1lZXQN CiAgIGltcG9ydGFudCBvcGVyYXRpb25hbCBhbmQgc2VjdXJpdHkgcmVxdWlyZW1lbnRzLiBUaGUg TkVUQ09ORiB3b3JraW5nDQogICBncm91cCB3aWxsIHByb2R1Y2UgYSBzdGFuZGFyZHMtdHJhY2sg UkZDIHNwZWNpZnlpbmcgYSBtZWNoYW5pc20gZm9yDQogICBmaW5lLWdyYWluIGxvY2tpbmcgb2Yg dGhlIE5FVENPTkYgY29uZmlndXJhdGlvbiBkYXRhc3RvcmUuDQoNCjIuIE5FVENPTkYgbW9uaXRv cmluZzogSXQgaXMgY29uc2lkZXJlZCBiZXN0IHByYWN0aWNlIGZvciBJRVRGIHdvcmtpbmcNCiAg IGdyb3VwcyB0byBpbmNsdWRlIG1hbmFnZW1lbnQgb2YgdGhlaXIgcHJvdG9jb2xzIHdpdGhpbiB0 aGUgc2NvcGUgb2YNCiAgIHRoZSBzb2x1dGlvbiB0aGV5IGFyZSBwcm92aWRpbmcuIFRoZSBORVRD T05GIHdvcmtpbmcgZ3JvdXAgd2lsbA0KICAgcHJvZHVjZSBhIHN0YW5kYXJkcy10cmFjayBSRkMg d2l0aCBtZWNoYW5pc21zIGFsbG93aW5nIE5FVENPTkYNCiAgIGl0c2VsZiB0byBiZSB1c2VkIHRv IG1vbml0b3Igc29tZSBhc3BlY3RzIG9mIE5FVENPTkYgb3BlcmF0aW9uLg0KDQozLiBTY2hlbWEg YWR2ZXJ0aXNlbWVudDogQ3VycmVudGx5IHRoZSBORVRDT05GIHByb3RvY29sIGlzIGFibGUgdG8N CiAgIGFkdmVydGlzZSB3aGljaCBwcm90b2NvbCBmZWF0dXJlcyBhcmUgc3VwcG9ydGVkIG9uIGEg cGFydGljdWxhcg0KICAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMg Y3VycmVudGx5IG5vIHdheSB0byBkaXNjb3Zlcg0KICAgd2hpY2ggWE1MIFNjaGVtYSBhcmUgc3Vw cG9ydGVkIG9uIHRoZSBkZXZpY2UuIFRoZSBORVRDT05GIHdvcmtpbmcNCiAgIGdyb3VwIHdpbGwg cHJvZHVjZSBhIHN0YW5kYXJkcy10cmFjayBSRkMgd2l0aCBtZWNoYW5pc21zIG1ha2luZyB0aGlz DQogICBkaXNjb3ZlcnkgcG9zc2libGUgKHRoaXMgaXRlbSBtYXkgYmUgbWVyZ2VkIHdpdGggIk5F VENPTkYgbW9uaXRvcmluZyINCiAgIGludG8gYSBzaW5nbGUgZG9jdW1lbnQpLg0KDQogICBOb3Rl OiBUaGUgc2NoZW1hLWFkdmVydGlzZW1lbnQgbWF0ZXJpYWwgaGFzIGJlZW4gbWVyZ2VkIGludG8g dGhlDQogICBORVRDT05GIG1vbml0b3JpbmcgZG9jdW1lbnQgYmFzZWQgb24gV0cgY29uc2Vuc3Vz Lg0KDQo0LiBORVRDT05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmll bmNlIHRoZXJlIGlzIGENCiAgIG5lZWQgZm9yIGEgc3RhbmRhcmRzIHRyYWNrIGRvY3VtZW50IHRv IGRlZmluZSBORVRDT05GIG92ZXIgVExTIGFzIGFuDQogICBvcHRpb25hbCB0cmFuc3BvcnQgZm9y IHRoZSBORVRDT05GIHByb3RvY29sLg0KDQo1LiBORVRDT05GIGRlZmF1bHQgaGFuZGxpbmc6IE5F VENPTkYgdG9kYXkgZG9lcyBub3QgZGVmaW5lIHdoZXRoZXINCiAgIGRlZmF1bHQgdmFsdWVzIHNo b3VsZCBiZSByZXR1cm5lZCBieSB0aGUgc2VydmVyIGluIHJlcGxpZXMNCiAgIHRvIHJlcXVlc3Rz IGZvciByZWFkaW5nIGNvbmZpZ3VyYXRpb24gYW5kIHN0YXRlIGRhdGEuIERpZmZlcmVudA0KICAg Y2xpZW50cyBoYXZlIGRpZmZlcmVudCBuZWVkcyB0byByZWNlaXZlIG9yIG5vdCB0byByZWNlaXZl DQogICBkZWZhdWx0IGRhdGEuIFRoZSBORVRDT05GIHdvcmtpbmcgZ3JvdXAgd2lsbCBwcm9kdWNl IGENCiAgIHN0YW5kYXJkcy10cmFjayBSRkMgZGVmaW5pbmcgYSBtZWNoYW5pc20gdGhhdCBhbGxv d3MNCiAgIE5FVENPTkYgY2xpZW50cyB0byBjb250cm9sIHdoZXRoZXIgZGVmYXVsdCBkYXRhIGlz IHJldHVybmVkDQogICBieSB0aGUgbmV0Y29uZiBzZXJ2ZXIuDQoNCjYuIE5FVENPTkYgaW1wbGVt ZW50YXRpb25zIGhhdmUgc2hvd24gdGhhdCB0aGUgc3BlY2lmaWNhdGlvbiBpbiBSRkM0NzQxDQog ICBpcyBub3QgMTAwJSBjbGVhciBhbmQgaGFzIGxlYWQgdG8gZGlmZmVyZW50IGludGVycHJldGF0 aW9ucyBhbmQgaW1wbGVtZW50YXRpb25zLiANCiAgIEFsc28gc29tZSBlcnJvcnMgaGF2ZSBiZWVu IHVuY292ZXJlZC4gU28gdGhlIFdHIHdpbGwgZG8gYW4gcmZjNDc0MWJpcyB3aXRoDQogICBmb2xs b3dpbmcgY29uc3RyYWludHM6DQoNCiAgICAgLSBidWcgZml4ZXMgYXJlIHRvIGJlIGRvbmUNCiAg ICAgLSBjbGFyaWZpY2F0aW9ucyBjYW4gYmUgZG9uZQ0KICAgICAtIGV4dGVuc2lvbnMgY2FuIGJl IGRvbmUgb25seSB3aGVuIG5lZWRlZCB0byBmaXggYnVncyANCiAgICAgICBvciBpbmNvbnNpc3Rl bmNpZXMgKGkuZS4gd2UgYXJlIG5vdCBkb2luZyBhIE5FVENPTkYgVjIpDQogICAgIC0gVGhlIHdv cmsgY2FuIGJlIHN0YXJ0ZWQgYmFzZWQgb24gdGhlIGRpc2N1c3Npb24gaW4gSUVURiAjNzMgKHNl ZQ0KICAgICAgICBodHRwOi8vd3d3LmlldGYub3JnL3Byb2NlZWRpbmdzLzA4bm92L3NsaWRlcy9u ZXRjb25mLTMucGRmKS4NCg0KICAgTm90ZTogQSB0ZWNobmljYWwgZXJyYXRhIGhhcyBiZWVuIHBv c3RlZCBvbiByZmM0NzQyLiBJZiB0aGUgd29yayBvbg0KICAgcmZjNDc0MWJpcyB1bmNvdmVycyBh bnkgYWRkaXRpb25hbCBmaXhlcy9jbGFyaWZpY2F0aW9ucyB0aGF0IG5lZWQNCiAgIHRvIGJlIG1h ZGUgdG8gcmZjNDc0MiwgdGhlIFdHIG1heSBjb25zaWRlciB0byBhbHNvIGRvIGEgcmZjNDc0MmJp cw0KICAgYXMgcGFydCBvZiB0aGlzIHdvcmstaXRlbS4NCg0KVGhlIGZvbGxvd2luZyBpdGVtcyBo YXZlIGJlZW4gaWRlbnRpZmllZCBhcyBpbXBvcnRhbnQgYnV0IGFyZSBjdXJyZW50bHkNCm5vdCBj b25zaWRlcmVkIGluIHNjb3BlIGZvciByZS1jaGFydGVyaW5nIGFuZCBtYXkgYmUgY2FuZGlkYXRl cyBmb3Igd29yaw0Kd2hlbiB0aGVyZSBpcyBjb21tdW5pdHkgY29uc2Vuc3VzIHRvIHRha2UgdGhl bSBvbjoNCg0KLSBORVRDT05GIE5vdGlmaWNhdGlvbiBjb250ZW50DQotIEFjY2VzcyBDb250cm9s IHJlcXVpcmVtZW50cw0KLSBORVRDT05GIGFjY2VzcyB0byBTTUktYmFzZWQgTUlCIGRhdGENCg0K DQpHb2FscyBhbmQgTWlsZXN0b25lczoNCkRvbmUgICBXb3JraW5nIEdyb3VwIGZvcm1lZA0KRG9u ZSAgIFN1Ym1pdCBpbml0aWFsIE5ldGNvbmYgUHJvdG9jb2wgZHJhZnQNCkRvbmUgICBTdWJtaXQg aW5pdGlhbCBOZXRjb25mIG92ZXIgKHRyYW5zcG9ydC1UQkQpIGRyYWZ0DQpEb25lICAgQmVnaW4g V29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRjb25mIFByb3RvY29sIGRyYWZ0DQpE b25lICAgQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRjb25mIG92ZXIg KHRyYW5zcG9ydC1UQkQpDQogICAgICAgICAgICBkcmFmdA0KRG9uZSAgIFN1Ym1pdCBmaW5hbCB2 ZXJzaW9uIG9mIHRoZSBOZXRjb25mIFByb3RvY29sIGRyYWZ0IHRvIHRoZSBJRVNHDQpEb25lICAg U3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBTT0FQIGRyYWZ0IHRvIHRo ZSBJRVNHDQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBC RUVQIGRyYWZ0IHRvIHRoZSBJRVNHDQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhl IE5ldGNvbmYgb3ZlciBTU0ggZHJhZnQgdG8gdGhlIElFU0cNCkRvbmUgICBVcGRhdGUgY2hhcnRl cg0KRG9uZSAgIFN1Ym1pdCBmaXJzdCB2ZXJzaW9uIG9mIE5FVENPTkYgTm90aWZpY2F0aW9ucyBk b2N1bWVudA0KRG9uZSAgIEJlZ2luIFdHTEMgb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3Vt ZW50DQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25z IGRvY3VtZW50IHRvIElFU0cNCiAgICAgICAgICAgIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bv c2VkIFN0YW5kYXJkDQpEb25lICAgLTAwIGRyYWZ0IGZvciBmaW5lIEdyYWluIExvY2tpbmcNCkRv bmUgICAtMDAgZHJhZnQgZm9yIE5FVENPTkYgb3ZlciBUTFMNCkRvbmUgICAtMDAgZHJhZnQgZm9y IE5FVENPTkYgTW9uaXRvcmluZw0KRG9uZSAgIC0wMCBkcmFmdCBmb3IgU2NoZW1hIEFkdmVydGlz ZW1lbnQNCkRvbmUgICBFYXJseSBSZXZpZXcgb2YgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFwcHJv YWNoIChmb3IgTkVUQ09ORiBvdmVyDQogICAgICAgICAgICBUTFMpIHdpdGggdGhlIHNlY3VyaXR5 IGNvbW11bml0eSBhdCBJRVRGIDcxDQpOLkEuICAgICBXRyBMYXN0IENhbGwgb24gU2NoZW1hIEFk dmVydGlzZW1lbnQgYWZ0ZXIgSUVURjcyDQogICAgICAgICAgICBTY2hlbWEgQWR2ZXJ0aXNlbWVu dCBoYXMgYmVlbiBtZXJnZWQgaW50byBNb25pdG9yaW5nDQpEb25lICAgIFdHIExhc3QgQ2FsbCBv biBORVRDT05GIG92ZXIgVExTIGFmdGVyIElFVEY3Mg0KRG9uZSAgICBOZXRjb25mIG92ZXIgVExT IHRvIElFU0cgZm9yIGNvbnNpZGVyYXRpb24gYXMgUHJvcG9zZWQgU3RhbmRhcmRzDQpEZWMgMjAw OCAgV0cgTGFzdCBDYWxsIG9uIEZpbmUgR3JhaW4gTG9ja2luZyBhZnRlciBJRVRGNzMNCkRlYyAy MDA4ICBTZW5kIFBhcnRpYWwgTG9ja2luZyB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9uIGFzIFBy b3Bvc2VkIFN0YW5kYXJkcw0KSmFuIDIwMDkgICBJbml0aWFsIFdHIGRyYWZ0IGZvciB3aXRoLWRl ZmF1bHRzIGNhcGFiaWxpdHkNCkZlYiAyMDA5ICAgSW5pdGlhbCBXRyBkcmFmdCBmb3IgcmZjNDc0 MWJpcw0KTWFyIDIwMDkgICBXRyBMYXN0IENhbGwgb24gTkVUQ09ORiBNb25pdG9yaW5nIGFmdGVy IElFVEY3Mw0KQXByIDIwMDkgICBXRyBMYXN0IENhbGwgb24gcmZjNDc0MWJpcw0KQXByIDIwMDkg ICBXRyBMYXN0IENhbGwgb24gd2l0aC1kZWZhdWx0cw0KSnVuIDIwMDkgICByZmM0NzQxYmlzIHRv IElFU0cgZm9yIGNvbnNpZGVyYXRpb25zIGFzIFByb3Bvc2VkIFN0YW5kYXJkDQpKdW4gMjAwOSAg IHdpdGgtZGVmYXVsdHMgY2FwYWJpbGl0eSB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9ucyBhcyBQ cm9wb3NlZCBTdGFuZGFyZA0KDQoNCg0K ------_=_NextPart_001_01C95FD6.705C79DE Content-Type: text/html; name="Diff WGCharter-20080821-WGCharter-20081216.htm" Content-Transfer-Encoding: base64 Content-Description: Diff WGCharter-20080821-WGCharter-20081216.htm Content-Disposition: attachment; filename="Diff WGCharter-20080821-WGCharter-20081216.htm" CjwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgWEhUTUwgMS4wIFRyYW5zaXRpb25h bC8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRtbDEvRFREL3hodG1sMS10cmFuc2l0aW9u YWwuZHRkIj4gCjwhLS0gR2VuZXJhdGVkIGJ5IHJmY2RpZmYgMS4zNTogcmZjZGlmZiAgLS0+IAo8 IS0tIDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5zaXRp b25hbCIgPiAtLT4KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAyLjYuMjQtMS02ODYgIzEg U01QIFRodSBNYXkgOCAwMjoxNjozOSBVVEMgMjAwOCBpNjg2IEdOVS9MaW51eCAtLT4gCjwhLS0g VXNpbmcgYXdrOiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDMuMS41IC0tPiAKPCEtLSBVc2luZyBk aWZmOiAvdXNyL2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAyLjguMSAtLT4gCjwhLS0g VXNpbmcgd2RpZmY6IC91c3IvYmluL3dkaWZmOiBHTlUgd2RpZmYgMC41IC0tPiAKPGh0bWw+IAo8 aGVhZD4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0 bWw7IGNoYXJzZXQ9aXNvLTg4NTktMSIgLz4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1T dHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2NzcyIgLz4gCiAgPHRpdGxlPkRpZmY6IDA4MDgyMS1O RVRDT05GLWNoYXJ0ZXIudHh0IC0gMDgxMjE2LU5FVENPTkYtQ2hhcnRlci50eHQ8L3RpdGxlPiAK ICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAKICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBt YXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0 ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9w OyBmb250LXNpemU6IDAuODZlbTt9IAogICAgdGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9 IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTogMC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9u dC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29s b3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAg IC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tn cm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAuaW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhG RjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQg ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1j b2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAog ICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6 ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlw c2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJpZ2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog I0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAog ICAgLnJibG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0 IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBi YWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0 aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IAogIDwvc3R5bGU+ IAo8L2hlYWQ+IAo8Ym9keSA+IAogIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBj ZWxsc3BhY2luZz0iMCI+IAogIDx0ciBiZ2NvbG9yPSJvcmFuZ2UiPjx0aD48L3RoPjx0aD4mbmJz cDswODA4MjEtTkVUQ09ORi1jaGFydGVyLnR4dCZuYnNwOzwvdGg+PHRoPiA8L3RoPjx0aD4mbmJz cDswODEyMTYtTkVUQ09ORi1DaGFydGVyLnR4dCZuYnNwOzwvdGg+PHRoPjwvdGg+PC90cj4gCiAg ICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDEiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5MYXN0 IE1vZGlmaWVkOiA8c3BhbiBjbGFzcz0iZGVsZXRlIj4yMDA4LTA4LTIxPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5MYXN0IE1vZGlmaWVkOiA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4yMDA4LTEyLTE2PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPkFkZGl0aW9uYWwgaW5mb3JtYXRpb24gaXMgYXZhaWxhYmxlIGF0IHRvb2xz LmlldGYub3JnL3dnL25ldGNvbmY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BZGRp dGlvbmFsIGluZm9ybWF0aW9uIGlzIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy93Zy9uZXRj b25mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMiIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPkNoYWlyKHMpOjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+IyBCZXJ0IFdpam5lbiAmbHQ7YmVydGlldGZAYndp am5lbi5uZXQmZ3Q7PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMyIgLz48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IE1laG1ldCBFcnN1 ZSAmbHQ7bWVobWV0LmVyc3VlQG5zbi5jb20mZ3Q7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkNoYWlyKHMpOjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+QmVydCBXaWpuZW4gJmx0 O2JlcnRpZXRmQGJ3aWpuZW4ubmV0Jmd0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+TWVobWV0IEVyc3VlICZsdDttZWhtZXQuZXJzdWVAbnNuLmNvbSZndDs8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPk9wZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgQXJlYSBEaXJl Y3RvcihzKTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5PcGVyYXRpb25zIGFuZCBN YW5hZ2VtZW50IEFyZWEgRGlyZWN0b3Iocyk6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNCIgLz48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IERhbiBSb21hc2Nh bnUgJmx0O2Ryb21hc2NhQGF2YXlhLmNvbSZndDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+RGFuIFJvbWFzY2FudSAmbHQ7ZHJvbWFzY2FAYXZheWEuY29tJmd0OzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNz PSJkZWxldGUiPiM8L3NwYW4+IFJvbmFsZCBCb25pY2EgJmx0O3Jib25pY2FAanVuaXBlci5uZXQm Z3Q7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPlJvbmFsZCBCb25pY2EgJmx0O3Ji b25pY2FAanVuaXBlci5uZXQmZ3Q7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBBcmVhIEFkdmlzb3I6PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBBcmVh IEFkdmlzb3I6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IERhbiBSb21hc2NhbnUgJmx0O2Ryb21hc2NhQGF2 YXlhLmNvbSZndDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RGFuIFJvbWFzY2Fu dSAmbHQ7ZHJvbWFzY2FAYXZheWEuY29tJmd0OzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPlRlY2huaWNhbCBBZHZpc29yKHMpOjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPlRlY2huaWNhbCBBZHZpc29yKHMpOjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MDYiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4jPC9zcGFuPiBD aGFybGllIEthdWZtYW4gJmx0O2NoYXJsaWVrQG1pY3Jvc29mdC5jb20mZ3Q7PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPkNoYXJsaWUgS2F1Zm1hbiAmbHQ7Y2hhcmxpZWtAbWljcm9z b2Z0LmNvbSZndDs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5NYWlsaW5nIExpc3RzOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPk1haWxpbmcg TGlzdHM6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPkdlbmVyYWwgRGlzY3Vzc2lvbjogbmV0Y29uZkBpZXRmLm9yZzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPkdlbmVyYWwgRGlzY3Vzc2lvbjogbmV0Y29uZkBpZXRmLm9yZzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5UbyBTdWJz Y3JpYmU6IG5ldGNvbmYtcmVxdWVzdEBpZXRmLm9yZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPlRvIFN1YnNjcmliZTogbmV0Y29uZi1yZXF1ZXN0QGlldGYub3JnPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkluIEJvZHk6IGluIG1z ZyBib2R5OiBzdWJzY3JpYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5JbiBCb2R5 OiBpbiBtc2cgYm9keTogc3Vic2NyaWJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFyY2hpdmU6IGh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1h cmNoaXZlL3dlYi9uZXRjb25mLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkFyY2hp dmU6IGh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9uZXRjb25mLzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMDciIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ RGVzY3JpcHRpb24gb2YgV29ya2luZyBHcm91cDo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij5EZXNjcmlwdGlvbiBvZiBXb3JraW5nIEdyb3VwOjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5DaGFybGllIEthdWZtYW4gaXMgVGVjaG5p Y2FsIEFkdmlzb3IgZm9yIFNlY3VyaXR5IE1hdHRlcnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij5DaGFybGllIEthdWZtYW4gaXMgVGVjaG5pY2FsIEFkdmlzb3IgZm9yIFNlY3VyaXR5 IE1hdHRlcnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkNvbmZpZ3VyYXRpb24gb2YgbmV0 d29ya3Mgb2YgZGV2aWNlcyBoYXMgYmVjb21lIGEgY3JpdGljYWwgcmVxdWlyZW1lbnQ8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Db25maWd1cmF0aW9uIG9mIG5ldHdvcmtzIG9mIGRl dmljZXMgaGFzIGJlY29tZSBhIGNyaXRpY2FsIHJlcXVpcmVtZW50PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPmZvciBvcGVyYXRvcnMgaW4gdG9k YXkncyBoaWdobHkgaW50ZXJvcGVyYWJsZSBuZXR3b3Jrcy4gT3BlcmF0b3JzIGZyb208L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5mb3Igb3BlcmF0b3JzIGluIHRvZGF5J3MgaGlnaGx5 IGludGVyb3BlcmFibGUgbmV0d29ya3MuIE9wZXJhdG9ycyBmcm9tPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPmxhcmdlIHRvIHNtYWxsIGhhdmUg ZGV2ZWxvcGVkIHRoZWlyIG93biBtZWNoYW5pc21zIG9yIHVzZWQgdmVuZG9yPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+bGFyZ2UgdG8gc21hbGwgaGF2ZSBkZXZlbG9wZWQgdGhlaXIg b3duIG1lY2hhbmlzbXMgb3IgdXNlZCB2ZW5kb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+c3BlY2lmaWMgbWVjaGFuaXNtcyB0byB0cmFuc2Zl ciBjb25maWd1cmF0aW9uIGRhdGEgdG8gYW5kIGZyb20gYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPnNwZWNpZmljIG1lY2hhbmlzbXMgdG8gdHJhbnNmZXIgY29uZmlndXJhdGlvbiBk YXRhIHRvIGFuZCBmcm9tIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ZGV2aWNlLCBhbmQgZm9yIGV4YW1pbmluZyBkZXZpY2Ugc3RhdGUgaW5m b3JtYXRpb24gd2hpY2ggbWF5IGltcGFjdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PmRldmljZSwgYW5kIGZvciBleGFtaW5pbmcgZGV2aWNlIHN0YXRlIGluZm9ybWF0aW9uIHdoaWNo IG1heSBpbXBhY3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+dGhlIGNvbmZpZ3VyYXRpb24uIEVhY2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBtYXkg YmUgZGlmZmVyZW50IGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+dGhlIGNvbmZp Z3VyYXRpb24uIEVhY2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBtYXkgYmUgZGlmZmVyZW50IGluPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPnZhcmlv dXMgYXNwZWN0cywgc3VjaCBhcyBzZXNzaW9uIGVzdGFibGlzaG1lbnQsIHVzZXIgYXV0aGVudGlj YXRpb24sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+dmFyaW91cyBhc3BlY3RzLCBz dWNoIGFzIHNlc3Npb24gZXN0YWJsaXNobWVudCwgdXNlciBhdXRoZW50aWNhdGlvbiw8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBi Z2NvbG9yPSJncmF5IiA+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDIiIC8+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBsaW5lIDkyPC9lbT48L3RoPjx0aD4gPC90 aD48dGg+PGEgbmFtZT0icGFydC1yMiIgLz48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9z bWFsbD48ZW0+IGxpbmUgOTU8L2VtPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgdGhlIHNl Y3VyaXR5IGFuZCB0cmFuc3BvcnQgbGF5ZXIgcmVxdWlyZW1lbnRzIG9mIHRoZSBORVRDT05GIFBy b3RvY29sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICB0aGUgc2VjdXJpdHkgYW5k IHRyYW5zcG9ydCBsYXllciByZXF1aXJlbWVudHMgb2YgdGhlIE5FVENPTkYgUHJvdG9jb2w8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBTcGVj aWZpY2F0aW9uLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgU3BlY2lmaWNhdGlv bi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgZSkgTkVUQ09ORiBOb3RpZmljYXRpb24g U3BlY2lmaWNhdGlvbiwgd2hpY2ggZGVmaW5lcyBtZWNoYW5pc21zIHRoYXQ8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGUpIE5FVENPTkYgTm90aWZpY2F0aW9uIFNwZWNpZmljYXRp b24sIHdoaWNoIGRlZmluZXMgbWVjaGFuaXNtcyB0aGF0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICBwcm92aWRlIGFuIGFzeW5jaHJvbm91 cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2aWNlIGZvcjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICBwcm92aWRlIGFuIGFzeW5jaHJvbm91cyBtZXNzYWdlIG5v dGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2aWNlIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgdGhlIE5FVENPTkYgcHJvdG9jb2wuICBO RVRDT05GIE5vdGlmaWNhdGlvbiBpcyBhbiBvcHRpb25hbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICB0aGUgTkVUQ09ORiBwcm90b2NvbC4gIE5FVENPTkYgTm90aWZpY2F0aW9u IGlzIGFuIG9wdGlvbmFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICBjYXBhYmlsaXR5IGJ1aWx0IG9uIHRvcCBvZiB0aGUgYmFzZSBORVRD T05GIGRlZmluaXRpb24gYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgIGNh cGFiaWxpdHkgYnVpbHQgb24gdG9wIG9mIHRoZSBiYXNlIE5FVENPTkYgZGVmaW5pdGlvbiBhbmQ8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg IHByb3ZpZGVzIHRoZSBjYXBhYmlsaXRpZXMgYW5kIG9wZXJhdGlvbnMgbmVjZXNzYXJ5IHRvIHN1 cHBvcnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgcHJvdmlkZXMgdGhlIGNh cGFiaWxpdGllcyBhbmQgb3BlcmF0aW9ucyBuZWNlc3NhcnkgdG8gc3VwcG9ydDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgdGhpcyBzZXJ2 aWNlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICB0aGlzIHNlcnZpY2UuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDgiIC8+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5UaGUgTkVUQ09ORiBub3RpZmljYXRpb24gc3BlY2lmaWNhdGlvbiBo YXMgYmVlbiBmaW5pc2hlZCBub3cgYXMgd2VsbC48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+SW4gdGhlIGN1cnJlbnQgcGhhc2Ugb2YgdGhlIGlu Y3JlbWVudGFsIGRldmVsb3BtZW50IG9mIE5FVENPTkYgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+SW4gdGhlIGN1cnJlbnQgcGhhc2Ugb2YgdGhlIGluY3JlbWVudGFsIGRldmVs b3BtZW50IG9mIE5FVENPTkYgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPndvcmtncm91cCB3aWxsIGZvY3VzIG9uIGZvbGxvd2luZyBpdGVt czo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij53b3JrZ3JvdXAgd2lsbCBmb2N1cyBv biBmb2xsb3dpbmcgaXRlbXM6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xLiBGaW5lLWdy YWluIGxvY2tpbmc6IFRoZSBiYXNlIE5FVENPTkYgcHJvdG9jb2wgb25seSBwcm92aWRlcyBhIGxv Y2s8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xLiBGaW5lLWdyYWluIGxvY2tpbmc6 IFRoZSBiYXNlIE5FVENPTkYgcHJvdG9jb2wgb25seSBwcm92aWRlcyBhIGxvY2s8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBmb3IgdGhlIGVu dGlyZSBjb25maWd1cmF0aW9uIGRhdGFzdG9yZSwgd2hpY2ggaXMgbm90IGRlZW1lZCB0byBtZWV0 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBmb3IgdGhlIGVudGlyZSBjb25maWd1 cmF0aW9uIGRhdGFzdG9yZSwgd2hpY2ggaXMgbm90IGRlZW1lZCB0byBtZWV0PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgaW1wb3J0YW50IG9w ZXJhdGlvbmFsIGFuZCBzZWN1cml0eSByZXF1aXJlbWVudHMuIFRoZSBORVRDT05GIHdvcmtpbmc8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGltcG9ydGFudCBvcGVyYXRpb25hbCBh bmQgc2VjdXJpdHkgcmVxdWlyZW1lbnRzLiBUaGUgTkVUQ09ORiB3b3JraW5nPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgZ3JvdXAgd2lsbCBw cm9kdWNlIGEgc3RhbmRhcmRzLXRyYWNrIFJGQyBzcGVjaWZ5aW5nIGEgbWVjaGFuaXNtIGZvcjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgZ3JvdXAgd2lsbCBwcm9kdWNlIGEgc3Rh bmRhcmRzLXRyYWNrIFJGQyBzcGVjaWZ5aW5nIGEgbWVjaGFuaXNtIGZvcjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIGZpbmUtZ3JhaW4gbG9j a2luZyBvZiB0aGUgTkVUQ09ORiBjb25maWd1cmF0aW9uIGRhdGFzdG9yZS48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGZpbmUtZ3JhaW4gbG9ja2luZyBvZiB0aGUgTkVUQ09ORiBj b25maWd1cmF0aW9uIGRhdGFzdG9yZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjIuIE5F VENPTkYgbW9uaXRvcmluZzogSXQgaXMgY29uc2lkZXJlZCBiZXN0IHByYWN0aWNlIGZvciBJRVRG IHdvcmtpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4yLiBORVRDT05GIG1vbml0 b3Jpbmc6IEl0IGlzIGNvbnNpZGVyZWQgYmVzdCBwcmFjdGljZSBmb3IgSUVURiB3b3JraW5nPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHIgYmdjb2xvcj0iZ3JheSIgPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwzIiAvPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gbGluZSAxMTU8L2VtPjwvdGg+PHRo PiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIzIiAvPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxlbT4gbGluZSAxMjA8L2VtPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg aXRzZWxmIHRvIGJlIHVzZWQgdG8gbW9uaXRvciBzb21lIGFzcGVjdHMgb2YgTkVUQ09ORiBvcGVy YXRpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBpdHNlbGYgdG8gYmUgdXNl ZCB0byBtb25pdG9yIHNvbWUgYXNwZWN0cyBvZiBORVRDT05GIG9wZXJhdGlvbi48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjMuIFNjaGVtYSBhZHZlcnRpc2VtZW50OiBDdXJyZW50bHkgdGhl IE5FVENPTkYgcHJvdG9jb2wgaXMgYWJsZSB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjMuIFNjaGVtYSBhZHZlcnRpc2VtZW50OiBDdXJyZW50bHkgdGhlIE5FVENPTkYgcHJvdG9j b2wgaXMgYWJsZSB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gIGFkdmVydGlzZSB3aGljaCBwcm90b2NvbCBmZWF0dXJlcyBhcmUgc3VwcG9y dGVkIG9uIGEgcGFydGljdWxhcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgYWR2 ZXJ0aXNlIHdoaWNoIHByb3RvY29sIGZlYXR1cmVzIGFyZSBzdXBwb3J0ZWQgb24gYSBwYXJ0aWN1 bGFyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMgY3VycmVudGx5IG5v IHdheSB0byBkaXNjb3ZlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgbmV0Y29u Zi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMgY3VycmVudGx5IG5vIHdheSB0byBk aXNjb3ZlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gIHdoaWNoIFhNTCBTY2hlbWEgYXJlIHN1cHBvcnRlZCBvbiB0aGUgZGV2aWNlLiBUaGUg TkVUQ09ORiB3b3JraW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICB3aGljaCBY TUwgU2NoZW1hIGFyZSBzdXBwb3J0ZWQgb24gdGhlIGRldmljZS4gVGhlIE5FVENPTkYgd29ya2lu ZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g IGdyb3VwIHdpbGwgcHJvZHVjZSBhIHN0YW5kYXJkcy10cmFjayBSRkMgd2l0aCBtZWNoYW5pc21z IG1ha2luZyB0aGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBncm91cCB3aWxs IHByb2R1Y2UgYSBzdGFuZGFyZHMtdHJhY2sgUkZDIHdpdGggbWVjaGFuaXNtcyBtYWtpbmcgdGhp czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g IGRpc2NvdmVyeSBwb3NzaWJsZSAodGhpcyBpdGVtIG1heSBiZSBtZXJnZWQgd2l0aCAiTkVUQ09O RiBtb25pdG9yaW5nIjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgZGlzY292ZXJ5 IHBvc3NpYmxlICh0aGlzIGl0ZW0gbWF5IGJlIG1lcmdlZCB3aXRoICJORVRDT05GIG1vbml0b3Jp bmciPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgaW50byBhIHNpbmdsZSBkb2N1bWVudCkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICBpbnRvIGEgc2luZ2xlIGRvY3VtZW50KS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwOSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Ob3RlOiBU aGUgc2NoZW1hLWFkdmVydGlzZW1lbnQgbWF0ZXJpYWwgaGFzIGJlZW4gbWVyZ2VkIGludG8gdGhl PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICBORVRDT05GIG1vbml0b3JpbmcgZG9jdW1lbnQgYmFzZWQgb24gV0cgY29uc2Vuc3Vz Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40 LiBORVRDT05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmllbmNlIHRo ZXJlIGlzIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij40LiBORVRDT05GIG92ZXIg VExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmllbmNlIHRoZXJlIGlzIGE8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBuZWVkIGZv ciBhIHN0YW5kYXJkcyB0cmFjayBkb2N1bWVudCB0byBkZWZpbmUgTkVUQ09ORiBvdmVyIFRMUyBh cyBhbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgbmVlZCBmb3IgYSBzdGFuZGFy ZHMgdHJhY2sgZG9jdW1lbnQgdG8gZGVmaW5lIE5FVENPTkYgb3ZlciBUTFMgYXMgYW48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBvcHRpb25h bCB0cmFuc3BvcnQgZm9yIHRoZSBORVRDT05GIHByb3RvY29sLjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgb3B0aW9uYWwgdHJhbnNwb3J0IGZvciB0aGUgTkVUQ09ORiBwcm90b2Nv bC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMCIg Lz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij41LiBORVRDT05GIGRlZmF1bHQgaGFuZGxpbmc6IE5FVENPTkYg dG9kYXkgZG9lcyBub3QgZGVmaW5lIHdoZXRoZXI8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGRlZmF1bHQgdmFsdWVzIHNob3Vs ZCBiZSByZXR1cm5lZCBieSB0aGUgc2VydmVyIGluIHJlcGxpZXM8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHRvIHJlcXVlc3Rz IGZvciByZWFkaW5nIGNvbmZpZ3VyYXRpb24gYW5kIHN0YXRlIGRhdGEuIERpZmZlcmVudDwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgY2xpZW50cyBoYXZlIGRpZmZlcmVudCBuZWVkcyB0byByZWNlaXZlIG9yIG5vdCB0byByZWNl aXZlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICBkZWZhdWx0IGRhdGEuIFRoZSBORVRDT05GIHdvcmtpbmcgZ3JvdXAgd2lsbCBw cm9kdWNlIGE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgIHN0YW5kYXJkcy10cmFjayBSRkMgZGVmaW5pbmcgYSBtZWNoYW5pc20g dGhhdCBhbGxvd3M8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgIE5FVENPTkYgY2xpZW50cyB0byBjb250cm9sIHdoZXRoZXIgZGVm YXVsdCBkYXRhIGlzIHJldHVybmVkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBieSB0aGUgbmV0Y29uZiBzZXJ2ZXIuPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPjYuIE5FVENPTkYgaW1wbGVtZW50YXRpb25zIGhhdmUgc2hvd24gdGhhdCB0aGUgc3BlY2lm aWNhdGlvbiBpbiBSRkM0NzQxPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBpcyBub3QgMTAwJSBjbGVhciBhbmQgaGFzIGxlYWQg dG8gZGlmZmVyZW50IGludGVycHJldGF0aW9ucyBhbmQgaW1wbGVtZW50YXRpb25zLjwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg QWxzbyBzb21lIGVycm9ycyBoYXZlIGJlZW4gdW5jb3ZlcmVkLiBTbyB0aGUgV0cgd2lsbCBkbyBh biByZmM0NzQxYmlzIHdpdGg8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGZvbGxvd2luZyBjb25zdHJhaW50czo8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAtIGJ1ZyBmaXhlcyBhcmUgdG8gYmUgZG9uZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAtIGNsYXJpZmljYXRpb25z IGNhbiBiZSBkb25lPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgIC0gZXh0ZW5zaW9ucyBjYW4gYmUgZG9uZSBvbmx5IHdoZW4g bmVlZGVkIHRvIGZpeCBidWdzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgb3IgaW5jb25zaXN0ZW5jaWVzIChpLmUuIHdl IGFyZSBub3QgZG9pbmcgYSBORVRDT05GIFYyKTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAtIFRoZSB3b3JrIGNhbiBiZSBz dGFydGVkIGJhc2VkIG9uIHRoZSBkaXNjdXNzaW9uIGluIElFVEYgIzczIChzZWU8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgaHR0cDovL3d3dy5pZXRmLm9yZy9wcm9jZWVkaW5ncy8wOG5vdi9zbGlkZXMvbmV0Y29uZi0z LnBkZikuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgIE5vdGU6IEEgdGVjaG5pY2FsIGVycmF0YSBoYXMgYmVlbiBwb3N0 ZWQgb24gcmZjNDc0Mi4gSWYgdGhlIHdvcmsgb248L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHJmYzQ3NDFiaXMgdW5jb3ZlcnMg YW55IGFkZGl0aW9uYWwgZml4ZXMvY2xhcmlmaWNhdGlvbnMgdGhhdCBuZWVkPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB0byBi ZSBtYWRlIHRvIHJmYzQ3NDIsIHRoZSBXRyBtYXkgY29uc2lkZXIgdG8gYWxzbyBkbyBhIHJmYzQ3 NDJiaXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgIGFzIHBhcnQgb2YgdGhpcyB3b3JrLWl0ZW0uPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlRoZSBmb2xsb3dpbmcgaXRlbXMg aGF2ZSBiZWVuIGlkZW50aWZpZWQgYXMgaW1wb3J0YW50IGJ1dCBhcmUgY3VycmVudGx5PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+VGhlIGZvbGxvd2luZyBpdGVtcyBoYXZlIGJlZW4g aWRlbnRpZmllZCBhcyBpbXBvcnRhbnQgYnV0IGFyZSBjdXJyZW50bHk8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+bm90IGNvbnNpZGVyZWQgaW4g c2NvcGUgZm9yIHJlLWNoYXJ0ZXJpbmcgYW5kIG1heSBiZSBjYW5kaWRhdGVzIGZvciB3b3JrPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+bm90IGNvbnNpZGVyZWQgaW4gc2NvcGUgZm9y IHJlLWNoYXJ0ZXJpbmcgYW5kIG1heSBiZSBjYW5kaWRhdGVzIGZvciB3b3JrPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPndoZW4gdGhlcmUgaXMg Y29tbXVuaXR5IGNvbnNlbnN1cyB0byB0YWtlIHRoZW0gb246PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+d2hlbiB0aGVyZSBpcyBjb21tdW5pdHkgY29uc2Vuc3VzIHRvIHRha2UgdGhl bSBvbjo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAx MSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPi0gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+R2VuZXJhbCBp bXByb3ZlbWVudHMgdG8gdGhlIGJhc2UgcHJvdG9jb2w8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPi0gPHNwYW4gY2xhc3M9Imluc2VydCI+TkVUQ09ORiBOb3RpZmljYXRp b24gY29udGVudDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+LSBBY2Nlc3MgQ29udHJvbCByZXF1aXJlbWVudHM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4tIEFjY2VzcyBDb250cm9sIHJlcXVpcmVtZW50czwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4tIE5FVENPTkYg YWNjZXNzIHRvIFNNSS1iYXNlZCBNSUIgZGF0YTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPi0gTkVUQ09ORiBhY2Nlc3MgdG8gU01JLWJhc2VkIE1JQiBkYXRhPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAxMiIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Hb2FscyBh bmQgTWlsZXN0b25lczo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Hb2FscyBhbmQg TWlsZXN0b25lczo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+RG9uZQkgIAlXb3JraW5nIEdyb3VwIGZvcm1lZDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPkRvbmUJICAJV29ya2luZyBHcm91cCBmb3JtZWQ8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlTdWJtaXQgaW5p dGlhbCBOZXRjb25mIFByb3RvY29sIGRyYWZ0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+RG9uZQkgIAlTdWJtaXQgaW5pdGlhbCBOZXRjb25mIFByb3RvY29sIGRyYWZ0PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3Vi bWl0IGluaXRpYWwgTmV0Y29uZiBvdmVyICh0cmFuc3BvcnQtVEJEKSBkcmFmdDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkRvbmUJICAJU3VibWl0IGluaXRpYWwgTmV0Y29uZiBvdmVy ICh0cmFuc3BvcnQtVEJEKSBkcmFmdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCUJlZ2luIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxs IGZvciB0aGUgTmV0Y29uZiBQcm90b2NvbCBkcmFmdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPkRvbmUJICAJQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRj b25mIFByb3RvY29sIGRyYWZ0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMyIgLz48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPkRvbmUJICAJQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRj b25mIG92ZXIgKHRyYW5zcG9ydC1UQkQpIGRyYWZ0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPkRvbmUgICBCZWdpbiBXb3JraW5nIEdyb3VwIExhc3QgQ2FsbCBmb3IgdGhlIE5ldGNv bmYgb3ZlciAodHJhbnNwb3J0LVRCRCk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgICAgICAgICAgZHJhZnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBvZiB0aGUgTmV0Y29u ZiBQcm90b2NvbCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgUHJvdG9jb2wg ZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBvZiB0aGUgTmV0Y29u ZiBvdmVyIFNPQVAgZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRjb25mIG92ZXIgU09B UCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRj b25mIG92ZXIgQkVFUCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBC RUVQIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5l dGNvbmYgb3ZlciBTU0ggZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRjb25mIG92ZXIg U1NIIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJVXBkYXRlIGNoYXJ0ZXI8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVVwZGF0ZSBjaGFydGVyPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3VibWl0IGZpcnN0 IHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAlTdWJtaXQgZmlyc3QgdmVyc2lvbiBvZiBORVRDT05G IE5vdGlmaWNhdGlvbnMgZG9jdW1lbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlCZWdpbiBXR0xDIG9mIE5FVENPTkYgTm90aWZp Y2F0aW9ucyBkb2N1bWVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkRvbmUJICAJ QmVnaW4gV0dMQyBvZiBORVRDT05GIE5vdGlmaWNhdGlvbnMgZG9jdW1lbnQ8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxhIG5hbWU9 ImRpZmYwMDE0IiAvPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVy c2lvbiBvZiBORVRDT05GIE5vdGlmaWNhdGlvbnMgZG9jdW1lbnQgdG8gSUVTRyBmb3IgY29uc2lk ZXJhdGlvbiBhcyBQcm9wb3NlZCBTdGFuZGFyZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj5Eb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25z IGRvY3VtZW50IHRvIElFU0c8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj5Eb25lCSAgCS0wMCBkcmFmdCBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+TkVUQ09ORiBNb25pdG9yaW5nPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICAgICAgICAgICBmb3IgY29uc2lkZXJhdGlvbiBhcyBQcm9wb3NlZCBTdGFuZGFyZDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPkRvbmUJICAJLTAwIGRyYWZ0IGZvciBGaW5lPC9zcGFuPiBHcmFp biBMb2NraW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPkRvbmUgICAtMDAgZHJh ZnQgZm9yIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmZpbmU8L3NwYW4+IEdyYWluIExvY2tpbmc8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkg IAktMDAgZHJhZnQgZm9yIE5FVENPTkYgb3ZlciBUTFM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij5Eb25lCSAgCS0wMCBkcmFmdCBmb3IgTkVUQ09ORiBvdmVyIFRMUzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMTUiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+RG9uZSAgIC0wMCBkcmFmdCBmb3IgTkVU Q09ORiBNb25pdG9yaW5nPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCS0wMCBkcmFmdCBmb3IgU2NoZW1hIEFkdmVydGlz ZW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCS0wMCBkcmFmdCBm b3IgU2NoZW1hIEFkdmVydGlzZW1lbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE2IiAvPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+TWFyIDIwMDg8L3NwYW4+CSAgCUVhcmx5 IFJldmlldyBvZiBjbGllbnQgYXV0aGVudGljYXRpb24gYXBwcm9hY2ggKGZvciBORVRDT05GIG92 ZXIgVExTKSB3aXRoIHRoZSBzZWN1cml0eSBjb21tdW5pdHkgYXQgSUVURiA3MTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Eb25lPC9zcGFuPiAg IEVhcmx5IFJldmlldyBvZiBjbGllbnQgYXV0aGVudGljYXRpb24gYXBwcm9hY2ggKGZvciBORVRD T05GIG92ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj5BdWcgMjAwODwvc3Bhbj4JICAJV0cgTGFzdCBD YWxsIG9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPk5FVENPTkYgTW9uaXRvcmluZzwvc3Bhbj4gYWZ0 ZXIgSUVURjcyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgIFRM Uykgd2l0aCB0aGUgc2VjdXJpdHkgY29tbXVuaXR5IGF0IElFVEYgNzE8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj5BdWcgMjAwODwvc3Bhbj4JICAJV0cgTGFzdCBDYWxsIG9uIDxzcGFuIGNsYXNzPSJkZWxl dGUiPlNjaGVtYSBBZHZlcnRpc2VtZW50PC9zcGFuPiBhZnRlciBJRVRGNzI8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+Ti5BLjwvc3Bhbj4gICAg IFdHIExhc3QgQ2FsbCBvbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TY2hlbWEgQWR2ZXJ0aXNlbWVu dDwvc3Bhbj4gYWZ0ZXIgSUVURjcyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+QXVnPC9zcGFuPiAyMDA4 CSAgCVdHIExhc3QgQ2FsbCBvbiBGaW5lIEdyYWluIExvY2tpbmcgYWZ0ZXIgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+SUVURjcyPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgICAgICAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TY2hlbWEgQWR2ZXJ0aXNlbWVudCBoYXMg YmVlbiBtZXJnZWQgaW50byBNb25pdG9yaW5nPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPkF1 Zzwvc3Bhbj4gMjAwOAkgIAlXRyBMYXN0IENhbGwgb24gTkVUQ09ORiA8c3BhbiBjbGFzcz0iZGVs ZXRlIj5vdmVyIFRMUzwvc3Bhbj4gYWZ0ZXIgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SUVURjcyPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5Eb25lPC9zcGFuPiAgICBXRyBMYXN0IENhbGwgb24gPHNwYW4gY2xhc3M9Imluc2VydCI+TkVU Q09ORiBvdmVyIFRMUzwvc3Bhbj4gYWZ0ZXIgSUVURjcyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+QXVn IDIwMDgJICAJU2VuZCBmb3VyIGRvY3VtZW50czwvc3Bhbj4gdG8gPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+dGhlPC9zcGFuPiBJRVNHIGZvciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5jb25zaWRlcmF0aW9u PC9zcGFuPiBhcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5wcm9wb3NlZCBzdGFuZGFyZHM8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkRv bmUgICAgTmV0Y29uZiBvdmVyIFRMUyB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bv c2VkIFN0YW5kYXJkczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+RGVjPC9zcGFuPiAyMDA4ICBXRyBMYXN0IENhbGwgb24gRmluZSBH cmFpbiBMb2NraW5nIGFmdGVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklFVEY3Mzwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+RGVjPC9z cGFuPiAyMDA4ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TZW5kIFBhcnRpYWwgTG9ja2luZyB0byBJ RVNHIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bvc2VkIFN0YW5kYXJkczwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+SmFuIDIwMDkg ICBJbml0aWFsIFdHIGRyYWZ0IGZvciB3aXRoLWRlZmF1bHRzIGNhcGFiaWxpdHk8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkZlYiAy MDA5ICAgSW5pdGlhbCBXRyBkcmFmdCBmb3IgcmZjNDc0MWJpczwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+TWFyIDIwMDk8L3NwYW4+ ICAgV0cgTGFzdCBDYWxsIG9uIE5FVENPTkYgPHNwYW4gY2xhc3M9Imluc2VydCI+TW9uaXRvcmlu Zzwvc3Bhbj4gYWZ0ZXIgPHNwYW4gY2xhc3M9Imluc2VydCI+SUVURjczPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BcHIgMjAwOSAg IFdHIExhc3QgQ2FsbCBvbiByZmM0NzQxYmlzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BcHIgMjAwOSAgIFdHIExhc3QgQ2FsbCBv biB3aXRoLWRlZmF1bHRzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5KdW4gMjAwOSAgIHJmYzQ3NDFiaXM8L3NwYW4+IHRvIElFU0cg Zm9yIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNvbnNpZGVyYXRpb25zIGFzIFByb3Bvc2VkIFN0YW5k YXJkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij5KdW4gMjAwOSAgIHdpdGgtZGVmYXVsdHMgY2FwYWJpbGl0eSB0byBJRVNHIGZvciBj b25zaWRlcmF0aW9uczwvc3Bhbj4gYXMgPHNwYW4gY2xhc3M9Imluc2VydCI+UHJvcG9zZWQgU3Rh bmRhcmQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4KCiAgICAgPHRyPjx0ZD48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQ+PC90ZD48L3RyPgogICAgIDx0ciBiZ2NvbG9yPSJncmF5 Ij48dGggY29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciI+PGEgbmFtZT0iZW5kIj4mbmJzcDtFbmQg b2YgY2hhbmdlcy4gMTYgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L2E+PC90aD48L3RyPgogICAgIDx0 ciBjbGFzcz0ic3RhdHMiPjx0ZD48L3RkPjx0aD48aT4xNCBsaW5lcyBjaGFuZ2VkIG9yIGRlbGV0 ZWQ8L2k+PC90aD48dGg+PGk+IDwvaT48L3RoPjx0aD48aT41MSBsaW5lcyBjaGFuZ2VkIG9yIGFk ZGVkPC9pPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICA8dHI+PHRkIGNvbHNwYW49IjUiIGFsaWdu PSJjZW50ZXIiIGNsYXNzPSJzbWFsbCI+PGJyLz5UaGlzIGh0bWwgZGlmZiB3YXMgcHJvZHVjZWQg YnkgcmZjZGlmZiAxLjM1LiBUaGUgbGF0ZXN0IHZlcnNpb24gaXMgYXZhaWxhYmxlIGZyb20gPGEg aHJlZj0iaHR0cDovL3d3dy50b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLyIgPmh0dHA6Ly90 b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLzwvYT4gPC90ZD48L3RyPgogICA8L3RhYmxlPgog ICA8L2JvZHk+CiAgIDwvaHRtbD4K ------_=_NextPart_001_01C95FD6.705C79DE Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------_=_NextPart_001_01C95FD6.705C79DE-- From netconf-bounces@ietf.org Tue Dec 16 15:32:06 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 07BFE3A68E0; Tue, 16 Dec 2008 15:32:06 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3878028C1C3 for ; Tue, 16 Dec 2008 15:32:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.141 X-Spam-Level: X-Spam-Status: No, score=-5.141 tagged_above=-999 required=5 tests=[AWL=1.457, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q25gXzxpVkCJ for ; Tue, 16 Dec 2008 15:31:59 -0800 (PST) Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [217.115.75.233]) by core3.amsl.com (Postfix) with ESMTP id E5CAC3A68A9 for ; Tue, 16 Dec 2008 15:31:53 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id mBGNVhLG018640 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 17 Dec 2008 00:31:43 +0100 Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id mBGNVevC008131; Wed, 17 Dec 2008 00:31:42 +0100 Received: from DEMUEXC005.nsn-intra.net ([10.150.128.17]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Wed, 17 Dec 2008 00:31:40 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C95FD6.705C79DE" Date: Wed, 17 Dec 2008 00:31:35 +0100 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Approval of NETCONF Charter Update WAS:RE: Request for charter change Thread-Index: AclbdHZf/bbsfx3rRWKprcOcWgquqgAAfHCQAA4llOAAAVA50AAs1ErwADaiqvAApMv7EA== References: From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Romascanu, Dan (Dan)" , X-OriginalArrivalTime: 16 Dec 2008 23:31:40.0484 (UTC) FILETIME=[72777040:01C95FD6] Cc: netconf@ietf.org Subject: [Netconf] Approval of NETCONF Charter Update WAS:RE: Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C95FD6.705C79DE Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Dan, Ron, we think we have WG consensus now for the updated=20 charter text.=20 We would like to ask you to bring it to the IESG telechat=20 on 12/18. Thanks. Bert & Mehmet ------_=_NextPart_001_01C95FD6.705C79DE Content-Type: text/plain; name="081216-NETCONF-Charter.txt" Content-Transfer-Encoding: base64 Content-Description: 081216-NETCONF-Charter.txt Content-Disposition: attachment; filename="081216-NETCONF-Charter.txt" TGFzdCBNb2RpZmllZDogMjAwOC0xMi0xNg0KDQpBZGRpdGlvbmFsIGluZm9ybWF0aW9uIGlzIGF2 YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy93Zy9uZXRjb25mDQoNCkNoYWlyKHMpOg0KQmVydCBX aWpuZW4gPGJlcnRpZXRmQGJ3aWpuZW4ubmV0Pg0KTWVobWV0IEVyc3VlIDxtZWhtZXQuZXJzdWVA bnNuLmNvbT4NCg0KDQpPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IEFyZWEgRGlyZWN0b3Iocyk6 DQpEYW4gUm9tYXNjYW51IDxkcm9tYXNjYUBhdmF5YS5jb20+DQpSb25hbGQgQm9uaWNhIDxyYm9u aWNhQGp1bmlwZXIubmV0Pg0KDQpPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IEFyZWEgQWR2aXNv cjoNCkRhbiBSb21hc2NhbnUgPGRyb21hc2NhQGF2YXlhLmNvbT4NCg0KVGVjaG5pY2FsIEFkdmlz b3Iocyk6DQpDaGFybGllIEthdWZtYW4gPGNoYXJsaWVrQG1pY3Jvc29mdC5jb20+DQoNCk1haWxp bmcgTGlzdHM6DQpHZW5lcmFsIERpc2N1c3Npb246IG5ldGNvbmZAaWV0Zi5vcmcNClRvIFN1YnNj cmliZTogbmV0Y29uZi1yZXF1ZXN0QGlldGYub3JnDQpJbiBCb2R5OiBpbiBtc2cgYm9keTogc3Vi c2NyaWJlDQpBcmNoaXZlOiBodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvbmV0 Y29uZi8NCg0KRGVzY3JpcHRpb24gb2YgV29ya2luZyBHcm91cDoNCkNoYXJsaWUgS2F1Zm1hbiBp cyBUZWNobmljYWwgQWR2aXNvciBmb3IgU2VjdXJpdHkgTWF0dGVycw0KDQpDb25maWd1cmF0aW9u IG9mIG5ldHdvcmtzIG9mIGRldmljZXMgaGFzIGJlY29tZSBhIGNyaXRpY2FsIHJlcXVpcmVtZW50 DQpmb3Igb3BlcmF0b3JzIGluIHRvZGF5J3MgaGlnaGx5IGludGVyb3BlcmFibGUgbmV0d29ya3Mu IE9wZXJhdG9ycyBmcm9tDQpsYXJnZSB0byBzbWFsbCBoYXZlIGRldmVsb3BlZCB0aGVpciBvd24g bWVjaGFuaXNtcyBvciB1c2VkIHZlbmRvcg0Kc3BlY2lmaWMgbWVjaGFuaXNtcyB0byB0cmFuc2Zl ciBjb25maWd1cmF0aW9uIGRhdGEgdG8gYW5kIGZyb20gYQ0KZGV2aWNlLCBhbmQgZm9yIGV4YW1p bmluZyBkZXZpY2Ugc3RhdGUgaW5mb3JtYXRpb24gd2hpY2ggbWF5IGltcGFjdA0KdGhlIGNvbmZp Z3VyYXRpb24uIEVhY2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBtYXkgYmUgZGlmZmVyZW50IGluDQp2 YXJpb3VzIGFzcGVjdHMsIHN1Y2ggYXMgc2Vzc2lvbiBlc3RhYmxpc2htZW50LCB1c2VyIGF1dGhl bnRpY2F0aW9uLA0KY29uZmlndXJhdGlvbiBkYXRhIGV4Y2hhbmdlLCBhbmQgZXJyb3IgcmVzcG9u c2VzLg0KDQpUaGUgTkVUQ09ORiBXb3JraW5nIEdyb3VwIGlzIGNoYXJ0ZXJlZCB0byBwcm9kdWNl IGEgcHJvdG9jb2wgc3VpdGFibGUNCmZvciBuZXR3b3JrIGNvbmZpZ3VyYXRpb24sIHdpdGggdGhl IGZvbGxvd2luZyBjaGFyYWN0ZXJpc3RpY3M6DQoNCi0gUHJvdmlkZXMgcmV0cmlldmFsIG1lY2hh bmlzbXMgd2hpY2ggY2FuIGRpZmZlcmVudGlhdGUgYmV0d2Vlbg0KICBjb25maWd1cmF0aW9uIGRh dGEgYW5kIG5vbi1jb25maWd1cmF0aW9uIGRhdGENCi0gSXMgZXh0ZW5zaWJsZSBlbm91Z2ggc28g dGhhdCB2ZW5kb3JzIHdpbGwgcHJvdmlkZSBhY2Nlc3MgdG8gYWxsDQogIGNvbmZpZ3VyYXRpb24g ZGF0YSBvbiB0aGUgZGV2aWNlIHVzaW5nIGEgc2luZ2xlIHByb3RvY29sDQotIEhhcyBhIHByb2dy YW1tYXRpYyBpbnRlcmZhY2UgKGF2b2lkcyBzY3JlZW4gc2NyYXBpbmcgYW5kDQogIGZvcm1hdHRp bmctcmVsYXRlZCBjaGFuZ2VzIGJldHdlZW4gcmVsZWFzZXMpDQotIFVzZXMgYSB0ZXh0dWFsIGRh dGEgcmVwcmVzZW50YXRpb24sIHRoYXQgY2FuIGJlIGVhc2lseSBtYW5pcHVsYXRlZA0KICB1c2lu ZyBub24tc3BlY2lhbGl6ZWQgdGV4dCBtYW5pcHVsYXRpb24gdG9vbHMuDQotIFN1cHBvcnRzIGlu dGVncmF0aW9uIHdpdGggZXhpc3RpbmcgdXNlciBhdXRoZW50aWNhdGlvbiBtZXRob2RzDQotIFN1 cHBvcnRzIGludGVncmF0aW9uIHdpdGggZXhpc3RpbmcgY29uZmlndXJhdGlvbiBkYXRhYmFzZSBz eXN0ZW1zDQotIFN1cHBvcnRzIG5ldHdvcmsgd2lkZSBjb25maWd1cmF0aW9uIHRyYW5zYWN0aW9u cyAod2l0aCBmZWF0dXJlcyBzdWNoDQogIGFzIGxvY2tpbmcgYW5kIHJvbGxiYWNrIGNhcGFiaWxp dHkpDQotIElzIGFzIHRyYW5zcG9ydC1pbmRlcGVuZGVudCBhcyBwb3NzaWJsZQ0KLSBQcm92aWRl cyBzdXBwb3J0IGZvciBhc3luY2hyb25vdXMgbm90aWZpY2F0aW9ucy4NCg0KVGhlIE5FVENPTkYg cHJvdG9jb2wgaXMgdXNpbmcgWE1MIGZvciBkYXRhIGVuY29kaW5nIHB1cnBvc2VzLCBiZWNhdXNl DQpYTUwgaXMgYSB3aWRlbHkgZGVwbG95ZWQgc3RhbmRhcmQgd2hpY2ggaXMgc3VwcG9ydGVkIGJ5 IGEgbGFyZ2UgbnVtYmVyDQpvZiBhcHBsaWNhdGlvbnMuDQoNClRoZSBORVRDT05GIHByb3RvY29s IHNob3VsZCBiZSBpbmRlcGVuZGVudCBvZiB0aGUgZGF0YSBkZWZpbml0aW9uDQpsYW5ndWFnZSBh bmQgZGF0YSBtb2RlbHMgdXNlZCB0byBkZXNjcmliZSBjb25maWd1cmF0aW9uIGFuZCBzdGF0ZQ0K ZGF0YS4NCg0KSG93ZXZlciwgdGhlIGF1dGhvcml6YXRpb24gbW9kZWwgdXNlZCBpbiB0aGUgcHJv dG9jb2wgaXMgZGVwZW5kZW50IG9uDQp0aGUgZGF0YSBtb2RlbC4gQWx0aG91Z2ggdGhlc2UgaXNz dWVzIG11c3QgYmUgZnVsbHkgYWRkcmVzc2VkIHRvDQpkZXZlbG9wIHN0YW5kYXJkIGRhdGEgbW9k ZWxzLCBvbmx5IGEgc21hbGwgcGFydCBvZiB0aGlzIHdvcmsgd2lsbCBiZQ0KaW5pdGlhbGx5IGFk ZHJlc3NlZC4gVGhpcyBncm91cCB3aWxsIHNwZWNpZnkgcmVxdWlyZW1lbnRzIGZvciBzdGFuZGFy ZA0KZGF0YSBtb2RlbHMgaW4gb3JkZXIgdG8gZnVsbHkgc3VwcG9ydCB0aGUgTkVUQ09ORiBwcm90 b2NvbCwgc3VjaCBhczoNCg0KLSBpZGVudGlmaWNhdGlvbiBvZiBwcmluY2lwYWxzLCBzdWNoIGFz IHVzZXIgbmFtZXMgb3IgZGlzdGluZ3Vpc2hlZCBuYW1lcw0KLSBtZWNoYW5pc20gdG8gZGlzdGlu Z3Vpc2ggY29uZmlndXJhdGlvbiBmcm9tIG5vbi1jb25maWd1cmF0aW9uIGRhdGENCi0gWE1MIG5h bWVzcGFjZSBjb252ZW50aW9ucw0KLSBYTUwgdXNhZ2UgZ3VpZGVsaW5lcw0KDQpUaGUgaW5pdGlh bCB3b3JrIHN0YXJ0ZWQgaW4gMjAwMyBhbmQgaGFzIGFscmVhZHkgYmVlbiBjb21wbGV0ZWQgYW5k IHdhcw0KcmVzdHJpY3RlZCB0byBmb2xsb3dpbmcgaXRlbXM6DQoNCiAgYSkgTkVUQ09ORiBQcm90 b2NvbCBTcGVjaWZpY2F0aW9uLCB3aGljaCBkZWZpbmVzIHRoZSBvcGVyYXRpb25hbCBtb2RlbCwN CiAgICAgcHJvdG9jb2wgb3BlcmF0aW9ucywgdHJhbnNhY3Rpb24gbW9kZWwsIGRhdGEgbW9kZWwg cmVxdWlyZW1lbnRzLA0KICAgICBzZWN1cml0eSByZXF1aXJlbWVudHMsIGFuZCB0cmFuc3BvcnQg bGF5ZXIgcmVxdWlyZW1lbnRzLg0KICBiKSBORVRDT05GIG92ZXIgU1NIIFNwZWNpZmljYXRpb246 IEltcGxlbWVudGF0aW9uIE1hbmRhdG9yeSwNCiAgYykgTkVUQ09ORiBvdmVyIEJFRVAgU3BlY2lm aWNhdGlvbjogSW1wbGVtZW50YXRpb24gT3B0aW9uYWwsDQogIGQpIE5FVENPTkYgb3ZlciBTT0FQ IFNwZWNpZmljYXRpb246IEltcGxlbWVudGF0aW9uIE9wdGlvbmFsLg0KDQogIFRoZXNlIGRvY3Vt ZW50cyBkZWZpbmUgaG93IHRoZSBORVRDT05GIHByb3RvY29sIGlzIHVzZWQgd2l0aCBlYWNoDQog IHRyYW5zcG9ydCBwcm90b2NvbCBzZWxlY3RlZCBieSB0aGUgd29ya2luZyBncm91cCwgYW5kIGhv dyBpdCBtZWV0cw0KICB0aGUgc2VjdXJpdHkgYW5kIHRyYW5zcG9ydCBsYXllciByZXF1aXJlbWVu dHMgb2YgdGhlIE5FVENPTkYgUHJvdG9jb2wNCiAgU3BlY2lmaWNhdGlvbi4NCg0KICBlKSBORVRD T05GIE5vdGlmaWNhdGlvbiBTcGVjaWZpY2F0aW9uLCB3aGljaCBkZWZpbmVzIG1lY2hhbmlzbXMg dGhhdA0KICAgICBwcm92aWRlIGFuIGFzeW5jaHJvbm91cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBk ZWxpdmVyeSBzZXJ2aWNlIGZvcg0KICAgICB0aGUgTkVUQ09ORiBwcm90b2NvbC4gIE5FVENPTkYg Tm90aWZpY2F0aW9uIGlzIGFuIG9wdGlvbmFsDQogICAgIGNhcGFiaWxpdHkgYnVpbHQgb24gdG9w IG9mIHRoZSBiYXNlIE5FVENPTkYgZGVmaW5pdGlvbiBhbmQNCiAgICAgcHJvdmlkZXMgdGhlIGNh cGFiaWxpdGllcyBhbmQgb3BlcmF0aW9ucyBuZWNlc3NhcnkgdG8gc3VwcG9ydA0KICAgICB0aGlz IHNlcnZpY2UuDQoNCiAgVGhlIE5FVENPTkYgbm90aWZpY2F0aW9uIHNwZWNpZmljYXRpb24gaGFz IGJlZW4gZmluaXNoZWQgbm93IGFzIHdlbGwuDQoNCkluIHRoZSBjdXJyZW50IHBoYXNlIG9mIHRo ZSBpbmNyZW1lbnRhbCBkZXZlbG9wbWVudCBvZiBORVRDT05GIHRoZQ0Kd29ya2dyb3VwIHdpbGwg Zm9jdXMgb24gZm9sbG93aW5nIGl0ZW1zOg0KDQoxLiBGaW5lLWdyYWluIGxvY2tpbmc6IFRoZSBi YXNlIE5FVENPTkYgcHJvdG9jb2wgb25seSBwcm92aWRlcyBhIGxvY2sNCiAgIGZvciB0aGUgZW50 aXJlIGNvbmZpZ3VyYXRpb24gZGF0YXN0b3JlLCB3aGljaCBpcyBub3QgZGVlbWVkIHRvIG1lZXQN CiAgIGltcG9ydGFudCBvcGVyYXRpb25hbCBhbmQgc2VjdXJpdHkgcmVxdWlyZW1lbnRzLiBUaGUg TkVUQ09ORiB3b3JraW5nDQogICBncm91cCB3aWxsIHByb2R1Y2UgYSBzdGFuZGFyZHMtdHJhY2sg UkZDIHNwZWNpZnlpbmcgYSBtZWNoYW5pc20gZm9yDQogICBmaW5lLWdyYWluIGxvY2tpbmcgb2Yg dGhlIE5FVENPTkYgY29uZmlndXJhdGlvbiBkYXRhc3RvcmUuDQoNCjIuIE5FVENPTkYgbW9uaXRv cmluZzogSXQgaXMgY29uc2lkZXJlZCBiZXN0IHByYWN0aWNlIGZvciBJRVRGIHdvcmtpbmcNCiAg IGdyb3VwcyB0byBpbmNsdWRlIG1hbmFnZW1lbnQgb2YgdGhlaXIgcHJvdG9jb2xzIHdpdGhpbiB0 aGUgc2NvcGUgb2YNCiAgIHRoZSBzb2x1dGlvbiB0aGV5IGFyZSBwcm92aWRpbmcuIFRoZSBORVRD T05GIHdvcmtpbmcgZ3JvdXAgd2lsbA0KICAgcHJvZHVjZSBhIHN0YW5kYXJkcy10cmFjayBSRkMg d2l0aCBtZWNoYW5pc21zIGFsbG93aW5nIE5FVENPTkYNCiAgIGl0c2VsZiB0byBiZSB1c2VkIHRv IG1vbml0b3Igc29tZSBhc3BlY3RzIG9mIE5FVENPTkYgb3BlcmF0aW9uLg0KDQozLiBTY2hlbWEg YWR2ZXJ0aXNlbWVudDogQ3VycmVudGx5IHRoZSBORVRDT05GIHByb3RvY29sIGlzIGFibGUgdG8N CiAgIGFkdmVydGlzZSB3aGljaCBwcm90b2NvbCBmZWF0dXJlcyBhcmUgc3VwcG9ydGVkIG9uIGEg cGFydGljdWxhcg0KICAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMg Y3VycmVudGx5IG5vIHdheSB0byBkaXNjb3Zlcg0KICAgd2hpY2ggWE1MIFNjaGVtYSBhcmUgc3Vw cG9ydGVkIG9uIHRoZSBkZXZpY2UuIFRoZSBORVRDT05GIHdvcmtpbmcNCiAgIGdyb3VwIHdpbGwg cHJvZHVjZSBhIHN0YW5kYXJkcy10cmFjayBSRkMgd2l0aCBtZWNoYW5pc21zIG1ha2luZyB0aGlz DQogICBkaXNjb3ZlcnkgcG9zc2libGUgKHRoaXMgaXRlbSBtYXkgYmUgbWVyZ2VkIHdpdGggIk5F VENPTkYgbW9uaXRvcmluZyINCiAgIGludG8gYSBzaW5nbGUgZG9jdW1lbnQpLg0KDQogICBOb3Rl OiBUaGUgc2NoZW1hLWFkdmVydGlzZW1lbnQgbWF0ZXJpYWwgaGFzIGJlZW4gbWVyZ2VkIGludG8g dGhlDQogICBORVRDT05GIG1vbml0b3JpbmcgZG9jdW1lbnQgYmFzZWQgb24gV0cgY29uc2Vuc3Vz Lg0KDQo0LiBORVRDT05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmll bmNlIHRoZXJlIGlzIGENCiAgIG5lZWQgZm9yIGEgc3RhbmRhcmRzIHRyYWNrIGRvY3VtZW50IHRv IGRlZmluZSBORVRDT05GIG92ZXIgVExTIGFzIGFuDQogICBvcHRpb25hbCB0cmFuc3BvcnQgZm9y IHRoZSBORVRDT05GIHByb3RvY29sLg0KDQo1LiBORVRDT05GIGRlZmF1bHQgaGFuZGxpbmc6IE5F VENPTkYgdG9kYXkgZG9lcyBub3QgZGVmaW5lIHdoZXRoZXINCiAgIGRlZmF1bHQgdmFsdWVzIHNo b3VsZCBiZSByZXR1cm5lZCBieSB0aGUgc2VydmVyIGluIHJlcGxpZXMNCiAgIHRvIHJlcXVlc3Rz IGZvciByZWFkaW5nIGNvbmZpZ3VyYXRpb24gYW5kIHN0YXRlIGRhdGEuIERpZmZlcmVudA0KICAg Y2xpZW50cyBoYXZlIGRpZmZlcmVudCBuZWVkcyB0byByZWNlaXZlIG9yIG5vdCB0byByZWNlaXZl DQogICBkZWZhdWx0IGRhdGEuIFRoZSBORVRDT05GIHdvcmtpbmcgZ3JvdXAgd2lsbCBwcm9kdWNl IGENCiAgIHN0YW5kYXJkcy10cmFjayBSRkMgZGVmaW5pbmcgYSBtZWNoYW5pc20gdGhhdCBhbGxv d3MNCiAgIE5FVENPTkYgY2xpZW50cyB0byBjb250cm9sIHdoZXRoZXIgZGVmYXVsdCBkYXRhIGlz IHJldHVybmVkDQogICBieSB0aGUgbmV0Y29uZiBzZXJ2ZXIuDQoNCjYuIE5FVENPTkYgaW1wbGVt ZW50YXRpb25zIGhhdmUgc2hvd24gdGhhdCB0aGUgc3BlY2lmaWNhdGlvbiBpbiBSRkM0NzQxDQog ICBpcyBub3QgMTAwJSBjbGVhciBhbmQgaGFzIGxlYWQgdG8gZGlmZmVyZW50IGludGVycHJldGF0 aW9ucyBhbmQgaW1wbGVtZW50YXRpb25zLiANCiAgIEFsc28gc29tZSBlcnJvcnMgaGF2ZSBiZWVu IHVuY292ZXJlZC4gU28gdGhlIFdHIHdpbGwgZG8gYW4gcmZjNDc0MWJpcyB3aXRoDQogICBmb2xs b3dpbmcgY29uc3RyYWludHM6DQoNCiAgICAgLSBidWcgZml4ZXMgYXJlIHRvIGJlIGRvbmUNCiAg ICAgLSBjbGFyaWZpY2F0aW9ucyBjYW4gYmUgZG9uZQ0KICAgICAtIGV4dGVuc2lvbnMgY2FuIGJl IGRvbmUgb25seSB3aGVuIG5lZWRlZCB0byBmaXggYnVncyANCiAgICAgICBvciBpbmNvbnNpc3Rl bmNpZXMgKGkuZS4gd2UgYXJlIG5vdCBkb2luZyBhIE5FVENPTkYgVjIpDQogICAgIC0gVGhlIHdv cmsgY2FuIGJlIHN0YXJ0ZWQgYmFzZWQgb24gdGhlIGRpc2N1c3Npb24gaW4gSUVURiAjNzMgKHNl ZQ0KICAgICAgICBodHRwOi8vd3d3LmlldGYub3JnL3Byb2NlZWRpbmdzLzA4bm92L3NsaWRlcy9u ZXRjb25mLTMucGRmKS4NCg0KICAgTm90ZTogQSB0ZWNobmljYWwgZXJyYXRhIGhhcyBiZWVuIHBv c3RlZCBvbiByZmM0NzQyLiBJZiB0aGUgd29yayBvbg0KICAgcmZjNDc0MWJpcyB1bmNvdmVycyBh bnkgYWRkaXRpb25hbCBmaXhlcy9jbGFyaWZpY2F0aW9ucyB0aGF0IG5lZWQNCiAgIHRvIGJlIG1h ZGUgdG8gcmZjNDc0MiwgdGhlIFdHIG1heSBjb25zaWRlciB0byBhbHNvIGRvIGEgcmZjNDc0MmJp cw0KICAgYXMgcGFydCBvZiB0aGlzIHdvcmstaXRlbS4NCg0KVGhlIGZvbGxvd2luZyBpdGVtcyBo YXZlIGJlZW4gaWRlbnRpZmllZCBhcyBpbXBvcnRhbnQgYnV0IGFyZSBjdXJyZW50bHkNCm5vdCBj b25zaWRlcmVkIGluIHNjb3BlIGZvciByZS1jaGFydGVyaW5nIGFuZCBtYXkgYmUgY2FuZGlkYXRl cyBmb3Igd29yaw0Kd2hlbiB0aGVyZSBpcyBjb21tdW5pdHkgY29uc2Vuc3VzIHRvIHRha2UgdGhl bSBvbjoNCg0KLSBORVRDT05GIE5vdGlmaWNhdGlvbiBjb250ZW50DQotIEFjY2VzcyBDb250cm9s IHJlcXVpcmVtZW50cw0KLSBORVRDT05GIGFjY2VzcyB0byBTTUktYmFzZWQgTUlCIGRhdGENCg0K DQpHb2FscyBhbmQgTWlsZXN0b25lczoNCkRvbmUgICBXb3JraW5nIEdyb3VwIGZvcm1lZA0KRG9u ZSAgIFN1Ym1pdCBpbml0aWFsIE5ldGNvbmYgUHJvdG9jb2wgZHJhZnQNCkRvbmUgICBTdWJtaXQg aW5pdGlhbCBOZXRjb25mIG92ZXIgKHRyYW5zcG9ydC1UQkQpIGRyYWZ0DQpEb25lICAgQmVnaW4g V29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRjb25mIFByb3RvY29sIGRyYWZ0DQpE b25lICAgQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRjb25mIG92ZXIg KHRyYW5zcG9ydC1UQkQpDQogICAgICAgICAgICBkcmFmdA0KRG9uZSAgIFN1Ym1pdCBmaW5hbCB2 ZXJzaW9uIG9mIHRoZSBOZXRjb25mIFByb3RvY29sIGRyYWZ0IHRvIHRoZSBJRVNHDQpEb25lICAg U3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBTT0FQIGRyYWZ0IHRvIHRo ZSBJRVNHDQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBC RUVQIGRyYWZ0IHRvIHRoZSBJRVNHDQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhl IE5ldGNvbmYgb3ZlciBTU0ggZHJhZnQgdG8gdGhlIElFU0cNCkRvbmUgICBVcGRhdGUgY2hhcnRl cg0KRG9uZSAgIFN1Ym1pdCBmaXJzdCB2ZXJzaW9uIG9mIE5FVENPTkYgTm90aWZpY2F0aW9ucyBk b2N1bWVudA0KRG9uZSAgIEJlZ2luIFdHTEMgb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3Vt ZW50DQpEb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25z IGRvY3VtZW50IHRvIElFU0cNCiAgICAgICAgICAgIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bv c2VkIFN0YW5kYXJkDQpEb25lICAgLTAwIGRyYWZ0IGZvciBmaW5lIEdyYWluIExvY2tpbmcNCkRv bmUgICAtMDAgZHJhZnQgZm9yIE5FVENPTkYgb3ZlciBUTFMNCkRvbmUgICAtMDAgZHJhZnQgZm9y IE5FVENPTkYgTW9uaXRvcmluZw0KRG9uZSAgIC0wMCBkcmFmdCBmb3IgU2NoZW1hIEFkdmVydGlz ZW1lbnQNCkRvbmUgICBFYXJseSBSZXZpZXcgb2YgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFwcHJv YWNoIChmb3IgTkVUQ09ORiBvdmVyDQogICAgICAgICAgICBUTFMpIHdpdGggdGhlIHNlY3VyaXR5 IGNvbW11bml0eSBhdCBJRVRGIDcxDQpOLkEuICAgICBXRyBMYXN0IENhbGwgb24gU2NoZW1hIEFk dmVydGlzZW1lbnQgYWZ0ZXIgSUVURjcyDQogICAgICAgICAgICBTY2hlbWEgQWR2ZXJ0aXNlbWVu dCBoYXMgYmVlbiBtZXJnZWQgaW50byBNb25pdG9yaW5nDQpEb25lICAgIFdHIExhc3QgQ2FsbCBv biBORVRDT05GIG92ZXIgVExTIGFmdGVyIElFVEY3Mg0KRG9uZSAgICBOZXRjb25mIG92ZXIgVExT IHRvIElFU0cgZm9yIGNvbnNpZGVyYXRpb24gYXMgUHJvcG9zZWQgU3RhbmRhcmRzDQpEZWMgMjAw OCAgV0cgTGFzdCBDYWxsIG9uIEZpbmUgR3JhaW4gTG9ja2luZyBhZnRlciBJRVRGNzMNCkRlYyAy MDA4ICBTZW5kIFBhcnRpYWwgTG9ja2luZyB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9uIGFzIFBy b3Bvc2VkIFN0YW5kYXJkcw0KSmFuIDIwMDkgICBJbml0aWFsIFdHIGRyYWZ0IGZvciB3aXRoLWRl ZmF1bHRzIGNhcGFiaWxpdHkNCkZlYiAyMDA5ICAgSW5pdGlhbCBXRyBkcmFmdCBmb3IgcmZjNDc0 MWJpcw0KTWFyIDIwMDkgICBXRyBMYXN0IENhbGwgb24gTkVUQ09ORiBNb25pdG9yaW5nIGFmdGVy IElFVEY3Mw0KQXByIDIwMDkgICBXRyBMYXN0IENhbGwgb24gcmZjNDc0MWJpcw0KQXByIDIwMDkg ICBXRyBMYXN0IENhbGwgb24gd2l0aC1kZWZhdWx0cw0KSnVuIDIwMDkgICByZmM0NzQxYmlzIHRv IElFU0cgZm9yIGNvbnNpZGVyYXRpb25zIGFzIFByb3Bvc2VkIFN0YW5kYXJkDQpKdW4gMjAwOSAg IHdpdGgtZGVmYXVsdHMgY2FwYWJpbGl0eSB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9ucyBhcyBQ cm9wb3NlZCBTdGFuZGFyZA0KDQoNCg0K ------_=_NextPart_001_01C95FD6.705C79DE Content-Type: text/html; name="Diff WGCharter-20080821-WGCharter-20081216.htm" Content-Transfer-Encoding: base64 Content-Description: Diff WGCharter-20080821-WGCharter-20081216.htm Content-Disposition: attachment; filename="Diff WGCharter-20080821-WGCharter-20081216.htm" CjwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgWEhUTUwgMS4wIFRyYW5zaXRpb25h bC8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRtbDEvRFREL3hodG1sMS10cmFuc2l0aW9u YWwuZHRkIj4gCjwhLS0gR2VuZXJhdGVkIGJ5IHJmY2RpZmYgMS4zNTogcmZjZGlmZiAgLS0+IAo8 IS0tIDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5zaXRp b25hbCIgPiAtLT4KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAyLjYuMjQtMS02ODYgIzEg U01QIFRodSBNYXkgOCAwMjoxNjozOSBVVEMgMjAwOCBpNjg2IEdOVS9MaW51eCAtLT4gCjwhLS0g VXNpbmcgYXdrOiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDMuMS41IC0tPiAKPCEtLSBVc2luZyBk aWZmOiAvdXNyL2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAyLjguMSAtLT4gCjwhLS0g VXNpbmcgd2RpZmY6IC91c3IvYmluL3dkaWZmOiBHTlUgd2RpZmYgMC41IC0tPiAKPGh0bWw+IAo8 aGVhZD4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0 bWw7IGNoYXJzZXQ9aXNvLTg4NTktMSIgLz4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1T dHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2NzcyIgLz4gCiAgPHRpdGxlPkRpZmY6IDA4MDgyMS1O RVRDT05GLWNoYXJ0ZXIudHh0IC0gMDgxMjE2LU5FVENPTkYtQ2hhcnRlci50eHQ8L3RpdGxlPiAK ICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAKICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBt YXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0 ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9w OyBmb250LXNpemU6IDAuODZlbTt9IAogICAgdGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9 IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTogMC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9u dC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29s b3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAg IC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tn cm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAuaW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhG RjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQg ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1j b2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAog ICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6 ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlw c2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJpZ2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog I0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAog ICAgLnJibG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0 IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBi YWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0 aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IAogIDwvc3R5bGU+ IAo8L2hlYWQ+IAo8Ym9keSA+IAogIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBj ZWxsc3BhY2luZz0iMCI+IAogIDx0ciBiZ2NvbG9yPSJvcmFuZ2UiPjx0aD48L3RoPjx0aD4mbmJz cDswODA4MjEtTkVUQ09ORi1jaGFydGVyLnR4dCZuYnNwOzwvdGg+PHRoPiA8L3RoPjx0aD4mbmJz cDswODEyMTYtTkVUQ09ORi1DaGFydGVyLnR4dCZuYnNwOzwvdGg+PHRoPjwvdGg+PC90cj4gCiAg ICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDEiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5MYXN0 IE1vZGlmaWVkOiA8c3BhbiBjbGFzcz0iZGVsZXRlIj4yMDA4LTA4LTIxPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5MYXN0IE1vZGlmaWVkOiA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4yMDA4LTEyLTE2PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPkFkZGl0aW9uYWwgaW5mb3JtYXRpb24gaXMgYXZhaWxhYmxlIGF0IHRvb2xz LmlldGYub3JnL3dnL25ldGNvbmY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BZGRp dGlvbmFsIGluZm9ybWF0aW9uIGlzIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy93Zy9uZXRj b25mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMiIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPkNoYWlyKHMpOjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+IyBCZXJ0IFdpam5lbiAmbHQ7YmVydGlldGZAYndp am5lbi5uZXQmZ3Q7PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMyIgLz48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IE1laG1ldCBFcnN1 ZSAmbHQ7bWVobWV0LmVyc3VlQG5zbi5jb20mZ3Q7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkNoYWlyKHMpOjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+QmVydCBXaWpuZW4gJmx0 O2JlcnRpZXRmQGJ3aWpuZW4ubmV0Jmd0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+TWVobWV0IEVyc3VlICZsdDttZWhtZXQuZXJzdWVAbnNuLmNvbSZndDs8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPk9wZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgQXJlYSBEaXJl Y3RvcihzKTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5PcGVyYXRpb25zIGFuZCBN YW5hZ2VtZW50IEFyZWEgRGlyZWN0b3Iocyk6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNCIgLz48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IERhbiBSb21hc2Nh bnUgJmx0O2Ryb21hc2NhQGF2YXlhLmNvbSZndDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+RGFuIFJvbWFzY2FudSAmbHQ7ZHJvbWFzY2FAYXZheWEuY29tJmd0OzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNz PSJkZWxldGUiPiM8L3NwYW4+IFJvbmFsZCBCb25pY2EgJmx0O3Jib25pY2FAanVuaXBlci5uZXQm Z3Q7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPlJvbmFsZCBCb25pY2EgJmx0O3Ji b25pY2FAanVuaXBlci5uZXQmZ3Q7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBBcmVhIEFkdmlzb3I6PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+T3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudCBBcmVh IEFkdmlzb3I6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiM8L3NwYW4+IERhbiBSb21hc2NhbnUgJmx0O2Ryb21hc2NhQGF2 YXlhLmNvbSZndDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RGFuIFJvbWFzY2Fu dSAmbHQ7ZHJvbWFzY2FAYXZheWEuY29tJmd0OzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPlRlY2huaWNhbCBBZHZpc29yKHMpOjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPlRlY2huaWNhbCBBZHZpc29yKHMpOjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MDYiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4jPC9zcGFuPiBD aGFybGllIEthdWZtYW4gJmx0O2NoYXJsaWVrQG1pY3Jvc29mdC5jb20mZ3Q7PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPkNoYXJsaWUgS2F1Zm1hbiAmbHQ7Y2hhcmxpZWtAbWljcm9z b2Z0LmNvbSZndDs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5NYWlsaW5nIExpc3RzOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPk1haWxpbmcg TGlzdHM6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPkdlbmVyYWwgRGlzY3Vzc2lvbjogbmV0Y29uZkBpZXRmLm9yZzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPkdlbmVyYWwgRGlzY3Vzc2lvbjogbmV0Y29uZkBpZXRmLm9yZzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5UbyBTdWJz Y3JpYmU6IG5ldGNvbmYtcmVxdWVzdEBpZXRmLm9yZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPlRvIFN1YnNjcmliZTogbmV0Y29uZi1yZXF1ZXN0QGlldGYub3JnPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkluIEJvZHk6IGluIG1z ZyBib2R5OiBzdWJzY3JpYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5JbiBCb2R5 OiBpbiBtc2cgYm9keTogc3Vic2NyaWJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFyY2hpdmU6IGh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1h cmNoaXZlL3dlYi9uZXRjb25mLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkFyY2hp dmU6IGh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9uZXRjb25mLzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMDciIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ RGVzY3JpcHRpb24gb2YgV29ya2luZyBHcm91cDo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij5EZXNjcmlwdGlvbiBvZiBXb3JraW5nIEdyb3VwOjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5DaGFybGllIEthdWZtYW4gaXMgVGVjaG5p Y2FsIEFkdmlzb3IgZm9yIFNlY3VyaXR5IE1hdHRlcnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij5DaGFybGllIEthdWZtYW4gaXMgVGVjaG5pY2FsIEFkdmlzb3IgZm9yIFNlY3VyaXR5 IE1hdHRlcnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkNvbmZpZ3VyYXRpb24gb2YgbmV0 d29ya3Mgb2YgZGV2aWNlcyBoYXMgYmVjb21lIGEgY3JpdGljYWwgcmVxdWlyZW1lbnQ8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Db25maWd1cmF0aW9uIG9mIG5ldHdvcmtzIG9mIGRl dmljZXMgaGFzIGJlY29tZSBhIGNyaXRpY2FsIHJlcXVpcmVtZW50PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPmZvciBvcGVyYXRvcnMgaW4gdG9k YXkncyBoaWdobHkgaW50ZXJvcGVyYWJsZSBuZXR3b3Jrcy4gT3BlcmF0b3JzIGZyb208L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5mb3Igb3BlcmF0b3JzIGluIHRvZGF5J3MgaGlnaGx5 IGludGVyb3BlcmFibGUgbmV0d29ya3MuIE9wZXJhdG9ycyBmcm9tPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPmxhcmdlIHRvIHNtYWxsIGhhdmUg ZGV2ZWxvcGVkIHRoZWlyIG93biBtZWNoYW5pc21zIG9yIHVzZWQgdmVuZG9yPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+bGFyZ2UgdG8gc21hbGwgaGF2ZSBkZXZlbG9wZWQgdGhlaXIg b3duIG1lY2hhbmlzbXMgb3IgdXNlZCB2ZW5kb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+c3BlY2lmaWMgbWVjaGFuaXNtcyB0byB0cmFuc2Zl ciBjb25maWd1cmF0aW9uIGRhdGEgdG8gYW5kIGZyb20gYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPnNwZWNpZmljIG1lY2hhbmlzbXMgdG8gdHJhbnNmZXIgY29uZmlndXJhdGlvbiBk YXRhIHRvIGFuZCBmcm9tIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ZGV2aWNlLCBhbmQgZm9yIGV4YW1pbmluZyBkZXZpY2Ugc3RhdGUgaW5m b3JtYXRpb24gd2hpY2ggbWF5IGltcGFjdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PmRldmljZSwgYW5kIGZvciBleGFtaW5pbmcgZGV2aWNlIHN0YXRlIGluZm9ybWF0aW9uIHdoaWNo IG1heSBpbXBhY3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+dGhlIGNvbmZpZ3VyYXRpb24uIEVhY2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBtYXkg YmUgZGlmZmVyZW50IGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+dGhlIGNvbmZp Z3VyYXRpb24uIEVhY2ggb2YgdGhlc2UgbWVjaGFuaXNtcyBtYXkgYmUgZGlmZmVyZW50IGluPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPnZhcmlv dXMgYXNwZWN0cywgc3VjaCBhcyBzZXNzaW9uIGVzdGFibGlzaG1lbnQsIHVzZXIgYXV0aGVudGlj YXRpb24sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+dmFyaW91cyBhc3BlY3RzLCBz dWNoIGFzIHNlc3Npb24gZXN0YWJsaXNobWVudCwgdXNlciBhdXRoZW50aWNhdGlvbiw8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBi Z2NvbG9yPSJncmF5IiA+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDIiIC8+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBsaW5lIDkyPC9lbT48L3RoPjx0aD4gPC90 aD48dGg+PGEgbmFtZT0icGFydC1yMiIgLz48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9z bWFsbD48ZW0+IGxpbmUgOTU8L2VtPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgdGhlIHNl Y3VyaXR5IGFuZCB0cmFuc3BvcnQgbGF5ZXIgcmVxdWlyZW1lbnRzIG9mIHRoZSBORVRDT05GIFBy b3RvY29sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICB0aGUgc2VjdXJpdHkgYW5k IHRyYW5zcG9ydCBsYXllciByZXF1aXJlbWVudHMgb2YgdGhlIE5FVENPTkYgUHJvdG9jb2w8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBTcGVj aWZpY2F0aW9uLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgU3BlY2lmaWNhdGlv bi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgZSkgTkVUQ09ORiBOb3RpZmljYXRpb24g U3BlY2lmaWNhdGlvbiwgd2hpY2ggZGVmaW5lcyBtZWNoYW5pc21zIHRoYXQ8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGUpIE5FVENPTkYgTm90aWZpY2F0aW9uIFNwZWNpZmljYXRp b24sIHdoaWNoIGRlZmluZXMgbWVjaGFuaXNtcyB0aGF0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICBwcm92aWRlIGFuIGFzeW5jaHJvbm91 cyBtZXNzYWdlIG5vdGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2aWNlIGZvcjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICBwcm92aWRlIGFuIGFzeW5jaHJvbm91cyBtZXNzYWdlIG5v dGlmaWNhdGlvbiBkZWxpdmVyeSBzZXJ2aWNlIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgdGhlIE5FVENPTkYgcHJvdG9jb2wuICBO RVRDT05GIE5vdGlmaWNhdGlvbiBpcyBhbiBvcHRpb25hbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICB0aGUgTkVUQ09ORiBwcm90b2NvbC4gIE5FVENPTkYgTm90aWZpY2F0aW9u IGlzIGFuIG9wdGlvbmFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICBjYXBhYmlsaXR5IGJ1aWx0IG9uIHRvcCBvZiB0aGUgYmFzZSBORVRD T05GIGRlZmluaXRpb24gYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgIGNh cGFiaWxpdHkgYnVpbHQgb24gdG9wIG9mIHRoZSBiYXNlIE5FVENPTkYgZGVmaW5pdGlvbiBhbmQ8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg IHByb3ZpZGVzIHRoZSBjYXBhYmlsaXRpZXMgYW5kIG9wZXJhdGlvbnMgbmVjZXNzYXJ5IHRvIHN1 cHBvcnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgcHJvdmlkZXMgdGhlIGNh cGFiaWxpdGllcyBhbmQgb3BlcmF0aW9ucyBuZWNlc3NhcnkgdG8gc3VwcG9ydDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgdGhpcyBzZXJ2 aWNlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICB0aGlzIHNlcnZpY2UuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDgiIC8+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5UaGUgTkVUQ09ORiBub3RpZmljYXRpb24gc3BlY2lmaWNhdGlvbiBo YXMgYmVlbiBmaW5pc2hlZCBub3cgYXMgd2VsbC48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+SW4gdGhlIGN1cnJlbnQgcGhhc2Ugb2YgdGhlIGlu Y3JlbWVudGFsIGRldmVsb3BtZW50IG9mIE5FVENPTkYgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+SW4gdGhlIGN1cnJlbnQgcGhhc2Ugb2YgdGhlIGluY3JlbWVudGFsIGRldmVs b3BtZW50IG9mIE5FVENPTkYgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPndvcmtncm91cCB3aWxsIGZvY3VzIG9uIGZvbGxvd2luZyBpdGVt czo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij53b3JrZ3JvdXAgd2lsbCBmb2N1cyBv biBmb2xsb3dpbmcgaXRlbXM6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xLiBGaW5lLWdy YWluIGxvY2tpbmc6IFRoZSBiYXNlIE5FVENPTkYgcHJvdG9jb2wgb25seSBwcm92aWRlcyBhIGxv Y2s8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xLiBGaW5lLWdyYWluIGxvY2tpbmc6 IFRoZSBiYXNlIE5FVENPTkYgcHJvdG9jb2wgb25seSBwcm92aWRlcyBhIGxvY2s8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBmb3IgdGhlIGVu dGlyZSBjb25maWd1cmF0aW9uIGRhdGFzdG9yZSwgd2hpY2ggaXMgbm90IGRlZW1lZCB0byBtZWV0 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBmb3IgdGhlIGVudGlyZSBjb25maWd1 cmF0aW9uIGRhdGFzdG9yZSwgd2hpY2ggaXMgbm90IGRlZW1lZCB0byBtZWV0PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgaW1wb3J0YW50IG9w ZXJhdGlvbmFsIGFuZCBzZWN1cml0eSByZXF1aXJlbWVudHMuIFRoZSBORVRDT05GIHdvcmtpbmc8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGltcG9ydGFudCBvcGVyYXRpb25hbCBh bmQgc2VjdXJpdHkgcmVxdWlyZW1lbnRzLiBUaGUgTkVUQ09ORiB3b3JraW5nPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgZ3JvdXAgd2lsbCBw cm9kdWNlIGEgc3RhbmRhcmRzLXRyYWNrIFJGQyBzcGVjaWZ5aW5nIGEgbWVjaGFuaXNtIGZvcjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgZ3JvdXAgd2lsbCBwcm9kdWNlIGEgc3Rh bmRhcmRzLXRyYWNrIFJGQyBzcGVjaWZ5aW5nIGEgbWVjaGFuaXNtIGZvcjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIGZpbmUtZ3JhaW4gbG9j a2luZyBvZiB0aGUgTkVUQ09ORiBjb25maWd1cmF0aW9uIGRhdGFzdG9yZS48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIGZpbmUtZ3JhaW4gbG9ja2luZyBvZiB0aGUgTkVUQ09ORiBj b25maWd1cmF0aW9uIGRhdGFzdG9yZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjIuIE5F VENPTkYgbW9uaXRvcmluZzogSXQgaXMgY29uc2lkZXJlZCBiZXN0IHByYWN0aWNlIGZvciBJRVRG IHdvcmtpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4yLiBORVRDT05GIG1vbml0 b3Jpbmc6IEl0IGlzIGNvbnNpZGVyZWQgYmVzdCBwcmFjdGljZSBmb3IgSUVURiB3b3JraW5nPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHIgYmdjb2xvcj0iZ3JheSIgPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwzIiAvPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gbGluZSAxMTU8L2VtPjwvdGg+PHRo PiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIzIiAvPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxlbT4gbGluZSAxMjA8L2VtPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg aXRzZWxmIHRvIGJlIHVzZWQgdG8gbW9uaXRvciBzb21lIGFzcGVjdHMgb2YgTkVUQ09ORiBvcGVy YXRpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBpdHNlbGYgdG8gYmUgdXNl ZCB0byBtb25pdG9yIHNvbWUgYXNwZWN0cyBvZiBORVRDT05GIG9wZXJhdGlvbi48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjMuIFNjaGVtYSBhZHZlcnRpc2VtZW50OiBDdXJyZW50bHkgdGhl IE5FVENPTkYgcHJvdG9jb2wgaXMgYWJsZSB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjMuIFNjaGVtYSBhZHZlcnRpc2VtZW50OiBDdXJyZW50bHkgdGhlIE5FVENPTkYgcHJvdG9j b2wgaXMgYWJsZSB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gIGFkdmVydGlzZSB3aGljaCBwcm90b2NvbCBmZWF0dXJlcyBhcmUgc3VwcG9y dGVkIG9uIGEgcGFydGljdWxhcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgYWR2 ZXJ0aXNlIHdoaWNoIHByb3RvY29sIGZlYXR1cmVzIGFyZSBzdXBwb3J0ZWQgb24gYSBwYXJ0aWN1 bGFyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgbmV0Y29uZi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMgY3VycmVudGx5IG5v IHdheSB0byBkaXNjb3ZlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgbmV0Y29u Zi1jYXBhYmxlIGRldmljZS4gSG93ZXZlciwgdGhlcmUgaXMgY3VycmVudGx5IG5vIHdheSB0byBk aXNjb3ZlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gIHdoaWNoIFhNTCBTY2hlbWEgYXJlIHN1cHBvcnRlZCBvbiB0aGUgZGV2aWNlLiBUaGUg TkVUQ09ORiB3b3JraW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICB3aGljaCBY TUwgU2NoZW1hIGFyZSBzdXBwb3J0ZWQgb24gdGhlIGRldmljZS4gVGhlIE5FVENPTkYgd29ya2lu ZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g IGdyb3VwIHdpbGwgcHJvZHVjZSBhIHN0YW5kYXJkcy10cmFjayBSRkMgd2l0aCBtZWNoYW5pc21z IG1ha2luZyB0aGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBncm91cCB3aWxs IHByb2R1Y2UgYSBzdGFuZGFyZHMtdHJhY2sgUkZDIHdpdGggbWVjaGFuaXNtcyBtYWtpbmcgdGhp czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g IGRpc2NvdmVyeSBwb3NzaWJsZSAodGhpcyBpdGVtIG1heSBiZSBtZXJnZWQgd2l0aCAiTkVUQ09O RiBtb25pdG9yaW5nIjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgZGlzY292ZXJ5 IHBvc3NpYmxlICh0aGlzIGl0ZW0gbWF5IGJlIG1lcmdlZCB3aXRoICJORVRDT05GIG1vbml0b3Jp bmciPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgaW50byBhIHNpbmdsZSBkb2N1bWVudCkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICBpbnRvIGEgc2luZ2xlIGRvY3VtZW50KS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwOSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Ob3RlOiBU aGUgc2NoZW1hLWFkdmVydGlzZW1lbnQgbWF0ZXJpYWwgaGFzIGJlZW4gbWVyZ2VkIGludG8gdGhl PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICBORVRDT05GIG1vbml0b3JpbmcgZG9jdW1lbnQgYmFzZWQgb24gV0cgY29uc2Vuc3Vz Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40 LiBORVRDT05GIG92ZXIgVExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmllbmNlIHRo ZXJlIGlzIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij40LiBORVRDT05GIG92ZXIg VExTOiBCYXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBleHBlcmllbmNlIHRoZXJlIGlzIGE8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBuZWVkIGZv ciBhIHN0YW5kYXJkcyB0cmFjayBkb2N1bWVudCB0byBkZWZpbmUgTkVUQ09ORiBvdmVyIFRMUyBh cyBhbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgbmVlZCBmb3IgYSBzdGFuZGFy ZHMgdHJhY2sgZG9jdW1lbnQgdG8gZGVmaW5lIE5FVENPTkYgb3ZlciBUTFMgYXMgYW48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBvcHRpb25h bCB0cmFuc3BvcnQgZm9yIHRoZSBORVRDT05GIHByb3RvY29sLjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgb3B0aW9uYWwgdHJhbnNwb3J0IGZvciB0aGUgTkVUQ09ORiBwcm90b2Nv bC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMCIg Lz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij41LiBORVRDT05GIGRlZmF1bHQgaGFuZGxpbmc6IE5FVENPTkYg dG9kYXkgZG9lcyBub3QgZGVmaW5lIHdoZXRoZXI8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGRlZmF1bHQgdmFsdWVzIHNob3Vs ZCBiZSByZXR1cm5lZCBieSB0aGUgc2VydmVyIGluIHJlcGxpZXM8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHRvIHJlcXVlc3Rz IGZvciByZWFkaW5nIGNvbmZpZ3VyYXRpb24gYW5kIHN0YXRlIGRhdGEuIERpZmZlcmVudDwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgY2xpZW50cyBoYXZlIGRpZmZlcmVudCBuZWVkcyB0byByZWNlaXZlIG9yIG5vdCB0byByZWNl aXZlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICBkZWZhdWx0IGRhdGEuIFRoZSBORVRDT05GIHdvcmtpbmcgZ3JvdXAgd2lsbCBw cm9kdWNlIGE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgIHN0YW5kYXJkcy10cmFjayBSRkMgZGVmaW5pbmcgYSBtZWNoYW5pc20g dGhhdCBhbGxvd3M8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgIE5FVENPTkYgY2xpZW50cyB0byBjb250cm9sIHdoZXRoZXIgZGVm YXVsdCBkYXRhIGlzIHJldHVybmVkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBieSB0aGUgbmV0Y29uZiBzZXJ2ZXIuPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPjYuIE5FVENPTkYgaW1wbGVtZW50YXRpb25zIGhhdmUgc2hvd24gdGhhdCB0aGUgc3BlY2lm aWNhdGlvbiBpbiBSRkM0NzQxPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBpcyBub3QgMTAwJSBjbGVhciBhbmQgaGFzIGxlYWQg dG8gZGlmZmVyZW50IGludGVycHJldGF0aW9ucyBhbmQgaW1wbGVtZW50YXRpb25zLjwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg QWxzbyBzb21lIGVycm9ycyBoYXZlIGJlZW4gdW5jb3ZlcmVkLiBTbyB0aGUgV0cgd2lsbCBkbyBh biByZmM0NzQxYmlzIHdpdGg8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGZvbGxvd2luZyBjb25zdHJhaW50czo8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAtIGJ1ZyBmaXhlcyBhcmUgdG8gYmUgZG9uZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAtIGNsYXJpZmljYXRpb25z IGNhbiBiZSBkb25lPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgIC0gZXh0ZW5zaW9ucyBjYW4gYmUgZG9uZSBvbmx5IHdoZW4g bmVlZGVkIHRvIGZpeCBidWdzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgb3IgaW5jb25zaXN0ZW5jaWVzIChpLmUuIHdl IGFyZSBub3QgZG9pbmcgYSBORVRDT05GIFYyKTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAtIFRoZSB3b3JrIGNhbiBiZSBz dGFydGVkIGJhc2VkIG9uIHRoZSBkaXNjdXNzaW9uIGluIElFVEYgIzczIChzZWU8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgaHR0cDovL3d3dy5pZXRmLm9yZy9wcm9jZWVkaW5ncy8wOG5vdi9zbGlkZXMvbmV0Y29uZi0z LnBkZikuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgIE5vdGU6IEEgdGVjaG5pY2FsIGVycmF0YSBoYXMgYmVlbiBwb3N0 ZWQgb24gcmZjNDc0Mi4gSWYgdGhlIHdvcmsgb248L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHJmYzQ3NDFiaXMgdW5jb3ZlcnMg YW55IGFkZGl0aW9uYWwgZml4ZXMvY2xhcmlmaWNhdGlvbnMgdGhhdCBuZWVkPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB0byBi ZSBtYWRlIHRvIHJmYzQ3NDIsIHRoZSBXRyBtYXkgY29uc2lkZXIgdG8gYWxzbyBkbyBhIHJmYzQ3 NDJiaXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgIGFzIHBhcnQgb2YgdGhpcyB3b3JrLWl0ZW0uPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlRoZSBmb2xsb3dpbmcgaXRlbXMg aGF2ZSBiZWVuIGlkZW50aWZpZWQgYXMgaW1wb3J0YW50IGJ1dCBhcmUgY3VycmVudGx5PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+VGhlIGZvbGxvd2luZyBpdGVtcyBoYXZlIGJlZW4g aWRlbnRpZmllZCBhcyBpbXBvcnRhbnQgYnV0IGFyZSBjdXJyZW50bHk8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+bm90IGNvbnNpZGVyZWQgaW4g c2NvcGUgZm9yIHJlLWNoYXJ0ZXJpbmcgYW5kIG1heSBiZSBjYW5kaWRhdGVzIGZvciB3b3JrPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+bm90IGNvbnNpZGVyZWQgaW4gc2NvcGUgZm9y IHJlLWNoYXJ0ZXJpbmcgYW5kIG1heSBiZSBjYW5kaWRhdGVzIGZvciB3b3JrPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPndoZW4gdGhlcmUgaXMg Y29tbXVuaXR5IGNvbnNlbnN1cyB0byB0YWtlIHRoZW0gb246PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+d2hlbiB0aGVyZSBpcyBjb21tdW5pdHkgY29uc2Vuc3VzIHRvIHRha2UgdGhl bSBvbjo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAx MSIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPi0gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+R2VuZXJhbCBp bXByb3ZlbWVudHMgdG8gdGhlIGJhc2UgcHJvdG9jb2w8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPi0gPHNwYW4gY2xhc3M9Imluc2VydCI+TkVUQ09ORiBOb3RpZmljYXRp b24gY29udGVudDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+LSBBY2Nlc3MgQ29udHJvbCByZXF1aXJlbWVudHM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4tIEFjY2VzcyBDb250cm9sIHJlcXVpcmVtZW50czwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4tIE5FVENPTkYg YWNjZXNzIHRvIFNNSS1iYXNlZCBNSUIgZGF0YTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPi0gTkVUQ09ORiBhY2Nlc3MgdG8gU01JLWJhc2VkIE1JQiBkYXRhPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAxMiIgLz48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Hb2FscyBh bmQgTWlsZXN0b25lczo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Hb2FscyBhbmQg TWlsZXN0b25lczo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+RG9uZQkgIAlXb3JraW5nIEdyb3VwIGZvcm1lZDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPkRvbmUJICAJV29ya2luZyBHcm91cCBmb3JtZWQ8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlTdWJtaXQgaW5p dGlhbCBOZXRjb25mIFByb3RvY29sIGRyYWZ0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+RG9uZQkgIAlTdWJtaXQgaW5pdGlhbCBOZXRjb25mIFByb3RvY29sIGRyYWZ0PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3Vi bWl0IGluaXRpYWwgTmV0Y29uZiBvdmVyICh0cmFuc3BvcnQtVEJEKSBkcmFmdDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkRvbmUJICAJU3VibWl0IGluaXRpYWwgTmV0Y29uZiBvdmVy ICh0cmFuc3BvcnQtVEJEKSBkcmFmdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCUJlZ2luIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxs IGZvciB0aGUgTmV0Y29uZiBQcm90b2NvbCBkcmFmdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPkRvbmUJICAJQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRj b25mIFByb3RvY29sIGRyYWZ0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMyIgLz48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPkRvbmUJICAJQmVnaW4gV29ya2luZyBHcm91cCBMYXN0IENhbGwgZm9yIHRoZSBOZXRj b25mIG92ZXIgKHRyYW5zcG9ydC1UQkQpIGRyYWZ0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPkRvbmUgICBCZWdpbiBXb3JraW5nIEdyb3VwIExhc3QgQ2FsbCBmb3IgdGhlIE5ldGNv bmYgb3ZlciAodHJhbnNwb3J0LVRCRCk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgICAgICAgICAgZHJhZnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBvZiB0aGUgTmV0Y29u ZiBQcm90b2NvbCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgUHJvdG9jb2wg ZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVyc2lvbiBvZiB0aGUgTmV0Y29u ZiBvdmVyIFNPQVAgZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRjb25mIG92ZXIgU09B UCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRj b25mIG92ZXIgQkVFUCBkcmFmdCB0byB0aGUgSUVTRzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5ldGNvbmYgb3ZlciBC RUVQIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgdGhlIE5l dGNvbmYgb3ZlciBTU0ggZHJhZnQgdG8gdGhlIElFU0c8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij5Eb25lCSAgCVN1Ym1pdCBmaW5hbCB2ZXJzaW9uIG9mIHRoZSBOZXRjb25mIG92ZXIg U1NIIGRyYWZ0IHRvIHRoZSBJRVNHPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJVXBkYXRlIGNoYXJ0ZXI8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCVVwZGF0ZSBjaGFydGVyPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkRvbmUJICAJU3VibWl0IGZpcnN0 IHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25zIGRvY3VtZW50PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+RG9uZQkgIAlTdWJtaXQgZmlyc3QgdmVyc2lvbiBvZiBORVRDT05G IE5vdGlmaWNhdGlvbnMgZG9jdW1lbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkgIAlCZWdpbiBXR0xDIG9mIE5FVENPTkYgTm90aWZp Y2F0aW9ucyBkb2N1bWVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkRvbmUJICAJ QmVnaW4gV0dMQyBvZiBORVRDT05GIE5vdGlmaWNhdGlvbnMgZG9jdW1lbnQ8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxhIG5hbWU9 ImRpZmYwMDE0IiAvPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+RG9uZQkgIAlTdWJtaXQgZmluYWwgdmVy c2lvbiBvZiBORVRDT05GIE5vdGlmaWNhdGlvbnMgZG9jdW1lbnQgdG8gSUVTRyBmb3IgY29uc2lk ZXJhdGlvbiBhcyBQcm9wb3NlZCBTdGFuZGFyZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj5Eb25lICAgU3VibWl0IGZpbmFsIHZlcnNpb24gb2YgTkVUQ09ORiBOb3RpZmljYXRpb25z IGRvY3VtZW50IHRvIElFU0c8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj5Eb25lCSAgCS0wMCBkcmFmdCBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+TkVUQ09ORiBNb25pdG9yaW5nPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICAgICAgICAgICBmb3IgY29uc2lkZXJhdGlvbiBhcyBQcm9wb3NlZCBTdGFuZGFyZDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPkRvbmUJICAJLTAwIGRyYWZ0IGZvciBGaW5lPC9zcGFuPiBHcmFp biBMb2NraW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPkRvbmUgICAtMDAgZHJh ZnQgZm9yIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmZpbmU8L3NwYW4+IEdyYWluIExvY2tpbmc8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RG9uZQkg IAktMDAgZHJhZnQgZm9yIE5FVENPTkYgb3ZlciBUTFM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij5Eb25lCSAgCS0wMCBkcmFmdCBmb3IgTkVUQ09ORiBvdmVyIFRMUzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMTUiIC8+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+RG9uZSAgIC0wMCBkcmFmdCBmb3IgTkVU Q09ORiBNb25pdG9yaW5nPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Eb25lCSAgCS0wMCBkcmFmdCBmb3IgU2NoZW1hIEFkdmVydGlz ZW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Eb25lCSAgCS0wMCBkcmFmdCBm b3IgU2NoZW1hIEFkdmVydGlzZW1lbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE2IiAvPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+TWFyIDIwMDg8L3NwYW4+CSAgCUVhcmx5 IFJldmlldyBvZiBjbGllbnQgYXV0aGVudGljYXRpb24gYXBwcm9hY2ggKGZvciBORVRDT05GIG92 ZXIgVExTKSB3aXRoIHRoZSBzZWN1cml0eSBjb21tdW5pdHkgYXQgSUVURiA3MTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Eb25lPC9zcGFuPiAg IEVhcmx5IFJldmlldyBvZiBjbGllbnQgYXV0aGVudGljYXRpb24gYXBwcm9hY2ggKGZvciBORVRD T05GIG92ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj5BdWcgMjAwODwvc3Bhbj4JICAJV0cgTGFzdCBD YWxsIG9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPk5FVENPTkYgTW9uaXRvcmluZzwvc3Bhbj4gYWZ0 ZXIgSUVURjcyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgIFRM Uykgd2l0aCB0aGUgc2VjdXJpdHkgY29tbXVuaXR5IGF0IElFVEYgNzE8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj5BdWcgMjAwODwvc3Bhbj4JICAJV0cgTGFzdCBDYWxsIG9uIDxzcGFuIGNsYXNzPSJkZWxl dGUiPlNjaGVtYSBBZHZlcnRpc2VtZW50PC9zcGFuPiBhZnRlciBJRVRGNzI8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+Ti5BLjwvc3Bhbj4gICAg IFdHIExhc3QgQ2FsbCBvbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TY2hlbWEgQWR2ZXJ0aXNlbWVu dDwvc3Bhbj4gYWZ0ZXIgSUVURjcyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+QXVnPC9zcGFuPiAyMDA4 CSAgCVdHIExhc3QgQ2FsbCBvbiBGaW5lIEdyYWluIExvY2tpbmcgYWZ0ZXIgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+SUVURjcyPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgICAgICAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TY2hlbWEgQWR2ZXJ0aXNlbWVudCBoYXMg YmVlbiBtZXJnZWQgaW50byBNb25pdG9yaW5nPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPkF1 Zzwvc3Bhbj4gMjAwOAkgIAlXRyBMYXN0IENhbGwgb24gTkVUQ09ORiA8c3BhbiBjbGFzcz0iZGVs ZXRlIj5vdmVyIFRMUzwvc3Bhbj4gYWZ0ZXIgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SUVURjcyPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5Eb25lPC9zcGFuPiAgICBXRyBMYXN0IENhbGwgb24gPHNwYW4gY2xhc3M9Imluc2VydCI+TkVU Q09ORiBvdmVyIFRMUzwvc3Bhbj4gYWZ0ZXIgSUVURjcyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+QXVn IDIwMDgJICAJU2VuZCBmb3VyIGRvY3VtZW50czwvc3Bhbj4gdG8gPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+dGhlPC9zcGFuPiBJRVNHIGZvciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5jb25zaWRlcmF0aW9u PC9zcGFuPiBhcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5wcm9wb3NlZCBzdGFuZGFyZHM8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkRv bmUgICAgTmV0Y29uZiBvdmVyIFRMUyB0byBJRVNHIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bv c2VkIFN0YW5kYXJkczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+RGVjPC9zcGFuPiAyMDA4ICBXRyBMYXN0IENhbGwgb24gRmluZSBH cmFpbiBMb2NraW5nIGFmdGVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklFVEY3Mzwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+RGVjPC9z cGFuPiAyMDA4ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TZW5kIFBhcnRpYWwgTG9ja2luZyB0byBJ RVNHIGZvciBjb25zaWRlcmF0aW9uIGFzIFByb3Bvc2VkIFN0YW5kYXJkczwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+SmFuIDIwMDkg ICBJbml0aWFsIFdHIGRyYWZ0IGZvciB3aXRoLWRlZmF1bHRzIGNhcGFiaWxpdHk8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPkZlYiAy MDA5ICAgSW5pdGlhbCBXRyBkcmFmdCBmb3IgcmZjNDc0MWJpczwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+TWFyIDIwMDk8L3NwYW4+ ICAgV0cgTGFzdCBDYWxsIG9uIE5FVENPTkYgPHNwYW4gY2xhc3M9Imluc2VydCI+TW9uaXRvcmlu Zzwvc3Bhbj4gYWZ0ZXIgPHNwYW4gY2xhc3M9Imluc2VydCI+SUVURjczPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BcHIgMjAwOSAg IFdHIExhc3QgQ2FsbCBvbiByZmM0NzQxYmlzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BcHIgMjAwOSAgIFdHIExhc3QgQ2FsbCBv biB3aXRoLWRlZmF1bHRzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5KdW4gMjAwOSAgIHJmYzQ3NDFiaXM8L3NwYW4+IHRvIElFU0cg Zm9yIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNvbnNpZGVyYXRpb25zIGFzIFByb3Bvc2VkIFN0YW5k YXJkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij5KdW4gMjAwOSAgIHdpdGgtZGVmYXVsdHMgY2FwYWJpbGl0eSB0byBJRVNHIGZvciBj b25zaWRlcmF0aW9uczwvc3Bhbj4gYXMgPHNwYW4gY2xhc3M9Imluc2VydCI+UHJvcG9zZWQgU3Rh bmRhcmQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4KCiAgICAgPHRyPjx0ZD48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQ+PC90ZD48L3RyPgogICAgIDx0ciBiZ2NvbG9yPSJncmF5 Ij48dGggY29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciI+PGEgbmFtZT0iZW5kIj4mbmJzcDtFbmQg b2YgY2hhbmdlcy4gMTYgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L2E+PC90aD48L3RyPgogICAgIDx0 ciBjbGFzcz0ic3RhdHMiPjx0ZD48L3RkPjx0aD48aT4xNCBsaW5lcyBjaGFuZ2VkIG9yIGRlbGV0 ZWQ8L2k+PC90aD48dGg+PGk+IDwvaT48L3RoPjx0aD48aT41MSBsaW5lcyBjaGFuZ2VkIG9yIGFk ZGVkPC9pPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICA8dHI+PHRkIGNvbHNwYW49IjUiIGFsaWdu PSJjZW50ZXIiIGNsYXNzPSJzbWFsbCI+PGJyLz5UaGlzIGh0bWwgZGlmZiB3YXMgcHJvZHVjZWQg YnkgcmZjZGlmZiAxLjM1LiBUaGUgbGF0ZXN0IHZlcnNpb24gaXMgYXZhaWxhYmxlIGZyb20gPGEg aHJlZj0iaHR0cDovL3d3dy50b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLyIgPmh0dHA6Ly90 b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLzwvYT4gPC90ZD48L3RyPgogICA8L3RhYmxlPgog ICA8L2JvZHk+CiAgIDwvaHRtbD4K ------_=_NextPart_001_01C95FD6.705C79DE Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------_=_NextPart_001_01C95FD6.705C79DE-- From netconf-bounces@ietf.org Thu Dec 18 08:10:06 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 83D0628C0DC; Thu, 18 Dec 2008 08:10:06 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EA6FB3A6AF4 for ; Thu, 18 Dec 2008 08:10:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.169 X-Spam-Level: X-Spam-Status: No, score=-2.169 tagged_above=-999 required=5 tests=[AWL=0.096, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pUo+x-X79vnA for ; Thu, 18 Dec 2008 08:10:03 -0800 (PST) Received: from smtp122.sbc.mail.sp1.yahoo.com (smtp122.sbc.mail.sp1.yahoo.com [69.147.64.95]) by core3.amsl.com (Postfix) with SMTP id 1138B3A68E4 for ; Thu, 18 Dec 2008 08:10:01 -0800 (PST) Received: (qmail 4980 invoked from network); 18 Dec 2008 16:09:54 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.231.154 with plain) by smtp122.sbc.mail.sp1.yahoo.com with SMTP; 18 Dec 2008 16:09:52 -0000 X-YMail-OSG: YGAudJAVM1lVzEbeZTd7istJDZYEA_agNMBKfogYibRUgXJuVtDY_6DR0GdqxmPTyy.ncW5c.gxEZol.7pnHcIwHSZNOk17CGvTPAEUefl0aEXCfAXzU1rcuYN9Iw2gKoQVzRa2w1pCvlL.v_6g6C7fVXBLD1xRP.haE0hpkxV4_DfFloiTSGW9PM5UfhffsCNKuM.Qf65RRhig7NgaWPQ-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <494A75CF.9090008@netconfcentral.com> Date: Thu, 18 Dec 2008 08:09:51 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Ersue, Mehmet (NSN - DE/Munich)" References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com> <4947E7CC.9070700@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Ersue, Mehmet (NSN - DE/Munich) wrote: >> Martin Bjorklund wrote: >>> Andy Bierman wrote: >>>> I think Martin's suggestion about a :validate.1.1 capability >>>> will work fine for test-only, because it is a pure extension, >>> So maybe the proposed charter text: >>> >>> - no extensions (i.e. we are not doing a NETCONF V2) >>> >>> can be changed to "extensions can be done only when needed >> to fix bugs >>> or inconsistencies" or something similar. >>> >>> >> That would make me very happy. >> I want to address real interoperability issues, even if >> that means changing 1.0 in a non-backward compatible way. > > Whether changing 1.0 in a non-backward compatible way is > really needed has to be discussed and decided by the WG. not sure what has already been decided, but the charter text is OK. IMO, there are some little details in NETCONF that should be done over because they do not fit with the way YANG (and later on NETCONF ACM)From netconf-bounces@ietf.org Thu Dec 18 08:10:06 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 83D0628C0DC; Thu, 18 Dec 2008 08:10:06 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EA6FB3A6AF4 for ; Thu, 18 Dec 2008 08:10:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.169 X-Spam-Level: X-Spam-Status: No, score=-2.169 tagged_above=-999 required=5 tests=[AWL=0.096, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pUo+x-X79vnA for ; Thu, 18 Dec 2008 08:10:03 -0800 (PST) Received: from smtp122.sbc.mail.sp1.yahoo.com (smtp122.sbc.mail.sp1.yahoo.com [69.147.64.95]) by core3.amsl.com (Postfix) with SMTP id 1138B3A68E4 for ; Thu, 18 Dec 2008 08:10:01 -0800 (PST) Received: (qmail 4980 invoked from network); 18 Dec 2008 16:09:54 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.231.154 with plain) by smtp122.sbc.mail.sp1.yahoo.com with SMTP; 18 Dec 2008 16:09:52 -0000 X-YMail-OSG: YGAudJAVM1lVzEbeZTd7istJDZYEA_agNMBKfogYibRUgXJuVtDY_6DR0GdqxmPTyy.ncW5c.gxEZol.7pnHcIwHSZNOk17CGvTPAEUefl0aEXCfAXzU1rcuYN9Iw2gKoQVzRa2w1pCvlL.v_6g6C7fVXBLD1xRP.haE0hpkxV4_DfFloiTSGW9PM5UfhffsCNKuM.Qf65RRhig7NgaWPQ-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <494A75CF.9090008@netconfcentral.com> Date: Thu, 18 Dec 2008 08:09:51 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Ersue, Mehmet (NSN - DE/Munich)" References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com> <4947E7CC.9070700@netconfcentral.com> In-Reply-To: Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Ersue, Mehmet (NSN - DE/Munich) wrote: >> Martin Bjorklund wrote: >>> Andy Bierman wrote: >>>> I think Martin's suggestion about a :validate.1.1 capability >>>> will work fine for test-only, because it is a pure extension, >>> So maybe the proposed charter text: >>> >>> - no extensions (i.e. we are not doing a NETCONF V2) >>> >>> can be changed to "extensions can be done only when needed >> to fix bugs >>> or inconsistencies" or something similar. >>> >>> >> That would make me very happy. >> I want to address real interoperability issues, even if >> that means changing 1.0 in a non-backward compatible way. > > Whether changing 1.0 in a non-backward compatible way is > really needed has to be discussed and decided by the WG. not sure what has already been decided, but the charter text is OK. IMO, there are some little details in NETCONF that should be done over because they do not fit with the way YANG (and later on NETCON expects to organize data. This won't happen because it would require a base-capability change, but these corner-cases should be addressed at some point: - use of attributes as parameters in , . A much better design would have been to use a choice between an xpath-filter leaf and a subtree-filter leaf. - use of a capability on 1 value of enumeration in parameters (:rollback-on-error). A much better design would have been a separate conditional leaf (like test-option). Andy > This is not excluded by the proposed charter text. > > Current charter text proposal says: > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > > The bullets above include IMO also fixing inconsistencies. > > How about changing the third bullet above to: > - extensions can be done only when needed to fix bugs > or inconsistencies (i.e. we are not doing a NETCONF V2) > > With this text the WG needs to discuss to find out which > extensions are fixes to inconsistencies and do not produce > a NETCONF V2. > > Mehmet > >> You reminded me that we have lots of capabilities besides >> the base capability that can be incremented. >> >> Of course, the default is not to add or change anything, >> and there are very few actual changes actually proposed. >> >> >>> /martin >>> >>> >>> >> Andy > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf F ACM) expects to organize data. This won't happen because it would require a base-capability change, but these corner-cases should be addressed at some point: - use of attributes as parameters in , . A much better design would have been to use a choice between an xpath-filter leaf and a subtree-filter leaf. - use of a capability on 1 value of enumeration in parameters (:rollback-on-error). A much better design would have been a separate conditional leaf (like test-option). Andy > This is not excluded by the proposed charter text. > > Current charter text proposal says: > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > > The bullets above include IMO also fixing inconsistencies. > > How about changing the third bullet above to: > - extensions can be done only when needed to fix bugs > or inconsistencies (i.e. we are not doing a NETCONF V2) > > With this text the WG needs to discuss to find out which > extensions are fixes to inconsistencies and do not produce > a NETCONF V2. > > Mehmet > >> You reminded me that we have lots of capabilities besides >> the base capability that can be incremented. >> >> Of course, the default is not to add or change anything, >> and there are very few actual changes actually proposed. >> >> >>> /martin >>> >>> >>> >> Andy > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 19 05:53:25 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C2BE63A6A24; Fri, 19 Dec 2008 05:53:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8C9EA3A6A24 for ; Fri, 19 Dec 2008 05:53:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.212 X-Spam-Level: X-Spam-Status: No, score=-6.212 tagged_above=-999 required=5 tests=[AWL=0.037, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FHP2x1Xz3H-G for ; Fri, 19 Dec 2008 05:53:23 -0800 (PST) Received: from mailgw4.ericsson.se (mailgw4.ericsson.se [193.180.251.62]) by core3.amsl.com (Postfix) with ESMTP id 54C843A6842 for ; Fri, 19 Dec 2008 05:53:23 -0800 (PST) Received: from mailgw4.ericsson.se (unknown [127.0.0.1]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 875E3221A4; Fri, 19 Dec 2008 14:53:14 +0100 (CET) X-AuditID: c1b4fb3e-adf84bb00000537b-90-494ba74a4e07 Received: from esealmw129.eemea.ericsson.se (unknown [153.88.253.125]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 5CA5620304; Fri, 19 Dec 2008 14:53:14 +0100 (CET) Received: from esealmw129.eemea.ericsson.se ([153.88.254.177]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Fri, 19 Dec 2008 14:53:08 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Fri, 19 Dec 2008 14:53:08 +0100 Message-ID: <494BA743.4050406@ericsson.com> Date: Fri, 19 Dec 2008 14:53:07 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: Andy Bierman References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> <4943EA80.5020908@netconfcentral.com> In-Reply-To: <4943EA80.5020908@netconfcentral.com> X-OriginalArrivalTime: 19 Dec 2008 13:53:08.0305 (UTC) FILETIME=[1FA28410:01C961E1] X-Brightmail-Tracker: AAAAAA== Cc: netconf@ietf.org Subject: Re: [Netconf] security-tagging X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org SGVsbG8sCldlIGhhZCBhIGNvbXBsZXRlbHkgZGlmZmVyZW50IGJ1dCBsb25nIHN0YW5kaW5nIHBy b2JsZW0gdGhhdCBjb3VsZCBiZSBzb2x2ZWQgd2l0aCBzZWN1cml0eSB0YWdnaW5nLgoKU29tZSBv cGVyYXRvcnMgd2FudCBldmVyeSBtYW5hZ2VtZW50IG9wZXJhdGlvbiBsb2dnZWQsIGZ1bGx5LiBI b3dldmVyIHdlIGFsc28gaGF2ZSBhbm90aGVyIApyZXF1aXJlbWVudDogc2VjdXJpdHkgZGF0YSwg ZS5nLiBwYXNzd29yZHMsIG11c3Qgbm90IGJlIGxvFrom netconf-bounces@ietf.org Fri Dec 19 05:53:25 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C2BE63A6A24; Fri, 19 Dec 2008 05:53:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8C9EA3A6A24 for ; Fri, 19 Dec 2008 05:53:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.212 X-Spam-Level: X-Spam-Status: No, score=-6.212 tagged_above=-999 required=5 tests=[AWL=0.037, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FHP2x1Xz3H-G for ; Fri, 19 Dec 2008 05:53:23 -0800 (PST) Received: from mailgw4.ericsson.se (mailgw4.ericsson.se [193.180.251.62]) by core3.amsl.com (Postfix) with ESMTP id 54C843A6842 for ; Fri, 19 Dec 2008 05:53:23 -0800 (PST) Received: from mailgw4.ericsson.se (unknown [127.0.0.1]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 875E3221A4; Fri, 19 Dec 2008 14:53:14 +0100 (CET) X-AuditID: c1b4fb3e-adf84bb00000537b-90-494ba74a4e07 Received: from esealmw129.eemea.ericsson.se (unknown [153.88.253.125]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 5CA5620304; Fri, 19 Dec 2008 14:53:14 +0100 (CET) Received: from esealmw129.eemea.ericsson.se ([153.88.254.177]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Fri, 19 Dec 2008 14:53:08 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Fri, 19 Dec 2008 14:53:08 +0100 Message-ID: <494BA743.4050406@ericsson.com> Date: Fri, 19 Dec 2008 14:53:07 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: Andy Bierman References: <49315EFA.3000406@netconfcentral.com> <493D5101.1020700@netconfcentral.com> <20081208182837.GA16667@elstar.local> <493FFB46.10103@netconfcentral.com> <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> <4943EA80.5020908@netconfcentral.com> In-Reply-To: <4943EA80.5020908@netconfcentral.com> X-OriginalArrivalTime: 19 Dec 2008 13:53:08.0305 (UTC) FILETIME=[1FA28410:01C961E1] X-Brightmail-Tracker: AAAAAA== Cc: netconf@ietf.org Subject: Re: [Netconf] security-tagging X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org SGVsbG8sCldlIGhhZCBhIGNvbXBsZXRlbHkgZGlmZmVyZW50IGJ1dCBsb25nIHN0YW5kaW5nIHBy b2JsZW0gdGhhdCBjb3VsZCBiZSBzb2x2ZWQgd2l0aCBzZWN1cml0eSB0YWdnaW5nLgoKU29tZSBv cGVyYXRvcnMgd2FudCBldmVyeSBtYW5hZ2VtZW50IG9wZXJhdGlvbiBsb2dnZWQsIGZ1bGx5LiBI b3dldmVyIHdlIGFsc28gaGF2ZSBhbm90aGVyIApyZXF1aXJlbWVudDogc2VjdXJpdHkgZGF0YSwg ZS5nLiBwYXNzd29yZHMsIG11c3Qgbm90IGZ2dlZC4gSXQgaXMgb2Z0ZW4gbm90IHRyaXZp YWwgdG8gCmZpZ3VyZSBvdXQgd2hhdCBkYXRhIGlzIHNlbnNpdGl2ZSwgd2hhdCBtdXN0IGJlIHNr aXBwZWQgYXQgbG9nZ2luZy4gSWYgc3VjaCBkYXRhIGNvdWxkIGJlIAp0YWdnZWQsIHRoZW4gd2Ug Y291bGQganVzdCBzYXk6IGlmIGl0IGlzIG92ZXIgc2VjdXJpdHkgbGV2ZWwgNCwgZG9uJ3QgbG9n IGl0LgoKQmFsYXpzCgpBbmR5IEJpZXJtYW4gd3JvdGU6Cj4gU2ltb24gTGVpbmVuIHdyb3RlOgo+ PiBKYW4gTGluZGJsYWQgd3JpdGVzOgo+Pj4gW3F1b3RpbmcgQW5keV0KPj4+PiBbcXVvdGluZyBK YW5dCj4+Pj4+IEFuZCBzb21lb25lIHJlc3BvbmRzIHdpdGg6Cj4+Pj4+ICJjb29sLWhhY2tlcjwv bmFtZT48cHJpdmlsZWdlcz50b3Atc2VjcmV0PC9wcml2aWxlZ2VzPjwvCj4+IHVzZXI+IDx1c2Vy PjxuYW1lPnNvbWVvbmUtZWxzZSIKPj4+Pj4gVGhlIGdvb2QgbmV3cyBpcyB0aGF0IGl0J3MgdmVy eSBlYXN5IHRvIGZpeCB0aGlzLiBbLi4uXQo+Pgo+Pj4+IGdyZWF0IGV4YW1wbGUuLi4KPj4+Pgo+ Pj4+IElzbid0IHBhcnQgb2YgdGhlIHJlc3BvbnNpYmlsaXR5IG9uIHRoZSBtYW5hZ2VyPwo+Pgo+ Pj4gSSBkb24ndCB0aGluayBzby4gVGhlIHNlcnZlciB3aWxsIG5vdCBiZSBhYmxlIHRvIHRlbGwg d2hldGhlciB0aGUKPj4+IGFib3ZlIHJlcXVlc3QgaXMgYSBsZWdpdGltYXRlIGNyZWF0aW9uIG9m IHR3byB1c2VycyBvciBhIHJlc3VsdCBvZiBhCj4+PiBuYcOvdmUgY2xpZW50IGJlaW5nIHRyaWNr ZWQuCj4+Cj4+IEkgdGhpbmsgdGhhdCB0aGUgIm1hbmFnZXIiIEFuZHkgaXMgdGFsa2luZyBhYm91 dCBpcyB0aGUgcGllY2Ugb2YKPj4gc29mdHdhcmUgZ2VuZXJhdGluZyBORVRDT05GIHJlcXVlc3Rz IGZyb20gdXNlciBpbnB1dCwgdGhlIHNhbWUgdGhpbmcKPj4gdGhhdCB5b3UgY2FsbCB0aGUgImNs aWVudCIKPj4gU28gdGhlIHR3byBvZiB5b3Ugc2VlbSB0byBiZSBpbiB2aW9sZW50IGFncmVlbWVu dC4KPj4KPj4gRm9yIHRoZSByZWNvcmQsIEkgYWdyZWUgdGhhdCB0aGlzIHByb2JsZW0gbXVzdCBi ZSBzb2x2ZWQgYnkgZWR1Y2F0aW5nCj4+IHByb2dyYW1tZXJzIG9uIHRoZSBORVRDT05GIGNsaWVu dCAobWFuYWdlcikgc2lkZSB0byBzYW5pdGl6ZSB1c2VyCj4+IGlucHV0LCBhbmQgdG8gcHJvdmlk ZSB0aGVtIHdpdGggdGhlIGFwcHJvcHJpYXRlIHRvb2xzIC0gdml6LiBtb2Rlcm4KPj4gZGV2ZWxv cG1lbnQgdG9vbGtpdHMgc3VjaCBhcyBSYWlscyBtYWtpbmcgaXQgaW5jcmVhc2luZ2x5IGRpZmZp Y3VsdCB0bwo+PiB3cml0ZSBwcm9ncmFtcyB2dWxuZXJhYmxlIHRvIFNRTCBpbmplY3Rpb24gYW5k IHNpbWlsYXIgYXR0YWNrcy4KPj4KPj4gV2Ugc2hvdWxkbid0IHRyeSB0byBzb2x2ZSB0aGlzIGJ5 IG1ha2luZyB0aGUgcHJvdG9jb2wgbW9yZSBjb21wbGV4LCBvcgo+PiBieSBkZXBlbmRpbmcgb24g YSBmaW5lLWdyYWluZWQgYXV0aG9yaXphdGlvbiBzY2hlbWUgbm9ib2R5IHdpbGwgdXNlCj4+IChB bmR5IGFscmVhZHkgbWVudGlvbmVkIHRoZSBTTk1QIFZBQ00pLgo+IAo+IElzIHRoZXJlIGFueXRo aW5nIHRoYXQgY2FuIGJlIGRvbmUgaW4gWUFORz8KPiAKPiBJIGhhdmUgYmVlbiB0aGlua2luZyBv ZiBhZGRpbmcgJ3NlY3VyaXR5LXRhZ2dpbmcnIHRvIG15IHRvb2xzZXQuCj4gSSBhbSBub3Qgc3Vy ZSBob3cgb3BlcmF0b3JzIGxpa2UgdG8gY2xhc3NpZnkgdGhpcyBzb3J0IG9mIHJpc2ssCj4gc28g SSBqdXN0IGhhdmUgaGlnaGVyIG51bWJlcnMgYXJlIG1vcmUgb2YgYSB0aHJlYXQ6Cj4gCj4gRS5n LiwgZm9yIHRoZSBjdXJyZW50IGV4YW1wbGU6Cj4gCj4gICAgY29udGFpbmVyIHVzZXJzIHsKPiAg ICAgICBuY3g6c2VjdXJpdHktbGV2ZWwgMjsKPiAKPiAgICAgICBsaXN0IHVzZXIgewo+ICAgICAg ICAgIGtleSBuYW1lOwo+IAo+ICAgICAgICAgIGxlYWYgbmFtZSB7Cj4gICAgICAgICAgICAgdHlw ZSBzdHJpbmc7Cj4gICAgICAgICAgfQo+IAo+ICAgICAgICAgIGVudW1lcmF0aW9uIHByaXZpbGVn ZXMgewo+ICAgICAgICAgICAgIG5jeDpzZWN1cml0eS1sZXZlbCAgMzsKPiAgICAgICAgICAgICBl bnVtIGFsbW9zdC1ub3RoaW5nOwo+ICAgICAgICAgICAgIGVudW0gYS1saXR0bGUtbW9yZSB7Cj4g ICAgICAgICAgICAgICAgbmN4OnNlY3VyaXR5LWxldmVsIDQ7Cj4gICAgICAgICAgICAgfQo+ICAg ICAgICAgICAgIGVudW0gYS13aG9sZS1sb3Qgewo+ICAgICAgICAgICAgICAgIG5jeDpzZWN1cml0 eS1sZXZlbCA1Owo+ICAgICAgICAgICAgIH0KPiAgICAgICAgICB9Cj4gICAgICAgfQo+ICAgIH0K PiAKPiAKPiBUaGUgaWRlYSBpcyB0byBtb3ZlIGFzIG11Y2ggd29yayBmcm9tIHRoZSBodW1hbiB0 byB0aGUgYXV0b21hdGVkIHRvb2xzLAo+IGJ5IGFubm90YXRpbmcgdGhlIFlBTkcgZmlsZSB3aXRo IHRoZXNlIHNvcnQgb2YgZXh0ZW5zaW9ucy4KPiBJbiB0aGlzIGV4YW1wbGUsIEFDTSBjb3VsZCBi ZSBhdXRvbWF0aWNhbGx5IGNvbmZpZ3VyZWQgb24gdGhlCj4gYWdlbnQuICBVc2VyIHdhcm5pbmdz IGFuZCBldmVuIHNvbWUgc2VjdXJpdHkgY291bGQgYmUgZW5mb3JjZWQKPiBvbiB0aGUgY2xpZW50 Lgo+IAo+IFRoZSBBQ00gY29uZmlndXJhdGlvbiBjb3VsZCBiZSBhcyBzaW1wbGUgYXMgImxldCB1 c2VyIFgKPiBoYXZlIHNlY3VyaXR5LWxldmVsIDMgYWNjZXNzIi4KPiAKPiBOb3cgdGhlIHByb2Js ZW0gc2hpZnRzIHRvIHRoZSBkYXRhIG1vZGVsIGRlc2lnbmVycyB0byB0YWcKPiBjb3JyZWN0bHks IGJ1dCB0aGV5IGFyZSB0aGUgb25lcyB3aG8gbW9zdCB1bmRlcnN0YW5kIHRoZQo+IHNlY3VyaXR5 IHJpc2tzLiAgU29tZSBvcGVyYXRvcnMgd2lsbCB3YW50IHRvIG92ZXJyaWRlCj4gdGhlIGRlZmF1 bHQgc2V0dGluZ3MsIGJ1dCB0aGF0IGlzIHRoZSBleGNlcHRpb24uICBUaGUgbWFqb3JpdHkKPiBk byBub3Qgd2FudCB0byBmdXNzIHdpdGggZmluZSBncmFudWxhcml0eSBWQUNNIGNvbmZpZ3VyYXRp b24uCj4gCj4gWUFORyBpcyB2ZXJ5IHJpY2ggaW4gc2VtYW50aWNzLCBJlIGxvZ2dlZC4gSXQgaXMgb2Z0ZW4gbm90IHRyaXZp YWwgdG8gCmZpZ3VyZSBvdXQgd2hhdCBkYXRhIGlzIHNlbnNpdGl2ZSwgd2hhdCBtdXN0IGJlIHNr aXBwZWQgYXQgbG9nZ2luZy4gSWYgc3VjaCBkYXRhIGNvdWxkIGJlIAp0YWdnZWQsIHRoZW4gd2Ug Y291bGQganVzdCBzYXk6IGlmIGl0IGlzIG92ZXIgc2VjdXJpdHkgbGV2ZWwgNCwgZG9uJ3QgbG9n IGl0LgoKQmFsYXpzCgpBbmR5IEJpZXJtYW4gd3JvdGU6Cj4gU2ltb24gTGVpbmVuIHdyb3RlOgo+ PiBKYW4gTGluZGJsYWQgd3JpdGVzOgo+Pj4gW3F1b3RpbmcgQW5keV0KPj4+PiBbcXVvdGluZyBK YW5dCj4+Pj4+IEFuZCBzb21lb25lIHJlc3BvbmRzIHdpdGg6Cj4+Pj4+ICJjb29sLWhhY2tlcjwv bmFtZT48cHJpdmlsZWdlcz50b3Atc2VjcmV0PC9wcml2aWxlZ2VzPjwvCj4+IHVzZXI+IDx1c2Vy PjxuYW1lPnNvbWVvbmUtZWxzZSIKPj4+Pj4gVGhlIGdvb2QgbmV3cyBpcyB0aGF0IGl0J3MgdmVy eSBlYXN5IHRvIGZpeCB0aGlzLiBbLi4uXQo+Pgo+Pj4+IGdyZWF0IGV4YW1wbGUuLi4KPj4+Pgo+ Pj4+IElzbid0IHBhcnQgb2YgdGhlIHJlc3BvbnNpYmlsaXR5IG9uIHRoZSBtYW5hZ2VyPwo+Pgo+ Pj4gSSBkb24ndCB0aGluayBzby4gVGhlIHNlcnZlciB3aWxsIG5vdCBiZSBhYmxlIHRvIHRlbGwg d2hldGhlciB0aGUKPj4+IGFib3ZlIHJlcXVlc3QgaXMgYSBsZWdpdGltYXRlIGNyZWF0aW9uIG9m IHR3byB1c2VycyBvciBhIHJlc3VsdCBvZiBhCj4+PiBuYcOvdmUgY2xpZW50IGJlaW5nIHRyaWNr ZWQuCj4+Cj4+IEkgdGhpbmsgdGhhdCB0aGUgIm1hbmFnZXIiIEFuZHkgaXMgdGFsa2luZyBhYm91 dCBpcyB0aGUgcGllY2Ugb2YKPj4gc29mdHdhcmUgZ2VuZXJhdGluZyBORVRDT05GIHJlcXVlc3Rz IGZyb20gdXNlciBpbnB1dCwgdGhlIHNhbWUgdGhpbmcKPj4gdGhhdCB5b3UgY2FsbCB0aGUgImNs aWVudCIKPj4gU28gdGhlIHR3byBvZiB5b3Ugc2VlbSB0byBiZSBpbiB2aW9sZW50IGFncmVlbWVu dC4KPj4KPj4gRm9yIHRoZSByZWNvcmQsIEkgYWdyZWUgdGhhdCB0aGlzIHByb2JsZW0gbXVzdCBi ZSBzb2x2ZWQgYnkgZWR1Y2F0aW5nCj4+IHByb2dyYW1tZXJzIG9uIHRoZSBORVRDT05GIGNsaWVu dCAobWFuYWdlcikgc2lkZSB0byBzYW5pdGl6ZSB1c2VyCj4+IGlucHV0LCBhbmQgdG8gcHJvdmlk ZSB0aGVtIHdpdGggdGhlIGFwcHJvcHJpYXRlIHRvb2xzIC0gdml6LiBtb2Rlcm4KPj4gZGV2ZWxv cG1lbnQgdG9vbGtpdHMgc3VjaCBhcyBSYWlscyBtYWtpbmcgaXQgaW5jcmVhc2luZ2x5IGRpZmZp Y3VsdCB0bwo+PiB3cml0ZSBwcm9ncmFtcyB2dWxuZXJhYmxlIHRvIFNRTCBpbmplY3Rpb24gYW5k IHNpbWlsYXIgYXR0YWNrcy4KPj4KPj4gV2Ugc2hvdWxkbid0IHRyeSB0byBzb2x2ZSB0aGlzIGJ5 IG1ha2luZyB0aGUgcHJvdG9jb2wgbW9yZSBjb21wbGV4LCBvcgo+PiBieSBkZXBlbmRpbmcgb24g YSBmaW5lLWdyYWluZWQgYXV0aG9yaXphdGlvbiBzY2hlbWUgbm9ib2R5IHdpbGwgdXNlCj4+IChB bmR5IGFscmVhZHkgbWVudGlvbmVkIHRoZSBTTk1QIFZBQ00pLgo+IAo+IElzIHRoZXJlIGFueXRo aW5nIHRoYXQgY2FuIGJlIGRvbmUgaW4gWUFORz8KPiAKPiBJIGhhdmUgYmVlbiB0aGlua2luZyBv ZiBhZGRpbmcgJ3NlY3VyaXR5LXRhZ2dpbmcnIHRvIG15IHRvb2xzZXQuCj4gSSBhbSBub3Qgc3Vy ZSBob3cgb3BlcmF0b3JzIGxpa2UgdG8gY2xhc3NpZnkgdGhpcyBzb3J0IG9mIHJpc2ssCj4gc28g SSBqdXN0IGhhdmUgaGlnaGVyIG51bWJlcnMgYXJlIG1vcmUgb2YgYSB0aHJlYXQ6Cj4gCj4gRS5n LiwgZm9yIHRoZSBjdXJyZW50IGV4YW1wbGU6Cj4gCj4gICAgY29udGFpbmVyIHVzZXJzIHsKPiAg ICAgICBuY3g6c2VjdXJpdHktbGV2ZWwgMjsKPiAKPiAgICAgICBsaXN0IHVzZXIgewo+ICAgICAg ICAgIGtleSBuYW1lOwo+IAo+ICAgICAgICAgIGxlYWYgbmFtZSB7Cj4gICAgICAgICAgICAgdHlw ZSBzdHJpbmc7Cj4gICAgICAgICAgfQo+IAo+ICAgICAgICAgIGVudW1lcmF0aW9uIHByaXZpbGVn ZXMgewo+ICAgICAgICAgICAgIG5jeDpzZWN1cml0eS1sZXZlbCAgMzsKPiAgICAgICAgICAgICBl bnVtIGFsbW9zdC1ub3RoaW5nOwo+ICAgICAgICAgICAgIGVudW0gYS1saXR0bGUtbW9yZSB7Cj4g ICAgICAgICAgICAgICAgbmN4OnNlY3VyaXR5LWxldmVsIDQ7Cj4gICAgICAgICAgICAgfQo+ICAg ICAgICAgICAgIGVudW0gYS13aG9sZS1sb3Qgewo+ICAgICAgICAgICAgICAgIG5jeDpzZWN1cml0 eS1sZXZlbCA1Owo+ICAgICAgICAgICAgIH0KPiAgICAgICAgICB9Cj4gICAgICAgfQo+ICAgIH0K PiAKPiAKPiBUaGUgaWRlYSBpcyB0byBtb3ZlIGFzIG11Y2ggd29yayBmcm9tIHRoZSBodW1hbiB0 byB0aGUgYXV0b21hdGVkIHRvb2xzLAo+IGJ5IGFubm90YXRpbmcgdGhlIFlBTkcgZmlsZSB3aXRo IHRoZXNlIHNvcnQgb2YgZXh0ZW5zaW9ucy4KPiBJbiB0aGlzIGV4YW1wbGUsIEFDTSBjb3VsZCBi ZSBhdXRvbWF0aWNhbGx5IGNvbmZpZ3VyZWQgb24gdGhlCj4gYWdlbnQuICBVc2VyIHdhcm5pbmdz IGFuZCBldmVuIHNvbWUgc2VjdXJpdHkgY291bGQgYmUgZW5mb3JjZWQKPiBvbiB0aGUgY2xpZW50 Lgo+IAo+IFRoZSBBQ00gY29uZmlndXJhdGlvbiBjb3VsZCBiZSBhcyBzaW1wbGUgYXMgImxldCB1 c2VyIFgKPiBoYXZlIHNlY3VyaXR5LWxldmVsIDMgYWNjZXNzIi4KPiAKPiBOb3cgdGhlIHByb2Js ZW0gc2hpZnRzIHRvIHRoZSBkYXRhIG1vZGVsIGRlc2lnbmVycyB0byB0YWcKPiBjb3JyZWN0bHks IGJ1dCB0aGV5IGFyZSB0aGUgb25lcyB3aG8gbW9zdCB1bmRlcnN0YW5kIHRoZQo+IHNlY3VyaXR5 IHJpc2tzLiAgU29tZSBvcGVyYXRvcnMgd2lsbCB3YW50IHRvIG92ZXJyaWRlCj4gdGhlIGRlZmF1 bHQgc2V0dGluZ3MsIGJ1dCB0aGF0IGlzIHRoZSBleGNlcHRpb24uICBUaGUgbWFqb3JpdHkKPiBk byBub3Qgd2FudCB0byBmdXNzIHdpdGggZmluZSBncmFudWxhcml0eSBWQUNNIGNvbmZpZ3VyYXRp b24uCj4gCj4gWUFORyBpcyB2ZXJ5IHJpY2ggaW4gc2VtYW50aidXQgZnJvbSBhIHNlY3Vy aXR5IFBPVgo+IGl0IHRyZWF0cyB0aGUga25vYiB0byBjaGFuZ2UgdGhlIGljb24gY29sb3IgdGhl IHNhbWUgYXMKPiB0aGUga25vYiB0byBkZWxldGUgYWxsIFBWQ3MgaW4gTm9ydGhlcm4gQ2FsaWZv cm5pYS4KPiAKPiAKPiAKPiBBbmR5Cj4gCj4gCj4gCj4gCj4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18KPiBOZXRjb25mIG1haWxpbmcgbGlzdAo+IE5ldGNv bmZAaWV0Zi5vcmcKPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNv bmYKCi0tIApCYWxhenMgTGVuZ3llbCAgICAgICAgICAgICAgICAgICAgICAgRXJpY3Nzb24gSHVu Z2FyeSBMdGQuClRTUCBTeXN0ZW0gTWFuYWdlcgpFQ046IDgzMSA3MzIwICAgICAgICAgICAgICAg ICAgICAgICAgRmF4OiArMzYgMSA0Mzc3NzkyClRlbDogKzM2LTEtNDM3LTczMjAgICAgIGVtYWls OiBCYWxhenMuTGVuZ3llbEBlcmljc3Nvbi5jb20KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18KTmV0Y29uZiBtYWlsaW5nIGxpc3QKTmV0Y29uZkBpZXRmLm9y ZwpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNvbmYK WNzLCBidXQgZnJvbSBhIHNlY3Vy aXR5IFBPVgo+IGl0IHRyZWF0cyB0aGUga25vYiB0byBjaGFuZ2UgdGhlIGljb24gY29sb3IgdGhl IHNhbWUgYXMKPiB0aGUga25vYiB0byBkZWxldGUgYWxsIFBWQ3MgaW4gTm9ydGhlcm4gQ2FsaWZv cm5pYS4KPiAKPiAKPiAKPiBBbmR5Cj4gCj4gCj4gCj4gCj4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18KPiBOZXRjb25mIG1haWxpbmcgbGlzdAo+IE5ldGNv bmZAaWV0Zi5vcmcKPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNv bmYKCi0tIApCYWxhenMgTGVuZ3llbCAgICAgICAgICAgICAgICAgICAgICAgRXJpY3Nzb24gSHVu Z2FyeSBMdGQuClRTUCBTeXN0ZW0gTWFuYWdlcgpFQ046IDgzMSA3MzIwICAgICAgICAgICAgICAg ICAgICAgICAgRmF4OiArMzYgMSA0Mzc3NzkyClRlbDogKzM2LTEtNDM3LTczMjAgICAgIGVtYWls OiBCYWxhenMuTGVuZ3llbEBlcmljc3Nvbi5jb20KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18KTmV0Y29uZiBtYWlsaW5nIGxpc3QKTmV0Y29uZkBpZXRmLm9y ZwpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNvbmYK From netconf-bounces@ietf.org Fri Dec 19 05:57:25 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0CF063A69A4; Fri, 19 Dec 2008 05:57:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E2DEC3A69A4 for ; Fri, 19 Dec 2008 05:57:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.868 X-Spam-Level: X-Spam-Status: No, score=-1.868 tagged_above=-999 required=5 tests=[AWL=-0.219, BAYES_00=-2.599, HELO_EQ_DE=0.35, J_CHICKENPOX_57=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V7BMWW5k3akv for ; Fri, 19 Dec 2008 05:57:23 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id D05923A6842 for ; Fri, 19 Dec 2008 05:57:22 -0800 (PST) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id B1DB0C0095; Fri, 19 Dec 2008 14:57:14 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id I8eJeHmKKO4u; Fri, 19 Dec 2008 14:57:08 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 19D53C0015; Fri, 19 Dec 2008 14:57:07 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id BB47E8C60AF; Fri, 19 Dec 2008 14:57:06 +0100 (CET) Date: Fri, 19 Dec 2008 14:57:06 +0100 From: Juergen Schoenwaelder To: Balazs Lengyel Message-ID: <20081219135706.GB9672@elstar.local> Mail-Followup-To: Balazs Lengyel , Andy Bierman , netconf@ietf.org References: <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> <4943EA80.5020908@netconfcentral.com> <494BA743.4050406@ericsson.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <494BA743.4050406@ericsson.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] security-tagging X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 19, 2008 at 02:53:07PM +0100, Balazs Lengyel wrote: > Some operators want every management operation logged, fully. However we > also have another requirement: security data, e.g. passwords, must not be > logged. It is often not trivial to figure out what data is sensitive, > what must be skipped at logging. If such data could be tagged, then we > could just say: if it is over security level 4, don't log it. It is not trivial because the sensitFrom netconf-bounces@ietf.org Fri Dec 19 05:57:25 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0CF063A69A4; Fri, 19 Dec 2008 05:57:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E2DEC3A69A4 for ; Fri, 19 Dec 2008 05:57:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.868 X-Spam-Level: X-Spam-Status: No, score=-1.868 tagged_above=-999 required=5 tests=[AWL=-0.219, BAYES_00=-2.599, HELO_EQ_DE=0.35, J_CHICKENPOX_57=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V7BMWW5k3akv for ; Fri, 19 Dec 2008 05:57:23 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id D05923A6842 for ; Fri, 19 Dec 2008 05:57:22 -0800 (PST) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id B1DB0C0095; Fri, 19 Dec 2008 14:57:14 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id I8eJeHmKKO4u; Fri, 19 Dec 2008 14:57:08 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 19D53C0015; Fri, 19 Dec 2008 14:57:07 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id BB47E8C60AF; Fri, 19 Dec 2008 14:57:06 +0100 (CET) Date: Fri, 19 Dec 2008 14:57:06 +0100 From: Juergen Schoenwaelder To: Balazs Lengyel Message-ID: <20081219135706.GB9672@elstar.local> Mail-Followup-To: Balazs Lengyel , Andy Bierman , netconf@ietf.org References: <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> <4943EA80.5020908@netconfcentral.com> <494BA743.4050406@ericsson.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <494BA743.4050406@ericsson.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] security-tagging X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Fri, Dec 19, 2008 at 02:53:07PM +0100, Balazs Lengyel wrote: > Some operators want every management operation logged, fully. However we > also have another requirement: security data, e.g. passwords, must not be > logged. It is often not trivial to figure out what data is sensitive, > what must be skipped at logging. If such data could be tagged, then we > could just say: if it is over security level 4, don't log it. It is not trivial because the ivity of data to some extend depends on the deployment and I expect that it will be very difficult to reach agreement whether something has security level 3 or 4. It might take WGs an additional year to fight^Hfigure this out. (And when they are done, it goes to the security directorate. ;-) /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf sensitivity of data to some extend depends on the deployment and I expect that it will be very difficult to reach agreement whether something has security level 3 or 4. It might take WGs an additional year to fight^Hfigure this out. (And when they are done, it goes to the security directorate. ;-) /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 19 06:18:55 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EE9933A6A2C; Fri, 19 Dec 2008 06:18:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 738843A69EA for ; Fri, 19 Dec 2008 06:18:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.914 X-Spam-Level: X-Spam-Status: No, score=-5.914 tagged_above=-999 required=5 tests=[AWL=-0.265, BAYES_00=-2.599, HELO_EQ_SE=0.35, J_CHICKENPOX_57=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lJYySxul8fPs for ; Fri, 19 Dec 2008 06:18:52 -0800 (PST) Received: from mailgw4.ericsson.se (mailgw4.ericsson.se [193.180.251.62]) by core3.amsl.com (Postfix) with ESMTP id A86533A6A2C for ; Fri, 19 Dec 2008 06:18:52 -0800 (PST) Received: from mailgw4.ericsson.se (unknown [127.0.0.1]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 007432170F; Fri, 19 Dec 2008 15:18:43 +0100 (CET) X-AuditID: c1b4fb3e-aaf7ebb00000537b-62-494bad43d624 Received: from esealmw129.eemea.ericsson.se (unknown [153.88.253.125]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id DACFA2057C; Fri, 19 Dec 2008 15:18:43 +0100 (CET) Received: from esealmw129.eemea.ericsson.se ([153.88.254.177]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Fri, 19 Dec 2008 15:18:43 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Fri, 19 Dec 2008 15:18:43 +0100 Message-ID: <494BAD42.1020402@ericsson.com> Date: Fri, 19 Dec 2008 15:18:42 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: Balazs Lengyel , Andy Bierman , netconf@ietf.org References: <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> <4943EA80.5020908@netconfcentral.com> <494BA743.4050406@ericsson.com> <20081219135706.GB9672@elstar.local> In-Reply-To: <20081219135706.GB9672@elstar.local> X-OriginalArrivalTime: 19 Dec 2008 14:18:43.0266 (UTC) FILETIME=[B28AFA20:01C961E4] X-Brightmail-Tracker: AAAAAA== Subject: Re: [Netconf] security-tagging X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 19, 2008 at 02:53:07PM +0100, Balazs Lengyel wrote: > >> Some operators want every management operation logged, fully. However we >> also have another requirement: security data, e.g. passwords, must not be >> logged. It is often not trivial to figure out what data is sensitive, >> what must be skipped at logging. If such data could be tagged, then we >> could just say: if it is over security level 4, don't log it. > > It is not trivial because the sensitivity of data to some extend > depends on the deployment and I expect that it will be very difficult > to reach agreement whether something has security level 3 or 4. It > might take WGs an additional year to fight^Hfigure this out. (And when > they are done, it goes to the security directorate. ;-) > But internally in my or other companies, where agreement is easier, it would be a nice solution, and much better than what we have today i.e. nothing. Balazs _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Fri Dec 19 06:18:55 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EE9933A6A2C; Fri, 19 Dec 2008 06:18:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 738843A69EA for ; Fri, 19 Dec 2008 06:18:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.914 X-Spam-Level: X-Spam-Status: No, score=-5.914 tagged_above=-999 required=5 tests=[AWL=-0.265, BAYES_00=-2.599, HELO_EQ_SE=0.35, J_CHICKENPOX_57=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lJYySxul8fPs for ; Fri, 19 Dec 2008 06:18:52 -0800 (PST) Received: from mailgw4.ericsson.se (mailgw4.ericsson.se [193.180.251.62]) by core3.amsl.com (Postfix) with ESMTP id A86533A6A2C for ; Fri, 19 Dec 2008 06:18:52 -0800 (PST) Received: from mailgw4.ericsson.se (unknown [127.0.0.1]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id 007432170F; Fri, 19 Dec 2008 15:18:43 +0100 (CET) X-AuditID: c1b4fb3e-aaf7ebb00000537b-62-494bad43d624 Received: from esealmw129.eemea.ericsson.se (unknown [153.88.253.125]) by mailgw4.ericsson.se (Symantec Mail Security) with ESMTP id DACFA2057C; Fri, 19 Dec 2008 15:18:43 +0100 (CET) Received: from esealmw129.eemea.ericsson.se ([153.88.254.177]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Fri, 19 Dec 2008 15:18:43 +0100 Received: from [159.107.197.224] ([159.107.197.224]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Fri, 19 Dec 2008 15:18:43 +0100 Message-ID: <494BAD42.1020402@ericsson.com> Date: Fri, 19 Dec 2008 15:18:42 +0100 From: Balazs Lengyel User-Agent: Thunderbird 2.0.0.4 (X11/20070604) MIME-Version: 1.0 To: Balazs Lengyel , Andy Bierman , netconf@ietf.org References: <49412B7B.8070809@netconfcentral.com> <4941B9BA.9090906@netconfcentral.com> <20081212073557.GA29041@elstar.local> <494283A4.4030703@netconfcentral.com> <4943EA80.5020908@netconfcentral.com> <494BA743.4050406@ericsson.com> <20081219135706.GB9672@elstar.local> In-Reply-To: <20081219135706.GB9672@elstar.local> X-OriginalArrivalTime: 19 Dec 2008 14:18:43.0266 (UTC) FILETIME=[B28AFA20:01C961E4] X-Brightmail-Tracker: AAAAAA== Subject: Re: [Netconf] security-tagging X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Juergen Schoenwaelder wrote: > On Fri, Dec 19, 2008 at 02:53:07PM +0100, Balazs Lengyel wrote: > >> Some operators want every management operation logged, fully. However we >> also have another requirement: security data, e.g. passwords, must not be >> logged. It is often not trivial to figure out what data is sensitive, >> what must be skipped at logging. If such data could be tagged, then we >> could just say: if it is over security level 4, don't log it. > > It is not trivial because the sensitivity of data to some extend > depends on the deployment and I expect that it will be very difficult > to reach agreement whether something has security level 3 or 4. It > might take WGs an additional year to fight^Hfigure this out. (And when > they are done, it goes to the security directorate. ;-) > But internally in my or other companies, where agreement is easier, it would be a nice solution, and much better than what we have today i.e. nothing. Balazs _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Mon Dec 22 01:06:44 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D854B3A6989; Mon, 22 Dec 2008 01:06:44 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3B8B83A6981 for ; Mon, 22 Dec 2008 01:01:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.886 X-Spam-Level: * X-Spam-Status: No, score=1.886 tagged_above=-999 required=5 tests=[AWL=1.284, BAYES_50=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MN0lAcvta30m for ; Mon, 22 Dec 2008 01:01:30 -0800 (PST) Received: from web36704.mail.mud.yahoo.com (web36704.mail.mud.yahoo.com [209.191.85.38]) by core3.amsl.com (Postfix) with SMTP id 7DF1B3A686C for ; Mon, 22 Dec 2008 01:01:30 -0800 (PST) Received: (qmail 66449 invoked by uid 60001); 22 Dec 2008 09:01:21 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Message-ID; b=azMhMQdH5Ky+g08RFAxONn+Y7A9YVk0cirbrFHD0w7s976OXoAhThcaHW7WqGk1lDZJ3yn9veSA/yS/dX+P6NbaB/0YC6RHOKGFnGL36boAp2mYwxs7TkuHYy9uQS58g7LS9IajdA+3LfOl3KRH8skS7yY1aPGiYyczUuQu2814=; Received: from [220.227.136.218] by web36704.mail.mud.yahoo.com via HTTP; Mon, 22 Dec 2008 01:01:21 PST X-Mailer: YahooMailWebService/0.7.260.1 Date: Mon, 22 Dec 2008 01:01:21 -0800 (PST) From: Savitri Negi To: netconf@ietf.org MIME-Version: 1.0 Message-ID: <338905.66432.qm@web36704.mail.mud.yahoo.com> Subject: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: savitri_negi@yahoo.com List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0423640486==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --===============0423640486== Content-Type: multipart/alternative; boundary="0-879879178-1229936481=:66432" --0-879879178-1229936481=:66432 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable hi I am working to find out a NMS solution for some networking nodes.that work= in adhoc environemnt .Iam quite new to Netconf.. I came across the Netconf and after reading its documents in the initial do= cuments i saw that netconf over SOAP=C2=A0 was preffered one but later on i= read somewhere in some IEEE paper that SSH is mandatory for netconf ,so ia= m a bit confused now .which one to go for thats over SOAP or over SSH? I hope someone could help me with that=20 Savitri Negi Scientist C Communication Networks Division DEAL Dehradun =0A=0A=0A Be the first one to try the new Messenger 9= Beta! Go to http://in.messenger.yahoo.com/win/ --0-879879178-1229936481=:66432 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
hi

I am working to find out a NMS solu= tion for some networking nodes.that work in adhoc environemnt .Iam quite ne= w to Netconf..
I came across the Netconf and after reading its documents= in the initial documents i saw that netconf over SOAP  was preffered From netconf-bounces@ietf.org Mon Dec 22 01:06:44 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D854B3A6989; Mon, 22 Dec 2008 01:06:44 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3B8B83A6981 for ; Mon, 22 Dec 2008 01:01:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.886 X-Spam-Level: * X-Spam-Status: No, score=1.886 tagged_above=-999 required=5 tests=[AWL=1.284, BAYES_50=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MN0lAcvta30m for ; Mon, 22 Dec 2008 01:01:30 -0800 (PST) Received: from web36704.mail.mud.yahoo.com (web36704.mail.mud.yahoo.com [209.191.85.38]) by core3.amsl.com (Postfix) with SMTP id 7DF1B3A686C for ; Mon, 22 Dec 2008 01:01:30 -0800 (PST) Received: (qmail 66449 invoked by uid 60001); 22 Dec 2008 09:01:21 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Message-ID; b=azMhMQdH5Ky+g08RFAxONn+Y7A9YVk0cirbrFHD0w7s976OXoAhThcaHW7WqGk1lDZJ3yn9veSA/yS/dX+P6NbaB/0YC6RHOKGFnGL36boAp2mYwxs7TkuHYy9uQS58g7LS9IajdA+3LfOl3KRH8skS7yY1aPGiYyczUuQu2814=; Received: from [220.227.136.218] by web36704.mail.mud.yahoo.com via HTTP; Mon, 22 Dec 2008 01:01:21 PST X-Mailer: YahooMailWebService/0.7.260.1 Date: Mon, 22 Dec 2008 01:01:21 -0800 (PST) From: Savitri Negi To: netconf@ietf.org MIME-Version: 1.0 Message-ID: <338905.66432.qm@web36704.mail.mud.yahoo.com> Subject: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: savitri_negi@yahoo.com List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0423640486==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --===============0423640486== Content-Type: multipart/alternative; boundary="0-879879178-1229936481=:66432" --0-879879178-1229936481=:66432 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable hi I am working to find out a NMS solution for some networking nodes.that work= in adhoc environemnt .Iam quite new to Netconf.. I came across the Netconf and after reading its documents in the initial do= cuments i saw that netconf over SOAP=C2=A0 was preffered one but later on i= read somewhere in some IEEE paper that SSH is mandatory for netconf ,so ia= m a bit confused now .which one to go for thats over SOAP or over SSH? I hope someone could help me with that=20 Savitri Negi Scientist C Communication Networks Division DEAL Dehradun =0A=0A=0A Be the first one to try the new Messenger 9= Beta! Go to http://in.messenger.yahoo.com/win/ --0-879879178-1229936481=:66432 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
=0A
From Chandigarh to Chennai - = find friends all over India. Click here. --0-879879178-1229936481=:66432-- --===============0423640486== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0423640486==-- fered = one but later on i read somewhere in some IEEE paper that SSH is mandatory = for netconf ,so iam a bit confused now .which one to go for thats over SOAP= or over SSH?
I hope someone could help me with that


Savitri= Negi

Scientist C
Communication N= etworks Division
DEAL Dehradun

=0A
From Chandigarh to Chennai - = find friends all over India. Click here. --0-879879178-1229936481=:66432-- --===============0423640486== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0423640486==-- From netconf-bounces@ietf.org Mon Dec 22 01:35:38 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0BBF828C0EB; Mon, 22 Dec 2008 01:35:38 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1565128C0EB for ; Mon, 22 Dec 2008 01:35:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.445 X-Spam-Level: X-Spam-Status: No, score=-1.445 tagged_above=-999 required=5 tests=[AWL=-0.936, BAYES_05=-1.11, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h9St1pd9Oe28 for ; Mon, 22 Dec 2008 01:35:36 -0800 (PST) Received: from nj300815-nj-outbound.avaya.com (nj300815-nj-outbound.net.avaya.com [198.152.12.100]) by core3.amsl.com (Postfix) with ESMTP id 19BFA28C0E3 for ; Mon, 22 Dec 2008 01:35:35 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,262,1228107600"; d="scan'208,217";a="146456466" Received: from unknown (HELO nj300815-nj-erheast.avaya.com) ([198.152.6.5]) by nj300815-nj-outbound.avaya.com with ESMTP; 22 Dec 2008 04:35:26 -0500 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by nj300815-nj-erheast-out.avaya.com with ESMTP; 22 Dec 2008 04:35:26 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Mon, 22 Dec 2008 10:35:24 +0100 Message-ID: In-Reply-To: <338905.66432.qm@web36704.mail.mud.yahoo.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] soap or ssh Thread-Index: AclkFJzIsIyzmyBgR2ODnvcg4nTXWwAA541A References: <338905.66432.qm@web36704.mail.mud.yahoo.com> From: "Romascanu, Dan (Dan)" To: , Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1780170872==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============1780170872== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C96418.9E5C9140" This is a multi-part message in MIME format. ------_=_NextPart_001_01C96418.9E5C9140 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Savitri, =20 The IEEE paper was correct, and actually RFC 4741 is clear in stating in Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20 =20 I am curious - from what document you reached the conclusion that 'SOAP was preferred'?=20 =20 I hope this helps.=20 =20 Thanks and Regards, =20 Dan =20 ________________________________ From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri Negi Sent: Monday, December 22, 2008 11:01 AM To: netconf@ietf.org Subject: [Netconf] soap or ssh =09 =09 hi I am working to find out a NMS solution for some networking nodes.that work in adhoc environemnt .Iam quite new to Netconf.. I came across the Netconf and after reading its documents in the initial documents i saw that netconf over SOAP was preffered one but later on i read somewhere in some IEEE paper that SSH is mandatory for netconf ,so iam a bit confused now .which one to go for thats over SOAP or over SSH? I hope someone could help me with that=20 Savitri Negi Scientist C Communication Networks Division DEAL Dehradun ________________________________ From Chandigarh to Chennai - find friends all over India. Click here. =20 ------_=_NextPart_001_01C96418.9E5C9140 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hi Savitri,
 
The IEEE paper was correct, and actually RFC 4741 is clear in = stating in=20 Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20
 
I am curious - from what document you reached the conclusion = that 'SOAP=20 was preferred'?
 
I hope this helps.
 
Thanks and Regards,
 
Dan
 

From: netconf-bounces@ietf.org=20 [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri=20 Negi
Sent: Monday, December 22, 2008 11:01 AM
To:=20 netconf@ietf.org
Subject: [Netconf] soap or = ssh

hi

I am working to find out a NMS solu= tion for some networking nodes.that work in adhoc environemnt .Iam quite ne= w to Netconf..
I came across the Netconf and after reading its documents= in the initial documents i saw that netconf over SOAP  was pref= one but later on i read somewhere in some IEEE paper that SSH is mandatory = for netconf ,so iam a bit confused now .which one to go for thats over SOAP= or over SSH?
I hope someone could help me with that


Savitri= Negi

Scientist C
Communication N= etworks Division
DEAL Dehradun
hi

I am working to find out a NMS solution = for=20 some networking nodes.that work in adhoc environemnt .Iam quite = new to=20 Netconf..
I came across the Netconf and after reading its = documents=20 in the initial documents i saw that netconf over SOAP  was=20 preffered one but later on i read somewhere in some IEEE paper = that SSH=20 is mandatory for netconf ,so iam a bit confused now .which one = to go for=20 thats over SOAP or over SSH?
I hope someone could help me = with that=20


Savitri Negi

Scientist C
Communication Networks = Division
DEAL=20 = Dehradun

From Chandigarh to Chennai - find friends all over India. Click=20 here. ------_=_NextPart_001_01C96418.9E5C9140-- --===============1780170872== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============1780170872==-- From netconf-bounces@ietf.org Mon Dec 22 01:35:38 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0BBF828C0EB; Mon, 22 Dec 2008 01:35:38 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1565128C0EB for ; Mon, 22 Dec 2008 01:35:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.445 X-Spam-Level: X-Spam-Status: No, score=-1.445 tagged_above=-999 required=5 tests=[AWL=-0.936, BAYES_05=-1.11, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h9St1pd9Oe28 for ; Mon, 22 Dec 2008 01:35:36 -0800 (PST) Received: from nj300815-nj-outbound.avaya.com (nj300815-nj-outbound.net.avaya.com [198.152.12.100]) by core3.amsl.com (Postfix) with ESMTP id 19BFA28C0E3 for ; Mon, 22 Dec 2008 01:35:35 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,262,1228107600"; d="scan'208,217";a="146456466" Received: from unknown (HELO nj300815-nj-erheast.avaya.com) ([198.152.6.5]) by nj300815-nj-outbound.avaya.com with ESMTP; 22 Dec 2008 04:35:26 -0500 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by nj300815-nj-erheast-out.avaya.com with ESMTP; 22 Dec 2008 04:35:26 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Mon, 22 Dec 2008 10:35:24 +0100 Message-ID: In-Reply-To: <338905.66432.qm@web36704.mail.mud.yahoo.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] soap or ssh Thread-Index: AclkFJzIsIyzmyBgR2ODnvcg4nTXWwAA541A References: <338905.66432.qm@web36704.mail.mud.yahoo.com> From: "Romascanu, Dan (Dan)" To: , Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1780170872==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============1780170872== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C96418.9E5C9140" This is a multi-part message in MIME format. ------_=_NextPart_001_01C96418.9E5C9140 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Savitri, =20 The IEEE paper was correct, and actually RFC 4741 is clear in stating in Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20 =20 I am curious - from what document you reached the conclusion that 'SOAP was preferred'?=20 =20 I hope this helps.=20 =20 Thanks and Regards, =20 Dan =20 ________________________________ From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri Negi Sent: Monday, December 22, 2008 11:01 AM To: netconf@ietf.org Subject: [Netconf] soap or ssh =09 =09 hi I am working to find out a NMS solution for some networking nodes.that work in adhoc environemnt .Iam quite new to Netconf.. I came across the Netconf and after reading its documents in the initial documents i saw that netconf over SOAP was preffered one but later on i read somewhere in some IEEE paper that SSH is mandatory for netconf ,so iam a bit confused now .which one to go for thats over SOAP or over SSH? I hope someone could help me with that=20 Savitri Negi Scientist C Communication Networks Division DEAL Dehradun ________________________________ From Chandigarh to Chennai - find friends all over India. Click here. =20 ------_=_NextPart_001_01C96418.9E5C9140 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hi Savitri,
 
The IEEE paper was correct, and actually RFC 4741 is clear in = stating in=20 Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20
 
I am curious - from what document you reached the conclusion = that 'SOAP=20 was preferred'?
 
I hope this helps.
 
Thanks and Regards,
 
Dan
 

From: netconf-bounces@ietf.org=20 [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri=20 Negi
Sent: Monday, December 22, 2008 11:01 AM
To:=20 netconf@ietf.org
Subject: [Netconf] soap or = ssh

hi

I am working to find out a NMS solution = for=20 some networking nodes.that work in adhoc environemnt .Iam quite = new to=20 Netconf..
I came across the Netconf and after reading its = documents=20 in the initial documents i saw that netconf over SOAP  was=20 preffered one but later on i read somewhere in some IEEE paper = that SSH=20 is mandatory for netconf ,so iam a bit confused now .which one = to go for=20 thats over SOAP or over SSH?
I hope someone could help me = with that=20


Savitri Negi

Scientist C
Communication Networks = Division
DEAL=20 = Dehradun

From Chandigarh to Chennai - find friends all over India. Click=20 here. ------_=_NextPart_001_01C96418.9E5C9140-- --===============1780170872== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============1780170872==-- From netconf-bounces@ietf.org Mon Dec 22 21:32:54 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D3D8A3A6992; Mon, 22 Dec 2008 21:32:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B6B93A63EC for ; Mon, 22 Dec 2008 21:32:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.351 X-Spam-Level: X-Spam-Status: No, score=-2.351 tagged_above=-999 required=5 tests=[AWL=0.248, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DL2+n+FrOg6K for ; Mon, 22 Dec 2008 21:32:52 -0800 (PST) Received: from QMTA08.westchester.pa.mail.comcast.net (qmta08.westchester.pa.mail.comcast.net [76.96.62.80]) by core3.amsl.com (Postfix) with ESMTP id 467253A6992 for ; Mon, 22 Dec 2008 21:32:52 -0800 (PST) Received: from OMTA06.westchester.pa.mail.comcast.net ([76.96.62.51]) by QMTA08.westchester.pa.mail.comcast.net with comcast id uH2M1a07F16LCl058VYiFw; Tue, 23 Dec 2008 05:32:42 +0000 Received: from Harrington73653 ([24.147.240.21]) by OMTA06.westchester.pa.mail.comcast.net with comcast id uVYi1a0040UQ6dC3SVYiNs; Tue, 23 Dec 2008 05:32:42 +0000 From: "David B Harrington" To: "'Ersue, Mehmet \(NSN - DE/Munich\)'" , "'ext Andy Bierman'" , "'Martin Bjorklund'" References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com><4947E7CC.9070700@netconfcentral.com> Date: Tue, 23 Dec 2008 00:32:42 -0500 Message-ID: <006101c964bf$e0b63b20$0600a8c0@china.huawei.com> MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook 11 In-Reply-To: X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Thread-Index: AclfpUoRmt8ZOqYXTvyxEHcYC2QumwAIxO8QAT3eYaA= Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org THAT looks like a slippery slope ... dbh > -----Original Message----- > From: netconf-bounces@ietf.org > [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, Mehmet > (NSN - DE/Munich) > Sent: Tuesday, December 16, 2008 4:53 PM > To: ext Andy Bierman; Martin Bjorklund > Cc: netconf@ietf.org > Subject: Re: [Netconf] Request for charter change > > > > Martin Bjorklund wrote: > > > Andy Bierman wrote: > > >> I think Martin's suggestion about a :validate.1.1 capability > > >> will work fine for test-only, because it is a pure extension, > > > > > > So maybe the proposed charter text: > > > > > > - no extensions (i.e. we are not doing a NETCONF V2) > > > > > > can be changed to "extensions can be done only when needed > > to fix bugs > > > or inconsistencies" or something similar. > > > > > > > > > > That would make me very happy. > > I want to address real interopeFrom netconf-bounces@ietf.org Mon Dec 22 21:32:54 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D3D8A3A6992; Mon, 22 Dec 2008 21:32:54 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B6B93A63EC for ; Mon, 22 Dec 2008 21:32:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.351 X-Spam-Level: X-Spam-Status: No, score=-2.351 tagged_above=-999 required=5 tests=[AWL=0.248, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DL2+n+FrOg6K for ; Mon, 22 Dec 2008 21:32:52 -0800 (PST) Received: from QMTA08.westchester.pa.mail.comcast.net (qmta08.westchester.pa.mail.comcast.net [76.96.62.80]) by core3.amsl.com (Postfix) with ESMTP id 467253A6992 for ; Mon, 22 Dec 2008 21:32:52 -0800 (PST) Received: from OMTA06.westchester.pa.mail.comcast.net ([76.96.62.51]) by QMTA08.westchester.pa.mail.comcast.net with comcast id uH2M1a07F16LCl058VYiFw; Tue, 23 Dec 2008 05:32:42 +0000 Received: from Harrington73653 ([24.147.240.21]) by OMTA06.westchester.pa.mail.comcast.net with comcast id uVYi1a0040UQ6dC3SVYiNs; Tue, 23 Dec 2008 05:32:42 +0000 From: "David B Harrington" To: "'Ersue, Mehmet \(NSN - DE/Munich\)'" , "'ext Andy Bierman'" , "'Martin Bjorklund'" References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com><4947E7CC.9070700@netconfcentral.com> Date: Tue, 23 Dec 2008 00:32:42 -0500 Message-ID: <006101c964bf$e0b63b20$0600a8c0@china.huawei.com> MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook 11 In-Reply-To: X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Thread-Index: AclfpUoRmt8ZOqYXTvyxEHcYC2QumwAIxO8QAT3eYaA= Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org THAT looks like a slippery slope ... dbh > -----Original Message----- > From: netconf-bounces@ietf.org > [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, Mehmet > (NSN - DE/Munich) > Sent: Tuesday, December 16, 2008 4:53 PM > To: ext Andy Bierman; Martin Bjorklund > Cc: netconf@ietf.org > Subject: Re: [Netconf] Request for charter change > > > > Martin Bjorklund wrote: > > > Andy Bierman wrote: > > >> I think Martin's suggestion about a :validate.1.1 capability > > >> will work fine for test-only, because it is a pure extension, > > > > > > So maybe the proposed charter text: > > > > > > - no extensions (i.e. we are not doing a NETCONF V2) > > > > > > can be changed to "extensions can be done only when needed > > to fix bugs > > > or inconsistencies" or something similar. > > > > > > > > > > That would make me very happy. > > I want to address real inrability issues, even if > > that means changing 1.0 in a non-backward compatible way. > > Whether changing 1.0 in a non-backward compatible way is > really needed has to be discussed and decided by the WG. > This is not excluded by the proposed charter text. > > Current charter text proposal says: > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > > The bullets above include IMO also fixing inconsistencies. > > How about changing the third bullet above to: > - extensions can be done only when needed to fix bugs > or inconsistencies (i.e. we are not doing a NETCONF V2) > > With this text the WG needs to discuss to find out which > extensions are fixes to inconsistencies and do not produce > a NETCONF V2. > > Mehmet > > > You reminded me that we have lots of capabilities besides > > the base capability that can be incremented. > > > > Of course, the default is not to add or change anything, > > and there are very few actual changes actually proposed. > > > > > > > /martin > > > > > > > > > > > > > Andy > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf teroperability issues, even if > > that means changing 1.0 in a non-backward compatible way. > > Whether changing 1.0 in a non-backward compatible way is > really needed has to be discussed and decided by the WG. > This is not excluded by the proposed charter text. > > Current charter text proposal says: > - bug fixes are to be done > - clarifications can be done > - no extensions (i.e. we are not doing a NETCONF V2) > > The bullets above include IMO also fixing inconsistencies. > > How about changing the third bullet above to: > - extensions can be done only when needed to fix bugs > or inconsistencies (i.e. we are not doing a NETCONF V2) > > With this text the WG needs to discuss to find out which > extensions are fixes to inconsistencies and do not produce > a NETCONF V2. > > Mehmet > > > You reminded me that we have lots of capabilities besides > > the base capability that can be incremented. > > > > Of course, the default is not to add or change anything, > > and there are very few actual changes actually proposed. > > > > > > > /martin > > > > > > > > > > > > > Andy > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 23 07:29:40 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7A76A3A6B0B; Tue, 23 Dec 2008 07:29:40 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 066243A6B0B for ; Tue, 23 Dec 2008 07:29:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.214 X-Spam-Level: X-Spam-Status: No, score=-2.214 tagged_above=-999 required=5 tests=[AWL=0.051, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b2AN75IWeCEI for ; Tue, 23 Dec 2008 07:29:38 -0800 (PST) Received: from smtp117.sbc.mail.sp1.yahoo.com (smtp117.sbc.mail.sp1.yahoo.com [69.147.64.90]) by core3.amsl.com (Postfix) with SMTP id 384373A6AF8 for ; Tue, 23 Dec 2008 07:29:38 -0800 (PST) Received: (qmail 45813 invoked from network); 23 Dec 2008 15:29:29 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.84.108 with plain) by smtp117.sbc.mail.sp1.yahoo.com with SMTP; 23 Dec 2008 15:29:28 -0000 X-YMail-OSG: awHLIl0VM1l4v9JCjRYhreoqMMMv3ikwhTiJJnjoCmbYvYQXSmfSdA2CnJXzrU02CtJMrVq6Vz2AClgxX.sHkwJu430L3yfzTUYXuYZJjS.0ZOlmPgUqyy8rnOFG3ZuW9WR9Oowz_vWRZUiE3WlR.BhU9FdqUIx4678Tcypt23BbCgMV07wOW_aJ X-Yahoo-Newman-Property: ymail-3 Message-ID: <495103D6.3090202@netconfcentral.com> Date: Tue, 23 Dec 2008 07:29:26 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: David B Harrington References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com><4947E7CC.9070700@netconfcentral.com> <006101c964bf$e0b63b20$0600a8c0@china.huawei.com> In-Reply-To: <006101c964bf$e0b63b20$0600a8c0@china.huawei.com> Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org David B Harrington wrote: > THAT looks like a slippery slope ... > It does seem to exhibit less surface friction than most charter text we are used to seeing ;-) We do much better when the functionality is spelled out, and 1 or more solution proposals exist (netconf-state, partial-locking, with-defaults, etc.) My concern is simply that re-publishing a protocol can have significant deployment cost. There is an errata publication process for RFCs, and if all we have is a handful of clarifying sentences, then a new RFC is of no real help to the industry. It only serves the IETF's (non-trivial) self-interest. > dbh Andy > >> -----Original Message----- >> From: netconf-bounces@ietf.org >> [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, Mehmet >> (NSN - DE/Munich) >> Sent: Tuesday, December 16, 2008 4:53 PM >> To: ext Andy Bierman; Martin Bjorklund >> Cc: netconf@ietf.org >> Subject: Re: [Netconf] Request for charter change >> >> >>> Martin Bjorklund wrote:From netconf-bounces@ietf.org Tue Dec 23 07:29:40 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7A76A3A6B0B; Tue, 23 Dec 2008 07:29:40 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 066243A6B0B for ; Tue, 23 Dec 2008 07:29:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.214 X-Spam-Level: X-Spam-Status: No, score=-2.214 tagged_above=-999 required=5 tests=[AWL=0.051, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b2AN75IWeCEI for ; Tue, 23 Dec 2008 07:29:38 -0800 (PST) Received: from smtp117.sbc.mail.sp1.yahoo.com (smtp117.sbc.mail.sp1.yahoo.com [69.147.64.90]) by core3.amsl.com (Postfix) with SMTP id 384373A6AF8 for ; Tue, 23 Dec 2008 07:29:38 -0800 (PST) Received: (qmail 45813 invoked from network); 23 Dec 2008 15:29:29 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.84.108 with plain) by smtp117.sbc.mail.sp1.yahoo.com with SMTP; 23 Dec 2008 15:29:28 -0000 X-YMail-OSG: awHLIl0VM1l4v9JCjRYhreoqMMMv3ikwhTiJJnjoCmbYvYQXSmfSdA2CnJXzrU02CtJMrVq6Vz2AClgxX.sHkwJu430L3yfzTUYXuYZJjS.0ZOlmPgUqyy8rnOFG3ZuW9WR9Oowz_vWRZUiE3WlR.BhU9FdqUIx4678Tcypt23BbCgMV07wOW_aJ X-Yahoo-Newman-Property: ymail-3 Message-ID: <495103D6.3090202@netconfcentral.com> Date: Tue, 23 Dec 2008 07:29:26 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: David B Harrington References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com><4947E7CC.9070700@netconfcentral.com> <006101c964bf$e0b63b20$0600a8c0@china.huawei.com> In-Reply-To: <006101c964bf$e0b63b20$0600a8c0@china.huawei.com> Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org David B Harrington wrote: > THAT looks like a slippery slope ... > It does seem to exhibit less surface friction than most charter text we are used to seeing ;-) We do much better when the functionality is spelled out, and 1 or more solution proposals exist (netconf-state, partial-locking, with-defaults, etc.) My concern is simply that re-publishing a protocol can have significant deployment cost. There is an errata publication process for RFCs, and if all we have is a handful of clarifying sentences, then a new RFC is of no real help to the industry. It only serves the IETF's (non-trivial) self-interest. > dbh Andy > >> -----Original Message----- >> From: netconf-bounces@ietf.org >> [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, Mehmet >> (NSN - DE/Munich) >> Sent: Tuesday, December 16, 2008 4:53 PM >> To: ext Andy Bierman; Martin Bjorklund >> Cc: netconf@ietf.org >> Subject: Re: [Netconf] Request for charter change >> >> >>> Martin Bjorklund wrote: >>>> >>>> Andy Bierman wrote: >>>>> I think Martin's suggestion about a :validate.1.1 capability >>>>> will work fine for test-only, because it is a pure extension, >>>> So maybe the proposed charter text: >>>> >>>> - no extensions (i.e. we are not doing a NETCONF V2) >>>> >>>> can be changed to "extensions can be done only when needed >>> to fix bugs >>>> or inconsistencies" or something similar. >>>> >>>> >>> That would make me very happy. >>> I want to address real interoperability issues, even if >>> that means changing 1.0 in a non-backward compatible way. >> Whether changing 1.0 in a non-backward compatible way is >> really needed has to be discussed and decided by the WG. >> This is not excluded by the proposed charter text. >> >> Current charter text proposal says: >> - bug fixes are to be done >> - clarifications can be done >> - no extensions (i.e. we are not doing a NETCONF V2) >> >> The bullets above include IMO also fixing inconsistencies. >> >> How about changing the third bullet above to: >> - extensions can be done only when needed to fix bugs >> or inconsistencies (i.e. we are not doing a NETCONF V2) >> >> With this text the WG needs to discuss to find out which >> extensions are fixes to inconsistencies and do not produce >> a NETCONF V2. >> >> Mehmet >> >>> You reminded me that we have lots of capabilities besides >>> the base capability that can be incremented. >>> >>> Of course, the default is not to add or change anything, >>> and there are very few actual changes actually proposed. >>> >>> >>>> /martin >>>> >>>> >>>> >>> Andy >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> > > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf Andy Bierman wrote: >>>>> I think Martin's suggestion about a :validate.1.1 capability >>>>> will work fine for test-only, because it is a pure extension, >>>> So maybe the proposed charter text: >>>> >>>> - no extensions (i.e. we are not doing a NETCONF V2) >>>> >>>> can be changed to "extensions can be done only when needed >>> to fix bugs >>>> or inconsistencies" or something similar. >>>> >>>> >>> That would make me very happy. >>> I want to address real interoperability issues, even if >>> that means changing 1.0 in a non-backward compatible way. >> Whether changing 1.0 in a non-backward compatible way is >> really needed has to be discussed and decided by the WG. >> This is not excluded by the proposed charter text. >> >> Current charter text proposal says: >> - bug fixes are to be done >> - clarifications can be done >> - no extensions (i.e. we are not doing a NETCONF V2) >> >> The bullets above include IMO also fixing inconsistencies. >> >> How about changing the third bullet above to: >> - extensions can be done only when needed to fix bugs >> or inconsistencies (i.e. we are not doing a NETCONF V2) >> >> With this text the WG needs to discuss to find out which >> extensions are fixes to inconsistencies and do not produce >> a NETCONF V2. >> >> Mehmet >> >>> You reminded me that we have lots of capabilities besides >>> the base capability that can be incremented. >>> >>> Of course, the default is not to add or change anything, >>> and there are very few actual changes actually proposed. >>> >>> >>>> /martin >>>> >>>> >>>> >>> Andy >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> > > > > _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 23 08:33:21 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 00A8028C16D; Tue, 23 Dec 2008 08:33:21 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4705A28C16C for ; Tue, 23 Dec 2008 08:33:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.021 X-Spam-Level: X-Spam-Status: No, score=0.021 tagged_above=-999 required=5 tests=[AWL=0.463, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ApNL+Nr0PIsf for ; Tue, 23 Dec 2008 08:33:19 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id B66B928C16D for ; Tue, 23 Dec 2008 08:33:18 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1LFABu-0001lk-RM; Tue, 23 Dec 2008 17:33:07 +0100 Message-ID: <1A8837314FDC47EDB0974C81F3436AAE@BertLaptop> From: "Bert Wijnen \(IETF\)" To: "Andy Bierman" , "David B Harrington" References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com><4947E7CC.9070700@netconfcentral.com><006101c964bf$e0b63b20$0600a8c0@china.huawei.com> <495103D6.3090202@netconfcentral.com> In-Reply-To: <495103D6.3090202@netconfcentral.com> Date: Tue, 23 Dec 2008 17:29:51 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0276489557==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0276489557== Content-Type: multipart/alternative; boundary="----=_NextPart_000_09A1_01C96524.0FD81FE0" This is a multi-part message in MIME format. ------=_NextPart_000_09A1_01C96524.0FD81FE0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Andy/David (and others), our draft WG recharter-text is already inIESG and IAB review. We did submit it last week remember.=20 So... do we really want to start making more changes? If so, please DO submit proposed alternate/replacement text Bert ----- Original Message -----=20 From: Andy Bierman=20 To: David B Harrington=20 Cc: netconf@ietf.org=20 Sent: Tuesday, December 23, 2008 4:29 PM Subject: Re: [Netconf] Request for charter change David B Harrington wrote: > THAT looks like a slippery slope ... >=20 It does seem to exhibit less surface friction than most charter text we are used to seeing ;-) We do much better when the functionality is spelled out, and 1 or more solution proposals exist (netconf-state, partial-locking, with-defaults, etc.) My concern is simply that re-publishing a protocol can have significant deployment cost. There is an errata publication process for RFCs, and if all we have is a handful of clarifying sentences, then a new RFC is of no real help to the industry. It only serves the IETF's (non-trivial) self-interest. > dbh Andy >=20 >> -----Original Message----- >> From: netconf-bounces@ietf.org=20 >> [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, Mehmet=20 >> (NSN - DE/Munich) >> Sent: Tuesday, December 16, 2008 4:53 PM >> To: ext Andy Bierman; Martin Bjorklund >> Cc: netconf@ietf.org >> Subject: Re: [Netconf] Request for charter change >> >> >>> Martin Bjorklund wrote: >>>> Andy Bierman wrote: >>>>> I think Martin's suggestion about a :validate.1.1 capability >>>>> will work fine for test-only, because it is a pure extension, >>>> So maybe the proposed charter text: >>>> >>>> - no extensions (i.e. we are not doing a NETCONF V2) >>>> >>>> can be changed to "extensions can be done only when needed=20 >>> to fix bugs >>>> or inconsistencies" or something similar. >>>> >>>> >>> That would make me very happy. >>> I want to address real interoperability issues, even if >>> that means changing 1.0 in a non-backward compatible way. >> Whether changing 1.0 in a non-backward compatible way is=20 >> really needed has to be discussed and decided by the WG.=20 >> This is not excluded by the proposed charter text. >> >> Current charter text proposal says: >> - bug fixes are to be done >> - clarifications can be done >> - no extensions (i.e. we are not doing a NETCONF V2) >> >> The bullets above include IMO also fixing inconsistencies. >> >> How about changing the third bullet above to: >> - extensions can be done only when needed to fix bugs=20 >> or inconsistencies (i.e. we are not doing a NETCONF V2) >> >> With this text the WG needs to discuss to find out which=20 >> extensions are fixes to inconsistencies and do not produce=20 >> a NETCONF V2. >> >> Mehmet >> >>> You reminded me that we have lots of capabilities besides >>> the base capability that can be incremented. >>> >>> Of course, the default is not to add or change anything, >>> and there are very few actual changes actually proposed. >>> >>> >>>> /martin >>>> >>>> >>>> >>> Andy >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> >=20 >=20 >=20 >=20 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------=_NextPart_000_09A1_01C96524.0FD81FE0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Andy/David (and others),
 
our draft WG recharter-text is already inIESG and = IAB=20 review.
We did submit it last week remember.
So... do we really want to start making more=20 changes?
If so, please DO submit proposed = alternate/replacement=20 text
 
Bert
----- Original Message -----
From:=20 Andy=20 Bierman
Sent: Tuesday, December 23, = 2008 4:29=20 PM
Subject: Re: [Netconf] Request = for=20 charter change

David B Harrington wrote:
> THAT looks like a = slippery=20 slope ...
>

It does seem to exhibit less surface=20 friction
than most charter text we are used to seeing ;-)

We = do much=20 better when the functionality is
spelled out, and 1 or more = solution=20 proposals
exist (netconf-state, partial-locking, with-defaults,=20 etc.)

My concern is simply that re-publishing a protocol
can = have=20 significant deployment cost.  There is an errata
publication = process=20 for RFCs, and if all we have is
a handful of clarifying sentences, = then a=20 new RFC
is of no real help to the industry.  It only
serves = the=20 IETF's (non-trivial) self-interest.


>=20 dbh

Andy


>
>> -----Original=20 Message-----
>> From: netconf-bounces@ietf.org=20
>> [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, = Mehmet=20
>> (NSN - DE/Munich)
>> Sent: Tuesday, December 16, = 2008=20 4:53 PM
>> To: ext Andy Bierman; Martin Bjorklund
>> = Cc: netconf@ietf.org
>> = Subject: Re:=20 [Netconf] Request for charter = change
>>
>>
>>>=20 Martin Bjorklund wrote:
>>>> Andy Bierman <andy@netconfcentral.com>=20 wrote:
>>>>> I think Martin's suggestion about a=20 :validate.1.1 capability
>>>>> will work fine for = test-only,=20 because it is a pure extension,
>>>> So maybe the = proposed=20 charter=20 = text:
>>>>
>>>>    &nbs= p; =20 - no extensions (i.e. we are not doing a NETCONF=20 V2)
>>>>
>>>> can be changed to = "extensions can=20 be done only when needed
>>> to fix = bugs
>>>> or=20 inconsistencies" or something=20 similar.
>>>>
>>>>
>>> That = would=20 make me very happy.
>>> I want to address real = interoperability=20 issues, even if
>>> that means changing 1.0 in a = non-backward=20 compatible way.
>> Whether changing 1.0 in a non-backward = compatible=20 way is
>> really needed has to be discussed and decided by = the WG.=20
>> This is not excluded by the proposed charter=20 text.
>>
>> Current charter text proposal=20 says:
>>      - bug fixes are to be=20 done
>>      - clarifications can be = done
>>      - no extensions (i.e. = we are=20 not doing a NETCONF V2)
>>
>> The bullets above = include IMO=20 also fixing inconsistencies.
>>
>> How about = changing the=20 third bullet above to:
>>      - = extensions=20 can be done only when needed to fix bugs=20
>>        or = inconsistencies=20 (i.e. we are not doing a NETCONF V2)
>>
>> With this = text=20 the WG needs to discuss to find out which
>> extensions are = fixes to=20 inconsistencies and do not produce
>> a NETCONF=20 V2.
>>
>> Mehmet
>>
>>> You = reminded me=20 that we have lots of capabilities besides
>>> the base = capability=20 that can be incremented.
>>>
>>> Of course, = the=20 default is not to add or change anything,
>>> and there = are very=20 few actual changes actually=20 proposed.
>>>
>>>
>>>>=20 = /martin
>>>>
>>>>
>>>>
&g= t;>>=20 Andy
>> = _______________________________________________
>>=20 Netconf mailing list
>> Netconf@ietf.org
>> https://www.ietf.o= rg/mailman/listinfo/netconf
>>
>=20
>
>
>=20


_______________________________________________
Netconf = mailing=20 list
Netconf@ietf.org
https://www.ietf.o= rg/mailman/listinfo/netconf
------=_NextPart_000_09A1_01C96524.0FD81FE0-- --===============0276489557== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0276489557==-- From netconf-bounces@ietf.org Tue Dec 23 08:33:21 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 00A8028C16D; Tue, 23 Dec 2008 08:33:21 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4705A28C16C for ; Tue, 23 Dec 2008 08:33:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.021 X-Spam-Level: X-Spam-Status: No, score=0.021 tagged_above=-999 required=5 tests=[AWL=0.463, BAYES_00=-2.599, HELO_MISMATCH_NET=0.611, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ApNL+Nr0PIsf for ; Tue, 23 Dec 2008 08:33:19 -0800 (PST) Received: from relay.versatel.net (beverwijk.tele2.vuurwerk.nl [62.250.3.53]) by core3.amsl.com (Postfix) with ESMTP id B66B928C16D for ; Tue, 23 Dec 2008 08:33:18 -0800 (PST) Received: from [87.215.199.34] (helo=BertLaptop) by relay.versatel.net with smtp (Exim 4.69) (envelope-from ) id 1LFABu-0001lk-RM; Tue, 23 Dec 2008 17:33:07 +0100 Message-ID: <1A8837314FDC47EDB0974C81F3436AAE@BertLaptop> From: "Bert Wijnen \(IETF\)" To: "Andy Bierman" , "David B Harrington" References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com><4947E7CC.9070700@netconfcentral.com><006101c964bf$e0b63b20$0600a8c0@china.huawei.com> <495103D6.3090202@netconfcentral.com> In-Reply-To: <495103D6.3090202@netconfcentral.com> Date: Tue, 23 Dec 2008 17:29:51 +0100 Organization: Consultant MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0276489557==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0276489557== Content-Type: multipart/alternative; boundary="----=_NextPart_000_09A1_01C96524.0FD81FE0" This is a multi-part message in MIME format. ------=_NextPart_000_09A1_01C96524.0FD81FE0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Andy/David (and others), our draft WG recharter-text is already inIESG and IAB review. We did submit it last week remember.=20 So... do we really want to start making more changes? If so, please DO submit proposed alternate/replacement text Bert ----- Original Message -----=20 From: Andy Bierman=20 To: David B Harrington=20 Cc: netconf@ietf.org=20 Sent: Tuesday, December 23, 2008 4:29 PM Subject: Re: [Netconf] Request for charter change David B Harrington wrote: > THAT looks like a slippery slope ... >=20 It does seem to exhibit less surface friction than most charter text we are used to seeing ;-) We do much better when the functionality is spelled out, and 1 or more solution proposals exist (netconf-state, partial-locking, with-defaults, etc.) My concern is simply that re-publishing a protocol can have significant deployment cost. There is an errata publication process for RFCs, and if all we have is a handful of clarifying sentences, then a new RFC is of no real help to the industry. It only serves the IETF's (non-trivial) self-interest. > dbh Andy >=20 >> -----Original Message----- >> From: netconf-bounces@ietf.org=20 >> [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, Mehmet=20 >> (NSN - DE/Munich) >> Sent: Tuesday, December 16, 2008 4:53 PM >> To: ext Andy Bierman; Martin Bjorklund >> Cc: netconf@ietf.org >> Subject: Re: [Netconf] Request for charter change >> >> >>> Martin Bjorklund wrote: >>>> Andy Bierman wrote: >>>>> I think Martin's suggestion about a :validate.1.1 capability >>>>> will work fine for test-only, because it is a pure extension, >>>> So maybe the proposed charter text: >>>> >>>> - no extensions (i.e. we are not doing a NETCONF V2) >>>> >>>> can be changed to "extensions can be done only when needed=20 >>> to fix bugs >>>> or inconsistencies" or something similar. >>>> >>>> >>> That would make me very happy. >>> I want to address real interoperability issues, even if >>> that means changing 1.0 in a non-backward compatible way. >> Whether changing 1.0 in a non-backward compatible way is=20 >> really needed has to be discussed and decided by the WG.=20 >> This is not excluded by the proposed charter text. >> >> Current charter text proposal says: >> - bug fixes are to be done >> - clarifications can be done >> - no extensions (i.e. we are not doing a NETCONF V2) >> >> The bullets above include IMO also fixing inconsistencies. >> >> How about changing the third bullet above to: >> - extensions can be done only when needed to fix bugs=20 >> or inconsistencies (i.e. we are not doing a NETCONF V2) >> >> With this text the WG needs to discuss to find out which=20 >> extensions are fixes to inconsistencies and do not produce=20 >> a NETCONF V2. >> >> Mehmet >> >>> You reminded me that we have lots of capabilities besides >>> the base capability that can be incremented. >>> >>> Of course, the default is not to add or change anything, >>> and there are very few actual changes actually proposed. >>> >>> >>>> /martin >>>> >>>> >>>> >>> Andy >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> >=20 >=20 >=20 >=20 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf ------=_NextPart_000_09A1_01C96524.0FD81FE0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Andy/David (and others),
 
our draft WG recharter-text is already inIESG and = IAB=20 review.
We did submit it last week remember.
So... do we really want to start making more=20 changes?
If so, please DO submit proposed = alternate/replacement=20 text
 
Bert
----- Original Message -----
From:=20 Andy=20 Bierman
Sent: Tuesday, December 23, = 2008 4:29=20 PM
Subject: Re: [Netconf] Request = for=20 charter change

David B Harrington wrote:
> THAT looks like a = slippery=20 slope ...
>

It does seem to exhibit less surface=20 friction
than most charter text we are used to seeing ;-)

We = do much=20 better when the functionality is
spelled out, and 1 or more = solution=20 proposals
exist (netconf-state, partial-locking, with-defaults,=20 etc.)

My concern is simply that re-publishing a protocol
can = have=20 significant deployment cost.  There is an errata
publication = process=20 for RFCs, and if all we have is
a handful of clarifying sentences, = then a=20 new RFC
is of no real help to the industry.  It only
serves = the=20 IETF's (non-trivial) self-interest.


>=20 dbh

Andy


>
>> -----Original=20 Message-----
>> From: netconf-bounces@ietf.org=20
>> [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, = Mehmet=20
>> (NSN - DE/Munich)
>> Sent: Tuesday, December 16, = 2008=20 4:53 PM
>> To: ext Andy Bierman; Martin Bjorklund
>> = Cc: netconf@ietf.org
>> = Subject: Re:=20 [Netconf] Request for charter = change
>>
>>
>>>=20 Martin Bjorklund wrote:
>>>> Andy Bierman <andy@netconfcentral.com>=20 wrote:
>>>>> I think Martin's suggestion about a=20 :validate.1.1 capability
>>>>> will work fine for = test-only,=20 because it is a pure extension,
>>>> So maybe the = proposed=20 charter=20 = text:
>>>>
>>>>    &nbs= p; =20 - no extensions (i.e. we are not doing a NETCONF=20 V2)
>>>>
>>>> can be changed to = "extensions can=20 be done only when needed
>>> to fix = bugs
>>>> or=20 inconsistencies" or something=20 similar.
>>>>
>>>>
>>> That = would=20 make me very happy.
>>> I want to address real = interoperability=20 issues, even if
>>> that means changing 1.0 in a = non-backward=20 compatible way.
>> Whether changing 1.0 in a non-backward = compatible=20 way is
>> really needed has to be discussed and decided by = the WG.=20
>> This is not excluded by the proposed charter=20 text.
>>
>> Current charter text proposal=20 says:
>>      - bug fixes are to be=20 done
>>      - clarifications can be = done
>>      - no extensions (i.e. = we are=20 not doing a NETCONF V2)
>>
>> The bullets above = include IMO=20 also fixing inconsistencies.
>>
>> How about = changing the=20 third bullet above to:
>>      - = extensions=20 can be done only when needed to fix bugs=20
>>        or = inconsistencies=20 (i.e. we are not doing a NETCONF V2)
>>
>> With this = text=20 the WG needs to discuss to find out which
>> extensions are = fixes to=20 inconsistencies and do not produce
>> a NETCONF=20 V2.
>>
>> Mehmet
>>
>>> You = reminded me=20 that we have lots of capabilities besides
>>> the base = capability=20 that can be incremented.
>>>
>>> Of course, = the=20 default is not to add or change anything,
>>> and there = are very=20 few actual changes actually=20 proposed.
>>>
>>>
>>>>=20 = /martin
>>>>
>>>>
>>>>
&g= t;>>=20 Andy
>> = _______________________________________________
>>=20 Netconf mailing list
>> Netconf@ietf.org
>> https://www.ietf.o= rg/mailman/listinfo/netconf
>>
>=20
>
>
>=20


_______________________________________________
Netconf = mailing=20 list
Netconf@ietf.org
https://www.ietf.o= rg/mailman/listinfo/netconf
------=_NextPart_000_09A1_01C96524.0FD81FE0-- --===============0276489557== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0276489557==-- From netconf-bounces@ietf.org Tue Dec 23 08:51:58 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ECC183A6B15; Tue, 23 Dec 2008 08:51:57 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 66EE63A6B15 for ; Tue, 23 Dec 2008 08:51:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.215 X-Spam-Level: X-Spam-Status: No, score=-2.215 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GLWOfNxLnGCw for ; Tue, 23 Dec 2008 08:51:56 -0800 (PST) Received: from smtp120.sbc.mail.sp1.yahoo.com (smtp120.sbc.mail.sp1.yahoo.com [69.147.64.93]) by core3.amsl.com (Postfix) with SMTP id 833B83A6A31 for ; Tue, 23 Dec 2008 08:51:56 -0800 (PST) Received: (qmail 22216 invoked from network); 23 Dec 2008 16:51:47 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.84.108 with plain) by smtp120.sbc.mail.sp1.yahoo.com with SMTP; 23 Dec 2008 16:51:46 -0000 X-YMail-OSG: RTBY.9oVM1k.9q8JNa.OvYRVwRAs9ORAJx8UaMcz2XqRJUnwBdxZwMnj855MJZyPPTKpF5m7TsKqbPGRiwLchTWzLs2cGsjSo5iqgOOLKptqRW1fJI9IDlnaOM6lSUFCNChvbSj0tlwrIQKHs3ZxB8i2c8uwB2zXrhnG1w3Zrt7LPse9QpGl86qo X-Yahoo-Newman-Property: ymail-3 Message-ID: <49511720.1010209@netconfcentral.com> Date: Tue, 23 Dec 2008 08:51:44 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Bert Wijnen (IETF)" References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com><4947E7CC.9070700@netconfcentral.com><006101c964bf$e0b63b20$0600a8c0@china.huawei.com> <495103D6.3090202@netconfcentral.com> <1A8837314FDC47EDB0974C81F3436AAE@BertLaptop> In-Reply-To: <1A8837314FDC47EDB0974C81F3436AAE@BertLaptop> Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Bert Wijnen (IETF) wrote: > Andy/David (and others), > > our draft WG recharter-text is already inIESG and IAB review. > We did submit it last week remember. > So... do we really want to start making more changes? > If so, please DO submit proposed alternate/replacement text > I am not trying to change any text, but don't kid yourself that the new charter text in question will be of any use in the future to resolve one of the those 'in scope or out of scope' decisions. I think it is good to address interoperability, instead of just assume everything is going fine. Juergen's draft is a great first step. This is the next logical step. Real interoperability is the only metric that matters in the end. One example: XPath. Sharon (and others) have commented in the past that :xpath should be mandatory because everybody implements it. Really? Only 1 of the 3 implementations in the report claimed to From netconf-bounces@ietf.org Tue Dec 23 08:51:58 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ECC183A6B15; Tue, 23 Dec 2008 08:51:57 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 66EE63A6B15 for ; Tue, 23 Dec 2008 08:51:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.215 X-Spam-Level: X-Spam-Status: No, score=-2.215 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GLWOfNxLnGCw for ; Tue, 23 Dec 2008 08:51:56 -0800 (PST) Received: from smtp120.sbc.mail.sp1.yahoo.com (smtp120.sbc.mail.sp1.yahoo.com [69.147.64.93]) by core3.amsl.com (Postfix) with SMTP id 833B83A6A31 for ; Tue, 23 Dec 2008 08:51:56 -0800 (PST) Received: (qmail 22216 invoked from network); 23 Dec 2008 16:51:47 -0000 Received: from unknown (HELO ?127.0.0.1?) (andy@68.120.84.108 with plain) by smtp120.sbc.mail.sp1.yahoo.com with SMTP; 23 Dec 2008 16:51:46 -0000 X-YMail-OSG: RTBY.9oVM1k.9q8JNa.OvYRVwRAs9ORAJx8UaMcz2XqRJUnwBdxZwMnj855MJZyPPTKpF5m7TsKqbPGRiwLchTWzLs2cGsjSo5iqgOOLKptqRW1fJI9IDlnaOM6lSUFCNChvbSj0tlwrIQKHs3ZxB8i2c8uwB2zXrhnG1w3Zrt7LPse9QpGl86qo X-Yahoo-Newman-Property: ymail-3 Message-ID: <49511720.1010209@netconfcentral.com> Date: Tue, 23 Dec 2008 08:51:44 -0800 From: Andy Bierman User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: "Bert Wijnen (IETF)" References: <49477227.9000000@s3group.com> <4947D859.9020300@netconfcentral.com><20081216.182609.197852496.mbj@tail-f.com><4947E7CC.9070700@netconfcentral.com><006101c964bf$e0b63b20$0600a8c0@china.huawei.com> <495103D6.3090202@netconfcentral.com> <1A8837314FDC47EDB0974C81F3436AAE@BertLaptop> In-Reply-To: <1A8837314FDC47EDB0974C81F3436AAE@BertLaptop> Cc: netconf@ietf.org Subject: Re: [Netconf] Request for charter change X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org Bert Wijnen (IETF) wrote: > Andy/David (and others), > > our draft WG recharter-text is already inIESG and IAB review. > We did submit it last week remember. > So... do we really want to start making more changes? > If so, please DO submit proposed alternate/replacement text > I am not trying to change any text, but don't kid yourself that the new charter text in question will be of any use in the future to resolve one of the those 'in scope or out of scope' decisions. I think it is good to address interoperability, instead of just assume everything is going fine. Juergen's draft is a great first step. This is the next logical step. Real interoperability is the only metric that matters in the end. One example: XPath. Sharon (and others) have commented in the past that :xpath should be mandatory because everybody implements it. Really? Only 1 of the 3 implementations in the report claimimplement it. Does 'everybody' implement XPath in an interoperable manner? How would we know? It seems odd to me that the RFC is being updated based on implementation experience, but the WG has never even requested an implementation report from anybody. > Bert Andy > > ----- Original Message ----- > *From:* Andy Bierman > *To:* David B Harrington > *Cc:* netconf@ietf.org > *Sent:* Tuesday, December 23, 2008 4:29 PM > *Subject:* Re: [Netconf] Request for charter change > > David B Harrington wrote: > > THAT looks like a slippery slope ... > > > > It does seem to exhibit less surface friction > than most charter text we are used to seeing ;-) > > We do much better when the functionality is > spelled out, and 1 or more solution proposals > exist (netconf-state, partial-locking, with-defaults, etc.) > > My concern is simply that re-publishing a protocol > can have significant deployment cost. There is an errata > publication process for RFCs, and if all we have is > a handful of clarifying sentences, then a new RFC > is of no real help to the industry. It only > serves the IETF's (non-trivial) self-interest. > > > > dbh > > Andy > > > > > >> -----Original Message----- > >> From: netconf-bounces@ietf.org > >> [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, Mehmet > >> (NSN - DE/Munich) > >> Sent: Tuesday, December 16, 2008 4:53 PM > >> To: ext Andy Bierman; Martin Bjorklund > >> Cc: netconf@ietf.org > >> Subject: Re: [Netconf] Request for charter change > >> > >> > >>> Martin Bjorklund wrote: > >>>> Andy Bierman > wrote: > >>>>> I think Martin's suggestion about a :validate.1.1 capability > >>>>> will work fine for test-only, because it is a pure extension, > >>>> So maybe the proposed charter text: > >>>> > >>>> - no extensions (i.e. we are not doing a NETCONF V2) > >>>> > >>>> can be changed to "extensions can be done only when needed > >>> to fix bugs > >>>> or inconsistencies" or something similar. > >>>> > >>>> > >>> That would make me very happy. > >>> I want to address real interoperability issues, even if > >>> that means changing 1.0 in a non-backward compatible way. > >> Whether changing 1.0 in a non-backward compatible way is > >> really needed has to be discussed and decided by the WG. > >> This is not excluded by the proposed charter text. > >> > >> Current charter text proposal says: > >> - bug fixes are to be done > >> - clarifications can be done > >> - no extensions (i.e. we are not doing a NETCONF V2) > >> > >> The bullets above include IMO also fixing inconsistencies. > >> > >> How about changing the third bullet above to: > >> - extensions can be done only when needed to fix bugs > >> or inconsistencies (i.e. we are not doing a NETCONF V2) > >> > >> With this text the WG needs to discuss to find out which > >> extensions are fixes to inconsistencies and do not produce > >> a NETCONF V2. > >> > >> Mehmet > >> > >>> You reminded me that we have lots of capabilities besides > >>> the base capability that can be incremented. > >>> > >>> Of course, the default is not to add or change anything, > >>> and there are very few actual changes actually proposed. > >>> > >>> > >>>> /martin > >>>> > >>>> > >>>> > >>> Andy > >> _______________________________________________ > >> Netconf mailing list > >> Netconf@ietf.org > >> https://www.ietf.org/mailman/listinfo/netconf > >> > > > > > > > > > > >ed to implement it. Does 'everybody' implement XPath in an interoperable manner? How would we know? It seems odd to me that the RFC is being updated based on implementation experience, but the WG has never even requested an implementation report from anybody. > Bert Andy > > ----- Original Message ----- > *From:* Andy Bierman > *To:* David B Harrington > *Cc:* netconf@ietf.org > *Sent:* Tuesday, December 23, 2008 4:29 PM > *Subject:* Re: [Netconf] Request for charter change > > David B Harrington wrote: > > THAT looks like a slippery slope ... > > > > It does seem to exhibit less surface friction > than most charter text we are used to seeing ;-) > > We do much better when the functionality is > spelled out, and 1 or more solution proposals > exist (netconf-state, partial-locking, with-defaults, etc.) > > My concern is simply that re-publishing a protocol > can have significant deployment cost. There is an errata > publication process for RFCs, and if all we have is > a handful of clarifying sentences, then a new RFC > is of no real help to the industry. It only > serves the IETF's (non-trivial) self-interest. > > > > dbh > > Andy > > > > > >> -----Original Message----- > >> From: netconf-bounces@ietf.org > >> [mailto:netconf-bounces@ietf.org] On Behalf Of Ersue, Mehmet > >> (NSN - DE/Munich) > >> Sent: Tuesday, December 16, 2008 4:53 PM > >> To: ext Andy Bierman; Martin Bjorklund > >> Cc: netconf@ietf.org > >> Subject: Re: [Netconf] Request for charter change > >> > >> > >>> Martin Bjorklund wrote: > >>>> Andy Bierman > wrote: > >>>>> I think Martin's suggestion about a :validate.1.1 capability > >>>>> will work fine for test-only, because it is a pure extension, > >>>> So maybe the proposed charter text: > >>>> > >>>> - no extensions (i.e. we are not doing a NETCONF V2) > >>>> > >>>> can be changed to "extensions can be done only when needed > >>> to fix bugs > >>>> or inconsistencies" or something similar. > >>>> > >>>> > >>> That would make me very happy. > >>> I want to address real interoperability issues, even if > >>> that means changing 1.0 in a non-backward compatible way. > >> Whether changing 1.0 in a non-backward compatible way is > >> really needed has to be discussed and decided by the WG. > >> This is not excluded by the proposed charter text. > >> > >> Current charter text proposal says: > >> - bug fixes are to be done > >> - clarifications can be done > >> - no extensions (i.e. we are not doing a NETCONF V2) > >> > >> The bullets above include IMO also fixing inconsistencies. > >> > >> How about changing the third bullet above to: > >> - extensions can be done only when needed to fix bugs > >> or inconsistencies (i.e. we are not doing a NETCONF V2) > >> > >> With this text the WG needs to discuss to find out which > >> extensions are fixes to inconsistencies and do not produce > >> a NETCONF V2. > >> > >> Mehmet > >> > >>> You reminded me that we have lots of capabilities besides > >>> the base capability that can be incremented. > >>> > >>> Of course, the default is not to add or change anything, > >>> and there are very few actual changes actually proposed. > >>> > >>> > >>>> /martin > >>>> > >>>> > >>>> > >>> Andy > >> _______________________________________________ > >> Netconf mailing list > >> Netconf@ietf.org > >> https://www.ietf.org/mailman/listinfo/netconf > >> > > > > > > > > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 23 20:44:49 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 538AA28C174; Tue, 23 Dec 2008 20:44:49 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9396928C171 for ; Tue, 23 Dec 2008 20:44:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.125 X-Spam-Level: X-Spam-Status: No, score=0.125 tagged_above=-999 required=5 tests=[AWL=2.123, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bX73dHhSy5Ti for ; Tue, 23 Dec 2008 20:44:42 -0800 (PST) Received: from web36704.mail.mud.yahoo.com (web36704.mail.mud.yahoo.com [209.191.85.38]) by core3.amsl.com (Postfix) with SMTP id 5FBBC3A6B37 for ; Tue, 23 Dec 2008 20:44:42 -0800 (PST) Received: (qmail 51556 invoked by uid 60001); 24 Dec 2008 04:44:33 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type:Message-ID; b=PEo1gaQWnBYGsJXUGTcyzjUnutNYRgi3c3kTNRvJtQalOMUt+7142nbi2PcXFkmaVOvQ0Mu7a+UX0bw8SIh3thTcch3jdDzRvy0kQtLkDAqQkFse7e1zQhoHiS7tI7nA1N9MgotnXQhDLcA1zKSNyOlNohfrxtbd613QSrkBISQ=; X-YMail-OSG: .kpGnOMVM1kUX.A7rb1YSf5FZEtER8Jrnosvwk7ReriW.w6qR2pgAzPo6mYHJ9hnFCBMCoScQuJheU3qBFFNKXMEe8iBlUwH_5552U9OVzafmqmict84NeNWheQxY4FSHM35XCQylebEiKgcG11b6ZDYkRlTLkFIxYNhjTS4OP.EZrkUZfM12krPiZjFHfVi22J8jifs9orDNSFoyi1EisT9kv_P Received: from [220.227.136.218] by web36704.mail.mud.yahoo.com via HTTP; Tue, 23 Dec 2008 20:44:33 PST X-Mailer: YahooMailWebService/0.7.260.1 Date: Tue, 23 Dec 2008 20:44:33 -0800 (PST) From: Savitri Negi To: netconf@ietf.org, "Romascanu, Dan \(Dan\)" In-Reply-To: MIME-Version: 1.0 Message-ID: <109392.47949.qm@web36704.mail.mud.yahoo.com> Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: savitri_negi@yahoo.com List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1835787944==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --===============1835787944== Content-Type: multipart/alternative; boundary="0-1020405215-1230093873=:47949" --0-1020405215-1230093873=:47949 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable hi actually iam a bit confusd over this yet=20 ,RFC 5381 says that SOAP is used as transport protocol for netconf ,and eve= n in RFC 4743 SOAP is one of the transport protocls for NEtconf ,though SSH= is said to be a mandatory protocol=C2=A0 then i dont understand why we hav= e got three options thats SOAP BEEP and SSH , Does that mean i need to implement SOAP as well as SSH as transport ... Actually in some papers i read that SOAP was preferrd because a lot of open= source tools and web tools are available when we use SOAP=20 But Iam still confused .. i hope sumbody could possibly help me out ... thanx .. Savitri Negi Scientist C Communication Networks Division DEAL Dehradun =C2=A0 =20 --- On Mon, 22/12/08, Romascanu, Dan (Dan) wrote: From: Romascanu, Dan (Dan) Subject: RE: [Netconf] soap or ssh To: savitri_negi@yahoo.com, netconf@ietf.org Date: Monday, 22 December, 2008, 3:05 PM =20 Hi Savitri, =C2=A0 The IEEE paper was correct, and actually RFC 4741 is clear in stating in=20 Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20 =C2=A0 I am curious - from what document you reached the conclusion that 'SOAP=20 was preferred'?=20 =C2=A0 I hope this helps.=20 =C2=A0 Thanks and Regards, =C2=A0 Dan =C2=A0 =20 =20 From: netconf-bounces@ietf.org=20 [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri=20 Negi Sent: Monday, December 22, 2008 11:01 AM To:=20 netconf@ietf.org Subject: [Netconf] soap or ssh =20 =20 =20 =20 hi I am working to find out a NMS solution for=20 some networking nodes.that work in adhoc environemnt .Iam quite new= to=20 Netconf.. I came across the Netconf and after reading its documents=20 in the initial documents i saw that netconf over SOAP=C2=A0 was=20 preffered one but later on i read somewhere in some IEEE paper that= SSH=20 is mandatory for netconf ,so iam a bit confused now .which one to g= o for=20 thats over SOAP or over SSH? I hope someone could help me with that=20 =20 =20 =20 =20 Savitri Negi Scientist C Communication Networks Division DEAL=20 Dehradun =20 From Chandigarh to Chennai - find friends all over India. Click=20 here.=0A=0A=0A Bollywood news, movie reviews, film trailers and more= ! Go to http://in.movies.yahoo.com/ --0-1020405215-1230093873=:47949 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

hi actually iam a bit confusd over this y= et
,RFC 5381 says that SOAP is used as transport protocol for netconf ,= and even in RFC 4743 SOAP is one of the transport protocls for NEtconf ,tho= ugh SSH is said to be a mandatory protocol  then i dont understand why= we have got three options thats SOAP BEEP and SSH ,
Does that mean i ne= ed to implement SOAP as well as SSH as transport ...
Actually in some pa= pers i read that SOAP was preferrd because a lot of open source tools and w= eb tools are available when we use SOAP
But Iam still confused ..
i = hope sumbody could possibly help me out ...

<= div id=3D"RTEContent">
thanx ..
Savitri Negi=

Scientist C
Communication Networ= ks Division
DEAL Dehradun
 



--- On = Mon, 22/12/08, Romascanu, Dan (Dan) <dromasca@avaya.com> w= rote:
From: Romascanu, Dan (Dan) <dromasca@a= vaya.com>
Subject: RE: [Netconf] soap or ssh
To: savitri_negi@yaho= o.com, netconf@ietf.org
Date: Monday, 22 December, 2008, 3:05 PM

=
=20
Hi Savitri,
 
The IEEE paper was correct, and actually RFC 474= 1 is clear in stating in=20 Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20
 
I am curious - from what document you reached th= e conclusion that 'SOAP=20 was preferred'?
 
I hope this helps. <= /div>
 
Thanks and Regards,<= /div>
 
Dan
 

From: netconf-bounces@ietf.org=20 [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri=20 Negi
Sent: Monday, December 22, 2008 11:01 AM
To:=20 netconf@ietf.org
Subject: [Netconf] soap or ssh

<= /div>
hi

I am working to find out a NMS solution = for=20 some networking nodes.that work in adhoc environemnt .Iam quite new= to=20 Netconf..
I came across the Netconf and after reading its docume= nts=20 in the initial documents i saw that netconf over SOAP  was=20 preffered one but later on i read somewhere in some IEEE paper that= SSH=20 is mandatory for netconf ,so iam a bit confused now .which one to g= o for=20 thats over SOAP or over SSH?
I hope someone could help me with t= hat=20


Savitri Negi

Scientist C
Communication Networks Division
DEAL=20 Dehradun

From Chandigarh to Chennai - find friends all over India. Click=20 here.

=0A <= !--6-->
Add more friends to your messenger and enjoy! Invite them now. --0-1020405215-1230093873=:47949-- --===============1835787944== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============1835787944==-- From netconf-bounces@ietf.org Tue Dec 23 20:44:49 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 538AA28C174; Tue, 23 Dec 2008 20:44:49 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9396928C171 for ; Tue, 23 Dec 2008 20:44:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.125 X-Spam-Level: X-Spam-Status: No, score=0.125 tagged_above=-999 required=5 tests=[AWL=2.123, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bX73dHhSy5Ti for ; Tue, 23 Dec 2008 20:44:42 -0800 (PST) Received: from web36704.mail.mud.yahoo.com (web36704.mail.mud.yahoo.com [209.191.85.38]) by core3.amsl.com (Postfix) with SMTP id 5FBBC3A6B37 for ; Tue, 23 Dec 2008 20:44:42 -0800 (PST) Received: (qmail 51556 invoked by uid 60001); 24 Dec 2008 04:44:33 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type:Message-ID; b=PEo1gaQWnBYGsJXUGTcyzjUnutNYRgi3c3kTNRvJtQalOMUt+7142nbi2PcXFkmaVOvQ0Mu7a+UX0bw8SIh3thTcch3jdDzRvy0kQtLkDAqQkFse7e1zQhoHiS7tI7nA1N9MgotnXQhDLcA1zKSNyOlNohfrxtbd613QSrkBISQ=; X-YMail-OSG: .kpGnOMVM1kUX.A7rb1YSf5FZEtER8Jrnosvwk7ReriW.w6qR2pgAzPo6mYHJ9hnFCBMCoScQuJheU3qBFFNKXMEe8iBlUwH_5552U9OVzafmqmict84NeNWheQxY4FSHM35XCQylebEiKgcG11b6ZDYkRlTLkFIxYNhjTS4OP.EZrkUZfM12krPiZjFHfVi22J8jifs9orDNSFoyi1EisT9kv_P Received: from [220.227.136.218] by web36704.mail.mud.yahoo.com via HTTP; Tue, 23 Dec 2008 20:44:33 PST X-Mailer: YahooMailWebService/0.7.260.1 Date: Tue, 23 Dec 2008 20:44:33 -0800 (PST) From: Savitri Negi To: netconf@ietf.org, "Romascanu, Dan \(Dan\)" In-Reply-To: MIME-Version: 1.0 Message-ID: <109392.47949.qm@web36704.mail.mud.yahoo.com> Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: savitri_negi@yahoo.com List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1835787944==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org --===============1835787944== Content-Type: multipart/alternative; boundary="0-1020405215-1230093873=:47949" --0-1020405215-1230093873=:47949 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable hi actually iam a bit confusd over this yet=20 ,RFC 5381 says that SOAP is used as transport protocol for netconf ,and eve= n in RFC 4743 SOAP is one of the transport protocls for NEtconf ,though SSH= is said to be a mandatory protocol=C2=A0 then i dont understand why we hav= e got three options thats SOAP BEEP and SSH , Does that mean i need to implement SOAP as well as SSH as transport ... Actually in some papers i read that SOAP was preferrd because a lot of open= source tools and web tools are available when we use SOAP=20 But Iam still confused .. i hope sumbody could possibly help me out ... thanx .. Savitri Negi Scientist C Communication Networks Division DEAL Dehradun =C2=A0 =20 --- On Mon, 22/12/08, Romascanu, Dan (Dan) wrote: From: Romascanu, Dan (Dan) Subject: RE: [Netconf] soap or ssh To: savitri_negi@yahoo.com, netconf@ietf.org Date: Monday, 22 December, 2008, 3:05 PM =20 Hi Savitri, =C2=A0 The IEEE paper was correct, and actually RFC 4741 is clear in stating in=20 Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20 =C2=A0 I am curious - from what document you reached the conclusion that 'SOAP=20 was preferred'?=20 =C2=A0 I hope this helps.=20 =C2=A0 Thanks and Regards, =C2=A0 Dan =C2=A0 =20 =20 From: netconf-bounces@ietf.org=20 [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri=20 Negi Sent: Monday, December 22, 2008 11:01 AM To:=20 netconf@ietf.org Subject: [Netconf] soap or ssh =20 =20 =20 =20 hi I am working to find out a NMS solution for=20 some networking nodes.that work in adhoc environemnt .Iam quite new= to=20 Netconf.. I came across the Netconf and after reading its documents=20 in the initial documents i saw that netconf over SOAP=C2=A0 was=20 preffered one but later on i read somewhere in some IEEE paper that= SSH=20 is mandatory for netconf ,so iam a bit confused now .which one to g= o for=20 thats over SOAP or over SSH? I hope someone could help me with that=20 =20 =20 =20 =20 Savitri Negi Scientist C Communication Networks Division DEAL=20 Dehradun =20 From Chandigarh to Chennai - find friends all over India. Click=20 here.=0A=0A=0A Bollywood news, movie reviews, film trailers and more= ! Go to http://in.movies.yahoo.com/ --0-1020405215-1230093873=:47949 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

hi actually iam a bit confusd over this y= et
,RFC 5381 says that SOAP is used as transport protocol for netconf ,= and even in RFC 4743 SOAP is one of the transport protocls for NEtconf ,tho= ugh SSH is said to be a mandatory protocol  then i dont understand why= we have got three options thats SOAP BEEP and SSH ,
Does that mean i ne= ed to implement SOAP as well as SSH as transport ...
Actually in some pa= pers i read that SOAP was preferrd because a lot of open source tools and w= eb tools are available when we use SOAP
But Iam still confused ..
i = hope sumbody could possibly help me out ...

<= div id=3D"RTEContent">
thanx ..
Savitri Negi=

Scientist C
Communication Networ= ks Division
DEAL Dehradun
 



--- On = Mon, 22/12/08, Romascanu, Dan (Dan) <dromasca@avaya.com> w= rote:
From: Romascanu, Dan (Dan) <dromasca@a= vaya.com>
Subject: RE: [Netconf] soap or ssh
To: savitri_negi@yaho= o.com, netconf@ietf.org
Date: Monday, 22 December, 2008, 3:05 PM

=
=20
Hi Savitri,
 
The IEEE paper was correct, and actually RFC 474= 1 is clear in stating in=20 Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20
 
I am curious - from what document you reached th= e conclusion that 'SOAP=20 was preferred'?
 
I hope this helps. <= /div>
 
Thanks and Regards,<= /div>
 
Dan
 

From: netconf-bounces@ietf.org=20 [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri=20 Negi
Sent: Monday, December 22, 2008 11:01 AM
To:=20 netconf@ietf.org
Subject: [Netconf] soap or ssh

<= /div>
hi

I am working to find out a NMS solution = for=20 some networking nodes.that work in adhoc environemnt .Iam quite new= to=20 Netconf..
I came across the Netconf and after reading its docume= nts=20 in the initial documents i saw that netconf over SOAP  was=20 preffered one but later on i read somewhere in some IEEE paper that= SSH=20 is mandatory for netconf ,so iam a bit confused now .which one to g= o for=20 thats over SOAP or over SSH?
I hope someone could help me with t= hat=20


Savitri Negi

Scientist C
Communication Networks Division
DEAL=20 Dehradun

From Chandigarh to Chennai - find friends all over India. Click=20 here.

=0A <= !--6-->
Add more friends to your messenger and enjoy! Invite them now. --0-1020405215-1230093873=:47949-- --===============1835787944== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============1835787944==-- From netconf-bounces@ietf.org Tue Dec 23 21:58:26 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B7F793A6A5B; Tue, 23 Dec 2008 21:58:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9D75C3A6A5B for ; Tue, 23 Dec 2008 21:58:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.51 X-Spam-Level: X-Spam-Status: No, score=0.51 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02L4BNFAYbeD for ; Tue, 23 Dec 2008 21:58:17 -0800 (PST) Received: from mail7.hitachi.co.jp (mail7.hitachi.co.jp [133.145.228.42]) by core3.amsl.com (Postfix) with ESMTP id 8EBF73A68B2 for ; Tue, 23 Dec 2008 21:58:16 -0800 (PST) Received: from mlsv4.hitachi.co.jp (unknown [133.144.234.166]) by mail7.hitachi.co.jp (Postfix) with ESMTP id 2B02437AC2 for ; Wed, 24 Dec 2008 14:58:07 +0900 (JST) Received: from MFILTER-S5.hitachi.co.jp by mlsv4.hitachi.co.jp (8.13.1/8.13.1) id mBO5w75Q011390; Wed, 24 Dec 2008 14:58:07 +0900 Received: from vshuts3.hitachi.co.jp (unverified) by MFILTER-S5.hitachi.co.jp (Content Technologies SMTPRS 4.3.17) with ESMTP id ; Wed, 24 Dec 2008 14:58:06 +0900 X-AuditID: 0ac90648-aa1aaba000001b6c-a3-4951cf6ead0a Received: from gmml27.itg.hitachi.co.jp (unknown [158.213.165.130]) by vshuts3.hitachi.co.jp (Symantec Mail Security) with ESMTP id ADC8540C001; Wed, 24 Dec 2008 14:58:06 +0900 (JST) Received: from [127.0.0.1] by gmml27.itg.hitachi.co.jp (AIX5.2/8.11.6p2/8.11.0) id mBO5w655796070; Wed, 24 Dec 2008 14:58:06 +0900 Message-ID: <4951CF6F.9080203@hitachi.com> Date: Wed, 24 Dec 2008 14:58:07 +0900 From: Tomoyuki Iijima User-Agent: Thunderbird 2.0.0.0 (Windows/20070326) MIME-Version: 1.0 To: savitri_negi@yahoo.com References: <109392.47949.qm@web36704.mail.mud.yahoo.com> In-Reply-To: <109392.47949.qm@web36704.mail.mud.yahoo.com> X-Brightmail-Tracker: AAAAAA== Cc: =?UTF-8?B?6buS5bSOIOiKs+ihjA==?= , netconf@ietf.org Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org SGkgU2F2aXRyaSwKCiA+IEFjdHVhbGx5IGluIHNvbWUgcGFwZXJzIGkgcmVhZCB0aGF0IFNPQVAg d2FzIHByZWZlcnJkIGJlY2F1c2UgYSBsb3Qgb2YKCk9uZSBvZiB0aGUgcGFwZXJzIG1pZ2h0IGJl IHRoZSBmb2xsb3dpbmcuIElzIHRoYXQgcmlnaHQ/CgpNLiBDaG9pLCBILiBDaG9pLCBKLiBXLiBI b25nLCBhbmQgSC4gSnUsIOKAnFhNTC1iYXNlZApjb25maWd1cmF0aW9uIG1hbmFnZW1lbnQgZm9y IElQIG5ldHdvcmsgZGV2aWNlc+KAnSwgSUVFRQpDb21tdW5pY2F0aW9ucyBNYWdhemluZSwgVm9s LjQyLCBOby43LCBwcC44NC05MSwgSnVseQoyMDA0LgoKUGVyc29uYWxseSwgSSBhbHNvIHRoaW5r IFNPQVAgaXMgcHJlZmVyYWJsZS4gQnV0LCBub3cgUkZDIDQ3NDEsIHdoaWNoIGlzIAppbmRlcGVu ZGVudCBmcm9tIHRyYW5zcG9ydCBwcm90b2NvbCwgZGVzY3JpYmVzIHRoZSBmb2xsb3dpbmcuCgoy LjQuICBNYW5kYXRvcnkgVHJhbnNwb3J0IFByb3RvY29sCgogICAgQSBORVRDT05GIGltcGxlbWVu dGF0aW9uIE1VU1Qgc3VwcG9ydCB0aGUgU1NIIHRyYW5zcG9ydCBwcm90b2NvbAogICAgbWFwcGlu ZFrom netconf-bounces@ietf.org Tue Dec 23 21:58:26 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B7F793A6A5B; Tue, 23 Dec 2008 21:58:25 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9D75C3A6A5B for ; Tue, 23 Dec 2008 21:58:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.51 X-Spam-Level: X-Spam-Status: No, score=0.51 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02L4BNFAYbeD for ; Tue, 23 Dec 2008 21:58:17 -0800 (PST) Received: from mail7.hitachi.co.jp (mail7.hitachi.co.jp [133.145.228.42]) by core3.amsl.com (Postfix) with ESMTP id 8EBF73A68B2 for ; Tue, 23 Dec 2008 21:58:16 -0800 (PST) Received: from mlsv4.hitachi.co.jp (unknown [133.144.234.166]) by mail7.hitachi.co.jp (Postfix) with ESMTP id 2B02437AC2 for ; Wed, 24 Dec 2008 14:58:07 +0900 (JST) Received: from MFILTER-S5.hitachi.co.jp by mlsv4.hitachi.co.jp (8.13.1/8.13.1) id mBO5w75Q011390; Wed, 24 Dec 2008 14:58:07 +0900 Received: from vshuts3.hitachi.co.jp (unverified) by MFILTER-S5.hitachi.co.jp (Content Technologies SMTPRS 4.3.17) with ESMTP id ; Wed, 24 Dec 2008 14:58:06 +0900 X-AuditID: 0ac90648-aa1aaba000001b6c-a3-4951cf6ead0a Received: from gmml27.itg.hitachi.co.jp (unknown [158.213.165.130]) by vshuts3.hitachi.co.jp (Symantec Mail Security) with ESMTP id ADC8540C001; Wed, 24 Dec 2008 14:58:06 +0900 (JST) Received: from [127.0.0.1] by gmml27.itg.hitachi.co.jp (AIX5.2/8.11.6p2/8.11.0) id mBO5w655796070; Wed, 24 Dec 2008 14:58:06 +0900 Message-ID: <4951CF6F.9080203@hitachi.com> Date: Wed, 24 Dec 2008 14:58:07 +0900 From: Tomoyuki Iijima User-Agent: Thunderbird 2.0.0.0 (Windows/20070326) MIME-Version: 1.0 To: savitri_negi@yahoo.com References: <109392.47949.qm@web36704.mail.mud.yahoo.com> In-Reply-To: <109392.47949.qm@web36704.mail.mud.yahoo.com> X-Brightmail-Tracker: AAAAAA== Cc: =?UTF-8?B?6buS5bSOIOiKs+ihjA==?= , netconf@ietf.org Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org SGkgU2F2aXRyaSwKCiA+IEFjdHVhbGx5IGluIHNvbWUgcGFwZXJzIGkgcmVhZCB0aGF0IFNPQVAg d2FzIHByZWZlcnJkIGJlY2F1c2UgYSBsb3Qgb2YKCk9uZSBvZiB0aGUgcGFwZXJzIG1pZ2h0IGJl IHRoZSBmb2xsb3dpbmcuIElzIHRoYXQgcmlnaHQ/CgpNLiBDaG9pLCBILiBDaG9pLCBKLiBXLiBI b25nLCBhbmQgSC4gSnUsIOKAnFhNTC1iYXNlZApjb25maWd1cmF0aW9uIG1hbmFnZW1lbnQgZm9y IElQIG5ldHdvcmsgZGV2aWNlc+KAnSwgSUVFRQpDb21tdW5pY2F0aW9ucyBNYWdhemluZSwgVm9s LjQyLCBOby43LCBwcC44NC05MSwgSnVseQoyMDA0LgoKUGVyc29uYWxseSwgSSBhbHNvIHRoaW5r IFNPQVAgaXMgcHJlZmVyYWJsZS4gQnV0LCBub3cgUkZDIDQ3NDEsIHdoaWNoIGlzIAppbmRlcGVu ZGVudCBmcm9tIHRyYW5zcG9ydCBwcm90b2NvbCwgZGVzY3JpYmVzIHRoZSBmb2xsb3dpbmcuCgoy LjQuICBNYW5kYXRvcnkgVHJhbnNwb3J0IFByb3RvY29sCgogICAgQSBORVRDT05GIGltcGxlbWVu dGF0aW9uIE1VU1Qgc3VwcG9ydCB0aGUgU1NIIHRyYW5zcG9ydCBwcm90b2NvbAogICAgbWFwyBbNF0uCgpTbywgaWYgeW91IHdhbnQgdG8gZGV2ZWxvcCBhIE5FVENPTkYgZGV2aWNlIHdoaWNo IGhhcyBpbnRlcm9wZXJhYmlsaXR5IAp3aXRoIG90aGVyIE5FVENPTkYgaW1wbGVtZW50YXRpb25z LCBSRkMgNDc0MSBzYXlzIHRoYXQgeW91IG5lZWQgdG8gCnN1cHBvcnQgU1NIIHRyYW5zcG9ydCBt YXBwaW5nIGluIGFkZGl0aW9uIHRvIFNPQVAgdHJhbnNwb3J0IG1hcHBpbmcuCgotLSAKVG9tb3l1 a2kgSWlqaW1hCkFsYXhhbGEgTmV0d29ya3MgQ29ycC4KVEVMOis4MS00NC01NDktMTIwMApGQVg6 KzgxLTQ0LTU0OS0xMjcyCkUtbWFpbDp0b21veXVraS5paWppbWFAYWxheGFsYS5jb20KClNhdml0 cmkgTmVnaSB3cm90ZToKPiBoaSBhY3R1YWxseSBpYW0gYSBiaXQgY29uZnVzZCBvdmVyIHRoaXMg eWV0IAo+ICxSRkMgNTM4MSBzYXlzIHRoYXQgU09BUCBpcyB1c2VkIGFzIHRyYW5zcG9ydCBwcm90 b2NvbCBmb3IgbmV0Y29uZiAsYW5kIGV2ZW4gaW4gUkZDIDQ3NDMgU09BUCBpcyBvbmUgb2YgdGhl IHRyYW5zcG9ydCBwcm90b2NscyBmb3IgTkV0Y29uZiAsdGhvdWdoIFNTSCBpcyBzYWlkIHRvIGJl IGEgbWFuZGF0b3J5IHByb3RvY29sPyB0aGVuIGkgZG9udCB1bmRlcnN0YW5kIHdoeSB3ZSBoYXZl IGdvdCB0aHJlZSBvcHRpb25zIHRoYXRzIFNPQVAgQkVFUCBhbmQgU1NIICwKPiBEb2VzIHRoYXQg bWVhbiBpIG5lZWQgdG8gaW1wbGVtZW50IFNPQVAgYXMgd2VsbCBhcyBTU0ggYXMgdHJhbnNwb3J0 IC4uLgo+IEFjdHVhbGx5IGluIHNvbWUgcGFwZXJzIGkgcmVhZCB0aGF0IFNPQVAgd2FzIHByZWZl cnJkIGJlY2F1c2UgYSBsb3Qgb2Ygb3BlbiBzb3VyY2UgdG9vbHMgYW5kIHdlYiB0b29scyBhcmUg YXZhaWxhYmxlIHdoZW4gd2UgdXNlIFNPQVAgCj4gQnV0IElhbSBzdGlsbCBjb25mdXNlZCAuLgo+ IGkgaG9wZSBzdW1ib2R5IGNvdWxkIHBvc3NpYmx5IGhlbHAgbWUgb3V0IC4uLgo+IAo+IHRoYW54 IC4uCj4gU2F2aXRyaSBOZWdpCj4gCj4gU2NpZW50aXN0IEMKPiAgQ29tbXVuaWNhdGlvbiBOZXR3 b3JrcyBEaXZpc2lvbgo+IERFQUwgRGVocmFkdW4gID8gIAo+IAo+IAo+IC0tLSBPbiBNb24sIDIy LzEyLzA4LCBSb21hc2NhbnUsIERhbiAoRGFuKSA8ZHJvbWFzY2FAYXZheWEuY29tPiB3cm90ZToK PiBGcm9tOiBSb21hc2NhbnUsIERhbiAoRGFuKSA8ZHJvbWFzY2FAYXZheWEuY29tPgo+IFN1Ympl Y3Q6IFJFOiBbTmV0Y29uZl0gc29hcCBvciBzc2gKPiBUbzogc2F2aXRyaV9uZWdpQHlhaG9vLmNv bSwgbmV0Y29uZkBpZXRmLm9yZwo+IERhdGU6IE1vbmRheSwgMjIgRGVjZW1iZXIsIDIwMDgsIDM6 MDUgUE0KPiAKPiAKPiAKPiAgCj4gSGkgU2F2aXRyaSwKPiA/Cj4gVGhlIElFRUUgcGFwZXIgd2Fz IGNvcnJlY3QsIGFuZCBhY3R1YWxseSBSRkMgNDc0MSBpcyBjbGVhciBpbiBzdGF0aW5nIGluIAo+ IFNlY3Rpb24gMi40IHRoYXQgU1NIIGlzIHRoZSBtYW5kYXRvcnkgdHJhbnNwb3J0IG1hcHBpbmcg Zm9yIE5FVENPTkYuIAo+IAo+ID8KPiBJIGFtIGN1cmlvdXMgLSBmcm9tIHdoYXQgZG9jdW1lbnQg eW91IHJlYWNoZWQgdGhlIGNvbmNsdXNpb24gdGhhdCAnU09BUCAKPiB3YXMgcHJlZmVycmVkJz8g Cj4gPwo+IEkgaG9wZSB0aGlzIGhlbHBzLiAKPiA/Cj4gVGhhbmtzIGFuZCBSZWdhcmRzLAo+ID8K PiBEYW4KPiA/Cj4gCj4gCj4gICAKPiAgIAo+ICAgRnJvbTogbmV0Y29uZi1ib3VuY2VzQGlldGYu b3JnIAo+ICAgW21haWx0bzpuZXRjb25mLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBT YXZpdHJpIAo+ICAgTmVnaQo+IFNlbnQ6IE1vbmRheSwgRGVjZW1iZXIgMjIsIDIwMDggMTE6MDEg QU0KPiBUbzogCj4gICBuZXRjb25mQGlldGYub3JnCj4gU3ViamVjdDogW05ldGNvbmZdIHNvYXAg b3Igc3NoCj4gCj4gCj4gICAKPiAgIAo+ICAgICAKPiAgICAgCj4gICAgICAgaGkKPiAKPiBJIGFt IHdvcmtpbmcgdG8gZmluZCBvdXQgYSBOTVMgc29sdXRpb24gZm9yIAo+ICAgICAgICAgc29tZSBu ZXR3b3JraW5nIG5vZGVzLnRoYXQgd29yayBpbiBhZGhvYyBlbnZpcm9uZW1udCAuSWFtIHF1aXRl IG5ldyB0byAKPiAgICAgICAgIE5ldGNvbmYuLgo+IEkgY2FtZSBhY3Jvc3MgdGhlIE5ldGNvbmYg YW5kIGFmdGVyIHJlYWRpbmcgaXRzIGRvY3VtZW50cyAKPiAgICAgICAgIGluIHRoZSBpbml0aWFs IGRvY3VtZW50cyBpIHNhdyB0aGF0IG5ldGNvbmYgb3ZlciBTT0FQPyB3YXMgCj4gICAgICAgICBw cmVmZmVyZWQgb25lIGJ1dCBsYXRlciBvbiBpIHJlYWQgc29tZXdoZXJlIGluIHNvbWUgSUVFRSBw YXBlciB0aGF0IFNTSCAKPiAgICAgICAgIGlzIG1hbmRhdG9yeSBmb3IgbmV0Y29uZiAsc28gaWFt IGEgYml0IGNvbmZ1c2VkIG5vdyAud2hpY2ggb25lIHRvIGdvIGZvciAKPiAgICAgICAgIHRoYXRz IG92ZXIgU09BUCBvciBvdmVyIFNTSD8KPiBJIGhvcGUgc29tZW9uZSBjb3VsZCBoZWxwIG1lIHdp dGggdGhhdCAKPiAgICAgICAgIAo+IAo+IAo+ICAgICAgICAgCj4gICAgICAgICAKPiAgICAgICAg IAo+IFNhdml0cmkgTmVnaQo+IAo+IFNjaWVudGlzdCBDCj4gQ29tbXVuaWNhdGlvbiBOZXR3b3Jr cyBEaXZpc2lvbgo+IERFQUwgCj4gICAgICAgICBEZWhyYWR1bgo+IAo+ICAgCj4gICBGcm9tIENo YW5kaWdhcmggdG8gQ2hlbm5haSAtIGZpbmQgZnJpZW5kcyBhbGwgb3ZlciBJbmRpYS4gQ2xpY2sg Cj4gICBoZXJlLgo+IAo+IAo+ICAgICAgIEJvbGx5d29vZCBuZXdzLCBtb3ZpZSByZXZpZXdzLCBm aWxtIHRyYWlsZXJzIGFuZCBtb3JlISBHbyB0byBodHRwOi8vaW4ubW92aWVzLnlhaG9vLmNvbS8K PiAKPiAKPiAKPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KPiAKPiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwo+IE5ldGNvbmYgbWFpbGluZyBsaXN0Cj4gTmV0Y29uZkBp ZXRmLm9yZwo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV0Y29uZgoK Cl9fX19fX19fX19fcGlu ZyBbNF0uCgpTbywgaWYgeW91IHdhbnQgdG8gZGV2ZWxvcCBhIE5FVENPTkYgZGV2aWNlIHdoaWNo IGhhcyBpbnRlcm9wZXJhYmlsaXR5IAp3aXRoIG90aGVyIE5FVENPTkYgaW1wbGVtZW50YXRpb25z LCBSRkMgNDc0MSBzYXlzIHRoYXQgeW91IG5lZWQgdG8gCnN1cHBvcnQgU1NIIHRyYW5zcG9ydCBt YXBwaW5nIGluIGFkZGl0aW9uIHRvIFNPQVAgdHJhbnNwb3J0IG1hcHBpbmcuCgotLSAKVG9tb3l1 a2kgSWlqaW1hCkFsYXhhbGEgTmV0d29ya3MgQ29ycC4KVEVMOis4MS00NC01NDktMTIwMApGQVg6 KzgxLTQ0LTU0OS0xMjcyCkUtbWFpbDp0b21veXVraS5paWppbWFAYWxheGFsYS5jb20KClNhdml0 cmkgTmVnaSB3cm90ZToKPiBoaSBhY3R1YWxseSBpYW0gYSBiaXQgY29uZnVzZCBvdmVyIHRoaXMg eWV0IAo+ICxSRkMgNTM4MSBzYXlzIHRoYXQgU09BUCBpcyB1c2VkIGFzIHRyYW5zcG9ydCBwcm90 b2NvbCBmb3IgbmV0Y29uZiAsYW5kIGV2ZW4gaW4gUkZDIDQ3NDMgU09BUCBpcyBvbmUgb2YgdGhl IHRyYW5zcG9ydCBwcm90b2NscyBmb3IgTkV0Y29uZiAsdGhvdWdoIFNTSCBpcyBzYWlkIHRvIGJl IGEgbWFuZGF0b3J5IHByb3RvY29sPyB0aGVuIGkgZG9udCB1bmRlcnN0YW5kIHdoeSB3ZSBoYXZl IGdvdCB0aHJlZSBvcHRpb25zIHRoYXRzIFNPQVAgQkVFUCBhbmQgU1NIICwKPiBEb2VzIHRoYXQg bWVhbiBpIG5lZWQgdG8gaW1wbGVtZW50IFNPQVAgYXMgd2VsbCBhcyBTU0ggYXMgdHJhbnNwb3J0 IC4uLgo+IEFjdHVhbGx5IGluIHNvbWUgcGFwZXJzIGkgcmVhZCB0aGF0IFNPQVAgd2FzIHByZWZl cnJkIGJlY2F1c2UgYSBsb3Qgb2Ygb3BlbiBzb3VyY2UgdG9vbHMgYW5kIHdlYiB0b29scyBhcmUg YXZhaWxhYmxlIHdoZW4gd2UgdXNlIFNPQVAgCj4gQnV0IElhbSBzdGlsbCBjb25mdXNlZCAuLgo+ IGkgaG9wZSBzdW1ib2R5IGNvdWxkIHBvc3NpYmx5IGhlbHAgbWUgb3V0IC4uLgo+IAo+IHRoYW54 IC4uCj4gU2F2aXRyaSBOZWdpCj4gCj4gU2NpZW50aXN0IEMKPiAgQ29tbXVuaWNhdGlvbiBOZXR3 b3JrcyBEaXZpc2lvbgo+IERFQUwgRGVocmFkdW4gID8gIAo+IAo+IAo+IC0tLSBPbiBNb24sIDIy LzEyLzA4LCBSb21hc2NhbnUsIERhbiAoRGFuKSA8ZHJvbWFzY2FAYXZheWEuY29tPiB3cm90ZToK PiBGcm9tOiBSb21hc2NhbnUsIERhbiAoRGFuKSA8ZHJvbWFzY2FAYXZheWEuY29tPgo+IFN1Ympl Y3Q6IFJFOiBbTmV0Y29uZl0gc29hcCBvciBzc2gKPiBUbzogc2F2aXRyaV9uZWdpQHlhaG9vLmNv bSwgbmV0Y29uZkBpZXRmLm9yZwo+IERhdGU6IE1vbmRheSwgMjIgRGVjZW1iZXIsIDIwMDgsIDM6 MDUgUE0KPiAKPiAKPiAKPiAgCj4gSGkgU2F2aXRyaSwKPiA/Cj4gVGhlIElFRUUgcGFwZXIgd2Fz IGNvcnJlY3QsIGFuZCBhY3R1YWxseSBSRkMgNDc0MSBpcyBjbGVhciBpbiBzdGF0aW5nIGluIAo+ IFNlY3Rpb24gMi40IHRoYXQgU1NIIGlzIHRoZSBtYW5kYXRvcnkgdHJhbnNwb3J0IG1hcHBpbmcg Zm9yIE5FVENPTkYuIAo+IAo+ID8KPiBJIGFtIGN1cmlvdXMgLSBmcm9tIHdoYXQgZG9jdW1lbnQg eW91IHJlYWNoZWQgdGhlIGNvbmNsdXNpb24gdGhhdCAnU09BUCAKPiB3YXMgcHJlZmVycmVkJz8g Cj4gPwo+IEkgaG9wZSB0aGlzIGhlbHBzLiAKPiA/Cj4gVGhhbmtzIGFuZCBSZWdhcmRzLAo+ID8K PiBEYW4KPiA/Cj4gCj4gCj4gICAKPiAgIAo+ICAgRnJvbTogbmV0Y29uZi1ib3VuY2VzQGlldGYu b3JnIAo+ICAgW21haWx0bzpuZXRjb25mLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBT YXZpdHJpIAo+ICAgTmVnaQo+IFNlbnQ6IE1vbmRheSwgRGVjZW1iZXIgMjIsIDIwMDggMTE6MDEg QU0KPiBUbzogCj4gICBuZXRjb25mQGlldGYub3JnCj4gU3ViamVjdDogW05ldGNvbmZdIHNvYXAg b3Igc3NoCj4gCj4gCj4gICAKPiAgIAo+ICAgICAKPiAgICAgCj4gICAgICAgaGkKPiAKPiBJIGFt IHdvcmtpbmcgdG8gZmluZCBvdXQgYSBOTVMgc29sdXRpb24gZm9yIAo+ICAgICAgICAgc29tZSBu ZXR3b3JraW5nIG5vZGVzLnRoYXQgd29yayBpbiBhZGhvYyBlbnZpcm9uZW1udCAuSWFtIHF1aXRl IG5ldyB0byAKPiAgICAgICAgIE5ldGNvbmYuLgo+IEkgY2FtZSBhY3Jvc3MgdGhlIE5ldGNvbmYg YW5kIGFmdGVyIHJlYWRpbmcgaXRzIGRvY3VtZW50cyAKPiAgICAgICAgIGluIHRoZSBpbml0aWFs IGRvY3VtZW50cyBpIHNhdyB0aGF0IG5ldGNvbmYgb3ZlciBTT0FQPyB3YXMgCj4gICAgICAgICBw cmVmZmVyZWQgb25lIGJ1dCBsYXRlciBvbiBpIHJlYWQgc29tZXdoZXJlIGluIHNvbWUgSUVFRSBw YXBlciB0aGF0IFNTSCAKPiAgICAgICAgIGlzIG1hbmRhdG9yeSBmb3IgbmV0Y29uZiAsc28gaWFt IGEgYml0IGNvbmZ1c2VkIG5vdyAud2hpY2ggb25lIHRvIGdvIGZvciAKPiAgICAgICAgIHRoYXRz IG92ZXIgU09BUCBvciBvdmVyIFNTSD8KPiBJIGhvcGUgc29tZW9uZSBjb3VsZCBoZWxwIG1lIHdp dGggdGhhdCAKPiAgICAgICAgIAo+IAo+IAo+ICAgICAgICAgCj4gICAgICAgICAKPiAgICAgICAg IAo+IFNhdml0cmkgTmVnaQo+IAo+IFNjaWVudGlzdCBDCj4gQ29tbXVuaWNhdGlvbiBOZXR3b3Jr cyBEaXZpc2lvbgo+IERFQUwgCj4gICAgICAgICBEZWhyYWR1bgo+IAo+ICAgCj4gICBGcm9tIENo YW5kaWdhcmggdG8gQ2hlbm5haSAtIGZpbmQgZnJpZW5kcyBhbGwgb3ZlciBJbmRpYS4gQ2xpY2sg Cj4gICBoZXJlLgo+IAo+IAo+ICAgICAgIEJvbGx5d29vZCBuZXdzLCBtb3ZpZSByZXZpZXdzLCBm aWxtIHRyYWlsZXJzIGFuZCBtb3JlISBHbyB0byBodHRwOi8vaW4ubW92aWVzLnlhaG9vLmNvbS8K PiAKPiAKPiAKPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KPiAKPiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwo+IE5ldGNvbmYgbWFpbGluZyBsaXN0Cj4gTmV0Y29uZkBp ZXRmLm9yZwo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV0Y29uZgoK Cl9fX19fX1X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYg bWFpbGluZyBsaXN0Ck5ldGNvbmZAaWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9uZXRjb25mCg== 9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCk5ldGNvbmYg bWFpbGluZyBsaXN0Ck5ldGNvbmZAaWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9uZXRjb25mCg== From netconf-bounces@ietf.org Tue Dec 23 23:08:10 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 330283A6B53; Tue, 23 Dec 2008 23:08:10 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 878883A67AF for ; Tue, 23 Dec 2008 23:08:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.163 X-Spam-Level: X-Spam-Status: No, score=-2.163 tagged_above=-999 required=5 tests=[AWL=0.086, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fESp76RfV3c4 for ; Tue, 23 Dec 2008 23:08:07 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 692873A6407 for ; Tue, 23 Dec 2008 23:08:07 -0800 (PST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id 0990BC000E; Wed, 24 Dec 2008 08:07:58 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id RYrPZDIvoZXZ; Wed, 24 Dec 2008 08:07:52 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5446AC000F; Wed, 24 Dec 2008 08:07:52 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 3ABBE8C9C7D; Wed, 24 Dec 2008 08:07:51 +0100 (CET) Date: Wed, 24 Dec 2008 08:07:51 +0100 From: Juergen Schoenwaelder To: Savitri Negi Message-ID: <20081224070751.GA15678@elstar.local> Mail-Followup-To: Savitri Negi , netconf@ietf.org, "Romascanu, Dan (Dan)" References: <109392.47949.qm@web36704.mail.mud.yahoo.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <109392.47949.qm@web36704.mail.mud.yahoo.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Tue, Dec 23, 2008 at 08:44:33PM -0800, Savitri Negi wrote: > hi actually iam a bit confusd over this yet > ,RFC 5381 says that SOAP is used as transport protocol for netconf > ,and even in RFC 4743 SOAP is one of the transport protocls for > NEtconf ,though SSH is said to be a mandatory protocol?? then i dont > understand why we have got three options thats SOAP BEEP and SSH , I think the IESG note on the front page of RFC 5381 is quite clear. > Does that mean i need to implement SOAP as well as SSH as transport ... You must implement SSH and you might optionally implement any other transport. > Actually in some papers i read that SOAP was preferrd because a lot > of open source tools and web tools are available when we use SOAP Perhaps preferred by the authors; if someone claims SOAP is the preferred transport of the IETF, then the author is simply wrong. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Tue Dec 23 23:08:10 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 330283A6B53; Tue, 23 Dec 2008 23:08:10 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 878883A67AF for ; Tue, 23 Dec 2008 23:08:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.163 X-Spam-Level: X-Spam-Status: No, score=-2.163 tagged_above=-999 required=5 tests=[AWL=0.086, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fESp76RfV3c4 for ; Tue, 23 Dec 2008 23:08:07 -0800 (PST) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id 692873A6407 for ; Tue, 23 Dec 2008 23:08:07 -0800 (PST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id 0990BC000E; Wed, 24 Dec 2008 08:07:58 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id RYrPZDIvoZXZ; Wed, 24 Dec 2008 08:07:52 +0100 (CET) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5446AC000F; Wed, 24 Dec 2008 08:07:52 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 3ABBE8C9C7D; Wed, 24 Dec 2008 08:07:51 +0100 (CET) Date: Wed, 24 Dec 2008 08:07:51 +0100 From: Juergen Schoenwaelder To: Savitri Negi Message-ID: <20081224070751.GA15678@elstar.local> Mail-Followup-To: Savitri Negi , netconf@ietf.org, "Romascanu, Dan (Dan)" References: <109392.47949.qm@web36704.mail.mud.yahoo.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <109392.47949.qm@web36704.mail.mud.yahoo.com> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: netconf@ietf.org Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: j.schoenwaelder@jacobs-university.de List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org On Tue, Dec 23, 2008 at 08:44:33PM -0800, Savitri Negi wrote: > hi actually iam a bit confusd over this yet > ,RFC 5381 says that SOAP is used as transport protocol for netconf > ,and even in RFC 4743 SOAP is one of the transport protocls for > NEtconf ,though SSH is said to be a mandatory protocol?? then i dont > understand why we have got three options thats SOAP BEEP and SSH , I think the IESG note on the front page of RFC 5381 is quite clear. > Does that mean i need to implement SOAP as well as SSH as transport ... You must implement SSH and you might optionally implement any other transport. > Actually in some papers i read that SOAP was preferrd because a lot > of open source tools and web tools are available when we use SOAP Perhaps preferred by the authors; if someone claims SOAP is the preferred transport of the IETF, then the author is simply wrong. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From netconf-bounces@ietf.org Thu Dec 25 09:33:42 2008 Return-Path: X-Original-To: netconf-archive@ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 88E3A3A6A18; Thu, 25 Dec 2008 09:33:42 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9C0BF3A6A18 for ; Thu, 25 Dec 2008 09:33:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.428 X-Spam-Level: X-Spam-Status: No, score=-1.428 tagged_above=-999 required=5 tests=[AWL=-0.919, BAYES_05=-1.11, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WOcjeJ5V9NQo for ; Thu, 25 Dec 2008 09:33:40 -0800 (PST) Received: from co300216-co-outbound.avaya.com (co300216-co-outbound.net.avaya.com [198.152.13.100]) by core3.amsl.com (Postfix) with ESMTP id 7BDE03A69E9 for ; Thu, 25 Dec 2008 09:33:40 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,282,1228107600"; d="scan'208,217";a="155883673" Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by co300216-co-outbound.avaya.com with ESMTP; 25 Dec 2008 12:33:30 -0500 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by co300216-co-erhwest-out.avaya.com with ESMTP; 25 Dec 2008 12:33:29 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Thu, 25 Dec 2008 18:33:27 +0100 Message-ID: In-Reply-To: <109392.47949.qm@web36704.mail.mud.yahoo.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] soap or ssh Thread-Index: AcllglNdLL0OjwxrSTagsFrkEMTXLwBM7inA References: <109392.47949.qm@web36704.mail.mud.yahoo.com> From: "Romascanu, Dan (Dan)" To: , Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0097601256==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0097601256== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C966B6.E689878B" This is a multi-part message in MIME format. ------_=_NextPart_001_01C966B6.E689878B Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 ________________________________ From: Savitri Negi [mailto:savitri_negi@yahoo.com]=20 Sent: Wednesday, December 24, 2008 6:45 AM To: netconf@ietf.org; Romascanu, Dan (Dan) Subject: RE: [Netconf] soap or ssh =09 =09 hi actually iam a bit confusd over this yet=20 ,RFC 5381 says that SOAP is used as transport protocol for netconf ,and even in RFC 4743 SOAP is one of the transport protocls for NEtconf ,though SSH is said to be a mandatory protocol then i dont understand why we have got three options thats SOAP BEEP and SSH , Does that mean i need to implement SOAP as well as SSH as transport ... [DR] SSH is mandatory transport, BEEP and SOAP are optional. A compliant implementation MUST implement SSH, From netconf-bounces@ietf.org Thu Dec 25 09:33:42 2008 Return-Path: X-Original-To: netconf-archive@lists.ietf.org Delivered-To: ietfarch-netconf-archive@core3.amsl.com Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 88E3A3A6A18; Thu, 25 Dec 2008 09:33:42 -0800 (PST) X-Original-To: netconf@core3.amsl.com Delivered-To: netconf@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9C0BF3A6A18 for ; Thu, 25 Dec 2008 09:33:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.428 X-Spam-Level: X-Spam-Status: No, score=-1.428 tagged_above=-999 required=5 tests=[AWL=-0.919, BAYES_05=-1.11, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WOcjeJ5V9NQo for ; Thu, 25 Dec 2008 09:33:40 -0800 (PST) Received: from co300216-co-outbound.avaya.com (co300216-co-outbound.net.avaya.com [198.152.13.100]) by core3.amsl.com (Postfix) with ESMTP id 7BDE03A69E9 for ; Thu, 25 Dec 2008 09:33:40 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.36,282,1228107600"; d="scan'208,217";a="155883673" Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by co300216-co-outbound.avaya.com with ESMTP; 25 Dec 2008 12:33:30 -0500 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by co300216-co-erhwest-out.avaya.com with ESMTP; 25 Dec 2008 12:33:29 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Thu, 25 Dec 2008 18:33:27 +0100 Message-ID: In-Reply-To: <109392.47949.qm@web36704.mail.mud.yahoo.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Netconf] soap or ssh Thread-Index: AcllglNdLL0OjwxrSTagsFrkEMTXLwBM7inA References: <109392.47949.qm@web36704.mail.mud.yahoo.com> From: "Romascanu, Dan (Dan)" To: , Subject: Re: [Netconf] soap or ssh X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0097601256==" Sender: netconf-bounces@ietf.org Errors-To: netconf-bounces@ietf.org This is a multi-part message in MIME format. --===============0097601256== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C966B6.E689878B" This is a multi-part message in MIME format. ------_=_NextPart_001_01C966B6.E689878B Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 ________________________________ From: Savitri Negi [mailto:savitri_negi@yahoo.com]=20 Sent: Wednesday, December 24, 2008 6:45 AM To: netconf@ietf.org; Romascanu, Dan (Dan) Subject: RE: [Netconf] soap or ssh =09 =09 hi actually iam a bit confusd over this yet=20 ,RFC 5381 says that SOAP is used as transport protocol for netconf ,and even in RFC 4743 SOAP is one of the transport protocls for NEtconf ,though SSH is said to be a mandatory protocol then i dont understand why we have got three options thats SOAP BEEP and SSH , Does that mean i need to implement SOAP as well as SSH as transport ... [DR] SSH is mandatory transport, BEEP and SOAP are optional. A compliant implementation MUST implementand MAY implement SOAP or BEEP.=20 =20 Actually in some papers i read that SOAP was preferrd because a lot of open source tools and web tools are available when we use SOAP=20 [DR] People may prefer other transports for different reasons, the IETF requirements are being stated in the standards tracks IETF RFCs. Again, Section 2.4 of RFC4741 is the reference that you must look at.=20 =20 Dan =20 But Iam still confused .. i hope sumbody could possibly help me out ... thanx .. Savitri Negi Scientist C Communication Networks Division DEAL Dehradun =20 --- On Mon, 22/12/08, Romascanu, Dan (Dan) wrote: From: Romascanu, Dan (Dan) Subject: RE: [Netconf] soap or ssh To: savitri_negi@yahoo.com, netconf@ietf.org Date: Monday, 22 December, 2008, 3:05 PM =09 =09 Hi Savitri, =20 The IEEE paper was correct, and actually RFC 4741 is clear in stating in Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20 =20 I am curious - from what document you reached the conclusion that 'SOAP was preferred'?=20 =20 I hope this helps.=20 =20 Thanks and Regards, =20 Dan =20 ________________________________ From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri Negi Sent: Monday, December 22, 2008 11:01 AM To: netconf@ietf.org Subject: [Netconf] soap or ssh =09 =09 hi I am working to find out a NMS solution for some networking nodes.that work in adhoc environemnt .Iam quite new to Netconf.. I came across the Netconf and after reading its documents in the initial documents i saw that netconf over SOAP was preffered one but later on i read somewhere in some IEEE paper that SSH is mandatory for netconf ,so iam a bit confused now .which one to go for thats over SOAP or over SSH? I hope someone could help me with that=20 Savitri Negi Scientist C Communication Networks Division DEAL Dehradun ________________________________ From Chandigarh to Chennai - find friends all over India. Click here. =20 ________________________________ Add more friends to your messenger and enjoy! Invite them now. =20 ------_=_NextPart_001_01C966B6.E689878B Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 

From: Savitri Negi=20 [mailto:savitri_negi@yahoo.com]
Sent: Wednesday, December = 24, 2008=20 6:45 AM
To: netconf@ietf.org; Romascanu, Dan=20 (Dan)
Subject: RE: [Netconf] soap or = ssh


hi actually iam a bit confusd over this yet
,RFC = 5381 says=20 that SOAP is used as transport protocol for netconf ,and even in = RFC=20 4743 SOAP is one of the transport protocls for NEtconf ,though = SSH is=20 said to be a mandatory protocol  then i dont understand why = we have=20 got three options thats SOAP BEEP and SSH ,
Does that mean i = need to=20 implement SOAP as well as SSH as transport ...
[DR] SSH is mandatory transport, BEEP and = SOAP are=20 optional. A compliant implementation MUST implement SSH, and MA SSH, and MAY implement SOAP or BEEP.=20 =20 Actually in some papers i read that SOAP was preferrd because a lot of open source tools and web tools are available when we use SOAP=20 [DR] People may prefer other transports for different reasons, the IETF requirements are being stated in the standards tracks IETF RFCs. Again, Section 2.4 of RFC4741 is the reference that you must look at.=20 =20 Dan =20 But Iam still confused .. i hope sumbody could possibly help me out ... thanx .. Savitri Negi Scientist C Communication Networks Division DEAL Dehradun =20 --- On Mon, 22/12/08, Romascanu, Dan (Dan) wrote: From: Romascanu, Dan (Dan) Subject: RE: [Netconf] soap or ssh To: savitri_negi@yahoo.com, netconf@ietf.org Date: Monday, 22 December, 2008, 3:05 PM =09 =09 Hi Savitri, =20 The IEEE paper was correct, and actually RFC 4741 is clear in stating in Section 2.4 that SSH is the mandatory transport mapping for NETCONF.=20 =20 I am curious - from what document you reached the conclusion that 'SOAP was preferred'?=20 =20 I hope this helps.=20 =20 Thanks and Regards, =20 Dan =20 ________________________________ From: netconf-bounces@ietf.org [mailto:netconf-bounces@ietf.org] On Behalf Of Savitri Negi Sent: Monday, December 22, 2008 11:01 AM To: netconf@ietf.org Subject: [Netconf] soap or ssh =09 =09 hi I am working to find out a NMS solution for some networking nodes.that work in adhoc environemnt .Iam quite new to Netconf.. I came across the Netconf and after reading its documents in the initial documents i saw that netconf over SOAP was preffered one but later on i read somewhere in some IEEE paper that SSH is mandatory for netconf ,so iam a bit confused now .which one to go for thats over SOAP or over SSH? I hope someone could help me with that=20 Savitri Negi Scientist C Communication Networks Division DEAL Dehradun ________________________________ From Chandigarh to Chennai - find friends all over India. Click here. =20 ________________________________ Add more friends to your messenger and enjoy! Invite them now. =20 ------_=_NextPart_001_01C966B6.E689878B Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 

From: Savitri Negi=20 [mailto:savitri_negi@yahoo.com]
Sent: Wednesday, December = 24, 2008=20 6:45 AM
To: netconf@ietf.org; Romascanu, Dan=20 (Dan)
Subject: RE: [Netconf] soap or = ssh


hi actually iam a bit confusd over this yet
,RFC = 5381 says=20 that SOAP is used as transport protocol for netconf ,and even in = RFC=20 4743 SOAP is one of the transport protocls for NEtconf ,though = SSH is=20 said to be a mandatory protocol  then i dont understand why = we have=20 got three options thats SOAP BEEP and SSH ,
Does that mean i = need to=20 implement SOAP as well as SSH as transport ...
[DR] SSH is mandatory transport, BEEP and = SOAP are=20 optional. A compliant implementation MUST implement SSH, Y = implement SOAP or = BEEP. 
 
Actually in some = papers i read=20 that SOAP was preferrd because a lot of open source tools and = web tools=20 are available when we use SOAP
[DR] People may prefer other transports for = different=20 reasons, the IETF requirements are being stated in the standards = tracks=20 IETF RFCs. Again, Section 2.4 of RFC4741 is the reference = that you=20 must look at.
 
Dan
 
But Iam = still=20 confused ..
i hope sumbody could possibly help me out=20 ...

thanx ..
Savitri = Negi

Scientist C
Communication Networks = Division
DEAL=20 Dehradun
 



--- On=20 Mon, 22/12/08, Romascanu, Dan (Dan)=20 <dromasca@avaya.com> wrote:
From:=20 Romascanu, Dan (Dan) <dromasca@avaya.com>
Subject: = RE:=20 [Netconf] soap or ssh
To: savitri_negi@yahoo.com,=20 netconf@ietf.org
Date: Monday, 22 December, 2008, 3:05 = PM

Hi = Savitri,
 
The IEEE paper was correct, and = actually RFC 4741=20 is clear in stating in Section 2.4 that SSH is the mandatory = transport=20 mapping for NETCONF.
 
I am curious - from what document you = reached the=20 conclusion that 'SOAP was preferred'?=20
 
I hope this helps.=20
 
Thanks and=20 Regards,
 
 
Actually in some = papers i read=20 that SOAP was preferrd because a lot of open source tools and = web tools=20 are available when we use SOAP
[DR] People may prefer other transports for = different=20 reasons, the IETF requirements are being stated in the standards = tracks=20 IETF RFCs. Again, Section 2.4 of RFC4741 is the reference = that you=20 must look at.
 
Dan
 
But Iam = still=20 confused ..
i hope sumbody could possibly help me out=20 ...

thanx ..
Savitri = Negi

Scientist C
Communication Networks = Division
DEAL=20 Dehradun
 



--- On=20 Mon, 22/12/08, Romascanu, Dan (Dan)=20 <dromasca@avaya.com> wrote:
From:=20 Romascanu, Dan (Dan) <dromasca@avaya.com>
Subject: = RE:=20 [Netconf] soap or ssh
To: savitri_negi@yahoo.com,=20 netconf@ietf.org
Date: Monday, 22 December, 2008, 3:05 = PM

Hi = Savitri,
 
The IEEE paper was correct, and = actually RFC 4741=20 is clear in stating in Section 2.4 that SSH is the mandatory = transport=20 mapping for NETCONF.
 
I am curious - from what document you = reached the=20 conclusion that 'SOAP was preferred'?=20
 
I hope this helps.=20
 
Thanks and=20 Regards,
 
Dan
 

From: = netconf-bounces@ietf.org=20 [mailto:netconf-bounces@ietf.org] On Behalf Of = Savitri=20 Negi
Sent: Monday, December 22, 2008 11:01=20 AM
To: netconf@ietf.org
Subject: = [Netconf] soap=20 or ssh

hi

I am working to find out a = NMS=20 solution for some networking nodes.that work in adhoc=20 environemnt .Iam quite new to Netconf..
I came = across the=20 Netconf and after reading its documents in the initial = documents i saw that netconf over SOAP  was = preffered one=20 but later on i read somewhere in some IEEE paper that = SSH is=20 mandatory for netconf ,so iam a bit confused now = .which one to=20 go for thats over SOAP or over SSH?
I hope someone = could=20 help me with that


Savitri = Negi

Scientist C
Communication = Networks=20 Division
DEAL=20 = Dehradun

From Chandigarh to Chennai - find friends all over India. Click=20 = here.

Add more friends to your messenger and enjoy! Invite=20 them now. ------_=_NextPart_001_01C966B6.E689878B-- --===============0097601256== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0097601256==-- D#0000ff size=3D2>Dan
 

From: = netconf-bounces@ietf.org=20 [mailto:netconf-bounces@ietf.org] On Behalf Of = Savitri=20 Negi
Sent: Monday, December 22, 2008 11:01=20 AM
To: netconf@ietf.org
Subject: = [Netconf] soap=20 or ssh

hi

I am working to find out a = NMS=20 solution for some networking nodes.that work in adhoc=20 environemnt .Iam quite new to Netconf..
I came = across the=20 Netconf and after reading its documents in the initial = documents i saw that netconf over SOAP  was = preffered one=20 but later on i read somewhere in some IEEE paper that = SSH is=20 mandatory for netconf ,so iam a bit confused now = .which one to=20 go for thats over SOAP or over SSH?
I hope someone = could=20 help me with that


Savitri = Negi

Scientist C
Communication = Networks=20 Division
DEAL=20 = Dehradun

From Chandigarh to Chennai - find friends all over India. Click=20 = here.

Add more friends to your messenger and enjoy! Invite=20 them now. ------_=_NextPart_001_01C966B6.E689878B-- --===============0097601256== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --===============0097601256==--