From nobody Mon Dec 1 01:06:20 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A03CF1A0A6A for ; Mon, 1 Dec 2014 01:06:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GRzuPCgR-j9Z for ; Mon, 1 Dec 2014 01:06:16 -0800 (PST) Received: from atlas3.jacobs-university.de (atlas3.jacobs-university.de [212.201.44.18]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 420421A03A5 for ; Mon, 1 Dec 2014 01:06:16 -0800 (PST) Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas3.jacobs-university.de (Postfix) with ESMTP id B96E01013; Mon, 1 Dec 2014 10:06:14 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from atlas3.jacobs-university.de ([10.70.0.220]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10030) with ESMTP id YfB_WC5DdljT; Mon, 1 Dec 2014 10:06:13 +0100 (CET) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "Jacobs University CA - G01" (verified OK)) by atlas3.jacobs-university.de (Postfix) with ESMTPS; Mon, 1 Dec 2014 10:06:14 +0100 (CET) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id F26B52002C; Mon, 1 Dec 2014 10:06:13 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id ZUNMDDPlzxc5; Mon, 1 Dec 2014 10:06:13 +0100 (CET) Received: from elstar.local (elstar.jacobs.jacobs-university.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 348C020017; Mon, 1 Dec 2014 10:06:13 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 1E5542FE5DF1; Mon, 1 Dec 2014 10:06:13 +0100 (CET) Date: Mon, 1 Dec 2014 10:06:13 +0100 From: Juergen Schoenwaelder To: "Reinaldo Penno (repenno)" Message-ID: <20141201090613.GB20179@elstar.local> Mail-Followup-To: "Reinaldo Penno (repenno)" , "netconf@ietf.org" References: <20141130115539.GA13546@elstar.local> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/H9NCq3jShJgWhVBPc1r5wVctKP4 Cc: "netconf@ietf.org" Subject: Re: [Netconf] restconf notifications - SSE vs HTTP 2.0 push X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Dec 2014 09:06:18 -0000 On Mon, Dec 01, 2014 at 04:53:22AM +0000, Reinaldo Penno (repenno) wrote: > I think it will be a loooong time before HTTP 2.0 find its way into all > browsers, Java/Python/C/other libraries and servers into significant > numbers. The installed base is just too large. We should focus on what we > can deploy with HTTP 1.1. I expected this argument but I am not sure to what extend I believe it to be true. My understanding is that most browsers already today use SPDY and I can run SPDY in major web servers as well and my understanding is that HTTP 2.0 is heavily influenced by SPDY. We may be creating an SSE solution today and we may regret that decision in a two years. At least, I think we should leave things open such that usage of HTTP 2.0 push is possible to support without major hassles. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From nobody Mon Dec 1 13:05:24 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C39351A912A; Mon, 1 Dec 2014 13:05:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l1bQURidgPm6; Mon, 1 Dec 2014 13:05:16 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B4F901A9124; Mon, 1 Dec 2014 13:05:15 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IESG Secretary To: IETF Announcement List X-Test-IDTracker: no X-IETF-IDTracker: 5.7.4 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20141201210515.32425.12307.idtracker@ietfa.amsl.com> Date: Mon, 01 Dec 2014 13:05:15 -0800 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/6wdcnxy3PXeIG2-nZ_xqmPKlYE4 Cc: netconf@ietf.org Subject: [Netconf] NETCONF WG Virtual Interim Meetings December 15, 2014, and bi-weekly starting January 5, 2015 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Reply-To: netconf@ietf.org List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Dec 2014 21:05:18 -0000 The NETCONF WG will hold a series of virtual interim meetings beginning Monday, December 15, 2014. Meeting day: Mondays Time: 1800 CET Duration: 2 hours Dates: December 15, 2014 1-time and starting with: January 5, 2015 bi-weekly End date: March 16, 2015 WebEx information: Meeting number: 640 672 878 Meeting password: nc2015 Audio connection: 1-877-668-4493 Call-in toll free number (US/Canada) 1-650-479-3208 Call-in toll number (US/Canada) Access code: 640 672 878 Meeting link: https://ietf.webex.com/ietf/j.php?MTID=m2580594e0bc14b4b94f869a415ce437c From nobody Fri Dec 5 14:55:39 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3245C1A6FE1; Fri, 5 Dec 2014 14:55:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MHZsFW19oS41; Fri, 5 Dec 2014 14:55:35 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A4B21A6FF5; Fri, 5 Dec 2014 14:55:35 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 5.7.4 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20141205225535.19185.27315.idtracker@ietfa.amsl.com> Date: Fri, 05 Dec 2014 14:55:35 -0800 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/A9-Tkf2UKNbunk5Na0Jtoznn1oI Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-call-home-02.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Dec 2014 22:55:37 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration Working Group of the IETF. Title : NETCONF Call Home and RESTCONF Call Home Author : Kent Watsen Filename : draft-ietf-netconf-call-home-02.txt Pages : 11 Date : 2014-12-05 Abstract: This document presents NETCONF Call Home and RESTCONF Call Home, which respectively enable a NETCONF/RESTCONF server to initiate a secure connection to a NETCONF/RESTCONF client. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-call-home/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-netconf-call-home-02 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-call-home-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Dec 5 15:05:51 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D7D61A6FE3 for ; Fri, 5 Dec 2014 15:05:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vcnDBEpMtfdg for ; Fri, 5 Dec 2014 15:05:47 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0738.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:738]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62F591A6FF1 for ; Fri, 5 Dec 2014 15:05:45 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) with Microsoft SMTP Server (TLS) id 15.1.26.15; Fri, 5 Dec 2014 23:05:21 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.105]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.105]) with mapi id 15.01.0026.003; Fri, 5 Dec 2014 23:05:21 +0000 From: Kent Watsen To: "netconf@ietf.org" Thread-Topic: [Netconf] I-D Action: draft-ietf-netconf-call-home-02.txt Thread-Index: AQHQEN6a3yvCKWHDe0iMqGL/CVYDdZyBSlSA Date: Fri, 5 Dec 2014 23:05:20 +0000 Message-ID: References: <20141205225535.19185.27315.idtracker@ietfa.amsl.com> In-Reply-To: <20141205225535.19185.27315.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.10] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-forefront-prvs: 04163EF38A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377454003)(199003)(377424004)(479174003)(164054003)(51704005)(24454002)(189002)(105586002)(106116001)(106356001)(2501002)(230783001)(110136001)(97736003)(99286002)(2351001)(107886001)(107046002)(36756003)(21056001)(4396001)(15975445007)(102836002)(46102003)(122556002)(40100003)(83506001)(1720100001)(68736005)(31966008)(101416001)(19580395003)(19580405001)(20776003)(99396003)(66066001)(62966003)(450100001)(77156002)(64706001)(120916001)(54356999)(86362001)(87936001)(2656002)(76176999)(50986999)(92566001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB458; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: <88065855D9E2AB4BADDC4974318329A0@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/onX7u7eNctCYmwe2f_U2TxH7ICA Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-call-home-02.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Dec 2014 23:05:49 -0000 Dear NETCONF WG, This update to the call home draft primarily adds support for RESTCONF Call Home, per WG consensus from the IETF 91 meeting. This version of the draft is the first candidate for last call. My only comments are: 1. The draft seems very busy now with all the "NETCONF/RESTCONF" and "SSH/TLS" switches, but I'm unsure how to make it any easier to read. Suggestions would be very welcome! 2. Does there need to be special comments for the editor to replace temporary strings like "XXXX" and "PORT-X" to the IANA-assigned values? Is there a reference that explains how that is suppose to be done? Thanks, Kent On 12/5/14, 5:55 PM, "internet-drafts@ietf.org" wrote: > >A New Internet-Draft is available from the on-line Internet-Drafts >directories. > This draft is a work item of the Network Configuration Working Group of >the IETF. > > Title : NETCONF Call Home and RESTCONF Call Home > Author : Kent Watsen > Filename : draft-ietf-netconf-call-home-02.txt > Pages : 11 > Date : 2014-12-05 > >Abstract: > This document presents NETCONF Call Home and RESTCONF Call Home, > which respectively enable a NETCONF/RESTCONF server to initiate a > secure connection to a NETCONF/RESTCONF client. > > >The IETF datatracker status page for this draft is: >https://datatracker.ietf.org/doc/draft-ietf-netconf-call-home/ > >There's also a htmlized version available at: >http://tools.ietf.org/html/draft-ietf-netconf-call-home-02 > >A diff from the previous version is available at: >http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-netconf-call-home-02 > > >Please note that it may take a couple of minutes from the time of >submission >until the htmlized version and diff are available at tools.ietf.org. > >Internet-Drafts are also available by anonymous FTP at: >ftp://ftp.ietf.org/internet-drafts/ > >_______________________________________________ >Netconf mailing list >Netconf@ietf.org >https://www.ietf.org/mailman/listinfo/netconf From nobody Sun Dec 7 08:32:26 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5CDD1A1A2F for ; Sun, 7 Dec 2014 08:32:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IGy0UIARqxgm for ; Sun, 7 Dec 2014 08:32:22 -0800 (PST) Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [93.183.12.32]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DFD5B1A039B for ; Sun, 7 Dec 2014 08:32:21 -0800 (PST) Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd001.nsn-inter.net (8.14.3/8.14.3) with ESMTP id sB7GWJqH021077 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Sun, 7 Dec 2014 16:32:19 GMT Received: from DEMUHTC001.nsn-intra.net ([10.159.42.32]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id sB7GWG0f024856 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sun, 7 Dec 2014 17:32:17 +0100 Received: from DEMUHTC008.nsn-intra.net (10.159.42.39) by DEMUHTC001.nsn-intra.net (10.159.42.32) with Microsoft SMTP Server (TLS) id 14.3.195.1; Sun, 7 Dec 2014 17:32:16 +0100 Received: from DEMUMBX005.nsn-intra.net ([169.254.5.147]) by DEMUHTC008.nsn-intra.net ([10.159.42.39]) with mapi id 14.03.0195.001; Sun, 7 Dec 2014 17:32:16 +0100 From: "Ersue, Mehmet (NSN - DE/Munich)" To: ext Andy Bierman , Kent Watsen Thread-Topic: [Netconf] RESTCONF #2: session monitoring Thread-Index: AQHQC+9ZZPbPfv4qyUynH46goAM5SpyEXjkA Date: Sun, 7 Dec 2014 16:32:15 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.159.42.101] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-purgate-type: clean X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate: clean X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate-size: 3024 X-purgate-ID: 151667::1417969939-0000658F-BFF18D1D/0/0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/zIKrfjednxxdDW5XF4zBmesrbLU Cc: Netconf Subject: Re: [Netconf] RESTCONF #2: session monitoring X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Dec 2014 16:32:25 -0000 All, if there is no objection within a few days we are going to implement issue = #2 as discussed and summarized below. BR,=20 Mehmet=20 > -----Original Message----- > From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Andy Bie= rman > Sent: Saturday, November 29, 2014 5:13 PM > To: Kent Watsen > Cc: Netconf > Subject: Re: [Netconf] RESTCONF #2: session monitoring >=20 > Hi, >=20 > There doesn't seem to be much interest in this issue. > The original WG decision is to just define a "restconf-tls" > identity for the session "transport" leaf. >=20 > IMO the original consensus of "punt this until later" is confirmed. > That would be solution S1. >=20 >=20 >=20 > Andy >=20 >=20 >=20 > On Wed, Nov 26, 2014 at 3:14 PM, Kent Watsen wrote: > > > >>The original task was simply to identify SSE sessions because > >>these are the only long-lived RESTCONF "sessions". > > > > Tracking just SSE sessions is so non-intuitive and somewhat pointless. > > What people want is some means to be aware of all the different "sessio= ns" > > going on, not just the never-ending responses. I know we're struggling > > with the stateless-server constraint, but the articles I linked before = are > > pretty pragmatic. > > > > > > > >>We currently store all RESTCONF sessions in the session list, > >>because the server instrumentation can block, so even a 1 request > >>session can be a long-lived session. In the multi-threaded build, > >>other sessions will still be running, and the RESTCONF session > >>will be visible. > > > > You mean that each REST API entry point is something like this: > > > > Foobar() { > > session_id =3D start_session(); > > > > // do bis logic here > > > > close_session(session_id); > > return HTTP_response; > > } > > > > So even short-lived responses show up as a session temporarily? > > > > > > > >>IMO it is OK if a server treats 1 request as a session or N requests > >>as a session, so picking S2 is good enough. > > > > Assuming cookies are needed to track sessions correctly, there would be= a > > requirement for clients to implement the "Set-Cookie" and "Cookie" head= er > > fields from RFC 6265. Can we at least say that servers MAY use cookie= s? > > (i.e. clients MUST support) > > > > > > Having been thru a Common Criteria certification before, I'm painfully > > aware that every login and logout event needs to be logged, in addition= to > > the actions performed. Without some form of a session, my understandi= ng > > is that BasicAuth leads to 2/3-rds of the audit log being "login" and > > "logout" events, which doesn't match common expectations. Others must > > have experience with this, should we ask the Apps folks for advice? > > > > Thanks, > > Kent > > >=20 > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf From nobody Sun Dec 7 09:11:53 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39EA81A8796 for ; Sun, 7 Dec 2014 09:11:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1o_bNwWzCMUQ for ; Sun, 7 Dec 2014 09:11:50 -0800 (PST) Received: from mail-lb0-f170.google.com (mail-lb0-f170.google.com [209.85.217.170]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C73EF1A8788 for ; Sun, 7 Dec 2014 09:11:49 -0800 (PST) Received: by mail-lb0-f170.google.com with SMTP id 10so1149109lbg.29 for ; Sun, 07 Dec 2014 09:11:48 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=IN5JfISzXE5BiDLgiiCUfjEZ+ohGiJvPZeuE15XZXU0=; b=Du+Rs5yeesYOF+GhWYfKCL+94rP5PsUFTCmo5IEeNHnxMCR6naP+1q9qMhS/9CfHMu jFpa5MI2dUkrvxVoGOHT37JxZswIpmDz8bPwI49hzKzwqHGxoKkxAen1JNNOTxyfpJB1 Lt9cU7JNTWxLzv2ng74xUjJ5KdJpFmcFLJQbPosTcSXr0l4TlZAY6m22upBH9Ajpiv0B C1dFmbAoFrNTETB7VZd9b4KGMJDY4FqvFu5sYEW4V1glZaSKGHbQVuSUM6UOAnehESox hzrfuVawsJe2eOR9Jh/AMDF0V8hQqq4yAgYJXfis+h+5mzBez3BcQWtpMICI6wBMRsdd ICIA== X-Gm-Message-State: ALoCoQnI5YT7g8Gfkr9VQzDsD4Gj8IENA5Q1dXWIIhPSUtMZYtb8W5ZsZujzSk/G9Wz4qJTCU4GF MIME-Version: 1.0 X-Received: by 10.152.1.193 with SMTP id 1mr12569409lao.45.1417972308267; Sun, 07 Dec 2014 09:11:48 -0800 (PST) Received: by 10.112.157.233 with HTTP; Sun, 7 Dec 2014 09:11:48 -0800 (PST) In-Reply-To: References: Date: Sun, 7 Dec 2014 09:11:48 -0800 Message-ID: From: Andy Bierman To: "Ersue, Mehmet (NSN - DE/Munich)" Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/k25pBj8bPBjOKE67wKgjawAVv1s Cc: Netconf Subject: Re: [Netconf] RESTCONF #2: session monitoring X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Dec 2014 17:11:52 -0000 Hi, So that is solution S1. We will just define the restconf-tls identity and say in the draft that there is no standard RESTCONF session monitoring and the identity is defined for future use. Andy On Sun, Dec 7, 2014 at 8:32 AM, Ersue, Mehmet (NSN - DE/Munich) wrote: > All, > > if there is no objection within a few days we are going to implement issue #2 as discussed and summarized below. > > BR, > Mehmet > > >> -----Original Message----- >> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Andy Bierman >> Sent: Saturday, November 29, 2014 5:13 PM >> To: Kent Watsen >> Cc: Netconf >> Subject: Re: [Netconf] RESTCONF #2: session monitoring >> >> Hi, >> >> There doesn't seem to be much interest in this issue. >> The original WG decision is to just define a "restconf-tls" >> identity for the session "transport" leaf. >> >> IMO the original consensus of "punt this until later" is confirmed. >> That would be solution S1. >> >> >> >> Andy >> >> >> >> On Wed, Nov 26, 2014 at 3:14 PM, Kent Watsen wrote: >> > >> >>The original task was simply to identify SSE sessions because >> >>these are the only long-lived RESTCONF "sessions". >> > >> > Tracking just SSE sessions is so non-intuitive and somewhat pointless. >> > What people want is some means to be aware of all the different "sessions" >> > going on, not just the never-ending responses. I know we're struggling >> > with the stateless-server constraint, but the articles I linked before are >> > pretty pragmatic. >> > >> > >> > >> >>We currently store all RESTCONF sessions in the session list, >> >>because the server instrumentation can block, so even a 1 request >> >>session can be a long-lived session. In the multi-threaded build, >> >>other sessions will still be running, and the RESTCONF session >> >>will be visible. >> > >> > You mean that each REST API entry point is something like this: >> > >> > Foobar() { >> > session_id = start_session(); >> > >> > // do bis logic here >> > >> > close_session(session_id); >> > return HTTP_response; >> > } >> > >> > So even short-lived responses show up as a session temporarily? >> > >> > >> > >> >>IMO it is OK if a server treats 1 request as a session or N requests >> >>as a session, so picking S2 is good enough. >> > >> > Assuming cookies are needed to track sessions correctly, there would be a >> > requirement for clients to implement the "Set-Cookie" and "Cookie" header >> > fields from RFC 6265. Can we at least say that servers MAY use cookies? >> > (i.e. clients MUST support) >> > >> > >> > Having been thru a Common Criteria certification before, I'm painfully >> > aware that every login and logout event needs to be logged, in addition to >> > the actions performed. Without some form of a session, my understanding >> > is that BasicAuth leads to 2/3-rds of the audit log being "login" and >> > "logout" events, which doesn't match common expectations. Others must >> > have experience with this, should we ask the Apps folks for advice? >> > >> > Thanks, >> > Kent >> > >> >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf From nobody Sun Dec 7 09:16:43 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D9BB1A879A for ; Sun, 7 Dec 2014 09:16:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HKHbcTqidZaq for ; Sun, 7 Dec 2014 09:16:39 -0800 (PST) Received: from mail-la0-f44.google.com (mail-la0-f44.google.com [209.85.215.44]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5754F1A8789 for ; Sun, 7 Dec 2014 09:16:39 -0800 (PST) Received: by mail-la0-f44.google.com with SMTP id gd6so2436908lab.17 for ; Sun, 07 Dec 2014 09:16:37 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=JGAt7XAALLsVdS7bixxEtrKYiNw4DbzVcdLP5gdHU3Q=; b=cGRWZVjU3l3w5jZXxjb8osrwNOtqmsRm23PFOvdrpSIO6P27X2H8Jx7s0/4ETxmWQh tW/CltmKjZEi3SL68+YsVLDWuH3JcK3Cmyw6BPYed79eq5U2YRSjIx4AZbF3X599kTnS HdEvCqDDEhmXmfxs2uIKtJhee5atHBYte3ZHNOIJqG/Zew8TE/O8AQr4Q9Bv4yKB73Dk xd+ZJThzE1qS8l1Eyirciwd4vHxU/Wg0IoBTfUBssewIjx3ZYFraHMkK1+cRx0GjRGCt ocKoeMRx5MQBIlGKQ5pSKauHBAFdSYiNF2KxNZSL0v30+AZdlbewYTgoNGArSGC4e9dn +LrQ== X-Gm-Message-State: ALoCoQmC5p8TeqtOf/Zyjx1rW2P8QBSut5Ur3cm9BhvVeuqp4alI9boO59dHRsiw5o4BscX7GF0J MIME-Version: 1.0 X-Received: by 10.112.101.100 with SMTP id ff4mr12284688lbb.94.1417972597817; Sun, 07 Dec 2014 09:16:37 -0800 (PST) Received: by 10.112.157.233 with HTTP; Sun, 7 Dec 2014 09:16:37 -0800 (PST) In-Reply-To: References: Date: Sun, 7 Dec 2014 09:16:37 -0800 Message-ID: From: Andy Bierman To: "Ersue, Mehmet (NSN - DE/Munich)" Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/cH8EVtao_xhJ0wRrPITIBDrkK28 Cc: Netconf Subject: Re: [Netconf] RESTCONF #2: session monitoring X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Dec 2014 17:16:41 -0000 On Sun, Dec 7, 2014 at 9:11 AM, Andy Bierman wrote: > Hi, > > So that is solution S1. > We will just define the restconf-tls identity and say > in the draft that there is no standard RESTCONF session monitoring > and the identity is defined for future use. > This creates a normative reference to NETCONF Monitoring for no reason. So I am proposing S0 -- do not have anything in the RESTCONF draft about session monitoring, and do not define the restconf-tls identity until it is needed in a standard YANG module. If there are no comments, then S1 is still the default solution. IMO there is no standards value in S1 but its cost is also low. > > Andy Andy > > > On Sun, Dec 7, 2014 at 8:32 AM, Ersue, Mehmet (NSN - DE/Munich) > wrote: >> All, >> >> if there is no objection within a few days we are going to implement issue #2 as discussed and summarized below. >> >> BR, >> Mehmet >> >> >>> -----Original Message----- >>> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Andy Bierman >>> Sent: Saturday, November 29, 2014 5:13 PM >>> To: Kent Watsen >>> Cc: Netconf >>> Subject: Re: [Netconf] RESTCONF #2: session monitoring >>> >>> Hi, >>> >>> There doesn't seem to be much interest in this issue. >>> The original WG decision is to just define a "restconf-tls" >>> identity for the session "transport" leaf. >>> >>> IMO the original consensus of "punt this until later" is confirmed. >>> That would be solution S1. >>> >>> >>> >>> Andy >>> >>> >>> >>> On Wed, Nov 26, 2014 at 3:14 PM, Kent Watsen wrote: >>> > >>> >>The original task was simply to identify SSE sessions because >>> >>these are the only long-lived RESTCONF "sessions". >>> > >>> > Tracking just SSE sessions is so non-intuitive and somewhat pointless. >>> > What people want is some means to be aware of all the different "sessions" >>> > going on, not just the never-ending responses. I know we're struggling >>> > with the stateless-server constraint, but the articles I linked before are >>> > pretty pragmatic. >>> > >>> > >>> > >>> >>We currently store all RESTCONF sessions in the session list, >>> >>because the server instrumentation can block, so even a 1 request >>> >>session can be a long-lived session. In the multi-threaded build, >>> >>other sessions will still be running, and the RESTCONF session >>> >>will be visible. >>> > >>> > You mean that each REST API entry point is something like this: >>> > >>> > Foobar() { >>> > session_id = start_session(); >>> > >>> > // do bis logic here >>> > >>> > close_session(session_id); >>> > return HTTP_response; >>> > } >>> > >>> > So even short-lived responses show up as a session temporarily? >>> > >>> > >>> > >>> >>IMO it is OK if a server treats 1 request as a session or N requests >>> >>as a session, so picking S2 is good enough. >>> > >>> > Assuming cookies are needed to track sessions correctly, there would be a >>> > requirement for clients to implement the "Set-Cookie" and "Cookie" header >>> > fields from RFC 6265. Can we at least say that servers MAY use cookies? >>> > (i.e. clients MUST support) >>> > >>> > >>> > Having been thru a Common Criteria certification before, I'm painfully >>> > aware that every login and logout event needs to be logged, in addition to >>> > the actions performed. Without some form of a session, my understanding >>> > is that BasicAuth leads to 2/3-rds of the audit log being "login" and >>> > "logout" events, which doesn't match common expectations. Others must >>> > have experience with this, should we ask the Apps folks for advice? >>> > >>> > Thanks, >>> > Kent >>> > >>> >>> _______________________________________________ >>> Netconf mailing list >>> Netconf@ietf.org >>> https://www.ietf.org/mailman/listinfo/netconf From nobody Sun Dec 7 09:58:47 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE5A01A87DB for ; Sun, 7 Dec 2014 09:58:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 85-Iv0kPkD-Y for ; Sun, 7 Dec 2014 09:58:45 -0800 (PST) Received: from mail-lb0-f175.google.com (mail-lb0-f175.google.com [209.85.217.175]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69A741A87D2 for ; Sun, 7 Dec 2014 09:58:45 -0800 (PST) Received: by mail-lb0-f175.google.com with SMTP id u10so2700419lbd.6 for ; Sun, 07 Dec 2014 09:58:43 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=6cf0rfChc8KL4gyTOsAGFA2Lce3x7MZAhMv4mqC3rWI=; b=L7i3ER6UJt16Hy/IBDVlrmZtBijr1Y4mcGvFkvKE2+HffSGVZK79N8bl7Iwo8zo9B4 C9MyB8mq0dWQyG7p+Eu5qsND35h3tzzVcIlbicmeveHHq4oUSKXwqTLHrBtTzHL9tJbz 6t18YhHX0CMH3D/yhQRzMj+bl0FuDE1cgoc24bVHbqMAkY/Bfh0jYp/YMpTh+nCaWr38 v7XSHjQvAiwmgDnW0Y5RJ1BOYllpmmd2kUxvPavqt1Wm0a/sAeyq5/ztx+h0kThnifQ/ Kig6IUT0TQx8I3pEcHoO6x1XCnS3hByOVpXgxb5raGrVKWrkE9YdIjFbExkUPAYRkeHs rkJg== X-Gm-Message-State: ALoCoQmFpKXFdfLHIKtTYQHvaI5Vd7x/hY1fs8UlW9umy5gJM5eNvntqpg6Opjvn11ADk1EHQZIE MIME-Version: 1.0 X-Received: by 10.112.101.100 with SMTP id ff4mr12422536lbb.94.1417975123760; Sun, 07 Dec 2014 09:58:43 -0800 (PST) Received: by 10.112.157.233 with HTTP; Sun, 7 Dec 2014 09:58:43 -0800 (PST) Date: Sun, 7 Dec 2014 09:58:43 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/H6XRhUMHhRoSokckeyBGpcgpz6g Subject: [Netconf] RESTCONF #4: defaults handling X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Dec 2014 17:58:46 -0000 Hi, This is the proposal for draft-04 for defaults handling. The text is in the github version of the draft. 1) server MUST include the "defaults" protocol capability in the "capability" list with parameter "basic-mode" set. Example: urn:ietf:params:restconf:capability:defaults:1.0?basic-mode=explicit 2) server MAY support the "with-defaults" query parameter (works the same as parameter for get or get-config) Andy From nobody Sun Dec 7 11:18:31 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59C561A8875 for ; Sun, 7 Dec 2014 11:18:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xf0e6aNzo7WI for ; Sun, 7 Dec 2014 11:18:28 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E5061A0162 for ; Sun, 7 Dec 2014 11:18:27 -0800 (PST) Received: from [192.168.131.135] ([80.92.119.109]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0LjrDd-1XQpZZ3Fl3-00bvE5 for ; Sun, 07 Dec 2014 20:18:24 +0100 Message-ID: <5484A800.8080604@gmx.net> Date: Sun, 07 Dec 2014 20:18:24 +0100 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0 MIME-Version: 1.0 To: netconf@ietf.org OpenPGP: id=4D776BC9 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="745jQQGvk38fCaw7EVlpMqif4CFo2gr8L" X-Provags-ID: V03:K0:ZS+VFd6IpH1hH5FAMqKJ7i7s5UsYfld315jAPO0sDnW+eknx4et wsA95PbWxV5m0RnJFFo6ZCgq4i2tWq/Td6hLWPLXxHuinWRsvJTTv3w64pFgDtpWi4mth6e yZwo22veW9ggkPLrPrdzem3AAnsZx8Bhl8G5pHY7fXT+/rBlOw6gaTr4cCUVZ+UFdSflnB/ +DEdt31BRcSUgAS2ETJ4g== X-UI-Out-Filterresults: notjunk:1; Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/kC6rfKcn1VTMf775MP9-HRhRytg Subject: [Netconf] draft-ietf-netconf-zerotouch-01 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Dec 2014 19:18:30 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --745jQQGvk38fCaw7EVlpMqif4CFo2gr8L Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I have not been active previously in this working group and so I might lack some context. Nevertheless, I have read through and have a few questions. I would like to focus my comments on the first figure in the document: fetches Configlet and +----------+ boot-image, if needed +------------| Device |---------------------+ | +----------+ | | ^ | | | V | call home | manufactures +----------+ | | with necessary | Config | | | default state | Server |<----+ | | for ZeroTouch +----------+ | | | | | | | | +----------+ delegates trust | | | Vendor |-------------------+ | | +----------+ | | | ^ ^ | | | | | V | | | | +----------+ | | imports | | validate owner | Config | | | trust | +-----------------| Signer | | | anchor | +----------+ | | | ^ | | | | | | +---------+ requests signing | | +----------->| NMS |--------------------+ | +---------+ | | | +----------------------------------------+ signed Configlet and boot-image file 1) I would like to point out that the figure uses the same style for drawing protocol endpoints and real-world entities. Maybe that was done on purpose; maybe not. 2) The description in the document is not clear when it comes to the information that is pre-configured on the device. Here are two statements from the draft: The device is preconfigured with a secure device identity, Configuration Servers URIs, and certificates for both Configuration Signers and Configuration Servers it trusts by default. Vendors manufacture the devices with secure device identities and preconfigured Configuration URIs, and Configuration Signer certificates. Is a device now preconfigured with the certificates of the config signer and the configuration server? Figure 1 puts them in some dependency to each other so it is not clear which certificate is actually needed. Maybe we are really talking about trust anchors? 3) When I read "secure device identity" I wasn't quite sure what that would actually mean till I read this sentence later in the document. " Devices supporting ZeroTouch MUST have a manufacturer-provisioned secure device identifier, as defined in [Std-802.1AR-2009]. " Another way to put it is that the device is configured by the manufacturer with a certificate and the corresponding private key. The certificate has the structure defined in [Std-802.1AR-2009]. A related question concerning figure 1 would then be whether the "vendor" is the same as the manufacturer or not. Then you write: " The IDevID includes both an X.509 certificate, encoding a globally unique per-device identifier, and a chain of X.509 certificates leading to the manufacturer's well-known trust anchor. " Is this CA hierarchy needed to support the functionality for "delegating trust to the "config signer" as shown in Figure 1? This sentence sounds to me like the device has * the CA cert of the manufacturer (which is the trust anchor), * the certificate issued to the device from some intermediate CA, and * a certificate chain that allows path validation of the device certificate to the manufacturer CA. 4) Internet-based Configuration Servers =3D NMS? In Figure 1 you use the term "NMS" and later in the text you talk about the Internet-based Configuration Servers or Configuration Servers. Are these all the same entities or different entities? Ciao Hannes --745jQQGvk38fCaw7EVlpMqif4CFo2gr8L Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJUhKgAAAoJEGhJURNOOiAtWLkIAIdXN/hQYyNWk6M6C3cg+27M Cp4u8deq1IChpyFIMb7tuPzHCt7T5r3oMB+kgT5RZvBc3UIT/G4/iVB4Pls+NZiP CNUwSQ/auFMDZOAysQjK0eKKWln91+l82vU/Xvq25AYz0/Seqixqt99+QQF2ZWa1 fW0GTNkfAd5+3whafyBb0MpFjT91J+lGnrOOSRl1qRqZ9sZ9Kyjf+4reMx/j15mO OfFxBNeZsxQ0RTW1/rKmmHeXanYrBTrJkitmg8EiZWQ+ldKbCzhJ7cZcVP3wZSTI 8V+H/aAIfYbijNutMtKIFNMGH3qCOvh/BR4WpBuaBmwGaS/pom5373LcurW/epI= =myrB -----END PGP SIGNATURE----- --745jQQGvk38fCaw7EVlpMqif4CFo2gr8L-- From nobody Mon Dec 8 05:30:19 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D9151A8A55 for ; Mon, 8 Dec 2014 05:30:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Owkyyzrkkub5 for ; Mon, 8 Dec 2014 05:30:11 -0800 (PST) Received: from atlas3.jacobs-university.de (atlas3.jacobs-university.de [212.201.44.18]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E076F1A8A27 for ; Mon, 8 Dec 2014 05:30:10 -0800 (PST) Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas3.jacobs-university.de (Postfix) with ESMTP id D8FE289D; Mon, 8 Dec 2014 14:30:08 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from atlas3.jacobs-university.de ([10.70.0.220]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10030) with ESMTP id C6k1nLy17RQm; Mon, 8 Dec 2014 14:30:05 +0100 (CET) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "Jacobs University CA - G01" (verified OK)) by atlas3.jacobs-university.de (Postfix) with ESMTPS; Mon, 8 Dec 2014 14:30:07 +0100 (CET) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id C54A02002C; Mon, 8 Dec 2014 14:30:07 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id lj0akgK5-Lci; Mon, 8 Dec 2014 14:30:06 +0100 (CET) Received: from elstar.local (elstar.jacobs.jacobs-university.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 74FE020017; Mon, 8 Dec 2014 14:30:05 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 534002FEEF15; Mon, 8 Dec 2014 14:30:05 +0100 (CET) Date: Mon, 8 Dec 2014 14:30:04 +0100 From: Juergen Schoenwaelder To: "t. petch" Message-ID: <20141208133004.GA41570@elstar.local> Mail-Followup-To: "t. petch" , "Ersue, Mehmet (NSN - DE/Munich)" , ext Benoit Claise , netconf References: <04e301cfff2d$7493fae0$4001a8c0@gateway.2wire.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <04e301cfff2d$7493fae0$4001a8c0@gateway.2wire.net> User-Agent: Mutt/1.4.2.3i Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/uYaBrPn3fPnXRi6xs0jgD04GjH8 Cc: netconf Subject: Re: [Netconf] 5539bis was Re: Summary of and AIs from the NETCONF Session in IETF #91 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Dec 2014 13:30:16 -0000 On Thu, Nov 13, 2014 at 10:31:15AM +0000, t. petch wrote: > ----- Original Message ----- > From: "Ersue, Mehmet (NSN - DE/Munich)" > To: "ext Benoit Claise" ; "netconf" > > Sent: Thursday, November 13, 2014 5:07 AM > Subject: [Netconf] Summary of and AIs from the NETCONF Session in IETF > #91 > > > > Hi Benoit, NETCONF WG, > > > > below is a summary and action items from the NETCONF WG session on > November 11, 2014, Honolulu, Hawaii. > > A short version of this summary will be made available at OPS area > Wiki soon (at > http://trac.tools.ietf.org/area/ops/trac/wiki/IETF91summary). > > > > - We had approx. 85+ participants in the 2 hour NETCONF session, > > - We reviewed the status of the WG, > > - We had a discussion on all 6 chartered documents. > > - Note takers were: Lada Lhotka and Balazs Lengyel. The Jabber scribe > was Rolf Winter. > > Many thanks to the note takers and jabber scribe for volunteering. > > > > The session agenda is available at: > http://www.ietf.org/proceedings/91/agenda/agenda-91-netconf > > NETCONF co-chairs will ask for a room for 100 for the next meeting. > > > > Following are the decisions taken per humming in the NETCONF session. > > If there is no strong objection we will implement as proposed. > > > > > > > > > Focus on the use of X.509 for TLS (rfc5539bis) > > - supported by a large humm > > > A clarification - does this mean that we re-title rfc5539bis as being > only about the use of TLS leaving those wanting other forms of security > to write their own I-Ds? > This document has _always_ been about TLS. I think you proposed to narrow it down to TLS with mutual X.509 certification and this is what the hum was about. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From nobody Mon Dec 8 05:32:08 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE2CC1A8756 for ; Mon, 8 Dec 2014 05:32:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BKOMokkzRhzC for ; Mon, 8 Dec 2014 05:32:04 -0800 (PST) Received: from atlas3.jacobs-university.de (atlas3.jacobs-university.de [212.201.44.18]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF4A11A873E for ; Mon, 8 Dec 2014 05:32:04 -0800 (PST) Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas3.jacobs-university.de (Postfix) with ESMTP id 7E9DB89D; Mon, 8 Dec 2014 14:32:03 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from atlas3.jacobs-university.de ([10.70.0.220]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10030) with ESMTP id poC7ONu5iPMX; Mon, 8 Dec 2014 14:32:00 +0100 (CET) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "Jacobs University CA - G01" (verified OK)) by atlas3.jacobs-university.de (Postfix) with ESMTPS; Mon, 8 Dec 2014 14:32:02 +0100 (CET) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id 5A46120034; Mon, 8 Dec 2014 14:32:02 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id ROY9zuadw7oL; Mon, 8 Dec 2014 14:32:01 +0100 (CET) Received: from elstar.local (elstar.jacobs.jacobs-university.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 2E0602002C; Mon, 8 Dec 2014 14:32:01 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 175D62FEEF43; Mon, 8 Dec 2014 14:32:01 +0100 (CET) Date: Mon, 8 Dec 2014 14:32:01 +0100 From: Juergen Schoenwaelder To: "t. petch" Message-ID: <20141208133201.GB41570@elstar.local> Mail-Followup-To: "t. petch" , "Ersue, Mehmet (NSN - DE/Munich)" , ext Benoit Claise , netconf References: <04e401cfff2d$74e7e740$4001a8c0@gateway.2wire.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <04e401cfff2d$74e7e740$4001a8c0@gateway.2wire.net> User-Agent: Mutt/1.4.2.3i Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/jLE4HIkleZNLIXywJkVfK8aORcw Cc: netconf Subject: Re: [Netconf] username from X.503 was Re: Summary of and AIs from the NETCONF Session in IETF #91 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Dec 2014 13:32:06 -0000 On Thu, Nov 13, 2014 at 10:34:15AM +0000, t. petch wrote: > > > > > Following are the decisions taken per humming in the NETCONF session. > > If there is no strong objection we will implement as proposed. > > > > > > > > Describe algorithm for extracting a user name out of the X509 > attributes > > - loud humm in favor > > > > A clarification - does this mean that this algorithm goes in > netconf-server? > The idea (as far as I understood it) is that NC over TLS provides a high-level description of the algorithm. The NC server configuration document will define the YANG objects to configure this. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From nobody Mon Dec 8 18:12:12 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 867471A026C for ; Mon, 8 Dec 2014 18:12:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8xyZwS8FN5-M for ; Mon, 8 Dec 2014 18:12:08 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0129.outbound.protection.outlook.com [207.46.100.129]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C8CE31A0151 for ; Mon, 8 Dec 2014 18:12:08 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB457.namprd05.prod.outlook.com (10.141.72.141) with Microsoft SMTP Server (TLS) id 15.1.31.17; Tue, 9 Dec 2014 02:12:06 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Tue, 9 Dec 2014 02:12:06 +0000 From: Kent Watsen To: Juergen Schoenwaelder , "t. petch" Thread-Topic: [Netconf] username from X.503 was Re: Summary of and AIs from the NETCONF Session in IETF #91 Thread-Index: AQHP/v/A0RV7p1iOEE6jjsWMtI6v8pxeXeEBgCd60YCAAHZgAA== Date: Tue, 9 Dec 2014 02:12:06 +0000 Message-ID: References: <04e401cfff2d$74e7e740$4001a8c0@gateway.2wire.net> <20141208133201.GB41570@elstar.local> In-Reply-To: <20141208133201.GB41570@elstar.local> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.11] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-forefront-prvs: 0420213CCD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(189002)(199003)(51704005)(21056001)(31966008)(122556002)(77156002)(62966003)(4396001)(120916001)(46102003)(68736005)(107046002)(102836002)(99396003)(40100003)(97736003)(101416001)(106356001)(83506001)(106116001)(99286002)(105586002)(66066001)(50986999)(20776003)(76176999)(87936001)(64706001)(2656002)(36756003)(92566001)(54356999)(86362001)(7059030); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB457; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: <06E0AAB1CF657E4BB9F884EB9F9944C1@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/L9EL277v5ulmy0XT3F2b2e_cliU Cc: netconf Subject: Re: [Netconf] username from X.503 was Re: Summary of and AIs from the NETCONF Session in IETF #91 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Dec 2014 02:12:10 -0000 >>=20 >>=20 >> > Describe algorithm for extracting a user name out of the X509 >> attributes >> > - loud humm in favor >> > >>=20 >> A clarification - does this mean that this algorithm goes in >> netconf-server? >> > >The idea (as far as I understood it) is that NC over TLS provides a >high-level description of the algorithm. The NC server configuration >document will define the YANG objects to configure this. I didn't articulate clearly enough at the mic about the "what" and "how", but Juergen agreed so I'm sure not that he's a mindreader ;) Anyway, in reflecting on this, I realized what I should've said is that it should be whatever is needed so that 5539bis has an Informative (not Normative) reference to server-model. Again, this is the necessary because alternate configuration models can exist, thus it doesn't make sense to me for 5539bis to say that it can *only* be configured by just the server-model. My hope is that 5539bis will assert that client-certs are required and specify that servers must be configurable to know how to extract a username using the various options (specified, subAltName, DNS, etc.). Another option is for 5539bis to have a Normative reference onto draft-ietf-netmod-snmp-cfg, section 4.1, though that may be too convoluted for some. Kent From nobody Mon Dec 8 19:02:03 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB7061A1A42 for ; Mon, 8 Dec 2014 19:01:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QrcwsWCjSOGS for ; Mon, 8 Dec 2014 19:01:55 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0799.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::799]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2008E1A1A1C for ; Mon, 8 Dec 2014 19:01:55 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) with Microsoft SMTP Server (TLS) id 15.1.31.17; Tue, 9 Dec 2014 03:01:31 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Tue, 9 Dec 2014 03:01:31 +0000 From: Kent Watsen To: Hannes Tschofenig , "netconf@ietf.org" Thread-Topic: [Netconf] draft-ietf-netconf-zerotouch-01 Thread-Index: AQHQElKal5xonO3gx0quOfI9bf4W+pyGQGmA Date: Tue, 9 Dec 2014 03:01:31 +0000 Message-ID: References: <5484A800.8080604@gmx.net> In-Reply-To: <5484A800.8080604@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.11] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-forefront-prvs: 0420213CCD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(6009001)(189002)(164054003)(199003)(51704005)(107046002)(107886001)(2501002)(122556002)(120916001)(97736003)(105586002)(92566001)(36756003)(102836002)(68736005)(99286002)(106356001)(106116001)(99396003)(40100003)(46102003)(20776003)(64706001)(31966008)(4396001)(230783001)(77156002)(101416001)(54356999)(76176999)(83506001)(50986999)(66066001)(87936001)(21056001)(62966003)(86362001)(2656002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB458; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/ocdZpypkvhlT8NsrOfClyb0Yr5o Subject: Re: [Netconf] draft-ietf-netconf-zerotouch-01 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Dec 2014 03:02:00 -0000 Hi Hannes! Thank you for showing interest in this draft, it's great to get your security perspective on it. >I would like to focus my comments on the first figure in the document: > > fetches Configlet and > +----------+ boot-image, if needed > +------------| Device |---------------------+ > | +----------+ | > | ^ | > | | V > | call home | manufactures +----------+ > | | with necessary | Config | > | | default state | Server |<----+ > | | for ZeroTouch +----------+ | > | | | > | | | > | +----------+ delegates trust | > | | Vendor |-------------------+ | > | +----------+ | | > | ^ ^ | | > | | | V | > | | | +----------+ | > | imports | | validate owner | Config | | > | trust | +-----------------| Signer | | > | anchor | +----------+ | > | | ^ | > | | | | > | +---------+ requests signing | | > +----------->| NMS |--------------------+ | > +---------+ | > | | > +----------------------------------------+ > signed Configlet and boot-image file > > >1) I would like to point out that the figure uses the same style for >drawing protocol endpoints and real-world entities. Maybe that was done >on purpose; maybe not. True, "Vendor" is not an endpoint and, while an NMS is an endpoint in network management scenarios, the relationships drawn are more offline activities. You're the first to point this out, and I'm guessing you think it odd. Could you suggest how to improve it? Would replacing the '+' in the corners with something like 'o', along with a key help much? >2) The description in the document is not clear when it comes to the >information that is pre-configured on the device. > >Here are two statements from the draft: > > The device > is preconfigured with a secure device identity, Configuration > Servers URIs, and certificates for both Configuration Signers > and Configuration Servers it trusts by default. > > Vendors manufacture the devices with secure device identities > and preconfigured Configuration URIs, and Configuration Signer > certificates. Good catch, these statements are almost consistent, but the 2nd paragraph fails to mention the trust anchor certificate for the Configuration Server. Also, as you mention below, both would be improved if "certificate" were expanded to "trust anchor certificate" >Is a device now preconfigured with the certificates of the config signer >and the configuration server? > >Figure 1 puts them in some dependency to each other so it is not clear >which certificate is actually needed. Maybe we are really talking about >trust anchors? Yes, these are intended to be trust anchor certificates. The list of Configuration Signer trust anchor certs may contain just one entry, the Vendor's trust anchor used to sign the Configuration Signer CSRs, but we made it a list in case there is ever a need to have another trust-anchor. The list of Configuration Server trust anchor certs is similar to the set of CA certs found in browsers. >3) When I read "secure device identity" I wasn't quite sure what that >would actually mean till I read this sentence later in the document. > >" Devices supporting ZeroTouch MUST have a manufacturer-provisioned > secure device identifier, as defined in [Std-802.1AR-2009]. >" Thanks, I'll move the reference up so it's defined at first use. Actually, there is suggestion to have a Terminology section at the top, which would've helped here as well. >Another way to put it is that the device is configured by the >manufacturer with a certificate and the corresponding private key. The >certificate has the structure defined in [Std-802.1AR-2009]. Correct. >A related question concerning figure 1 would then be whether the >"vendor" is the same as the manufacturer or not. Yes, we're using these terms interchangeably. I think we should settle on one, probably "Vendor". And again, a Terminology section would help. >Then you write: > >" > The IDevID includes both an X.509 certificate, > encoding a globally unique per-device identifier, and a chain of > X.509 certificates leading to the manufacturer's well-known trust > anchor. >" > >Is this CA hierarchy needed to support the functionality for "delegating >trust to the "config signer" as shown in Figure 1? No, this certificate chain is needed for when the device calls home to the NMS. During either the SSH or TLS transport handshake, the device will provide these certificates to the NMS so that it can verify the device's identity. >This sentence sounds to me like the device has >* the CA cert of the manufacturer (which is the trust anchor), >* the certificate issued to the device from some intermediate CA, and >* a certificate chain that allows path validation of the device >certificate to the manufacturer CA. Almost. Strictly speaking, the device would not need the manufacturer's trust anchor, as the NMS is expected to have previously gotten it for themselves (the "imports trust anchor") relation in the diagram above. This follows the common practice of sending the chain up to but not including the trust anchor. >4) Internet-based Configuration Servers =3D NMS? > >In Figure 1 you use the term "NMS" and later in the text you talk about >the Internet-based Configuration Servers or Configuration Servers. Are >these all the same entities or different entities? Different entities, albeit it's conceivable that an NMS may incorporate the Configuration Server role as well. Another possible bundling would be for the Configuration Signer to incorporate the Configuration Server role. Taking it another step, the Vendor might itself take on both the Configuration Signer and Configuration Server roles, but I digress. Great comments, we'll incorporate them in the next update! Cheers, Kent From nobody Tue Dec 9 00:13:14 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB2F51A6F13 for ; Tue, 9 Dec 2014 00:13:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fGW0RRbkXCB3 for ; Tue, 9 Dec 2014 00:13:10 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D74B11A6F03 for ; Tue, 9 Dec 2014 00:13:09 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BPV52485; Tue, 09 Dec 2014 08:13:08 +0000 (GMT) Received: from SZXEML460-HUB.china.huawei.com (10.82.67.203) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.158.1; Tue, 9 Dec 2014 08:13:06 +0000 Received: from SZXEML512-MBS.china.huawei.com ([169.254.8.128]) by szxeml460-hub.china.huawei.com ([10.82.67.203]) with mapi id 14.03.0158.001; Tue, 9 Dec 2014 16:13:02 +0800 From: Rohit R Ranade To: "netconf@ietf.org" , "andy@yumaworks.com" Thread-Index: AdATh/DXtBDvu5YXQJ2ocZmqAI9lCA== Date: Tue, 9 Dec 2014 08:13:02 +0000 Message-ID: <991B70D8B4112A4699D5C00DDBBF878A671DA360@szxeml512-mbs.china.huawei.com> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.18.144.92] Content-Type: multipart/alternative; boundary="_000_991B70D8B4112A4699D5C00DDBBF878A671DA360szxeml512mbschi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/lElEtyPdHXem459WI8Yg904oOB4 Subject: [Netconf] (no subject) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Dec 2014 08:13:12 -0000 --_000_991B70D8B4112A4699D5C00DDBBF878A671DA360szxeml512mbschi_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, I have been working on RESTCONF based APIs at the client side. I have a sce= nario where there are two modules at Server which have same name but differ= ent namespaces. Is there any mechanism to resolve this conflict ? As per YANG RFC 6020, I do not see any restriction that module names must b= e unique. How do I sent a HTTP request which reaches the intended module( say Module-= A of NamespaceA) ? Eg: Module-A --> NamespaceA Module-A -> NamespaceB Note: The resource path for the URI is also same. Making the module names u= nique is not an option. Kindly help to provide a solution. With Regards, Rohit --_000_991B70D8B4112A4699D5C00DDBBF878A671DA360szxeml512mbschi_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hello,

 

I have been working on RESTCONF based APIs at the cl= ient side. I have a scenario where there are two modules at Server which ha= ve same name but different namespaces. Is there any mechanism to resolve th= is conflict ?

As per YANG RFC 6020, I do not see any restriction t= hat module names must be unique.

How do I sent a HTTP request which reaches the inten= ded module( say Module-A of NamespaceA) ?

 

Eg:

Module-A =E0 NamespaceA

Module-A -> NamespaceB

 

Note: The resource path for the URI is also same. Ma= king the module names unique is not an option.

 

Kindly help to provide a solution.

 

With Regards,

Rohit

 

--_000_991B70D8B4112A4699D5C00DDBBF878A671DA360szxeml512mbschi_-- From nobody Tue Dec 9 00:21:25 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D54841A6F63 for ; Tue, 9 Dec 2014 00:21:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KzIfq5hPWLSu for ; Tue, 9 Dec 2014 00:21:18 -0800 (PST) Received: from atlas3.jacobs-university.de (atlas3.jacobs-university.de [212.201.44.18]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB5A61A6F5D for ; Tue, 9 Dec 2014 00:21:17 -0800 (PST) Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas3.jacobs-university.de (Postfix) with ESMTP id 3A3AD75A; Tue, 9 Dec 2014 09:21:16 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from atlas3.jacobs-university.de ([10.70.0.220]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10030) with ESMTP id d5vCiV_2PA70; Tue, 9 Dec 2014 09:21:14 +0100 (CET) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "Jacobs University CA - G01" (verified OK)) by atlas3.jacobs-university.de (Postfix) with ESMTPS; Tue, 9 Dec 2014 09:21:15 +0100 (CET) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id 77FAF20034; Tue, 9 Dec 2014 09:21:15 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id MVHXVFku99PS; Tue, 9 Dec 2014 09:21:14 +0100 (CET) Received: from elstar.local (elstar.jacobs.jacobs-university.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 7585E20017; Tue, 9 Dec 2014 09:21:14 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id E8E132FEFB82; Tue, 9 Dec 2014 09:21:12 +0100 (CET) Date: Tue, 9 Dec 2014 09:21:12 +0100 From: Juergen Schoenwaelder To: Rohit R Ranade Message-ID: <20141209082110.GA43910@elstar.local> Mail-Followup-To: Rohit R Ranade , "netconf@ietf.org" , "andy@yumaworks.com" References: <991B70D8B4112A4699D5C00DDBBF878A671DA360@szxeml512-mbs.china.huawei.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <991B70D8B4112A4699D5C00DDBBF878A671DA360@szxeml512-mbs.china.huawei.com> User-Agent: Mutt/1.4.2.3i Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/MvrhWqdanUPs8XZzpJ6H5dpKl-I Cc: "netconf@ietf.org" Subject: Re: [Netconf] (no subject) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Dec 2014 08:21:20 -0000 Rohit, RFC 6020 says: Private module names are assigned by the organization owning the module without a central registry. It is RECOMMENDED to choose module names that will have a low probability of colliding with standard or other enterprise modules and submodules, e.g., by using the enterprise or organization name as a prefix for the module name. The way RESTCONF and the JSON encoding work, module names that collide do actually break things. Clashing module names may also cause harm when it comes to YANG imports (unless you use import-by-revision that the revision dates resolve the ambiguity). /js On Tue, Dec 09, 2014 at 08:13:02AM +0000, Rohit R Ranade wrote: > Hello, > > I have been working on RESTCONF based APIs at the client side. I have a scenario where there are two modules at Server which have same name but different namespaces. Is there any mechanism to resolve this conflict ? > As per YANG RFC 6020, I do not see any restriction that module names must be unique. > How do I sent a HTTP request which reaches the intended module( say Module-A of NamespaceA) ? > > Eg: > Module-A --> NamespaceA > Module-A -> NamespaceB > > Note: The resource path for the URI is also same. Making the module names unique is not an option. > > Kindly help to provide a solution. > > With Regards, > Rohit > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From nobody Tue Dec 9 09:17:25 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E0261A89A5 for ; Tue, 9 Dec 2014 09:17:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KvhVmi5roP5G for ; Tue, 9 Dec 2014 09:17:09 -0800 (PST) Received: from mail-la0-f48.google.com (mail-la0-f48.google.com [209.85.215.48]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 800401A86EB for ; Tue, 9 Dec 2014 09:16:33 -0800 (PST) Received: by mail-la0-f48.google.com with SMTP id gf13so898782lab.21 for ; Tue, 09 Dec 2014 09:16:32 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=OnIr+5WSfraHZHTpe6qrUS+ShLmFSp2tstMxTS5gLq0=; b=G1bb69gggiyAUbcXEEmXy3dJHT8nghLGSJTV/hqYINNuhf5TCMCG2lTZLAnjr+mvjN fGd69ymZR6kurAhk0guySnAGrLSiTMMbbD6nM8b9bK8luzpolKoX0UxbD8fHbUU6inS6 xEqRiPbjuZB1idcssWXb/bi1JLNVrVnoJ/rYpXwpmxjDMt43T95YiVt+UmS4KMSvxr5u wmsmhQOYlDMfoaEXihkmr0spBG5h+cnFkc1l2rbF/dBs3ztGg8p7vi3Bc4vCJnJOKU5W 3d94I9ZbNwR4yw7jhoTFvQhZR+SeYWUs2W7/h/bFT2rea7DWQGFrCvZ+rH7WefrYQunt UOYg== X-Gm-Message-State: ALoCoQkEXsYLoHd5kUSdoqnUBVdNIzdd4GF4bpp798JV7qEhPjfUA4BCI+Nm/azb+E+TmmOKhJVX MIME-Version: 1.0 X-Received: by 10.112.12.65 with SMTP id w1mr7381350lbb.68.1418145391965; Tue, 09 Dec 2014 09:16:31 -0800 (PST) Received: by 10.112.157.233 with HTTP; Tue, 9 Dec 2014 09:16:31 -0800 (PST) In-Reply-To: <00b601d00028$1cb91d90$562b58b0$@hansfords.net> References: <20141025224601.22229.53242.idtracker@ietfa.amsl.com> <00b601d00028$1cb91d90$562b58b0$@hansfords.net> Date: Tue, 9 Dec 2014 09:16:31 -0800 Message-ID: From: Andy Bierman To: Jonathan Hansford Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/H7VqWDbkeLARwxN-Xjv49gpQwmc Cc: Netconf Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-restconf-03.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Dec 2014 17:17:22 -0000 Hi, On Fri, Nov 14, 2014 at 8:29 AM, Jonathan Hansford wrote: > Hi, > > > > I=E2=80=99ve never worked with HTTP and so have been following up the HTT= P > definitions listed in section 1.4.2: > > =C2=B7 The terms =E2=80=98fragment=E2=80=99 and =E2=80=98query=E2= =80=99 are actually defined in RFC 3986 > OK > =C2=B7 The term =E2=80=98header line=E2=80=99 is not defined in R= FC 2616. Are you using > it as a generic term for =E2=80=98request line=E2=80=99 and =E2=80=98stat= us line=E2=80=99 that are defined > in that RFC? The term 'header line' is used once but not defined. We are using it to mean Request-Line in most places, so I will change it to that. The term header is suggested for a header field. > > =C2=B7 The term =E2=80=98path=E2=80=99 is not defined in RFC 2616= and is used in that RFC > for a number of purposes. I presume it is the URI =E2=80=98path=E2=80=99 = that is intended, > which is defined in RFC 3986 > OK > =C2=B7 The term =E2=80=98response body=E2=80=99 is not defined in= RFC 2616 but I presume > it means the message body of the response. > changed 'message body' to 'message-body' and 'response body' to 'response message-body' > > > Jonathan > Andy > > > -----Original Message----- > From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of Andy Bierman > Sent: 26 October 2014 00:17 > Cc: Netconf > Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-restconf-03.txt > > > > FYI, > > > > This version of RESTCONF addresses all issues on the github tracker excep= t > maybe #9. Also, #11 was deferred to a future release. > > > > A change was made to the "stream" list in ietf-restconf-monitoring.yang t= o > allow separate stream links for XML and (optionally) JSON encoding of > notifications. > > > > A "collection" resource, plus "limit" and "offset" query parameters, have > been added to allow multiple leaf-list and list instances to be retrieved= . > The optional "page" capability allows pagination of list entries, using t= he > limit and offset parameters. > > > > Issue List: > > https://github.com/netconf-wg/restconf/issues > > > > > > Please review the draft and send any comments to the mailing list. > > Please post any objections to closing the issues #2 - #8 and #10 - #13. > > > > thanks, > > Andy > > > > On Sat, Oct 25, 2014 at 3:46 PM, wrote: > >> > >> A New Internet-Draft is available from the on-line Internet-Drafts >> directories. > >> This draft is a work item of the Network Configuration Working Group of >> the IETF. > >> > >> Title : RESTCONF Protocol > >> Authors : Andy Bierman > >> Martin Bjorklund > >> Kent Watsen > >> Filename : draft-ietf-netconf-restconf-03.txt > >> Pages : 99 > >> Date : 2014-10-25 > >> > >> Abstract: > >> This document describes an HTTP-based protocol that provides a > >> programmatic interface for accessing data defined in YANG, using the > >> datastores defined in NETCONF. > >> > >> > >> The IETF datatracker status page for this draft is: > >> https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ > >> > >> There's also a htmlized version available at: > >> http://tools.ietf.org/html/draft-ietf-netconf-restconf-03 > >> > >> A diff from the previous version is available at: > >> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-netconf-restconf-03 > >> > >> > >> Please note that it may take a couple of minutes from the time of > >> submission until the htmlized version and diff are available at >> tools.ietf.org. > >> > >> Internet-Drafts are also available by anonymous FTP at: > >> ftp://ftp.ietf.org/internet-drafts/ > >> > >> _______________________________________________ > >> I-D-Announce mailing list > >> I-D-Announce@ietf.org > >> https://www.ietf.org/mailman/listinfo/i-d-announce > >> Internet-Draft directories: http://www.ietf.org/shadow.html or > >> ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > > > _______________________________________________ > > Netconf mailing list > > Netconf@ietf.org > > https://www.ietf.org/mailman/listinfo/netconf From nobody Tue Dec 9 10:37:46 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15F7D1A8A0D for ; Tue, 9 Dec 2014 10:37:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B3zTstqOHe-K for ; Tue, 9 Dec 2014 10:37:41 -0800 (PST) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [93.183.12.31]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53BA11A879B for ; Tue, 9 Dec 2014 10:37:41 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd002.nsn-inter.net (8.14.3/8.14.3) with ESMTP id sB9IbdJk025143 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 9 Dec 2014 18:37:39 GMT Received: from DEMUHTC004.nsn-intra.net ([10.159.42.35]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id sB9IbcQi022288 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 9 Dec 2014 19:37:39 +0100 Received: from DEMUHTC005.nsn-intra.net (10.159.42.36) by DEMUHTC004.nsn-intra.net (10.159.42.35) with Microsoft SMTP Server (TLS) id 14.3.195.1; Tue, 9 Dec 2014 19:37:38 +0100 Received: from DEMUMBX005.nsn-intra.net ([169.254.5.147]) by DEMUHTC005.nsn-intra.net ([10.159.42.36]) with mapi id 14.03.0195.001; Tue, 9 Dec 2014 19:37:38 +0100 From: "Ersue, Mehmet (NSN - DE/Munich)" To: Netconf Thread-Topic: Agenda of the virtual interim meeting on December 15, 2014 1700-1900 UTC WAS:FW: [Netconf] NETCONF WG Virtual Interim Meetings December 15, 2014, and bi-weekly starting January 5, 2015 Thread-Index: AQHQDaq8E68TJHdvTkiTTPQO77hhApyHaa8AgAA1v/A= Date: Tue, 9 Dec 2014 18:37:37 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.159.42.157] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-purgate-type: clean X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate: clean X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate-size: 2874 X-purgate-ID: 151667::1418150259-0000677A-74628151/0/0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/GYzkOsxEepMszXzGF0VXyoi0k20 Cc: 'Jeff Haas' Subject: [Netconf] Agenda of the virtual interim meeting on December 15, 2014 1700-1900 UTC WAS:FW: NETCONF WG Virtual Interim Meetings December 15, 2014, and bi-weekly starting January 5, 2015 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Dec 2014 18:37:44 -0000 Dear NETCONF WG, please find below the Agenda of the virtual interim meeting on December 15,= 2014 1700-1900 UTC. The access information for the virtual meeting is provided in the mail belo= w. I would like to invite all key players in the WG to participate in the meet= ing and the discussion we are going to have. Based on the discussion result and preparation, we aim to start the WGLC fo= r some of the WG items soon. There is a special time slot in the agenda on the I2RS Ephemeral State we d= iscussed in IETF #91 and I2RS key player are invited to attend.=20 Susan, Jeff: Please forward as appropriate. Thanks. Agenda of the virtual interim meeting on December 15, 2014 1700-1900 UTC ---------------------------------------------------------------------------= ---------- Agenda is also available at:=20 http://www.ietf.org/proceedings/interim/2014/12/15/netconf/agenda/agenda-in= terim-2014-netconf-5=20 - 5 min chair intro, scribe, agenda bashing The note taking will be done on: http://beta.etherpad.org/p/netconf-z=20 Issue discussion and status check per WG item: - Call Home (Kent) (5min) Currently no open issues. See https://github.com/netconf-wg/call-home/issues=20 - Server Model (Kent) (20min) Currently 5 open issues. See https://github.com/netconf-wg/server-model/issues - rfc5539bis (Juergen) (5min) The two issues decided in IETF 91 are in preparation. - Restconf (Andy) (30min) Currently 4 open issues. See https://github.com/netconf-wg/restconf/issues=20 - Zerotouch (Kent) (20min) Currently 1 open issues. https://github.com/netconf-wg/yang-patch/issues - I2RS Ephemeral state (Susan, Jeff) (30min) Please provide slides before the meeting. - 5 min AOB other topics Best Regards, Mehmet & Mahesh -----Original Message----- From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext IESG Secre= tary Sent: Monday, December 01, 2014 10:05 PM To: IETF Announcement List Cc: netconf@ietf.org Subject: [Netconf] NETCONF WG Virtual Interim Meetings December 15, 2014, a= nd bi-weekly starting January 5, 2015 The NETCONF WG will hold a series of virtual interim meetings beginning Mon= day, December 15, 2014. Meeting day: Mondays Time: 1800 CET Duration: 2 hours Dates: December 15, 2014 1-time and starting with: January 5, 2015 bi-weekly End date: March 16, 2015 WebEx information: Meeting number: 640 672 878 Meeting password: nc2015 Audio connection: 1-877-668-4493 Call-in toll free number (US/Canada) 1-650-479-3208 Call-in toll number (US/Canada) Access code: 640 672 878 Meeting link: https://ietf.webex.com/ietf/j.php?MTID=3Dm2580594e0bc14b4b94f= 869a415ce437c=20 _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From nobody Tue Dec 9 10:43:57 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3B891A8A4C for ; Tue, 9 Dec 2014 10:43:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lNu11qrUca-d for ; Tue, 9 Dec 2014 10:43:54 -0800 (PST) Received: from mail-lb0-f181.google.com (mail-lb0-f181.google.com [209.85.217.181]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 12F3F1A89AC for ; Tue, 9 Dec 2014 10:43:54 -0800 (PST) Received: by mail-lb0-f181.google.com with SMTP id l4so993072lbv.40 for ; Tue, 09 Dec 2014 10:43:52 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=ihpv8t5Z1Wy2JjDrPELibLslhOjbhi5XUSFxYhIa0Dk=; b=dclSr00GBZNFEUVu3Pk9vcQNOVqQWPXktDQ4FERm6Wf3nUnjPV82aM1Sxd3fIf/tkQ N+HxnH0SqU0ukk9IOcmX7i1LUY5dAlnHxtja6HavixEumHO0Nv2CtlnuI3TzgHIvjeVz j0x4R80KWabuo2Fl+mDT0fKoFHmbft3vgd/fe6p0Wa31AcEaHpIl3ad/krG2SiBb2YTs 1I7xshZRTF/GegDSaqgicfs0BtfeOglKd6RCySV2edSFDuA28Ng9FzpFQdMgCu24ui7L VeeygYD61qiJrairRu6C3TLsMpAf6V1yALu3e9A1DsLsfYSaPU2CZPJu3pDlk95qoWE6 mPpw== X-Gm-Message-State: ALoCoQmyUBZDMSrE91XWMxjxFZ9YpglJDwEiTb3xG0dAwZmeUNGG9D3y0PLe1H9meWhBblbNkXZB MIME-Version: 1.0 X-Received: by 10.152.170.131 with SMTP id am3mr23018057lac.15.1418150632539; Tue, 09 Dec 2014 10:43:52 -0800 (PST) Received: by 10.112.157.233 with HTTP; Tue, 9 Dec 2014 10:43:52 -0800 (PST) Date: Tue, 9 Dec 2014 10:43:52 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/_C0Stt2JInQQ_zPOXWs_YgilEDw Subject: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Dec 2014 18:43:56 -0000 Hi, A new issue has been added to the tracker: https://github.com/netconf-wg/restconf/issues/15 There are 3 solutions mentioned. The default solution is S1, which will be implemented unless there is WG consensus demonstrated to do something else. Andy From nobody Wed Dec 10 00:40:59 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D1231A88D3 for ; Wed, 10 Dec 2014 00:40:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x67-CrSHHx5P for ; Wed, 10 Dec 2014 00:40:55 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7B9C1A8751 for ; Wed, 10 Dec 2014 00:40:54 -0800 (PST) Received: from [192.168.131.136] ([80.92.119.109]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0MO7Ca-1Y48bH3GvU-005cKi; Wed, 10 Dec 2014 09:40:52 +0100 Message-ID: <54880712.4020205@gmx.net> Date: Wed, 10 Dec 2014 09:40:50 +0100 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0 MIME-Version: 1.0 To: Kent Watsen , "netconf@ietf.org" References: <5484A800.8080604@gmx.net> In-Reply-To: OpenPGP: id=4D776BC9 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="U75e8P6Jb7Oo6xX7boWwWjqVthbrmmScw" X-Provags-ID: V03:K0:IgqM1J8j5uc4tZFeCPA3yJz+HUc055FADkNabI0QUcuuo8YNJrS jOy8A8/4JYdNBRVZUa41w3ToPXWtSd1ha+AXcegp3rCUYHW9PGe/mkZQ8HiTet6ywXn53YQ oYw3OZBt9iT2yoXhFNJr9b3eEwdKYbP8Y47LXL5+SODktuAaYMm3dJbcwHa13v002ZS+g4M ksHBcerr5wnu41EVoYkBw== X-UI-Out-Filterresults: notjunk:1; Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/FQhTOsLo0CppZ2m4rVfWpVOroxU Subject: Re: [Netconf] draft-ietf-netconf-zerotouch-01 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 08:40:58 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --U75e8P6Jb7Oo6xX7boWwWjqVthbrmmScw Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi Kent, thanks for the quick response. Let me try to describe a minimalistic approach that does not cover the case of learning something via DHCP and that does not delegate signing authority to someone else. A device is configured with a certificate (such as [Std-802.1AR-2009]), the trust anchor of the manufacturer and the URL of a Configuration Server. These are provided by the manufacturer of the device. You don't even need to sign it since it is already on the device anyway. This information is then enough to let this device connect to the configuration server, use TLS to authenticate that server, and to get whatever information it needs from there. Then, it can use some other protocols to connect to a network management server etc. Is this a correct description (without the more sophisticated functionality)? Ciao Hannes On 12/09/2014 04:01 AM, Kent Watsen wrote: >=20 > Hi Hannes! >=20 > Thank you for showing interest in this draft, it's great to get your > security perspective on it. >=20 >=20 >=20 >> I would like to focus my comments on the first figure in the document:= >> >> fetches Configlet and >> +----------+ boot-image, if needed >> +------------| Device |---------------------+ >> | +----------+ | >> | ^ | >> | | V >> | call home | manufactures +----------+ >> | | with necessary | Config | >> | | default state | Server |<----+ >> | | for ZeroTouch +----------+ | >> | | | >> | | | >> | +----------+ delegates trust | >> | | Vendor |-------------------+ | >> | +----------+ | | >> | ^ ^ | | >> | | | V | >> | | | +----------+ | >> | imports | | validate owner | Config | | >> | trust | +-----------------| Signer | | >> | anchor | +----------+ | >> | | ^ | >> | | | | >> | +---------+ requests signing | | >> +----------->| NMS |--------------------+ | >> +---------+ | >> | | >> +----------------------------------------+ >> signed Configlet and boot-image file >> >> >> 1) I would like to point out that the figure uses the same style for >> drawing protocol endpoints and real-world entities. Maybe that was don= e >> on purpose; maybe not. >=20 > True, "Vendor" is not an endpoint and, while an NMS is an endpoint in > network management scenarios, the relationships drawn are more offline > activities. You're the first to point this out, and I'm guessing you > think it odd. Could you suggest how to improve it? Would replacing t= he > '+' in the corners with something like 'o', along with a key help much?= >=20 >=20 >=20 >=20 >> 2) The description in the document is not clear when it comes to the >> information that is pre-configured on the device. >> >> Here are two statements from the draft: >> >> The device >> is preconfigured with a secure device identity, Configuration >> Servers URIs, and certificates for both Configuration Signers >> and Configuration Servers it trusts by default. >> >> Vendors manufacture the devices with secure device identities >> and preconfigured Configuration URIs, and Configuration Signer= >> certificates. >=20 > Good catch, these statements are almost consistent, but the 2nd paragra= ph > fails to mention the trust anchor certificate for the Configuration > Server. Also, as you mention below, both would be improved if > "certificate" were expanded to "trust anchor certificate" >=20 >=20 >=20 >> Is a device now preconfigured with the certificates of the config sign= er >> and the configuration server? >> >> Figure 1 puts them in some dependency to each other so it is not clear= >> which certificate is actually needed. Maybe we are really talking abou= t >> trust anchors? >=20 > Yes, these are intended to be trust anchor certificates. The list of > Configuration Signer trust anchor certs may contain just one entry, the= > Vendor's trust anchor used to sign the Configuration Signer CSRs, but w= e > made it a list in case there is ever a need to have another trust-ancho= r. > The list of Configuration Server trust anchor certs is similar to the s= et > of CA certs found in browsers. >=20 >=20 >=20 >> 3) When I read "secure device identity" I wasn't quite sure what that >> would actually mean till I read this sentence later in the document. >> >> " Devices supporting ZeroTouch MUST have a manufacturer-provisioned >> secure device identifier, as defined in [Std-802.1AR-2009]. >> " >=20 > Thanks, I'll move the reference up so it's defined at first use. > Actually, there is suggestion to have a Terminology section at the top,= > which would've helped here as well. >=20 >=20 >> Another way to put it is that the device is configured by the >> manufacturer with a certificate and the corresponding private key. The= >> certificate has the structure defined in [Std-802.1AR-2009]. >=20 > Correct. >=20 >=20 >> A related question concerning figure 1 would then be whether the >> "vendor" is the same as the manufacturer or not. >=20 > Yes, we're using these terms interchangeably. I think we should settle= on > one, probably "Vendor". And again, a Terminology section would help. >=20 >=20 >> Then you write: >> >> " >> The IDevID includes both an X.509 certificate, >> encoding a globally unique per-device identifier, and a chain of >> X.509 certificates leading to the manufacturer's well-known trust >> anchor. >> " >> >> Is this CA hierarchy needed to support the functionality for "delegati= ng >> trust to the "config signer" as shown in Figure 1? >=20 > No, this certificate chain is needed for when the device calls home to = the > NMS. During either the SSH or TLS transport handshake, the device will= > provide these certificates to the NMS so that it can verify the device'= s > identity. >=20 >=20 >=20 >> This sentence sounds to me like the device has >> * the CA cert of the manufacturer (which is the trust anchor), >> * the certificate issued to the device from some intermediate CA, and >> * a certificate chain that allows path validation of the device >> certificate to the manufacturer CA. >=20 > Almost. Strictly speaking, the device would not need the manufacturer'= s > trust anchor, as the NMS is expected to have previously gotten it for > themselves (the "imports trust anchor") relation in the diagram above. > This follows the common practice of sending the chain up to but not > including the trust anchor. >=20 >=20 >=20 >> 4) Internet-based Configuration Servers =3D NMS? >> >> In Figure 1 you use the term "NMS" and later in the text you talk abou= t >> the Internet-based Configuration Servers or Configuration Servers. Are= >> these all the same entities or different entities? >=20 > Different entities, albeit it's conceivable that an NMS may incorporate= > the Configuration Server role as well. Another possible bundling would= be > for the Configuration Signer to incorporate the Configuration Server ro= le. > Taking it another step, the Vendor might itself take on both the > Configuration Signer and Configuration Server roles, but I digress. >=20 >=20 > Great comments, we'll incorporate them in the next update! >=20 > Cheers, > Kent >=20 >=20 >=20 >=20 --U75e8P6Jb7Oo6xX7boWwWjqVthbrmmScw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJUiAcTAAoJEGhJURNOOiAt2dQH/3GshkFgOd6WYXv8MHcWzzlF JG4K20I5YV86vmweHyrfP0UjGIxmX5soj04qJ/VoKjd83kv8XISrR2XHqYh7ijHh Ihm3JFJ7ZGlyLiPREpdn8YOydSe43650X+wrCbmWMc1B6uS4DfW4Hb8NxYeqkMIz hOra2bg/n0wsoUDbAsJedITq7ROVycs5fWlx4FUB1KgDTytP+GMYM+yCAkcNdau7 6q3Wlaz0IH2mP1RRN7IBBBgzR7Tv8Dy9TiYynZFL4vvr9lkk82HAAMaFfbUEtOSS 7h9y0LvAN6l0Xr4zqYbekDkSuvgedqpMcoSLCUn6M0lLcwOMWsdMHOnsSKW49go= =p2iy -----END PGP SIGNATURE----- --U75e8P6Jb7Oo6xX7boWwWjqVthbrmmScw-- From nobody Wed Dec 10 01:08:15 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9BE41A1B80 for ; Wed, 10 Dec 2014 01:08:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EBFjQPsUrjAq for ; Wed, 10 Dec 2014 01:08:11 -0800 (PST) Received: from mail.tail-f.com (mail.tail-f.com [83.241.162.140]) by ietfa.amsl.com (Postfix) with ESMTP id 1D0D51A88B2 for ; Wed, 10 Dec 2014 01:08:05 -0800 (PST) Received: from localhost (x15.tail-f.com [192.168.1.60]) by mail.tail-f.com (Postfix) with ESMTPSA id E496C12809DD for ; Wed, 10 Dec 2014 10:08:03 +0100 (CET) Date: Wed, 10 Dec 2014 10:08:03 +0100 (CET) Message-Id: <20141210.100803.2218896410727662294.mbj@tail-f.com> To: netconf@ietf.org From: Martin Bjorklund X-Mailer: Mew version 6.5 on Emacs 23.4 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=iso-8859-15 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/vUosQwT8rzjREr20No4IGgXKvIg Subject: [Netconf] uri syntax in restconf X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 09:08:13 -0000 Hi, RESTCONF can expose YANG instance data in URIs. For example, the resource for user 'bob' is: /restconf/data/ietf-system:system/authentication/user=3Dbob What happens if the user name contains unicode characters outside the ascii range? For example, 'tom=E1=A8'? RFC 3986, section 2.4 says: When a new URI scheme defines a component that represents textual data consisting of characters from the Universal Character Set [UCS]= , the data should first be encoded as octets according to the UTF-8 character encoding [STD63]; then only those octets that do not correspond to characters in the unreserved set should be percent- encoded. So tom=E1=A8 would be encoded as tom%0x%e1%x1%61. RESTCONF uses the https scheme. Does this scheme use this translation of UTF-8 characters? If so, were is this specified? RFC 3986 talks about "new URI scheme". What exactly does that mean? /martin From nobody Wed Dec 10 01:25:16 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 194B31A1B80 for ; Wed, 10 Dec 2014 01:25:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.361 X-Spam-Level: X-Spam-Status: No, score=-0.361 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mAS1q6x4Zm2I for ; Wed, 10 Dec 2014 01:25:11 -0800 (PST) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73CCC1A1B5F for ; Wed, 10 Dec 2014 01:25:10 -0800 (PST) Received: from [195.113.220.110] (unknown [195.113.220.110]) by mail.nic.cz (Postfix) with ESMTPSA id 7D7ED13F6A5; Wed, 10 Dec 2014 10:25:08 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1418203508; bh=+i2qMDEz71/I45fcO0pxSC95NqX+Q8nNGZLejKvl1XA=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=MS2VFvCmc4ZuDP1fE4UKTAWCPCnyDuLUVpAxJM0r95DNoZTKreIxVdHmKnh9Bi7Q4 z3HO90/BrVovzWvq+YwVVtB0Brzhg0OrY2tKW6pa1XgnedLLoT7fiBvYEC88QHE4mt 0FVuAH8Edqm93PpsXw3pSJhvsTbGYAcHccYCc2jo= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) From: Ladislav Lhotka In-Reply-To: <20141210.100803.2218896410727662294.mbj@tail-f.com> Date: Wed, 10 Dec 2014 10:25:08 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20141210.100803.2218896410727662294.mbj@tail-f.com> To: =?utf-8?Q?Martin_Bj=C3=B6rklund?= X-Mailer: Apple Mail (2.1993) X-Virus-Scanned: clamav-milter 0.98.1 at mail X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/pG8QQXgF1pgvQxrMTFCpX2SGl_4 Cc: Netconf Subject: Re: [Netconf] uri syntax in restconf X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 09:25:13 -0000 > On 10 Dec 2014, at 10:08, Martin Bjorklund wrote: >=20 > Hi, >=20 > RESTCONF can expose YANG instance data in URIs. For example, the > resource for user 'bob' is: >=20 > /restconf/data/ietf-system:system/authentication/user=3Dbob >=20 > What happens if the user name contains unicode characters outside the > ascii range? For example, 'tom=C3=A1=C5=A1'? RFC 3986, section 2.4 = says: >=20 > When a new URI scheme defines a component that represents textual > data consisting of characters from the Universal Character Set = [UCS], > the data should first be encoded as octets according to the UTF-8 > character encoding [STD63]; then only those octets that do not > correspond to characters in the unreserved set should be percent- > encoded. >=20 > So tom=C3=A1=C5=A1 would be encoded as tom%0x%e1%x1%61. >=20 > RESTCONF uses the https scheme. Does this scheme use this translation > of UTF-8 characters? If so, were is this specified? RFC 3986 talks > about "new URI scheme". What exactly does that mean? RFC 7230? Lada >=20 >=20 > /martin >=20 > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Wed Dec 10 01:49:23 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F8321A6EDB for ; Wed, 10 Dec 2014 01:49:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o7eWlLpFSq2m for ; Wed, 10 Dec 2014 01:49:20 -0800 (PST) Received: from mail.tail-f.com (mail.tail-f.com [83.241.162.140]) by ietfa.amsl.com (Postfix) with ESMTP id E29F21A1BF8 for ; Wed, 10 Dec 2014 01:49:19 -0800 (PST) Received: from localhost (x15.tail-f.com [192.168.1.60]) by mail.tail-f.com (Postfix) with ESMTPSA id E2E5612800C1; Wed, 10 Dec 2014 10:49:18 +0100 (CET) Date: Wed, 10 Dec 2014 10:49:18 +0100 (CET) Message-Id: <20141210.104918.2204640493318348960.mbj@tail-f.com> To: lhotka@nic.cz From: Martin Bjorklund In-Reply-To: References: <20141210.100803.2218896410727662294.mbj@tail-f.com> X-Mailer: Mew version 6.5 on Emacs 23.4 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=iso-8859-15 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/ZlE_6Y1_m_X8iUfqeXqpan4x8Bk Cc: netconf@ietf.org Subject: Re: [Netconf] uri syntax in restconf X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 09:49:22 -0000 Ladislav Lhotka wrote: > = > > On 10 Dec 2014, at 10:08, Martin Bjorklund wrote: > > = > > Hi, > > = > > RESTCONF can expose YANG instance data in URIs. For example, the > > resource for user 'bob' is: > > = > > /restconf/data/ietf-system:system/authentication/user=3Dbob > > = > > What happens if the user name contains unicode characters outside t= he > > ascii range? For example, 'tom=E1=A8'? RFC 3986, section 2.4 says= : > > = > > When a new URI scheme defines a component that represents textual= > > data consisting of characters from the Universal Character Set [U= CS], > > the data should first be encoded as octets according to the UTF-8= > > character encoding [STD63]; then only those octets that do not > > correspond to characters in the unreserved set should be percent-= > > encoded. > > = > > So tom=E1=A8 would be encoded as tom%0x%e1%x1%61. > > = > > RESTCONF uses the https scheme. Does this scheme use this translat= ion > > of UTF-8 characters? If so, were is this specified? RFC 3986 talk= s > > about "new URI scheme". What exactly does that mean? > = > RFC 7230? But originally, https was defined in 2817. Are you saying that b/c RFC 7230 is published after RFC 3986, the https scheme is implicitly re-classified as a "new" scheme and thus the quoted paragraph applies? Does this mean that before 7230 was published, https did NOT allow this UTF-8 transformation? /martin From nobody Wed Dec 10 02:28:52 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 592D91A6F8D for ; Wed, 10 Dec 2014 02:28:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.361 X-Spam-Level: X-Spam-Status: No, score=-0.361 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K1B_ZOb9-7Il for ; Wed, 10 Dec 2014 02:28:45 -0800 (PST) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 991791A6F8C for ; Wed, 10 Dec 2014 02:28:41 -0800 (PST) Received: from [195.113.220.110] (unknown [195.113.220.110]) by mail.nic.cz (Postfix) with ESMTPSA id BDA71140A79; Wed, 10 Dec 2014 11:28:39 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1418207319; bh=o97/xLHSd1PzvWsAw9xQK8GsBYLLGhx/dDJ4lP2E27E=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=aPmQRqQ3GWVRCajQoCtBtnCbk65w9tAsJOk8XDVzHcUDsnLG7cYF+sD2dyWwv00Yw 5N6eyd0GJYP7rvS9VgxVkuC98hPCbPmDR4c+l3oDCDoc3GPR88M8MTveFGL+4U4bxZ qd240st//y0VAAnWKGoWjne1uhIjd0iNbWJq9lEE= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) From: Ladislav Lhotka In-Reply-To: <20141210.104918.2204640493318348960.mbj@tail-f.com> Date: Wed, 10 Dec 2014 11:28:39 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20141210.100803.2218896410727662294.mbj@tail-f.com> <20141210.104918.2204640493318348960.mbj@tail-f.com> To: =?utf-8?Q?Martin_Bj=C3=B6rklund?= X-Mailer: Apple Mail (2.1993) X-Virus-Scanned: clamav-milter 0.98.1 at mail X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/Ra411VUPF6nYoWZalScY6Ge01vs Cc: Netconf Subject: Re: [Netconf] uri syntax in restconf X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 10:28:50 -0000 > On 10 Dec 2014, at 10:49, Martin Bjorklund wrote: >=20 > Ladislav Lhotka wrote: >>=20 >>> On 10 Dec 2014, at 10:08, Martin Bjorklund wrote: >>>=20 >>> Hi, >>>=20 >>> RESTCONF can expose YANG instance data in URIs. For example, the >>> resource for user 'bob' is: >>>=20 >>> /restconf/data/ietf-system:system/authentication/user=3Dbob >>>=20 >>> What happens if the user name contains unicode characters outside = the >>> ascii range? For example, 'tom=C3=A1=C5=A1'? RFC 3986, section 2.4 = says: >>>=20 >>> When a new URI scheme defines a component that represents textual >>> data consisting of characters from the Universal Character Set = [UCS], >>> the data should first be encoded as octets according to the UTF-8 >>> character encoding [STD63]; then only those octets that do not >>> correspond to characters in the unreserved set should be percent- >>> encoded. >>>=20 >>> So tom=C3=A1=C5=A1 would be encoded as tom%0x%e1%x1%61. >>>=20 >>> RESTCONF uses the https scheme. Does this scheme use this = translation >>> of UTF-8 characters? If so, were is this specified? RFC 3986 talks >>> about "new URI scheme". What exactly does that mean? >>=20 >> RFC 7230? >=20 > But originally, https was defined in 2817. Are you saying that b/c > RFC 7230 is published after RFC 3986, the https scheme is > implicitly re-classified as a "new" scheme and thus the quoted I don=E2=80=99t think the adjective =E2=80=9Cnew=E2=80=9D has any = special meaning, perhaps the text was just meant as instructions for URI = scheme designers and implementors. > paragraph applies? Does this mean that before 7230 was published, > https did NOT allow this UTF-8 transformation? It sure did, the percent encoding is part of URI generic syntax as = defined in RFC 3986 (and 2396 before that). RFC 7230 only explicitly = says =E2=80=9Chttp=E2=80=9D and =E2=80=9Chttps=E2=80=9D conform to the = URI generic syntax. So I think there is no doubt about what a RESTCONF client is expected to = do when encoding non-ASCII data in Request-URI. Lada >=20 >=20 > /martin -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Wed Dec 10 04:13:09 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A63341A6F6B for ; Wed, 10 Dec 2014 04:13:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kA8ZLtuHy1iF for ; Wed, 10 Dec 2014 04:13:04 -0800 (PST) Received: from emea01-am1-obe.outbound.protection.outlook.com (mail-am1on0724.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe00::724]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4FFAF1A1B65 for ; Wed, 10 Dec 2014 04:13:04 -0800 (PST) Received: from pc6 (86.184.63.126) by AMSPR07MB052.eurprd07.prod.outlook.com (10.242.81.27) with Microsoft SMTP Server (TLS) id 15.1.31.17; Wed, 10 Dec 2014 12:12:41 +0000 Message-ID: <038b01d01472$94a1bfc0$4001a8c0@gateway.2wire.net> From: t.petch To: , Martin Bjorklund References: <20141210.100803.2218896410727662294.mbj@tail-f.com> Date: Wed, 10 Dec 2014 12:10:42 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-15" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Originating-IP: [86.184.63.126] X-ClientProxiedBy: DB3PR05CA0041.eurprd05.prod.outlook.com (25.160.41.169) To AMSPR07MB052.eurprd07.prod.outlook.com (10.242.81.27) X-Microsoft-Antispam: UriScan:; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB052; X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB052; X-Forefront-PRVS: 0421BF7135 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(6009001)(13464003)(189002)(377454003)(199003)(50466002)(86362001)(4396001)(14496001)(50226001)(44736004)(50986999)(81816999)(1556002)(87976001)(47776003)(76176999)(62236002)(97736003)(66066001)(44716002)(89996001)(81686999)(64706001)(84392001)(20776003)(101416001)(92566001)(19580395003)(19580405001)(46102003)(21056001)(120916001)(61296003)(107046002)(62966003)(15975445007)(105586002)(107886001)(23756003)(116806002)(99396003)(31966008)(42186005)(77156002)(40100003)(68736005)(106356001)(122386002)(77096005)(33646002)(74416001)(7726001); DIR:OUT; SFP:1102; SCL:1; SRVR:AMSPR07MB052; H:pc6; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:0; LANG:en; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB052; X-OriginatorOrg: btconnect.com Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/aK4C6QnsH3qnzbK4t3anzvh9Gdg Subject: Re: [Netconf] uri syntax in restconf X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 12:13:07 -0000 ----- Original Message ----- From: "Martin Bjorklund" To: Sent: Wednesday, December 10, 2014 9:08 AM Hi, RESTCONF can expose YANG instance data in URIs. For example, the resource for user 'bob' is: /restconf/data/ietf-system:system/authentication/user=bob What happens if the user name contains unicode characters outside the ascii range? For example, 'tomá¨'? RFC 3986, section 2.4 says: I am unclear which component this is part of but, in general, once you are into %xA0-D7FF then you are into IRIs and RFC3987, which explains how to encode. Tom Petch When a new URI scheme defines a component that represents textual data consisting of characters from the Universal Character Set [UCS], the data should first be encoded as octets according to the UTF-8 character encoding [STD63]; then only those octets that do not correspond to characters in the unreserved set should be percent- encoded. So tomᨠwould be encoded as tom%0x%e1%x1%61. RESTCONF uses the https scheme. Does this scheme use this translation of UTF-8 characters? If so, were is this specified? RFC 3986 talks about "new URI scheme". What exactly does that mean? /martin _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf From nobody Wed Dec 10 07:24:42 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DDBD1A0115 for ; Wed, 10 Dec 2014 07:24:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wPN7Ag11SAkk for ; Wed, 10 Dec 2014 07:24:27 -0800 (PST) Received: from emea01-am1-obe.outbound.protection.outlook.com (mail-am1on0761.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe00::761]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8556B1A6F9F for ; Wed, 10 Dec 2014 07:23:51 -0800 (PST) Received: from pc6 (86.185.87.4) by AMSPR07MB050.eurprd07.prod.outlook.com (10.242.81.24) with Microsoft SMTP Server (TLS) id 15.1.31.17; Wed, 10 Dec 2014 15:23:28 +0000 Message-ID: <046401d0148d$3bd05e40$4001a8c0@gateway.2wire.net> From: t.petch To: Kent Watsen , Juergen Schoenwaelder References: <04e401cfff2d$74e7e740$4001a8c0@gateway.2wire.net> <20141208133201.GB41570@elstar.local> Date: Wed, 10 Dec 2014 15:23:09 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Originating-IP: [86.185.87.4] X-ClientProxiedBy: DB3PR05CA0025.eurprd05.prod.outlook.com (25.160.41.153) To AMSPR07MB050.eurprd07.prod.outlook.com (10.242.81.24) X-Microsoft-Antispam: UriScan:; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB050; X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB050; X-Forefront-PRVS: 0421BF7135 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(13464003)(51704005)(189002)(377454003)(99396003)(21056001)(50466002)(105586002)(93886004)(14496001)(81816999)(122386002)(40100003)(120916001)(76176999)(81686999)(107046002)(89996001)(1556002)(106356001)(64706001)(47776003)(23756003)(66066001)(87976001)(101416001)(20776003)(44716002)(62236002)(42186005)(50986999)(61296003)(33646002)(84392001)(46102003)(77096005)(1941001)(1456003)(19580405001)(19580395003)(68736005)(97736003)(50226001)(77156002)(4396001)(86362001)(62966003)(92566001)(31966008)(74416001)(7059030)(7726001); DIR:OUT; SFP:1102; SCL:1; SRVR:AMSPR07MB050; H:pc6; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:0; MX:1; LANG:en; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB050; X-OriginatorOrg: btconnect.com Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/IzYwIy6S0AySRdy8H5zK4sPKKyY Cc: netconf Subject: Re: [Netconf] username from X.503 was Re: Summary of and AIs from the NETCONF Session in IETF #91 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 15:24:39 -0000 ----- Original Message ----- From: "Kent Watsen" To: "Juergen Schoenwaelder" ; "t. petch" Cc: "netconf" Sent: Tuesday, December 09, 2014 2:12 AM >> >> > Describe algorithm for extracting a user name out of the X509 >> attributes >> > - loud humm in favor >> > >> >> A clarification - does this mean that this algorithm goes in >> netconf-server? > >The idea (as far as I understood it) is that NC over TLS provides a >high-level description of the algorithm. The NC server configuration >document will define the YANG objects to configure this. I didn't articulate clearly enough at the mic about the "what" and "how", but Juergen agreed so I'm sure not that he's a mindreader ;) Anyway, in reflecting on this, I realized what I should've said is that it should be whatever is needed so that 5539bis has an Informative (not Normative) reference to server-model. Again, this is the necessary because alternate configuration models can exist, thus it doesn't make sense to me for 5539bis to say that it can *only* be configured by just the server-model. My hope is that 5539bis will assert that client-certs are required and specify that servers must be configurable to know how to extract a username using the various options (specified, subAltName, DNS, etc.). Another option is for 5539bis to have a Normative reference onto draft-ietf-netmod-snmp-cfg, section 4.1, though that may be too convoluted for some. Yes, and no. SNMP over TLS requires the client to present a certificate which must be present in the server's table, and that is it. No DNS, AltName etc. I would want a good reason to move on from that (perhaps customers have done so). But that is in RFC6353 and not in snmp-cfg, which is different in some details. Also, I don't know where we got to with SSH and certificates, whether or not that is likely to appear - part of my logic is that putting it in server-model covers all protocols for the server (but not for the client) while putting it in 5539bis can cover both client and server (but only for TLS). Tom Petch Kent From nobody Wed Dec 10 08:02:56 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AC741A0103 for ; Wed, 10 Dec 2014 08:02:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UeKdtvDrl4Jy for ; Wed, 10 Dec 2014 08:02:45 -0800 (PST) Received: from atlas3.jacobs-university.de (atlas3.jacobs-university.de [212.201.44.18]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A9561A026A for ; Wed, 10 Dec 2014 08:02:43 -0800 (PST) Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas3.jacobs-university.de (Postfix) with ESMTP id A36BBAC1; Wed, 10 Dec 2014 17:02:41 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from atlas3.jacobs-university.de ([10.70.0.220]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10030) with ESMTP id 2yR3ziTfQen2; Wed, 10 Dec 2014 17:02:31 +0100 (CET) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "Jacobs University CA - G01" (verified OK)) by atlas3.jacobs-university.de (Postfix) with ESMTPS; Wed, 10 Dec 2014 17:02:40 +0100 (CET) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id 8617F2002C; Wed, 10 Dec 2014 17:02:40 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id ifBFifqiIbW2; Wed, 10 Dec 2014 17:02:39 +0100 (CET) Received: from elstar.local (elstar.jacobs.jacobs-university.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 2489F20017; Wed, 10 Dec 2014 17:02:39 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 3CD462FF0E8F; Wed, 10 Dec 2014 17:02:37 +0100 (CET) Date: Wed, 10 Dec 2014 17:02:37 +0100 From: Juergen Schoenwaelder To: "t. petch" Message-ID: <20141210160237.GA47319@elstar.local> Mail-Followup-To: "t. petch" , Kent Watsen , netconf References: <04e401cfff2d$74e7e740$4001a8c0@gateway.2wire.net> <20141208133201.GB41570@elstar.local> <046401d0148d$3bd05e40$4001a8c0@gateway.2wire.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <046401d0148d$3bd05e40$4001a8c0@gateway.2wire.net> User-Agent: Mutt/1.4.2.3i Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/0GSjP7yrCPq-PwJ-69YOCERcBMM Cc: netconf Subject: Re: [Netconf] username from X.503 was Re: Summary of and AIs from the NETCONF Session in IETF #91 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 16:02:47 -0000 On Wed, Dec 10, 2014 at 03:23:09PM +0000, t. petch wrote: > Yes, and no. SNMP over TLS requires the client to present a certificate > which must be present in the server's table, and that is it. No DNS, > AltName etc. I do not think this is correct. The algorithm details how to extract a name from certificate fields. > I would want a good reason to move on from that (perhaps > customers have done so). But that is in RFC6353 and not in snmp-cfg, > which is different in some details. snmp-cfg is yangifying the algorithm defined in RFC 6353, there is no functional difference. > Also, I don't know where we got to with SSH and certificates, whether or > not that is likely to appear - part of my logic is that putting it in > server-model covers all protocols for the server (but not for the > client) while putting it in 5539bis can cover both client and server > (but only for TLS). Lets not make this more complex by putting other protocols on the table. Fact is that the server has to derive a username for say NACM to work. The question whether we should go into client config was discussed at some IETF meeting some time ago and I heard consensus to not go there. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From nobody Wed Dec 10 12:36:29 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7221F1A1A8A for ; Wed, 10 Dec 2014 12:36:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r-yH8XfkNz94 for ; Wed, 10 Dec 2014 12:36:25 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0778.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:778]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04F781A1A23 for ; Wed, 10 Dec 2014 12:36:24 -0800 (PST) Received: from CO2PR05CA017.namprd05.prod.outlook.com (10.141.241.145) by BLUPR05MB434.namprd05.prod.outlook.com (10.141.27.147) with Microsoft SMTP Server (TLS) id 15.1.31.17; Wed, 10 Dec 2014 20:36:02 +0000 Received: from BY2FFO11FD035.protection.gbl (2a01:111:f400:7c0c::106) by CO2PR05CA017.outlook.office365.com (2a01:111:e400:1429::17) with Microsoft SMTP Server (TLS) id 15.1.31.17 via Frontend Transport; Wed, 10 Dec 2014 20:36:01 +0000 Received: from P-EMF03-SAC.jnpr.net (66.129.239.17) by BY2FFO11FD035.mail.protection.outlook.com (10.1.14.220) with Microsoft SMTP Server (TLS) id 15.1.26.17 via Frontend Transport; Wed, 10 Dec 2014 20:36:00 +0000 Received: from magenta.juniper.net (172.17.27.123) by P-EMF03-SAC.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.146.0; Wed, 10 Dec 2014 12:35:58 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id sBAJeiR20376; Wed, 10 Dec 2014 11:40:46 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.14.4/8.14.3) with ESMTP id sBAJeNxb076190; Wed, 10 Dec 2014 14:40:30 -0500 (EST) (envelope-from phil@idle.juniper.net) Message-ID: <201412101940.sBAJeNxb076190@idle.juniper.net> To: Andy Bierman In-Reply-To: Date: Wed, 10 Dec 2014 14:40:23 -0500 From: Phil Shafer MIME-Version: 1.0 Content-Type: text/plain X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:66.129.239.17; CTRY:US; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(199003)(164054003)(51704005)(189002)(31014004)(69596002)(6806004)(19580405001)(46102003)(107046002)(87936001)(97736003)(99396003)(105596002)(84676001)(68736005)(50466002)(48376002)(77096005)(50986999)(54356999)(64706001)(86362001)(20776003)(47776003)(92566001)(120916001)(76506005)(110136001)(31966008)(81156004)(103666002)(4396001)(15975445007)(62966003)(77156002)(53416004)(106466001)(21056001); DIR:OUT; SFP:1102; SCL:1; SRVR:BLUPR05MB434; H:P-EMF03-SAC.jnpr.net; FPR:; SPF:SoftFail; MLV:sfv; PTR:InfoDomainNonexistent; A:1; MX:1; LANG:en; X-Microsoft-Antispam: UriScan:; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BLUPR05MB434; X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:;SRVR:BLUPR05MB434; X-Forefront-PRVS: 0421BF7135 Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.17 as permitted sender) Authentication-Results: spf=softfail (sender IP is 66.129.239.17) smtp.mailfrom=phil@juniper.net; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:;SRVR:BLUPR05MB434; X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/4GXBWduG3cHKvxUjRtSxo3MD_hI Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Dec 2014 20:36:27 -0000 I dislike S1, since it attempts to reuse a standard yang construct in a way that is confusing and misleading. My comment at the last meeting was something like, wouldn't we be upset of some other working group did something like this? I sure would be. It's a bad precedent and we shouldn't be doing it. S2 is acceptable. Thanks, Phil Andy Bierman writes: >Hi, > >A new issue has been added to the tracker: > >https://github.com/netconf-wg/restconf/issues/15 > >There are 3 solutions mentioned. >The default solution is S1, which will be implemented >unless there is WG consensus demonstrated to >do something else. > > >Andy > >_______________________________________________ >Netconf mailing list >Netconf@ietf.org >https://www.ietf.org/mailman/listinfo/netconf From nobody Thu Dec 11 01:06:57 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D37A01ACD2D for ; Thu, 11 Dec 2014 01:06:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HyAiRy5tmUxx for ; Thu, 11 Dec 2014 01:06:51 -0800 (PST) Received: from trail.lhotka.name (trail.lhotka.name [77.48.224.143]) by ietfa.amsl.com (Postfix) with ESMTP id 414871ACD2C for ; Thu, 11 Dec 2014 01:06:51 -0800 (PST) Received: from localhost (unknown [195.113.220.110]) by trail.lhotka.name (Postfix) with ESMTPSA id 6BA471CC0456; Thu, 11 Dec 2014 10:06:52 +0100 (CET) From: Ladislav Lhotka To: Andy Bierman , Netconf In-Reply-To: References: User-Agent: Notmuch/0.18.1 (http://notmuchmail.org) Emacs/24.4.51.2 (x86_64-apple-darwin14.0.0) Date: Thu, 11 Dec 2014 10:06:50 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/jTbbhOIIvkw0Sk_aupKYA7RYMDY Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 09:06:54 -0000 Andy Bierman writes: > Hi, > > A new issue has been added to the tracker: > > https://github.com/netconf-wg/restconf/issues/15 > > There are 3 solutions mentioned. > The default solution is S1, which will be implemented > unless there is WG consensus demonstrated to > do something else. The biggest problem with S1 is that it may mislead readers into thinking: "Hey, now I understand how namespaces work in groupings!" I also don't like the idea of defining an ad hoc extension. If we want to turn YANG into a general schema language, it should be done properly. I think the simplest solution would be to remove the groupings and have "errors", "restconf", "collection" and "notification" as top-level containers. The namespace assignment then follows YANG rules. S3 should IMO be fine, too, the structures aren't that complicated. Lada > > > Andy > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Thu Dec 11 03:49:29 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A79161ACE26 for ; Thu, 11 Dec 2014 03:49:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nn7VCrZYaIgk for ; Thu, 11 Dec 2014 03:49:27 -0800 (PST) Received: from mail.tail-f.com (mail.tail-f.com [83.241.162.140]) by ietfa.amsl.com (Postfix) with ESMTP id 12F811A1B38 for ; Thu, 11 Dec 2014 03:49:26 -0800 (PST) Received: from localhost (x15.tail-f.com [192.168.1.60]) by mail.tail-f.com (Postfix) with ESMTPSA id CD1871280C3F; Thu, 11 Dec 2014 12:49:22 +0100 (CET) Date: Thu, 11 Dec 2014 12:49:22 +0100 (CET) Message-Id: <20141211.124922.734445723149087483.mbj@tail-f.com> To: lhotka@nic.cz From: Martin Bjorklund In-Reply-To: References: X-Mailer: Mew version 6.5 on Emacs 23.4 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/3HFVkrrSo2yj50XdDP6lAVEC_pI Cc: netconf@ietf.org Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 11:49:28 -0000 Ladislav Lhotka wrote: > Andy Bierman writes: > > > Hi, > > > > A new issue has been added to the tracker: > > > > https://github.com/netconf-wg/restconf/issues/15 > > > > There are 3 solutions mentioned. > > The default solution is S1, which will be implemented > > unless there is WG consensus demonstrated to > > do something else. > > The biggest problem with S1 is that it may mislead readers into > thinking: "Hey, now I understand how namespaces work in groupings!" > > I also don't like the idea of defining an ad hoc extension. I disagree. I think an extension is the best solution in this case. However, we can use a different name than 'structure'. 'structure' was originally my proposal for a built-in statement (YANG 1.1) for this purpose. We can call it 'restconf-structure' or 'restconf-data' or something. > If we want > to turn YANG into a general schema language, it should be done properly. > > I think the simplest solution would be to remove the groupings and have > "errors", "restconf", "collection" and "notification" as top-level > containers. The namespace assignment then follows YANG rules. This is also _very_ misleading, b/c then it looks like a normal config or state module, which one would expect a server to implement in the normal way. > S3 should IMO be fine, too, the structures aren't that complicated. I can see only drawbacks compared to S2. Whatever we do in text it will be less precise than an extension. /martin From nobody Thu Dec 11 04:35:52 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF00A1ACEB9 for ; Thu, 11 Dec 2014 04:35:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.361 X-Spam-Level: X-Spam-Status: No, score=-0.361 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mJ0-qtArdDn1 for ; Thu, 11 Dec 2014 04:35:49 -0800 (PST) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C91131ACEB7 for ; Thu, 11 Dec 2014 04:35:48 -0800 (PST) Received: from [195.113.220.110] (unknown [195.113.220.110]) by mail.nic.cz (Postfix) with ESMTPSA id 6BC53140A4B; Thu, 11 Dec 2014 13:35:46 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1418301346; bh=BARAwSDdqaeQ3Se0eXs57Al0NfzuhLzmqmKu2hgdQbs=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=K0e+rgRI5QvjBZhvq65yAU1dd1vK/UKa6jwnIxcPGzk4Gb57Z2ALgwCjI9lqopaTP 6jlgLmtIDEoDtGB7yL2beuZminRINyCq86K1YZbRKniWusvAgV8say5VQ1ZlPpp0sl ftG+c8yw+frH9MzWjyQ7qBj2ay+RhGZ5dTE372Ec= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) From: Ladislav Lhotka In-Reply-To: <20141211.124922.734445723149087483.mbj@tail-f.com> Date: Thu, 11 Dec 2014 13:35:46 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20141211.124922.734445723149087483.mbj@tail-f.com> To: =?utf-8?Q?Martin_Bj=C3=B6rklund?= X-Mailer: Apple Mail (2.1993) X-Virus-Scanned: clamav-milter 0.98.1 at mail X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/UU9RGDhYMGfezzWbYCgucTaepcc Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 12:35:51 -0000 > On 11 Dec 2014, at 12:49, Martin Bjorklund wrote: >=20 > Ladislav Lhotka wrote: >> Andy Bierman writes: >>=20 >>> Hi, >>>=20 >>> A new issue has been added to the tracker: >>>=20 >>> https://github.com/netconf-wg/restconf/issues/15 >>>=20 >>> There are 3 solutions mentioned. >>> The default solution is S1, which will be implemented >>> unless there is WG consensus demonstrated to >>> do something else. >>=20 >> The biggest problem with S1 is that it may mislead readers into >> thinking: "Hey, now I understand how namespaces work in groupings!" >>=20 >> I also don't like the idea of defining an ad hoc extension. >=20 > I disagree. I think an extension is the best solution in this case. > However, we can use a different name than 'structure'. 'structure' > was originally my proposal for a built-in statement (YANG 1.1) for > this purpose. We can call it 'restconf-structure' or 'restconf-data' > or something. So another document that wants to do the same should define its own ad = hoc extension? Or import the ietf-restconf module? >=20 >> If we want >> to turn YANG into a general schema language, it should be done = properly. >>=20 >> I think the simplest solution would be to remove the groupings and = have >> "errors", "restconf", "collection" and "notification" as top-level >> containers. The namespace assignment then follows YANG rules. >=20 > This is also _very_ misleading, b/c then it looks like a normal config > or state module, which one would expect a server to implement in the > normal way. What makes the solutions with groupings or extensions different? In any = case, the module description has to state very clearly that it is a = strawman module that=E2=80=99s not supposed to be used in the normal = NETCONF/RESTCONF way. But if you above that deviate from YANG semantics, = as the groupings do, you cannot even use standard YANG tools because = they would produce wrong results. If the module is as I proposed, I can still use pyang for generating = correct DSDL schemas, XML-JSON mapping etc. And if a server implementor likes the module and decides to implement it = as if it was a normal module, so what?=20 >=20 >> S3 should IMO be fine, too, the structures aren't that complicated.=20= >=20 > I can see only drawbacks compared to S2. Whatever we do in text it > will be less precise than an extension. I prefer less precise to precise but wrong. Keep in mind that you are a = YANG designer so you are not as likely to get confused by language = anomalies as an average reader of the RESTCONF document. Lada >=20 >=20 > /martin -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Thu Dec 11 04:48:47 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E02B21ACE47 for ; Thu, 11 Dec 2014 04:48:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2GWZTRflB4ci for ; Thu, 11 Dec 2014 04:48:44 -0800 (PST) Received: from mail.tail-f.com (mail.tail-f.com [83.241.162.140]) by ietfa.amsl.com (Postfix) with ESMTP id 1C25A1ACE46 for ; Thu, 11 Dec 2014 04:48:44 -0800 (PST) Received: from localhost (x15.tail-f.com [192.168.1.60]) by mail.tail-f.com (Postfix) with ESMTPSA id 571C21280C48; Thu, 11 Dec 2014 13:48:43 +0100 (CET) Date: Thu, 11 Dec 2014 13:48:43 +0100 (CET) Message-Id: <20141211.134843.810246336811127833.mbj@tail-f.com> To: lhotka@nic.cz From: Martin Bjorklund In-Reply-To: References: <20141211.124922.734445723149087483.mbj@tail-f.com> X-Mailer: Mew version 6.5 on Emacs 23.4 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=utf-8 Content-Transfer-Encoding: base64 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/k4sEcmtK6HuhZRM3okI38GD1ZZo Cc: netconf@ietf.org Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 12:48:46 -0000 TGFkaXNsYXYgTGhvdGthIDxsaG90a2FAbmljLmN6PiB3cm90ZToNCj4gDQo+ID4gT24gMTEgRGVj IDIwMTQsIGF0IDEyOjQ5LCBNYXJ0aW4gQmpvcmtsdW5kIDxtYmpAdGFpbC1mLmNvbT4gd3JvdGU6 DQo+ID4gDQo+ID4gTGFkaXNsYXYgTGhvdGthIDxsaG90a2FAbmljLmN6PiB3cm90ZToNCj4gPj4g QW5keSBCaWVybWFuIDxhbmR5QHl1bWF3b3Jrcy5jb20+IHdyaXRlczoNCj4gPj4gDQo+ID4+PiBI aSwNCj4gPj4+IA0KPiA+Pj4gQSBuZXcgaXNzdWUgaGFzIGJlZW4gYWRkZWQgdG8gdGhlIHRyYWNr ZXI6DQo+ID4+PiANCj4gPj4+IGh0dHBzOi8vZ2l0aHViLmNvbS9uZXRjb25mLXdnL3Jlc3Rjb25m L2lzc3Vlcy8xNQ0KPiA+Pj4gDQo+ID4+PiBUaGVyZSBhcmUgMyBzb2x1dGlvbnMgbWVudGlvbmVk Lg0KPiA+Pj4gVGhlIGRlZmF1bHQgc29sdXRpb24gaXMgUzEsIHdoaWNoIHdpbGwgYmUgaW1wbGVt ZW50ZWQNCj4gPj4+IHVubGVzcyB0aGVyZSBpcyBXRyBjb25zZW5zdXMgZGVtb25zdHJhdGVkIHRv DQo+ID4+PiBkbyBzb21ldGhpbmcgZWxzZS4NCj4gPj4gDQo+ID4+IFRoZSBiaWdnZXN0IHByb2Js ZW0gd2l0aCBTMSBpcyB0aGF0IGl0IG1heSBtaXNsZWFkIHJlYWRlcnMgaW50bw0KPiA+PiB0aGlu a2luZzogIkhleSwgbm93IEkgdW5kZXJzdGFuZCBob3cgbmFtZXNwYWNlcyB3b3JrIGluIGdyb3Vw aW5ncyEiDQo+ID4+IA0KPiA+PiBJIGFsc28gZG9uJ3QgbGlrZSB0aGUgaWRlYSBvZiBkZWZpbmlu ZyBhbiBhZCBob2MgZXh0ZW5zaW9uLg0KPiA+IA0KPiA+IEkgZGlzYWdyZWUuICBJIHRoaW5rIGFu IGV4dGVuc2lvbiBpcyB0aGUgYmVzdCBzb2x1dGlvbiBpbiB0aGlzIGNhc2UuDQo+ID4gSG93ZXZl ciwgd2UgY2FuIHVzZSBhIGRpZmZlcmVudCBuYW1lIHRoYW4gJ3N0cnVjdHVyZScuICAnc3RydWN0 dXJlJw0KPiA+IHdhcyBvcmlnaW5hbGx5IG15IHByb3Bvc2FsIGZvciBhIGJ1aWx0LWluIHN0YXRl bWVudCAoWUFORyAxLjEpIGZvcg0KPiA+IHRoaXMgcHVycG9zZS4gIFdlIGNhbiBjYWxsIGl0ICdy ZXN0Y29uZi1zdHJ1Y3R1cmUnIG9yICdyZXN0Y29uZi1kYXRhJw0KPiA+IG9yIHNvbWV0aGluZy4N Cj4gDQo+IFNvIGFub3RoZXIgZG9jdW1lbnQgdGhhdCB3YW50cyB0byBkbyB0aGUgc2FtZSBzaG91 bGQgZGVmaW5lIGl0cyBvd24gYWQNCj4gaG9jIGV4dGVuc2lvbj8gT3IgaW1wb3J0IHRoZSBpZXRm LXJlc3Rjb25mIG1vZHVsZT8NCg0KU3VwcG9zZSB3ZSBtYWtlIGEgbmV3IGRvY3VtZW50IHRoYXQg ZGVmaW5lcyBhIG5ldyBSRVNUQ09ORiByZXNvdXJjZQ0KdHlwZSwgYW5kIHdlIG5lZWQgYSBzdHJ1 Y3R1cmUgZm9yIGl0LCB0aGVuIHRoYXQgZG9jdW1lbnQgd291bGQgaW1wb3J0DQphbmQgdXNlICdy ZXN0Y29uZi1zdHJ1Y3R1cmUnLg0KDQo+ID4+IElmIHdlIHdhbnQNCj4gPj4gdG8gdHVybiBZQU5H IGludG8gYSBnZW5lcmFsIHNjaGVtYSBsYW5ndWFnZSwgaXQgc2hvdWxkIGJlIGRvbmUNCj4gPj4g cHJvcGVybHkuDQo+ID4+IA0KPiA+PiBJIHRoaW5rIHRoZSBzaW1wbGVzdCBzb2x1dGlvbiB3b3Vs ZCBiZSB0byByZW1vdmUgdGhlIGdyb3VwaW5ncyBhbmQNCj4gPj4gaGF2ZQ0KPiA+PiAiZXJyb3Jz IiwgInJlc3Rjb25mIiwgImNvbGxlY3Rpb24iIGFuZCAibm90aWZpY2F0aW9uIiBhcyB0b3AtbGV2 ZWwNCj4gPj4gY29udGFpbmVycy4gVGhlIG5hbWVzcGFjZSBhc3NpZ25tZW50IHRoZW4gZm9sbG93 cyBZQU5HIHJ1bGVzLg0KPiA+IA0KPiA+IFRoaXMgaXMgYWxzbyBfdmVyeV8gbWlzbGVhZGluZywg Yi9jIHRoZW4gaXQgbG9va3MgbGlrZSBhIG5vcm1hbCBjb25maWcNCj4gPiBvciBzdGF0ZSBtb2R1 bGUsIHdoaWNoIG9uZSB3b3VsZCBleHBlY3QgYSBzZXJ2ZXIgdG8gaW1wbGVtZW50IGluIHRoZQ0K PiA+IG5vcm1hbCB3YXkuDQo+IA0KPiBXaGF0IG1ha2VzIHRoZSBzb2x1dGlvbnMgd2l0aCBncm91 cGluZ3Mgb3IgZXh0ZW5zaW9ucyBkaWZmZXJlbnQ/DQoNCkkgYWdyZWUgdGhhdCBncm91cGluZ3Mg YXJlIG1pc2xlYWRpbmcuICBCdXQgdXNpbmcgYW4gZXh0ZW5zaW9uIHdvdWxkDQpiZSBkaWZmZXJl bnQsIGIvYyB0aGUgZXh0ZW5zaW9uIGRlZmluZXMgdGhlIHNlbWFudGljcyAtIHRoaXMgaXMgbm90 DQpjb25maWcgb3Igb3BlciBzdGF0ZSwgYnV0IHNvbWV0aGluZyBlbHNlLg0KDQo+IEluDQo+IGFu eSBjYXNlLCB0aGUgbW9kdWxlIGRlc2NyaXB0aW9uIGhhcyB0byBzdGF0ZSB2ZXJ5IGNsZWFybHkg dGhhdCBpdCBpcw0KPiBhIHN0cmF3bWFuIG1vZHVsZSB0aGF04oCZcyBub3Qgc3VwcG9zZWQgdG8g YmUgdXNlZCBpbiB0aGUgbm9ybWFsDQo+IE5FVENPTkYvUkVTVENPTkYgd2F5LiBCdXQgaWYgeW91 IGFib3ZlIHRoYXQgZGV2aWF0ZSBmcm9tIFlBTkcNCj4gc2VtYW50aWNzLCBhcyB0aGUgZ3JvdXBp bmdzIGRvLCB5b3UgY2Fubm90IGV2ZW4gdXNlIHN0YW5kYXJkIFlBTkcNCj4gdG9vbHMgYmVjYXVz ZSB0aGV5IHdvdWxkIHByb2R1Y2Ugd3JvbmcgcmVzdWx0cy4NCj4gDQo+IElmIHRoZSBtb2R1bGUg aXMgYXMgSSBwcm9wb3NlZCwgSSBjYW4gc3RpbGwgdXNlIHB5YW5nIGZvciBnZW5lcmF0aW5nDQo+ IGNvcnJlY3QgRFNETCBzY2hlbWFzLCBYTUwtSlNPTiBtYXBwaW5nIGV0Yy4NCj4gDQo+IEFuZCBp ZiBhIHNlcnZlciBpbXBsZW1lbnRvciBsaWtlcyB0aGUgbW9kdWxlIGFuZCBkZWNpZGVzIHRvIGlt cGxlbWVudA0KPiBpdCBhcyBpZiBpdCB3YXMgYSBub3JtYWwgbW9kdWxlLCBzbyB3aGF0Pw0KPiAN Cj4gPiANCj4gPj4gUzMgc2hvdWxkIElNTyBiZSBmaW5lLCB0b28sIHRoZSBzdHJ1Y3R1cmVzIGFy ZW4ndCB0aGF0IGNvbXBsaWNhdGVkLiANCj4gPiANCj4gPiBJIGNhbiBzZWUgb25seSBkcmF3YmFj a3MgY29tcGFyZWQgdG8gUzIuICBXaGF0ZXZlciB3ZSBkbyBpbiB0ZXh0IGl0DQo+ID4gd2lsbCBi ZSBsZXNzIHByZWNpc2UgdGhhbiBhbiBleHRlbnNpb24uDQo+IA0KPiBJIHByZWZlciBsZXNzIHBy ZWNpc2UgdG8gcHJlY2lzZSBidXQgd3JvbmcuDQoNCkFuIGV4dGVuc2lvbiBpcyBpbiBubyB3YXkg d3JvbmcuDQoNCj4gS2VlcCBpbiBtaW5kIHRoYXQgeW91IGFyZQ0KPiBhIFlBTkcgZGVzaWduZXIg c28geW91IGFyZSBub3QgYXMgbGlrZWx5IHRvIGdldCBjb25mdXNlZCBieSBsYW5ndWFnZQ0KPiBh bm9tYWxpZXMgYXMgYW4gYXZlcmFnZSByZWFkZXIgb2YgdGhlIFJFU1RDT05GIGRvY3VtZW50Lg0K DQoNCi9tYXJ0aW4NCg== From nobody Thu Dec 11 05:08:12 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 245AB1ACE2E for ; Thu, 11 Dec 2014 05:08:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.361 X-Spam-Level: X-Spam-Status: No, score=-0.361 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K6WsoVpax0og for ; Thu, 11 Dec 2014 05:08:02 -0800 (PST) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 467FF1A89C4 for ; Thu, 11 Dec 2014 05:08:01 -0800 (PST) Received: from [195.113.220.110] (unknown [195.113.220.110]) by mail.nic.cz (Postfix) with ESMTPSA id E8A3F140A4B; Thu, 11 Dec 2014 14:07:59 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1418303279; bh=coaS/On2milL+s2kqHcfIOJOCvx5Rw4K77ctayJmBqk=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=J40oQdGuKrBMt+lHLgwKkAshrsBH4j8IlV98SqRPNbmQPhcfUXQnNXBdi1VA6/W9R Pl3x/Njj/13DrecroHWjbA64cwBZ/GIUpZyAaOP7b9S9K+Kvs4DjOoHEHD5J4XywGi HNOePd+j9V4MtxlMYfkShkMv+6QqAhzZOJI9wgwc= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) From: Ladislav Lhotka In-Reply-To: <20141211.134843.810246336811127833.mbj@tail-f.com> Date: Thu, 11 Dec 2014 14:07:59 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <3F370DFC-B39C-4471-B419-E397F9955919@nic.cz> References: <20141211.124922.734445723149087483.mbj@tail-f.com> <20141211.134843.810246336811127833.mbj@tail-f.com> To: =?utf-8?Q?Martin_Bj=C3=B6rklund?= X-Mailer: Apple Mail (2.1993) X-Virus-Scanned: clamav-milter 0.98.1 at mail X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/Pgtd4Yd1EY8GwsjCMbzLMQh4VDE Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 13:08:08 -0000 > On 11 Dec 2014, at 13:48, Martin Bjorklund wrote: >=20 > Ladislav Lhotka wrote: >>=20 >>> On 11 Dec 2014, at 12:49, Martin Bjorklund wrote: >>>=20 >>> Ladislav Lhotka wrote: >>>> Andy Bierman writes: >>>>=20 >>>>> Hi, >>>>>=20 >>>>> A new issue has been added to the tracker: >>>>>=20 >>>>> https://github.com/netconf-wg/restconf/issues/15 >>>>>=20 >>>>> There are 3 solutions mentioned. >>>>> The default solution is S1, which will be implemented >>>>> unless there is WG consensus demonstrated to >>>>> do something else. >>>>=20 >>>> The biggest problem with S1 is that it may mislead readers into >>>> thinking: "Hey, now I understand how namespaces work in groupings!" >>>>=20 >>>> I also don't like the idea of defining an ad hoc extension. >>>=20 >>> I disagree. I think an extension is the best solution in this case. >>> However, we can use a different name than 'structure'. 'structure' >>> was originally my proposal for a built-in statement (YANG 1.1) for >>> this purpose. We can call it 'restconf-structure' or = 'restconf-data' >>> or something. >>=20 >> So another document that wants to do the same should define its own = ad >> hoc extension? Or import the ietf-restconf module? >=20 > Suppose we make a new document that defines a new RESTCONF resource > type, and we need a structure for it, then that document would import > and use 'restconf-structure=E2=80=99. I am talking about an author of an unrelated document who just wants to = use YANG as a schema language. >=20 >>>> If we want >>>> to turn YANG into a general schema language, it should be done >>>> properly. >>>>=20 >>>> I think the simplest solution would be to remove the groupings and >>>> have >>>> "errors", "restconf", "collection" and "notification" as top-level >>>> containers. The namespace assignment then follows YANG rules. >>>=20 >>> This is also _very_ misleading, b/c then it looks like a normal = config >>> or state module, which one would expect a server to implement in the >>> normal way. >>=20 >> What makes the solutions with groupings or extensions different? >=20 > I agree that groupings are misleading. But using an extension would > be different, b/c the extension defines the semantics - this is not > config or oper state, but something else. If it is neither config nor state data, then a number of things such as = XPath context are undefined. Is every list then required to have a key = or not? This is a slippery slope, turning YANG into a schema language is = not as easy as this. >=20 >> In >> any case, the module description has to state very clearly that it is >> a strawman module that=E2=80=99s not supposed to be used in the = normal >> NETCONF/RESTCONF way. But if you above that deviate from YANG >> semantics, as the groupings do, you cannot even use standard YANG >> tools because they would produce wrong results. >>=20 >> If the module is as I proposed, I can still use pyang for generating >> correct DSDL schemas, XML-JSON mapping etc. >>=20 >> And if a server implementor likes the module and decides to implement >> it as if it was a normal module, so what? >>=20 >>>=20 >>>> S3 should IMO be fine, too, the structures aren't that complicated.=20= >>>=20 >>> I can see only drawbacks compared to S2. Whatever we do in text it >>> will be less precise than an extension. >>=20 >> I prefer less precise to precise but wrong. >=20 > An extension is in no way wrong. An extension that changes normal YANG semantics is wrong. Lada >=20 >> Keep in mind that you are >> a YANG designer so you are not as likely to get confused by language >> anomalies as an average reader of the RESTCONF document. >=20 >=20 > /martin -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Thu Dec 11 05:11:51 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A61D51ACE2E for ; Thu, 11 Dec 2014 05:11:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ojz0anaQOIfE for ; Thu, 11 Dec 2014 05:11:47 -0800 (PST) Received: from mail.tail-f.com (mail.tail-f.com [83.241.162.140]) by ietfa.amsl.com (Postfix) with ESMTP id A2B5C1A8969 for ; Thu, 11 Dec 2014 05:11:46 -0800 (PST) Received: from localhost (x15.tail-f.com [192.168.1.60]) by mail.tail-f.com (Postfix) with ESMTPSA id 8BC111280C3A; Thu, 11 Dec 2014 14:11:45 +0100 (CET) Date: Thu, 11 Dec 2014 14:11:45 +0100 (CET) Message-Id: <20141211.141145.229992708790133446.mbj@tail-f.com> To: lhotka@nic.cz From: Martin Bjorklund In-Reply-To: <3F370DFC-B39C-4471-B419-E397F9955919@nic.cz> References: <20141211.134843.810246336811127833.mbj@tail-f.com> <3F370DFC-B39C-4471-B419-E397F9955919@nic.cz> X-Mailer: Mew version 6.5 on Emacs 23.4 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=utf-8 Content-Transfer-Encoding: base64 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/XMjFVxmgTAK3-lwMr72wLKEZVb4 Cc: netconf@ietf.org Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 13:11:49 -0000 TGFkaXNsYXYgTGhvdGthIDxsaG90a2FAbmljLmN6PiB3cm90ZToNCj4gDQo+ID4gT24gMTEgRGVj IDIwMTQsIGF0IDEzOjQ4LCBNYXJ0aW4gQmpvcmtsdW5kIDxtYmpAdGFpbC1mLmNvbT4gd3JvdGU6 DQo+ID4gDQo+ID4gTGFkaXNsYXYgTGhvdGthIDxsaG90a2FAbmljLmN6PiB3cm90ZToNCj4gPj4g DQo+ID4+PiBPbiAxMSBEZWMgMjAxNCwgYXQgMTI6NDksIE1hcnRpbiBCam9ya2x1bmQgPG1iakB0 YWlsLWYuY29tPiB3cm90ZToNCj4gPj4+IA0KPiA+Pj4gTGFkaXNsYXYgTGhvdGthIDxsaG90a2FA bmljLmN6PiB3cm90ZToNCj4gPj4+PiBBbmR5IEJpZXJtYW4gPGFuZHlAeXVtYXdvcmtzLmNvbT4g d3JpdGVzOg0KPiA+Pj4+IA0KPiA+Pj4+PiBIaSwNCj4gPj4+Pj4gDQo+ID4+Pj4+IEEgbmV3IGlz c3VlIGhhcyBiZWVuIGFkZGVkIHRvIHRoZSB0cmFja2VyOg0KPiA+Pj4+PiANCj4gPj4+Pj4gaHR0 cHM6Ly9naXRodWIuY29tL25ldGNvbmYtd2cvcmVzdGNvbmYvaXNzdWVzLzE1DQo+ID4+Pj4+IA0K PiA+Pj4+PiBUaGVyZSBhcmUgMyBzb2x1dGlvbnMgbWVudGlvbmVkLg0KPiA+Pj4+PiBUaGUgZGVm YXVsdCBzb2x1dGlvbiBpcyBTMSwgd2hpY2ggd2lsbCBiZSBpbXBsZW1lbnRlZA0KPiA+Pj4+PiB1 bmxlc3MgdGhlcmUgaXMgV0cgY29uc2Vuc3VzIGRlbW9uc3RyYXRlZCB0bw0KPiA+Pj4+PiBkbyBz b21ldGhpbmcgZWxzZS4NCj4gPj4+PiANCj4gPj4+PiBUaGUgYmlnZ2VzdCBwcm9ibGVtIHdpdGgg UzEgaXMgdGhhdCBpdCBtYXkgbWlzbGVhZCByZWFkZXJzIGludG8NCj4gPj4+PiB0aGlua2luZzog IkhleSwgbm93IEkgdW5kZXJzdGFuZCBob3cgbmFtZXNwYWNlcyB3b3JrIGluIGdyb3VwaW5ncyEi DQo+ID4+Pj4gDQo+ID4+Pj4gSSBhbHNvIGRvbid0IGxpa2UgdGhlIGlkZWEgb2YgZGVmaW5pbmcg YW4gYWQgaG9jIGV4dGVuc2lvbi4NCj4gPj4+IA0KPiA+Pj4gSSBkaXNhZ3JlZS4gIEkgdGhpbmsg YW4gZXh0ZW5zaW9uIGlzIHRoZSBiZXN0IHNvbHV0aW9uIGluIHRoaXMgY2FzZS4NCj4gPj4+IEhv d2V2ZXIsIHdlIGNhbiB1c2UgYSBkaWZmZXJlbnQgbmFtZSB0aGFuICdzdHJ1Y3R1cmUnLiAgJ3N0 cnVjdHVyZScNCj4gPj4+IHdhcyBvcmlnaW5hbGx5IG15IHByb3Bvc2FsIGZvciBhIGJ1aWx0LWlu IHN0YXRlbWVudCAoWUFORyAxLjEpIGZvcg0KPiA+Pj4gdGhpcyBwdXJwb3NlLiAgV2UgY2FuIGNh bGwgaXQgJ3Jlc3Rjb25mLXN0cnVjdHVyZScgb3IgJ3Jlc3Rjb25mLWRhdGEnDQo+ID4+PiBvciBz b21ldGhpbmcuDQo+ID4+IA0KPiA+PiBTbyBhbm90aGVyIGRvY3VtZW50IHRoYXQgd2FudHMgdG8g ZG8gdGhlIHNhbWUgc2hvdWxkIGRlZmluZSBpdHMgb3duIGFkDQo+ID4+IGhvYyBleHRlbnNpb24/ IE9yIGltcG9ydCB0aGUgaWV0Zi1yZXN0Y29uZiBtb2R1bGU/DQo+ID4gDQo+ID4gU3VwcG9zZSB3 ZSBtYWtlIGEgbmV3IGRvY3VtZW50IHRoYXQgZGVmaW5lcyBhIG5ldyBSRVNUQ09ORiByZXNvdXJj ZQ0KPiA+IHR5cGUsIGFuZCB3ZSBuZWVkIGEgc3RydWN0dXJlIGZvciBpdCwgdGhlbiB0aGF0IGRv Y3VtZW50IHdvdWxkIGltcG9ydA0KPiA+IGFuZCB1c2UgJ3Jlc3Rjb25mLXN0cnVjdHVyZeKAmS4N Cj4gDQo+IEkgYW0gdGFsa2luZyBhYm91dCBhbiBhdXRob3Igb2YgYW4gdW5yZWxhdGVkIGRvY3Vt ZW50IHdobyBqdXN0IHdhbnRzDQo+IHRvIHVzZSBZQU5HIGFzIGEgc2NoZW1hIGxhbmd1YWdlLg0K DQpUaGV5IHdvdWxkbid0IHVzZSAncmVzdGNvbmYtc3RydWN0dXJlJywgYnV0IGFyZSBmcmVlIHRv IGRlZmluZSB0aGVpcg0Kb3duIGV4dGVuc2lvbnMuDQoNCj4gPj4+PiBJZiB3ZSB3YW50DQo+ID4+ Pj4gdG8gdHVybiBZQU5HIGludG8gYSBnZW5lcmFsIHNjaGVtYSBsYW5ndWFnZSwgaXQgc2hvdWxk IGJlIGRvbmUNCj4gPj4+PiBwcm9wZXJseS4NCj4gPj4+PiANCj4gPj4+PiBJIHRoaW5rIHRoZSBz aW1wbGVzdCBzb2x1dGlvbiB3b3VsZCBiZSB0byByZW1vdmUgdGhlIGdyb3VwaW5ncyBhbmQNCj4g Pj4+PiBoYXZlDQo+ID4+Pj4gImVycm9ycyIsICJyZXN0Y29uZiIsICJjb2xsZWN0aW9uIiBhbmQg Im5vdGlmaWNhdGlvbiIgYXMgdG9wLWxldmVsDQo+ID4+Pj4gY29udGFpbmVycy4gVGhlIG5hbWVz cGFjZSBhc3NpZ25tZW50IHRoZW4gZm9sbG93cyBZQU5HIHJ1bGVzLg0KPiA+Pj4gDQo+ID4+PiBU aGlzIGlzIGFsc28gX3ZlcnlfIG1pc2xlYWRpbmcsIGIvYyB0aGVuIGl0IGxvb2tzIGxpa2UgYSBu b3JtYWwgY29uZmlnDQo+ID4+PiBvciBzdGF0ZSBtb2R1bGUsIHdoaWNoIG9uZSB3b3VsZCBleHBl Y3QgYSBzZXJ2ZXIgdG8gaW1wbGVtZW50IGluIHRoZQ0KPiA+Pj4gbm9ybWFsIHdheS4NCj4gPj4g DQo+ID4+IFdoYXQgbWFrZXMgdGhlIHNvbHV0aW9ucyB3aXRoIGdyb3VwaW5ncyBvciBleHRlbnNp b25zIGRpZmZlcmVudD8NCj4gPiANCj4gPiBJIGFncmVlIHRoYXQgZ3JvdXBpbmdzIGFyZSBtaXNs ZWFkaW5nLiAgQnV0IHVzaW5nIGFuIGV4dGVuc2lvbiB3b3VsZA0KPiA+IGJlIGRpZmZlcmVudCwg Yi9jIHRoZSBleHRlbnNpb24gZGVmaW5lcyB0aGUgc2VtYW50aWNzIC0gdGhpcyBpcyBub3QNCj4g PiBjb25maWcgb3Igb3BlciBzdGF0ZSwgYnV0IHNvbWV0aGluZyBlbHNlLg0KPiANCj4gSWYgaXQg aXMgbmVpdGhlciBjb25maWcgbm9yIHN0YXRlIGRhdGEsIHRoZW4gYSBudW1iZXIgb2YgdGhpbmdz IHN1Y2gNCj4gYXMgWFBhdGggY29udGV4dCBhcmUgdW5kZWZpbmVkLg0KDQpDb3JyZWN0OyB0aGlz IG5lZWRzIHRvIGJlIHRha2VuIGNhcmUgb2YgZm9yIGVhY2ggZXh0ZW5zaW9uLg0KDQo+IElzIGV2 ZXJ5IGxpc3QgdGhlbiByZXF1aXJlZCB0byBoYXZlIGENCj4ga2V5IG9yIG5vdD8gVGhpcyBpcyBh IHNsaXBwZXJ5IHNsb3BlLCB0dXJuaW5nIFlBTkcgaW50byBhIHNjaGVtYQ0KPiBsYW5ndWFnZSBp cyBub3QgYXMgZWFzeSBhcyB0aGlzLg0KPiANCj4gPiANCj4gPj4gSW4NCj4gPj4gYW55IGNhc2Us IHRoZSBtb2R1bGUgZGVzY3JpcHRpb24gaGFzIHRvIHN0YXRlIHZlcnkgY2xlYXJseSB0aGF0IGl0 IGlzDQo+ID4+IGEgc3RyYXdtYW4gbW9kdWxlIHRoYXTigJlzIG5vdCBzdXBwb3NlZCB0byBiZSB1 c2VkIGluIHRoZSBub3JtYWwNCj4gPj4gTkVUQ09ORi9SRVNUQ09ORiB3YXkuIEJ1dCBpZiB5b3Ug YWJvdmUgdGhhdCBkZXZpYXRlIGZyb20gWUFORw0KPiA+PiBzZW1hbnRpY3MsIGFzIHRoZSBncm91 cGluZ3MgZG8sIHlvdSBjYW5ub3QgZXZlbiB1c2Ugc3RhbmRhcmQgWUFORw0KPiA+PiB0b29scyBi ZWNhdXNlIHRoZXkgd291bGQgcHJvZHVjZSB3cm9uZyByZXN1bHRzLg0KPiA+PiANCj4gPj4gSWYg dGhlIG1vZHVsZSBpcyBhcyBJIHByb3Bvc2VkLCBJIGNhbiBzdGlsbCB1c2UgcHlhbmcgZm9yIGdl bmVyYXRpbmcNCj4gPj4gY29ycmVjdCBEU0RMIHNjaGVtYXMsIFhNTC1KU09OIG1hcHBpbmcgZXRj Lg0KPiA+PiANCj4gPj4gQW5kIGlmIGEgc2VydmVyIGltcGxlbWVudG9yIGxpa2VzIHRoZSBtb2R1 bGUgYW5kIGRlY2lkZXMgdG8gaW1wbGVtZW50DQo+ID4+IGl0IGFzIGlmIGl0IHdhcyBhIG5vcm1h bCBtb2R1bGUsIHNvIHdoYXQ/DQo+ID4+IA0KPiA+Pj4gDQo+ID4+Pj4gUzMgc2hvdWxkIElNTyBi ZSBmaW5lLCB0b28sIHRoZSBzdHJ1Y3R1cmVzIGFyZW4ndCB0aGF0IGNvbXBsaWNhdGVkLiANCj4g Pj4+IA0KPiA+Pj4gSSBjYW4gc2VlIG9ubHkgZHJhd2JhY2tzIGNvbXBhcmVkIHRvIFMyLiAgV2hh dGV2ZXIgd2UgZG8gaW4gdGV4dCBpdA0KPiA+Pj4gd2lsbCBiZSBsZXNzIHByZWNpc2UgdGhhbiBh biBleHRlbnNpb24uDQo+ID4+IA0KPiA+PiBJIHByZWZlciBsZXNzIHByZWNpc2UgdG8gcHJlY2lz ZSBidXQgd3JvbmcuDQo+ID4gDQo+ID4gQW4gZXh0ZW5zaW9uIGlzIGluIG5vIHdheSB3cm9uZy4N Cj4gDQo+IEFuIGV4dGVuc2lvbiB0aGF0IGNoYW5nZXMgbm9ybWFsIFlBTkcgc2VtYW50aWNzIGlz IHdyb25nLg0KDQpCdXQgdGhpcyBvbmUgZG9lc24ndCBjaGFuZ2Ugbm9ybWFsIFlBTkcgc2VtYW50 aWNzLg0KDQoNCi9tYXJ0aW4NCg== From nobody Thu Dec 11 05:23:32 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F9381ACE2D for ; Thu, 11 Dec 2014 05:23:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.361 X-Spam-Level: X-Spam-Status: No, score=-0.361 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lsRuhiJXRHBl for ; Thu, 11 Dec 2014 05:23:19 -0800 (PST) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 260781ACE26 for ; Thu, 11 Dec 2014 05:23:19 -0800 (PST) Received: from [195.113.220.110] (unknown [195.113.220.110]) by mail.nic.cz (Postfix) with ESMTPSA id C40F0140A4B; Thu, 11 Dec 2014 14:23:17 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1418304197; bh=eVathfbLqNDdJyYGn6ATQZVlYkdXHpbWyQKsBQTpH6o=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=tEGT1Vw5B+4BPcGVhpUbhcHBH3RM5JbJlQl06z7sl5LlmcZ3yO0l8ugLtV+B4S78K aQq+fnxDXixRTescjOPAx6o9YIX/tQV0SLFa9SdqdwTcAlKK/jdqJ/GyJ/iX8Dw0Xl p2OgBSgSKHfgFWv5V5mcR3U7L02oMKwTyM2+rfrs= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) From: Ladislav Lhotka In-Reply-To: <20141211.141145.229992708790133446.mbj@tail-f.com> Date: Thu, 11 Dec 2014 14:23:17 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <08A25C11-1B02-478E-8543-DEF053CF159F@nic.cz> References: <20141211.134843.810246336811127833.mbj@tail-f.com> <3F370DFC-B39C-4471-B419-E397F9955919@nic.cz> <20141211.141145.229992708790133446.mbj@tail-f.com> To: =?utf-8?Q?Martin_Bj=C3=B6rklund?= X-Mailer: Apple Mail (2.1993) X-Virus-Scanned: clamav-milter 0.98.1 at mail X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/gvF22B9tOFhJXUww0xiCsEF7Yhg Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 13:23:23 -0000 > On 11 Dec 2014, at 14:11, Martin Bjorklund wrote: >=20 > Ladislav Lhotka wrote: >>=20 >>> On 11 Dec 2014, at 13:48, Martin Bjorklund wrote: >>>=20 >>> Ladislav Lhotka wrote: >>>>=20 >>>>> On 11 Dec 2014, at 12:49, Martin Bjorklund wrote: >>>>>=20 >>>>> Ladislav Lhotka wrote: >>>>>> Andy Bierman writes: >>>>>>=20 >>>>>>> Hi, >>>>>>>=20 >>>>>>> A new issue has been added to the tracker: >>>>>>>=20 >>>>>>> https://github.com/netconf-wg/restconf/issues/15 >>>>>>>=20 >>>>>>> There are 3 solutions mentioned. >>>>>>> The default solution is S1, which will be implemented >>>>>>> unless there is WG consensus demonstrated to >>>>>>> do something else. >>>>>>=20 >>>>>> The biggest problem with S1 is that it may mislead readers into >>>>>> thinking: "Hey, now I understand how namespaces work in = groupings!" >>>>>>=20 >>>>>> I also don't like the idea of defining an ad hoc extension. >>>>>=20 >>>>> I disagree. I think an extension is the best solution in this = case. >>>>> However, we can use a different name than 'structure'. = 'structure' >>>>> was originally my proposal for a built-in statement (YANG 1.1) for >>>>> this purpose. We can call it 'restconf-structure' or = 'restconf-data' >>>>> or something. >>>>=20 >>>> So another document that wants to do the same should define its own = ad >>>> hoc extension? Or import the ietf-restconf module? >>>=20 >>> Suppose we make a new document that defines a new RESTCONF resource >>> type, and we need a structure for it, then that document would = import >>> and use 'restconf-structure=E2=80=99. >>=20 >> I am talking about an author of an unrelated document who just wants >> to use YANG as a schema language. >=20 > They wouldn't use 'restconf-structure', but are free to define their > own extensions. >=20 >>>>>> If we want >>>>>> to turn YANG into a general schema language, it should be done >>>>>> properly. >>>>>>=20 >>>>>> I think the simplest solution would be to remove the groupings = and >>>>>> have >>>>>> "errors", "restconf", "collection" and "notification" as = top-level >>>>>> containers. The namespace assignment then follows YANG rules. >>>>>=20 >>>>> This is also _very_ misleading, b/c then it looks like a normal = config >>>>> or state module, which one would expect a server to implement in = the >>>>> normal way. >>>>=20 >>>> What makes the solutions with groupings or extensions different? >>>=20 >>> I agree that groupings are misleading. But using an extension would >>> be different, b/c the extension defines the semantics - this is not >>> config or oper state, but something else. >>=20 >> If it is neither config nor state data, then a number of things such >> as XPath context are undefined. >=20 > Correct; this needs to be taken care of for each extension. >=20 >> Is every list then required to have a >> key or not? This is a slippery slope, turning YANG into a schema >> language is not as easy as this. >>=20 >>>=20 >>>> In >>>> any case, the module description has to state very clearly that it = is >>>> a strawman module that=E2=80=99s not supposed to be used in the = normal >>>> NETCONF/RESTCONF way. But if you above that deviate from YANG >>>> semantics, as the groupings do, you cannot even use standard YANG >>>> tools because they would produce wrong results. >>>>=20 >>>> If the module is as I proposed, I can still use pyang for = generating >>>> correct DSDL schemas, XML-JSON mapping etc. >>>>=20 >>>> And if a server implementor likes the module and decides to = implement >>>> it as if it was a normal module, so what? >>>>=20 >>>>>=20 >>>>>> S3 should IMO be fine, too, the structures aren't that = complicated.=20 >>>>>=20 >>>>> I can see only drawbacks compared to S2. Whatever we do in text = it >>>>> will be less precise than an extension. >>>>=20 >>>> I prefer less precise to precise but wrong. >>>=20 >>> An extension is in no way wrong. >>=20 >> An extension that changes normal YANG semantics is wrong. >=20 > But this one doesn't change normal YANG semantics. It does, already because it defines neither config nor state data. What = happens if config false; is used inside such an extension? Lada >=20 >=20 > /martin -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Thu Dec 11 05:49:52 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5ED711ACE56; Thu, 11 Dec 2014 05:49:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8-zvmgG_xz_C; Thu, 11 Dec 2014 05:49:47 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F1A11A1ADB; Thu, 11 Dec 2014 05:49:47 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 5.7.4 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20141211134947.14424.56968.idtracker@ietfa.amsl.com> Date: Thu, 11 Dec 2014 05:49:47 -0800 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/khNz-eFHoy2u-XZBTYZr-_bVBZw Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-rfc5539bis-07.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 13:49:48 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration Working Group of the IETF. Title : Using the NETCONF Protocol over Transport Layer Security (TLS) with Mutual X.509 Authentication Authors : Mohamad Badra Alan Luchuk Juergen Schoenwaelder Filename : draft-ietf-netconf-rfc5539bis-07.txt Pages : 11 Date : 2014-12-11 Abstract: The Network Configuration Protocol (NETCONF) provides mechanisms to install, manipulate, and delete the configuration of network devices. This document describes how to use the Transport Layer Security (TLS) protocol with mutual X.509 authentication to secure the exchange of NETCONF messages. This revision of RFC 5539 documents the new message framing used by NETCONF 1.1 and it obsoletes RFC 5539. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-rfc5539bis/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-netconf-rfc5539bis-07 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-rfc5539bis-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Dec 11 06:52:57 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B60451ACEFE for ; Thu, 11 Dec 2014 06:52:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.379 X-Spam-Level: X-Spam-Status: No, score=-1.379 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, J_CHICKENPOX_29=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IHbxKmQv_mlw for ; Thu, 11 Dec 2014 06:52:55 -0800 (PST) Received: from mail-lb0-f177.google.com (mail-lb0-f177.google.com [209.85.217.177]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0000C1ACE97 for ; Thu, 11 Dec 2014 06:52:54 -0800 (PST) Received: by mail-lb0-f177.google.com with SMTP id b6so4246155lbj.36 for ; Thu, 11 Dec 2014 06:52:53 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=gx6C2jx1bCjj5k90CVSg/KsFWG2s1KMjligaePtMZGo=; b=XwCcrNkyl3oAoQ8NbmfuroMP3XDY3y0LwNicZChl9nDw9z65xKIBEUZoyJm3dx6hRm YYp42uf5eStSBgXsORxv4Xspv+XE1mv9WP3Bn8prTZoK1KAQDd7/EfJ52l1bswiCzUdt EZZqa99d3j5CvUdafCeTeIHPw7aKVzBs+DOxVq9TuyGvJIqgT31UhbpAWqjOZgRH8qLK JL0LRP9SoLE2sz823/OMxaXR78Oik4h0r/ApS8O/2jFqUrfBj6BmfYjNCyh7p/hirXym aEfHU0gscbOQm+p/tEnHxSmfaFKoi94kvNQuVKseA+NEnV25f9TheKud2ZjAstOQXoMz olgw== X-Gm-Message-State: ALoCoQkxgIQ+szsD9N5F4FtVqghn52zwC88jZ5RQyHpJZrJcRU9Ven5ZVPZHjInq98k6larsuhI1 MIME-Version: 1.0 X-Received: by 10.112.8.69 with SMTP id p5mr10168459lba.97.1418309573230; Thu, 11 Dec 2014 06:52:53 -0800 (PST) Received: by 10.112.157.233 with HTTP; Thu, 11 Dec 2014 06:52:53 -0800 (PST) In-Reply-To: <20141211.134843.810246336811127833.mbj@tail-f.com> References: <20141211.124922.734445723149087483.mbj@tail-f.com> <20141211.134843.810246336811127833.mbj@tail-f.com> Date: Thu, 11 Dec 2014 06:52:53 -0800 Message-ID: From: Andy Bierman To: Martin Bjorklund Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/3lc4GBCPUh3KeJqWbKIXHgU8Lgo Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 14:52:56 -0000 On Thu, Dec 11, 2014 at 4:48 AM, Martin Bjorklund wrote: > Ladislav Lhotka wrote: >> >> > On 11 Dec 2014, at 12:49, Martin Bjorklund wrote: >> > >> > Ladislav Lhotka wrote: >> >> Andy Bierman writes: >> >> >> >>> Hi, >> >>> >> >>> A new issue has been added to the tracker: >> >>> >> >>> https://github.com/netconf-wg/restconf/issues/15 >> >>> >> >>> There are 3 solutions mentioned. >> >>> The default solution is S1, which will be implemented >> >>> unless there is WG consensus demonstrated to >> >>> do something else. >> >> >> >> The biggest problem with S1 is that it may mislead readers into >> >> thinking: "Hey, now I understand how namespaces work in groupings!" >> >> >> >> I also don't like the idea of defining an ad hoc extension. >> > >> > I disagree. I think an extension is the best solution in this case. >> > However, we can use a different name than 'structure'. 'structure' >> > was originally my proposal for a built-in statement (YANG 1.1) for >> > this purpose. We can call it 'restconf-structure' or 'restconf-data' >> > or something. >> >> So another document that wants to do the same should define its own ad >> hoc extension? Or import the ietf-restconf module? > > Suppose we make a new document that defines a new RESTCONF resource > type, and we need a structure for it, then that document would import > and use 'restconf-structure'. > >> >> If we want >> >> to turn YANG into a general schema language, it should be done >> >> properly. >> >> >> >> I think the simplest solution would be to remove the groupings and >> >> have >> >> "errors", "restconf", "collection" and "notification" as top-level >> >> containers. The namespace assignment then follows YANG rules. >> > >> > This is also _very_ misleading, b/c then it looks like a normal config >> > or state module, which one would expect a server to implement in the >> > normal way. >> >> What makes the solutions with groupings or extensions different? > > I agree that groupings are misleading. But using an extension would > be different, b/c the extension defines the semantics - this is not > config or oper state, but something else. > I do not understand why these are special or misleading groupings. I cannot find any text in any RFC that says a YANG module with just groupings in it is invalid, improper, or even discouraged. I am already using 1 of these groupings in a logging model. Please explain why these are special groupings that cannot be used in a normal data model in another module. That is why I prefer solution S2-B rc:structure errors { uses errors; } This assigns a module-name and a namespace and does not preclude re-usage of the data within a larger data structure. >> In >> any case, the module description has to state very clearly that it is >> a strawman module that=E2=80=99s not supposed to be used in the normal >> NETCONF/RESTCONF way. But if you above that deviate from YANG >> semantics, as the groupings do, you cannot even use standard YANG >> tools because they would produce wrong results. >> >> If the module is as I proposed, I can still use pyang for generating >> correct DSDL schemas, XML-JSON mapping etc. >> >> And if a server implementor likes the module and decides to implement >> it as if it was a normal module, so what? >> >> > >> >> S3 should IMO be fine, too, the structures aren't that complicated. >> > >> > I can see only drawbacks compared to S2. Whatever we do in text it >> > will be less precise than an extension. >> >> I prefer less precise to precise but wrong. > > An extension is in no way wrong. > agreed >> Keep in mind that you are >> a YANG designer so you are not as likely to get confused by language >> anomalies as an average reader of the RESTCONF document. > > > /martin Andy From nobody Thu Dec 11 07:07:25 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BC171ACEFF for ; Thu, 11 Dec 2014 07:07:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.061 X-Spam-Level: X-Spam-Status: No, score=-0.061 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, J_CHICKENPOX_29=0.6, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YSXHnwqjl0oX for ; Thu, 11 Dec 2014 07:07:21 -0800 (PST) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C1481A902E for ; Thu, 11 Dec 2014 07:07:21 -0800 (PST) Received: from [195.113.220.110] (unknown [195.113.220.110]) by mail.nic.cz (Postfix) with ESMTPSA id 172BC1409B9; Thu, 11 Dec 2014 16:07:20 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1418310440; bh=y47ZlKWh2N5Hmgis0rlK8zDV7otDCujVdKufeCpq2iA=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=tJ8+w7vV38BwMbAFt8A2cGuhhZgVxCgD9JLkpmNKhd54k1xYmwSLcCH/tZUZ9N56w +gvYnuFT13nvvfeif8sBdqM/jg2e9iisMJShMgIHLrkJ8XLYuEBPm/OqC4CzacW5T8 jVT+94egdkhg/s0HT4pE4kD+W9U6RKyF92y4itEY= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) From: Ladislav Lhotka In-Reply-To: Date: Thu, 11 Dec 2014 16:07:19 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20141211.124922.734445723149087483.mbj@tail-f.com> <20141211.134843.810246336811127833.mbj@tail-f.com> To: Andy Bierman X-Mailer: Apple Mail (2.1993) X-Virus-Scanned: clamav-milter 0.98.1 at mail X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/tlovWfTZ0WTffyhpJkeGF5WjRCs Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 15:07:23 -0000 > On 11 Dec 2014, at 15:52, Andy Bierman wrote: >=20 > On Thu, Dec 11, 2014 at 4:48 AM, Martin Bjorklund = wrote: >> Ladislav Lhotka wrote: >>>=20 >>>> On 11 Dec 2014, at 12:49, Martin Bjorklund wrote: >>>>=20 >>>> Ladislav Lhotka wrote: >>>>> Andy Bierman writes: >>>>>=20 >>>>>> Hi, >>>>>>=20 >>>>>> A new issue has been added to the tracker: >>>>>>=20 >>>>>> https://github.com/netconf-wg/restconf/issues/15 >>>>>>=20 >>>>>> There are 3 solutions mentioned. >>>>>> The default solution is S1, which will be implemented >>>>>> unless there is WG consensus demonstrated to >>>>>> do something else. >>>>>=20 >>>>> The biggest problem with S1 is that it may mislead readers into >>>>> thinking: "Hey, now I understand how namespaces work in = groupings!" >>>>>=20 >>>>> I also don't like the idea of defining an ad hoc extension. >>>>=20 >>>> I disagree. I think an extension is the best solution in this = case. >>>> However, we can use a different name than 'structure'. 'structure' >>>> was originally my proposal for a built-in statement (YANG 1.1) for >>>> this purpose. We can call it 'restconf-structure' or = 'restconf-data' >>>> or something. >>>=20 >>> So another document that wants to do the same should define its own = ad >>> hoc extension? Or import the ietf-restconf module? >>=20 >> Suppose we make a new document that defines a new RESTCONF resource >> type, and we need a structure for it, then that document would import >> and use 'restconf-structure'. >>=20 >>>>> If we want >>>>> to turn YANG into a general schema language, it should be done >>>>> properly. >>>>>=20 >>>>> I think the simplest solution would be to remove the groupings and >>>>> have >>>>> "errors", "restconf", "collection" and "notification" as top-level >>>>> containers. The namespace assignment then follows YANG rules. >>>>=20 >>>> This is also _very_ misleading, b/c then it looks like a normal = config >>>> or state module, which one would expect a server to implement in = the >>>> normal way. >>>=20 >>> What makes the solutions with groupings or extensions different? >>=20 >> I agree that groupings are misleading. But using an extension would >> be different, b/c the extension defines the semantics - this is not >> config or oper state, but something else. >>=20 >=20 >=20 >=20 > I do not understand why these are special or misleading groupings. > I cannot find any text in any RFC that says a YANG module with > just groupings in it is invalid, improper, or even discouraged. This is not the problem - what I consider seriously broken is the = handling of the namespace. The description of the issue says: The namespace and module-name of the content are not identified in = YANG. However, in the draft the content happens to receive the namespace and = module-name of the ietf-restconf module. There is no way how this can be = achieved unless these groupings are used in that module. Lada >=20 > I am already using 1 of these groupings in a logging model. > Please explain why these are special groupings that cannot > be used in a normal data model in another module. >=20 > That is why I prefer solution S2-B >=20 > rc:structure errors { > uses errors; > } >=20 > This assigns a module-name and a namespace and does not > preclude re-usage of the data within a larger data structure. >=20 >=20 >>> In >>> any case, the module description has to state very clearly that it = is >>> a strawman module that=E2=80=99s not supposed to be used in the = normal >>> NETCONF/RESTCONF way. But if you above that deviate from YANG >>> semantics, as the groupings do, you cannot even use standard YANG >>> tools because they would produce wrong results. >>>=20 >>> If the module is as I proposed, I can still use pyang for generating >>> correct DSDL schemas, XML-JSON mapping etc. >>>=20 >>> And if a server implementor likes the module and decides to = implement >>> it as if it was a normal module, so what? >>>=20 >>>>=20 >>>>> S3 should IMO be fine, too, the structures aren't that = complicated. >>>>=20 >>>> I can see only drawbacks compared to S2. Whatever we do in text it >>>> will be less precise than an extension. >>>=20 >>> I prefer less precise to precise but wrong. >>=20 >> An extension is in no way wrong. >>=20 >=20 > agreed >=20 >>> Keep in mind that you are >>> a YANG designer so you are not as likely to get confused by language >>> anomalies as an average reader of the RESTCONF document. >>=20 >>=20 >> /martin >=20 > Andy -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Thu Dec 11 07:12:29 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13C381A9028 for ; Thu, 11 Dec 2014 07:12:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.379 X-Spam-Level: X-Spam-Status: No, score=-1.379 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, J_CHICKENPOX_29=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M84IEqKOv5Na for ; Thu, 11 Dec 2014 07:12:25 -0800 (PST) Received: from mail-lb0-f169.google.com (mail-lb0-f169.google.com [209.85.217.169]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3647F1A902E for ; Thu, 11 Dec 2014 07:12:25 -0800 (PST) Received: by mail-lb0-f169.google.com with SMTP id p9so4343913lbv.28 for ; Thu, 11 Dec 2014 07:12:23 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=aNH9A4NuaMDF+I1i3EMdyDETc1kqIVwFVVcEfLHVyQs=; b=F2bkk2FvkAtILQGqID+ZS/nJfsw76AxbpUnFiDt3grGRjlCk+kh0yOW/Hlrbl7dIMO 8LBKNHrXnJEWVv+8a5ohwNh7da3J2ASF+ex04qZ64PQWJO7cmR2gUq8l2WcH0tgdEtMD eIIILlmSBgoam9YoEI0UrwAt6+Ex/OoywEw6oxaCFqMA8QacickG4lsMpYH4xZnw5uJ+ Pdy+EwAJQzJxn6Ia+OGzyYTM/CcUdd4pDCacAsaSOyyobrZeNr0vFnCkwoaBNV6rIXnh SRIJWKriK+1b0HIwerlQUvRbVQaIN0ziR32Vg1wm9/wB7UcVgU/uyCCLS3qaKvTHU50l GT8Q== X-Gm-Message-State: ALoCoQkxi1D7ZkY8IoO99VktA/IAdOnWl/tK3+tT67MkEAJd65x04lU5TFBgWsoEReDE2Y3NKBSI MIME-Version: 1.0 X-Received: by 10.112.12.65 with SMTP id w1mr10396239lbb.68.1418310743448; Thu, 11 Dec 2014 07:12:23 -0800 (PST) Received: by 10.112.157.233 with HTTP; Thu, 11 Dec 2014 07:12:23 -0800 (PST) In-Reply-To: References: <20141211.124922.734445723149087483.mbj@tail-f.com> <20141211.134843.810246336811127833.mbj@tail-f.com> Date: Thu, 11 Dec 2014 07:12:23 -0800 Message-ID: From: Andy Bierman To: Ladislav Lhotka Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/nt4slnS2qZPayIZo1NIID2-1MmA Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 15:12:27 -0000 On Thu, Dec 11, 2014 at 7:07 AM, Ladislav Lhotka wrote: > >> On 11 Dec 2014, at 15:52, Andy Bierman wrote: >> >> On Thu, Dec 11, 2014 at 4:48 AM, Martin Bjorklund wrote= : >>> Ladislav Lhotka wrote: >>>> >>>>> On 11 Dec 2014, at 12:49, Martin Bjorklund wrote: >>>>> >>>>> Ladislav Lhotka wrote: >>>>>> Andy Bierman writes: >>>>>> >>>>>>> Hi, >>>>>>> >>>>>>> A new issue has been added to the tracker: >>>>>>> >>>>>>> https://github.com/netconf-wg/restconf/issues/15 >>>>>>> >>>>>>> There are 3 solutions mentioned. >>>>>>> The default solution is S1, which will be implemented >>>>>>> unless there is WG consensus demonstrated to >>>>>>> do something else. >>>>>> >>>>>> The biggest problem with S1 is that it may mislead readers into >>>>>> thinking: "Hey, now I understand how namespaces work in groupings!" >>>>>> >>>>>> I also don't like the idea of defining an ad hoc extension. >>>>> >>>>> I disagree. I think an extension is the best solution in this case. >>>>> However, we can use a different name than 'structure'. 'structure' >>>>> was originally my proposal for a built-in statement (YANG 1.1) for >>>>> this purpose. We can call it 'restconf-structure' or 'restconf-data' >>>>> or something. >>>> >>>> So another document that wants to do the same should define its own ad >>>> hoc extension? Or import the ietf-restconf module? >>> >>> Suppose we make a new document that defines a new RESTCONF resource >>> type, and we need a structure for it, then that document would import >>> and use 'restconf-structure'. >>> >>>>>> If we want >>>>>> to turn YANG into a general schema language, it should be done >>>>>> properly. >>>>>> >>>>>> I think the simplest solution would be to remove the groupings and >>>>>> have >>>>>> "errors", "restconf", "collection" and "notification" as top-level >>>>>> containers. The namespace assignment then follows YANG rules. >>>>> >>>>> This is also _very_ misleading, b/c then it looks like a normal confi= g >>>>> or state module, which one would expect a server to implement in the >>>>> normal way. >>>> >>>> What makes the solutions with groupings or extensions different? >>> >>> I agree that groupings are misleading. But using an extension would >>> be different, b/c the extension defines the semantics - this is not >>> config or oper state, but something else. >>> >> >> >> >> I do not understand why these are special or misleading groupings. >> I cannot find any text in any RFC that says a YANG module with >> just groupings in it is invalid, improper, or even discouraged. > > This is not the problem - what I consider seriously broken is the handlin= g of the namespace. The description of the issue says: > > The namespace and module-name of the content are not identified in YA= NG. > That is not solution S2-B. That is solution S-1, which Phil also rejected. > However, in the draft the content happens to receive the namespace and mo= dule-name of the ietf-restconf module. There is no way how this can be achi= eved unless these groupings are used in that module. Solution S2-B would assign a module-name and namespace as defined by the extension we add. The extension, groupings and extension usage would all be in ietf-restconf.yang. > > Lada > Andy >> >> I am already using 1 of these groupings in a logging model. >> Please explain why these are special groupings that cannot >> be used in a normal data model in another module. >> >> That is why I prefer solution S2-B >> >> rc:structure errors { >> uses errors; >> } >> >> This assigns a module-name and a namespace and does not >> preclude re-usage of the data within a larger data structure. >> >> >>>> In >>>> any case, the module description has to state very clearly that it is >>>> a strawman module that=E2=80=99s not supposed to be used in the normal >>>> NETCONF/RESTCONF way. But if you above that deviate from YANG >>>> semantics, as the groupings do, you cannot even use standard YANG >>>> tools because they would produce wrong results. >>>> >>>> If the module is as I proposed, I can still use pyang for generating >>>> correct DSDL schemas, XML-JSON mapping etc. >>>> >>>> And if a server implementor likes the module and decides to implement >>>> it as if it was a normal module, so what? >>>> >>>>> >>>>>> S3 should IMO be fine, too, the structures aren't that complicated. >>>>> >>>>> I can see only drawbacks compared to S2. Whatever we do in text it >>>>> will be less precise than an extension. >>>> >>>> I prefer less precise to precise but wrong. >>> >>> An extension is in no way wrong. >>> >> >> agreed >> >>>> Keep in mind that you are >>>> a YANG designer so you are not as likely to get confused by language >>>> anomalies as an average reader of the RESTCONF document. >>> >>> >>> /martin >> >> Andy > > -- > Ladislav Lhotka, CZ.NIC Labs > PGP Key ID: E74E8C0C > > > > From nobody Thu Dec 11 07:35:40 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 548BE1A1BCA for ; Thu, 11 Dec 2014 07:35:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.061 X-Spam-Level: X-Spam-Status: No, score=-0.061 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, J_CHICKENPOX_29=0.6, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hhLsGHgc7Ggj for ; Thu, 11 Dec 2014 07:35:33 -0800 (PST) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 890F91A1BAE for ; Thu, 11 Dec 2014 07:35:33 -0800 (PST) Received: from [195.113.220.110] (unknown [195.113.220.110]) by mail.nic.cz (Postfix) with ESMTPSA id 08A68140AE9; Thu, 11 Dec 2014 16:35:32 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1418312132; bh=RupncaWOpTkaDuM4C0FsRbfOr7tOyN01qm73j/ib6jQ=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=hxxS2fWvswSi5LD5BoJhATfpPOH+h7wKK2arHSWyd0JVbaxIORXbZZworaGwU8VRu TU6QXVlLjF8gqbhzzwJkZEvh00kZxTxGMBykLwsoUL30862I9xsgPU0/DfaMKJQckc 8HFXlEQ5O8D4m4Q8nz5wXE7dVnO2RugcFgToF0kc= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) From: Ladislav Lhotka In-Reply-To: Date: Thu, 11 Dec 2014 16:35:31 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20141211.124922.734445723149087483.mbj@tail-f.com> <20141211.134843.810246336811127833.mbj@tail-f.com> To: Andy Bierman X-Mailer: Apple Mail (2.1993) X-Virus-Scanned: clamav-milter 0.98.1 at mail X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/XZcpckjKMaogTY1fj6NY3j2063E Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 15:35:35 -0000 > On 11 Dec 2014, at 16:12, Andy Bierman wrote: >=20 > On Thu, Dec 11, 2014 at 7:07 AM, Ladislav Lhotka = wrote: >>=20 >>> On 11 Dec 2014, at 15:52, Andy Bierman wrote: >>>=20 >>> On Thu, Dec 11, 2014 at 4:48 AM, Martin Bjorklund = wrote: >>>> Ladislav Lhotka wrote: >>>>>=20 >>>>>> On 11 Dec 2014, at 12:49, Martin Bjorklund = wrote: >>>>>>=20 >>>>>> Ladislav Lhotka wrote: >>>>>>> Andy Bierman writes: >>>>>>>=20 >>>>>>>> Hi, >>>>>>>>=20 >>>>>>>> A new issue has been added to the tracker: >>>>>>>>=20 >>>>>>>> https://github.com/netconf-wg/restconf/issues/15 >>>>>>>>=20 >>>>>>>> There are 3 solutions mentioned. >>>>>>>> The default solution is S1, which will be implemented >>>>>>>> unless there is WG consensus demonstrated to >>>>>>>> do something else. >>>>>>>=20 >>>>>>> The biggest problem with S1 is that it may mislead readers into >>>>>>> thinking: "Hey, now I understand how namespaces work in = groupings!" >>>>>>>=20 >>>>>>> I also don't like the idea of defining an ad hoc extension. >>>>>>=20 >>>>>> I disagree. I think an extension is the best solution in this = case. >>>>>> However, we can use a different name than 'structure'. = 'structure' >>>>>> was originally my proposal for a built-in statement (YANG 1.1) = for >>>>>> this purpose. We can call it 'restconf-structure' or = 'restconf-data' >>>>>> or something. >>>>>=20 >>>>> So another document that wants to do the same should define its = own ad >>>>> hoc extension? Or import the ietf-restconf module? >>>>=20 >>>> Suppose we make a new document that defines a new RESTCONF resource >>>> type, and we need a structure for it, then that document would = import >>>> and use 'restconf-structure'. >>>>=20 >>>>>>> If we want >>>>>>> to turn YANG into a general schema language, it should be done >>>>>>> properly. >>>>>>>=20 >>>>>>> I think the simplest solution would be to remove the groupings = and >>>>>>> have >>>>>>> "errors", "restconf", "collection" and "notification" as = top-level >>>>>>> containers. The namespace assignment then follows YANG rules. >>>>>>=20 >>>>>> This is also _very_ misleading, b/c then it looks like a normal = config >>>>>> or state module, which one would expect a server to implement in = the >>>>>> normal way. >>>>>=20 >>>>> What makes the solutions with groupings or extensions different? >>>>=20 >>>> I agree that groupings are misleading. But using an extension = would >>>> be different, b/c the extension defines the semantics - this is not >>>> config or oper state, but something else. >>>>=20 >>>=20 >>>=20 >>>=20 >>> I do not understand why these are special or misleading groupings. >>> I cannot find any text in any RFC that says a YANG module with >>> just groupings in it is invalid, improper, or even discouraged. >>=20 >> This is not the problem - what I consider seriously broken is the = handling of the namespace. The description of the issue says: >>=20 >> The namespace and module-name of the content are not identified in = YANG. >>=20 >=20 > That is not solution S2-B. > That is solution S-1, which Phil also rejected. >=20 >=20 >> However, in the draft the content happens to receive the namespace = and module-name of the ietf-restconf module. There is no way how this = can be achieved unless these groupings are used in that module. >=20 > Solution S2-B would assign a module-name and namespace > as defined by the extension we add. The extension, groupings > and extension usage would all be in ietf-restconf.yang. Such an extension changes the semantics of the built-in =E2=80=9Cgrouping=E2= =80=9D statement. Let=E2=80=99s start designing YANG 2.0 as a general = multi-encoding schema language, but please don=E2=80=99t do this. If it = is only to be used in one or two modules, it is not worth the hassle and = confusion. Lada=20 >=20 >=20 >>=20 >> Lada >>=20 >=20 > Andy >=20 >>>=20 >>> I am already using 1 of these groupings in a logging model. >>> Please explain why these are special groupings that cannot >>> be used in a normal data model in another module. >>>=20 >>> That is why I prefer solution S2-B >>>=20 >>> rc:structure errors { >>> uses errors; >>> } >>>=20 >>> This assigns a module-name and a namespace and does not >>> preclude re-usage of the data within a larger data structure. >>>=20 >>>=20 >>>>> In >>>>> any case, the module description has to state very clearly that it = is >>>>> a strawman module that=E2=80=99s not supposed to be used in the = normal >>>>> NETCONF/RESTCONF way. But if you above that deviate from YANG >>>>> semantics, as the groupings do, you cannot even use standard YANG >>>>> tools because they would produce wrong results. >>>>>=20 >>>>> If the module is as I proposed, I can still use pyang for = generating >>>>> correct DSDL schemas, XML-JSON mapping etc. >>>>>=20 >>>>> And if a server implementor likes the module and decides to = implement >>>>> it as if it was a normal module, so what? >>>>>=20 >>>>>>=20 >>>>>>> S3 should IMO be fine, too, the structures aren't that = complicated. >>>>>>=20 >>>>>> I can see only drawbacks compared to S2. Whatever we do in text = it >>>>>> will be less precise than an extension. >>>>>=20 >>>>> I prefer less precise to precise but wrong. >>>>=20 >>>> An extension is in no way wrong. >>>>=20 >>>=20 >>> agreed >>>=20 >>>>> Keep in mind that you are >>>>> a YANG designer so you are not as likely to get confused by = language >>>>> anomalies as an average reader of the RESTCONF document. >>>>=20 >>>>=20 >>>> /martin >>>=20 >>> Andy >>=20 >> -- >> Ladislav Lhotka, CZ.NIC Labs >> PGP Key ID: E74E8C0C -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Thu Dec 11 07:42:08 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E5CD1A6F39 for ; Thu, 11 Dec 2014 07:42:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IpYKwOSliQyU for ; Thu, 11 Dec 2014 07:42:05 -0800 (PST) Received: from mail.tail-f.com (mail.tail-f.com [83.241.162.140]) by ietfa.amsl.com (Postfix) with ESMTP id B24861A6F28 for ; Thu, 11 Dec 2014 07:42:04 -0800 (PST) Received: from localhost (x15.tail-f.com [192.168.1.60]) by mail.tail-f.com (Postfix) with ESMTPSA id 092791280A90; Thu, 11 Dec 2014 16:42:04 +0100 (CET) Date: Thu, 11 Dec 2014 16:42:03 +0100 (CET) Message-Id: <20141211.164203.710264078456727835.mbj@tail-f.com> To: lhotka@nic.cz From: Martin Bjorklund In-Reply-To: References: X-Mailer: Mew version 6.5 on Emacs 23.4 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=utf-8 Content-Transfer-Encoding: base64 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/dm4_u5p9ENRRzwNyqnr-fw1Z9qA Cc: netconf@ietf.org Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 15:42:06 -0000 TGFkaXNsYXYgTGhvdGthIDxsaG90a2FAbmljLmN6PiB3cm90ZToNCj4gDQo+ID4gT24gMTEgRGVj IDIwMTQsIGF0IDE2OjEyLCBBbmR5IEJpZXJtYW4gPGFuZHlAeXVtYXdvcmtzLmNvbT4gd3JvdGU6 DQo+ID4gDQo+ID4gT24gVGh1LCBEZWMgMTEsIDIwMTQgYXQgNzowNyBBTSwgTGFkaXNsYXYgTGhv dGthIDxsaG90a2FAbmljLmN6Pg0KPiA+IHdyb3RlOg0KPiA+PiANCj4gPj4+IE9uIDExIERlYyAy MDE0LCBhdCAxNTo1MiwgQW5keSBCaWVybWFuIDxhbmR5QHl1bWF3b3Jrcy5jb20+IHdyb3RlOg0K PiA+Pj4gDQo+ID4+PiBPbiBUaHUsIERlYyAxMSwgMjAxNCBhdCA0OjQ4IEFNLCBNYXJ0aW4gQmpv cmtsdW5kIDxtYmpAdGFpbC1mLmNvbT4NCj4gPj4+IHdyb3RlOg0KPiA+Pj4+IExhZGlzbGF2IExo b3RrYSA8bGhvdGthQG5pYy5jej4gd3JvdGU6DQo+ID4+Pj4+IA0KPiA+Pj4+Pj4gT24gMTEgRGVj IDIwMTQsIGF0IDEyOjQ5LCBNYXJ0aW4gQmpvcmtsdW5kIDxtYmpAdGFpbC1mLmNvbT4gd3JvdGU6 DQo+ID4+Pj4+PiANCj4gPj4+Pj4+IExhZGlzbGF2IExob3RrYSA8bGhvdGthQG5pYy5jej4gd3Jv dGU6DQo+ID4+Pj4+Pj4gQW5keSBCaWVybWFuIDxhbmR5QHl1bWF3b3Jrcy5jb20+IHdyaXRlczoN Cj4gPj4+Pj4+PiANCj4gPj4+Pj4+Pj4gSGksDQo+ID4+Pj4+Pj4+IA0KPiA+Pj4+Pj4+PiBBIG5l dyBpc3N1ZSBoYXMgYmVlbiBhZGRlZCB0byB0aGUgdHJhY2tlcjoNCj4gPj4+Pj4+Pj4gDQo+ID4+ Pj4+Pj4+IGh0dHBzOi8vZ2l0aHViLmNvbS9uZXRjb25mLXdnL3Jlc3Rjb25mL2lzc3Vlcy8xNQ0K PiA+Pj4+Pj4+PiANCj4gPj4+Pj4+Pj4gVGhlcmUgYXJlIDMgc29sdXRpb25zIG1lbnRpb25lZC4N Cj4gPj4+Pj4+Pj4gVGhlIGRlZmF1bHQgc29sdXRpb24gaXMgUzEsIHdoaWNoIHdpbGwgYmUgaW1w bGVtZW50ZWQNCj4gPj4+Pj4+Pj4gdW5sZXNzIHRoZXJlIGlzIFdHIGNvbnNlbnN1cyBkZW1vbnN0 cmF0ZWQgdG8NCj4gPj4+Pj4+Pj4gZG8gc29tZXRoaW5nIGVsc2UuDQo+ID4+Pj4+Pj4gDQo+ID4+ Pj4+Pj4gVGhlIGJpZ2dlc3QgcHJvYmxlbSB3aXRoIFMxIGlzIHRoYXQgaXQgbWF5IG1pc2xlYWQg cmVhZGVycyBpbnRvDQo+ID4+Pj4+Pj4gdGhpbmtpbmc6ICJIZXksIG5vdyBJIHVuZGVyc3RhbmQg aG93IG5hbWVzcGFjZXMgd29yayBpbiBncm91cGluZ3MhIg0KPiA+Pj4+Pj4+IA0KPiA+Pj4+Pj4+ IEkgYWxzbyBkb24ndCBsaWtlIHRoZSBpZGVhIG9mIGRlZmluaW5nIGFuIGFkIGhvYyBleHRlbnNp b24uDQo+ID4+Pj4+PiANCj4gPj4+Pj4+IEkgZGlzYWdyZWUuICBJIHRoaW5rIGFuIGV4dGVuc2lv biBpcyB0aGUgYmVzdCBzb2x1dGlvbiBpbiB0aGlzIGNhc2UuDQo+ID4+Pj4+PiBIb3dldmVyLCB3 ZSBjYW4gdXNlIGEgZGlmZmVyZW50IG5hbWUgdGhhbiAnc3RydWN0dXJlJy4gICdzdHJ1Y3R1cmUn DQo+ID4+Pj4+PiB3YXMgb3JpZ2luYWxseSBteSBwcm9wb3NhbCBmb3IgYSBidWlsdC1pbiBzdGF0 ZW1lbnQgKFlBTkcgMS4xKSBmb3INCj4gPj4+Pj4+IHRoaXMgcHVycG9zZS4gIFdlIGNhbiBjYWxs IGl0ICdyZXN0Y29uZi1zdHJ1Y3R1cmUnIG9yICdyZXN0Y29uZi1kYXRhJw0KPiA+Pj4+Pj4gb3Ig c29tZXRoaW5nLg0KPiA+Pj4+PiANCj4gPj4+Pj4gU28gYW5vdGhlciBkb2N1bWVudCB0aGF0IHdh bnRzIHRvIGRvIHRoZSBzYW1lIHNob3VsZCBkZWZpbmUgaXRzIG93biBhZA0KPiA+Pj4+PiBob2Mg ZXh0ZW5zaW9uPyBPciBpbXBvcnQgdGhlIGlldGYtcmVzdGNvbmYgbW9kdWxlPw0KPiA+Pj4+IA0K PiA+Pj4+IFN1cHBvc2Ugd2UgbWFrZSBhIG5ldyBkb2N1bWVudCB0aGF0IGRlZmluZXMgYSBuZXcg UkVTVENPTkYgcmVzb3VyY2UNCj4gPj4+PiB0eXBlLCBhbmQgd2UgbmVlZCBhIHN0cnVjdHVyZSBm b3IgaXQsIHRoZW4gdGhhdCBkb2N1bWVudCB3b3VsZCBpbXBvcnQNCj4gPj4+PiBhbmQgdXNlICdy ZXN0Y29uZi1zdHJ1Y3R1cmUnLg0KPiA+Pj4+IA0KPiA+Pj4+Pj4+IElmIHdlIHdhbnQNCj4gPj4+ Pj4+PiB0byB0dXJuIFlBTkcgaW50byBhIGdlbmVyYWwgc2NoZW1hIGxhbmd1YWdlLCBpdCBzaG91 bGQgYmUgZG9uZQ0KPiA+Pj4+Pj4+IHByb3Blcmx5Lg0KPiA+Pj4+Pj4+IA0KPiA+Pj4+Pj4+IEkg dGhpbmsgdGhlIHNpbXBsZXN0IHNvbHV0aW9uIHdvdWxkIGJlIHRvIHJlbW92ZSB0aGUgZ3JvdXBp bmdzIGFuZA0KPiA+Pj4+Pj4+IGhhdmUNCj4gPj4+Pj4+PiAiZXJyb3JzIiwgInJlc3Rjb25mIiwg ImNvbGxlY3Rpb24iIGFuZCAibm90aWZpY2F0aW9uIiBhcyB0b3AtbGV2ZWwNCj4gPj4+Pj4+PiBj b250YWluZXJzLiBUaGUgbmFtZXNwYWNlIGFzc2lnbm1lbnQgdGhlbiBmb2xsb3dzIFlBTkcgcnVs ZXMuDQo+ID4+Pj4+PiANCj4gPj4+Pj4+IFRoaXMgaXMgYWxzbyBfdmVyeV8gbWlzbGVhZGluZywg Yi9jIHRoZW4gaXQgbG9va3MgbGlrZSBhIG5vcm1hbCBjb25maWcNCj4gPj4+Pj4+IG9yIHN0YXRl IG1vZHVsZSwgd2hpY2ggb25lIHdvdWxkIGV4cGVjdCBhIHNlcnZlciB0byBpbXBsZW1lbnQgaW4g dGhlDQo+ID4+Pj4+PiBub3JtYWwgd2F5Lg0KPiA+Pj4+PiANCj4gPj4+Pj4gV2hhdCBtYWtlcyB0 aGUgc29sdXRpb25zIHdpdGggZ3JvdXBpbmdzIG9yIGV4dGVuc2lvbnMgZGlmZmVyZW50Pw0KPiA+ Pj4+IA0KPiA+Pj4+IEkgYWdyZWUgdGhhdCBncm91cGluZ3MgYXJlIG1pc2xlYWRpbmcuICBCdXQg dXNpbmcgYW4gZXh0ZW5zaW9uIHdvdWxkDQo+ID4+Pj4gYmUgZGlmZmVyZW50LCBiL2MgdGhlIGV4 dGVuc2lvbiBkZWZpbmVzIHRoZSBzZW1hbnRpY3MgLSB0aGlzIGlzIG5vdA0KPiA+Pj4+IGNvbmZp ZyBvciBvcGVyIHN0YXRlLCBidXQgc29tZXRoaW5nIGVsc2UuDQo+ID4+Pj4gDQo+ID4+PiANCj4g Pj4+IA0KPiA+Pj4gDQo+ID4+PiBJIGRvIG5vdCB1bmRlcnN0YW5kIHdoeSB0aGVzZSBhcmUgc3Bl Y2lhbCBvciBtaXNsZWFkaW5nIGdyb3VwaW5ncy4NCj4gPj4+IEkgY2Fubm90IGZpbmQgYW55IHRl eHQgaW4gYW55IFJGQyB0aGF0IHNheXMgYSBZQU5HIG1vZHVsZSB3aXRoDQo+ID4+PiBqdXN0IGdy b3VwaW5ncyBpbiBpdCBpcyBpbnZhbGlkLCBpbXByb3Blciwgb3IgZXZlbiBkaXNjb3VyYWdlZC4N Cj4gPj4gDQo+ID4+IFRoaXMgaXMgbm90IHRoZSBwcm9ibGVtIC0gd2hhdCBJIGNvbnNpZGVyIHNl cmlvdXNseSBicm9rZW4gaXMgdGhlDQo+ID4+IGhhbmRsaW5nIG9mIHRoZSBuYW1lc3BhY2UuIFRo ZSBkZXNjcmlwdGlvbiBvZiB0aGUgaXNzdWUgc2F5czoNCj4gPj4gDQo+ID4+ICAgIFRoZSBuYW1l c3BhY2UgYW5kIG1vZHVsZS1uYW1lIG9mIHRoZSBjb250ZW50IGFyZSBub3QgaWRlbnRpZmllZCBp bg0KPiA+PiAgICBZQU5HLg0KPiA+PiANCj4gPiANCj4gPiBUaGF0IGlzIG5vdCBzb2x1dGlvbiBT Mi1CLg0KPiA+IFRoYXQgaXMgc29sdXRpb24gUy0xLCB3aGljaCBQaGlsIGFsc28gcmVqZWN0ZWQu DQo+ID4gDQo+ID4gDQo+ID4+IEhvd2V2ZXIsIGluIHRoZSBkcmFmdCB0aGUgY29udGVudCBoYXBw ZW5zIHRvIHJlY2VpdmUgdGhlIG5hbWVzcGFjZSBhbmQNCj4gPj4gbW9kdWxlLW5hbWUgb2YgdGhl IGlldGYtcmVzdGNvbmYgbW9kdWxlLiBUaGVyZSBpcyBubyB3YXkgaG93IHRoaXMgY2FuDQo+ID4+ IGJlIGFjaGlldmVkIHVubGVzcyB0aGVzZSBncm91cGluZ3MgYXJlIHVzZWQgaW4gdGhhdCBtb2R1 bGUuDQo+ID4gDQo+ID4gU29sdXRpb24gUzItQiB3b3VsZCBhc3NpZ24gYSBtb2R1bGUtbmFtZSBh bmQgbmFtZXNwYWNlDQo+ID4gYXMgZGVmaW5lZCBieSB0aGUgZXh0ZW5zaW9uIHdlIGFkZC4gIFRo ZSBleHRlbnNpb24sIGdyb3VwaW5ncw0KPiA+IGFuZCBleHRlbnNpb24gdXNhZ2Ugd291bGQgYWxs IGJlIGluIGlldGYtcmVzdGNvbmYueWFuZy4NCj4gDQo+IFN1Y2ggYW4gZXh0ZW5zaW9uIGNoYW5n ZXMgdGhlIHNlbWFudGljcyBvZiB0aGUgYnVpbHQtaW4g4oCcZ3JvdXBpbmfigJ0NCj4gc3RhdGVt ZW50Lg0KDQpObyEgIFRoZSBncm91cGluZyBpcyBqdXN0IGxpa2UgYW55IG90aGVyIGdyb3VwaW5n Lg0KDQoNCi9tYXJ0aW4NCg== From nobody Thu Dec 11 08:05:22 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 004371ACF64 for ; Thu, 11 Dec 2014 08:05:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z4M_kXuY2ln1 for ; Thu, 11 Dec 2014 08:05:10 -0800 (PST) Received: from mail-lb0-f174.google.com (mail-lb0-f174.google.com [209.85.217.174]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98DE11ACF08 for ; Thu, 11 Dec 2014 08:04:55 -0800 (PST) Received: by mail-lb0-f174.google.com with SMTP id 10so4479223lbg.33 for ; Thu, 11 Dec 2014 08:04:54 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=dfoaNBjyWLqp1MUDSRK0wGQojmWD3eNVUXHGH3JVkhM=; b=a6zC7BeKn/QD4mGRZzv1ROhDwZzK69WVn3W1pSRGZmDPufvQMKj/+yH7pOb46uvakI SUhMGIGARPes8XUeSj0gEYAALHAm/BueRaKkeWgOIfUCfrg5JyXQDU9bkHD3BpXCcuJI QG5mn9VMUUVmm+msbl2ZLjnW2CnlFpB1o45A4M7eU8gE47NZjLbjDi1dAE8+QF35oYRz ORmAZqM4HEDMiIww+lU+1/zpPUJMD0daoDB7GAVql08TLnUWNbh91rggUX5vbEJszQMd JFDYoCuu5yU7ARF6GJQlX9W3xre6NIkcl2JWVnMmIqff5SyelemcHAXbEgQFu4VHyT/C 22Cw== X-Gm-Message-State: ALoCoQlE7YIzrDPhCaXW6F3kOVfwQp9fYHjsx40YW6SliNVfUCFU5U1df41M3Gh1gEVf2fP3znjw MIME-Version: 1.0 X-Received: by 10.152.206.108 with SMTP id ln12mr5537461lac.3.1418313894060; Thu, 11 Dec 2014 08:04:54 -0800 (PST) Received: by 10.112.157.233 with HTTP; Thu, 11 Dec 2014 08:04:53 -0800 (PST) In-Reply-To: <20141211.164203.710264078456727835.mbj@tail-f.com> References: <20141211.164203.710264078456727835.mbj@tail-f.com> Date: Thu, 11 Dec 2014 08:04:53 -0800 Message-ID: From: Andy Bierman To: Martin Bjorklund Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/HJtHC04MZjz8QyMXJ5iK6z09k3k Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 16:05:17 -0000 On Thu, Dec 11, 2014 at 7:42 AM, Martin Bjorklund wrote: > Ladislav Lhotka wrote: >> >> > On 11 Dec 2014, at 16:12, Andy Bierman wrote: >> > >> > On Thu, Dec 11, 2014 at 7:07 AM, Ladislav Lhotka >> > wrote: >> >> >> >>> On 11 Dec 2014, at 15:52, Andy Bierman wrote: >> >>> >> >>> On Thu, Dec 11, 2014 at 4:48 AM, Martin Bjorklund >> >>> wrote: >> >>>> Ladislav Lhotka wrote: >> >>>>> >> >>>>>> On 11 Dec 2014, at 12:49, Martin Bjorklund wrote= : >> >>>>>> >> >>>>>> Ladislav Lhotka wrote: >> >>>>>>> Andy Bierman writes: >> >>>>>>> >> >>>>>>>> Hi, >> >>>>>>>> >> >>>>>>>> A new issue has been added to the tracker: >> >>>>>>>> >> >>>>>>>> https://github.com/netconf-wg/restconf/issues/15 >> >>>>>>>> >> >>>>>>>> There are 3 solutions mentioned. >> >>>>>>>> The default solution is S1, which will be implemented >> >>>>>>>> unless there is WG consensus demonstrated to >> >>>>>>>> do something else. >> >>>>>>> >> >>>>>>> The biggest problem with S1 is that it may mislead readers into >> >>>>>>> thinking: "Hey, now I understand how namespaces work in grouping= s!" >> >>>>>>> >> >>>>>>> I also don't like the idea of defining an ad hoc extension. >> >>>>>> >> >>>>>> I disagree. I think an extension is the best solution in this ca= se. >> >>>>>> However, we can use a different name than 'structure'. 'structur= e' >> >>>>>> was originally my proposal for a built-in statement (YANG 1.1) fo= r >> >>>>>> this purpose. We can call it 'restconf-structure' or 'restconf-d= ata' >> >>>>>> or something. >> >>>>> >> >>>>> So another document that wants to do the same should define its ow= n ad >> >>>>> hoc extension? Or import the ietf-restconf module? >> >>>> >> >>>> Suppose we make a new document that defines a new RESTCONF resource >> >>>> type, and we need a structure for it, then that document would impo= rt >> >>>> and use 'restconf-structure'. >> >>>> >> >>>>>>> If we want >> >>>>>>> to turn YANG into a general schema language, it should be done >> >>>>>>> properly. >> >>>>>>> >> >>>>>>> I think the simplest solution would be to remove the groupings a= nd >> >>>>>>> have >> >>>>>>> "errors", "restconf", "collection" and "notification" as top-lev= el >> >>>>>>> containers. The namespace assignment then follows YANG rules. >> >>>>>> >> >>>>>> This is also _very_ misleading, b/c then it looks like a normal c= onfig >> >>>>>> or state module, which one would expect a server to implement in = the >> >>>>>> normal way. >> >>>>> >> >>>>> What makes the solutions with groupings or extensions different? >> >>>> >> >>>> I agree that groupings are misleading. But using an extension woul= d >> >>>> be different, b/c the extension defines the semantics - this is not >> >>>> config or oper state, but something else. >> >>>> >> >>> >> >>> >> >>> >> >>> I do not understand why these are special or misleading groupings. >> >>> I cannot find any text in any RFC that says a YANG module with >> >>> just groupings in it is invalid, improper, or even discouraged. >> >> >> >> This is not the problem - what I consider seriously broken is the >> >> handling of the namespace. The description of the issue says: >> >> >> >> The namespace and module-name of the content are not identified in >> >> YANG. >> >> >> > >> > That is not solution S2-B. >> > That is solution S-1, which Phil also rejected. >> > >> > >> >> However, in the draft the content happens to receive the namespace an= d >> >> module-name of the ietf-restconf module. There is no way how this can >> >> be achieved unless these groupings are used in that module. >> > >> > Solution S2-B would assign a module-name and namespace >> > as defined by the extension we add. The extension, groupings >> > and extension usage would all be in ietf-restconf.yang. >> >> Such an extension changes the semantics of the built-in =E2=80=9Cgroupin= g=E2=80=9D >> statement. > > No! The grouping is just like any other grouping. > Yes -- in order to apply YANG constraints like must/when, the context node has to be specified with a uses-stmt. This has always been true for groupings. The must/when expressions need to be considered carefully, since YANG does not constrain the context of the uses-stmt. YANG constraints do not apply when used inside an extension because the context is not any of the ones specified in the RFC. > > /martin Andy From nobody Thu Dec 11 08:12:06 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2F571A1A74 for ; Thu, 11 Dec 2014 08:12:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bk_zNsfjHJPr for ; Thu, 11 Dec 2014 08:11:59 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F9751A1A90 for ; Thu, 11 Dec 2014 08:11:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3398; q=dns/txt; s=iport; t=1418314319; x=1419523919; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=fsKcIXS3hs5zHmRXu6R27RFV1fsdfmSmK+WC6WyaGN0=; b=lZP20PtZe4aN2UmC/J8rbiWU9XC/H3ZKCsY+4HGPNPRMw1wi/NlYPqgY MCn2w6N15TDc1lg+g/sdaV2MqbgAxmfp+szScmqieIOjzwByy4zC+z3bk 4h3upZqAdhzfTcjhGwPYAXWPLSgYLxUsxsmnPRK4DV7RhDfCk0omgV+Rx A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmIFAOjBiVStJV2U/2dsb2JhbABZgwZSWATFagyFbAKBHRYBAQEBAX2EDAEBAQQBAQE3NBcEAgEZBAEBCwIBEQkHJwsUCQgBAQQTCAGIIw3YMwEBAQEBAQEBAQEBAQEBAQEBAQEBARePQTgGgxCBEwWNf4M+hj0wgi2NSiKDbG4BgUR+AQEB X-IronPort-AV: E=Sophos;i="5.07,558,1413244800"; d="scan'208";a="104827905" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-6.cisco.com with ESMTP; 11 Dec 2014 16:11:58 +0000 Received: from xhc-rcd-x03.cisco.com (xhc-rcd-x03.cisco.com [173.37.183.77]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id sBBGBwkZ022602 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Thu, 11 Dec 2014 16:11:58 GMT Received: from xmb-aln-x11.cisco.com ([169.254.6.205]) by xhc-rcd-x03.cisco.com ([173.37.183.77]) with mapi id 14.03.0195.001; Thu, 11 Dec 2014 10:11:58 -0600 From: "Eric Voit (evoit)" To: "netconf@ietf.org" Thread-Topic: New "-00": draft-voit-i2rs-pub-sub-requirements Thread-Index: AdAVViieql0DVYwjTDSQ2bF1EzwXyQAA7QaA Date: Thu, 11 Dec 2014 16:11:57 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.116.134.131] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/IR1cXlEoSuEVUN08H4ttI0Mmn-I Subject: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 16:12:05 -0000 I2RS has a number of YANG datastore subscription requirements. We have jus= t published a new draft assembling some of these requirements, and articula= ting what functions would be need to be supported by the subscribed YANG Da= tastore. Hopefully we can discuss this draft during one of the interims in January. Thanks! Eric, Alex, & Alberto -----Original Message----- From: i2rs [mailto:i2rs-bounces@ietf.org] On Behalf Of Eric Voit (evoit) Sent: Thursday, December 11, 2014 10:22 AM To: i2rs@ietf.org Cc: Alexander Clemm (alex); Alberto Gonzalez Prieto (albertgo) Subject: [i2rs] New "-00": draft-voit-i2rs-pub-sub-requirements A number of I2RS WG documents ask for Pub/Sub capabilities. Other WG have = addressed or are looking for similar mechanisms. The document=20 http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00=20 assembles a view of requirements for a YANG Datastore from an I2RS perspect= ive, and makes comparisons with capabilities in standards in and beyond the= IETF.=20 This document is a good companion document for https://tools.ietf.org/html/draft-netmod-clemm-datastore-push-00=20 Thanks, Eric , Alex, & Alberto -----Original Message----- From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]=20 Sent: Thursday, December 11, 2014 10:03 AM To: Alberto Gonzalez Prieto (albertgo); Alberto Gonzalez Prieto (albertgo);= Alexander Clemm (alex); Eric Voit (evoit); Alexander Clemm (alex); Eric Vo= it (evoit) Subject: New Version Notification for draft-voit-i2rs-pub-sub-requirements-= 00.txt A new version of I-D, draft-voit-i2rs-pub-sub-requirements-00.txt has been successfully submitted by Eric Voit and posted to the IETF reposit= ory. Name: draft-voit-i2rs-pub-sub-requirements Revision: 00 Title: Requirements for Subscription to YANG Datastores Document date: 2014-12-10 Group: Individual Submission Pages: 13 URL: http://www.ietf.org/internet-drafts/draft-voit-i2rs-pub-sub= -requirements-00.txt Status: https://datatracker.ietf.org/doc/draft-voit-i2rs-pub-sub-re= quirements/ Htmlized: http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirem= ents-00 Abstract: This document provides requirements for a service that allows client applications to subscribe to updates of a YANG datastore. Based on criteria negotiated as part of a subscription, updates will be pushed to targeted recipients. Such a capability eliminates the need for periodic polling of YANG datastores by applications and fills a functional gap in existing YANG transports (i.e. Netconf and Restconf). Such a service can be summarized as a "pub/sub" service for YANG datastore updates. Beyond a set of basic requirements for the service, various refinements are addressed. These refinements include: periodicity of object updates, filtering out of objects underneath a requested a subtree, and delivery QoS guarantees. = =20 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat _______________________________________________ i2rs mailing list i2rs@ietf.org https://www.ietf.org/mailman/listinfo/i2rs From nobody Thu Dec 11 11:17:35 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FE091ACF7F for ; Thu, 11 Dec 2014 11:17:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id emdDU-EPcIk5 for ; Thu, 11 Dec 2014 11:17:31 -0800 (PST) Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [93.183.12.32]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 294F51A8A5E for ; Thu, 11 Dec 2014 11:17:30 -0800 (PST) Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd001.nsn-inter.net (8.14.3/8.14.3) with ESMTP id sBBJHQrM031364 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 11 Dec 2014 19:17:26 GMT Received: from DEMUHTC004.nsn-intra.net ([10.159.42.35]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id sBBJHQwx013822 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 11 Dec 2014 20:17:26 +0100 Received: from DEMUHTC006.nsn-intra.net (10.159.42.37) by DEMUHTC004.nsn-intra.net (10.159.42.35) with Microsoft SMTP Server (TLS) id 14.3.195.1; Thu, 11 Dec 2014 20:17:25 +0100 Received: from DEMUMBX005.nsn-intra.net ([169.254.5.147]) by DEMUHTC006.nsn-intra.net ([10.159.42.37]) with mapi id 14.03.0195.001; Thu, 11 Dec 2014 20:17:25 +0100 From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Eric Voit (evoit)" , "netconf@ietf.org" Thread-Topic: New "-00": draft-voit-i2rs-pub-sub-requirements Thread-Index: AdAVViieql0DVYwjTDSQ2bF1EzwXyQAA7QaAAAdHoHA= Date: Thu, 11 Dec 2014 19:17:25 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.159.42.101] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-purgate-type: clean X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate: clean X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate-size: 4053 X-purgate-ID: 151667::1418325446-0000658F-0A3C7ADF/0/0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/3gh2mjgs954pcr-Y1b297lng-Hc Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 19:17:34 -0000 Hi Eric, can any of you attend the NETCONF interim meeting on Dec 15 and explain sho= rtly the focus of the draft? Cheers,=20 Mehmet=20 > -----Original Message----- > From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Eric Voi= t (evoit) > Sent: Thursday, December 11, 2014 5:12 PM > To: netconf@ietf.org > Subject: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements >=20 > I2RS has a number of YANG datastore subscription requirements. We have j= ust > published a new draft assembling some of these requirements, and articula= ting what > functions would be need to be supported by the subscribed YANG Datastore. >=20 > Hopefully we can discuss this draft during one of the interims in January= . >=20 > Thanks! > Eric, Alex, & Alberto >=20 > -----Original Message----- > From: i2rs [mailto:i2rs-bounces@ietf.org] On Behalf Of Eric Voit (evoit) > Sent: Thursday, December 11, 2014 10:22 AM > To: i2rs@ietf.org > Cc: Alexander Clemm (alex); Alberto Gonzalez Prieto (albertgo) > Subject: [i2rs] New "-00": draft-voit-i2rs-pub-sub-requirements >=20 > A number of I2RS WG documents ask for Pub/Sub capabilities. Other WG hav= e > addressed or are looking for similar mechanisms. The document > http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 > assembles a view of requirements for a YANG Datastore from an I2RS perspe= ctive, > and makes comparisons with capabilities in standards in and beyond the IE= TF. >=20 > This document is a good companion document for > https://tools.ietf.org/html/draft-netmod-clemm-datastore-push-00 >=20 > Thanks, > Eric , Alex, & Alberto >=20 > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Thursday, December 11, 2014 10:03 AM > To: Alberto Gonzalez Prieto (albertgo); Alberto Gonzalez Prieto (albertgo= ); Alexander > Clemm (alex); Eric Voit (evoit); Alexander Clemm (alex); Eric Voit (evoit= ) > Subject: New Version Notification for draft-voit-i2rs-pub-sub-requirement= s-00.txt >=20 >=20 > A new version of I-D, draft-voit-i2rs-pub-sub-requirements-00.txt > has been successfully submitted by Eric Voit and posted to the IETF repos= itory. >=20 > Name: draft-voit-i2rs-pub-sub-requirements > Revision: 00 > Title: Requirements for Subscription to YANG Datastores > Document date: 2014-12-10 > Group: Individual Submission > Pages: 13 > URL: http://www.ietf.org/internet-drafts/draft-voit-i2rs-pub-s= ub- > requirements-00.txt > Status: https://datatracker.ietf.org/doc/draft-voit-i2rs-pub-sub-= requirements/ > Htmlized: http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requir= ements-00 >=20 >=20 > Abstract: > This document provides requirements for a service that allows client > applications to subscribe to updates of a YANG datastore. Based on > criteria negotiated as part of a subscription, updates will be pushed > to targeted recipients. Such a capability eliminates the need for > periodic polling of YANG datastores by applications and fills a > functional gap in existing YANG transports (i.e. Netconf and > Restconf). Such a service can be summarized as a "pub/sub" service > for YANG datastore updates. Beyond a set of basic requirements for > the service, various refinements are addressed. These refinements > include: periodicity of object updates, filtering out of objects > underneath a requested a subtree, and delivery QoS guarantees. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion until the > htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 > _______________________________________________ > i2rs mailing list > i2rs@ietf.org > https://www.ietf.org/mailman/listinfo/i2rs >=20 > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf From nobody Thu Dec 11 12:33:01 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 319EA1A1A96 for ; Thu, 11 Dec 2014 12:33:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c-W7g_umgQ4d for ; Thu, 11 Dec 2014 12:32:58 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50A4F1A037B for ; Thu, 11 Dec 2014 12:32:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4528; q=dns/txt; s=iport; t=1418329978; x=1419539578; h=from:to:subject:date:message-id:in-reply-to:content-id: content-transfer-encoding:mime-version; bh=xgLO4tSP6yKZYJBNdqo5zFqASWDSr8m3co+Chaw17CI=; b=DE90FcUQkv9NnhOSvESpHLPdisWnuNhHKBv/y5tFNVpQVikfqZYs4XjD y7esAQUe9rLdxanpvfTMZZhDVRubJYvAtUT6td9j7RdaZm+WGM55Nn3wd I8Hi/PN4pH+n15UPWlIrmWaTiFu5SyZ7UwI9YwJpHdeovBmkTEk4l79Nj 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmQFAN7+iVStJV2T/2dsb2JhbABZgwZSWATDToIbCoUkSgKBHxYBAQEBAX2EDAEBAQQBAQE3NBcGAQgRBAEBDQERCS4LFAkIAQEEARIJiCMN2CIBAQEBAQEBAQEBAQEBAQEBAQEBAQEXj3kGhCMFjX+DPoUxgQwwgi2NSiKDbG6BRX4BAQE X-IronPort-AV: E=Sophos;i="5.07,559,1413244800"; d="scan'208";a="379537205" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-8.cisco.com with ESMTP; 11 Dec 2014 20:32:57 +0000 Received: from xhc-aln-x06.cisco.com (xhc-aln-x06.cisco.com [173.36.12.80]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id sBBKWvKr019637 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 11 Dec 2014 20:32:57 GMT Received: from xmb-rcd-x14.cisco.com ([169.254.4.121]) by xhc-aln-x06.cisco.com ([173.36.12.80]) with mapi id 14.03.0195.001; Thu, 11 Dec 2014 14:32:56 -0600 From: "Alberto Gonzalez Prieto (albertgo)" To: "Ersue, Mehmet (NSN - DE/Munich)" , "Eric Voit (evoit)" , "netconf@ietf.org" Thread-Topic: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements Thread-Index: AdAVViieql0DVYwjTDSQ2bF1EzwXyQAA7QaAAAdHoHD///PKAA== Date: Thu, 11 Dec 2014 20:32:56 +0000 Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.8.130913 x-originating-ip: [10.24.199.41] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/SAggtTQdLid9AWgLUAfmoPHf0Vw Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 20:33:00 -0000 Thanks Mehmet, I can do it. Please provide me with the details for the slot we would have for this draft. Thanks, Alberto On 12/11/14, 11:17 AM, "Ersue, Mehmet (NSN - DE/Munich)" wrote: >Hi Eric, > >can any of you attend the NETCONF interim meeting on Dec 15 and explain >shortly the focus of the draft? > >Cheers,=20 >Mehmet=20 > >> -----Original Message----- >> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Eric >>Voit (evoit) >> Sent: Thursday, December 11, 2014 5:12 PM >> To: netconf@ietf.org >> Subject: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements >>=20 >> I2RS has a number of YANG datastore subscription requirements. We have >>just >> published a new draft assembling some of these requirements, and >>articulating what >> functions would be need to be supported by the subscribed YANG >>Datastore. >>=20 >> Hopefully we can discuss this draft during one of the interims in >>January. >>=20 >> Thanks! >> Eric, Alex, & Alberto >>=20 >> -----Original Message----- >> From: i2rs [mailto:i2rs-bounces@ietf.org] On Behalf Of Eric Voit (evoit) >> Sent: Thursday, December 11, 2014 10:22 AM >> To: i2rs@ietf.org >> Cc: Alexander Clemm (alex); Alberto Gonzalez Prieto (albertgo) >> Subject: [i2rs] New "-00": draft-voit-i2rs-pub-sub-requirements >>=20 >> A number of I2RS WG documents ask for Pub/Sub capabilities. Other WG >>have >> addressed or are looking for similar mechanisms. The document >> http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 >> assembles a view of requirements for a YANG Datastore from an I2RS >>perspective, >> and makes comparisons with capabilities in standards in and beyond the >>IETF. >>=20 >> This document is a good companion document for >> https://tools.ietf.org/html/draft-netmod-clemm-datastore-push-00 >>=20 >> Thanks, >> Eric , Alex, & Alberto >>=20 >> -----Original Message----- >> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] >> Sent: Thursday, December 11, 2014 10:03 AM >> To: Alberto Gonzalez Prieto (albertgo); Alberto Gonzalez Prieto >>(albertgo); Alexander >> Clemm (alex); Eric Voit (evoit); Alexander Clemm (alex); Eric Voit >>(evoit) >> Subject: New Version Notification for >>draft-voit-i2rs-pub-sub-requirements-00.txt >>=20 >>=20 >> A new version of I-D, draft-voit-i2rs-pub-sub-requirements-00.txt >> has been successfully submitted by Eric Voit and posted to the IETF >>repository. >>=20 >> Name: draft-voit-i2rs-pub-sub-requirements >> Revision: 00 >> Title: Requirements for Subscription to YANG Datastores >> Document date: 2014-12-10 >> Group: Individual Submission >> Pages: 13 >> URL: =20 >>http://www.ietf.org/internet-drafts/draft-voit-i2rs-pub-sub- >> requirements-00.txt >> Status: =20 >>https://datatracker.ietf.org/doc/draft-voit-i2rs-pub-sub-requirements/ >> Htmlized: =20 >>http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 >>=20 >>=20 >> Abstract: >> This document provides requirements for a service that allows client >> applications to subscribe to updates of a YANG datastore. Based on >> criteria negotiated as part of a subscription, updates will be pushed >> to targeted recipients. Such a capability eliminates the need for >> periodic polling of YANG datastores by applications and fills a >> functional gap in existing YANG transports (i.e. Netconf and >> Restconf). Such a service can be summarized as a "pub/sub" service >> for YANG datastore updates. Beyond a set of basic requirements for >> the service, various refinements are addressed. These refinements >> include: periodicity of object updates, filtering out of objects >> underneath a requested a subtree, and delivery QoS guarantees. >>=20 >>=20 >>=20 >>=20 >> Please note that it may take a couple of minutes from the time of >>submission until the >> htmlized version and diff are available at tools.ietf.org. >>=20 >> The IETF Secretariat >>=20 >> _______________________________________________ >> i2rs mailing list >> i2rs@ietf.org >> https://www.ietf.org/mailman/listinfo/i2rs >>=20 >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf > >_______________________________________________ >Netconf mailing list >Netconf@ietf.org >https://www.ietf.org/mailman/listinfo/netconf From nobody Thu Dec 11 12:36:06 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F82E1A07BC for ; Thu, 11 Dec 2014 12:36:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.901 X-Spam-Level: X-Spam-Status: No, score=-8.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_I_INVITATION=-2, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SOv3UtA4xBGQ for ; Thu, 11 Dec 2014 12:36:02 -0800 (PST) Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [93.183.12.32]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A0391A6EF4 for ; Thu, 11 Dec 2014 12:36:01 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.14.3/8.14.3) with ESMTP id sBBKZt7t005656 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 11 Dec 2014 20:35:55 GMT Received: from DEMUHTC002.nsn-intra.net ([10.159.42.33]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id sBBKZtf5009539 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 11 Dec 2014 21:35:55 +0100 Received: from DEMUHTC006.nsn-intra.net (10.159.42.37) by DEMUHTC002.nsn-intra.net (10.159.42.33) with Microsoft SMTP Server (TLS) id 14.3.195.1; Thu, 11 Dec 2014 21:35:55 +0100 Received: from DEMUMBX005.nsn-intra.net ([169.254.5.147]) by DEMUHTC006.nsn-intra.net ([10.159.42.37]) with mapi id 14.03.0195.001; Thu, 11 Dec 2014 21:35:54 +0100 From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Alberto Gonzalez Prieto (albertgo)" , "Eric Voit (evoit)" , "netconf@ietf.org" Thread-Topic: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements Thread-Index: AdAVViieql0DVYwjTDSQ2bF1EzwXyQAA7QaAAAdHoHD///PKAP//3hxA Date: Thu, 11 Dec 2014 20:35:54 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.159.42.101] Content-Type: multipart/mixed; boundary="_002_E4DE949E6CE3E34993A2FF8AE79131F81958ABBFDEMUMBX005nsnin_" MIME-Version: 1.0 X-purgate-type: clean X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate: clean X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate-size: 14083 X-purgate-ID: 151667::1418330155-0000658F-D290A885/0/0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/H64p4iO1fF5L05PKAuHgAmgnexY Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 20:36:05 -0000 --_002_E4DE949E6CE3E34993A2FF8AE79131F81958ABBFDEMUMBX005nsnin_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The agenda is unfortunately pretty full. You can get a few min. at the beginning of the I2RS slot, which is planned = to start approx. at 1925 CET. See attached invitation. Cheers,=20 Mehmet=20 > -----Original Message----- > From: ext Alberto Gonzalez Prieto (albertgo) [mailto:albertgo@cisco.com] > Sent: Thursday, December 11, 2014 9:33 PM > To: Ersue, Mehmet (NSN - DE/Munich); Eric Voit (evoit); netconf@ietf.org > Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements >=20 > Thanks Mehmet, > I can do it. >=20 > Please provide me with the details for the slot we would have for this > draft. >=20 > Thanks, >=20 > Alberto >=20 > On 12/11/14, 11:17 AM, "Ersue, Mehmet (NSN - DE/Munich)" > wrote: >=20 > >Hi Eric, > > > >can any of you attend the NETCONF interim meeting on Dec 15 and explain > >shortly the focus of the draft? > > > >Cheers, > >Mehmet > > > >> -----Original Message----- > >> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Eric > >>Voit (evoit) > >> Sent: Thursday, December 11, 2014 5:12 PM > >> To: netconf@ietf.org > >> Subject: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements > >> > >> I2RS has a number of YANG datastore subscription requirements. We hav= e > >>just > >> published a new draft assembling some of these requirements, and > >>articulating what > >> functions would be need to be supported by the subscribed YANG > >>Datastore. > >> > >> Hopefully we can discuss this draft during one of the interims in > >>January. > >> > >> Thanks! > >> Eric, Alex, & Alberto > >> > >> -----Original Message----- > >> From: i2rs [mailto:i2rs-bounces@ietf.org] On Behalf Of Eric Voit (evoi= t) > >> Sent: Thursday, December 11, 2014 10:22 AM > >> To: i2rs@ietf.org > >> Cc: Alexander Clemm (alex); Alberto Gonzalez Prieto (albertgo) > >> Subject: [i2rs] New "-00": draft-voit-i2rs-pub-sub-requirements > >> > >> A number of I2RS WG documents ask for Pub/Sub capabilities. Other WG > >>have > >> addressed or are looking for similar mechanisms. The document > >> http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 > >> assembles a view of requirements for a YANG Datastore from an I2RS > >>perspective, > >> and makes comparisons with capabilities in standards in and beyond the > >>IETF. > >> > >> This document is a good companion document for > >> https://tools.ietf.org/html/draft-netmod-clemm-datastore-push-00 > >> > >> Thanks, > >> Eric , Alex, & Alberto > >> > >> -----Original Message----- > >> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > >> Sent: Thursday, December 11, 2014 10:03 AM > >> To: Alberto Gonzalez Prieto (albertgo); Alberto Gonzalez Prieto > >>(albertgo); Alexander > >> Clemm (alex); Eric Voit (evoit); Alexander Clemm (alex); Eric Voit > >>(evoit) > >> Subject: New Version Notification for > >>draft-voit-i2rs-pub-sub-requirements-00.txt > >> > >> > >> A new version of I-D, draft-voit-i2rs-pub-sub-requirements-00.txt > >> has been successfully submitted by Eric Voit and posted to the IETF > >>repository. > >> > >> Name: draft-voit-i2rs-pub-sub-requirements > >> Revision: 00 > >> Title: Requirements for Subscription to YANG Datastores > >> Document date: 2014-12-10 > >> Group: Individual Submission > >> Pages: 13 > >> URL: > >>http://www.ietf.org/internet-drafts/draft-voit-i2rs-pub-sub- > >> requirements-00.txt > >> Status: > >>https://datatracker.ietf.org/doc/draft-voit-i2rs-pub-sub-requirements/ > >> Htmlized: > >>http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 > >> > >> > >> Abstract: > >> This document provides requirements for a service that allows clien= t > >> applications to subscribe to updates of a YANG datastore. Based on > >> criteria negotiated as part of a subscription, updates will be push= ed > >> to targeted recipients. Such a capability eliminates the need for > >> periodic polling of YANG datastores by applications and fills a > >> functional gap in existing YANG transports (i.e. Netconf and > >> Restconf). Such a service can be summarized as a "pub/sub" service > >> for YANG datastore updates. Beyond a set of basic requirements for > >> the service, various refinements are addressed. These refinements > >> include: periodicity of object updates, filtering out of objects > >> underneath a requested a subtree, and delivery QoS guarantees. > >> > >> > >> > >> > >> Please note that it may take a couple of minutes from the time of > >>submission until the > >> htmlized version and diff are available at tools.ietf.org. > >> > >> The IETF Secretariat > >> > >> _______________________________________________ > >> i2rs mailing list > >> i2rs@ietf.org > >> https://www.ietf.org/mailman/listinfo/i2rs > >> > >> _______________________________________________ > >> Netconf mailing list > >> Netconf@ietf.org > >> https://www.ietf.org/mailman/listinfo/netconf > > > >_______________________________________________ > >Netconf mailing list > >Netconf@ietf.org > >https://www.ietf.org/mailman/listinfo/netconf --_002_E4DE949E6CE3E34993A2FF8AE79131F81958ABBFDEMUMBX005nsnin_ Content-Type: message/rfc822 Content-Disposition: attachment; creation-date="Thu, 11 Dec 2014 20:35:53 GMT"; modification-date="Thu, 11 Dec 2014 20:35:53 GMT" Received: from DEMUHTC006.nsn-intra.net (10.159.42.37) by DEMUHTC003.nsn-intra.net (10.159.42.34) with Microsoft SMTP Server (TLS) id 14.3.195.1; Tue, 9 Dec 2014 19:38:07 +0100 Received: from muvmp319.nsn-intra.net (10.159.42.107) by DEMUHTC006.nsn-intra.net (10.159.42.37) with Microsoft SMTP Server (TLS) id 14.3.195.1; Tue, 9 Dec 2014 19:38:07 +0100 Received: from demumfd002.nsn-inter.net ([93.183.12.31]) by muvmp319.nsn-intra.net (8.14.3/8.14.3) with ESMTP id sB9Ic7vk007576 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Tue, 9 Dec 2014 18:38:07 GMT Received: from mail.ietf.org (mail.ietf.org [4.31.198.44]) by demumfd002.nsn-inter.net (8.14.3/8.14.3) with ESMTP id sB9Ic5Bf025667 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 9 Dec 2014 18:38:06 GMT Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D0A71A8A0D; Tue, 9 Dec 2014 10:37:46 -0800 (PST) Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15F7D1A8A0D for ; Tue, 9 Dec 2014 10:37:44 -0800 (PST) Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B3zTstqOHe-K for ; Tue, 9 Dec 2014 10:37:41 -0800 (PST) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [93.183.12.31]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53BA11A879B for ; Tue, 9 Dec 2014 10:37:41 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd002.nsn-inter.net (8.14.3/8.14.3) with ESMTP id sB9IbdJk025143 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 9 Dec 2014 18:37:39 GMT Received: from DEMUHTC004.nsn-intra.net ([10.159.42.35]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id sB9IbcQi022288 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 9 Dec 2014 19:37:39 +0100 Received: from DEMUHTC005.nsn-intra.net (10.159.42.36) by DEMUHTC004.nsn-intra.net (10.159.42.35) with Microsoft SMTP Server (TLS) id 14.3.195.1; Tue, 9 Dec 2014 19:37:38 +0100 Received: from DEMUMBX005.nsn-intra.net ([169.254.5.147]) by DEMUHTC005.nsn-intra.net ([10.159.42.36]) with mapi id 14.03.0195.001; Tue, 9 Dec 2014 19:37:38 +0100 From: "Ersue, Mehmet (NSN - DE/Munich)" To: Netconf CC: 'Jeff Haas' Subject: [Netconf] Agenda of the virtual interim meeting on December 15, 2014 1700-1900 UTC WAS:FW: NETCONF WG Virtual Interim Meetings December 15, 2014, and bi-weekly starting January 5, 2015 Thread-Topic: [Netconf] Agenda of the virtual interim meeting on December 15, 2014 1700-1900 UTC WAS:FW: NETCONF WG Virtual Interim Meetings December 15, 2014, and bi-weekly starting January 5, 2015 Thread-Index: AQHQE99GZrTFXkVgekeUGdFhdQWh7A== Sender: Netconf Date: Tue, 9 Dec 2014 18:37:37 +0000 Message-ID: List-Help: List-Subscribe: , List-Unsubscribe: , Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-Exchange-Organization-AuthSource: DEMUHTC006.nsn-intra.net X-MS-Has-Attach: X-Auto-Response-Suppress: All X-MS-TNEF-Correlator: x-purgate-id: 151667::1418150287-0000677A-3E6B02E9/9/30015 x-purgate-ad: Categorized by eleven eXpurgate (R) http://www.eleven.de x-purgate: This mail is sent in bulk (visit http://www.eleven.de for further information) x-purgate-size: 2963 x-purgate-type: bulk x-originating-ip: [10.159.42.157] x-original-to: netconf@ietfa.amsl.com x-mailman-version: 2.1.15 delivered-to: netconf@ietfa.amsl.com x-beenthere: netconf@ietf.org x-virus-scanned: amavisd-new at amsl.com errors-to: netconf-bounces@ietf.org list-id: Network Configuration WG mailing list list-post: x-spam-score: -6.901 list-archive: x-spam-level: x-spam-status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1418150266; bh=TuzE0jQkJ0RjHUapjYDC6zq5yoeHn7tdn62S5dnEa9E=; h=From:To:Date:Message-ID:MIME-Version:Cc:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Content-Type:Content-Transfer-Encoding:Sender; b=vnSw0NeEeBsDyD9yNOdu24GIFIt49rX1dP7OBZcV/aptOqlORs5k6/3VtV/nFqag4 E4+TePllTXq6sVROV/b92sdDXtsNesU5iiqPvDradiriscBeALqlbd4iPQ+80aNBCI jC/b/XP+RCcGWH+IO1YyeSuMDasxMCpoHxCtuL6A= x-spam-flag: NO Content-Type: text/plain; charset="us-ascii" Content-ID: <18190F22E2C8514681DE46A7C4AB46E1@internal.nsn.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Dear NETCONF WG, please find below the Agenda of the virtual interim meeting on December 15,= 2014 1700-1900 UTC. The access information for the virtual meeting is provided in the mail belo= w. I would like to invite all key players in the WG to participate in the meet= ing and the discussion we are going to have. Based on the discussion result and preparation, we aim to start the WGLC fo= r some of the WG items soon. There is a special time slot in the agenda on the I2RS Ephemeral State we d= iscussed in IETF #91 and I2RS key player are invited to attend. Susan, Jeff: Please forward as appropriate. Thanks. Agenda of the virtual interim meeting on December 15, 2014 1700-1900 UTC ---------------------------------------------------------------------------= ---------- Agenda is also available at: http://www.ietf.org/proceedings/interim/2014/12/15/netconf/agenda/agenda-in= terim-2014-netconf-5 - 5 min chair intro, scribe, agenda bashing The note taking will be done on: http://beta.etherpad.org/p/netconf-z Issue discussion and status check per WG item: - Call Home (Kent) (5min) Currently no open issues. See https://github.com/netconf-wg/call-home/issues - Server Model (Kent) (20min) Currently 5 open issues. See https://github.com/netconf-wg/server-model/issues - rfc5539bis (Juergen) (5min) The two issues decided in IETF 91 are in preparation. - Restconf (Andy) (30min) Currently 4 open issues. See https://github.com/netconf-wg/restconf/issues - Zerotouch (Kent) (20min) Currently 1 open issues. https://github.com/netconf-wg/yang-patch/issues - I2RS Ephemeral state (Susan, Jeff) (30min) Please provide slides before the meeting. - 5 min AOB other topics Best Regards, Mehmet & Mahesh -----Original Message----- From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext IESG Secre= tary Sent: Monday, December 01, 2014 10:05 PM To: IETF Announcement List Cc: netconf@ietf.org Subject: [Netconf] NETCONF WG Virtual Interim Meetings December 15, 2014, a= nd bi-weekly starting January 5, 2015 The NETCONF WG will hold a series of virtual interim meetings beginning Mon= day, December 15, 2014. Meeting day: Mondays Time: 1800 CET Duration: 2 hours Dates: December 15, 2014 1-time and starting with: January 5, 2015 bi-weekly End date: March 16, 2015 WebEx information: Meeting number: 640 672 878 Meeting password: nc2015 Audio connection: 1-877-668-4493 Call-in toll free number (US/Canada) 1-650-479-3208 Call-in toll number (US/Canada) Access code: 640 672 878 Meeting link: https://ietf.webex.com/ietf/j.php?MTID=3Dm2580594e0bc14b4b94f= 869a415ce437c _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf _______________________________________________ Netconf mailing list Netconf@ietf.org https://www.ietf.org/mailman/listinfo/netconf --_002_E4DE949E6CE3E34993A2FF8AE79131F81958ABBFDEMUMBX005nsnin_-- From nobody Thu Dec 11 12:40:13 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C17A1A7030 for ; Thu, 11 Dec 2014 12:40:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.511 X-Spam-Level: X-Spam-Status: No, score=-16.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, GB_I_INVITATION=-2, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HIUIBIb0B0pT for ; Thu, 11 Dec 2014 12:40:10 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBF9F1A7018 for ; Thu, 11 Dec 2014 12:40:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5498; q=dns/txt; s=iport; t=1418330410; x=1419540010; h=from:to:subject:date:message-id:in-reply-to:content-id: content-transfer-encoding:mime-version; bh=IauFH8882z5R4mqffWRwsZHB5p5hr7BS8s2uaGnZC34=; b=SSldjf5q2897bMXktMCFf6tbw+ykPQIDf7rMhk+zNQKQMUktory7AdX1 amX1WB6Zb/5ZN2fmkU+a/e5cekWBVB3AGqhzmO4r+Q6S2c18/2TmiqLJ0 K9JkEF78w8kJ2rYlHb7AlW65xnZ7jnIdlQHL/ECms1JUdYzjg7cfQVVve 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmQFAEIAilStJV2c/2dsb2JhbABZgwZSWATDToIbCoUkSgKBHxYBAQEBAX2EDAEBAQQBAQE3NBcGAQgRBAEBAQwBEQkuCxQJCAEBBAESCYgjDdgkAQEBAQEBAQEBAQEBAQEBAQEBAQEBF495BoQjBY1/gz6FMYEMMIItjUoig2xugUV+AQEB X-IronPort-AV: E=Sophos;i="5.07,559,1413244800"; d="scan'208";a="379538940" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-8.cisco.com with ESMTP; 11 Dec 2014 20:40:09 +0000 Received: from xhc-rcd-x09.cisco.com (xhc-rcd-x09.cisco.com [173.37.183.83]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id sBBKe9QI026157 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 11 Dec 2014 20:40:09 GMT Received: from xmb-rcd-x14.cisco.com ([169.254.4.121]) by xhc-rcd-x09.cisco.com ([173.37.183.83]) with mapi id 14.03.0195.001; Thu, 11 Dec 2014 14:40:08 -0600 From: "Alberto Gonzalez Prieto (albertgo)" To: "Ersue, Mehmet (NSN - DE/Munich)" , "Eric Voit (evoit)" , "netconf@ietf.org" Thread-Topic: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements Thread-Index: AdAVViieql0DVYwjTDSQ2bF1EzwXyQAA7QaAAAdHoHD///PKAP//3hxAgAAj5oA= Date: Thu, 11 Dec 2014 20:40:08 +0000 Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.8.130913 x-originating-ip: [10.24.199.41] Content-Type: text/plain; charset="us-ascii" Content-ID: <592B2B8B45C94341BFEA6FB93567CB22@emea.cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/bOujZS7TQtpJrKRCXajghvQAQtk Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 20:40:12 -0000 Thanks Mehmet, Alberto On 12/11/14, 12:35 PM, "Ersue, Mehmet (NSN - DE/Munich)" wrote: >The agenda is unfortunately pretty full. >You can get a few min. at the beginning of the I2RS slot, which is >planned to start approx. at 1925 CET. >See attached invitation. > >Cheers,=20 >Mehmet=20 > > >> -----Original Message----- >> From: ext Alberto Gonzalez Prieto (albertgo) [mailto:albertgo@cisco.com] >> Sent: Thursday, December 11, 2014 9:33 PM >> To: Ersue, Mehmet (NSN - DE/Munich); Eric Voit (evoit); netconf@ietf.org >> Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements >>=20 >> Thanks Mehmet, >> I can do it. >>=20 >> Please provide me with the details for the slot we would have for this >> draft. >>=20 >> Thanks, >>=20 >> Alberto >>=20 >> On 12/11/14, 11:17 AM, "Ersue, Mehmet (NSN - DE/Munich)" >> wrote: >>=20 >> >Hi Eric, >> > >> >can any of you attend the NETCONF interim meeting on Dec 15 and explain >> >shortly the focus of the draft? >> > >> >Cheers, >> >Mehmet >> > >> >> -----Original Message----- >> >> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Eric >> >>Voit (evoit) >> >> Sent: Thursday, December 11, 2014 5:12 PM >> >> To: netconf@ietf.org >> >> Subject: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements >> >> >> >> I2RS has a number of YANG datastore subscription requirements. We >>have >> >>just >> >> published a new draft assembling some of these requirements, and >> >>articulating what >> >> functions would be need to be supported by the subscribed YANG >> >>Datastore. >> >> >> >> Hopefully we can discuss this draft during one of the interims in >> >>January. >> >> >> >> Thanks! >> >> Eric, Alex, & Alberto >> >> >> >> -----Original Message----- >> >> From: i2rs [mailto:i2rs-bounces@ietf.org] On Behalf Of Eric Voit >>(evoit) >> >> Sent: Thursday, December 11, 2014 10:22 AM >> >> To: i2rs@ietf.org >> >> Cc: Alexander Clemm (alex); Alberto Gonzalez Prieto (albertgo) >> >> Subject: [i2rs] New "-00": draft-voit-i2rs-pub-sub-requirements >> >> >> >> A number of I2RS WG documents ask for Pub/Sub capabilities. Other WG >> >>have >> >> addressed or are looking for similar mechanisms. The document >> >> http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 >> >> assembles a view of requirements for a YANG Datastore from an I2RS >> >>perspective, >> >> and makes comparisons with capabilities in standards in and beyond >>the >> >>IETF. >> >> >> >> This document is a good companion document for >> >> https://tools.ietf.org/html/draft-netmod-clemm-datastore-push-00 >> >> >> >> Thanks, >> >> Eric , Alex, & Alberto >> >> >> >> -----Original Message----- >> >> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] >> >> Sent: Thursday, December 11, 2014 10:03 AM >> >> To: Alberto Gonzalez Prieto (albertgo); Alberto Gonzalez Prieto >> >>(albertgo); Alexander >> >> Clemm (alex); Eric Voit (evoit); Alexander Clemm (alex); Eric Voit >> >>(evoit) >> >> Subject: New Version Notification for >> >>draft-voit-i2rs-pub-sub-requirements-00.txt >> >> >> >> >> >> A new version of I-D, draft-voit-i2rs-pub-sub-requirements-00.txt >> >> has been successfully submitted by Eric Voit and posted to the IETF >> >>repository. >> >> >> >> Name: draft-voit-i2rs-pub-sub-requirements >> >> Revision: 00 >> >> Title: Requirements for Subscription to YANG Datastores >> >> Document date: 2014-12-10 >> >> Group: Individual Submission >> >> Pages: 13 >> >> URL: >> >>http://www.ietf.org/internet-drafts/draft-voit-i2rs-pub-sub- >> >> requirements-00.txt >> >> Status: >> >>https://datatracker.ietf.org/doc/draft-voit-i2rs-pub-sub-requirements/ >> >> Htmlized: >> >>http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 >> >> >> >> >> >> Abstract: >> >> This document provides requirements for a service that allows >>client >> >> applications to subscribe to updates of a YANG datastore. Based >>on >> >> criteria negotiated as part of a subscription, updates will be >>pushed >> >> to targeted recipients. Such a capability eliminates the need for >> >> periodic polling of YANG datastores by applications and fills a >> >> functional gap in existing YANG transports (i.e. Netconf and >> >> Restconf). Such a service can be summarized as a "pub/sub" >>service >> >> for YANG datastore updates. Beyond a set of basic requirements >>for >> >> the service, various refinements are addressed. These refinements >> >> include: periodicity of object updates, filtering out of objects >> >> underneath a requested a subtree, and delivery QoS guarantees. >> >> >> >> >> >> >> >> >> >> Please note that it may take a couple of minutes from the time of >> >>submission until the >> >> htmlized version and diff are available at tools.ietf.org. >> >> >> >> The IETF Secretariat >> >> >> >> _______________________________________________ >> >> i2rs mailing list >> >> i2rs@ietf.org >> >> https://www.ietf.org/mailman/listinfo/i2rs >> >> >> >> _______________________________________________ >> >> Netconf mailing list >> >> Netconf@ietf.org >> >> https://www.ietf.org/mailman/listinfo/netconf >> > >> >_______________________________________________ >> >Netconf mailing list >> >Netconf@ietf.org >> >https://www.ietf.org/mailman/listinfo/netconf > From nobody Thu Dec 11 12:55:43 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A79581A7018 for ; Thu, 11 Dec 2014 12:55:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.901 X-Spam-Level: X-Spam-Status: No, score=-8.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_I_INVITATION=-2, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dq0qAV8gOo2L for ; Thu, 11 Dec 2014 12:55:40 -0800 (PST) Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [93.183.12.32]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0AFBE1A700F for ; Thu, 11 Dec 2014 12:55:39 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.14.3/8.14.3) with ESMTP id sBBKtYPJ004859 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 11 Dec 2014 20:55:34 GMT Received: from DEMUHTC002.nsn-intra.net ([10.159.42.33]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id sBBKtYku001257 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 11 Dec 2014 21:55:34 +0100 Received: from DEMUHTC013.nsn-intra.net (10.159.42.44) by DEMUHTC002.nsn-intra.net (10.159.42.33) with Microsoft SMTP Server (TLS) id 14.3.195.1; Thu, 11 Dec 2014 21:55:34 +0100 Received: from DEMUMBX005.nsn-intra.net ([169.254.5.147]) by DEMUHTC013.nsn-intra.net ([10.159.42.44]) with mapi id 14.03.0195.001; Thu, 11 Dec 2014 21:55:34 +0100 From: "Ersue, Mehmet (NSN - DE/Munich)" To: "ext Alberto Gonzalez Prieto (albertgo)" , "Eric Voit (evoit)" , "netconf@ietf.org" Thread-Topic: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements Thread-Index: AdAVViieql0DVYwjTDSQ2bF1EzwXyQAA7QaAAAdHoHD///PKAP//3hxAgAAj5oD//9zKAA== Date: Thu, 11 Dec 2014 20:55:33 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.159.42.101] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-purgate-type: clean X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate: clean X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate-size: 6633 X-purgate-ID: 151667::1418331334-0000658F-7592E6B9/0/0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/EcQZhJKabM-h5RO3bONDFWO3KqU Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 20:55:42 -0000 Hi Alberto, you get only a few minutes which basically eats from the I2RS discussion ti= me concerning the Ephemeral State. I expect that you explain _shortly_ what it is and where in the future it w= ill be developed. You should be also aware that based on the original agreement between NETCO= NF and I2RS co-chairs, requirements from I2RS WG directed to NETCONF WG should be first agreed in = I2RS WG. However, as I see NETMOD WG might be also involved. Cheers,=20 Mehmet=20 > -----Original Message----- > From: ext Alberto Gonzalez Prieto (albertgo) [mailto:albertgo@cisco.com] > Sent: Thursday, December 11, 2014 9:40 PM > To: Ersue, Mehmet (NSN - DE/Munich); Eric Voit (evoit); netconf@ietf.org > Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements >=20 > Thanks Mehmet, >=20 > Alberto >=20 > On 12/11/14, 12:35 PM, "Ersue, Mehmet (NSN - DE/Munich)" > wrote: >=20 > >The agenda is unfortunately pretty full. > >You can get a few min. at the beginning of the I2RS slot, which is > >planned to start approx. at 1925 CET. > >See attached invitation. > > > >Cheers, > >Mehmet > > > > > >> -----Original Message----- > >> From: ext Alberto Gonzalez Prieto (albertgo) [mailto:albertgo@cisco.co= m] > >> Sent: Thursday, December 11, 2014 9:33 PM > >> To: Ersue, Mehmet (NSN - DE/Munich); Eric Voit (evoit); netconf@ietf.o= rg > >> Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements > >> > >> Thanks Mehmet, > >> I can do it. > >> > >> Please provide me with the details for the slot we would have for this > >> draft. > >> > >> Thanks, > >> > >> Alberto > >> > >> On 12/11/14, 11:17 AM, "Ersue, Mehmet (NSN - DE/Munich)" > >> wrote: > >> > >> >Hi Eric, > >> > > >> >can any of you attend the NETCONF interim meeting on Dec 15 and expla= in > >> >shortly the focus of the draft? > >> > > >> >Cheers, > >> >Mehmet > >> > > >> >> -----Original Message----- > >> >> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Er= ic > >> >>Voit (evoit) > >> >> Sent: Thursday, December 11, 2014 5:12 PM > >> >> To: netconf@ietf.org > >> >> Subject: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements > >> >> > >> >> I2RS has a number of YANG datastore subscription requirements. We > >>have > >> >>just > >> >> published a new draft assembling some of these requirements, and > >> >>articulating what > >> >> functions would be need to be supported by the subscribed YANG > >> >>Datastore. > >> >> > >> >> Hopefully we can discuss this draft during one of the interims in > >> >>January. > >> >> > >> >> Thanks! > >> >> Eric, Alex, & Alberto > >> >> > >> >> -----Original Message----- > >> >> From: i2rs [mailto:i2rs-bounces@ietf.org] On Behalf Of Eric Voit > >>(evoit) > >> >> Sent: Thursday, December 11, 2014 10:22 AM > >> >> To: i2rs@ietf.org > >> >> Cc: Alexander Clemm (alex); Alberto Gonzalez Prieto (albertgo) > >> >> Subject: [i2rs] New "-00": draft-voit-i2rs-pub-sub-requirements > >> >> > >> >> A number of I2RS WG documents ask for Pub/Sub capabilities. Other = WG > >> >>have > >> >> addressed or are looking for similar mechanisms. The document > >> >> http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 > >> >> assembles a view of requirements for a YANG Datastore from an I2RS > >> >>perspective, > >> >> and makes comparisons with capabilities in standards in and beyond > >>the > >> >>IETF. > >> >> > >> >> This document is a good companion document for > >> >> https://tools.ietf.org/html/draft-netmod-clemm-datastore-push-00 > >> >> > >> >> Thanks, > >> >> Eric , Alex, & Alberto > >> >> > >> >> -----Original Message----- > >> >> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > >> >> Sent: Thursday, December 11, 2014 10:03 AM > >> >> To: Alberto Gonzalez Prieto (albertgo); Alberto Gonzalez Prieto > >> >>(albertgo); Alexander > >> >> Clemm (alex); Eric Voit (evoit); Alexander Clemm (alex); Eric Voit > >> >>(evoit) > >> >> Subject: New Version Notification for > >> >>draft-voit-i2rs-pub-sub-requirements-00.txt > >> >> > >> >> > >> >> A new version of I-D, draft-voit-i2rs-pub-sub-requirements-00.txt > >> >> has been successfully submitted by Eric Voit and posted to the IETF > >> >>repository. > >> >> > >> >> Name: draft-voit-i2rs-pub-sub-requirements > >> >> Revision: 00 > >> >> Title: Requirements for Subscription to YANG Datastores > >> >> Document date: 2014-12-10 > >> >> Group: Individual Submission > >> >> Pages: 13 > >> >> URL: > >> >>http://www.ietf.org/internet-drafts/draft-voit-i2rs-pub-sub- > >> >> requirements-00.txt > >> >> Status: > >> >>https://datatracker.ietf.org/doc/draft-voit-i2rs-pub-sub-requirement= s/ > >> >> Htmlized: > >> >>http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 > >> >> > >> >> > >> >> Abstract: > >> >> This document provides requirements for a service that allows > >>client > >> >> applications to subscribe to updates of a YANG datastore. Based > >>on > >> >> criteria negotiated as part of a subscription, updates will be > >>pushed > >> >> to targeted recipients. Such a capability eliminates the need f= or > >> >> periodic polling of YANG datastores by applications and fills a > >> >> functional gap in existing YANG transports (i.e. Netconf and > >> >> Restconf). Such a service can be summarized as a "pub/sub" > >>service > >> >> for YANG datastore updates. Beyond a set of basic requirements > >>for > >> >> the service, various refinements are addressed. These refinemen= ts > >> >> include: periodicity of object updates, filtering out of objects > >> >> underneath a requested a subtree, and delivery QoS guarantees. > >> >> > >> >> > >> >> > >> >> > >> >> Please note that it may take a couple of minutes from the time of > >> >>submission until the > >> >> htmlized version and diff are available at tools.ietf.org. > >> >> > >> >> The IETF Secretariat > >> >> > >> >> _______________________________________________ > >> >> i2rs mailing list > >> >> i2rs@ietf.org > >> >> https://www.ietf.org/mailman/listinfo/i2rs > >> >> > >> >> _______________________________________________ > >> >> Netconf mailing list > >> >> Netconf@ietf.org > >> >> https://www.ietf.org/mailman/listinfo/netconf > >> > > >> >_______________________________________________ > >> >Netconf mailing list > >> >Netconf@ietf.org > >> >https://www.ietf.org/mailman/listinfo/netconf > > From nobody Thu Dec 11 13:25:19 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FBF91A19F8 for ; Thu, 11 Dec 2014 13:25:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.511 X-Spam-Level: X-Spam-Status: No, score=-16.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, GB_I_INVITATION=-2, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qPnxdSaUCox6 for ; Thu, 11 Dec 2014 13:25:12 -0800 (PST) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 920B91A020B for ; Thu, 11 Dec 2014 13:25:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7396; q=dns/txt; s=iport; t=1418333113; x=1419542713; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=HHy6mvAjovepYf4Ec5MojMnJlb0VDEKJl4sxhjseG2M=; b=bJP491oCF37XP0DhUhnXDVgi4mrioj35WUXwdIRNt/ukvEKZ9Mn9xes+ Bp5Tbn16QcpRb3Lptl71xtasdRk58cRgVLxNvfmpLTcO3HZ7MT+s3BHMR t8hwAl1cK53Cm8xC1AZgf1t2wtJWrFKJ8g45O2SOqeIlfXWkzOwLR3Okb k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmQFAAYLilStJV2R/2dsb2JhbABZgwZSWATFaAqFJEoCgR8WAQEBAQF9hAwBAQEDAQEBATc0EAcEAgEIEQQBAQEKAgERCQcnCxQJCAIEARIIAYgbCA3YOAEBAQEBAQEBAQEBAQEBAQEBAQEBARePQTgGgxCBEwWNf4M+gz6Cfw0jgi2NSiKDbG6BRX4BAQE X-IronPort-AV: E=Sophos;i="5.07,559,1413244800"; d="scan'208";a="379577073" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-3.cisco.com with ESMTP; 11 Dec 2014 21:25:12 +0000 Received: from xhc-aln-x13.cisco.com (xhc-aln-x13.cisco.com [173.36.12.87]) by rcdn-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id sBBLPB91029338 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 11 Dec 2014 21:25:11 GMT Received: from xmb-aln-x11.cisco.com ([169.254.6.205]) by xhc-aln-x13.cisco.com ([173.36.12.87]) with mapi id 14.03.0195.001; Thu, 11 Dec 2014 15:25:11 -0600 From: "Eric Voit (evoit)" To: "Ersue, Mehmet (NSN - DE/Munich)" , "Alberto Gonzalez Prieto (albertgo)" , "netconf@ietf.org" Thread-Topic: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements Thread-Index: AdAVViieql0DVYwjTDSQ2bF1EzwXyQAA7QaAAAdHoHD///PKAP//3hxAgAAj5oD//9zKAP//r8/A Date: Thu, 11 Dec 2014 21:25:10 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.116.134.131] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/0M8KRsETLL6HPWt5n1utkDkRaUQ Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2014 21:25:15 -0000 Absolutely agree that the requirements must be first agreed in I2RS. But w= e provided notice to the NETCONF mailer as there likely are people who care= about this topic here. I think it is great that Alberto can give a brief intro. We will pass alon= g details as this proceeds in I2RS. Eric > From: Ersue, Mehmet, December 11, 2014 3:56 PM >=20 > Hi Alberto, >=20 > you get only a few minutes which basically eats from the I2RS discussion = time > concerning the Ephemeral State. > I expect that you explain _shortly_ what it is and where in the future it= will be > developed. >=20 > You should be also aware that based on the original agreement between > NETCONF and I2RS co-chairs, requirements from I2RS WG directed to NETCONF > WG should be first agreed in I2RS WG. > However, as I see NETMOD WG might be also involved. >=20 > Cheers, > Mehmet >=20 >=20 > > -----Original Message----- > > From: ext Alberto Gonzalez Prieto (albertgo) [mailto:albertgo@cisco.com= ] > > Sent: Thursday, December 11, 2014 9:40 PM > > To: Ersue, Mehmet (NSN - DE/Munich); Eric Voit (evoit); netconf@ietf.or= g > > Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements > > > > Thanks Mehmet, > > > > Alberto > > > > On 12/11/14, 12:35 PM, "Ersue, Mehmet (NSN - DE/Munich)" > > wrote: > > > > >The agenda is unfortunately pretty full. > > >You can get a few min. at the beginning of the I2RS slot, which is > > >planned to start approx. at 1925 CET. > > >See attached invitation. > > > > > >Cheers, > > >Mehmet > > > > > > > > >> -----Original Message----- > > >> From: ext Alberto Gonzalez Prieto (albertgo) [mailto:albertgo@cisco.= com] > > >> Sent: Thursday, December 11, 2014 9:33 PM > > >> To: Ersue, Mehmet (NSN - DE/Munich); Eric Voit (evoit); netconf@ietf= .org > > >> Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requiremen= ts > > >> > > >> Thanks Mehmet, > > >> I can do it. > > >> > > >> Please provide me with the details for the slot we would have for th= is > > >> draft. > > >> > > >> Thanks, > > >> > > >> Alberto > > >> > > >> On 12/11/14, 11:17 AM, "Ersue, Mehmet (NSN - DE/Munich)" > > >> wrote: > > >> > > >> >Hi Eric, > > >> > > > >> >can any of you attend the NETCONF interim meeting on Dec 15 and > explain > > >> >shortly the focus of the draft? > > >> > > > >> >Cheers, > > >> >Mehmet > > >> > > > >> >> -----Original Message----- > > >> >> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext = Eric > > >> >>Voit (evoit) > > >> >> Sent: Thursday, December 11, 2014 5:12 PM > > >> >> To: netconf@ietf.org > > >> >> Subject: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirement= s > > >> >> > > >> >> I2RS has a number of YANG datastore subscription requirements. W= e > > >>have > > >> >>just > > >> >> published a new draft assembling some of these requirements, and > > >> >>articulating what > > >> >> functions would be need to be supported by the subscribed YANG > > >> >>Datastore. > > >> >> > > >> >> Hopefully we can discuss this draft during one of the interims in > > >> >>January. > > >> >> > > >> >> Thanks! > > >> >> Eric, Alex, & Alberto > > >> >> > > >> >> -----Original Message----- > > >> >> From: i2rs [mailto:i2rs-bounces@ietf.org] On Behalf Of Eric Voit > > >>(evoit) > > >> >> Sent: Thursday, December 11, 2014 10:22 AM > > >> >> To: i2rs@ietf.org > > >> >> Cc: Alexander Clemm (alex); Alberto Gonzalez Prieto (albertgo) > > >> >> Subject: [i2rs] New "-00": draft-voit-i2rs-pub-sub-requirements > > >> >> > > >> >> A number of I2RS WG documents ask for Pub/Sub capabilities. Othe= r > WG > > >> >>have > > >> >> addressed or are looking for similar mechanisms. The document > > >> >> http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-0= 0 > > >> >> assembles a view of requirements for a YANG Datastore from an I2R= S > > >> >>perspective, > > >> >> and makes comparisons with capabilities in standards in and beyon= d > > >>the > > >> >>IETF. > > >> >> > > >> >> This document is a good companion document for > > >> >> https://tools.ietf.org/html/draft-netmod-clemm-datastore-push-00 > > >> >> > > >> >> Thanks, > > >> >> Eric , Alex, & Alberto > > >> >> > > >> >> -----Original Message----- > > >> >> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > >> >> Sent: Thursday, December 11, 2014 10:03 AM > > >> >> To: Alberto Gonzalez Prieto (albertgo); Alberto Gonzalez Prieto > > >> >>(albertgo); Alexander > > >> >> Clemm (alex); Eric Voit (evoit); Alexander Clemm (alex); Eric Voi= t > > >> >>(evoit) > > >> >> Subject: New Version Notification for > > >> >>draft-voit-i2rs-pub-sub-requirements-00.txt > > >> >> > > >> >> > > >> >> A new version of I-D, draft-voit-i2rs-pub-sub-requirements-00.txt > > >> >> has been successfully submitted by Eric Voit and posted to the IE= TF > > >> >>repository. > > >> >> > > >> >> Name: draft-voit-i2rs-pub-sub-requirements > > >> >> Revision: 00 > > >> >> Title: Requirements for Subscription to YANG Datastores > > >> >> Document date: 2014-12-10 > > >> >> Group: Individual Submission > > >> >> Pages: 13 > > >> >> URL: > > >> >>http://www.ietf.org/internet-drafts/draft-voit-i2rs-pub-sub- > > >> >> requirements-00.txt > > >> >> Status: > > >> >>https://datatracker.ietf.org/doc/draft-voit-i2rs-pub-sub-requireme= nts/ > > >> >> Htmlized: > > >> >>http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 > > >> >> > > >> >> > > >> >> Abstract: > > >> >> This document provides requirements for a service that allows > > >>client > > >> >> applications to subscribe to updates of a YANG datastore. Bas= ed > > >>on > > >> >> criteria negotiated as part of a subscription, updates will be > > >>pushed > > >> >> to targeted recipients. Such a capability eliminates the need= for > > >> >> periodic polling of YANG datastores by applications and fills = a > > >> >> functional gap in existing YANG transports (i.e. Netconf and > > >> >> Restconf). Such a service can be summarized as a "pub/sub" > > >>service > > >> >> for YANG datastore updates. Beyond a set of basic requirement= s > > >>for > > >> >> the service, various refinements are addressed. These refinem= ents > > >> >> include: periodicity of object updates, filtering out of objec= ts > > >> >> underneath a requested a subtree, and delivery QoS guarantees. > > >> >> > > >> >> > > >> >> > > >> >> > > >> >> Please note that it may take a couple of minutes from the time of > > >> >>submission until the > > >> >> htmlized version and diff are available at tools.ietf.org. > > >> >> > > >> >> The IETF Secretariat > > >> >> > > >> >> _______________________________________________ > > >> >> i2rs mailing list > > >> >> i2rs@ietf.org > > >> >> https://www.ietf.org/mailman/listinfo/i2rs > > >> >> > > >> >> _______________________________________________ > > >> >> Netconf mailing list > > >> >> Netconf@ietf.org > > >> >> https://www.ietf.org/mailman/listinfo/netconf > > >> > > > >> >_______________________________________________ > > >> >Netconf mailing list > > >> >Netconf@ietf.org > > >> >https://www.ietf.org/mailman/listinfo/netconf > > > From nobody Thu Dec 11 19:16:50 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6E161A9175; Thu, 11 Dec 2014 19:16:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FBAOPSmS5yoR; Thu, 11 Dec 2014 19:16:39 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id ACF571A9172; Thu, 11 Dec 2014 19:16:39 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 5.7.4 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20141212031639.994.54892.idtracker@ietfa.amsl.com> Date: Thu, 11 Dec 2014 19:16:39 -0800 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/bMVooZd62tdOo6obuwq27Lydqto Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-server-model-05.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Dec 2014 03:16:41 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration Working Group of the IETF. Title : NETCONF Server and RESTCONF Server Configuration Models Authors : Kent Watsen Juergen Schoenwaelder Filename : draft-ietf-netconf-server-model-05.txt Pages : 46 Date : 2014-12-11 Abstract: This draft defines a NETCONF server configuration data model and a RESTCONF server configuration data model. These data models enable configuration of the NETCONF and RESTCONF services themselves, including which transports are supported, what ports the servers listens on, whether call-home is supported, and associated parameters. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-server-model/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-netconf-server-model-05 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-server-model-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Dec 11 19:22:33 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AB711AC3CC for ; Thu, 11 Dec 2014 19:22:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3S_aprh4CdDC for ; Thu, 11 Dec 2014 19:22:29 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0114.outbound.protection.outlook.com [65.55.169.114]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 582D21AC3BF for ; Thu, 11 Dec 2014 19:22:29 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB457.namprd05.prod.outlook.com (10.141.72.141) with Microsoft SMTP Server (TLS) id 15.1.31.17; Fri, 12 Dec 2014 03:22:27 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Fri, 12 Dec 2014 03:22:27 +0000 From: Kent Watsen To: "netconf@ietf.org" Thread-Topic: [Netconf] I-D Action: draft-ietf-netconf-server-model-05.txt Thread-Index: AQHQFboeP6gvUsR5uEy3Jy91MRxNXZyK9nAA Date: Fri, 12 Dec 2014 03:22:26 +0000 Message-ID: References: <20141212031639.994.54892.idtracker@ietfa.amsl.com> In-Reply-To: <20141212031639.994.54892.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.11] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-forefront-prvs: 04238CD941 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(189002)(377424004)(24454002)(164054003)(51704005)(479174003)(377454003)(92566001)(21056001)(86362001)(110136001)(87936001)(68736005)(83506001)(20776003)(99286002)(64706001)(15975445007)(1720100001)(102836002)(2656002)(230783001)(107886001)(4396001)(101416001)(76176999)(31966008)(54356999)(122556002)(19580395003)(99396003)(50986999)(40100003)(77156002)(62966003)(450100001)(19580405001)(66066001)(106356001)(36756003)(107046002)(2501002)(46102003)(120916001)(106116001)(105586002)(97736003)(2351001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB457; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: <344B04D387BCC14B89D55922C3884FD3@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/da_J8cpdTtgHCCBQOLaWbm5wyeY Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-server-model-05.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Dec 2014 03:22:31 -0000 Dear WG, This update contains the following changes: * Removed all refs to the old ietf-system-tls-auth module * Removed YANG 1.1 style if-feature statements (loss some expressiveness) * Removed the read-only (config false) lists of SSH host-keys and TLS certs * Added an if-feature around session-options container * Added ability to configure trust-anchors for SSH X.509 client certs * YANG modules now import by revision, per best practice * Added support for RESTCONF server * Added RFC Editor instructions Thanks, Kent On 12/11/14, 10:16 PM, "internet-drafts@ietf.org" wrote: > >A New Internet-Draft is available from the on-line Internet-Drafts >directories. > This draft is a work item of the Network Configuration Working Group of >the IETF. > > Title : NETCONF Server and RESTCONF Server >Configuration Models > Authors : Kent Watsen > Juergen Schoenwaelder > Filename : draft-ietf-netconf-server-model-05.txt > Pages : 46 > Date : 2014-12-11 > >Abstract: > This draft defines a NETCONF server configuration data model and a > RESTCONF server configuration data model. These data models enable > configuration of the NETCONF and RESTCONF services themselves, > including which transports are supported, what ports the servers > listens on, whether call-home is supported, and associated > parameters. > > >The IETF datatracker status page for this draft is: >https://datatracker.ietf.org/doc/draft-ietf-netconf-server-model/ > >There's also a htmlized version available at: >http://tools.ietf.org/html/draft-ietf-netconf-server-model-05 > >A diff from the previous version is available at: >http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-netconf-server-model-05 > > >Please note that it may take a couple of minutes from the time of >submission >until the htmlized version and diff are available at tools.ietf.org. > >Internet-Drafts are also available by anonymous FTP at: >ftp://ftp.ietf.org/internet-drafts/ > >_______________________________________________ >Netconf mailing list >Netconf@ietf.org >https://www.ietf.org/mailman/listinfo/netconf From nobody Fri Dec 12 07:16:50 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68A0A1ACDE9 for ; Fri, 12 Dec 2014 07:16:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LO1mHukEjUxs for ; Fri, 12 Dec 2014 07:16:48 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0721.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:721]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DFE41ACDDA for ; Fri, 12 Dec 2014 07:16:37 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB459.namprd05.prod.outlook.com (10.141.72.146) with Microsoft SMTP Server (TLS) id 15.1.31.17; Fri, 12 Dec 2014 15:16:14 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Fri, 12 Dec 2014 15:16:14 +0000 From: Kent Watsen To: Andy Bierman , "Ersue, Mehmet (NSN - DE/Munich)" Thread-Topic: [Netconf] RESTCONF #2: session monitoring Thread-Index: AQHQCaVPXGgdzz6O5U+oUKO0NtrCs5xzC6YAgABufgD//7wjgIAElRaAgAyYEICAAAsNAIAAAViAgAdmLoA= Date: Fri, 12 Dec 2014 15:16:13 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.11] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB459; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB459; x-forefront-prvs: 04238CD941 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(189002)(24454002)(51704005)(377454003)(479174003)(199003)(21056001)(40100003)(93886004)(83506001)(2656002)(19580405001)(92566001)(31966008)(106356001)(66066001)(97736003)(68736005)(106116001)(105586002)(102836002)(62966003)(77156002)(86362001)(99396003)(107046002)(122556002)(101416001)(4396001)(99286002)(64706001)(76176999)(50986999)(46102003)(120916001)(87936001)(54356999)(20776003)(36756003); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB459; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/WN_88w7p4aceFdifVCUZWhcncr0 Cc: netconf Subject: Re: [Netconf] RESTCONF #2: session monitoring X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Dec 2014 15:16:49 -0000 I prefer S0, only because S1 puts stuff into the standard unnecessarily. The "cost" for S0 is just removing the import and the identity statements (8 lines total). These is currently no normative reference to NETCONF Monitoring, so the cost for S1 would be to add it. Thus it seems that S0 < S1 :) K. On 12/7/14, 12:16 PM, "Andy Bierman" wrote: >On Sun, Dec 7, 2014 at 9:11 AM, Andy Bierman wrote: >> Hi, >> >> So that is solution S1. >> We will just define the restconf-tls identity and say >> in the draft that there is no standard RESTCONF session monitoring >> and the identity is defined for future use. >> > > >This creates a normative reference to NETCONF Monitoring for no reason. >So I am proposing S0 -- do not have anything in the RESTCONF draft >about session monitoring, and do not define the restconf-tls identity >until it is needed in a standard YANG module. > >If there are no comments, then S1 is still the default solution. >IMO there is no standards value in S1 but its cost is also low. From nobody Sat Dec 13 09:00:53 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D3BE1A1A6C for ; Sat, 13 Dec 2014 09:00:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mx2oBEG3kBDm for ; Sat, 13 Dec 2014 09:00:50 -0800 (PST) Received: from mail-lb0-f171.google.com (mail-lb0-f171.google.com [209.85.217.171]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 82D591A1A66 for ; Sat, 13 Dec 2014 09:00:50 -0800 (PST) Received: by mail-lb0-f171.google.com with SMTP id w7so3015452lbi.2 for ; Sat, 13 Dec 2014 09:00:49 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=lxDCqueAJXNvb2SzKAfhdfKdtV0/KZ/Yra2KRAqfW10=; b=IP2ZjJHpK9FzF7/m0e38DtOydBkkYN0PWCrbH768Ebho9xQ8+Ix4sK8Zx2+ykjINJ5 6oUgg0kANsDt2qywk969y07Z3Ny/q/Q3HYM9JnhJJhY7tldwdnhLN6uh21Phk6a20COA 7iZFYXq/onDz6d8Z/uTr6D3QBlnJwS6qLPAb9ot8VHBQnjuPKQ2H6jDpOPFnIfz+1Kyf 2R40G9klPKB2WwoXTX0UTC5WgwH47+BegqJmNZkmjGS9kD/kAmtkv41615d5htYcUPRX h38DXqHh7unLGIvNNNfriLRfkQUmxiVjInyEpjoaeqMDlppWi4aAA4uCtdIjgGetp4dA SK/g== X-Gm-Message-State: ALoCoQmChxvcACUtiBBOX1QZddy+P2oMV6+48y1ZXFf7as6vrhkeqIbV8jSp5ON7tGWsH6H1tI2u MIME-Version: 1.0 X-Received: by 10.112.85.11 with SMTP id d11mr21365677lbz.100.1418490048906; Sat, 13 Dec 2014 09:00:48 -0800 (PST) Received: by 10.112.157.233 with HTTP; Sat, 13 Dec 2014 09:00:48 -0800 (PST) In-Reply-To: References: Date: Sat, 13 Dec 2014 09:00:48 -0800 Message-ID: From: Andy Bierman To: Kent Watsen Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/PQ-RfEk99WHhHCSD7KKDHLNPNk4 Cc: netconf Subject: Re: [Netconf] RESTCONF #2: session monitoring X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Dec 2014 17:00:52 -0000 On Fri, Dec 12, 2014 at 7:16 AM, Kent Watsen wrote: > > I prefer S0, only because S1 puts stuff into the standard unnecessarily. > > The "cost" for S0 is just removing the import and the identity statements > (8 lines total). These is currently no normative reference to NETCONF > Monitoring, so the cost for S1 would be to add it. Thus it seems that S0 > < S1 :) > I just added that imports on github, so it is not in draft-03. There is no cost to S0. It might be a bad idea for developers to use this identity for proprietary sessions instead of their own identity. It doesn't help a 3rd party client much if the same identity means different things on every server. It makes it hard to tell the standard sessions from the proprietary sessions, when standard monitoring is finally published. Unless there are any objections, we will use solution S0. > K. > Andy > > On 12/7/14, 12:16 PM, "Andy Bierman" wrote: > >>On Sun, Dec 7, 2014 at 9:11 AM, Andy Bierman wrote: >>> Hi, >>> >>> So that is solution S1. >>> We will just define the restconf-tls identity and say >>> in the draft that there is no standard RESTCONF session monitoring >>> and the identity is defined for future use. >>> >> >> >>This creates a normative reference to NETCONF Monitoring for no reason. >>So I am proposing S0 -- do not have anything in the RESTCONF draft >>about session monitoring, and do not define the restconf-tls identity >>until it is needed in a standard YANG module. >> >>If there are no comments, then S1 is still the default solution. >>IMO there is no standards value in S1 but its cost is also low. > From nobody Sun Dec 14 07:39:19 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2643B1A6FC6 for ; Sun, 14 Dec 2014 07:39:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6pg5wF4QnRV1 for ; Sun, 14 Dec 2014 07:39:15 -0800 (PST) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [93.183.12.31]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AB511A6FC4 for ; Sun, 14 Dec 2014 07:39:14 -0800 (PST) Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.14.3/8.14.3) with ESMTP id sBEFdCCS018733 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Sun, 14 Dec 2014 15:39:12 GMT Received: from DEMUHTC001.nsn-intra.net ([10.159.42.32]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id sBEFdB0i021979 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sun, 14 Dec 2014 16:39:11 +0100 Received: from DEMUHTC013.nsn-intra.net (10.159.42.44) by DEMUHTC001.nsn-intra.net (10.159.42.32) with Microsoft SMTP Server (TLS) id 14.3.195.1; Sun, 14 Dec 2014 16:39:11 +0100 Received: from DEMUMBX005.nsn-intra.net ([169.254.5.147]) by DEMUHTC013.nsn-intra.net ([10.159.42.44]) with mapi id 14.03.0195.001; Sun, 14 Dec 2014 16:39:11 +0100 From: "Ersue, Mehmet (NSN - DE/Munich)" To: ext Andy Bierman , Netconf Thread-Topic: [Netconf] RESTCONF #4: defaults handling Thread-Index: AQHQEkd389eyeQwhCU6c9LSOdRADcZyPQuSg Date: Sun, 14 Dec 2014 15:39:09 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.159.42.112] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-purgate-type: clean X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate: clean X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate-size: 1134 X-purgate-ID: 151667::1418571552-0000677A-05AD48B8/0/0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/sjC2ZLmklQDNGGudLleNP66yt_I Subject: Re: [Netconf] RESTCONF #4: defaults handling X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Dec 2014 15:39:17 -0000 Dear All, please comment on the solution proposal of issue #4 below. If there is no objection the author is going to implement as proposed. The issue will be closed in the virtual meeting on Dec 15. Cheers,=20 Mehmet=20 > -----Original Message----- > From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Andy Bie= rman > Sent: Sunday, December 07, 2014 6:59 PM > To: Netconf > Subject: [Netconf] RESTCONF #4: defaults handling >=20 > Hi, >=20 > This is the proposal for draft-04 for defaults handling. > The text is in the github version of the draft. >=20 > 1) server MUST include the "defaults" protocol capability in > the "capability" list with parameter "basic-mode" set. > Example: >=20 > urn:ietf:params:restconf:capability:defaults:1.0?basic-mode=3Dexplici= t >=20 >=20 > 2) server MAY support the "with-defaults" query parameter > (works the same as parameter for get or get-config) >=20 >=20 >=20 > Andy >=20 > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf From nobody Sun Dec 14 08:53:58 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B1961A00E1 for ; Sun, 14 Dec 2014 08:53:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uX75R-0wnmBB for ; Sun, 14 Dec 2014 08:53:55 -0800 (PST) Received: from mail-lb0-f173.google.com (mail-lb0-f173.google.com [209.85.217.173]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E23D1A006D for ; Sun, 14 Dec 2014 08:53:55 -0800 (PST) Received: by mail-lb0-f173.google.com with SMTP id z12so7936087lbi.4 for ; Sun, 14 Dec 2014 08:53:53 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=pyXvNnOqbA/jjSgpzwgnh2eGaF/+6ibcEVGcOokQpWQ=; b=N7ABIah8eejUt/i7LU4zc7J98mmYDUfZLiwdmGLVxb3YXqo8UATTOqmHFZMf39I0wR IkCSOpODBip6P2V8vCw1rKXth1twzkHkekRiCgDKfWTh5rCzIXa6DPH1j0cPYb3fL6gm mWWSHhZ1vvhxtlpiTi1VaUAulUopvDStf55sz6ctEJzlO9V68i/NPHA+/9Cojw2GbuGr TBGlZ4gzbxHo0YoTeUtMcZD09SF2YLaxi1/Y+CbmkHLOR6kb/z93SKGgLE19FR14HNMp 43nnRjGj9ZsNhxVVMrPxwUAdCjHwt8KfoUPngviNsmmAOH8yrB+dcQ346FmWfrvekRMn o3oA== X-Gm-Message-State: ALoCoQmcSlQd50hzH0+uieFR9yCGKwmhd2FewRQ0epVi/s/sYqIh5NIQIuYHZsDhVTePzxXvrJHv MIME-Version: 1.0 X-Received: by 10.112.101.100 with SMTP id ff4mr25837241lbb.94.1418576033806; Sun, 14 Dec 2014 08:53:53 -0800 (PST) Received: by 10.112.157.233 with HTTP; Sun, 14 Dec 2014 08:53:53 -0800 (PST) Date: Sun, 14 Dec 2014 08:53:53 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/ZkHnNZQB9yfOFTLb_-_aOHxUGDI Subject: [Netconf] RESTCONF #16: content parameter should be mandatory-to-implement X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Dec 2014 16:53:57 -0000 Hi, A new RESTCONF issue has been added: https://github.com/netconf-wg/restconf/issues/16 Andy From nobody Sun Dec 14 08:57:37 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 031A81A00E1 for ; Sun, 14 Dec 2014 08:57:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lFTrA5fZ_pZt for ; Sun, 14 Dec 2014 08:57:34 -0800 (PST) Received: from mail-la0-f44.google.com (mail-la0-f44.google.com [209.85.215.44]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8014B1A006D for ; Sun, 14 Dec 2014 08:57:34 -0800 (PST) Received: by mail-la0-f44.google.com with SMTP id gd6so8438583lab.3 for ; Sun, 14 Dec 2014 08:57:33 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=YsbVoFLyoN1CcmsQ1Va5U/dpespqe98uysewYPmrXBA=; b=kXxPsFd1uoZ6cL6X9XIzFxyaUp+ZzVCh48vOYKmTnBt0lfSmKlR1dsvc+FeWhq5i2t 1A0PsniP40hbptKGOv+We4FmVOZXOZkE3w1v5q1uoqZDGATTQU26ZW1EODfAX/MofVL8 nIBzR0jiKhFkAtGkG8eCoNMw7Ds6F8nnbDa7kGvjT1rjFRMy0SpZQ92A2kwTKzPas8KQ fDyTCG74X5/X6cMkVby2Rdt22kQvQO2k8DtWeDQJV6mGAYrFLdNjK4fo/YEpcTjHjaQw 4r4Ek08mPvaKHoExGxOQZDjkIMYnCCOe/V7YNwhjXIeyLXIhMBOq9habKg6hfrhzC9Xp +rCA== X-Gm-Message-State: ALoCoQngKvCLjE5sEW3JTNZlxy+rmzdcP/mx7gx7OzX7uWTh5L7QIPpTA3R9m5KIWyoTXOXbnTow MIME-Version: 1.0 X-Received: by 10.152.5.198 with SMTP id u6mr26577640lau.42.1418576252962; Sun, 14 Dec 2014 08:57:32 -0800 (PST) Received: by 10.112.157.233 with HTTP; Sun, 14 Dec 2014 08:57:32 -0800 (PST) Date: Sun, 14 Dec 2014 08:57:32 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/NwMFgHSMnG9DQNAXrsysZPpIQYk Subject: [Netconf] YANG Patch #1: structure of edit value anyxml X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Dec 2014 16:57:36 -0000 Hi, A new YANG Patch issue has been added to the issue tracker: https://github.com/netconf-wg/yang-patch/issues/1 Andy From nobody Sun Dec 14 09:26:03 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA6981A0100 for ; Sun, 14 Dec 2014 09:26:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9AffqhzYx0xp for ; Sun, 14 Dec 2014 09:25:59 -0800 (PST) Received: from mail-lb0-f175.google.com (mail-lb0-f175.google.com [209.85.217.175]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60D0A1A00E1 for ; Sun, 14 Dec 2014 09:25:59 -0800 (PST) Received: by mail-lb0-f175.google.com with SMTP id u10so8224925lbd.34 for ; Sun, 14 Dec 2014 09:25:57 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=lTHP62toSZuXIiUTyflh/M5A9XoLKJPigoEazFcuiZs=; b=FvTCcBLRrqniMBdL6N2slSKmWH3sx/ULOxE4WymViqNaIw15rOHxKHsMThXU3AXwoV 69NXAH4F2PmmUz9zTUokU0q2XzjJFI9pTxwfcz6+QeUo38dVyaFs0KCHZPJP88viks9p Xz75Cm/03I7UJGKkWPgTvyUFbfVTOspoYTjBK3Z3MBvYBhuKBoSuMQHNny6IghZkDQpV sEGmS9BLP/SUK7m+s+QemEagRkwtswFE4iU6QWLO84Gb9bk1OZK5JeiwGOnF5a3GO9Gy R0HCXrXKkpsdmnOeNJcKf52agUjEEzoD9rF3fmMnwAvR7cmHNfgsjvxwKYS13xXv47Lu 80Aw== X-Gm-Message-State: ALoCoQlw0cvHTr4paY6rhotn6ILKWsNDmYH8yRrk+OESnhaoOwi17ulymxOT09SOM6XgxQl0TQJp MIME-Version: 1.0 X-Received: by 10.112.85.11 with SMTP id d11mr26175473lbz.100.1418577957860; Sun, 14 Dec 2014 09:25:57 -0800 (PST) Received: by 10.112.157.233 with HTTP; Sun, 14 Dec 2014 09:25:57 -0800 (PST) Date: Sun, 14 Dec 2014 09:25:57 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/rPcSmI-31DlVVrRmBfREwrJXuYo Subject: [Netconf] YANG Patch #2: parsing QNames in value parameter anyxml X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Dec 2014 17:26:01 -0000 Hi, There is a new YANG Patch issue added to the tracker: https://github.com/netconf-wg/yang-patch/issues/2 YP#1 and YP#2 are general problems with anyxml. They are probably related to YANG1.1 #Y34 I have run into major problems implementing YANG Patch, because of anyxml. (Need 1 of our proprietary extensions implemented in client and server). YANG Patch relies on YANG anyxml, but unlike the edit-config parameter, the child nodes of the anyxml node are not predictable. Child nodes of are not parsed as anyxml -- the matching YANG schema is applied instead or it is an unknown object. Andy From nobody Mon Dec 15 00:33:53 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A67291A1A30 for ; Mon, 15 Dec 2014 00:33:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ByQmNTmb7mmY for ; Mon, 15 Dec 2014 00:33:50 -0800 (PST) Received: from mailgw10.technion.ac.il (mailgw10.technion.ac.il [132.68.225.10]) by ietfa.amsl.com (Postfix) with ESMTP id 0E4011A0A85 for ; Mon, 15 Dec 2014 00:33:49 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkoGAImcjlSERAEi/2dsb2JhbABagwYBUVMFBIMCsBEBAQEBAQEGg2WOShGHCRYBAQEBAQF8hDYVdgImAi5NiCMIBaw4j0GQcIU0gSGEX4oPglKBQQWRQIUwgQwwgi6MFoE4IoNubAGCQgEBAQ X-IPAS-Result: AkoGAImcjlSERAEi/2dsb2JhbABagwYBUVMFBIMCsBEBAQEBAQEGg2WOShGHCRYBAQEBAQF8hDYVdgImAi5NiCMIBaw4j0GQcIU0gSGEX4oPglKBQQWRQIUwgQwwgi6MFoE4IoNubAGCQgEBAQ X-IronPort-AV: E=Sophos;i="5.07,578,1413234000"; d="scan'208";a="1677215" Received: from webmail.technion.ac.il ([132.68.1.34]) by mailgw10.technion.ac.il with ESMTP; 15 Dec 2014 10:33:48 +0200 Received: by webmail.technion.ac.il (Postfix, from userid 48) id 8512E100162; Mon, 15 Dec 2014 10:33:47 +0200 (IST) Received: from galiil.marvell.com (galiil.marvell.com [199.203.130.254]) by webmail.technion.ac.il (Horde Framework) with HTTP; Mon, 15 Dec 2014 10:33:47 +0200 Date: Mon, 15 Dec 2014 10:33:47 +0200 Message-ID: <20141215103347.Horde.S0haXm76KM2aesJALOkf5w1@webmail.technion.ac.il> From: Tal Mizrahi To: netconf@ietf.org User-Agent: Horde Application Framework 5 Content-Type: text/plain; charset=UTF-8; format=flowed; DelSp=Yes MIME-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/QZwNS-j5tbwd4ycbA8HgvdEQTyU Subject: [Netconf] Updated draft-mm-netconf-time-capability-03 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 08:33:52 -0000 Hi, A minor revision to avoid expiration. Any comments will be welcome. Thanks, Tal. A new version of I-D, draft-mm-netconf-time-capability-03.txt has been successfully submitted by Tal Mizrahi and posted to the IETF repository. Name: draft-mm-netconf-time-capability Revision: 03 Title: Time Capability in NETCONF Document date: 2014-12-15 Group: Individual Submission Pages: 28 URL: http://www.ietf.org/internet-drafts/draft-mm-netconf-time-capability-03.txt Status: https://datatracker.ietf.org/doc/draft-mm-netconf-time-capability/ Htmlized: http://tools.ietf.org/html/draft-mm-netconf-time-capability= -03 Diff: http://www.ietf.org/rfcdiff?url2=3Ddraft-mm-netconf-time-capability-03 Abstract: This document defines a capability-based extension to the Network Configuration Protocol (NETCONF) that allows time-triggered configuration and management operations. This extension allows NETCONF clients to invoke configuration updates according to scheduled times, and allows NETCONF servers to attach timestamps to the data they send to NETCONF clients. Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org.=E2=80= =8B From nobody Mon Dec 15 10:39:42 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E8EF1A874A for ; Mon, 15 Dec 2014 10:39:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.801 X-Spam-Level: X-Spam-Status: No, score=-8.801 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, GB_I_INVITATION=-2, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1oMenWpQDfiD for ; Mon, 15 Dec 2014 10:39:37 -0800 (PST) Received: from mtv-iport-2.cisco.com (mtv-iport-2.cisco.com [173.36.130.13]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FCFC1A870B for ; Mon, 15 Dec 2014 10:39:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=266653; q=dns/txt; s=iport; t=1418668778; x=1419878378; h=from:to:subject:date:message-id:in-reply-to:mime-version; bh=qMtd8W9fvtCfVlLQER8/XeOE+At8lkMK+bSiaKJisLE=; b=ekbRM3Xajqjy8LidFfgfiYp38pf7DhIDBxFRvjf1TUy0b8fBXUuJY3Ec ijacwMoY/5O/8APY9pVgssj5rSV/SJk6tYufdwc2DpoAU7oIf56FOiS6k jMWVKb2J8k6sf3iB3gB8RepP5PmHsLzd8dRkk0I3JYRcajNWN7gNn1vmS o=; X-Files: draft-voit-i2rs-pub-sub-requirements-00 Netconf interim Dec 15.pdf : 190189 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ap4EACEqj1StJV2a/2dsb2JhbADSFwICAQ X-IronPort-AV: E=Sophos;i="5.07,581,1413244800"; d="pdf'?scan'208";a="113111907" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by mtv-iport-2.cisco.com with ESMTP; 15 Dec 2014 18:39:34 +0000 Received: from xhc-aln-x05.cisco.com (xhc-aln-x05.cisco.com [173.36.12.79]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id sBFIdXk6022910 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 15 Dec 2014 18:39:33 GMT Received: from xmb-rcd-x14.cisco.com ([169.254.4.121]) by xhc-aln-x05.cisco.com ([173.36.12.79]) with mapi id 14.03.0195.001; Mon, 15 Dec 2014 12:39:32 -0600 From: "Alberto Gonzalez Prieto (albertgo)" To: "Ersue, Mehmet (NSN - DE/Munich)" , "Eric Voit (evoit)" , "netconf@ietf.org" Thread-Topic: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements Thread-Index: AdAVViieql0DVYwjTDSQ2bF1EzwXyQAA7QaAAAdHoHD///PKAP//3hxAgAZLiwA= Date: Mon, 15 Dec 2014 18:39:32 +0000 Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.8.130913 x-originating-ip: [10.154.204.253] Content-Type: multipart/mixed; boundary="_002_D0B46A7F18CC6albertgociscocom_" MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/Ds6V5DWrRWsfEFwsUzDALIXmYM4 Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 18:39:40 -0000 --_002_D0B46A7F18CC6albertgociscocom_ Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable Thanks for the opportunity to present today and your comments. I attach the slides. Thanks, Alberto On 12/11/14, 12:35 PM, "Ersue, Mehmet (NSN - DE/Munich)" wrote: >The agenda is unfortunately pretty full. >You can get a few min. at the beginning of the I2RS slot, which is >planned to start approx. at 1925 CET. >See attached invitation. > >Cheers,=20 >Mehmet=20 > > >> -----Original Message----- >> From: ext Alberto Gonzalez Prieto (albertgo) [mailto:albertgo@cisco.com] >> Sent: Thursday, December 11, 2014 9:33 PM >> To: Ersue, Mehmet (NSN - DE/Munich); Eric Voit (evoit); netconf@ietf.org >> Subject: Re: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements >>=20 >> Thanks Mehmet, >> I can do it. >>=20 >> Please provide me with the details for the slot we would have for this >> draft. >>=20 >> Thanks, >>=20 >> Alberto >>=20 >> On 12/11/14, 11:17 AM, "Ersue, Mehmet (NSN - DE/Munich)" >> wrote: >>=20 >> >Hi Eric, >> > >> >can any of you attend the NETCONF interim meeting on Dec 15 and explain >> >shortly the focus of the draft? >> > >> >Cheers, >> >Mehmet >> > >> >> -----Original Message----- >> >> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext Eric >> >>Voit (evoit) >> >> Sent: Thursday, December 11, 2014 5:12 PM >> >> To: netconf@ietf.org >> >> Subject: [Netconf] New "-00": draft-voit-i2rs-pub-sub-requirements >> >> >> >> I2RS has a number of YANG datastore subscription requirements. We >>have >> >>just >> >> published a new draft assembling some of these requirements, and >> >>articulating what >> >> functions would be need to be supported by the subscribed YANG >> >>Datastore. >> >> >> >> Hopefully we can discuss this draft during one of the interims in >> >>January. >> >> >> >> Thanks! >> >> Eric, Alex, & Alberto >> >> >> >> -----Original Message----- >> >> From: i2rs [mailto:i2rs-bounces@ietf.org] On Behalf Of Eric Voit >>(evoit) >> >> Sent: Thursday, December 11, 2014 10:22 AM >> >> To: i2rs@ietf.org >> >> Cc: Alexander Clemm (alex); Alberto Gonzalez Prieto (albertgo) >> >> Subject: [i2rs] New "-00": draft-voit-i2rs-pub-sub-requirements >> >> >> >> A number of I2RS WG documents ask for Pub/Sub capabilities. Other WG >> >>have >> >> addressed or are looking for similar mechanisms. The document >> >> http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 >> >> assembles a view of requirements for a YANG Datastore from an I2RS >> >>perspective, >> >> and makes comparisons with capabilities in standards in and beyond >>the >> >>IETF. >> >> >> >> This document is a good companion document for >> >> https://tools.ietf.org/html/draft-netmod-clemm-datastore-push-00 >> >> >> >> Thanks, >> >> Eric , Alex, & Alberto >> >> >> >> -----Original Message----- >> >> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] >> >> Sent: Thursday, December 11, 2014 10:03 AM >> >> To: Alberto Gonzalez Prieto (albertgo); Alberto Gonzalez Prieto >> >>(albertgo); Alexander >> >> Clemm (alex); Eric Voit (evoit); Alexander Clemm (alex); Eric Voit >> >>(evoit) >> >> Subject: New Version Notification for >> >>draft-voit-i2rs-pub-sub-requirements-00.txt >> >> >> >> >> >> A new version of I-D, draft-voit-i2rs-pub-sub-requirements-00.txt >> >> has been successfully submitted by Eric Voit and posted to the IETF >> >>repository. >> >> >> >> Name: draft-voit-i2rs-pub-sub-requirements >> >> Revision: 00 >> >> Title: Requirements for Subscription to YANG Datastores >> >> Document date: 2014-12-10 >> >> Group: Individual Submission >> >> Pages: 13 >> >> URL: >> >>http://www.ietf.org/internet-drafts/draft-voit-i2rs-pub-sub- >> >> requirements-00.txt >> >> Status: >> >>https://datatracker.ietf.org/doc/draft-voit-i2rs-pub-sub-requirements/ >> >> Htmlized: >> >>http://tools.ietf.org/html/draft-voit-i2rs-pub-sub-requirements-00 >> >> >> >> >> >> Abstract: >> >> This document provides requirements for a service that allows >>client >> >> applications to subscribe to updates of a YANG datastore. Based >>on >> >> criteria negotiated as part of a subscription, updates will be >>pushed >> >> to targeted recipients. Such a capability eliminates the need for >> >> periodic polling of YANG datastores by applications and fills a >> >> functional gap in existing YANG transports (i.e. Netconf and >> >> Restconf). Such a service can be summarized as a "pub/sub" >>service >> >> for YANG datastore updates. Beyond a set of basic requirements >>for >> >> the service, various refinements are addressed. These refinements >> >> include: periodicity of object updates, filtering out of objects >> >> underneath a requested a subtree, and delivery QoS guarantees. >> >> >> >> >> >> >> >> >> >> Please note that it may take a couple of minutes from the time of >> >>submission until the >> >> htmlized version and diff are available at tools.ietf.org. >> >> >> >> The IETF Secretariat >> >> >> >> _______________________________________________ >> >> i2rs mailing list >> >> i2rs@ietf.org >> >> https://www.ietf.org/mailman/listinfo/i2rs >> >> >> >> _______________________________________________ >> >> Netconf mailing list >> >> Netconf@ietf.org >> >> https://www.ietf.org/mailman/listinfo/netconf >> > >> >_______________________________________________ >> >Netconf mailing list >> >Netconf@ietf.org >> >https://www.ietf.org/mailman/listinfo/netconf > --_002_D0B46A7F18CC6albertgociscocom_ Content-Type: application/pdf; name="draft-voit-i2rs-pub-sub-requirements-00 Netconf interim Dec 15.pdf" Content-Description: draft-voit-i2rs-pub-sub-requirements-00 Netconf interim Dec 15.pdf Content-Disposition: attachment; filename= "draft-voit-i2rs-pub-sub-requirements-00 Netconf interim Dec 15.pdf"; size=190189; creation-date="Mon, 15 Dec 2014 18:39:32 GMT"; modification-date="Mon, 15 Dec 2014 18:39:32 GMT" Content-ID: <7817221C6717104598AF23F5600FB187@emea.cisco.com> Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAGtV0mP2zYUvvNXcLZYdmNa3EQybXNI0UtvAQzkUPc0aFAU MwWm8/+Bfo/iJkuyp0HsA6kn8m3f2/TCP/MX3vNe9PgprYz1kjsZRMCPW9Pzf//kX/g//PDLq+SP r1zG/+sjLlmdjj2XG6zQngotMde9C9pr/lTEVcpf/OuOJCiSAG3wf31kLxBFW8kHKWRUyGgpvBtw 7pl/OnKoR38sSgvjlVF8j4fjMz8cjwoXj1/577y7ud2yfS8M7+620AbrfVof0vpuy3HA8u42bnBi M6OcuniYdactbTTvdrRK3v0Qz2LzPt/en/MtR0S6O2rAukM6mXn1WW5RKeso00l1LqQoVoQUDbMe ePMHP/7Gfz1GwGd+BTCNX1n1q7RWBKPNol81aQSnGZuMGqJqKnokyWMUYFfkgQuiz/DjY4soQPdG +lYyy4g6vwXTiASW8QEerCQYjod3tyC+yXB2HlDGKNHbYWjFgyUCiuA+/r3uSm2jK2cclUe6WPe/ GSrvWoaI0+ws5WP4YxmsUL2RfI/9efQHiiTy0ocfx81PyAY87x9O20R5+Dmd2SWCvD+k3a7s0hHK ENy+u3+IBBZTBgRKGCzp9QnYZGYfP14B4czCGn1WK+GCDY1dJoFwU0FADGqnrAkUjeOOlR0KSROA UsJRXDpg66RLVSQ6VFP0KTU6lJY9iqCjosNGh2bBt3eN6Bra65xjXFfOSgo1BKtXBcCx8OU8whYl VL7WCeekQb6sKN6onYt59dLS7oLnUnBX6YMTvRo0ojtLT3GY3TaVPhb6BbSqHhekJ9ykMHKsGlUP 2WtSBPUq63EG3w39vsG9yqK3rPG8wM8ECrUhqdwmbxtryuLULNbQuk7UsiivoPNSIUtBMZUSA1qx SUCjQSo7eDgmy5oCRLK2O5Q2yHqPPnZd2CwG/CCk7j1K5rIIsmE1rBWURkrOmCIRl7lF56SWSD6K fR0SsIEJ+y1KAFY0TxDQq9F3xyOHHj0BW/QtWBtvHcq1psfGN1TicJSVo5vC8CIgQUbUM+w1Phtz poEZ/R+loX0msbxDh4V82GFI1daeojJ676gimm/UudzZZPsAZ4+yV7lNdB9HrEm66eAxTjmLShmE cV4twqJmEZQFOhIIpxdnFYM23iRkCqnoO7OxwDp7kwKUxXmmVDNUbUn1vqqP6YXU58/cWpSLaFKm PbU0M5r51N4daRhYp+NprlowcdZ3pt2m6rHmRmmVMIOmBnfmzTZZLiJkMfk6rxcRcqLMA6kOI8zm 8R9ylAEcWCXZWwLwKjhxQmIXwFEGUz2+CAAOhq0RnEwDOJWm4znWgoNyFu9+D3DWPCiNFoNCo1Zz P74ZHrT7b4XnQ4QF3yI5rTD5I8NZt8FsNs2vBNybKkcD3FmNnJT9deCCIt8rR8D5lFWZBpAqjb7a 6FwDHApjpl3LqrUZrmZV8m3qrbXISq/EYAL1uoQcw/fgwiRSx7fCNMDDqBghMzXjREjLXmEitLMu 3YbC5/8AgaEA1wplbmRzdHJlYW0KZW5kb2JqCjUgMCBvYmoKMTEyOQplbmRvYmoKMiAwIG9iago8 PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgNiAwIFIgL0NvbnRlbnRzIDQg MCBSIC9NZWRpYUJveCBbMCAwIDcyMCA1NDBdCj4+CmVuZG9iago2IDAgb2JqCjw8IC9Qcm9jU2V0 IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgL0NzMiA4IDAgUiA+PiAv Rm9udCA8PAovVFQyIDEwIDAgUiAvVFQ0IDEyIDAgUiA+PiA+PgplbmRvYmoKMTMgMCBvYmoKPDwg L0xlbmd0aCAxNCAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngBhVXfb9tUFD6Jb1KkFj8gWEeHisWvVVNbuRsarcYGSZOl7UoWpenY KiTkOjeJqRsH2+m2qk97gTcG/AFA2QMPSDwhDQZie9n2wLRJU4cqqklIe+jEDyEm7QVV4bt2YidT xFz1+ss53znnO+de20Q9X2m1mhlViJarrp3PJJWTpxaUnk2K0rPUSwPUq+lOLZHLzRIuwRX3zuvh HYoIy+2R7v5O9iO/eovc0YkiT8BuFR19GfgMUczUa7ZLFL8H+/hptwbc8xzw0zYEAqsCl32cEnjR xyc9TiE/CY7QKusVrQi8Bjy82GYvt2FfAxjIk+FVbhu6ImaRs62SYXLP4S+Pcbcx/w8um3X07F2D WPucpbljuA+J3iv2VL6JP9e19BzwS7Bfr7lJYX8F+I/60nwCeB9R9KmSfXTe50dfX60U3gbeBXvR cKcLTftqdTF7HBix0fUl65jIIzjXdWcSs6QXgO9W+LTYY+iRqMhTaeBh4MFKfaqZX5pxVuaE3cuz WpnMAiOPZL+nzeSAB4A/tK28qAXN0jo3M6IW8ktXa26uqUHarppZUQv9Mpk7Xo/IKW27lcKUH8sO unahGcsWSsbR6SZ/rWZ6ZxHa2AW7nhfakJ/d0ux0Bhh52D+8Oi/mBhzbXdRSYrajwEfoREQjThYt YtWpSjukUJ4ylMS9RjY8JTLIhIXDy2ExIk/SEmzdeTmP48eEjLIXvS2iUaU7x69wv8mxWD9T2QH8 H2Kz7DAbZxOksDfYm+wIS8E6wQ4FCnJtOhUq030o9fO8T3VUFjpOUPL8QH0oiFHO2e8a+s2P/oaa sEsr9CNP0DE0W+0TIAcTaHU30j6na2s/7A48yga7+M7tvmtrdPxx843di23HNrBuxrbC+NivsS38 bVICO2B6ipahyvB2wgl4Ix09XAHTJQ3rb+BZ0NpS2rGjper5gdAjJsE/yD7M0rnh0Kr+ov6pbqhf qBfU3ztqhBk7piR9Kn0r/Sh9J30v/UyKdFm6Iv0kXZW+kS4FObvvvZ8l2HuvX2ET3YpdaNVrnzUn U07Ke+QX5ZT8vPyyPBuwFLlfHpOn5L3w7An2zQz9Hb0YdAqzak21ey3xBBg0DyUGnQbXxlTFhKt0 Flnbn5OmUjbIxtj0I6d2XJzllop4Op6KJ0iJ74tPxMfiMwK3nrz4XvgmsKYD9f6TEzA6OuBtLEwl yDPinTpxVkX0CnSb0M1dfgbfDqJJq3bWNsoVV9mvqq8pCXzKuDJd1UeHFc00Fc/lKDZ3uL3Ci6Mk voMijuhB3vu+RXbdDG3uW0SH/8I761ZoW6gTfe0Q9b8a2obwTnzmM6KLB/W6veLno0jkBpFTOrDf +x3pS+LddLfReID3Vc8nRDsfNxr/rjcaO18i/xbRZfM/WQBxeAplbmRzdHJlYW0KZW5kb2JqCjE0 IDAgb2JqCjEwNDcKZW5kb2JqCjcgMCBvYmoKWyAvSUNDQmFzZWQgMTMgMCBSIF0KZW5kb2JqCjE1 IDAgb2JqCjw8IC9MZW5ndGggMTYgMCBSIC9OIDMgL0FsdGVybmF0ZSAvRGV2aWNlUkdCIC9GaWx0 ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AZ2Wd1RT2RaHz703vdASIiAl9Bp6CSDSO0gVBFGJ SYBQAoaEJnZEBUYUESlWZFTAAUeHImNFFAuDgmLXCfIQUMbBUURF5d2MawnvrTXz3pr9x1nf2ee3 19ln733XugBQ/IIEwnRYAYA0oVgU7uvBXBITy8T3AhgQAQ5YAcDhZmYER/hEAtT8vT2ZmahIxrP2 7i6AZLvbLL9QJnPW/3+RIjdDJAYACkXVNjx+JhflApRTs8UZMv8EyvSVKTKGMTIWoQmirCLjxK9s 9qfmK7vJmJcm5KEaWc4ZvDSejLtQ3pol4aOMBKFcmCXgZ6N8B2W9VEmaAOX3KNPT+JxMADAUmV/M 5yahbIkyRRQZ7onyAgAIlMQ5vHIOi/k5aJ4AeKZn5IoEiUliphHXmGnl6Mhm+vGzU/liMSuUw03h iHhMz/S0DI4wF4Cvb5ZFASVZbZloke2tHO3tWdbmaPm/2d8eflP9Pch6+1XxJuzPnkGMnlnfbOys L70WAPYkWpsds76VVQC0bQZA5eGsT+8gAPIFALTenPMehmxeksTiDCcLi+zsbHMBn2suK+g3+5+C b8q/hjn3mcvu+1Y7phc/gSNJFTNlReWmp6ZLRMzMDA6Xz2T99xD/48A5ac3Jwyycn8AX8YXoVVHo lAmEiWi7hTyBWJAuZAqEf9Xhfxg2JwcZfp1rFGh1XwB9hTlQuEkHyG89AEMjAyRuP3oCfetbEDEK yL68aK2Rr3OPMnr+5/ofC1yKbuFMQSJT5vYMj2RyJaIsGaPfhGzBAhKQB3SgCjSBLjACLGANHIAz cAPeIACEgEgQA5YDLkgCaUAEskE+2AAKQTHYAXaDanAA1IF60AROgjZwBlwEV8ANcAsMgEdACobB SzAB3oFpCILwEBWiQaqQFqQPmULWEBtaCHlDQVA4FAPFQ4mQEJJA+dAmqBgqg6qhQ1A99CN0GroI XYP6oAfQIDQG/QF9hBGYAtNhDdgAtoDZsDscCEfCy+BEeBWcBxfA2+FKuBY+DrfCF+Eb8AAshV/C kwhAyAgD0UZYCBvxREKQWCQBESFrkSKkAqlFmpAOpBu5jUiRceQDBoehYZgYFsYZ44dZjOFiVmHW Ykow1ZhjmFZMF+Y2ZhAzgfmCpWLVsaZYJ6w/dgk2EZuNLcRWYI9gW7CXsQPYYew7HA7HwBniHHB+ uBhcMm41rgS3D9eMu4Drww3hJvF4vCreFO+CD8Fz8GJ8Ib4Kfxx/Ht+PH8a/J5AJWgRrgg8hliAk bCRUEBoI5wj9hBHCNFGBqE90IoYQecRcYimxjthBvEkcJk6TFEmGJBdSJCmZtIFUSWoiXSY9Jr0h k8k6ZEdyGFlAXk+uJJ8gXyUPkj9QlCgmFE9KHEVC2U45SrlAeUB5Q6VSDahu1FiqmLqdWk+9RH1K fS9HkzOX85fjya2Tq5FrleuXeyVPlNeXd5dfLp8nXyF/Sv6m/LgCUcFAwVOBo7BWoUbhtMI9hUlF mqKVYohimmKJYoPiNcVRJbySgZK3Ek+pQOmw0iWlIRpC06V50ri0TbQ62mXaMB1HN6T705PpxfQf 6L30CWUlZVvlKOUc5Rrls8pSBsIwYPgzUhmljJOMu4yP8zTmuc/jz9s2r2le/7wplfkqbip8lSKV ZpUBlY+qTFVv1RTVnaptqk/UMGomamFq2Wr71S6rjc+nz3eez51fNP/k/IfqsLqJerj6avXD6j3q kxqaGr4aGRpVGpc0xjUZmm6ayZrlmuc0x7RoWgu1BFrlWue1XjCVme7MVGYls4s5oa2u7act0T6k 3as9rWOos1hno06zzhNdki5bN0G3XLdTd0JPSy9YL1+vUe+hPlGfrZ+kv0e/W3/KwNAg2mCLQZvB qKGKob9hnmGj4WMjqpGr0SqjWqM7xjhjtnGK8T7jWyawiZ1JkkmNyU1T2NTeVGC6z7TPDGvmaCY0 qzW7x6Kw3FlZrEbWoDnDPMh8o3mb+SsLPYtYi50W3RZfLO0sUy3rLB9ZKVkFWG206rD6w9rEmmtd Y33HhmrjY7POpt3mta2pLd92v+19O5pdsN0Wu067z/YO9iL7JvsxBz2HeIe9DvfYdHYou4R91RHr 6OG4zvGM4wcneyex00mn351ZzinODc6jCwwX8BfULRhy0XHhuBxykS5kLoxfeHCh1FXbleNa6/rM TdeN53bEbcTd2D3Z/bj7Kw9LD5FHi8eUp5PnGs8LXoiXr1eRV6+3kvdi72rvpz46Pok+jT4Tvna+ q30v+GH9Av12+t3z1/Dn+tf7TwQ4BKwJ6AqkBEYEVgc+CzIJEgV1BMPBAcG7gh8v0l8kXNQWAkL8 Q3aFPAk1DF0V+nMYLiw0rCbsebhVeH54dwQtYkVEQ8S7SI/I0shHi40WSxZ3RslHxUXVR01Fe0WX RUuXWCxZs+RGjFqMIKY9Fh8bFXskdnKp99LdS4fj7OIK4+4uM1yWs+zacrXlqcvPrpBfwVlxKh4b Hx3fEP+JE8Kp5Uyu9F+5d+UE15O7h/uS58Yr543xXfhl/JEEl4SyhNFEl8RdiWNJrkkVSeMCT0G1 4HWyX/KB5KmUkJSjKTOp0anNaYS0+LTTQiVhirArXTM9J70vwzSjMEO6ymnV7lUTokDRkUwoc1lm u5iO/kz1SIwkmyWDWQuzarLeZ0dln8pRzBHm9OSa5G7LHcnzyft+NWY1d3Vnvnb+hvzBNe5rDq2F 1q5c27lOd13BuuH1vuuPbSBtSNnwy0bLjWUb326K3tRRoFGwvmBos+/mxkK5QlHhvS3OWw5sxWwV bO3dZrOtatuXIl7R9WLL4oriTyXckuvfWX1X+d3M9oTtvaX2pft34HYId9zd6brzWJliWV7Z0K7g Xa3lzPKi8re7V+y+VmFbcWAPaY9kj7QyqLK9Sq9qR9Wn6qTqgRqPmua96nu37Z3ax9vXv99tf9MB jQPFBz4eFBy8f8j3UGutQW3FYdzhrMPP66Lqur9nf19/RO1I8ZHPR4VHpcfCj3XVO9TXN6g3lDbC jZLGseNxx2/94PVDexOr6VAzo7n4BDghOfHix/gf754MPNl5in2q6Sf9n/a20FqKWqHW3NaJtqQ2 aXtMe9/pgNOdHc4dLT+b/3z0jPaZmrPKZ0vPkc4VnJs5n3d+8kLGhfGLiReHOld0Prq05NKdrrCu 3suBl69e8blyqdu9+/xVl6tnrjldO32dfb3thv2N1h67npZf7H5p6bXvbb3pcLP9luOtjr4Ffef6 Xfsv3va6feWO/50bA4sG+u4uvnv/Xtw96X3e/dEHqQ9eP8x6OP1o/WPs46InCk8qnqo/rf3V+Ndm qb307KDXYM+ziGePhrhDL/+V+a9PwwXPqc8rRrRG6ketR8+M+YzderH0xfDLjJfT44W/Kf6295XR q59+d/u9Z2LJxPBr0euZP0reqL45+tb2bedk6OTTd2nvpqeK3qu+P/aB/aH7Y/THkensT/hPlZ+N P3d8CfzyeCZtZubf94Tz+wplbmRzdHJlYW0KZW5kb2JqCjE2IDAgb2JqCjI2MTIKZW5kb2JqCjgg MCBvYmoKWyAvSUNDQmFzZWQgMTUgMCBSIF0KZW5kb2JqCjE4IDAgb2JqCjw8IC9MZW5ndGggMTkg MCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AbVX227dNhB851cwbh1Lxz00L9KR 1KR1kzS9JG2BAAfoQ90no0FRxAUcf1P/p5/UEcUd6uZjx0ltwKQlcnc5OztLXes3+lpbbY3Fjw++ qlunG9eZDj+6rqx+/4f+Vf+tz17cOH15o138vbnEpjqkZVfcofjsHZ8l48E2XWiDfkd3+cmf+u2m 9+B7D4gGvzeX6hqu+qnTVTAuBlR1nWmaqtOXV/r5XldVXIDB7xoTPGLf4p/9lT7b7yts3L/Vv+li WyprnC6OS721JujCbuKs1kWIE7x7VOrf9f6VfrmPkCw9O2squFVwG3x0G4etb00TYxu81oPX4p9S 7/8arAl0cjAgvm5eDafK5p0z3gbn9dxLk7wg6pGXDJ9Cgm7zkrDLXnwzZH/hZUBQRQSRxXUEbwGu 6VLKQrOLwCFfyrcRuDhsgzOdT7kS1P6dnCcSbgW1qe2EWrbtalM33jd64uIuyKaMm7pIkGUX3pu6 L5ipi8w41zOu0oUvgRtGMq/pH4CBj4WAT+MES07TUuAJkgJr2XuabH0lK7+WCY3kpYO7L3pbPts0 suMklGqwTjfn8R0WM0axxiX2XjlOeYhSUuv9pc5whYCUtHU3hcuzQM9diXnxefx7VirMv4lz1Ono eT8/Px2eHT1+ioDxwB4BubXSnaZwHB1YN46urr3xbX1rMs+PgQg8JRTUTCKcRZXqADHs9aGXpXxw i5qq8XbQhnxgyI41tSqqOvFhJ1m45TBLJ0gjGAixGx+lqYzzbQcZ7N2quduuvSjbzUW57ZmDEx2t I7d0lk/kWpRzC5Fd8dBzWOQoq89Ba503ravqibVcRmQ62IDzokpYLvZECmZVwkfN45B/31nT1VFg F2niaVTfIxeKHWxOeNZSJDz0AM10TboBTN2nG6zbzt0gukjZvYeu3RV+opIClfJJclcYHyjn5tnz gUO7F8M41ogR+qxCv2MfmBbI4T6gDuB1h+1ZH3gQXqsuYuWhusaVt94RcsU/G8RtA9RQeE/O4tDG v5ujrlQHFWwdO1fvTAioxDGCFcRzuPVQvqXnsFA+k2riEujvtE+lC5IqeFP6Nm5Cn/hSdlsalFJk dY7JMGJfRjPA3aJx98Xz8ZcCv2p7RoZUn/conlUu9y4WYr9OgVwxL7/rOzkQ/B6qj5rD9ZMJYIcW KGUcQ4o94M7Q3NWyX8sWGpVGzs7O1FFYUwpVccJdP8TgcEe5KBIrfozdqr9HgyVDIxxCWRp+Fe8X 2CzBVGlPtk/WMAiGxVfDLsU7EG86bASvY5QIhjEQQlrhkR6t1xc/K1wXmM+sgLdquZImd0Cb7rD9 SbV8PfyZgCf5y3S8KCOE4CMTIYSRUZJIaCWLqvgAlrBTCxf6zhHlJtkdcZlyw7Q+6QkEQuGGFPcw qRKcWE07VP6mky0kBCORCzKNYXJQgV39/wnWuu1PKljRxQcL1k+xmEEQe5K1/oSZGbHkAdi5UJnG te1U8zM9mRorCZZRPoiYVk64hzJhJUhLIaWWDMxSSVBHYswVS8NCHMs1rI1NRAuiLrRbRkPoSHNO 5u1VFRlyYTqPcCdbXdazfHWX9pqU4IHf3G7V9oytH3fXWncxa68LPftZVIWpkWTxAet/jGTfykai QTEkhzhh+oRUIof4LBUtPZYGKGuWLKAH0ouCOMu0WrkgMIjX0SU64C9xAomUArF8xcUmhoUPKIbD Vwydr8QOw7IkudSMBMojcDMmWQ3e/AfkF/FTCmVuZHN0cmVhbQplbmRvYmoKMTkgMCBvYmoKMTMw MwplbmRvYmoKMTcgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2Vz IDIwIDAgUiAvQ29udGVudHMgMTggMCBSIC9NZWRpYUJveApbMCAwIDcyMCA1NDBdID4+CmVuZG9i agoyMCAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3Mx IDcgMCBSIC9DczIgOCAwIFIgPj4gL0ZvbnQgPDwKL1RUNCAxMiAwIFIgL1RUNSAyMSAwIFIgL1RU MiAxMCAwIFIgL1RUNyAyMyAwIFIgPj4gPj4KZW5kb2JqCjI1IDAgb2JqCjw8IC9MZW5ndGggMjYg MCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ac2a228fxRXH3/evGB4CdiI2c7/Q FiFCVVEeCtgSDxUPyApykFOahMK/38+Z2dnd39WbOKkaJGyfncuZM99znfNKfadeKa30qPlnnfUh G5VMGQv/VPBavX6uflD/Uk+fvTHq5o0y9b83N0wKbhr2cp4xzLS7mTYt7nQqLjt1N2+3UG7Vz48r J582RoxO2ac0yP7L4pWdg3W91i4Fz7q7k6dtp8/DnbpVLusx6JiVN2EsybF2zGb01oWZdLeQXDCj ibaw9Dyz0+p6PzxGMJuE9+3z1zfP//3bf366U69fIHGn8xhNtjJbJTuWbJC7S3GMRRflfBhtsmm4 eamefv3SqK9+reLJeXSR/+o05+sfXvkc6wKKL2OxnKtNs22a3HDnf3j4yZHGrfrh8fCOJ28XnHLy 2vh6junaOqmz2m+kyuDq1qg3t8hgK1xLsEH9AVZ/ach9dgUebNGmRDPo0RdvTIrQkqv/1NUzUYSq Bp0TuZsNzDHEmhAEKMxPyXuUAGi5bE303NVCFCA1YrZAII2CrWX+sKLeqisOi9bZHa17xZGEL8DC 9CRgdkWAkIrc+pfX7QxhuL5RJrehWRkdRu18Up9CuwZT19eeJa5/Vv9UF+Hzz5y/5M8LW///8WdP Vn99dDn8qK7/rv563aVfZaRL4MgAeIuKulBM1FrdIXmxM/Pk9uf8WVQ0mdGi+srrOCYDy+goCoIk 0dFOQ0kn2uC8GYv2UZS0z13RBKrblHR4ekxJi8e0TEoag/yBqEernIuj0QWTWDXUndJQLfqqONDY NDz4MUGZFNuvNLQzPx/y/MGxEe3gWKKHHVytDj5U69Su5ZwaHDArYri6tduUdJh8yjklBcfvrKT7 3Im0OZP3EW3H5o7GcrgYd5S00/Z0NAOsZW7TUKHdr58pj94n9DMHgUrc0U91fTO8J/1UPw5dPwWo WuGcFzPh3WiqL/eljBinbiaaYfPwoXxDOD8MksvROvWp98O+nTCfX2I/1MVn7cc/2o/Qfux++2jn 2xObPr4cZKp/wpej5iT4rEtxm8yJicWnYAF+A6ruk9uf0+d6Ry5y2QkNdCWNHuMv5iSaUWMyFtrd sNCcHSP2SczJPHehbTAnHdwrrVp8/hFzEiL+wSblLF7chzBZlIBpGMTbnfD5cS9UmKbFlUWZ+Z/O Phw9+0oeyznf99nbzZyzKAfMNovitlmUHqWesygPcfvHuKsahIKnrFEYcOac8U4cVnfyK+KeVcEd gLD1Ct33b7Mt+CCX2IvIF8eCa0Ra/zvf3/Vtk+83BB+aU3Xf3yc3SLj+WXx/l7K1eSwyaQXYmYbv nxR4MD6OIaDJK2Vd0TYo64Sbe3x/0aOTcFy5rqzGEzkukXbq7t+EMjo8fbXDBOiT+3e6xfUmZmLF bCf3n48o63zO82dX/Zzi/rvcOq2avq1xz7u4/77hzGxTVr9NWbuFPKesmPZ3dv/73Im016omAUCw lvB1pasLbVFVQ1zps/iC9fRhId8fBHRFNSULVHeDgN0gPZJNR0NIuSlI/+KbR+NHoUfqA841tei9 hfLtw463PXRIaBkRbahgJfwZCUzxignRC9gt0XaGMoG1NLCilkTyf6in3z+/++m3F78/f/br3a+v X7x8/tvrFzfi6FoMsjWdKmPWVsLp5nZbpGasZO0SqFkMXEIkEr91Kpym4ETppwyp1iXm0MfltuYg 4NQ1gUAj8bHkCJZoSOt6o8dp1AdQXhlWoiVqoGCQvXYDdZHRZDJrmZYKoZJQkndZ3RyhVQjxmZ0s NsppiTYyiyZn6lolSbqf/RhsQdKspa2vS00CoSRBTk80wFKFr437Nmwh1bVkZiNFZ2xdrC1fuL8Q 5DidBQIBCbPqmM78RKtLVZqESrujDikc+mCU8JDJbvxKWsScOlOvWCQqetDOPF3FDZaf6s95dKbC rGqBmV+DKLSFuC/kCZ1GN3iehiW3UPDUkqQHHXJGatjwWgYINfufHNSZIMUbmNfBzsZX3C5+rFhv khe8ohzUbooj1FrRY4yOOxDXLpDFm5xhheh93gfHY4zNmeW8lvCdkkXN5SkysNgpmrWGMh3qqy0I lFHBozBU1UYbnKUIJNY1hUrhqhPIO6SxvqE4FozsKYUn7tEb9DRFJACFhIqlHEpqpcSQOD3YWrPP mGAQDEtZ19mfxh2h4cu8pZjhmDJtACFgOHNZ8UCgHIyrO3bm90m+ETDVFcuUE/ZHwOY+SXYnS4hJ hNdEVSkpc6GLOBkznbjqpajt2yAYdIxgxCvSQtKQ0u0rV1arfCcR3Ao/Jwxri6Y6diPXhJHKSgAE 1tzkAh2ui4NUd0ZuWjgYphXn1j9MSBWzI0htW4LIecEaYvgkAI/aE8wkrsqZMWQMDaHZUZobY2RX I2GQM4lRmMJMvczYMnqdzCDzCvEsYMdmaeLZutQOSVYn2i2CbYbZgi5H7skYthZKpFjLSvixRAor a4dEaL7m3jFK58oputy47+NYf58GIIWWJNTuO0CRsndGn2YurCZepeAolM7+Pm2I+xR1SIHXg1Hw YKXUQ71ikZe1I/4NCc4yZUw7d7+Nk7Astbbcas8GJZC6lgrF1nKysmhqDr6XqPAo52H5Siwd/zr2 qiPeoQh4NN6TpVtc39GIUcT7C/6WeEzAONHhLXprJizOq9RYgRRLsgOAZIuxA6gSu5QqBBtN7dAs hV4CAGeoKlo8u8zUIVJq5ynAlwyBaN0YVgKJntJ0QyAkhkwkQSC/xtBo+G9BIIXAzAIyKoHlSsFd O5YKAB8BNgRWEfDCQiqAxRVkYUhgvrJQx52m1deQZQcQSM2AmII9GxegRtsYFl4bknZpgi2hLIfs lPPzBIEgPKPDs7iAm9O2sFSXKEPk2AyZ7qIDcK5hHxSnIuh1KLICymPOqQgyyGOXyhgVeP7YL0V9 ewnovLr4gjpT/eXP/Rf9CZFvJTlKTgBLXewEwXOY+Goyboa9uXnv+IVohQJMfT6Zk2kpkO2xc1AZ O6ig1+B8Xek6tpvUB9lt45H/1s/1l35UKbnVk/Yv84k/2TnysncIeJ6I5XIYtRILyDwnbpIKXggu vrpU17+0+n9/BDwixfvXxo/jVnHt3OgkQqxq3QJ+V1vUF4/tW8g1Y39qKXO5KQxkgFp3O8CPeYTs gMbj9uPj9sPHnceORW4FrFe5EbhukNt0qK8uh9WhdpOUt1n7wXI7wf6q/nxeWJNCdZjxSlRhJ1Ij llYXj6qmOXUxa+H8iWS062BTxhm0p1V3uHB15X3VPSYzyl9ncTwsL10bcbwI69Ta7/E+drbYeh/f demM9RfMIBqKdC319UncX9Yb4Yuex/xJPnFH/RbvMxGWl6pJtMN9FnmjaGcT0dc+MH1r0U5K+44m 4uQWZ6H+fRUkkJ4BLBaighy/IgXk+kg6+Rf5chqky2mpbZwG6a4zeWtJ7qy9QtB7lOS0xXRZnBmz itleu8XTQr24esQLUbeDiwofSOcQC8SjNAn4wwBAPHpf8XzZYI5uHa6dzgiqI7CaKSTIdtJZMT3c nky6mhvalHTxvDRSq5E9yHt5RJI9RC+p/clLMYLjFZvkWZ4IVvQW5kqSfLSe1ZcdeF6QkpJntiTr MfJKXqOvTCGT3PUEzfCvhm2ZGnYd5QmwawhIKmSg4N0yxQAJJknXJfc6pMn6XIinGOBI+T0vZJL6 h0jKJYQsiSBhM1U6igE1Uk0IV5aapOIkryAXFVYlCG7sEzPLuIVWGZtptMFYIoZlB9IV8loJ2ycm JGMnyVszv0caala/HnNAkGLA3jrCEUWPQEAvazdRQaHRQoRHIlrFCWU6MWGwXMRe0HskjKEUgwoB E1xNcqUmWvdZWNo0vhYDjmnqBrwbdAllqmX/pge8+ptKwjTN32Y3sGP2D5RHqpy1CCxsG/gMAlxL hpzkZVKK2Jy6hqyiPFP7Arb2npLwuYLXcEK5mqGZ00rrKJtQs+edlFRhandhjDRokQKJdlmbyMQM pQny5Cyv7iuqoqJqpA2DR26eoMjZFoorhh4aCYcXGhVmGoQoAMzzaHjJYj3ovKCsjAKqQDsBvxT6 O7TDoqWFQoF0f9SwrETZB7VAsp0nssQQwdSaA3qKgIroxjzMhBRK0cN8Pt6bXKAIvRJEJ91UcyIv yJMkCb4ljZQn9mbCl846abRrtIP2OnigiiLtNXvL1AmUYPvnpb1uoDOJLhkSfjL03l8300gmO03c RpBKOKXj3pq3oj2kzeyeBjuSVmm0m5Esr+3Uu06+ts8ddpJBhdZEIRqwPLcP8wnmkz7g9OBu++vl Ye283c26IjNdXicdMFv94dVt2PaC96Gf2zsYuihnT7pqs0vGUO9ZHts5M/XxShQ4rdrsUPYG36lN b2riqdT7X/DgobbZoZ74burpLWeuIv7/arOjoK2jONP+1N579Boc5s/y1N5bpChC1N4ksNq77DoJ Re1NdjhbiiNURpBsn7mibYfqPQ/t7Lduskv10UfeFFqwNj+z7/fE7HXZESTQTptDD/LW7+yd/X7K swfHB7aDo48PO/haR9+2ya6zKlK4uo3bVPRDP7LvyVFEDcyWFjtpynaUync1tBP3NRRgLbPfpcmO xgwaQQIvWatGmA/TZFdbkMVb6rnxbHafi0td3OyBS/WRtwLeZE70r02fEcmqJYbGEfp8eNEBr71/ baat+tcktPQSpSPh3gexom3Q1A6cg+BQXOrSv8aLuujY0hLTjAzNdzyT18Ki+McyTH6VB9z24LB0 rUsIJS3wky/uc+z0kitino/QjyrPTofHX2iro85zV7SHHL+drztQCZD3fWqX98xsU9i0TWE/tE89 xl09waqFjZZ8UlRSpcWtypBOPaK16xXeRm97X4znDYQ30N4X00RK7+m6uoCDIrEmxj/2FLDXlbpb 0ZWKOGnQl+RD/Hhid7Kf7/4LjFOVLwplbmRzdHJlYW0KZW5kb2JqCjI2IDAgb2JqCjM2OTIKZW5k b2JqCjI0IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAyNyAw IFIgL0NvbnRlbnRzIDI1IDAgUiAvTWVkaWFCb3gKWzAgMCA3MjAgNTQwXSA+PgplbmRvYmoKMjcg MCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IC9JbWFnZUIgL0ltYWdlQyAvSW1hZ2VJIF0g L0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUgovQ3MyIDggMCBSID4+IC9Gb250IDw8IC9UVDQgMTIg MCBSIC9UVDcgMjMgMCBSID4+IC9YT2JqZWN0IDw8IC9JbTE2IDYyIDAgUgovSW0xMCA1MCAwIFIg L0ltMyAzMyAwIFIgL0ltOCA0NSAwIFIgL0ltMSAyOCAwIFIgL0ltMTEgNTIgMCBSIC9JbTE1IDYw IDAgUgovSW0yMCA3MiAwIFIgL0ltMiAzMCAwIFIgL0ltMTIgNTQgMCBSIC9JbTEzIDU2IDAgUiAv SW01IDM4IDAgUiAvSW05IDQ4IDAgUgovSW02IDQwIDAgUiAvSW03IDQzIDAgUiAvSW0xOCA2NyAw IFIgL0ltMTQgNTggMCBSIC9JbTQgMzUgMCBSIC9JbTE3IDY1IDAgUgovSW0xOSA3MCAwIFIgPj4g L1NoYWRpbmcgPDwgL1NoMiAzNyAwIFIgL1NoNSA2NCAwIFIgL1NoNCA0NyAwIFIgL1NoNyA3NCAw IFIKL1NoNiA2OSAwIFIgL1NoMyA0MiAwIFIgL1NoMSAzMiAwIFIgPj4gPj4KZW5kb2JqCjM3IDAg b2JqCjw8IC9Db2xvclNwYWNlIDcgMCBSIC9TaGFkaW5nVHlwZSAyIC9Db29yZHMgWyAxOTEwODIy IDAgMTkxMDgyMiA4MjMwODggXSAvRG9tYWluClsgMCAxIF0gL0V4dGVuZCBbIHRydWUgdHJ1ZSBd IC9GdW5jdGlvbiA3NSAwIFIgPj4KZW5kb2JqCjY0IDAgb2JqCjw8IC9Db2xvclNwYWNlIDcgMCBS IC9TaGFkaW5nVHlwZSAyIC9Db29yZHMgWyAxOTEwODIyIDAgMTkxMDgyMiA4MjMwODggXSAvRG9t YWluClsgMCAxIF0gL0V4dGVuZCBbIHRydWUgdHJ1ZSBdIC9GdW5jdGlvbiA3NiAwIFIgPj4KZW5k b2JqCjQ3IDAgb2JqCjw8IC9Db2xvclNwYWNlIDcgMCBSIC9TaGFkaW5nVHlwZSAyIC9Db29yZHMg WyAxOTEwODIyIDAgMTkxMDgyMiAxMDQ2NDg1IF0KL0RvbWFpbiBbIDAgMSBdIC9FeHRlbmQgWyB0 cnVlIHRydWUgXSAvRnVuY3Rpb24gNzcgMCBSID4+CmVuZG9iago3NCAwIG9iago8PCAvQ29sb3JT cGFjZSA3IDAgUiAvU2hhZGluZ1R5cGUgMiAvQ29vcmRzIFsgMTkxMDgyMiAwIDE5MTA4MjIgODIz MDg4IF0gL0RvbWFpbgpbIDAgMSBdIC9FeHRlbmQgWyB0cnVlIHRydWUgXSAvRnVuY3Rpb24gNzgg MCBSID4+CmVuZG9iago2OSAwIG9iago8PCAvQ29sb3JTcGFjZSA3IDAgUiAvU2hhZGluZ1R5cGUg MiAvQ29vcmRzIFsgMTkxMDgyMiAwIDE5MTA4MjIgODIzMDg4IF0gL0RvbWFpbgpbIDAgMSBdIC9F eHRlbmQgWyB0cnVlIHRydWUgXSAvRnVuY3Rpb24gNzkgMCBSID4+CmVuZG9iago0MiAwIG9iago8 PCAvQ29sb3JTcGFjZSA3IDAgUiAvU2hhZGluZ1R5cGUgMiAvQ29vcmRzIFsgMTkxMDgyMiAwIDE5 MTA4MjIgODIzMDg4IF0gL0RvbWFpbgpbIDAgMSBdIC9FeHRlbmQgWyB0cnVlIHRydWUgXSAvRnVu Y3Rpb24gODAgMCBSID4+CmVuZG9iagozMiAwIG9iago8PCAvQ29sb3JTcGFjZSA3IDAgUiAvU2hh ZGluZ1R5cGUgMiAvQ29vcmRzIFsgMTkxMDgyMiAwIDE5MTA4MjIgODIzMDg4IF0gL0RvbWFpbgpb IDAgMSBdIC9FeHRlbmQgWyB0cnVlIHRydWUgXSAvRnVuY3Rpb24gODEgMCBSID4+CmVuZG9iago2 MiAwIG9iago8PCAvTGVuZ3RoIDYzIDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2Ug L1dpZHRoIDI3MCAvSGVpZ2h0IDEwNSAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSA3IDAg UiAvU01hc2sgODIgMCBSIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUK Pj4Kc3RyZWFtCngB7dABDQAAAMKg909tDjeIQGHAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMPAx MExJAAEKZW5kc3RyZWFtCmVuZG9iago2MyAwIG9iagozOTQKZW5kb2JqCjUwIDAgb2JqCjw8IC9M ZW5ndGggNTEgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMTE5IC9I ZWlnaHQgMjQzIC9JbnRlcnBvbGF0ZQp0cnVlIC9Db2xvclNwYWNlIDcgMCBSIC9TTWFzayA4NCAw IFIgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAHt 0DEBAAAAwqD1T20IX4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBi4BgZS7gAB CmVuZHN0cmVhbQplbmRvYmoKNTEgMCBvYmoKNDAyCmVuZG9iagozMyAwIG9iago8PCAvTGVuZ3Ro IDM0IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDk0NCAvSGVpZ2h0 IDIyMiAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSA3IDAgUiAvU01hc2sgODYgMCBSIC9C aXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngB7dABDQAA AMKg909tDwcRKAwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMPA5MJhnAAEKZW5kc3RyZWFtCmVuZG9iagozNCAwIG9iagoyNzY0CmVuZG9i ago0NSAwIG9iago8PCAvTGVuZ3RoIDQ2IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1h Z2UgL1dpZHRoIDQ4NyAvSGVpZ2h0IDEwNCAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSA3 IDAgUiAvU01hc2sgODggMCBSIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNv ZGUKPj4Kc3RyZWFtCngB7dCBAAAAAMOg+VMf5IVQYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAga+BAVGmAAEKZW5kc3RyZWFtCmVuZG9iago0NiAwIG9iago2ODUKZW5kb2JqCjI4IDAg b2JqCjw8IC9MZW5ndGggMjkgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lk dGggOTQzIC9IZWlnaHQgMjIzIC9JbnRlcnBvbGF0ZQp0cnVlIC9Db2xvclNwYWNlIDcgMCBSIC9T TWFzayA5MCAwIFIgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+Pgpz dHJlYW0KeAHt0DEBAAAAwqD1T20Hb4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQPnwACg2gABCmVuZHN0cmVhbQpl bmRvYmoKMjkgMCBvYmoKMjc3NQplbmRvYmoKNTIgMCBvYmoKPDwgL0xlbmd0aCA1MyAwIFIgL1R5 cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAxMTkgL0hlaWdodCAyNDMgL0ludGVy cG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgNyAwIFIgL1NNYXNrIDkyIDAgUiAvQml0c1BlckNvbXBv bmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ae3QMQEAAADCoPVPbQhfiEBh wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGLgGBlLuAAEKZW5kc3RyZWFtCmVuZG9i ago1MyAwIG9iago0MDIKZW5kb2JqCjYwIDAgb2JqCjw8IC9MZW5ndGggNjEgMCBSIC9UeXBlIC9Y T2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggOTQzIC9IZWlnaHQgMjIzIC9JbnRlcnBvbGF0 ZQp0cnVlIC9Db2xvclNwYWNlIDcgMCBSIC9TTWFzayA5NCAwIFIgL0JpdHNQZXJDb21wb25lbnQg OCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAHt0DEBAAAAwqD1T20Hb4hAYcCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQPnwACg2gABCmVuZHN0cmVhbQplbmRvYmoKNjEgMCBvYmoKMjc3NQplbmRvYmoKNzIg MCBvYmoKPDwgL0xlbmd0aCA3MyAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9X aWR0aCAyNDIgL0hlaWdodCAxMDUgL0ludGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgNyAwIFIg L1NNYXNrIDk2IDAgUiAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+ CnN0cmVhbQp4Ae3QMQEAAADCoPVPbQwfiEBhwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMfAYGKdUAAQplbmRzdHJlYW0KZW5kb2JqCjczIDAgb2JqCjM1NgplbmRv YmoKMzAgMCBvYmoKPDwgL0xlbmd0aCAzMSAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0lt YWdlIC9XaWR0aCAyNzAgL0hlaWdodCAxMDUgL0ludGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2Ug NyAwIFIgL1NNYXNrIDk4IDAgUiAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVj b2RlCj4+CnN0cmVhbQp4Ae3QAQ0AAADCoPdPbQ43iEBhwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDDwMTBMSQABCmVuZHN0cmVhbQplbmRvYmoKMzEgMCBvYmoKMzk0CmVuZG9iago1NCAwIG9iago8 PCAvTGVuZ3RoIDU1IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDEy MCAvSGVpZ2h0IDM4NyAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSA3IDAgUiAvU01hc2sg MTAwIDAgUiAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVh bQp4Ae3QgQAAAADDoPlTH+SFUGHAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAwPvA ACBWAAEKZW5kc3RyZWFtCmVuZG9iago1NSAwIG9iago2MzAKZW5kb2JqCjU2IDAgb2JqCjw8IC9M ZW5ndGggNTcgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMTE5IC9I ZWlnaHQgMzg3IC9JbnRlcnBvbGF0ZQp0cnVlIC9Db2xvclNwYWNlIDcgMCBSIC9TTWFzayAxMDIg MCBSIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngB 7dAxAQAAAMKg9U9tDB+IQGHAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgycBwYbzQABCmVu ZHN0cmVhbQplbmRvYmoKNTcgMCBvYmoKNjI2CmVuZG9iagozOCAwIG9iago8PCAvTGVuZ3RoIDM5 IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDk0NCAvSGVpZ2h0IDIy MiAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSA3IDAgUiAvU01hc2sgMTA0IDAgUiAvQml0 c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ae3QAQ0AAADC oPdPbQ8HESgMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDDwOTCYZwABCmVuZHN0cmVhbQplbmRvYmoKMzkgMCBvYmoKMjc2NAplbmRvYmoK NDggMCBvYmoKPDwgL0xlbmd0aCA0OSAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdl IC9XaWR0aCAxMTkgL0hlaWdodCAzOTAgL0ludGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgNyAw IFIgL1NNYXNrIDEwNiAwIFIgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29k ZQo+PgpzdHJlYW0KeAHt0AENAAAAwqD3T20ON4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMDAx8AAH/wAAQplbmRzdHJlYW0KZW5kb2JqCjQ5IDAgb2JqCjYzMQplbmRvYmoKNDAg MCBvYmoKPDwgL0xlbmd0aCA0MSAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9X aWR0aCAyNzAgL0hlaWdodCAxMDUgL0ludGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgNyAwIFIg L1NNYXNrIDEwOCAwIFIgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+ PgpzdHJlYW0KeAHt0AENAAAAwqD3T20ON4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw8DEw TEkAAQplbmRzdHJlYW0KZW5kb2JqCjQxIDAgb2JqCjM5NAplbmRvYmoKNDMgMCBvYmoKPDwgL0xl bmd0aCA0NCAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCA5NDQgL0hl aWdodCAyNzYgL0ludGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgNyAwIFIgL1NNYXNrIDExMCAw IFIgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAHt 0DEBAAAAwqD1T20ND4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQOPAwPt5QABCmVuZHN0cmVhbQplbmRvYmoKNDQgMCBvYmoKMzQzMgplbmRvYmoKNjcgMCBvYmoK PDwgL0xlbmd0aCA2OCAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAy NzAgL0hlaWdodCAxMDQgL0ludGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgNyAwIFIgL1NNYXNr IDExMiAwIFIgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJl YW0KeAHt0DEBAAAAwqD1T20MH4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG/gMDSR8AAQplbmRz dHJlYW0KZW5kb2JqCjY4IDAgb2JqCjM5MQplbmRvYmoKNTggMCBvYmoKPDwgL0xlbmd0aCA1OSAw IFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAxMzggL0hlaWdodCA0MTEg L0ludGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgNyAwIFIgL1NNYXNrIDExNCAwIFIgL0JpdHNQ ZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAHt0DEBAAAAwqD1 T20MH4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMDAf2CYyAABCmVuZHN0cmVhbQplbmRvYmoKNTkgMCBvYmoKNzY1CmVuZG9iagozNSAwIG9i ago8PCAvTGVuZ3RoIDM2IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRo IDI3MCAvSGVpZ2h0IDEwNCAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSA3IDAgUiAvU01h c2sgMTE2IDAgUiAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0 cmVhbQp4Ae3QMQEAAADCoPVPbQwfiEBhwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwb+AwNJHwABCmVu ZHN0cmVhbQplbmRvYmoKMzYgMCBvYmoKMzkxCmVuZG9iago2NSAwIG9iago8PCAvTGVuZ3RoIDY2 IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDk0NCAvSGVpZ2h0IDIy MiAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSA3IDAgUiAvU01hc2sgMTE4IDAgUiAvQml0 c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4Ae3QAQ0AAADC oPdPbQ8HESgMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDDwOTCYZwABCmVuZHN0cmVhbQplbmRvYmoKNjYgMCBvYmoKMjc2NAplbmRvYmoK NzAgMCBvYmoKPDwgL0xlbmd0aCA3MSAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdl IC9XaWR0aCA5NDQgL0hlaWdodCAyMTcgL0ludGVycG9sYXRlCnRydWUgL0NvbG9yU3BhY2UgNyAw IFIgL1NNYXNrIDEyMCAwIFIgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29k ZQo+PgpzdHJlYW0KeAHt0IEAAAAAw6D5Ux/khVBhwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYM GDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBg wIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIAB AwYMGDBgwIABAwYMGDBgwIABAwYMGDBgwIABA48DA2EXAAEKZW5kc3RyZWFtCmVuZG9iago3MSAw IG9iagoyNzAyCmVuZG9iagoxMDYgMCBvYmoKPDwgL0xlbmd0aCAxMDcgMCBSIC9UeXBlIC9YT2Jq ZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMTE5IC9IZWlnaHQgMzkwIC9Db2xvclNwYWNlCi9E ZXZpY2VHcmF5IC9JbnRlcnBvbGF0ZSB0cnVlIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAv RmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB7Z1pVxrNEseTIPsAsiObbAoIKFsElFVBEEEWERDRPPn+ X+JWDUuEdE7OMw3ee+6pfpHYzTT/qepf1TTTL+rLF2r/kx74utE+6RZB89u3bzKxwR/Q/QxhEJXJ DuTLdiCTfYowqsoVSpVardGo1SqlQv4ZuqB6IFdpBJ3hEJpBJ2hUigPw9H79jLYqVFqDyWJzQLNb TAZBDbp7Xl/0sEo4tB55fP5AwO/zOK1GQY1+3qu54GKFxmB1+U/P4olE/Ow04LYdapVg7j5lwcdy lc7sCkQvsrl8Pvc9eRZ0WfRqhWyvXv76VaZQG+zHkWS+VLu9rZXz6ajPYdQoD/Yr+02m1BqdwcRl pXH/8HB/V8mfh1xmYc9ehqVVCmb3aeq6/tAbDHqdRikd9lh1qv0uLsiqBIsnki03e6PxeNRvVb9H j206lXyvTKGszuI9+15tD8bT6Xj4cHMZ89n06k+QtR6fXdYenqaz2XTUuc3F/PZPko3lbjqjl9fX l+duPR8n2d3mLBEp6zE5eZ/PAnIyxe1uw/YLIUVIEVIcHqAAogDiwIc1lZAipFhccIwRUoQUBz6s qYQUIcXigmOMkCKkOPBhTSWkCCkWFxxjhBQhxYEPayohRUixuOAYI6QIKQ58WFMJKUKKxQXHGCFF SHHgw5pKSBFSLC44xggpQooDH9ZUQoqQYnHBMUZIEVIc+LCmElKEFIsLjjFCipDiwIc1lZAipFhc cIwRUoQUBz6sqYQUIcXigmOMkCKkOPBhTSWkCCkWFxxjhBQhxYEPayohRUixuOAYI6QIKQ58WFMJ KUKKxQXHGCFFSHHgw5pKSBFSLC44xggpQooDH9ZUQoqQYnHBMUZIEVIc+LCmElKEFIsLjjFCipDi wIc1lZAipFhccIwRUoQUBz6sqYQUIcXigmOMkCKkOPBhTSWkCCkWFxxjhBQhxYEPayohRUixuOAY I6QIKQ58WFMJKUKKxQXHGCFFSHHgw5pKSBFSLC44xggpQooDH9ZUQoqQYnHBMfb/j9S6NDZ46S/W fryUw6coBAV+F038TizN+oc6mvj5r0u5VPGboDY2FMc+OJBBmehvf5bFD1dX4qUcBS5R9ABrY0NT KlBY9idrxc/kyyvlcKl0XVSVK9VaQafX67RqFIZS2Uwnix/BpXClXoBLxdLd0hwtqqq0eqPZarOK dbGVcrlCrWesrUaBnwgGowUuNRv1WizdLdHeZWlsi8PlPfZ6nDaTHgqBK1myBo1SodTojNYjN1zq dlgPBZVCYgltMPZAqT20ufwnkWg0HPQemcEKlcZg+60irAHH9WaHN3AajUZO/G6bUVDJpdWyBmOx ILc7eHaRyWZTibDfaTFoNVqDzbdViNZxKGi0evORLxxPZbOZ5FnIA6W70c0SVhdTg2B2BmOZQqlS vs4lo36n2SDoDu2/yRp1AqpGkpfX5UqpkImHXBao7iyTIAsFueVqcGgkfVVrtJqNaiEV9R2ZDQbT lmwicGSCUQeW7q7Um6272nXmzGc/1EiqGC762HgUTOSqzU6v12nVCsmw1242mh3++MeSyomA02I0 2T2nF3m48rHXbdWgdLfTJK1AOsgqtSbXSfK63hmMRsPHVjWXCLntFqszEM//quRcSARdNovNHYxf Vprd4Wg06DSKqVO3xIrhyLFYB7x49/g0mYyfHu/K2VjA5XC4gon87bqAdOE85IYxfzRTuusOx9PJ qNcsZcIei7RC5StrUyA7ms5eJsNO/SoV8bld3tD5B9mrixOvy+0LJws3D4Pxy2z6DLLpsGRroca7 xugMXVzVuyALpbH799Xc+anv2Hd6UbjtLstlN66SYf+x7wRqsrd6z1BCezp6vLtOnrhgbaUkjGVp ecCn1h5OZovvK2Xjp8FQJIm3Ilbpfmxcp6Kh4EksU2x0oV746+vk6eE2D3RLJBke6Zj2PZFMqSma MZsMH26v0rFIOJa+bqxk74qZOIykCjUojg6qs+d+q5yFquxS65QDUwotRNB5/uYBzJ2Dm3utaj6V iF98L909okNfxr1m+fIinkjmKs1HsH8+mz51bgsXIZdJGlG4sYB8obd60VwUmc8mT91GOZdOZfIV 0QHz2RhupJBJpS9Ljc761kRjDWpJ2QJl8VFgwoQhOhDMHQ/a9VL+Mnd9c98fz+Yg22/fFPOX+eJt u7+4M6hADyHllG4sbKNEcz3hFOAymr4iVb3723KxWGlArKAsRFWjWiqWb1oQZK9wY4BxKRPx2gxq fNBLeBKszDU6/LHLKlonuvnxvn5Tq7e6T5PXt7fX6dNja9FH2MH6QbuWwyQteWVRFsxV6SzuEwiY DkQHunn42G42Wx106dvbHIK5c99stiE9weLDXXQhoMIeK2As2VhcXUgZ8KA7y5YXDKFur9vp9p8A 7ff3N6Cs3+10ekNcWPiw36p+j/kdh9IeA+s1gdiFxOyEbLgIIvzq0XAweALj3kB2/jJ+GmAXFlZc 6VvIlW6z+KyVuLKoDebiQ9cbSUOkYlyC7mT8/DxB1R8/3t+g+/w8hi5+AtkYg8dugEetVJ4WFotB ZDwKQIq8R3hhPWcvLy8zUVXUXXTnMD4Ztm/y50Ge4Fm5WQwincVzmrquQ84FNRCGBrb+Aw3sFXtv SDUETzEd8XLytDYXqIIg+l5p9Z+Ro0UTVVF32TB13Fcv44EjIydPoi5sWyGIzK4TeNh1hmjuD2xo 6s+fP0FXbO/vEDzwPE6eui06CB6JO/OVj+F/MYhgKwe7Bwyi+cK7oqiou/Q1pudKdrl14+Np7Wal YHJCar5pDyA3oaUguG7Q/QErC09FSMYuDJ5dqC6CSG9dpmYwd1MVPf0O6WqVjLmDZ+XpRRCtUzOY u7ZU/AONnYjJOMiXjFeCSy9vpmZc3Y+6orGjnSTjLd2N1DzbMheMFYNnF8l4W/djan7dMBdCd447 mZ0k423ZjdQ8/+hlNHZ3yXhbF/Y3q9QsBtFqdcHY1x0m4y1Z3N+sUvNo+iuIIGbnuJPZWTLe0oXd 6zo1j39RhcEzHuwwGW/JbqbmVRBh8Ow4GW/piq8UVql5Za4YPDtOxtu68MNzmZqHk0UQIU87T8bb suKu2Yu7ZtjfIFUiT7tPxtu6GEQfUzPytIdkvCX7W2qG/PSyj2S8pbuVmnGfjDuZ3Sfjbd2N1Ax7 1OlwL8l4W/Zjap7OxPcUO9oZbypt9n7tmuG32PN0+jzY2c54U2iz93HX/AAvq/AV1K52xptKmz0w d5Gas+W7Tr/fbVZ2tjPeFNrsrXfN5/nqXbvdrBUudrYz3lTa7K12zZHUVbVer12lo4uXmjvZo25K bfSQKsF0FDhLF4rFQiYWdJrhjfW+VZe7Zos7GIM31ql4yGPl/1m5YdcfOkgVvMr3BCPxeDTksfP+ cv+DzPaw+EJDMNrdvmDQ77Gb8FBg7z6Gm0Cq1AKcgrhcRzajTi3xTGDbnL/20c1w5mOyWEyHgqjK 8Zrir2rrC/CkRqHSCngUBsdMn+JiFMcTRjjOU6tVSvE0b31De/4D7IXTPmjiEeKnuFi0CHThgFXG eWD6752zOCPGf//9XK4ZKPnpolx3TJPJA+QB8gB5gDxAHiAPkAfIA+QB8gB5gDxAHiAPkAfIA+QB 8gB5gDxAHiAP/Jc88B+5dO9OCmVuZHN0cmVhbQplbmRvYmoKMTA3IDAgb2JqCjI3MzIKZW5kb2Jq Cjg0IDAgb2JqCjw8IC9MZW5ndGggODUgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFn ZSAvV2lkdGggMTE5IC9IZWlnaHQgMjQzIC9Db2xvclNwYWNlCi9EZXZpY2VHcmF5IC9JbnRlcnBv bGF0ZSB0cnVlIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3Ry ZWFtCngB7Vz3Vyo7F7WBVCnSuxRBlC5IEUGKCIKA9O77//+J75wMMg7X7753h4H11nrJD/cmkJXN 2bNzksm45+iIln8rA8ebcrhfiJAnTCHoB0EmmKenp2dQ4L+Tk+PjA+BCoKdnIpH4HItYLDo7CDCi isQSqVyugCKXSc/FALzvgAnquUyh0mgvdbpLrfpCLiW4++UZY5XIVVqD2Wqz220Wk16jBNx9h3t8 cnYuV+nMDrfPHwhce69sRq1SKgKa9xkuBitV6iwu/100nkjEwkGvw6iRn+85XIAVy9Umlz+Syuaf nh7TiTuvTXchEZ3uVVTIseLS6gulnsovr7Xqcy5x4zKq983y8emZ5ELvuIk/Vurv7Xbz9Tkd9lg0 MvF+L+4x6FhlcN0mi/X33qDfbVYfY9c2rRy1vEdNAaxUZXSH0qVmdzge9TuvTwm//VKBmtozrNrk Dmcqrd54Ohl268X7gF13GFhPJFt5709m09FHo5i8cRwOttoeTOezce/tmcIKrS5UstoE15aSLDS1 7HiUZJouWDUIUqOSopISREjsIFRSVFKsGgSpUUlRSQkiJHYQKikqKVYNgtSopKikBBESOwiVFJUU qwZBalRSVFKCCIkdhEqKSopVgyA1KikqKUGExA5CJUUlxapBkBqVFJWUIEJiB6GSopJi1SBIjUqK SkoQIbGDUElRSbFqEKRGJUUlJYiQ2EGopKikWDUIUqOSopISREjsIFRSVFKsGgSpHVJSxEbGWFH+ DpbpKkCEOBAxsWHl6LewX11Jz52gYYSTE3SxrS1sv4EFAxR2Zdxu+BP5FzLSGbrY1ha2k7P/95f2 4G8Dw5t403UHXEA9PWNcbGsLGzR//gN/EdABhjcZGN7kMsm56AzsfTzDRVQR42LTgoVNIYXRRGLZ D74CpQS/kciVYHjTatZuN77xIiq42C4NZosVLGzaC7kESPwZFr6QKtQ6o9lqtRh1GqWMt9vtGPRz LlfrLU631+d1O8w6tVwqkcg1v7oolPC5TKk12lwen4+43S6Iy44PzeDrEstUeqs7EIpEI3cBt82g VsikCo1527yhv5BJZRdak9MXDEej4aDPadYC77xsZxisRHlpdQdjD9lc9iF267Xp1Uq5UvsrrEqh AFSXP3yfzuXS92G/06gmLrs/Dxe9czK10XUTzxbL1Uoxd3/nserVFxeXFi/XquI0wKcQqz/68FSq VEr5VNhn0yklvIxYxDuntXrD6WLtrdl8LT/e315ZdBqNzsqFDTqNWrXWYL+OpIsvjWazXsnfB11G FbjseIgZYCVKnd0fz1ebnY+PdqOciwdcJt2l3uaN5lhjTiqIHxqsnlCqUGt1oWf9OR3ymNFlxwtW RCx794XXdn847Hca4NnzOUwGk93HgQUODEbL1U0iX219DEbDj2YlG/FaNHKesBAtOAWThXpnMJ6M ++1aIXnnsVsszutY7mXj9UrduW1mK1zYbPkNTHaTUa9V3RVWZw8knl47g8l0Ouo1K7n4jdthvwrE HzewpYeQ12l3gn2yyPQbQ79M2GNW8yUZLK9aKxD6gua5GZj2gOaI333lDSbyX7DNUjp8DR/dJh6r YO2bEZPdc+qWv6SOcQKZ0KH49jGaAm7//eUpGQr4/Hf3+VpnSAx1zXImenN9HYxlSo3uEHsN2rV8 3G/nO4FwSUdNBRL5Wnswmc3BLPhWySVCwdtIqvDKwPaBePwk+lCotYET0gkIACHzTBdHOHHlGotn He4cAunUnzOJSCSeKdYJ7KTfquZTsUgsBbMMKME+EGwi4DBc4LT98yR1dITZUYrhxvPk6s6n417r pZBJ3j88lhtdBuS99vUB6O4r2JDHouUbLOCScM3uu4dnvG7z2XTYfasWctlcAWObzecYfymfzeZL r+/98Qzck3D9H+N+h54EyytagMVwIVHFckSlhOZG9blQLBOUxRx/x0sJ2rUWUd102KkXYSLzv7J4 WSBcdFJf3SZBQoRDSBqNWrVae4PmfLEAb+h7/aVarbe6Q6AYmiCx6DWsA/wSMqMF2NWQtc8XyZSJ YkCovXaz0Wi2e3Bplwtgudt6a7y9dwdIMXD+WkjCMoCpgvdeCsOFuasyOm8ST8wkgmzQ77bbnQ+A WSyXC2x22p0eopLJU85EvNZLWON3QGVUpdCSSdTACQKyGg36/f5wPF0sV8slQEFzMAKGIVjQUz5x 4zSodguWhEsmkT/+WCVaBRlNxqPxBCherVbLxWw6hjKdzYm+Gs8PsORpd/c8M5PIdHWXYjLEYgFh QZkvVqvPT8Bdt1BekDtyMb+dTJ6dOIZwMWcodbbraLbShFQPF3S5gAKxfkIBnkkL6cbJk7y9MvFO i99z2teWKojLPcyaJZILBUGhMA1kGyZPORvx2VBPfLYV30HJ5BVJ4H0E3nCmDCvRjJBLEP+C8gW9 hKnUrj3d3ziNO+tpPXlhEklVBlyJMDWDlDagLPBiBssTrjwWAfT0hYvrvdkdwtQ8mi4AFvE2BX4F BEuScYBJxjvq6QuWrERMau6P58tfYFcQLLwvYOdkzOB9/ctJzUMMdxMpVkDOc2GS8RfgOtzvqbkH 4XJxP1cLmDybZMzrXoALuG5xU/NWuCTYjzdhkjEXHnMVm5pnnHA/V/PpQKhkvA3L7G+Y1AyTiFUV BAt6EiwZb+Pido5JzbC/YVXFTB7hkvEWLDc1s6pi9CRgMt7CXd/tMql5E+568giZjLdxOal5rSoM VuBkvA3LTc0kRRI9CZ2Mt3G/p2ZYiXBFWO0hGW/DbqVmwN1PMt7G/bZrxkkEe6m9JOMtWG5qZjas e0nGW7jcXTO5K9hPMt7GZVMzLPh4D72fZLwNy6bmVm80GeO5gkA7Yy4St/Vt14ynRoOPpmA7Yy4Q t/Vt11xutD+6LTgzEmpnzEXitthdc77aaMFbrTLC7Yy5SNwWTiIFnETCW7wqtZcSHFQJtjPmAnFb GC7umuE0NV8owKmrW7idMReJ21qryhWIJtMPiZDPJsSdFhfipxaEi3f4lis4U4/c+hy8z6t/Gvw3 n+GuGc/yXT7/tcdh0ioEudP6DSDzFRxowAqo1pntDocV37y30zHF38JtOhCa4W2DeoMBnrzwfgKy Ge+fVgiuTKlS4yMpeKsijzPyfwr1vR/zNEwqgwdwkgO8y3EDjbj4wJF53nigYAEdcAEYn5nC41N+ J4ubGP6kQp7rwtPkg4LiDwRAUv7kx9K+lAHKAGWAMkAZoAxQBigDlAHKAGWAMkAZoAxQBigDlAHK AGWAMkAZoAxQBv6TDPwPZgpKdwplbmRzdHJlYW0KZW5kb2JqCjg1IDAgb2JqCjI0NjYKZW5kb2Jq Cjk4IDAgb2JqCjw8IC9MZW5ndGggOTkgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFn ZSAvV2lkdGggMjcwIC9IZWlnaHQgMTA1IC9Db2xvclNwYWNlCi9EZXZpY2VHcmF5IC9JbnRlcnBv bGF0ZSB0cnVlIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3Ry ZWFtCngB7ZrndtvIsoXHQRJzAkmAOYE5U8Ez9/0f7H67GiDpEUjr+IxmnR/AWrbpBlBdvbvCrmr8 8Ud6pQikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQI pAj8zyLw5V/T7N+b6feW9CW+fu/1/+CteKJ/F5Fo1g/pybNf3fXlc5Q0ZaTKp8+UsF6b3JZ3ViPh qfOQsPj2Xde3r58Ah+kQ//WpM51XdPWDiZkzvr6ywF9s+BeweHh8enp6fPgEOGJt2B1D/fNmusIg /iksvrG6h0ddDw/fv2mF9/AQGI+ZXD6fyz49fP+nrUPqfEedByyP6+HzZooRuPrXJgf+bFbLy2Uz tuH3lsgb3x+z+VK5Ui7mM7KOK3H/9U/pgzqZjBQBladPmylBVTd5JldgcbpKxbw2/N4Sv3z59pAp lGuNRr1Wyj1hHAlyf3fI9AGBQqGA5T2yS4Wy9ykzJWho+5zJFcu1esPnaja8Simfebxj/3rlKVeu ++1Oq1krZv9Z4wBqpBfL1WqlVMBQs/lyPfiUmd6jYWAI/War0+tz9VihV3ZwvH/cRvROplDzu4Nh v92o5IXcjUd/Y9i8sFDxGs1GrYx55EqfNdN75aK5G63ecDwJp2E4GQ26AXA8PXy7FUiJ8w/ZUr09 mISTflArPH3/9s+hERme57faQaNWyucL5Xp7+BkzJYBhEaDa7Awms/liuVws5tPJsOtj/483U6ei XK7c7I3ni9moXS8SR28Cd/PGe13ciIQ/5SuNVqfb9r1yoVCsNnuTX89kNO2/3BRMQ1N3htPFar1e rYBjFo56Lc8FR/Lsz6nWDXz99pir+INwuVpMuo1y1oJM8qPuhWstoxH3T4TJ1Ri8hwgNGt1uJ6hX ioVSLRhM787kgLjIuAB9GbNflxuJv5QcsiWvPZytNtvNermYz2bhZAgaZVLFN6NhkvOz0pCTx3w1 GM7Wm1XYb1bwKhEDcaXrR/m/8bn746Ym7hFfEJ/HTL5SDzqdNgGsABqtuzPF3N3mulbCJMdi9e9F u0Qw/nCm4ffD1Xa3XS+mk/FoNBz0Or4lTq3QVunE8LetT0ztKV9tjeab7Xo2CPCqDJxNXCme0T1q DMpxqEgTjfO2mJVeEIKxVA27G1CNPFE9aPn1KnFDaCTP5Nb001xnJRgVwoLIyRWT+wUeoJEpeu3x YrvfbxbhqN/ttNutoOlVClkxH1PvbCMIdwzx4eGpYGjsNnMCBxQsl82KtYml2IUaRqA0/PO4CH0m w7ixPKmIvkaD4fkwLl3QrWq9SU6pFA2N0WKTPBN4OHyRKZFOqFs2uKM+5DqSG3HKZLPQqHOURjdc 7w/79WzUDZr1uud5VTIbL6OjMUKjYpr1u/s/lIgE2xqB4XY56QVetVIul4y1RXjoUdZUKJYYLhib kxUAp9FshvV8IZfBx6RyJpvLQYQLxWKxUMjn8oUSGbZRlx754t2ZnFqaC5lOCbiSHEZziV/Hcp0W Z1d+j4rQIDn0Z5vDcbdiXcwf6w8YtiAYoaiYpKs0gSFiCJksOo4XO4dhy2cfG3WvCltSFceT0GlW VPPqoFstFyXCxpEAr/LqDXuexWI4T0gtlsuVarXGTtRQoahnLmi0R4kzmSF+/RrPJZlwY1E2i2NG 6a/kYmf3iwjQsOQw3x6P++Wk22Q9MnoVCAIjYoRQMbcUWFoVbaHuOfnXcn8ExOmo3+v1yABt/LyY s90mDmLrUAZCYctv4P4ZRYmHRyTUGjDLLs9bXBC94lm4lh8ELXPTerVSYcD3YcXylNszRQDHc52F ojD6Q2jF4WK5kBeUu8kFzFMcGrvjaY9tNFmNoLCQIWmsyBczRQprIfF5Tb9JbCPSo+Pq8PwCHPNw oms86nd8MjOaAEbZ89u9wXA0Gva7rUZNKKFftlgldfaH4zGPD3pKGkXsotZkcDAYDgnh/U7Q8Lx6 M2i3g2bt7kwyAewVIq25RmOu0ZAUQCbKEixQX5NFcpms6kjUex9xIxY35Cnb4+mwmQ1IrMgRFops cdY3KoZ7P+ZKXtDpdQP2ughBnKyOr2/AQWLmIjtPx8SQUh4/AoygB4GcTklTcNt6pSCXyBVr8Lzx dDafz2dTgjZwVMoVz+8OJ25wFo6Bo9nwWYZgrOA03q2ZhDBgVOoQ6Uk4s2s6gS0xHSZXgFRe5I6k W+5eEXGJoofTaWcBETjYXKHxCBFp9dncTgPjINaRR1B7DBupV0qVemeyPr39+QM4NqsV1G2zWc0h 6l6pkGO3gt54BkYsWvSlwbZkcDwEjKaLJSxP1EY0r+HVvGZnJL4D4VktZzDhlg8Y2I84cRncb8yE 5aumq6hEmM61I7rms4mKJ6KxGP2V3H6rLhJ1p6RShi3UiAC70+mwXSiOKtjIOnCUchPdp+EgqBZs F4gVg3AWDjvNahn+Otk8//jrr7fTfsPiVuvtbrdBgi2g5kPblyxuzl6ZbeCC2qzuaLZcQ3pF87SN 7Wbda7QG0/X+hAaY2Ww8IKAEqhSYqR3hnjwTfg3w9dYgnC8F75zaAqDnk4H2q4wSJMtIrrPbu7YB +7Iw2p+uMY4DjGMQeZ35fhVaBlMftT1KESJgqdFljRiAX6tUG51w8/zn/4HGljVPWftuDxzjblM3 bVc2q8UUU1LZT/bIUZm74bVAEs/DF0jpmMZi//z6+nLcrgRG4DcDM6E5wsAd20icqeP8KEDJFfji eqHU4KdMtFqtt4aL3VkuBlMl5f2qbZNly6GVh+PxIG3wZSpHolAWSoGlIbtTL2XUdaFQC5fr5ZT4 EqHx468/X/YrljwchQvBATdtN7x60JssNztbHHZvLErEAcVXOIQMoNftdDrwPOiN31UE+vH2AuUZ 99p+o173u+PZar0IZWkOjaSZUKOCAUwWa8mcjIbDcTjH5daC0cMBx1dyW0oRqrbjMiMhmOIqeAR7 vtiQLg+7zXJKuHFRiLQBSpQi3TqFGTGw0uxPV5DxYQvk5Smntx+vx/V02G23Ov0JIg4WfBpNbH+1 g5pxC2KrnGym0WEaYUS88I0dwC6qtSbsT5JOG/E/GEOFWDueUwRNzQplG+9n2i7HXb+umDNf46NL YnKvNxjPltQYKzaMSNxVZDvLrSiv3TMNx0Yz8ufxbL3DPNhd3AWjIrURvtAenXoqU4WGP5gJDci4 obE+vr6etrOhc372XWxsOmj7fns4xVKERgcSIoKSzRYAk0eg2CyDVGJXqViqigufXt+ed4tRB5+C j2IOY0oTFhVghYqiN2dqsUH7AzEvxCW7veF0qSJjPurgboSNi1wjZSocEmziPETkeMhaLppi24fj Ya+9k1YKlBQw2/VPaKxdwWBowDee98txB+zIMaqt9oftnP0N2mYbOyRZPibfwddqgZ6ArtEhKonk wcYtDGq1Ly+HtREegDPCFRVqOANoJM5EjGq1ezDi0/NxJ9vodvsjbPJgFtryW/3wSq6jw/fBUNFD LlU/oY+rbnGX415+53sy4cnyDhrjFU9vZn3fYnuFoEK5s1uOe62gJb9RjiEs43dauy3RKptxh1RH ILKCKgOJ0WpPp+18qHIYWgLtl49agWxo3JgpHHS7pKPjyytQzidDeNYEtxFBDk2JUMkhkkvJ8CvL wEQMDuOOZDVkWXKRpRHLiIW30VBePsBgibE5cQmvowErd8iQQyIMTYJ5SOSQ3+UBnGi5w4pZdMGI uijeo5Yujn9YhzSOcG2xSwq1KzSSZyJ6D/v98Xz7/OPHG2xpNoHhThW8DqolsY1eyH7Fcl15ffaJ Wz8Eh3H6uvLacmtwEAzkeL9Agxp2MWqxNhW1lPiLLWiEvaDRQBTEh6BDjlWWKpfKNPRCggmU168o 77tCEE4HGlRlGFXbM5RoBF6aJ7KN9ohg8G4mZSCMYbl//fOvHxgHTTtl2I1lthF5Wupf5JJM7oaM CB7QIHbQYSnVGrCr5e74TNES9ttBux8SoW/FDem4kxlWKWO0AsLClrAAAaPOMMag5uJS5kEorXoB tGZPmO03y3bogHpUu6DhegMmiVIXFpyAxruZCNhzMnu4Orz9RZ4/kGOpA2bW0IQSuZwiFCO5dzjo tZ1IqagGL0PFsS6ikoJhuwM2QoNmX45OjK13o4BtOYU6e0tIPaNRidEw/uX5nWE4g6KuaamRtBt1 KOcsEQ0zql1kM5SlCWgkzOTQGDk0fjyDzVS1YziFw476MP46YU/vOVv8YFffgaE2kZ3jkBm2Mo7l pN9xaChOVvJUBPEmLmI0YtuQp5htECQx+A5hU3Vpmwi/UL91NSeyknYNDcQ1yzlryMs0nG24IOGb zSShkTST85RQnvLn65EUqwJYBauVwbVqLUqJoCG5H3MTVMI41YFSh8YyA4nzgKsQsGUbm7kKFaVI Up0ccTF2tkHQ3Os/HomAPABXU8oAKyphWlFVgscwnFO/iKJ0W62OyhFMC3GuRWBRVHWShczYgxLQ SJzJOiuDyWL38vb2jGvDN9qtVos/tAQs54suQRCcZ34MDTmJZTv2l9QC71lS6QiNDvxSm6L16ZQH pFjOMUbDUghadDltgyNAaJUycNOW2ATHujRHsC6CPDSMTIvjGUE1cbSndNGzJMO2RbVirRM85cZM CO31RrPN6YUKZ278llYblxpSkEfk/mdouHxiXcksbYkcadCh4TwFaiPbt6YYnUqindpCBH/jorCA E2rA063PH0SOoCa6iDjdPMVScVyMGvYucLEmko7rKqmv69jXtdaJaLyfSamaoga44SrPByaAE8Dz uSpldfDEb65t7te2oaBOcuV0ngYrjJgVUwWLVGEQ2HYXcWQB0q3aUdRca7pdhwsazqXUJq5Sexl0 rNU3elEkp3pNI6UHRV6JwwaMNsP8RcDtwqN+suhkNBJmUg0QAPdCbcwYDX1kUMYyfg8NOw6vcDxP k5e+i3gCGiPdlRt4usoNMcrASPAztO+CBizwhOMoRIIcVkDYMKJOx6pSlTjt3RY02Drj6zyCv9M3 AF5rCfNYVKJhMpco6o6u4PARF02cCV4HhbbySIZCd8CrcXG2j3FCGKBwOv9ycj9gG5iGOml8eqB2 Lk3dnviXzlZUIDoyqv+FsL4hO3t8eQMNyyl19UXVCUQR/JfqEV6vip5OCzVOrd4Eok4fEiYSEjoC gEtYFBm5iEcno04mVBm6gT42SuIhiqJk6+lqvQypYanok2eiTq3XoEhmv1R4tI6Qx0UMpU4UGjQk 1rHcD6EhZux3+rRzaQ+MxpMZZG6HNcT9ElEE6mXjeavd6eWVUpNIAUMkitCjeTnRJibTT+cw8bjb Ix9ptbu9/kBtD9KSwPVq8jXCsomjnzvgUA+SRKyl8lzxCG0UhwbVMk8u6aTR7YEEJc9EtVhWg0sl kQ4Kx4O+WvfWi48imYREcj+IBq3f3kikhYtW2hqCgGuol1ZSpc9UwLGi40h366gOmboOqEHU3Byf n49qBOqmqjRDUU04mtU0zKkbaEZtaBLI5LXLrnxBnLrEEz7/oLdDcJnM59OhWmx26vJAX4kWw3w6 or1V0ql0wkzqOVpHXb0vNWVh5tHBKWf7Os2u0o5ESCT3Q2g8YBugQZeV1iJdRbjjSh0OGj4yNu0m /dutju+XMKndbk1FJx1pSzikYFfqElOUqDUCigQNDLg/Ei9Up3KJoyGPowL7GAB4eJRRcUbOYDw6 XcNJOCb68iWITrHQSZ3fyRgMibaUe4kzqT2vD3/UF0VvagB6re77k2g2ExLJ/QAa9vUGOurrDQOD vzgIUHuZ3rmqbWpzN5WasDSmdUxw3hTa4rwgswFHa89q1fk85zBRU18vTSe0j1xPX3DQ0hV86o1S 35IV8SBOPejERxRVtQvNf4bU+7Y9UQP+bzPxOO3sR1EkmhHaTZRTi37kert6jxBwkXtdjST/VnND XxIR7SJfsR435zNqnNtUkRsBOn1dgkvfvvwxnhB07UhnonMTtcB1tiAU6WWIl+tjIb4V0pEDYFjj Qn2U3mgit5yGOmjB9TEzncrxkwpWLQh1rksEHjhlVV0z1vt+pkBg0NqXjh63cUou92mSDiw4DtQJ lwlxcpMRuB51fIPiNQBFHYwN+e5L/QjA4BzrQYVtU2dmkH/SAAeD6vmWOUDKZPWtmM4K6b+pPBj0 uzo6o6ChXZO34zONE9hauLEd+esoKDqDGzKTvt3R3sPTahzXqm/5XUf84kAcJno62EUc9ULCTPBd 65E4HdG/ZyWKtOA0OX6Pg+BY7vWyb/yO6FexUmv4dgrKAbNOxiHOdIqMmnGWqaNMkhcUQdmc7CW7 YclFcQpOmO1+YMemHO1T8bBhrOYy7MBVWUJXSPKoJ2wmTqIyAJuHqvHTmriCQ0vU8b4OxHV0kTyT 8o/TkcNdjiolVF14vnOw96ShCflVc/gMjoNDr7GyGqvle1jp4DpFgoN7Oj4X39XnBDq11oqx0SeM Ud8Y8J2pI8SYp1BUh8IILv1wqJB6xHS0pPlFnsEarRbwYOic/5qfuG4c87ohLDR5JvdJt/THW6DT kf7n+SINr+SeF337h4mj16OV6bLFCnX2KL7HFxBcyOXDlCc7s5bdqNizz094NbrPovWm3Ysk6jUb /lmem4mdp7sTlY1617WnrP2kUlJ378ykp52OwjPSP6+PIC7vmZBI7m0UzncQJ+1VTupybwsLnojw YNV2Qx8tcUlDeytqBAiV85u2aMMjkngWaPLitdkLOv12JoMkJ9WppSWeh6TfjZn0tOkoQO3LoGgB Vxpey3XS7/4tcfGEUsokxdnZrdqUsTumvFuxvWZvOmWjN2MNoyX8TeCVvGj9JiwWGyvqdIoMNP6P GjEXTZwZ/X2282Y5Hf8uN5Z/91+9ai/yl4m5PH11y+64vyIlopHoVf0vflG/ryXG47aX8R09FJlg /DN+zv7v7rpX3EDCTLEq8WxuBSbnJyGx5A/9G795WdD5tfOt88jPP27cPw+fIYpfO9+JBz76750X z7f48VFx6XMpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQK/ ROD/ASyESI4KZW5kc3RyZWFtCmVuZG9iago5OSAwIG9iago1MzA1CmVuZG9iagoxMTAgMCBvYmoK PDwgL0xlbmd0aCAxMTEgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGgg OTQ0IC9IZWlnaHQgMjc2IC9Db2xvclNwYWNlCi9EZXZpY2VHcmF5IC9JbnRlcnBvbGF0ZSB0cnVl IC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB7dpZ UxVmFoVhETjMAoKKqMTggMYRh6iJQ4zzPAL2//8jfYhph9hd63ZV9fNd5MLsi13PrjfngNmzxyNA gAABAgQIECBAYFdgxCNAoE7gv/7XaXfLvR4BAmUCu2X+kOxurKOjo2MeAQJNAqOje/f+UOww19Gx 8cFgYmLSI0CgRWBiYjA+Nkz2+4/YYa5j4xOT0zOzcx4BAjUCs7PTU5ODse+D3c11MDk9N7+4tLx8 wCNAoEJgeXlp/8K+2amJ8WGwX3+GHX4ZHp+cnV86ePjIsWNrHgECHQLHjq6uHFicm54YG/3mG/HI 6NjEzMKB1bX1UxtnznoECFQInNk4ffL40UP756YGY18/YIcfr4Opfcurx0+fu7R59eo1jwCBAoGr V69cvnD25NqhxZmJYa9/fyPe/el1YmZx5fjGxWs3f79z1yNAoELgzu1bv26eO3H0wL6p8S9fiIe9 jk/OLR89eeH67388ePT4iUeAQIHA40eP7t+9uXn2+MrC9ODLb5xGRkbHp/YdXDuz+dv9x89evnrt ESBQIPDq5YunD+/+ev7E6vAL8be9DqbmDx0/d+3Oo+ev373/4BEgUCDw/t3bl0//vHXp1NH9s7s/ wH7+G53h5+tgen5l/fyv9568evdxa9sjQKBAYOvjhzcvHt7ePH1saXby+14XDq9fuHH/2ZsPW9s7 HgECBQLbWx/fvXp858rGseW5H3o9cfHmn8Net3c+eQQIFAjsbG8Ne7179cza/+j1+duPO5/+5REg UCDwaWf7/esnei04hRUIRAG9RiIDBGoE9FpzCosQiAJ6jUQGCNQI6LXmFBYhEAX0GokMEKgR0GvN KSxCIAroNRIZIFAjoNeaU1iEQBTQayQyQKBGQK81p7AIgSig10hkgECNgF5rTmERAlFAr5HIAIEa Ab3WnMIiBKKAXiORAQI1AnqtOYVFCEQBvUYiAwRqBPRacwqLEIgCeo1EBgjUCOi15hQWIRAF9BqJ DBCoEdBrzSksQiAK6DUSGSBQI6DXmlNYhEAU0GskMkCgRkCvNaewCIEooNdIZIBAjYBea05hEQJR QK+RyACBGgG91pzCIgSigF4jkQECNQJ6rTmFRQhEAb1GIgMEagT0WnMKixCIAnqNRAYI1AjoteYU FiEQBfQaiQwQqBHQa80pLEIgCug1EhkgUCOg15pTWIRAFNBrJDJAoEZArzWnsAiBKKDXSGSAQI2A XmtOYRECUUCvkcgAgRoBvdacwiIEooBeI5EBAjUCeq05hUUIRAG9RiIDBGoE9FpzCosQiAJ6jUQG CNQI6LXmFBYhEAX0GokMEKgR0GvNKSxCIAroNRIZIFAjoNeaU1iEQBTQayQyQKBGQK81p7AIgSig 10hkgECNgF5rTmERAlFAr5HIAIEaAb3WnMIiBKKAXiORAQI1AnqtOYVFCEQBvUYiAwRqBPRacwqL EIgCeo1EBgjUCOi15hQWIRAF9BqJDBCoEdBrzSksQiAK6DUSGSBQI6DXmlNYhEAU0GskMkCgRkCv NaewCIEooNdIZIBAjYBea05hEQJRQK+RyACBGgG91pzCIgSigF4jkQECNQJ6rTmFRQhEAb1GIgME agT0WnMKixCIAnqNRAYI1AjoteYUFiEQBfQaiQwQqBHQa80pLEIgCug1EhkgUCOg15pTWIRAFNBr JDJAoEZArzWnsAiBKKDXSGSAQI2AXmtOYRECUUCvkcgAgRoBvdacwiIEooBeI5EBAjUCeq05hUUI RAG9RiIDBGoE9FpzCosQiAJ6jUQGCNQI6LXmFBYhEAX0GokMEKgR0GvNKSxCIAroNRIZIFAjoNea U1iEQBTQayQyQKBGQK81p7AIgSig10hkgECNgF5rTmERAlFAr5HIAIEaAb3WnMIiBKKAXiORAQI1 AnqtOYVFCEQBvUYiAwRqBPRacwqLEIgCeo1EBgjUCOi15hQWIRAF9BqJDBCoEdBrzSksQiAK6DUS GSBQI6DXmlNYhEAU0GskMkCgRkCvNaewCIEooNdIZIBAjYBea05hEQJRQK+RyACBGgG91pzCIgSi gF4jkQECNQJ6rTmFRQhEAb1GIgMEagT0WnMKixCIAnqNRAYI1AjoteYUFiEQBfQaiQwQqBHQa80p LEIgCug1EhkgUCOg15pTWIRAFNBrJDJAoEZArzWnsAiBKKDXSGSAQI2AXmtOYRECUUCvkcgAgRoB vdacwiIEooBeI5EBAjUCeq05hUUIRAG9RiIDBGoE9FpzCosQiAJ6jUQGCNQI6LXmFBYhEAX0GokM EKgR0GvNKSxCIAroNRIZIFAjoNeaU1iEQBTQayQyQKBGQK81p7AIgSig10hkgECNgF5rTmERAlFA r5HIAIEaAb3WnMIiBKKAXiORAQI1AnqtOYVFCEQBvUYiAwRqBPRacwqLEIgCeo1EBgjUCOi15hQW IRAF9BqJDBCoEdBrzSksQiAK6DUSGSBQI6DXmlNYhEAU0GskMkCgRkCvNaewCIEooNdIZIBAjYBe a05hEQJRQK+RyACBGgG91pzCIgSigF4jkQECNQJ6rTmFRQhEAb1GIgMEagT0WnMKixCIAnqNRAYI 1AjoteYUFiEQBfQaiQwQqBHQa80pLEIgCug1EhkgUCOg15pTWIRAFNBrJDJAoEZArzWnsAiBKKDX SGSAQI2AXmtOYRECUUCvkcgAgRoBvdacwiIEooBeI5EBAjUCeq05hUUIRAG9RiIDBGoE9FpzCosQ iAJ6jUQGCNQI6LXmFBYhEAX0GokMEKgR0GvNKSxCIAroNRIZIFAjoNeaU1iEQBTQayQyQKBGQK81 p7AIgSig10hkgECNgF5rTmERAlFAr5HIAIEaAb3WnMIiBKKAXiORAQI1AnqtOYVFCEQBvUYiAwRq BPRacwqLEIgCeo1EBgjUCOi15hQWIRAF9BqJDBCoEdBrzSksQiAK6DUSGSBQI6DXmlNYhEAU0Gsk MkCgRkCvNaewCIEooNdIZIBAjYBea05hEQJRQK+RyACBGgG91pzCIgSigF4jkQECNQJ6rTmFRQhE Ab1GIgMEagT0WnMKixCIAnqNRAYI1AjoteYUFiEQBfQaiQwQqBHQa80pLEIgCug1EhkgUCOg15pT WIRAFNBrJDJAoEZArzWnsAiBKKDXSGSAQI2AXmtOYRECUSD0euP+szcftnc+eQQIFAjsbG+9e/X4 zpUza8tzk2N7R/b89UZGRgfTCyvrF2788fT1+63tHY8AgQKB7a2Pb18+unNl49g/e52aX/n5/PV7 T16+/fBxyyNAoEDg44f3r58//H3z9LGl2e8+X8en5g8d/+Xq7YfPXr195xEgUCHw9s2LJ/dvXTx5 ZP/sxLffh8cn9x1Y27h8897Dp89fvPQIECgQePH82eMHt6+fWz+8ODMx+vXn171jk7NLR06cu3rr 7v0HDx95BAgUCDx88Oe92zcub/x0aH56MDry5fdNe8eGv3A6tHbq/Ob1m7/97hEgUCHw260b1y6d XV8d/rpp/Euve0b2jo5Pzi0dXjt55vzFy5c3PQIECgQuX7504ZeN9aMHF2Z2f3z9+/N1zzDYsYnp fUuHjv60fvLUqdMeAQIFAqdOnTzx89rqgcXZ4cfrf358Hf4d7O4H7DDYxeVDK6tHPAIESgRWD68c XJqfnRp8+/G6Z+SvYKdm5uYXFvd7BAi0CCwu7JubnhyMffvxOvyAHQY7NpiYnJqe8QgQ6BGYnpoc jI/t/ebb8O7/lDgMdljs+PhgMJjwCBCoEBjmOIx198P16y+b/vp/iIfB7hbrESBQJjD8bP1nrZ8/ Yod/PIzWI0CgRWC3yeH7/KH6wz8//0v/JECgRuCHSv0BAQIECBAgQIAAgf9XgX8DHEIS3QplbmRz dHJlYW0KZW5kb2JqCjExMSAwIG9iagoyOTA3CmVuZG9iago5NiAwIG9iago8PCAvTGVuZ3RoIDk3 IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDI0MiAvSGVpZ2h0IDEw NSAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNvbXBv bmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2a6XbbyK6FO53YmkdSokhN lETN1GDZznDe/8HOt6tIibJkJ+nOuvf8INfqDkVWgbUBFLCB8l9/5VeugVwDuQZyDeQayDWQayDX QK6BXAO5BnIN5BrINZBrINdAroFcA7kGcg3kGsg1kGsg10Cugf9FDXz6aFEfvryZ+Hujb6b/Xzz4 lF73Ppa++zUcvzf63vd+/5n95m/MY8Lf9vp0iyr78udosqN/YwX/fOh5SenNr4gS3s9fdH3++wZy 9iVvz9d9wdnRN6LuT/lXT1kOpvqcXLKaFvhTkZ/A+/BYKBQeH24hZ16ikES8EXxPbmb0rah7E/7d M/B+Zu0PD49c/IPNWONPIWuVj8VypVIuFR6+vBmfeVl8ROAXyX+Q4HtyM6NvRf07cPdmCzCmKpZK Za5SqVjEaLLLvbVdBDDty2OpUm80G7VKUVa+vPvr+mVByiwUJfjeBngz+o2ojNQ/dGsWVyxXa/VG o9lsNOr1mrXafXOcv/rp0+eHYrXR7nTcdr1cwMjnV3+B4fKyUSkVC/hCtVotY+9r1Zg52dE3ojJS /8ytBVypt5xO1/O8brfjOi2shqd+CFnzCuWG6wV9v9uula4sk33pOY1quVypNVqtZr1Senzr/1LP B6L+DMqsFLl0sdp0e8FwpGs46Ae9rtuqV7DHB46tZRarbW8wDkdBp1nR4LPc7Mt+t12vVo1GO+1G BUW+3S3Z0TeizjL/2I30W2l0gvE0mi8W8yiaTSfjYV+WKT5+YGWi+0Op7gbjWTQb9drVwpfPGcTZ l77brNdbrucHvU6rVpLQ69V/KOp66B/4pS1Uqjt+OF9t4+12s16vVstFNJXdqm/jUfZ78o1yozuc LleLSeDWGHux3dXLQbfdaLa7fn8QeE69nFFjkgKvRvffiMp+U/e/lDffTsr+BvFjudkdRZv98XjY A1rXZhWFfVzVuKC+cQGTfBRP1ERvHK03q9mg07AbNBl69XLoOc2m0/UHg35PiM1eMQPT/70rKrtS CzadcmdB51fXs97+klNX2/5ktX86nY677Waz2ca73W6zmPQ7DS2PvWyvZGryixT+WGn1wsU23kSj rrRDthXX0AAwVJq83GzX0agH4nan1+8HbGnj1RqRUB5DTr7cEWUlXdabmZN8xb7T5yTtfPHzMuv2 TvGn5vRnm+Pp+Wm/XS0Wi9Vmdzjst4vQb8tX7WWAMN1IFzI4S6HS8ifLeLddjHtE62LCXhgKGjD4 Rh3zcc9pNFpOt+d7brMqxLoSTmLozpcPRCWrt9+1PMZwpMuCJIxLbDdhTx9i/vT3Q7HmDqLt8fl0 2C5mYTiZLYyHb6Jht1HGcglbssYTGD3Q00LVIN7HSzYyCQ32QuZVxhUbS9UB4naj3mi5JD5itWID KxTlgfNYuvNAtrgRlfAgazB5DTJFk3TpnaFvUoR0B1mE7cJxzBuWemvb9AmIS/XOcB4fT8d4OR0G fjCcLLaHp6fdaoKRSwVDloryWfmrsBj2VHh8JDmxHXaH3Xo27DmthL0wQ+o+O4AQ12v1ZtvtkPOk QrHxYqkC54HtVMVPCqVbUbVqyl75rPmu5tThSeJIeJQ0myxIdLGCwJrE8QWepwBv/r0gftpvWHjH 7fQGU+3q4yYiIFUQlrIl64xQadgTBi2Wam2foUd8YzLwRV7EXupVvokDpDaWy2cQFx/kHaUqKnBc 17KdcqlcawdvRbWbsNckkJAY7By3w+W2m+Yrxpt4Ab1pNFuttuM4ZtIVG3oL+Yz4cMSogdtsNJ3e SCZ/ihcjr1WDPCAMtqTsLAuXqo1W27Cycs0JpmvcYb+ZT0bD4ZBoHHhuqwaZtA6QbvLUqx00KOeA 4ik/E8t8r9NqVCuVekbUGFEQIb8LJyAF8FkY/HnOgK8QESxFwl0K5VpTfLHX84PA73VEebOZ8j3E 28MhXow9LFRrdkwge9otzQ4kzEI+WSty2H/wM6friZShC5a5OT6/AHkZzXRNJyPIC2TS+mmCWJEr ZSBltm+l4XjBcBxOJuFoAEdt1GoNNyMKWRChcOgbTkAKEGA7ZzLlmoQpRZK71FodfzAaj8NwEo6H Qfcuy7ngTm0M4u2cJFMtJ+o+Pe2Xoe+2CLIBWvXY0tqfj+W60+sPB9CnupY52zy9fgXyFuayWq1X y/mUPY0p8dM0kEO6WoIIOoJ1uVxtuL1hOIvm8/lsOjai6k0XNSPq9WRFwYSWcAIWhGMDGB7saw65 hGs+mwwlq0S0qja7/XA2XyyXy8UimvB1m/MvGK/v7iOerA8nbAziNoBH2ILkXCkQFInP3iCU/uGO Wub29PX7NyDHyuTbON4sIZ2OdYAkdaG3dgcp03DgwbFrDac3nC5Q0JKlIwkjJ6K+ff/2iig4UMy1 tpxAW6SCcsez+VJq1bVczEa+i9OXsEBA3odDxDBG+/htJXcFOYP4yqsPhO7FGMSYYzqfR+Neq6oy l+QdjKOF1N9qyP/j528/fnw9HWII6ma72+/j1WwIMHAFFnHod9quN5hICoGi3mh7cNM161tiK9nY Io7i5++Iej6wdBDs99Cgse8QFQTYH0fLtSy/XK7WG+bOeEcEwMTDaHs4wZ/wDuNhv2bjOIlcwFDk Ij0dttHQc52OP56vRJ0d6MjDI6lswHIxpNdutjp9LfM/IN6x/Dkw9jDV1bRPOGq6wWQlehIGHUmJ lqvlFI7NLGOUeLOa4ysKUFQauMtZ1Ga1QBI0aLeGE5iN1u6NotUG9qtaR9/h1iq23u6Fq/3z6+vL ExpSPdAyLOfd9JTYeBEfnw5wjjQ77Y6E7imFHu44WWwQ33fruFehRPEQrVEmGk4Qf/vx/eWwYfXh JFoJ8paXBIBOP0XcZWuECwg4OnTY0oPZKpYF2cTEaqUaQoJBbEXNJpNoudkTTNlYDnGt1SVjbnf4 +WwShlNeosolPLhVlysRAL59fSFJTtkipArVcT9BPFrsIJk7GEg/6I+AyLo3c/ajWfeS3RkNXIqF x4KqjvlGlvPNy1l8+sre287DQeD3R0DBWdbY0nG6/Wli467bxcMh4IjUPlHdggGZ0+ua9oPCJRvk 9M2KGvb7o+kC5cFtBtZdIKxsmHWkLDieLtY7NGYYe0ux5Ik1nGJYQc9tAvjn+bg7WuIXL0/xEhXC Mtfxfm9VqK3KulnrUOWREHvjhRCTu6UOvvb6etrhul3tAFODKerjLFnEXn9qEGN8B8TzBHGfvGro KfEnI8rrdIkeKA93GRmvGEabg9wuYhsMhuF8jc/jAKyhbdfw9Xm/mpjmw0+bN2KZID68oN9jvCbC r9hD+Ax2asHpXBDz8wrx1lJpg5h8/HxYa+dqM/rhMrZr6XY8PNHu464LYnOvWOh4rF9OJJswDTZZ FJmhmklEsdelFqxKkeITBYJwuXui0pGNB4PRBI0dj3u+yrbrDtD6y8txOxvKow37fN+nqYUSxMfX Hz++vSTl4na7Zksok1TpcnyIeLqBc1l2RqK1cVMhYOB1xVZvEPewijG+gno07uOGdRhrSt9IEBC9 hAbhuhQpfQ/doY2XV1AtZyFUY7bc7mF6uLw2j16eTuRSFXBJhXGVj65/JIhXx6//Ucg97EwfZBlN lDorZWW7jxDDMuHVG8U1kgjr7usBaxn23kFMvCPTEAr2+FHEThZ7S2gPotYSdeYvaAU/8HxoL+Hi 62lP6JpOZ3NFCxtaFS5mMN3jVlWAYpbqnWuM17/eIIZIQJvwHW0JEUJR5w+8GsTUTqqy4EYwI2o+ iqk9Ud/37tu4DeMkisMZiA7kpxFtgoRlqgwzosRR1WyAVuAtfg+n3r98lw9SwJvsFCslKO+RTBIl TwNHbaqf4L149UFe/XzYrkQKhnI2Yp4wqKZ5fx8HE0VNHKoF7Va91GPHCfHoLuK5mHutzt6bzEmv IiGYma6QtMB39vEi7DUpWooVRUjiyYqE0+uHS63v+wuBZgE3pWnBXDILUc1OPNg1qKN0bdHbX+k+ JnKR0ZQigas6gc4ydd0FMZy7DIs1mGLipI3VkAxttjNiOj0fIlY1RqHEVg4jEjR0cjWHCovMsuuF eOzxHXJCgywIYvaH75PYD6/YGItA07jUdhWFVqlnQmsy8THTT73Fap8YxB2TnZ6PyqrAPVefFKW2 UkfgyEP3tiKy3mey08XG8mpjY3m11nnPq8k10H+Oblpi65g53sVomZCdRnaqGTVerhAbG798+/5K lyKiPjJ10niEI9pqxhKdsdfgmOCnJraxugMDIfjjUtpUShdp78bU9caMItbw9hoJX7FpNbWICVQH /XDollC4QYCkj/cilxDTvhBkGg9htISIK7f3e15vCHshC95DDGHbPX+FcW+UjwPf9/kPOk7LQJWe oe+a+BuIh2KZiva00AXXHrSpELdevFe3gLLX8HaR7hSxiRosZECrF9s1OqQKqBJkwOveyccGMc0o QSZHjyOCrtjzKOj5o9la8eIOYhOrSbmQQopEr0PrhEueaIL6P0M8J9xrO6qxpS6sbeMlfeQFFEy5 TxzDsY1eOIflXORjW1dSx1Rh9YSbPb0FnCX1U0PHEgZivVqIOYZyewM6aqZpBEUNQHxrY6oS5bnh jM+w6xYhLK3d0tU0vmg6T//IxvAb0xFQEZzAVaeWJryJILxUKnDEENX2fDleEEOUaImptacagfBj QnXPfcsyrc96LVoCdM5oblJekJdBTBgcQOfveTWIB3BOcS5KnRRxk6shdqr0mTQeftOrBxGMQL5Z N2eESQq3JzQdXorTiyBxHEf/DQqeQfz0Qt9CScTzfGM0nBr656jqSrg0LDOtJAyRq9E6azv07Md8 N0GMjcXfk5axIhdcNBa777rU6DozQTUqjlynzUXrTfRUTdBQn9HEX97H9KvxqFh0p1bMZjTbvldC hivD4kejcLqMn16+gthkJ9OcUteHtdCPo6ihu0/VRVO+BbWyZxJixtRO9nzCg26ok8vJLaUWD834 sO/7dAlgt7NhR525QpmW8oyugVzLlKzi6zs6iMOgR9eUvqm6pmUQi6pw9KGJv4pYZxLT1WZDinU4 IszkcBAr4bA3OaQg+YvubPanl1cKFarFJpUDmRKTn2jtkSh5qybI0nQE6O2M5zQtIJxuW30Fcw9i +bMfDIajseppcjBDyGX9yZwKejpwOahR58Flh6xtHd6ka4IHENYhaWMOfAf9pJ1ZKoN4FCFaE0W5 3kvD5+cyoxyDPoc6O5VC9qxTG5mmh+oechCkkN4dHJ4GS0wMYu2KVPHT8/OTmj56SYzDV0wRQs6l m7WcT6D7BObhTPeQV51B+Zw6T+DHNDNiTqbGxLkuwZoRofLcIz1iEl04p52VdJDUA1EXDZZJw9Q0 Le1RPNXLQJ/RxGL2RPcM8c2NMWOTxlNE8QCtuj7d1VtaeShRp2+0n+hlqQNlimedCtMCMtqASJgz ujjeojmfRKaOJc242ZQOXAuQ/fReJ6vQD/EmdazWOsZk1zseHckZxLEFOxbZa7Go2WwcdNTMsn0u y0t1ym36Y2pnkxHtZzTxykHfAD3/NPG4Tmd0PFbfUzsh4xgcfmBkB/UvzdfUV6OfqBatrSXpidGV XONVWJiGm+24ufrTj3Kt5fVHaiCrcde+3KOnpBEraXNAMYL2mkfTmRapKBdkjz+4YFF0v9swhJIg j6b0MnW8rRboZKxDffMZKGsy8dpcZ4zXN4rHtHw7vSCApZKbro5sONbhjz3oUA8n9i8I5FET9dXV k7ad58FYXXNxXf2NAd3YHoBVSDGva6gRRqKz6XEPNE5wGjJyOJ1F+oME9eGJQRUOFjSCvpxqenWo oWW+L1icS6lB3xuM2QhcTKMFyjSKHfMmnfhht+eMG0xsmiZnQI496syYWKUV6hbz1xECjBaOx1GH 2nHSL5GyoVPSIKAVI7Y7Hg0wmPkTEhq9ECtHB1Gq+IGZvef8XBMIQmCiTMMl7AiVbDACjmp1uEIi kjB1jVkE6QxXZBn6DKRaDQ/7hoFmYibqngHe3GDkLzrE4shOhzxXJmawgayP62CHvAALUTIk/etr OuRSanVcc/DDgI75tGgbZqro9JAUQi3EwOQe+i1VGHlmvM5sHu0I8Sj15f6WostVnT3yHQnTzwZJ DbNzmXLHdHh0TJmI/rihlwEuTBxu8rdrtkWUeSXEBrJYIedtonYcWFZ1smjPTFkoBIpTTP6QzXI/ Djr1R4usmVUaqQWVnRrIF+w9BoVztUQjUJ14Lacd6Qi5pv2qWZStaXTEp1mot43Kz/N0Un418Xr1 939JOt/jUv2QjVtmvH2tv0DTxaI5lC5gE1NsmInmoBrgyXvxcrNmNCmx5q8Azl/AXroHjM5oJU+Q 0NB5hJmcXZTh+OZ9Mot5EMxEFdcT70N8+xTpOoA3370BLCsnKrFA9ecBXLbYsBMxkLDxPtEEU3Ql UmXw9AvJPRPM8FRzGpxZwyfz0fSBkWWlaZZRudH4WTfvL/4t1uS3+Z5Wxc29IXY55g8tsJAGciXr YKW6eH55b6VogHmXjMzcmwmJ4pB3JYofZg3Z2XpgftuPXDTOWE1ORd9b/DvPNE3XB6+N1MvqksFm lvlf5n0q5fySBzf3yXgD10xIR6Szz1PSBxqQzrILsW9uJqYT/t2/qdiPlGLG/OJnzvLeE3hXzmXW u9a5Oy9/mGsg10CugVwDuQZyDeQayDWQayDXQK6BXAO5BnIN5BrINZBrINdAroFcA7kG/t818F+X vf6BCmVuZHN0cmVhbQplbmRvYmoKOTcgMCBvYmoKNTAzOAplbmRvYmoKMTEyIDAgb2JqCjw8IC9M ZW5ndGggMTEzIDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDI3MCAv SGVpZ2h0IDEwNCAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0 c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2aeXfiyA7F pzudEPbFgDGrAbPvZOnu9/0/2PtdlU1IB5K8OZM57w/7nOkwZVtS3VJJVyr/9Vd6pQikCKQIpAik CKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQI/F8h8O3fsuZfU/R3 J/Qtuf6ugM++l+j5lxGJ1X7KSp797q5vX2OlM+Yv/flaRZema8pNrf269Mj5mEy8+aHr5vsXwGE2 xP98qaLzOZ1+oxilyfWdCX6w4N/A4vYuk8nc3X4BHIk1tjpfqegEwNkPYXGD0ts7Xbe3P240w/fw EBh397l8PpfN3P74p71D5vzAnFs8T1h8maIzDE4/TTkLnc1qernsvS34e1PkjR932XypXCkX8/fy jpOwf+CH7MGc+3sZIrsKX6Tokq1O+X1OOnWVinkt+HtT/Pbt5va+UK41GvVaKZfBOS4J/ptjZk8m my8UCnlWBsMq3pcoumSfrfN9rliu1Rs+V7PhVUr5+7t3/F+vZHLlut/uBM1aMfvPOgdQI71YrlYr 5UIuBxj11pcouoCGgZEtlL1m0On1uXrM0Cs7OC48ryG9c1+o+d1B2G83Knkhd+XRvzFsu1D+oHUp Foplr/U1ii7YFutuBL1wNI4mUTQeDrot4Mjc3lwLpOSf22yp3h6Mo3G/VStkftz8c2jEjuf5QbvV rJVLpWqzE36FoktgWARA4WA8nc0Xi/l8NhmHXR//v7uaOhXlcuVmbzSbT4ftepE4ehW4Kzeuoyfh mXylEXS6nVa9Wq7UWr3xx4rksVd0XZj2lSFcQ6o74WS+XK2WS+CYRsNe4LngKA2vdLiB7zd3uYo/ iBbL+bjbKGctyFx+1L1wNvl4wP1JrDobhPcQoUGjCxqNaqXiBYPJu4ocEC8iEqH8fRm0X2d3Lv1U csiWvHY4Xa4369ViPptOo3EIGmVSxY3RMMmJ342FQ07u8tVWOF2tl1G/WWFXQQx4+oyl8Cj/b3zu fPzN8LfYYiNa+geGcXefJ3J2Om0f36jWse4dRTZle0/K+HEy16yVyOQ63bkEBWPONfx+tNxsN6v5 ZDwaDsNBr+Nb4pR00+DE8K/NTwZn8tVgOFtvVtNBi111DzEQV0pscY8ag3IcymxklH3giJWel/E2 5mATz2dYVCNPVG8FfoO4Uam3ryhyc3ql6rUNoCCEnFwxuRekLuIBGvdFrz2ab3a79Twa9ruddjto Nb1KIXuHaMcIY6OFhWOIt7eZgqGxXc8IHFCwXDYr1mZVSzxpI1AaduNu3kaz7+8ZNpIn/CQVwnkn ng/j0gWxq9ab5JRqydCYry8r0noavgAokU6om7VuvJIbc8qLONig2yiNbrTa7Xer6bDbatbrnudV SfTigTEjNCpm0h1DzNzdkWCDIRhuFuNey4MZEPzF2mI8MOSOORWKJYYhUcbmDEzRbEb1eCGHSznu LR4MES4Ui0U4Vy5fKDnGVSkWy/jGdUXOKqlCprMBqmTLJxvO5ZoVrMlVOIQGyaE/Xe8P2yXzYp8m 9osUS0tBRv9wS8hUxBAh79liLRjNtw7DwGcdG3VWUh6FKXiA+HSl5tVBt1ouSoR8FgHQKq/esMfB XFsMm/PFcrlSrdZYiRomgEHV+KdD47Ii88Pv3xNVkgk1rmCDw57U9Epu5aMiAjQsOcw2h8NuMe42 mY+c3goEVUvGCMVMbYp3sLQq1uIEOe2vxe4AiJNhv9frkQEU9Io5TPmhOIivQxkIhWz/qpFbsxs6 D7Ps8njA4yUWDO5dFNfyW63AtmmdRAIYvh/vlM41Rc6ok6oXocIeba/lNhQLr3MBbboYje3huMM3 msxGUFjIkDRm5IuZIuXGEp/X9JtMolAgEY2W+4dH4JhFY12jYb/jk5lZbsAoe367NwiHw7Dfhb5r WOhWyZz9cDTi6UGvzTjcO1+qNRkdDMKQEN4nr3pevdlqw768SrlS71xRJBcAd3i0VA1HXMOQDOCV C3K5TNZpi+WirepI1LWtYnFDO2VzOO7X0wGJFT8TFnj1KesbFdOC50peq9PrwgJK2s7j5eHpGThI zFxk58mIGMJys8Gg0z0Y5GRCmoLb1onK99lcqeZ3BqPJdDabTSfEbIOjABiwTTc6jUbA0Wz4wGMw VqqNzhVFrDS4U8bAo8fR1K7JGLIkbbhcoXIudyjbcu8VEYZGSVF0fzxuLSACRxzb7iAiQZ/F7TRw DsIzecTvhiPYSL1CqO+MV8fnXz+BY71cQt3W6+UMou6x3CxXqzeaghGzFn1pVEk7+IDfHU7mC0ie mA0sD5jIGg3HdyA8y8UUJhz4gIEDhdyv1ZqYd0mR/I3IQAYejCczLYiu2XTcD+rMAuxjHhXL1fD7 9bYybKFGBNgej/vNXHFUwUbewUYpNzF+Eg1a1YItA7FiEE2jsNOEMLNk64efv38/H3drZrdcbbbb NRL8Wpl62Ie2L5jcjMXCN/AmNle12R1NFys4r1ieLWND1NvvT1a7IxbgZtPRgIjSUqVgmjwPNC4r YluDez0YRLOF4J1RWgD0bGw+nsc1eiTLWK7z23d9A/ZlgQNrcI49jGNg2067hb1fhZbB1Idtj1Lk Fl9pdJkjDuDX5MAY+es/oLFhzhPmvt0Bx6jb1E1b7fVyPmGBVRSrGAXAIZwXygtGonnsCUXMehDO tw9PT4+HzVJgtPxmy3xoxs6r132hcUFRp6GM47WwcQm+bL1IVvBTS1Iqlmqtc7lU21VS3kdtmyxL DtvbHw57WWObWaE+C6WAsSO8Uy8RAzNZCrVosVpMwD5G4+fvX4+7JVMOh9FccMBN2w2vTqG1WG9t cvh9g7znDJ8sN5u11r/X7XQ6QYs7hEni8eHp5/MjlGfUa/sNITCaLlfzqB806n7PfOOtIqzAr3rj +Uoyx8MwHEUzKozVbNjBGctM60xuoBShavs64TBqniuz5vM16XK/XS8mtpsLOdt3oEQp0q1TmN1l cpVmn+mspmHgVRXc1sfnn0+H1STstoNOf4yIvQWfRpNCa7mFmnGLxEBOLphroEUQEeh8YwfcEdkk Ah2QdFyL/0EZKoTV0YzaBNybDo03ijaLUdeve83OcLZiiy6Iyb3egI1IiUHx1GK9/pBbUfZ/zzUs x5I7bEOvtrgHq8t2wanY52Vy2xw0Jj2VqULDH0yFBmTc0Fgdnp6Om2nYbta9RkCxIzY2GbR9vx1O 8BSh0VHlBR3NF9l3QATFZhpkTl3iqVIDGk/PD9v5sENHAz6qrEoRtJToBjtldbymKEDmbk/Ii9iR 3V44WajGmIVYWGO9zuQaK7vapIizLpHjNgsc1PT49v6w32nxZJUCJQXMZvUKjZWrGAwN+MbDbjGS W7LCQTjDOTYz1rfVNt/YIkkRFLoGc/bsAdgaDaKSOB4Naa58yVMKfXzcr4zw5G2oLTTwQoD2u+PV JUWEqKDdg6ceHw5b+Ua32x+C9x4HHTEBkhFonORCeIy9XmMbNg7Rp/2tfkKfrbphuxx2K1u+qsQt 3kFjtOTp9bTvW3B3EVyW9IJWoH2jHENYJlLiaBAUOKUKm1GHTEccchccyXjc8biZhSqHMwSoYi2u W2M0LiuKBt3uYMKEn0ByNg6hWWO2DfxYtFrJaLwkOcRyKRk+8gwAMTiMO5LVEGbJhTjkE8uIhdfR UF7ew2CJsbl7aKbHbLd7K3fIkCERhibBLCJyqDAvVwnBxBK8mN7hvao1Lkpil+F3h/0qonEkYu9K wnPfuKSI4B32+6PZ5uHnz2fI0nQMw50odrFv8A3Q6IypHRK55hjvRNBkr+AdxunrymuLjcGBj5Ln PkKDpZ4PAyanopYSf74BjajXajQQpWRqObbf9r1ard4ij4PGdOBXlPbtAo+M+A71H07V9gwmGoFJ 88R8w/nUn4qUgHCGxe7p1++fOAc9O2XYtSW2sN2oETdseWK5JJOPsTDnUCuS4qfWgF0ttocHipao 3261+xEh+lrcaA8Vv1nqKmWMZtAKZ5udfMOnzjDGoObiQu4RNBtNKMh6R5TtN8t25uDaIK5vpJLd JLG3qT3eovFGEfF6RmKPlvvn36T5PTmWMmBq/Ux4im9ZT32bRO4n2/pYldTgZah4tNwRlhQM2x2w ERo0+3LwfpvvGl93OUVtB0LqCY1KgobxL8/vhNEUiroSv+x3gqBLur6OxjZ2GurSi2j8qcihMXRo /HwAm4lKx2gChTWOYOWeLHTO+MmuvgNDbSJIPzyXBZZzLMb9jkNDcbKSpyRIGjzzBI3EN7RTzDdY CsVzig/IebNNiJ+r30r9At1ij4MG0prlnPXjra/ITkm2xcA3p7mMhi3xuSK3UyLtlF9PB1Ks6l/V q6qCCdyuTaTE5OR+bpuokxa3DpmwZQby2Z6tQsSWb6xnKlRIiEWIgeLkfGR8Q1F0p//xSASWGqxH BVZUwmTUKsEjjGaqXxTx+wOHhqS5DoHpVRR1HdZkC71FA61vFVljZTCebx+fnx/Y2fCNdhAE/CeG S06naLOGaiz3c2ioUZVkO1KL8iCVjtDowC+1/JpfCcYAUlRXhwQNi1GY0eW0DY4AoR2Lf87CQHSC Y12aI3gXUZ5gMmWPj42PmDTaU3ah+JROr6IhuSSvPxUtokGvN5yuj48UODPjt3TauNT/Uj8qTtOf R0PplQAKEVLHK8uZpwIxaLidAreR71tTjE4lSUNtIYK0cVH4xhE74OllCtRaazBdaSeoiQ4aNPeq iqVTkrY60GE40k/lHNdUcn3dexXe52v4Nm6AxhtFStXUNKANpXjYw9OgBLWqrkqZnoLrVZ7L/dg3 AINsotN5seRikRlTI4nr4BDdU+Aj3aodRbUIKXzcv6DhtpTaxFWPQkvQMVkftqUGMb3NppFS+C1o DEL2nWjzEOIv/s1Fk5VeyIdoiIvira8UqQRogfZcXcwEDX1jUFYLn747ndv/FQ07Dq9wPE+T16t5 4gn4M+JduQHVU7khRtkyFvwA73tBAxp4ZONQhNGekRcwbSPqVKyVqsRp8TbyDeIoZJcn2O+0DUA3 7gjbEYFKNHzmJYq6oyuqNmpYI9gXFEHrkupIjkKBB62p1apsFPmGSvAzuZ/wDXfKp08P1M6lqdsT /2IBKQISMqr/i6B9IVHw8PgMGpZTVIfv1QnEEjYw5SO8XhU9nTFqnFq9CUSdPiTMhpWwrcwVuEMX 8Vqq9d1h2nJF561REhFRFCVbTxiKhAaU8pIikKIx1pBf7aitKL3bNEa41FumGU/xBaQvcj+FhqKY 3+nTzqU/MByNp7C5LQZTE1er5FvFAgpmI3rL7fHxiVKTSKEezXC+w1WOtIlJ9ZMZTDzp9miPBO1u rz9Q24O0RAPGGlpArfKb7if5kDM9hX+0cNC6AH/aKA4NqmWI38J6cey24eKSIorFsppsqog2nBOO Bn117pNefA40TEgs95No0PrtDcVauOilrSAIWhR1LFXpows4lrQc6W4d1CGb0PvCDqLm+vDwcFAj UDdVpRmKlRLHBAHfXACuulFr1ySgDx5XL0hTl5iGKW1iQg4VwHQ2CdVi08EQRTU9yBFDQ4qvGmBd UGT9LbXu1ftSTxZmHp+bUghwUkNGcEJiuZ9C4xbfAA3arPQWaSta15IOB31nUnZN8K43lG7q7MKk xB3oLAkpaxGBFOxKXWKKEs0aFAkaeHB/KGKoVuWCjabAqSYOfQN7kkE4I905bRW1tsewadqvql9A o6jW73hEY7fKW/GS/KFI3Xnji/RFXQlArzX5/AR+BFswIbHcT6BhX2+QVfX1hoHBPxwEuK4zham6 5mOnS11YOtM6JqDr6FaFtjgvyG3A0fqzoAjx4Rwm7urrpcl4oBaItYmh6zM9y8P6ToQWFaSRfNQf 0ImPOaoqORBiCNfhWJrlf6uIp+lm07yFPvdHWkxsU4d+aK1djjEgHCYkkRsXqe/8UXPDTjn6yV6x Hjeupsa56Yq3EajT2CW49O3LH+tW8wWSznRUHbDR7KhAvXuOUzgiaRN2xxHfCunIgRMEq/ppo/SG Y+3KSeTOWdQIIq+LQVapYNWCUOe6ROARqYTV0gl7q6glMOjsy0R9CcWe5HJfJpk21VXAfCb3HRji W45vULy2WAodjIV896V+P2Do8E6FbVNnZrB/8gAHg/YZAcgTs+2rgjbHiETLAQ902/bBmNo1ecqU wMaJbAGNPx1aMR6fi4VcPK5xciHHABzY0la30w7HgTi4ZAg7qAguKYLuWo/EmYj5PStRZARFis59 tZalM7kfg2Hn/dbbqDV8OwXlgJk+pg526RQZNeOMVEekZC84gtI55Ea6dOQrTsERs90nXdqE7qj/ ZAhpRa/ZsDuG1UrqaLTJioGqnWA6kHRqT1a0Jq6qSM3RDXEMiqLSJUVKP85E0OSkUkL52AJiLjCc FWdyP4FGDAcTk8Ias+V7WDuUl8ua5+icm+NzEV5xR51a812CDiIzfG2rbwz4ztQxYn2yoANbOhRG cDl0hwvpEFtHplgeH5tLlY7i7YheZiNJ57+2T6zhooLahjjnsttvFLkvumWiMOZ7AGf+izqz4pXc T+Bh8qxU0ccJ8WQFO2Ak9/iyggt7+TAlY2fWmpqKPfv8RJ8gu/tu0rIQ9xBWJo9pujac3eBInlDh bjDXRJJOwpO+pUp9TrPscFzYXlGkXpYzMVGGVEi5fUQit9GL53I/B4feYwXscm8LC96N8WDWBoI+ WuLSHsIK+2aJlZXdejXRm6AYS3wRKGkxiPY80z+T5H47gzVHugwgoc1wVZEeNhM1b8KmFsvUmWOf hMhaJ/cT/5qRscbYAobiF92srf+R2Ba7jXvNbJXlpzf1ot1zo25KicAzcTEU3OGySfM3Mfds6HQb E98o+lPZaa0QdXrxTG4i/92/pxexSr9PVtnEnK0vIMT37UH7x+bi7idqNB4Pm8Rk/MXGs+cTSaeH nFobZiy5fZKogbNnz2XGE3B3kxfPn/3c7+TN13rs3dOtK5Ku3D8Nv7IcGacbV+RdHX7nxdMtflx9 P72RIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCLwPyPwX1so SJAKZW5kc3RyZWFtCmVuZG9iagoxMTMgMCBvYmoKNTMxMwplbmRvYmoKMTAyIDAgb2JqCjw8IC9M ZW5ndGggMTAzIDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDExOSAv SGVpZ2h0IDM4NyAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0 c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2daVMiyxKG x5F9X6RBdtlFURYFRBBBZVNAVhFwmf//J25mNzWjXs+cGawm4kRkR8yUQJNvV/aTSXXWh/z2jQ7y AHmAPEAeIA+QB8gD5AHyAHmAPEAeIA+QB8gD5AHyAHmAPEAeIA+QB8gD/yEPbG1tbfxqQVM6NqkM it+/f9+Gf/DXxoRRdFuhUCoUoLwxXVDdVijVao1arQThTemiqkqrNxgMeq0KdTfi5q2tbYVaZ7RY bVaLUadWbG9mulvfFSqdySa4dl2CzaRTKTYyXXCxSmuyu3zBvaDPZTdqVZtwM7hYqTHYXIFIYj8R CbhsBo1yA24GF6v1Fqc/dpjJZg5jfqdFr5bfzeBipdbk8EZTJ2els5NU1Ltj0ipldzNO1mBzhw5O ypf1y/LJQWjXZpB9usiTziwEEtnzerPdrJ9nE37BrJOZKshPSo3R7okeF2utbq/bqhWPIh67UaOU NYjEkLW49g5Oq83ecDTsNS9OkkGnRd7gxeDRGh2+WOb8+m44fZgO765L6Zh3xwhUyZerxOCx7oYO C7X2/fRx/ji9b1/mD0O7VjmDSAwes+BPZCuN3vhxsVw8jnuNMlDlkDOIgCe1we6OHBXrt8OHxdPz 0+JheFsvHoXdMgaRGDwWZzB5ctHsT+ZPzy/PT/NJH6jaDzhlCyIxGRt3vNF06fpuNFs+v7y+PC9n o7ur0nHUi0EkC1USTxA8+Uvgaf708vr6+vI0R6pOD/ZcMlG1Ssb+eKZ8Azwtn19ff7y+Pi8fx92b 80zcJxNVq2QcThXrHeAJXPzjxw9w8+Jh0KkVUmF5UjNLxvu5isiTqIq6y/mk16jk9gNypOZfyfjs 6m4o8gSTFae7nA1vr86OZUnNb5JxS+JJVEVdpKpVPZUjNb9JxjfdMUwWeJIOpAqC6PpcjtT8Jhl3 BpCfVncWlWG6QJUsqflDMl6+UYUgeoEgkiU1f0jGUvCsvCwFkRyp+WMyfjtZyc1ypOZPkjGbqTjK lJo/ScbvZWVJzW+TcVdKxj/DB+XxFwGCiHdqfpuMpeABoZ/C4t9SEHFNze+TMfzyvIiHqIz/SS/h l4hrav6QjGElIx0v+HOLoqvX4vqGX2r+kIyXT3Asl0tY0Yg/87CuwVewrIJfIn6p+V0yHs0WqLmY P84XyyfRu0+rV6C84Jia3yXj6XwJMo+z6fRhNhdv8vNyPnuYTmeweIXpcls1f0jGiyXITMfD4WgC E4e7ClOcjIbD8RQuY7mY8UrNYjK2sZWxaHoy7Pe6/eH0Ee7v0/JxOux3e/3hBHXnnFbN75MxPgbM JoNup9W+7Y8e0K+Lh1H/tt3qdAcwffA/l1Xzh2Q8B7vTwV3r+uq6eTcQb/R8OrhtwusWvIarmj/w WDV/SMZodtht1i8q1at2fyI9A/XbV9XKRb3ZHT2Il7VaNVv0a9eNxOAxOXy4MoaVDLp43GvVymfF 0mVj9cao26iWimfleqsPZyzgDFw1x3xY0FizKrgKnnCqUOugT8HF952r83wuly/j4wheB6yiyuIb V3AKunmKq2bp0XPNOgoWoEyOX4+VeOduKqfpo6NcCR/55hK6pdzRUTpfuemOgObVoyc+JOAz0RrF SAljVyhVEDUWyGmrWjhO7ifTxRo8GYiynVoxje8Uqi283Qu4/eJ0XVBYWGu66GOD3RvLlBs9yeCg Uz/L7Ecj8RQ8fQ1EWVwypuKRaDJTukIHwMWNezflTMxrX7NshEUZkyOQPK224c4u5khLJXcQCQYj UDH5KVs9ld46wSf8GZw3HbSr8MTrWLN8g+URs3PvUPLx/HECsVFIRQNeXyh5Um2tZtuCUk3I5w1E UwV4/pxAPQNSVS1/EHSasYzy9zcXZaEWBE94t8PpbAaJ4aqUjgfcLndwP3fxSza3H4T3AnHRzXgi LF4Lh3tfkRVnW+vcjyfjwR081yX33ILDFUi8ka3kEn6XQ3DvJcHN3eFkMr5v1/JfkzUJAahUNO76 g/5do5o/jHgEm13wxbO/ZlvJxn2C3S54I6l8dXVmBe6tgMWbdZz8XaGBUkUsfXbZaHda1xA7UZ9g NVsgb72X9TosFpvgjx0XqjftTrtxWTzGEplmrXovBJBKb3XtJbNnFzUopuaP4wGX1WQ0w6W8kwUJ s9EEhe34cb58WatdQJRhLWO9rCz+xJt2POFk+qRQOM2mYlAqN+r1JojlD7J2k15vBN1YKpsvFE7S +yHP+lVmzBc6s8OzF0sepg7iYZ/TZtRptVBg/SALJVatFjYtXP5w4uDwMBnb8zigTrWWj799w+mq 9eadXdiMCAX9bsEK2y9q2Cf4P1nYL1DDFo1VcPuDIdy42DHr1WuX1EVdncm6I7hcTofNrNeolVD+ +0wWP9AYzDaH0+USdqwm3fqq33BTTanW6o1mi8VsMoApBWw86T+RhQLrNgjrDCY81ajXiqprhI+Y 1VAXNvM0Wp1Oq1HDvto20v2ZLNzIbdiBY6d+cesPN0xx6xIP3L2Ejcx/kJU+XJ0p7jeuO9fVhHHT FA5pr3brH2VxExkvSzyVw64u2pMOgPt3svgxO/7+l+ezb7B9gH+R/eyrPN4j2WzMY9OrZKmcsxtE TiYnMxY4jYQUIcUJJWaGkCKkGAucRkKKkOKEEjNDSBFSjAVOIyFFSHFCiZkhpAgpxgKnkZAipDih xMwQUoQUY4HTSEgRUpxQYmYIKUKKscBpJKQIKU4oMTOEFCHFWOA0ElKEFCeUmBlCipBiLHAaCSlC ihNKzAwhRUgxFjiNhBQhxQklZoaQIqQYC5xGQoqQ4oQSM0NIEVKMBU4jIUVIcUKJmSGkCCnGAqeR kCKkOKHEzBBShBRjgdNISBFSnFBiZggpQoqxwGkkpAgpTigxM4QUIcVY4DQSUoQUJ5SYGUKKkGIs cBoJKUKKE0rMDCFFSDEWOI2EFCHFCSVmhpAipBgLnEZCipDihBIzQ0gRUowFTiMhRUhxQomZIaQI KcYCp5GQIqQ4ocTMEFKEFGOB00hIEVKcUGJmCClCirHAaSSkCClOKDEzhBQhxVjgNBJShBQnlJgZ QoqQYixwGgkpQooTSswMIbVJpCrNe+gFDt3Cm+WNybqjmUqzD53tZ9BfvpyJujfS4tHqjqTPb3qj 6Ww66t2U0hE3NBSWvbOkzrobPjqrd+5Hk9F9p148Cu9aof84ayzKoOc5QgApddDM+uD0onHb6/du GxenB6vO2F/qAPv7i4Smr0otNIOPp4vV60arcV0tpuN+x/o97X8vxz4FWWjLbnOHkpnCeeWicl7I 7IfcNrHZuryz3VZBd2dvKJFKZ3PZdCoR8mLXZmgtL6MstLjdVmoMVsETCMfiiXgsHHALFoNmrTbg zIV/MmLvbq3BYnfuerw+r2fXabcYtDjZP/ny+ufg3VVpoLmz1Wbfsdus0LZZg42xZZbFrtLY3Fmn N+Ch10Ev6w2oYgNj7CqtUqnxUKm+2Cv6z/0OutixWYHHqsPzn3/5C2eK7ZpBGg/x7y/Y+suvsk7R cqP0l5dFp7/1wP8A2ybmswplbmRzdHJlYW0KZW5kb2JqCjEwMyAwIG9iagoyNjQ4CmVuZG9iago5 NCAwIG9iago8PCAvTGVuZ3RoIDk1IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2Ug L1dpZHRoIDk0MyAvSGVpZ2h0IDIyMyAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xh dGUgdHJ1ZSAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVh bQp4Ae3aWVMUaBKGUaEWqthRClxQwKUV3BXBXXFDUFRkc/7/H5miu1UcI/K234k+34UX5k3GyXgs qPDECY8AAQIECBAgQIAAAQIECPy/CAx4BAgkCvz+T0h/y8H+a3gECOQIHEXZb/PXYI9ibTSazVb/ tT0CBAIEjmpsNZuNo2CP93r0ydpotYc63W532CNAIEOg32NnqN0P9pde+x+tzXZneHRsfGLSI0Ag RWBifGykO9RqHu+1/+HabHdHJ05O92ZPewQIpAjM9k5NjY902sd77X+49mud6p2Zu7CweNEjQCBD YHHhwrnT05OjnVb/5+Hvv772P1w7o5Mzc4tXri3fuOkRIJAhcGP56uWFs72JkaH+x+vfuR59uA5P TJ+7uHTr3oPVtYceAQIBAmtrqyt3b15dPHtqrNtqfP+2qf/hOjQydXrh2p3Vx89frr/yCBAIEFhf f/ns0YNbV+dnJ4fbv+Q6Nn3u8s3Vp+tvNza3PAIEAgQ2Nzferj9ZuXHp7MljPw0PNJqd8d75q3cf r2982P78xSNAIEDg8+ftrXcvH96+Mjc9+vOX14FGqzMxM7+08uzt1ued3T2PAIEAgd3dnU+bb57c u3q+N9Zpff+uqZ9rd2J24fqDFxvbO7v7Bx4BAgEC+/u7Ox/fPbu/dKE3/muuk6cXr6++fP9pd//w m0eAQIDA4eH+1+2N5ytL8zO/53pjbX3z897Bt/94BAgECHz7drD76f2LB8tyDbiGFQiUAnIteQwJ JAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5DAkkCck26hl0IlAJy LXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEXAqWAXEseQwJJAnJNuoZd CJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBck65hFwKlgFxLHkMCSQJy TbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5D AkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEXAqWA XEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBck65h FwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKA XJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LH kECSgFyTrmEXAqWAXEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUAp INeSx5BAkoBck65hFwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr 2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAk INeka9iFQCkg15LHkECSgFyTrmEXAqWAXEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXk MSSQJCDXpGvYhUApINeSx5BAkoBck65hFwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQ Csi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXp GnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEXAqWAXEseQwJJAnJNuoZdCJQCci15DAkk Ccg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBck65hFwKlgFxLHkMCSQJyTbqGXQiUAnIt eQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5DAkkCck26hl0I lAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEXAqWAXEseQwJJAnJN uoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBck65hFwKlgFxLHkMC SQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBc Sx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEX AqWAXEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBc k65hFwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQ QJKAXJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg 15LHkECSgFyTrmEXAqWAXEseQwJJAmWu11dfvv+0u3/4zSNAIEDg8HD/6/bG85Xl+ZnxTmtw4MSf b6DR6k7OLlxffbGx/XXv4NAjQCBA4OBgb+fju2crSxd6/5PrxOz88srztx++fN3b2/cIEPjnBfb2 vn7eevP03rXzvbHjn67NzvjMhWv3nrx6//HTlx2PAIEAgS9fPn3YWH9054+56bGh5o8fhgebnbHp uSu31p693tjc+uARIBAgsLW1+e7Vswc3L509OfpLrkOjJ88sLt1de/py/fXrNx4BAv+8wOvX6y+e rN65Nj87OdxuDnz/qmmw0R6e6M1dWr59f+3ho8ceAQIBAo8ePVy9f3vp4rnp8W6r8SPX/lfDndGp 2fMXry7fuHXbI0AgQ+DWjaU/FudmJkd+/ix84sTAYLPdHTs5c/bCwsVLlz0CBDIELl1cOH+mNzXa bTe+f9PUz3Wg0Rzqjk2e6s2eOXPWI0AgQ+DM6dneyYl+rf3vhf/+1bX/XyUGBhvNdmdkbHxicsoj QCBFYHJifHS4027++M316D82DRz12mp3usPDwyMeAQIZAsPD3W6n3WoOHv9w/bPXfrDNVqvtESCQ I9BqNZv931uP/Sj81+frwODgYMMjQCBL4OiT9efvrUexHr3+33kECAQK/FXo738GrmolAv9mgd8j 9TcECBAgQIAAAQIE/pUC/wVVNczkCmVuZHN0cmVhbQplbmRvYmoKOTUgMCBvYmoKMjQ3MAplbmRv YmoKMTE0IDAgb2JqCjw8IC9MZW5ndGggMTE1IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAv SW1hZ2UgL1dpZHRoIDEzOCAvSGVpZ2h0IDQxMSAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50 ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+ CnN0cmVhbQp4Ae2d524cxxKFJXNzmo0zm3OYnc05Z1mWLduSbEu+7/8k91TPLkWq5AsYHEq4QPUP mirYqo+nz/QUDezpFy9k/V8o8PJr6zuQA+OHL9djtG8DRRx3d65H6+66rnz3WM9KRBwut8fr9dnL q5aHlhuLAAlLMV2JnoeHQNweXyAYCocjkTCtEFYwGAwEAn4/6LxeBWUTEZDicZ6GQLyBsBZLJFNq JZPJRCIRj8disaimERywFBOISCOlD9E4C/PyJYFE4nomVygWS6VisVgoFPL5XC6bzaTThp5KJROg imoREEElH/HYOM7CQBKPP5JIFyr1ltnGMk2z1Wo2G416vVatVMqlYiGfAxSYQBTViIdw3KSNgyxw icsbjBnFers3HI8nWOPxeDQaDgf9fq/X7Vhts9VsAApI+RyAwEM4Ab+CIdM4s0m0Of5wMlttD6aL 1XqDtV6vV6vVcrlYLOaz2XQCrkEfTG2z2QBQMZ/NACemhYOAcTmmiyKJpPL17nix2e0Pt7XH2u12 2+0WZKslmAhp0O9aZrMOnFxGT8YiocCVxQFZGMnxy0VsoCIkEM2m4yHhNKqlfEaPayG/102yPB0F PnH7wolsxexP5ss1tgcyYEEPkoUwrmhXIPAs5tPxoNtuVotZPR4JOIRydaxeqJndwQiOnWLNZrP5 fLFYLlfkHMJSTAoJAu12m/VyPhl2zVoxk9SCPlLFAVHoKQ7HjXy51qDH2LKsTqfb7fb6/cFwqNhm c4Jab7YKyObZ7zbL2ajXquRS0aDX5cT+kCieQDiWMrJ5dbSVy+VKpVqt1eqNRlOxdXq9ATGByObB hp2Ox/12NRtatXxKC3icEsXl9Yci0bg67nVdNwwjnc5ksrlcvlAolsqVaq0OJqvT6w9Hk9liud7u DsfT6XTYLkZWNZsIY3+c2B56FXu8fvUKxDswEtE0LRqNxmJxsCVTIEuDCkiVKoCsbn84ni7W28Pp fD7tliOzZESdEgVTkj0WXOcCPxbew3gbh+j9DK4Y6aUbGWxgqVJrtjv98Xy1O10up928V8/FQ+SU p3v2BV4eYLmflWgocbtpPMHMAjjCIqaIRhuop7P5UqXR7o2XhHJcj1rFVNjnDMkLYiGaz4tGIyya klwKSyHRBkaisYSezpUb1mi5P19O26lVNjS/24mnx1ZVwXzx5UZmQ5FOJFEQ7k4YhVpnsj6cz7t5 t5qOBmBZJ7bn6zv8CIuglEjggbvDMaPQ6M93p/N+0atlyLLPSPKQ70aleDD0+kPxdMWabI6n/aJf y8SC34zkSmUD0VPv11JFc7Q6EEk9++1JFBB524W3Zr45XO5Pu+9IQo+ayxuK5xqD5e74vUnuPMFY tt5fCMntacKgJ5rcxLh/mEWTLyTBUyyaiCZfKsD/LD4RTbgCvCI+EU24ArwiPhFNuAK8Ij4RTbgC vCI+EU24ArwiPhFNuAK8Ij4RTbgCvCI+EU24ArwiPhFNuAK8Ij4RTbgCvCI+EU24ArwiPhFNuAK8 Ij4RTbgCvCI+EU24ArwiPhFNuAK8Ij4RTbgCvCI+EU24ArwiPhFNuAK8Ij4RTbgCvCI+EU24Arwi PhFNuAK8Ij4RTbgCvCI+EU24ArwiPhFNuAK88tAn++Wg4dzHv3mv/115QHLar4bNfJI+nY9PXT/f h53/AeghyWE9Nkt6NOB1ufDhY/tjv//wnz1DmUgC0Uytt9ifj9tpp5pJIN7Czma5x/kmCoHEDZJq b7474+Pfg1YpndBCAQqKUbk1j4OGbJ2eB0yRaEalM9udL8fNtNcoIfUjGrFza4iHso/oc/RQ6Lru ee6/cWKz8Klrtz+il9qTzelyPqwmvRYSSNIqt0bl+iD76Bp9REhXKiKj9QDt6TBI5fCFk/Tx78Pl ct6vZ8OOWa+UkKNjIGlI5Qyp6KNbHpPCQhIDRTKodcseejIKojAQ85Opdqeb4+WCpA0kkPS77Vaj VkGuD4KGdIo+oqQhO4/pFhSlsqKQVQHJyN9OpC1Qzo+WKjT78+3xfD4jgQTZLHZwDfFQ0NAt+whQ SIqK20lRSO5AfoeKZkKsDbE8VRXKPgrF0mVzMN/sieV0Oh72280KPBMK9kHSUIuyj5DHRFB2UFQm g6yotGHoOrYwEvR7HEhwoYgsvx2vM10hgOTy6kdary7nE/QhIET7jIaDXq+jEpkQyURJUbVatarS ogq5dDIa8juQ4IKnB0kykWS23OyO5uv96fL6zc+/vMX65ec3P4EIEu3stCGVfwQqiopCVlSvS2lR zVopp0dDlODy1P3BkYJsKi2ZKTWswWy1P/345u1v795/+OPDh/fvfv/t17cAem1rhIifayqTCoui tKjxoIOEnWTEkQQX2h9fMJrMAmU4Wx9evXn77sOfHz99+vTx419//nHlIYVeq13Dth0pmAnJQ9i9 +bjbLBkxlfXzZM+SKMgwM/JVszdZ7S8/vX33x8dP/8H6GzT3ML+q/bJxLsra5KTVbGBWMs5kyajt IRIkMfVvJH99+hsgf38GwTYpWbBRr3AG4hEjaUAyHZjlTMyJVBtYFjlMoZieq5BnN0fszu8f/vzr I98bPFDYGhWZpXK8KKVqOuzUC7qdxPTE3VE2CUUB0uqN55vDGY799fd379+/g19Jhwd2pcAuZIiR VadTSl0bISurUcIo4cBjTE+xNxjV89V2f7rcHs6vXv/05mcsMigOFTrlKKBLJZgNB0hVQ6xax7JU El0Lp3C5QDlZDoRTqeNES+VrFnYGh+zlonygThEQqGONMt2uOXM4bOlAw3lrp/Pl8eKORxwJ7MJ7 xxdKZKvWeLk9UsQT2dBGwMHasdRRT8l76vWTpVOeDnmEAuItRK8hDDOOhJiRXQOaUTKHCFUCx2G7 XswmKrgNuXaVMvrbyX94JVMcYUy9+Ci/6priSFGAHieC3dQLMJ6tY3ykdKfdajbud8wmZgJCQPZg 0k5DxNhEA8F1GHgQbEnxiJiZnnzUvwAJJqVCa7Si8WS3HPcwKCFRz9CBYOcx2gmRGN0otvI6Iqnx TX1RoxvmyCc+wUjYwPSo6WVrusX0iBQwq17KYXiMYfCgkEp7dsRwRl3VxHg/Mz4aa5/K8YKyPjDb p6tdTNRn/MLTqRWMBHkQOZD2fP9wnL4foR9983QK+htAYv++g98ykEbWbxT0WNgOgCQE9XM/Q9uv wBMJxthaf7E/HTcTq5KOY+pRHrz9Gvh0C3ylLy/ZJCrF6HRYjcxiSsMkqH4xdsCFvN8/Vx6S7Jf4 DR35efit+Bvp8JDrAclxd/u/Ft+Bw3asZEw93BvR5LEa9p8eOfY757NJstOXOyS786Ui8hRzRUQT 0eRrCvCanCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8Qn oglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCei CVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJ V4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglX gFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeA V8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BXxCeiCVeAV8QnoglXgFfEJ6IJV4BX xCeiCVeAV8QnX9XEG4rnGoPl7rj7njcVvvwBV0uHE/nmYLk/fS8SddvsD3e49juSKuLS4MO3J7ld eIvbb+/u3B5fKJYuW5PN8bRf9GuZWNBz96w3n97a0z/pAl7cw+tyucHhx/3jeXWj83m/6NUy0YCT JA/b3n+vLgBWCDaDx+vzB4JhLY77x63x6nA+7+bdajoacDukid352vZBd9IACzJ4vF4fQYTCkWg8 aWSLtfZwgUuuz9upVTY0v9uR+3Ft7ZX0qrHqjbuh6YJq3FMNAiAQgxaNJ1J6Olso11rd0WKLS66P 6zEuDY74HCEhkLvrz60a0x3dfnQPUP9QmAiisXgiqRuZbL5YrtZbVm84xVlywSXX8349lwjRZe/8 3Pm3FcXh9am26IuFe8s16h6Lo38ypRvpTDaXL5Yq1XrTtLr90WS+3OxP58tpvxq1ywYZ1gESAvH4 4EL82OibxDXuKV03jDTao3+hWCyVq7V6o2VanV5/OJ7OFqvNbo+b4U+4CH3SqeVwjzIM+28FYP8+ tsbl8YejCZ1+7gIaF3G7fblSqaJ9vdFsmW2r0+31B6PxZDZfrNab7e5wOB5xP/1usxh16gVdC3ic 2By6eN4Xjum5YlX1Nc12u21ZHXRH+8EQANMZEJaKYb8niuPxcNht1/NJv13L69Gg14lnmCTxBnFO VZtWj/qOx5PJZIrmsznaL1cAgAo7QlAMgNjvtpvVYjrqW41yNhUNYW+ccAmue/eFEplyqzeGAVZr NMbabtGd+hOATUBC7AlivVrMJqN+x6yX80ZCCyoQJ2xy58bbLF/vjObrrd34vjXtAxZYgKAYlovZ dDzsd9uteqWYNZLRcABb49CpdiXpjhd4Im4bQEpAEOq/3UCF5XIxn03Go0Gva5nNerVUyKZTcXD4 7HvQ2YPw7wvwidsfTuaq1mC6JEtQZ/Rer1fUHv1nUxAMB/1uBwyNWrVczGfTejIejQTBAUEcUYSu mP3B5QvF08WGhQNrqhYsOx6P0H3Q7/UA0DZbhFApFfO5TFpPJWLRSBgYXtLDIQ5oSMdJIJLIFKs4 PunptSw8xqbZQvd6Hf0r5VKxkMtm0gYY4gQRUhRut83xdK9edxJzutsb1BJGtlAqq1UqlYrFQiGf z2XRnwCSSULQFEPADy2IQsnh5HiE7blz+wJhvOvpjDd0Xcdxj1M/kYjHY+ivRUAAGYAABoJQFNgV JzFIF4Xi9au3vkZ90RkrhO5B6g8An1chKAZIoSCcxrihuNyYxmgUUI2pNRbNJxhTAAAVaDeeEcL2 ClTB+5hGs2tfe16i7lgK4CqD4xtiA3z+SltuN3z8ler36/O//rzf3Td8/M3zNpW//f9Dgf8CEe// BQplbmRzdHJlYW0KZW5kb2JqCjExNSAwIG9iagozODY5CmVuZG9iagoxMjAgMCBvYmoKPDwgL0xl bmd0aCAxMjEgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggOTQ0IC9I ZWlnaHQgMjE3IC9Db2xvclNwYWNlCi9EZXZpY2VHcmF5IC9JbnRlcnBvbGF0ZSB0cnVlIC9CaXRz UGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB7dlZUxRoEoZR qI2qYhcRREVBERVR3G03xB0VRRFw/v8fmUK71XaWnKuJ9+J8l2aEkXEyHgvKoSGPAAECBAgQIECA AIHvAsMeAQJZAv/hH6fvSzY8AgRiBP78p+Nfmh38+WDHpkeAQJZAozGI87dgj2ptttrtzuCNeAQI BAgc1dhpt1rN34sd5NpsdUa6vf6oR4BAjEC/3+sOkh18xv7yCXuUa3ukNzo+OTV9zCNAIEVgempi vN/tHH3E/gz2W679ienjJ+YXTnkECIQILJycn52ZHOt1WoMfiX8EO9xojfQnZuZOn10+v7Jy0SNA IEBgZeXC+aXFhdnpsW77lw/Yo4/X7vjMycULl65eu75xwyNAIEBgY+P6+pWLS6dnp0ZHfn7ADn57 bXX6U3OLK1dv3Ln/4KFHgECEwIM/7t2+fnl54fj44AP2rx+Ij3rtjs2cOr92648nW89fvPQIEAgQ ePH82eaju9dXz85N9ju/9Dr4cXhidnF14/7mizdv3733CBAIEHj3dvvVs0d31pZPTo+O/PgFdni4 2e5Nzp27cuvRi+2d3d1PHgECAQK7ux/fvd7649qFU8fGjn6B/f4F8aDXTm9yfunqnc3X73f3vux7 BAgECHzZ+/zh7YuHNy6emRnr/q3X/tT88vq9p28+fN4/OPQIEAgQONj/svv+5eObq2cGXzj91uvJ 89fubW1/3Ds4/OoRIBAgcHiw/2nn1eOblxb/ba/3n73d/XL49R8eAQIBAl8PDz5/eP3kll4DjmEF AoWAXgsgYwJBAnoNOoZVCBQCei2AjAkECeg16BhWIVAI6LUAMiYQJKDXoGNYhUAhoNcCyJhAkIBe g45hFQKFgF4LIGMCQQJ6DTqGVQgUAnotgIwJBAnoNegYViFQCOi1ADImECSg16BjWIVAIaDXAsiY QJCAXoOOYRUChYBeCyBjAkECeg06hlUIFAJ6LYCMCQQJ6DXoGFYhUAjotQAyJhAkoNegY1iFQCGg 1wLImECQgF6DjmEVAoWAXgsgYwJBAnoNOoZVCBQCei2AjAkECeg16BhWIVAI6LUAMiYQJKDXoGNY hUAhoNcCyJhAkIBeg45hFQKFgF4LIGMCQQJ6DTqGVQgUAnotgIwJBAnoNegYViFQCOi1ADImECSg 16BjWIVAIaDXAsiYQJCAXoOOYRUChYBeCyBjAkECeg06hlUIFAJ6LYCMCQQJ6DXoGFYhUAjotQAy JhAkoNegY1iFQCGg1wLImECQgF6DjmEVAoWAXgsgYwJBAnoNOoZVCBQCei2AjAkECeg16BhWIVAI 6LUAMiYQJKDXoGNYhUAhoNcCyJhAkIBeg45hFQKFgF4LIGMCQQJ6DTqGVQgUAnotgIwJBAnoNegY ViFQCOi1ADImECSg16BjWIVAIaDXAsiYQJCAXoOOYRUChYBeCyBjAkECeg06hlUIFAJ6LYCMCQQJ 6DXoGFYhUAjotQAyJhAkoNegY1iFQCGg1wLImECQgF6DjmEVAoWAXgsgYwJBAnoNOoZVCBQCei2A jAkECeg16BhWIVAI6LUAMiYQJKDXoGNYhUAhoNcCyJhAkIBeg45hFQKFgF4LIGMCQQJ6DTqGVQgU AnotgIwJBAnoNegYViFQCOi1ADImECSg16BjWIVAIaDXAsiYQJCAXoOOYRUChYBeCyBjAkECeg06 hlUIFAJ6LYCMCQQJ6DXoGFYhUAjotQAyJhAkoNegY1iFQCGg1wLImECQgF6DjmEVAoWAXgsgYwJB AnoNOoZVCBQCei2AjAkECeg16BhWIVAI6LUAMiYQJKDXoGNYhUAhoNcCyJhAkIBeg45hFQKFgF4L IGMCQQJ6DTqGVQgUAnotgIwJBAnoNegYViFQCOi1ADImECSg16BjWIVAIaDXAsiYQJCAXoOOYRUC hYBeCyBjAkECeg06hlUIFAJ6LYCMCQQJ6DXoGFYhUAjotQAyJhAkoNegY1iFQCGg1wLImECQgF6D jmEVAoWAXgsgYwJBAnoNOoZVCBQCei2AjAkECeg16BhWIVAI6LUAMiYQJKDXoGNYhUAhoNcCyJhA kIBeg45hFQKFgF4LIGMCQQJ6DTqGVQgUAnotgIwJBAnoNegYViFQCOi1ADImECSg16BjWIVAIaDX AsiYQJCAXoOOYRUChYBeCyBjAkECeg06hlUIFAJ6LYCMCQQJ6DXoGFYhUAjotQAyJhAkoNegY1iF QCGg1wLImECQgF6DjmEVAoWAXgsgYwJBAnoNOoZVCBQCei2AjAkECeg16BhWIVAI6LUAMiYQJKDX oGNYhUAhoNcCyJhAkIBeg45hFQKFgF4LIGMCQQJ6DTqGVQgUAnotgIwJBAnoNegYViFQCOi1ADIm ECSg16BjWIVAIaDXAsiYQJCAXoOOYRUChYBeCyBjAkECeg06hlUIFAJ6LYCMCQQJ6DXoGFYhUAjo tQAyJhAkoNegY1iFQCGg1wLImECQgF6DjmEVAoWAXgsgYwJBAnoNOoZVCBQCei2AjAkECeg16BhW IVAI6LUAMiYQJKDXoGNYhUAhoNcCyJhAkIBeg45hFQKFgF4LIGMCQQJ6DTqGVQgUAnotgIwJBAno NegYViFQCOi1ADImECSg16BjWIVAIfC/9HrwtfhLjAkQ+L8I/Ndel9fvbW1/3Ds4/OoRIBAgcHiw /2nn1eObq4vHx7utxvDQtzc83Oz0J+eXr959+mbn05f9A48AgQCB/S97H9+9fHRj9czMb732JueW 1m4/efnu4+c9jwCBCIHPn3a2nz3YWDk9Mzby6+druzdx4uzlmw+fvX638+GjR4BAgMCHnffbLzfv rZ9fODb6a6+Ndnf8+OmVa3cfb718/WbbI0AgQODN61fPnz64dWVpfmq00/z5+2ujNTJ27OTSpY27 Dx5vPt3yCBAIEHi6+eTh/VvrK2dmJ3qd5vCf3zcNDTeOvnCaPb18af3G7Tt373kECAQI3L1z5+bG 2sWz88fGuu3Gj16Hhpvt7tj0iVPnLqxeXlu76hEgECCwtnbl0sXziydnJvqdH183Df5PZ7jR6vTG p4/Pn1o8e27JI0AgQuDcucUzC3Mzk6Mj7Z8/Dg8NDX8Ldmxiemb2xJxHgECIwInZ48emxvvd9uDb pr9+ff32Adtsdbq90fGJiUmPAIEUgYnxsX5v8On6t1yPPmAbzXZnpNvteQQIxAh0uyOdduu3XI9+ Ih58SdxstdoeAQJBAq1Ws9n4+en6T8W+vocKZW5kc3RyZWFtCmVuZG9iagoxMjEgMCBvYmoKMjQz MQplbmRvYmoKODggMCBvYmoKPDwgL0xlbmd0aCA4OSAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5 cGUgL0ltYWdlIC9XaWR0aCA0ODcgL0hlaWdodCAxMDQgL0NvbG9yU3BhY2UKL0RldmljZUdyYXkg L0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29k ZSA+PgpzdHJlYW0KeAHtnIdyHMeuhi1LDLvcnHPOeUmKlOxzfN//re73o3tm85KUrapje6bKMjmh gUZq4G80f/kluiIJRBKIJBBJIJJAJIFIApEEIglEEogkEEkgkkAkgUgCkQQiCUQSiCQQSSCSQCSB SAKRBCIJRBKIJBBJIJJAJIFIApEEIglEEogkEEkgkkAkgUgCkQQiCUQSiCQQSSCSQCSBSAKRBCIJ RBL4SyTw6S8ZJRrkf1gCn4Lrf5jHiLUzEvB6O/Pk9Bbv/uquTz/HpY2ZU7rvufMnPr0+/EcEdH2k k6c/jedDSkbG9PYuglLy5y+6Pv/6E/Ts5cn/Drl8x29/4tOro9u47xfQ1bGOH/4sns/QQW3B9Sua e0O+n1Dyze3d3d3tzU/QsxkR3LyDkdOZuIn8wKfHQ+3/jkA+JqD9j9/6ORj7L+b5mKzm8Bm13dzq urn5goCvK1pavr2PPzzEY3c3X/5qfxY7X2DHM3LM7rXf/8SnV4b9uICuDHby6OfwfJ4MrhmLSW/x 2L256DXdwdiX29hDKp1JJx/u5c8ng/6JG5o27Nzfw8g71gR0oMsIfvDTdzJpeviQgN458E/k+YQD J5r7eAKt6UolH+Si13T36dPnm/tEOlcsFnKp+B3ufDLqj98wfu5iD4lEIn5ver42FgoOFsxffvnY p9eG3X/2AwLa//yNn38OzydEIaP4m0znCsUyV6mYz6QekO9ld9Ynd/F0oVyrV0u5ZOyvdWdsiNGT 6WwWPmLX+GAuEhIB3i/jMr/DT0+m+/EbPyCgjxD50HQ/MvDBuzaJWCKdL1XrzRZXE9Xl007PB2/u ftE394lcudHutGrFzINUsXv6Z3+yBSGRyRdLxVz64e7m85V00PJ9pRQWffxc3vfpe9n8EQG9d2y9 95HpfmTcw3c9lWK12en1B8PBoN9tNyro+Yp8Ee5NLFWotfuDfquSS9x9+fzXqVliJVTky9VapZhN xm6vrB569+YuZvkEIYXr3Z8eSuHKbz8ioCvDnTz6wHRPvn33DbfKZkv1dn80nkynk8l42O80yoRi yfe89pQixdOlZm88GXVrhSRJ2IU3CaoXhrjIoQa/e8gUq/VGrZxPxa9EbXM01ptUOsUyrrxcKQOf Nhp1+3TfQpSmneflIit68IaAdt/+2PA2/sF093n+5TzDHyclW0Km9c5wMpvPZzP0PBp0m1Xkq8zK Xbu5SG1cv36+jWfK7cF0Nuk3imm3gNqTk1ft7r58/Q33v+D1vZuUp6GuKoGa9577H/lSfNzcP5BU FPJZ0okbwJrbWCJbrDWadfs0MNTDzwOiNsTho31G3WtXBBSuVYdj7IY/vO9/2z129I+n63k++Hb3 zcHt80awezn8SbYaS+VrndFssVzMp5PxaDTod1BzGjU7eEIj+w88EbKe24dspTOaL2aDVilDgJcn ETMPXuV3A1z27/PC4e1PgeVw2y4yqtv7h0yhUq/XSuTxyrUZN3waEpKWsVHCe62O3yuduL0lAcu6 QJBL+Xi0R/KQR5uNH9c45efdBNyULwvI+4GsLZzSvgiORg/o6Pa+NFlnMNVwuqc87zN1gVSozks/ OFsttwaz5Wo5nwz7vW63027Wy1YnSaImVceaEXH3EG+22h0vlvNRu0KAvwdUwZmcXUDMvWoQh92X iTqFMqC/LdMwuQZSEnTKMCqZUV6pUi0XtDbLgtzlnweEkNBtPJWvNDvdTlPpROz+nmI+V6zUtKwn rKDfcWLIjxEVLxYMAmAr5MjNYE9a1wRky8lufLEeiIC7x7PS7JwzeD27LwUmKiLZdDMJq1r05FBM Gk8XDB/xGtjMHs+nPzKL+2S+1pss1+vFZNBtNeq1WrVSykOQ7JVLvHttGBGby83NXcLUvFqMWZzB SOKxmGAVXvX8sEwK4dBtd98ewGVw21AYDe1YlyfeCRLRhbKyhZJl2hiQMcFzXrABHX6DBeIH5Put PilCnwCUSSYeEiny7IpmgHcbDqvh4QTsh0wtIOpkZiLzA8Po7uFOUFcEdG/JiynExg9GwHhNIxp9 f1ZM7y4sCcwRPH2sejdd8SyWj8XkhvRTOSC1Y/bSTy4kFRuD+Xqzno+6jUqJdS6fz6YTcaAwcyy0 JEVDxsmL3+EW+Va7GMdy2seRspl0OmWwile0XkVZiWSK2wkPtzjugUi5q9eFfsi7NCVp4YH3k8lE 4iHutFUsaMU1NTgt6TkDipDTPmlFqdGfLFeLab9VLcJHNpcvlqvVStGFI7MhRmfAtC4javPxT+6l fei5cRPH2O0VAQEheY3YTJmSE4EhOhr9YFY2L2HDMO7MAHFKldJY7CGZyRc03bgGxZPx8EMxeXc4 QypcAy4pWXHLUubWaLHZrmYorJCFV6cYtGyDOiwKvk11cbApMRtL5qq9ycoZR7WM5xWVBykGiE+V OThWLl9QepROGpxlq65wD6Zkr2NMzFrieEim05ksOsrnc7CQ1Eu8gppjuLBmLCVlwi8hhK3dEbJr 3cnq8elxPR20G/BRLldq9bpQGyeykJNCscRVzOdCZkjooauBZRzGUi4Ddruf2l8TEFi+adPNVN+D CWbEmbPd/VnhOzngnoxKAjMPOY3oY7gJzFsxKFDzOTEFQwJVZoCx9kjJZi4r2D1hFpYyj5fb7Xra b5RQlOKvUG1pOcCiFJ+kZWCULGrAm+IK9dP1FusYdlvNZpMapqa1lFkQ6lluiEOUvuRR1XLRvJIY hkRASFFEg9e19Ho1YszFUrlSqdqKUUAeaLlcBo/Dv2TrmlqJN6iyPCG+jMUT2XJruHh8/fb6vJ4N ex0YabXbnQ4aL2SUeiuoOE7qDcCfZqOucG6agJu4ORHaF6PGkj0MM2jzg4sC0oKzG39/TrJdN3ow K80LgBEzkyjkCdIy9BEnukd3vCk0CCM7KyZzh1CoO/Exx7f1HKp5tX1c480l1CQd27IsNlBVWcsc Fuhq0nypXEI7iQR+1Jttnp7R83jQ19XrtqxahSMlFSTAzXan2+20GuZbRF/MhjS40er0erzdbiqT ThAyU7kSd6Uf8r9WvVLM5wsl5VF6jqnnlDtjSi3G64lQG0LpZCKZxpmnm5ff//P7t+c1GSSMDAbD 0ZCSUImhBSRxUockT8B+eu1mFdBFS5JPyhm21Wpr3H6PEqOYcanbkR+cCshUJStyM+32uEgFxRlm dOdG97NCCm15gmzbSRMDIRbliuVKuYCfk09Y2pgkFPhq4VBMll4CDUqoB6QsAXHMXvxXMSmWLrVG y+3jZjFqU0cpGiphJNqFSIMkJhdVWltvNshiU8l0odafbb++oGfqMC6KsWGPdRo3Y1VOKwEGVRuS vIOqFUjpWAZTuXK93RuOxuOxdNEyPaPGUr3Td3dHgx56LrG+NlrYhyjpcbsnJUmFYDgi1KqyvqSz rMzzp2///eOP318fxceYx9T/01G3XsQ17ggfoCWt7oDvAH9UMBr4k4rf65ENPBzCpsOGxoNO3erD AO65IiAcEo9ERgUAxP5gZNewD+bAZOOKNOGsNNl+lwsDBWGk0lOYYd1DaVT45EOlik23IJ5xBpvx vpiIAaxc+MgJKcWGt8K2zSKlFGzz+LiybAo9445S8y0FNRLqdiSxO8USYmSjI5MvZFKZQr0/f3wh XG5Xi9kM2S4WszHYZx4HBSKvNHsjlM8MVYbjQPCJlhvdIYqYmcDlc4yUyhRd3U7hPptKDdUyWsbl O8gkkwbuMPBGH6Eq6Cxmk0G7Vszl8uXmYPH0/Y//++M/r0/rBeAOSqZoYCVxdZ60DCY7hqSuOQjQ dNRrUi/CDpbaGU7tHhYw08DOPgx5M9+4IiDTMmW7MN8hRuQuzEgwP4mkRhcawaywP8SA0Y9GeEKZ Uo84Q7EsK0Px1RJabmu6ZUVTtHxOTMkUgjgmVS0I33hzR0H1QiLHKrt6fNwsJ0rCLAtREQOwXEIr w0G7kk3caalmPW4PRrL4bBrkrL94ev3+/eVR8pV4V6sFI5RJctK5MkjoFJmOsW8sGK8kzuN8vZHJ VTCMWX6RkaiJhvP1IxzgkKNem8hWEfhqlHLZvMr61WazXipseELTAZl1oVDGmx/x5v/+/vK4nDEq RFeb7WY17dULqBJhV9sDA/jct4BAs3HPkpBkttQMBg4msJwR0nKE7UByFwVE2YQnxFMaf2xxwiIJ M+635QYSAQWMzWqBGLSejLBS4oxUo/QROxig91atUqm1iHEDPkwncFrEfiymXCaTKyH9E1J5bRC+ 6c4OtkTMuPOGytlWPQvcrDokOAPAz24tD2x9g3cXGygPly3nMtliHUf69htqXjKLoeS7Rs+IUA/N kvE68iLb8sK+k1hGF/sGbEP5wmEIz0q3CtXOZPX09evzFimj5UoZ65bXjzH9fI6xxqvH5yeyAJxi iACsyMcki8VyXWvzb6zNTysCAWv+cLJAtpv5oIlPJVllmMKcMDEeEfNHk9kCGGhMSCfk5yvBwHMZ yETjUiCC3sZvA8mRECsHOxWQ0juV7Rp/NhdnLCkIgR8V0rLZ/VmNB71Op9OX7hRnslrBCI1NwswY kVeJXTbdenEX3A7ERIWAHMxgD0k1y2CQb7qzBSWcFEBrs91uJGZbMFXHxCiNCTuwjWOQQN2xijcH 0/l0yBru1fz6ndxHOW6nizTRM6hYrZgvVJr9KQKV1gjBReoMaiREPpwRxOSx5LyUPZS3mXSmQDK3 /fr6QhZFQK2VzUt7o9l8MmiRjpXqvenmGSMQftNpdwdjHHa9GBFUiqVqe7gkprw+s+R0SHKancHE Eo0htmiLdw/1QbLfIdPq9Mcz4D5EzdKOLfqBl5MBVsezFSDRuFPJ7iR3UUD3JJqEbAzfj9/tdHqD MVF6rmiRF9u7WbWZbgPWYGVicQYACKmP2BRAzZUq7st0FQozGVnmgZhIRQvAAdVW/5SUc8Eg9lxO wmzrTswuqI424AxDWzGVRIiRMQvhoFFgd4IwkylJT/NRp4q1Kmg/vrx+3c6HnUatWoeJxZpoKS+T 9JHZcsojKhhKsIQ5M1Ske9KUstV+PGFp1iq/ZaTHhQAaak/iU703BjBHHUUF5tn2+euTSmMM/4AQ D52qNoDrNSqWMiY/W2+VT7Kuy6VG86XMDfOhpGYpwRiXijlSRH+G/djAqKHVG+kZ4Z7gFToIUZvV 60RASmEMPGB8Fqsp+WSz2WZJ8lZEEqn1JJhVFYskQo1Q3wwDJFNJZkpN1DYfg9+Vq+KL6SoMaO5H YiIXJw1BJIsTUoNmSbHnLT3LWu9JClk0taht8UdLb7SWpgsiCPWmNqGk5nIbRkHLavIFKefr18fl qFMrFWRsWujW82EbgZLbmMiGnTrVMVp+YMkh9M3gE2Mvk1npEhAjMhrp5Wk16dZLrOzJJJpnTkhE Qzs148yMjHL2CIF7Fattiv6nLVyQ52EgRUxzubayARfg2wnL8YQSAJazFmWWzDGwn/nm2Q2M2ZE0 YqirGeE+tVvvLgqInJL8roFRbchqBqxNhJLhVAsKiwLrDkvzYzCrvJAAgjT6M3iYtTtfRZgLbB5H qMjNXJAhEp6ICUllFQrBKk9IHcSei95M8wI1lSX/Q8Is2cta7iZxK8sC7F7OD9Q8d3yamqmbcYUe C518stoZ487LMXxXaubNK5sEy2BSQE/eXiAJphOB7EjwZoyL6IVXbZ+fN3Mr3IE9FNCkZuKGV/Pm iUJAK2pISNFVy4MlOhuK/obltykZExZGTHdGgGVJfuxsyKLylfZovlNEf66BsS4WD2xAX2ICrRJW HSzOVwREpsnqLiNbyZsbjVYXahuLaHhoazAPZ6XyH8XK9QUPl3FPOe2cMNDG04lJqNkWvEJJIVS1 wk5M+AgrGwnM4wmpSZeM8e3FGbxTTZpWXbIcLonc27VWl7LCR6M/vaLmHtFxuxgpBsWxbBZuzI0c t1mtaB1RhLGVx+AUCm3WWIHgrE1pQE5/3cWEp83IAJesilToJKFUlJrrnpoVhi3Y7QgtJ11qqrx4 VBju1oA3sZB0gRi/lJqxkFKdYSRY1YSkPVpL7XUSrUqZBMLiuwZO2aLCdFeE+3JmLw5eExARTWEf Cx33O8A7fZYEAYMDE4GVqW5WcSI8BRSZ/ZL0BfssKChNF3OWj3JB67ipGZ4V7I/EBPDNtFjqz5Ca 9mr5xG6JueLO0rNhORQxym6UcivsUK6QSF1Ws8owuREJGrMA/USNq41B4xREHVZxJbUDVmdQvBRQ hsoXS3FUsWhPThiMslWDTUmOleOClbp9kX01HxES5bVqJkpnizhEGOWvgkMMhHWyLBUrEpnCj4ok gXN+wwVFtLQi9nE+sgnVXjHKVW2t8nansq9m5winAkI9Rfx/+fTy+kKoCdN84ir+qtEtSQhmRaHi Ul2rOikZtVITs1G5m4Sz6nLJFr8DMam2TRUaA6VCx6Qw7/x7vFm4rRqqwFcLKmOmS9Mz5LW8vKFm nNOihoBM7UxOlqh5oErHzUJAhgpDyqKci4m4mTmLwf7ASGB+UjObIKhNhon+6REKNrMtaLsocEQI NYPBS0JdOQJqprIQGwQCAolcBpHJspx/CuBRo0y5rZCoDKKCmuU3NnCMwkKNEizkLtXey2ouCIjC T6Xe8zfy/M2cphsVVAurNro8k/B2swIqFnGWBSWEnUa9QXUEbjJQcp0tiGcFrzrAUNstOjsxGVJV bA7PksK8d3XBZWc2NQtHBxe30my62rLho8SVon2AM1xam4GT8VcnFJB6tZOQ/Miby2DSMhkHS8ih lWlSSi/WpGha+nabca5BQVuaNhIwILM6VfNZQqZmL6FWmYzT2MDaQjW7bGYESXWhAGcI2T1QszeC ewKaMkxVPN3qoeRQ8zkBteu1Rney/vqdonJDyQawS11OZQywYOutGZGflUagS7Ju0YWETQF+trAK 3krKnZpJa8gt9sVknxabo9UZUpQMB6HnsqK1kwyiY9tHoJuEGlZ6ZVK1Ot1eUjN9QHH2A02RCyWS lmkjXwVES/Uk30ygZgNIKADAeMCshDCDUwMBKLU44B/CavOxMLBbE1lDzqh5j5C3J+/NfhU/VTPZ btWnYy6porXpVM1LF14ES2ECONs5NZ8XULPRpJpD9gCtcxAfLuGZZGNkfwW/ER6s9L9SmAmIUK5A MQMkNlURAybL/oBVrt6ba5YknlPz+iuB44iUbdG8DYPJmTUJNTKw/Qk2aLkj+7f9Vt2pWUkWu3oG l1gnAeuBgQuhN7PuARUgfZzSYEbQENpeamSewE6CF/vgIS2SZ5Jc51q2tW50fR+K8syyuflZNTtn PybEska8s1VcQfu8N4frhLxZHuvyWBe0CZUKL6QEF9V8UUDtZqs/Rfbfvm6pqLS5Zpug2mIjk/Zl ip+VLNqMzPAEobYSDA2TJfBBihA3CQVt580HYiJHTsmbn19PSWnDKyzyL/qy5qBUiAuP1KYN+TJ1 kuCGBuuHZTAGz5GjKOaw3Ex6Ts2WCPELsKrLfQIjsOIFpL0C8DMW1q1EtNV2alay5DY2ja5SMDfJ IJqfqlnJsS3dASFL2aFcpBSWmi0Fc2uzxYYwaIdZX1a7z9p8IeQIonEpmOW319V8RUCdZouk4unl 5Yk1jrq5Vq1W+Q/gzuo+lz37WWmYm3skCOuC5xcLbQEQF9nRe3DJn/NmRSDLVHdiUuaUZm0m2zsh pS1qrYAXFeweSMvWsuR6cSxxnwoURhAAQ1pKVKyIGZkAFfo2ULMl1kyQglW1rmoVIV/jTlVlMX0O bFYTD4AcWLBH4KF9vJnyXqOxrWoXVMPq6aKaGXdNlXeGEEHFynWyV6gmybRdLu3U7DJtA7Yg6bYL KN601FDHBKDEG958QUDyA7aQu6PlIwALS5yAPVpluNR3AbYkSj5WGNgiOM3lL+S4lK1AjpBmuyru c3ypucZmlZnmvpjUXSMgZkEZfkTqHcePpGcmga1YQ1SMulK4DtpDzS5ogwspDFtbCX0sJDfaXicl NhSMuvkRskCfabafch55sFZP1EzfD4gDZYMh0GQdHQPalIm77gXXBnXvMVUXPJWbnXgzanZlNYQM GtfqpbW8IgTYLXe+Ghf+GGbaVjdrApAUvqgdW9AUX7qGoMRVb74sIB/uBBFtLEdWewCXGoEg5ZDi cFZ4szp12BVgl4htmq/PynO1TYKLBPFMajaoxPEcism2minR12dI4TBvOrNMlYiQUEMUmwtJVCk5 gHpgTY0wa4K8GjqA1GHxebNTs4vu6vkDygPJCUQq0CdJqZxn70zAEFWLkkuWAEOgCLaCNLloLJPd 28p02Zs9nESlhnntEaKnCSDKFtv5wJBiJ17LtIHDBYViEUoaKbFVu1N+sYos2casFAFPQn+7tDZf E1BPAmLOwpNUCqFmzpOC4ibPqVkeRdQGXADleP327dXAXUKQbVYFzdBA+NqQUw5DQPdiUjehFY7s yRyTUjflO9SsXhXXaqWuNHpVLB+GcQdNW3KPVNhFEe6v/cJ9NbOjAFYI7KU+APkt+jTsE6ezJkv2 jfEe9pMmJGFub0Bb/nXavHSpvQ+YFDWrsR8UPvRm1+svFBtM24CBZwLMASHrHDakPNBkVvtgqkHn hm8K01bxKuQQNSBBFhEgXduJLLHDKZ07ul7NmDhFTmdXUOGCVwWkIpemWHD6ZhVgP8fFOU7XQoHq drNi8Qyi9mT9/O233397fVr63BbIIZhuFZ61QWU8h2JiXFnsOVJqa3tbzTiz2lw4t6DePBrfmgJI sCUD4RwMpt8GbON1SKG2zy+o2TJtbR9u1CTEHFml2J0BYwSW0KY6eHiuQJcl20naldFt1We2iQXc SduI5SsVbVES2rU5PUeJtmVgQZvibMgtAF92qNQhwl7jE20P7VZAyG/0JEgJtGUi4wFPsl4TiRd/ ZX9EQ9uWFPturTqz014gPSI4s3aEd3RNzWSzfVohRqBgQfaqaHdWQDJnQykJROxS0/fYrLFPbs2j huGnbBc3nJXUTNRWxkwq9e33//z2+ki2USBLcUWKTdfYkvVpzFBMNKxiora9cULKNRC+kYExC2tJ oiWu22XDlMY3yrkVKLAXhMB2MiiKf2E8M3b3v7KRxGqsZgCwAZz7kZ4/akaeWvuItRUoXFc5yUQr nfZYA3xPvqSXGI3uuDanO7ThTBbF/SmGxba2W5u1kT/gFhv0puYl9v/9hZXE9u6N0FjQOBCldjlY LBQv2Cm33feOtnGVTxDrtNtn23ciqaYD3JXt0Zr6O9jHCOjSHYgKCsTg6ZS8CMTBFSnXBcSGmMKF VcLDHiZIT581rPpcRVPws5IiFLUTAvC3r7/9/v0Fd3EYrLb+3HQdz9j1gZgAHdAzm7uDM6TUpvdW om2z0PGUrup6Ljrm5tRzciN1aWmDEimh5xmtTvSHbAV4Iwf2r2xR3D49ba0HS99JgTIPdcjQwGlt mGqoAKBX6xaIgUe6Gc264Drq7WS1BRccjZG99nlJwawNkZ3R8bArXF9BGzUT5aAkLowQWFvQhOFW FrUksBwrug3GE9NkUltS2iGgl8E6iHb9gFm6WUDZRUR0kZVhzp0hzVyN3RbuNQH5fNC6Uxh+RNso rkK/KmGEWphsLxidWTk1W+HeGq2eXr+9PC6GtldMWw6ZmU2XFIiOF/U12YZAICZaIxGD5TlM/ogU FcR71HxDboqaaVqjoYnOOHXASSu0Jz4Af3opLXVYckpFrxqYfEYmYFvtmAAiVDcdDXNSJ+YBp8Cm ra4wIXVaTon5SifULaAeO73JTcFFLs6qBbJvvXCwbGpOqpGuT/8meiuhZnUjvT5tlnAXElK5bi1V Lq0SccVRpRf9ARvMKuvUeCfwGIqQFJ/TyZBtVu2pUTwaEevBo6hmiUQz/T5zD/8AA2q+KKA0rRfC k7AqpEYTGO1t7nQ4ItCGVzh6oAjt7dvWinYUSXKt64yO2ZifrueZaudATNbQE/SCHZGyI41verM1 FTCsTjeblvnHtcdaewQhkS1FNwuaY2lqsy5dGiPVqF0hp5JxyNElQnW7YR5sLtPf7VtN9dGw39ZO sfX8gYC6Nkv1g1nnprC+Mv3M9IsCPJNOKOvRBji3iMLASdaG8Y0+lRXmYaqifdJ6Gqm9pRw1EtJM BxnSXdy5wXqghuuYdv/QQx+sWfzBqjEjLd9Te2Vp4HZ0yWOEQcA1feIl9ro8fggzUDgvIDVSsXFV qNKuhzUjGrWxuh5yc5Fw9KC7w5IwOw5EhGPVUdMZGL7mYNP1PEOPZsATMamz84QUu69vB21lf7fW PU0rswvbYpTNZsAV11VPw4U9wlCJSUSllv0tA+CPNFWxtYYLylVvqjp1aU2UcOmtrvkWeNfkboIl p6fTuNsXpeHA9W+r44AyTuCRSRc1CxZMsbjbkT1rIaXrgFxPrZu4jBGqsDCzZ6nNG/W7dmi2V+cv Sz0NJGFru3asYJPmZkiat1nHPecs/dEcERFdpK39T4C7Kg3zTnSW11wXkJ07kBhY9bncn3qwbmX+ KBPWuzcr1mbrUDCzJNz01R8rc3INojZd/XEGbbdr9/9ETKAo2kM8IqUjjW9m2kaYzUwkg13riATn U8iLdAJEM6eZWArj9ASALdkxZ0TUwOeOmLLwcVqzxqkSO9HSbjVwPvWTC7Uh+anaffISBAc3EmyM b+wwBn2OvK77nPLAYjjDxILmT84TKO8eUpyXUhOZKiThMETsKSYIhxDSMQ53RsXp2WgZ43xA8c/B LY1GGzIbT8xAZzo0O/s0OO2pRyJidCVtlZb8ztC7IkVR+4KAtGXuJIT0mgZnSwbU9vCmjsn9WaFk LhkNQUSHSOpYg6lIi5SfruOZZPCMmDQiUzkmJZmFjS6OyJl/fflP5cwxD51gInmnd8uqMUuGbOo6 3kS1wDqpupCWH3k6VHUECNjEDgrxAkeeoKpDQE6C9pndNqsBNtfxmgzncwB/jVDKa19nJOniN+kK /ZX0dItDk9YwxOYoWmZDU3VYQEj1Ilr4IuvXEST3J5BYc4X22GimB8MF/Ozcp2bC2u90RBxdkzZA EUQFfwcHk64JiDTCjAB9cmxCcyL+0LHIiqBNFJ3DC2flZK+pSYn8fYVCDikr3u5NV5zYRuyxmFgf SB6Q3impnUWeUW94y01DHKGyHGrkD7rpnGJw1NW4BeowEE+olY7SSZXojL/tAtiF+9hzUD6O0EFV OxKkRgibI446CWa3LYXGbiEl5ETmgiqQh6yCkXR2yxSHzUvPdst3T2pLxApjOlr8iHwoLYt9U5f+ pJkNyOklYbduNNODpKPZMbmQGdOQJ+Lpmt/ap0wv0LIx47g+KyBH3o1/QMDLZ29WJvLg/aSdwHVa 3k3XOIE1MXYkJrTvjsPaVPZJSQyhOi/+YIIyWFt/b81rERGaDMUVzzh5zAXLOttM8MXksGPteNi5 c7Ttn8sY+dKeITGNqM/stteJG84/2BspOOAtRm0b3/1lSS2YQq1p6uipD5FEbm9EpwWxKB6ghBex 06ZtGHESkOQAr/FCYrTPDK6oV4M3Hdu6oTmEArsioIB8OD4EOJyltMrLJxh9N5qTzT18QFgcyqr3 ONGtUOoHYnJDBlMJSfFBOPqVH4yKZIMGd0oUfc3Cz909QIa6NAn7yu9fSt3hl3ziv/IjupmKe933 1mHvI9+9kdzPjlGRZXDbBGdXhzLSTivYMTzsDD5Mh3pZg2JxTrUaUVfAo2ToH+Pk2OiOGffk6E1H NRw7ZMZRENMHQwTkZfEaPyBwYVY2nPEDv4gy8EPjccfJWTFxU/eZ2iEpacKx+da/+hzxQ8fp0JgM vtUzk5skxxO7jKT7zL5039pzR9Se+RH9bTfg3nBex26sYNiA12BwIrIgov6EgzbswCsp2KnQv+zZ /+wYDL6UXdkLdmM3OygFgglePXjTngezdxTce7shDgRk5hJKL2SOb4wvUTs72gGdo3ftVy/1QExi xd93igpJOSbf8y/fS9V26ec9xvTb/hP97p67n/Tv3vOA2t5tTXQ34N6D8L5+0BV8zP/dDUyMDqoi bWWcI9M2tXIGk9z+u/ayeHAfBf+Go+mGZ/GUFz08ePPgRvBEN/eH2H3ieQ0e7jGnb3QFY4T/d7cP ngS3Dt7xY+pZcF8/nyEVPH77/xrAXSfvBg9CYkdvXHge3j7+LnxwNM7pr0xJuBFFpJ0K1Z8TPFRU +IkfM/z96IeQ5DEvR+9d+fXqELuHO5VcGetdj8IxD98Ob/PD4ZO/7W+YrppuwbUoioVaoOW/7WQi xi9KgKRDeIL9aQz9MZFIzRdF9Xd+YO6sP3RDme3QhL/zbCLeL0gANRs4kfCYzT9mObow33/rbdOz oTBCHci//q2C+IfPW3oGDxUiEmn5H6xr9CyA5hCT+AfP9986NSsUL5TL/1aZ/CPn7RCBf+TUoklF EogkEEkgkkAkgUgCkQQiCUQSiCQQSSCSQCSBSAKRBCIJRBKIJBBJIJJAJIFIApEEIglEEogkEEng byKB/wcbGRFOCmVuZHN0cmVhbQplbmRvYmoKODkgMCBvYmoKOTM0NQplbmRvYmoKODYgMCBvYmoK PDwgL0xlbmd0aCA4NyAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCA5 NDQgL0hlaWdodCAyMjIgL0NvbG9yU3BhY2UKL0RldmljZUdyYXkgL0ludGVycG9sYXRlIHRydWUg L0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHt2llT FHYWxmEbupumWRtEBVxQESJGEdegxgVFVBRFWcz3/yLT4O7M1JzLt2qe/0VSlZyLU8+pX7rBnDjh ESBAgAABAgQIECDQF2h4BAgECvyn/zz11xzwCBCIE+in+Xuxx7UONpvNlkeAQIxAP8nBwYHfiz36 bB1stYeGOp1hjwCBEIFOZ2io3WoeFfvzR2xjYLDZ7gyPjI6Nj49PeAQIBAj0YxwbHel22r8F22j0 cx0eHe9Nn5w55REgECIwc3K6NzE6PNTqf8J+/4Dtfxvu5zrWmzkzf+78hQWPAIEIgQsXzs3PzkyN d4eaP30j7n+8tjqjvdNnFxaXr66sXPMIEAgQWFm5unzl4rkzU2PD7R8fsP2P18H2yMSpc5evXl+7 fefuPY8AgQCBu3dur91YWTx/ujfy0wfs0dfhztjU3KWrN+89+Pvxk6ceAQIBAk8e//3w/q1rl8+e HOu0Bhtff4Lt99oaHp85v7x6/++Nza2tVx4BAgECW1ubG4/Xb/5x4dRE98cX4v7X4VZ38vTCyu1H G1vb73beewQIBAjsvNt+9eLx3T8vzfZ+7bXd7Z25dP3ek5dv3+9+/OQRIBAg8HH3/btXz/5aXZyb Ov4B9suf6Bz/uqk3u3jjr41XOx/39g88AgQCBPb3Pr5/8+LBzaX5qdGjXzj91OvU3OLq+vM3H/YO Dj97BAgECBwe7O2+3Xy4tnR2+t97vXLzwYttvQacyQoEjgWOen338tGt5f/a6+7+4ed/PAIEAgQ+ H+5/1GvAIaxAoCCg1wKSEQIhAnoNOYQ1CBQE9FpAMkIgRECvIYewBoGCgF4LSEYIhAjoNeQQ1iBQ ENBrAckIgRABvYYcwhoECgJ6LSAZIRAioNeQQ1iDQEFArwUkIwRCBPQacghrECgI6LWAZIRAiIBe Qw5hDQIFAb0WkIwQCBHQa8ghrEGgIKDXApIRAiECeg05hDUIFAT0WkAyQiBEQK8hh7AGgYKAXgtI RgiECOg15BDWIFAQ0GsByQiBEAG9hhzCGgQKAnotIBkhECKg15BDWINAQUCvBSQjBEIE9BpyCGsQ KAjotYBkhECIgF5DDmENAgUBvRaQjBAIEdBryCGsQaAgoNcCkhECIQJ6DTmENQgUBPRaQDJCIERA ryGHsAaBgoBeC0hGCIQI6DXkENYgUBDQawHJCIEQAb2GHMIaBAoCei0gGSEQIqDXkENYg0BBQK8F JCMEQgT0GnIIaxAoCOi1gGSEQIiAXkMOYQ0CBQG9FpCMEAgR0GvIIaxBoCCg1wKSEQIhAnoNOYQ1 CBQE9FpAMkIgRECvIYewBoGCgF4LSEYIhAjoNeQQ1iBQENBrAckIgRABvYYcwhoECgJ6LSAZIRAi oNeQQ1iDQEFArwUkIwRCBPQacghrECgI6LWAZIRAiIBeQw5hDQIFAb0WkIwQCBHQa8ghrEGgIKDX ApIRAiECeg05hDUIFAT0WkAyQiBEQK8hh7AGgYKAXgtIRgiECOg15BDWIFAQ0GsByQiBEAG9hhzC GgQKAnotIBkhECKg15BDWINAQUCvBSQjBEIE9BpyCGsQKAjotYBkhECIgF5DDmENAgUBvRaQjBAI EdBryCGsQaAgoNcCkhECIQJ6DTmENQgUBPRaQDJCIERAryGHsAaBgoBeC0hGCIQI6DXkENYgUBDQ awHJCIEQAb2GHMIaBAoCei0gGSEQIqDXkENYg0BBQK8FJCMEQgT0GnIIaxAoCOi1gGSEQIiAXkMO YQ0CBQG9FpCMEAgR0GvIIaxBoCCg1wKSEQIhAnoNOYQ1CBQE9FpAMkIgRECvIYewBoGCgF4LSEYI hAjoNeQQ1iBQENBrAckIgRABvYYcwhoECgJ6LSAZIRAioNeQQ1iDQEFArwUkIwRCBPQacghrECgI 6LWAZIRAiIBeQw5hDQIFAb0WkIwQCBHQa8ghrEGgIKDXApIRAiECeg05hDUIFAT0WkAyQiBEQK8h h7AGgYKAXgtIRgiECOg15BDWIFAQ0GsByQiBEAG9hhzCGgQKAnotIBkhECKg15BDWINAQUCvBSQj BEIE9BpyCGsQKAjotYBkhECIgF5DDmENAgUBvRaQjBAIEdBryCGsQaAgoNcCkhECIQJ6DTmENQgU BPRaQDJCIERAryGHsAaBgoBeC0hGCIQI6DXkENYgUBDQawHJCIEQAb2GHMIaBAoCei0gGSEQIqDX kENYg0BBQK8FJCMEQgT0GnIIaxAoCOi1gGSEQIiAXkMOYQ0CBQG9FpCMEAgR0GvIIaxBoCCg1wKS EQIhAnoNOYQ1CBQE9FpAMkIgRECvIYewBoGCgF4LSEYIhAjoNeQQ1iBQENBrAckIgRABvYYcwhoE CgJ6LSAZIRAioNeQQ1iDQEFArwUkIwRCBPQacghrECgI6LWAZIRAiIBeQw5hDQIFAb0WkIwQCBHQ a8ghrEGgIKDXApIRAiECeg05hDUIFAT0WkAyQiBEQK8hh7AGgYKAXgtIRgiECOg15BDWIFAQ0GsB yQiBEAG9hhzCGgQKAnotIBkhECKg15BDWINAQUCvBSQjBEIE9BpyCGsQKAjotYBkhECIgF5DDmEN AgUBvRaQjBAIEdBryCGsQaAgoNcCkhECIQJ6DTmENQgUBPRaQDJCIERAryGHsAaBgoBeC0hGCIQI 6DXkENYgUBD4H72uP3/zYe/g8LNHgECAwOHB3u7bzYe3ls9Ojw41Bxonjl9jYLA9MjW7uLr+/PX7 T/sHhx4BAgECB/ufPmxvPlxbmv+9125v9vKN+89e7ex+2tv3CBAIENj7tLvz5vn6zSvzUyO/fL62 upNnLv159/Hmm50Pux89AgQCBHY/7GxvPb1/Y3GuN9L++ftwa3ji1MLVWw+evXy9/fadR4BAgMDb 7ddbG49uX7t4ZrLbHvz+82tjoNUZP3n2yvW7D55svNj0CBCIEHix8fTRvdXl86cmhluDjW+/b2oM NIdGe7MLyzdu319/+MgjQCBC4OH6/Turf1ycmx7r/Oj1xNEviLvjJ+cWllaur95cu+URIBAgsLa2 euPa8sX5mYnu0Y+vXz9fTzQag63OyOTJ2XMLl68sLS17BAgECCwtXbl88fzczORo/+P124+vJ/q9 DhwFOzE1c3p2fv6sR4BAhMD8/NyZU9MTo8M/f7weB9tsdbqj45O9qalpjwCBDIGp3uTEWLfza65f P2HbneHuyMioR4BAiMDISHe40241B358G/7y/yT2vxI3m612e8gjQCBGoN1utZr9n12//7Lpy/9D 3P8ZtjEwMNh/TY8AgRCBoyL7n62/13oUbf8fHjXrESCQI3Cc5bc/yfn64frtb1/+nb8SIJAj8K1O fydAgAABAgQIECDwfy/wLxFP04sKZW5kc3RyZWFtCmVuZG9iago4NyAwIG9iagoyNTM0CmVuZG9i ago5MiAwIG9iago8PCAvTGVuZ3RoIDkzIDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1h Z2UgL1dpZHRoIDExOSAvSGVpZ2h0IDI0MyAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJw b2xhdGUgdHJ1ZSAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0 cmVhbQp4Ae1cZ1siSxdcE5JBgiBBkkqWpAQRiSIoQYJk0f3/f+JWNyDr3vVuvyPDh/fp/rC7A4ep OTXVNR32zI8fvHEGOAOcAc4AZ4AzwBngDHAGOAOcAc4AZ4AzwBngDHAGOAOcAc4AZ4AzwBngDPyF gR3S/hKz8a8p6NaRd3Z2d/fQdne3mTFQ9/YP0Pb3tohLQQ+laJKD7eEi132JVK5UqZRy6cH+lvKl qDKlRqfXH2kUUglwN67YP5wQFEtkqiPjicViNmiVUsLzH8I2/BFQD6TKI5PN6XY7rMdaxeFW0sWN PVRoTfYzXzDodduMGvk2aKYUq432s2AskYgG3Fa9CjSL3nt3dkGxzuIJJjK32XTM7zQfbYFmkqxc a3L64zeFcjmfjnpPjWqZ2Kra2dk7kKkMtotIpvjwWK/mU2GPRacUW1VUT0cn7lAy/9Bst5/ucwm/ wwRVidqJSOeRqY2n3vjtfaPT7z0/lW8i5zaxVUWSJXoKp0uPnZfhsN+u5a+DLpFVRfWkMTn8V3cP 7f5oMhn1mvfZmNcuqqqInqQqve08clNudEfT2Wwy7DwWoaoTMVW18CezK3hdqD0PJq/z+Wz80qoS VR2Lp6qlnuzeWPa+2R/N5m9v8+mo+1TORM6oV4nzRFjo6cQdThUfO8Pp69v7+9vrZPAMVQWcJq1I 1kz0JNMcn/oSuWrrZTwD6vvbfDbqNSrZ6IXNoIJXiWDN1Iz11rPLTPkJepq/vf/8iXSnw069kAy5 T8SxZtp5YMaBq3ytDT0R1J/Idzbut6q3cZ841vxhxtGbSqNH9ERgke58Ouw+ldKX4ljz2owL9c6A 6ImgUponL+2HuytRrHnZeagZt/rj2fz9A5aqSiRrXpnxJcy4O1zoaZ3u4LleEMOaqZ5WZvyy1NMS 9h1e1RfFmj+Z8VpPq3ShKlGseW3GeWrGKz2tcGcTMax5qae1Ga/0tIKFqkSw5n+b8QJv9ac41kz0 9KsZf3SeNawY1vzJjBdPnmWnXZJMn0SbtmbaeVZmjM4DW6TtA3PxJNqwNf9mxtM5nu5owAIuwaeH czyJNmrNv5rxYiQzJ40CU1B6OH/F+GaD1rzsPEszHk1f56+vM7Ql12/AI0doUzzwN2bNn814AoDZ ZDweT4CPhIE6xeFkSj/fnDVTPX2Y8Rhj1Ol4OHgZDMcUF6g4HAxGAJ5NR5uy5k9m3B1OCOqg3+10 +8MxeCaoq0Myah5syJo/mfELkgVMt91stJ77QzpOngx7z61m87k3oF9ifLOBUfNSTwsz7mEaQFBb j7WHerMzQLpEvs+N+kPtsd0bgucJOtEGRs00Wd1yZDyYzKZIrlmrlEr3dUyBplDvx3ELUyJc1ct6 1LwndLROk12NjPuExVG/VSvf5XKFagNjDIh60Hm6L+Ru85XHZ3oP1qNm4Qsay86DkXHpieiJJPNY zmVS6VwZ8wIIDHOCeuk2ncrcVZ46g8l0Sj4go2ZMPYWu30DG5MlDppW1NskFt65xn0sl4leZQh2O Ra6j/ZBPJ2KJdL7apDcffGDU7LUb1CRdIUtii2StZ5FMGSNjAtJvPeRTsXA4msT8FpoCbOs+dx0J heOZYp3SvOhEJF2hCwt44MnUi2TJGUFg57GUiQV9/vBVror8yYU0K9l4yOcLJbIV3O7FtVVvY17M iaSCVucIx3ItZJxGsugedOp+mwheeM4D8Vs6+6KwN1H/mecifH33gAE0Lo4M55JBp0lDpmL/O8tL js9jFGK66BzJ8LnT4fZhhksmfYBtoJ9euBwubySN6SdMA1fXqGQuPSeYeQqZARJYlcHuTeA+vowm MApYQdTrtNkcF5GbNWw6fHZqtbn8WLxp9objCRFVNnpu0SkErRoBVgpYXwI67g9Hg14TxhdwWc0n dixeVFbZltIhj81stnmC13nQPBwNe9By7NyK5QwhjrGE9cZz1Wa33+9Cxcnwmc1kOCZz3DVsKuS2 GA0mXEu6WG/3+v1Oo3LzrWyxBmU9j2RKdSy4NWrFdOTi1KTXGSyeT7BYl9If6c0OX+yGRjZrhVSY TLMFkkyUjHWZq9vyQ712X8jEfA6zTqPRQ92/ZgvV6jRa/YkrkMgWq7VatZiNk7UbgYsKZFVTbbCd h6+zd4X8bSrqd53o1UrVkflfsFqVSmOwugPxdC5fuMskgh4LFgQF9dsfRMpYJj89D8WuktfxsNdp 0asVcuWR2fUp2wAyw8cao9Xtv0xcJ6+iwTM7WVQXoqgfP+jQQqkz2T3eQDDg9ZwiV4VUqgDxv8Oq 5VKZQmOwOM58gaD/wmUjWwhCF26QLt0CsdgdTofdcqxTyw8lh1jE/h0WS46Hh1KFWm+ynjqdDtuJ 8TsbJh8bPobj42ODTqOUSQ4OJHLNn2AlB7gglVZvJKFHYOUbC+oE9+BQplCpNWrscB1K9veQ/x9g sUuxv093wtQkVCEDw9/YDAMugA6lMplMSkCxjXnwBSx2N/eQ8SL0u1uOwAUw2bzcJ6A4+gJ2n3y5 t9zmpKECnj7r5xV2hnfRAInzkoMvYem3y1D8e30Kgf8i56MNv/8vWNLlVk0g1Fc/+2/Yr3717c85 bMBhFGr7rOxzkjnJrFphjOOS4pJilAprGJcUlxSrVhjjuKS4pBilwhrGJcUlxaoVxjguKS4pRqmw hnFJcUmxaoUxjkuKS4pRKqxhXFJcUqxaYYzjkuKSYpQKaxiXFJcUq1YY47ikuKQYpcIaxiXFJcWq FcY4LikuKUapsIZxSXFJsWqFMY5LikuKUSqsYVxSXFKsWmGM45LikmKUCmsYlxSXFKtWGOO4pP7v JRVKl/HKGFI891RM+rf0f8+PnaFUqdEdjEeoYyxc+0+FVigy6phWUUhRQBlIoja0P3jpk5p11IEq BRZYseLSKjsjivty1Ua722k/VbIxvOhJ7PdakfovpR5VdulCtd54qt/fJfE6LbyiRlhdF3O2Oyg7 Q41ZIJ65K5ZLxVwq6sPbtGSCyjFZQWnZmYRU2XkC0etUJp26ivjdpHbu4Bu1TizohGWF9tjm9gZC l+FQ4MJl3cYL6VDiJJEp8cI/u9Pldruc9u9VsbFkSmJQ/4QqM7ze0HhsRkMVG3nJ4XfqydiQadEZ Xuao1mi0Wo1GpZAfbuOVjrTobFHCJpevCt42UNr1t6RRzrUqYfsoePt+QdnfUOn9JdVu5MWk5NWk pOCN4UebCFkVsC3+3sQZ+TlEYOAfySxKgQplbmRzdHJlYW0KZW5kb2JqCjkzIDAgb2JqCjI0MTQK ZW5kb2JqCjEwNCAwIG9iago8PCAvTGVuZ3RoIDEwNSAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5 cGUgL0ltYWdlIC9XaWR0aCA5NDQgL0hlaWdodCAyMjIgL0NvbG9yU3BhY2UKL0RldmljZUdyYXkg L0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29k ZSA+PgpzdHJlYW0KeAHt2ltTFGYWhlG76RM0NEcRBUFRgkZNUEMc44GQoGgUFRRw/v8fmW5MojEz tedu3qpZ341V2Te71q7HhjbnznkECBAgQIAAAQIECHwSaHgECGQJ/Ie/nD4t2fQIEMgR+JTl35od /udmc2z0Wh4BAhECZ0EO/+5oNL4KdljrsNR2p9PpegQIpAh0Ou12a2wY7F+KHeXa6nTHJ/r9/qRH gECGQL8/Md7rnhX7xSfsKNd2d3xyMDM7NzfvESAQITA3NzszPdXvdUYfsZ+DHeXa6w9mFy5cvLS8 4hEgECGwvHxpaXF+ZnK80/ryd9hGs9WdmJ5fWrmyfn3jG48AgQiBjY1rV1cvLc5O9dpffMCOPl7H B/MX167fvP3d1l2PAIEIga2tO7c211cWZ/rdzx+ww99eW93+7IW1jdv3fnz46NFjjwCBAIFHj356 8MPWzfXlhdEH7B9fEY967U3OL1+7df/h0929vWceAQIBAnt7v/78+MHW5tqF6YnOF70Ov20anF/d 3Hq48+zFq9evDzwCBP73Aq9f/fb81yfbt9cvzfa7f/4C22gMf32dvnDl2/uP914evDs88ggQCBA4 fPf21f7uw+83lucmR7/AfvoXnWGvnYnppau3t3f2X797/+HYI0AgQODD+6M3r/Ye3f3m8vxk76+9 ziyt33mw++LN0fHJqUeAQIDAyfGHd6+fPbm3eXn4hdNXvV689t2D3Zdv35+cfvQIEAgQOD05Pjx4 /uT+jdV/2+s/fvnt3YfTj//0CBAIEPh4enL0Zv+pXgNuYQUClYBeKyFzAjkCes25hU0IVAJ6rYTM CeQI6DXnFjYhUAnotRIyJ5AjoNecW9iEQCWg10rInECOgF5zbmETApWAXishcwI5AnrNuYVNCFQC eq2EzAnkCOg15xY2IVAJ6LUSMieQI6DXnFvYhEAloNdKyJxAjoBec25hEwKVgF4rIXMCOQJ6zbmF TQhUAnqthMwJ5AjoNecWNiFQCei1EjInkCOg15xb2IRAJaDXSsicQI6AXnNuYRMClYBeKyFzAjkC es25hU0IVAJ6rYTMCeQI6DXnFjYhUAnotRIyJ5AjoNecW9iEQCWg10rInECOgF5zbmETApWAXish cwI5AnrNuYVNCFQCeq2EzAnkCOg15xY2IVAJ6LUSMieQI6DXnFvYhEAloNdKyJxAjoBec25hEwKV gF4rIXMCOQJ6zbmFTQhUAnqthMwJ5AjoNecWNiFQCei1EjInkCOg15xb2IRAJaDXSsicQI6AXnNu YRMClYBeKyFzAjkCes25hU0IVAJ6rYTMCeQI6DXnFjYhUAnotRIyJ5AjoNecW9iEQCWg10rInECO gF5zbmETApWAXishcwI5AnrNuYVNCFQCeq2EzAnkCOg15xY2IVAJ6LUSMieQI6DXnFvYhEAloNdK yJxAjoBec25hEwKVgF4rIXMCOQJ6zbmFTQhUAnqthMwJ5AjoNecWNiFQCei1EjInkCOg15xb2IRA JaDXSsicQI6AXnNuYRMClYBeKyFzAjkCes25hU0IVAJ6rYTMCeQI6DXnFjYhUAnotRIyJ5AjoNec W9iEQCWg10rInECOgF5zbmETApWAXishcwI5AnrNuYVNCFQCeq2EzAnkCOg15xY2IVAJ6LUSMieQ I6DXnFvYhEAloNdKyJxAjoBec25hEwKVgF4rIXMCOQJ6zbmFTQhUAnqthMwJ5AjoNecWNiFQCei1 EjInkCOg15xb2IRAJaDXSsicQI6AXnNuYRMClYBeKyFzAjkCes25hU0IVAJ6rYTMCeQI6DXnFjYh UAnotRIyJ5AjoNecW9iEQCWg10rInECOgF5zbmETApWAXishcwI5AnrNuYVNCFQCeq2EzAnkCOg1 5xY2IVAJ6LUSMieQI6DXnFvYhEAloNdKyJxAjoBec25hEwKVgF4rIXMCOQJ6zbmFTQhUAnqthMwJ 5AjoNecWNiFQCei1EjInkCOg15xb2IRAJaDXSsicQI6AXnNuYRMClYBeKyFzAjkCes25hU0IVAJ6 rYTMCeQI6DXnFjYhUAnotRIyJ5AjoNecW9iEQCWg10rInECOgF5zbmETApWAXishcwI5AnrNuYVN CFQCeq2EzAnkCOg15xY2IVAJ6LUSMieQI6DXnFvYhEAloNdKyJxAjoBec25hEwKVgF4rIXMCOQJ6 zbmFTQhUAnqthMwJ5AjoNecWNiFQCei1EjInkCOg15xb2IRAJaDXSsicQI6AXnNuYRMClYBeKyFz AjkCes25hU0IVAJ6rYTMCeQI6DXnFjYhUAnotRIyJ5AjoNecW9iEQCWg10rInECOgF5zbmETApWA XishcwI5AnrNuYVNCFQCeq2EzAnkCOg15xY2IVAJ6LUSMieQI6DXnFvYhEAloNdKyJxAjoBec25h EwKVgF4rIXMCOQJ6zbmFTQhUAnqthMwJ5AjoNecWNiFQCei1EjInkCOg15xb2IRAJaDXSsicQI6A XnNuYRMClYBeKyFzAjkCes25hU0IVAJ6rYTMCeQI6DXnFjYhUAnotRIyJ5AjoNecW9iEQCWg10rI nECOgF5zbmETApWAXishcwI5AnrNuYVNCFQCeq2EzAnkCOg15xY2IVAJ6LUSMieQI6DXnFvYhEAl 8F/0+v7k9KNHgECAwOnJ8dGb/af3b6wuTPVazca5s9dojHUmZi6u33mw+/KtXgPuZAUCI4Fhr4cH z5/c27z8t16nl9Zv//jzi4PDD8cnHgECAQLHH96/ffXs8d3Ny/Nffb6OT1+4euuHp89evT08eu8R IBAgcHT47uDlLz9tbazMT3a//Hm4PT5YXLtx96fd/d8O3rz1CBAIEHhz8Prls50Hd65dmut/2Wuz 3ZtaWNm4s/14d2//hUeAQITA/vNfdx7eu3llaWaiM/b5+6Zmq9ufu3j1xvfbDx8/3fnZI0AgQGBn 5+mjf9y/fX3l/GC8M9b4/fvhc43m8Avi6fPL6zfubN3f3v7RI0AgQGB7+4d739/aWFuam+y1m3/2 eq4x1u5Nzi4uX7m+efPbWx4BAhEC3968sbG+ujQ/mOj8+XXT8N9gG81WZ3xyZmFp+fLq2hWPAIEM gbXVlYuLc4N+t/35x+Fhr2fB9gcz8wvnFxcveAQIBAgsLi6eX5ibnpoY5vrHt02f/hen5lir0x3v T04NBtMeAQIRAoPBYGpyotcZ5frHt02/Bzsstt3p9nrjHgECIQK9Xq/babe+znX4E3GjOSy21Wp7 BAjECAyTHBtrfvXpOvqIPSu26REgECYwTPMvPwyf/UR8Vuxo4hEgECXwe6D+IECAAAECBAgQIPD/ LvAvZD3M5wplbmRzdHJlYW0KZW5kb2JqCjEwNSAwIG9iagoyNTAzCmVuZG9iago4MiAwIG9iago8 PCAvTGVuZ3RoIDgzIDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDI3 MCAvSGVpZ2h0IDEwNSAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAv Qml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2a53bb yLKFx0EScwJJgDmBOVPBM/f9H+x+uxog6RFI6/iMZp0fwFq26QZQXb27wq5q/PFHeqUIpAikCKQI pAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQI/M8i8OVf0+zf m+n3lvQlvn7v9f/grXiifxeRaNYP6cmzX9315XOUNGWkyqfPlLBem9yWd1Yj4anzkLD49l3Xt6+f AIfpEP/1qTOdV3T1g4mZM76+ssBfbPgXsHh4fHp6enz4BDhibdgdQ/3zZrrCIP4pLL6xuodHXQ8P 379phffwEBiPmVw+n8s+PXz/p61D6nxHnQcsj+vh82aKEbj61yYH/mxWy8tlM7bh95bIG98fs/lS uVIu5jOyjitx//VP6YM6mYwUAZWnT5spQVU3eSZXYHG6SsW8NvzeEr98+faQKZRrjUa9Vso9YRwJ cn93yPQBgUKhgOU9skuFsvcpMyVoaPucyRXLtXrD52o2vEopn3m8Y/965SlXrvvtTqtZK2b/WeMA aqQXy9VqpVTAULP5cj34lJneo2FgCP1mq9Prc/VYoVd2cLx/3Eb0TqZQ87uDYb/dqOSF3I1Hf2PY vLBQ8RrNRq2MeeRKnzXTe+WiuRut3nA8CadhOBkNugFwPD18uxVIifMP2VK9PZiEk35QKzx9//bP oREZnue32kGjVsrnC+V6e/gZMyWAYRGg2uwMJrP5YrlcLObTybDrY/+PN1Onolyu3OyN54vZqF0v EkdvAnfzxntd3IiEP+UrjVan2/a9cqFQrDZ7k1/PZDTtv9wUTENTd4bTxWq9Xq2AYxaOei3PBUfy 7M+p1g18/faYq/iDcLlaTLqNctaCTPKj7oVrLaMR90+EydUYvIcIDRrdbieoV4qFUi0YTO/O5IC4 yLgAfRmzX5cbib+UHLIlrz2crTbbzXq5mM9m4WQIGmVSxTejYZLzs9KQk8d8NRjO1ptV2G9W8CoR A3Gl60f5v/G5++OmJu4RXxCfx0y+Ug86nTYBrAAarbszxdzd5rpWwiTHYvXvRbtEMP5wpuH3w9V2 t10vppPxaDQc9Dq+JU6t0FbpxPC3rU9M7SlfbY3mm+16NgjwqgycTVwpntE9agzKcahIE43ztpiV XhCCsVQNuxtQjTxRPWj59SpxQ2gkz+TW9NNcZyUYFcKCyMkVk/sFHqCRKXrt8WK7328W4ajf7bTb raDpVQpZMR9T72wjCHcM8eHhqWBo7DZzAgcULJfNirWJpdiFGkagNPzzuAh9JsO4sTypiL5Gg+H5 MC5d0K1qvUlOqRQNjdFikzwTeDh8kSmRTqhbNrijPuQ6khtxymSz0KhzlEY3XO8P+/Vs1A2a9brn eVUyGy+jozFCo2Ka9bv7P5SIBNsageF2OekFXrVSLpeMtUV46FHWVCiWGC4Ym5MVAKfRbIb1fCGX wcekciaby0GEC8VisVDI5/KFEhm2UZce+eLdmZxamguZTgm4khxGc4lfx3KdFmdXfo+K0CA59Geb w3G3Yl3MH+sPGLYgGKGomKSrNIEhYgiZLDqOFzuHYctnHxt1rwpbUhXHk9BpVlTz6qBbLRclwsaR AK/y6g17nsViOE9ILZbLlWq1xk7UUKGoZy5otEeJM5khfv0azyWZcGNRNotjRumv5GJn94sI0LDk MN8ej/vlpNtkPTJ6FQgCI2KEUDG3FFhaFW2h7jn513J/BMTpqN/r9cgAbfy8mLPdJg5i61AGQmHL b+D+GUWJh0ck1Bowyy7PW1wQveJZuJYfBC1z03q1UmHA92HF8pTbM0UAx3OdhaIw+kNoxeFiuZAX lLvJBcxTHBq742mPbTRZjaCwkCFprMgXM0UKayHxeU2/SWwj0qPj6vD8AhzzcKJrPOp3fDIzmgBG 2fPbvcFwNBr2u61GTSihX7ZYJXX2h+Mxjw96ShpF7KLWZHAwGA4J4f1O0PC8ejNot4Nm7e5MMgHs FSKtuUZjrtGQFEAmyhIsUF+TRXKZrOpI1HsfcSMWN+Qp2+PpsJkNSKzIERaKbHHWNyqGez/mSl7Q 6XUD9roIQZysjq9vwEFi5iI7T8fEkFIePwKMoAeBnE5JU3DbeqUgl8gVa/C88XQ2n89nU4I2cFTK Fc/vDiducBaOgaPZ8FmGYKzgNN6tmYQwYFTqEOlJOLNrOoEtMR0mV4BUXuSOpFvuXhFxiaKH02ln ARE42Fyh8QgRafXZ3E4D4yDWkUdQewwbqVdKlXpnsj69/fkDODarFdRts1nNIepeqZBjt4LeeAZG LFr0pcG2ZHA8BIymiyUsT9RGNK/h1bxmZyS+A+FZLWcw4ZYPGNiPOHEZ3G/MhOWrpquoRJjOtSO6 5rOJiieisRj9ldx+qy4SdaekUoYt1IgAu9PpsF0ojirYyDpwlHIT3afhIKgWbBeIFYNwFg47zWoZ /jrZPP/466+3037D4lbr7W63QYItoOZD25csbs5emW3ggtqs7mi2XEN6RfO0je1m3Wu0BtP1/oQG mNlsPCCgBKoUmKkd4Z48E34N8PXWIJwvBe+c2gKg55OB9quMEiTLSK6z27u2AfuyMNqfrjGOA4xj EHmd+X4VWgZTH7U9ShEiYKnRZY0YgF+rVBudcPP85/+BxpY1T1n7bg8c425TN21XNqvFFFNS2U/2 yFGZu+G1QBLPwxdI6ZjGYv/8+vpy3K4ERuA3AzOhOcLAHdtInKnj/ChAyRX44nqh1OCnTLRarbeG i91ZLgZTJeX9qm2TZcuhlYfj8SBt8GUqR6JQFkqBpSG7Uy9l1HWhUAuX6+WU+BKh8eOvP1/2K5Y8 HIULwQE3bTe8etCbLDc7Wxx2byxKxAHFVziEDKDX7XQ68Dzojd9VBPrx9gLlGffafqNe97vj2Wq9 CGVpDo2kmVCjggFMFmvJnIyGw3E4x+XWgtHDAcdXcltKEaq24zIjIZjiKngEe77YkC4Pu81ySrhx UYi0AUqUIt06hRkxsNLsT1eQ8WEL5OUpp7cfr8f1dNhttzr9CSIOFnwaTWx/tYOacQtiq5xsptFh GmFEvPCNHcAuqrUm7E+SThvxPxhDhVg7nlMETc0KZRvvZ9oux12/rpgzX+OjS2JyrzcYz5bUGCs2 jEjcVWQ7y60or90zDcdGM/Ln8Wy9wzzYXdwFoyK1Eb7QHp16KlOFhj+YCQ3IuKGxPr6+nrazoXN+ 9l1sbDpo+357OMVShEYHEiKCks0WAJNHoNgsg1RiV6lYqooLn17fnneLUQefgo9iDmNKExYVYIWK ojdnarFB+wMxL8Qlu73hdKkiYz7q4G6EjYtcI2UqHBJs4jxE5HjIWi6aYtuH42GvvZNWCpQUMNv1 T2isXcFgaMA3nvfLcQfsyDGqrfaH7Zz9DdpmGzskWT4m38HXaoGegK7RISqJ5MHGLQxqtS8vh7UR HoAzwhUVajgDaCTORIxqtXsw4tPzcSfb6Hb7I2zyYBba8lv98Equo8P3wVDRQy5VP6GPq25xl+Ne fud7MuHJ8g4a4xVPb2Z932J7haBCubNbjnutoCW/UY4hLON3Wrst0SqbcYdURyCygioDidFqT6ft fKhyGFoC7ZePWoFsaNyYKRx0u6Sj48srUM4nQ3jWBLcRQQ5NiVDJIZJLyfAry8BEDA7jjmQ1ZFly kaURy4iFt9FQXj7AYImxOXEJr6MBK3fIkEMiDE2CeUjkkN/lAZxoucOKWXTBiLoo3qOWLo5/WIc0 jnBtsUsKtSs0kmcieg/7/fF8+/zjxxtsaTaB4U4VvA6qJbGNXsh+xXJdeX32iVs/BIdx+rry2nJr cBAM5Hi/QIMadjFqsTYVtZT4iy1ohL2g0UAUxIegQ45VliqXyjT0QoIJlNevKO+7QhBOBxpUZRhV 2zOUaARemieyjfaIYPBuJmUgjGG5f/3zrx8YB007ZdiNZbYReVrqX+SSTO6GjAge0CB20GEp1Rqw q+Xu+EzREvbbQbsfEqFvxQ3puJMZViljtALCwpawAAGjzjDGoObiUuZBKK16AbRmT5jtN8t26IB6 VLug4XoDJolSFxacgMa7mQjYczJ7uDq8/UWeP5BjqQNm1tCEErmcIhQjuXc46LWdSKmoBi9DxbEu opKCYbsDNkKDZl+OToytd6OAbTmFOntLSD2jUYnRMP7l+Z1hOIOirmmpkbQbdSjnLBENM6pdZDOU pQloJMzk0Bg5NH48g81UtWM4hcOO+jD+OmFP7zlb/GBX34GhNpGd45AZtjKO5aTfcWgoTlbyVATx Ji5iNGLbkKeYbRAkMfgOYVN1aZsIv1C/dTUnspJ2DQ3ENcs5a8jLNJxtuCDhm80koZE0k/OUUJ7y 5+uRFKsCWAWrlcG1ai1KiaAhuR9zE1TCONWBUofGMgOJ84CrELBlG5u5ChWlSFKdHHExdrZB0Nzr Px6JgDwAV1PKACsqYVpRVYLHMJxTv4iidFutjsoRTAtxrkVgUVR1koXM2IMS0EicyTorg8li9/L2 9oxrwzfarVaLP7QELOeLLkEQnGd+DA05iWU79pfUAu9ZUukIjQ78Upui9emUB6RYzjFGw1IIWnQ5 bYMjQGiVMnDTltgEx7o0R7Augjw0jEyL4xlBNXG0p3TRsyTDtkW1Yq0TPOXGTAjt9UazzemFCmdu /JZWG5caUpBH5P5naLh8Yl3JLG2JHGnQoeE8BWoj27emGJ1Kop3aQgR/46KwgBNqwNOtzx9EjqAm uog43TzFUnFcjBr2LnCxJpKO6yqpr+vY17XWiWi8n0mpmqIGuOEqzwcmgBPA87kqZXXwxG+ube7X tqGgTnLldJ4GK4yYFVMFi1RhENh2F3FkAdKt2lHUXGu6XYcLGs6l1CauUnsZdKzVN3pRJKd6TSOl B0VeicMGjDbD/EXA7cKjfrLoZDQSZlINEAD3Qm3MGA19ZFDGMn4PDTsOr3A8T5OXvot4Ahoj3ZUb eLrKDTHKwEjwM7TvggYs8ITjKESCHFZA2DCiTseqUpU47d0WNNg64+s8gr/TNwBeawnzWFSiYTKX KOqOruDwERdNnAleB4W28kiGQnfAq3Fxto9xQhigcDr/cnI/YBuYhjppfHqgdi5N3Z74l85WVCA6 Mqr/hbC+ITt7fHkDDcspdfVF1QlEEfyX6hFer4qeTgs1Tq3eBKJOHxImEhI6AoBLWBQZuYhHJ6NO JlQZuoE+NkriIYqiZOvpar0MqWGp6JNnok6t16BIZr9UeLSOkMdFDKVOFBo0JNax3A+hIWbsd/q0 c2kPjMaTGWRuhzXE/RJRBOpl43mr3enllVKTSAFDJIrQo3k50SYm00/nMPG42yMfabW7vf5AbQ/S ksD1avI1wrKJo5874FAPkkSspfJc8QhtFIcG1TJPLumk0e2BBCXPRLVYVoNLJZEOCseDvlr31ouP IpmERHI/iAat395IpIWLVtoagoBrqJdWUqXPVMCxouNId+uoDpm6DqhB1Nwcn5+PagTqpqo0Q1FN OJrVNMypG2hGbWgSyOS1y658QZy6xBM+/6C3Q3CZzOfToVpsduryQF+JFsN8OqK9VdKpdMJM6jla R129LzVlYebRwSln+zrNrtKOREgk90NoPGAboEGXldYiXUW440odDho+MjbtJv3brY7vlzCp3W5N RScdaUs4pGBX6hJTlKg1AooEDQy4PxIvVKdyiaMhj6MC+xgAeHiUUXFGzmA8Ol3DSTgm+vIliE6x 0Emd38kYDIm2lHuJM6k9rw9/1BdFb2oAeq3u+5NoNhMSyf0AGvb1Bjrq6w0Dg784CFB7md65qm1q czeVmrA0pnVMcN4U2uK8ILMBR2vPatX5POcwUVNfL00ntI9cT19w0NIVfOqNUt+SFfEgTj3oxEcU VbULzX+G1Pu2PVED/m8z8Tjt7EdRJJoR2k2UU4t+5Hq7eo8QcJF7XY0k/1ZzQ18SEe0iX7EeN+cz apzbVJEbATp9XYJL3778MZ4QdO1IZ6JzE7XAdbYgFOlliJfrYyG+FdKRA2BY40J9lN5oIrechjpo wfUxM53K8ZMKVi0Ida5LBB44ZVVdM9b7fqZAYNDal44et3FKLvdpkg4sOA7UCZcJcXKTEbgedXyD 4jUARR2MDfnuS/0IwOAc60GFbVNnZpB/0gAHg+r5ljlAymT1rZjOCum/qTwY9Ls6OqOgoV2Tt+Mz jRPYWrixHfnrKCg6gxsyk77d0d7D02oc16pv+V1H/OJAHCZ6OthFHPVCwkzwXeuROB3Rv2clirTg NDl+j4PgWO71sm/8juhXsVJr+HYKygGzTsYhznSKjJpxlqmjTJIXFEHZnOwlu2HJRXEKTpjtfmDH phztU/GwYazmMuzAVVlCV0jyqCdsJk6iMgCbh6rx05q4gkNL1PG+DsR1dJE8k/KP05HDXY4qJVRd eL5zsPekoQn5VXP4DI6DQ6+xshqr5XtY6eA6RYKDezo+F9/V5wQ6tdaKsdEnjFHfGPCdqSPEmKdQ VIfCCC79cKiQesR0tKT5RZ7BGq0W8GDonP+an7huHPO6ISw0eSb3Sbf0x1ug05H+5/kiDa/knhd9 +4eJo9ejlemyxQp19ii+xxcQXMjlw5QnO7OW3ajYs89PeDW6z6L1pt2LJOo1G/5ZnpuJnae7E5WN ete1p6z9pFJSd+/MpKedjsIz0j+vjyAu75mQSO5tFM53ECftVU7qcm8LC56I8GDVdkMfLXFJQ3sr agQIlfObtmjDI5J4Fmjy4rXZCzr9diaDJCfVqaUlnoek342Z9LTpKEDty6BoAVcaXst10u/+LXHx hFLKJMXZ2a3alLE7prxbsb1mbzplozdjDaMl/E3glbxo/SYsFhsr6nSKDDT+jxoxF02cGf19tvNm OR3/LjeWf/dfvWov8peJuTx9dcvuuL8iJaKR6FX9L35Rv68lxuO2l/EdPRSZYPwzfs7+7+66V9xA wkyxKvFsbgUm5ychseQP/Ru/eVnQ+bXzrfPIzz9u3D8PnyGKXzvfiQc++u+dF8+3+PFRcelzKQIp AikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCv0Tg/wEshEiOCmVu ZHN0cmVhbQplbmRvYmoKODMgMCBvYmoKNTMwNQplbmRvYmoKMTE2IDAgb2JqCjw8IC9MZW5ndGgg MTE3IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDI3MCAvSGVpZ2h0 IDEwNCAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNv bXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2aeXfiyA7FpzudEPbF gDGrAbPvZOnu9/0/2PtdlU1IB5K8OZM57w/7nOkwZVtS3VJJVyr/9Vd6pQikCKQIpAikCKQIpAik CKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQI/F8h8O3fsuZfU/R3J/Qtuf6u gM++l+j5lxGJ1X7KSp797q5vX2OlM+Yv/flaRZema8pNrf269Mj5mEy8+aHr5vsXwGE2xP98qaLz OZ1+oxilyfWdCX6w4N/A4vYuk8nc3X4BHIk1tjpfqegEwNkPYXGD0ts7Xbe3P240w/fwEBh397l8 PpfN3P74p71D5vzAnFs8T1h8maIzDE4/TTkLnc1qernsvS34e1PkjR932XypXCkX8/fyjpOwf+CH 7MGc+3sZIrsKX6Tokq1O+X1OOnWVinkt+HtT/Pbt5va+UK41GvVaKZfBOS4J/ptjZk8mmy8UCnlW BsMq3pcoumSfrfN9rliu1Rs+V7PhVUr5+7t3/F+vZHLlut/uBM1aMfvPOgdQI71YrlYr5UIuBxj1 1pcouoCGgZEtlL1m0On1uXrM0Cs7OC48ryG9c1+o+d1B2G83Knkhd+XRvzFsu1D+oHUpFoplr/U1 ii7YFutuBL1wNI4mUTQeDrot4Mjc3lwLpOSf22yp3h6Mo3G/VStkftz8c2jEjuf5QbvVrJVLpWqz E36FoktgWARA4WA8nc0Xi/l8NhmHXR//v7uaOhXlcuVmbzSbT4ftepE4ehW4KzeuoyfhmXylEXS6 nVa9Wq7UWr3xx4rksVd0XZj2lSFcQ6o74WS+XK2WS+CYRsNe4LngKA2vdLiB7zd3uYo/iBbL+bjb KGctyFx+1L1wNvl4wP1JrDobhPcQoUGjCxqNaqXiBYPJu4ocEC8iEqH8fRm0X2d3Lv1UcsiWvHY4 Xa4369ViPptOo3EIGmVSxY3RMMmJ342FQ07u8tVWOF2tl1G/WWFXQQx4+oyl8Cj/b3zufPzN8LfY YiNa+geGcXefJ3J2Om0f36jWse4dRTZle0/K+HEy16yVyOQ63bkEBWPONfx+tNxsN6v5ZDwaDsNB r+Nb4pR00+DE8K/NTwZn8tVgOFtvVtNBi111DzEQV0pscY8ag3IcymxklH3giJWel/E25mATz2dY VCNPVG8FfoO4Uam3ryhyc3ql6rUNoCCEnFwxuRekLuIBGvdFrz2ab3a79Twa9ruddjtoNb1KIXuH aMcIY6OFhWOIt7eZgqGxXc8IHFCwXDYr1mZVSzxpI1AaduNu3kaz7+8ZNpIn/CQVwnknng/j0gWx q9ab5JRqydCYry8r0noavgAokU6om7VuvJIbc8qLONig2yiNbrTa7Xer6bDbatbrnudVSfTigTEj NCpm0h1DzNzdkWCDIRhuFuNey4MZEPzF2mI8MOSOORWKJYYhUcbmDEzRbEb1eCGHSznuLR4MES4U i0U4Vy5fKDnGVSkWy/jGdUXOKqlCprMBqmTLJxvO5ZoVrMlVOIQGyaE/Xe8P2yXzYp8m9osUS0tB Rv9wS8hUxBAh79liLRjNtw7DwGcdG3VWUh6FKXiA+HSl5tVBt1ouSoR8FgHQKq/esMfBXFsMm/PF crlSrdZYiRomgEHV+KdD47Ii88Pv3xNVkgk1rmCDw57U9Epu5aMiAjQsOcw2h8NuMe42mY+c3goE VUvGCMVMbYp3sLQq1uIEOe2vxe4AiJNhv9frkQEU9Io5TPmhOIivQxkIhWz/qpFbsxs6D7Ps8njA 4yUWDO5dFNfyW63AtmmdRAIYvh/vlM41Rc6ok6oXocIeba/lNhQLr3MBbboYje3huMM3msxGUFjI kDRm5IuZIuXGEp/X9JtMolAgEY2W+4dH4JhFY12jYb/jk5lZbsAoe367NwiHw7Dfhb5rWOhWyZz9 cDTi6UGvzTjcO1+qNRkdDMKQEN4nr3pevdlqw768SrlS71xRJBcAd3i0VA1HXMOQDOCVC3K5TNZp i+WirepI1LWtYnFDO2VzOO7X0wGJFT8TFnj1KesbFdOC50peq9PrwgJK2s7j5eHpGThIzFxk58mI GMJys8Gg0z0Y5GRCmoLb1onK99lcqeZ3BqPJdDabTSfEbIOjABiwTTc6jUbA0Wz4wGMwVqqNzhVF rDS4U8bAo8fR1K7JGLIkbbhcoXIudyjbcu8VEYZGSVF0fzxuLSACRxzb7iAiQZ/F7TRwDsIzecTv hiPYSL1CqO+MV8fnXz+BY71cQt3W6+UMou6x3CxXqzeaghGzFn1pVEk7+IDfHU7mC0iemA0sD5jI Gg3HdyA8y8UUJhz4gIEDhdyv1ZqYd0mR/I3IQAYejCczLYiu2XTcD+rMAuxjHhXL1fD79bYybKFG BNgej/vNXHFUwUbewUYpNzF+Eg1a1YItA7FiEE2jsNOEMLNk64efv38/H3drZrdcbbbbNRL8Wpl6 2Ie2L5jcjMXCN/AmNle12R1NFys4r1ieLWND1NvvT1a7IxbgZtPRgIjSUqVgmjwPNC4rYluDez0Y RLOF4J1RWgD0bGw+nsc1eiTLWK7z23d9A/ZlgQNrcI49jGNg2067hb1fhZbB1Idtj1LkFl9pdJkj DuDX5MAY+es/oLFhzhPmvt0Bx6jb1E1b7fVyPmGBVRSrGAXAIZwXygtGonnsCUXMehDOtw9PT4+H zVJgtPxmy3xoxs6r132hcUFRp6GM47WwcQm+bL1IVvBTS1Iqlmqtc7lU21VS3kdtmyxLDtvbHw57 WWObWaE+C6WAsSO8Uy8RAzNZCrVosVpMwD5G4+fvX4+7JVMOh9FccMBN2w2vTqG1WG9tcvh9g7zn DJ8sN5u11r/X7XQ6QYs7hEni8eHp5/MjlGfUa/sNITCaLlfzqB806n7PfOOtIqzAr3rj+Uoyx8Mw HEUzKozVbNjBGctM60xuoBShavs64TBqniuz5vM16XK/XS8mtpsLOdt3oEQp0q1TmN1lcpVmn+ms pmHgVRXc1sfnn0+H1STstoNOf4yIvQWfRpNCa7mFmnGLxEBOLphroEUQEeh8YwfcEdkkAh2QdFyL /0EZKoTV0YzaBNybDo03ijaLUdeve83OcLZiiy6Iyb3egI1IiUHx1GK9/pBbUfZ/zzUsx5I7bEOv trgHq8t2wanY52Vy2xw0Jj2VqULDH0yFBmTc0Fgdnp6Om2nYbta9RkCxIzY2GbR9vx1O8BSh0VHl BR3NF9l3QATFZhpkTl3iqVIDGk/PD9v5sENHAz6qrEoRtJToBjtldbymKEDmbk/Ii9iR3V44WajG mIVYWGO9zuQaK7vapIizLpHjNgsc1PT49v6w32nxZJUCJQXMZvUKjZWrGAwN+MbDbjGSW7LCQTjD OTYz1rfVNt/YIkkRFLoGc/bsAdgaDaKSOB4Naa58yVMKfXzcr4zw5G2oLTTwQoD2u+PVJUWEqKDd g6ceHw5b+Ua32x+C9x4HHTEBkhFonORCeIy9XmMbNg7Rp/2tfkKfrbphuxx2K1u+qsQt3kFjtOTp 9bTvW3B3EVyW9IJWoH2jHENYJlLiaBAUOKUKm1GHTEccchccyXjc8biZhSqHMwSoYi2uW2M0LiuK Bt3uYMKEn0ByNg6hWWO2DfxYtFrJaLwkOcRyKRk+8gwAMTiMO5LVEGbJhTjkE8uIhdfRUF7ew2CJ sbl7aKbHbLd7K3fIkCERhibBLCJyqDAvVwnBxBK8mN7hvao1Lkpil+F3h/0qonEkYu9KwnPfuKSI 4B32+6PZ5uHnz2fI0nQMw50odrFv8A3Q6IypHRK55hjvRNBkr+AdxunrymuLjcGBj5LnPkKDpZ4P AyanopYSf74BjajXajQQpWRqObbf9r1ard4ij4PGdOBXlPbtAo+M+A71H07V9gwmGoFJ88R8w/nU n4qUgHCGxe7p1++fOAc9O2XYtSW2sN2oETdseWK5JJOPsTDnUCuS4qfWgF0ttocHipao3261+xEh +lrcaA8Vv1nqKmWMZtAKZ5udfMOnzjDGoObiQu4RNBtNKMh6R5TtN8t25uDaIK5vpJLdJLG3qT3e ovFGEfF6RmKPlvvn36T5PTmWMmBq/Ux4im9ZT32bRO4n2/pYldTgZah4tNwRlhQM2x2wERo0+3Lw fpvvGl93OUVtB0LqCY1KgobxL8/vhNEUiroSv+x3gqBLur6OxjZ2GurSi2j8qcihMXRo/HwAm4lK x2gChTWOYOWeLHTO+MmuvgNDbSJIPzyXBZZzLMb9jkNDcbKSpyRIGjzzBI3EN7RTzDdYCsVzig/I ebNNiJ+r30r9At1ij4MG0prlnPXjra/ITkm2xcA3p7mMhi3xuSK3UyLtlF9PB1Ks6l/Vq6qCCdyu TaTE5OR+bpuokxa3DpmwZQby2Z6tQsSWb6xnKlRIiEWIgeLkfGR8Q1F0p//xSASWGqxHBVZUwmTU KsEjjGaqXxTx+wOHhqS5DoHpVRR1HdZkC71FA61vFVljZTCebx+fnx/Y2fCNdhAE/CeGS06naLOG aiz3c2ioUZVkO1KL8iCVjtDowC+1/JpfCcYAUlRXhwQNi1GY0eW0DY4AoR2Lf87CQHSCY12aI3gX UZ5gMmWPj42PmDTaU3ah+JROr6IhuSSvPxUtokGvN5yuj48UODPjt3TauNT/Uj8qTtOfR0PplQAK EVLHK8uZpwIxaLidAreR71tTjE4lSUNtIYK0cVH4xhE74OllCtRaazBdaSeoiQ4aNPeqiqVTkrY6 0GE40k/lHNdUcn3dexXe52v4Nm6AxhtFStXUNKANpXjYw9OgBLWqrkqZnoLrVZ7L/dg3AINsotN5 seRikRlTI4nr4BDdU+Aj3aodRbUIKXzcv6DhtpTaxFWPQkvQMVkftqUGMb3NppFS+C1oDEL2nWjz EOIv/s1Fk5VeyIdoiIvira8UqQRogfZcXcwEDX1jUFYLn747ndv/FQ07Dq9wPE+T16t54gn4M+Jd uQHVU7khRtkyFvwA73tBAxp4ZONQhNGekRcwbSPqVKyVqsRp8TbyDeIoZJcn2O+0DUA37gjbEYFK NHzmJYq6oyuqNmpYI9gXFEHrkupIjkKBB62p1apsFPmGSvAzuZ/wDXfKp08P1M6lqdsT/2IBKQIS Mqr/i6B9IVHw8PgMGpZTVIfv1QnEEjYw5SO8XhU9nTFqnFq9CUSdPiTMhpWwrcwVuEMX8Vqq9d1h 2nJF561REhFRFCVbTxiKhAaU8pIikKIx1pBf7aitKL3bNEa41FumGU/xBaQvcj+FhqKY3+nTzqU/ MByNp7C5LQZTE1er5FvFAgpmI3rL7fHxiVKTSKEezXC+w1WOtIlJ9ZMZTDzp9miPBO1urz9Q24O0 RAPGGlpArfKb7if5kDM9hX+0cNC6AH/aKA4NqmWI38J6cey24eKSIorFsppsqog2nBOOBn117pNe fA40TEgs95No0PrtDcVauOilrSAIWhR1LFXpows4lrQc6W4d1CGb0PvCDqLm+vDwcFAjUDdVpRmK lRLHBAHfXACuulFr1ySgDx5XL0hTl5iGKW1iQg4VwHQ2CdVi08EQRTU9yBFDQ4qvGmBdUGT9LbXu 1ftSTxZmHp+bUghwUkNGcEJiuZ9C4xbfAA3arPQWaSta15IOB31nUnZN8K43lG7q7MKkxB3oLAkp axGBFOxKXWKKEs0aFAkaeHB/KGKoVuWCjabAqSYOfQN7kkE4I905bRW1tsewadqvql9Ao6jW73hE Y7fKW/GS/KFI3Xnji/RFXQlArzX5/AR+BFswIbHcT6BhX2+QVfX1hoHBPxwEuK4zham65mOnS11Y OtM6JqDr6FaFtjgvyG3A0fqzoAjx4Rwm7urrpcl4oBaItYmh6zM9y8P6ToQWFaSRfNQf0ImPOaoq ORBiCNfhWJrlf6uIp+lm07yFPvdHWkxsU4d+aK1djjEgHCYkkRsXqe/8UXPDTjn6yV6xHjeupsa5 6Yq3EajT2CW49O3LH+tW8wWSznRUHbDR7KhAvXuOUzgiaRN2xxHfCunIgRMEq/ppo/SGY+3KSeTO WdQIIq+LQVapYNWCUOe6ROARqYTV0gl7q6glMOjsy0R9CcWe5HJfJpk21VXAfCb3HRjiW45vULy2 WAodjIV896V+P2Do8E6FbVNnZrB/8gAHg/YZAcgTs+2rgjbHiETLAQ902/bBmNo1ecqUwMaJbAGN Px1aMR6fi4VcPK5xciHHABzY0la30w7HgTi4ZAg7qAguKYLuWo/EmYj5PStRZARFis59tZalM7kf g2Hn/dbbqDV8OwXlgJk+pg526RQZNeOMVEekZC84gtI55Ea6dOQrTsERs90nXdqE7qj/ZAhpRa/Z sDuG1UrqaLTJioGqnWA6kHRqT1a0Jq6qSM3RDXEMiqLSJUVKP85E0OSkUkL52AJiLjCcFWdyP4FG DAcTk8Ias+V7WDuUl8ua5+icm+NzEV5xR51a812CDiIzfG2rbwz4ztQxYn2yoANbOhRGcDl0hwvp EFtHplgeH5tLlY7i7YheZiNJ57+2T6zhooLahjjnsttvFLkvumWiMOZ7AGf+izqz4pXcT+Bh8qxU 0ccJ8WQFO2Ak9/iyggt7+TAlY2fWmpqKPfv8RJ8gu/tu0rIQ9xBWJo9pujac3eBInlDhbjDXRJJO wpO+pUp9TrPscFzYXlGkXpYzMVGGVEi5fUQit9GL53I/B4feYwXscm8LC96N8WDWBoI+WuLSHsIK +2aJlZXdejXRm6AYS3wRKGkxiPY80z+T5H47gzVHugwgoc1wVZEeNhM1b8KmFsvUmWOfhMhaJ/cT /5qRscbYAobiF92srf+R2Ba7jXvNbJXlpzf1ot1zo25KicAzcTEU3OGySfM3Mfds6HQbE98o+lPZ aa0QdXrxTG4i/92/pxexSr9PVtnEnK0vIMT37UH7x+bi7idqNB4Pm8Rk/MXGs+cTSaeHnFobZiy5 fZKogbNnz2XGE3B3kxfPn/3c7+TN13rs3dOtK5Ku3D8Nv7IcGacbV+RdHX7nxdMtflx9P72RIpAi kCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCKQIpAikCLwPyPwX1soSJAKZW5k c3RyZWFtCmVuZG9iagoxMTcgMCBvYmoKNTMxMwplbmRvYmoKMTAwIDAgb2JqCjw8IC9MZW5ndGgg MTAxIDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDEyMCAvSGVpZ2h0 IDM4NyAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNv bXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae2daVcaTROGoyLIvsgi KIICgiiLC6AgggIii4AgyKrm//+J9+4BkpCt8zSM75eak3MMU9NzT1VfXdPd86G+fKGDIkARoAhQ BCgCFAGKAEWAIkARoAhQBCgCFAGKAEWAIkARoAhQBCgCFAGKAEVAjgiszQ457v3ne0J0XTrwnz9f tXILU91Q4NhYX/9EYchuKDaVKpVyE8qfJwzZTeWWRqvVqFWbnyfMZFUandFkMuo1W0x45R35uxuu rW0oVBqDxeZw2CxGLTz+nEivrSuUGsP2zp7Hs+e0GjUqxac4zKKs1m87Pf5g0O91WQ1q5adEGu6q dBanN3gai0VCB06LDl0sf6ThrlJjtO8Ho5dXV4lYyOMwaT8h0oBqc0tv3QtEkzf5fDYVPdpDpOVn mkVZa945OLnMFsrl4m3i9BCRlt1hCSqDbT94lilUnp6qxZvz0L7dqJEbrSlULl8kdVdpPLeb1fvr qH93W7+1KetYmkLl8BxfZB8anV6v0yjfXoa9DpO8DuN9AKi2dwOx60Kt3RsMXjv1YiYOtPRAS76x xDKV1gSoErnHVncwGg17rUo+CbTMco4lNobUBpv76CxTenrpjyaT8eCl8cDQssk5lqQxZHEenqbu qs+vw8nb22T02q7dX0V9LhnHkjSGkKlCDKqXwfjt/f19Muw2gdaxxyHfWAJUKt32rj/KoHodvb1/ fLy/jfudeiEdC+yxsSQLWtIYMjm84cvbx2Z3OIEshCcSWomTgx2Z0vQ8MR/F08V6p48of3z9+vHx BrSeSpmzoFsmtOaJ+TSZrzz3mLtfcSDSo9fn6l0q4pMnTX9LzOc3JQmqD0kXwuNht/GQvZApTX9L zFf31SlUzF3J4XG/XSvIlKa/J+bb8hSqqSwTBlrNx5wsafrHxFxvz6CaKjO0MJaKaTnS9EJi/gbV TPh9Muo9y5Kmf0rM47cZVJIwBrFcaXoxMY9mY+h7D2MstaurT9M/J+bp0J3LTtGSI03/mpi/a7L/ yZSmf07MC70r6cqSpn9KzNJ7CG+Eucvs7SA5vOo0/UtifpfeRFNlSfXj/f1tMlxxmv4xMT/hbT/B 254dU0W4CtE3/BsPVpumf0zMs8nNBAcmG1KA4Sn7NZvyrC5NLyZmuIvJ3Gg4GjG/Wb++jTGrxC+c xpRnZWl6MTG/jsbj8WjQf33tD6cBhxp+9geSYYVpeiExdwdQHfZ7L52X7utwzLp1POx38bPXh8/j 1c2mFxJzp8/u/dptN5vNdhfTZ9ap/W671Ww+v+A5xqP+qmbTC4m5h1sP+y+tp2q11mjjF+vTXrtR q1brLUl4uKI0/S0xn0sz5hE86rbq5VLxodqU1gv43ayVi6VyrYXf6PrVpOnpGMKM+YrNmIfo3N5z /eEul7t/qGOywyLbeSrf53J3D7XnHuCCw9JserYyFdzXmo2h2YxZui1k8pnrdLZQxZyS9Xa7VrxN X2fy7EEwvAa91mNemk1rlMLbS3BXWnVOZ8xwF2F8vEsnLxPpPJu6TwmenSg3EOkRCwBm00duq/hS HDArNVggYNVZafUwUBDlaiFzGY+eJW/LDbYOHfSa5VzqLBa/TN8jAtLK9LmKlSlbPojuPUi9i0V2 PFNkq06pM0vZRDQcjlxiEi3pdpsP0pkoztQ7DAGsTEs3Z2wpviUYaLzu1Qa753jmLqKMRXYqdhw4 Cp+xR2H+diFyfnIUCEWTOYR+6jDmeCdeh5FtAfxuf5NzTqLKtHMYuS5gPTQcTVk9O/YdHAbj1991 M2ch34EvFL9GpBla/ZenYjrmxxaAWKCZrtbiQpixMOkPkTHYJsqJb9/tCWApWp/6+1RKx4687n1f +CJbesLzDQHfAwv0tuCuFnSx3N07OmM5oz9AxqjcpaKBfZfT7Y9cfdMtXsdwzoVzKQY5u7BZzl4E 3VZhXex/Mt0b+NHrdZ9rRYTU47Tbdw8XdKP+PYfd6UHwC9XWC9tcesieL6O7oUKc/bF0odpst1u1 UvYyfOiybVudB6ep+3mci9cR3/Rk+OKmWJOuxKIlsLtEnDF82abRbalSr1eKt8mIf89mNll2FnSv IofObZPZtus7SWSLlVq9WspNt5YEuZrvGsVS2fti4e4mEQ247WaDwYxU8oO/0N3BWZNtzx9JZPKF 4v3tVTyITUvRrTQpb5h3vKFY4iqdTp2fBvYdZr1WZ7Iv6rLkpNfqzXa3//Q8lU5fJ+LHbDtcdJMW QEsb+t6jk2gcW+s+N2Q1aq3R7lnw9/QAW99qjc5s3zsMncbi0ZOjg2W2/zG3Yt9NtnfcB76A/9Dj spl1ahXO/Kpr1Gyp1DqTzbV/6A/4D9zzzx0i+erLF7wYIKw323Zcuy6nfduo3VJuKrFT+Iu/+KiC D1lag8XOLt2xmQ04Ib6bhUgrlGqtwWS2WExGHe6lUCD0v+rimwoscNlgsljMJgPistTWPxPG7fBF Dp/ktpSKjQ32deG3ujAplPNLVbh0qe+G6GP2BVKpUkqfINlX0N/rwj1m/H7pkh9oIbwOV9ixDg/W 2RTkd/5in/+nSzmvO64Z92PfmNmftS/S1OcPuuAQx+xS7m3/5QLphtKY+KsubjW9Umz4/O1JeLp/ a7uMjXSLV8jP+Koh63erv/O8TAdy2lL/Uv9yEBEyE1fElRA4nEbEFXHFQUTITFwRV0LgcBoRV8QV BxEhM3FFXAmBw2lEXBFXHESEzMQVcSUEDqcRcUVccRARMhNXxJUQOJxGxBVxxUFEyExcEVdC4HAa EVfEFQcRITNxRVwJgcNpRFwRVxxEhMzEFXElBA6nEXFFXHEQETITV8SVEDicRsQVccVBRMhMXBFX QuBwGhFXxBUHESEzcUVcCYHDaURcEVccRITMxBVxJQQOpxFxRVxxEBEyE1fElRA4nEbEFXHFQUTI TFwRV0LgcBoRV8QVBxEhM3FFXAmBw2lEXBFXHESEzMQVcSUEDqcRcUVccRARMhNXxJUQOJxGxBVx xUFEyExcEVdC4HAaEVfEFQcRITNxRVwJgcNpRFwRVxxEhMzEFXElBA6nEXFFXHEQETITV8SVEDic RsQVccVBRMhMXBFXQuBwGhFXxBUHESEzcUVcCYHDaURcEVccRITMxBVxJQQOp9H/n6saq13df6l/ Zv/uh5N30B0MoFtIoUb459SXtO4fJ/KV516/32tX75Nhr13/CXUtVTqrO3SRLTc63W6n+Zi7PPbY xIvPc3iam8EVimvvHsVRXLvRajVqxZszVqpbtAb8/L68vyjLq9SYnb7TRLZQrlTKxdtUxLdr0YrW kObpze0ovaxUG+37wVgyk8vnczfJeNDjMGmUChTLlfFAnd3NLZ3F6Q1GzhPJZOI8EmK1q7eWKOb8 b0+LDlZqDFaXxx8Mn5yEQ36vy2aUPcxSjetNlda47XC5PV6vx727w8pcL1VE+l8d3thEcW2TxWqz 221WC0qVS7Kydi8eDT0MYZQn1xtw6HValMxWLFW7+t/8lYRRt1q1JR0qqc61vDDPHozVjkaxbhQK RxlxlPRmNaf/8ZmXu2xWthqVq9nBfi13v//Qela3WvrzH5rRpZ8egf8BDebicAplbmRzdHJlYW0K ZW5kb2JqCjEwMSAwIG9iagoyNjg0CmVuZG9iago5MCAwIG9iago8PCAvTGVuZ3RoIDkxIDAgUiAv VHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDk0MyAvSGVpZ2h0IDIyMyAvQ29s b3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1ZSAvQml0c1BlckNvbXBvbmVudCA4 IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae3aW1OUZxaGYaE3dJOGbhkaUFGCjAaC ojGC+x2JiluiIDj//4/MRxKjTGrW8VOV6z1IxayTVdeqO91QnjnjESBAgAABAgQIECDwu8CER4BA isD//79Syob2IEDglMDfo23Gk5OTLY8AgSSBpsqmzdPBnsTaarU7nU7XI0AgRaApst1qNcF+2+tJ rO1Od6rXn/YIEIgR6Pd7U93O//R6Umu3Nz2YHY5Go7MeAQIBAk2Mw9mZwXSv2/7287X5cG13+4Ph 3PzC0tI5jwCBDIGlxYX5ueHgdK/Nh2u3P3N2fO7iyurlNY8AgQyBy6sry+fGo0Hv5Pvwnz++Tky0 Or3B2YXl1asbm9eub3kECAQIXL9+bXP9yvcXxqPvppqvw19ybT5cp4fj5bWNrVs7d+7e8wgQCBC4 e/fO9q2t9dXz/5rtd1pffjvc/OQ6NZhbWt24ufPgydNdjwCBDIGnj+9v3/hhZXE03T2V68z8hStb O492X+y9eu0RIBAg8OrV3vNnD29fWzs/N/j6bXii1e7Nji/98NP93Zdv3+3/5hEgECCwv//uzYtn 925eXZ6f+TbXTm+4uLJx+9HzN/sfDg49AgQCBA4OPrx//euDW+sXxzO9zpffNTW/GO4PF7/f3H7y 8t3Hw6NjjwCBAIGjo8MPb188+nnj0nj2dK6jpdXNnad77w8+HX/2CBAIEDg+/vTx3cvHtzdWFv6e 67U7z17tHx59/o9HgECAwOfPRwfv955s/yjXgGtYgUApINeSx5BAkoBck65hFwKlgFxLHkMCSQJy TbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5D AkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEXAqWA XEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBck65h FwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKA XJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LH kECSgFyTrmEXAqWAXEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUAp INeSx5BAkoBck65hFwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr 2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAk INeka9iFQCkg15LHkECSgFyTrmEXAqWAXEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXk MSSQJCDXpGvYhUApINeSx5BAkoBck65hFwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQ Csi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXp GnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEXAqWAXEseQwJJAnJNuoZdCJQCci15DAkk Ccg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBck65hFwKlgFxLHkMCSQJyTbqGXQiUAnIt eQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5DAkkCck26hl0I lAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEXAqWAXEseQwJJAnJN uoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBck65hFwKlgFxLHkMC SQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBc Sx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg15LHkECSgFyTrmEX AqWAXEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvYhUApINeSx5BAkoBc k65hFwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg16Rr2IVAKSDXkseQ QJKAXJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQxJJAkINeka9iFQCkg 15LHkECSgFyTrmEXAqWAXEseQwJJAnJNuoZdCJQCci15DAkkCcg16Rp2IVAKyLXkMSSQJCDXpGvY hUApINeSx5BAkoBck65hFwKlgFxLHkMCSQJyTbqGXQiUAnIteQwJJAnINekadiFQCsi15DEkkCQg 16Rr2IVAKSDXkseQQJKAXJOuYRcCpYBcSx5DAkkCck26hl0IlAJyLXkMCSQJyDXpGnYhUArIteQx JJAkUOa6ufN07/3Bp+PPHgECAQLHx58+vnv5+PbGysJsrzM5ceb3N9Hq9IeL329uP3n57uPh0bFH gECAwNHR4Ye3Lx7d3rg0Pp1rb7i48uPtR8/f7H84OPQIEAgQODj4sP/614e31i+OZ779dG33ZseX 1n96sPvy7fv93zwCBAIE9vffv3nx7N7Nq8vzM1Ptv74MT7anZuYvXNnaebT7Yu/1G48AgQCB16/3 nj97uH1t7fzc4HSug7lzqxs37zx48mz3F48AgQCB3d2nj+/v3PhhZXE03W1NfPlV02SrOz0cL69t 3Ph55849jwCBDIE727e21i9fmJ/td77m2vxquDc4u7h8+erGtetbHgECGQLXN9evrF4Yj777+l34 zJmJ5uO1P3N24fzFldXLa//2CBAIEFhbu7y6snxuPBr0Oq0vv2lqcp2YbHf7g+HceGHpnEeAQIjA 0tLC/Nxw0O82vxf+80fX5q9KNB+v7W5vejA7HI3OegQIZAiMRsOZwXSv2/7rJ9eTv9jUfLy22p3u VK8/7REgkCPQ7011m2/CX78K/9HrSbDtTqfT9QgQSBFoimy3mp9bv34TPsn15AN2YnJysuURIJAk 0FTZtPlHpN/+s/mPHgECeQLfZnrq3/NWtRGBf7DAqTr9gQABAgQIECBAgMA/WOC/IQjM5gplbmRz dHJlYW0KZW5kb2JqCjkxIDAgb2JqCjI0NzEKZW5kb2JqCjEwOCAwIG9iago8PCAvTGVuZ3RoIDEw OSAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAyNzAgL0hlaWdodCAx MDUgL0NvbG9yU3BhY2UKL0RldmljZUdyYXkgL0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21w b25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHtmul248auhU+n27bmiZJI zaJEzbM8dZ/3f7D7bRQpy7GkdnLirPuDXCsduUgCqF0oYAPF//wnvVIEUgRSBFIEUgRSBFIEUgRS BFIEUgRSBFIEUgRSBFIEUgRSBFIEUgRSBFIEUgRSBFIEUgRSBFIE/t8i8O1fs+zf0/T3pvQtuf7e 63/hrUTRv4tIrPVTdvLsH+769jVGmjEy5cs1XZivKbfpncy48NRpSFh8/6Hr+x9fAIfZkPzzpZpO Mzr7gWJ0JtcfTPA3C/4NLO7uHx4e7u++AI7EGlbHUP86TWcYJD+FxXdmd3ev6+7ux3fN8BYeAuM+ k8vnc9mHux//tHfInB+Yc4fncd19naYEgbP/m3Lgz2Y1vVw2Ywt+a4q88eM+my+VK+ViPiPvOBP3 P/+UPZiTycgQUHn4Mk0XTHXKM7kCk9NVKua14Lem+O3b97tMoVxrNOq1Uu4B57gg9+8OmT0gUCgU 8Lx7VqlQ9r5E0wULbZ0zuWK5Vm/4XM2GVynlM/c3/F+vPOTKdb/daTVrxew/6xxAjfRiuVqtlAo4 ajZfrgdfoukjGgaG0G+2Or0+V48ZemUHx8fHbUTvZAo1vzsY9tuNSl7IXXn0bwzbLixUvEazUSvj HrnSV2n6aFysu9HqDUfjaBJF43DQDYDj4e77tUBKnL/LlurtwTga94Na4eHH938OjdjxPL/VDhq1 Uj5fKNfbw6/QdAEMiwDVZmcwns7mi8V8PpuMh10f/7+/mjoV5XLlZm80m0/Ddr1IHL0K3NUbH21x IxL+kK80Wp1u2/fKhUKx2uyNf69JLO1/XRNcQ6o7w8l8uVotl8AxjcJey3PBURre6XADf3y/z1X8 QbRYzsfdRjlrQebyo+6FczPjEfe/GJOzMXgPERo0ut1OUK8UC6VaMJjc1GRAvIk4w/lt0H6d3bn0 U8khW/Law+lyvVmvFvPZdBqNh6BRJlV8NxomOe+Nhpzc56vBcLpaL6N+s8KuEjEQVzp/lL+Nz90e NzPZHskF8bnP5Cv1oNNpE8AKoNG6qSmm7qbqnQ0mORGr/79ZdwkLagBzDb8fLTfbzWo+GY/CcDjo dXxLnJqhzdKJ4V+bn5jaQ77aCmfrzWo6CNhVGTibuFKi0T1qDMpxqNgSjfO2mJVeEIKJVA27G1CN PFE9aPn1KnFDaFzWZHN6p+q9DQAgjJxcMbnf4AEamaLXHs03u916HoX9bqfdbgVNr1LIivmYeScf QbhjiHd3DwVDY7ueETigYLlsVqxNLMUuzDACpeH34yL0mQzjxvJkIvYaDYbnw7h0Qbeq9SY5pVI0 NML5+rIm1XR6H5GS6GS6WesG5kOuY7kxp7zsFhp1G6XRjVa7/W41DbtBs173PK9KZuNlbDRGaFTM pLu/oUQk2FYIhpvFuBd41Uq5XDLWFuNhxB0CVSwxXDA2Jy8ATqPZDOv5Qi7DHpPJmWwuBxEuFIvF QiGfyxdKZNhGXXbkizc1ac68zhul2AaokrmcbohfJ3KdFaet/BEVoUFy6E/X+8N2ybzQn9gPGKYF RigqJq9TaQJDxBEyWWwczbcOw5bPOjbqXhW2pCqOJ6HTzKjm1UG3Wi5KhI0jAV7l1Rv2PJPFcR6Q WiyXK9VqjZWoYUJRz7yh0Q4vapLEN1USCTUWYzMmrdSUzZ/Jxc9uFxGgYclhtjkcdotxt8l85PQq EARGzAihYm4qsLQq1kLdc9pfi90BECdhv9frkQHa7PNizlabOIivQxkIhS2/wfbPKErc3SOh1oBZ dnne4oLoFc/CtfwgaNk2rVcrFQZ8H1asnXJdk4LCm6qTTFFHLUiuKA6XyIW8YNxVLmA7xaGxPRx3 +EaT2QgKCxmSxox8MVOkMBcSn9f0m8Q2Ij02LvePT8Axi8a6RmG/45OZiahYWPb8dm8wDMNhv9tq 1IQS0SZbrJI6+8PRiMcHPSWNIn5RazI4GAyHhPB+J2h4Xr0ZtNtBs3ZTE8CjCh4tVeGIKxySAUhE iuqJslguyqqORH3cI27E4oZ2yuZw3K+nAxIrfiYsFNmSrG9UjO19nyt5QafXDVjrIgRxvDw8vwAH iZmL7DwZEUNKefYRYAQ9CORkQpqC29YrBW2JXLEGzxtNprPZbDohaANHpVzx/O5w7Aan0Qg4mg0f eARjhU3jXdPENmNDVurw6HE0tWsyhiyhLUtELlSanTe5oWzL3Soi3qLo/njcWkAEDoAVGvcQkVaf xe00cA5iHXkEs0ewkXqlVKl3xqvjy89X4Fgvl1C39Xo5g6h7pUKO5Qp6oykYMWnRlwbLkmHjISCc zBewPFEb0byGV/OanVB8B8KzXExhwi0fMPAfceIyuF/VRP+hWGlQIUxmWhBds+m436ozC+qbmEfF cjV8u95Whi3UiADb43G/mSuOKtjIO9go5Sa2T6JBUC3g5/fKxYNoGg07zWoZ/jpeP77++vVy3K2Z 3HK12W7XSLAJ1Hxo+4LJzVgs8w22YK5QReB0sYL0iuZpHdvNutdoDSar3RELcLPpaEBACVQpoKkd 435FE+G2QrkUzRZCd0ZpAc6zsfl4HtfokSxjuc5vb/oG7MvCaH+ywjn2MI6BbTvtFvZ+FVoGUw/b HqUIEbDU6DJHHMCvVaqNTrR+/Plf0Ngw5wlz3+6AY9Rt6qax2/VyPsGVVPaTPXJU5m54JZDE89gL pHRcY757fH5+OmyWAiPwm4G50Axh4I5vXNdUb2HjEnjZeZGs4KeWpFSE0Q/n25Ncqu0qKe93bZss Sw6t3B8Oe1nDXqZyZN9loRQwdoR36qWMui4UatFitZiAfYzG66+fT7slUx6G0VxwwE3bDa8e9MaL 9dYmh98bixJxCER6N2s5QK/b6XTgedAbv6sI9PryBOUZ9dp+o173u6PpcjWP5GkOjQuahjhWo9Uf z1cSOQ6Hw1E0Y8etZmGH0Ea8Cc/ktpQiVG0nZcaFYMpWYUew5vM16XK/XS8mhBvCkPoKhhKlSLdO YUYMrDT7kyVkfNjyqvjGeH18eX0+rCbDbrvVwar1bm/Bp9HE95dbqBm3ILbKyeYaHdQII+KFb/QA dlGtNWF/knRci/9BGSrE2tGMImhiXijfuKQp6reDFjtyzRZdEJJ7vcFouqDEoHgKWC/Fm8Ob3Iry 2i3XcGw0o/08mq62uAery3bBqUhthC+sx6aeylSh4Q+mQgMybmisDs/Px81Ua8TmZ93FxiaDtu+3 hxM8RWh0ICEiKFmCf1OPQLFHXZ9UYhcOXRUXPj6/PG7nYYc9BR/FHZjkZjkZnGb1URNFQa/bC6er HU49j9iR3d5wslCNMSPgVGusFxYmco2VqXC44BOnISLHXRY4qOnx7f1hv9PaySoFSgqYzeodGitX MBga8I3H3WIktyTHqLba7Tcz1jdom29skWT5GE+Dr7GPeQK6RoeoJJIHG8+Rf2wNn572KyM8AGeE Ky7UvIp2ykdNe9wwCgfhZLk7Ph70u9/t9vlzqzsjJoDPgcZJrqPDt8FQ1UMuVT+hz1bdsF0Ou5Wt nlx4vLiBxmjJ0+tp32dD5uIILkt6rUC7WQ6ssMy+09xtilbZjDqkOgKRFVQZNqRmezxuZkOVw9AS aL8imRXIhsZFTZg5HkXzzZH4u+f3EJo1nq228GPRas/D/DO5lAy/8wxcxOAw7khWQ5glF+KQTywj Fl5HQ3l5D4MlxubEJbyOBqzcIUMOiTA0CWYRkUP7joTXwLqt3JjmoRF1Ubx7TV0cf7+KaByJ2LuS 8AyNy5r2xLhoutw9vf58gSxNxxDciWIX+wbfAI3O+EyuK69Pe+LaD8FhnL6uvLbYGBwEA/Lc79Cg hp2HLeamopYSf74BjagXNBqIglARdMixylLlUpmGXkQwgfL6FeV9XaomxHeoynCqtmco0Qh8a57I N9oh0eBPmtgQm+VsOl8fXn79esU56Nkpw64tsQ3bjRpxw5YnlksyuRkyYnhAQ/UedVYNWhcttodH ihYF7HY/IkRfixuycSv3rlLGaAaEhQ1hgWxPnWGMQc3FhdyDUFr1AmjNjjDbb5bt0AHzgAM0XG/A JFFuwYIvoPFBE+EBDrfYHF9//ffnE44ypQyYWj9zNsIERTb1bZyFtxj5OzeRUXFhXIaKRxaWFAzb HbARGjT7cvB+m+8aV3c5hTp7Q0g9oVFJ0DD+5fmdYTSFoq5oqZG0G1CDAfH/AhrmVNvYZyiWL6Bx QdMZGr9eHwkiEypHKiMorHEE8RTQOMn9jGMoblh/T1Rc5zhkho2cYzHudxwaipOVPKc8ySLOEzQS 39BOMd9gKRTPCZuqS9uE+Ln6rUsWi9qjbWggrlnOWUNeruF8wwUJ33zmEhoXNLmdgm+8/Pz5fCDF qv5VvaoqmDJbdSU9M4Vik/sZNMxbcU51oIDDZQYS556t0u2ab6xnKlSUIkl1ipPzkfENxbad/vBI BOQBuJocE6yohOlFVQkew2hG/SKK0m21OipHcC3EuRaBRVHVSZZAkh10AY0Lmgjg2hyz1f7p9eWR nQ3faLdaLf7jGCbui5zL/Rwa2iSW7VhfUgvutaDSERod+KUWRfPTKQ9VENM5JGhYjMKMLqdtcAQI rVIG27QlNsGxLs0RvIsoDw0j07LxjKCaOPpTuuhZivKKap3iyUc0LmqixKOxMllQiVDgwMSgt3Ta uNT/Uj/qPcqfQINdwg6xrmSWtgSsQYEYNNxO6SkMWfYWv/KIdmoLEaSNi8ICjtgBT7c+fxBvBDXR RcTp5imWiuNSgMDeBS7eRNJxXSU1dh37gvLeRuOSJpjuKBxTYOHJyIcSQPO5KmV6Cq5X+dd8Q0Gd 5MrpPB1WGDEz9nuE0QP7UL7dRRxxj3SrdhQ114pu1/4NDbel1CauUnsZdMzVN3pRJKd6TSOlODVB GXH4gLZKCPMXAbeLHaUC4DdofNSEnNGgP1QOhC/GaOgbg7KqIvru6i6f+dzvfYNuj47DKxzP0+Sl 7yKegMWId+UGO13lhhhl0MZT5JZnaByeno9sHIVIkMMLCBtG1OlYVaoSx1ZZbkADa42v8wjUnL4B 8FpLmMfiEg2XeYui7ugKDh9z0QuabPd1OXii3w8yPZoDXo1LR/vyDZXgKv1iuZ9AA9egYaZPD9TO panbE//S2QqVVUxG9Vc07NPMnK0PTy+gYTmlrr6oOoFaIysf4fWq6OmMUePU6k0g6vQhYSIhUb9F e89KZaEbupBHJ6NOC7QTYjWdt0ZJPERxg2w9Wa4WETUsmfKKJgCmEYJfEZjoVffaiONqqHefAw2d BiIklvspNMSM/U6fdi79gXA0nsLmttjLqlSr5FtRBApmI3rL7fHpmVKTSAFDJIrQo3k60iYm1U9m MPGk26M90mp3e/2B2h7kfIHr1bTXCMsmjobugEM9MCLWUjEueYQ2ikODapknF7Rt6PZAgq5o8oEy 7qRAatg36ty7VjxRFDRMSCz3k2jQ+u2FYi1c9NJWEAScUL3Pkip9qi/gWNJypLt1UIdMXYdymbPi 6frw+HhQI1A3XZtBvl3ilKDFxx2Aq27UmiaBhrXKrnxBnLrEYz7/IBEQXMaz2WSoFpudutzRV6LF MJvQtcGKG5oQ2SJtqScLM4/PTe1o3+pIExLL/RQad/gGaNBmpbdIWxHuuFSHg4aPDv0EL/3bjY7v FzCpLXnN2UhbwiEFu1KXmKJErRFQJGjA8fuhiKFalQs2GvI4KrCPAYCHRxmFNIIG66uWeQSbpv2q 8oUWQ1Efh4xHYEi0pdy7qMlojeuLuhKAVmvy+Qn8SI1HCYnlfgIN+3oDG/X1hoHBPxwEuK4zham6 5uOZ6VIXls40d9V11IFKQA9AGMptwNH6s5p1Ps85TNzV10uTMe0j66YpgUPI9DBP60MRWl1VdhCn KXTiY4qq2oWGC0O8Zgex1oD/kyYe11kF7RF6EVpMbFOHPrTWLrfsuOJM7rty5OIfam7oSyKiXbxX rMfNAY0a5zSK+eTKbSNQp69LcOnblz/GE4KunemoOmCj2VGBevc6VBYv18dCfCukIwfAsMaF+ii9 cKxtOYl00EKqZUPqVI6fVLBqQahzXSLwQCqr6prJiA+aAsBQj8RM7A7Yk1zuyySdV1hdxbGTCXFy LwLwbtDxDYrXgKXQwdiQ777Uj0CTDu9U2DZ1Zgb7Jw1wMKierxZFq6KvCtqcIhItBzzQ1dEZBQ3t mrwdn2mcyNai72dH/m8HY0MunucGaw9Pq3Fcq77lDx3xiwPpMFIHu4ijXrigCb5Lj4QjL6u9OfSy EkVGUKTo3FdrWeIgOJH7bt6X/4jpF4yj4dspKAfMOhmHONMpMmrGWaaOMsleUASlc8iNdOnIV5yC E2a7H9ixKUf7VDwyhLSi12zYgauyBP+VPAoK06RUCLB5qBo/rYkrOLQMOt7XgbiOLi5rkomch8Ie QZOF0UUTniJFXT+zwgn5XXP4hI2DQ+Ywsxqz5XtY2eA6RYKDezo+F+HV5wQ6tdaMWZUHzpP1jQHf mTpGjFsLRXUojODSD4cLqUdMR4vwaPA6eQZrPFvAg6Fz/mv7RFW1yoV4CA+9rEkfA5gj4R6w6dj8 kzpnxTu5p0lf/yE4XKmiz1XjySrroym5xxcQXNjLhykPdmYtv1GxZ5+f6BNkd59J6027xwwlUa/Z 8Ht58R074zRJOglP+pbWflIpqRPQG5pOIgVnbD6k3D6qEfSuHH2Tex2F0x2mrPdUTupyVgkLnojx YNZ2Qx8tcclCeytuBAiV05tmoeERSzwJNHnJ3OwFnX47l0GSk+rM0jKchuL2C66Pke81JSZq3vZh UGy/ec07IU7uJ/7VlDHSpiajbK5Jdnaztnt2x4x3M7bX7E33bvymNJrIWOJ7gWfy4vmbsERsYq6z KXbQ5A9s/KDpT8pOa8ViSvCf5Sbyb/7/9CJv63eChdPlZL6ZFt+3B+0f0+nuJ2o0Hg+bxGTckEru 2MuxDv1+e8imchqy5+yfC5ri9xNl52Yk753J/eTP5M13Nrl3T7euiLpy/zR8PksTcbpzReDV4esv nu7w4+rr6Y0UgRSBFIEUgRSBFIEUgRSBFIEUgRSBFIEUgRSBFIEUgRSBFIEUgRSBFIEUgRSBFIG/ jMD/AV9xSJUKZW5kc3RyZWFtCmVuZG9iagoxMDkgMCBvYmoKNTMyNwplbmRvYmoKMTE4IDAgb2Jq Cjw8IC9MZW5ndGggMTE5IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRo IDk0NCAvSGVpZ2h0IDIyMiAvQ29sb3JTcGFjZQovRGV2aWNlR3JheSAvSW50ZXJwb2xhdGUgdHJ1 ZSAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ae3a WVMU5haGUaHphqZBZkTACRHEKKLROBEnFC0GFWQw//+PnG6MU3JO7du36qzvwlQq+2LX2vWkoZNz 5zwCBAgQIECAAAECBHoCfR4BAnkC/+1fT70t+z0CBMIEemX+s9izWBuNge5regQIRAj0emw0+vv/ WWzvo7Ux0GwNDnkECAQJDLaazbNif/6I7evW2hpsd0ZGR897BAiECIyOjnTaQ62BRvcj9kewfX3d XNud8+OT0zMzM7MeAQIBAt0Yp6cmzo+0B3vBfu+1+9NwN9fR8em5+cXLl694BAhECFy+fGlhbmZi dLg18NMHbPfjtTk0MjG7cPX6ys21Wx4BAhECazdXlq8tXpgcbXd/h/32Adv9eG20hsdmF5du3t64 /+DBQ48AgQCBBw/ub9xZu37pwnhn8McHbO/H4aGRyfmltY2HTzafP3/hESAQIPD8+ebTP+7dur4w PTrUbHz7xqnba7N9fubSyvqjzVdvtt+99wgQCBB4t/3m9fPHGzevzI61W99/IO7+ONwcHr9w9dbv m6/f7e7vf/AIEAgQ2N/fff/mz4e3l+Ymhn/ptTU8Mbd0548X27sfDw4/ewQIBAgcHnzce//q8fry /GSn9w3x1/+i0/u6qTNxcXn98ev3Hw6Pjk88AgQCBI6PDj/ubD3dWFmYHOl94fRTr5Pzy3efbO18 Ojo5/eIRIBAgcHpydLD39tm9lcWpf/d6Y+PpG70GXMkKBL4KnPW6vXl/9X/1untwfPrlL48AgQCB L6fHh/t6DbiEFQjUAnqtjUwQSBHQa8ol7EGgFtBrbWSCQIqAXlMuYQ8CtYBeayMTBFIE9JpyCXsQ qAX0WhuZIJAioNeUS9iDQC2g19rIBIEUAb2mXMIeBGoBvdZGJgikCOg15RL2IFAL6LU2MkEgRUCv KZewB4FaQK+1kQkCKQJ6TbmEPQjUAnqtjUwQSBHQa8ol7EGgFtBrbWSCQIqAXlMuYQ8CtYBeayMT BFIE9JpyCXsQqAX0WhuZIJAioNeUS9iDQC2g19rIBIEUAb2mXMIeBGoBvdZGJgikCOg15RL2IFAL 6LU2MkEgRUCvKZewB4FaQK+1kQkCKQJ6TbmEPQjUAnqtjUwQSBHQa8ol7EGgFtBrbWSCQIqAXlMu YQ8CtYBeayMTBFIE9JpyCXsQqAX0WhuZIJAioNeUS9iDQC2g19rIBIEUAb2mXMIeBGoBvdZGJgik COg15RL2IFAL6LU2MkEgRUCvKZewB4FaQK+1kQkCKQJ6TbmEPQjUAnqtjUwQSBHQa8ol7EGgFtBr bWSCQIqAXlMuYQ8CtYBeayMTBFIE9JpyCXsQqAX0WhuZIJAioNeUS9iDQC2g19rIBIEUAb2mXMIe BGoBvdZGJgikCOg15RL2IFAL6LU2MkEgRUCvKZewB4FaQK+1kQkCKQJ6TbmEPQjUAnqtjUwQSBHQ a8ol7EGgFtBrbWSCQIqAXlMuYQ8CtYBeayMTBFIE9JpyCXsQqAX0WhuZIJAioNeUS9iDQC2g19rI BIEUAb2mXMIeBGoBvdZGJgikCOg15RL2IFAL6LU2MkEgRUCvKZewB4FaQK+1kQkCKQJ6TbmEPQjU AnqtjUwQSBHQa8ol7EGgFtBrbWSCQIqAXlMuYQ8CtYBeayMTBFIE9JpyCXsQqAX0WhuZIJAioNeU S9iDQC2g19rIBIEUAb2mXMIeBGoBvdZGJgikCOg15RL2IFAL6LU2MkEgRUCvKZewB4FaQK+1kQkC KQJ6TbmEPQjUAnqtjUwQSBHQa8ol7EGgFtBrbWSCQIqAXlMuYQ8CtYBeayMTBFIE9JpyCXsQqAX0 WhuZIJAioNeUS9iDQC2g19rIBIEUAb2mXMIeBGoBvdZGJgikCOg15RL2IFAL6LU2MkEgRUCvKZew B4FaQK+1kQkCKQJ6TbmEPQjUAnqtjUwQSBHQa8ol7EGgFtBrbWSCQIqAXlMuYQ8CtYBeayMTBFIE 9JpyCXsQqAX0WhuZIJAioNeUS9iDQC2g19rIBIEUAb2mXMIeBGoBvdZGJgikCOg15RL2IFAL6LU2 MkEgRUCvKZewB4FaQK+1kQkCKQJ6TbmEPQjUAnqtjUwQSBHQa8ol7EGgFtBrbWSCQIqAXlMuYQ8C tYBeayMTBFIE9JpyCXsQqAX0WhuZIJAioNeUS9iDQC2g19rIBIEUAb2mXMIeBGoBvdZGJgikCOg1 5RL2IFAL6LU2MkEgRUCvKZewB4FaQK+1kQkCKQJ6TbmEPQjUAnqtjUwQSBHQa8ol7EGgFtBrbWSC QIqAXlMuYQ8CtYBeayMTBFIE9JpyCXsQqAX0WhuZIJAioNeUS9iDQC2g19rIBIEUAb2mXMIeBGoB vdZGJgikCOg15RL2IFAL6LU2MkEgRUCvKZewB4FaQK+1kQkCKQJ6TbmEPQjUAnqtjUwQSBHQa8ol 7EGgFtBrbWSCQIqAXlMuYQ8CtYBeayMTBFIE9JpyCXsQqAX0WhuZIJAioNeUS9iDQC2g19rIBIEU Ab2mXMIeBGoBvdZGJgikCOg15RL2IFAL6LU2MkEgRUCvKZewB4FaQK+1kQkCKQJ6TbmEPQjUAnqt jUwQSBHQa8ol7EGgFtBrbWSCQIqAXlMuYQ8CtYBeayMTBFIE9JpyCXsQqAWqXrd2Ph2dnH7xCBAI EDg9OTrYe7t5f3VxamRwoL/v3Nnr62+0OpMXl+8+2dr5+Pn45NQjQCBA4OT486fdt8/urSz8q9eJ i9fXH796/+Hw89GxR4BAgMDR58OPO1tPNm4sTHZ++XxtDo/PLd1++OLt7odPB4ceAQIBAgefPuy9 e/lofXl+otP6+efhZnts9ura/Wevtnd29/Y9AgQCBPZ2d95tbT74bWlufLjV+P77a19/s31++tKN Ow+fvdx683bbI0AgQODtm62Xm4/url6eHWs3G33fvm/q6x8YHJm8eHV1/fdHT59t/ukRIBAgsLn5 9PGDjbWl+anRoR+9nut9QTx8fmbh2sqt9Y179z0CBCIE7m2s/7a6tDg7Ptz7uunvz9dzfX2N5lBn fObi5WvLN1ZWPQIEIgRWbiwvXZmfnRjpfrx++/X1XLfX7gfs0MjY1Ozc/MLi4iWPAIEAgcXFhfmL s1PjI+3et8PfPl7Pgh1oDQ2Pjo1PTk1NTXsECAQIdGOcnBgb7Qy1Br5/2/T1f3HqfsI2W0Pt4c6I R4BAjEBnuD002Bzo//HT8PdgB5rNVmvQI0AgR6DVbA50f3f96afhv4Pt6+9vNBoDHgECMQLdJBvd D9cfv7ue1dr9o1tw9/V7BAgkCZx1+a3SX/969o/8QYBAkMCvjfo7AgQIECBAgAABAv/HAv8BBpjI 2AplbmRzdHJlYW0KZW5kb2JqCjExOSAwIG9iagoyNTEzCmVuZG9iago3NSAwIG9iago8PCAvTGVu Z3RoIDEyMiAwIFIgL0Z1bmN0aW9uVHlwZSAwIC9CaXRzUGVyU2FtcGxlIDggL1NpemUgWyAxMzY1 IF0gL0RvbWFpbgpbIDAgMSBdIC9SYW5nZSBbIDAgMSAwIDEgMCAxIF0gL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngBlcIHOxthAADgn1aU2pSiZq1SFDVrlQpZkhARMu29995+gJnYe8cm 9m5zvWtyue/uPu/zKsdelaCKsVf06KsC/aIYBZePvpAeeZHjy0ZesM+yEarSkWfpMGzJ8DPySTJs cOhJAlow9AR18Klg8DH/LcWDj/oDj2LAB/EAOm/ggWr/Qx5W1P9A+V7Ur5/bf6/bB1XYdw96J+wF zOm9g91zl417m91DWtBza7z7VkCS332LvOF3k++64SN5XTfws7qu0Z3XWXS5ndekO6656Ctuhy4H Orvjit1O8ZLdrs9qvwRsu2SBMtsuSWqZbQZbtcxWbeZbZrRq9Vu0GS0XFBktF1SbLxjY9OYL7Hl6 M83fzee6TVDTms7AG8/SCFMbz+Cepjac/nrLlIZT3PrTFNyTlHp0cv0J/bqTZGRS3QnJ46Q644l1 x+ja40S6CbXH+EcJtdiaowT8nzVHkONrjuKr/z+Mr6YaV30IWHUYBxpbdRhbdUC/8iC28iAGtiam UhNtuEITTTmqQkO1XBNVvv/vj/J9+JHl+7plwHuRZbgRZXvgpXsRhOGle4S74aWEJbvhJbvf3zKs ZBe7E1ZMNbR4h2bRTig2pGgHuR1SRP9b0bZuIcyt4EKSyq1gwiDlFt3NICVSsfkVeqBi07h8M1B/ I1CuHyDfoC/bCED6yzZA1/1lgH6ydbR03Y+ur3Td4Jqv1KBkzdfgF8kafB/Jmk/B36swvQtWAfNX vUG98legile8xCueUJc9xboehvOWPci75y1TXnIX6X8WLcF3Ey3p5hIvuuUad81dBBcuuhK6CBfx F1yEJHMWPkF3zlnAzjvnILPnnUk6Zc/TF8w7IT8K5uA7CubQ/DlHqrOO/FkHirxZB3x73ixltT0P bcdT22XBts1SA3LVtlwVsQ1XBZWjsuGorI3PWHNIW3Fm9NkzVuQt2TMGpy3ZhKxpS+wH1jR8C9a0 BWvKggnVnDkFnjlljjtpnjn5Hn7GpBn9CbMMXVNixoQpSRPGBPlxEwYyfdwE+S59HPgPTyVn8gpl bmRzdHJlYW0KZW5kb2JqCjEyMiAwIG9iago3ODAKZW5kb2JqCjc5IDAgb2JqCjw8IC9MZW5ndGgg MTIzIDAgUiAvRnVuY3Rpb25UeXBlIDAgL0JpdHNQZXJTYW1wbGUgOCAvU2l6ZSBbIDEzNjUgXSAv RG9tYWluClsgMCAxIF0gL1JhbmdlIFsgMCAxIDAgMSAwIDEgXSAvRmlsdGVyIC9GbGF0ZURlY29k ZSA+PgpzdHJlYW0KeAGVwgc7G2EAAOCfVpTalKJmrVIUNWuVClmSEBEy7b333n6Amdh7xyb2bnO9 a3K57+4+7/Mqx16VoIqxV/ToqwL9ohgFl4++kB55kePLRl6wz7IRqtKRZ+kwbMnwM/JJMmxw6EkC WjD0BHXwqWDwMf8txYOP+gOPYsAH8QA6b+CBav9DHlbU/0D5XtSvn9t/r9sHVdh3D3on7AXM6b2D 3XOXjXub3UNa0HNrvPtWQJLffYu84XeT77rhI3ldN/Czuq7RnddZdLmd16Q7rrnoK26HLgc6u+OK 3U7xkt2uz2q/BGy7ZIEy2y5JapltBlu1zFZt5ltmtGr1W7QZLRcUGS0XVJsvGNj05gvseXozzd/N 57pNUNOazsAbz9IIUxvP4J6mNpz+esuUhlPc+tMU3JOUenRy/Qn9upNkZFLdCcnjpDrjiXXH6Nrj RLoJtcf4Rwm12JqjBPyfNUeQ42uO4qv/P4yvphpXfQhYdRgHGlt1GFt1QL/yILbyIAa2JqZSE224 QhNNOapCQ7VcE1W+/++P8n34keX7umXAe5FluBFle+ClexGE4aV7hLvhpYQlu+Elu9/fMqxkF7sT Vkw1tHiHZtFOKDakaAe5HVJE/1vRtm4hzK3gQpLKrWDCIOUW3c0gJVKx+RV6oGLTuHwzUH8jUK4f IN+gL9sIQPrLNkDX/WWAfrJ1tHTdj66vdN3gmq/UoGTN1+AXyRp8H8maT8HfqzC9C1YB81e9Qb3y V6CKV7zEK55Qlz3Fuh6G85Y9yLvnLVNechfpfxYtwXcTLenmEi+65Rp3zV0EFy66EroIF/EXXIQk cxY+QXfOWcDOO+cgs+edSTplz9MXzDshPwrm4DsK5tD8OUeqs478WQeKvFkHfHveLGW1PQ9tx1Pb ZcG2zVIDctW2XBWxDVcFlaOy4aisjc9Yc0hbcWb02TNW5C3ZMwanLdmErGlL7AfWNHwL1rQFa8qC CdWcOQWeOWWOO2meOfkefsakGf0JswxdU2LGhClJE8YE+XETBjJ93AT5Ln0c+A9PJWfyCmVuZHN0 cmVhbQplbmRvYmoKMTIzIDAgb2JqCjc4MAplbmRvYmoKNzYgMCBvYmoKPDwgL0xlbmd0aCAxMjQg MCBSIC9GdW5jdGlvblR5cGUgMCAvQml0c1BlclNhbXBsZSA4IC9TaXplIFsgMTM2NSBdIC9Eb21h aW4KWyAwIDEgXSAvUmFuZ2UgWyAwIDEgMCAxIDAgMSBdIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+ CnN0cmVhbQp4AZXCBzsbYQAA4J9WlNqUomatUhQ1a5UKWZIQETLtvffefoCZ2HvHJvZuc71rcrnv 7j7v8yrHXpWgirFX9OirAv2iGAWXj76QHnmR48tGXrDPshGq0pFn6TBsyfAz8kkybHDoSQJaMPQE dfCpYPAx/y3Fg4/6A49iwAfxADpv4IFq/0MeVtT/QPle1K+f23+v2wdV2HcPeifsBczpvYPdc5eN e5vdQ1rQc2u8+1ZAkt99i7zhd5PvuuEjeV038LO6rtGd11l0uZ3XpDuuuegrbocuBzq744rdTvGS 3a7Par8EbLtkgTLbLklqmW0GW7XMVm3mW2a0avVbtBktFxQZLRdUmy8Y2PTmC+x5ejPN383nuk1Q 05rOwBvP0ghTG8/gnqY2nP56y5SGU9z60xTck5R6dHL9Cf26k2RkUt0JyeOkOuOJdcfo2uNEugm1 x/hHCbXYmqME/J81R5Dja47iq/8/jK+mGld9CFh1GAcaW3UYW3VAv/IgtvIgBrYmplITbbhCE005 qkJDtVwTVb7/74/yffiR5fu6ZcB7kWW4EWV74KV7EYThpXuEu+GlhCW74SW7398yrGQXuxNWTDW0 eIdm0U4oNqRoB7kdUkT/W9G2biHMreBCksqtYMIg5RbdzSAlUrH5FXqgYtO4fDNQfyNQrh8g36Av 2whA+ss2QNf9ZYB+snW0dN2Prq903eCar9SgZM3X4BfJGnwfyZpPwd+rML0LVgHzV71BvfJXoIpX vMQrnlCXPcW6Hobzlj3Iu+ctU15yF+l/Fi3BdxMt6eYSL7rlGnfNXQQXLroSuggX8RdchCRzFj5B d85ZwM475yCz551JOmXP0xfMOyE/CubgOwrm0Pw5R6qzjvxZB4q8WQd8e94sZbU9D23HU9tlwbbN UgNy1bZcFbENVwWVo7LhqKyNz1hzSFtxZvTZM1bkLdkzBqct2YSsaUvsB9Y0fAvWtAVryoIJ1Zw5 BZ45ZY47aZ45+R5+xqQZ/QmzDF1TYsaEKUkTxgT5cRMGMn3cBPkufRz4D08lZ/IKZW5kc3RyZWFt CmVuZG9iagoxMjQgMCBvYmoKNzgwCmVuZG9iago4MSAwIG9iago8PCAvTGVuZ3RoIDEyNSAwIFIg L0Z1bmN0aW9uVHlwZSAwIC9CaXRzUGVyU2FtcGxlIDggL1NpemUgWyAxMzY1IF0gL0RvbWFpbgpb IDAgMSBdIC9SYW5nZSBbIDAgMSAwIDEgMCAxIF0gL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3Ry ZWFtCngBlcIHOxthAADgn1aU2pSiZq1SFDVrlQpZkhARMu29995+gJnYe8cm9m5zvWtyue/uPu/z KsdelaCKsVf06KsC/aIYBZePvpAeeZHjy0ZesM+yEarSkWfpMGzJ8DPySTJscOhJAlow9AR18Klg 8DH/LcWDj/oDj2LAB/EAOm/ggWr/Qx5W1P9A+V7Ur5/bf6/bB1XYdw96J+wFzOm9g91zl417m91D WtBza7z7VkCS332LvOF3k++64SN5XTfws7qu0Z3XWXS5ndekO6656Ctuhy4HOrvjit1O8ZLdrs9q vwRsu2SBMtsuSWqZbQZbtcxWbeZbZrRq9Vu0GS0XFBktF1SbLxjY9OYL7Hl6M83fzee6TVDTms7A G8/SCFMbz+Cepjac/nrLlIZT3PrTFNyTlHp0cv0J/bqTZGRS3QnJ46Q644l1x+ja40S6CbXH+EcJ tdiaowT8nzVHkONrjuKr/z+Mr6YaV30IWHUYBxpbdRhbdUC/8iC28iAGtiamUhNtuEITTTmqQkO1 XBNVvv/vj/J9+JHl+7plwHuRZbgRZXvgpXsRhOGle4S74aWEJbvhJbvf3zKsZBe7E1ZMNbR4h2bR Tig2pGgHuR1SRP9b0bZuIcyt4EKSyq1gwiDlFt3NICVSsfkVeqBi07h8M1B/I1CuHyDfoC/bCED6 yzZA1/1lgH6ydbR03Y+ur3Td4Jqv1KBkzdfgF8kafB/Jmk/B36swvQtWAfNXvUG98legile8xCue UJc9xboehvOWPci75y1TXnIX6X8WLcF3Ey3p5hIvuuUad81dBBcuuhK6CBfxF1yEJHMWPkF3zlnA zjvnILPnnUk6Zc/TF8w7IT8K5uA7CubQ/DlHqrOO/FkHirxZB3x73ixltT0PbcdT22XBts1SA3LV tlwVsQ1XBZWjsuGorI3PWHNIW3Fm9NkzVuQt2TMGpy3ZhKxpS+wH1jR8C9a0BWvKggnVnDkFnjll jjtpnjn5Hn7GpBn9CbMMXVNixoQpSRPGBPlxEwYyfdwE+S59HPgPTyVn8gplbmRzdHJlYW0KZW5k b2JqCjEyNSAwIG9iago3ODAKZW5kb2JqCjc4IDAgb2JqCjw8IC9MZW5ndGggMTI2IDAgUiAvRnVu Y3Rpb25UeXBlIDAgL0JpdHNQZXJTYW1wbGUgOCAvU2l6ZSBbIDEzNjUgXSAvRG9tYWluClsgMCAx IF0gL1JhbmdlIFsgMCAxIDAgMSAwIDEgXSAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0K eAGVwgc7G2EAAOCfVpTalKJmrVIUNWuVClmSEBEy7b333n6Amdh7xyb2bnO9a3K57+4+7/Mqx16V oIqxV/ToqwL9ohgFl4++kB55kePLRl6wz7IRqtKRZ+kwbMnwM/JJMmxw6EkCWjD0BHXwqWDwMf8t xYOP+gOPYsAH8QA6b+CBav9DHlbU/0D5XtSvn9t/r9sHVdh3D3on7AXM6b2D3XOXjXub3UNa0HNr vPtWQJLffYu84XeT77rhI3ldN/Czuq7RnddZdLmd16Q7rrnoK26HLgc6u+OK3U7xkt2uz2q/BGy7 ZIEy2y5JapltBlu1zFZt5ltmtGr1W7QZLRcUGS0XVJsvGNj05gvseXozzd/N57pNUNOazsAbz9II UxvP4J6mNpz+esuUhlPc+tMU3JOUenRy/Qn9upNkZFLdCcnjpDrjiXXH6NrjRLoJtcf4Rwm12Jqj BPyfNUeQ42uO4qv/P4yvphpXfQhYdRgHGlt1GFt1QL/yILbyIAa2JqZSE224QhNNOapCQ7VcE1W+ /++P8n34keX7umXAe5FluBFle+ClexGE4aV7hLvhpYQlu+Elu9/fMqxkF7sTVkw1tHiHZtFOKDak aAe5HVJE/1vRtm4hzK3gQpLKrWDCIOUW3c0gJVKx+RV6oGLTuHwzUH8jUK4fIN+gL9sIQPrLNkDX /WWAfrJ1tHTdj66vdN3gmq/UoGTN1+AXyRp8H8maT8HfqzC9C1YB81e9Qb3yV6CKV7zEK55Qlz3F uh6G85Y9yLvnLVNechfpfxYtwXcTLenmEi+65Rp3zV0EFy66EroIF/EXXIQkcxY+QXfOWcDOO+cg s+edSTplz9MXzDshPwrm4DsK5tD8OUeqs478WQeKvFkHfHveLGW1PQ9tx1PbZcG2zVIDctW2XBWx DVcFlaOy4aisjc9Yc0hbcWb02TNW5C3ZMwanLdmErGlL7AfWNHwL1rQFa8qCCdWcOQWeOWWOO2me OfkefsakGf0JswxdU2LGhClJE8YE+XETBjJ93AT5Ln0c+A9PJWfyCmVuZHN0cmVhbQplbmRvYmoK MTI2IDAgb2JqCjc4MAplbmRvYmoKODAgMCBvYmoKPDwgL0xlbmd0aCAxMjcgMCBSIC9GdW5jdGlv blR5cGUgMCAvQml0c1BlclNhbXBsZSA4IC9TaXplIFsgMTM2NSBdIC9Eb21haW4KWyAwIDEgXSAv UmFuZ2UgWyAwIDEgMCAxIDAgMSBdIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AZXC BzsbYQAA4J9WlNqUomatUhQ1a5UKWZIQETLtvffefoCZ2HvHJvZuc71rcrnv7j7v8yrHXpWgirFX 9OirAv2iGAWXj76QHnmR48tGXrDPshGq0pFn6TBsyfAz8kkybHDoSQJaMPQEdfCpYPAx/y3Fg4/6 A49iwAfxADpv4IFq/0MeVtT/QPle1K+f23+v2wdV2HcPeifsBczpvYPdc5eNe5vdQ1rQc2u8+1ZA kt99i7zhd5PvuuEjeV038LO6rtGd11l0uZ3XpDuuuegrbocuBzq744rdTvGS3a7Par8EbLtkgTLb LklqmW0GW7XMVm3mW2a0avVbtBktFxQZLRdUmy8Y2PTmC+x5ejPN383nuk1Q05rOwBvP0ghTG8/g nqY2nP56y5SGU9z60xTck5R6dHL9Cf26k2RkUt0JyeOkOuOJdcfo2uNEugm1x/hHCbXYmqME/J81 R5Dja47iq/8/jK+mGld9CFh1GAcaW3UYW3VAv/IgtvIgBrYmplITbbhCE005qkJDtVwTVb7/74/y ffiR5fu6ZcB7kWW4EWV74KV7EYThpXuEu+GlhCW74SW7398yrGQXuxNWTDW0eIdm0U4oNqRoB7kd UkT/W9G2biHMreBCksqtYMIg5RbdzSAlUrH5FXqgYtO4fDNQfyNQrh8g36Av2whA+ss2QNf9ZYB+ snW0dN2Prq903eCar9SgZM3X4BfJGnwfyZpPwd+rML0LVgHzV71BvfJXoIpXvMQrnlCXPcW6Hobz lj3Iu+ctU15yF+l/Fi3BdxMt6eYSL7rlGnfNXQQXLroSuggX8RdchCRzFj5Bd85ZwM475yCz551J OmXP0xfMOyE/CubgOwrm0Pw5R6qzjvxZB4q8WQd8e94sZbU9D23HU9tlwbbNUgNy1bZcFbENVwWV o7LhqKyNz1hzSFtxZvTZM1bkLdkzBqct2YSsaUvsB9Y0fAvWtAVryoIJ1Zw5BZ45ZY47aZ45+R5+ xqQZ/QmzDF1TYsaEKUkTxgT5cRMGMn3cBPkufRz4D08lZ/IKZW5kc3RyZWFtCmVuZG9iagoxMjcg MCBvYmoKNzgwCmVuZG9iago3NyAwIG9iago8PCAvTGVuZ3RoIDEyOCAwIFIgL0Z1bmN0aW9uVHlw ZSAwIC9CaXRzUGVyU2FtcGxlIDggL1NpemUgWyAxMzY1IF0gL0RvbWFpbgpbIDAgMSBdIC9SYW5n ZSBbIDAgMSAwIDEgMCAxIF0gL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBlcIHOxth AADgn1aU2pSiZq1SFDVrlQpZkhARMu29995+gJnYe8cm9m5zvWtyue/uPu/zKsdelaCKsVf06KsC /aIYBZePvpAeeZHjy0ZesM+yEarSkWfpMGzJ8DPySTJscOhJAlow9AR18Klg8DH/LcWDj/oDj2LA B/EAOm/ggWr/Qx5W1P9A+V7Ur5/bf6/bB1XYdw96J+wFzOm9g91zl417m91DWtBza7z7VkCS332L vOF3k++64SN5XTfws7qu0Z3XWXS5ndekO6656Ctuhy4HOrvjit1O8ZLdrs9qvwRsu2SBMtsuSWqZ bQZbtcxWbeZbZrRq9Vu0GS0XFBktF1SbLxjY9OYL7Hl6M83fzee6TVDTms7AG8/SCFMbz+Cepjac /nrLlIZT3PrTFNyTlHp0cv0J/bqTZGRS3QnJ46Q644l1x+ja40S6CbXH+EcJtdiaowT8nzVHkONr juKr/z+Mr6YaV30IWHUYBxpbdRhbdUC/8iC28iAGtiamUhNtuEITTTmqQkO1XBNVvv/vj/J9+JHl +7plwHuRZbgRZXvgpXsRhOGle4S74aWEJbvhJbvf3zKsZBe7E1ZMNbR4h2bRTig2pGgHuR1SRP9b 0bZuIcyt4EKSyq1gwiDlFt3NICVSsfkVeqBi07h8M1B/I1CuHyDfoC/bCED6yzZA1/1lgH6ydbR0 3Y+ur3Td4Jqv1KBkzdfgF8kafB/Jmk/B36swvQtWAfNXvUG98legile8xCueUJc9xboehvOWPci7 5y1TXnIX6X8WLcF3Ey3p5hIvuuUad81dBBcuuhK6CBfxF1yEJHMWPkF3zlnAzjvnILPnnUk6Zc/T F8w7IT8K5uA7CubQ/DlHqrOO/FkHirxZB3x73ixltT0PbcdT22XBts1SA3LVtlwVsQ1XBZWjsuGo rI3PWHNIW3Fm9NkzVuQt2TMGpy3ZhKxpS+wH1jR8C9a0BWvKggnVnDkFnjlljjtpnjn5Hn7GpBn9 CbMMXVNixoQpSRPGBPlxEwYyfdwE+S59HPgPTyVn8gplbmRzdHJlYW0KZW5kb2JqCjEyOCAwIG9i ago3ODAKZW5kb2JqCjEzMCAwIG9iago8PCAvTGVuZ3RoIDEzMSAwIFIgL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngBvVjbbtw2EH3nVzABnOU6kUxS0krqNUjqpK1ToAbUppftk9GgKOIC rr/J/9NP6vAyh9wVvbcCtR+oXZFzPXM4s3fyWt5JLXWt6c82tu0GI3sz1iP9ya7V8u/f5Xv5l7x4 fW/kzb00/v/+hg51Tdx2ixMC333Ed1F4o/uxGRr5EerSN3/ID+dOg3UayBr6v78Rd6TKPRrZNrUJ BllTN307yptb+WqSZJ77p2U11r3u9CAr+jDdyotpaung9EH+KlW3FJWuO6m+WEp6aKX6hB8a/2Ck apdkJ63WrbTjmX9BZ17y1quwVagz/9BIVfOrJ+GV0+QU0KnnUQyL691nOgKxQZ/ARoiYWDof1VAD Y2ETTLFL4c1ekJzf5PStvJx8amcRbPumHEGrLYWwMS6CYjuCb9mfz9llhBIesb289YVz2SYP4cYC fuw11jinQq7t4HPtl8oO0cQuJFk9LOX0Z3CakRqwQUgt4KgtCh7rQdu+aWWS30f5ZGkmfwOnh8u3 fSizTH4O0gidheZIRsRlQPs0wghoiUjIQIl8pHj/EMF4ULhFCDfBmBihkdONTJE346rWne2dA7HK bKqyp4QNqqD1UoeHaq1eLMVuNBbzYIehHjsHxVyNoGJ25cJ5SGntx0gPTd8nvLQBL26pLNFD5xgt ALsTnhrUP0naDtTsEW+ooNp+tUpaIjaPw84eLdbWnaPomZaEoMuvfHFaqd7xQ5Z5SiglBwSF+o1U KBSq8lEqBGvOMbYFTKEWoKZHULfPX93VVIquFmPuZqT0mfeSuFovNIxPermKCDIlDG7qj6i3AI0d Se2qy7I6u1a2ixD3SxbLV2wjNiPwIPHMD+ZOuPOkXEDGdLWVTWsT3APdWbdUtq17f19GuIMkBRfP Drjvku0IzFBpJhUnYX2XCjOAJKMXs8Qjlogc51r/GAkSpQAWDKElYIZ7SaZrHFJwiCvg3Gcvu875 LN9tOAEZe7Hor2mcA38DFkg9oIPN7/2NKhWveyvLtHU7Q3aBDiM+jqXDovg5HcbC2UeHYuOqTuXp tHAPkMpzRocb5Smo6/vJRYsoL3EDVxeSBSCBrAAXvGpdZ0VikCDGGq8sFUddDxbY9vJNzNjbyLtC 4d328f+ls0JULT0hqnln1VDR2Vhx8W4vX7royS2NAXtFndinlWWnPi23dh++aKQotWplFalVy1Wk u/Y75vU5crauQqkWjJCQckFdkeuMpZrdzgSOnVeVGYcUatRCVtAxcRztIwu6LH5e0CdxPqBX1nJA f+P6Sz9EodLAlbPi5JDHchPqaz68Vi761DV841bi9sqtVOCozLlUND6NnyRpM98QXMXoiHCrXzEJ zBECoxgIbC1LBfWn2Q8KYB0fjl9k1MJi0mn4Bk9YJd4wbJ/HSRJB5p3sqsatCJsueE/OrA7JYmsM NdoQ8M2qROm+b9lgcTe7cz+XuZcMgCWI8c+xtODWlz4NVGzYwqMytmhYjQd4dvV4FtmMzLIFYoTo IV0ARmZIAGI+DxfHpdAumabbXfwxdlz8D8vDu72ybCIb+k2o0IMfR7W7zM+6vcfafIwsv1xzMr6P JQwWfsdZRlJRFaAGJAAP80zQ8RIBZx5sjMetH49BxGboa0u/gKWZJaYkDcnj2WtHY8Qgz4hKaImf 1jQ2UxGF+dmhj14Na3VuqvhhvTyP72nZYaMmbjui5Xs4aAKO/hdlz0ESnd4Hks1+L1Mxa/bmINmi CZHm2lNAkjV3Lz3B0+1wMkhckIIH7kdHGtn/G0g8Ep4GrGQgAWx0wEo1nq2VGxQINwyUim4I9zni xgyXb6phJH5P8Ln+FwXkOrYKZW5kc3RyZWFtCmVuZG9iagoxMzEgMCBvYmoKMTM2OQplbmRvYmoK MTI5IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAxMzIgMCBS IC9Db250ZW50cyAxMzAgMCBSIC9NZWRpYUJveApbMCAwIDcyMCA1NDBdID4+CmVuZG9iagoxMzIg MCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAg UiAvQ3MyIDggMCBSID4+IC9Gb250IDw8Ci9UVDQgMTIgMCBSIC9UVDUgMjEgMCBSIC9UVDIgMTAg MCBSIC9UVDcgMjMgMCBSID4+ID4+CmVuZG9iagoxMzQgMCBvYmoKPDwgL0xlbmd0aCAxMzUgMCBS IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AY1STU/DMAy951e83lLQuqRJv44DIcZg QCESB8SpYkJoRSr9/xJOWmegCUEi1Zb9Xvxsd0CLAQoqU3Ryk9ui1qh0kzV0UFiFz1c84QPL81Gj G6HDHTsiFWaG9ZEhYmwfY/PjRlWNqQ32sdwh8obdia+Q+wqkhu7YiYFKeVejtJmqCmWg6yaz6Hqc OZgyZINZ0Nf1WDqXE9zt8Ax5mVLlAtKuU7FQmYG88hENufE2h1yloAQ5p8GhTOYzhLyekTfeWsgq AMjZpiIwGEjMF7gNLlyY5LFgW0bB+dRZMJNg8UPwrS9GgvltlsmNcHwdxJDKhOWtQofUyB03wpl7 xhZzZ0etbn2CqEk7QYVkbqzDkMhNOPLAGpkTM488KS4cpXEb7v+jE4ddGxqoUXWJo5X7Lbr33zeh TNiE+OvX+f5O+wVe+ZtiCmVuZHN0cmVhbQplbmRvYmoKMTM1IDAgb2JqCjMyNQplbmRvYmoKMTMz IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAxMzYgMCBSIC9D b250ZW50cyAxMzQgMCBSIC9NZWRpYUJveApbMCAwIDcyMCA1NDBdID4+CmVuZG9iagoxMzYgMCBv YmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiAv Q3MyIDggMCBSID4+IC9Gb250IDw8Ci9UVDIgMTAgMCBSID4+ID4+CmVuZG9iagoxMzggMCBvYmoK PDwgL0xlbmd0aCAxMzkgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AeVa25Lc NBB911coye6OZ4b1Sr6NTSBASAgQqBBqgIJsnragKCqhKuw35X/ySbQufWRZ8ow3l6fsVs34Ine3 1KdPt9rzSj6Vr6SSqlT0V9VV0/Za7vRQDvQn20bJ//6Uv8l/5cXX11peXUtt/6+v6KG29sNe4gmB ay9wzQuv1W6o+1q+gLpw5W/518ZoqIwGsob+r6/EK1JlDrVs6lJbg5phKHe7ZpBXL+X9vWwaO4C+ upJsVfUgz+lk/1Je7PcNPbj/Sz6TRbsW56psZXFvLemgkcWnfFDbAy2LZk120ndlvmnEmb1Bz3zJ Qx+7oaI4tQe1LEq+dcvdMpqMAnpq68WwuJ05p0cg1ukTGAgRj/jRz1k6rMbDLJWHfmKkV0EYDFth fiT/udx/Lx/urcvTldVm2m5ZK+cC+3WuO+HWs3XrWbxey/0/Tg6Dgl1GWFooeEeA00NbyyB/5+WT pSP5ESSWy6+MAkL0SP4YD95LWNnFeBAJHuQhPDxTcIW66yEQnCbIaQEqGLma8dVu8FFQDxq+0oOL EfN1TnG7aylQJh57E62oDeOMx46IJ3y0XddThE203MxvR7RUVdl6v8VzCd579pOPLQTb3kYKRReC CLCHh30Yj/yHMOZoMutO0UsksLrPscfOwi0FqJwxq2zsYAp6xOeq8ybisRW00aVcIMbrIlwgWlpu 5f5KBjdXDZlIwRP84PmuAt+ps9v9ms6Ky/Va0NftrT8t7NXBfm7pphlzHp3dPjOWmkfdWMiRWkDO lqBKQ07s54X9pDWgK+rMPaztWeVEG0k3mzHx9njGbdOUut6ZWPaYiBm+uEVrypQRGCisaNeXjV/R sI6jcPHimOBuGi5Z8Wm4eC3HwkVQbp2bhOfnMIk0XKKlEZT8loQLMD0Ld1EA5cmYCNsugGbjz+RT k4wpwyIi0vgLrPkZByIiCUHm+VIUGMOWIWXzBVBrMhR3VhsO5zR22UDFRcLl5TS+MRlYxbphOIaw ONxx6TuzIk6GMLyWiyCtNCWQuulmskFLd+NaSIQKBcwI58NpPE02FEuOhX1sF4siHpPCQmJWBwoZ XhuvURRRneIgBLNSf8yzc812KV5TVgWzkDWOLoBIi0EYxWJ5iSB+xlWBjKgy+ZBklBX/3snIaPn4 yAhOVuARHDyxyKNyjoMHIA1kNq0An1hyo2cghQM+IdsVAw42IPK+YCnprdIaRVw7/3QCYA4cyOcR 2zXVqyQLar61iqnsMhne3vrOfFMhRInf1lE09ABvqXYmElLekgXIKQ3blbMwbH94tvTMEfUJhruu 3FVV11GtQVb4OjrUnpi7gj24BHJUvGKhoDy1jqClSp11oNaEjgmb2YTgWHI5m2W3tj4VP7aefEc6 F8FHYeIzCAAdVv1c8orL/7eszfLiUzr0jj5Wm1FXIleb5bWktVkCJ3jvj6fsAd7c/GgvULj9YA+I JAA0DwsR2hmAHg6S6A0uyQHO4MDU78hvSPlgIlw5vLkRuYjLuptU0k5vUutXbV92AxW4qPX9ooXd zeZko2/TopC9l8Ww7c3H5fp8awyka/7W5mQVnW/7bXlysVEUiDTIjz3VFKrm/PzSUORi063ltYh3 KV1dqkH1wfK49ipOS/Jguk1xRVzVNTcgQyYYJrq0VcRkDQoJ/gc0Ui5SwBhnMe9+Efa2rBMFX5B8 NNibOcaP93VvG+xZ8Wmwv9tGjFqkb1n7IE0icWK5VVjEEGfwHYb5OmHkDYxhh02hcZjan4u0JRiC NTtTTYxd7UzjLnZaRZ0G127FDEwo2rrA2W3izBcKv+AWwclxD9/yT9ts7u4QBi07Ub/BSuNz6jLY c8jCAlOHw97xwkVBbQzbfsUIqMXDv1pDqHih+IjUGIqwF+hhVwE9YJshhU1iE6kpEslQLBxrQxWB HcGTgBZeh9RU0naYoap6hkNiT71teGXFv/fwMlqSsizNpRG5Hu9zHF84p9MkwjQr7eqy0kPVpqCn rpcD/cYAiRDuU9L2lA5OfbbpjXMXZpmZ6euyV+2oA5aUEpkmTC7R+2BD4XGPdwjI/LOMAuhiKAHS Ypg555YVRhP93dygkuW+hf1o/4GkAUoLKWdkkw048S5vaaLOhK9yZ9KTT8DKTMW1XUN/zTQJo92I cN7GJgQTmmzhQrXNmz6kXV419CqitcgBNbUwi1J6N9Z2TWNQGvYuo7rpct1frj1Mt4aRyFP3qXx6 QNeOqE26p/Q6ruxbGxHR+vhoeG4AQFyKqQE8dxhwvAx3GCMYuxg9ozyYyZ8AMgTjyips0ZwZoyZi YjqegtNxBeU2TwYb7gQOuJDI5+hhGZCO2OQtOY+YlwWQsVCau3etMG96+e2cQ5TuqyWY9z5FC6Ly qYvNgm8RDApjYWowJHr/ODIkwRi95dLtoE1FHTDm8WzK9bSWRumiqRj/gF22vPj3nQqtloSS3jkV uqJK+cpehsY+wOMCcLbtHK+yN9AxUh2/udG6L+mlPzkw3s0HUnJ7MktFBkbESOM92cZu7C6Ys/yO jjZrp7ThM+/faLy/OWwJETkWw28HdBPemkZvuCtV7syvC3xO5fLodUDYkvfcefHhPfdEy81aDUcm Ed52T7SEztXe0ix1oLidnnAXeAd86QEhMl2rabJe9pMKk4gpK0D1Y2uUcTpbBwpJrZmqHL3KhUDI Yf5bTEQB1PqDNuh1Vvx7pw6j5UNRB1yDhIj19wej38jAEUDVgbI023/yoEGWOdx/ynJA1rnZGmrB 2/WNbSN5yrIUdAqGMn0obk4xn52bfYAdvj3RQyjBNhPGov2z+7UTrB2oJ5Q4ccl7a3GAsA5LT4Ho WfFmfHVYSZrCku0Mgv1j6YyOfJ0H5pLGqOlvRrk0AuYEfab9R9RL2fSu36fyZsBc9ncnGEUBCQfv dFnbn+bltk5x1ufE+mZRYp3RIMLmLMXqws7eTBufp5IUoileo+6D+4mh2bNSbpviVRQHOvnJThok GZgQdRq3dDEms+UHSSKPIgEyEYOi+QLvKsIWCsEHgoeh4P7Qb3R9LGhGLjiQ3DGFR6zcd7BH7zT4 DjRGvxHIVXoJYhJHNpUuu3oY9VG8I0NB+jP332gFR0pScma0eILOtY2ati77rt9RnIUOnKCfpgZ1 269IH4XbN/aTyhc6Vg/tFy3AyID5yEtm2aqhVF0/KrsTuE59f9PlJ6yToeTGYOHT/wGYHVeZCmVu ZHN0cmVhbQplbmRvYmoKMTM5IDAgb2JqCjIzOTgKZW5kb2JqCjEzNyAwIG9iago8PCAvVHlwZSAv UGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgMTQwIDAgUiAvQ29udGVudHMgMTM4IDAgUiAv TWVkaWFCb3gKWzAgMCA3MjAgNTQwXSA+PgplbmRvYmoKMTQwIDAgb2JqCjw8IC9Qcm9jU2V0IFsg L1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgL0NzMiA4IDAgUiA+PiAvRm9u dCA8PAovVFQ0IDEyIDAgUiAvVFQ1IDIxIDAgUiAvVFQyIDEwIDAgUiAvVFQ3IDIzIDAgUiA+PiA+ PgplbmRvYmoKMTQyIDAgb2JqCjw8IC9MZW5ndGggMTQzIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29k ZSA+PgpzdHJlYW0KeAG1WttuHEUQfe+vaKw4O2uz67nuzJBAwBAjYohwtFIEsQHJAiGUIAV/U/4n n8TpS53u2e69hBj7YcYz3VXdVadOVdf4rb7Sb3Wpy2WJn7qp226odF+NyxE/umtL/c/v+qX+W599 fVfp2ztd2d+7W0zqGj/sDWcoPnvNZ154U/ZjMzT6NdWFJ3/qP06MhtpowGrwe3er3kKVua102ywr u6B27JdN34769o0+X2ssz/zi0i/HftWtar3AH+s3+my9bjFx/Yd+pYturhblstPFF3ONm1YXn8lN Y28qXbRzrBPX2lwx4qF9gTlfytBLN1QVx/am0cVSXn3iXhlNRgFmnXoxIq43f2MKxTp9igMp4luZ +rlI56o5WaTK0E+N9DoI48Jm3B/l/2LF1rq4sJN08as8wJAbvX6mn66VQUVq/MpYxlm+dpa3l0U1 eJN3zuTFu7le/wU5+koJbtx44OZgwT0wWY1do518BZf2Xj5W6uUnqDlcfm0UAPRGvkoh4x1J4x8M GZVARu+CzHfGDRFiHnmkeJSpwuNOFyXvsgj0vrMRLb7rRx84zTAuW+V8V40urMxlUVfLVWdi3VlA PPh+YmEb+RkP7hEPvHSr1TAmWvb5UU1wMtXiARg2UdfLzvlxYy+OABQI4NWPxqiIasbn2oIeAcm4 oH8lqPim9K9UcWJnRc7imBldwkcMQhEYPGvoCLrpz3ImYzh7dm51Yc3Rq4NdDPkwSaPXtzoy1Ao0 WvUA/IahajLl9fwIakGDD0GZuMzcXyenC1CMeXA6nC4fnJ2UMso+PK5ASObt4tqs9uBVhqW17bgc xj5FSiBx8hZZ0BtYFbSe8KKwbUmH3fgog31zy6vKalnrZtXmg6QCVdj8s0kTj7FvC6zSUXCULk7n yr4hDDbXrQsBBJ3OXCM+lw0Zd1iWIMyoOdoZhsAJFMKxtIJfgmK2W/m4SIQ8txsDRjk3MbJPLSqX QLaQEPK4JJDg+4iEPA3/VxLKik9JyGvZR0IoQaJkEkgoqyUloe0p5ecra1y4SmjpB4HR9/YGyZmQ IPcIJPhGaCnyUTImS0sGShGvCAoJl0tZ3oSWcmEzNUqSXuoOyaVqkMG3Es6LhUcgwiTSoNIEFpnd khuKuwm5Dc1yaOsh1QVZrgw8LR9ijzA7WM7fDbBYpBYvTZZDBcy8GakNkG3aYdl3q2hjibefiCdp Vonl4EDeMS35akN9TIE6qTa8r6kJN7v3Ww3/a4hmxd97iGa1HBCizDFfeVQmSZhsTouW/k6F4uLD a8aItS8t1QOlBE6qc8cZQSiA7DzjSuWIU1Igb6grjM7UQwZMWBihzX0ySTy3qI/TBl/JwnzimqYN J/iQMi3Noq1JtFgWNXFZzJGim6ZIpdCLfDU5O+WCxhUN9bglqUnRkFBDsixxDHfANdBBbgcq5AWB nS54xJNdBh/SrXQZLSBWE1aiyiTP801QGYrTUpSp4icTM0hdVEo/cF/cOZfBACulZpO6iUMSIMo+ aRwOLcWSchVhrIlmh2RN2QkXJ9ZPNQZLyKqwmB1g6R1YFJoXIZ2gAhKwZHoX+w6ioZpLfMltX0pK p3PSrYBUXMWaNh5kb4SaeF3T6yXfeW+oQkrikm4XOXTYFmMh6bp+T93VrMgnLQeQeR9V5FIxvjvo 2LpHfGg8bGjZVzFOj61TLUnfJLQfNrSEY6uUh3QjDTmpzBx5snRkvIYUkACDMcUY3Y0Qj+hJX4g1 Ul2vdtcMud6CMt0hdhV39Rby4u+7Zoi12PqyU9P6cneXwbQZXxzDzkhEW0A9tZcvlp2qaSkLzFfo mqzSUhbSXSn7BGUzNF0XuKjiUQmmwp9DeKiLb45A+jkmmq4jaadUKNob03WTmj3JX4xegmcXQMkL N4Ze0Dvh9Cx3OjBvFsRpx/a+WI+9YeEmiRXJRwynkFNcL4n7iMoWf0pfSxl0EBS8C7Bz9GzaKRba FRrezdgm7gg9GzRdLp5i9aYBc3LkrtfF6J+M/snF9Xw4wbMIETxk+UIGPZDs6XxrbopPl7423OFT ph6SzzMxk9jemRgNHdo2YrxQfrCaoUhxGue5FK4KpvDEjXzDOUGBuJpjUDL7k5SclmXJnM21yGS5 MkpkkbXPsyKCe6Qs3ER+QmhvnEqrwZzgbTdXTcoIidkc49p+/EGMa8Unp/mUcb2WD0uLpJ9oE1Et lJ7SJiWR6ea+sLABk9DkYlkaUEzLgpCe5JBj61EcVfbBEV1QTmLVJArcVRX0IemOc+IoMbUcwpRg pDwBy4k0+ogaShaVFBzOcXy0KThaGF+Jqj2fE9xKQyns8S+rSAM9cQI1BvtJWCbVYvjwJgqkeqST hZBlgDeMKqLmZS5qHLtVXSchE6FtWnmbT0yh4RzK1sQFfBCpdvbyq1X8jkjXiNmJxOC+TU6heD/Z HvtyWwux1KBznaTyqLMqhOCaYcX7g+rkPeJTQvClwj5C2NJZrbKbSAkhKUiiBOwPS2vJLLDgfsN5 qssmYBzY6mqsu5CAvSlDAq4enF0cn5wDlwsUY3E6HgdkXfvc1GoLycUmD5tsfT0/xwD/h//UcuRe HYEH7Igw1L/xD166cUjr/rmJNszwr+MPNPhivTnqeG/jM++MdkBHt+n6YI2pM0xxJ19mw4fegKMS XyF3wdRLk+Pch8I0K/7eYZrV8tEwdfzBZAQ/2i49KeCQxgUZN5NX2EbwRE6S2dCE78xepy5+A6bs l8pSKIqvhMlJZyLmgMTA3BadG/yqwsE2TaQcLaok48zKzY1HjTLmD9qE7Sj5+sVNZVI1y4St2nfl 0fABEjpulP3nism3MZecBrA3an98Zrf/1jIp6bLVtymD6MByViZ5KLMTSUCbBlHFc3GzeJkOEgvv 2iOt91hq5NyCqFVEchohzyGAkIcDBxnzuf9Ngfmu/gWJmtcGCmVuZHN0cmVhbQplbmRvYmoKMTQz IDAgb2JqCjIxOTAKZW5kb2JqCjE0MSAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBS IC9SZXNvdXJjZXMgMTQ0IDAgUiAvQ29udGVudHMgMTQyIDAgUiAvTWVkaWFCb3gKWzAgMCA3MjAg NTQwXSA+PgplbmRvYmoKMTQ0IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xv clNwYWNlIDw8IC9DczEgNyAwIFIgL0NzMiA4IDAgUiA+PiAvRm9udCA8PAovVFQ0IDEyIDAgUiAv VFQ1IDIxIDAgUiAvVFQyIDEwIDAgUiAvVFQ3IDIzIDAgUiA+PiA+PgplbmRvYmoKMTQ2IDAgb2Jq Cjw8IC9MZW5ndGggMTQ3IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAG1V9tu 1DAQffdXTIXKZgsNiZ1sNlyrAkKigFoUCQEqCFYghChS6TfxP3wS48scu3G623LZlTbZeHzGPnNm PDmlIzqliqqy4o82ummXNXV1X/b8obap6McnekXf6dbDs5pWZ1S779mKJ7UmmJ1ghsKzb3gWwE3V 9WZp6BvcxSdf6POO9aCtB14Nf89W6pRd2duaGlPWbkFN35Wma3pandD+QLw8++VLV/bdol1o2uU/ wwndGoaGJw6f6S0V7VztVmVLxf058U1DxW25Me6mpqKZ8zr5qu2VLa67AZ6zJ6YH3lQV2+7GUFHK 0JYfsp6sA551I8AIXGf/8xTAen8KhoB4IlPvCTpWjcmCKqY3LbqOYFjYDPsD/jsHq6n44CZR8V4e sMkxDU/p8aCsKnLya8uMZ1575t1ll3895a2nvPg5p+Er49CREt14e9bNpYE71mTdt4Y8vuKQdgGf VxrwM9VcHl9bByx6i6/GkhkcKRwwoboCp6AUyoAgvLEqZpFKl2BCZdcHHZtlByrr3qvcXna1KdtF ZFOxgItf53brsnCCzQ3YHLt2sVj2wUXY8NUI3eBC67INhNpdZJwiOd4cOXY52w5Dmjx3DzjtniVi 5Exik0C3iskL3nEzCgC5APjpdwUZyfNRqoFkj4RY/iPSNoweZSY2mQxULBD5KiAVAG0URtuXjfI5 tk4YtrJdWRiT2CNhBO1dQhhJfY7CsC5CiYjLHwnj4vr8J8JIqnrQw9qQIBJTwsiKt3JnwRphZENy jkAMwY+KpR/6uhMOhVwmmP0gy4c9J19OlWoRkmfH2fChg1kVNoftbhSe0f9PeJPY/1Z41sWVhff2 cO4jjNKEug/i0CpIqDEyLj9KahWKVnLeAwbRyvAQ620X4uTwgUs0ByIzAUF1k0ZDBnTYYa6xGeQC +ApWuIGR95jIuJqJD8yf7Uu1zYbQxIC1uxByDvQ69CbYVkSGswp3xiHxWQFscS80AeeFWyBTKyMM Epqecyd1XdWlJlM1SArXIrc0rCgWNj6w+c+4d2jv3zYM75tJ/r2+d7BdXtvamqspT6idejkl4bwn CKVfJR3Qxp5gGnuUgX/XE0y7GJX+rCd4mdUuOWkRXYkUlBjqp4r99zjcBw6VqR/PoeKRG+L2F0OS IdCIoKFOQ595Wc0ag6QIQI2JK/9yMTu2+uaKjU2K4JME8pUJi4Bp1H3mPCk8Y+cKnWzsai5iNnmz ES7ENDC79iUILEkosX8sCuXl2JYnT8RUcvg01C2nYVbc8+RT/K4XC4UsPRIHr7jBymR/QQSqiNUN 2wEQTgsUNVR3IAtgpi5wEKhMlJjHGp6kM1KXaZmxmowCKFmW5d8ck3MKa5gg4JrLHW49wMRjEVNy LoACWIEm7B1DU+GyL+ucu9g7pmNfcBFZ9omFHA6m8ZVYtMie1wjN1BcJLatcE8en+BDa8zd4P5LU COGP2zlwghAIjhQHWCTUWLI4IlegBkE4GFXJpKDC0zm6jn4D4/BZZAplbmRzdHJlYW0KZW5kb2Jq CjE0NyAwIG9iagoxMTI5CmVuZG9iagoxNDUgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAz IDAgUiAvUmVzb3VyY2VzIDE0OCAwIFIgL0NvbnRlbnRzIDE0NiAwIFIgL01lZGlhQm94ClswIDAg NzIwIDU0MF0gPj4KZW5kb2JqCjE0OCAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAv Q29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSIC9DczIgOCAwIFIgPj4gL0ZvbnQgPDwKL1RUNCAxMiAw IFIgL1RUNSAyMSAwIFIgL1RUNyAyMyAwIFIgPj4gPj4KZW5kb2JqCjE1MSAwIG9iago8PCAvTGVu Z3RoIDE1MiAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBtVjbbhxFEH3vr6hE xDPrsOOenjvkggwIKQaEpZEgsYGHFRGK4kiOv4n/4ZOovtTpnsvuGivxSp6ene6qrlOnTtfsLV3S LWnSheY/U5m66UvqyqEY+I+aWtPHv+hX+kBn396VtLuj0n3udryoqcK0G6xQ+O49vgvGK90NVV/R e7iL3/xNb0+tB2M98G74c7dTt+zKDkuqq6J0G6qHrqi6eqDdDZ2PxNuzH750xdC1TWtoyzfjDZ2N Y80Lx7d0RXmzUVtdNJS/2BAPasq/kkHlBiXl9Yb3yVdjrzzjxD3gNd/I1As/VeVP3KCivJBHj/wj 68k64FVPgxkx19l7XgKz3p/CRJj4QZY+F+vYNRaLVZn6pbVuojFsLEN8sP+HM2so37lFlP+5od9p fEXfj44MezFXc8xb0xbMmTrB3HjMbVTju/0WS4Y4mDM+he6y5f8+d02w80+0IwT085mAa/RYNdwx ucuhqSja74J9RkX2Oaff/e0b64CrJ7Gfcm/GCCFayKpaMi5rA3l4d2uZ6YZQDVXfMVV9WsrB14q9 bE1VNK2aQvnvJFRXyytQHrHN+DZt2w9TF/8PzSMujCmagGYSRQT0CuWQYaRPpe7uBVmgHlcqO6po 3FFErzdFX+mmDxEGPgZes5b0X1xvzh+zO9aKa86dsgPt73uuS3u7vbYFcDh1zfD5Urdq+9OmLnHh UVQTFGdJXKB4+fjklGXUYuX+X+fu4r/iG8VPvnsQhKVui6bXbcyfmpwF0MGrX0KVQbNHRyIWaczB MeGFVsUn0FVwEOcEBjgnRK4z0etn7kDiUwaejvK2Mp+PL6u2Py1fVl3MWBIEK5b6M5cQhklnGkgB XiCPXJzL/Kcb5Q5xGMDqh2b9cDEn0a2KSjm0xaBrEZUQ6ExUtvZ4Z94/+c1fg8gMx8rAOg+KFmXM sI6ZMhbBtCECHOgo0DE8ctTkbWQJmr4lwioArn3jEdsdTHkdOhKdnGUMzcSuzjBdKkQK5Gu7nCsR OT6VFk7LVKxFkj1L1jJV6rIwVOna1ZDizjEixccl38xbRvEiG8rkCyAmkiCd3eQM8qFCAMBZMSfW 9IWjrM26CzBtKoEyIkXsYgZPeJDEzeppj3Zu5KVTsHTY3ynMmq5Zp6CSnjxpio7YnslHcNHx1rgn t7p3j77riItj8nGfWv/Z4c+wo4NgkfbiITkCyDgowEqcD8iVdHey+ER4CwokGbed4eGMZ6BQ2IXK 4Qq7gGkMxLvwBGswQJnDAWJ5JZDIaokpluvctcqTIpRliS8bKHPciwLlC2WJ+/XQA/IDIoT3JNme +A0VqnKpTHkgXth6UixcJr5YvEiYxouEfb2cicTifEIcehkrBBUAIyhuGt3pJPvSAA9TNBCOCMCQ xIFAz1IZmZMKNveEHYusKlcOEnmbOKwR6Xv7qkas2t6jEcffzZKfBqbbX7wMzTRiofO213TJAEwP q3L3kqcWPxZYXd+bEHgSIkhiO7snFgacNXOKLzf75lIOEmlrf3Jf1Cr/0Q34hR+rwDdxLPYhgvAM GosqwkjsyBAHSAstQV2IBx+iiqFBsy4kgAOIoeaT30bsTzvcIkoo8BjVCsG8XCCBRzJbQaSwDUQF dIAfg3FASWy7sWjM1tsNWJQwAAucSgLwEoFMxCAQPJ4JpcRumJH8iIXwZKqkarYk4U8atrr8D+2A 0VsKZW5kc3RyZWFtCmVuZG9iagoxNTIgMCBvYmoKMTI3MAplbmRvYmoKMTQ5IDAgb2JqCjw8IC9U eXBlIC9QYWdlIC9QYXJlbnQgMTUwIDAgUiAvUmVzb3VyY2VzIDE1MyAwIFIgL0NvbnRlbnRzIDE1 MSAwIFIgL01lZGlhQm94ClswIDAgNzIwIDU0MF0gPj4KZW5kb2JqCjE1MyAwIG9iago8PCAvUHJv Y1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSIC9DczIgOCAwIFIg Pj4gL0ZvbnQgPDwKL1RUNCAxMiAwIFIgL1RUMiAxMCAwIFIgL1RUNSAyMSAwIFIgL1RUNyAyMyAw IFIgPj4gPj4KZW5kb2JqCjMgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9QYXJlbnQgMTU0IDAgUiAv Q291bnQgOCAvS2lkcyBbIDIgMCBSIDE3IDAgUiAyNCAwIFIgMTI5IDAgUgoxMzMgMCBSIDEzNyAw IFIgMTQxIDAgUiAxNDUgMCBSIF0gPj4KZW5kb2JqCjE1MCAwIG9iago8PCAvVHlwZSAvUGFnZXMg L1BhcmVudCAxNTQgMCBSIC9Db3VudCAxIC9LaWRzIFsgMTQ5IDAgUiBdID4+CmVuZG9iagoxNTQg MCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMCAwIDcyMCA1NDBdIC9Db3VudCA5IC9L aWRzIFsgMyAwIFIgMTUwIDAgUiBdID4+CmVuZG9iagoxNTUgMCBvYmoKPDwgL1R5cGUgL0NhdGFs b2cgL1BhZ2VzIDE1NCAwIFIgL1ZlcnNpb24gLzEuNCA+PgplbmRvYmoKMTAgMCBvYmoKPDwgL1R5 cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvU1hVRlRIK0NhbGlicmktQm9s ZCAvRm9udERlc2NyaXB0b3IKMTU2IDAgUiAvVG9Vbmljb2RlIDE1NyAwIFIgL0ZpcnN0Q2hhciAz MyAvTGFzdENoYXIgODggL1dpZHRocyBbIDU2MyA1MDMgNTM3CjUzNyAyNDYgMzU1IDgxMyA1Mzcg MzQ3IDM5OSAyMjYgMzE2IDUzOCA0NzMgNTM3IDQxOCA1MzcgNTg1IDUyMCA2MDYgNjU5IDYzNwo2 MzAgNDk0IDUzNyA2MzYgMzA2IDQ3MyA1MDcgNTA3IDQzOCA0MzAgNTMyIDUzNyA2MDEgNDc0IDQ3 NCAyNDYgNTYxIDUyOSA1NDcKNjUzIDQyMyAyNjcgNDg4IDMxMiA0OTUgNjc2IDU5MSA2ODYgODc0 IDMxMiA0ODAgNDU5IDU1NCAzOTcgXSA+PgplbmRvYmoKMTU3IDAgb2JqCjw8IC9MZW5ndGggMTU4 IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAFdlM1um0AUhfc8xSzTReQxA3Ys IaQqVSQv+qO6fQBgBgepxgjjhd++37mxUjWLz/Lh3jtzDjCsnvdf9uOwuNWP+dwd0uL6YYxzupyv c5dcm47DmK1zF4duuSu71p2aKVsxfLhdlnTaj/3ZVVXm3OonI5dlvrmHz/Hcpk+69n2OaR7Go3v4 /XywK4frNP1JpzQuzmd17WLqWe5rM31rTsmtbPRxH6kPy+2RqX8dv25TcjhiYv1mqTvHdJmaLs3N eExZ5X1dvbzUWRrjh9J9oO2712bOqrytafY7x0/kJ/f8NN4m7z0fJoJN5Gpuosv9+r/mYvdmqO3v TvJ1XQnvy7xmvxwJ3m9KyYAE77dryQIJSKuWSKB5p+oGCVRtqS3yyapR1R0SqBaSDRKQQbJDAktt JCMSkL1kQgImrbmvq8AdpKqNAvYFS5G1CvgVNMtVwK/wvlCEgF+BTJL4FcitJJ4FUiYD9gUb2Sz2 g0XYWBW/wTxv5TngV3gfzBV+g3nGKlV5Bh6hqgX2BVIBsWbgWc0FT0Cw75MkaUTf8t4gSSOoynNB GkF85S1II6h2kqQpLAILIrEvCNhK8gQE++qBcs2garOE44+abWXCFRaQ7WgmnCCCmSRcYQFL3Rxy GMwqYElAwUa6V7xrBlI3lqdq0KxXhQUMVta+WDNIJM8sYJBX+5YEFNwcW4qspeXdNvdT8vam66jp k/B+hLvrPHN67bthB1sHdhjT+6dlOk86oMZfklomvQplbmRzdHJlYW0KZW5kb2JqCjE1OCAwIG9i ago1NjUKZW5kb2JqCjE1NiAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1l IC9TWFVGVEgrQ2FsaWJyaS1Cb2xkIC9GbGFncyA0IC9Gb250QkJveApbLTUxOSAtMzA2IDEyNDAg OTcxXSAvSXRhbGljQW5nbGUgMCAvQXNjZW50IDk1MiAvRGVzY2VudCAtMjY5IC9DYXBIZWlnaHQg NjMyCi9TdGVtViAwIC9YSGVpZ2h0IDQ2OSAvQXZnV2lkdGggNTM2IC9NYXhXaWR0aCAxMzI4IC9G b250RmlsZTIgMTU5IDAgUiA+PgplbmRvYmoKMTU5IDAgb2JqCjw8IC9MZW5ndGggMTYwIDAgUiAv TGVuZ3RoMSAyNjAxMiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHlfXlgVNX1/73v vZnJ7Ps+ycxktiSTzGRfICRDSEIWAlk1AQIJmyAqa0RQFBfUoqgV9w3rVi0qw7AYhCpVqrWKbS1f 17q19lu1plqrtYKZ/M59ZyYE0Lbftr/f948fcObz7n333XfvOeeee8+59+na1UOLiZJsIjwpXHju 4Eoi/gl+A3D1wvPXejBt+YIQacaSlWedi2kX3Jcbzzpn/RJMhyA95YKliwcXYZqw58uXQgamaSmg f+m5ay/AdFAH+Mk5Kxam7oeugPQF5w5ekHo/+Q2kPecNnrsYyy9eC5izcvXi1H3aS4j5Lnav6YV3 XhXIysGFi1cPnnfWYkV1YWFNdWNjjWLxeYsIhQKTqYfoyI+JjHCAUTJAiGohnUoEuMvuS+4ZLv5i uWK+tvpLYs+ADEIO/PGilxg+f9XD1xx/c3Sr/BPZT6GsHGrAP/Cc7J7RNwlR3Hv8zWNXyj8Ra0rd FGHyLjk/zH2dyMp0D3N/S2SFAb5KZOUD/BXhS4Qv8N5fMPU5wp8RPkP4FOFPWHIE4RPM/CPCxwgf IXyI8AeE/0b4PcIHiSw5NOJ3mPotwvuJTANkvpfItAO8m8iMAryD8DbCbxDewiJvYuoNhNcRXkN4 FeG/EI4i/BrhFYRfIfwS4RcIL2MjjiC8hPAiws/xtS9gyZ8hPI/wHMJPEQ4jPIvwDMJPEA4hPI11 PoXwY8w8iHAA4UmE/QjDCE8g7EPYi7AHYTdCAmFXwlUMHIwj7Ey4SiD1OMJjCI8i7ED4UcJVBEUe QXgYn/shwkMIDyI8gHA/wn34+A8Q7kXYjnAPwt0Id2HVdyLcgY/fjnAbwq0ItyDcjM/dhLAN4UaE 7yPcgHA9wnVY9VZ8/FqEaxC2IHwP4Wp84CqEKxE2I1yBcDnCZQlnKfDlUoRNCJcgXIywEeEihAsR NiCsR7gAYR3C+QhDCGsR1iCsRliFsBJhRcJRBo04D+FchHMQliOcjbAMYSnCWQhLEBYjLEJYiLAA YRBhAGE+wjyEfoS5CHMQZiP0JewV0LJehDMRzkDoQehG6ELoROhAaEeYhTAToQ1hBkIrQgtCM0IT wnSERoQGhHqEaQh1CFMRYgi1CDUIUxCqESYjTEKoStiqoH+VCBUI5QhlCKUIJQjFCEUIhSLwNGGL QC1RzIwgFCDkI4QR8hByEXIQQghBhEDCOhkq8yP4ElY20LMT1kkAXsz0ILgRshAyEVwITgQHgh3B hmBFsCCY8Q0mfIMRMw0IegQdghZBg6BGUCEoERQIcqwzA0GGmVIECYKAwCNwCBSBiEDHEJIIowjf IBxHOIbwNcLfEL4SX0v/KvaIfomZXyD8BeFzhD8jfIbwKcKfEEYQPkH4I8LHCB8hfIjwB3zffycs Pvcw/T3CBwkLjBz6O4TfJiyVkHof4b2EZRqk3k1Y6gHeQXgb4TcJSwNkvpWwNAK8ifAGwutY9WsI r2Jl/4WVHUX4NcIrWNmv8LlfIvwC4WWEIwgvIbyIz/0cq34B4WfY+OcRnsP3/TRhqYOWHcYHnsUX PYOt/glWdgjhaYSnEH6McBDhAMKTWPV+rHoYq34Cq96HsBdhD75oN0ICYRe+No6wE+FxrPoxhEcR diD8COGRhBmsPn04YZ4K8EOEhxLmNkg9mDDPBHggYZ4FcH/C3AlwX8IcA/gBFrkXi2zHIvdgkbvx 3l1Y8k5M3YElb0e4DR+4FeGWhLkd6rwZH78JYRvCjdik72PJG7Dk9QjXJcwd8NxWLHktwjUIWxKm Xrj3vYSpD+DqhGkuwFUJUz/AlQlTC8DmhGkOwBV473IseRkWuTS2E4p+pm1wf6ppcr+nmul+Bugn QIeAnlae4U4A7QKKA+0EehzoMaBHgXYA/QjoEaCHgX4I9BDQg0APAN0PdB/QD4DuBdoOdI9iqfsO oNuBbgO6FegWoJuBbgLaBnQj0PeBbpAvdV8PdB3QVqBrgabKuW+4Y+QM4uaOAy4lbnpJwggmk16c MLABuBZhTULPtHY1wiqElQgrEM5DOBfhHITlCGcjVCNMTuhYZZMQqhAqESoQyhHKEEoRShCKE8Dg YVqEUIhgQNAj6BC0CBoEdQKEMkxVCEoEBYIcIQNBllAzUUtjcwD/BDQC9AnQH4E+BvoIxPku0DtA bwP9BugtoDeB3gCxvA70GtBTQD8GOgh0AOhJoLtBFHcBDdNNyOkNCT0bHOuRORcgrEM4H2EIYRpC HfJhKkIMoRahBmEKdtmMYEIwMtjP8zyXiLkfeIrnyB6gw0A8T7AtFyJ0odQ7sWUdCO0IsxBmIrQh zEBoRWhBaEZoQpiO0IjQgFCPkI3gxcZ7ENwIWQiZCC4EJ4IDwY5gw25aESyxO6G7o0DfAB0HOgb0 NejA34C+Avor0JdAXwD9BaT6OdCfgf4A9N9Avwf6AOh3QL8Feh+kewToJaAXgX4O9ALQz4CeB3oO 6KdAh4GeBRoGegIkvg9oL9AeoN1AdzLpc6PI440IFyEsS+hhKUSXIpyFbFmCsBhhEcJChAUIgwgD CPMR5iH0I8xFmIMwG6EPoRfhTIQzEHoQuhGiCBFkdQFCPkIYIQ8hFyEHIYQQRAigbPwIPgQJgoDA I3AIFEckid0HQhoDSgJ9CIx9Fei/gI4C/RroFaBfAf0S6BdALwOj9wNt5gPuK/iI+3IacV/WtKnn 0h2bei5p2thz8Y6NPcqNkze2buSVG50AF27csfGtjdKLmjb0XLhjQ4+wwbSBU6xvWtdzwY51Pcp1 VHV+01BP99AHQ18M8aah7qFFQ2uHbho6ChmyB4b2DB0e4ofHDsUMQ5WTGzcN3TDEmeA+R4aolmV7 h5SaxrVNq3vW7FjdI6wuXc1N/mI1fW815QpX0/bVA6s5KLV7tT+nkZUuW21xNOpWF66OreZXNa3o WbljRc+sFStWXLJi+4qnV0guWXH9Cm4nXHGxFXJ143lN5/a8ey4lB7kxogM6xI0leMWKA1wSoh6f csnYGF0ODDgbGLEsclbP0h1n9SyJLOpZvGNRz8LIgp7ByEDP/Eh/z7wd/T1zI7N75uyY3dMX6e05 E8qfEenu6dnR3dMV6ejp3NHRMysys2cm5LdFWntm7GjtaYk09TTvaOppb6LTI409DXy5G2YQkgX/ VmZtyvosS1AOZK7M5FZmvpf5WSa/0vWZi7vESbWOSxzXO3gt/HD4Y3fbr7dvt++0S7TiBa9aadhk 4FbqN+m5Qn1M/0v9e3qB6O/Vc9rrtdu1O7X8LO187afaMa2wU0t3ap7W/ELDz9LM16zQ8FoNS/O6 mCZS1KhVu9Wx6VE1Xx1V16pnqfnr1TSmjhQ3xtT+UGOtapZqvorfrqIxVTC38VPFmIKLKeDGp/Ix OTcmp4SnHgpxKB0An8FkRM3uxmFKdluohA7TG3Z1d4XDrcOysc7WeEb7nDi9Oh7oYr+xjtlx6dVx 0jN7Tu8uSq/r20W5ad1xU2vHbExv3rqV1GW2xjO7euP3Zva1xjfBRYxdjMEFydxlIXV94Xlrhtas WRteE4YfoHlrIGftEPwTgcIvXA/BD7siUCT8HX9YCbgJpcVCa4bmD0EdUBiyWe1DcMESrMh3VPH/ Npu17X/tD/1fe/P/9y+2zZ/HoreEJLdNCNheSi4ld5EdZC95kvyE/Jz8mvyFKiBWvJk8TX5HPiaf k+MwTGXUTF00d8Jz/+Zl8nLJuUTNHyJSYiVk7NjYR8lHxj6CoLRmQs42SFmF4ImcMcPYyKl5yW3J 4eTLUiXRic/quBehts/oyNgxrhae1I2VszR3FbsW3/SZ7J7kzuT2kzqwkqwmQ+QCsp5sIBeSjeRi cgm5nFxJriJXk+8BLy6B62vItWQruY5cT24g3yc3km3kJnIzuYXcSm4jt5M7yJ3Ax7vJPWR76h5L 3wN/bxHvsjv3kYfII+RRwPvJA+RB8kPyMKR/BNx/lDwOeZiD6ccg517yA8h9CMqxUo+Sx8hO+Bsn u0iC7CZ7QGaYTqeGySGyjzxBhsl+kOYBchCi/0+BHA+BZJ8R81hOOv3dJbH8s+Qw+Sl5jjxPfkZe AM14kbxEjpCXyS/Iv3Lnp+O1sBp+SX5FXgFdO0r+i7xKXiNvkLfIO+Rd8h75LWjdJ6fdfx1KvAll 3k6Veh9K/Z58BCVHoCasB8v8Bup4n3wo1nAU6n6PfEAzyJeUI8fJGFwx6d0iSuh2UY5MeneA3B4Q +czksRPSTELIdSabx4Dnj4F8mWTY9R0paTwOZXcBX9OcZlw+nTcvp2SF/D4IZRgvGD+Rm78EDqPM WD1PjXP8RZFPCVGiz4zL4oQUGA8Z/14jae78ZgIPf0/+W+QM4+7rIu9+M4F7jMsfAAeZFFgdJ/P2 t/AsSoc9y3jOeJp+ht17E9IfgXX4BDjN8I+iJP5I/jB+/YfU/RHyJ/Ip+VL8/Yz8GezJX8gXkP4r 5HwGqU/h9+TcU3O+Il+Rv5GvyTGQ4DdkdEJq4jW7M0qSIGNCKeUoT5Inrk7ksjtUgCWGFGxaBpVT BVVRNdVQLSxFZKfcUY7f0Z9258RTJ+7JxXoM1EhNYC+t1EYd1Al2M5NmUTf10mx64p59/I4H7vio nwZSz1nEJ+3jz7phiWRN1cLK5tJCug5+wzRCo3BdREtpGa2gVZBTAOliSE+Ce4Ui1pF2soCcQ45J PuRegnaZwKrsijXOn9c/d87svt6e7q7OjvZZM9tmtLY0N01vbKifVjc1VlszpXrypKrKivKyaKQg PycY8Puy3TaTXqdVKxXyDJlUIvAcJfkNvsYBTzw4EBeCvqamApb2DULG4ISMgbgHshpPLhP3sOcG 4dZJJWNQcskpJWNYMjZekuo81aS6IN/T4PPEj9T7PMN0dkcvXG+t9/V54iPidZt4LQTFhBoSXi88 4WmwLa33xOmApyHeeP7SLQ0D9QX5dJdSMc03bbGiIJ/sUijhUglX8Rzfyl00p4aKF1xOw6RdHMlQ s9fG+UDD4KJ4e0dvQ73T6+0T88g0sa64dFpcJtblWRaHNpNrPLvyD225dlhHFgyEVYt8iwbn9sb5 QXhoC9+wZctVcX04nuurj+du+MAGDFwcz/fVN8TDPmhYa+f4C2hcEtD5PFu+JNB438gn0OoJOYOp HGlA9yVhN1kXx9kUp4PpawJtgxZC/7xe1pZrhmNkASTimzp6Me0hC5wJEouG++LcALtzKH3H3MPu bErfGX98wAecbfA1DKT+nb/UFt+0wFOQD5IV/wXiQgDue+J8cGDBwqUMBxdv8dVDD4GXpBtW5/Vw ERtMMbNhV2EUyg8OQCeWMTZ09MajvpVxk68OuQ0ZUEmgYVlXr/gI5jbETdPiZGBh6ql4tAGeBRVp 2MIEwxrI6vJ19O4nJWPv7Sr1OHeXkFLSx9oRt0wDoQQbtvQuWhJ3DzgXgX4u8fQ6vfFYH7Cvz9e7 uI9JyaeL574Hr4M/IEDxKejbKaXThaHbcVkgw9PLOfk+Ji3I8DTCj6+uGm7o4lJMMonWVXt6qZOk i8FbUiXY1Un1QIIPTGuChwHh0WlNTi8ot/jn7zTJiR2AZsQzxtskQCMkJ9qE7/nOpmFp1qBcT8Pi +gkNPKlSSIgNTNX27e3kGC9SzIAmZDBxNrE+FORzcO2B2xlxDvopZjEp2jxx0u7p9S329flAh2Lt vUw4jNeifFu7fMwDFKWd0pLuk1J4vxLvxYm3tbs3nQD/sTfeGBblysQqpqeL6fFk0ym3m9O3PVsy fK1dW9jLfakKiQdGEAhHGmwevKbSUAqDtREMpa9x0OfReRq3DA6PbVqwZVcstmVlw8DSSTAMtvia F23xdfVWgyzFcb/RuYG92kBaaWt3XUE+2J66XT56dceuGL26a3bvfljLeq7u7k1w4P0O1PXt8sO9 3v0eQmJiLsdyWSYr4mEJVlMnJDLE8s79MUI2iXcFMUNMLwQHXMzDQpBHycJhDvN06XIc5AmYFxPz +uAPjDDbUhAB2OEGzyImnov6lm4Z6GODi1hAlPCPxqmvhsQ5Xw347FJVXOFbXBdX+upYfi3Lr8V8 KcuX+eri1EKBOcNgk7YM+MBOgcr1EiftA+3QMe3nAp7hsbHuXu8R50ifF4bEXKDZvXF5GOYBSaAF yk1nNADZ0+ObFg6ydpAeGOpsZDYv7IOxkK4QijTH5VCDPFUDlGgUn2HqCA8tBNmAAMXnN0Eivqkv 3hdmL+1dxlrk8ejipMk3CcSOdUqC7EXRvi0GXzFTbCgaVwSuYiCHthGIRog5TkjCy8Dgsh7JVNDy hT64tXDAAxIQyMIuUHW0pQomN8hZDCZRCC4WSeFM3SSsW3xAqVbE5RGoEP6xa2UEKoR/sj5gCuu8 mLoqVQDerYsroUXBCaxMPQDcgVvNrC3w7ypoPCv6E1ZNxzDp9F0AppE1WnyVDG7H1YHmQTD++LwS cnyV6YehrowAy2J1HMZcGeu5CvjOB7qHx37oW88sQPpPQb6PTQ5MMYlzPyg26dtyakZ8TrggP+PU XLWYvWVLhvrbH0B+ZajHEWohgoYQ+gtChDfA57yIbBWqySyJkmzl/0C2SuykmcuGvAFILyBbpUnI awBaRtqFOsCNgJfCvZ+RWv6vRCWpItcKB4hFyCE6/i9kutBKLub7SBNgqyAjLdzVxC68DLSC2CUW YudfJE5Whn5FlvOviXix9DJyMcsT2sTn2HUr9zrUUwRteQ7auDNFrWQ9/wKx8I8RD/9zwAhpgHoI v5Jw3BoymbuYLAca5C8j66GPVUBwhgwGNjsDBkfCwC/eAOglleAfO0gOicB1LvGTAAmTPCjlJEGi By/dRkIkn5gJB8/IiIRAu0kWKYOTZZNIFTxdSjTEQ1zETYqID07VCXBuzEgUJAPeUE4MRE1MRAsn 7ipINikkmaRYfD94yLSNfspdxn3CbxaahE3CmGSm1CA9LKuQ7cmYmTEmP6BwKK5QfKjsVNWo3lOf rzFo3tEu1Zl0j+nnGRYZfmusMD5h/Np0wFxn3ms50/I36zpbi+1924h9kf09R7vjfWeH83cumavS 1e960DWSWZ35TtZBaD1JruHfgogBD32pIm1kJuk+SNT0bujoJPrinvr6jALZU5DkiIe+CH2g9O6Y UeDUTmetr0x6Ld+hb66VXct1k9rRd95+Dn6OGKqiR2j07ZFXR3Sjz+mroiNHR4oKqd6rF8mk4WQy qdSXHeHKQsHykpLiGq6sNOjL1nBiXml5RQ1fUpzF8VASc2o4lqb8W9/M4htG/dx67+SuIgkNB6xu Y0YG785SB0o82tY2X3mOQyJkSHlJhixUXufrWdeS/bLCFnJlhmwKwEwX4OgzEs2xzyWa42cK9ccP ch9W9db4pevVSk4iz7g7J8vsL3JNaVVr1RKN0+pwyTL0GkVe0+Do7Y6AVaGwBhyuAKsrMDoZOGId OyY8KzGBHIPkfRZ+7YE1lX/swz1KLZ3hGx77MJbFrgIqtc+mJhaqsQSVCl+2gngEH9X7goFhmhfL iimJihp4lSqU6ff5shRqC/Fl22SGzE5Dj6SH2Gpraw3Wqkp9iR44C/5KiaNtpJjao/P6HbYjxSUb rzp8mNoOz+vHy6JCCNKCmZjYjL2sFf/O24oKw+G+gMWCcgvxXpmG92UHg+UVFIVllfl4r7BLJbVU FpVUZamEM5OOTkGdWRaOlJqkKnq9VOerKZncGNJLn6FP0BUL/HlmCS/XqakwqjEqBak1zydcpDcr eV5pMT4HJyt5iDERoRw0MwvGXyXZnuavm9u216E0m5VkmLsrkR8sGebWJ5SO0DDldxcVyfzAdpH/ /mEaiMl1HaU21vvSYZqbiMm6gZ3AvnDtSBiYOVJFoyPF0RFQUkMVKKlz179YTVFhHzVpBJ83O1im Ly0v8YK+mpmmZ/G0NML5fHqm5sYTl0J5cFr/yktmJh/2FhR4acO6B1dV2yLTwhX9DTnJR22FzVM2 b6uqL7BMy5o0u+mupypaK9z0ioaVZ9TkGEP5wtL8UE7HRd3RrvpSnaJ41tn03VBNriUZd0ZrR78u mF7oSN5gLZjGbNussT8KKokPRvY1yL+Ei4Sf4p4HE2Wjg2DggiluBYfpQMLYJYAL+URZociywmG6 IBGTnyGybDR8dKSW/QDHjh4GVh38VysAXgVMGjQApYbychjbUsYrNtaZFTCbsmC845gXVLxUYamd M1S/+dVb2nvveXtz+aKeeqdCygsKjVwbaV7c2La+Jz965oVtjUuao2qFKkM4bPfZDVa/19J5/xf3 PUjJ47MNmUGnwRV0ZeU5VL6wr3booaWrf3hOmTfHk2ELExjHTNMOgaYZwGavQj49TYzcnWCYHdyN YL5tKS7ZhmkkJtd0OEUGOYdpdyImmaBTjDlMj/b/00+g5nAnaY5kgp4c6n/860eTL4paMuOxPz94 RvKz8Pyb12/+3jk3LSzi7kiM3tuKCtGx/eP7596zduo3N1SuehgkD33ir4U+gQOPPWK6zd0Y08qN HqMH+uSwqWFcOJ6kuUwJ9qlpWzAotadHj13sqbojJPYUBlckEZNO6CmMnvBImEZh4FRFo7qRYuj1 vv9ElageJzNEVA+vPj2qfHgJ3VNo5aPnM95wV8o1CokElCJZTK+Sa9m1Vp5cT19h12fBBKBENins oSyYBpTJw0orTAxBqyK5TWkLsbHSPPaxcKfET2rJW8ix3S6X1gY8S5CQ9gB3O0zsoAe7tbTNBlza DQwD/Gy3iiEN7cnOrorWHKBRmFMVKXVRDNM5MXlVl0lkommYzk/EojiewASx0cRM+gjsyIijagQS aeX5v/OatLadNNTKK/Rgy8tKYciJHNYzS8amZ5ZTnCUAU+RquXrSwObeebedM2ny2TfPzj8j8KXB xNhN9+rsRoV56sBZy8ru/PJHswfiX9/eveWseqdKaMjMsyv8ef6p6364eMUjqyeZTDS/oNwVtCqV FrdpdDSrwOEyKfoe+csd20d3zbN6g64Sprdjx+jNMKeaSR5KAVa83E17YwpdJ06GNAoGHNi0O52R 1hjWZD22mTPTm9VZxaFgSZZa7S4Ohoqz1H6FTiGVwo/wXPqKSR3eJ9TA+0rIgvTIL+RuAsuo4LZB I7K553bn55vlw9xLMU2MmEOdXoXO2akbn5mrqmpp9Cg0iUlSN1rMmhZTflux8XYGgyEKTMbVzXiL 9amp1GySyii1WIQapbs8d2qVXZZcr0r3JauE9UVFL5SZPMWhnFK3ymBP3k0vt8hDSr1SqoBal4ze odQppVL4EZ5VYp+Vo29wQbVeIUCuQu8PJaOjT+Q6U1aiG3rvIK1pbpu5m2BFItd2mkWtNQ/T/olD n0aPiF38zgLpbuJciHbcLI5dvhsGpWJ0p7dAjf1Q01shQ3JeVq5TBcPz1rRcjn+qtOeibKSrwIZV kzewdTGlurDQGo0qIjabY5hbtMdfpFIp4OIJ4i/vsKuUtgO0ABykyNhne3Q+bkYRDNCYh11ZdexX jb/WaGFRROrO6XD3jC+x2BqLbY2yxVVxMZPpSLG+BAwbrLuqpkRLSvQlINm9/9m3pHklqq6PskVV hAtR3wTtYCvkLM5KS5h6sEuzdJUyszDgL3SpuOT3BIO7MDu70G3gk7dwyqwo5GcqywsejdQVelTU JtBstTu3MrDLGbJPGAGZxz8AbeAlTEdcx3+X5rtwaUm51leV980oT/Mm+bUaeCo9RoYlBjKF7EU5 7AtpFRGt1jTMlSayIsUAe0hWZWcuY7dBG+Rm5OZEslU6dqVSSrXDdOMTIYU9u8PeE4HrE+oEK9uq Klh+VYXBEFaFkevA8ygwnbE78R+oM81jZC2MPZ/FYj6dwcYs3loSZMu3lMoKwzpnwLjSVxLOsSef ck2ycoKgdEb8vohDUZGzNVia6zd+YwnnBA2U51WuiD87YlfMtfptSk2gtpjrL984uen6GaNzFDgY FcI10ag6qyyUDIW7utpzGm9r4OYrdCqJRKVTwBqkfewjiV0SAE8xdGINYuKegTVIFvwqiD01qcDM PDcm13b5xOHpE4enZHxSYXNyeg3yzz4BHILV60nOlrgEmbAYk9jb7/no9lvfv6UV8I5t79/alvzE 07ZpYPCydq9nxqZBhtwtP0ju6p9137Eddx+Pz5t531f7lvxw3dTmDffPOfuRC2qbLnqQrbTA2vIw ol3gWW9CXdrllx4AU6snmdxPYnKiD4j9AtcovFsqVTEvKuVO0fCemLlDJXpEbA0vTp1snKZWH/+z B9OdPnmswQQoTFx+8fWX/XjTOampRFWUQ4siXWvXdecnRwob23JXnl/bU+7iN5/78Jrq5MLxUXRt NCqz1sy/ZEF9b54y2Zw9pUeUr0WyDeQbIpPJVuz5boXXkDPMPZMgLhhCz+wxeBXqgnR/C5iYldau gFAhMqRCFLQ6LeijR0QXhjkwRw/D3FPFZsR/4XlggyQl+1DKK08PAMiWZUlE/2WiJmyTqTQZ3uUX XVoRubw9rRHff/f2Wdb8WG7NwNSQRZFcfapuXOjPt8n80wZrze62+44/dvfxnfNm/uCvD595+2Xn 5JZXutTmEu71xQ+tm9q04f7Zy3/EtOWhlLa0gbaUk3pyN/Jsjy6iz1UcgMAPIRXcnYncWv0wB98m RXRpxunA79sdi1mnpDOmgOu3L+btsKbn7HHlEd2/ozBcmPUBBu7612pJWxhmu/kID95eejShL2ix ZvEpb9BqtVhoaTAUDKZ8QqEtI2tScV5xpkpYa84piuV1ppUN3MJZJXXOmRvPjHhj86ozSwpyjOdq FcnHJtWZSgrOv7Kyu9KVrdQqwCrpVdRbNKPEkTSO6+Ct+SGBV5afua5t6vLuGqMmp6o5Mhb08Yti vQaJNPl9Z1E9s+y1Yx/BMjpAmskB5O9+MpW7da+/2F+scjL/mqgibEqtIApasE9fAX8t1WnGVg/T gphqqlOS22URddQyTHvBIUrrqGjcw2DdmYOgA8/xKFPUaJStHw6SyH+o2vRAzo4IqRWr6D6WlUak qfSp7qWUv3bGZY8vnLamd7JDKYCDoClpX9FcOKPMVdi2YOmCtsKGoe19kbntNSaZhONlaqWysHFu RTgWNkdnLVq6aGYhvWLJHWeVWtzZjqKIO8+h9OZ4rXk1wfzaonDhlJ61Hf1b+yMaW5ZJY/U5MnMc KpfXaQ6UZobx/hrgu2rsGP8xaHY26UlZQSId5m7abdNLDWn2GsB72BPLnGDximn08OgRpqh/t1Sa I94TeuhlKww2sNkKH97MnKODbBXGVsjJgwp0nhT8DcxdEu7LzLWrjo+MK5NRZc/NzMqzK5X2PKY1 1459JDwGq8YwORNbf5B4uBtgRFq4bTGVItip6xz3kOdOVAiY4HFyiin/TqF0+8VVUdoa6VNhgQkT 9GONV//ssg3PXDld5YalPizxg9MXTqlZUB9QsY4VwTL5t+sOXlY/5aL9F/HjI2NUaFvVEgg2L6/n lekOsj5ZYGZ6CPrkJ13YpwSxwxKzbV/Mb/eo7FaQTkwZU9vdnTaJIeWKGGDtb4/acPXv0L3tAP0G 6TxxShlmH8SlnRCiEDNjEY/0gq4YYmoyXi/R+WuKc6py7Hq5kLxEJbFXl0dKXUoJnUxpmaDKLI9G SowyVYQFyKiQodKrhQtZBE1QmLTfOPj39WaVGEKDfuigHzboRx5pS49oK3dzQq3ysDhZnhOiZjfF FDFVoNMpNXRKxdmU9QO8qtGqt0d0r7LR+cQpd5lETijTiU4YLRZrSXl5hZFFAVlXuNtwae9WJe8x Kq01FZEKj1Z2gznXzBlzjNdJtFml4apaq8pA/5isSrOfPs/9JJALvVEaNMlnIksqy5dEaLXOqBIk 5jw/zAPTwUqdD/sBJSRGc1PSkVtLh7k5e0goRCYNcw0xnZ630r9YqXVYVUq/KaWl7JyzXKWG0F9p ZGreMLXFnO9lU35j9tZsLpbdnj2QzWuz3dmcSsjOFjKHx96LaVQQEMm06Whb5rFIC5s/IH5I26Z8 EFO1CcQWTUcO2coD4rD9/fP7RQc+3L9qpH8VqPbhKhYJYSoQ0/4vt4bpnIlN6LCkLZswsZeAXRTD bCkPXxBdChkG3iwlxeUV/PmmcF5Brr5i6xnT151ZOGX9nnVn6kNTC2sXzijRiU6mq3HeisnLbh7I /2pgyhnl9um1ZX0Rt0Ynk+k00yfXBZrPaZq5ptVfnlebZ3JluzSOoNXtz/RlGXN7rpz7psFf4q2M lcN/DoAjF4MdIZKVoKtTyC0puSq85Qe4AfC8w9wVsBw0K8rLvIKkMG0UISjZGlMHW5yNuhlV4qRT NUxbwMa0pSO7tWxhZIWpXVwYMmHs+1frmGCIQukQ5Qn7o8fQd3qpLNNbgH81nEBKF1w/p2Dm9AY/ mMssd65doQJ/LVCYqcqur2/KWbjlzJzkcX3etBJ7YUl5VtlgWVF9gYl+su6pK5v0wUm5g+KcrtAq Jb6065A0goenmXXl7qGqszuLNNnlOcnX66cXty+B8d409jHv5V+F/afUCgkivKGnuLVihBcOy49v BEA83J0wtghP0iZSBGNDqaRtRfkiC/OHaSNEepGFEJYKj4d6D7O4Hgv1/ns1idqYjvmK/hXMyWII 2JcNV1njAV/oikRmm9RyZuSs7edUTLvggQU5bdPKLHIJb9Lpg6VNxQuWOkraSkpbK4NquUomxB0+ m9bqdehiG/esvfLZTTUw7Vq0Np99UhRU79Ybm85rCbiDboUT5i2OtIIdeUlyLuzWVJGbU/qmdFYd 4OBAMIlyq2MKo7dRWRVyCpq8tMKB5WiOyW0t49sIzXtimjbJDLYvwxaSqG04seHQl/+rdSCX0A+b OGaLLdZxr5SHleOE1XgF/5LClpvlybErG26du2RrX07Jghvnt26oZiGCAIQIjpUvLC+aHjYbcutL HUUl5R5cMoJ6LWzpBI1ayNRuymQKMQAxZqQYLa1vKupcXFZ5dlexNrsih/GtBfi2D+xvmJRSCfJt t9HozR/mpiXCpcIw45yXzzfmc878ZwVmeK0QHSWCTuBmtAsDAnevEBfAfXZFgasssskw5oEy0Q+C Lba/Eo1Ow+l5jdwGwVS5DQrIv4650uoYPgrGdgT4zOxu/6p5/eGRef1gbYvfZjE3Zmzl/2/fLZoF qc87QW/BOqR2NFLRg1C5KCcZvy/XP/q+c3L/1LpFzYVauSqD54QM9aTZa+vW7b5gcs35j5y9cvuS wi/4OfMLp0ftHD0Wya/qn5pttBplBq/d4rZoNTarvnrDkxvXPb25sW7o3nmes9f7p3RFYezb4Wz3 bZILID62JiUVi47Asn3+7sK8AASfM3eXT3cE05oMWzzufbHCJs8MXRPTXlF9i2thXX64ZPRwCdvU 2Q/L/H/uoQmmUdRHsziPwJie4Pyko8ow54hcEbjbhAyFVKa3Z1udIYfqfrbYNBnvV7mK/f6iTOVK o1ECWSv8bes6Qo05GrkgfJ7pM8pkGTJ9YHK4U2HNyayIjkZYzJBFErlXohWZOVZF65zvzYnAlq09 hDwR3pVsIINkzp7p07O7/MCORERlAYgpurMN2QZSVRLJAObsmT29q2kWu6ht9FmiwJ0nqppyZ7hm qJoIcKcW4oC1IwCMP4eZ31IyUgzTO2wWwnb2Cev1bT2fsPI+hQnoC46bPrMXecOyhXfVWuCNxzyp BDijlJgND6hcRf5AkUuV3KvKLDqJR4G2ofb8RrsKmARPGWxe06Ri2hpsG+oIT7crtRmC8EVhjjRD 2tTVczrbTmdh3eyr50S0UJc9lFkEz8mau6bPmnP1nAKoX2PLARsAugaRmw0Qn+oh7bsayAHuSQhK uYG5PR2wtJy/t7wwv6OpjSld9XQPzCjuPeWFWvg4jV64T1LeFJxhn8G4enSkH3gIfIU4MvDz7dGj Iy8zdp4cfhrf+4dTA+lb45sUaXWaOIWYvcUWs8CrPRW5uZVetdpbmZtb4VEbJzDQVRSYqGSBGWtn WQpyspTg4yl1Uq3ZZS4rpMeCQeHngRI37BqUBPzFHo3GU3y89ITCnc45kUug1kqNxecoDAlSCbDc 6xc18RPQxAvIYjJ/V6yF6Z9qsc9HShcvVjX2lsA6fP5ui041c5hOjynmt8WaSpomTbJA2Cdzj2t6 C1EBB3dbmqSMa6Imgq1jSol8O3oYkiVAwEx2uOI7mSSk1y04SlPqBlHkiWorrltwAKe2fvT0R6eN yhnnd4RafZoMng1iqd7uhUFsV9NOkcewunmGsclkfLag2uSxGWRShUyiNGZHy10zzmvK5r44nXXi uNVomM5NHObPw1QkgdC04nnU3GR/c7NMLpOZ/a78QoNWKQ3OuqCTvgAnBJzJbfx9/K9JDZxamU85 tIGxWdpCGV/paylpebaFd7fQlvdfgEi4iqpe6KJZXdTWRbv+fASOpZspMevMnNZsHqjkv65uyvPk 1x2sg/OFtO5IZYt2DtXxc16KeWbhwhLmoNqR/n5wlcQ1P1v+Q7L/VRFgvcnmoZ6Jb1a20H/88hPv rq57qY4T6qj2774fXptuwUkN6BdbAGFcMMAQ3hbVIQgBPbPJYk1Fn9JbehXgEcAhG/bLrLLFCkMH QlLjHgA7pxAMhTQQshL1gr/PoltmMZYOfq87PNOsMpZE3pixriM8ae3OodU/OCuq9xa6w9HysC+v YsHVnXltXurUm5M/bm8OVAYM7dODlQHj5Kba3Q63Ubp4btXMQhM/UBixTfHOXN8VNmvUfktmgMuA c7LzquuGzij2x/rKvNUVxVbrrOjkwZBvQfPMC3sKFPL85NdN7fZwlbt+li2vYvSMgkJOYvR5snTF pdZglPnvF0NE5RXwJYrJuagH+4kSjFNxHmxSDOyG4MXEAGFbTB4raPE32mfgQg7nQkMqHgiiTPxz 5Seu2PSiYwWz2/hYHA9doMtv5l9JmyOjvypYuKAs7RekcepVzXM2tmVnp+0NHZ3aUpbZOG10Zzpn ok8Qq61ees1Ctj5bDnumWyUzwWnykgbs/dMQi3kawuxm8KXATNML98bsumbs7auwbk0HYvZ/y72T e5Va0BjZjMc0B1SGbki3OI3Gmu6eyVN6uqvH285vgDUm7EJqFbRwxqTK5hmTq1JSOgBSKj2x21oE LcwmKviFc0/cvt0FBRbY0XuC7bZaspWSnGZXo35cTBA/BMcO2g+mj+22fsCGnfLbik3oxD+z28of UGYW5+SWeA2y5GvpXqWRZmSYvEVBmBdUWm3yOI2olF6IoEkEdoDp1WTO6dL55s90ocogLlOU2mxj 8vVkgSkT+083QP/NhB3xhfNiMa3aTMEVUyqomlClANPCANvsbkRRpTa7xWhDP2x5p7IndO6EP3q6 VMaFcUJtsA1SOazm28kObMOuRiObjLKyioHx8xPtNSHmgRdDKAm3XiCi3pZobZl4sqoNxDO1paax oLK5AGb29CgC8aSdIlCwKgiss0NW4sLy36rs5P6yAMZJ4+y0jJTOmlOxNnTUzVK5ylUYCMIGqd5X FiiYWw7y9TO/XJ9d7o/MHR+OCkeu25NnVbRsa6/obSjW57S1tob6NrR6xvnJ6QtOGZin5/AXpdXi rPZ2a7g6EK4JGavP2tI2bq1ABsXk0pQM8oyM6Vmi0SJZYKw+2w0Oumi0WFiKyQDijwUteXZ/8zjD YS5gPijs+bFgR5rR/5Mn/wFnT2bkd1uwcZbd3vUPLNhJbAF2DIL9aoI4kADcOGXvc0jc+xw6ee/T AXufLeN7n66JkZ/v2Pv8u09A/09dfKYDOum4hCBUbxi+cF18beWUDU9ceEF8TWVy1FzcVVvZXe60 FHXXVHWXO+hHqw9e3VJ38fD5q398VcvUi4cvrVvRGcmdtWI6YEHuzBXQy4uTNwsEejkx2uUth70s jHZt/nvRrmbdrH872vWP6pjAitDpk5j5u6JdEHCYF5o6pdqTtpYKe647C6JeodaZXdEFLNp1TJ87 rdgO0YessoHSooZ8Mx1Z9/SVTVp3xJ2cmw48CO+kx8uynCm5prYrE+uqlnUWaVm0681pzcUdS4CH rcmb+ZdSPExHcNzKMIvg5JESFocwB5qVU8JuQRdJ+71w5AAiOI6WSjHWVQmpPTFdm4St69LGClZP J0Vw/tU6JrCwTI+nOVK+L2dNX5hPD+EwswR2SOln8UHGsdJFNw4E6uub85X2HE9Wrk1xWhgneSjN N/qwt0gMDoqhHC04yoNpRkKUEGM5yztTsRxxncQdAA6WEPiqj81Au4JamHNiKuLQKtyKqIJX8woW pgHrAyGELtgrCLcEtWZPs1mMeaVNPExJ4BinbA4cePtH5Sewhi01v2WZhBom5Q5AfESRYbJnGcx5 BeD8poKnaRPjq6mEDeMsj00pETi+1Q/HMViAwF+dP3o03fETRmZF8dSglpfJFSozO8PfPPYR9zn0 vpl8hL1n+52R8f3O+hisRIQIjXxQAROy4g/6ihgzwhWeCo4X9z611RS2Pz+LOdmZ4uoP2N5nCzhx sMsAx7t1guXz8UA08CeMG6D94g7o/P6wjvm+wLUJ26Axz//lt51g+z+9O8p9XrX0uq7iOU2FFhXs NcmV4VhPeXZZyBSY0tbRNiVQPO+q7rxZsXxjhsDzMlWGPFjVWphd7NEFa2Z1zKoJ0qwZa2eGtFab uSA/02eW2bMcGkeOIyvscWXnx2bXxpbPyFMZzFqt2W11ZptkZptZ4/CZ3Hkelzc/1gdSso59wl0n 7ILvKbahlJ7Q69WTc4mvgK1PrCcdknDv9jVlqtNjXQ1ec8LaVARONZz2Tu0JQOiQnZag0ZLR4sPF 7MiluCIpSC1vwOX+5ysBfsLpZTwfeVpE4ju8au46pcEXrXC1gh+83AjHJrWKs5UQz2GRnWeYyoLT HJls8tj1MqlSKtmQHzWOe7kY4fpul3hsjHFLqJfM5IKkACZMGZjBJwBFLgqFwMWppDYRnaoD1u0J Z2WFYbTP38eXhac26cKs55PLmuBk6vTdgTa5GGuoPQLxGRrF6CqEF1i0C4IrJ2YECMl8S8DglDgX izDwv8/zpj2e5IoJPVQY/N/BDv6QP/ubh9PDmHtlou9fYP5OrkBv17PYPv8crKiWp+yaEpaxLLAP MaqY1ljQHFJK7M1wPAtGLuyFtJ0Sxmd2TXSKRE9e888UR104OV4/HqjH/Wo4W5v2AiFSDxOjF4x5 y+2dcze2eUUVgNWnIQDO4GBFOmI/vsiEZWP10u8t4cYzkhmN4qqT60gzCPoN+9b8buh3fvokQULn hf/41xX7YmavR+r1DXP9MVWMeLw5zV6lo1mZMuJs49phe1v0pCbsXJ9SKGU9ZOMnE8dPBXNWoxW3 feE8wW7KS4TkFxJ9aFp52bSgXpL8As6wKiHilssOtrwolf6MV7uiwUDUoeC3SzR6i+abN9ietURl 1vEhk0cjhR4JErleNbrKbueuV+nBuVJomRZ7oH9boX9Rci3K9SCcyd0CH2H5ubyYPGKDv8SqVA1z gzEteIzQUovSEyU+nxKcmb0sz6PMbfYp9ZnN426kKOsT/bfDIXaHTfc2mGy2gw938cCK6Ft+27NM 8BaMWIZ4Huf5CiPM6yl/wzi+H87zmzOoa1JhQYVbKzz4oKDJLM3LL7VR+VcfyKmjqii/LEsj2X4P r3IUhPLLrFT5TikwB76MUSvolOSzCrUcTstZ9PDJzF0Gu0bKS9WK5Ks0LwO+cxA0dlNyOdMAWBPt AQ75yVLk0D4ql2uIAzYC6uD0gsOjcMAp9jXACo3D3WxXGJsVrcIs0iruAcAUdfoZBrCQ7JRJTPWt xaH3Xh63lCuM7CxzsDTd7xKjGFKymGTc5efI29tyCm2cbJ3aLEkeUdvgi4Fil0b2Cn9IasyvCFc5 M5KH7RaZzqanYaldw5f6AuYMHo5ajO7gBh36jAxLQDx92gAhjj/xh2D36T7sX0yhDVCdVkv1UrBq +/e5TfCXBIe5HyfkAX16KtBDJDWmsDdpxz9hyARngfWauUwQgg7DcZqRIyhs+GoKpD+vH4IJ43X/ j6oqKhSfZ5MDfrvAlnsVlB2CZgaAHbsxs7CcjLJL7k/sIProfmcmL9eq6MzkYaNVAgs6zqsxqWVC Bhzz2kMH5LAld1Zmrk3uz40YMp0uPScUlmWGrAqpzmUuMrldLt3oaIYlBOtiwh8SI0DwKRkxsRPz T+8BH59tZLxzBHqZ2rBIh2/o1nS4JrlGeCkVnUnuAF3ikr/iz5D8AuIT9oMQO2qDzxQJNzOh0ElI NAoVvQ1VGVMKnzqvLvtGossMe3NLnYKUO0PQuQo8eSUOQZIcVesUkgydXS+9Hg4bi1fwhsn0eq6S 64cvIPUJIlPup174QDLKwtrYSJFj+AUVV2mxJQfsFoud3qvSqyT0q0mRaFVlRAEbElDT8uR2ziW5 Ab6xzH6aOOgxMPU6+jV8ZMlza3eb3crNpBaaPPoqfIgIVUvhwyKD1SKeiYBzehFeFBA6NZy1+4wz O6WwHeDKcWr58vYyh7N8VhmnsuV6/BEbL+l9Njn45lvJhc/prLoMQaaULf31a2+tWvnWa0eXwbeG vExjgfYMQnsM0B4v8TMJrEkYzJID0CwthNiO7zY7FNgg9l2k2CKmDYyVwWBpRbmhrJQLBdHdtloM nMFRNquc1zpzXLkFFmnXmWf0SHh7QcCd41DyS8/hHKveeu3XS6EhQgY06TDd/tabdPuzaosGGpMh eSXZBTqxnl/EvSlZB7LMJW4mTSlI08tJ9+VKnMHpuumwsXCEDYF0Y8QAMZ+ertJecYgXW2Uxc8/K zdkOp88Eu7RO+C+I5DsVyXPkJp/DmW3OgP8wC8ucWsRfN36q5+l0HD859eQ8M/t2tgrm61fF885h 8jyO6/2kYOzQPi1oXQE1PcndDP+VqqMw1iFNqJYnngOQpSBO9DWc6XHOvsKKabRdcPyXto2fAe6B sZ4+h8j26MVj0WxNDrrQH3bGDPAOuYfKFZQzUY7VzypkTsz/uGKoFf5Atd8WSYCV4vgnbQL/avGq vZdvfnxJbsmqvZdt3rkkJ/mVwuzOr8ye3FZgsERbSkPVBVlGGXftncfi8+bs+OquO+AkNeAjc7cu bYLt79U/WrVl7/KwvXjGootB4+D7Zf4g8LCGGlKWUSPkUyFM5ZOovIoqY7AVL/IzRmH/80/7SgLw l1Q9yf2JKMc+RtYqoetKOOSwbJ++ssrjqfo2NiyLqUss0kiXbjwG0XfiDD+YUpgxgcPiV5RVMJJF No8b1v4wAQbRfrCtxpNaB4e5tPx/8s0wyuHVqbelLTGuWCrgo+JTTj5JUxte8DkyM8nASGaSbRaP SS7V2U3vTeuE43a5NXmT5zRE4POnDAl8imiftuD82OJbFxXZZmxZfStNKvQq6fLMXIcyw5rv80YD PvNnjWvmt/u9k/PtWQG3yhXNtrqtelvAZyuZs7GpdsPWHavuhMOU4vrcABJkf6QQ94L/BkJPY3dT eNrgOcsWrF5WULfiHPY/Uvk/JumgNwplbmRzdHJlYW0KZW5kb2JqCjE2MCAwIG9iagoxNDU2OQpl bmRvYmoKMTIgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9u dCAvVU1PVEhRK0NhbGlicmkgL0ZvbnREZXNjcmlwdG9yCjE2MSAwIFIgL1RvVW5pY29kZSAxNjIg MCBSIC9GaXJzdENoYXIgMzMgL0xhc3RDaGFyIDk5IC9XaWR0aHMgWyAyMjYgNDg4IDI1Mgo1Njcg NTI3IDIyOSAzMzUgNTc5IDUzMyAyMjkgNDk4IDc5OSA2MzEgNTI1IDM5NSA0NzkgNTE3IDM0OSAz OTEgNDIzIDQ1OSA0NTMKNDUyIDg5NCA0MzMgNTI1IDQ3MSA1MjUgNTI1IDUyNSAzMDUgNTI1IDg5 MCA1MjUgNDYzIDMwNiAyNTIgNTA3IDU0MyA0ODcgNjQ2CjIzOSA1NTcgNjE1IDQyMCA1MjkgMzg2 IDY0MiA2NjIgNDU5IDY3MyA0ODcgMjY4IDYxNiA1MDcgNTQ0IDcxNSA2MjMgODU1IDQ1NQoyNTAg MzAzIDMwMyA1MjkgNTA3IDU4MyA1MDcgXSA+PgplbmRvYmoKMTYyIDAgb2JqCjw8IC9MZW5ndGgg MTYzIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAFdlMtu2zAQRff6Ci7TRWBa FK0GEAQUKQJ40Qfq9gP0oFIBtSzIysJ/33PHTopmcQRcDWc4d0Rx87j/vJ/G1W2+L6fukFY3jFO/ pPPpZemSa9PzOGXb3PVjt96UveuOzZxtSD5czms67qfh5Koqc27zg5Tzulzc3af+1KYPevdt6dMy Ts/u7tfjwd4cXub5TzqmaXU+q2vXp4FyX5r5a3NMbmOp9/ue+Lhe7sn6t+LnZU6OjsjYXlvqTn06 z02XlmZ6TlnlfV09PdVZmvp3oVtCO3S/myWr8m3NYv/gePQ8cs+j8ZZ5W/MuoyiUkWtx07vcb/9b HP21oXa4dZLndSW8L2LNfgEJVEiSFBPex51kRIL3u0FyhwTkg2SJBO/LQvIjEqi8lXxAAjJINkgg t5NskYC0NjokIHtFeySQW0omJBC1JgcksG9DNDBbQVT7BiYosMAkqoDXYAbLXBJzgsXqKmBOsNgk 5oIZLGUwYE6wkaYRMCfoyipjLpjB8qOimBNUto0wF64GZSFgThDVrALmBJWtZ8wFM1hqGgFzgsXa l90MFmtfpmvQsyoXGBQsVhsM2/CeCkjMCXqWowJzgqiaZLoGpUxirjCD0RZjjizlauwF5gQbaewF bgRROSpwI5D6vmQYQ+tlsMCN4JipK76Mwb7yG3EkyLUobuhHUvb5MgaLVSry9QRS+1LAwJG6YiQG 8vU/uB787dtvc/sRIkYFu8g7jg2GrKlGjAqimmrkSwqkzmfEt2AUrSS+Be7kPeI9Xs0qd4dZwSi0 EYfUoEMdOQ6LQVQfl1NpEMUd18Xrj6ubQzfc243UvSwLl5Fdg3ZP6f4Zp/R2U86nWQWMv1MGWLkK ZW5kc3RyZWFtCmVuZG9iagoxNjMgMCBvYmoKNjQ0CmVuZG9iagoxNjEgMCBvYmoKPDwgL1R5cGUg L0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvVU1PVEhRK0NhbGlicmkgL0ZsYWdzIDQgL0ZvbnRC Qm94IFstNTAzIC0zMDcgMTI0MCA5NjRdCi9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTUyIC9EZXNj ZW50IC0yNjkgL0NhcEhlaWdodCA2MzIgL1N0ZW1WIDAgL1hIZWlnaHQKNDY0IC9BdmdXaWR0aCA1 MjEgL01heFdpZHRoIDEzMjggL0ZvbnRGaWxlMiAxNjQgMCBSID4+CmVuZG9iagoxNjQgMCBvYmoK PDwgL0xlbmd0aCAxNjUgMCBSIC9MZW5ndGgxIDMyNTIwIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+ CnN0cmVhbQp4AdW8eXxU1d0/fu69s+/7msySycwkmez7RjKQPSFAEgIJECDsoOz7IqK4orhSq9a1 tWrFagggQWylfWitbbG2Re2m1aeL1har3VyT/N7nnjkhoD7f7+v1++f5Bt7zfp9zl7nnc/bPOXe2 bNq6nOjJPiKRwqVrBzcQ+a90BPTA0m1bQiwcXUWIMm3FhpVrWTjnGkK0vpWX71zBwmXvENJGVi0f XMbC5DNw+SpEsLBQCs5ctXbLDhYueYgQwXP5+qWp42V9iL9l7eCO1PeT3yEcWje4djk7fy/uT0Ib Ni1PHRdwfqaFHmt98Y1XFWTD4NLlmwbXrVyuqy0srKttbq7TLV+3jAg4oVkIEQv5L6ImIriA4I7W 24SriQJH6XHlAyMHP/yJdZG59t/Eq0EEIaf+uuenlF+4/vGbPv1k9Cbt39TPIKjFHdgfrlM/MPob QnQPffrJJw9p/ybfKXVQpuZhrRQaEa85pvUI7RD7ubiai6u42MfFlVzs5eIKLvZwsZuLXVzs5GIH F9u52MbFVi62cLGZi41cbOBiPRfruFjLxeVcXMbFGi5Wc7GKi5VcrOBiORfLuFjKxRIuBrlYzMUi LhZyMcDFAi7mczGPi34u+riYy8UcLnq5mM1FDxfdXHRxMYuLmVzM4KKTi+lcdHDRzkUbF61ctHDR zEUTF41cNHAxjYupXCS5qOeijospXNRyUcNFNRdVXFRyUcFFORdlXJRyUcJFMRdFXBRyUcBFPhd5 XORykeAih4tsLrK4iHMR4yLKRSYXES4yuAhzEeIiyEWAi3Qu0rjwc+HjwsuFhws3Fy4unFw4uLBz YePCyoWFCzMXJi6MXBi40HOh40LLhYYLNRcqLpRcKLiQuBC5ELggKSGMczHGxSgXn3HxKRefcPEx Fx9x8SEX/+Hi31z8i4t/cvEPLj7g4n0u/s7Fe1yc5+JvXPyVi3e5+AsX73DxNhd/5uJPXPyRiz9w 8d9cvMXFm1z8nos3uHidi99x8VsufsPFr7n4FRevcfEqF69wcY6LX3LxCy5+zsXLXPyMi5e4OMvF T7n4CRc/5uJFLn7ExQtc/JCLH3Bxhov/4uL7XHyPi9NcPM/Fd7n4DhfPcXGKi2e5OMnFCBcnuHiG i+NcHOPiKBfDXBzhYoiLp7l4iotvc/EkF4e5eIKLb3HxOBePcfEoF9/k4hEuvsHF17l4mIuHuHiQ iwe4uJ+L+7j4Ghf3cnEPF3dz8VUu7uLiK1wc4uJOLu7g4nYubuPiVi5u4eIgFzdzcRMXB7i4kYsb uLiei+u4uJaLa7jYz8XVXFzFxT4uruRiLxdXcLGHi91c7OJiJxc7uNjOxTYutnKxhYvNXGziYiMX G7hYz8U6LtZycTkXl3GxhovVXKziYiUXK7hYzsUyLpZysYSLQS4Wc7GIi4VcDHCxgIv5XMzjop+L Pi7mcjGHi14uZnPRw0U3F7O4mMnFDC6mc9HBRTsXbVy0ctHCRTMXTVw0ctFwlI6WMWoeDtQFMWYe DjhBV7PQVcOBaoT2sdCVjPYOBwyIvIKF9jDazWgXo53D6VNxyo7h9AbQdkbbGG1lx7aw0GZGm1jk xuH0abhgA6P1jNaxU9YyupzRZcNpTThzDaPVjFYxWsloxXBaI05ZzkLLGC1ltITRIKPFjBYxWsiu G2ChBYzmM5rHqJ9RH6O5jOYw6mU0m1EPo25GXYxmMZrJaAajTkbTGXUwah/2tyENbYxah/3tCLUw ah72dyDUNOyfDmpk1MBoGjs2lV2XZFTPrqtjNIVRLTuzhlE1u7yKUSWjCkbljMrYzUoZlbC7FDMq YlTIblbAKJ9dl8col1GCUQ6jbEZZjOLs1jFGUXbPTEYRRhns1mFGIXZdkFGAUTqjNEZ+Rr5h3wwY y8vIM+ybiZCbkYtFOhk5WKSdkY2RlR2zMDKzSBMjIyMDO6ZnpGOkZcc0jNSMVMPeWfh25bC3C6Rg JLFIkYUERkQmYZzRmHyKMMpCnzH6lNEn7NjHLPQRow8Z/YfRv4c9s4Mjwr+GPT2gf7LQPxh9wOh9 duzvLPQeo/OM/saO/ZXRuyzyL4zeYfQ2oz+zU/7EQn9koT+w0H8zeovRm+zY7xm9wSJfZ/Q7Rr9l 9Bt2yq9Z6FeMXht2z0VSXh12zwG9wugci/wlo18w+jmjl9kpP2P0Eos8y+injH7C6MfslBcZ/YhF vsDoh4x+wOgMo/9iZ36fhb7H6DSj59mx7zL6Dot8jtEpRs8yOslohJ15goWeYXSc0TFGR4dd9Uj0 8LBrPugIoyFGTzN6itG3GT3J6DCjJ4ZdaPWFb7G7PM7oMXbsUUbfZPQIo28w+jqjhxk9xOhBdrMH 2F3uZ3QfO/Y1RvcyuofR3eyCr7LQXYy+wugQO3Ynu8sdjG5nx25jdCujWxgdZHQzO/MmFjrA6EZG NzC6ntF1w85BpP3aYecS0DWM9g87VyB0NaOrhp29CO0bdqKzEa4cdpaD9jK6gl2+h123m9GuYecy nLKTXb6D0XZG2xhtZbSF0WZ2603s8o2MNgw7l+Iu69nN1rEz1zK6nNFljNYwWs2uW8VoJXuyFezy 5YyWsTOXMlrCaJDRYkaLGC1kiR5gT7aA0XyW6Hns1v3si/oYzWWPO4d9US+7y2xGPYy6GXUNO5JI 2KxhBzXrzGEHrbAzhh37QZ3DjjzQdHZKB6P2YQcGEkIbC7UyamGRzcOOvTjWNOy4HtQ47LgS1DDs 2AeaNmxrBk1llGRUz6hu2IZxgTCFhWqHrf0I1TCqHrbSelTFqHLY2oJQxbC1D1Q+bJ0HKmPHShmV DFtzEVnMziwattKEFQ5baYNUwCifXZ7HviGXUYLdLIdRNrtZFqM4oxij6LCVWimTUYTdM4PdM8xu FmJ3CTIKsOvSGaUx8jPyMfIOWwZwT8+wZSHIPWxZBHIxcjJyMLIzsrELrOwCC4s0MzIxMjIysDP1 7Ewdi9Qy0jBSM1KxM5XsTAWLlBiJjARGJDluXhKkGDMvDY6alwU/g/4U+AT4GHEfIe5D4D/Av4F/ If6fwD9w7AOE3wf+DrwHnEf834C/4ti7CP8FeAd4G/izaWXwT6ZVwT8CfwD+G3gLcW+Cfw+8AbyO 8O/AvwV+A/wa+JXxsuBrxqLgq+BXjJcHzxljwV8Cv4D+uTERfBn4GfASjp9F3E+Na4M/gf4x9IvQ PzKuCb5gXB38oXFV8AfGlcEzuPa/cL/vA98DkuOn8fk88F3gO4aNwecMm4KnDJuDzxq2BE8CI8AJ xD8DHMexYzh2FHHDwBFgCHhavzP4lH5X8Nv6PcEn9VcED+v3Bp8AvgU8DjwGPAp8U58XfAT8DeDr uOZh8EP6y4IPQj8AfT9wH/TXcK97ca97cK+7EfdV4C7gK8Ah4E7gDlx3O+53m25G8FbdzOAtupXB g7pvBm/WPRa8VooGr5Eqg/uFyuDVvft6rzq8r/fK3it69x6+old/haC/wn9FxxW7rzh8xW+vSNpU uj29u3p3H97Vu7N3e++Ow9t7nxWvIyvEa5O1vdsOb+1VbHVs3bJV+tdW4fBWoXGrULhVEMlWy9bQ VsmwpXdT7+bDm3rJplmb9m0a2qSoGdr05iaRbBJ0I+Onj27yB5rByT2bjJbmjb3rezccXt+7bsXa 3jV4wNWVK3tXHV7Zu6JyWe/yw8t6l1Yu6R2sXNy7qHKgd+Hhgd4FlfN65x+e19tf2dc7F+fPqZzd 23t4dm9PZVdv9+Gu3pmVM3pnIL6zsqN3+uGO3vbK1t62w629LZXNvU1IPEmzpIXSJAt9gBlpeBLi F6YV+pP+N/3v+xXEP+Q/7ZdsZl/QJ2abvULDTK+w3nul91avZPb8zCMmPdm5zWb3z9y/d//drbAn 3dn5zcRlcYVckpOmzdU5m6btqKu+kXFRmZzWTlck1mx2CmZn0Ck2BZ0Csb5pfd8qOZ+3/Mwims2C 2TxuFpNmnG42BU0i/Rg3SUlTUUWz2Rg0ivRj3Ci5kkbE0IePG2bNbjbrg3qxt14/Uy8m9fUNzUl9 XmEzkYSQgJUfC0jS0KcRnMHmEYEcdQlKYUS47cjsnkSiY0RDujuGNLPmDwk3DEV76Geya96Q6oYh 0jtvft8RQbil/4ggNswecnR0zWPhaw8eJNPSO4bSe/qGHkrv7xjaB5GkYhyCpB9xkWn9iYWbt25O JLYsxMfCzVsS8n+EhK00hD8cwP/NWxCm/0AIE3rky//YaThv0Wb8ybdhd//yS/4fOCL8P/CM/8sf 8QhBEe2bOi5eQ5aJ+4GrgauAfcCVwF7gCmAPsBvYBewEdgDbgW3AVmALsBnYCGwA1gPrgLXA5cBl wBpgNbAKWAmsAJYDy4ClwBJgEFgMLAIWAgPAAmA+MA/oB/qAucAcoBeYDfQA3UAXMAuYCcwAOoHp QAfQDrQBrUAL0Aw0AY1AAzANmAokgXqgDpgC1AI1QDVQBVQCFUA5UAaUAiVAMVAEFAIFQD6QB+QC CSAHyAaygDgQA6JAJhABMoAwEAKCQABIB9IAP+ADvIAHcAMuwAk4ADtgA6yABTADJsAIGAA9oAO0 gAZQAypACSimjuNTAkRAAAhZJiBOGANGgc+AT4FPgI+Bj4APgf8A/wb+BfwT+AfwAfA+8HfgPeA8 8Dfgr8C7wF+Ad4C3gT8DfwL+CPwB+G/gLeBN4PfAG8DrwO+A3wK/AX4N/Ap4DXgVeAU4B/wS+AXw c+Bl4GfAS8BZ4KfAT4AfAy8CPwJeAH4I/AA4A/wX8H3ge8Bp4Hngu8B3gOeAU8CzwElgBDgBPAMc B44BR4Fh4AgwBDwNPAV8G3gSOAw8AXwLeBx4DHgU+CbwCPAN4OvAw8BDwIPAA8D9wH3A14B7gXuA u4GvAncBXwEOAXcCdwC3A7cBtwK3AAeBm4GbgAPAjcANwPXAdcC1ZNnUfcI1UPuBq4GrgH3AlcBe 4ApgD7Ab2AXsBHYA24FtwFZgC7AZ2ARsBDYA64F1wFrgcuAyYA2wGlgFrARWAMuBZcBSYAkwCCwG FgELgQFgATAfmAf0A33AXGAO0AvMBnqAbmAWMBOYAUwHOoB2oA1oBVqAZqAJaAQayLL/5c30//bH 6//f/oD/y5/Ps2gh3TFEyNidkzcJkVlkDdlM9uHfdeQguZM8T35LlpD9UPeQh8ij5FtkiHyPvEhe u+iq/5+BsZ3KtcQgnSAqYidk/JPx82OPAiNK06SYOxGyK0IXYsYt4+9dEvfe2J3jlrERlY3o5GuN 4i9wt38Ko+OfoH9VEeN4OQ2L10Ob5W/6QP3A2NNjj12UgFmki8wj88kCMkAWk0GkfxlZRVbDMpeR y8lask4OrcOxldArEFqEs9CWyPrCWevJBrKebCJbyFayDf82QG9OheixjXJ4K9mOfzvITrKL7CZ7 yBWpz+1yzB4c2SXH7sCRveRK5MxV5GpZcWYx+8k15Frk2vXkBnIjcuzLQzdOnHWA3ERuRj7fQm4l X6YPXnTkNnIbuZ3cgfJwiHyF3EXuRrn4GrnvktivyvH3kgfIgygz9IqvIOZBWd1FvkqeIz8kx8lT 5GnyjGzLpbAtswi3ywrZ0htggz1I8/5JT8ysuX3CWnthDZruA6l074D9rp50xbaUHan19uNMap0D qXygd7kiFcMtcRtSxvSFdFIb0TTcelE6+RX/p1iaYmqn+2Avbhlqs7sQd+/nYiefMVnfRe5HDXwY n9SqVH0dmqkHZT05/oGJcx+Sj32DPEK+ibx4jFDFmcU8irjHyOOo20+Qw+RJ/LugJyt29CnybTnn hsgRMkyOkmPIyWfICTIix/9Px55G23HpNUdT9xqeuMtJ8iw5hRLyXXIaLc338Y/HfAdxz6diz8hn sfD3sZfyjHwWPfp9lK0X0EL9mPyE/JT8jPwAoZfkzx8h9DL5BfkleU0wQv2c/AWfo+Rl5R+JiUzF xstnkRv3kYVkYbJl2aKFAwvmz+vv653d0901a+aMzukd7W2tLc1NjQ3Tpibr66bU1lRXVVaUlxXk 5+VmxaKZkYygx2G1mI16nVajVikVEka2uU2R5sWhodjiIUUs0tqaR8ORQUQMTopYPBRCVPPF5wyF 6HWDOHTRmUmcueKSM5PszOTEmYIlVEtq83JDTZHQ0NnGSGhEmNfVB32wMdIfGjov605ZK2JywIhA OIwrQk2eVY2hIWFxqGmoeduqA02LG/NyhSN6XUOkYbkuL5cc0ekh9VBDWZENR4SsOkEWYlZT9RGR aIz0a4ekaNPgsqFZXX1Njf5wuF+OIw3yvYZUDUNq+V6h1UN4ZnJT6Eju6QM3j1jIksUJw7LIssEF fUPSIC46IDUdOHD9kDUxlB1pHMre9UcPDLh8KDfS2DSUiODBOronvkAYUkYtkdCBfxM8fOT83/DU k2IGUzGqqOXfhB6kSZww05AwyDXBs+EJkb5wmD7LTSNJsgSBoX1dfSwcIkv8wyRZkOgfEhfTI6f5 EWcvPbKPH5m4fHEElm2KNC1O/d+2yjO0b0koLxc5K/+PDimiOB4akmKLlyxdRXlw+YFII1IIW5LZ cNo0QiQHU8ZsOlJYgPMHFyMRq6kZuvqGCiIbhhyRaczaiMBNok2re/rkS1hs05CjYYgsXpq6aqig CdeiiDQdoBlDH5DeK9LVd5KUjL95pDTkP1pCSkk/fY4hVwMyJdZ0oG/ZiqHgYv8ylM8VoT5/eCjZ D/P1R/qW99NciliGst/E1+EPGShfhbRdcjY/GckeUkc1oT7RL/XT3EJEqBkfkWm1OGAZUrEgzdFp taE+wU/4afiW1BlUXXQfBKRoQysuBuPShlZ/GIVb/vsfHsnPEoDHGNJMPJMCD6G88Ezse7700djZ 9IGyQ03LGyc94EU3RUB+wNTdvvg5RWqLlDHwCBqana00DXm5InQIhzVDItIpR9Fc9ISGyKxQX2R5 pD+CMpSc1Uczh9pazt+Ongh1DMq5nSolsy8KseOV7NgQCXfM7uMB6rMZak7I+UqzVQ63yOGJYOsl h9v44dABTaSj5wD98kjqhiSEGoTMUcXaBm+qtJWisjajoYw0D0ZCllDzgcGR8X1LDhxJJg9saFq8 qhrV4ECkbdmBSE9fLfJSrvdX+HfRr7aRDqFj9rS8XLQ9045EhBu6jiSFG3rm9Z3EZvzQDbP7hkU4 RRdP6z+SiWN9J0OEJOVYkcbSSHpKiAbonboR0Mjn+08mCdknH1XIEXJ4Kfyychw7CXECWToisjgL P09EnILFJeW4fvyhhnlWIQvQDjeFltHs2dO/6sDiflq5iAtZif/CkBCpI0NipA6uXJVhSBdZPm1I H5lG4+tpfD2LV9F4dWTakOASYJwRtEkHFkfQTqHI9cFF3o/SYaGlX4yGRsbHZ/eFz/rP94dRJRYA 8/qGtAn0A8poO85roViM6JahfUsH6XOQXlR1WjPblvajLvAb4pS2IS3uoE3dAWc0y9fQ4oiLliJv kIHy9fsQGNrXP9SfoF/at5o+UShkGSKtkWpkO7unMka/qKD/gC1STAs2Th3SRa+npMWzETip5Rg/ gvgyNLg0RWoDnnxpBIeWLg4hBxRkaQ+KOmtLdTTfELMcTaIitlyGzp86SGiypKjeqBvS5uOG+E+1 Ph83xH91P4xCEy+Hrk+dgO+2DOnxRLFJpkxdAOvgUBt9Fvy/Hg9PT/0evU3XCOmO7EDTSB9a/io1 Dg8Zo22DaPzZ9XrERCr5xbiXJkqj6D3OsFg1TbkBdpeis0fGH4vspC0A/8vLjdDOgRZM4j+Jgk36 D1waMTQ/kZeruTTWKEcfOKAxfvEFzF4a4wTTu4Sa0NcQojARAl8XUTxMIop55ElFIxlU/I08Kb0D fJs8qTSQ+YrPyJOiAuEB8qTqNcTlANPJUkUGeAm4Tz63RfozMSszyBOKAyRDHSBTEA5Ir5AFilJy j7SEzAMvlj4lA+JGElUcBmpTOE+i0hlSRs+DT+5a4d3xV6RvyPoe1TJyD41XVMrXU71Y/DHuFyZd 4lMkrNiaQik5JN1PMpQjpEzaTrKlB0mGlE36cT8iHcc9x0mOmElOwWP5VclNBHibm+BdvhbYpY7L dmiFLTYBK4FCZAJ7f4cQA+aXtyEcJg2IU5Fa4iQ5JBPv+ogom3GSRrKIhmSTCuLBPDSP5BMfsZFy UoJRaBnxkgziJ7mkmKSTBHGRCKkidUSHe1mJmxhJFN+lxBtSQTKFODByVeMtIjupwbdNwztTpXgr yEBipJrUo0CESCMJkCY8C/17mDwsFAh/EpeIP5M6pGOK+YpPlc3KQ6qpqt+pZ6vPalZp7do/6abr XtO36X9jaDd8bLzDFDAdN88x/9pyldVhvc/Wbq+wn3KUOk45e513u3a6de67PQWeH3mn+tS+/b5b /Ur/V9Kmp2emHwt4AzsC9wXtwcbgzcGngq8GPw5NC90R3pIRz3ghcipzH55GCe/DZukXmKlLSEMV 6SQzyPzniBEuNRepFo4fdzY2avLU34W7TCQhONw0RBAakmaFaDzh89VHTpSpDkrWthEh71i9+iBc yfWjb4y+VDD6xnlbVcF5oeD1t954y/LBS9aqgpK3zr1VVChYw1YZDpOoVjtUkYx8sSweKy8pKa4T y0pjkQyTKMeVllfUSSXFAVHCmSymTqRhQfrFZ/OkmaMqcW+kfk6JMuAzO4wqpZjmseXVRi0986O1 +elqSa2SlBp1VsW0jI7LmzJ+o7amO13pNo3Glu5yplvVo79Vmj75h9L0aYPi8k8PSaqaBfWZ0t06 jahQqUYCHm9OTbhtjtluUejtFqtLo7ZZDVmNC0avc6bRe6Q5nexeo50wS2T8E8VepQMlJkbuP0ky x985ZrAI0yMjKREbGX//mB4xei6wpvt+0kejohb6aZQ/DfJnMkuI0sO5eqEzMxKL/sugN3gy0iM6 o+BSGIjBYhCfjjwf+VlEihgiBlt6t61X2Uvq6+ttVVUFBQMDVneVFdJaYjlfbC2BxRMDzA+G1cKo y6WSTR6XwpJJimTEYuUVArOzWx2RUC81giUaDEbtWsX60T+vkXT2SFp61CxohGGF0RsPhHJ8JsVu 4ffC96e4/CaFpDZohZqxF7VGrUJp8rsUw3qTRpI0Zv3B0d2owpjHEoWA0hVALaokP0r6gh6L0Bm0 mOmHER8eAz5CSCt2GOYns3zOJI47kzjudOpz6cm59ORcenIuPTmXnpz7rFgM39Hp49AkVgJLH8WZ 4PeP4mSZcT74P0dxiXwcZ5aMiJak8SH9ab2o98X/VVSkzhwRsPOjq3RE0B9Rzyb15+vlclslFAy8 JVut+FyCCRTnRKKKaRjVYVJEwhmxMmtpeUkYpdJJy3NAEkrzxUjESguz/YJUCMHKmUs3to095c7O dguxLYeWFrsSU3PKFjRljY36Kue1D59p6C73zoi2XNb10ic1fQ0xYfOUld11Oc5gXHF1PJg7e1dn /uyWSpuurHudKBRML0sbG4jUzBx9vbqvNjhWmVbRjTZucPx9hUEZQC1ecjSN1CRSVgHLVgH/7Sis An6PWkU+DqskviuWoAXzCAVovWJC7rC9R3FKyEEjWCjkH9HOQZU+d55CKGDJt7x6pqgw6jCxylsq V0sVNQCtprQCOx0BVFVWXRUGUalxJBftbtv7k1s7e+76+ZWVa+Y1+zVKSaHRa0zFMzfOnHNwWUXZ 0tvmd27uKjWrdSrphMVjMzmy4/7Zj3xw/8OfPb3AGcrxm+w+myPNro0XxJuu+96e3d+5cmqsIKay BlADaSm7FaXMhvZ4ezK9PizYacmx05JjdyDNdhsSbPcgtfZTtOQQHysxvpRtZMZ5YLnEgN85irN9 p7C2poVtDMOmLv+IEDuiZKWE2+IcLxEDKBLiRUVCPakA3Drnm+8/OvaenP3Rx9+5v+t46fonrnv6 yJ4nNlWJ9z7+6Te7WUbP/cY796w+fk37Z9a6fd+jfRlSJu1BynLJtiO+eCpHwXKOyoynBstPLR/H U8dHRGtSq7WH7CE8vG9E0CSN+2LC6ZjwckyIxVTeEaTH2BUHHVFNlPqBjZuQxQVyM2JhySqW8/ni ZMkZHbbyQh9hUtqj0Bk1o3fSFIorNEaNUomPMZUwrEHToNBCzxAFjVGnaLH5bRqWWo3N77D5rZqx NVpLmt3ms6jHijRWv5zu8U+k2Uh3nCw4oran0g2W0y0zzdVUuuXjNG+R7uPGdBJIVyNpR+12r2pE yDqa0eWlDWSqRyo4Y01VY6SOZdrkxPDehldsaTYSph6D9dR4eFknNY6Qz5Ph0CCpzXLsGXsaUtGq tviddr9VO/ontVGtVOJD8VQ8iC6Hpmj++HuKHcoQRgRfT6anpZk9tIR6aAn10LbNo0MJ9ViQCg/N PSN5Pi6E4sn44rgUN6fSD5bTD5ZrMliuyfJxXGkeEYuPFZQKpZ4RQXcsI6OqoO6UoEMfrxOyh6t6 HCNC7pEC1Ge5NqOToB10qp07NzBwhuU5olN2uag2l1dYaXtHa7uc9VbaAtLOm9V/hWKHQmNQGyoX 7p932RPb6pt2fWt57e6ysXNWq0KLPuJrepdNZ6tesGRZ0V1/+8acgW+dv6396uVNPp1ioT3dronl x2Yc+O76PaevaUxPF3ZmZMKMGo0lzTZm98XSMzyGgSffP3TvJ0ODvki2L4PWC/S5s9DnFpCRY/VF QsSQMhFYNpHMMCtYrhrycZjIQI2b5s7UU+vrqfX11Pp6an09bR/0tI9wk6QTHUvSTj8sVmE6SeI4 cdONQThA+Rkcc+d0owPJTZpPG4SXDYLh4t64YGDj+XoBvcY52pOkKtSFijWAFpQNbDAkmpDMmqIT cVwqZmkcYY8v5NCMHoXy0pKncWR4vGGHRuyUyyKUD9ZHkTNoxLrR73Ot+A1Xo5+IKq5T9Uvog/2c ZNaJevdM99NuiaRMCJZNKDNsA5ZNKB+HhcizaBN146dPwBI6S7c8+EAyJxrCC+niKRD6+HNrnWE3 fe6Jp73whLy168BT+UjrSeJkTTT2iMmPIzMeByw/Dlhuop3I0WNEa+52jgiJVHMmFJzljyM/Deup WYcE09JRZQfaJO3oGXc2N6XwMh3EdDj8di1ap6e4sT59WGtNS1lMlUCLVEueTFoW122oE42Fhe6C Al2+xyN3FyhQcjeCMiUznhUsP6t8HKbz0dIXyCwyGHS0/Olo+dPR8qej5U9Hy5+OWhcjm6SXmjqz vEvvcRsLPEX5qmBWV7CXD/bqbRjmlaB48fEJxnq8bFlLrFVTCkpK6OhvUimLCHTEly/Ghcik8kZH 3gHRLZTQYSCVTlVC4wh63WG7RhwrkfTOdIcz4NCLYy0CyprXE7Krc/2rQoWZHq2wXSlcp/cFY961 Zr/dcCFTV356SK1TSwp05hhe38NtqXg0J9Pgy/J/Nld6NJDj1Wvt6c5UXd6rtGImde3RuNnsSJVD mWEgmWEj8Pt03CKHYRyHbMyALj+/mBqz2INziz04sdiCs4qpMYvpKRYSqOzW5ZvjCi/tCWiHh8Gy u4oaL1UrL9iuADaTiwyzVCwWj7hczi+wV0Byl8To+C9VqhR7jU6fscIXj0ScY6tCU9NEUdTYgx5P 0KbJ9XWnx4PpVqE6vby4yCOgI7QHva6QTdPiwHxCn14cF9+suqKm9a72z/450XU8kZWhc2cHR39U unTxQMHMwzPF72K0jb7UoCYY8ywdP694RxnGrDNO9iR9DmoDBy1QDjrgcdABj4PaAGYqSWpDmK/u w3g8kDIuWK5VYLkrActdiXwcVwVOYVCoI150HOaeCK1ZSrnjmBgEnkt1HBf6ilRPIMrjnkmjQMU7 7Xe+ceiOV25qbD/0xqFbzx1sOh6ff/eGDXcvyo7N++qmjfcuzBLvuv+zI4vmPvqfh+755OlFc775 z2+t+85NM2bffGrlptM3dc6+9Tk6xsOI4AXUvzTM2XccyVSlEgKWEyIzEg6Wq5x8HAlR0SLgtqZT 86RT86RbDEZhejqdRaSjvxwm1ih6y6MqlQHJ1B91dhkmDRZYAeEVK5XWi6sPWhPFpKGe9EJy+7d3 3Km1h720ocvxCc6cztVrp2cfr5k7kPvg12asbM6U7hy8b13tWP5EvUBWq931C3bOnbmm1DT6cVbL UpbDU5XXI4fj8CvckkzXhW1ZNBVZNBVZNJOzaCZn0UzOQkqSOhJKK0zblyalFaeMA5aNA5ZzGSzn snwcl6F+lByzhXXGvBEh+5i7J6qooFltpFl97iwdMWEmxOrIuQvjg6qiQmWqw4qz6STPejYLUsqz oEklAKnQGVSO/i3X1BXdtZSXhJt+eWurPbsup21da5ZDM/bkpYVikztoVYXr59UGcuc8+uFD935M S8Y/7u86dM2GvNqGDLM9Ir657rmbZvQcfHbVpudvRjH5DrUaHRnoUU7K4XW5PRmw5FsrNEhqBbVa hZz3FdSKFdRsFUj/iWw648yut1JbQcmMc2WGkcFygQLL/Y0VBWo4Ld+CUfUzG5JCMumegnJzPNzl Ts3D6Thz4PyE4SbNIGE43jnGpXwJE8UL/T6dRrrcASk1kXTbXS6hNBaPxVLTSYVe5cgM+MIOvWK7 M69uds1mXsQwo7QXTfV1bJ4Rj0xbUBUqzctybDFpxkYbZ3nrS25/vHHptCCaZg1aDjSMRaVz6yOj v54oehigKiVj5Zz1DVNXzqx2mBK1M4rG/pCZLl07fbVbrRqbHq6ZhTa6Zfy8tBRlsY28fZJMhWPD DLfFVGoymEhmmE5mFEmwbKqpI2JuMlGctDuE6cVJK/wZxZnFBr+HXuun3Z7fgqv8tLn20+zwP4ud lOj7jvrlUcfpo94UOxg/Y6ZDMUP+KSEOt51OiCX11lCFUJHUG4TpyJ/TSR1VFdYKq6sWM4DjU/3K 7B4Xynaq9UJ5Pm+lbpJEYsBy3oLGbNLYTJ748IHaRLOm4GWbOajyVanwpRNelbS0YfvDA1PXz61x 6zEU1phKZm1srxxoyCzuXr1uVXdJzerbZyfmdtbaVQpRUunV+oLGgeryWaW+4p4169b0lAiXzb8F boFQhicahKdKnZEVCVTMKqmYUVNUUjd748yuK+fkmb1Bu97qsdswD06LpKcXTouWz6gtLpnSsxF5 ZEYL+RpKfgZZfsKThHk9VozZTh+DInJzCGPLzSRKt8w4AL64uaTDDyscKzhmVdno9Ck91SIWY5D3 gewU+UHCciaRstCksWuYTwfkAdZr8qTvEB/5jR3ik0LpGnlKKM+ZPn1goiAu0VjT7HbmVqPjrSfQ v+3EWDBB7kmmL84TQrTWhmgtDtGiE6IjphAtNfgdJUvSOnnEjpJGXKkmECw3gTLjOrCcYPk4rnY9 i52zGM3ScT191SKpxcBeF+u2dGO6z8uNPIxPtYMTY3kMruTpI031xDDAmnJ9XIhR7GzaN7L1sqG9 jWzaaNfk9mxt69jahWEWBvNhu1Z4Y9vJfdPqdj6zXYpwc3z2j3nXYbWq7+q5kpvHUatkoHVbBatk knXJ9EzasGVlCj7KMZ+QBd+SUcj1CrkewYv0y5VUFrTL8/AYKpI2GuX1eD2xaLDbo7Sxcbytqt5q E1gNSSCLycCAMDAwABdiVB48KuLwH5SXTxoyFsOlqBZPKEzeeLor7LEa1NJYv0awZWWkhW1ahbBZ EFZLGjRdwUyjpAlQ96CgUML1oxiWHYhwCXz6vKKexlMHIk3jlPFPVG8ijbVk5dFYrYDO6qNkA63Y URRBDRVZBQIcpzQmKmR4qMjOEDwhKvKKhLxCIS9TyIsIFd053ZFCvTTZSYpxXz1yDn/UMZr6xxJH R8ayV5SOkS9N5sQYWU6wcr/CkpYdCCbSTIqxD8RPJJMvOxTOTTNLY0+oBGssFMy0q0UhIggOSeuI BtLCDq0kZItCuqSyR9IDEYugjJmsdDRnNUk//6yAa8VhNxysksak//SMolpvRqsNZ+qnP1TU6KCV Jp+bWiggj4UcWM/ox5ITmyfJ0zXUDplR0MFyQQfLjbE8bTOgoLvlWfHpJApApyHa7VfZulV0yIO8 p7NVVsxRuy90TheMgV7JXVJeXmGnPmM559vY/MmpGbtDrzTHw4GoS6886i32ie4i7zFJb8/wZWZb lHrhw7GJwi28Lv6GJlMB58nYzWVbaqo2VgjbdCY1TaALffgC9Db10o+xFpMkQ8mQeVpwWsE0Sa91 lxpQ60tp/S+lVb/UQrsSeG8/TMJVFDcTwUBoC0Gqaa3HqeB3aA8lMy6gLNeK6hFRk3RY3T8gpZZS seZ0qUDgNynNn5ozIviT5pczhIwMRfq7+e1TfmfoVJCClGd44Dx1mwxsXDjAB8JnEgsHqgrYCLEY HfxCzLjooAhzg7JJg6OSMuoNnFjcqFPIUy0185a6SorLK6R6S5rfFzTV3N7Vsrkrr27L46v3uIpm VE0ZbCsyaDDwV/unzVlROnjD7NgjBxuXTQv2z5q6forHYMDI1TCvvjnavGLq9A3t0ebSWWX+9Ei6 xuI1e9N9kXR7bu/e2WfcefXZzT3TGmHde2DdV5QbUXow4zpeXy/owuWpwgKWe3SwXGhoWLZX+Yjw UdLvTNARZyIEiyao/RO0TU5QiydGRF1SS5y68rKwQlk4IiifibX7my3TqyCPKDup04m64NwYF6Vm XRdsNtGOxrkX+ULzaWWrE3xSoba6YK06UXqlZOltA4m25uY4vIhOTKNUanvI48WcKqujtTVryU1z s55yls5JhuqSTfHGPQ11fRVe4e2tp65ptsaqs9ehTUXxM2iUlfLICB+jf8qujFhm7B/a2nT1sim2 nGnFY/f0zK1duhv1bR4sFpJehEv8xiNpqFCn6UAR/CYtW7SCHYMxiOx+xQHZLQubgOXR9gW37Pi7 9AK4Z/VJY4FJMHnfDiZ1xtYgvEjiMXu79Nci2l9rja1FuSOC6ogWZhs9l6DuusQFV90Z9EDMMXuJ A14ORjIwMglMuN+lkKhUe2s7+goG71peNnXjPf2JrsYyj1Yl2ozmeG1v9fYrw8mB2qo59QkDnbJ/ 3eq1Gr3RdFty99Gt1z6/q8biy/CY7B5bPBjOCp94au7+vkRmIqKxw6cpksWwy33YNxzDmsNNyWB9 jaD3V9HaWUV75yo6uquipaOKFpaqU3iLhJACZrUCWsJwHCz3zzLjIjkeZxfQAqWzh5v1VXG/woRq qRz2tKOqK46aOrGMjcIkFye0WamOmRGtgxecHpOrIIbXE920hHH1pAlKhXSf2prmoIt7LffMX3rz 3KziJbcvmrk/qXYEaZnSPtpwRWM9ShBK1NTwlGRz3MsL0PbOOZ37jyzZcuqalqYGUc9n76NNKDtL 9iQbr16OstSAYa1IBmCte9CqJbA+/FQyp6C8vnx9uWSntckegpXs9nAuHQvnUmuxBS+5fUNZ+Ph4 Y+KRhEiXco7T2laqSBU+sFzG5DAuA7MGTkHtFw7nvrBPcZtCPK0QXlYICkVawe9i7Z53F5s2mEST 9t00uYANsFUv5v+XrVj8eoJN79HY0WEAKqgqEp5UrFBPJxc+0Rkvlw2qlu6Je0eHA80bupLL2goM ar1KEiW1vnzOxuT6xzZV1258aOmaryzOe1TauX3KgroMOEni4Y4dc/KdPqfa5LUZ7WaD3uux1+0a 2bXl5FVNjZu/1me/+lD+9OUVtN+LYg/5dcodGBksG3ZZaAWUK54/1WpRllsrCLnvA8vNGIZyHw8X 5mBd9eWkjfpzo7rz5S2+2PnC1tB0Syt1CJ0vrkcVS5wpkYe4ZxIlWOPiwzu5qDjlFht2mDRrQzMv TwfQustuIIV4HcY2KrUzkO2PloZML2r0WqXN/KIGTRMcZ5orLRY6Nbgy0rq2PTIt04Axj9nuNim1 eq2npKt6idrqs2eGPvsrHR7R5THJGcq0+6zqgYXXz8k2mg12eW0EVlCcVu4kg6T7WEtLRg9aj4+H 8w2Y53ycDM7OsGXYSFVJvub8vJae1pnn65sjroLzVa3Z09OmG+SkIq1ILJIsFJwpOUMHeyVvFVve KsYiPU3zRDPyRSmeNNy/JPFs8nrh4jCzCY1WnMbakDOY5Wuf8iLtyayWCYuMXX6pbTJbL2vJnebU wTj0qhCuqhUORRGbaHBqjWpJaQmlwa4rNiz9vLk+b7regWvnZJu1CtjOHkqHoVdsmDt4IY7WS9hT egb2tJNe0nCkCbtN1sH1FYRRe7uwa/fjpLO8MLertfN8bUso93y5WVneGpvupU1Q/bmzWGWHLeFw hg1f/+DcWy9dKDapQnFhB8NkR/8l1gug1Z5ku2KXU3pG64oH0uNunc4dTw/EXVobN9UXGK1ldaMr N9MPf6sIy1l90bSmalHt8yp+mhajd4ilpUW9Wq03+mnRhcL1eWvJllFotDq9xWMNpak1apjZ70nV PekR1L1ZpO5YMBhp1tFSN8sLp9nHSUdVSUFHs/18fUuEFTVvq9xEs2qVss65VAnjLpAyKxsf/d/X LjcbCzilR7glRI1aX1hW6KqblW89yYrWSX6MV7acudcN+CrL4m6TJKitWLlDRfRyIyh+IEmobN7S 7oovrX2LB67rzVao1WqdRmfAGiBqsNwW/V3xJOyxnPQfSbbT4ZFheSRCSpcvNzT3lRCY5ajLYpiB DivpXNSZbC1pra525Z1Pa2knhvOuVpXchdGKiDaWtj+sCJ07g2AJgPqIknRhDH5peVHwoRIzX6q2 wX0/udbKQyXWbqVW66zCmkvtE2lZi1FjABM3SaXBWj1tu0rQH92lsVF3v03zZzpzt5nfLm91RdOc apwET1Igu8DVsiyZLuV/vhTJzZXZSKvc5NbtVe6+fpVV3DHdwCKtTqs0eWzpGRaTVhWFDwvvr0qk bOxO6UbpR9hxNQPv9bycdNryWug4okWD7rElZLEL01tK6jEvpGN8sDyCAL/5DD1Ur54JmTSabcL0 mX6FuVAqUatpf4nhBnqE00kjRF6J2u9Xl+QpaC+SLEXXSfroV/SFLLisLyea1IOj5kK1VNn+G0PP O07n4krpL7WtOaFpv65sn//r0MzUdpF6eU5w/lU2uE2UnE0kziTcaFWpm8mKEa/lbAL/E/yDtbF0 WUH2/sXgQ3U6XO6U74+vqVZgAoE9UPSTdi0uN9yDcAiyUYucr3a4B+MmOAzZgPhGu/mqSFrxwL4Z FUv9NvfU8r82bOjOL73s0Y1r71mSawkXhYoKiqPBzNIFV03PbgkKFqt1bGz5QGFLgXv5/KLWAnfP oq6/hLI92mu2dSyv80tbIsHMuQUzdvTkprts+YFIvqgTw1P6a+o29BZFk/2l4brKEq93eu6UxbHo wLTOXbPztJrw2AcLVoYq27L6VwQrWkcXVteLGm9edpZzakN6YR1tRe5BW/sQ5h7FZOex+lIh58LS farrnrSmL89E7LRmuQNsgZYOLdkqrTww0tNjOrY2i/UkuGRVJ/LaM5u903nrY8N0I7U0yaYbF40O rfKcTKW+UMv4ao6V+Tic0kOoBPKswpPfVli3p5HVCbuaTzZabmubt3t6eKI9Ec2dCxsz+3pHb+It zOQZRkfblBU3DtI+59rxT4QuZQHWX8Pk5hP1kZmR9RHJRYcrSCL4go8K7iiE5cIL5r4seVjjOoU9 mWlYKJUt9fmF0ZRJsTD60TO6IN1ThR/RqTvmtbTJ9nn1fCI1eE7NyOhI70LrzG1hpx0TLYwohULd pQaw59ZUJygmTCBdg3kVbSXVQmF1TnYVgBSPvzJ2p7AMKc7EStR1R2cW011u8nQI/A9aj8Fs6Arx Pt18E6W/s5gwoILK54G5Q4ON8hDBPBu0C9J5vaQ4n6YxH2k8mhVsw3YHxRGlXEuRUmtJSSqxZ1hq kdbUKkbKxStXowsTz4uS3RVILmsJ5Xng0JLUWrUq4g4XBEy8JaU2yEnU1OSYl+2endDojFabke5m UTryWtukw583B6sHe1APSslXkob6ciG7SChK2oROTABfloewEPLsEvwutY4chlGKTuFXBDKIIZW3 X77PAVXD58rLI9QkrIq4MvTKrLa0ZiuvHvLyDqaT6G3kUW/xm7J7F5aZKAbxSV0QLxDW1I5BjFjU guBySXs08PL4Ix6zauyaS8uHMFtj82KzQgbGbuaxZ4V1Rr28GCGpjVrhH2PGz1eTz34BX5BRK2Ha oDV4LGPPjkWtzlTbIdTBZk6SlPcsrJf3LMhlf1LZSBWJlH3QD390TGdplgt8qgB8YSn/fMmeKNAX anDqKZQvYxY3i7yb9Nvohh15X1lM9kfGZWfkhm6heVI7Jj8RwvLykszIErBcquX2LRBwodoHAsVs HwBt5thmALmZoyOtE7Po+smsOvgS5Eowyacg3xZhuWmQGZfHTwkfoZG1CKrhjnZMEFRJ49T2uua8 yrY8DF1TzSPyn86i+Qy6KrWXAPOAlBeQtpbyj8xMahWoG+uiJvNzEakVcWfKT5watClfZk2pXePI bcyv2txEaw92GahduQ35VVsmWlaVLc3tSreop9/aVtnfWGjJ6+poyZy7rS04kR9ipOqSNvbzMVhk 0KMIafWa7b0zfQVTs4oac+xofKfzPgg5WEwOJc0sB2k2prqjS3Mp1QsxsyPXUrmJ6uUP6C0YSbAN RHTsMHkXkfDRiVTHRLulpC6vPceb2cZND18rzM7NnFpfTln7f7L1xab98u5pwohf7fw/dE8XGQoG Wkx7J+rvegMWonsLHk+m1WcLWTYh20pXF2IGIaYRYmohR/Zny/sFYASwXP7AcrMFvng/AXVHBAp0 gm7SRgXq+Zi0UeFZ/FYJVv9OmEnnBmQTdikKw+Z2TDDElAMRJhtIlUy+b422Vak/Plvn0y7uMuTu MOmN6s3f3rT+m+vKqzY/uRlc8ZS/bs3MttWNYX/9mpmtaxpDwp/WnbyuY9reY5vA7eA9bVcvqSpd dHVn+9WDVaULr4Zt7hk7JL0C21Dv6T7qPQ2X0+3ctN8Gy5WThuVGHEIuLqjBGMQ4meNUdqHKa6DM h/qFntM2y8wv9Zx+keP080MY55c7Tu9YmNU4NZnJm2oUFofTb1NnT+/syltygDpOS2THaXO8cVdD XX+FT/jLtuf2t1gySiNjddxfqvgLKhe2euu1O3Pqsp3Tr3l6a9NVy2rt2Q1FY/fiHbFle2hJWgxr 3Zey1nVJP8wV1Cdo+5agHkJmALmRS1DvYA7eeZSLTUmqOIHlVhLMd3jLBsVObngHndE2/ZREUGFB l68c9rVXUu+gpZP2+V/sHZSdgxPlBCsvfLQtL2jxguP8vHdQS0eBQYc6u721LU5NVLz09kVZzU0t OfRlAEeaVf05D+HYMW4p4Wx2VcTMvYTWaE32Wm66sX8zNyFzOcNNKI8MxMdgsRKy9NiGMiFmThUq sJx0MCtcVNBSZ6aFy5barEiXPmm1Ij6UuWhSm2iPmZ2hNiedbcrNPXw+fAWTtjfcGHRe8QXjYFaI VOJjokqr0bjTM53ewrLqyKSSI7fV0anVVenGcGa6QSEJ0hJXwKrVajWO/OkVo0O8g7/Q0Owvb4yb JY1OpzXJ/qyu8fPiS0hxG3kpaSjoqO+Y2XFlx9MdyknbC+RqJYfRzIJPH8WwWA6j7ZEZDfjUEeF3 ySDbY0CLmJ8WsdQWAxz20yba/yx+vohur9MhQAxJxGMIdToZw/3qDU8bREP+6xW6v1pnWRdbN1gl tpXgt3QfQbvrHbaMATOyTQSpLQR4vYJvwsOhgpQ7mnlNTXSH5//1FgLxpZKFV88onNtU6NIp6BaB RP2cypzGYn88Oau3KxnP7t7dndlane3EVF3C3jptRnlbQU4y25mV7O7tScYFU9PlyG+315EZtGP8 6Q/5bZHyaKw0K5iRqJtTWzbYlmuwOS0Gs8ti9VrULq/LHilMi5dlhTJyamfT0U14/O/iWsW38ebS gmPZxBrJS1VEmWFTsJwXYLlCygwjYgMRHCBuY975SGu68by7tYiOvtXyus957CQS4GOUB5fFZ8+w xQu2e9h6qV/jSxwY4lqNJZSd726Gy2Gv2UY3l1/B52BvU8cP/BMVLe7MNIdGqVUq5k92KDAf6pd7 H8j4OE239HdlAX6dC656vAlVKeJ3WZg9pN/BHlPJlOGCqejKPzqWCAQSqHMfJw1SWWJqqyVxvqas lU42jkY7tWxh4iycgkJB8etvMUcOdavCo3ehjYYXVZ5tXOya+QJTSI8HXBgnub3wWY0VTErgl1tD OuH3ffbViVrnnOxlCVsnvCyXGgVpPURXc6TnMC66A2s5pYI+TmtRnNaiON1hEJcb6jgdK+HVgY+f IXRISoKpZggslwzwR3LnRwWdxtETeIQ8r8Mk9GNss8hri+uV3jYMTpUXlnRoG8XHoxPV6qJJO1/S mVjLYVsusD+dz0+wmGNLd7rTrarOu+Thj9rB3O/ugtbCut1NWNShfi3txIBye++M2pU3LhEz+Jhx 9F8zFzVE+3rFrTyGlgXsvZB2wz655A8n8dIXenS64SAo70iIBoUAEwFBnqYj4fKOZTDfsMoHj7ZU S26FYZIVOKECIyurELcIWUohIwsRUzKEzAwhTCXeZckMCyE5NiRkhoS4WdgWFsJ0KUNrdbaGQ2i5 EHonqUVTGA6hWaMhOmUEv5804B7hrLaw3temZ50A7CvXRJIYkEdPCbq/YyBB93mk3hSjuyIStGdQ T2wZntjoL7rtbrb8j03UuwVREsfOKoy+rEAgy4u9EC8plHRzqzs9gjfIxhTSpyLW8PzugFUtPajQ 6gzqz75Ft3ooNCadNNdg00pwE4j40I76DAbxz1p4/UWNnlq7bPwT5TWwdhN54yS2n51OTkHSsFqL vXqVQgXlaL4QCwuxkBALCrGAEEsX4mlClkLIloTqGqGmWqjJE2pzBUsIW3vw46WyC4UyllwREcId LOhD5WjK8oYIM402T22Tz6PGrLfMtKy3XGlRWJI2V6ulpC3aVn1brpBLj+XSnsNid7WuzN2eKzYh 1j1dbgFeoZYcOFNffxaWZPaWbS5vqGFbatiglRka0+jU1mwprp60A4UPSCaZfJJUXqNQjn0oGd1Z gWCO1yB9RxSflow+7EqJIzT2sVJBW460DJtG+rUoviBqbSj22I0sviYKr4rYPejz4EVI6UG1w3wh U8SDWu3o5gtZZHaotXrkEGbroz6tFjmEFRi89acZ9fCQqMGwXSDZqB0dyK8Cct1JUgTDWFHysF0H DhnaYtTkC9h39P4zkKUeAW9QyG0DrSpylEvQ0tKag8OEXlNLhMqIUK4X9CE6xaK5otcXFWa3RfTW 9DbuwaCtBd2vJC9SynuVYHb6nxbkqEveiIHNPNKFdx0nbWWZ2MMiSA0aezwYiDj1il+9ptA7M/DK o1XQCp6xDzWCPR5Kjzh0irMvK3TWoD89ahO1Yx/nmuwGJTwUamH52NdAktJgNwknhMdMdqNCUunU Y0eEmSBJoXeYxxbS1gMj4T2wTybpPkn8SGsZklnhF7L9gocu+MY8QsxUbhLjWsFHhyXVPsFbCa7x CsE2r87eputQzCQddNWJbtVB1UUq2easgURYYmspFXbsWBdipRNbtOyy89jlUIslO1RFxb6QVVTt 0Vqksec1lsxAIMOhVQqC9JHKmhFKy7Sqxo5brEqDwyRUKWw6aYHTY1LiZU7jaL74ql2vpJ56pKQf A/vX8EthCVJzkliQEhfdSxaT99YW4HiptlEraqNWTNyOelvN6CswgcOD05Uy7OAaOIt2B9lDvd/0 xQxayiuEi14uop5xtUC3EYqvqTQmzeirTj9tMoSDY1da7PTNDVGhx1YzGje2VXgUGwpVzXhlSJ0W zjC5XF6LuCYcxZtlapXJZQ2ZPG6fZfQuvJ1FZyREOiF7XvV4Q9uB3VPixmMqrURXRt84i56Heecn /J1CF/dvjj2tOJtyZ47hB1Thwf2PNFe5EB68VhJLmjIzg1rHUaWyUNtYTd2swhH8qjBmIa/Td5/l FQJ6ZySLv/QsxZA1qU2ln9sZxIflvAWQ5hbP29upjsSdAZtGJWhtaTbX1AVVvlBycFr13GS2To1F LJWjqmuw9LJ7lxWOndF6sgOhLLrilxUKwKkv/b7vhsXlyg/MZlp5BfSOdnV244LiqkVNMW/Ao7Km uzxee9Bnm7Lq5s9qwgm/Xu9P4OcgvHq9Nw95mjP2hrCZvIl34nXDencasZw7yzYzq9Ws6aqw82cV NqtMbuuNSqPda7e6dYLiWr0n0+fNdOtvDZbm53lfwjqa3IQI9n3+kEWlsoRovpwa/1A4KH1F9jn4 jxC8trD7hC4QgcfEjLw5W4/MwRIrM+LkadvEqCrV/QsHkeZgKAvtkycrFGQ2uCgshUK5NH25oYw8 ynmjWWEWgQSjG/LhBxYE8lU8zzqkWE/cR+j22dPPoA1CSUEnikdJfI8mf5JjfF1BXW0+xdqWgvwm gN5DGHtb0im/C4+l5ohFSQowEMQqJH16/ta1+nGF0ZHu9IZtCpU4oDDaA07sN1EoPzBiu5/aaDeq dhvNWuSZw4j7NQnHxHxxCn6vwHSMqPXnsTHtPNYNWZmVaxB7G1nMt1nHFtrwJ3wddUMpfBwPBGOx gMrqw12uHXtM+KfyJvymQUbSKdHGWaJTI0muwJIzqL+W1BfA2mhDcWcVXue1uSdeHM+X5PrKnAvC 3xcNLJqvFEzpXpvPbpDKuyvTglXdJQLe53S50yyicsmLY/2vvjY27ycGq16JV9CUK37+q9c3bvzd r3+xEm/ao6HEL8QIZBee6G08UZiUnCQ2TGvxTBglyR4lysdpA2ODk/c07Swwt2VPmChmj0irFTUr fZu93FZWKsZp3aKvNblswttplV3lkgFvD/vSjYJywcKFCxWiJc3txCub4sqtonfj67/6+Qrs2hCV aFJ+LDz22qvCYy9qLXgPWaVSnB2bifVIMm5U7VDm4/cC6W/6rTm6cb8HL42sTRblGzx5lWS3p9fT S5qXbnkrmBUs2vuedd57s2Z1qA378zdmKq1B/Fs45b3Lr+nq+PtCZFj9OfpeBV60dVfRLRfYhk7f 3UI+fk/ei/E9y89fxR71twC5sMvzJKzzpSaS8sZBdwVr4NWSis4jMMGkTljTRTu/2BadTHkBUUWN oZT3PGHdWJ56VAiqHdZY3bztndnN5VE1Ns01hRPTSjI9OlOosmfT9FBNebHPqkiL2bwmpdhvKWzI nlac4dIVbHr+tm0jNy9rynGpS/aee7ht29xyzESVooDtdFWDV884NTb6jVZ9sLL/ym///uAjf79v +uhzsVklmMVGXNqyek9xZX3s088kofGW67bPK7FnVkWzqjIt1nAhVlYT67dt7K8whwrDfSYTXh5T j5XO7cluHlh5efHc+7e3lPZv2X/jlRvi60eua7farWqz22qymQ06h8PU98ifbym9/p4H775+efXM 2352OtmYPbV7TlewfZY1UhWXutG+tGJ284L8vlQCnnvvJQ7NKHdoYkJ7Ohk1i53Ycj7JVUn98w46 E3LQF4cc9IcIHKdENBQkxCbCoVRxBcseK7A8HQK/Q1sOjNyxUT0vqdXRV7GSRKJOwqQW9a5AN1Mn Enk8jxDeCRTplkLqoYDQEfzeG7Yv6fAaFn1Pib+GdWGXNoYBlrfoeAcLzGyKTV0PGNGzv0t7EnhF UaIm3tFXSC8UrB26atdjKxKFlw/t2w0eMvkTtZ2FvWumuAJTl7dW9k5BWyoe+Mp/jgzO/daHDx36 UOYnB+/d1lvhnXXzc5ff/pN91ZkNCzddi5q8Cf3rfbByHXzrxuxyIREQstPp6DxJk+Smdk0KLrpt FJsjUKld1JwuGOaZkij+kSo6d8HRqmfxQ+R6+HlgOj0dnOthG721sioUqoI58p8pcanyeyzwkWax dz6LqXsLfhn6/jrbxnyWVjLZJNQeRN7Inhp0sNkMncZcsi1Xrijy6EMtv8Rwn1Jr1o6WmZxmtaQz Gz6du7rKllY2q1TelIthnwI/buCp6b+sZuHBgXxXy3Xrz4ol2K+tbKdvaKgtAZcj4HYbBd2CO3Ys SSQ6qzMysjI0toATDhiTMzPiKVuwq6lu961Pb3pVa5N9YStRSu+A/foE5Um44U8n06jJ5glFGhil iDbTRbLdiqjdikbEsqRuRk9sxgwPZoEw8TvJGE6J0clJErGxpGTy0yuZ70u+0k+vxDYIefzth+WP ywNuFDmsvqLEmeiUCNeD5fYXfDppRzaYapKIrqHTpOkFNQJmr6fpeZSTOhpZY62xurBRWJ/UtfXk /jMUUrbRl2/0Ey/fYG+QZeL9G8ww6ZwIL+CwUovmUN4xgS0TVawg02xLFV+VvPwckLe1ylk2MQL4 ghHUhUx0BiTpjrotT1w2dWNftVmjkkxGbVnP+sZpyxozEj07O3cjr9QqvUm7cdrqtrivtKusenB6 MQZTagl9lb26d31y3g3z80J182oa1s/KEzb137qiwpkeNJnQZ2emhaKhjLre4oq+ZIba4nPavWZ1 RrK/IqutPBjJiijNfhdtouzI5/zZW1umrO6q0ovqslmXoTUqxGzpl3jHIQe/O/RpsppOZfOEeK6Q GRcyY0I0TYj5hYhPyPQKUY8QxXsdLiHmFGIOIWaBS1jIVAqZCiHhFwqp9W20jOClB5cHwkUnTPKO AWQO5RPIO1daPt5YG/8smY4zLLT6WWhZslAHj4U2axY6DLDQX7uIE8X4uaM4DVtJX6bVj24tTepw WKEoLIj74WtHBisSYYtFF+7WsTcHUOtKsKswNRdLpHx9CXRsdOML3a7MayBvlyaap4s2VPJXiPjw yImfUnHhNYqw9EuH7Q7+/vHouwaLEaMJnVr4hdIeyA2EiwKWO6zOsYfFsfnCY8KGcGzsfe4BEywq S8BjD3jdRskGlzx+Fsio/eyHEfEvo9VovtFm0TkN/VMR/KpWb+fM2a1diYbBy1cv2bT6/wPMT4Gp CmVuZHN0cmVhbQplbmRvYmoKMTY1IDAgb2JqCjE4NjMxCmVuZG9iagoyMSAwIG9iago8PCAvVHlw ZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9VT01XVkErQXJpYWxNVCAvRm9u dERlc2NyaXB0b3IKMTY2IDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hh ciAxNjUgL0xhc3RDaGFyIDIwOCAvV2lkdGhzIFsKMzUwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDAgMCAwIDAg MCAwIDU1NiBdID4+CmVuZG9iagoxNjYgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9G b250TmFtZSAvVU9NV1ZBK0FyaWFsTVQgL0ZsYWdzIDMyIC9Gb250QkJveCBbLTY2NSAtMzI1IDIw MDAgMTAwNl0KL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA5MDUgL0Rlc2NlbnQgLTIxMiAvQ2FwSGVp Z2h0IDcxNiAvU3RlbVYgOTUgL0xlYWRpbmcKMzMgL1hIZWlnaHQgNTE5IC9TdGVtSCA4NCAvQXZn V2lkdGggNDQxIC9NYXhXaWR0aCAyMDAwIC9Gb250RmlsZTIgMTY3IDAgUgo+PgplbmRvYmoKMTY3 IDAgb2JqCjw8IC9MZW5ndGggMTY4IDAgUiAvTGVuZ3RoMSA2ODcyIC9GaWx0ZXIgL0ZsYXRlRGVj b2RlID4+CnN0cmVhbQp4Aa1Ze3hTVbZfe++TR180LdBn2pwQGqRpLRSwQDtt+kjBqbwLJlgkhVZa BFop+BbCKIIBRLnKCD7wMSrqVU5TZFLAoYo6I8rjKuNbQXRGnW8Q9PvUUbHn/vZJQHH85v5zs/tb a+211n6tvc4+O82ypctbKZlCJMg7f3FzJxmf7DawzvlXL1Nj9ZQsInPjFZ0LFsfqAxcRmb5YsOi6 K2L17OPgz7S1NrfE6nQG/KI2KGJ1Nhp8aNviZdfG6tlN4MmLOubH7dlvo25d3HxtfHx6H3V1SfPi 1ph/TlTWOzu6lsXrd4Bf0Lm0Ne7P/ERJf1qyoDWxYsSIyor6+srE1iUtxOAl6CuqoPvJQpxsVEKz iJQ2JY9MqEu7iW/c9NX6b+amVnxtzbUa3T/88bBCKexXOu/4fsePC2xkTUY1wfCXBrSzVPZPplob fb/j++tthkYazn1ELzWKC3rcWY4je8VwOg5wMTziyXP0imEiL1Lu8EaFqyd9cGlqdbFQ0WOJQVXQ DmAHsA9QaK7Ih9UGuhIIATuAfcARwIwF5htWFbwD2AYcB8wiT9gjqsNWPUxko2021psqMukUoAOC HKAlwBRgLrAR2AaYDT+p6QBWAvuA04CZvCIzsmkU5p4ZWWewnoWLSo1qc6zaNMeo9lwaiPFJ02K8 7uKY2/iY28jRMfWFNTE+rCjG0wtKQ+i8JzGltK86Q2RgkRmYeCco4y9SKmPkoAfFYNIALjBVQ+MV 6T1D3aXb9gmFmOCCUQs59D7BIilppdWJXOenKJ0c/At+MmbhJ3sGpJVuq/4tP0E7gH2A4CdQPuIf 0Up+XMYctArYBuwDDgOnADM/jnIM5UP+IaXyD6gEqALmAtuAfcApwMI/ALXx92XGGFTKVQDn74Pa +HtY1nugqfxdSO/yd/U+/kakbFxpryF4SuKCoyAuZObGhfSM0ih/PfLdcGSUGzuNjNojhlAljRJD IgUjHVGRFalod0T5xz2qx/Fg9Qh+lDSAYyZHMfJRUoGpQBDoBMyQ3oT0JoWAO4AHAQ1AloHaAJUf AF4D3qQRgBeYClj5kQiGifLDEXeNozqDH+J/pkxE/CD/i8Ff4y8b/FX+ksFfAc+H/QB/OZLvoOok 2AltbOA28BLYTfz5nqHpDr06je9DBB2gJUAVMAWYC2wEzHwfHxJpcaSjkz10AM+wg0foc4M/Rg9b ybvQ4XXXIgFVSdzjfwMJZJu6zc297s1bUJXEffsmSJK4b1kPSRL39asgSeJedDUkSdwtCyFJ4p49 F5Ik7imNkECi/IE/Dh3mKJtyJVOrU/k1iNI1iNI1iNI1pPBrZKHvFDnHeyOFhYjYVq9neKEjtJuF 9rLQdBZ6mIVaWWgFC61ioQoWupyFPCxkZ6F8FvKy0B42FqEIMe/O86rjvFksdICFnmahLhZys1AB Cw1lIZWVeaPcGbkYTx2Yz2A91fKh486e31Ti9EnlTkTUiZx34kzYB3oY0I2aF07qkJhzdr7kQ3oK q2L1C8eXdlRP5PvRcD+2YT8dAxRs0H6k0X50sh/dpYJWAXOBPuAUoANmeA/BOjYaNBW0BKgC5gIr gVOA2ZjOKUyFUweonOIOY2IloFXAFFnj+1GGoDi505tns9s8tolio52l5rMp+Xo+L6OMDBzM6WnW tChL2fVtyr++TaGE6gR+O99IediIO+J8Y+S7PEeU3RNx73FUD2a/p3wFWcfGkZsVgI+lLqM+huxW qR9Ndv4UeGnEPgvNUiPuIsduNkC22uX4zv6J43N7lEP8zL7H8ZYaVVjE8VdontrlOGq/zfFKSdQK zV53lIHtVg3XXvtYx9MHDNdVMGyNOFZItstxk32C40q7YWiNGS7vQs2b6pjunu2YiP7q7PMc3i70 uctRZb/cURHzGiPb7HKMwBQ8MbEQkx1uNwZ15RsdziyLsjZvkWWzxW+ZYrnIUmopsjgtDkueJdcy yJputVkHWJOtiVar1WxVrNxK1kFR/bjXI996g8zGy8+MhGakGLINJwyTxwwocWbl9FvSBooG3jCj hjVoffOpYZ6qfTPDFWWJ02ZrJlcN09IbqKGxRhvraYha9OlamadBs0y9zN/N2O0BaDW+Nsqo0R9l ulStztXSa/29xFja6g25kl+wekMgQFkZV1dlVaVXpo2rr/sVEjSUwTrPT5+sn0RPlidP29www689 mRfQSqWg5wUatP+aoTb5e9lX7LSvrpd9KVnA3ysq2Ve+6VIvKusCgYYom2X4kcq+hB8yBgx+1nxS pR+p1vyY39aYXwHaw2+oZPBLSKACw68gIcHwU5j06+4a6qvrHgoCn0yVugyfrkz15z4HCuBTAAKf jBAdMHwOZISkj1ZpdGO3wyUfBC4sh+yGi53lGC7GzLsNl5K4y23nXG4zRhKx2Rg+kqCblONnfVKO w+dngfzPYmuNx8N6ygPzm3ytLl/Q5WsFgtq6q9uytNA8Ve2eH5AGVRPu4Lz5bZI3t2oBV2udNt9V p3aXG+1+YW6S5nJXXTc1+Rr93U3e1rpIubfc52quC/RMmDq67Lyxbjs31uipvzLWVNnZaDnWBKPd L8Yqk+YJcqwyOVaZHGuCd4IxFhk5PtXfbaWaQC32T/IenpSIfA3mOgM1GbbOSiN5y51ZK3J347ay nZI8AS3ZVaOlADKvi6uLq6UJz5Q0DYA6NW7KWlHuzN3NtsdNNqjTXDXkWba8azll+drrYn9d+EC1 bLncihj1SN2vfuDi07zNdfJu3aAVzmjQqqbN9ndbLNAG6wLQjT+rS0ryRfW+mPJCKMdLRyHOOUpd hdQlJMQd/z0XjDlBjej04qKxp4d589ky6goILb+hkeMoaJyNMDTN9u/GXUq+JLoCWGAX87Cus73J dRgyxTSEZXedxbLlcSkei2Vxbrh2ecjTdTYkZ7vzyGAZxIjVMg+ONtNuygZyTI9TtuKmLCL9U+Az yfvb9c+kXXL+Dxx08tuJBNF2epq109O0j15gp9FqB/XSTpJXoDq6j26ku2gNXmuzobmNpqOYoL+L Zes78c3kIbwwH6KD8L2UVtBuymBZ+ue0klaLN9BqNaXQEKqmqdRBG9gl+nJqomPKzVRGl9AS6mQh 3a/frm/S/0CPUq/4i/4jJVEOzUc5qH9helt/n4rR4m7aQsfYpoRnyYtRQvC8n5bSVjFHYfoC/XvM wEnXYA4KTaKDrI970Hsrfcqy2I2iFr08omv6i/Cy0xxqo620m41hE7jT1KRP0g9SBsa4Fr1uoQjt QonSc/QuSzad1v+gn6ZsKqKLsZ6ddIj1if4fV/VXIWImRGk4jYOlg/5Ef6YjzMWe5x2mZFOpyWu6 Xj9Kg2gkzcRsH0fLv7Nv+QqUleJlpV6voQGIy50y2vQSfcRyWAmbwmbx4byDPyCWkhUjjkRpoXbE +x70/iHSaBdP5ofFI8pTyg/mvP7j+gDsiJvupfvpeZaClaqsi/2Ovck+5rV8Lr+XnxB3KU8or1ua serLaTFtoKfoW5bOxrJp7DLWxm5ka9idbAs7yI6wz3g1b+RX8lOiTVwlnlNqUGYoXcrNpltN68yf 9fv7X+z/n/5v9VL9VpqGfFiF2d9ND2BlvXSY3kE5RieYiSWxASgqc7KZ7AaUFWwDe5htZ0+wnRjl CDvBPscr6Wv2A8eblpt5Li4/8grk4ktxw7yL38cPoxzh/+TfiUwxRHjEGFEhAqIDs1oj7kB5Vnyk 5CiHFR1xLjVtNm0zbTc9ZXrBdNqcbPkd3vGvnXnkx8IfP+yn/rX9m/sj/Tv1j2gw9hBvD3wFq8Ds m1EWYr83I+N20BssGbHLYYWskl2CyMxlC9lV7FpE8ha2lT1qzP0ZthdReoudwpxTuN2Y84V8DK/h U1Au5638KlzGNvGd/E3+vbCIJJEqBotCMUHMEa1imbhObBaaeE18IE6Ib8QZFF1JVBzKEMWteJQJ ylxlufKA8qnyqanJ9Krpb+ZE82Lzreao+UvcaiotUy3TLHMsGy27LEetQWTnfnqW/mg8tXHCjotV wieepdv5KCUbX2EOIZ/nUouYxJGpfDtby29iO/lQ07Xmcl7OJtNpxY1Yv8y38W94uZjEGtgMWshH xrozD1KehFSh7KeTyl6s7RB6vtaczFbwU+ZkiuCONA53pJfECMUjXqV3xTFmUR6i95RElslO8sfF VGTBc0qlyU9OcR89I65iN9Gz3EeU+IN1PfJ4MnsS50IjK2X/EjquwZORRWXiY7qZruRv00k8x2vp 96xFWUC30yh2I31Kj+GpGG5aYi40D2av8HYlzAeyncSVJ7C6cWwoE6ZBdAubI7aaT/F3aDkdVhLp Q/HfmP1h/oyYpJw2TWdteAJuolvpKn0VXWfyK6+zBSTYLCpQjuN0u1GUKk7wlThVmnCm7cLTvRvn QLWYBE0WMucS5MVMnBBbUe7BOaEgg9rxjF+KU+wQ7TQ38igtMA1gOHXwn5pX+6fTbP0x2qIvoCX6 JirGebBGvxE9bqe/0Ubazlb330Cd+Cr5Dp7tS0z1/LCpXi/mYf4On8E3n7+/iHYBy6J/oDyDnak0 7aGw8hbNoCp9vf5XZPcFOGG30DxcWD/BKr/ACBNFH43qn8y79XrRifUeo2n647qDJVKbvoim0F56 1GKiZosHe6yx17HeG6iVT9eXidb+dsRhI6LgRbSW4/y5zVs7s7HaW1X5m4ry8ePGlo0ZPap05IiS C4uLPIXDLxjmLhjqGuJUHfl59tyc7KzMjMGDBqan2VIHpCQnJSZYLWaTIjijIp+rPqhq7qCmuF0T JxbLuqsZiuafKYKaClX9+T6aKts1w3SepxeeV/zC0xvz9J7zZDa1giqKi1SfS9UO1rnUKJs9zQ95 Q50roGonDXmSId9hyCmQnU40UH1ZbXWqxoKqT6u/ui3sC9YVF7HupMRaV21rYnERdScmQUyCpGW6 OrtZZiUzBJ7pG9/NyZqCJWo5rjqflu1CU3QjCnzNLdrUaX5fXa7TGSgu0ljtfNc8jeRNyWO4UK0x jGau1SzGMGo77jgarVO7i/rC66M2mhf0JLe4Wpqb/JpoRh8+Lc2Dceu0zOs/yfqpis5xJ1vzc2uu CPuy2lXpHA6vUbUHp/l/1jbXKXsIBNAH2vKC+mC4HkOvx041yLu4xlcH/BpbjSFxsSwwVhVbX+zW WxBcqGoJrhpXW3hhEFuTE9Zo+nXOSE6Ot1c/Tjk+Ndzodzm1qlxXoLnO3j2IwtOv68n2qtnnW4qL um1pscB2D0iNC8kpPxdaEfSYzZAMdyk1TD8XWSbn6LoYN0FNna9iJn4X1jRWktaxFJ4/FhuAT4Ch ldaCHWnXEmqDYdt4qccSmWYqsLnU8NeEDHCd/Of5mua4xlxg+5qkUebJuVTTWPNZWfN4tMJCmSKW Wuwp5lhp1McUF10d5S5Xpw3fn+WXBpqK2DYHxpcg/E6n3OB1US/NQ0ULTfPH6irNy42QtwR3ax6U lr6zlsEzpSV01nKuedCFTN4pv8/SYM3qPveXassY6Gsbr7GM/2BujdkbZrgacDVWfeFgPGsbGs+r xewyoIgbbHFJG1jrF7kcOinxXGFYYzfksy64LvuTNaUAf2YjqVuiFiuy0tAwtV6zBSfGaCDR6Yw/ M/9Xo6h+WrYy2E/N4svQxnviE41NWys/r37e9JLDoqERRw7HzT4cTjzPhlSLzfLiOEPG44u+U63V aCaezAL84SvHWIlAruZFyGBpxFNkqAO58ep5jrnxRgF8ZHYWF9XjzAyH611qfTgYbo7qoXku1eYK 9/IX+AvhTh9Ou1jiRPXd63K1+vUBRKyNjcfjwamm28XWTuv2srUzZvt78S8OdW2jP8IZrw3WBOS2 8NpGfzwsxobI1Mce4hcTZAw/SIuVLl3+HsKMBMLvHjDMQ/1R3E5lSv3/f7jR5WAqx1sVrwx5yTbJ X0IsRM40Z1oBCP5bQ2dU0XfGa6IfSFX65PwWsyO8DXeRJHL04qU+wzsgwfyaSiNwx1yefOnjWR7b N3NOUsnJkSMGjr5oVCneUGbXEPfiu9va7767ve1ufqj9rrvaIaMv/Qw7oHTwyzBqvjeVjSGeY1Ix RLbSc32WZ7Ltkzm2v1PJJHQlxjgHK0oXO3DnnXLasbmTPgz3yl/7CCjX4N4g55sej58Z3wNo5pRJ l86q9lQvbW9eNKnxfwF7Zf6PCmVuZHN0cmVhbQplbmRvYmoKMTY4IDAgb2JqCjQ2MjEKZW5kb2Jq CjIzIDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL1lH RkJFUytIZWx2ZXRpY2EgL0ZvbnREZXNjcmlwdG9yCjE2OSAwIFIgL1RvVW5pY29kZSAxNzAgMCBS IC9GaXJzdENoYXIgMzMgL0xhc3RDaGFyIDMzIC9XaWR0aHMgWyAxMzkgXSA+PgplbmRvYmoKMTcw IDAgb2JqCjw8IC9MZW5ndGggMTcxIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0K eAFdkMFuwyAQRO98xR6TQ4TtM0KqUkXyoW1UJx+AYbGQakBrfPDfF4iTSj3sgZl5MCw/9++9dwn4 lYIeMIF13hAuYSWNMOLkPGs7ME6n/VQ1PavIeIaHbUk4994GEIIB8O+MLIk2OLyZMOKxaF9kkJyf 4HA/D1UZ1hh/cEafoGFSgkGbr/tQ8VPNCLyip95k36XtlKm/xG2LCLlRJtpHJR0MLlFpJOUnZKJp pLhcJENv/lk7MNo92bVS1Gk6W/NPp6Dli69KeiXKbeoeatFSwHl8rSqGWB6s8wt+2nBKCmVuZHN0 cmVhbQplbmRvYmoKMTcxIDAgb2JqCjIyMgplbmRvYmoKMTY5IDAgb2JqCjw8IC9UeXBlIC9Gb250 RGVzY3JpcHRvciAvRm9udE5hbWUgL1lHRkJFUytIZWx2ZXRpY2EgL0ZsYWdzIDQgL0ZvbnRCQm94 IFstOTUxIC00ODEgMTQ0NSAxMTIyXQovSXRhbGljQW5nbGUgMCAvQXNjZW50IDc3MCAvRGVzY2Vu dCAtMjMwIC9DYXBIZWlnaHQgNzE3IC9TdGVtViA5OCAvWEhlaWdodAo1MjMgL1N0ZW1IIDg1IC9B dmdXaWR0aCAtNDQxIC9NYXhXaWR0aCAxNTAwIC9Gb250RmlsZTIgMTcyIDAgUiA+PgplbmRvYmoK MTcyIDAgb2JqCjw8IC9MZW5ndGggMTczIDAgUiAvTGVuZ3RoMSA1MDY4IC9GaWx0ZXIgL0ZsYXRl RGVjb2RlID4+CnN0cmVhbQp4Ab1Ye3BU1R3+nfvY3ZBQkwCySVju3V6WvCWJSoFQWDa7ISEBAwG6 iyC7STYmMZEMhlSw0B0LVhakKkIVHJU+rECRy4bBG6gYGR11WhV1tL5mlPrqdGTsi46K5vY7d5OV MMrkD8Z75tzf85zzne+cPffe7Vm7LkpjKUYiNayIdLeSdY17BKKkuSvSnbSz/wSZ29zboyZtuYBI 7GztvrEraTvuIxrjurFz/VD77Pfh72yLRlqScfoKcnobHEmbXQM5pa2r59aknX0U0tG5pnkonv0m bFtX5Nah8eld2OrNka5oMn/czyCndK+5pWfIrocs614bHcpnQeB7mRi8At1LaXQT2aFloqwisv99 jIskRHkcV9lL7zy1+orZ5yjLYdmrF/7Kki/2H3/i8+hX+en3OL6AI204n0tb4WAhUQZD/Gz6PamI 1Q43waDGYoNqUeeiXotaXDzPSTH2KN2N+giqSO1sG61H3Yr6AKqU0vbD6mfbEpLDe5ytp1y2wJsu KUvH5yjOMenKqwazHX1Iecv5wQmWg9U7w3ISYylt3hj2CHuYWkhhvycP20A1VMD29BV2KmGE9lM3 agxVtO6M7U9MrlBOshLySAxtptJkiR1TPikvVT4qNwSWUE7lGxLE05Nhea9QBlwPKU+5blROoh5M hg4UIuOYst/VqeycbLA9CeVel8HQ5p6kWOdC02NKV+FupaXcitfvNoSDCWUm4su96cr0GW7lWteH yrR8w8Fgl7rqlaLyF5UpaIg0FZ16vFnKJNdOZRZCk12B/FmoJ9gBtpeK2N6EZ4FyHCqm21dbOGO3 wW7rqyko9xhsg3d6TcHuwpp8T2G94imszs+Hvvx5+2b79fZ59gp7sb3APtXutufZxzuyHZmOHzgy HGMcDofdYH9MzFVsJ9hBmgtaDvY5bA7ZYI/DKZ1ghyznoScckkNwkGO8Yb6PzctovMEOHs3kGpRj NkuzGexQX9J1yKtIXJOsQKbAddxwJ4E5BFpAOrvLsNGWK3vnOudmz8maWe3/rlvYigzfi7/7cjKX vruuMagfcIX0Cq6YrtBwunNY+U7Zsw6hqK+4uG7J+r7e7o7WQFQLhLVAFDWsb+ttc+qxJlU90tHN A6ouTg03NbdxGYnq3VrUr3dofvVIr9XuonArD/dq/iPUGlgaPNLqjfoTvd7egBbxh/qafGtXjRhr a2qstb5vGcvHO1vLx2qy2l001ioebuJjreJjreJjNXmbrLH45APtjb5berA71UB7naoXNOq1i1cE dTUS8hvsUTj960geoEz5SSqQY5QrTSOFyHwL9W0uB5eZH8vPUeZgl/kvsRKL2s+rMDh3Ng3QXbSX DpONHoNeQDfQ/fQC68BveyUdpTfYZLoKZ69EBtXTX5hpvkKt9Dvk99Ap2kVHKANtumgCojuYx9wA 2wu9iTabv6EpNIPuoCdpJnrdQWfN/WYfoktoGR2gg2j/Z6YJR6Rx5uPmh+SgxehzMyKvmPXmYcqm EvJRA7yb6STziG+bbeSkSqB7kB6mffQ0fcpuZ0fNNrPXPG2ewVZ10iRqRNnIjrIz4mHpDvNB8x/m IJgooCKMGqad9Fv0fxhlAEdrgN3EethOtkvwCrcLR6Ut8sTBr8FDIc1HqaE1dCcY6Kdn6N/0BftM cIqZYo/4rHmt+R9KpzrMks8kSr0ov0TZgTmdYDZWxqpYA9vI7mO72GtCkbBMCAo/FW4VPhYXiSvF 9eJr0i1SQt4u329LHzxnnjCfM1+nieSi62ktbcLsTtFp+i99yUT0NYl5WCXzsRtQYmyv0M/2sX6h gQ2w08IB9h77gH3GzguykCFMEIqFHmGncFA4Jbwktou7xAfE98Rz0hxZkPfJH9k89ncGmwa3Dr5k VppnzM9xxDrIjZXx0SJaTRHMtpuuoZ9jFodQDmPVnqFn6QWrfMAm0Vn6HCwQy2a5rIItRFnErmOt rJ09xI6jnLSw/E/AQghpQpYwUZgkNApNQpcQE14XYmKeWCQuEFeIh1GeF98Qz4vnJVkaJ02Q5ku1 tF3qkvagPCo9JiWkl+WZ8hx5kbxcjslb5e1is/yK/IZtk22HLWH7zPZPHIv19jX27VidF7Bnn8Ze /uaS2BSgr6CbqZn5WRPtxmrsYxGKY3e1sDvBVzcVmKvETeJ8oQy74STdht26hzbSVnEl7TPfFA/Q X7FTOtFljP4g+cgl/xqrczuVYRcNFW9hUWFB/lTPFO2HbhVH/qS83BznxCsnjB+XnZU5NiN9TJrD bpMlUWBUEtCqw6o+NaxLU7WamlJuaxE4Ihc4wvgpq3r1yBxd5e0iCI3I9CKz9aJMbzLTm8pkmeps ml1aogY0VX/Rr6kGW7E4CP0uvxZS9bOWvtDS77b0sdDdbjRQA842v6qzsBrQq3vb4oGwv7SE9XtB x5jSEn5weCmdd6xTVWQjDliq4hkBPVfzB/QcDTpioicQadEbFgcD/jy3OwQfXEuCGKO0pF0HTtqW 0aK1bDO81BTmWmRlUBcjIV0I876yivWJml+fuOEj5zfmsBbYfkFQFzzVkWi8WveGt4Fcboa5FdkO q65RRbfCllBQZ1uGQHCMHUDK4SafCZ5wh6qnaT6tLd4RBrm0JJjI9eZah69ODcFEjjfHMkpL+p2b Kt2YfX/pvNJ5XFa6nZuS8pNfJP2vDnDp3PTM+5B1S1IEMM6AVgucutpsDaIB7Ax+i86gePMM8IQr xDDNduCp0gXsGdGjy57aiB5rHIbR5k+CC3f4E2k5udZDyBdCfjieOQsrhfxMTY2fw9M6rJ39dKQn MuSxeTLPEQ/yhU7tFZ1FhvVe/rD0YNZtTq2Nr2+vtaawNWfgAgdsTg3HrI/HA7wh6NbVEBx4myyp MyitIXiEsR0hg5lbDPK7+vGOKq6+AeESvtXa/RgfRmkJHEVuaFeVqNUYuZrvFTWuxmtb4mq12obN JHksiUA0HpoGBhuD4ImWYkRvKC+lRkOhWehnGu8HTZAeD6GHjqEeIC3XtK+RVFaCh6k4tSG4OKjH /Hm61x/CKmD7DjQE9QHs3FAIWeUppEC8sd05hLkCmMuLEL862QveXWLoIhSP8z4bg5pbH4jH8+L8 95a0DUYXO7xDDoN4CqfcYLEGtIXQ3HnWGrg1N2CFOKfXYEsP7yi8s1+a4ekp3Gj5I6CdbjE84zIx PHM0DM8aFcOVKaQjGJ4NzJWc4R9/fwzPGcHw3Esz7E3hBsh5QOu1GPZdJoarRsOwf1QMB1JIRzBc DcwBzvD874/hmhEM116a4QUp3ABZB7QLLIbrLxPDC0fD8KJRMXxdCukIhhuA+TrO8OLvj+ElIxhu vDTDS1O4AXIZ0C61GF5+mRj+yWgYDo6K4VAK6QiGVwBziDN8fYphb55OF57DsYuOXbrsB/PKCyjH m5KcTT7mgsI/n/EBjSsDXxYZkO6UB/83ofD/f3xE0ml8u4n4D6gq+b+MY5pBEqoj0yA6jcpt6OK7 0CHtkCJk2rt0HK2IlhcfR08yZFn51VnurHxUn7TD+Opv8pNfVhnSwvP4zkeGdZlRfLd824U4E+zr bm6vKKuothIYvsSSM7DhvykKza/2BRqLa6KdvdGe9uYIcpJRnow4TTKHLu5I6Uydxu3/A52fZn4K ZW5kc3RyZWFtCmVuZG9iagoxNzMgMCBvYmoKMjcxOAplbmRvYmoKMTc0IDAgb2JqCihNYWMgT1Mg WCAxMC45LjUgUXVhcnR6IFBERkNvbnRleHQpCmVuZG9iagoxNzUgMCBvYmoKKFBvd2VyUG9pbnQp CmVuZG9iagoxNzYgMCBvYmoKKEQ6MjAxNDEyMTUxODM3MDlaMDAnMDAnKQplbmRvYmoKMTc3IDAg b2JqCigpCmVuZG9iagoxNzggMCBvYmoKWyBdCmVuZG9iagoxIDAgb2JqCjw8IC9Qcm9kdWNlciAx NzQgMCBSIC9DcmVhdG9yIDE3NSAwIFIgL0NyZWF0aW9uRGF0ZSAxNzYgMCBSIC9Nb2REYXRlIDE3 NiAwIFIKL0tleXdvcmRzIDE3NyAwIFIgL0FBUEw6S2V5d29yZHMgMTc4IDAgUiA+PgplbmRvYmoK eHJlZgowIDE3OQowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAxODYzMTEgMDAwMDAgbiAKMDAwMDAw MTI0NSAwMDAwMCBuIAowMDAwMTQwODA2IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAw MDAwMTIyNSAwMDAwMCBuIAowMDAwMDAxMzQ5IDAwMDAwIG4gCjAwMDAwMDI2NDEgMDAwMDAgbiAK MDAwMDAwNTQxMyAwMDAwMCBuIAowMDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAxNDExNzQgMDAwMDAg biAKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAwMTU3MTU1IDAwMDAwIG4gCjAwMDAwMDE0NzAgMDAw MDAgbiAKMDAwMDAwMjYyMCAwMDAwMCBuIAowMDAwMDAyNjc3IDAwMDAwIG4gCjAwMDAwMDUzOTIg MDAwMDAgbiAKMDAwMDAwNjg0OSAwMDAwMCBuIAowMDAwMDA1NDQ5IDAwMDAwIG4gCjAwMDAwMDY4 MjggMDAwMDAgbiAKMDAwMDAwNjk1NiAwMDAwMCBuIAowMDAwMTc3MzExIDAwMDAwIG4gCjAwMDAw MDAwMDAgMDAwMDAgbiAKMDAwMDE4MjU3MiAwMDAwMCBuIAowMDAwMDEwODkxIDAwMDAwIG4gCjAw MDAwMDcxMDIgMDAwMDAgbiAKMDAwMDAxMDg3MCAwMDAwMCBuIAowMDAwMDEwOTk4IDAwMDAwIG4g CjAwMDAwMTc2NjUgMDAwMDAgbiAKMDAwMDAyMDY0MCAwMDAwMCBuIAowMDAwMDI0ODU1IDAwMDAw IG4gCjAwMDAwMjU0NDkgMDAwMDAgbiAKMDAwMDAxMjM5MiAwMDAwMCBuIAowMDAwMDEzNzc1IDAw MDAwIG4gCjAwMDAwMTY3MzkgMDAwMDAgbiAKMDAwMDAzNjg3MiAwMDAwMCBuIAowMDAwMDM3NDY0 IDAwMDAwIG4gCjAwMDAwMTE1MDkgMDAwMDAgbiAKMDAwMDAyNzE2NyAwMDAwMCBuIAowMDAwMDMw MTMyIDAwMDAwIG4gCjAwMDAwMzEwMDUgMDAwMDAgbiAKMDAwMDAzMTYwMCAwMDAwMCBuIAowMDAw MDEyMjQ1IDAwMDAwIG4gCjAwMDAwMzE2MjAgMDAwMDAgbiAKMDAwMDAzNTI1MyAwMDAwMCBuIAow MDAwMDE2NzYwIDAwMDAwIG4gCjAwMDAwMTc2NDUgMDAwMDAgbiAKMDAwMDAxMTgwMyAwMDAwMCBu IAowMDAwMDMwMTUzIDAwMDAwIG4gCjAwMDAwMzA5ODUgMDAwMDAgbiAKMDAwMDAxMzE1MyAwMDAw MCBuIAowMDAwMDEzNzU1IDAwMDAwIG4gCjAwMDAwMjA2NjEgMDAwMDAgbiAKMDAwMDAyMTI2MyAw MDAwMCBuIAowMDAwMDI1NDY5IDAwMDAwIG4gCjAwMDAwMjYzMDAgMDAwMDAgbiAKMDAwMDAyNjMy MCAwMDAwMCBuIAowMDAwMDI3MTQ3IDAwMDAwIG4gCjAwMDAwMzU4ODYgMDAwMDAgbiAKMDAwMDAz Njg1MiAwMDAwMCBuIAowMDAwMDIxMjgzIDAwMDAwIG4gCjAwMDAwMjQyNTggMDAwMDAgbiAKMDAw MDAxMjUzOSAwMDAwMCBuIAowMDAwMDEzMTMzIDAwMDAwIG4gCjAwMDAwMTE2NTYgMDAwMDAgbiAK MDAwMDAzNzQ4NCAwMDAwMCBuIAowMDAwMDQwNDQ5IDAwMDAwIG4gCjAwMDAwMzUyNzQgMDAwMDAg biAKMDAwMDAzNTg2NiAwMDAwMCBuIAowMDAwMDEyMDk4IDAwMDAwIG4gCjAwMDAwNDA0NzAgMDAw MDAgbiAKMDAwMDA0MzM3MyAwMDAwMCBuIAowMDAwMDI0Mjc5IDAwMDAwIG4gCjAwMDAwMjQ4MzUg MDAwMDAgbiAKMDAwMDAxMTk1MSAwMDAwMCBuIAowMDAwMTIzMjc1IDAwMDAwIG4gCjAwMDAxMjUy MDUgMDAwMDAgbiAKMDAwMDEyOTA2NSAwMDAwMCBuIAowMDAwMTI3MTM1IDAwMDAwIG4gCjAwMDAx MjQyNDAgMDAwMDAgbiAKMDAwMDEyODEwMCAwMDAwMCBuIAowMDAwMTI2MTcwIDAwMDAwIG4gCjAw MDAwOTgzNzIgMDAwMDAgbiAKMDAwMDEwMzg2OSAwMDAwMCBuIAowMDAwMDQ2MzQyIDAwMDAwIG4g CjAwMDAwNDkwMDAgMDAwMDAgbiAKMDAwMDA5MDI3OSAwMDAwMCBuIAowMDAwMDkzMDA1IDAwMDAw IG4gCjAwMDAwODA3MjEgMDAwMDAgbiAKMDAwMDA5MDI1OCAwMDAwMCBuIAowMDAwMTEyMzE5IDAw MDAwIG4gCjAwMDAxMTQ5ODIgMDAwMDAgbiAKMDAwMDA5MzAyNiAwMDAwMCBuIAowMDAwMDk1NjMy IDAwMDAwIG4gCjAwMDAwNzEzMDYgMDAwMDAgbiAKMDAwMDA3Mzk2OCAwMDAwMCBuIAowMDAwMDU3 NjYyIDAwMDAwIG4gCjAwMDAwNjI4OTIgMDAwMDAgbiAKMDAwMDA0OTAyMSAwMDAwMCBuIAowMDAw MDU0NTE4IDAwMDAwIG4gCjAwMDAxMDk0MTkgMDAwMDAgbiAKMDAwMDExMjI5NyAwMDAwMCBuIAow MDAwMDY4NDQyIDAwMDAwIG4gCjAwMDAwNzEyODQgMDAwMDAgbiAKMDAwMDA5NTY1MyAwMDAwMCBu IAowMDAwMDk4MzUwIDAwMDAwIG4gCjAwMDAwNDMzOTQgMDAwMDAgbiAKMDAwMDA0NjMyMCAwMDAw MCBuIAowMDAwMTE1MDAzIDAwMDAwIG4gCjAwMDAxMjA1MjQgMDAwMDAgbiAKMDAwMDA1NDUzOSAw MDAwMCBuIAowMDAwMDU3NjQwIDAwMDAwIG4gCjAwMDAwNjI5MTMgMDAwMDAgbiAKMDAwMDA2ODQy MCAwMDAwMCBuIAowMDAwMDczOTg5IDAwMDAwIG4gCjAwMDAwNzgwNTIgMDAwMDAgbiAKMDAwMDEw Mzg5MCAwMDAwMCBuIAowMDAwMTA5Mzk3IDAwMDAwIG4gCjAwMDAxMjA1NDYgMDAwMDAgbiAKMDAw MDEyMzI1MyAwMDAwMCBuIAowMDAwMDc4MDc0IDAwMDAwIG4gCjAwMDAwODA2OTkgMDAwMDAgbiAK MDAwMDEyNDIxOSAwMDAwMCBuIAowMDAwMTI1MTg0IDAwMDAwIG4gCjAwMDAxMjYxNDkgMDAwMDAg biAKMDAwMDEyNzExNCAwMDAwMCBuIAowMDAwMTI4MDc5IDAwMDAwIG4gCjAwMDAxMjkwNDQgMDAw MDAgbiAKMDAwMDEzMDAwOSAwMDAwMCBuIAowMDAwMTMxNDk5IDAwMDAwIG4gCjAwMDAxMzAwMzAg MDAwMDAgbiAKMDAwMDEzMTQ3NyAwMDAwMCBuIAowMDAwMTMxNjA5IDAwMDAwIG4gCjAwMDAxMzIx ODAgMDAwMDAgbiAKMDAwMDEzMTc1NiAwMDAwMCBuIAowMDAwMTMyMTU5IDAwMDAwIG4gCjAwMDAx MzIyOTAgMDAwMDAgbiAKMDAwMDEzNDg5OSAwMDAwMCBuIAowMDAwMTMyNDAxIDAwMDAwIG4gCjAw MDAxMzQ4NzcgMDAwMDAgbiAKMDAwMDEzNTAwOSAwMDAwMCBuIAowMDAwMTM3NDQ2IDAwMDAwIG4g CjAwMDAxMzUxNTYgMDAwMDAgbiAKMDAwMDEzNzQyNCAwMDAwMCBuIAowMDAwMTM3NTU2IDAwMDAw IG4gCjAwMDAxMzg5MzIgMDAwMDAgbiAKMDAwMDEzNzcwMyAwMDAwMCBuIAowMDAwMTM4OTEwIDAw MDAwIG4gCjAwMDAxMzkwNDIgMDAwMDAgbiAKMDAwMDE0MDU0NyAwMDAwMCBuIAowMDAwMTQwOTM1 IDAwMDAwIG4gCjAwMDAxMzkxNzcgMDAwMDAgbiAKMDAwMDE0MDUyNSAwMDAwMCBuIAowMDAwMTQw NjU5IDAwMDAwIG4gCjAwMDAxNDEwMTQgMDAwMDAgbiAKMDAwMDE0MTEwNyAwMDAwMCBuIAowMDAw MTQyMjI4IDAwMDAwIG4gCjAwMDAxNDE1NjQgMDAwMDAgbiAKMDAwMDE0MjIwNyAwMDAwMCBuIAow MDAwMTQyNDcwIDAwMDAwIG4gCjAwMDAxNTcxMzIgMDAwMDAgbiAKMDAwMDE1ODMyNyAwMDAwMCBu IAowMDAwMTU3NTg0IDAwMDAwIG4gCjAwMDAxNTgzMDYgMDAwMDAgbiAKMDAwMDE1ODU2NCAwMDAw MCBuIAowMDAwMTc3Mjg4IDAwMDAwIG4gCjAwMDAxNzc1NzUgMDAwMDAgbiAKMDAwMDE3NzgzNyAw MDAwMCBuIAowMDAwMTgyNTUwIDAwMDAwIG4gCjAwMDAxODMwNjAgMDAwMDAgbiAKMDAwMDE4Mjcz OSAwMDAwMCBuIAowMDAwMTgzMDM5IDAwMDAwIG4gCjAwMDAxODMzMTIgMDAwMDAgbiAKMDAwMDE4 NjEyMiAwMDAwMCBuIAowMDAwMTg2MTQ0IDAwMDAwIG4gCjAwMDAxODYxOTcgMDAwMDAgbiAKMDAw MDE4NjIyNyAwMDAwMCBuIAowMDAwMTg2MjcwIDAwMDAwIG4gCjAwMDAxODYyOTAgMDAwMDAgbiAK dHJhaWxlcgo8PCAvU2l6ZSAxNzkgL1Jvb3QgMTU1IDAgUiAvSW5mbyAxIDAgUiAvSUQgWyA8NmVj M2ZlZWViNzlmMzZkNmRkOTE1ZDdjMzEyZmNhYTI+Cjw2ZWMzZmVlZWI3OWYzNmQ2ZGQ5MTVkN2Mz MTJmY2FhMj4gXSA+PgpzdGFydHhyZWYKMTg2NDQ3CiUlRU9GCg== --_002_D0B46A7F18CC6albertgociscocom_-- From nobody Mon Dec 15 10:50:07 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 291001A875E for ; Mon, 15 Dec 2014 10:50:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.3 X-Spam-Level: X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_29=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ERazgR0nMH5D for ; Mon, 15 Dec 2014 10:50:04 -0800 (PST) Received: from trail.lhotka.name (trail.lhotka.name [77.48.224.143]) by ietfa.amsl.com (Postfix) with ESMTP id E46DA1A8748 for ; Mon, 15 Dec 2014 10:50:03 -0800 (PST) Received: from localhost (unknown [172.29.2.202]) by trail.lhotka.name (Postfix) with ESMTPSA id 60D4A1CC01E4; Mon, 15 Dec 2014 19:50:01 +0100 (CET) From: Ladislav Lhotka To: Andy Bierman , Martin Bjorklund In-Reply-To: References: <20141211.124922.734445723149087483.mbj@tail-f.com> <20141211.134843.810246336811127833.mbj@tail-f.com> User-Agent: Notmuch/0.18.1 (http://notmuchmail.org) Emacs/24.4.51.2 (x86_64-apple-darwin14.0.0) Date: Mon, 15 Dec 2014 19:49:59 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/rmTHSlb9E2qtINVBfaPrN7HukOo Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 18:50:06 -0000 Andy Bierman writes: > On Thu, Dec 11, 2014 at 4:48 AM, Martin Bjorklund wrote: >> Ladislav Lhotka wrote: >>> >>> > On 11 Dec 2014, at 12:49, Martin Bjorklund wrote: >>> > >>> > Ladislav Lhotka wrote: >>> >> Andy Bierman writes: >>> >> >>> >>> Hi, >>> >>> >>> >>> A new issue has been added to the tracker: >>> >>> >>> >>> https://github.com/netconf-wg/restconf/issues/15 >>> >>> >>> >>> There are 3 solutions mentioned. >>> >>> The default solution is S1, which will be implemented >>> >>> unless there is WG consensus demonstrated to >>> >>> do something else. >>> >> >>> >> The biggest problem with S1 is that it may mislead readers into >>> >> thinking: "Hey, now I understand how namespaces work in groupings!" >>> >> >>> >> I also don't like the idea of defining an ad hoc extension. >>> > >>> > I disagree. I think an extension is the best solution in this case. >>> > However, we can use a different name than 'structure'. 'structure' >>> > was originally my proposal for a built-in statement (YANG 1.1) for >>> > this purpose. We can call it 'restconf-structure' or 'restconf-data' >>> > or something. >>> >>> So another document that wants to do the same should define its own ad >>> hoc extension? Or import the ietf-restconf module? >> >> Suppose we make a new document that defines a new RESTCONF resource >> type, and we need a structure for it, then that document would import >> and use 'restconf-structure'. >> >>> >> If we want >>> >> to turn YANG into a general schema language, it should be done >>> >> properly. >>> >> >>> >> I think the simplest solution would be to remove the groupings and >>> >> have >>> >> "errors", "restconf", "collection" and "notification" as top-level >>> >> containers. The namespace assignment then follows YANG rules. >>> > >>> > This is also _very_ misleading, b/c then it looks like a normal config >>> > or state module, which one would expect a server to implement in the >>> > normal way. >>> >>> What makes the solutions with groupings or extensions different? >> >> I agree that groupings are misleading. But using an extension would >> be different, b/c the extension defines the semantics - this is not >> config or oper state, but something else. >> > > > > I do not understand why these are special or misleading groupings. > I cannot find any text in any RFC that says a YANG module with > just groupings in it is invalid, improper, or even discouraged. > > I am already using 1 of these groupings in a logging model. > Please explain why these are special groupings that cannot > be used in a normal data model in another module. > > That is why I prefer solution S2-B > > rc:structure errors { > uses errors; > } > > This assigns a module-name and a namespace and does not > preclude re-usage of the data within a larger data structure. I don't want to block the resolution of this issue, so I propose that you write a concrete definition of the extension, and I will then comment on that. Lada > > >>> In >>> any case, the module description has to state very clearly that it is >>> a strawman module that=E2=80=99s not supposed to be used in the normal >>> NETCONF/RESTCONF way. But if you above that deviate from YANG >>> semantics, as the groupings do, you cannot even use standard YANG >>> tools because they would produce wrong results. >>> >>> If the module is as I proposed, I can still use pyang for generating >>> correct DSDL schemas, XML-JSON mapping etc. >>> >>> And if a server implementor likes the module and decides to implement >>> it as if it was a normal module, so what? >>> >>> > >>> >> S3 should IMO be fine, too, the structures aren't that complicated. >>> > >>> > I can see only drawbacks compared to S2. Whatever we do in text it >>> > will be less precise than an extension. >>> >>> I prefer less precise to precise but wrong. >> >> An extension is in no way wrong. >> > > agreed > >>> Keep in mind that you are >>> a YANG designer so you are not as likely to get confused by language >>> anomalies as an average reader of the RESTCONF document. >> >> >> /martin > > Andy --=20 Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Mon Dec 15 11:22:27 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B5FF1A0143 for ; Mon, 15 Dec 2014 11:22:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z7sOTREAYqo6 for ; Mon, 15 Dec 2014 11:22:24 -0800 (PST) Received: from mail-la0-f50.google.com (mail-la0-f50.google.com [209.85.215.50]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB35C1A8760 for ; Mon, 15 Dec 2014 11:22:21 -0800 (PST) Received: by mail-la0-f50.google.com with SMTP id pn19so9890047lab.23 for ; Mon, 15 Dec 2014 11:22:20 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=/AzgP4cAr07bDwvfLHPN02rsa5nINipSfqAgmDMDZsA=; b=QTAa5CxoZ4THjJde1lW4u1GuNxPSsgZerF/TjXInEndKwnurmBCtJ+ZmH5Si5hNr8i jQ1i5H5Z1+jRBpaNQF9qzCN70MGqR397w2W9A4+H4hQnOdMwdidQaKM+N7YS1GqfWxFb i7tjk03lQkyGmWHUmr+ifsi8jWX7dyfCrmlSr3sjNxc2wcE9ljBjVW384Kc3asiVxj3Z 6jmf4lRdXCrnYK98TRnwNwB9pO9ZOmhQ1J7pAxCh+g6nOGLXdpHqvlyJlmd9YsmMYv9I drjqTl/nMK0bMxagw+YaEnhQitzEHAfOcNmkaHVYZME8YpZ6CxhwpqPPT0maRasPZP7t OYsg== X-Gm-Message-State: ALoCoQmWF51O02NNRxHFKIZl9wIrj8XPTabhk3WdActbrRscIM38AJ6qSv5TJul11WWVjW2lO6cl MIME-Version: 1.0 X-Received: by 10.152.5.198 with SMTP id u6mr32491768lau.42.1418671340285; Mon, 15 Dec 2014 11:22:20 -0800 (PST) Received: by 10.112.157.233 with HTTP; Mon, 15 Dec 2014 11:22:20 -0800 (PST) Date: Mon, 15 Dec 2014 11:22:20 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/mddtIogvriLj89_oFqmMySWNfL0 Subject: [Netconf] RESTCONF #1: select parameter X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 19:22:25 -0000 Hi, The "select" parameter is being renamed the "fields" parameter. https://github.com/netconf-wg/restconf/issues/1 Unless there are any objections by 12/19/14, this change will be made in the RESTCONF draft-04 release. Andy From nobody Mon Dec 15 11:28:53 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 006AC1A8759 for ; Mon, 15 Dec 2014 11:28:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S_ynqd8aEncS for ; Mon, 15 Dec 2014 11:28:47 -0800 (PST) Received: from mail-lb0-f177.google.com (mail-lb0-f177.google.com [209.85.217.177]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F5601A8729 for ; Mon, 15 Dec 2014 11:28:47 -0800 (PST) Received: by mail-lb0-f177.google.com with SMTP id b6so9450007lbj.22 for ; Mon, 15 Dec 2014 11:28:46 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=aZb3tX+aHa6ehrB64gnJk8vLTHBCOtc9MhilphmuXFM=; b=EcjZOkcM/9Qvul7Y4YZPizUE0j45qF8IrpPXwLpMvQDnHbxvTeIVgZrcoDv/Y+eUlx gZmZvaDkMPZkqzYp0Qhk62WaWTHuDH0jJ9vMz5BbhD0gqdkSwkQkE7kBgA8R7pVOSGYn vBG3a8izShmR4F6c6REYUuc1AhnpXuYGwkc1gQbppC8J7zEleMvO4OPVj+KSOqd8k5B8 gVGW2J4rYIGoi0HaQylPYAdjWaLwz2KUNTuIzA0jdmCunUwvr1lwRQqDmqcPMMr8vU3G w2oy1bYlcHMpqJqIpfQDomflOcb7XRFpUZn0AUA9Sc5RSiTkSDahbC6XlwYTOvAVJBsQ HK1Q== X-Gm-Message-State: ALoCoQksjtpi5LCmyPp5F7U63C2pAD5hQ2KWmISiNLbOOYT2+5Flua2M0vk01i5M2Up5LqDjeFeD MIME-Version: 1.0 X-Received: by 10.112.12.65 with SMTP id w1mr31873468lbb.68.1418671725888; Mon, 15 Dec 2014 11:28:45 -0800 (PST) Received: by 10.112.157.233 with HTTP; Mon, 15 Dec 2014 11:28:45 -0800 (PST) Date: Mon, 15 Dec 2014 11:28:45 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/yEYHgoKdcc0CJDUD2mIxYzsrLFM Subject: [Netconf] RESTCONF #3: collections X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 19:28:49 -0000 Hi, The collections resource is more complicated than originally anticipated. There are additional XPath parameters for sorting, filtering, pagination, etc. that should be addressed. Since this an optional feature, not applicable to all server implementations, it should be in a separate document. The proposed solution for collections is to move the collection resource plus the "limit" and "offset" parameters to a new draft (could be called "Collection Resource for RESTCONF"). This will keep the base RESTCONF protocol simpler and allow WGLC to start sooner on the base document. Unless there are any objections by 12/19/14, this change will be made in the next RESTCONF draft. A new draft will be submitted for the collection resource. Andy From nobody Mon Dec 15 11:32:13 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70AB31A8759 for ; Mon, 15 Dec 2014 11:32:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UgT79Wnb-7Di for ; Mon, 15 Dec 2014 11:32:10 -0800 (PST) Received: from mail-la0-f54.google.com (mail-la0-f54.google.com [209.85.215.54]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52E221A8764 for ; Mon, 15 Dec 2014 11:32:10 -0800 (PST) Received: by mail-la0-f54.google.com with SMTP id pv20so9966976lab.27 for ; Mon, 15 Dec 2014 11:32:08 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=pRZAIu9/6SJSqm5uGFnFdBzsPgiYhDHdExrQHnKCCuk=; b=B5Q9aiBQt4bs0cq+ZWxnY/JnXK3uQoeCZ5DmALtyZ/jyn3im8W8RgbYfQcRZN+Ep40 uClFLORjT8V1GT+NkBGnttCBLT10Em+FVObtV3WvfEax5r2durUm2Y5SmtRvqBusKPls jSQriayXtQLDoo4fcozWm089iDYRI9EpG4/Y9WEveXZqCuCRjDoinOm6nqwLwm3dhyxK PGCkuN8qo4cPfuRHMLJc79urY2Rwwq8vEiiX6Bq5qwosAhb9mAQ22V3jGehq4Azjz9Ki sLdSTzei/ykma842lFiK1zDpV5CsG8JGGMAZPy77YM883Zw1k4yUcOGVRPRsi/U7Vf3u 1Ckg== X-Gm-Message-State: ALoCoQmu4V9VfW9Rzz+FVF/GlWIxysP1xgfMN7112yslDkN6TMNlU9Cy8lE4UUKewEcx+5KrPX6Y MIME-Version: 1.0 X-Received: by 10.112.12.65 with SMTP id w1mr31887719lbb.68.1418671928823; Mon, 15 Dec 2014 11:32:08 -0800 (PST) Received: by 10.112.157.233 with HTTP; Mon, 15 Dec 2014 11:32:08 -0800 (PST) Date: Mon, 15 Dec 2014 11:32:08 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/EzlQDAZjAEbA6fBEYQ3qGSLgd9U Subject: [Netconf] RESTCONF #13: ietf-yang-library X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 19:32:12 -0000 Hi, There is no action to take on this issue. https://github.com/netconf-wg/restconf/issues/13 The next revision of the RESTCONF draft will still contain this module. Raise any objections on the mailing list. Andy From nobody Mon Dec 15 11:52:44 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02D601A8781 for ; Mon, 15 Dec 2014 11:52:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vOV4hnRMDAGa for ; Mon, 15 Dec 2014 11:52:40 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0103.outbound.protection.outlook.com [65.55.169.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB58C1A870B for ; Mon, 15 Dec 2014 11:52:39 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB457.namprd05.prod.outlook.com (10.141.72.141) with Microsoft SMTP Server (TLS) id 15.1.31.17; Mon, 15 Dec 2014 19:52:37 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Mon, 15 Dec 2014 19:52:37 +0000 From: Kent Watsen To: NetConf Thread-Topic: call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? Thread-Index: AQHQGKCtwm2wdLjtRUWu/nGdJOjG4Q== Date: Mon, 15 Dec 2014 19:52:37 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.13] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-forefront-prvs: 04267075BD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(164054003)(199003)(189002)(479174004)(36756003)(105586002)(19580395003)(20776003)(229853001)(66066001)(97736003)(120916001)(46102003)(107046002)(106356001)(106116001)(77156002)(86362001)(110136001)(21056001)(87936001)(92566001)(83506001)(68736005)(64706001)(54356999)(19617315012)(122556002)(50986999)(40100003)(31966008)(107886001)(4396001)(101416001)(99286002)(16236675004)(62966003)(450100001)(99396003)(15975445007)(2656002)(102836002); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB457; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Content-Type: multipart/alternative; boundary="_000_D0B4A6358CB91kwatsenjunipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/qgEs7KvncY69YkBPKnCKUx1mDsI Subject: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 19:52:42 -0000 --_000_D0B4A6358CB91kwatsenjunipernet_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable This issue was discussed in today's virtual interim meeting: https://github.com/netconf-wg/call-home/issues/6 Essentially, after adding RESTCONF to the call-home draft, it seems that dr= aft might be somewhat difficult to read, with all the NETCONF/RESTCONF and = SSH/TLS switches in it. Does anyone else think so? Unless there are any objections by 12/19/14, plan is to keep RESTCONF in th= is draft as is. Thanks, Kent --_000_D0B4A6358CB91kwatsenjunipernet_ Content-Type: text/html; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable

This issue was discussed in today's virtual interim meeting:


Essentially, after adding RESTCONF to the= call-home draft, it seems that draft might be somewhat difficult to r= ead, with all the NETCONF/RESTCONF and SSH/TLS switches in it.  Does a= nyone else think so?

Unless there are any objections by 1= 2/19/14, plan is to keep RESTCONF in this draft as is.

Thanks,
Kent

--_000_D0B4A6358CB91kwatsenjunipernet_-- From nobody Mon Dec 15 12:10:19 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CA5B1A8844 for ; Mon, 15 Dec 2014 12:10:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2t7-Qe_no87T for ; Mon, 15 Dec 2014 12:10:11 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0759.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:759]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F42051A8841 for ; Mon, 15 Dec 2014 12:10:10 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB459.namprd05.prod.outlook.com (10.141.72.146) with Microsoft SMTP Server (TLS) id 15.1.31.17; Mon, 15 Dec 2014 20:09:47 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Mon, 15 Dec 2014 20:09:47 +0000 From: Kent Watsen To: NetConf Thread-Topic: server-model #21: Add a feature around the global-params section Thread-Index: AQHQGKMS0hXE1d1xMke0zgE71fMQlQ== Date: Mon, 15 Dec 2014 20:09:47 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.18] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB459; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB459; x-forefront-prvs: 04267075BD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(199003)(479174004)(164054003)(189002)(87936001)(83506001)(4396001)(99286002)(54356999)(20776003)(36756003)(46102003)(16236675004)(120916001)(64706001)(50986999)(19580395003)(107886001)(21056001)(15975445007)(40100003)(107046002)(99396003)(2656002)(101416001)(77156002)(122556002)(19617315012)(105586002)(97736003)(92566001)(110136001)(68736005)(102836002)(229853001)(86362001)(62966003)(450100001)(106356001)(66066001)(31966008)(106116001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB459; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Content-Type: multipart/alternative; boundary="_000_D0B4AA3B8CBC1kwatsenjunipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/q9C8u4n6iACQXUl-kd79u5ly8KM Subject: [Netconf] server-model #21: Add a feature around the global-params section X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 20:10:18 -0000 --_000_D0B4AA3B8CBC1kwatsenjunipernet_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable This issue was discussed in today's virtual interim meeting: https://github.com/netconf-wg/server-model/issues/21 The change is already in the -05 update posted last Thursday and fully desc= ribed by this check-in: https://github.com/netconf-wg/server-model/commit/8dfb7229af9b3ab3cbacfe32f= f9f13c37d4ab934 Unless there are any objections by 12/19/14, plan is to keep this change in= the draft as is. PS: this was discussed at IETF 91, but not raised on the list until now Thanks, Kent --_000_D0B4AA3B8CBC1kwatsenjunipernet_ Content-Type: text/html; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable

This issue was discussed in today's virtu= al interim meeting:


The change is already in the -0= 5 update posted last Thursday and fully described by this check-in:

Unl= ess there are any objections by 12/19/14, plan is to keep this change in th= e draft as is.

PS: this was discussed at IETF 91, but not raised on the list until no= w

Thanks,
Kent

--_000_D0B4AA3B8CBC1kwatsenjunipernet_-- From nobody Mon Dec 15 12:16:32 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36A6C1A8897 for ; Mon, 15 Dec 2014 12:16:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PXHyBqoQH6vs for ; Mon, 15 Dec 2014 12:16:27 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0771.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::771]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5369E1A8873 for ; Mon, 15 Dec 2014 12:16:27 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) with Microsoft SMTP Server (TLS) id 15.1.31.17; Mon, 15 Dec 2014 20:16:04 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Mon, 15 Dec 2014 20:16:03 +0000 From: Kent Watsen To: NetConf Thread-Topic: server-model #18: how to configure trust-anchors for SSH X.509-based client certs? Thread-Index: AQHQGKPzk1Sq1rK1okK6CUcPscsM0w== Date: Mon, 15 Dec 2014 20:16:03 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.13] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-forefront-prvs: 04267075BD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(479174004)(189002)(199003)(164054003)(92566001)(102836002)(40100003)(120916001)(31966008)(107046002)(97736003)(99396003)(122556002)(107886001)(99286002)(106116001)(66066001)(46102003)(229853001)(105586002)(86362001)(15975445007)(110136001)(106356001)(68736005)(36756003)(4396001)(2656002)(87936001)(54356999)(450100001)(64706001)(19580395003)(20776003)(77156002)(83506001)(62966003)(21056001)(50986999)(101416001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB458; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: <6DCEA1C0F80B4342931818E801D90771@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/3O1UzgWKOVVIyb9aJanI6Iy0Or8 Subject: [Netconf] server-model #18: how to configure trust-anchors for SSH X.509-based client certs? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 20:16:29 -0000 This issue was discussed in today's virtual interim meeting: https://github.com/netconf-wg/server-model/issues/18 The change is already in the -05 update posted last Thursday and fully described by this check-in: https://github.com/netconf-wg/server-model/commit/6a93885b23fcc9d88d4f8d33 363ae084c08fc8ae Or more simply by: + feature rfc6187 { + description + "The rfc6187 feature indicates that the NETCONF server supports + RFC 6187"; + reference + "RFC 6187: X.509v3 Certificates for Secure Shell Authentication"; + } And: +--rw netconf-server +--rw ssh {ssh}? + +--rw x509 {rfc6187}? + +--rw trusted-ca-certs + | +--rw trusted-ca-cert* binary + +--rw trusted-client-certs + +--rw trusted-client-cert* binary Unless there are any objections by 12/19/14, plan is to keep this change in the draft as is. PS: this was discussed at IETF 91, but not raised on the list until now Thanks, Kent From nobody Mon Dec 15 12:36:37 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1728F1A895D for ; Mon, 15 Dec 2014 12:36:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.912 X-Spam-Level: X-Spam-Status: No, score=-1.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CHFjhoUFWc60 for ; Mon, 15 Dec 2014 12:36:34 -0800 (PST) Received: from mailbox.snmp.com (mailbox.snmp.com [192.147.142.80]) by ietfa.amsl.com (Postfix) with ESMTP id 284481A7008 for ; Mon, 15 Dec 2014 12:36:33 -0800 (PST) Received: from mainfs.snmp.com (mainfs.snmp.com [192.147.142.124]) by mailbox.snmp.com (8.9.3p2-20030922/m.0080228) with ESMTP id PAA06680; Mon, 15 Dec 2014 15:36:32 -0500 (EST) Received: from mainfs.snmp.com (localhost [127.0.0.1]) by mainfs.snmp.com (8.14.5/8.14.5) with ESMTP id sBFKaXYB012506; Mon, 15 Dec 2014 15:36:33 -0500 (EST) (envelope-from luchuk@mainfs.snmp.com) Received: (from luchuk@localhost) by mainfs.snmp.com (8.14.5/8.14.5/Submit) id sBFKaW9t012505; Mon, 15 Dec 2014 15:36:33 -0500 (EST) (envelope-from luchuk) Date: Mon, 15 Dec 2014 15:36:33 -0500 (EST) From: Alan Luchuk Message-Id: <201412152036.sBFKaW9t012505@mainfs.snmp.com> To: , In-Reply-To: Your message of Mon, 15 Dec 2014 11:28:45 -0800 References: X-Mailer: mail (GNU Mailutils 2.2) Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/RfAwilnKRaL2_i1eTPMKFvpXfow Subject: Re: [Netconf] RESTCONF #3: collections X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 20:36:36 -0000 Hello, >The collections resource is more complicated than originally >anticipated. There are additional XPath parameters for >sorting, filtering, pagination, etc. that should be addressed. >Since this an optional feature, not applicable to all >server implementations, it should be in a separate document. > >The proposed solution for collections is to move the collection >resource plus the "limit" and "offset" parameters to a new draft >(could be called "Collection Resource for RESTCONF"). > >This will keep the base RESTCONF protocol simpler and allow >WGLC to start sooner on the base document. > >Unless there are any objections by 12/19/14, this change >will be made in the next RESTCONF draft. A new draft will >be submitted for the collection resource. I support moving the collection resource and related parameters to a new draft. Regards, --Alan From nobody Mon Dec 15 12:50:55 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 664881A8A0C for ; Mon, 15 Dec 2014 12:50:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.661 X-Spam-Level: X-Spam-Status: No, score=-0.661 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NUI_Ibb-FK5O for ; Mon, 15 Dec 2014 12:50:52 -0800 (PST) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDB381A8A08 for ; Mon, 15 Dec 2014 12:50:51 -0800 (PST) Received: from [172.29.2.202] (unknown [77.48.225.14]) by mail.nic.cz (Postfix) with ESMTPSA id 3262213F7AD; Mon, 15 Dec 2014 21:50:49 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1418676649; bh=n882neXgQUdUd30l9HFAtCr0GyZwVPPw8qqTXdcxAMM=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=u4tY8+XndOWcc16gYcYU1aDz1lb2LblijE9vxjuM7NECybPBTDws+DxbQ8c6f4k0e IdxDxi2QgOsEeJyuGEP0BOvx/QcT/q9Y9Dar66/rnXN7yrv6sr3fkrPJsio2teFASM ismv0jzQZ5AfIC7ua1Ds81ujn643g+Hx35THKdSQ= Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) From: Ladislav Lhotka In-Reply-To: <201412152036.sBFKaW9t012505@mainfs.snmp.com> Date: Mon, 15 Dec 2014 21:50:48 +0100 Content-Transfer-Encoding: 7bit Message-Id: <7A815CA7-7E75-42A0-B056-078E803AE864@nic.cz> References: <201412152036.sBFKaW9t012505@mainfs.snmp.com> To: Alan Luchuk X-Mailer: Apple Mail (2.1993) X-Virus-Scanned: clamav-milter 0.98.1 at mail X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/UYWn8X4HGN31d-Gdqpz7vnhnPE4 Cc: Netconf Subject: Re: [Netconf] RESTCONF #3: collections X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 20:50:53 -0000 > On 15 Dec 2014, at 21:36, Alan Luchuk wrote: > > Hello, > >> The collections resource is more complicated than originally >> anticipated. There are additional XPath parameters for >> sorting, filtering, pagination, etc. that should be addressed. >> Since this an optional feature, not applicable to all >> server implementations, it should be in a separate document. >> >> The proposed solution for collections is to move the collection >> resource plus the "limit" and "offset" parameters to a new draft >> (could be called "Collection Resource for RESTCONF"). >> >> This will keep the base RESTCONF protocol simpler and allow >> WGLC to start sooner on the base document. >> >> Unless there are any objections by 12/19/14, this change >> will be made in the next RESTCONF draft. A new draft will >> be submitted for the collection resource. > > > I support moving the collection resource and related parameters > to a new draft. +1 Lada > > > Regards, > --Alan > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Mon Dec 15 13:28:54 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65F081A8AD9 for ; Mon, 15 Dec 2014 13:28:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -13.91 X-Spam-Level: X-Spam-Status: No, score=-13.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qx-A67QDGEv7 for ; Mon, 15 Dec 2014 13:28:51 -0800 (PST) Received: from mtv-iport-4.cisco.com (mtv-iport-4.cisco.com [173.36.130.15]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C1871A8AD8 for ; Mon, 15 Dec 2014 13:28:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5461; q=dns/txt; s=iport; t=1418678926; x=1419888526; h=from:to:subject:date:message-id:mime-version; bh=DzbBDATuFaXIQHH8ZVXuLygfKl6NtbYxB7i1Znpz9Ms=; b=T4oNESd6O6REQowgsynKSzwFGi8kNIMU0EfneQ8jYzPtaGMrfE0Ag2Jt goHbcQuWBpWrbSheCBsPkVS+TSYHIUSAaSIYtlJMCLcdYmeP3tlwieYU3 e34iRgUmVJBWIeGWolR6vKcg1Igh9nd2NhzAEBSMdvWdqDqMjATSTH8iZ 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AoIFADlSj1StJV2Z/2dsb2JhbABRCYJDQ1JYBMVZhXKBJxYBAQEBAX2EDAECBIELAQgOAwMBAig5FAkKBAESiCwN1HcBAQEBAQUBAQEBARkEjxdKDYQ0BY4Cgz6FMYELhQ+LHSKCMIE8boFFfgEBAQ X-IronPort-AV: E=Sophos;i="5.07,581,1413244800"; d="scan'208,217";a="113118637" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by mtv-iport-4.cisco.com with ESMTP; 15 Dec 2014 21:28:43 +0000 Received: from xhc-rcd-x09.cisco.com (xhc-rcd-x09.cisco.com [173.37.183.83]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id sBFLSgoN029906 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 15 Dec 2014 21:28:42 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.111]) by xhc-rcd-x09.cisco.com ([173.37.183.83]) with mapi id 14.03.0195.001; Mon, 15 Dec 2014 15:28:42 -0600 From: "Reinaldo Penno (repenno)" To: Kent Watsen , NetConf Thread-Topic: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? Thread-Index: AQHQGK4ZMVLZeaH6bke4DK+bIvTIAg== Date: Mon, 15 Dec 2014 21:28:42 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.5.141003 x-originating-ip: [10.24.37.27] Content-Type: multipart/alternative; boundary="_000_D0B491827A2Arepennociscocom_" MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/T6urQn0nTaEQ3enjdCdk-iFdRkY Subject: Re: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 21:28:52 -0000 --_000_D0B491827A2Arepennociscocom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable I think so. I understand the point the chair(?) made today on the call that= more drafts require mode energy but the draft today is very difficult to r= ead. Moreover, if as we start introducing words like MUST/SHOULD and Netco= nf/RESTconf have different levels of support then it would be impossible to= follow. Since we are talking about call home draft, I think it is okay for the clie= nt to identity the server using IP:port instead of just IP. One of the =93s= trategies=94 is for the server to use STUN/TURN, grab a IP:port and convey = that info to the client. Thanks, From: Kent Watsen > Date: Monday, December 15, 2014 at 11:52 AM To: NetConf > Subject: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and = SSH/TLS switches? This issue was discussed in today's virtual interim meeting: https://github.com/netconf-wg/call-home/issues/6 Essentially, after adding RESTCONF to the call-home draft, it seems that dr= aft might be somewhat difficult to read, with all the NETCONF/RESTCONF and = SSH/TLS switches in it. Does anyone else think so? Unless there are any objections by 12/19/14, plan is to keep RESTCONF in th= is draft as is. Thanks, Kent --_000_D0B491827A2Arepennociscocom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <2EA76058F4A73642ADDF99FCA389F9FD@emea.cisco.com> Content-Transfer-Encoding: quoted-printable
I think so. I understand the point the chair(?) made today on the call= that more drafts require mode energy but the draft today is very difficult= to read.  Moreover, if as we start introducing words like MUST/SHOULD= and Netconf/RESTconf have different levels of support then it would be impossible to follow.

Since we are talking about call home draft, I think it is okay for the= client to identity the server using IP:port instead of just IP. One of the= =93strategies=94 is for the server to use STUN/TURN, grab a IP:port and co= nvey that info to the client.


Thanks,





From: Kent Watsen <kwatsen@juniper.net>
Date: Monday, December 15, 2014 at = 11:52 AM
To: NetConf <netconf@ietf.org>
Subject: [Netconf] call-home#6: Too= busy with all the NETCONF/RESTCONF and SSH/TLS switches?


This issue was discussed in today's virtual interim meeting:


Essentially, after adding RESTCONF to the= call-home draft, it seems that draft might be somewhat difficult to r= ead, with all the NETCONF/RESTCONF and SSH/TLS switches in it.  Does a= nyone else think so?

Unless there are any objections by 1= 2/19/14, plan is to keep RESTCONF in this draft as is.

Thanks,
Kent

 --_000_D0B491827A2Arepennociscocom_-- From nobody Mon Dec 15 13:37:50 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 880A71A0070 for ; Mon, 15 Dec 2014 13:37:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.379 X-Spam-Level: X-Spam-Status: No, score=-1.379 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ohmL5AHF3JQW for ; Mon, 15 Dec 2014 13:37:46 -0800 (PST) Received: from mail-la0-f44.google.com (mail-la0-f44.google.com [209.85.215.44]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 235F21A0020 for ; Mon, 15 Dec 2014 13:37:46 -0800 (PST) Received: by mail-la0-f44.google.com with SMTP id gd6so10346530lab.3 for ; Mon, 15 Dec 2014 13:37:44 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=XYFPl1d06v0SjV4kj71lDToQih6XWur5oqzotaLH8S8=; b=NRy34eB22LpaCwCGCTM9CauVMYZsS9kcsOCclmXz4ofSIgpjphujn9QLhY998IK5kr GADcl8zC0ynxtd0rf/wOLgxDvMGbJ7t3GN7Zya/RpfB2qtyj+fiLZO7Npi5Rh6cZZssg prR6QRj2oJtq0zHTMvi5whk6NtJKS6K1q8dlL+m90JrxAPKCbtsWQyl9QX/Mlbrqd2kE IxJTDObNjYsPZfYLpQCde/Wr62fPU24U0AHyJjELDpuoP2mwfXs5GW0iqwdAFw1IfTZc peKPXG65RiV6thC+utM6Br38fEYqwlFWY7vvjAuGMNornk1jWQ5JOOjuLeZGJKjw1ihG 14Ag== X-Gm-Message-State: ALoCoQmHA8EZP9L5Fi/Ni7IfgpZyGwi40YQ7iXP4BzN0kEFt3sTEK0OB+AR0GVPgoQOw4rGKqDfJ MIME-Version: 1.0 X-Received: by 10.152.44.193 with SMTP id g1mr13748919lam.15.1418679464615; Mon, 15 Dec 2014 13:37:44 -0800 (PST) Received: by 10.112.157.233 with HTTP; Mon, 15 Dec 2014 13:37:44 -0800 (PST) In-Reply-To: References: Date: Mon, 15 Dec 2014 13:37:44 -0800 Message-ID: From: Andy Bierman To: "Reinaldo Penno (repenno)" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/rbgBDI3u_bJif3LeVq7TvxISLhE Cc: NetConf Subject: Re: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 21:37:47 -0000 On Mon, Dec 15, 2014 at 1:28 PM, Reinaldo Penno (repenno) wrote: > I think so. I understand the point the chair(?) made today on the call th= at > more drafts require mode energy but the draft today is very difficult to > read. Moreover, if as we start introducing words like MUST/SHOULD and > Netconf/RESTconf have different levels of support then it would be > impossible to follow. Why can't the text be expanded into 2 sentences where needed, instead of 2 drafts? Just use one RFC 2119 keyword per sentence. Andy > > Since we are talking about call home draft, I think it is okay for the > client to identity the server using IP:port instead of just IP. One of th= e > =E2=80=9Cstrategies=E2=80=9D is for the server to use STUN/TURN, grab a I= P:port and convey > that info to the client. > > > Thanks, > > > > > > From: Kent Watsen > Date: Monday, December 15, 2014 at 11:52 AM > To: NetConf > Subject: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF an= d > SSH/TLS switches? > > > This issue was discussed in today's virtual interim meeting: > > https://github.com/netconf-wg/call-home/issues/6 > > Essentially, after adding RESTCONF to the call-home draft, it seems that > draft might be somewhat difficult to read, with all the NETCONF/RESTCONF = and > SSH/TLS switches in it. Does anyone else think so? > > Unless there are any objections by 12/19/14, plan is to keep RESTCONF in > this draft as is. > > Thanks, > Kent > > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > From nobody Mon Dec 15 13:46:34 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 623661A0070 for ; Mon, 15 Dec 2014 13:46:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -13.911 X-Spam-Level: X-Spam-Status: No, score=-13.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZrWSOKKhqn8U for ; Mon, 15 Dec 2014 13:46:30 -0800 (PST) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29DE51A0006 for ; Mon, 15 Dec 2014 13:46:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2517; q=dns/txt; s=iport; t=1418679991; x=1419889591; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=3rePl4+Tgv3np/LISiFLf3VCCS9dn8SUnJH75xCtLkY=; b=JfoU6kwewLKajMS1PDPjo0gXO4VgDhWP2NU5AC6XZdZBhMgy5KmbH16+ YjnzQOmgRwBbPdJR4+Lam/VKhsE05nQoVYTsIdatG3Z2XSU7kQIGKfSQN Inir5M8l9ISiTPyp9dpduxD/6TxLEQoAjmP+ZYdDLvHq/3Ga63ouC+aOJ M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AoYFAHNWj1StJA2E/2dsb2JhbABRCYMGUlgExU8KhShKAoElFgEBAQEBfYQMAQEBBAEBAWsLEAIBCBEDAQIBLicLHQgCBA4FiCwN1GYBAQEBAQEBAQEBAQEBAQEBAQEBAQETBI8XWweEKQWJFYRtgz6FMYELhQ+LHSKCMIE8boFFfgEBAQ X-IronPort-AV: E=Sophos;i="5.07,581,1413244800"; d="scan'208";a="380469270" Received: from alln-core-10.cisco.com ([173.36.13.132]) by rcdn-iport-7.cisco.com with ESMTP; 15 Dec 2014 21:46:30 +0000 Received: from xhc-rcd-x07.cisco.com (xhc-rcd-x07.cisco.com [173.37.183.81]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id sBFLkTCK005393 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 15 Dec 2014 21:46:29 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.111]) by xhc-rcd-x07.cisco.com ([173.37.183.81]) with mapi id 14.03.0195.001; Mon, 15 Dec 2014 15:46:29 -0600 From: "Reinaldo Penno (repenno)" To: Andy Bierman Thread-Topic: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? Thread-Index: AQHQGK4ZMVLZeaH6bke4DK+bIvTIApyRkfEA//98U4A= Date: Mon, 15 Dec 2014 21:46:28 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.5.141003 x-originating-ip: [10.24.37.27] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <15704AD50D3CF94DB6044003EC61BD90@emea.cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/ye8bWVLY87mQRHBjNzR2udGXFJQ Cc: NetConf Subject: Re: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 21:46:32 -0000 Hi Andy, I personally think parsing paragraphs like this one is a bit tricky but if that is what the WG prefers, fine by me. " o Using this TCP session, the NETCONF/RESTCONF server immediately starts either the SSH-server or the TLS-server protocol, depending on which port is connected. The server MUST start the SSH-server protocol when port PORT-X is connected or the TLS-server protocol when either port PORT-Y or PORT-Z is connected. The SSH-server and TLS-server protocols are described by [RFC4253 ] and [RFC5246 ] respectively.=B2 Thanks, On 12/15/14, 1:37 PM, "Andy Bierman" wrote: >On Mon, Dec 15, 2014 at 1:28 PM, Reinaldo Penno (repenno) > wrote: >> I think so. I understand the point the chair(?) made today on the call >>that >> more drafts require mode energy but the draft today is very difficult to >> read. Moreover, if as we start introducing words like MUST/SHOULD and >> Netconf/RESTconf have different levels of support then it would be >> impossible to follow. > >Why can't the text be expanded into 2 sentences where needed, >instead of 2 drafts? Just use one RFC 2119 keyword per sentence. > > >Andy > > > >> >> Since we are talking about call home draft, I think it is okay for the >> client to identity the server using IP:port instead of just IP. One of >>the >> =B3strategies=B2 is for the server to use STUN/TURN, grab a IP:port and >>convey >> that info to the client. >> >> >> Thanks, >> >> >> >> >> >> From: Kent Watsen >> Date: Monday, December 15, 2014 at 11:52 AM >> To: NetConf >> Subject: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF >>and >> SSH/TLS switches? >> >> >> This issue was discussed in today's virtual interim meeting: >> >> https://github.com/netconf-wg/call-home/issues/6 >> >> Essentially, after adding RESTCONF to the call-home draft, it seems that >> draft might be somewhat difficult to read, with all the >>NETCONF/RESTCONF and >> SSH/TLS switches in it. Does anyone else think so? >> >> Unless there are any objections by 12/19/14, plan is to keep RESTCONF in >> this draft as is. >> >> Thanks, >> Kent >> >> >> _______________________________________________ >> Netconf mailing list >> Netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >> From nobody Mon Dec 15 14:19:28 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FB4A1A8759 for ; Mon, 15 Dec 2014 11:01:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jBae6dvTvv09 for ; Mon, 15 Dec 2014 11:01:32 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0799.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::799]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 312861A875D for ; Mon, 15 Dec 2014 11:01:32 -0800 (PST) Received: from padams-sslvpn-nc.jnpr.net (66.129.241.11) by BY2PR05MB157.namprd05.prod.outlook.com (10.242.39.146) with Microsoft SMTP Server (TLS) id 15.1.31.17; Mon, 15 Dec 2014 19:01:06 +0000 MIME-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) Content-Type: text/plain; charset="us-ascii" From: Jeff Haas In-Reply-To: Date: Mon, 15 Dec 2014 14:00:57 -0500 Content-Transfer-Encoding: quoted-printable Message-ID: <0E6F91CF-AA2D-40F7-9144-7D4BFAA7CA16@juniper.net> References: To: "Ersue, Mehmet (NSN - DE/Munich)" X-Mailer: Apple Mail (2.1878.6) X-Originating-IP: [66.129.241.11] X-ClientProxiedBy: BY2PR02CA0030.namprd02.prod.outlook.com (10.141.216.20) To BY2PR05MB157.namprd05.prod.outlook.com (10.242.39.146) X-Microsoft-Antispam: UriScan:; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BY2PR05MB157; X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601003); SRVR:BY2PR05MB157; X-Forefront-PRVS: 04267075BD X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(377454003)(189002)(9763003)(13464003)(51704005)(199003)(77156002)(50466002)(105586002)(110136001)(120916001)(21056001)(551544002)(76176999)(40100003)(20776003)(92566001)(106356001)(1720100001)(107046002)(47776003)(97756001)(4396001)(64706001)(68736005)(15975445007)(82746002)(50226001)(69596002)(19580395003)(89996001)(57306001)(77096005)(122386002)(62966003)(87976001)(19580405001)(81156004)(101416001)(53416004)(23726002)(83716003)(42186005)(33656002)(46406003)(575784001)(36756003)(97736003)(66066001)(16799955002)(86362001)(31966008)(46102003)(50986999)(99396003)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR05MB157; H:padams-sslvpn-nc.jnpr.net; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:;SRVR:BY2PR05MB157; X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/I8XoL7-gnViLLnp94QdBIdw-Slg X-Mailman-Approved-At: Mon, 15 Dec 2014 14:19:27 -0800 Cc: Netconf Subject: Re: [Netconf] Agenda of the virtual interim meeting on December 15, 2014 1700-1900 UTC WAS:FW: NETCONF WG Virtual Interim Meetings December 15, 2014, and bi-weekly starting January 5, 2015 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 19:01:39 -0000 On Dec 9, 2014, at 1:37 PM, Ersue, Mehmet (NSN - DE/Munich) = wrote: > There is a special time slot in the agenda on the I2RS Ephemeral State = we discussed in IETF #91 and I2RS key player are invited to attend.=20 > Susan, Jeff: Please forward as appropriate. Thanks. I'd like to apologize to the WG for missing this time slot. I had an = issue where I lost most of my newer calendar entries and thought I had = recovered all of them.=20 Kent mentions that Sue made the call. I'll connect with her. -- Jeff >=20 >=20 > Agenda of the virtual interim meeting on December 15, 2014 1700-1900 = UTC > = --------------------------------------------------------------------------= ----------- >=20 > Agenda is also available at:=20 > = http://www.ietf.org/proceedings/interim/2014/12/15/netconf/agenda/agenda-i= nterim-2014-netconf-5=20 >=20 > - 5 min chair intro, scribe, agenda bashing > The note taking will be done on: http://beta.etherpad.org/p/netconf-z=20= >=20 > Issue discussion and status check per WG item: >=20 > - Call Home (Kent) (5min) > Currently no open issues. > See https://github.com/netconf-wg/call-home/issues=20 >=20 > - Server Model (Kent) (20min) > Currently 5 open issues. > See https://github.com/netconf-wg/server-model/issues >=20 > - rfc5539bis (Juergen) (5min) > The two issues decided in IETF 91 are in preparation. >=20 > - Restconf (Andy) (30min) > Currently 4 open issues. > See https://github.com/netconf-wg/restconf/issues=20 >=20 > - Zerotouch (Kent) (20min) > Currently 1 open issues. > https://github.com/netconf-wg/yang-patch/issues >=20 > - I2RS Ephemeral state (Susan, Jeff) (30min) > Please provide slides before the meeting. >=20 > - 5 min AOB other topics >=20 > Best Regards, > Mehmet & Mahesh >=20 >=20 > -----Original Message----- > From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of ext IESG = Secretary > Sent: Monday, December 01, 2014 10:05 PM > To: IETF Announcement List > Cc: netconf@ietf.org > Subject: [Netconf] NETCONF WG Virtual Interim Meetings December 15, = 2014, and bi-weekly starting January 5, 2015 >=20 > The NETCONF WG will hold a series of virtual interim meetings = beginning Monday, December 15, 2014. >=20 > Meeting day: Mondays > Time: 1800 CET > Duration: 2 hours >=20 > Dates: December 15, 2014 1-time > and starting with: January 5, 2015 bi-weekly > End date: March 16, 2015 >=20 > WebEx information: >=20 > Meeting number: 640 672 878 > Meeting password: nc2015 > Audio connection: > 1-877-668-4493 Call-in toll free number (US/Canada) > 1-650-479-3208 Call-in toll number (US/Canada) >=20 > Access code: 640 672 878 > Meeting link: = https://ietf.webex.com/ietf/j.php?MTID=3Dm2580594e0bc14b4b94f869a415ce437c= =20 >=20 > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf From nobody Mon Dec 15 14:21:13 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39DF41A0362 for ; Mon, 15 Dec 2014 14:21:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.379 X-Spam-Level: X-Spam-Status: No, score=-1.379 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k0UflFVGsx_u for ; Mon, 15 Dec 2014 14:21:08 -0800 (PST) Received: from mail-la0-f51.google.com (mail-la0-f51.google.com [209.85.215.51]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB0CC1A032D for ; Mon, 15 Dec 2014 14:21:07 -0800 (PST) Received: by mail-la0-f51.google.com with SMTP id ms9so10232818lab.38 for ; Mon, 15 Dec 2014 14:21:06 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=IHntN8cjSnAjKg6kqQ+/BXYhKwM6JbMx7eWeNcMPbLA=; b=NW5W+4/o35bz35tkMpqJjFMdkDplHVGnEW6MXo97x4jFHa7wHzZXoMyfz2gNGHFU6W g4CpV2sR2op6HcsL/+D3Uxn1j/tHMC04KiwzGOtcdVfan8h8Kz1u20zxvnPOYsAWhGvz TinmH9Zs3sTobM047S1955m1k0c6UBxMjntyvdS2bvpU8kY3YSJSlrhLnklVAmJaM+f+ 4fGuMegYdRiyU0dFYs3BQBh+Q/zPLyE1V5T0jlg10gMqV9kDmzrCPO1r6PYVPTmn5nGv xL6S6uhuzOr9b/YtHx7KScjHgUPz8l9EIg2UK9dVCTXcMqlfSuZVzSJ17W/zBJEX3vlS D8Sw== X-Gm-Message-State: ALoCoQmYFYjmZKxI2Z+QDIsY1balVssaQ6pFh67cTsnPu3Rw1I/dgAa9cSQTUeD2TjmoNIZ1WICC MIME-Version: 1.0 X-Received: by 10.112.12.65 with SMTP id w1mr32504656lbb.68.1418682066120; Mon, 15 Dec 2014 14:21:06 -0800 (PST) Received: by 10.112.157.233 with HTTP; Mon, 15 Dec 2014 14:21:06 -0800 (PST) In-Reply-To: References: Date: Mon, 15 Dec 2014 14:21:06 -0800 Message-ID: From: Andy Bierman To: "Reinaldo Penno (repenno)" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/95g06WPcUfWuuDe90676jcZw7cI Cc: NetConf Subject: Re: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 22:21:09 -0000 On Mon, Dec 15, 2014 at 1:46 PM, Reinaldo Penno (repenno) wrote: > Hi Andy, > > I personally think parsing paragraphs like this one is a bit tricky but i= f > that is what the WG prefers, fine by me. > > " o Using this TCP session, the NETCONF/RESTCONF server immediately > starts either the SSH-server or the TLS-server protocol, depending > on which port is connected. The server MUST start the SSH-server > protocol when port PORT-X is connected or the TLS-server protocol > when either port PORT-Y or PORT-Z is connected. The SSH-server > and TLS-server protocols are described by [RFC4253 > ] and [RFC5246 > ] > respectively.=C2=B2 > > This could be split into 2 separate paragraphs. > Thanks, Andy > > On 12/15/14, 1:37 PM, "Andy Bierman" wrote: > >>On Mon, Dec 15, 2014 at 1:28 PM, Reinaldo Penno (repenno) >> wrote: >>> I think so. I understand the point the chair(?) made today on the call >>>that >>> more drafts require mode energy but the draft today is very difficult t= o >>> read. Moreover, if as we start introducing words like MUST/SHOULD and >>> Netconf/RESTconf have different levels of support then it would be >>> impossible to follow. >> >>Why can't the text be expanded into 2 sentences where needed, >>instead of 2 drafts? Just use one RFC 2119 keyword per sentence. >> >> >>Andy >> >> >> >>> >>> Since we are talking about call home draft, I think it is okay for the >>> client to identity the server using IP:port instead of just IP. One of >>>the >>> =C2=B3strategies=C2=B2 is for the server to use STUN/TURN, grab a IP:po= rt and >>>convey >>> that info to the client. >>> >>> >>> Thanks, >>> >>> >>> >>> >>> >>> From: Kent Watsen >>> Date: Monday, December 15, 2014 at 11:52 AM >>> To: NetConf >>> Subject: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF >>>and >>> SSH/TLS switches? >>> >>> >>> This issue was discussed in today's virtual interim meeting: >>> >>> https://github.com/netconf-wg/call-home/issues/6 >>> >>> Essentially, after adding RESTCONF to the call-home draft, it seems tha= t >>> draft might be somewhat difficult to read, with all the >>>NETCONF/RESTCONF and >>> SSH/TLS switches in it. Does anyone else think so? >>> >>> Unless there are any objections by 12/19/14, plan is to keep RESTCONF i= n >>> this draft as is. >>> >>> Thanks, >>> Kent >>> >>> >>> _______________________________________________ >>> Netconf mailing list >>> Netconf@ietf.org >>> https://www.ietf.org/mailman/listinfo/netconf >>> > From nobody Mon Dec 15 14:22:04 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33F191A032D for ; Mon, 15 Dec 2014 14:22:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rPM5tWZpyjpJ for ; Mon, 15 Dec 2014 14:22:01 -0800 (PST) Received: from atlas3.jacobs-university.de (atlas3.jacobs-university.de [212.201.44.18]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E29C1A0362 for ; Mon, 15 Dec 2014 14:22:01 -0800 (PST) Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas3.jacobs-university.de (Postfix) with ESMTP id 2C0828C1; Mon, 15 Dec 2014 23:22:00 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from atlas3.jacobs-university.de ([10.70.0.220]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10030) with ESMTP id 9J1iNHOlVIZ8; Mon, 15 Dec 2014 23:21:55 +0100 (CET) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "Jacobs University CA - G01" (verified OK)) by atlas3.jacobs-university.de (Postfix) with ESMTPS; Mon, 15 Dec 2014 23:21:59 +0100 (CET) Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 7FD3920034; Mon, 15 Dec 2014 23:21:59 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id ItLA0v9E-6Wx; Mon, 15 Dec 2014 23:21:58 +0100 (CET) Received: from elstar.local (elstar.jacobs.jacobs-university.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 77CD920017; Mon, 15 Dec 2014 23:21:58 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 17A682FF7803; Mon, 15 Dec 2014 23:21:56 +0100 (CET) Date: Mon, 15 Dec 2014 23:21:55 +0100 From: Juergen Schoenwaelder To: Kent Watsen Message-ID: <20141215222153.GA63558@elstar.local> Mail-Followup-To: Kent Watsen , NetConf References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/sMyR_NstaAlnWfonSOyJe_rf2lc Cc: NetConf Subject: Re: [Netconf] server-model #18: how to configure trust-anchors for SSH X.509-based client certs? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 22:22:03 -0000 On Mon, Dec 15, 2014 at 08:16:03PM +0000, Kent Watsen wrote: > > This issue was discussed in today's virtual interim meeting: > > https://github.com/netconf-wg/server-model/issues/18 > > The change is already in the -05 update posted last Thursday and fully > described by this check-in: > > https://github.com/netconf-wg/server-model/commit/6a93885b23fcc9d88d4f8d33 > 363ae084c08fc8ae > > Or more simply by: > > + feature rfc6187 { > + description > + "The rfc6187 feature indicates that the NETCONF server supports > + RFC 6187"; > + reference > + "RFC 6187: X.509v3 Certificates for Secure Shell > Authentication"; > + } > I would prefer a more self-explanatory feature name, e.g., ssh-x509-authentication or something like that. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From nobody Mon Dec 15 14:57:28 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37ABE1A6F3F for ; Mon, 15 Dec 2014 14:57:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zTXwuFDCiv4p for ; Mon, 15 Dec 2014 14:57:25 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0117.outbound.protection.outlook.com [65.55.169.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F172E1A1B4A for ; Mon, 15 Dec 2014 14:57:24 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB460.namprd05.prod.outlook.com (10.141.72.152) with Microsoft SMTP Server (TLS) id 15.1.31.17; Mon, 15 Dec 2014 22:57:23 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Mon, 15 Dec 2014 22:57:22 +0000 From: Kent Watsen To: "netconf@ietf.org" Thread-Topic: review of draft-ietf-netconf-rfc5539bis-07.txt Thread-Index: AQHQGLp8Hcq63NffOUGYPCE1rQ6alQ== Date: Mon, 15 Dec 2014 22:57:21 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.13] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB460; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB460; x-forefront-prvs: 04267075BD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377424004)(164054003)(51704005)(479174004)(189002)(24454002)(199003)(377454003)(230783001)(107886001)(2351001)(19580395003)(4396001)(20776003)(50986999)(102836002)(15975445007)(2501002)(1720100001)(229853001)(107046002)(97736003)(66066001)(68736005)(46102003)(110136001)(106356001)(105586002)(19580405001)(2656002)(101416001)(31966008)(83506001)(87936001)(120916001)(54356999)(106116001)(92566001)(450100001)(62966003)(36756003)(64706001)(99286002)(122556002)(21056001)(40100003)(77156002)(99396003)(86362001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB460; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/C7B3ofS5ix8GzY8VG94mNzrhCUM Subject: [Netconf] review of draft-ietf-netconf-rfc5539bis-07.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 22:57:27 -0000 Missing is the alg used to calculate the fingerprint. YANG module ietf-x509-cert-to-name says: typedef tls-fingerprint { type yang:hex-string { pattern '([0-9a-fA-F]){2}(:([0-9a-fA-F]){2}){0,254}'; } description "A fingerprint value that can be used to uniquely reference other data of potentially arbitrary length. An tls-fingerprint value is composed of a 1-octet hashing algorithm identifier followed by the fingerprint value. The first octet value identifying the hashing algorithm is taken from the IANA TLS HashAlgorithm Registry (RFC 5246). The remaining octets are filled using the results of the hashing algorithm."; reference "SNMP-TLS-TM-MIB.SnmpTLSFingerprint"; } In section 7, should the paragraph after 'F' should say something like "if no viable username can be mapped, then the TLS session MUST be dropped"? Suggestion, add a section somewhere like the following? How to configure a NETCONF server is outside the scope of this document, as implementations can support this protocol using proprietary configuration data models. That said, a YANG model for configuring NETCONF over TLS is provided in [draft-ietf-netconf-server-model]. Nits, in section 5", s/presented/Presented/ Thanks, Kent On 12/11/14, 8:49 AM, "internet-drafts@ietf.org" wrote: > >A New Internet-Draft is available from the on-line Internet-Drafts >directories. > This draft is a work item of the Network Configuration Working Group of >the IETF. > > Title : Using the NETCONF Protocol over Transport Layer >Security (TLS) with Mutual X.509 Authentication > Authors : Mohamad Badra > Alan Luchuk > Juergen Schoenwaelder > Filename : draft-ietf-netconf-rfc5539bis-07.txt > Pages : 11 > Date : 2014-12-11 > >Abstract: > The Network Configuration Protocol (NETCONF) provides mechanisms to > install, manipulate, and delete the configuration of network devices. > This document describes how to use the Transport Layer Security (TLS) > protocol with mutual X.509 authentication to secure the exchange of > NETCONF messages. This revision of RFC 5539 documents the new > message framing used by NETCONF 1.1 and it obsoletes RFC 5539. > > >The IETF datatracker status page for this draft is: >https://datatracker.ietf.org/doc/draft-ietf-netconf-rfc5539bis/ > >There's also a htmlized version available at: >http://tools.ietf.org/html/draft-ietf-netconf-rfc5539bis-07 > >A diff from the previous version is available at: >http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-netconf-rfc5539bis-07 > > >Please note that it may take a couple of minutes from the time of >submission >until the htmlized version and diff are available at tools.ietf.org. > >Internet-Drafts are also available by anonymous FTP at: >ftp://ftp.ietf.org/internet-drafts/ > >_______________________________________________ >Netconf mailing list >Netconf@ietf.org >https://www.ietf.org/mailman/listinfo/netconf From nobody Mon Dec 15 20:06:37 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 583481A037C for ; Mon, 15 Dec 2014 20:06:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1oG1PASjroai for ; Mon, 15 Dec 2014 20:06:29 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0797.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::797]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AF911A038E for ; Mon, 15 Dec 2014 20:06:29 -0800 (PST) Received: from BLUPR05CA0051.namprd05.prod.outlook.com (10.141.20.21) by CO1PR05MB444.namprd05.prod.outlook.com (10.141.73.140) with Microsoft SMTP Server (TLS) id 15.1.31.17; Tue, 16 Dec 2014 04:06:05 +0000 Received: from BL2FFO11FD039.protection.gbl (2a01:111:f400:7c09::115) by BLUPR05CA0051.outlook.office365.com (2a01:111:e400:855::21) with Microsoft SMTP Server (TLS) id 15.1.36.22 via Frontend Transport; Tue, 16 Dec 2014 04:06:05 +0000 Received: from P-EMF02-SAC.jnpr.net (66.129.239.16) by BL2FFO11FD039.mail.protection.outlook.com (10.173.161.135) with Microsoft SMTP Server (TLS) id 15.1.26.17 via Frontend Transport; Tue, 16 Dec 2014 04:06:04 +0000 Received: from magenta.juniper.net (172.17.27.123) by P-EMF02-SAC.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.146.0; Mon, 15 Dec 2014 20:06:03 -0800 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id sBG461u33700; Mon, 15 Dec 2014 20:06:01 -0800 (PST) (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.14.4/8.14.3) with ESMTP id sBG45hvU016026; Mon, 15 Dec 2014 23:05:45 -0500 (EST) (envelope-from phil@idle.juniper.net) Message-ID: <201412160405.sBG45hvU016026@idle.juniper.net> To: Kent Watsen In-Reply-To: Date: Mon, 15 Dec 2014 23:05:43 -0500 From: Phil Shafer MIME-Version: 1.0 Content-Type: text/plain X-EOPAttributedMessage: 0 Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.16 as permitted sender) Authentication-Results: spf=softfail (sender IP is 66.129.239.16) smtp.mailfrom=phil@juniper.net; X-Forefront-Antispam-Report: CIP:66.129.239.16; CTRY:US; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(189002)(199003)(164054003)(19580395003)(76506005)(15975445007)(120916001)(84676001)(31966008)(99396003)(450100001)(107046002)(21056001)(77096005)(110136001)(46102003)(6806004)(68736005)(50986999)(62966003)(4396001)(77156002)(106466001)(69596002)(81156004)(48376002)(53416004)(50466002)(1941001)(105596002)(64706001)(103666002)(86362001)(20776003)(47776003)(87936001)(97736003)(54356999)(92566001)(558084003); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB444; H:P-EMF02-SAC.jnpr.net; FPR:; SPF:SoftFail; MLV:sfv; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en; X-Microsoft-Antispam: UriScan:; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB444; X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601003); SRVR:CO1PR05MB444; X-Forefront-PRVS: 04270EF89C X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB444; X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/UKLPcgQtz7x2in-fYShkd82Ntnw Cc: NetConf Subject: Re: [Netconf] server-model #21: Add a feature around the global-params section X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Dec 2014 04:06:32 -0000 Kent Watsen writes: >https://github.com/netconf-wg/server-model/issues/21 The issue is missing a description of the issue. Thanks, Phil From nobody Mon Dec 15 21:48:38 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F7471A038E for ; Mon, 15 Dec 2014 21:48:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UFRr0nk4PMf4 for ; Mon, 15 Dec 2014 21:48:34 -0800 (PST) Received: from atlas3.jacobs-university.de (atlas3.jacobs-university.de [212.201.44.18]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AF3F1A038A for ; Mon, 15 Dec 2014 21:48:34 -0800 (PST) Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas3.jacobs-university.de (Postfix) with ESMTP id DC59B788; Tue, 16 Dec 2014 06:48:32 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from atlas3.jacobs-university.de ([10.70.0.220]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10030) with ESMTP id m4lewNSP9nPh; Tue, 16 Dec 2014 06:48:25 +0100 (CET) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "Jacobs University CA - G01" (verified OK)) by atlas3.jacobs-university.de (Postfix) with ESMTPS; Tue, 16 Dec 2014 06:48:32 +0100 (CET) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id 02D1A2002C; Tue, 16 Dec 2014 06:48:32 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id 1mQGZC5n4pw9; Tue, 16 Dec 2014 06:48:31 +0100 (CET) Received: from elstar.local (elstar.jacobs.jacobs-university.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 3286620017; Tue, 16 Dec 2014 06:48:30 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 409CB2FF7B5E; Tue, 16 Dec 2014 06:48:28 +0100 (CET) Date: Tue, 16 Dec 2014 06:48:28 +0100 From: Juergen Schoenwaelder To: Kent Watsen Message-ID: <20141216054828.GA64240@elstar.local> Mail-Followup-To: Kent Watsen , "netconf@ietf.org" References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/zqe-EBKaGd6gX3ERoNhDJ9vIdxI Cc: "netconf@ietf.org" Subject: Re: [Netconf] review of draft-ietf-netconf-rfc5539bis-07.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Dec 2014 05:48:36 -0000 On Mon, Dec 15, 2014 at 10:57:21PM +0000, Kent Watsen wrote: > > > Missing is the alg used to calculate the fingerprint. YANG module > ietf-x509-cert-to-name says: > > typedef tls-fingerprint { > type yang:hex-string { > pattern '([0-9a-fA-F]){2}(:([0-9a-fA-F]){2}){0,254}'; > } > description > "A fingerprint value that can be used to uniquely reference > other data of potentially arbitrary length. > > An tls-fingerprint value is composed of a 1-octet hashing > algorithm identifier followed by the fingerprint value. The > first octet value identifying the hashing algorithm is taken > from the IANA TLS HashAlgorithm Registry (RFC 5246). The > remaining octets are filled using the results of the hashing > algorithm."; > reference "SNMP-TLS-TM-MIB.SnmpTLSFingerprint"; > } > Since we do not define how this function is configured and the fingerprint matching is a pure local issue, I do not think we need to detail this here. > In section 7, should the paragraph after 'F' should say something like "if > no viable username can be mapped, then the TLS session MUST be dropped"? Yes. I have appended "If there are no further cert-to-name list entries, the TLS session MUST be terminated.". > Suggestion, add a section somewhere like the following? > > How to configure a NETCONF server is outside the scope of this > document, as implementations can support this protocol using > proprietary configuration data models. That said, a YANG > model for configuring NETCONF over TLS is provided in > [draft-ietf-netconf-server-model]. I do not think this is needed. NC over SSH does not have this text either. I want to keep this as short and independent as possible. > Nits, in section 5", s/presented/Presented/ fixed /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From nobody Mon Dec 15 23:58:34 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D0221ACD4B for ; Mon, 15 Dec 2014 23:58:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zq6vD3X-SsA7 for ; Mon, 15 Dec 2014 23:58:31 -0800 (PST) Received: from mail.tail-f.com (mail.tail-f.com [83.241.162.140]) by ietfa.amsl.com (Postfix) with ESMTP id 0E5931ACD47 for ; Mon, 15 Dec 2014 23:58:30 -0800 (PST) Received: from localhost (x15.tail-f.com [192.168.1.60]) by mail.tail-f.com (Postfix) with ESMTPSA id D079E1280098; Tue, 16 Dec 2014 08:58:25 +0100 (CET) Date: Tue, 16 Dec 2014 08:58:25 +0100 (CET) Message-Id: <20141216.085825.1016220743159832941.mbj@tail-f.com> To: andy@yumaworks.com From: Martin Bjorklund In-Reply-To: References: X-Mailer: Mew version 6.5 on Emacs 23.4 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/IjuXhaDzzRWJw5cVKh0kknftHto Cc: netconf@ietf.org Subject: Re: [Netconf] RESTCONF #13: ietf-yang-library X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Dec 2014 07:58:32 -0000 Andy Bierman wrote: > Hi, > > There is no action to take on this issue. > > https://github.com/netconf-wg/restconf/issues/13 > > The next revision of the RESTCONF draft will still > contain this module. > > Raise any objections on the mailing list. If we are going to use this module as the basis for YANG 1.1 conformance (or at least YANG 1.1 optimized advertisement), I prefer to move it to a separate document. /martin From nobody Tue Dec 16 07:14:48 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 398F61A1B3A for ; Tue, 16 Dec 2014 07:14:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id irft8HN61gGG for ; Tue, 16 Dec 2014 07:14:34 -0800 (PST) Received: from mail-lb0-f181.google.com (mail-lb0-f181.google.com [209.85.217.181]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8D381A1B2C for ; Tue, 16 Dec 2014 07:14:30 -0800 (PST) Received: by mail-lb0-f181.google.com with SMTP id l4so10831142lbv.40 for ; Tue, 16 Dec 2014 07:14:29 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=T6T9QU+aM5MIIJmun9q2AS3EJ728DVjN7B6HzOVozeo=; b=kywXMnWzf6TpgxOW7EyrkO+D7r1qKbvi1w9Y5XE9ccXSbFWScdVmn1AMYO6gMWSoEG dYgHRsV7HUZhvwDZOQQ1EtmK/JdsbKxuD5LFoYQbm2xDyKH88BxVNu1xm0NYZrXGOlD5 PZjITJb6imh+VZ7niBTPMNqD1/xlRqsKgnzu9QdD3ffwevXTBwhc21UVu7wTktSQmjf7 xuF8CrXQTuW8I4YzQyttcgnHVhM/CsF6tnBBd2YOyt5ELwde5rzpUDJ+8tMAxv91Dpyl qsU7SGE9zx2RhkSEdMufylQJANcsptLD8k9f82KBEC7daIL+97Boe5P6mZS9QdkpdFSA QRNA== X-Gm-Message-State: ALoCoQmfnkqz+A/s4tEr7rB89J+RBNQfFDkwP/eZc6FJrljwcMoh71lzC09s8/y0WMijMGLFMY1z MIME-Version: 1.0 X-Received: by 10.152.44.193 with SMTP id g1mr17451014lam.15.1418742869353; Tue, 16 Dec 2014 07:14:29 -0800 (PST) Received: by 10.112.157.233 with HTTP; Tue, 16 Dec 2014 07:14:29 -0800 (PST) In-Reply-To: <20141216.085825.1016220743159832941.mbj@tail-f.com> References: <20141216.085825.1016220743159832941.mbj@tail-f.com> Date: Tue, 16 Dec 2014 07:14:29 -0800 Message-ID: From: Andy Bierman To: Martin Bjorklund Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/P0VJMyT5TwYGYG8m41QYbxLbirs Cc: Netconf Subject: Re: [Netconf] RESTCONF #13: ietf-yang-library X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Dec 2014 15:14:36 -0000 On Mon, Dec 15, 2014 at 11:58 PM, Martin Bjorklund wrote: > Andy Bierman wrote: >> Hi, >> >> There is no action to take on this issue. >> >> https://github.com/netconf-wg/restconf/issues/13 >> >> The next revision of the RESTCONF draft will still >> contain this module. >> >> Raise any objections on the mailing list. > > If we are going to use this module as the basis for YANG 1.1 > conformance (or at least YANG 1.1 optimized advertisement), I prefer > to move it to a separate document. > I agree. So this issue is tied to NETMOD Y45. > > /martin Andy From nobody Tue Dec 16 08:14:04 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6D131A1B44 for ; Tue, 16 Dec 2014 08:14:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sp2xcljvcDuf for ; Tue, 16 Dec 2014 08:14:00 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0709.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::709]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 166CB1A1B5B for ; Tue, 16 Dec 2014 08:14:00 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB460.namprd05.prod.outlook.com (10.141.72.152) with Microsoft SMTP Server (TLS) id 15.1.31.17; Tue, 16 Dec 2014 16:13:36 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.216]) with mapi id 15.01.0031.000; Tue, 16 Dec 2014 16:13:36 +0000 From: Kent Watsen To: Andy Bierman , Martin Bjorklund Thread-Topic: [Netconf] RESTCONF #13: ietf-yang-library Thread-Index: AQHQGJ3XpuncoD7WSE6q+wqPvNPYspyR2ueAgAB51oD//7yiAA== Date: Tue, 16 Dec 2014 16:13:35 +0000 Message-ID: References: <20141216.085825.1016220743159832941.mbj@tail-f.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.13] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB460; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB460; x-forefront-prvs: 04270EF89C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377454003)(199003)(24454002)(189002)(164054003)(51704005)(479174004)(120916001)(106116001)(77156002)(99286002)(54356999)(31966008)(83506001)(87936001)(21056001)(40100003)(76176999)(99396003)(86362001)(36756003)(64706001)(62966003)(92566001)(122556002)(101416001)(20776003)(102836002)(19580395003)(230783001)(4396001)(2656002)(19580405001)(105586002)(106356001)(46102003)(50986999)(15975445007)(66066001)(97736003)(68736005)(2900100001)(107046002)(2950100001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB460; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: <209D449305BDAF44BD26BDB5F61BBE4A@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/WXUDXaUFq3886vNRrXOuHcn8skI Cc: Netconf Subject: Re: [Netconf] RESTCONF #13: ietf-yang-library X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Dec 2014 16:14:03 -0000 On 12/16/14, 10:14 AM, "Andy Bierman" wrote: >On Mon, Dec 15, 2014 at 11:58 PM, Martin Bjorklund wrote: >> Andy Bierman wrote: >>> Hi, >>> >>> There is no action to take on this issue. >>> >>> https://github.com/netconf-wg/restconf/issues/13 >>> >>> The next revision of the RESTCONF draft will still >>> contain this module. >>> >>> Raise any objections on the mailing list. >> >> If we are going to use this module as the basis for YANG 1.1 >> conformance (or at least YANG 1.1 optimized advertisement), I prefer >> to move it to a separate document. >> > >I agree. So this issue is tied to NETMOD Y45. Right, this is what I meant in yesterday's meeting by there being a good reason to having it in another draft. The use of ietf-yang-library is not specific to RESTCONF, as NETCONF servers can (should?) use it too. BTW, maybe a different name would be more descriptive: ietf-yang-modules or ietf-yang-conformance? Thanks, Kent From nobody Tue Dec 16 12:35:39 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5852B1A8793; Tue, 16 Dec 2014 12:35:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -98.054 X-Spam-Level: X-Spam-Status: No, score=-98.054 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, GB_SUMOF=1, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vK2wDET8mTZ7; Tue, 16 Dec 2014 12:35:33 -0800 (PST) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) by ietfa.amsl.com (Postfix) with ESMTP id 27B011A8786; Tue, 16 Dec 2014 12:35:33 -0800 (PST) X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=64.112.195.202; From: "Susan Hares" To: , "NETCONF" , Date: Tue, 16 Dec 2014 15:35:28 -0500 Message-ID: <024901d0196f$d4901120$7db03360$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_024A_01D01945.EBBB41A0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdAZboapbH/TgJXUSQGTcosv2HJVOQ== Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/OZ4s-nHvbVHVYf-WwaVmNUwCqYs Cc: rtg-yang-coord@ietf.org, i2rs-chairs@tools.ietf.org Subject: [Netconf] minutes and slides for the I2RS interim X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Dec 2014 20:35:36 -0000 This is a multipart message in MIME format. ------=_NextPart_000_024A_01D01945.EBBB41A0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_024B_01D01945.EBBB41A0" ------=_NextPart_001_024B_01D01945.EBBB41A0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit The I2RS has held two interims during December to discuss use cases, yang models for RIB and topology, and the I2RS requirements on protocol. These minutes of these meetings are attached. You can find slides and minutes for the December 11th, 2014 meeting at: http://www.ietf.org/proceedings/interim/2014/12/11/i2rs/proceedings.html You can find slides and minutes for the December 11th, 2014 meeting at: http://www.ietf.org/proceedings/interim/2014/12/16/i2rs/proceedings.html Please let us know if you have any questions we can answer regarding the I2RS current status. Sue Hares ------=_NextPart_001_024B_01D01945.EBBB41A0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The I2RS = has held two interims during December to discuss use cases, yang models = for RIB and topology, and the I2RS requirements on protocol.  These = minutes of these meetings are attached.

 

You can find = slides and minutes for the December 11th, 2014 meeting at: =

http://www.ietf.org/proceedings/interim/2014/12/11/i2rs/proceedi= ngs.html

 

You can find slides and minutes for the December = 11th, 2014 meeting at:

http://www.ietf.org/proceedings/interim/2014/12/16/i2rs/proceedi= ngs.html

 

Please let us know if you have any questions we can = answer regarding the I2RS current status.

 

Sue Hares =  

------=_NextPart_001_024B_01D01945.EBBB41A0-- ------=_NextPart_000_024A_01D01945.EBBB41A0 Content-Type: text/plain; name="i2rs-interim-minutes-2014-12-16.txt" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="i2rs-interim-minutes-2014-12-16.txt" I2RS interim, December 16, 2014. 10:00-11:40 ET Attendees: Hariharan Ananthakrishnan Alia Atlas Ignas Bagdonas Nitin Bahadur Lou Berger Andy Bierman Deborah Brungard Alexander Clemm Amit Dass Dhruv Dhody Jie Dong=20 Jan Medved Jie Dong Don Fedyk Cary FitzGarald Jeff Haas=20 Joel Halpern Susan Hares=20 Ace Linden Xufeng Liu Jan Medved=20 Dan Romascanu Ju=C3=ABrgen Sch=C3=B6nw=C3=A4lder Himanshu Shah Robert Varga Lixing Wang =20 Michael Wang Kent Watsen Qin (Bill) Wu=20 Agenda Discussion on I2RS RIB Info Drafts [10:00 - 10:30 (zctual)] discussing: = 1) Interaction between RIB Yang Model and draft-ietf-netmod-routing-cfg 2) Nexthop structures proposed in RIB Info Model = [draft-ietf-i2rs-rib-info-model-04]=20 Discussion of I2RS topology drafts [10:30 - 11:15] =20 Overview and PBR {Sue Hares] [10:30 - 10:35] Yang Model for Network Topologies: [Alexander Clemm] [10:35-10:45]=20 draft-clemm-i2rs-yang-network-topo-01.txt draft-clemm-i2rs-yang-l3-topo =20 Yang Model for L2 Topologies [Jie Dong] [10:45 - 10:50] =20 draft-dong-i2rs-yang-l2-network-topology=20 =20 Yang Model for Service Topologies [Qin Wu/Sue Hares] [10:50 - 11:00]=20 = http://datatracker.ietf.org/doc/draft-hares-i2rs-info-model-service-topo/= Discussion on topology drafts [10:35 - 10:45]=20 =09 Protocol Discussion: [11:05 - 11:30] =20 1) Simple protocol option - [Dean Bogdanovic]=20 2) Complex Protocol option - [Sue Hares]=20 3) pub-sub option [Alexander Clemm, Eric Voit]=20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D I2RS Adoption calls in December-January=20 I2RS will make an adoption call for RIB Yang/IM model after 12/16/2014 = meeting. =20 Topics for 1/8/2015 and 1/23/2015 I2RS interim: =20 1) Protocol Requirements for I2RS=20 2) Topology drafts =20 3) RIB Info drafts.=20 =20 1) Document status:=20 Traceability draft has been adopted. We dovetail our Yang modules with netconf and netmod.=20 =3D=3D=3D=3D 2) Rib Info Yang model - Amit [slides] High level differences.=20 What are unique for i2rs? I2RS is not covering the default rib model, compared to the netmod-cfg = they do. Using capabilities for tunnel encap types. Propose add RPC from agent to client for route changes Q: Juergen - why do we need rpc vs. notification?=20 Lixing: Example from BGP use case. =E2=80=A6 Sue: This is for pub-sub, for retrieving history. From BGP use cases. Jan: Do we need both info and data model now? Sue: Alia says one draft. Alia: That=E2=80=99s up to WG. IM could proceed separately from DM = since we=E2=80=99re not yet rechartered for DM. Jeff: Notification in I2RS. Does it also belong in netmod-cfg? Amit: They should align. Sooner or later, we should come back and = revisit it. Alia: Amit and Lixing, very useful comparison vs. netmod rtg-cfg model. = Thanks for doing it. =20 There=E2=80=99s a recent draft by Eric et al. and motivations for = pub-sub.=20 Does it describe the rib model requirements? Useful for i2rs to discuss = and netconf to review. Sue: See end presentation. Nitin: Lots of questions raised. Is there a design team to resolve this? Sue: Yes. We are taking volunteers for that team. Nitin: Feel free to add me to it. =3D=3D=3D=3D=3D 3) Protocol Independent (Topology) Data Models - Sue [slides] 3.1 Contrast topology dependent vs. independent. PBR - Sits underneath the rib list, above the BNP. Default RIB? PBR needs a default RIB for failover. We are only proposing groups, rules. ------ 3.2 Network topology Models - Alex Clemm [slides] Represents both horizontal and vertical layering Lou B: Will you be in Thursday=E2=80=99s TEAS interim? Alex: Yes. Lou: Will defer. Grappling with issue of control plane topo vs. data = plane topology. L3 IGPs they=E2=80=99re the same. SDN, TE - = they=E2=80=99re not necessarily the same. Sue: PBR is a forwarding data plane focus. Qin will cover service = topology and Jie will cover Layer 2. Many people will join you on = Thursday. ------- 3.3 Yang data model for L2 topology - Jie Dong [slides] Jeff: Your model includes layer 2 physical info (vlan etc.) Does this = belong in our I2RS stuff? Alex=E2=80=99s draft lets you look between = layers. Do we want this level of detail in our model? Jie: Topo use case draft suggests we want to gather the sum of the info = from across the network. What about layer 3/2/1? Agree it needs = discussion. Alex: Reasonable to do this. Fine line between abstraction model vs. = other info, but not specific to topology. Discuss on case by case = basis. If not tied to topology properties, should go to inventory. Jie: Agreed. Sue: As Lou put it we have forwarding layer at l2 and control plane at = l2. Alex, when you speak at abstract, which do you mean? Alex: Both. Even with service. Jeff: If we allow write, then the l2 config details matter. Sue: Need active discussions on mail list. Tie into use case. 3.4 Service Topology Info Model - Qin Wu and Sue Hares=20 [slides] Joel: *Who* knows the info needed to populate this model? Service = topology needs to be more than just tunnels. Sue: Abstract topology to lay on top of network topology. We=E2=80=99re = describing this using UML. Joel: Starting to cover my questions. Let=E2=80=99s keep going. Lou: I think you made an important clarification. You mean TEAS requests = to I2RS. Juergen: Concerned with restconf extensions and netconf extensions being = called out in UML. They should work in both. Sue: Thanks for correction, will fix in next rev. [slides] Sue: Note how this ties back to Alex=E2=80=99s model. Additional = questions? Lou: Document has TE data. This doesn=E2=80=99t get covered in these = slides. Is that still there? Sue: We had removed it. Expect to harmonize with Alex. Lou: Usage of TE is not the normal use of it. Perhaps better term, like = NAT load balancer, etc.=20 TED is different than normal usage of TED. =20 Sue: I think you=E2=80=99re correct. We=E2=80=99ll update it, happy to = take further feedback. Don Fedyk: There is a lot more commonality in models in layer 3 models = and others.=20 They could be harmonize a bit more. Jeff: What is the additional harmonization=20 My point was the Yang Model for L3 (as presented) seemed to outline L3, = Service and Optical and missed L2 totally. (Not saying this is one document but one = architecture as presented). Then the L2 Presentation had some L2 but missed several L2 capabilities. = (VPLS, EVPN, VXLAN, PBB etc.)=20 If you look at this more generically each layer (l3,l2,l1) has:=20 Data path, Tunneling/Multiplexor/Virtual network, Topology, Topology = data base, TE extensions,=20 Control Plane. Each layer can and may use IS-IS or OSPF (and even BGP) = for some address distribution VPN information, connection coordination, TE information, = within the context of an Instance/VPN. Each layer can and may offer a service, p2p, p2mp, = mp2mp,(some type of persistent connection or set of connections that may have their own = resiliency mechanisms) at the layer or up to a higher layer.=20 Layers can be skipped and upper layers may be unaware of lower layers.=20 Lou Berger (from email response): My comment on control plane vs data = plane is very much in line with this comment. And Don has begun some of the discussion I was = hoping to talk a bit more about in Thursday's TEAS interim. (At least the TE aspects, as well = as the possible formal representation of control plane separately from data plane.) =E2=80=94=E2=80=94 Subscribing to datastore push updates - Alex Clemm [slides] XXX - transport and subscription decoupling =E2=80=94 Simple vs. Complex I2RS - Dean Bogdanovich and Sue (via mailing list) [slides] Joel: This was discussed in WG. Defining granularity at which we = conflict=20 should be in model. Not sure what we=E2=80=99re discussing here. Sue: Trying to come to some conclusion about ephemeral database from = ietf-91. Dean Bogdanovic thought there might be a different way to look at it. Joel: I don=E2=80=99t think these things are really primitives. = We=E2=80=99re only interacting with some properties of the interface. Same for route - only changing = some property. Jeff: Example of route, ownership is internal. Joel: Correct myself from route vs. route-table. Route-table handles = that arbitration. Jeff: Russ White basically says just interact with routing table, it is = much simpler. Joel: Have discussed with Russ - who does not believe we have covered = the scope properly. Sue: Agree that things are complex, like next hops, recursive nexthops. = Let us have more of this discussion on the mail list. =20 RFC 6095 may help here, per netconf folk. Don: Distinction is based on ability override something in config vs. = the ownership of that=20 thing. Objects that are simple can be easily made to override some = properties. Ownership is still in config. Only need this relationship if config is involved. Jeff: Had presented this override picture at last ietf. Covered by = option 4 =E2=80=9Cpanes of glass model=E2=80=9D. Sue: need to continue this on mailing list. Put more questions out on = list. Need to pick=20 this up for Jan 8 meeting. We had hoped this discussin would clarify = things, but=20 we need to go a few more rounds. ------=_NextPart_000_024A_01D01945.EBBB41A0 Content-Type: text/plain; name="i2rs-interim-minutes-2014-12-11-final-v2.txt" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="i2rs-interim-minutes-2014-12-11-final-v2.txt" I2RS interim meeting December 11, 2014. Chairs Sue Hares, Jeffrey Haas. 10:00-11:00 ET Attendees: Jeff, Sue, Alia Amit Dass Dhruv Dhoty Hariharan Anathakakrishnan Igneous Bagdonas Lixing Wang Juergen Schoenwaelder Alexander Clemm Cary FitzGerald Dean Bogdanovich Don Fedyk Yael Frank Zafar Ali Status =3D=3D=3D=3D=3D=3D=3D RIB model looking for design team members. Currently, Amit and Lixing. Use case summary =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Dean: The main issue with the protocol selection was does I2rs want to = talk directly to daemons or via configuration? Do we want to focus on managing = primitives such as routes, interfaces, etc. or do we want to manage more complex objects such as = VPNs (l3vpn, l2vpn, etc.) =20 If we can figure out what we want to do, it will make selecting protocol = behaviors a bit easier. Maybe even outside of the IETF since there already exist some solutions. = =20 What do we want to enable through the agent? E.g. Apache Thrift is an = interesting protocol=20 if we are dealing with primitives. Sue: Use cases have both. E.g. virtual topology. Can these be done = with just primitives? =20 One option is we can take a protocol selection that works for just the = primitives, but we know that BGP is something that people want to do and BGP cannot be solved = with just primitives. [slide Virtual topology cases] 25 reqs. that are in-charter. =20 [slide Discussion questions] Is it okay to just use primitives or do we need complex objects? Dean: If we do not want to support bgp vpns, only need primitives. =20 Ignas: One of the important thing is transactions. If we have both, = there is a lot of flexibility. =20 If transactions are not in protocol level but are in client agent = interaction or some other entity,=20 then we have to worry about deterministic issues. Jeff: Speed may require two distinct mechanisms. Ignas: Speed? Possible. Depends on use case. Maybe makes sense. Alia: In architecture, we do not have the idea of transactions. You may = have multiple operations in single exchange with agent. Trying to add transaction = complexity will rat-hole us. The concept of going to two mechanisms if the more complex use cases = sounds much better than trying to push more complexity into the simpler use cases. =20 Jeff: Getting state out of the system is also important. Dean: This might push us into duplicating cases already elsewhere? If = you can already do complex stuff via configuration - e.g. l3vpn - many components, each particular daemon = has work to do.=20 If we can do it using primitives as well, but exposing those interfaces = adds complexity. =20 Know from two vendors that we have different approaches; this would lead = to vendor specific issues. =20 Sue: Your suggestion is we go through config process for everything or = complex? Dean: Primitives should go through daemons - [it is] faster. But then = you limit flexibility. Complex always should go through config; already a solved problem. What = is open? Do we want to have two different ways to do this? Jeff: Simple, complex, issues may have protocol impacts. See discussion = about netconf vs. restconf. Sue: Dean, you know about this in thrift? Dean: Yes, have done some implementation. Sue: We should split this into simple or complex. Next week, let = discuss having the protocol split-up between complex and simple.=20 Dean: I=E2=80=99ve already done that split up, can send to list. Sue: Want to focus on protocol independent items and topology. = Alexander, could you do the analysis on your topology items? Alexander: Ok I can present that. Jeff: IETF session broke things down into interactions with config state = vs. i2rs injected state. This discussion clarified we need to further break this down to simple = vs. complex. Rib Info Models=E2=80=A6 [slides] Nitin and Sriganesh are in Asia and don=E2=80=99t think they can = present. They=E2=80=99ll talk info model next week. RIB yang model [technical issues with Amit and Lixing presenting=E2=80=A6] Jeff: How to do the multiple encaps. Is this a good idea? Amit: Good idea, best idea to date? =20 Jeff: Overlap with rtg-cfg? Amit: Not yet.=20 Hari: I did some of this. Collaborating with Lada. Will work with = Amit. There is some confusion about who is the derived model of whom.=20 Dean: Many discussions about rtg-cfg model. When we started modeling = other protocols such as ospf, we realized we could not do that work yet due to inconsistencies in = rtg-cfg. IMO, should be used as base for all rtg-cfg models. Jeff: Motivation for asking is overlap with regard to complex config vs. = primitives. Hari: Should be complementing? Sue: For next week, figure out how this relates to rtg-cfg. Amit will come back with that information to the next interim.=20 Sue: let=E2=80=99s talk about this on list. Can you drive it Dean, Amit, = Lixing? Alex, for your model? Jeff: Juergen general recursion for 1.1, 2.0? Juergen: 1.1, no. 2.0 no clue. Jeff: Raise on netmod mailing list? Juergen: yes.=20 Jeff: Will raise on netmod. EOF. ------=_NextPart_000_024A_01D01945.EBBB41A0-- From nobody Thu Dec 18 09:07:45 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 824591A8AF3 for ; Thu, 18 Dec 2014 09:07:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZtlkBaYUeyPg for ; Thu, 18 Dec 2014 09:07:39 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0753.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::753]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3EC8F1A1B8E for ; Thu, 18 Dec 2014 09:07:39 -0800 (PST) Received: from BN1PR05MB456.namprd05.prod.outlook.com (10.141.59.26) by BN1PR05MB453.namprd05.prod.outlook.com (10.141.59.11) with Microsoft SMTP Server (TLS) id 15.1.36.23; Thu, 18 Dec 2014 17:07:16 +0000 Received: from BN1PR05MB456.namprd05.prod.outlook.com ([169.254.3.233]) by BN1PR05MB456.namprd05.prod.outlook.com ([169.254.3.233]) with mapi id 15.01.0031.000; Thu, 18 Dec 2014 17:07:15 +0000 From: Kent Watsen To: Juergen Schoenwaelder Thread-Topic: [Netconf] server-model #18: how to configure trust-anchors for SSH X.509-based client certs? Thread-Index: AQHQGKPzk1Sq1rK1okK6CUcPscsM05yROciAgAQLQIA= Date: Thu, 18 Dec 2014 17:07:15 +0000 Message-ID: References: <20141215222153.GA63558@elstar.local> In-Reply-To: <20141215222153.GA63558@elstar.local> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.13] authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR05MB453; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR05MB453; x-forefront-prvs: 042957ACD7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(51704005)(189002)(199003)(2656002)(46102003)(66066001)(122556002)(31966008)(87936001)(120916001)(20776003)(40100003)(64706001)(86362001)(36756003)(92566001)(102836002)(2900100001)(106356001)(4396001)(107046002)(68736005)(99286002)(106116001)(2950100001)(97736003)(101416001)(110136001)(77156002)(83506001)(76176999)(99396003)(50986999)(54356999)(105586002)(21056001)(62966003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR05MB453; H:BN1PR05MB456.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Dec 2014 17:07:15.3625 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR05MB453 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/2iLc4EAlGX0IvBlowd9jSC66ORw Cc: NetConf Subject: Re: [Netconf] server-model #18: how to configure trust-anchors for SSH X.509-based client certs? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Dec 2014 17:07:41 -0000 Hi Juergen, >>Or more simply by: >>=20 >> + feature rfc6187 { >> + description >> + "The rfc6187 feature indicates that the NETCONF server >>supports >> + RFC 6187"; >> + reference >> + "RFC 6187: X.509v3 Certificates for Secure Shell >> >I would prefer a more self-explanatory feature name, e.g., >ssh-x509-authentication or something like that. "ssh-x509-certs" would be more accurate, and shorter too. Other feature names are: * session-options * ssh * tls * listen * call-home They're all pretty small, mostly one word. I wish "session-options" could be smaller... Kent From nobody Thu Dec 18 09:48:40 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A48B1A9118 for ; Thu, 18 Dec 2014 09:48:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b8xzLcO10RHe for ; Thu, 18 Dec 2014 09:48:37 -0800 (PST) Received: from atlas3.jacobs-university.de (atlas3.jacobs-university.de [212.201.44.18]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DEB01A90DE for ; Thu, 18 Dec 2014 09:48:35 -0800 (PST) Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas3.jacobs-university.de (Postfix) with ESMTP id 436D4E53; Thu, 18 Dec 2014 18:48:34 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from atlas3.jacobs-university.de ([10.70.0.220]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10030) with ESMTP id ALliaT2qVL55; Thu, 18 Dec 2014 18:48:31 +0100 (CET) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "Jacobs University CA - G01" (verified OK)) by atlas3.jacobs-university.de (Postfix) with ESMTPS; Thu, 18 Dec 2014 18:48:33 +0100 (CET) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id 9BAC72002C; Thu, 18 Dec 2014 18:48:33 +0100 (CET) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id UUzszO5knOgC; Thu, 18 Dec 2014 18:48:33 +0100 (CET) Received: from elstar.local (elstar.jacobs.jacobs-university.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id AB27E20017; Thu, 18 Dec 2014 18:48:32 +0100 (CET) Received: by elstar.local (Postfix, from userid 501) id 00F02300FCCA; Thu, 18 Dec 2014 18:48:31 +0100 (CET) Date: Thu, 18 Dec 2014 18:48:31 +0100 From: Juergen Schoenwaelder To: Kent Watsen Message-ID: <20141218174831.GA28619@elstar.local> Mail-Followup-To: Kent Watsen , NetConf References: <20141215222153.GA63558@elstar.local> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/8L5U2LmUFJXGdmOP6hD1lt40E8Y Cc: NetConf Subject: Re: [Netconf] server-model #18: how to configure trust-anchors for SSH X.509-based client certs? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Dec 2014 17:48:38 -0000 On Thu, Dec 18, 2014 at 05:07:15PM +0000, Kent Watsen wrote: > > I wish "session-options" could be smaller... > Are there implementations that do not have these timeouts? That is, are there servers that wait forever if a client connects and simply does nothing? I understand that making everything optional features is great because then there is not much left to implement but then if almost everybody implements a certain feature, it might be easier to simply make things mandatory. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From nobody Thu Dec 18 13:25:27 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 788DF1A7D81 for ; Thu, 18 Dec 2014 13:25:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W1894gzLrIYX for ; Thu, 18 Dec 2014 13:25:24 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0764.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::764]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11C2B1A702E for ; Thu, 18 Dec 2014 13:25:23 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB460.namprd05.prod.outlook.com (10.141.72.152) with Microsoft SMTP Server (TLS) id 15.1.31.17; Thu, 18 Dec 2014 21:25:00 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.166]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.166]) with mapi id 15.01.0049.002; Thu, 18 Dec 2014 21:24:59 +0000 From: Kent Watsen To: Juergen Schoenwaelder Thread-Topic: [Netconf] server-model #18: how to configure trust-anchors for SSH X.509-based client certs? Thread-Index: AQHQGKPzk1Sq1rK1okK6CUcPscsM05yROciAgAQLQICAAF9cgP//6KmA Date: Thu, 18 Dec 2014 21:24:59 +0000 Message-ID: References: <20141215222153.GA63558@elstar.local> <20141218174831.GA28619@elstar.local> In-Reply-To: <20141218174831.GA28619@elstar.local> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.13] authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB460; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB460; x-forefront-prvs: 042957ACD7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(189002)(51704005)(99286002)(87936001)(77156002)(54356999)(106116001)(62966003)(40100003)(92566001)(101416001)(83506001)(93886004)(36756003)(120916001)(99396003)(76176999)(86362001)(64706001)(21056001)(20776003)(122556002)(102836002)(19580395003)(4396001)(105586002)(2656002)(110136001)(2900100001)(66066001)(46102003)(31966008)(50986999)(68736005)(106356001)(97736003)(107046002)(15975445007)(2950100001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB460; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) Content-Type: text/plain; charset="us-ascii" Content-ID: <898F59384C975E41BA76882BD75E8182@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/wwcgGpuXxp51BIpr5FIWpM1E-Ek Cc: NetConf Subject: Re: [Netconf] server-model #18: how to configure trust-anchors for SSH X.509-based client certs? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Dec 2014 21:25:26 -0000 >Are there implementations that do not have these timeouts? That is, >are there servers that wait forever if a client connects and simply >does nothing? > >I understand that making everything optional features is great because >then there is not much left to implement but then if almost everybody >implements a certain feature, it might be easier to simply make things >mandatory. So this is what issue #21 is about: https://github.com/netconf-wg/server-model/issues/21 I agree that it seems that servers would always implement these timeouts and thus having no if-feature statement would be OK. It is what I had originally after all. But the issue was raise at the IETF 91 meeting and is now being confirmed on the list (see email with subject "server-model #21: Add a feature around the global-params section"). So far there has been no response to that email, though I think you have just now raise some skepticism towards needing to do it. Kent From nobody Thu Dec 18 13:36:23 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3963E1A8730 for ; Thu, 18 Dec 2014 13:36:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.302 X-Spam-Level: X-Spam-Status: No, score=-1.302 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UCpYA9sN5k-F for ; Thu, 18 Dec 2014 13:36:20 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0132.outbound.protection.outlook.com [207.46.100.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBEFC1A702E for ; Thu, 18 Dec 2014 13:36:20 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) with Microsoft SMTP Server (TLS) id 15.1.49.12; Thu, 18 Dec 2014 21:36:19 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.166]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.166]) with mapi id 15.01.0049.002; Thu, 18 Dec 2014 21:36:19 +0000 From: Kent Watsen To: Andy Bierman , "Reinaldo Penno (repenno)" Thread-Topic: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? Thread-Index: AQHQGK4ZMVLZeaH6bke4DK+bIvTIApyRLVwAgAACcACAAAmuAIAEVqeA Date: Thu, 18 Dec 2014 21:36:17 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.13] authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-forefront-prvs: 042957ACD7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(164054003)(479174004)(377454003)(189002)(51704005)(199003)(105586002)(83506001)(106356001)(106116001)(97736003)(561944003)(2656002)(87936001)(19580395003)(19580405001)(101416001)(36756003)(77156002)(62966003)(2900100001)(2950100001)(120916001)(99396003)(40100003)(46102003)(68736005)(15975445007)(122556002)(102836002)(76176999)(54356999)(92566001)(50986999)(93886004)(31966008)(107046002)(4396001)(20776003)(86362001)(64706001)(99286002)(21056001)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB458; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) Content-Type: text/plain; charset="euc-kr" Content-ID: <8CFE4445F6FAE44C9672C6037FB82845@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Dec 2014 21:36:17.1659 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB458 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/UAUcMemzgWmTF5RmUsuSvtM7AnI Cc: Netconf Subject: Re: [Netconf] call-home#6: Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Dec 2014 21:36:22 -0000 DQpTbyBpdCBzZWVtcyB0aGF0IGV2ZXJ5b25lIHRoYXQgaGFzIGNvbW1lbnRlZCBvbiB0aGlzIGlz c3VlIHNvIGZhciBhZ3JlZXMNCnRoYXQgdGhlIGN1cnJlbnQgZHJhZnQgaXMgdG9vIGJ1c3ksIGJ1 dCBoYXZlIGRpZmZlcmVudCBpZGVhcyBmb3IgaG93IHRvDQpwcm9jZWVkLiAgSXMgdGhpcyBhIGNv cnJlY3QgYXNzZXNzbWVudD8gIEhhcyBhbnlvbmUgZWxzZSB0aGF0IHJlYWQgdGhlIC0wMg0KZHJh ZnQgcHJvdmlkZSB0aGVpciB0aG91Z2h0cyBmb3IgaG93IHRvIGJldHRlciBzdHJ1Y3R1cmUgdGhl IGNvbnRlbnQ/DQoNClBTOiBnaXZlbiB0aGUgY29tbWVudHMgcmVjZWl2ZWQgc28gZmFyLCB0aGUg cHJvcG9zYWwgdG8gdXNlIHRoZSBjdXJyZW50DQpkcmFmdCB3aWxsIG5vdCBiZSBhdXRvbWF0aWNh bGx5IGFjY2VwdGVkIHRvbW9ycm93LiAgQnV0IGZvciB0aG9zZSB3aG8NCmhhdmVuJ3QgY29tbWVu dGVkIHlldCwgcGxlYXNlIHByb3ZpZGUgeW91ciBjb21tZW50cyBxdWlja2x5IHNvIHdlIGNhbiBt b3ZlDQpmb3J3YXJkIHdpdGggYW4gdXBkYXRlIGFzIHNvb24gYXMgcG9zc2libGUuDQoNClRoYW5r cywNCktlbnQNCg0KDQpPbiAxMi8xNS8xNCwgNToyMSBQTSwgIkFuZHkgQmllcm1hbiIgPGFuZHlA eXVtYXdvcmtzLmNvbT4gd3JvdGU6DQoNCj5PbiBNb24sIERlYyAxNSwgMjAxNCBhdCAxOjQ2IFBN LCBSZWluYWxkbyBQZW5ubyAocmVwZW5ubykNCj48cmVwZW5ub0BjaXNjby5jb20+IHdyb3RlOg0K Pj4gSGkgQW5keSwNCj4+DQo+PiBJIHBlcnNvbmFsbHkgdGhpbmsgcGFyc2luZyBwYXJhZ3JhcGhz IGxpa2UgdGhpcyBvbmUgaXMgYSBiaXQgdHJpY2t5IGJ1dA0KPj5pZg0KPj4gdGhhdCBpcyB3aGF0 IHRoZSBXRyBwcmVmZXJzLCBmaW5lIGJ5IG1lLg0KPj4NCj4+ICIgICBvICBVc2luZyB0aGlzIFRD UCBzZXNzaW9uLCB0aGUgTkVUQ09ORi9SRVNUQ09ORiBzZXJ2ZXIgaW1tZWRpYXRlbHkNCj4+ICAg ICAgIHN0YXJ0cyBlaXRoZXIgdGhlIFNTSC1zZXJ2ZXIgb3IgdGhlIFRMUy1zZXJ2ZXIgcHJvdG9j b2wsIGRlcGVuZGluZw0KPj4gICAgICAgb24gd2hpY2ggcG9ydCBpcyBjb25uZWN0ZWQuICBUaGUg c2VydmVyIE1VU1Qgc3RhcnQgdGhlIFNTSC1zZXJ2ZXINCj4+ICAgICAgIHByb3RvY29sIHdoZW4g cG9ydCBQT1JULVggaXMgY29ubmVjdGVkIG9yIHRoZSBUTFMtc2VydmVyIHByb3RvY29sDQo+PiAg ICAgICB3aGVuIGVpdGhlciBwb3J0IFBPUlQtWSBvciBQT1JULVogaXMgY29ubmVjdGVkLiAgVGhl IFNTSC1zZXJ2ZXINCj4+ICAgICAgIGFuZCBUTFMtc2VydmVyIHByb3RvY29scyBhcmUgZGVzY3Jp YmVkIGJ5IFtSRkM0MjUzDQo+PiA8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzQyNTM+ XSBhbmQgW1JGQzUyNDYNCj4+IDxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNTI0Nj5d DQo+PiAgICAgICByZXNwZWN0aXZlbHkuqfcNCj4+DQo+Pg0KPg0KPlRoaXMgY291bGQgYmUgc3Bs aXQgaW50byAyIHNlcGFyYXRlIHBhcmFncmFwaHMuDQo+DQo+DQo+PiBUaGFua3MsDQo+DQo+QW5k eQ0KPg0KPj4NCj4+IE9uIDEyLzE1LzE0LCAxOjM3IFBNLCAiQW5keSBCaWVybWFuIiA8YW5keUB5 dW1hd29ya3MuY29tPiB3cm90ZToNCj4+DQo+Pj5PbiBNb24sIERlYyAxNSwgMjAxNCBhdCAxOjI4 IFBNLCBSZWluYWxkbyBQZW5ubyAocmVwZW5ubykNCj4+PjxyZXBlbm5vQGNpc2NvLmNvbT4gd3Jv dGU6DQo+Pj4+IEkgdGhpbmsgc28uIEkgdW5kZXJzdGFuZCB0aGUgcG9pbnQgdGhlIGNoYWlyKD8p IG1hZGUgdG9kYXkgb24gdGhlIGNhbGwNCj4+Pj50aGF0DQo+Pj4+IG1vcmUgZHJhZnRzIHJlcXVp cmUgbW9kZSBlbmVyZ3kgYnV0IHRoZSBkcmFmdCB0b2RheSBpcyB2ZXJ5IGRpZmZpY3VsdA0KPj4+ PnRvDQo+Pj4+IHJlYWQuICBNb3Jlb3ZlciwgaWYgYXMgd2Ugc3RhcnQgaW50cm9kdWNpbmcgd29y ZHMgbGlrZSBNVVNUL1NIT1VMRCBhbmQNCj4+Pj4gTmV0Y29uZi9SRVNUY29uZiBoYXZlIGRpZmZl cmVudCBsZXZlbHMgb2Ygc3VwcG9ydCB0aGVuIGl0IHdvdWxkIGJlDQo+Pj4+IGltcG9zc2libGUg dG8gZm9sbG93Lg0KPj4+DQo+Pj5XaHkgY2FuJ3QgdGhlIHRleHQgYmUgZXhwYW5kZWQgaW50byAy IHNlbnRlbmNlcyB3aGVyZSBuZWVkZWQsDQo+Pj5pbnN0ZWFkIG9mIDIgZHJhZnRzPyAgSnVzdCB1 c2Ugb25lIFJGQyAyMTE5IGtleXdvcmQgcGVyIHNlbnRlbmNlLg0KPj4+DQo+Pj4NCj4+PkFuZHkN Cj4+Pg0KPj4+DQo+Pj4NCj4+Pj4NCj4+Pj4gU2luY2Ugd2UgYXJlIHRhbGtpbmcgYWJvdXQgY2Fs bCBob21lIGRyYWZ0LCBJIHRoaW5rIGl0IGlzIG9rYXkgZm9yIHRoZQ0KPj4+PiBjbGllbnQgdG8g aWRlbnRpdHkgdGhlIHNlcnZlciB1c2luZyBJUDpwb3J0IGluc3RlYWQgb2YganVzdCBJUC4gT25l IG9mDQo+Pj4+dGhlDQo+Pj4+IKn4c3RyYXRlZ2llc6n3IGlzIGZvciB0aGUgc2VydmVyIHRvIHVz ZSBTVFVOL1RVUk4sIGdyYWIgYSBJUDpwb3J0IGFuZA0KPj4+PmNvbnZleQ0KPj4+PiB0aGF0IGlu Zm8gdG8gdGhlIGNsaWVudC4NCj4+Pj4NCj4+Pj4NCj4+Pj4gVGhhbmtzLA0KPj4+Pg0KPj4+Pg0K Pj4+Pg0KPj4+Pg0KPj4+Pg0KPj4+PiBGcm9tOiBLZW50IFdhdHNlbiA8a3dhdHNlbkBqdW5pcGVy Lm5ldD4NCj4+Pj4gRGF0ZTogTW9uZGF5LCBEZWNlbWJlciAxNSwgMjAxNCBhdCAxMTo1MiBBTQ0K Pj4+PiBUbzogTmV0Q29uZiA8bmV0Y29uZkBpZXRmLm9yZz4NCj4+Pj4gU3ViamVjdDogW05ldGNv bmZdIGNhbGwtaG9tZSM2OiBUb28gYnVzeSB3aXRoIGFsbCB0aGUgTkVUQ09ORi9SRVNUQ09ORg0K Pj4+PmFuZA0KPj4+PiBTU0gvVExTIHN3aXRjaGVzPw0KPj4+Pg0KPj4+Pg0KPj4+PiBUaGlzIGlz c3VlIHdhcyBkaXNjdXNzZWQgaW4gdG9kYXkncyB2aXJ0dWFsIGludGVyaW0gbWVldGluZzoNCj4+ Pj4NCj4+Pj4gaHR0cHM6Ly9naXRodWIuY29tL25ldGNvbmYtd2cvY2FsbC1ob21lL2lzc3Vlcy82 DQo+Pj4+DQo+Pj4+IEVzc2VudGlhbGx5LCBhZnRlciBhZGRpbmcgUkVTVENPTkYgdG8gdGhlIGNh bGwtaG9tZSBkcmFmdCwgaXQgc2VlbXMNCj4+Pj50aGF0DQo+Pj4+IGRyYWZ0IG1pZ2h0IGJlIHNv bWV3aGF0IGRpZmZpY3VsdCB0byByZWFkLCB3aXRoIGFsbCB0aGUNCj4+Pj5ORVRDT05GL1JFU1RD T05GIGFuZA0KPj4+PiBTU0gvVExTIHN3aXRjaGVzIGluIGl0LiAgRG9lcyBhbnlvbmUgZWxzZSB0 aGluayBzbz8NCj4+Pj4NCj4+Pj4gVW5sZXNzIHRoZXJlIGFyZSBhbnkgb2JqZWN0aW9ucyBieSAx Mi8xOS8xNCwgcGxhbiBpcyB0byBrZWVwIFJFU1RDT05GDQo+Pj4+aW4NCj4+Pj4gdGhpcyBkcmFm dCBhcyBpcy4NCj4+Pj4NCj4+Pj4gVGhhbmtzLA0KPj4+PiBLZW50DQo+Pj4+DQo+Pj4+DQo+Pj4+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4+IE5l dGNvbmYgbWFpbGluZyBsaXN0DQo+Pj4+IE5ldGNvbmZAaWV0Zi5vcmcNCj4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZXRjb25mDQo+Pj4+DQo+Pg0KDQo= From nobody Thu Dec 18 14:21:38 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 939A41A8BAF for ; Thu, 18 Dec 2014 14:21:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GLG7EvEFzIho for ; Thu, 18 Dec 2014 14:21:36 -0800 (PST) Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CE0C1A8A46 for ; Thu, 18 Dec 2014 14:21:35 -0800 (PST) Received: by mail-lb0-f172.google.com with SMTP id u10so1749893lbd.31 for ; Thu, 18 Dec 2014 14:21:34 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=WJVMRLEYs6HLVS+1D93cKC/t5/UaspuADgtxsAjIAok=; b=QOxJ9xYcstutrEgjtVISpvt53vlRBf9B2yCRdiieGdaxgs4D4JLOP6m1ioXzhX704D 3YUeEbfTGc1crsimsQIorrg747oIoXV5Oiwj4ng19ZaH+6ReuC1ROLUto1HN5xY+zGMr u3/Rbley1NZxlzZ7ahiaxHqfq6gj6FMH5o6eikkFGVnEUmGNNVEiYf9T+0N5xRptHDHx 5ZNNWDxNXqmNt02pRBGJNhJTETFTb7vGjrifL28JhWU8Yh7aJqHfV7FUhtU8CSnTsapi LzW2OKsdxvCBgqu0wH7Z8PggLbVS9JGCBjZCtYfCNAz6+lfFczgqh0sKfnMuciAKxJuj GRIg== X-Gm-Message-State: ALoCoQm5P4tPHk9lQg+oGayVov6ujQsESFL5ZvRmIAMB/ysmkIxaFSjTORTbByRQ5ZKFYEDYGiE6 MIME-Version: 1.0 X-Received: by 10.112.170.36 with SMTP id aj4mr4570103lbc.3.1418941293991; Thu, 18 Dec 2014 14:21:33 -0800 (PST) Received: by 10.112.157.233 with HTTP; Thu, 18 Dec 2014 14:21:33 -0800 (PST) In-Reply-To: References: <20141215222153.GA63558@elstar.local> <20141218174831.GA28619@elstar.local> Date: Thu, 18 Dec 2014 14:21:33 -0800 Message-ID: From: Andy Bierman To: Kent Watsen Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/h3DFY_j_ng_FDzwL3113kgXKPfk Cc: NetConf Subject: Re: [Netconf] server-model #18: how to configure trust-anchors for SSH X.509-based client certs? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Dec 2014 22:21:37 -0000 On Thu, Dec 18, 2014 at 1:24 PM, Kent Watsen wrote: > > >>Are there implementations that do not have these timeouts? That is, >>are there servers that wait forever if a client connects and simply >>does nothing? >> >>I understand that making everything optional features is great because >>then there is not much left to implement but then if almost everybody >>implements a certain feature, it might be easier to simply make things >>mandatory. > > > So this is what issue #21 is about: > https://github.com/netconf-wg/server-model/issues/21 > The comment cited in the issue tracker does not give a reason why servers should not have to implement these timeouts. > I agree that it seems that servers would always implement these timeouts > and thus having no if-feature statement would be OK. It is what I had > originally after all. But the issue was raise at the IETF 91 meeting and > is now being confirmed on the list (see email with subject "server-model > #21: Add a feature around the global-params section"). So far there has > been no response to that email, though I think you have just now raise > some skepticism towards needing to do it. We should always justify YANG features wrt/ large resource requirement or related to an optional protocol, etc. If we do not think it is an implementation burden then make it part of the base module. More importantly, if lack of implementation can disrupt operations, then it has to be part of the base module. In this case, lack of timeouts can disrupt the server if there is a maximum number of sessions allowed. Without timeouts, some app can intentionally or accidentally lock out other apps by using up all the allowed admin sessions. > > Kent Andy > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf From nobody Thu Dec 18 16:51:52 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D76911ACC86 for ; Thu, 18 Dec 2014 16:51:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z0OwUcjB335x for ; Thu, 18 Dec 2014 16:51:46 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0718.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:718]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70B6A1ACC82 for ; Thu, 18 Dec 2014 16:51:46 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) with Microsoft SMTP Server (TLS) id 15.1.49.12; Fri, 19 Dec 2014 00:51:23 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.166]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.166]) with mapi id 15.01.0049.002; Fri, 19 Dec 2014 00:51:22 +0000 From: Kent Watsen To: Hannes Tschofenig , "netconf@ietf.org" Thread-Topic: [Netconf] draft-ietf-netconf-zerotouch-01 Thread-Index: AQHQElKal5xonO3gx0quOfI9bf4W+pyGQGmAgAJE8QCADU2/AA== Date: Fri, 19 Dec 2014 00:51:22 +0000 Message-ID: References: <5484A800.8080604@gmx.net> <54880712.4020205@gmx.net> In-Reply-To: <54880712.4020205@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.13] authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB458; x-forefront-prvs: 0430FA5CB7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(189002)(377454003)(51704005)(164054003)(24454002)(51914003)(479174004)(107886001)(107046002)(230783001)(76176999)(54356999)(50986999)(64706001)(99286002)(21056001)(86362001)(66066001)(4396001)(20776003)(87936001)(561944003)(2656002)(551544002)(101416001)(2501002)(19580405001)(19580395003)(83506001)(106116001)(106356001)(105586002)(97736003)(68736005)(40100003)(46102003)(102836002)(122556002)(77156002)(62966003)(2900100001)(2950100001)(120916001)(36756003)(99396003); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB458; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) Content-Type: text/plain; charset="us-ascii" Content-ID: <5A1DA44725E52E4DB400CC65B01A287F@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2014 00:51:22.0001 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB458 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/_zKe1hZsylNAFXC4KHIIahpW-Oc Subject: Re: [Netconf] draft-ietf-netconf-zerotouch-01 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Dec 2014 00:51:49 -0000 On 12/10/14, 3:40 AM, "Hannes Tschofenig" wrote: >Hi Kent, > >thanks for the quick response. > >Let me try to describe a minimalistic approach that does not cover the >case of learning something via DHCP and that does not delegate signing >authority to someone else. > >A device is configured with a certificate (such as [Std-802.1AR-2009]), Yes, all proposals have this in common >the trust anchor of the manufacturer What is this trust anchor used for? > and the URL of a Configuration >Server. These are provided by the manufacturer of the device. You don't >even need to sign it since it is already on the device anyway. > >This information is then enough to let this device connect to the >configuration server, use TLS to authenticate that server, and to get >whatever information it needs from there. This part sounds exactly like the current proposal, where the device is able to securely connect to a list of URLs, configured at the time the device was manufactured. One difference that I don't see in your proposal is a need to ensure that the device only downloads information unique to it. The current draft strives to ensure that only the true owner(s) of a device can configure this information. This is considered critical for the security of the solution. The question is if manufacturers can create a lookup service, something to test if a unique identifier (e.g., serial number) belongs to a given owner (e.g., username + password or key). Very difficult for many sales channels, but not difficult if customers wanting the service must go thru a vendor-approaved sales point. I still like the idea, from last summer, of letting physical presence eliminate the need for a device to assert the security of the information. Where physical presence could be because the installer plugged a USB flash drive into the device, near-field communication, or a link-local address. I know it introduces an attack vector, but it seems to me that if a person is already able to get that level of physical presence, then there are bigger problems to worry about. Thanks, Kent From nobody Fri Dec 19 07:55:23 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 284021A89BB for ; Fri, 19 Dec 2014 07:55:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0uv2AJ4x2M4Q for ; Fri, 19 Dec 2014 07:55:14 -0800 (PST) Received: from mail-lb0-f182.google.com (mail-lb0-f182.google.com [209.85.217.182]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB9DB1A8956 for ; Fri, 19 Dec 2014 07:55:13 -0800 (PST) Received: by mail-lb0-f182.google.com with SMTP id f15so1138327lbj.27 for ; Fri, 19 Dec 2014 07:55:12 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=Sn8R/4tLc/CshGZMTsMKm9rVj0pebTN4LDMNZHYkhGY=; b=YGq+VwtAF7ho2l5Lo+Upt13uBfJti8P0N16Uy/gO9w98JXpI2uc+kwapJQ3wg1eLA2 h7OJtXjM9vGU3h8S6MLoH9ysFPATI8VYabxJOMTb9LHSpyy5+YT1+IXL+EiWMg4SWKnj tEl/vGSmqW0WjeK/sFypig/uZeGkJhKc+Ns0/XVxvMynG47ilqhYoy8f64N5NWFhLlk/ 66rF51XWRVJzeu0IfORYoQCyBv8mRmgVJ3KbFXnDAOlN2JT0H2VmZJo6/PJahAQtJpox wHP4WCrhEmbtBAsT5Rz5n5hxD8D98WJYaYq2N8PG91pRmMvhbsQbeS1kLwsLanYVH0Xd ixQw== X-Gm-Message-State: ALoCoQkfYx+f8SzAl14glwSdKNNaC99ZxznDZHFnD9jLUHpMbAiGJliI8rz1kTqe1t96bWPzg10C MIME-Version: 1.0 X-Received: by 10.112.170.36 with SMTP id aj4mr8469618lbc.3.1419004512470; Fri, 19 Dec 2014 07:55:12 -0800 (PST) Received: by 10.112.157.233 with HTTP; Fri, 19 Dec 2014 07:55:12 -0800 (PST) Date: Fri, 19 Dec 2014 07:55:12 -0800 Message-ID: From: Andy Bierman To: Netconf Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/72NiavMwSNtsa9ku7BZXvIQA7Io Subject: [Netconf] zerotouch-02 configuration server issues X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Dec 2014 15:55:20 -0000 Hi, I have some concerns about interoperability for zerotouch. The configuration server described in sec. 2 is going to be an important system component if it is successfully standardized. It could be useful for constrained devices as well. (e.g. using CoMI). I do not like the XSD for the configlet. It reminds me why we invented YANG in the first place. (Oh yeah, XSD is unreadable. Almost forgot ;-) The configlets are completely opaque, except there are 2 header fields "unique-identifier" and "software-version". There is nothing identifying the configuration blob. I think "configuration-identifier" and "configuration-version" fields are also needed. I would prefer a more direct mapping to YANG for the "configuration" element. It should be possible to have a "vendor-opaque" section, but it would be nice to know if subtrees in the configlet actually show up in the running config after booting. The description in the XSD implies that, but nothing normative. Andy From nobody Fri Dec 19 10:38:09 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7A781ACD56 for ; Fri, 19 Dec 2014 10:38:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.887 X-Spam-Level: X-Spam-Status: No, score=-0.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MPART_ALT_DIFF_COUNT=1.112, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zQKforIVswxx for ; Fri, 19 Dec 2014 10:38:05 -0800 (PST) Received: from mail-qg0-x22a.google.com (mail-qg0-x22a.google.com [IPv6:2607:f8b0:400d:c04::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2EC7B1A8FD4 for ; Fri, 19 Dec 2014 10:38:05 -0800 (PST) Received: by mail-qg0-f42.google.com with SMTP id q108so1054743qgd.29 for ; Fri, 19 Dec 2014 10:38:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:subject:date:references:to:message-id :mime-version; bh=Ls+ihFIm1kbYUmTweyJc4YFGXdNOzn8ZBBtJLLIva1A=; b=hsPXNOGfegdbk7ZTZiA/c48T6dK6JVCZ5DmwfgAvjcejbuEitPfG2XXAzMYkmPs2ne tIfLv27wWIs6dpZdy+4jjdXUqTwzsEFesILLJM2u+zML7sSHGGKVUr/6tEt9yoljqFio lU7biF0Ahhm6r+s83YCVPFnYn7V2+mszfNkVx3BJtGZn4vgrRLO4Wa+o0C+NAz7bxTZm 33BnNsbg8XJx76NYMb470EImPf/xjF9tJ3+oMTbUeB5MbNGaVrga/oEHA4i4FBQ1wsV6 Olz49yCXkMVdbWJfTeKIVwCKA3ZPmi302ZmtNjln5OcDSJarY6yIi7NQhSwQaVkVtq3X TPUQ== X-Received: by 10.224.45.69 with SMTP id d5mr16721234qaf.56.1419014284244; Fri, 19 Dec 2014 10:38:04 -0800 (PST) Received: from [192.168.1.133] (108-247-127-76.lightspeed.sntcca.sbcglobal.net. [108.247.127.76]) by mx.google.com with ESMTPSA id b39sm8391701qge.10.2014.12.19.10.38.03 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 19 Dec 2014 10:38:03 -0800 (PST) From: Mahesh Jethanandani Content-Type: multipart/alternative; boundary="Apple-Mail=_4F1FCAF9-E36E-4978-9BBB-600062280B65" Date: Fri, 19 Dec 2014 10:38:00 -0800 References: To: Netconf Message-Id: <5E39C96B-0DC4-42A6-83F2-5C73638FB070@gmail.com> Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) X-Mailer: Apple Mail (2.1993) Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/qvepfeonW_vVwNQTPTYz1YJZmuM Subject: [Netconf] Minutes from NETCONF Virtual Meeting Monday, December 15, 2014 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Dec 2014 18:38:08 -0000 --Apple-Mail=_4F1FCAF9-E36E-4978-9BBB-600062280B65 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Dear NETCONF WG, Attached are the minutes from the NETCONF virtual meeting held on = Monday, December 15, 2014. As is the case with all physical and virtual WG meetings the issue = discussed in the meetings needs to be verified on the maillist.=20 All:=20 Please provide your comments and feedback to the maillist concerning the = minutes and conclusions from the virtual meeting. If there is no objection to the minutes or conclusions, the draft = authors are going to act as discussed. Detailed information on the issue discussion is available on netconf-wg = github: https://github.com/netconf-wg/restconf/issues and https://github.com/netconf-wg/server-model/issues=20 https://github.com/netconf-wg/call-home/issues=20 If there are no change requests from the attendees, the minutes below = will be sent to proceedings@ietf.org on December 26, 2014. (please send = your request to the co-chairs). PS: The next virtual meeting will be on January 5, 2015 at 1700 UTC. Regards, Mehmet & Mahesh --Apple-Mail=_4F1FCAF9-E36E-4978-9BBB-600062280B65 Content-Type: multipart/mixed; boundary="Apple-Mail=_1E77168D-B88B-43B6-AF4D-745C6677DF63" --Apple-Mail=_1E77168D-B88B-43B6-AF4D-745C6677DF63 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Dear NETCONF WG,

Attached are the minutes from the NETCONF virtual meeting = held on Monday, December 15, 2014.
As is the case with all = physical and virtual WG meetings the issue discussed in the meetings = needs to be verified on the maillist.

All: =
Please provide your comments and feedback to the maillist = concerning the minutes and conclusions from the virtual meeting.
If there is no objection to the minutes or conclusions, the = draft authors are going to act as discussed.

Detailed information on the issue discussion is available on = netconf-wg github:
https://github.com/netconf-wg/restconf/issues and
https://github.com/netconf-wg/server-model/issues
https://github.com/netconf-wg/call-home/issues

If there are no change requests from the = attendees, the minutes below will be sent to proceedings@ietf.org = on December 26, 2014. (please send your request to the co-chairs).

PS: The next virtual meeting will be on = January 5, 2015 at 1700 UTC.

Regards,

Mehmet & = Mahesh

= --Apple-Mail=_1E77168D-B88B-43B6-AF4D-745C6677DF63 Content-Disposition: attachment; filename="Netconf virtual meeting December 15 2014.txt" Content-Type: text/plain; name="Netconf virtual meeting December 15 2014.txt" Content-Transfer-Encoding: quoted-printable Here are the minutes of the NETCONF Virtual Meeting held on December 15, = 2014 Agenda of the virtual interim meeting on December 15,2014 1700-1900 UTC=0D= = --------------------------------------------------------------------------= -----------=0D =0D Agenda is also available at: =0D = http://www.ietf.org/proceedings/interim/2014/12/15/netconf/agenda/agenda-i= nterim-2014-netconf-5=0D =0D - 5 min chair intro, scribe, agenda bashing=0D The note takingwill be done on: http://beta.etherpad.org/p/netconf-z=0D= =0D Issue discussion and status check per WG item:=0D =0D - Call Home (Kent) (5min)=0D Currently no openissues.=0D See https://github.com/netconf-wg/call-home/issues=0D =0D - Server Model (Kent) (20min)=0D Currently 5 openissues.=0D See https://github.com/netconf-wg/server-model/issues=0D =0D - rfc5539bis (Juergen) (5min)=0D The two issues decided in IETF 91 are in preparation.=0D =0D - Restconf (Andy) (30min)=0D Currently 4 openissues.=0D See https://github.com/netconf-wg/restconf/issues=0D =0D - Zerotouch (Kent) (20min)=0D Currently 1 openissues.=0D https://github.com/netconf-wg/yang-patch/issues=0D =0D - I2RS Ephemeral state (Susan, Jeff) (30min)=0D Please provideslides before the meeting.=0D =0D - 5 min AOB other topics=0D =0D Attendees:=0D - Mehmet Ersue=0D - Mahesh Jethanandani=0D - Kent Watsen=0D - Lada Lhotka=0D - Juergen Schoenwaelder=0D - Hannes Tschofenig=0D - Alex Kolchinsky=0D - Alan Luchuk=0D - Reinaldo Penno=0D - Ignas Bagdonas=0D - Susan Hares=0D - Alberto Gonzales (presented on I2RS draft)=0D - Andy Bierman=0D Call Home Draft: Three open issues #8 Add RFC-Editor instructions for removing XXXX and Port-X placeholders Mehmet added instructions on how to update the IANA section. No WG = consensus needed. Issue can be closed after updating and posting of the draft. #7 Remove the "FIXME" in section 1.3 (Applicability Statement) Last Note from Kent indicates there is a dependency on RESTCONF draft = update. No WG consensus needed. Kent to update the issue and the draft?? #6 Too busy with all the NETCONF/RESTCONF and SSH/TLS switches? Latest update indicates (and reflects in the notes below) that few = people have read the draft. The WG felt it would be better to keep it as one and = Andy suggested that it would be better to split paragraphs if necessary rather than = split the draft. Kent to push on the issue of whether this should be one or two (with RESTCONF Call Home being the second draft) on the mailing list. Server Model Draft: Four open issues: #26 fix default listen port for RESTCONF server Kent asked the question of whether 443 is the default port for = RESTCONF. Juergen was not on the meeting (at the time the draft was being = discussed) to comment on e-mail he had sent to the mailing list?? #24 add NACM statement Discussed during virtual interim meeting on Dec 15. Hannes = Tschofenig agreed that=20 client-trust-certs are essentially the same as a password and hence = should be treated=20 the same. Suggestion is to post concrete proposal to list for = review. #21 Add a feature around the global-params section Discussed during virtual interim meeting on Dec 15. Suggestion is to = post a link to=20 change in text to list for review with a 1-week timeout limit. #18 how to configure trust-anchors for SSH X.509-based client certs? Discussed during virtual interim meeting on Dec 15. Suggestion is to = post a link to=20 change in text to list for review with a 1-week timeout limit. RFC5539bis: Juergen was not on the call (at the time) to discuss the draft. RESTCONF draft: 9 open issues Too many issues and comments to paste here. Please refer to GitHub for = details here. https://github.com/netconf-wg/restconf/issues?q=3Dis%3Aopen+is%3Aissue Zero Touch draft: One open issue #5 Validate if Vendors can support owner-validation service Discussed during virtual interim meeting on Dec 15. Request is for = members to ask their=20 constituent companies if they're able to support an = owner-verification service. Email=20 with request to be sent to list. i2rs discussion: Alberto presented pub/sub draft. Jeff Hass was not able to attend the meeting. Susan joined and gave an = update on the e-mail discussion, but the discussion was deferred till = Jeff can join in the next meeting. And here are the meeting minutes:=0D [mj] Started discussion on Call Home draft=0D [mj] 3 open issues and 4 closed issues=0D [mj] First closed issues. Started with Add TLS transport. Very old = issue.=0D [mj] WG consensus granted.=0D [mj] Reverse SSH renamed to Call Home.=0D [mj] No objection from the chairs. But the objection has to be reflected = on the mailing list. This is a general guidance.=0D [mj] Andy commented on the process being tedious. Mehmet suggested that = mailing list consensus can be skipped if draft is updated, posted on the = mailing list and consensus achieved.=0D [mj] Kent commented on editorial comments. Mehmet suggested that it = should have the same approach.=0D [mj] Discussing open issues now.=0D [mj] Proposal to have a combined NETCONF and RESTCONF draft for = call-home. No objections. Andy says he has read the latest version.=0D [mj] Now discussing server-model.=0D [mj] Add support for RESTCONF (#10) was discussed in 91 and so was most = of the cases with other issues.=0D [mj] Moved two of the issues out of closed to open issues.=0D [mj] #21 Add a feature around the global-params section. Kent has a = proposed solution. Mehmet suggested that the solution be posted on the = mailing list and give a week deadline.=0D #18 how to configure trust-anchors. Not captured by AI in 91. Issue with = SSH and X.509 based client certs. NETCONF has to validate the SSH X.509 = client certificates. TLS has client-auth and the tree under it. It has = been replciated to SSH section.=0D Alan seconds the motion.=0D #24 Add NACM statement. Was not discussed in 91. New issue. When = ietf-tls-* was taken out had to put if statements around NACM statements = to put protections around it. Hannes agreed.If the user is authenticated = then it is authorized. No solution as yet.=0D #28 What is the RESTCONF server port? It is not set to 443.=0D TLS. Juergen is not in the meeting. Juergen had asked for comments on = the mailing list. Mehmet will call out on the mailing list.=0D Discussing RESTCONF draft now. =0D 7 open and 9 closed issues. #1 select parameter. Andy will send = something to the mailing list and not in -04 draft. Issue will be = reopened.=0D #2 NETCONF-state support. Remove references to session. Support for S0. = Mail to the maillist has been sent.=0D #3 collection resources. Authors suggest moving it to a new draft. No = consensus on the solution and the draft is incomplete. Issues with = spinning out into a new draft. Mehmet feels it should be in one draft. = Wants more discussion before deciding whether to split out. AI for = Mehmet to send out on the mailing list. Alan thinks it should be split. = Andy points out that the collection is completely optional and is = holding up the draft. Alex has updated the GitHub with his changes. = Asked to post on the mailing list.=0D #4 default handling. Confirming what was discussed in 91. =0D #9 Still open. Kent is working on text.=0D #13 ietf-yang-library. No change. Kent suggests taking it to the mailing = list.=0D #14 define module-name prefixing rules. Used by Kent for tracking??=0D #15 use of groupings in ietf-restconf. Lada raised issue with the = proposed solution S2-B. No agreement on the solution. Namespace used is = different per proposal. Should be taken to the mailing list. Chair will = decide as a last resort. Kent tried using grouping in zero-touch and = received similar comments.=0D #16 content parameters. Should be made mandatory. Will be posted to the = list.=0D yang-patch draft being discussed now.=0D Two open issues. On the agenda because of RESTCONF. Value node for XML = can be used as leaf??. Andy to take it to the mailing list. =0D Structure of dit value anyxml. Will take it to the mailing list.=0D #2 Parsing QNames in value parameter anyxml. No solution in YANG 1.0. = Address in YANG 1.1? Lada agrees.=0D [me] This draft will be published before YANG 1.1. S we need a solution = for this draft.=0D Kent suggests treating it as a blob. Andy thinks you lose information = that way. Andy to take it to the mailing list.=0D Discussing Zero Touch draft now.=0D Closed issues before 91. Only one open issue. Validate if Vendors can = support owner-validation service. Vendors need to come up with = owner-validation service. Need to go to a configlit service. The service = needs to validate the vendor is the owner. Is it implementable with = partners? Kent to ask how Juniper would implement it. Asks other vendors = to do the same. Cisco, Ericsson and Ciena are looking into using = zero-touch. Mehmet has asked anima WG for placing requirements to = NETCONF. Hannes agrees that it should be resolved between the WGs. =0D Mehmet suggest LC on call-home and server-model. Kent says server-model = has normative references to other drafts. Mehmet says cannot be = published but we can proceed with LC. Restconf and yang-patch to follow. = Kent to publish next version on call-home and server-model this week. = Chairs to wait till January to ask for LC.=0D Alberto Gonzales presents on pub/sub model requirements.=0D Suggests a push model vs. poll based. i2rs needs a more robust model. = Support for different transports. Starting with Netconf based on i2rs = requirements. Kent suggests moving it to Netconf from Netmod. Mehmet = suggests that the requirement be agreed in i2rs before coming to = Netconf. Andy suggests that operation data changes frequently so it = should be used carefully in the pub/sub model. How will it be throttled? = AI for all. Please provide comments.=0D [ME] I2RS Two protocols possibly needed - a simple and complex. Simple = one focused on high-rate read operations, complex for write operations. =0D= Hannes discussing zero-touch while we wait for Susan to join the meeting = to discuss i2rs ephemeral model. Two components. Discovering being one = of them. Uses the trust cerficate to validate the vendor. Two different = identities. Configuration server and configuration signer. It is the = latter that Kent is concerned about.=0D Susan has joined the call. But Jeff is still missing. Susan does not = have the slides for discussion. Susan is providing update. Says i2rs is = still discussing between simple and complex solution. Suggest folks join = 1/2 hr. into the meeting. Susan reading the questions raised by Jeff on = the mailing list.=0D i2rs is placing a requirement on NETCONF with the question that Jeff has = raised on the mailing with recursive YANG modelling. RFC 6095 does not = have support for what i2rs is asking for in YANG 1.0 and is not on the = agenda for 1.1 but can be put there if it is brought up. Susan/Jeff to = articulate the requirement to Netconf WG.=0D Mehmet suggest continue discussion on January 5 when the next Netconf = virtual meeting happens.=20= --Apple-Mail=_1E77168D-B88B-43B6-AF4D-745C6677DF63 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii





= --Apple-Mail=_1E77168D-B88B-43B6-AF4D-745C6677DF63-- --Apple-Mail=_4F1FCAF9-E36E-4978-9BBB-600062280B65-- From nobody Fri Dec 19 12:36:47 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0C3A1ACDB4 for ; Fri, 19 Dec 2014 12:36:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JYRMXG8aViE6 for ; Fri, 19 Dec 2014 12:36:44 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0124.outbound.protection.outlook.com [65.55.169.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 776471ACDB3 for ; Fri, 19 Dec 2014 12:36:43 -0800 (PST) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB457.namprd05.prod.outlook.com (10.141.72.141) with Microsoft SMTP Server (TLS) id 15.1.49.12; Fri, 19 Dec 2014 20:36:40 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.138]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.138]) with mapi id 15.01.0049.002; Fri, 19 Dec 2014 20:36:40 +0000 From: Kent Watsen To: Andy Bierman , Netconf Thread-Topic: [Netconf] zerotouch-02 configuration server issues Thread-Index: AQHQG6Q3gpbv6DaYike6abV9cnW8wZyXC26A Date: Fri, 19 Dec 2014 20:36:40 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [66.129.241.10] authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-forefront-prvs: 0430FA5CB7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(189002)(164054003)(51704005)(46102003)(99396003)(105586002)(107886001)(107046002)(120916001)(83506001)(20776003)(64706001)(66066001)(19580395003)(15975445007)(2900100001)(68736005)(92566001)(76176999)(54356999)(102836002)(2950100001)(21056001)(36756003)(2656002)(31966008)(87936001)(106356001)(97736003)(122556002)(101416001)(62966003)(106116001)(99286002)(86362001)(77156002)(40100003)(50986999)(4396001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB457; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) Content-Type: text/plain; charset="us-ascii" Content-ID: <6FF6F16A76B0264190EEAD53B6DC960A@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2014 20:36:40.5480 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB457 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/j5wTmON0_PpdWR-EzRnv5ohg3Qo Subject: Re: [Netconf] zerotouch-02 configuration server issues X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Dec 2014 20:36:45 -0000 Hi Andy, >The configuration server described in sec. 2 is going to be >an important system component if it is successfully standardized. True. >I do not like the XSD for the configlet. >It reminds me why we invented YANG in the first place. >(Oh yeah, XSD is unreadable. Almost forgot ;-) We had YANG in the -00 version of this draft, it changed to XSD in the -01 version. Btw, -02 hasn't been posted yet, though you reference it in the subject line. In addition to side-stepping the whole debate regarding the use of a YANG "container", the draft simultaneously moved to definitively using XML, due to the use of the XMLSIG and XMLENC standards. Do you think this is too onerous? Should we track this as an issue? >The configlets are completely opaque, except there are 2 header fields >"unique-identifier" and "software-version". There is nothing identifying >the configuration blob. I think "configuration-identifier" and >"configuration-version" fields are also needed. > >I would prefer a more direct mapping to YANG for the "configuration" >element. >It should be possible to have a "vendor-opaque" section, >but it would be nice to know if subtrees in the configlet >actually show up in the running config after booting. >The description in the XSD implies that, but nothing normative. We had something like this back in Feb when the draft was still an I.D. [1]. See how the YANG imports "ietf-netconf-server" and copies selected parts of the "ietf-system" module? But you're saying that it's OK for there to be vendor-opqaue values - so do you want the draft to say the content of the Configlet MUST/SHOULD have a configuration that maps to these ietf-netconf-server and ietf-system models? [1] https://tools.ietf.org/html/draft-kwatsen-netconf-zerotouch-01 Thanks, Kent From nobody Fri Dec 19 13:06:31 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AECAF1A1BC5 for ; Fri, 19 Dec 2014 13:06:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SB5Wi480Y8jA for ; Fri, 19 Dec 2014 13:06:26 -0800 (PST) Received: from mail-la0-f53.google.com (mail-la0-f53.google.com [209.85.215.53]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C40BE1A1BBE for ; Fri, 19 Dec 2014 13:06:25 -0800 (PST) Received: by mail-la0-f53.google.com with SMTP id gm9so1551106lab.12 for ; Fri, 19 Dec 2014 13:06:23 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=MFH/pRM4kwkVEaodmslb/EFeee2U70SAzK+c6Z4rZsE=; b=hHVDBbFH+9G63aaAyVcARvbENKFZgxklMG9cco4LXzHgO3dh+XMleBCi4wjFsLOP+7 3fXzYAJETn4rWgS48bqheN02e8j3xY7HqoRNxzCrfie21WjC2ooGuso7/FXuPQjevWG4 NFQoQB4BXKARMCVUwlHBzbcUMs7zrL3r+ObosDBX7NZowDSTkEg1GVIidddrb5sRIUK4 yyUXx321lIwhaCyn9jdR3wXYjs+u1liAgRXthapzU8FP29YC99HV2PQLxAqg8ahVIhcs iS3w6sCMadwErw5daiWKQ0jJZoWOH4//6GVJ1+68xtsWwzF6JKbkoPOSXHgezmWX2KbJ I4/w== X-Gm-Message-State: ALoCoQm6pDKcl4CwH0eQhThzXhHUFUsG0i7bUv0/gnplIcx01Xn85TVtXA10JVTgvGQ6j7iuzMs+ MIME-Version: 1.0 X-Received: by 10.152.27.130 with SMTP id t2mr9647171lag.28.1419023183802; Fri, 19 Dec 2014 13:06:23 -0800 (PST) Received: by 10.112.157.233 with HTTP; Fri, 19 Dec 2014 13:06:23 -0800 (PST) In-Reply-To: References: Date: Fri, 19 Dec 2014 13:06:23 -0800 Message-ID: From: Andy Bierman To: Kent Watsen Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/-ycxRJ34ClIDw_W1lGq55vzRUCY Cc: Netconf Subject: Re: [Netconf] zerotouch-02 configuration server issues X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Dec 2014 21:06:28 -0000 On Fri, Dec 19, 2014 at 12:36 PM, Kent Watsen wrote: > Hi Andy, > > > >>The configuration server described in sec. 2 is going to be >>an important system component if it is successfully standardized. > > True. > > > >>I do not like the XSD for the configlet. >>It reminds me why we invented YANG in the first place. >>(Oh yeah, XSD is unreadable. Almost forgot ;-) > > We had YANG in the -00 version of this draft, it changed to XSD in the > -01 version. Btw, -02 hasn't been posted yet, though you reference it > in the subject line. > typo on my part. > In addition to side-stepping the whole debate regarding the use of a YANG > "container", the draft simultaneously moved to definitively using XML, due > to the use of the XMLSIG and XMLENC standards. Do you think this is too > onerous? Should we track this as an issue? > > I guess XSD is OK. It avoids the YANG data structure controversy an excludes JSON (which nay be a new controversy ;-) > >>The configlets are completely opaque, except there are 2 header fields >>"unique-identifier" and "software-version". There is nothing identifying >>the configuration blob. I think "configuration-identifier" and >>"configuration-version" fields are also needed. >> Do you agree these extra fields are useful? IMO they could be optional. Some use cases: - the identified device may have different config setups, based on factors such as licenses, device capabilities, etc. so "config-identifier" could identify the config variant - cache IDs such as "config-id" (defined in NETCONF-EX) could be mapped to the "config-version" field, or a revision-date could be used instead. >>I would prefer a more direct mapping to YANG for the "configuration" >>element. >>It should be possible to have a "vendor-opaque" section, >>but it would be nice to know if subtrees in the configlet >>actually show up in the running config after booting. >>The description in the XSD implies that, but nothing normative. > > We had something like this back in Feb when the draft was still an I.D. > [1]. See how the YANG imports "ietf-netconf-server" and copies selected > parts of the "ietf-system" module? But you're saying that it's OK for > there to be vendor-opqaue values - so do you want the draft to say the > content of the Configlet MUST/SHOULD have a configuration that maps to > these ietf-netconf-server and ietf-system models? > I would prefer if the configuration element was equivalent to the element in a operation. There is no constraint on what YANG modules are present. Whatever config is present must match YANG module schema supported by the server. I do not know if there is a need for additional XML in the configlet that does not map to any advertised YANG module. Phil mentioned a need for this sort of bootstrap data at IETF #91. This should go in a different element within the configlet. > [1] https://tools.ietf.org/html/draft-kwatsen-netconf-zerotouch-01 > > > > Thanks, > Kent > > Andy From nobody Sun Dec 21 19:36:27 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 265631A0089 for ; Sun, 21 Dec 2014 19:36:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ADNMjlpoEIHu for ; Sun, 21 Dec 2014 19:36:25 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA9A41A0084 for ; Sun, 21 Dec 2014 19:36:24 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BQI14856; Mon, 22 Dec 2014 03:36:22 +0000 (GMT) Received: from SZXEML405-HUB.china.huawei.com (10.82.67.60) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.158.1; Mon, 22 Dec 2014 03:36:20 +0000 Received: from SZXEML512-MBS.china.huawei.com ([169.254.8.128]) by szxeml405-hub.china.huawei.com ([::1]) with mapi id 14.03.0158.001; Mon, 22 Dec 2014 11:36:12 +0800 From: Rohit R Ranade To: "netconf@ietf.org" Thread-Topic: Notification updation RFC 5277 Thread-Index: AdAdmGPAceznqgnXSje9O6PD47W4Gw== Date: Mon, 22 Dec 2014 03:36:11 +0000 Message-ID: <991B70D8B4112A4699D5C00DDBBF878A671DA5FC@szxeml512-mbs.china.huawei.com> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.18.144.92] Content-Type: multipart/alternative; boundary="_000_991B70D8B4112A4699D5C00DDBBF878A671DA5FCszxeml512mbschi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/J4_By0e8wc-qBb6zWDwljaoOGBI Subject: [Netconf] Notification updation RFC 5277 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Dec 2014 03:36:26 -0000 --_000_991B70D8B4112A4699D5C00DDBBF878A671DA5FCszxeml512mbschi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, RFC 5277 clearly states that subscriptions cannot be updated. Is there some= reason for it ? I have a scenario, where subscriptions can get added and d= eleted. Is there some mechanism to update subscription ? With Regards, Rohit --_000_991B70D8B4112A4699D5C00DDBBF878A671DA5FCszxeml512mbschi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello,

 

RFC 5277 clearly states that subscriptions cannot be= updated. Is there some reason for it ? I have a scenario, where subscripti= ons can get added and deleted.

Is there some mechanism to update subscription ?

 

With Regards,

Rohit

--_000_991B70D8B4112A4699D5C00DDBBF878A671DA5FCszxeml512mbschi_-- From nobody Mon Dec 22 09:09:24 2014 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37C181A1AA6 for ; Mon, 22 Dec 2014 09:09:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.379 X-Spam-Level: X-Spam-Status: No, score=-1.379 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, J_CHICKENPOX_29=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pTGJGWxGbzpT for ; Mon, 22 Dec 2014 09:09:15 -0800 (PST) Received: from mail-lb0-f182.google.com (mail-lb0-f182.google.com [209.85.217.182]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 930641A1AA9 for ; Mon, 22 Dec 2014 09:09:12 -0800 (PST) Received: by mail-lb0-f182.google.com with SMTP id f15so4667641lbj.13 for ; Mon, 22 Dec 2014 09:09:11 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=+zcJW0Ch/L/GkWNjEsgBW5ghOITBMYblrYDmYXgWItw=; b=jo6f/A/Nsowgznid6zMZ++aqydTh07QwWGLPhbIDq3RM8dQcrsW+hkPReJ6HAsz6MZ niurCQhlaEmuZPTojtAtfCie5vhLd6+XihTDlLS+TL3NTQHP9WB+WhJzbnJUdmfwo0Nj 38fPKnO5s518TfUty8DbLr3aBswlTdSIAiG3OjcoS8NAwO6X72uO374zzBJYrktxVZFW +dN5ZG1MDTs78gGObv/TWH6i7KIADMMJwIyiQIs2VusLJ03SlHm8GSHUMXTpgiX1t0du fSmJWXZUUS3A647G74seXaihLSwUVJQMgvKARkNjuZEyZDaVqVm+dboDnSIZgubGuL/o /1FQ== X-Gm-Message-State: ALoCoQkA2US4LzT6lmlttSLHp54488+xZjLbHTLKuw3jsCV0tUUjWNLXd8y+hD03tDz9t58rnE/Y MIME-Version: 1.0 X-Received: by 10.112.12.65 with SMTP id w1mr22988298lbb.68.1419268150936; Mon, 22 Dec 2014 09:09:10 -0800 (PST) Received: by 10.112.77.231 with HTTP; Mon, 22 Dec 2014 09:09:10 -0800 (PST) In-Reply-To: References: <20141211.124922.734445723149087483.mbj@tail-f.com> <20141211.134843.810246336811127833.mbj@tail-f.com> Date: Mon, 22 Dec 2014 09:09:10 -0800 Message-ID: From: Andy Bierman To: Ladislav Lhotka Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/5m-8xYjWNmgzP_eWKXcTMf4N3nE Cc: Netconf Subject: Re: [Netconf] RESTCONF #15: usage of groupings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Dec 2014 17:09:18 -0000 Hi, I updated the issue tracker with the concrete proposal for ietf-restconf groupings. https://github.com/netconf-wg/restconf/issues/15 I forgot to mention that ietf-yang-patch.yang already uses the "errors" gro= uping within the rpc output parameters, so removing it will break YANG Patch. Andy On Mon, Dec 15, 2014 at 10:49 AM, Ladislav Lhotka wrote: > Andy Bierman writes: > >> On Thu, Dec 11, 2014 at 4:48 AM, Martin Bjorklund wrote= : >>> Ladislav Lhotka wrote: >>>> >>>> > On 11 Dec 2014, at 12:49, Martin Bjorklund wrote: >>>> > >>>> > Ladislav Lhotka wrote: >>>> >> Andy Bierman writes: >>>> >> >>>> >>> Hi, >>>> >>> >>>> >>> A new issue has been added to the tracker: >>>> >>> >>>> >>> https://github.com/netconf-wg/restconf/issues/15 >>>> >>> >>>> >>> There are 3 solutions mentioned. >>>> >>> The default solution is S1, which will be implemented >>>> >>> unless there is WG consensus demonstrated to >>>> >>> do something else. >>>> >> >>>> >> The biggest problem with S1 is that it may mislead readers into >>>> >> thinking: "Hey, now I understand how namespaces work in groupings!" >>>> >> >>>> >> I also don't like the idea of defining an ad hoc extension. >>>> > >>>> > I disagree. I think an extension is the best solution in this case. >>>> > However, we can use a different name than 'structure'. 'structure' >>>> > was originally my proposal for a built-in statement (YANG 1.1) for >>>> > this purpose. We can call it 'restconf-structure' or 'restconf-data= ' >>>> > or something. >>>> >>>> So another document that wants to do the same should define its own ad >>>> hoc extension? Or import the ietf-restconf module? >>> >>> Suppose we make a new document that defines a new RESTCONF resource >>> type, and we need a structure for it, then that document would import >>> and use 'restconf-structure'. >>> >>>> >> If we want >>>> >> to turn YANG into a general schema language, it should be done >>>> >> properly. >>>> >> >>>> >> I think the simplest solution would be to remove the groupings and >>>> >> have >>>> >> "errors", "restconf", "collection" and "notification" as top-level >>>> >> containers. The namespace assignment then follows YANG rules. >>>> > >>>> > This is also _very_ misleading, b/c then it looks like a normal conf= ig >>>> > or state module, which one would expect a server to implement in the >>>> > normal way. >>>> >>>> What makes the solutions with groupings or extensions different? >>> >>> I agree that groupings are misleading. But using an extension would >>> be different, b/c the extension defines the semantics - this is not >>> config or oper state, but something else. >>> >> >> >> >> I do not understand why these are special or misleading groupings. >> I cannot find any text in any RFC that says a YANG module with >> just groupings in it is invalid, improper, or even discouraged. >> >> I am already using 1 of these groupings in a logging model. >> Please explain why these are special groupings that cannot >> be used in a normal data model in another module. >> >> That is why I prefer solution S2-B >> >> rc:structure errors { >> uses errors; >> } >> >> This assigns a module-name and a namespace and does not >> preclude re-usage of the data within a larger data structure. > > I don't want to block the resolution of this issue, so I propose that you > write a concrete definition of the extension, and I will then comment on > that. > > Lada > >> >> >>>> In >>>> any case, the module description has to state very clearly that it is >>>> a strawman module that=E2=80=99s not supposed to be used in the normal >>>> NETCONF/RESTCONF way. But if you above that deviate from YANG >>>> semantics, as the groupings do, you cannot even use standard YANG >>>> tools because they would produce wrong results. >>>> >>>> If the module is as I proposed, I can still use pyang for generating >>>> correct DSDL schemas, XML-JSON mapping etc. >>>> >>>> And if a server implementor likes the module and decides to implement >>>> it as if it was a normal module, so what? >>>> >>>> > >>>> >> S3 should IMO be fine, too, the structures aren't that complicated. >>>> > >>>> > I can see only drawbacks compared to S2. Whatever we do in text it >>>> > will be less precise than an extension. >>>> >>>> I prefer less precise to precise but wrong. >>> >>> An extension is in no way wrong. >>> >> >> agreed >> >>>> Keep in mind that you are >>>> a YANG designer so you are not as likely to get confused by language >>>> anomalies as an average reader of the RESTCONF document. >>> >>> >>> /martin >> >> Andy > > -- > Ladislav Lhotka, CZ.NIC Labs > PGP Key ID: E74E8C0C