- openldap-bugs - openldap.org

Re: (ITS#7394) slapcat broken with back-mdb
by michael＠stroeder.com 19 Sep '12

19 Sep '12

quanah(a)OpenLDAP.org wrote: > Full_Name: Quanah Gibson-Mount > Version: RE24 9/18/2012 > OS: Linux 2.6 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (74.196.25.250) > > > zimbra@zre-ldap002:~/libexec$ /opt/zimbra/openldap/sbin/slapcat -F > /opt/zimbra/data/ldap/config -b "" -l /tmp/test.ldif > 5058b57b mdb_db_open: database "" cannot be opened, err 13. Restore from > backup! > 5058b57b backend_startup_one (type=mdb, suffix=""): bi_db_open failed! (13) > slap_startup failed > > > Doesn't matter if slapd is running or not -- It can't export the DB. Could this be a dup of ITS#7391? Ciao, Michael.

1 0

Re: (ITS#7394) slapcat broken with back-mdb
by quanah＠zimbra.com 18 Sep '12

18 Sep '12

--On Tuesday, September 18, 2012 5:58 PM +0000 quanah(a)OpenLDAP.org wrote: Tracked down to the use of WRITEMAP Changing the code to not use WRITEMAP with slapcat fixed the issue: --- openldap-2.4.33.2z/servers/slapd/back-mdb/init.c.orig 2012-09-18 11:41:28.594792966 -0700 +++ openldap-2.4.33.2z/servers/slapd/back-mdb/init.c 2012-09-18 11:42:02.794791070 -0700 @@ -55,7 +55,11 @@ /* DBEnv parameters */ mdb->mi_dbenv_home = ch_strdup( SLAPD_DEFAULT_DB_DIR ); - mdb->mi_dbenv_flags = 0; + if ( slapMode & SLAP_TOOL_READONLY) { + mdb->mi_dbenv_flags = 0; + } else { + mdb->mi_dbenv_flags = MDB_WRITEMAP; + } mdb->mi_dbenv_mode = SLAPD_DEFAULT_DB_MODE; mdb->mi_search_stack_depth = DEFAULT_SEARCH_STACK_DEPTH; -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7394) slapcat broken with back-mdb
by quanah＠OpenLDAP.org 18 Sep '12

18 Sep '12

Full_Name: Quanah Gibson-Mount Version: RE24 9/18/2012 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (74.196.25.250) zimbra@zre-ldap002:~/libexec$ /opt/zimbra/openldap/sbin/slapcat -F /opt/zimbra/data/ldap/config -b "" -l /tmp/test.ldif 5058b57b mdb_db_open: database "" cannot be opened, err 13. Restore from backup! 5058b57b backend_startup_one (type=mdb, suffix=""): bi_db_open failed! (13) slap_startup failed Doesn't matter if slapd is running or not -- It can't export the DB. ldapsearch works fine

1 0

Re: (ITS#7385) back_mdb ENOSPC error returned from mdb_node_add incorrectly
by marco＠schirrmeister.net 18 Sep '12

18 Sep '12

On Sep 18, 2012, at 1:59 PM, hyc(a)symas.com wrote: > Marco Schirrmeister wrote: >> I pulled latest RE24 on Sep 15th and now I get this. >> >> ... >> indexing id=00010d0e >> indexing id=00010d0f >> 5056de89 => mdb_tool_entry_reindex: txn_commit failed: Unknown error 18446744073709520830 (-30786) > > That was fixed yesterday in commit 8bb10add2465eee34e79abeaa62011e3e234effb. > Please pull RE24 again today and try again, it should all be working fine. Just tested with latest RE24 indexing id=00010d0e indexing id=00010d0f 50587b72 => mdb_tool_entry_reindex: txn_commit failed: MDB_PAGE_FULL: Internal error - page has no more space (-30786) -- Marco

1 0

Re: (ITS#7385) back_mdb ENOSPC error returned from mdb_node_add incorrectly
by hyc＠symas.com 18 Sep '12

18 Sep '12

Marco Schirrmeister wrote: > I pulled latest RE24 on Sep 15th and now I get this. > > ... > indexing id=00010d0e > indexing id=00010d0f > 5056de89 => mdb_tool_entry_reindex: txn_commit failed: Unknown error 18446744073709520830 (-30786) That was fixed yesterday in commit 8bb10add2465eee34e79abeaa62011e3e234effb. Please pull RE24 again today and try again, it should all be working fine. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7385) back_mdb ENOSPC error returned from mdb_node_add incorrectly
by marco＠schirrmeister.net 18 Sep '12

18 Sep '12

--Apple-Mail=_4DD4B69C-B9EE-427A-A616-563271CEB5BB Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 On Sep 14, 2012, at 10:05 PM, Howard Chu wrote: > Marco Schirrmeister wrote: >>=20 >> On Sep 12, 2012, at 7:49 PM, hyc(a)symas.com <mailto:hyc@symas.com> = wrote: >>=20 >>> Frank.Swasey(a)uvm.edu <mailto:Frank.Swasey@uvm.edu> wrote: >>>> Full_Name: Francis Swasey >>>> Version: 2.4.32 >>>> OS: RHEL6.3 64-bit >>>> URL: ftp://ftp.openldap.org/incoming/ >>>> Submission from: (NULL) (132.198.21.181) >>>>=20 >>>>=20 >>>> In exploring converting to back_mdb, I have discovered a problem = which results >>>> in the following symptoms: >>>=20 >>> Thanks for the report, fixed now in git master. >>=20 >> I saw it is also merged into the RE24 branch. >>=20 >> I tried today the latest commit from the RE24 branch and I did not = see the >> error anymore in the slapadd tool. Where I noticed the No space left = on device >> error before. >> But I'm seeing it now when I run the slapindex. >>=20 >> Unfortunately I can't reproduce it with a test dataset that I = created. >> Probably because I have not enough attributes that I could add to = index like >> on the real server. >>=20 >> If I run slapindex a second time, again error. >> If I run slapindex a third time, no error. >>=20 >> The data.mdb grew a little bit during the slapindex runs. >> =46rom about 710MB to 1,2GB. >>=20 >> If I remove a few index options, slapindex runs through without a = problem. >>=20 >> The output on the test server looks like below. >> [root@ds71 ~]# slapadd2.4 -b dc=3Dogilvy,dc=3Dcom -l all_slapcat.ldif=20= >> _#################### 100.00% eta none elapsed 05m26s spd = 596.0 k/s=20 >> Closing DB... >> [root@ds71 ~]#=20 >> [root@ds71 ~]# slapindex2.4=20 >> 5051fea8 =3D> mdb_tool_entry_reindex: txn_commit failed: No space = left on device >> (28) >> [root@ds71 ~]#=20 >> [root@ds71 ~]# slapindex2.4=20 >> 50520b10 =3D> mdb_tool_entry_reindex: txn_commit failed: No space = left on device >> (28) >> [root@ds71 ~]#=20 >> [root@ds71 ~]# slapindex2.4=20 >> [root@ds71 ~]#=20 >>=20 >>=20 >> Since you wrote ENOSPC can only be happen in 2 places, I thought it's = still >> related somehow. >=20 > Maybe so. I've updated all of the error codes in RE24 so it should be = more > obvious what has gone wrong, can you please pull the latest code and = test again? I pulled latest RE24 on Sep 15th and now I get this. ... indexing id=3D00010d0e indexing id=3D00010d0f 5056de89 =3D> mdb_tool_entry_reindex: txn_commit failed: Unknown error = 18446744073709520830 (-30786) >> I'm a little bit clueless right now what else I can provide. >>=20 >> If there is something that I can provide, then let me know please and = I try to >> provide it. >=20 > A data set and config to reproduce the problem would be best. = Otherwise a gdb > backtrace from the failure. Something like this: >=20 > % gdb slapindex2.4 > (gdb) list mdb_node_add > (gdb) break 4952 <-- line number of 1st "return ENOSPC;" statement > (gdb) break 5355 > (gdb) run >=20 > (Use the correct source line numbers for your source tree.) Trigger = the bug. > When gdb breaks: >=20 > (gdb) bt full >=20 > But first run with the new code and see what the new error return is. I'm trying to get a backtrace. But no real luck yet. There is also no longer a ENOSPC in the mdb_node_add. Looks like it's now labeled MDB_PAGE_FULL? It's at least what I see in = this area. After the "run" in gdb, the break point is I guess reached on the first = index. I have to do a continue to get closer to the point where = slapindex fails. If I start using continue 1 after the last working index id, the error = shows up and then slapindex exists with code 01 and I can't get a = backtrace. Breakpoint 1, mdb_node_add (mc=3D<value optimized out>, indx=3D11, = key=3D0x7fffffffc680, data=3D0x7fffffffc670, pgno=3D<value optimized = out>, flags=3D0) at ../../../libraries/libmdb/mdb.c:4983 4983 for (i =3D NUMKEYS(mp); i > indx; i--) (gdb)=20 Will stop next time breakpoint 1 is reached. Continuing. 5057400e =3D> mdb_tool_entry_reindex: txn_commit failed: Unknown error = 18446744073709520830 (-30786) Program exited with code 01. (gdb) bt full No stack. (gdb)=20 I used "step" after the last working breakpoint. Those steps show the = unknown error and stepping goes until I saw a mdb_env_close.=20 Attachment steps_until_mdb_env_close.txt.zip I set a break point to where I saw the first -30786 (line 1046). And = created at that break point a backtrace. I don't know if that would be a correct or good place. If yes, I can = provide that bt. If not, do those steps in gdb give at least more info where we could set = a better breakpoint that I can create a backtrace that is useful for = you? --Apple-Mail=_4DD4B69C-B9EE-427A-A616-563271CEB5BB Content-Disposition: attachment; filename=steps_until_mdb_env_close.txt.zip Content-Type: application/zip; name="steps_until_mdb_env_close.txt.zip" Content-Transfer-Encoding: base64 UEsDBBQACAAIANhhMkEAAAAAAAAAAAAAAAAdABAAc3RlcHNfdW50aWxfbWRiX2Vudl9jbG9zZS50 eHRVWAwAdE5YUJdJWFAAweRh7L1pexu3zjD8Wf4VTJ7WR/KW2Zck9n25idvj9zhOju2cre0z10gz sqeWRsrMyHF69zy//QXIWciR5C1246ZIG8cSQQAEQJAEF3RPo36P5UU8XbF8z+10JsOcbbPxdHNn PA1m02mcsU2WTqI4yJNf4xcrXV4Bgb1OJ8zzOCu6WGenrjSafIRK6wzhJ8NukkaXQdHryVX9TqcE nhZZ/iOC/AxUAY8E5es1VIlyu4VTBrY7HeQSwNPgHMEAX/c8/sS2t9nh+4ODHvsfprHnDL4CmIu5 1tyMJa2GEqKZA7AEG1Bw+Pb13ruTo+54usEQ231y6ztS/eEoPEWd8X9lINBmMmTd/ePgYG/3e2Ck 15NKQX2d472T18f/6SKqjSgswppWw6ytaYbAA7zU9W2j82yWZ8+SdDCaRfGzflLkz/IiS9JTc+vs OTucsHw2OGPDZBSzScaiJIsHxST7tLXSSVJ2Rd2KwjgeD6afWLfHwoJtbT3LP+VRPM2fXXpO4FjP RPHW8XPbWbFBGoPx9EPnG9PYYN9m0WXNJjRyPLn40IEvEywKLzudZ2ssDy9ilsXFLEvZRTiaxWzt WVXHAR3/Esadg64eDos4q9vsmJ1OEedFv/ONDriiUV0ASv/lV16hBnbtGthQgF2nAu7XwNjvSmBL AcY+JoAHNbDv18CeAqxrWgUd9ZovjVIE3W+zPOmhEAaXTalZC2hwucG6KCepLjQijKIPghJUb0oc pSRqSnTotWEajTrfaJdDDQrjRh26bpQcxpdJ0dAxgU4GHqhSfdQPuMcBCqw7Hmy/FDqaTItkDMYZ scms2BG9alsHXYBlbmuX7lD8GTge0EVzVr504cvpaTpZho13n8WFlQ2K/0dJPwuzJM7xN+D1Gfzd GjyHjmJjb7Hnex37X6k3geQqv4k9Su5oYAa87mQ4bRyBXBf7LIf4Ptg/hs7b5UxvsO+D7/Z/eL17 stv0cFtDTXQ68SiP2YIqb15/FxztHe8d/WOvqfT4Op1uNRYagoUe7Z38Y/cAbXnauw6pbvm87qjz bZwjJ/HgkvE/WDMcJacp639i+WSWDZR6dm3DrqjVlFQGzGsLVgGdwJfFYfRJ4AXDkfC5XiUr6I6W Ki3d9bHpgNI0Wk33jJr96LLFiAdiyc8yYNFul1TeyDTy82QqoQNCUTxAdBI4H2VRvow1HiKUyiv/ wbym3GuKK/XoTlPsN8VWWWxYTbGuNeWOol3W9kA4hgnqQBTKvXa515T7G4wzoZT7NX4d+j/nQio3 NGj9KA4/dEyj4a/xcwZ6z6Y8EuWRVN4SNreEs3g0Rb/B8nE4GsEsoT+aDM5zySIM9AJzujA070pd GJp/lS4MXbtKF4auX6kLQzev1IWhW1fqwtDtK3Vh6M7VutC9q3Wh+1frwoD2/ZIKZYwmE7J8snyy fLJ8snyyfLJ8snyyfLJ8snyyfLJ8snyyfLJ8snyyfLJ8snyyfLJ8snyyfLJ8snyyfLJ8snyyfLJ8 snyyfLL8Ocs3nOpkmIlnQONIHG0bnMWDczacZGwUDws2uYgzpZpZKUM+vtbqHqZZGYBet/OPeeT0 LkdA9dpgGn1K1q5X9rLQmPXGWvAUa9sYDU0xxrYtGsBRPusDu7rTYtawSjOSe4l0DNaw5fI5M9MN t9ap2qc/58TrkrKlh2CXwD/sWVjDXcEfnf/KTZyGp3GQT0dJwRvZcBvFDnCbxh+xEUt4gtLWmd5Y 80Ut3hTdsyzHtSzNNV3Nt23d0W0oFU3RbsS2Y9jmCv4oT9lmgx7rZ3F4Xh/SdfjYhx29m7Bt9gv8 1V6whL3cZinwnr9gv6yvS2d2Ab461JvgkV7e+IBfB5CBcHBpgKBFCMFWV9mTJM0D+KxC82PAGdDb Gl8EKBS2XQqPH+DHbySODR/BxwMoGwTnyY/lb8VkihccfnlxZ8S6L4OXtxgkcOXSAvChVaeXF5+N vg2nViXVJxIuFNgvKEBNwYpndjvZAG+1SN0MDHCD/bLBVpH/DZZh20SnKM2/OZk91zvbhisOohs3 OogujJZbrFZ1tJtZp+Ub2gr+6HTw8DZ2ps7aeIrtEnKansoSk26CwNzmf5tPd0CAk5OmCj+ezk+n v+CjHw53w9HkI8NiadiDelZ91l25NtO6LCRfjTENxUaMlpFYvuXV11HYk/KQvFSKJlRfV8IrQ0uu 0OAZ7+W2COVGc04fVSjzWDuI5cfwFVTYu//L6pP4EntMuXXD5VIq4DKFf4sgTi/g3ziY8vJn/Nj+ m/3Dv+39+1ih4eqtZjcfVpku8e6agnWZCfVWFdthx/v/2TvY+/5kTipfExkan7h3xKtkWMS79Bs0 rO5gMpUupgCMW+HcRmwvS1QJoKqF6VtOR5VhF211MMtyqLmG3hY/g+zYmhCk+kXjf4OiktmGxAIO TcoFPRwSkFH5q9vxTFgJK2H9Y2F15m/g1ij5FzLC5k6vuEAswfIvXtwF75/x6ivdwqNbeF9hNI/i 2BTHJssnyyfLJ8snyyfLJ8snyyfL//os/3fetTcW7O4+/tCyY2MYpHy9qNqCfCntWLLffmPdJ0hz kuNWWwWjbmsqwWUMz0v7eVPcVlpfl8IuLlhcHWdJ48uCLd0BiVCEuVzXr3Evhi1jOFIVz8bIeVqw YXI5m0oR7/FUjnfj4p3vd0X9hOHfmin4IMNVu5BlqXiJbZW9Co7ff9e7PVm+/QokNjelb/HNOREX Gxvz0hHx9fxHqPXzCzY28O/22OAwKE9FHQ9NwDR1dUNFVA6ms8VWr26Xxtp1RxZutVvq+OYK/qi2 SnCzEHV6/P7Vq73j42bP0HEceYNY2sDATQt5d/hdsH8IjmD/ddW5pE3BG1FCB922WWE0v4kqJ/86 DPaOjt4eNYhd21GFChWDwWQ8RlcCv4METU2PPedmcoFpgI5zAb0jbSL9b+NiHb5LX0uj0WB3FcWx yuWxKuShNe1fjlHs1VeMh/1JViDb6vZ6XXSXJumeY6zgD0EeENSvpzXDsePXpcKuz5KRdGbJc42G ySzO40JbzKUouxObrudhFNJT944VO9ioreDo9dvDg3/L7hSqSvv48MkRTgqcXmcNfoDGJD/4QgK8 O0WcMShB+apuOoNGldF5hUXcf6+AZlsYjI0z+JCh8JKI70dK6N3KZtruJvn58/ggzISZMBNmwkyY CTNhJsyEmTATZsJMmAkzYSbMhJkwE2bCTJgJM2EmzISZMBNmwkyYCTNhJsyEmTATZsJMmAkzYSbM hJkw/ykxe/UTfk+61QWT6qYHnp3+59H+yd6b3Xc9tRJ/y64koyOZ7YrObCtKsuJTMEry4kft561x Es0T1fk5/E40lY51KxUTqDgtmndJoAo/gS843T8O3v5j7+j7g7f/7EbTHt7dicq3WMTVmG2mq/SM TklwU7qLU1FecgnnHpp5N7J4LxD/LAYEDNH0PpkkXZAuSBekC9IF6YJ0QbogXZAuSBekC9IF6YJ0 QbogXZAuSBekC9IF6YJ0QbogXZAuSBekC9IF6YJ0QbogXZAuSBekC9IF6YJ0QbogXZAuSBekC9IF 6YJ0QbogXZAuSBekC9IF6YJ0QbogXZAuSBekC9IF6YJ0QbogXZAuSBekC9IF6YJ0QbogXZAuSBek C9IF6YJ0QbogXZAuSBekC9IF6YJ0QbogXZAuSBekiyVMGmZHfSl/GmZxWqgwfiX7cdQPAM0oyM+y JD3vrla1hlkcB9PTvNerqrVAgb1ouq1dmpoee57XY2HBtraeif9HST8LsyTO8Teo+Awrbg2e66a5 An87DS+mLRhJovzHTf1ntsOf3d9/fRC8fxO82f2XzLdaEaRagjKoDGJcS2RB3gaxZXT+KzcThBBk cR4XGhdj1UpHu66VUR8b6WEr4QfI+ONZMopZtzueTBeYyvT0LA4jNbeAaS2yFQEJKAARfDHhxidZ DbYWrAaUhqR6dUkAxtIfcG2CsuMxb4ph6JFoyjgcjSYD4Nl0NWMFf3QY/NlmYH+DGGRwyrqBsIWz yeS8wQugJoCigIOgP0tGRZIG8eU0HhSsi6DsyTY7fH9wsME0uX1QzyvrATfYs4GRK/88W2O8WQB3 FuYsnbB4OEQya88apNDFBNLB2Sw9D5I8GI/D6TSOutPeMvyAOItHcZjHrARmwNIk+7SlotYBNSoP Cg2OHjmXJfGAxKGjMhZmAfhO4AA7chiAagLBx1TmwkQ+gyQVXbcrKm2wKSqgMYeqnHXDC7AFdwh/ HF3TYk8D2Mo6BvDhLLyIAzCO8+2WqViup6/gj6YzWph3g7E8+TUGNjlz+LvM4O0reNwYF1tYdwYN gfYF4Nem0LXlz5uICVvdYNL9pZg4Cy/Zm/3D4/3/7HFrbeqZFQfdWZonpyloaTRJT3u8Vo+93Gbt gtO4CMbhZTAMc0Au4fINF3DFI1A4H/MW2sr/SuA+74kcttGFAmJ6HWFM3YtJEvXGsyK+5FDd1RC9 Bn6W5OlbXo1yXg5T7ItYrZhMVSn4tnVFvcEkLZLT2WSWo0lJtSxRC/0Ub2ul5yAsgslwCM61C4S4 IF98Li0bs75AxR1QCPTCMGNrvaoxbF2yr/K7Xu9emviFyDrGFbWeTLP4Arr5LI+7tezbdB3/Cgx1 rc0d0Tm2mcHWGHaP4Pg/SsfyHa9W8lxfbqi/eADKrnOVMcdZMcv6Qf9TEbea7mlNv5JE1ep9nltD NQb8pO4gEqytmWbZDTnP69u1NF5IMHYJU1nHNpvKxVaFAtwHDvRV12C/sXdHe/8I9g/fH+/1pBp2 YwOLfRPY5Pe7xyff7R8Gr94eHr892H+9e7L/9jA4+evR3vFf3x68VhphV41AjNzdoAcTykTr60mg MEERg0EAJppPRkkUFmjjDX/zxQvGG3VUsXXdXMEfzSBh61xsyFHLraIqNJl/3RTmMIAhNWux/kKC EuYKAptkRRwF/SQFTdQfF9axheqA+rAPwKuIHOsB2AY7LGV8zDZhiSLXEga0oIomgzlaKXa0iLCY jJMBGDG4kvQ0DsLBB9Yd9ttVLElT03lJuGanGVmnZU9aZf+v2xjSb4dgB292wTR2j/YOd2Xsroa1 0YKnovowenFvuK0K940HBKhkV5Vu4mAA3u10runetu5ZFdB1vVv3OL4SI0JzhAqIr3dKlQjz4xBg W4XUsppOS5u+KeoOkyyHBV5pibJRguG0tODLLIHXy7ETAViQodmIKY3aXt/qzBk+IlXdkO7bi5jZ 3OmftwFvy4EBc7nObRycoZWCmZbkZdZlMKsG481RWX/xOQzYTYXhZLLIOG+PFEMB/2XlopBPukRf Kz2aDFka1cIB4+Z4yB2QOyB3QO6A3AG5A3IH5A7IHZA7IHdA7oDcAbkDcgfkDsgdkDsgd0DugNwB uQNyB+QOyB2QOyB3QO6A3AG5A3IH5A7IHZA7IHdA7oDcAbkDcgfkDsgdkDsgd0DugNwBuQNyB+QO yB2QOyB3QO6A3AG5A3IH5A7IHZA7IHdA7oDcAbkDcgfkDn5vd2Do4uGVGnjYX19HIP5+i2yJ9PQK uSJyReSKyBWRKyJXRK7oa3ZF5A7IHZA7IHfwCGYmf1ba5IJv4IJdr+y4ANG0hsPjRwmdp5WQi7nd 7Hb5Y7g1pp7Ci1/2UCSxvl0Dyfj1yjmOMC0CPtwKaPsDcNXDj5GMjIYNGjZo2PiaXTfRvoa2YZhN /pT7SDFha7aDL407En/hBWYoWB2H4Bp4Igz1/XJPZHvpztTH0JtRqX6Dn+1sN/Vcs3E+C9MsAEj1 drucZgHGhWWJFmzNf0zpZNyF2WS4bwMU2gsJ1FsIOgrnIC3M91RBQA0mcr3IEJgq6f3hwdtXfwve vD/Z+1fwzy5U6MkgViOlG1QIgmlxlkH7AlkDrMs/VXYGP1zNEnJdBA7iNHxtZQV+gFKzuJhlKVuM OYCBNxukRUlhQ37f/UY1bsOT56/A3+bp+0fGn+mumOgLoGuz4tMU52XvMI/A7utSVyf/frdXom24 MKtMP/MJGjgSmKCqWP62fwi/7h7/LTh8p6Zt0K/EtNHmZv/N3mvA0dSvHAnncHMnCKKwCLeCYPIx jTPFuC2YG25utuFwFpblkscr8Y1GI9UQpTr4bZuzd8d/hen360pUjawqNxH2YbJxNy/hWiv4Q+5U uC7g2YAAn9z1bgK1MHNUww9ljqLMUe1hHazDpsxRPcocVdWjzFGPiyxljqLMUV8yc9RXtJ4bTMbj 5E4zNcOwvBX8AR6gnOE3USjDcOwWsclkBKuxIvsEk6okjeJL1u3HQNPX3RhX0Um07Xie62+wMMKR WXCB1XKg5tnGCvytc8qyZFvDpLLjBBqaBGlYFDCxxSyyrNaUZ/PkvEj9Y5YUPEdtM0O+PTaTp78t YTjIj8nPmzthEgxmWT7J2stHokAUiAJRIApEgSgQBaJAFIgCUSAKRIEoEAWiQBSIAlEgCkSBKBCF B6LwVTSCKBAFokAUiAJRIApEgSgQBaJAFIgCUSAKRIEoEAWiQBSIAlEgCkSBKBAFokAUiAJRIApE gSgQBaJAFIgCUSAKRIEoEAWiQBSIAlEgCkSBKBAFokAUiAJRIApEgSgQBaJAFIgCUSAKRIEoEAWi 8DtRsBA+GXZZNuDZ3Jj08L1n25z+67g/O+2yg9e774LXe9+9/yHYPfz3RgWFb77nRRZnGVKFf7Y3 Tc31nJvlINJMfwV/NOladA1zhfHn+AFZr/n6RkCWKb6GbzEtwZvX3wV/2/v33r/2j0/Y6irDr1+K r/+xd3SMOQre7B+/2T159VcZiVO/s1+1DBE2D/zDH6XJ6Wwst7oqw1xHxoppNHzz/A0iewcQAPUF teyCGtUGV6qSS+ex4FgEVrZ8g/VnQ0wmwH8ZxWmZyyeQpeFhiq+Gi+WpcgRq9hIs8rffWPkJFBrk n/Ighc+YXSjO0nBUIbOqJA2DSZoXZeNELpig+/R9ep5OPqZM6Oyp3KJocBoXRXwJVKMJJpdIw3Fc 5Suy44HjDx32FFNbPd1g4/w0iaRCNzQ81sa+wQZhEZ9Osk/bNpdBTQIzFRqYDKyWgW02adtev9r/ Ye/kZO9fJzIrJdFaG/z/ioDakOS2LdGvbwqHM4Rip6NZFo624bd0W1vQyqRppqV7K/BXSsNUp2QT lDGXB7ao7ne3hOb65pmwSi4qY6k/o7kEB6+Cg13o/HIB4IKvd2VsNmIrE5hlH3nuuywSWdrKb/O4 gM/hqMwPUsu9SoDXqlW5v3RajJ6B0UbxNH82S5NL/HABXjCdXT679JzAsZ4tRLF1/Ny0Vkxw0JeT 7EPn20wHiePPuve4MDRMLkadb3QoiPOkLvB4nVHn2zi8xKLwUupxHUyYKHWazi/prx19WH/jdozn Au8/j/ZP9o6632ZR0lPRYCaSIs6LRSQwHd4vadzRrRqnDb56MJ4Cp9AEgfU4+Pv7vfd7rwX2GlCH unHHHja+WO/Yz6vWRJxUdNmUwnCXpINR5/AowJx5gFdFqGMiX8DoSRitjv9cEYKua4Jlp4HSTS5c lDunmjUNfECF67oFpC0++nx4rB3bho5te8u7SzoClw8IqJ9QP/kz9xPHWrHKfMkNMzgbgQ4C0/cs TosgiofhbAT/coAXjXFhyq08DrPB2VYzbNX0GsA7E9AaAryBWyLtoxCKhN9v4ASO9prD4tmxxNBY MgAzvmg2DXHorPgoh04OUI/Yvd4dWnxjzu8qGb3d4rJy8+Ge234NZGlcDRXMCGavGHYzW7oLBnfF cKUc3DhNh8Igz2Oj6aRV/yz7o4CBDmg4K4bDvWcHu7za8Q3hcNERJeiIBk0J+MMwjcC/XZrDVhG4 wynHdzkeowfHf2p3LBwjr6ep9Ux0hWHngOfOq/0ZrHWQhejDrFP7ZUCoS+ufzhQwxh/6nKDeJgi+ ZQoIxvl5n1UcSR7VtIVjX+BsTUcMFQfd+DIBhcR5rjvNihta0s+Htbts6nnQkDCKFjjSW+rGM1Y8 g7vGeokejwfTT0trimKoiSnUHS7pD51vTEPlD/PrVZ4+EQx2Os/WWB5exNUC5iIczWIpqayDA0YY gyz0cAjLtVoMjink1xeDclSv4qDXdn75lVeogV27BjYUYNepgPsNsGDz148j1HwOmu/I5uL6vPhj 59sBSFkdBEsNfBBksmaigOKUCqKmwK05sxTOPK/ibFCj9/0a2FOAdU2roKNmRNZ13ldwMnA5bJmf rhtlDbSxpg6aZRZPH+uI6JmY53bpzLHA1M/qpPG+Bhe38ekKsuZDA3w7DmlaS9PaP9W01rNB/9gr h5NZGmF22S50ydmgYJxAUGRhmo/CIpnA72xtrceKYZJGrLsqOuAGW80mk2KDcUCwC3kiVIKex5+q BsCfaBgDUxdYayrnEdcj8KODyXgaZnVzIz92Q429rJDviNSm1cTyual5MJuQY5B6FWji+OfiTLcD 1jFf7cezZASOaE3APGnDwCTov3eu8OiswQVrcOccpkiOu9ilP5Dx3JKNVh+sID+jGwsUjd9e7Jzt 5c7ZaTlnY845W+icW65U9XjCo8s+FDczovgKJwkun9Np3B/4cLscBJbRQVctNVCaJgLXozj80Kkc /T93/7b3/l09jEgjGG5v3WxcsESjtGZIcaWqZasWV/X4ANC0zfM7jur//VJkZg3jux3r+TI1PaDh +N6K7z1y7+9DR6u2bcpOXDos3F/rronveps7A/gFpvzoI3HZDQQDwBwM0iKTrMjkviBj3T508yQ9 LRfpoqFB+WX+glXFJa3mi+3qt80dZQVoa3zOB4uTKMDtowlA8n9fEPGHJM4jwzy9fDHli87mX/Df QDFKMrGr9ZeftL+AR3j67Cn8rLGVxVIydQcjQ5VRlvP26mNQTNrTfqmiKVUUS9NtdjqDBXlQ1xdf 17U3FEINrsW1vnh31E3LXMEfuEgK09NZeMrbGBdxesG6Tw92D394v/vD3tNHu00I2iUN36+Gq7I2 15yvBh5JCVCcFjs4/WjmudyDJL/GMAmD5bFYdeMvXVVoFDX8iqOGd7EjS1+pN+6DAL5LsklaLZNw Dx6R/aj9jF9x/y9NbUUtDqDPA3h6Oa7wYSue8jMrJYEXbC2eNmPU+no8beKBZlkPEePGZIbHXda6 4pTILEkL3cGlRo8pUSDXl6qx9W1mNEXVCIcdYlMuuSuPPqi3aX3FJIza0/J3mFk9AU2lYHswxQI8 68zYYGIYBS4+W0jEADFADBADxMC9McCHX4S6dvwFGIz9ut6K7nrVBGFuoNdx5+qXuHOw+93eQVdU C3Cu8GsT7faqCY/equvpUt3vPhWxJlUyynlXSVLXmyKrmpLlrSmZ7tnqbC2Uilx1upYNxEZhlics HCWn6ThOC5akMO8dnMVslKTylqHutWZ71T4jzMduUN3Q/KWTPoMH+sNSDINskuccR6/k7jnTnc0+ SIeNJmHEPiajEeNQS0jhDp1CSprM8g26ZaSi25MS+xGjabR4ZmrolgyQVwBGAyAUdgYA3hIUjgKx AAduOc3NtrlyBqM4zMRn3uPSGTYIj+BCawbnudwW3J9aNIvmiHbTT03l/H+Uer5azygbIBjg2wAx GyYZTOt0h6Fwc85L/GEGdlN8knHh6fFpPuv35aYITNNwcB5HDArZZFjiTXKYxWZxPhsVuYxFb833 W7FQA0O4gIhv4cIfUcqpgIdpsYrc59yNAAy6HFFH4dosFwncqsQagVfmZrU/ZCmGxnnAPEqGwxg3 R8s9eUUnEkoDA7nq0oLzx5FAN4SF3wQY6yfY5aL4EjseAqk4LNHMeRcCZRhd7V/ptwBIrP1+7Zeb 9oKRXqv7GuURhBIsksGkrmc4TslOPGjFbm/rlAGXiwjdGy6MQvZ04bLI07/8gEQMEAPEwJ0ZkM7K Pd5QoYWhwiqSUocLpf2Z6rtFIZjbRRk/i5Cti0svIDqugKsP8jyyg5KPLH5ur8DfjnzQNVBDtk3B Vxu4tfR6DZOozOEMjLOwqTutEimY28WCXosLq1z9QFV1Dx/32MV0R4ii4Q732vOzUefbwahVxb06 MmyVkqpWWlHrPNXcUT9cKZZTrlaLv0is+NH1CjzJikdrLpUj3F0x/YUKI+zjfFOS9xFlT6jZXrp1 v/p8otQzqWd+zT3T1VZscYWjPBcwjsftgwLiX6kXtTZty0MD99fpvn6O0I6wyvULX34TQFxb50dg WbUgL8N4x5NZNsAT/6dJXsTZlhQJwP1RPLLOvnGFb+AVxmF+LkXu+kkhh4PKk3IfWLOg57Vez6aj BFvEojgvkpSfCWTTCb/2vcVkDPwWALOHHV6RU4ojtr3DxNJgNJlMZXDon2l82vD3z5ilMVQoJqIu /uKJoIxKx+edFFrnbciOzxKC6jeBt3CEeL+Pi8EZCzkmCY1VX30AuBp4P2dJgbNnOeRV+rkSssuD HVwFPCYD8BKozS8EWMNOGQqC0o9hjhg3YAhL4ycysMPPTePpZtURll+q3o8fHlQaXDo+rU8iIBGQ CEgEsgjsatzAoHes/Dfc+DbzKji8G8avWNSiwp0eYPgoDiNgc9YfxezjJItYt/TGPcUdO/VtLU/c 1uLbB9Evs7yohgmxFYETH8Sj1jbqCx5iquhzYeJdtpANJjC2Yl2QGI+EJ+mpWtssaUN76srwBSvO YhjvTpNBGXaHoQS/KsnDSHPazMwcfuRn0DGFns6S0zMwBWEiCdcWjmHlzbqqRRIPbn01SGpBF0mt cxZ6/5dLT6oBChQVGqbzuMAJCUsn6eYgzLJP7fHZ8WtT8DtVM/XnGPgBS2J1HW5ha+mk4DjryXB5 hr1sIz8cfG3LdNNbbOt6KR5FF7rpX9mJVGBLk/vGpzjn+yVJftYC06UOILpROshiPoGR5iOtSkbN 9pnMtgFtnmdb7vtnyPaZ2vdb0NbN+LbvwjdfG4FhfFOtxHhfOEuGxdZWCxTvCsD6z+wLW4CWwfTq HGeTvJ8VHyfldhbfJwovW6oixZJiSbGk2FsotrxpJF/F5OtDaVUIo6V8AV2pf8uFr27bQNJWL+HU y+/PukD/BS7D3+5+ulZe6Vp0b96v7nuJTXX1kpVfTYc4FWke6VtKQXNx/ve4Cy9d4ZXfK1jyVMGN daybLiB3H/U1Ldu1V2x+dT6Hqat4siwc3SgKxeXSY+tMl6La9x0euz/WvrJwOd1AeMSxa8c0wFcb HWXvOh0FuELE+40Vi/VttoqjDabjxeW4wJMILx6gFzxOrmzPKg9blBfcFWA8GfBEnAzAAwNzZXhq 4HlzaMD2nBKZ/OajAi2fMbBxTGq1g18r4WAv7ozV73D4tcF0fR3vkShV1tcbxHiR924Nf6I23NGs 6uzL3uHudwd7wfHeq/dHe1i3ulOpNHOD/eXZX3pzzwg4Gj9DA5y3hXBvFHRdEqY4RDdX8+mrpz1+ urGp5XSWXty/3dubdImfLvHTJf7rxzHdhV7nXtHrbvaEJ3U36m7U3W7Q3Tzobp7objCSlY8ydKUX GqSZnO53mgfBu4KMMl66ZvvZxvZ77C/LI//TIhknv8YRm8yKnZs8z245aPnyK+rlHfBZeq6efYIv pJd37vby+l1I0XLvq17u3acx2xo+PCcsjB/zTopJGIgNxSq/wSr8BAQ/GtrPsBrSlFQHdzHPzyNY XzmvYeaWK5+DX4bnQt3WPctyXMvSwKdovm1onllKNBlL76/Fmmexp+AA+2EOlQBkNp3GWTDAj6Xg ETeeQXedFfjbUX1BlJzipiIsI5uKdZyOr8DyjwlukHeRQhPC8yvHcvxu79X+7gHr6lJ7DFi2PJAj tC0cPwXtD/yEeh30gjobaAUb7M3+IVc/oKhQ9e7JFD6X+J8kYP3VBZHv1YbtFduW1uOl53pZWUsT qZCARBnbYc0FYcdpetlNk97w12SWpXbBhDNl6AAMv9cMhtWzYsDE/MuK3jVvWj1gbUt0ZV7ExjwC hp7IsOR5CV9HVYV8Q22bg6BoxNdcMLq/gj+kp3YcQ3T2bTxxMoiDLD5FqYk6wdlkIo0vAGwvlSuC NoLVJME6BrY/zOI0DHDzbzbthlkwLTIZs6NLMIPzEmKjPHojAyK/F8kADJK7trQomV1WRQJh3fBC fsIz9rQSfIG0LMP2V/CHlBbG4I/P8UvFoMws/jADB2Dg4CyEDvPxvjSkGr5bygvsPxcHQ0eT9LTX BTDMBNX+GqbtwOplMAxh9Or2elI6LMu0jBIZSD1HNvvwSxampzGiU0A98exMgld52SjMTmOE5Vdo uwqHZhkkRbRnYKGc8uAMemsOsupJK06e2upafC7fCOdgNYsLwf7w2CyDhzDaGkRb6IEHm1c4W8dh 83j/P3uKrm5KThOKKkO6MIequgAQmmQFmGOjts2d/jkPkC4ouwttncf3xzNYUoreuRpebO7wz39O wcGcFdvw229s3hEK/Js72CBoD0oKxuEiHuNESvGMgKYaIvsDXK9WVfvnMv/yHsE15MClGGyNoayC 4/9sSOMoKLGa1XHIbSZahq5LoFBUZEk0F7obtrragCuDuEC/jZ5Qllg9qVwidnzTcSC325Zks7kz jBZr7MXtuOB5PpY3jBuhWgFmfkI+wrjmrY3XkdjAl1KEOhEmLIDLDSajkIFxpTv8GInGYyvlsjKZ IJY/4QAyZ7YIoVbqH0YBru1L3TaGNP+tFDgxqlXCOMzO8d3Nq3i1a6NoFDKPsdqDaThoK/a2VF1J Y+vrCawEcp5bcfdfAY8/SoFUw2hR50yC/GR81Yts8HXJ3nwrbtLSm/NFLohc0Oe4IHPOBbXmL3Mu yLqFC8IV8jIX9OgQkcsil0Uui1wWuSxyWeSyyGWRyyKXRS6LXBa5LHJZ5LLIZZHLIpdFLotcFrks clnksshlkcsil0Uui1wWuSxyWeSyyGWRyyKXRS6LXBa5LHJZ5LLIZZHLIpdFLotcFrksclnksshl kcsil0Uui1wWuSxyWeSyyGWRyyKXRS6LXBa5LHJZ5LLIZZHLIpdFLotcFrksclnksshlkcsil/WY EZHLIpdFLotcFrksclnksshlkcsil0Uui1wWuSxyWeSy/qguyzaFH0HyTxZ2aRW6YhdAVMNJIkXe lia1q+F0mGR50YVqPc4cYpE8hqMJ9CCH6LJBVqVj7icFoIAiA37rqgSXVdVE7+/zPJ1lZZ53pF3d 6yxqVgvqRozckOJNcOlCiuMQc6/hkAGcwYcfOcKfH4T9+yYpD1NIeIejhiGSc7ENY5FkX07dHUoj 51VWsUpvAbAHDoyTx8wU3AWgZUnUMcklYngJI6D+4o5kTEtxBwzTdpRGLKE05Y5cQXLBKMgscLrX j7QOJtKdpaMkPZe82gY6kg30ODLoDTFaPuZowwyyUZwFZQX+zyaMhncjDWMxTyvSwvuyTrIjt9zh iWOXjCGO41eZ2+fnMpWLFZlL1LmSgyn8MM1syUElBbDGYDIc5nHRrVqg5PJxPK0iuNjrNZCupVBY NBg5ODwqMPNDhuO6pQBKDDW0DMNTyDfjxSKYm3PuGRXkAteuKk2pxhnFBL9ncRhJ8mO/sXdHe/8I 9g/fH++x35oavlbVGE4mRYN6g7WovPgcKp6v1FhKRUHwhUn6lugi81Y9jbNilvUDzPbWsmkfZ5eT JGJr08qeDVglLOjVd0HvQl+T0o3eMN+fY2PGPJG0r/uk5KTp33fIpnc1Ok8MHF2UQ0/kCxOpsrur At9c1jATzfC2GR4tY6VOhnfHlIkWjqrXJ8S+mozVqXNlL8qeydNjYnZVhbDdNPfLIFiY6FMIusrs aWp6FA409vQn09Z+0gwD/mo/ge5/Ml33J911n9apP2uzk7N/mh4mvWwMw186TAjyMPpoOL0oP8FU OoB1dpDCZ7TJOEvDkdR+MWbfLt83pmW/bVb265Oyz2VebxKv28YKjMq1DGyzUdXrV/s/7J2c7P3r RGalJLpRpdDk/1cE1IY8ovzylu5BZ5KUbfGuhdoWlOe7ze2grSrnaMVFZSz1ZzSX4OBVcLB7fKIU AC74elfGxiMRpf/MPqJrCrKIz/q75bfgEuBzOIp5qsNG7tPiLIPhpF2ryrWbTotRnXB3liaX+OHi GUzJZpdVAt6FKLaOn5sWz6V+Ockw1S9mY8afde8RmeJHIt1xnCd1gcfrjDrfxjy7fNxkQ4ce1zl4 ++pvUqfh+db1YTOidIznAu8/j3DRWqeAl9BYnshxvIgEzk1/SeOObtU4bZGBHnMcbzCB9Tj4+/u9 93uvBfYaEPPRxx27rqlresd+XrWmnS0efAyMmOlg1Dk8Co72dl8DXhWhrpkcoydhtDr+c0UIuq4J lp0GSpdSLLcyyj+gwnXdAtJWOwHz4+rYNnRs21veXdIRuHxAQP2E+smfuZ84Fq7U+aSkYQZnI9BB BrMsi2FSHcXDcDaCfzlAM5fjMew8DrPB2VYzbNX05FDAHQloDQHewC2YheOsmAtFXpQ0cAIHEwOx hAqHTjE0lgzAjC+aTUMcOis+yqGTA9Qjdq93hxbfmPO7SkZvt7is3Hy457ZfA1kaV0MFjMuwVwy7 mS3dBYO7Yrjy0hEYh8Igz2Oj6aRV/yz7o4CBDmg4K4bDvWcHu7za8Q3hcNERJeiIBk0J+MMwjcC/ XZrDVhG4wynHdzkeowfHf2p3LBwjr6ep9Ux0hWHnoIthwya5vMFZiD7MOrVfBoR6XQ5uawoY4w99 TlBvEwTfMgUE4/y8zyqOJI9q2sKxL3C2piOGioNufJmAQuI8152aMYz39PNh7S6beh40JIyiBY70 lrrxjBWMFYFrrBCM4/Fg+mlpTVEMNW1nxXa4pD90vjENlT8Y8mtPnwgGO51nawzXx9UC5iIczWK2 9qyq4+CAEcYgCz0cwnKtFgMG+lB+fTEoR/UqDnpt55dfeYUa2LVrYEMBxgCbAO43wILNXz+OUPM5 aL4jmwtmYYbij51vByBldRAsNfBBkMmaiQKKUyqImgK35sxSOPO8irNBjd73a2BPAdY1rYKOmhFZ 13lfwcnA5bBlfjpmXv+lsrGmDpplFk8f64jomSuYvXrZzLHI4vak8b4GF7fx6Qqy5kMDfDsOaVpL 09o/1bTWs0H/2CuHk1kaYUy7C11yNigYJxAUWZjmo7BIJvA7W1vrsWKYpBHrrooOuMFWs8mk2GAc EOxCngiVoOfxp6oB8CfWNGDqAmtNq68dcJp6BH50MBlPw6xubuTHbqixlxXyHd6CoppYPjc1D2YT cgxSrwJNHP9cnOl2wHyHtNyHXBMwT9owMAn6750rPDprcMEa3DmHKaL7i136AxnPLdlo9cEK8jO6 sUDR+O3Fztle7pydlnM25pyzhc655UpVjyc8uuxDLUAbxVc4SXD5nE7j/sCH2+UgsIwOumqpgdI0 EbgexeGHTuXo/7n7t7337+phRBrBbPOm44IlGqU1Q4orVS1btbiqxweApm2e33FU/++XIjNrGN/t WM+XqekBDcf3VnzvkXt/HzpatW1TduLSYbHVVfBh4rve5s4AfilwD18su4FgAJiDQVpkkhWZ3Bdk eJwkjZL0tFyki4YG5Zf5C1YVl7SaL7ar3zZ3lBWgzc8QSZt3AMn/fUHEH5K47VVHUIspX3Q2/4L/ BopRkoldrb/8pP0FPMLTZ0/hZ42tLG4cte1gZKgyynLeXn0Mikl72i9VNKWKYmm6zU5nsCAP6vri 67r2hkKowbW41hfvjrppmSv4AxdJYXo6C095G+MiTi9Y9+nB7uEP73d/2Hv6aLcJQbuk4fvVcFXW 5prz1cAjKQHKj4Tg9KOZ53IPkvwawyQMlsdi1Y2/dFWhUdTwK44a3sWOLH2l3rgPAvguySZptUzC PXhE9qP2M37F/b80tRW1OIA+D+BVp8j5sBXj0qEm8IKtxdNmjFpfj6dNPLA6242IcWMyw/Oya11x SmSWpIXu4FKjx5QokOtL1dj6NjOaomqEww6xKZfclUe/PgQoMwmj9rT8HWZWT0BTKdgeTLEAzzoz NpgYRoGLzxYSMUAMEAPEADFwbwzw4Rehrh1/AQZjv663orteNUGYG+h13Ln6Je4c7H63d9AV1QKc K/zaRLu9asKjt+p6ulT3u09FrEmVjHLeVZLU9abIqqZkeWtKpnu2OlsLpSJXna5lA7FRmOUJC0fJ aTqO04IlKcx7B2cxGyWpvGWoe63ZXrXPCPOxG1Q3NH/ppM/ggf6wFMMgm+Q5x9EruXvOdGcTzzWz 0SSM2MdkNGIcagkp3KFTSEmTWb5Bt4xUdHtSYj9iNI0Wz0wN3ZIB8grAaACEws4AwFuCwlEgFuDA Lae52TZXzmAUh5n4zHtcOsMG4RFcaM3gPJfbgvtTi2bRHNFu+qmpnP+PUs9X6xllAwQDfBsgFnfS QLjifDrnJf4wA7spPsm4LKA2zWf9vtwUgWkaDs7jiEEhmwxLvEkOs9gszmejIpex6K35fisWamAI FxDxLVz4I0o5FfAwLVaR+5y7EYDhF5d4HYVrs1wkcKsSawRxDh9R7g9ZiqFxHjCPkuEwxs3Rck9e 0YmE0sBArrq04PxxJNANYeE3AcbwSpW4GwsdD4FUHJZo5rwLgTKMrvav9FsAJNZ+v/bLTXvBSK/V fY3yCEIJFslgUtczHKdkJx60Yre3dcqAy0WE7g0XRiF7unBZ5OlffkAiBogBYuDODEhn5R5vqNDC UGEVSanDhdL+TPXdohDM7aKMn0XI1sWlFxAdV8DVB3ke2UHJRxY/t1dsfvWuYSVQQ7ZNwVcbuLX0 eg2TqMzhDIyzsKk7rRIpmNvFgl6LC6tc/UBVdQ8f99jFdEeIouEO99rzs1Hn28GoVcW9OjJslZKq VlpR6zzV3FE/XCmWU65Wi79IrPjR9Qo8yYpHay6VI9xdMf2FCnj3M+SbkryPKHtCzfbSrfvV5xOl nkk982vuma62YosrHOW5gHE8bh8UEP9Kvai1aVseGri/Tvf1c4R2hFWuX/jymwCmUW2GfmDVgrwM 4x1PZtkAT/yfJnkRZ1tSJAD3R/HIOvvGFb6BVxiH+bkUuesnhRwOKk/KfWDNgp7Xej2bjhJsEYvi vEhSfiaQTSf82vcWkzHwWwDMHnZ4RU4pjtj2DhNLg9FkMpXBoX+m8WnD3z9jlsZQoZiIuviLJ4Iy Kh2fd1JonbchOz5LCKrfBN7CEeL9Pi4GZyzkmCQ0Vn31AeBq4P2cJQXOnuWQV+nnSsguD3ZwFfCY DMBLoDa/EGANO2UoCEo/hjli3IAhLI2fyMAOPzeNp5tVR1h+qXo/fnhQaXDp+LQ+iYBEQCIgEcgi sKtxA4PesfLfcOPbzKvg8G4Yv2JRiwp3eoDhoziMgM1ZfxSzj5MsYt3SG/cUd+zUt7U8cVuLbx9E v8zyohomxFYETnwQj1rbqC94iKmiz4WJd9lCNpjA2Ip1QWI8Ep6kp2pts6QN7akrwxesOIthvDtN BmXYHYYS/KokDyPNaTMzc/iRn0HHFHo6S07PwBSEiSRcWziGlTfrqhZJPLj11SCpBV0ktc5Z6P1f Lj2pBihQVGiYzuMCJyQsnaSbgzDLPrXHZ3zLqzQFv1M1U3+OgR+wJFbX4Ra2lk4KjrOeDJdn2Ms2 8sPB17ZMN73Ftq6X4lF0oZv+lZ1IBbY0uW98inO+X5LkZy0wXeoAohulgyzmExhpPtKqZNRsn8ls G9Dmebblvn+GbJ+pfb8Fbd2Mb/sufPO1ERjGN9VKjPeFs2RYbG21QPGuAKz/zL6wBWgZTK/OcTbJ +1nxcVJuZ/F9ovCypSpSLCmWFEuKvYViy5tG8lVMvj6UVoUwWsoX0JX6t1z46rYNJG31Ek69/P6s C/Rf4DL87e6na+WVrkX35v3qvpfYVFcvWfnVdIhTkeaR+KKhVNBcnP897sJLV3jl9wqWPFVwYx3r pgvI3Ud9Tct27RWbX53PYeoqniwLRzeKQnG59Ng606Wo9n2Hx+6Pta8sXE43EB5x7NoxDfDVRkfZ u05HAa4Q8X5jxWJ9m63iaIPpeHE5LvAkwosH6AWPkyvbqx7bLi+4K8B4MuCJOBmABwbmyvDUwPPm 0IDtyY+PL4SWzxjYPn9KWmkHv1bCwV7cGSt/QhjmF4Pp+jreI1GqrK83iH3+QvZdGv5EbbijWdXZ l73D3e8O9oLjvVfvj/awbnWnUmnmBvvLs7/05p4RcDR+hgY4bwvh3ijouiRMcYhurubTV0/Fs+xN Lf5M9uKL+7d7e5Mu8dMlfrrEf/04prvQ69wret3NnvCk7kbdjbrbDbqbB93NE93tuoflHd3vNA+C dwUZZbx0zfazje0321+WR/6nRTJOfo0jNpkVO/f1hLvlYO+QX1ov74nP0nP1fBR8obxOL9e56evs dyFFS8Kvekn4exu8reEDdsIK+XHxpJiEgdiYrLIprMJPwPGjof2MWRUwRcdnmfDnEayvrtcwc8ue z8Evw3PBb+uehZl1LA18k+bbhuahaaNQk7Hyjltosaco7jCHSgAym07jLBjgR00IHnHjWXbXWYG/ HdVfRMkpbk7CcrSpWMf7+Eou/5jgRnsXKTShQL9yPsfv9l7t7x5g0o+mPQYsf76gQ7WtlTpv4gd+ Gr4OsPEkHWAYG5iDiZsIYKmw9e7JXD6X+B82OP6IX4p9vJF4zZg7tSHdCtaamPs8b7pmt05sNCWO UtJw90eI/N/ZYcxNMK90E/ZKnS0VwyvlAPKy6pB1d8ZbvOV7zx9gnlp2364Yd3qsW/sC/We2yaa9 iix8EDjVvv1HfjjacdRrpa2e5LjV3uZg1DZW6dhLY6eu1uzVNl/ShtzNuqXulnbAFvoOvTKT5vJ5 c1hM133Fs7Rdi1EdJmP8cJPXLhb3sEflfrnMrGGVa2/daehKrsmw5fJyPS45KMOt5sg6HjSWL7m1 3uK+Jz+xaLJ1ne/wV5TEyWWH35FyR2OHQ69Q+4L5WDn0pnqatDKaFckoiOL+DDcY8J9t03AdD29b XsSjbbyZMRwX0AwbuB1CK7Z32DjqB8VkMgritMg+BVnMr5Q/Z8VlGgwm43FSsGGYjOLoOfs2BxVH vZ/Sp2JBjRTq1WeTPEsTGfPYky4ny1YFJOvBf8K1NOzj3ZBplqTFEAUwxLx/T7/VvEv0vOBOc35s vMdAFXFXO5C8IPzBL+fd4JJQBQI3Z+jL+/9iyKvNwbRLg/3mH8f/Pn61e3AQ7L5+fRRcYGV1zYSr sEE4Gn3orClfe2KRNY/7LsxaGmbHk1daCzS8xFyFxpcUPoAROPZnKLOs9Uia9GyWZ8/wCfNZFD/D k5ew9o2SibF1VkZErwBghxOWz2C1M8Q9JvAMUZLFg2KSfdpawXHqCuSSZQfgmIRIgsHZOevm0oIt 0nRoIIbIXgKayXg6iouY5fGHWZwOYgYLHAvFMQpP823o7zk6IEvzwcUOJ9k4LCpUru/5uqNVGhJp GxuieMnWw4BK8/6gyS/epTxnS3ChMlhSFPQqUhsszE6lNZ2MDF+XvAjLi+JdgKsqSekmP5dgMFfr 4eXIWZDpDIa6WEZfqNJ1XJzr1AJxq4vbOQ9BbMvDgAyGu3nDrSDvww/4v8yBrST/uQIVz7kQ7L8N 0kmQpNAFuqs1sg1e8P547yjAqPIGw+FCpDfkO4qNWOX6w6nc1ijWKpmVI88kS6AD8iNhfPz5GIlY 7S9jrKiVT3Kkk2mOMrE8mDNKZuLwuAkSnIyimmJJQuVIBriKpRZF04Hpq1O9nTzd3BEind9G5Q+k YznHhSYJRN/s/rD/6jf+jRQtdhRQA2C1F3dC5FagAAEeNcAISlvbGMVWoeI0mgfyJSAes1+I6yaS MLQ2KpHrScVk6G2oRWwZhgT1MUuKeDFfhjkHt5CoNQe2kGqtgsGZlDyLwfrncIJHMAdxnofgspW7 CbIycJm0hFNFG+HgfDZdAui38S1i1ayFPQ6z8zjL5yFqQQ9mGYxso9k4VS3uBkq9WZdeMvTerovb xgpmQBccSVUxM6jk8+ym4ZMIpSeBStPH6xG5NaJhFsdZnAejJC/mxAiOVYo3PuJxw/XEY6eosv/v /Zt3x7UP70GjVrk1FRkCB7/MxtPGnXhaWQuLUdN8OzkZ1El7EREwLHjG1Qb81vhY/vhq/uN83Ppz 8X6JxlxdMx/OdQDwNnM2ADrDAA5q1wYIPpWZB6ryYQvzF1N6KaNuNVRjinNlqL4pGHbueAQOBsu7 vGFlVAk95DpnEVaV7ZImNoWS3D88gYFfwMQFfM1HWZ5THLySutNQwgDInJT6i2QU95XtBm3Ivw23 W47B0ixosyU1WquSCQ9bIyC+K8S/FCPoajNx+e7991Ie9nvGVmVYCKXv+KAwN0D3m30fzVMhhJOP ZYgFeHWDRwYarn7bVtiSUqObkt+6T6te4uxvZuZVYBSbJWo09rZ0yAdumg0QecCX5ysKkNUGEpMC BWYZG2715tSCWYWAlQ4kLoQtVZlG0gHDFqA08WnhdBBnjgrOtwJxgBMlwZfNuJmGtfnXQfFpGvfk 8dy/1Uj19CEHI89a8SrfJAxVjl95IjYuLVfKCXFpzd8f7P5wbATfvz062f/+341vd8VhCxCD5Jcu hoJyT12zSAu/ln+vKshdYH5ic40YpguFUGLGNbJprBh8MQtfMDGNW5jeQ/elVdzNahh8yH17tL93 eCJ9y1Ph7R798Oqve6/+JlbCrYWzbviVUt4fgrf4fu9o73XwDmB7UihUE9nVYRHOr9Z2wymfhmKj 5RfFxGoG0/KhLaN7EfYciMPM+TQejGEwKN9uf//qr7tHwQmeSm5z1apwT7oQmtichlkeb509932M mjdndcoX5cvYE6tOTPPA7+AsS2ejmvWqrLKov3z7ly9gUKgXUs7tlCOBX3GVjEPg2SK3OkFUPyCk PLnb3hlrnSGapdPB+aj/kUnneppzPxrfgvnQ+eb/6ba6KYEHieoDSOUzufUrvhiTvgaziffER9Wr tfindSDTKo8khcqRpObIkY2v657NhhE/a7iQhnijdVHTy8SWiF06QGXKce8rNmTarwS3j0Pxl3/n XxGu0eM90sUPRRnXPBRltspN9XQX3geV81hKJXa5mTb/zrbltM+zwgRBf47nrkb1+7bSVqtfymaz FM5G9UCutHFwOxN2NL43JB/B+v38k6Gt4I9y/YWPTKezaYBPD03SKp7bvZgkEetChxW/rfV6YjU3 FGdEMTquLMjIlX0teuQxOFgrQMMxJ9lShW3ITa7yvl/m01mRLlpaRmERtlrLj/m2FpG2AT3XkJZ9 9fx/jE+yvFSWziqg2TrYlstXrJD8i3uoeAU3vqau5H4vM/BQaV7J19oQwwsHQZdfsep9hlpvgNQz nU65YOquBUHZXJjzwGQ+KML+KP4Rp/V8BfTjIC3wbMy73eBg9/jk594t6PiuK+hgiAmkCJ4BjLaI p5aIKinme4/I7qd9X4r7e0Xme5oAnWYTjK4Hwo5QEmBLq1g1/zHl/wS45fdzT658r0x/Fid4x6Jc 4s/SAU+JW+5QltqdledCcF22ANlWkg4ndR+Zq3P/61PNsvAwrThPus1WP06y8zLM8CPGeSZD/jxR 9V2PPWPV16Jr936+fnBaticvmF9SCrwvLJl3US4+oe1WR2KFEaytrw+FEWj3a2yPkpDpy0eFnozi oXSGy9L0L4DoFtxbnlHCfkyi4gzMkMfFMP7RXR02gM23D2FSrRmca6/wW9X1nA0J15e119amoEvw x+hANGmCxnfQyxvE+8ev93/YP+GN7/IKvcbRPCjyL9QTLc9CbVqSCQXgOJJRkaRBfAl2DroTOt7Z ZvXx1k193qtA6/FMqiZ5ZsuXryrXaK7xUrJD034WeHu3Nr0HIW5rcmdrBqRv5PHI1g21I5XdSP+c LrfgOohpub5jWba34BLIYOB77OlPQ7wpUV8FcX6/qyDVbZzmKoiz7CrIrRcLonl8seB9PYsFR5Ms a9jewXjJhq2NCqkmf5Wi2Q1kPCc4cNGuAsbcRizdn7Kr1wlE9R1mSNy5vLTeleQgUqlfz6Ew30eC iYUR4gXb3Ez47v0L1kBbXmeh0oWWQa0NKI7GnbXyEYhcevjhliQJz58Uj15DL9gTbLB6/BkT3is3 K4RNoXwhhMPgfj2m2UWMb/+xd/T9wdt/cgPuKvGiHuedv8Ox9/Z7iSspzoQnGRCndK/wJlGDh50V OIaxooujXFfMCmCkFEGl8uyROvaLg05c9AtifuCNgsmQf4ZSGPZ6V4T7Hnzm+LvH/h5YfaZG8if5 f3n50zYebePRNt6XcUEWuqBqeSmF+SXPA9Rg9iF9IS1NyX39YXV31+03C1fUOq2oaUVNK6uH69sO 9m2niQqvDXH9VO9qSXuN5XsjXBsvmtirtPsARiw+YRpV6ftaIIbG79nwg+a8dMxPoMaRDMHvzmRx zC/tSSCSR+fP1wmYcTyu74AIUGiX6WrGCv4oN6WA50GMJw9w4Yj1grPJRHp5B0ArvuYXlgiqrCnZ /0r1qt1A4EOcm2dX/sF0GEC/C3BnYc7SCYuHQyTTXASC1sAf8SpZFA+GkYaPtI9n6TicBoMzfD5r Satt8I74ozz6iSdcgyAswFv3Z9AZAhhmZuksB1ni5QeBsVt5sj4et9hgxaQIR9zPfOmBB0zBQXtw anuol/hkC38+W/DQFqqrPNLpIDx0LIXyjeo+Z+u8EY6OXeX9J1hL3eaYu63ZnhVjsvcvdTHL81f4 gLImnXdvjXTKvSlfvXHWat8yfV11EY836Q6KXnD323RX5CcNH/G7Aw5/Uaa6St5lFyNOh0nPN8Ki 9yJPy5cJmNiuW/c3yl288q2C3qbPK24ABqlyXfGRtPuKtwfEzcC7Pk5wo7cJyA7IDsgOyA6UgTm9 YmT2+QW0cXgpRlvPnR+B+XfVCPy5MlkwWg+r0TpVRzgTg7HN/NBbOqvMxZtuohHKttVnI7Cqu5+i TL3ay6MV6mMd+XDr9u918MN/cs3Fz4bcF7kr3hKIvUf3PEibJXoehJ4HoedBbv48iNR//lTPg9x4 0LtyIaffaNH2ew6L4tVQ9UWOehiQH+VIWy9yOHplRnP3wO+GkN/QX/TgyBWUHBFGUge7G106d6zO tQ+KIFr+pkg5WrdfFXHcKnqq0Je9M/QsKJxcxNlwNPmI3/fuk4PbvADBe+7cCxC+/K6J5yx+8MH/ 87xrwqXUXyQjetfkMb5rcq1V3+Jdk3kzp3dNfsd3Tb7WIVY8lXrNEyfq0uvur5yI+dk9NnK6sIn0 Iso931T/ffT2pY/GfElDfYQvrXxVSqfjnD06zvklj3NaHmYZvEr6ln+lgGztSvFi6sCr5IcZBK+S n90WQ0tMdjtJWEtMMAVcIiZbZLkw+iSKOVE84kO+X3Y0/CO/6/NVDZx/Lvu4//eCuGzKA8tCMnhU 2XLorPLvc1bZ8a447Csls2uX8sCmONksnTM2K2Q5W587EnyfpB44Z55u+XVyqGruIljHvFvhCJwG 639i+WSWDeSsW7pdp3Vy1aFNt6ucTry2IAfoBD4M0XwSeMEZSfgwxZ7gHfMSqdzreKybpzs1jRb7 nlGz3x5jdTy2nZ/hPNhul1QZwEwjP0+kTEyeX2ZzVsDLBFofOkzKRxVK5VWmO7YwIZVfJZmT80b5 TbFVFhtWU9ykccZ3CKpFBuacnUto5btKQqu5jFa+15T7G6yaSTXlTb4szPfIuZDKDU0vZx+msSjt laEZcvncHA0fSlCEzS3hLB5N0b+yHE+fxhnjp0dzySIMTLUrLMwsk2DzmoOzeHDOD5TjMzEMNy3U al6dZavZxKDMkI8pJRxlhmxnhrz55GFJwHjBTMIz/4A3V77wZJJeHaRXB+nVwcf36uDvv19ELxR+ DS8UOhofABeS6cKn2aCKn4h74OC6+RGzW1xEltf1ZR5WHI5Nixb2tLCnhT0t7GlhTwv7e13YP3z+ 9T/c4ndutP1DLn7pQTx6UYceZCP5P2750wmqHp2gogfx/oCPqpH7+uPq7rbnSzyDh6EMikLRU3j0 WPmjX5vd/Ek9cZUd/yjP5T3yQPzvGPE35Ij/rUL9c+lJTM3Fy6bzmUki02NPL38yNfsn03B/Mh34 13V/0l23TlSi/X6JSqru0iQqUd4su02iEnkUkVpr4lhi01hCY8kfMYHGY8NDYyTFL/+ECyCKn5H8 H4H8KX5J8UuKX/4RY2Dkvv64urt9/NKi+CWtOWlt9sdYm1FKEDHvoTQQjzENBKUEIVv4/VKCXPNC 3O1urbwv78PEWQYOU/csy3EtS3PBTHzb0DxTY91Nvk8hbrbcw+NzK6V7/t1foHM/961S8XLg2lzl pdlOXO0PkU3Ex2cIO8mwy0aT04Bba+k8mOQ58HaCckOpzhmgz79WewN8eBdiCFO3vMpGgHtuERgi U7sxh2G4x7Y8/83DGn3z+LOjDYeeI+wrmXDO0Is5GK2QXKw6neZv3ONzmvgLtkMeF8TXQZ7HxlWr bYDBaBGMNLDe54EbfqhfXrWXcSQMH7RiBBhFClMMtVyaw1aRLwWCtHaURuN3K3g9Ta2HASR+syKN L5uJvGmUgZmZEvZR4kZXhV7M9otHrQiKWR6xr0MkUpFTHd/Hs+bBKM5z3elJKhGyqQ+cy8EiLptN 3WmV4OURaH15IUV3gtajo/oVouNvP1WF7dAWf/hpWfSNv/pUFZrtJ6PcRoA8gBNetkNrtnfNq1L+ Uhny2z61DCXxOdJLVvy2Rk22bpPTDm7pLdzWcrK2TNY0GrJSay1PJmvITkkha7RwL2+tq7TW8pq7 GVJrHUsmW+vBXRjKk3BbPMwmV5csy11uxvVdkcrmRpNJc8/oz6V+vD6Vz/oLOi1enOrnQyy5VK98 4Z0pFLy4U3S5sUD6t/S5vsUfpmiFNx//oCQeJxcDUTj4MEuyWOQ56A6n8jLixmPVDbBZ1SP14mVf fu8+mAyHecxTKPRwGlAHKoYfkygWb5Nv6jwosdncvLKqfdhV8YR3FeOZ4iQhwzlSyqvgv7Je0vgj n3DMBwFLKc0dP0GlYSjQ97kAsbIIBuqG5+E7u1LqFelF3VQNv907nKnVsmw/Z36wf7jHnzNH4cyV vnp/dLR3eHLw7+Dd+5OT/cMfejJxEek5TXJYES2IOirxYSX2+DAMmTxRSx0WnAs47szFyaS6thzx nAt9YYSrHelSLKSa4y+ykcHZ9qbesgfP8Ffgb6M9j28XVHzLTT58G/zzaP9k77iHq+fjvRO2d3T0 9khaMd8fItNdppZ5wdeBQkWq4jH2VvYTz1oaT14Cz6PI0sPe0YSv8nEFBQhaofq6TE6tIjuyJiav ++BXJGlZRi2tVhqgxnvcFt6ocqY86UppiMrsAfXb2T0uujr/ipyDw+LxwMWZF3iN/GySFUC49XFd V/IxWDC9/+8941yQ46G2877yTWy2cjyIby3K8fCAOR7u7o8sE3qdWe/dxMUpd3yt1l3/RWMqnn31 8SesBR9FCifs1MrxJ4/nqGm5jCaTw3ZLqlK9akNjzv+36zScOn6LFu+SOIaifcjW0ZWHqPVWj5aY 8CQmFB3O+VGJC3P5dk5LAFIla1Gl0hKXbrDdkcG7iNZR68gZO+a0qnzzwBp6pHzhQnK5eBdo0q1G m8FZe4biucKiyt04ZTgVqHpyJ29Mp37oyPPsxsE8OnSVx6vgFwz/6gxdHpiKCdQrh6HGD1q+uQJ/ pZGDT6qrgxG8Ep/4NOW3AnaW+Ot7WGGYNj5YUGev4fsZgUgL1R6CNtteW5qZ1yltaqluC1lBra6E dGebwRKA/U9Z+K1M8Lk8ZdBN5TRBrVypnM/2qoMCLY3y92jqSjXWFtRisS19g2FOerbmrthaNfud m7btHwe7797tHb7Gie9dFHhzTlAcj0QmurUCf5U1VTt7EazB5zM2NSEmPhWuGoFAx/8+5msQMfEU Ryy4AbWyn1ZivbotN1p4O/oK/pAXynykLTf/hfnuKMvqB4WuBlE+z2odklkwTarHEEPC4XU6/OzH c1YJCKGAZjpRpdqItQRsR6hmaXKJHwawhtos4vF0FBbx1jEsUPEJmJPg3fHe+9dvWRcU92r34AAU +Oa7twcbrPp8uPtmT/509MNxo/4HD17dxlhu0QUNx0cpy2O70NBLRZX1Va/SP7YP11xvDG5lDMgh 6r988511lUNbbL39IhdUrXbeUfVlWGynFR2SUm7et28wTOjdpuwvpeyoMPVRD2XZStZWeWLTbZbA L6WR0jaqjJflUqRapqprj2u/aST2KFhw51ioppwLcs21Ed29KQ82Upk4UvFV47IuYGKwXu1Cj3QG YHiPSLDWTSXnystk4fOlQmk6imfxeLl8V9VWp6N/gI0I/T73Ba7fhGiXBkOejv6xCWiU9JPJOzzJ 7XgrvlMNDQvij1X2+Z6aLNYvB7u5g0ZtYTwKE1l+fkqyFAevM/wBTsy49orcDxcjhKVXDIR93Y3x zdYk2nY8z/U3WBhdXCEORMTDe7a/4uFuLfyJN3fiIOGZ0N/uv1bCT/CHkwfew/4kK7rYDOkEDQbl 4E9xmbTTe9+ktlIIzuoyhRaFQ8vXtGpWKv4Ha87CLIlz/A1qPYO/6BY9XBl5OFZwZwfI2xsHuicO C/HSzZ1xEQxg8iW9MIjhkprLLAafoSHoPJOi7C5curjT5+JriMjH97B2PN47qfnhnXGDvXn9XXDy r8Pg6PXbw4N/y2cqoardkT85nQ5Cx+lFZw1+4HK8xAWfXkiAn0HR51oV8LMtXN3FGXzIUBTcVJok s9hBW9b6WTrFh5/hR4NS9/hhLjwlqmjmZlALDsdK7HwdJ2Rh0K92evl52CDJg/E4nE7jqDvtLcPP 38QcxTjfLIEZsDTJPm2pqHF4neL52HhscPTIuSyJByTOT7KGWTkBDrM4DQNQjTj221WOGpjIJ57G 5erqikobbKpuV1XlrBte1AOnrmkiybUwDg+fGj3DpLk47G23LMVyPZhzwA8pzOf6/IULEVvjvOHv Mn+3r+BpxlID686gHdA8nqEdU7ZLnzcR04a8e+jp/lJMnIWX7M3+4fH+f/aUHRfLMysOmpseo0l6 2uO1ejjxbRecxkUwDi+DYZgDcgmXz5c6ddzoyUJTkeKmhph+cNhGFwqIWQUm+SK5N54V8SWH6q6G F+Cs8LMkT9/yapTzcphiV8RqxWSqSsG3rSvqDSZpkZzOJrMcLUqqVb6+jycYxRn1Us9BWJST0+5U 5E+XebwbLXxiG5cGsNxv4gRlYzBUUNtX+V2vdy9N/EJkHeOKWk+mWXwBvXyWx91a9m26jn8FhrrW 5o7oHNvMYGsMu0dw/B+lY/nlrhlWmevLDfUXD0DZda4y5jiDJV4/6H8q4lbTPa3pV5KoWr3Pc2uo xoCf1B1EgfXlXd0nCM5RqjD4Bjx4+0yQC/pJIfWDmoTiqm1Nq8Jp/QF2H3A1MKeII+H8czQKGbje i/yI8xOosrkzjGQAR+JzQVj1Y7S50+et7A/OFanZmm7KbYRa/IHwPvyShelpLPyhDF8twqfIBE4n Psqs6EZT3D8X3L74DGr8+iMnFUimqMzHAcopofrnV0F5jcxL3qdSsVE1DPQWnMG0sHJi7Df27mjv H8H+IawoZb3ofqOXsrWfh7B+RAVrDCeTBX70LmjtxqssHu3Ay32/e3zy3f5h8Ort4fHbg/3Xuyf7 bw+Dk78e7R3/9e3Ba8nkba3czFw+gAFIZbLyACbW2guHMFvzjYdeFzo239aXlm79+DRJu2ycAD9J EPVhkbFRzmxxCSGWDxtsdfHajtfGe9b1bMs0Q5dvzkxxOoerZ62+22PqmmtsYIQKoQduZHg3XGNp 5gr+kBdKmivWP0AbWI/rsAdy/f3uye5BwI+7KQufz8eAT9ZzI1pUqVxrlYeM5gt6Eh5T4BFSUkhA D+iUvbe8K4MocNUDo25FFmZhUT+H4aMrwQCCdV1aQblGSeU6bv7gJJ1SJzxEwAZ8Kt/VS7fRq6MG jZDLVaOAhEEQr53BcmXMt7O3dcOxvNaqQDP8FUvcvFsyZ0/B99Q4uD/56+4BLM4PT/aODsGW+Dh/ 0lovWui3pU8PQIBva+BUAU/ppiDLGseLB6XbatgX4sIUUx1lvS+02lrxA6i3lPoVK35L448wiLUr rI9g3gKG96uMmJ+HmIwinDfj4YqpMreB8opweIFEVschkOYIpdA1Px8nkMzNRUuUt8bJRygepxAr ayGYuRZIZQvX1VytC3uNYft4ElU5UMuPkfOEKjDXy+IPszgvDN4MjmeDpX35TKtfH1FuDdsAdpMl qqwq06pWvPOzLkCngHrlAB9dYib2MDuNEZYPwl2FQ9Nrljl8IoCUmzms9FAFnre8Hp+LbwQJsJrF hWB/eGyWwfMFLpmPzX2f9mFkKCMZiq5uSq5ccJT78zAtSwYwU1q89MC5LN9aWlB2F9o63/G8Lojx JxIcnqYGrLhvN+duBf5ymbzDl6X5p7wA5w/OSl3xWvXCUKwiq6r9c5n/q9eGCrkrVuWWXq1Y5zyw QKGoyJJoLnQ3ME1swG358IlAv42eUJaYXaFcIvbWStMST/6oq72rVtk348I1rmxYOeeSK4CRCfkI 45p3Hq0wmYU3IIU6ESYUY6qMQgGG5czioMAjRGTXL2SPQ0zQCUuvKzDZhjWnQAEqw1Rr4cb024Zw W6qupOH19aTAbGcw4Xqz+69gH6ZbzYkvy66X6xX1uXiIJc4NqTGC+VbcpKU354tcFrmsBsYpF+1X zIXxCbQORpMWRTCFqObC+TfB6+D939uGcR28iSyOBk4rnRlgR/M6uxN61/HlZ2FaS+ElJyGa5fHy MJO0XMZNNPgxtxcqrZtuuPq4Bo1e7uneMMgG8NWCor1HxTBMLsGZV2+M3hyTXq3FZJWI65R455Xv TZXLQzxJmf8KDqRZ6SkuSNdRaAiybF/xXqnx83E8sl+5DwDfrDyNRJSv3FMBiWB1lSr1dLe1UJc5 rvchKwQ7zJfEZ4rh483uwcHbV8F/9o7edqONhoR8FgAUhH34ysv5Ambr+Lll8VdTB+Mpov9Gu9Q3 5NcA8N3U8eQCy8q3TsNLTDQp6pfH7HJWnMUsgiUsC6Moi/N8i0k73OKB1RhxHHQH54YU1a+RI2FN +W9DytRq6zIX+CZBnePVFg+m/Nr/wL7Nk5HCPL4SkoxnI17NV4tsuc2+pqBEfk9ZxS/KMwC7gH+L s0kkcW+p7G/IyWNtbU5yTXM0kWC1rDlUy1z+ZgOrmZZxeu16cqHPk5eKipyb5sVeW9ckrLraXNxa ATsS7S0TBAfp5GOv+22WTEVS3OblFdxiqaF3R8m7y79fVpDyE8O2Ll6MyT9+wPSrg0vO7YbRhvJq dDWUvqH3NlSi4iWZDwC1Jhc4qAOGD+bUpiE/5eGgElj5EvOH6EP5nEcLBuczjS30uXDY/2GYA6SG wbzSv5yWNoy+xDSwfwXTrDmXitfrKpUHgehoQX4GYyGM2uHgLOYjRy0qH3j+P+wEeg5fduKzAQjE XUWD0q3tVFiD1xR5kplyZnD4mFzEKlOuUQt4U7v0NKDv9aomGg06XKA0UvCEFFgbqH6VuhRlK7Gu a7fKsV+0YZw5GGMOxp2DMedgvDkYaw7Gn4Ox2zCeNgfjzMHoczDuHIxZC7qUMz7fpGQR5tmv562I lEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxS FimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZ pCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWR skhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXK ImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimLlEXKImWRskhZpCxSFimL lEXKImWRskhZpCxSFimLlPUgyvJAfmEUIQCIX63sazX+g+7x8Z72d60HRJIpEtH1Bk5X4S5fXzZw g8sGzuBtyj9+YF0sQIVvGG2gplEVkK5v6G2S2K7x9ANArckFrmV1OA/e353ec8YUEYI1Op4qQ9ey K3h7Ebw9B+9U8NYieGsO3q3gzUXw5hy8V8Ebi+CNOXi/gtcXwetteFur4LUSXqg+ukTwFnQQjONx HhcB2gzr9lhYsK2tZ/mnPIqn+bNLzwkc65mA2Tp+7to6EABjyOLiQ4NjlPQHwSAcjSYD1k23X16E o1nMJtMiGSe/xhGbzIqdDRaP4nGQwxeLATjtMUeyNXhu6ba1gj86/63ojKN+UFymQT8+TVLWjdOL begyQ/hjmqGr6doGm4ZZnBbwNfw+HIWn+TJegH+sPHAjw6saLf6HtmRhlsQ5/gYkn8Ff4Ed3TW0F f3Q6wMPmzrgIon7Otln3zevv4Fe21utCwbree1HxC9AgqWTIupwVtsoQ9Oj128ODf/fY/0pgD4IU umKNVcD+ts2BT/51WFaQsZodmQlRARiZpXlymoLcBmdhVvJTM7rOQAnwKQ7G4SV8IbNpaYJNoRKV Na8hBQiADPy8WVUHHH0nG0CVyhoAJP6oIVsNdbWMYSFoOxxavqbdTNuO7q7gj04HJYZMrglOJb4b jh3DEhyr8l5tiVtuiWPojRDS2VjovRKn+EImYMjauZRh8eOLzrM16Ol5MfrE8iIskgEL008fw09s 7dnncQmDBxdBFodRDAaQAeVpcYYfg9O4yKfxIBkmg27FTXF5Hn9qNBEEC4BZF2C2Da6JBcUgf9NY AftlDLkNgv4sGRVJGsSXAFHw2uwle3fy16O93dfB3/b+HRiHrw/2/rF3EBzv/2dvg+m92sEZbqdu zj2hhK6CHjUKixCEsVrWOd47+H5zp2pDoOdFHzzZ+Y+A+edaHLYLVS8mSQSCjPPZqAAEiGdzB382 YF7JaAn0ZJsdvj84qDlwDM7Bssbk8Qes0sgeeMg5I1tQtMG0pi2OO+9fP6PXGA7aDPZR5OxJdq+2 tByz5UjOC/4F+W6zDD5l9acGZ5ojWCJKJOQwjktIJqeno1jq7wLPKtPlGp5UI40vi2B6mk4kYuO4 CPMfVZw/w+/jYBTmCL2uoPMldLOtUkrQkIciaRudZ7M8e5akg9Esip/1kyJ/lhdZkp6aW2fP2eGE 5bPBGRsmIIpJxqIkA/uaZJ+2VjowAl9Rt2HYBV8+hLrdZNt4wZKXqsuDb9bXexK0roxC+Y/Jz1vj KKhGo8bl8W+g9AVRIkpEiSgRJaJElIgSUbonSl9lo4gSUSJKRIkoESWiRJSIElEiSkSJKBElokSU iBJRIkpEiSgRJaJElIgSUSJKRIkoESWiRJSIElEiSkSJKBElokSUiBJRIkpEiSgRJaJElIgSUSJK RIkoESWiRJSIElEiSkSJKBElokSUiBJRIkpEiSgRJaJElIgSUSJKRIkoESWiRJSIElEiSkSJKBEl okSUiBJRIkpE6felpOQaE+i0n1mTC6n6UscvNZmOqSYYE/jZDpPSUdoPnXPolikNLWvFsuQ0pTqm yKyzVVoi+2iZQjGBsvCSJ1vj9TGP4CxLc1acxSyK84KFUZTFeb7FpMxrmJ7ql7RM0Tk4b4RhazVy JKwp/wEpvwbUZS54Ws26SKTc/LX/gX2bJyOFeRv1MZ6NeDVfLbLlNvuaghL5PWUVvyjPYDLNMbfU 2SRquPeWJhZ1TClf6A+TYmFWUceSgECY7y7/vjCrqGNfn1QU8wJem1PUcRenFLUMTPn5zv77973n 7XyZbqQmzLQMV8DuLYC127CegH09D+vM4fUF7KsFsG28piZgv5uHtdt4TV3A7i6AncNrCFh/Htaa w2sKWG8B7BxeS8C687DmHF5bwDoLYOfwlnqz52GNObyl3qwFsHN4S72Z87D6HN5Sb8YC2DZeq9Sb Pg/bRmuVatMk0LhUWxsUM31WMNGIU/6sLK+WZQJWTAgqp3kdf356QBeTaroLUg5+oZSujocpRT0x aGWDZgx0+Wi7BijFsPdCKvFa7E8mowA4zD6BZJI0ii9Ztx8DJ77uxgNgOom2Hc9z/Q0YGy6uSH2L iHJgy3OcFY/nOe0g/sEsyycZ+N847SIrG2ycwOCaBElkcLIbbFXAMDUBqlRRVdYGi/rJtqVI7GYa tA3bW8Ef9TDPtkVqSvbbb4xLq/kIRNhOM2kQc4Fm8DAco8zliICrq+zJ98H+8fHeiZqedKOdnVTG YKvTDZwVATJpXiRym75+/+747dGJXLNsQXfMU8nypMNdTE3c69XJNpsEk78fpTKV8rhMpYzpvPNt 0zfU3Mimo/sr+ENKbYrJXdEBbDOY6A1isMVTTA0q6gRnk8l5Yx0mpuJcljwUQSvOlFShUAvTkmJ3 DIMRQM2m3TALpkUmY3Z0CWZwXkJsMN4UBRD5vUgG0A+A6SBJi5LZZVUkENYNa0fh6JoWe1oJPi8s y7D9FfzRCAvGZR+ID87iwXkcgag+zGDqZqBWhMg3WNpvCMPQ7JbiatIhjybpaa8LYOylnCVZfH0a I6eXwTCEGWG315M0DGNhlYUWhJ4jm334JQvT0xjRqaAi02wSXYKIaljuZLoKh6YltA/FAIlAYQEy 2oCaCtRjx+d0qqy2rFvbBiYu7UId0WPwF0lGLo5TgoFRmJ3GSxhwYTztXM/nV4ANJ6ggxbZJcpcD K7F5C2br7M3+IWY57t1BsJYmNPvxDBdsstqA0CQroH8NzmbpeQ7q7m3u9M+5EheU3YW2bmBTx7Mi vhTeZjXEVTB+/nMKzjabHvTkWv/iaC6HXl8HdhvOHF0vOyvOfqDIgN+6alddVlXzRVXURlWZa6Zd 3buBP7gZIzekeBNcusZhxuEUYNCUgDP48CNH+PODsH/fJB0pMzgS3uGoYTrGudiGAV02AN3rlIPR +rqQIMzYvts/fLP7jts1Y8/WcIbKJkOkmStBDUPrdP7b2O+SJvQE1RdfmKgBrqItO5AQJ//yZUX+ r/vfn/SUam4pz5Iil+kqyrQ3L83fhYZX0eDZv+FXPjTK6HyEKIDi/9/emTa1jXR7/DX+FOINZRLI aLFkaRJ4igRnhhoCuUDmufNMTam8yOAKXso2Werm3s9+z2ltLdttDJgkov+pwgHrdPfp/deLztmT vJX/nMk4tUR4frKXonTqUqNOJedIwHN4P2q2JQjoHhlbe8b/kSIvuWn9e9ybRsb0ajy8ubwqNC4n uC3XtIJfmOuHpx3E/ft/9enL9SSDWd1zetPhSJq5rbjmeQ6m5/Gcx5QeB5Hn+LXGFWSTqIIG5pFf jQO2k1Qjb8BcRc1OkiIvMoxvxvuzxp/h0cmH84bxTQpkJYHGUb/J9DBOdaZxJRx2uxSZFI+s/f3S s5NASblRalnKD47bnQ2URb2TpxKKipHjeHimSp2wnw6Nw17HeDZK69/uR/0FbdYOpMFiflU/isbT m3Er5OVtYVVfq3tBvqG16v6D5/IKPt5EqG4m2uSN/h6r++XR+XHvrnJZbMe8fzNIiF/EN0f9jheY xY26R9kP8wLe46Fp407bQ/LWUt0ubvT1BgSJ/fZOvNdHsewYfSlfTzm1GUmahtpUH45pRb5nikDz ddb/wlvDK9aWY1f4g3RqU17alBdqnFuzOZNyT51Qyo7jZiEng5t+4fDzbvHSMi2VjQfbQkQ1KSIu 4mJk8dnrUkWZzZIYhuMeh+fdPDkJU0qiR8/p875ZsfKs8H5wYbucHtezx6PL+Bj53oXmZ7LpqfdD i+1OyTuS7Jei8Jd56eD+3YbPo9OkviR7+3NVyIfKnMCzYp63DIr0/OLguFGMUhrk6a960i9Hzcso nETNcftK9Mt405f1en8enp2eXogt90IHlYLMdtCP0Vf5nMZeqVc6nluv8MdGcfoQmUuPBPIGtuhk oHF2dnq2XZgwfu7oskFV6oP7xruDo5Pw8PVRQZSvbiQnCEtq+ts3KQS3nvlhd6vftmm4zFTdydKL q/22YVhsttO/TtRaOBZbGIsxFmMsvuNY/Dgjap3xvO6KcWAszh1nxvp4MNjKi5D+74SDZj9KkkpK hGaBd6eHR29vnQOKo0OsdrNrOVGm+2rjAmaDpbNBIC5lDIe8oZxJi7rjL+XFj5vEGQvvGe9phfnn wfHRIcW3wRfYLsZRZPQmRtQfTb++kPZlnLpJw0hzMqElYxx837CkhVXdTA/uC2PJt2+G/Df9NqLf BkM+teBYtqUInHRKKzbOy2halScoDpa3UhHtdr5ylYPNLug44T3Lc81akC3rshbaXe16iOPWrAp/ FAeP9KKl3E3+fXZ00Xh38F6uK9eRpoEHRJOOLStej+CbFKnEzYtObzz9Smv6yZTK7kWfFs9y1G4t qQdRT6/yqxq8+cnfbUuyYjTh6bHKKXLBG8+257LDG4fPjdlvR2Kn45moFqkluW4yMG+Oinr52d2b 0e3S1P9uGU7XNjjVLbvCH7EeiwdKSbW66c1CiiX3o7oSPO6SiFVfKJnRey7Jm7zxhdXZCUEMH2IF QKWTFIpyyBfCKxRtf9jpdb+uPPBbPt9p8VcbGk5ODxvvfzs5rQ6GnWibB4mRNDQ4bl2+G+P6lPG0 1W4864/y0ZMGlbwK/pEam0/tPdkOPzoPX58dnLz5vcqJyE0vYDhPRsqTD+/+aPx1zjIzA6YbpOMd lU96Q2qbx+Ajwute85o7R4IW06HR7Y0nU4NVLYzKrhjSo+tJZCRRkdqf4j1Eni3+m1M/+k+DB4D0 Yac5bWYJyvOIKVYVXHZJIfOv8kJQNIOt6EuzPS22A0lwhSYgIhjJQu16e7X24PgEAvSR15yxUs05 viNV/X0i4OoaUD4mAvSyWs0laqabVXssuC+fitDzIL5cLU3SMWHRl7IY6XY9/Exi1MSOGwdvReP5 l2Eav8oDRc2kTnHVu7zicymR3G7x8fdNbdVo1quVlVCWiDJus/Rr2O4NptzilX10VT3uHb+dTOyJ +vacAC+V0qGEc/pqz+DiLcoEYpXPsyuLPE8k9vcLZVBzM6An3apxH+UOSb/JzW/F2CxpDBDj6cUZ Kb9j9OS4xOXijSSRF+mAEwf44/w/8fgryzsz8vEYFMs3/pqXXylPaXX0o/7AqDalEaZVGFxW3Ld3 HIcmcvqQRwpeHV9HvGpuZiOrNCrMCPtCOKQZrsvlPGHpcLothaV+k3/d+l5RJoyURbRfOCV2+CLe RpICFSYXeTObKnaSOOPfKQqpohyuqAQeRPh/xf/9aqRJvTLpu11L+kYO7RUh7btNIzW3VuGPdBeN WxqfYect0PWkZ/vFR6IjpaNhb2YkXKVje04halp70bT/dngz6Bji8javwK6jCb9A1ByIt4i428jz fi29QRwXgqSdWDc+i7/mBpNmTVKxnm8IfezJ0x1nR5ZLaFPc2Baj/va6I/GVlP5IPGlaDDpWWrnx QJewkERC8W5pL58finmU1tRmvKEiliAxGRWQam0RifaYAUZvBi745l0cfHdX+tZy5SCvZHCRA1ve 7WP+uiD8eya2wmaAb5rW3GZAu75ic8JmQNk3Ax5pmLF5mGEIXGWMFFcEZ1p7ctQyupnES6+ZTvRo Uc8ILCyZfjLpdpotJ6IOtGpnsWjSpQ+5zVt+YZNT7IfQPPHmw9n56Rnvkr/5o1CTDwttOzN7K1LA 58+ldmTX5DORYunKCwTXdtXVYMpy0kR3Fz2++/xou/GLQEnBisCFiYjvgJL269ot8Zx031ha6RUE aK3x3XbyuNvyLbvHPonx+CTGy+Z76SVD+t7Pvl/l5MjxfCue+nnQFfPqs+uo2V2whSPOd6RwZoIM tJgVwFFss/eMdw0cH5kutoOwHYTtIGwHPcJ2UORhO0iL7aDVp5GHbQfFK+94fOpRR7rrbhD6Nfo1 +vXP168fvM2Ljo2OjY7983VsTNjo1+jXT69fY8JGx0bHfoIdGxM2+jX6dTn79dL7P0/+FtOaDgx9 h8/jRN8v3BDKdPD8+PbQRlb7YzYwIV+V4cM76vzc+hZc3mbx2SsyHEI+6W922jsGhy80ldqqh6uO V+GPmbsqnAgpOUgvq7wNXx/9dnhwcVA4IKnz8LHBaee9NR71DmmU5Djkd5HEnJAJS0Mkxzsn7ToP q75llstdfp/1sW2bC6sW/G/mvJhfGuVfXkqCeFVs9dthfuDXvfRymGgDTbwkFkf95O+FrWfgLvur YdZ3MJZTd9gmTNqj0/qPk5oUDccIAxXy++Xf9ow34cHx8embw5e5nG9njaDflr+vZYzFeT7/8OZN 4/xcFnAf3Yp3UPEF28iWGHjYSl71otFKMHpucoP6rWTC2/fEWqgI/1u9jiTwoNh9KfZkkuX/ht0q DfzfSYtiqMUdMcMPyzEzJqHfhqO9JMKVWl/Ndh02A+1k81W/LZt4Zg8bvcF0Y2PBBallwWjEm3zu TXkYGcpDTk3YDJ9964+nvsKbe4y6c1/Kr/MVo+TK+F8jewlwKC6nJMUQnh2c/NaQHVWY2YpQKuhJ JL3oGS9QhqPF7/rlIe5bNQtXHO0VVxyB71b4Y2HRO0HhFU+1mO9lD4qr+4DvguVP5OKXVx8BE5d0 9TQdS98QJR1dHBEn/adxKNeSydf9FlpdyIrdLJbzrZNRsaBhT+EHWtd5GlhdXk5Z/yvsS/sa3mFP xZ70O+xL28D824c0h+HWciqGW8u4tYyzlxXPXnpUZcM++7SKT1+KI03hDKbTimcdtsHHCxizUssn v2e0SjOebUvbnq/S7/Kjh/QYYV54f15YIl7JU853SbFm3Xam8VjjMw4r0WHQYdBh0GHQYX7GDoN7 bugx6DGYYtBh0GEwxaDHoMegx6DHoMeUrMc8FMrWYUVRXGN7/vwlBz3/2BvxMRVfOmFp4SY3mkyT 2ITb3nEc2XxE6bnuZmGzXBLwVulpT/4+9GMdscKsI8w6Shd3bdvz5l08rGyoDrd3Jdky3t59rGHm iZl1zIoms+gYeK5pwaLjD7fouNZG+51NOuLyEC4P4fIQLg/h8hD2RLAngl1E9Bj0GPQY9Bj0GPQY 9Bj0mPL1GFwfQodBh0GHQYdBh4ElNJz8ryMinOHfcoZvOXYdZ/g4w8cZvlQ+q53hW66HM3yc4f9g t4zrM1e02C/jGg1RqS233WpBzKzX2bpTPaO+zT3ZulxuectkWy0rVBAJ5nZ+5NKXJWpszHihM8bs mkJCkmu9prC6mS5cU8jlcE0B1xSwXbH6dkW3i+2Kxx6fcYSEHoMes94eo+EG30/C4L7LUOzKJcwc Lozr0vS/mRRvwSDrfRj6zomkZmLjhOauHNcs05oxab21Z/zfm7Bx+lZq8qazFFLWFkuyR6N2zXD4 4f2sa4aalVr05NotPKgli6KlBokt117YpFLTzwubRdy8FI8KrewBrYpWyhX+eGyb4NR4fW5WHHsa MRX9JKoaW2yEOdohnC5ODQUxLuBCV6vxQBf3xY4T0B/jz8lKu9exRVBK1qbc2bxZN5mOb9pT0Qd6 g+6QVlmdFo9Dc99vUy5294dhq7O734rC0bj3qTnNveMI09aycjwVVIUZ6UihvpgsbtF+Tm+nXrGd pGUZ0e5+pokhNT7b8TakP24XTze1kzxedcbF54Iw4mfT/qg7jqIktsGg2Y9etD6FVNE7RibB3n+m X6R8t69CDmVUR9Mxt06RL/qSXzIdtiljluNW6IeWOxRuz5hcN0fh5JoQYDCNvkyrBoWTopt5XIyW vs+i9TyrQj9J7jjYOyagLeP8+OB9eHF6esy2dxuU26Q+eIjKkvHEi63Jk8mV9L3ULVbImkdZS/bC KXtSyVryhG6JYm5FY/ZExVGGX0S+Y1vxUu7vF6ogQtrGgwTpkylNT4eilVl2vUI/eRuybDF/U8SZ 1XY5F3cQ9czigPKgzkCkZ9dMZdtE00TT/GFN06KmaS1qmndoi3Lka2+RcuQ/tl2qs/mzts6MLb53 G3Vq8VPWqTeYhnGaYXcwkd1piGZxSwtn8tzYiNvkSMptGBIHtpP6oehn6ierHLa4H5vdN+jfntEd jtvsSO3SqIYidHg1HH4sWOh3SJSrMgxbN73raW8QRl9GEVFWlUXT1QS7giia2/eTcKRNvDg0lv77 5ZkhskVyV82JMRgaEfVYSkb2JmDVkkjbVzeDj2FvEvb7zdEo6lR5WaCMOIXORDit82LUFkUt9myj vi2iZ83lknjExO2Aom6OQx4C9uiXaNAMqWrCWA/5IKDusJ6iFYniigPtGKOCL47suVFtfkpHQM8y zcjnuwpp6+A/rpqfopAax8e9maZC62arwh/Sdkk98Cj1ZHdJKMe/ywrePYAvGuPiFla9oYxQ/ti5 5cjYN+S/dzmmHWkzo+ZbgTImocIr493RCb9ZK1prHs5JNajeDCa9ywHV0vVwcLktQm3zZuDsA1rp 0Yj3Jew2JxS5FFdAw4KR+7XZXNhW/kcSD0RPFLJ5XRREHH8jbkzVT8NeZ7t/Q/OBkKpuNfm6A/8t lWdQ87Mo58tBDFAcbDocFUshcGtLwvE01Lu8Gd5MuElJoWpxKL7CIfKa1nPYnIbDbped9FBCoiBf PjSteHvX4E2eKvXC5pgXeElmjOdS+0q+295eSxZ/ULKevSTU5mgcfaJufkNL7qzsZ9P1giUxZKF2 9+POsWfYxjODu0d4/p9Cxwo8P6vkub6cp/7yEVKue8saczQmYmmFra/TaCbrvpn3K6moZnqfX8+k 8ga8mXWQgmxgJ91QxMniIsqijLOxcTO47tGg3fy0k3eKHaPVpo/u545cSAFhgSiA53tZ0WaPXdOs JQlSWCpxGoGG42nUiSeFCbcVWdhNhCkNEqYgu/vdjizgSerPFyUF291vicwLVaXCdE3LkbNOoYSZ qRb9Mm4OLqN4mJTlrUR+xEowZnyWVbHs/HHrY6ztywek5nLnFEmFUgstAC5JeYlU6+MyKT8v80T3 kfTYTjNGw1p4xd5qk7HN+Ga8P2v8GR6dfDhvyPViBXm9JLl9WIS2LYXosqegueH1PtG6+WCzeBKk we/twfnF66OT8M3pyfnp8dHhwcXR6Ul48ftZ4/z302PZdZhr1p1b5jUSSZusPK9R71HNbK4Z2Gtc 67m01nOtxREu26NU7OCOPy/ZN5XT9byK7XmzCzWalcVK7bxx9mfjLF2r5Zt5NFI99pauX6GfPBVW LYm4Ob5s71Gc9P+yqLIQFF3gV4J4f7JqjKcDHleODzl/8RWjwgLHTHyXVQ0xFw5uiJA7vNeZ/pkv BfkaTNxcaDEltnTjMmhfD3nvuTW7aysVkxApFFIh/5Zj0UItXUBnYcU2sqysW49V7XUSOy+FpZqV 5GPBI164SWcFicapZEFrWaR4RrWaf1LHcir8kYM4/VVLbzimSza5M95R2Esv9RU92i1wgOpkN0bn vA7GPlC3JVFxLC2WNbLnw8Vr26w0sLbF2nZubRv5Lta2WNtibfuTJou17U+0tnVNJ11yLVmOOimu p62juJJx0tXqD1tyuPK6UQw3PILlq2VpyejKi+HmJx43tvpNKn0xPRVjTe5Azaq4oGeQwt95AXQH vPUcYlAGrIQ4Z5a+lufG6EosV+RWHiDEO198hnR0eBy+Pf5w/juz9k4sPA/cvc41cZ5436ewJpFf mStqZzn1Cn/c6WpHsgKYvdRhWfJFCouPjzYIOIjqe3vmS4NfXOwLT8e9cNCcTscT+u7580Km16bJ fdKupcRsbKayQvTv3j+7+81e/LrOosURUkNqSA2pITWkhtSQGlJDakgNqSE1pIbUkBpSQ2pIDakh NaSG1JAaUkNqSA2pITWkhtSQGlJDakgNqSE1pIbUkBpSQ2pIDakhNaSG1JAaUkNqSO1Jpeaa93+h rF6hn1RZEfjLgK2/93vT5DWyghuo/GnRd9pKJg0sNk/BH5kXFE4gtU2QF4LvB7LEbuIUbJFkkNh6 yIwXXPWuZXdlJJG8+reaI7Ri0GCjGPvghjLCXltSF2XxF3KgwORX7dKiaraGcR5m3q9LH92rED27 wh+ZanNeB+lpsKhY8udsaj1VZBxNoqm5WMn42X20rHNV1/17F37ddzfkv7z4/UUq+I1n3Bb2ZHdx LyXBB6TI1Z17wRtHzU40pj/GXBS9TsGFl+XXZhzIPaxO6zWuFSlK+stJzGgUamY1qQXWNiR1YGwD xjaKxjaocfhd2NrYhq2NNBxsbfxcycLWxk9ka2NFO5LUUto02o/j5MJWbyr1A8mspClbh4DByBVT g8FITQ1Gzq5B7+9px7Y9t8If918/B7R+TtYNc9ZYYodWVWNwNbyOJoU1u19bl41Gy6QlvJn6mREO B4T+nWgyHQ+/Sjgy94xYJY2Ny3M4YJOPdr3C2JLsXnTGX8c3BVsygS0tzG6RzHzbDCIawSZXN9PO 8POMTOxBL9M9FYrNQBZ1zyKYq4/E/Zxt16g6axsbh1Hr5rIaG6s8bLz+8Ft4cXbwprGTRmc70paJ zTok9kdbzfbHaNCZUeOl8eCAs8/n85BICI9vfoV+ZNfWSUuiODfnnQvcSdZNfTnH9m46wvwN/dIL B4evxdKsIO6ZKnE2cSl6R0Hc4uoUTgZV8rHRoRlHD8NP0TiPsWhwqJ07UOEyYlFp60pawDvJ1tlL Yzhgx2iJQzv+c29Iy/rhQMwBcj8sRMCe8kRD4yRiq0DD3oKczFkI4hFACkirgGdDHg6GPUq0R2vx yVQaFZQVsKhErTr7/ZMkKdqtJDOt3v1j9Vasp3bBncnXQXs0Hn5aoaZSUW7OVi2o8IcY+IvlZCQl VZ0pvm1ZrXy9axVauuW60tChcpUiy8ccmGWDIw8ptYnw4Dn39XZWzi8W1Prdk5cN896jwded+7Vx P3EFmDbH4bh3qW4Z7AN8pr1J4aR9KPseDYhn19sznY7m1MNtby02vOy6mZocZmma6nrT4big6YyW syLz43UiwZsjtlOpsd3bGYU2Nu6uac1OG9Xm68ZZ+PrPo3MeKqvGVnoMkKbb7/TDQYdnU3nVUZs5 C1CX9hJD10n512k2rSdeb9LUOy3efZVStJO9ZPE09wHJG61H5+Hp+8aJVAu3R+Ymu+fx7mtsgG4u QKGmZEmjSs/THS7HadZNa85muHAQ70vjvsMbv9w2jGexU6frDo1Fo0/TcHrFkYcjZiZembOHpzzx ZWIJWk35O6aqoFYRngJmw3yMvrLDSfYcWY3TFUHC2Dtv0UMVLzoLehZo88HRLwlrVIVT1czDZWZN ncgjzufVmLI/6TGQOg6VL5vee5Y4JB4lEVJkE1p29rq9dpXdaBY8Hy0QSlIVCSx4zEnZFUe9X8hJ vDLe80rl4DD8o/FXaJ8cHjf+bByH8baflfOl7AdqTVEm5jiTQthKwpw3jt/u7qd5CK3JtMVLn78p 5n/yNQ/vRMQ1PY4mN9dTioDj2d0vuCR20031RGhz5hzIk8zN31q7y32a3lLjNL87gTqxpT3Dpabr ZhzNbfJf4vPXeIXIY+WWiFA43WL7nhQrCUgt38uTfmBcd9LcKyZ9r8EosCpOeohpbC5MnqqJKqjK Gdnhk0fquVwrKUMXGOOeQ9kaVVgS3qh+iZ22iRKpdzpt2yw6bE5KaUGz83wS5DOMjBLSevDrdoUP NDMN/HrqmGGTC+HbN2OTE+f/RXPPvOc1jk7+PMhH0DVF4hcP8F+9O/hvGijOGdYopt396+kN976/ e/+8uJ5+5F/njvR9/8HNyqU6ddeIAj4NkX5+TUA1fQcbczK9yd/mPwUpgY5ilucbDSQySTGMcak4 uxcljCp9J3T3zcRzAAuI5WCN1mG1mbJfeHUiX7a5s9oWLmmQ6rKwlyqd65qXws6SKKR14h31e3iS /bzS51sNdbNWb89daavMc12zwh95F6G/kksInOarPePdwdFJePj6iHsJf7W/N3tRQgq6toioTOOD 0lSk0/oy+ZuC/UOIHHui7dOKVZ44KRRV/a3ys4hFwbxbgiX7y6Ycpp6c0JOW2w+NS1pBqmJecPYf dM2Wg7N/nP0vOvvnxmE/vbP/H37479fyw5AFB73FY3EjO8+5/RiUrx5t0MioiFQEV8cPBSni+rLT dPVBsp8cXolDuIJbAqkVJ4fUWTOhhkpoxjDOQfhAUxzdVGduQfj1+Pi5yxtGW4moITwQUmhZ0I+P +foidR4nhtd8Yvms27pXbMkJznw5iGj3jJmbIX6QzNX8eHbFSU95Ok7Pf/mDxKTUgrhwPl/1rqkN xEkY7eZ02KfFcHvYH9GIFzYHHVKifcXnvuxCnn25GdVuS4xt3Q4NsZscuZyLIL/m0s3UYuRemK2Q 64OE6L+ZM+/Zs0bg52Pjpwf8fOr42ezWuzXgJ/Bz8dXTetd5evgJ+gR9gj6/O306vO5LCW82z3m/ J4ntAj6CWkGtd6HWOqhVB2qFd2JQq5Ja4ZwY1KqRgqBWUCuotdTU6oNadaBWH9QKalVRax3UCmrV R0FQK6gV1Fpqag1ArTpQaxPUCmpVUWsAagW16qMgqBXUCmotNbVaq5n+BLaWHFvbwFZgqwpbW8BW YKs+CgJbga3A1nJjqwVs1QFbI2ArsFWFrR1gK7BVHwWBrcBWYGu5sdUGtj59bPVNeLACtiqxFR6s gK0aKQhsBbYCW8uNrQ6wVQdstYGtwNbF2OqLwQDYCmzVREFgK7AV2FpubK0BW58+trabuCQAbFVg a7uJSwLAVo0UBLYCW4Gt5cZWuLrSAVtbuCQAbFViKy4JAFs1UhDYCmwFtpYbW+EiSwtsxSUBYKsK W1u4JABs1UhBYCuwFdhabmyFjywtsBWeXYGtSmyFZ1dgq0YKAluBrcDWcmMrnGRpga1w7QpsVWIr XLsCWzVSENgKbAW2lhtb4SVLC2yFb1dgqxJb4dsV2KqRgsBWYCuwtdTYasNLlhbYCueuwFYltsK5 K7BVIwWBrcBWYGu5sRVesrTAVjh3BbYqsRXOXYGtGikIbAW2AlvLja3wkqUFtsJuK7BVia2w2wps 1UhBYCuwFdhabmyFlywdsLUNu63AViW2wm4rsFUjBYGtwFZga7mxFV6ytMBW2G0FtqqwtQ27rcBW jRQEtgJbga3lxlZ4ydICW2G3FdiqxFbYbQW2aqQgsBXYCmwtN7bCS5YW2Aq7rcBWJbbCbiuwVSMF ga3AVmBrubEVXrK0wFbYbQW2KrEVdluBrRopCGwFtgJby42t8JKlBbbCbiuwVYmtsNsKbNVIQWAr sBXYWm5shZcsLbAVdluBrUpshd1WYKtGCgJbga3A1lJjqwMvWVpgK+y2AluV2Aq7rcBWjRQEtgJb ga3lxlZ4ydIBWzuw2wpsVWIr7LYCWzVSENgKbAW2lhtb4SVLC2yF3VZgqwpbO7DbCmzVSEFgK7AV 2FpubIWXLC2wFXZbga1KbIXdVmCrRgoCW4GtwNZyYyu8ZGmBrbDbCmxVYivstgJbNVIQ2ApsBbaW G1vhJUsLbIXdVmCrElthtxXYqpGCwFZgK7C13NgKL1laYCvstgJbldgKu63AVo0UBLYCW4Gt5cZW eMnSAlthtxXYqsRW2G0FtmqkILD10bAV+An8vBN+wtuVFvjZBX4CP1X4GQE/gZ/6KAj8xK4psLXc 2ApvVzpga2QBW4GtCmyNTGArsFUfBYGtwFZga6mxtQZvV1pgqwNsBbaqsNUGtgJb9VEQ2ApsBbaW G1vh7UoLbHWBrcBWFbbWgK3AVn0UBLYCW4Gt5cZWeLvSAlvrwFZgqwpbPWArsFUfBYGtwFZga7mx Fd6utMDWANgKbFVhqw9sBbbqoyCwFdgKbC03tsLblRbY2gK2AltV2NoEtgJb9VEQ2ApsBbaWG1vh 7UoLbO0AW4GtKmxtA1uBrfooCGwFtgJby42t8HalBbbCbiuwVYmtsNsKbNVIQWArsBXYWm5shbcr HbC1C7utwFYVtnZhtxXYqpGCwFZgK7C13NgKL1laYCvstgJbldgKu63AVo0UBLYCW4Gt5cZWeMnS AlthtxXYqsRW2G0FtmqkILAV2ApsLTW2uvCSpQW2wm4rsFWJrbDbCmzVSEFgK7AV2FpubIWXLC2w FXZbga1KbIXdVmCrRgoCW4GtwNZyYyu8ZGmBrbDbCmxVYivstgJbNVIQ2ApsBbaWG1vhJUsLbIXd VmCrElthtxXYqpGCwFZgK7C13NgKL1laYCvstgJbldgKu63AVo0UBLYCW4Gt5cZWeMnSAFs7Juy2 AlsV2NoxYbcV2KqRgsBWYCuwtdzYCi9ZWmAr7LYCW5XYCrutwFaNFAS2AluBreXGVnjJ0gJbYbcV 2KrEVthtBbZqpCCwFdgKbC03tsJLlhbYCrutwFYltsJuK7BVIwWBrcBWYGu5sRVesrTAVthtBbYq sRV2W4GtGikIbAW2AltLja0evGRpga2w2wpsVWIr7LYCWzVSENgKbAW2lhtb4SXryWNry6TqBrYC WxdhKzUOswtsBbbqoyCwFdgKbC03tsJLlhbYagNbga0KbLUsYCuwVR8Fga3AVmBrubEVXrK0wNYa sBXYqsJWB9gKbNVHQWArsBXYWm5shZcsLbDVA7YCW1XY6gJbga36KAhsBbYCW8uNrfCSpQW2+sBW YKsKW+vAVmCrPgoCW4GtwNZyYyu8ZGmBrU1gK7BVha0BsBXYqo+CwFZgK7C13NgKL1laYGsb2Aps VWFrC9gKbNVHQWArsBXYWm5shZcsLbA1ArYCW1XY2gG2Alv1URDYCmwFtpYbW+ElSwdstWG3Fdiq xFbYbQW2aqQgsBXYCmwtNbbW4SVLC2yF3VZgqwpbbdhtBbZqpCCwFdgKbC03tsJLlhbYCrutwFYl tsJuK7BVIwWBrcBWYGu5sRVesrTAVthtBbYqsRV2W4GtGikIbAW2AlvLja3wkqUFtsJuK7BVia2w 2wps1UhBYCuwFdhabmyFlywtsBV2W4GtSmyF3VZgq0YKAluBrcDWcmMrvGRpga2w2wpsVWIr7LYC WzVSENgKbAW2lhtb4SVLC2yF3VZgqxJbYbcV2KqRgsBWYCuwtdzYCi9ZOmCrA7utwFYltsJuK7BV IwWBrcBWYGu5sRVesrTAVthtBbaqsNWB3VZgq0YKAluBrcDWcmMrvGRpga2w2wpsVWIr7LYCWzVS ENgKbAW2lhpbfXjJ0gJbYbcV2KrEVthtBbZqpCCwFdgKbC03tsJLlhbYCrutwFYltsJuK7BVIwWB rcBWYGu5sRVesrTAVthtBbYqsRV2W4GtGikIbAW2AlvLja3wkqUFtsJuK7BVia2w2wps1UhBYCuw FdhabmyFlywtsBV2W4GtSmyF3VZgq0YKAluBrcDWcmMrvGTpgK012G0FtiqxFXZbga0aKQhsBbYC W8uNrfCSpQW2wm4rsFWFrTXYbQW2aqQgsBXYCmwtN7bCS5YW2Aq7rcBWJbbCbiuwVSMFga3AVmBr ubEVXrK0wFbYbQW2KrEVdluBrRopCGwFtgJby42t8JKlBbbCbiuwVYmtsNsKbNVIQWArsBXYWmps DeAlSwtshd1WYKsSW2G3FdiqkYLAVmArsLXc2AovWVpgK+y2AluV2Aq7rcBWjRQEtgJbga3lxlZ4 ydICW2G3FdiqxFbYbQW2aqQgsBXYCmwtN7bCS5YO2OrCbiuwVYmtsNsKbNVIQWArsBXYWm5shZcs LbAVdluBrSpsdWG3FdiqkYLAVmArsLXc2AovWVpgK+y2AluV2Aq7rcBWjRQEtgJbga3lxlZ4ydIC W2G3FdiqxFbYbQW2aqQgsBXYCmwtN7bCS5YW2Aq7rcBWJbbCbiuwVSMFga3AVmBrubEVXrK0wFbY bQW2KrEVdluBrRopCGwFtgJby42t8JKlBbbCbiuwVYmtsNsKbNVIQWArsBXYWmpstUy4ydKCW2G4 Fdyq5FYYbgW3aqQguBXcCm4tObfCT5YO3OrBciu4VcmtsNwKbtVIQXAruBXcWnJuhaMsLbgVplvB rSpu9WC6FdyqkYLgVnAruLXk3ApPWVpwK2y3gluV3ArbreBWjRQEt4Jbwa0l51a4ytKCW2G8Fdyq 5FYYbwW3aqQguBXcCm4tObfCV5YW3ArrreBWJbfCeiu4VSMFwa3gVnBrybkVzrI04FbLa4Fbwa2L udXymuBWcKs+CoJbwa3g1pJzK7xlacGtHXAruFXFrW1wK7hVHwXBreBWcGvJuRXusrTg1i64Fdyq 4tYI3Apu1UdBcCu4Fdxacm6FvywduLVugVvBrQpurZvgVnCrPgqCW8Gt4NZyc6sFf1lacKsDbgW3 qrjVBreCW/VRENwKbgW3lpxb4S9LC251wa3gVhW31sCt4FZ9FAS3glvBrSXnVvjL0oJb6+BWcKuK Wz1wK7hVHwXBreBWcGvJuRX+srTg1gDcCm5VcasPbgW36qMguBXcCm4tObfCX5YW3Ar7reBWJbfC fiu4VSMFwa3gVnBrybkV/rK04FbYbwW3KrkV9lvBrRopCG4Ft4JbS86t8JelBbfCfiu4VcmtsN8K btVIQXAruBXcWnJuhb8sHbjVh/1WcKuKW33YbwW3aqQguBXcCm4tObfCX5YW3Ar7reBWJbfCfiu4 VSMFwa3gVnBrybkV/rK04FbYbwW3KrkV9lvBrRopCG4Ft4Jby82tNvxlacGtsN8KblVyK+y3gls1 UhDcCm4Ft5acW+EvSwtuhf1WcKuSW2G/FdyqkYLgVnAruLXk3Ap/WVpwK+y3gluV3Ar7reBWjRQE t4Jbwa0l51b4y9KCW2G/Fdyq5FbYbwW3aqQguBXcCm4tObfCX5YW3Ar7reBWJbfCfiu4VSMFwa3g VnBrybkV/rJ04NYA9lvBrSpuDWC/FdyqkYLgVnAruLXk3Ap/WVpwK+y3gluV3Ar7reBWjRQEt4Jb y8ut9WJaOeO1IpFIPeJrX+3x3isqhJvIGI6mvT4VescY3kz3RfK9QW9Kydt+rUI/G6uBJvEJc+bd +BJvTz15ugyiboRdUdDlQrrkxoFdUdClRgqCLkGXj0qXtyAXXvzRArmwoQfkUiIXNvSAXBopCOQC cv1I5MI7K08fubom3lkBcimQixoH3lkBcmmkIJALyPWoyPWgc82gQj8byQW/zerkujl6N+xExpZR PT8+eB9enJ4eh//14ejNH9/yv88aB4enJ8d/bctzrx2Y4nx03ObZjJQi3ggnXwftuXNSa+ZkNBVc jI2CFfZWM4pu1YKgwh/5ZGC5phXnTkTElLf5Njw6P29cVFMi6l43Lyc7xrvD1+HJ6flfJ2/kfK07 OpdmnjiGgjyVOAf499nRRePdwftCCIKEJAiLvD08uDjgaPMIOnn74H9dBsq4RNNim3yddKLR5Jeb Qe8L/9GmCXd3GvVH181p9OL8V9+u+PbGRfj+vPHh8JQq/6/zNwfHx+H5X+9enxJmpX+fHLxryH+d /Xa+ra7LhQ0wrVJ167y1ml3L5mKx8wbXGI/fULutStdIXctbX0cJLGrgohqoHqoGpUl90zQe3P5v jTTO48Zh1Lq5rBrHh9QHDxuvP/wWHpz8tZOKUYVeDy/vkq9fbibjX3qD9vVNJ/ql1ZtOfonjeHH1 q0Oobm8sETBOhsbkpn1ldHmEHI6NTm9MwxbjZWWDhn510DXVhmOaFfpJLmNwOS+6kLFglFGuTldq do5tuxX+yLovz1mFSYme0miaTB3ZgmvUvIwm8jLFdrhai8+p1XRoVuqPwkH0ZfpSkqVpLl56dUZL V15RENUjrLyw8lq08uLG0cHKa90rr8Bm+I2uqb4FQS1sKv8jiQcZBG7mdVEQcWJONIzqp2Gvs92/ mUZfhFR1q8kDBv8tlWdQ85ctMLgrcrDpcAauA7e2bMUzHEx7lzfDmwm3KClULQ7FY5TIa1rP+eoo Wxy9fGharnizw+AtuSp1wubYeLadZsZ4LrWv5Lvt7bVk8Qcl6y1bKG6OxtEn6uU3NM1lZT+brhcs iSELdfuaNfD8rJLn+nKe+stHSDlZ0d51tRz4Zt6vpKKa6X1+PZPKG/Bm1kEKsoGddEMRJ4uLKIsy 1FLaNNqP4+RCgh2pH2RJFIZq1zRrScytNncfGmqG42nUCRcs8UnYTYS7n3kdSkF45SoLeJKe82VG wXb3WyKXFHZmKWk5ch4p1ISnA15Dj3lhWy1ukpC8lchny+fPsiqWnT9ufYy1ffmA1FzuhSKpUGqK hW1ykvISqdbHZVJ+XuaJ7iPpsZ1mjLdbrqJmJx3EjG/G+7PGn+HRyYfzhlwvVpDXS5Lbh0Vo21KI 7nC4YBy9T7RuPqosnu1olHt7cH7x+ugkfHN6cn56fETry6PTk/Di97PG+e+nx4dSk3fNer5PtngC I5G0ycoT2M1AOYXNb2mshdWD70fj/w9QSwcInWCPuGiNAAB+hQsAUEsDBAoAAAAAAINkMkEAAAAA AAAAAAAAAAAJABAAX19NQUNPU1gvVVgMAJZOWFCWTlhQAMHkYVBLAwQUAAgACADYYTJBAAAAAAAA AAAAAAAAKAAQAF9fTUFDT1NYLy5fc3RlcHNfdW50aWxfbWRiX2Vudl9jbG9zZS50eHRVWAwAdE5Y UJdJWFAAweRhY2AVY2dgYmDwTUxW8A9WiFCAApAYAycQGwHxPiAG8T8wEAUcQ0KCoEyQjjNArIKm hAkqzs3AIJecn6uXm5hclJ+bWJJarFecmpOaXJKZnxeUmJeeClV/HYglGRik0dSWZRZnJuWkBgE1 ABWYWJiZ6YIIK9PqagMdBQsDE0PDWh2FakNDIxMdBTNL89paAFBLBwhmeGrxjgAAAPAAAABQSwEC FQMUAAgACADYYTJBnWCPuGiNAAB+hQsAHQAMAAAAAAAAAABApIEAAAAAc3RlcHNfdW50aWxfbWRi X2Vudl9jbG9zZS50eHRVWAgAdE5YUJdJWFBQSwECFQMKAAAAAACDZDJBAAAAAAAAAAAAAAAACQAM AAAAAAAAAABA/UHDjQAAX19NQUNPU1gvVVgIAJZOWFCWTlhQUEsBAhUDFAAIAAgA2GEyQWZ4avGO AAAA8AAAACgADAAAAAAAAAAAQKSB+o0AAF9fTUFDT1NYLy5fc3RlcHNfdW50aWxfbWRiX2Vudl9j bG9zZS50eHRVWAgAdE5YUJdJWFBQSwUGAAAAAAMAAwD8AAAA7o4AAAAA --Apple-Mail=_4DD4B69C-B9EE-427A-A616-563271CEB5BB Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=iso-8859-1 -- Marco --Apple-Mail=_4DD4B69C-B9EE-427A-A616-563271CEB5BB--

1 0

Re: (ITS#7363) libmdb should use POSIX semaphores on non-apple BSD systems too.
by Hallvard B Furuseth 17 Sep '12

17 Sep '12

Oops, part of last message was for ITS#7364.

1 0

Re: (ITS#7364) mdb: clean up POSIX semaphores on environment close.
by h.b.furuseth＠usit.uio.no 17 Sep '12

17 Sep '12

libmdb now removes semaphores more thoroughly - at init, and after ITS#7377 at exit failure. Anything else - like SysV semaphores - can wait until someone shows up who cares about it. [Re-sent after originally sending to wrong ITS: #7363] -- Hallvard

1 0

Re: (ITS#7363) libmdb should use POSIX semaphores on non-apple BSD systems too.
by h.b.furuseth＠usit.uio.no 17 Sep '12

17 Sep '12

I've cleaned up preprocessor names, and remove semaphores more thoroughly - at init, and after ITS#7377 at at exit failure. Anything else - like SysV semaphores - can wait until someone shows up who cares about it. -- Hallvard

1 0

(ITS#7393) slapd crash when changing an attribute name to an existing name
by ddick＠cpan.org 17 Sep '12

17 Sep '12

Full_Name: David Dick Version: 2.4.26 OS: Fedora 16 URL: Submission from: (NULL) (124.148.129.18) When changing the NAME of an attribute to the name of an existing attribute, the slapd process crashes. The following set of statements in ldif format will crash the server; The cn={12} was chosen as the next available schema index and may need to be adjusted appropriately. dn: cn={12}crashme,cn=schema,cn=config changetype: add objectClass: olcSchemaConfig cn: {12}crashme olcAttributeTypes: {0}( 1.3.6.1.4.1.70001.2.1 NAME 'SmtpHost' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) dn: cn={12}crashme,cn=schema,cn=config changetype: modify replace: olcAttributeTypes olcAttributeTypes: {0}( 1.3.6.1.4.1.70001.2.1 NAME 'MailHost' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

1 0

Re: (ITS#7388) [PATCH] MozNSS: ignore certdb 'sql:' prefix when checking directory existence
by jvcelak＠redhat.com 16 Sep '12

16 Sep '12

Hello Howard, > The patch looks syntactically correct. But SQL, seriously? As if TLS > handshakes weren't slow enough already, you want to slow them down > even > further by looking up certs in an SQL database? this is nothing new. Mozilla NSS supports SQL backend (SQLite) for storing certificates since 3.12 (== Firefox 3) I think. The reason, why the new format was introduced is mainly because of problems with accesing the database from multiple processes. It is described on the following page in a great detail: https://wiki.mozilla.org/NSS_Shared_DB I can't tell anything about the performance because I haven't tried. > Aside from questioning the wisdom of such an inefficient approach, > there are > other philosophical problems with this patch. It seems to be just the > latest > in a continuing stream of one-off patches. Are we going to get yet > another > special case patch from you guys when some other new certDB type > comes along? One Fedora user e-mailed me recently and wanted my help with setting the OpenLDAP server to use the database in "new" sql format. This patch is the result. I do not think that any other backend except the legacy and this one is supported. Otherwise, I would write the patch more generally. I will check with MozNSS people and let you know. > This approach is unmaintainable and does nothing to inspire > confidence in the > quality of thinking going into this code. > > You're working on a security library. We expect a lot better thought > to go > into these things. I fully understand and expect that you will have some feedback on our patches - which is happening right now. MozNSS crypto backend works quite fine, but there are still some problems in certain corner situations. The backend is not as mature as OpenSSL one. I'm really trying to fix them all and to make OpenLDAP a better piece of software. Jan

1 0

Re: (ITS#7392) ACL a_dn.a_self is skipped in case of "acl_mask: to all values ..."
by daniel＠pluta.biz 16 Sep '12

16 Sep '12

Hi, applying the patch linked below both previously mentioned operations produce the following log Operation 1: log level 128 ========================== 505573f8 => access_allowed: delete access to "cn=group,dc=example,dc=org" "owner" requested 505573f8 => dn: [1] dc=example,dc=org 505573f8 => dn: [2] dc=example,dc=org 505573f8 => acl_get: [2] matched 505573f8 => acl_get: [2] attr owner 505573f8 => acl_mask: access to entry "cn=group,dc=example,dc=org", attr "owner" requested 505573f8 => acl_mask: to value by "uid=user,dc=example,dc=org", (=0) 505573f8 <= check a_dn_at: owner 505573f8 <= acl_mask: [1] applying read(=rscxd) (stop) 505573f8 <= acl_mask: [1] mask: read(=rscxd) 505573f8 => slap_access_allowed: delete access denied by read(=rscxd) 505573f8 => access_allowed: no more rules 505573f8 => access_allowed: result not in cache (owner) Operation 2: log level 128 ========================== 505573f8 => access_allowed: delete access to "cn=group,dc=example,dc=org" "owner" requested 505573f8 => dn: [1] dc=example,dc=org 505573f8 => dn: [2] dc=example,dc=org 505573f8 => acl_get: [2] matched 505573f8 => acl_get: [2] attr owner 505573f8 => acl_mask: access to entry "cn=group,dc=example,dc=org", attr "owner" requested 505573f8 => acl_mask: to all values by "uid=user,dc=example,dc=org", (=0) 505573f8 => acl_mask: to self, attr "owner" 505573f8 <= check a_dn_at: owner 505573f8 <= acl_mask: [1] applying read(=rscxd) (stop) 505573f8 <= acl_mask: [1] mask: read(=rscxd) 505573f8 => slap_access_allowed: delete access denied by read(=rscxd) 505573f8 => access_allowed: no more rules ftp://ftp.openldap.org/incoming/Daniel-Pluta-120916.patch DISCLAIMER: It's not heavyly tested. I don't know whether the patch causes negative sideeffects elsewhere.

1 0

(ITS#7392) ACL a_dn.a_self is skipped in case of "acl_mask: to all values ..."
by daniel＠pluta.biz 15 Sep '12

15 Sep '12

Full_Name: Daniel Pluta Version: Linux OS: OPENLDAP_REL_ENG_2_4 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (84.167.49.115) Hi, given this (simplyfied and thus quite strange looking) sample acl statement: access to dn.one="dc=example,dc=org" attrs=@groupOfNames by dnattr=owner selfread by users write the first by clause ("by dnattr=owner selfread") is only honored in case of an access "to value", like for example: #Operation 1 (log see below): dn: cn=group,dc=example,dc=org changetype: modify delete: owner owner: uid=user,dc=example,dc=org - but is skipped in case of an access "to all values", like for example: #Operation 2 (log see below): dn: cn=group,dc=example,dc=org changetype: modify delete: owner - In case (hopefully) this is not the intended behavior. The following "comment-patch" could be the place to start further investigations. Thanks a lot. diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c index 4b72342..89cb9ae 100644 --- a/servers/slapd/acl.c +++ b/servers/slapd/acl.c @@ -1170,7 +1170,14 @@ slap_acl_mask( !is_at_syntax( desc->ad_type, SLAPD_NAMEUID_SYNTAX )) continue; /* check if the target is an attribute. */ - if ( val == NULL ) continue; + if ( val == NULL ) { + /* check all values whether a_dn.a_self is contained */ + + /* if a_dn.a_self is contained: implicitly set val to a_dn.a_self */ + + /* else: continue */ + continue; + } /* a DN must be present */ if ( BER_BVISEMPTY( &op->o_ndn ) ) { Operation 1: log level 128 ========================== 5054ed13 => access_allowed: result not in cache (owner) 5054ed13 => access_allowed: delete access to "cn=group,dc=example,dc=org" "owner" requested 5054ed13 => dn: [1] dc=example,dc=org 5054ed13 => dn: [2] dc=example,dc=org 5054ed13 => acl_get: [2] matched 5054ed13 => acl_get: [2] attr owner 5054ed13 => acl_mask: access to entry "cn=group,dc=example,dc=org", attr "owner" requested 5054ed13 => acl_mask: to value by "uid=user,dc=example,dc=org", (=0) 5054ed13 <= check a_dn_at: owner 5054ed13 <= acl_mask: [1] applying read(=rscxd) (stop) 5054ed13 <= acl_mask: [1] mask: read(=rscxd) 5054ed13 => slap_access_allowed: delete access denied by read(=rscxd) 5054ed13 => access_allowed: no more rules Operation 2: log level 128 ========================== 5054ed29 => access_allowed: result not in cache (owner) 5054ed29 => access_allowed: delete access to "cn=group,dc=example,dc=org" "owner" requested 5054ed29 => dn: [1] dc=example,dc=org 5054ed29 => dn: [2] dc=example,dc=org 5054ed29 => acl_get: [2] matched 5054ed29 => acl_get: [2] attr owner 5054ed29 => acl_mask: access to entry "cn=group,dc=example,dc=org", attr "owner" requested 5054ed29 => acl_mask: to all values by "uid=user,dc=example,dc=org", (=0) 5054ed29 <= check a_dn_pat: users 5054ed29 <= acl_mask: [2] applying write(=wrscxd) (stop) 5054ed29 <= acl_mask: [2] mask: write(=wrscxd) 5054ed29 => slap_access_allowed: delete access granted by write(=wrscxd) 5054ed29 => access_allowed: delete access granted by write(=wrscxd) 5054ed29 acl: internal mod entryCSN: modify access granted 5054ed29 acl: internal mod modifiersName: modify access granted 5054ed29 acl: internal mod modifyTimestamp: modify access granted slapd.conf: =========== include /tmp/example/core.schema include /tmp/example/cosine.schema include /tmp/example/sociopath.schema pidfile /tmp/example/run/slapd.pid argsfile /tmp/example/run/slapd.args access to dn.base="" by * read access to dn.base="cn=Subschema" by * read access to * by self write by * read database mdb suffix "dc=example,dc=org" rootdn "cn=Manager,dc=example,dc=org" rootpw secret directory /tmp/example/data index objectClass eq add_content_acl on access to dn.base="dc=example,dc=org" attrs=children by users write #simplyfied, thus probably strange looking, but nevertheless valid: access to dn.one="dc=example,dc=org" attrs=@groupOfNames by dnattr=owner selfread by users write access to dn.one="dc=example,dc=org" by self read by users read by anonymous auth

1 0

Re: (ITS#7391) mdb_db_open: database "cn=accesslog" cannot be opened, err 13. Restore from backup!
by michael＠stroeder.com 14 Sep '12

14 Sep '12

Howard Chu wrote: > Thanks, fixed in master. Seems to be fixed in RE24 f5231cc6175be6c591345b6c4c069ba2859a1f0a Thanks. Ciao, Michael.

1 0

Re: (ITS#7391) mdb_db_open: database "cn=accesslog" cannot be opened, err 13. Restore from backup!
by hyc＠symas.com 14 Sep '12

14 Sep '12

michael(a)stroeder.com wrote: > Full_Name: > Version: > OS: RE24 42baa43cb92bc52081d24d925a584dd430437d75 > URL: > Submission from: (NULL) (79.227.150.68) > > > With recent fixes for mdb in RE24 42baa43cb92bc52081d24d925a584dd430437d75 > slapcat does not work anymore while slapd can access the DB quite well: Thanks, fixed in master. > > 50537559 mdb_db_open: database "cn=accesslog" cannot be opened, err 13. Restore > from backup! > 50537559 backend_startup_one (type=mdb, suffix="cn=accesslog"): bi_db_open > failed! (13) > slap_startup failed > /home/michael/backups/openldap2.4-stroeder.de-accesslog-2012-09-14T20:20:09.ldif.bz2: > ok > 50537559 mdb_db_open: database "dc=stroeder,dc=de" cannot be opened, err 13. > Restore from backup! > 50537559 backend_startup_one (type=mdb, suffix="dc=stroeder,dc=de"): bi_db_open > failed! (13) > slap_startup failed > /home/michael/backups/openldap2.4-stroeder.de-daten-2012-09-14T20:20:09.ldif.bz2: > ok > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7391) mdb_db_open: database "cn=accesslog" cannot be opened, err 13. Restore from backup!
by michael＠stroeder.com 14 Sep '12

14 Sep '12

Full_Name: Version: OS: RE24 42baa43cb92bc52081d24d925a584dd430437d75 URL: Submission from: (NULL) (79.227.150.68) With recent fixes for mdb in RE24 42baa43cb92bc52081d24d925a584dd430437d75 slapcat does not work anymore while slapd can access the DB quite well: 50537559 mdb_db_open: database "cn=accesslog" cannot be opened, err 13. Restore from backup! 50537559 backend_startup_one (type=mdb, suffix="cn=accesslog"): bi_db_open failed! (13) slap_startup failed /home/michael/backups/openldap2.4-stroeder.de-accesslog-2012-09-14T20:20:09.ldif.bz2: ok 50537559 mdb_db_open: database "dc=stroeder,dc=de" cannot be opened, err 13. Restore from backup! 50537559 backend_startup_one (type=mdb, suffix="dc=stroeder,dc=de"): bi_db_open failed! (13) slap_startup failed /home/michael/backups/openldap2.4-stroeder.de-daten-2012-09-14T20:20:09.ldif.bz2: ok

1 0

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd
by michael＠stroeder.com 14 Sep '12

14 Sep '12

hyc(a)symas.com wrote: > Fixed in git master. I've retested with git master and it works. Thanks! Ciao, Michael.

1 0

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd
by hyc＠symas.com 14 Sep '12

14 Sep '12

Michael Ströder wrote: > hyc(a)symas.com wrote: >> michael(a)stroeder.com wrote: >>> This is a multi-part message in MIME format. >>> --------------030803020000090707060805 >>> Content-Type: text/plain; charset=UTF-8 >>> Content-Transfer-Encoding: 7bit >>> >>> See slapd.conf attached. >> >> What is init.schema? Is it required to reproduce the bug? > > Not required. Just a bunch of include foo.schema. > > Ciao, Michael. > Fixed in git master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd
by michael＠stroeder.com 14 Sep '12

14 Sep '12

This is a cryptographically signed message in MIME format. --------------ms000502010807010504000507 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable hyc(a)symas.com wrote: > michael(a)stroeder.com wrote: >> This is a multi-part message in MIME format. >> --------------030803020000090707060805 >> Content-Type: text/plain; charset=3DUTF-8 >> Content-Transfer-Encoding: 7bit >> >> See slapd.conf attached. >=20 > What is init.schema? Is it required to reproduce the bug? Not required. Just a bunch of include foo.schema. Ciao, Michael. --------------ms000502010807010504000507 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILHzCC BT8wggQnoAMCAQICDwCmSwABAAIAivjZQ8SBvzANBgkqhkiG9w0BAQUFADB8MQswCQYDVQQG EwJERTEcMBoGA1UEChMTVEMgVHJ1c3RDZW50ZXIgR21iSDElMCMGA1UECxMcVEMgVHJ1c3RD ZW50ZXIgQ2xhc3MgMSBMMSBDQTEoMCYGA1UEAxMfVEMgVHJ1c3RDZW50ZXIgQ2xhc3MgMSBM MSBDQSBJWDAeFw0xMjA2MDYxOTAyMTZaFw0xMzA2MDcxOTAyMTZaMCgxCzAJBgNVBAYTAkRF MRkwFwYDVQQDDBBNaWNoYWVsIFN0csO2ZGVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxXZGav40rnGNLxEggBW94MILWHlfC8a23Jew5U1gPlfRTXOjjzmoaZ1uCyGdgF6M VvuO9T1aTQNGH+OdeGe3P7Tfc/NsLJFJ2wtd8blvhmodUgse2eypiWjNOd4gZuhalBhgsQ0K b5D6/1foghII4E264iZlJ7AJ+UYcO+GxvFWT0YMTbLckgDkZk7c3qwTozdhYvXarvqx+8Ou/ kuxpQQhac/ebzxpu0N+RHSf2KIUS0g0tEGnPtGv6iL+9QNHc4JKo9Y9KKVw3tQy+Re+FQLxB 1fPE5F+qxuD3AUENpOwkMsqWLM94ohtx3CFqLpxfUPrnKFLAHOhHEbByYGvFPwIDAQABo4IC EDCCAgwwgaUGCCsGAQUFBwEBBIGYMIGVMFEGCCsGAQUFBzAChkVodHRwOi8vd3d3LnRydXN0 Y2VudGVyLmRlL2NlcnRzZXJ2aWNlcy9jYWNlcnRzL3RjX2NsYXNzMV9MMV9DQV9JWC5jcnQw QAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3NwLml4LnRjY2xhc3MxLnRjdW5pdmVyc2FsLWkudHJ1 c3RjZW50ZXIuZGUwHwYDVR0jBBgwFoAU6bgoHUbP/M34TpvF7ktg69g7P9EwDAYDVR0TAQH/ BAIwADBKBgNVHSAEQzBBMD8GCSqCFAAsAQEBATAyMDAGCCsGAQUFBwIBFiRodHRwOi8vd3d3 LnRydXN0Y2VudGVyLmRlL2d1aWRlbGluZXMwDgYDVR0PAQH/BAQDAgTwMB0GA1UdDgQWBBS2 KAWfTfgJ/JQ63qLGwTXYLnI+LzBiBgNVHR8EWzBZMFegVaBThlFodHRwOi8vY3JsLml4LnRj Y2xhc3MxLnRjdW5pdmVyc2FsLWkudHJ1c3RjZW50ZXIuZGUvY3JsL3YyL3RjX0NsYXNzMV9M MV9DQV9JWC5jcmwwMwYDVR0lBCwwKgYIKwYBBQUHAwIGCCsGAQUFBwMEBggrBgEFBQcDBwYK KwYBBAGCNxQCAjAfBgNVHREEGDAWgRRtaWNoYWVsQHN0cm9lZGVyLmNvbTANBgkqhkiG9w0B AQUFAAOCAQEAQ3bvVUpEq+cQrLpcogyt5BJNk/WvUvOHqhzyj28M9pg9hcDl1+MYl5qqj6tR GSTLPQZyf287pcmbMwbcTGZO/gbW9v7RYcut6RauWdwKMCUmKC3J4fVfDq9ZETA2WOV68ef4 B3Gzdhghsbp3Rhp5dDmrCVKAHlafm6ZwJrEQ9P76fxnQZzRLgeKpZep5ePH5YHUB3+YaOQvJ FG0bOXvfHhRiRG7/HW2G+yDgjHSxDz8AFzMWL/RFePqZ4pn6T/SM/qU6WEpW39MWyJNoH/Kx QDYK8gGYuesn1ciMCTnjrvZQj0fonGTO4SfWekJRkuGrJ7dYSZRjYbDcWBBkdFLWzzCCBdgw ggTAoAMCAQICDgboAAEAAkqWLSQM/sXJMA0GCSqGSIb3DQEBBQUAMHkxCzAJBgNVBAYTAkRF MRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSQwIgYDVQQLExtUQyBUcnVzdENlbnRl ciBVbml2ZXJzYWwgQ0ExJjAkBgNVBAMTHVRDIFRydXN0Q2VudGVyIFVuaXZlcnNhbCBDQSBJ MB4XDTA5MTEwMzE0MDgxOVoXDTI1MTIzMTIxNTk1OVowfDELMAkGA1UEBhMCREUxHDAaBgNV BAoTE1RDIFRydXN0Q2VudGVyIEdtYkgxJTAjBgNVBAsTHFRDIFRydXN0Q2VudGVyIENsYXNz IDEgTDEgQ0ExKDAmBgNVBAMTH1RDIFRydXN0Q2VudGVyIENsYXNzIDEgTDEgQ0EgSVgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75pBuz2Lp6QuqthDVR+V8XSsncZpozVVt 5KLv5P7yemMRwleKyH3PjmYfZUVL64Biab1GjovFblqVGCrep/EfdRonq20yU+P7TVhiLP8Z 5cegDZotIYhZhM0d8cPIij6w5d4IJM/8QCy6QSOUu4ASiTVItoYE4AFPjLqpmPwcie0fiqHH hpgmHnJla/7PZdkMZEsaCfVDEWBmJuMzVprJPT40anjG5VBLyM2I5DlsUCaeQCy2O3w3sqf1 3dyzUcv03IICuNc63towXA31Qt0TaVNU6YAmQjMepdfMbspmCZ+G8D2+xophEPPR/1vkstst smUMqX0XrLonTUJczglPAgMBAAGjggJZMIICVTCBmgYIKwYBBQUHAQEEgY0wgYowUgYIKwYB BQUHMAKGRmh0dHA6Ly93d3cudHJ1c3RjZW50ZXIuZGUvY2VydHNlcnZpY2VzL2NhY2VydHMv dGNfdW5pdmVyc2FsX3Jvb3RfSS5jcnQwNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3NwLnRjdW5p dmVyc2FsLUkudHJ1c3RjZW50ZXIuZGUwHwYDVR0jBBgwFoAUkqR1LKSevoFE63n8isWVpesQ dXMwEgYDVR0TAQH/BAgwBgEB/wIBADBSBgNVHSAESzBJMAYGBFUdIAAwPwYJKoIUACwBAQEB MDIwMAYIKwYBBQUHAgEWJGh0dHA6Ly93d3cudHJ1c3RjZW50ZXIuZGUvZ3VpZGVsaW5lczAO BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFOm4KB1Gz/zN+E6bxe5LYOvYOz/RMIH9BgNVHR8E gfUwgfIwge+ggeyggemGRmh0dHA6Ly9jcmwudGN1bml2ZXJzYWwtSS50cnVzdGNlbnRlci5k ZS9jcmwvdjIvdGNfdW5pdmVyc2FsX3Jvb3RfSS5jcmyGgZ5sZGFwOi8vd3d3LnRydXN0Y2Vu dGVyLmRlL0NOPVRDJTIwVHJ1c3RDZW50ZXIlMjBVbml2ZXJzYWwlMjBDQSUyMEksTz1UQyUy MFRydXN0Q2VudGVyJTIwR21iSCxPVT1yb290Y2VydHMsREM9dHJ1c3RjZW50ZXIsREM9ZGU/ Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlPzANBgkqhkiG9w0BAQUFAAOCAQEAOcjE m+6+mO5Icm+N53G2DpCM07LBFSGoRpBoX0oE8TrJaIQh2KXmBHVdn9LU8kt3QzLclctgvwJV 0KwcsMUUl5tlCsMPpR3s2Ek5lbWpvvr0HqtW56blAQiINV9nBd1EJFASIkRjefGbV2nOq9Yz UU+N8HA7jq1ROhd/NZZraGhjthwKyfjfHV7PKxGlY+3M0MbTIG+q/GhIfm0euDpFqhKG88e9 ALXr/uoSn3MzeOcoOWjTpW3adtFO4VWVgKbgG7jNrFbvRVlHmFLbOm4msjE5aXWxLiTwpJ2X iF4zKca1vAdAOgw9us90jEtOeiH6GzjNxEMvb7TfeO6Zkuc6HDGCA84wggPKAgEBMIGPMHwx CzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYDVQQLExxU QyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENlbnRlciBD bGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wCQYFKw4DAhoFAKCCAhMwGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTIwOTE0MTYyNDU2WjAjBgkq hkiG9w0BCQQxFgQUYmt9gfUW0xkqivQP/OBG2f/WQ8AwbAYJKoZIhvcNAQkPMV8wXTALBglg hkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggq hkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBoAYJKwYBBAGCNxAEMYGSMIGP MHwxCzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYDVQQL ExxUQyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENlbnRl ciBDbGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wgaIGCyqGSIb3DQEJEAILMYGS oIGPMHwxCzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYD VQQLExxUQyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENl bnRlciBDbGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wDQYJKoZIhvcNAQEBBQAE ggEAYMuUMe9Ve9zSu2WRZaxt/AxcTjcq25GgkBDUh1pBU8+iB4P8mdDI3DGXmBh4jXDicUbD GSx1USI2fcvOmBMC30e4QTWcs018i38yYsYDiTUlvDlT7dxWkshrQLHDjpmG2Dpy02hz6KRJ dRYlNfvmtVsRQtgTMm9XaguD6BBzioxBsakJDPxtRF1w87NdCSjk2YKKwcPYjZNKjX955hBc CPKeK+fAxNURLkucf28/8Rx2bYKtAQmon6g9y/6VLaRuxUBLD5lunqCNYWiG0L3RA1HAeffr p9Pjcwa0JU7r/2UqxpdMh1lfkQLvqB4fbA9ej+Da6ikylHNRPyvMhJpJtwAAAAAAAA== --------------ms000502010807010504000507--

1 0

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd
by michael＠stroeder.com 14 Sep '12

14 Sep '12

slapd.conf more readable in ITS: -------------------------------------------------------------------------------- include /home/michael/temp/openldap-testbed-its7390/schema/init.schema # Define global ACLs to disable default read access. pidfile /home/michael/temp/openldap-testbed-its7390/run/slapd-1.pid argsfile /home/michael/temp/openldap-testbed-its7390/run/slapd-1.args modulepath /opt/openldap-RE24/libexec/openldap moduleload back_hdb.la moduleload rwm.la # Root DSE: allow anyone to read it access to dn.base="" by * read # Subschema (sub)entry DSE: allow anyone to read it access to dn.base="cn=Subschema" by * read database hdb suffix "dc=example,dc=com" directory /home/michael/temp/openldap-testbed-its7390/db/bv rootdn "uid=diradm,dc=example,dc=com" rootpw testsecret lastmod on # Index-Konfiguration index objectClass eq checkpoint 200 5 # Entries to cache in memory cachesize 1000 # Search results to cache in memory idlcachesize 100 sizelimit -1 # DB_CONFIG parameters dbconfig set_cachesize 0 20000000 1 dbconfig set_lg_regionmax 262144 dbconfig set_lg_bsize 262144 dbconfig set_lg_max 10485760 dbconfig set_tas_spins 0 access to dn.subtree="dc=example,dc=com" by * write overlay rwm rwm-rewriteEngine on # rewrite map for (uid=foo) with DN of entry as result rwm-rewriteMap slapd uid2dn "ldap:///dc=example,dc=com?entryDN?sub?uid="

1 0

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd
by hyc＠symas.com 14 Sep '12

14 Sep '12

michael(a)stroeder.com wrote: > This is a multi-part message in MIME format. > --------------030803020000090707060805 > Content-Type: text/plain; charset=UTF-8 > Content-Transfer-Encoding: 7bit > > See slapd.conf attached. What is init.schema? Is it required to reproduce the bug? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7388) [PATCH] MozNSS: ignore certdb 'sql:' prefix when checking directory existence
by hyc＠symas.com 14 Sep '12

14 Sep '12

jvcelak(a)redhat.com wrote: > Full_Name: Jan Vcelak > Version: git master > OS: Linux > URL: ftp://ftp.openldap.org/incoming/jvcelak-20120914-moznss-ignore-certdb-sql-p… > Submission from: (NULL) (209.132.186.34) > > > Mozilla NSS certificate database in newer SQL format could not be used with > OpenLDAP, because the 'sql:' prefix is not removed while checking for the > existence of the directory. > > The attached patch resolves this problem. The patch looks syntactically correct. But SQL, seriously? As if TLS handshakes weren't slow enough already, you want to slow them down even further by looking up certs in an SQL database? Aside from questioning the wisdom of such an inefficient approach, there are other philosophical problems with this patch. It seems to be just the latest in a continuing stream of one-off patches. Are we going to get yet another special case patch from you guys when some other new certDB type comes along? This approach is unmaintainable and does nothing to inspire confidence in the quality of thinking going into this code. You're working on a security library. We expect a lot better thought to go into these things. > Steps to reproduce are described in Red Hat bugzilla: > https://bugzilla.redhat.com/show_bug.cgi?id=857373 > > > The attached file is derived from OpenLDAP Software. All of the modifications to > OpenLDAP Software represented in the following patch(es) were developed by Red > Hat. Red Hat has not assigned rights and/or interest in this work to any party. > I, Jan Vcelak am authorized by Red Hat, my employer, to release this work under > the following terms. > > Red Hat hereby place the following modifications to OpenLDAP Software (and only > these modifications) into the public domain. Hence, these modifications may be > freely used and/or redistributed for any purpose with or without attribution > and/or other notice. > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd
by michael＠stroeder.com 14 Sep '12

14 Sep '12

This is a multi-part message in MIME format. --------------030803020000090707060805 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit See slapd.conf attached. --------------030803020000090707060805 Content-Type: text/plain; charset=UTF-8; name="slapd.conf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="slapd.conf" IwojIFNlZSBzbGFwZC5jb25mKDUpIGZvciBkZXRhaWxzIG9uIGNvbmZpZ3VyYXRpb24gb3B0 aW9ucy4KIyBUaGlzIGZpbGUgc2hvdWxkIE5PVCBiZSB3b3JsZCByZWFkYWJsZS4KIwoKaW5j bHVkZQkJL2hvbWUvbWljaGFlbC90ZW1wL29wZW5sZGFwLXRlc3RiZWQtaXRzNzM5MC9zY2hl bWEvaW5pdC5zY2hlbWEKCiMgRGVmaW5lIGdsb2JhbCBBQ0xzIHRvIGRpc2FibGUgZGVmYXVs dCByZWFkIGFjY2Vzcy4KCnBpZGZpbGUJCS9ob21lL21pY2hhZWwvdGVtcC9vcGVubGRhcC10 ZXN0YmVkLWl0czczOTAvcnVuL3NsYXBkLTEucGlkCmFyZ3NmaWxlCS9ob21lL21pY2hhZWwv dGVtcC9vcGVubGRhcC10ZXN0YmVkLWl0czczOTAvcnVuL3NsYXBkLTEuYXJncwoKbW9kdWxl cGF0aAkvb3B0L29wZW5sZGFwLVJFMjQvbGliZXhlYy9vcGVubGRhcAoKIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj CiMgTG9hZCBkeW5hbWljIGJhY2tlbmQgbW9kdWxlczoKIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCm1vZHVsZWxv YWQJYmFja19oZGIubGEKCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIwojIExvYWQgZHluYW1pYyBvdmVybGF5IG1v ZHVsZXM6CiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIwptb2R1bGVsb2FkCXJ3bS5sYQoKIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCiMg R2xvYmFsIGFjY2VzcyBjb250cm9sCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIwoKIyBSb290IERTRTogYWxsb3cg YW55b25lIHRvIHJlYWQgaXQKYWNjZXNzIHRvIGRuLmJhc2U9IiIgYnkgKiByZWFkCiMgU3Vi c2NoZW1hIChzdWIpZW50cnkgRFNFOiBhbGxvdyBhbnlvbmUgdG8gcmVhZCBpdAphY2Nlc3Mg dG8gZG4uYmFzZT0iY249U3Vic2NoZW1hIiBieSAqIHJlYWQKCgoKIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMKIyBEYXRlbmJhbmsgZnVlciBOYW1lbnNyYXVtIG91PXNjaHVsdW5nLGRjPXN0cm9lZGVy LGRjPWxvY2FsCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCgpkYXRhYmFzZQloZGIKCnN1ZmZpeAkJIm91 PXNjaHVsdW5nLGRjPXN0cm9lZGVyLGRjPWxvY2FsIgpkaXJlY3RvcnkJL2hvbWUvbWljaGFl bC90ZW1wL29wZW5sZGFwLXRlc3RiZWQtaXRzNzM5MC9kYi9idgpyb290ZG4JCSJ1aWQ9ZGly YWRtLG91PXNjaHVsdW5nLGRjPXN0cm9lZGVyLGRjPWxvY2FsIgpyb290cHcJCXRlc3RzZWNy ZXQKbGFzdG1vZAkJb24KCiMgSW5kZXgtS29uZmlndXJhdGlvbgppbmRleCBvYmplY3RDbGFz cwkJZXEKaW5kZXggY24sc24sZGlzcGxheU5hbWUsZ2l2ZW5OYW1lLG1haWwsbyxvdSx0ZWxl cGhvbmVOdW1iZXIsaG9tZVBob25lLG1vYmlsZSBzdWIsZXEKaW5kZXggdWlkLHVpZE51bWJl cixnaWROdW1iZXIsaG9tZURpcmVjdG9yeSxtZW1iZXIsbWFuYWdlcixvd25lcixzZWVBbHNv LGRlcGFydG1lbnROdW1iZXIgZXEKCmNoZWNrcG9pbnQgMjAwIDUKCiMgRW50cmllcyB0byBj YWNoZSBpbiBtZW1vcnkKY2FjaGVzaXplIDEwMDAKIyBTZWFyY2ggcmVzdWx0cyB0byBjYWNo ZSBpbiBtZW1vcnkKaWRsY2FjaGVzaXplIDEwMAoKc2l6ZWxpbWl0CS0xCgojIERCX0NPTkZJ RyBwYXJhbWV0ZXJzCmRiY29uZmlnIHNldF9jYWNoZXNpemUgICAwICAgICAgIDIwMDAwMDAw ICAgICAgICAxCmRiY29uZmlnIHNldF9sZ19yZWdpb25tYXggICAgICAgIDI2MjE0NApkYmNv bmZpZyBzZXRfbGdfYnNpemUgICAgICAgICAgICAyNjIxNDQKZGJjb25maWcgc2V0X2xnX21h eCAgICAgICAgICAgICAgMTA0ODU3NjAKZGJjb25maWcgc2V0X3Rhc19zcGlucyAwCgojIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCiMgQmVyZWNodGlndW5nZW4gaW0gTmFtZW5zcmF1 bSBvdT1zY2h1bHVuZyxkYz1zdHJvZWRlcixkYz1sb2NhbAojIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjCgphY2Nlc3MgdG8gZG4uc3VidHJlZT0ib3U9c2NodWx1bmcsZGM9c3Ryb2Vk ZXIsZGM9bG9jYWwiCiAgICBieSAqIHdyaXRlCgojIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjCiMgT3ZlcmxheXMgZnVlciBOYW1lbnNyYXVtIG91PXNjaHVsdW5nLGRjPXN0cm9lZGVy LGRjPWxvY2FsCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMKCm92ZXJsYXkgcndtCnJ3 bS1yZXdyaXRlRW5naW5lIG9uCgojIHJld3JpdGUgbWFwIGZvciAodWlkPWZvbykgd2l0aCBE TiBvZiBlbnRyeSBhcyByZXN1bHQKcndtLXJld3JpdGVNYXAgc2xhcGQgdWlkMmRuICJsZGFw Oi8vL291PXNjaHVsdW5nLGRjPXN0cm9lZGVyLGRjPWxvY2FsP2VudHJ5RE4/c3ViP3VpZD0i Cgo= --------------030803020000090707060805--

1 0

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd
by michael＠stroeder.com 14 Sep '12

14 Sep '12

This is a multi-part message in MIME format. --------------050607060501060102050805 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit See bt full attached. --------------050607060501060102050805 Content-Type: text/plain; charset=UTF-8; name="bt_full.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="bt_full.txt" #0 0x00007f1699909ab5 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f169990afb6 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f1699944dd3 in __libc_message () from /lib64/libc.so.6 No symbol table info available. #3 0x00007f169994a3b6 in malloc_printerr () from /lib64/libc.so.6 No symbol table info available. #4 0x00007f169ca6fbed in ber_memfree_x (p=0x820778, ctx=0x0) at memory.c:152 __PRETTY_FUNCTION__ = "ber_memfree_x" #5 0x0000000000462a23 in ch_free (ptr=0x820778) at ch_malloc.c:139 ctx = 0x0 #6 0x00000000004ab8fc in slapd_rw_destroy (private=0x820700) at sasl.c:1093 md = 0x820700 __PRETTY_FUNCTION__ = "slapd_rw_destroy" #7 0x00000000004e5532 in rewrite_builtin_map_free (tmp=0x81e110) at map.c:487 map = 0x81e110 __PRETTY_FUNCTION__ = "rewrite_builtin_map_free" #8 0x00000000004f1cb5 in avl_free (root=0x8205f0, dfree=0x4e54c7 <rewrite_builtin_map_free>) at avl.c:515 nleft = 0 nright = 0 #9 0x00000000004e4645 in rewrite_info_delete (pinfo=0x81f690) at info.c:120 info = 0x820420 __PRETTY_FUNCTION__ = "rewrite_info_delete" #10 0x00007f1696d78e3f in rwm_db_destroy (be=0x81eba0, cr=0x0) at rwm.c:2664 rwmap = 0x81f690 on = 0x820240 rc = 0 #11 0x00000000004cee6e in over_db_destroy (be=0x81eba0, cr=0x0) at backover.c:208 oi = 0x820060 on = 0x820240 next = 0x462a23 bi_orig = 0x820060 rc = 0 #12 0x000000000044e833 in backend_stopdown_one (bd=0x81eba0) at backend.c:438 No locals. #13 0x000000000044e928 in backend_destroy_one (bd=0x81eba0, dynamic=1) at backend.c:452 No locals. #14 0x000000000044ea8e in backend_destroy () at backend.c:491 bd = 0x81eba0 bi = 0x7fff07f1e7b0 #15 0x000000000047a55f in slap_destroy () at init.c:247 rc = 0 #16 0x00000000004d6bd8 in slap_tool_destroy () at slapcommon.c:932 rc = 0 #17 0x00000000004db6c4 in slapschema (argc=3, argv=0x7fff07f1ecf8) at slapschema.c:161 id = 18446744073709551615 rc = 0 progname = 0x518180 "slapschema" conn = {c_struct_state = SLAP_C_UNINITIALIZED, c_conn_state = SLAP_C_INVALID, c_conn_idx = -1, c_sd = 0, c_close_reason = 0x0, c_mutex = {__data = { __lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, c_sb = 0x0, c_starttime = 0, c_activitytime = 0, c_connid = 18446744073709551615, c_peer_domain = { bv_len = 0, bv_val = 0x4f5fd0 ""}, c_peer_name = {bv_len = 0, bv_val = 0x4f5fd0 ""}, c_listener = 0x4fdf40, c_sasl_bind_mech = {bv_len = 0, bv_val = 0x0}, c_sasl_dn = {bv_len = 0, bv_val = 0x0}, c_sasl_authz_dn = {bv_len = 0, bv_val = 0x0}, c_authz_backend = 0x0, c_authz_cookie = 0x0, c_authz = {sai_method = 0, sai_mech = {bv_len = 0, bv_val = 0x0}, sai_dn = {bv_len = 0, bv_val = 0x0}, sai_ndn = {bv_len = 0, bv_val = 0x0}, sai_ssf = 0, sai_transport_ssf = 0, sai_tls_ssf = 0, sai_sasl_ssf = 0}, c_protocol = 0, c_ops = {stqh_first = 0x0, stqh_last = 0x0}, c_pending_ops = { stqh_first = 0x0, stqh_last = 0x0}, c_write1_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = { __prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, c_write1_cv = {__data = {__lock = 0, __futex = 0, __total_seq = 0, __wakeup_seq = 0, __woken_seq = 0, __mutex = 0x0, __nwaiters = 0, __broadcast_seq = 0}, __size = '\000' <repeats 47 times>, __align = 0}, c_write2_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, c_write2_cv = {__data = {__lock = 0, __futex = 0, __total_seq = 0, __wakeup_seq = 0, __woken_seq = 0, __mutex = 0x0, __nwaiters = 0, __broadcast_seq = 0}, __size = '\000' <repeats 47 times>, __align = 0}, c_currentber = 0x0, c_writers = 0, c_writing = 0 '\000', c_sasl_bind_in_progress = 0 '\000', c_writewaiter = 0 '\000', c_is_tls = 0 '\000', c_needs_tls_accept = 0 '\000', c_sasl_layers = 0 '\000', c_sasl_done = 0 '\000', c_sasl_authctx = 0x0, c_sasl_sockctx = 0x0, c_sasl_extra = 0x0, c_sasl_bindop = 0x0, c_pagedresults_state = {ps_be = 0x0, ps_size = 0, ps_count = 0, ps_cookie = 0, ps_cookieval = {bv_len = 0, bv_val = 0x0}}, c_n_ops_received = 0, c_n_ops_executing = 0, c_n_ops_pending = 0, c_n_ops_completed = 0, c_n_get = 0, c_n_read = 0, c_n_write = 0, c_extensions = 0x0, c_clientfunc = 0, c_clientarg = 0x0, c_send_ldap_result = 0x453d4f <slap_send_ldap_result>, c_send_search_entry = 0x454a57 <slap_send_search_entry>, c_send_search_reference = 0x456a6e <slap_send_search_reference>, c_send_ldap_extended = 0x4545b6 <slap_send_ldap_extended>, c_send_ldap_intermediate = 0x454834 <slap_send_ldap_intermediate>} opbuf = {ob_op = {o_hdr = 0x7fff07f1e560, o_tag = 0, o_time = 1347638558, o_tincr = 0, o_bd = 0x81eba0, o_req_dn = {bv_len = 0, bv_val = 0x0}, o_req_ndn = { bv_len = 0, bv_val = 0x0}, o_request = {oq_add = {rs_modlist = 0x0, rs_e = 0x0}, oq_bind = {rb_method = 0, rb_cred = {bv_len = 0, bv_val = 0x0}, rb_edn = {bv_len = 0, bv_val = 0x0}, rb_ssf = 0, rb_mech = {bv_len = 0, bv_val = 0x0}}, oq_compare = {rs_ava = 0x0}, oq_modify = {rs_mods = { rs_modlist = 0x0, rs_no_opattrs = 0 '\000'}, rs_increment = 0}, oq_modrdn = {rs_mods = {rs_modlist = 0x0, rs_no_opattrs = 0 '\000'}, rs_deleteoldrdn = 0, rs_newrdn = {bv_len = 0, bv_val = 0x0}, rs_nnewrdn = {bv_len = 0, bv_val = 0x0}, rs_newSup = 0x0, rs_nnewSup = 0x0}, oq_search = {rs_scope = 0, rs_deref = 0, rs_slimit = 0, rs_tlimit = 0, rs_limit = 0x0, rs_attrsonly = 0, rs_attrs = 0x0, rs_filter = 0x0, rs_filterstr = {bv_len = 0, bv_val = 0x0}}, oq_abandon = {rs_msgid = 0}, oq_cancel = {rs_msgid = 0}, oq_extended = {rs_reqoid = {bv_len = 0, bv_val = 0x0}, rs_flags = 0, rs_reqdata = 0x0}, oq_pwdexop = {rs_extended = {rs_reqoid = {bv_len = 0, bv_val = 0x0}, rs_flags = 0, rs_reqdata = 0x0}, rs_old = {bv_len = 0, bv_val = 0x0}, rs_new = {bv_len = 0, bv_val = 0x0}, rs_mods = 0x0, rs_modtail = 0x0}}, o_abandon = 0, o_cancel = 0, o_groups = 0x0, o_do_not_cache = 0 '\000', o_is_auth_check = 0 '\000', o_dont_replicate = 0 '\000', o_acl_priv = ACL_NONE, o_nocaching = 0 '\000', o_delete_glue_parent = 0 '\000', o_no_schema_check = 0 '\000', o_no_subordinate_glue = 0 '\000', o_ctrlflag = '\000' <repeats 31 times>, o_controls = 0x7fff07f1e6a8, o_authz = {sai_method = 0, sai_mech = {bv_len = 0, bv_val = 0x0}, sai_dn = { bv_len = 0, bv_val = 0x0}, sai_ndn = {bv_len = 0, bv_val = 0x0}, sai_ssf = 0, sai_transport_ssf = 0, sai_tls_ssf = 0, sai_sasl_ssf = 0}, o_ber = 0x0, o_res_ber = 0x0, o_callback = 0x0, o_ctrls = 0x0, o_csn = {bv_len = 0, bv_val = 0x0}, o_private = 0x0, o_extra = {slh_first = 0x0}, o_next = { stqe_next = 0x0}}, ob_hdr = {oh_opid = 0, oh_connid = 18446744073709551615, oh_conn = 0x7fff07f1e7b0, oh_msgid = 0, oh_protocol = 0, oh_tid = 139735100856160, oh_threadctx = 0x7f169ced89c0, oh_tmpmemctx = 0x0, oh_tmpmfuncs = 0x75b3e0, oh_counters = 0x75e8e0, oh_log_prefix = "conn=-1 op=0", '\000' <repeats 243 times>}, ob_controls = {0x0 <repeats 32 times>}} op = 0x7fff07f1e3f0 thrctx = 0x7f169ced89c0 requestBSF = 0 doBSF = 0 __PRETTY_FUNCTION__ = "slapschema" #18 0x0000000000415c6e in main (argc=3, argv=0x7fff07f1ecf8) at main.c:410 i = 5 no_detach = 0 rc = 1 urls = 0x0 username = 0x0 groupname = 0x0 sandbox = 0x0 syslogUser = 160 pid = 0 waitfds = {1, 32534} g_argc = 3 g_argv = 0x7fff07f1ecf8 configfile = 0x0 configdir = 0x0 serverName = 0x7fff07f20313 "slapschema" serverMode = 1 scp = 0x0 scp_entry = 0x0 debug_unknowns = 0x0 syslog_unknowns = 0x0 serverNamePrefix = 0x4f5a68 "" l = 0 slapd_pid_file_unlink = 0 slapd_args_file_unlink = 0 firstopt = 1 __PRETTY_FUNCTION__ = "main" --------------050607060501060102050805--

1 0

(ITS#7390) slapschema crashes with rwm-rewriteMap slapd
by michael＠stroeder.com 14 Sep '12

14 Sep '12

Full_Name: Version: 2.4.32 OS: Debian Squeeze URL: Submission from: (NULL) (212.227.35.94) Config with the following lines works as expected but slapschema crashes no matter whether slapd is running or not: -------------------------------------------------------------------------- overlay rwm rwm-rewriteEngine on # rewrite map for (uid=foo) with DN of entry as result rwm-rewriteMap slapd uid2dn "ldap:///ou=um-demail?entryDN?sub?uid=" -------------------------------------------------------------------------- This is self-compiled OpenLDAP 2.4.32 on Debian Squeeze linked against OpenSSL and BDB 4.8.30. Example config will follow. Maybe I even can reproduce on another system and provide gdb output.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs