- openldap-bugs - openldap.org

Re: (ITS#7735) Memory leaks on Multi-Master replications
by quanah＠zimbra.com 01 Nov '13

01 Nov '13

--On Friday, November 01, 2013 4:43 PM +0000 quanah(a)zimbra.com wrote: > So we really need to be able to try and reproduce your issue. Hi Dmitrii, After further examination, we believe the root cause of the issue has been identified. Please rebuild your source with this patch: <http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=patch;h=0645878d5…> and report back if it resolves the memory leak. Thanks! --Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7738) RFE slapo-constraint: List non-unique attrs in diagnostic message
by michael＠stroeder.com 01 Nov '13

01 Nov '13

Full_Name: Version: HEAD OS: URL: Submission from: (NULL) (79.227.172.123) If slapo-unique detects non-unique attribute values it just sets "some attributes not unique" as diagnostic message in the LDAP response and as log message. It would be certainly very handy if the names of the non-unique attributes would be listed in the message similar to messages returned in case of schema violations.

1 0

(ITS#7737) missing matching rule for olcDbEnvFlags
by quanah＠OpenLDAP.org 01 Nov '13

01 Nov '13

Full_Name: Quanah Gibson-Mount Version: 2.4.37 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.58.125) olcDbEnvFlags is missing a matching rule, which makes modifications to change individual flags painful.

1 0

Re: (ITS#7735) Memory leaks on Multi-Master replications
by quanah＠zimbra.com 01 Nov '13

01 Nov '13

--On Friday, November 01, 2013 10:00 AM +0400 Dmitrii Fonariuk <dmitrii.fonariuk(a)gmail.com> wrote: > > > Hi Quanah. > > > I have syncrepl configured on cn=config only for replication cn=schema > (searchbase="cn=schema,cn=config") not for all cn=config. > ok. i has remove syncrepl from cn=config, but nothing has changed. > I reinstall slapd and now binaries are not stripped. Send to you new > valgrind report. Thanks. However, you still failed to provide the script you are running, which is needed to see if we can reproduce the issue locally. The valgrind output shows a leak, but the source code disagrees, in that we never alloc that variable without freeing its old contents first and there's only one instance of the variable. At worst it could be a onetime leak, valgrind is claiming multiple occurrences. So we really need to be able to try and reproduce your issue. Regards, Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7735) Memory leaks on Multi-Master replications
by dmitrii.fonariuk＠gmail.com 31 Oct '13

31 Oct '13

--047d7b6783f6db80a604ea17467f Content-Type: multipart/alternative; boundary=047d7b6783f6db80a204ea17467d --047d7b6783f6db80a204ea17467d Content-Type: text/plain; charset=ISO-8859-1 Hi Quanah. I have syncrepl configured on cn=config only for replication cn=schema (searchbase="cn=schema,cn=config") not for all cn=config. ok. i has remove syncrepl from cn=config, but nothing has changed. I reinstall slapd and now binaries are not stripped. Send to you new valgrind report. --Dmitrii --047d7b6783f6db80a204ea17467d Content-Type: text/html; charset=ISO-8859-1 <div dir="ltr"><div class="gmail_extra">Hi Quanah. </div><div class="gmail_extra"><br></div><div class="gmail_extra">I have syncrepl configured on cn=config only for replication cn=schema (searchbase="cn=schema,cn=config") not for all cn=config.</div><div class="gmail_extra"> ok. i has remove syncrepl from cn=config, but nothing has changed.</div><div class="gmail_extra">I reinstall slapd and now binaries are not stripped. Send to you new valgrind report.</div><div class="gmail_extra"><br></div> <div class="gmail_extra">--Dmitrii</div></div> --047d7b6783f6db80a204ea17467d-- --047d7b6783f6db80a604ea17467f Content-Type: application/zip; name="valg.txt.zip" Content-Disposition: attachment; filename="valg.txt.zip" Content-Transfer-Encoding: base64 X-Attachment-Id: f_hnh0pjdm0 UEsDBBQACAAIANZOYUMAAAAAAAAAAAAAAAAIABAAdmFsZy50eHRVWAwAED9zUiNCc1L5ARQA7L1b c+u4ku/5Pp/Cb1MdsbeLuJHgmuiopiiy55zYl4q9z+mZjnlQyBLtpS5ZUpGSV7k//QAkJZNyUpQo 2QbB7Ihe22YZvAA/JBL5BxL/+q/c4eJf//Xur8nz7Hsy++1Pd9O75+R5nb7eJWm6Tu/myTaZbdfp //Gv+z8N15vXdPH0fXv3U/gvd9Rx6J+pQ6gquZrf/fvf/vfdv//6l/9z/qe7h9e7/7lbLqaru38m P6bp/C7Z3k2X9283+t/ZYvV09x/T5VO6WM3/zO7lPclv8pfFw39E/+//dZcm6W5192Ox/X735+93 j+ptZodnL1aP6+o7PT+rkt/usuV0M7/7c3bn6CLL+XTz7eefs/SF/jlVj9jNU4d9Y77Dfr77c3z3 83qz/Xm5nk2XP/99k6z+Mg5+/TnZztTlZKWL/pzfjd/P3x5U/CTVT//PNF2p91eP1N81n6dJlt2l 09VTcrdJ0ufs291ymqpfikv/n/MH8/nccxznT3fOH8Qrf/mXu5/myeNilcz/5fgh+qf/Owp+vfvn //7rX4N//Oe3t8v6/xaru12W3E23d8kfi+23O/InSZ0/SeKqit8mmf7vxPuTw9ndg/rE37Jq6e16 O13efU+mG3WP6VPy7Y7KP3keU+2j/jb70x0hf/KYc/eYJon6jf/Jl/6fXEbLW+d/Nd0m7+pF/0Qq zy8ffTdNk7tsu1guVZNOZ9+nD8tE//flWldZMlsrOMjd+lF9g+vK2meqz3P+4IHjyjj6dvecP/nu p5enSZpsltNZMiku3c++Uc/5l1pRxZ8qGrnuyB19u3tI0okCO//ryR93PxWQ63JUNpQLXVKUy7bp fLeplXIZWCpk0vfH33LwJrt0OdlM0yyZJH+ozqJ+VQWJQ2lDyRGXxyWXi2w7WazeSjOHwKUDTqOy tPp79f+L7WK6XPx3Mnlarh+my4lifbFeZXc/6f+kbiU4a7iTSwV4p0NR1216iRHff7zqFeUj734q H61Kcu5CJZ1AOGPdvAqKn/S/+iE+BbtER76oLXw5JK5Qosod2KAUfENdZhTVy2iu3sq5MJFU1YpT lpupit0muikT3TgELuIEkkZH7eh5N21HZl47xjI+tCN9eKmVEkJApeQ44KqTPabr1TZZzfNOdvfT /lddwQQsJxwah8UoV5YpuyTxGjqWdMVxg0j3lg3CbWkQv6VBwKd9ZIPQbg0irGgQHoy5Mj7F+Dmd Le9+Uv/kv6ky0vXByo1dpsrM1qvHxdPkKVkl6UJ940NxQTeKpODDiO9Teiioh66X6VINlYeCjMPl wjAID+XKd53PKwVdCb4pYTIKDgVVET3UJulKeWWV1xVEghAR6VD3UHo5XzyqRsw21aLM9zlUlDEa jUtedRk1LCcT1f6vdz+pX3dLjS73weGdCUm8smim+0iWTNPZ90my2qbV4r4P1tWIOVE+Cqm3rZfU l/JuAOIzopGQp8r5cE8bMSZc7Z3nRbbKkz2UUD5Ywyv6XlA+6mE6+6183ls5JsFhj0hPBlV81GCu i1QbhBMC9ioifaYMgurN80nxx/VSPlgpyozoobluRhocpo5mxDXPjHRwmFhEqW6a72UZ1TW/v70i oSDp3ijW/Utb8kn2uprpT7v7af+T7l0U9J2liBz1hro7g8UEFSCq0o0YV6iWf3ngoFpUeGB/RsuF lgstV91yeYO2XNqSnLJcYOdCy4WWCy3X7SwX62a5pGGWK2ShGCl0n1Tv3K5/S9SHZ7Pv6gZ5g8LP UmWiEdvP3NaLeVYtxNyGQrEj9tFPPUlcP/xXMtvOltOsWpy6DOzaLnH5aN9N8j+eLNfT+b7kZKMq KjeaPvh0IYUX1osXc/nKL7ldgUOmPI5HHhgDgIO1l8QAOoLk2wHSOJKNIHGQhGtB8sPA05bhaZGp sWGiqyevD5944ONGwlWsP69Vg6/TwoABAXPqCPBxjJBYDZ+62FvQqfxNPxQ0ssKhkQPiJpqCsh+N G3Hs4K2b4QrZGbzB/tOFvAkmifYk02Q7W8+TGmrltYIDaKgVgkWeAmH9kqTK+SjZKX/LcocLxo1J DuImwb+/BDfeETfTxMJPNG9R5MTtuAnYr7vYvAlXqr9/nj9M9iauilx5TT+Qw4qg8v1lvbz6saCo UtiF3WYqx/GbcTwUfLOPLix4EcIcejIMLGANFqckOCWxdkpSsbX8EltrmnCu7KY7brS1TYsa4kiI itmcbrfp4mG3Tbavm6RqOBsGNdcdu6JiONXX/zQtXHwP7CVkFLhRGYjZd2/1zKoxEbDNJDKsGKHD E4tXrEPBoQpSPgLVRrfNRwBlNwN9BNHRRzBwoUC3BR9Cm9vmBUUNWiiuJzpzPVFXvgxc99CJLy+O /KYFRQ7Yew1dUOR2bEgD10t8llzgKoc2D/tPikWohx42zZe8UAbOCpyYUH7Sv/bgSAT61wb71+gn Fz95Hc2IaesluvnJY0IPMYnf50k2S2thCeI3+ddx5J7jX6uho+f+Nfc5cdW3PswfGuO9ErZ/xoV7 u7JumsKOrH/QXJLqjSrf7uavq3Lm8IZ6eS0HEQxWGjiX7Mq7abps5HrOvpzy9Y5X1DqwOxNEriwr VjXCw/M0+y2bTDfKAa+6UsRp8KV8crBDy/XTMnlJlsr529bcIQZHFWjI8642UxVcj0gUl/RLu25P AhJdITJQk0WjiQG4Vt5lN96pgZpwB94jR1YDx9nrajv9o1pSSHBy5EoZBhVgDwXz/9UNCVppQYRP VLnpbJZkmbKzNXwOV/OeQnoy6nYFyBKV9/NXQw17UYHfEbcPErpU/ZDQGTkj9f6TbJotDwE69QI/ 77L05+XiweX6X/1f6X22vqf3zj24xSC/GXHGeiwt7pWkL3o4nM8nm+XuSVdP59sSPx7Xb7tvmotv yD3GvWgfxdJ3LBfUqR9zNwEGX811x/BcF14O8RlYmKYjWbq0STtsWrOpOmzrWc1dg5+j3DUen+eu 9SQq05VU8xSpDrPUkI/U2FBGlZ932XaijM4kWeVD0751DyFm3rACSMYVweBdlO6NCY9zOH5vCxOm iVtovW5sveIo8IPyMw+gT2aPlUdT6oFtEYRqzD8uehTJJg44vFvTPwxUbaxcKP9l/SOIxloX3zws Sk4PkUd9JV95AL6w6hx03NY5iN2dw0CZp0PniMehd9bSPw6CcGnkUVBOYvVx6mPU960f6yumy4v5 88CMIhZNqE1TTT414M0dh9OzsHNhBwSx64idaTpLt/w3ZERiUdbs7HEy3f0x2erPLZY/VfU67oED hHTzxZPNW7odeNUTbum2c30X7p8AzdHZ68I6miNmnAxGIxnut5DNV6U5UmPifJWrUnDiOeY7eov0 fPW3dfq8XwGiC3DRkFBCylMJJbh0wK9C64PWB63Pe+tDnI7mxzQRtfM2GJeNTm2D8WE3CrfBnJtW tytgpu0P7J5Y13Gb9sGQppTNJu6D6dySpimd3SZOIQ9iSc4WkOB5rX0CUmcqTFMVexEExP0JXwut HbLncKC1baNBZ3At0SNNX/P4ZXqkoKGrnfmTWyE88Nk2YY7KYs/ss2V7GjqDa5qm2W0nmIhHo/rs 5i271tvUxmmY2nTOyyXzeGljlAwO635KlMw8zbBbs47pOc0KlrawWblp2kunZqVj31cNk8fLdSl6 91P+s3Zu4M1yhDE3bhcmKLx0f1jCBAoMV/Yx8wSGbn1Mx/vgPgZ7VNjHsI9d2se6HrFmmsbSMSrg ifE+KvBjvZhXC1EBJ6DlDonOWkanJlm3mGPp/be+c97+W9A9NnGy0/EcFf5BglCxIzKSMSl3G6bT 1Xyvg3XdvegE/ljud1gWIO/U52VX3HGkRoX9HWfr5+f1qvuGyHKHpdQG1NYdlp05+yCJqSecETWy WLzvtjMVdmg45m9ds+0Mi87ADVp7GcBeSUHGRB9nMJ9ndYFxrv0y4lvvzxmounxiBqoo5PyMkzM4 nH+qL4xTwrQDMH9dPaXr3eZYSc8vFpqU5bCbptQg7B8AO6e+f86eN/A7baK9RcASrtSC3wnaBUyS oj3QHaWkfQbgLuFN0BEdFfnI90+t5SOHM8t7I8aCPe6HPSBpkgcZq7tHXDhcJN1Aq9Qn9rxR0IfF XSd2Bp5x18mVAeuO5ki0CK/9MUc8Os8cgVWN5gjNEZqjG5qjjseTCis0ap0ZjYRnb2wBs8PauLGl KxQGiqo4QbztBNGqvTBdOTdtWx9yfnvOA4drP+r7kDm3Y6Nit0UyThyctUgGnm/0aCMCj/2QEz2R UxTVMM+v6I9k8DJlndBvbwmas13CZ+tZ00cM1NRxLLjxWDDiY1Eeut7EOYdnf/ZwbqCUj5zfWPyx Rc3vyvig1fzPTq+Je+O/HngDFf3Py9U9hPVZCHoBumm7UdF7uT3rLPAD1RTpj+f6Zvofz3n7MXBz ij2Mu6ZtzcXFtjcGnDPqhIq6LHtZvtQYLy7lVQTqszZhbpry+ImYR5ETn2HHYa3cpQF7c5Nm+xL5 7/n0DnS1ndjXsJfQPiWrJF3MqrCq2QBMOy6bsG/ZBC63AI1ep+UW9BKjZ5qy3vEEhpAS59A4yvyo dj2yChReN0bCQNvLSuc+KscJ3K3RmphrTdAqlFaBd3SFzFuHEMWBd4aHAucG740jToTUL3rWieLg DQx0x7syaN4agUEwyMORF4Zn7DEmsCU1T5jsCqB5AvwwALRpIWBX9swTxYfBnk2L87qyZ55YPQz2 8Hjo67g1UHNGKQ77iFF9xDy5ehi2HY827w6th/qz3foz9o5reod5svUgTLo1a5q7cmeacohrmj9s TbNlacq6Em+eKoaLmm9q0pH0knTjtDfuMO+887vgG/TL3tq1tL4rhKi/4daOr+TPPA0Oww63Bd26 lKRdUTdP8kPUb4q6LVuYugJunjY4DF+Ci5EXFukxN+n6aG9ReTEniYCusEUEmqe8oYm9LepxEKkX 3a0Wv+/qpy4Xl3QVca8vhy53xFwap9UNKXIgqGSKYb2DZZ3WZ27lNf1w13JTK1ER+xoLiPjl+Bko jFl6AigPhYhZkT9tv1+hNokvrp2oGuFxWS9/OEy9UtiFN9R1PoWdMIee3PosKLzbDLc+42bFIWxW vGQLszRQlv3Edb9xHLnnmFwm4ZW/hPmjfW/J/3iyXE8P1n6yUbWVPx+cuXAhRT6/rxQvjGDll9y8 wJ/N43jkgeM37Ap1Hb8v4sk48bNXPPVnuoSLya/sKOYJtBZ3FCtPu+9KnoHSrL3kfWVEyxbdSnSM JVgizHZbcljMp1pUAwYfk9CXmJmNGT+6wm6eSPuJEtkAYDfQ9e2KqiVqLtrlISQh6Qi5b5yWi0sW EPJbQ26eWIyW/KaQ25TSpyvklkjSaMkR8mbITdMBu6UyDnkQS3L20dHw9D6ORvG7AxSPlQ04vGiV stEVpWFLgMNIJYVJR67oIOZJf4NYYmnVgaFd2TNQ/MMZG0J+W8iNE/6GtI+C+CNHYTTdzRfbd5pc eVF/am/2BXel0DxFbhDDPAK4B9A4nW1QZjBwAl/fYLlUnawGYXlNF6ZQ17GIQeIYqINhpjsE/uOA N08TG8iwj/zl/FkiV2GiRQT9NOimSVYDc28Dp6BYfalq4WMO95cL78jymZbyG01jcTCDPmJYwdA4 ZWlIJtG6BMidMTRPZBqGNUQC9wQapwDhGpQPoN2uVMudYUehCVMgfzGCxklNQ0FQUj9UQ8RmvVzM Xusr8Ypr94172W0CkJgnMw0DQOYKnk/QHo8n38Ul/cpgFhir6EPN54vok1SnIEyTbb7Cv45ffi13 AcHNAlYBaJ7oMxAAh51ihRDjRJiBgMcZdXTuwCx7WR6dDJBfynVSMMenVfih7oL5+r8QP+P0Flzc hocDfCTw5ik7uH3opoYdQS9At0RAooSdsOzUadhF/9mWHY8iwKMI3hXFowj6eRRBZ5trno75iTb3 c0X7UA3h3lkGF3ao0eCiwUWD23eDa55qb2dmM7S2aG3R2lpibd2O1pZ+0BIVFnkkdAShmqZptpxM d39s0vUm7web5e5Jf5T6/593WfrzcvHgcv2v/kt6n63v6b1zTyFXNr+vMgG6Z03yG+uzrco7Zlfc koQyKl81S9KXJD2EfS6+IfcY1yuei16k71jcSv+Yh65h8y8cOoaT1sDBv4tCTp35MG0RCYsY0/3w +2T/0MOPeaQdKqNmN1F5IpoaaqbqCauyhotf7vPMcKCFUZUcveuEtfHwFpXcslBCDdTq9WcnKlnA aoiq5EC3T1nJM6CWJZzWLqKjopZnQC2raSbogIhxrApNt5PpZqMHj+16ohc878NsDW6LjD31deq9 ZqqGtjoj5u+7RZrMS++lgR/X9/Q5c6pYPhjnf+p5oKPjEhHuY7mnDsRjDljc5APxOhP3QSskPsrs a5PqshMmVYB1aaZJbVke8Pm9XYut3DsVHmKD3tNh44k+neltWV3wFfSGEXGb5tqq9RvQjfQe3VZ0 4QkLottHdFvWCaCbBYEuRv7ezZpku01W/j2DG1K5ZXJ07Ja54Exc9SHtlgF9iIK3/rLkpURG/vhw g3f5S99u4HEKuhXm5TDt3IUMXIHQJTjrifF+wPihRoyaryPgaCl3nDg4Z/kBhSHo0cIym4BtkW/t tvmu8EVRShvj/E+VgW6gU9IGOuGlZyOuA/j7yH9TVmfqgCcX20RYi17VG4f4U5cShiOh5/Pt+AjL R1TWEoDHaIBhUyqFrheGZ6BLYAHKInRbtIHeWL5BhAKQ2wO3lsgtvusScGoOL2SwcWqOTO+ZbhF0 +uRGxHHknjPRhhOI9GqibdNxvZ3RNVEPY1zNTrRdTf7YJqtssa4FljiHrRF3HIech27fNx8iuhpd A8WwsXImTqEr4JgoojswdI0TwzDucNrXRWoVtS36E4YcEFnTkDVOgeqDPoDIfiWyxklaGCBDnDvj zFFi65kRDhyuN799HzS1qK4hsj1D1jhhDV1dRPY0ssbpZujqIs7dcTZRS0NX9wS1cRT4+2XlB2wn s8fKoykFzyrgQRgSclz0iHjiwEbGHuINlODQTUbcPwp342Q79FewK3xNV0AtsFeW3w850XZC4VDj Nb+iv5DBGb8U7JS3wm75PjZunIqIdh87wld0BOO0SZzhtsRlojFVhmLzsCjJO5wFqa/c57m3mnAf t+FOLHdyhIHaJTo5yPqHsG6L4jkQ+QhZv4J146RS9OexH3xBPzBOf0X/ppl1hZAQ4be7uSq3SVV9 VpHdX8ytBXyeiEXcGie0ov1Gpq9k2kApFUMrp1yPER+L8giOJg+Cw8cZWEStcYooehCI7GlkbVEu hxHoQGQVsgYeg2jlqVxI+VdSbpy4iLM6xLkzzq4t4uEg/Aw8q6GKrmnnjqG/gbR/HO2oBlridyDW VayNE/dcKQLtpr2uCuTUD9vpH7k1hsNqUuqTI984yP++Uo4RqHoVBT4JzqQAclqsosASqWyYxy4p lAN9DPE5KINnNViFcotC9hVeqTtu9ErhA0m1qEblCVGNwN1Npwjl9JwUocTte4pQQfyRo/Cb7uaL 7Tvoy4v6U0EB0SrkDZTXOorCyO8Q+TVQa8NFDSdnUIhuia5xe/5wZQNyewa3LSoaxm57H7tF1AvU PeMUNgzcItNXMm3cNrxPjddFQVyN1+mn/DiE6xgBp2uuL9/3B3h1AfaH3vUH48Q5jICcEwEJnMDX N1gulQtWT7RRXNOFKeRYWUVviwbXF2fcE+M98D+UN16jXcBHTCva4+Ac2imFFw4h7b2j3TitEaN9 LW4GgpuDa+DeO4z1IbUt1BooDnZcYDyIsB1Sm1NrnCSIQTsk+iqijVMKMWSHveHLeoNxu/gwYHdW CCNwCvzVlyo0jgHeX77PlyjaHnWWLcoixu0sidsh9BXojZMeMXzX5nIgvxV+DZQKMYqH8J4Hr3G7 9TAsgmDfAmzjREGMjmCn+OpOYaDgiK72SX7HRKoXnc+zeorauSaP+BzcvWsTsbaIjQNxroeOK6qM 1rjTQ0fZOHkRBZUzYsuUME89ev66ekrXu02d3fJi/qnW82uPIDgQXxfRLdH1jdtgiE4vcnsGtwYq ebgyFLlt5dY4BQ9nbcj0lUxbIuyh/oH94Sb9wTg9EMMZZ4UzPJ/n/Opef4yvvpZbAW57ElLfwCSk uDIUcf8o3A2U/boG7+I4cs/Bl0k4fIf49g9f42RAhS/jTDnSamaY/LFNVtliXTPZnIOOrra+DjkP X3Q2bMHXROlPTR9P4StgjwPxHSC+qPz1LhKN5CpyqYPCH2LbQ2xR90Nse4gtyn72yH6IdI40qn6o +mF3OHQHFP26BjIE5SRWlaM+SH3k+rEG0f5i/jzQmbKKIot2zX2yGIEUvVFkoqTVD00AKXqjyEhl qReheaTojSITBR6MkJ/y6Dn1/XPYtf1kFuoYqO5gjBzBbQWXGCfuYLgRob4WagOlH/QkTrIrqR+q 6tmsl4vZaw3d8lrz/N8qco1Tf9CPQGzbsbVE4UEvApHeI22gSoOWuBnb0OV6E89MtWdSpza/pB/t gc+2ClrjRCG0wwj0NUC36FO4w9CKHYbMFTx/18fjZLjFJd0/Pdv1D9Kion0F6+64kXXeGOig8kSg g8ADzFACHUi6Jh2VPsS2h9iiyIfM9oxZivqeLTNC5Fnz3CLt4YTQjgmhpFzqd93O1vPkCPb8mn5v IaAebRXuBuqBPVnljfgagK9xumBvlpcjvgbga6AG2JN17YivAfgapwZimK1liofkFuQauC0NI22I bRu2xu2Dw2AbIn0d0ijV9c0YB36gmiT98Vyn9sdzHvxk4C5Um4hFlQ5x7Q+uDAU6a3yGoaNsoDaH C9huDDln1AkVeVn2snypcV5c0lXEfOtRt0iXQ24HxK2Bghw6xwjtaWiNk+HQRUagrwEahbm+GWIx 8jS3r6vZJl0fkVtezBm0PksbQ2kOwe0luAZur+uycjgasSbWmdtQaBhHSCDrB9aNU+3QY0aor4Ua hb1eWeMx89UNtul0lS13s+Roz1Llel5Zju0JhTgKfdbYZES7jjYKfwMIgcRBpF50t1r8vqsviCsu 5ah7tq+H4yj8Ibd95BaFP4S2d9Ci8GeNy4xAa6DtEf4+++i/r9xQKlTlKfpfpstsndbneuU1/XDX 9gAcx2ScQ8i9grQXtBu3mQ9neqd9DAS3ANc48Q+nekhtK7W2qHuxI+QZay0Y7Ccgtb2iVqCoZ0uE AokuiDbu7LxORDM6loroh+lMTQsV0ttput1tJuuVas7yoi7sg1aYSBGSA0tZoksu54vHGkYOzDuR PstnetN5yW8dPh8cNlTTSue4aX1646Y1ULsy3zEMVbWov3+eP0ye16p/rtP6yZrFNf1AeD4eCk9n EqmWVz8W/b1S2G3AWI7jN4wPBd8Qdik4aSOEOW9RgKdklaSLWZVEZQXBRIeqS1TCB4r9ibZ+Ffvb MCSQMAzCQ7miQfPB4VDQlXBnYzIKDgX1+LNYqXZZTZfV1xUEzktHpEPdQ2ndSRW12aZalPk+XLeM RuPS/Ooy65V6ZQX8q07xku2W2hJzcC8KZ0ISryya5fYlmabKKiWrbVot7vtgXY2YE0UaYPW29ZL6 Um7VQXRHNCp8y6ZyvgdW0ogxoSqpLLJNk+RQgji04RV9LygfpWErn/dWjkkYH+nJoM10EgIza7Dp NE4+7bufh2YVzSqa1aGbVUsEfjHW6tB0O5luNprb7XqyVGZwr/E07KuRsVcY15mqoW2iPu733SJN 9oa2QSxzfTHyQRsOzxrRhqMNRxuONvzDbLhxa1o+1YZHQVy14fopPw4mnBGwj7i+fG+SYWjQJKNJ RpOMJvkyk2zaQi0WMVZY5GfAIgsQeNUyRD1quXhebLOii6r2zH/T3QTcVMWdWHm7pw0JPGagIUFD gobknSExLWeGKhfLuCinpZ+Hl1opOB87l0IRVByao7fM65csNs/rn/JeBp6byKUbMV7svdd/eWid alHlL6E9QXsyLHvidbUnLUsTv8KehFoRKe3JXFVztZTLGhToQE38SgX6+DDWcg2HCzOkio74eC9e K7Ow3mzzI7yK/9WuDedgSScQemFMrYHcmzdQyyq8vjQQdVyyb6BiZq5rONF1Rjgo8yv+aXTMv3fj 6nVblot1rV4WeSR0Rs5I9ftJNs2WZV1pGu9+3mXpz8vFg8v1v/q/0vtsfU/vnXsK+cLlzYivmuuX X37pfg9CA22fixdarpU52ix3T4tVdsUtSag7XvGJSfqSpIeVUxffkHuMe9F++NF3LG6lf9ScEDib lnDo2AFXbXFwYL5o1VZnsAzMwNBla844ko3JzeDqHcoycTVx1S86nc2SLFuun2pjzuGq/lJG4PWN 5q1R7Ex7y0I2zDfS/908PBx5oZoJ7aPQufcM+FmUwJ43IyTmb7Ho40C0D760su0RbNvhd/wc2lvW HqFt77lt57Efcr3e+LsiqMZ4fiW36bBuEoQh3ZuCpg5CHDgka0//aFlEgv2j7/0jiMY0UHXzsChJ 3SOeX9EV5IIvrLvHuK17EFhDtqd7tOjz2D163j0UdUIoT2muym1S1QZVyvcX87p1bPeUTNM9O6Ie u80pvps20gwjxTeivkfdNGUOrfqtAz7+yFGsTnfzxfZdvKe8qL8TnOZbFe0xTTTCaM8H0B44ga9v sFyqz6tPgotrujCFXtoq1k3T39CsI+gfAbr3QUoogm4O6IFT3EB95PR4lcTb5WLws92J8VCgtZ33 MdE7L+bzrD4rnWtSic8h9qwi3EBRFgm/JeGUML1eZv66ekrXu00d8/Jirshajzoqstaj7vk8R13v ATwmXV/L439gJVlFOmqrtpPOqa/mo6reVVOsH+u7RcuLhVG33kU3UCjFOOOtcZfUD1X1bNbLxey1 vpiguKa/kknrYbdEKkXDjqS3kI5Kqe2kh67eUrWZKQTqZwsVl/SjPfDZVnFuoEyKnN+Sc+YKnm/s fDyOpheX9CuDG5mtwtxAhRS99FuTLqnOQpQm29l6nhyhnl/Lwy/gbn+bYJeoktpu05H0gnRL9NFo 1Lx0F95PPJSlu0h6STrqpLbb9MAPVDukP57rlP94zhuPQblwrCIc5VHLCeeMOqHCLsteli81yItL eRWBOZ+s4twScRS3GyHnJzk3UBhFe35TzsXIC4tEh5t0fUR6eTFnFjyRyyrWURe1nfUx89UNtul0 lS13s+QolF65riuLg3mGrSIe9VHbiY+DSL3obrX4fVcPvBSXcs496+MuBuqjKBzdGHXLDvHtzLqB IinadAS9EXTZEXTfEoH082Uj4vLRPvdt/sd5ht59yclGVZR+OgV3ZnIhRT5hrBQvmKj8cq9z1cPD GI/jkQey5ICJ4j+HJUskSE+M9yz9UDBVC1EBH3HNHRLRCkvT7TZdPOy2yfZ1k1Rpgvd2cdcdu6Ji NqeHY7McD2xQZTfdqG439TNrlhM+oEpZzsrBCictJwetn42JdDsjj1qk3X6CfVl0O6OOoqTlqPuc uK5qh/lDI+YSLmkR5ZZIkkh5Yy5ch+uTmr4PmnIUJC2nPI4CPzjO3DyZPVYeTSl8aFsQhoS05kTv SdLnzj0EZUzLe8iIj0V5UHMT5Rw+W84iyg2ULlHSuXGk27o8uJ1pN1DA7Eesuy+o27ZlvzPplsiX SPowtux35Jw5BqqX6L/cGHX71tb6XXE3UGBF3G/trlsor3YG3gp5lTtSN0jr4oCmtSK9Whxg22Sz M7pWyKWDQteugyU6g2uFAjoscG08KKIzv1Zom0Pi17q0+J3RtUJ0HBa6dqW570yugUIiBpxvGZaw KndmZ8ytUBCHZKAt2+bVGVxLBMEumXauW85EA/a2gmq2L5H/rp8K5q7hTuxrK11i+5SsknQxq+JK XBc2075f4T1TlaMprfQTxsFtBiQMg/BQrnjb6XxeKehKcLWXqrYoOBRURRSzqoetpsvq6woiG0YV R6+lLUsv54tHBU62qRZlvg9izxiNxmU30WXULDWZKOZe9YCS7ZZ5sAWuXSYk2W9+y/QKrCyZprPv k2S1TavFfR+sqxFzokgDod62XlJfynsfiMKIRnrBWHM53wMrqXM5xoSq3LLINk2SQwniwLtNRsz3 gvJR+aK2ovBbOQavaCPSk0EVOzUL00XqFpaAvZJIn+WjwXReGvd6KR+sTGX1pHNs9XwKWj3qdLR6 5IPkYRaJceTw0NPLZNez6VIblvluo0393c/LxYPLf17O/0zvCb3P1o03kC5T1mwyX6rnbSaFXbrw FiEdqXdYb5LVdPfHhWUj4ovi8bPpVkOZpuv00uf7evpT/4TJPNlkl92H0IAoGtRt9KdMfqzT35JL X+UGn0Oo8seLe+j3uKRwRB0n1uP4fJl/wny9qLfl4mG+/PhvUK+hvLZRfo+88CTdrS58D/0pUeTs P+Xf/u3f//I/RuGE3tN7cdmtPBKqt6Ea8myaLSd6sN8sd0+L8pV2Wfp2L/0X+k7qMc49hcby8oYR 9/c31DuuyztmV9yShFLZgfyOWZIqB+/guF18Q+4xroNZxeCk71hu61Y/5vFXeBYpHDqGVwfDi7Qv cRq7m88PWm5QsB7EYWn9VsmPbtbPI/74nfV5TNfPk8f5pbaYCR9tMdpitMVoi420xaathFHlYhkX 5fS0+uGlVgpOQ89DHsSSlDOU5122najWVNOhPKP9PrxzmK5wOMISR6Ox27K3jTng823a29adJSuW pmCw/sTuTz/kCnPV/otVfTHA94IpyihYQap/UN7aP8BGtKh/WLECBvtHs5jlUCFC5VSpcptUtUFN ty0v5nULjyIWoW7gYhlcUX5j2q1cH1ZFnl6EvBWLbFg8Dr1zEs4RDsLoEuafk76QgGmNTU5f2B0M O9awXAtGf8R9THJyLfFWLGf5bOIFEb7vnLdDi/dkyWp3hOxYWDIco2nL4XqUdJzyUAP3jH/eoWPF SpSW2T0D49z2ZrzuzpIlG7IpYSemzxSOgoTccfhZSa8JvNjt8oF37Hjq4+bzrB6xmWf5UjynJ1vz uuNmmgj0mQnWnTg4hzVKYeOFrF3ImiUiUSfWWCjPYg107y9njUlHr4VtO9m7L/vfujOHwovlwoul Zweqgbkj8XboL1HgizN0FNHrjLHKTFMu2800uPLFKmgNVFAQ2iGcwN0dWfO0nSgOvDPwg6Mbl+IX Cld6RbLr/Uk2VRTKa/qBcNQxFB6X9fLqx6J5K4VdeKsXleP4TTA5FHzTTFx4NRIhzKEnt9EJCu9n wm109m2jw+1w740gu8gI2iH3dTrT4DOnV4KIQJ4pEIqeZAahrOvIa6BAiM7iQI4K6EwtM1Ak/Lx1 kZ8t7GDyPGO4N1DQxAjsTU088l7l3UBFVYZ7T0O3TgHxaves575HAlbDski9nImcJWA5/m1WxFFO YvWx6uPU964f67GF8mI+XvQlRX93oIYsm36yRG81dRetwmSWCKedqCPRWb4qnD7W5o0QvKsNaxEl hStVjc1O0CTgiYWiKdAgljTNAJyaVi6GkTdq9OhE43LHAXh0Bu5H6Axei7DYI/CuWWeL4H06eG3y YBA7eUy/mTzXBV8/cj3m+wfyylvU0GPwyMYirmNxs++Tw3PVz4fnwUqSK8Yj1abT7WS62ehG2a4n Ogv13pMCE51y5R5oyNV7zdSztjoTx++7RZrMS/AanAPXFyM/L6YFr2ynMw3lf89gV8j1PTna/335 p54LDquqD4Qc7AMUvDX2gev7QJs6hH0AZlo7cHWmPXhWfSHT4UjoLR57vb1plyJ1QA3JJjLbJCQk E60z2L7hyAvDM7oQgdcP2NOFeIue9fmeNYvoKMg70AzoP8RpYFTqGV2NUQEvjEFGe8doi/bUG0b9 kXvEqMubQgzIaL8YbdGLesOofXbU58RV/e5h/tDIp7R9Dsdb1Kfe4GmfCUU8FZ4tMlVv8LTPegYO 10vQvw8aT+N0L7SeiOcbnm3b7jAMhmEwOB005sm7rue1yIO9GRjs81sQ7SvRblH9eoO2fT4Pon0l 2igbor+Ex2d8er8TqDWaCnYQjamqiM3DokRsz2Z+JbcloNnSXI/buCaWjycC9Unk2kau2/bAoZ+E ftIwjlHq3IXadv3Z3oWiIK52If2QH4cepNq5wcF63yPghDzYI3rXI1DqNZRRPuJjUeZya/J5ONwN LcITpV7E02A8jdsIidazHOGJkHp35jm53Qh4AwPTDnTG1BZd1DoriphWMbVE4xRR7OZzs8UqS9L9 nIw3HUIRuuVMTkOd/6kPHu6lE69I2pB4Bc52+4Xp2mzLUNgZ6hZ1sy9Qu04IQC3g5LoItd1Qu8ZJ h5h55pSTgdyW3LalzbQ9/osSCnahK7sQ7qxERk1nFLdXIqOmM2qJ8IbBDp2r2wl8fYPlUk0fjhJ1 59d0YdqXo2g7I22JWIehDkR6jzTu5cQJY8fzG7AD6Q5ki/Ro4XQRCc0JtUR1tHGyiITmhFoiIeJU 0dZjnbqS7RmnI+KMEcm+CdnGbUJEhfykp4HwVuDFnYYY9cB+dH0/skWHtDH4gaBWQLVEjLQyBoKg VkA1TmLUh7fryd+Jw9sbj2H91MPbBRk7nkJ4Ps/q253nmgGFju1hNM+SzXqmhNEQKEu0LVOiVwgU Hu2H8+5uXuKYSK+554Bjg1U9xxKJzMaZ9sDRlJZoXDbOrYeOpnEiVb9nRF8pv1LCPPXo+evqKV3v NnWgy4t5NMF6qC3ZoGbKrAyhNgHqoSeuxJlhRx8Hu9C+C9micdk3RURG94waJ2/hXBEZPWIUZTSL /GvP5znU2gc7Zlpf0+8tOKjW2MQ0KnnItG1Mo5iIU8aOrg72oLwHoaiIiJqNqI/iIiJqOKIoMt52 lRzlJFY1pr5Sffn6sUbW/mIeiSCgf2wTWij1IVofhFab4CY1H88n0GqYYCi0Ru7ogBZAFgXnMyEL 3bEayJ6SrZoA/ZasqnsMHN6wNyEKfNG+e1cIeArVl927lFM9H23H1vqskn6LyIWTfpz0Yx9q6UO2 iHAWTvsR0j2klqhwNk78EdI9pC2y2qc70apcLOOinPaHH15qpYQAx3DBpPYq3lDYbTbrdJvMNVfb dL2kOVX6p7yBHLBdqSQh+Xanii4Xs9caFeU1/d4MhNIqKFCXQhe1m2GV1A/be5C03qyiLoWIGo0o d1CXQkQNRxTPgkM/pFMPYq7geeadx+N0TMUl/cqe5QIJdyzR3ix0QpBPzactuRft80CQT82ncdvR OieIFvKMBNEMXCd+ocQsmCQu0X+/na3nyRE7+TX9roJCDoZV9LRoVOi8NjijI+/YGfXAj7nQmCKY ezDxwDScVXXzCiTlsr0HgRKNVT3Ikr1oNk6sENECUTwyDRE1HNEWjQz9EPRDGnpQ4Ad6tceP53rv +fGc1xu40t6mnkNske4s9D+GjqYlW8ls9DuGjiYemYb+Rqeewxl1QoVzlr0sX2qdp7iUB9996/vP 0BNcRkFc7T/6IT8O3YcReH+nL993BwnWAnaHfnUH49RBdMIR0CqgtmySs88VR0BzQFGIRIe8W/8R I0/3n9fVbJOuj3pQeTHvC7YnweAEpUiE1HhIUYxESI2HFOVI9Ea69aEx89UNtul0lS13s+RoxXTl uq5+Du89t6gn0RZ5EnsS9qSGnhQHkfftbrda/L6rr4wpLuX9x7N9YQy1RUO10KdHQDWgtmwstNCf R0A1oJbsLDQlofFXHhYiVI2qz3qZLrN1Wvesy2v64aArZhXSlsiNpiRSRqS/HmlbBEr7/FwktCAU U3gioWYTalr+ThYxVgD6DAAqYD4Zc0M1zM8nc51dIpmsN9vFWtXadK6rl1LwDZ2YUH5A6ClZJeli VkWHeCA6nPh+ZfzOku1EE1NhlnEwjEbCMAgP5YocDHmHOhR0JexqMBkFh4I6vLdYKdpX02X1dQWB o5BEOtQ9lF7OF4+qEbNNtSjz4fGGMRqNS2R1mbXyuSaq/V/1VrNst8xnE+A6E86EJF5ZNNOxzyyZ pqopk9U2rRb3fbCuRsyJIp1zQr1tvaS+lPcEEJ8RY0J9bFlkmybJoQRxwK35qojvBeWjHqaz38rn vZVj8HpLIj0ZVDHYbfLarVsf2DEl0md5fpTpvDR79VI++HHKIkjn2CL49MYWoS156xcciyFGjcdi wM9SZTwx3ic6+bFezKuFKBzjD7nDwmqiE+3PLx5222T7ukmqqU5owwyaurHcP1RPIIoS+e/5kAz2 Tyd2pDhph9T4i3aoZ3aIRkXOnKZyvgdWUudyaPeutXtD1++7bU8QYQyLjg05d84XHWng8kOqqtk7 Ywq/kBP7ej5xypi6sHVCY4rGFI3pjYwpa1vC8elOpPLtPO8c347AN3DdsSsa4sNgXwmFiJn6xvnD 5HmtJvrrtH5MSHHtxBsLT6f5qJZXPxaBg0phF+7jVI71IRiKRN1NDwXLC9oqwZNiQphDT9pPQXFS PBT7iXbwWjto3FKckI2JVtCKnvb7PMlmaS0LKPGbJscOp2cZUNjBQgOKBhQNKBrQCw2oJUvFjFmJ g1YVrSpa1aFbVUvWNxqzGAytKlpVtKpDt6rGLbHtPNlnUch5+5EfAjzf+NIjP5T1c6V3lvWEF9Si 9UTridaz79bTuNXcnU9L0su5W09Lgte1oulE04mmE03nZabTlm0GH7YRBs0kmkk0k0M3k7bkuvuw 3VhoJtFMopkcupm0I9uiN2L0EPrUqQj1a6p3zRna/67rumEmLt1A27J8XXv517VywqFgH5duxHiR ETF/4r51q0WVmUR7hPYI7dFZ9qhtY04ftihT3xvzYg/j42Kp+tjdT8X/6k7igBhwGeldQzqGWPyp fre333SvbigXM1Ytd1QKtrFSuDQ+Ze4IrPWguUNzh+buhuaOm7Z1pou580Yx8cu0HqA5YfCMTIrI IaesEG1y1tAKoRVCK3Q7K9SycaUvu6GFI6JIFCEpvWNF9bV58sehtvUlXX3gUTmOR9ygKDp71HGl at+G5Vg0JmhM0Ji8MyZtJ6d2dGmYjiiJsa8zvYT/+M9f/9ffDy6KeoWfd1n683Lx4HL97yx93WzX 99n6ntw79413G3lqHqRa7vthSXHnO/mjkcLtl19+ueYego2uvUcQhsrcRv/4x2S51mzkxfTSlMXq Ket6Xy9gPqHq+/75z78U903SdJ2euG2WLU/dk4fc86W64XaZrcvIv/pxstbdxYUTeAVBRI/YlcK5 Mbttp5aaw67rKPf5293fR/9z8rfgr1ExgHS9Weh4OotI9B+/5qPKbLH5riMJXWnhNPZ5ScviIZ2m +7R53TgZN3AC5wT5FE5aFv8axMntbJwiTo9XSNyXENeyYNIg4m5omYbQsG3nWprTsEaakiEg8kFp W83u+x8xRgTEak4+KJnnUEwJEncxcR+k1pptmQbQsOKDdKmhmJIhINImGpiDiOleSWQ1J0OMB5vu ldhN3CCjuENoWAy7IiItiAwyTvoRY8RoZDUnGHZF4j6XuEFGcYfQsBh2RURaEBlknPQjxohQ2syJ i2FXJO5ziRtkFHcIDYthV0SkBZFBxkk/YowYC6s5wbArEve5xA0yijuEhsWwKyLSgsgg46QfMUbo trKYEwy7InGfS9wgo7gDaFgPw66ISAsig4yTfsgYEVvNCYZdkbjPJW6QUdwhNCyGXRGRFkQGGSf9 iDEiDq3mBMOuSNznEjfIKO4QGhbDrohICyKDjJPefoxgjuPbzInEsCsS97nEDTKKO4SGxbArItKC yCDjpB8wc41cuznBsCsS97nEDTKKO4SGxbArItKCSH/ipEYiko82+oCR/WgzXzwlWed3y4nzXKuJ wwDu9cRxgcSdT1x/4sHmEqeHQSTuTOJ8jCxf73hZjkh/QsHmIiKtziXoY1D5ekQCu61If4LKRiLy EdO3EbOaOAxPGzd9s5y4/oSnzSXuxtM3y4nDuPn1jpfliGDc/HpEQquTrvoY6L4ekchuK4KRaeOm b7FjMXHCwci0cdM3y4nDQLdx0zfLicO4+fWOl+WIYNzcPMdrbDVxGDc3z/GymziMm5vneNlNHMbN b+B42Y0Ixs1Nc7xiJ7CaOAzDm+Z42U4cRvVNc7wsJ45gVP/6pEiWI4JheOMcL307i4nDMLxxjpfl xGFU3zjHy3LiMKp/veNlOSIYhjfO8aLcauIwDG+c42U5cRjVN87xspw4jOpf73hZjgiG4a9HhNmc KV5QjJtfj4iw2opQjJtfj4hrtxXpS6DbC9goEOzb3S+//HJ59Zc3CKksGjP8+19/nTwl28ls/bxJ kyxbrFeT52T7fT3POt5doeIRq1HpT4RaxGQkmlA5+x5eJK+7x8iJ+Vh/labtv1Wxq+DX9hHh/yr4 hxgsV90o8rAbYTe6XTfqj6Bw64MkbicDqNvxiCu39O+bZKVZ0bdUX1veFoKv/b45MT5tIIZ+HTEo CCB7X8Vef6SBW1ur20lIwyIGQ/vI3lex1x/N4NbW6nby46CIYSghIHtfxV5/tInbWqsBNXFftAVz zcuAYOmPumB4ZEj4AyGmPyF5w2fngyFmuNHnG3upgyGmP9HnW3upg2nioQZ5eaS1xkE0cX+isrdu YjmUXjzc4OeNpw++OwxiOAY/kb2vYm+owc+bT10HQwzGUpG9r2JvuKHZG4dNBkNMf0Kz5lorZK8b e0MN8g6oifsTlTXVvAwIlqHGd28+Ow/YQIjpT7jYVPOC7HVlb7hx7BvPzodCjMA4NrL3VewNN459 4/Ft5AyEmP7EsQ0f3wZDDEafkZjLiOlP9PnWEcDBNPFwg7yhHEgT9yfIe+smjobSizE0e6OhPRoP hJj+hGYNnz4MhpjhBlRvPH0YCjFufwKqN3c8htLEQ41b8tgRA2nioQYaeUyG0ouHGhnkMRtKLx5q KO/WM8SY04EQ05/IoLlyOLLXjb2hhixvHZ0YDjH9iYCaa62QvW7sDTeWetvI2HCI6U8s1Vxrhex1 Ys8bbFR2OE3cn6isqeZlQLAMN74rgoE0cX/iu+bag8HAMtRIMY+9oZh8DO0iLGfDMtxY7I2j9148 EGL6E4s1PHo/GGIwgorEXEZMfyKoN/dSB9LEcqiByps7HnIgR9/I/sQ9DXc8BkPMUIOfN3c8BkNM f2Kpt3Y8BtPEQ42A3tzx8AdyaIbsT0DVcMdjMMQMN6p6Y8djMMQMNao6oCYebhj0xo5HMJCczHKo YdCbOx5DIcYfblT1xo7HYIgZalR1QE3cnzCoqQuCbubCGMvIUAOfN3M1PrFl6UUt+0HxTq6qb+SO vt09JOnkOSn+evKH+pDkeZ2+6nJUgvXEQnescHhKtpPt+rdEfXs2+65uoCvK4QwuMyZUfrvbTNMs mfw+T7JZmlXLER8uxx1HL/VfzqebSbZN6XS7TRcPu22yfd0klRtQ4rrQDVx37Co+0uRpkW3Vh6pa +2m6zd/UI1ABMgpcVZ+6/Sez9epx8TTRz1QvW/ymigoOl5QhVa9aFjo8sXjFu58eDuU54WDFMkJi rtpjOlOVOi8RLH9TxXzwA4VDdR7FbKkqqCih/9UfKBqYlbpCasx60oWZFV2t0QdFXDszSx1CRFlL a+UyTJa6cVZJevfTfKrKrvIKE+AzqePSuCirDEz+12VNvxV1Pb+hsnXj1Cu7Rs8tKvuDgpWfbCCi wBeVjr5++K9ktp0tp1nVTlAhwEe6fhh4lW6uvzT/NJ94Db3cGdd7+XpW6+MC7G2qj/P4vD4Odj9B hNQvOp3Nkixbrp9ykhbT5eK/lTU7XNVfygh4A8EiT9XT+iVJl9PXEsTyt0yVYxy2Ekxy0EpI8O8/ x0p8UMwUwb09uDyIxlT545uHRTk07aHNrxQ2ECwXhnRcVo8ey2pl9xASsGotGg8/KHTcmXRVLnRJ UU5BO99taqVcBjsoEdUMzL6XZRR2399ekVDQLRLM1+S9IbfbbNbpNplrfrfpeklzevVPuf0i0IcK LgK9sjJ7Xc026fqlRtH+oi7NJESh4VbzsvnABwWVr7GaYtRoNeFnKb9eeuIMv55QH7wB+vXXsOd2 s2Ou80Hh6c9lj4WeDmcUc9Ef68W8xpsAhzEFLCfRORNRKsCpwMXAhiM+VhZPTTAW23XaOHZSh4O2 yCLoPijCjW7iB7iJPieuq6p0/tBIrIRLWgTsB8XrEdiPmNc4nCpgvw8a2A8SDwYzPeGxP/I1ht9V C9UQyq/kHwrzoKfHvG167NjuVtohcQzDYCq3VEjVGicMJpe2G0zT9I1uwMaROGcOThvCHT2agwvi jxzF3nQ3X2zfhd3Li/pTORh9MjB81BldA9UiGe4xXKy2k2Jevto9J+lidjQ7b4iwKJTHRJ6DsuOD 1vRSlAUZO57qb/N5VkNJ/a4L+U5fopCdMTJNu+mbyyioJKF6X1V0uZi91iWV4lquAoKjuFUkoTZy JUmCenH47e5lusxU4RpJ5bXcHQTHRQNB8rqCZKAwgrOIBjc9Vp8ZHM97J7PHyqMp9cBvVFNmQlqn zD1RlLvCTgxUYhD2hkU/lHi+wm7+utLLzuoOY3Etp4lDwpFNFpqYpuSocrGMD0M9fXiplRJCQKWk 8KRewzWfT/TSA/2SxSIE/ZPGwGso50aMF2sY9F+WDNaKCuGBzUN8vzL/zVQf0yN7BV3GwUeSMAzC Q7liZpWvtz4UdCUoVxImo+BQUH+qmpol6Wq6rAIviGzoMY4Oqpell/PFo2rKbFMtynwf1i0Z1cdz 5uDqMuuVemVFwevdT+rX3TKPL/mgN8WE1Kv886KZtu9ZMk2VF5YoB6pa3PfBuhoxJ8oVXvW29ZL6 Ut4fQIhGNBLyVDnfAytpxJRzr163KLJNk+RQgji04RV9LygflQ99ReG3cgyOvBHpyaCKj/JpdZG6 8YJD20T6LJ8aT+cHYqulfLBSlD2R71a++rTVnlyyFMYldghtY0rYiaXx1AFZUINnyPkZgycY0uIu DdhhQb6unqJE/nsewgC7mBP7eggtQXrSK6gXsyoPxIXX4aMBs9CAoeG70vDJro6UgYJtB0eKxGMn aN2VAW+t+KxdGZ2b6MPSVHkkdEbOSKE5yabZ8hBverfnTf9Xqre80XvnnkKDT3kzwlST//LLL93v QUgwVp9TvE+SqtnJYdZx8Q25x7gX7c2gvmNxK/1jrgG4ILpqmj6Gp+ngvOqyGU9nCkwTCnsX3HSo erqaO6t7bFL1jbXJc3kxH2rgEdW4gE9nkgzU7TDg0xjwYdqCzV9XT+l6tzmO+OQXc2Ed8iBNjPh0 pnbAMqE7jvy3GdZi/qwaUf3baEcEDbke1TczVZtJXRDML2lgPcd6ZEzTA9HQNRs6FviBqtL0x3ON V/V73g4MXDthE6yoOfYHVkEli1t1crcvOnmF2YuiptQO6fBroqbE5aP91DT/48lyPT0sUZtsVF3d N+9aFFJ4Yb14Obd9+yUPacIfzeN45IE4OXC09lNwMk3UC7nDPO+sda3wDXq0rtXsCe5lHJkn5kRx 4J1hKuDO15dh0SaETAuLDwWh2A85Obn9iVGwYq3a/tQZW/O2Pw0CWwWDEGF7bJk4sC9pEYGmyRRD IZCGLh+3hfx6swWggp93EX4Gahtd0oqMo2q8tzYdZbAIqTiPnPgMzuGVG8OYjtYicvPkUT8lWb5q hrbvWRqw4uAEjpRHFVxfalSpYL9jyJMaGJ//tBxALDxrlyGFc/IMdpdhhbXL/BI7wusdcx9fGars iQ9koBvdFVdmSWS9H6m6lfMsdNThtPMMphY13Eayi6AzLv7+ec5z7ISs3UC6sOGy13lWdqibb8dM i8F3c54VTY6/n1VtXrYTjeLj73NVcztVA39erHRFewLstCELRDyq5KMAQpJuUxqKYMT3yY71Hof1 ZrtYq6cW/6sNC+cgi04g9OBba123YdV499Y1LTz+Ba3rBB6PjrtR7Tm3qGjzArq4KqTJ/QxHXhie kWeVwDtTjPNeu1NrXhD4FpmBxpFfDSRnr6vt9I9qScHAhnWlDIPq8vV9wfx/tY/ogHFZInwSnHnC Q082fHdHyrTArjvO08jrdbiTx8VqfliSC+8pcV1X79iebos9h/lsxIXtgJq9SNowe4E3KGIytK/n 07RgMfKZ8xk4ga9vsFwqj6O+oKC4pgvTnkQ/u9NpWqQd6SzoDJzC41T+xPR4hvh2uYiVWW9CDQzR X+81qgs67cAZx5PcJjWqLUpPZ4y4aaFztHV3Fm5k7M6naVF25PPOvsxq3fE0LXDfz1GYcqJD/+rj 1PeuH2s87S/m5o70ZJNYd6BM0wowhH1iFamkftieSlraPhfhpukuOEjfWbfvtjudpukrn7gylYQ0 jA4MKXJmvx0nAKQOnIUtDEaslsfvqBwnsFHFxIHmJg7EBIDX2hLThLVPXeU+io7XykjZXsEXLeXk pilDQ9kRxcdML+7ZptNVttzNkqPweuW6JoSDg4bhXsNFyzu5aSJQb/ZGXUa8YJJoA5Ym29l6Xl9O XF7LQ0ng8GQicKSr5TNQ0Pm0/T1OHJy1v4fe5ozvL0wcYtFBzVXUL7KtwjTRqRPq3JHeOcc4Ni1k 7xG1grmC5+/6eKy7F5fyOUdfAgm0o/MvDNOihOuEeifF9EWnas6SVAP0ssznPSBwUuhgQPa6Kmbk hxWVBF4c70oZjU6uxATlRy4kH3vn7NCAi3/oDo3Obd8i9AhXqqqanWh7AW/fUm0faGzKtp8BjS/B gq7kJIZak4qG1sfWPLSmYSrLxT3Zy9dIP6dF0z+nuZoHu+NeIKNKsz9Pt7Pvi5X6pN0yKYsyBvoC QgrmnNPy7PN3WnVuecOkiotbXsT6+IXp9u2v8/ikaHAxQjc+EjZ8MDksdwkL+Rm78ojfxIqxu/I6 s2KYcHAxK76MlVOr7p23fv5GLhztd4k4q/UZuCDOztZvC/UGsZMHqZub33XBvhK5HvP9Q/OXt6gB wBpmymxMpTiVfZWAFYbZV29OR1uc+mvocJxxY7QPlt30Zm4hz9jMzWAbg2i8Q+ODIsflgT8+D+w9 8Kd7pbdET7vOz1gkIuqocU+5UZP5MknTdapc51VR4YfKni//TO+Jru7GeziRDsTNl/rArX/7t3// y/8YhROqGkdcdivNAPUp259CpUNWm+XuabG64hQpGnF/f0Pdfcs7ZtccTBVKiw+m6syp2xL6/Pw4 AovoqNCC90+tacHguSdcjgOq6uoxXa+2b8Ho/a95ozTE9Wgcgm0Cr1j4nDZpiev1p030ZO9Um8DO u5FtYtjC6kvnXkSGXnRexB22XkRG/tuJr++korcbeBwWxcyTizqzYFi0ruOpmyEPYn+/3Ot5l20n agScJKtc9t4TclhYxeHsCETGleV1J7GAcyFahEVbKO8LpmAs4nqHv7LWh+dWLTe8dtEV41EZpdts dKNs1/mJrHs5EFyhyxX13iiP7szUs7Yaod93izTZR3oamHd9T0+ZakEhzwM/xvVDHRQCVnJQEC3M ZHg904aFHC9eSe9Lwo/pYjD1faHLukRFneE0bPGr8skCvdjovU9GHFgyvSAgjnT2jU7DVg53oNPX azXrdMIVinT2jk7DlhNfTOfVE1pEYY+CaQt90cezalVuVy69tlW5OJ8eyHwae4PqDeYt9sXJDoKp wDRPGcF5DoKpwDRMpvn8KQ5SoCgwbIE1zm50rXOdHOP7oLlsU1ZwdjOQ2Q32BtUbUMpBMI0EE1Uc BNNIMAcv4CAFigLUboyzTnEU+PvsMQcwJ7PHao5DCian4EEYEnJc9Ijphu5kD9PSsGws6Asi1NdD 3X/5xj4/EqG+Euq+Sz9X+6BI0JUEGabRfOVWmjgaxbyNJXhjH7KkWTJN6flalsZuC0vMAYsiS5ol 3PdinLcWRGOdJHzzsCjZOpxtoq/kUhMoBCmg6bgNaGI70AZmD0K5EbtR37qRgWmWPrUbRUFc7Ub6 IT8OvYjB2b7UYCRHx70IPqYDe9EgelHftSsbI7xI9DVEG6bDYXgXib6OaL/vKtz16wsQnyvwadO7 +pSPNGRn5COFjVhvzttyqBDht7u5KrdJVX1Wod1fzDsbHDW0iNw2Ucv2KR5GSsobjPhYZyJ+PrHA jMPTWIt6g2ECHU7VEMwCTMPUPpxxIZgFmIZJh58/cUIKFAWGbWhCAfkPQYTUc7HpbJZk2XL9VAPz cFVXISPgDSw6O9AfupCFsxzsFe97BQpTCKjRgKLOhIAaDKjnDF02QhqqNPR+19PnHFGtoPFJcCY0 kExlFTR931X0cWfiumNJK3RND7Mcp+HUn1HgRvUhcbrdprVBkYOPUmaQ0vPMIAcrjfgjPZmb7uaL 7Tugy4u6ysETPq3CufcKiuvooNwxzgI+UQ1xthzn/usuFk6Rkc6Szr6LL1bOj5HOkk7DRKEvmBwj CiUKvc8rh5MchXPgBL6+wXKZzLY1mstrujCFBCKrYO69bIJTHIR5D3P/JRYLJzjIpmaT9F1dsXJ6 g2zmbPZd67l+coMg5CCgfmOFNxg4hVnMtqki5Zjn/WX99sS3fbpOUMRBpm1jGpUcE51JRLSCKMo5 iKjhiKKmgzxUeUBh50aeoiBjx1NvPp9n9WwUc42EIsn6iTTKKojSjVAyTNTA7aiaSSK9ZiY5uFDc IiZp/8UMC+efQ4ey7yqGlTPOoUPZd0Xl+jnm0Anovf5gyqzyK/UHSpjuBvPX1VO63m3qKJcXdZXD ewRtwrn30oMpM1vE2QSc+y9T2DeTQTr3dPZdobBxSoN07unsu15y9dwGUdijYJjecXGQWnmF4ZGb 55KGP+2Tm+f5POdT59U7xlNf0+8tuO15SahhGgrOwZHm7jSz3qsvOAVHmg80GybboL6NbB7Y7Lt6 Y2d0COHM4ey9sGRlcAjhzOHsu0x0g9gQkpCTYJjCwkMWumOFwlOynWzXvyWr6lGCDgdpCFkcCVE5 SlDPEhYPu22yfd0k1cMEG6pazUx0VYMzE2h+ISgnsfo49THq+9aPNX72F/PnERB3mwAyTATpCNCY ULk/wPL3eZLN0toZlsRvAi+O3HPAY7IpXIngdQSv7/qGMVFDhOoNKsOUkv4G7xCqN6h6r2/YGKfg VB+m1Y6n9Rkzee8FCxsjFYjnHk/DFIgviFUgC3sWWiL+wpWqQWcnWBDwRE6xEGiMShZmAAwSLCiY ZHH1XJrdZrNOt8lcm4ttul7S3Fjon3RdUx9ca0QlCYmafm7Wy8XstdbA5bV8DgnaGqvat/9Bcws9 JUn9sB1OMMBhFZx9D5pb6SchnAWchsXxv8BLQhIKEtoC8rYfQB0FcfUAav2QH4fzpxmBo1u+lKPj ZUKy36aRuYLn2sLjceqo4pJ+Zc/22BvvvUpgoUeJZGoyey81WOhOIpmazL7rFVf7koiBwkD0Xxew cOiUlEv9otvZep4coZlf0/UhhLAdzr6rAlaOnghnAWffNyZcP4AiCQUJKGgYaKYCP1BVl/54roP5 4zmvb3D9k1VQopCBUBoH5eAFjMETYKBwEbKxo+1BsTFgvZjXdgUwCW5bD1nshKyyK2D98F/JbDtb TrNqcerCpkSZrMADTRYB3/HLTBZnVKdlybLsZflSY7a4lFeRbz22qDCYN5oimjmaKDEgmoaiOXiN ATnQHLiGiQwdt49GgS/aHT4h4CUrvXH4xMjTyL6uZpt0fQRteTHHz/otXa5h8gOmRUI6K3T2XX+w ckqCeO7x7L8oYuG0BPHc49l3eeT6qQmysGeh76qElSNpHERqvrRbLX7f1dcWFJd0bXDP9qUFrmGJ l3AURTT3aPZdErl+BEUONAeG6Q947kRBGM1zFrxMl9k6rS9vL6/ph4Pb66yis+8ShDEJ5BDmL4fZ M0xH6W/iOoT562FGdcW4mQ2iWaDZJq3Ynl0h9kbV7App8vtukR7SKzT0O9f3Rt5xh/DAj8EO0bMO 0X8xx74IKbJZsNl3JcfGECmyWbDZd2Xp6hgpglCAYJiOox1RzllR7uFlmqaqgpX5qRVtyI1FRBx6 ByYeprPfJvOHsqrfgPBUKdCPpXKsgNDFtEP6VrK4oG0fBb+USBkFudc9L21ZnT+vqXWlc9y6Pr1x 6xomhVzZuhE5p3XhWYqNrWuawMEixoJ8KvgMzAQF7AmQgI8OzfqUrJJ0MatWMfEbRgDfr4S7smQ7 0Xa74kIwuJ+TMAzCQ7lia13u3xwKuvDGOsJyEvZBOUXtYqXGnNV0WX1dQeAZL5EOdQ+ll/PFo2qO bFMtqibgYBUxRqNxOXDoMms1QE5US77qdAbZbpmH3cG1+pwJSbyyaKbBz5JpqholWW3TanHfB+tq xJwo0ivL1dvWS+pLeV8FQRgxJtTHlkW2aZIcShCHNjzK94LyUXnnLgq/lWMNZkF6MqhisNvktVvv pbBsRqTPxIm+7YMf9zl9u00e+prtqFSKE+dUUTi9ZciikPMzNiiAGeS5SwN2OB1Lf2xRIv89tw/g Q53Y1zOME3bFdeGOinbFXLtCIyFPlfM9sJI6l0M7dqUdk23KYH+21UeRE59hxGBy0YihEUMj1lcj 1qYIo+wGxoTFyN+Hj/XRNNk+C3rDMbi+CBj89w1Z0733WdNdkGdlfV3ebH0b/Fa0vmh90fp+vfU1 bD+pSet4QyFiZTOf5w+T5/VqsV2nNSWjvNb8KaHwdKbMavlDaLRS2IU7f+eYKmEOPWlYBYUJR8Nq n2FFA3mtgez9IhhjlpKjPUV7ivZ06Pa09wu3jNnNgPYU7Sna06Hb074vNvzARdqhcKV3loGEN32h gUQDiQay7wbSsEW4Ju0UQAOJBhIN5NANpEXr2J0xE289Nds9Pi7+qFY09X20DGgZ0DKcZxlM2wNx nWXw+GnLgDsh0DKgZTjPMhiWYIuHNJLhfgXxfEUfXnSpp2Q719/PHAJvS/QdnQ13vvrbOn0uJz15 AQ7vp1JtOVIvt1w8L7ZZ0akVAflv9/nyZLBBYt+Tp6crEk0Pmh40PWeZHt+wdGifZHrIiOh1cTnn s8fJdPfHZKvrZ2+F3qwJd8HOLd0R12Envfz3dTXTtVKk/NY/6W7twN1auhHjRcZw/ZcHHKpFBbxR Fw0YGjA0YO8M2AelwGPKgAVi7OvgcviP//z1f/39sFNcvcLPuyz9ebl4cLn+d5a+brbr+2x9T+6d +8a7jdxIv0v222SV/Oh6Gy9go0Anzfvll1+Ae2TZ8owbhFTB+s9//mUS/v2vv070CV6z9fNGdY5s sV4pc739vtY7zTrdndPYI8XdVYl0mu6zjlx6Nx5yz5eq+rfLbF3eQ/04WWvIXXgbRBBE9Ig4WVua dwviPmiR94cQF5MQies9cR+0atZUG6deSnE7aiLu7Ht4Wum75h4jJ+b6jMMc2v9Wxa7qQy7FPvR1 feiDVkqaarWxD2EfOqMP0Yv6UMvqOOHqXa6zE31IwLKARk13vzJYMAOiBXBQL2Rjwr1TeV5YQ7k4 jtxKigSduHzxsNsm29dNUk2SwCS8eI4wf7SfZ+Z/PFmup/N9yYlCaqOfT8CzS7iQIj84rFK8aObK L/nEHD5Hl8fxaD/Lrefncxro6Jaf7zI6WpYGfQkdTAtcOnSR/LFNVrqTV+ngHJwqh9xxHHIeHfDm daTjHR0t6yK+hg5tM5vpgDd1IR0fQEeLNv75dCg0RkWCwP1TqzkriAPvTxHjODiRtALOFOy6Qh+K Xt917cNJ3/tzRoe6QeS/5aTIQ5XV5ZCVRJicgu/OCNF7g/ZLGo/XM/pgZQqHRg6IN7zI83PwbhF4 7ca7/zlZepIyHLvcoctJp0XY7NFcRfkbnJ7jbxA4x48aNFzRMGjApv/rBg2LAGwRpnoE4JVJUf0w 8EDrSUAf58usp0XstUhUX8FeGBG3KZElfD761YksEbxPB69FqeqLo+u7LgF9SXiJjY2+pEVQGpYk QxtDMVKNquWH7VpVaNUWOvCzVBlPHDIB/1AWtDZyN6QPVq5jHJzjOlJ4PtAn1zGOAn//rYepz2T2 WHk0pR5YNAhDQo6L7mdNh/AYbF/s6Sao7iD2A8QeZSvEfoDYox6H2A8Qe9M24Sq/3h03zgVgCVf7 RVSe8IsI3DWHEsiL/ZDr8/e+K4hqlOdXcksA50JRXYTy1i5ie+DaOLESA9fI+8fxTuxRCofBu6JI 6Lw0c1Vuk6oqrVK7v5iT68CbRe1B1yKN8ZNDNoII31cNOp3Nkixbrp9qFB2u5k/kUGTe8KO1L+PI QL2wJzEQ5KjKkXHyX2+CCshRlaMWxa5H49pnL94SNBR6MrCZqcpNahAVl3TleAR6WasIMiyRt8Wa LxJXEGeijoTTyBPTSBq6OofPaW7BZ1vFrWkJa+21lF8oHAkW+IFqjPTHc4109XveguAhOlZhbtwO s96EShDbL8TWRDGmH5EZxPbrsKUmair9CAQhtl+IrUV6yjDmcHzMfHWDbTpdZcvdLFlta+RWrud9 HDwJzUSC2V2nNFeS9v0Eel/qVIP1nTQMNqx92Ukz4mNRnuvUtMiCwzlbzVOqO3Np2MHfF3Ppuk54 nKMDTpbboxwdgvgjRx+/u5svtu80p/KirkNwlLDKbpq2RwztJsJ5gNM0MQuNZ85n4AS+vsFyqVzr +sLL4pouTCGH2So6DTsSFE0norlH0zRtCw1nQWfgFHhnaoK+WB0Dur98n29lsX50t2NLUhToJIat 8Sb4VK/exJsQ3Rq6ph1ch0M/ElojlJl2vhl6AJowSpinHj1/XT2l692mvoOnvKjrkPRlpXNnPj/o +Cq0oFesC0Q4SzhRTDIPTk59NbNXNaUqb/1Yg3N/sYDT+qG975KSjXSqKYFyVzab9XIxe62vqS6u 3TeuS7SKTZSTjGOTuYLnC7EejydFxSX9ymDmHKvA7LuUZCOYknKpX3Q7W8+TIzLzaxoaIaBkBlax iUKSeWxasiK0M5N9V5AsZJIzqmNiWZa9LF9qWBaXNDIMPB7eKjJNk42QTMHjIPK+3e1Wi9939YG8 uKSR4eCpboaTyS4i0zRVqNOOUu5IT5yx74NQUETp1b4Pay0qv4RbbppW1HEn9DiSTQetMA4qQSGL Hb1EvU29dxm8D/oy9V4QEcgzU90I6IEmQsc7DuPcNAGo2+qPOBLnGEvaUNV9MpZ2Cuyd+UWNqMkN DYUrvWLfz/NatdQ6ras1xTX9JTCpofC4rJdXPxYtXynsgg9nVI7jt61Dh4Jvu4dcOCcsIcx56x9P ySpJF7Nqv1C+L3z4pO9XOlamzMfLdFntkA2HJ5EwDMJDuWLcytviUNCV8PoFJqPgUFBv7FW9LklX 02X1dQWB9+US6VD3UHo5XzwqNLNNtSjzfbhuGY3GZUfUZVSXTyaK6lcdsMt2y3xxLegucSYk2Z++ nOmGyZJpOvs+SVbbtFrc98G6GjEnirSdVW9bL6kv5f0b7BQjGhXje1M53wMracSYUJVUFtmmSXIo QRza8Iq+F5SPyre7FYXfyjF4rxuRngyq+Ow2eavUTTK89IVIn+XDx3Rejgb1Uj5YKco+ajekbh99 2mofL9pSzE1TKTHh/O3n/XZlkqqgftG8n5smevZm/kRcPtoPCvkfT5br6SGF1WSjKupEpEFI4YX1 4gUTlV/yURTu3DyORx7IkgMOYV1ZumwubppO2ZGlaMQaWYIdUs1SyM5gqeG0dZyLM9F1LmOaAIk7 MQazxa3C7GX+pWkCZUdDGbvNhrIpNc5nBi3RubwN525X22ya3Ilx0qHt8eiMroF6KLoVQ1glWiH2 IqdCDFgJjSKt7rRiDsdZ+4K5gZnFOrNqoID6eQ7w50UKvo7VIBrTQNXNw6Ik9eD/6iu6glzwhfXp huO20w3BcynM7h4XBWWFafpsR/1BeZOnsqDCJ/19rv4gmCQuaV/ID+pmJroPXleTbJrmpcrFMi7K aQweXmql4K0VXGHq+BWb/HxYSkBgJTtUN3LPEvwJ3DVQ8EfBv14cBf+vEvxlV+NnoAqKgv+NowTW nUDcmXbjdFruMM87K8TasH5w2Mff+XfdBHthoHb6eYI9Lp7/GuisED+HtNPIsgQh3OmoCQnzjqNT BkruDzravGwn2TRbTp4Vhn9MVskPxcZrusty3w9OLRS6nqtnoE9ZNt0sXqhy6VPVNmqetHs6VPzd z7ss/Xm5eHD5z/oBVP+8L3Gfre/pvXNPoRdUbU9C4oxdxV/+auXt9TRQP0K3Vv3+6t/8EWfcVs2y 1FSk+GS99K68Y3bFLUkoo/qbQnVw1g25x7iWUotJpL5jub5P/Zg3CDwwKYdxDDuMsPbxOeB/kBjq culEwtM++VOSbZ/n4nz+DkUQQPsBdM07mo46gu7PiJ+pN9+q0XC9SVZ51YITSFVTNDquKQ+OZHSv KeNOQ4tc3znEcdV3POweJ+Xjy1/vm/Z5qUp2R0FDJcNu0udUcos+0z9HILc+zoiOor1Bm62fn9er 7uantGcyQnsGANQitvQUIEJ818Xmft/cHxReLr2biLof4N0QPx5jW75vy7bgaRA7ucjR3JiuC8Z+ I9djOk1s2XfLW9Q6LxNgSJ1FXB+6Nfs+OTxX/Xx4XsMZt2I8ioss5ZuNjmhv15PlIjvEIVw40iqj IM63XhfjcT6U/0j2u7AZAUdl15faoNU3bMMKU1/yBvHYD3UIWWGyWNV3Mnwv0KMM1m71EhfetsTF AWvfOA2iezdqCz1/QTcK2djRLDUt6GrcRogLuu4HsaCrO+1tMW/bB43YG1UHjTT5fbdID6NGQ0Df 9cXI348ak2y3yfajTMNGC18EDP77hlHJez8qufCyostGJRsFn+7w4y6gngk+dm3T7A5uW9jbdquN rj4KoNUO4bVtMeqT047bkHu2Dbk7tm27jfqE7QDmmlbt5+xObdsmIPQ+huF9WHbUSPcO0bZDCTvE QDqEHeebdO8IbXIidoRhdAQuRnkSwdfVbJOujw4BKC/maINbF63qEi2q7OcvqGAR1UuXVCeYAf2B OGBdScH0luk8fK3aT79k0ZL6p/t8myT4MOlGjBcg6L88bK+rFhUeDC9uCMUNobZuCO1uT1rk6f7Y E+qftidwObQnaE/QntzQnnzQpjem7YkY+0KBGP7jP3/9X3+f7G/ybp3eLH3dbNd6oR65d+6b7xZL ourjl19+6XyPkRNzLbCGf//rr5P/VsW63skL2CjQezfgt8my5Rk3CPWm+H/+8y+T/HW06DtbP29U H8sW65Uywtvv6zm4Z+OMu3Mae6S4uyqRTtPXg0982d14yD1fqjrbLrN1eQ/142Sdz4MalroHET0C VwqnFdyL9op7KN73S7w3e9XUZewZmIMTs8Sh0NOOubgEc2lJ4k7Tj034urWzREb++HCDd6tg327g cQrOccyz6aSjIywNzPyJeZWHcDRyFdmLsnFKA7NxYsKSUy7wiI9FmZOxacsBh8MP5hla2tXQGpjP M9SZVst8nvPdplbKZfBsJqK0CHsWZY7CnrRhZkyj0VEFixoqt6hgO3IGDmdmLASVTI2HOh69TuvT jfKafjgoOps4nnUG17T0f90y/aoqDOO2SLHTIDZ8fKS4c+uYlpOvY+uEVEeRy9ZRXVQNw0dCEIU1 KxIGeiJZ0XOOynHS4O0KMWrlAV738gk8sK7ep4Hp8j4vNS13HE7PGp5cOETQn+HJKq+1QvtFySGl cXIDjWS4P1tmviqtn2J/rr+fOXCqJyZHY51qePVrmmy3r39bp89ajs7LeLzB7Dl+0GYwYQG8q8FE xR0Vd+MV986WxDjxqKMlCdmoyZLAUXW0JGhJ0JK8tySVY80vkqF9A/U5PBzi1lLHmPnqBtt0usqW u1lyJEdXrueih9OXrd6VI6ovmnb6xul0n31GBE4FbzMV7EygcbLbgAi0a2VOZwRN09AGhSBn1NG7 27LsZXm0ty2/lHuioI9uOIMXzWN9A2XGzzrWeRBJWmxcHeZ1Nbh2SJOXHkIqaMhHoi1PDyiXmWjq Ore+adInrve+8SzbtlQmnUk3UNRF0m8aT7IuNUOF9cscWOMkXVw+2zL3t8xKV87JvWgplm9g/lfM G3hiJoVHMlyBu+8YmN31M9NKuULv6dGltHSd/6nrg2+ljLmkDcYczOZOhO+fmQ4eXB1kkVX1HczG 2iural32687gDj0ha8dDPLyRd5x3z4PNal/y7tmVVrtzfzAwHysa8gFF3zqDa2D+VAT3FLiWJPzt DKyBZ04isIOK/nZG18BzHjFXNeYSuV13uGQtue+0CH89ySvriih2886wWGVJuu8EHN7aphM/xEeR NR8ctC+OrGGivZtQ2SLR9YVK1wkBKgW84wSpNJ3KFvmtL1T6MmRHg7mAd6X1ZTC3CDLSInr1BjJ/ 5B5B5vKmSRRC9smQtUhevYHMPkuGSwauArtFEusN2PZZTwT7KrBbtK3egG2dxVa4CKFz66hym1R9 WRXP/cW8Rhw4oYY9jLbIWL1h1Drji4weGLXjXD5j4p2ChkIP66eXnhDoy20KoxM7jmczJmCJWBVY WaLOWOj1Wbvk7jJALRFqLHT5ENAcUAO3TPVhjbQY+fv+MMl2m2y/PqQh6b7vvV8f4sKpCC7rP4JJ og9paFsjCiYOtAlkaosuZJ8rYGuqvs6o2qIu2ecUIKpHqH5QTr8POAZ5pJw1ffLA98PcvPOd/NFI XnegsrqH0Gmgr7tHEAbKy4j+8Y/Jcq3T7ObF9DLsxeoJOgD53COafbI/YTm/b5Km6/TEbc86CVk2 nIQMlrjoJOQKu5fkbPGpcZKQPnOTuE1L8OG15VdnVSMuH+2zX+d/nDf6vuRko776vjkNhpAiXxhf KV60cOUXbfclnMWYx/HIA42a03AQWDejdhkYxukwncG4Zm8GgvEODFvEj3EcnJgKN/Dw4TsfiAj5 GcAxB4wKWAmcJQn0PHHYWPZDWa9aeqWG3WjKd46DcxLjUjiHZp/yMxEh9Ta4c7KJEHBaYvaM4jLk jZNs9EkL3Dtx0gJleNaZTQnuO6NrnJjzJX7jZXt6lfEL5JmplAQoddtk/Iw74wrH+w8Y762VFi+C nRmnyOBIj/CeC69xGg3CO7RTcDqza9wmn45+ahQ58Rkn2cHnL17qp1q8kOIyeoyTTTqq065uTmCJ DniiBy7R+QSyLDkZCQ9RGFDet8sIN05AQq9xcAfXdYbXkj063dTPC5LJUy8Q+x41PQiQ+e+5UAo+ wIkdKQ6QPiWrJF3MqnAS14dTE/l+he5MDVVHZ7w3ODR4xrvBZ7zj2fCgkTv/bHj/rlt6S2bgQV4d zoaPAl+cMTMWt5gZf507ScaKwm9383lW35A91yMr8Xtz8obfdUQ28CSuDrCO8+WmjR4ogb2GQXmg dgXdK7y7F/H+QfKoqiESOiNHH9k6yabZUvM0322gtc7qv1K92pneO/cUAjO/GXHGkR6I83sl6YvG SzlKm+XuSVdQ59sqPyTYv2O+Nru4I7gq+8xbklBG9Tfdt/fFN+Qe4160d7P0HcsVeOrHvCfDq72F Q8fwYg74HOlLWBPOXbedDbzt8KyeBKM6SfEslGdJ8U3pMi40rOGIj5Uj8LxWzb5OGxcQUQd+nnEr iKrQXTSg87ajtHBAt2RAtyqkJEhXI/tB28euOR4+1FpMeTy88gFqpVwGp8mLKC3iUHu/oRaHovDK +HHky2/gmfKwBSIy8t4iJ++M5BtzHod3TZpnJztz03ZS1RdwE8v4wA19eKmVgo9gUgiM6RhGgMND s7qRW6yy3Q+WVQTKa7mJhM258Lisl1c/Fs1aKezC+FCpR+k9PoeCbwS5cAJKotxWejK0KShMPIY2 7QttYoiyNH60q/EzTSY3edBUUwu9i7F9agF/mnlDZmdq2o4cs3k+y0l01nwW3GBw8bxCMOloa962 oIf0JD5dZe6y6axp2xc/x00TNOQ6lHg6Wguq04a3Pr+o9Q2U0i63ONyRnjjDeDTtg+9RUAJTzF/H u4FqHPJ+Mghn26megnf1Dg3ceIjLHvAkkA9AXRgo7CHqQ0jCK0RXZO2QBQeBrIGW0r3rthZStKlz tud+Nuyo73Ak9M6i9lgmHMayCEzT5D/BfBZXWjLbbTbrdJvk2sE2XS9pbnj0T/nQA58SFPsjnVz2 hF9H4Uayyq/rDIVpsshNoFBVrWxe+8lTPjy5tqh52/QLHIw+dTD6ukX/9iXL694pTBNYWMRYIeo+ Ax1CwMtF+UijndfswwvVGT+n2jgxCTMtGN3/eR6g3P89YfB2PFe9ExyQ9OFlA1+YCNIfaYMy3c0X 23dolxd15fOe5JXvDrZp2hGCfR3YgaNT1c/Wy6Wa89ed2+KaLkxBNdUmrE2TiBDrK7EOnMKZUV82 PU4p9Xb5Pl/1br3RNk1EsoBuQcaON27e4wrmQrcJKtc0ucYCqL50J6v6Bh3PeF09pevdpg51eVFX fm8Wx3UG2zRRB8G+EmzP5znYOppzzLW+lkfQwC2tVnFt2p4uC7gWlJNYL2NPntXXrx/ru37Ki7nV 7M1Kpc54Wan9CCpJqM9r36yXi9lrfaVDcS2PaPZmqUPn5m1TcTDMP4wwv10rfzp3B9N27dzG2nER ePEZC2+ZtH5626bgoL0bhr2z9GTh7h2jTQH6go4RsrHjjJtzO4PLroaS25nHQaRedLda/L6rD9jF pRxbryc5zLtja5rCc5sBW1AvDr/d6fQLqnCtdctrOVnWTz5R4bAqZqem3bpztGANui42Ye0NUGNh nqvTgP9lHPz6j/Hf1Bf9SBdbHavNF9pKcIEu86TjFmXeFeEOOKwyGUtlOOerv63T5304OP97Dv99 5IfqEapZklTZaEWhGkxXb2XzC7oOwJkRp7GjU6/pfppnY1HGPf/fvB7AJhoRT5AyuUqe7aSexaXB KxnRiLVkfwH7OmZ/ubqvomx0+yEoFCJmZ+XVatgPhXm1MK/WsdnCvFpfblkvyt/gmSZc6kS8nndW QlT4Bj3KxYCb2q9j1zRVdEjsWphHpOuJFJ5pm/AwgTWepNuKu9v1kADPNHnWHefCqk5PN1GtMD9k qoNPXnBdl/HjU81gZ1GxKWkDm7DP/3W+hHHjenfATNvgdylg45Hw4NSJYLzMrtSJ3ZvdtO1vahiV 4T55izb4RYuuds865nCUh7WhV+o8rDp8cEZqObjqL87DSkOh5xSnYSLQWG44TJfNDUyTJAc1N6CS +mH7wk4wOG8VhaZJp4OikEmqA9RtGanB/MeGUyguoVCapnTaesS8bbmqqsTJi4gzTa/rSNw4ko3E wcf0hSyK9O7o1oR/sBAyeOK6Zt2XxukYlto4TAD8pf2DdfREpXFaCcaoUZc5j/lK0uuLVg3JD9Jl ipOTA6GPfypO/H3YLZZzhf/se7H7Y9H5XOJAn+1u67nE3VsS8yB+7IYhIsJ99y0sTX7Q9t4yTjaq OnMXBMy8woUUucmpFC9Ze/tFN4GEzTqP45EHIueAH/Y5yBkmQgjhuUE+BuULcNVjFEDpYYDQFbG5 bzzNyWMsPmUL4JMzzbQFuEcKp4pXAdQmDSBARs38bEx+2x3eNkUBPaHrPKG+bJ0mY6KnCk0p8nhf Vgt07Qh+m6iBHWEYHYFyqlurPUtUX/JHd+8SbaoLOjZmOTZWpfvpjq2BJy4htiewtTRrS3eAW7QV 4epBd3aCXwHrFpGr2I8O/M6AWBGsCbKIjortqTPADyHgUlJOGBN++35FSht0iyHtV8R9h+/7zEWL fX3T9sxcvonACY83EcCtgJsIbmSULwPMsF0qwnUCoazc9EUH37Mk1RS85NF3B7ThrohpMS88/Hlu CEUDZKEbH/HoM3gSiDx+BY+m6UkX8+g6MX/PowBz1iOPxvNo2m6bSwdgXxJ+HMpiTROrXoSybKLL sO03l1s7X8bjI7xccCaLeH0BXobtq+mAl6+XltfxgisU8fpsvMifHMewLTMXA6ZaUy/+O6c14fHV qtY0bTsK+jq4nP9apg3b8IIeFkJ9PdSG7VJBvw6hvh5qw6SOz/clkaArCTJMy0D/9Q9FihA6x7kq t0nVl9UWYZYXczrBsyXswrP30oZ9rijyWeHTMKkDvUrks8Zn38WSax1EhKECg2HShkELoyxLbdid EdJ3dcKYtU2I1B4pwySS/i5PQqT2SBmmUGDUwuIdR5ey2X+hwb6QBcJZwtl3wcDGeAXCWcJpmBbx +cEKJKEkAcP+5pmpAezNvRRTjP4jpj3AdPAiADLxjom+awEXHoSlj6TW++rPOJIaTliJR1KXBfFI 6n1xPJK6Z6khlN2jhulbOpEQ56wo9/AyTVM1tOjeUy3alEdtPCYubAM52kC0gWgD0QaCNtAwQfZK G8iCBhvYYMPQBqINRBtomw285MgibQNbVhD0JLGeK8ZxcCLDb0M6SBl7o2qG3zT5fbdIDyl+G8y7 64uRv48WTrLdJtunBG44X9j33qcEduHT0AdxSsiljBqX/DFkYVSbctRyl8LHPuW5Sws715K7lIED Sl9yl6obRP74cIN3e8rebuBx2r9zMC5lt2WhwVewOybcO3HCG2WDP+ENt1Nei33LEgY02ZCyQkSg fb5zTmEBTxAyXJq5lKGWxQ9oOk00nYJK6isfdLNZLxez1/rineJaDrDsobZ4KcCGLYvAA2E/inkm qQ6Gpcl2tp7XF6yV1/IRGTw40DLmW9ZYoNFGgM0GuGVBCAJsJMBWH8l9IcLMNG1f+R1i1Oh3wM9S ZWJ9mGrT8UANXWUgxwPFQaRedLda/L6rW+viUj6l9ew31sw0BTfklMVBCaB67b2EmweO9C+6huHI v8c8qt91O/u+WKk33S2TyS5L9pKqVlM5BTF0iUNJPeqv/p399l41EGCvcYLAHx01lqzZabixvAsb y7TNqh3N0jiSjWYJPrQ7ZFHkxO1mScD66P/f3rs2N46b66J/xd9WUuV0cCc5VbsmFC9rZ+9MZmo6 WeesOh9UtqTuVo0saSTZnl6//gCkLqAMmgRpWSD8VqWmZUYAKeLBi/f6vEMRSz56/sUJ7jYNyxTc Hat/7Wj95xnnrXTImtinrQ6ZcJ7TVnkpNb8S8lIgL6U6HPJSrpWXoklPy9w86liBNjBb+Fs9FHQ/ 4y9UqU0znmYoI7H8zePpYrydf5UCejzbbFYb9dNv/rqY3wv218X0L+QTJp+2q/pJJL4qk0y6zBKT eD/LYrX6TQqZ7feH+9VCbZz282QB4UxpE9OVGl8ZOr+fNAwmCBe2/XQhx46nqxIE2gTTRfPLwBEv f8ZE2Vn2L1Q9BVHGkpyjGCzttKXlcxS/JIj2v8RucIATef9Igmq8vduq1ZiovLX9saRmetxuTrOp 76i5PpFP6BMxaXj7KbOQn6aU58F68fh1vtz2mBInoXzKYsbtbCP393HfWk/IAspU3WN5/qsZ90lt 8mMRgTKLYGkXpGa7wGylvZfMcC6s3SnjktOkcHQotMz+2K3W5OZP8l+pnc2UnizVYZP0xylKpEo1 nW6rBJRTJfpxNBjnrLb8wnL5HQwKd/GCBPzYu/1ZakKVeERNw3eGcNYqHkHqGOUGE4/w0RUSdhd5 zgWF31HkIUJz0Uy8Gw2l45sGA1ubzrVa+24esSyOeAtfLh+0L9dXYy9AJ/hSO/gyCKt6Hlb1LHUx wN2x7lxg9R21VJqErbRUNnQt1a88goB0VlBZU2g6zlHhKa/HuxBG1SoTAY2iI973U1QQT2uASFOE 0npJXRNp7iepsWCjFuWHJDJ7XNwtP+wDjqZA7kcBx1COcZziMKh3MhnFtmfyrCl6BpB1C7KEEfVW 5TuUL3b1pZrysL9YZFmwoeieGnhtdU/nagc7UhJkyu/zogFLndZ4sW4Z13SDjljK99k4ddWwzJzZ 4Jzjqw+i/Qj5qLZTBkTzutZTgGh/Ed0QxRoKokFG/8Gp4KxwWHyZnzl5y0vqVwYDCcz2gbQfQSoQ 0gDpI6SdrGVMxKvV5DXGY5Yw1iLqZrSPrIk4aIgFbi6HNeby+gUh3hD0GopUjELlRqik43Jznrpl Oi5g5YSVhqDRYLASjcR5MxAzkTRgpTNWfOGdBAOCM0pUP+rtdvu0OKu8Ly4V/l1jZY9nmHaOpxIs CMB0T0xfqA6LKkzzNFL5Gcmv//3Lv34eHyZ5USEw2Xxf71aqRAB/Qp9qZxsFXKj04m9H3HaeKRqN wh9ufvzxxz5zcDrqO0ecJPLtZr/+WlZllMOU/TNffjUVZ7SaN4glcBWl1+fP/yjnLStZ6qfdbhev zckSFkShnHC32K724JUfxyuFXnNtBorjjJxTDlRa02vo1SgHuCV6Heuk2S2NiaEwaFODXZeWARlJ 15K7GnIty0S4Y50/3zfZFDhXe8GOdxeYzlUnMUSDoBUBRU3d9oCEH42jWL6jzfND1TXw/FC8WKNW 7Rn+HGvR+bHw59fhq9VoWhYqcdcKlTJlZeNynATh9HFdGSWomVA+I6S0/ssxZ9Y/MYMoIcmpx2zB I3ZOSUPMDbxxEo9ohVnmbBzD5uQ5oLK5PJUNUNK8lAqWrhDhSf1Xp5oYhrNWNTFGHRkOwasdgmF3 uH/kErCecMc0alNGg40wcrqMRsOTpWovHKT/hG4IIEGbEB91R7yDDKDgff4ADphQIzmwrBwTDvar C9lotAfg42axtxBnf8hXJv8sAkd1A0csPB+ouoIqO/EwGFPzqZjQmJGDElDNIh1/Xazu7xbj1Xo3 X5UkacXK8bozIxaEG2c6DhWi7iFGLD1sPrlry1tKeJW3VlA2ZyahmKtKtgpcRI1N1Acu7gXYgpzp aCn8HvulxmYJJYGCRll1TNk8dj+OmGshEyJ/HzqQvRcdZNXKzJZF3LOuPINk57s4ePtlaYoeQf2n U/WfPlUV9YFtU/TpCrClmbxSOFGP99W9qGbfogh4kd4gb3b322y8/b7c3f0hEfWwvtuNn+c7OcFm 39MBm5UgEaSK/PXVGbb7KQgynTsc8zDD7SKbRlnqmWLTFFkaDLZ4OspfaXUuzGGoMItzvdW5usnz sdO5lCJm+Rm+7FxulkMfPBW6DzKbok2eI1NwxadXSSAV5iog6wRSaCYBzSReDIVmEoOM3PWQsIFz RWwJzpP4UM+4ftopGvnfH2eFu7TMXd78Xuj8psGhVC7lTdV2U60N1cOWTQ7VJ/WwxMw9GoqMsrJH ovrmcZ30oVLggWQByfJhJYtlkDRoCpJ6rruFeTDSrYrN7PfH+eZoVtQ496R6pyKUVbMiqOltyBPW IpRKkXG4w6FUHXWWgaXAueLJhKZUeTyUoC4o0beFm/rk32O8xvWa5slI8++Vjg59pDB6NyT0wiTW bIHjwOJftTuQ2fUVsjRogwhzDwJXEeFc6SF0rf6Y8UZb4DoYbwTgfqwUj1Arj7VsQB24F/+EpKZL IJ7lUcKw0qolliqAL66UURTjSsZJQg6Wfl1sDyNzAr9zsT1tp1gWNAZeFDR+pGQoTzvAhLS7suJc deQ7pkSjovdVc0q0uZ3ZoIDvlXKj1aBblsEFzhVjDqGDPScJV5rCeiLfbBU+5SWF3AAbUzbcho+t tHStihJ0Y3BjvIp1rW7dUrsNPakNfP/ecN52HNLRhANLODlYe/d+opOm+Qi9GhPgNflBHsYEROfz N3Sw4G4YMmkgWeNS0xSqOuR1TdN4bxdPXw3p2BbqrlXaZSJAh3HTx/X9U2UQN4shPGKKeqN4u3Il 7h/utr9t9+/5lPuHzLwdKAvUPlmsvi5mT7PFwVl4ynepqXPCEVHpFcVNj4PlDq2ONSqOEn+sEPCv 4U+IoRjK3ZkhwguRZA7CL/S+3VI5CXHAmnv0GlUSF1GnFdRbZjWGzvVJEyEttPHvyzKx56h34dCY Tib1tWz0qr5mVLi41P9w3K6yBQ+Es68PDhyMrAzATYdTFKT1XUKN+WSeAcfBcrsBVIl6V7qkIcgy /SH0I0IALt5GFy8JSZQ0q13hQILAUfeU79C1sIZI40CVds6nD+Mv86VKqJYflXCuSUEQqgqkWm9n TvcfUMMGnyroe4Azci0OAeC88awfYR90OhjWCBOdmqfUAZaPD6rk9swFUiN4EppFIW5WPplxgT+6 8tkHTa7FN0DW3fjWOUmHp2VKQORaTOJjUdn7mbwqT9Cu4eDIkyAFhIPrwsGYh+pBW7nFjRM4iHct WdvSuxn5UZrzzm7xq/qYcBBJIE2/L/cknZpXvrxWqLZsICEdHbuW+V+RgyEdkNVvKKu9cldpiTuW FQZRQwTqCiHsNEmFhtmHoxGHqZkElnPFotKCYgwDxRgQAQERkMNEQLoks3VGORYJ5QLFKpvr7mlx pBSTn4slNQs+npPc0MnezNviZ9dvX09lWyw7FuG0x7JAOTN1sK8xkQDLvmIZI9cCopkIGKPluPun u81GGqtKq9GH1lEspymu0U2NTSBUfvaIN9UHIGOKpYPmdA8QuBZ37AcCGteAwOxVARCUIHAsXAga 2ofPpOgBZseCi6CiAZi7g9mxyKQ9mKMwT8/4bIW5SfYHb5PRByWOxfM6oCTKwnOUmI0jQElnlDgW OQMtD3LIeqDZMcI5UPMAzRqa7arFMProLdgu3izBTm24XvYDDrMoPU7wwj19miBgZjpJp13Uttui Idzy/kkQNCOjuNgUE8OewEZnodwUWS4Miksd74OPoh5YonvuBexcp65ue0GgxLAXuDmxAfYC7AXT XmiIWg1lL8C54F/5fA9UO9e7CiQ8oLo3qp3rvwWyunNULiQqI7vJmc4H6Ey3RbVzzblAVgOqe6Pa Od5EkNWdXet8tGecnKw3qzPn+v5igU9j8Y1nuG4IfQ4F1yCtAdcVXF8oCEoVrnkaqYBm8ut///Kv n8eHSeRD/PVxu/nrYn4vmPrvZPN9vVt92q4+4U/oU+1so4ALxQj47YjdzjNFo5E8rn/88cc+c3A6 6jfHCGUjLN9P9uuvRV+OcfLzT7+outz58uu2x5PFiWI6P85aDus7bxDTqGBy/Pz5H+W8s81mtXll 2u128dqcLGFBFMoJd4vtar8l5MfxqgjyGUegOFZ9sCt7Iqzkbpj3hB25DMYNoVRom+skw4GvrDQ9 gOxL8DNV7RFrMwJq2Aq6ZgTwUXTICBhvH9fb/fdpDQdIFISj8wwCY1sGJkgs2LG6ZHLYfsXfxR40 957II3QK55uqyYV570I1uYfV5FCFbpSmnarQLaUp8SR83lGaZnGuS1N1l+ejMKVm2SWkgvdCONaU 3oFwBOEIwtEZ4RhaCkfXqoATmuVx0Mx1xc2duwbDdeVhtmfY/Yh2rAwZqN3eGO4cp1KE1jcWMsZn XDTqNYzb0Rdi4lh18seiPvaRBrYHFh0rLv5gWPREFkY3XUv4iGNlyx26FKjitWqXgrpY7GACrF6x Y/UAp2PV0gDOQgB6xQvSA52OVT8DOssgplflzBo8bf1JjlG+dm1+STB9LWyPjN7Fdw/bcxoi5SRu SmA1d4x2D3iKwquzD8kxgtZ37TeP8rhVv3mzKxFgRzsLPOoal6qnrkvf6JwUwdupiw+yBJ17UZsh nbJSExsdwqPFl4vEyMPI8Vq+LXV/HBjvz0NepCFrw0twaH8U8WTzz2Z5PgqMoDJHtOxAxTsbFtTB GAy0hvooFnEFuZbebAqRlWvWOzOiWKbkO5GvafWl2uhnf7H4qWwgibu9oOhcYGVQB7OtHUJCHLDm Wnvjz3QSed2zHKlrIZVOdghDYdDm+JbWfp3LcDCC08OQtKKq6iw6XQu7dBSdRbFVrejE5lTiD1Xw 40n8W3FRdew7jalrURxPvUbXS3jztKqtAnpsi3pPgkPdRDzN80y0EfFmbqghiXgPs5sVR1vHjr6Y uhaaohmlZQHS4aZ6ARI3e8bYSFUSFS/3/okof+mdWgoamhPxOSWHrxdoP3xfnn1mdMtnMqM7MifQ Xw/dXoGTNQWwPCcgFzzi5/koUQ1ELfNRkhFTnagPLazrcuoIMtMT+QUz10JWHshAThKu2IRfb2OI h+L90tFl6TxgzhGoStUyqzQmreiIZooiVfyWobxF8Zu5AFNgCdAWgc0a55nLgc0+2PCEhjQSKv/B QHBhrni2IbjAPGEtcEORUWz5ipsLxXKk4MWJ2oNy9Hh7t12Mlfm5Xjx+VT/oJR2T/AZRhEzkE/pE TG9wP2HGosOEBc9TOaOR4anllDgJ5TMWM25nG3k2HNfHekIWUBZkB5CoGfcQkR8Lo9mcLSy1mdSs zTCjxvVu2HCOLhOopj5qyKUHip0jx7yK1jQQl7LvTjVb8DaEUECtg85nwwQ20FgOUrfwJardA7nO 8VYCcj9kBmcPDHMv6nk+Uh6d3/DFlnEW7lqcpWNmUTaqzywy+4pUZlHJI9iQWUTNRZAkpmE9kSU2 Uy0CkSUQWfYfB0SWB8nXvSMGd61+LRMBOoybPq7vnyqDODJCgaSRShssYKNGkZs/FZ8VeMxpYZhS kTfva2J2y8O+hv35TvvTtSq9rvtTHb/m/WnWb2F/wv68xv60JRXgntQudszOzhLGWsSQjEak15k3 wU1XSgHuYE0iUAp8EAbICnBtdRXXahHtSfYoO09qNh+EQyLZ86y1egWhtm5qLwoIP5Kb2pv4YNhd rLpW/wdiVU2QR4mqIpDLNl9WsFlcKUQqMb6POEnIQWeuUxcwGkoJVQ9cu1bfB7i+8bFftGoM2hWj wrW4NmD0pmC1JCxsZrXkQ2G1JBoBDLZEaEPkeiAJnZgX/Wv1ZEZpTe8PuFMmo1wE4y1JqEpGD+fi aeTxaBTmsxiHRXi31rkY1K1te+eivraWniDRFJzzvMjYvZ7GdrnBHPNYAaVN5QQ3yVjXZZUlk4nw pKaQZ7ko0DxfbmebA4qZuR5diETkZ0dwRM2Vz0M6guMolou1eX6oHr/PD8XONP5A3+DcEPoZCpwF Sgxw5nXtRQDOnsLZuepMkM6djfg8zoIfbh6X898fq/ZReUk9NTMStfsGaueKNUFGA6gLUGuUgJbZ 6sLBMFaHDIEsjniL3BE+6PpjjuQvSH64mcpx6418nZUw1v5i8ZrM9ODuufx14Fq2/RGuhbKGlCw1 EMD7WJdMulfGCdeiXEDQDTQp7YGvtduybK0QuBY6A7LuN9Zs/CshJVoPG0vVJnCwgtRX1SYZcbUp mxlijUEVF/ULrQAhssSdawV8H6uNVyJY2kQlaxS/Too/LZnLMg0huFCdGlV+Np5Gqr1v8ut///Kv n4/Ewy/4FCeb7+vdShEq4k/oU+1so4DnWOLz23g5e+4+Dc+RkiI//vhjnzkI6z9HkIX95hjJX6KO iuTnn34Z/48c1nWmIKZyL5K6p5EKcIsJEnUCff78j3HxOOr4mqwe1hupPs9XSymKdt9WUyM/Z4vZ GckDXM4uR2zuNt+Pu8huNinmgiiU72y32K72c8iP41WRzlBTPxRn5Gwrhhw1b0XLnLXAtYo0+5w1 lJznrNU5ugfjvYZ84d64dqwujgsUq2Pp7mlxiso8Fby8yKglCynuc0Nkkn+gIA5sg97bwLEqO/tt IArF6WUs8wMF6GEb9N4GjsVA4TSA2tR+gHYsNgpyHQDdD9CORT5BQkOpVS9Ah45FNEFCA6D7Adq1 mCV4Cm+8rMDug1HH4pugRQCk+0LaMU5P0CMA0ueQtsx+Cp0rhezcwwSytAebpd0Dv87VPg4Ev/6l 4vUAkXO1hkNoDAkI0hAE3RnfuDujd+ii3WuhQ8ciTF0rMgJlrJQi7VnKtMqhaCYtSuQFnLXJSSZm HAwoJ9lHzY5q9Xe2xrZjUSjwcXoZJ+2B0MixsBIg1Ms4kY5Qy1LOyLU4EdQwX8qpmVLVSG23uVtu F4+T2XJXAb52vTAg0WDEM+2sNUeOBaA81po55lHUki9zMMz/tHtNceRYoOhdoYfyuBX0zDaMtdBN RkxRCDc7Csw8cg7aTHpTM0vcORfN6eSGCsIoUOJr/jDfbcumvzd/Kv9Sd2Lmd5xHQfhqa2JufkRo TQwtEpG3LRL7SBPnYmudpEkoiDogCo/29+VEPWQZ6Fef1EOSyHiUhSJTLRgO3zwukD6Um3nmQaSA SPFYpHTv4xY5VgPpsWLMidxerNlTa3S6OGmPhd1h51jNIfjBLhae8I7ajGpNsCwppiIv4sYfqWum X7RUTItc2DpvXYv+Qi/tprCbJ404mBZxsAsIE+RaQBhA++FqAZhG/Gvn7yHIj46EIgooOU9KZEaj zDYp8WpJ/4mEadIiyIHNjgj3ghx9YNoQ1wWYXg2mEZMmpHyB0/taiIbmkX4h1JN2iR4iNEZMubq/ fXSE+hEo9hGheSYNqXOeuPHki3ZrQgKjuh8nCcaNFHPm1+8Vuv0IXPqI7jhLiXwR6/v5HmVH/5a6 ot6FMP5AxZ6YNkEbfwBoO1eqCNA+RHtZqgLLD6+oFswc7/ULob6UQnqHUC8bXfVBakN4DJB6PaRG I6SIah6n890LoO4vqtc4mChuH5g2hMIApteDaYziSE2wWMwm1Yqb/TU1mJh+pGcgxQ2hLwDpFUEa o3KC7W4jEXCO08PlwoIyplD4hlWIczmL1RSHUkOdTrcVkMq/1XuIBlM71gedEN5yFZ0EU1WXNP2+ /LpZPa6rEN1fLKKwHwGmEONyF6ZBxAqYLuTQc5Sqa4WXiJnSzH1DKcS5nEWpd5nafXAKEStnceoZ 4VEflELwyVWUUsFZkXT75dzALy+pRzYmDfgGUYg+OQtRz3i5+qAUIk/OotSXMpYe6ISAk6voZJQo ysbtdvu0OKtWKS6pt0GNdAueYZRAvMlZjEJNlYZTiDU5i9M8zoIfbh6X898fq+poeUm9DRZ8AG2U QMTJVYxy+YLkBIo9arWp2vX7a+rm4iMIUog3NXXMkK8gKPOPD3WiFZ96eU39HnMxdcIDFlbHy48l BrTBwswDRkJFsnZIYT4OPGUxC2Lmq8IUnUq4jbSNxEySBRxrwLHmLceaLimppaR0LuYp0iTVm1k9 HBsTYGqOuSRsxJtocIwC1vVTz5JRhDTEBeWCoAKI9YsphBH/mQioir/uF3M/RWU1aQ2THU0RSut6 k1Gz8ExojkqR8HpvMkHN5Hd2vck45nHYko/cyIDuOozs+kAQ0kS7eB0Y0SgseVlnf+xmy+18VeGn YWZuejkuT0Yakrbfl7u7P/SRoqb7bRgmsQai48DiX/WkyFxpFbL0eIgWN9kvrvZHoTaY2+iyPB8F RlAg45n9bqDwJFTGs1wY2nSb6d597WnsafuPPvD2JMYmUGKAN6/r0wTw/iDwvhBBIlXw5mmkCI6T X//7l3/9PD5MIh/ir4/bzV8X83vB1H8nm+/r3erTdvUJf0KfamcbBVwo/tlvRwh3nikajaTK8OOP P/aZg9NRzzniVP7vh5vs11/Hi5U0Akf/zpUqMl9+3fZ4sDiJmTZpOazvvEFMo4I2+PPnf5Tzzjab 1eaVaaVq/NqcLGFBFMoJd4vtar8l5MfxqtS8zHsizsjZngg5qtkTGs2zHWkooa7xL9o35FMdB6oN +cxujyFJb29SKqLuyHStER8g078QINc6TFv6DKmDvfKAufZV6HqVCaRDF9vKVj+a7eVpErTCbk20 cDjY9bHROdeo7i0j27QhXjMoH39CW/j4zckSlj5+YLm9Nm59ik19BNz6xH0rUHfcuhgMY3GuFrdI Y3h43O7G94KNZ8uiUuaw1MecBrmMpknybKTC7K8yx1JkNNq8Yo7VsUEssdHUKOwK2KAZU1xok2/j 4331uIE53UjwdLQPBKzXal12q7Gq/D8ohcaUQSbCLM6L7LSJvNduNlY3eZ4dEtXkUpsFIE/yQ07b ePu43h6+H9YktvGYmr9fM3+gQjXVnDlhdj7Y5cx5mSfQB/5NDcMA/m8B/4vBWW4ggZtLLI2OO9eh bOvRcq6ITa6OyuU+KW6P6/Vqs5sVOYS7zWpBioNafSranJuTQTmNUbx/34dv71+8Ntjs+ZGLhcPc uFjmDdF5sSxdOKwpcHMdU4KE/JV2m8QsDvq328Q0GlXTjVTc7phutJa/Xd0fGx3TjIe8KL9qzFYy O1Evmq3UByKORVC4QLGKkd89LU6ZGU+Lej1Z8Jzkhjwl/pESOXwJBfYBsmOhFnsgC5QzU0bSR0q4 AyAT5ljcBSQyhMD7wLkpDOM8nEEu+wxnjCzx7ByloLSo5Lt/zaKiNeOyhLHm+Aw3MkVKe0qwNvZU Tfv4odhT1vhwjswvoUmGRV3wzkwX0jt4R2IaHm85OYwo/lZ3NftRUB6h9NWiZWG27aFo2cOiZSh2 Noqx9sXOgnfX2poCdu4n1qo0vmpibV1tz3DUMG/M4x7IbIqlATLBQHhLfFoWkLELFZD1SZsNk0P6 tmIxLtWc5eOD0q4kVnVtsCazNJEXlKLUGHzB5G1SwDnmUdQyg2Aw3WuE6G5WcNdqsLplYydpFtam ERo7Z4AlApYIWCJDt0QCTfJZZpxwxyLUHWuo0qJauNZHh81On74+OuD3qWLPUpnjjgWVu566uaD1 yft1RX/vmLzvJ/C0invLXHruByvniMV5rp9mR/7Kw3EWmnnJutNehkywpnMQmeMh73EOapCwPQYd i6NKRFBaIuLBgAhuNgPZKD4kSt4/ERUtulOrWZehzik5fL2wOg/fx7SmWFM+k9nKjMxq0/WKNUcs 5Xta2LrKEGbW9RysDOkB66ZqN4D1kGDtV8OsPrhuqoYDXA8K137xQujADiyBDfSW3mR1YR4qK62N 1YXNfRT8gjZQWwK0PYV2U1TS9wrUPBjpFaib2e+P882xBLVG1xIRH0XmEtS6LiQXKkFlyYgrH96h g0idyUiQmd3bbZvREszCkyZ1oIJIOZ1i1V1nOt1W4Cz/LoKzw4nt94CzJ73sQO0AOCs4e9L2DqTz H5wwonQ7+YLlS199qTY+21/8VJAnDoUavg+w/QjKgZwGYJ8B27nOZipdJhGvpsvU8L31JQmxzVMl IQ7kmq7Xq8V88r2Co/21wsdgzAryDUbOVUYO++AHbGnYcq6qcthnL2BLw9aFat2g5U+LOQTOUr3l z8+j//M2LX8iaPnTZ09cqMoO9kQr+KYIOlZV82ct02+Eg1V471UulWUob1ExYK6RgcTtGxzgE/As G0sHDpbpQcOfVz1BIYmSZkU4HIofKNA6T4SW4HWt0kqOyxWxrhqncHj/VBnFuTm0nqYo0qTmw7Ei H5trL5MRU0xGzbH1msxK52LrgV5obImBC1U8XUbxUwThUvFbzp77aGyZOvF6an0jVX7pgOYYx0jT HNWHt7CmlJb30dXRPpvqQpSe7m4qgYJcnqrKmv9n/FN2FHFdZwtTps1WuMO6TpagQGWQZf/1S5HV NZmvv6keMF1RzEgesT2K5/ebu833uh/bCr9pDX5rSO3eCb8Xqj1zF788L0g/ewljnhPWf44g6+mS GMlfoiyA5Oeffhn/jxzWQ2JLNZ3UPU0DvPcTJAeRXzyOskomq4f1RpqJ89VSKoe7b6tpB+F/2IoB HtpWtKxID1yrl7Olv0pHPDAr58ioKHutnNsuvmtFZdDuWnkBWEoj+RZ2m7vldvE4mZ0VPmrXCxsU DcaVoDFnWMYPAtf4I7u5EjgNVd1A295C1Li0DvcWCjQXuyUPY+AaD6PUANBh3PRxfb7A5tOFpJHa ugWdkxol17P4rI4Go8uPYUrFqV1oLd8WITUcE8C3BXxbF+cZ6bOvXYucdd3Xik7PvK/NWgDsa9jX zu/rqLPtELoWmQTb4cbTOuWwe3vR0I9aOE6TXImfIqzxx25VnD9/7KSInhX8KcgofDhNYykfiwEH A0EfReucDzg/X5qKbaAvDevsBA5d40LswmiD8xQfcL9az5ZF7bhi97350/RO3m9ZOHnMmj9B4kBv Mx2X394v0mmoMAsYuUbZCyFfkSj6GmlC3tLsDh3rHfc25ONULlrYJh0FmatCPnxRR0S6C2QPaAc5 4olyAiuuPYUd+YKnsz+OOpq6pNYlMI8NsIjLsZMviglcp+Q25sQBB7iPtgvYIAZhYmuDNAWvPlQ/ 8iElSSaCyX2+nsi1rXZ3KS+pWwdGJmjXj0NbBDsWgYPmvBCwextgOxawgza9AGwzsC2T2kNPSB2j ULVjqFDLcbNSbkstJ/Gqeh3peF1NKmg193iQaGV5O7Sa02ZwmEWnJksvMntOEwSMDITVrg9QGwJv gwFqNBJnQBWsrkkIAHV4QI08oV+8nET1jqyzD1r8iOhcUKwBWjS0OEceOBwqKhoi5YzdzHaT1bTq pdlfK9bXaBB5pvRHnlD1OUNFBdg6Ycs5tryBU1F5hy3aHVuuVfd0rsAnaU0Fvvmw9K3IJ9LybCJL DDgWYuhKXRPwIwSezxI9SE0ojiGatEr0IDUnIKbR6BBTLr5cVJYfRo7X8lUVKltgrvYIeZBUh5fA 0P5Qan9opk1heT4KjIBCNSWDNoDSqsYsOWkix1z7wEnT1BsyjxKG1YEuQVGRg8UV9SOpuf1pnCTk 0C26TohiNBQZqhUxWEazIteKk+yTnVW3uWqyc51mBuGpK2t8BGkJz5blNpFj5TacJ6QgUHiUjz5e 3223z9MShOXnT0UbC/NAqhLlKgPLN30cWZNKI9+1klpnGcxRzbvWLDc7zYoi10ogBqRZ2TqjMI+i lryAQ2mKUoEescuep8g1brWO2MuVq7qGkLLOgZojHjYTUgpzK3hBYnriwJwcRhR/F8LILFLyCJ0i dl9Vhv98oh9RWJi9rpC762HuLuT8GiVf65xfgrpT8VLkZEiHBa+l/NKacVnCWAtqXWPTGKDW7Qsk 54I68jzMsKg7D+XGrEEREDRfEUWehG8iIbCxNa1ZP7lca1o/Eda5BpMi12I4UGh/409nzl7IdC2y BMi88bEXYS+MOhis6l/BLi8o70Cj+w2Ttwle+VbBTrDmYbd2vbkWDHqntgY4zALRMmvd7CFyLSRI sNaZxS61hiLHAi0do+BZHPEWtiN/C9vRu8xkgjUPPrYUI9jB6NEbcKtkUYibAcUCM6CwYG0Sbkhk JkZ1N+GG4M50+RL2rrkYEpyLUbZf5vWTFDjfCnfxerVaHPjN1ef6GK3clqEwvmvam4a217t2zrvc yZ3D4kiVqO3jRpOFcpwsDjGumk5vKBcUvRrjCs3GEcS4PIxxQazKIEwsjU/cRJ92BX4amjHVDFQu 6vG+ujwxbxnB09E+XX+9VuDdrQqmu4PVaKYOlxpMUPqIJ/Jeu5m84++P883s4C+u0V9ExEeR0RVd Y8xauKJJLFh98L8unwiC/yAYQaBeQqBaZtxhT4JtrtThAQfYmzkUe4D6QgE+6I3eqiFapJxmx2aU +xf1Fk0uk+jDN7nstS0uFF2EbdFmjjAb6dvi1/if6Ztsigw2BcGd+2BRfKFwJs14miFBMFJ88es7 qYZPvy/vHuaT/Ws8hBTUu9y/x+lfyCdM5IusnS8kI/zDzXi6kLdfj0tXsN0UmEQj+sONnKFgV39e bX47NFdt/RQZViEO9RSTu51S1xU6bB9DWpnlHOo5bAZnBKFc6RHTRfETpqt59R3M76eLy/8G+Rjq XRZzlNtj87i0fA71UzIVTCl/yt/+9p//+PsoGZNP5BO3myrAiXwaIld2vL3bLoq+nevF49f50rRb 5TfUTPI26JOxXc5+woxFhwkLMVDOaBQALafESSi3UzGjlOtSwaxtANo4IQsoC7KDnatm3Icm5Mci oGIWLByR1By+qnHiWimtPQTRhYLgJdzjXFFpKbgvZ8+dBAcKsKJYq8qe8ZfN6mH8ZWorxiiPQIyB GAMx5qgY09LDVETeSo75kcaREkxfK0BBRgcjcM4P1t9ENEIYO/4OSlxLPOnSeEmwUXxoY3v/RFSO yF3R1MrcjVFweui1VAL98H1Ma1r8yGcyAzsy+9yB3eO6qVh9NkRTLfV12ogglNaXRhtPTVUarRTn xtJoM68xlIL1g5EPDe1Arp4UhpBESXPOu7G5n2/Qdq0PIEC7F7RpSFjYTJFpLBzwDdoeNCQEaJ/Q yfioyAH/vpysN6unCrYPFwuQGqvpXQe3pZeWDL922EfeOg+bdPdCqWN1xNAED0DdH9SOFR5DAzwA dX9QO1b6bA1qCQgVvWoDCLNG4l/rrl54cC16BvrljUfcND2QSR0LcoFOCUDuBmTHiH5BjwQgdwOy Y+ExkMhALtYX0o6FxUA2A6T7QtqxcNhwpbR3nHl9UOVYHGq4gtJrVFlS8FHH4kZOMKh9dEo+wk94 suudRaljIRtobNiY7JHHmUT743L++2M1jam89KnoEDuYLCatjsWWlJY6Fpl5r06/HpLSUo2U1lbP gngMWJjvIap0jGK7ZqqUORaaed/Wde9Xn6EQr0pIdMSvJhW8m+8j8a7IQ9vg3SzuIoaFFMr30/ta hTI0j3RbGlsj3bHYDSD9rZEeI6YoE795gXSNDcLSEmeOxXaG2WVDGuMszdsY42aiQAchFXWHlGOx lWFCitMQKWLWpkofox/TRcWTaY1bbE/jC4U2So4NlKmDQOfYUPS7vdlAKFKEvsAG0g0htjLHsTCF tfkchZidM2HTOg3Lpinj9TQsDxNu+yDUz5BHnuKwjcsaRTX1iXAqnoxUZAmpi1FKAs9qC0bUWDVW ODKiqg9vQbOq2Es/Os1qr01xMXpD2BRt8DtigN8Kfi1D2awhEHSN3vYpZsFrHHW0zpOYZ6KNcmBm YhlSPNt3ZdcWxbwhUnQVFFNGf7hRtv3sj91suZ2vKk50xoyvTDEtItwOxUNnWgQUn6HYvfaNEsXq HKpHsTlbFlA8cBRruXHUUiPmDoZ4usQyA37ML3o+c0+QGipGhnDWiiWX1KQDE5GHx2acuxdd58x7 BeUo5K93nYvMiS7QdQ66zh2fE7rO7WVfqJ3glqLvo7fxzBS53KmNp7rJ87GLJzU3zRQRT3JzF0+z D9eii+dQYhcOagA9dkFT+BR2AewCo/40CpKkRVYLNp9H7m0irqUEUssAHnctxNxRjU6zsDYl0BzE VymBPGyREkiNwwWJaVjfuhmb1Txo3QxKNCjRb6ZEc6KpD7aSz8HUBXvJx1AYtKmuwyQafDTCpzR+ acN1LariUBY6LOB6WG/FtT7KtnZbUyoD2G0m4yp8aYeZj+zB2GEOCuUeqG6qdIWeTW5VSuVZHMXn zcbGky/arQkxc1rESYJxY58y47HnNuYtW5UI59IhaEZGZa+SiUGMS13EbOkW/XSbLF1CapQDsHTB Ym1vsWrbzbJeSDhYvQt6/6t0MCmN5CG129wtt4vHidwqlaNCu66en6Ehav+WXhfhWNqGPfNaFObp mSYujCs3HE3cw9SiPhB1rNK3A0QjFQ2pQtT8TgGiw4SoY6yoykhlKg9Zjbt/utts5EmlNGl9aJ2/ Ik2xqKHYMi5KMmJs1IaVoKafoVdAcC182w8IqtGkEQhm/ROAcAKCY9Esl/Qq7zhF++DEseCRS8oN 4ETDiWP8nQPmXfetuL8PqhzjAx0w77rPqMLUDlaBgwyeHTyjWRzx5sAb529BtM4xj5XXuk0nUeNx 5ySGNHo323SwwDnvOkM0CFp5ymvImobjKfcqtUugHih0zD3eUZKlBbFFLbUCNod9VTkva1XYiM1J 0oD4KyFeS8O1BbxjzvYBHN3ghH9L6GrtfixTvoIGJ/xA0l+E4Jic9zgI6njtBtPjAEcjldJ59zid 716ot/uL6k0OJuW2D1IbogSA1KsiNUZxkX+2WMhDowLU/TU1mBitOM9w2hDEAJxeF6cxKtUHqeLc zZfnUD1cLjX8jyBWG2IpAFeOUxSk9X3G0UcQag2RFEDJVUuzMFWE8dPvy6+b1eO6itL9xcLjMBQ/ eh+kOkfSCUjVkRpErECqKjI7B6q6VpjERrIDz4Aa+lF4csmDlzCcj9qUnGIj2DzDi3OMl67h5ZqC jct3JO0KxWey2lQF2/6aurmxmtY3nDZEfwCnLOE8Vzla0/vxIU+rItrKa6+493nAwup4+bEEgTZY mAv2SKj6oR3c18eBJw+2IObCMkzRaY+YaH84MXvcgfYHiiG9LYbURaUlCUroR9zwAxVDYh6qKGeb hCNsArPzZ73tYe9J+DAKFV1EJR+bm0W8wDw5LEWJm6LvyQHn47X8hYUwM7oFGQ95kFSHlwuq/VEc bObNxvJ8FBiBgMxUfe8GhAvV8EBvn3a9faIAevv0wu+FSo8Av+3wm0WAX6H1Co8s4etYRZR1k1Uh KDu3ts1mxJC8QiQRTHFXTeTKVcsbykvq1oExz81FRTHQiUot8elF/JCzaERVZ+bvy8l6s3o6OU8O V9TCEGS0mMMEq1quw4IerVFpCatr6qbMnCqJMoGzIwz3E+jwI4wbfyM4Xjx0vIDDpqfDRhdjljVa oYMEie9J+ym4yhCvntI13aNJEPP69kwUQ3smkHQg6d5P0mFL33TkXHpC92a3aT5CmoNaKmu7uz/0 kbxGiIVhEmumxnFg8a/apGZVj4csDdo4+cwV1xd18vXChHMpCJ1bx0pMJKNXMSFqiud9xIRWcmxZ +hb5Uev5ziEs74gPQq1c2LKTb+RaEJRmlJaegQeDPs3NAGAjRYhfvNz7J6LiQXcqlYKGZqIMTsnh 6wXeDt/HtCbDRD6TGV+RWTG5ns+LxlEs3/rm+aEK6+eHYqmMzCG+Qdo1ZkOAdD8K5DzO5OH7uJz/ /lgV1uWlQtEITJaF68C2DZNFrlE1dkJ2EHD1lJvS1H94JdNOBHGYaSh9uNtNvs2X8nc9Lmb7odIi r4n0U9RG4TNbLRdV+EKtYymxRIAn5Y1RQMl5LxpW0z50IPTC7hET9MGZJ3WJHuIsjxKG1YuQq18t n/1W4oFQcwZxnCSENfacGQjPbR9sexEN9RHbEjGcJz/cTOW49Ub+skqF2v5i8UbQQPoq94GpJ6WU HsLUr8SS7hhlyLkwBWD0YDV72jhIR6tdmh5DrvFz2qfpoeQ8AcAc3oQ0vSHi07FoznAJ0wHOl4Az ttUOGmJLg9EOopE4bxdh7ivkcXlSLyBcKCID5R3Nc4wwxWGqlXf8++99SztUyUiqsh4/eslIZU/Y pW4w5ByhZucML+DcHiTnNkVaxZ6wy8VmyLFmYSrziI9qM4/M95Jj0iys7W5v5MFSTN2ZIrFsZOo2 5+MKEtPTLSfnqdnYnDyM8gidaLONqdnmvQWp2ZCafXpOSM3eSz69U5BdEgZDrhV7XqPdABaqbWaj nUOMHL4u2zkUdy6zZKip4Z3n9UlS8OeFnTyR99rJ80Le5Hl2MJml/mO2rkOl6FZ97zXdXQfie2cj lvI9Q1idksjMP9E9JbGyH2yVRF9CmO35aewg6mMLtV6Iwb4EFNu7DAExVKHkGIG29C1i14J6HQ3R QDkxSzvrWVqiFb+L+WhPGMJZK7+LmXrc3u+SyIMtb9PdmJktNOcON6IlYzNL3DUF60DZMwk7nuQH uTjePq63h++HNdkWwUvlUJiJaUCOVuBsVzTDsB+xOkzlajV7n6REBO8TeJ+u5H3St6lUeO32qWPF bfY5IlGYp+eqsTH7zONoOiV6zqWt5uFaFVgnjZehMGhT9F3nQ7Qu+sY8iloe+Eb11cUDn2qSxI5N gmEHA3gDoA4g8qyWy7lerxbzyfdqeld5rUSQ6XGdRBA/IYha+ruxH5GQgXQa91OAaYE4YYm+pmjL IIqhocz/gE5PCxYo13mxLZPEcBPj4XtjPBMBOoybPq7vnyqDuJl8iSRJLpSHaVcMIgqDu6LsnxpT SEiKMlx+f6sGnL5vNvdIGo3kchRW6P4GxWdli9YYiFLw5G3cBGZi1w/lJgCzfb+RhW62W7rXiCdx LYES8bLAg9cVIUGBh/PHk9CjtZYqGHEt9pYpyOFynNSP5FlQGSVojeJGSLkVyjFnW8HsK+Y0Ukki J/w8Svtvs5sV4me3WS1IAUX1qVhZ8xbhNEbxfmkP396vsT7YfCJwhMPciAtzzMYKF4HmobJ0LRDH 6tiG4Vq4amOtVJ699T3WB2NOhp0bZzLSRIQI8VyjM9+75D2fKjz67IemQBPsh4+xH2LElLX7zbf9 YOmKIc7V64k0SYVWvPRwpI/AZk7EZMRU1n5z+laNf9Pp5bStSSaOxb86BNIjVbtWDaSbX6rHgfQK BGzN1wvFr6AsvcUcsaiWpaf/+y3K0qETZ989caGoGuyJdvhNgFZBdbXobLVcKGBGswAnKI6UJTHe 3m0X4/Jcf5RPZHyD8itEvUMi36ExilTOOCJpdJhxsnqQqtnxiOw2I8ahCvMUE8pN8SSVkM4TsoCy IDsc/GrG/bEvPxaZEea1lipfalb5zAX1Vud9D2zQhhiMY9jAOFIH5IdYSUsHM3Ut7gCpH/3czzyM g3aZTdhIdumgK7oPvKG0aMilRSwZcUHb+FmMhUUO+ln6YBn6S/klqj2JFPaBtGMlOADpnvk80mqU Z6J8y/LFr75UcH24WMT52VBSTvuA27XiIg/A7V3RSKTxNdgyfFDH4i4qOShMDok+8+VuT3a3fHxQ HHtnVAw1rJAJzaIQN9NpscCs8UaJsn8MCiY2AdDL2vUKpmyFloOFSB04QNIsi15vlG1Gn4dNkVVn kc5+Pj/6O1ESqVzrgxk4vX9hCXKzKYjDgoGzNhU+qNusrVPhe62OH5xg3VcHU3RSV01MrpyYNWRg cnW3SAY4MfpKlLCzRGFNcZ2huEtxnHG6B6/Uxe4f7ra/bfeuU227YmQGIY7w0QUo1b/F7Gm2kAJm V9lylBsbJZOEFUXQr9W0CKN31EFdsgImyzQ/1hRaGgqYuvre82Ck+943s98f55uj871GTxZRoFTB qjM9eIsGaj7aOlVhZ2nrsAsV10CCTrsEnUrS2sdM0OmH3wsFhAC/7fCr9NuPjl+s0/9b+i+ZY9Gf ixKwwVndDyuOBVMuWmMAWFE1pF17fzIHwyJQM/1haCBUzlln/0tD9GUgHl0Wx4o6eO8gnSyUFFoc 2nIF1Kx15IKiV525odmLB85ccOb668zVhYmtyuRH8E5EASXnDjH2Jg4xGmJFcbOZ7SarafXg2V8r g0hDcdZWTh5bb60fwUTBs9xAq8XMbTT8pNXyiXejF6Y5UMUBpn3D9IUKtsDp27JZewROX6YrpZZd N7hzjHYM0SBo5WkxTzAgTwvLsziK97/1KEbHky/arQkxZ9bGSYLx+dAzCVzj+3RPArPuaQ0cyrDe Pq2fhki5NposMWP2rIuWGNdDHZZ0StxBuriEpgilGkNWpa8DNTvKEpqj0v3zeiq/MHOXCxLTYzcJ 9UvLEQc/IjZ7ulAeqQd9xY8ozE0kwI/ooR8R/I89/Y8VQWYZiOMXitmCqdI8xwhTzPT8qp+Tz7+8 CS1YDlkvUn3qYQA5GJ52v+ccGE3XN5pEoJ0Fll07uIN1hZCU8RrqcZhFJ0X6BXhPEwSMDIN8hQXd MzO4Dy3SwgSL6GQoH1VGuSbqWqGlmivmUCZwdgTDfgIdBIRxc4MnsKrAqgKr6g0FkR9x+jBBjaLI jHYQRSCKQBS9nSiKTqKIWXqqxYVoYN+ZLCTJRrTWtW32FijXdkJbuLbNnUTAtQ2SDyTflSVfqDGv MEvB15CEMxAlDI1oLoXY5Es8nX5+6RgIzT1MME5iVtncq4oUYmaqLYZJpjzjTUIBmUlmQSiAUHhn oWDr4xSOpTbZ1ygKpDx2LxNNP1DytGfFaDqebSNVoiHT6f1PuYSmmAUHxfn36Ww72VTUdULN4xhC jLRy3Js1aGvHfTJiad6GuNxcmOCe77wXkBoymgBITkaAIO65h353QjXRlALjOwcWtH6FvaTvpUjL J6O2m6khcwaOkdpjhGMeRS05QobSeIJFmuuaWGbxCwfzUbq4rgN+zMp+PiNYJzWp3BJ7edwGe8Sc 1wHY+183HGkZgJZpscKHVBLHCkjAYfBmwNaUXWKL7Au1DH1voZqL+nhgnSLQLx5o17UC1Ngrq7Ec d0/gCS7FsX0oi1B7bF8WcZylR12EAtob1EUIFCq//8+j/zP+Z/xTVpp2XSdLUMDkWmX/9UsRR5rO v862PZ4tYVkk5LNJw1ZVIKgp5XvbT9utqqGoQIhITQVCDQDbVyBwrOVi27rjAtd6vnbLxU6LkpFa 0wubbT3w4H1Aca2zSTJbee1YVE95/tBh3PRxff9UGcTNDYpIkoiCQ2ZXDCIKs7tNcRPjGpIUZbj8 /lYNOH3f7IgjaTSSy1FEm/c3KD6r9a4JBFMq8uZ0gJrn+1jpABCeP2xk3Tqx3MfORTM7kkFJ5fMs 6i5q+kMMJ+ru4pnRA2rOxTtdgxoniURSk9MED6SLZwUrtllDgWPM5p3cgVK9iDOjemFeDVAvQL1w Xb2wFfoXqusHtosWc8QkxzrbRfo5fhOyixH78GQX/TbFhcKssClaUMAgyiN9UyQ//zN/k12RwK7o tysuFAGGXdGycRfgl1Od2MsyeSZwLc4r0jhQeYbz6cP4y1y1eFUflblaQz4kKDs3bM2K7pB8KB5R ZHPlpe/KOxe6VpZsC890xAMtAeHh+H1sdu7jMAtO1urrVD3DKDfgQis34Lbr70l8k2D6WmopMgqs /vFNIvJjXFWJu2ptOjHnh6Mchfz12vTILC+hNt1dxxCUoV7JESX4SfxRy+L00LWAtb+pzcDP96aH ftDDJgkdo+W3L77mOckNnat4jQnjY/G1VyZMLzQPvjU2UAn4heaQ9kCzayFue38RSs79RXXd1wCe V4CnQJq/ILBEZ1PgFmq0DaMuVqPtYzt7oZcLWktPB0tVgTr9wwhWLc5JbZHrXAdqRfaJRV1xn1z5 GuxCHytwqIJDdbgOVYE1Y9xWP3Qt2t2pXh8TER4AX8ifIkvhIIzGa/nQhWeVGlHBQx4k1eHlSaP9 UUgI8+nP8nwUGE8oZBZ+NicU0XQrIuzWNrpQqBgycVrmV0I35X74hW7g18OvQKiSdJz//ZfPb5Ff CT3G5a7gWgSUWdodkYMR0AEVuGMajVqoCjgYnKogejSujxwLMA4MVB+dQFfoPZ+IJQdB5Fg4UHm2 GaPluPunu83m7nth+etD69zBaVrxwGjZjeyDZDf2w4JrwbR+WFCWrBELdUkvXmPBVtGBmsNrmq9x jDRFXX14i+oqpVR/dO2/16aAmsOr+nRiaBAvdJpr2/PduaBZtwafnESKEUIqAtvvy4l6SGkm7D8V 8SBzOkIoMlWbdfjmMR6gD+WBmdwdIl/+Rb4ggmUQKbbEvNGFQlhwJLY7ElMoOO6DX44gTHdFGoks RHqY45f/m3zG5E1MHSjEvwmwTiRhV+rFkWuVru4U4vvYdSIg3ZuwcdQQFBuIXSF4lgtDmZQ5DHDJ whLfIhT90OULuypKDOjidcUegK73QZcnhKrOyC7gpB/2fmiIAQ5lPzgjbWE/DHs/QBz0qv6tHEI+ Ae0c8uGoIWJ5hTopgjhDe9FS1oVK23c9W5Y5YjWbnWTnmz0wO7MDpuU8W7aBVR3qHHtbw1YGvfSU 9AJYQ7RkKABzRbvyE2BRd4Bh1wgqB1HR7SWMhF5ebUcjzTEU/1yx40A2yvSo2OjvP79JSAxCxdVN YVn7ozqzOnZ4q5oLFrzG5EqhkMdSbEZ6IY8lQHyJVHjZB27EUpUn9vAKdQozp2+559HqA1JPAh5e gpRTwVmhuX6ZL3cViJaXFNyMHlsXNdA+KPUlDOElShklirVwu90+LZ4qKC0vqaemxiRhB2EaIq0e nFumSeELhQf62NthcrCdlQwpdcPl44NieToju645KaX9HYSRph4+3O0m36RCv3lc6NohFjW1d0Ec YA3Kh+HjcvyD6sZIiRGaUjOkqI1maFZsL6kZyltqtoNlGAk7yLQ3FOZ0b22NkOmBSbvmrhxDp6/r BibBmxIKrZWSbWAdu8Z99kYnZ4rDNsIORXVa4McmswiFHl6z46ziBIo5rlu0nkHR+mUErbYpbE0U 0hDLGZDbmuaRMgMb7ZKAmktI/LRLQi2mYalEkiY6MyCoN4y6GEG98umogjjdp7OaVDw6vKbgO2F5 O4+O+Yj2r+VTGGnKKbd0PxIHGdkcUE79tcSj7vR9nLhGoeZOqSRkvzsgB/XsYVuDyjVGOE4jmmsA 3D6u16vNblZwY+w2qwUplld9KqIJ5k62nMYo3r/vw7f3L14fbKY54QiHuXGxzEqGzWJFpIcu52Cz IanpI5TWNcWgZu4b1RQjoS2aYph1IalzxYFR58LGZwSd681kTUR7MHGQphDJdfBLVPPpekvVbCJA q2zgtzofDp1dDOvoMi9WRZpRW2kG4bkrZlCHPNEzqLN//uff/5m9iTc6hwYKEdeNZcsCFQJhvzcI +/lYsBKJHmXa1LG6pwH3aPctotwPV47RoA24WzrgSseVY32EBiyvwMU87J3gWKhtwBIWdoJTO8E2 R5xeKI4ILoMWc0SUskrR9T/fJnktBXdBrz1xoQAk7IkWc2SCjCr03NlPb7IpoI1Lz00BnHRX5KwP kuycsz54G34OcC1HYY88LOpajZ19Hpaqqq3mYdVRaoFpMDTTINRy+Jll1IRCNPG6xX4gmqNQo6UT lvnU1MGo3/t1uKZZwlhzPhtnZllPYnq8q3o91VQgbE5WQXmE0tdTgcyZR5AKBKlAkAp0LvyiHikP DGLTQPdarxf2ghaEpwFatdDCtwhp9QTYku+SORajZjSjtKTgOtxULwzlZsiwUXyo1rh/Iqpa7U4Z gDQ0w4ZTcvh6kch1+D6mNYlb8pnMMIvM59z1DPGISZ1PvvVXCBBDs53rnDF9hmxiKzadI+oUaZIK rU7m4egrwrSueCQQLYtHhpFPc7amtiYmc47XsjvNAdiLYC+CvThge7GvLHOO/TShSYZFXSGnfKM1 gixDeQtBZkYvCDIQZCDIri7IqOafEJbcU6whU2EoNM6REPjA+KM4B7YHhiCzSBBR8JIhSJi/SmLB 6oVcTX0xCDkQciDk3lDIca3U11bGOddiEajqTxPkUcKwehcSAhUPSXGlcOcSI+ziJCGsMffE7Kd0 0LXSB+CedMX0EuCchCSSJ/N6vVrMJ98rKN1fK0AemkDuZsyiD1R96a/pJVSlcsBC9ay7yWo6O+tu U1wrxB03qR7eQZU3ZAUAVK/a4YaPCq7K78vJerM663Gzv1iAzuj5chOsfao0uWOJBsPoKwtp1y6o vqFeamNJqsgvlAMBiddt6s/SVOilNv8vR9GbVNqMIJ1b7ouI9TgPHKvaH8h54BsHCr7FOkleYJmH w53L2RAhj1Gh95X6rPywu/uj9Gyavx9mI52PuPi+No6aMxl5yNKji/k1LnTz8Etyoas1DU5rattu hLtGGf2+pR7QocSIKJ0y0DINlfsSQwwoOY8JMrOhDF1Drnig9YGqJ6Ggy0E1GXFB2yhAfDB4CbS2 sLb6z4UiKzTjaYbiFEnIjKeL8XL2PC5zr0o7ZG+DTP9CPmEijZDaKQKs9rea4kG+vHKK8ZfN6mH8 ZWo5VUh5dD6V5RQJGaksjPVseff4h+XYDEe8vP1EnamldWZ7/yhiL97GdLbe2s2DSYwlHuU06qeM n1eb32a2j/IGPwcTuXvLOdRz2AzOCEK52iPTRfETpqt5dS3n99PF5X+DfAxMVEciOUdpbW8el5bP oX5KlqHDT/nb3/7zH38fJWPyiXzidlMFOJFPQ6R0G2/vtoux0jfXi8ev86XJ+JffUDPJ26BPxLyH iwkzFh0mLLwK5YxGf0LLKXESSrFQzLidbZ6k0D4IResJWUBZkB2UTjXjXuWUHwst2eynkAI5NQtk ZpT6tgJZt0gtBbJrdeqdSp4wyWmLNl3ErBU63KbrbHGZJSe/gPawV+TkD6JYd+amn39+E19uBmRi +JYQzZdrabSIC/WHLQ/5PFX6fnHIf5tJZV9pTvLM2c5XS2u1KYlDUJtAbQK16RJqU0WEcEtDVkCY 9Kr8VBGBQ7Angi8U0AQEt+DUxKOsEuj/1+e36dXEYFfcEqa3FCWWuwIoya9ISS51TX1X/Po5fpNt AYeF2hZ6mCeyzAoTzsW4GaJB0CqTpYaqdkCZjT5GHYnQk7FsLfgL8YG/q9eSJAmJVCL5bjOePq6J wt9uU9zDCCNpC2W4/P5WDTh931yCSNJoJNejqIzc36D4rBa8pmiRUpE3l64Ss433sUpXoZT0uJMD 7WDhlsQfwpMEAp7lwkAYac5qtGH1wzRhLUIb2Ey+5nRog+h56raZlOJCBOHvnHWXFf3Lj1rMMZvy OFKuoBEXYZjEr6ZhoppYl8NpmCTSYl22aZjCk0rIIIykFfCwKWVDkQCJsTl1N4iVh/b13EkzmZ7T uZO9YBB4UmUYRDQ7h4FZuQcYmGBwofI98ONAa5/WLhd5Bt90LsQLXCMj7qjgxBFvQYjHgRAPuKKA K8pJA58SzU6zlWLOEU8D6cNxAk7jKFbFfM8PVW6S54fi+DC6JJykeugFUedqMgGiJ7SxPM7kcfO4 nP/+WGXQKS8V2UDBYAh0qN78hFvWoAdNUbg4R8VZUA9VIYxHkNSupapwhOp+igpWKTdiiWbySoHV 4311sJo1F8HT0d4Bul4rHUJaBwuJjAMMRU3pcR6UJKMTea/dTN7x98f5Znao2KrRd0UUKCu1WtxV szGAmxT0TdA3r61vVmSkZWg48KR4WqDEEFDidd1xIaAk15xhTQsMLWtlAteaKSc04aNaf4v5XglD YdCG4AWTqK7PMqTFXDEthnGNicSWfD5wMCYaJgc4SlVjr6ssHx+UirSaTysMI+ZVTmgWhbjZhcjM 1G7gQgSVDlS6a6t0TKfitE0+DVyrUX5XgiWGECOtEl3NEglO9Cuf6KFGl2JbpBM61kn5bU50eUEd di2U1BoWQkxVNWezDWP0Czpuw4R6GzXL6pUQsh6uW5WYQNbDLcf4pnPeTuhg1sMbmDD5KAvbkCTW 9AX0lCSRY73TmmXmeAj1q9eTdQljlUq97L9+eZtKPRCgEtqkh7EUOhfN7twVGiyfYVs+XGfKtvVl hs51BO7ILBom9Cz4zM0ONQg+g6cSPJXX9lRy3VMpbA9fT4LPUTQSZ0JLMPMZC0ILhBYIrUELrQsl PoAh3WKOXCTBecen/6JvYkunwBNakn2eyOqRbfjFwYQK+5wgmuSKknR/Rs+nFeOb1hntOVKGS1PW hTBTKosoiQNjlwRsTLyFhh5vaXeHGrWOsES8J1X0nhZDpDSScN9t7pbbxeNEqkkVtGrX1fMzNJgW 2BXIYkspHXlS8m/RhAbzVkm8FBmHOx0Ar0ovS/EVQQD8iqSmwSjSddnkpzdhNS2a+nx4RVZQPVZq WRQRAVv1ddkwAMEKfDpbtWVmU+RY+10uUKxQf/e0OFXoPBVk9uY+4YLnJDcwxHHjU0FBTwkZnSHO tmNzdCEq5/dtbcRGcb5/v/dPRK3rnbIraWgGA6fk8PUiZH74PqY1xo98JrPxY4aLf/2c+2HMNV5k HzB2xTSMPIujeO/1OmJ7PPmi3ZoQc6FRnCQYnw892xY1Z4OLu6JCvmaZmhc5Rs9sf1gHBbvmGQlj XW6ml+x7AdG7KFgm70SO1dJ2AEAUoHMAmB1j3gJAz96iti451wInHpyLHPMoknC5m0xm0pZbfa2c MMer6h1Qo/blpOc3rFQL2B40flQG5hlvU7NPal64z+VQ8qZaYIDZdbcVyMHyuQFVjhKRH+97t3uR 22XOeUJ5QWn+Wm5XZI6rQW4X5HYdnxNyu44SUFPEbeXfhTrdQjT/LaL5mIcqSaaNPoeNCqGT+lwf uDaEqQCuV4VrKkXlDzfT6bYCVPm3et5oQCZHH4gCn7HDECWMKBZT+crka1x9qeD0cLFQeNlgMqN6 gdW5WlDXwMqJVKdV/cp6tZhPvlcAs79W+lNMv2YAeLEFzIXCWZAnAplOrfNEQq6HnuwynQQafOhJ IBULfEn8Cp0EXxF6egtKbOdEFsiTFpQW6cNRoqBgqM4gRiUe8zhsGXjgxlPWxYMy0vthW3afFMi1 +Nbb0BSlWaT31DZ0o6QfpRsluUW6JmVJXyGQY5Ep+3MoCvP0vAbcWFACNeAQJ4A4wZXjBFJchd1r wAV2LFDaQVxFimGvKq7MiXAgrkBcgbi6trjCOvejpZGPIazZ5NekIVJ7cTPbTVbTat+0/bVCnTfq 1Q6aaxIvodYYAxPb881BWtkuRA6BOhTLs+D5zKgj5v5sKgsoj9tkAZGa9uKQBQTHJRyXVz4uCdO0 +8CuSkngwRdPhjyRT7j9viz39NGvhGtY6cIwG73qjzI7lJz2R5GwOy2wwJ6EgnmWG9riMXO1oU10 ZDhZDh5yFvUFtydcwRfr+Qjgviq4qR5qsi5iwM6Ryl6P0R1sEbBFwBa5si1CAy1Bx67LrsCeJFt4 mj+bCKYcTBO5gFWnYXlJ3TowMnE66TNkFWoPyxQP7FqKhwiKBK5Kffn4cTvbv7ii0LzOEJIiClft WvnfyW8vCQO5cY+gOFYVptUEvgoG9dcuaKTJB1vfvmOJE+/qqWU4a+WpNWZZgXYE2hFoR1fXjoTO OB5aqkfEsTwMJtI4yOWxPp8+jL/Mlyq1Qn5Ue7TGKSEoO9eLzOs/IL3IS6dEiLT0RowtnRIEiHav yig6gkoRUq0UwdhW1gIp7vUgnKEY61zR8ed/4jfpegIbQ26MSGgOZ9toCnEsWtxBB0HJuQ5SF0MB HeSaOkgkdJJBy7otAvy+zRxzmKEzx4+x6I8YCUZcLvqjt4j1CBkTx4h7HeITB5l4RZnYF9ZQ/gyw dhTWuruB2LoboEflVd0Nylj54FYVrYYTmV0DE0GawolxjgrPdD2EhTDuQ/kqqWI92ovm/RQV4Uxr Ik40RSit7wxplC19O0OSmIb11XfYHEaB6jsIUvUfB0GqgygLdMOb2TXZE6QpRH8FUUYzeaWwvY/3 1Y1v824TPB3t1cf1WuFenmoLqawdNENhdkfJDZ4XpcYTea+dlAvyJs+zQ9UxNdcPC3k0jc7pWczg gQJlEJEgIq8rIlm1QNkyd4xeKIxPswAnSFC1ttu77WI8uVuulo/bWdGnREL58av6bS81Z/ldonRn InVnYjK8y5lHJJT7Y1xOvXp4WC2PlmC3GbE0ZbP9s8qnfJIP2nlCFlAWZIc9qGbc+yLlR4WzGh1f mrWp2axlRulkY9YqlGhlyRRZhiDphaLo/veXBysCjkg4Iq98RBKid20PLM0I6gnb+8VKUkkQ8/p0 XoohnRdkHMi4C8s4hrRiBvkjLGWca7k012lQBoUJIMlAkl1bklGtMAEzW0nmWrbVmzAeywtqyzdK NkxAsoFkA8nmpmTjuJcd6lgq4BtxuecpDtvobCgyZ46CZAPJBpLtypItqDAH2apszhEHAdfGaYKI YSFRfj+9f5nhuY9QhebES+eyO9ltRLTUOIIss5YpZHdeK7sziBlNuF6Jp9IxXc3BlEBjTAeararX kIQ5GIl4KaJACDmA0gdK31WVPn6LQj0507IqkrrGn9SlKpLIDZ4pkbXbjKePa6Kk1k7xWxEzjRhJ UYbL72/VgNP3zQggaTSSq1gAc3+D4rOCZw1mKFVCtElyEHPmEkgOkBzvITko6VE7yFzjHnKxnlrI ZzIbmOa2qVBF+IZ2Jr9l+tHILXsyMteyLTsejSQyHo3ECCM4GuFohKORF+mG3WNEzLH+UQ7RRYDL AFwGIN2uKt3ELdHZFWybmbOGJMX394qKkBa8Qy/7PYV1/cd96/ckbnmknVjWrm7mWL6WQ0wwcGLB iQUn1pVPLIH0iHFg66u6UM4WRIxfn+PC8d2gmkhALftcMkh4aUp4SUYslefkw0ou3WpTm3lCkLl8 zTmXYF/EQDsih1Ok8iyODq2rj0gdT75otyYkMA6NkwTj86FnIK9RPJ3DeHiLQy3rxbaREfMl6eVi GOeYR5FcvbvJZLbdLlZfK2g5Xi3jz6aHc7D7VXhLqUZNYcm3yBqyCLpihmY8zVCcIgmb8XQxXs6e xyXzQ6mO7FWR6V/IJ6zYQGqnCLCKbakppOW2n2L8ZbN6GH+ZWk4VUh6dT2U3BSbRiP5wI2dYrWfL 8fNq89tsY/kUGY54+RQT1eCrJEO0fQwm9r9EPYfN4IwglCtsTRfFT5iu5tV3ML+fLi7/G+RjqHdZ zFGyQW4el5bPoX5KpmRx+VP+9rf//MffR8mYfCKfuN1Uir+GRIQeGHFUzWxfih1MMhYdJizyLcsZ jbmWbTl2ktBjjp3oFgWaI8w26MsbshqGcvoFQSbkG9uUp1/R7I+Y1S4RxAoPx9Ov0jBwP5TSOr53 itr4Q839fS/pD41uCda6vQhbGDTE/ocCgyig5JxFkNUUcAGLILg5wc15TTdndBvoQRxmablxx7IO IJcXJAdIACsJgNGt0NVXYRnG5a4RCEHOIogAEAFWIgDfkrAS7LQUAU2ZHNfoHMEIjdHevy6ffLO5 +75X28s/ChibrVMakKYu9qSmmdn7dbHH9DbSVTfb5nS8IUA9FHvTwumOacKqq2NsNYfNhRIOt5rD 4pbqARhbLb6pJ1fX/XtIVlBw2CcrHGfpka2g7H/IVmiRrYDD21AvR8cSJray/ULMB53Vu0wl0uFy 3Ha3kcpUZZSgNTxqhCra8NeOg5pmrcM4Doiqyu1RW8chButwnoF/lXKU3AZB9/4V/ELh3+5wTSiP R2wvYVTUeDtbqJDvfPlldfOn1fYv83WJLeOrSwgSUXaQT0XXHjloPVsWB4ERv/Jtk+z8bQdmDZ+h W4TCzm9b+BGiIkkRQS6s/PVREdlb7mYDhKQ4ODgGqt83J0CQHI/k91WlbmGDaoY+Mb+CEQ443puU hY1XtV1r2ktI2zUltbarUQj5absycov1sJt1oq5wreZW2rzoME5qN/dPlUEcGfFAkqTk+H/pwzae B+DA8sGBBY6v3sJDTqMJj9CyPZJwLf7VVXgIs/Awb04QHiA8QHgwcctEH1pn4VxV68VNbihs/AQZ PyC2rko0EtxS1j1WIBpifQMRWgSxYO/amo6nd7NTI9Hyj0KqmH1x8mVnL152jVdWhLec6IRQtswH wjXqf7BOQVKDxLUrJQ9vw0gTAgLZCoGm+OxQhABYmSAEPqgQCHtGYPwoAydprmL35R49hWAO+5Rz 43smGcLRYdT5EDPfktxfQWCOw9QQp0Icphe+g/CMD8oW4H7kH4x4TCVUH6b3Y/m/StDcnHlMSajo Lg6B+eOgU2xeEPOSYorIq14ReXCBVwSO2Q91zP4ji//vzed///RT/Ot//1CZazr7onbWbPFdiZ7d DzfEcBpXRsyX07kUULvjCC29CpkG3NyspVCb37cecCYWf5DyLyToNtA5pHFwixgx305N8biW5+h2 O5s23O70KV9t5PI9LndbJXKns538jbPpzd1yqs12U1S3b2/l06kK9+f57tsPN395Os2S/frrz78e X7V8g+WAG0VxIP+Sq7qb/SFv8Sf9CUlQ/v+HEziUE/3rm8LDDf3hdOnz962SucpRfPdw87D9vpz8 abu72+z+LN/wXD34bnXzuDykQKnHVb/8T1tt2sPZoQruY5QlSaqlaR5TNNe74u5nVfahDr8EkTwu Rfps+aSYG6WYlX+pPRIJZh6SRqIcsvtjKaH+8FDkChaDSMTMgyhRfa/VoIeV3FBy05f/Kslqvk8Y p0ycSD1W6/Hz3eK38vBQFwtPPDaOHAVkP1IN+/KofpQ2LDjaPNVhJFNJzNNV8RrkEUwKCkv1aVE4 8GvuFmCl9p2GLSrDMD8mbVaGERYpT5uE0lJCdL5alopZuWTFubO/ruY4pddU3yrOWRxorSrL0eP1 arUYP2/u1mtFhLFTfxYnmOlBSggFIVceQwXD4yNYYklNJLJAqDzyyWK1nJ3NMDGNjadTtX0K+Umm 99MvX27m25vlaqeeZfLbf0xv96b/f0xvFJmFFFnyzFh8/7PcarPZf0xPU73Yc9ijPTdiecqOmpd8 u9sTjxI9HoFn26dgRSk2wWmMtgvw8QisjKMYqSPwoLNtvz3upqvnpa600eM5XRmJ4jQUZ0eZPKCJ eb1pxKbRXTTtv97/z91GrtxXpSHsbu72N9jcLb/ObiT+H7Zyf9xt5B/lpf+vvHWAELqVj4GD/R9/ vvnTclWSDf3ZdJf/ncW/nB2++1+vjqRH+XIlOmZ/zOXJKKe7DXGlU9otEVHl1CrH7lY7qSh+m92t 5Qx3X+UhyW+lonmLAnxTvAZ5RnFlNtxKRbF4BfJCyMJbErBbHB4Yhoqv3slzzvTg4qUm0MpsUecn CV7i39InV4GIhU/ufFy7vPgqlDNCSiOnHHNm5BCjOBfSQlCeOWmuKKVqJk8QJYUPjUkIDYzYzzFh rxosATduNwuDpTrOwmCpDrQ1WKqjrQyW6mpYGSzVodYGS1V6tjdYzsa1MTzOhrQ2PM7eq5XhcTa2 peFxJq1fMzyqIqSja4+4JEJaVk5Xz1CElFf/oM2NH9dTKWWT1eq3+ayqG4bIeNMQR5jVq5QSRUZp Aipld5Xy9Al3TASgLsE2IVmY5Pv1mC5JGY76OttN1SpShI1iiIajVL6z6fKXzWy3+/7P1eZByfdp Gc43Yh0nKDpJoKKU6/woIsh8oiSx0jS1E+VsHMPmswSOsMsfYe19bnD0vaUQYT4IkUSV/5qFiDCv BwgRECIgRM6FCMHdhAi/gBApuWJZEqh48Gpytzgax68Qxb6cIBSqE6cFbe+LKexpe18+hT3lreEx 2tP2nuumAeEoygtFvaS7bePyfNsfoJ4Bq/zD8VjdcP8cysneyv9a0djzBEl5v1fL5QMtJ7PF+ERm a6m4y/lSdViN/718nktZla82k9m0/KPjhGkS5OqXHh7xsc9kQa48NoeplOeugysX51ke7g/W9dPR Wipnk39Iu2k7L1tnGUWknIAnaVtzK8Amm80Rc6urkBMXE3JxnlArovOXU3QmOjdITFuic5CYIDFB YvosMTvaloFLtmUXv6rUHUXySoyFGJ8QYiw+2pZgI/YTBuFF1Ke+ffjOZgtiOoo5reOS224XLSZI iDw3Pn/+xzj5+adfinYgk9VDkX2lQh0Ps9231dTYyKPF7IzkyiBWs8sRm7vN93FdF4/XZytJ79Ia 0jvjznud9O5tUBINASVythyrMhcbxkHDHEFmyXx4PscI5UylqxVA+x85rBfuVf9JwP11cI/RMIDf uU2paQtlAWwh2ELnW4h2rV95LRPMpnLl3HAiCFOU23UbezlH525j1aneoNuYYcK+3cZeTtmz21gF Pa27jVVGteg2dq4Ev0Kc+UYYHXyqEcYxG71q3EbIuIhg3IJx67xx23lfXyIX6xLqm8jUs2x/U5GG XpqOShcETedKms4lknYugrYcJ4C2oaPtMtkdbsq2wi5NLJtJgF0K++eV/XOZxAE3pTXsH9g/NfuH oY775xJh5IvEBEKMALR+gVZ09edfItzZ1dHDeSDiwnB+3sx36jYq+eTYAke9BNUWhXOjpR9Qmr/m fcNGq/uS3rdIbzWhL0qF+ePFklwittijUjgompSocfdPZSus83LhgBtdUyFCLG1Z7Wcu24NqvytW +5kob1pVqQ4nRJjjIkTYU49Eea3V33oOwvrPAbqod8d60Sag0ya8BN3EZTZhUUgHmxA2oaubkDBt E4rWehxxKobaloX5hfJ3oMOsVf7MUW1Q/oas/FHc0YlIXgsw9khuSTNVy7GvPirroFXVz9NsowTR 1rbgJolDqPuBuh+o+/Gi7gff4qCj/4u8FqLuJ6/iFGVQLQlSE6QmSE0XpSZDt0znjua3SFRE5xkJ 9gvReYl8C6CjAxulLX4xuw2p7qRGtxiHOoLPSNlfIPgSGQ9goQP63wH9gge3gUT7nwgjt2GIbkqk 3x63xQH7f65KeGQj4Z0qjIdI5AeFuqFNx35yQ5sOekvF2ZlAsIEp/GXDjtfPk8rYF707KNP8ZcYh L7p3kFsi9PwAYr7RTcuuHdVX1r9rh5rl39vZzV/+stvcTX77y2ozV5VW/+v7rOD2385mN8/fZlKG VFn+n+4Wj/Ibk9XDrGjecZrsrAUIlXILVdqAiOY2IP8/UEsHCI0Cq3SHxgAAgGsSAFBLAQIVAxQA CAAIANZOYUONAqt0h8YAAIBrEgAIAAwAAAAAAAAAAECkgQAAAAB2YWxnLnR4dFVYCAAQP3NSI0Jz UlBLBQYAAAAAAQABAEIAAADNxgAAAAA= --047d7b6783f6db80a604ea17467f--

1 0

Re: (ITS#7735) Memory leaks on Multi-Master replications
by quanah＠zimbra.com 31 Oct '13

31 Oct '13

--On Thursday, October 31, 2013 12:33 PM +0400 Dmitrii Fonariuk <dmitrii.fonariuk(a)gmail.com> wrote: > > > Hi. > > > I am sending full configuration, data examples, oprofile reports, pmap > and valgrind report (may be useful). > if you need some more info let me know. Hi Dmitrii, Your slapd configs have a serious problems. You have syncrepl configured on cn=config, but the server1 and server2 config.ldifs both have different mdb configs but with the same cn=config syncrepl config, which means, when they're actually running, one or the other is going to overwrite the other's mdb olcdatabase entry. Also, your slapd is stripped. Please make sure to compile with debugging symbols (-g), no optimization (-O0), and when you do make install, do make install STRIP="" so the resulting binaries are not stripped. After removing syncrepl from cn=config, if you can still reproduce a memory leak, then please provide the valgrind trace with the unstripped slapd with debugging symbols. Please provide the script(s) you are using as well. Thanks! --Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7736) back-mdb corrupts during write operations
by quanah＠OpenLDAP.org 30 Oct '13

30 Oct '13

Full_Name: Quanah Gibson-Mount Version: 2.4.37 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.58.125) Found after upgrading to OpenLDAP 2.4.37 + the last two commits to liblmdb: 527168fe mdb_search_candidates: id=1 first=77 last=77 slapd: ./../../../libraries/liblmdb/mdb.c:4596: mdb_page_get: Assertion `p != ((void *)0)' failed. Aborted slapd last logged: Oct 30 15:50:14 zqa-061 slapd[25442]: slap_queue_csn: queing 0x7f761e2091a0 20131030155014.945701Z#000000#000#000000 Oct 30 15:50:14 zqa-061 slapd[25442]: slap_graduate_commit_csn: removing 0x4cb8b70 20131030155014.945701Z#000000#000#000000

1 0

Re: (ITS#7735) Memory leaks on Multi-Master replications
by quanah＠zimbra.com 30 Oct '13

30 Oct '13

--On Wednesday, October 30, 2013 11:48 AM +0400 Dmitrii Fonariuk <dmitrii.fonariuk(a)gmail.com> wrote: > > use libtcmalloc_minimal.so.4.1.2 > add export LD_PRELOAD=/opt/local/tcmalloc/lib/libtcmalloc_minimal.so to > my run script > run slapd and view pmap pid to make sure that tcmalloc are using > run load script - 3K mps on two servers (1.5K mps per server) > load for 30 minutes memory consumption increased from 366 Mb to 660 Mb > and rising. Ok. You will need to provide your full configuration for each server, minus passwords, as well as sample data for this to be pursued. You may also want to run slapd under oprofile (without tcmalloc) to show the existence of any leaks. --Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7735) Memory leaks on Multi-Master replications
by dmitrii.fonariuk＠gmail.com 30 Oct '13

30 Oct '13

--047d7bf0f220ae630704e9f08f20 Content-Type: text/plain; charset=ISO-8859-1 use libtcmalloc_minimal.so.4.1.2 add export LD_PRELOAD=/opt/local/tcmalloc/lib/libtcmalloc_minimal.so to my run script run slapd and view pmap pid to make sure that tcmalloc are using run load script - 3K mps on two servers (1.5K mps per server) load for 30 minutes memory consumption increased from 366 Mb to 660 Mb and rising. libtcmalloc did not help me 2013/10/30 Quanah Gibson-Mount <quanah(a)zimbra.com> > > > On Oct 29, 2013, at 10:32 PM, Dmitrii Fonariuk <dmitrii.fonariuk(a)gmail.com> > wrote: > > hi. > visually. two days of use 3K load modify per second memory consumption > increased from 200 Mb to 16 Gb. After that, the system killed the process. > when modify send only to one server use 200 Mb memory and its consumption > does not increase. > no I do not use an alternative memory allocator. > > best regards, > Dmitrii > > > I strongly advise you use tcmalloc and report back. > > > --047d7bf0f220ae630704e9f08f20 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">use libtcmalloc_minimal.so.4.1.2<div><font face=3D"arial, = helvetica, sans-serif" color=3D"#000000" style=3D"background-color:rgb(255,= 255,255)">add=A0export LD_PRELOAD=3D/opt/local/tcmalloc/lib/libtcmalloc_min= imal.so to my run script</font></div> <div><font color=3D"#000000" face=3D"arial, helvetica, sans-serif">run=A0sl= apd and view pmap pid to make=A0sure that=A0tcmalloc are using</font></div>= <div><font color=3D"#000000" face=3D"arial, helvetica, sans-serif">run load= script - 3K mps on two servers (1.5K mps per server)</font></div> <div><font color=3D"#000000" face=3D"arial, helvetica, sans-serif">load for= 30 minutes memory consumption increased from 366 Mb to 660 Mb and rising.<= /font></div><div><br></div><div>libtcmalloc did not help me<br></div><div><= br> </div><div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">20= 13/10/30 Quanah Gibson-Mount <span dir=3D"ltr"><<a href=3D"mailto:quanah= @zimbra.com" target=3D"_blank">quanah(a)zimbra.com</a>></span><br><blockqu= ote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-wid= th:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-l= eft:1ex"> <div dir=3D"auto"><div class=3D"im"><div><br></div><div><br>On Oct 29, 2013= , at 10:32 PM, Dmitrii Fonariuk <<a href=3D"mailto:dmitrii.fonariuk@gmai= l.com" target=3D"_blank">dmitrii.fonariuk(a)gmail.com</a>> wrote:<br><br><= /div> <blockquote type=3D"cite"><div><div dir=3D"ltr">hi.<div>visually.=A0two day= s of use 3K load modify per second memory consumption increased from 200 Mb= to 16 Gb. After that, the system killed the process.</div><div>when modify= send only to one server use 200 Mb memory and its consumption does not inc= rease.</div> <div>no I do not use an=A0<span style=3D"font-family:arial,sans-serif;font-= size:13px">alternative memory allocator.</span></div><div><font face=3D"ari= al, sans-serif"><br></font></div><div><font face=3D"arial, sans-serif">best= regards,</font></div> <div><font face=3D"arial, sans-serif">Dmitrii</font></div></div></div></blo= ckquote><div><br></div></div><div>I strongly advise you use tcmalloc and re= port back.=A0</div><span class=3D""><font color=3D"#888888"><div><br></div>= <div> <br></div></font></span></div></blockquote></div><div><br></div> </div></div></div> --047d7bf0f220ae630704e9f08f20--

1 0

Re: (ITS#7735) Memory leaks on Multi-Master replications
by quanah＠zimbra.com 29 Oct '13

29 Oct '13

--Apple-Mail-A17D5106-BB00-42CE-B576-6B323E42E55E Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable > On Oct 29, 2013, at 10:32 PM, Dmitrii Fonariuk <dmitrii.fonariuk(a)gmail.com= > wrote: >=20 > hi. > visually. two days of use 3K load modify per second memory consumption inc= reased from 200 Mb to 16 Gb. After that, the system killed the process. > when modify send only to one server use 200 Mb memory and its consumption d= oes not increase. > no I do not use an alternative memory allocator. >=20 > best regards, > Dmitrii I strongly advise you use tcmalloc and report back.=20 --Quanah >=20 > 2013/10/29 Quanah Gibson-Mount <quanah(a)zimbra.com> >> --On Tuesday, October 29, 2013 10:45 AM +0000 dmitrii.fonariuk(a)gmail.com w= rote: >>=20 >>> Full_Name: Dmitrii Fonariuk >>> Version: 2.4.37 >>> OS: RHEL6.x86_64 >>> URL: ftp://ftp.openldap.org/incoming/ >>> Submission from: (NULL) (91.210.4.1) >>>> memory leaks >>>=20 >>> * in square brackets ranges. >>>=20 >>> Ranges for DN do not overlap for different servers. State is numericStri= ng >>> attribute. >>=20 >> How are you determining there is a memory leak? Are you using an alterna= tive memory allocator like tcmalloc instead of glibc? >>=20 >> --Quanah >>=20 >>=20 >> -- >>=20 >> Quanah Gibson-Mount >> Architect - Server >> Zimbra, Inc. >> -------------------- >> Zimbra :: the leader in open source messaging and collaboration >=20 --Apple-Mail-A17D5106-BB00-42CE-B576-6B323E42E55E Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><br></div><div><br>On Oct 29, 2013, at 10:32 PM, Dmitrii Fonariuk <<a href="mailto:dmitrii.fonariuk@gmail.com">dmitrii.fonariuk(a)gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">hi.<div>visually. two days of use 3K load modify per second memory consumption increased from 200 Mb to 16 Gb. After that, the system killed the process.</div><div>when modify send only to one server use 200 Mb memory and its consumption does not increase.</div> <div>no I do not use an <span style="font-family:arial,sans-serif;font-size:13px">alternative memory allocator.</span></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">best regards,</font></div> <div><font face="arial, sans-serif">Dmitrii</font></div></div></div></blockquote><div><br></div><div>I strongly advise you use tcmalloc and report back. </div><div><br></div><div>--Quanah</div><div><br></div><div><br></div><br><blockquote type="cite"><div><div dir="ltr"><div><div class="gmail_extra"><br><div class="gmail_quote">2013/10/29 Quanah Gibson-Mount <span dir="ltr"><<a href="mailto:quanah@zimbra.com" target="_blank">quanah(a)zimbra.com</a>></span><br> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">--On Tuesday, October 29, 2013 10:45 AM +0000 <a href="mailto:dmitrii.fonariuk@gmail.com" target="_blank">dmitrii.fonariuk(a)gmail.com</a> wrote:<br> <br> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> Full_Name: Dmitrii Fonariuk<br> Version: 2.4.37<br> OS: RHEL6.x86_64<br> URL: <a href="ftp://ftp.openldap.org/incoming/" target="_blank">ftp://ftp.openldap.org/<u></u>incoming/</a><br> Submission from: (NULL) (91.210.4.1)<br> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> memory leaks<br> </blockquote> <br> * in square brackets ranges.<br> <br> Ranges for DN do not overlap for different servers. State is numericString<br> attribute.<br> </blockquote> <br> How are you determining there is a memory leak?  Are you using an alternative memory allocator like tcmalloc instead of glibc?<br> <br> --Quanah<br> <br> <br> --<br> <br> Quanah Gibson-Mount<br> Architect - Server<br> Zimbra, Inc.<br> --------------------<br> Zimbra ::  the leader in open source messaging and collaboration<br> </blockquote></div><br></div></div></div> </div></blockquote></body></html> --Apple-Mail-A17D5106-BB00-42CE-B576-6B323E42E55E--

1 0

Re: (ITS#7735) Memory leaks on Multi-Master replications
by dmitrii.fonariuk＠gmail.com 29 Oct '13

29 Oct '13

--e89a8ff1c04499e9af04e9eea81c Content-Type: text/plain; charset=ISO-8859-1 hi. visually. two days of use 3K load modify per second memory consumption increased from 200 Mb to 16 Gb. After that, the system killed the process. when modify send only to one server use 200 Mb memory and its consumption does not increase. no I do not use an alternative memory allocator. best regards, Dmitrii 2013/10/29 Quanah Gibson-Mount <quanah(a)zimbra.com> > --On Tuesday, October 29, 2013 10:45 AM +0000 dmitrii.fonariuk(a)gmail.comwrote: > > Full_Name: Dmitrii Fonariuk >> Version: 2.4.37 >> OS: RHEL6.x86_64 >> URL: ftp://ftp.openldap.org/**incoming/<ftp://ftp.openldap.org/incoming/> >> Submission from: (NULL) (91.210.4.1) >> >>> memory leaks >>> >> >> * in square brackets ranges. >> >> Ranges for DN do not overlap for different servers. State is numericString >> attribute. >> > > How are you determining there is a memory leak? Are you using an > alternative memory allocator like tcmalloc instead of glibc? > > --Quanah > > > -- > > Quanah Gibson-Mount > Architect - Server > Zimbra, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration > --e89a8ff1c04499e9af04e9eea81c Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">hi.<div>visually.=A0two days of use 3K load modify per sec= ond memory consumption increased from 200 Mb to 16 Gb. After that, the syst= em killed the process.</div><div>when modify send only to one server use 20= 0 Mb memory and its consumption does not increase.</div> <div>no I do not use an=A0<span style=3D"font-family:arial,sans-serif;font-= size:13px">alternative memory allocator.</span></div><div><font face=3D"ari= al, sans-serif"><br></font></div><div><font face=3D"arial, sans-serif">best= regards,</font></div> <div><font face=3D"arial, sans-serif">Dmitrii<br></font><div class=3D"gmail= _extra"><br><br><div class=3D"gmail_quote">2013/10/29 Quanah Gibson-Mount <= span dir=3D"ltr"><<a href=3D"mailto:quanah@zimbra.com" target=3D"_blank"= >quanah(a)zimbra.com</a>></span><br> <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-= left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;p= adding-left:1ex">--On Tuesday, October 29, 2013 10:45 AM +0000 <a href=3D"m= ailto:dmitrii.fonariuk@gmail.com" target=3D"_blank">dmitrii.fonariuk(a)gmail.= com</a> wrote:<br> <br> <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-= left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;p= adding-left:1ex"> Full_Name: Dmitrii Fonariuk<br> Version: 2.4.37<br> OS: RHEL6.x86_64<br> URL: <a href=3D"ftp://ftp.openldap.org/incoming/" target=3D"_blank">ftp://f= tp.openldap.org/<u></u>incoming/</a><br> Submission from: (NULL) (91.210.4.1)<br> <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-= left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;p= adding-left:1ex"> memory leaks<br> </blockquote> <br> * in square brackets ranges.<br> <br> Ranges for DN do not overlap for different servers. State is numericString<= br> attribute.<br> </blockquote> <br> How are you determining there is a memory leak? =A0Are you using an alterna= tive memory allocator like tcmalloc instead of glibc?<br> <br> --Quanah<br> <br> <br> --<br> <br> Quanah Gibson-Mount<br> Architect - Server<br> Zimbra, Inc.<br> --------------------<br> Zimbra :: =A0the leader in open source messaging and collaboration<br> </blockquote></div><br></div></div></div> --e89a8ff1c04499e9af04e9eea81c--

1 0

Re: (ITS#7735) Memory leaks on Multi-Master replications
by quanah＠zimbra.com 29 Oct '13

29 Oct '13

--On Tuesday, October 29, 2013 10:45 AM +0000 dmitrii.fonariuk(a)gmail.com wrote: > Full_Name: Dmitrii Fonariuk > Version: 2.4.37 > OS: RHEL6.x86_64 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (91.210.4.1) >> memory leaks > > * in square brackets ranges. > > Ranges for DN do not overlap for different servers. State is numericString > attribute. How are you determining there is a memory leak? Are you using an alternative memory allocator like tcmalloc instead of glibc? --Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7735) Memory leaks on Multi-Master replications
by dmitrii.fonariuk＠gmail.com 29 Oct '13

29 Oct '13

Full_Name: Dmitrii Fonariuk Version: 2.4.37 OS: RHEL6.x86_64 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (91.210.4.1) Hi. I have 2 servers with OpenLDAP 2.4.37 in Multi-Master replication. If I send modify request to only one server no memory leaks. If I send different modify request on both servers I see a memory leaks on both servers. Here are the settings of one of the servers: dn: olcDatabase={1}mdb,cn=config objectClass: olcDatabaseConfig objectClass: olcConfig objectClass: top objectClass: olcMdbConfig olcDatabase: {1}mdb olcDbDirectory: /opt/local/OpenLDAP/data/mdb3 olcDbEnvFlags: writemap olcDbEnvFlags: mapasync olcDbIndex: entryUUID eq olcDbIndex: entryCSN eq olcDbIndex: objectClass eq olcDbMaxSize: 5368709120 olcLimits: {0}dn.exact="uid=replica1,uid=admin,dc=rrr" time.soft=unlimited time.hard=unlimited size.soft=unlimited size.hard=unlimited olcMirrorMode: TRUE olcRootDN: dc=rrr olcRootPW: secret olcSuffix: dc=rrr olcSyncrepl: {0}rid=010 provider=ldap://srv-rrr03:3903 binddn="uid=replica1,uid=admin,dc=rrr" bindmethod=simple credentials=replica1 searchbase="dc=rrr" schemachecking=off type=refreshAndPersist retry="5 5 60 +" dn: olcOverlay={0}syncprov,olcDatabase={1}mdb,cn=config objectClass: olcSyncProvConfig objectClass: olcOverlayConfig objectClass: olcConfig objectClass: top olcOverlay: {0}syncprov olcSpCheckpoint: 1000 5 Requests on one server: dn: id=1000000000[10000-30000],ou=subscriber,o=Megatron,dc=rrr changetype: modify replace: state state: [1-9] no memory leaks Requests on both servers: 1: dn: id=1000000000[10000-20000],ou=subscriber,o=Megatron,dc=rrr changetype: modify replace: state state: [1-9] 2: dn: id=1000000000[20001-30000],ou=subscriber,o=Megatron,dc=rrr changetype: modify replace: state state: [1-9] memory leaks * in square brackets ranges. Ranges for DN do not overlap for different servers. State is numericString attribute.

1 0

Re: (ITS#7705) mdb back-end segfaults sporadically with paged searches
by openldap＠semyon.org 28 Oct '13

28 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The problem seems to be resolved in OPENLDAP_REL_ENG_2_4_37. Please close this ticket. Best Semyon -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: GPGTools - https://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQGcBAEBCgAGBQJSbugyAAoJEDnsppBba4kKtNcL/0YHZaQfYOL7X5LBkYlsHX86 JtLPPT8mCax9ehrTQUmz5ZzuzV2YkQ2KnzO45Gb8K721bNTCuNBwlXvT33yh+I0T QCEOAdMOxAasC27BW3L46Bbw+lW9/GPfxW8p6eGaw2qDCpIwRluxApysi+paRZR1 VCXu/z8/zLIEVMDKq/lktGnCBFR7uNBr575G4ePZVgytDO8aEk/F2VE+LQRBbfVL 25zlQesiO8EEPk5blbBhRFxTUZEBs/0EAnBB7hoBVKDlbog4tjOav6aNq1o4TegS +0oNgZS+K0Krop/3v27dr+LzaFy07jySE4aDgXKstgqzM4uvZzCSxarsFPZyUqbd sJNXBEKM5HUMn6orl6Ip7Z7h0MSkPYAH7OZLWXYTOmgl5wgJ8ArQSMMTD9+vC/yk McIDElkqCoRce/IRfRYjS+Ct+qaEB7AYKhtbzVAwPjJBIj4S5N24xUShjDCvkjay K6oj3GQFq78jp2ehITHn9zytiw12gmhv+V42hEQY+g== =VzO+ -----END PGP SIGNATURE-----

1 0

ITS#7731
by hyc＠symas.com 28 Oct '13

28 Oct '13

The ITS is for actual bug reports, not for software usage questions. This ITS will be closed. Since you're using an RHEL build you should contact RedHat for support. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7734) MDB_NORDAHEAD missing from valid flags bitfields
by dw＠botanicus.net 27 Oct '13

27 Oct '13

Full_Name: David Wilson Version: LMDB 0.9.9 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (178.238.153.20) Unless I'm missing something, this new flag cannot be set during mdb_env_open(), and since it is not in CHANGEABLE either, cannot be set with mdb_env_set_flags() commit dd0df21ce0a935955966aa7d3077d666741d027f Author: David Wilson <dw(a)botanicus.net> Date: Mon Oct 28 01:28:00 2013 +0000 Add MDB_NORDAHEAD to CHANGELESS. diff --git a/lib/mdb.c b/lib/mdb.c index 33be876..3ec7302 100644 --- a/lib/mdb.c +++ b/lib/mdb.c @@ -3929,7 +3929,7 @@ fail: * environment and re-opening it with the new flags. */ #define CHANGEABLE (MDB_NOSYNC|MDB_NOMETASYNC|MDB_MAPASYNC) -#define CHANGELESS (MDB_FIXEDMAP|MDB_NOSUBDIR|MDB_RDONLY|MDB_WRITEMAP|MDB_NOTLS|MDB_NOLOCK) +#define CHANGELESS (MDB_FIXEDMAP|MDB_NOSUBDIR|MDB_RDONLY|MDB_WRITEMAP|MDB_NOTLS|MDB_NOLOCK|MDB_NORDAHEAD) int mdb_env_open(MDB_env *env, const char *path, unsigned int flags, mdb_mode_t mode)

1 0

Re: (ITS#7733) Assert failure calling mdb_cursor_del()
by dw＠botanicus.net 27 Oct '13

27 Oct '13

--001a11c350da0b6da604e9c2bb08 Content-Type: text/plain; charset=ISO-8859-1 Repro here: https://raw.github.com/dw/py-lmdb/master/misc/its7733.c --001a11c350da0b6da604e9c2bb08 Content-Type: text/html; charset=ISO-8859-1 <div dir="ltr">Repro here: <a href="https://raw.github.com/dw/py-lmdb/master/misc/its7733.c">https://raw.github.com/dw/py-lmdb/master/misc/its7733.c</a><br></div> --001a11c350da0b6da604e9c2bb08--

1 0

(ITS#7733) Assert failure calling mdb_cursor_del()
by dw＠botanicus.net 27 Oct '13

27 Oct '13

Full_Name: David Wilson Version: LMDB 0.9.9 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (178.238.153.20) Given a new environment whose main DBI has the following records inserted (in the displayed order): ['a', ''] ['b', ''] ['baa', ''] ['d', ''] mdb_cursor_set(MDB_LAST) then mdb_cursor_del(..., 0) then mdb_cursor_del(..., 0) will cause an abort: Assertion failed: (indx < NUMKEYS(mp)), function mdb_node_del, file lib/mdb.c, line 6380.

1 0

(ITS#7732) CSN too old MMR setup
by lanfeust99＠gmail.com 24 Oct '13

24 Oct '13

Full_Name: Lanfeut Version: 2.4.36 OS: Centos URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (193.42.151.220) sometimes my server a not in sync. because server ignoring entry: do_syncrep2: rid=102 CSN too old, ignoring 20130923090023.266239Z#000000#002#000000 @(#) $OpenLDAP: slapd 2.4.36 (....) 4 server host1 and host 2: only one database c=fr ( contain an ou=apps-ext ) host3 and host 4: tow database: first ou=apps-ext (glued with c=fr ). writable by host1,2,3,4 second c=fr writable only by host1,2 ldap-int1 and ldap-int2 cn=config also into syncrepl mirrorMode ldap-ext1 and ldap-ext2 cn=config also into syncrepl mirrorMode all server are time sync. Configuration: grep serverID /etc/openldap/slapd.d/* /etc/openldap/slapd.d/cn=config.ldif:olcServerID: 1 ldaps://ldap-int1.dom.fr /etc/openldap/slapd.d/cn=config.ldif:olcServerID: 2 ldaps://ldap-int2.dom.fr /etc/openldap/slapd.d/cn=config.ldif:olcServerID: 3 ldaps://ldap-ext1.vlandata.dom.fr /etc/openldap/slapd.d/cn=config.ldif:olcServerID: 4 ldaps://ldap-ext2.vlandata.dom.fr syncrepl: ldap-int1 and ldap-int2 cn=config also into syncrepl olcSyncrepl: {0}rid=101 provider=ldaps://ldap-int1.dom.fr binddn="uid=syncrepl ,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXXXXX sea rchbase="c=fr" tls_reqcert=never type=refreshAndPersist retry="5 5 300 +" timeout=1 olcSyncrepl: {1}rid=102 provider=ldaps://ldap-int2.cdoms.fr binddn="uid=syncrepl ,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXXXXX sea rchbase="c=fr" tls_reqcert=never type=refreshAndPersist retry="5 5 300 +" timeout=1 olcSyncrepl: {2}rid=103 provider=ldaps://ldap-ext2.vlandata.dom.fr binddn="uid =syncrepl,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XX XXXX tls_reqcert=never searchbase="o=apps-ext,c=fr" type=refreshAndPersist r etry="5 5 300 +" timeout=1 olcSyncrepl: {3}rid=104 provider=ldaps://ldap-ext1.vlandata.dom.fr binddn="uid =syncrepl,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXX XXXX searchbase="o=apps-ext,c=fr" tls_reqcert=never type=refreshAndPersist r etry="5 5 300 +" timeout=1 syncrepl host3 and host4: database apps-ext: olcSyncrepl: {0}rid=303 provider=ldaps://ldap-ext1.vlandata.dom.fr binddn="uid =syncrepl,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXX XXXX searchbase="o=apps-ext,c=fr" tls_reqcert=never type=refreshAndPersist r etry="5 5 300 +" timeout=1 olcSyncrepl: {1}rid=304 provider=ldaps://ldap-ext2.vlandata.dom.fr binddn="uid =syncrepl,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXX XXX searchbase="o=apps-ext,c=fr" tls_reqcert=never type=refreshAndPersist r etry="5 5 300 +" timeout=1 database c=fr : olcSyncrepl: {0}rid=201 provider=ldaps://ldap-int1.dom.fr binddn="uid=syncrepl ,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXXXXX sea rchbase="c=fr" tls_reqcert=never type=refreshAndPersist retry="5 5 300 +" tim eout=1 olcSyncrepl: {1}rid=202 provider=ldaps://ldap-int2.dom.fr binddn="uid=syncrepl ,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXXXXX tls _reqcert=never searchbase="c=fr" type=refreshAndPersist retry="5 5 300 +" tim eout=1 ldap-int1 receive syncrepl modification from ldap-int2 with this log: ldap-int1 log: syncprov_matchops: skipping original sid 002 Oct 4 15:00:24 ldap-int1 slapd[24555]: slap_graduate_commit_csn: removing 0x7f7bf8200b40 20131004150021.988007Z#000000#002#000000 Oct 4 15:00:24 ldap-int1 slapd[24555]: syncrepl_entry: rid=102 be_add cn=502296-xxxxxx,ou=aaaaa,ou=bbbb,o=cccc,c=dd (0) ... ... ldap-ext2 receive the same modification an reply to ldap-int1 with new cookie ldap-int1 log Oct 4 15:00:24 ldap-int1 slapd[24555]: do_syncrep2: rid=103 NEW_COOKIE: rid=103,sid=004,csn=20130304121522.188962Z#000000#000#000000;20131004082718.688747Z#000000#001#000000;20131004150023.350876Z#000000#002#000000;20130920094950.036431Z#000000#003#000000;20130930134451.718477Z#000000#004#000000;20130304131428.455916Z#000000#00b#000000;20130304125618.164164Z#000000#00c#00000 Another modification from ldap-int2 isn't apply to ldap-int1 because of csn too old Oct 4 15:00:24 ldap-int1 slapd[24555]: syncrepl_entry: rid=102 be_add cn=502296-bbbb,ou=aaaaa,ou=bbbb,o=cccc,c=dd (0) Oct 4 15:00:24 ldap-int1 slapd[24555]: do_syncrep2: rid=102 cookie=rid=102,sid=002,csn=20131004150022.050845Z#000000#002#000000 Oct 4 15:00:24 ldap-int1 slapd[24555]: do_syncrep2: rid=102 CSN too old, ignoring 20131004150022.050845Z#000000#002#000000 (cn=502296-bbbb,ou=aaaaa,ou=bbbb,o=cccc,c=dd) Oct 4 15:00:24 ldap-int1 slapd[24555]: do_syncrep2: rid=102 cookie=rid=102,sid=002,csn=20131004150022.100121Z#000000#002#000000

1 0

Re: (ITS#7723) slapd crashes on multi core machines if a search request is *immediately* followed by an unbind
by jsynacek＠redhat.com 23 Oct '13

23 Oct '13

On 10/15/2013 02:03 PM, hyc(a)symas.com wrote: > Yes, your test config shows that the problem is that rwm_conn_destroy frees > the session context while rwm_op_search is using it. Seems like the rwm > overlay is not doing reference counting properly. > With the current master (fe49824f83bb0f2dd2f543c26f186b516c1d75bd), this is how the trace looks like: (gdb) t apply all bt Thread 5 (Thread 0x7f53f9009700 (LWP 28210)): #0 0x000000309360dded in __lll_lock_wait () from /lib64/libpthread.so.0 #1 0x0000003093609ba1 in _L_lock_790 () from /lib64/libpthread.so.0 #2 0x0000003093609aa7 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00007f5401b530a7 in ldap_pvt_thread_mutex_lock (mutex=0x7f53f980c768) at thr_posix.c:296 #4 0x0000000000445287 in connection_operation (ctx=0x7f53f9008bb0, arg_v=0x7f53e0001230) at connection.c:1147 #5 0x00007f5401b51993 in ldap_int_thread_pool_wrapper (xpool=0x937380) at tpool.c:945 #6 0x0000003093607c53 in start_thread () from /lib64/libpthread.so.0 #7 0x0000003092ef5e1d in clone () from /lib64/libc.so.6 Thread 4 (Thread 0x7f53f3fff700 (LWP 28215)): #0 0x000000309360b575 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00007f5401b53054 in ldap_pvt_thread_cond_wait (cond=0x9373b8, mutex=0x937390) at thr_posix.c:277 #2 0x00007f5401b518be in ldap_int_thread_pool_wrapper (xpool=0x937380) at tpool.c:927 #3 0x0000003093607c53 in start_thread () from /lib64/libpthread.so.0 #4 0x0000003092ef5e1d in clone () from /lib64/libc.so.6 Thread 3 (Thread 0x7f54016dd740 (LWP 28178)): #0 0x0000003093608d97 in pthread_join () from /lib64/libpthread.so.0 #1 0x00007f5401b52f95 in ldap_pvt_thread_join (thread=139998644971264, thread_return=0x0) at thr_posix.c:197 #2 0x0000000000441bb4 in slapd_daemon () at daemon.c:2907 #3 0x000000000041b28a in main (argc=10, argv=0x7fff84c32388) at main.c:1013 Thread 2 (Thread 0x7f53f980a700 (LWP 28197)): #0 0x0000003092ef63f3 in epoll_wait () from /lib64/libc.so.6 #1 0x00000000004406b4 in slapd_daemon_task (ptr=0x9c02d0) at daemon.c:2514 #2 0x0000003093607c53 in start_thread () from /lib64/libpthread.so.0 #3 0x0000003092ef5e1d in clone () from /lib64/libc.so.6 Thread 1 (Thread 0x7f53f8808700 (LWP 28214)): #0 0x00000000004c121a in slap_sl_free (ptr=0x7f53e8000b40, ctx=0x7f53e80009d0) at sl_malloc.c:513 #1 0x0000000000449520 in do_search (op=0x7f53e0103c60, rs=0x7f53f8807ad0) at search.c:257 #2 0x00000000004451d4 in connection_operation (ctx=0x7f53f8807bb0, arg_v=0x7f53e0103c60) at connection.c:1134 #3 0x00007f5401b51993 in ldap_int_thread_pool_wrapper (xpool=0x937380) at tpool.c:945 #4 0x0000003093607c53 in start_thread () from /lib64/libpthread.so.0 #5 0x0000003092ef5e1d in clone () from /lib64/libc.so.6 (gdb) bt full #0 0x00000000004c121a in slap_sl_free (ptr=0x7f53e8000b40, ctx=0x7f53e80009d0) at sl_malloc.c:513 sh = 0x7f53e80009d0 size = 7286935691776455520 p = 0x7f53e8000b38 nextp = 0x6520e4bb49737e98 tmpp = 0x7f53f8807ad0 #1 0x0000000000449520 in do_search (op=0x7f53e0103c60, rs=0x7f53f8807ad0) at search.c:257 base = {bv_len = 6, bv_val = 0x7f53e00009c7 "o=test"} siz = 0 off = 0 i = 0 #2 0x00000000004451d4 in connection_operation (ctx=0x7f53f8807bb0, arg_v=0x7f53e0103c60) at connection.c:1134 rc = 80 cancel = 0 op = 0x7f53e0103c60 rs = {sr_type = REP_RESULT, sr_tag = 101, sr_msgid = 2, sr_err = 80, sr_matched = 0x0, sr_text = 0x7f53f98d4fe6 "searchDN massage error", sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0} tag = 99 opidx = SLAP_OP_SEARCH conn = 0x7f53f980c750 memctx = 0x7f53e80009d0 memctx_null = 0x0 memsiz = 1048576 __PRETTY_FUNCTION__ = "connection_operation" #3 0x00007f5401b51993 in ldap_int_thread_pool_wrapper (xpool=0x937380) at tpool.c:945 pq = 0x937380 pool = 0x937280 task = 0x7f53ec113d60 work_list = 0x9373f0 ctx = {ltu_pq = 0x937380, ltu_id = 139998628185856, ltu_key = {{ltk_key = 0x444c86 <conn_counter_init>, ltk_data = 0x7f53e80008c0, ltk_free = 0x444a7d <conn_counter_destroy>}, {ltk_key = 0x4c0182 <slap_sl_mem_init>, ltk_data = 0x7f53e80009d0, ltk_free = 0x4bffa7 <slap_sl_mem_destroy>}, {ltk_key = 0x461f28 <slap_op_free>, ltk_data = 0x0, ltk_free = 0x461e7b <slap_op_q_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0x0} <repeats 29 times>}} kctx = 0x0 i = 32 keyslot = 817 hash = 1596318513 pool_lock = 0 freeme = 0 __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" I used the reproducer provided by Michael. The core was generated by the server running with slapd1.conf. -- Jan Synacek Software Engineer, Red Hat

1 0

Re: (ITS#7730) Error:passwd: Authentication token manipulation error
by quanah＠zimbra.com 19 Oct '13

19 Oct '13

--On Saturday, October 19, 2013 9:59 AM +0000 skadian1(a)gmail.com wrote: > Full_Name: sumit kadian > Version: 2.4.23 > OS: centos 6.4 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (122.176.201.133) The ITS system is for bug reports, not usage questions. Send questions to openldap-technical(a)openldap.org. This ITS will be closed. --Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7730) Error:passwd: Authentication token manipulation error
by skadian1＠gmail.com 19 Oct '13

19 Oct '13

Full_Name: sumit kadian Version: 2.4.23 OS: centos 6.4 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (122.176.201.133) Hi, I have configured the openldap server with tls on Centos 6.4. And also authenticated the client with authconfig-gtk. Now I try to change the password of ldap user on the client machine, then it giving following error:- "passwd: Authentication token manipulation error " here is the configuration file ================================================================================== # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /etc/openldap/schema/corba.schema include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/duaconf.schema include /etc/openldap/schema/dyngroup.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/java.schema include /etc/openldap/schema/misc.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/openldap.schema include /etc/openldap/schema/ppolicy.schema include /etc/openldap/schema/collective.schema # Allow LDAPv2 client connections. This is NOT the default. allow bind_v2 allow update_anon # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap://root.openldap.org pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args # Load dynamic backend modules # - modulepath is architecture dependent value (32/64-bit system) # - back_sql.la overlay requires openldap-server-sql package # - dyngroup.la and dynlist.la cannot be used at the same time # modulepath /usr/lib/openldap # modulepath /usr/lib64/openldap # moduleload accesslog.la # moduleload auditlog.la # moduleload back_sql.la # moduleload chain.la # moduleload collect.la # moduleload constraint.la # moduleload dds.la # moduleload deref.la # moduleload dyngroup.la # moduleload dynlist.la # moduleload memberof.la # moduleload pbind.la # moduleload pcache.la # moduleload ppolicy.la # moduleload refint.la # moduleload retcode.la # moduleload rwm.la # moduleload seqmod.la # moduleload smbk5pwd.la # moduleload sssvlv.la #moduleload syncprov.la # moduleload translucent.la # moduleload unique.la # moduleload valsort.la # The next three lines allow use of TLS for encrypting connections using a # dummy test certificate which you can generate by running # /usr/libexec/openldap/generate-server-cert.sh. Your client software may balk # at self-signed certificates, however. #TLSCACertificatePath /etc/openldap/certs #TLSCertificateFile "\"OpenLDAP Server\"" #TLSCertificateKeyFile /etc/openldap/certs/password TLSCACertificatePath /etc/pki/tls/certs/ TLSCertificateFile /etc/pki/tls/certs/new.pem TLSCertificateKeyFile /etc/pki/tls/certs/new.pem # Sample security restrictions # Require integrity protection (prevent hijacking) # Require 112-bit (3DES or better) encryption for updates # Require 63-bit encryption for simple bind # security ssf=1 update_ssf=112 simple_bind=64 # Sample access control policy: # Root DSE: allow anyone to read it # Subschema (sub)entry DSE: allow anyone to read it # Other DSEs: # Allow self write access # Allow authenticated users read access # Allow anonymous users to authenticate # Directives needed to implement policy: #access to dn.base="" by * read #access to dn.base="cn=Subschema" by * read #access to * by * read # access to attrs=userPassword # by self =xw # access to * by * write # access to * by anonymous none # by self write # by users read # by anonymous auth # access to attrs=userPassword by self write by anonymous auth by * none # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! # by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage # enable on-the-fly configuration (cn=config) database config access to * by * read by * write # enable server status monitoring (cn=monitor) database monitor access to * by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read by dn.exact="cn=Manager,dc=example,dc=com" read by * write ####################################################################### # database definitions ####################################################################### database bdb suffix "dc=example,dc=com" checkpoint 1024 15 rootdn "cn=Manager,dc=example,dc=com" #loglevel -1 #logfile /var/log/ldap.log # Cleartext passwords, especially for the rootdn, should # be avoided. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw redhat # rootpw {crypt}ijFYNcSNctBYg #olcLogFile /var/log/slapd.log # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory /var/lib/ldap # Indices to maintain for this database index objectClass eq #index ou,cn,mail,surname,givenname eq,pres,sub #index uidNumber,gidNumber,loginShell eq,pres #index uid,memberUid eq,pres,sub #index nisMapName,nisMapEntry eq,pres,sub #index entryCSN,entryUUID eq ========================================

1 0

Re: (ITS#7723) slapd crashes on multi core machines if a search request is *immediately* followed by an unbind
by michael＠stroeder.com 18 Oct '13

18 Oct '13

This is a cryptographically signed message in MIME format. --------------ms050104040805090407080805 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable hyc(a)symas.com wrote: > Yes, your test config shows that the problem is that rwm_conn_destroy f= rees=20 > the session context while rwm_op_search is using it. Seems like the rwm= =20 > overlay is not doing reference counting properly. I had problems with a certain configuration of slapo-rwm where slapcat se= g faulted after writing all the LDIF data. Could this be related? Never found the time to construct a simple config showing the issue thoug= h. Ciao, Michael. --------------ms050104040805090407080805 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIFfzCC BXswggNjoAMCAQICAwxOfTANBgkqhkiG9w0BAQUFADB5MRAwDgYDVQQKEwdSb290IENBMR4w HAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmlu ZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0xMjEw MDIyMDE3MDlaFw0xNDEwMDIyMDE3MDlaMD8xGDAWBgNVBAMUD01pY2hhZWwgU3Ry9mRlcjEj MCEGCSqGSIb3DQEJARYUbWljaGFlbEBzdHJvZWRlci5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDo2SKth5GhtaDrCyfGtyUG+/hAAa/J52L0NFN4SSRvTtdGf9HfWwwd NCtgae0TVGWk2lKDbXA9d5vmyIiRhuwxd90H6FLErhRBeB9G67qtw87E8WUoXt2DwPQEUTWV hqHpPadlmgFw3+i3TGQQTe3O3W9MMMd4GJNhObem2VGRuCD37OXnzBksTcq0FPJgcWAhe3d/ 0ItOkNWBqgq8Mf3p7WFBhaQ0a27BC/mKtH8fI3kPcS305imPRja69Msq3EwUZBc9ToVp6FRQ NYKjfOBybDUzVkmRZl3H8xutQP2w8Zxb8m5f7Q1BfLLrIFScfYvIDgOERxTCd4lab8+/09XH AgMBAAGjggFEMIIBQDAMBgNVHRMBAf8EAjAAMFYGCWCGSAGG+EIBDQRJFkdUbyBnZXQgeW91 ciBvd24gY2VydGlmaWNhdGUgZm9yIEZSRUUgaGVhZCBvdmVyIHRvIGh0dHA6Ly93d3cuQ0Fj ZXJ0Lm9yZzAOBgNVHQ8BAf8EBAMCA6gwQAYDVR0lBDkwNwYIKwYBBQUHAwQGCCsGAQUFBwMC BgorBgEEAYI3CgMEBgorBgEEAYI3CgMDBglghkgBhvhCBAEwMgYIKwYBBQUHAQEEJjAkMCIG CCsGAQUFBzABhhZodHRwOi8vb2NzcC5jYWNlcnQub3JnMDEGA1UdHwQqMCgwJqAkoCKGIGh0 dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9yZXZva2UuY3JsMB8GA1UdEQQYMBaBFG1pY2hhZWxAc3Ry b2VkZXIuY29tMA0GCSqGSIb3DQEBBQUAA4ICAQC9ouXq3p/bDWMM4tBKgD3tl4HY5H0eECl8 q9/nqk0UL6YeWkrCiQdrDtNPW7DcGqNYtzdgtzmyTr1GhiAX+igrOjdk/ge5NRcQOpONK/4b zrmpQEcIUyxSSDKLWh211/kcFfxxLEiJ5teF4GL8Fc1qbrLP4+DCvJXWfYaaR5NLjZMqm2VP yKTv3qpXWnGohiRkGTwS/11QM2XCfIGdRsQT9a8mO4m2fn2tGPp2TEIoCLrDDrbGVeDWaOWB OIeTrp4wa3Q4OI6yCptJhEqKvjhV96IBRYgM76nTBqsqnDzwxExAyhhWiUS5DunRHOr/+NyF pUpD4883RBLO0g9kUEGOhtZNF1u+8zEL0YgMGvifAom9JEklLOXZuqj0MThypKs/3d/OyOQb 4gURnu6oZwcKZ7LskytWnlRKUxF6o0A8grtmyKkqe14TS7cQbg0NTaIYXPkHR+dfFmb3uEqn BBjvpJXFcEtWI2lQXC/ET+au991pK797ExBOmpQwjIn3SjiW80vw/UoL6DMvqY/6JhVhyNTP MJ2W5AX5kc27DIbVtVGZs8J4AYhuNALJUq9N9Ka7rPRj3RcYDrfehDLOkM5iMnarpmtuOpLK d1SvZhqj/0N/JWGIDpPSTkTFOPP6ZN9I9Rqyf+9NGqb2sjo4DkIiZcHxt735/GJLwus5KLBl 2DGCA6EwggOdAgEBMIGAMHkxEDAOBgNVBAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93 d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZQ0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8G CSqGSIb3DQEJARYSc3VwcG9ydEBjYWNlcnQub3JnAgMMTn0wCQYFKw4DAhoFAKCCAfUwGAYJ KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTMxMDE4MjIyOTE0WjAj BgkqhkiG9w0BCQQxFgQUpusHNy0yKlNww0KbhZA5EJpix5kwbAYJKoZIhvcNAQkPMV8wXTAL BglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDAN BggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBkQYJKwYBBAGCNxAEMYGD MIGAMHkxEDAOBgNVBAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9y ZzEiMCAGA1UEAxMZQ0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYS c3VwcG9ydEBjYWNlcnQub3JnAgMMTn0wgZMGCyqGSIb3DQEJEAILMYGDoIGAMHkxEDAOBgNV BAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZ Q0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9ydEBjYWNl cnQub3JnAgMMTn0wDQYJKoZIhvcNAQEBBQAEggEAshlSUWOl5MUBUKz+KUpiNpAdAxQObrGR gVzeWE41HIVpNtzJ9Ay179lryM/geFL65OJlQuotw7qpwwCBQicr/ryYWwJzKbMMKRHROEkj 9J8vutxDnbK4ugSuW6FfoIbvSgV2+olagyKBtO6Cu+TFPUyXpyHS0FiPx6xyBFSMo/xkMZ03 DLd8UPAga+LrV/JRtMXShGsyNHifk7wl14lHxPi7OpZ53ny14PNhfRCC0vldD/2RX5hWWivU 0lkPd7QPGHZnsHZfsStnF7s6TdA578zumQTb23spRNrqS8OCWvxbr25K+srcQDgWM1Upe+K9 I1WTDt31Zw+km2DN1jTGvQAAAAAAAA== --------------ms050104040805090407080805--

1 0

Re: (ITS#7726) how to config kerberos with openldap via clear passwords?
by quanah＠zimbra.com 18 Oct '13

18 Oct '13

--On Friday, October 18, 2013 9:14 PM +0000 mostafa.basu(a)gmail.com wrote: > Full_Name: Mostafa Moeini > Version: 2.4.23 > OS: CentOS 5 X86 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (199.201.121.184) > > > I want to use kerberos with openldap backend. > but the problem is kerberos encrypt passwords before save into ldap > database . how can I config kerberos to use clear mode for saving (and > reading) passwords? The ITS system is for reporting bugs. It is *not* for asking "how do I" questions. Please use the appropriate resource (the openldap-technical(a)openldap.org mailing list). This ITS will be closed. I would also strongly advise you to upgrade to a current openldap release. 2.4.23 is years old. --Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7726) how to config kerberos with openldap via clear passwords?
by mostafa.basu＠gmail.com 18 Oct '13

18 Oct '13

Full_Name: Mostafa Moeini Version: 2.4.23 OS: CentOS 5 X86 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (199.201.121.184) I want to use kerberos with openldap backend. but the problem is kerberos encrypt passwords before save into ldap database . how can I config kerberos to use clear mode for saving (and reading) passwords?

1 0

Re: (ITS#7705) mdb back-end segfaults sporadically with paged searches
by quanah＠zimbra.com 18 Oct '13

18 Oct '13

--On Tuesday, September 24, 2013 5:58 PM +0000 openldap(a)semyon.org wrote: > On 13-09-23 10:16 PM, Howard Chu wrote: > >> If you backup the DB with slapcat and reload it on another server with >> slapadd, can you still reproduce the fault on the copy? > > Unfortunately, yes. It breaks trying to retrieve the same record as > before, on the same instruction in back_mdb: > > yesterday: > [126393.233615] slapd[19244]: segfault at 7f499f38d000 ip > 00007f4da0e9b6a1 sp 00007f499f1fa540 error 6 in > back_mdb-2.4.so.2.9.2[7f4da0e80000+34000] > > today: > [517860.953779] slapd[24871]: segfault at 7fdeb50a0000 ip > 00007fe2b63ad6a1 sp 00007fdeb4f0d540 error 6 in > back_mdb-2.4.so.2.9.2[7fe2b6392000+34000] Please provide a useful bug report. I.e., get a stack trace from gdb, as noted in: <http://www.openldap.org/faq/data/cache/59.html> Sample data/testcase/configs always welcome as well. --Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7713) Segmentation fault if the pagesize of the Operating system is not equal to 4096.
by hyc＠symas.com 16 Oct '13

16 Oct '13

sumanth wrote: > As per ur suggestions,tried changing > > 1. MDB_PAGESIZE to 65536 > 2. changing pb_lower and pb_upper to uint32_t. > As of now it is running fine for the existing testcases in openldap-2.4.36. > However there were problems in 2.4.35. Also saw the comments in > openldap-devel. So whether this will make to openldap 2.4.36? The current plan is to fix this in OpenLDAP 2.5, and we are now halting new development in 2.4. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7713) Segmentation fault if the pagesize of the Operating system is not equal to 4096.
by sumantk2＠linux.vnet.ibm.com 16 Oct '13

16 Oct '13

This is a multi-part message in MIME format. --------------050805010104090604050102 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit As per ur suggestions,tried changing 1. MDB_PAGESIZE to 65536 2. changing pb_lower and pb_upper to uint32_t. As of now it is running fine for the existing testcases in openldap-2.4.36. However there were problems in 2.4.35. Also saw the comments in openldap-devel. So whether this will make to openldap 2.4.36? Thank you, Sumanth K --------------050805010104090604050102 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> As per ur suggestions,tried changing<br> <br> 1. MDB_PAGESIZE to 65536 <br> 2. changing pb_lower and pb_upper to uint32_t.<br> As of now it is running fine for the existing testcases in openldap-2.4.36. However there were problems in 2.4.35. Also saw the comments in openldap-devel. So whether this will make to openldap 2.4.36? <br> <br> <br> Thank you,<br> Sumanth K<br> <span style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); display: inline !important; float: none;"></span> </body> </html> --------------050805010104090604050102--

1 0

RE: (ITS#7717) Sudden memory increase leading to Master LDAP crash
by quanah＠zimbra.com 15 Oct '13

15 Oct '13

--On Tuesday, October 15, 2013 11:47 PM +0200 Bruno Marcon <marcon.bruno(a)free.fr> wrote: > I have found the origin of the memory increase. The problem occur with a > huge group and the RefreshAndPersist mode replication without using DELTA > Sync. So each slaves pull from the master the entire entry. > > The LDAP contains about 100.000 users. All of them are member of a group > name "XXX". The group XXX is a group with 100.000 attributes "member", > one for each user. > > So when I assign 20 users per seconds to the XXX group, the master LDAP > push (or the slaves pull ?) the group XXX 20 times per seconds for each > slaves (there is 5 slaves). > > 5x20x100.000 = 10.000.000 attributes per seconds... The master LDAP handle > this rate for several seconds, perhaps one minute, then suddenly increase > in memory and is killed by the OS at 2Go of memory. > > To avoid this, i have set the DELTA sync replication to only send the > modification : for each assignition of a user in the group, only the > attribute member for the user is replicate. > > A question is why the LDAP is increasing in memory ? it should be slowed > rather than store something in memory after having reach a limit ? > > Our main problem now is : we have two masters in mirror mode, and 4 > replicas. For the replicas, I can use the DELTA sync mode. For the > recovery master (for fail over), I can't use DELTA sync because this mode > is not supported in Mirror mode. > So we have configure the masters replication in RefreshOnly mode with a > polling period of 5 seconds, to avoid this memory increase in > RefreshAndPersist mode without DELTA sync. > Doing this, the recovery master have 5s of delay before replicate the > primary master, so if the primary master crash for any reason, the > recovery master may have missed up to 5s of modifications (users creation > for example). BUT replicas are up to date with the old primary master are > more up to date than the recovery master and may have more users, because > there replication is immediate (RefreshAndPersist mode). > > If we can restart the "old" primary master, the recovery master get the > missing users thanks to replication. If we can't restart the primary > master because it is KO, we have a recovery master with less users than > slave, so we have some onconsistency between replicas and the recovery > master. > > Do you have any solution to this problem ? It occures with big LDAP > database and hight rate of modifications on the master because we work on > a huge project with thousands of users (and perhaps in the future > millions of users). > > Regards, > Bruno Marcon. > > > -----Message d'origine----- > De : MARCON Bruno [mailto:Bruno.MARCON@thalesgroup.com] > Envoyé : mercredi 9 octobre 2013 14:04 > À : Bruno Marcon > Objet : RE: (ITS#7717) Sudden memory increase leading to Master LDAP > crash > > > > Bruno Marcon > ThereSIS Innovation lab, ICT Security Unit > - IT Security Expert > - Software Architect > > Thales Research & Technology > Campus Polytechnique > 1, avenue Augustin Fresnel > 91767 Palaiseau cedex > France > Office: +33 (0)1 69 41 60 96 > Fax: +33 (0)1 69 41 55 63 > > > -----Message d'origine----- > De : Bruno Marcon [mailto:marcon.bruno@free.fr] Envoyé : mardi 8 > octobre 2013 18:05 À : MARCON Bruno Objet : TR: (ITS#7717) Sudden > memory increase leading to Master LDAP crash > > > > -----Message d'origine----- > De : Quanah Gibson-Mount [mailto:quanah@zimbra.com] > Envoyé : lundi 7 octobre 2013 16:56 > À : marcon.bruno(a)free.fr; openldap-its(a)openldap.org > Objet : Re: (ITS#7717) Sudden memory increase leading to Master LDAP > crash > > --On Thursday, October 03, 2013 1:14 PM +0000 marcon.bruno(a)free.fr wrote: > >> The problem is very easy to replay : one master and one slave are >> sufficient. Then run 9 windows with a script adding an entry and >> modifying an entry. > > Please provide full configuration details. > > --Quanah > > > -- > > Quanah Gibson-Mount > Architect - Server > Zimbra Software, LLC > -------------------- > Zimbra :: the leader in open source messaging and collaboration > > -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7723) slapd crashes on multi core machines if a search request is *immediately* followed by an unbind
by hyc＠symas.com 15 Oct '13

15 Oct '13

michael.vishchers(a)7p-group.com wrote: > --_004_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_ > Content-Type: multipart/alternative; > boundary="_000_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_" > > --_000_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_ > Content-Type: text/plain; charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable > > It is not the client loop that is multithreading but the ldap server. Thanks for clarifying. > > And it is not a misuse of the API but a problem that may be raised by day t= > o day network problems. > > I've boiled down the problem to a few simple configurations that work (or b= > etter, fail ;-) with both 2.4.23 and 2.4.36. A tgz file containing a setup = > with start script and testclient is attached. It should be sufficient to re= > produce the fault. > > The problem occurs only if we use session variable substitution in the rwm = > overlay, and only if a search is *immediately* (e.g. caused by network loss= > and client timeout) followed by an unbind. Yes, your test config shows that the problem is that rwm_conn_destroy frees the session context while rwm_op_search is using it. Seems like the rwm overlay is not doing reference counting properly. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7723) slapd crashes on multi core machines if a search request is *immediately* followed by an unbind
by michael.vishchers＠7p-group.com 15 Oct '13

15 Oct '13

--_004_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_ Content-Type: multipart/alternative; boundary="_000_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_" --_000_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable It is not the client loop that is multithreading but the ldap server. And it is not a misuse of the API but a problem that may be raised by day t= o day network problems. I've boiled down the problem to a few simple configurations that work (or b= etter, fail ;-) with both 2.4.23 and 2.4.36. A tgz file containing a setup = with start script and testclient is attached. It should be sufficient to re= produce the fault. The problem occurs only if we use session variable substitution in the rwm = overlay, and only if a search is *immediately* (e.g. caused by network loss= and client timeout) followed by an unbind. Mit freundlichen Gr=FC=DFen / Kind regards Michael Vishchers Senior System Engineer 7P Solutions & Consulting AG Calor-Emag-Stra=DFe 1 40878 Ratingen Phone : +49-2102-5354-356 Fax : +49-2102-5354-111 Email : michael.vishchers(a)7p-group.com<mailto://michael.vishchers@7P-Grou= p.com> Home : www.7p-group.com<http://www.7P-Group.com> Sitz der Gesellschaft: K=F6ln Registriergericht: Amtsgericht K=F6ln Handelsregister: HRB 32361 Aufsichtsratsvorsitzender: Dr. Kai H=F6hmann Vorstand: Jens Harig (Vorsitzender), Dr. Joachim Philippi USt-ID-Nr.: DE197820124 Steuer-Nr.: 215/5917/1764 Eine Bitte: Denken Sie an Ihre Umwelt, bevor Sie diese E-Mail ausdrucken! P Please consider the environment before printing this e-mail Der Inhalt dieser e-Mail ist ausschlie=DFlich f=FCr den bezeichneten Adress= aten bestimmt. Wenn Sie nicht der vorgesehene Adressat dieser e-Mail oder d= essen Vertreter sein sollten, beachten Sie bitte, dass jede Form der Ver=F6= ffentlichung, Vervielf=E4ltigung oder Weitergabe des Inhalts dieser e-Mail = unzul=E4ssig ist. Wir bitten Sie sofort den Absender zu informieren und die= E-mail zu l=F6schen. The information contained in this e-mail is intended solely for the address= ee. Access to this e-mail by anyone else is unauthorized. If you are not th= e intended recipient, any form of disclosure, reproduction, distribution or= any action taken or refrained from in reliance on it, is prohibited and ma= y be unlawful. Please notify the sender immediately and destroy this e-mail= . --_000_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html dir=3D"ltr"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style id=3D"owaParaStyle" type=3D"text/css">P {margin-top:0;margin-bottom:= 0;}</style> </head> <body ocsi=3D"0" fpstyle=3D"1"> <div style=3D"direction: ltr;font-family: Tahoma;color: #000000;font-size: = 10pt;">It is not the client loop that is multithreading but the ldap server= .<br> <br> And it is not a misuse of the API but a problem that may be raised by day t= o day network problems.<br> <br> I've boiled down the problem to a few simple configurations that work (or b= etter, fail ;-) with both 2.4.23 and 2.4.36. A tgz file containing a setup = with start script and testclient is attached. It should be sufficient to re= produce the fault. <br> <br> The problem occurs only if we use session variable substitution in the rwm = overlay, and only if a search is *immediately* (e.g. caused by network loss= and client timeout) followed by an unbind.<br> <div><br> <div style=3D"font-family: Tahoma; font-size: 13px;"> <div style=3D"font-family: Arial; font-size: 13px;">Mit freundlichen Gr=FC= =DFen / Kind regards<br> Michael Vishchers<br> Senior System Engineer<br> <br> 7P Solutions & Consulting AG<br> Calor-Emag-Stra=DFe 1<br> 40878 Ratingen<br> <br> Phone  : +49-2102-5354-356<br> Fax      : +49-2102-5354-111<br> Email   : <a href=3D"mailto://michael.vishchers@7P-Group.com" tab= index=3D"0">michael.vishchers(a)7p-group.com</a><br> Home   : <a href=3D"http://www.7P-Group.com" tabindex=3D"0">www.7= p-group.com</a><br> <br> <p class=3D"MsoNormal" style=3D"margin-bottom: 12pt; color: rgb(153, 153, 1= 53);"><font style=3D"color: rgb(192, 192, 192);" size=3D"1"><span style=3D"= font-size: 10pt; font-family: "Arial Narrow","sans-serif&quo= t;;">Sitz der Gesellschaft: K=F6ln<br> Registriergericht: Amtsgericht K=F6ln<br> Handelsregister: HRB 32361<br> Aufsichtsratsvorsitzender: Dr. Kai H=F6hmann<br> Vorstand: Jens Harig (Vorsitzender), Dr. Joachim Philippi<br> USt-ID-Nr.: DE197820124<br> Steuer-Nr.: 215/5917/1764</span></font><b><i><span style=3D""></span></i></= b></p> <p class=3D"MsoNormalCxSpMiddle" style=3D"margin-bottom: 12pt; color: rgb(1= 53, 153, 153);"> <b><i><span style=3D"font-size: 9.5pt; font-family: "Arial Narrow&quot= ;,"sans-serif";">Eine Bitte: Denken Sie an Ihre Umwelt, bevor Sie= diese E-Mail ausdrucken!</span></i></b><b><span style=3D"font-size: 9.5pt;= font-family: "Arial Narrow","sans-serif";"> </span></b><span style=3D"font-size: 9.5pt;"></span></p> <p class=3D"MsoNormalCxSpMiddle" style=3D"margin-bottom: 12pt; color: rgb(1= 53, 153, 153);"> <b><i><span style=3D"font-size: 28pt; font-family: Webdings;">P</span></i><= /b><i><span style=3D"font-size: 14pt;"> </span></i><i><span style=3D"font-size: 9.5pt; font-family: "Arial Nar= row","sans-serif";" lang=3D"EN-US">Please consider the envir= onment before printing this e-mail</span></i></p> <p class=3D"MsoNormal" style=3D"color: rgb(153, 153, 153);"><span style=3D"= font-size: 8pt; font-family: "Arial Narrow","sans-serif&quot= ;;">Der Inhalt dieser e-Mail ist ausschlie=DFlich f=FCr den bezeichneten Ad= ressaten bestimmt. Wenn Sie nicht der vorgesehene Adressat dieser e-Mail oder dessen Vertreter sein sollten, beachten Sie bitte, dass jede F= orm der Ver=F6ffentlichung, Vervielf=E4ltigung oder Weitergabe des Inhalts = dieser e-Mail unzul=E4ssig ist. Wir bitten Sie sofort den Absender zu infor= mieren und die E-mail zu l=F6schen.<br> The information contained in this e-mail is intended solely for the address= ee. Access to this e-mail by anyone else is unauthorized. If you are not th= e intended recipient, any form of disclosure, reproduction, distribution or= any action taken or refrained from in reliance on it, is prohibited and may be unlawful. Please notify the se= nder immediately and destroy this e-mail.</span></p> <p class=3D"MsoNormal"> </p> </div> </div> </div> </div> </body> </html> --_000_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_-- --_004_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_ Content-Type: application/x-compressed-tar; name="test_scenario.tgz" Content-Description: test_scenario.tgz Content-Disposition: attachment; filename="test_scenario.tgz"; size=2305; creation-date="Tue, 15 Oct 2013 11:09:38 GMT"; modification-date="Tue, 15 Oct 2013 11:09:38 GMT" Content-Transfer-Encoding: base64 H4sIAFX9XFIAA+1a3XPbuBG33UxnjM70vS+dPVqXyIk+SOrrKltu0sTpeTrn3FzSt8y5EAlZbEiA BcjIas4zfeu/3QVI6stO3On5lLaHnz22uAR3F4vFYnepjKnsQgWMUxmJ9s5PAhcx6PXMf8Tmf/PZ 831/4A363U53x/X8rt/fgd5Po846cpVRCbAjhcg+Ne6u+/+jyNbWX8U0Df1WIPjkHmXoBe53ux9d /x7eK9e/O/A7uP7dbr+7A+496vBR/MzXP+JBnIcM2iwL2iJlPA5p2lbBlCW0HQjJWsVnEovLmL1n MaC9MgVccEayqWQ0VNDxCQlpRsdUMUhYRonKJ5PoChwx0g7mkJBNaB5nTbT1JcuKp0MeUOTdzLIY wkjRccxCgjekRBkiJZKNIx42qWrmisn9OVNERRy1aKJ/ctDXeKOZsSQVksr5ksxZNhPyXTOLEiby DDxCchntO3puw3bb8wctF3+8od/56ndtkY9oo1IUpc5klLFTfhlxBoJXhOeCZ+wqg3ImFfm7PGbg 1FtPDn/fWGFUcwCcmueAM3TI517jT2F9/3sX2uQtSWf3KeOu/e92F/Hf73V8vf/9vm/3/zbg/nZv d/cvv9nb/cWDXwd8pGdZuvA/HvyfTtliBev7PwtS3PutNL5XGXfkf34X9/xi/w86xf4f2P2/DRx8 0c6VbGPYb6dMxtCc6UMVD2AZBdkRwYN8DPqQR7eADwQQyRzqtQmnCTuEETy9ODLUWAQ0hlq7uNKJ BNTPzhvOcTHUOTyqHq5Jlo2Oz85PCkoQC5R3dl5c4b1ccjPmiFwTo8vZq+HwtQjeaRI5+Bjg+dfP zv94Cl+ffndKiJYTpSPHqDUVeLIfGRpmCtkID/2jYog+7XAS1QTrzvIA1BrrIYpRGUzXBvkXBbEa ZsZh8sNDwXFgSoN3UH/0/KtHDbK/r2flXnXchnvl9pcE19cET//pLKk9d0H1G8YgFfucl7pW3AcV 94p5b3G9xhsONKUD0QQqFSOdvmWAtg2rR7rmEVdLUyxmQQav37x49ec3R1D7AYV6hRZPlVkGVfpF EDPK83TpF085my2GaNoEE0jM8cyyK6hXzx/iI/tcZ1Oo1Rc6pcJcK8QhR2QfKfUl6bimTszopauY UfpSM8CP12Q/zdV0VXjDDNJjrs3fSu7ohoKpjHgGCp0Eg8ByeteF0RPFglETJz+bRpjm1Q3hyRM4 Bk8HLq1Y6cPGECsscRIOfOn2wrfSaZjHtGmrHVDIQbuiOivuPRyenZ++gTrZ/5Yx+SwMMS6NTrQj NwrSt+i9BUn7sSZKkQlNeISRWzvEm3nK9PXrV8//dPH6zXenz75B6iFsgOwLiTk3Zq7nAjC5fs8k rlWODobugfKGRkBhgLfcKVUvzLxi42pTLi1ZTc3srPJO6VB1ZM8mDVj/57Z66OPopCpmLIUpjdFP 8RHM5cNbGRdbr1HtiB8tA5e6kOC85S8jHqkpC82UP3dk3g5uqf+9Ldf/Ht6szv+eq8dh/d/r2/N/ G/i3639yYAIuYGUNMcbm4gzhjIUYpjHOg9/qtjp9kogQS+KUZlMwmUUcjfvdBefydixoCHKWtGJk fFtnYbW1oHsDcSxmoPf7BeWmJv9bHkkGNM+mweJK319pRBh5i7o/wsI/mbeKMOLc2lzY6FkQgWEx pnOtKCH4p3mzN7AkVv0BzfbF+eod0yJAON/X1yusw5oDTu3Dw4d4mNbp4fWX3moLQXcQhk+dTU76 6HNaj/FJ/D146pDblFg0KTa0MI0KI9WIqn14/BhlXy8k6m7FbfyKoHvKMznHuX1un7W4P2zEf4yF 9x/l7qj/PN/zFv3fzmCA8b/T81wb/7cBrP907aem5F0UxxhnweQAJHkXRhKaaXHptnRUvUncoHg3 KD5SCPnD2fnIHAYKZZEDczkVCWuP8ygO26ZIKz9GY3bFAlLDMUU2As0uNCeVRJ2ZQPPlQgFoTqHs 6rqmp+uani7mek2858FJORDPGPBPHnrwkBRJYA/PHXyOhgWLqkzUihsGzRewHqyxMgZ9CcfHp69e wkk7ZO/bPEeDab4k5EMoBhIx/ivmokFMlUKavKQ8+jvNIjwuxBDMCIIcyEfm6K/P0V/Oce0E25ih vzrD2xl764y9W41303beKmeSKmiyCfwAl5KVS6wzA82lLJQ3rflpYzbHldU+90b4mWI9/mO9+OKb 0/uWcVf+P/D6y/e/rs7/Ox0b/7cDsxur9R8SMqFRrGAWYfquE3q/A5SHVW5Plnl+A+Yix1L6PYNM QCCShPGiOBATyKaampZ1QsRXAxAm6EwFMkp1RESBTTBJxxAKouYmcw76JOIsYEpROS9bFEoPXp4D QxhTDIWoXtnBEBxM20IH8GqoVw6dSJ3KooqpFFfzBmDgV1Bm/Cgy5AqTZixSwohfakam2xbyio1f skmiMMQ8umQiGZ51GOsV6BIELbnBpOSPsrBGGs8rJcLieeS96LcXB4OmX0qaoAEprkqU5DFFurFn +U4TxgyNHolc4uPLbuVQ3wdTVqH9jfKJtt0lw2Gr/cr1gWXMroYSlD+OWQLrS7Sutu4bKaCTDC2u sG6TNIZ6Qq9Q2wToWL9v7bqHQDP9YhYtgtadog+h1Wglr7QWMdOMFDyO0H3CCOcazx9jMamrvcJi lEPZ+azjx5UGpjDK0fiwRcgZ183ZGN1tgn43xbsJVm1TmuoudFS447pkuGSoWayPKPTOFfM2zEUQ R9pVFM5ZkRW5eissNGqYSz08iZR+Mb0pI9JugTyy1tKwirHEmGSMUgRHD89wotrnZwlU9WZTK811 Yw75otj3uDf123HNUTdtSyUlVVOYCf4oK+fa+g8O0fX4v+op9xdj7nz/i7XBxvvfvm/f/24F7pO9 3b3g4YNflmnY7h7Z3dkzv7u7O//81Uoyu5XlsNgubun/utv+/lfH7yzq//6gb7//tUX8qO9/3UeX dhyOb3Reta1DDs560VjQ06JyJEXmJTA5dFrtlSbFf/fXrSwsLCwsLCwsLCwsLCwsLCwsLCwsLCws LCwsLCwsLCwsLCwsLO4N/wJ4ZNBaAFAAAA== --_004_96779DE2D69B3E4DB46CA3AEAA8C409D8B0DCCRTGMX02intranetlo_--

1 0

Antwort: Re: Antwort: Re: (ITS#7653) Test Build Version 2.4.36 hangs
by howard.allison＠pensionsversicherung.at 13 Oct '13

13 Oct '13

--0__=4EBBF697DF89C4868f9e8a93df938690918c4EBBF697DF89C486 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: quoted-printable Howard Chu <hyc(a)symas.com> wrote on 13.10.2013 00:54:04: > Von: Howard Chu <hyc(a)symas.com> > An: howard.allison(a)pensionsversicherung.at, openldap-its(a)openldap.org= , > Datum: 13.10.2013 00:54 > Betreff: Re: Antwort: Re: (ITS#7653) Test Build Version 2.4.36 hangs > > howard.allison(a)pensionsversicherung.at wrote: > > --0__=3D4EBBF156DFB715BF8f9e8a93df938690918c4EBBF156DFB715BF > > Content-type: multipart/alternative; > > Boundary=3D"1__=3D4EBBF156DFB715BF8f9e8a93df938690918c4EBBF156DF= B715BF" > > > > --1__=3D4EBBF156DFB715BF8f9e8a93df938690918c4EBBF156DFB715BF > > Content-type: text/plain; charset=3DISO-8859-1 > > Content-transfer-encoding: quoted-printable > > > > > > Hi! > > Sorry - here's the stack trace: > > Which backend were you testing, it's not shown in any of your output.= Your > trace is strange because it shows overlays being used, but test005 > doesn't use > any overlays. Seems like you may have a slapd left over from some oth= er test. > > > > > SLAPD: > > (dbx) thread info > > thread state-k wchan state-u k-tid mode held scope functi=3D > > on > > $t1 wait 0xf1000f0a1000ee40 blocked 15597767 k no= sy=3D > > s > > > > general: > > pthread addr =3D3D 0x3009f56c size =3D3D = 0x290 > > vp addr =3D3D 0x300a15b0 size =3D3D = 0x2e0 > > thread errno =3D3D 0 > > start pc =3D3D 0x10000420 > > joinable =3D3D yes > > pthread_t =3D3D 1 > > scheduler: > > kernel =3D3D > > user =3D3D 1 (other) > > nice =3D3D 60 > > event : > > event =3D3D 0x0 > > cancel =3D3D enabled, deferred, not pending > > stack storage: > > base =3D3D 0x20000000 size =3D3D 0xff22190=3D > > > > limit =3D3D 0x2ff22190 > > sp =3D3D 0x2ff21e90 > > thread state-k wchan state-u k-tid mode held scope functi=3D > > on > >> $t2 run running 36372639 k no sys > > __fd_select > > > > general: > > pthread addr =3D3D 0x308e5cf0 size =3D3D = 0x290 > > vp addr =3D3D 0x303d3780 size =3D3D = 0x2e0 > > thread errno =3D3D 4 > > start pc =3D3D 0x3001f600 > > joinable =3D3D yes > > pthread_t =3D3D 102 > > scheduler: > > kernel =3D3D > > user =3D3D 1 (other) > > nice =3D3D 60 > > event : > > event =3D3D 0x0 > > cancel =3D3D enabled, deferred, not pending > > stack storage: > > base =3D3D 0x304e5000 size =3D3D = 0x400000 > > limit =3D3D 0x308e5b90 > > sp =3D3D 0x308e4530 > > thread state-k wchan state-u k-tid mode held scope functi=3D > > on > > $t3 run running 30015693 u no sys > > base_candidate > > > > general: > > pthread addr =3D3D 0x30ce9cf0 size =3D3D = 0x290 > > vp addr =3D3D 0x303d5790 size =3D3D = 0x2e0 > > thread errno =3D3D 11 > > start pc =3D3D 0xf0391ec0 > > joinable =3D3D no > > pthread_t =3D3D 203 > > scheduler: > > kernel =3D3D > > user =3D3D 1 (other) > > nice =3D3D 60 > > event : > > event =3D3D 0x0 > > cancel =3D3D enabled, deferred, not pending > > stack storage: > > base =3D3D 0x308e9000 size =3D3D = 0x400000 > > limit =3D3D 0x30ce9b90 > > sp =3D3D 0x30c286f0 > > thread state-k wchan state-u k-tid mode held scope functi=3D > > on > > $t4 run running 21561505 u no sys > > base_candidate > > > > general: > > pthread addr =3D3D 0x319eecf0 size =3D3D = 0x290 > > vp addr =3D3D 0x303e4b60 size =3D3D = 0x2e0 > > thread errno =3D3D 11 > > start pc =3D3D 0xf0391ec0 > > joinable =3D3D no > > pthread_t =3D3D 304 > > scheduler: > > kernel =3D3D > > user =3D3D 1 (other) > > nice =3D3D 60 > > event : > > event =3D3D 0x0 > > cancel =3D3D enabled, deferred, not pending > > stack storage: > > base =3D3D 0x315ed000 size =3D3D = 0x400000 > > limit =3D3D 0x319eeb90 > > sp =3D3D 0x3192d6f0 > > > > (dbx) thread current -1 > > warning: Thread is in kernel mode, not all registers can be accesse= d. > > (dbx) where > > .() at 0x11c501d40 > > _event_wait(??, ??) at 0xd0502be4 > > _cond_wait_local(??, ??, ??) at 0xd0510f40 > > _cond_wait(??, ??, ??) at 0xd0511510 > > pthread_join(??, ??) at 0xd04f91b0 > > ldap_pvt_thread_join(thread =3D3D 8, thread_return =3D3D 0x00000008= ), line =3D > > 197 in > > "thr_posix.c" > > slapd_daemon(), line 2929 in "daemon.c" > > main(argc =3D3D 0, argv =3D3D (nil)), line 1012 in "main.c" > > > > (dbx) thread current -2 > > (dbx) where > > __fd_select(??, ??, ??, ??, ??) at 0xd0262f2c > > daemon.select(__fds =3D3D 0, __readlist =3D3D (nil), __writelist =3D= 3D (nil),=3D > > > > __exceptlist =3D3D (nil), __timeout =3D3D (nil)), line 234 in "time= .h" > > unnamed block in slapd_daemon_task(ptr =3D3D (nil)), line 2536 in "daemon=3D > > .c" > > unnamed block in slapd_daemon_task(ptr =3D3D (nil)), line 2536 in "daemon=3D > > .c" > > slapd_daemon_task(ptr =3D3D (nil)), line 2536 in "daemon.c" > > > > (dbx) thread current -3 > > (dbx) where > > search.base_candidate(be =3D3D (nil), e =3D3D (nil), ids =3D3D (nil= )), line 3=3D > > 71 in > > "search.c" > > glue_sub_search(op =3D3D 0xf061b148, rs =3D3D 0xf061b108, b0 =3D3D 0x00000002=3D > > , on =3D3D > > 0xf0240744), line 380 in "backglue.c" > > glue_op_search(op =3D3D 0x301185f8, rs =3D3D 0x303d5a78), line 537 = in "back=3D > > glue.c" > > overlay_op_walk(op =3D3D (nil), rs =3D3D (nil), which =3D3D op_bind= , oi =3D3D (=3D > > nil), on =3D3D > > 0x01000000), line 661 in "backover.c" > > over_op_func(op =3D3D (nil), rs =3D3D 0x102c9510, which =3D3D op_bi= nd), line =3D > > 723 in > > "backover.c" > > fe_op_search(op =3D3D 0x00004105, rs =3D3D 0x00000100), line 402 in= "search=3D > > .c" > > do_search(op =3D3D 0x000003e8, rs =3D3D (nil)), line 247 in "search= .c" > > unnamed block in connection_operation(ctx =3D3D 0x00000114, arg_v =3D= 3D > > 0x00000045), line 1155 in "connection.c" > > connection_operation(ctx =3D3D 0x00000114, arg_v =3D3D 0x00000045),= line 11=3D > > 55 in > > "connection.c" > > connection_read_thread(ctx =3D3D (nil), argv =3D3D (nil)), line 129= 1 in > > "connection.c" > > ldap_int_thread_pool_wrapper(xpool =3D3D (nil)), line 688 in "tpool= .c" > > > > (dbx) thread current -4 > > (dbx) where > > search.base_candidate(be =3D3D (nil), e =3D3D (nil), ids =3D3D (nil= )), line 3=3D > > 71 in > > "search.c" > > glue_sub_search(op =3D3D 0xf061b148, rs =3D3D 0xf061b108, b0 =3D3D 0x00000002=3D > > , on =3D3D > > 0xf0240744), line 380 in "backglue.c" > > glue_op_search(op =3D3D 0x301185f8, rs =3D3D 0x303e4ee8), line 537 = in "back=3D > > glue.c" > > overlay_op_walk(op =3D3D (nil), rs =3D3D (nil), which =3D3D op_bind= , oi =3D3D (=3D > > nil), on =3D3D > > 0x01000000), line 661 in "backover.c" > > over_op_func(op =3D3D (nil), rs =3D3D 0x102c9510, which =3D3D op_bi= nd), line =3D > > 723 in > > "backover.c" > > fe_op_search(op =3D3D 0x00004105, rs =3D3D 0x00000100), line 402 in= "search=3D > > .c" > > do_search(op =3D3D 0x000003e9, rs =3D3D (nil)), line 247 in "search= .c" > > unnamed block in connection_operation(ctx =3D3D 0x0000019c, arg_v =3D= 3D > > 0x00000067), line 1155 in "connection.c" > > connection_operation(ctx =3D3D 0x0000019c, arg_v =3D3D 0x00000067),= line 11=3D > > 55 in > > "connection.c" > > connection_read_thread(ctx =3D3D (nil), argv =3D3D (nil)), line 129= 1 in > > "connection.c" > > ldap_int_thread_pool_wrapper(xpool =3D3D (nil)), line 688 in "tpool= .c" > > > > > > LDAPSEARCH: > > Waiting to attach to process 11272394 ... > > Successfully attached to ldapsearch. > > warning: Directory containing ldapsearch could not be determined. > > Apply 'use' command to initialize source path. > > > > Type 'help' for help. > > reading symbolic information ... > > stopped in __fd_poll at 0xd0262734 ($t1) > > 0xd0262734 (__fd_poll+0xb4) 80410014 lwz r2,0x14(r1) > > (dbx) where > > __fd_poll(??, ??, ??) at 0xd0262734 > > os-ip.poll(__listptr =3D3D 0x00000001, __nfds =3D3D 4294967294, __t= imeout =3D3D=3D > > > > 1000000), line 107 in "poll.h" > > ldap_int_select(ld =3D3D (nil), timeout =3D3D 0x3002a9c8), line 113= 9 in "os=3D > > -ip.c" > > wait4msg(ld =3D3D 0xd0f6bb50, msgid =3D3D 804398239, all =3D3D 8043= 89024, tim=3D > > eout =3D3D > > (nil), result =3D3D 0x2ff200e0), line 312 in "result.c" > > ldap_result(ld =3D3D (nil), msgid =3D3D 805309096, all =3D3D 804389= 216, timeo=3D > > ut =3D3D > > 0x28224243, result =3D3D 0x1000866c), line 117 in "result.c" > > dosearch(ld =3D3D 0x30009c18, base =3D3D "file:///%s/", scope =3D3D= 268504837=3D > > , filtpatt > > =3D3D (nil), value =3D3D (nil), attrs =3D3D (nil), attrsonly =3D3D = -261995236, =3D > > sctrls =3D3D > > 0x10010f08, cctrls =3D3D (nil), timeout =3D3D (nil), sizelimit =3D3= D -1), lin=3D > > e 1447 in > > "ldapsearch.c" > > main(argc =3D3D 0, argv =3D3D (nil)), line 1222 in "ldapsearch.c" > > > > (dbx) thread > > thread state-k wchan state-u k-tid mode held scope functi=3D > > on > >> $t1 run running 35192885 k no sys __fd_=3D > > poll > > > -- > -- Howard Chu > CTO, Symas Corp. http://www.symas.com > Director, Highland Sun http://highlandsun.com/hyc/ > Chief Architect, OpenLDAP http://www.openldap.org/project/ This happens on the first backend that isn't MDB - I've tried disabling= BDB and HDB separately and it hangs on both.The slapd is the test5 slapd(it= 's been a while, but I seem to recall checking the start time of the daemo= n) Howard -----------------------------------------------------------------------= --------------------------------- VERTRAULICHKEIT: Diese Nachricht ist ausschlie=DFlich f=FCr denjenigen bestimmt, an den sie adressiert ist und kann vertrauliche Informationen= enthalten. Falls Sie nicht der Empf=E4nger dieser Nachricht sind, weise= n wir Sie darauf hin, dass die unberechtigte Weitergabe oder Verwendung sowie= das unberechtigte Verteilen oder Kopieren dieser Nachricht strikt untersagt= sind. Falls Sie diese Nachricht irrt=FCmlich erhalten haben, vernichten= Sie sie bitte sofort. CONFIDENTIALITY: This message is intended only for the use of the individuality or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure= . If you are not the intended recipient you are notified that any disseminat= ion, distribution, use or copying of this communication is strictly prohibit= ed. If you received this message in error, please immediately destroy this message. -----------------------------------------------------------------------= --------------------------------- = --0__=4EBBF697DF89C4868f9e8a93df938690918c4EBBF697DF89C486 Content-type: text/html; charset=ISO-8859-1 Content-Disposition: inline Content-transfer-encoding: quoted-printable <html><body> <p><tt><font size=3D"2">Howard Chu <hyc(a)symas.com> wrote on 13.10= .2013 00:54:04:<br> <br> > Von: Howard Chu <hyc(a)symas.com></font></tt><br> <tt><font size=3D"2">> An: howard.allison(a)pensionsversicherung.at, o= penldap-its(a)openldap.org, </font></tt><br> <tt><font size=3D"2">> Datum: 13.10.2013 00:54</font></tt><br> <tt><font size=3D"2">> Betreff: Re: Antwort: Re: (ITS#7653) Test Bui= ld Version 2.4.36 hangs</font></tt><br> <tt><font size=3D"2">> <br> > howard.allison(a)pensionsversicherung.at wrote:<br> > > --0__=3D4EBBF156DFB715BF8f9e8a93df938690918c4EBBF156DFB715BF<= br> > > Content-type: multipart/alternative;<br> > >    Boundary=3D"1__=3D4EBBF156DFB715BF8f9e8a93d= f938690918c4EBBF156DFB715BF"<br> > ><br> > > --1__=3D4EBBF156DFB715BF8f9e8a93df938690918c4EBBF156DFB715BF<= br> > > Content-type: text/plain; charset=3DISO-8859-1<br> > > Content-transfer-encoding: quoted-printable<br> > ><br> > ><br> > > Hi!<br> > > Sorry - here's the stack trace:<br> > <br> > Which backend were you testing, it's not shown in any of your outp= ut. Your <br> > trace is strange because it shows overlays being used, but test005= <br> > doesn't use <br> > any overlays. Seems like you may have a slapd left over from some = other test.<br> > <br> > ><br> > > SLAPD:<br> > > (dbx) thread info<br> > >   thread  state-k     wchan    = state-u    k-tid   mode held scope functi=3D<br> > > on<br> > >   $t1     wait      0xf1000f0a1= 000ee40 blocked  15597767     k   no   sy=3D<b= r> > > s<br> > ><br> > >        general:<br> > >           pthread addr =3D3D 0x3009f= 56c         size         =3D3D = 0x290<br> > >           vp addr     &nbs= p;=3D3D 0x300a15b0         size     &nbsp= ;   =3D3D 0x2e0<br> > >           thread errno =3D3D 0<br> > >           start pc     =3D= 3D 0x10000420<br> > >           joinable     =3D= 3D yes<br> > >           pthread_t    =3D= 3D 1<br> > >        scheduler:<br> > >           kernel     &nbsp= ; =3D3D<br> > >           user       =   =3D3D 1 (other)<br> > >           nice       =   =3D3D 60<br> > >        event :<br> > >           event      =  =3D3D 0x0<br> > >           cancel     &nbsp= ; =3D3D enabled, deferred, not pending<br> > >        stack storage:<br> > >           base       =   =3D3D 0x20000000         size     =     =3D3D 0xff22190=3D<br> > ><br> > >           limit      =  =3D3D 0x2ff22190<br> > >           sp       &n= bsp;   =3D3D 0x2ff21e90<br> > >   thread  state-k     wchan    = state-u    k-tid   mode held scope functi=3D<br> > > on<br> > >> $t2     run           =        running  36372639     k &nbsp= ; no   sys<br> > > __fd_select<br> > ><br> > >        general:<br> > >           pthread addr =3D3D 0x308e5= cf0         size         =3D3D = 0x290<br> > >           vp addr     &nbs= p;=3D3D 0x303d3780         size     &nbsp= ;   =3D3D 0x2e0<br> > >           thread errno =3D3D 4<br> > >           start pc     =3D= 3D 0x3001f600<br> > >           joinable     =3D= 3D yes<br> > >           pthread_t    =3D= 3D 102<br> > >        scheduler:<br> > >           kernel     &nbsp= ; =3D3D<br> > >           user       =   =3D3D 1 (other)<br> > >           nice       =   =3D3D 60<br> > >        event :<br> > >           event      =  =3D3D 0x0<br> > >           cancel     &nbsp= ; =3D3D enabled, deferred, not pending<br> > >        stack storage:<br> > >           base       =   =3D3D 0x304e5000         size     =     =3D3D 0x400000<br> > >           limit      =  =3D3D 0x308e5b90<br> > >           sp       &n= bsp;   =3D3D 0x308e4530<br> > >   thread  state-k     wchan    = state-u    k-tid   mode held scope functi=3D<br> > > on<br> > >   $t3     run         &nbs= p;        running  30015693     u &n= bsp; no   sys<br> > > base_candidate<br> > ><br> > >        general:<br> > >           pthread addr =3D3D 0x30ce9= cf0         size         =3D3D = 0x290<br> > >           vp addr     &nbs= p;=3D3D 0x303d5790         size     &nbsp= ;   =3D3D 0x2e0<br> > >           thread errno =3D3D 11<br> > >           start pc     =3D= 3D 0xf0391ec0<br> > >           joinable     =3D= 3D no<br> > >           pthread_t    =3D= 3D 203<br> > >        scheduler:<br> > >           kernel     &nbsp= ; =3D3D<br> > >           user       =   =3D3D 1 (other)<br> > >           nice       =   =3D3D 60<br> > >        event :<br> > >           event      =  =3D3D 0x0<br> > >           cancel     &nbsp= ; =3D3D enabled, deferred, not pending<br> > >        stack storage:<br> > >           base       =   =3D3D 0x308e9000         size     =     =3D3D 0x400000<br> > >           limit      =  =3D3D 0x30ce9b90<br> > >           sp       &n= bsp;   =3D3D 0x30c286f0<br> > >   thread  state-k     wchan    = state-u    k-tid   mode held scope functi=3D<br> > > on<br> > >   $t4     run         &nbs= p;        running  21561505     u &n= bsp; no   sys<br> > > base_candidate<br> > ><br> > >        general:<br> > >           pthread addr =3D3D 0x319ee= cf0         size         =3D3D = 0x290<br> > >           vp addr     &nbs= p;=3D3D 0x303e4b60         size     &nbsp= ;   =3D3D 0x2e0<br> > >           thread errno =3D3D 11<br> > >           start pc     =3D= 3D 0xf0391ec0<br> > >           joinable     =3D= 3D no<br> > >           pthread_t    =3D= 3D 304<br> > >        scheduler:<br> > >           kernel     &nbsp= ; =3D3D<br> > >           user       =   =3D3D 1 (other)<br> > >           nice       =   =3D3D 60<br> > >        event :<br> > >           event      =  =3D3D 0x0<br> > >           cancel     &nbsp= ; =3D3D enabled, deferred, not pending<br> > >        stack storage:<br> > >           base       =   =3D3D 0x315ed000         size     =     =3D3D 0x400000<br> > >           limit      =  =3D3D 0x319eeb90<br> > >           sp       &n= bsp;   =3D3D 0x3192d6f0<br> > ><br> > > (dbx) thread current -1<br> > > warning: Thread is in kernel mode, not all registers can be a= ccessed.<br> > > (dbx) where<br> > > .() at 0x11c501d40<br> > > _event_wait(??, ??) at 0xd0502be4<br> > > _cond_wait_local(??, ??, ??) at 0xd0510f40<br> > > _cond_wait(??, ??, ??) at 0xd0511510<br> > > pthread_join(??, ??) at 0xd04f91b0<br> > > ldap_pvt_thread_join(thread =3D3D 8, thread_return =3D3D 0x00= 000008), line =3D<br> > > 197 in<br> > > "thr_posix.c"<br> > > slapd_daemon(), line 2929 in "daemon.c"<br> > > main(argc =3D3D 0, argv =3D3D (nil)), line 1012 in "main= .c"<br> > ><br> > > (dbx) thread current -2<br> > > (dbx) where<br> > > __fd_select(??, ??, ??, ??, ??) at 0xd0262f2c<br> > > daemon.select(__fds =3D3D 0, __readlist =3D3D (nil), __writel= ist =3D3D (nil),=3D<br> > ><br> > > __exceptlist =3D3D (nil), __timeout =3D3D (nil)), line 234 in= "time.h"<br> > > unnamed block in slapd_daemon_task(ptr =3D3D (nil)), line 253= 6 in "daemon=3D<br> > > .c"<br> > > unnamed block in slapd_daemon_task(ptr =3D3D (nil)), line 253= 6 in "daemon=3D<br> > > .c"<br> > > slapd_daemon_task(ptr =3D3D (nil)), line 2536 in "daemon= .c"<br> > ><br> > > (dbx)  thread current -3<br> > > (dbx) where<br> > > search.base_candidate(be =3D3D (nil), e =3D3D (nil), ids =3D3= D (nil)), line 3=3D<br> > > 71 in<br> > > "search.c"<br> > > glue_sub_search(op =3D3D 0xf061b148, rs =3D3D 0xf061b108, b0 = =3D3D 0x00000002=3D<br> > > , on =3D3D<br> > > 0xf0240744), line 380 in "backglue.c"<br> > > glue_op_search(op =3D3D 0x301185f8, rs =3D3D 0x303d5a78), lin= e 537 in "back=3D<br> > > glue.c"<br> > > overlay_op_walk(op =3D3D (nil), rs =3D3D (nil), which =3D3D o= p_bind, oi =3D3D (=3D<br> > > nil), on =3D3D<br> > > 0x01000000), line 661 in "backover.c"<br> > > over_op_func(op =3D3D (nil), rs =3D3D 0x102c9510, which =3D3D= op_bind), line =3D<br> > > 723 in<br> > > "backover.c"<br> > > fe_op_search(op =3D3D 0x00004105, rs =3D3D 0x00000100), line = 402 in "search=3D<br> > > .c"<br> > > do_search(op =3D3D 0x000003e8, rs =3D3D (nil)), line 247 in &= quot;search.c"<br> > > unnamed block in connection_operation(ctx =3D3D 0x00000114, a= rg_v =3D3D<br> > > 0x00000045), line 1155 in "connection.c"<br> > > connection_operation(ctx =3D3D 0x00000114, arg_v =3D3D 0x0000= 0045), line 11=3D<br> > > 55 in<br> > > "connection.c"<br> > > connection_read_thread(ctx =3D3D (nil), argv =3D3D (nil)), li= ne 1291 in<br> > > "connection.c"<br> > > ldap_int_thread_pool_wrapper(xpool =3D3D (nil)), line 688 in = "tpool.c"<br> > ><br> > > (dbx) thread current -4<br> > > (dbx) where<br> > > search.base_candidate(be =3D3D (nil), e =3D3D (nil), ids =3D3= D (nil)), line 3=3D<br> > > 71 in<br> > > "search.c"<br> > > glue_sub_search(op =3D3D 0xf061b148, rs =3D3D 0xf061b108, b0 = =3D3D 0x00000002=3D<br> > > , on =3D3D<br> > > 0xf0240744), line 380 in "backglue.c"<br> > > glue_op_search(op =3D3D 0x301185f8, rs =3D3D 0x303e4ee8), lin= e 537 in "back=3D<br> > > glue.c"<br> > > overlay_op_walk(op =3D3D (nil), rs =3D3D (nil), which =3D3D o= p_bind, oi =3D3D (=3D<br> > > nil), on =3D3D<br> > > 0x01000000), line 661 in "backover.c"<br> > > over_op_func(op =3D3D (nil), rs =3D3D 0x102c9510, which =3D3D= op_bind), line =3D<br> > > 723 in<br> > > "backover.c"<br> > > fe_op_search(op =3D3D 0x00004105, rs =3D3D 0x00000100), line = 402 in "search=3D<br> > > .c"<br> > > do_search(op =3D3D 0x000003e9, rs =3D3D (nil)), line 247 in &= quot;search.c"<br> > > unnamed block in connection_operation(ctx =3D3D 0x0000019c, a= rg_v =3D3D<br> > > 0x00000067), line 1155 in "connection.c"<br> > > connection_operation(ctx =3D3D 0x0000019c, arg_v =3D3D 0x0000= 0067), line 11=3D<br> > > 55 in<br> > > "connection.c"<br> > > connection_read_thread(ctx =3D3D (nil), argv =3D3D (nil)), li= ne 1291 in<br> > > "connection.c"<br> > > ldap_int_thread_pool_wrapper(xpool =3D3D (nil)), line 688 in = "tpool.c"<br> > ><br> > ><br> > > LDAPSEARCH:<br> > > Waiting to attach to process 11272394 ...<br> > > Successfully attached to ldapsearch.<br> > > warning: Directory containing ldapsearch could not be determi= ned.<br> > > Apply 'use' command to initialize source path.<br> > ><br> > > Type 'help' for help.<br> > > reading symbolic information ...<br> > > stopped in __fd_poll at 0xd0262734 ($t1)<br> > > 0xd0262734 (__fd_poll+0xb4) 80410014       &nb= sp; lwz   r2,0x14(r1)<br> > > (dbx) where<br> > > __fd_poll(??, ??, ??) at 0xd0262734<br> > > os-ip.poll(__listptr =3D3D 0x00000001, __nfds =3D3D 429496729= 4, __timeout =3D3D=3D<br> > ><br> > > 1000000), line 107 in "poll.h"<br> > > ldap_int_select(ld =3D3D (nil), timeout =3D3D 0x3002a9c8), li= ne 1139 in "os=3D<br> > > -ip.c"<br> > > wait4msg(ld =3D3D 0xd0f6bb50, msgid =3D3D 804398239, all =3D3= D 804389024, tim=3D<br> > > eout =3D3D<br> > > (nil), result =3D3D 0x2ff200e0), line 312 in "result.c&q= uot;<br> > > ldap_result(ld =3D3D (nil), msgid =3D3D 805309096, all =3D3D = 804389216, timeo=3D<br> > > ut =3D3D<br> > > 0x28224243, result =3D3D 0x1000866c), line 117 in "resul= t.c"<br> > > dosearch(ld =3D3D 0x30009c18, base =3D3D "<a href=3D"fil= e:///%s/">file:///%s/</a>", scope =3D3D 268504837=3D<br> > > , filtpatt<br> > > =3D3D (nil), value =3D3D (nil), attrs =3D3D (nil), attrsonly = =3D3D -261995236, =3D<br> > > sctrls =3D3D<br> > > 0x10010f08, cctrls =3D3D (nil), timeout =3D3D (nil), sizelimi= t =3D3D -1), lin=3D<br> > > e 1447 in<br> > > "ldapsearch.c"<br> > > main(argc =3D3D 0, argv =3D3D (nil)), line 1222 in "ldap= search.c"<br> > ><br> > > (dbx) thread<br> > >   thread  state-k     wchan    = state-u    k-tid   mode held scope functi=3D<br> > > on<br> > >> $t1     run           =        running  35192885     k &nbsp= ; no   sys  __fd_=3D<br> > > poll<br> > <br> > <br> > -- <br> >    -- Howard Chu<br> >    CTO, Symas Corp.           <= a href=3D"http://www.symas.com">http://www.symas.com</a><br> >    Director, Highland Sun     <a href=3D"http:= //highlandsun.com/hyc/">http://highlandsun.com/hyc/</a><br> >    Chief Architect, OpenLDAP  <a href=3D"http://www= .openldap.org/project/">http://www.openldap.org/project/</a><br> This happens on the first backend that isn't MDB - I've tried disabling= BDB and HDB separately and it hangs on both.The slapd is the test5 sla= pd(it's been a while, but I seem to recall checking the start time of t= he daemon)</font></tt><br> <tt><font size=3D"2">Howard</font></tt><br> <font size=3D"2" face=3D"sans-serif"> <br> </font><font size=3D"2" face=3D"sans-serif">---------------------------= -----------------------------------------------------------------------= ------<br> </font><font size=3D"2" face=3D"sans-serif">VERTRAULICHKEIT: Diese Nach= richt ist ausschlie=DFlich f=FCr denjenigen bestimmt, an den sie adress= iert ist und kann vertrauliche Informationen enthalten. Falls Sie nicht= der Empf=E4nger dieser Nachricht sind, weisen wir Sie darauf hin, dass= die unberechtigte Weitergabe oder Verwendung sowie das unberechtigte V= erteilen oder Kopieren dieser Nachricht strikt untersagt sind. Falls Si= e diese Nachricht irrt=FCmlich erhalten haben, vernichten Sie sie bitte= sofort.<br> </font><font size=3D"2" face=3D"sans-serif">CONFIDENTIALITY: This messa= ge is intended only for the use of the individuality or entity to which= it is addressed and may contain information that is privileged, confid= ential and exempt from disclosure. If you are not the intended recipien= t you are notified that any dissemination, distribution, use or copying= of this communication is strictly prohibited. If you received this mes= sage in error, please immediately destroy this message.<br> </font><font size=3D"2" face=3D"sans-serif">---------------------------= -----------------------------------------------------------------------= ------<br> </font></body></html>= --0__=4EBBF697DF89C4868f9e8a93df938690918c4EBBF697DF89C486--

1 0

Re: (ITS#7573) back-perl not working with cn=config
by hyc＠symas.com 12 Oct '13

12 Oct '13

benintechnologies(a)yahoo.fr wrote: > Full_Name: Ben > Version: 2.4.34 > OS: Debian 6.0.4 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (41.79.217.116) > > > Hi, > > I'm unable to set up a back-perl backend directly in cn=config mode. However, if > I set it up in slapd.conf mode, and then convert it to cn=config mode, it works > fine. It's not convenient, because I have to set all my perl backends up before > converting to cn=config. The crash is deep inside libperl. It appears to affect other platforms as well: https://bugzilla.redhat.com/show_bug.cgi?id=967719 Most likey you will need to build your own libperl in order to fix this, tho at the moment I have no idea what perl configuration changes will be required. 5259e408 conn=1000 op=1 do_add ber_scanf fmt ({m) ber: 5259e408 conn=1000 op=1 do_add: dn (olcDatabase=perl,cn=config) ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt (}) ber: 5259e408 >>> dnPrettyNormal: <olcDatabase=perl,cn=config> => ldap_bv2dn(olcDatabase=perl,cn=config,0) <= ldap_bv2dn(olcDatabase=perl,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase=perl,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase=perl,cn=config)=0 5259e408 <<< dnPrettyNormal: <olcDatabase=perl,cn=config>, <olcDatabase=perl,cn=config> 5259e408 >>> dnPretty: <dc=mydomain,dc=org> => ldap_bv2dn(dc=mydomain,dc=org,0) <= ldap_bv2dn(dc=mydomain,dc=org)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=mydomain,dc=org)=0 5259e408 <<< dnPretty: <dc=mydomain,dc=org> 5259e408 >>> dnNormalize: <dc=mydomain,dc=org> => ldap_bv2dn(dc=mydomain,dc=org,0) <= ldap_bv2dn(dc=mydomain,dc=org)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=mydomain,dc=org)=0 5259e408 <<< dnNormalize: <dc=mydomain,dc=org> 5259e408 >>> dnPretty: <cn=Manager,dc=mydomain,dc=org> => ldap_bv2dn(cn=Manager,dc=mydomain,dc=org,0) <= ldap_bv2dn(cn=Manager,dc=mydomain,dc=org)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Manager,dc=mydomain,dc=org)=0 5259e408 <<< dnPretty: <cn=Manager,dc=mydomain,dc=org> 5259e408 >>> dnNormalize: <cn=Manager,dc=mydomain,dc=org> => ldap_bv2dn(cn=Manager,dc=mydomain,dc=org,0) <= ldap_bv2dn(cn=Manager,dc=mydomain,dc=org)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=manager,dc=mydomain,dc=org)=0 5259e408 <<< dnNormalize: <cn=manager,dc=mydomain,dc=org> 5259e408 oc_check_required entry (olcDatabase=perl,cn=config), objectClass "olcDbPerlConfig" 5259e408 oc_check_allowed type "objectClass" 5259e408 oc_check_allowed type "olcDatabase" 5259e408 oc_check_allowed type "olcSuffix" 5259e408 oc_check_allowed type "olcAddContentAcl" 5259e408 oc_check_allowed type "olcLastMod" 5259e408 oc_check_allowed type "olcMaxDerefDepth" 5259e408 oc_check_allowed type "olcReadOnly" 5259e408 oc_check_allowed type "olcRootDN" 5259e408 oc_check_allowed type "olcRootPW" 5259e408 oc_check_allowed type "olcSyncUseSubentry" 5259e408 oc_check_allowed type "olcMonitoring" 5259e408 oc_check_allowed type "olcPerlModulePath" 5259e408 oc_check_allowed type "olcPerlModule" 5259e408 oc_check_allowed type "olcPerlFilterSearchResults" 5259e408 oc_check_allowed type "structuralObjectClass" 5259e408 >>> dnNormalize: <olcDatabase={3}perl> 5259e408 <<< dnNormalize: <olcDatabase={3}perl> 5259e408 >>> dnPrettyNormal: <dc=mydomain,dc=org> => ldap_bv2dn(dc=mydomain,dc=org,0) <= ldap_bv2dn(dc=mydomain,dc=org)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=mydomain,dc=org)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=mydomain,dc=org)=0 5259e408 <<< dnPrettyNormal: <dc=mydomain,dc=org>, <dc=mydomain,dc=org> 5259e408 >>> dnPrettyNormal: <cn=Manager,dc=mydomain,dc=org> => ldap_bv2dn(cn=Manager,dc=mydomain,dc=org,0) <= ldap_bv2dn(cn=Manager,dc=mydomain,dc=org)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Manager,dc=mydomain,dc=org)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=manager,dc=mydomain,dc=org)=0 5259e408 <<< dnPrettyNormal: <cn=Manager,dc=mydomain,dc=org>, <cn=manager,dc=mydomain,dc=org> 5259e408 perl backend db init Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7fffebfff700 (LWP 20520)] 0x00007ffff74f5b7d in Perl_gv_fetchpvn_flags () from /usr/lib/libperl.so.5.14 (gdb) bt #0 0x00007ffff74f5b7d in Perl_gv_fetchpvn_flags () from /usr/lib/libperl.so.5.14 #1 0x00007ffff74ea3ed in Perl_get_hv () from /usr/lib/libperl.so.5.14 #2 0x00007ffff00a1241 in boot_Fcntl () from /usr/lib/perl/5.14/auto/Fcntl/Fcntl.so #3 0x00007ffff755982f in Perl_pp_entersub () from /usr/lib/libperl.so.5.14 #4 0x00007ffff7550cc6 in Perl_runops_standard () from /usr/lib/libperl.so.5.14 #5 0x00007ffff74ec5ee in Perl_call_sv () from /usr/lib/libperl.so.5.14 #6 0x00007ffff74ecc2d in Perl_call_list () from /usr/lib/libperl.so.5.14 #7 0x00007ffff74d6739 in ?? () from /usr/lib/libperl.so.5.14 #8 0x00007ffff74e3e11 in Perl_newATTRSUB () from /usr/lib/libperl.so.5.14 #9 0x00007ffff74e4518 in Perl_utilize () from /usr/lib/libperl.so.5.14 #10 0x00007ffff7512b3f in Perl_yyparse () from /usr/lib/libperl.so.5.14 #11 0x00007ffff758b38d in ?? () from /usr/lib/libperl.so.5.14 #12 0x00007ffff7595821 in Perl_pp_require () from /usr/lib/libperl.so.5.14 #13 0x00007ffff7550cc6 in Perl_runops_standard () from /usr/lib/libperl.so.5.14 #14 0x00007ffff74ec5ee in Perl_call_sv () from /usr/lib/libperl.so.5.14 #15 0x00007ffff74ecc2d in Perl_call_list () from /usr/lib/libperl.so.5.14 #16 0x00007ffff74d6739 in ?? () from /usr/lib/libperl.so.5.14 #17 0x00007ffff74e3e11 in Perl_newATTRSUB () from /usr/lib/libperl.so.5.14 #18 0x00007ffff74e4518 in Perl_utilize () from /usr/lib/libperl.so.5.14 #19 0x00007ffff7512b3f in Perl_yyparse () from /usr/lib/libperl.so.5.14 #20 0x00007ffff758b38d in ?? () from /usr/lib/libperl.so.5.14 #21 0x00007ffff7595821 in Perl_pp_require () from /usr/lib/libperl.so.5.14 #22 0x00007ffff7550cc6 in Perl_runops_standard () from /usr/lib/libperl.so.5.14 #23 0x00007ffff74ec5ee in Perl_call_sv () from /usr/lib/libperl.so.5.14 #24 0x00007ffff74ecc2d in Perl_call_list () from /usr/lib/libperl.so.5.14 #25 0x00007ffff74d6739 in ?? () from /usr/lib/libperl.so.5.14 #26 0x00007ffff74e3e11 in Perl_newATTRSUB () from /usr/lib/libperl.so.5.14 #27 0x00007ffff74e4518 in Perl_utilize () from /usr/lib/libperl.so.5.14 #28 0x00007ffff7512b3f in Perl_yyparse () from /usr/lib/libperl.so.5.14 #29 0x00007ffff758b38d in ?? () from /usr/lib/libperl.so.5.14 #30 0x00007ffff7596824 in Perl_pp_entereval () from /usr/lib/libperl.so.5.14 #31 0x00007ffff74ebd31 in Perl_eval_sv () from /usr/lib/libperl.so.5.14 #32 0x00007ffff74ebe84 in Perl_eval_pv () from /usr/lib/libperl.so.5.14 ---Type <return> to continue, or q <return> to quit--- #33 0x00000000005f345a in perl_cf (c=0x7fffebffd2f0) at ../../../../head/servers/slapd/back-perl/config.c:177 #34 0x0000000000442a7b in config_set_vals (Conf=0x90ed60, c=0x7fffebffd2f0) at ../../../head/servers/slapd/config.c:345 #35 0x0000000000442fcf in config_add_vals (Conf=0x90ed60, c=0x7fffebffd2f0) at ../../../head/servers/slapd/config.c:418 #36 0x0000000000443c9a in config_parse_add (ct=0x90ed60, c=0x7fffebffd2f0, valx=0) at ../../../head/servers/slapd/config.c:689 #37 0x0000000000439c1b in config_add_internal (cfb=0x9105e0, e=0xa52bb8, ca=0x7fffebffd2f0, rs=0x7fffebffe970, renum=0x7fffebffd2e8, op=0x7fffe4002670) at ../../../head/servers/slapd/bconfig.c:5439 #38 0x000000000043a83e in config_back_add (op=0x7fffe4002670, rs=0x7fffebffe970) at ../../../head/servers/slapd/bconfig.c:5666 #39 0x000000000045ba65 in fe_op_add (op=0x7fffe4002670, rs=0x7fffebffe970) at ../../../head/servers/slapd/add.c:334 #40 0x000000000045b2e2 in do_add (op=0x7fffe4002670, rs=0x7fffebffe970) at ../../../head/servers/slapd/add.c:194 #41 0x00000000004524a1 in connection_operation (ctx=0x7fffebffeb60, arg_v=0x7fffe4002670) at ../../../head/servers/slapd/connection.c:1134 #42 0x0000000000452b1b in connection_read_thread (ctx=0x7fffebffeb60, argv=<optimized out>) at ../../../head/servers/slapd/connection.c:1270 #43 0x000000000061435a in ldap_int_thread_pool_wrapper (xpool=0x9e4d00) at ../../../head/libraries/libldap_r/tpool.c:945 #44 0x00007ffff728ee9a in start_thread (arg=0x7fffebfff700) at pthread_create.c:308 #45 0x00007ffff62f6cbd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #46 0x0000000000000000 in ?? () > > Here's the ldif file I'm using to set up a back-perl backend in cn=config mode > (it's inspired from the files I get by converting slapd.conf into cn=config with > slaptest) > > # Load dynamic backend modules > dn: cn=module,cn=config > objectClass: olcModuleList > cn: module > olcModulepath: /usr/local/libexec/openldap > olcModuleload: back_perl.la > > # Database settings > dn: olcDatabase=perl,cn=config > objectClass: olcDatabaseConfig > objectClass: olcDbPerlConfig > olcDatabase: perl > olcSuffix: dc=mydomain,dc=org > olcAddContentAcl: FALSE > olcLastMod: TRUE > olcMaxDerefDepth: 15 > olcReadOnly: FALSE > olcRootDN: cn=Manager,dc=mydomain,dc=org > olcRootPW:: c2VjcmV0 > olcSyncUseSubentry: FALSE > olcMonitoring: FALSE > olcPerlModulePath: /usr/local/etc/openldap/perl > olcPerlModule: SampleLDAP > olcPerlFilterSearchResults: FALSE > > > And here's what I get when I try to load the file: > ldapadd -Y EXTERNAL -H ldapi:/// -f perl-backend.ldif > SASL/EXTERNAL authentication started > SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth > SASL SSF: 0 > adding new entry "cn=module,cn=config" > adding new entry "olcDatabase=perl,cn=config" > ldap_result: Can't contact LDAP server (-1) > > After that, if I start OpenLDAP I get a segmentation fault: > root@ldap:/tmp# /usr/local/libexec/slapd -u openldap -g openldap -h "ldap:/// > ldapi:///" -d 16383 > . > 51585496 perl backend db init > Segmentation fault > > Like I said, if I set back-perl up in slapd.conf mode and then convert it to > cn=config, everything works fine. > > Ben > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7725) LMDB readahead should be configurable
by hyc＠OpenLDAP.org 12 Oct '13

12 Oct '13

Full_Name: Howard Chu Version: 2.4.35+ OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (78.155.233.73) Submitted by: hyc In 2.4.35 (commit b1da555c4c7275d7f756d693c42814388a9aa839) code was added to unconditionally turn off readahead, because it is harmful to random read performance when a DB is larger than RAM and/or system RAM is already full. Unfortunately turning it off harms sequential read performance. It should be configurable, since different behaviors are needed in different use cases.

1 0

Re: Antwort: Re: (ITS#7653) Test Build Version 2.4.36 hangs
by hyc＠symas.com 12 Oct '13

12 Oct '13

howard.allison(a)pensionsversicherung.at wrote: > --0__=4EBBF156DFB715BF8f9e8a93df938690918c4EBBF156DFB715BF > Content-type: multipart/alternative; > Boundary="1__=4EBBF156DFB715BF8f9e8a93df938690918c4EBBF156DFB715BF" > > --1__=4EBBF156DFB715BF8f9e8a93df938690918c4EBBF156DFB715BF > Content-type: text/plain; charset=ISO-8859-1 > Content-transfer-encoding: quoted-printable > > > Hi! > Sorry - here's the stack trace: Which backend were you testing, it's not shown in any of your output. Your trace is strange because it shows overlays being used, but test005 doesn't use any overlays. Seems like you may have a slapd left over from some other test. > > SLAPD: > (dbx) thread info > thread state-k wchan state-u k-tid mode held scope functi= > on > $t1 wait 0xf1000f0a1000ee40 blocked 15597767 k no sy= > s > > general: > pthread addr =3D 0x3009f56c size =3D 0x290 > vp addr =3D 0x300a15b0 size =3D 0x2e0 > thread errno =3D 0 > start pc =3D 0x10000420 > joinable =3D yes > pthread_t =3D 1 > scheduler: > kernel =3D > user =3D 1 (other) > nice =3D 60 > event : > event =3D 0x0 > cancel =3D enabled, deferred, not pending > stack storage: > base =3D 0x20000000 size =3D 0xff22190= > > limit =3D 0x2ff22190 > sp =3D 0x2ff21e90 > thread state-k wchan state-u k-tid mode held scope functi= > on >> $t2 run running 36372639 k no sys > __fd_select > > general: > pthread addr =3D 0x308e5cf0 size =3D 0x290 > vp addr =3D 0x303d3780 size =3D 0x2e0 > thread errno =3D 4 > start pc =3D 0x3001f600 > joinable =3D yes > pthread_t =3D 102 > scheduler: > kernel =3D > user =3D 1 (other) > nice =3D 60 > event : > event =3D 0x0 > cancel =3D enabled, deferred, not pending > stack storage: > base =3D 0x304e5000 size =3D 0x400000 > limit =3D 0x308e5b90 > sp =3D 0x308e4530 > thread state-k wchan state-u k-tid mode held scope functi= > on > $t3 run running 30015693 u no sys > base_candidate > > general: > pthread addr =3D 0x30ce9cf0 size =3D 0x290 > vp addr =3D 0x303d5790 size =3D 0x2e0 > thread errno =3D 11 > start pc =3D 0xf0391ec0 > joinable =3D no > pthread_t =3D 203 > scheduler: > kernel =3D > user =3D 1 (other) > nice =3D 60 > event : > event =3D 0x0 > cancel =3D enabled, deferred, not pending > stack storage: > base =3D 0x308e9000 size =3D 0x400000 > limit =3D 0x30ce9b90 > sp =3D 0x30c286f0 > thread state-k wchan state-u k-tid mode held scope functi= > on > $t4 run running 21561505 u no sys > base_candidate > > general: > pthread addr =3D 0x319eecf0 size =3D 0x290 > vp addr =3D 0x303e4b60 size =3D 0x2e0 > thread errno =3D 11 > start pc =3D 0xf0391ec0 > joinable =3D no > pthread_t =3D 304 > scheduler: > kernel =3D > user =3D 1 (other) > nice =3D 60 > event : > event =3D 0x0 > cancel =3D enabled, deferred, not pending > stack storage: > base =3D 0x315ed000 size =3D 0x400000 > limit =3D 0x319eeb90 > sp =3D 0x3192d6f0 > > (dbx) thread current -1 > warning: Thread is in kernel mode, not all registers can be accessed. > (dbx) where > .() at 0x11c501d40 > _event_wait(??, ??) at 0xd0502be4 > _cond_wait_local(??, ??, ??) at 0xd0510f40 > _cond_wait(??, ??, ??) at 0xd0511510 > pthread_join(??, ??) at 0xd04f91b0 > ldap_pvt_thread_join(thread =3D 8, thread_return =3D 0x00000008), line = > 197 in > "thr_posix.c" > slapd_daemon(), line 2929 in "daemon.c" > main(argc =3D 0, argv =3D (nil)), line 1012 in "main.c" > > (dbx) thread current -2 > (dbx) where > __fd_select(??, ??, ??, ??, ??) at 0xd0262f2c > daemon.select(__fds =3D 0, __readlist =3D (nil), __writelist =3D (nil),= > > __exceptlist =3D (nil), __timeout =3D (nil)), line 234 in "time.h" > unnamed block in slapd_daemon_task(ptr =3D (nil)), line 2536 in "daemon= > .c" > unnamed block in slapd_daemon_task(ptr =3D (nil)), line 2536 in "daemon= > .c" > slapd_daemon_task(ptr =3D (nil)), line 2536 in "daemon.c" > > (dbx) thread current -3 > (dbx) where > search.base_candidate(be =3D (nil), e =3D (nil), ids =3D (nil)), line 3= > 71 in > "search.c" > glue_sub_search(op =3D 0xf061b148, rs =3D 0xf061b108, b0 =3D 0x00000002= > , on =3D > 0xf0240744), line 380 in "backglue.c" > glue_op_search(op =3D 0x301185f8, rs =3D 0x303d5a78), line 537 in "back= > glue.c" > overlay_op_walk(op =3D (nil), rs =3D (nil), which =3D op_bind, oi =3D (= > nil), on =3D > 0x01000000), line 661 in "backover.c" > over_op_func(op =3D (nil), rs =3D 0x102c9510, which =3D op_bind), line = > 723 in > "backover.c" > fe_op_search(op =3D 0x00004105, rs =3D 0x00000100), line 402 in "search= > .c" > do_search(op =3D 0x000003e8, rs =3D (nil)), line 247 in "search.c" > unnamed block in connection_operation(ctx =3D 0x00000114, arg_v =3D > 0x00000045), line 1155 in "connection.c" > connection_operation(ctx =3D 0x00000114, arg_v =3D 0x00000045), line 11= > 55 in > "connection.c" > connection_read_thread(ctx =3D (nil), argv =3D (nil)), line 1291 in > "connection.c" > ldap_int_thread_pool_wrapper(xpool =3D (nil)), line 688 in "tpool.c" > > (dbx) thread current -4 > (dbx) where > search.base_candidate(be =3D (nil), e =3D (nil), ids =3D (nil)), line 3= > 71 in > "search.c" > glue_sub_search(op =3D 0xf061b148, rs =3D 0xf061b108, b0 =3D 0x00000002= > , on =3D > 0xf0240744), line 380 in "backglue.c" > glue_op_search(op =3D 0x301185f8, rs =3D 0x303e4ee8), line 537 in "back= > glue.c" > overlay_op_walk(op =3D (nil), rs =3D (nil), which =3D op_bind, oi =3D (= > nil), on =3D > 0x01000000), line 661 in "backover.c" > over_op_func(op =3D (nil), rs =3D 0x102c9510, which =3D op_bind), line = > 723 in > "backover.c" > fe_op_search(op =3D 0x00004105, rs =3D 0x00000100), line 402 in "search= > .c" > do_search(op =3D 0x000003e9, rs =3D (nil)), line 247 in "search.c" > unnamed block in connection_operation(ctx =3D 0x0000019c, arg_v =3D > 0x00000067), line 1155 in "connection.c" > connection_operation(ctx =3D 0x0000019c, arg_v =3D 0x00000067), line 11= > 55 in > "connection.c" > connection_read_thread(ctx =3D (nil), argv =3D (nil)), line 1291 in > "connection.c" > ldap_int_thread_pool_wrapper(xpool =3D (nil)), line 688 in "tpool.c" > > > LDAPSEARCH: > Waiting to attach to process 11272394 ... > Successfully attached to ldapsearch. > warning: Directory containing ldapsearch could not be determined. > Apply 'use' command to initialize source path. > > Type 'help' for help. > reading symbolic information ... > stopped in __fd_poll at 0xd0262734 ($t1) > 0xd0262734 (__fd_poll+0xb4) 80410014 lwz r2,0x14(r1) > (dbx) where > __fd_poll(??, ??, ??) at 0xd0262734 > os-ip.poll(__listptr =3D 0x00000001, __nfds =3D 4294967294, __timeout =3D= > > 1000000), line 107 in "poll.h" > ldap_int_select(ld =3D (nil), timeout =3D 0x3002a9c8), line 1139 in "os= > -ip.c" > wait4msg(ld =3D 0xd0f6bb50, msgid =3D 804398239, all =3D 804389024, tim= > eout =3D > (nil), result =3D 0x2ff200e0), line 312 in "result.c" > ldap_result(ld =3D (nil), msgid =3D 805309096, all =3D 804389216, timeo= > ut =3D > 0x28224243, result =3D 0x1000866c), line 117 in "result.c" > dosearch(ld =3D 0x30009c18, base =3D "file:///%s/", scope =3D 268504837= > , filtpatt > =3D (nil), value =3D (nil), attrs =3D (nil), attrsonly =3D -261995236, = > sctrls =3D > 0x10010f08, cctrls =3D (nil), timeout =3D (nil), sizelimit =3D -1), lin= > e 1447 in > "ldapsearch.c" > main(argc =3D 0, argv =3D (nil)), line 1222 in "ldapsearch.c" > > (dbx) thread > thread state-k wchan state-u k-tid mode held scope functi= > on >> $t1 run running 35192885 k no sys __fd_= > poll -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7692) segfault in overlay constraint - constraint_check_restrict (op=0x7fffa8000960, c=0x9e60f0, e=0x0) at constraint.c:713
by hyc＠symas.com 12 Oct '13

12 Oct '13

coudot(a)linagora.com wrote: > Full_Name: Clement OUDOT > Version: 2.4.35 > OS: CentOS 6 64bits > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (83.145.72.122) > > > I use the overlay constraint to check that a value of the attribute ssoRoles > exists in the directory. The configuration looks like this: Thanks for the report, fixed now in master > > ---------------------------------------------- > overlay constraint > constraint_attribute ssoRoles uri > ldap:///ou=applications,dc=cirra,dc=net?entrydn?sub?(&(objectClass=organizationalUnit)(ou:dn:=roles)) > restrict="ldap:///ou=users,dc=cirra,dc=net??one?(objectClass=inetOrgPerson)" > ---------------------------------------------- > > An ldapmodify with this LDIF crash the slapd process: > ---------------------------------------------- > dn: uid=toto,ou=users,dc=cirra,dc=net > changetype: modify > add: ssoRoles > ssoRoles: ou=ROLE_PES,ou=roles,ou=simabo,ou=applications,dc=cirra,dc=net > ---------------------------------------------- > > The crash occurs because the entry uid=toto,ou=users,dc=cirra,dc=net do not > exist. The same LDIF on an existing entry works well. > > > Below is the stacktrace generated with gdb: > ---------------------------------------------- > > (gdb) run -d 0 > Starting program: /usr/local/openldap/libexec/slapd -d 0 > [Thread debugging using libthread_db enabled] > [New Thread 0x7fffb3d42700 (LWP 16519)] > [New Thread 0x7fffb3541700 (LWP 16521)] > [New Thread 0x7fffb2d40700 (LWP 16522)] > > Program received signal SIGSEGV, Segmentation fault. > [Switching to Thread 0x7fffb2d40700 (LWP 16522)] > constraint_check_restrict (op=0x7fffa8000960, c=0x9e60f0, e=0x0) at > constraint.c:713 > 713 int diff = e->e_nname.bv_len - c->restrict_ndn.bv_len; > Missing separate debuginfos, use: debuginfo-install > berkeleydb-ltb-4.6.21.NC-4.el6.patch4.x86_64 > cyrus-sasl-gssapi-2.1.23-13.el6_3.1.x86_64 > cyrus-sasl-ldap-2.1.23-13.el6_3.1.x86_64 cyrus-sasl-lib-2.1.23-13.el6_3.1.x86_64 > cyrus-sasl-plain-2.1.23-13.el6_3.1.x86_64 db4-4.7.25-17.el6.x86_64 > glibc-2.12-1.107.el6.x86_64 keyutils-libs-1.4-4.el6.x86_64 > krb5-libs-1.10.3-10.el6.x86_64 libcom_err-1.41.12-14.el6.x86_64 > libselinux-2.0.94-5.3.el6.x86_64 libtool-ltdl-2.2.6-15.5.el6.x86_64 > nss-softokn-freebl-3.12.9-11.el6.x86_64 openssl-1.0.0-27.el6.x86_64 > zlib-1.2.3-29.el6.x86_64 > (gdb) bt full > #0 constraint_check_restrict (op=0x7fffa8000960, c=0x9e60f0, e=0x0) at > constraint.c:713 > diff = <value optimized out> > __PRETTY_FUNCTION__ = "constraint_check_restrict" > #1 0x000000000054b39f in constraint_update (op=<value optimized out>, > rs=0x7fffb2d3f950) at constraint.c:989 > j = <value optimized out> > ce = 0 > on = 0x9e5e30 > be = 0x7fffb2d3e4e0 > c = 0x9e60f0 > cp = <value optimized out> > target_entry = 0x0 > target_entry_copy = 0x0 > modlist = 0x7fffa8000920 > m = 0x7fffa8000920 > b = 0x7fffa81015c0 > i = <value optimized out> > rsv = {bv_len = 24, bv_val = 0x60f2a4 "modify breaks constraint"} > rc = <value optimized out> > msg = 0x0 > is_v = <value optimized out> > #2 0x00000000004a6d7a in overlay_op_walk (op=0x7fffa8000960, rs=0x7fffb2d3f950, > which=op_modify, oi=0x9e1020, on=0x9e5e30) > at backover.c:661 > func = 0x9e5e88 > rc = 32768 > #3 0x00000000004a7847 in over_op_func (op=0x7fffa8000960, rs=<value optimized > out>, which=<value optimized out>) > at backover.c:723 > oi = <value optimized out> > on = <value optimized out> > be = 0x9ba220 > db = {bd_info = 0x9e5e30, bd_self = 0x9ba220, > be_ctrls = > "\000\000\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001\000\000\001", > '\000' <repeats 12 times>, "\001", be_flags = 2312, be_restrictops = 0, > be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, > sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport > = 0, sss_update_tls = 0, > sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x9dca20, > be_nsuffix = 0x9dca50, be_schemadn = { > bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = > 0x0}, be_rootdn = {bv_len = 26, > bv_val = 0x9dcb70 "cn=manager,dc=cirra,dc=net"}, be_rootndn = > {bv_len = 26, > bv_val = 0x9dcbc0 "cn=manager,dc=cirra,dc=net"}, be_rootpw = {bv_len > = 38, > bv_val = 0x9dc8b0 "{SSHA}2S9rqrduHEq4AcNIfS+wxClQwbD5aoLn"}, > be_max_deref_depth = 15, be_def_limit = { > lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, > lms_s_unchecked = -1, lms_s_pr = 0, > lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x9e01a0, be_acl > = 0x9b9850, be_dfltaccess = ACL_READ, > be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, > be_update_refs = 0x0, > ---Type <return> to continue, or q <return> to quit--- > be_pending_csn_list = 0xa6f7f0, be_pcl_mutex = {__data = {__lock = 0, > __count = 0, __owner = 0, __nusers = 0, > __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, > __size = '\000' <repeats 39 times>, > __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x8838c0, > be_private = 0x9ba3c0, be_next = { > stqe_next = 0x9e6470}} > cb = {sc_next = 0x0, sc_response = 0x4a6af0 <over_back_response>, > sc_cleanup = 0, sc_private = 0x9e1020} > sc = <value optimized out> > rc = 32768 > __PRETTY_FUNCTION__ = "over_op_func" > #4 0x000000000045728b in fe_op_modify (op=0x7fffa8000960, rs=0x7fffb2d3f950) at > modify.c:303 > update = <value optimized out> > repl_user = <value optimized out> > op_be = <value optimized out> > bd = 0x88c200 > textbuf = ">\000\000\000\000\000\000\000\240\030\020\250\377\177\000\000\000\000\000\000\000\000\000\000@\026\020\250\377\177\000\000\240\235G\000\000\000\000\000\267\244E", > '\000' <repeats 13 times>, "\003\000\000\000\060\000\000\000[\000\000\000|", > '\000' <repeats 11 times>, "\b", '\000' <repeats 31 times>, > ">\000\000\000\000\000\000\000\360\025\020\250\377\177\000\000\000\000\000\000\000\000\000\000 > \t\000\250\377\177\000\000\000\000\000\000\000\000\000\000@É > > #5 0x0000000000457bb6 in do_modify (op=0x7fffa8000960, > rs=0x7fffb2d3f950) at modify.c:177 > dn = {bv_len = 33, bv_val = 0x7fffa8101507 > "uid=toto,ou=users,dc=cirra,dc=net"} > textbuf = "\027\f\000\250\377\177", '\000' <repeats 42 times>, > "PG\253\367\000\000\000\000P\333\377\367\377\177\000\000\000\000A", '\000' > <repeats 13 times>, "\030f@\000\000\000\000\000Y\345`\237\064", '\000' <repeats > 11 times>"\351, \363[\000\000\000\000\000`\t\000\250\377\177\000\000\340\024\302\236\064\000\000\000\377\377\377\377\377\177\000\000\030\372Ó²\377\177\000\000\210\021\302\236\064\000\000\000@\304X\237\064", > '\000' <repeats 11 times>, > ":\236\240\236\064\000\000\000\320\016\000\250\377\177\000\000\000\000\020\000\000\000\000\000\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\260\372Ó²\377\177\000\000\360.I", > '\000' <repeats 13 times>, > "\t\000\000\000\062\000\000\000`\t\000\250\377\177\000\000\320\016\000\250\377\177\000" > tmp = <value optimized out> > #6 0x000000000043f9a9 in connection_operation (ctx=0x7fffb2d3fab0, > arg_v=0x7fffa8000960) at connection.c:1155 > rc = 80 > cancel = <value optimized out> > op = 0x7fffa8000960 > rs = {sr_type = REP_RESULT, sr_tag = 0, sr_msgid = 0, sr_err = 0, > sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, > sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags = > 0, r_operational_attrs = 0x0, r_attrs = 0x0, > r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0}, > sru_extended = {r_rspoid = 0x0, > r_rspdata = 0x0}}, sr_flags = 0} > tag = 102 > opidx = SLAP_OP_MODIFY > conn = 0x7ffff632bc10 > ---Type <return> to continue, or q <return> to quit--- > memctx = 0x7fffa8000ed0 > memctx_null = 0x0 > memsiz = 1048576 > __PRETTY_FUNCTION__ = "connection_operation" > #7 0x0000000000440195 in connection_read_thread (ctx=0x7fffb2d3fab0, > argv=<value optimized out>) at connection.c:1291 > rc = <value optimized out> > cri = {op = 0x7fffa8000960, func = 0, arg = 0x0, ctx = 0x7fffb2d3fab0, > nullop = <value optimized out>} > s = <value optimized out> > #8 0x0000000000593d00 in ldap_int_thread_pool_wrapper (xpool=0x960c00) at > tpool.c:688 > pool = 0x960c00 > task = 0x7fffac0008c0 > work_list = <value optimized out> > ctx = {ltu_id = 140736193627904, ltu_key = {{ltk_key = 0x43e7c0, > ltk_data = 0x7fffa8000dc0, > ltk_free = 0x43e890 <conn_counter_destroy>}, {ltk_key = 0x492d40, > ltk_data = 0x7fffa8000ed0, > ltk_free = 0x492d60 <slap_sl_mem_destroy>}, {ltk_key = 0xa6f810, > ltk_data = 0x7fffa8100f80, > ltk_free = 0x4f7280 <bdb_reader_free>}, {ltk_key = 0x452ba0, > ltk_data = 0x0, > ltk_free = 0x452970 <slap_op_q_destroy>}, {ltk_key = 0x0, ltk_data > = 0x0, ltk_free = 0} <repeats 25 times>, { > ltk_key = 0x0, ltk_data = 0x349f607eea, ltk_free = 0}, {ltk_key = > 0x0, ltk_data = 0x0, ltk_free = 0}, { > ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}}} > kctx = <value optimized out> > keyslot = 555 > hash = <value optimized out> > __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" > #9 0x000000349f607851 in start_thread () from /lib64/libpthread.so.0 > No symbol table info available. > #10 0x000000349f2e890d in clone () from /lib64/libc.so.6 > No symbol table info available. > (gdb) > > > ---------------------------------------------- > > > > Please tell me if something else is needed in this bug report. > > > Regards, > > > Clement OUDOT. > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7589) MDB nodesize issues
by hyc＠symas.com 12 Oct '13

12 Oct '13

h.b.furuseth(a)usit.uio.no wrote: > I wrote: >> OTOH if you add a bunch of slightly smaller nodes, mdb will put >> most of them in separate pages anyway without MDB_APPEND. > > ...because mdb_page_split() has been wasteful since 48ef27b6f5c804eca6a9 > "ITS#7385 fix mdb_page_split (again)". When a txn put()s ascending > keys with nodes of the same size, the new item goes in the fullest page. > > E.g. put data size 1010 with 'int' keys 1,2,3... to an MDB_INTEGERKEY > DB. As the txn progresses, (page: #key #key...) get distributed thus: > > Page 2: #1. > Page 2: #1 #2. > Page 2: #1 #2 #3. > Page 2: #1. Page 3: #2 #3 #4. > Page 2: #1. Page 3: #2. Page 5: #3 #4 #5. > Page 2: #1. Page 3: #2. Page 5: #3. Page 6: #4 #5 #6. > > 2/3 wasted space. Descending put() work better: > > Page 2: #6. > Page 2: #5 #6. > Page 2: #4 #5 #6. > Page 2: #3 #4. Page 3: #5 #6. > Page 2: #2 #3 #4. Page 3: #5 #6. > Page 2: #2 #1. Page 3: #5 #6. Page 5: #3 #4. > > Ascending put() with datasize 1348, so only 2 nodes fit in a page: > > Page 2: #1. > Page 2: #1 #2. > Page 2: #1. Page 3: #2 #3. > Page 2: #1. Page 3: #2. Page 5: #3 #4. > > Half of the space is wasted. Descending order does not help. > > page_split() cannot know which split is best in this case. But it'll > help to guess that the next put() key sometimes will be near this one, > and ensure that the node with the new key will be the smallest. That > will also avoid touching the old page when the nodes are that large, > since the "split" will keep all old nodes in the old page. Fixed now in mdb.master. On a large DB, the previous code used 3276587 pages in slapadd -q, and the new code uses 3272633 pages. It's only a 0.13% savings in this case, it seems the frequency of these insert patterns is quite rare. The runtime is also 1.1% faster going from real 41m35.8s user 50m57.6s sys 5m11.4s to real 41m1.7s user 50m25.8s sys 4m55.3s -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7723) slapd crashes on multi core machines if a search request is *immediately* followed by an unbind
by hyc＠symas.com 11 Oct '13

11 Oct '13

hyc(a)symas.com wrote: > michael.vishchers(a)7p-group.com wrote: >> Full_Name: Michael Vishchers >> Version: 2.4.36 >> OS: RHEL 6.3 >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (109.41.86.33) >> >> >> The bug mentioned in ITS #7716 unfortunately still persists in 2.4.36. >> >> We now found a way to reproduce it: If you want anyone to spend time on this: Send the stack trace from the crash. Also send your slapd config, sample data, and the actual query used in your client. >> >> - make sure that threads can run freely (i.e., provide enough cpus) > >> - start slapd with the rwm overlay >> - run a client loop that >> -- binds as a valid user >> -- sends a valid search request that is *immediately* (i.e., don't wait for any >> answers) followed by an unbind request >> >> after several iterations (with 2.4.23 it was between 2 and 7, with 2.4.36 it was >> about 30) slapd crashes in malloc.c >> >> > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7723) slapd crashes on multi core machines if a search request is *immediately* followed by an unbind
by hyc＠symas.com 11 Oct '13

11 Oct '13

michael.vishchers(a)7p-group.com wrote: > Full_Name: Michael Vishchers > Version: 2.4.36 > OS: RHEL 6.3 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (109.41.86.33) > > > The bug mentioned in ITS #7716 unfortunately still persists in 2.4.36. > > We now found a way to reproduce it: > > - make sure that threads can run freely (i.e., provide enough cpus) If your client loop is running as a single thread then the number of CPUs and running threads should be irrelevant. If the number of threads and CPUs matter then you're misusing the API. Closing this ITS. > - start slapd with the rwm overlay > - run a client loop that > -- binds as a valid user > -- sends a valid search request that is *immediately* (i.e., don't wait for any > answers) followed by an unbind request > > after several iterations (with 2.4.23 it was between 2 and 7, with 2.4.36 it was > about 30) slapd crashes in malloc.c > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7724) Invalid FREE suspected in unbind.c
by hyc＠symas.com 11 Oct '13

11 Oct '13

michael.vishchers(a)7p-group.com wrote: > Full_Name: Michael Vishchers > Version: 2.4.36 > OS: RHEL 6.3 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (109.41.86.33) > > > This may be connected to ITS #7723: > > in unbind.c, there is new code (newer than 2.4.23, i.e.) that takes care not to > free the ld struct if some other thread is using it (line 82ff) > > Unfortunately, in line 102, after decrementing the ref count in this struct, > this struct is freed nonetheless. The struct is freed because it should only be used by one thread. Read draft-zeilenga-ldap-c-api-concurrency. Closing this ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7720) 2.4.36 build failure on HP-UX
by h.b.furuseth＠usit.uio.no 11 Oct '13

11 Oct '13

On 2013-10-08 19:42, hyc(a)symas.com wrote: > Thanks for the report. Interesting, this should also have been flagged > as > illegal in gcc but wasn't. Fixed now in master. void* pointer arithmetic is a gcc extension, it's treated as char*. gcc warns about it if you use -pedantic or -Wpointer-arith. -- Hallvard

1 0

(ITS#7724) Invalid FREE suspected in unbind.c
by michael.vishchers＠7p-group.com 11 Oct '13

11 Oct '13

Full_Name: Michael Vishchers Version: 2.4.36 OS: RHEL 6.3 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (109.41.86.33) This may be connected to ITS #7723: in unbind.c, there is new code (newer than 2.4.23, i.e.) that takes care not to free the ld struct if some other thread is using it (line 82ff) Unfortunately, in line 102, after decrementing the ref count in this struct, this struct is freed nonetheless.

1 0

(ITS#7723) slapd crashes on multi core machines if a search request is *immediately* followed by an unbind
by michael.vishchers＠7p-group.com 11 Oct '13

11 Oct '13

Full_Name: Michael Vishchers Version: 2.4.36 OS: RHEL 6.3 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (109.41.86.33) The bug mentioned in ITS #7716 unfortunately still persists in 2.4.36. We now found a way to reproduce it: - make sure that threads can run freely (i.e., provide enough cpus) - start slapd with the rwm overlay - run a client loop that -- binds as a valid user -- sends a valid search request that is *immediately* (i.e., don't wait for any answers) followed by an unbind request after several iterations (with 2.4.23 it was between 2 and 7, with 2.4.36 it was about 30) slapd crashes in malloc.c

1 0

Re: (ITS#7710) contextCSN values not updated by internal non-replicated ops
by quanah＠zimbra.com 10 Oct '13

10 Oct '13

--On Thursday, October 10, 2013 11:22 AM +0000 michael(a)stroeder.com wrote: > On Thu, 10 Oct 2013 11:05:28 GMT hyc(a)symas.com wrote >> michael(a)stroeder.com wrote: >> > With current master and re24 which have the fix for this ITS I now see >> > seg faults in test023-refint test057-memberof-refint. >> >> Fixed now in master. > > Thanks. These tests are passing now. > > @Quanah: Would be nice if this last fix could be also ported to RE24. > Thanks in advance. Not particularly necessary to make requests like this. I read all ITS mail and commit traffic. --Quanah -- Quanah Gibson-Mount Architect - Server Zimbra Software, LLC -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7694) cldap fails with IPv6 due to wrong size sockaddr
by stefw＠redhat.com 10 Oct '13

10 Oct '13

On 10.10.2013 13:59, Howard Chu wrote: > Stef Walter wrote: >> On 10.10.2013 12:59, Howard Chu wrote: >>> stefw(a)redhat.com wrote: >>>> Full_Name: Stef Walter >>>> Version: 2.4.35 >>>> OS: Fedora 19 >>>> Submission from: (NULL) (46.5.2.70) >>>> >>>> >>>> Connectionless LDAP (ie: cldap enabled with -DLDAP_CONNECTIONLESS) is >>>> broken for >>>> IPv6 for current versions of openldap. Tested with version 2.4.35 >>>> >>>> It's not clear if this ever worked properly. >>> >>> No, clearly not, the code was written and deprecated before IPv6 >>> existed. Nobody should be using this code today. >> >> Interesting. FWIW, the code is packaged by RHEL and Fedora, and is in >> use by several projects. > > Can you list any of these, offhand? The original spec, RFC1798, is long > obsoleted. There is no such thing as CLDAP in LDAPv3. Support in > OpenLDAP was first removed back in 2000. (commit > 25a9f7427ddc1b584a721ceb0e12690a96d3639e ) > Any apps using this must be quite ancient code and in serious need of a > rewrite. Well, there's still lots of libldap client code around to support LDAP over UDP. Guarded with LDAP_CONNECTIONLESS #defines, and one can use "cldap://xxxx" urls with ldap_initialize() and do basic cldap searches and so on. Windows Server is accessed via CLDAP during discovery. Although there is normative documentation for this, it's easier to understand via these descriptions: http://wiki.wireshark.org/MS-CLDAP https://fedorahosted.org/sssd/wiki/DesignDocs/ActiveDirectoryDNSSites#Sendi… So things like samba, IPA, realmd, adcli, and so on ... use and support cldap for talking with AD. I know Samba has reimplemented cldap but the others use libldap for this. Cheers, Stef

1 0

Re: (ITS#7694) cldap fails with IPv6 due to wrong size sockaddr
by hyc＠symas.com 10 Oct '13

10 Oct '13

Stef Walter wrote: > On 10.10.2013 12:59, Howard Chu wrote: >> stefw(a)redhat.com wrote: >>> Full_Name: Stef Walter >>> Version: 2.4.35 >>> OS: Fedora 19 >>> Submission from: (NULL) (46.5.2.70) >>> >>> >>> Connectionless LDAP (ie: cldap enabled with -DLDAP_CONNECTIONLESS) is >>> broken for >>> IPv6 for current versions of openldap. Tested with version 2.4.35 >>> >>> It's not clear if this ever worked properly. >> >> No, clearly not, the code was written and deprecated before IPv6 >> existed. Nobody should be using this code today. > > Interesting. FWIW, the code is packaged by RHEL and Fedora, and is in > use by several projects. Can you list any of these, offhand? The original spec, RFC1798, is long obsoleted. There is no such thing as CLDAP in LDAPv3. Support in OpenLDAP was first removed back in 2000. (commit 25a9f7427ddc1b584a721ceb0e12690a96d3639e ) Any apps using this must be quite ancient code and in serious need of a rewrite. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7694) cldap fails with IPv6 due to wrong size sockaddr
by stefw＠redhat.com 10 Oct '13

10 Oct '13

On 10.10.2013 12:59, Howard Chu wrote: > stefw(a)redhat.com wrote: >> Full_Name: Stef Walter >> Version: 2.4.35 >> OS: Fedora 19 >> Submission from: (NULL) (46.5.2.70) >> >> >> Connectionless LDAP (ie: cldap enabled with -DLDAP_CONNECTIONLESS) is >> broken for >> IPv6 for current versions of openldap. Tested with version 2.4.35 >> >> It's not clear if this ever worked properly. > > No, clearly not, the code was written and deprecated before IPv6 > existed. Nobody should be using this code today. Interesting. FWIW, the code is packaged by RHEL and Fedora, and is in use by several projects. > Even if it were to be used, the patch would break slapd; your > getnameinfo patch changes the format of the peername string. The format > of this string is not arbitrary, it's used in ACLs and the format is > documented in slapd.access(5). > > In the future, write patches that fix one single issue. Don't make > gratuitous changes, particularly if you haven't researched what you're > changing. Sorry bout that. Here's a new patch without the slapd change: ftp://ftp.openldap.org/incoming/stef-walter-131010.patch Cheers, Stef

1 0

Re: (ITS#7710) contextCSN values not updated by internal non-replicated ops
by michael＠stroeder.com 10 Oct '13

10 Oct '13

On Thu, 10 Oct 2013 11:05:28 GMT hyc(a)symas.com wrote > michael(a)stroeder.com wrote: > > With current master and re24 which have the fix for this ITS I now see seg > > faults in test023-refint test057-memberof-refint. > > Fixed now in master. Thanks. These tests are passing now. @Quanah: Would be nice if this last fix could be also ported to RE24. Thanks in advance. Ciao, Michael.

1 0

Re: (ITS#7710) contextCSN values not updated by internal non-replicated ops
by hyc＠symas.com 10 Oct '13

10 Oct '13

michael(a)stroeder.com wrote: > With current master and re24 which have the fix for this ITS I now see seg > faults in test023-refint test057-memberof-refint. Fixed now in master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7694) cldap fails with IPv6 due to wrong size sockaddr
by hyc＠symas.com 10 Oct '13

10 Oct '13

stefw(a)redhat.com wrote: > Full_Name: Stef Walter > Version: 2.4.35 > OS: Fedora 19 > URL: ftp://ftp.openldap.org/incoming/stef-walter-130912.patch > Submission from: (NULL) (46.5.2.70) > > > Connectionless LDAP (ie: cldap enabled with -DLDAP_CONNECTIONLESS) is broken for > IPv6 for current versions of openldap. Tested with version 2.4.35 > > It's not clear if this ever worked properly. No, clearly not, the code was written and deprecated before IPv6 existed. Nobody should be using this code today. Even if it were to be used, the patch would break slapd; your getnameinfo patch changes the format of the peername string. The format of this string is not arbitrary, it's used in ACLs and the format is documented in slapd.access(5). In the future, write patches that fix one single issue. Don't make gratuitous changes, particularly if you haven't researched what you're changing. > Connections immediately fail with: > > ldap_search_ext: Can't contact LDAP server (-1) > > The reason for this is that the LDAP_CONNECTIONLESS buffers include a prefix > containing an address in a "struct sockaddr". However, struct sockaddr, is not a > concrete type. In particular struct sockaddr_in6 is longer than struct > sockaddr. > > Noted here: http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=blob;f=libraries/… > > So this leads to failures when using IPv6 as the code assumes that the address > length is equal to sizeof (struct sockaddr). Seen here: > > http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=blob;f=libraries/… > > Example command: > > $ ldapsearch -d -1 -LL -H 'cldap://[2620:52:0:2223::1:1]' -b '' -s base > '(&(DnsDomain=ad.baseos.qe)(NtVer=\06\00\00\00))' NetLogon > > Output will contain this: > > ldap_write: want=96 error=Invalid argument > > Which is the EINVAL resulting from bad value passed to sendto(). > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs