[Engine-devel] Adding Authentication mechanism to oVirt
------=_Part_4736650_2080278089.1355331209999 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Hello Thierry, If I understand correctly you wish to help in modifying the engine to support non GSSAPI authentication methods. Following is a quick design goals for this implementation. I will be glad to improve this. Alon --- Implementation should support the following transports: 1. LDAP (plain). 2. LDAP over TLS. 3. LDAP with StartTLS. Implementation should support the following authentication methods: 1. Simple. 2. Digest-MD5 (plain and strong). I believe the GSSAPI can be dropped, I see no advantage of using it. A sample of low level implementation for transport and authentication is attached. When adding a domain the following facts should be provided: 1. Search user name. 2. Search user password. 3. Transport type (ldap, ldaps, ldap+startTLS) 4. Authentication (simple, Digest-MD5) 5. Sever selection policy (failover, round-robin, random). 6. Server address type (explicit, DNS record) 7. Server address set. 8. Optional base DN. 9. Optional root certificate. 10. Optional certificate chain. 11. Search page size. 10. Query timeout. etc... Within product there are two separate components that perform LDAP authentication: 1. User password validation. 2. User permission fetch. These two components needs to work in share-nothing mode, meaning that each should communicate with directory independently with the other. USER PASSWORD VALIDATION Input: user Input: domain Input: password Output: DN of user Output: success/failure Credentials used: user/password provided. Notes: LDAP session should not be cached. Logic: Perform LDAP bind. USER PERMISSION FETCH Input: DN of user (passed by user password validation) Input: domain (passed by user password validation) Output: A set of permissions Credentials used: search user and password configured within system. Notes: LDAP context can be cached. Logic: Perform LDAP searches, this is most of current logic. ------=_Part_4736650_2080278089.1355331209999 Content-Type: text/x-java; name=LDAPSearch.java Content-Disposition: attachment; filename=LDAPSearch.java Content-Transfer-Encoding: base64 Lyo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PQoKTGljZW5zZWQgdG8gdGhlIEFwYWNoZSBTb2Z0d2FyZSBGb3VuZGF0aW9u IChBU0YpIHVuZGVyIG9uZSBvciBtb3JlCmNvbnRyaWJ1dG9yIGxpY2Vuc2UgYWdyZWVtZW50cy4g IFNlZSB0aGUgTk9USUNFIGZpbGUgZGlzdHJpYnV0ZWQgd2l0aAp0aGlzIHdvcmsgZm9yIGFkZGl0 aW9uYWwgaW5mb3JtYXRpb24gcmVnYXJkaW5nIGNvcHlyaWdodCBvd25lcnNoaXAuClRoZSBBU0Yg bGljZW5zZXMgdGhpcyBmaWxlIHRvIFlvdSB1bmRlciB0aGUgQXBhY2hlIExpY2Vuc2UsIFZlcnNp b24gMi4wCih0aGUgIkxpY2Vuc2UiKTsgeW91IG1heSBub3QgdXNlIHRoaXMgZmlsZSBleGNlcHQg aW4gY29tcGxpYW5jZSB3aXRoCnRoZSBMaWNlbnNlLiAgWW91IG1heSBvYnRhaW4gYSBjb3B5IG9m IHRoZSBMaWNlbnNlIGF0CgogICAgaHR0cDovL3d3dy5hcGFjaGUub3JnL2xpY2Vuc2VzL0xJQ0VO U0UtMi4wCgpVbmxlc3MgcmVxdWlyZWQgYnkgYXBwbGljYWJsZSBsYXcgb3IgYWdyZWVkIHRvIGlu IHdyaXRpbmcsIHNvZnR3YXJlCmRpc3RyaWJ1dGVkIHVuZGVyIHRoZSBMaWNlbnNlIGlzIGRpc3Ry aWJ1dGVkIG9uIGFuICJBUyBJUyIgQkFTSVMsCldJVEhPVVQgV0FSUkFOVElFUyBPUiBDT05ESVRJ T05TIE9GIEFOWSBLSU5ELCBlaXRoZXIgZXhwcmVzcyBvciBpbXBsaWVkLgpTZWUgdGhlIExpY2Vu c2UgZm9yIHRoZSBzcGVjaWZpYyBsYW5ndWFnZSBnb3Zlcm5pbmcgcGVybWlzc2lvbnMgYW5kCmxp bWl0YXRpb25zIHVuZGVyIHRoZSBMaWNlbnNlLgo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PSovCgppbXBvcnQgamF2YS5p by4qOwppbXBvcnQgamF2YS5uZXQuKjsKaW1wb3J0IGphdmEudXRpbC4qOwppbXBvcnQgamF2YS5z ZWN1cml0eS5jZXJ0Lio7CgppbXBvcnQgamF2YXgubmFtaW5nLio7CmltcG9ydCBqYXZheC5uYW1p bmcuZGlyZWN0b3J5Lio7CmltcG9ydCBqYXZheC5uYW1pbmcubGRhcC4qOwppbXBvcnQgamF2YXgu bmV0Lio7CmltcG9ydCBqYXZheC5uZXQuc3NsLio7CgpwdWJsaWMgY2xhc3MgTERBUFNlYXJjaCB7 Cglwcml2YXRlIGJvb2xlYW4gX2RvU3RhcnRUTFMgPSBmYWxzZTsKCXByaXZhdGUgYm9vbGVhbiBf ZG9TQVNMX2RpZ2VzdE1ENSA9IGZhbHNlOwoJcHJpdmF0ZSBib29sZWFuIF9kb1NBU0xfc3Ryb25n ID0gZmFsc2U7Cglwcml2YXRlIGJvb2xlYW4gX3ZlcmlmeVBlZXJDZXJ0aWZpY2F0ZSA9IHRydWU7 Cglwcml2YXRlIFN0cmluZyBfc2VjdXJpdHlQcm90b2NvbCA9ICJUTFN2MSI7Cglwcml2YXRlIFN0 cmluZyBfdXNlcjsKCXByaXZhdGUgU3RyaW5nIF9wYXNzd29yZDsKCXByaXZhdGUgaW50IF9zZWFy Y2hQYWdlU2l6ZTsKCglMZGFwQ29udGV4dCBfY3R4OwoJU3RhcnRUbHNSZXNwb25zZSBfdGxzOwoJ U3RyaW5nIF9uYW1lQ29udGV4dCA9ICIiOwoKCXB1YmxpYyBzdGF0aWMgaW50ZXJmYWNlIFJlc3Vs dEhhbmRsZXIgewoJCXB1YmxpYyBib29sZWFuIGhhbmRsZShOYW1pbmdFbnVtZXJhdGlvbjxTZWFy Y2hSZXN1bHQ+IHJlc3VsdHMpIHRocm93cyBOYW1pbmdFeGNlcHRpb247Cgl9CgoJcHVibGljIHZv aWQgdXNlU3RhcnRUTFMoYm9vbGVhbiBzdGFydFRMUykgewoJCV9kb1N0YXJ0VExTID0gc3RhcnRU TFM7Cgl9CgoJcHVibGljIHZvaWQgdXNlRGlnZXN0TUQ1KGJvb2xlYW4gc3Ryb25nKSB7CgkJX2Rv U0FTTF9kaWdlc3RNRDUgPSB0cnVlOwoJCV9kb1NBU0xfc3Ryb25nID0gc3Ryb25nOwoJfQoKCXB1 YmxpYyB2b2lkIHNldFNlY3VyaXR5UHJvdG9jb2woU3RyaW5nIHNlY3VyaXR5UHJvdG9jb2wpIHsK CQlfc2VjdXJpdHlQcm90b2NvbCA9IHNlY3VyaXR5UHJvdG9jb2w7Cgl9CgoJcHVibGljIHZvaWQg c2V0Q3JlZGVudGlhbHMoU3RyaW5nIHVzZXIsIFN0cmluZyBwYXNzd29yZCkgewoJCV91c2VyID0g dXNlcjsKCQlfcGFzc3dvcmQgPSBwYXNzd29yZDsKCX0KCQoJcHVibGljIHZvaWQgc2V0U2VhcmNo UGFnZVNpemUoaW50IHNlYXJjaFBhZ2VTaXplKSB7CgkJX3NlYXJjaFBhZ2VTaXplID0gc2VhcmNo UGFnZVNpemU7Cgl9CgoJcHVibGljIHZvaWQgc2V0VmVyaWZ5UGVlckNlcnRpZmljYXRlKGJvb2xl YW4gdmVyaWZ5KSB7CgkJX3ZlcmlmeVBlZXJDZXJ0aWZpY2F0ZSA9IHZlcmlmeTsKCX0KCglwdWJs aWMgdm9pZCBjcmVhdGVDb250ZXh0KFN0cmluZyB1cmwpIAoJdGhyb3dzIE5hbWluZ0V4Y2VwdGlv biwgSU9FeGNlcHRpb24gewoJCWJvb2xlYW4gZG9UTFMgPSB1cmwuc3RhcnRzV2l0aCgibGRhcHM6 Iik7CgoJCUhhc2h0YWJsZTxTdHJpbmcsIFN0cmluZz4gZW52ID0gbmV3IEhhc2h0YWJsZTxTdHJp bmcsIFN0cmluZz4oKTsKCQllbnYucHV0KENvbnRleHQuSU5JVElBTF9DT05URVhUX0ZBQ1RPUlks ICJjb20uc3VuLmpuZGkubGRhcC5MZGFwQ3R4RmFjdG9yeSIpOwoJCWVudi5wdXQoQ29udGV4dC5Q Uk9WSURFUl9VUkwsIHVybCk7CgoJCWlmIChkb1RMUykgewoJCQllbnYucHV0KENvbnRleHQuU0VD VVJJVFlfUFJPVE9DT0wsIF9zZWN1cml0eVByb3RvY29sKTsKCgkJCWlmICghX3ZlcmlmeVBlZXJD ZXJ0aWZpY2F0ZSkgewoJCQkJVW5zZWN1cmVTU0xTb2NrZXRGYWN0b3J5LnNldERlZmF1bHRQcm90 b2NvbChfc2VjdXJpdHlQcm90b2NvbCk7CgkJCQllbnYucHV0KCJqYXZhLm5hbWluZy5sZGFwLmZh Y3Rvcnkuc29ja2V0IiwgVW5zZWN1cmVTU0xTb2NrZXRGYWN0b3J5LmNsYXNzLmdldE5hbWUoKSk7 CgkJCX0KCQl9CgoJCV9jdHggPSBuZXcgSW5pdGlhbExkYXBDb250ZXh0KGVudiwgbnVsbCk7CgoJ CWlmICghZG9UTFMgJiYgX2RvU3RhcnRUTFMpIHsKCQkJX3RscyA9IChTdGFydFRsc1Jlc3BvbnNl KV9jdHguZXh0ZW5kZWRPcGVyYXRpb24oCgkJCQluZXcgU3RhcnRUbHNSZXF1ZXN0KCkKCQkJKTsK CQkJU1NMU2Vzc2lvbiBzZXNzaW9uID0gX3Rscy5uZWdvdGlhdGUoCgkJCQlfdmVyaWZ5UGVlckNl cnRpZmljYXRlID8KCQkJCShTU0xTb2NrZXRGYWN0b3J5KVNTTFNvY2tldEZhY3RvcnkuZ2V0RGVm YXVsdCgpIDogCgkJCQlVbnNlY3VyZVNTTFNvY2tldEZhY3RvcnkuY3JlYXRlU29ja2V0RmFjdG9y eShfc2VjdXJpdHlQcm90b2NvbCkKCQkJKTsKCQl9CgoJCWlmIChfdXNlciAhPSBudWxsKSB7CgkJ CWlmIChfZG9TQVNMX2RpZ2VzdE1ENSkgewoJCQkJX2N0eC5hZGRUb0Vudmlyb25tZW50KENvbnRl eHQuU0VDVVJJVFlfQVVUSEVOVElDQVRJT04sICJESUdFU1QtTUQ1Iik7CgkJCQlpZiAoX2RvU0FT TF9zdHJvbmcpIHsKCQkJCQlfY3R4LmFkZFRvRW52aXJvbm1lbnQoImphdmF4LnNlY3VyaXR5LnNh c2wucW9wIiwgImF1dGgtY29uZiIpOwoJCQkJCV9jdHguYWRkVG9FbnZpcm9ubWVudCgiamF2YXgu c2VjdXJpdHkuc2FzbC5zdHJlbmd0aCIsICJoaWdoIik7CgkJCQl9CgkJCX0KCQkJZWxzZSB7CgkJ CQlfY3R4LmFkZFRvRW52aXJvbm1lbnQoQ29udGV4dC5TRUNVUklUWV9BVVRIRU5USUNBVElPTiwg InNpbXBsZSIpOwoJCQl9CgkJCV9jdHguYWRkVG9FbnZpcm9ubWVudChDb250ZXh0LlNFQ1VSSVRZ X1BSSU5DSVBBTCwgX3VzZXIpOwoJCQlfY3R4LmFkZFRvRW52aXJvbm1lbnQoQ29udGV4dC5TRUNV UklUWV9DUkVERU5USUFMUywgX3Bhc3N3b3JkKTsKCQl9CgoJCS8qCgkJICogbm8gbmFtZXNwYWNl LCBsZXQncyB0YWtlIHRoZSBmaXJzdCBuYW1lIHNwYWNlCgkJICogYXZhaWxhYmxlLgoJCSAqLwoJ CWlmIChfY3R4LmdldE5hbWVJbk5hbWVzcGFjZSgpLmVxdWFscygiIikpIHsKCQkJU3RyaW5nIGNv bnRleHRzW10gPSB7CgkJCQkibmFtaW5nQ29udGV4dHMiLCAvLyBzdGFuZGFyZAoJCQkJImRlZmF1 bHROYW1pbmdDb250ZXh0IiAvLyBhY3RpdmUgZGlyZWN0b3J5CgkJCX07CgkJCUF0dHJpYnV0ZXMg YXR0cmlidXRlcyA9IF9jdHguZ2V0QXR0cmlidXRlcygKCQkJCSIiLAoJCQkJY29udGV4dHMKCQkJ KTsKCQkJZm9yIChTdHJpbmcgY29udGV4dCA6IGNvbnRleHRzKSB7CgkJCQlBdHRyaWJ1dGUgYXR0 cmlidXRlID0gYXR0cmlidXRlcy5nZXQoY29udGV4dCk7CgkJCQlpZiAoYXR0cmlidXRlICE9IG51 bGwpIHsKCQkJCQlfbmFtZUNvbnRleHQgPSBhdHRyaWJ1dGUuZ2V0KCkudG9TdHJpbmcoKTsKCQkJ CQlicmVhazsKCQkJCX0KCQkJfQoJCX0KCX0KCglwdWJsaWMgdm9pZCBkZXN0b3J5Q29udGV4dCgp Cgl0aHJvd3MgTmFtaW5nRXhjZXB0aW9uLCBJT0V4Y2VwdGlvbiB7CgkJaWYgKF90bHMgIT0gbnVs bCkgewoJCQlfdGxzLmNsb3NlKCk7CgkJfQoJCWlmIChfY3R4ICE9IG51bGwpIHsKCQkJX2N0eC5j bG9zZSgpOwoJCX0KCX0KCglwdWJsaWMgdm9pZCBzZWFyY2goCgkJUmVzdWx0SGFuZGxlciBoYW5k bGVyLAoJCVN0cmluZyBxdWVyeSwKCQlTdHJpbmdbXSBhdHRyaWJ1dGVzLAoJCWludCBzY29wZSwK CQlpbnQgdGltZUxpbWl0CgkpIHRocm93cyBOYW1pbmdFeGNlcHRpb24sIElPRXhjZXB0aW9uIHsK CQkvKgoJCSAqIFBhZ2Ugc2VhcmNoLgoJCSAqLwoJCWJ5dGVbXSBjb29raWUgPSBudWxsOwoJCWJv b2xlYW4gY29udCA9IHRydWU7CgkJU2VhcmNoQ29udHJvbHMgc2VhcmNoQ29udHJvbHMgPSBuZXcg U2VhcmNoQ29udHJvbHMoKTsKCQlzZWFyY2hDb250cm9scy5zZXRTZWFyY2hTY29wZShzY29wZSk7 CgkJc2VhcmNoQ29udHJvbHMuc2V0VGltZUxpbWl0KHRpbWVMaW1pdCk7CgkJc2VhcmNoQ29udHJv bHMuc2V0UmV0dXJuaW5nQXR0cmlidXRlcyhhdHRyaWJ1dGVzKTsKCQlkbyB7CgkJCV9jdHguc2V0 UmVxdWVzdENvbnRyb2xzKAoJCQkJbmV3IENvbnRyb2xbXXsgCgkJCQkJbmV3IFBhZ2VkUmVzdWx0 c0NvbnRyb2woCgkJCQkJCV9zZWFyY2hQYWdlU2l6ZSwKCQkJCQkJY29va2llLAoJCQkJCQlDb250 cm9sLkNSSVRJQ0FMCgkJCQkJKQoJCQkJfQoJCQkpOwoJCQljb29raWUgPSBudWxsOwoKCQkJTmFt aW5nRW51bWVyYXRpb248U2VhcmNoUmVzdWx0PiByZXN1bHRzID0gbnVsbDsKCQkJdHJ5IHsKCQkJ CXJlc3VsdHMgPSBfY3R4LnNlYXJjaCgKCQkJCQlfbmFtZUNvbnRleHQsCgkJCQkJcXVlcnksCgkJ CQkJc2VhcmNoQ29udHJvbHMKCQkJCSk7CgkJCQljb250ID0gaGFuZGxlci5oYW5kbGUocmVzdWx0 cyk7CgkJCX0KCQkJY2F0Y2goUGFydGlhbFJlc3VsdEV4Y2VwdGlvbiBlKSB7fQoJCQlmaW5hbGx5 IHsKCQkJCWlmIChyZXN1bHRzICE9IG51bGwpIHsKCQkJCQlyZXN1bHRzLmNsb3NlKCk7CgkJCQkJ cmVzdWx0cyA9IG51bGw7CgkJCQl9CgkJCX0KCgkJCS8qCgkJCSAqIE5leHQgcGFnZQoJCQkgKi8K CQkJaWYgKGNvbnQgJiYgX2N0eC5nZXRSZXNwb25zZUNvbnRyb2xzKCkgIT0gbnVsbCkgewoJCQkJ Zm9yIChDb250cm9sIGNvbnRyb2wgOiBfY3R4LmdldFJlc3BvbnNlQ29udHJvbHMoKSkgewoJCQkJ CWlmIChjb250cm9sIGluc3RhbmNlb2YgUGFnZWRSZXN1bHRzUmVzcG9uc2VDb250cm9sKSB7CgkJ CQkJCWNvb2tpZSA9ICgoUGFnZWRSZXN1bHRzUmVzcG9uc2VDb250cm9sKWNvbnRyb2wpLmdldENv b2tpZSgpOwoJCQkJCX0KCQkJCX0KCQkJfQoJCX0gd2hpbGUoY29udCAmJiBjb29raWUgIT0gbnVs bCk7Cgl9CgoJcHVibGljIHN0YXRpYyBjbGFzcyBEdW1wUmVzdWx0SGFuZGxlciBpbXBsZW1lbnRz IFJlc3VsdEhhbmRsZXIgewoJCXByaXZhdGUgUHJpbnRTdHJlYW0gX29zOwoKCQlwdWJsaWMgRHVt cFJlc3VsdEhhbmRsZXIoT3V0cHV0U3RyZWFtIG9zKSB7CgkJCV9vcyA9IG5ldyBQcmludFN0cmVh bShvcyk7CgkJfQoKCQlwdWJsaWMgYm9vbGVhbiBoYW5kbGUoTmFtaW5nRW51bWVyYXRpb248U2Vh cmNoUmVzdWx0PiByZXN1bHRzKSB0aHJvd3MgTmFtaW5nRXhjZXB0aW9uIHsKCQkJLyoKCQkJICog RHVtcCBwYWdlIHJlc3VsdHMKCQkJICovCgkJCXdoaWxlIChyZXN1bHRzICE9IG51bGwgJiYgcmVz dWx0cy5oYXNNb3JlKCkpIHsKCQkJCVNlYXJjaFJlc3VsdCByZXN1bHQgPSByZXN1bHRzLm5leHQo KTsKCgkJCQlfb3MucHJpbnRsbigpOwoJCQkJX29zLnByaW50bG4ocmVzdWx0LmdldE5hbWVJbk5h bWVzcGFjZSgpKTsKCgkJCQlOYW1pbmdFbnVtZXJhdGlvbjw/IGV4dGVuZHMgQXR0cmlidXRlPiBl YXR0cnMgPSByZXN1bHQuZ2V0QXR0cmlidXRlcygpLmdldEFsbCgpOwoJCQkJd2hpbGUoZWF0dHJz Lmhhc01vcmUoKSkgewoJCQkJCUF0dHJpYnV0ZSBhdHRyID0gZWF0dHJzLm5leHQoKTsKCQkJCQlO YW1pbmdFbnVtZXJhdGlvbjw/PiBlYXR0ciA9IGF0dHIuZ2V0QWxsKCk7CgkJCQkJd2hpbGUoZWF0 dHIuaGFzTW9yZSgpKSB7CgkJCQkJCU9iamVjdCBvID0gZWF0dHIubmV4dCgpOwoJCQkJCQlfb3Mu cHJpbnRsbigKCQkJCQkJCVN0cmluZy5mb3JtYXQoCgkJCQkJCQkJIiUxJHM6JTIkcyIsCgkJCQkJ CQkJYXR0ci5nZXRJRCgpLAoJCQkJCQkJCW8gPT0gbnVsbCA/ICIobnVsbCkiIDogby50b1N0cmlu ZygpCgkJCQkJCQkpCgkJCQkJCSk7CgkJCQkJfQoJCQkJfQoJCQl9IAoJCQlyZXR1cm4gdHJ1ZTsK CQl9Cgl9CgoJLyoKCSAqIGxkYXA6Ly9xYTEucWEubGFiLnRsdi5yZWRoYXQuY29tIGFsb25ibCAx MjM0NTYKCSAqIAlzdXBwb3J0cyBESUdFU1QtTUQ1CgkgKgoJICogbGRhcDovL3d3dy50cnVzdGNl bnRlci5kZQoJICogCXN1cHBvcnRzIGFub255bW91cwoJICogCXN1cHBvcnRzIFN0YXJ0VExTCgkg Ki8KCXB1YmxpYyBzdGF0aWMgdm9pZCBtYWluKFN0cmluZyBhcmdzW10pIHRocm93cyBFeGNlcHRp b24gewoJCVN0cmluZyB1cmwgPSBhcmdzWzBdOwoJCVN0cmluZyB1c2VyID0gbnVsbDsKCQlTdHJp bmcgcGFzc3dvcmQgPSBudWxsOwoJCWlmIChhcmdzLmxlbmd0aCA+IDEpIHsKCQkJdXNlciA9IGFy Z3NbMV07CgkJCXBhc3N3b3JkID0gYXJnc1syXTsKCQl9CgkJU3RyaW5nIHF1ZXJ5ID0gIihvYmpl Y3RDbGFzcz0qKSI7CgkJU3RyaW5nW10gcXVlcnlBdHRyaWJ1dGVzID0geyAiZGlzdGluZ3Vpc2hl ZE5hbWUiLCAiZG4iLCAib2JqZWN0Q2xhc3MiLCAiY24iLCAibWFpbCIsICJuYW1lIiwgInJvbGUi LCAibWVtYmVyT2YiLCAiZ3JvdXAiIH07CgoJCUxEQVBTZWFyY2ggbGRhcCA9IG5ldyBMREFQU2Vh cmNoKCk7CgkJdHJ5IHsKCQkJLyogQkVHSU4gU0VUVElOR1MgKi8KCQkJbGRhcC5zZXRWZXJpZnlQ ZWVyQ2VydGlmaWNhdGUoZmFsc2UpOyAvLyBERUJVRyBPTkxZISEhCgkJCWxkYXAudXNlU3RhcnRU TFModHJ1ZSk7CgkJCWxkYXAudXNlRGlnZXN0TUQ1KHRydWUpOwoJCQlsZGFwLnNldENyZWRlbnRp YWxzKHVzZXIsIHBhc3N3b3JkKTsKCQkJbGRhcC5zZXRTZWFyY2hQYWdlU2l6ZSgyMCk7CgkJCS8q IEVORCBTRVRUSU5HUyAqLwoKCQkJbGRhcC5jcmVhdGVDb250ZXh0KHVybCk7CgkJCWxkYXAuc2Vh cmNoKAoJCQkJbmV3IER1bXBSZXN1bHRIYW5kbGVyKFN5c3RlbS5vdXQpLAoJCQkJcXVlcnksCgkJ CQlxdWVyeUF0dHJpYnV0ZXMsCgkJCQlTZWFyY2hDb250cm9scy5TVUJUUkVFX1NDT1BFLAoJCQkJ MzAwMDAJLy8gdGltZW91dAoJCQkpOwoJCX0KCQlmaW5hbGx5IHsKCQkJbGRhcC5kZXN0b3J5Q29u dGV4dCgpOwoJCX0KCX0KfQo= ------=_Part_4736650_2080278089.1355331209999 Content-Type: text/x-java; name=UnsecureSSLSocketFactory.java Content-Disposition: attachment; filename=UnsecureSSLSocketFactory.java Content-Transfer-Encoding: base64 aW1wb3J0IGphdmEuaW8uKjsKaW1wb3J0IGphdmEubmV0Lio7CgppbXBvcnQgamF2YXgubmV0Lio7 CmltcG9ydCBqYXZheC5uZXQuc3NsLio7CgpwdWJsaWMgY2xhc3MgVW5zZWN1cmVTU0xTb2NrZXRG YWN0b3J5IGV4dGVuZHMgU1NMU29ja2V0RmFjdG9yeSB7CgoJcHJpdmF0ZSBzdGF0aWMgU3RyaW5n IF9kZWZhdWx0UHJvdG9jb2wgPSAiU1NMIjsKCXByaXZhdGUgU1NMU29ja2V0RmFjdG9yeSBfbmV4 dDsKCglwdWJsaWMgc3RhdGljIFNTTFNvY2tldEZhY3RvcnkgY3JlYXRlU29ja2V0RmFjdG9yeShT dHJpbmcgcHJvdG9jb2wpIHsKCQl0cnkgewoJCQlTU0xDb250ZXh0IHNjID0gU1NMQ29udGV4dC5n ZXRJbnN0YW5jZShwcm90b2NvbCk7CgkJCXNjLmluaXQoCgkJCQludWxsLAoJCQkJbmV3IFRydXN0 TWFuYWdlcltdewoJCQkJCW5ldyBYNTA5VHJ1c3RNYW5hZ2VyKCkgewoJCQkJCQlwdWJsaWMgamF2 YS5zZWN1cml0eS5jZXJ0Llg1MDlDZXJ0aWZpY2F0ZVtdIGdldEFjY2VwdGVkSXNzdWVycygpIHsK CQkJCQkJCXJldHVybiBuZXcgamF2YS5zZWN1cml0eS5jZXJ0Llg1MDlDZXJ0aWZpY2F0ZVtdIHt9 OwoJCQkJCQl9CgkJCQkJCXB1YmxpYyB2b2lkIGNoZWNrQ2xpZW50VHJ1c3RlZCgKCQkJCQkJCWph dmEuc2VjdXJpdHkuY2VydC5YNTA5Q2VydGlmaWNhdGVbXSBjZXJ0cywgU3RyaW5nIGF1dGhUeXBl KSB7CgkJCQkJCX0KCQkJCQkJcHVibGljIHZvaWQgY2hlY2tTZXJ2ZXJUcnVzdGVkKAoJCQkJCQkJ amF2YS5zZWN1cml0eS5jZXJ0Llg1MDlDZXJ0aWZpY2F0ZVtdIGNlcnRzLCBTdHJpbmcgYXV0aFR5 cGUpIHsKCQkJCQkJfQoJCQkJCX0KCQkJCX0sCgkJCQludWxsCgkJCSk7CgkJCXJldHVybiBzYy5n ZXRTb2NrZXRGYWN0b3J5KCk7CgkJfQoJCWNhdGNoKEV4Y2VwdGlvbiBlKSB7CgkJCXRocm93IG5l dyBSdW50aW1lRXhjZXB0aW9uKGUpOwoJCX0KCX0KCglwdWJsaWMgc3RhdGljIHZvaWQgc2V0RGVm YXVsdFByb3RvY29sKFN0cmluZyBwcm90b2NvbCkgewoJCV9kZWZhdWx0UHJvdG9jb2wgPSBwcm90 b2NvbDsKCX0KCglwdWJsaWMgc3RhdGljIFNvY2tldEZhY3RvcnkgZ2V0RGVmYXVsdCgpIHsKCQly ZXR1cm4gbmV3IFVuc2VjdXJlU1NMU29ja2V0RmFjdG9yeSgpOwoJfQoKCXB1YmxpYyBVbnNlY3Vy ZVNTTFNvY2tldEZhY3RvcnkoKSB7CgkJX25leHQgPSBjcmVhdGVTb2NrZXRGYWN0b3J5KF9kZWZh dWx0UHJvdG9jb2wpOwoJfQoKCUBPdmVycmlkZQoJcHVibGljIFNvY2tldCBjcmVhdGVTb2NrZXQo U3RyaW5nIGhvc3QsIGludCBwb3J0KQoJdGhyb3dzIElPRXhjZXB0aW9uLCBVbmtub3duSG9zdEV4 Y2VwdGlvbiB7CgkJcmV0dXJuIF9uZXh0LmNyZWF0ZVNvY2tldChob3N0LCBwb3J0KTsKCX0KCglA T3ZlcnJpZGUKCXB1YmxpYyBTb2NrZXQgY3JlYXRlU29ja2V0KFN0cmluZyBob3N0LCBpbnQgcG9y dCwgSW5ldEFkZHJlc3MgbG9jYWxIb3N0LAoJaW50IGxvY2FsUG9ydCkgdGhyb3dzIElPRXhjZXB0 aW9uLCBVbmtub3duSG9zdEV4Y2VwdGlvbiB7CgkJcmV0dXJuIF9uZXh0LmNyZWF0ZVNvY2tldCho b3N0LCBwb3J0LCBsb2NhbEhvc3QsIGxvY2FsUG9ydCk7Cgl9CgoJQE92ZXJyaWRlCglwdWJsaWMg U29ja2V0IGNyZWF0ZVNvY2tldChJbmV0QWRkcmVzcyBob3N0LCBpbnQgcG9ydCkgdGhyb3dzIElP RXhjZXB0aW9uIHsKCQlyZXR1cm4gX25leHQuY3JlYXRlU29ja2V0KGhvc3QsIHBvcnQpOwoJfQoK CUBPdmVycmlkZQoJcHVibGljIFNvY2tldCBjcmVhdGVTb2NrZXQoSW5ldEFkZHJlc3MgYWRkcmVz cywgaW50IHBvcnQsCglJbmV0QWRkcmVzcyBsb2NhbEFkZHJlc3MsIGludCBsb2NhbFBvcnQpIHRo cm93cyBJT0V4Y2VwdGlvbiB7CgkJcmV0dXJuIF9uZXh0LmNyZWF0ZVNvY2tldChhZGRyZXNzLCBw b3J0LCBsb2NhbEFkZHJlc3MsIGxvY2FsUG9ydCk7Cgl9CgoJQE92ZXJyaWRlCglwdWJsaWMgU29j a2V0IGNyZWF0ZVNvY2tldChTb2NrZXQgcywgU3RyaW5nIGhvc3QsIGludCBwb3J0LCBib29sZWFu IGF1dG9DbG9zZSkKCXRocm93cyBJT0V4Y2VwdGlvbiB7CgkJcmV0dXJuIF9uZXh0LmNyZWF0ZVNv Y2tldChzLCBob3N0LCBwb3J0LCBhdXRvQ2xvc2UpOwoJfQoKCUBPdmVycmlkZQoJcHVibGljIFN0 cmluZ1tdIGdldERlZmF1bHRDaXBoZXJTdWl0ZXMoKSB7CgkJcmV0dXJuIF9uZXh0LmdldERlZmF1 bHRDaXBoZXJTdWl0ZXMoKTsKCX0KCglAT3ZlcnJpZGUKCXB1YmxpYyBTdHJpbmdbXSBnZXRTdXBw b3J0ZWRDaXBoZXJTdWl0ZXMoKSB7CgkJcmV0dXJuIF9uZXh0LmdldFN1cHBvcnRlZENpcGhlclN1 aXRlcygpOwoJfQp9Cg== ------=_Part_4736650_2080278089.1355331209999--
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI authentication methods.
Following is a quick design goals for this implementation.
I will be glad to improve this. Alon
---
Implementation should support the following transports:
1. LDAP (plain). 2. LDAP over TLS. 3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple. 2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
Except that Active Directory usually does not work (especially not out of the box) with certificates. Y.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name. 2. Search user password. 3. Transport type (ldap, ldaps, ldap+startTLS) 4. Authentication (simple, Digest-MD5) 5. Sever selection policy (failover, round-robin, random). 6. Server address type (explicit, DNS record) 7. Server address set. 8. Optional base DN. 9. Optional root certificate. 10. Optional certificate chain. 11. Search page size. 10. Query timeout. etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation. 2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user Input: domain Input: password Output: DN of user Output: success/failure Credentials used: user/password provided. Notes: LDAP session should not be cached. Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation) Input: domain (passed by user password validation) Output: A set of permissions Credentials used: search user and password configured within system. Notes: LDAP context can be cached. Logic: Perform LDAP searches, this is most of current logic.
----- Original Message -----
From: "Yaniv Kaul" <ykaul@redhat.com> To: "Alon Bar-Lev" <alonbl@redhat.com> Cc: "Thierry Kauffmann" <thierry.kauffmann@univ-montp2.fr>, "Itamar Heim" <iheim@redhat.com>, "engine-devel" <engine-devel@ovirt.org> Sent: Wednesday, December 12, 2012 7:18:18 PM Subject: Re: Adding Authentication mechanism to oVirt
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI authentication methods.
Following is a quick design goals for this implementation.
I will be glad to improve this. Alon
---
Implementation should support the following transports:
1. LDAP (plain). 2. LDAP over TLS. 3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple. 2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
Except that Active Directory usually does not work (especially not out of the box) with certificates. Y.
Active Directory support SASL with Diget-MD5, no need to support GSSAPI.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name. 2. Search user password. 3. Transport type (ldap, ldaps, ldap+startTLS) 4. Authentication (simple, Digest-MD5) 5. Sever selection policy (failover, round-robin, random). 6. Server address type (explicit, DNS record) 7. Server address set. 8. Optional base DN. 9. Optional root certificate. 10. Optional certificate chain. 11. Search page size. 10. Query timeout. etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation. 2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user Input: domain Input: password Output: DN of user Output: success/failure Credentials used: user/password provided. Notes: LDAP session should not be cached. Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation) Input: domain (passed by user password validation) Output: A set of permissions Credentials used: search user and password configured within system. Notes: LDAP context can be cached. Logic: Perform LDAP searches, this is most of current logic.
----- Original Message -----
From: "Itamar Heim" <iheim@redhat.com> To: "Alon Bar-Lev" <alonbl@redhat.com> Cc: "Thierry Kauffmann" <thierry.kauffmann@univ-montp2.fr>, "Yaniv Kaul" <ykaul@redhat.com>, "engine-devel" <engine-devel@ovirt.org> Sent: Thursday, December 13, 2012 1:27:15 AM Subject: Re: Adding Authentication mechanism to oVirt
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
I believe the GSSAPI can be dropped, I see no advantage of using it.
how would upgrade/backward compatibility look like?
We have the user/password, so there should be no problem we can test if authentication succeeds in methods based on some order... but we cross this when we reach the point. Asking the user for transport/authentication scheme during upgrade is something that can also be done. We can keep the GSSAPI around of course... Not something I would like to do. Alon
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI authentication methods.
Following is a quick design goals for this implementation.
I will be glad to improve this.
thanks for writing this part. what about making the LDAP part plugable, or at least scheme-configurable to cover openLDAP, or any other source (atlassian crowd), or well, anything? thanks, Itamar
Alon
---
Implementation should support the following transports:
1. LDAP (plain). 2. LDAP over TLS. 3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple. 2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name. 2. Search user password. 3. Transport type (ldap, ldaps, ldap+startTLS) 4. Authentication (simple, Digest-MD5) 5. Sever selection policy (failover, round-robin, random). 6. Server address type (explicit, DNS record) 7. Server address set. 8. Optional base DN. 9. Optional root certificate. 10. Optional certificate chain. 11. Search page size. 10. Query timeout. etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation. 2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user Input: domain Input: password Output: DN of user Output: success/failure Credentials used: user/password provided. Notes: LDAP session should not be cached. Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation) Input: domain (passed by user password validation) Output: A set of permissions Credentials used: search user and password configured within system. Notes: LDAP context can be cached. Logic: Perform LDAP searches, this is most of current logic.
----- Original Message -----
From: "Itamar Heim" <iheim@redhat.com> To: "Alon Bar-Lev" <alonbl@redhat.com> Cc: "Thierry Kauffmann" <thierry.kauffmann@univ-montp2.fr>, "Yaniv Kaul" <ykaul@redhat.com>, "engine-devel" <engine-devel@ovirt.org> Sent: Thursday, December 13, 2012 1:43:19 AM Subject: Re: Adding Authentication mechanism to oVirt
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI authentication methods.
Following is a quick design goals for this implementation.
I will be glad to improve this.
thanks for writing this part. what about making the LDAP part plugable, or at least scheme-configurable to cover openLDAP, or any other source (atlassian crowd), or well, anything?
I thought our primary goal is to reduce the noise around the kerberos. Doing a complete re-write (aka modular) will consume far more resources and time. It also touches many part of the implementation instead of only the LDAP context and authentication.
thanks, Itamar
Alon
---
Implementation should support the following transports:
1. LDAP (plain). 2. LDAP over TLS. 3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple. 2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name. 2. Search user password. 3. Transport type (ldap, ldaps, ldap+startTLS) 4. Authentication (simple, Digest-MD5) 5. Sever selection policy (failover, round-robin, random). 6. Server address type (explicit, DNS record) 7. Server address set. 8. Optional base DN. 9. Optional root certificate. 10. Optional certificate chain. 11. Search page size. 10. Query timeout. etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation. 2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user Input: domain Input: password Output: DN of user Output: success/failure Credentials used: user/password provided. Notes: LDAP session should not be cached. Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation) Input: domain (passed by user password validation) Output: A set of permissions Credentials used: search user and password configured within system. Notes: LDAP context can be cached. Logic: Perform LDAP searches, this is most of current logic.
This is a multi-part message in MIME format. --------------060900050500060003060203 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Le 12/12/2012 17:53, Alon Bar-Lev a écrit :
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI authentication methods. Hi Alon,
you're right. My main (selfish) goal is to adapt oVirt authentication schemes to our requirements : that is "LDAP SIMPLE auth over startTLS."
Following is a quick design goals for this implementation.
I will be glad to improve this. Alon Thanks a lot for this description.
Tell me how I could help : I am more a system administrator than a developer. I kwon a bit of java (at least I can read and understand oVirt's code that I downloaded recently). Thierry
---
Implementation should support the following transports:
1. LDAP (plain). 2. LDAP over TLS. 3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple. 2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name. 2. Search user password. 3. Transport type (ldap, ldaps, ldap+startTLS) 4. Authentication (simple, Digest-MD5) 5. Sever selection policy (failover, round-robin, random). 6. Server address type (explicit, DNS record) 7. Server address set. 8. Optional base DN. 9. Optional root certificate. 10. Optional certificate chain. 11. Search page size. 10. Query timeout. etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation. 2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user Input: domain Input: password Output: DN of user Output: success/failure Credentials used: user/password provided. Notes: LDAP session should not be cached. Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation) Input: domain (passed by user password validation) Output: A set of permissions Credentials used: search user and password configured within system. Notes: LDAP context can be cached. Logic: Perform LDAP searches, this is most of current logic.
-- signature-TK Thierry Kauffmann Chef du Service Informatique // Faculté des Sciences // Université de Montpellier 2 SIF - Service Informatique de la Faculté des Sciences <http://sif.info-ufr.univ-montp2.fr/> UM2 - Université de Montpellier 2 <http://www.univ-montp2.fr/> Service informatique de la Faculté des Sciences (SIF) Université de Montpellier 2 CC437 // Place Eugène Bataillon // 34095 Montpellier Cedex 5 Tél : 04 67 14 31 58 email : thierry.kauffmann@univ-montp2.fr <mailto:thierry.kauffmann@univ-montp2.fr> web : http://sif.info-ufr.univ-montp2.fr/ http://www.fdsweb.univ-montp2.fr/ --------------060900050500060003060203 Content-Type: multipart/related; boundary="------------080600050308080709050608" --------------080600050308080709050608 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit <html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">Le 12/12/2012 17:53, Alon Bar-Lev a écrit :<br> </div> <blockquote cite="mid:1490596332.4736653.1355331210001.JavaMail.root@redhat.com" type="cite"> <pre wrap="">Hello Thierry, If I understand correctly you wish to help in modifying the engine to support non GSSAPI authentication methods. </pre> </blockquote> Hi Alon,<br> <br> you're right.<br> My main (selfish) goal is to adapt oVirt authentication schemes to our requirements : that is "LDAP SIMPLE auth over startTLS."<br> <br> <blockquote cite="mid:1490596332.4736653.1355331210001.JavaMail.root@redhat.com" type="cite"> <pre wrap=""> Following is a quick design goals for this implementation. I will be glad to improve this. Alon </pre> </blockquote> Thanks a lot for this description.<br> <br> Tell me how I could help : I am more a system administrator than a developer. I kwon a bit of java (at least I can read and understand oVirt's code that I downloaded recently).<br> <br> Thierry<br> <br> <blockquote cite="mid:1490596332.4736653.1355331210001.JavaMail.root@redhat.com" type="cite"> <pre wrap=""> --- Implementation should support the following transports: 1. LDAP (plain). 2. LDAP over TLS. 3. LDAP with StartTLS. Implementation should support the following authentication methods: 1. Simple. 2. Digest-MD5 (plain and strong). I believe the GSSAPI can be dropped, I see no advantage of using it. A sample of low level implementation for transport and authentication is attached. When adding a domain the following facts should be provided: 1. Search user name. 2. Search user password. 3. Transport type (ldap, ldaps, ldap+startTLS) 4. Authentication (simple, Digest-MD5) 5. Sever selection policy (failover, round-robin, random). 6. Server address type (explicit, DNS record) 7. Server address set. 8. Optional base DN. 9. Optional root certificate. 10. Optional certificate chain. 11. Search page size. 10. Query timeout. etc... Within product there are two separate components that perform LDAP authentication: 1. User password validation. 2. User permission fetch. These two components needs to work in share-nothing mode, meaning that each should communicate with directory independently with the other. USER PASSWORD VALIDATION Input: user Input: domain Input: password Output: DN of user Output: success/failure Credentials used: user/password provided. Notes: LDAP session should not be cached. Logic: Perform LDAP bind. USER PERMISSION FETCH Input: DN of user (passed by user password validation) Input: domain (passed by user password validation) Output: A set of permissions Credentials used: search user and password configured within system. Notes: LDAP context can be cached. Logic: Perform LDAP searches, this is most of current logic. </pre> </blockquote> <br> <br> <div class="moz-signature">-- <br> <meta content="text/html; charset=UTF-8" http-equiv="content-type"> <title>signature-TK</title> <small><span style="color: rgb(15, 67, 106); font-weight: bold;">Thierry Kauffmann</span><br> <span style="color: rgb(15, 67, 106);">Chef du Service Informatique // </span><span style="color: rgb(15, 67, 106);">Faculté des Sciences // </span><span style="color: rgb(15, 67, 106);">Université de Montpellier 2</span></small><br> <br> <table style="text-align: left; height: 111px; width: 924px;" border="0" cellpadding="10" cellspacing="0"> <tbody> <tr> <td style="vertical-align: middle; text-align: center;"><a href="http://sif.info-ufr.univ-montp2.fr/"><img style="border: 0px solid ; width: 100px; height: 106px;" alt="SIF - Service Informatique de la Faculté des Sciences" src="cid:part1.09060908.01080200@univ-montp2.fr"></a></td> <td style="border-right: 2px solid rgb(15, 67, 106); vertical-align: middle; color: rgb(180, 202, 0); text-align: center; width: 211px;"><a href="http://www.univ-montp2.fr/"><img style="border: 0px solid ; width: 194px; height: 106px;" alt="UM2 - Université de Montpellier 2" src="cid:part3.03050605.01020105@univ-montp2.fr"></a></td> <td style="vertical-align: top; color: rgb(180, 202, 0); width: 547px; line-height: 13px;"><small><span style="color: rgb(15, 67, 106); font-weight: bold;"></span><span style="color: rgb(15, 67, 106);"></span>Service informatique de la Faculté des Sciences (SIF)<br> Université de Montpellier 2<br> <span style="color: rgb(71, 189, 205);"> CC437 // </span><span style="color: rgb(71, 189, 205);">Place Eugène Bataillon // </span><span style="color: rgb(71, 189, 205);">34095 Montpellier Cedex 5</span><br> <span style="color: rgb(71, 189, 205);"><br> Tél : 04 67 14 31 58</span><br> <span style="color: rgb(71, 189, 205);">email : </span><a style="color: rgb(15, 67, 106);" href="mailto:thierry.kauffmann@univ-montp2.fr">thierry.kauffmann@univ-montp2.fr</a><br> <span style="color: rgb(71, 189, 205);">web : </span><a style="color: rgb(15, 67, 106);" href="http://sif.info-ufr.univ-montp2.fr/">http://sif.info-ufr.univ-montp2.fr/</a> <a style="color: rgb(15, 67, 106);" href="http://www.fdsweb.univ-montp2.fr/">http://www.fdsweb.univ-montp2.fr/</a></small> </td> </tr> </tbody> </table> <br> </div> </body> </html> --------------080600050308080709050608 Content-Type: image/png; name="sif.png" Content-Transfer-Encoding: base64 Content-ID: <part1.09060908.01080200@univ-montp2.fr> Content-Disposition: inline; filename="sif.png" iVBORw0KGgoAAAANSUhEUgAAAGQAAABqCAYAAABK6PQkAAAAAXNSR0IArs4c6QAAAAZiS0dE AP8A/wD/oL2nkwAAAAlwSFlzAAAuIwAALiMBeKU/dgAAAAd0SU1FB9wKFwcXEt0j4igAACAA SURBVHgB7Z0J3F5Ffe/PeRMIEMIui2xCSEAWUYggFTQU0IsXqYgUsBRRXIqgiCZVrCxBEZB8 QDCxKFZA0EYRLIJKgUCIFK5A4ALG5YZQFlORHRJkyXLu9/f7z8xznneJkPf1NuZmknNm5r8v M3PW57x1tbIMWQQemLNmXdV1vfU285dI6AP3j9qAagzbuKZp9gA1tqmqLeuqWreqmmFVw7+a XlWJfhjbFcPVW1mWPQIE3cwkodp6zALiXTVz56z5VuJ8KO13sG1rAse9qlQ1UJEcKhrsaZuE TrUyISkUy1wRUBJhdpKzJzPhVDrjAQ8j5oIvIvyKfQ/ZUORjr5woA3RFpfQIsjIhCtkylAfu X7PaepsFTsbc+0eNIeTnkYz9O6Ndg79p6LMUMQucCyvK80EpoCRcgq5MiIPyyndaohRJLVEq 9D9J9wzivQZB17HAswAaJYOuwp5zYFbDWgkyMFOsTAjheSVFiUhJqEePmd/QXxW+y5kEB5pf xwRPCCehkwznQ9MgGoH1tHDmutKFoJ5XYsxfGs0Ns16dxdNfAb2S8cAcJ6VhiVqfkP4vtByo WcCmuKqOCUGoDVDIlQGX0gg6wRKIRJpC+xVyhqQwhJd2dem7P0Wo2UHpISlLaI+kfQsr0nZ1 Uy8mqK1BjaS89kCkQMeyJXZpiQwUuBUrocIHNjUDsCLtGfU63TyemLyAwx6DdrYTF3VXpXv5 vrtWM6Gv99k1DexWIJwMiLYewwy5f9RqBPY2hL0xTYamE84WU0lFUavVTIGX9pLAOO1VDksa rl4hZ0gKjS7IjnGbMGSfFREtMMQnrxjzAM1kU6AWs3UXaJUMFZrfgfeNjmwOcV6dMoWlEnzI SQexdrCprFmd+STiISheAGQSdkswag0s+tWKnJCFCoGKQ9FqGp6AROjFQA24VxB1EJ8IyyGE OM6kHOfCYxp6Cepc+OpbwSYnOkpdBvRaCB4iO4sCrsQhldFhm2ityAmJ6ESI7C9BcCFAaqXg Bay/vZYrjhtKxjbE6iyPe/Hp0gEAQjibcsPyQm40wQ+D6t+YBeciQzPwFZUVOiGKgKJGzFIs aUQa8oVxCVJOVgakZOTuWeJ0qBOhxeQMqQPSumJxmk//mNFjFnxXArjHNYzMaR4s0cXk0soK nZCUDKVDy4eTEUFzSBTglJ/uEM2N01sDae8Hz3vTdURh0QGZPChH2pEGH3+4YdjMob0vt1Me Fi4ltu+xSch+yoqckOFpFMttHbBdcgZyTTB1gafglsKFX2lD9yl1CL+Dn8Kf8Z4bjHwdNLh3 Vc9F0NtYoh5VIpalrLAJIUAPEpBpROyP1D7DbEdd0QU3AsxdNNXxLFIz36eae/+aW9N9F7SJ XHTOQRtiIODnofobzsiUDN2CTwkE/SrKCpmQ6XdyTTGumk0cDn8lseAapOq+BtENQZagpvq4 M0EOdIbKIUPZoPh4kI4ZpDJCfwzJmK3jBQSveImyuNZuhUwIyWhuuFNxKxFsudyrSaRJRpWS YiSgmC01zzMi2Aq6MkIqAMSBWwcRBZ4DdnXb6G3mXypmjh3LnAzxp4yrOXDZG2uxg+FR99y0 7y6DUjiwlv8+jPy7SVlpFQ7m45gXNxH7NZWMdFB3vEhJSg/POupag3pfEjK915lZS9orbw44 Q8ZjpCYmCcjGaqws3vuGu3T7YCyGrA9gGBbavlDpw5sGkKFKt5hieHlgBUBQaDq4fP4YUnxZ VfAB67NnhGiISpVGi2VZX5IVwvuwtQCiHsaw/9VN++zySE4Kx41qNKemIHfmVHXNJJeu54Z1 2Xha+Kn43Y69t0iuaAdbBkyIzimUDJXx0+9aE3P+Du//FrXbgFqb/ggM6/FQwVyVZLzXVo0o hSaHPeMDLmJPORo5qAIJJmFJYGZqdQWyAmACi8dZkXJKkKYEteUYa2uD3OrrVVH3SVBfg1Nn YkuUDBXG4jbsaWmQuRI4dEbos1UzuN54SThmiapBlT4J2Xu6TzpqRk2z9w2z1kH6RDad+nGv RaUVZEck2xXGypOuOOBMDo9aQY2TThjiirM5QZk9IYp49TN9AdoawzsgujnJ8CS4NLvpneAp 0Om0V2PBcjq7rWSbyDKrLGBaaB92x8H752LRtUv7dFmwZSldCVEySITkNEzhd2LkP+PGVkmw DnSypnVCniCJQAbLZOwtTpgFSHirq11Q8t4XvpEq+ZfctKOJNmRZnbNs8dp58VBg6ERiUWBE Mk4oAyQ3pCU2c6AcxVpxjPMxsVBByPMOrk2a9Y0PT5DWcSkd3YE0mhK/ZRuSZEhOuWBqJaMa f8MsZkV9Lfit2OSqbMg2KzpsAhsTdWpnog65EaI2SjuNsuAOKmA6XEXwRMAmfJah2KpvmIaD A6k6AVNTXcNUQSMy8eQSCUi6LQNMJjBzUNIkIfVaWS9QSQukgDRtcFO/CL/uFg9ZcUJ6JeN4 DP+K9aZRLG3hXgpMdiKIwie1oYo9dO6LMxOrrSLXNNoETzj5CqhQ0pDPolZxcFVlGLIlQSjt 1NO/VCwn6088KfxwBcB9c1hCSMkCpF5ksQuoaIsGN0RVLcabFzLfUNROSFqmmBl3vQtDvirB 1KEfq+xuCrADmZ2QxcDdpW0H4DUk0wQ2oo3ECJyQ4uV/oRMkVEq/cakOLjhLkpXUKNapXYGE nIzPInLCJCP+tTlE1eHo2NG2J/mZSUUe9pRVRqjBlh6SYBnMknXw6zJFFaOT9hKujrVp4IgJ oOCdLefGEtllf1RDFctSII2KuPqQICiwLCtaAQGWCIVViTrHzTyY7Tp0MrVNkwmDKckPdjol vxba2XXgikWCh6jUEXMXoMM8yNZwHMmX+qcga10s4OkV0FxkUWvpApxMNImQQZksD2RrNEGe xIHqeJG446RFHWGpkjTJpItihjNhIcA6ECdThBUe4sxj9fRblgdVkIjUsmQMPOK1KvH3KS0h qYkNJi8KbEwfxsEDhrNccbE3a0tEfTgmBufjasg1WZP+KypJnd7EW0U+RdgFFlEYHF6LMhgd Tp3R0C95dpQTg0izCGqlLCQFAp58bHFMbJkYxC4+lcTgygQ8pmtWqV5qRmGirWyLbHGY27sX mrU7nWSQ4xFmpmQWVbnB8435Q3rnIk576/rvsWbNsEjOhovOizqYU06DGjyt64fZbsXuZ+EZ YA1VtLrjUHo01DZFJqNWMkqQaaa4tKQEKLOIpMhUx6WuXm5Gvrhhz2+22mL4HQfEoClUpZGp Vet9nt1Wvdi14VlBGjPqoqjdsyGMlTW5XXIkncXoSfhidlruzA2/ghqD2EZ4UCI3hGsBWIUA PDCc2SF1b49JobkBuYgFtb+lpVEiuV8F+SWu4p8MkuVz/9Dd1S5zFlYHJOuSE+4pHuqX5JxP 58DVvlipdsmhTQ4DM7/d70hSyNaF9BKJKsIgzm3XaRfxDTq1lb5IkBiSOXX1s+FARwPitZYQ k1NhehBkLcuXotO5CfcFgZf3MnthNao84Ahj5UcnnL0c6HrTQYnA2xwTGOO4U3hClPZdpZPA 7oxD1IlialuHuJ2klJHqRS03GzAjNgCy2FkUjUpiIEHZifuBOhm6bkkzy6TL426xzwI0Btm8 Fkatdu7HGpnCapqWJ4Cz4xlqyq7IGiMyQkec4nCnkAWMhnCxeRqoHdBMG70liXSJjiFriYr1 iHWwczxAukwMa01Q3aibjSRDJwIc2Jf/EsbLOdvqYLilfvgUcRCwEKvd7ggpaq0dwGN8ZllR s8+zydTwZxXu990leW1E6GSG1CMtTEbYkBBWbBJd0D4Y7OnhTVvWctiWyYpdGaNtGyOMAQnf FO9SMkjMHXCKS+YqRABop0mRZGQuIQRiF4lMeFVZQKpTRUIaPXOOkqxPszcfaoxD4SbR6Myi xLV8VjgoHzWw8Ee+hMsGpnaO2wAeeKBGLIM306kXvBkOqZZCExhGM8a0e7E+CRskJRsdiFm9 RNXPpnGgC8Q09UKPM2JCi99PTZxbxM1HQ5frnTzHDVcyPxsrAJsqAQs8410bC5EOC9CYqDVb EjqztMQJRNezCe7M48XO5BLlRKvXVp5kchFYPQm7TmH1GktkOVItKZLI3gq245b8hBk86pzB 28l/zqKThkEXnLUb4WiJTQQXr1RSENxsByc5LnSEwnHIHIDTUA1+5wykYw2HaxEJxi7+p37I NKNxRNZ0MkY8/O6teZDGr60N7cpBlGCySRzx3WuqswlWvMCcqP4cVb7ZKdm61zbYBGVPJC97 pzDktuCKSi6CawiWkZwIHVkB9U+lzUTXqWgBTdZWUliCUUFNcyhdXDcjOWPadRGPaKdDuye6 Yk6ITLPCK2/WqmzZja/zvP2DYK8C8jgie8yHgCjSAg+8Sm9OcLRF0W1hL7gYnyb9TyDzERLz mxn5MfINs2pmZjdz0rjUShIzgRqSkADyJpduwUGkYRgui8fEERhJMaLSK6PfkJPBD41aSbBh gMxpVKICbzIx6h8FcSMgmeVbJ0yAy2D7R/CrSzWbLgctJ4xCRciSIRLzZqS8OStuOxUpCGJ0 uSjo+i/lKkk0rUQgoJrWqFoGN48xUH4N6DogU0jOc9Rc//BUMyVJ/YFKOFw0JPOLQkWio6+7 yVjKaNlhc2wQdoWFqkPBM7z2o0fcQ1Z6WA6G3bTvrvcTrEscnnjXKBR7loRxDn4OmJ3xdUr2 OFhzxAWVI9lMMp48SRCTB083RPnXU1n5viGot9M/HVmPsHRN4mJ0ZLoW8glIFt9fLX1ZS8Qu Azq14P0VT3AJYEsp6DQEkH2gGWg9/MztT9rSn46BYFq70t3K+mSULCDzeo1epjqK4QwhStbb h7AGkKdal19BD7dovGk+5AEFjJIZQokA8tdKY/KkMSAFKSBrAToZolmc4e3MbLHNS71bIN2t knW2QNG0Q72hxd1Ck1ymb6tjCemXt7esV9fvyQdQ1mqOB9VxiiL/7I7jaXnSHLPeCNsLTEHE U8McZ69oHQhcwquY1M5IQyqaDQq+tiDMkukKF3aIASnc2qm2BXQHs/rdksDMzpL61jYZMLxF R1LsvlDqJ1i3gBgX1hpykheJCkYmfXjTL3+3tFfT89FdL8WpkJxLMPAMGxKmKliotAUKmwoQ u+K2OoZleBnUQhsYDTUtLJPTo+CXV6iEKrJRJkIXx6TWe1OKS7MKofgxs2N/IbXkBlWvvbVZ qRAysihGiL2ytMSmdi4iDO3ZZfMmNFiITW7CzDU0tRMi63SwVCEpn8feqcm+rNI+JLNoK08U t9SgZe+0Cxbv6S29BLllwZdk+hgScsxN34I0KlCjYxeUdXU5x5VttHwNdKEaJjl+YUaKo6OZ LM32hQ0dMvVDazQy3hM5jUenKyOyoEHWToiWLR0s8/N1+seh59PI1k1Emo6R7cv6krFUES3I Ap8qdZLd4X9ggdJINCkwFhArFqqkLaiog6mwkgnNHGjFo58nX8A24IWq9UskW7uUfqgLVJsm K0RL21STaJddFmemDSmD3jshWYoMzRdhJOVcdO2EwquNZ2jSxj7XAkHtiS0TNWjFHoPZS5rA pZROy/6ABV8KGti05CEsZgIiJE7JcYIMt8JFgPdhEPknB9nuopGG4iYl0mm9yYrSbxEbn/vF WgClHRTuZphCkduZd5B1PMJNQjRTcuG40jODCzP6B+L0Hqg+gnAfRPw28bBpe5iYtJApK/a+ q4bYiCy9/zpEoslJoUYSYjQjOpHtyBmmBJEsPaP5194SLSsByyiXTdkumharPiVV0REzAA8E C2pLC2pbJ5reqJCwzPuuhLSloGuJRp2SxBnYbeC0HQtsC8zYibhsRJ+XHfTLI0KDYZ4YNJyY 4oiSlN0F6BCbo9CrQQ7082HeRq/eAPU7ETi68IGwBHaRBNViUl1tzzFkT+y8BVtKEb1M0Cb1 qmMX/dw2vIVTMyctJRxSazdKfEVeIg3E0OwHTEj+vUQsBQ2JiVNMHH8Y1dr+bIWbmKvi+IUo OBL/lXAi0glKGdk5UVWt0+Bb8gCSYaZRrU5UkdUAaG+BeYQnOhObSdgEjGaw+MII4RIWM7dj VzAPbj9gQrLYvIzp1Fh3eiNBdqbLkpgXwaXDjUZRjkOWVfolonDhp2ZCcld9ro12fRmeDzDy 9fb9gYhKEfDoFEcWGWxVtaMA2Va1PYqFZRND6odVnl6iGqCE8cHUi8QCZG9Kig3vRTOY7p9M SBauZKgkp5OrGTukdVkqieIkFOk5jO6xxcohzVE0Bijs6npTTttHcaY4P+GiUvSMDkoD8zxB WnvepRx0sZs5kt/SitpMjHwNqKEsXWdZQyl4MLLKSG+q+/D5/0iW/M5bl2wP2Uq/dFqrC07H qFbQHMcsREi1+ynmSzgHPPF4iepFb9pesMF0l8uEyCGOI/o940Ki5rfLWSR85M+DExKN9TjN 5jNTwPvM9hxMgqa4iTbHL6+RUtVP0SwQOC29qqQ4b0M9LVoWLJcJIRk6idDSNYoo6Diiwaww RCgirB7DTlBT6Sdl2voW0Ub4hTOP+4pv9Prw6Bho4hx4KeafoJ1ZEjR9mAcJWC4TkuNEPN6C f9ulKCqEjr989gHEOzo1r7Q2zVOClyKmTsw6rQD3nSFZqfBkKifLoyDlUbI1LUMuynPChBii MlxnTYjGUdmMVflI1+2QAxBGZoOCXHa0STO74C4ZqVqleBr6gj7p9prgE4c0O6rJPpvRYpUW EZvILpaQFB2+2sCdX52ZlVLU0sjt4iIAaUzFTeyor/lFXR+we9MsXNLU+i6HdARvZ4rlGGlk OCEtQVngYGq99CZ+6V0eiu1gydItm38ham8gKnr20RMDhpYSGtaSpXRQqOtfyPj2dYj6HsAK rOhz4FQnEQnkY9S7d2vKy3/bjn3+OV6iTm9ySoCkhbwyR60bRNgSBEOwZ4bMeh1yzgpZZUXo JTrWhhKU7ClUwtjI7KSMTwFIVdBkrzroQhdSTCZZY2m90bwxLXx7XTMpl2gqGbTqZiHmTBOu nJ3RtifJpmyH7UpCLEOIqvrYNbfXfAC5GqEJsYQ3OFfpqUe8tHjJ2NWG6aWcTskypdYyJaRN 0CFd5hZnJjVf2Gz+tiixAnZZu9eUkopQJIM0Qkxj12yZqJwreoa2jRVPgscCBHUZuhZoeZlF wXGyQ1LaSwa0IZyZw9PNqv4pt3bm8fy95t5bZred7rAzuSGdHeCgrXnRnJfN20TyQU/DKNr1 Ygek9c2+ZyEduYNt6VSR95L5DB160UyIcqDBFHNsHIBsmwwK1QquOwngGJs1yRFafC1ZpRki jBN7rMmWreUIEECzOg1BbWaAFR+IUVVVX9KudzIEC5lqpSKB4o9ii511VIcyI4oGejFkDGkP D9qJKkxIEoeg4ksMstu2WXbYLG0uhkWvrVoGycCIc6ItHIFxuBCnZynSEvLU6jif4iOchKU6 RJOT4NF4BBSbqJQsS6uqc1im7kzt7gp5Epn0qulNnvK/9I2X04mgcCTOpAj6RGQBmUFihrZw sFTpCHYrumgNrNQrIpkMNEEFpwb/ohCkzJcg7it2Im0N8owGavcUYMs0pYR7szz4VGSApEhf QHiHif7nhMxPO9UuBepkjyrLF07y1BdaRapUJZjbRnTvTA8NRQKCuuN7N/Fgeuk6BDtsaYqa zArtuSFImK5aOBsVzgikYhbZStsMwWVcjkALZIbwrQ1FQEuQ+DQbqcme6YhD/RhCD+TicSE3 IHVFbx19diJv22O5HTdEn0B9WHsDNMut3QPMRulQ8or5e8sbqN+5MLTHkCUnQrvYbAZVmJ78 K/I6Pma64BHcOPg6Iyktc4lJVVFHI+gxxKK8K6AUD+Fmk5txLFX/pdNc3mbs9UOpYloIlBiL MtyyFchUnOJkToZ11RowLXswAwDA8MoDpYt+sB0SIo3JpFYTUAJKv8ex+/iikWo7g8ZNcNRy FL7Ear+FNYX4IAh+weSMsyy56gpv6sQjfknUMSMb8680d2Nm8Dmlu4TjS0Xxxoza/RZJR37Z aMkGA7QQ0lbf+FCjdi7CqYjMRGmWuh+SgmCo9jrtlQHcxLN464+VoVuFEQpMslCV213m0xEz CHy1AKdAIHWp3QcXjgVQsgCE9KbmLfz4DYpDEApvhfEkZsWNInUyQA64VEGD5DCAB1wIXtz2 SbZIZ7ZJMl0MzJ3eMCy3ocDtI7+a1UsgGdaLbVm7JESCa3+ZswRYBrcVlXaEMzxBZXbZ2oUj SslLO534FFglIMhFk+UXweaznxLbVM/Q/hXY2znc/4xnMddlB/VmDInp0pxx7RreESYiuQy5 WJqlrsXprvpqUFqoAAgG0LFQI9LYJtykX6bC/eobmiGzCeKbFbAue7N+m5EszvIzoesOLq9Z GZ3Je9dp2gNO3uJsSPFz9ZexZwEnVY9zfHhevFz0cTbYNCxVTX4bvrfMfvq3IXR3VJRjTNsu uafiYEez2/8ES4aZMEJSpCjJL4JPr+JmhhW81oFb26sp3AqJ/L4apkHQ6rOyK8vKCKyMwMoI /P8agcOOm9Dl+mHHTay0/SWU3nb27v8l+NBlIw70ewA89LgJ/cK7mAfotGW22wOQ9ws+tNeA 6C/Q2NjFK5pDj/3zDaTeA7eta1n97HKAjoN+6LETNuJUdBKnm6MA6PNLk6dNOft2lPRQl9PG 3sxL6x927IQ3gd9x2tTJly6rHAKwIReZh3PlMvX7UyeXJ3q99ZI8va2vU9wPTZt6ti9ye9MM VR+buIKtN+N6+vffnzJ5EX4ejeyZ+DlnKHT0SAEJ+DbCHqTxGdo/oH0pSdqkv2QsbSRgXLGJ c/aNuMeygwH5MiNhNfp7jzahkF11z4z6NVysHs1g8YVrYu+q4OHnbtVRJOPz/SXjsGMndu7X dXEO3JFtsqW/Mm3KZF2OnEKs+APDlLreiS3aBvS/w44umcjvY5d0DidW40j56mT4zCTqhyD2 oq1g/p4g65OphzKXniNBV7E1wDYG9iywXZhVq2LQ7O9POfsxZBDQCcMZ1VuCm8m1nL4NVhGo xcj8K8nkGvB6aB8UnKTDWh9CU8ZdieyFMqpVFhFs/Uz6JeRuSBCeBvdOtlHIvhx9mjXvYOOv rTV6u9EFGQfRWI3IXY5MRvHEteM2WbUpdm8MfBZy9SfvZP8WzL7LSIJ+ZPo32H4rPLNDkm18 LzbyOlL1Y+BPY/NuXOXsgP53IVeD9xQ2v4JEXEYxgN6HDl7ua+7TRSm8WmHWhXcetXx+jWD0 n1QfW/nIWrUe8n4EbL5uKzxDVDbFoM1FoELQTsT5GTATqHoqhutN9/1hPsf4ujqQAFzLdgSO bcJ2Afz+8jV8e3Fb6nPI3RnFMlaj/sMo5QdADc+tmynIfaPgODaZanu2N7N9k6BriewaSThV ETB9jpU/HdFcBN1r2f4am76FXD1vF+/6CNtfazp2nE//7QT6Dei7hDaKqnHsvsN2KuI2pA9/ 8wPaOyL3rej9LrijGZxrAL8EuWPFhizx7wXdZsREqwas1c7AiEf9VuxREicRsNdTA6ovQ95o WvqrCj+CVs8FXg/+RKFV8PlIZB2sNvEU/O1MiK2I1cVKaA+jdw4MMugaFH4Eoi2/P/XsPwLn BzH14ViwgCDpmPIPMO8MzWYoHUF7CWvoMYzS79FWX7OKGFTj2c9mpDCzKr/khmETUfpxpvsU 9FyF3PcQBBJRb4rcSWwT4NuYJO4DT0VfVXdpHITHwH2T7SPw7gD92gQemdUcZt15KB8PfBfw nyKJGlTr4eT+4PUdyW2x6UP4Ng2+zdC3EJ6v499EZoUCd03IqO/A3j2Ig1aB9ZBzAvDTGUjP Yve++HshibgPvvPAPYR+Lc2LiMtBtIeh+wvQnwLvukR/M5KpFaS1pNVrwbsa8tdH53joJyJz Eu0XsO8Q7mVpSZl8GgTXw/gBBBxFsG4k2Cfh4Js4gA1npLwFo0X6WpxkJvH1hqr+iQBRmmvI +nja/87G6K8/C/XWOP0svNsBm4eOx6iJS8VIbXj1s/4IDjTo3Y1Kd01ZhmrRXi86F4g1pFxq aJrqdrVZKnSn8g+M5lWxA6IokPJWVevTiU0zHT1alnTv5ToCtUCUuPISUn8ZXPxR4br637Qf T/1nqRXYRwkyA2ei7qPthyGaBYtFg06E8E/tun6ZDs/3OZbwkwjBVJBJu1mEdSxZoimFPxSj 12PrnRHTg/xxSOPP6LH084u14Tin751oqdAPcm5LmbuR6X83GrWGj6Xeg5pfv/Jd36q5F1PG M2JsnNSQNBxvprpdVxvg+G9IxA5YBU3N5z7j/VxkS4/W25fAr4czr0XWHtSrAfspBt4oGaXg lb0GoPMC2SAcsYjPeSgoBgcHyRiFHc9Fz0FRAjYQC2SwR3GD2/zqEQihhjGD3QfUkzahPwPB HlBokDyYBVitfxUsEo8a8WqVUDJzeRELeIGE+ZOdAKMmcvgUb8UnU33s+Ctqlspag2J6D8re i8ivZCkE7EnMv5RQ7AnjEzD+mNlyLkvYV+hfwTR9Hlp+TpbNs+MPIPQhLXlAbw5ZSGgaOfcc OBmrpWgJSdmYGaiZ8BTbDOSeB/wsnPwh/SfY+i3W1smPZFux45E4SCwB0QBIpeGPsVTNc8D9 04MMVq2gqjhNWZYh3j2Nnf8Dtneg92D8/zp65kHmASFWsajICiq9VKfvjq0hmApw6dbfVxFF ojaxVgPi0rwM7h7ieT7bmbT1V0Qf09r6BENkbwzIIwSuZneYfonS37LtI5kEUb9quogptgXM C9m83AlHQJlJ9SwcOBVF1wlGURzWBsf3SurNSVZeR48lOh9E7nSc2CtIvf8WfZa7ToFGCXUy CaCCUXQiW1NcoxtTMk11B/6Mo+/CYPtrZNzJpsAUXgUKgtyXnSEr2KRnCRHcgvp3LLU6S5Ia TlbSg7y6Xp12rBANxwg/AKvvhWx30abyJrikR0utDv4u+AGNvntcz8JfoXwOLwAADV9JREFU nSAEvGGFqZt9esjODIhuxuirCPrxJOZ7EL/EAfjbEFyL4lHATsHzr9HXOvwws4OPNvIlHAq4 LPEunGB01vcIQPsFdoxYFx08LySZn0aPPulzJnrvw8n/gn8y2znI12jRMUhnZcEVAfDaDv4Z gJqdiEJ+0zCTvWwqMKbBNnypf80yfD4D4AzonkXmdTDoqeHT4o1SPw8s2ebTUp2CpgA3gnPq Xv2Yents+6xspD0PfftRq8xF/xeAb44PjyJrOAPvaqxagu2nA9dZ5mroVBzvhH41bJoEnBMN /6nX56HXMXUmdl4oHHHWSnKxRqBOKz/FrDrNAeRzQxAfYfiUyQupDwI+R2QIP0VwmEmWjied QiA4cDbbAlHgQFc3k+gz1EbeefTPxUgC1xzCmY6DA/zvQd+Go9Npf0K0GF0RWDUp+iO+1cej XZ0D3bWGsjYTiM/gwFPA/gAs0+ALZ4O1Ty6YGc3hose3n7Nonau2S9NcRYL/OfVILF9btW1o 5MtDwK9HzqME9GDkK9nfAPEefLxCPMA/gV3focWfq2hOp/6t4Gg6DPhs/L5CNhCntQLc6A9T KonXczg4gvoqwYn7CfhxJbTMrvpIlsa4G0EQnBgzsyPLuoLXeTjyOwW6WvBcFDyVXGc4My03 JUP4Lvkhp/u+EycR/cqWoG55afYUDdGwHq4TyuwCLLvaPnAKbFhmbfsiWNuP3jYXngHulbX1 JFlTkfFht/vhAVczO0p8pbu3PVnnynoIIkCAd2N73asVxaicuA5MOnAzEzkMUlha2JXkgWCy tvqi0dxmqnXjWjCRhLCOHME6soJYfVFKfAendvDbokQj/pCpVqLpFh98hiEAZkmn4b2UyDf1 4lwUfPLNKgwXqSkKTpBSIEzSIiZBanSWBYEUcbzzQT1OSpKeLjnJdhGD1s/yHtaZBmcRWgsV FBlID6vDFTiSIMEVDVhDn1BqRSSdykiarQm9wV6cFxAtcEmOhCWyQpcboCRXdGXnbmeX7OoA omU2GStGtpDSomrDkgyTA1ftokSaLnGHweAjRh6wQYgC+YPPUpnbqpvaL2ZwFUJsAxeOixEO ibY89yHjT/A1VfsCUoiV5b87AmkI9DWDpcw5dDZLJoMuRpJmR4yqGBlpNKbRpDHBmZN6OihD 2hlXSQp438pOB1ONmW4aiwKY5XB6CKuHm0XkJSKP7LAnzVoPR5ElN1r2mJldx8fsR2CkgTM9 255p0rqQWQuhxCc7PcO0FGomqcieXPIs7DILpOTqv1cE1RzZdbtcH5TRxRFFHwqrniIIT2KM TlkNXZYdZxHcEqlX4RTS1yySobMRmcApntosmbUupu5Ej26p9FuwQ9N5JH4+2zkl7pe0X6Du AmMD98AmjEDG7gyOP6JP1wceDP35SPJHEewXwenU//9Z0e9DxqH4R2TwE7RPoP4c2veSBbRL jnVKpgRpa5elnZLCvD8j5gTRw6fb9ztoVigZLk39fmruAncnQzJjNgQZyRhDi29C5kGT4FTp lnsHkFrZTtVKBqfDm5OMK0nGYZBMAK7b9yP6S4ZEMHInE4Dd1M6y1FZRLPortrtXfOSH+PvK 6AvTKbvu2m7E1J/HlDmB9kRmyqcw5GdSiCM8jIpn7gQSSKPlo8uWElxh81xNFORzPZqbpC7P UCrdw+oURiA8RwmQ9aitAz73uNRMpVnEicYWDJCu6xkhFWxN+f6KAkdgdeKikXUm5usCVAOA pDRjSPBR/fEZxhfrONL+p9q9fUZaHztER/z8PEftXOQHPvaBgy+xzINPs9/GgtMzD7n1QhbE cqNn68fS3wKGx6nPgYa7tBNHoYArTJ5FVPUdCJkGLZ9r8n2rWwiC7t/sR25uIggvIPR58KOJ zDhmywaM6AcI4t2MJm6/M/Lr6jXQT8XwElY5wfKiO6AT0KWDwgKC9wx54omiLqbq4+AZy3YX Nl3E/SbNlAOwaTzkehJ4AXAHs4zMptkexhPhccG+U0nKSHWwZTeC+T6akFQXwct7xb6lIrRm 167QHgyMp5CNnsf8Bp/2hBxQw53wmsFiuO5nSd7RwHbCcgZ68zUG84vAtgb2IdBrQPtDZNyK DO601x8Dth32z0P7+co0A6HvyCPApyqI4Pn+YrM9xMfTVrkAnMJ0GXgeaE3Ym/6bgGspoOhG XX0MMkfDo/tZ0vEk7Wfh0W2OOQTpo9Tb4cyFGLkv/WPoKwk6pikoCs2p7DenMQ1lu1C/ltnI XdX6BGQqiedh+hEES/xj0fdRhuI05D3HltZEKHKa6/qXOH8KfC4Mipu4dXENvFsSgTMBXg/p Hfgat1QYdMBGY88aDIZPM2v1aOAe6gssoK7/DvgkjJ0Bj+7LfUNwAn8k+g+kOQWbZP+XBefA eRrW/ILmjdB+Gb2rYw8yeIZTVV+B9i3gj1ewnmcbTzC+jvJvQXgx2+YQcdu6OoFMzgX/A4Iw BufXA741sC/izN0I4z5OvRG4+QRtAXQqNBvdKPPBEBmrQqv7W9zrqv+NQOjbwHvD+0UCzD2y hntYzXvMqWcMTIMo9TupPw39HBz4Jk6vxojaEHlvYAadjA33I+8MZI1HnwbEfGbKneCwyTft NFM1hhephuZoqrXwcyZ+6MbgpoZX1XuguQ95etb/A4I5HRx/cUg3M/V1iPpg6O5B7g3QXEJ7 AfitsHI+wnkPYPLt+PEN7NPDNp6r1O9nEJwm+1RD/zBx3VeDE9qrgV+D3F9hj27tvx78nejl xmX1WZL20HAQ3Equ72aa6AvS+v64/i7VUxCdhYJdMf5jwN6KkHvAM+r5C20UHUwxUqNGB7kP Q1MK8kqbxPCfEnrWICCK0iYYezYyuOPZbEp7o8RQI1OO8fpPs5gA57Oz+QTqYYYZV70NNk3Q 3WEldkd0cTHVfAkth2IrM6SagtPMHtnFCQjCVRgUuug6BBqWjuqD0N8A/jBqbgA2JFczdKLW dQVRPq2CobwEUq2DrvdBuwZgBnAzBvg68Glp9E1SaFcH9hIwVgceiNXVQ5LBYHqC6qvwHk79 FgbUqYRGA3U89P+B7Iuw5VL0vg7fOCRMnsYXJLi859Y0zPMgLAXDP0tnBzZNUW5P1xpRPDKN 29TQ081FZ7JI6RQ9Q4CUUqB0HZxa30p8maQomY9AppFMLXT5mkI6tglquJZVHn3qNx/1c0Cu RfpLTKZr0azHwy8SFEYy7wBU1ZdJ+n8AO5Hgmp+AjET1WDr3MtAeoD4JGDo5ganr38P3uAg1 GFSnoraG1kjo7mGpvJIOzzVqrf/3Ep8jMVi2q8hXecejXCzkbrShaQecZa+ay+C5CtB6+Hkd 5L9lZj3HoPyf4D4E/Kf4MImDCm72OoZgLH/A3q/XTMKBWxHwCNpGQvcowVw/K0OY1u/30n+W LYyI32MooOGc5Ku45mKRV4KY1jpIT0f2LSDvArd/kPCMWTNIt9Q5TiGbkeeiEbgxsBeg/R0O 30RQbsaRx+jvCN1+OLEn8r4H7960DyJgoxKvLNGflf0m/cWa2ancR5A1cBZAkGeojmP/xAxc F7sWIkvLnQbjgwzAe9F5A7R7YuOqHEX1io9FhYOMGZYlbGPAxAMpArwptDoBeYL4PQH/3WzT IXwd23bo0nI5nJicjS3/iJ4jmYJ+GJMdtwJ2vAHR6IzC6yxOH0Xmt8bhuShcF0G7ixBhE0nW H2nKiF0Fg28nqrdhpKawLui4OATe6LlxOQX+A/CPCA7iZJK/mdv4h6G8CcPBu2r+E9gRggN7 N9UonJkHLce85gOCgzmN3QhsYORWJwkCDFk8ts3vSnHWh8Oa/bw14mOSllsNmH/Cp59j19Xw vE2c+LUDYT2Akfs0enSWR1yaGWzv0OBgadkc2o96+QvcKuIjJtqvjh1q3IpPRwqO7KNB8RpQ 9RN08cbOxA1jefMJkpaz/dh0gqOyOfR6hOu/B35rwGKP4y8D54lbzdO8CUwzXt3hz1Rj1GiY eDWonkR7BtQ/xbhrMeQ6tt8nmA7QZ2GZgvo7gnm3pBKMi6iOwun3E6BjAGzL6JkJfiT9E0XD GqoRq00z/5NUB0FzDbUS/i9smFV9Hl5dZM6kNxdbr8SG7zJiZyN7JgHg4Vk90T6IoZy+Nodg I+v4xJ8zO+GtbiLwFzPy70MOp+4TZyL7q+g9Vlwk5nb2XKn7FdFvA/p3jLoIGf8gPOUeZD/o lo4nPJJGr5awk6k3wb6b8U0DWicmi6hPIgZXIPgntM/Cvgew9Sz4dof2ehYELqJ9EgCawjRl 5MTVONM9gEO0R55m4lILiS94glPa7QaGt7tLbYs20+d6qQwtpA7uudufLcgr/jAIMumAdX/6 0VHoFfdcagsklWSMAdIpwJkU5IzCqNBBlbafpWtZ4o1Hxhn/WcYaGQ1SxyMXBGnuwgUHfJKd jNIJxBJmhO4AhFMQgvesELPo6LuGnRlsIV4LZIcEUnRr21qQZV6cAkYBD4aX+MoBPcnjqt3X RHLLlup1Tkh9RsXECEYw5kWevG+YIbJFQuWSHAOfYPDatwio3uDxN2MA65ZUhINjDUuwz+AA 2DjtxadJgEBeaZLJIm+W/F+0GMgz7QPtAgAAAABJRU5ErkJggg== --------------080600050308080709050608 Content-Type: image/png; name="um2.png" Content-Transfer-Encoding: base64 Content-ID: <part3.03050605.01020105@univ-montp2.fr> Content-Disposition: inline; filename="um2.png" iVBORw0KGgoAAAANSUhEUgAAAMIAAABqCAYAAADuro6yAAAAAXNSR0IArs4c6QAAAAZiS0dE AP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9wKFwcZNn+jK3cAACAA SURBVHgB1H0HYBXFE/fe6+m9QkKAAKEJCEhRqg0FpIkiICJFmiK99w7SuxQB6TZEEBRQpErv oZNGEkghvb6XvPt+s3f3SgpS/9/3bXLv9rbMzM7O7M6W2xOYjZu1aS/7ZvN+tVkUmSAINjHk FXHxMHPaoRX08MLdpDW72N7jl1W3Yh4KWo1ahm+LiuOnAKLBDv8r3SexK1umsRpdJ6rik1OF wkIzykBJ8GMhncMqTDu00i6v8jD9u9+ERdsPqFIOLi9Uwp703qz/bLWjQVe4f/HwJ81iSdd7 xnfC6esR6mvbZhRYAp/I4ye8M3ikqlPzeoX9OjZnA+ZtZqtGffpEOZ8nUWHmDqZ26cJEyInp wYeqwoyfBYcw9tQ8IxqyLzG1xruFqHLuaNa6f/U8ZD1XXi4qxy/fZm/0nSWwMxttpa5UwO5v DRJetDK0Gb5Y2LtgyBPhJ8JAAyuqDGU/GC7E/rbgP2HY5p3x3R62/9RldmLNBEt5UcEO7Ucv e/V6xIOKBr0m1Gw2+yalZQl5RpPo5uSg8nJzLkRYjLuzwwMfT9crP8/+8oIlMzxe73zF2jd/ la0f97ltsJ2/3cilbPc3g+3CgNfQaujC+plZudXyTQUVcvKNHokpmWZTQSHzcXdWOTroc0Um xjkZ9JGvVatwe9nwbpftALBQNCQ/sTZv1LYPfoFPpoRBTOtn3wgReKLdFPdmZbEgugqa0XIC EwJFMdeFFSYVMhH6rfZUCSq3fFE0xqKRjRPUgTEa3w1XVPqwtKLkmRIGA8fSosEv9ZkrgoIB PUIoeoQe6BEKQKyNQMErUlLRBc3srxDAk0qeF3lHj+CCHqEXegQP9AjUOtrQJ5rxaAANtxD+ A1p1oy1umx6hN3qEUPQIOVKvRsUAGJFpccvFw1zQD1iMDVm8jS0e0pW83M3ZtLfaj3+f65mR ndcSQhgCGF75RhMzFRYytUrFe0mzWWTQAobWnznotQxCmuig110N8vXYu2FCz+UVygbwVr3+ 59PY2Q2TFNB29xaD5rLDK0ZbwkYt+yHo2OXbA+OSUt8GzkoqlcoVNACPLV4zo56a8Oo0GqZS CfEAcKlCGd/9h1eMWomy8jKxut1ZtzZN2dapX1jgvyhP/v3XmT7ohB24/Ni3mommiK5MzKjN zDmBiCxLCURzjl065UFQ6eCl3l6VzgR1BBMcwgVN0AFd0NkfUIZ8JV1eVBWm0gYxXZlDStBL vdsIGmNQhDZQhD1W00jWBVmWJIESx6X9tXL2y6AKilBm74nLF25FP/TlphHHq9Agkyqwo8Dd BsKcaUuDjSJcgiLUkkwjOQ8ESLKTyMN0UKKCmt0mCFe3zuDAt/7xr8ea3Uem34tN7JWbb3Ig wUeLT4JfoIKA4c4BkSlAXnooNIvQCTNqVNBo1CqmVauZQa+9W71C4Mw/Fg/fSLRV7DRa+HXe V2LNilw2KIgNXbyDLRrShftHLf/B7ejF29Njk1J75OUb3YymArSspLOiCYonFsVLmUAXVY8W aVQa4NTBhERPcT20jO/EQ8tH/sIBe7/NRk35gs37sjN/fN4fY3x7FDhK0AVd4vwyJU/zMOfs 6aYT7n7B1KmVmIqhgZIdCGMFzFhgZCp0ZNxZrWyBeg5SWA0ubvtKrMWj4BAjaAK3M13Yan3g r1E8I34Ks35naufWyuNLuxNBFocK5gWVAmy8vCSWZ4vHkvHFeorYmiR2QMlvhFpu+UrHKbWM dvFyyQQMHTB2IKcoQZP+szpPWffrykfp2d6kACTmKK4IISOMqCyReATE8rgJUkido4ouFa9L 1K3I8k0mIb+gIPT8jagNDXpNb3Fq/YR+qOS8mreiCQ7nWZ3PpliU4M0v572z4+CZ9elZOVIL ChhIL6KlJ2HRSAIilRr0AAYSIAV6C8KHaH5nMNdgshVUu5IX+3PVj8etur5j5teINB290BRo n92Z8y4xlaE2M8IUyr+3grk0JrJEfW50g/4sc/5onT4jIDtDYHcT3FlCuhPLL9CCLaLg6mBk gR5Z+tCATFFjYEJ+DuXj7YfMQ6Uk4AmFoCyMmUCoKVg0ZowWChNH50WWX65yem+uzndlLCmB Mf59QRe4j/Pw2Uv0+Jx2isApVdJzMkEjVaPFEdH/KYiW1M/gocIWyPnQJNti5y2JGswjaX0c UxRFsqbhVh7X5gJnR4OgdCUNe8+YdzsmYWR2bj6ZPiKZP+So5uhGP/hFNZIHPxSi+OnB8swU AWW5EMx7cYk9GvaZEQA4rSCU5uqfTGCpmdns4qYpBIjV7j7pq+sR8Uuz8vKhUBwgFIBUiwDK CsdT0g9HQj/k+J0nhI+UBRfQiAJ6FPbgUcGA13pNJ/Ok/anvJrJPJq4Wtk/vr+TlAJ70h5Qg 8xi6T3k8kB/bskl+pN8cB1Vy46RMgW39ozb7OzyY3Yz3FO8/coVCakCLKHo657EQn3SxdrlE 1q7uXbFtvSjimWiE0QOr0s5xaZLLRMpCkWJhCrqBlC/NmTva50dXm6Avd32TogTGh58ynf9m Oxgv6kGq+ZKgEVlSS0RNFJGLEOm/pOQvMUwWe8JNRJErwlEKKR5EieVLykcC8+D3RdT8sPqf T10Z9SB5ZE6ukaH1p26CJIqnt+gfASVp4w5xlggeoDzxBEpewBIx0C28Hf3w7Vc/m8JHfOHb Z7D4vYt4ppD2I4fFJKYszc4zkvIVyuBlAoFBKgenQ8LLweNZok0K45RQvUgXAqmnIJsJ5l27 Wp9OWkDpSAkGzvtezvLkN2PiQJZziTGXJlKe/Oiqw815/x7WCYmN7yUYCroub28eurkl2/Nv mHjnvjen1dM5V/BwyhNMhSp27b6PsP5QbdZ9RRuhy5L32fUYN0HnhBEBhlmASBd3aJ/Ac16b xAZecrojQQEUoqxovLUxL6rij+AtN71ICQozdijZX+i9dEUgshTporrg9UFhLxT/44FZ8MvJ OO7SCCghXOYy5QYziXQ+GMNAdnbUg0cDsnLzaNBJGXnlyEJJPVEBTCixEIJGA2M84I6uCGYV LHTqcdArSS0xgcbF9UURagg47GMzi0tMHdR62OKOFE+u+ifjh2Zk5y6gOLCTlI/sG8pLMArx U1BgNgs0PiFclI7udCEZKbCksPDIWMnHcfM7Qo0wzBNTMoY1GzDnQwpbOaoH3Z7IFaTM5OnM ySsFR0w8gTbn/MhyP4jG2/OZOVdtwvyPh5NRM7/bYdWxSdvYqgH7hA8a3GYGbQHLzKVBsIAe TmQOOhNzd82BuaRmO09UZe/M/oj9dLSiqHUkWqWLqoa4zsWKc1D2U6jA1AgHerDaFPFhfoTv eeODbmFEnClpgMqUNIi8L9SVrgiEhlNJHqIUl0wwhfxPnILfDi+4xxtHewqUpEVC5Q5XCgV3 8xr1mdkPPcEY2NbcHJKFlxKA8VzYSTi1bs4OKndnx3hc1/w83cJxv+nh6pjmiPlUKIMGCoKs XBl4Xhv+EByYSgL1DOx2zEMuXW999c3Hj9KzFnIloBJIRj5XQLTkAsLVUCCNj7sLg/kW4eXm dBVTpuEerk4R7i6OZDppoZBWxaEWlHJLSkQ0wCugd1MVQNlYakb21IOnwt0ovPfMDXT7T6fx HM/EfxkzVIOFkn3AzRhV7g+xILYzCSRAY3aAMWdDgVgrJIW9Ue0h6//eNXH3mN/Yxv77WfWg ZJaRq6OiW/CQQrjBVIpPdWa917RiB86VFfVOxGeraFHVWuqOHnh7RZXBi0O8BOKkaubsXQfy IkPCDBVTzVqfFSz//hsWPC/CYzdGsAPIqSPKyMmFoxuV4n/lOMeATKHFjmNPQIS1TqTEAvOM iE+clW8s4Eog1xoxmySaTCTm6+F8z8lBt1Wn1ZzxcHGKKuPrnhFa1k8IvxenTkjN8ErLygmG OdUJ965ZOXmkDESfxBSFTfIzteQYG5RrN2rpKgyi3yVzCGMCUgKudUDJc9A0LNYmDqlVwtYA b/doAIurVbFsrl6vFe7GJuiSUjP9802FTZPTMnsnp2VVMBXQ7DaHQ7RziZG5QfCgC2oxISWj 2uzNvzfD82/rx38uR5d+u3o3lm3e2YoJja4RbYb8yKC9rDDudfih8dRzSWigDCKGNhZHI5t2 jSNZLYwJPlryATt7L4C5OUoJlOqi57RsAxuzvRmrEfQzBtN5DMMyDKwkMIAtVTEeSY+oEOSV cZJqoK3ICRLEuAP5MfXe1gefu6UPOi6lekG/pSsCRyBXMFUzUcfvMpkviIAnAANGEGK4x9JQ jC4pE29heC3SfKcmL9/kSa01HBcmCCu13szb3SXF29156Jv1q/4ye0DnLAlhsd9IhJzD9Uvr YYt2QHjWpmbm+NEYmwTTNjXBJzwwqfQnLt/pTz2BPBVLrToqVlTpdVoslLkcDfLzHPPH4mFn AaPgqgzkoC0wxu7i8fiPf59ZsWDrga+hHFOhzAImtrh5JbVOvPwAK5K5x7AOwtIysz9Fvt/s QZX81HzAHOHRwWu8DBm3y28yqOLfICJlJeDhXGApO/VGsoPFKGZh9igkMJut+Pwge3vWx9wk 0mtg1nBJ5glFV4d8djnGl32LscPU7qeYOQ+9l6ViJXgAymuL6plXNW8v4CVTCZ21KJqCYCod KMz8+XW1S6fYvMhQwVD+roUWhaZnuT/GNOLwiR7OYa4FnLoXgvdpaFUGpVIemZriAIrRRdWF vGhjlKbJmklSAjRvOp2GhQR47+vbrlmlM99N+t6qBE5s8Y4D1hzwTVwtTdNT4O8Lh+5p9ErF t1ydDEl45D0KhUtOaj6BhOb9VWQikYASUsTTSgBXghoVy0zGdGezP5cM/xdRfLas5/T1ChB+ /+vsdWZo2pf7O7d8LR3TstN8PV07OTnoaWEPukUKaCmghTs0G/UoI/v9g2evOVDmczciOIyS ftoMX8IeHVzOGThyXu+VyWmpH+m0fBwjiSrVgMRFDp+KAjj8AhpBgyWPgjwm1K+azPq0uMLy THwGibNfSYaxPI0fhD0XKgqR952Yo563bxK9BJ0Aynfyc2KUkuGOWpRk1ZwSjDHC9+CnjpTA +KADJX9u9xhFINhEDifJisjCc2vQS/Up6CWWPQZViQmQ29pS26Sg3gGzGCoBC1G7Lm2e2nbs Z60xb8dYs/5zZBzZbEiXd+zwTe/fkf1+4jIr134ED985Y+C12pWDFwAOb/yoAZUy0I0Tzp9J KCUdwIgYwuvooGPBfp4DsLo8TUHQb84m7t04sbcSxO9v1q/G8o6ulcIqYmEL7vr2mb/4e7lN g/lGNgOaXquj6iE6CDtWpx1/OXyhIcVu+eOUNZGNr+2IJWzvgq95iLr5qi7Z2bED/N3TqTwK 56lQ9GQVfyk/6bZUSCRAh8dd5wa3mAMGz2AvyoxoJOIXYl0MRvF6nLd4JcaHCXqeXMEhPdAT YCmOl4Vw46JgPBNOIEtskR9dfgKl0wXsYvmxzcn7XK50ReDFVqgCHQrJyv250D5hZpIeIsGO ltLylkCYlFvqGSgbcRaOuEleXw+Xi2hhPwIac+8Z6/nq2JHVY3ia0n5av16LRf86X64RBiEa shSD2YcET2qdpZaS1yjhoT8JL8wks0DbI8r5ey0+v2nKasLRZeIqjgoKVRpKa/i9XxnGG/y5 QbUKKxx02tswssi8pcLLhZPooAey3y/eiqlBGU6Hl9wj7NmDxQK4xTsOemnYgyVO+gzm6MTM mHzi8EA6ejvupzuvC6k4vFgWnDyugAllvDIFGjjnm9Scx1IqJAMMtcos5OdiPTrBQ6AterRr BSAluDL9SEkwec1TnPJM+YkOBKD6oHWFjyYa41o1Jtr1Zf9hpoSe5H1mV7oikDrz0hFs+Ikk YoT0Q56X7yT9J9bIbY+CkhOiPMh34l9pTikI5yQ9CNgfxOqGhXwBzhaUaTOUrZ/Q265lLQ2S Ei4LN9VMbrC/169omSkKlcU9Er1cYoiN/BKoZ3B20J87vX7iMEpcocMoYcf0AeRlAzq24Pf/ +tk9bzBjNbpovh37WSLMo0M6rZp6BSo8CCAaZK8UwLJz8yoRTEwVl8ygWz9RNNu8/+TC/Pwc X8ys0ZIlkao4GifYOl5QJYCXFvE8CQbSznqjWN47HfuzoAiSrMh0kTQhlbqQYQFONGGwrIH0 IUSBzwsBuASf+MfvMjJLX4tnIqdQLMxk5vxL8xU6tH4bWWE6b1uUoKe6l64IBIaXjjxATyXm z5ZAini5TpG2YliehgaZlQRD8tIYkHm6Om3FghMNfFkZXw+6PbPDPqPfDBj4khKAZCtxXEqo 5kg/aDpHzcLKB6yh5zo9Jqu+n9LHhrgnR1/n1So8MZTqCuZcpbrhITao8cyfBCGIoqTOkSey /HSb9C1P8uHYFdWx4e9jTJqy5ExHRrNCtMFEJl/hm5TPioI/0yMvhOSBslM5ZTuJp7AUkbf8 2BnCMnJ02IxEPaWcWUmCZ+CkUHL8bvlR0tAdg2eeojClUX5MHcleRIDarT8Pfpaf0hWBc4HI wCXfngXBc+Xh4iNDoE6UnKV2pMfH/FIGXLa9Gc2FmwXawenq5LBTyYtBsuJ9qvvUdbt5eiyc 3YEiYNihtMwWMLwnlfSD0c7R1PXjem2h2P4dWpjfqFXZkvBpPMDFmQGTLAbly7bJC3wUhQpD i0o6ic2LfhSvxXiiqNs6TVIErHWMxIBer8VMD7ZMCKnZBlHAlI4lvdS0U+F4O40IiuMX+YGS agqjYewWxMoy1hNoYCxl5zcSIGseLk82sbbPIFnKiDvlIvj0wyGQH+EcF8WJRixBxo+TQNGz lFV5fpp76YogYybc//ccEWFhgUSKTYNrS1epPCDyKZKDwmAA05YQpJthIQFXKP/zMG9yn3ac hFqVyhZgLSBBpkFmmD3fSCixO/Wvsr4euZSpX4fmPO+z/Ph5unLg5QN9HsGGySuCCSC5/vHV cGwm5FtKsP5gh2ogXuJh7IJ52OLtoelZuW9isQ4zOYXihUh/7B1ygeYojJfYZ5fZ5gHFskgK tdOkBNdifRhNn1rsGTk9JaQwilOjZyB+SdolJeDPNrAtXmTkZeQAUJUSTh5kLkyrJcY3bElp I652lnoKS8Yn95SuCByGLYuJGtvnJ0fyzCmp4IojBZAZoQTZ3sm0LeKobSGWWaoKQi9vrBPO YXYmmtKTgD6vwygw02gqjCWzAA6EyLQAs6JodC/j7X7keXFRfmxT5whuRD6IxtbtDBuDntpL pLCWSe6lECzTJBOwUn6T7c/T4a1y841lEWyi6c0co0bYcrw6NpmQiSMnlgAShzmXAV3iLW+f OToyiTifD4eXY9GJruiJsJWdpNxKCvmRTxA8nfKgDFycinJfqWVCLNUo12mJDgTweCqKklFg +TpjXuRnlKKC7if7QkrZnuj3cYoglwI3pZPi2J8Z1xMRZJeImg8qNTGcC5eCW7nbprbluByu BMkVBmEQaBELrfc9SvHReGnGxhbKs/hTM3PzsWUjzUapZMyoebnGaHwAU0ZZL3sWNJY8b9Tm 41/2RYem9DIEt72lSlL4wiuMp1dYwKVUhhD98BH3gR9a7Et/ixbf+BQwQh10BWzbyarsSqQH 02AFAuyXQOBXLoqEj0JxEUaqIp2BsbQ0tbD0z1cFrdZ23gG5JLLACnhgOpXxzOTTp8qUqzWe k0U/Ek5CKfmsv3IM0UWQdVDWm/GuTVlrMVQIY+ZtB0qeJrZALsVTuiIQL6mE3CmMVZ5LgfZS g4kDuGRGFEVVtMWziydu4p+Kg20MzMfDJYHif5gpzdjYpX2Gh2B/TwGzN2oLuzidVkIxbYqV a2eWkJoZT+D3HLv4DFisWfBWGn9oXDNUFmCqF8In4yyxmqyBfWZ+x/N3GrO8HFa+m/EHsIba HR1a8pQsAxu5tQVLS8XLRs6wkqhnQHYqnyyY3E/P1GsYsJnODANs1Pbm7HK0L9+ER7CsHKCM MOehBI7oDYK9sRQNJ2/LlpIhiawQFCX5EcaD6Ud2tjRQL4RtGua/r/mFsJSNNSnJih//UpI+ 1b10RSC9V0ptsTuIZonup8LyrIkJr4TSlhUl0qA0HXaorLm4j9Jgq0Mm9u7fsUv3nA8FmHQH t6zYlCqlWkN9Y8McFrdy4zKz8/jAtm2TOs+FUTbB+BynTW1I+CWlt6WF41LmKOnh4LKRPCw5 PTs0PTvXHS8T0zQPwFKVi7TwxQ5cCWHtF3Zkp6/78qwGDBswxwDFo5eWMHevxbMTFAE9wfUo N/bR0tZs7V+1RGcsmpH9zx0nziJHYna+VqwZnMRqBiWLorQdiZJJpMn9BnJSZqp36ZJASXKA CCqexFYm0vg/O08o2H/Rh/l7P6xPwE6sHU+3p3bFpxIUEEQAdWUWwVdYLlGmJHupd46e8MLD Sw+/opzFEJdIlxzIAQGEiArUFOLFd+PZYvlfcADHzBnI8WKAXoCBsnjtBaCRBYHWD7jUWEDy YspF5kyzVJ4lia0HrHwN4wOpVwEsNBTITHuVRIE2yh29UZa1nteJfdL4hvh+7QhW3iddoBdv VNCb9Bw9H1QfuxkkrDv8CotJchNdHSlOws+ridNDGGnXnID3u9WsQcWHYjnsS8rGyz22faiU yiptSsEAR+rsiTJJFEhxJGGE9EYmuatO3vZHj5tRTRSz9YLgZFUx28L+h790ReAl4eSBBFkY +V2i4T/gvshoCb8kU4+BW4wuqRVRpAY5qUfAfv2MrNz8uMcAeoFRsiTgptdqVT5uLsWIfIHI qJoIYcmuhJi0jJzKck8qVTAnl3t5alIGWiFevr8u23CkBqvknyZ6OuVCcUQRisAiEt1Zcrqj 6IAexN05FxKrFE+5Q3jJRIJ1kZOvZX5u2VCq6xgnUF1IUmVHLAk9AjgFdIenCNmWR94ronfa eKSmKitXzwK8WVjvWT94ItsDO5hP+FC6Ikj6p5CDpqckyp8QyzMnkznLi0/sgZNv0oPtr4VH SqA1g9wwUwBeHsuJiEuURotKyhd/l3BLLRcnjFpvvHTz4jFZISrlBT6LRFpiLe2aJQSrzXn5 ZeRMJHSSV244qHOAEMMMMgtebjnYSySwm3GezGSGNQ0MZP4YMLCmOCzN8Bafdyg28GWJhhrA JIUidMCGvIZhiSw/jynmE+GUujWuL3hSSsEjJGBSIu7nsUSL3kUUrtzxYFuOVxN1GJzn5OV7 Xb0bg+H9s7nSxwh835YtCYqgKfdnQ/iUuYAMNBCHOQuU3E9IAyWTlYByUh1rMT3SrmmdxzQA Co7nusu9kRUGkW9XBGvUi/KhdFRguqQfW8A81CYA9ga9CRdoDVKok+/IICkPbSUn4cc6CATf xWASXfCCvqPexBfN8PIeRyYpAWe2BRXxG6aSmJWnZWHBieKUTic4ZbKuFUUtBUu5+S8o4Xf8 8HEEUUYBDjqR4eAAcdiWlpiAcMb+rQLQpvHGeU8YyTybK10RaPuyxRFLiCwiwybYEv/SPISU 8NojJTKKuKJJeLSSSxJL3uZRVnqd8SW7xxkpLws1SsvZRaVWSm7FVYRnf5y6qnNzdgyVZ9t4 Rp7YPrf8hMwcIv1QXcjBFjQ8krJTnPwA2YVe5BnV2NdVwOZ1PSL4+eYzeomf0kGUpCaK8ki0 Sfnwq2CjNDwxao5Ejy4HaUqXff39m8Lh68HM1RkvRyGG4tDjPnMDV7oi2I7DOBpg4nTR/X/m JGT2rLLy2oYMhf02QZyj/Jny25fHLtkLf+C4QHqJRL1wbApAIOTsoh/uUSL4XRZPJexa5AMR 5gT2i/IIpC+SQAouDotbCgr4otlIHAk3j+fjAmOhWpz24XHWtn6UWIA1dZoyJcnll5JYQs1b O8qJR64ClIZDwy9tqaKZq0JM0/Zb/xbbdLSGSLNb9MaOrC9SO60U8CnvpWuQPIqS4MlMoluR xvkp8T02uSI/1kRSLVl6BJkMa/x/+Hh6yw+vnf/I8WKiqe8hPpFcyEV4MYBlKCWXBAjpn0fy Qtvh5DJqDZFnnGwgkVehmdIpIJQeQMmLZzmpFKKk43l4y00DWSNmiApgUkEJhKHtLjF6cQcv /9McbXEnweMxnHzed3OlwTYRFXPS421RTNeG33Nno7Y2Z/vOhzJHx3ze40hKIGIGCqeM4SWr Z3WPyWmpRUXhnhXHE+fT0AZ1e0aBRfinMF6R9pH2gImbdq5YgF3sy30gnoFYpfd/wchKZoNU XttfqzSDr/aZygV4CpjS1clCbaWVpyMgdFGeImXgYGxhSQilEtJbaIzeUBMKMKCdjDHB+I/O SnvjaKZISmT5RU4psxRhVVUZtQHCLziaWXy8ge38N0xYtL+eeD/ZlbnAHMK7DbBTwGTkRdkE vLpqxPlUthsQLXiexFO6acTJ5nSiBSCSJZoJPQGmg4NftEvJyOH2u7XOZPwckS0bJVrs8dvG yxkoWUlJ7TO+nCeO+3+OXJaM/y5S5xb1TTl5xmiZ1+iMQauFXEm8LAG8LJyXUm9gMQuI5xgJ 8KEsiYjAMvN0fBv2N13/YZM+PIPzZXCGjknSQ6VeZVGS1IzAynjRqEM5YQJhHECr1Q9SDWzx L7VZ+wUd2DCco5Sc4Si4Y2UaSsALCMxEADcksMs2xdfDNY9HPMPP43oEKzheAplaRd4sTLMm e14fTmtgdP6n3DMCnFRODlfBW/zhcWgVUEoP+ri0Lz5Owv4SOFUSqYRGYRLnm/JQUmLY1oK5 cucxtOUjhCewcgpgFFgKCLnptUDi4UokqQJNnwoZGQ5ikF86W/TpX6xT4wiaJuVjAuolSNhl RaDOifMEYbRZT8Q7UtishAvybUSeK/d8+LoFnaQXmeSG3kWFE/SkdQrCQ2RYfyRY2DAYXaO8 V8ZvFPkM7jGKQAgVhkh46XiSCmV8Ai8D0Ru1Kz8DusdnOX8rSkzLzCmgUxgkhwrgLAN+JYhH SIGPh4ZYJY/Uhz5hpv+E+iQJZMwKAU+S5bnTSMh4lfGW0g6g0uraBULmnCtAUQAAIABJREFU 8NyYwhBPIibz2Y5ue97zJoUaYSkNKQG5DCyw1ascL6z/Yj97pUoqK4SRwoVfkVlAoWe66FgA HXY2aWnWH71Aepqa3bzjJZy8XYb9craScAn7lbKw7kAYnDBNi42A2D5PT0QKLyD8MgGSrqkN OnX4rEHd+XvnFPm0zk4RgEoqNC8b/5HhEflMKMS7oh4ujs/3OlcJFNKOwa7vNMTqpKMBx60E 8N2Q1G5QWYuYqFJ2YkpRZ0uvHMephl/R6aJZXuYzkcgloSRaXwZiBU8JfAA6YkFR5+XmcvXh owyKo0z2ZrLCOyUTB4sfwLFtV+jMUyM203VpfIMt7H6YBfjlMSNefVDWDgkvtWt059u6SeI0 opj2SI33qAPZhUg/8fS9AOHozSCWmu7ItBB8Ld5wo8OE6eUeLnmkBPiXHsgDJz8TWXp6XdXM nmsno70icOHjaICUlJ7IByrCBh+UF5ucjC98Er7r6OUcKTanOQAltnFxZ6v+ViLkyCe6yTyT OGh5eKKsz5cI1Sd34c8Hp7TcVCHFnFxLPNzWLwVwibLPgy3Y53CYGd5rzgfr+SYhiUn24KXm n8fgh4aosM1JGWibBe1Wnd75BBvZ5izeQWBibiZWnfG6Mtn6/PB3kh7p2GbxdryrcOJOGfbv nUC+Sn37gSctiOGtfjM/4cLTLVtp+WkkCmRAZG2a4eP45UJAS/AMK0Xr4qjND/B2uh6OmL/P XmIt6+O8yqd0dopw6lrEbYVfnJP0QAyQCSCDLjOHv2D1lGj+I/nFLTwBepuK4ZFxyiYwsJp4 QQTI9Srf/gOaEk0VKNFvaVGUqJd8J3zcldidvQDkCvxioBSLhSKU0kuJOB8l76pfDvPDAjq3 rB+9cd+JcBz7Uh0DVZrix+4dpJFYjl/5QbZ/uDggFC21mI430Sr4pWE88LfwQeMo0QyxwEF+ zAE7UilbRqaaPcp0wKFePuzYrbLsxK0ytDeJdqCyHDonFXD0OnyBCJv4OHjwDMc9EULuQK5S f9Kd04IfmTZ5zob3Nthaf+7gsvEnheUTnkkJCCFXhGOXbrEmtauwX/85n+buSiUh+SOM5ECb zAHqO9Myc5UIHvu8P4pZRHAeJKfh1ShCJ/ODYyL8FIsfC030/AROoZTLo/LwBPleRBKFdl5z LwKgFYbCHmuIjY94xfnEmWaJsC29cmLGyE/fS6j72dT9mHGpjtlAmorBGFpWXm4uWXPxJhqP NK+fAWFuUS2GLet5iFUNScfHIaAcsPcFmERHr/qz85EB7ATs/X9vB/JzT5VZHtqfRC/2YzWY mz2cOCKT02xzpwhF66TKB3AKhJMbGRSRH5ZML1rhaM7joDuvdvcJ2ktbZmDJ7ekdtwvdnSXh rxwSoNZbFyWAWmamzFi8nY6X3g2B4RGxUoanx1csB40NFIcXWJopfiCnolvHRooSlCoFCqcU CHJ+BYYl+H/gUUixbZ//B2iBQsbM602hgmMuyrbJa3/l4UF+HntcHA0m8F7LlUCiGXy3dGtI BwsFgofTrYVMvLTzWdNrwk9DdgtVK6QTDiErVyWs219N6Lq8jfDh4vZs2Ia32K9nQ1k6doXS DlZng4kuAfuTsC+okJ90IZMqmTtK3XITQC4DYeSOMHM0hAoeWtrGn9xaYiEt+73GtXdQ0npV K+IF02dzXBFqhtIrq4xVCfZjro4O6KJkBZBvtqDxYovPoh2HuCJEP0y2jXomf5QMA+VyTMnM bmAHhDdDCLGlgzPFNsAuh/0DJXvCpPYZX8DTS8TLWVAqibL8FIu3J2hqX34KCj5tNfgoFtb+ oFdJwW4SRSmhBYmkGbRSnIs1gmEfnGFr+hxk7t6QObS9v50qz97Gse9fbXqL/XKmskjHPXp7 ZHEF0OIMI8WRZil+S6UoukZR1ljJJwu6NU8xH1RFYH4ern/PHtjpEsWuHdfTCqVY8scH2M0U oGWAlceU1TkboArF9LqduVpMwiP+rmA5f+/HQ3+C2PeHLuI0vDd0Ye/cPJMH8QQFlHBLLQRB UapHhlhaZRdBqDQkcvNTJPZlPsqUPyGdT02JTdVY80rI+K9Fim1ii9MCnvPAV6sEz4ElwE/D 4Mogi6UsutQT8Ncsp310jC3oflTQoBlMTtCxfmveZB8vbctOwf6nGR76UAiEn1cemVD0LgPe QxBokS0txyDQidh0YZAtZOZirIAZJ6ShdQLUOR3BSQcl41Bm+mwdBXE7iMpKg3P8khcU074j GtA4Ggww6UOnK4W0dCJKwFPc7QbLTpi9NBYUxKAWqwIGmgKZodQX0QBeJRTiNUeDudBcF/HX ngJPsaRvfDGbf5Xy4LIRtFitq/zR2D50pAiVXk4MrFRP0o/UYcqcKAatlABOdylxLzdYIpSL RHEBfH7UJcIETvBKwky/5CwJLR4pnP/uXzSML9HunDnwZI2uEzbcT0gZIEdzwaP2CD0BNufp 2NTOx9nED8/gpWYmRkQ7C72+fU88ggUvZ+z5IZuf5vkh2PgmBESqUCW4uuSyCr7pzNcth07C FrAWINK0KL1LkF+goV2p/C03mnlKyTYISRmO+LyUDqIHEcdYgj5iRBvquHLgGfTzItCAOteo MQOmukqQYdPyET3OEs3tRy9lv87FKYDP6OwUYc3oz/JqdpsYi7NwqtJUqcXJXhwbosrBevmj jKyvELeJ4kcs3cnmD/7YkvRJPAu2/cHW7j7Cbu6czZM36D19LD5s8QqZZHSaAqmdBAcBChnU HHC9VOq4KKYSwyEYPB+pxP/OKbQSToX+F4m91LIAGcfHEzwV5k/ebjDlu73HOyWmZtCxj2iS 8b4CCTcE9Yt3LggTO57mUytJiTrWbUUb6gW4AtAsEFlUGrTmVcs8Ym/XjGJ1QhJZkFcGo2Nb aEuEI7Zhy2cZkZijd8HntQpUDHmFnDytSD0GjSdwsBh7mOrEYjGlGpXkxuJSXGiwzZWkADhA j+iCIyXfr31H/U7tjLj2TcIm+q4GY53bPpcSUNXYKQI6gEJ83ugIvjTxNlppMMPSI0jVCH2l Vd/YxNS6ZMqgRVk/f+xyft6/klRK+Pjff87fVEEJeGsEJfgExw1OoaPT5ZfIyayQBZfqElLF BUquV1v/49FISgQGkma9HIl8DAEvU/VKF3FgRVmlePtC01MJriPWcH6Z+yUb/3nbRHz0vSe2 Zu/LzMlX4eV8c0a2XvV+3Tvigu6HRdr9acphbPCmN9mpG0GiFlY0vX4ZDIGn95m7vn6DVS+T zNycMC5QVoJo6ErDBKIK+KkmiTQBb5S5CIXM281Ep+NJk7Z0p3qnOR/ko6lYMsmoR8qTTCw0 kiJWmvPwJSN84zrU5StBOHkfqdmURd3ZlL57yPvMjtBzhw9FyD7htCM2f6B1RvdIdOPi1FNB uGzhiykmduVu7PyB32xuyLKPQWEqCe8PW8Tz95i2ToZjvQ1fygf1rO+sDeytL+ep9iwYwpWg 5aC5A2IepmzDSWtQAmqF5CpEVqne+K9NKCJk3bRCl3zE6CJOEgclt/RUJMlLepR6LsL8crCW UFheEl5fJaMszh6p7KQETftJdY+Tvffj9Lyhjtj2mZGjUYV4p4vfdPuHOeO1SCrJtpNhAnaB Ukahol+aMLbdKXZo3A/C8n7/CI2rJghuzoX8ePh8LKrlZUCQaW0BU6u06Q5f6sLBwNhLhCsP foSx/Hwm5FGaLNwpPRa5TdhrROcd0c5TUiofd6MQ5JvLqgRlsNAymUKAF7ZcuLrNEoSHu4iQ vPstoARPZ5FQvqLOoghlfTx53HuNatzAvPJ1CL11TlnmIlp9aR4NI6Oc3Hz3/Sev/N5i4Nx3 8EEXcd/CoTz/95P6FMXBFgzuwsPWjvucHVo+yjxy6Y4KsEk3X75zfyVOayYlILikeBYFtPYw RSqWhKCEWi1RPyzpisAoRuFLCCCCLPhfMPzSCsvDS0HKxysl0/HJu6+xDqOW8ciTa8cvDgup uMDFUcO+evesUK1COr1LwHKwRrD1OD6uhjHAyPb/sj0jfmbTup3COCCL0eZn2mBHQo+Onbui JHKqZNJ4bdj6FbIQJplOgEe9AuBxRQJsUqp8HOhtLKywX/CLH09Z8u83Y4agw0ru57pbFGHL tC84oPmDu8S5OBkOYEoN+zcwsuGbfYhqSZiol4DgwtYTC/FxPM8r92J/x1fv1+NDFxX/i5IR S3fUqv3p5NXbDpw+i8Wz7niRHu+04tB8SQkAWsRrfVqsOGoxrU29EeEEbkKvKABx+DGVWoQG iegigf+TR6L5JTliRXEnF9UqgXZlf1znNKBjS7Zr3lds65+nONijq74eMapTwarOje6zwlx8 EQeiEIkTK+iEut/H7WTzehxnoYFZ9N6wkIuW3eKAxIpeDgUVRC4nRiJCqj05XMmr5EPZJLrp Dh/+aeiIlhIpVZ4HVV6TP6E8mauxMh10RMn+3He7MQI+UE3f5mUdmr/67abfT3SH3e5NrTQ5 ZToC1PFyocQ45gkNREGhJubho14Q7M+qfDT2Ik6ZPo1xxPXQsr44WcAohkfEqbCXrgE+vNfw +30nK5Hw06daydH+FhJ+WQ9U9AWYID+vzThduhpA15XYShyQWUle7qd7Uccj7QMtQcjPOWkf /VKfFLJfAhL0naVDpfqylNua7EmGLN3ebci8Wk1gj/6Ywcb0WzZw9MPqiXkZmZMLzYUqnE5X uOLzQ2pHZ/TaaKnxPUasEst00E3GydEXwS+zQpF1nlYhk2e1TS8nlkGS+GHeBv+aMrv0ITGf QFbyU3ZDCRp0wZHiksltLeWz++wUgZSAsVrC9C863qzbc+p8DJrmoGmmHoAE1tY8l59Jackr wgYsUD94lF7vQXJ6PSrxjch4zh3y0w5HhVFUToRxE4vIRsG4OaTGgg5erNjUpHblsdv/PHVI 5pbUPlAmi7N7sISWoCByLSGJUlHWEJt8L8FLtUwNBhX+pbhS4QKxEicRYUH/hA3B9J4hbMD3 +Dq4bzYT/MOn5EfXjhZNUWv0mjRac2PGHD7BaeWk1cf5LBdZCeV3/Ej1aCFG8oAkhSopvfzM AymTRQnKLdGHRAylBjM/7h1M6SSKOv8XpwREjcU0UmgUxUucqPMbJ88t5+95gsJp4ExEKGno TgJs2zhTPCkMegNKTMcc4qIBMPnlOJlLPC9gQIG4+YV8tL37AD6s1xNn9VNdYqhE6DgOsIcw wtFd8fMA2x9FAGzClLQUpfhtol+al8opmQEvDUWpgHk1FS+szPpSsykRA7v04UpQmMXHokxf 7tIGlaFeY1Htd5u+fSB35rwKUX1WoQBKmxpQvApae+mhtJxFElYOR1YV+KmuJLNI7ZIl6Kp/ YSgfOQQIRWN8e0Ff5oCoC+YLyQrJL+ReTBEUISXoYz99v1Own9dJKhV6BgqiDbV8UAs/+aQb xcgl4AFUEGVizJY/9v0zdtCKODxXwwK83H7du3BIOwKTm29yRF4CLDlCbmGr4rdGy6lwKxam 5JIy2TxZ87xEH5HDefIScRQFLQtT0WDpuRh/Sk4mh6qdOzDjA2k2Rlf20Fld8LV6Kl3VOYJK n0rLviS8SGqEQOM9G859q+oXQUUJiwRxLDJ7SORoxtBEMJEW4A3Ymh2wU+XQsrqh3NW1lDj3 JiK0ISWB4bCe96eYIhDALhNWcbgfv9MwYd+yYW/irbQNsP0FGg+gd6BWnsfLzCBBlQi0JZPC eEnlKPQqSIeskpmFVWSNs6OeVSzjuxA9QadqIYGYG0AXJYHm8Ev/eaJEVrGQOV46vP/PYkos D/jM66E03pQWXnrZdQE7mTHmdZ5ApfHJ1JcLH6t2+qCRoCn3k6ByyoTE6kAKPwWchFmGZO0l EKCIhCwyXIHg58RQGPLj+8l8+7dWUOFFZU3AMZXhjY8NFR500QXujiGYefc8mC74H6b1WSyj ePG3EhVhx4wB7IORS1j3qWuFYC+PvIvfT+1Vo0KZj8sHeEfiEF0VjRtoKE+Oxgfcq5SUAhWe I4zieBopLTeFsGNQ8PN0uxYW4t/p9HcTh0M5zHM376Oc5Ci3gfsUFZNEmgbn5LCZXTEtpYAi v3r5mcSCYNleFEWwFQrp+UU5BS/RqbSOhEfh8YvDa6WefDKveAUULTOVjdOlCCQFPI3TBZ9g xsQhlizagB9v6ctHdhYMrzYXtJUXCBqf69AHkgHMfJC1ICW1+OUw+ZlTTmmUZ+RVA0YW0wSu AbzW+vLxzdAD/UBQsm+gy4lrywwVU5nasbkE+CX92g2WbXH89s3X9Cj2mvGd8N2EXiI+iv3D L3+fOzp/+5/vJqdlfoEvzjemr8kT+3EX8HEyLvToNclRs8895MenA7jo0VgAuwVvYPwwe9CH LX/t37EFll4YG7Z0hzD60/eVDNSy8HCIE+Yn4KQYCseud74pUElLsUUdZry5w3KNTZSUg4SC YCutl02C5/YqmxUx481bOAUgYSZhxYzBi8JrKRjBpvL445J4ZWmDESIpAafLkoMHP92Pzncx eoYGaJVPs/zo6kLho3BBX/bYBUC5YEzsNVfMwQnBoqkFE/ObobIas8JkWa5IGCTGWzCKhehD 3CAPunBB5X6SqRwPMsHlgj7oeARj0gRLfkxdtT74fKET7XhjeyxZX6anVEVQkJISfD5tPdsw qTfr2LLeQ4RvouvrhdtePRUe8R7eWGuanplTBscousLedzPCQyY+/CqsBeRgoJyDz6DehwJc wPeFf946rd9Jgt1/23S68e8MLxzcxZZbYAirgwt1h2CK4bVImsVbPQix9JV6xNg4S1U3RaDS CiM/ZUMIwZEc+Wxnv5Xwx9437T3GPmvThH2PO9ZP6BwdccznbZU8JIxtcCk1L/UIVpyU7pnw UsYSnAKZ6qM6LolXEqOkR2uBwS9y1pZJen66X1ICcjCPCLdoTBzIdL4rcX2XhOfD8sUKsvY4 iLnHgsX8c+Ug7MGiOQsyBtyCA3qr3DiVJihScHonWuPaCzyjrFaXH10TX9KpyXT+22hjxv+b DmsFpRKG1l/95YItFfvN2dgSe4eaYOq1SbfJa1oMWbytJuJKfNkfK9LF4DUfVDysWCI5wP2t QcWiyn4wvFhYaQHdJ68pLarU8Dkb7Vunsct2Mr/WVrOh1Iw2EQ16z7B5enbvN1v2P3Fm/6ek 8YkBI6Hp4cdPk7zEtKbE4nVZYsKXGGhpRp8Wx4Rvf8EhX3dYQkqGcGPHTKWFKhGM97tfCQ1r VBT9PV3ZuvG9Skzz/3Lgicu32PS1u4U/lo/C51MLPJZsO1Aem9MeTOrb4QEpx5ielp7h/+Vi /E9oI5O4MHUhM+fSUhBMYnMW+gN0ShgICyLeT9aFMbXnTKbSeP1P6HlSJP9pGpUGaEa/jkqU uGrXYfb78cv4UJ9GdTsmAcMFkZUL8KKv24v1q4aIY3q0Fvf+qST//+/edewqFr1vsTho7kb3 qh1HH8FHP8q91aD6WyjJg7sxCfaG1/9/xXuhFCsziqUD/QdRq0uP/r8dQ6ZGUXPDsVk/Vqv7 pP8k7VsowtO4sC7jmG+rZ3+JoiRcoJMP0N/68ptSe7mPJ6wqNa4kmEXD2g9f1KfGR2OTWg9e 8K4SV6n9SA7T/a2BxfjH05Rvx+p+NqUYXuzPEpb9eFABU+zefOBcYf7WP4qFvzt4gfBqCfCK JXyKgFe6TXyK1FLSCh1HWfKArxa/4pnz/e+Kl1X9eJzFT57QD8cU44ddgid4mPu9ZZYRX0dd yXNgG3kxuO1GLeNhuD8WarGM7m8ODMKYtApyXUs7tIIGY6zntHX6X45ceNXbzVn8cfagix+O XeGSnJpZI9jfK/XatumXqRWgLrFql3FV45LS/N+qX+30X2dvYPcqq40ZpYdhwf6PElIz6qs1 6qToXd/QbAN3n89Y7/Pz3+dquDg5PNo6pW9U5/GrqmJBTU/AyNYi4jAXpXZ2MGQk7Ft8oVGf GUHhkfEVEWxCr4PBOL7m4u6sHtLl7YgRXd+L5kDxg9y6Oj2mdMSegNqAgTNv3I/+Nn/wXxTf buRSB2whfwUDek1oWb+rd+4nvJKYkq5CWhHTugArCiZTgYABvj6sfGBUYW5+zv3E1MpY9zAH +XpWxSRA3rV7seHYEuLi6ep09+7u+fcVvHRHY1IGtwqgQY3Ni+Gxvy3kI8I6n04Oup+YUh54 NGV8Pe5g5d6SD3u8ml2NiGuEXb9u2FVza0rf9nvavlGLD8ou3IzSvTtkYW28I+JQt1K5C3sX D80kPK/1mu4Tn5xWKz0r5xa+32wCbMyxCHRKIF/hp8VK8EcDmHlN6lS5eSY8oiy+l+aNAqIk ZgEr+epBHd+8P6F327sEr8vE1UF/nrpavqDALCpT4wimKlBh+8y9xD8Wx9f9bNormChw6duu 2UW8jJU5Z9PvbMxnrSk76zVjvcu+k1drAmfh0W/HXAgrF2giZdh15CI7vX4Cq/fZ1JD4R2mh 3u4uUVe2TLvbqO+MV29FPXTFfjY+MKZpENDGwHeNh6vzccww6tIys+tn5tCmbZqaxSsRYEKH ZnXTNk7qzZeWP5u2lm2a1JfjZ5pGmL78l/sxkdOQ8mGi57wUyWWCFrGUx2L34qaRwLog1TxM OpAxv0HOQdNzP+EqAEFNcK8Lhm/G8Yzi24Pnt8Iz34oBvpHqd8eFTXPMBdefSLcTwjMHCvEd ZlocwbzqYB7NkzGYUV/jO8HjdRr1/Gavhi1H0E+g1Uer0dBMKwxMzhsN1i6o4K9CObqArnkQ 2HStRiD4/HCqJTsOPXzzy28m/7V85Jrp3/3mWbnz2H2pOAjAEadM0QY/CAnDq6Dzbv8we7Sb kwOMU3E74Lio1UJbmHMHsdvVADqNkJBMINbi2Qk0q4F3RXZO/jW8NbcqN8+Yhe8T817HoNdi k6yWNgmOBgnziA4b1xE8mgu8Bh931/mx+OoqxWXnG0ej/IO0jlQsHvYN0hle/2Lmt3+dvd4D ZcImNjVeSDGxIQu3xn42dW2PTZP7HoZQegL/OhysVjMhLWMx8kr73QXWAv6dKMdonU6bCnrW gGeQY3MuWpF8yIwTtNsB/E3AV4K6o3UYCDHoQIqhV2l0eCdXtXLX34m1Pp005PLmaduh6J8g 3zTQUahVCXoSGfCbbmCNMBb1twJ+uurheh3XWR4Lj+yo8aR9GRmA8wbuCbgU0aN2rTeuCbiW 4qK5ebKP6oGefJQPa0MMCmgWiK94d94PXyH1Rdhh4E5BGjcChKpU4wMnBQ37zFj779rxX9L6 E9KwOegdxvR4n305f3PQwTPXf/zx77OvkeLgbNez+HDkV1umfnG6+cB5NKMnz6BRLntXXBGY 4ColEZ1sklLtBeIi7dWAJkesBThB2Fh8UtochDUhbQv7eJwyAsJeIb6Q44B78L/rJ9wq137E LbyA02LXkfPvIGwjLoZdph0hbHQuDWmuEVdZei7r6/kHmJOKVptWLfWOeu0NwBfrfz7Ni1qr sl5uya5OjnsxCCvEekbow0fpje/GJnzzzdY/ft+49/iX+GRqAxcHw9/1qpVfn5SWGXb1buyE pNSMUeg6j7esV+3U0cu3AwDbgJ4mLyTAawvS6jH49Udv9jYUIzXQ230nXk5yDw3yO3Iu5U4N otXH0yXN09X5HyiLHkym6WF3tF43r1OkjUOcK3jjgIaZYcctNZejKH1Qu+H1tTiakPiEZ87b loPmzbwVndADaXKC/NznYXo5Gj1ed9D85j8Xb+2CUteqGxaSBWEIpE/YxialDmkzYsnPe+d/ fRwwiLdYwyn0CS3jewprNT9hnTI7OT2zdVpWrjemqy87ORiuAl0mXrZ5dPTirXJoYFjlYP8L poKC62gxX0GP8hoaoRVzNu89fuHmfVok1bs7O8QHeLkfMxXyWXCqdwOU4PLBM+F6+KlBVOoW XjtH8SS81EBxbUdBKYGsU8ydHuA86QetfxnwSfB2dbrm5uxwE72UDpogOBr0huNrxqaU7zg6 lHoIfBPbwcfdZRcg5YBmt/ik1HYxDx4NaDZgNjX/m/ccu8TaNqlNIBl6pPXUAHq5OZ9Hrx6f nJ7V9sTVO5vX7z3WpHebJqSYpboSFEGZY7ebq6cS5eIqwIVvapn5Qb34kjzNqb+Bdww+vLR5 6k8oeJ6MiTSPd3moRB4EwfoN27Jb4CP1HyFg46D5Wypt+/NUZQj+g/ObJv8KEyWYEoI5URe/ n9Ja0XaeWf4BKGqdiDnbjq4eO0mJC2wzNAlM8z4bHlEFtNWl7yxULR+478dZA7dRGrwJdzkm IWUMhLfw4u1oA4KyAceAbvnhgSUj+lIap+b9wiAoN/KNppMoSzcKO4nrtU8nNwJS7Ix12350 3fhRFG7r3ug9Q3V8/QQqL3dYRjHSq4Q4x5Xh652Vp6zf7dh/7qZgLCyUh4BlQUmdIR/ES3Yz 6kFP9EosLCSg79FVY7dRawAB34Qe7UxaVk69rX/823PC522nQUCNDujdIJDsXmzidCTD4hXL 4pwVBA3eMjuKMLrYK90m/WIsMHdwc3FcdmrdhPUUdgYC/v2+E2hY1axTy7pjR3RtxdOCb/dA b4X9/16rgD1l/CvgaIC2YbV/JOWzdTea1g7Cs1K/vG5t4+GnMDJjsnFxDZD7A8kvNXSIkhb+ UE4Tei1m0GtGnN0w6QhFKE5YO45V+WicE7205efpeuPfdRM6K3Eh7UduhiJ3hwn9KsI2Q0G5 om3YcyxozuZ9b6MRZVj8bYvG7EHQB8PD0XBV23X4fEOkxebt0l0JikB0S8JbWjYy68AwVrGs 73lUjC9e+F6Ogu3G+wh4h8jeQaB5EFqlQ9BQEz663YxSnL52700HfK7e093pNJLk4bQ9A+4F KGRwufYjDwS1G5GBZJTXDdq95OG+xVQQWLBYm2FCrZkb97amTx+dunqv0sXbMd6wxxM6tnj1 5u37CWcTjRlvn7sRObdcuxFttFrNMRw7c+qv5aOaAX5Om2GLKwFfapX/AAAgAElEQVSo1GJB 7wCTOyiBC8pALbbW772vVQn7l3DhxjN0y8xiHiZ/FNpuRAVwR4t0kEttXIWyPtP2Lh4eqcDg d8DAP8OJIHcfZWR7Xb59vyF6I5Ch9gEndiNvO8A0fzhmudefp8M9Pd2cot5tUOPoUYw3Pxix RIO4gno9p/6Clq0e+EyV7QobXQ8zLxbbUm5FxCe92X7k0iaPMnNI4MgBm9XRuIDKgR6E9xgU c/lODO0R48Jr0GrDEH9h1PIfXl27+6gPmY8uBkMm8nGeoLH6OKTDqEoQIGI0yYf2/s3oTh+2 rJuhvLhjxfbsPpQTxStkyWlZC4LbjSAeEo1O2NP27/XtM/AOBDfx8Epngef41T9/DBMv/XpE vOORizcb4d12nICiO0XYT167y8s/c9OepApl/To7GXR5pAQXb0cZWg76xh0fGMShwurU/6K0 mCJQJZLo5kP6lMzUIioO1QwvDHiEgWkHMeiKwPsGa94btmi8Qa/L4VQpiXEH03nQvkVDr5Vp O+wybOB6w5bsaPLT3+fqoPtlQT6e264hHU21AgvOpRU1sMffBKOASYKGlvAgkuyGAvD3GK5H xbdBD/KBCq0pzkLC0R8qBhNiape3G8bfjIqb0Xr4Uh+0xr1wNdcYTc1/PXqBHfgg/HrbEUva hgUHZOF8VUsLbiEVqAgnSTGYbykGkUEPeDW1HMYO5ag4cpHSjKZCmoqItMCQPUS3s4P+KhKG YdW9bXZefhz1ooATIec3+3i6VtbhVMGsnPy4IB8PflLa6euRXFjzTAXRsOFhMqrIzPAEPA3K ktHxldCZsUkpzf69dm8ujuVfFxmfRC2FtXKKEiI/o1w4SkVtpI+LT12/e9W09buXQ+joA6MM 9vhe7Py9gAmQd6n86CGCzLl5QQTUwgRHvfMrocHUMNk5mQ92YXYPFgB2ofwBPTJ0jz42aKqL YyDrEjKMEeiD8GRikelUSPUaEZcU/N2eYzuIVhw1xHvFsHJ+62ER7KR05zZMZvU/n8rObpic d1cax7LpG/ZUaDdy2WZUVSB4/APevuM9IKUvzVlaRCUBmMEHhIE+HpYxAgTeiEIXQiHUaCnw XhJGImAaCuEYvn3mWrQqcffuJ05AV/cmFc7WSXsNpBAMVLdTPHqDsWBEfXQIhVCQ3ygWeWm2 Qo/vYCXXrhL8fpM6lSo2qlGxGq6aNSoEor2kisF71LiDWedxKt5s0LIILchV3KnVa0ZpoGDa uz/NGbp5cp8yjWpW/NDb3XkVWu942JfVoh8kzwPZBlBIXbi9s9szaY0CvdwcCwnw/rFDy7pB DWpUrN6gZsUaGH+8ViUkoOgQgWck3sAMO4NuIO7Bo7T2UOzGMEtOQBhTSKsQrwYv7sIMY7CP K2NcUJYy1q4URPY3XlzXhtIrq2B7Ih4TaaYJguC+dHi3w+gVpqMlbXQz+sEo6qkIFuX5Lyeh FXBkp8MDvDF4D7b4rUAf95W9Pmjak/KikNTTwaRz+Ll7q4ZVGr0SWhm8r46rBru4JQFTudgg JDkILJebA2fCVU36zS4mQxgb8bAr9+7TMKBE+tAwUC/JMOM1svOb9co0rFmhGuqrRr2qIZ8S FuQzED0ujvpkyN9ijAVnYSz5F5nGOH+pyaxNe2m8wgfKUALyctdp7PL2a3b9E46Go7G/l9sP t7bP5mZu0/6zH9tgFOsRfD1cRAyiGASo7j0ZOOyAIFSiM+yyhAbVKiTDryHzCLXDu9+yvh6D 78Ul/ZySkR1ChbNzNujbN3v1l3W/HV2AtO9RGl9P152oSHmzmNQAocJymr4adnRizzZK128L Dgd6MDLJDsXuWTjuAfy9Z3z3ys//nL+MkzVopsAJU6wbth88+xoqucvBpXjDnLGfsZ1j59V7 sf/A7vaFAtFgn8DYOwrhtNoQjCAeDOaj1mKXjewRa5+JnmqyvjOGsLUTeluiqLIwdnqEMVQ4 eoS3UKkhqMSZUOB0gghBUs8Z1DkJc/HpmEDwOXczui0yL4JtSw2OE+xgbhP7eLheRHgeel+a 1zXDPHPAq6yzYLr0xaCxChGMOrAn2EKFvQddrY6Ua2rfdiO6vdtoB2LprFPT6K1SOvh5LwmL KHbRkK637XOjUvLySVY4rrByASkUf3jFaEvPikaMhB/tnmCuV7V8EsVvm9af93DkBx+LKgzY RD1QwZUVIz6NRxK6LA6KrwZMmjiJxxiBz5TdQix2KcRgRqnyqp8PV8DjQ5ot6jNrI1s3rifr NmlNOwyOd5HNhd3SfdFrrNPunMVhkon0OFeCIrheQnfNbkc//BQ2fxaYF3X0wi2aqsIRezqy 59MqdhrtStN8aIl1BBwnH/xSo+vEw1EPklug0tGtmWmrNskDORqccjdrQKco5D2N95sbwBRi Qb4e267IcWAU9TZkdgT/cvjcKexZyoafmKeBEJgwoGoG2zkfFYqXd4yW1gmFNtHnprzcnHzT c3Ld0fI/wHRBWQxK94R+OJqmKHPQvfYgxUVr+m+gt0c+TC0cyg87DPPpMnr6Rq9SUcQxCicd IHo02EgIWzazV9M+MxoiD+cZKskNreuWP5ePmm6rBNTSyeVwRe/2d0x27tcYCzG3AIdLsUlp 7tQj4nIk2GV9PGZDEebgUOWFOE+qKvLdCvtoXH+UIRSwo2cP7PwtBNAT9OoA14AxhR5z+Lmt hiycjDHQerSUNFbjdUDwyCGdHhdNG9vWLQY6ogPxAEf/53dv1ZiSmrCop8acPhdWlEdH8Shv LzQmjQgGHPHEEXl/QY+4BGECTCccznZ0V8M+01MQTq2eN8I3Y41pB+UBDN/Xv5h1un6vadTA ER/9oKyDc3NNqRSvyAxkXEMy5MYc1mBNIR7hGjCc0jtiN0L3P09dzyE+om6dMcHhWKdyuRzE Ufm4CQs6uWRPW/+bMKn3B3gUDRgcL0QDhF7EIerSnfvVhIa9VmCwrYXiLtu/eNhVyl+aszAL U3VsYq8P2PE1435r3GfmFBzOOxaaNwBdDKMuHKdgn+3x3uujJ/7I6LXKHLLf8MFqbjeSkrwz +JvhGFccwVy5Dl1vAdKYEE7jjFRlXzQRgcpfD0FugBmUuzUrBp36XaYMHMjDAlUSmOOdlpFd g2AqjloGmvXwdHNO98Cx9TArLPZq3w7Nco5eup0ExdJPXL2rDEy1LzGN6wuGdMbRlDj/BjUO hmLqc8+Z7yaOHbP8R3R6jpiaxXE9jgZLi4UWWzGXaGAlKjSjjJjowmFWeUanxJSMRlw7KAFo woA0TKFRuQNONs2mAXZ+h6Z1zmDbegYOVhbxAtL1xNTMejqi39mBzxod/XbsXJgWjjBzhuN0 wb4QGP4NOSwShjeuGfrRuw2qp124FRUAeAlQhnSlZdm/aOh3OJGwNdZxOqLhSctUkOMOetPo 0dXZgQsO+aEsIvj2CJ2HGS9DcdxfLdiqWja8m6X86K3SYAWgvgRH7B97jfIpDrjv1qkcbEL9 JELQK2JypApgKtE0hVuzPqaq95648gCTIUGwKGortFIiCG/5KsEBj7jgO0t1BzriwYcyCCuX 8CijnAUYPFhfCizj4x5He5QwRZ1Qu1IwyRF3mN2KQJ4g3MNi0Smh7nn4kMXba2EM5wgZoTJ5 Y6r6a4zTVOAHvsHgQOb3kykCKQHOyhcwlSmeXDd+6lcLtvx47V5cSwwc9aig60dWjTkE4eTC 0vWdBgcxoGsDIu+dWMPpYAeWjrw4b8u+1yEwZTGvHV0pyE8D1X0fsclTflsgJcLvmnGfbdv6 5+l4X3fnqC87v0U2MHeAfa9H69c7oxXQg9l8EluJInWvVNYvp1Pzuj9BQG76e7neOkjDVLgm tSpHz970e3t0sX5ooTi8mztnffTxhNUNYUrUhxkH/mjOHlo+8oggzGPYDpLRvVWj7qDNAa1F yg8SGNa7XdO78LbClYBKFCfJNHd8s/6mrJzckygXLbghm5QBekCratFnN8sA5NsXHZrvQngE GoPLgzu/9XDad791xHRu9tjPWt+ct3lfBl7HagslCT+2Wspw7Nuxk4cv2bnp5NW7LcFn1KPD jT3zv/4d/OBNsq+7a0rP1m90RWNgeqVCGa6fiGN7jl/qf/ZG1CYI943Ju638/fjt+jMx0N4C HBePrJRw+Lk75/Vu22QoBNLFx935NIVWDvK1mDX0/Grl4G2os2sQ+kJas+BtM0VIPXU81iWy YVKNoLl8THLAUJPbb7wohceYauUCkj57//VPc41GXn9SVv6rB8zLoWV81JhFi4GJcvfkWsYw U9YPsuWLFh+dsQUWZdBA4c466nSm1KycNjg5AvLO15g4sC7vNOgLi6UqWBB5ECGHlo3gbVP1 kIC7WLX+BKKjBTxy9AFaOl9X9HV3ufjYuVMOucgPfdmyNOff+ms2erkiOlKqiWt2CS2/nFNa Fh6OE/HY6BU/sp7T1xdLN27VTwyzGMXC/yug+aB5bNKaXaz37O/sko5Z+ZO1K7GLwbLmtz8X iyMYRF9RR2FT1/5aLH3RdPS8dMcBDqMkOCWlp7Ap6361fXmpWDKhUW+GA9SKheOYHdZxzHK7 cMKL6VDWWd5zo0Rihkg4cuGm8mi5A7fFT9sg+s7eaHn+X3ggC9bu5AkR0m7novz1evcr3jMv 2XngP6GgEXpsGruKxjmYAhZnuIYpuTDHqwr0dlOdWj/R0j1RHKYitWi5FHNCSV7iHcvbwj8r R1ngtsSxj3/jxDvbxHiXQfh2TE9LGiUOvYfQ7d0GlvDOE1cJVYP8hb3HLpsvbJ6iJPuf3D8Z u1K1ffZAC92fTFil3j5jgMW8UIiAwms2Tuxtxy8l7nH31/vO1J9YO16ZPHhcUru4jyasZD/M GMjDMOeOg3WNKiyomaf0bsf5FpeQwuZs3U97s1iFQB/z8K6t2JxNe7FPiN4lktwUKH1iWiZX TupxaAqYTtXCi7jMjG5sTPf3xNW//qNKy8bxnDCLFMFBo8sXWnq0aij+/M8FFZmRFG/jBPQY 5mA/T5aUnkXbJ8zTv+ggQnFVZHaj5eY2P6UnPzn01OhxyKbOVmPyRZz/1ceW9+ShDLQCroLZ Y0a4RS4wU8TCo+JVMM1pxomAYVJCxLhWT4dDmEd25/MzHH5JP0p5eCvzy5wveRrscHwFY4Qg dxeH66fXT4pUMr779YL6mLryrF4hMPzHWYNi3/5qvo+fl6t/aJDP7at34sPwUTodDZQxwyLW q14u5lZkgpMOKyHfT+lzu9+c750epWVWbFwrNGrYJ+9mdJ+yJghbH2piS0P0me8mhRMOLHbV QrfLtzBgz4m6UrBfzMKvu8TV/nRKVZgAlbF0fvXA0uERCj1YWMKgXKwEs4iW7zkfMdWadCv6 oSdW3lTIg17eTFOy6bu/GUzbNBjKUA1TGy4wQ4zomrUY++S4uzilxSakeCNeh/QM9qkqNND7 zMS+7c0fT1hZAws5weiubx5ZPTZi8MKt7nGJacGZ2bl3DiwbkfvJhNVhyJfj5KjLNJkKq2yY 2JsmFESUpSLuWTDztLD5HbdO/YIbs9hWUReHHvtUDva7vWf+kIivF23X3X/4qAoEJH7T5D6P uoxfFYiKdPf2cI58lJZdFQtONFNG+55gMptv7100NA0vMNXLzMoNrF0l6Mr6cb2jiB/dp6xl W6bwRXJ6LNGZHk3CgCmCaf23MNOD7kwbsMUu3efosUE/64U7zEm2esxnbNC8zWzFqE/t0tED MbsHcOJFRPbdxD7F4pUASkcHDWPMJgzt+q7YodmrSlSx+4C5G9nVe/ECFsTEH2ZJil0sEQII 5vv4tkN6dh7D2EVcMbI4fUo+Y1wHvEV6jcu5yqmVqPVZxkyJfZjWd52ShN8tiqCENug1vQ/N ZGCw5Z6CrY2ohD73fp77A2Zs5mMmZjgdBYl54lhvD9fmmMJrgnngKZXLBbx18Vb0SXw7gay9 XAi/8Gb9qrPw4k4raH3Tq1umBL83bGkoVlj3juze6tOfD583YUFsH5TALSU9OxOCMgMbv+aV 7zDqHgTUB8KYBOF1bFKn8sK/z924i8ZptZ+Xmy/wZWCQPRBjGD7ph2lGJwjNfuR5DXbhfbQA GsxD/4QzVdtAAL1g6xsQZsZA+i/skv2QBBSzVr8BXhO0eGj9mMrD1fEYyoTPrKb3wQAwB/kK 8C6F9vO2b9TesOf4+1CQNRgLGbDpjWYxPm7VqGbhPxduroGAvpP859Ib2F5yDPp1Gds+jmDQ 9wNasNbnNk7eh6lRmro9CXj+GJ3XRFirCh1GzdTrteNgtzLwOAU2+QDw7uChM+HnMAEw/dT6 CRtrdZ88GQrcIcDHrQfg/Qs8KZiYKMTqF8PqfH/UQRha/IWAIWBQm4gTRj4/tGxksX7fnHcJ x7G8zwzl7WYllWpmxqiyTHD6kP14oQvbCHMLDYwlrjRPh1FLcTTk47fP05uMZO5ihy+7snV6 aaDYjgNnWJd3XmOf4k3BzVO/KDUdRRA8HP7G/vj3KvtjyePpbNp/Fls32MyCDcuZocLDx8LN iyrP1C6fMa3XFPu5XfRgjmgll2LL9D8rRvTwxbaFX6B9tT6btu4dMJ2UYF6BucAXCzzUp63A pjkVtk24xyakGrDg4YE5+mURxy+1vHnh5getG9f6Hd888MS0o1fjL+ZMQs9hfJiSro9+8Cjw emT8t/iS4yWcauePQeVSCODcdqOW1oHe6dDl/RC592jLG+dutPR0cdoDAV+M0dQ5TH4HYvp2 J1r/JqCJ973YDaoGfl9MNf589+qd9yKuR7SPjE9eeutW9LtYM1iAyVgXxHcLv3ZvEDgCHWXs XkTcoOiERwMxFtJgsWY+6PsIx1KmoAPywqa2LlFnwt+7eCem+amrER44ue97zDhtx6e1fNHd /w0hn5WSkRUKXqC82S4ELyktyx0wHFMzcrSYFWLIs4jow10DHA6YYXHGJjqa6/4YO1DHYZpx Zoi/jzf6/lOYLVqWkZVTKyEl3QFwHSR4mQ5J6ZluWJPRgHbHqNiE2fcu3W5583pEm+SMzGto QMZi3L6zd9tm/rBP/sKM3tuUT3HmAknwVYbaxZQAPUIlvBYZQml1IbHslx2LWVcc81hUCdAz 1Bqz4kc/BaZyt1UCKmP3Sd++9fn0dU2VeLoH+4exLVP72SkBDhhu/MYXs9rHJKU4KmlJCVya 9RdslQC7RytiN+7IzuNWvqWko/usAR+yoxduqmyVoNXXC3o07jNjIvasVbVNe3T1OFa52gSL EpgSh3rlR1WahmuwKWloiG1aQ0gkVwJjQne0ZUVcaKfRC6AMX6GrvonW9kCdKuXmQXBHYZfp oPi9C53RqlpsYodm/YZiOnR8aJD/G1fuxFyEIt0DxHjMDKTDHJrXZfzqKU6O+lpowQrw7sIK mCxdsc+eTsFeAKHqioWS7Vb0GsHrnQEpEM5sU4E5HLCy64WVHxL1MGkoWs+vMQ12Da3gwWrl A7dumtSHv9Pg0PQLF0wJHcX0YlnMPZxCK++JKcVPsv9ZHYMtuO9je/Lv2N7tumJ4Nz4DsOfY RexUrMOcW/QPgTKfa9ekdh9sdf4V5eiDKdW1UMi/yf7EjMiPVcr5p92IerCxRsUyjdHinlPo xNio/dkbkduwBuIAvPnYPYpZkoJZvp5uN9EzfYetGBlQzPXISybOTcyKYCrQIxCr6HdwhObA mN3z+Yr9+8MWVj0THnkCu0HnQrj7wPRadOuH2SsxJpuDfJ3wzsJHD5PTL6BxOI8GKA0WZvJb 9auP3nfyykSNWuiJvVEnvFydTgT4uG/aPW8wrTUVc8b4D71Z4YNXzIUpbzNz6ttiYXItTEjm FbKAaS6hN5egroxthq11LOtvcIyKS8K0aHpH1FUn8LCig0Gb4u/pviIrO3fj1R0zuTlap9vE QAdHvQfWVbpgcbUXlDyQplGxXeQwZnnWVQry+XfLtP6R0779SfvT4UuVnJz09VMycgaiDK+h Z2TYV5UE3myA0O3HFoHrpzdOSRy1eIfhyOXbzVHfAzHt+ib45QgZw5d4DLexUPszDP0DOrU6 4q/VY2KogG2HL+6N0xDHwdSqQOlwmSAbEd5uTvtwbMQ+J70m9p9vx/EZAjE1pFducvISc2GW M41bVCo9Fl68H2Biar+g9oRlYIxi+ioP9P4/pWmKcg/TkxvvxiXeRisVBoHse+jM9RqYroxE Opp/5krQddK3FSB4hbuPXeADQqPRhLVPHNvo7HQJlXMSFVmAfeBJaIKdYeb8iJ2nOvQak2Hn xkMB8lBo5qCGjQWHloXhxZOmh8/fuEQmAJbFb6lVamy7FbX/Xr2b8k6j6mvz8kwxWI2uhgW7 TzAY+2Dmxt8aje/5QTIUlk7OVmMwdBtjit/BRLeKgT6ZR/+htYNCZw32kWE7hwfQcEUgJSAH 5tGCnIDtys78GQ0keiIcNeN2AC11PhZkLmIa0J9GbMmpGbyMI5bv8MIA3Q9jIGcQjQGtgEUk l/A7qsTJoNsR5YBFI6RC6Mfdi0ucirGHgFadKxDiRDQO6uxcI+/JsIU4ICElsw3oyIMtjurE GECn4YNk8DzLoFNrEcYbKdByLsTf6xp6xRy8821s37TO0uuRcTcgNDWiHj76EiZbc5ShMZVD caa0b70K0xfPwnvD7ZmY58vMeTwKu8CBKN2Z6VVfXT77ufcnM6et8XE47Xf8/JWf0fv400CX HNUPtpp5alXqkVDUslVHr9jQ+d2Gd5bu+KNbXELqPEyh8nRUd9hvxRKT0lp4urtUROOyoev4 VUdzC3A0qbfbEJx/+y72WfENmjS8TknN8klNyx4F5f3wjVqhS8uPWXEDpl5F8KBbZGzi6/n0 0QQ4OhIoMzOn8o3M3LEB3m5Dm75a5etHXSZcqFGpbAeUuSV2Eeg0SET1D55r0zOyq6SkZlbB WsnQ8lXLje8y8dc9KtO5tldvHOlfs1x6EgY8hSzb5GY05epE0/1ykMv+YkFkf5WuVpxKW5F6 H3tFOHMtwtB3zsblWD2MufvT3H5v9JtVHq14bQxetuJw3z5YMfwBSrDuzPWILVilPQiGHQEQ Z7SieBtNMEAQ41Ozck/BLPdZ8+s/PlAIFyx+qPu1bzF7za+He4GBlV6rVv7hkQu3rsJsGIEP iDyo0GlUVyhI2/phIa9B2PHil4reZjuDuXeXRq9UfOX8jSiYAqbYGz9OH9ao1xxH9A6dMX/O lYi3BwJzQWsZnZmXdwEb8FwgjWVBUyoMIVQ7d1ygZL9yI4EkJeBwcNcDBss1mcJRcY+ysJ2g fKD3VYwt1MZC81wMaOf/duTSN2B6BraF7IBya88evfjN2Xu77ga3H9kPe/p9CBb44YNvwm3C q5QtYLZ1JRMS0/K0KuzRrE6V7zf8fnwoVnOn4YS4/9PedcA1de3/kwTCMkAIEEFkyJLhrFqr UrWtC2eXo1bqqIP2oai11kJbfUVbq9ZWnoKjluqrda86WxwgdSEigspeMhNGmElYed/fDeHB p/5b2/p/feXlfJSbe3PPOfee/H7n9/2tc2wAGxdhps9bNn30maDPvw2sVzZMX7X1UCIiPKcg pEWOCUEDKUwbvOfXqNTXAIEkgEQe52+krEZfdzMPf7KkX8AaLzDmAJx3KC3KmzXQEJPgepjH AxMYkQ/WxDCxQDas7vQVR8GPiSJBfrl4vlIdEWAnMT8IKRxZV69a0ALphaQjhr22LwKTK0Do UoWiZkimovaV9NyiLAep+EyDRZcgU0ODtyA1vChyFdlkF+1tLTNr61TSxPs5Y0GcHyWl5WXi +e8M8nIOx+TVu1xROxz6FZNIzB/Y24ovw9EpuZGUORv39sXz58D+n9bPvfve6npVfWVV3SRI EDvoZU2Id9uLPoqvJqZNgKTdfj0pQwU/S7yzrdV9WIN+wmQlrFDUvKCorhdZWoqSvHrYb62v VTo/yI29AMe6jX/S6Ewvx2eVQ7wq64Z75SaM7P3AAJryIJVaZcwTWMcwgSTQULI+tT4di223 H8FBvj1USH6JrFc37OzqHzyBZkkEmX16elPwXkANCSxG62DxeAkEcW/p9FHzF31WMg33FEqt RMoCWUUJGGg+rCkBeAlJYvrDrZAEadCeeaFzJhRgGZOP+byqMIixAswyASnZhScPXYg/C9Fa Zy8RB13c9m42olPLkRwzEUw1AhLHBPDiY5jSIhGSsc91yvvTSMmUikV/w6ZxEG8ws0kssG0d LxfP5Y86A3FJBAb4EsdkiNZa/Kj1JkJhG5SjOlQA+xrRbyEIro7OYTVCVLMaHuTGb3DaAgkk SEx96AqDwRgw78ETMbfPQULlQwLMAQd1RVJQmcDDybw0C9xkIqwA85XhB6uD845ibJpc7CUf wYI2GVYNih0qRyqq/YbF044hbCQUOwQth07BwARKSAF+V2vLEijTK6FrROw5ezUGz9SMlNCJ gBAlSBzC3NK8FJPGYjMToTQpsyAI0jlKVlETJfUPnonvW6C+zG3vbVAXvcyM7L6iqX2bRjkw Tp5n+uG35/u7n4/nCR+Wi7op6hDy0lJjzudh9TjAhXy1+m0nO+ud2ArgTUgZz0pFrZu8ompC YXGZESYgCXQyclBhkw51X5VK1RdZd3vHjxq4UlZZa458gS6lcsXsrJziGarGRhHdB6YnXcwt p15JYSJyV8eu+5/ydIrCe2lA5H0z8opfAWM4AFBAsLJmiEOXwpIGF0iVekCnMuzw+R2sjrfB XKrcArl/fErWHDCMHZiH9i0zxszvB2mBGCuBHNDUADFF33q5OpyGBC4+G3tnFnZ8DWqhbTqR GiNk9W5peQbsXrZl41dnB1o7WPcxG+prkP6W/92tPXpfjuLxLjbU3Ycr3aPd0om0ztClbSvx DkgYySsy3f19XO8+bt1zZo59ppS7iD8rwg9YIFuoJ2yyN0F49MIdipHfImSUtRjgARnyhJuS 9q7+GRHqKoBA+LAl9x37tG/+84N8ynTXkb3HF40cBJriM1ZtWS0AABElSURBVEX0UfygRZqb 97KMT165069/T6e8l0YM4LRBWLEYLDGt1Vz5Rn7PA6Jzi9M2K2MjO/aLBHqWo3Pa9UWdO//u jnnisxZi85+ZJwSBEoHwai5t46AKHFJWMYnp7h/MnXgH78xda6tsCj2xPrbt9HE+fLz7hBhM 2iN42ugUKNDeX4XMSaR6By/cFEFn6Dlvsl+Kl5M9wVCuOEx6RwBdwcDWChvrnfqcCFxz7tpd 8dXkLB83R9ukgLFDOdiHHYhYyr4wrk5D0UtMaH+U+zxujcay9H741tpa2WvNTSAgbPoHyxXQ gmEeGF0GZFmFTLbqujqVEX63GEtLs4w7qfkh0A0GkCkZTE73MgNDQTK+L0edfIjPBugJXXzd ux9Le1jigySJ15uR4ENh9SR+6XcwQdQBJocsl242ybKyKmvALoGLg20GDAp9yYxeXavsDWlA zECBgwzh0go7W/FVRBBcxsogvcCEYhuJeR4skc5gfBEmlp6A4LYExwg1En2ILbscGv5Uz233 0vPHyCtrR8D6mI56avx8nrC2GcF23gcwypjrB7WERqIac7Hv23Ffvcp5UOvvo2+zp5jQKUGL Q2nEAmEvvnz7AXuwfx2ddihCv/ms4Qr84u3KM/PXsWvIJHqs8lQAYwl7fvlWt5ewA5X2x/vl GxnrPnEZDTRDDvIjb/WeHsKwsHDbd4B07Kcd2md1nLyC5Z/Y0Pad3filrPj05rbz3/IBixU8 crx+SxtP4l5kmrEpz/Zn29rZ+xV5bzJLJ/rNtMhw6pLP1yKG630Q6S1rsagMBoEWzPYtIMpe sOA5wQeCCFsBNpw3vtTXyzkKZmNfWXl1AHI+7iHuIwMWRENFVa0FCGwsQhzMaOIH8TYjX3X3 oD5u19Nyix1B8AGYzVVoPw54nZdXKOsCPWwawtAxh3Ch6RSndsbe1upBIzYfKZYpBoKw+0By H4Z0T4NvxB266RwK44Z/iAFyAnqZpcHEfVkoFArQr2G5ovoZPGulp6t9hLHAoCUl6+F7gMTe gOfcUCIxh/xCsaYmQpmRkdAEyr+mvLL6aeiSZf29Xeave2cmN/GMfyeFHV+xkRlKo7h6j8LP LCE1hwGHY/M2W/bCIB+GSEeG0Fr25YEfGfQF1tfDibl3t+Ua+K1/4hAkhaQSdvVuBsO2U8zH 2Z5hlYW2Ptq3F5eEe/t4IBc1CZuNVKFPKTaY9sTCYtrr7e/9//ocm5iO5P9yBiWcDe7lhky1 cpgIJb+7u8ijl8h6QsvfM+hKDCstcG0dunATTqc6BtjInhvQwSL4s74u3rrPkHpKAXbslxxU VHEtPM0hi17mqGT1l/uHyyuqP8zKK/XGTMkpx0SgmEE5dtHOtUhO72qVsvgN/5mVVTU1d1Mf Tr5+O20uzNG9iFlotsf98DVruDBpMkqLkOc8fkT/4P6+rgn3M/Mtr8SnBucWyGaRRKGCGZ+T 0JiZKQqWT/qYg9Tqwmi/PhthBMiFZcjh5IVbX4ApfYhx6XkAeQljaTCrk4AmB18jJMoPPh4O n7w+eUT23uMxPpeupRxDmDsXSUz9gJiJHcjTzT0nGKm8q404G5Jly5YP5x3Eu0KimsN/VMXl 01AdXXkkI+i+1B87xwgsXfs12xwyh3uZxR/v6p+VW7oPs64nETExAlEQCC0LCxTk2yJxv6a2 3qa0rIpW4yjwcLHfCBjjWFhavgxWcCkF5BEzEDTB/0zM5HegXCdXYemVCkVtP8y8R20lFtFQ eHsrqurehI7jBHjD9UMMAKthqa21RYzEQhSHNgei7WFWll0eSCxFZyE5fOEz9YPi7U1wBrM8 nhCrpiJkH8x2FtBpkwJ9QG97H9mQxYBpBHFssLTQYDCEE+p0I0mFarRRDVYZETSg7RX7tyzf Qi/vM24xGzWsP/siZDaddih6RugwHJ335N31e9jOvdGsMmUPKy1RmASv270LSuerIKjLsOZk w8BRUV5ZYwdingQzphWZjqngeyYRizb16ul47FZS9rx6lWoOmCexm9TqJ1EX48JSebU3lOuX IWE4+z/xFYi2GvBofR9vl6S7D/L85OVVQSBOobnI9J89XR0SAJkcS2QKRJEqLYkRidxhOGgE YR9wcrCNB2yzS80u7IM646AUZ7s724eKRMYlKan5YYB3QxBhyj0bbTeGmKpUEPsJ9MmrhHNX Xl7thXp+YJ70Qf08Zi5/cxJnwl4Yup1tD1vI1XvUHz0jPGpUOvG1oA93sfC/v8m94ar1eycA vkzML5APhDLbjxKQtDAJhhCgJRAUJRFxs7m1lejWikUvTTofk2AGAhx5OzlrJmbz4ZSrQhIC BM3N3miYVhAj+qbZv7ifT4+QEUN6xd+6m8mDQv3ireSsVTCFQoGFfZt2EG8t6IuC6bi2oJQn urvY/xNm7LgNqwKyV4R9szAjtyhMF1BHj0bPR1M/oBaPpBP0m1r4aq7ZScXZCC5LEJmannjv rRdl1PzUv21kB//xjq6rRx51tvZHfqm/2LlGIOijnWCC+WzJ6q94Ny6fZHHRx9KfHj7JurZW uagJifGYfVuA57FSHvEDLTjGh4fXqFRqbXEQ6XjH4xPTFkFq9Ebw1AXAF1uYVHuBCbAemNZS BFxP2B7bgQlIklRKJZYxRsaGd1GP4I4luCURzKBsbmpxxBpuXUDLsIgi6ZrTCZA0jRme+jQ2 Fma6udjvLC+r6nrmYsLrML0WwDiCmDONJZjMGkvgkP+Wg2dgNm7RB3yH/aZ4rl3MTPZseP+N iOjTB+oWrIoQ3LpySjN1/NBf/SH1EuFXh6hz3hAWfoiFBr3KvdzXB6Pdrsan7gX2Hkw6ABiC LEJXAImuwc+RWiSrGAD/wgxYYMQ01cPEXOzq1HV5NzurjFt3s/4Oa884QCPO6oS6ZYBFJ9yc 7c7mFco9ZGWKJagnJUkDM22SvVS8rqdbt6yf4lOnAtcvgGSwJKiDkBHq856rszSkh6NdVuz1 lDAwz2R6HugdlVZi0UHHbtaX4EdwKiypQChG8yg4Kym8mJHuAYiUDcV4xscrZt6kl/o+Op5N fIFcS49X9IzweOPUKe9aG36YhQS9wr0bUIZxUOiOXYAt1sDpMSZCA1V2vswHJta5UHZbcY+W XAgyYUYnr/Kx3t7OYfczHg6or1e9g7U2bvZ07XaurLzaHr6PQPginAkCERNQHYI+UMqRRmp6 A/DnA2uJhRx1F4G3pkKy7Bj//ICdsdfvTYBlKwxQDRIDhTBWa10wBINz8nBXG8tTwEaah0Uy 5MjzKe7qxIghvnNf9h9SQVXeDt3Btob9ckQr3de+6Bmh/Wj8j30O23KQhS6eygJXRfAiPgnk 8HrstWTv73+MX19eWQv9QbuJKgiZw//4Q/RCZhn6R7AGirFxbmjQtME2thaliSnZnl/vv3C4 XqnyJTwP2EJxWrQtuZamiaRh0QG8EcDfwMxFJmcCZ457y8OjG8VLGy5fs/sULE3DqV8gJnid eaRE6OqCpxAQiY5JegBC3XBxkh5BjNOV+TNHx+Pe5pVrowTrQ2Z3dKY+5m+qZ4THHKjOfNv2 vefYvbQ8tqXVqrJ6077pMnnVP6BIS0B4HEFy74/gJdAhgkE502kVPLtHxBZmJ8srap6C1HDv bm+9A+EQksLiig8RkdsLugC4hctzp5guYqZmWIQMCMqgDZnYwnQlLEvxKQ/yJkOaJFlYmDUV FpW9XlOnRu56sxFJk9b6FApEtEoWVYgXmFRNhFUww74YGjztEq6ztV8c4IUE/ztjja79lqJn hN8yWp383t3f/cDmzhjNveXX+390S8sq+hahF0h6IlCD/W9gHcIsr4RCurunu8PZguIya3lZ 1RLAKS6sFwTeYmUhWvH6qyMO7Dl0aRaU8DVgECEaJCbApI11mLD6tamJ0ca1q2Zt3Lj16JgS uWIzVj+xo7YBmb7u6+MSDljES7qfE9zU2DyLwrdJCqAuJxHQPy2neXRgX4+FL/oP5kJzNm0/ zpYvnPKHfh09I/yh4et8lb/YcYIFL0BsFgrCpo23RZ3eDrgSQAo0chHCvd0dzkMCOOQXyqE7 NA4iLy5Zi1Aw2cOUCYJGDkqCu4vdQr5AUJ+a8XAzlqgdQ7wAZfikj2f3FXZSq+ZLcckbEXE7 pRUGEadxidCUkgrY9CUwf3hGbrFFfoEsCB7tOYgGgTUJkbEWZp+8F/QKFy+zefsJXomsUuPo YMPenjOenuF3Fz0j/O6h69wVPw0/LADBUSgFPyLqzBsgcDkI3wZhz/PgbxhK1hrM0k3gAQTk tmU6EkETRueCJhHAFzlsoPvmM5fyhsApoRo6UHr9XnrRbDi+3sVsb4KbdavAURtUaAMYbDyO oDo+XyEWi3YN6O26/cbtNCck3SyE0+/4ssAp++jGsM0H+KFLp2m9fnThDxY9I/zBAezM1TdF HOMtD3yRYA079cN1l8SU3MsqVYMjnUNRJiIkAuZgD11rLSBvuKXhHhAivYgvdAkIXTyUi/Zc vy1mIfYfilSpIUWQvNWOiXRtcH0REqK2CBLBh9Dg7tpt6LTJfpyHmK5/9Nm3vCEDvTRjRvan 0ydSdJz4RBrTN9K5RsCxm40GegD3UhNGD85x7m7zHJTjixT7Q1M+rDca/MeWTgZkyaHP5IPg Yd8VgZmZ+fmEgpmeIUHrYxtybI8059nte3fWkegy9aThFiJREnwRUBe4NjgrkK4+tYGv0JaA 0jVJH4j09XRM1o1s+K5TbM27M58oE1DbeomgG2H98f8cAZqZ1xIUWTYdaEZjuG336Yi6OvU8 0g9QuFkcR62318C4sLbBdfHqpd5HNeVO81SVZRt4GqWY2mB8s3xjO5MlCbWyi9EHry0w4Ms2 NDZq0zPbt0ONQp+Q20gsFgdMe24/nW+OPMbz9nDSjHnuyUkBaldX9IygGwn98VdHYN3n+9n7 y6Zz90V9Fx0Iz/AG6ApmZA2CWwBmJcstVsOGvzfD3dipJV8Y0dCgHIFAarqfYxYQG9YMEzJj E6NjWA9+8Zqd2QYS/rlIpImP0e7GQc43PgXgXenl7RTgN9g3lyrv3vcjb+5ro3QMR5eeeNEz whMf0s7b4METcez2nUz26UezuZc8cPzKyOrq2p0w95fKGsfOC53HS2Ml1uvUdTXvgbg5uAHq Rey/dkxIKKBwZwKBSb2hucHbPJuaqK3fZEwXtKR/ie9tEWf0xewZL6wEcyF3APuiRd9i/i/8 LC2bvtIX/Qj8eSNw5fq9Dp1f/Knarram0FJTZjNVlWWerkxnGvqvymAt3Gcc8ZmutShxVNFR +x/3CDQNOdaXwQC9og6Vue05EDtO1/hnW46wcxcTdKf6o34E/vtG4LWF2tW3vzsS02ZsUeZ4 71Bl8LVMkM6a24ieGKKVAVoZgpiEGKJRyzB8bGDheUX3ls/6r2SX4+7+x5HKf7xD3Qvrj51j BJQPsFJMa2apOtdnoaYpe6umRUlbfDUjGEJA2gFBI4JF3IHLI+B8DQIebbgkkEbyjZ7+QGh/ QGue+pOGpY2j/6T+9d3+xUfAwCaEpcJvTMXI+d52nvHQ8dghrgh0L0CoHnkESDMgPYGihLRn 9J1ADL3Ze4GxS24gMYEKK0qo8mmFEX3Rj8BfeATUxa+1PX2DfLm7Kts2VpkBwynpC+30Arqm ypamqQtGD9NVwPqkuo/6o34E/voj0FD8coeXUOW6h6syDDhm0OoDQo06x2VPkyqBW0CZblY/ /PXssQ6N6k/0I/BXGAHOcdbuQdX5gxarMrtoYFHSqHM9Att9BSYY2f5U/1k/Ap1rBBrlK5kq u2vbSzUUPDexoWDUBN2Fei6ZUnemP+pHoJOPQFNZKKuJ1TrQ6FWVyYzfUBLAvbW66I/lDzzp ofsXGGKV8lM5POIAAAAASUVORK5CYII= --------------080600050308080709050608-- --------------060900050500060003060203--
----- Original Message -----
From: "Thierry Kauffmann" <thierry.kauffmann@univ-montp2.fr> To: "Alon Bar-Lev" <alonbl@redhat.com> Cc: "Yaniv Kaul" <ykaul@redhat.com>, "Itamar Heim" <iheim@redhat.com>, "engine-devel" <engine-devel@ovirt.org> Sent: Thursday, December 13, 2012 9:14:19 AM Subject: Re: Adding Authentication mechanism to oVirt
Le 12/12/2012 17:53, Alon Bar-Lev a écrit :
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI authentication methods. Hi Alon,
you're right. My main (selfish) goal is to adapt oVirt authentication schemes to our requirements : that is "LDAP SIMPLE auth over startTLS."
Following is a quick design goals for this implementation.
I will be glad to improve this. Alon Thanks a lot for this description.
Tell me how I could help : I am more a system administrator than a developer. I kwon a bit of java (at least I can read and understand oVirt's code that I downloaded recently).
Thierry
Well, nobody is working on this one, so helping is actually implementing that... I believe it will be difficult to do so without some java and/or infrastructure background... but it is a great challenge! Alon
participants (4)
-
Alon Bar-Lev -
Itamar Heim -
Thierry Kauffmann -
Yaniv Kaul