10:53 a.m.
------=_Part_4736650_2080278089.1355331209999
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI
authentication methods.
Following is a quick design goals for this implementation.
I will be glad to improve this.
Alon
---
Implementation should support the following transports:
1. LDAP (plain).
2. LDAP over TLS.
3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple.
2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name.
2. Search user password.
3. Transport type (ldap, ldaps, ldap+startTLS)
4. Authentication (simple, Digest-MD5)
5. Sever selection policy (failover, round-robin, random).
6. Server address type (explicit, DNS record)
7. Server address set.
8. Optional base DN.
9. Optional root certificate.
10. Optional certificate chain.
11. Search page size.
10. Query timeout.
etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation.
2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should
communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user
Input: domain
Input: password
Output: DN of user
Output: success/failure
Credentials used: user/password provided.
Notes: LDAP session should not be cached.
Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation)
Input: domain (passed by user password validation)
Output: A set of permissions
Credentials used: search user and password configured within system.
Notes: LDAP context can be cached.
Logic: Perform LDAP searches, this is most of current logic.
------=_Part_4736650_2080278089.1355331209999
Content-Type: text/x-java; name=LDAPSearch.java
Content-Disposition: attachment; filename=LDAPSearch.java
Content-Transfer-Encoding: base64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------=_Part_4736650_2080278089.1355331209999
Content-Type: text/x-java; name=UnsecureSSLSocketFactory.java
Content-Disposition: attachment; filename=UnsecureSSLSocketFactory.java
Content-Transfer-Encoding: base64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------=_Part_4736650_2080278089.1355331209999--
11:18 a.m.
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI
authentication methods.
Following is a quick design goals for this implementation.
I will be glad to improve this.
Alon
---
Implementation should support the following transports:
1. LDAP (plain).
2. LDAP over TLS.
3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple.
2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
Except that Active Directory usually does not work (especially not out
of the box) with certificates.
Y.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name.
2. Search user password.
3. Transport type (ldap, ldaps, ldap+startTLS)
4. Authentication (simple, Digest-MD5)
5. Sever selection policy (failover, round-robin, random).
6. Server address type (explicit, DNS record)
7. Server address set.
8. Optional base DN.
9. Optional root certificate.
10. Optional certificate chain.
11. Search page size.
10. Query timeout.
etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation.
2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should
communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user
Input: domain
Input: password
Output: DN of user
Output: success/failure
Credentials used: user/password provided.
Notes: LDAP session should not be cached.
Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation)
Input: domain (passed by user password validation)
Output: A set of permissions
Credentials used: search user and password configured within system.
Notes: LDAP context can be cached.
Logic: Perform LDAP searches, this is most of current logic.
11:25 a.m.
----- Original Message -----
From: "Yaniv Kaul" <ykaul(a)redhat.com>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>
Cc: "Thierry Kauffmann" <thierry.kauffmann(a)univ-montp2.fr>, "Itamar
Heim" <iheim(a)redhat.com>, "engine-devel"
<engine-devel(a)ovirt.org>
Sent: Wednesday, December 12, 2012 7:18:18 PM
Subject: Re: Adding Authentication mechanism to oVirt
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
> Hello Thierry,
>
> If I understand correctly you wish to help in modifying the engine
> to support non GSSAPI authentication methods.
>
> Following is a quick design goals for this implementation.
>
> I will be glad to improve this.
> Alon
>
> ---
>
> Implementation should support the following transports:
>
> 1. LDAP (plain).
> 2. LDAP over TLS.
> 3. LDAP with StartTLS.
>
> Implementation should support the following authentication methods:
>
> 1. Simple.
> 2. Digest-MD5 (plain and strong).
>
> I believe the GSSAPI can be dropped, I see no advantage of using
> it.
Except that Active Directory usually does not work (especially not
out
of the box) with certificates.
Y.
Active Directory support SASL with Diget-MD5, no need to support GSSAPI.
>
> A sample of low level implementation for transport and
> authentication is attached.
>
> When adding a domain the following facts should be provided:
>
> 1. Search user name.
> 2. Search user password.
> 3. Transport type (ldap, ldaps, ldap+startTLS)
> 4. Authentication (simple, Digest-MD5)
> 5. Sever selection policy (failover, round-robin, random).
> 6. Server address type (explicit, DNS record)
> 7. Server address set.
> 8. Optional base DN.
> 9. Optional root certificate.
> 10. Optional certificate chain.
> 11. Search page size.
> 10. Query timeout.
> etc...
>
> Within product there are two separate components that perform LDAP
> authentication:
>
> 1. User password validation.
> 2. User permission fetch.
>
> These two components needs to work in share-nothing mode, meaning
> that each should communicate with directory independently with the
> other.
>
> USER PASSWORD VALIDATION
>
> Input: user
> Input: domain
> Input: password
> Output: DN of user
> Output: success/failure
> Credentials used: user/password provided.
> Notes: LDAP session should not be cached.
> Logic: Perform LDAP bind.
>
> USER PERMISSION FETCH
>
> Input: DN of user (passed by user password validation)
> Input: domain (passed by user password validation)
> Output: A set of permissions
> Credentials used: search user and password configured within
> system.
> Notes: LDAP context can be cached.
> Logic: Perform LDAP searches, this is most of current logic.
5:32 p.m.
----- Original Message -----
From: "Itamar Heim" <iheim(a)redhat.com>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>
Cc: "Thierry Kauffmann" <thierry.kauffmann(a)univ-montp2.fr>, "Yaniv
Kaul" <ykaul(a)redhat.com>, "engine-devel"
<engine-devel(a)ovirt.org>
Sent: Thursday, December 13, 2012 1:27:15 AM
Subject: Re: Adding Authentication mechanism to oVirt
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
> I believe the GSSAPI can be dropped, I see no advantage of using
> it.
how would upgrade/backward compatibility look like?
We have the user/password, so there should be no problem we can test if authentication
succeeds in methods based on some order... but we cross this when we reach the point.
Asking the user for transport/authentication scheme during upgrade is something that can
also be done.
We can keep the GSSAPI around of course... Not something I would like to do.
Alon
5:43 p.m.
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI
authentication methods.
Following is a quick design goals for this implementation.
I will be glad to improve this.
thanks for writing this part.
what about making the LDAP part plugable, or at least
scheme-configurable to cover openLDAP, or any other source (atlassian
crowd), or well, anything?
thanks,
Itamar
Alon
---
Implementation should support the following transports:
1. LDAP (plain).
2. LDAP over TLS.
3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple.
2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name.
2. Search user password.
3. Transport type (ldap, ldaps, ldap+startTLS)
4. Authentication (simple, Digest-MD5)
5. Sever selection policy (failover, round-robin, random).
6. Server address type (explicit, DNS record)
7. Server address set.
8. Optional base DN.
9. Optional root certificate.
10. Optional certificate chain.
11. Search page size.
10. Query timeout.
etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation.
2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should
communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user
Input: domain
Input: password
Output: DN of user
Output: success/failure
Credentials used: user/password provided.
Notes: LDAP session should not be cached.
Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation)
Input: domain (passed by user password validation)
Output: A set of permissions
Credentials used: search user and password configured within system.
Notes: LDAP context can be cached.
Logic: Perform LDAP searches, this is most of current logic.
5:47 p.m.
----- Original Message -----
From: "Itamar Heim" <iheim(a)redhat.com>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>
Cc: "Thierry Kauffmann" <thierry.kauffmann(a)univ-montp2.fr>, "Yaniv
Kaul" <ykaul(a)redhat.com>, "engine-devel"
<engine-devel(a)ovirt.org>
Sent: Thursday, December 13, 2012 1:43:19 AM
Subject: Re: Adding Authentication mechanism to oVirt
On 12/12/2012 06:53 PM, Alon Bar-Lev wrote:
> Hello Thierry,
>
> If I understand correctly you wish to help in modifying the engine
> to support non GSSAPI authentication methods.
>
> Following is a quick design goals for this implementation.
>
> I will be glad to improve this.
thanks for writing this part.
what about making the LDAP part plugable, or at least
scheme-configurable to cover openLDAP, or any other source (atlassian
crowd), or well, anything?
I thought our primary goal is to reduce the noise around the kerberos.
Doing a complete re-write (aka modular) will consume far more resources and time.
It also touches many part of the implementation instead of only the LDAP context and
authentication.
thanks,
Itamar
> Alon
>
> ---
>
> Implementation should support the following transports:
>
> 1. LDAP (plain).
> 2. LDAP over TLS.
> 3. LDAP with StartTLS.
>
> Implementation should support the following authentication methods:
>
> 1. Simple.
> 2. Digest-MD5 (plain and strong).
>
> I believe the GSSAPI can be dropped, I see no advantage of using
> it.
>
> A sample of low level implementation for transport and
> authentication is attached.
>
> When adding a domain the following facts should be provided:
>
> 1. Search user name.
> 2. Search user password.
> 3. Transport type (ldap, ldaps, ldap+startTLS)
> 4. Authentication (simple, Digest-MD5)
> 5. Sever selection policy (failover, round-robin, random).
> 6. Server address type (explicit, DNS record)
> 7. Server address set.
> 8. Optional base DN.
> 9. Optional root certificate.
> 10. Optional certificate chain.
> 11. Search page size.
> 10. Query timeout.
> etc...
>
> Within product there are two separate components that perform LDAP
> authentication:
>
> 1. User password validation.
> 2. User permission fetch.
>
> These two components needs to work in share-nothing mode, meaning
> that each should communicate with directory independently with the
> other.
>
> USER PASSWORD VALIDATION
>
> Input: user
> Input: domain
> Input: password
> Output: DN of user
> Output: success/failure
> Credentials used: user/password provided.
> Notes: LDAP session should not be cached.
> Logic: Perform LDAP bind.
>
> USER PERMISSION FETCH
>
> Input: DN of user (passed by user password validation)
> Input: domain (passed by user password validation)
> Output: A set of permissions
> Credentials used: search user and password configured within
> system.
> Notes: LDAP context can be cached.
> Logic: Perform LDAP searches, this is most of current logic.
>
1:14 a.m.
This is a multi-part message in MIME format.
--------------060900050500060003060203
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Le 12/12/2012 17:53, Alon Bar-Lev a écrit :
Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI
authentication methods.
Hi Alon,
you're right.
My main (selfish) goal is to adapt oVirt authentication schemes to our
requirements : that is "LDAP SIMPLE auth over startTLS."
Following is a quick design goals for this implementation.
I will be glad to improve this.
Alon
Thanks a lot for this description.
Tell me how I could help : I am more a system administrator than a
developer. I kwon a bit of java (at least I can read and understand
oVirt's code that I downloaded recently).
Thierry
---
Implementation should support the following transports:
1. LDAP (plain).
2. LDAP over TLS.
3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple.
2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name.
2. Search user password.
3. Transport type (ldap, ldaps, ldap+startTLS)
4. Authentication (simple, Digest-MD5)
5. Sever selection policy (failover, round-robin, random).
6. Server address type (explicit, DNS record)
7. Server address set.
8. Optional base DN.
9. Optional root certificate.
10. Optional certificate chain.
11. Search page size.
10. Query timeout.
etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation.
2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should
communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user
Input: domain
Input: password
Output: DN of user
Output: success/failure
Credentials used: user/password provided.
Notes: LDAP session should not be cached.
Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation)
Input: domain (passed by user password validation)
Output: A set of permissions
Credentials used: search user and password configured within system.
Notes: LDAP context can be cached.
Logic: Perform LDAP searches, this is most of current logic.
--
signature-TK Thierry Kauffmann
Chef du Service Informatique // Faculté des Sciences // Université de
Montpellier 2
SIF - Service Informatique de la Faculté des Sciences
<http://sif.info-ufr.univ-montp2.fr/> UM2 - Université de Montpellier 2
<http://www.univ-montp2.fr/> Service informatique de la Faculté des
Sciences (SIF)
Université de Montpellier 2
CC437 // Place Eugène Bataillon // 34095 Montpellier Cedex 5
Tél : 04 67 14 31 58
email : thierry.kauffmann(a)univ-montp2.fr
<mailto:thierry.kauffmann@univ-montp2.fr>
web : http://sif.info-ufr.univ-montp2.fr/
http://www.fdsweb.univ-montp2.fr/
--------------060900050500060003060203
Content-Type: multipart/related;
boundary="------------080600050308080709050608"
--------------080600050308080709050608
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta content="text/html; charset=UTF-8"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Le 12/12/2012 17:53, Alon Bar-Lev a
écrit :<br>
</div>
<blockquote
cite="mid:1490596332.4736653.1355331210001.JavaMail.root@redhat.com"
type="cite">
<pre wrap="">Hello Thierry,
If I understand correctly you wish to help in modifying the engine to support non GSSAPI
authentication methods.
</pre>
</blockquote>
Hi Alon,<br>
<br>
you're right.<br>
My main (selfish) goal is to adapt oVirt authentication schemes to
our requirements : that is "LDAP SIMPLE auth over startTLS."<br>
<br>
<blockquote
cite="mid:1490596332.4736653.1355331210001.JavaMail.root@redhat.com"
type="cite">
<pre wrap="">
Following is a quick design goals for this implementation.
I will be glad to improve this.
Alon
</pre>
</blockquote>
Thanks a lot for this description.<br>
<br>
Tell me how I could help : I am more a system administrator than a
developer. I kwon a bit of java (at least I can read and understand
oVirt's code that I downloaded recently).<br>
<br>
Thierry<br>
<br>
<blockquote
cite="mid:1490596332.4736653.1355331210001.JavaMail.root@redhat.com"
type="cite">
<pre wrap="">
---
Implementation should support the following transports:
1. LDAP (plain).
2. LDAP over TLS.
3. LDAP with StartTLS.
Implementation should support the following authentication methods:
1. Simple.
2. Digest-MD5 (plain and strong).
I believe the GSSAPI can be dropped, I see no advantage of using it.
A sample of low level implementation for transport and authentication is attached.
When adding a domain the following facts should be provided:
1. Search user name.
2. Search user password.
3. Transport type (ldap, ldaps, ldap+startTLS)
4. Authentication (simple, Digest-MD5)
5. Sever selection policy (failover, round-robin, random).
6. Server address type (explicit, DNS record)
7. Server address set.
8. Optional base DN.
9. Optional root certificate.
10. Optional certificate chain.
11. Search page size.
10. Query timeout.
etc...
Within product there are two separate components that perform LDAP authentication:
1. User password validation.
2. User permission fetch.
These two components needs to work in share-nothing mode, meaning that each should
communicate with directory independently with the other.
USER PASSWORD VALIDATION
Input: user
Input: domain
Input: password
Output: DN of user
Output: success/failure
Credentials used: user/password provided.
Notes: LDAP session should not be cached.
Logic: Perform LDAP bind.
USER PERMISSION FETCH
Input: DN of user (passed by user password validation)
Input: domain (passed by user password validation)
Output: A set of permissions
Credentials used: search user and password configured within system.
Notes: LDAP context can be cached.
Logic: Perform LDAP searches, this is most of current logic.
</pre>
</blockquote>
<br>
<br>
<div class="moz-signature">-- <br>
<meta content="text/html; charset=UTF-8"
http-equiv="content-type">
<title>signature-TK</title>
<small><span style="color: rgb(15, 67, 106); font-weight:
bold;">Thierry
Kauffmann</span><br>
<span style="color: rgb(15, 67, 106);">Chef du Service
Informatique // </span><span style="color: rgb(15, 67,
106);">Faculté
des Sciences // </span><span style="color: rgb(15, 67,
106);">Université
de Montpellier 2</span></small><br>
<br>
<table style="text-align: left; height: 111px; width: 924px;"
border="0" cellpadding="10" cellspacing="0">
<tbody>
<tr>
<td style="vertical-align: middle; text-align: center;"><a
href="http://sif.info-ufr.univ-montp2.fr/"><img
style="border: 0px solid ; width: 100px; height:
106px;" alt="SIF - Service Informatique de la Faculté
des Sciences"
src="cid:part1.09060908.01080200@univ-montp2.fr"></a></td>
<td style="border-right: 2px solid rgb(15, 67, 106);
vertical-align: middle; color: rgb(180, 202, 0);
text-align: center; width: 211px;"><a
href="http://www.univ-montp2.fr/"><img
style="border:
0px solid ; width: 194px; height: 106px;" alt="UM2 -
Université de Montpellier 2"
src="cid:part3.03050605.01020105@univ-montp2.fr"></a></td>
<td style="vertical-align: top; color: rgb(180, 202, 0);
width: 547px; line-height: 13px;"><small><span
style="color: rgb(15, 67, 106); font-weight:
bold;"></span><span
style="color: rgb(15, 67, 106);"></span>Service
informatique de la Faculté des Sciences (SIF)<br>
Université de Montpellier 2<br>
<span style="color: rgb(71, 189, 205);">
CC437 // </span><span style="color: rgb(71, 189,
205);">Place Eugène Bataillon // </span><span
style="color: rgb(71, 189, 205);">34095 Montpellier
Cedex 5</span><br>
<span style="color: rgb(71, 189, 205);"><br>
Tél : 04 67 14 31 58</span><br>
<span style="color: rgb(71, 189, 205);">email :
</span><a
style="color: rgb(15, 67, 106);"
href="mailto:thierry.kauffmann@univ-montp2.fr">thierry.kauffmann@univ-montp2.fr</a><br>
<span style="color: rgb(71, 189, 205);">web :
</span><a
style="color: rgb(15, 67, 106);"
href="http://sif.info-ufr.univ-montp2.fr/">http://sif.info-ufr.univ-montp2.fr/</a>
<a style="color: rgb(15, 67, 106);"
href="http://www.fdsweb.univ-montp2.fr/">http://www.fdsweb.univ-montp2.fr/</a></small>
</td>
</tr>
</tbody>
</table>
<br>
</div>
</body>
</html>
--------------080600050308080709050608
Content-Type: image/png;
name="sif.png"
Content-Transfer-Encoding: base64
Content-ID: <part1.09060908.01080200(a)univ-montp2.fr>
Content-Disposition: inline;
filename="sif.png"
iVBORw0KGgoAAAANSUhEUgAAAGQAAABqCAYAAABK6PQkAAAAAXNSR0IArs4c6QAAAAZiS0dE
AP8A/wD/oL2nkwAAAAlwSFlzAAAuIwAALiMBeKU/dgAAAAd0SU1FB9wKFwcXEt0j4igAACAA
SURBVHgB7Z0J3F5Ffe/PeRMIEMIui2xCSEAWUYggFTQU0IsXqYgUsBRRXIqgiCZVrCxBEZB8
QDCxKFZA0EYRLIJKgUCIFK5A4ALG5YZQFlORHRJkyXLu9/f7z8xznneJkPf1NuZmknNm5r8v
M3PW57x1tbIMWQQemLNmXdV1vfU285dI6AP3j9qAagzbuKZp9gA1tqmqLeuqWreqmmFVw7+a
XlWJfhjbFcPVW1mWPQIE3cwkodp6zALiXTVz56z5VuJ8KO13sG1rAse9qlQ1UJEcKhrsaZuE
TrUyISkUy1wRUBJhdpKzJzPhVDrjAQ8j5oIvIvyKfQ/ZUORjr5woA3RFpfQIsjIhCtkylAfu
X7PaepsFTsbc+0eNIeTnkYz9O6Ndg79p6LMUMQucCyvK80EpoCRcgq5MiIPyyndaohRJLVEq
9D9J9wzivQZB17HAswAaJYOuwp5zYFbDWgkyMFOsTAjheSVFiUhJqEePmd/QXxW+y5kEB5pf
xwRPCCehkwznQ9MgGoH1tHDmutKFoJ5XYsxfGs0Ns16dxdNfAb2S8cAcJ6VhiVqfkP4vtByo
WcCmuKqOCUGoDVDIlQGX0gg6wRKIRJpC+xVyhqQwhJd2dem7P0Wo2UHpISlLaI+kfQsr0nZ1
Uy8mqK1BjaS89kCkQMeyJXZpiQwUuBUrocIHNjUDsCLtGfU63TyemLyAwx6DdrYTF3VXpXv5
vrtWM6Gv99k1DexWIJwMiLYewwy5f9RqBPY2hL0xTYamE84WU0lFUavVTIGX9pLAOO1VDksa
rl4hZ0gKjS7IjnGbMGSfFREtMMQnrxjzAM1kU6AWs3UXaJUMFZrfgfeNjmwOcV6dMoWlEnzI
SQexdrCprFmd+STiISheAGQSdkswag0s+tWKnJCFCoGKQ9FqGp6AROjFQA24VxB1EJ8IyyGE
OM6kHOfCYxp6Cepc+OpbwSYnOkpdBvRaCB4iO4sCrsQhldFhm2ityAmJ6ESI7C9BcCFAaqXg
Bay/vZYrjhtKxjbE6iyPe/Hp0gEAQjibcsPyQm40wQ+D6t+YBeciQzPwFZUVOiGKgKJGzFIs
aUQa8oVxCVJOVgakZOTuWeJ0qBOhxeQMqQPSumJxmk//mNFjFnxXArjHNYzMaR4s0cXk0soK
nZCUDKVDy4eTEUFzSBTglJ/uEM2N01sDae8Hz3vTdURh0QGZPChH2pEGH3+4YdjMob0vt1Me
Fi4ltu+xSch+yoqckOFpFMttHbBdcgZyTTB1gafglsKFX2lD9yl1CL+Dn8Kf8Z4bjHwdNLh3
Vc9F0NtYoh5VIpalrLAJIUAPEpBpROyP1D7DbEdd0QU3AsxdNNXxLFIz36eae/+aW9N9F7SJ
XHTOQRtiIODnofobzsiUDN2CTwkE/SrKCpmQ6XdyTTGumk0cDn8lseAapOq+BtENQZagpvq4
M0EOdIbKIUPZoPh4kI4ZpDJCfwzJmK3jBQSveImyuNZuhUwIyWhuuFNxKxFsudyrSaRJRpWS
YiSgmC01zzMi2Aq6MkIqAMSBWwcRBZ4DdnXb6G3mXypmjh3LnAzxp4yrOXDZG2uxg+FR99y0
7y6DUjiwlv8+jPy7SVlpFQ7m45gXNxH7NZWMdFB3vEhJSg/POupag3pfEjK915lZS9orbw44
Q8ZjpCYmCcjGaqws3vuGu3T7YCyGrA9gGBbavlDpw5sGkKFKt5hieHlgBUBQaDq4fP4YUnxZ
VfAB67NnhGiISpVGi2VZX5IVwvuwtQCiHsaw/9VN++zySE4Kx41qNKemIHfmVHXNJJeu54Z1
2Xha+Kn43Y69t0iuaAdbBkyIzimUDJXx0+9aE3P+Du//FrXbgFqb/ggM6/FQwVyVZLzXVo0o
hSaHPeMDLmJPORo5qAIJJmFJYGZqdQWyAmACi8dZkXJKkKYEteUYa2uD3OrrVVH3SVBfg1Nn
YkuUDBXG4jbsaWmQuRI4dEbos1UzuN54SThmiapBlT4J2Xu6TzpqRk2z9w2z1kH6RDad+nGv
RaUVZEck2xXGypOuOOBMDo9aQY2TThjiirM5QZk9IYp49TN9AdoawzsgujnJ8CS4NLvpneAp
0Om0V2PBcjq7rWSbyDKrLGBaaB92x8H752LRtUv7dFmwZSldCVEySITkNEzhd2LkP+PGVkmw
DnSypnVCniCJQAbLZOwtTpgFSHirq11Q8t4XvpEq+ZfctKOJNmRZnbNs8dp58VBg6ERiUWBE
Mk4oAyQ3pCU2c6AcxVpxjPMxsVBByPMOrk2a9Y0PT5DWcSkd3YE0mhK/ZRuSZEhOuWBqJaMa
f8MsZkV9Lfit2OSqbMg2KzpsAhsTdWpnog65EaI2SjuNsuAOKmA6XEXwRMAmfJah2KpvmIaD
A6k6AVNTXcNUQSMy8eQSCUi6LQNMJjBzUNIkIfVaWS9QSQukgDRtcFO/CL/uFg9ZcUJ6JeN4
DP+K9aZRLG3hXgpMdiKIwie1oYo9dO6LMxOrrSLXNNoETzj5CqhQ0pDPolZxcFVlGLIlQSjt
1NO/VCwn6088KfxwBcB9c1hCSMkCpF5ksQuoaIsGN0RVLcabFzLfUNROSFqmmBl3vQtDvirB
1KEfq+xuCrADmZ2QxcDdpW0H4DUk0wQ2oo3ECJyQ4uV/oRMkVEq/cakOLjhLkpXUKNapXYGE
nIzPInLCJCP+tTlE1eHo2NG2J/mZSUUe9pRVRqjBlh6SYBnMknXw6zJFFaOT9hKujrVp4IgJ
oOCdLefGEtllf1RDFctSII2KuPqQICiwLCtaAQGWCIVViTrHzTyY7Tp0MrVNkwmDKckPdjol
vxba2XXgikWCh6jUEXMXoMM8yNZwHMmX+qcga10s4OkV0FxkUWvpApxMNImQQZksD2RrNEGe
xIHqeJG446RFHWGpkjTJpItihjNhIcA6ECdThBUe4sxj9fRblgdVkIjUsmQMPOK1KvH3KS0h
qYkNJi8KbEwfxsEDhrNccbE3a0tEfTgmBufjasg1WZP+KypJnd7EW0U+RdgFFlEYHF6LMhgd
Tp3R0C95dpQTg0izCGqlLCQFAp58bHFMbJkYxC4+lcTgygQ8pmtWqV5qRmGirWyLbHGY27sX
mrU7nWSQ4xFmpmQWVbnB8435Q3rnIk576/rvsWbNsEjOhovOizqYU06DGjyt64fZbsXuZ+EZ
YA1VtLrjUHo01DZFJqNWMkqQaaa4tKQEKLOIpMhUx6WuXm5Gvrhhz2+22mL4HQfEoClUpZGp
Vet9nt1Wvdi14VlBGjPqoqjdsyGMlTW5XXIkncXoSfhidlruzA2/ghqD2EZ4UCI3hGsBWIUA
PDCc2SF1b49JobkBuYgFtb+lpVEiuV8F+SWu4p8MkuVz/9Dd1S5zFlYHJOuSE+4pHuqX5JxP
58DVvlipdsmhTQ4DM7/d70hSyNaF9BKJKsIgzm3XaRfxDTq1lb5IkBiSOXX1s+FARwPitZYQ
k1NhehBkLcuXotO5CfcFgZf3MnthNao84Ahj5UcnnL0c6HrTQYnA2xwTGOO4U3hClPZdpZPA
7oxD1IlialuHuJ2klJHqRS03GzAjNgCy2FkUjUpiIEHZifuBOhm6bkkzy6TL426xzwI0Btm8
Fkatdu7HGpnCapqWJ4Cz4xlqyq7IGiMyQkec4nCnkAWMhnCxeRqoHdBMG70liXSJjiFriYr1
iHWwczxAukwMa01Q3aibjSRDJwIc2Jf/EsbLOdvqYLilfvgUcRCwEKvd7ggpaq0dwGN8ZllR
s8+zydTwZxXu990leW1E6GSG1CMtTEbYkBBWbBJd0D4Y7OnhTVvWctiWyYpdGaNtGyOMAQnf
FO9SMkjMHXCKS+YqRABop0mRZGQuIQRiF4lMeFVZQKpTRUIaPXOOkqxPszcfaoxD4SbR6Myi
xLV8VjgoHzWw8Ee+hMsGpnaO2wAeeKBGLIM306kXvBkOqZZCExhGM8a0e7E+CRskJRsdiFm9
RNXPpnGgC8Q09UKPM2JCi99PTZxbxM1HQ5frnTzHDVcyPxsrAJsqAQs8410bC5EOC9CYqDVb
EjqztMQJRNezCe7M48XO5BLlRKvXVp5kchFYPQm7TmH1GktkOVItKZLI3gq245b8hBk86pzB
28l/zqKThkEXnLUb4WiJTQQXr1RSENxsByc5LnSEwnHIHIDTUA1+5wykYw2HaxEJxi7+p37I
NKNxRNZ0MkY8/O6teZDGr60N7cpBlGCySRzx3WuqswlWvMCcqP4cVb7ZKdm61zbYBGVPJC97
pzDktuCKSi6CawiWkZwIHVkB9U+lzUTXqWgBTdZWUliCUUFNcyhdXDcjOWPadRGPaKdDuye6
Yk6ITLPCK2/WqmzZja/zvP2DYK8C8jgie8yHgCjSAg+8Sm9OcLRF0W1hL7gYnyb9TyDzERLz
mxn5MfINs2pmZjdz0rjUShIzgRqSkADyJpduwUGkYRgui8fEERhJMaLSK6PfkJPBD41aSbBh
gMxpVKICbzIx6h8FcSMgmeVbJ0yAy2D7R/CrSzWbLgctJ4xCRciSIRLzZqS8OStuOxUpCGJ0
uSjo+i/lKkk0rUQgoJrWqFoGN48xUH4N6DogU0jOc9Rc//BUMyVJ/YFKOFw0JPOLQkWio6+7
yVjKaNlhc2wQdoWFqkPBM7z2o0fcQ1Z6WA6G3bTvrvcTrEscnnjXKBR7loRxDn4OmJ3xdUr2
OFhzxAWVI9lMMp48SRCTB083RPnXU1n5viGot9M/HVmPsHRN4mJ0ZLoW8glIFt9fLX1ZS8Qu
Azq14P0VT3AJYEsp6DQEkH2gGWg9/MztT9rSn46BYFq70t3K+mSULCDzeo1epjqK4QwhStbb
h7AGkKdal19BD7dovGk+5AEFjJIZQokA8tdKY/KkMSAFKSBrAToZolmc4e3MbLHNS71bIN2t
knW2QNG0Q72hxd1Ck1ymb6tjCemXt7esV9fvyQdQ1mqOB9VxiiL/7I7jaXnSHLPeCNsLTEHE
U8McZ69oHQhcwquY1M5IQyqaDQq+tiDMkukKF3aIASnc2qm2BXQHs/rdksDMzpL61jYZMLxF
R1LsvlDqJ1i3gBgX1hpykheJCkYmfXjTL3+3tFfT89FdL8WpkJxLMPAMGxKmKliotAUKmwoQ
u+K2OoZleBnUQhsYDTUtLJPTo+CXV6iEKrJRJkIXx6TWe1OKS7MKofgxs2N/IbXkBlWvvbVZ
qRAysihGiL2ytMSmdi4iDO3ZZfMmNFiITW7CzDU0tRMi63SwVCEpn8feqcm+rNI+JLNoK08U
t9SgZe+0Cxbv6S29BLllwZdk+hgScsxN34I0KlCjYxeUdXU5x5VttHwNdKEaJjl+YUaKo6OZ
LM32hQ0dMvVDazQy3hM5jUenKyOyoEHWToiWLR0s8/N1+seh59PI1k1Emo6R7cv6krFUES3I
Ap8qdZLd4X9ggdJINCkwFhArFqqkLaiog6mwkgnNHGjFo58nX8A24IWq9UskW7uUfqgLVJsm
K0RL21STaJddFmemDSmD3jshWYoMzRdhJOVcdO2EwquNZ2jSxj7XAkHtiS0TNWjFHoPZS5rA
pZROy/6ABV8KGti05CEsZgIiJE7JcYIMt8JFgPdhEPknB9nuopGG4iYl0mm9yYrSbxEbn/vF
WgClHRTuZphCkduZd5B1PMJNQjRTcuG40jODCzP6B+L0Hqg+gnAfRPw28bBpe5iYtJApK/a+
q4bYiCy9/zpEoslJoUYSYjQjOpHtyBmmBJEsPaP5194SLSsByyiXTdkumharPiVV0REzAA8E
C2pLC2pbJ5reqJCwzPuuhLSloGuJRp2SxBnYbeC0HQtsC8zYibhsRJ+XHfTLI0KDYZ4YNJyY
4oiSlN0F6BCbo9CrQQ7082HeRq/eAPU7ETi68IGwBHaRBNViUl1tzzFkT+y8BVtKEb1M0Cb1
qmMX/dw2vIVTMyctJRxSazdKfEVeIg3E0OwHTEj+vUQsBQ2JiVNMHH8Y1dr+bIWbmKvi+IUo
OBL/lXAi0glKGdk5UVWt0+Bb8gCSYaZRrU5UkdUAaG+BeYQnOhObSdgEjGaw+MII4RIWM7dj
VzAPbj9gQrLYvIzp1Fh3eiNBdqbLkpgXwaXDjUZRjkOWVfolonDhp2ZCcld9ro12fRmeDzDy
9fb9gYhKEfDoFEcWGWxVtaMA2Va1PYqFZRND6odVnl6iGqCE8cHUi8QCZG9Kig3vRTOY7p9M
SBauZKgkp5OrGTukdVkqieIkFOk5jO6xxcohzVE0Bijs6npTTttHcaY4P+GiUvSMDkoD8zxB
WnvepRx0sZs5kt/SitpMjHwNqKEsXWdZQyl4MLLKSG+q+/D5/0iW/M5bl2wP2Uq/dFqrC07H
qFbQHMcsREi1+ynmSzgHPPF4iepFb9pesMF0l8uEyCGOI/o940Ki5rfLWSR85M+DExKN9TjN
5jNTwPvM9hxMgqa4iTbHL6+RUtVP0SwQOC29qqQ4b0M9LVoWLJcJIRk6idDSNYoo6Diiwaww
RCgirB7DTlBT6Sdl2voW0Ub4hTOP+4pv9Prw6Bho4hx4KeafoJ1ZEjR9mAcJWC4TkuNEPN6C
f9ulKCqEjr989gHEOzo1r7Q2zVOClyKmTsw6rQD3nSFZqfBkKifLoyDlUbI1LUMuynPChBii
MlxnTYjGUdmMVflI1+2QAxBGZoOCXHa0STO74C4ZqVqleBr6gj7p9prgE4c0O6rJPpvRYpUW
EZvILpaQFB2+2sCdX52ZlVLU0sjt4iIAaUzFTeyor/lFXR+we9MsXNLU+i6HdARvZ4rlGGlk
OCEtQVngYGq99CZ+6V0eiu1gydItm38ham8gKnr20RMDhpYSGtaSpXRQqOtfyPj2dYj6HsAK
rOhz4FQnEQnkY9S7d2vKy3/bjn3+OV6iTm9ySoCkhbwyR60bRNgSBEOwZ4bMeh1yzgpZZUXo
JTrWhhKU7ClUwtjI7KSMTwFIVdBkrzroQhdSTCZZY2m90bwxLXx7XTMpl2gqGbTqZiHmTBOu
nJ3RtifJpmyH7UpCLEOIqvrYNbfXfAC5GqEJsYQ3OFfpqUe8tHjJ2NWG6aWcTskypdYyJaRN
0CFd5hZnJjVf2Gz+tiixAnZZu9eUkopQJIM0Qkxj12yZqJwreoa2jRVPgscCBHUZuhZoeZlF
wXGyQ1LaSwa0IZyZw9PNqv4pt3bm8fy95t5bZred7rAzuSGdHeCgrXnRnJfN20TyQU/DKNr1
Ygek9c2+ZyEduYNt6VSR95L5DB160UyIcqDBFHNsHIBsmwwK1QquOwngGJs1yRFafC1ZpRki
jBN7rMmWreUIEECzOg1BbWaAFR+IUVVVX9KudzIEC5lqpSKB4o9ii511VIcyI4oGejFkDGkP
D9qJKkxIEoeg4ksMstu2WXbYLG0uhkWvrVoGycCIc6ItHIFxuBCnZynSEvLU6jif4iOchKU6
RJOT4NF4BBSbqJQsS6uqc1im7kzt7gp5Epn0qulNnvK/9I2X04mgcCTOpAj6RGQBmUFihrZw
sFTpCHYrumgNrNQrIpkMNEEFpwb/ohCkzJcg7it2Im0N8owGavcUYMs0pYR7szz4VGSApEhf
QHiHif7nhMxPO9UuBepkjyrLF07y1BdaRapUJZjbRnTvTA8NRQKCuuN7N/Fgeuk6BDtsaYqa
zArtuSFImK5aOBsVzgikYhbZStsMwWVcjkALZIbwrQ1FQEuQ+DQbqcme6YhD/RhCD+TicSE3
IHVFbx19diJv22O5HTdEn0B9WHsDNMut3QPMRulQ8or5e8sbqN+5MLTHkCUnQrvYbAZVmJ78
K/I6Pma64BHcOPg6Iyktc4lJVVFHI+gxxKK8K6AUD+Fmk5txLFX/pdNc3mbs9UOpYloIlBiL
MtyyFchUnOJkToZ11RowLXswAwDA8MoDpYt+sB0SIo3JpFYTUAJKv8ex+/iikWo7g8ZNcNRy
FL7Ear+FNYX4IAh+weSMsyy56gpv6sQjfknUMSMb8680d2Nm8Dmlu4TjS0Xxxoza/RZJR37Z
aMkGA7QQ0lbf+FCjdi7CqYjMRGmWuh+SgmCo9jrtlQHcxLN464+VoVuFEQpMslCV213m0xEz
CHy1AKdAIHWp3QcXjgVQsgCE9KbmLfz4DYpDEApvhfEkZsWNInUyQA64VEGD5DCAB1wIXtz2
SbZIZ7ZJMl0MzJ3eMCy3ocDtI7+a1UsgGdaLbVm7JESCa3+ZswRYBrcVlXaEMzxBZXbZ2oUj
SslLO534FFglIMhFk+UXweaznxLbVM/Q/hXY2znc/4xnMddlB/VmDInp0pxx7RreESYiuQy5
WJqlrsXprvpqUFqoAAgG0LFQI9LYJtykX6bC/eobmiGzCeKbFbAue7N+m5EszvIzoesOLq9Z
GZ3Je9dp2gNO3uJsSPFz9ZexZwEnVY9zfHhevFz0cTbYNCxVTX4bvrfMfvq3IXR3VJRjTNsu
uafiYEez2/8ES4aZMEJSpCjJL4JPr+JmhhW81oFb26sp3AqJ/L4apkHQ6rOyK8vKCKyMwMoI
/P8agcOOm9Dl+mHHTay0/SWU3nb27v8l+NBlIw70ewA89LgJ/cK7mAfotGW22wOQ9ws+tNeA
6C/Q2NjFK5pDj/3zDaTeA7eta1n97HKAjoN+6LETNuJUdBKnm6MA6PNLk6dNOft2lPRQl9PG
3sxL6x927IQ3gd9x2tTJly6rHAKwIReZh3PlMvX7UyeXJ3q99ZI8va2vU9wPTZt6ti9ye9MM
VR+buIKtN+N6+vffnzJ5EX4ejeyZ+DlnKHT0SAEJ+DbCHqTxGdo/oH0pSdqkv2QsbSRgXLGJ
c/aNuMeygwH5MiNhNfp7jzahkF11z4z6NVysHs1g8YVrYu+q4OHnbtVRJOPz/SXjsGMndu7X
dXEO3JFtsqW/Mm3KZF2OnEKs+APDlLreiS3aBvS/w44umcjvY5d0DidW40j56mT4zCTqhyD2
oq1g/p4g65OphzKXniNBV7E1wDYG9iywXZhVq2LQ7O9POfsxZBDQCcMZ1VuCm8m1nL4NVhGo
xcj8K8nkGvB6aB8UnKTDWh9CU8ZdieyFMqpVFhFs/Uz6JeRuSBCeBvdOtlHIvhx9mjXvYOOv
rTV6u9EFGQfRWI3IXY5MRvHEteM2WbUpdm8MfBZy9SfvZP8WzL7LSIJ+ZPo32H4rPLNDkm18
LzbyOlL1Y+BPY/NuXOXsgP53IVeD9xQ2v4JEXEYxgN6HDl7ua+7TRSm8WmHWhXcetXx+jWD0
n1QfW/nIWrUe8n4EbL5uKzxDVDbFoM1FoELQTsT5GTATqHoqhutN9/1hPsf4ujqQAFzLdgSO
bcJ2Afz+8jV8e3Fb6nPI3RnFMlaj/sMo5QdADc+tmynIfaPgODaZanu2N7N9k6BriewaSThV
ETB9jpU/HdFcBN1r2f4am76FXD1vF+/6CNtfazp2nE//7QT6Dei7hDaKqnHsvsN2KuI2pA9/
8wPaOyL3rej9LrijGZxrAL8EuWPFhizx7wXdZsREqwas1c7AiEf9VuxREicRsNdTA6ovQ95o
WvqrCj+CVs8FXg/+RKFV8PlIZB2sNvEU/O1MiK2I1cVKaA+jdw4MMugaFH4Eoi2/P/XsPwLn
BzH14ViwgCDpmPIPMO8MzWYoHUF7CWvoMYzS79FWX7OKGFTj2c9mpDCzKr/khmETUfpxpvsU
9FyF3PcQBBJRb4rcSWwT4NuYJO4DT0VfVXdpHITHwH2T7SPw7gD92gQemdUcZt15KB8PfBfw
nyKJGlTr4eT+4PUdyW2x6UP4Ng2+zdC3EJ6v499EZoUCd03IqO/A3j2Ig1aB9ZBzAvDTGUjP
Yve++HshibgPvvPAPYR+Lc2LiMtBtIeh+wvQnwLvukR/M5KpFaS1pNVrwbsa8tdH53joJyJz
Eu0XsO8Q7mVpSZl8GgTXw/gBBBxFsG4k2Cfh4Js4gA1npLwFo0X6WpxkJvH1hqr+iQBRmmvI
+nja/87G6K8/C/XWOP0svNsBm4eOx6iJS8VIbXj1s/4IDjTo3Y1Kd01ZhmrRXi86F4g1pFxq
aJrqdrVZKnSn8g+M5lWxA6IokPJWVevTiU0zHT1alnTv5ToCtUCUuPISUn8ZXPxR4br637Qf
T/1nqRXYRwkyA2ei7qPthyGaBYtFg06E8E/tun6ZDs/3OZbwkwjBVJBJu1mEdSxZoimFPxSj
12PrnRHTg/xxSOPP6LH084u14Tin751oqdAPcm5LmbuR6X83GrWGj6Xeg5pfv/Jd36q5F1PG
M2JsnNSQNBxvprpdVxvg+G9IxA5YBU3N5z7j/VxkS4/W25fAr4czr0XWHtSrAfspBt4oGaXg
lb0GoPMC2SAcsYjPeSgoBgcHyRiFHc9Fz0FRAjYQC2SwR3GD2/zqEQihhjGD3QfUkzahPwPB
HlBokDyYBVitfxUsEo8a8WqVUDJzeRELeIGE+ZOdAKMmcvgUb8UnU33s+Ctqlspag2J6D8re
i8ivZCkE7EnMv5RQ7AnjEzD+mNlyLkvYV+hfwTR9Hlp+TpbNs+MPIPQhLXlAbw5ZSGgaOfcc
OBmrpWgJSdmYGaiZ8BTbDOSeB/wsnPwh/SfY+i3W1smPZFux45E4SCwB0QBIpeGPsVTNc8D9
04MMVq2gqjhNWZYh3j2Nnf8Dtneg92D8/zp65kHmASFWsajICiq9VKfvjq0hmApw6dbfVxFF
ojaxVgPi0rwM7h7ieT7bmbT1V0Qf09r6BENkbwzIIwSuZneYfonS37LtI5kEUb9quogptgXM
C9m83AlHQJlJ9SwcOBVF1wlGURzWBsf3SurNSVZeR48lOh9E7nSc2CtIvf8WfZa7ToFGCXUy
CaCCUXQiW1NcoxtTMk11B/6Mo+/CYPtrZNzJpsAUXgUKgtyXnSEr2KRnCRHcgvp3LLU6S5Ia
TlbSg7y6Xp12rBANxwg/AKvvhWx30abyJrikR0utDv4u+AGNvntcz8JfoXwOLwAADV9JREFU
nSAEvGGFqZt9esjODIhuxuirCPrxJOZ7EL/EAfjbEFyL4lHATsHzr9HXOvwws4OPNvIlHAq4
LPEunGB01vcIQPsFdoxYFx08LySZn0aPPulzJnrvw8n/gn8y2znI12jRMUhnZcEVAfDaDv4Z
gJqdiEJ+0zCTvWwqMKbBNnypf80yfD4D4AzonkXmdTDoqeHT4o1SPw8s2ebTUp2CpgA3gnPq
Xv2Yents+6xspD0PfftRq8xF/xeAb44PjyJrOAPvaqxagu2nA9dZ5mroVBzvhH41bJoEnBMN
/6nX56HXMXUmdl4oHHHWSnKxRqBOKz/FrDrNAeRzQxAfYfiUyQupDwI+R2QIP0VwmEmWjied
QiA4cDbbAlHgQFc3k+gz1EbeefTPxUgC1xzCmY6DA/zvQd+Go9Npf0K0GF0RWDUp+iO+1cej
XZ0D3bWGsjYTiM/gwFPA/gAs0+ALZ4O1Ty6YGc3hose3n7Nonau2S9NcRYL/OfVILF9btW1o
5MtDwK9HzqME9GDkK9nfAPEefLxCPMA/gV3focWfq2hOp/6t4Gg6DPhs/L5CNhCntQLc6A9T
KonXczg4gvoqwYn7CfhxJbTMrvpIlsa4G0EQnBgzsyPLuoLXeTjyOwW6WvBcFDyVXGc4My03
JUP4Lvkhp/u+EycR/cqWoG55afYUDdGwHq4TyuwCLLvaPnAKbFhmbfsiWNuP3jYXngHulbX1
JFlTkfFht/vhAVczO0p8pbu3PVnnynoIIkCAd2N73asVxaicuA5MOnAzEzkMUlha2JXkgWCy
tvqi0dxmqnXjWjCRhLCOHME6soJYfVFKfAendvDbokQj/pCpVqLpFh98hiEAZkmn4b2UyDf1
4lwUfPLNKgwXqSkKTpBSIEzSIiZBanSWBYEUcbzzQT1OSpKeLjnJdhGD1s/yHtaZBmcRWgsV
FBlID6vDFTiSIMEVDVhDn1BqRSSdykiarQm9wV6cFxAtcEmOhCWyQpcboCRXdGXnbmeX7OoA
omU2GStGtpDSomrDkgyTA1ftokSaLnGHweAjRh6wQYgC+YPPUpnbqpvaL2ZwFUJsAxeOixEO
ibY89yHjT/A1VfsCUoiV5b87AmkI9DWDpcw5dDZLJoMuRpJmR4yqGBlpNKbRpDHBmZN6OihD
2hlXSQp438pOB1ONmW4aiwKY5XB6CKuHm0XkJSKP7LAnzVoPR5ElN1r2mJldx8fsR2CkgTM9
255p0rqQWQuhxCc7PcO0FGomqcieXPIs7DILpOTqv1cE1RzZdbtcH5TRxRFFHwqrniIIT2KM
TlkNXZYdZxHcEqlX4RTS1yySobMRmcApntosmbUupu5Ej26p9FuwQ9N5JH4+2zkl7pe0X6Du
AmMD98AmjEDG7gyOP6JP1wceDP35SPJHEewXwenU//9Z0e9DxqH4R2TwE7RPoP4c2veSBbRL
jnVKpgRpa5elnZLCvD8j5gTRw6fb9ztoVigZLk39fmruAncnQzJjNgQZyRhDi29C5kGT4FTp
lnsHkFrZTtVKBqfDm5OMK0nGYZBMAK7b9yP6S4ZEMHInE4Dd1M6y1FZRLPortrtXfOSH+PvK
6AvTKbvu2m7E1J/HlDmB9kRmyqcw5GdSiCM8jIpn7gQSSKPlo8uWElxh81xNFORzPZqbpC7P
UCrdw+oURiA8RwmQ9aitAz73uNRMpVnEicYWDJCu6xkhFWxN+f6KAkdgdeKikXUm5usCVAOA
pDRjSPBR/fEZxhfrONL+p9q9fUZaHztER/z8PEftXOQHPvaBgy+xzINPs9/GgtMzD7n1QhbE
cqNn68fS3wKGx6nPgYa7tBNHoYArTJ5FVPUdCJkGLZ9r8n2rWwiC7t/sR25uIggvIPR58KOJ
zDhmywaM6AcI4t2MJm6/M/Lr6jXQT8XwElY5wfKiO6AT0KWDwgKC9wx54omiLqbq4+AZy3YX
Nl3E/SbNlAOwaTzkehJ4AXAHs4zMptkexhPhccG+U0nKSHWwZTeC+T6akFQXwct7xb6lIrRm
167QHgyMp5CNnsf8Bp/2hBxQw53wmsFiuO5nSd7RwHbCcgZ68zUG84vAtgb2IdBrQPtDZNyK
DO601x8Dth32z0P7+co0A6HvyCPApyqI4Pn+YrM9xMfTVrkAnMJ0GXgeaE3Ym/6bgGspoOhG
XX0MMkfDo/tZ0vEk7Wfh0W2OOQTpo9Tb4cyFGLkv/WPoKwk6pikoCs2p7DenMQ1lu1C/ltnI
XdX6BGQqiedh+hEES/xj0fdRhuI05D3HltZEKHKa6/qXOH8KfC4Mipu4dXENvFsSgTMBXg/p
Hfgat1QYdMBGY88aDIZPM2v1aOAe6gssoK7/DvgkjJ0Bj+7LfUNwAn8k+g+kOQWbZP+XBefA
eRrW/ILmjdB+Gb2rYw8yeIZTVV+B9i3gj1ewnmcbTzC+jvJvQXgx2+YQcdu6OoFMzgX/A4Iw
BufXA741sC/izN0I4z5OvRG4+QRtAXQqNBvdKPPBEBmrQqv7W9zrqv+NQOjbwHvD+0UCzD2y
hntYzXvMqWcMTIMo9TupPw39HBz4Jk6vxojaEHlvYAadjA33I+8MZI1HnwbEfGbKneCwyTft
NFM1hhephuZoqrXwcyZ+6MbgpoZX1XuguQ95etb/A4I5HRx/cUg3M/V1iPpg6O5B7g3QXEJ7
AfitsHI+wnkPYPLt+PEN7NPDNp6r1O9nEJwm+1RD/zBx3VeDE9qrgV+D3F9hj27tvx78nejl
xmX1WZL20HAQ3Equ72aa6AvS+v64/i7VUxCdhYJdMf5jwN6KkHvAM+r5C20UHUwxUqNGB7kP
Q1MK8kqbxPCfEnrWICCK0iYYezYyuOPZbEp7o8RQI1OO8fpPs5gA57Oz+QTqYYYZV70NNk3Q
3WEldkd0cTHVfAkth2IrM6SagtPMHtnFCQjCVRgUuug6BBqWjuqD0N8A/jBqbgA2JFczdKLW
dQVRPq2CobwEUq2DrvdBuwZgBnAzBvg68Glp9E1SaFcH9hIwVgceiNXVQ5LBYHqC6qvwHk79
FgbUqYRGA3U89P+B7Iuw5VL0vg7fOCRMnsYXJLi859Y0zPMgLAXDP0tnBzZNUW5P1xpRPDKN
29TQ081FZ7JI6RQ9Q4CUUqB0HZxa30p8maQomY9AppFMLXT5mkI6tglquJZVHn3qNx/1c0Cu
RfpLTKZr0azHwy8SFEYy7wBU1ZdJ+n8AO5Hgmp+AjET1WDr3MtAeoD4JGDo5ganr38P3uAg1
GFSnoraG1kjo7mGpvJIOzzVqrf/3Ep8jMVi2q8hXecejXCzkbrShaQecZa+ay+C5CtB6+Hkd
5L9lZj3HoPyf4D4E/Kf4MImDCm72OoZgLH/A3q/XTMKBWxHwCNpGQvcowVw/K0OY1u/30n+W
LYyI32MooOGc5Ku45mKRV4KY1jpIT0f2LSDvArd/kPCMWTNIt9Q5TiGbkeeiEbgxsBeg/R0O
30RQbsaRx+jvCN1+OLEn8r4H7960DyJgoxKvLNGflf0m/cWa2ancR5A1cBZAkGeojmP/xAxc
F7sWIkvLnQbjgwzAe9F5A7R7YuOqHEX1io9FhYOMGZYlbGPAxAMpArwptDoBeYL4PQH/3WzT
IXwd23bo0nI5nJicjS3/iJ4jmYJ+GJMdtwJ2vAHR6IzC6yxOH0Xmt8bhuShcF0G7ixBhE0nW
H2nKiF0Fg28nqrdhpKawLui4OATe6LlxOQX+A/CPCA7iZJK/mdv4h6G8CcPBu2r+E9gRggN7
N9UonJkHLce85gOCgzmN3QhsYORWJwkCDFk8ts3vSnHWh8Oa/bw14mOSllsNmH/Cp59j19Xw
vE2c+LUDYT2Akfs0enSWR1yaGWzv0OBgadkc2o96+QvcKuIjJtqvjh1q3IpPRwqO7KNB8RpQ
9RN08cbOxA1jefMJkpaz/dh0gqOyOfR6hOu/B35rwGKP4y8D54lbzdO8CUwzXt3hz1Rj1GiY
eDWonkR7BtQ/xbhrMeQ6tt8nmA7QZ2GZgvo7gnm3pBKMi6iOwun3E6BjAGzL6JkJfiT9E0XD
GqoRq00z/5NUB0FzDbUS/i9smFV9Hl5dZM6kNxdbr8SG7zJiZyN7JgHg4Vk90T6IoZy+Nodg
I+v4xJ8zO+GtbiLwFzPy70MOp+4TZyL7q+g9Vlwk5nb2XKn7FdFvA/p3jLoIGf8gPOUeZD/o
lo4nPJJGr5awk6k3wb6b8U0DWicmi6hPIgZXIPgntM/Cvgew9Sz4dof2ehYELqJ9EgCawjRl
5MTVONM9gEO0R55m4lILiS94glPa7QaGt7tLbYs20+d6qQwtpA7uudufLcgr/jAIMumAdX/6
0VHoFfdcagsklWSMAdIpwJkU5IzCqNBBlbafpWtZ4o1Hxhn/WcYaGQ1SxyMXBGnuwgUHfJKd
jNIJxBJmhO4AhFMQgvesELPo6LuGnRlsIV4LZIcEUnRr21qQZV6cAkYBD4aX+MoBPcnjqt3X
RHLLlup1Tkh9RsXECEYw5kWevG+YIbJFQuWSHAOfYPDatwio3uDxN2MA65ZUhINjDUuwz+AA
2DjtxadJgEBeaZLJIm+W/F+0GMgz7QPtAgAAAABJRU5ErkJggg==
--------------080600050308080709050608
Content-Type: image/png;
name="um2.png"
Content-Transfer-Encoding: base64
Content-ID: <part3.03050605.01020105(a)univ-montp2.fr>
Content-Disposition: inline;
filename="um2.png"
iVBORw0KGgoAAAANSUhEUgAAAMIAAABqCAYAAADuro6yAAAAAXNSR0IArs4c6QAAAAZiS0dE
AP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9wKFwcZNn+jK3cAACAA
SURBVHgB1H0HYBXFE/fe6+m9QkKAAKEJCEhRqg0FpIkiICJFmiK99w7SuxQB6TZEEBRQpErv
oZNGEkghvb6XvPt+s3f3SgpS/9/3bXLv9rbMzM7O7M6W2xOYjZu1aS/7ZvN+tVkUmSAINjHk
FXHxMHPaoRX08MLdpDW72N7jl1W3Yh4KWo1ahm+LiuOnAKLBDv8r3SexK1umsRpdJ6rik1OF
wkIzykBJ8GMhncMqTDu00i6v8jD9u9+ERdsPqFIOLi9Uwp703qz/bLWjQVe4f/HwJ81iSdd7
xnfC6esR6mvbZhRYAp/I4ye8M3ikqlPzeoX9OjZnA+ZtZqtGffpEOZ8nUWHmDqZ26cJEyInp
wYeqwoyfBYcw9tQ8IxqyLzG1xruFqHLuaNa6f/U8ZD1XXi4qxy/fZm/0nSWwMxttpa5UwO5v
DRJetDK0Gb5Y2LtgyBPhJ8JAAyuqDGU/GC7E/rbgP2HY5p3x3R62/9RldmLNBEt5UcEO7Ucv
e/V6xIOKBr0m1Gw2+yalZQl5RpPo5uSg8nJzLkRYjLuzwwMfT9crP8/+8oIlMzxe73zF2jd/
la0f97ltsJ2/3cilbPc3g+3CgNfQaujC+plZudXyTQUVcvKNHokpmWZTQSHzcXdWOTroc0Um
xjkZ9JGvVatwe9nwbpftALBQNCQ/sTZv1LYPfoFPpoRBTOtn3wgReKLdFPdmZbEgugqa0XIC
EwJFMdeFFSYVMhH6rfZUCSq3fFE0xqKRjRPUgTEa3w1XVPqwtKLkmRIGA8fSosEv9ZkrgoIB
PUIoeoQe6BEKQKyNQMErUlLRBc3srxDAk0qeF3lHj+CCHqEXegQP9AjUOtrQJ5rxaAANtxD+
A1p1oy1umx6hN3qEUPQIOVKvRsUAGJFpccvFw1zQD1iMDVm8jS0e0pW83M3ZtLfaj3+f65mR
ndcSQhgCGF75RhMzFRYytUrFe0mzWWTQAobWnznotQxCmuig110N8vXYu2FCz+UVygbwVr3+
59PY2Q2TFNB29xaD5rLDK0ZbwkYt+yHo2OXbA+OSUt8GzkoqlcoVNACPLV4zo56a8Oo0GqZS
CfEAcKlCGd/9h1eMWomy8jKxut1ZtzZN2dapX1jgvyhP/v3XmT7ohB24/Ni3mommiK5MzKjN
zDmBiCxLCURzjl065UFQ6eCl3l6VzgR1BBMcwgVN0AFd0NkfUIZ8JV1eVBWm0gYxXZlDStBL
vdsIGmNQhDZQhD1W00jWBVmWJIESx6X9tXL2y6AKilBm74nLF25FP/TlphHHq9Agkyqwo8Dd
BsKcaUuDjSJcgiLUkkwjOQ8ESLKTyMN0UKKCmt0mCFe3zuDAt/7xr8ea3Uem34tN7JWbb3Ig
wUeLT4JfoIKA4c4BkSlAXnooNIvQCTNqVNBo1CqmVauZQa+9W71C4Mw/Fg/fSLRV7DRa+HXe
V2LNilw2KIgNXbyDLRrShftHLf/B7ejF29Njk1J75OUb3YymArSspLOiCYonFsVLmUAXVY8W
aVQa4NTBhERPcT20jO/EQ8tH/sIBe7/NRk35gs37sjN/fN4fY3x7FDhK0AVd4vwyJU/zMOfs
6aYT7n7B1KmVmIqhgZIdCGMFzFhgZCp0ZNxZrWyBeg5SWA0ubvtKrMWj4BAjaAK3M13Yan3g
r1E8I34Ks35naufWyuNLuxNBFocK5gWVAmy8vCSWZ4vHkvHFeorYmiR2QMlvhFpu+UrHKbWM
dvFyyQQMHTB2IKcoQZP+szpPWffrykfp2d6kACTmKK4IISOMqCyReATE8rgJUkido4ouFa9L
1K3I8k0mIb+gIPT8jagNDXpNb3Fq/YR+qOS8mreiCQ7nWZ3PpliU4M0v572z4+CZ9elZOVIL
ChhIL6KlJ2HRSAIilRr0AAYSIAV6C8KHaH5nMNdgshVUu5IX+3PVj8etur5j5teINB290BRo
n92Z8y4xlaE2M8IUyr+3grk0JrJEfW50g/4sc/5onT4jIDtDYHcT3FlCuhPLL9CCLaLg6mBk
gR5Z+tCATFFjYEJ+DuXj7YfMQ6Uk4AmFoCyMmUCoKVg0ZowWChNH50WWX65yem+uzndlLCmB
Mf59QRe4j/Pw2Uv0+Jx2isApVdJzMkEjVaPFEdH/KYiW1M/gocIWyPnQJNti5y2JGswjaX0c
UxRFsqbhVh7X5gJnR4OgdCUNe8+YdzsmYWR2bj6ZPiKZP+So5uhGP/hFNZIHPxSi+OnB8swU
AWW5EMx7cYk9GvaZEQA4rSCU5uqfTGCpmdns4qYpBIjV7j7pq+sR8Uuz8vKhUBwgFIBUiwDK
CsdT0g9HQj/k+J0nhI+UBRfQiAJ6FPbgUcGA13pNJ/Ok/anvJrJPJq4Wtk/vr+TlAJ70h5Qg
8xi6T3k8kB/bskl+pN8cB1Vy46RMgW39ozb7OzyY3Yz3FO8/coVCakCLKHo657EQn3SxdrlE
1q7uXbFtvSjimWiE0QOr0s5xaZLLRMpCkWJhCrqBlC/NmTva50dXm6Avd32TogTGh58ynf9m
Oxgv6kGq+ZKgEVlSS0RNFJGLEOm/pOQvMUwWe8JNRJErwlEKKR5EieVLykcC8+D3RdT8sPqf
T10Z9SB5ZE6ukaH1p26CJIqnt+gfASVp4w5xlggeoDzxBEpewBIx0C28Hf3w7Vc/m8JHfOHb
Z7D4vYt4ppD2I4fFJKYszc4zkvIVyuBlAoFBKgenQ8LLweNZok0K45RQvUgXAqmnIJsJ5l27
Wp9OWkDpSAkGzvtezvLkN2PiQJZziTGXJlKe/Oiqw815/x7WCYmN7yUYCroub28eurkl2/Nv
mHjnvjen1dM5V/BwyhNMhSp27b6PsP5QbdZ9RRuhy5L32fUYN0HnhBEBhlmASBd3aJ/Ac16b
xAZecrojQQEUoqxovLUxL6rij+AtN71ICQozdijZX+i9dEUgshTporrg9UFhLxT/44FZ8MvJ
OO7SCCghXOYy5QYziXQ+GMNAdnbUg0cDsnLzaNBJGXnlyEJJPVEBTCixEIJGA2M84I6uCGYV
LHTqcdArSS0xgcbF9UURagg47GMzi0tMHdR62OKOFE+u+ifjh2Zk5y6gOLCTlI/sG8pLMArx
U1BgNgs0PiFclI7udCEZKbCksPDIWMnHcfM7Qo0wzBNTMoY1GzDnQwpbOaoH3Z7IFaTM5OnM
ySsFR0w8gTbn/MhyP4jG2/OZOVdtwvyPh5NRM7/bYdWxSdvYqgH7hA8a3GYGbQHLzKVBsIAe
TmQOOhNzd82BuaRmO09UZe/M/oj9dLSiqHUkWqWLqoa4zsWKc1D2U6jA1AgHerDaFPFhfoTv
eeODbmFEnClpgMqUNIi8L9SVrgiEhlNJHqIUl0wwhfxPnILfDi+4xxtHewqUpEVC5Q5XCgV3
8xr1mdkPPcEY2NbcHJKFlxKA8VzYSTi1bs4OKndnx3hc1/w83cJxv+nh6pjmiPlUKIMGCoKs
XBl4Xhv+EByYSgL1DOx2zEMuXW999c3Hj9KzFnIloBJIRj5XQLTkAsLVUCCNj7sLg/kW4eXm
dBVTpuEerk4R7i6OZDppoZBWxaEWlHJLSkQ0wCugd1MVQNlYakb21IOnwt0ovPfMDXT7T6fx
HM/EfxkzVIOFkn3AzRhV7g+xILYzCSRAY3aAMWdDgVgrJIW9Ue0h6//eNXH3mN/Yxv77WfWg
ZJaRq6OiW/CQQrjBVIpPdWa917RiB86VFfVOxGeraFHVWuqOHnh7RZXBi0O8BOKkaubsXQfy
IkPCDBVTzVqfFSz//hsWPC/CYzdGsAPIqSPKyMmFoxuV4n/lOMeATKHFjmNPQIS1TqTEAvOM
iE+clW8s4Eog1xoxmySaTCTm6+F8z8lBt1Wn1ZzxcHGKKuPrnhFa1k8IvxenTkjN8ErLygmG
OdUJ965ZOXmkDESfxBSFTfIzteQYG5RrN2rpKgyi3yVzCGMCUgKudUDJc9A0LNYmDqlVwtYA
b/doAIurVbFsrl6vFe7GJuiSUjP9802FTZPTMnsnp2VVMBXQ7DaHQ7RziZG5QfCgC2oxISWj
2uzNvzfD82/rx38uR5d+u3o3lm3e2YoJja4RbYb8yKC9rDDudfih8dRzSWigDCKGNhZHI5t2
jSNZLYwJPlryATt7L4C5OUoJlOqi57RsAxuzvRmrEfQzBtN5DMMyDKwkMIAtVTEeSY+oEOSV
cZJqoK3ICRLEuAP5MfXe1gefu6UPOi6lekG/pSsCRyBXMFUzUcfvMpkviIAnAANGEGK4x9JQ
jC4pE29heC3SfKcmL9/kSa01HBcmCCu13szb3SXF29156Jv1q/4ye0DnLAlhsd9IhJzD9Uvr
YYt2QHjWpmbm+NEYmwTTNjXBJzwwqfQnLt/pTz2BPBVLrToqVlTpdVoslLkcDfLzHPPH4mFn
AaPgqgzkoC0wxu7i8fiPf59ZsWDrga+hHFOhzAImtrh5JbVOvPwAK5K5x7AOwtIysz9Fvt/s
QZX81HzAHOHRwWu8DBm3y28yqOLfICJlJeDhXGApO/VGsoPFKGZh9igkMJut+Pwge3vWx9wk
0mtg1nBJ5glFV4d8djnGl32LscPU7qeYOQ+9l6ViJXgAymuL6plXNW8v4CVTCZ21KJqCYCod
KMz8+XW1S6fYvMhQwVD+roUWhaZnuT/GNOLwiR7OYa4FnLoXgvdpaFUGpVIemZriAIrRRdWF
vGhjlKbJmklSAjRvOp2GhQR47+vbrlmlM99N+t6qBE5s8Y4D1hzwTVwtTdNT4O8Lh+5p9ErF
t1ydDEl45D0KhUtOaj6BhOb9VWQikYASUsTTSgBXghoVy0zGdGezP5cM/xdRfLas5/T1ChB+
/+vsdWZo2pf7O7d8LR3TstN8PV07OTnoaWEPukUKaCmghTs0G/UoI/v9g2evOVDmczciOIyS
ftoMX8IeHVzOGThyXu+VyWmpH+m0fBwjiSrVgMRFDp+KAjj8AhpBgyWPgjwm1K+azPq0uMLy
THwGibNfSYaxPI0fhD0XKgqR952Yo563bxK9BJ0Aynfyc2KUkuGOWpRk1ZwSjDHC9+CnjpTA
+KADJX9u9xhFINhEDifJisjCc2vQS/Up6CWWPQZViQmQ29pS26Sg3gGzGCoBC1G7Lm2e2nbs
Z60xb8dYs/5zZBzZbEiXd+zwTe/fkf1+4jIr134ED985Y+C12pWDFwAOb/yoAZUy0I0Tzp9J
KCUdwIgYwuvooGPBfp4DsLo8TUHQb84m7t04sbcSxO9v1q/G8o6ulcIqYmEL7vr2mb/4e7lN
g/lGNgOaXquj6iE6CDtWpx1/OXyhIcVu+eOUNZGNr+2IJWzvgq95iLr5qi7Z2bED/N3TqTwK
56lQ9GQVfyk/6bZUSCRAh8dd5wa3mAMGz2AvyoxoJOIXYl0MRvF6nLd4JcaHCXqeXMEhPdAT
YCmOl4Vw46JgPBNOIEtskR9dfgKl0wXsYvmxzcn7XK50ReDFVqgCHQrJyv250D5hZpIeIsGO
ltLylkCYlFvqGSgbcRaOuEleXw+Xi2hhPwIac+8Z6/nq2JHVY3ia0n5av16LRf86X64RBiEa
shSD2YcET2qdpZaS1yjhoT8JL8wks0DbI8r5ey0+v2nKasLRZeIqjgoKVRpKa/i9XxnGG/y5
QbUKKxx02tswssi8pcLLhZPooAey3y/eiqlBGU6Hl9wj7NmDxQK4xTsOemnYgyVO+gzm6MTM
mHzi8EA6ejvupzuvC6k4vFgWnDyugAllvDIFGjjnm9Scx1IqJAMMtcos5OdiPTrBQ6AterRr
BSAluDL9SEkwec1TnPJM+YkOBKD6oHWFjyYa41o1Jtr1Zf9hpoSe5H1mV7oikDrz0hFs+Ikk
YoT0Q56X7yT9J9bIbY+CkhOiPMh34l9pTikI5yQ9CNgfxOqGhXwBzhaUaTOUrZ/Q265lLQ2S
Ei4LN9VMbrC/169omSkKlcU9Er1cYoiN/BKoZ3B20J87vX7iMEpcocMoYcf0AeRlAzq24Pf/
+tk9bzBjNbpovh37WSLMo0M6rZp6BSo8CCAaZK8UwLJz8yoRTEwVl8ygWz9RNNu8/+TC/Pwc
X8ys0ZIlkao4GifYOl5QJYCXFvE8CQbSznqjWN47HfuzoAiSrMh0kTQhlbqQYQFONGGwrIH0
IUSBzwsBuASf+MfvMjJLX4tnIqdQLMxk5vxL8xU6tH4bWWE6b1uUoKe6l64IBIaXjjxATyXm
z5ZAini5TpG2YliehgaZlQRD8tIYkHm6Om3FghMNfFkZXw+6PbPDPqPfDBj4khKAZCtxXEqo
5kg/aDpHzcLKB6yh5zo9Jqu+n9LHhrgnR1/n1So8MZTqCuZcpbrhITao8cyfBCGIoqTOkSey
/HSb9C1P8uHYFdWx4e9jTJqy5ExHRrNCtMFEJl/hm5TPioI/0yMvhOSBslM5ZTuJp7AUkbf8
2BnCMnJ02IxEPaWcWUmCZ+CkUHL8bvlR0tAdg2eeojClUX5MHcleRIDarT8Pfpaf0hWBc4HI
wCXfngXBc+Xh4iNDoE6UnKV2pMfH/FIGXLa9Gc2FmwXawenq5LBTyYtBsuJ9qvvUdbt5eiyc
3YEiYNihtMwWMLwnlfSD0c7R1PXjem2h2P4dWpjfqFXZkvBpPMDFmQGTLAbly7bJC3wUhQpD
i0o6ic2LfhSvxXiiqNs6TVIErHWMxIBer8VMD7ZMCKnZBlHAlI4lvdS0U+F4O40IiuMX+YGS
agqjYewWxMoy1hNoYCxl5zcSIGseLk82sbbPIFnKiDvlIvj0wyGQH+EcF8WJRixBxo+TQNGz
lFV5fpp76YogYybc//ccEWFhgUSKTYNrS1epPCDyKZKDwmAA05YQpJthIQFXKP/zMG9yn3ac
hFqVyhZgLSBBpkFmmD3fSCixO/Wvsr4euZSpX4fmPO+z/Ph5unLg5QN9HsGGySuCCSC5/vHV
cGwm5FtKsP5gh2ogXuJh7IJ52OLtoelZuW9isQ4zOYXihUh/7B1ygeYojJfYZ5fZ5gHFskgK
tdOkBNdifRhNn1rsGTk9JaQwilOjZyB+SdolJeDPNrAtXmTkZeQAUJUSTh5kLkyrJcY3bElp
I652lnoKS8Yn95SuCByGLYuJGtvnJ0fyzCmp4IojBZAZoQTZ3sm0LeKobSGWWaoKQi9vrBPO
YXYmmtKTgD6vwygw02gqjCWzAA6EyLQAs6JodC/j7X7keXFRfmxT5whuRD6IxtbtDBuDntpL
pLCWSe6lECzTJBOwUn6T7c/T4a1y841lEWyi6c0co0bYcrw6NpmQiSMnlgAShzmXAV3iLW+f
OToyiTifD4eXY9GJruiJsJWdpNxKCvmRTxA8nfKgDFycinJfqWVCLNUo12mJDgTweCqKklFg
+TpjXuRnlKKC7if7QkrZnuj3cYoglwI3pZPi2J8Z1xMRZJeImg8qNTGcC5eCW7nbprbluByu
BMkVBmEQaBELrfc9SvHReGnGxhbKs/hTM3PzsWUjzUapZMyoebnGaHwAU0ZZL3sWNJY8b9Tm
41/2RYem9DIEt72lSlL4wiuMp1dYwKVUhhD98BH3gR9a7Et/ixbf+BQwQh10BWzbyarsSqQH
02AFAuyXQOBXLoqEj0JxEUaqIp2BsbQ0tbD0z1cFrdZ23gG5JLLACnhgOpXxzOTTp8qUqzWe
k0U/Ek5CKfmsv3IM0UWQdVDWm/GuTVlrMVQIY+ZtB0qeJrZALsVTuiIQL6mE3CmMVZ5LgfZS
g4kDuGRGFEVVtMWziydu4p+Kg20MzMfDJYHif5gpzdjYpX2Gh2B/TwGzN2oLuzidVkIxbYqV
a2eWkJoZT+D3HLv4DFisWfBWGn9oXDNUFmCqF8In4yyxmqyBfWZ+x/N3GrO8HFa+m/EHsIba
HR1a8pQsAxu5tQVLS8XLRs6wkqhnQHYqnyyY3E/P1GsYsJnODANs1Pbm7HK0L9+ER7CsHKCM
MOehBI7oDYK9sRQNJ2/LlpIhiawQFCX5EcaD6Ud2tjRQL4RtGua/r/mFsJSNNSnJih//UpI+
1b10RSC9V0ptsTuIZonup8LyrIkJr4TSlhUl0qA0HXaorLm4j9Jgq0Mm9u7fsUv3nA8FmHQH
t6zYlCqlWkN9Y8McFrdy4zKz8/jAtm2TOs+FUTbB+BynTW1I+CWlt6WF41LmKOnh4LKRPCw5
PTs0PTvXHS8T0zQPwFKVi7TwxQ5cCWHtF3Zkp6/78qwGDBswxwDFo5eWMHevxbMTFAE9wfUo
N/bR0tZs7V+1RGcsmpH9zx0nziJHYna+VqwZnMRqBiWLorQdiZJJpMn9BnJSZqp36ZJASXKA
CCqexFYm0vg/O08o2H/Rh/l7P6xPwE6sHU+3p3bFpxIUEEQAdWUWwVdYLlGmJHupd46e8MLD
Sw+/opzFEJdIlxzIAQGEiArUFOLFd+PZYvlfcADHzBnI8WKAXoCBsnjtBaCRBYHWD7jUWEDy
YspF5kyzVJ4lia0HrHwN4wOpVwEsNBTITHuVRIE2yh29UZa1nteJfdL4hvh+7QhW3iddoBdv
VNCb9Bw9H1QfuxkkrDv8CotJchNdHSlOws+ridNDGGnXnID3u9WsQcWHYjnsS8rGyz22faiU
yiptSsEAR+rsiTJJFEhxJGGE9EYmuatO3vZHj5tRTRSz9YLgZFUx28L+h790ReAl4eSBBFkY
+V2i4T/gvshoCb8kU4+BW4wuqRVRpAY5qUfAfv2MrNz8uMcAeoFRsiTgptdqVT5uLsWIfIHI
qJoIYcmuhJi0jJzKck8qVTAnl3t5alIGWiFevr8u23CkBqvknyZ6OuVCcUQRisAiEt1Zcrqj
6IAexN05FxKrFE+5Q3jJRIJ1kZOvZX5u2VCq6xgnUF1IUmVHLAk9AjgFdIenCNmWR94ronfa
eKSmKitXzwK8WVjvWT94ItsDO5hP+FC6Ikj6p5CDpqckyp8QyzMnkznLi0/sgZNv0oPtr4VH
SqA1g9wwUwBeHsuJiEuURotKyhd/l3BLLRcnjFpvvHTz4jFZISrlBT6LRFpiLe2aJQSrzXn5
ZeRMJHSSV244qHOAEMMMMgtebjnYSySwm3GezGSGNQ0MZP4YMLCmOCzN8Bafdyg28GWJhhrA
JIUidMCGvIZhiSw/jynmE+GUujWuL3hSSsEjJGBSIu7nsUSL3kUUrtzxYFuOVxN1GJzn5OV7
Xb0bg+H9s7nSxwh835YtCYqgKfdnQ/iUuYAMNBCHOQuU3E9IAyWTlYByUh1rMT3SrmmdxzQA
Co7nusu9kRUGkW9XBGvUi/KhdFRguqQfW8A81CYA9ga9CRdoDVKok+/IICkPbSUn4cc6CATf
xWASXfCCvqPexBfN8PIeRyYpAWe2BRXxG6aSmJWnZWHBieKUTic4ZbKuFUUtBUu5+S8o4Xf8
8HEEUUYBDjqR4eAAcdiWlpiAcMb+rQLQpvHGeU8YyTybK10RaPuyxRFLiCwiwybYEv/SPISU
8NojJTKKuKJJeLSSSxJL3uZRVnqd8SW7xxkpLws1SsvZRaVWSm7FVYRnf5y6qnNzdgyVZ9t4
Rp7YPrf8hMwcIv1QXcjBFjQ8krJTnPwA2YVe5BnV2NdVwOZ1PSL4+eYzeomf0kGUpCaK8ki0
Sfnwq2CjNDwxao5Ejy4HaUqXff39m8Lh68HM1RkvRyGG4tDjPnMDV7oi2I7DOBpg4nTR/X/m
JGT2rLLy2oYMhf02QZyj/Jny25fHLtkLf+C4QHqJRL1wbApAIOTsoh/uUSL4XRZPJexa5AMR
5gT2i/IIpC+SQAouDotbCgr4otlIHAk3j+fjAmOhWpz24XHWtn6UWIA1dZoyJcnll5JYQs1b
O8qJR64ClIZDwy9tqaKZq0JM0/Zb/xbbdLSGSLNb9MaOrC9SO60U8CnvpWuQPIqS4MlMoluR
xvkp8T02uSI/1kRSLVl6BJkMa/x/+Hh6yw+vnf/I8WKiqe8hPpFcyEV4MYBlKCWXBAjpn0fy
Qtvh5DJqDZFnnGwgkVehmdIpIJQeQMmLZzmpFKKk43l4y00DWSNmiApgUkEJhKHtLjF6cQcv
/9McbXEnweMxnHzed3OlwTYRFXPS421RTNeG33Nno7Y2Z/vOhzJHx3ze40hKIGIGCqeM4SWr
Z3WPyWmpRUXhnhXHE+fT0AZ1e0aBRfinMF6R9pH2gImbdq5YgF3sy30gnoFYpfd/wchKZoNU
XttfqzSDr/aZygV4CpjS1clCbaWVpyMgdFGeImXgYGxhSQilEtJbaIzeUBMKMKCdjDHB+I/O
SnvjaKZISmT5RU4psxRhVVUZtQHCLziaWXy8ge38N0xYtL+eeD/ZlbnAHMK7DbBTwGTkRdkE
vLpqxPlUthsQLXiexFO6acTJ5nSiBSCSJZoJPQGmg4NftEvJyOH2u7XOZPwckS0bJVrs8dvG
yxkoWUlJ7TO+nCeO+3+OXJaM/y5S5xb1TTl5xmiZ1+iMQauFXEm8LAG8LJyXUm9gMQuI5xgJ
8KEsiYjAMvN0fBv2N13/YZM+PIPzZXCGjknSQ6VeZVGS1IzAynjRqEM5YQJhHECr1Q9SDWzx
L7VZ+wUd2DCco5Sc4Si4Y2UaSsALCMxEADcksMs2xdfDNY9HPMPP43oEKzheAplaRd4sTLMm
e14fTmtgdP6n3DMCnFRODlfBW/zhcWgVUEoP+ri0Lz5Owv4SOFUSqYRGYRLnm/JQUmLY1oK5
cucxtOUjhCewcgpgFFgKCLnptUDi4UokqQJNnwoZGQ5ikF86W/TpX6xT4wiaJuVjAuolSNhl
RaDOifMEYbRZT8Q7UtishAvybUSeK/d8+LoFnaQXmeSG3kWFE/SkdQrCQ2RYfyRY2DAYXaO8
V8ZvFPkM7jGKQAgVhkh46XiSCmV8Ai8D0Ru1Kz8DusdnOX8rSkzLzCmgUxgkhwrgLAN+JYhH
SIGPh4ZYJY/Uhz5hpv+E+iQJZMwKAU+S5bnTSMh4lfGW0g6g0uraBULmnCtAUQAAIABJREFU
8NyYwhBPIibz2Y5ue97zJoUaYSkNKQG5DCyw1ascL6z/Yj97pUoqK4SRwoVfkVlAoWe66FgA
HXY2aWnWH71Aepqa3bzjJZy8XYb9craScAn7lbKw7kAYnDBNi42A2D5PT0QKLyD8MgGSrqkN
OnX4rEHd+XvnFPm0zk4RgEoqNC8b/5HhEflMKMS7oh4ujs/3OlcJFNKOwa7vNMTqpKMBx60E
8N2Q1G5QWYuYqFJ2YkpRZ0uvHMephl/R6aJZXuYzkcgloSRaXwZiBU8JfAA6YkFR5+XmcvXh
owyKo0z2ZrLCOyUTB4sfwLFtV+jMUyM203VpfIMt7H6YBfjlMSNefVDWDgkvtWt059u6SeI0
opj2SI33qAPZhUg/8fS9AOHozSCWmu7ItBB8Ld5wo8OE6eUeLnmkBPiXHsgDJz8TWXp6XdXM
nmsno70icOHjaICUlJ7IByrCBh+UF5ucjC98Er7r6OUcKTanOQAltnFxZ6v+ViLkyCe6yTyT
OGh5eKKsz5cI1Sd34c8Hp7TcVCHFnFxLPNzWLwVwibLPgy3Y53CYGd5rzgfr+SYhiUn24KXm
n8fgh4aosM1JGWibBe1Wnd75BBvZ5izeQWBibiZWnfG6Mtn6/PB3kh7p2GbxdryrcOJOGfbv
nUC+Sn37gSctiOGtfjM/4cLTLVtp+WkkCmRAZG2a4eP45UJAS/AMK0Xr4qjND/B2uh6OmL/P
XmIt6+O8yqd0dopw6lrEbYVfnJP0QAyQCSCDLjOHv2D1lGj+I/nFLTwBepuK4ZFxyiYwsJp4
QQTI9Srf/gOaEk0VKNFvaVGUqJd8J3zcldidvQDkCvxioBSLhSKU0kuJOB8l76pfDvPDAjq3
rB+9cd+JcBz7Uh0DVZrix+4dpJFYjl/5QbZ/uDggFC21mI430Sr4pWE88LfwQeMo0QyxwEF+
zAE7UilbRqaaPcp0wKFePuzYrbLsxK0ytDeJdqCyHDonFXD0OnyBCJv4OHjwDMc9EULuQK5S
f9Kd04IfmTZ5zob3Nthaf+7gsvEnheUTnkkJCCFXhGOXbrEmtauwX/85n+buSiUh+SOM5ECb
zAHqO9Myc5UIHvu8P4pZRHAeJKfh1ShCJ/ODYyL8FIsfC030/AROoZTLo/LwBPleRBKFdl5z
LwKgFYbCHmuIjY94xfnEmWaJsC29cmLGyE/fS6j72dT9mHGpjtlAmorBGFpWXm4uWXPxJhqP
NK+fAWFuUS2GLet5iFUNScfHIaAcsPcFmERHr/qz85EB7ATs/X9vB/JzT5VZHtqfRC/2YzWY
mz2cOCKT02xzpwhF66TKB3AKhJMbGRSRH5ZML1rhaM7joDuvdvcJ2ktbZmDJ7ekdtwvdnSXh
rxwSoNZbFyWAWmamzFi8nY6X3g2B4RGxUoanx1csB40NFIcXWJopfiCnolvHRooSlCoFCqcU
CHJ+BYYl+H/gUUixbZ//B2iBQsbM602hgmMuyrbJa3/l4UF+HntcHA0m8F7LlUCiGXy3dGtI
BwsFgofTrYVMvLTzWdNrwk9DdgtVK6QTDiErVyWs219N6Lq8jfDh4vZs2Ia32K9nQ1k6doXS
DlZng4kuAfuTsC+okJ90IZMqmTtK3XITQC4DYeSOMHM0hAoeWtrGn9xaYiEt+73GtXdQ0npV
K+IF02dzXBFqhtIrq4xVCfZjro4O6KJkBZBvtqDxYovPoh2HuCJEP0y2jXomf5QMA+VyTMnM
bmAHhDdDCLGlgzPFNsAuh/0DJXvCpPYZX8DTS8TLWVAqibL8FIu3J2hqX34KCj5tNfgoFtb+
oFdJwW4SRSmhBYmkGbRSnIs1gmEfnGFr+hxk7t6QObS9v50qz97Gse9fbXqL/XKmskjHPXp7
ZHEF0OIMI8WRZil+S6UoukZR1ljJJwu6NU8xH1RFYH4ern/PHtjpEsWuHdfTCqVY8scH2M0U
oGWAlceU1TkboArF9LqduVpMwiP+rmA5f+/HQ3+C2PeHLuI0vDd0Ye/cPJMH8QQFlHBLLQRB
UapHhlhaZRdBqDQkcvNTJPZlPsqUPyGdT02JTdVY80rI+K9Fim1ii9MCnvPAV6sEz4ElwE/D
4Mogi6UsutQT8Ncsp310jC3oflTQoBlMTtCxfmveZB8vbctOwf6nGR76UAiEn1cemVD0LgPe
QxBokS0txyDQidh0YZAtZOZirIAZJ6ShdQLUOR3BSQcl41Bm+mwdBXE7iMpKg3P8khcU074j
GtA4Ggww6UOnK4W0dCJKwFPc7QbLTpi9NBYUxKAWqwIGmgKZodQX0QBeJRTiNUeDudBcF/HX
ngJPsaRvfDGbf5Xy4LIRtFitq/zR2D50pAiVXk4MrFRP0o/UYcqcKAatlABOdylxLzdYIpSL
RHEBfH7UJcIETvBKwky/5CwJLR4pnP/uXzSML9HunDnwZI2uEzbcT0gZIEdzwaP2CD0BNufp
2NTOx9nED8/gpWYmRkQ7C72+fU88ggUvZ+z5IZuf5vkh2PgmBESqUCW4uuSyCr7pzNcth07C
FrAWINK0KL1LkF+goV2p/C03mnlKyTYISRmO+LyUDqIHEcdYgj5iRBvquHLgGfTzItCAOteo
MQOmukqQYdPyET3OEs3tRy9lv87FKYDP6OwUYc3oz/JqdpsYi7NwqtJUqcXJXhwbosrBevmj
jKyvELeJ4kcs3cnmD/7YkvRJPAu2/cHW7j7Cbu6czZM36D19LD5s8QqZZHSaAqmdBAcBChnU
HHC9VOq4KKYSwyEYPB+pxP/OKbQSToX+F4m91LIAGcfHEzwV5k/ebjDlu73HOyWmZtCxj2iS
8b4CCTcE9Yt3LggTO57mUytJiTrWbUUb6gW4AtAsEFlUGrTmVcs8Ym/XjGJ1QhJZkFcGo2Nb
aEuEI7Zhy2cZkZijd8HntQpUDHmFnDytSD0GjSdwsBh7mOrEYjGlGpXkxuJSXGiwzZWkADhA
j+iCIyXfr31H/U7tjLj2TcIm+q4GY53bPpcSUNXYKQI6gEJ83ugIvjTxNlppMMPSI0jVCH2l
Vd/YxNS6ZMqgRVk/f+xyft6/klRK+Pjff87fVEEJeGsEJfgExw1OoaPT5ZfIyayQBZfqElLF
BUquV1v/49FISgQGkma9HIl8DAEvU/VKF3FgRVmlePtC01MJriPWcH6Z+yUb/3nbRHz0vSe2
Zu/LzMlX4eV8c0a2XvV+3Tvigu6HRdr9acphbPCmN9mpG0GiFlY0vX4ZDIGn95m7vn6DVS+T
zNycMC5QVoJo6ErDBKIK+KkmiTQBb5S5CIXM281Ep+NJk7Z0p3qnOR/ko6lYMsmoR8qTTCw0
kiJWmvPwJSN84zrU5StBOHkfqdmURd3ZlL57yPvMjtBzhw9FyD7htCM2f6B1RvdIdOPi1FNB
uGzhiykmduVu7PyB32xuyLKPQWEqCe8PW8Tz95i2ToZjvQ1fygf1rO+sDeytL+ep9iwYwpWg
5aC5A2IepmzDSWtQAmqF5CpEVqne+K9NKCJk3bRCl3zE6CJOEgclt/RUJMlLepR6LsL8crCW
UFheEl5fJaMszh6p7KQETftJdY+Tvffj9Lyhjtj2mZGjUYV4p4vfdPuHOeO1SCrJtpNhAnaB
Ukahol+aMLbdKXZo3A/C8n7/CI2rJghuzoX8ePh8LKrlZUCQaW0BU6u06Q5f6sLBwNhLhCsP
foSx/Hwm5FGaLNwpPRa5TdhrROcd0c5TUiofd6MQ5JvLqgRlsNAymUKAF7ZcuLrNEoSHu4iQ
vPstoARPZ5FQvqLOoghlfTx53HuNatzAvPJ1CL11TlnmIlp9aR4NI6Oc3Hz3/Sev/N5i4Nx3
8EEXcd/CoTz/95P6FMXBFgzuwsPWjvucHVo+yjxy6Y4KsEk3X75zfyVOayYlILikeBYFtPYw
RSqWhKCEWi1RPyzpisAoRuFLCCCCLPhfMPzSCsvDS0HKxysl0/HJu6+xDqOW8ciTa8cvDgup
uMDFUcO+evesUK1COr1LwHKwRrD1OD6uhjHAyPb/sj0jfmbTup3COCCL0eZn2mBHQo+Onbui
JHKqZNJ4bdj6FbIQJplOgEe9AuBxRQJsUqp8HOhtLKywX/CLH09Z8u83Y4agw0ru57pbFGHL
tC84oPmDu8S5OBkOYEoN+zcwsuGbfYhqSZiol4DgwtYTC/FxPM8r92J/x1fv1+NDFxX/i5IR
S3fUqv3p5NXbDpw+i8Wz7niRHu+04tB8SQkAWsRrfVqsOGoxrU29EeEEbkKvKABx+DGVWoQG
iegigf+TR6L5JTliRXEnF9UqgXZlf1znNKBjS7Zr3lds65+nONijq74eMapTwarOje6zwlx8
EQeiEIkTK+iEut/H7WTzehxnoYFZ9N6wkIuW3eKAxIpeDgUVRC4nRiJCqj05XMmr5EPZJLrp
Dh/+aeiIlhIpVZ4HVV6TP6E8mauxMh10RMn+3He7MQI+UE3f5mUdmr/67abfT3SH3e5NrTQ5
ZToC1PFyocQ45gkNREGhJubho14Q7M+qfDT2Ik6ZPo1xxPXQsr44WcAohkfEqbCXrgE+vNfw
+30nK5Hw06daydH+FhJ+WQ9U9AWYID+vzThduhpA15XYShyQWUle7qd7Uccj7QMtQcjPOWkf
/VKfFLJfAhL0naVDpfqylNua7EmGLN3ebci8Wk1gj/6Ywcb0WzZw9MPqiXkZmZMLzYUqnE5X
uOLzQ2pHZ/TaaKnxPUasEst00E3GydEXwS+zQpF1nlYhk2e1TS8nlkGS+GHeBv+aMrv0ITGf
QFbyU3ZDCRp0wZHiksltLeWz++wUgZSAsVrC9C863qzbc+p8DJrmoGmmHoAE1tY8l59Jackr
wgYsUD94lF7vQXJ6PSrxjch4zh3y0w5HhVFUToRxE4vIRsG4OaTGgg5erNjUpHblsdv/PHVI
5pbUPlAmi7N7sISWoCByLSGJUlHWEJt8L8FLtUwNBhX+pbhS4QKxEicRYUH/hA3B9J4hbMD3
+Dq4bzYT/MOn5EfXjhZNUWv0mjRac2PGHD7BaeWk1cf5LBdZCeV3/Ej1aCFG8oAkhSopvfzM
AymTRQnKLdGHRAylBjM/7h1M6SSKOv8XpwREjcU0UmgUxUucqPMbJ88t5+95gsJp4ExEKGno
TgJs2zhTPCkMegNKTMcc4qIBMPnlOJlLPC9gQIG4+YV8tL37AD6s1xNn9VNdYqhE6DgOsIcw
wtFd8fMA2x9FAGzClLQUpfhtol+al8opmQEvDUWpgHk1FS+szPpSsykRA7v04UpQmMXHokxf
7tIGlaFeY1Htd5u+fSB35rwKUX1WoQBKmxpQvApae+mhtJxFElYOR1YV+KmuJLNI7ZIl6Kp/
YSgfOQQIRWN8e0Ff5oCoC+YLyQrJL+ReTBEUISXoYz99v1Own9dJKhV6BgqiDbV8UAs/+aQb
xcgl4AFUEGVizJY/9v0zdtCKODxXwwK83H7du3BIOwKTm29yRF4CLDlCbmGr4rdGy6lwKxam
5JIy2TxZ87xEH5HDefIScRQFLQtT0WDpuRh/Sk4mh6qdOzDjA2k2Rlf20Fld8LV6Kl3VOYJK
n0rLviS8SGqEQOM9G859q+oXQUUJiwRxLDJ7SORoxtBEMJEW4A3Ymh2wU+XQsrqh3NW1lDj3
JiK0ISWB4bCe96eYIhDALhNWcbgfv9MwYd+yYW/irbQNsP0FGg+gd6BWnsfLzCBBlQi0JZPC
eEnlKPQqSIeskpmFVWSNs6OeVSzjuxA9QadqIYGYG0AXJYHm8Ev/eaJEVrGQOV46vP/PYkos
D/jM66E03pQWXnrZdQE7mTHmdZ5ApfHJ1JcLH6t2+qCRoCn3k6ByyoTE6kAKPwWchFmGZO0l
EKCIhCwyXIHg58RQGPLj+8l8+7dWUOFFZU3AMZXhjY8NFR500QXujiGYefc8mC74H6b1WSyj
ePG3EhVhx4wB7IORS1j3qWuFYC+PvIvfT+1Vo0KZj8sHeEfiEF0VjRtoKE+Oxgfcq5SUAhWe
I4zieBopLTeFsGNQ8PN0uxYW4t/p9HcTh0M5zHM376Oc5Ci3gfsUFZNEmgbn5LCZXTEtpYAi
v3r5mcSCYNleFEWwFQrp+UU5BS/RqbSOhEfh8YvDa6WefDKveAUULTOVjdOlCCQFPI3TBZ9g
xsQhlizagB9v6ctHdhYMrzYXtJUXCBqf69AHkgHMfJC1ICW1+OUw+ZlTTmmUZ+RVA0YW0wSu
AbzW+vLxzdAD/UBQsm+gy4lrywwVU5nasbkE+CX92g2WbXH89s3X9Cj2mvGd8N2EXiI+iv3D
L3+fOzp/+5/vJqdlfoEvzjemr8kT+3EX8HEyLvToNclRs8895MenA7jo0VgAuwVvYPwwe9CH
LX/t37EFll4YG7Z0hzD60/eVDNSy8HCIE+Yn4KQYCseud74pUElLsUUdZry5w3KNTZSUg4SC
YCutl02C5/YqmxUx481bOAUgYSZhxYzBi8JrKRjBpvL445J4ZWmDESIpAafLkoMHP92Pzncx
eoYGaJVPs/zo6kLho3BBX/bYBUC5YEzsNVfMwQnBoqkFE/ObobIas8JkWa5IGCTGWzCKhehD
3CAPunBB5X6SqRwPMsHlgj7oeARj0gRLfkxdtT74fKET7XhjeyxZX6anVEVQkJISfD5tPdsw
qTfr2LLeQ4RvouvrhdtePRUe8R7eWGuanplTBscousLedzPCQyY+/CqsBeRgoJyDz6DehwJc
wPeFf946rd9Jgt1/23S68e8MLxzcxZZbYAirgwt1h2CK4bVImsVbPQix9JV6xNg4S1U3RaDS
CiM/ZUMIwZEc+Wxnv5Xwx9437T3GPmvThH2PO9ZP6BwdccznbZU8JIxtcCk1L/UIVpyU7pnw
UsYSnAKZ6qM6LolXEqOkR2uBwS9y1pZJen66X1ICcjCPCLdoTBzIdL4rcX2XhOfD8sUKsvY4
iLnHgsX8c+Ug7MGiOQsyBtyCA3qr3DiVJihScHonWuPaCzyjrFaXH10TX9KpyXT+22hjxv+b
DmsFpRKG1l/95YItFfvN2dgSe4eaYOq1SbfJa1oMWbytJuJKfNkfK9LF4DUfVDysWCI5wP2t
QcWiyn4wvFhYaQHdJ68pLarU8Dkb7Vunsct2Mr/WVrOh1Iw2EQ16z7B5enbvN1v2P3Fm/6ek
8YkBI6Hp4cdPk7zEtKbE4nVZYsKXGGhpRp8Wx4Rvf8EhX3dYQkqGcGPHTKWFKhGM97tfCQ1r
VBT9PV3ZuvG9Skzz/3Lgicu32PS1u4U/lo/C51MLPJZsO1Aem9MeTOrb4QEpx5ielp7h/+Vi
/E9oI5O4MHUhM+fSUhBMYnMW+gN0ShgICyLeT9aFMbXnTKbSeP1P6HlSJP9pGpUGaEa/jkqU
uGrXYfb78cv4UJ9GdTsmAcMFkZUL8KKv24v1q4aIY3q0Fvf+qST//+/edewqFr1vsTho7kb3
qh1HH8FHP8q91aD6WyjJg7sxCfaG1/9/xXuhFCsziqUD/QdRq0uP/r8dQ6ZGUXPDsVk/Vqv7
pP8k7VsowtO4sC7jmG+rZ3+JoiRcoJMP0N/68ptSe7mPJ6wqNa4kmEXD2g9f1KfGR2OTWg9e
8K4SV6n9SA7T/a2BxfjH05Rvx+p+NqUYXuzPEpb9eFABU+zefOBcYf7WP4qFvzt4gfBqCfCK
JXyKgFe6TXyK1FLSCh1HWfKArxa/4pnz/e+Kl1X9eJzFT57QD8cU44ddgid4mPu9ZZYRX0dd
yXNgG3kxuO1GLeNhuD8WarGM7m8ODMKYtApyXUs7tIIGY6zntHX6X45ceNXbzVn8cfagix+O
XeGSnJpZI9jfK/XatumXqRWgLrFql3FV45LS/N+qX+30X2dvYPcqq40ZpYdhwf6PElIz6qs1
6qToXd/QbAN3n89Y7/Pz3+dquDg5PNo6pW9U5/GrqmJBTU/AyNYi4jAXpXZ2MGQk7Ft8oVGf
GUHhkfEVEWxCr4PBOL7m4u6sHtLl7YgRXd+L5kDxg9y6Oj2mdMSegNqAgTNv3I/+Nn/wXxTf
buRSB2whfwUDek1oWb+rd+4nvJKYkq5CWhHTugArCiZTgYABvj6sfGBUYW5+zv3E1MpY9zAH
+XpWxSRA3rV7seHYEuLi6ep09+7u+fcVvHRHY1IGtwqgQY3Ni+Gxvy3kI8I6n04Oup+YUh54
NGV8Pe5g5d6SD3u8ml2NiGuEXb9u2FVza0rf9nvavlGLD8ou3IzSvTtkYW28I+JQt1K5C3sX
D80kPK/1mu4Tn5xWKz0r5xa+32wCbMyxCHRKIF/hp8VK8EcDmHlN6lS5eSY8oiy+l+aNAqIk
ZgEr+epBHd+8P6F327sEr8vE1UF/nrpavqDALCpT4wimKlBh+8y9xD8Wx9f9bNormChw6duu
2UW8jJU5Z9PvbMxnrSk76zVjvcu+k1drAmfh0W/HXAgrF2giZdh15CI7vX4Cq/fZ1JD4R2mh
3u4uUVe2TLvbqO+MV29FPXTFfjY+MKZpENDGwHeNh6vzccww6tIys+tn5tCmbZqaxSsRYEKH
ZnXTNk7qzZeWP5u2lm2a1JfjZ5pGmL78l/sxkdOQ8mGi57wUyWWCFrGUx2L34qaRwLog1TxM
OpAxv0HOQdNzP+EqAEFNcK8Lhm/G8Yzi24Pnt8Iz34oBvpHqd8eFTXPMBdefSLcTwjMHCvEd
ZlocwbzqYB7NkzGYUV/jO8HjdRr1/Gavhi1H0E+g1Uer0dBMKwxMzhsN1i6o4K9CObqArnkQ
2HStRiD4/HCqJTsOPXzzy28m/7V85Jrp3/3mWbnz2H2pOAjAEadM0QY/CAnDq6Dzbv8we7Sb
kwOMU3E74Lio1UJbmHMHsdvVADqNkJBMINbi2Qk0q4F3RXZO/jW8NbcqN8+Yhe8T817HoNdi
k6yWNgmOBgnziA4b1xE8mgu8Bh931/mx+OoqxWXnG0ej/IO0jlQsHvYN0hle/2Lmt3+dvd4D
ZcImNjVeSDGxIQu3xn42dW2PTZP7HoZQegL/OhysVjMhLWMx8kr73QXWAv6dKMdonU6bCnrW
gGeQY3MuWpF8yIwTtNsB/E3AV4K6o3UYCDHoQIqhV2l0eCdXtXLX34m1Pp005PLmaduh6J8g
3zTQUahVCXoSGfCbbmCNMBb1twJ+uurheh3XWR4Lj+yo8aR9GRmA8wbuCbgU0aN2rTeuCbiW
4qK5ebKP6oGefJQPa0MMCmgWiK94d94PXyH1Rdhh4E5BGjcChKpU4wMnBQ37zFj779rxX9L6
E9KwOegdxvR4n305f3PQwTPXf/zx77OvkeLgbNez+HDkV1umfnG6+cB5NKMnz6BRLntXXBGY
4ColEZ1sklLtBeIi7dWAJkesBThB2Fh8UtochDUhbQv7eJwyAsJeIb6Q44B78L/rJ9wq137E
LbyA02LXkfPvIGwjLoZdph0hbHQuDWmuEVdZei7r6/kHmJOKVptWLfWOeu0NwBfrfz7Ni1qr
sl5uya5OjnsxCCvEekbow0fpje/GJnzzzdY/ft+49/iX+GRqAxcHw9/1qpVfn5SWGXb1buyE
pNSMUeg6j7esV+3U0cu3AwDbgJ4mLyTAawvS6jH49Udv9jYUIzXQ230nXk5yDw3yO3Iu5U4N
otXH0yXN09X5HyiLHkym6WF3tF43r1OkjUOcK3jjgIaZYcctNZejKH1Qu+H1tTiakPiEZ87b
loPmzbwVndADaXKC/NznYXo5Gj1ed9D85j8Xb+2CUteqGxaSBWEIpE/YxialDmkzYsnPe+d/
fRwwiLdYwyn0CS3jewprNT9hnTI7OT2zdVpWrjemqy87ORiuAl0mXrZ5dPTirXJoYFjlYP8L
poKC62gxX0GP8hoaoRVzNu89fuHmfVok1bs7O8QHeLkfMxXyWXCqdwOU4PLBM+F6+KlBVOoW
XjtH8SS81EBxbUdBKYGsU8ydHuA86QetfxnwSfB2dbrm5uxwE72UDpogOBr0huNrxqaU7zg6
lHoIfBPbwcfdZRcg5YBmt/ik1HYxDx4NaDZgNjX/m/ccu8TaNqlNIBl6pPXUAHq5OZ9Hrx6f
nJ7V9sTVO5vX7z3WpHebJqSYpboSFEGZY7ebq6cS5eIqwIVvapn5Qb34kjzNqb+Bdww+vLR5
6k8oeJ6MiTSPd3moRB4EwfoN27Jb4CP1HyFg46D5Wypt+/NUZQj+g/ObJv8KEyWYEoI5URe/
n9Ja0XaeWf4BKGqdiDnbjq4eO0mJC2wzNAlM8z4bHlEFtNWl7yxULR+478dZA7dRGrwJdzkm
IWUMhLfw4u1oA4KyAceAbvnhgSUj+lIap+b9wiAoN/KNppMoSzcKO4nrtU8nNwJS7Ix12350
3fhRFG7r3ug9Q3V8/QQqL3dYRjHSq4Q4x5Xh652Vp6zf7dh/7qZgLCyUh4BlQUmdIR/ES3Yz
6kFP9EosLCSg79FVY7dRawAB34Qe7UxaVk69rX/823PC522nQUCNDujdIJDsXmzidCTD4hXL
4pwVBA3eMjuKMLrYK90m/WIsMHdwc3FcdmrdhPUUdgYC/v2+E2hY1axTy7pjR3RtxdOCb/dA
b4X9/16rgD1l/CvgaIC2YbV/JOWzdTea1g7Cs1K/vG5t4+GnMDJjsnFxDZD7A8kvNXSIkhb+
UE4Tei1m0GtGnN0w6QhFKE5YO45V+WicE7205efpeuPfdRM6K3Eh7UduhiJ3hwn9KsI2Q0G5
om3YcyxozuZ9b6MRZVj8bYvG7EHQB8PD0XBV23X4fEOkxebt0l0JikB0S8JbWjYy68AwVrGs
73lUjC9e+F6Ogu3G+wh4h8jeQaB5EFqlQ9BQEz663YxSnL52700HfK7e093pNJLk4bQ9A+4F
KGRwufYjDwS1G5GBZJTXDdq95OG+xVQQWLBYm2FCrZkb97amTx+dunqv0sXbMd6wxxM6tnj1
5u37CWcTjRlvn7sRObdcuxFttFrNMRw7c+qv5aOaAX5Om2GLKwFfapX/AAAgAElEQVSo1GJB
7wCTOyiBC8pALbbW772vVQn7l3DhxjN0y8xiHiZ/FNpuRAVwR4t0kEttXIWyPtP2Lh4eqcDg
d8DAP8OJIHcfZWR7Xb59vyF6I5Ch9gEndiNvO8A0fzhmudefp8M9Pd2cot5tUOPoUYw3Pxix
RIO4gno9p/6Clq0e+EyV7QobXQ8zLxbbUm5FxCe92X7k0iaPMnNI4MgBm9XRuIDKgR6E9xgU
c/lODO0R48Jr0GrDEH9h1PIfXl27+6gPmY8uBkMm8nGeoLH6OKTDqEoQIGI0yYf2/s3oTh+2
rJuhvLhjxfbsPpQTxStkyWlZC4LbjSAeEo1O2NP27/XtM/AOBDfx8Epngef41T9/DBMv/XpE
vOORizcb4d12nICiO0XYT167y8s/c9OepApl/To7GXR5pAQXb0cZWg76xh0fGMShwurU/6K0
mCJQJZLo5kP6lMzUIioO1QwvDHiEgWkHMeiKwPsGa94btmi8Qa/L4VQpiXEH03nQvkVDr5Vp
O+wybOB6w5bsaPLT3+fqoPtlQT6e264hHU21AgvOpRU1sMffBKOASYKGlvAgkuyGAvD3GK5H
xbdBD/KBCq0pzkLC0R8qBhNiape3G8bfjIqb0Xr4Uh+0xr1wNdcYTc1/PXqBHfgg/HrbEUva
hgUHZOF8VUsLbiEVqAgnSTGYbykGkUEPeDW1HMYO5ag4cpHSjKZCmoqItMCQPUS3s4P+KhKG
YdW9bXZefhz1ooATIec3+3i6VtbhVMGsnPy4IB8PflLa6euRXFjzTAXRsOFhMqrIzPAEPA3K
ktHxldCZsUkpzf69dm8ujuVfFxmfRC2FtXKKEiI/o1w4SkVtpI+LT12/e9W09buXQ+joA6MM
9vhe7Py9gAmQd6n86CGCzLl5QQTUwgRHvfMrocHUMNk5mQ92YXYPFgB2ofwBPTJ0jz42aKqL
YyDrEjKMEeiD8GRikelUSPUaEZcU/N2eYzuIVhw1xHvFsHJ+62ER7KR05zZMZvU/n8rObpic
d1cax7LpG/ZUaDdy2WZUVSB4/APevuM9IKUvzVlaRCUBmMEHhIE+HpYxAgTeiEIXQiHUaCnw
XhJGImAaCuEYvn3mWrQqcffuJ05AV/cmFc7WSXsNpBAMVLdTPHqDsWBEfXQIhVCQ3ygWeWm2
Qo/vYCXXrhL8fpM6lSo2qlGxGq6aNSoEor2kisF71LiDWedxKt5s0LIILchV3KnVa0ZpoGDa
uz/NGbp5cp8yjWpW/NDb3XkVWu942JfVoh8kzwPZBlBIXbi9s9szaY0CvdwcCwnw/rFDy7pB
DWpUrN6gZsUaGH+8ViUkoOgQgWck3sAMO4NuIO7Bo7T2UOzGMEtOQBhTSKsQrwYv7sIMY7CP
K2NcUJYy1q4URPY3XlzXhtIrq2B7Ih4TaaYJguC+dHi3w+gVpqMlbXQz+sEo6qkIFuX5Lyeh
FXBkp8MDvDF4D7b4rUAf95W9Pmjak/KikNTTwaRz+Ll7q4ZVGr0SWhm8r46rBru4JQFTudgg
JDkILJebA2fCVU36zS4mQxgb8bAr9+7TMKBE+tAwUC/JMOM1svOb9co0rFmhGuqrRr2qIZ8S
FuQzED0ujvpkyN9ijAVnYSz5F5nGOH+pyaxNe2m8wgfKUALyctdp7PL2a3b9E46Go7G/l9sP
t7bP5mZu0/6zH9tgFOsRfD1cRAyiGASo7j0ZOOyAIFSiM+yyhAbVKiTDryHzCLXDu9+yvh6D
78Ul/ZySkR1ChbNzNujbN3v1l3W/HV2AtO9RGl9P152oSHmzmNQAocJymr4adnRizzZK128L
Dgd6MDLJDsXuWTjuAfy9Z3z3ys//nL+MkzVopsAJU6wbth88+xoqucvBpXjDnLGfsZ1j59V7
sf/A7vaFAtFgn8DYOwrhtNoQjCAeDOaj1mKXjewRa5+JnmqyvjOGsLUTeluiqLIwdnqEMVQ4
eoS3UKkhqMSZUOB0gghBUs8Z1DkJc/HpmEDwOXczui0yL4JtSw2OE+xgbhP7eLheRHgeel+a
1zXDPHPAq6yzYLr0xaCxChGMOrAn2EKFvQddrY6Ua2rfdiO6vdtoB2LprFPT6K1SOvh5LwmL
KHbRkK637XOjUvLySVY4rrByASkUf3jFaEvPikaMhB/tnmCuV7V8EsVvm9af93DkBx+LKgzY
RD1QwZUVIz6NRxK6LA6KrwZMmjiJxxiBz5TdQix2KcRgRqnyqp8PV8DjQ5ot6jNrI1s3rifr
NmlNOwyOd5HNhd3SfdFrrNPunMVhkon0OFeCIrheQnfNbkc//BQ2fxaYF3X0wi2aqsIRezqy
59MqdhrtStN8aIl1BBwnH/xSo+vEw1EPklug0tGtmWmrNskDORqccjdrQKco5D2N95sbwBRi
Qb4e267IcWAU9TZkdgT/cvjcKexZyoafmKeBEJgwoGoG2zkfFYqXd4yW1gmFNtHnprzcnHzT
c3Ld0fI/wHRBWQxK94R+OJqmKHPQvfYgxUVr+m+gt0c+TC0cyg87DPPpMnr6Rq9SUcQxCicd
IHo02EgIWzazV9M+MxoiD+cZKskNreuWP5ePmm6rBNTSyeVwRe/2d0x27tcYCzG3AIdLsUlp
7tQj4nIk2GV9PGZDEebgUOWFOE+qKvLdCvtoXH+UIRSwo2cP7PwtBNAT9OoA14AxhR5z+Lmt
hiycjDHQerSUNFbjdUDwyCGdHhdNG9vWLQY6ogPxAEf/53dv1ZiSmrCop8acPhdWlEdH8Shv
LzQmjQgGHPHEEXl/QY+4BGECTCccznZ0V8M+01MQTq2eN8I3Y41pB+UBDN/Xv5h1un6vadTA
ER/9oKyDc3NNqRSvyAxkXEMy5MYc1mBNIR7hGjCc0jtiN0L3P09dzyE+om6dMcHhWKdyuRzE
Ufm4CQs6uWRPW/+bMKn3B3gUDRgcL0QDhF7EIerSnfvVhIa9VmCwrYXiLtu/eNhVyl+aszAL
U3VsYq8P2PE1435r3GfmFBzOOxaaNwBdDKMuHKdgn+3x3uujJ/7I6LXKHLLf8MFqbjeSkrwz
+JvhGFccwVy5Dl1vAdKYEE7jjFRlXzQRgcpfD0FugBmUuzUrBp36XaYMHMjDAlUSmOOdlpFd
g2AqjloGmvXwdHNO98Cx9TArLPZq3w7Nco5eup0ExdJPXL2rDEy1LzGN6wuGdMbRlDj/BjUO
hmLqc8+Z7yaOHbP8R3R6jpiaxXE9jgZLi4UWWzGXaGAlKjSjjJjowmFWeUanxJSMRlw7KAFo
woA0TKFRuQNONs2mAXZ+h6Z1zmDbegYOVhbxAtL1xNTMejqi39mBzxod/XbsXJgWjjBzhuN0
wb4QGP4NOSwShjeuGfrRuw2qp124FRUAeAlQhnSlZdm/aOh3OJGwNdZxOqLhSctUkOMOetPo
0dXZgQsO+aEsIvj2CJ2HGS9DcdxfLdiqWja8m6X86K3SYAWgvgRH7B97jfIpDrjv1qkcbEL9
JELQK2JypApgKtE0hVuzPqaq95648gCTIUGwKGortFIiCG/5KsEBj7jgO0t1BzriwYcyCCuX
8CijnAUYPFhfCizj4x5He5QwRZ1Qu1IwyRF3mN2KQJ4g3MNi0Smh7nn4kMXba2EM5wgZoTJ5
Y6r6a4zTVOAHvsHgQOb3kykCKQHOyhcwlSmeXDd+6lcLtvx47V5cSwwc9aig60dWjTkE4eTC
0vWdBgcxoGsDIu+dWMPpYAeWjrw4b8u+1yEwZTGvHV0pyE8D1X0fsclTflsgJcLvmnGfbdv6
5+l4X3fnqC87v0U2MHeAfa9H69c7oxXQg9l8EluJInWvVNYvp1Pzuj9BQG76e7neOkjDVLgm
tSpHz970e3t0sX5ooTi8mztnffTxhNUNYUrUhxkH/mjOHlo+8oggzGPYDpLRvVWj7qDNAa1F
yg8SGNa7XdO78LbClYBKFCfJNHd8s/6mrJzckygXLbghm5QBekCratFnN8sA5NsXHZrvQngE
GoPLgzu/9XDad791xHRu9tjPWt+ct3lfBl7HagslCT+2Wspw7Nuxk4cv2bnp5NW7LcFn1KPD
jT3zv/4d/OBNsq+7a0rP1m90RWNgeqVCGa6fiGN7jl/qf/ZG1CYI943Ju638/fjt+jMx0N4C
HBePrJRw+Lk75/Vu22QoBNLFx935NIVWDvK1mDX0/Grl4G2os2sQ+kJas+BtM0VIPXU81iWy
YVKNoLl8THLAUJPbb7wohceYauUCkj57//VPc41GXn9SVv6rB8zLoWV81JhFi4GJcvfkWsYw
U9YPsuWLFh+dsQUWZdBA4c466nSm1KycNjg5AvLO15g4sC7vNOgLi6UqWBB5ECGHlo3gbVP1
kIC7WLX+BKKjBTxy9AFaOl9X9HV3ufjYuVMOucgPfdmyNOff+ms2erkiOlKqiWt2CS2/nFNa
Fh6OE/HY6BU/sp7T1xdLN27VTwyzGMXC/yug+aB5bNKaXaz37O/sko5Z+ZO1K7GLwbLmtz8X
iyMYRF9RR2FT1/5aLH3RdPS8dMcBDqMkOCWlp7Ap6361fXmpWDKhUW+GA9SKheOYHdZxzHK7
cMKL6VDWWd5zo0Rihkg4cuGm8mi5A7fFT9sg+s7eaHn+X3ggC9bu5AkR0m7novz1evcr3jMv
2XngP6GgEXpsGruKxjmYAhZnuIYpuTDHqwr0dlOdWj/R0j1RHKYitWi5FHNCSV7iHcvbwj8r
R1ngtsSxj3/jxDvbxHiXQfh2TE9LGiUOvYfQ7d0GlvDOE1cJVYP8hb3HLpsvbJ6iJPuf3D8Z
u1K1ffZAC92fTFil3j5jgMW8UIiAwms2Tuxtxy8l7nH31/vO1J9YO16ZPHhcUru4jyasZD/M
GMjDMOeOg3WNKiyomaf0bsf5FpeQwuZs3U97s1iFQB/z8K6t2JxNe7FPiN4lktwUKH1iWiZX
TupxaAqYTtXCi7jMjG5sTPf3xNW//qNKy8bxnDCLFMFBo8sXWnq0aij+/M8FFZmRFG/jBPQY
5mA/T5aUnkXbJ8zTv+ggQnFVZHaj5eY2P6UnPzn01OhxyKbOVmPyRZz/1ceW9+ShDLQCroLZ
Y0a4RS4wU8TCo+JVMM1pxomAYVJCxLhWT4dDmEd25/MzHH5JP0p5eCvzy5wveRrscHwFY4Qg
dxeH66fXT4pUMr779YL6mLryrF4hMPzHWYNi3/5qvo+fl6t/aJDP7at34sPwUTodDZQxwyLW
q14u5lZkgpMOKyHfT+lzu9+c750epWVWbFwrNGrYJ+9mdJ+yJghbH2piS0P0me8mhRMOLHbV
QrfLtzBgz4m6UrBfzMKvu8TV/nRKVZgAlbF0fvXA0uERCj1YWMKgXKwEs4iW7zkfMdWadCv6
oSdW3lTIg17eTFOy6bu/GUzbNBjKUA1TGy4wQ4zomrUY++S4uzilxSakeCNeh/QM9qkqNND7
zMS+7c0fT1hZAws5weiubx5ZPTZi8MKt7nGJacGZ2bl3DiwbkfvJhNVhyJfj5KjLNJkKq2yY
2JsmFESUpSLuWTDztLD5HbdO/YIbs9hWUReHHvtUDva7vWf+kIivF23X3X/4qAoEJH7T5D6P
uoxfFYiKdPf2cI58lJZdFQtONFNG+55gMptv7100NA0vMNXLzMoNrF0l6Mr6cb2jiB/dp6xl
W6bwRXJ6LNGZHk3CgCmCaf23MNOD7kwbsMUu3efosUE/64U7zEm2esxnbNC8zWzFqE/t0tED
MbsHcOJFRPbdxD7F4pUASkcHDWPMJgzt+q7YodmrSlSx+4C5G9nVe/ECFsTEH2ZJil0sEQII
5vv4tkN6dh7D2EVcMbI4fUo+Y1wHvEV6jcu5yqmVqPVZxkyJfZjWd52ShN8tiqCENug1vQ/N
ZGCw5Z6CrY2ohD73fp77A2Zs5mMmZjgdBYl54lhvD9fmmMJrgnngKZXLBbx18Vb0SXw7gay9
XAi/8Gb9qrPw4k4raH3Tq1umBL83bGkoVlj3juze6tOfD583YUFsH5TALSU9OxOCMgMbv+aV
7zDqHgTUB8KYBOF1bFKn8sK/z924i8ZptZ+Xmy/wZWCQPRBjGD7ph2lGJwjNfuR5DXbhfbQA
GsxD/4QzVdtAAL1g6xsQZsZA+i/skv2QBBSzVr8BXhO0eGj9mMrD1fEYyoTPrKb3wQAwB/kK
8C6F9vO2b9TesOf4+1CQNRgLGbDpjWYxPm7VqGbhPxduroGAvpP859Ib2F5yDPp1Gds+jmDQ
9wNasNbnNk7eh6lRmro9CXj+GJ3XRFirCh1GzdTrteNgtzLwOAU2+QDw7uChM+HnMAEw/dT6
CRtrdZ88GQrcIcDHrQfg/Qs8KZiYKMTqF8PqfH/UQRha/IWAIWBQm4gTRj4/tGxksX7fnHcJ
x7G8zwzl7WYllWpmxqiyTHD6kP14oQvbCHMLDYwlrjRPh1FLcTTk47fP05uMZO5ihy+7snV6
aaDYjgNnWJd3XmOf4k3BzVO/KDUdRRA8HP7G/vj3KvtjyePpbNp/Fls32MyCDcuZocLDx8LN
iyrP1C6fMa3XFPu5XfRgjmgll2LL9D8rRvTwxbaFX6B9tT6btu4dMJ2UYF6BucAXCzzUp63A
pjkVtk24xyakGrDg4YE5+mURxy+1vHnh5getG9f6Hd888MS0o1fjL+ZMQs9hfJiSro9+8Cjw
emT8t/iS4yWcauePQeVSCODcdqOW1oHe6dDl/RC592jLG+dutPR0cdoDAV+M0dQ5TH4HYvp2
J1r/JqCJ973YDaoGfl9MNf589+qd9yKuR7SPjE9eeutW9LtYM1iAyVgXxHcLv3ZvEDgCHWXs
XkTcoOiERwMxFtJgsWY+6PsIx1KmoAPywqa2LlFnwt+7eCem+amrER44ue97zDhtx6e1fNHd
/w0hn5WSkRUKXqC82S4ELyktyx0wHFMzcrSYFWLIs4jow10DHA6YYXHGJjqa6/4YO1DHYZpx
Zoi/jzf6/lOYLVqWkZVTKyEl3QFwHSR4mQ5J6ZluWJPRgHbHqNiE2fcu3W5583pEm+SMzGto
QMZi3L6zd9tm/rBP/sKM3tuUT3HmAknwVYbaxZQAPUIlvBYZQml1IbHslx2LWVcc81hUCdAz
1Bqz4kc/BaZyt1UCKmP3Sd++9fn0dU2VeLoH+4exLVP72SkBDhhu/MYXs9rHJKU4KmlJCVya
9RdslQC7RytiN+7IzuNWvqWko/usAR+yoxduqmyVoNXXC3o07jNjIvasVbVNe3T1OFa52gSL
EpgSh3rlR1WahmuwKWloiG1aQ0gkVwJjQne0ZUVcaKfRC6AMX6GrvonW9kCdKuXmQXBHYZfp
oPi9C53RqlpsYodm/YZiOnR8aJD/G1fuxFyEIt0DxHjMDKTDHJrXZfzqKU6O+lpowQrw7sIK
mCxdsc+eTsFeAKHqioWS7Vb0GsHrnQEpEM5sU4E5HLCy64WVHxL1MGkoWs+vMQ12Da3gwWrl
A7dumtSHv9Pg0PQLF0wJHcX0YlnMPZxCK++JKcVPsv9ZHYMtuO9je/Lv2N7tumJ4Nz4DsOfY
RexUrMOcW/QPgTKfa9ekdh9sdf4V5eiDKdW1UMi/yf7EjMiPVcr5p92IerCxRsUyjdHinlPo
xNio/dkbkduwBuIAvPnYPYpZkoJZvp5uN9EzfYetGBlQzPXISybOTcyKYCrQIxCr6HdwhObA
mN3z+Yr9+8MWVj0THnkCu0HnQrj7wPRadOuH2SsxJpuDfJ3wzsJHD5PTL6BxOI8GKA0WZvJb
9auP3nfyykSNWuiJvVEnvFydTgT4uG/aPW8wrTUVc8b4D71Z4YNXzIUpbzNz6ttiYXItTEjm
FbKAaS6hN5egroxthq11LOtvcIyKS8K0aHpH1FUn8LCig0Gb4u/pviIrO3fj1R0zuTlap9vE
QAdHvQfWVbpgcbUXlDyQplGxXeQwZnnWVQry+XfLtP6R0779SfvT4UuVnJz09VMycgaiDK+h
Z2TYV5UE3myA0O3HFoHrpzdOSRy1eIfhyOXbzVHfAzHt+ib45QgZw5d4DLexUPszDP0DOrU6
4q/VY2KogG2HL+6N0xDHwdSqQOlwmSAbEd5uTvtwbMQ+J70m9p9vx/EZAjE1pFducvISc2GW
M41bVCo9Fl68H2Biar+g9oRlYIxi+ioP9P4/pWmKcg/TkxvvxiXeRisVBoHse+jM9RqYroxE
Opp/5krQddK3FSB4hbuPXeADQqPRhLVPHNvo7HQJlXMSFVmAfeBJaIKdYeb8iJ2nOvQak2Hn
xkMB8lBo5qCGjQWHloXhxZOmh8/fuEQmAJbFb6lVamy7FbX/Xr2b8k6j6mvz8kwxWI2uhgW7
TzAY+2Dmxt8aje/5QTIUlk7OVmMwdBtjit/BRLeKgT6ZR/+htYNCZw32kWE7hwfQcEUgJSAH
5tGCnIDtys78GQ0keiIcNeN2AC11PhZkLmIa0J9GbMmpGbyMI5bv8MIA3Q9jIGcQjQGtgEUk
l/A7qsTJoNsR5YBFI6RC6Mfdi0ucirGHgFadKxDiRDQO6uxcI+/JsIU4ICElsw3oyIMtjurE
GECn4YNk8DzLoFNrEcYbKdByLsTf6xp6xRy8821s37TO0uuRcTcgNDWiHj76EiZbc5ShMZVD
caa0b70K0xfPwnvD7ZmY58vMeTwKu8CBKN2Z6VVfXT77ufcnM6et8XE47Xf8/JWf0fv400CX
HNUPtpp5alXqkVDUslVHr9jQ+d2Gd5bu+KNbXELqPEyh8nRUd9hvxRKT0lp4urtUROOyoev4
VUdzC3A0qbfbEJx/+y72WfENmjS8TknN8klNyx4F5f3wjVqhS8uPWXEDpl5F8KBbZGzi6/n0
0QQ4OhIoMzOn8o3M3LEB3m5Dm75a5etHXSZcqFGpbAeUuSV2Eeg0SET1D55r0zOyq6SkZlbB
WsnQ8lXLje8y8dc9KtO5tldvHOlfs1x6EgY8hSzb5GY05epE0/1ykMv+YkFkf5WuVpxKW5F6
H3tFOHMtwtB3zsblWD2MufvT3H5v9JtVHq14bQxetuJw3z5YMfwBSrDuzPWILVilPQiGHQEQ
Z7SieBtNMEAQ41Ozck/BLPdZ8+s/PlAIFyx+qPu1bzF7za+He4GBlV6rVv7hkQu3rsJsGIEP
iDyo0GlUVyhI2/phIa9B2PHil4reZjuDuXeXRq9UfOX8jSiYAqbYGz9OH9ao1xxH9A6dMX/O
lYi3BwJzQWsZnZmXdwEb8FwgjWVBUyoMIVQ7d1ygZL9yI4EkJeBwcNcDBss1mcJRcY+ysJ2g
fKD3VYwt1MZC81wMaOf/duTSN2B6BraF7IBya88evfjN2Xu77ga3H9kPe/p9CBb44YNvwm3C
q5QtYLZ1JRMS0/K0KuzRrE6V7zf8fnwoVnOn4YS4/9PedcA1de3/kwTCMkAIEEFkyJLhrFqr
UrWtC2eXo1bqqIP2oai11kJbfUVbq9ZWnoKjluqrda86WxwgdSEigspeMhNGmElYed/fDeHB
p/5b2/p/feXlfJSbe3PPOfee/H7n9/2tc2wAGxdhps9bNn30maDPvw2sVzZMX7X1UCIiPKcg
pEWOCUEDKUwbvOfXqNTXAIEkgEQe52+krEZfdzMPf7KkX8AaLzDmAJx3KC3KmzXQEJPgepjH
AxMYkQ/WxDCxQDas7vQVR8GPiSJBfrl4vlIdEWAnMT8IKRxZV69a0ALphaQjhr22LwKTK0Do
UoWiZkimovaV9NyiLAep+EyDRZcgU0ODtyA1vChyFdlkF+1tLTNr61TSxPs5Y0GcHyWl5WXi
+e8M8nIOx+TVu1xROxz6FZNIzB/Y24ovw9EpuZGUORv39sXz58D+n9bPvfve6npVfWVV3SRI
EDvoZU2Id9uLPoqvJqZNgKTdfj0pQwU/S7yzrdV9WIN+wmQlrFDUvKCorhdZWoqSvHrYb62v
VTo/yI29AMe6jX/S6Ewvx2eVQ7wq64Z75SaM7P3AAJryIJVaZcwTWMcwgSTQULI+tT4di223
H8FBvj1USH6JrFc37OzqHzyBZkkEmX16elPwXkANCSxG62DxeAkEcW/p9FHzF31WMg33FEqt
RMoCWUUJGGg+rCkBeAlJYvrDrZAEadCeeaFzJhRgGZOP+byqMIixAswyASnZhScPXYg/C9Fa
Zy8RB13c9m42olPLkRwzEUw1AhLHBPDiY5jSIhGSsc91yvvTSMmUikV/w6ZxEG8ws0kssG0d
LxfP5Y86A3FJBAb4EsdkiNZa/Kj1JkJhG5SjOlQA+xrRbyEIro7OYTVCVLMaHuTGb3DaAgkk
SEx96AqDwRgw78ETMbfPQULlQwLMAQd1RVJQmcDDybw0C9xkIqwA85XhB6uD845ibJpc7CUf
wYI2GVYNih0qRyqq/YbF044hbCQUOwQth07BwARKSAF+V2vLEijTK6FrROw5ezUGz9SMlNCJ
gBAlSBzC3NK8FJPGYjMToTQpsyAI0jlKVlETJfUPnonvW6C+zG3vbVAXvcyM7L6iqX2bRjkw
Tp5n+uG35/u7n4/nCR+Wi7op6hDy0lJjzudh9TjAhXy1+m0nO+ud2ArgTUgZz0pFrZu8ompC
YXGZESYgCXQyclBhkw51X5VK1RdZd3vHjxq4UlZZa458gS6lcsXsrJziGarGRhHdB6YnXcwt
p15JYSJyV8eu+5/ydIrCe2lA5H0z8opfAWM4AFBAsLJmiEOXwpIGF0iVekCnMuzw+R2sjrfB
XKrcArl/fErWHDCMHZiH9i0zxszvB2mBGCuBHNDUADFF33q5OpyGBC4+G3tnFnZ8DWqhbTqR
GiNk9W5peQbsXrZl41dnB1o7WPcxG+prkP6W/92tPXpfjuLxLjbU3Ycr3aPd0om0ztClbSvx
DkgYySsy3f19XO8+bt1zZo59ppS7iD8rwg9YIFuoJ2yyN0F49MIdipHfImSUtRjgARnyhJuS
9q7+GRHqKoBA+LAl9x37tG/+84N8ynTXkb3HF40cBJriM1ZtWS0AABElSURBVEX0UfygRZqb
97KMT165069/T6e8l0YM4LRBWLEYLDGt1Vz5Rn7PA6Jzi9M2K2MjO/aLBHqWo3Pa9UWdO//u
jnnisxZi85+ZJwSBEoHwai5t46AKHFJWMYnp7h/MnXgH78xda6tsCj2xPrbt9HE+fLz7hBhM
2iN42ugUKNDeX4XMSaR6By/cFEFn6Dlvsl+Kl5M9wVCuOEx6RwBdwcDWChvrnfqcCFxz7tpd
8dXkLB83R9ukgLFDOdiHHYhYyr4wrk5D0UtMaH+U+zxujcay9H741tpa2WvNTSAgbPoHyxXQ
gmEeGF0GZFmFTLbqujqVEX63GEtLs4w7qfkh0A0GkCkZTE73MgNDQTK+L0edfIjPBugJXXzd
ux9Le1jigySJ15uR4ENh9SR+6XcwQdQBJocsl242ybKyKmvALoGLg20GDAp9yYxeXavsDWlA
zECBgwzh0go7W/FVRBBcxsogvcCEYhuJeR4skc5gfBEmlp6A4LYExwg1En2ILbscGv5Uz233
0vPHyCtrR8D6mI56avx8nrC2GcF23gcwypjrB7WERqIac7Hv23Ffvcp5UOvvo2+zp5jQKUGL
Q2nEAmEvvnz7AXuwfx2ddihCv/ms4Qr84u3KM/PXsWvIJHqs8lQAYwl7fvlWt5ewA5X2x/vl
GxnrPnEZDTRDDvIjb/WeHsKwsHDbd4B07Kcd2md1nLyC5Z/Y0Pad3filrPj05rbz3/IBixU8
crx+SxtP4l5kmrEpz/Zn29rZ+xV5bzJLJ/rNtMhw6pLP1yKG630Q6S1rsagMBoEWzPYtIMpe
sOA5wQeCCFsBNpw3vtTXyzkKZmNfWXl1AHI+7iHuIwMWRENFVa0FCGwsQhzMaOIH8TYjX3X3
oD5u19Nyix1B8AGYzVVoPw54nZdXKOsCPWwawtAxh3Ch6RSndsbe1upBIzYfKZYpBoKw+0By
H4Z0T4NvxB266RwK44Z/iAFyAnqZpcHEfVkoFArQr2G5ovoZPGulp6t9hLHAoCUl6+F7gMTe
gOfcUCIxh/xCsaYmQpmRkdAEyr+mvLL6aeiSZf29Xeave2cmN/GMfyeFHV+xkRlKo7h6j8LP
LCE1hwGHY/M2W/bCIB+GSEeG0Fr25YEfGfQF1tfDibl3t+Ua+K1/4hAkhaQSdvVuBsO2U8zH
2Z5hlYW2Ptq3F5eEe/t4IBc1CZuNVKFPKTaY9sTCYtrr7e/9//ocm5iO5P9yBiWcDe7lhky1
cpgIJb+7u8ijl8h6QsvfM+hKDCstcG0dunATTqc6BtjInhvQwSL4s74u3rrPkHpKAXbslxxU
VHEtPM0hi17mqGT1l/uHyyuqP8zKK/XGTMkpx0SgmEE5dtHOtUhO72qVsvgN/5mVVTU1d1Mf
Tr5+O20uzNG9iFlotsf98DVruDBpMkqLkOc8fkT/4P6+rgn3M/Mtr8SnBucWyGaRRKGCGZ+T
0JiZKQqWT/qYg9Tqwmi/PhthBMiFZcjh5IVbX4ApfYhx6XkAeQljaTCrk4AmB18jJMoPPh4O
n7w+eUT23uMxPpeupRxDmDsXSUz9gJiJHcjTzT0nGKm8q404G5Jly5YP5x3Eu0KimsN/VMXl
01AdXXkkI+i+1B87xwgsXfs12xwyh3uZxR/v6p+VW7oPs64nETExAlEQCC0LCxTk2yJxv6a2
3qa0rIpW4yjwcLHfCBjjWFhavgxWcCkF5BEzEDTB/0zM5HegXCdXYemVCkVtP8y8R20lFtFQ
eHsrqurehI7jBHjD9UMMAKthqa21RYzEQhSHNgei7WFWll0eSCxFZyE5fOEz9YPi7U1wBrM8
nhCrpiJkH8x2FtBpkwJ9QG97H9mQxYBpBHFssLTQYDCEE+p0I0mFarRRDVYZETSg7RX7tyzf
Qi/vM24xGzWsP/siZDaddih6RugwHJ335N31e9jOvdGsMmUPKy1RmASv270LSuerIKjLsOZk
w8BRUV5ZYwdingQzphWZjqngeyYRizb16ul47FZS9rx6lWoOmCexm9TqJ1EX48JSebU3lOuX
IWE4+z/xFYi2GvBofR9vl6S7D/L85OVVQSBOobnI9J89XR0SAJkcS2QKRJEqLYkRidxhOGgE
YR9wcrCNB2yzS80u7IM646AUZ7s724eKRMYlKan5YYB3QxBhyj0bbTeGmKpUEPsJ9MmrhHNX
Xl7thXp+YJ70Qf08Zi5/cxJnwl4Yup1tD1vI1XvUHz0jPGpUOvG1oA93sfC/v8m94ar1eycA
vkzML5APhDLbjxKQtDAJhhCgJRAUJRFxs7m1lejWikUvTTofk2AGAhx5OzlrJmbz4ZSrQhIC
BM3N3miYVhAj+qbZv7ifT4+QEUN6xd+6m8mDQv3ireSsVTCFQoGFfZt2EG8t6IuC6bi2oJQn
urvY/xNm7LgNqwKyV4R9szAjtyhMF1BHj0bPR1M/oBaPpBP0m1r4aq7ZScXZCC5LEJmannjv
rRdl1PzUv21kB//xjq6rRx51tvZHfqm/2LlGIOijnWCC+WzJ6q94Ny6fZHHRx9KfHj7JurZW
uagJifGYfVuA57FSHvEDLTjGh4fXqFRqbXEQ6XjH4xPTFkFq9Ebw1AXAF1uYVHuBCbAemNZS
BFxP2B7bgQlIklRKJZYxRsaGd1GP4I4luCURzKBsbmpxxBpuXUDLsIgi6ZrTCZA0jRme+jQ2
Fma6udjvLC+r6nrmYsLrML0WwDiCmDONJZjMGkvgkP+Wg2dgNm7RB3yH/aZ4rl3MTPZseP+N
iOjTB+oWrIoQ3LpySjN1/NBf/SH1EuFXh6hz3hAWfoiFBr3KvdzXB6Pdrsan7gX2Hkw6ABiC
LEJXAImuwc+RWiSrGAD/wgxYYMQ01cPEXOzq1HV5NzurjFt3s/4Oa884QCPO6oS6ZYBFJ9yc
7c7mFco9ZGWKJagnJUkDM22SvVS8rqdbt6yf4lOnAtcvgGSwJKiDkBHq856rszSkh6NdVuz1
lDAwz2R6HugdlVZi0UHHbtaX4EdwKiypQChG8yg4Kym8mJHuAYiUDcV4xscrZt6kl/o+Op5N
fIFcS49X9IzweOPUKe9aG36YhQS9wr0bUIZxUOiOXYAt1sDpMSZCA1V2vswHJta5UHZbcY+W
XAgyYUYnr/Kx3t7OYfczHg6or1e9g7U2bvZ07XaurLzaHr6PQPginAkCERNQHYI+UMqRRmp6
A/DnA2uJhRx1F4G3pkKy7Bj//ICdsdfvTYBlKwxQDRIDhTBWa10wBINz8nBXG8tTwEaah0Uy
5MjzKe7qxIghvnNf9h9SQVXeDt3Btob9ckQr3de+6Bmh/Wj8j30O23KQhS6eygJXRfAiPgnk
8HrstWTv73+MX19eWQv9QbuJKgiZw//4Q/RCZhn6R7AGirFxbmjQtME2thaliSnZnl/vv3C4
XqnyJTwP2EJxWrQtuZamiaRh0QG8EcDfwMxFJmcCZ457y8OjG8VLGy5fs/sULE3DqV8gJnid
eaRE6OqCpxAQiY5JegBC3XBxkh5BjNOV+TNHx+Pe5pVrowTrQ2Z3dKY+5m+qZ4THHKjOfNv2
vefYvbQ8tqXVqrJ6077pMnnVP6BIS0B4HEFy74/gJdAhgkE502kVPLtHxBZmJ8srap6C1HDv
bm+9A+EQksLiig8RkdsLugC4hctzp5guYqZmWIQMCMqgDZnYwnQlLEvxKQ/yJkOaJFlYmDUV
FpW9XlOnRu56sxFJk9b6FApEtEoWVYgXmFRNhFUww74YGjztEq6ztV8c4IUE/ztjja79lqJn
hN8yWp383t3f/cDmzhjNveXX+390S8sq+hahF0h6IlCD/W9gHcIsr4RCurunu8PZguIya3lZ
1RLAKS6sFwTeYmUhWvH6qyMO7Dl0aRaU8DVgECEaJCbApI11mLD6tamJ0ca1q2Zt3Lj16JgS
uWIzVj+xo7YBmb7u6+MSDljES7qfE9zU2DyLwrdJCqAuJxHQPy2neXRgX4+FL/oP5kJzNm0/
zpYvnPKHfh09I/yh4et8lb/YcYIFL0BsFgrCpo23RZ3eDrgSQAo0chHCvd0dzkMCOOQXyqE7
NA4iLy5Zi1Aw2cOUCYJGDkqCu4vdQr5AUJ+a8XAzlqgdQ7wAZfikj2f3FXZSq+ZLcckbEXE7
pRUGEadxidCUkgrY9CUwf3hGbrFFfoEsCB7tOYgGgTUJkbEWZp+8F/QKFy+zefsJXomsUuPo
YMPenjOenuF3Fz0j/O6h69wVPw0/LADBUSgFPyLqzBsgcDkI3wZhz/PgbxhK1hrM0k3gAQTk
tmU6EkETRueCJhHAFzlsoPvmM5fyhsApoRo6UHr9XnrRbDi+3sVsb4KbdavAURtUaAMYbDyO
oDo+XyEWi3YN6O26/cbtNCck3SyE0+/4ssAp++jGsM0H+KFLp2m9fnThDxY9I/zBAezM1TdF
HOMtD3yRYA079cN1l8SU3MsqVYMjnUNRJiIkAuZgD11rLSBvuKXhHhAivYgvdAkIXTyUi/Zc
vy1mIfYfilSpIUWQvNWOiXRtcH0REqK2CBLBh9Dg7tpt6LTJfpyHmK5/9Nm3vCEDvTRjRvan
0ydSdJz4RBrTN9K5RsCxm40GegD3UhNGD85x7m7zHJTjixT7Q1M+rDca/MeWTgZkyaHP5IPg
Yd8VgZmZ+fmEgpmeIUHrYxtybI8059nte3fWkegy9aThFiJREnwRUBe4NjgrkK4+tYGv0JaA
0jVJH4j09XRM1o1s+K5TbM27M58oE1DbeomgG2H98f8cAZqZ1xIUWTYdaEZjuG336Yi6OvU8
0g9QuFkcR62318C4sLbBdfHqpd5HNeVO81SVZRt4GqWY2mB8s3xjO5MlCbWyi9EHry0w4Ms2
NDZq0zPbt0ONQp+Q20gsFgdMe24/nW+OPMbz9nDSjHnuyUkBaldX9IygGwn98VdHYN3n+9n7
y6Zz90V9Fx0Iz/AG6ApmZA2CWwBmJcstVsOGvzfD3dipJV8Y0dCgHIFAarqfYxYQG9YMEzJj
E6NjWA9+8Zqd2QYS/rlIpImP0e7GQc43PgXgXenl7RTgN9g3lyrv3vcjb+5ro3QMR5eeeNEz
whMf0s7b4METcez2nUz26UezuZc8cPzKyOrq2p0w95fKGsfOC53HS2Ml1uvUdTXvgbg5uAHq
Rey/dkxIKKBwZwKBSb2hucHbPJuaqK3fZEwXtKR/ie9tEWf0xewZL6wEcyF3APuiRd9i/i/8
LC2bvtIX/Qj8eSNw5fq9Dp1f/Knarram0FJTZjNVlWWerkxnGvqvymAt3Gcc8ZmutShxVNFR
+x/3CDQNOdaXwQC9og6Vue05EDtO1/hnW46wcxcTdKf6o34E/vtG4LWF2tW3vzsS02ZsUeZ4
71Bl8LVMkM6a24ieGKKVAVoZgpiEGKJRyzB8bGDheUX3ls/6r2SX4+7+x5HKf7xD3Qvrj51j
BJQPsFJMa2apOtdnoaYpe6umRUlbfDUjGEJA2gFBI4JF3IHLI+B8DQIebbgkkEbyjZ7+QGh/
QGue+pOGpY2j/6T+9d3+xUfAwCaEpcJvTMXI+d52nvHQ8dghrgh0L0CoHnkESDMgPYGihLRn
9J1ADL3Ze4GxS24gMYEKK0qo8mmFEX3Rj8BfeATUxa+1PX2DfLm7Kts2VpkBwynpC+30Arqm
ypamqQtGD9NVwPqkuo/6o34E/voj0FD8coeXUOW6h6syDDhm0OoDQo06x2VPkyqBW0CZblY/
/PXssQ6N6k/0I/BXGAHOcdbuQdX5gxarMrtoYFHSqHM9Att9BSYY2f5U/1k/Ap1rBBrlK5kq
u2vbSzUUPDexoWDUBN2Fei6ZUnemP+pHoJOPQFNZKKuJ1TrQ6FWVyYzfUBLAvbW66I/lDzzp
ofsXGGKV8lM5POIAAAAASUVORK5CYII=
--------------080600050308080709050608--
--------------060900050500060003060203--
4:42 a.m.
----- Original Message -----
From: "Thierry Kauffmann"
<thierry.kauffmann(a)univ-montp2.fr>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>
Cc: "Yaniv Kaul" <ykaul(a)redhat.com>, "Itamar Heim"
<iheim(a)redhat.com>, "engine-devel" <engine-devel(a)ovirt.org>
Sent: Thursday, December 13, 2012 9:14:19 AM
Subject: Re: Adding Authentication mechanism to oVirt
Le 12/12/2012 17:53, Alon Bar-Lev a écrit :
> Hello Thierry,
> If I understand correctly you wish to help in modifying the engine to
> support non GSSAPI authentication methods. Hi Alon,
you're right.
My main (selfish) goal is to adapt oVirt authentication schemes to
our requirements : that is "LDAP SIMPLE auth over startTLS."
> Following is a quick design goals for this implementation.
I will be glad to improve this.
Alon Thanks a lot for this description.
Tell me how I could help : I am more a system administrator than a
developer. I kwon a bit of java (at least I can read and understand
oVirt's code that I downloaded recently).
Thierry
Well, nobody is working on this one, so helping is actually implementing that... I believe
it will be difficult to do so without some java and/or infrastructure background... but it
is a great challenge!
Alon
4151
days inactive
4152
days old
8 comments
4 participants
participants (4)
-
Alon Bar-Lev -
Itamar Heim -
Thierry Kauffmann -
Yaniv Kaul