From fabrice.bacchella at icloud.com Fri Aug 12 05:11:41 2016 Content-Type: multipart/mixed; boundary="===============7561966973861091654==" MIME-Version: 1.0 From: Fabrice Bacchella To: users at ovirt.org Subject: Re: [ovirt-users] Unable to login to the WEB UI Date: Fri, 12 Aug 2016 11:11:38 +0200 Message-ID: In-Reply-To: 957C08C6-9647-4864-AE91-59C6CD79B620@icloud.com --===============7561966973861091654== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable --Apple-Mail=3D_F7422B19-9C53-401B-B9C1-3EB9A88300B1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=3Dutf-8 > Le 11 ao=3DC3=3DBBt 2016 =3DC3=3DA0 11:37, Fabrice Bacchella =3D a =3DC3=3DA9crit : >=3D20 >=3D20 >> Le 11 ao=3DC3=3DBBt 2016 =3DC3=3DA0 09:31, Martin Perina > a =3DC3=3DA9crit : >>=3D20 >> Hi Fabrice, >>=3D20 >> so it seems to me that ovirt-engine-rename didn't work as expected, =3D because you have changed ENGINE_FQDN in 10-setup-protocols.conf. We =3D don't support user updates on automatically generated files in =3D /etc/ovirt-engine/engine.conf.d/. Please next time you'd like to change =3D something, change it in 99-custom-???.conf file. >=3D20 > I roll back this change, as you said it was not enough and then the =3D rename command.. >=3D20 >>=3D20 >> Now how to get things working: I'm afraid it would be long and =3D painful process, but let's try: >>=3D20 >> 1. Change manually ENGINE_FQDN to the new value you have used as new =3D FQDN in ovirt-engine-rename in those files: >>=3D20 >> /etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf >> /etc/ovirt-engine/imageuploader.conf.d/10-engine-setup.conf >> /etc/ovirt-engine/isouploader.conf.d/10-engine-setup.conf >> /etc/ovirt-engine/logcollector.conf.d/10-engine-setup.conf >>=3D20 >> 2. Now, let's check your custom certificates, I know you are using =3D your custom CA, does the trustore you have set into =3D ENGINE_HTTPS_PKI_TRUST_STORE contains all certificates which are needed =3D to verify HTTPS certificates you have set in Apache for new FQDN? If so, = =3D then please restart your engine and try >>=3D20 >> Thanks >>=3D20 >> Martin Perina >=3D20 > I'm not sur the PKI part is the biggest problem. I managed to get it =3D work after a rename and using a custom truststore with all the needed =3D CA. >=3D20 > My main problem is with this strange=3D20 > User login failure: java.lang.RuntimeException: server_error: =3D org.codehaus.jackson.JsonParseException: Unexpected character ('<' (code = =3D 60)): expected a valid value (number, String, array, object, 'true', =3D 'false' or 'null') >=3D20 > that no one seems to understand where it came from. Ravi suggest to do = =3D not use custom certificate, but I think it's impossible to test this =3D now, because of the incomplete operation of the rename command. So I =3D will but back my trust store and we should focus on this message. >=3D20 > By the way, I'm on irc on the channel with the nick FabriceB. Ok we finally nailed that problem with the help of Ravi Nori. Because of = =3D the new SSO settings, ovirt-engine made a called to itself, from within =3D the same process. But it needed to go through apache to authentify =3D itself by itself and was intercepted by my SSO setup. I will need to =3D rewrite it and split URL. --Apple-Mail=3D_F7422B19-9C53-401B-B9C1-3EB9A88300B1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=3Dutf-8
Le 11 ao=3DC3=3DBBt 2016 =3DC3=3DA0 11:37, Fabrice Bacchella &= lt;fabrice.bacchella(a)icloud.com> a =3DC3=3DA9crit :

Le 11 ao=3DC3=3DBBt 2016 =3DC3=3DA0 09:31, Martin Perina <<= a =3D href=3D3D"mailto:mperina(a)redhat.com" class=3D3D"">mperina(a)redhat.com> =3D a =3DC3=3DA9crit :

Hi Fabrice,

so it seems to me that = =3D ovirt-engine-rename didn't work as expected, because you have changed =3D ENGINE_FQDN in 10-setup-protocols.conf. We don't support user updates on = =3D automatically generated files in /etc/ovirt-engine/engine.conf.d/. =3D Please next time you'd like to change something, change it in =3D 99-custom-???.conf file.

I roll back this change, as you said i= t =3D was not enough and then the rename command..


<= div=3D class=3D3D"gmail_default" =3D style=3D3D"font-family:arial,helvetica,sans-serif">Now how to get things = =3D working: I'm afraid it would be long and painful process, but let's =3D try:

1. Change manually =3D ENGINE_FQDN to the new value you have used as new FQDN in =3D ovirt-engine-rename in those files:

    /etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf
    =3D /etc/ovirt-engine/imageuploader.conf.d/10-engine-setup.conf
    /etc/ovirt-engine/isouploader.conf.d/10-engine-setup.conf
    /etc/ovirt-engine/logcollector.conf.d/10-engine-setup.conf

2. Now, let's check =3D your custom certificates, I know you are using your custom CA, does the =3D trustore you have set into ENGINE_HTTPS_PKI_TRUST_STORE contains all =3D certificates which are needed to verify HTTPS certificates you have set =3D in Apache for new FQDN? If so, then please restart your engine and =3D try

Thanks
<= br =3D class=3D3D"">
Martin Perina

I'm not sur the PKI part is the biggest problem. I managed to = =3D get it work after a rename and using a custom truststore with all the =3D needed CA.

= My =3D main problem is with this strange 
User login = =3D failure: java.lang.RuntimeException: server_error: =3D org.codehaus.jackson.JsonParseException: Unexpected character ('<' =3D (code 60)): expected a valid value (number, String, array, object, =3D 'true', 'false' or 'null')

that no one seems to understand where it came from. Ravi =3D suggest to do not use custom certificate, but I think it's impossible to = =3D test this now, because of the incomplete operation of the rename =3D command. So I will but back my trust store and we should focus on this =3D message.

By= =3D the way, I'm on irc on the channel with the nick =3D FabriceB.

Ok we = =3D finally nailed that problem with the help of Ravi Nori. Because of the =3D new SSO settings, ovirt-engine made a called to itself, from within the =3D same process. But it needed to go through apache to authentify itself by = =3D itself and was intercepted by my SSO setup. I will need to rewrite it =3D and split URL.



=3D --Apple-Mail=3D_F7422B19-9C53-401B-B9C1-3EB9A88300B1-- --===============7561966973861091654== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" Ci0tQXBwbGUtTWFpbD1fRjc0MjJCMTktOUM1My00MDFCLUI5QzEtM0VCOUE4ODMwMEIxCkNvbnRl bnQtVHJhbnNmZXItRW5jb2Rpbmc6IHF1b3RlZC1wcmludGFibGUKQ29udGVudC1UeXBlOiB0ZXh0 L3BsYWluOwoJY2hhcnNldD11dGYtOAoKCj4gTGUgMTEgYW89QzM9QkJ0IDIwMTYgPUMzPUEwIDEx OjM3LCBGYWJyaWNlIEJhY2NoZWxsYSA9CjxmYWJyaWNlLmJhY2NoZWxsYUBpY2xvdWQuY29tPiBh ID1DMz1BOWNyaXQgOgo+PTIwCj49MjAKPj4gTGUgMTEgYW89QzM9QkJ0IDIwMTYgPUMzPUEwIDA5 OjMxLCBNYXJ0aW4gUGVyaW5hIDxtcGVyaW5hQHJlZGhhdC5jb20gPQo8bWFpbHRvOm1wZXJpbmFA cmVkaGF0LmNvbT4+IGEgPUMzPUE5Y3JpdCA6Cj4+PTIwCj4+IEhpIEZhYnJpY2UsCj4+PTIwCj4+ IHNvIGl0IHNlZW1zIHRvIG1lIHRoYXQgb3ZpcnQtZW5naW5lLXJlbmFtZSBkaWRuJ3Qgd29yayBh cyBleHBlY3RlZCwgPQpiZWNhdXNlIHlvdSBoYXZlIGNoYW5nZWQgRU5HSU5FX0ZRRE4gaW4gMTAt c2V0dXAtcHJvdG9jb2xzLmNvbmYuIFdlID0KZG9uJ3Qgc3VwcG9ydCB1c2VyIHVwZGF0ZXMgb24g YXV0b21hdGljYWxseSBnZW5lcmF0ZWQgZmlsZXMgaW4gPQovZXRjL292aXJ0LWVuZ2luZS9lbmdp bmUuY29uZi5kLy4gUGxlYXNlIG5leHQgdGltZSB5b3UnZCBsaWtlIHRvIGNoYW5nZSA9CnNvbWV0 aGluZywgY2hhbmdlIGl0IGluIDk5LWN1c3RvbS0/Pz8uY29uZiBmaWxlLgo+PTIwCj4gSSByb2xs IGJhY2sgdGhpcyBjaGFuZ2UsIGFzIHlvdSBzYWlkIGl0IHdhcyBub3QgZW5vdWdoIGFuZCB0aGVu IHRoZSA9CnJlbmFtZSBjb21tYW5kLi4KPj0yMAo+Pj0yMAo+PiBOb3cgaG93IHRvIGdldCB0aGlu Z3Mgd29ya2luZzogSSdtIGFmcmFpZCBpdCB3b3VsZCBiZSBsb25nIGFuZCA9CnBhaW5mdWwgcHJv Y2VzcywgYnV0IGxldCdzIHRyeToKPj49MjAKPj4gMS4gQ2hhbmdlIG1hbnVhbGx5IEVOR0lORV9G UUROIHRvIHRoZSBuZXcgdmFsdWUgeW91IGhhdmUgdXNlZCBhcyBuZXcgPQpGUUROIGluIG92aXJ0 LWVuZ2luZS1yZW5hbWUgaW4gdGhvc2UgZmlsZXM6Cj4+PTIwCj4+ICAgICAvZXRjL292aXJ0LWVu Z2luZS9lbmdpbmUuY29uZi5kLzEwLXNldHVwLXByb3RvY29scy5jb25mCj4+ICAgICAvZXRjL292 aXJ0LWVuZ2luZS9pbWFnZXVwbG9hZGVyLmNvbmYuZC8xMC1lbmdpbmUtc2V0dXAuY29uZgo+PiAg ICAgL2V0Yy9vdmlydC1lbmdpbmUvaXNvdXBsb2FkZXIuY29uZi5kLzEwLWVuZ2luZS1zZXR1cC5j b25mCj4+ICAgICAvZXRjL292aXJ0LWVuZ2luZS9sb2djb2xsZWN0b3IuY29uZi5kLzEwLWVuZ2lu ZS1zZXR1cC5jb25mCj4+PTIwCj4+IDIuIE5vdywgbGV0J3MgY2hlY2sgeW91ciBjdXN0b20gY2Vy dGlmaWNhdGVzLCBJIGtub3cgeW91IGFyZSB1c2luZyA9CnlvdXIgY3VzdG9tIENBLCBkb2VzIHRo ZSB0cnVzdG9yZSB5b3UgaGF2ZSBzZXQgaW50byA9CkVOR0lORV9IVFRQU19QS0lfVFJVU1RfU1RP UkUgY29udGFpbnMgYWxsIGNlcnRpZmljYXRlcyB3aGljaCBhcmUgbmVlZGVkID0KdG8gdmVyaWZ5 IEhUVFBTIGNlcnRpZmljYXRlcyB5b3UgaGF2ZSBzZXQgaW4gQXBhY2hlIGZvciBuZXcgRlFETj8g SWYgc28sID0KdGhlbiBwbGVhc2UgcmVzdGFydCB5b3VyIGVuZ2luZSBhbmQgdHJ5Cj4+PTIwCj4+ IFRoYW5rcwo+Pj0yMAo+PiBNYXJ0aW4gUGVyaW5hCj49MjAKPiBJJ20gbm90IHN1ciB0aGUgUEtJ IHBhcnQgaXMgdGhlIGJpZ2dlc3QgcHJvYmxlbS4gSSBtYW5hZ2VkIHRvIGdldCBpdCA9Cndvcmsg YWZ0ZXIgYSByZW5hbWUgYW5kIHVzaW5nIGEgY3VzdG9tIHRydXN0c3RvcmUgd2l0aCBhbGwgdGhl IG5lZWRlZCA9CkNBLgo+PTIwCj4gTXkgbWFpbiBwcm9ibGVtIGlzIHdpdGggdGhpcyBzdHJhbmdl PTIwCj4gVXNlciBsb2dpbiBmYWlsdXJlOiBqYXZhLmxhbmcuUnVudGltZUV4Y2VwdGlvbjogc2Vy dmVyX2Vycm9yOiA9Cm9yZy5jb2RlaGF1cy5qYWNrc29uLkpzb25QYXJzZUV4Y2VwdGlvbjogVW5l eHBlY3RlZCBjaGFyYWN0ZXIgKCc8JyAoY29kZSA9CjYwKSk6IGV4cGVjdGVkIGEgdmFsaWQgdmFs dWUgKG51bWJlciwgU3RyaW5nLCBhcnJheSwgb2JqZWN0LCAndHJ1ZScsID0KJ2ZhbHNlJyBvciAn bnVsbCcpCj49MjAKPiB0aGF0IG5vIG9uZSBzZWVtcyB0byB1bmRlcnN0YW5kIHdoZXJlIGl0IGNh bWUgZnJvbS4gUmF2aSBzdWdnZXN0IHRvIGRvID0Kbm90IHVzZSBjdXN0b20gY2VydGlmaWNhdGUs IGJ1dCBJIHRoaW5rIGl0J3MgaW1wb3NzaWJsZSB0byB0ZXN0IHRoaXMgPQpub3csIGJlY2F1c2Ug b2YgdGhlIGluY29tcGxldGUgb3BlcmF0aW9uIG9mIHRoZSByZW5hbWUgY29tbWFuZC4gU28gSSA9 CndpbGwgYnV0IGJhY2sgbXkgdHJ1c3Qgc3RvcmUgYW5kIHdlIHNob3VsZCBmb2N1cyBvbiB0aGlz IG1lc3NhZ2UuCj49MjAKPiBCeSB0aGUgd2F5LCBJJ20gb24gaXJjIG9uIHRoZSBjaGFubmVsIHdp dGggdGhlIG5pY2sgRmFicmljZUIuCgpPayB3ZSBmaW5hbGx5IG5haWxlZCB0aGF0IHByb2JsZW0g d2l0aCB0aGUgaGVscCBvZiBSYXZpIE5vcmkuIEJlY2F1c2Ugb2YgPQp0aGUgbmV3IFNTTyBzZXR0 aW5ncywgb3ZpcnQtZW5naW5lIG1hZGUgYSBjYWxsZWQgdG8gaXRzZWxmLCBmcm9tIHdpdGhpbiA9 CnRoZSBzYW1lIHByb2Nlc3MuIEJ1dCBpdCBuZWVkZWQgdG8gZ28gdGhyb3VnaCBhcGFjaGUgdG8g YXV0aGVudGlmeSA9Cml0c2VsZiBieSBpdHNlbGYgYW5kIHdhcyBpbnRlcmNlcHRlZCBieSBteSBT U08gc2V0dXAuIEkgd2lsbCBuZWVkIHRvID0KcmV3cml0ZSBpdCBhbmQgc3BsaXQgVVJMLgoKCgoK LS1BcHBsZS1NYWlsPV9GNzQyMkIxOS05QzUzLTQwMUItQjlDMS0zRUI5QTg4MzAwQjEKQ29udGVu dC1UcmFuc2Zlci1FbmNvZGluZzogcXVvdGVkLXByaW50YWJsZQpDb250ZW50LVR5cGU6IHRleHQv aHRtbDsKCWNoYXJzZXQ9dXRmLTgKCjxodG1sPjxoZWFkPjxtZXRhIGh0dHAtZXF1aXY9M0QiQ29u dGVudC1UeXBlIiBjb250ZW50PTNEInRleHQvaHRtbCA9CmNoYXJzZXQ9M0R1dGYtOCI+PC9oZWFk Pjxib2R5IHN0eWxlPTNEIndvcmQtd3JhcDogYnJlYWstd29yZDsgPQotd2Via2l0LW5ic3AtbW9k ZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiA9CmNsYXNz PTNEIiI+PGJyIGNsYXNzPTNEIiI+PGRpdj48YmxvY2txdW90ZSB0eXBlPTNEImNpdGUiIGNsYXNz PTNEIiI+PGRpdiA9CmNsYXNzPTNEIiI+TGUgMTEgYW89QzM9QkJ0IDIwMTYgPUMzPUEwIDExOjM3 LCBGYWJyaWNlIEJhY2NoZWxsYSAmbHQ7PGEgPQpocmVmPTNEIm1haWx0bzpmYWJyaWNlLmJhY2No ZWxsYUBpY2xvdWQuY29tIiA9CmNsYXNzPTNEIiI+ZmFicmljZS5iYWNjaGVsbGFAaWNsb3VkLmNv bTwvYT4mZ3Q7IGEgPUMzPUE5Y3JpdCA6PC9kaXY+PGJyID0KY2xhc3M9M0QiQXBwbGUtaW50ZXJj aGFuZ2UtbmV3bGluZSI+PGRpdiBjbGFzcz0zRCIiPjxtZXRhID0KaHR0cC1lcXVpdj0zRCJDb250 ZW50LVR5cGUiIGNvbnRlbnQ9M0QidGV4dC9odG1sIGNoYXJzZXQ9M0R1dGYtOCIgPQpjbGFzcz0z RCIiPjxkaXYgc3R5bGU9M0Qid29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9k ZTogPQpzcGFjZTsgLXdlYmtpdC1saW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNz PTNEIiI+PGJyID0KY2xhc3M9M0QiIj48ZGl2IGNsYXNzPTNEIiI+PGJsb2NrcXVvdGUgdHlwZT0z RCJjaXRlIiBjbGFzcz0zRCIiPjxkaXYgPQpjbGFzcz0zRCIiPkxlIDExIGFvPUMzPUJCdCAyMDE2 ID1DMz1BMCAwOTozMSwgTWFydGluIFBlcmluYSAmbHQ7PGEgPQpocmVmPTNEIm1haWx0bzptcGVy aW5hQHJlZGhhdC5jb20iIGNsYXNzPTNEIiI+bXBlcmluYUByZWRoYXQuY29tPC9hPiZndDsgPQph ID1DMz1BOWNyaXQgOjwvZGl2PjxiciBjbGFzcz0zRCJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5l Ij48ZGl2ID0KY2xhc3M9M0QiIj48ZGl2IGRpcj0zRCJsdHIiIGNsYXNzPTNEIiI+PGRpdiBjbGFz cz0zRCJnbWFpbF9kZWZhdWx0IiA9CnN0eWxlPTNEImZvbnQtZmFtaWx5OmFyaWFsLGhlbHZldGlj YSxzYW5zLXNlcmlmIj5IaSBGYWJyaWNlLDxiciA9CmNsYXNzPTNEIiI+PGJyIGNsYXNzPTNEIiI+ PC9kaXY+PGRpdiBjbGFzcz0zRCJnbWFpbF9kZWZhdWx0IiA9CnN0eWxlPTNEImZvbnQtZmFtaWx5 OmFyaWFsLGhlbHZldGljYSxzYW5zLXNlcmlmIj5zbyBpdCBzZWVtcyB0byBtZSB0aGF0ID0Kb3Zp cnQtZW5naW5lLXJlbmFtZSBkaWRuJ3Qgd29yayBhcyBleHBlY3RlZCwgYmVjYXVzZSB5b3UgaGF2 ZSBjaGFuZ2VkID0KRU5HSU5FX0ZRRE4gaW4gMTAtc2V0dXAtcHJvdG9jb2xzLmNvbmYuIFdlIGRv bid0IHN1cHBvcnQgdXNlciB1cGRhdGVzIG9uID0KYXV0b21hdGljYWxseSBnZW5lcmF0ZWQgZmls ZXMgaW4gL2V0Yy9vdmlydC1lbmdpbmUvZW5naW5lLmNvbmYuZC8uID0KUGxlYXNlIG5leHQgdGlt ZSB5b3UnZCBsaWtlIHRvIGNoYW5nZSBzb21ldGhpbmcsIGNoYW5nZSBpdCBpbiA9Cjk5LWN1c3Rv bS0/Pz8uY29uZiBmaWxlLjxiciBjbGFzcz0zRCIiPjwvZGl2PjwvZGl2PjwvZGl2PjwvYmxvY2tx dW90ZT48ZGl2PQogY2xhc3M9M0QiIj48YnIgY2xhc3M9M0QiIj48L2Rpdj5JIHJvbGwgYmFjayB0 aGlzIGNoYW5nZSwgYXMgeW91IHNhaWQgaXQgPQp3YXMgbm90IGVub3VnaCBhbmQgdGhlbiB0aGUg cmVuYW1lIGNvbW1hbmQuLjwvZGl2PjxkaXYgY2xhc3M9M0QiIj48YnIgPQpjbGFzcz0zRCIiPjxi bG9ja3F1b3RlIHR5cGU9M0QiY2l0ZSIgY2xhc3M9M0QiIj48ZGl2IGNsYXNzPTNEIiI+PGRpdiA9 CmRpcj0zRCJsdHIiIGNsYXNzPTNEIiI+PGRpdiBjbGFzcz0zRCJnbWFpbF9kZWZhdWx0IiA9CnN0 eWxlPTNEImZvbnQtZmFtaWx5OmFyaWFsLGhlbHZldGljYSxzYW5zLXNlcmlmIj48YnIgY2xhc3M9 M0QiIj48L2Rpdj48ZGl2PQogY2xhc3M9M0QiZ21haWxfZGVmYXVsdCIgPQpzdHlsZT0zRCJmb250 LWZhbWlseTphcmlhbCxoZWx2ZXRpY2Esc2Fucy1zZXJpZiI+Tm93IGhvdyB0byBnZXQgdGhpbmdz ID0Kd29ya2luZzogSSdtIGFmcmFpZCBpdCB3b3VsZCBiZSBsb25nIGFuZCBwYWluZnVsIHByb2Nl c3MsIGJ1dCBsZXQncyA9CnRyeTo8YnIgY2xhc3M9M0QiIj48YnIgY2xhc3M9M0QiIj48L2Rpdj48 ZGl2IGNsYXNzPTNEImdtYWlsX2RlZmF1bHQiID0Kc3R5bGU9M0QiZm9udC1mYW1pbHk6YXJpYWws aGVsdmV0aWNhLHNhbnMtc2VyaWYiPjEuIENoYW5nZSBtYW51YWxseSA9CkVOR0lORV9GUUROIHRv IHRoZSBuZXcgdmFsdWUgeW91IGhhdmUgdXNlZCBhcyBuZXcgRlFETiBpbiA9Cm92aXJ0LWVuZ2lu ZS1yZW5hbWUgaW4gdGhvc2UgZmlsZXM6PGJyIGNsYXNzPTNEIiI+PGJyID0KY2xhc3M9M0QiIj4m bmJzcDsmbmJzcDsmbmJzcDsgL2V0Yy9vdmlydC1lbmdpbmUvZW5naW5lLmNvbmYuPHdiciA9CmNs YXNzPTNEIiI+ZC8xMC1zZXR1cC1wcm90b2NvbHMuY29uZjxiciBjbGFzcz0zRCIiPiZuYnNwOyAm bmJzcDsgPQovZXRjL292aXJ0LWVuZ2luZS88d2JyIGNsYXNzPTNEIiI+aW1hZ2V1cGxvYWRlci5j b25mLmQvMTAtPHdiciA9CmNsYXNzPTNEIiI+ZW5naW5lLXNldHVwLmNvbmY8YnIgY2xhc3M9M0Qi Ij4KJm5ic3A7ICZuYnNwOyAvZXRjL292aXJ0LWVuZ2luZS9pc291cGxvYWRlci48d2JyID0KY2xh c3M9M0QiIj5jb25mLmQvMTAtZW5naW5lLXNldHVwLmNvbmY8YnIgY2xhc3M9M0QiIj4KJm5ic3A7 ICZuYnNwOyAvZXRjL292aXJ0LWVuZ2luZS88d2JyID0KY2xhc3M9M0QiIj5sb2djb2xsZWN0b3Iu Y29uZi5kLzEwLWVuZ2luZS08d2JyIGNsYXNzPTNEIiI+c2V0dXAuY29uZjxiciA9CmNsYXNzPTNE IiI+PGJyIGNsYXNzPTNEIiI+PC9kaXY+PGRpdiBjbGFzcz0zRCJnbWFpbF9kZWZhdWx0IiA9CnN0 eWxlPTNEImZvbnQtZmFtaWx5OmFyaWFsLGhlbHZldGljYSxzYW5zLXNlcmlmIj4yLiBOb3csIGxl dCdzIGNoZWNrID0KeW91ciBjdXN0b20gY2VydGlmaWNhdGVzLCBJIGtub3cgeW91IGFyZSB1c2lu ZyB5b3VyIGN1c3RvbSBDQSwgZG9lcyB0aGUgPQp0cnVzdG9yZSB5b3UgaGF2ZSBzZXQgaW50byBF TkdJTkVfSFRUUFNfUEtJX1RSVVNUX1NUT1JFIGNvbnRhaW5zIGFsbCA9CmNlcnRpZmljYXRlcyB3 aGljaCBhcmUgbmVlZGVkIHRvIHZlcmlmeSBIVFRQUyBjZXJ0aWZpY2F0ZXMgeW91IGhhdmUgc2V0 ID0KaW4gQXBhY2hlIGZvciBuZXcgRlFETj8gSWYgc28sIHRoZW4gcGxlYXNlIHJlc3RhcnQgeW91 ciBlbmdpbmUgYW5kID0KdHJ5PGJyIGNsYXNzPTNEIiI+PGJyIGNsYXNzPTNEIiI+PC9kaXY+PGRp diBjbGFzcz0zRCJnbWFpbF9kZWZhdWx0IiA9CnN0eWxlPTNEImZvbnQtZmFtaWx5OmFyaWFsLGhl bHZldGljYSxzYW5zLXNlcmlmIj5UaGFua3M8YnIgY2xhc3M9M0QiIj48YnIgPQpjbGFzcz0zRCIi PjwvZGl2PjxkaXYgY2xhc3M9M0QiZ21haWxfZGVmYXVsdCIgPQpzdHlsZT0zRCJmb250LWZhbWls eTphcmlhbCxoZWx2ZXRpY2Esc2Fucy1zZXJpZiI+TWFydGluIFBlcmluYTxiciA9CmNsYXNzPTNE IiI+PC9kaXY+PC9kaXY+PC9kaXY+PC9ibG9ja3F1b3RlPjwvZGl2PjxiciBjbGFzcz0zRCIiPjxk aXYgPQpjbGFzcz0zRCIiPkknbSBub3Qgc3VyIHRoZSBQS0kgcGFydCBpcyB0aGUgYmlnZ2VzdCBw cm9ibGVtLiBJIG1hbmFnZWQgdG8gPQpnZXQgaXQgd29yayBhZnRlciBhIHJlbmFtZSBhbmQgdXNp bmcgYSBjdXN0b20gdHJ1c3RzdG9yZSB3aXRoIGFsbCB0aGUgPQpuZWVkZWQgQ0EuPC9kaXY+PGRp diBjbGFzcz0zRCIiPjxiciBjbGFzcz0zRCIiPjwvZGl2PjxkaXYgY2xhc3M9M0QiIj5NeSA9Cm1h aW4gcHJvYmxlbSBpcyB3aXRoIHRoaXMgc3RyYW5nZSZuYnNwOzwvZGl2PjxkaXYgY2xhc3M9M0Qi Ij5Vc2VyIGxvZ2luID0KZmFpbHVyZTogamF2YS5sYW5nLlJ1bnRpbWVFeGNlcHRpb246IHNlcnZl cl9lcnJvcjogPQpvcmcuY29kZWhhdXMuamFja3Nvbi5Kc29uUGFyc2VFeGNlcHRpb246IFVuZXhw ZWN0ZWQgY2hhcmFjdGVyICgnJmx0OycgPQooY29kZSA2MCkpOiBleHBlY3RlZCBhIHZhbGlkIHZh bHVlIChudW1iZXIsIFN0cmluZywgYXJyYXksIG9iamVjdCwgPQondHJ1ZScsICdmYWxzZScgb3Ig J251bGwnKTwvZGl2PjxkaXYgY2xhc3M9M0QiIj48YnIgY2xhc3M9M0QiIj48L2Rpdj48ZGl2ID0K Y2xhc3M9M0QiIj50aGF0IG5vIG9uZSBzZWVtcyB0byB1bmRlcnN0YW5kIHdoZXJlIGl0IGNhbWUg ZnJvbS4gUmF2aSA9CnN1Z2dlc3QgdG8gZG8gbm90IHVzZSBjdXN0b20gY2VydGlmaWNhdGUsIGJ1 dCBJIHRoaW5rIGl0J3MgaW1wb3NzaWJsZSB0byA9CnRlc3QgdGhpcyBub3csIGJlY2F1c2Ugb2Yg dGhlIGluY29tcGxldGUgb3BlcmF0aW9uIG9mIHRoZSByZW5hbWUgPQpjb21tYW5kLiBTbyBJIHdp bGwgYnV0IGJhY2sgbXkgdHJ1c3Qgc3RvcmUgYW5kIHdlIHNob3VsZCBmb2N1cyBvbiB0aGlzID0K bWVzc2FnZS48L2Rpdj48ZGl2IGNsYXNzPTNEIiI+PGJyIGNsYXNzPTNEIiI+PC9kaXY+PGRpdiBj bGFzcz0zRCIiPkJ5ID0KdGhlIHdheSwgSSdtIG9uIGlyYyBvbiB0aGUgY2hhbm5lbCB3aXRoIHRo ZSBuaWNrID0KRmFicmljZUIuPC9kaXY+PC9kaXY+PC9kaXY+PC9ibG9ja3F1b3RlPjxiciBjbGFz cz0zRCIiPjwvZGl2PjxkaXY+T2sgd2UgPQpmaW5hbGx5IG5haWxlZCB0aGF0IHByb2JsZW0gd2l0 aCB0aGUgaGVscCBvZiBSYXZpIE5vcmkuIEJlY2F1c2Ugb2YgdGhlID0KbmV3IFNTTyBzZXR0aW5n cywgb3ZpcnQtZW5naW5lIG1hZGUgYSBjYWxsZWQgdG8gaXRzZWxmLCBmcm9tIHdpdGhpbiB0aGUg PQpzYW1lIHByb2Nlc3MuIEJ1dCBpdCBuZWVkZWQgdG8gZ28gdGhyb3VnaCBhcGFjaGUgdG8gYXV0 aGVudGlmeSBpdHNlbGYgYnkgPQppdHNlbGYgYW5kIHdhcyBpbnRlcmNlcHRlZCBieSBteSBTU08g c2V0dXAuIEkgd2lsbCBuZWVkIHRvIHJld3JpdGUgaXQgPQphbmQgc3BsaXQgVVJMLjwvZGl2Pjxk aXY+PGJyIGNsYXNzPTNEIiI+PC9kaXY+PGRpdj48YnIgPQpjbGFzcz0zRCIiPjwvZGl2PjxiciBj bGFzcz0zRCIiPjwvYm9keT48L2h0bWw+PQoKLS1BcHBsZS1NYWlsPV9GNzQyMkIxOS05QzUzLTQw MUItQjlDMS0zRUI5QTg4MzAwQjEtLQo= --===============7561966973861091654==--