From j.astrego at netbulae.eu Tue Jul 22 04:43:51 2014 Content-Type: multipart/mixed; boundary="===============0559603462766811603==" MIME-Version: 1.0 From: Jorick Astrego To: users at ovirt.org Subject: Re: [ovirt-users] user permissions Date: Tue, 22 Jul 2014 10:43:43 +0200 Message-ID: <53CE243F.1060006@netbulae.eu> In-Reply-To: 1074377558.11486624.1406018123359.JavaMail.zimbra@redhat.com --===============0559603462766811603== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable This is a multi-part message in MIME format. --------------020802020500080801040002 Content-Type: text/plain; charset=3DUTF-8; format=3Dflowed Content-Transfer-Encoding: 7bit Hi, Sorry let be a bit more clear. I want to have a user that can log into = the user portal and create vm's, stop them, add disks etc. But only as a = user. I tried the poweruser role and can do all things _except _creating a new = VM. I also want the user to only see and manipulate his own VM's and = not the other ones running on the same system. Even with the PowerUser role, I am not able to create a new VM as this = user. Also when I edit the built-in PowerUser role, I only see the = following rights selected: Login Permissions Template Provisioning Operations Create VM Provisioning Operations Edit properties Create Disk Provisioning Operations Create Everything else is deselected. Kind regards, Jorick Astrego Netbulae On 07/22/2014 10:35 AM, Oved Ourfali wrote: > Hi > > You didn't really specify what you would like to accomplish, and what per= missions were granted and on what object. > In general, we have two types of roles: User and Admin roles. > If a user has any admin role on any object, then he can login to the admi= n portal. > So, as long as you don't assign the user with admin role he will not be a= ble to login to the admin portal. > > Giving PowerUser role on a DC will allow the user to create VMs and Disks= through the user portal. > Is that what you would like to accomplish? > > Oved > > ----- Original Message ----- >> From: "Jorick Astrego" >> To: users(a)ovirt.org >> Sent: Tuesday, July 22, 2014 11:32:16 AM >> Subject: [ovirt-users] user permissions >> >> Hi, >> >> In our 3.4.3 environment I started adding external users (it is >> connected to a freeipa server) and I'm having some problems setting the >> correct permissions. >> >> When I give all user roles to a user, I cannot create a vm and get an >> error "User is not authorized to perform this action". I tried setting >> it on the system level, DC level and cluster level. >> >> I needed to give this user an administrator role with only exactly the >> same vm and disk permissions (nothing extra) and things work ok, but he >> can now login to the admin portal. So I blocked it with a .htaccess >> which is not the prettiest solution. >> >> Am I doing things wrong? >> >> Also the user disappeared from the "System permissions" overview but can >> still login, which is a bit weird. >> >> Kind regards, >> >> Jorick Astrego >> Netbulae >> >> _______________________________________________ >> Users mailing list >> Users(a)ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> --------------020802020500080801040002 Content-Type: text/html; charset=3DUTF-8 Content-Transfer-Encoding: 8bit Hi,

Sorry let be a bit more clear. I want to have a user that can log into the user portal and create vm's, stop them, add disks etc. But only as a user.

I tried the poweruser role and can do all things except creating a new VM.=C2=A0 I also want the user to only see and manipulate his own VM's and not the other ones running on the same system.

Even with the PowerUser role, I am not able to create a new VM as this user. Also when I edit the built-in PowerUser role, I only see the following rights selected:

Login Permissions

Template

Provis= ioning Operations
Create

VM


Provisio= ning Operations
Edit properties
Create

Disk<= /div>

Provisio= ning Operations
Create

Everything else is deselected.

Kind regards,

Jorick Astrego
Netbulae

On 07/22/2014 10:35 AM, Oved Ourfali wrote:
Hi

You didn't really specify what you would like to accomplish, and what permi=
ssions were granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin =
portal.
So, as long as you don't assign the user with admin role he will not be abl=
e to login to the admin portal.

Giving PowerUser role on a DC will allow the user to create VMs and Disks t=
hrough the user portal.
Is that what you would like to accomplish?

Oved

----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu&g=
t;
To: users(a)ovirt.org
Sent: Tuesday, July 22, 2014 11:32:16 AM
Subject: [ovirt-users] user permissions

Hi,

In our 3.4.3 environment I started adding external users (it is
connected to a freeipa server) and I'm having some problems setting the
correct permissions.

When I give all user roles to a user, I cannot create a vm and get an
error "User is not authorized to perform this action". I tried setting
it on the system level, DC level and cluster level.

I needed to give this user an administrator role with only exactly the
same vm and disk permissions (nothing extra) and things work ok, but he
can now login to the admin portal. So I blocked it with a .htaccess
which is not the prettiest solution.

Am I doing things wrong?

Also the user disappeared from the "System permissions" overview but can
still login, which is a bit weird.

Kind regards,

Jorick Astrego
Netbulae

_______________________________________________
Users mailing list
Use=
rs(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


--------------020802020500080801040002-- --===============0559603462766811603== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" VGhpcyBpcyBhIG11bHRpLXBhcnQgbWVzc2FnZSBpbiBNSU1FIGZvcm1hdC4KLS0tLS0tLS0tLS0t LS0wMjA4MDIwMjA1MDAwODA4MDEwNDAwMDIKQ29udGVudC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFy c2V0PVVURi04OyBmb3JtYXQ9Zmxvd2VkCkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IDdiaXQK CkhpLAoKU29ycnkgbGV0IGJlIGEgYml0IG1vcmUgY2xlYXIuIEkgd2FudCB0byBoYXZlIGEgdXNl ciB0aGF0IGNhbiBsb2cgaW50byAKdGhlIHVzZXIgcG9ydGFsIGFuZCBjcmVhdGUgdm0ncywgc3Rv cCB0aGVtLCBhZGQgZGlza3MgZXRjLiBCdXQgb25seSBhcyBhIAp1c2VyLgoKSSB0cmllZCB0aGUg cG93ZXJ1c2VyIHJvbGUgYW5kIGNhbiBkbyBhbGwgdGhpbmdzIF9leGNlcHQgX2NyZWF0aW5nIGEg bmV3IApWTS4gIEkgYWxzbyB3YW50IHRoZSB1c2VyIHRvIG9ubHkgc2VlIGFuZCBtYW5pcHVsYXRl IGhpcyBvd24gVk0ncyBhbmQgCm5vdCB0aGUgb3RoZXIgb25lcyBydW5uaW5nIG9uIHRoZSBzYW1l IHN5c3RlbS4KCkV2ZW4gd2l0aCB0aGUgUG93ZXJVc2VyIHJvbGUsIEkgYW0gbm90IGFibGUgdG8g Y3JlYXRlIGEgbmV3IFZNIGFzIHRoaXMgCnVzZXIuIEFsc28gd2hlbiBJIGVkaXQgdGhlIGJ1aWx0 LWluIFBvd2VyVXNlciByb2xlLCBJIG9ubHkgc2VlIHRoZSAKZm9sbG93aW5nIHJpZ2h0cyBzZWxl Y3RlZDoKCkxvZ2luIFBlcm1pc3Npb25zCgpUZW1wbGF0ZQoKUHJvdmlzaW9uaW5nIE9wZXJhdGlv bnMKQ3JlYXRlCgpWTQoKClByb3Zpc2lvbmluZyBPcGVyYXRpb25zCkVkaXQgcHJvcGVydGllcwpD cmVhdGUKCkRpc2sKClByb3Zpc2lvbmluZyBPcGVyYXRpb25zCkNyZWF0ZQoKRXZlcnl0aGluZyBl bHNlIGlzIGRlc2VsZWN0ZWQuCgpLaW5kIHJlZ2FyZHMsCgpKb3JpY2sgQXN0cmVnbwpOZXRidWxh ZQoKT24gMDcvMjIvMjAxNCAxMDozNSBBTSwgT3ZlZCBPdXJmYWxpIHdyb3RlOgo+IEhpCj4KPiBZ b3UgZGlkbid0IHJlYWxseSBzcGVjaWZ5IHdoYXQgeW91IHdvdWxkIGxpa2UgdG8gYWNjb21wbGlz aCwgYW5kIHdoYXQgcGVybWlzc2lvbnMgd2VyZSBncmFudGVkIGFuZCBvbiB3aGF0IG9iamVjdC4K PiBJbiBnZW5lcmFsLCB3ZSBoYXZlIHR3byB0eXBlcyBvZiByb2xlczogVXNlciBhbmQgQWRtaW4g cm9sZXMuCj4gSWYgYSB1c2VyIGhhcyBhbnkgYWRtaW4gcm9sZSBvbiBhbnkgb2JqZWN0LCB0aGVu IGhlIGNhbiBsb2dpbiB0byB0aGUgYWRtaW4gcG9ydGFsLgo+IFNvLCBhcyBsb25nIGFzIHlvdSBk b24ndCBhc3NpZ24gdGhlIHVzZXIgd2l0aCBhZG1pbiByb2xlIGhlIHdpbGwgbm90IGJlIGFibGUg dG8gbG9naW4gdG8gdGhlIGFkbWluIHBvcnRhbC4KPgo+IEdpdmluZyBQb3dlclVzZXIgcm9sZSBv biBhIERDIHdpbGwgYWxsb3cgdGhlIHVzZXIgdG8gY3JlYXRlIFZNcyBhbmQgRGlza3MgdGhyb3Vn aCB0aGUgdXNlciBwb3J0YWwuCj4gSXMgdGhhdCB3aGF0IHlvdSB3b3VsZCBsaWtlIHRvIGFjY29t cGxpc2g/Cj4KPiBPdmVkCj4KPiAtLS0tLSBPcmlnaW5hbCBNZXNzYWdlIC0tLS0tCj4+IEZyb206 ICJKb3JpY2sgQXN0cmVnbyIgPGouYXN0cmVnb0BuZXRidWxhZS5ldT4KPj4gVG86IHVzZXJzQG92 aXJ0Lm9yZwo+PiBTZW50OiBUdWVzZGF5LCBKdWx5IDIyLCAyMDE0IDExOjMyOjE2IEFNCj4+IFN1 YmplY3Q6IFtvdmlydC11c2Vyc10gdXNlciBwZXJtaXNzaW9ucwo+Pgo+PiBIaSwKPj4KPj4gSW4g b3VyIDMuNC4zIGVudmlyb25tZW50IEkgc3RhcnRlZCBhZGRpbmcgZXh0ZXJuYWwgdXNlcnMgKGl0 IGlzCj4+IGNvbm5lY3RlZCB0byBhIGZyZWVpcGEgc2VydmVyKSBhbmQgSSdtIGhhdmluZyBzb21l IHByb2JsZW1zIHNldHRpbmcgdGhlCj4+IGNvcnJlY3QgcGVybWlzc2lvbnMuCj4+Cj4+IFdoZW4g SSBnaXZlIGFsbCB1c2VyIHJvbGVzIHRvIGEgdXNlciwgSSBjYW5ub3QgY3JlYXRlIGEgdm0gYW5k IGdldCBhbgo+PiBlcnJvciAiVXNlciBpcyBub3QgYXV0aG9yaXplZCB0byBwZXJmb3JtIHRoaXMg YWN0aW9uIi4gSSB0cmllZCBzZXR0aW5nCj4+IGl0IG9uIHRoZSBzeXN0ZW0gbGV2ZWwsIERDIGxl dmVsIGFuZCBjbHVzdGVyIGxldmVsLgo+Pgo+PiBJIG5lZWRlZCB0byBnaXZlIHRoaXMgdXNlciBh biBhZG1pbmlzdHJhdG9yIHJvbGUgd2l0aCBvbmx5IGV4YWN0bHkgdGhlCj4+IHNhbWUgdm0gYW5k IGRpc2sgcGVybWlzc2lvbnMgKG5vdGhpbmcgZXh0cmEpIGFuZCB0aGluZ3Mgd29yayBvaywgYnV0 IGhlCj4+IGNhbiBub3cgbG9naW4gdG8gdGhlIGFkbWluIHBvcnRhbC4gU28gSSBibG9ja2VkIGl0 IHdpdGggYSAuaHRhY2Nlc3MKPj4gd2hpY2ggaXMgbm90IHRoZSBwcmV0dGllc3Qgc29sdXRpb24u Cj4+Cj4+IEFtIEkgZG9pbmcgdGhpbmdzIHdyb25nPwo+Pgo+PiBBbHNvIHRoZSB1c2VyIGRpc2Fw cGVhcmVkIGZyb20gdGhlICJTeXN0ZW0gcGVybWlzc2lvbnMiIG92ZXJ2aWV3IGJ1dCBjYW4KPj4g c3RpbGwgbG9naW4sIHdoaWNoIGlzIGEgYml0IHdlaXJkLgo+Pgo+PiBLaW5kIHJlZ2FyZHMsCj4+ Cj4+IEpvcmljayBBc3RyZWdvCj4+IE5ldGJ1bGFlCj4+Cj4+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fCj4+IFVzZXJzIG1haWxpbmcgbGlzdAo+PiBVc2Vy c0BvdmlydC5vcmcKPj4gaHR0cDovL2xpc3RzLm92aXJ0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Vz ZXJzCj4+CgoKLS0tLS0tLS0tLS0tLS0wMjA4MDIwMjA1MDAwODA4MDEwNDAwMDIKQ29udGVudC1U eXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgKQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzog OGJpdAoKPGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz ZXQ9VVRGLTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IHRl eHQ9IiMwMDAwMDAiIGJnY29sb3I9IiNGRkZGRkYiPgogICAgSGksIDxicj4KICAgIDxicj4KICAg IFNvcnJ5IGxldCBiZSBhIGJpdCBtb3JlIGNsZWFyLiBJIHdhbnQgdG8gaGF2ZSBhIHVzZXIgdGhh dCBjYW4gbG9nCiAgICBpbnRvIHRoZSB1c2VyIHBvcnRhbCBhbmQgY3JlYXRlIHZtJ3MsIHN0b3Ag dGhlbSwgYWRkIGRpc2tzIGV0Yy4gQnV0CiAgICBvbmx5IGFzIGEgdXNlci48YnI+CiAgICA8YnI+ CiAgICBJIHRyaWVkIHRoZSBwb3dlcnVzZXIgcm9sZSBhbmQgY2FuIGRvIGFsbCB0aGluZ3MgPHU+ ZXhjZXB0IDwvdT5jcmVhdGluZwogICAgYSBuZXcgVk0uwqAgSSBhbHNvIHdhbnQgdGhlIHVzZXIg dG8gb25seSBzZWUgYW5kIG1hbmlwdWxhdGUgaGlzIG93bgogICAgVk0ncyBhbmQgbm90IHRoZSBv dGhlciBvbmVzIHJ1bm5pbmcgb24gdGhlIHNhbWUgc3lzdGVtLjxicj4KICAgIDxicj4KICAgIEV2 ZW4gd2l0aCB0aGUgUG93ZXJVc2VyIHJvbGUsIEkgYW0gbm90IGFibGUgdG8gY3JlYXRlIGEgbmV3 IFZNIGFzCiAgICB0aGlzIHVzZXIuIEFsc28gd2hlbiBJIGVkaXQgdGhlIGJ1aWx0LWluIFBvd2Vy VXNlciByb2xlLCBJIG9ubHkgc2VlCiAgICB0aGUgZm9sbG93aW5nIHJpZ2h0cyBzZWxlY3RlZDo8 YnI+CiAgICA8YnI+CiAgICA8ZGl2IGNsYXNzPSJHUERCMzI0Q0RJQiI+PHNwYW4+PGlucHV0CiAg ICAgICAgICBpZD0iUm9sZVBvcHVwVmlld190cmVlX3Jvb3QwX25vZGUwX25vZGUyIiB0YWJpbmRl eD0iLTEiCiAgICAgICAgICBjaGVja2VkPSJjaGVja2VkIiBkaXNhYmxlZD0iZGlzYWJsZWQiIHR5 cGU9ImNoZWNrYm94Ij48L3NwYW4+PHNwYW4+TG9naW4KICAgICAgICBQZXJtaXNzaW9uczxicj4K ICAgICAgICA8YnI+CiAgICAgIDwvc3Bhbj4KICAgICAgPGRpdiBjbGFzcz0iR1BEQjMyNENESUIg R1BEQjMyNENGSUIiPjxzcGFuPjxpbnB1dAogICAgICAgICAgICBpZD0iUm9sZVBvcHVwVmlld190 cmVlX3Jvb3QyIiB0YWJpbmRleD0iLTEiCiAgICAgICAgICAgIGRpc2FibGVkPSJkaXNhYmxlZCIg dHlwZT0iY2hlY2tib3giPjwvc3Bhbj48c3Bhbj5UZW1wbGF0ZTwvc3Bhbj48L2Rpdj4KICAgICAg PGRpdiBzdHlsZT0icGFkZGluZy1sZWZ0OiAxNnB4OyIgY2xhc3M9IkdQREIzMjRDQUlCIj4KICAg ICAgICA8ZGl2IG9uY2xpY2s9IiIgc3R5bGU9InBhZGRpbmctbGVmdDogMTZweDtwb3NpdGlvbjpy ZWxhdGl2ZTsiCiAgICAgICAgICBjbGFzcz0iR1BEQjMyNENBSUIgR1BEQjMyNENDSUIiPgogICAg ICAgICAgPGRpdiBjbGFzcz0iR1BEQjMyNENCSUIiIHN0eWxlPSJsZWZ0OiAwcHg7d2lkdGg6IDE1 cHg7aGVpZ2h0OgogICAgICAgICAgICAxNXB4O3Bvc2l0aW9uOmFic29sdXRlOyI+PGJyPgogICAg ICAgICAgPC9kaXY+CiAgICAgICAgICA8ZGl2IGNsYXNzPSJHUERCMzI0Q0RJQiBHUERCMzI0Q0ZJ QiI+PHNwYW4+PGlucHV0CiAgICAgICAgICAgICAgICBpZD0iUm9sZVBvcHVwVmlld190cmVlX3Jv b3QyX25vZGUxIiB0YWJpbmRleD0iLTEiCiAgICAgICAgICAgICAgICBkaXNhYmxlZD0iZGlzYWJs ZWQiIHR5cGU9ImNoZWNrYm94Ij48L3NwYW4+PHNwYW4+UHJvdmlzaW9uaW5nCiAgICAgICAgICAg ICAgT3BlcmF0aW9uczwvc3Bhbj48L2Rpdj4KICAgICAgICA8L2Rpdj4KICAgICAgPC9kaXY+CiAg ICAgIDxkaXYgYXJpYS1sZXZlbD0iMyIgYXJpYS1wb3NpbnNldD0iMSIgYXJpYS1zZXRzaXplPSIz IgogICAgICAgIHJvbGU9InRyZWVpdGVtIiBhcmlhLXNlbGVjdGVkPSJ0cnVlIj4KICAgICAgICA8 ZGl2IHN0eWxlPSJwYWRkaW5nLWxlZnQ6IDMycHg7IiBjbGFzcz0iR1BEQjMyNENBSUIgR1BEQjMy NENHSUIiPgogICAgICAgICAgPGRpdiBvbmNsaWNrPSIiIHN0eWxlPSJwYWRkaW5nLWxlZnQ6IDE2 cHg7cG9zaXRpb246cmVsYXRpdmU7IgogICAgICAgICAgICBjbGFzcz0iR1BEQjMyNENBSUIgR1BE QjMyNENDSUIiPgogICAgICAgICAgICA8ZGl2IGNsYXNzPSJHUERCMzI0Q0RJQiI+PHNwYW4+PGlu cHV0CiAgICAgICAgICAgICAgICAgIGlkPSJSb2xlUG9wdXBWaWV3X3RyZWVfcm9vdDJfbm9kZTFf bm9kZTAiCiAgICAgICAgICAgICAgICAgIHRhYmluZGV4PSItMSIgY2hlY2tlZD0iY2hlY2tlZCIg ZGlzYWJsZWQ9ImRpc2FibGVkIgogICAgICAgICAgICAgICAgICB0eXBlPSJjaGVja2JveCI+PC9z cGFuPjxzcGFuPkNyZWF0ZTwvc3Bhbj48L2Rpdj4KICAgICAgICAgIDwvZGl2PgogICAgICAgIDwv ZGl2PgogICAgICA8L2Rpdj4KICAgICAgPGJyPgogICAgPC9kaXY+CiAgICA8c3Bhbj5WTTwvc3Bh bj4KICAgIDxkaXYgYXJpYS1sZXZlbD0iMiIgYXJpYS1leHBhbmRlZD0iZmFsc2UiIGFyaWEtcG9z aW5zZXQ9IjEiCiAgICAgIGFyaWEtc2V0c2l6ZT0iMyIgcm9sZT0idHJlZWl0ZW0iIGFyaWEtc2Vs ZWN0ZWQ9ImZhbHNlIj4KICAgICAgPGRpdiBzdHlsZT0icGFkZGluZy1sZWZ0OiAxNnB4OyIgY2xh c3M9IkdQREIzMjRDQUlCIj4KICAgICAgICA8ZGl2IG9uY2xpY2s9IiIgc3R5bGU9InBhZGRpbmct bGVmdDogMTZweDtwb3NpdGlvbjpyZWxhdGl2ZTsiCiAgICAgICAgICBjbGFzcz0iR1BEQjMyNENB SUIgR1BEQjMyNENDSUIiPgogICAgICAgICAgPGRpdiBjbGFzcz0iR1BEQjMyNENCSUIiIHN0eWxl PSJsZWZ0OiAwcHg7d2lkdGg6IDE1cHg7aGVpZ2h0OgogICAgICAgICAgICAxNXB4O3Bvc2l0aW9u OmFic29sdXRlOyI+PGJyPgogICAgICAgICAgPC9kaXY+CiAgICAgICAgPC9kaXY+CiAgICAgIDwv ZGl2PgogICAgPC9kaXY+CiAgICA8ZGl2IHN0eWxlPSJwYWRkaW5nLWxlZnQ6IDE2cHg7IiBjbGFz cz0iR1BEQjMyNENBSUIiPgogICAgICA8ZGl2IG9uY2xpY2s9IiIgc3R5bGU9InBhZGRpbmctbGVm dDogMTZweDtwb3NpdGlvbjpyZWxhdGl2ZTsiCiAgICAgICAgY2xhc3M9IkdQREIzMjRDQUlCIEdQ REIzMjRDQ0lCIj4KICAgICAgICA8ZGl2IGNsYXNzPSJHUERCMzI0Q0JJQiIgc3R5bGU9ImxlZnQ6 IDBweDt3aWR0aDogMTVweDtoZWlnaHQ6CiAgICAgICAgICAxNXB4O3Bvc2l0aW9uOmFic29sdXRl OyI+PGJyPgogICAgICAgIDwvZGl2PgogICAgICAgIDxkaXYgY2xhc3M9IkdQREIzMjRDRElCIEdQ REIzMjRDRklCIj48c3Bhbj48aW5wdXQKICAgICAgICAgICAgICBpZD0iUm9sZVBvcHVwVmlld190 cmVlX3Jvb3QzX25vZGUxIiB0YWJpbmRleD0iLTEiCiAgICAgICAgICAgICAgZGlzYWJsZWQ9ImRp c2FibGVkIiB0eXBlPSJjaGVja2JveCI+PC9zcGFuPjxzcGFuPlByb3Zpc2lvbmluZwogICAgICAg ICAgICBPcGVyYXRpb25zPC9zcGFuPjwvZGl2PgogICAgICA8L2Rpdj4KICAgIDwvZGl2PgogICAg PGRpdiBhcmlhLWxldmVsPSIzIiBhcmlhLXBvc2luc2V0PSIxIiBhcmlhLXNldHNpemU9IjUiCiAg ICAgIHJvbGU9InRyZWVpdGVtIiBhcmlhLXNlbGVjdGVkPSJmYWxzZSI+CiAgICAgIDxkaXYgc3R5 bGU9InBhZGRpbmctbGVmdDogMzJweDsiIGNsYXNzPSJHUERCMzI0Q0FJQiI+CiAgICAgICAgPGRp diBvbmNsaWNrPSIiIHN0eWxlPSJwYWRkaW5nLWxlZnQ6IDE2cHg7cG9zaXRpb246cmVsYXRpdmU7 IgogICAgICAgICAgY2xhc3M9IkdQREIzMjRDQUlCIEdQREIzMjRDQ0lCIj4KICAgICAgICAgIDxk aXYgY2xhc3M9IkdQREIzMjRDRElCIj48c3Bhbj48aW5wdXQKICAgICAgICAgICAgICAgIGlkPSJS b2xlUG9wdXBWaWV3X3RyZWVfcm9vdDNfbm9kZTFfbm9kZTAiIHRhYmluZGV4PSItMSIKICAgICAg ICAgICAgICAgIGRpc2FibGVkPSJkaXNhYmxlZCIgdHlwZT0iY2hlY2tib3giPjwvc3Bhbj48c3Bh bj5FZGl0CiAgICAgICAgICAgICAgcHJvcGVydGllczwvc3Bhbj48L2Rpdj4KICAgICAgICA8L2Rp dj4KICAgICAgPC9kaXY+CiAgICA8L2Rpdj4KICAgIDxkaXYgYXJpYS1sZXZlbD0iMyIgYXJpYS1w b3NpbnNldD0iMiIgYXJpYS1zZXRzaXplPSI1IgogICAgICByb2xlPSJ0cmVlaXRlbSIgYXJpYS1z ZWxlY3RlZD0idHJ1ZSI+CiAgICAgIDxkaXYgc3R5bGU9InBhZGRpbmctbGVmdDogMzJweDsiIGNs YXNzPSJHUERCMzI0Q0FJQiBHUERCMzI0Q0dJQiI+CiAgICAgICAgPGRpdiBvbmNsaWNrPSIiIHN0 eWxlPSJwYWRkaW5nLWxlZnQ6IDE2cHg7cG9zaXRpb246cmVsYXRpdmU7IgogICAgICAgICAgY2xh c3M9IkdQREIzMjRDQUlCIEdQREIzMjRDQ0lCIj4KICAgICAgICAgIDxkaXYgdGFiaW5kZXg9IjAi IGNsYXNzPSJHUERCMzI0Q0RJQiI+PHNwYW4+PGlucHV0CiAgICAgICAgICAgICAgICBpZD0iUm9s ZVBvcHVwVmlld190cmVlX3Jvb3QzX25vZGUxX25vZGUxIiB0YWJpbmRleD0iLTEiCiAgICAgICAg ICAgICAgICBjaGVja2VkPSJjaGVja2VkIiBkaXNhYmxlZD0iZGlzYWJsZWQiIHR5cGU9ImNoZWNr Ym94Ij48L3NwYW4+PHNwYW4+Q3JlYXRlPC9zcGFuPjwvZGl2PgogICAgICAgIDwvZGl2PgogICAg ICA8L2Rpdj4KICAgIDwvZGl2PgogICAgPGJyPgogICAgPGRpdiBjbGFzcz0iR1BEQjMyNENESUIg R1BEQjMyNENGSUIiPjxzcGFuPjxpbnB1dAogICAgICAgICAgaWQ9IlJvbGVQb3B1cFZpZXdfdHJl ZV9yb290NSIgdGFiaW5kZXg9Ii0xIgogICAgICAgICAgZGlzYWJsZWQ9ImRpc2FibGVkIiB0eXBl PSJjaGVja2JveCI+PC9zcGFuPjxzcGFuPkRpc2s8L3NwYW4+PC9kaXY+CiAgICA8ZGl2IHN0eWxl PSJwYWRkaW5nLWxlZnQ6IDE2cHg7IiBjbGFzcz0iR1BEQjMyNENBSUIiPgogICAgICA8ZGl2IG9u Y2xpY2s9IiIgc3R5bGU9InBhZGRpbmctbGVmdDogMTZweDtwb3NpdGlvbjpyZWxhdGl2ZTsiCiAg ICAgICAgY2xhc3M9IkdQREIzMjRDQUlCIEdQREIzMjRDQ0lCIj4KICAgICAgICA8ZGl2IGNsYXNz PSJHUERCMzI0Q0JJQiIgc3R5bGU9ImxlZnQ6IDBweDt3aWR0aDogMTVweDtoZWlnaHQ6CiAgICAg ICAgICAxNXB4O3Bvc2l0aW9uOmFic29sdXRlOyI+PGJyPgogICAgICAgIDwvZGl2PgogICAgICAg IDxkaXYgY2xhc3M9IkdQREIzMjRDRElCIEdQREIzMjRDRklCIj48c3Bhbj48aW5wdXQKICAgICAg ICAgICAgICBpZD0iUm9sZVBvcHVwVmlld190cmVlX3Jvb3Q1X25vZGUwIiB0YWJpbmRleD0iLTEi CiAgICAgICAgICAgICAgZGlzYWJsZWQ9ImRpc2FibGVkIiB0eXBlPSJjaGVja2JveCI+PC9zcGFu PjxzcGFuPlByb3Zpc2lvbmluZwogICAgICAgICAgICBPcGVyYXRpb25zPC9zcGFuPjwvZGl2Pgog ICAgICA8L2Rpdj4KICAgIDwvZGl2PgogICAgPGRpdiBhcmlhLWxldmVsPSIzIiBhcmlhLXBvc2lu c2V0PSIxIiBhcmlhLXNldHNpemU9IjYiCiAgICAgIHJvbGU9InRyZWVpdGVtIiBhcmlhLXNlbGVj dGVkPSJ0cnVlIj4KICAgICAgPGRpdiBzdHlsZT0icGFkZGluZy1sZWZ0OiAzMnB4OyIgY2xhc3M9 IkdQREIzMjRDQUlCIEdQREIzMjRDR0lCIj4KICAgICAgICA8ZGl2IG9uY2xpY2s9IiIgc3R5bGU9 InBhZGRpbmctbGVmdDogMTZweDtwb3NpdGlvbjpyZWxhdGl2ZTsiCiAgICAgICAgICBjbGFzcz0i R1BEQjMyNENBSUIgR1BEQjMyNENDSUIiPgogICAgICAgICAgPGRpdiBjbGFzcz0iR1BEQjMyNENE SUIiPjxzcGFuPjxpbnB1dAogICAgICAgICAgICAgICAgaWQ9IlJvbGVQb3B1cFZpZXdfdHJlZV9y b290NV9ub2RlMF9ub2RlMCIgdGFiaW5kZXg9Ii0xIgogICAgICAgICAgICAgICAgY2hlY2tlZD0i Y2hlY2tlZCIgZGlzYWJsZWQ9ImRpc2FibGVkIiB0eXBlPSJjaGVja2JveCI+PC9zcGFuPjxzcGFu PkNyZWF0ZTwvc3Bhbj48L2Rpdj4KICAgICAgICA8L2Rpdj4KICAgICAgPC9kaXY+CiAgICA8L2Rp dj4KICAgIDxicj4KICAgIEV2ZXJ5dGhpbmcgZWxzZSBpcyBkZXNlbGVjdGVkLjxicj4KICAgIDxi cj4KICAgIEtpbmQgcmVnYXJkcyw8YnI+CiAgICA8YnI+CiAgICBKb3JpY2sgQXN0cmVnbzxicj4K ICAgIE5ldGJ1bGFlPGJyPgogICAgPGJyPgogICAgPGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4 Ij5PbiAwNy8yMi8yMDE0IDEwOjM1IEFNLCBPdmVkIE91cmZhbGkKICAgICAgd3JvdGU6PGJyPgog ICAgPC9kaXY+CiAgICA8YmxvY2txdW90ZQogICAgICBjaXRlPSJtaWQ6MTA3NDM3NzU1OC4xMTQ4 NjYyNC4xNDA2MDE4MTIzMzU5LkphdmFNYWlsLnppbWJyYUByZWRoYXQuY29tIgogICAgICB0eXBl PSJjaXRlIj4KICAgICAgPHByZSB3cmFwPSIiPkhpCgpZb3UgZGlkbid0IHJlYWxseSBzcGVjaWZ5 IHdoYXQgeW91IHdvdWxkIGxpa2UgdG8gYWNjb21wbGlzaCwgYW5kIHdoYXQgcGVybWlzc2lvbnMg d2VyZSBncmFudGVkIGFuZCBvbiB3aGF0IG9iamVjdC4KSW4gZ2VuZXJhbCwgd2UgaGF2ZSB0d28g dHlwZXMgb2Ygcm9sZXM6IFVzZXIgYW5kIEFkbWluIHJvbGVzLgpJZiBhIHVzZXIgaGFzIGFueSBh ZG1pbiByb2xlIG9uIGFueSBvYmplY3QsIHRoZW4gaGUgY2FuIGxvZ2luIHRvIHRoZSBhZG1pbiBw b3J0YWwuClNvLCBhcyBsb25nIGFzIHlvdSBkb24ndCBhc3NpZ24gdGhlIHVzZXIgd2l0aCBhZG1p biByb2xlIGhlIHdpbGwgbm90IGJlIGFibGUgdG8gbG9naW4gdG8gdGhlIGFkbWluIHBvcnRhbC4K CkdpdmluZyBQb3dlclVzZXIgcm9sZSBvbiBhIERDIHdpbGwgYWxsb3cgdGhlIHVzZXIgdG8gY3Jl YXRlIFZNcyBhbmQgRGlza3MgdGhyb3VnaCB0aGUgdXNlciBwb3J0YWwuCklzIHRoYXQgd2hhdCB5 b3Ugd291bGQgbGlrZSB0byBhY2NvbXBsaXNoPwoKT3ZlZAoKLS0tLS0gT3JpZ2luYWwgTWVzc2Fn ZSAtLS0tLQo8L3ByZT4KICAgICAgPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+CiAgICAgICAgPHBy ZSB3cmFwPSIiPkZyb206ICJKb3JpY2sgQXN0cmVnbyIgPGEgY2xhc3M9Im1vei10eHQtbGluay1y ZmMyMzk2RSIgaHJlZj0ibWFpbHRvOmouYXN0cmVnb0BuZXRidWxhZS5ldSI+Jmx0O2ouYXN0cmVn b0BuZXRidWxhZS5ldSZndDs8L2E+ClRvOiA8YSBjbGFzcz0ibW96LXR4dC1saW5rLWFiYnJldmlh dGVkIiBocmVmPSJtYWlsdG86dXNlcnNAb3ZpcnQub3JnIj51c2Vyc0BvdmlydC5vcmc8L2E+ClNl bnQ6IFR1ZXNkYXksIEp1bHkgMjIsIDIwMTQgMTE6MzI6MTYgQU0KU3ViamVjdDogW292aXJ0LXVz ZXJzXSB1c2VyIHBlcm1pc3Npb25zCgpIaSwKCkluIG91ciAzLjQuMyBlbnZpcm9ubWVudCBJIHN0 YXJ0ZWQgYWRkaW5nIGV4dGVybmFsIHVzZXJzIChpdCBpcwpjb25uZWN0ZWQgdG8gYSBmcmVlaXBh IHNlcnZlcikgYW5kIEknbSBoYXZpbmcgc29tZSBwcm9ibGVtcyBzZXR0aW5nIHRoZQpjb3JyZWN0 IHBlcm1pc3Npb25zLgoKV2hlbiBJIGdpdmUgYWxsIHVzZXIgcm9sZXMgdG8gYSB1c2VyLCBJIGNh bm5vdCBjcmVhdGUgYSB2bSBhbmQgZ2V0IGFuCmVycm9yICJVc2VyIGlzIG5vdCBhdXRob3JpemVk IHRvIHBlcmZvcm0gdGhpcyBhY3Rpb24iLiBJIHRyaWVkIHNldHRpbmcKaXQgb24gdGhlIHN5c3Rl bSBsZXZlbCwgREMgbGV2ZWwgYW5kIGNsdXN0ZXIgbGV2ZWwuCgpJIG5lZWRlZCB0byBnaXZlIHRo aXMgdXNlciBhbiBhZG1pbmlzdHJhdG9yIHJvbGUgd2l0aCBvbmx5IGV4YWN0bHkgdGhlCnNhbWUg dm0gYW5kIGRpc2sgcGVybWlzc2lvbnMgKG5vdGhpbmcgZXh0cmEpIGFuZCB0aGluZ3Mgd29yayBv aywgYnV0IGhlCmNhbiBub3cgbG9naW4gdG8gdGhlIGFkbWluIHBvcnRhbC4gU28gSSBibG9ja2Vk IGl0IHdpdGggYSAuaHRhY2Nlc3MKd2hpY2ggaXMgbm90IHRoZSBwcmV0dGllc3Qgc29sdXRpb24u CgpBbSBJIGRvaW5nIHRoaW5ncyB3cm9uZz8KCkFsc28gdGhlIHVzZXIgZGlzYXBwZWFyZWQgZnJv bSB0aGUgIlN5c3RlbSBwZXJtaXNzaW9ucyIgb3ZlcnZpZXcgYnV0IGNhbgpzdGlsbCBsb2dpbiwg d2hpY2ggaXMgYSBiaXQgd2VpcmQuCgpLaW5kIHJlZ2FyZHMsCgpKb3JpY2sgQXN0cmVnbwpOZXRi dWxhZQoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KVXNl cnMgbWFpbGluZyBsaXN0CjxhIGNsYXNzPSJtb3otdHh0LWxpbmstYWJicmV2aWF0ZWQiIGhyZWY9 Im1haWx0bzpVc2Vyc0BvdmlydC5vcmciPlVzZXJzQG92aXJ0Lm9yZzwvYT4KPGEgY2xhc3M9Im1v ei10eHQtbGluay1mcmVldGV4dCIgaHJlZj0iaHR0cDovL2xpc3RzLm92aXJ0Lm9yZy9tYWlsbWFu L2xpc3RpbmZvL3VzZXJzIj5odHRwOi8vbGlzdHMub3ZpcnQub3JnL21haWxtYW4vbGlzdGluZm8v dXNlcnM8L2E+Cgo8L3ByZT4KICAgICAgPC9ibG9ja3F1b3RlPgogICAgPC9ibG9ja3F1b3RlPgog ICAgPGJyPgogIDwvYm9keT4KPC9odG1sPgoKLS0tLS0tLS0tLS0tLS0wMjA4MDIwMjA1MDAwODA4 MDEwNDAwMDItLQoK --===============0559603462766811603==--