March 2016 - Users - oVirt List Archives

Losing IP config on host
by Rein van Weerden 04 Apr '16

04 Apr '16

Hi All, When creating a new host i lose the ip configuration on the host while creating the interfaces. Please advice. Using: oVirt engine 3.6.3.4-1 on CentOS 7 oVirt engine SDK python 3.6.3.0 ->Rein.

2 2

virt-viewer shows no bootoption
by Taste-Of-IT 03 Apr '16

03 Apr '16

Hello, i will install my first vm with centos and setup vnc and spice with bootoption and centos as iso in dvd drive. i downloaded virt-viewer 3.1 for my windows10. if i start the vnc console which opened console.vv and than opened the virt-viewer i see only message of bios version and no boot medium as information. if i reboot the screen doesnt changed and i also have no option from the activated bootmenue? Can anyone help?

3 4

Several VM's stuck in Migration
by Mark Steele 01 Apr '16

01 Apr '16

Hello, We recently had our storage array hang. We were able to get the disk array back online, however several of our VM's attempted to migrate from one Host to another. Now that the storage is online, several of the VM's still indicate they are in a state of migration and I cannot manage them from withing the ovirt engine web administration gui. Most of the VM's are actually running properly and I can access them either via ssh or RDP (depending on the OS). I have attempted to clear the migration status with the following: - service ovirt-engine restart (on the ovirt-engine vm) - reboot ovirt-engine vm - PGPASSWORD=############### ./unlock_entity.sh -t vm vm-name - restart the vm from within the vm additionally - i went on the HV of one of the VM's and did: vdsClient -s 0 destroy vm_guid unfortunately, that removed all traces of the vm from that HV and it was not on any of the other three HV's - although ovirt-engine still shows it and reports it as migrating. I'd like to clear the migrating status of the affected VM's and figure out how to recover the missing one. Any help would be appreciated. I am not the person who originally setup the ovirt installation, so I am not sure where to go to pull logs. Thank you for your assistance. *** *Mark Steele* CIO / VP Technical Operations | TelVue Corporation TelVue - We Share Your Vision 800.885.8886 x128 | msteele(a)telvue.com | http://www.telvue.com twitter: http://twitter.com/telvue | facebook: https://www.facebook.com/telvue <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> This email has been sent from a virus-free computer protected by Avast. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> <#DDB4FAA8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

3 3

libvirt failed to read spice key
by Fabrice Bacchella 01 Apr '16

01 Apr '16

I' m running on a brand new Centos 7.2 an up to date ovirt 3.6.3.4. The host is new too and dedicated to ovirt. When I try to launch a vm, I get : Thread-9407::ERROR::2016-03-24 09:16:18,301::vm::759::virt.vm::(_startUnderlyingVm) vmId=`a32e1043-a5a5-4e4c-8436-f7b7a4ff644c`::The vm start process failed Traceback (most recent call last): File "/usr/share/vdsm/virt/vm.py", line 703, in _startUnderlyingVm self._run() File "/usr/share/vdsm/virt/vm.py", line 1941, in _run self._connection.createXML(domxml, flags), File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 124, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 1313, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python2.7/site-packages/libvirt.py", line 3611, in createXML if ret is None:raise libvirtError('virDomainCreateXML() failed', conn=self) libvirtError: internal error: process exited while connecting to monitor: ((null):23672): Spice-Warning **: reds.c:3311:reds_init_ssl: Could not use private key file 2016-03-24T08:16:18.005359Z qemu-kvm: failed to initialize spice server /var/log/libvirt/qemu/test.log says 2016-03-24 08:55:48.214+0000: starting up libvirt version: 1.2.17, package: 13.el7_2.3 (CentOS BuildSystem <http://bugs.centos.org>, 2016-02-16-17:06:00, worker1.bsys.centos.org) qemu version: 2.3.0 (qemu-kvm-ev-2.3.0-31.el7_2.7.1) LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin QEMU_AUDIO_DRV=spice /usr/libexec/qemu-kvm -name test -S -machine pc-i440fx-rhel7.2.0,accel=kvm,usb=off -cpu Haswell-noTSX -m size=2097152k,slots=16,maxmem=4294967296k -realtime mlock=off -smp 2,maxcpus=16,sockets=16,cores=1,threads=1 -numa node,nodeid=0,cpus=0-1,mem=2048 -uuid a32e1043-a5a5-4e4c-8436-f7b7a4ff644c -smbios type=1,manufacturer=oVirt,product=oVirt Node,version=7-2.1511.el7.centos.2.10,serial=30373237-3132-5A43-3235-343233333937,uuid=a32e1043-a5a5-4e4c-8436-f7b7a4ff644c -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/domain-test/monitor.sock,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=2016-03-24T08:55:46,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-hpet -no-shutdown -boot menu=on,strict=on -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-scsi-pci,id=scsi0,bus=pci.0,addr=0x4 -device virtio-serial-pci,id=virtio-serial0,max_ports=16,bus=pci.0,addr=0x5 -drive if=none,id=drive-ide0-1-0,readonly=on,format=raw,serial= -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=/rhev/data-center/00000001-0001-0001-0001-00000000022a/85d19e93-ee08-41bb-94c9-56adf17287b4/images/da6f49dd-8662-418b-a859-3523b4360c0e/930bbe74-7470-4b22-b096-fdb03276262d,if=none,id=drive-scsi0-0-0-0,format=raw,serial=da6f49dd-8662-418b-a859-3523b4360c0e,cache=none,werror=stop,rerror=stop,aio=native,iops=300 -device scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0,bootindex=1 -netdev tap,fd=27,id=hostnet0,vhost=on,vhostfd=28 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=00:1a:4a:16:01:51,bus=pci.0,addr=0x3,bootindex=2 -chardev socket,id=charserial0,path=/var/run/ovirt-vmconsole-console/a32e1043-a5a5-4e4c-8436-f7b7a4ff644c.sock,server,nowait -device isa-serial,chardev=charserial0,id=serial0 -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channels/a32e1043-a5a5-4e4c-8436-f7b7a4ff644c.com.redhat.rhevm.vdsm,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.rhevm.vdsm -chardev socket,id=charchannel1,path=/var/lib/libvirt/qemu/channels/a32e1043-a5a5-4e4c-8436-f7b7a4ff644c.org.qemu.guest_agent.0,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_agent.0 -chardev spicevmc,id=charchannel2,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=3,chardev=charchannel2,id=channel2,name=com.redhat.spice.0 -spice port=5900,tls-port=5901,addr=0,x509-dir=/etc/pki/vdsm/libvirt-spice,seamless-migration=on -device qxl-vga,id=video0,ram_size=67108864,vram_size=8388608,vgamem_mb=16,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x6 -msg timestamp=on ((null):29166): Spice-Warning **: reds.c:3311:reds_init_ssl: Could not use private key file 2016-03-24T08:55:48.329252Z qemu-kvm: failed to initialize spice server 2016-03-24 08:55:48.479+0000: shutting down and indeed, when I try to strace libvirt : open("/etc/pki/vdsm/libvirt-spice/server-key.pem", O_RDONLY) = -1 EACCES (Permission denied) chmod a+r /etc/pki/vdsm/libvirt-spice/server-key.pem solved the problem, but it's obviously not a solution.

3 3

oVirt Browser Not Optimal
by Andrew Pease 01 Apr '16

01 Apr '16

I know this has been mentioned several times, but I'm unable to find a solution. On my Mac, I've tried Firefox, Chrome, Safari On Linux, I've tried Iceweasel and Firefox On Windows, I've tried Edge All of these state that the browser is not optimal and things either never render, or in the case of FF, render after about 2-3 minutes per click. Beyond the occasional break in speed, the browsers are completely inoperational. I'm at the end of the "oVirt Installation" in the oVirt Quick Start Guide ( https://www.ovirt.org/documentation/quickstart/quickstart-guide/) There's a lot of mention around Spice, but I think that's something further down the road after I can interact with the Engine portal. Any help would be appreciated on figuring out what secret handshake is needed to get a usable browser oVirt Engine: Version 3.6.3.4-1.el7.centos CentOS 7.2 Thanks in advance.

2 2

auto-remove snapshot created in live storage migration?
by Alastair Neil 01 Apr '16

01 Apr '16

Is it planned to allow the snapshots that are created during a live storage migration to be automatically deleted once the migration has completed? It is easy to forget about them and end up with large snapshots. -Alastair

2 2

Spice lags using a proxy / Spice foldersharing in oVirt / spice driver for win10
by Marco Bormann 01 Apr '16

01 Apr '16

Good evening everyone, I am Marco from Germany and I currently setup a oVirt environment in our data center. The current environment are 1 dedicated engine and 6 oVirt Hosts. I have three questions which I didnt get answered very well during my research in the WWW during the last days. So it would be very helpfull if someone of you can support me. We are using the cluster for normal VM usage and for VDI desktop virtualization with the Spice protocol. 1. Question We are using a spice proxy because we have some VMs reachable via the Engine and Spice external. Since we are using the proxy some users are observing some disconnects of the USB redirection and sometimes mouse and keyboard are not working in the session so that we have to restart the console. Are there some of you also using a proxy and may had the same behaviour and a workaround or fix for this? 2. Question We want to use the Spice foldersharing function but it is always greyed and not usable for us. I dont find anything in the web about the function in the Remote viewer. What is necessary to use it? (Linux and Windows clients) 3. Question The last question is about future usage of the cluster for VMs running Windows10 (and other microsoft distributions of this generation like Server2012 etc). Is there a way getting the spice video drivers working with this operating systems? The official statement I always read is that there is no official driver at the moment available. thanks a lot and best wishes from Cologne in Germany Marco

2 1

Problems With VMWare Import
by Charles Tassell 01 Apr '16

01 Apr '16

Hi Everyone, This doesn't seem to be a bug in oVirt so much as in the libvirt/virt-v2v tool it uses for importing, but I figured someone here might have run into this issue before. I'm trying to import some VMs from my VMWare cluster and it's failing with a "file not found" when trying to download the disk images. I have files in the datastore like: systest-55-000001-delta.vmdk 4G systest-55-000001.vmdk 1K systest-55-Snapshot1.vmsn 4G systest-55-flat.vmdk 40G systest-55.vmdk 1K ... bunch more small .vm?? files For some reason virt-v2v is trying to download a file called systest-55-000001-flat.vmdk which doesn't exist. I'm assuming this has something to do with the snapshots stored in the folder... Does anyone know a way to deal with that? Can I just delete the snapshots or is that going to delete data stored on the VM since the last snapshot? I'm using virt-v2v 1.28.1 if that makes a difference.

4 4

Re: [ovirt-users] User permission error in add new disk using API
by Juan Hernández 31 Mar '16

31 Mar '16

On 03/31/2016 07:00 AM, Vishal Panchal wrote: > I send the following request: > > {"name":"vishaltestdisk","storage_domains":{"storage_domain":[{"name":"s1eu"}]},"provisioned_size":"512000000","size":"512000000","interface":"virtio","format":"cow","sparse":true,"bootable":true} > That request is syntactically correct. But as explained by Ondra Machacek there is a bug that makes this fail: assign DiskProfileUser role to Everyone group to newly added storagedomain's profile https://bugzilla.redhat.com/1209505 That can affect you if you are trying to perform this operation with an user that doesn't have the permission. Are you? Or are you using the adminstrator? Ondra, do you know if there is a workaround for this? Can the permission be added manually? How? > > > On Wed, Mar 30, 2016 at 8:04 PM, Juan Hernández <jhernand(a)redhat.com > <mailto:jhernand@redhat.com>> wrote: > > On 03/30/2016 01:31 PM, Vishal Panchal wrote: > > Hello, > > > > I got following error during add new disk using API but on other side > > from admin panel I can create new disk. > > > > *Error :* > > Cannot add Virtual Machine Disk. The user doesn't have permissions to > > attach Disk Profile to the Disk.* > > * > > What version of the engine? How are you creating the disk? Can you share > the request that you are sending to the server? > -- Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta 3ºD, 28016 Madrid, Spain Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.

2 1

Reclaim disk space of thin disks
by Grundmann, Christian 31 Mar '16

31 Mar '16

------=_NextPart_000_0014_01D18A63.37CCD060 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0015_01D18A63.37CCD060" ------=_NextPart_001_0015_01D18A63.37CCD060 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi, is there a way to "shrink" a thin disk image to reclaim deleted space like using virt-sparsify? Or can it be done by making a snapshot and clone the VM to a new one? Thanks a lot Christian ------=_NextPart_001_0015_01D18A63.37CCD060 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META = HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 = (filtered medium)"><style></style></head><body lang=3DDE-AT = link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1>Hi,<o:p></o:p>is there a way to = „shrink“ a thin disk image to reclaim deleted space like = using virt-sparsify?<o:p></o:p>Or can it be done by making a snapshot and clone the VM to = a new one?<o:p></o:p><o:p> </o:p>Thanks a lot<o:p></o:p>Christian<o:p></o:p></div></body></html> ------=_NextPart_001_0015_01D18A63.37CCD060-- ------=_NextPart_000_0014_01D18A63.37CCD060 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIISkjCCBR0w ggQFoAMCAQICECuNLnuZVUx6dsyG0RuZk70wDQYJKoZIhvcNAQELBQAwdTELMAkGA1UEBhMCSUwx FjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTAeFw0xNjAyMDkx NDAyMDNaFw0xNzAyMDkxNDAyMDNaMFwxKTAnBgNVBAMMIGNocmlzdGlhbi5ncnVuZG1hbm5AZmFi YXNvZnQuY29tMS8wLQYJKoZIhvcNAQkBFiBjaHJpc3RpYW4uZ3J1bmRtYW5uQGZhYmFzb2Z0LmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMSXN+Y9o0GeYdHtPJMREJ8RKlJKPKv+ 9IQGXFUkCmo3e2TdExbAVeckzKSHLyKQp7dUDNkTbH3fIEAsrl4MHasJ885dI9vwoF/j8D43SmvK e2CfG5C5CG5mHoilx8OfKeun0uRoQ3HYz3rg8Bw7xWZ7OcR3FKMNHkQj3AAcs7SXsgTQ5zMm5siI QnKQxeKt4CP9+3y598FQka7l+HggIvM58ufaGBLbQjlC1qNjSObxMQbtSBlVFxDr3Lbol5N560iQ zvNn/0zti1H6nRqZwfMtHFe8uLAIn2V09WC8m8qL7gN5GpfthVHRUSXta3FnFu0Ux3dXG+CdqkFR g+MQZ2kCAwEAAaOCAcAwggG8MAsGA1UdDwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYB BQUHAwQwCQYDVR0TBAIwADAdBgNVHQ4EFgQUuxqfYToDcp+2hlegIBv/4UOIAzEwHwYDVR0jBBgw FoAUJIFsOWG+SQ+PtxtGK8kotSdIbWgwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5zdGFydHNzbC5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9haWEuc3RhcnRzc2wuY29t L2NlcnRzL3NjYS5jbGllbnQxLmNydDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLnN0YXJ0 c3NsLmNvbS9zY2EtY2xpZW50MS5jcmwwKwYDVR0RBCQwIoEgY2hyaXN0aWFuLmdydW5kbWFubkBm YWJhc29mdC5jb20wIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMEYGA1UdIAQ/ MD0wOwYLKwYBBAGBtTcBAgQwLDAqBggrBgEFBQcCARYeaHR0cDovL3d3dy5zdGFydHNzbC5jb20v cG9saWN5MA0GCSqGSIb3DQEBCwUAA4IBAQALbgNP3IjDHG+7Gt+grj1LpmAfqe47LtP4p8Qze3VU qowcg+pKhdFMyLpvEMdDf873N7RHSQG927zSkN3FikHKiAbZGS0c3wdZvLuKLgqRDVoG/5rgeU45 Ai0hjNwOodbAbUWfl2frWFVOAQdWThjUSulBL3go9J1Ws8VT+VxRFEcsc3J8OtuNfzdG5DHejt5l PBZ91RkJN487WSG5scamKEG0bOHrBvClOtmhNs8GZt5Gjk6dqmYZ8MfVW0ZxVBnNrbwZGIlP0Z/q +MplyxQeO+6O7uH1SArQ2smTaIFWcs24d/JMLGLO1sw6ITRjMyxJm1HYbtf+01TRdiW4UV+kMIIF 4jCCA8qgAwIBAgIQa6eKfQrXiNZRCvlZ5Oe04TANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJJ TDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkw HhcNMTUxMjE2MDEwMDA1WhcNMzAxMjE2MDEwMDA1WjB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMN U3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkx IzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvX3a98OifYP2W4L921tfrh4bdcC1Ga+YJKy7V3nYNewJHnzMlBsK0Hb8Dm4W o3FZpylcYa1MJGT10QMGWaLER3xCIuRR+8eklf/EqeZWRLojJ7zBRtjMywPOCelrOU+DX12dKp+E z4J6919rz1UudTO1GvZyCYJ/I7062uHsskM8b7gPxmcCoO1UHwwpgkvpCArJWGFoFzjLdsZbErJc S3HtAhlkbE/BKTMrdYg35Uo12SLBO5tbk8h2imbKTC8iMs+pskrvI/AVlh6QoTTXk6xboVX6zgMg zxSVVLymQiygYYm0y5aMsvi2raFhC643SOGvErWWPPnSEfbeAD1xswIDAQABo4IBZDCCAWAwDgYD VR0PAQH/BAQDAgEGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDASBgNVHRMBAf8ECDAG AQH/AgEAMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3Nmc2NhLmNy bDBmBggrBgEFBQcBAQRaMFgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTAw BggrBgEFBQcwAoYkaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvY2EuY3J0MB0GA1UdDgQW BBQkgWw5Yb5JD4+3G0YrySi1J0htaDAfBgNVHSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jA/ BgNVHSAEODA2MDQGBFUdIAAwLDAqBggrBgEFBQcCARYeaHR0cDovL3d3dy5zdGFydHNzbC5jb20v cG9saWN5MA0GCSqGSIb3DQEBCwUAA4ICAQCL4/eH7AGLhK0PAQJbnOEjJyMEvTTwcAJuUh/bodjQ l06u4putYOxdSyIjSP/sKt+31LmjG8+IO1WqykE4H/Lm7NKezWVnCHuwb3ptgFmlwbMbGkU2MOZB twzfKXdYUhFLhaE2uw5jXhXvLYitQay962wP5uPI6eAIhV4L8aaya1u4s7MnrTq0Rz25FuGNO79v THYWj797tSRC8rM16js4yGKOLFpQvIg0F8IElv57b1stp+C7omqM5Qn15dePbSnqr8Jb65WtmJJb nv6rlqfY/aLuE/zmNAlzLmPgfMDStKIXdg+EoYBZTEo8wBUaBxihfNbJ069ndQOxMNNqBelEMgpA tmjTbCuXFjqIwWq+XOx6ZV/Wh2FAmaLsSHlNvEjjSQMZwE4EeHCdo66ZmEs/5JYlCeOkulKVQ6P3 m5/XOj2jP17Q2AgmjP+11+sHN7PvrG0OwrQp9QMe3X+rn0G8MjtFfqBWvR9CgLIxzM3MJNxFdgdj S2rYnShP5uxvqwfZvhZVYCIkqdJhpYON0DvSodfiar0wiM79mySZJjzC0CTbiisBzS/BeBhqeo2w Ffli/iw3hn1XKvAx0ty6w/scmBF0AYqmRHYj1TjMSw0lAl7AztLglqWjUPI+sukvadMRPxmtKXlS 2nVR4an/Z16imsZ69+fFYH68c1CK7zmjozCCB4cwggVvoAMCAQICAS0wDQYJKoZIhvcNAQELBQAw fTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBE aWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MB4XDTA2MDkxNzE5NDYzN1oXDTM2MDkxNzE5NDYzNlowfTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRp ZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwYjbCbxsRnx4n5V7tTOQ8nJi1sE2ICIk Xs7pd/JDCqIGZKTMjjb4OOYj8G5tsTzdcqOFHKHTPbQzK9Mvr/7qsEFZZ7bEBn0KnnSF1nlMgDd6 3zkFUln39BtGQ6TShYXSw3HzdWI0uiyKfx6P7u000BHHls1SPboz1t1N3gs7SkufwiYv+rUWHHI1 d8o8XebK4SaLGjZ2XAHbdBQl/u21oIgP3XjKLR8HlzABLXJ5+kbWEyqouaarg0kd5fLv3eQBjhgK j2NTFoViqQ4ZOsy1ZqbCa3QH5Cvhdj60bdj2ROFzYh87xL6gU1YlbFEJ96qryr92/W2b853bvz1m vAxWqq+YSJU6S9+nWFDZOHWpW+pDDAL/mevobE1wWyllnN2qXcyvATHsDOvSjejqnHvmbvcnZgwa SNduQuM/3iE+e+ENcPtjqqhsGlS0XCV6yaLJixamuyx+F14FTVhuEh0B7hIQDcYyfxj//PT6zW6R 6DZJvhpIaYvClk0aErJpF8EKkNb6eSJIv7p7afhwx/p6N9jYDdJ2T1f/kLfjkdLd78Jgt2c63f6q nPDUi39yIs7Gn5e2+K+KoBCo2fsYxra1XFI8ibYZKnMBCg8DsxJg8novgdujbv8mMJf1i92JV7at PbOvK8W3dgLwpdYrmoYUKnL24zOMXQlLE9+7jHQTUksCAwEAAaOCAhAwggIMMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBROC+8apEBbpRdphzDKNGhD0EGu8jAfBgNV HSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jCCAVoGA1UdIASCAVEwggFNMIIBSQYLKwYBBAGB tTcBAQEwggE4MC4GCCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRm MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMIHP BggrBgEFBQcCAjCBwjAnFiBTdGFydCBDb21tZXJjaWFsIChTdGFydENvbSkgTHRkLjADAgEBGoGW TGltaXRlZCBMaWFiaWxpdHksIHJlYWQgdGhlIHNlY3Rpb24gKkxlZ2FsIExpbWl0YXRpb25zKiBv ZiB0aGUgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUG9saWN5IGF2YWlsYWJsZSBh dCBodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMBEGCWCGSAGG+EIBAQQEAwIABzA4 BglghkgBhvhCAQ0EKxYpU3RhcnRDb20gRnJlZSBTU0wgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkw DQYJKoZIhvcNAQELBQADggIBAI6P59yUeXzxhX+fSW9ryl37jP4ExcFi0X1CirxTt5QDZjA/secK p1AgVSV/dnoUDesEDkDmPtiIqwcng6l1pjdzx/1L0k2tF0DIRr47f1H8w7YFMdzNhSJOcbfycV6w Gsa6k4t4kkqF+HgPg/4vrSz35KS7LdDnDTq4Ps72ePauRyTKozU2zsfGh5ja7Pvpss4nm4jDBKH2 C1lor8nbEA9N9mRjXKUSb5Kyk5THiBcOk7Z+YouQf6tOn/zjdRRPKjLfWw3g9XuTDauhz4fhpQRF 6DwSpQnFsNG3U/NgFLqFaWohfB91YRcgF3tsO0EpXOGsWtHNjJvrYB0Z7PflsNr5eRilRT9JQ1fS 3STVLKP9kY0nteXrFAaaTHshuzqtMAYYwNjBayx/WVxdkbFwIlfrimtIStUPKezGQMAviExoARd3 9CQZT7364bIgIUvdGtgpfaq43lTsIVWAbB71MMijEOWy5ioUMcOFLYyYsYZaT4lZLbnH9xzIin/A nQVK5kJPYqNtKaQfhavb5YHIrSo9TF1bhCZxxIVecSTKpRts2GHTGuBU2866qTK1IvZzQQlduBdd Dg+ZkNZH2m8KOmIoFGeC2fHQgFmbyzHYmw+Md061aIrybPYkDi1scMVz0d4U0HGPttN7AvbjuNQJ bmuedYQ55n8lpfJIAMCkAdo/MYID5DCCA+ACAQEwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQK40ue5lVTHp2zIbRG5mTvTAJ BgUrDgMCGgUAoIICLzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0x NjAzMzAwNzA0NTFaMCMGCSqGSIb3DQEJBDEWBBSE7Hhe7qx/XOgH0n9cFQJyqAT1GTCBkwYJKoZI hvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZI AWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQME AgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATCBmgYJKwYBBAGCNxAEMYGMMIGJMHUxCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBDZXJ0aWZp Y2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGllbnQgQ0ECECuN LnuZVUx6dsyG0RuZk70wgZwGCyqGSIb3DQEJEAILMYGMoIGJMHUxCzAJBgNVBAYTAklMMRYwFAYD VQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGllbnQgQ0ECECuNLnuZVUx6dsyG0RuZ k70wDQYJKoZIhvcNAQEBBQAEggEARQbmivZYqW8JUGkSiINi9McHI6r8X8Ude/KsmI6KabXNnDgr EQDtUbO3hlhRnTz4lWnUM0pkW1eeYQvgzQ/crJp+Cy9JjHJsm4Wrfiz4JCsPi9nmMUoRozmUYPjV JG1kSMY/BXNhxAK5eQCxMjotY+tgqMljN69O9ugCiLG6S/VkZ6/w5SMNqnHUDqtRiKd8Q64Pb4d9 6kjhhKYgu1bdpha+o23nU7m7cAXtRzLaljeZZtWkRdxo3u7BLuJtn+rIXSEMAb4X5LpC7aDG5WGg gDP21oDeVJ0j4MsDar2FFKWyA6ELWXPB8aB6v7Cbs7URGF9Xf4LyeprIsGCd0ArVhQAAAAAAAA== ------=_NextPart_000_0014_01D18A63.37CCD060--

2 7