From tom.taylor.stds@gmail.com Fri Jul 6 06:54:18 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2D1121F86D8 for ; Fri, 6 Jul 2012 06:54:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.527 X-Spam-Level: X-Spam-Status: No, score=-3.527 tagged_above=-999 required=5 tests=[AWL=0.072, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vAmiYwRMd+qZ for ; Fri, 6 Jul 2012 06:54:17 -0700 (PDT) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id 8542B21F86F8 for ; Fri, 6 Jul 2012 06:54:16 -0700 (PDT) Received: by bkty7 with SMTP id y7so1295884bkt.31 for ; Fri, 06 Jul 2012 06:54:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding:x-antivirus :x-antivirus-status; bh=I6E77DeAYG1YxucWYD6NbkN8VudsJHwahVHfMO8/Jo4=; b=yQROesCNiXr/Ia62rrmjrX3tG5F64BtTu+eikgPqJ1DKImPpen/Y6A/k9osQcgKucS igYS58vRn4T4o1/WSIyfewKDcQ2L3kNxdLesedblWZwdEV0TV6GBGwFiI9xOwDW9DlpN ECauP0UDXo4XssKPtPCPvLKwal1vwi/aXjBQV1Rpygoxn9eFCrFnPfvLsXUJQhWUiEeu 0rGD1PjTnUCD7nPxZ1RF0/UMsI8C5AmXOKizr/P/21AN/npsoo7guN1zGl/B6HJkccq/ FktHrBaGGUrxZX31c4YmNgOQrpBha95LUTMV0BYK1hrNYKLiI0ZvfjyZPzyYOlRcRQAA tq6w== Received: by 10.205.118.138 with SMTP id fq10mr9682901bkc.58.1341582872113; Fri, 06 Jul 2012 06:54:32 -0700 (PDT) Received: from [127.0.0.1] (dsl-173-206-67-81.tor.primus.ca. [173.206.67.81]) by mx.google.com with ESMTPS id b18sm8115163bkx.11.2012.07.06.06.54.30 (version=SSLv3 cipher=OTHER); Fri, 06 Jul 2012 06:54:31 -0700 (PDT) Message-ID: <4FF6EE15.60001@gmail.com> Date: Fri, 06 Jul 2012 09:54:29 -0400 From: Tom Taylor User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: "dime@ietf.org" , jouni korhonen , "lionel.morand@orange-ftgroup.com>" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 120706-0, 06/07/2012), Outbound message X-Antivirus-Status: Clean Subject: [Dime] Proposed updates to draft-ietf-dime-realm-based-redirect-04 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Jul 2012 13:54:18 -0000 I would like to make the following changes to draft-ietf-dime-realm-based-redirect-04, which needs refreshing in any event: 1) Add the use case Ruibing Hao recently described into the first section. 2) Add text describing what a client does when presented with an error code other than the DIAMETER_REALM_REDIRECT_INDICATION Result-Code from a realm it didn't send a request to. Jouni pointed out that this could happen. 3) Make redirection a function of proxies rather than redirect agents, because the behaviour is application-specific. Avi Lior made this particular point, and I feel more strongly than ever that the point is valid. I asked whether I could do this last January, but no one responded. Now I'm going to go the other way: silence means consent. Please comment if you have objections. I will act to meet the expiry deadline of July 13 (next Friday). Tom Taylor From bclaise@cisco.com Tue Jul 10 07:46:31 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72BBD11E8088 for ; Tue, 10 Jul 2012 07:46:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.381 X-Spam-Level: X-Spam-Status: No, score=-10.381 tagged_above=-999 required=5 tests=[AWL=0.217, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zLKMATzuECNe for ; Tue, 10 Jul 2012 07:46:30 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 14B0411E8085 for ; Tue, 10 Jul 2012 07:46:29 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6AEkufb004270; Tue, 10 Jul 2012 16:46:56 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6AEktj7028181; Tue, 10 Jul 2012 16:46:55 +0200 (CEST) Message-ID: <4FFC405F.9030508@cisco.com> Date: Tue, 10 Jul 2012 16:46:55 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: dime mailing list Content-Type: multipart/alternative; boundary="------------060600010701080301030404" Subject: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Jul 2012 14:46:31 -0000 This is a multi-part message in MIME format. --------------060600010701080301030404 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Dear all, Glen, Please find below the AD review of draft-ietf-dime-rfc4005bis-09.txt The document is in a good enough shape to be sent to IETF LC. Please consider my comments together with the other IETF LC comments. Glen, let me know if you plan on submitting a quick revision soon, or if I should send THIS version to the IETF LC (which might lead to redundant comment) - Some idnits http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt Miscellaneous warnings: ---------------------------------------------------------------------------- == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but does not include the phrase in its RFC 2119 key words list. Checking references for intended status: Proposed Standard ---------------------------------------------------------------------------- == Missing Reference: 'BASE' is mentioned on line 219, but not defined I understand that this is a quote from RFC4005. To avoid the source of confusion, here is a proposal OLD: However, the presence of an instance of the Acct-Application-Id AVP was required in RFC 4005, as well: The ACR message [BASE] is sent by the NAS to report its session information to a target server downstream. Either of Acct-Application-Id or Vendor-Specific-Application-Id AVPs MUST be present. If the Vendor-Specific-Application-Id grouped AVP is present, it must have an Acct-Application-Id inside. NEW: However, the presence of an instance of the Acct-Application-Id AVP was required in RFC 4005, which quotes: "The ACR message [BASE] is sent by the NAS to report its session information to a target server downstream. Either of Acct-Application-Id or Vendor-Specific-Application-Id AVPs MUST be present. If the Vendor-Specific-Application-Id grouped AVP is present, it must have an Acct-Application-Id inside." - One small improvement OLD: o The accounting model to be used is now specified. NEW o The accounting model to be used is now specified. See section 1.6 - Expand on the first ASA occurrence - Add an point after [I-D.ietf-dime-rfc3588bis] 3.1. AA-Request (AAR) Command The AA-Request (AAR), which is indicated by setting the Command-Code field to 265 and the 'R' bit in the Command Flags field, is used to request authentication and/or authorization for a given NAS user. The type of request is identified through the Auth-Request-Type AVP [I-D.ietf-dime-rfc3588bis] The recommended value for most situations is AUTHORIZE_AUTHENTICATE. - I could not find the meaning of * in, for example, [ CHAP-Auth ] [ CHAP-Challenge ] * [ Framed-Compression ] [ Framed-Interface-Id ] [ Framed-IP-Address ] * [ Framed-IPv6-Prefix ] [ Framed-IP-Netmask ] [ Framed-MTU ] [ Framed-Protocol ] [ ARAP-Password ] [ ARAP-Security ] * [ ARAP-Security-Data ] * [ Login-IP-Host ] * [ Login-IPv6-Host ] [ Login-LAT-Group ] [ Login-LAT-Node ] [ Login-LAT-Port ] [ Login-LAT-Service ] * [ Tunneling ] * [ Proxy-Info ] * [ Route-Record ] * [ AVP ] - 3.7. Abort-Session-Request (ASR) Command The Abort-Session-Request (ASR) message [I-D.ietf-dime-rfc3588bis] may be sent by any server to the NAS providing session service, to request that the session identified by the Session-Id be stopped. By "any Diameter server"? like in section 3.3 btw. - IANA Considerations Do we need to change all the "4005" entries in http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml into "4005bis"? Or to be more correct, the new RFC id for 4005bis? - OLD [RADIUSTypes] IANA, "IANA Radius Attribute Values Registry", . NEW: [RADIUSTypes] IANA, "IANA Radius Attribute Values Registry", . ALTERNATE PROPOSAL [RADIUSTypes] IANA, "IANA Radius Attribute Values Registry", . Regards, Benoit. --------------060600010701080301030404 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Dear all, Glen,

Please find below the AD review of draft-ietf-dime-rfc4005bis-09.txt

The document is in a good enough shape to be sent to IETF LC.
Please consider my comments together with the other IETF LC comments.

Glen, let me know if you plan on submitting a quick revision soon, or if I should send THIS version to the IETF LC (which might lead to redundant comment)


- Some idnits
http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt
  Miscellaneous warnings:
  ----------------------------------------------------------------------------

  == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but
     does not include the phrase in its RFC 2119 key words list.


  Checking references for intended status: Proposed Standard
  ----------------------------------------------------------------------------

  == Missing Reference: 'BASE' is mentioned on line 219, but not defined
I understand that this is a quote from RFC4005. To avoid the source of confusion, here is a proposal

OLD:
      However, the presence of an
      instance of the Acct-Application-Id AVP was required in RFC 4005,
      as well:

         The ACR message [BASE] is sent by the NAS to report its session
         information to a target server downstream.

         Either of Acct-Application-Id or Vendor-Specific-Application-Id
         AVPs MUST be present.  If the Vendor-Specific-Application-Id
         grouped AVP is present, it must have an Acct-Application-Id
         inside.
NEW:
      However, the presence of an
      instance of the Acct-Application-Id AVP was required in RFC 4005,
      which quotes:

         "The ACR message [BASE] is sent by the NAS to report its session
         information to a target server downstream.

         Either of Acct-Application-Id or Vendor-Specific-Application-Id
         AVPs MUST be present.  If the Vendor-Specific-Application-Id
         grouped AVP is present, it must have an Acct-Application-Id
         inside."

- One small improvement
OLD:
   o  The accounting model to be used is now specified.

NEW
   o  The accounting model to be used is now specified. See section 1.6

- Expand on the first ASA occurrence

- Add an point after [I-D.ietf-dime-rfc3588bis] 

3.1.  AA-Request (AAR) Command

   The AA-Request (AAR), which is indicated by setting the Command-Code
   field to 265 and the 'R' bit in the Command Flags field, is used to
   request authentication and/or authorization for a given NAS user.
   The type of request is identified through the Auth-Request-Type AVP
   [I-D.ietf-dime-rfc3588bis] The recommended value for most situations
   is AUTHORIZE_AUTHENTICATE.
- I could not find the meaning of * in, for example,

                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]

- 3.7.  Abort-Session-Request (ASR) Command

   The Abort-Session-Request (ASR) message [I-D.ietf-dime-rfc3588bis]
   may be sent by any server to the NAS providing session service, to
   request that the session identified by the Session-Id be stopped.

By "any Diameter server"?  like in section 3.3 btw.

- IANA Considerations
Do we need to change all the "4005" entries in http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml into "4005bis"?
Or to be more correct, the new RFC id for 4005bis?

- OLD
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types-3>.

NEW:
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types>.

ALTERNATE PROPOSAL
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-1>.

Regards, Benoit.
--------------060600010701080301030404-- From lionel.morand@orange.com Tue Jul 10 16:18:24 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88F7611E815B for ; Tue, 10 Jul 2012 16:18:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.597 X-Spam-Level: X-Spam-Status: No, score=-2.597 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CCbRa-vL7eKo for ; Tue, 10 Jul 2012 16:18:23 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id 7145E21F8512 for ; Tue, 10 Jul 2012 16:18:23 -0700 (PDT) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm10.si.francetelecom.fr (ESMTP service) with ESMTP id 495FF2644CC; Wed, 11 Jul 2012 01:18:51 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.186]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id 2BAC9238048; Wed, 11 Jul 2012 01:18:51 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH01.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.02.0298.004; Wed, 11 Jul 2012 01:18:50 +0200 From: To: Benoit Claise , dime mailing list Thread-Topic: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt Thread-Index: AQHNXqrfDWh2uHmaRUu3IaSVjMoIhJcjJfCA Date: Tue, 10 Jul 2012 23:18:39 +0000 Message-ID: <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> In-Reply-To: <4FFC405F.9030508@cisco.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.3] Content-Type: multipart/alternative; boundary="_000_6B7134B31289DC4FAF731D844122B36E027152PEXCVZYM13corpora_" MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.7.10.205415 Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Jul 2012 23:18:24 -0000 --_000_6B7134B31289DC4FAF731D844122B36E027152PEXCVZYM13corpora_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Benoit, - I could not find the meaning of * in, for example, [ CHAP-Auth ] [ CHAP-Challenge ] * [ Framed-Compression ] [ Framed-Interface-Id ] [ Framed-IP-Address ] * [ Framed-IPv6-Prefix ] [ Framed-IP-Netmask ] [ Framed-MTU ] [ Framed-Protocol ] [ ARAP-Password ] [ ARAP-Security ] * [ ARAP-Security-Data ] * [ Login-IP-Host ] * [ Login-IPv6-Host ] [ Login-LAT-Group ] [ Login-LAT-Node ] [ Login-LAT-Port ] [ Login-LAT-Service ] * [ Tunneling ] * [ Proxy-Info ] * [ Route-Record ] * [ AVP ] [[LM]] the < * > in front the AVP means that 0, 1 or more AVP scan be prese= nt in the request (or in a Grouped AVP). It follows rules used in RFC3588 a= nd defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6). Regards, Lionel ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, France Telecom - Orange decline toute responsabilite si ce message a ete al= tere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, France Telecom - Orange is not liable for message= s that have been modified, changed or falsified. Thank you. --_000_6B7134B31289DC4FAF731D844122B36E027152PEXCVZYM13corpora_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable 
Hi Benoit,
 
- I could not find the meaning of * in, for examp=
le,
 
        &=
nbsp;           &nbs=
p;     [ CHAP-Auth ]
           &nbs=
p;            &=
nbsp; [ CHAP-Challenge ]
           &nbs=
p;            * [ Fr=
amed-Compression ]
           &nbs=
p;             =
 [ Framed-Interface-Id ]
           &nbs=
p;            &=
nbsp; [ Framed-IP-Address ]
           &nbs=
p;            * [ Fr=
amed-IPv6-Prefix ]
           &nbs=
p;            &=
nbsp; [ Framed-IP-Netmask ]
           &nbs=
p;            &=
nbsp; [ Framed-MTU ]
           &nbs=
p;            &=
nbsp; [ Framed-Protocol ]
           &nbs=
p;            &=
nbsp; [ ARAP-Password ]
           &nbs=
p;            &=
nbsp; [ ARAP-Security ]
           &nbs=
p;            * [ AR=
AP-Security-Data ]
           &nbs=
p;            * [ Lo=
gin-IP-Host ]
           &nbs=
p;            * [ Lo=
gin-IPv6-Host ]
           &nbs=
p;             =
 [ Login-LAT-Group ]
           &nbs=
p;            &=
nbsp; [ Login-LAT-Node ]
           &nbs=
p;            &=
nbsp; [ Login-LAT-Port ]
           &nbs=
p;            &=
nbsp; [ Login-LAT-Service ]
           &nbs=
p;            * [ Tu=
nneling ]
           &nbs=
p;            * [ Pr=
oxy-Info ]
            &nb=
sp;           * [ Ro=
ute-Record ]
           &nbs=
p;            * [ AV=
P ]
[[LM]] <=
/b>the « * &ra=
quo; in front the AVP means that 0, 1 or more AVP scan be present in the re=
quest (or in a Grouped AVP). It follows rules used in RFC3588 and defined i=
n RFC 5234 (http=
://tools.ietf.org/html/rfc5234#section-3.6).
 <=
/pre>

Regards,


 <=
/pre>

Lionel<=
/pre>

______________________________________________________________________=
___________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete al=
tere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for message=
s that have been modified, changed or falsified.
Thank you.
--_000_6B7134B31289DC4FAF731D844122B36E027152PEXCVZYM13corpora_-- From bclaise@cisco.com Wed Jul 11 00:08:41 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 864CC21F856C for ; Wed, 11 Jul 2012 00:08:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.398 X-Spam-Level: X-Spam-Status: No, score=-10.398 tagged_above=-999 required=5 tests=[AWL=0.200, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LaM+RSINsUmA for ; Wed, 11 Jul 2012 00:08:40 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 8C1F021F84FD for ; Wed, 11 Jul 2012 00:08:40 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6B799Hk009473; Wed, 11 Jul 2012 09:09:09 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6B7987U024163; Wed, 11 Jul 2012 09:09:09 +0200 (CEST) Message-ID: <4FFD2694.2040704@cisco.com> Date: Wed, 11 Jul 2012 09:09:08 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: lionel.morand@orange.com References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> In-Reply-To: <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> Content-Type: multipart/alternative; boundary="------------010001020307020509040004" Cc: dime mailing list Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 07:08:41 -0000 This is a multi-part message in MIME format. --------------010001020307020509040004 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Hi Lionel, > Hi Benoit, > > - I could not find the meaning of * in, for example, > > [ CHAP-Auth ] > [ CHAP-Challenge ] > * [ Framed-Compression ] > [ Framed-Interface-Id ] > [ Framed-IP-Address ] > * [ Framed-IPv6-Prefix ] > [ Framed-IP-Netmask ] > [ Framed-MTU ] > [ Framed-Protocol ] > [ ARAP-Password ] > [ ARAP-Security ] > * [ ARAP-Security-Data ] > * [ Login-IP-Host ] > * [ Login-IPv6-Host ] > [ Login-LAT-Group ] > [ Login-LAT-Node ] > [ Login-LAT-Port ] > [ Login-LAT-Service ] > * [ Tunneling ] > * [ Proxy-Info ] > * [ Route-Record ] > * [ AVP ] > */[[LM]]/*the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6). > BC> Thanks for the education. Is this so obvious to the Diameter readers, including the newcomers, that we don't need to mention it? In other words, am I the only one NOT knowing this? ;-) Regards, Benoit. > Regards, > > Lionel > _________________________________________________________________________________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, > France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. > > This message and its attachments may contain confidential or privileged information that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and delete this message and its attachments. > As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified. > Thank you. --------------010001020307020509040004 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Hi Lionel,
Hi Benoit,
 
- I could not find the meaning of * in, for example,
 
                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]
[[LM]] the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6).
 
BC> Thanks for the education.
Is this so obvious to the Diameter readers, including the newcomers, that we don't need to mention it?
In other words, am I the only one NOT knowing this? ;-)

Regards, Benoit.

Regards,
 
Lionel
_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified.
Thank you.


--------------010001020307020509040004-- From dieter.jacobsohn@telekom.de Wed Jul 11 00:28:54 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDC4421F855D for ; Wed, 11 Jul 2012 00:28:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.248 X-Spam-Level: X-Spam-Status: No, score=-3.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MbV3PMwRD23M for ; Wed, 11 Jul 2012 00:28:53 -0700 (PDT) Received: from tcmail73.telekom.de (tcmail73.telekom.de [217.243.239.135]) by ietfa.amsl.com (Postfix) with ESMTP id C740021F855B for ; Wed, 11 Jul 2012 00:28:52 -0700 (PDT) Received: from he111631.emea1.cds.t-internal.com ([10.134.93.23]) by tcmail71.telekom.de with ESMTP/TLS/AES128-SHA; 11 Jul 2012 09:29:21 +0200 Received: from HE113456.emea1.cds.t-internal.com ([169.254.3.217]) by HE111631.emea1.cds.t-internal.com ([::1]) with mapi; Wed, 11 Jul 2012 09:29:20 +0200 From: To: , Date: Wed, 11 Jul 2012 09:29:20 +0200 Thread-Topic: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt Thread-Index: Ac1fNBZFSESrKVx9Rp+4PROw39LOTwAAc6DQ Message-ID: <1836CE1BA4F81F46921CA0334F7E427457FF4C62C1@HE113456.emea1.cds.t-internal.com> References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> In-Reply-To: <4FFD2694.2040704@cisco.com> Accept-Language: en-US, de-DE Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: multipart/alternative; boundary="_000_1836CE1BA4F81F46921CA0334F7E427457FF4C62C1HE113456emea1_" MIME-Version: 1.0 Cc: dime@ietf.org Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 07:28:54 -0000 --_000_1836CE1BA4F81F46921CA0334F7E427457FF4C62C1HE113456emea1_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello Benoit and Lionel as a reader of the Diameter specifications I would support a proposal to de= fine the notification within the document. Clearly "somewhere" it is stated= but for a simple reader it would be very helpful to have such an descripti= on of the notification in the same document as it is used. Best regards Dieter Jacobsohn Deutsche Telekom AG Group Technology Dieter Jacobsohn Landgrabenweg 151, 53227 Bonn +49 228 936-18445 (Tel.) +49 391 5801 46624 (Fax) +49 171 2088 710 (Mobil) E-Mail: dieter.jacobsohn@telekom.de www.telekom.com Erleben, was verbindet. Deutsche Telekom AG Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender) Vorstand: Ren=E9 Obermann (Vorsitzender), Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme, Timotheus H=F6ttges, Claudia Nemat, Prof. Dr. Marion Schick Handelsregister: Amtsgericht Bonn HRB 6794 Sitz der Gesellschaft Bonn USt-IdNr. DE 123475223 Gro=DFe Ver=E4nderungen fangen klein an - Ressourcen schonen und nicht jede= E-Mail drucken. ________________________________ Von: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] Im Auftrag von Be= noit Claise Gesendet: Mittwoch, 11. Juli 2012 09:09 An: lionel.morand@orange.com Cc: dime mailing list Betreff: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt Hi Lionel, Hi Benoit, - I could not find the meaning of * in, for example, [ CHAP-Auth ] [ CHAP-Challenge ] * [ Framed-Compression ] [ Framed-Interface-Id ] [ Framed-IP-Address ] * [ Framed-IPv6-Prefix ] [ Framed-IP-Netmask ] [ Framed-MTU ] [ Framed-Protocol ] [ ARAP-Password ] [ ARAP-Security ] * [ ARAP-Security-Data ] * [ Login-IP-Host ] * [ Login-IPv6-Host ] [ Login-LAT-Group ] [ Login-LAT-Node ] [ Login-LAT-Port ] [ Login-LAT-Service ] * [ Tunneling ] * [ Proxy-Info ] * [ Route-Record ] * [ AVP ] [[LM]] the =AB * =BB in front the AVP means that 0, 1 or more AVP scan be p= resent in the request (or in a Grouped AVP). It follows rules used in RFC35= 88 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6)= . BC> Thanks for the education. Is this so obvious to the Diameter readers, including the newcomers, that w= e don't need to mention it? In other words, am I the only one NOT knowing this? ;-) Regards, Benoit. Regards, Lionel ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, France Telecom - Orange decline toute responsabilite si ce message a ete al= tere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, France Telecom - Orange is not liable for message= s that have been modified, changed or falsified. Thank you. --_000_1836CE1BA4F81F46921CA0334F7E427457FF4C62C1HE113456emea1_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hello Benoit and=20 Lionel
as a reader of the Diameter specifications I= would=20 support a proposal to define the notification within the document. Cle= arly=20 "somewhere" it is stated but for a simple reader it would be very helpful t= o=20 have such an description of the notification in the same document as it is= =20 used.
 

Best=20 regards

Dieter Jacobsohn=20


Deutsche = Telekom=20 AG
Group Technology
Dieter Jacobsohn
Landgrabenweg 151,= 53227=20 Bonn
+49 228 936-18445 (Tel.)
= +49 391 5801 46624 (Fax)
+49 171 2088 710=20 (Mobil)
E-Mail: dieter.jacobsohn@telekom.de
www.telekom.com   

Erleben, was= =20 verbindet. <= FONT=20 color=3D#979797 size=3D1 face=3DArial>

Deutsche Tel= ekom=20 AG
Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender)=20
Vorstand: R= en=E9 Obermann=20 (Vorsitzender),
Dr. Manfred Balz, Reinhard Clemens, Niek Jan van=20 Damme,
Timotheus H=F6ttges, Claudia Nemat,  Prof. Dr. Marion=20 Schick
Handelsregister: Amtsgericht Bonn HRB 6794
<= SPAN=20 lang=3Dde>Sitz der Gesellschaft= =20 Bonn
USt-IdNr. DE 123475223

Gro=DFe V= er=E4nderungen=20 fangen klein an =96 Ressourcen schonen und nicht jede E-= Mail=20 drucken.

 

Von: dime-bounces@ietf.org=20 [mailto:dime-bounces@ietf.org] Im Auftrag von Benoit=20 Claise
Gesendet: Mittwoch, 11. Juli 2012 09:09
An:=20 lionel.morand@orange.com
Cc: dime mailing list
Betreff:= Re:=20 [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt

Hi Lionel,
Hi Benoit,=

 
- I could not find the meaning of * in, for example,
 
         &nbs=
p;            &=
nbsp;   [ CHAP-Auth ]
  &nb=
sp;            =
           [ CHAP-Challen=
ge ]
        &=
nbsp;           &nbs=
p;   * [ Framed-Compression ]
  &n=
bsp;            &nbs=
p;          [ Framed-Inte=
rface-Id ]
       &=
nbsp;           &nbs=
p;      [ Framed-IP-Address ]
            &n= bsp;           * [ Framed= -IPv6-Prefix ]
      &nb=
sp;            =
       [ Framed-IP-Netmask ]
= 
           &nbs=
p;            &=
nbsp; [ Framed-MTU ]
     &nb=
sp;            =
        [ Framed-Protocol ]
           =
            &nb=
sp;  [ ARAP-Password ]
    &n=
bsp;            =
;         [ ARAP-Security ]
          &=
nbsp;           &nbs=
p; * [ ARAP-Security-Data ]
    &n=
bsp;            =
;       * [ Login-IP-Host ]
<=
PRE>            =
;            * [ Log=
in-IPv6-Host ]
      &nb=
sp;             =
;      [ Login-LAT-Group ]
            =             &nb= sp; [ Login-LAT-Node ]
     &=
nbsp;           &nbs=
p;        [ Login-LAT-Port ]<=
/PRE>
           =
;            &n=
bsp;  [ Login-LAT-Service ]
   &nb=
sp;            =
        * [ Tunneling ]
=

           &nbs=
p;            * [ Pr=
oxy-Info ]
        =
            &nb=
sp;   * [ Route-Record ]
  &n=
bsp;            =
;         * [ AVP ]
[[LM]] <=
/B>the =AB * =BB in f=
ront the AVP means that 0, 1 or more AVP scan be present in the request (or=
 in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 523=
4 (http://tools.ietf.org/html/rfc5234#section-3.6).=

 
BC>=20 Thanks for the education.
Is this so obvious to the Diameter readers,=20 including the newcomers, that we don't need to mention it?
In other word= s, am=20 I the only one NOT knowing this? ;-)

Regards, Benoit.

Re=
gards,
 
Lionel
_________________________=
___________________________________________________________________________=
_____________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete al=
tere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for message=
s that have been modified, changed or falsified.
Thank you.


--_000_1836CE1BA4F81F46921CA0334F7E427457FF4C62C1HE113456emea1_-- From lionel.morand@orange.com Wed Jul 11 00:40:47 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CED7F21F8629 for ; Wed, 11 Jul 2012 00:40:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.597 X-Spam-Level: X-Spam-Status: No, score=-2.597 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I++lZetziiT5 for ; Wed, 11 Jul 2012 00:40:44 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias92.francetelecom.com [193.251.215.92]) by ietfa.amsl.com (Postfix) with ESMTP id 3363F21F8627 for ; Wed, 11 Jul 2012 00:40:20 -0700 (PDT) Received: from omfedm06.si.francetelecom.fr (unknown [xx.xx.xx.2]) by omfedm09.si.francetelecom.fr (ESMTP service) with ESMTP id A8E0C2DC313; Wed, 11 Jul 2012 09:40:49 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.183]) by omfedm06.si.francetelecom.fr (ESMTP service) with ESMTP id 7C20027C053; Wed, 11 Jul 2012 09:40:49 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH02.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.02.0298.004; Wed, 11 Jul 2012 09:40:46 +0200 From: To: "dieter.jacobsohn@telekom.de" , "bclaise@cisco.com" Thread-Topic: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt Thread-Index: AQHNXqrfDWh2uHmaRUu3IaSVjMoIhJcjJfCAgABjUwCAAAWlAIAAIggA Date: Wed, 11 Jul 2012 07:40:36 +0000 Message-ID: <8802_1341992449_4FFD2E01_8802_151_3_6B7134B31289DC4FAF731D844122B36E02724A@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> <1836CE1BA4F81F46921CA0334F7E427457FF4C62C1@HE113456.emea1.cds.t-internal.com> In-Reply-To: <1836CE1BA4F81F46921CA0334F7E427457FF4C62C1@HE113456.emea1.cds.t-internal.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.5] Content-Type: multipart/alternative; boundary="_000_6B7134B31289DC4FAF731D844122B36E02724APEXCVZYM13corpora_" MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.6.19.115414 Cc: "dime@ietf.org" Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 07:40:47 -0000 --_000_6B7134B31289DC4FAF731D844122B36E02724APEXCVZYM13corpora_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, Benoit, it is true that there is in the RFC4005 an implicit reference to th= e RFC3588 when describing the new command (AAR/AAA). It could be useful to = explicitly state that the definition of the new command follows the rules d= escribed in RFC3588(bis). About Dieter's comment, the CCF specification of a command is clearly defin= ed in RFC3588(bis) with an explicit reference to RFC5234 for further detail= s, so I don't think that it is needed to provide again the description in t= his specification and in any other diameter specification referencing the R= FC3588(bis). Regards, Lionel De : dieter.jacobsohn@telekom.de [mailto:dieter.jacobsohn@telekom.de] Envoy=E9 : mercredi 11 juillet 2012 09:29 =C0 : bclaise@cisco.com; MORAND Lionel RD-CORE Cc : dime@ietf.org Objet : AW: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt Hello Benoit and Lionel as a reader of the Diameter specifications I would support a proposal to de= fine the notification within the document. Clearly "somewhere" it is stated= but for a simple reader it would be very helpful to have such an descripti= on of the notification in the same document as it is used. Best regards Dieter Jacobsohn Deutsche Telekom AG Group Technology Dieter Jacobsohn Landgrabenweg 151, 53227 Bonn +49 228 936-18445 (Tel.) +49 391 5801 46624 (Fax) +49 171 2088 710 (Mobil) E-Mail: dieter.jacobsohn@telekom.de www.telekom.com Erleben, was verbindet. Deutsche Telekom AG Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender) Vorstand: Ren=E9 Obermann (Vorsitzender), Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme, Timotheus H=F6ttges, Claudia Nemat, Prof. Dr. Marion Schick Handelsregister: Amtsgericht Bonn HRB 6794 Sitz der Gesellschaft Bonn USt-IdNr. DE 123475223 Gro=DFe Ver=E4nderungen fangen klein an - Ressourcen schonen und nicht jede= E-Mail drucken. ________________________________ Von: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] Im Auftrag von Be= noit Claise Gesendet: Mittwoch, 11. Juli 2012 09:09 An: lionel.morand@orange.com Cc: dime mailing list Betreff: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt Hi Lionel, Hi Benoit, - I could not find the meaning of * in, for example, [ CHAP-Auth ] [ CHAP-Challenge ] * [ Framed-Compression ] [ Framed-Interface-Id ] [ Framed-IP-Address ] * [ Framed-IPv6-Prefix ] [ Framed-IP-Netmask ] [ Framed-MTU ] [ Framed-Protocol ] [ ARAP-Password ] [ ARAP-Security ] * [ ARAP-Security-Data ] * [ Login-IP-Host ] * [ Login-IPv6-Host ] [ Login-LAT-Group ] [ Login-LAT-Node ] [ Login-LAT-Port ] [ Login-LAT-Service ] * [ Tunneling ] * [ Proxy-Info ] * [ Route-Record ] * [ AVP ] [[LM]] the =AB * =BB in front the AVP means that 0, 1 or more AVP scan be p= resent in the request (or in a Grouped AVP). It follows rules used in RFC35= 88 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6). BC> Thanks for the education. Is this so obvious to the Diameter readers, including the newcomers, that w= e don't need to mention it? In other words, am I the only one NOT knowing this? ;-) Regards, Benoit. Regards, Lionel ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, France Telecom - Orange decline toute responsabilite si ce message a ete al= tere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, France Telecom - Orange is not liable for message= s that have been modified, changed or falsified. Thank you. ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, France Telecom - Orange decline toute responsabilite si ce message a ete al= tere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, France Telecom - Orange is not liable for message= s that have been modified, changed or falsified. Thank you. --_000_6B7134B31289DC4FAF731D844122B36E02724APEXCVZYM13corpora_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi,

 

Benoit, it is true that there is in the RFC4005 an implicit = reference to the RFC3588 when describing the new command (AAR/AAA). It coul= d be useful to explicitly state that the definition of the new command follows the rul= es described in RFC3588(bis).

 

About Dieter’s comment, the CCF specification of a com= mand is clearly defined in RFC3588(bis) with an explicit reference to RFC52= 34 for further details, so I don’t think that it is needed to provide again the des= cription in this specification and in any other diameter specification refe= rencing the RFC3588(bis).

 

Regards,

 

Lionel

 

De : dieter.jacobso= hn@telekom.de [mailto:dieter.jacobsohn@telekom.de]
Envoy=E9 : mercredi 11 juillet 2012 09:29
=C0 : bclaise@cisco.com; MORAND Lionel RD-CORE
Cc : dime@ietf.org
Objet : AW: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.t= xt

 

Hello Benoit and Lionel<= /o:p>

as a reader of the Diameter specification= s I would support a proposal to define the notification within th= e document. Clearly "somewhere" it is stated but for a simple rea= der it would be very helpful to have such an description of the notification i= n the same document as it is used.

 

Best regards

Dieter Jacobsohn

 

Deutsche Telekom AG
Group Technology
Dieter Jacobsohn
Landgrabenweg 151, 53227 Bonn
+49 228 936-18445 (Tel.)
+49 391 5801 46624 (Fax)
+49 171 2088 710 (Mobil)
E-Mail: dieter.jacobsohn@telekom.de
www.tel= ekom.com &nb= sp; 

Erleben, was verbindet. 

Deutsche Telekom AG
Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender)
Vorstand: Ren=E9 Obermann (Vorsitzender),
Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme,
Timotheus H=F6ttges, Claudia Nemat,  Prof. Dr. Marion Schick Handelsregister: Amtsgericht Bonn HRB 6794
Sitz der Gesellschaft Bonn
USt-IdNr. DE 123475223

Gro=DFe Ver=E4nderungen fangen klein an – Ressourcen schonen und nicht jede E-Mail = drucken.

 

 

Von: dime-bounces@ietf.org [mailto= :dime-bounces@ietf.org] Im Auftrag von Benoit Claise
Gesendet: Mittwoch, 11. Juli 2012 09:09
An: lionel.morand@orange.com
Cc: dime mailing list
Betreff: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt

Hi Lionel,

Hi Benoit,
 
- I could not find the meaning of * in, for examp=
le,
 
        &=
nbsp;           &nbs=
p;     [ CHAP-Auth ]
           &nbs=
p;            &=
nbsp; [ CHAP-Challenge ]
           &nbs=
p;            * [ Fr=
amed-Compression ]
           &nbs=
p;             =
 [ Framed-Interface-Id ]
           &nbs=
p;            &=
nbsp; [ Framed-IP-Address ]
           &nbs=
p;            * [ Fr=
amed-IPv6-Prefix ]
           &nbs=
p;            &=
nbsp; [ Framed-IP-Netmask ]
           &nbs=
p;            &=
nbsp; [ Framed-MTU ]
           &nbs=
p;            &=
nbsp; [ Framed-Protocol ]
           &nbs=
p;            &=
nbsp; [ ARAP-Password ]
           &nbs=
p;            &=
nbsp; [ ARAP-Security ]
           &nbs=
p;            * [ AR=
AP-Security-Data ]
           &nbs=
p;            * [ Lo=
gin-IP-Host ]
           &nbs=
p;            * [ Lo=
gin-IPv6-Host ]
           &nbs=
p;             =
 [ Login-LAT-Group ]
           &nbs=
p;            &=
nbsp; [ Login-LAT-Node ]
           &nbs=
p;            &=
nbsp; [ Login-LAT-Port ]
           &nbs=
p;            &=
nbsp; [ Login-LAT-Service ]
           &nbs=
p;            * [ Tu=
nneling ]
           &nbs=
p;            * [ Pr=
oxy-Info ]
            &nb=
sp;           * [ Ro=
ute-Record ]
           &nbs=
p;            * [ AV=
P ]
[[LM]] <=
/b>the =AB * =BB in =
front the AVP means that 0, 1 or more AVP scan be present in the request (o=
r in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 52=
34 (http://tools=
.ietf.org/html/rfc5234#section-3.6).
 <=
/pre>

BC> Thanks for the education.
Is this so obvious to the Diameter readers, including the newcomers, that w= e don't need to mention it?
In other words, am I the only one NOT knowing this? ;-)

Regards, Benoit.


Regards,
 <=
/pre>

Lionel<=
/pre>

______________________________________________________________________=
___________________________________________________


 


Ce message et ses pieces jointes peuvent contenir des informations con=
fidentielles ou privilegiees et ne doivent donc


pas etre diffuses, exploites ou copies sans autorisation. Si vous avez=
 recu ce message par erreur, veuillez le signaler


a l'expediteur et le detruire ainsi que les pieces jointes. Les messag=
es electroniques etant susceptibles d'alteration,


France Telecom - Orange decline toute responsabilite si ce message a e=
te altere, deforme ou falsifie. Merci.


 


This message and its attachments may contain confidential or privilege=
d information that may be protected by law;


they should not be distributed, used or copied without authorisation.<=
o:p>


If you have received this email in error, please notify the sender and=
 delete this message and its attachments.


As emails may be altered, France Telecom - Orange is not liable for me=
ssages that have been modified, changed or falsified.


Thank you.


 


______________________________________________________________________=
___________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete al=
tere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for message=
s that have been modified, changed or falsified.
Thank you.
--_000_6B7134B31289DC4FAF731D844122B36E02724APEXCVZYM13corpora_-- From bclaise@cisco.com Wed Jul 11 00:48:20 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D73B21F8549 for ; Wed, 11 Jul 2012 00:48:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.406 X-Spam-Level: X-Spam-Status: No, score=-10.406 tagged_above=-999 required=5 tests=[AWL=0.192, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M02P+yA79z-1 for ; Wed, 11 Jul 2012 00:48:15 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 41A7521F853E for ; Wed, 11 Jul 2012 00:48:14 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6B7mdwk014382; Wed, 11 Jul 2012 09:48:39 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6B7md22024308; Wed, 11 Jul 2012 09:48:39 +0200 (CEST) Message-ID: <4FFD2FD6.1050706@cisco.com> Date: Wed, 11 Jul 2012 09:48:38 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: lionel.morand@orange.com References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> <1836CE1BA4F81F46921CA0334F7E427457FF4C62C1@HE113456.emea1.cds.t-internal.com> <8802_1341992449_4FFD2E01_8802_151_3_6B7134B31289DC4FAF731D844122B36E02724A@PEXCVZYM13.corporate.adroot.infra.ftgroup> In-Reply-To: <8802_1341992449_4FFD2E01_8802_151_3_6B7134B31289DC4FAF731D844122B36E02724A@PEXCVZYM13.corporate.adroot.infra.ftgroup> Content-Type: multipart/alternative; boundary="------------060004090503030106010307" Cc: "dime@ietf.org" Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 07:48:20 -0000 This is a multi-part message in MIME format. --------------060004090503030106010307 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Hi Lionel, > > Hi, > > Benoit, it is true that there is in the RFC4005 an implicit reference > to the RFC3588 when describing the new command (AAR/AAA). It could be > useful to explicitly state that the definition of the new command > follows the rules described in RFC3588(bis). > That would work for me Regards, Benoit. > > About Dieter's comment, the CCF specification of a command is clearly > defined in RFC3588(bis) with an explicit reference to RFC5234 for > further details, so I don't think that it is needed to provide again > the description in this specification and in any other diameter > specification referencing the RFC3588(bis). > > Regards, > > Lionel > > *De :*dieter.jacobsohn@telekom.de [mailto:dieter.jacobsohn@telekom.de] > *Envoyé :* mercredi 11 juillet 2012 09:29 > *À :* bclaise@cisco.com; MORAND Lionel RD-CORE > *Cc :* dime@ietf.org > *Objet :* AW: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt > > Hello Benoit and Lionel > > as a reader of the Diameter specifications I would support a proposal > to define the notification within the document. Clearly "somewhere" it > is stated but for a simple reader it would be very helpful to have > such an description of the notification in the same document as it is > used. > > Best regards > > Dieter Jacobsohn > > Deutsche Telekom AG > Group Technology > Dieter Jacobsohn > Landgrabenweg 151, 53227 Bonn > +49 228 936-18445 (Tel.) > +49 391 5801 46624 (Fax) > +49 171 2088 710 (Mobil) > E-Mail: dieter.jacobsohn@telekom.de > www.telekom.com > > Erleben, was verbindet. > > Deutsche Telekom AG > Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender) > Vorstand: René Obermann (Vorsitzender), > Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme, > Timotheus Höttges, Claudia Nemat, Prof. Dr. Marion Schick > Handelsregister: Amtsgericht Bonn HRB 6794 > Sitz der Gesellschaft Bonn > USt-IdNr. DE 123475223 > > *Große Veränderungen fangen klein an****--**Ressourcen schonen und > nicht jede E-Mail drucken.* > > ------------------------------------------------------------------------ > > *Von:*dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] *Im Auftrag > von *Benoit Claise > *Gesendet:* Mittwoch, 11. Juli 2012 09:09 > *An:* lionel.morand@orange.com > *Cc:* dime mailing list > *Betreff:* Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt > > Hi Lionel, > > Hi Benoit, > > > > - I could not find the meaning of * in, for example, > > > > [ CHAP-Auth ] > > [ CHAP-Challenge ] > > * [ Framed-Compression ] > > [ Framed-Interface-Id ] > > [ Framed-IP-Address ] > > * [ Framed-IPv6-Prefix ] > > [ Framed-IP-Netmask ] > > [ Framed-MTU ] > > [ Framed-Protocol ] > > [ ARAP-Password ] > > [ ARAP-Security ] > > * [ ARAP-Security-Data ] > > * [ Login-IP-Host ] > > * [ Login-IPv6-Host ] > > [ Login-LAT-Group ] > > [ Login-LAT-Node ] > > [ Login-LAT-Port ] > > [ Login-LAT-Service ] > > * [ Tunneling ] > > * [ Proxy-Info ] > > * [ Route-Record ] > > * [ AVP ] > > */[[LM]]/*the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6). > > > > BC> Thanks for the education. > Is this so obvious to the Diameter readers, including the newcomers, > that we don't need to mention it? > In other words, am I the only one NOT knowing this? ;-) > > Regards, Benoit. > > > Regards, > > Lionel > _________________________________________________________________________________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, > France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. > > This message and its attachments may contain confidential or privileged information that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and delete this message and its attachments. > As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified. > Thank you. > > _________________________________________________________________________________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, > France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. > > This message and its attachments may contain confidential or privileged information that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and delete this message and its attachments. > As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified. > Thank you. --------------060004090503030106010307 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Hi Lionel,

Hi,

 

Benoit, it is true that there is in the RFC4005 an implicit reference to the RFC3588 when describing the new command (AAR/AAA). It could be useful to explicitly state that the definition of the new command follows the rules described in RFC3588(bis).

That would work for me

Regards, Benoit.

 

About Dieter’s comment, the CCF specification of a command is clearly defined in RFC3588(bis) with an explicit reference to RFC5234 for further details, so I don’t think that it is needed to provide again the description in this specification and in any other diameter specification referencing the RFC3588(bis).

 

Regards,

 

Lionel

 

De : dieter.jacobsohn@telekom.de [mailto:dieter.jacobsohn@telekom.de]
Envoyé : mercredi 11 juillet 2012 09:29
À : bclaise@cisco.com; MORAND Lionel RD-CORE
Cc : dime@ietf.org
Objet : AW: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt

 

Hello Benoit and Lionel

as a reader of the Diameter specifications I would support a proposal to define the notification within the document. Clearly "somewhere" it is stated but for a simple reader it would be very helpful to have such an description of the notification in the same document as it is used.

 

Best regards

Dieter Jacobsohn

 

Deutsche Telekom AG
Group Technology
Dieter Jacobsohn
Landgrabenweg 151, 53227 Bonn
+49 228 936-18445 (Tel.)
+49 391 5801 46624 (Fax)
+49 171 2088 710 (Mobil)
E-Mail: dieter.jacobsohn@telekom.de
www.telekom.com   

Erleben, was verbindet. 

Deutsche Telekom AG
Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender)
Vorstand: René Obermann (Vorsitzender),
Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme,
Timotheus Höttges, Claudia Nemat,  Prof. Dr. Marion Schick
Handelsregister: Amtsgericht Bonn HRB 6794
Sitz der Gesellschaft Bonn
USt-IdNr. DE 123475223

Große Veränderungen fangen klein an – Ressourcen schonen und nicht jede E-Mail drucken.

 

 

Von: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] Im Auftrag von Benoit Claise
Gesendet: Mittwoch, 11. Juli 2012 09:09
An: lionel.morand@orange.com
Cc: dime mailing list
Betreff: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt

Hi Lionel,

Hi Benoit,
 
- I could not find the meaning of * in, for example,
 
                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]
[[LM]] the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6).
 

BC> Thanks for the education.
Is this so obvious to the Diameter readers, including the newcomers, that we don't need to mention it?
In other words, am I the only one NOT knowing this? ;-)

Regards, Benoit.


Regards,
 
Lionel
_________________________________________________________________________________________________________________________
 
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
 
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

 

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified.
Thank you.


--------------060004090503030106010307-- From bclaise@cisco.com Wed Jul 11 02:05:42 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A10021F86A7 for ; Wed, 11 Jul 2012 02:05:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.413 X-Spam-Level: X-Spam-Status: No, score=-10.413 tagged_above=-999 required=5 tests=[AWL=0.185, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4mDJcFJtkEaq for ; Wed, 11 Jul 2012 02:05:40 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 4247221F858E for ; Wed, 11 Jul 2012 02:05:40 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6B95iN4024533; Wed, 11 Jul 2012 11:05:44 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6B95iTX024009; Wed, 11 Jul 2012 11:05:44 +0200 (CEST) Message-ID: <4FFD41E7.5030502@cisco.com> Date: Wed, 11 Jul 2012 11:05:43 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: dime mailing list References: <4FFC405F.9030508@cisco.com> In-Reply-To: <4FFC405F.9030508@cisco.com> Content-Type: multipart/alternative; boundary="------------070807050800000207050609" Cc: Michelle Cotton Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 09:05:42 -0000 This is a multi-part message in MIME format. --------------070807050800000207050609 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Dear all, Glen, Two more points, part of the AD review (I needed a little bit of education before making those points, hence the part 2 in my review) 1. the NASREQ application is specified in RFC4005bis, but IANA points to RFC3588bis See http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 with an entry for Application id= 1, for NASREQ, with the reference [RFC-ietf-dime-rfc3588bis-33] I understand the history: RFC3588 introduced this application id value 1 in the IANA Considerations section. However, RFC3588bis, which will obsolete RFC3588, doesn't mention this application id (obviously, because it was assigned already). So don't you believe that we should correct this and have, in the IANA Considerations section of http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a message basically expressing: http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 should contain Application id= 1, for NASREQ, with the reference [RFC4005bis] 2. In section 3.10Accounting-Answer (ACA) Command The same level of security MUST be applied to both the Accounting-Request and the corresponding Accounting-Answer message. For example, if the ACR was protected using end-to-end security techniques then the corresponding ACA message MUST be protected in the same way; note, however, that the definition of such techniques is outside the scope of this document. Note: this message about "The same level of security ..." is only available in that section Why does this apply only to Accounting-Request and Accounting-Answer? Or does it apply to all Request/Answer? Regards, Benoit. > Dear all, Glen, > > Please find below the AD review of draft-ietf-dime-rfc4005bis-09.txt > > The document is in a good enough shape to be sent to IETF LC. > Please consider my comments together with the other IETF LC comments. > > Glen, let me know if you plan on submitting a quick revision soon, or > if I should send THIS version to the IETF LC (which might lead to > redundant comment) > > > - Some idnits > http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt > Miscellaneous warnings: > ---------------------------------------------------------------------------- > > == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but > does not include the phrase in its RFC 2119 key words list. > > Checking references for intended status: Proposed Standard > ---------------------------------------------------------------------------- > > == Missing Reference: 'BASE' is mentioned on line 219, but not defined > > I understand that this is a quote from RFC4005. To avoid the source of > confusion, here is a proposal > > OLD: > However, the presence of an > instance of the Acct-Application-Id AVP was required in RFC 4005, > as well: > > The ACR message [BASE] is sent by the NAS to report its session > information to a target server downstream. > > Either of Acct-Application-Id or Vendor-Specific-Application-Id > AVPs MUST be present. If the Vendor-Specific-Application-Id > grouped AVP is present, it must have an Acct-Application-Id > inside. > NEW: > However, the presence of an > instance of the Acct-Application-Id AVP was required in RFC 4005, > which quotes: > > "The ACR message [BASE] is sent by the NAS to report its session > information to a target server downstream. > > Either of Acct-Application-Id or Vendor-Specific-Application-Id > AVPs MUST be present. If the Vendor-Specific-Application-Id > grouped AVP is present, it must have an Acct-Application-Id > inside." > > - One small improvement > OLD: > o The accounting model to be used is now specified. > > NEW > o The accounting model to be used is now specified. See section 1.6 > > - Expand on the first ASA occurrence > > - Add an point after [I-D.ietf-dime-rfc3588bis] > > 3.1. AA-Request (AAR) Command > > The AA-Request (AAR), which is indicated by setting the Command-Code > field to 265 and the 'R' bit in the Command Flags field, is used to > request authentication and/or authorization for a given NAS user. > The type of request is identified through the Auth-Request-Type AVP > [I-D.ietf-dime-rfc3588bis] The recommended value for most situations > is AUTHORIZE_AUTHENTICATE. > > - I could not find the meaning of * in, for example, > > [ CHAP-Auth ] > [ CHAP-Challenge ] > * [ Framed-Compression ] > [ Framed-Interface-Id ] > [ Framed-IP-Address ] > * [ Framed-IPv6-Prefix ] > [ Framed-IP-Netmask ] > [ Framed-MTU ] > [ Framed-Protocol ] > [ ARAP-Password ] > [ ARAP-Security ] > * [ ARAP-Security-Data ] > * [ Login-IP-Host ] > * [ Login-IPv6-Host ] > [ Login-LAT-Group ] > [ Login-LAT-Node ] > [ Login-LAT-Port ] > [ Login-LAT-Service ] > * [ Tunneling ] > * [ Proxy-Info ] > * [ Route-Record ] > * [ AVP ] > - 3.7. Abort-Session-Request (ASR) Command > > The Abort-Session-Request (ASR) message [I-D.ietf-dime-rfc3588bis] > may be sent by any server to the NAS providing session service, to > request that the session identified by the Session-Id be stopped. > > By "any Diameter server"? like in section 3.3 btw. > > - IANA Considerations > Do we need to change all the "4005" entries in > http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml into > "4005bis"? > Or to be more correct, the new RFC id for 4005bis? > > - OLD > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry", assignments/radius-types-3>. > > NEW: > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry", assignments/radius-types>. > > ALTERNATE PROPOSAL > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry",. > > Regards, Benoit. > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime --------------070807050800000207050609 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Dear all, Glen,

Two more points, part of the AD review (I needed a little bit of education before making those points, hence the part 2 in my review)

1. the NASREQ application is specified in RFC4005bis, but IANA points to RFC3588bis
See http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45
with an entry for Application id= 1, for NASREQ, with the reference [RFC-ietf-dime-rfc3588bis-33]

I understand the history: RFC3588 introduced this application id value 1 in the IANA Considerations section.
However, RFC3588bis, which will obsolete RFC3588, doesn't mention this application id (obviously, because it was assigned already).
So don't you believe that we should correct this and have, in the IANA Considerations section of http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a message basically expressing:
    http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45  should contain
             Application id= 1, for NASREQ, with the reference [RFC4005bis]


2.  In section 3.10 Accounting-Answer (ACA) Command 
   The same level of security MUST
   be applied to both the Accounting-Request and the corresponding
   Accounting-Answer message.  For example, if the ACR was protected
   using end-to-end security techniques then the corresponding ACA
   message MUST be protected in the same way; note, however, that the
   definition of such techniques is outside the scope of this document.
Note: this message about "The same level of security ..." is only available in that section
Why does this apply only to Accounting-Request and Accounting-Answer?
Or does it apply to all Request/Answer?

Regards, Benoit.

Dear all, Glen,

Please find below the AD review of draft-ietf-dime-rfc4005bis-09.txt

The document is in a good enough shape to be sent to IETF LC.
Please consider my comments together with the other IETF LC comments.

Glen, let me know if you plan on submitting a quick revision soon, or if I should send THIS version to the IETF LC (which might lead to redundant comment)


- Some idnits
http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt
  Miscellaneous warnings:
  ----------------------------------------------------------------------------

  == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but
     does not include the phrase in its RFC 2119 key words list.


  Checking references for intended status: Proposed Standard
  ----------------------------------------------------------------------------

  == Missing Reference: 'BASE' is mentioned on line 219, but not defined
I understand that this is a quote from RFC4005. To avoid the source of confusion, here is a proposal

OLD:
      However, the presence of an
      instance of the Acct-Application-Id AVP was required in RFC 4005,
      as well:

         The ACR message [BASE] is sent by the NAS to report its session
         information to a target server downstream.

         Either of Acct-Application-Id or Vendor-Specific-Application-Id
         AVPs MUST be present.  If the Vendor-Specific-Application-Id
         grouped AVP is present, it must have an Acct-Application-Id
         inside.
NEW:
      However, the presence of an
      instance of the Acct-Application-Id AVP was required in RFC 4005,
      which quotes:

         "The ACR message [BASE] is sent by the NAS to report its session
         information to a target server downstream.

         Either of Acct-Application-Id or Vendor-Specific-Application-Id
         AVPs MUST be present.  If the Vendor-Specific-Application-Id
         grouped AVP is present, it must have an Acct-Application-Id
         inside."

- One small improvement
OLD:
   o  The accounting model to be used is now specified.

NEW
   o  The accounting model to be used is now specified. See section 1.6

- Expand on the first ASA occurrence

- Add an point after [I-D.ietf-dime-rfc3588bis] 

3.1.  AA-Request (AAR) Command

   The AA-Request (AAR), which is indicated by setting the Command-Code
   field to 265 and the 'R' bit in the Command Flags field, is used to
   request authentication and/or authorization for a given NAS user.
   The type of request is identified through the Auth-Request-Type AVP
   [I-D.ietf-dime-rfc3588bis] The recommended value for most situations
   is AUTHORIZE_AUTHENTICATE.
- I could not find the meaning of * in, for example,

                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]

- 3.7.  Abort-Session-Request (ASR) Command

   The Abort-Session-Request (ASR) message [I-D.ietf-dime-rfc3588bis]
   may be sent by any server to the NAS providing session service, to
   request that the session identified by the Session-Id be stopped.

By "any Diameter server"?  like in section 3.3 btw.

- IANA Considerations
Do we need to change all the "4005" entries in http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml into "4005bis"?
Or to be more correct, the new RFC id for 4005bis?

- OLD
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types-3>.

NEW:
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types>.

ALTERNATE PROPOSAL
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-1>.

Regards, Benoit.


_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime


--------------070807050800000207050609-- From glenzorn@gmail.com Wed Jul 11 03:24:28 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 94AA921F8532 for ; Wed, 11 Jul 2012 03:24:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pWQrhHK2p0an for ; Wed, 11 Jul 2012 03:24:27 -0700 (PDT) Received: from mail-gg0-f172.google.com (mail-gg0-f172.google.com [209.85.161.172]) by ietfa.amsl.com (Postfix) with ESMTP id F377B21F856C for ; Wed, 11 Jul 2012 03:24:21 -0700 (PDT) Received: by ggnc4 with SMTP id c4so1083343ggn.31 for ; Wed, 11 Jul 2012 03:24:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=gc8ZBLlBzdG7DX2yVIQ8xxsY7Qp+2erAXgqN2F2gIFo=; b=o/VRMEGxuvR4J/L/pyUCCNFt2wZWxZDrTFTuBAcqe1pjWmEFsFJFo6u+1rdteesIJv tKmINGl+8fMElBKpnWcxEJhq+T8EG/rdW3abTpT9K6gyhmQIqmqka37X1rAkrjYOyUAJ PBSf+2kcqWbUsC0JPZqcU6e+QMe2h/rZnLBjEjis8jDJiCXxmOGvS0Cz6HYmnf8veC6D jBWu8FJrESF6Z9LRH58LRR/+zjmGOEXY/5w64hOP36z897VMkKPKxegHbAISVnfdhC3N fwjztHzlbT7NZ2tuWsVGvR+dD9yhazg4UGwUgyVI4QAI2RoSWPpQNeK4QUzEdD8LVeZD Vb3g== Received: by 10.66.90.67 with SMTP id bu3mr80713314pab.47.1342002291008; Wed, 11 Jul 2012 03:24:51 -0700 (PDT) Received: from [192.168.0.100] (ppp-115-87-72-11.revip4.asianet.co.th. [115.87.72.11]) by mx.google.com with ESMTPS id nh8sm1454462pbc.60.2012.07.11.03.24.48 (version=SSLv3 cipher=OTHER); Wed, 11 Jul 2012 03:24:49 -0700 (PDT) From: Glen Zorn To: dime@ietf.org In-Reply-To: <4FFD2694.2040704@cisco.com> References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> Content-Type: multipart/alternative; boundary="=-m7xEcuhtgwLZyZiAon0a" Organization: Network Zen Date: Wed, 11 Jul 2012 17:24:46 +0700 Message-ID: <1342002286.14913.56.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 10:24:28 -0000 --=-m7xEcuhtgwLZyZiAon0a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit On Wed, 2012-07-11 at 09:09 +0200, Benoit Claise wrote: > Hi Lionel, > > > Hi Benoit, > > > > - I could not find the meaning of * in, for example, > > > > [ CHAP-Auth ] > > [ CHAP-Challenge ] > > * [ Framed-Compression ] > > [ Framed-Interface-Id ] > > [ Framed-IP-Address ] > > * [ Framed-IPv6-Prefix ] > > [ Framed-IP-Netmask ] > > [ Framed-MTU ] > > [ Framed-Protocol ] > > [ ARAP-Password ] > > [ ARAP-Security ] > > * [ ARAP-Security-Data ] > > * [ Login-IP-Host ] > > * [ Login-IPv6-Host ] > > [ Login-LAT-Group ] > > [ Login-LAT-Node ] > > [ Login-LAT-Port ] > > [ Login-LAT-Service ] > > * [ Tunneling ] > > * [ Proxy-Info ] > > * [ Route-Record ] > > * [ AVP ] > > [[LM]] the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6). > > > > BC> Thanks for the education. > Is this so obvious to the Diameter readers, including the newcomers, > that we don't need to mention it? > In other words, am I the only one NOT knowing this? ;-) Hmm. draft-ietf-dime-rfc3588bis is listed as a normative reference in 4005bis and RFC 5238 is listed as a normative reference in draft-ietf-dime-rfc3588bis. My understanding is that one cannot expect to read and understand an RFC without having read and understood the normative references thereof. Is my understanding correct? If so, then there is in fact no need to mention it since any reader cognizant of that requirement will already know (or could easily refresh the memory of) what the notation means. > > Regards, Benoit. > > > > Regards, > > > > Lionel > > > > _________________________________________________________________________________________________________________________ > > > > Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc > > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler > > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, > > France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. > > > > This message and its attachments may contain confidential or privileged information that may be protected by law; > > they should not be distributed, used or copied without authorisation. > > If you have received this email in error, please notify the sender and delete this message and its attachments. > > As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified. > > Thank you. > > > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime --=-m7xEcuhtgwLZyZiAon0a Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Wed, 2012-07-11 at 09:09 +0200, Benoit Claise wrote:
Hi Lionel,

Hi Benoit,
 
- I could not find the meaning of * in, for example,
 
                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]
[[LM]] the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6).
 
BC> Thanks for the education.
Is this so obvious to the Diameter readers, including the newcomers, that we don't need to mention it?
In other words, am I the only one NOT knowing this? ;-)

Hmm.  draft-ietf-dime-rfc3588bis is listed as  a normative reference in 4005bis and RFC 5238 is listed as a normative reference in draft-ietf-dime-rfc3588bis.  My understanding is that one cannot expect to read and understand an RFC without having read and understood the normative references thereof.  Is my understanding correct?  If so, then there is in fact no need to mention it since any reader cognizant of that requirement will already know (or could easily refresh the memory of) what the notation means.


Regards, Benoit.

Regards,
 
Lionel

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified.
Thank you.



_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime

--=-m7xEcuhtgwLZyZiAon0a-- From glenzorn@gmail.com Wed Jul 11 03:26:58 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B98B21F857D for ; Wed, 11 Jul 2012 03:26:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FJUKbqaKMrCB for ; Wed, 11 Jul 2012 03:26:57 -0700 (PDT) Received: from mail-gh0-f172.google.com (mail-gh0-f172.google.com [209.85.160.172]) by ietfa.amsl.com (Postfix) with ESMTP id 6FAE721F84E1 for ; Wed, 11 Jul 2012 03:26:57 -0700 (PDT) Received: by ghbg16 with SMTP id g16so1080420ghb.31 for ; Wed, 11 Jul 2012 03:27:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=4Xid2Ze2fNiIb0ZzS+NlAexmyAK8BPJrCZ7UZrcTj4w=; b=Z9+Y4bb7jBh4vLThoN19TmmDqo15inc87NDlJkRULUtqidGdprlfs4xCwUv0MLv+VZ f5DbDiFSaDkuHMPG+8DS+RtXlzFJNtYkeG9VbsTUS8FWdV2R1Z+45psipwES29ufieda IrT8NuDeqtORmZM3FKUdumXYqhkw0jRYKugReKPkLefR+TWh4MLN5/PiRvTvXfVASKt0 4dmfLotqN8CCWPjdP/KwVI0bkmAd9hhAofmZr+ckSctPBz/1S1DpsiP1GMS2shVe5d4G T37DQMLOYp/L8ajYLknqZxhnesYROaOw+0kWjPmKMz3IS6F9qAAPlWyiho15myC/PkJH oCGg== Received: by 10.66.90.67 with SMTP id bu3mr80728065pab.47.1342002447124; Wed, 11 Jul 2012 03:27:27 -0700 (PDT) Received: from [192.168.0.100] (ppp-115-87-72-11.revip4.asianet.co.th. [115.87.72.11]) by mx.google.com with ESMTPS id rs4sm1475435pbc.0.2012.07.11.03.27.25 (version=SSLv3 cipher=OTHER); Wed, 11 Jul 2012 03:27:26 -0700 (PDT) From: Glen Zorn To: dime@ietf.org In-Reply-To: <8802_1341992449_4FFD2E01_8802_151_3_6B7134B31289DC4FAF731D844122B36E02724A@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> <1836CE1BA4F81F46921CA0334F7E427457FF4C62C1@HE113456.emea1.cds.t-internal.com> <8802_1341992449_4FFD2E01_8802_151_3_6B7134B31289DC4FAF731D844122B36E02724A@PEXCVZYM13.corporate.adroot.infra.ftgroup> Content-Type: multipart/alternative; boundary="=-C5/UOY3xkMjleoo/xWBq" Organization: Network Zen Date: Wed, 11 Jul 2012 17:27:23 +0700 Message-ID: <1342002443.14913.58.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 10:26:58 -0000 --=-C5/UOY3xkMjleoo/xWBq Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit On Wed, 2012-07-11 at 07:40 +0000, lionel.morand@orange.com wrote: > Hi, > > > > Benoit, it is true that there is in the RFC4005 an implicit reference > to the RFC3588 when describing the new command (AAR/AAA). It could be > useful to explicitly state that the definition of the new command > follows the rules described in RFC3588(bis). Actually, the references to 3588bis are abundant, explicit and normative... > > > > About Dieter’s comment, the CCF specification of a command is clearly > defined in RFC3588(bis) with an explicit reference to RFC5234 for > further details, so I don’t think that it is needed to provide again > the description in this specification and in any other diameter > specification referencing the RFC3588(bis). Indeed. ... --=-C5/UOY3xkMjleoo/xWBq Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Wed, 2012-07-11 at 07:40 +0000, lionel.morand@orange.com wrote:
Hi,

 

Benoit, it is true that there is in the RFC4005 an implicit reference to the RFC3588 when describing the new command (AAR/AAA). It could be useful to explicitly state that the definition of the new command follows the rules described in RFC3588(bis).

Actually, the references to 3588bis are abundant, explicit and normative...


 

About Dieter’s comment, the CCF specification of a command is clearly defined in RFC3588(bis) with an explicit reference to RFC5234 for further details, so I don’t think that it is needed to provide again the description in this specification and in any other diameter specification referencing the RFC3588(bis).

Indeed.

...
--=-C5/UOY3xkMjleoo/xWBq-- From glenzorn@gmail.com Wed Jul 11 03:45:34 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01BE721F8634 for ; Wed, 11 Jul 2012 03:45:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.098 X-Spam-Level: X-Spam-Status: No, score=-3.098 tagged_above=-999 required=5 tests=[AWL=-0.500, BAYES_00=-2.599, EXTRA_MPART_TYPE=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id prK15P2Komkj for ; Wed, 11 Jul 2012 03:45:33 -0700 (PDT) Received: from mail-pb0-f44.google.com (mail-pb0-f44.google.com [209.85.160.44]) by ietfa.amsl.com (Postfix) with ESMTP id 10C7721F8631 for ; Wed, 11 Jul 2012 03:45:33 -0700 (PDT) Received: by pbcwy7 with SMTP id wy7so1953054pbc.31 for ; Wed, 11 Jul 2012 03:46:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=o1EjsEhrSXIWeRF2DStpgozYDt5frDxJoV5TFbecP5M=; b=es1FvD7jW8+MbI+plTYqeMOoq1+r6kVPURPKiAEW3SrAAbcOG7vXeEVoEh2gE8c2vP RXN44gsL9s9I4r9+fB+fkKCmdYcQwfJKKoaG+DwYJIcyBcVA+5zzXnmyA7Mn0R+XEUeD GLeRLF+a3bPC7i6ppTs2Df6wjx4l94KQiZr9skkW4Hb1bPl/Tnu8RhWUGCLOxCAuMzWY yLLA/pY7Bcy0pqRJUUAr4llWKB2i0rcRNvGg76w/o7rfRlrkfoce1OdTksPWOwIA4lSi 485kLFnFBKNBBL4GPY5d3HxuiF5sk/rG57y6SPz4nzHLndOiZZp5754qF1WSii+jO2I0 MqKg== Received: by 10.68.225.2 with SMTP id rg2mr29222285pbc.159.1342003562411; Wed, 11 Jul 2012 03:46:02 -0700 (PDT) Received: from [192.168.0.100] (ppp-115-87-72-11.revip4.asianet.co.th. [115.87.72.11]) by mx.google.com with ESMTPS id rs4sm1502361pbc.0.2012.07.11.03.46.00 (version=SSLv3 cipher=OTHER); Wed, 11 Jul 2012 03:46:01 -0700 (PDT) From: Glen Zorn To: dime@ietf.org In-Reply-To: <4FFD41E7.5030502@cisco.com> References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> Content-Type: multipart/related; type="multipart/alternative"; boundary="=-w/xML8SjsftEatq0LauS" Organization: Network Zen Date: Wed, 11 Jul 2012 17:45:58 +0700 Message-ID: <1342003558.14913.70.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 10:45:34 -0000 --=-w/xML8SjsftEatq0LauS Content-Type: multipart/alternative; boundary="=-ilaf6jxlaAHkj+2wR7+V" --=-ilaf6jxlaAHkj+2wR7+V Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote: > Dear all, Glen, > > Two more points, part of the AD review (I needed a little bit of > education before making those points, hence the part 2 in my review) > > 1. the NASREQ application is specified in RFC4005bis, but IANA points > to RFC3588bis > See > http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 > with an entry for Application id= 1, for NASREQ, with the reference > [RFC-ietf-dime-rfc3588bis-33] > > I understand the history: RFC3588 introduced this application id value > 1 in the IANA Considerations section. > However, RFC3588bis, which will obsolete RFC3588, doesn't mention this > application id (obviously, because it was assigned already). > So don't you believe that we should correct this and have, in the IANA > Considerations section of > http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a message > basically expressing: > > http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 should contain > Application id= 1, for NASREQ, with the reference > [RFC4005bis] Obviously, I don't agree. The value was registered in RFC 3588, and there is nothing to "correct" unless of course you insist, as does at least one IESG member, that the IANA references always point to the technical definition of the registered item (a position so untenable as to be absurd). > > > 2. In section 3.10 Accounting-Answer (ACA) Command > > The same level of security MUST > be applied to both the Accounting-Request and the corresponding > Accounting-Answer message. For example, if the ACR was protected > using end-to-end security techniques then the corresponding ACA > message MUST be protected in the same way; note, however, that the > definition of such techniques is outside the scope of this document. > > Note: this message about "The same level of security ..." is only > available in that section Sorry, I don't understand. > Why does this apply only to Accounting-Request and Accounting-Answer? The answer to that question is likely lost in the mists of time ;-). I surely don't remember why... > Or does it apply to all Request/Answer? ... --=-ilaf6jxlaAHkj+2wR7+V Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote:
Dear all, Glen,

Two more points, part of the AD review (I needed a little bit of education before making those points, hence the part 2 in my review)

1. the NASREQ application is specified in RFC4005bis, but IANA points to RFC3588bis
See http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45
with an entry for Application id= 1, for NASREQ, with the reference [RFC-ietf-dime-rfc3588bis-33]

I understand the history: RFC3588 introduced this application id value 1 in the IANA Considerations section.
However, RFC3588bis, which will obsolete RFC3588, doesn't mention this application id (obviously, because it was assigned already).
So don't you believe that we should correct this and have, in the IANA Considerations section of http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a message basically expressing:
    http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45  should contain
             Application id= 1, for NASREQ, with the reference [RFC4005bis]

Obviously, I don't agree.  The value was registered in RFC 3588, and there is nothing to "correct" unless of course you insist, as does at least one IESG member, that the IANA references always point to the technical definition of the registered item (a position so untenable as to be absurd).



2.  In section 3.10 Accounting-Answer (ACA) Command 
The same level of security MUST
   be applied to both the Accounting-Request and the corresponding
   Accounting-Answer message.  For example, if the ACR was protected
   using end-to-end security techniques then the corresponding ACA
   message MUST be protected in the same way; note, however, that the
   definition of such techniques is outside the scope of this document.
Note: this message about "The same level of security ..." is only available in that section

Sorry, I don't understand.

Why does this apply only to Accounting-Request and Accounting-Answer?

The answer to that question is likely lost in the mists of time ;-).  I surely don't remember why...

Or does it apply to all Request/Answer?

...
--=-ilaf6jxlaAHkj+2wR7+V-- --=-w/xML8SjsftEatq0LauS Content-ID: <1342003500.14913.68.camel@gwz-laptop> Content-Disposition: attachment; filename="face-wink.png" Content-Type: image/png; name="face-wink.png" Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlz AAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAAXdEVY dEF1dGhvcgBMYXBvIENhbGFtYW5kcmVp35EaKgAAACl0RVh0RGVzY3JpcHRpb24AQmFzZWQgb2Yg SmFrdWIgU3RlaW5lciBkZXNpZ26ghAVzAAADQUlEQVQ4jWWTW2jVdQCAv//t3HbqzF3cOluL1kWi 3DTP3NAt3bAeokKCXoISFHUEhQ9d3grxKWh0gYxJSAwSKQh8KAkqtcZWtqXTww562NnZpq6dTbdz ds75337/36/Xhd/zx/f2aUopNnL6g96koRmvhw21F13bAYBUk26gXQxUcObgx6N3NvraxsDI+30H o/EHvnhmZ0+4ofUhs6ahEZSislJgeWFRXB0fcyvl8juHPx07fV/g2/d2/dT65Pb+1MDzEc39By1U gJAAFLgW+M0EViejP//o5DNTFwa//PtFAB3gm3d7B1se39rf1bs7EuROId1JVAL0xnq0xnpIKALn L2T+a/YM7Iu0tD+1d+hIahBAP3Wsr80IRYd27Hoh4lwfRgZL6PEa9FgcFY5COMZKRefDr+ZQ/iJO +iTP7XspaljhoeMHUm26L/xD27Z1h+X8BWRplttrNQyfLXH46BgyCNCUIp1eZvxKCQWIUh5u/c7u nr5wEIhDZiC8/vqmh43VqfMIKUi2hnjjlU7erH8Uw7sBKKLYCLcKnocmJd7tyzQ9dsAIhNdvesro iNc2UVnPk1mFijlLe9jFMDJIz0JDo6PJ58j+NpRTQXkCsT5LYmcST+gdpi800ykuIT2X7W11nL/h 8ev1LD3P1tH5dC0AIdvltZTEKThU130iro/vVPECZZq2XU3nb17tbjUTyHKJl7u3UrQ288v4FX77 M4eUCuFJasOSjmbYUiPA3MTM9GVc10mbTsClTPZmV0MsplvOPcrzacxNLewf2IMWq0Pay8jiHHpl CYoFgqKLG4szlclIR3DJFIEauTZTeDvZbkS3BBIdB8dboFy4hdINLBNiBigRgO0iXUVOWYxdy7ue 0EeM8enC8rmRz0Nzd+2uemvNSiiBqRS6UoS0gJAUaI4PtotX8cnZOt9P69WSLT85ezH3nQ7QVEme KHpW9tydZHVy1WRl3Yeyjbluo63ZuEWbf4uCiXsGZ7J11ZUq2WVj/sT/XjiaSlmVB+8eV0odeyRe irREXa056gKwWA2xUA2rmWLcUWifNTibPxqemPDvuxHg1b72Th3/LQ2tN5DaEwCGrrIKNSqxTv7w R25qo/8f4VCvV0QXv9gAAAAASUVORK5CYII= --=-w/xML8SjsftEatq0LauS-- From lionel.morand@orange.com Wed Jul 11 08:55:53 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D539011E8106 for ; Wed, 11 Jul 2012 08:55:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[AWL=-0.500, BAYES_00=-2.599, EXTRA_MPART_TYPE=1, HTML_MESSAGE=0.001, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id elntdLJcOXdi for ; Wed, 11 Jul 2012 08:55:52 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id 2973011E80F9 for ; Wed, 11 Jul 2012 08:55:52 -0700 (PDT) Received: from omfedm06.si.francetelecom.fr (unknown [xx.xx.xx.2]) by omfedm11.si.francetelecom.fr (ESMTP service) with ESMTP id 9941C3B459E; Wed, 11 Jul 2012 17:56:22 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.186]) by omfedm06.si.francetelecom.fr (ESMTP service) with ESMTP id 7C03A27C053; Wed, 11 Jul 2012 17:56:22 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH01.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.02.0298.004; Wed, 11 Jul 2012 17:56:22 +0200 From: To: Glen Zorn , "dime@ietf.org" Thread-Topic: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 Thread-Index: AQHNX0RtMbsxius72UiDVPYL6m1GE5cjxKUAgAB3aLA= Date: Wed, 11 Jul 2012 15:56:11 +0000 Message-ID: <9766_1342022182_4FFDA226_9766_3407_1_6B7134B31289DC4FAF731D844122B36E0273AB@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> In-Reply-To: <1342003558.14913.70.camel@gwz-laptop> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.1] Content-Type: multipart/related; boundary="_004_6B7134B31289DC4FAF731D844122B36E0273ABPEXCVZYM13corpora_"; type="multipart/alternative" MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.7.11.151220 Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 15:55:54 -0000 --_004_6B7134B31289DC4FAF731D844122B36E0273ABPEXCVZYM13corpora_ Content-Type: multipart/alternative; boundary="_000_6B7134B31289DC4FAF731D844122B36E0273ABPEXCVZYM13corpora_" --_000_6B7134B31289DC4FAF731D844122B36E0273ABPEXCVZYM13corpora_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW5kZWVkLCBpdCBpcyBvbGQgc3R1ZmYhDQpDYW4gd2UgY29uc2lkZXIgdGhhdCB0aGlzIHBhcnQg b2YgdGV4dCBpcyBub3QgcmVsZXZhbnQgdG8gUkZDNDAwNSAoYnV0IHRvIGFueSBEaWFtZXRlciBh cHBsaWNhdGlvbikgYW5kIGNvdWxkIGJlIHJlbW92ZWQgZnJvbSB0aGlzIHNwZWMgd2l0aG91dCBp bXBhY3Q/IEkgdGhpbmsgdGhhdCB0aGlzIHBvaW50IHdpbGwgYmUgYW55d2F5IGNvdmVyZWQgYnkg dGhlIGRlZGljYXRlZCBkcmFmdCBvbiBFMkUgc2VjdXJpdHkuDQoNClJlZ2FyZHMsDQoNCkxpb25l bA0KDQpEZSA6IGRpbWUtYm91bmNlc0BpZXRmLm9yZyBbbWFpbHRvOmRpbWUtYm91bmNlc0BpZXRm Lm9yZ10gRGUgbGEgcGFydCBkZSBHbGVuIFpvcm4NCkVudm95w6kgOiBtZXJjcmVkaSAxMSBqdWls bGV0IDIwMTIgMTI6NDYNCsOAIDogZGltZUBpZXRmLm9yZw0KT2JqZXQgOiBSZTogW0RpbWVdIEFE IHJldmlldyBvZiBkcmFmdC1pZXRmLWRpbWUtcmZjNDAwNWJpcy0wOS50eHQgLSBwYXJ0IDINCg0K T24gV2VkLCAyMDEyLTA3LTExIGF0IDExOjA1ICswMjAwLCBCZW5vaXQgQ2xhaXNlIHdyb3RlOg0K RGVhciBhbGwsIEdsZW4sDQoNClR3byBtb3JlIHBvaW50cywgcGFydCBvZiB0aGUgQUQgcmV2aWV3 IChJIG5lZWRlZCBhIGxpdHRsZSBiaXQgb2YgZWR1Y2F0aW9uIGJlZm9yZSBtYWtpbmcgdGhvc2Ug cG9pbnRzLCBoZW5jZSB0aGUgcGFydCAyIGluIG15IHJldmlldykNCg0KMS4gdGhlIE5BU1JFUSBh cHBsaWNhdGlvbiBpcyBzcGVjaWZpZWQgaW4gUkZDNDAwNWJpcywgYnV0IElBTkEgcG9pbnRzIHRv IFJGQzM1ODhiaXMNClNlZSBodHRwOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL2FhYS1wYXJh bWV0ZXJzL2FhYS1wYXJhbWV0ZXJzLnhtbCNhYWEtcGFyYW1ldGVycy00NQ0Kd2l0aCBhbiBlbnRy eSBmb3IgQXBwbGljYXRpb24gaWQ9IDEsIGZvciBOQVNSRVEsIHdpdGggdGhlIHJlZmVyZW5jZSBb UkZDLWlldGYtZGltZS1yZmMzNTg4YmlzLTMzXQ0KDQpJIHVuZGVyc3RhbmQgdGhlIGhpc3Rvcnk6 IFJGQzM1ODggaW50cm9kdWNlZCB0aGlzIGFwcGxpY2F0aW9uIGlkIHZhbHVlIDEgaW4gdGhlIElB TkEgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbi4NCkhvd2V2ZXIsIFJGQzM1ODhiaXMsIHdoaWNoIHdp bGwgb2Jzb2xldGUgUkZDMzU4OCwgZG9lc24ndCBtZW50aW9uIHRoaXMgYXBwbGljYXRpb24gaWQg KG9idmlvdXNseSwgYmVjYXVzZSBpdCB3YXMgYXNzaWduZWQgYWxyZWFkeSkuDQpTbyBkb24ndCB5 b3UgYmVsaWV2ZSB0aGF0IHdlIHNob3VsZCBjb3JyZWN0IHRoaXMgYW5kIGhhdmUsIGluIHRoZSBJ QU5BIENvbnNpZGVyYXRpb25zIHNlY3Rpb24gb2YgaHR0cDovL3Rvb2xzLmlldGYub3JnL2lkL2Ry YWZ0LWlldGYtZGltZS1yZmM0MDA1YmlzLTA5LnR4dCAsIGEgbWVzc2FnZSBiYXNpY2FsbHkgZXhw cmVzc2luZzoNCiAgICBodHRwOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL2FhYS1wYXJhbWV0 ZXJzL2FhYS1wYXJhbWV0ZXJzLnhtbCNhYWEtcGFyYW1ldGVycy00NSAgc2hvdWxkIGNvbnRhaW4N CiAgICAgICAgICAgICBBcHBsaWNhdGlvbiBpZD0gMSwgZm9yIE5BU1JFUSwgd2l0aCB0aGUgcmVm ZXJlbmNlIFtSRkM0MDA1YmlzXQ0KDQpPYnZpb3VzbHksIEkgZG9uJ3QgYWdyZWUuICBUaGUgdmFs dWUgd2FzIHJlZ2lzdGVyZWQgaW4gUkZDIDM1ODgsIGFuZCB0aGVyZSBpcyBub3RoaW5nIHRvICJj b3JyZWN0IiB1bmxlc3Mgb2YgY291cnNlIHlvdSBpbnNpc3QsIGFzIGRvZXMgYXQgbGVhc3Qgb25l IElFU0cgbWVtYmVyLCB0aGF0IHRoZSBJQU5BIHJlZmVyZW5jZXMgYWx3YXlzIHBvaW50IHRvIHRo ZSB0ZWNobmljYWwgZGVmaW5pdGlvbiBvZiB0aGUgcmVnaXN0ZXJlZCBpdGVtIChhIHBvc2l0aW9u IHNvIHVudGVuYWJsZSBhcyB0byBiZSBhYnN1cmQpLg0KDQoNCg0KDQoyLiAgSW4gc2VjdGlvbiAz LjEwIEFjY291bnRpbmctQW5zd2VyIChBQ0EpIENvbW1hbmQNCg0KDQoNClRoZSBzYW1lIGxldmVs IG9mIHNlY3VyaXR5IE1VU1QNCg0KICAgYmUgYXBwbGllZCB0byBib3RoIHRoZSBBY2NvdW50aW5n LVJlcXVlc3QgYW5kIHRoZSBjb3JyZXNwb25kaW5nDQoNCiAgIEFjY291bnRpbmctQW5zd2VyIG1l c3NhZ2UuICBGb3IgZXhhbXBsZSwgaWYgdGhlIEFDUiB3YXMgcHJvdGVjdGVkDQoNCiAgIHVzaW5n IGVuZC10by1lbmQgc2VjdXJpdHkgdGVjaG5pcXVlcyB0aGVuIHRoZSBjb3JyZXNwb25kaW5nIEFD QQ0KDQogICBtZXNzYWdlIE1VU1QgYmUgcHJvdGVjdGVkIGluIHRoZSBzYW1lIHdheTsgbm90ZSwg aG93ZXZlciwgdGhhdCB0aGUNCg0KICAgZGVmaW5pdGlvbiBvZiBzdWNoIHRlY2huaXF1ZXMgaXMg b3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC4NCk5vdGU6IHRoaXMgbWVzc2FnZSBh Ym91dCAiVGhlIHNhbWUgbGV2ZWwgb2Ygc2VjdXJpdHkgLi4uIiBpcyBvbmx5IGF2YWlsYWJsZSBp biB0aGF0IHNlY3Rpb24NCg0KU29ycnksIEkgZG9uJ3QgdW5kZXJzdGFuZC4NCg0KDQpXaHkgZG9l cyB0aGlzIGFwcGx5IG9ubHkgdG8gQWNjb3VudGluZy1SZXF1ZXN0IGFuZCBBY2NvdW50aW5nLUFu c3dlcj8NCg0KVGhlIGFuc3dlciB0byB0aGF0IHF1ZXN0aW9uIGlzIGxpa2VseSBsb3N0IGluIHRo ZSBtaXN0cyBvZiB0aW1lIFs7LSldIC4gIEkgc3VyZWx5IGRvbid0IHJlbWVtYmVyIHdoeS4uLg0K DQoNCk9yIGRvZXMgaXQgYXBwbHkgdG8gYWxsIFJlcXVlc3QvQW5zd2VyPw0KDQouLi4NCgpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fCgpDZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRlbmlyIGRl cyBpbmZvcm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBuZSBkb2l2 ZW50IGRvbmMKcGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBjb3BpZXMgc2FucyBhdXRv cmlzYXRpb24uIFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFyIGVycmV1ciwgdmV1aWxs ZXogbGUgc2lnbmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVpcmUgYWluc2kgcXVlIGxl cyBwaWVjZXMgam9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1ZXMgZXRhbnQgc3VzY2Vw dGlibGVzIGQnYWx0ZXJhdGlvbiwKRnJhbmNlIFRlbGVjb20gLSBPcmFuZ2UgZGVjbGluZSB0b3V0 ZSByZXNwb25zYWJpbGl0ZSBzaSBjZSBtZXNzYWdlIGEgZXRlIGFsdGVyZSwgZGVmb3JtZSBvdSBm YWxzaWZpZS4gTWVyY2kuCgpUaGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cyBtYXkgY29u dGFpbiBjb25maWRlbnRpYWwgb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbiB0aGF0IG1heSBiZSBw cm90ZWN0ZWQgYnkgbGF3Owp0aGV5IHNob3VsZCBub3QgYmUgZGlzdHJpYnV0ZWQsIHVzZWQgb3Ig Y29waWVkIHdpdGhvdXQgYXV0aG9yaXNhdGlvbi4KSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBl bWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhpcyBt ZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMuCkFzIGVtYWlscyBtYXkgYmUgYWx0ZXJlZCwgRnJh bmNlIFRlbGVjb20gLSBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZl IGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCgo= --_000_6B7134B31289DC4FAF731D844122B36E0273ABPEXCVZYM13corpora_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT4NCjxzdHlsZT4NCnZcOioge2JlaGF2aW9yOnVybCgjZGVmYXVsdCNWTUwpO30NCm9c Oioge2JlaGF2aW9yOnVybCgjZGVmYXVsdCNWTUwpO30NCndcOioge2JlaGF2aW9yOnVybCgjZGVm YXVsdCNWTUwpO30NCi5zaGFwZSB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0KPC9zdHls ZT4NCjwhW2VuZGlmXS0tPjxzdHlsZT4NCjwhLS0NCiAvKiBGb250IERlZmluaXRpb25zICovDQog QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpTaW1TdW47DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEg MSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlNpbVN1bjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxAU2ltU3VuIjsNCglwYW5vc2UtMToyIDEg NiAwIDMgMSAxIDEgMSAxO30NCiAvKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KIHAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIiwic2VyaWYiOw0KCWNvbG9yOmJsYWNrO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxp bmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0 aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7 bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxp bms6IlByw6lmb3JtYXTDqSBIVE1MIENhciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXci Ow0KCWNvbG9yOmJsYWNrO30NCnNwYW4uUHJmb3JtYXRIVE1MQ2FyDQoJe21zby1zdHlsZS1uYW1l OiJQcsOpZm9ybWF0w6kgSFRNTCBDYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28t c3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwiOw0KCWZvbnQtZmFtaWx5OkNvbnNvbGFzOw0K CWNvbG9yOmJsYWNrO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNv bmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6 IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsN Cglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIu MHB0Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5TZWN0 aW9uMQ0KCXtwYWdlOlNlY3Rpb24xO30NCi0tPg0KPC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+ PHhtbD4NCiA8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0K PC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQogPG86c2hhcGVsYXlv dXQgdjpleHQ9ImVkaXQiPg0KICA8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCiA8 L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9y PSJ3aGl0ZSIgbGFuZz0iRlIiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFz cz0iU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OzsNCmNvbG9yOiMxRjQ5N0QiPkluZGVlZCwgaXQgaXMgb2xkIHN0 dWZmITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7DQpjb2xvcjojMUY0OTdEIj5DYW4gd2Ug Y29uc2lkZXIgdGhhdCB0aGlzIHBhcnQgb2YgdGV4dCBpcyBub3QgcmVsZXZhbnQgdG8gUkZDNDAw NSAoYnV0IHRvIGFueSBEaWFtZXRlciBhcHBsaWNhdGlvbikgYW5kIGNvdWxkIGJlIHJlbW92ZWQg ZnJvbSB0aGlzIHNwZWMgd2l0aG91dA0KIGltcGFjdD8gSSB0aGluayB0aGF0IHRoaXMgcG9pbnQg d2lsbCBiZSBhbnl3YXkgY292ZXJlZCBieSB0aGUgZGVkaWNhdGVkIGRyYWZ0IG9uIEUyRSBzZWN1 cml0eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ow0KY29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OzsNCmNvbG9yOiMxRjQ5N0QiPlJlZ2FyZHMsPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OzsNCmNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7DQpjb2xvcjojMUY0OTdEIj5MaW9uZWw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ow0KY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1 QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rh aG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ow0KY29sb3I6d2luZG93dGV4dCI+RGUm bmJzcDs6PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eToNCiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOndpbmRv d3RleHQiPiBkaW1lLWJvdW5jZXNAaWV0Zi5vcmcgW21haWx0bzpkaW1lLWJvdW5jZXNAaWV0Zi5v cmddDQo8Yj5EZSBsYSBwYXJ0IGRlPC9iPiBHbGVuIFpvcm48YnI+DQo8Yj5FbnZvecOpJm5ic3A7 OjwvYj4gbWVyY3JlZGkgMTEganVpbGxldCAyMDEyIDEyOjQ2PGJyPg0KPGI+w4AmbmJzcDs6PC9i PiBkaW1lQGlldGYub3JnPGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBSZTogW0RpbWVdIEFEIHJl dmlldyBvZiBkcmFmdC1pZXRmLWRpbWUtcmZjNDAwNWJpcy0wOS50eHQgLSBwYXJ0IDI8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBXZWQsIDIwMTItMDct MTEgYXQgMTE6MDUgJiM0MzswMjAwLCBCZW5vaXQgQ2xhaXNlIHdyb3RlOiA8bzpwPg0KPC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RGVhciBhbGwsIEdsZW4sPGJyPg0KPGJyPg0KVHdv IG1vcmUgcG9pbnRzLCBwYXJ0IG9mIHRoZSBBRCByZXZpZXcgKEkgbmVlZGVkIGEgbGl0dGxlIGJp dCBvZiBlZHVjYXRpb24gYmVmb3JlIG1ha2luZyB0aG9zZSBwb2ludHMsIGhlbmNlIHRoZSBwYXJ0 IDIgaW4gbXkgcmV2aWV3KTxicj4NCjxicj4NCjEuIHRoZSBOQVNSRVEgYXBwbGljYXRpb24gaXMg c3BlY2lmaWVkIGluIFJGQzQwMDViaXMsIGJ1dCBJQU5BIHBvaW50cyB0byBSRkMzNTg4YmlzPGJy Pg0KU2VlIDxhIGhyZWY9Imh0dHA6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVudHMvYWFhLXBhcmFt ZXRlcnMvYWFhLXBhcmFtZXRlcnMueG1sI2FhYS1wYXJhbWV0ZXJzLTQ1Ij4NCmh0dHA6Ly93d3cu aWFuYS5vcmcvYXNzaWdubWVudHMvYWFhLXBhcmFtZXRlcnMvYWFhLXBhcmFtZXRlcnMueG1sI2Fh YS1wYXJhbWV0ZXJzLTQ1PC9hPg0KPGJyPg0Kd2l0aCBhbiBlbnRyeSBmb3IgQXBwbGljYXRpb24g aWQ9IDEsIGZvciBOQVNSRVEsIHdpdGggdGhlIHJlZmVyZW5jZSBbUkZDLWlldGYtZGltZS1yZmMz NTg4YmlzLTMzXQ0KPGJyPg0KPGJyPg0KSSB1bmRlcnN0YW5kIHRoZSBoaXN0b3J5OiBSRkMzNTg4 IGludHJvZHVjZWQgdGhpcyBhcHBsaWNhdGlvbiBpZCB2YWx1ZSAxIGluIHRoZSBJQU5BIENvbnNp ZGVyYXRpb25zIHNlY3Rpb24uDQo8YnI+DQpIb3dldmVyLCBSRkMzNTg4YmlzLCB3aGljaCB3aWxs IG9ic29sZXRlIFJGQzM1ODgsIGRvZXNuJ3QgbWVudGlvbiB0aGlzIGFwcGxpY2F0aW9uIGlkIChv YnZpb3VzbHksIGJlY2F1c2UgaXQgd2FzIGFzc2lnbmVkIGFscmVhZHkpLg0KPGJyPg0KU28gZG9u J3QgeW91IGJlbGlldmUgdGhhdCB3ZSBzaG91bGQgY29ycmVjdCB0aGlzIGFuZCBoYXZlLCBpbiB0 aGUgSUFOQSBDb25zaWRlcmF0aW9ucyBzZWN0aW9uIG9mDQo8YSBocmVmPSJodHRwOi8vdG9vbHMu aWV0Zi5vcmcvaWQvZHJhZnQtaWV0Zi1kaW1lLXJmYzQwMDViaXMtMDkudHh0Ij5odHRwOi8vdG9v bHMuaWV0Zi5vcmcvaWQvZHJhZnQtaWV0Zi1kaW1lLXJmYzQwMDViaXMtMDkudHh0PC9hPiAsIGEg bWVzc2FnZSBiYXNpY2FsbHkgZXhwcmVzc2luZzo8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsgPGEg aHJlZj0iaHR0cDovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy9hYWEtcGFyYW1ldGVycy9hYWEt cGFyYW1ldGVycy54bWwjYWFhLXBhcmFtZXRlcnMtNDUiPg0KaHR0cDovL3d3dy5pYW5hLm9yZy9h c3NpZ25tZW50cy9hYWEtcGFyYW1ldGVycy9hYWEtcGFyYW1ldGVycy54bWwjYWFhLXBhcmFtZXRl cnMtNDU8L2E+Jm5ic3A7IHNob3VsZCBjb250YWluPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEFwcGxp Y2F0aW9uIGlkPSAxLCBmb3IgTkFTUkVRLCB3aXRoIHRoZSByZWZlcmVuY2UgW1JGQzQwMDViaXNd IDxvOnA+DQo8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpPYnZpb3VzbHks IEkgZG9uJ3QgYWdyZWUuJm5ic3A7IFRoZSB2YWx1ZSB3YXMgcmVnaXN0ZXJlZCBpbiBSRkMgMzU4 OCwgYW5kIHRoZXJlIGlzIG5vdGhpbmcgdG8gJnF1b3Q7Y29ycmVjdCZxdW90OyB1bmxlc3Mgb2Yg Y291cnNlIHlvdSBpbnNpc3QsIGFzIGRvZXMgYXQgbGVhc3Qgb25lIElFU0cgbWVtYmVyLCB0aGF0 IHRoZSBJQU5BIHJlZmVyZW5jZXMgYWx3YXlzIHBvaW50IHRvIHRoZSB0ZWNobmljYWwgZGVmaW5p dGlvbiBvZiB0aGUgcmVnaXN0ZXJlZCBpdGVtIChhIHBvc2l0aW9uDQogc28gdW50ZW5hYmxlIGFz IHRvIGJlIGFic3VyZCkuPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQoyLiZuYnNwOyBJbiBzZWN0aW9uIDMuMTAgQWNjb3Vu dGluZy1BbnN3ZXIgKEFDQSkgQ29tbWFuZCA8bzpwPjwvbzpwPjwvcD4NCjxwcmU+PG86cD4mbmJz cDs8L286cD48L3ByZT4NCjxwcmU+VGhlIHNhbWUgbGV2ZWwgb2Ygc2VjdXJpdHkgTVVTVDxvOnA+ PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBiZSBhcHBsaWVkIHRvIGJvdGggdGhlIEFj Y291bnRpbmctUmVxdWVzdCBhbmQgdGhlIGNvcnJlc3BvbmRpbmc8bzpwPjwvbzpwPjwvcHJlPg0K PHByZT4mbmJzcDsmbmJzcDsgQWNjb3VudGluZy1BbnN3ZXIgbWVzc2FnZS4mbmJzcDsgRm9yIGV4 YW1wbGUsIGlmIHRoZSBBQ1Igd2FzIHByb3RlY3RlZDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZu YnNwOyZuYnNwOyB1c2luZyBlbmQtdG8tZW5kIHNlY3VyaXR5IHRlY2huaXF1ZXMgdGhlbiB0aGUg Y29ycmVzcG9uZGluZyBBQ0E8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsgbWVz c2FnZSBNVVNUIGJlIHByb3RlY3RlZCBpbiB0aGUgc2FtZSB3YXk7IG5vdGUsIGhvd2V2ZXIsIHRo YXQgdGhlPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IGRlZmluaXRpb24gb2Yg c3VjaCB0ZWNobmlxdWVzIGlzIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgZG9jdW1lbnQuPG86 cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5vdGU6IHRoaXMgbWVzc2FnZSBh Ym91dCAmcXVvdDtUaGUgc2FtZSBsZXZlbCBvZiBzZWN1cml0eSAuLi4mcXVvdDsgaXMgb25seSBh dmFpbGFibGUgaW4gdGhhdCBzZWN0aW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnI+DQpTb3JyeSwgSSBkb24ndCB1bmRlcnN0YW5kLjxicj4NCjxicj4NCjxicj4NCjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2h5IGRvZXMgdGhpcyBhcHBseSBv bmx5IHRvIEFjY291bnRpbmctUmVxdWVzdCBhbmQgQWNjb3VudGluZy1BbnN3ZXI/PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpUaGUgYW5zd2VyIHRvIHRoYXQgcXVl c3Rpb24gaXMgbGlrZWx5IGxvc3QgaW4gdGhlIG1pc3RzIG9mIHRpbWUgPGltZyBib3JkZXI9IjAi IHdpZHRoPSIxNiIgaGVpZ2h0PSIxNiIgaWQ9Il94MDAwMF9pMTAyNSIgc3JjPSJjaWQ6aW1hZ2Uw MDEucG5nQDAxQ0Q1RjhFLjcxRkUyQzEwIiBhbHQ9IjstKSI+LiZuYnNwOyBJIHN1cmVseSBkb24n dCByZW1lbWJlciB3aHkuLi48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPk9yIGRvZXMgaXQgYXBwbHkgdG8gYWxsIFJlcXVlc3QvQW5zd2VyPzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KLi4uIDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8UFJFPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18KCkNlIG1lc3NhZ2UgZXQgc2VzIHBpZWNlcyBqb2lu dGVzIHBldXZlbnQgY29udGVuaXIgZGVzIGluZm9ybWF0aW9ucyBjb25maWRlbnRpZWxsZXMgb3Ug cHJpdmlsZWdpZWVzIGV0IG5lIGRvaXZlbnQgZG9uYwpwYXMgZXRyZSBkaWZmdXNlcywgZXhwbG9p dGVzIG91IGNvcGllcyBzYW5zIGF1dG9yaXNhdGlvbi4gU2kgdm91cyBhdmV6IHJlY3UgY2UgbWVz c2FnZSBwYXIgZXJyZXVyLCB2ZXVpbGxleiBsZSBzaWduYWxlcgphIGwnZXhwZWRpdGV1ciBldCBs ZSBkZXRydWlyZSBhaW5zaSBxdWUgbGVzIHBpZWNlcyBqb2ludGVzLiBMZXMgbWVzc2FnZXMgZWxl Y3Ryb25pcXVlcyBldGFudCBzdXNjZXB0aWJsZXMgZCdhbHRlcmF0aW9uLApGcmFuY2UgVGVsZWNv bSAtIE9yYW5nZSBkZWNsaW5lIHRvdXRlIHJlc3BvbnNhYmlsaXRlIHNpIGNlIG1lc3NhZ2UgYSBl dGUgYWx0ZXJlLCBkZWZvcm1lIG91IGZhbHNpZmllLiBNZXJjaS4KClRoaXMgbWVzc2FnZSBhbmQg aXRzIGF0dGFjaG1lbnRzIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGlu Zm9ybWF0aW9uIHRoYXQgbWF5IGJlIHByb3RlY3RlZCBieSBsYXc7CnRoZXkgc2hvdWxkIG5vdCBi ZSBkaXN0cmlidXRlZCwgdXNlZCBvciBjb3BpZWQgd2l0aG91dCBhdXRob3Jpc2F0aW9uLgpJZiB5 b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVtYWlsIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBz ZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cy4KQXMgZW1h aWxzIG1heSBiZSBhbHRlcmVkLCBGcmFuY2UgVGVsZWNvbSAtIE9yYW5nZSBpcyBub3QgbGlhYmxl IGZvciBtZXNzYWdlcyB0aGF0IGhhdmUgYmVlbiBtb2RpZmllZCwgY2hhbmdlZCBvciBmYWxzaWZp ZWQuClRoYW5rIHlvdS4KPC9QUkU+PC9ib2R5Pg0KPC9odG1sPg0K --_000_6B7134B31289DC4FAF731D844122B36E0273ABPEXCVZYM13corpora_-- --_004_6B7134B31289DC4FAF731D844122B36E0273ABPEXCVZYM13corpora_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=1052; creation-date="Wed, 11 Jul 2012 15:56:10 GMT"; modification-date="Wed, 11 Jul 2012 15:56:10 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlz AAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAAXdEVY dEF1dGhvcgBMYXBvIENhbGFtYW5kcmVp35EaKgAAACl0RVh0RGVzY3JpcHRpb24AQmFzZWQgb2Yg SmFrdWIgU3RlaW5lciBkZXNpZ26ghAVzAAADQUlEQVQ4jWWTW2jVdQCAv//t3HbqzF3cOluL1kWi 3DTP3NAt3bAeokKCXoISFHUEhQ9d3grxKWh0gYxJSAwSKQh8KAkqtcZWtqXTww562NnZpq6dTbdz ds75337/36/Xhd/zx/f2aUopNnL6g96koRmvhw21F13bAYBUk26gXQxUcObgx6N3NvraxsDI+30H o/EHvnhmZ0+4ofUhs6ahEZSislJgeWFRXB0fcyvl8juHPx07fV/g2/d2/dT65Pb+1MDzEc39By1U gJAAFLgW+M0EViejP//o5DNTFwa//PtFAB3gm3d7B1se39rf1bs7EuROId1JVAL0xnq0xnpIKALn L2T+a/YM7Iu0tD+1d+hIahBAP3Wsr80IRYd27Hoh4lwfRgZL6PEa9FgcFY5COMZKRefDr+ZQ/iJO +iTP7XspaljhoeMHUm26L/xD27Z1h+X8BWRplttrNQyfLXH46BgyCNCUIp1eZvxKCQWIUh5u/c7u nr5wEIhDZiC8/vqmh43VqfMIKUi2hnjjlU7erH8Uw7sBKKLYCLcKnocmJd7tyzQ9dsAIhNdvesro iNc2UVnPk1mFijlLe9jFMDJIz0JDo6PJ58j+NpRTQXkCsT5LYmcST+gdpi800ykuIT2X7W11nL/h 8ev1LD3P1tH5dC0AIdvltZTEKThU130iro/vVPECZZq2XU3nb17tbjUTyHKJl7u3UrQ288v4FX77 M4eUCuFJasOSjmbYUiPA3MTM9GVc10mbTsClTPZmV0MsplvOPcrzacxNLewf2IMWq0Pay8jiHHpl CYoFgqKLG4szlclIR3DJFIEauTZTeDvZbkS3BBIdB8dboFy4hdINLBNiBigRgO0iXUVOWYxdy7ue 0EeM8enC8rmRz0Nzd+2uemvNSiiBqRS6UoS0gJAUaI4PtotX8cnZOt9P69WSLT85ezH3nQ7QVEme KHpW9tydZHVy1WRl3Yeyjbluo63ZuEWbf4uCiXsGZ7J11ZUq2WVj/sT/XjiaSlmVB+8eV0odeyRe irREXa056gKwWA2xUA2rmWLcUWifNTibPxqemPDvuxHg1b72Th3/LQ2tN5DaEwCGrrIKNSqxTv7w R25qo/8f4VCvV0QXv9gAAAAASUVORK5CYII= --_004_6B7134B31289DC4FAF731D844122B36E0273ABPEXCVZYM13corpora_-- From glenzorn@gmail.com Wed Jul 11 21:38:47 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 992C421F8577 for ; Wed, 11 Jul 2012 21:38:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.473 X-Spam-Level: X-Spam-Status: No, score=-3.473 tagged_above=-999 required=5 tests=[AWL=0.125, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fhyuKd7LQ4Ku for ; Wed, 11 Jul 2012 21:38:46 -0700 (PDT) Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id 6AA6D21F8575 for ; Wed, 11 Jul 2012 21:38:46 -0700 (PDT) Received: by obbwc20 with SMTP id wc20so2802335obb.31 for ; Wed, 11 Jul 2012 21:39:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=PBUE6W5a9PIRBDxcJwKHLIwgei0UC+9KCdDwdctRGIA=; b=T3OPPxsU13JPWUxnoMWDF4OBqnU1uw2xyTA9oYLFUoCSh1nJCQU6jub2JBVvKPN4LZ lRGj8uQ9zooj9yltiRdcej9cWJ3pirGSaG5VVxZyo6pF5XoYJkvWQqjJYZJSUvHeBj72 Nebmufv2lNMNdhEh3iMVPafuRuxsn7Bui8jzb4jFaDR3fvqq2Yf86jyoXTKL3jmXpUAX zRX3xcFv40L/oU+n6I2Fnl6dPznj5r3Et+AbNb2UKp3HRGe6K1eQsjj5+iNGwND4zxe6 LXM/WiDZQOwBwlXR8kM5A+sP+DmAI77k72ewQACx+J6Bc3dWjT+CskC1aG+T+fg9qY64 FEhA== Received: by 10.50.57.168 with SMTP id j8mr5741480igq.46.1342067958280; Wed, 11 Jul 2012 21:39:18 -0700 (PDT) Received: from [192.168.0.100] (ppp-115-87-72-11.revip4.asianet.co.th. [115.87.72.11]) by mx.google.com with ESMTPS id zu2sm14013680igb.0.2012.07.11.21.39.15 (version=SSLv3 cipher=OTHER); Wed, 11 Jul 2012 21:39:17 -0700 (PDT) From: Glen Zorn To: lionel.morand@orange.com In-Reply-To: <9766_1342022182_4FFDA226_9766_3407_1_6B7134B31289DC4FAF731D844122B36E0273AB@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> <9766_1342022182_4FFDA226_9766_3407_1_6B7134B31289DC4FAF731D844122B36E0273AB@PEXCVZYM13.corporate.adroot.infra.ftgroup> Content-Type: multipart/alternative; boundary="=-zuJIM7VRYEzG895keSRH" Organization: Network Zen Date: Thu, 12 Jul 2012 11:39:13 +0700 Message-ID: <1342067953.14913.81.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: Bernard , "dime@ietf.org" Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2012 04:38:47 -0000 --=-zuJIM7VRYEzG895keSRH Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Wed, 2012-07-11 at 15:56 +0000, lionel.morand@orange.com wrote: > Indeed, it is old stuff! > > Can we consider that this part of text is not relevant to RFC4005 (but > to any Diameter application) and could be removed from this spec > without impact? I think that this point will be anyway covered by the > dedicated draft on E2E security. I'm not at sure of that; I am pretty sure that there was a good reason why the same security in both directions was specified for accounting messages but I wasn't really part of those discussions. Maybe Bernard remembers? ... --=-zuJIM7VRYEzG895keSRH Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Wed, 2012-07-11 at 15:56 +0000, lionel.morand@orange.com wrote:
Indeed, it is old stuff!

Can we consider that this part of text is not relevant to RFC4005 (but to any Diameter application) and could be removed from this spec without impact? I think that this point will be anyway covered by the dedicated draft on E2E security.

I'm not at sure of that; I am pretty sure that there was a good reason why the same security in both directions was specified for accounting messages but I wasn't really part of those discussions.  Maybe Bernard remembers?

...
--=-zuJIM7VRYEzG895keSRH-- From iesg-secretary@ietf.org Thu Jul 12 10:23:46 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3485711E80C7; Thu, 12 Jul 2012 10:23:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.577 X-Spam-Level: X-Spam-Status: No, score=-102.577 tagged_above=-999 required=5 tests=[AWL=0.022, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hZp-lgcU3L9z; Thu, 12 Jul 2012 10:23:45 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65FE811E80F2; Thu, 12 Jul 2012 10:23:45 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce X-Test-IDTracker: no X-IETF-IDTracker: 4.30p3 Message-ID: <20120712172345.25859.45073.idtracker@ietfa.amsl.com> Date: Thu, 12 Jul 2012 10:23:45 -0700 Cc: dime mailing list , dime chair , RFC Editor Subject: [Dime] Protocol Action: 'Diameter Priority Attribute Value Pairs' to Proposed Standard (draft-ietf-dime-priority-avps-06.txt) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2012 17:23:46 -0000 The IESG has approved the following document: - 'Diameter Priority Attribute Value Pairs' (draft-ietf-dime-priority-avps-06.txt) as Proposed Standard This document is the product of the Diameter Maintenance and Extensions Working Group. The IESG contact persons are Benoit Claise and Ronald Bonica. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-ietf-dime-priority-avps/ Technical Summary This document defines Attribute-Value Pair (AVP) containers for various priority parameters for use with Diameter and the AAA framework. The parameters themselves are defined in several different protocols that operate at either the network or application layer. Working Group Summary The document has had an extensive review by the DIME WG. The document was also reviewed and discussed by people from 3GPP. The latest version is the result of the consensus reached after discussion. Document Quality The document is complete, straightforward, simple and well-written. Personnel Lionel Morand is the Document Shepherd for this document. Dan Romascanu was the first responsible Area Director. Benoit Claise is the current responsible Area Director. From bclaise@cisco.com Thu Jul 12 14:00:20 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9CAC311E80EF for ; Thu, 12 Jul 2012 14:00:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.392 X-Spam-Level: X-Spam-Status: No, score=-10.392 tagged_above=-999 required=5 tests=[AWL=0.207, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id goW7teHCqhVP for ; Thu, 12 Jul 2012 14:00:20 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 8E92211E80CF for ; Thu, 12 Jul 2012 14:00:19 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6CL02Wh010764; Thu, 12 Jul 2012 23:00:03 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6CKxw6p021255; Thu, 12 Jul 2012 22:59:59 +0200 (CEST) Message-ID: <4FFF3ACF.70406@cisco.com> Date: Thu, 12 Jul 2012 22:59:59 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: dime mailing list References: <20120712172345.25859.45073.idtracker@ietfa.amsl.com> In-Reply-To: <20120712172345.25859.45073.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: dime chair , RFC Editor Subject: Re: [Dime] Protocol Action: 'Diameter Priority Attribute Value Pairs' to Proposed Standard (draft-ietf-dime-priority-avps-06.txt) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2012 21:00:20 -0000 Congratulations to authors and the WG chairs for completing this document. Regards, Benoit > The IESG has approved the following document: > - 'Diameter Priority Attribute Value Pairs' > (draft-ietf-dime-priority-avps-06.txt) as Proposed Standard > > This document is the product of the Diameter Maintenance and Extensions > Working Group. > > The IESG contact persons are Benoit Claise and Ronald Bonica. > > A URL of this Internet Draft is: > http://datatracker.ietf.org/doc/draft-ietf-dime-priority-avps/ > > > > > Technical Summary > > This document defines Attribute-Value Pair (AVP) containers for various > priority parameters for use with Diameter and the AAA framework. The > parameters themselves are defined in several different protocols that > operate at either the network or application layer. > > Working Group Summary > > The document has had an extensive review by the DIME WG. The > document was also reviewed and discussed by people from 3GPP. > The latest version is the result of the consensus reached > after discussion. > > Document Quality > > The document is complete, straightforward, simple and > well-written. > > Personnel > > Lionel Morand is the Document Shepherd for this document. > Dan Romascanu was the first responsible Area Director. > Benoit Claise is the current responsible Area Director. > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime > > From bclaise@cisco.com Thu Jul 12 14:02:55 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5409111E80EF for ; Thu, 12 Jul 2012 14:02:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.397 X-Spam-Level: X-Spam-Status: No, score=-10.397 tagged_above=-999 required=5 tests=[AWL=0.201, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rH-sm1g30e5F for ; Thu, 12 Jul 2012 14:02:54 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 07B5111E80CF for ; Thu, 12 Jul 2012 14:02:53 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6CL3Qde011034; Thu, 12 Jul 2012 23:03:26 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6CL3O8o023129; Thu, 12 Jul 2012 23:03:24 +0200 (CEST) Message-ID: <4FFF3B9D.4040905@cisco.com> Date: Thu, 12 Jul 2012 23:03:25 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: Glen Zorn References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> <1342002286.14913.56.camel@gwz-laptop> In-Reply-To: <1342002286.14913.56.camel@gwz-laptop> Content-Type: multipart/alternative; boundary="------------060506010204010306020804" Cc: dime@ietf.org Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2012 21:02:55 -0000 This is a multi-part message in MIME format. --------------060506010204010306020804 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit On 11/07/2012 12:24, Glen Zorn wrote: > On Wed, 2012-07-11 at 09:09 +0200, Benoit Claise wrote: >> Hi Lionel, >> >>> Hi Benoit, >>> >>> - I could not find the meaning of * in, for example, >>> >>> [ CHAP-Auth ] >>> [ CHAP-Challenge ] >>> * [ Framed-Compression ] >>> [ Framed-Interface-Id ] >>> [ Framed-IP-Address ] >>> * [ Framed-IPv6-Prefix ] >>> [ Framed-IP-Netmask ] >>> [ Framed-MTU ] >>> [ Framed-Protocol ] >>> [ ARAP-Password ] >>> [ ARAP-Security ] >>> * [ ARAP-Security-Data ] >>> * [ Login-IP-Host ] >>> * [ Login-IPv6-Host ] >>> [ Login-LAT-Group ] >>> [ Login-LAT-Node ] >>> [ Login-LAT-Port ] >>> [ Login-LAT-Service ] >>> * [ Tunneling ] >>> * [ Proxy-Info ] >>> * [ Route-Record ] >>> * [ AVP ] >>> */[[LM]]/*the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6). >>> >> BC> Thanks for the education. >> Is this so obvious to the Diameter readers, including the newcomers, >> that we don't need to mention it? >> In other words, am I the only one NOT knowing this? ;-) > > Hmm. draft-ietf-dime-rfc3588bis is listed as a normative reference > in 4005bis and RFC 5238 is listed as a normative reference in > draft-ietf-dime-rfc3588bis. My understanding is that one cannot > expect to read and understand an RFC without having read and > understood the normative references thereof. Agreed on the principle, except that, in this case, we speak about an "*", which could mean something specific for this document: optional, a reference to something else, etc... Regards, Benoit. > Is my understanding correct? If so, then there is in fact no need to > mention it since any reader cognizant of that requirement will already > know (or could easily refresh the memory of) what the notation means. > >> >> Regards, Benoit. >> >>> Regards, >>> >>> Lionel >>> _________________________________________________________________________________________________________________________ >>> >>> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc >>> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler >>> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, >>> France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. >>> >>> This message and its attachments may contain confidential or privileged information that may be protected by law; >>> they should not be distributed, used or copied without authorisation. >>> If you have received this email in error, please notify the sender and delete this message and its attachments. >>> As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified. >>> Thank you. >> >> >> _______________________________________________ >> DiME mailing list >> DiME@ietf.org >> https://www.ietf.org/mailman/listinfo/dime > > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime --------------060506010204010306020804 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
On 11/07/2012 12:24, Glen Zorn wrote:
On Wed, 2012-07-11 at 09:09 +0200, Benoit Claise wrote:
Hi Lionel,

Hi Benoit,
 
- I could not find the meaning of * in, for example,
 
                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]
[[LM]] the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6).
 
BC> Thanks for the education.
Is this so obvious to the Diameter readers, including the newcomers, that we don't need to mention it?
In other words, am I the only one NOT knowing this? ;-)

Hmm.  draft-ietf-dime-rfc3588bis is listed as  a normative reference in 4005bis and RFC 5238 is listed as a normative reference in draft-ietf-dime-rfc3588bis.  My understanding is that one cannot expect to read and understand an RFC without having read and understood the normative references thereof.
Agreed on the principle, except that, in this case, we speak about an "*", which could mean something specific for this document: optional, a reference to something else, etc...

Regards, Benoit.


Is my understanding correct?  If so, then there is in fact no need to mention it since any reader cognizant of that requirement will already know (or could easily refresh the memory of) what the notation means.


Regards, Benoit.

Regards,
 
Lionel

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified.
Thank you.



_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime




_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime


--------------060506010204010306020804-- From bclaise@cisco.com Thu Jul 12 14:45:21 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09EE811E80E3 for ; Thu, 12 Jul 2012 14:45:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.402 X-Spam-Level: X-Spam-Status: No, score=-10.402 tagged_above=-999 required=5 tests=[AWL=0.196, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FdGMs9L-xNAL for ; Thu, 12 Jul 2012 14:45:20 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 6E80311E80CB for ; Thu, 12 Jul 2012 14:45:19 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6CL9wZ1011689; Thu, 12 Jul 2012 23:09:59 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6CL9vsw026746; Thu, 12 Jul 2012 23:09:57 +0200 (CEST) Message-ID: <4FFF3D25.2060502@cisco.com> Date: Thu, 12 Jul 2012 23:09:57 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: Glen Zorn References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> In-Reply-To: <1342003558.14913.70.camel@gwz-laptop> Content-Type: multipart/alternative; boundary="------------000200050109070909090902" Cc: Michelle Cotton , dime@ietf.org Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2012 21:45:21 -0000 This is a multi-part message in MIME format. --------------000200050109070909090902 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Glen, > On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote: >> Dear all, Glen, >> >> Two more points, part of the AD review (I needed a little bit of >> education before making those points, hence the part 2 in my review) >> >> 1. the NASREQ application is specified in RFC4005bis, but IANA points >> to RFC3588bis >> See >> http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 >> >> with an entry for Application id= 1, for NASREQ, with the reference >> [RFC-ietf-dime-rfc3588bis-33] >> >> I understand the history: RFC3588 introduced this application id >> value 1 in the IANA Considerations section. >> However, RFC3588bis, which will obsolete RFC3588, doesn't mention >> this application id (obviously, because it was assigned already). >> So don't you believe that we should correct this and have, in the >> IANA Considerations section of >> http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a >> message basically expressing: >> http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 >> should contain >> Application id= 1, for NASREQ, with the reference >> [RFC4005bis] > > Obviously, I don't agree. The value was registered in RFC 3588, and > there is nothing to "correct" unless of course you insist, as does at > least one IESG member, that the IANA references always point to the > technical definition of the registered item (a position so untenable > as to be absurd). So right now, "application id = 1" points to RFC 3588bis, which is neither the RFC that registered the value (RFC3588), nor the NASREQ specification (RFC4005bis), so the pointer to RFC 3588bis seems pretty useless to me. Anyway, I sent a private email to Michelle Cotton a few days ago (and I copied her again on this email thread). My advice is to simply follow the IANA guidance. Regards, Benoit. > >> >> >> 2. In section 3.10 Accounting-Answer (ACA) Command >> The same level of security MUST >> be applied to both the Accounting-Request and the corresponding >> Accounting-Answer message. For example, if the ACR was protected >> using end-to-end security techniques then the corresponding ACA >> message MUST be protected in the same way; note, however, that the >> definition of such techniques is outside the scope of this document. >> Note: this message about "The same level of security ..." is only >> available in that section > > Sorry, I don't understand. > >> Why does this apply only to Accounting-Request and Accounting-Answer? > > The answer to that question is likely lost in the mists of time ;-). > I surely don't remember why... > >> Or does it apply to all Request/Answer? > > ... > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime --------------000200050109070909090902 Content-Type: multipart/related; boundary="------------030703010108010501030200" --------------030703010108010501030200 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Glen,
On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote:
Dear all, Glen,

Two more points, part of the AD review (I needed a little bit of education before making those points, hence the part 2 in my review)

1. the NASREQ application is specified in RFC4005bis, but IANA points to RFC3588bis
See http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45
with an entry for Application id= 1, for NASREQ, with the reference [RFC-ietf-dime-rfc3588bis-33]

I understand the history: RFC3588 introduced this application id value 1 in the IANA Considerations section.
However, RFC3588bis, which will obsolete RFC3588, doesn't mention this application id (obviously, because it was assigned already).
So don't you believe that we should correct this and have, in the IANA Considerations section of http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a message basically expressing:
    http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45  should contain
             Application id= 1, for NASREQ, with the reference [RFC4005bis]

Obviously, I don't agree.  The value was registered in RFC 3588, and there is nothing to "correct" unless of course you insist, as does at least one IESG member, that the IANA references always point to the technical definition of the registered item (a position so untenable as to be absurd).
So right now, "application id = 1" points to RFC 3588bis, which is neither the RFC that registered the value (RFC3588), nor the NASREQ specification (RFC4005bis), so the pointer to RFC 3588bis seems pretty useless to me.
Anyway, I sent a private email to Michelle Cotton a few days ago (and I copied her again on this email thread).
My advice is to simply follow the IANA guidance.

Regards, Benoit.



2.  In section 3.10 Accounting-Answer (ACA) Command 
The same level of security MUST
   be applied to both the Accounting-Request and the corresponding
   Accounting-Answer message.  For example, if the ACR was protected
   using end-to-end security techniques then the corresponding ACA
   message MUST be protected in the same way; note, however, that the
   definition of such techniques is outside the scope of this document.
Note: this message about "The same level of security ..." is only available in that section

Sorry, I don't understand.

Why does this apply only to Accounting-Request and Accounting-Answer?

The answer to that question is likely lost in the mists of time ;-).  I surely don't remember why...

Or does it apply to all Request/Answer?

... 


_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime


--------------030703010108010501030200 Content-Type: image/png Content-Transfer-Encoding: base64 Content-ID: iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlw SFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoA AAAXdEVYdEF1dGhvcgBMYXBvIENhbGFtYW5kcmVp35EaKgAAACl0RVh0RGVzY3JpcHRpb24A QmFzZWQgb2YgSmFrdWIgU3RlaW5lciBkZXNpZ26ghAVzAAADQUlEQVQ4jWWTW2jVdQCAv//t 3HbqzF3cOluL1kWi3DTP3NAt3bAeokKCXoISFHUEhQ9d3grxKWh0gYxJSAwSKQh8KAkqtcZW tqXTww562NnZpq6dTbdzds75337/36/Xhd/zx/f2aUopNnL6g96koRmvhw21F13bAYBUk26g XQxUcObgx6N3NvraxsDI+30Ho/EHvnhmZ0+4ofUhs6ahEZSislJgeWFRXB0fcyvl8juHPx07 fV/g2/d2/dT65Pb+1MDzEc39By1UgJAAFLgW+M0EViejP//o5DNTFwa//PtFAB3gm3d7B1se 39rf1bs7EuROId1JVAL0xnq0xnpIKALnL2T+a/YM7Iu0tD+1d+hIahBAP3Wsr80IRYd27Hoh 4lwfRgZL6PEa9FgcFY5COMZKRefDr+ZQ/iJO+iTP7XspaljhoeMHUm26L/xD27Z1h+X8BWRp lttrNQyfLXH46BgyCNCUIp1eZvxKCQWIUh5u/c7unr5wEIhDZiC8/vqmh43VqfMIKUi2hnjj lU7erH8Uw7sBKKLYCLcKnocmJd7tyzQ9dsAIhNdvesroiNc2UVnPk1mFijlLe9jFMDJIz0JD o6PJ58j+NpRTQXkCsT5LYmcST+gdpi800ykuIT2X7W11nL/h8ev1LD3P1tH5dC0AIdvltZTE KThU130iro/vVPECZZq2XU3nb17tbjUTyHKJl7u3UrQ288v4FX77M4eUCuFJasOSjmbYUiPA 3MTM9GVc10mbTsClTPZmV0MsplvOPcrzacxNLewf2IMWq0Pay8jiHHplCYoFgqKLG4szlclI R3DJFIEauTZTeDvZbkS3BBIdB8dboFy4hdINLBNiBigRgO0iXUVOWYxdy7ue0EeM8enC8rmR z0Nzd+2uemvNSiiBqRS6UoS0gJAUaI4PtotX8cnZOt9P69WSLT85ezH3nQ7QVEmeKHpW9tyd ZHVy1WRl3Yeyjbluo63ZuEWbf4uCiXsGZ7J11ZUq2WVj/sT/XjiaSlmVB+8eV0odeyReirRE Xa056gKwWA2xUA2rmWLcUWifNTibPxqemPDvuxHg1b72Th3/LQ2tN5DaEwCGrrIKNSqxTv7w R25qo/8f4VCvV0QXv9gAAAAASUVORK5CYII= --------------030703010108010501030200-- --------------000200050109070909090902-- From lionel.morand@orange.com Thu Jul 12 14:58:12 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 483A011E80EE for ; Thu, 12 Jul 2012 14:58:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.431 X-Spam-Level: X-Spam-Status: No, score=-2.431 tagged_above=-999 required=5 tests=[AWL=0.167, BAYES_00=-2.599, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EvlrmgynHO4G for ; Thu, 12 Jul 2012 14:58:11 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias92.francetelecom.com [193.251.215.92]) by ietfa.amsl.com (Postfix) with ESMTP id 7244411E80E3 for ; Thu, 12 Jul 2012 14:58:11 -0700 (PDT) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm11.si.francetelecom.fr (ESMTP service) with ESMTP id 9FF8F3B454D; Thu, 12 Jul 2012 23:58:44 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.183]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id 86C7D238048; Thu, 12 Jul 2012 23:58:44 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH02.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.02.0298.004; Thu, 12 Jul 2012 23:58:41 +0200 From: To: Benoit Claise , dime mailing list Thread-Topic: [Dime] Protocol Action: 'Diameter Priority Attribute Value Pairs' to Proposed Standard (draft-ietf-dime-priority-avps-06.txt) Thread-Index: AQHNYHFlKJz2LNETIkmzWXKSpbYSnZcmMQww Date: Thu, 12 Jul 2012 21:58:29 +0000 Message-ID: <5301_1342130324_4FFF4894_5301_7189_1_6B7134B31289DC4FAF731D844122B36E0279DE@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <20120712172345.25859.45073.idtracker@ietfa.amsl.com> <4FFF3ACF.70406@cisco.com> In-Reply-To: <4FFF3ACF.70406@cisco.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.5] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.7.12.200915 Subject: Re: [Dime] Protocol Action: 'Diameter Priority Attribute Value Pairs' to Proposed Standard (draft-ietf-dime-priority-avps-06.txt) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2012 21:58:12 -0000 Ken,Tom, Well done! :) Thanks to all people involved in the publication of this new Standard track= s document from the DIME WG. Regards, Lionel & Jouni -----Message d'origine----- De=A0: Benoit Claise [mailto:bclaise@cisco.com]=20 Envoy=E9=A0: jeudi 12 juillet 2012 23:00 =C0=A0: dime mailing list Cc=A0: dime chair; RFC Editor Objet=A0: Re: [Dime] Protocol Action: 'Diameter Priority Attribute Value Pa= irs' to Proposed Standard (draft-ietf-dime-priority-avps-06.txt) Congratulations to authors and the WG chairs for completing this document. Regards, Benoit > The IESG has approved the following document: > - 'Diameter Priority Attribute Value Pairs' > (draft-ietf-dime-priority-avps-06.txt) as Proposed Standard > > This document is the product of the Diameter Maintenance and Extensions > Working Group. > > The IESG contact persons are Benoit Claise and Ronald Bonica. > > A URL of this Internet Draft is: > http://datatracker.ietf.org/doc/draft-ietf-dime-priority-avps/ > > > > > Technical Summary > > This document defines Attribute-Value Pair (AVP) containers for vario= us > priority parameters for use with Diameter and the AAA framework. The > parameters themselves are defined in several different protocols that > operate at either the network or application layer. > > Working Group Summary > > The document has had an extensive review by the DIME WG. The > document was also reviewed and discussed by people from 3GPP. > The latest version is the result of the consensus reached > after discussion. > > Document Quality > > The document is complete, straightforward, simple and > well-written. > > Personnel > > Lionel Morand is the Document Shepherd for this document. > Dan Romascanu was the first responsible Area Director. > Benoit Claise is the current responsible Area Director. > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime > > ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, France Telecom - Orange decline toute responsabilite si ce message a ete al= tere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, France Telecom - Orange is not liable for message= s that have been modified, changed or falsified. Thank you. From glenzorn@gmail.com Thu Jul 12 21:16:33 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 394BA11E8114 for ; Thu, 12 Jul 2012 21:16:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=1.299, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x+WkvUGho6BP for ; Thu, 12 Jul 2012 21:16:32 -0700 (PDT) Received: from mail-gg0-f172.google.com (mail-gg0-f172.google.com [209.85.161.172]) by ietfa.amsl.com (Postfix) with ESMTP id 75F8611E810C for ; Thu, 12 Jul 2012 21:16:31 -0700 (PDT) Received: by ggnc4 with SMTP id c4so3451434ggn.31 for ; Thu, 12 Jul 2012 21:17:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=Atc653jUflTZkGhj5sn0T+O0fwg/TqXtYWrJ4jLaTvc=; b=P/TcWSErphmR/HtSjZeMbCt9QshUQXFnaBmqkaRrnAkzeQ+p7d66otc/NrFVwr1LqY wQ57NwfDRTgukhdCBHZG1V/gxIgL9+Ch2mnxU3rK9IKRRR9aM4VeBvidyOI9aiAThNt6 TsWdzKZhCQ87RJIvPkAihajGWGWbUrHBYYiK+Mx8u6bf7bQL1KMaskwH7kttgbMdPwXF E90xx8tKR6q2x57pGzLDkRwpLnyIGGi4pv2wneJ2x+MLmih7n9seReLGEFVnYp7tUMYA 583HxG3m5FsvVnyu62wF8zsemO1XcImW+ltYPumZgpgsoFmOQ3qDLgjTkzXEQ6Fxg8ou ocYQ== Received: by 10.50.10.197 with SMTP id k5mr135649igb.39.1342153025843; Thu, 12 Jul 2012 21:17:05 -0700 (PDT) Received: from [192.168.0.100] (ppp-124-122-157-164.revip2.asianet.co.th. [124.122.157.164]) by mx.google.com with ESMTPS id nh8sm789088igc.1.2012.07.12.21.17.02 (version=SSLv3 cipher=OTHER); Thu, 12 Jul 2012 21:17:05 -0700 (PDT) From: Glen Zorn To: Benoit Claise In-Reply-To: <4FFF3D25.2060502@cisco.com> References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> <4FFF3D25.2060502@cisco.com> Content-Type: multipart/alternative; boundary="=-6NntzepuipOZhFYWQiax" Organization: Network Zen Date: Fri, 13 Jul 2012 11:17:00 +0700 Message-ID: <1342153020.14913.89.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: Michelle Cotton , dime@ietf.org Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 04:16:33 -0000 --=-6NntzepuipOZhFYWQiax Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Thu, 2012-07-12 at 23:09 +0200, Benoit Claise wrote: > Glen, > > > > > On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote: > > > > > Dear all, Glen, > > > > > > Two more points, part of the AD review (I needed a little bit of > > > education before making those points, hence the part 2 in my > > > review) > > > > > > 1. the NASREQ application is specified in RFC4005bis, but IANA > > > points to RFC3588bis > > > See > > > http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 > > > with an entry for Application id= 1, for NASREQ, with the > > > reference [RFC-ietf-dime-rfc3588bis-33] > > > > > > I understand the history: RFC3588 introduced this application id > > > value 1 in the IANA Considerations section. > > > However, RFC3588bis, which will obsolete RFC3588, doesn't mention > > > this application id (obviously, because it was assigned already). > > > So don't you believe that we should correct this and have, in the > > > IANA Considerations section of > > > http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a > > > message basically expressing: > > > > > > http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 should contain > > > Application id= 1, for NASREQ, with the reference > > > [RFC4005bis] > > > > > > Obviously, I don't agree. The value was registered in RFC 3588, and > > there is nothing to "correct" unless of course you insist, as does > > at least one IESG member, that the IANA references always point to > > the technical definition of the registered item (a position so > > untenable as to be absurd). > > So right now, "application id = 1" points to RFC 3588bis, which is > neither the RFC that registered the value (RFC3588), nor the NASREQ > specification (RFC4005bis), so the pointer to RFC 3588bis seems pretty > useless to me. I couldn't agree more. > Anyway, I sent a private email to Michelle Cotton a few days ago (and > I copied her again on this email thread). > My advice is to simply follow the IANA guidance. Actually, I'd like to see some guidance from the IESG; something that is both consistent and completethat states the semantics of the IANA reference field or, lacking that, a little less anal-retention WRT positions which are clearly neither consistent nor complete on those semantics. ... --=-6NntzepuipOZhFYWQiax Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Thu, 2012-07-12 at 23:09 +0200, Benoit Claise wrote:
Glen,

On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote:
Dear all, Glen,

Two more points, part of the AD review (I needed a little bit of education before making those points, hence the part 2 in my review)

1. the NASREQ application is specified in RFC4005bis, but IANA points to RFC3588bis
See http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45
with an entry for Application id= 1, for NASREQ, with the reference [RFC-ietf-dime-rfc3588bis-33]

I understand the history: RFC3588 introduced this application id value 1 in the IANA Considerations section.
However, RFC3588bis, which will obsolete RFC3588, doesn't mention this application id (obviously, because it was assigned already).
So don't you believe that we should correct this and have, in the IANA Considerations section of http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a message basically expressing:
    http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45  should contain
             Application id= 1, for NASREQ, with the reference [RFC4005bis]

Obviously, I don't agree.  The value was registered in RFC 3588, and there is nothing to "correct" unless of course you insist, as does at least one IESG member, that the IANA references always point to the technical definition of the registered item (a position so untenable as to be absurd).
So right now, "application id = 1" points to RFC 3588bis, which is neither the RFC that registered the value (RFC3588), nor the NASREQ specification (RFC4005bis), so the pointer to RFC 3588bis seems pretty useless to me.

I couldn't agree more.

Anyway, I sent a private email to Michelle Cotton a few days ago (and I copied her again on this email thread).
My advice is to simply follow the IANA guidance.

Actually, I'd like to see some guidance from the IESG; something that is both consistent and completethat states the semantics of the IANA reference field or, lacking that, a little less anal-retention WRT positions which are clearly neither consistent nor complete on those semantics.

... --=-6NntzepuipOZhFYWQiax-- From glenzorn@gmail.com Thu Jul 12 21:27:27 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 493FF11E8095 for ; Thu, 12 Jul 2012 21:27:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.948 X-Spam-Level: X-Spam-Status: No, score=-2.948 tagged_above=-999 required=5 tests=[AWL=0.650, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DkVPn1yxOIgv for ; Thu, 12 Jul 2012 21:27:25 -0700 (PDT) Received: from mail-yx0-f172.google.com (mail-yx0-f172.google.com [209.85.213.172]) by ietfa.amsl.com (Postfix) with ESMTP id A9CF911E80CF for ; Thu, 12 Jul 2012 21:27:25 -0700 (PDT) Received: by yenq13 with SMTP id q13so3452608yen.31 for ; Thu, 12 Jul 2012 21:28:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=HMZsi3sqjIiU9KWznjsBnjS48+hPt9AiMJQmnRby2iI=; b=ARB8Si9aAZXo4VOx82d/7+4149TLL6JGwliad8kiuC4HXCdMhRg1Nd0hLqSuL7fl3W tCZMgaLfUh1bkoL0O4k8zW45rai1dCLMNlwql9V1Aip611R4sqXEVCQZUXsh0my2KWGb lvJyj05fKktnbxCgNVMD1mNhYDgu6vGXHWvUKoFvKyKvYFXXKGoZfJbzzNHuxQnsYWU0 niN73Udk/SkaP670UmZN1M+pQGJvtaMO/YkeJEwKTG7lMUriSkjwEx7xXaMRRzMxBG7s LbOymf4S94FWhP1jOlGDN0a9Wxa0aoOXrwUL4O76zT5fbOXrGt2HRIEl6QGghs2JUiM6 ThgA== Received: by 10.50.237.34 with SMTP id uz2mr174270igc.19.1342153680343; Thu, 12 Jul 2012 21:28:00 -0700 (PDT) Received: from [192.168.0.100] (ppp-124-122-157-164.revip2.asianet.co.th. [124.122.157.164]) by mx.google.com with ESMTPS id ut5sm1344952igc.13.2012.07.12.21.27.57 (version=SSLv3 cipher=OTHER); Thu, 12 Jul 2012 21:27:59 -0700 (PDT) From: Glen Zorn To: Benoit Claise In-Reply-To: <4FFF3B9D.4040905@cisco.com> References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> <1342002286.14913.56.camel@gwz-laptop> <4FFF3B9D.4040905@cisco.com> Content-Type: multipart/alternative; boundary="=-JH3R16ZwDdsZfErrPjAv" Organization: Network Zen Date: Fri, 13 Jul 2012 11:27:55 +0700 Message-ID: <1342153675.14913.96.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: dime@ietf.org Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 04:27:27 -0000 --=-JH3R16ZwDdsZfErrPjAv Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit On Thu, 2012-07-12 at 23:03 +0200, Benoit Claise wrote: > On 11/07/2012 12:24, Glen Zorn wrote: > > > > > On Wed, 2012-07-11 at 09:09 +0200, Benoit Claise wrote: > > > > > Hi Lionel, > > > > > > > > > > Hi Benoit, > > > > > > > > - I could not find the meaning of * in, for example, > > > > > > > > [ CHAP-Auth ] > > > > [ CHAP-Challenge ] > > > > * [ Framed-Compression ] > > > > [ Framed-Interface-Id ] > > > > [ Framed-IP-Address ] > > > > * [ Framed-IPv6-Prefix ] > > > > [ Framed-IP-Netmask ] > > > > [ Framed-MTU ] > > > > [ Framed-Protocol ] > > > > [ ARAP-Password ] > > > > [ ARAP-Security ] > > > > * [ ARAP-Security-Data ] > > > > * [ Login-IP-Host ] > > > > * [ Login-IPv6-Host ] > > > > [ Login-LAT-Group ] > > > > [ Login-LAT-Node ] > > > > [ Login-LAT-Port ] > > > > [ Login-LAT-Service ] > > > > * [ Tunneling ] > > > > * [ Proxy-Info ] > > > > * [ Route-Record ] > > > > * [ AVP ] > > > > [[LM]] the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6). > > > > > > > > > > BC> Thanks for the education. > > > Is this so obvious to the Diameter readers, including the > > > newcomers, that we don't need to mention it? > > > In other words, am I the only one NOT knowing this? ;-) > > > > > > Hmm. draft-ietf-dime-rfc3588bis is listed as a normative reference > > in 4005bis and RFC 5238 is listed as a normative reference in > > draft-ietf-dime-rfc3588bis. My understanding is that one cannot > > expect to read and understand an RFC without having read and > > understood the normative references thereof. > > Agreed on the principle, except that, in this case, we speak about an > "*", which could mean something specific for this document: optional, > a reference to something else, etc... How about this? OLD: 3. Diameter NAS Application Messages This section defines the Diameter message Command-Code [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all Diameter implementations conforming to this specification. The Command Codes are as follows: +-----------------------------------+---------+------+--------------+ | Command Name | Abbrev. | Code | Reference | +-----------------------------------+---------+------+--------------+ | AA-Request | AAR | 265 | Section 3.1 | | AA-Answer | AAA | 265 | Section 3.2 | | Re-Auth-Request | RAR | 258 | Section 3.3 | | Re-Auth-Answer | RAA | 258 | Section 3.4 | | Session-Termination-Request | STR | 275 | Section 3.5 | | Session-Termination-Answer | STA | 275 | Section 3.6 | | Abort-Session-Request | ASR | 274 | Section 3.7 | | Abort-Session-Answer | ASA | 274 | Section 3.8 | | Accounting-Request | ACR | 271 | Section 3.9 | | Accounting-Answer | ACA | 271 | Section 3.10 | +-----------------------------------+---------+------+--------------+ NEW: 3. Diameter NAS Application Messages This section defines the Diameter message Command-Code [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all Diameter implementations conforming to this specification. The Command Codes are as follows: +-----------------------------------+---------+------+--------------+ | Command Name | Abbrev. | Code | Reference | +-----------------------------------+---------+------+--------------+ | AA-Request | AAR | 265 | Section 3.1 | | AA-Answer | AAA | 265 | Section 3.2 | | Re-Auth-Request | RAR | 258 | Section 3.3 | | Re-Auth-Answer | RAA | 258 | Section 3.4 | | Session-Termination-Request | STR | 275 | Section 3.5 | | Session-Termination-Answer | STA | 275 | Section 3.6 | | Abort-Session-Request | ASR | 274 | Section 3.7 | | Abort-Session-Answer | ASA | 274 | Section 3.8 | | Accounting-Request | ACR | 271 | Section 3.9 | | Accounting-Answer | ACA | 271 | Section 3.10 | +-----------------------------------+---------+------+--------------+ Note that the message formats in the following sub-sections use the standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], Section 3.2). > > Regards, Benoit. > > > > > Is my understanding correct? If so, then there is in fact no need > > to mention it since any reader cognizant of that requirement will > > already know (or could easily refresh the memory of) what the > > notation means. > > > > > > > > > > Regards, Benoit. > > > > > > > > > > Regards, > > > > > > > > Lionel > > > > _________________________________________________________________________________________________________________________ > > > > > > > > Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc > > > > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler > > > > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, > > > > France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. > > > > > > > > This message and its attachments may contain confidential or privileged information that may be protected by law; > > > > they should not be distributed, used or copied without authorisation. > > > > If you have received this email in error, please notify the sender and delete this message and its attachments. > > > > As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified. > > > > Thank you. > > > > > > > > > > > > > > > _______________________________________________ > > > DiME mailing list > > > DiME@ietf.org > > > https://www.ietf.org/mailman/listinfo/dime > > > > > > > > > > > > _______________________________________________ > > DiME mailing list > > DiME@ietf.org > > https://www.ietf.org/mailman/listinfo/dime > > > --=-JH3R16ZwDdsZfErrPjAv Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Thu, 2012-07-12 at 23:03 +0200, Benoit Claise wrote:
On 11/07/2012 12:24, Glen Zorn wrote:

On Wed, 2012-07-11 at 09:09 +0200, Benoit Claise wrote:
Hi Lionel,

Hi Benoit,
 
- I could not find the meaning of * in, for example,
 
                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]
[[LM]] the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6).
 
BC> Thanks for the education.
Is this so obvious to the Diameter readers, including the newcomers, that we don't need to mention it?
In other words, am I the only one NOT knowing this? ;-)

Hmm.  draft-ietf-dime-rfc3588bis is listed as  a normative reference in 4005bis and RFC 5238 is listed as a normative reference in draft-ietf-dime-rfc3588bis.  My understanding is that one cannot expect to read and understand an RFC without having read and understood the normative references thereof.
Agreed on the principle, except that, in this case, we speak about an "*", which could mean something specific for this document: optional, a reference to something else, etc...

How about this?

OLD:
3.  Diameter NAS Application Messages

   This section defines the Diameter message Command-Code
   [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all
   Diameter implementations conforming to this specification.  The
   Command Codes are as follows:

   +-----------------------------------+---------+------+--------------+
   | Command Name                      | Abbrev. | Code | Reference    |
   +-----------------------------------+---------+------+--------------+
   | AA-Request                        |   AAR   |  265 | Section 3.1  |
   | AA-Answer                         |   AAA   |  265 | Section 3.2  |
   | Re-Auth-Request                   |   RAR   |  258 | Section 3.3  |
   | Re-Auth-Answer                    |   RAA   |  258 | Section 3.4  |
   | Session-Termination-Request       |   STR   |  275 | Section 3.5  |
   | Session-Termination-Answer        |   STA   |  275 | Section 3.6  |
   | Abort-Session-Request             |   ASR   |  274 | Section 3.7  |
   | Abort-Session-Answer              |   ASA   |  274 | Section 3.8  |
   | Accounting-Request                |   ACR   |  271 | Section 3.9  |
   | Accounting-Answer                 |   ACA   |  271 | Section 3.10 |
   +-----------------------------------+---------+------+--------------+

NEW:
3.  Diameter NAS Application Messages

   This section defines the Diameter message Command-Code
   [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all
   Diameter implementations conforming to this specification.  The
   Command Codes are as follows:

   +-----------------------------------+---------+------+--------------+
   | Command Name                      | Abbrev. | Code | Reference    |
   +-----------------------------------+---------+------+--------------+
   | AA-Request                        |   AAR   |  265 | Section 3.1  |
   | AA-Answer                         |   AAA   |  265 | Section 3.2  |
   | Re-Auth-Request                   |   RAR   |  258 | Section 3.3  |
   | Re-Auth-Answer                    |   RAA   |  258 | Section 3.4  |
   | Session-Termination-Request       |   STR   |  275 | Section 3.5  |
   | Session-Termination-Answer        |   STA   |  275 | Section 3.6  |
   | Abort-Session-Request             |   ASR   |  274 | Section 3.7  |
   | Abort-Session-Answer              |   ASA   |  274 | Section 3.8  |
   | Accounting-Request                |   ACR   |  271 | Section 3.9  |
   | Accounting-Answer                 |   ACA   |  271 | Section 3.10 |
   +-----------------------------------+---------+------+--------------+

Note that the message formats in the following sub-sections use the standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], Section 3.2).
  

Regards, Benoit.


Is my understanding correct?  If so, then there is in fact no need to mention it since any reader cognizant of that requirement will already know (or could easily refresh the memory of) what the notation means.


Regards, Benoit.

Regards,
 
Lionel
_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified.
Thank you.



_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime




_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime



--=-JH3R16ZwDdsZfErrPjAv-- From glenzorn@gmail.com Thu Jul 12 22:36:16 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4CD321F86D1 for ; Thu, 12 Jul 2012 22:36:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.165 X-Spam-Level: X-Spam-Status: No, score=-3.165 tagged_above=-999 required=5 tests=[AWL=0.433, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Iy6-pJS+B2A for ; Thu, 12 Jul 2012 22:36:15 -0700 (PDT) Received: from mail-yw0-f44.google.com (mail-yw0-f44.google.com [209.85.213.44]) by ietfa.amsl.com (Postfix) with ESMTP id AECE021F86D0 for ; Thu, 12 Jul 2012 22:36:15 -0700 (PDT) Received: by yhq56 with SMTP id 56so3655839yhq.31 for ; Thu, 12 Jul 2012 22:36:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=zzGXsy6CDwTqV/C2nyXn2EPIXk+ghFuMUoOcIuc0pAE=; b=CVRmzMovC075V/HY0lO5MmTqf06cCtRsIdiHJCQdS7k/Dmv6YUeu/P5u5AWAnFm1Md Rg7juBf/7il4pY5XznmCIpxPCs4Hi6Y2HQIqzrv0PxvqR3ZLCItRzTF1no961KKb5uN2 PEPJlH95NinLHR/dJWxyN+Zxa5NMaf/8d0NC0wrKqWE3ew2ivXjL5RkcViH0UnTd16h/ yvDugmgbWQe8e3FZmE4fhoHAjfDfH8X20RKOh8hPkHgb5FqZRa3iN9aI+lpAphfz91WW PBa+gwIjJHVP9Jnsxked0pINnDPfZLo5nvNoHP8qFTVpw6b9EgK503xGUKAFN8xJiviC mBhg== Received: by 10.50.194.194 with SMTP id hy2mr232412igc.56.1342157810142; Thu, 12 Jul 2012 22:36:50 -0700 (PDT) Received: from [192.168.0.100] (ppp-124-122-157-164.revip2.asianet.co.th. [124.122.157.164]) by mx.google.com with ESMTPS id k5sm787204igq.12.2012.07.12.22.36.47 (version=SSLv3 cipher=OTHER); Thu, 12 Jul 2012 22:36:48 -0700 (PDT) From: Glen Zorn To: lionel.morand@orange.com In-Reply-To: <9766_1342022182_4FFDA226_9766_3407_1_6B7134B31289DC4FAF731D844122B36E0273AB@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> <9766_1342022182_4FFDA226_9766_3407_1_6B7134B31289DC4FAF731D844122B36E0273AB@PEXCVZYM13.corporate.adroot.infra.ftgroup> Content-Type: multipart/alternative; boundary="=-duY912QVAPfshOcW4MNv" Organization: Network Zen Date: Fri, 13 Jul 2012 12:36:44 +0700 Message-ID: <1342157804.14913.102.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: "dime@ietf.org" Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 05:36:17 -0000 --=-duY912QVAPfshOcW4MNv Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Wed, 2012-07-11 at 15:56 +0000, lionel.morand@orange.com wrote: > Indeed, it is old stuff! > > Can we consider that this part of text is not relevant to RFC4005 (but > to any Diameter application) and could be removed from this spec > without impact? In that case, shouldn't it be added to 3588bis? > I think that this point will be anyway covered by the dedicated draft > on E2E security. I'm not sure that it is necessarily specific to e2e security because I can imagine cases in which requests and answers could reasonably have asymmetrical security properties. Also, could it happen with SCTP/DTLS? ... --=-duY912QVAPfshOcW4MNv Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Wed, 2012-07-11 at 15:56 +0000, lionel.morand@orange.com wrote:
Indeed, it is old stuff!

Can we consider that this part of text is not relevant to RFC4005 (but to any Diameter application) and could be removed from this spec without impact?

In that case, shouldn't it be added to 3588bis?

I think that this point will be anyway covered by the dedicated draft on E2E security.

I'm not sure that it is necessarily specific to e2e security because I can imagine cases in which requests and answers could reasonably have asymmetrical security properties.  Also, could it happen with SCTP/DTLS?

...
--=-duY912QVAPfshOcW4MNv-- From lionel.morand@orange.com Thu Jul 12 23:41:22 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7974B21F86A3 for ; Thu, 12 Jul 2012 23:41:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.472 X-Spam-Level: X-Spam-Status: No, score=-2.472 tagged_above=-999 required=5 tests=[AWL=0.125, BAYES_00=-2.599, HTML_MESSAGE=0.001, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hr5S3vKvRN0u for ; Thu, 12 Jul 2012 23:41:21 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id 6116A21F86A0 for ; Thu, 12 Jul 2012 23:41:20 -0700 (PDT) Received: from omfedm07.si.francetelecom.fr (unknown [xx.xx.xx.3]) by omfedm11.si.francetelecom.fr (ESMTP service) with ESMTP id 51A8C3B4432; Fri, 13 Jul 2012 08:41:54 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.186]) by omfedm07.si.francetelecom.fr (ESMTP service) with ESMTP id 3B3604C015; Fri, 13 Jul 2012 08:41:54 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH01.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.02.0298.004; Fri, 13 Jul 2012 08:41:53 +0200 From: To: Glen Zorn , Benoit Claise Thread-Topic: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt Thread-Index: AQHNYK/fDWh2uHmaRUu3IaSVjMoIhJcmw6FA Date: Fri, 13 Jul 2012 06:41:41 +0000 Message-ID: <1833_1342161714_4FFFC332_1833_14018_1_6B7134B31289DC4FAF731D844122B36E027ACD@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> <1342002286.14913.56.camel@gwz-laptop> <4FFF3B9D.4040905@cisco.com> <1342153675.14913.96.camel@gwz-laptop> In-Reply-To: <1342153675.14913.96.camel@gwz-laptop> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.1] Content-Type: multipart/alternative; boundary="_000_6B7134B31289DC4FAF731D844122B36E027ACDPEXCVZYM13corpora_" MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.7.12.213315 Cc: "dime@ietf.org" Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 06:41:22 -0000 --_000_6B7134B31289DC4FAF731D844122B36E027ACDPEXCVZYM13corpora_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RmluZSBmb3IgbWUuDQoNCkxpb25lbA0KDQpEZSA6IGRpbWUtYm91bmNlc0BpZXRmLm9yZyBbbWFp bHRvOmRpbWUtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBHbGVuIFpvcm4NCkVudm95 w6kgOiB2ZW5kcmVkaSAxMyBqdWlsbGV0IDIwMTIgMDY6MjgNCsOAIDogQmVub2l0IENsYWlzZQ0K Q2MgOiBkaW1lQGlldGYub3JnDQpPYmpldCA6IFJlOiBbRGltZV0gQUQgcmV2aWV3IG9mIGRyYWZ0 LWlldGYtZGltZS1yZmM0MDA1YmlzLTA5LnR4dA0KDQpPbiBUaHUsIDIwMTItMDctMTIgYXQgMjM6 MDMgKzAyMDAsIEJlbm9pdCBDbGFpc2Ugd3JvdGU6DQpPbiAxMS8wNy8yMDEyIDEyOjI0LCBHbGVu IFpvcm4gd3JvdGU6DQpPbiBXZWQsIDIwMTItMDctMTEgYXQgMDk6MDkgKzAyMDAsIEJlbm9pdCBD bGFpc2Ugd3JvdGU6DQoNCkhpIExpb25lbCwNCg0KDQoNCg0KDQpIaSBCZW5vaXQsDQoNCg0KDQot IEkgY291bGQgbm90IGZpbmQgdGhlIG1lYW5pbmcgb2YgKiBpbiwgZm9yIGV4YW1wbGUsDQoNCg0K DQogICAgICAgICAgICAgICAgICAgICAgICAgIFsgQ0hBUC1BdXRoIF0NCg0KICAgICAgICAgICAg ICAgICAgICAgICAgICBbIENIQVAtQ2hhbGxlbmdlIF0NCg0KICAgICAgICAgICAgICAgICAgICAg ICAgKiBbIEZyYW1lZC1Db21wcmVzc2lvbiBdDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAg WyBGcmFtZWQtSW50ZXJmYWNlLUlkIF0NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICBbIEZy YW1lZC1JUC1BZGRyZXNzIF0NCg0KICAgICAgICAgICAgICAgICAgICAgICAgKiBbIEZyYW1lZC1J UHY2LVByZWZpeCBdDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgWyBGcmFtZWQtSVAtTmV0 bWFzayBdDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgWyBGcmFtZWQtTVRVIF0NCg0KICAg ICAgICAgICAgICAgICAgICAgICAgICBbIEZyYW1lZC1Qcm90b2NvbCBdDQoNCiAgICAgICAgICAg ICAgICAgICAgICAgICAgWyBBUkFQLVBhc3N3b3JkIF0NCg0KICAgICAgICAgICAgICAgICAgICAg ICAgICBbIEFSQVAtU2VjdXJpdHkgXQ0KDQogICAgICAgICAgICAgICAgICAgICAgICAqIFsgQVJB UC1TZWN1cml0eS1EYXRhIF0NCg0KICAgICAgICAgICAgICAgICAgICAgICAgKiBbIExvZ2luLUlQ LUhvc3QgXQ0KDQogICAgICAgICAgICAgICAgICAgICAgICAqIFsgTG9naW4tSVB2Ni1Ib3N0IF0N Cg0KICAgICAgICAgICAgICAgICAgICAgICAgICBbIExvZ2luLUxBVC1Hcm91cCBdDQoNCiAgICAg ICAgICAgICAgICAgICAgICAgICAgWyBMb2dpbi1MQVQtTm9kZSBdDQoNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgWyBMb2dpbi1MQVQtUG9ydCBdDQoNCiAgICAgICAgICAgICAgICAgICAgICAg ICAgWyBMb2dpbi1MQVQtU2VydmljZSBdDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICogWyBU dW5uZWxpbmcgXQ0KDQogICAgICAgICAgICAgICAgICAgICAgICAqIFsgUHJveHktSW5mbyBdDQoN CiAgICAgICAgICAgICAgICAgICAgICAgICogWyBSb3V0ZS1SZWNvcmQgXQ0KDQogICAgICAgICAg ICAgICAgICAgICAgICAqIFsgQVZQIF0NCg0KW1tMTV1dIHRoZSDCqyAqIMK7IGluIGZyb250IHRo ZSBBVlAgbWVhbnMgdGhhdCAwLCAxIG9yIG1vcmUgQVZQIHNjYW4gYmUgcHJlc2VudCBpbiB0aGUg cmVxdWVzdCAob3IgaW4gYSBHcm91cGVkIEFWUCkuIEl0IGZvbGxvd3MgcnVsZXMgdXNlZCBpbiBS RkMzNTg4IGFuZCBkZWZpbmVkIGluIFJGQyA1MjM0IChodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9yZmM1MjM0I3NlY3Rpb24tMy42KS4NCg0KDQpCQz4gVGhhbmtzIGZvciB0aGUgZWR1Y2F0aW9u Lg0KSXMgdGhpcyBzbyBvYnZpb3VzIHRvIHRoZSBEaWFtZXRlciByZWFkZXJzLCBpbmNsdWRpbmcg dGhlIG5ld2NvbWVycywgdGhhdCB3ZSBkb24ndCBuZWVkIHRvIG1lbnRpb24gaXQ/DQpJbiBvdGhl ciB3b3JkcywgYW0gSSB0aGUgb25seSBvbmUgTk9UIGtub3dpbmcgdGhpcz8gOy0pDQoNCkhtbS4g IGRyYWZ0LWlldGYtZGltZS1yZmMzNTg4YmlzIGlzIGxpc3RlZCBhcyAgYSBub3JtYXRpdmUgcmVm ZXJlbmNlIGluIDQwMDViaXMgYW5kIFJGQyA1MjM4IGlzIGxpc3RlZCBhcyBhIG5vcm1hdGl2ZSBy ZWZlcmVuY2UgaW4gZHJhZnQtaWV0Zi1kaW1lLXJmYzM1ODhiaXMuICBNeSB1bmRlcnN0YW5kaW5n IGlzIHRoYXQgb25lIGNhbm5vdCBleHBlY3QgdG8gcmVhZCBhbmQgdW5kZXJzdGFuZCBhbiBSRkMg d2l0aG91dCBoYXZpbmcgcmVhZCBhbmQgdW5kZXJzdG9vZCB0aGUgbm9ybWF0aXZlIHJlZmVyZW5j ZXMgdGhlcmVvZi4NCkFncmVlZCBvbiB0aGUgcHJpbmNpcGxlLCBleGNlcHQgdGhhdCwgaW4gdGhp cyBjYXNlLCB3ZSBzcGVhayBhYm91dCBhbiAiKiIsIHdoaWNoIGNvdWxkIG1lYW4gc29tZXRoaW5n IHNwZWNpZmljIGZvciB0aGlzIGRvY3VtZW50OiBvcHRpb25hbCwgYSByZWZlcmVuY2UgdG8gc29t ZXRoaW5nIGVsc2UsIGV0Yy4uLg0KDQpIb3cgYWJvdXQgdGhpcz8NCg0KT0xEOg0KMy4gIERpYW1l dGVyIE5BUyBBcHBsaWNhdGlvbiBNZXNzYWdlcw0KDQogICBUaGlzIHNlY3Rpb24gZGVmaW5lcyB0 aGUgRGlhbWV0ZXIgbWVzc2FnZSBDb21tYW5kLUNvZGUNCiAgIFtJLUQuaWV0Zi1kaW1lLXJmYzM1 ODhiaXNdIHZhbHVlcyB0aGF0IE1VU1QgYmUgc3VwcG9ydGVkIGJ5IGFsbA0KICAgRGlhbWV0ZXIg aW1wbGVtZW50YXRpb25zIGNvbmZvcm1pbmcgdG8gdGhpcyBzcGVjaWZpY2F0aW9uLiAgVGhlDQog ICBDb21tYW5kIENvZGVzIGFyZSBhcyBmb2xsb3dzOg0KDQogICArLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tKy0tLS0tLSstLS0tLS0tLS0tLS0tLSsNCiAgIHwg Q29tbWFuZCBOYW1lICAgICAgICAgICAgICAgICAgICAgIHwgQWJicmV2LiB8IENvZGUgfCBSZWZl cmVuY2UgICAgfA0KICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0t LS0tLSstLS0tLS0rLS0tLS0tLS0tLS0tLS0rDQogICB8IEFBLVJlcXVlc3QgICAgICAgICAgICAg ICAgICAgICAgICB8ICAgQUFSICAgfCAgMjY1IHwgU2VjdGlvbiAzLjEgIHwNCiAgIHwgQUEtQW5z d2VyICAgICAgICAgICAgICAgICAgICAgICAgIHwgICBBQUEgICB8ICAyNjUgfCBTZWN0aW9uIDMu MiAgfA0KICAgfCBSZS1BdXRoLVJlcXVlc3QgICAgICAgICAgICAgICAgICAgfCAgIFJBUiAgIHwg IDI1OCB8IFNlY3Rpb24gMy4zICB8DQogICB8IFJlLUF1dGgtQW5zd2VyICAgICAgICAgICAgICAg ICAgICB8ICAgUkFBICAgfCAgMjU4IHwgU2VjdGlvbiAzLjQgIHwNCiAgIHwgU2Vzc2lvbi1UZXJt aW5hdGlvbi1SZXF1ZXN0ICAgICAgIHwgICBTVFIgICB8ICAyNzUgfCBTZWN0aW9uIDMuNSAgfA0K ICAgfCBTZXNzaW9uLVRlcm1pbmF0aW9uLUFuc3dlciAgICAgICAgfCAgIFNUQSAgIHwgIDI3NSB8 IFNlY3Rpb24gMy42ICB8DQogICB8IEFib3J0LVNlc3Npb24tUmVxdWVzdCAgICAgICAgICAgICB8 ICAgQVNSICAgfCAgMjc0IHwgU2VjdGlvbiAzLjcgIHwNCiAgIHwgQWJvcnQtU2Vzc2lvbi1BbnN3 ZXIgICAgICAgICAgICAgIHwgICBBU0EgICB8ICAyNzQgfCBTZWN0aW9uIDMuOCAgfA0KICAgfCBB Y2NvdW50aW5nLVJlcXVlc3QgICAgICAgICAgICAgICAgfCAgIEFDUiAgIHwgIDI3MSB8IFNlY3Rp b24gMy45ICB8DQogICB8IEFjY291bnRpbmctQW5zd2VyICAgICAgICAgICAgICAgICB8ICAgQUNB ICAgfCAgMjcxIHwgU2VjdGlvbiAzLjEwIHwNCiAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLSstLS0tLS0tLS0rLS0tLS0tKy0tLS0tLS0tLS0tLS0tKw0KDQpORVc6DQozLiAg RGlhbWV0ZXIgTkFTIEFwcGxpY2F0aW9uIE1lc3NhZ2VzDQoNCiAgIFRoaXMgc2VjdGlvbiBkZWZp bmVzIHRoZSBEaWFtZXRlciBtZXNzYWdlIENvbW1hbmQtQ29kZQ0KICAgW0ktRC5pZXRmLWRpbWUt cmZjMzU4OGJpc10gdmFsdWVzIHRoYXQgTVVTVCBiZSBzdXBwb3J0ZWQgYnkgYWxsDQogICBEaWFt ZXRlciBpbXBsZW1lbnRhdGlvbnMgY29uZm9ybWluZyB0byB0aGlzIHNwZWNpZmljYXRpb24uICBU aGUNCiAgIENvbW1hbmQgQ29kZXMgYXJlIGFzIGZvbGxvd3M6DQoNCiAgICstLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0rLS0tLS0tKy0tLS0tLS0tLS0tLS0tKw0K ICAgfCBDb21tYW5kIE5hbWUgICAgICAgICAgICAgICAgICAgICAgfCBBYmJyZXYuIHwgQ29kZSB8 IFJlZmVyZW5jZSAgICB8DQogICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0r LS0tLS0tLS0tKy0tLS0tLSstLS0tLS0tLS0tLS0tLSsNCiAgIHwgQUEtUmVxdWVzdCAgICAgICAg ICAgICAgICAgICAgICAgIHwgICBBQVIgICB8ICAyNjUgfCBTZWN0aW9uIDMuMSAgfA0KICAgfCBB QS1BbnN3ZXIgICAgICAgICAgICAgICAgICAgICAgICAgfCAgIEFBQSAgIHwgIDI2NSB8IFNlY3Rp b24gMy4yICB8DQogICB8IFJlLUF1dGgtUmVxdWVzdCAgICAgICAgICAgICAgICAgICB8ICAgUkFS ICAgfCAgMjU4IHwgU2VjdGlvbiAzLjMgIHwNCiAgIHwgUmUtQXV0aC1BbnN3ZXIgICAgICAgICAg ICAgICAgICAgIHwgICBSQUEgICB8ICAyNTggfCBTZWN0aW9uIDMuNCAgfA0KICAgfCBTZXNzaW9u LVRlcm1pbmF0aW9uLVJlcXVlc3QgICAgICAgfCAgIFNUUiAgIHwgIDI3NSB8IFNlY3Rpb24gMy41 ICB8DQogICB8IFNlc3Npb24tVGVybWluYXRpb24tQW5zd2VyICAgICAgICB8ICAgU1RBICAgfCAg Mjc1IHwgU2VjdGlvbiAzLjYgIHwNCiAgIHwgQWJvcnQtU2Vzc2lvbi1SZXF1ZXN0ICAgICAgICAg ICAgIHwgICBBU1IgICB8ICAyNzQgfCBTZWN0aW9uIDMuNyAgfA0KICAgfCBBYm9ydC1TZXNzaW9u LUFuc3dlciAgICAgICAgICAgICAgfCAgIEFTQSAgIHwgIDI3NCB8IFNlY3Rpb24gMy44ICB8DQog ICB8IEFjY291bnRpbmctUmVxdWVzdCAgICAgICAgICAgICAgICB8ICAgQUNSICAgfCAgMjcxIHwg U2VjdGlvbiAzLjkgIHwNCiAgIHwgQWNjb3VudGluZy1BbnN3ZXIgICAgICAgICAgICAgICAgIHwg ICBBQ0EgICB8ICAyNzEgfCBTZWN0aW9uIDMuMTAgfA0KICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLSstLS0tLS0rLS0tLS0tLS0tLS0tLS0rDQoNCk5vdGUg dGhhdCB0aGUgbWVzc2FnZSBmb3JtYXRzIGluIHRoZSBmb2xsb3dpbmcgc3ViLXNlY3Rpb25zIHVz ZSB0aGUgc3RhbmRhcmQgRGlhbWV0ZXIgQ29tbWFuZCBDb2RlIEZvcm1hdCAoW0ktRC5pZXRmLWRp bWUtcmZjMzU4OGJpc10sIFNlY3Rpb24gMy4yKS4NCg0KDQoNClJlZ2FyZHMsIEJlbm9pdC4NCg0K DQoNCklzIG15IHVuZGVyc3RhbmRpbmcgY29ycmVjdD8gIElmIHNvLCB0aGVuIHRoZXJlIGlzIGlu IGZhY3Qgbm8gbmVlZCB0byBtZW50aW9uIGl0IHNpbmNlIGFueSByZWFkZXIgY29nbml6YW50IG9m IHRoYXQgcmVxdWlyZW1lbnQgd2lsbCBhbHJlYWR5IGtub3cgKG9yIGNvdWxkIGVhc2lseSByZWZy ZXNoIHRoZSBtZW1vcnkgb2YpIHdoYXQgdGhlIG5vdGF0aW9uIG1lYW5zLg0KDQoNCg0KUmVnYXJk cywgQmVub2l0Lg0KDQoNCg0KDQoNClJlZ2FyZHMsDQoNCg0KDQpMaW9uZWwNCg0KX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K DQoNCg0KQ2UgbWVzc2FnZSBldCBzZXMgcGllY2VzIGpvaW50ZXMgcGV1dmVudCBjb250ZW5pciBk ZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVudGllbGxlcyBvdSBwcml2aWxlZ2llZXMgZXQgbmUgZG9p dmVudCBkb25jDQoNCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3UgY29waWVzIHNhbnMg YXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBhciBlcnJldXIsIHZl dWlsbGV6IGxlIHNpZ25hbGVyDQoNCmEgbCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFpbnNp IHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0YW50 IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sDQoNCkZyYW5jZSBUZWxlY29tIC0gT3JhbmdlIGRl Y2xpbmUgdG91dGUgcmVzcG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRl Zm9ybWUgb3UgZmFsc2lmaWUuIE1lcmNpLg0KDQoNCg0KVGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0 YWNobWVudHMgbWF5IGNvbnRhaW4gY29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRp b24gdGhhdCBtYXkgYmUgcHJvdGVjdGVkIGJ5IGxhdzsNCg0KdGhleSBzaG91bGQgbm90IGJlIGRp c3RyaWJ1dGVkLCB1c2VkIG9yIGNvcGllZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uDQoNCklmIHlv dSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNl bmRlciBhbmQgZGVsZXRlIHRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzLg0KDQpBcyBl bWFpbHMgbWF5IGJlIGFsdGVyZWQsIEZyYW5jZSBUZWxlY29tIC0gT3JhbmdlIGlzIG5vdCBsaWFi bGUgZm9yIG1lc3NhZ2VzIHRoYXQgaGF2ZSBiZWVuIG1vZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNp ZmllZC4NCg0KVGhhbmsgeW91Lg0KDQoNCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KDQpEaU1FIG1haWxpbmcgbGlzdA0KDQpEaU1FQGlldGYub3Jn PG1haWx0bzpEaU1FQGlldGYub3JnPg0KDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2RpbWUNCg0KDQoNCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KDQpEaU1FIG1haWxpbmcgbGlzdA0KDQpEaU1FQGlldGYub3JnPG1haWx0 bzpEaU1FQGlldGYub3JnPg0KDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2RpbWUNCg0KDQoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBldCBzZXMgcGllY2VzIGpvaW50ZXMgcGV1 dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVudGllbGxlcyBvdSBwcml2aWxl Z2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3Ug Y29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBh ciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEgbCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1 aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBlbGVjdHJvbmlx dWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sCkZyYW5jZSBUZWxlY29tIC0gT3Jh bmdlIGRlY2xpbmUgdG91dGUgcmVzcG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRl cmUsIGRlZm9ybWUgb3UgZmFsc2lmaWUuIE1lcmNpLgoKVGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0 YWNobWVudHMgbWF5IGNvbnRhaW4gY29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRp b24gdGhhdCBtYXkgYmUgcHJvdGVjdGVkIGJ5IGxhdzsKdGhleSBzaG91bGQgbm90IGJlIGRpc3Ry aWJ1dGVkLCB1c2VkIG9yIGNvcGllZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uCklmIHlvdSBoYXZl IHJlY2VpdmVkIHRoaXMgZW1haWwgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBh bmQgZGVsZXRlIHRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzLgpBcyBlbWFpbHMgbWF5 IGJlIGFsdGVyZWQsIEZyYW5jZSBUZWxlY29tIC0gT3JhbmdlIGlzIG5vdCBsaWFibGUgZm9yIG1l c3NhZ2VzIHRoYXQgaGF2ZSBiZWVuIG1vZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNpZmllZC4KVGhh bmsgeW91LgoK --_000_6B7134B31289DC4FAF731D844122B36E027ACDPEXCVZYM13corpora_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl Pg0KPCEtLQ0KIC8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCiBAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OlNpbVN1bjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6U2ltU3VuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIg MiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0x OjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q29uc29s YXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseToiXEBTaW1TdW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KIC8q IFN0eWxlIERlZmluaXRpb25zICovDQogcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7DQoJY29s b3I6YmxhY2s7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlz aXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwg Q2FyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6YmxhY2s7fQ0Kc3Bh bi5QcmZvcm1hdEhUTUxDYXINCgl7bXNvLXN0eWxlLW5hbWU6IlByw6lmb3JtYXTDqSBIVE1MIENh ciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQcsOpZm9ybWF0 w6kgSFRNTCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7DQoJY29sb3I6YmxhY2s7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K QHBhZ2UgU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcwLjg1cHQg NzAuODVwdCA3MC44NXB0IDcwLjg1cHQ7fQ0KZGl2LlNlY3Rpb24xDQoJe3BhZ2U6U2VjdGlvbjE7 fQ0KLS0+DQo8L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KIDxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCiA8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQogIDxv OmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KIDwvbzpzaGFwZWxheW91dD48L3htbD48 IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJGUiIgbGlu az0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7DQpjb2xvcjojMUY0OTdE Ij5GaW5lIGZvciBtZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7DQpjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7DQpjb2xvcjojMUY0OTdEIj5MaW9uZWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7DQpjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4w cHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7DQpjb2xvcjp3aW5kb3d0ZXh0Ij5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5Og0KJnF1b3Q7VGFob21hJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6d2luZG93dGV4dCI+IGRpbWUtYm91bmNlc0Bp ZXRmLm9yZyBbbWFpbHRvOmRpbWUtYm91bmNlc0BpZXRmLm9yZ10NCjxiPkRlIGxhIHBhcnQgZGU8 L2I+IEdsZW4gWm9ybjxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiB2ZW5kcmVkaSAxMyBqdWls bGV0IDIwMTIgMDY6Mjg8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IEJlbm9pdCBDbGFpc2U8YnI+DQo8 Yj5DYyZuYnNwOzo8L2I+IGRpbWVAaWV0Zi5vcmc8YnI+DQo8Yj5PYmpldCZuYnNwOzo8L2I+IFJl OiBbRGltZV0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZGltZS1yZmM0MDA1YmlzLTA5LnR4dDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFRodSwgMjAx Mi0wNy0xMiBhdCAyMzowMyAmIzQzOzAyMDAsIEJlbm9pdCBDbGFpc2Ugd3JvdGU6IDxvOnA+DQo8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4w cHQiPk9uIDExLzA3LzIwMTIgMTI6MjQsIEdsZW4gWm9ybiB3cm90ZTo8bzpwPjwvbzpwPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBXZWQsIDIwMTItMDctMTEgYXQgMDk6MDkgJiM0 MzswMjAwLCBCZW5vaXQgQ2xhaXNlIHdyb3RlOiA8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpIExpb25lbCw8YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwv bzpwPjwvcD4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxwcmU+SGkgQmVub2l0LDxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOzxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPi0gSSBj b3VsZCBub3QgZmluZCB0aGUgbWVhbmluZyBvZiAqIGluLCBmb3IgZXhhbXBsZSw8bzpwPjwvbzpw PjwvcHJlPg0KPHByZT4mbmJzcDs8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgWyBDSEFQLUF1dGggXTxvOnA+PC9vOnA+PC9wcmU+DQo8 cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbIENIQVAtQ2hhbGxlbmdl IF08bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgKiBbIEZy YW1lZC1Db21wcmVzc2lvbiBdPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwO1sgRnJhbWVkLUludGVyZmFjZS1JZCBdPG86cD48L286cD48 L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFsgRnJhbWVk LUlQLUFkZHJlc3MgXTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyAqIFsgRnJhbWVkLUlQdjYtUHJlZml4IF08bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgWyBGcmFtZWQtSVAtTmV0bWFzayBdPG86 cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IFsgRnJhbWVkLU1UVSBdPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IFsgRnJhbWVkLVByb3RvY29sIF08bzpwPjwvbzpwPjwvcHJlPg0K PHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgWyBBUkFQLVBhc3N3b3Jk IF08bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgWyBBUkFQLVNlY3VyaXR5IF08bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgKiBbIEFSQVAtU2VjdXJpdHktRGF0YSBdPG86cD48L286cD48L3ByZT4N CjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICogWyBMb2dpbi1JUC1Ib3N0IF08bzpwPjwv bzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgKiBbIExvZ2luLUlQdjYt SG9zdCBdPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO1sgTG9naW4tTEFULUdyb3VwIF08bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgWyBMb2dpbi1MQVQtTm9kZSBdPG86cD48 L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFsg TG9naW4tTEFULVBvcnQgXTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBbIExvZ2luLUxBVC1TZXJ2aWNlIF08bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgKiBbIFR1bm5lbGluZyBdPG86cD48L286 cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICogWyBQcm94eS1JbmZvIF08 bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7KiBbIFJvdXRl LVJlY29yZCBdPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICogWyBBVlAgXTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxiPjxpPltbTE1dXSA8L2k+PC9iPnRo ZSDCqyZuYnNwOyombmJzcDvCuyBpbiBmcm9udCB0aGUgQVZQIG1lYW5zIHRoYXQgMCwgMSBvciBt b3JlIEFWUCBzY2FuIGJlIHByZXNlbnQgaW4gdGhlIHJlcXVlc3QgKG9yIGluIGEgR3JvdXBlZCBB VlApLiBJdCBmb2xsb3dzIHJ1bGVzIHVzZWQgaW4gUkZDMzU4OCBhbmQgZGVmaW5lZCBpbiBSRkMg NTIzNCAoPGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNTIzNCNzZWN0aW9u LTMuNiI+aHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNTIzNCNzZWN0aW9uLTMuNjwvYT4p LjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOzxvOnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5CQyZndDsgVGhhbmtzIGZvciB0aGUgZWR1Y2F0aW9uLjxicj4NCklzIHRo aXMgc28gb2J2aW91cyB0byB0aGUgRGlhbWV0ZXIgcmVhZGVycywgaW5jbHVkaW5nIHRoZSBuZXdj b21lcnMsIHRoYXQgd2UgZG9uJ3QgbmVlZCB0byBtZW50aW9uIGl0Pzxicj4NCkluIG90aGVyIHdv cmRzLCBhbSBJIHRoZSBvbmx5IG9uZSBOT1Qga25vd2luZyB0aGlzPyA7LSk8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCkhtbS4mbmJzcDsgZHJhZnQtaWV0Zi1kaW1l LXJmYzM1ODhiaXMgaXMgbGlzdGVkIGFzJm5ic3A7IGEgbm9ybWF0aXZlIHJlZmVyZW5jZSBpbiA0 MDA1YmlzIGFuZCBSRkMgNTIzOCBpcyBsaXN0ZWQgYXMgYSBub3JtYXRpdmUgcmVmZXJlbmNlIGlu IGRyYWZ0LWlldGYtZGltZS1yZmMzNTg4YmlzLiZuYnNwOyBNeSB1bmRlcnN0YW5kaW5nIGlzIHRo YXQgb25lIGNhbm5vdCBleHBlY3QgdG8gcmVhZCBhbmQgdW5kZXJzdGFuZCBhbiBSRkMgd2l0aG91 dCBoYXZpbmcgcmVhZCBhbmQNCiB1bmRlcnN0b29kIHRoZSBub3JtYXRpdmUgcmVmZXJlbmNlcyB0 aGVyZW9mLiA8bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkFncmVlZCBvbiB0aGUgcHJpbmNpcGxlLCBleGNlcHQgdGhhdCwgaW4gdGhpcyBjYXNlLCB3 ZSBzcGVhayBhYm91dCBhbiAmcXVvdDsqJnF1b3Q7LCB3aGljaCBjb3VsZCBtZWFuIHNvbWV0aGlu ZyBzcGVjaWZpYyBmb3IgdGhpcyBkb2N1bWVudDogb3B0aW9uYWwsIGEgcmVmZXJlbmNlIHRvIHNv bWV0aGluZyBlbHNlLCBldGMuLi48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxicj4NCkhvdyBhYm91dCB0aGlzPzxicj4NCjxicj4NCk9MRDo8YnI+ DQozLiZuYnNwOyBEaWFtZXRlciBOQVMgQXBwbGljYXRpb24gTWVzc2FnZXM8YnI+DQo8YnI+DQom bmJzcDsmbmJzcDsgVGhpcyBzZWN0aW9uIGRlZmluZXMgdGhlIERpYW1ldGVyIG1lc3NhZ2UgQ29t bWFuZC1Db2RlPGJyPg0KJm5ic3A7Jm5ic3A7IFtJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXNdIHZh bHVlcyB0aGF0IE1VU1QgYmUgc3VwcG9ydGVkIGJ5IGFsbDxicj4NCiZuYnNwOyZuYnNwOyBEaWFt ZXRlciBpbXBsZW1lbnRhdGlvbnMgY29uZm9ybWluZyB0byB0aGlzIHNwZWNpZmljYXRpb24uJm5i c3A7IFRoZTxicj4NCiZuYnNwOyZuYnNwOyBDb21tYW5kIENvZGVzIGFyZSBhcyBmb2xsb3dzOjxi cj4NCjxicj4NCiZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tJiM0MzstLS0tLS0tLS0mIzQzOy0tLS0tLSYjNDM7LS0tLS0tLS0tLS0tLS0mIzQzOzxi cj4NCiZuYnNwOyZuYnNwOyB8IENvbW1hbmQgTmFtZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IEFiYnJldi4gfCBD b2RlIHwgUmVmZXJlbmNlJm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsmbmJzcDsgJiM0 MzstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSYjNDM7LS0tLS0tLS0tJiM0Mzst LS0tLS0mIzQzOy0tLS0tLS0tLS0tLS0tJiM0Mzs8YnI+DQombmJzcDsmbmJzcDsgfCBBQS1SZXF1 ZXN0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsgQUFSJm5ic3A7Jm5ic3A7 IHwmbmJzcDsgMjY1IHwgU2VjdGlvbiAzLjEmbmJzcDsgfDxicj4NCiZuYnNwOyZuYnNwOyB8IEFB LUFuc3dlciZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IEFBQSZu YnNwOyZuYnNwOyB8Jm5ic3A7IDI2NSB8IFNlY3Rpb24gMy4yJm5ic3A7IHw8YnI+DQombmJzcDsm bmJzcDsgfCBSZS1BdXRoLVJlcXVlc3QmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBSQVImbmJzcDsmbmJzcDsgfCZuYnNwOyAy NTggfCBTZWN0aW9uIDMuMyZuYnNwOyB8PGJyPg0KJm5ic3A7Jm5ic3A7IHwgUmUtQXV0aC1BbnN3 ZXImbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgfCZuYnNwOyZuYnNwOyBSQUEmbmJzcDsmbmJzcDsgfCZuYnNwOyAyNTggfCBTZWN0aW9uIDMu NCZuYnNwOyB8PGJyPg0KJm5ic3A7Jm5ic3A7IHwgU2Vzc2lvbi1UZXJtaW5hdGlvbi1SZXF1ZXN0 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsgU1RSJm5i c3A7Jm5ic3A7IHwmbmJzcDsgMjc1IHwgU2VjdGlvbiAzLjUmbmJzcDsgfDxicj4NCiZuYnNwOyZu YnNwOyB8IFNlc3Npb24tVGVybWluYXRpb24tQW5zd2VyJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsgU1RBJm5ic3A7Jm5ic3A7IHwmbmJzcDsg Mjc1IHwgU2VjdGlvbiAzLjYmbmJzcDsgfDxicj4NCiZuYnNwOyZuYnNwOyB8IEFib3J0LVNlc3Np b24tUmVxdWVzdCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IEFTUiZuYnNwOyZuYnNwOyB8 Jm5ic3A7IDI3NCB8IFNlY3Rpb24gMy43Jm5ic3A7IHw8YnI+DQombmJzcDsmbmJzcDsgfCBBYm9y dC1TZXNzaW9uLUFuc3dlciZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IEFTQSZu YnNwOyZuYnNwOyB8Jm5ic3A7IDI3NCB8IFNlY3Rpb24gMy44Jm5ic3A7IHw8YnI+DQombmJzcDsm bmJzcDsgfCBBY2NvdW50aW5nLVJlcXVlc3QmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgfCZuYnNwOyZuYnNwOyBBQ1ImbmJzcDsmbmJzcDsgfCZuYnNwOyAyNzEgfCBTZWN0aW9uIDMu OSZuYnNwOyB8PGJyPg0KJm5ic3A7Jm5ic3A7IHwgQWNjb3VudGluZy1BbnN3ZXImbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBBQ0EmbmJzcDsmbmJz cDsgfCZuYnNwOyAyNzEgfCBTZWN0aW9uIDMuMTAgfDxicj4NCiZuYnNwOyZuYnNwOyAmIzQzOy0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0mIzQzOy0tLS0t LSYjNDM7LS0tLS0tLS0tLS0tLS0mIzQzOzxicj4NCjxicj4NCk5FVzo8YnI+DQozLiZuYnNwOyBE aWFtZXRlciBOQVMgQXBwbGljYXRpb24gTWVzc2FnZXM8YnI+DQo8YnI+DQombmJzcDsmbmJzcDsg VGhpcyBzZWN0aW9uIGRlZmluZXMgdGhlIERpYW1ldGVyIG1lc3NhZ2UgQ29tbWFuZC1Db2RlPGJy Pg0KJm5ic3A7Jm5ic3A7IFtJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXNdIHZhbHVlcyB0aGF0IE1V U1QgYmUgc3VwcG9ydGVkIGJ5IGFsbDxicj4NCiZuYnNwOyZuYnNwOyBEaWFtZXRlciBpbXBsZW1l bnRhdGlvbnMgY29uZm9ybWluZyB0byB0aGlzIHNwZWNpZmljYXRpb24uJm5ic3A7IFRoZTxicj4N CiZuYnNwOyZuYnNwOyBDb21tYW5kIENvZGVzIGFyZSBhcyBmb2xsb3dzOjxicj4NCjxicj4NCiZu YnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tJiM0Mzst LS0tLS0tLS0mIzQzOy0tLS0tLSYjNDM7LS0tLS0tLS0tLS0tLS0mIzQzOzxicj4NCiZuYnNwOyZu YnNwOyB8IENvbW1hbmQgTmFtZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IEFiYnJldi4gfCBDb2RlIHwgUmVmZXJl bmNlJm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsmbmJzcDsgJiM0MzstLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSYjNDM7LS0tLS0tLS0tJiM0MzstLS0tLS0mIzQzOy0t LS0tLS0tLS0tLS0tJiM0Mzs8YnI+DQombmJzcDsmbmJzcDsgfCBBQS1SZXF1ZXN0Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsgQUFSJm5ic3A7Jm5ic3A7IHwmbmJzcDsgMjY1 IHwgU2VjdGlvbiAzLjEmbmJzcDsgfDxicj4NCiZuYnNwOyZuYnNwOyB8IEFBLUFuc3dlciZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IEFBQSZuYnNwOyZuYnNwOyB8 Jm5ic3A7IDI2NSB8IFNlY3Rpb24gMy4yJm5ic3A7IHw8YnI+DQombmJzcDsmbmJzcDsgfCBSZS1B dXRoLVJlcXVlc3QmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfCZuYnNwOyZuYnNwOyBSQVImbmJzcDsmbmJzcDsgfCZuYnNwOyAyNTggfCBTZWN0aW9u IDMuMyZuYnNwOyB8PGJyPg0KJm5ic3A7Jm5ic3A7IHwgUmUtQXV0aC1BbnN3ZXImbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZu YnNwOyBSQUEmbmJzcDsmbmJzcDsgfCZuYnNwOyAyNTggfCBTZWN0aW9uIDMuNCZuYnNwOyB8PGJy Pg0KJm5ic3A7Jm5ic3A7IHwgU2Vzc2lvbi1UZXJtaW5hdGlvbi1SZXF1ZXN0Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsgU1RSJm5ic3A7Jm5ic3A7IHwm bmJzcDsgMjc1IHwgU2VjdGlvbiAzLjUmbmJzcDsgfDxicj4NCiZuYnNwOyZuYnNwOyB8IFNlc3Np b24tVGVybWluYXRpb24tQW5zd2VyJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHwmbmJzcDsmbmJzcDsgU1RBJm5ic3A7Jm5ic3A7IHwmbmJzcDsgMjc1IHwgU2VjdGlv biAzLjYmbmJzcDsgfDxicj4NCiZuYnNwOyZuYnNwOyB8IEFib3J0LVNlc3Npb24tUmVxdWVzdCZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IEFTUiZuYnNwOyZuYnNwOyB8Jm5ic3A7IDI3NCB8 IFNlY3Rpb24gMy43Jm5ic3A7IHw8YnI+DQombmJzcDsmbmJzcDsgfCBBYm9ydC1TZXNzaW9uLUFu c3dlciZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IEFTQSZuYnNwOyZuYnNwOyB8 Jm5ic3A7IDI3NCB8IFNlY3Rpb24gMy44Jm5ic3A7IHw8YnI+DQombmJzcDsmbmJzcDsgfCBBY2Nv dW50aW5nLVJlcXVlc3QmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZu YnNwOyBBQ1ImbmJzcDsmbmJzcDsgfCZuYnNwOyAyNzEgfCBTZWN0aW9uIDMuOSZuYnNwOyB8PGJy Pg0KJm5ic3A7Jm5ic3A7IHwgQWNjb3VudGluZy1BbnN3ZXImbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBBQ0EmbmJzcDsmbmJzcDsgfCZuYnNwOyAy NzEgfCBTZWN0aW9uIDMuMTAgfDxicj4NCiZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0mIzQzOy0tLS0tLSYjNDM7LS0tLS0t LS0tLS0tLS0mIzQzOzxicj4NCjxicj4NCk5vdGUgdGhhdCB0aGUgbWVzc2FnZSBmb3JtYXRzIGlu IHRoZSBmb2xsb3dpbmcgc3ViLXNlY3Rpb25zIHVzZSB0aGUgc3RhbmRhcmQgRGlhbWV0ZXIgQ29t bWFuZCBDb2RlIEZvcm1hdCAoW0ktRC5pZXRmLWRpbWUtcmZjMzU4OGJpc10sIFNlY3Rpb24gMy4y KS48YnI+DQombmJzcDsmbmJzcDsgPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48YnI+DQpSZWdhcmRzLCBCZW5vaXQuPGJyPg0KPGJyPg0KPGJyPg0KPGJy Pg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JcyBteSB1bmRlcnN0YW5k aW5nIGNvcnJlY3Q/Jm5ic3A7IElmIHNvLCB0aGVuIHRoZXJlIGlzIGluIGZhY3Qgbm8gbmVlZCB0 byBtZW50aW9uIGl0IHNpbmNlIGFueSByZWFkZXIgY29nbml6YW50IG9mIHRoYXQgcmVxdWlyZW1l bnQgd2lsbCBhbHJlYWR5IGtub3cgKG9yIGNvdWxkIGVhc2lseSByZWZyZXNoIHRoZSBtZW1vcnkg b2YpIHdoYXQgdGhlIG5vdGF0aW9uIG1lYW5zLjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KUmVnYXJkcywgQmVub2l0Ljxicj4NCjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0K PHByZT5SZWdhcmRzLDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOzxvOnA+PC9vOnA+PC9w cmU+DQo8cHJlPkxpb25lbDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwPjwvbzpw PjwvcHJlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPHByZT5DZSBtZXNzYWdlIGV0 IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRlbmlyIGRlcyBpbmZvcm1hdGlvbnMgY29u ZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBuZSBkb2l2ZW50IGRvbmM8bzpwPjwvbzpw PjwvcHJlPg0KPHByZT5wYXMgZXRyZSBkaWZmdXNlcywgZXhwbG9pdGVzIG91IGNvcGllcyBzYW5z IGF1dG9yaXNhdGlvbi4gU2kgdm91cyBhdmV6IHJlY3UgY2UgbWVzc2FnZSBwYXIgZXJyZXVyLCB2 ZXVpbGxleiBsZSBzaWduYWxlcjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPmEgbCdleHBlZGl0ZXVy IGV0IGxlIGRldHJ1aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdl cyBlbGVjdHJvbmlxdWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sPG86cD48L286 cD48L3ByZT4NCjxwcmU+RnJhbmNlIFRlbGVjb20gLSBPcmFuZ2UgZGVjbGluZSB0b3V0ZSByZXNw b25zYWJpbGl0ZSBzaSBjZSBtZXNzYWdlIGEgZXRlIGFsdGVyZSwgZGVmb3JtZSBvdSBmYWxzaWZp ZS4gTWVyY2kuPG86cD48L286cD48L3ByZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4N CjxwcmU+VGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMgbWF5IGNvbnRhaW4gY29uZmlk ZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcHJvdGVjdGVkIGJ5 IGxhdzs8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT50aGV5IHNob3VsZCBub3QgYmUgZGlzdHJpYnV0 ZWQsIHVzZWQgb3IgY29waWVkIHdpdGhvdXQgYXV0aG9yaXNhdGlvbi48bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT5JZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVtYWlsIGluIGVycm9yLCBwbGVhc2Ug bm90aWZ5IHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2ht ZW50cy48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT5BcyBlbWFpbHMgbWF5IGJlIGFsdGVyZWQsIEZy YW5jZSBUZWxlY29tIC0gT3JhbmdlIGlzIG5vdCBsaWFibGUgZm9yIG1lc3NhZ2VzIHRoYXQgaGF2 ZSBiZWVuIG1vZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNpZmllZC48bzpwPjwvbzpwPjwvcHJlPg0K PHByZT5UaGFuayB5b3UuPG86cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cHJlPjxv OnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8cHJlPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fPG86cD48L286cD48L3ByZT4NCjxwcmU+RGlNRSBtYWlsaW5nIGxp c3Q8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48YSBocmVmPSJtYWlsdG86RGlNRUBpZXRmLm9yZyI+ RGlNRUBpZXRmLm9yZzwvYT48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48YSBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RpbWUiPmh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vZGltZTwvYT48bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+DQo8YnI+DQo8bzpwPjwv bzpwPjwvcD4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxwcmU+X19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwPjwvbzpwPjwvcHJlPg0KPHBy ZT5EaU1FIG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxhIGhyZWY9Im1haWx0 bzpEaU1FQGlldGYub3JnIj5EaU1FQGlldGYub3JnPC9hPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJl PjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZGltZSI+aHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kaW1lPC9hPjxvOnA+PC9vOnA+PC9w cmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxQUkU+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBldCBzZXMgcGllY2VzIGpv aW50ZXMgcGV1dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVudGllbGxlcyBv dSBwcml2aWxlZ2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBs b2l0ZXMgb3UgY29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBt ZXNzYWdlIHBhciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEgbCdleHBlZGl0ZXVyIGV0 IGxlIGRldHJ1aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBl bGVjdHJvbmlxdWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sCkZyYW5jZSBUZWxl Y29tIC0gT3JhbmdlIGRlY2xpbmUgdG91dGUgcmVzcG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBh IGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFsc2lmaWUuIE1lcmNpLgoKVGhpcyBtZXNzYWdlIGFu ZCBpdHMgYXR0YWNobWVudHMgbWF5IGNvbnRhaW4gY29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQg aW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcHJvdGVjdGVkIGJ5IGxhdzsKdGhleSBzaG91bGQgbm90 IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9yIGNvcGllZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uCklm IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhl IHNlbmRlciBhbmQgZGVsZXRlIHRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzLgpBcyBl bWFpbHMgbWF5IGJlIGFsdGVyZWQsIEZyYW5jZSBUZWxlY29tIC0gT3JhbmdlIGlzIG5vdCBsaWFi bGUgZm9yIG1lc3NhZ2VzIHRoYXQgaGF2ZSBiZWVuIG1vZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNp ZmllZC4KVGhhbmsgeW91Lgo8L1BSRT48L2JvZHk+DQo8L2h0bWw+DQo= --_000_6B7134B31289DC4FAF731D844122B36E027ACDPEXCVZYM13corpora_-- From lionel.morand@orange.com Fri Jul 13 00:32:25 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CF5221F8659 for ; Fri, 13 Jul 2012 00:32:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.497 X-Spam-Level: X-Spam-Status: No, score=-2.497 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, HTML_MESSAGE=0.001, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MfCC6XdB0oxC for ; Fri, 13 Jul 2012 00:32:24 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id C69DD21F861D for ; Fri, 13 Jul 2012 00:32:23 -0700 (PDT) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm11.si.francetelecom.fr (ESMTP service) with ESMTP id B47333B44A8; Fri, 13 Jul 2012 09:32:58 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.186]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id 88E7723805C; Fri, 13 Jul 2012 09:32:58 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH01.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.02.0298.004; Fri, 13 Jul 2012 09:32:58 +0200 From: To: Glen Zorn Thread-Topic: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 Thread-Index: AQHNYLl8Icbv7E5KHUWxZ4DKRoL6hJcmz8eA Date: Fri, 13 Jul 2012 07:32:45 +0000 Message-ID: <20298_1342164778_4FFFCF2A_20298_209_11_6B7134B31289DC4FAF731D844122B36E027B1C@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> <9766_1342022182_4FFDA226_9766_3407_1_6B7134B31289DC4FAF731D844122B36E0273AB@PEXCVZYM13.corporate.adroot.infra.ftgroup> <1342157804.14913.102.camel@gwz-laptop> In-Reply-To: <1342157804.14913.102.camel@gwz-laptop> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.5] Content-Type: multipart/alternative; boundary="_000_6B7134B31289DC4FAF731D844122B36E027B1CPEXCVZYM13corpora_" MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.6.19.115414 Cc: "dime@ietf.org" Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 07:32:25 -0000 --_000_6B7134B31289DC4FAF731D844122B36E027B1CPEXCVZYM13corpora_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgR2xlbiwNCg0KSSBkb27igJl0IHRoaW5rIHRoYXQgYXN5bW1ldHJpY2FsIHNlY3VyaXR5IG1h eSBiZSBzZXQgdXAgd2hlbiBjb25zaWRlcmluZyBkaWFtZXRlciBjb25uZWN0aW9ucyBvdmVyIFRM Uy9EVExTIG9yIElQc2VjLiAgQnV0IEkgbWF5IGJlIHdyb25nLg0KDQpIb3dldmVyLCBhcyB5b3Ug aGlnaGxpZ2h0IGl0LCB0aGlzIHNob3VsZCBiZSBjb3ZlcmVkIGluIHRoZSBzZWN1cml0eSBjb25z aWRlcmF0aW9ucyBvZiB0aGUgMzU4OGJpcy4gSSB3b3VsZCB0aGVuIHJlY29tbWVuZCByZW1vdmlu ZyB0aGUgdGV4dCBmcm9tIHRoZSBSRkM0MDA1YmlzIGFuZCBzZWVpbmcgaWYgc29tZXRoaW5nIGlz IG1pc3NpbmcgaW4gdGhlIHNlY3Rpb24gMTMgb2YgUkZDMzU4OGJpcy4gSSB0aGluayB0aGF0IHRo ZSBjdXJyZW50IHRleHQgaXMgb2sgYnV0IHNvbWVvbmUgY291bGQgZmluZCBzb21ldGhpbmcgbWlz c2luZy4NCg0KV291bGQgaXQgYmUgT0s/DQoNClJlZ2FyZHMsDQoNCkxpb25lbA0KDQpEZSA6IEds ZW4gWm9ybiBbbWFpbHRvOmdsZW56b3JuQGdtYWlsLmNvbV0NCkVudm95w6kgOiB2ZW5kcmVkaSAx MyBqdWlsbGV0IDIwMTIgMDc6MzcNCsOAIDogTU9SQU5EIExpb25lbCBSRC1DT1JFDQpDYyA6IGds ZW56b3JuQGdtYWlsLmNvbTsgZGltZUBpZXRmLm9yZw0KT2JqZXQgOiBSRTogW0RpbWVdIEFEIHJl dmlldyBvZiBkcmFmdC1pZXRmLWRpbWUtcmZjNDAwNWJpcy0wOS50eHQgLSBwYXJ0IDINCg0KT24g V2VkLCAyMDEyLTA3LTExIGF0IDE1OjU2ICswMDAwLCBsaW9uZWwubW9yYW5kQG9yYW5nZS5jb20g d3JvdGU6DQpJbmRlZWQsIGl0IGlzIG9sZCBzdHVmZiENCg0KQ2FuIHdlIGNvbnNpZGVyIHRoYXQg dGhpcyBwYXJ0IG9mIHRleHQgaXMgbm90IHJlbGV2YW50IHRvIFJGQzQwMDUgKGJ1dCB0byBhbnkg RGlhbWV0ZXIgYXBwbGljYXRpb24pIGFuZCBjb3VsZCBiZSByZW1vdmVkIGZyb20gdGhpcyBzcGVj IHdpdGhvdXQgaW1wYWN0Pw0KDQpJbiB0aGF0IGNhc2UsIHNob3VsZG4ndCBpdCBiZSBhZGRlZCB0 byAzNTg4YmlzPw0KDQoNCkkgdGhpbmsgdGhhdCB0aGlzIHBvaW50IHdpbGwgYmUgYW55d2F5IGNv dmVyZWQgYnkgdGhlIGRlZGljYXRlZCBkcmFmdCBvbiBFMkUgc2VjdXJpdHkuDQoNCkknbSBub3Qg c3VyZSB0aGF0IGl0IGlzIG5lY2Vzc2FyaWx5IHNwZWNpZmljIHRvIGUyZSBzZWN1cml0eSBiZWNh dXNlIEkgY2FuIGltYWdpbmUgY2FzZXMgaW4gd2hpY2ggcmVxdWVzdHMgYW5kIGFuc3dlcnMgY291 bGQgcmVhc29uYWJseSBoYXZlIGFzeW1tZXRyaWNhbCBzZWN1cml0eSBwcm9wZXJ0aWVzLiAgQWxz bywgY291bGQgaXQgaGFwcGVuIHdpdGggU0NUUC9EVExTPw0KDQouLi4NCgpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpDZSBt ZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRlbmlyIGRlcyBpbmZvcm1h dGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBuZSBkb2l2ZW50IGRvbmMK cGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBjb3BpZXMgc2FucyBhdXRvcmlzYXRpb24u IFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFyIGVycmV1ciwgdmV1aWxsZXogbGUgc2ln bmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVpcmUgYWluc2kgcXVlIGxlcyBwaWVjZXMg am9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1ZXMgZXRhbnQgc3VzY2VwdGlibGVzIGQn YWx0ZXJhdGlvbiwKRnJhbmNlIFRlbGVjb20gLSBPcmFuZ2UgZGVjbGluZSB0b3V0ZSByZXNwb25z YWJpbGl0ZSBzaSBjZSBtZXNzYWdlIGEgZXRlIGFsdGVyZSwgZGVmb3JtZSBvdSBmYWxzaWZpZS4g TWVyY2kuCgpUaGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cyBtYXkgY29udGFpbiBjb25m aWRlbnRpYWwgb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbiB0aGF0IG1heSBiZSBwcm90ZWN0ZWQg YnkgbGF3Owp0aGV5IHNob3VsZCBub3QgYmUgZGlzdHJpYnV0ZWQsIHVzZWQgb3IgY29waWVkIHdp dGhvdXQgYXV0aG9yaXNhdGlvbi4KSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBl cnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhpcyBtZXNzYWdlIGFu ZCBpdHMgYXR0YWNobWVudHMuCkFzIGVtYWlscyBtYXkgYmUgYWx0ZXJlZCwgRnJhbmNlIFRlbGVj b20gLSBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZlIGJlZW4gbW9k aWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCgo= --_000_6B7134B31289DC4FAF731D844122B36E027B1CPEXCVZYM13corpora_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl Pg0KPCEtLQ0KIC8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCiBAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OlNpbVN1bjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6U2ltU3VuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIg MiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0x OjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxAU2lt U3VuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCiAvKiBTdHlsZSBEZWZpbml0 aW9ucyAqLw0KIHAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFy Z2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglm b250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29I eXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93 ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29s b3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3 OTIuMHB0Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5T ZWN0aW9uMQ0KCXtwYWdlOlNlY3Rpb24xO30NCi0tPg0KPC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCiA8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAv Pg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQogPG86c2hhcGVs YXlvdXQgdjpleHQ9ImVkaXQiPg0KICA8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4N CiA8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBiZ2Nv bG9yPSJ3aGl0ZSIgbGFuZz0iRlIiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBj bGFzcz0iU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ow0KY29sb3I6IzFGNDk3RCI+SGkgR2xlbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7DQpjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ow0KY29sb3I6IzFG NDk3RCI+SSBkb27igJl0IHRoaW5rIHRoYXQgYXN5bW1ldHJpY2FsIHNlY3VyaXR5IG1heSBiZSBz ZXQgdXAgd2hlbiBjb25zaWRlcmluZyBkaWFtZXRlciBjb25uZWN0aW9ucyBvdmVyIFRMUy9EVExT IG9yIElQc2VjLiAmbmJzcDtCdXQgSSBtYXkgYmUgd3JvbmcuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90OzsNCmNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7DQpjb2xvcjojMUY0OTdEIj5Ib3dldmVyLCBhcyB5b3UgaGlnaGxpZ2h0IGl0LCB0aGlzIHNo b3VsZCBiZSBjb3ZlcmVkIGluIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBvZiB0aGUgMzU4 OGJpcy4gSSB3b3VsZCB0aGVuIHJlY29tbWVuZCByZW1vdmluZyB0aGUgdGV4dA0KIGZyb20gdGhl IFJGQzQwMDViaXMgYW5kIHNlZWluZyBpZiBzb21ldGhpbmcgaXMgbWlzc2luZyBpbiB0aGUgc2Vj dGlvbiAxMyBvZiBSRkMzNTg4YmlzLiBJIHRoaW5rIHRoYXQgdGhlIGN1cnJlbnQgdGV4dCBpcyBv ayBidXQgc29tZW9uZSBjb3VsZCBmaW5kIHNvbWV0aGluZyBtaXNzaW5nLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7DQpjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ow0KY29sb3I6IzFGNDk3RCI+V291bGQgaXQgYmUgT0s/PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OzsNCmNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7DQpjb2xvcjojMUY0OTdEIj5SZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7DQpjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ow0KY29sb3I6IzFGNDk3RCI+TGlvbmVsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OzsNCmNv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzoz LjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OyI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+IEdsZW4gWm9ybiBbbWFpbHRvOmdsZW56b3JuQGdtYWlsLmNvbV0NCjxicj4NCjxiPkVu dm95w6kmbmJzcDs6PC9iPiB2ZW5kcmVkaSAxMyBqdWlsbGV0IDIwMTIgMDc6Mzc8YnI+DQo8Yj7D gCZuYnNwOzo8L2I+IE1PUkFORCBMaW9uZWwgUkQtQ09SRTxicj4NCjxiPkNjJm5ic3A7OjwvYj4g Z2xlbnpvcm5AZ21haWwuY29tOyBkaW1lQGlldGYub3JnPGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9i PiBSRTogW0RpbWVdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRpbWUtcmZjNDAwNWJpcy0wOS50 eHQgLSBwYXJ0IDI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5PbiBXZWQsIDIwMTItMDctMTEgYXQgMTU6NTYgJiM0MzswMDAwLCBsaW9uZWwubW9yYW5kQG9y YW5nZS5jb20gd3JvdGU6DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklu ZGVlZCwgaXQgaXMgb2xkIHN0dWZmITxicj4NCjxicj4NCkNhbiB3ZSBjb25zaWRlciB0aGF0IHRo aXMgcGFydCBvZiB0ZXh0IGlzIG5vdCByZWxldmFudCB0byBSRkM0MDA1IChidXQgdG8gYW55IERp YW1ldGVyIGFwcGxpY2F0aW9uKSBhbmQgY291bGQgYmUgcmVtb3ZlZCBmcm9tIHRoaXMgc3BlYyB3 aXRob3V0IGltcGFjdD8NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJy Pg0KSW4gdGhhdCBjYXNlLCBzaG91bGRuJ3QgaXQgYmUgYWRkZWQgdG8gMzU4OGJpcz88YnI+DQo8 YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgdGhpbmsg dGhhdCB0aGlzIHBvaW50IHdpbGwgYmUgYW55d2F5IGNvdmVyZWQgYnkgdGhlIGRlZGljYXRlZCBk cmFmdCBvbiBFMkUgc2VjdXJpdHkuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48YnI+DQpJJ20gbm90IHN1cmUgdGhhdCBpdCBpcyBuZWNlc3NhcmlseSBzcGVjaWZpYyB0byBl MmUgc2VjdXJpdHkgYmVjYXVzZSBJIGNhbiBpbWFnaW5lIGNhc2VzIGluIHdoaWNoIHJlcXVlc3Rz IGFuZCBhbnN3ZXJzIGNvdWxkIHJlYXNvbmFibHkgaGF2ZSBhc3ltbWV0cmljYWwgc2VjdXJpdHkg cHJvcGVydGllcy4mbmJzcDsgQWxzbywgY291bGQgaXQgaGFwcGVuIHdpdGggU0NUUC9EVExTPzxi cj4NCjxicj4NCi4uLiA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPFBSRT5fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpDZSBt ZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRlbmlyIGRlcyBpbmZvcm1h dGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBuZSBkb2l2ZW50IGRvbmMK cGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBjb3BpZXMgc2FucyBhdXRvcmlzYXRpb24u IFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFyIGVycmV1ciwgdmV1aWxsZXogbGUgc2ln bmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVpcmUgYWluc2kgcXVlIGxlcyBwaWVjZXMg am9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1ZXMgZXRhbnQgc3VzY2VwdGlibGVzIGQn YWx0ZXJhdGlvbiwKRnJhbmNlIFRlbGVjb20gLSBPcmFuZ2UgZGVjbGluZSB0b3V0ZSByZXNwb25z YWJpbGl0ZSBzaSBjZSBtZXNzYWdlIGEgZXRlIGFsdGVyZSwgZGVmb3JtZSBvdSBmYWxzaWZpZS4g TWVyY2kuCgpUaGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cyBtYXkgY29udGFpbiBjb25m aWRlbnRpYWwgb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbiB0aGF0IG1heSBiZSBwcm90ZWN0ZWQg YnkgbGF3Owp0aGV5IHNob3VsZCBub3QgYmUgZGlzdHJpYnV0ZWQsIHVzZWQgb3IgY29waWVkIHdp dGhvdXQgYXV0aG9yaXNhdGlvbi4KSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBl cnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhpcyBtZXNzYWdlIGFu ZCBpdHMgYXR0YWNobWVudHMuCkFzIGVtYWlscyBtYXkgYmUgYWx0ZXJlZCwgRnJhbmNlIFRlbGVj b20gLSBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZlIGJlZW4gbW9k aWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCjwvUFJFPjwvYm9keT4NCjwv aHRtbD4NCg== --_000_6B7134B31289DC4FAF731D844122B36E027B1CPEXCVZYM13corpora_-- From internet-drafts@ietf.org Fri Jul 13 02:34:22 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4308921F8539; Fri, 13 Jul 2012 02:34:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.502 X-Spam-Level: X-Spam-Status: No, score=-102.502 tagged_above=-999 required=5 tests=[AWL=0.097, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VaoD91E1P8X9; Fri, 13 Jul 2012 02:34:21 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9334D21F865C; Fri, 13 Jul 2012 02:34:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.30p3 Message-ID: <20120713093421.29236.59233.idtracker@ietfa.amsl.com> Date: Fri, 13 Jul 2012 02:34:21 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-pmip6-lr-14.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 09:34:22 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Support for Proxy Mobile IPv6 Localized Routing Author(s) : Glen Zorn Qin Wu Marco Liebsch Jouni Korhonen Filename : draft-ietf-dime-pmip6-lr-14.txt Pages : 12 Date : 2012-07-13 Abstract: In Proxy Mobile IPv6, packets received from a Mobile Node (MN) by the Mobile Access Gateway (MAG) to which it is attached are typically tunneled to a Local Mobility Anchor (LMA) for routing. The term "localized routing" refers to a method by which packets are routed directly between an MN's MAG and the MAG of its Correspondent Node (CN) without involving any LMA. In order to establish a localized routing session between two Mobile Access Gateways in a Proxy Mobile IPv6 domain, the usage of localized routing may be authorized for both MAGs. This document specifies how to accomplish this using the Diameter protocol. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-pmip6-lr There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-pmip6-lr-14 A diff from previous version is available at: http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-pmip6-lr-14 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From bclaise@cisco.com Fri Jul 13 06:12:49 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C24B21F8845 for ; Fri, 13 Jul 2012 06:12:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.42 X-Spam-Level: X-Spam-Status: No, score=-10.42 tagged_above=-999 required=5 tests=[AWL=0.178, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CETJBP6JS78O for ; Fri, 13 Jul 2012 06:12:47 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 44A0821F883B for ; Fri, 13 Jul 2012 06:12:47 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6DDDL3G022759; Fri, 13 Jul 2012 15:13:21 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6DDDKKA005908; Fri, 13 Jul 2012 15:13:20 +0200 (CEST) Message-ID: <50001EF0.9060507@cisco.com> Date: Fri, 13 Jul 2012 15:13:20 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: lionel.morand@orange.com References: <4FFC405F.9030508@cisco.com> <15719_1341962331_4FFCB85B_15719_4173_1_6B7134B31289DC4FAF731D844122B36E027152@PEXCVZYM13.corporate.adroot.infra.ftgroup> <4FFD2694.2040704@cisco.com> <1342002286.14913.56.camel@gwz-laptop> <4FFF3B9D.4040905@cisco.com> <1342153675.14913.96.camel@gwz-laptop> <1833_1342161714_4FFFC332_1833_14018_1_6B7134B31289DC4FAF731D844122B36E027ACD@PEXCVZYM13.corporate.adroot.infra.ftgroup> In-Reply-To: <1833_1342161714_4FFFC332_1833_14018_1_6B7134B31289DC4FAF731D844122B36E027ACD@PEXCVZYM13.corporate.adroot.infra.ftgroup> Content-Type: multipart/alternative; boundary="------------020202020308050406090309" Cc: "dime@ietf.org" Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 13:12:49 -0000 This is a multi-part message in MIME format. --------------020202020308050406090309 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Glen, That works for me. Regards, Benoit. > > Fine for me. > > Lionel > > *De :*dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] *De la part > de* Glen Zorn > *Envoyé :* vendredi 13 juillet 2012 06:28 > *À :* Benoit Claise > *Cc :* dime@ietf.org > *Objet :* Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt > > On Thu, 2012-07-12 at 23:03 +0200, Benoit Claise wrote: > > On 11/07/2012 12:24, Glen Zorn wrote: > > On Wed, 2012-07-11 at 09:09 +0200, Benoit Claise wrote: > > Hi Lionel, > > > > > Hi Benoit, > > > > - I could not find the meaning of * in, for example, > > > > [ CHAP-Auth ] > > [ CHAP-Challenge ] > > * [ Framed-Compression ] > > [ Framed-Interface-Id ] > > [ Framed-IP-Address ] > > * [ Framed-IPv6-Prefix ] > > [ Framed-IP-Netmask ] > > [ Framed-MTU ] > > [ Framed-Protocol ] > > [ ARAP-Password ] > > [ ARAP-Security ] > > * [ ARAP-Security-Data ] > > * [ Login-IP-Host ] > > * [ Login-IPv6-Host ] > > [ Login-LAT-Group ] > > [ Login-LAT-Node ] > > [ Login-LAT-Port ] > > [ Login-LAT-Service ] > > * [ Tunneling ] > > * [ Proxy-Info ] > > * [ Route-Record ] > > * [ AVP ] > > */[[LM]]/*the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6). > > > > BC> Thanks for the education. > Is this so obvious to the Diameter readers, including the > newcomers, that we don't need to mention it? > In other words, am I the only one NOT knowing this? ;-) > > > Hmm. draft-ietf-dime-rfc3588bis is listed as a normative > reference in 4005bis and RFC 5238 is listed as a normative > reference in draft-ietf-dime-rfc3588bis. My understanding is > that one cannot expect to read and understand an RFC without > having read and understood the normative references thereof. > > Agreed on the principle, except that, in this case, we speak about > an "*", which could mean something specific for this document: > optional, a reference to something else, etc... > > > How about this? > > OLD: > 3. Diameter NAS Application Messages > > This section defines the Diameter message Command-Code > [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all > Diameter implementations conforming to this specification. The > Command Codes are as follows: > > +-----------------------------------+---------+------+--------------+ > | Command Name | Abbrev. | Code | Reference | > +-----------------------------------+---------+------+--------------+ > | AA-Request | AAR | 265 | Section 3.1 | > | AA-Answer | AAA | 265 | Section 3.2 | > | Re-Auth-Request | RAR | 258 | Section 3.3 | > | Re-Auth-Answer | RAA | 258 | Section 3.4 | > | Session-Termination-Request | STR | 275 | Section 3.5 | > | Session-Termination-Answer | STA | 275 | Section 3.6 | > | Abort-Session-Request | ASR | 274 | Section 3.7 | > | Abort-Session-Answer | ASA | 274 | Section 3.8 | > | Accounting-Request | ACR | 271 | Section 3.9 | > | Accounting-Answer | ACA | 271 | Section 3.10 | > +-----------------------------------+---------+------+--------------+ > > NEW: > 3. Diameter NAS Application Messages > > This section defines the Diameter message Command-Code > [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all > Diameter implementations conforming to this specification. The > Command Codes are as follows: > > +-----------------------------------+---------+------+--------------+ > | Command Name | Abbrev. | Code | Reference | > +-----------------------------------+---------+------+--------------+ > | AA-Request | AAR | 265 | Section 3.1 | > | AA-Answer | AAA | 265 | Section 3.2 | > | Re-Auth-Request | RAR | 258 | Section 3.3 | > | Re-Auth-Answer | RAA | 258 | Section 3.4 | > | Session-Termination-Request | STR | 275 | Section 3.5 | > | Session-Termination-Answer | STA | 275 | Section 3.6 | > | Abort-Session-Request | ASR | 274 | Section 3.7 | > | Abort-Session-Answer | ASA | 274 | Section 3.8 | > | Accounting-Request | ACR | 271 | Section 3.9 | > | Accounting-Answer | ACA | 271 | Section 3.10 | > +-----------------------------------+---------+------+--------------+ > > Note that the message formats in the following sub-sections use the > standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], > Section 3.2). > > > > Regards, Benoit. > > > > Is my understanding correct? If so, then there is in fact no need to > mention it since any reader cognizant of that requirement will already > know (or could easily refresh the memory of) what the notation means. > > > > Regards, Benoit. > > > > Regards, > > Lionel > _________________________________________________________________________________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, > France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. > > This message and its attachments may contain confidential or privileged information that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and delete this message and its attachments. > As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified. > Thank you. > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime > > > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime > > _________________________________________________________________________________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, > France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. > > This message and its attachments may contain confidential or privileged information that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and delete this message and its attachments. > As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified. > Thank you. --------------020202020308050406090309 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit
Glen,

That works for me.

Regards, Benoit.

Fine for me.

 

Lionel

 

De : dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] De la part de Glen Zorn
Envoyé : vendredi 13 juillet 2012 06:28
À : Benoit Claise
Cc : dime@ietf.org
Objet : Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt

 

On Thu, 2012-07-12 at 23:03 +0200, Benoit Claise wrote:

On 11/07/2012 12:24, Glen Zorn wrote:

On Wed, 2012-07-11 at 09:09 +0200, Benoit Claise wrote:

Hi Lionel,


 
Hi Benoit,
 
- I could not find the meaning of * in, for example,
 
                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]
[[LM]] the « * » in front the AVP means that 0, 1 or more AVP scan be present in the request (or in a Grouped AVP). It follows rules used in RFC3588 and defined in RFC 5234 (http://tools.ietf.org/html/rfc5234#section-3.6).
 

BC> Thanks for the education.
Is this so obvious to the Diameter readers, including the newcomers, that we don't need to mention it?
In other words, am I the only one NOT knowing this? ;-)


Hmm.  draft-ietf-dime-rfc3588bis is listed as  a normative reference in 4005bis and RFC 5238 is listed as a normative reference in draft-ietf-dime-rfc3588bis.  My understanding is that one cannot expect to read and understand an RFC without having read and understood the normative references thereof.

Agreed on the principle, except that, in this case, we speak about an "*", which could mean something specific for this document: optional, a reference to something else, etc...


How about this?

OLD:
3.  Diameter NAS Application Messages

   This section defines the Diameter message Command-Code
   [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all
   Diameter implementations conforming to this specification.  The
   Command Codes are as follows:

   +-----------------------------------+---------+------+--------------+
   | Command Name                      | Abbrev. | Code | Reference    |
   +-----------------------------------+---------+------+--------------+
   | AA-Request                        |   AAR   |  265 | Section 3.1  |
   | AA-Answer                         |   AAA   |  265 | Section 3.2  |
   | Re-Auth-Request                   |   RAR   |  258 | Section 3.3  |
   | Re-Auth-Answer                    |   RAA   |  258 | Section 3.4  |
   | Session-Termination-Request       |   STR   |  275 | Section 3.5  |
   | Session-Termination-Answer        |   STA   |  275 | Section 3.6  |
   | Abort-Session-Request             |   ASR   |  274 | Section 3.7  |
   | Abort-Session-Answer              |   ASA   |  274 | Section 3.8  |
   | Accounting-Request                |   ACR   |  271 | Section 3.9  |
   | Accounting-Answer                 |   ACA   |  271 | Section 3.10 |
   +-----------------------------------+---------+------+--------------+

NEW:
3.  Diameter NAS Application Messages

   This section defines the Diameter message Command-Code
   [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all
   Diameter implementations conforming to this specification.  The
   Command Codes are as follows:

   +-----------------------------------+---------+------+--------------+
   | Command Name                      | Abbrev. | Code | Reference    |
   +-----------------------------------+---------+------+--------------+
   | AA-Request                        |   AAR   |  265 | Section 3.1  |
   | AA-Answer                         |   AAA   |  265 | Section 3.2  |
   | Re-Auth-Request                   |   RAR   |  258 | Section 3.3  |
   | Re-Auth-Answer                    |   RAA   |  258 | Section 3.4  |
   | Session-Termination-Request       |   STR   |  275 | Section 3.5  |
   | Session-Termination-Answer        |   STA   |  275 | Section 3.6  |
   | Abort-Session-Request             |   ASR   |  274 | Section 3.7  |
   | Abort-Session-Answer              |   ASA   |  274 | Section 3.8  |
   | Accounting-Request                |   ACR   |  271 | Section 3.9  |
   | Accounting-Answer                 |   ACA   |  271 | Section 3.10 |
   +-----------------------------------+---------+------+--------------+

Note that the message formats in the following sub-sections use the standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], Section 3.2).
  


Regards, Benoit.



Is my understanding correct?  If so, then there is in fact no need to mention it since any reader cognizant of that requirement will already know (or could easily refresh the memory of) what the notation means.



Regards, Benoit.


 
Regards,
 
Lionel
_________________________________________________________________________________________________________________________
 
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
 
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

 

 
_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime



 
_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime

 

 

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, France Telecom - Orange is not liable for messages that have been modified, changed or falsified.
Thank you.


--------------020202020308050406090309-- From bclaise@cisco.com Fri Jul 13 06:14:40 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92A5F21F8844 for ; Fri, 13 Jul 2012 06:14:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.424 X-Spam-Level: X-Spam-Status: No, score=-10.424 tagged_above=-999 required=5 tests=[AWL=0.174, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fpvSEAHoQaf7 for ; Fri, 13 Jul 2012 06:14:37 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 8559021F8820 for ; Fri, 13 Jul 2012 06:14:37 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6DDEe5u022934; Fri, 13 Jul 2012 15:14:40 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6DDEdmh006824; Fri, 13 Jul 2012 15:14:40 +0200 (CEST) Message-ID: <50001F3F.3060901@cisco.com> Date: Fri, 13 Jul 2012 15:14:39 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: Glen Zorn References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> <4FFF3D25.2060502@cisco.com> <1342153020.14913.89.camel@gwz-laptop> In-Reply-To: <1342153020.14913.89.camel@gwz-laptop> Content-Type: multipart/alternative; boundary="------------000206040602030400010701" Cc: Michelle Cotton , dime@ietf.org Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 13:14:41 -0000 This is a multi-part message in MIME format. --------------000206040602030400010701 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 13/07/2012 06:17, Glen Zorn wrote: > On Thu, 2012-07-12 at 23:09 +0200, Benoit Claise wrote: >> Glen, >> >>> On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote: >>>> Dear all, Glen, >>>> >>>> Two more points, part of the AD review (I needed a little bit of >>>> education before making those points, hence the part 2 in my review) >>>> >>>> 1. the NASREQ application is specified in RFC4005bis, but IANA >>>> points to RFC3588bis >>>> See >>>> http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 >>>> >>>> with an entry for Application id= 1, for NASREQ, with the reference >>>> [RFC-ietf-dime-rfc3588bis-33] >>>> >>>> I understand the history: RFC3588 introduced this application id >>>> value 1 in the IANA Considerations section. >>>> However, RFC3588bis, which will obsolete RFC3588, doesn't mention >>>> this application id (obviously, because it was assigned already). >>>> So don't you believe that we should correct this and have, in the >>>> IANA Considerations section of >>>> http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a >>>> message basically expressing: >>>> http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 >>>> should contain >>>> Application id= 1, for NASREQ, with the reference >>>> [RFC4005bis] >>> >>> Obviously, I don't agree. The value was registered in RFC 3588, and >>> there is nothing to "correct" unless of course you insist, as does >>> at least one IESG member, that the IANA references always point to >>> the technical definition of the registered item (a position so >>> untenable as to be absurd). >> So right now, "application id = 1" points to RFC 3588bis, which is >> neither the RFC that registered the value (RFC3588), nor the NASREQ >> specification (RFC4005bis), so the pointer to RFC 3588bis seems >> pretty useless to me. > > I couldn't agree more. > >> Anyway, I sent a private email to Michelle Cotton a few days ago (and >> I copied her again on this email thread). >> My advice is to simply follow the IANA guidance. > > Actually, I'd like to see some guidance from the IESG; something that > is both consistent and completethat states the semantics of the IANA > reference field or, lacking that, a little less anal-retention WRT > positions which are clearly neither consistent nor complete on those > semantics. Let me follow up and get back to you. IMHO, this is a blocking factor for the draft next step, i.e. IETF last-call: this could be solved in parallel. So if you want to produce a new draft version, the IETF last-call could start. Regards, Benoit. > > ... --------------000206040602030400010701 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit
On 13/07/2012 06:17, Glen Zorn wrote:
On Thu, 2012-07-12 at 23:09 +0200, Benoit Claise wrote:
Glen,

On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote:
Dear all, Glen,

Two more points, part of the AD review (I needed a little bit of education before making those points, hence the part 2 in my review)

1. the NASREQ application is specified in RFC4005bis, but IANA points to RFC3588bis
See http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45
with an entry for Application id= 1, for NASREQ, with the reference [RFC-ietf-dime-rfc3588bis-33]

I understand the history: RFC3588 introduced this application id value 1 in the IANA Considerations section.
However, RFC3588bis, which will obsolete RFC3588, doesn't mention this application id (obviously, because it was assigned already).
So don't you believe that we should correct this and have, in the IANA Considerations section of http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a message basically expressing:
    http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45  should contain
             Application id= 1, for NASREQ, with the reference [RFC4005bis]

Obviously, I don't agree.  The value was registered in RFC 3588, and there is nothing to "correct" unless of course you insist, as does at least one IESG member, that the IANA references always point to the technical definition of the registered item (a position so untenable as to be absurd).
So right now, "application id = 1" points to RFC 3588bis, which is neither the RFC that registered the value (RFC3588), nor the NASREQ specification (RFC4005bis), so the pointer to RFC 3588bis seems pretty useless to me.

I couldn't agree more.

Anyway, I sent a private email to Michelle Cotton a few days ago (and I copied her again on this email thread).
My advice is to simply follow the IANA guidance.

Actually, I'd like to see some guidance from the IESG; something that is both consistent and completethat states the semantics of the IANA reference field or, lacking that, a little less anal-retention WRT positions which are clearly neither consistent nor complete on those semantics.
Let me follow up and get back to you.
IMHO, this is a blocking factor for the draft next step, i.e. IETF last-call: this could be solved in parallel.
So if you want to produce a new draft version, the IETF last-call could start.

Regards, Benoit.

...


--------------000206040602030400010701-- From glenzorn@gmail.com Fri Jul 13 23:08:07 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63FF421F8493 for ; Fri, 13 Jul 2012 23:08:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.273 X-Spam-Level: X-Spam-Status: No, score=-3.273 tagged_above=-999 required=5 tests=[AWL=0.325, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UsNHlKWFqwkl for ; Fri, 13 Jul 2012 23:08:05 -0700 (PDT) Received: from mail-yw0-f44.google.com (mail-yw0-f44.google.com [209.85.213.44]) by ietfa.amsl.com (Postfix) with ESMTP id B646521F86D4 for ; Fri, 13 Jul 2012 23:08:02 -0700 (PDT) Received: by yhq56 with SMTP id 56so4748417yhq.31 for ; Fri, 13 Jul 2012 23:08:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=70/my8NWIRV+wpoA+KOxb3X8baaz74CTi3MEQUP99nI=; b=zY92XmV7RW0NCqMa78X51NqCYC6uj9WJBSn6q9Sl8EbSIv8uc1vM1L2MPManjhAE28 r8H+SrZONFjILPieUR6YOCGb77UYrhAQD6va4oAF15UmTIm5VZrXvFg/9QloFS1h/AgW KOJujt/DuMqQVHvVQUaSbloE3S6QV6vRDXHdrGtOLqdovYUdoLNldfG1b21/y9KRMSw+ HkXazJEAPRDWvVuL6FfJgS2SuUYOzgvecCv7xW+QBLHHUp59N22bgU2bPXqa8yjD88Gd TA681mxV/5RDkFbI5E+3gJkbhC0hsMgWquJfWl6Cq7EDlPbLEmgJ8Sy5aa2Q0Vb9b7aH qCPQ== Received: by 10.66.85.135 with SMTP id h7mr6965032paz.75.1342246120223; Fri, 13 Jul 2012 23:08:40 -0700 (PDT) Received: from [192.168.0.100] (ppp-124-122-99-161.revip2.asianet.co.th. [124.122.99.161]) by mx.google.com with ESMTPS id qd2sm3650756pbb.29.2012.07.13.23.08.35 (version=SSLv3 cipher=OTHER); Fri, 13 Jul 2012 23:08:39 -0700 (PDT) From: Glen Zorn To: Benoit Claise In-Reply-To: <50001F3F.3060901@cisco.com> References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> <4FFF3D25.2060502@cisco.com> <1342153020.14913.89.camel@gwz-laptop> <50001F3F.3060901@cisco.com> Content-Type: multipart/alternative; boundary="=-sNNBe/x7PC1JkejJ6Slk" Organization: Network Zen Date: Sat, 14 Jul 2012 13:08:31 +0700 Message-ID: <1342246111.14913.106.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: Michelle Cotton , dime@ietf.org Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Jul 2012 06:08:07 -0000 --=-sNNBe/x7PC1JkejJ6Slk Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Fri, 2012-07-13 at 15:14 +0200, Benoit Claise wrote: > On 13/07/2012 06:17, Glen Zorn wrote: > > > > > On Thu, 2012-07-12 at 23:09 +0200, Benoit Claise wrote: > > > > > Glen, > > > > > > > > > > On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote: > > > > > > > > > Dear all, Glen, > > > > > > > > > > Two more points, part of the AD review (I needed a little bit > > > > > of education before making those points, hence the part 2 in > > > > > my review) > > > > > > > > > > 1. the NASREQ application is specified in RFC4005bis, but IANA > > > > > points to RFC3588bis > > > > > See > > > > > http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 > > > > > with an entry for Application id= 1, for NASREQ, with the > > > > > reference [RFC-ietf-dime-rfc3588bis-33] > > > > > > > > > > I understand the history: RFC3588 introduced this application > > > > > id value 1 in the IANA Considerations section. > > > > > However, RFC3588bis, which will obsolete RFC3588, doesn't > > > > > mention this application id (obviously, because it was > > > > > assigned already). > > > > > So don't you believe that we should correct this and have, in > > > > > the IANA Considerations section of > > > > > http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a > > > > > message basically expressing: > > > > > > > > > > http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45 should contain > > > > > Application id= 1, for NASREQ, with the reference > > > > > [RFC4005bis] > > > > > > > > > > > > Obviously, I don't agree. The value was registered in RFC 3588, > > > > and there is nothing to "correct" unless of course you insist, > > > > as does at least one IESG member, that the IANA references > > > > always point to the technical definition of the registered item > > > > (a position so untenable as to be absurd). > > > > > > So right now, "application id = 1" points to RFC 3588bis, which is > > > neither the RFC that registered the value (RFC3588), nor the > > > NASREQ specification (RFC4005bis), so the pointer to RFC 3588bis > > > seems pretty useless to me. > > > > > > I couldn't agree more. > > > > > > > Anyway, I sent a private email to Michelle Cotton a few days ago > > > (and I copied her again on this email thread). > > > My advice is to simply follow the IANA guidance. > > > > > > Actually, I'd like to see some guidance from the IESG; something > > that is both consistent and completethat states the semantics of the > > IANA reference field or, lacking that, a little less anal-retention > > WRT positions which are clearly neither consistent nor complete on > > those semantics. > > Let me follow up and get back to you. > IMHO, this is a blocking factor for the draft next step, i.e. IETF > last-call: this could be solved in parallel. > So if you want to produce a new draft version, the IETF last-call > could start. OK. > > Regards, Benoit. > > > > > ... > > > --=-sNNBe/x7PC1JkejJ6Slk Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Fri, 2012-07-13 at 15:14 +0200, Benoit Claise wrote:
On 13/07/2012 06:17, Glen Zorn wrote:

On Thu, 2012-07-12 at 23:09 +0200, Benoit Claise wrote:
Glen,

On Wed, 2012-07-11 at 11:05 +0200, Benoit Claise wrote:
Dear all, Glen,

Two more points, part of the AD review (I needed a little bit of education before making those points, hence the part 2 in my review)

1. the NASREQ application is specified in RFC4005bis, but IANA points to RFC3588bis
See http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45
with an entry for Application id= 1, for NASREQ, with the reference [RFC-ietf-dime-rfc3588bis-33]

I understand the history: RFC3588 introduced this application id value 1 in the IANA Considerations section.
However, RFC3588bis, which will obsolete RFC3588, doesn't mention this application id (obviously, because it was assigned already).
So don't you believe that we should correct this and have, in the IANA Considerations section of http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt , a message basically expressing:
    http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml#aaa-parameters-45  should contain
             Application id= 1, for NASREQ, with the reference [RFC4005bis]

Obviously, I don't agree.  The value was registered in RFC 3588, and there is nothing to "correct" unless of course you insist, as does at least one IESG member, that the IANA references always point to the technical definition of the registered item (a position so untenable as to be absurd).
So right now, "application id = 1" points to RFC 3588bis, which is neither the RFC that registered the value (RFC3588), nor the NASREQ specification (RFC4005bis), so the pointer to RFC 3588bis seems pretty useless to me.

I couldn't agree more.

Anyway, I sent a private email to Michelle Cotton a few days ago (and I copied her again on this email thread).
My advice is to simply follow the IANA guidance.

Actually, I'd like to see some guidance from the IESG; something that is both consistent and completethat states the semantics of the IANA reference field or, lacking that, a little less anal-retention WRT positions which are clearly neither consistent nor complete on those semantics.
Let me follow up and get back to you.
IMHO, this is a blocking factor for the draft next step, i.e. IETF last-call: this could be solved in parallel.
So if you want to produce a new draft version, the IETF last-call could start.

OK.


Regards, Benoit.

...



--=-sNNBe/x7PC1JkejJ6Slk-- From bclaise@cisco.com Sat Jul 14 01:06:19 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E82A821F8726 for ; Sat, 14 Jul 2012 01:06:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.445 X-Spam-Level: X-Spam-Status: No, score=-10.445 tagged_above=-999 required=5 tests=[AWL=0.153, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jR9IMQcV0uqi for ; Sat, 14 Jul 2012 01:06:18 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 930D121F871C for ; Sat, 14 Jul 2012 01:06:17 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6E86rRP010255; Sat, 14 Jul 2012 10:06:54 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6E86qr1019403; Sat, 14 Jul 2012 10:06:52 +0200 (CEST) Message-ID: <5001289C.2000907@cisco.com> Date: Sat, 14 Jul 2012 10:06:52 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: Glen Zorn References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> <4FFF3D25.2060502@cisco.com> <1342153020.14913.89.camel@gwz-laptop> <50001F3F.3060901@cisco.com> <1342246111.14913.106.camel@gwz-laptop> In-Reply-To: <1342246111.14913.106.camel@gwz-laptop> Content-Type: multipart/alternative; boundary="------------080102020102080707030309" Cc: dime@ietf.org Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Jul 2012 08:06:19 -0000 This is a multi-part message in MIME format. --------------080102020102080707030309 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Glen, > >>> Actually, I'd like to see some guidance from the IESG; something >>> that is both consistent and completethat states the semantics of the >>> IANA reference field or, lacking that, a little less anal-retention >>> WRT positions which are clearly neither consistent nor complete on >>> those semantics. >> Let me follow up and get back to you. >> IMHO, this is a blocking factor for the draft next step, Oups. One typo. You should read : "IMHO, this is NOT a blocking factor for the draft next step," From your reply below, you understood it was a mistake. >> i.e. IETF last-call: this could be solved in parallel. >> So if you want to produce a new draft version, the IETF last-call >> could start. > > OK. Regards, Benoit. --------------080102020102080707030309 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit
Glen,

Actually, I'd like to see some guidance from the IESG; something that is both consistent and completethat states the semantics of the IANA reference field or, lacking that, a little less anal-retention WRT positions which are clearly neither consistent nor complete on those semantics.
Let me follow up and get back to you.
IMHO, this is a blocking factor for the draft next step,
Oups. One typo. You should read : "IMHO, this is NOT a blocking factor for the draft next step,"
From your reply below, you understood it was a mistake.
i.e. IETF last-call: this could be solved in parallel.
So if you want to produce a new draft version, the IETF last-call could start.

OK.
Regards, Benoit.
--------------080102020102080707030309-- From glenzorn@gmail.com Sat Jul 14 21:50:33 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97EA021F8550 for ; Sat, 14 Jul 2012 21:50:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.498 X-Spam-Level: X-Spam-Status: No, score=-3.498 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sCDuNcLrd5WN for ; Sat, 14 Jul 2012 21:50:29 -0700 (PDT) Received: from mail-pb0-f44.google.com (mail-pb0-f44.google.com [209.85.160.44]) by ietfa.amsl.com (Postfix) with ESMTP id 4694F21F8516 for ; Sat, 14 Jul 2012 21:50:29 -0700 (PDT) Received: by pbcwy7 with SMTP id wy7so8373375pbc.31 for ; Sat, 14 Jul 2012 21:51:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=wj58rKNCzSxz9kZ61Cg6oAzoNPm6ogAnS5ka8JbeG6A=; b=edMyXOWdajQiNWo5Myb7ic5/CnIOIhPJRw602uRD3oRtgFkV3YcubT7dfzSMaDbyXu P5IsypLGAcAMUPkau7ogVzqdxY0+VpK+huySF2EkAErxoGsj2Gxge29CZySXIPUYnQJh QkzFbJTkZUKwrpTrwbSRaMakSBcbYbfwir4n5c6aOTU+m6rfxzeVRqUXBuxJ3z+AoaAk fVJFJfn6AXa4mt1/cpvZnNr1BMdrxD4c8lxzvy4Rzw5je4+upr3KHBSLrrCSKR/9KDf2 ZwWf8qY87ev5XpzhaZJD+eBqD1gglhZsFY+9xAO856NGynabPMYIzAkhC/QqxGPWKEPS 1AMQ== Received: by 10.68.232.197 with SMTP id tq5mr16227733pbc.53.1342327870044; Sat, 14 Jul 2012 21:51:10 -0700 (PDT) Received: from [192.168.0.102] (ppp-115-87-66-206.revip4.asianet.co.th. [115.87.66.206]) by mx.google.com with ESMTPS id pj10sm9242487pbb.46.2012.07.14.21.51.07 (version=SSLv3 cipher=OTHER); Sat, 14 Jul 2012 21:51:09 -0700 (PDT) From: Glen Zorn To: Benoit Claise In-Reply-To: <4FFC405F.9030508@cisco.com> References: <4FFC405F.9030508@cisco.com> Content-Type: multipart/alternative; boundary="=-7FKWB4jsbw+bL4qzerMF" Organization: Network Zen Date: Sun, 15 Jul 2012 11:51:05 +0700 Message-ID: <1342327865.4180.3.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: dime mailing list Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Jul 2012 04:50:33 -0000 --=-7FKWB4jsbw+bL4qzerMF Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Tue, 2012-07-10 at 16:46 +0200, Benoit Claise wrote: > Dear all, Glen, > > Please find below the AD review of draft-ietf-dime-rfc4005bis-09.txt > > The document is in a good enough shape to be sent to IETF LC. > Please consider my comments together with the other IETF LC comments. > > Glen, let me know if you plan on submitting a quick revision soon, or > if I should send THIS version to the IETF LC (which might lead to > redundant comment) > > > - Some idnits > http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt > > Miscellaneous warnings: > ---------------------------------------------------------------------------- > > == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but > does not include the phrase in its RFC 2119 key words list. > > > > Checking references for intended status: Proposed Standard > ---------------------------------------------------------------------------- > > == Missing Reference: 'BASE' is mentioned on line 219, but not defined > > > I understand that this is a quote from RFC4005. To avoid the source of > confusion, here is a proposal Rereading this, I don't know what confusion you mean. It seems to be fine English, pretty clear, and it doesn't seem like the change you suggest is likely to unconfuse ID-nits. What am I missing? > > OLD: > > However, the presence of an > instance of the Acct-Application-Id AVP was required in RFC 4005, > as well: > > The ACR message [BASE] is sent by the NAS to report its session > information to a target server downstream. > > Either of Acct-Application-Id or Vendor-Specific-Application-Id > AVPs MUST be present. If the Vendor-Specific-Application-Id > grouped AVP is present, it must have an Acct-Application-Id > inside. > > NEW: > > However, the presence of an > instance of the Acct-Application-Id AVP was required in RFC 4005, > which quotes: > > "The ACR message [BASE] is sent by the NAS to report its session > information to a target server downstream. > > Either of Acct-Application-Id or Vendor-Specific-Application-Id > AVPs MUST be present. If the Vendor-Specific-Application-Id > grouped AVP is present, it must have an Acct-Application-Id > inside." > > > - One small improvement > OLD: > > o The accounting model to be used is now specified. > > NEW > o The accounting model to be used is now specified. See section 1.6 > > - Expand on the first ASA occurrence > > - Add an point after [I-D.ietf-dime-rfc3588bis] > > 3.1. AA-Request (AAR) Command > > The AA-Request (AAR), which is indicated by setting the Command-Code > field to 265 and the 'R' bit in the Command Flags field, is used to > request authentication and/or authorization for a given NAS user. > The type of request is identified through the Auth-Request-Type AVP > [I-D.ietf-dime-rfc3588bis] The recommended value for most situations > is AUTHORIZE_AUTHENTICATE. > > - I could not find the meaning of * in, for example, > > [ CHAP-Auth ] > [ CHAP-Challenge ] > * [ Framed-Compression ] > [ Framed-Interface-Id ] > [ Framed-IP-Address ] > * [ Framed-IPv6-Prefix ] > [ Framed-IP-Netmask ] > [ Framed-MTU ] > [ Framed-Protocol ] > [ ARAP-Password ] > [ ARAP-Security ] > * [ ARAP-Security-Data ] > * [ Login-IP-Host ] > * [ Login-IPv6-Host ] > [ Login-LAT-Group ] > [ Login-LAT-Node ] > [ Login-LAT-Port ] > [ Login-LAT-Service ] > * [ Tunneling ] > * [ Proxy-Info ] > * [ Route-Record ] > * [ AVP ] > - 3.7. Abort-Session-Request (ASR) Command > > The Abort-Session-Request (ASR) message [I-D.ietf-dime-rfc3588bis] > may be sent by any server to the NAS providing session service, to > request that the session identified by the Session-Id be stopped. > > > By "any Diameter server"? like in section 3.3 btw. > > - IANA Considerations > Do we need to change all the "4005" entries in > http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml into > "4005bis"? > Or to be more correct, the new RFC id for 4005bis? > > - OLD > > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry", assignments/radius-types-3>. > > NEW: > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry", assignments/radius-types>. > > > ALTERNATE PROPOSAL > > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry", . > > > Regards, Benoit. --=-7FKWB4jsbw+bL4qzerMF Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Tue, 2012-07-10 at 16:46 +0200, Benoit Claise wrote:
Dear all, Glen,

Please find below the AD review of draft-ietf-dime-rfc4005bis-09.txt

The document is in a good enough shape to be sent to IETF LC.
Please consider my comments together with the other IETF LC comments.

Glen, let me know if you plan on submitting a quick revision soon, or if I should send THIS version to the IETF LC (which might lead to redundant comment)


- Some idnits
http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt 
Miscellaneous warnings:
  ----------------------------------------------------------------------------

  == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but
     does not include the phrase in its RFC 2119 key words list.


Checking references for intended status: Proposed Standard
  ----------------------------------------------------------------------------

  == Missing Reference: 'BASE' is mentioned on line 219, but not defined
I understand that this is a quote from RFC4005. To avoid the source of confusion, here is a proposal

Rereading this, I don't know what confusion you mean.  It seems to be fine English, pretty clear, and it doesn't seem like the change you suggest is likely to unconfuse ID-nits.  What am I missing?


OLD: 
However, the presence of an
      instance of the Acct-Application-Id AVP was required in RFC 4005,
      as well:

         The ACR message [BASE] is sent by the NAS to report its session
         information to a target server downstream.

         Either of Acct-Application-Id or Vendor-Specific-Application-Id
         AVPs MUST be present.  If the Vendor-Specific-Application-Id
         grouped AVP is present, it must have an Acct-Application-Id
         inside.
NEW: 
However, the presence of an
      instance of the Acct-Application-Id AVP was required in RFC 4005,
      which quotes:

         "The ACR message [BASE] is sent by the NAS to report its session
         information to a target server downstream.

         Either of Acct-Application-Id or Vendor-Specific-Application-Id
         AVPs MUST be present.  If the Vendor-Specific-Application-Id
         grouped AVP is present, it must have an Acct-Application-Id
         inside."

- One small improvement
OLD: 
o  The accounting model to be used is now specified.

NEW
   o  The accounting model to be used is now specified. See section 1.6

- Expand on the first ASA occurrence

- Add an point after [I-D.ietf-dime-rfc3588bis] 

3.1.  AA-Request (AAR) Command

   The AA-Request (AAR), which is indicated by setting the Command-Code
   field to 265 and the 'R' bit in the Command Flags field, is used to
   request authentication and/or authorization for a given NAS user.
   The type of request is identified through the Auth-Request-Type AVP
   [I-D.ietf-dime-rfc3588bis] The recommended value for most situations
   is AUTHORIZE_AUTHENTICATE.

- I could not find the meaning of * in, for example,

                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]
- 3.7.  Abort-Session-Request (ASR) Command

   The Abort-Session-Request (ASR) message [I-D.ietf-dime-rfc3588bis]
   may be sent by any server to the NAS providing session service, to
   request that the session identified by the Session-Id be stopped.

By "any Diameter server"?  like in section 3.3 btw.

- IANA Considerations
Do we need to change all the "4005" entries in http://www.iana.org/assignments/aaa-parameters/aaa-parameters.xml into "4005bis"?
Or to be more correct, the new RFC id for 4005bis?

- OLD 
[RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types-3>.

NEW:
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types>.

ALTERNATE PROPOSAL 
[RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-1>.

Regards, Benoit.

--=-7FKWB4jsbw+bL4qzerMF-- From glenzorn@gmail.com Sat Jul 14 22:05:24 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 53E7521F8589 for ; Sat, 14 Jul 2012 22:05:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.515 X-Spam-Level: X-Spam-Status: No, score=-3.515 tagged_above=-999 required=5 tests=[AWL=0.083, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MQlMIeAaRDTT for ; Sat, 14 Jul 2012 22:05:23 -0700 (PDT) Received: from mail-gg0-f172.google.com (mail-gg0-f172.google.com [209.85.161.172]) by ietfa.amsl.com (Postfix) with ESMTP id C452221F8585 for ; Sat, 14 Jul 2012 22:05:20 -0700 (PDT) Received: by ggnc4 with SMTP id c4so4839600ggn.31 for ; Sat, 14 Jul 2012 22:06:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=6uAWHLW0Qij555lw/Hwj2h7jykPLx/24bvitSRpntSU=; b=wYKHMyDU1aZqo/V2xY92taEfk2BwsFt11V8IGo1EUl1BB71UbgdhVWH3Odv/kB/Ovv LBFKOeRmphoH3E0lNNTx9B6qH4BpJeC7Rdx8t6IdcmW+e9k8U7CNX0KY8DgVNsx5J6GC h94ySew4Aksh+4W/cNqtxpNBKn4KwSO7EOIp2mp/FDP3hpa9p5QXwY8xF/0G5mGfX7Rh FHEA+ueLmflfufQGQBFriUN0S+7X2yhnICYWSgmKXswtwNOzVWaCK5zOR/GJnRkP2DvW PKecYngpk8RGgZzPH4ZjqxFo8E7190TIp70pXcUVV3rGL/SO0e0pH8i5rW4TdOAvpqua dwbQ== Received: by 10.42.155.200 with SMTP id v8mr3697707icw.12.1342328761226; Sat, 14 Jul 2012 22:06:01 -0700 (PDT) Received: from [192.168.0.102] (ppp-115-87-66-206.revip4.asianet.co.th. [115.87.66.206]) by mx.google.com with ESMTPS id pq5sm9265561pbb.30.2012.07.14.22.05.59 (version=SSLv3 cipher=OTHER); Sat, 14 Jul 2012 22:06:00 -0700 (PDT) From: Glen Zorn To: Benoit Claise In-Reply-To: <4FFC405F.9030508@cisco.com> References: <4FFC405F.9030508@cisco.com> Content-Type: multipart/alternative; boundary="=-lJxx46V1/7Em4ImLbWTE" Organization: Network Zen Date: Sun, 15 Jul 2012 12:05:57 +0700 Message-ID: <1342328757.4180.7.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: dime mailing list Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Jul 2012 05:05:24 -0000 --=-lJxx46V1/7Em4ImLbWTE Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Tue, 2012-07-10 at 16:46 +0200, Benoit Claise wrote: ... > > - OLD > > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry", assignments/radius-types-3>. > > NEW: > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry", assignments/radius-types>. > > > ALTERNATE PROPOSAL > > [RADIUSTypes] IANA, "IANA Radius Attribute Values > Registry", . > > Neither of these actually works, since the registry cited is not the RADIUS Attribute Type registry but the RADIUS Attribute Value registry; changed to http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-3. --=-lJxx46V1/7Em4ImLbWTE Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Tue, 2012-07-10 at 16:46 +0200, Benoit Claise wrote:

...


- OLD 
[RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types-3>.

NEW:
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types>.

ALTERNATE PROPOSAL 
[RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-1>.


Neither of these actually works, since the registry cited is not the RADIUS Attribute Type registry but the RADIUS Attribute Value registry; changed to http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-3.

--=-lJxx46V1/7Em4ImLbWTE-- From glenzorn@gmail.com Sat Jul 14 22:15:08 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2F4F11E8080 for ; Sat, 14 Jul 2012 22:15:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.527 X-Spam-Level: X-Spam-Status: No, score=-3.527 tagged_above=-999 required=5 tests=[AWL=0.071, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Naq7e-L6AbXV for ; Sat, 14 Jul 2012 22:15:07 -0700 (PDT) Received: from mail-pb0-f44.google.com (mail-pb0-f44.google.com [209.85.160.44]) by ietfa.amsl.com (Postfix) with ESMTP id BF6F911E8072 for ; Sat, 14 Jul 2012 22:15:07 -0700 (PDT) Received: by pbcwy7 with SMTP id wy7so8392836pbc.31 for ; Sat, 14 Jul 2012 22:15:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=KEbu5cCfrBk3x8kRoQaX38xij4wO8Lv1TvCyUohwHBs=; b=kery/00R3G4Kv+NkcAG1SwDazmJgMGFIO6acHmti+XeLuvRJjSmVIwHNVxTagsSv5C +d4hdlGR0E/t6oIUA208oiuymu+KXZeCNWPik7v9CbMWG1UvMlqcSHURVaA0GUoOSFz+ RiQGJJFHTuAIMvK+O89rx+nrF4t3T/p9g3i1PSIMi0S28HJh/EyDVKF/OIx9IIB+c7hN K1JZ2UscZon+KCqVBodgWedwFbN6KpiQJZW7U3RwlIxGu8l5Pia1g+nm+qDrWrDvwe4R vzvI0cj/1i5C+ves0JYMsGR8UjsUxy3Uzd9AXjEojIicUeK86a/mMa9YJup/aNEMJd6u KUWg== Received: by 10.68.191.201 with SMTP id ha9mr16676949pbc.75.1342329348723; Sat, 14 Jul 2012 22:15:48 -0700 (PDT) Received: from [192.168.0.102] (ppp-115-87-66-206.revip4.asianet.co.th. [115.87.66.206]) by mx.google.com with ESMTPS id he9sm9282498pbc.68.2012.07.14.22.15.46 (version=SSLv3 cipher=OTHER); Sat, 14 Jul 2012 22:15:48 -0700 (PDT) From: Glen Zorn To: lionel.morand@orange.com In-Reply-To: <20298_1342164778_4FFFCF2A_20298_209_11_6B7134B31289DC4FAF731D844122B36E027B1C@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <4FFC405F.9030508@cisco.com> <4FFD41E7.5030502@cisco.com> <1342003558.14913.70.camel@gwz-laptop> <9766_1342022182_4FFDA226_9766_3407_1_6B7134B31289DC4FAF731D844122B36E0273AB@PEXCVZYM13.corporate.adroot.infra.ftgroup> <1342157804.14913.102.camel@gwz-laptop> <20298_1342164778_4FFFCF2A_20298_209_11_6B7134B31289DC4FAF731D844122B36E027B1C@PEXCVZYM13.corporate.adroot.infra.ftgroup> Content-Type: multipart/alternative; boundary="=-lrU661IbpO1rcN81qOLA" Organization: Network Zen Date: Sun, 15 Jul 2012 12:15:44 +0700 Message-ID: <1342329344.4180.9.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: "dime@ietf.org" Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt - part 2 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Jul 2012 05:15:08 -0000 --=-lrU661IbpO1rcN81qOLA Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit On Fri, 2012-07-13 at 07:32 +0000, lionel.morand@orange.com wrote: > Hi Glen, > > > > I don’t think that asymmetrical security may be set up when > considering diameter connections over TLS/DTLS or IPsec. But I may be > wrong. > > > > However, as you highlight it, this should be covered in the security > considerations of the 3588bis. I would then recommend removing the > text from the RFC4005bis and seeing if something is missing in the > section 13 of RFC3588bis. I think that the current text is ok but > someone could find something missing. > > > > Would it be OK? OK w/me. ... --=-lrU661IbpO1rcN81qOLA Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Fri, 2012-07-13 at 07:32 +0000, lionel.morand@orange.com wrote:
Hi Glen,

 

I don’t think that asymmetrical security may be set up when considering diameter connections over TLS/DTLS or IPsec.  But I may be wrong.

 

However, as you highlight it, this should be covered in the security considerations of the 3588bis. I would then recommend removing the text from the RFC4005bis and seeing if something is missing in the section 13 of RFC3588bis. I think that the current text is ok but someone could find something missing.

 

Would it be OK?

OK w/me.

...
--=-lrU661IbpO1rcN81qOLA-- From internet-drafts@ietf.org Sat Jul 14 22:42:27 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D52621F855E; Sat, 14 Jul 2012 22:42:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.508 X-Spam-Level: X-Spam-Status: No, score=-102.508 tagged_above=-999 required=5 tests=[AWL=0.091, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iu0hSu4Q6vPF; Sat, 14 Jul 2012 22:42:26 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A20321F855F; Sat, 14 Jul 2012 22:42:26 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.30p3 Message-ID: <20120715054226.4612.60401.idtracker@ietfa.amsl.com> Date: Sat, 14 Jul 2012 22:42:26 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-rfc4005bis-10.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Jul 2012 05:42:27 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Network Access Server Application Author(s) : Glen Zorn Filename : draft-ietf-dime-rfc4005bis-10.txt Pages : 68 Date : 2012-07-14 Abstract: This document describes the Diameter protocol application used for Authentication, Authorization, and Accounting (AAA) services in the Network Access Server (NAS) environment; it obsoletes RFC 4005. When combined with the Diameter Base protocol, Transport Profile, and Extensible Authentication Protocol specifications, this application specification satisfies typical network access services requirements. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-rfc4005bis There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-rfc4005bis-10 A diff from previous version is available at: http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-rfc4005bis-10 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From internet-drafts@ietf.org Sun Jul 15 19:39:41 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7507C11E80B7; Sun, 15 Jul 2012 19:39:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.515 X-Spam-Level: X-Spam-Status: No, score=-102.515 tagged_above=-999 required=5 tests=[AWL=0.084, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qlFUQUqTtGBE; Sun, 15 Jul 2012 19:39:40 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F69411E80B6; Sun, 15 Jul 2012 19:39:40 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.30p3 Message-ID: <20120716023940.11756.76659.idtracker@ietfa.amsl.com> Date: Sun, 15 Jul 2012 19:39:40 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-realm-based-redirect-05.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Jul 2012 02:39:41 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Realm-Based Redirection In Diameter Author(s) : Tina Tsou Ruibing Hao Tom Taylor Filename : draft-ietf-dime-realm-based-redirect-05.txt Pages : 8 Date : 2012-07-15 Abstract: The Diameter protocol allows a Diameter redirect agent to specify one or more individual hosts to which a Diameter message may be redirected by an upstream Diameter node. However, in some circumstances an operator may wish to redirect messages to an alternate domain without specifying individual hosts. This document specifies a mechanism by which this can be achieved. New applications may incorporate this capability by reference to the present document. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-realm-based-redirect There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-realm-based-redirect-05 A diff from previous version is available at: http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-realm-based-redirect-05 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From internet-drafts@ietf.org Mon Jul 16 02:00:14 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B77C21F8698; Mon, 16 Jul 2012 02:00:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.523 X-Spam-Level: X-Spam-Status: No, score=-102.523 tagged_above=-999 required=5 tests=[AWL=0.076, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24XvG7J7go6b; Mon, 16 Jul 2012 02:00:13 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0E1921F869F; Mon, 16 Jul 2012 02:00:13 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.30p3 Message-ID: <20120716090013.12365.12065.idtracker@ietfa.amsl.com> Date: Mon, 16 Jul 2012 02:00:13 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-pmip6-lr-15.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Jul 2012 09:00:14 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Support for Proxy Mobile IPv6 Localized Routing Author(s) : Glen Zorn Qin Wu Marco Liebsch Jouni Korhonen Filename : draft-ietf-dime-pmip6-lr-15.txt Pages : 12 Date : 2012-07-16 Abstract: In Proxy Mobile IPv6, packets received from a Mobile Node (MN) by the Mobile Access Gateway (MAG) to which it is attached are typically tunneled to a Local Mobility Anchor (LMA) for routing. The term "localized routing" refers to a method by which packets are routed directly between an MN's MAG and the MAG of its Correspondent Node (CN) without involving any LMA. In Diameter Proxy Mobile IPv6, it may be desirable to control the establishment of localized routing sessions between two MAGs in a Proxy Mobile IPv6 domain by requiring that the session be authorized. This document specifies how to accomplish this using the Diameter protocol. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-pmip6-lr There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-pmip6-lr-15 A diff from previous version is available at: http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-pmip6-lr-15 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From tom.taylor.stds@gmail.com Mon Jul 16 04:42:43 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FD3621F87CD for ; Mon, 16 Jul 2012 04:42:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iQTDgqaVmU1d for ; Mon, 16 Jul 2012 04:42:41 -0700 (PDT) Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id 6F4E321F87DB for ; Mon, 16 Jul 2012 04:42:32 -0700 (PDT) Received: by obbwc20 with SMTP id wc20so10549410obb.31 for ; Mon, 16 Jul 2012 04:43:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding:x-antivirus :x-antivirus-status; bh=z7aKcdunF9JpLChvq3pYGr+T01evg70DH7iwALM9O58=; b=q8QGHZBljFotXCw+n8rlLMvEIumw3994skltMBCvGr3n/PCyctlaYNCXB8TeNVv63Z 8Eb4rJRVu3slwsKOSLpL9tMnqaKVFKyHDSJfNjPurWuQLSShB/Feidp7S+wlkUK9zQzN s8MULXLZzANVG8fJVZPhezFloGt0c0aG9i9iThgz2ZYwtysFY0igkOYhE21FSn1ROnYu 9Q0mcCNu23ifWWJT8bHWaniHFuYhc/72lz29aIlibFcZfHfUru4cFX/xJqYBHY4+s9Vj ERZj9HsztlffMJlwlpu1fPGfmE2eGs/goWA1ZLqiY8wfU+iPA0KQZR2Zy6gefRtTwSoY sByA== Received: by 10.182.78.228 with SMTP id e4mr14917867obx.77.1342438996779; Mon, 16 Jul 2012 04:43:16 -0700 (PDT) Received: from [127.0.0.1] ([207.112.101.80]) by mx.google.com with ESMTPS id l10sm9588957oeb.13.2012.07.16.04.43.14 (version=SSLv3 cipher=OTHER); Mon, 16 Jul 2012 04:43:15 -0700 (PDT) Message-ID: <5003FE51.80702@gmail.com> Date: Mon, 16 Jul 2012 07:43:13 -0400 From: Tom Taylor User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: dime@ietf.org References: <20120716023940.11756.76659.idtracker@ietfa.amsl.com> In-Reply-To: <20120716023940.11756.76659.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 120716-0, 16/07/2012), Outbound message X-Antivirus-Status: Clean Subject: Re: [Dime] I-D Action: draft-ietf-dime-realm-based-redirect-05.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Jul 2012 11:42:43 -0000 The document has been updated according to the proposals I made last week, but I'm not sure I've gotten it right. Restricting redirection to servers meant fairly extensive changes. I think the issue is worth discussing in the meeting, and I'd be quite happy to roll back to using redirect servers if the consensus favours that. It occurred to me that redirection need not necessarily disrupt existing sessions. It could just be applied to initial messages of a session. I added text that allowed an application incorporating realm-based redirection to specify which way to go. I'm not tremendously happy with the following provision, added in response to a point raised by a reviewer: o If the request contains a Destination-Host AVP, the server MUST set the 'E' bit in the answer and set the Result-Code AVP to DIAMETER_UNABLE_TO_DELIVER. This seems sub-optimal, since it doesn't allow the server to indicate that the whole realm is out of bounds. Clearly this is going to need another WGLC because of the extent of the changes I've made. Could we have 15 minutes, or at least ten, to discuss issues with the draft at the meeting before we go any further? Tom Taylor On 15/07/2012 10:39 PM, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the Diameter Maintenance and Extensions Working Group of the IETF. > > Title : Realm-Based Redirection In Diameter > Author(s) : Tina Tsou > Ruibing Hao > Tom Taylor > Filename : draft-ietf-dime-realm-based-redirect-05.txt > Pages : 8 > Date : 2012-07-15 > > Abstract: > The Diameter protocol allows a Diameter redirect agent to specify one > or more individual hosts to which a Diameter message may be > redirected by an upstream Diameter node. However, in some > circumstances an operator may wish to redirect messages to an > alternate domain without specifying individual hosts. This document > specifies a mechanism by which this can be achieved. New > applications may incorporate this capability by reference to the > present document. > ... From jouni.nospam@gmail.com Mon Jul 16 05:45:22 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A41AC21F8795 for ; Mon, 16 Jul 2012 05:45:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.828 X-Spam-Level: X-Spam-Status: No, score=-2.828 tagged_above=-999 required=5 tests=[AWL=0.771, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Do7Ll6+dI3-n for ; Mon, 16 Jul 2012 05:45:21 -0700 (PDT) Received: from mail-pb0-f44.google.com (mail-pb0-f44.google.com [209.85.160.44]) by ietfa.amsl.com (Postfix) with ESMTP id D654021F873E for ; Mon, 16 Jul 2012 05:45:21 -0700 (PDT) Received: by pbcwy7 with SMTP id wy7so10481773pbc.31 for ; Mon, 16 Jul 2012 05:46:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=oLQa08wkUWlDMWdbgZj375RCD0dHAHF4izcGhPL/1kA=; b=IGjz/W+k3atx9EYHQfJomV6KqNiFM5PObBB9Y8i1+4cvUUzRpixnwdsWj0mTDXgsIn mre0hjK3IOsK8wE0tLblW+o+s8TcA3A/bk3SHmlQJK7q4R6Iy3EEvE8FfU28y0fzzFNf ypmRT4VHgwALUELGlwotYx1wIRsLVgWefGo2YC9Kg4YdFn5hwxjUMlRePD5alj4VI28R zRb9OftSwJvyG5s4OMw+biN+fm0X/XHEgT3kzEr9zF8eVrsKgapv+MFdPyHmI5o5cMQj dLYGa+iPzFzSIFvvaOhDLp4Sj7FtLKx3xADujD/rtbw4GpFOGeJkOLgYtGvjLdSs+wpi u4JQ== Received: by 10.68.116.203 with SMTP id jy11mr25998908pbb.129.1342442766469; Mon, 16 Jul 2012 05:46:06 -0700 (PDT) Received: from [10.255.129.242] ([194.251.119.201]) by mx.google.com with ESMTPS id nu5sm8571286pbb.53.2012.07.16.05.46.03 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 16 Jul 2012 05:46:05 -0700 (PDT) Mime-Version: 1.0 (Apple Message framework v1084) Content-Type: text/plain; charset=us-ascii From: jouni korhonen In-Reply-To: <5003FE51.80702@gmail.com> Date: Mon, 16 Jul 2012 15:45:59 +0300 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20120716023940.11756.76659.idtracker@ietfa.amsl.com> <5003FE51.80702@gmail.com> To: Tom Taylor X-Mailer: Apple Mail (2.1084) Cc: dime@ietf.org Subject: Re: [Dime] I-D Action: draft-ietf-dime-realm-based-redirect-05.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Jul 2012 12:45:22 -0000 Tom, 10-15mins is definitely OK. I'd like to get the remaining issues etc sorted out during Vancouver meeting.=20 - Jouni On Jul 16, 2012, at 2:43 PM, Tom Taylor wrote: > The document has been updated according to the proposals I made last = week, but I'm not sure I've gotten it right. Restricting redirection to = servers meant fairly extensive changes. I think the issue is worth = discussing in the meeting, and I'd be quite happy to roll back to using = redirect servers if the consensus favours that. >=20 > It occurred to me that redirection need not necessarily disrupt = existing sessions. It could just be applied to initial messages of a = session. I added text that allowed an application incorporating = realm-based redirection to specify which way to go. >=20 > I'm not tremendously happy with the following provision, added in = response to a point raised by a reviewer: >=20 > o If the request contains a Destination-Host AVP, the server MUST > set the 'E' bit in the answer and set the Result-Code AVP to > DIAMETER_UNABLE_TO_DELIVER. >=20 > This seems sub-optimal, since it doesn't allow the server to indicate = that the whole realm is out of bounds. >=20 > Clearly this is going to need another WGLC because of the extent of = the changes I've made. Could we have 15 minutes, or at least ten, to = discuss issues with the draft at the meeting before we go any further? >=20 > Tom Taylor >=20 > On 15/07/2012 10:39 PM, internet-drafts@ietf.org wrote: >>=20 >> A New Internet-Draft is available from the on-line Internet-Drafts = directories. >> This draft is a work item of the Diameter Maintenance and Extensions = Working Group of the IETF. >>=20 >> Title : Realm-Based Redirection In Diameter >> Author(s) : Tina Tsou >> Ruibing Hao >> Tom Taylor >> Filename : draft-ietf-dime-realm-based-redirect-05.txt >> Pages : 8 >> Date : 2012-07-15 >>=20 >> Abstract: >> The Diameter protocol allows a Diameter redirect agent to specify = one >> or more individual hosts to which a Diameter message may be >> redirected by an upstream Diameter node. However, in some >> circumstances an operator may wish to redirect messages to an >> alternate domain without specifying individual hosts. This = document >> specifies a mechanism by which this can be achieved. New >> applications may incorporate this capability by reference to the >> present document. >>=20 > ... > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime From bclaise@cisco.com Mon Jul 16 17:07:26 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75C4821F8768 for ; Mon, 16 Jul 2012 17:07:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.424 X-Spam-Level: X-Spam-Status: No, score=-10.424 tagged_above=-999 required=5 tests=[AWL=0.174, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TpFB0OWL-mP5 for ; Mon, 16 Jul 2012 17:07:25 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 78FEA11E808A for ; Mon, 16 Jul 2012 17:07:25 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6H089q1020337; Tue, 17 Jul 2012 02:08:09 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6H089eK029014; Tue, 17 Jul 2012 02:08:09 +0200 (CEST) Message-ID: <5004ACE9.8080700@cisco.com> Date: Tue, 17 Jul 2012 02:08:09 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: Glen Zorn References: <4FFC405F.9030508@cisco.com> <1342328757.4180.7.camel@gwz-laptop> In-Reply-To: <1342328757.4180.7.camel@gwz-laptop> Content-Type: multipart/alternative; boundary="------------040203000601040406020901" Cc: dime mailing list Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Jul 2012 00:07:26 -0000 This is a multi-part message in MIME format. --------------040203000601040406020901 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 15/07/2012 07:05, Glen Zorn wrote: > On Tue, 2012-07-10 at 16:46 +0200, Benoit Claise wrote: > > ... > >> >> - OLD >> [RADIUSTypes] IANA, "IANA Radius Attribute Values >> Registry", >> assignments/radius-types-3> . >> >> NEW: >> [RADIUSTypes] IANA, "IANA Radius Attribute Values >> Registry", >> assignments/radius-types> . >> >> ALTERNATE PROPOSAL >> [RADIUSTypes] IANA, "IANA Radius Attribute Values >> Registry", . >> > > Neither of these actually works, since the registry cited is not the > RADIUS Attribute Type registry but the RADIUS Attribute Value > registry; changed to > http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-3. Ok. fine. Regards, Benoit. --------------040203000601040406020901 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit
On 15/07/2012 07:05, Glen Zorn wrote:
On Tue, 2012-07-10 at 16:46 +0200, Benoit Claise wrote:

...


- OLD 
[RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types-3>.

NEW:
   [RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/
                               assignments/radius-types>.

ALTERNATE PROPOSAL 
[RADIUSTypes]               IANA, "IANA Radius Attribute Values
                               Registry", <http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-1>.


Neither of these actually works, since the registry cited is not the RADIUS Attribute Type registry but the RADIUS Attribute Value registry; changed to http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-3.
Ok. fine.

Regards, Benoit.


--------------040203000601040406020901-- From bclaise@cisco.com Mon Jul 16 17:11:24 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BAE421F877E for ; Mon, 16 Jul 2012 17:11:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.427 X-Spam-Level: X-Spam-Status: No, score=-10.427 tagged_above=-999 required=5 tests=[AWL=0.171, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 90fpcc7AI4zk for ; Mon, 16 Jul 2012 17:11:23 -0700 (PDT) Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 673FA21F8768 for ; Mon, 16 Jul 2012 17:11:23 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6H0C74i020664; Tue, 17 Jul 2012 02:12:07 +0200 (CEST) Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6H0C6Iw000694; Tue, 17 Jul 2012 02:12:06 +0200 (CEST) Message-ID: <5004ADD6.10506@cisco.com> Date: Tue, 17 Jul 2012 02:12:06 +0200 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20120614 Thunderbird/13.0.1 MIME-Version: 1.0 To: Glen Zorn References: <4FFC405F.9030508@cisco.com> <1342327865.4180.3.camel@gwz-laptop> In-Reply-To: <1342327865.4180.3.camel@gwz-laptop> Content-Type: multipart/alternative; boundary="------------020708000403060603090609" Cc: dime mailing list Subject: Re: [Dime] AD review of draft-ietf-dime-rfc4005bis-09.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Jul 2012 00:11:24 -0000 This is a multi-part message in MIME format. --------------020708000403060603090609 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi Glen, > On Tue, 2012-07-10 at 16:46 +0200, Benoit Claise wrote: >> Dear all, Glen, >> >> Please find below the AD review of draft-ietf-dime-rfc4005bis-09.txt >> >> The document is in a good enough shape to be sent to IETF LC. >> Please consider my comments together with the other IETF LC comments. >> >> Glen, let me know if you plan on submitting a quick revision soon, or >> if I should send THIS version to the IETF LC (which might lead to >> redundant comment) >> >> >> - Some idnits >> http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt >> >> Miscellaneous warnings: >> ---------------------------------------------------------------------------- >> >> == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but >> does not include the phrase in its RFC 2119 key words list. >> >> Checking references for intended status: Proposed Standard >> ---------------------------------------------------------------------------- >> >> == Missing Reference: 'BASE' is mentioned on line 219, but not defined >> >> I understand that this is a quote from RFC4005. To avoid the source >> of confusion, here is a proposal > > Rereading this, I don't know what confusion you mean. It seems to be > fine English, pretty clear, and it doesn't seem like the change you > suggest is likely to unconfuse ID-nits. What am I missing? This proposal will not unconfuse ID-nits, but would make clear to the reader that this is a quote, and nobody would look for the [BASE] reference ... as this is quote from a different document. Anyway, minor point. Change it in a next version if you believe that's an improvement. > >> >> OLD: >> However, the presence of an >> instance of the Acct-Application-Id AVP was required in RFC 4005, >> as well: >> >> The ACR message [BASE] is sent by the NAS to report its session >> information to a target server downstream. >> >> Either of Acct-Application-Id or Vendor-Specific-Application-Id >> AVPs MUST be present. If the Vendor-Specific-Application-Id >> grouped AVP is present, it must have an Acct-Application-Id >> inside. >> NEW: >> However, the presence of an >> instance of the Acct-Application-Id AVP was required in RFC 4005, >> which quotes: >> >> "The ACR message [BASE] is sent by the NAS to report its session >> information to a target server downstream. >> >> Either of Acct-Application-Id or Vendor-Specific-Application-Id >> AVPs MUST be present. If the Vendor-Specific-Application-Id >> grouped AVP is present, it must have an Acct-Application-Id >> inside." >> >> - I could not find the meaning of * in, for example, >> >> [ CHAP-Auth ] >> [ CHAP-Challenge ] >> * [ Framed-Compression ] >> [ Framed-Interface-Id ] >> [ Framed-IP-Address ] >> * [ Framed-IPv6-Prefix ] >> [ Framed-IP-Netmask ] >> [ Framed-MTU ] >> [ Framed-Protocol ] >> [ ARAP-Password ] >> [ ARAP-Security ] >> * [ ARAP-Security-Data ] >> * [ Login-IP-Host ] >> * [ Login-IPv6-Host ] >> [ Login-LAT-Group ] >> [ Login-LAT-Node ] >> [ Login-LAT-Port ] >> [ Login-LAT-Service ] >> * [ Tunneling ] >> * [ Proxy-Info ] >> * [ Route-Record ] >> * [ AVP ] >> I believe that you have forgotten to include your proposed text: Note that the message formats in the following sub-sections use the standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], Section 3.2). Regards, Benoit. --------------020708000403060603090609 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit
Hi Glen,
On Tue, 2012-07-10 at 16:46 +0200, Benoit Claise wrote:
Dear all, Glen,

Please find below the AD review of draft-ietf-dime-rfc4005bis-09.txt

The document is in a good enough shape to be sent to IETF LC.
Please consider my comments together with the other IETF LC comments.

Glen, let me know if you plan on submitting a quick revision soon, or if I should send THIS version to the IETF LC (which might lead to redundant comment)


- Some idnits
http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-dime-rfc4005bis-09.txt 
Miscellaneous warnings:
  ----------------------------------------------------------------------------

  == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but
     does not include the phrase in its RFC 2119 key words list.


Checking references for intended status: Proposed Standard
  ----------------------------------------------------------------------------

  == Missing Reference: 'BASE' is mentioned on line 219, but not defined
I understand that this is a quote from RFC4005. To avoid the source of confusion, here is a proposal

Rereading this, I don't know what confusion you mean.  It seems to be fine English, pretty clear, and it doesn't seem like the change you suggest is likely to unconfuse ID-nits.  What am I missing?
This proposal will not unconfuse ID-nits, but would make clear to the reader that this is a quote, and nobody would look for the [BASE] reference ... as this is quote from a different document.
Anyway, minor point. Change it in a next version if you believe that's an improvement.


OLD: 
However, the presence of an
      instance of the Acct-Application-Id AVP was required in RFC 4005,
      as well:

         The ACR message [BASE] is sent by the NAS to report its session
         information to a target server downstream.

         Either of Acct-Application-Id or Vendor-Specific-Application-Id
         AVPs MUST be present.  If the Vendor-Specific-Application-Id
         grouped AVP is present, it must have an Acct-Application-Id
         inside.
NEW: 
However, the presence of an
      instance of the Acct-Application-Id AVP was required in RFC 4005,
      which quotes:

         "The ACR message [BASE] is sent by the NAS to report its session
         information to a target server downstream.

         Either of Acct-Application-Id or Vendor-Specific-Application-Id
         AVPs MUST be present.  If the Vendor-Specific-Application-Id
         grouped AVP is present, it must have an Acct-Application-Id
         inside."

- I could not find the meaning of * in, for example,

                          [ CHAP-Auth ]
                          [ CHAP-Challenge ]
                        * [ Framed-Compression ]
                          [ Framed-Interface-Id ]
                          [ Framed-IP-Address ]
                        * [ Framed-IPv6-Prefix ]
                          [ Framed-IP-Netmask ]
                          [ Framed-MTU ]
                          [ Framed-Protocol ]
                          [ ARAP-Password ]
                          [ ARAP-Security ]
                        * [ ARAP-Security-Data ]
                        * [ Login-IP-Host ]
                        * [ Login-IPv6-Host ]
                          [ Login-LAT-Group ]
                          [ Login-LAT-Node ]
                          [ Login-LAT-Port ]
                          [ Login-LAT-Service ]
                        * [ Tunneling ]
                        * [ Proxy-Info ]
                        * [ Route-Record ]
                        * [ AVP ]
I believe that you have forgotten to include your proposed text:
Note that the message formats in the following sub-sections use the standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], Section 3.2).
Regards, Benoit.
--------------020708000403060603090609-- From jouni.nospam@gmail.com Tue Jul 17 02:07:45 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D7A121F86A2 for ; Tue, 17 Jul 2012 02:07:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.085 X-Spam-Level: X-Spam-Status: No, score=-3.085 tagged_above=-999 required=5 tests=[AWL=0.514, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mryd+tNaPezc for ; Tue, 17 Jul 2012 02:07:44 -0700 (PDT) Received: from mail-gh0-f172.google.com (mail-gh0-f172.google.com [209.85.160.172]) by ietfa.amsl.com (Postfix) with ESMTP id 03BC521F86A1 for ; Tue, 17 Jul 2012 02:07:43 -0700 (PDT) Received: by mail-gh0-f172.google.com with SMTP id g16so171900ghb.31 for ; Tue, 17 Jul 2012 02:08:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :cc:to:mime-version:x-mailer; bh=7Z/YwYzzzLRwStNvHel2tvdJNr77W3d52QFXlpKxChE=; b=hvLyePRVcxAf9bYng8lzS63e79NSCGO1njJfo8zWhe1TBwRpVV64VGSXGMO1UcxDmP 0Nszhin755vH/Wb3whVAJuxrXy3grP5gK5cN0gLBiRQYRz+AZyrJNlP6+26x32YgzqGn 6+YECD0KyVaWd9Q76VClZYY2tAn5eKrjytXtvyzrQ13V78AKznxMYRm2rONinZTS9CwO 6++vuN78wZDmLWpsiqwMXIieN/8AC1uRpNOxX+DCo5aGIb5/Q1mDNTeV6JjVfy/Rb7JJ NBJBIetdeYmKvH8pTLJ5E1qdL8haG8LmZOjgHGWyAh14cAwxCHpIgPwVXH2uaT3ql0o8 wBzw== Received: by 10.66.80.34 with SMTP id o2mr3879923pax.36.1342516110576; Tue, 17 Jul 2012 02:08:30 -0700 (PDT) Received: from [10.255.129.242] ([194.251.119.201]) by mx.google.com with ESMTPS id pe8sm13667910pbc.76.2012.07.17.02.08.28 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 17 Jul 2012 02:08:29 -0700 (PDT) From: jouni korhonen Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Tue, 17 Jul 2012 12:08:21 +0300 Message-Id: <169CD4F5-4915-4E44-9FB0-804E5BDF66BA@gmail.com> To: dime@ietf.org Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Cc: dime-chairs@tools.ietf.org Subject: [Dime] Draft agenda X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Jul 2012 09:07:45 -0000 Folks, See the draft agenda for the upcoming Dime WG meeting. We got 2h to burn again this time. - Jouni & Lionel ------------------------------------------------------------------- * Administrativa (chairs) 5 mins * WG status update (chairs) 10 mins * Diameter overload control - Overload control justification and use cases (Martin) 15 mins - draft-mcmurry-dime-overload-reqs (Eric/Ben) 40 mins * Group signaling - draft-ietf-dime-group-signaling (N.N.) 20 mins * Realm based redirect - draft-ietf-dime-realm-based-redirect (Tom) 15 mins * Design Guidelines - draft-ietf-dime-app-design-guide (Lionel) 15 mins * AOB - If any time left.. From lionel.morand@orange.com Wed Jul 18 02:38:05 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E02121F848B for ; Wed, 18 Jul 2012 02:38:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.372 X-Spam-Level: X-Spam-Status: No, score=-2.372 tagged_above=-999 required=5 tests=[AWL=0.225, BAYES_00=-2.599, HTML_MESSAGE=0.001, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sfNSPdNDjpwk for ; Wed, 18 Jul 2012 02:37:37 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias92.francetelecom.com [193.251.215.92]) by ietfa.amsl.com (Postfix) with ESMTP id 3C26D21F867E for ; Wed, 18 Jul 2012 02:37:36 -0700 (PDT) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm11.si.francetelecom.fr (ESMTP service) with ESMTP id E4A483B42E1 for ; Wed, 18 Jul 2012 11:38:24 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.186]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id BC7F0238059 for ; Wed, 18 Jul 2012 11:38:24 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH01.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.02.0298.004; Wed, 18 Jul 2012 11:38:24 +0200 From: To: "dime@ietf.org" Thread-Topic: New version of the Design guidelines draft Thread-Index: Ac1kyRDWF1cOBPu2S8STJXzMrtW8Pg== Date: Wed, 18 Jul 2012 09:38:07 +0000 Message-ID: <25853_1342604304_50068410_25853_1156_1_6B7134B31289DC4FAF731D844122B36E0298E4@PEXCVZYM13.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-cr-hashedpuzzle: AQC6 A9ol BZkQ BqXq BwBu B23c CaBV C9Xv DX/J FQ8x GwL2 JZKb JfA4 JpDp LOKz MY5T; 1; ZABpAG0AZQBAAGkAZQB0AGYALgBvAHIAZwA=; Sosha1_v1; 7; {D961C96F-75CD-4EE6-8607-58F30C18AA32}; bABpAG8AbgBlAGwALgBtAG8AcgBhAG4AZABAAG8AcgBhAG4AZwBlAC4AYwBvAG0A; Wed, 18 Jul 2012 09:38:19 GMT; TgBlAHcAIAB2AGUAcgBzAGkAbwBuACAAbwBmACAAdABoAGUAIABEAGUAcwBpAGcAbgAgAGcAdQBpAGQAZQBsAGkAbgBlAHMAIABkAHIAYQBmAHQA x-cr-puzzleid: {D961C96F-75CD-4EE6-8607-58F30C18AA32} x-originating-ip: [10.197.38.5] Content-Type: multipart/mixed; boundary="_003_6B7134B31289DC4FAF731D844122B36E0298E4PEXCVZYM13corpora_" MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.6.19.115414 X-Mailman-Approved-At: Wed, 18 Jul 2012 02:39:42 -0700 Subject: [Dime] New version of the Design guidelines draft X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jul 2012 09:38:05 -0000 --_003_6B7134B31289DC4FAF731D844122B36E0298E4PEXCVZYM13corpora_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, As I missed the deadline for draft submission before the IETF meeting, plea= se find enclosed the text and html files of the updated version of the draf= t-ietf-dime-app-design-guide. Please review the document and provide comments to improve the quality of t= he document as it is considered as useful information to provide to applica= tion designers. It is intended to request for a formal WGLC after the IETF meeting in Vanco= uver. Regards, Lionel ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, France Telecom - Orange decline toute responsabilite si ce message a ete al= tere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, France Telecom - Orange is not liable for message= s that have been modified, changed or falsified. Thank you. --_003_6B7134B31289DC4FAF731D844122B36E0298E4PEXCVZYM13corpora_ Content-Type: text/plain; name="draft-ietf-dime-app-design-guide-15.txt" Content-Description: draft-ietf-dime-app-design-guide-15.txt Content-Disposition: attachment; filename="draft-ietf-dime-app-design-guide-15.txt"; size=56898; creation-date="Wed, 20 Jun 2012 10:48:44 GMT"; modification-date="Wed, 18 Jul 2012 01:49:14 GMT" Content-Transfer-Encoding: base64 DQoNCg0KRGlhbWV0ZXIgTWFpbnRlbmFuY2UgYW5kIEV4dGVuc2lvbnMgICAgICAgICAgICAgICAg ICAgICAgIEwuIE1vcmFuZCwgRWQuDQooRElNRSkgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgT3JhbmdlIExhYnMNCkludGVybmV0LURyYWZ0ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVi4gRmFqYXJkbw0K SW50ZW5kZWQgc3RhdHVzOiBJbmZvcm1hdGlvbmFsDQpFeHBpcmVzOiBKYW51YXJ5IDE4LCAyMDEz ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEguIFRzY2hvZmVuaWcNCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm9raWEgU2llbWVucyBO ZXR3b3Jrcw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBKdWx5IDE3LCAyMDEyDQoNCg0KICAgICAgICAgICAgICAgIERpYW1ldGVyIEFw cGxpY2F0aW9ucyBEZXNpZ24gR3VpZGVsaW5lcw0KICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0 Zi1kaW1lLWFwcC1kZXNpZ24tZ3VpZGUtMTUNCg0KQWJzdHJhY3QNCg0KICAgVGhlIERpYW1ldGVy IEJhc2UgcHJvdG9jb2wgcHJvdmlkZXMgZmFjaWxpdGllcyBmb3IgcHJvdG9jb2wNCiAgIGV4dGVu c2liaWxpdHkgZW5hYmxpbmcgdG8gZGVmaW5lIG5ldyBEaWFtZXRlciBhcHBsaWNhdGlvbnMgb3Ig bW9kaWZ5DQogICBleGlzdGluZyBhcHBsaWNhdGlvbnMuICBUaGlzIGRvY3VtZW50IGlzIGEgY29t cGFuaW9uIGRvY3VtZW50IHRvIHRoZQ0KICAgRGlhbWV0ZXIgQmFzZSBwcm90b2NvbCB0aGF0IGZ1 cnRoZXIgZXhwbGFpbnMgYW5kIGNsYXJpZmllcyB0aGUgcnVsZXMNCiAgIHRvIGV4dGVuZCB0aGUg RGlhbWV0ZXIgQmFzZSBwcm90b2NvbC4gIEl0IGlzIG1lYW50IGFzIGEgZ3VpZGVsaW5lcw0KICAg ZG9jdW1lbnQgYW5kIHRoZXJlZm9yZSBpdCBkb2VzIG5vdCBhZGQsIHJlbW92ZSBvciBjaGFuZ2Ug ZXhpc3RpbmcNCiAgIHJ1bGVzLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KTW9yYW5kLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBK YW51YXJ5IDE4LCAyMDEzICAgICAgICAgICAgICAgIFtQYWdlIDFdDQoMDQpJbnRlcm5ldC1EcmFm dCAgIERpYW1ldGVyIEFwcGxpY2F0aW9ucyBEZXNpZ24gR3VpZGVsaW5lcyAgICAgICBKdWx5IDIw MTINCg0KDQpSZXF1aXJlbWVudHMgTGFuZ3VhZ2UNCg0KICAgVGhlIGtleSB3b3JkcyAiTVVTVCIs ICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLA0KICAgIlNIT1VM RCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGlu IHRoaXMNCiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4g W1JGQzIxMTldLg0KDQpTdGF0dXMgb2YgdGhpcyBNZW1vDQoNCiAgIFRoaXMgSW50ZXJuZXQtRHJh ZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUNCiAgIHByb3Zpc2lv bnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuDQoNCiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2lu ZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nDQogICBUYXNrIEZvcmNlIChJ RVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZQ0KICAgd29y a2luZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJ bnRlcm5ldC0NCiAgIERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJh ZnRzL2N1cnJlbnQvLg0KDQogICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2 YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHMNCiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwg cmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55DQogICB0aW1l LiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5j ZQ0KICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJv Z3Jlc3MuIg0KDQogICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIEphbnVhcnkg MTgsIDIwMTMuDQoNCkNvcHlyaWdodCBOb3RpY2UNCg0KICAgQ29weXJpZ2h0IChjKSAyMDEyIElF VEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlDQogICBkb2N1bWVudCBh dXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC4NCg0KICAgVGhpcyBkb2N1bWVudCBpcyBzdWJq ZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdhbA0KICAgUHJvdmlzaW9ucyBS ZWxhdGluZyB0byBJRVRGIERvY3VtZW50cw0KICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xp Y2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mDQogICBwdWJsaWNhdGlvbiBvZiB0 aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHMNCiAgIGNhcmVmdWxs eSwgYXMgdGhleSBkZXNjcmliZSB5b3VyIHJpZ2h0cyBhbmQgcmVzdHJpY3Rpb25zIHdpdGggcmVz cGVjdA0KICAgdG8gdGhpcyBkb2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJv bSB0aGlzIGRvY3VtZW50IG11c3QNCiAgIGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZSB0 ZXh0IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuZSBvZg0KICAgdGhlIFRydXN0IExlZ2FsIFBy b3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJhbnR5IGFzDQogICBkZXNjcmli ZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KTW9yYW5kLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDE4LCAyMDEzICAg ICAgICAgICAgICAgIFtQYWdlIDJdDQoMDQpJbnRlcm5ldC1EcmFmdCAgIERpYW1ldGVyIEFwcGxp Y2F0aW9ucyBEZXNpZ24gR3VpZGVsaW5lcyAgICAgICBKdWx5IDIwMTINCg0KDQpUYWJsZSBvZiBD b250ZW50cw0KDQogICAxLiAgSW50cm9kdWN0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQNCiAgIDIuICBUZXJtaW5vbG9neSAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNQ0KICAgMy4gIE92ZXJ2 aWV3IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA2DQogICA0LiAgUmV1c2luZyBleGlzdGluZyBEaWFtZXRlciBhcHBsaWNhdGlvbnMgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDgNCiAgICAgNC4xLiAgQWRkaW5nIGEgbmV3IGNvbW1hbmQgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOA0KICAgICA0LjIuICBEZWxldGlu ZyBhIGNvbW1hbmQgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA5DQog ICAgIDQuMy4gIFJldXNpbmcgZXhpc3RpbmcgY29tbWFuZHMgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDkNCiAgICAgICA0LjMuMS4gIEFkZGluZyBBVlBzIHRvIGEgb21tYW5kICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOQ0KICAgICAgIDQuMy4yLiAgRGVsZXRpbmcg QVZQcyBmcm9tIGEgY29tbWFuZCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDExDQogICAgIDQu NC4gIFJldXNpbmcgZXhpc3RpbmcgQVZQcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gMTINCiAgICAgICA0LjQuMS4gIFNldHRpbmcgb2YgdGhlIEFWUCBmbGFncyAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMg0KICAgICAgIDQuNC4yLiAgUmV1c2Ugb2YgQVZQIG9m IHR5cGUgRW51bWVyYXRlZCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDEyDQogICA1LiAgRGVmaW5p bmcgbmV3IERpYW1ldGVyIGFwcGxpY2F0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g MTMNCiAgICAgNS4xLiAgSW50cm9kdWN0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAxMw0KICAgICA1LjIuICBEZWZpbmluZyBuZXcgY29tbWFuZHMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDEzDQogICAgIDUuMy4gIFVzZSBvZiBB cHBsaWNhdGlvbi1JZCBpbiBhIG1lc3NhZ2UgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTQNCiAg ICAgNS40LiAgQXBwbGljYXRpb24gc3BlY2lmaWMgU2Vzc2lvbiBTdGF0ZSBNYWNoaW5lIC4gLiAu IC4gLiAuIC4gLiAxNA0KICAgICA1LjUuICBTZXNzaW9uLUlkIEFWUCBhbmQgc2Vzc2lvbiBtYW5h Z2VtZW50ICAuIC4gLiAuIC4gLiAuIC4gLiAuIDE1DQogICAgIDUuNi4gIEFWUHMgZGVmaW5lZCBh cyBCb29sZWFuIGZsYWcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTUNCiAgICAgNS43 LiAgQXBwbGljYXRpb24tc3BlY2lmaWMgbWVzc2FnZSByb3V0aW5nIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAxNg0KICAgICA1LjguICBBYm91dCBUcmFuc2xhdGlvbiBBZ2VudCAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE3DQogICAgIDUuOS4gIEVuZC10by1FbmQgYXBwbGljYXRp b25zIGNhcGFiaWxpdGllcyBleGNoYW5nZSAgLiAuIC4gLiAuIC4gMTcNCiAgICAgNS4xMC4gRGlh bWV0ZXIgYWNjb3VudGluZyBzdXBwb3J0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAx OA0KICAgICA1LjExLiBEaWFtZXRlciBzZWN1cml0eSBtZWNoYW5pc21zIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIDIwDQogICA2LiAgRGVmaW5pbmcgR2VuZXJpYyBEaWFtZXRlciBFeHRl bnNpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMjINCiAgIDcuICBJQU5BIENvbnNpZGVy YXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyNA0KICAg OC4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIDI1DQogICA5LiAgQ29udHJpYnV0b3JzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMjYNCiAgIDEwLiBBY2tub3dsZWRnbWVudHMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyNw0KICAgMTEuIFJl ZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDI4DQogICAgIDExLjEuIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gMjgNCiAgICAgMTEuMi4gSW5mb3JtYXRpdmUgUmVmZXJlbmNl cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyOA0KICAgQXV0aG9ycycgQWRk cmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDMw DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCk1vcmFuZCwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgICBbUGFnZSAzXQ0KDA0KSW50 ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGluZXMgICAg ICAgSnVseSAyMDEyDQoNCg0KMS4gIEludHJvZHVjdGlvbg0KDQogICBUaGUgRGlhbWV0ZXIgQmFz ZSBwcm90b2NvbCBwcm92aWRlcyBmYWNpbGl0aWVzIHRvIGV4dGVuZCB0aGUgRGlhbWV0ZXINCiAg IEJhc2UgcHJvdG9jb2wgKHNlZSBTZWN0aW9uIDEuMyBvZiBbSS1ELmlldGYtZGltZS1yZmMzNTg4 YmlzXSkgZm9yDQogICBzdXBwb3J0aW5nIG5ldyBmdW5jdGlvbmFsaXRpZXMuICBJbiB0aGUgY29u dGV4dCBvZiB0aGlzIGRvY3VtZW50LA0KICAgZXh0ZW5kaW5nIERpYW1ldGVyIG1lYW5zIG9uZSBv ZiB0aGUgZm9sbG93aW5nOg0KDQoNCiAgIDEuICBBZGRpdGlvbiBvZiBhIG5ldyBmdW5jdGlvbmFs aXR5IHRvIGFuIGV4aXN0aW5nIERpYW1ldGVyDQogICAgICAgYXBwbGljYXRpb24gd2l0aG91dCBk ZWZpbmluZyBhIG5ldyBhcHBsaWNhdGlvbi4NCg0KICAgMi4gIEFkZGl0aW9uIG9mIGEgbmV3IGZ1 bmN0aW9uYWxpdHkgdG8gYW4gZXhpc3RpbmcgRGlhbWV0ZXINCiAgICAgICBhcHBsaWNhdGlvbiB0 aGF0IHJlcXVpcmVzIHRoZSBkZWZpbml0aW9uIG9mIGEgbmV3IGFwcGxpY2F0aW9uLg0KDQogICAz LiAgVGhlIGRlZmluaXRpb24gb2YgYSBuZXcgRGlhbWV0ZXIgYXBwbGljYXRpb24gdG8gcHJvdmlk ZSBhIHNldCBvZg0KICAgICAgIGZ1bmN0aW9uYWxpdGllcyBub3Qgc3VwcG9ydGVkIGJ5IGV4aXN0 aW5nIGFwcGxpY2F0aW9ucy4NCg0KICAgNC4gIFRoZSBkZWZpbml0aW9uIG9mIGEgbmV3IGdlbmVy aWMgZnVuY3Rpb25hbGl0eSB0aGF0IGNhbiBiZSByZXVzZWQNCiAgICAgICBhY3Jvc3MgZGlmZmVy ZW50IGFwcGxpY2F0aW9ucy4NCg0KICAgQWxsIG9mIHRoZXNlIGNob2ljZXMgYXJlIGRlc2lnbiBk ZWNpc2lvbnMgdGhhdCBjYW4gYmUgZG9uZSBieSBhbnkNCiAgIGNvbWJpbmF0aW9uIG9mIHJldXNp bmcgZXhpc3Rpbmcgb3IgZGVmaW5pbmcgbmV3IGNvbW1hbmRzLCBBVlBzIG9yIEFWUA0KICAgdmFs dWVzLiAgSG93ZXZlciwgYXBwbGljYXRpb24gZGVzaWduZXJzIGRvIG5vdCBoYXZlIHRvdGFsIGZy ZWVkb20NCiAgIHdoZW4gbWFraW5nIHRoZWlyIGRlc2lnbi4gIEEgbnVtYmVyIG9mIHJ1bGVzIGhh dmUgYmVlbiBkZWZpbmVkIGluDQogICBbSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzXSBhbmQgcGxh Y2UgY29uc3RyYWludHMgb24gd2hlbiBhbiBleHRlbnNpb24NCiAgIHJlcXVpcmVzIHRoZSBhbGxv Y2F0aW9uIG9mIGEgbmV3IERpYW1ldGVyIGFwcGxpY2F0aW9uIGlkZW50aWZpZXIgb3IgYQ0KICAg bmV3IGNvbW1hbmQgY29kZSB2YWx1ZS4gIFRoZSBvYmplY3RpdmUgb2YgdGhpcyBkb2N1bWVudCBp cyB0aGUNCiAgIGZvbGxvd2luZzoNCg0KDQogICBvICBDbGFyaWZ5IHVwZGF0ZWQgRGlhbWV0ZXIg ZXh0ZW5zaWJpbGl0eSBydWxlcyBpbiB0aGUgRGlhbWV0ZXIgQmFzZQ0KICAgICAgUHJvdG9jb2wu DQoNCiAgIG8gIENsYXJpZnkgdXNhZ2Ugb2YgY2VydGFpbiBEaWFtZXRlciBmdW5jdGlvbmFsaXRp ZXMgdGhhdCBhcmUgbm90DQogICAgICBleHBsaWNpdGx5IGRlc2NyaWJlZCBpbiB0aGUgRGlhbWV0 ZXIgQmFzZSBzcGVjaWZpY2F0aW9uLg0KDQogICBvICBEaXNjdXNzIGRlc2lnbiBjaG9pY2VzIGFu ZCBwcm92aWRlIGd1aWRlbGluZXMgd2hlbiBkZWZpbmluZyBuZXcNCiAgICAgIGFwcGxpY2F0aW9u cy4NCg0KICAgbyAgUHJlc2VudCB0cmFkZW9mZnMgb2YgZGVzaWduIGNob2ljZXMuDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KTW9yYW5kLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDE4 LCAyMDEzICAgICAgICAgICAgICAgIFtQYWdlIDRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgIERpYW1l dGVyIEFwcGxpY2F0aW9ucyBEZXNpZ24gR3VpZGVsaW5lcyAgICAgICBKdWx5IDIwMTINCg0KDQoy LiAgVGVybWlub2xvZ3kNCg0KICAgVGhpcyBkb2N1bWVudCByZXVzZXMgdGhlIHRlcm1pbm9sb2d5 IHVzZWQgaW4NCiAgIFtJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXNdLg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCk1vcmFuZCwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFu dWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgICBbUGFnZSA1XQ0KDA0KSW50ZXJuZXQtRHJhZnQg ICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGluZXMgICAgICAgSnVseSAyMDEy DQoNCg0KMy4gIE92ZXJ2aWV3DQoNCiAgIEFzIGRlc2lnbmVkLCB0aGUgRGlhbWV0ZXIgQmFzZSBw cm90b2NvbCBbSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzXQ0KICAgY2FuIGJlIHNlZW4gYXMgYSB0 d28tbGF5ZXIgcHJvdG9jb2wuICBUaGUgbG93ZXIgbGF5ZXIgaXMgbWFpbmx5DQogICByZXNwb25z aWJsZSBmb3IgbWFuYWdpbmcgY29ubmVjdGlvbnMgYmV0d2VlbiBuZWlnaGJvcmluZyBwZWVycyBh bmQNCiAgIGZvciBtZXNzYWdlIHJvdXRpbmcuICBUaGUgdXBwZXIgbGF5ZXIgaXMgd2hlcmUgdGhl IERpYW1ldGVyDQogICBhcHBsaWNhdGlvbnMgcmVzaWRlLiAgVGhpcyBtb2RlbCBpcyBpbiBsaW5l IHdpdGggYSBEaWFtZXRlciBub2RlDQogICBoYXZpbmcgYW4gYXBwbGljYXRpb24gbGF5ZXIgYW5k IGEgcGVlci10by1wZWVyIGRlbGl2ZXJ5IGxheWVyLiAgVGhlDQogICBEaWFtZXRlciBCYXNlIHBy b3RvY29sIGRvY3VtZW50IGRlZmluZXMgdGhlIGFyY2hpdGVjdHVyZSBhbmQgYmVoYXZpb3INCiAg IG9mIHRoZSBtZXNzYWdlIGRlbGl2ZXJ5IGxheWVyIGFuZCB0aGVuIHByb3ZpZGVzIHRoZSBmcmFt ZXdvcmsgZm9yDQogICBkZXNpZ25pbmcgRGlhbWV0ZXIgYXBwbGljYXRpb25zIG9uIHRoZSBhcHBs aWNhdGlvbiBsYXllci4gIFRoaXMNCiAgIGZyYW1ld29yayBpbmNsdWRlcyBkZWZpbml0aW9ucyBv ZiBhcHBsaWNhdGlvbiBzZXNzaW9ucyBhbmQgYWNjb3VudGluZw0KICAgc3VwcG9ydCAoc2VlIFNl Y3Rpb24gOCBhbmQgOSBvZiBbSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzXSkuDQogICBBY2NvcmRp bmdseSwgYSBEaWFtZXRlciBub2RlIGlzIHNlZW4gaW4gdGhpcyBkb2N1bWVudCBhcyBhIHNpbmds ZQ0KICAgaW5zdGFuY2Ugb2YgYSBEaWFtZXRlciBtZXNzYWdlIGRlbGl2ZXJ5IGxheWVyIGFuZCBv bmUgb3IgbW9yZQ0KICAgRGlhbWV0ZXIgYXBwbGljYXRpb25zIHVzaW5nIGl0Lg0KDQogICBUaGUg RGlhbWV0ZXIgQmFzZSBwcm90b2NvbCBpcyBkZXNpZ25lZCB0byBiZSBleHRlbnNpYmxlIGFuZCB0 aGUNCiAgIHByaW5jaXBsZXMgYXJlIGRlc2NyaWJlZCBpbiB0aGUgc2VjdGlvbiAxLjMgb2YNCiAg IFtJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXNdLiAgRXh0ZW5kaW5nIERpYW1ldGVyIGNhbiBtZWFu IGVpdGhlciB0aGUNCiAgIGRlZmluaXRpb24gb2YgYSBjb21wbGV0bHkgbmV3IERpYW1ldGVyIGFw cGxpY2F0aW9uIG9yIHRoZSByZXVzZSBvZg0KICAgY29tbWFuZHMsIEFWUHMgYW5kIEFWUCB2YWx1 ZXMgaW4gYW55IGNvbWJpbmF0aW9uIGZvciB0aGUgcHVycG9zZSBvZg0KICAgaW5oZXJpdGluZyB0 aGUgZmVhdHVyZXMgb2YgYW4gZXhpc3RpbmcgRGlhbWV0ZXIgYXBwbGljYXRpb24uICBUaGUNCiAg IHJlY29tbWVuZGF0aW9uIGZvciByZS11c2luZyBhcyBtdWNoIGFzIHBvc3NpYmxlIGV4aXN0aW5n DQogICBpbXBsZW1lbnRhdGlvbnMgaXMgbWVhbmluZ2Z1bCBhcyBtb3N0IG9mIHRoZSByZXF1aXJl bWVudHMgZGVmaW5lZCBmb3INCiAgIGEgbmV3IGFwcGxpY2F0aW9uIGFyZSBsaWtlbHkgYWxyZWFk eSBmdWxmaWxsZWQgYnkgZXhpc3RpbmcNCiAgIGFwcGxpY2F0aW9ucy4NCg0KICAgSG93ZXZlciwg d2hlbiByZXVzaW5nIGV4aXN0aW5nIGFwcGxpY2F0aW9ucywgdGhlcmUgaXMgYSBncmVhdGVyDQog ICBsaWtlbGlob29kIG9mIGFtYmlndWl0eSBvbiBob3cgbXVjaCBvZiB0aGUgZXhpc3RpbmcgYXBw bGljYXRpb24gY2FuDQogICBiZSBlbmhhbmNlZCB3aXRob3V0IGJlaW5nIGRpc3RvcnRlZCB0b28g bXVjaCBhbmQgdGhlcmVmb3JlIHJlcXVpcmluZw0KICAgdGhlIGRlZmluaXRpb24gb2YgYSBuZXcg YXBwbGljYXRpb24uDQoNCiAgIFRoZSBpbXBhY3RzIG9mIGV4dGVuZGluZyBleGlzdGluZyBhcHBs aWNhdGlvbnMgY2FuIGJlIGNhdGVnb3JpemVkIGFzDQogICBmb2xsb3c6DQoNCiAgIE1pbm9yIEV4 dGVuc2lvbjogIEVuaGFuY2luZyB0aGUgZnVuY3Rpb25hbCBzY29wZSBvZiBhbiBleGlzdGluZw0K ICAgICAgYXBwbGljYXRpb24gYnkgdGhlIGFkZGl0aW9uIG9mIG9wdGlvbmFsIGZlYXR1cmVzIHRv IHN1cHBvcnQuICBTdWNoDQogICAgICBlbmhhbmNlbWVudCBoYXMgbm8gYmFja3dhcmQgY29tcGF0 aWJpbGl0eSBpc3N1ZSB3aXRoIHRoZSBleGlzdGluZw0KICAgICAgYXBwbGljYXRpb24uICBBIHR5 cGljYWwgZXhhbXBsZSB3b3VsZCBiZSB0aGUgZGVmaW5pdGlvbiBvZiBhIG5ldw0KICAgICAgb3B0 aW9uYWwgQVZQIHRvIHVzZSBpbiBhbiBleGlzdGluZyBjb21tYW5kLiAgRGlhbWV0ZXINCiAgICAg IGltcGxlbWVudGF0aW9ucyBzdXBwb3J0aW5nIHRoZSBleGlzdGluZyBhcHBsaWNhdGlvbiBidXQg bm90IHRoZQ0KICAgICAgbmV3IEFWUCB3aWxsIHNpbXBseSBpZ25vcmUgaXQsIHdpdGhvdXQgbWFq b3IgY29uc2VxdWVuY2VzIG9uIHRoZQ0KICAgICAgRGlhbWV0ZXIgbWVzc2FnZSBoYW5kbGluZy4g IEluIGdlbmVyYWwsIHRoaXMgaW5jbHVkZXMgZXZlcnl0aGluZw0KICAgICAgdGhhdCBpcyBub3Qg Y292ZXJlZCBieSB0aGUgbmV4dCBjYXRlZ29yeS4gIFRoZSBzdGFuZGFyZGl6YXRpb24NCiAgICAg IGVmZm9ydCB3aWxsIGJlIGZhaXJseSBzbWFsbC4NCg0KDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAg ICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTgsIDIwMTMgICAgICAgICAgICAgICAgW1BhZ2UgNl0N CgwNCkludGVybmV0LURyYWZ0ICAgRGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxp bmVzICAgICAgIEp1bHkgMjAxMg0KDQoNCiAgIE1ham9yIEV4dGVuc2lvbjogIEVuaGFuY2luZyB0 aGUgZnVuY3Rpb25hbCBzY29wZSBvZiBhbiBleGlzdGluZw0KICAgICAgYXBwbGljYXRpb24gaW4g c3VjaCBhIHdheSB0aGF0IHRoaXMgaW1wbGllcyBiYWNrd2FyZCBjb21wYXRpYmxlDQogICAgICBj aGFuZ2UgdG8gdGhlIGV4aXN0aW5nIGFwcGxpY2F0aW9uIGFuZCB0aGVuIHJlcXVpcmVzIHRoZQ0K ICAgICAgZGVmaW5pdGlvbiBvZiBhIG5ldyBEaWFtZXRlciBhcHBsaWNhdGlvbi4gIFR5cGljYWwg ZXhhbXBsZXMgd291bGQNCiAgICAgIGJlIHRoZSBjcmVhdGlvbiBvZiBhIG5ldyBjb21tYW5kIGZv ciBwcm92aWRpbmcgZnVuY3Rpb25hbGl0eSBub3QNCiAgICAgIHN1cHBvcnRlZCBieSBleGlzdGlu ZyBhcHBsaWNhdGlvbnMgb3IgdGhlIGRlZmluaXRpb24gb2YgYSBuZXcgQVZQDQogICAgICB3aXRo IE0tYml0IHNldCB0byBjYXJyeSBpbiBhbiBleGlzdGluZyBjb21tYW5kLiAgRm9yIHN1Y2gNCiAg ICAgIGV4dGVuc2lvbiwgYSBzaWduaWZpY2FudCBzcGVjaWZpY2F0aW9uIGVmZm9ydCBpcyByZXF1 aXJlZCBhbmQgYQ0KICAgICAgY2FyZWZ1bCBhcHByb2FjaCBpcyByZWNvbW1lbmRlZC4NCg0KICAg VGhlIHJ1bGVzIG91dGxpbmVkIGluIHRoZSBzZWN0aW9uIDEuMyBvZiBbSS1ELmlldGYtZGltZS1y ZmMzNTg4YmlzXQ0KICAgaW5kaWNhdGUgd2hlbiBhbiBleHRlbnNpb24gcmVxdWlyZXMgYSBuZXcg Y29tbWFuZCBjb2RlIHRvIGJlDQogICByZWdpc3RlcmVkIGFuZCB3aGVuIG5ldyBEaWFtZXRlciBh cHBsaWNhdGlvbnMgaGF2ZSB0byBiZSBkZWZpbmVkLg0KICAgVGhlIHN1YnNlcXVlbnQgc2VjdGlv bnMgZnVydGhlciBleHBsYWluIGFuZCBjbGFyaWZ5IHRoZSBydWxlcyB0bw0KICAgZXh0ZW5kIHRo ZSBEaWFtZXRlciBCYXNlIHByb3RvY29sLiAgSXQgaXMgbWVhbnQgYXMgYSBndWlkZWxpbmVzDQog ICBkb2N1bWVudCBhbmQgdGhlcmVmb3JlIGl0IGRvZXMgbm90IGFkZCwgcmVtb3ZlIG9yIGNoYW5n ZSBleGlzdGluZw0KICAgcnVsZXMuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCk1vcmFuZCwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgICBbUGFnZSA3XQ0KDA0KSW50 ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGluZXMgICAg ICAgSnVseSAyMDEyDQoNCg0KNC4gIFJldXNpbmcgZXhpc3RpbmcgRGlhbWV0ZXIgYXBwbGljYXRp b25zDQoNCiAgIFdoZW4gc2VsZWN0aW5nIHRoZSBEaWFtZXRlciBCYXNlIHByb3RvY29sIHRvIHN1 cHBvcnQgbmV3DQogICBmdW5jdGlvbmFsaXRpZXMsIHByb3RvY29sIGRlc2lnbmVycyBhcmUgYWR2 aXNlZCB0byB0cnkgdG8gcmUtdXNlIGFzDQogICBtdWNoIGFzIHBvc3NpYmxlIGV4aXN0aW5nIERp YW1ldGVyIGFwcGxpY2F0aW9ucyB0byBzaW1wbGlmeQ0KICAgc3RhbmRhcmRpemF0aW9uLCBpbXBs ZW1lbnRhdGlvbiBhbmQgYXZvaWQgcG90ZW50aWFsIGludGVyb3BlcmFiaWxpdHkNCiAgIGlzc3Vl cy4gIEhvd2V2ZXIsIGV4aXN0aW5nIGFwcGxpY2F0aW9uIG5lZWRzIHRvIGJlIGFkYXB0ZWQgdG8g c3VwcG9ydA0KICAgbmV3IHJlcXVpcmVtZW50cyBhbmQgdGhlc2UgbW9kaWZpY2F0aW9ucyBjYW4g YmUgYXQgdGhlIGNvbW1hbmQgbGV2ZWwNCiAgIGFuZC9vciBhdCB0aGUgQVZQIGxldmVsLiAgVGhl IGZvbGxvd2luZyBzZWN0aW9ucyBkZXNjcmliZSB0aGUNCiAgIHBvc3NpYmxlIG1vZGlmaWNhdGlv bnMgdGhhdCBjYW4gYmUgcGVyZm9ybWVkIG9uIGV4aXN0aW5nIGFwcGxpY2F0aW9ucw0KICAgYW5k IHRoZWlyIHJlbGF0ZWQgaW1wYWN0cy4NCg0KNC4xLiAgQWRkaW5nIGEgbmV3IGNvbW1hbmQNCg0K ICAgQWRkaW5nIGEgbmV3IGNvbW1hbmQgaXMgY29uc2lkZXJlZCBhcyBhIG1ham9yIGV4dGVuc2lv biBhbmQgcmVxdWlyZXMNCiAgIGEgbmV3IERpYW1ldGVyIGFwcGxpY2F0aW9uIHRvIGJlIGRlZmlu ZWQuICBBZGRpbmcgYSBuZXcgY29tbWFuZCB0byBhbg0KICAgYXBwbGljYXRpb24gbWVhbnMgZWl0 aGVyIGRlZmluaW5nIGEgY29tcGxldGVseSBuZXcgY29tbWFuZCBvcg0KICAgaW1wb3J0aW5nIHRo ZSBjb21tYW5kJ3MgQ0NGIHN5bnRheCBzcGVjaWZpY2F0aW9uIGZyb20gYW5vdGhlcg0KICAgYXBw bGljYXRpb24gd2hlcmVieSB0aGUgbmV3IGFwcGxpY2F0aW9uIGluaGVyaXRzIHNvbWUgb3IgYWxs IG9mIHRoZQ0KICAgZnVuY3Rpb25hbGl0eSBvZiB0aGUgYXBwbGljYXRpb24gd2hlcmUgdGhlIGNv bW1hbmQgY2FtZSBmcm9tLiAgSW4gdGhlDQogICBmb3JtZXIgY2FzZSwgdGhlIGRlY2lzaW9uIHRv IGNyZWF0ZSBhbiBuZXcgYXBwbGljYXRpb24gaXMNCiAgIHN0cmFpZ2h0Zm9yd2FyZCBzaW5jZSB0 aGlzIGlzIHR5cGljYWxseSBhIHJlc3VsdCBvZiBhZGRpbmcgYSBuZXcNCiAgIGZ1bmN0aW9uYWxp dHkgdGhhdCBkb2VzIG5vdCBleGlzdCB5ZXQuICBGb3IgdGhlIGxhdHRlciwgdGhlIGRlY2lzaW9u DQogICB0byBjcmVhdGUgYSBuZXcgYXBwbGljYXRpb24gd2lsbCBkZXBlbmQgb24gd2hldGhlciBp bXBvcnRpbmcgdGhlDQogICBjb21tYW5kIGluIGEgbmV3IGFwcGxpY2F0aW9uIGlzIG1vcmUgc3Vp dGFibGUgdGhhbiBzaW1wbHkgdXNpbmcgdGhlDQogICBleGlzdGluZyBhcHBsaWNhdGlvbiBhcyBp dCBpcyBpbiBjb25qdW5jdGlvbiB3aXRoIGFueSBvdGhlcg0KICAgYXBwbGljYXRpb24uICBUaGVy ZWZvcmUsIGEgY2FzZSBieSBjYXNlIHN0dWR5IG9mIGVhY2ggYXBwbGljYXRpb24NCiAgIHJlcXVp cmVtZW50IHNob3VsZCBiZSBhcHBsaWVkLg0KDQogICBBbiBpbGx1c3RyYXRpdmUgZXhhbXBsZSBp cyB0aGUgY29tbWFuZCBwYWlyIGRlZmluZWQgaW4gRGlhbWV0ZXIgRUFQDQogICBhcHBsaWNhdGlv biBbUkZDNDA3Ml0gdGhhdCBjYW4gYmUgcmUtdXNlZCBjb25qb2ludGx5IHdpdGggYW55IG90aGVy DQogICBhcHBsaWNhdGlvbiAoZS5nLiB0aGUgRGlhbWV0ZXIgTkFTUkVRIGFwcGxpY2F0aW9uIFtS RkM0MDA1XSkgYXMgc29vbg0KICAgYXMgc3RhbmRhcmQgRUFQLWJhc2VkIGF1dGhlbnRpY2F0aW9u IHByb2NlZHVyZXMgbmVlZCB0byBiZSBzdXBwb3J0ZWQNCiAgIGJ5IHRoZSBpbXBsZW1lbnRhdGlv bi4gIEl0IG1heSB0aGVyZWZvcmUgbm90IGJlIHJlcXVpcmVkIHRvIGltcG9ydA0KICAgdGhlIGNv bW1hbmQgcGFpciBpbiB0aGUgbmV3IGRlZmluZWQgYXBwbGljYXRpb24uDQoNCiAgIEhvd2V2ZXIs IGluIGdlbmVyYWwsIGl0IGlzIGRpZmZpY3VsdCB0byBjb21lIHRvIGEgaGFyZCBndWlkZWxpbmUs IGFuZA0KICAgc28gYSBjYXNlIGJ5IGNhc2Ugc3R1ZHkgb2YgZWFjaCBhcHBsaWNhdGlvbiByZXF1 aXJlbWVudCBzaG91bGQgYmUNCiAgIGFwcGxpZWQuICBCZWZvcmUgYWRkaW5nIG9yIGltcG9ydGlu ZyBhIGNvbW1hbmQsIGFwcGxpY2F0aW9uIGRlc2lnbmVycw0KICAgc2hvdWxkIGNvbnNpZGVyIHRo ZSBmb2xsb3dpbmc6DQoNCg0KICAgbyAgQ2FuIHRoZSBuZXcgZnVuY3Rpb25hbGl0eSBiZSBmdWxm aWxsZWQgYnkgY3JlYXRpbmcgYSBuZXcgY29tbWFuZA0KICAgICAgaW5kZXBlbmRlbnQgZnJvbSBh bnkgZXhpc3RpbmcgY29tbWFuZD8gIEluIHRoaXMgY2FzZSwgdGhlDQogICAgICByZXN1bHRpbmcg bmV3IGFwcGxpY2F0aW9uIGFuZCB0aGUgZXhpc3RpbmcgYXBwbGljYXRpb24gY2FuIHdvcmsNCiAg ICAgIGluZGVwZW5kZW50IG9mLCBidXQgY29vcGVyYXRpbmcgd2l0aCBlYWNoIG90aGVyLg0KDQoN Cg0KDQoNCk1vcmFuZCwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAg ICAgICAgICAgICAgICBbUGFnZSA4XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBs aWNhdGlvbnMgRGVzaWduIEd1aWRlbGluZXMgICAgICAgSnVseSAyMDEyDQoNCg0KICAgbyAgQ2Fu IHRoZSBleGlzdGluZyBjb21tYW5kIGJlIHJldXNlZCB3aXRob3V0IG1ham9yIGV4dGVuc2lvbnMg YW5kDQogICAgICB0aGVyZWZvcmUgd2l0aG91dCB0aGUgbmVlZCBmb3IgdGhlIGRlZmluaXRpb24g b2YgYSBuZXcNCiAgICAgIGFwcGxpY2F0aW9uLCBlLmcuIG5ldyBmdW5jdGlvbmFsaXR5IGludHJv ZHVjZWQgYnkgdGhlIGNyZWF0aW9uIG9mDQogICAgICBuZXcgb3B0aW9uYWwgQVZQcy4NCg0KICAg byAgQ2FyZSBzaG91bGQgYmUgdGFrZW4gdG8gYXZvaWQgYSBsaWJlcmFsIG1ldGhvZCBvZiBpbXBv cnRpbmcNCiAgICAgIGV4aXN0aW5nIGNvbW1hbmQncyBDQ0Ygc3ludGF4IHNwZWNpZmljYXRpb24u ICBUaGlzIHdvdWxkIHJlc3VsdCBpbg0KICAgICAgYSBtb25vbGl0aGljIGFuZCBoYXJkIHRvIG1h bmFnZSBhcHBsaWNhdGlvbnMgc3VwcG9ydGluZyB0b28gbWFueQ0KICAgICAgZGlmZmVyZW50IGZ1 bmN0aW9uYWxpdGllcyBhbmQgY2FuIGNhdXNlIGludGVyb3BlcmFiaWxpdHkgaXNzdWVzDQogICAg ICBiZXR3ZWVuIHRoZSBkaWZmZXJlbnQgYXBwbGljYXRpb25zLiAuDQoNCjQuMi4gIERlbGV0aW5n IGEgY29tbWFuZA0KDQogICBBbHRob3VnaCB0aGlzIHByb2Nlc3MgaXMgbm90IHR5cGljYWwsIHJl bW92aW5nIGEgY29tbWFuZCB0byBhbg0KICAgYXBwbGljYXRpb24gcmVxdWlyZXMgYSBuZXcgRGlh bWV0ZXIgYXBwbGljYXRpb24gdG8gYmUgZGVmaW5lZC4gdGhpcw0KICAgaXMgZHVlIHRvIHRoZSBm YWN0IHRoYXQgdGhlIHJlY2VwdGlvbiBvZiB0aGUgZGVsZXRlZCBjb21tYW5kIHdvdWxkDQogICBz eXN0ZW1hdGljYWxseSByZXN1bHQgaW4gYSBwcm90b2NvbCBlcnJvcg0KICAgKERJQU1FVEVSX0NP TU1BTkRfVU5TVVBQT1JURUQpLg0KDQogICBJdCBpcyB1bnVzdWFsIHRvIGRlbGV0ZSBhbiBleGlz dGluZyBjb21tYW5kIGZyb20gYW4gYXBwbGljYXRpb24gZm9yDQogICB0aGUgc2FrZSBvZiBkZWxl dGluZyBpdCBvciB0aGUgZnVuY3Rpb25hbGl0eSBpdCByZXByZXNlbnRzLiAgVGhpcw0KICAgbm9y bWFsbHkgaW5kaWNhdGVzIG9mIGEgZmxhd2VkIGRlc2lnbi4gIEFuIGV4Y2VwdGlvbiBtaWdodCBi ZSBpZiB0aGUNCiAgIGludGVudCBvZiB0aGUgZGVsZXRpb24gaXMgdG8gY3JlYXRlIGEgbmV3ZXIg dmVyc2lvbiBvZiB0aGUgc2FtZQ0KICAgYXBwbGljYXRpb24gd2hpY2ggaXMgc29tZWhvdyBzaW1w bGVyIHRoYW4gdGhlIHByZXZpb3VzIHZlcnNpb24uDQoNCjQuMy4gIFJldXNpbmcgZXhpc3Rpbmcg Y29tbWFuZHMNCg0KICAgVGhpcyBzZWN0aW9uIGRpc2N1c3NlcyBydWxlcyBpbiBhZGRpbmcgYW5k L29yIGRlbGV0aW5nIEFWUHMgZnJvbSBhbg0KICAgZXhpc3RpbmcgY29tbWFuZCBvZiBhbiBleGlz dGluZyBhcHBsaWNhdGlvbi4gIFRoZSBjYXNlcyBkZXNjcmliZWQgaW4NCiAgIHRoaXMgc2VjdGlv biBtYXkgbm90IG5lY2Vzc2FyaWx5IHJlc3VsdCBpbiB0aGUgY3JlYXRpb24gb2YgbmV3DQogICBh cHBsaWNhdGlvbnMuDQoNCiAgIEl0IGlzIHdvcnRoIHRvIG5vdGUgdGhhdCB0aGUgc3Ryb25nIHJl Y29tbWVuZGF0aW9uIHRvIHJlLXVzZSBleGlzdGluZw0KICAgY29tbWFuZHMgaW4gdGhlIFtSRkMz NTg4XSB3YXMgdG8gcHJldmVudCByYXBpZCBzY2FyY2l0eSBvZiBjb2RlDQogICB2YWx1ZXMgYXZh aWxhYmxlIGZvciB2ZW5kb3Itc3BlY2lmaWMgY29tbWFuZHMuDQogICBbSS1ELmlldGYtZGltZS1y ZmMzNTg4YmlzXSByZWxheGVzIHRoZSBwb2xpY3kgd2l0aCByZXNwZWN0IHRvIHRoZQ0KICAgYWxs b2NhdGlvbiBvZiBjb21tYW5kIGNvZGVzIGZvciB2ZW5kb3Itc3BlY2lmaWMgdXNlcyBhbmQgZW5s YXJnZXMgdGhlDQogICByYW5nZSBvZiBhdmFpbGFibGUgY29kZSB2YWx1ZXMgZm9yIHZlbmRvci1z cGVjaWZpYyBhcHBsaWNhdGlvbnMuDQogICBUaGVyZWZvcmUsIGlmIGl0IGlzIHN0aWxsIHJlY29t bWVuZGVkIHRvIHJlLXVzZSBhcyBtdWNoIGFzIHBvc3NpYmxlDQogICBleGlzdGluZyBjb21tYW5k cywgcHJvdG9jb2wgZGVzaWduZXJzIGNhbiBjb25zaWRlciBtb3JlIGVhc2lseSB0aGUNCiAgIGRl ZmluaXRpb24gb2YgYSBuZXcgY29tbWFuZCB3aGVuIGl0IGlzIGEgc29sdXRpb24gbW9yZSBzdWl0 YWJsZSB0aGFuDQogICB0d2lzdGluZyBleGlzdGluZyBjb21tYW5kIHVzZSBhbmQgYXBwbGljYXRp b25zLg0KDQo0LjMuMS4gIEFkZGluZyBBVlBzIHRvIGEgb21tYW5kDQoNCiAgIEJhc2VkIG9uIHRo ZSBydWxlcyBpbiBbSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzXSwgQVZQcyB0aGF0IGFyZSBhZGRl ZA0KICAgdG8gYW4gZXhpc3RpbmcgY29tbWFuZCBjYW4gYmUgY2F0ZWdvcml6ZWQgaW50bzoNCg0K DQoNCg0KTW9yYW5kLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDE4LCAyMDEzICAg ICAgICAgICAgICAgIFtQYWdlIDldDQoMDQpJbnRlcm5ldC1EcmFmdCAgIERpYW1ldGVyIEFwcGxp Y2F0aW9ucyBEZXNpZ24gR3VpZGVsaW5lcyAgICAgICBKdWx5IDIwMTINCg0KDQogICBvICBNYW5k YXRvcnkgKHRvIHVuZGVyc3RhbmQpIEFWUHMuICBBcyBkZWZpbmVkIGluDQogICAgICBbSS1ELmll dGYtZGltZS1yZmMzNTg4YmlzXSwgdGhlc2UgYXJlIEFWUHMgd2l0aCB0aGUgTS1iaXQgZmxhZw0K ICAgICAgc2V0LCB3aGljaCBtZWFucyB0aGF0IGEgRGlhbWV0ZXIgbm9kZSByZWNlaXZpbmcgYXJl IHJlcXVpcmVkIHRvDQogICAgICB1bmRlcnN0YW5kIG5vdCBvbmx5IHRoZWlyIHZhbHVlcyBidXQg dGhlaXIgc2VtYW50aWNzLiAgRmFpbHVyZSB0bw0KICAgICAgZG8gc28gd2lsbCBjYXVzZSBhbiBt ZXNzYWdlIGhhbmRsaW5nIGVycm9yLiAgVGhpcyBpcyByZWdhcmRsZXNzIG9mDQogICAgICB3aGV0 aGVyIHRoZXNlIEFWUHMgYXJlIHJlcXVpcmVkIG9yIG9wdGlvbmFsIGFzIHNwZWNpZmllZCBieSB0 aGUNCiAgICAgIGNvbW1hbmQncyBDQ0Ygc3ludGF4IHNwZWNpZmljYXRpb24uDQoNCg0KICAgbyAg T3B0aW9uYWwgKHRvIHVuZGVyc3RhbmQpIEFWUHMuICBBcyBkZWZpbmVkIGluDQogICAgICBbSS1E LmlldGYtZGltZS1yZmMzNTg4YmlzXSwgdGhlc2UgYXJlIEFWUHMgd2l0aCB0aGUgTS1iaXQgZmxh Zw0KICAgICAgY2xlYXJlZCwgd2hpY2ggbWVhbiB0aGF0IGEgRGlhbWV0ZXIgbm9kZSByZWNlaXZp bmcgdGhlc2UgQVZQIGNhbg0KICAgICAgc2ltcGx5IGlnbm9yZSB0aGVtIGlmIG5vdCBzdXBwb3J0 ZWQgaW4gdGhlIHByb2Nlc3Mgb2YgdGhlIHJlY2VpdmVkDQogICAgICBjb21tYW5kLg0KDQogICBU aGUgcnVsZXMgYXJlIHN0cmljdCBpbiB0aGUgY2FzZSB3aGVyZSB0aGUgQVZQcyB0byBiZSBhZGRl ZCBhcmUNCiAgIG1hbmRhdG9yeSB0byB1bmRlcnN0YW5kIGkuZS4gd2l0aCB0aGUgTS1iaXQgc2V0 LiAgQSBtYW5kYXRvcnkgQVZQDQogICBjYW5ub3QgYmUgYWRkZWQgdG8gYW4gZXhpc3RpbmcgY29t bWFuZCB3aXRob3V0IGRlZmluaW5nIGEgbmV3DQogICBEaWFtZXRlciBhcHBsaWNhdGlvbiwgYXMg c3RhdGVkIGluIFtJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXNdLiAgVGhpcw0KICAgZmFsbHMgaW50 byB0aGUgIk1ham9yIEV4dGVuc2lvbnMiIGNhdGVnb3J5LiAgRGVzcGl0ZSB0aGUgY2xhcml0eSBv Zg0KICAgdGhlIHJ1bGUsIGFtYmlndWl0eSBzdGlsbCBhcmlzZXMgd2hlbiBldmFsdWF0aW5nIHdo ZXRoZXIgYSBuZXcgQVZQDQogICBiZWluZyBhZGRlZCBzaG91bGQgYmUgbWFuZGF0b3J5IHRvIGJl Z2luIHdpdGguICBIZXJlIGlzIGEgbGlzdCBvZiBmZXcNCiAgIGNvbW1vbiBxdWVzdGlvbnMgdGhh dCBhcHBsaWNhdGlvbiBkZXNpZ25lcnMgc2hvdWxkIHdvbmRlciB3aGVuIHRyeWluZw0KICAgdG8g ZGVjaWRlOg0KDQoNCiAgIG8gIFdvdWxkIGl0IGJlIHJlcXVpcmVkIGZvciB0aGUgcmVjZWl2aW5n IHNpZGUgdG8gYmUgYWJsZSB0byBwcm9jZXNzDQogICAgICBhbmQgdW5kZXJzdGFuZCB0aGUgQVZQ IGFuZCBpdHMgY29udGVudD8NCg0KICAgbyAgV291bGQgdGhlIG5ldyBBVlBzIGNoYW5nZSB0aGUg c3RhdGUgbWFjaGluZSBvZiB0aGUgYXBwbGljYXRpb24/DQoNCiAgIG8gIFdvdWxkIHRoZSBwcmVz ZW5jZSBvZiB0aGUgbmV3IEFWUCBsZWFkIHRvIGEgZGlmZmVyZW50IG51bWJlciBvZg0KICAgICAg cm91bmR0cmlwcywgZWZmZWN0aXZlbHkgY2hhbmdpbmcgdGhlIHN0YXRlIG1hY2hpbmUgb2YgdGhl DQogICAgICBhcHBsaWNhdGlvbj8NCg0KICAgbyAgV291bGQgdGhlIG5ldyBBVlAgYmUgdXNlZCB0 byBkaWZmZXJlbnRpYXRlIGJldHdlZW4gb2xkIGFuZCBuZXcNCiAgICAgIHZlcnNpb25zIG9mIHRo ZSBzYW1lIGFwcGxpY2F0aW9uIHdoZXJlYnkgdGhlIHR3byB2ZXJzaW9ucyBhcmUgbm90DQogICAg ICBiYWNrd2FyZCBjb21wYXRpYmxlPw0KDQogICBvICBXb3VsZCB0aGUgbmV3IEFWUCBoYXZlIGR1 YWxpdHkgaW4gbWVhbmluZyBpLmUuIGJlIHVzZWQgdG8gY2FycnkNCiAgICAgIGFwcGxpY2F0aW9u IHJlbGF0ZWQgaW5mb3JtYXRpb24gYXMgd2VsbCBhcyBiZSB1c2VkIHRvIGluZGljYXRlDQogICAg ICB0aGF0IHRoZSBtZXNzYWdlIGlzIGZvciBhIG5ldyBhcHBsaWNhdGlvbj8NCg0KICAgV2hlbiBv bmUgb2YgdGhlIGFib3ZlIHF1ZXN0aW9ucyBjYW4gYmUgYW5zd2VyZWQgaW4gdGhlIGFmZmlybWF0 aXZlDQogICB0aGVuIHRoZSBNLWJpdCBoYXMgdG8gYmUgc2V0IGZvciB0aGUgbmV3IEFWUC4NCg0K ICAgSWYgYXBwbGljYXRpb24gZGVzaWduZXJzIGFyZSBpbnN0ZWFkIGNvbnRlbXBsYXRpbmcgb24g dGhlIHVzZSBvZg0KICAgb3B0aW9uYWwgQVZQcyBpLmUuIHdpdGggdGhlIE0tYml0IGNsZWFyZWQs IHRoZW4gdGhlIGZvbGxvd2luZyBhcmUNCg0KDQoNCk1vcmFuZCwgZXQgYWwuICAgICAgICAgIEV4 cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQYWdlIDEwXQ0KDA0KSW50ZXJu ZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGluZXMgICAgICAg SnVseSAyMDEyDQoNCg0KICAgc29tZSBvZiB0aGUgcGl0ZmFsbHMgdGhhdCBzaG91bGQgYmUgYXZv aWRlZDoNCg0KDQogICBvICBVc2Ugb2Ygb3B0aW9uYWwgQVZQcyB3aXRoIGludGVyc2VjdGluZyBt ZWFuaW5nLiAgT25lIEFWUCBoYXMNCiAgICAgIHBhcnRpYWxseSB0aGUgc2FtZSB1c2FnZSBhbmQg bWVhbmluZyBhcyBhbm90aGVyIEFWUC4gIFRoZSBwcmVzZW5jZQ0KICAgICAgb2YgYm90aCBjYW4g bGVhZCB0byBjb25mdXNpb24uDQoNCiAgIG8gIEFuIG9wdGlvbmFsIEFWUHMgd2l0aCBkdWFsIHB1 cnBvc2UsIGkuZS4gdG8gY2FycnkgYXBwbGljYXRpb25zDQogICAgICBkYXRhIGFzIHdlbGwgYXMg dG8gaW5kaWNhdGUgc3VwcG9ydCBmb3Igb25lIG9yIG1vcmUgZmVhdHVyZXMuDQogICAgICBUaGlz IGhhcyBhIHRlbmRlbmN5IHRvIGludHJvZHVjZSBpbnRlcnByZXRhdGlvbiBpc3N1ZXMuDQoNCiAg IG8gIEFkZGluZyBvbmUgb3IgbW9yZSBvcHRpb25hbCBBVlBzIGFuZCBpbmRpY2F0aW5nICh1c3Vh bGx5IHdpdGhpbg0KICAgICAgZGVzY3JpcHRpdmUgdGV4dCBmb3IgdGhlIGNvbW1hbmQpIHRoYXQg YXQgbGVhc3Qgb25lIG9mIHRoZW0gaGFzIHRvDQogICAgICBiZSBwcmVzZW50IGluIHRoZSBjb21t YW5kLiAgVGhpcyBlc3NlbnRpYWxseSBjaXJjdW12ZW50aW5nIHRoZQ0KICAgICAgQUJORiBhbmQg aXMgZXF1aXZhbGVudCB0byBhZGRpbmcgYSBtYW5kYXRvcnkgQVZQcyB0byB0aGUgY29tbWFuZC4N Cg0KICAgVGhlc2UgcHJhY3RpY2VzIGdlbmVyYWxseSByZXN1bHQgaW4gaW50ZXJvcGVyYWJpbGl0 eSBpc3N1ZXMgYW5kDQogICBzaG91bGQgYmUgYXZvaWRlZCBhcyBtdWNoIGFzIHBvc3NpYmxlLg0K DQo0LjMuMi4gIERlbGV0aW5nIEFWUHMgZnJvbSBhIGNvbW1hbmQNCg0KICAgV2hlbiBkZWxldGlu ZyBhbiBBVlAgZnJvbSBhIGNvbW1hbmQsIHRoZSBmb2xsb3dpbmcgY2FzZXMgbmVlZCB0byBiZQ0K ICAgZGlmZmVyZW50aWF0ZWQ6DQoNCg0KICAgbyAgRGVsZXRpbmcgYW4gQVZQIHRoYXQgaXMgaW5k aWNhdGVkIGFzIHsgQVZQIH0gaW4gdGhlIGNvbW1hbmQncyBDQ0YNCiAgICAgIHN5bnRheCBzcGVj aWZpY2F0aW9uLCB3aGF0ZXZlciB0aGUgc2V0dGluZyBvZiB0aGUgTS1iaXQgc2V0LiAgVGhpcw0K ICAgICAgbWVhbnMgdGhlIGRlZmluaXRpb24gb2YgYSBuZXcgY29tbWFuZC4gIEluIHRoaXMgY2Fz ZSwgYSBuZXcNCiAgICAgIGNvbW1hbmQgY29kZSBhbmQgc3Vic2VxdWVudGx5IGEgbmV3IERpYW1l dGVyIGFwcGxpY2F0aW9uIGhhdmUgdG8NCiAgICAgIGJlIHNwZWNpZmllZC4NCg0KICAgbyAgRGVs ZXRpbmcgYW4gQVZQIHdpdGggTS1iaXQgc2V0IHRoYXQgaXMgaW5kaWNhdGVkIGFzIFsgQVZQIF0g aW4gdGhlDQogICAgICBjb21tYW5kJ3MgQ0NGIHN5bnRheCBzcGVjaWZpY2F0aW9uLiAgTm8gbmV3 IGNvbW1hbmQgY29kZSBoYXMgdG8gYmUNCiAgICAgIHNwZWNpZmllZCBidXQgdGhlIGRlZmluaXRp b24gb2YgYSBuZXcgRGlhbWV0ZXIgYXBwbGljYXRpb24gaXMNCiAgICAgIHJlcXVpcmVkLg0KDQog ICBvICBEZWxldGluZyBhbiBBVlAgd2l0aCB0aGUgTS1iaXQgY2xlYXJlZCB0aGF0IGlzIGluZGlj YXRlZCBhcyBbIEFWUA0KICAgICAgXSBpbiB0aGUgY29tbWFuZCdzIENDRiBzeW50YXggc3BlY2lm aWNhdGlvbi4gIEluIHRoaXMgY2FzZSwgdGhlDQogICAgICBBVlAgY2FuIGJlIGRlbGV0ZWQgd2l0 aG91dCBjb25zZXF1ZW5jZXMuDQoNCg0KICAgSWYgcG9zc2libGUgYXBwbGljYXRpb24gZGVzaWdu ZXJzIHNob3VsZCBhdHRlbXB0IHRoZSByZXVzZSB0aGUNCiAgIGNvbW1hbmQncyBDQ0Ygc3ludGF4 IHNwZWNpZmljYXRpb24gd2l0aG91dCBtb2RpZmljYXRpb24gYW5kIHNpbXBseQ0KICAgaWdub3Jl IChidXQgbm90IGRlbGV0ZSkgYW55IG9wdGlvbmFsIEFWUCB0aGF0IHdpbGwgbm90IGJlIHVzZWQu ICBUaGlzDQogICBpcyB0byBtYWludGFpbiBjb21wYXRpYmlsaXR5IHdpdGggZXhpc3RpbmcgYXBw bGljYXRpb25zIHRoYXQgd2lsbCBub3QNCiAgIGtub3cgYWJvdXQgdGhlIG5ldyBmdW5jdGlvbmFs aXR5IGFzIHdlbGwgYXMgbWFpbnRhaW4gdGhlIGludGVncml0eSBvZg0KICAgZXhpc3RpbmcgZGlj dGlvbmFyaWVzLg0KDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVh cnkgMTgsIDIwMTMgICAgICAgICAgICAgICBbUGFnZSAxMV0NCgwNCkludGVybmV0LURyYWZ0ICAg RGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVzICAgICAgIEp1bHkgMjAxMg0K DQoNCjQuNC4gIFJldXNpbmcgZXhpc3RpbmcgQVZQcw0KDQogICBUaGlzIHNlY3Rpb24gZGlzY3Vz c2VzIHJ1bGVzIGluIHJldXNpbmcgZXhpc3RpbmcgQVZQIHdoZW4gcmV1c2luZyBhbg0KICAgZXhp c3RpbmcgY29tbWFuZCBvciBkZWZpbmluZyBhIG5ldyBjb21tYW5kIGluIGEgbmV3IGFwcGxpY2F0 aW9uLg0KDQo0LjQuMS4gIFNldHRpbmcgb2YgdGhlIEFWUCBmbGFncw0KDQogICBXaGVuIHJldXNp bmcgQVZQcyBpbiBhIG5ldyBhcHBsaWNhdGlvbiwgdGhlIEFWUCBmbGFnIHNldHRpbmcsIHN1Y2gg YXMNCiAgIHRoZSBtYW5kYXRvcnkgZmxhZyAoJ00nLWJpdCksIGhhcyB0byBiZSByZS1ldmFsdWF0 ZWQgZm9yIGEgbmV3DQogICBEaWFtZXRlciBhcHBsaWNhdGlvbiBhbmQsIGlmIG5lY2Vzc2FyeSwg ZXZlbiBmb3IgZXZlcnkgY29tbWFuZCB3aXRoaW4NCiAgIHRoZSBhcHBsaWNhdGlvbi4gIEluIGdl bmVyYWwsIGZvciBBVlBzIGRlZmluZWQgb3V0c2lkZSBvZiB0aGUgYmFzZQ0KICAgcHJvdG9jb2ws IGl0cyBtYW5kYXRvcnkgY2hhcmFjdGVyaXN0aWNzIGFyZSB0aWVkIHRvIGl0cyByb2xlIHdpdGhp bg0KICAgYW4gYXBwbGljYXRpb24gYW5kIGNvbW1hbmQuDQoNCiAgIEFsbCBvdGhlciBBVlAgZmxh Z3Mgc2hhbGwgcmVtYWluIHVuY2hhbmdlZA0KDQo0LjQuMi4gIFJldXNlIG9mIEFWUCBvZiB0eXBl IEVudW1lcmF0ZWQNCg0KICAgV2hlbiBtb2RpZnlpbmcgdGhlIHNldCBvZiB2YWx1ZXMgc3VwcG9y dGVkIGJ5IGFuIEFWUCBvZiB0eXBlDQogICBFbnVtZXJhdGVkLCB0aGlzIG1lYW5zIGRlZmluaW5n IGEgbmV3IEFWUC4gIE1vZGlmeWluZyB0aGUgc2V0IG9mDQogICBFbnVtZXJhdGVkIHZhbHVlcyBp bmNsdWRlcyBhZGRpbmcgYSB2YWx1ZSBvciBkZXByZWNhdGluZyB0aGUgdXNlIG9mIGENCiAgIHZh bHVlIGRlZmluZWQgaW5pdGlhbGx5IGZvciB0aGUgQVZQLiAgRGVmaW5pbmcgYSBuZXcgQVZQIHdp bGwgYXZvaWQNCiAgIGludGVyb3BlcmFiaWxpdHkgaXNzdWVzLg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAgICAg ICAgICBFeHBpcmVzIEphbnVhcnkgMTgsIDIwMTMgICAgICAgICAgICAgICBbUGFnZSAxMl0NCgwN CkludGVybmV0LURyYWZ0ICAgRGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVz ICAgICAgIEp1bHkgMjAxMg0KDQoNCjUuICBEZWZpbmluZyBuZXcgRGlhbWV0ZXIgYXBwbGljYXRp b25zDQoNCjUuMS4gIEludHJvZHVjdGlvbg0KDQogICBUaGUgZ2VuZXJhbCByZWNvbW1lbmRhdGlv biBmb3IgRGlhbWV0ZXIgZXh0ZW5zaWJpbGl0eSBpcyB0byByZXVzZQ0KICAgY29tbWFuZHMsIEFW UHMgYW5kIEFWUCB2YWx1ZXMgYXMgbXVjaCBhcyBwb3NzaWJsZS4gIEhvd2V2ZXIsIHNvbWUgb2YN CiAgIHRoZSBleHRlbnNpYmlsaXR5IHJ1bGVzIGRlc2NyaWJlZCBpbiB0aGUgcHJldmlvdXMgc2Vj dGlvbnMgYWxzbyBhcHBseQ0KICAgdG8gc2NlbmFyaW9zIHdoZXJlIGEgZGVzaWduZXIgaXMgdHJ5 aW5nIHRvIGRlZmluZSBhIGNvbXBsZXRlbHkgbmV3DQogICBEaWFtZXRlciBhcHBsaWNhdGlvbi4N Cg0KICAgVGhpcyBzZWN0aW9uIGRpc2N1c3NlcyB0aGUgY2FzZSB3aGVyZSBuZXcgYXBwbGljYXRp b25zIGhhdmUNCiAgIHJlcXVpcmVtZW50cyB0aGF0IGNhbm5vdCBiZSBmaWxsZWQgYnkgZXhpc3Rp bmcgYXBwbGljYXRpb25zIGFuZCB3b3VsZA0KICAgcmVxdWlyZSBkZWZpbml0aW9uIG9mIGNvbXBs ZXRlbHkgbmV3IGNvbW1hbmRzLCBBVlBzIGFuZC9vciBBVlANCiAgIHZhbHVlcy4gIFR5cGljYWxs eSwgdGhlcmUgaXMgbGl0dGxlIGFtYmlndWl0eSBhYm91dCB0aGUgZGVjaXNpb24gdG8NCiAgIGNy ZWF0ZSB0aGVzZSB0eXBlcyBvZiBhcHBsaWNhdGlvbnMuICBTb21lIGV4YW1wbGVzIGFyZSB0aGUg aW50ZXJmYWNlcw0KICAgZGVmaW5lZCBmb3IgdGhlIElQIE11bHRpbWVkaWEgU3Vic3lzdGVtIG9m IDNHUFAsIGkuZS4gIEN4L0R4DQogICAoW1RTMjkuMjI4XSBhbmQgW1RTMjkuMjI5XSksIFNoIChb VFMyOS4zMjhdIGFuZCBbVFMyOS4zMjldKSBldGMuDQoNCiAgIEFwcGxpY2F0aW9uIGRlc2lnbmVy cyBzaG91bGQgYWxzbyBmb2xsb3cgdGhlIHRoZW1lIG9mIERpYW1ldGVyDQogICBleHRlbnNpYmls aXR5IHdoaWNoIGluIHRoaXMgY2FzZSBtZWFucyB0byBpbXBvcnQgZXhpc3RpbmcgQVZQcyBhbmQN CiAgIEFWUCB2YWx1ZXMgZm9yIGFueSBuZXdseSBkZWZpbmVkIGNvbW1hbmRzLiAgSW4gY2VydGFp biBjYXNlcyB3aGVyZQ0KICAgYWNjb3VudGluZyB3aWxsIGJlIHVzZWQsIHRoZSBtb2RlbHMgZGVz Y3JpYmVkIGluIFNlY3Rpb24gNS4xMCBzaG91bGQNCiAgIGFsc28gYmUgY29uc2lkZXJlZC4gIFRo b3VnaCBzb21lIGRlY2lzaW9ucyBtYXkgYmUgY2xlYXIsIGRlc2lnbmVycw0KICAgc2hvdWxkIGFs c28gY29uc2lkZXIgY2VydGFpbiBhc3BlY3RzIG9mIGRlZmluaW5nIGEgbmV3IGFwcGxpY2F0aW9u Lg0KICAgU29tZSBvZiB0aGVzZSBhc3BlY3RzIGFyZSBkZXNjcmliZWQgaW4gZm9sbG93aW5nIHNl Y3Rpb25zLg0KDQo1LjIuICBEZWZpbmluZyBuZXcgY29tbWFuZHMNCg0KICAgQXMgYSBnZW5lcmFs IHJlY29tbWVuZGF0aW9uLCBSZXVzaW5nIGFzIG11Y2ggYXMgcG9zc2libGUgb2YgZXhpc3RpbmcN CiAgIG1hdGVyaWFsIGlzIGVuY291cmFnZWQgd2hlbiBkZWZpbmluZyBuZXcgY29tbWFuZHMuICBQ cm90b2NvbA0KICAgZGVzaWduZXJzIGNhbiB0aHVzIHVzZWZ1bGx5IGJlbmVmaXQgZnJvbSB0aGUg ZXhwZXJpZW5jZSBnYWluZWQgd2l0aA0KICAgdGhlIGltcGxlbWVudGF0aW9uIG9mIGV4aXN0aW5n IGNvbW1hbmRzLiAgVGhpcyBpbmNsdWRlcyBnb29kIHByYXRpY2VzDQogICB0byByZXVzZSBidXQg YWxzbyBrbm93biBtaXN0YWtlcyBub3QgdG8gcmVwZWF0LiAgVGhlcmVmb3JlIGl0IGlzDQogICBh ZHZpc2FibGUgdG8gYXZvaWQgdGhlIGRlZmluaXRpb24gb2YgYSBjb21tYW5kIGZyb20gc2NyYXRj aCBhbmQNCiAgIHJhdGhlciB0YWtlIGFzIGFuIGV4YW1wbGUgYW4gZXhpc3RpbmcgY29tbWFuZCB0 aGF0IHdvdWxkIGJlDQogICBmdW5jdGlvbmFsbHkgY2xvc2UgdG8gY29tbWFuZCB1bmRlciBkZWZp bml0aW9uLg0KDQogICBNb3Jlb3ZlciwgdGhlIG5ldyBjb21tYW5kJ3MgQ0NGIHNob3VsZCBiZSBj YXJlZnVsbHkgZGVmaW5lZCB3aGVuDQogICBjb25zaWRlcmluZyBhcHBsaWNhYmlsaXR5IGFuZCBl eHRlbnNpYmlsaXR5IG9mIHRoZSBhcHBsaWNhdGlvbi4gIElmDQogICBtb3N0IG9mIHRoZSBBVlBz IGNvbnRhaW5lZCBpbiB0aGUgY29tbWFuZCBhcmUgaW5kaWNhdGVkIGFzIGZpeGVkIG9yDQogICBy ZXF1aXJlZCwgaXQgbWlnaHQgYmUgZGlmZmljdWx0IHRvIHJldXNlIHRoZSBzYW1lIGNvbW1hbmQg YW5kDQogICB0aGVyZWZvcmUgdGhlIHNhbWUgYXBwbGljYXRpb24gaWYgdGhlIGNvbnRleHQgaGFz IHNsaWdodGx5IGNoYW5nZWQNCiAgIGFuZCBzb21lIEFWUHMgYmVjb21lIG9ic29sZXRlLiAgRGVm aW5pbmcgYSBjb21tYW5kIHdpdGggbW9zdCBvZiB0aGUNCiAgIEFWUHMgaW5kaWNhdGVkIGFzIG9w dGlvbmFsIG11c3Qgbm90IGJlIHNlZW4gYXMgYSBzdWItb3B0aW1hbCBkZXNpZ24NCiAgIGludHJv ZHVjaW5nIHRvbyBtdWNoIGZsZXhpYmlsaXR5IGluIHRoZSBwcm90b2NvbC4gIFRoZSBwcm90b2Nv bA0KICAgZGVzaWduZXJzIGFyZSBvbmx5IGFkdmlzZWQgdG8gY2xlYXJseSBzdGF0ZSB0aGUgY29u ZGl0aW9uIG9mIHByZXNlbmNlDQogICBvZiB0aGVzZSBBVlBzIGFuZCBwcm9wZXJseSBkZWZpbmUg dGhlIGNvcnJlc3BvbmRpbmcgYmVoYXZpb3VyIG9mIHRoZQ0KICAgRGlhbWV0ZXIgbm9kZXMgd2hl biB0aGVzZSBBVlBzIGFyZSBhYnNlbnQgZnJvbSB0aGUgY29tbWFuZC4NCg0KDQoNCk1vcmFuZCwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQ YWdlIDEzXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWdu IEd1aWRlbGluZXMgICAgICAgSnVseSAyMDEyDQoNCg0KICAgSW4gdGhlIHNhbWUgd2F5LCB0aGUg Q0NGIHNob3VsZCBiZSBkZWZpbmVkIGluIGEgd2F5IHRoYXQgaXQgd2lsbCBiZQ0KICAgcG9zc2li bGUgdG8gYWRkIGFueSBhcmJpdHJhcnkgb3B0aW9uYWwgQVZQcyB3aXRoIHRoZSBNLWJpdCBjbGVh cmVkDQogICAoaW5jbHVkaW5nIHZlbmRvci1zcGVjaWZpYyBBVlBzKSB3aXRob3V0IG1vZGlmeWlu ZyB0aGUgYXBwbGljYXRpb24uDQogICBGb3IgdGhpcyBwdXJwb3NlLCBpdCBpcyBzdHJvbmdseSBy ZWNvbW1lbmRlZCB0byBhZGQgIiogW0FWUF0iIGluIHRoZQ0KICAgY29tbWFuZCdzIENDRiB0aGF0 IHdpbGwgYWxsb3cgdGhlIGFkZGl0aW9uIG9mIGFueSBhcmJpdHJhcnkgQVZQIGFzDQogICBkZXNj cmliZWQgaW4gW0ktRC5pZXRmLWRpbWUtcmZjMzU4OGJpc10uDQoNCjUuMy4gIFVzZSBvZiBBcHBs aWNhdGlvbi1JZCBpbiBhIG1lc3NhZ2UNCg0KICAgV2hlbiBkZXNpZ25pbmcgbmV3IGFwcGxpY2F0 aW9ucywgZGVzaWduZXJzIHNob3VsZCBzcGVjaWZ5IHRoYXQgdGhlDQogICBhcHBsaWNhdGlvbiBJ RCBjYXJyaWVkIGluIGFsbCBzZXNzaW9uIGxldmVsIG1lc3NhZ2VzIG11c3QgYmUgdGhlDQogICBh cHBsaWNhdGlvbiBJRCBvZiB0aGUgYXBwbGljYXRpb24gdXNpbmcgdGhvc2UgbWVzc2FnZXMuICBU aGlzDQogICBpbmNsdWRlcyB0aGUgc2Vzc2lvbiBsZXZlbCBtZXNzYWdlcyBkZWZpbmVkIGluIGJh c2UgcHJvdG9jb2wsIGkuZS4sDQogICBSQVIvUkFBLCBTVFIvU1RBLCBBU1IvQVNBIGFuZCBwb3Nz aWJseSBBQ1IvQUNBIGluIHRoZSBjb3VwbGVkDQogICBhY2NvdW50aW5nIG1vZGVsLCBzZWUgU2Vj dGlvbiA1LjEwLiAgRXhpc3Rpbmcgc3BlY2lmaWNhdGlvbnMgbWF5IG5vdA0KICAgYWRoZXJlIHRv IHRoaXMgcnVsZSBmb3IgaGlzdG9yaWNhbCBvciBvdGhlciByZWFzb25zLiAgSG93ZXZlciwgdGhp cw0KICAgc2NoZW1lIHNob3VsZCBiZSBmb2xsb3dlZCB0byBhdm9pZCBwb3NzaWJsZSByb3V0aW5n IHByb2JsZW1zIGZvcg0KICAgdGhlc2UgbWVzc2FnZXMuDQoNCiAgIEluIGdlbmVyYWwsIHdoZW4g YSBuZXcgYXBwbGljYXRpb24gaGFzIGJlZW4gYWxsb2NhdGVkIHdpdGggYSBuZXcNCiAgIGFwcGxp Y2F0aW9uIGlkIGFuZCBpdCBhbHNvIHJldXNlcyBleGlzdGluZyBjb21tYW5kcyB3aXRoIG9yIHdp dGhvdXQNCiAgIG1vZGlmaWNhdGlvbnMgKFNlYyA0LjEpLCBpdCBtdXN0IHVzZSB0aGUgbmV3bHkg YWxsb2NhdGVkIGFwcGxpY2F0aW9uDQogICBpZCBpbiB0aGUgaGVhZGVyIGFuZCBpbiBhbGwgcmVs ZXZhbnQgYXBwbGljYXRpb24gaWQgQVZQcyAoQXV0aC0NCiAgIEFwcGxpY2F0aW9uLUlkIG9yIEFj Y3QtQXBwbGljYXRpb24tSWQpIHByZXNlbnQgaW4gdGhlIGNvbW1hbmRzDQogICBtZXNzYWdlIGJv ZHkuDQoNCiAgIEFkZGl0aW9uYWxseSwgYXBwbGljYXRpb24gZGVzaWducyB1c2luZw0KICAgVmVu ZG9yLVNwZWNpZmljLUFwcGxpY2F0aW9uLUlkIEFWUCBzaG91bGQgbm90IHVzZSB0aGUgVmVuZG9y LUlkIEFWUA0KICAgdG8gZnVydGhlciBkaXNzZWN0IG9yIGRpZmZlcmVudGlhdGUgdGhlIHZlbmRv ci1zcGVjaWZpY2F0aW9uDQogICBhcHBsaWNhdGlvbiBpZC4gIERpYW1ldGVyIHJvdXRpbmcgaXMg bm90IGJhc2VkIG9uIHRoZSBWZW5kb3ItSWQuICBBcw0KICAgc3VjaCwgdGhlIFZlbmRvci1JRCBz aG91bGQgbm90IGJlIHVzZWQgYXMgYW4gYWRkaXRpb25hbCBpbnB1dCBmb3INCiAgIHJvdXRpbmcg b3IgZGVsaXZlcnkgb2YgbWVzc2FnZXMuICBJbiBnZW5lcmFsLCB0aGUgVmVuZG9yLUlkIEFWUCBp cyBhbg0KICAgaW5mb3JtYXRpb25hbCBBVlAgb25seSBhbmQga2VwdCBmb3IgYmFja3dhcmQgY29t cGF0aWJpbGl0eSByZWFzb25zLg0KDQo1LjQuICBBcHBsaWNhdGlvbiBzcGVjaWZpYyBTZXNzaW9u IFN0YXRlIE1hY2hpbmUNCg0KICAgU2VjdGlvbiA4IG9mIFtJLUQuaWV0Zi1kaW1lLXJmYzM1ODhi aXNdIHByb3ZpZGVzIHNlc3Npb24gc3RhdGUNCiAgIG1hY2hpbmVzIGZvciBhdXRoZW50aWNhdGlv biwgYXV0aG9yaXphdGlvbiBhbmQgYWNjb3VudGluZyAoQUFBKQ0KICAgc2VydmljZXMuICBXaGVu IGEgbmV3IGFwcGxpY2F0aW9uIGlzIGJlaW5nIGRlZmluZWQgdGhhdCBjYW5ub3QNCiAgIGNsZWFy bHkgYmUgY2F0ZWdvcml6ZWQgaW50byBhbnkgb2YgdGhlc2Ugc2VydmljZXMgaXQgaXMgcmVjb21t ZW5kZWQNCiAgIHRoYXQgdGhlIGFwcGxpY2F0aW9uIGl0c2VsZiBkZWZpbmUgaXRzIG93biBzZXNz aW9uIHN0YXRlIG1hY2hpbmUuDQogICBUaGUgZXhpc3Rpbmcgc2Vzc2lvbiBzdGF0ZSBtYWNoaW5l cyBkZWZpbmVkIGJ5DQogICBbSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzXSBpcyBub3QgaW50ZW5k ZWQgZm9yIGdlbmVyYWwgdXNlIGJleW9uZCBBQUENCiAgIHNlcnZpY2VzLCB0aGVyZWZvcmUgYW55 IGJlaGF2aW9yIG5vdCBjb3ZlcmVkIGJ5IHRoYXQgY2F0ZWdvcnkgd291bGQNCiAgIG5vdCBmaXQg d2VsbC4gIFN1cHBvcnQgZm9yIHNlcnZlciBpbml0aWF0ZWQgcmVxdWVzdCBpcyBhIGNsZWFyDQog ICBleGFtcGxlIHdoZXJlIGFuIGFwcGxpY2F0aW9uIHNwZWNpZmljIHNlc3Npb24gc3RhdGUgbWFj aGluZSB3b3VsZCBiZQ0KICAgbmVlZGVkLCBmb3IgZXhhbXBsZSwgdGhlIFJ3IGludGVyZmFjZSBm b3IgSVRVLVQgcHVzaCBtb2RlbCAoDQogICBjZi5bUS4zMzAzLjNdKS4NCg0KDQoNCk1vcmFuZCwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQ YWdlIDE0XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWdu IEd1aWRlbGluZXMgICAgICAgSnVseSAyMDEyDQoNCg0KNS41LiAgU2Vzc2lvbi1JZCBBVlAgYW5k IHNlc3Npb24gbWFuYWdlbWVudA0KDQogICBEaWFtZXRlciBhcHBsaWNhdGlvbnMgYXJlIHVzdWFs bHkgZGVzaWduZWQgd2l0aCB0aGUgYWltIG9mIG1hbmFnaW5nDQogICB1c2VyIHNlc3Npb25zLCBl LmcuIG5ldHdvcmsgYWNjZXNzIHNlc3Npb24gKE5BU1JFUSBhcHBsaWNhdGlvbg0KICAgW1JGQzQw MDVdKSBvciBzcGVjaWZpYyBzZXJ2aWNlIGFjY2VzcyBzZXNzaW9uIChEaWFtZXRlciBTSVANCiAg IGFwcGxpY2F0aW9uIFtSRkM0NzQwXSkuICBJbiB0aGUgRGlhbWV0ZXIgYmFzZSBwcm90b2NvbCwg dGhlIHNlc3Npb24NCiAgIG1hbmFnZW1lbnQgaXMgYmFzZWQgb24gdGhlIFNlc3Npb24tSWQgQVZQ IHRoYXQgaXQgdXNlZCB0byBpZGVudGlmeSBhDQogICBnaXZlbiBzZXNzaW9uIGFuZCBhbGwgdGhl IERpYW1ldGVyIG1lc3NhZ2VzIGluY2x1ZGluZyB0aGUgc2FtZQ0KICAgU2Vzc2lvbi1JZCB3aWxs IGJlIGJvdW5kIHRvIHRoZSBzYW1lIHNlc3Npb24uICBEaWFtZXRlci1iYXNlZCBzZXNzaW9uDQog ICBtYW5hZ2VtZW50IGFsc28gaW1wbGllcyB0aGF0IGJvdGggRGlhbWV0ZXIgY2xpZW50IGFuZCBz ZXJ2ZXIgKGFuZA0KICAgcG90ZW50aWFsbHkgcHJveHkgYWdlbnRzIGluIHRoZSBkaWFtZXRlciBw YXRoKSBhcmUgbWFpbnRhaW5pbmcNCiAgIHNlc3Npb24gc3RhdGUgaW5mb3JtYXRpb24gYXNzb2Np YXRlZCB3aXRoIHRoZSBTZXNzaW9uLUlkIGNvbnRhaW5lZCBpbg0KICAgdGhlIERpYW1ldGVyIG1l c3NhZ2VzLg0KDQogICBIb3dldmVyLCBzb21lIGFwcGxpY2F0aW9ucyBtYXkgbm90IG5lZWQgdG8g cmVseSBvbiB0aGUgU2Vzc2lvbi1JZCB0bw0KICAgaWRlbnRpZnkgYW5kIG1hbmFnZSB1c2VyIHNl c3Npb25zIGJlY2F1c2Ugb3RoZXIgaW5mb3JtYXRpb24gY2FuIGJlDQogICB1c2VkIGluc3RlYWQg dG8gY29ycmVsYXRlIERpYW1ldGVyIG1lc3NhZ2VzLiAgSW5kZWVkLCB0aGUgVXNlci1OYW1lDQog ICBBVlAgb3IgYW55IG90aGVyIHNwZWNpZmljIEFWUCBjYW4gYmUgcHJlc2VudCBpbiBldmVyeSBE aWFtZXRlcg0KICAgbWVzc2FnZSBhbmQgdXNlZCB0aGVyZWZvcmUgZm9yIG1lc3NhZ2UgY29ycmVs YXRpb24uICBUaGVyZSBtaWdodCBldmVuDQogICBiZSBhcHBsaWNhdGlvbnMgZm9yIHdoaWNoIHRo ZSBub3Rpb24gb2YgRGlhbWV0ZXIgc2Vzc2lvbiBtYW5hZ2VtZW50DQogICB3b3VsZCBub3QgYmUg cmVxdWlyZWQgYXQgYWxsLiAgRm9yIHN1Y2ggYXBwbGljYXRpb25zLCB0aGUgQXV0aC0NCiAgIFNl c3Npb24tU3RhdGUgQVZQIGlzIHVzdWFsbHkgc2V0IHRvIE5PX1NUQVRFX01BSU5UQUlORUQgaW4g YWxsIHRoZQ0KICAgRGlhbWV0ZXIgbWVzc2FnZXMgYW5kIHRoZXNlIGFwcGxpY2F0aW9ucyBhcmUg dGhlcmVmb3JlIGRlc2lnbmVkIGFzIGENCiAgIHNldCBvZiBzdGFuZC1hbG9uZSB0cmFuc2FjdGlv bnMuICBFdmVuIGlmIGFuIGV4cGxpY2l0IGFjY2VzcyBzZXNzaW9uDQogICB0ZXJtaW5hdGlvbiBp cyByZXF1aXJlZCwgYXBwbGljYXRpb24tc3BlY2lmaWMgY29tbWFuZHMgYXJlIGRlZmluZWQNCiAg IGFuZCB1c2VkIGluc3RlYWQgb2YgdGhlIFNlc3Npb24tVGVybWluYXRpb24tUmVxdWVzdC9BbnN3 ZXIgKFNUUi9TVEEpDQogICBvciBBYm9ydC1TZXNzaW9uLVJlcXVlc3QvQW5zd2VyIChBU1IvQVNB KSBkZWZpbmVkIGluIHRoZSBEaWFtZXRlcg0KICAgYmFzZSBwcm90b2NvbC4gIEluIHN1Y2ggYSBj YXNlLCB0aGUgU2Vzc2lvbi1JZCBpcyBub3Qgc2lnbmlmaWNhbnQuDQoNCiAgIEJhc2VkIG9uIHRo ZXNlIGNvbnNpZGVyYXRpb25zLCBwcm90b2NvbCBkZXNpZ25lcnMgc2hvdWxkIGNhcmVmdWxseQ0K ICAgYXBwcmFpc2Ugd2hldGhlciB0aGUgYXBwbGljYXRpb24gY3VycmVudGx5IGRlZmluZWQgcmVs aWVzIG9uIHRoZQ0KICAgY29uY2VwdCBvZiBzZXNzaW9uIG1hbmFnZW1lbnQgYW5kIHdoZXRoZXIg dGhlIFNlc3Npb24tSWQgZGVmaW5lZCBpbg0KICAgdGhlIERpYW1ldGVyIEJhc2UgcHJvdG9jb2wg d291bGQgYmUgcmVhbGx5IHVzZWQgZm9yIGNvcnJlbGF0aW9uIG9mDQogICBtZXNzYWdlcyByZWxh dGVkIHRvIHRoZSBzYW1lIHNlc3Npb24uICBJZiBub3QsIHRoZSBwcm90b2NvbCBkZXNpZ25lcnMN CiAgIGNvdWxkIGRlY2lkZSB0byBkZWZpbmUgYXBwbGljYXRpb24gY29tbWFuZHMgd2l0aG91dCB0 aGUgU2Vzc2lvbi1JZA0KICAgQVZQLiAgSWYgYW55IHNlc3Npb24gbWFuYWdlbWVudCBjb25jZXB0 IGlzIHN1cHBvcnRlZCBieSB0aGUNCiAgIGFwcGxpY2F0aW9uIHRoZSBhcHBsaWNhdGlvbiBkb2N1 bWVudGF0aW9uIG11c3QgY2xlYXJseSBzcGVjaWZ5IGhvdw0KICAgdGhlIHNlc3Npb24gaXMgaGFu ZGxlZCBiZXR3ZWVuIGNsaWVudCBhbmQgc2VydmVyIChhcyBwb3NzaWJseQ0KICAgRGlhbWV0ZXIg YWdlbnRzIGluIHRoZSBwYXRoKS4NCg0KNS42LiAgQVZQcyBkZWZpbmVkIGFzIEJvb2xlYW4gZmxh Zw0KDQogICBUaGUgdHlwZSBFbnVtZXJhdGVkIHdhcyBpbml0aWFsbHkgZGVmaW5lZCB0byBwcm92 aWRlIGxpc3Qgb2YgdmFsaWQNCiAgIHZhbHVlcyBmb3IgYW4gQVZQIHdpdGggdGhlaXIgcmVzcGVj dGl2ZSBpbnRlcnByZXRhdGlvbiBkZXNjcmliZWQgaW4NCiAgIHRoZSBzcGVjaWZpY2F0aW9uLiAg Rm9yIGluc3RhbmNlLCBBVlBzIG9mIHR5cGUgRW51bWVyYXRlZCBjYW4gYmUgdXNlZA0KICAgdG8g cHJvdmlkZSBmdXJ0aGVyIGluZm9ybWF0aW9uIG9uIHRoZSByZWFzb24gZm9yIHRoZSB0ZXJtaW5h dGlvbiBvZiBhDQogICBzZXNzaW9uIG9yIGEgc3BlY2lmaWMgYWN0aW9uIHRvIHBlcmZvcm0gb24g dGhlIHJlY2VwdGlvbiBvZiB0aGUNCiAgIHJlcXVlc3QuDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAg ICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTgsIDIwMTMgICAgICAgICAgICAgICBbUGFnZSAxNV0N CgwNCkludGVybmV0LURyYWZ0ICAgRGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxp bmVzICAgICAgIEp1bHkgMjAxMg0KDQoNCiAgIEhvd2V2ZXIsIEFWUHMgb2YgdHlwZSBFbnVtZXJh dGVkIGFyZSB0b28gb2Z0ZW4gdXNlZCBhcyBzaW1wbGUgQm9vbGVhbg0KICAgZmxhZywgaW5kaWNh dGluZyBmb3IgaW5zdGFuY2UgYSBzcGVjaWZpYyBwZXJtaXNzaW9uIG9yIGNhcGFiaWxpdHksDQog ICBhbmQgdGhlcmVmb3JlIG9ubHkgdHdvIHZhbHVlcyBhcmUgZGVmaW5lZCBlLmcuICBUUlVFL0ZB TFNFLA0KICAgQVVUT1JJWkVEL1VOQVVUSE9SSVpFRCBvciBTVVBQT1JURUQvVU5TVVBQT1JURUQu ICBUaGlzIGhhcyB0byBiZQ0KICAgY29uc2lkZXJlZCBhcyBhIHN1Yi1vcHRpbWFsIGRlc2lnbiBh cyB0aGlzIGxpbWl0cyB0aGUgZXh0ZW5zaWJpbGl0eQ0KICAgb2YgdGhlIGFwcGxpY2F0aW9uOiBh bnkgbmV3IGNhcGFiaWxpdHkvcGVybWlzc2lvbiB3b3VsZCBoYXZlIHRvIGJlDQogICBzdXBwb3J0 ZWQgYnkgYSBuZXcgQVZQIG9yIG5ldyBFbnVtZXJhdGVkIHZhbHVlIG9mIHRoZSBhbHJlYWR5IGRl ZmluZWQNCiAgIEFWUCB0aGF0IHdvdWxkIGNhdXNlIGluIGNvbnNlcXVlbmNlIGJhY2t3YXJkcyBj b21wYXRpYmlsaXR5IGlzc3Vlcw0KICAgd2l0aCBleGlzdGluZyBpbXBsZW1lbnRhdGlvbnMuDQoN CiAgIEluc3RlYWQgb2YgZGVmaW5pbmcgRW51bWVyYXRlZCBBVlAgd2hlbiB0aGUgQVZQIHNpbXBs eSB1c2VkIGFzIGENCiAgIEJvb2xlYW4gZmxhZywgcHJvdG9jb2wgZGVzaWduZXJzIGFyZSBlbmNv dXJhZ2VkIHRvIHJlbHkgb24gQVZQDQogICBkZWZpbmVkIGluIHRoZSBmb3JtIG9mIGEgYml0IG1h c2sgd2l0aCB0aGUgaW50ZXJwcmV0YXRpb24gb2YgdGhlDQogICBzZXR0aW5nIG9mIGVhY2ggYml0 IGRlc2NyaWJlZCBpbiB0aGUgcmVsZXZhbnQgRGlhbWV0ZXIgYXBwbGljYXRpb24NCiAgIHNwZWNp ZmljYXRpb24uICBTdWNoIEFWUHMgY2FuIGJlIHJldXNlZCBhbmQgZXh0ZW5kZWQgdG8gbXVsdGlw bGV4DQogICBzZXZlcmFsIGluZGljYXRpb25zIHdpdGhvdXQgbWFqb3IgaW1wYWN0IG9uIHRoZSBE aWFtZXRlciBhcHBsaWNhdGlvbi4NCiAgIFRoZSBiaXQtbWFzayBzaG91bGQgYmUgdGhlcmVmb3Jl IGxvbmcgZW5vdWdoIHRvIGxlYXZlIHJvb20gZm9yIGZ1dHVyZQ0KICAgYWRkaXRpb25zLiAgRXhh bXBsZXMgb2YgQVZQIGRlZmluZWQgYXMgYml0IG1hc2sgYXJlIHRoZSBTZXNzaW9uLQ0KICAgQmlu ZGluZyBBVlAgZGVmaW5lZCBpbiBbSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzXSBhbmQgdGhlIE1J UDYtDQogICBGZWF0dXJlLVZlY3RvciBBVlAgZGVmaW5lZCBpbiBbUkZDNTQ0N10NCg0KNS43LiAg QXBwbGljYXRpb24tc3BlY2lmaWMgbWVzc2FnZSByb3V0aW5nDQoNCiAgIERpYW1ldGVyIHJlcXVl c3QgbWVzc2FnZSByb3V0aW5nIHVzdWFsbHkgcmVsaWVzIG9uIHRoZSBEZXN0aW5hdGlvbi0NCiAg IFJlYWxtIEFWUCBhbmQgdGhlIEFwcGxpY2F0aW9uIElkIHByZXNlbnQgaW4gdGhlIHJlcXVlc3Qg bWVzc2FnZQ0KICAgaGVhZGVyLiAgSG93ZXZlciwgc29tZSBhcHBsaWNhdGlvbnMgbWF5IG5lZWQg dG8gcmVseSBvbiB0aGUgVXNlci1OYW1lDQogICBBVlAgb3IgYW55IG90aGVyIGFwcGxpY2F0aW9u LXNwZWNpZmljIEFWUCBwcmVzZW50IGluIHRoZSByZXF1ZXN0IHRvDQogICBkZXRlcm1pbmUgdGhl IGZpbmFsIGRlc3RpbmF0aW9uIG9mIGEgcmVxdWVzdCBlLmcuIGZpbmQgdGhlIHRhcmdldCBBQUEN CiAgIHNlcnZlciBob3N0aW5nIHRoZSBhdXRob3JpemF0aW9uIGluZm9ybWF0aW9uIGZvciBhIGdp dmVuIHVzZXIgd2hlbg0KICAgbXVsdGlwbGUgQUFBIHNlcnZlcnMgYXJlIGFkZHJlc3NhYmxlIGlu IHRoZSByZWFsbS4NCg0KICAgSW4gc3VjaCBhIGNvbnRleHQsIGJhc2ljIHJvdXRpbmcgbWVjaGFu aXNtcyBkZXNjcmliZWQgaW4NCiAgIFtJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXNdIGFyZSBub3Qg ZnVsbHkgc3VpdGFibGUgYW5kIGFkZGl0aW9uYWwNCiAgIGFwcGxpY2F0aW9uLWxldmVsIHJvdXRp bmcgbWVjaGFuaXNtcyBoYXZlIHRvIGJlIGRlc2NyaWJlZCBpbiB0aGUNCiAgIGFwcGxpY2F0aW9u IGRvY3VtZW50YXRpb24gdG8gcHJvdmlkZSBzdWNoIHNwZWNpZmljIEFWUC1iYXNlZCByb3V0aW5n Lg0KICAgU3VjaCBmdW5jdGlvbmFsaXR5IHdpbGwgYmUgYmFzaWNhbGx5IGhvc3RlZCBieSBhbiBh cHBsaWNhdGlvbi0NCiAgIHNwZWNpZmljIFByb3h5IGFnZW50IHRoYXQgd2lsbCBiZSByZXNwb25z aWJsZSBmb3Igcm91dGluZyBkZWNpc2lvbnMNCiAgIGJhc2VkIG9uIHRoZSByZWNlaXZlZCBzcGVj aWZpYyBBVlBzLg0KDQogICBFeGFtcGxlIG9mIHN1Y2ggc3BlY2lmaWMgcm91dGluZyBmdW5jdGlv biBjYW4gYmUgZm91bmQgdGhlDQogICBhcHBsaWNhdGlvbnMgZGVmaW5lZCBmb3IgdGhlIElQIE11 bHRpbWVkaWEgU3Vic3lzdGVtIG9mIDNHUFAsIGkuZS4NCiAgIEN4L0R4IGFwcGxpY2F0aW9ucyAo W1RTMjkuMjI4XSBhbmQgW1RTMjkuMjI5XSkgaW4gd2hpY2ggdGhlDQogICBTdWJzY3JpYmVyIExv Y2F0aW9uIEZ1bmN0aW9uIChTTEYpIGlzIGRlZmluZWQgYSBwcm94eSBhZ2VudCAob3INCiAgIGVu aGFuY2VkIFJlZGlyZWN0IGFnZW50KSB1c2luZyBzcGVjaWZpYyBhcHBsaWNhdGlvbi1sZXZlbCBp ZGVudGl0aWVzDQogICBmb3VuZCBpbiB0aGUgcmVxdWVzdCB0byBkZXRlcm1pbmUgdGhlIGZpbmFs IGRlc3RpbmF0aW9uIG9mIHRoZQ0KICAgbWVzc2FnZS4NCg0KICAgV2hhdGV2ZXIgdGhlIGNyaXRl cmlhIHVzZWQgdG8gZXN0YWJsaXNoIHRoZSByb3V0aW5nIHBhdGggb2YgdGhlDQoNCg0KDQpNb3Jh bmQsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTgsIDIwMTMgICAgICAgICAgICAg ICBbUGFnZSAxNl0NCgwNCkludGVybmV0LURyYWZ0ICAgRGlhbWV0ZXIgQXBwbGljYXRpb25zIERl c2lnbiBHdWlkZWxpbmVzICAgICAgIEp1bHkgMjAxMg0KDQoNCiAgIHJlcXVlc3QsIHRoZSByb3V0 aW5nIG9mIHRoZSBhbnN3ZXIgc2hvdWxkIGZvbGxvdyB0aGUgcmV2ZXJzZSBwYXRoIG9mDQogICB0 aGUgcmVxdWVzdCwgYXMgZGVzY3JpYmVkIGluIFtJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXNdLCB0 aGUgYW5zd2VyDQogICBiZWluZyBzZW50IHRvIHRoZSBzb3VyY2Ugb2YgdGhlIHJlY2VpdmVkIHJl cXVlc3QsIHVzaW5nIHRyYW5zYWN0aW9uDQogICBzdGF0ZXMgYW5kIEhvcC1ieS1ob3AgaWRlbnRp ZmllciBtYXRjaGluZy4gIEluIHBhcnRpY3VsYXIsIHRoaXMNCiAgIGVuc3VyZXMgdGhhdCBEaWFt ZXRlciBhZ2VudHMgaW4gdGhlIHJlcXVlc3Qgcm91dGluZyBwYXRoIChSZWxheSBvcg0KICAgUHJv eHkgYWdlbnRzKSB3aWxsIGJlIGFibGUgdG8gY29ycmVjdGx5IHJlbGVhc2UgdGhlIHRyYW5zYWN0 aW9uIHN0YXRlDQogICBhc3NvY2lhdGVkIHRvIHRoZSByZXF1ZXN0IHVwb24gcmVjZWlwdCBvZiB0 aGUgYW5zd2VyLCBhdm9pZGluZyB0aHVzDQogICB1bm5lY2Vzc2FyeSBmYWlsb3ZlciB0cmlnZ2Vy aW5nIGR1ZSB0byBub24gcmVjZXB0aW9uIG9mIHRoZSBhbnN3ZXINCiAgIGNvcnJlc3BvbmRpbmcg dG8gdGhlIHJlcXVlc3QuICBBcHBsaWNhdGlvbiBkZXNpZ25lcnMgYXJlIHN0cm9uZ2x5DQogICBy ZWNvbW1lbmRlZCB0byBub3QgYXR0ZW1wdCB0byBtb2RpZnkgdGhlIGFuc3dlciByb3V0aW5nIHBy aW5jaXBsZXMNCiAgIGRlc2NyaWJlZCBpbiBbSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzXSB3aGVu IGRlZmluaW5nIGEgbmV3DQogICBhcHBsaWNhdGlvbi4NCg0KNS44LiAgQWJvdXQgVHJhbnNsYXRp b24gQWdlbnQNCg0KICAgQXMgZGVmaW5lZCBpbiBbSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzXSwg YSB0cmFuc2xhdGlvbiBhZ2VudCBpcyBhDQogICBkZXZpY2UgdGhhdCBwcm92aWRlcyBpbnRlcndv cmtpbmcgYmV0d2VlbiBEaWFtZXRlciBhbmQgYW5vdGhlcg0KICAgcHJvdG9jb2wgKGUuZy4gIFJB RElVUywgVEFDQUNTKykuDQoNCiAgIEluIHRoZSBzcGVjaWZpYyBjYXNlIG9mIFJBRElVUywgaXQg d2FzIGluaXRpYWxseSBmb3Jlc2VlbiB0aGF0IHRoZQ0KICAgdHJhbnNsYXRpb24gZnVuY3Rpb24g d291bGQgaGF2ZSBiZWVuIHN0cmFpZ2h0Zm9yd2FyZCB0byBkZWZpbmUgYW5kDQogICBkZXBsb3kg YnkgYWRvcHRpbmcgZmV3IGJhc2ljIHByaW5jaXBsZXMgZS5nLiB1c2Ugb2YgYSBzaGFyZWQgcmFu Z2Ugb2YNCiAgIGNvZGUgdmFsdWVzIGZvciBSQURJVVMgYXR0cmlidXRlcyBhbmQgRGlhbWV0ZXIg QVZQcywgc29tZSBndWlkZWxpbmVzDQogICBvbiB0cmFuc2xhdGlvbiBhbmQgbWFuYWdlbWVudCBv ZiBrZXkgaW5mb3JtYXRpb24gKHN1Y2ggYXMNCiAgIGF1dGhlbnRpY2F0aW9uIHBhcmFtZXRlciwg cm91dGluZy9hY2NvdW50aW5nIG9yIHN0YXRlcyksIGV0Yy4gIEFuZA0KICAgYWxsIHRoaXMgbWF0 ZXJpYWwgd2FzIHB1dCBpbiB0aGUgUkZDIDQwMDUgKFtSRkM0MDA1XSkgdG8gYmUgdXNlZCBhcw0K ICAgZ2VuZXJpYyBndWlkZWxpbmUgZm9yIGltcGxlbWVudGF0aW9uIG9mIFJBRElVUy1EaWFtZXRl ciB0cmFuc2xhdGlvbg0KICAgYWdlbnQuDQoNCiAgIEhvd2V2ZXIsIGl0IHdhcyBhY2tub3dsZWRn ZWQgdGhhdCBzdWNoIHRyYW5zbGF0aW9uIG1lY2hhbmlzbSB3YXMgbm90DQogICBzbyBvYnZpb3Vz IGFuZCBkZWVwZXIgcHJvdG9jb2wgYW5hbHlzaXMgd2FzIHJlcXVpcmVkIHRvIGVuc3VyZQ0KICAg ZWZmaWNpZW50IGludGVyd29ya2luZyBiZXR3ZWVuIFJBRElVUyBhbmQgRGlhbWV0ZXIuICBNb3Jl b3ZlciwgdGhlDQogICBpbnRlcndvcmtpbmcgcmVxdWlyZW1lbnRzIHdpbGwgbGlrZWx5IGRlcGVu ZCBvbiB0aGUgZnVuY3Rpb25hbGl0aWVzDQogICBwcm92aWRlZCBieSB0aGUgRGlhbWV0ZXIgYXBw bGljYXRpb24gdW5kZXIgc3BlY2lmaWNhdGlvbiBhbmQgYSBjYXNlLQ0KICAgYnktY2FzZSBhbmFs eXNpcyB3aWxsIGJlIHJlcXVpcmVkLg0KDQogICBUaGVyZWZvcmUsIHdoZW4gaW50ZXJvcGVyYWJp bGl0eSB3aXRoIFJBRElVUyBpbmZyYXN0cnVjdHVyZSBpcw0KICAgZm9yZXNlZW4sIHByb3RvY29s IGRlc2lnbmVycyBhcmUgYWR2aXNlZCB0aGF0IHRoZXkgY2Fubm90IGFzc3VtZSB0aGUNCiAgIGF2 YWlsYWJpbGl0eSBvZiAic3RhbmRhcmQiIERpYW1ldGVyLXRvLVJBRElVUyBnYXRld2F5cyBhZ2Vu dCBhbmQgdGhlDQogICByZXF1aXJlZCB0cmFuc2xhdGlvbiBtZWNoYW5pc20gc2hvdWxkIGJlIHRo ZW4gc3BlY2lmaWVkIGFsb25nIHdpdGgNCiAgIHRoZSBEaWFtZXRlciBhcHBsaWNhdGlvbi4gIEFu ZCB0aGUgcmVjb21tZW5kYXRpb24gaW4gdGhlIGNhc2Ugb2YNCiAgIFJBRElVUy1EaWFtZXRlciBp bnRlcndvcmtpbmcgYXBwbGllcyBvZiBjb3Vyc2UgZm9yIGFueSBvdGhlciBraW5kIG9mDQogICB0 cmFuc2xhdGlvbiAoZS5nLiAgRGlhbWV0ZXIvTUFQKS4NCg0KNS45LiAgRW5kLXRvLUVuZCBhcHBs aWNhdGlvbnMgY2FwYWJpbGl0aWVzIGV4Y2hhbmdlDQoNCiAgIE5ldyBEaWFtZXRlciBhcHBsaWNh dGlvbnMgY2FuIHJlbHkgb24gb3B0aW9uYWwgQVZQcyB0byBleGNoYW5nZQ0KICAgYXBwbGljYXRp b24gc3BlY2lmaWMgY2FwYWJpbGl0aWVzIGFuZCBmZWF0dXJlcy4gIFRoZXNlIEFWUHMgY2FuIGJl DQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTgsIDIwMTMg ICAgICAgICAgICAgICBbUGFnZSAxN10NCgwNCkludGVybmV0LURyYWZ0ICAgRGlhbWV0ZXIgQXBw bGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVzICAgICAgIEp1bHkgMjAxMg0KDQoNCiAgIGV4Y2hh bmdlZCBvbiBhbiBlbmQtdG8tZW5kIGJhc2lzIGF0IHRoZSBhcHBsaWNhdGlvbiBsYXllci4gIEV4 YW1wbGVzDQogICBvZiB0aGlzIGNhbiBiZSBmb3VuZCBpbiBbUkZDNTQ0N10gYW5kIFtSRkM1Nzc3 XS4NCg0KICAgVGhlIGVuZC10by1lbmQgY2FwYWJpbGl0aWVzIEFWUHMgY2FuIGFpZCBpbiB0aGUg Zm9sbG93aW5nIGNhc2VzOg0KDQoNCiAgIG8gIEZvcm1hbGl6aW5nIHRoZSB3YXkgbmV3IGZ1bmN0 aW9uYWxpdHkgaXMgYWRkZWQgdG8gZXhpc3RpbmcNCiAgICAgIGFwcGxpY2F0aW9ucyBieSBhbm5v dW5jaW5nIHN1cHBvcnQgZm9yIGl0Lg0KDQoNCiAgIG8gIEFwcGxpY2F0aW9ucyB0aGF0IGRvIG5v dCB1bmRlcnN0YW5kIHRoZXNlIEFWUCBjYW4gZGlzY2FyZCBpdCB1cG9uDQogICAgICByZWNlaXB0 LiAgSW4gc3VjaCBjYXNlLCBzZW5kZXJzIG9mIHRoZSBBVlAgY2FuIGFsc28gc2FmZWx5IGFzc3Vt ZQ0KICAgICAgdGhlIHJlY2VpdmluZyBlbmQtcG9pbnQgZG9lcyBub3Qgc3VwcG9ydCBhbnkgZnVu Y3Rpb25hbGl0eSBjYXJyaWVkDQogICAgICBieSB0aGUgQVZQIGlmIGl0IGlzIG5vdCBwcmVzZW50 IGluIHN1YnNlcXVlbnQgcmVzcG9uc2VzLg0KDQoNCiAgIG8gIFVzZWZ1bCBpbiBjYXNlcyB3aGVy ZSBkZXBsb3ltZW50IGNob2ljZXMgYXJlIG9mZmVyZWQgYW5kIHRoZQ0KICAgICAgZ2VuZXJpYyBk ZXNpZ24gY2FuIGJlIG1hZGUgYXZhaWxhYmxlIGZvciBhIG51bWJlciBvZiBhcHBsaWNhdGlvbnMu DQoNCg0KICAgTm90ZSB0aGF0IHRoaXMgbGlzdCBpcyBub3QgbWVhbnQgdG8gYmUgY29tcHJlaGVu c2l2ZS4NCg0KICAgV2hlbiB1c2VkIGluIGEgbmV3IGFwcGxpY2F0aW9uLCBwcm90b2NvbCBkZXNp Z25lcnMgc2hvdWxkIGNsZWFybHkNCiAgIHNwZWNpZnkgdGhpcyBlbmQtdG8tZW5kIGNhcGFiaWxp dGllcyBleGNoYW5nZSBhbmQgdGhlIGNvcnJlc3BvbmRpbmcNCiAgIGJlaGF2aW91ciBvZiB0aGUg RGlhbWV0ZXIgbm9kZXMgc3VwcG9ydGluZyB0aGUgYXBwbGljYXRpb24uDQoNCjUuMTAuICBEaWFt ZXRlciBhY2NvdW50aW5nIHN1cHBvcnQNCg0KICAgQWNjb3VudGluZyBjYW4gYmUgdHJlYXRlZCBh cyBhbiBhdXhpbGlhcnkgYXBwbGljYXRpb24gd2hpY2ggaXMgdXNlZA0KICAgaW4gc3VwcG9ydCBv ZiBvdGhlciBhcHBsaWNhdGlvbnMuICBJbiBtb3N0IGNhc2VzLCBhY2NvdW50aW5nIHN1cHBvcnQN CiAgIGlzIHJlcXVpcmVkIHdoZW4gZGVmaW5pbmcgbmV3IGFwcGxpY2F0aW9ucy4gIFRoaXMgZG9j dW1lbnQgcHJvdmlkZXMNCiAgIHR3bygyKSBwb3NzaWJsZSBtb2RlbHMgZm9yIHVzaW5nIGFjY291 bnRpbmc6DQoNCg0KICAgU3BsaXQgQWNjb3VudGluZyBNb2RlbA0KDQogICAgICBJbiB0aGlzIG1v ZGVsLCB0aGUgYWNjb3VudGluZyBtZXNzYWdlcyB3aWxsIHVzZSB0aGUgRGlhbWV0ZXIgYmFzZQ0K ICAgICAgYWNjb3VudGluZyBhcHBsaWNhdGlvbiBJRCAodmFsdWUgb2YgMykuICBUaGUgZGVzaWdu IGltcGxpY2F0aW9uDQogICAgICBmb3IgdGhpcyBpcyB0aGF0IHRoZSBhY2NvdW50aW5nIGlzIHRy ZWF0ZWQgYXMgYW4gaW5kZXBlbmRlbnQNCiAgICAgIGFwcGxpY2F0aW9uLCBlc3BlY2lhbGx5IGR1 cmluZyBEaWFtZXRlciByb3V0aW5nLiAgVGhpcyBtZWFucyB0aGF0DQogICAgICBhY2NvdW50aW5n IGNvbW1hbmRzIGVtYW5hdGluZyBmcm9tIGFuIGFwcGxpY2F0aW9uIG1heSBiZSByb3V0ZWQNCiAg ICAgIHNlcGFyYXRlbHkgZnJvbSB0aGUgcmVzdCBvZiB0aGUgb3RoZXIgYXBwbGljYXRpb24gbWVz c2FnZXMuICBUaGlzDQogICAgICBtYXkgYWxzbyBpbXBseSB0aGF0IHRoZSBtZXNzYWdlcyBnZW5l cmFsbHkgZW5kIHVwIGluIGEgY2VudHJhbA0KICAgICAgYWNjb3VudGluZyBzZXJ2ZXIuICBBIHNw bGl0IGFjY291bnRpbmcgbW9kZWwgaXMgYSBnb29kIGRlc2lnbg0KICAgICAgY2hvaWNlIHdoZW46 DQoNCg0KDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTgs IDIwMTMgICAgICAgICAgICAgICBbUGFnZSAxOF0NCgwNCkludGVybmV0LURyYWZ0ICAgRGlhbWV0 ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVzICAgICAgIEp1bHkgMjAxMg0KDQoNCiAg ICAgICogIFRoZSBhcHBsaWNhdGlvbiBpdHNlbGYgd2lsbCBub3QgZGVmaW5lIGl0cyBvd24gdW5p cXVlDQogICAgICAgICBhY2NvdW50aW5nIGNvbW1hbmRzLg0KDQoNCiAgICAgICogIFRoZSBvdmVy YWxsIHN5c3RlbSBhcmNoaXRlY3R1cmUgcGVybWl0cyB0aGUgdXNlIG9mIGNlbnRyYWxpemVkDQog ICAgICAgICBhY2NvdW50aW5nIGZvciBvbmUgb3IgbW9yZSBEaWFtZXRlciBhcHBsaWNhdGlvbnMu DQoNCg0KICAgICAgQ2VudHJhbGl6aW5nIGFjY291bnRpbmcgbWF5IGhhdmUgYWR2YW50YWdlcyBi dXQgdGhlcmUgYXJlIGFsc28NCiAgICAgIGRyYXdiYWNrcy4gIFRoZSBtb2RlbCBhc3N1bWVzIHRo YXQgdGhlIGFjY291bnRpbmcgc2VydmVyIGNhbg0KICAgICAgc29tZWhvdyBkaWZmZXJlbnRpYXRl IHJlY2VpdmVkIGFjY291bnRpbmcgbWVzc2FnZXMuICBTaW5jZSB0aGUNCiAgICAgIHJlY2VpdmVk IGFjY291bnRpbmcgbWVzc2FnZXMgY2FuIGJlIGZvciBhbnkgYXBwbGljYXRpb24gYW5kL29yDQog ICAgICBzZXJ2aWNlLCB0aGUgYWNjb3VudGluZyBzZXJ2ZXIgaGFzIHRvIGJlIGhhdmUgYSBtZXRo b2QgdG8gdW5pcXVlbHkNCiAgICAgIG1hdGNoIGFjY291bnRpbmcgbWVzc2FnZXMgd2l0aCBhcHBs aWNhdGlvbnMgYW5kL29yIHNlcnZpY2VzIGJlaW5nDQogICAgICBhY2NvdW50ZWQgZm9yLiAgVGhp cyBtYXkgbWVhbiBkZWZpbmluZyBuZXcgQVZQcywgY2hlY2tpbmcgdGhlDQogICAgICBwcmVzZW5j ZSwgYWJzZW5jZSBvciBjb250ZW50cyBvZiBleGlzdGluZyBBVlBzIG9yIGNoZWNraW5nIHRoZQ0K ICAgICAgY29udGVudHMgb2YgdGhlIGFjY291bnRpbmcgcmVjb3JkcyBpdHNlbGYuICBCdXQgaW4g Z2VuZXJhbCwgdGhlcmUNCiAgICAgIGlzIG5vIGNsZWFuIGFuZCBnZW5lcmljIHNjaGVtZSBmb3Ig c29ydGluZyB0aGVzZSBtZXNzYWdlcy4NCiAgICAgIFRoZXJlZm9yZSwgdGhlIHVzZSBvZiB0aGlz IG1vZGVsIGlzIHJlY29tbWVuZGVkIG9ubHkgd2hlbiBhbGwNCiAgICAgIHJlY2VpdmVkIGFjY291 bnRpbmcgbWVzc2FnZXMgY2FuIGJlIGNsZWFybHkgaWRlbnRpZmllZCBhbmQgc29ydGVkLg0KICAg ICAgRm9yIG1vc3QgY2FzZXMsIHRoZSB1c2Ugb2YgQ291cGxlZCBBY2NvdW50aW5nIE1vZGVsIGlz DQogICAgICByZWNvbW1lbmRlZC4NCg0KDQogICBDb3VwbGVkIEFjY291bnRpbmcgTW9kZWwNCg0K ICAgICAgSW4gdGhpcyBtb2RlbCwgdGhlIGFjY291bnRpbmcgbWVzc2FnZXMgd2lsbCB1c2UgdGhl IGFwcGxpY2F0aW9uIElEDQogICAgICBvZiB0aGUgYXBwbGljYXRpb24gdXNpbmcgdGhlIGFjY291 bnRpbmcgc2VydmljZS4gIFRoZSBkZXNpZ24NCiAgICAgIGltcGxpY2F0aW9uIGZvciB0aGlzIGlz IHRoYXQgdGhlIGFjY291bnRpbmcgbWVzc2FnZXMgYXJlIHRpZ2h0bHkNCiAgICAgIGNvdXBsZWQg d2l0aCB0aGUgYXBwbGljYXRpb24gaXRzZWxmOyBtZWFuaW5nIHRoYXQgYWNjb3VudGluZw0KICAg ICAgbWVzc2FnZXMgd2lsbCBiZSByb3V0ZWQgbGlrZSBhbnkgb3RoZXIgYXBwbGljYXRpb24gbWVz c2FnZXMuICBJdA0KICAgICAgd291bGQgdGhlbiBiZSB0aGUgcmVzcG9uc2liaWxpdHkgb2YgdGhl IGFwcGxpY2F0aW9uIHNlcnZlcg0KICAgICAgKGFwcGxpY2F0aW9uIGVudGl0eSByZWNlaXZpbmcg dGhlIEFDUiBtZXNzYWdlKSB0byBzZW5kIHRoZQ0KICAgICAgYWNjb3VudGluZyByZWNvcmRzIGNh cnJpZWQgYnkgdGhlIGFjY291bnRpbmcgbWVzc2FnZXMgdG8gdGhlDQogICAgICBwcm9wZXIgYWNj b3VudGluZyBzZXJ2ZXIuICBUaGUgYXBwbGljYXRpb24gc2VydmVyIGlzIGFsc28NCiAgICAgIHJl c3BvbnNpYmxlIGZvciBmb3JtdWxhdGluZyBhIHByb3BlciByZXNwb25zZSAoQUNBKS4gIEEgY291 cGxlZA0KICAgICAgYWNjb3VudGluZyBtb2RlbCBpcyBhIGdvb2QgZGVzaWduIGNob2ljZSB3aGVu Og0KDQoNCiAgICAgICogIFRoZSBzeXN0ZW0gYXJjaGl0ZWN0dXJlIG9yIGRlcGxveW1lbnQgd2ls bCBub3QgcHJvdmlkZSBhbg0KICAgICAgICAgYWNjb3VudGluZyBzZXJ2ZXIgdGhhdCBzdXBwb3J0 cyBEaWFtZXRlci4NCg0KDQogICAgICAqICBUaGUgc3lzdGVtIGFyY2hpdGVjdHVyZSBvciBkZXBs b3ltZW50IHJlcXVpcmVzIHRoYXQgdGhlDQogICAgICAgICBhY2NvdW50aW5nIHNlcnZpY2UgZm9y IHRoZSBzcGVjaWZpYyBhcHBsaWNhdGlvbiBzaG91bGQgYmUNCiAgICAgICAgIGhhbmRsZWQgYnkg dGhlIGFwcGxpY2F0aW9uIGl0c2VsZi4NCg0KDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAgICAgICAg ICBFeHBpcmVzIEphbnVhcnkgMTgsIDIwMTMgICAgICAgICAgICAgICBbUGFnZSAxOV0NCgwNCklu dGVybmV0LURyYWZ0ICAgRGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVzICAg ICAgIEp1bHkgMjAxMg0KDQoNCiAgICAgICogIFRoZSBhcHBsaWNhdGlvbiBzZXJ2ZXIgaXMgcHJv dmlzaW9uZWQgdG8gdXNlIGEgZGlmZmVyZW50DQogICAgICAgICBwcm90b2NvbCB0byBhY2Nlc3Mg dGhlIGFjY291bnRpbmcgc2VydmVyOyBlLmcuLCB2aWEgTERBUCwgU09BUA0KICAgICAgICAgZXRj LiAgVGhpcyBpbmNsdWRlcyBhdHRlbXB0aW5nIHRvIHN1cHBvcnQgb2xkZXIgYWNjb3VudGluZw0K ICAgICAgICAgc3lzdGVtcyB0aGF0IGFyZSBub3QgRGlhbWV0ZXIgYXdhcmUuDQoNCg0KICAgICAg SW4gYWxsIGNhc2VzIGFib3ZlLCB0aGVyZSB3aWxsIGdlbmVyYWxseSBiZSBubyBkaXJlY3QgRGlh bWV0ZXINCiAgICAgIGFjY2VzcyB0byB0aGUgYWNjb3VudGluZyBzZXJ2ZXIuDQoNCg0KICAgVGhl c2UgbW9kZWxzIHByb3ZpZGUgYSBiYXNpcyBmb3IgdXNpbmcgYWNjb3VudGluZyBtZXNzYWdlcy4N CiAgIEFwcGxpY2F0aW9uIGRlc2lnbmVycyBtYXkgb2J2aW91c2x5IGRldmlhdGUgZnJvbSB0aGVz ZSBtb2RlbHMNCiAgIHByb3ZpZGVkIHRoYXQgdGhlIGZhY3RvcnMgYmVpbmcgYWRkcmVzc2VkIGhl cmUgaGF2ZSBhbHNvIGJlZW4gdGFrZW4NCiAgIGludG8gYWNjb3VudC4gIFRob3VnaCBpdCBpcyBu b3QgcmVjb21tZW5kZWQsIGV4YW1wbGVzIG9mIG90aGVyDQogICBtZXRob2RzIG1pZ2h0IGJlIGRl ZmluaW5nIGEgbmV3IHNldCBvZiBjb21tYW5kcyB0byBjYXJyeSBhcHBsaWNhdGlvbg0KICAgc3Bl Y2lmaWMgYWNjb3VudGluZyByZWNvcmRzLg0KDQo1LjExLiAgRGlhbWV0ZXIgc2VjdXJpdHkgbWVj aGFuaXNtcw0KDQogICBBcyBzcGVjaWZpZWQgaW4gW0ktRC5pZXRmLWRpbWUtcmZjMzU4OGJpc10s IHRoZSBEaWFtZXRlciBtZXNzYWdlDQogICBleGNoYW5nZSBzaG91bGQgYmUgc2VjdXJlZCBieSB1 c2luZyBUTFMvVENQIG9yIERUTFMvU0NUUC4gIEhvd2V2ZXIsDQogICBJUHNlYyBBZGRpdGlvbmFs IHNlY3VyaXR5IG1lY2hhbmlzbXMgc3VjaCBhcyBJUHNlYyBjYW4gYWxzbyBiZQ0KICAgZGVwbG95 ZWQgdG8gc2VjdXJlIGNvbm5lY3Rpb25zIGJldHdlZW4gRGlhbWV0ZXIgcGVlcnMuICBXaGVuIElQ c2VjIGlzDQogICB1c2VkIGluc3RlYWQgb2YgVExTIG9yIERUTFMsIHRoZSBmb2xsb3dpbmcgcmVj b21tZW5kYXRpb25zIGFwcGx5Lg0KDQogICBJUHNlYyBFU1AgNS4zIFtSRkM0MzAxXSBpbiB0cmFu c3BvcnQgbW9kZSB3aXRoIG5vbi1udWxsIGVuY3J5cHRpb24NCiAgIGFuZCBhdXRoZW50aWNhdGlv biBhbGdvcml0aG1zIGlzIHVzZWQgdG8gcHJvdmlkZSBwZXItcGFja2V0DQogICBhdXRoZW50aWNh dGlvbiwgaW50ZWdyaXR5IHByb3RlY3Rpb24gYW5kIGNvbmZpZGVudGlhbGl0eSwgYW5kIHN1cHBv cnQNCiAgIHRoZSByZXBsYXkgcHJvdGVjdGlvbiBtZWNoYW5pc21zIG9mIElQc2VjLiAgSUtFIGlz IHVzZWQgZm9yIHBlZXINCiAgIGF1dGhlbnRpY2F0aW9uLCBuZWdvdGlhdGlvbiBvZiBzZWN1cml0 eSBhc3NvY2lhdGlvbnMsIGFuZCBrZXkNCiAgIG1hbmFnZW1lbnQsIHVzaW5nIHRoZSBJUHNlYyBE T0kgW1JGQzI0MDddLiAgUGVlciBhdXRoZW50aWNhdGlvbiBjYW4NCiAgIGJlIGFjaGlldmVkIGJ5 IHVzaW5nIGEgcHJlLXNoYXJlZCBrZXkgb3IgY2VydGlmaWNhdGUtYmFzZWQgcGVlcg0KICAgYXV0 aGVudGljYXRpb24gdXNpbmcgZGlnaXRhbCBzaWduYXR1cmVzIGNhbiBiZSB1c2VkIGFzIGFsdGVy bmF0aXZlLg0KICAgUGVlciBhdXRoZW50aWNhdGlvbiB1c2luZyB0aGUgcHVibGljIGtleSBlbmNy eXB0aW9uIG1ldGhvZHMgb3V0bGluZWQNCiAgIGluIElLRSdzIFNlY3Rpb25zIDUuMiBhbmQgNS4z IFtSRkMyNDA5XSBzaG91bGQgbm90IGJlIHVzZWQuDQoNCiAgIERpYW1ldGVyIGltcGxlbWVudGF0 aW9ucyB1c2luZyBJUHNlYyBhcyBzZWN1cml0eSBtZWNoYW5pc21zIG11c3QNCiAgIHN1cHBvcnQg Ym90aCBJS0UgTWFpbiBNb2RlIGFuZCBBZ2dyZXNzaXZlIE1vZGUuICBXaGVuIHByZS1zaGFyZWQg a2V5cw0KICAgYXJlIHVzZWQgZm9yIGF1dGhlbnRpY2F0aW9uLCBJS0UgQWdncmVzc2l2ZSBNb2Rl IHNob3VsZCBiZSB1c2VkDQogICBpbnN0ZWFkIG9mIElLRSBNYWluIE1vZGUuICBXaGVuIGRpZ2l0 YWwgc2lnbmF0dXJlcyBhcmUgdXNlZCBmb3INCiAgIGF1dGhlbnRpY2F0aW9uLCBlaXRoZXIgSUtF IE1haW4gTW9kZSBvciBJS0UgQWdncmVzc2l2ZSBNb2RlIGNhbiBiZQ0KICAgdXNlZC4NCg0KICAg V2hlbiBkaWdpdGFsIHNpZ25hdHVyZXMgYXJlIHVzZWQgdG8gYWNoaWV2ZSBhdXRoZW50aWNhdGlv biwgYW4gSUtFDQogICBuZWdvdGlhdG9yIHNob3VsZCB1c2UgSUtFIENlcnRpZmljYXRlIFJlcXVl c3QgUGF5bG9hZChzKSB0byBzcGVjaWZ5DQogICB0aGUgY2VydGlmaWNhdGUgYXV0aG9yaXR5IChv ciBhdXRob3JpdGllcykgdGhhdCBhcmUgdHJ1c3RlZCBpbg0KICAgYWNjb3JkYW5jZSB3aXRoIGl0 cyBsb2NhbCBwb2xpY3kuICBJS0UgbmVnb3RpYXRvcnMgc2hvdWxkIHVzZQ0KICAgcGVydGluZW50 IGNlcnRpZmljYXRlIHJldm9jYXRpb24gY2hlY2tzIGJlZm9yZSBhY2NlcHRpbmcgYSBQS0kNCg0K DQoNCk1vcmFuZCwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAg ICAgICAgICAgIFtQYWdlIDIwXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNh dGlvbnMgRGVzaWduIEd1aWRlbGluZXMgICAgICAgSnVseSAyMDEyDQoNCg0KICAgY2VydGlmaWNh dGUgZm9yIHVzZSBpbiBJS0UncyBhdXRoZW50aWNhdGlvbiBwcm9jZWR1cmVzLg0KDQogICBUaGUg UGhhc2UgMiBRdWljayBNb2RlIGV4Y2hhbmdlcyB1c2VkIHRvIG5lZ290aWF0ZSBwcm90ZWN0aW9u IGZvcg0KICAgRGlhbWV0ZXIgY29ubmVjdGlvbnMgbXVzdCBleHBsaWNpdGx5IGNhcnJ5IHRoZSBJ ZGVudGl0eSBQYXlsb2FkDQogICBmaWVsZHMgKElEY2kgYW5kIElEY3IpLiAgVGhlIERPSSBwcm92 aWRlcyBmb3Igc2V2ZXJhbCB0eXBlcyBvZg0KICAgaWRlbnRpZmljYXRpb24gZGF0YS4gIEhvd2V2 ZXIsIHdoZW4gdXNlZCBpbiBjb25mb3JtYW50DQogICBpbXBsZW1lbnRhdGlvbnMsIGVhY2ggSUQg UGF5bG9hZCBtdXN0IGNhcnJ5IGEgc2luZ2xlIElQIGFkZHJlc3MgYW5kIGENCiAgIHNpbmdsZSBu b24temVybyBwb3J0IG51bWJlciwgYW5kIG11c3Qgbm90IHVzZSB0aGUgSVAgU3VibmV0IG9yIElQ DQogICBBZGRyZXNzIFJhbmdlIGZvcm1hdHMuICBUaGlzIGFsbG93cyB0aGUgUGhhc2UgMiBzZWN1 cml0eSBhc3NvY2lhdGlvbg0KICAgdG8gY29ycmVzcG9uZCB0byBzcGVjaWZpYyBUQ1AgYW5kIFND VFAgY29ubmVjdGlvbnMuDQoNCiAgIFNpbmNlIElQc2VjIGFjY2VsZXJhdGlvbiBoYXJkd2FyZSBt YXkgb25seSBiZSBhYmxlIHRvIGhhbmRsZSBhDQogICBsaW1pdGVkIG51bWJlciBvZiBhY3RpdmUg SUtFIFBoYXNlIDIgU0FzLCBQaGFzZSAyIGRlbGV0ZSBtZXNzYWdlcyBtYXkNCiAgIGJlIHNlbnQg Zm9yIGlkbGUgU0FzLCBhcyBhIG1lYW5zIG9mIGtlZXBpbmcgdGhlIG51bWJlciBvZiBhY3RpdmUN CiAgIFBoYXNlIDIgU0FzIHRvIGEgbWluaW11bS4gIFRoZSByZWNlaXB0IG9mIGFuIElLRSBQaGFz ZSAyIGRlbGV0ZQ0KICAgbWVzc2FnZSBzaG91bGQgbm90IGJlIGludGVycHJldGVkIGFzIGEgcmVh c29uIGZvciB0ZWFyaW5nIGRvd24gYQ0KICAgRGlhbWV0ZXIgY29ubmVjdGlvbi4gIFJhdGhlciwg aXQgaXMgcHJlZmVyYWJsZSB0byBsZWF2ZSB0aGUNCiAgIGNvbm5lY3Rpb24gdXAsIGFuZCBpZiBh ZGRpdGlvbmFsIHRyYWZmaWMgaXMgc2VudCBvbiBpdCwgdG8gYnJpbmcgdXANCiAgIGFub3RoZXIg SUtFIFBoYXNlIDIgU0EgdG8gcHJvdGVjdCBpdC4gIFRoaXMgYXZvaWRzIHRoZSBwb3RlbnRpYWwg Zm9yDQogICBjb250aW51YWxseSBicmluZ2luZyBjb25uZWN0aW9ucyB1cCBhbmQgZG93bi4NCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KTW9yYW5kLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDE4LCAyMDEzICAgICAg ICAgICAgICAgW1BhZ2UgMjFdDQoMDQpJbnRlcm5ldC1EcmFmdCAgIERpYW1ldGVyIEFwcGxpY2F0 aW9ucyBEZXNpZ24gR3VpZGVsaW5lcyAgICAgICBKdWx5IDIwMTINCg0KDQo2LiAgRGVmaW5pbmcg R2VuZXJpYyBEaWFtZXRlciBFeHRlbnNpb25zDQoNCiAgIEdlbmVyaWMgRGlhbWV0ZXIgZXh0ZW5z aW9ucyBhcmUgQVZQcywgY29tbWFuZHMgb3IgYXBwbGljYXRpb25zIHRoYXQNCiAgIGFyZSBkZXNp Z25lZCB0byBzdXBwb3J0IG90aGVyIERpYW1ldGVyIGFwcGxpY2F0aW9ucy4gIFRoZXkgYXJlDQog ICBhdXhpbGlhcnkgYXBwbGljYXRpb25zIG1lYW50IHRvIGltcHJvdmUgb3IgZW5oYW5jZSB0aGUg RGlhbWV0ZXINCiAgIHByb3RvY29sIGl0c2VsZiBvciBEaWFtZXRlciBhcHBsaWNhdGlvbnMvZnVu Y3Rpb25hbGl0eS4gIFNvbWUNCiAgIGV4YW1wbGVzIGluY2x1ZGUgdGhlIGV4dGVuc2lvbnMgdG8g c3VwcG9ydCBhdWRpdGluZyBhbmQgcmVkdW5kYW5jeQ0KICAgKHNlZSBbSS1ELmNhbGhvdW4tZGlh bWV0ZXItcmVzLW1nbXRdKSwgaW1wcm92ZW1lbnRzIGluIGR1cGxpY2F0ZQ0KICAgZGV0ZWN0aW9u IHNjaGVtZSAoc2VlIFtJLUQuYXN2ZXJlbi1kaW1lLWR1cGNvbnNdKSwgYW5kIHBpZ2d5YmFja2lu Zw0KICAgb2YgUW9TIGF0dHJpYnV0ZXMgKHNlZSBbUkZDNTc3N10pLg0KDQogICBTaW5jZSBnZW5l cmljIGV4dGVuc2lvbnMgY2FuIGNvdmVyIG1hbnkgYXNwZWN0cyBvZiBEaWFtZXRlciBhbmQNCiAg IERpYW1ldGVyIGFwcGxpY2F0aW9ucywgaXQgaXMgbm90IHBvc3NpYmxlIHRvIGVudW1lcmF0ZSBh bGwgdGhlDQogICBwcm9iYWJsZSBzY2VuYXJpb3MgaW4gdGhpcyBkb2N1bWVudC4gIEhvd2V2ZXIs IHNvbWUgb2YgdGhlIG1vc3QNCiAgIGNvbW1vbiBjb25zaWRlcmF0aW9ucyBhcmUgYXMgZm9sbG93 czoNCg0KDQogICBvICBCYWNrd2FyZCBjb21wYXRpYmlsaXR5OiBEZWFsaW5nIHdpdGggZXhpc3Rp bmcgYXBwbGljYXRpb25zIHRoYXQgZG8NCiAgICAgIG5vdCB1bmRlcnN0YW5kIHRoZSBuZXcgZXh0 ZW5zaW9uLiAgRGVzaWduZXJzIGFsc28gaGF2ZSB0byBtYWtlDQogICAgICBzdXJlIHRoYXQgbmV3 IGV4dGVuc2lvbnMgZG8gbm90IGJyZWFrIGV4cGVjdGVkIG1lc3NhZ2UgZGVsaXZlcnkNCiAgICAg IGxheWVyIGJlaGF2aW9yLg0KDQogICBvICBGb3J3YXJkIGNvbXBhdGliaWxpdHk6IE1ha2luZyBz dXJlIHRoYXQgdGhlIGRlc2lnbiB3aWxsIG5vdA0KICAgICAgaW50cm9kdWNlIHVuZHVlIHJlc3Ry aWN0aW9ucyBmb3IgZnV0dXJlIGFwcGxpY2F0aW9ucy4gIEZ1dHVyZQ0KICAgICAgYXBwbGljYXRp b25zIGF0dGVtcHRpbmcgdG8gc3VwcG9ydCB0aGlzIGZlYXR1cmUgc2hvdWxkIG5vdCBoYXZlIHRv DQogICAgICBnbyB0aHJvdWdoIGdyZWF0IGxlbmd0aHMgdG8gaW1wbGVtZW50IGFueSBuZXcgZXh0 ZW5zaW9ucy4NCg0KICAgbyAgVHJhZGVvZmZzIGluIHNpZ25hbGluZzogRGVzaWduZXJzIG1heSBo YXZlIHRvIGNob29zZSBiZXR3ZWVuIHRoZQ0KICAgICAgdXNlIG9mIG9wdGlvbmFsIEFWUHMgcGln Z3liYWNrZWQgb250byBleGlzdGluZyBjb21tYW5kcyB2ZXJzdXMNCiAgICAgIGRlZmluaW5nIG5l dyBjb21tYW5kcyBhbmQgYXBwbGljYXRpb25zLiAgT3B0aW9uYWwgQVZQcyBhcmUgc2ltcGxlcg0K ICAgICAgdG8gaW1wbGVtZW50IGFuZCBtYXkgbm90IG5lZWQgY2hhbmdlcyB0byBleGlzdGluZyBh cHBsaWNhdGlvbnM7DQogICAgICBIb3dldmVyLCB0aGUgZHJhd2JhY2sgaXMgdGhhdCB0aGUgdGlt aW5nIG9mIHNlbmRpbmcgZXh0ZW5zaW9uIGRhdGENCiAgICAgIHdpbGwgYmUgdGllZCB0byB3aGVu IHRoZSBhcHBsaWNhdGlvbiB3b3VsZCBiZSBzZW5kaW5nIGEgbWVzc2FnZS4NCiAgICAgIFRoaXMg aGFzIGNvbnNlcXVlbmNlcyBpZiB0aGUgYXBwbGljYXRpb24gYW5kIHRoZSBleHRlbnNpb25zIGhh dmUNCiAgICAgIGRpZmZlcmVudCB0aW1pbmcgcmVxdWlyZW1lbnRzLiAgVGhlIHVzZSBvZiBjb21t YW5kcyBhbmQNCiAgICAgIGFwcGxpY2F0aW9ucyBzb2x2ZXMgdGhpcyBpc3N1ZSBidXQgdGhlIHRy YWRlb2ZmIGlzIHRoZSBhZGRpdGlvbmFsDQogICAgICBjb21wbGV4aXR5IG9mIGRlZmluaW5nIGFu ZCBkZXBsb3lpbmcgYSBuZXcgYXBwbGljYXRpb24uICBJdCBpcw0KICAgICAgbGVmdCB1cCB0byB0 aGUgZGVzaWduZXIgdG8gZmluZCBhIGdvb2QgYmFsYW5jZSBhbW9uZyB0aGVzZQ0KICAgICAgdHJh ZGVvZmZzIGJhc2VkIG9uIHRoZSByZXF1aXJlbWVudHMgb2YgdGhlIGV4dGVuc2lvbi4NCg0KDQog ICBJbiBwcmFjdGljZSwgaXQgaXMgb2Z0ZW4gdGhlIGNhc2UgdGhhdCB0aGUgZ2VuZXJpYyBleHRl bnNpb25zIHVzZQ0KICAgb3B0aW9uYWwgQVZQcyBiZWNhdXNlIGl0J3Mgc2ltcGxlIGFuZCBub3Qg aW50cnVzaXZlIHRvIHRoZQ0KICAgYXBwbGljYXRpb24gdGhhdCB3b3VsZCBjYXJyeSBpdC4gIFBl ZXJzIHRoYXQgZG8gbm90IHN1cHBvcnQgdGhlDQogICBnZW5lcmljIGV4dGVuc2lvbnMgbmVlZCBu b3QgdW5kZXJzdGFuZCBub3IgcmVjb2duaXplIHRoZXNlIG9wdGlvbmFsDQogICBBVlBzLiAgSG93 ZXZlciwgaXQgaXMgcmVjb21tZW5kZWQgdGhhdCB0aGUgYXV0aG9ycyBvZiB0aGUgZXh0ZW5zaW9u DQogICBzcGVjaWZ5IHRoZSBjb250ZXh0IG9yIHVzYWdlIG9mIHRoZSBvcHRpb25hbCBBVlBzLiAg QXMgYW4gZXhhbXBsZSwgaW4NCiAgIHRoZSBjYXNlIHRoYXQgdGhlIEFWUCBjYW4gYmUgdXNlZCBv bmx5IGJ5IGEgc3BlY2lmaWMgc2V0IG9mDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAgICAgICAgICBF eHBpcmVzIEphbnVhcnkgMTgsIDIwMTMgICAgICAgICAgICAgICBbUGFnZSAyMl0NCgwNCkludGVy bmV0LURyYWZ0ICAgRGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVzICAgICAg IEp1bHkgMjAxMg0KDQoNCiAgIGFwcGxpY2F0aW9ucyB0aGVuIHRoZSBzcGVjaWZpY2F0aW9uIG11 c3QgZW51bWVyYXRlIHRoZXNlIGFwcGxpY2F0aW9ucw0KICAgYW5kIHRoZSBzY2VuYXJpb3Mgd2hl biB0aGUgb3B0aW9uYWwgQVZQcyB3aWxsIGJlIHVzZWQuICBJbiB0aGUgY2FzZQ0KICAgd2hlcmUg dGhlIG9wdGlvbmFsIEFWUHMgY2FuIGJlIGNhcnJpZWQgYnkgYW55IGFwcGxpY2F0aW9uLCBpdCBp cw0KICAgc2hvdWxkIGJlIHN1ZmZpY2llbnQgdG8gc3BlY2lmeSBzdWNoIGEgdXNlIGNhc2UgYW5k IHBlcmhhcHMgcHJvdmlkZQ0KICAgc3BlY2lmaWMgZXhhbXBsZXMgb2YgYXBwbGljYXRpb25zIHVz aW5nIHRoZW0uDQoNCiAgIEluIG1vc3QgY2FzZXMsIHRoZXNlIG9wdGlvbmFsIEFWUHMgcGlnZ3li YWNrZWQgYnkgYXBwbGljYXRpb25zIHdvdWxkDQogICBiZSBkZWZpbmVkIGFzIGEgR3JvdXBlZCBB VlAgYW5kIGl0IHdvdWxkIGVuY2Fwc3VsYXRlIGFsbCB0aGUNCiAgIGZ1bmN0aW9uYWxpdHkgb2Yg dGhlIGdlbmVyaWMgZXh0ZW5zaW9uLiAgSW4gcHJhY3RpY2UsIGl0IGlzIG5vdA0KICAgdW5jb21t b24gdGhhdCB0aGUgR3JvdXBlZCBBVlAgd2lsbCBlbmNhcHN1bGF0ZSBhbiBleGlzdGluZyBBVlAg dGhhdA0KICAgaGFzIHByZXZpb3VzbHkgYmVlbiBkZWZpbmVkIGFzIG1hbmRhdG9yeSAoJ00nLWJp dCBzZXQpIGUuZy4sIDNHUFAgSU1TDQogICBDeC9EeCBpbnRlcmZhY2VzIChbVFMyOS4yMjhdIGFu ZCBbVFMyOS4yMjldKS4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCk1vcmFuZCwgZXQgYWwuICAgICAg ICAgIEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQYWdlIDIzXQ0KDA0K SW50ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGluZXMg ICAgICAgSnVseSAyMDEyDQoNCg0KNy4gIElBTkEgQ29uc2lkZXJhdGlvbnMNCg0KICAgVGhpcyBk b2N1bWVudCBkb2VzIG5vdCByZXF1aXJlIGFjdGlvbnMgYnkgSUFOQS4NCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCk1vcmFuZCwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMg SmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQYWdlIDI0XQ0KDA0KSW50ZXJuZXQtRHJh ZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGluZXMgICAgICAgSnVseSAy MDEyDQoNCg0KOC4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zDQoNCiAgIFRoaXMgZG9jdW1lbnQg ZG9lcyBwcm92aWRlcyBndWlkZWxpbmVzIGFuZCBjb25zaWRlcmF0aW9ucyBmb3INCiAgIGV4dGVu ZGluZyBEaWFtZXRlciBhbmQgRGlhbWV0ZXIgYXBwbGljYXRpb25zLiAgSXQgZG9lcyBub3QgZGVm aW5lIG5vcg0KICAgYWRkcmVzcyBzZWN1cml0eSByZWxhdGVkIHByb3RvY29scyBvciBzY2hlbWVz Lg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAgICAg ICAgICBFeHBpcmVzIEphbnVhcnkgMTgsIDIwMTMgICAgICAgICAgICAgICBbUGFnZSAyNV0NCgwN CkludGVybmV0LURyYWZ0ICAgRGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVz ICAgICAgIEp1bHkgMjAxMg0KDQoNCjkuICBDb250cmlidXRvcnMNCg0KICAgVGhlIGNvbnRlbnQg b2YgdGhpcyBkb2N1bWVudCB3YXMgaW5mbHVlbmNlZCBieSBhIGRlc2lnbiB0ZWFtIGNyZWF0ZWQN CiAgIHRvIHJldmlzaXQgdGhlIERpYW1ldGVyIGV4dGVuc2liaWxpdHkgcnVsZXMuICBUaGUgdGVh bSBjb25zaXN0aW5nIG9mDQogICB0aGUgbWVtYmVycyBsaXN0ZWQgYmVsb3cgd2FzIGZvcm1lZCBp biBGZWJydWFyeSAyMDA4IGFuZCBmaW5pc2hlZCBpdHMNCiAgIHdvcmsgaW4gSnVuZSAyMDA4Lg0K DQoNCiAgIG8gIEF2aSBMaW9yDQoNCiAgIG8gIEdsZW4gWm9ybg0KDQogICBvICBKYXJpIEFya2tv DQoNCiAgIG8gIExpb25lbCBNb3JhbmQNCg0KICAgbyAgTWFyayBKb25lcw0KDQogICBvICBWaWN0 b3IgRmFqYXJkbw0KDQogICBvICBUb2xnYSBBc3ZlcmVuDQoNCiAgIG8gIEpvdW5pIEtvcmhvbmVu DQoNCiAgIG8gIEdsZW5uIE1jR3JlZ29yDQoNCiAgIG8gIEhhbm5lcyBUc2Nob2ZlbmlnDQoNCiAg IG8gIERhdmUgRnJhc2NvbmUNCg0KICAgV2Ugd291bGQgbGlrZSB0byB0aGFuayBUb2xnYSBBc3Zl cmVuLCBHbGVubiBNY0dyZWdvciwgYW5kIEpvaG4NCiAgIExvdWdobmV5IGZvciB0aGVpciBjb250 cmlidXRpb25zIGFzIGNvLWF1dGhvcnMgdG8gZWFybGllciB2ZXJzaW9ucyBvZg0KICAgdGhpcyBk b2N1bWVudC4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCk1vcmFuZCwgZXQg YWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQYWdl IDI2XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1 aWRlbGluZXMgICAgICAgSnVseSAyMDEyDQoNCg0KMTAuICBBY2tub3dsZWRnbWVudHMNCg0KICAg V2UgZ3JlYXRseSBhcHByZWNpYXRlIHRoZSBpbnNpZ2h0IHByb3ZpZGVkIGJ5IERpYW1ldGVyIGlt cGxlbWVudGVycw0KICAgd2hvIGhhdmUgaGlnaGxpZ2h0ZWQgdGhlIGlzc3VlcyBhbmQgY29uY2Vy bnMgYmVpbmcgYWRkcmVzc2VkIGJ5IHRoaXMNCiAgIGRvY3VtZW50Lg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQpNb3JhbmQsIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVh cnkgMTgsIDIwMTMgICAgICAgICAgICAgICBbUGFnZSAyN10NCgwNCkludGVybmV0LURyYWZ0ICAg RGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVzICAgICAgIEp1bHkgMjAxMg0K DQoNCjExLiAgUmVmZXJlbmNlcw0KDQoxMS4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMNCg0KICAg W0ktRC5pZXRmLWRpbWUtcmZjMzU4OGJpc10NCiAgICAgICAgICAgICAgRmFqYXJkbywgVi4sIEFy a2tvLCBKLiwgTG91Z2huZXksIEouLCBhbmQgRy4gWm9ybiwNCiAgICAgICAgICAgICAgIkRpYW1l dGVyIEJhc2UgUHJvdG9jb2wiLCBkcmFmdC1pZXRmLWRpbWUtcmZjMzU4OGJpcy0zNA0KICAgICAg ICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIEp1bmUgMjAxMi4NCg0KICAgW1JGQzIxMTldICBC cmFkbmVyLCBTLiwgIktleSB3b3JkcyBmb3IgdXNlIGluIFJGQ3MgdG8gSW5kaWNhdGUNCiAgICAg ICAgICAgICAgUmVxdWlyZW1lbnQgTGV2ZWxzIiwgQkNQIDE0LCBSRkMgMjExOSwgTWFyY2ggMTk5 Ny4NCg0KICAgW1JGQzM1ODhdICBDYWxob3VuLCBQLiwgTG91Z2huZXksIEouLCBHdXR0bWFuLCBF LiwgWm9ybiwgRy4sIGFuZCBKLg0KICAgICAgICAgICAgICBBcmtrbywgIkRpYW1ldGVyIEJhc2Ug UHJvdG9jb2wiLCBSRkMgMzU4OCwgU2VwdGVtYmVyIDIwMDMuDQoNCjExLjIuICBJbmZvcm1hdGl2 ZSBSZWZlcmVuY2VzDQoNCiAgIFtJLUQuYXN2ZXJlbi1kaW1lLWR1cGNvbnNdDQogICAgICAgICAg ICAgIEFzdmVyZW4sIFQuLCAiRGlhbWV0ZXIgRHVwbGljYXRlIERldGVjdGlvbiBDb25zLiIsDQog ICAgICAgICAgICAgIGRyYWZ0LWFzdmVyZW4tZGltZS1kdXBjb25zLTAwICh3b3JrIGluIHByb2dy ZXNzKSwNCiAgICAgICAgICAgICAgQXVndXN0IDIwMDYuDQoNCiAgIFtJLUQuY2FsaG91bi1kaWFt ZXRlci1yZXMtbWdtdF0NCiAgICAgICAgICAgICAgQ2FsaG91biwgUC4sICJEaWFtZXRlciBSZXNv dXJjZSBNYW5hZ2VtZW50IEV4dGVuc2lvbnMiLA0KICAgICAgICAgICAgICBkcmFmdC1jYWxob3Vu LWRpYW1ldGVyLXJlcy1tZ210LTA4LnR4dCAod29yayBpbiBwcm9ncmVzcyksDQogICAgICAgICAg ICAgIE1hcmNoIDIwMDEuDQoNCiAgIFtRLjMzMDMuM10NCiAgICAgICAgICAgICAgM3JkIEdlbmVy YXRpb24gUGFydG5lcnNoaXAgUHJvamVjdCwgIklUVS1UIFJlY29tbWVuZGF0aW9uDQogICAgICAg ICAgICAgIFEuMzMwMy4zLCAiUmVzb3VyY2UgY29udHJvbCBwcm90b2NvbCBuby4gMyAocmNwMyk6 DQogICAgICAgICAgICAgIFByb3RvY29sIGF0IHRoZSBSdyBpbnRlcmZhY2UgYmV0d2VlbiB0aGUg UG9saWN5IERlY2lzaW9uDQogICAgICAgICAgICAgIFBoeXNpY2FsIEVudGl0eSAoUEQtUEUpIGFu ZCB0aGUgUG9saWN5IEVuZm9yY2VtZW50DQogICAgICAgICAgICAgIFBoeXNpY2FsIEVudGl0eSAo UEUtUEUpOiBEaWFtZXRlciIiLCAyMDA4Lg0KDQogICBbUkZDMjQwN10gIEQuIFBpcGVyLCAiVGhl IEludGVybmV0IElQIFNlY3VyaXR5IERvbWFpbiBvZg0KICAgICAgICAgICAgICBJbnRlcnByZXRh dGlvbiBmb3IgSVNBS01QIiwgMTk5OC4NCg0KICAgW1JGQzI0MDldICBELiBIYXJraW5zIGFuZCBE LiBDYXJyZWwsICJUaGUgSW50ZXJuZXQgS2V5IEV4Y2hhbmdlDQogICAgICAgICAgICAgIChJS0Up IiwgMTk5OC4NCg0KICAgW1JGQzQwMDVdICBQLiBDYWxob3VuIGV0IGFsLiwgIkRpYW1ldGVyIE5l dHdvcmsgQWNjZXNzIFNlcnZlcg0KICAgICAgICAgICAgICBBcHBsaWNhdGlvbiIsIEF1Z3VzdCAy MDA1LA0KICAgICAgICAgICAgICA8aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9yZmMvcmZjNDAw NS50eHQ+Lg0KDQogICBbUkZDNDA3Ml0gIFAuIEVyb25lbiBldCBhbC4sICJEaWFtZXRlciBFeHRl bnNpYmxlIEF1dGhlbnRpY2F0aW9uDQogICAgICAgICAgICAgIFByb3RvY29sIChFQVApIEFwcGxp Y2F0aW9uIiwgQXVndXN0IDIwMDUsDQogICAgICAgICAgICAgIDxodHRwOi8vd3d3LnJmYy1lZGl0 b3Iub3JnL3JmYy9yZmM0MDcyLnR4dD4uDQoNCg0KDQoNCk1vcmFuZCwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQYWdlIDI4XQ0KDA0KSW50 ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGluZXMgICAg ICAgSnVseSAyMDEyDQoNCg0KICAgW1JGQzQzMDFdICBTLiBLZW50IGFuZCBLLiBTZW8sICJTZWN1 cml0eSBBcmNoaXRlY3R1cmUgZm9yIHRoZQ0KICAgICAgICAgICAgICBJbnRlcm5ldCBQcm90b2Nv bCIsIDIwMDUuDQoNCiAgIFtSRkM0NzQwXSAgTS4gR2FyY2lhLU1hcnRpbiBldCBhbC4sICJEaWFt ZXRlciBTZXNzaW9uIEluaXRpYXRpb24NCiAgICAgICAgICAgICAgUHJvdG9jb2wgKFNJUCkgQXBw bGljYXRpb24iLCBOb3ZlbWJlciAyMDA2LA0KICAgICAgICAgICAgICA8aHR0cDovL3d3dy5yZmMt ZWRpdG9yLm9yZy9yZmMvcmZjNDc0MC50eHQ+Lg0KDQogICBbUkZDNTQ0N10gIEouIEtvcmhvbmVu IGV0IGFsLiwgIkRpYW1ldGVyIE1vYmlsZSBJUHY2OiBTdXBwb3J0IGZvcg0KICAgICAgICAgICAg ICBOZXR3b3JrIEFjY2VzcyBTZXJ2ZXIgdG8gRGlhbWV0ZXIgU2VydmVyIEludGVyYWN0aW9uIiwN CiAgICAgICAgICAgICAgRmVicnVhcnkgMjAwOSwNCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cu cmZjLWVkaXRvci5vcmcvcmZjL3JmYzU0NDcudHh0Pi4NCg0KICAgW1JGQzU3NzddICBKLiBLb3Jo b25lbiBldCBhbC4sICJUcmFmZmljIENsYXNzaWZpY2F0aW9uIGFuZCBRdWFsaXR5IG9mDQogICAg ICAgICAgICAgIFNlcnZpY2UgKFFvUykgQXR0cmlidXRlcyBmb3IgRGlhbWV0ZXIiLCAyMDEwLg0K DQogICBbVFMyOS4yMjhdDQogICAgICAgICAgICAgIDNyZCBHZW5lcmF0aW9uIFBhcnRuZXJzaGlw IFByb2plY3QsICIzR1BQIFRTIDI5LjIyODsNCiAgICAgICAgICAgICAgVGVjaG5pY2FsIFNwZWNp ZmljYXRpb24gR3JvdXAgQ29yZSBOZXR3b3JrIGFuZCBUZXJtaW5hbHM7DQogICAgICAgICAgICAg IElQIE11bHRpbWVkaWEgKElNKSBTdWJzeXN0ZW0gQ3ggYW5kIER4IEludGVyZmFjZXM7DQogICAg ICAgICAgICAgIFNpZ25hbGxpbmcgZmxvd3MgYW5kIG1lc3NhZ2UgY29udGVudHMiLA0KICAgICAg ICAgICAgICA8aHR0cDovL3d3dy4zZ3BwLm9yZy9mdHAvU3BlY3MvaHRtbC1pbmZvLzI5MjcyLmh0 bT4uDQoNCiAgIFtUUzI5LjIyOV0NCiAgICAgICAgICAgICAgM3JkIEdlbmVyYXRpb24gUGFydG5l cnNoaXAgUHJvamVjdCwgIjNHUFAgVFMgMjkuMjI5Ow0KICAgICAgICAgICAgICBUZWNobmljYWwg U3BlY2lmaWNhdGlvbiBHcm91cCBDb3JlIE5ldHdvcmsgYW5kIFRlcm1pbmFsczsNCiAgICAgICAg ICAgICAgQ3ggYW5kIER4IGludGVyZmFjZXMgYmFzZWQgb24gdGhlIERpYW1ldGVyIHByb3RvY29s Ow0KICAgICAgICAgICAgICBQcm90b2NvbCBkZXRhaWxzIiwNCiAgICAgICAgICAgICAgPGh0dHA6 Ly93d3cuM2dwcC5vcmcvZnRwL1NwZWNzL2h0bWwtaW5mby8yOTIyOS5odG0+Lg0KDQogICBbVFMy OS4zMjhdDQogICAgICAgICAgICAgIDNyZCBHZW5lcmF0aW9uIFBhcnRuZXJzaGlwIFByb2plY3Qs ICIzR1BQIFRTIDI5LjMyODsNCiAgICAgICAgICAgICAgVGVjaG5pY2FsIFNwZWNpZmljYXRpb24g R3JvdXAgQ29yZSBOZXR3b3JrIGFuZCBUZXJtaW5hbHM7DQogICAgICAgICAgICAgIElQIE11bHRp bWVkaWEgKElNKSBTdWJzeXN0ZW0gU2ggaW50ZXJmYWNlOyBzaWduYWxsaW5nDQogICAgICAgICAg ICAgIGZsb3dzIGFuZCBtZXNzYWdlIGNvbnRlbnQiLA0KICAgICAgICAgICAgICA8aHR0cDovL3d3 dy4zZ3BwLm9yZy9mdHAvU3BlY3MvaHRtbC1pbmZvLzI5MzI4Lmh0bT4uDQoNCiAgIFtUUzI5LjMy OV0NCiAgICAgICAgICAgICAgM3JkIEdlbmVyYXRpb24gUGFydG5lcnNoaXAgUHJvamVjdCwgIjNH UFAgVFMgMjkuMzI5Ow0KICAgICAgICAgICAgICBUZWNobmljYWwgU3BlY2lmaWNhdGlvbiBHcm91 cCBDb3JlIE5ldHdvcmsgYW5kIFRlcm1pbmFsczsNCiAgICAgICAgICAgICAgU2ggSW50ZXJmYWNl IGJhc2VkIG9uIHRoZSBEaWFtZXRlciBwcm90b2NvbDsgUHJvdG9jb2wNCiAgICAgICAgICAgICAg ZGV0YWlscyIsDQogICAgICAgICAgICAgIDxodHRwOi8vd3d3LjNncHAub3JnL2Z0cC9TcGVjcy9o dG1sLWluZm8vMjkzMjkuaHRtPi4NCg0KDQoNCg0KDQoNCg0KDQoNCk1vcmFuZCwgZXQgYWwuICAg ICAgICAgIEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQYWdlIDI5XQ0K DA0KSW50ZXJuZXQtRHJhZnQgICBEaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGlu ZXMgICAgICAgSnVseSAyMDEyDQoNCg0KQXV0aG9ycycgQWRkcmVzc2VzDQoNCiAgIExpb25lbCBN b3JhbmQgKGVkaXRvcikNCiAgIE9yYW5nZSBMYWJzDQoNCiAgIEVtYWlsOiBsaW9uZWwubW9yYW5k QG9yYW5nZS5jb20NCg0KDQogICBWaWN0b3IgRmFqYXJkbw0KDQogICBFbWFpbDogdmYwMjEzQGdt YWlsLmNvbQ0KDQoNCiAgIEhhbm5lcyBUc2Nob2ZlbmlnDQogICBOb2tpYSBTaWVtZW5zIE5ldHdv cmtzDQogICBMaW5ub2l0dXN0aWUgNg0KICAgRXNwb28gIDAyNjAwDQogICBGaW5sYW5kDQoNCiAg IFBob25lOiArMzU4ICg1MCkgNDg3MTQ0NQ0KICAgRW1haWw6IEhhbm5lcy5Uc2Nob2ZlbmlnQGdt eC5uZXQNCiAgIFVSSTogICBodHRwOi8vd3d3LnRzY2hvZmVuaWcucHJpdi5hdA0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCk1vcmFuZCwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxOCwgMjAxMyAgICAgICAgICAgICAgIFtQ YWdlIDMwXQ0KDA0K --_003_6B7134B31289DC4FAF731D844122B36E0298E4PEXCVZYM13corpora_ Content-Type: text/html; name="draft-ietf-dime-app-design-guide-15.html" Content-Description: draft-ietf-dime-app-design-guide-15.html Content-Disposition: attachment; filename="draft-ietf-dime-app-design-guide-15.html"; size=80229; creation-date="Wed, 18 Jul 2012 09:32:23 GMT"; modification-date="Wed, 18 Jul 2012 09:32:23 GMT" Content-Transfer-Encoding: base64 PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL2h0bWw0L2xvb3NlLmR0ZCI+DQo8aHRtbCBsYW5n PSJlbiI+PGhlYWQ+PHRpdGxlPkRpYW1ldGVyIEFwcGxpY2F0aW9ucyBEZXNpZ24gR3VpZGVsaW5l czwvdGl0bGU+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQv aHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJkZXNjcmlwdGlvbiIgY29udGVudD0i RGlhbWV0ZXIgQXBwbGljYXRpb25zIERlc2lnbiBHdWlkZWxpbmVzIj4NCjxtZXRhIG5hbWU9Imtl eXdvcmRzIiBjb250ZW50PSJJbnRlcm5ldC1EcmFmdCI+DQo8bWV0YSBuYW1lPSJnZW5lcmF0b3Ii IGNvbnRlbnQ9InhtbDJyZmMgdjEuMzYgKGh0dHA6Ly94bWwucmVzb3VyY2Uub3JnLykiPg0KPHN0 eWxlIHR5cGU9J3RleHQvY3NzJz48IS0tDQogICAgICAgIGJvZHkgew0KICAgICAgICAgICAgICAg IGZvbnQtZmFtaWx5OiB2ZXJkYW5hLCBjaGFyY29hbCwgaGVsdmV0aWNhLCBhcmlhbCwgc2Fucy1z ZXJpZjsNCiAgICAgICAgICAgICAgICBmb250LXNpemU6IHNtYWxsOyBjb2xvcjogIzAwMDsgYmFj a2dyb3VuZC1jb2xvcjogI0ZGRjsNCiAgICAgICAgICAgICAgICBtYXJnaW46IDJlbTsNCiAgICAg ICAgfQ0KICAgICAgICBoMSwgaDIsIGgzLCBoNCwgaDUsIGg2IHsNCiAgICAgICAgICAgICAgICBm b250LWZhbWlseTogaGVsdmV0aWNhLCBtb25hY28sICJNUyBTYW5zIFNlcmlmIiwgYXJpYWwsIHNh bnMtc2VyaWY7DQogICAgICAgICAgICAgICAgZm9udC13ZWlnaHQ6IGJvbGQ7IGZvbnQtc3R5bGU6 IG5vcm1hbDsNCiAgICAgICAgfQ0KICAgICAgICBoMSB7IGNvbG9yOiAjOTAwOyBiYWNrZ3JvdW5k LWNvbG9yOiB0cmFuc3BhcmVudDsgdGV4dC1hbGlnbjogcmlnaHQ7IH0NCiAgICAgICAgaDMgeyBj b2xvcjogIzMzMzsgYmFja2dyb3VuZC1jb2xvcjogdHJhbnNwYXJlbnQ7IH0NCg0KICAgICAgICB0 ZC5SRkNidWcgew0KICAgICAgICAgICAgICAgIGZvbnQtc2l6ZTogeC1zbWFsbDsgdGV4dC1kZWNv cmF0aW9uOiBub25lOw0KICAgICAgICAgICAgICAgIHdpZHRoOiAzMHB4OyBoZWlnaHQ6IDMwcHg7 IHBhZGRpbmctdG9wOiAycHg7DQogICAgICAgICAgICAgICAgdGV4dC1hbGlnbjoganVzdGlmeTsg dmVydGljYWwtYWxpZ246IG1pZGRsZTsNCiAgICAgICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9y OiAjMDAwOw0KICAgICAgICB9DQogICAgICAgIHRkLlJGQ2J1ZyBzcGFuLlJGQyB7DQogICAgICAg ICAgICAgICAgZm9udC1mYW1pbHk6IG1vbmFjbywgY2hhcmNvYWwsIGdlbmV2YSwgIk1TIFNhbnMg U2VyaWYiLCBoZWx2ZXRpY2EsIHZlcmRhbmEsIHNhbnMtc2VyaWY7DQogICAgICAgICAgICAgICAg Zm9udC13ZWlnaHQ6IGJvbGQ7IGNvbG9yOiAjNjY2Ow0KICAgICAgICB9DQogICAgICAgIHRkLlJG Q2J1ZyBzcGFuLmhvdFRleHQgew0KICAgICAgICAgICAgICAgIGZvbnQtZmFtaWx5OiBjaGFyY29h bCwgbW9uYWNvLCBnZW5ldmEsICJNUyBTYW5zIFNlcmlmIiwgaGVsdmV0aWNhLCB2ZXJkYW5hLCBz YW5zLXNlcmlmOw0KICAgICAgICAgICAgICAgIGZvbnQtd2VpZ2h0OiBub3JtYWw7IHRleHQtYWxp Z246IGNlbnRlcjsgY29sb3I6ICNGRkY7DQogICAgICAgIH0NCg0KICAgICAgICB0YWJsZS5UT0Ni dWcgeyB3aWR0aDogMzBweDsgaGVpZ2h0OiAxNXB4OyB9DQogICAgICAgIHRkLlRPQ2J1ZyB7DQog ICAgICAgICAgICAgICAgdGV4dC1hbGlnbjogY2VudGVyOyB3aWR0aDogMzBweDsgaGVpZ2h0OiAx NXB4Ow0KICAgICAgICAgICAgICAgIGNvbG9yOiAjRkZGOyBiYWNrZ3JvdW5kLWNvbG9yOiAjOTAw Ow0KICAgICAgICB9DQogICAgICAgIHRkLlRPQ2J1ZyBhIHsNCiAgICAgICAgICAgICAgICBmb250 LWZhbWlseTogbW9uYWNvLCBjaGFyY29hbCwgZ2VuZXZhLCAiTVMgU2FucyBTZXJpZiIsIGhlbHZl dGljYSwgc2Fucy1zZXJpZjsNCiAgICAgICAgICAgICAgICBmb250LXdlaWdodDogYm9sZDsgZm9u dC1zaXplOiB4LXNtYWxsOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7DQogICAgICAgICAgICAgICAg Y29sb3I6ICNGRkY7IGJhY2tncm91bmQtY29sb3I6IHRyYW5zcGFyZW50Ow0KICAgICAgICB9DQoN CiAgICAgICAgdGQuaGVhZGVyIHsNCiAgICAgICAgICAgICAgICBmb250LWZhbWlseTogYXJpYWws IGhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiB4LXNtYWxsOw0KICAgICAgICAgICAg ICAgIHZlcnRpY2FsLWFsaWduOiB0b3A7IHdpZHRoOiAzMyU7DQogICAgICAgICAgICAgICAgY29s b3I6ICNGRkY7IGJhY2tncm91bmQtY29sb3I6ICM2NjY7DQogICAgICAgIH0NCiAgICAgICAgdGQu YXV0aG9yIHsgZm9udC13ZWlnaHQ6IGJvbGQ7IGZvbnQtc2l6ZTogeC1zbWFsbDsgbWFyZ2luLWxl ZnQ6IDRlbTsgfQ0KICAgICAgICB0ZC5hdXRob3ItdGV4dCB7IGZvbnQtc2l6ZTogeC1zbWFsbDsg fQ0KDQogICAgICAgIC8qIGluZm8gY29kZSBmcm9tIFNhbnRhS2xhdXNzIGF0IGh0dHA6Ly93d3cu bWFkYWJvdXRzdHlsZS5jb20vdG9vbHRpcDIuaHRtbCAqLw0KICAgICAgICBhLmluZm8gew0KICAg ICAgICAgICAgICAgIC8qIFRoaXMgaXMgdGhlIGtleS4gKi8NCiAgICAgICAgICAgICAgICBwb3Np dGlvbjogcmVsYXRpdmU7DQogICAgICAgICAgICAgICAgei1pbmRleDogMjQ7DQogICAgICAgICAg ICAgICAgdGV4dC1kZWNvcmF0aW9uOiBub25lOw0KICAgICAgICB9DQogICAgICAgIGEuaW5mbzpo b3ZlciB7DQogICAgICAgICAgICAgICAgei1pbmRleDogMjU7DQogICAgICAgICAgICAgICAgY29s b3I6ICNGRkY7IGJhY2tncm91bmQtY29sb3I6ICM5MDA7DQogICAgICAgIH0NCiAgICAgICAgYS5p bmZvIHNwYW4geyBkaXNwbGF5OiBub25lOyB9DQogICAgICAgIGEuaW5mbzpob3ZlciBzcGFuLmlu Zm8gew0KICAgICAgICAgICAgICAgIC8qIFRoZSBzcGFuIHdpbGwgZGlzcGxheSBqdXN0IG9uIDpo b3ZlciBzdGF0ZS4gKi8NCiAgICAgICAgICAgICAgICBkaXNwbGF5OiBibG9jazsNCiAgICAgICAg ICAgICAgICBwb3NpdGlvbjogYWJzb2x1dGU7DQogICAgICAgICAgICAgICAgZm9udC1zaXplOiBz bWFsbGVyOw0KICAgICAgICAgICAgICAgIHRvcDogMmVtOyBsZWZ0OiAtNWVtOyB3aWR0aDogMTVl bTsNCiAgICAgICAgICAgICAgICBwYWRkaW5nOiAycHg7IGJvcmRlcjogMXB4IHNvbGlkICMzMzM7 DQogICAgICAgICAgICAgICAgY29sb3I6ICM5MDA7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7DQog ICAgICAgICAgICAgICAgdGV4dC1hbGlnbjogbGVmdDsNCiAgICAgICAgfQ0KDQogICAgICAgIGEg eyBmb250LXdlaWdodDogYm9sZDsgfQ0KICAgICAgICBhOmxpbmsgICAgeyBjb2xvcjogIzkwMDsg YmFja2dyb3VuZC1jb2xvcjogdHJhbnNwYXJlbnQ7IH0NCiAgICAgICAgYTp2aXNpdGVkIHsgY29s b3I6ICM2MzM7IGJhY2tncm91bmQtY29sb3I6IHRyYW5zcGFyZW50OyB9DQogICAgICAgIGE6YWN0 aXZlICB7IGNvbG9yOiAjNjMzOyBiYWNrZ3JvdW5kLWNvbG9yOiB0cmFuc3BhcmVudDsgfQ0KDQog ICAgICAgIHAgeyBtYXJnaW4tbGVmdDogMmVtOyBtYXJnaW4tcmlnaHQ6IDJlbTsgfQ0KICAgICAg ICBwLmNvcHlyaWdodCB7IGZvbnQtc2l6ZTogeC1zbWFsbDsgfQ0KICAgICAgICBwLnRvYyB7IGZv bnQtc2l6ZTogc21hbGw7IGZvbnQtd2VpZ2h0OiBib2xkOyBtYXJnaW4tbGVmdDogM2VtOyB9DQog ICAgICAgIHRhYmxlLnRvYyB7IG1hcmdpbjogMCAwIDAgM2VtOyBwYWRkaW5nOiAwOyBib3JkZXI6 IDA7IHZlcnRpY2FsLWFsaWduOiB0ZXh0LXRvcDsgfQ0KICAgICAgICB0ZC50b2MgeyBmb250LXNp emU6IHNtYWxsOyBmb250LXdlaWdodDogYm9sZDsgdmVydGljYWwtYWxpZ246IHRleHQtdG9wOyB9 DQoNCiAgICAgICAgb2wudGV4dCB7IG1hcmdpbi1sZWZ0OiAyZW07IG1hcmdpbi1yaWdodDogMmVt OyB9DQogICAgICAgIHVsLnRleHQgeyBtYXJnaW4tbGVmdDogMmVtOyBtYXJnaW4tcmlnaHQ6IDJl bTsgfQ0KICAgICAgICBsaSAgICAgIHsgbWFyZ2luLWxlZnQ6IDNlbTsgfQ0KDQogICAgICAgIC8q IFJGQy0yNjI5IDxzcGFueD5zIGFuZCA8YXJ0d29yaz5zLiAqLw0KICAgICAgICBlbSAgICAgeyBm b250LXN0eWxlOiBpdGFsaWM7IH0NCiAgICAgICAgc3Ryb25nIHsgZm9udC13ZWlnaHQ6IGJvbGQ7 IH0NCiAgICAgICAgZGZuICAgIHsgZm9udC13ZWlnaHQ6IGJvbGQ7IGZvbnQtc3R5bGU6IG5vcm1h bDsgfQ0KICAgICAgICBjaXRlICAgeyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXN0eWxlOiBu b3JtYWw7IH0NCiAgICAgICAgdHQgICAgIHsgY29sb3I6ICMwMzY7IH0NCiAgICAgICAgdHQsIHBy ZSwgcHJlIGRmbiwgcHJlIGVtLCBwcmUgY2l0ZSwgcHJlIHNwYW4gew0KICAgICAgICAgICAgICAg IGZvbnQtZmFtaWx5OiAiQ291cmllciBOZXciLCBDb3VyaWVyLCBtb25vc3BhY2U7IGZvbnQtc2l6 ZTogc21hbGw7DQogICAgICAgIH0NCiAgICAgICAgcHJlIHsNCiAgICAgICAgICAgICAgICB0ZXh0 LWFsaWduOiBsZWZ0OyBwYWRkaW5nOiA0cHg7DQogICAgICAgICAgICAgICAgY29sb3I6ICMwMDA7 IGJhY2tncm91bmQtY29sb3I6ICNDQ0M7DQogICAgICAgIH0NCiAgICAgICAgcHJlIGRmbiAgeyBj b2xvcjogIzkwMDsgfQ0KICAgICAgICBwcmUgZW0gICB7IGNvbG9yOiAjNjZGOyBiYWNrZ3JvdW5k LWNvbG9yOiAjRkZDOyBmb250LXdlaWdodDogbm9ybWFsOyB9DQogICAgICAgIHByZSAua2V5IHsg Y29sb3I6ICMzM0M7IGZvbnQtd2VpZ2h0OiBib2xkOyB9DQogICAgICAgIHByZSAuaWQgIHsgY29s b3I6ICM5MDA7IH0NCiAgICAgICAgcHJlIC5zdHIgeyBjb2xvcjogIzAwMDsgYmFja2dyb3VuZC1j b2xvcjogI0NGRjsgfQ0KICAgICAgICBwcmUgLnZhbCB7IGNvbG9yOiAjMDY2OyB9DQogICAgICAg IHByZSAucmVwIHsgY29sb3I6ICM5MDk7IH0NCiAgICAgICAgcHJlIC5vdGggeyBjb2xvcjogIzAw MDsgYmFja2dyb3VuZC1jb2xvcjogI0ZDRjsgfQ0KICAgICAgICBwcmUgLmVyciB7IGJhY2tncm91 bmQtY29sb3I6ICNGQ0M7IH0NCg0KICAgICAgICAvKiBSRkMtMjYyOSA8dGV4dHRhYmxlPnMuICov DQogICAgICAgIHRhYmxlLmFsbCwgdGFibGUuZnVsbCwgdGFibGUuaGVhZGVycywgdGFibGUubm9u ZSB7DQogICAgICAgICAgICAgICAgZm9udC1zaXplOiBzbWFsbDsgdGV4dC1hbGlnbjogY2VudGVy OyBib3JkZXItd2lkdGg6IDJweDsNCiAgICAgICAgICAgICAgICB2ZXJ0aWNhbC1hbGlnbjogdG9w OyBib3JkZXItY29sbGFwc2U6IGNvbGxhcHNlOw0KICAgICAgICB9DQogICAgICAgIHRhYmxlLmFs bCwgdGFibGUuZnVsbCB7IGJvcmRlci1zdHlsZTogc29saWQ7IGJvcmRlci1jb2xvcjogYmxhY2s7 IH0NCiAgICAgICAgdGFibGUuaGVhZGVycywgdGFibGUubm9uZSB7IGJvcmRlci1zdHlsZTogbm9u ZTsgfQ0KICAgICAgICB0aCB7DQogICAgICAgICAgICAgICAgZm9udC13ZWlnaHQ6IGJvbGQ7IGJv cmRlci1jb2xvcjogYmxhY2s7DQogICAgICAgICAgICAgICAgYm9yZGVyLXdpZHRoOiAycHggMnB4 IDNweCAycHg7DQogICAgICAgIH0NCiAgICAgICAgdGFibGUuYWxsIHRoLCB0YWJsZS5mdWxsIHRo IHsgYm9yZGVyLXN0eWxlOiBzb2xpZDsgfQ0KICAgICAgICB0YWJsZS5oZWFkZXJzIHRoIHsgYm9y ZGVyLXN0eWxlOiBub25lIG5vbmUgc29saWQgbm9uZTsgfQ0KICAgICAgICB0YWJsZS5ub25lIHRo IHsgYm9yZGVyLXN0eWxlOiBub25lOyB9DQogICAgICAgIHRhYmxlLmFsbCB0ZCB7DQogICAgICAg ICAgICAgICAgYm9yZGVyLXN0eWxlOiBzb2xpZDsgYm9yZGVyLWNvbG9yOiAjMzMzOw0KICAgICAg ICAgICAgICAgIGJvcmRlci13aWR0aDogMXB4IDJweDsNCiAgICAgICAgfQ0KICAgICAgICB0YWJs ZS5mdWxsIHRkLCB0YWJsZS5oZWFkZXJzIHRkLCB0YWJsZS5ub25lIHRkIHsgYm9yZGVyLXN0eWxl OiBub25lOyB9DQoNCiAgICAgICAgaHIgeyBoZWlnaHQ6IDFweDsgfQ0KICAgICAgICBoci5pbnNl cnQgew0KICAgICAgICAgICAgICAgIHdpZHRoOiA4MCU7IGJvcmRlci1zdHlsZTogbm9uZTsgYm9y ZGVyLXdpZHRoOiAwOw0KICAgICAgICAgICAgICAgIGNvbG9yOiAjQ0NDOyBiYWNrZ3JvdW5kLWNv bG9yOiAjQ0NDOw0KICAgICAgICB9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHk+DQo8dGFi bGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNz PSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIj dG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48L3RyPjwvdGFibGU+DQo8dGFibGUgc3VtbWFy eT0ibGF5b3V0IiB3aWR0aD0iNjYlIiBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3Bh Y2luZz0iMCI+PHRyPjx0ZD48dGFibGUgc3VtbWFyeT0ibGF5b3V0IiB3aWR0aD0iMTAwJSIgYm9y ZGVyPSIwIiBjZWxscGFkZGluZz0iMiIgY2VsbHNwYWNpbmc9IjEiPg0KPHRyPjx0ZCBjbGFzcz0i aGVhZGVyIj5EaWFtZXRlciBNYWludGVuYW5jZSBhbmQgRXh0ZW5zaW9uczwvdGQ+PHRkIGNsYXNz PSJoZWFkZXIiPkwuIE1vcmFuZCwgRWQuPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iaGVhZGVy Ij4oRElNRSk8L3RkPjx0ZCBjbGFzcz0iaGVhZGVyIj5PcmFuZ2UgTGFiczwvdGQ+PC90cj4NCjx0 cj48dGQgY2xhc3M9ImhlYWRlciI+SW50ZXJuZXQtRHJhZnQ8L3RkPjx0ZCBjbGFzcz0iaGVhZGVy Ij5WLiBGYWphcmRvPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iaGVhZGVyIj5JbnRlbmRlZCBz dGF0dXM6IEluZm9ybWF0aW9uYWw8L3RkPjx0ZCBjbGFzcz0iaGVhZGVyIj4mbmJzcDs8L3RkPjwv dHI+DQo8dHI+PHRkIGNsYXNzPSJoZWFkZXIiPkV4cGlyZXM6IEphbnVhcnkgMTgsIDIwMTM8L3Rk Pjx0ZCBjbGFzcz0iaGVhZGVyIj5ILiBUc2Nob2ZlbmlnPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFz cz0iaGVhZGVyIj4mbmJzcDs8L3RkPjx0ZCBjbGFzcz0iaGVhZGVyIj5Ob2tpYSBTaWVtZW5zIE5l dHdvcmtzPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iaGVhZGVyIj4mbmJzcDs8L3RkPjx0ZCBj bGFzcz0iaGVhZGVyIj5KdWx5IDE3LCAyMDEyPC90ZD48L3RyPg0KPC90YWJsZT48L3RkPjwvdHI+ PC90YWJsZT4NCjxoMT48YnIgLz5EaWFtZXRlciBBcHBsaWNhdGlvbnMgRGVzaWduIEd1aWRlbGlu ZXM8YnIgLz5kcmFmdC1pZXRmLWRpbWUtYXBwLWRlc2lnbi1ndWlkZS0xNTwvaDE+DQoNCjxoMz5B YnN0cmFjdDwvaDM+DQoNCjxwPlRoZSBEaWFtZXRlciBCYXNlIHByb3RvY29sIHByb3ZpZGVzIGZh Y2lsaXRpZXMgZm9yIHByb3RvY29sIGV4dGVuc2liaWxpdHkgZW5hYmxpbmcgdG8gZGVmaW5lIG5l dyBEaWFtZXRlciBhcHBsaWNhdGlvbnMgb3IgbW9kaWZ5IGV4aXN0aW5nIGFwcGxpY2F0aW9ucy4g VGhpcyBkb2N1bWVudCBpcyBhIGNvbXBhbmlvbiBkb2N1bWVudCB0byB0aGUgRGlhbWV0ZXIgQmFz ZSBwcm90b2NvbCB0aGF0IGZ1cnRoZXIgZXhwbGFpbnMgYW5kIGNsYXJpZmllcyB0aGUgcnVsZXMg dG8gZXh0ZW5kIHRoZSBEaWFtZXRlciBCYXNlIHByb3RvY29sLiBJdCBpcyBtZWFudCBhcyBhIGd1 aWRlbGluZXMgZG9jdW1lbnQgYW5kIHRoZXJlZm9yZSBpdCBkb2VzIG5vdCBhZGQsIHJlbW92ZSBv ciBjaGFuZ2UgZXhpc3RpbmcgcnVsZXMuDQo8L3A+DQo8aDM+UmVxdWlyZW1lbnRzIExhbmd1YWdl PC9oMz4NCg0KPHA+VGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIs ICJTSEFMTCIsICJTSEFMTCBOT1QiLCAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAiUkVDT01NRU5E RUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpcyBkb2N1bWVudCBhcmUgdG8gYmUgaW50 ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjUkZDMjExOSc+ W1JGQzIxMTldPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPkJyYWRuZXIsIFMuLCAm bGRxdW87S2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZSBSZXF1aXJlbWVudCBM ZXZlbHMsJnJkcXVvOyBNYXJjaCZuYnNwOzE5OTcuPC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPi4N CjwvcD4NCjxoMz5TdGF0dXMgb2YgdGhpcyBNZW1vPC9oMz4NCjxwPg0KVGhpcyBJbnRlcm5ldC1E cmFmdCBpcyBzdWJtaXR0ZWQgIGluIGZ1bGwNCmNvbmZvcm1hbmNlIHdpdGggdGhlIHByb3Zpc2lv bnMgb2YgQkNQJm5ic3A7NzggYW5kIEJDUCZuYnNwOzc5LjwvcD4NCjxwPg0KSW50ZXJuZXQtRHJh ZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmcNClRh c2sgRm9yY2UgKElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmli dXRlDQp3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBj dXJyZW50DQpJbnRlcm5ldC1EcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RyYWZ0cy9jdXJyZW50Ly48L3A+DQo8cD4NCkludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9j dW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4IG1vbnRocw0KYW5kIG1heSBiZSB1cGRh dGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90aGVyIGRvY3VtZW50cyBhdCBhbnkgdGlt ZS4NCkl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURyYWZ0cyBhcyByZWZlcmVu Y2UgbWF0ZXJpYWwgb3IgdG8gY2l0ZQ0KdGhlbSBvdGhlciB0aGFuIGFzICZsZHF1bzt3b3JrIGlu IHByb2dyZXNzLiZyZHF1bzs8L3A+DQo8cD4NClRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBp cmUgb24gSmFudWFyeSAxOCwgMjAxMy48L3A+DQoNCjxoMz5Db3B5cmlnaHQgTm90aWNlPC9oMz4N CjxwPg0KQ29weXJpZ2h0IChjKSAyMDEyIElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50 aWZpZWQgYXMgdGhlDQpkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48L3A+ DQo8cD4NClRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRy dXN0J3MgTGVnYWwNClByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHMNCihodHRw Oi8vdHJ1c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBv Zg0KcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9j dW1lbnRzDQpjYXJlZnVsbHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3Ry aWN0aW9ucyB3aXRoIHJlc3BlY3QNCnRvIHRoaXMgZG9jdW1lbnQuIENvZGUgQ29tcG9uZW50cyBl eHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QNCmluY2x1ZGUgU2ltcGxpZmllZCBCU0Qg TGljZW5zZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuZSBvZg0KdGhlIFRydXN0IExl Z2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJhbnR5IGFzDQpkZXNj cmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuPC9wPg0KPGEgbmFtZT0idG9jIj48 L2E+PGJyIC8+PGhyIC8+DQo8aDM+VGFibGUgb2YgQ29udGVudHM8L2gzPg0KPHAgY2xhc3M9InRv YyI+DQo8YSBocmVmPSIjYW5jaG9yMSI+MS48L2E+Jm5ic3A7DQpJbnRyb2R1Y3Rpb248YnIgLz4N CjxhIGhyZWY9IiNhbmNob3IyIj4yLjwvYT4mbmJzcDsNClRlcm1pbm9sb2d5PGJyIC8+DQo8YSBo cmVmPSIjYW5jaG9yMyI+My48L2E+Jm5ic3A7DQpPdmVydmlldzxiciAvPg0KPGEgaHJlZj0iI2Fu Y2hvcjQiPjQuPC9hPiZuYnNwOw0KUmV1c2luZyBleGlzdGluZyBEaWFtZXRlciBhcHBsaWNhdGlv bnM8YnIgLz4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxhIGhyZWY9IiNhbmNob3I1Ij40LjEu PC9hPiZuYnNwOw0KQWRkaW5nIGEgbmV3IGNvbW1hbmQ8YnIgLz4NCiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOzxhIGhyZWY9IiNhbmNob3I2Ij40LjIuPC9hPiZuYnNwOw0KRGVsZXRpbmcgYSBjb21t YW5kPGJyIC8+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8YSBocmVmPSIjYW5jaG9yNyI+NC4z LjwvYT4mbmJzcDsNClJldXNpbmcgZXhpc3RpbmcgY29tbWFuZHM8YnIgLz4NCiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxhIGhyZWY9IiNhbmNob3I4Ij40 LjMuMS48L2E+Jm5ic3A7DQpBZGRpbmcgQVZQcyB0byBhIG9tbWFuZDxiciAvPg0KJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEgaHJlZj0iI2FuY2hvcjki PjQuMy4yLjwvYT4mbmJzcDsNCkRlbGV0aW5nIEFWUHMgZnJvbSBhIGNvbW1hbmQ8YnIgLz4NCiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxhIGhyZWY9IiNhbmNob3IxMCI+NC40LjwvYT4mbmJzcDsN ClJldXNpbmcgZXhpc3RpbmcgQVZQczxiciAvPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEgaHJlZj0iI2FuY2hvcjExIj40LjQuMS48L2E+Jm5ic3A7 DQpTZXR0aW5nIG9mIHRoZSBBVlAgZmxhZ3M8YnIgLz4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxhIGhyZWY9IiNhbmNob3IxMiI+NC40LjIuPC9hPiZu YnNwOw0KUmV1c2Ugb2YgQVZQIG9mIHR5cGUgRW51bWVyYXRlZDxiciAvPg0KPGEgaHJlZj0iI2Fu Y2hvcjEzIj41LjwvYT4mbmJzcDsNCkRlZmluaW5nIG5ldyBEaWFtZXRlciBhcHBsaWNhdGlvbnM8 YnIgLz4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxhIGhyZWY9IiNhbmNob3IxNCI+NS4xLjwv YT4mbmJzcDsNCkludHJvZHVjdGlvbjxiciAvPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEg aHJlZj0iI2FuY2hvcjE1Ij41LjIuPC9hPiZuYnNwOw0KRGVmaW5pbmcgbmV3IGNvbW1hbmRzPGJy IC8+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8YSBocmVmPSIjYW5jaG9yMTYiPjUuMy48L2E+ Jm5ic3A7DQpVc2Ugb2YgQXBwbGljYXRpb24tSWQgaW4gYSBtZXNzYWdlPGJyIC8+DQombmJzcDsm bmJzcDsmbmJzcDsmbmJzcDs8YSBocmVmPSIjYW5jaG9yMTciPjUuNC48L2E+Jm5ic3A7DQpBcHBs aWNhdGlvbiBzcGVjaWZpYyBTZXNzaW9uIFN0YXRlIE1hY2hpbmU8YnIgLz4NCiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOzxhIGhyZWY9IiNhbmNob3IxOCI+NS41LjwvYT4mbmJzcDsNClNlc3Npb24t SWQgQVZQIGFuZCBzZXNzaW9uIG1hbmFnZW1lbnQ8YnIgLz4NCiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOzxhIGhyZWY9IiNhbmNob3IxOSI+NS42LjwvYT4mbmJzcDsNCkFWUHMgZGVmaW5lZCBhcyBC b29sZWFuIGZsYWc8YnIgLz4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxhIGhyZWY9IiNhbmNo b3IyMCI+NS43LjwvYT4mbmJzcDsNCkFwcGxpY2F0aW9uLXNwZWNpZmljIG1lc3NhZ2Ugcm91dGlu ZzxiciAvPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEgaHJlZj0iI2FuY2hvcjIxIj41Ljgu PC9hPiZuYnNwOw0KQWJvdXQgVHJhbnNsYXRpb24gQWdlbnQ8YnIgLz4NCiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOzxhIGhyZWY9IiNhbmNob3IyMiI+NS45LjwvYT4mbmJzcDsNCkVuZC10by1FbmQg YXBwbGljYXRpb25zIGNhcGFiaWxpdGllcyBleGNoYW5nZTxiciAvPg0KJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7PGEgaHJlZj0iI290aGVyLWFjY291bnRpbmciPjUuMTAuPC9hPiZuYnNwOw0KRGlh bWV0ZXIgYWNjb3VudGluZyBzdXBwb3J0PGJyIC8+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8 YSBocmVmPSIjYW5jaG9yMjMiPjUuMTEuPC9hPiZuYnNwOw0KRGlhbWV0ZXIgc2VjdXJpdHkgbWVj aGFuaXNtczxiciAvPg0KPGEgaHJlZj0iI290aGVyLWdlbmVyaWMiPjYuPC9hPiZuYnNwOw0KRGVm aW5pbmcgR2VuZXJpYyBEaWFtZXRlciBFeHRlbnNpb25zPGJyIC8+DQo8YSBocmVmPSIjYW5jaG9y MjQiPjcuPC9hPiZuYnNwOw0KSUFOQSBDb25zaWRlcmF0aW9uczxiciAvPg0KPGEgaHJlZj0iI2Fu Y2hvcjI1Ij44LjwvYT4mbmJzcDsNClNlY3VyaXR5IENvbnNpZGVyYXRpb25zPGJyIC8+DQo8YSBo cmVmPSIjYW5jaG9yMjYiPjkuPC9hPiZuYnNwOw0KQ29udHJpYnV0b3JzPGJyIC8+DQo8YSBocmVm PSIjYWNrcyI+MTAuPC9hPiZuYnNwOw0KQWNrbm93bGVkZ21lbnRzPGJyIC8+DQo8YSBocmVmPSIj cmZjLnJlZmVyZW5jZXMxIj4xMS48L2E+Jm5ic3A7DQpSZWZlcmVuY2VzPGJyIC8+DQombmJzcDsm bmJzcDsmbmJzcDsmbmJzcDs8YSBocmVmPSIjcmZjLnJlZmVyZW5jZXMxIj4xMS4xLjwvYT4mbmJz cDsNCk5vcm1hdGl2ZSBSZWZlcmVuY2VzPGJyIC8+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8 YSBocmVmPSIjcmZjLnJlZmVyZW5jZXMyIj4xMS4yLjwvYT4mbmJzcDsNCkluZm9ybWF0aXZlIFJl ZmVyZW5jZXM8YnIgLz4NCjxhIGhyZWY9IiNyZmMuYXV0aG9ycyI+JiMxNjc7PC9hPiZuYnNwOw0K QXV0aG9ycycgQWRkcmVzc2VzPGJyIC8+DQo8L3A+DQo8YnIgY2xlYXI9ImFsbCIgLz4NCg0KPGEg bmFtZT0iYW5jaG9yMSI+PC9hPjxiciAvPjxociAvPg0KPHRhYmxlIHN1bW1hcnk9ImxheW91dCIg Y2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIyIiBjbGFzcz0iVE9DYnVnIiBhbGlnbj0icmln aHQiPjx0cj48dGQgY2xhc3M9IlRPQ2J1ZyI+PGEgaHJlZj0iI3RvYyI+Jm5ic3A7VE9DJm5ic3A7 PC9hPjwvdGQ+PC90cj48L3RhYmxlPg0KPGEgbmFtZT0icmZjLnNlY3Rpb24uMSI+PC9hPjxoMz4x LiZuYnNwOw0KSW50cm9kdWN0aW9uPC9oMz4NCg0KPHA+VGhlIERpYW1ldGVyIEJhc2UgcHJvdG9j b2wgcHJvdmlkZXMgZmFjaWxpdGllcyB0byBleHRlbmQgdGhlIERpYW1ldGVyIEJhc2UgcHJvdG9j b2wgKHNlZSBTZWN0aW9uIDEuMyBvZiA8YSBjbGFzcz0naW5mbycgaHJlZj0nI0ktRC5pZXRmLWRp bWUtcmZjMzU4OGJpcyc+W0kmIzgyMDk7RC5pZXRmJiM4MjA5O2RpbWUmIzgyMDk7cmZjMzU4OGJp c108c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0naW5mbyc+RmFqYXJkbywgVi4sIEFya2tvLCBK LiwgTG91Z2huZXksIEouLCBhbmQgRy4gWm9ybiwgJmxkcXVvO0RpYW1ldGVyIEJhc2UgUHJvdG9j b2wsJnJkcXVvOyBKdW5lJm5ic3A7MjAxMi48L3NwYW4+PHNwYW4+KTwvc3Bhbj48L2E+KSBmb3Ig c3VwcG9ydGluZyBuZXcgZnVuY3Rpb25hbGl0aWVzLiBJbiB0aGUgY29udGV4dCBvZiB0aGlzIGRv Y3VtZW50LCBleHRlbmRpbmcgRGlhbWV0ZXIgbWVhbnMgb25lIG9mIHRoZSBmb2xsb3dpbmc6PGJy IC8+DQo8YnIgLz4NCiA8L3A+DQo8b2wgY2xhc3M9InRleHQiPg0KPGxpPkFkZGl0aW9uIG9mIGEg bmV3IGZ1bmN0aW9uYWxpdHkgdG8gYW4gZXhpc3RpbmcgRGlhbWV0ZXIgYXBwbGljYXRpb24gd2l0 aG91dCBkZWZpbmluZyBhIG5ldyBhcHBsaWNhdGlvbi48YnIgLz4NCg0KPC9saT4NCjxsaT5BZGRp dGlvbiBvZiBhIG5ldyBmdW5jdGlvbmFsaXR5IHRvIGFuIGV4aXN0aW5nIERpYW1ldGVyIGFwcGxp Y2F0aW9uIHRoYXQgcmVxdWlyZXMgdGhlIGRlZmluaXRpb24gb2YgYSBuZXcgYXBwbGljYXRpb24u IDxiciAvPg0KDQo8L2xpPg0KPGxpPlRoZSBkZWZpbml0aW9uIG9mIGEgbmV3IERpYW1ldGVyIGFw cGxpY2F0aW9uIHRvIHByb3ZpZGUgYSBzZXQgb2YgZnVuY3Rpb25hbGl0aWVzIG5vdCBzdXBwb3J0 ZWQgYnkgZXhpc3RpbmcgYXBwbGljYXRpb25zLiA8YnIgLz4NCg0KPC9saT4NCjxsaT5UaGUgZGVm aW5pdGlvbiBvZiBhIG5ldyBnZW5lcmljIGZ1bmN0aW9uYWxpdHkgdGhhdCBjYW4gYmUgcmV1c2Vk IGFjcm9zcyBkaWZmZXJlbnQgYXBwbGljYXRpb25zLjxiciAvPg0KDQo8L2xpPg0KPC9vbD48cD5B bGwgb2YgdGhlc2UgY2hvaWNlcyBhcmUgZGVzaWduIGRlY2lzaW9ucyB0aGF0IGNhbiBiZSBkb25l IGJ5IGFueSBjb21iaW5hdGlvbiBvZiByZXVzaW5nIGV4aXN0aW5nIG9yIGRlZmluaW5nIG5ldyBj b21tYW5kcywgQVZQcyBvciBBVlAgdmFsdWVzLiBIb3dldmVyLCBhcHBsaWNhdGlvbiBkZXNpZ25l cnMgZG8gbm90IGhhdmUgdG90YWwgZnJlZWRvbSB3aGVuIG1ha2luZyB0aGVpciBkZXNpZ24uIEEg bnVtYmVyIG9mIHJ1bGVzIGhhdmUgYmVlbiBkZWZpbmVkIGluIDxhIGNsYXNzPSdpbmZvJyBocmVm PScjSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzJz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYj ODIwOTtyZmMzNTg4YmlzXTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRv LCBWLiwgQXJra28sIEouLCBMb3VnaG5leSwgSi4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0 ZXIgQmFzZSBQcm90b2NvbCwmcmRxdW87IEp1bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9z cGFuPjwvYT4gYW5kIHBsYWNlIGNvbnN0cmFpbnRzIG9uIHdoZW4gYW4gZXh0ZW5zaW9uIHJlcXVp cmVzIHRoZSBhbGxvY2F0aW9uIG9mIGEgbmV3IERpYW1ldGVyIGFwcGxpY2F0aW9uIGlkZW50aWZp ZXIgb3IgYSBuZXcgY29tbWFuZCBjb2RlIHZhbHVlLiBUaGUgb2JqZWN0aXZlIG9mIHRoaXMgZG9j dW1lbnQgaXMgdGhlIGZvbGxvd2luZzo8YnIgLz4NCjxiciAvPg0KIDwvcD4NCjx1bCBjbGFzcz0i dGV4dCI+DQo8bGk+Q2xhcmlmeSB1cGRhdGVkIERpYW1ldGVyIGV4dGVuc2liaWxpdHkgcnVsZXMg aW4gdGhlIERpYW1ldGVyIEJhc2UgUHJvdG9jb2wuIDxiciAvPg0KDQo8L2xpPg0KPGxpPkNsYXJp ZnkgdXNhZ2Ugb2YgY2VydGFpbiBEaWFtZXRlciBmdW5jdGlvbmFsaXRpZXMgdGhhdCBhcmUgbm90 IGV4cGxpY2l0bHkgZGVzY3JpYmVkIGluIHRoZSBEaWFtZXRlciBCYXNlIHNwZWNpZmljYXRpb24u PGJyIC8+DQoNCjwvbGk+DQo8bGk+RGlzY3VzcyBkZXNpZ24gY2hvaWNlcyBhbmQgcHJvdmlkZSBn dWlkZWxpbmVzIHdoZW4gZGVmaW5pbmcgbmV3IGFwcGxpY2F0aW9ucy4gPGJyIC8+DQoNCjwvbGk+ DQo8bGk+UHJlc2VudCB0cmFkZW9mZnMgb2YgZGVzaWduIGNob2ljZXMuPGJyIC8+DQoNCjwvbGk+ DQo8L3VsPg0KDQo8YSBuYW1lPSJhbmNob3IyIj48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3Vt bWFyeT0ibGF5b3V0IiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0Ni dWciIGFsaWduPSJyaWdodCI+PHRyPjx0ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4m bmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlv bi4yIj48L2E+PGgzPjIuJm5ic3A7DQpUZXJtaW5vbG9neTwvaDM+DQoNCjxwPlRoaXMgZG9jdW1l bnQgcmV1c2VzIHRoZSB0ZXJtaW5vbG9neSB1c2VkIGluIDxhIGNsYXNzPSdpbmZvJyBocmVmPScj SS1ELmlldGYtZGltZS1yZmMzNTg4YmlzJz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYjODIw OTtyZmMzNTg4YmlzXTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRvLCBW LiwgQXJra28sIEouLCBMb3VnaG5leSwgSi4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0ZXIg QmFzZSBQcm90b2NvbCwmcmRxdW87IEp1bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9zcGFu PjwvYT4uDQo8L3A+DQo8YSBuYW1lPSJhbmNob3IzIj48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUg c3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJU T0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9j Ij4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2Vj dGlvbi4zIj48L2E+PGgzPjMuJm5ic3A7DQpPdmVydmlldzwvaDM+DQoNCjxwPkFzIGRlc2lnbmVk LCB0aGUgRGlhbWV0ZXIgQmFzZSBwcm90b2NvbCA8YSBjbGFzcz0naW5mbycgaHJlZj0nI0ktRC5p ZXRmLWRpbWUtcmZjMzU4OGJpcyc+W0kmIzgyMDk7RC5pZXRmJiM4MjA5O2RpbWUmIzgyMDk7cmZj MzU4OGJpc108c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0naW5mbyc+RmFqYXJkbywgVi4sIEFy a2tvLCBKLiwgTG91Z2huZXksIEouLCBhbmQgRy4gWm9ybiwgJmxkcXVvO0RpYW1ldGVyIEJhc2Ug UHJvdG9jb2wsJnJkcXVvOyBKdW5lJm5ic3A7MjAxMi48L3NwYW4+PHNwYW4+KTwvc3Bhbj48L2E+ IGNhbiBiZSBzZWVuIGFzIGEgdHdvLWxheWVyIHByb3RvY29sLiBUaGUgbG93ZXIgbGF5ZXIgaXMg bWFpbmx5IHJlc3BvbnNpYmxlIGZvciBtYW5hZ2luZyBjb25uZWN0aW9ucyBiZXR3ZWVuIG5laWdo Ym9yaW5nIHBlZXJzIGFuZCBmb3IgbWVzc2FnZSByb3V0aW5nLiBUaGUgdXBwZXIgbGF5ZXIgaXMg d2hlcmUgdGhlIERpYW1ldGVyIGFwcGxpY2F0aW9ucyByZXNpZGUuIFRoaXMgbW9kZWwgaXMgaW4g bGluZSB3aXRoIGEgRGlhbWV0ZXIgbm9kZSBoYXZpbmcgYW4gYXBwbGljYXRpb24gbGF5ZXIgYW5k IGEgcGVlci10by1wZWVyIGRlbGl2ZXJ5IGxheWVyLiBUaGUgRGlhbWV0ZXIgQmFzZSBwcm90b2Nv bCBkb2N1bWVudCBkZWZpbmVzIHRoZSBhcmNoaXRlY3R1cmUgYW5kIGJlaGF2aW9yIG9mIHRoZSBt ZXNzYWdlIGRlbGl2ZXJ5IGxheWVyIGFuZCB0aGVuIHByb3ZpZGVzIHRoZSBmcmFtZXdvcmsgZm9y IGRlc2lnbmluZyBEaWFtZXRlciBhcHBsaWNhdGlvbnMgb24gdGhlIGFwcGxpY2F0aW9uIGxheWVy LiBUaGlzIGZyYW1ld29yayBpbmNsdWRlcyBkZWZpbml0aW9ucyBvZiBhcHBsaWNhdGlvbiBzZXNz aW9ucyBhbmQgYWNjb3VudGluZyBzdXBwb3J0IChzZWUgU2VjdGlvbiA4IGFuZCA5IG9mIDxhIGNs YXNzPSdpbmZvJyBocmVmPScjSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzJz5bSSYjODIwOTtELmll dGYmIzgyMDk7ZGltZSYjODIwOTtyZmMzNTg4YmlzXTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNz PSdpbmZvJz5GYWphcmRvLCBWLiwgQXJra28sIEouLCBMb3VnaG5leSwgSi4sIGFuZCBHLiBab3Ju LCAmbGRxdW87RGlhbWV0ZXIgQmFzZSBQcm90b2NvbCwmcmRxdW87IEp1bmUmbmJzcDsyMDEyLjwv c3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4pLiBBY2NvcmRpbmdseSwgYSBEaWFtZXRlciBub2RlIGlz IHNlZW4gaW4gdGhpcyBkb2N1bWVudCBhcyBhIHNpbmdsZSBpbnN0YW5jZSBvZiBhIERpYW1ldGVy IG1lc3NhZ2UgZGVsaXZlcnkgbGF5ZXIgYW5kIG9uZSBvciBtb3JlIERpYW1ldGVyIGFwcGxpY2F0 aW9ucyB1c2luZyBpdC4NCjwvcD4NCjxwPlRoZSBEaWFtZXRlciBCYXNlIHByb3RvY29sIGlzIGRl c2lnbmVkIHRvIGJlIGV4dGVuc2libGUgYW5kIHRoZSBwcmluY2lwbGVzIGFyZSBkZXNjcmliZWQg aW4gdGhlIHNlY3Rpb24gMS4zIG9mIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjSS1ELmlldGYtZGlt ZS1yZmMzNTg4YmlzJz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYjODIwOTtyZmMzNTg4Ymlz XTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRvLCBWLiwgQXJra28sIEou LCBMb3VnaG5leSwgSi4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0ZXIgQmFzZSBQcm90b2Nv bCwmcmRxdW87IEp1bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4uIEV4dGVu ZGluZyBEaWFtZXRlciBjYW4gbWVhbiBlaXRoZXIgdGhlIGRlZmluaXRpb24gb2YgYSBjb21wbGV0 bHkgbmV3IERpYW1ldGVyIGFwcGxpY2F0aW9uIG9yIHRoZSByZXVzZSBvZiBjb21tYW5kcywgQVZQ cyBhbmQgQVZQIHZhbHVlcyBpbiBhbnkgY29tYmluYXRpb24gZm9yIHRoZSBwdXJwb3NlIG9mIGlu aGVyaXRpbmcgdGhlIGZlYXR1cmVzIG9mIGFuIGV4aXN0aW5nIERpYW1ldGVyIGFwcGxpY2F0aW9u LiBUaGUgcmVjb21tZW5kYXRpb24gZm9yIHJlLXVzaW5nIGFzIG11Y2ggYXMgcG9zc2libGUgZXhp c3RpbmcgaW1wbGVtZW50YXRpb25zIGlzIG1lYW5pbmdmdWwgYXMgbW9zdCBvZiB0aGUgcmVxdWly ZW1lbnRzIGRlZmluZWQgZm9yIGEgbmV3IGFwcGxpY2F0aW9uIGFyZSBsaWtlbHkgYWxyZWFkeSBm dWxmaWxsZWQgYnkgZXhpc3RpbmcgYXBwbGljYXRpb25zLg0KPC9wPg0KPHA+SG93ZXZlciwgd2hl biByZXVzaW5nIGV4aXN0aW5nIGFwcGxpY2F0aW9ucywgdGhlcmUgaXMgYSBncmVhdGVyIGxpa2Vs aWhvb2Qgb2YgYW1iaWd1aXR5IG9uIGhvdyBtdWNoIG9mIHRoZSBleGlzdGluZyBhcHBsaWNhdGlv biBjYW4gYmUgZW5oYW5jZWQgd2l0aG91dCBiZWluZyBkaXN0b3J0ZWQgdG9vIG11Y2ggYW5kIHRo ZXJlZm9yZSByZXF1aXJpbmcgdGhlIGRlZmluaXRpb24gb2YgYSBuZXcgYXBwbGljYXRpb24uDQo8 L3A+DQo8cD5UaGUgaW1wYWN0cyBvZiBleHRlbmRpbmcgZXhpc3RpbmcgYXBwbGljYXRpb25zIGNh biBiZSBjYXRlZ29yaXplZCBhcyBmb2xsb3c6DQo8L3A+DQo8cD48L3A+DQo8YmxvY2txdW90ZSBj bGFzcz0idGV4dCI+PGRsPg0KPGR0Pk1pbm9yIEV4dGVuc2lvbjo8L2R0Pg0KPGRkPkVuaGFuY2lu ZyB0aGUgZnVuY3Rpb25hbCBzY29wZSBvZiBhbiBleGlzdGluZyBhcHBsaWNhdGlvbiBieSB0aGUg YWRkaXRpb24gb2Ygb3B0aW9uYWwgZmVhdHVyZXMgdG8gc3VwcG9ydC4gU3VjaCBlbmhhbmNlbWVu dCBoYXMgbm8gYmFja3dhcmQgY29tcGF0aWJpbGl0eSBpc3N1ZSB3aXRoIHRoZSBleGlzdGluZyBh cHBsaWNhdGlvbi4gQSB0eXBpY2FsIGV4YW1wbGUgd291bGQgYmUgdGhlIGRlZmluaXRpb24gb2Yg YSBuZXcgb3B0aW9uYWwgQVZQIHRvIHVzZSBpbiBhbiBleGlzdGluZyBjb21tYW5kLiBEaWFtZXRl ciBpbXBsZW1lbnRhdGlvbnMgc3VwcG9ydGluZyB0aGUgZXhpc3RpbmcgYXBwbGljYXRpb24gYnV0 IG5vdCB0aGUgbmV3IEFWUCB3aWxsIHNpbXBseSBpZ25vcmUgaXQsIHdpdGhvdXQgbWFqb3IgY29u c2VxdWVuY2VzIG9uIHRoZSBEaWFtZXRlciBtZXNzYWdlIGhhbmRsaW5nLiBJbiBnZW5lcmFsLCB0 aGlzIGluY2x1ZGVzIGV2ZXJ5dGhpbmcgdGhhdCBpcyBub3QgY292ZXJlZCBieSB0aGUgbmV4dCBj YXRlZ29yeS4gVGhlIHN0YW5kYXJkaXphdGlvbiBlZmZvcnQgd2lsbCBiZSBmYWlybHkgc21hbGwu IDxiciAvPg0KDQo8L2RkPg0KPGR0Pk1ham9yIEV4dGVuc2lvbjo8L2R0Pg0KPGRkPkVuaGFuY2lu ZyB0aGUgZnVuY3Rpb25hbCBzY29wZSBvZiBhbiBleGlzdGluZyBhcHBsaWNhdGlvbiBpbiBzdWNo IGEgd2F5IHRoYXQgdGhpcyBpbXBsaWVzIGJhY2t3YXJkIGNvbXBhdGlibGUgY2hhbmdlIHRvIHRo ZSBleGlzdGluZyBhcHBsaWNhdGlvbiBhbmQgdGhlbiByZXF1aXJlcyB0aGUgZGVmaW5pdGlvbiBv ZiBhIG5ldyBEaWFtZXRlciBhcHBsaWNhdGlvbi4gVHlwaWNhbCBleGFtcGxlcyB3b3VsZCBiZSB0 aGUgY3JlYXRpb24gb2YgYSBuZXcgY29tbWFuZCBmb3IgcHJvdmlkaW5nIGZ1bmN0aW9uYWxpdHkg bm90IHN1cHBvcnRlZCBieSBleGlzdGluZyBhcHBsaWNhdGlvbnMgb3IgdGhlIGRlZmluaXRpb24g b2YgYSBuZXcgQVZQIHdpdGggTS1iaXQgc2V0IHRvIGNhcnJ5IGluIGFuIGV4aXN0aW5nIGNvbW1h bmQuIEZvciBzdWNoIGV4dGVuc2lvbiwgYSBzaWduaWZpY2FudCBzcGVjaWZpY2F0aW9uIGVmZm9y dCBpcyByZXF1aXJlZCBhbmQgYSBjYXJlZnVsIGFwcHJvYWNoIGlzIHJlY29tbWVuZGVkLg0KPC9k ZD4NCjwvZGw+PC9ibG9ja3F1b3RlPg0KDQo8cD5UaGUgcnVsZXMgb3V0bGluZWQgaW4gdGhlIHNl Y3Rpb24gMS4zIG9mIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjSS1ELmlldGYtZGltZS1yZmMzNTg4 YmlzJz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYjODIwOTtyZmMzNTg4YmlzXTxzcGFuPiAo PC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRvLCBWLiwgQXJra28sIEouLCBMb3VnaG5l eSwgSi4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0ZXIgQmFzZSBQcm90b2NvbCwmcmRxdW87 IEp1bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4gaW5kaWNhdGUgd2hlbiBh biBleHRlbnNpb24gcmVxdWlyZXMgYSBuZXcgY29tbWFuZCBjb2RlIHRvIGJlIHJlZ2lzdGVyZWQg YW5kIHdoZW4gbmV3IERpYW1ldGVyIGFwcGxpY2F0aW9ucyBoYXZlIHRvIGJlIGRlZmluZWQuIFRo ZSBzdWJzZXF1ZW50IHNlY3Rpb25zIGZ1cnRoZXIgZXhwbGFpbiBhbmQgY2xhcmlmeSB0aGUgcnVs ZXMgdG8gZXh0ZW5kIHRoZSBEaWFtZXRlciBCYXNlIHByb3RvY29sLiBJdCBpcyBtZWFudCBhcyBh IGd1aWRlbGluZXMgZG9jdW1lbnQgYW5kIHRoZXJlZm9yZSBpdCBkb2VzIG5vdCBhZGQsIHJlbW92 ZSBvciBjaGFuZ2UgZXhpc3RpbmcgcnVsZXMuDQo8L3A+DQo8YSBuYW1lPSJhbmNob3I0Ij48L2E+ PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGluZz0iMCIgY2Vs bHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0ZCBjbGFzcz0i VE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48L3RyPjwvdGFi bGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi40Ij48L2E+PGgzPjQuJm5ic3A7DQpSZXVzaW5nIGV4 aXN0aW5nIERpYW1ldGVyIGFwcGxpY2F0aW9uczwvaDM+DQoNCjxwPldoZW4gc2VsZWN0aW5nIHRo ZSBEaWFtZXRlciBCYXNlIHByb3RvY29sIHRvIHN1cHBvcnQgbmV3IGZ1bmN0aW9uYWxpdGllcywg cHJvdG9jb2wgZGVzaWduZXJzIGFyZSBhZHZpc2VkIHRvIHRyeSB0byByZS11c2UgYXMgbXVjaCBh cyBwb3NzaWJsZSBleGlzdGluZyBEaWFtZXRlciBhcHBsaWNhdGlvbnMgdG8gc2ltcGxpZnkgc3Rh bmRhcmRpemF0aW9uLCBpbXBsZW1lbnRhdGlvbiBhbmQgYXZvaWQgcG90ZW50aWFsIGludGVyb3Bl cmFiaWxpdHkgaXNzdWVzLiBIb3dldmVyLCBleGlzdGluZyBhcHBsaWNhdGlvbiBuZWVkcyB0byBi ZSBhZGFwdGVkIHRvIHN1cHBvcnQgbmV3IHJlcXVpcmVtZW50cyBhbmQgdGhlc2UgbW9kaWZpY2F0 aW9ucyBjYW4gYmUgYXQgdGhlIGNvbW1hbmQgbGV2ZWwgYW5kL29yIGF0IHRoZSBBVlAgbGV2ZWwu IFRoZSBmb2xsb3dpbmcgc2VjdGlvbnMgZGVzY3JpYmUgdGhlIHBvc3NpYmxlIG1vZGlmaWNhdGlv bnMgdGhhdCBjYW4gYmUgcGVyZm9ybWVkIG9uIGV4aXN0aW5nIGFwcGxpY2F0aW9ucyBhbmQgdGhl aXIgcmVsYXRlZCBpbXBhY3RzLg0KPC9wPg0KPGEgbmFtZT0iYW5jaG9yNSI+PC9hPjxiciAvPjxo ciAvPg0KPHRhYmxlIHN1bW1hcnk9ImxheW91dCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5n PSIyIiBjbGFzcz0iVE9DYnVnIiBhbGlnbj0icmlnaHQiPjx0cj48dGQgY2xhc3M9IlRPQ2J1ZyI+ PGEgaHJlZj0iI3RvYyI+Jm5ic3A7VE9DJm5ic3A7PC9hPjwvdGQ+PC90cj48L3RhYmxlPg0KPGEg bmFtZT0icmZjLnNlY3Rpb24uNC4xIj48L2E+PGgzPjQuMS4mbmJzcDsNCkFkZGluZyBhIG5ldyBj b21tYW5kPC9oMz4NCg0KPHA+QWRkaW5nIGEgbmV3IGNvbW1hbmQgaXMgY29uc2lkZXJlZCBhcyBh IG1ham9yIGV4dGVuc2lvbiBhbmQgcmVxdWlyZXMgYSBuZXcgRGlhbWV0ZXIgYXBwbGljYXRpb24g dG8gYmUgZGVmaW5lZC4gQWRkaW5nIGEgbmV3IGNvbW1hbmQgdG8gYW4gYXBwbGljYXRpb24gbWVh bnMgZWl0aGVyIGRlZmluaW5nIGEgY29tcGxldGVseSBuZXcgY29tbWFuZCBvciBpbXBvcnRpbmcg dGhlIGNvbW1hbmQncyBDQ0Ygc3ludGF4IHNwZWNpZmljYXRpb24gZnJvbSBhbm90aGVyIGFwcGxp Y2F0aW9uIHdoZXJlYnkgdGhlIG5ldyBhcHBsaWNhdGlvbiBpbmhlcml0cyBzb21lIG9yIGFsbCBv ZiB0aGUgZnVuY3Rpb25hbGl0eSBvZiB0aGUgYXBwbGljYXRpb24gd2hlcmUgdGhlIGNvbW1hbmQg Y2FtZSBmcm9tLiBJbiB0aGUgZm9ybWVyIGNhc2UsIHRoZSBkZWNpc2lvbiB0byBjcmVhdGUgYW4g bmV3IGFwcGxpY2F0aW9uIGlzIHN0cmFpZ2h0Zm9yd2FyZCBzaW5jZSB0aGlzIGlzIHR5cGljYWxs eSBhIHJlc3VsdCBvZiBhZGRpbmcgYSBuZXcgZnVuY3Rpb25hbGl0eSB0aGF0IGRvZXMgbm90IGV4 aXN0IHlldC4gRm9yIHRoZSBsYXR0ZXIsIHRoZSBkZWNpc2lvbiB0byBjcmVhdGUgYSBuZXcgYXBw bGljYXRpb24gd2lsbCBkZXBlbmQgb24gd2hldGhlciBpbXBvcnRpbmcgdGhlIGNvbW1hbmQgaW4g YSBuZXcgYXBwbGljYXRpb24gaXMgbW9yZSBzdWl0YWJsZSB0aGFuIHNpbXBseSB1c2luZyB0aGUg ZXhpc3RpbmcgYXBwbGljYXRpb24gYXMgaXQgaXMgaW4gY29uanVuY3Rpb24gd2l0aCBhbnkgb3Ro ZXIgYXBwbGljYXRpb24uIFRoZXJlZm9yZSwgYSBjYXNlIGJ5IGNhc2Ugc3R1ZHkgb2YgZWFjaCBh cHBsaWNhdGlvbiByZXF1aXJlbWVudCBzaG91bGQgYmUgYXBwbGllZC4NCjwvcD4NCjxwPkFuIGls bHVzdHJhdGl2ZSBleGFtcGxlIGlzIHRoZSBjb21tYW5kIHBhaXIgZGVmaW5lZCBpbiBEaWFtZXRl ciBFQVAgYXBwbGljYXRpb24gPGEgY2xhc3M9J2luZm8nIGhyZWY9JyNSRkM0MDcyJz5bUkZDNDA3 Ml08c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0naW5mbyc+UC4gRXJvbmVuIGV0IGFsLiwgJmxk cXVvO0RpYW1ldGVyIEV4dGVuc2libGUgQXV0aGVudGljYXRpb24gUHJvdG9jb2wgKEVBUCkgQXBw bGljYXRpb24sJnJkcXVvOyBBdWd1c3QmbmJzcDsyMDA1Ljwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwv YT4gdGhhdCBjYW4gYmUgcmUtdXNlZCBjb25qb2ludGx5IHdpdGggYW55IG90aGVyIGFwcGxpY2F0 aW9uIChlLmcuIHRoZSBEaWFtZXRlciBOQVNSRVEgYXBwbGljYXRpb24gPGEgY2xhc3M9J2luZm8n IGhyZWY9JyNSRkM0MDA1Jz5bUkZDNDAwNV08c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0naW5m byc+UC4gQ2FsaG91biBldCBhbC4sICZsZHF1bztEaWFtZXRlciBOZXR3b3JrIEFjY2VzcyBTZXJ2 ZXIgQXBwbGljYXRpb24sJnJkcXVvOyBBdWd1c3QmbmJzcDsyMDA1Ljwvc3Bhbj48c3Bhbj4pPC9z cGFuPjwvYT4pIGFzIHNvb24gYXMgc3RhbmRhcmQgRUFQLWJhc2VkIGF1dGhlbnRpY2F0aW9uIHBy b2NlZHVyZXMgbmVlZCB0byBiZSBzdXBwb3J0ZWQgYnkgdGhlIGltcGxlbWVudGF0aW9uLiBJdCBt YXkgdGhlcmVmb3JlIG5vdCBiZSByZXF1aXJlZCB0byBpbXBvcnQgdGhlIGNvbW1hbmQgcGFpciBp biB0aGUgbmV3IGRlZmluZWQgYXBwbGljYXRpb24uDQo8L3A+DQo8cD5Ib3dldmVyLCBpbiBnZW5l cmFsLCBpdCBpcyBkaWZmaWN1bHQgdG8gY29tZSB0byBhIGhhcmQgZ3VpZGVsaW5lLCBhbmQgc28g YSBjYXNlIGJ5IGNhc2Ugc3R1ZHkgb2YgZWFjaCBhcHBsaWNhdGlvbiByZXF1aXJlbWVudCBzaG91 bGQgYmUgYXBwbGllZC4gQmVmb3JlIGFkZGluZyBvciBpbXBvcnRpbmcgYSBjb21tYW5kLCBhcHBs aWNhdGlvbiBkZXNpZ25lcnMgc2hvdWxkIGNvbnNpZGVyIHRoZSBmb2xsb3dpbmc6PGJyIC8+DQo8 YnIgLz4NCiA8L3A+DQo8dWwgY2xhc3M9InRleHQiPg0KPGxpPkNhbiB0aGUgbmV3IGZ1bmN0aW9u YWxpdHkgYmUgZnVsZmlsbGVkIGJ5IGNyZWF0aW5nIGEgbmV3IGNvbW1hbmQgaW5kZXBlbmRlbnQg ZnJvbSBhbnkgZXhpc3RpbmcgY29tbWFuZD8gSW4gdGhpcyBjYXNlLCB0aGUgcmVzdWx0aW5nIG5l dyBhcHBsaWNhdGlvbiBhbmQgdGhlIGV4aXN0aW5nIGFwcGxpY2F0aW9uIGNhbiB3b3JrIGluZGVw ZW5kZW50IG9mLCBidXQgY29vcGVyYXRpbmcgd2l0aCBlYWNoIG90aGVyLjxiciAvPg0KDQo8L2xp Pg0KPGxpPkNhbiB0aGUgZXhpc3RpbmcgY29tbWFuZCBiZSByZXVzZWQgd2l0aG91dCBtYWpvciBl eHRlbnNpb25zIGFuZCB0aGVyZWZvcmUgd2l0aG91dCB0aGUgbmVlZCBmb3IgdGhlIGRlZmluaXRp b24gb2YgYSBuZXcgYXBwbGljYXRpb24sIGUuZy4gbmV3IGZ1bmN0aW9uYWxpdHkgaW50cm9kdWNl ZCBieSB0aGUgY3JlYXRpb24gb2YgbmV3IG9wdGlvbmFsIEFWUHMuPGJyIC8+DQoNCjwvbGk+DQo8 bGk+Q2FyZSBzaG91bGQgYmUgdGFrZW4gdG8gYXZvaWQgYSBsaWJlcmFsIG1ldGhvZCBvZiBpbXBv cnRpbmcgZXhpc3RpbmcgY29tbWFuZCdzIENDRiBzeW50YXggc3BlY2lmaWNhdGlvbi4gVGhpcyB3 b3VsZCByZXN1bHQgaW4gYSBtb25vbGl0aGljIGFuZCBoYXJkIHRvIG1hbmFnZSBhcHBsaWNhdGlv bnMgc3VwcG9ydGluZyB0b28gbWFueSBkaWZmZXJlbnQgZnVuY3Rpb25hbGl0aWVzIGFuZCBjYW4g Y2F1c2UgaW50ZXJvcGVyYWJpbGl0eSBpc3N1ZXMgYmV0d2VlbiB0aGUgZGlmZmVyZW50IGFwcGxp Y2F0aW9ucy4gLjxiciAvPg0KDQo8L2xpPg0KPC91bD48YnIgLz4NCg0KDQo8YSBuYW1lPSJhbmNo b3I2Ij48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGlu Zz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0 ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48 L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi40LjIiPjwvYT48aDM+NC4yLiZuYnNw Ow0KRGVsZXRpbmcgYSBjb21tYW5kPC9oMz4NCg0KPHA+QWx0aG91Z2ggdGhpcyBwcm9jZXNzIGlz IG5vdCB0eXBpY2FsLCByZW1vdmluZyBhIGNvbW1hbmQgdG8gYW4gYXBwbGljYXRpb24gcmVxdWly ZXMgYSBuZXcgRGlhbWV0ZXIgYXBwbGljYXRpb24gdG8gYmUgZGVmaW5lZC4gdGhpcyBpcyBkdWUg dG8gdGhlIGZhY3QgdGhhdCB0aGUgcmVjZXB0aW9uIG9mIHRoZSBkZWxldGVkIGNvbW1hbmQgd291 bGQgc3lzdGVtYXRpY2FsbHkgcmVzdWx0IGluIGEgcHJvdG9jb2wgZXJyb3IgKERJQU1FVEVSX0NP TU1BTkRfVU5TVVBQT1JURUQpLg0KPC9wPg0KPHA+SXQgaXMgdW51c3VhbCB0byBkZWxldGUgYW4g ZXhpc3RpbmcgY29tbWFuZCBmcm9tIGFuIGFwcGxpY2F0aW9uIGZvciB0aGUgc2FrZSBvZiBkZWxl dGluZyBpdCBvciB0aGUgZnVuY3Rpb25hbGl0eSBpdCByZXByZXNlbnRzLiBUaGlzIG5vcm1hbGx5 IGluZGljYXRlcyBvZiBhIGZsYXdlZCBkZXNpZ24uIEFuIGV4Y2VwdGlvbiBtaWdodCBiZSBpZiB0 aGUgaW50ZW50IG9mIHRoZSBkZWxldGlvbiBpcyB0byBjcmVhdGUgYSBuZXdlciB2ZXJzaW9uIG9m IHRoZSBzYW1lIGFwcGxpY2F0aW9uIHdoaWNoIGlzIHNvbWVob3cgc2ltcGxlciB0aGFuIHRoZSBw cmV2aW91cyB2ZXJzaW9uLg0KPC9wPg0KPGEgbmFtZT0iYW5jaG9yNyI+PC9hPjxiciAvPjxociAv Pg0KPHRhYmxlIHN1bW1hcnk9ImxheW91dCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIy IiBjbGFzcz0iVE9DYnVnIiBhbGlnbj0icmlnaHQiPjx0cj48dGQgY2xhc3M9IlRPQ2J1ZyI+PGEg aHJlZj0iI3RvYyI+Jm5ic3A7VE9DJm5ic3A7PC9hPjwvdGQ+PC90cj48L3RhYmxlPg0KPGEgbmFt ZT0icmZjLnNlY3Rpb24uNC4zIj48L2E+PGgzPjQuMy4mbmJzcDsNClJldXNpbmcgZXhpc3Rpbmcg Y29tbWFuZHM8L2gzPg0KDQo8cD5UaGlzIHNlY3Rpb24gZGlzY3Vzc2VzIHJ1bGVzIGluIGFkZGlu ZyBhbmQvb3IgZGVsZXRpbmcgQVZQcyBmcm9tIGFuIGV4aXN0aW5nIGNvbW1hbmQgb2YgYW4gZXhp c3RpbmcgYXBwbGljYXRpb24uIFRoZSBjYXNlcyBkZXNjcmliZWQgaW4gdGhpcyBzZWN0aW9uIG1h eSBub3QgbmVjZXNzYXJpbHkgcmVzdWx0IGluIHRoZSBjcmVhdGlvbiBvZiBuZXcgYXBwbGljYXRp b25zLg0KPC9wPg0KPHA+SXQgaXMgd29ydGggdG8gbm90ZSB0aGF0IHRoZSBzdHJvbmcgcmVjb21t ZW5kYXRpb24gdG8gcmUtdXNlIGV4aXN0aW5nIGNvbW1hbmRzIGluIHRoZSA8YSBjbGFzcz0naW5m bycgaHJlZj0nI1JGQzM1ODgnPltSRkMzNTg4XTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdp bmZvJz5DYWxob3VuLCBQLiwgTG91Z2huZXksIEouLCBHdXR0bWFuLCBFLiwgWm9ybiwgRy4sIGFu ZCBKLiBBcmtrbywgJmxkcXVvO0RpYW1ldGVyIEJhc2UgUHJvdG9jb2wsJnJkcXVvOyBTZXB0ZW1i ZXImbmJzcDsyMDAzLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4gd2FzIHRvIHByZXZlbnQgcmFw aWQgc2NhcmNpdHkgb2YgY29kZSB2YWx1ZXMgYXZhaWxhYmxlIGZvciB2ZW5kb3Itc3BlY2lmaWMg Y29tbWFuZHMuIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjSS1ELmlldGYtZGltZS1yZmMzNTg4Ymlz Jz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYjODIwOTtyZmMzNTg4YmlzXTxzcGFuPiAoPC9z cGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRvLCBWLiwgQXJra28sIEouLCBMb3VnaG5leSwg Si4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0ZXIgQmFzZSBQcm90b2NvbCwmcmRxdW87IEp1 bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4gcmVsYXhlcyB0aGUgcG9saWN5 IHdpdGggcmVzcGVjdCB0byB0aGUgYWxsb2NhdGlvbiBvZiBjb21tYW5kIGNvZGVzIGZvciB2ZW5k b3Itc3BlY2lmaWMgdXNlcyBhbmQgZW5sYXJnZXMgdGhlIHJhbmdlIG9mIGF2YWlsYWJsZSBjb2Rl IHZhbHVlcyBmb3IgdmVuZG9yLXNwZWNpZmljIGFwcGxpY2F0aW9ucy4gVGhlcmVmb3JlLCBpZiBp dCBpcyBzdGlsbCByZWNvbW1lbmRlZCB0byByZS11c2UgYXMgbXVjaCBhcyBwb3NzaWJsZSBleGlz dGluZyBjb21tYW5kcywgcHJvdG9jb2wgZGVzaWduZXJzIGNhbiBjb25zaWRlciBtb3JlIGVhc2ls eSB0aGUgZGVmaW5pdGlvbiBvZiBhIG5ldyBjb21tYW5kIHdoZW4gaXQgaXMgYSBzb2x1dGlvbiBt b3JlIHN1aXRhYmxlIHRoYW4gdHdpc3RpbmcgZXhpc3RpbmcgY29tbWFuZCB1c2UgYW5kIGFwcGxp Y2F0aW9ucy4NCjwvcD4NCjxhIG5hbWU9ImFuY2hvcjgiPjwvYT48YnIgLz48aHIgLz4NCjx0YWJs ZSBzdW1tYXJ5PSJsYXlvdXQiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMiIgY2xhc3M9 IlRPQ2J1ZyIgYWxpZ249InJpZ2h0Ij48dHI+PHRkIGNsYXNzPSJUT0NidWciPjxhIGhyZWY9IiN0 b2MiPiZuYnNwO1RPQyZuYnNwOzwvYT48L3RkPjwvdHI+PC90YWJsZT4NCjxhIG5hbWU9InJmYy5z ZWN0aW9uLjQuMy4xIj48L2E+PGgzPjQuMy4xLiZuYnNwOw0KQWRkaW5nIEFWUHMgdG8gYSBvbW1h bmQ8L2gzPg0KDQo8cD5CYXNlZCBvbiB0aGUgcnVsZXMgaW4gPGEgY2xhc3M9J2luZm8nIGhyZWY9 JyNJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXMnPltJJiM4MjA5O0QuaWV0ZiYjODIwOTtkaW1lJiM4 MjA5O3JmYzM1ODhiaXNdPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPkZhamFyZG8s IFYuLCBBcmtrbywgSi4sIExvdWdobmV5LCBKLiwgYW5kIEcuIFpvcm4sICZsZHF1bztEaWFtZXRl ciBCYXNlIFByb3RvY29sLCZyZHF1bzsgSnVuZSZuYnNwOzIwMTIuPC9zcGFuPjxzcGFuPik8L3Nw YW4+PC9hPiwgQVZQcyB0aGF0IGFyZSBhZGRlZCB0byBhbiBleGlzdGluZyBjb21tYW5kIGNhbiBi ZSBjYXRlZ29yaXplZCBpbnRvOjxiciAvPg0KPGJyIC8+DQogPC9wPg0KPHVsIGNsYXNzPSJ0ZXh0 Ij4NCjxsaT5NYW5kYXRvcnkgKHRvIHVuZGVyc3RhbmQpIEFWUHMuIEFzIGRlZmluZWQgaW4gPGEg Y2xhc3M9J2luZm8nIGhyZWY9JyNJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXMnPltJJiM4MjA5O0Qu aWV0ZiYjODIwOTtkaW1lJiM4MjA5O3JmYzM1ODhiaXNdPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xh c3M9J2luZm8nPkZhamFyZG8sIFYuLCBBcmtrbywgSi4sIExvdWdobmV5LCBKLiwgYW5kIEcuIFpv cm4sICZsZHF1bztEaWFtZXRlciBCYXNlIFByb3RvY29sLCZyZHF1bzsgSnVuZSZuYnNwOzIwMTIu PC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPiwgdGhlc2UgYXJlIEFWUHMgd2l0aCB0aGUgTS1iaXQg ZmxhZyBzZXQsIHdoaWNoIG1lYW5zIHRoYXQgYSBEaWFtZXRlciBub2RlIHJlY2VpdmluZyBhcmUg cmVxdWlyZWQgdG8gdW5kZXJzdGFuZCBub3Qgb25seSB0aGVpciB2YWx1ZXMgYnV0IHRoZWlyIHNl bWFudGljcy4gRmFpbHVyZSB0byBkbyBzbyB3aWxsIGNhdXNlIGFuIG1lc3NhZ2UgaGFuZGxpbmcg ZXJyb3IuIFRoaXMgaXMgcmVnYXJkbGVzcyBvZiB3aGV0aGVyIHRoZXNlIEFWUHMgYXJlIHJlcXVp cmVkIG9yIG9wdGlvbmFsIGFzIHNwZWNpZmllZCBieSB0aGUgY29tbWFuZCdzIENDRiBzeW50YXgg c3BlY2lmaWNhdGlvbi48YnIgLz4NCjxiciAvPg0KDQo8L2xpPg0KPGxpPk9wdGlvbmFsICh0byB1 bmRlcnN0YW5kKSBBVlBzLiBBcyBkZWZpbmVkIGluIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjSS1E LmlldGYtZGltZS1yZmMzNTg4YmlzJz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYjODIwOTty ZmMzNTg4YmlzXTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRvLCBWLiwg QXJra28sIEouLCBMb3VnaG5leSwgSi4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0ZXIgQmFz ZSBQcm90b2NvbCwmcmRxdW87IEp1bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwv YT4sIHRoZXNlIGFyZSBBVlBzIHdpdGggdGhlIE0tYml0IGZsYWcgY2xlYXJlZCwgd2hpY2ggbWVh biB0aGF0IGEgRGlhbWV0ZXIgbm9kZSByZWNlaXZpbmcgdGhlc2UgQVZQIGNhbiBzaW1wbHkgaWdu b3JlIHRoZW0gaWYgbm90IHN1cHBvcnRlZCBpbiB0aGUgcHJvY2VzcyBvZiB0aGUgcmVjZWl2ZWQg Y29tbWFuZC4NCjwvbGk+DQo8L3VsPg0KDQo8cD5UaGUgcnVsZXMgYXJlIHN0cmljdCBpbiB0aGUg Y2FzZSB3aGVyZSB0aGUgQVZQcyB0byBiZSBhZGRlZCBhcmUgbWFuZGF0b3J5IHRvIHVuZGVyc3Rh bmQgaS5lLiB3aXRoIHRoZSBNLWJpdCBzZXQuIEEgbWFuZGF0b3J5IEFWUCBjYW5ub3QgYmUgYWRk ZWQgdG8gYW4gZXhpc3RpbmcgY29tbWFuZCB3aXRob3V0IGRlZmluaW5nIGEgbmV3IERpYW1ldGVy IGFwcGxpY2F0aW9uLCBhcyBzdGF0ZWQgaW4gPGEgY2xhc3M9J2luZm8nIGhyZWY9JyNJLUQuaWV0 Zi1kaW1lLXJmYzM1ODhiaXMnPltJJiM4MjA5O0QuaWV0ZiYjODIwOTtkaW1lJiM4MjA5O3JmYzM1 ODhiaXNdPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPkZhamFyZG8sIFYuLCBBcmtr bywgSi4sIExvdWdobmV5LCBKLiwgYW5kIEcuIFpvcm4sICZsZHF1bztEaWFtZXRlciBCYXNlIFBy b3RvY29sLCZyZHF1bzsgSnVuZSZuYnNwOzIwMTIuPC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPi4g VGhpcyBmYWxscyBpbnRvIHRoZSAiTWFqb3IgRXh0ZW5zaW9ucyIgY2F0ZWdvcnkuIERlc3BpdGUg dGhlIGNsYXJpdHkgb2YgdGhlIHJ1bGUsIGFtYmlndWl0eSBzdGlsbCBhcmlzZXMgd2hlbiBldmFs dWF0aW5nIHdoZXRoZXIgYSBuZXcgQVZQIGJlaW5nIGFkZGVkIHNob3VsZCBiZSBtYW5kYXRvcnkg dG8gYmVnaW4gd2l0aC4gSGVyZSBpcyBhIGxpc3Qgb2YgZmV3IGNvbW1vbiBxdWVzdGlvbnMgdGhh dCBhcHBsaWNhdGlvbiBkZXNpZ25lcnMgc2hvdWxkIHdvbmRlciB3aGVuIHRyeWluZyB0byBkZWNp ZGU6IDxiciAvPg0KPGJyIC8+DQogPC9wPg0KPHVsIGNsYXNzPSJ0ZXh0Ij4NCjxsaT5Xb3VsZCBp dCBiZSByZXF1aXJlZCBmb3IgdGhlIHJlY2VpdmluZyBzaWRlIHRvIGJlIGFibGUgdG8gcHJvY2Vz cyBhbmQgdW5kZXJzdGFuZCB0aGUgQVZQIGFuZCBpdHMgY29udGVudD88YnIgLz4NCg0KPC9saT4N CjxsaT5Xb3VsZCB0aGUgbmV3IEFWUHMgY2hhbmdlIHRoZSBzdGF0ZSBtYWNoaW5lIG9mIHRoZSBh cHBsaWNhdGlvbj88YnIgLz4NCg0KPC9saT4NCjxsaT5Xb3VsZCB0aGUgcHJlc2VuY2Ugb2YgdGhl IG5ldyBBVlAgbGVhZCB0byBhIGRpZmZlcmVudCBudW1iZXIgb2Ygcm91bmR0cmlwcywgZWZmZWN0 aXZlbHkgY2hhbmdpbmcgdGhlIHN0YXRlIG1hY2hpbmUgb2YgdGhlIGFwcGxpY2F0aW9uPzxiciAv Pg0KDQo8L2xpPg0KPGxpPldvdWxkIHRoZSBuZXcgQVZQIGJlIHVzZWQgdG8gZGlmZmVyZW50aWF0 ZSBiZXR3ZWVuIG9sZCBhbmQgbmV3IHZlcnNpb25zIG9mIHRoZSBzYW1lIGFwcGxpY2F0aW9uIHdo ZXJlYnkgdGhlIHR3byB2ZXJzaW9ucyBhcmUgbm90IGJhY2t3YXJkIGNvbXBhdGlibGU/PGJyIC8+ DQoNCjwvbGk+DQo8bGk+V291bGQgdGhlIG5ldyBBVlAgaGF2ZSBkdWFsaXR5IGluIG1lYW5pbmcg aS5lLiBiZSB1c2VkIHRvIGNhcnJ5IGFwcGxpY2F0aW9uIHJlbGF0ZWQgaW5mb3JtYXRpb24gYXMg d2VsbCBhcyBiZSB1c2VkIHRvIGluZGljYXRlIHRoYXQgdGhlIG1lc3NhZ2UgaXMgZm9yIGEgbmV3 IGFwcGxpY2F0aW9uPw0KPC9saT4NCjwvdWw+DQoNCjxwPldoZW4gb25lIG9mIHRoZSBhYm92ZSBx dWVzdGlvbnMgY2FuIGJlIGFuc3dlcmVkIGluIHRoZSBhZmZpcm1hdGl2ZSB0aGVuIHRoZSBNLWJp dCBoYXMgdG8gYmUgc2V0IGZvciB0aGUgbmV3IEFWUC4NCjwvcD4NCjxwPklmIGFwcGxpY2F0aW9u IGRlc2lnbmVycyBhcmUgaW5zdGVhZCBjb250ZW1wbGF0aW5nIG9uIHRoZSB1c2Ugb2Ygb3B0aW9u YWwgQVZQcyBpLmUuIHdpdGggdGhlIE0tYml0IGNsZWFyZWQsIHRoZW4gdGhlIGZvbGxvd2luZyBh cmUgc29tZSBvZiB0aGUgcGl0ZmFsbHMgdGhhdCBzaG91bGQgYmUgYXZvaWRlZDo8YnIgLz4NCjxi ciAvPg0KDQo8L3A+DQo8cD48L3A+DQo8dWwgY2xhc3M9InRleHQiPg0KPGxpPlVzZSBvZiBvcHRp b25hbCBBVlBzIHdpdGggaW50ZXJzZWN0aW5nIG1lYW5pbmcuIE9uZSBBVlAgaGFzIHBhcnRpYWxs eSB0aGUgc2FtZSB1c2FnZSBhbmQgbWVhbmluZyBhcyBhbm90aGVyIEFWUC4gVGhlIHByZXNlbmNl IG9mIGJvdGggY2FuIGxlYWQgdG8gY29uZnVzaW9uLiA8YnIgLz4NCg0KPC9saT4NCjxsaT5BbiBv cHRpb25hbCBBVlBzIHdpdGggZHVhbCBwdXJwb3NlLCBpLmUuIHRvIGNhcnJ5IGFwcGxpY2F0aW9u cyBkYXRhIGFzIHdlbGwgYXMgdG8gaW5kaWNhdGUgc3VwcG9ydCBmb3Igb25lIG9yIG1vcmUgZmVh dHVyZXMuIFRoaXMgaGFzIGEgdGVuZGVuY3kgdG8gaW50cm9kdWNlIGludGVycHJldGF0aW9uIGlz c3Vlcy48YnIgLz4NCg0KPC9saT4NCjxsaT5BZGRpbmcgb25lIG9yIG1vcmUgb3B0aW9uYWwgQVZQ cyBhbmQgaW5kaWNhdGluZyAodXN1YWxseSB3aXRoaW4gZGVzY3JpcHRpdmUgdGV4dCBmb3IgdGhl IGNvbW1hbmQpIHRoYXQgYXQgbGVhc3Qgb25lIG9mIHRoZW0gaGFzIHRvIGJlIHByZXNlbnQgaW4g dGhlIGNvbW1hbmQuIFRoaXMgZXNzZW50aWFsbHkgY2lyY3VtdmVudGluZyB0aGUgQUJORiBhbmQg aXMgZXF1aXZhbGVudCB0byBhZGRpbmcgYSBtYW5kYXRvcnkgQVZQcyB0byB0aGUgY29tbWFuZC48 YnIgLz4NCg0KPC9saT4NCjwvdWw+PHA+VGhlc2UgcHJhY3RpY2VzIGdlbmVyYWxseSByZXN1bHQg aW4gaW50ZXJvcGVyYWJpbGl0eSBpc3N1ZXMgYW5kIHNob3VsZCBiZSBhdm9pZGVkIGFzIG11Y2gg YXMgcG9zc2libGUuDQo8L3A+DQo8YSBuYW1lPSJhbmNob3I5Ij48L2E+PGJyIC8+PGhyIC8+DQo8 dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNs YXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVm PSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJy ZmMuc2VjdGlvbi40LjMuMiI+PC9hPjxoMz40LjMuMi4mbmJzcDsNCkRlbGV0aW5nIEFWUHMgZnJv bSBhIGNvbW1hbmQ8L2gzPg0KDQo8cD5XaGVuIGRlbGV0aW5nIGFuIEFWUCBmcm9tIGEgY29tbWFu ZCwgdGhlIGZvbGxvd2luZyBjYXNlcyBuZWVkIHRvIGJlIGRpZmZlcmVudGlhdGVkOiA8YnIgLz4N CjxiciAvPg0KIDwvcD4NCjx1bCBjbGFzcz0idGV4dCI+DQo8bGk+RGVsZXRpbmcgYW4gQVZQIHRo YXQgaXMgaW5kaWNhdGVkIGFzIHsgQVZQIH0gaW4gdGhlIGNvbW1hbmQncyBDQ0Ygc3ludGF4IHNw ZWNpZmljYXRpb24sIHdoYXRldmVyIHRoZSBzZXR0aW5nIG9mIHRoZSBNLWJpdCBzZXQuIFRoaXMg bWVhbnMgdGhlIGRlZmluaXRpb24gb2YgYSBuZXcgY29tbWFuZC4gSW4gdGhpcyBjYXNlLCBhIG5l dyBjb21tYW5kIGNvZGUgYW5kIHN1YnNlcXVlbnRseSBhIG5ldyBEaWFtZXRlciBhcHBsaWNhdGlv biBoYXZlIHRvIGJlIHNwZWNpZmllZC48YnIgLz4NCg0KPC9saT4NCjxsaT5EZWxldGluZyBhbiBB VlAgd2l0aCBNLWJpdCBzZXQgdGhhdCBpcyBpbmRpY2F0ZWQgYXMgWyBBVlAgXSBpbiB0aGUgY29t bWFuZCdzIENDRiBzeW50YXggc3BlY2lmaWNhdGlvbi4gTm8gbmV3IGNvbW1hbmQgY29kZSBoYXMg dG8gYmUgc3BlY2lmaWVkIGJ1dCB0aGUgZGVmaW5pdGlvbiBvZiBhIG5ldyBEaWFtZXRlciBhcHBs aWNhdGlvbiBpcyByZXF1aXJlZC48YnIgLz4NCg0KPC9saT4NCjxsaT5EZWxldGluZyBhbiBBVlAg d2l0aCB0aGUgTS1iaXQgY2xlYXJlZCB0aGF0IGlzIGluZGljYXRlZCBhcyBbIEFWUCBdIGluIHRo ZSBjb21tYW5kJ3MgQ0NGIHN5bnRheCBzcGVjaWZpY2F0aW9uLiBJbiB0aGlzIGNhc2UsIHRoZSBB VlAgY2FuIGJlIGRlbGV0ZWQgd2l0aG91dCBjb25zZXF1ZW5jZXMuPGJyIC8+DQo8YnIgLz4NCg0K PC9saT4NCjwvdWw+DQoNCjxwPklmIHBvc3NpYmxlIGFwcGxpY2F0aW9uIGRlc2lnbmVycyBzaG91 bGQgYXR0ZW1wdCB0aGUgcmV1c2UgdGhlIGNvbW1hbmQncyBDQ0Ygc3ludGF4IHNwZWNpZmljYXRp b24gd2l0aG91dCBtb2RpZmljYXRpb24gYW5kIHNpbXBseSBpZ25vcmUgKGJ1dCBub3QgZGVsZXRl KSBhbnkgb3B0aW9uYWwgQVZQIHRoYXQgd2lsbCBub3QgYmUgdXNlZC4gVGhpcyBpcyB0byBtYWlu dGFpbiBjb21wYXRpYmlsaXR5IHdpdGggZXhpc3RpbmcgYXBwbGljYXRpb25zIHRoYXQgd2lsbCBu b3Qga25vdyBhYm91dCB0aGUgbmV3IGZ1bmN0aW9uYWxpdHkgYXMgd2VsbCBhcyBtYWludGFpbiB0 aGUgaW50ZWdyaXR5IG9mIGV4aXN0aW5nIGRpY3Rpb25hcmllcy4NCjwvcD4NCjxhIG5hbWU9ImFu Y2hvcjEwIj48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFk ZGluZz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRy Pjx0ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90 ZD48L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi40LjQiPjwvYT48aDM+NC40LiZu YnNwOw0KUmV1c2luZyBleGlzdGluZyBBVlBzPC9oMz4NCg0KPHA+VGhpcyBzZWN0aW9uIGRpc2N1 c3NlcyBydWxlcyBpbiByZXVzaW5nIGV4aXN0aW5nIEFWUCB3aGVuIHJldXNpbmcgYW4gZXhpc3Rp bmcgY29tbWFuZCBvciBkZWZpbmluZyBhIG5ldyBjb21tYW5kIGluIGEgbmV3IGFwcGxpY2F0aW9u Lg0KPC9wPg0KPGEgbmFtZT0iYW5jaG9yMTEiPjwvYT48YnIgLz48aHIgLz4NCjx0YWJsZSBzdW1t YXJ5PSJsYXlvdXQiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMiIgY2xhc3M9IlRPQ2J1 ZyIgYWxpZ249InJpZ2h0Ij48dHI+PHRkIGNsYXNzPSJUT0NidWciPjxhIGhyZWY9IiN0b2MiPiZu YnNwO1RPQyZuYnNwOzwvYT48L3RkPjwvdHI+PC90YWJsZT4NCjxhIG5hbWU9InJmYy5zZWN0aW9u LjQuNC4xIj48L2E+PGgzPjQuNC4xLiZuYnNwOw0KU2V0dGluZyBvZiB0aGUgQVZQIGZsYWdzPC9o Mz4NCg0KPHA+V2hlbiByZXVzaW5nIEFWUHMgaW4gYSBuZXcgYXBwbGljYXRpb24sIHRoZSBBVlAg ZmxhZyBzZXR0aW5nLCBzdWNoIGFzIHRoZSBtYW5kYXRvcnkgZmxhZyAoJ00nLWJpdCksIGhhcyB0 byBiZSByZS1ldmFsdWF0ZWQgZm9yIGEgbmV3IERpYW1ldGVyIGFwcGxpY2F0aW9uIGFuZCwgaWYg bmVjZXNzYXJ5LCBldmVuIGZvciBldmVyeSBjb21tYW5kIHdpdGhpbiB0aGUgYXBwbGljYXRpb24u IEluIGdlbmVyYWwsIGZvciBBVlBzIGRlZmluZWQgb3V0c2lkZSBvZiB0aGUgYmFzZSBwcm90b2Nv bCwgaXRzIG1hbmRhdG9yeSBjaGFyYWN0ZXJpc3RpY3MgYXJlIHRpZWQgdG8gaXRzIHJvbGUgd2l0 aGluIGFuIGFwcGxpY2F0aW9uIGFuZCBjb21tYW5kLg0KPC9wPg0KPHA+QWxsIG90aGVyIEFWUCBm bGFncyBzaGFsbCByZW1haW4gdW5jaGFuZ2VkDQo8L3A+DQo8YSBuYW1lPSJhbmNob3IxMiI+PC9h PjxiciAvPjxociAvPg0KPHRhYmxlIHN1bW1hcnk9ImxheW91dCIgY2VsbHBhZGRpbmc9IjAiIGNl bGxzcGFjaW5nPSIyIiBjbGFzcz0iVE9DYnVnIiBhbGlnbj0icmlnaHQiPjx0cj48dGQgY2xhc3M9 IlRPQ2J1ZyI+PGEgaHJlZj0iI3RvYyI+Jm5ic3A7VE9DJm5ic3A7PC9hPjwvdGQ+PC90cj48L3Rh YmxlPg0KPGEgbmFtZT0icmZjLnNlY3Rpb24uNC40LjIiPjwvYT48aDM+NC40LjIuJm5ic3A7DQpS ZXVzZSBvZiBBVlAgb2YgdHlwZSBFbnVtZXJhdGVkPC9oMz4NCg0KPHA+V2hlbiBtb2RpZnlpbmcg dGhlIHNldCBvZiB2YWx1ZXMgc3VwcG9ydGVkIGJ5IGFuIEFWUCBvZiB0eXBlIEVudW1lcmF0ZWQs IHRoaXMgbWVhbnMgZGVmaW5pbmcgYSBuZXcgQVZQLiBNb2RpZnlpbmcgdGhlIHNldCBvZiBFbnVt ZXJhdGVkIHZhbHVlcyBpbmNsdWRlcyBhZGRpbmcgYSB2YWx1ZSBvciBkZXByZWNhdGluZyB0aGUg dXNlIG9mIGEgdmFsdWUgZGVmaW5lZCBpbml0aWFsbHkgZm9yIHRoZSBBVlAuIERlZmluaW5nIGEg bmV3IEFWUCB3aWxsIGF2b2lkIGludGVyb3BlcmFiaWxpdHkgaXNzdWVzLg0KPC9wPg0KPGEgbmFt ZT0iYW5jaG9yMTMiPjwvYT48YnIgLz48aHIgLz4NCjx0YWJsZSBzdW1tYXJ5PSJsYXlvdXQiIGNl bGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMiIgY2xhc3M9IlRPQ2J1ZyIgYWxpZ249InJpZ2h0 Ij48dHI+PHRkIGNsYXNzPSJUT0NidWciPjxhIGhyZWY9IiN0b2MiPiZuYnNwO1RPQyZuYnNwOzwv YT48L3RkPjwvdHI+PC90YWJsZT4NCjxhIG5hbWU9InJmYy5zZWN0aW9uLjUiPjwvYT48aDM+NS4m bmJzcDsNCkRlZmluaW5nIG5ldyBEaWFtZXRlciBhcHBsaWNhdGlvbnM8L2gzPg0KDQo8YSBuYW1l PSJhbmNob3IxNCI+PC9hPjxiciAvPjxociAvPg0KPHRhYmxlIHN1bW1hcnk9ImxheW91dCIgY2Vs bHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIyIiBjbGFzcz0iVE9DYnVnIiBhbGlnbj0icmlnaHQi Pjx0cj48dGQgY2xhc3M9IlRPQ2J1ZyI+PGEgaHJlZj0iI3RvYyI+Jm5ic3A7VE9DJm5ic3A7PC9h PjwvdGQ+PC90cj48L3RhYmxlPg0KPGEgbmFtZT0icmZjLnNlY3Rpb24uNS4xIj48L2E+PGgzPjUu MS4mbmJzcDsNCkludHJvZHVjdGlvbjwvaDM+DQoNCjxwPlRoZSBnZW5lcmFsIHJlY29tbWVuZGF0 aW9uIGZvciBEaWFtZXRlciBleHRlbnNpYmlsaXR5IGlzIHRvIHJldXNlIGNvbW1hbmRzLCBBVlBz IGFuZCBBVlAgdmFsdWVzIGFzIG11Y2ggYXMgcG9zc2libGUuIEhvd2V2ZXIsIHNvbWUgb2YgdGhl IGV4dGVuc2liaWxpdHkgcnVsZXMgZGVzY3JpYmVkIGluIHRoZSBwcmV2aW91cyBzZWN0aW9ucyBh bHNvIGFwcGx5IHRvIHNjZW5hcmlvcyB3aGVyZSBhIGRlc2lnbmVyIGlzIHRyeWluZyB0byBkZWZp bmUgYSBjb21wbGV0ZWx5IG5ldyBEaWFtZXRlciBhcHBsaWNhdGlvbi4NCjwvcD4NCjxwPlRoaXMg c2VjdGlvbiBkaXNjdXNzZXMgdGhlIGNhc2Ugd2hlcmUgbmV3IGFwcGxpY2F0aW9ucyBoYXZlIHJl cXVpcmVtZW50cyB0aGF0IGNhbm5vdCBiZSBmaWxsZWQgYnkgZXhpc3RpbmcgYXBwbGljYXRpb25z IGFuZCB3b3VsZCByZXF1aXJlIGRlZmluaXRpb24gb2YgY29tcGxldGVseSBuZXcgY29tbWFuZHMs IEFWUHMgYW5kL29yIEFWUCB2YWx1ZXMuIFR5cGljYWxseSwgdGhlcmUgaXMgbGl0dGxlIGFtYmln dWl0eSBhYm91dCB0aGUgZGVjaXNpb24gdG8gY3JlYXRlIHRoZXNlIHR5cGVzIG9mIGFwcGxpY2F0 aW9ucy4gU29tZSBleGFtcGxlcyBhcmUgdGhlIGludGVyZmFjZXMgZGVmaW5lZCBmb3IgdGhlIElQ IE11bHRpbWVkaWEgU3Vic3lzdGVtIG9mIDNHUFAsIGkuZS4gQ3gvRHggKDxhIGNsYXNzPSdpbmZv JyBocmVmPScjVFMyOS4yMjgnPltUUzI5LjIyOF08c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0n aW5mbyc+M3JkIEdlbmVyYXRpb24gUGFydG5lcnNoaXAgUHJvamVjdCwgJmxkcXVvOzNHUFAgVFMg MjkuMjI4OyBUZWNobmljYWwgU3BlY2lmaWNhdGlvbiBHcm91cCBDb3JlIE5ldHdvcmsgYW5kIFRl cm1pbmFsczsgSVAgTXVsdGltZWRpYSAoSU0pIFN1YnN5c3RlbSBDeCBhbmQgRHggSW50ZXJmYWNl czsgU2lnbmFsbGluZyBmbG93cyBhbmQgbWVzc2FnZSBjb250ZW50cywmcmRxdW87IC48L3NwYW4+ PHNwYW4+KTwvc3Bhbj48L2E+IGFuZCA8YSBjbGFzcz0naW5mbycgaHJlZj0nI1RTMjkuMjI5Jz5b VFMyOS4yMjldPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPjNyZCBHZW5lcmF0aW9u IFBhcnRuZXJzaGlwIFByb2plY3QsICZsZHF1bzszR1BQIFRTIDI5LjIyOTsgVGVjaG5pY2FsIFNw ZWNpZmljYXRpb24gR3JvdXAgQ29yZSBOZXR3b3JrIGFuZCBUZXJtaW5hbHM7IEN4IGFuZCBEeCBp bnRlcmZhY2VzIGJhc2VkIG9uIHRoZSBEaWFtZXRlciBwcm90b2NvbDsgUHJvdG9jb2wgZGV0YWls cywmcmRxdW87IC48L3NwYW4+PHNwYW4+KTwvc3Bhbj48L2E+KSwgU2ggKDxhIGNsYXNzPSdpbmZv JyBocmVmPScjVFMyOS4zMjgnPltUUzI5LjMyOF08c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0n aW5mbyc+M3JkIEdlbmVyYXRpb24gUGFydG5lcnNoaXAgUHJvamVjdCwgJmxkcXVvOzNHUFAgVFMg MjkuMzI4OyBUZWNobmljYWwgU3BlY2lmaWNhdGlvbiBHcm91cCBDb3JlIE5ldHdvcmsgYW5kIFRl cm1pbmFsczsgSVAgTXVsdGltZWRpYSAoSU0pIFN1YnN5c3RlbSBTaCBpbnRlcmZhY2U7IHNpZ25h bGxpbmcgZmxvd3MgYW5kIG1lc3NhZ2UgY29udGVudCwmcmRxdW87IC48L3NwYW4+PHNwYW4+KTwv c3Bhbj48L2E+IGFuZCA8YSBjbGFzcz0naW5mbycgaHJlZj0nI1RTMjkuMzI5Jz5bVFMyOS4zMjld PHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPjNyZCBHZW5lcmF0aW9uIFBhcnRuZXJz aGlwIFByb2plY3QsICZsZHF1bzszR1BQIFRTIDI5LjMyOTsgVGVjaG5pY2FsIFNwZWNpZmljYXRp b24gR3JvdXAgQ29yZSBOZXR3b3JrIGFuZCBUZXJtaW5hbHM7IFNoIEludGVyZmFjZSBiYXNlZCBv biB0aGUgRGlhbWV0ZXIgcHJvdG9jb2w7IFByb3RvY29sIGRldGFpbHMsJnJkcXVvOyAuPC9zcGFu PjxzcGFuPik8L3NwYW4+PC9hPikgZXRjLg0KPC9wPg0KPHA+QXBwbGljYXRpb24gZGVzaWduZXJz IHNob3VsZCBhbHNvIGZvbGxvdyB0aGUgdGhlbWUgb2YgRGlhbWV0ZXIgZXh0ZW5zaWJpbGl0eSB3 aGljaCBpbiB0aGlzIGNhc2UgbWVhbnMgdG8gaW1wb3J0IGV4aXN0aW5nIEFWUHMgYW5kIEFWUCB2 YWx1ZXMgZm9yIGFueSBuZXdseSBkZWZpbmVkIGNvbW1hbmRzLiBJbiBjZXJ0YWluIGNhc2VzIHdo ZXJlIGFjY291bnRpbmcgd2lsbCBiZSB1c2VkLCB0aGUgbW9kZWxzIGRlc2NyaWJlZCBpbiA8YSBj bGFzcz0naW5mbycgaHJlZj0nI290aGVyLWFjY291bnRpbmcnPlNlY3Rpb24mbmJzcDs1LjEwPHNw YW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPkRpYW1ldGVyIGFjY291bnRpbmcgc3VwcG9y dDwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4gc2hvdWxkIGFsc28gYmUgY29uc2lkZXJlZC4gVGhv dWdoIHNvbWUgZGVjaXNpb25zIG1heSBiZSBjbGVhciwgZGVzaWduZXJzIHNob3VsZCBhbHNvIGNv bnNpZGVyIGNlcnRhaW4gYXNwZWN0cyBvZiBkZWZpbmluZyBhIG5ldyBhcHBsaWNhdGlvbi4gU29t ZSBvZiB0aGVzZSBhc3BlY3RzIGFyZSBkZXNjcmliZWQgaW4gZm9sbG93aW5nIHNlY3Rpb25zLg0K PC9wPg0KPGEgbmFtZT0iYW5jaG9yMTUiPjwvYT48YnIgLz48aHIgLz4NCjx0YWJsZSBzdW1tYXJ5 PSJsYXlvdXQiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMiIgY2xhc3M9IlRPQ2J1ZyIg YWxpZ249InJpZ2h0Ij48dHI+PHRkIGNsYXNzPSJUT0NidWciPjxhIGhyZWY9IiN0b2MiPiZuYnNw O1RPQyZuYnNwOzwvYT48L3RkPjwvdHI+PC90YWJsZT4NCjxhIG5hbWU9InJmYy5zZWN0aW9uLjUu MiI+PC9hPjxoMz41LjIuJm5ic3A7DQpEZWZpbmluZyBuZXcgY29tbWFuZHM8L2gzPg0KDQo8cD5B cyBhIGdlbmVyYWwgcmVjb21tZW5kYXRpb24sIFJldXNpbmcgYXMgbXVjaCBhcyBwb3NzaWJsZSBv ZiBleGlzdGluZyBtYXRlcmlhbCBpcyBlbmNvdXJhZ2VkIHdoZW4gZGVmaW5pbmcgbmV3IGNvbW1h bmRzLiBQcm90b2NvbCBkZXNpZ25lcnMgY2FuIHRodXMgdXNlZnVsbHkgYmVuZWZpdCBmcm9tIHRo ZSBleHBlcmllbmNlIGdhaW5lZCB3aXRoIHRoZSBpbXBsZW1lbnRhdGlvbiBvZiBleGlzdGluZyBj b21tYW5kcy4gVGhpcyBpbmNsdWRlcyBnb29kIHByYXRpY2VzIHRvIHJldXNlIGJ1dCBhbHNvIGtu b3duIG1pc3Rha2VzIG5vdCB0byByZXBlYXQuIFRoZXJlZm9yZSBpdCBpcyBhZHZpc2FibGUgdG8g YXZvaWQgdGhlIGRlZmluaXRpb24gb2YgYSBjb21tYW5kIGZyb20gc2NyYXRjaCBhbmQgcmF0aGVy IHRha2UgYXMgYW4gZXhhbXBsZSBhbiBleGlzdGluZyBjb21tYW5kIHRoYXQgd291bGQgYmUgZnVu Y3Rpb25hbGx5IGNsb3NlIHRvIGNvbW1hbmQgdW5kZXIgZGVmaW5pdGlvbi4NCjwvcD4NCjxwPk1v cmVvdmVyLCB0aGUgbmV3IGNvbW1hbmQncyBDQ0Ygc2hvdWxkIGJlIGNhcmVmdWxseSBkZWZpbmVk IHdoZW4gY29uc2lkZXJpbmcgYXBwbGljYWJpbGl0eSBhbmQgZXh0ZW5zaWJpbGl0eSBvZiB0aGUg YXBwbGljYXRpb24uIElmIG1vc3Qgb2YgdGhlIEFWUHMgY29udGFpbmVkIGluIHRoZSBjb21tYW5k IGFyZSBpbmRpY2F0ZWQgYXMgZml4ZWQgb3IgcmVxdWlyZWQsIGl0IG1pZ2h0IGJlIGRpZmZpY3Vs dCB0byByZXVzZSB0aGUgc2FtZSBjb21tYW5kIGFuZCB0aGVyZWZvcmUgdGhlIHNhbWUgYXBwbGlj YXRpb24gaWYgdGhlIGNvbnRleHQgaGFzIHNsaWdodGx5IGNoYW5nZWQgYW5kIHNvbWUgQVZQcyBi ZWNvbWUgb2Jzb2xldGUuIERlZmluaW5nIGEgY29tbWFuZCB3aXRoIG1vc3Qgb2YgdGhlIEFWUHMg aW5kaWNhdGVkIGFzIG9wdGlvbmFsIG11c3Qgbm90IGJlIHNlZW4gYXMgYSBzdWItb3B0aW1hbCBk ZXNpZ24gaW50cm9kdWNpbmcgdG9vIG11Y2ggZmxleGliaWxpdHkgaW4gdGhlIHByb3RvY29sLiBU aGUgcHJvdG9jb2wgZGVzaWduZXJzIGFyZSBvbmx5IGFkdmlzZWQgdG8gY2xlYXJseSBzdGF0ZSB0 aGUgY29uZGl0aW9uIG9mIHByZXNlbmNlIG9mIHRoZXNlIEFWUHMgYW5kIHByb3Blcmx5IGRlZmlu ZSB0aGUgY29ycmVzcG9uZGluZyBiZWhhdmlvdXIgb2YgdGhlIERpYW1ldGVyIG5vZGVzIHdoZW4g dGhlc2UgQVZQcyBhcmUgYWJzZW50IGZyb20gdGhlIGNvbW1hbmQuDQo8L3A+DQo8cD5JbiB0aGUg c2FtZSB3YXksIHRoZSBDQ0Ygc2hvdWxkIGJlIGRlZmluZWQgaW4gYSB3YXkgdGhhdCBpdCB3aWxs IGJlIHBvc3NpYmxlIHRvIGFkZCBhbnkgYXJiaXRyYXJ5IG9wdGlvbmFsIEFWUHMgd2l0aCB0aGUg TS1iaXQgY2xlYXJlZCAoaW5jbHVkaW5nIHZlbmRvci1zcGVjaWZpYyBBVlBzKSB3aXRob3V0IG1v ZGlmeWluZyB0aGUgYXBwbGljYXRpb24uIEZvciB0aGlzIHB1cnBvc2UsIGl0IGlzIHN0cm9uZ2x5 IHJlY29tbWVuZGVkIHRvIGFkZCAiKiBbQVZQXSIgaW4gdGhlIGNvbW1hbmQncyBDQ0YgdGhhdCB3 aWxsIGFsbG93IHRoZSBhZGRpdGlvbiBvZiBhbnkgYXJiaXRyYXJ5IEFWUCBhcyBkZXNjcmliZWQg aW4gPGEgY2xhc3M9J2luZm8nIGhyZWY9JyNJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXMnPltJJiM4 MjA5O0QuaWV0ZiYjODIwOTtkaW1lJiM4MjA5O3JmYzM1ODhiaXNdPHNwYW4+ICg8L3NwYW4+PHNw YW4gY2xhc3M9J2luZm8nPkZhamFyZG8sIFYuLCBBcmtrbywgSi4sIExvdWdobmV5LCBKLiwgYW5k IEcuIFpvcm4sICZsZHF1bztEaWFtZXRlciBCYXNlIFByb3RvY29sLCZyZHF1bzsgSnVuZSZuYnNw OzIwMTIuPC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPi4NCjwvcD4NCjxhIG5hbWU9ImFuY2hvcjE2 Ij48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGluZz0i MCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0ZCBj bGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48L3Ry PjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi41LjMiPjwvYT48aDM+NS4zLiZuYnNwOw0K VXNlIG9mIEFwcGxpY2F0aW9uLUlkIGluIGEgbWVzc2FnZTwvaDM+DQoNCjxwPldoZW4gZGVzaWdu aW5nIG5ldyBhcHBsaWNhdGlvbnMsIGRlc2lnbmVycyBzaG91bGQgc3BlY2lmeSB0aGF0IHRoZSBh cHBsaWNhdGlvbiBJRCBjYXJyaWVkIGluIGFsbCBzZXNzaW9uIGxldmVsIG1lc3NhZ2VzIG11c3Qg YmUgdGhlIGFwcGxpY2F0aW9uIElEIG9mIHRoZSBhcHBsaWNhdGlvbiB1c2luZyB0aG9zZSBtZXNz YWdlcy4gVGhpcyBpbmNsdWRlcyB0aGUgc2Vzc2lvbiBsZXZlbCBtZXNzYWdlcyBkZWZpbmVkIGlu IGJhc2UgcHJvdG9jb2wsIGkuZS4sIFJBUi9SQUEsIFNUUi9TVEEsIEFTUi9BU0EgYW5kIHBvc3Np Ymx5IEFDUi9BQ0EgaW4gdGhlIGNvdXBsZWQgYWNjb3VudGluZyBtb2RlbCwgc2VlIDxhIGNsYXNz PSdpbmZvJyBocmVmPScjb3RoZXItYWNjb3VudGluZyc+U2VjdGlvbiZuYnNwOzUuMTA8c3Bhbj4g KDwvc3Bhbj48c3BhbiBjbGFzcz0naW5mbyc+RGlhbWV0ZXIgYWNjb3VudGluZyBzdXBwb3J0PC9z cGFuPjxzcGFuPik8L3NwYW4+PC9hPi4gRXhpc3Rpbmcgc3BlY2lmaWNhdGlvbnMgbWF5IG5vdCBh ZGhlcmUgdG8gdGhpcyBydWxlIGZvciBoaXN0b3JpY2FsIG9yIG90aGVyIHJlYXNvbnMuIEhvd2V2 ZXIsIHRoaXMgc2NoZW1lIHNob3VsZCBiZSBmb2xsb3dlZCB0byBhdm9pZCBwb3NzaWJsZSByb3V0 aW5nIHByb2JsZW1zIGZvciB0aGVzZSBtZXNzYWdlcy4NCjwvcD4NCjxwPkluIGdlbmVyYWwsIHdo ZW4gYSBuZXcgYXBwbGljYXRpb24gaGFzIGJlZW4gYWxsb2NhdGVkIHdpdGggYSBuZXcgYXBwbGlj YXRpb24gaWQgYW5kIGl0IGFsc28gcmV1c2VzIGV4aXN0aW5nIGNvbW1hbmRzIHdpdGggb3Igd2l0 aG91dCBtb2RpZmljYXRpb25zIChTZWMgNC4xKSwgaXQgbXVzdCB1c2UgdGhlIG5ld2x5IGFsbG9j YXRlZCBhcHBsaWNhdGlvbiBpZCBpbiB0aGUgaGVhZGVyIGFuZCBpbiBhbGwgcmVsZXZhbnQgYXBw bGljYXRpb24gaWQgQVZQcyAoQXV0aC1BcHBsaWNhdGlvbi1JZCBvciBBY2N0LUFwcGxpY2F0aW9u LUlkKSBwcmVzZW50IGluIHRoZSBjb21tYW5kcyBtZXNzYWdlIGJvZHkuDQo8L3A+DQo8cD5BZGRp dGlvbmFsbHksIGFwcGxpY2F0aW9uIGRlc2lnbnMgdXNpbmcgVmVuZG9yLVNwZWNpZmljLUFwcGxp Y2F0aW9uLUlkIEFWUCBzaG91bGQgbm90IHVzZSB0aGUgVmVuZG9yLUlkIEFWUCB0byBmdXJ0aGVy IGRpc3NlY3Qgb3IgZGlmZmVyZW50aWF0ZSB0aGUgdmVuZG9yLXNwZWNpZmljYXRpb24gYXBwbGlj YXRpb24gaWQuIERpYW1ldGVyIHJvdXRpbmcgaXMgbm90IGJhc2VkIG9uIHRoZSBWZW5kb3ItSWQu IEFzIHN1Y2gsIHRoZSBWZW5kb3ItSUQgc2hvdWxkIG5vdCBiZSB1c2VkIGFzIGFuIGFkZGl0aW9u YWwgaW5wdXQgZm9yIHJvdXRpbmcgb3IgZGVsaXZlcnkgb2YgbWVzc2FnZXMuIEluIGdlbmVyYWws IHRoZSBWZW5kb3ItSWQgQVZQIGlzIGFuIGluZm9ybWF0aW9uYWwgQVZQIG9ubHkgYW5kIGtlcHQg Zm9yIGJhY2t3YXJkIGNvbXBhdGliaWxpdHkgcmVhc29ucy4NCjwvcD4NCjxhIG5hbWU9ImFuY2hv cjE3Ij48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGlu Zz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0 ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48 L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi41LjQiPjwvYT48aDM+NS40LiZuYnNw Ow0KQXBwbGljYXRpb24gc3BlY2lmaWMgU2Vzc2lvbiBTdGF0ZSBNYWNoaW5lPC9oMz4NCg0KPHA+ U2VjdGlvbiA4IG9mIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjSS1ELmlldGYtZGltZS1yZmMzNTg4 YmlzJz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYjODIwOTtyZmMzNTg4YmlzXTxzcGFuPiAo PC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRvLCBWLiwgQXJra28sIEouLCBMb3VnaG5l eSwgSi4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0ZXIgQmFzZSBQcm90b2NvbCwmcmRxdW87 IEp1bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4gcHJvdmlkZXMgc2Vzc2lv biBzdGF0ZSBtYWNoaW5lcyBmb3IgYXV0aGVudGljYXRpb24sIGF1dGhvcml6YXRpb24gYW5kIGFj Y291bnRpbmcgKEFBQSkgc2VydmljZXMuIFdoZW4gYSBuZXcgYXBwbGljYXRpb24gaXMgYmVpbmcg ZGVmaW5lZCB0aGF0IGNhbm5vdCBjbGVhcmx5IGJlIGNhdGVnb3JpemVkIGludG8gYW55IG9mIHRo ZXNlIHNlcnZpY2VzIGl0IGlzIHJlY29tbWVuZGVkIHRoYXQgdGhlIGFwcGxpY2F0aW9uIGl0c2Vs ZiBkZWZpbmUgaXRzIG93biBzZXNzaW9uIHN0YXRlIG1hY2hpbmUuIFRoZSBleGlzdGluZyBzZXNz aW9uIHN0YXRlIG1hY2hpbmVzIGRlZmluZWQgYnkgPGEgY2xhc3M9J2luZm8nIGhyZWY9JyNJLUQu aWV0Zi1kaW1lLXJmYzM1ODhiaXMnPltJJiM4MjA5O0QuaWV0ZiYjODIwOTtkaW1lJiM4MjA5O3Jm YzM1ODhiaXNdPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPkZhamFyZG8sIFYuLCBB cmtrbywgSi4sIExvdWdobmV5LCBKLiwgYW5kIEcuIFpvcm4sICZsZHF1bztEaWFtZXRlciBCYXNl IFByb3RvY29sLCZyZHF1bzsgSnVuZSZuYnNwOzIwMTIuPC9zcGFuPjxzcGFuPik8L3NwYW4+PC9h PiBpcyBub3QgaW50ZW5kZWQgZm9yIGdlbmVyYWwgdXNlIGJleW9uZCBBQUEgc2VydmljZXMsIHRo ZXJlZm9yZSBhbnkgYmVoYXZpb3Igbm90IGNvdmVyZWQgYnkgdGhhdCBjYXRlZ29yeSB3b3VsZCBu b3QgZml0IHdlbGwuIFN1cHBvcnQgZm9yIHNlcnZlciBpbml0aWF0ZWQgcmVxdWVzdCBpcyBhIGNs ZWFyIGV4YW1wbGUgd2hlcmUgYW4gYXBwbGljYXRpb24gc3BlY2lmaWMgc2Vzc2lvbiBzdGF0ZSBt YWNoaW5lIHdvdWxkIGJlIG5lZWRlZCwgZm9yIGV4YW1wbGUsIHRoZSBSdyBpbnRlcmZhY2UgZm9y IElUVS1UIHB1c2ggbW9kZWwgKCBjZi48YSBjbGFzcz0naW5mbycgaHJlZj0nI1EuMzMwMy4zJz5b US4zMzAzLjNdPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPjNyZCBHZW5lcmF0aW9u IFBhcnRuZXJzaGlwIFByb2plY3QsICZsZHF1bztJVFUtVCBSZWNvbW1lbmRhdGlvbiBRLjMzMDMu MywgJnF1b3Q7UmVzb3VyY2UgY29udHJvbCBwcm90b2NvbCBuby4gMyAocmNwMyk6IFByb3RvY29s IGF0IHRoZSBSdyBpbnRlcmZhY2UgYmV0d2VlbiB0aGUgUG9saWN5IERlY2lzaW9uIFBoeXNpY2Fs IEVudGl0eSAoUEQtUEUpIGFuZCB0aGUgUG9saWN5IEVuZm9yY2VtZW50IFBoeXNpY2FsIEVudGl0 eSAoUEUtUEUpOiBEaWFtZXRlciZxdW90OywmcmRxdW87IDIwMDguPC9zcGFuPjxzcGFuPik8L3Nw YW4+PC9hPikuDQo8L3A+DQo8YSBuYW1lPSJhbmNob3IxOCI+PC9hPjxiciAvPjxociAvPg0KPHRh YmxlIHN1bW1hcnk9ImxheW91dCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIyIiBjbGFz cz0iVE9DYnVnIiBhbGlnbj0icmlnaHQiPjx0cj48dGQgY2xhc3M9IlRPQ2J1ZyI+PGEgaHJlZj0i I3RvYyI+Jm5ic3A7VE9DJm5ic3A7PC9hPjwvdGQ+PC90cj48L3RhYmxlPg0KPGEgbmFtZT0icmZj LnNlY3Rpb24uNS41Ij48L2E+PGgzPjUuNS4mbmJzcDsNClNlc3Npb24tSWQgQVZQIGFuZCBzZXNz aW9uIG1hbmFnZW1lbnQ8L2gzPg0KDQo8cD5EaWFtZXRlciBhcHBsaWNhdGlvbnMgYXJlIHVzdWFs bHkgZGVzaWduZWQgd2l0aCB0aGUgYWltIG9mIG1hbmFnaW5nIHVzZXIgc2Vzc2lvbnMsIGUuZy4g bmV0d29yayBhY2Nlc3Mgc2Vzc2lvbiAoTkFTUkVRIGFwcGxpY2F0aW9uIDxhIGNsYXNzPSdpbmZv JyBocmVmPScjUkZDNDAwNSc+W1JGQzQwMDVdPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2lu Zm8nPlAuIENhbGhvdW4gZXQgYWwuLCAmbGRxdW87RGlhbWV0ZXIgTmV0d29yayBBY2Nlc3MgU2Vy dmVyIEFwcGxpY2F0aW9uLCZyZHF1bzsgQXVndXN0Jm5ic3A7MjAwNS48L3NwYW4+PHNwYW4+KTwv c3Bhbj48L2E+KSBvciBzcGVjaWZpYyBzZXJ2aWNlIGFjY2VzcyBzZXNzaW9uIChEaWFtZXRlciBT SVAgYXBwbGljYXRpb24gPGEgY2xhc3M9J2luZm8nIGhyZWY9JyNSRkM0NzQwJz5bUkZDNDc0MF08 c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0naW5mbyc+TS4gR2FyY2lhLU1hcnRpbiBldCBhbC4s ICZsZHF1bztEaWFtZXRlciBTZXNzaW9uIEluaXRpYXRpb24gUHJvdG9jb2wgKFNJUCkgQXBwbGlj YXRpb24sJnJkcXVvOyBOb3ZlbWJlciZuYnNwOzIwMDYuPC9zcGFuPjxzcGFuPik8L3NwYW4+PC9h PikuIEluIHRoZSBEaWFtZXRlciBiYXNlIHByb3RvY29sLCB0aGUgc2Vzc2lvbiBtYW5hZ2VtZW50 IGlzIGJhc2VkIG9uIHRoZSBTZXNzaW9uLUlkIEFWUCB0aGF0IGl0IHVzZWQgdG8gaWRlbnRpZnkg YSBnaXZlbiBzZXNzaW9uIGFuZCBhbGwgdGhlIERpYW1ldGVyIG1lc3NhZ2VzIGluY2x1ZGluZyB0 aGUgc2FtZSBTZXNzaW9uLUlkIHdpbGwgYmUgYm91bmQgdG8gdGhlIHNhbWUgc2Vzc2lvbi4gRGlh bWV0ZXItYmFzZWQgc2Vzc2lvbiBtYW5hZ2VtZW50IGFsc28gaW1wbGllcyB0aGF0IGJvdGggRGlh bWV0ZXIgY2xpZW50IGFuZCBzZXJ2ZXIgKGFuZCBwb3RlbnRpYWxseSBwcm94eSBhZ2VudHMgaW4g dGhlIGRpYW1ldGVyIHBhdGgpIGFyZSBtYWludGFpbmluZyBzZXNzaW9uIHN0YXRlIGluZm9ybWF0 aW9uIGFzc29jaWF0ZWQgd2l0aCB0aGUgU2Vzc2lvbi1JZCBjb250YWluZWQgaW4gdGhlIERpYW1l dGVyIG1lc3NhZ2VzLg0KPC9wPg0KPHA+SG93ZXZlciwgc29tZSBhcHBsaWNhdGlvbnMgbWF5IG5v dCBuZWVkIHRvIHJlbHkgb24gdGhlIFNlc3Npb24tSWQgdG8gaWRlbnRpZnkgYW5kIG1hbmFnZSB1 c2VyIHNlc3Npb25zIGJlY2F1c2Ugb3RoZXIgaW5mb3JtYXRpb24gY2FuIGJlIHVzZWQgaW5zdGVh ZCB0byBjb3JyZWxhdGUgRGlhbWV0ZXIgbWVzc2FnZXMuIEluZGVlZCwgdGhlIFVzZXItTmFtZSBB VlAgb3IgYW55IG90aGVyIHNwZWNpZmljIEFWUCBjYW4gYmUgcHJlc2VudCBpbiBldmVyeSBEaWFt ZXRlciBtZXNzYWdlIGFuZCB1c2VkIHRoZXJlZm9yZSBmb3IgbWVzc2FnZSBjb3JyZWxhdGlvbi4g VGhlcmUgbWlnaHQgZXZlbiBiZSBhcHBsaWNhdGlvbnMgZm9yIHdoaWNoIHRoZSBub3Rpb24gb2Yg RGlhbWV0ZXIgc2Vzc2lvbiBtYW5hZ2VtZW50IHdvdWxkIG5vdCBiZSByZXF1aXJlZCBhdCBhbGwu IEZvciBzdWNoIGFwcGxpY2F0aW9ucywgdGhlIEF1dGgtU2Vzc2lvbi1TdGF0ZSBBVlAgaXMgdXN1 YWxseSBzZXQgdG8gTk9fU1RBVEVfTUFJTlRBSU5FRCBpbiBhbGwgdGhlIERpYW1ldGVyIG1lc3Nh Z2VzIGFuZCB0aGVzZSBhcHBsaWNhdGlvbnMgYXJlIHRoZXJlZm9yZSBkZXNpZ25lZCBhcyBhIHNl dCBvZiBzdGFuZC1hbG9uZSB0cmFuc2FjdGlvbnMuIEV2ZW4gaWYgYW4gZXhwbGljaXQgYWNjZXNz IHNlc3Npb24gdGVybWluYXRpb24gaXMgcmVxdWlyZWQsIGFwcGxpY2F0aW9uLXNwZWNpZmljIGNv bW1hbmRzIGFyZSBkZWZpbmVkIGFuZCB1c2VkIGluc3RlYWQgb2YgdGhlIFNlc3Npb24tVGVybWlu YXRpb24tUmVxdWVzdC9BbnN3ZXIgKFNUUi9TVEEpIG9yIEFib3J0LVNlc3Npb24tUmVxdWVzdC9B bnN3ZXIgKEFTUi9BU0EpIGRlZmluZWQgaW4gdGhlIERpYW1ldGVyIGJhc2UgcHJvdG9jb2wuIElu IHN1Y2ggYSBjYXNlLCB0aGUgU2Vzc2lvbi1JZCBpcyBub3Qgc2lnbmlmaWNhbnQuDQo8L3A+DQo8 cD5CYXNlZCBvbiB0aGVzZSBjb25zaWRlcmF0aW9ucywgcHJvdG9jb2wgZGVzaWduZXJzIHNob3Vs ZCBjYXJlZnVsbHkgYXBwcmFpc2Ugd2hldGhlciB0aGUgYXBwbGljYXRpb24gY3VycmVudGx5IGRl ZmluZWQgcmVsaWVzIG9uIHRoZSBjb25jZXB0IG9mIHNlc3Npb24gbWFuYWdlbWVudCBhbmQgd2hl dGhlciB0aGUgU2Vzc2lvbi1JZCBkZWZpbmVkIGluIHRoZSBEaWFtZXRlciBCYXNlIHByb3RvY29s IHdvdWxkIGJlIHJlYWxseSB1c2VkIGZvciBjb3JyZWxhdGlvbiBvZiBtZXNzYWdlcyByZWxhdGVk IHRvIHRoZSBzYW1lIHNlc3Npb24uIElmIG5vdCwgdGhlIHByb3RvY29sIGRlc2lnbmVycyBjb3Vs ZCBkZWNpZGUgdG8gZGVmaW5lIGFwcGxpY2F0aW9uIGNvbW1hbmRzIHdpdGhvdXQgdGhlIFNlc3Np b24tSWQgQVZQLiBJZiBhbnkgc2Vzc2lvbiBtYW5hZ2VtZW50IGNvbmNlcHQgaXMgc3VwcG9ydGVk IGJ5IHRoZSBhcHBsaWNhdGlvbiB0aGUgYXBwbGljYXRpb24gZG9jdW1lbnRhdGlvbiBtdXN0IGNs ZWFybHkgc3BlY2lmeSBob3cgdGhlIHNlc3Npb24gaXMgaGFuZGxlZCBiZXR3ZWVuIGNsaWVudCBh bmQgc2VydmVyIChhcyBwb3NzaWJseSBEaWFtZXRlciBhZ2VudHMgaW4gdGhlIHBhdGgpLg0KPC9w Pg0KPGEgbmFtZT0iYW5jaG9yMTkiPjwvYT48YnIgLz48aHIgLz4NCjx0YWJsZSBzdW1tYXJ5PSJs YXlvdXQiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMiIgY2xhc3M9IlRPQ2J1ZyIgYWxp Z249InJpZ2h0Ij48dHI+PHRkIGNsYXNzPSJUT0NidWciPjxhIGhyZWY9IiN0b2MiPiZuYnNwO1RP QyZuYnNwOzwvYT48L3RkPjwvdHI+PC90YWJsZT4NCjxhIG5hbWU9InJmYy5zZWN0aW9uLjUuNiI+ PC9hPjxoMz41LjYuJm5ic3A7DQpBVlBzIGRlZmluZWQgYXMgQm9vbGVhbiBmbGFnPC9oMz4NCg0K PHA+VGhlIHR5cGUgRW51bWVyYXRlZCB3YXMgaW5pdGlhbGx5IGRlZmluZWQgdG8gcHJvdmlkZSBs aXN0IG9mIHZhbGlkIHZhbHVlcyBmb3IgYW4gQVZQIHdpdGggdGhlaXIgcmVzcGVjdGl2ZSBpbnRl cnByZXRhdGlvbiBkZXNjcmliZWQgaW4gdGhlIHNwZWNpZmljYXRpb24uIEZvciBpbnN0YW5jZSwg QVZQcyBvZiB0eXBlIEVudW1lcmF0ZWQgY2FuIGJlIHVzZWQgdG8gcHJvdmlkZSBmdXJ0aGVyIGlu Zm9ybWF0aW9uIG9uIHRoZSByZWFzb24gZm9yIHRoZSB0ZXJtaW5hdGlvbiBvZiBhIHNlc3Npb24g b3IgYSBzcGVjaWZpYyBhY3Rpb24gdG8gcGVyZm9ybSBvbiB0aGUgcmVjZXB0aW9uIG9mIHRoZSBy ZXF1ZXN0Lg0KPC9wPg0KPHA+SG93ZXZlciwgQVZQcyBvZiB0eXBlIEVudW1lcmF0ZWQgYXJlIHRv byBvZnRlbiB1c2VkIGFzIHNpbXBsZSBCb29sZWFuIGZsYWcsIGluZGljYXRpbmcgZm9yIGluc3Rh bmNlIGEgc3BlY2lmaWMgcGVybWlzc2lvbiBvciBjYXBhYmlsaXR5LCBhbmQgdGhlcmVmb3JlIG9u bHkgdHdvIHZhbHVlcyBhcmUgZGVmaW5lZCBlLmcuIFRSVUUvRkFMU0UsIEFVVE9SSVpFRC9VTkFV VEhPUklaRUQgb3IgU1VQUE9SVEVEL1VOU1VQUE9SVEVELiBUaGlzIGhhcyB0byBiZSBjb25zaWRl cmVkIGFzIGEgc3ViLW9wdGltYWwgZGVzaWduIGFzIHRoaXMgbGltaXRzIHRoZSBleHRlbnNpYmls aXR5IG9mIHRoZSBhcHBsaWNhdGlvbjogYW55IG5ldyBjYXBhYmlsaXR5L3Blcm1pc3Npb24gd291 bGQgaGF2ZSB0byBiZSBzdXBwb3J0ZWQgYnkgYSBuZXcgQVZQIG9yIG5ldyBFbnVtZXJhdGVkIHZh bHVlIG9mIHRoZSBhbHJlYWR5IGRlZmluZWQgQVZQIHRoYXQgd291bGQgY2F1c2UgaW4gY29uc2Vx dWVuY2UgYmFja3dhcmRzIGNvbXBhdGliaWxpdHkgaXNzdWVzIHdpdGggZXhpc3RpbmcgaW1wbGVt ZW50YXRpb25zLg0KPC9wPg0KPHA+SW5zdGVhZCBvZiBkZWZpbmluZyBFbnVtZXJhdGVkIEFWUCB3 aGVuIHRoZSBBVlAgc2ltcGx5IHVzZWQgYXMgYSBCb29sZWFuIGZsYWcsIHByb3RvY29sIGRlc2ln bmVycyBhcmUgZW5jb3VyYWdlZCB0byByZWx5IG9uIEFWUCBkZWZpbmVkIGluIHRoZSBmb3JtIG9m IGEgYml0IG1hc2sgd2l0aCB0aGUgaW50ZXJwcmV0YXRpb24gb2YgdGhlIHNldHRpbmcgb2YgZWFj aCBiaXQgZGVzY3JpYmVkIGluIHRoZSByZWxldmFudCBEaWFtZXRlciBhcHBsaWNhdGlvbiBzcGVj aWZpY2F0aW9uLiBTdWNoIEFWUHMgY2FuIGJlIHJldXNlZCBhbmQgZXh0ZW5kZWQgdG8gbXVsdGlw bGV4IHNldmVyYWwgaW5kaWNhdGlvbnMgd2l0aG91dCBtYWpvciBpbXBhY3Qgb24gdGhlIERpYW1l dGVyIGFwcGxpY2F0aW9uLiBUaGUgYml0LW1hc2sgc2hvdWxkIGJlIHRoZXJlZm9yZSBsb25nIGVu b3VnaCB0byBsZWF2ZSByb29tIGZvciBmdXR1cmUgYWRkaXRpb25zLiBFeGFtcGxlcyBvZiBBVlAg ZGVmaW5lZCBhcyBiaXQgbWFzayBhcmUgdGhlIFNlc3Npb24tQmluZGluZyBBVlAgZGVmaW5lZCBp biA8YSBjbGFzcz0naW5mbycgaHJlZj0nI0ktRC5pZXRmLWRpbWUtcmZjMzU4OGJpcyc+W0kmIzgy MDk7RC5pZXRmJiM4MjA5O2RpbWUmIzgyMDk7cmZjMzU4OGJpc108c3Bhbj4gKDwvc3Bhbj48c3Bh biBjbGFzcz0naW5mbyc+RmFqYXJkbywgVi4sIEFya2tvLCBKLiwgTG91Z2huZXksIEouLCBhbmQg Ry4gWm9ybiwgJmxkcXVvO0RpYW1ldGVyIEJhc2UgUHJvdG9jb2wsJnJkcXVvOyBKdW5lJm5ic3A7 MjAxMi48L3NwYW4+PHNwYW4+KTwvc3Bhbj48L2E+IGFuZCB0aGUgTUlQNi1GZWF0dXJlLVZlY3Rv ciBBVlAgZGVmaW5lZCBpbiA8YSBjbGFzcz0naW5mbycgaHJlZj0nI1JGQzU0NDcnPltSRkM1NDQ3 XTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5KLiBLb3Job25lbiBldCBhbC4sICZs ZHF1bztEaWFtZXRlciBNb2JpbGUgSVB2NjogU3VwcG9ydCBmb3IgTmV0d29yayBBY2Nlc3MgU2Vy dmVyIHRvIERpYW1ldGVyIFNlcnZlciBJbnRlcmFjdGlvbiwmcmRxdW87IEZlYnJ1YXJ5Jm5ic3A7 MjAwOS48L3NwYW4+PHNwYW4+KTwvc3Bhbj48L2E+DQo8L3A+DQo8YSBuYW1lPSJhbmNob3IyMCI+ PC9hPjxiciAvPjxociAvPg0KPHRhYmxlIHN1bW1hcnk9ImxheW91dCIgY2VsbHBhZGRpbmc9IjAi IGNlbGxzcGFjaW5nPSIyIiBjbGFzcz0iVE9DYnVnIiBhbGlnbj0icmlnaHQiPjx0cj48dGQgY2xh c3M9IlRPQ2J1ZyI+PGEgaHJlZj0iI3RvYyI+Jm5ic3A7VE9DJm5ic3A7PC9hPjwvdGQ+PC90cj48 L3RhYmxlPg0KPGEgbmFtZT0icmZjLnNlY3Rpb24uNS43Ij48L2E+PGgzPjUuNy4mbmJzcDsNCkFw cGxpY2F0aW9uLXNwZWNpZmljIG1lc3NhZ2Ugcm91dGluZzwvaDM+DQoNCjxwPkRpYW1ldGVyIHJl cXVlc3QgbWVzc2FnZSByb3V0aW5nIHVzdWFsbHkgcmVsaWVzIG9uIHRoZSBEZXN0aW5hdGlvbi1S ZWFsbSBBVlAgYW5kIHRoZSBBcHBsaWNhdGlvbiBJZCBwcmVzZW50IGluIHRoZSByZXF1ZXN0IG1l c3NhZ2UgaGVhZGVyLiBIb3dldmVyLCBzb21lIGFwcGxpY2F0aW9ucyBtYXkgbmVlZCB0byByZWx5 IG9uIHRoZSBVc2VyLU5hbWUgQVZQIG9yIGFueSBvdGhlciBhcHBsaWNhdGlvbi1zcGVjaWZpYyBB VlAgcHJlc2VudCBpbiB0aGUgcmVxdWVzdCB0byBkZXRlcm1pbmUgdGhlIGZpbmFsIGRlc3RpbmF0 aW9uIG9mIGEgcmVxdWVzdCBlLmcuIGZpbmQgdGhlIHRhcmdldCBBQUEgc2VydmVyIGhvc3Rpbmcg dGhlIGF1dGhvcml6YXRpb24gaW5mb3JtYXRpb24gZm9yIGEgZ2l2ZW4gdXNlciB3aGVuIG11bHRp cGxlIEFBQSBzZXJ2ZXJzIGFyZSBhZGRyZXNzYWJsZSBpbiB0aGUgcmVhbG0uDQo8L3A+DQo8cD5J biBzdWNoIGEgY29udGV4dCwgYmFzaWMgcm91dGluZyBtZWNoYW5pc21zIGRlc2NyaWJlZCBpbiA8 YSBjbGFzcz0naW5mbycgaHJlZj0nI0ktRC5pZXRmLWRpbWUtcmZjMzU4OGJpcyc+W0kmIzgyMDk7 RC5pZXRmJiM4MjA5O2RpbWUmIzgyMDk7cmZjMzU4OGJpc108c3Bhbj4gKDwvc3Bhbj48c3BhbiBj bGFzcz0naW5mbyc+RmFqYXJkbywgVi4sIEFya2tvLCBKLiwgTG91Z2huZXksIEouLCBhbmQgRy4g Wm9ybiwgJmxkcXVvO0RpYW1ldGVyIEJhc2UgUHJvdG9jb2wsJnJkcXVvOyBKdW5lJm5ic3A7MjAx Mi48L3NwYW4+PHNwYW4+KTwvc3Bhbj48L2E+IGFyZSBub3QgZnVsbHkgc3VpdGFibGUgYW5kIGFk ZGl0aW9uYWwgYXBwbGljYXRpb24tbGV2ZWwgcm91dGluZyBtZWNoYW5pc21zIGhhdmUgdG8gYmUg ZGVzY3JpYmVkIGluIHRoZSBhcHBsaWNhdGlvbiBkb2N1bWVudGF0aW9uIHRvIHByb3ZpZGUgc3Vj aCBzcGVjaWZpYyBBVlAtYmFzZWQgcm91dGluZy4gU3VjaCBmdW5jdGlvbmFsaXR5IHdpbGwgYmUg YmFzaWNhbGx5IGhvc3RlZCBieSBhbiBhcHBsaWNhdGlvbi1zcGVjaWZpYyBQcm94eSBhZ2VudCB0 aGF0IHdpbGwgYmUgcmVzcG9uc2libGUgZm9yIHJvdXRpbmcgZGVjaXNpb25zIGJhc2VkIG9uIHRo ZSByZWNlaXZlZCBzcGVjaWZpYyBBVlBzLg0KPC9wPg0KPHA+RXhhbXBsZSBvZiBzdWNoIHNwZWNp ZmljIHJvdXRpbmcgZnVuY3Rpb24gY2FuIGJlIGZvdW5kIHRoZSBhcHBsaWNhdGlvbnMgZGVmaW5l ZCBmb3IgdGhlIElQIE11bHRpbWVkaWEgU3Vic3lzdGVtIG9mIDNHUFAsIGkuZS4gQ3gvRHggYXBw bGljYXRpb25zICg8YSBjbGFzcz0naW5mbycgaHJlZj0nI1RTMjkuMjI4Jz5bVFMyOS4yMjhdPHNw YW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPjNyZCBHZW5lcmF0aW9uIFBhcnRuZXJzaGlw IFByb2plY3QsICZsZHF1bzszR1BQIFRTIDI5LjIyODsgVGVjaG5pY2FsIFNwZWNpZmljYXRpb24g R3JvdXAgQ29yZSBOZXR3b3JrIGFuZCBUZXJtaW5hbHM7IElQIE11bHRpbWVkaWEgKElNKSBTdWJz eXN0ZW0gQ3ggYW5kIER4IEludGVyZmFjZXM7IFNpZ25hbGxpbmcgZmxvd3MgYW5kIG1lc3NhZ2Ug Y29udGVudHMsJnJkcXVvOyAuPC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPiBhbmQgPGEgY2xhc3M9 J2luZm8nIGhyZWY9JyNUUzI5LjIyOSc+W1RTMjkuMjI5XTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNs YXNzPSdpbmZvJz4zcmQgR2VuZXJhdGlvbiBQYXJ0bmVyc2hpcCBQcm9qZWN0LCAmbGRxdW87M0dQ UCBUUyAyOS4yMjk7IFRlY2huaWNhbCBTcGVjaWZpY2F0aW9uIEdyb3VwIENvcmUgTmV0d29yayBh bmQgVGVybWluYWxzOyBDeCBhbmQgRHggaW50ZXJmYWNlcyBiYXNlZCBvbiB0aGUgRGlhbWV0ZXIg cHJvdG9jb2w7IFByb3RvY29sIGRldGFpbHMsJnJkcXVvOyAuPC9zcGFuPjxzcGFuPik8L3NwYW4+ PC9hPikgaW4gd2hpY2ggdGhlIFN1YnNjcmliZXIgTG9jYXRpb24gRnVuY3Rpb24gKFNMRikgaXMg ZGVmaW5lZCBhIHByb3h5IGFnZW50IChvciBlbmhhbmNlZCBSZWRpcmVjdCBhZ2VudCkgdXNpbmcg c3BlY2lmaWMgYXBwbGljYXRpb24tbGV2ZWwgaWRlbnRpdGllcyBmb3VuZCBpbiB0aGUgcmVxdWVz dCB0byBkZXRlcm1pbmUgdGhlIGZpbmFsIGRlc3RpbmF0aW9uIG9mIHRoZSBtZXNzYWdlLg0KPC9w Pg0KPHA+V2hhdGV2ZXIgdGhlIGNyaXRlcmlhIHVzZWQgdG8gZXN0YWJsaXNoIHRoZSByb3V0aW5n IHBhdGggb2YgdGhlIHJlcXVlc3QsIHRoZSByb3V0aW5nIG9mIHRoZSBhbnN3ZXIgc2hvdWxkIGZv bGxvdyB0aGUgcmV2ZXJzZSBwYXRoIG9mIHRoZSByZXF1ZXN0LCBhcyBkZXNjcmliZWQgaW4gPGEg Y2xhc3M9J2luZm8nIGhyZWY9JyNJLUQuaWV0Zi1kaW1lLXJmYzM1ODhiaXMnPltJJiM4MjA5O0Qu aWV0ZiYjODIwOTtkaW1lJiM4MjA5O3JmYzM1ODhiaXNdPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xh c3M9J2luZm8nPkZhamFyZG8sIFYuLCBBcmtrbywgSi4sIExvdWdobmV5LCBKLiwgYW5kIEcuIFpv cm4sICZsZHF1bztEaWFtZXRlciBCYXNlIFByb3RvY29sLCZyZHF1bzsgSnVuZSZuYnNwOzIwMTIu PC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPiwgdGhlIGFuc3dlciBiZWluZyBzZW50IHRvIHRoZSBz b3VyY2Ugb2YgdGhlIHJlY2VpdmVkIHJlcXVlc3QsIHVzaW5nIHRyYW5zYWN0aW9uIHN0YXRlcyBh bmQgSG9wLWJ5LWhvcCBpZGVudGlmaWVyIG1hdGNoaW5nLiBJbiBwYXJ0aWN1bGFyLCB0aGlzIGVu c3VyZXMgdGhhdCBEaWFtZXRlciBhZ2VudHMgaW4gdGhlIHJlcXVlc3Qgcm91dGluZyBwYXRoIChS ZWxheSBvciBQcm94eSBhZ2VudHMpIHdpbGwgYmUgYWJsZSB0byBjb3JyZWN0bHkgcmVsZWFzZSB0 aGUgdHJhbnNhY3Rpb24gc3RhdGUgYXNzb2NpYXRlZCB0byB0aGUgcmVxdWVzdCB1cG9uIHJlY2Vp cHQgb2YgdGhlIGFuc3dlciwgYXZvaWRpbmcgdGh1cyB1bm5lY2Vzc2FyeSBmYWlsb3ZlciB0cmln Z2VyaW5nIGR1ZSB0byBub24gcmVjZXB0aW9uIG9mIHRoZSBhbnN3ZXIgY29ycmVzcG9uZGluZyB0 byB0aGUgcmVxdWVzdC4gQXBwbGljYXRpb24gZGVzaWduZXJzIGFyZSBzdHJvbmdseSByZWNvbW1l bmRlZCB0byBub3QgYXR0ZW1wdCB0byBtb2RpZnkgdGhlIGFuc3dlciByb3V0aW5nIHByaW5jaXBs ZXMgZGVzY3JpYmVkIGluIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjSS1ELmlldGYtZGltZS1yZmMz NTg4YmlzJz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYjODIwOTtyZmMzNTg4YmlzXTxzcGFu PiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRvLCBWLiwgQXJra28sIEouLCBMb3Vn aG5leSwgSi4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0ZXIgQmFzZSBQcm90b2NvbCwmcmRx dW87IEp1bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4gd2hlbiBkZWZpbmlu ZyBhIG5ldyBhcHBsaWNhdGlvbi4NCjwvcD4NCjxhIG5hbWU9ImFuY2hvcjIxIj48L2E+PGJyIC8+ PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNp bmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0ZCBjbGFzcz0iVE9DYnVn Ij48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48L3RyPjwvdGFibGU+DQo8 YSBuYW1lPSJyZmMuc2VjdGlvbi41LjgiPjwvYT48aDM+NS44LiZuYnNwOw0KQWJvdXQgVHJhbnNs YXRpb24gQWdlbnQ8L2gzPg0KDQo8cD5BcyBkZWZpbmVkIGluIDxhIGNsYXNzPSdpbmZvJyBocmVm PScjSS1ELmlldGYtZGltZS1yZmMzNTg4YmlzJz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYj ODIwOTtyZmMzNTg4YmlzXTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRv LCBWLiwgQXJra28sIEouLCBMb3VnaG5leSwgSi4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0 ZXIgQmFzZSBQcm90b2NvbCwmcmRxdW87IEp1bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9z cGFuPjwvYT4sIGEgdHJhbnNsYXRpb24gYWdlbnQgaXMgYSBkZXZpY2UgdGhhdCBwcm92aWRlcyBp bnRlcndvcmtpbmcgYmV0d2VlbiBEaWFtZXRlciBhbmQgYW5vdGhlciBwcm90b2NvbCAoZS5nLiBS QURJVVMsIFRBQ0FDUyspLg0KPC9wPg0KPHA+SW4gdGhlIHNwZWNpZmljIGNhc2Ugb2YgUkFESVVT LCBpdCB3YXMgaW5pdGlhbGx5IGZvcmVzZWVuIHRoYXQgdGhlIHRyYW5zbGF0aW9uIGZ1bmN0aW9u IHdvdWxkIGhhdmUgYmVlbiBzdHJhaWdodGZvcndhcmQgdG8gZGVmaW5lIGFuZCBkZXBsb3kgYnkg YWRvcHRpbmcgZmV3IGJhc2ljIHByaW5jaXBsZXMgZS5nLiB1c2Ugb2YgYSBzaGFyZWQgcmFuZ2Ug b2YgY29kZSB2YWx1ZXMgZm9yIFJBRElVUyBhdHRyaWJ1dGVzIGFuZCBEaWFtZXRlciBBVlBzLCBz b21lIGd1aWRlbGluZXMgb24gdHJhbnNsYXRpb24gYW5kIG1hbmFnZW1lbnQgb2Yga2V5IGluZm9y bWF0aW9uIChzdWNoIGFzIGF1dGhlbnRpY2F0aW9uIHBhcmFtZXRlciwgcm91dGluZy9hY2NvdW50 aW5nIG9yIHN0YXRlcyksIGV0Yy4gQW5kIGFsbCB0aGlzIG1hdGVyaWFsIHdhcyBwdXQgaW4gdGhl IFJGQyA0MDA1ICg8YSBjbGFzcz0naW5mbycgaHJlZj0nI1JGQzQwMDUnPltSRkM0MDA1XTxzcGFu PiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5QLiBDYWxob3VuIGV0IGFsLiwgJmxkcXVvO0Rp YW1ldGVyIE5ldHdvcmsgQWNjZXNzIFNlcnZlciBBcHBsaWNhdGlvbiwmcmRxdW87IEF1Z3VzdCZu YnNwOzIwMDUuPC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPikgdG8gYmUgdXNlZCBhcyBnZW5lcmlj IGd1aWRlbGluZSBmb3IgaW1wbGVtZW50YXRpb24gb2YgUkFESVVTLURpYW1ldGVyIHRyYW5zbGF0 aW9uIGFnZW50Lg0KPC9wPg0KPHA+SG93ZXZlciwgaXQgd2FzIGFja25vd2xlZGdlZCB0aGF0IHN1 Y2ggdHJhbnNsYXRpb24gbWVjaGFuaXNtIHdhcyBub3Qgc28gb2J2aW91cyBhbmQgZGVlcGVyIHBy b3RvY29sIGFuYWx5c2lzIHdhcyByZXF1aXJlZCB0byBlbnN1cmUgZWZmaWNpZW50IGludGVyd29y a2luZyBiZXR3ZWVuIFJBRElVUyBhbmQgRGlhbWV0ZXIuIE1vcmVvdmVyLCB0aGUgaW50ZXJ3b3Jr aW5nIHJlcXVpcmVtZW50cyB3aWxsIGxpa2VseSBkZXBlbmQgb24gdGhlIGZ1bmN0aW9uYWxpdGll cyBwcm92aWRlZCBieSB0aGUgRGlhbWV0ZXIgYXBwbGljYXRpb24gdW5kZXIgc3BlY2lmaWNhdGlv biBhbmQgYSBjYXNlLWJ5LWNhc2UgYW5hbHlzaXMgd2lsbCBiZSByZXF1aXJlZC4NCjwvcD4NCjxw PlRoZXJlZm9yZSwgd2hlbiBpbnRlcm9wZXJhYmlsaXR5IHdpdGggUkFESVVTIGluZnJhc3RydWN0 dXJlIGlzIGZvcmVzZWVuLCBwcm90b2NvbCBkZXNpZ25lcnMgYXJlIGFkdmlzZWQgdGhhdCB0aGV5 IGNhbm5vdCBhc3N1bWUgdGhlIGF2YWlsYWJpbGl0eSBvZiAic3RhbmRhcmQiIERpYW1ldGVyLXRv LVJBRElVUyBnYXRld2F5cyBhZ2VudCBhbmQgdGhlIHJlcXVpcmVkIHRyYW5zbGF0aW9uIG1lY2hh bmlzbSBzaG91bGQgYmUgdGhlbiBzcGVjaWZpZWQgYWxvbmcgd2l0aCB0aGUgRGlhbWV0ZXIgYXBw bGljYXRpb24uIEFuZCB0aGUgcmVjb21tZW5kYXRpb24gaW4gdGhlIGNhc2Ugb2YgUkFESVVTLURp YW1ldGVyIGludGVyd29ya2luZyBhcHBsaWVzIG9mIGNvdXJzZSBmb3IgYW55IG90aGVyIGtpbmQg b2YgdHJhbnNsYXRpb24gKGUuZy4gRGlhbWV0ZXIvTUFQKS4NCjwvcD4NCjxhIG5hbWU9ImFuY2hv cjIyIj48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGlu Zz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0 ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48 L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi41LjkiPjwvYT48aDM+NS45LiZuYnNw Ow0KRW5kLXRvLUVuZCBhcHBsaWNhdGlvbnMgY2FwYWJpbGl0aWVzIGV4Y2hhbmdlPC9oMz4NCg0K PHA+TmV3IERpYW1ldGVyIGFwcGxpY2F0aW9ucyBjYW4gcmVseSBvbiBvcHRpb25hbCBBVlBzIHRv IGV4Y2hhbmdlIGFwcGxpY2F0aW9uIHNwZWNpZmljIGNhcGFiaWxpdGllcyBhbmQgZmVhdHVyZXMu IFRoZXNlIEFWUHMgY2FuIGJlIGV4Y2hhbmdlZCBvbiBhbiBlbmQtdG8tZW5kIGJhc2lzIGF0IHRo ZSBhcHBsaWNhdGlvbiBsYXllci4gRXhhbXBsZXMgb2YgdGhpcyBjYW4gYmUgZm91bmQgaW4gPGEg Y2xhc3M9J2luZm8nIGhyZWY9JyNSRkM1NDQ3Jz5bUkZDNTQ0N108c3Bhbj4gKDwvc3Bhbj48c3Bh biBjbGFzcz0naW5mbyc+Si4gS29yaG9uZW4gZXQgYWwuLCAmbGRxdW87RGlhbWV0ZXIgTW9iaWxl IElQdjY6IFN1cHBvcnQgZm9yIE5ldHdvcmsgQWNjZXNzIFNlcnZlciB0byBEaWFtZXRlciBTZXJ2 ZXIgSW50ZXJhY3Rpb24sJnJkcXVvOyBGZWJydWFyeSZuYnNwOzIwMDkuPC9zcGFuPjxzcGFuPik8 L3NwYW4+PC9hPiBhbmQgPGEgY2xhc3M9J2luZm8nIGhyZWY9JyNSRkM1Nzc3Jz5bUkZDNTc3N108 c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0naW5mbyc+Si4gS29yaG9uZW4gZXQgYWwuLCAmbGRx dW87VHJhZmZpYyBDbGFzc2lmaWNhdGlvbiBhbmQgUXVhbGl0eSBvZiBTZXJ2aWNlIChRb1MpIEF0 dHJpYnV0ZXMgZm9yIERpYW1ldGVyLCZyZHF1bzsgMjAxMC48L3NwYW4+PHNwYW4+KTwvc3Bhbj48 L2E+Lg0KPC9wPg0KPHA+VGhlIGVuZC10by1lbmQgY2FwYWJpbGl0aWVzIEFWUHMgY2FuIGFpZCBp biB0aGUgZm9sbG93aW5nIGNhc2VzOjxiciAvPg0KPGJyIC8+DQogPC9wPg0KPHVsIGNsYXNzPSJ0 ZXh0Ij4NCjxsaT5Gb3JtYWxpemluZyB0aGUgd2F5IG5ldyBmdW5jdGlvbmFsaXR5IGlzIGFkZGVk IHRvIGV4aXN0aW5nIGFwcGxpY2F0aW9ucyBieSBhbm5vdW5jaW5nIHN1cHBvcnQgZm9yIGl0LiA8 YnIgLz4NCjxiciAvPg0KDQo8L2xpPg0KPGxpPkFwcGxpY2F0aW9ucyB0aGF0IGRvIG5vdCB1bmRl cnN0YW5kIHRoZXNlIEFWUCBjYW4gZGlzY2FyZCBpdCB1cG9uIHJlY2VpcHQuIEluIHN1Y2ggY2Fz ZSwgc2VuZGVycyBvZiB0aGUgQVZQIGNhbiBhbHNvIHNhZmVseSBhc3N1bWUgdGhlIHJlY2Vpdmlu ZyBlbmQtcG9pbnQgZG9lcyBub3Qgc3VwcG9ydCBhbnkgZnVuY3Rpb25hbGl0eSBjYXJyaWVkIGJ5 IHRoZSBBVlAgaWYgaXQgaXMgbm90IHByZXNlbnQgaW4gc3Vic2VxdWVudCByZXNwb25zZXMuPGJy IC8+DQo8YnIgLz4NCg0KPC9saT4NCjxsaT5Vc2VmdWwgaW4gY2FzZXMgd2hlcmUgZGVwbG95bWVu dCBjaG9pY2VzIGFyZSBvZmZlcmVkIGFuZCB0aGUgZ2VuZXJpYyBkZXNpZ24gY2FuIGJlIG1hZGUg YXZhaWxhYmxlIGZvciBhIG51bWJlciBvZiBhcHBsaWNhdGlvbnMuPGJyIC8+DQo8YnIgLz4NCg0K PC9saT4NCjwvdWw+PHA+IE5vdGUgdGhhdCB0aGlzIGxpc3QgaXMgbm90IG1lYW50IHRvIGJlIGNv bXByZWhlbnNpdmUuDQo8L3A+DQo8cD5XaGVuIHVzZWQgaW4gYSBuZXcgYXBwbGljYXRpb24sIHBy b3RvY29sIGRlc2lnbmVycyBzaG91bGQgY2xlYXJseSBzcGVjaWZ5IHRoaXMgZW5kLXRvLWVuZCBj YXBhYmlsaXRpZXMgZXhjaGFuZ2UgYW5kIHRoZSBjb3JyZXNwb25kaW5nIGJlaGF2aW91ciBvZiB0 aGUgRGlhbWV0ZXIgbm9kZXMgc3VwcG9ydGluZyB0aGUgYXBwbGljYXRpb24uDQo8L3A+DQo8YSBu YW1lPSJvdGhlci1hY2NvdW50aW5nIj48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0i bGF5b3V0IiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFs aWduPSJyaWdodCI+PHRyPjx0ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtU T0MmbmJzcDs8L2E+PC90ZD48L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi41LjEw Ij48L2E+PGgzPjUuMTAuJm5ic3A7DQpEaWFtZXRlciBhY2NvdW50aW5nIHN1cHBvcnQ8L2gzPg0K DQo8cD5BY2NvdW50aW5nIGNhbiBiZSB0cmVhdGVkIGFzIGFuIGF1eGlsaWFyeSBhcHBsaWNhdGlv biB3aGljaCBpcyB1c2VkIGluIHN1cHBvcnQgb2Ygb3RoZXIgYXBwbGljYXRpb25zLiBJbiBtb3N0 IGNhc2VzLCBhY2NvdW50aW5nIHN1cHBvcnQgaXMgcmVxdWlyZWQgd2hlbiBkZWZpbmluZyBuZXcg YXBwbGljYXRpb25zLiBUaGlzIGRvY3VtZW50IHByb3ZpZGVzIHR3bygyKSBwb3NzaWJsZSBtb2Rl bHMgZm9yIHVzaW5nIGFjY291bnRpbmc6PGJyIC8+DQo8YnIgLz4NCiA8L3A+DQo8YmxvY2txdW90 ZSBjbGFzcz0idGV4dCI+PGRsPg0KPGR0PlNwbGl0IEFjY291bnRpbmcgTW9kZWw8L2R0Pg0KPGRk PjxiciAvPg0KSW4gdGhpcyBtb2RlbCwgdGhlIGFjY291bnRpbmcgbWVzc2FnZXMgd2lsbCB1c2Ug dGhlIERpYW1ldGVyIGJhc2UgYWNjb3VudGluZyBhcHBsaWNhdGlvbiBJRCAodmFsdWUgb2YgMyku IFRoZSBkZXNpZ24gaW1wbGljYXRpb24gZm9yIHRoaXMgaXMgdGhhdCB0aGUgYWNjb3VudGluZyBp cyB0cmVhdGVkIGFzIGFuIGluZGVwZW5kZW50IGFwcGxpY2F0aW9uLCBlc3BlY2lhbGx5IGR1cmlu ZyBEaWFtZXRlciByb3V0aW5nLiBUaGlzIG1lYW5zIHRoYXQgYWNjb3VudGluZyBjb21tYW5kcyBl bWFuYXRpbmcgZnJvbSBhbiBhcHBsaWNhdGlvbiBtYXkgYmUgcm91dGVkIHNlcGFyYXRlbHkgZnJv bSB0aGUgcmVzdCBvZiB0aGUgb3RoZXIgYXBwbGljYXRpb24gbWVzc2FnZXMuIFRoaXMgbWF5IGFs c28gaW1wbHkgdGhhdCB0aGUgbWVzc2FnZXMgZ2VuZXJhbGx5IGVuZCB1cCBpbiBhIGNlbnRyYWwg YWNjb3VudGluZyBzZXJ2ZXIuIEEgc3BsaXQgYWNjb3VudGluZyBtb2RlbCBpcyBhIGdvb2QgZGVz aWduIGNob2ljZSB3aGVuOiA8YnIgLz4NCjxiciAvPg0KIA0KPHVsIGNsYXNzPSJ0ZXh0Ij4NCjxs aT5UaGUgYXBwbGljYXRpb24gaXRzZWxmIHdpbGwgbm90IGRlZmluZSBpdHMgb3duIHVuaXF1ZSBh Y2NvdW50aW5nIGNvbW1hbmRzLjxiciAvPg0KPGJyIC8+DQoNCjwvbGk+DQo8bGk+VGhlIG92ZXJh bGwgc3lzdGVtIGFyY2hpdGVjdHVyZSBwZXJtaXRzIHRoZSB1c2Ugb2YgY2VudHJhbGl6ZWQgYWNj b3VudGluZyBmb3Igb25lIG9yIG1vcmUgRGlhbWV0ZXIgYXBwbGljYXRpb25zLg0KPC9saT4NCjwv dWw+PGJyIC8+DQo8YnIgLz4NCiBDZW50cmFsaXppbmcgYWNjb3VudGluZyBtYXkgaGF2ZSBhZHZh bnRhZ2VzIGJ1dCB0aGVyZSBhcmUgYWxzbyBkcmF3YmFja3MuIFRoZSBtb2RlbCBhc3N1bWVzIHRo YXQgdGhlIGFjY291bnRpbmcgc2VydmVyIGNhbiBzb21laG93IGRpZmZlcmVudGlhdGUgcmVjZWl2 ZWQgYWNjb3VudGluZyBtZXNzYWdlcy4gU2luY2UgdGhlIHJlY2VpdmVkIGFjY291bnRpbmcgbWVz c2FnZXMgY2FuIGJlIGZvciBhbnkgYXBwbGljYXRpb24gYW5kL29yIHNlcnZpY2UsIHRoZSBhY2Nv dW50aW5nIHNlcnZlciBoYXMgdG8gYmUgaGF2ZSBhIG1ldGhvZCB0byB1bmlxdWVseSBtYXRjaCBh Y2NvdW50aW5nIG1lc3NhZ2VzIHdpdGggYXBwbGljYXRpb25zIGFuZC9vciBzZXJ2aWNlcyBiZWlu ZyBhY2NvdW50ZWQgZm9yLiBUaGlzIG1heSBtZWFuIGRlZmluaW5nIG5ldyBBVlBzLCBjaGVja2lu ZyB0aGUgcHJlc2VuY2UsIGFic2VuY2Ugb3IgY29udGVudHMgb2YgZXhpc3RpbmcgQVZQcyBvciBj aGVja2luZyB0aGUgY29udGVudHMgb2YgdGhlIGFjY291bnRpbmcgcmVjb3JkcyBpdHNlbGYuIEJ1 dCBpbiBnZW5lcmFsLCB0aGVyZSBpcyBubyBjbGVhbiBhbmQgZ2VuZXJpYyBzY2hlbWUgZm9yIHNv cnRpbmcgdGhlc2UgbWVzc2FnZXMuIFRoZXJlZm9yZSwgdGhlIHVzZSBvZiB0aGlzIG1vZGVsIGlz IHJlY29tbWVuZGVkIG9ubHkgd2hlbiBhbGwgcmVjZWl2ZWQgYWNjb3VudGluZyBtZXNzYWdlcyBj YW4gYmUgY2xlYXJseSBpZGVudGlmaWVkIGFuZCBzb3J0ZWQuIEZvciBtb3N0IGNhc2VzLCB0aGUg dXNlIG9mIENvdXBsZWQgQWNjb3VudGluZyBNb2RlbCBpcyByZWNvbW1lbmRlZC4gPGJyIC8+DQo8 YnIgLz4NCg0KPC9kZD4NCjxkdD5Db3VwbGVkIEFjY291bnRpbmcgTW9kZWw8L2R0Pg0KPGRkPjxi ciAvPg0KIEluIHRoaXMgbW9kZWwsIHRoZSBhY2NvdW50aW5nIG1lc3NhZ2VzIHdpbGwgdXNlIHRo ZSBhcHBsaWNhdGlvbiBJRCBvZiB0aGUgYXBwbGljYXRpb24gdXNpbmcgdGhlIGFjY291bnRpbmcg c2VydmljZS4gVGhlIGRlc2lnbiBpbXBsaWNhdGlvbiBmb3IgdGhpcyBpcyB0aGF0IHRoZSBhY2Nv dW50aW5nIG1lc3NhZ2VzIGFyZSB0aWdodGx5IGNvdXBsZWQgd2l0aCB0aGUgYXBwbGljYXRpb24g aXRzZWxmOyBtZWFuaW5nIHRoYXQgYWNjb3VudGluZyBtZXNzYWdlcyB3aWxsIGJlIHJvdXRlZCBs aWtlIGFueSBvdGhlciBhcHBsaWNhdGlvbiBtZXNzYWdlcy4gSXQgd291bGQgdGhlbiBiZSB0aGUg cmVzcG9uc2liaWxpdHkgb2YgdGhlIGFwcGxpY2F0aW9uIHNlcnZlciAoYXBwbGljYXRpb24gZW50 aXR5IHJlY2VpdmluZyB0aGUgQUNSIG1lc3NhZ2UpIHRvIHNlbmQgdGhlIGFjY291bnRpbmcgcmVj b3JkcyBjYXJyaWVkIGJ5IHRoZSBhY2NvdW50aW5nIG1lc3NhZ2VzIHRvIHRoZSBwcm9wZXIgYWNj b3VudGluZyBzZXJ2ZXIuIFRoZSBhcHBsaWNhdGlvbiBzZXJ2ZXIgaXMgYWxzbyByZXNwb25zaWJs ZSBmb3IgZm9ybXVsYXRpbmcgYSBwcm9wZXIgcmVzcG9uc2UgKEFDQSkuIEEgY291cGxlZCBhY2Nv dW50aW5nIG1vZGVsIGlzIGEgZ29vZCBkZXNpZ24gY2hvaWNlIHdoZW46PGJyIC8+DQo8YnIgLz4N CiANCjx1bCBjbGFzcz0idGV4dCI+DQo8bGk+VGhlIHN5c3RlbSBhcmNoaXRlY3R1cmUgb3IgZGVw bG95bWVudCB3aWxsIG5vdCBwcm92aWRlIGFuIGFjY291bnRpbmcgc2VydmVyIHRoYXQgc3VwcG9y dHMgRGlhbWV0ZXIuPGJyIC8+DQo8YnIgLz4NCg0KPC9saT4NCjxsaT5UaGUgc3lzdGVtIGFyY2hp dGVjdHVyZSBvciBkZXBsb3ltZW50IHJlcXVpcmVzIHRoYXQgdGhlIGFjY291bnRpbmcgc2Vydmlj ZSBmb3IgdGhlIHNwZWNpZmljIGFwcGxpY2F0aW9uIHNob3VsZCBiZSBoYW5kbGVkIGJ5IHRoZSBh cHBsaWNhdGlvbiBpdHNlbGYuPGJyIC8+DQo8YnIgLz4NCg0KPC9saT4NCjxsaT5UaGUgYXBwbGlj YXRpb24gc2VydmVyIGlzIHByb3Zpc2lvbmVkIHRvIHVzZSBhIGRpZmZlcmVudCBwcm90b2NvbCB0 byBhY2Nlc3MgdGhlIGFjY291bnRpbmcgc2VydmVyOyBlLmcuLCB2aWEgTERBUCwgU09BUCBldGMu IFRoaXMgaW5jbHVkZXMgYXR0ZW1wdGluZyB0byBzdXBwb3J0IG9sZGVyIGFjY291bnRpbmcgc3lz dGVtcyB0aGF0IGFyZSBub3QgRGlhbWV0ZXIgYXdhcmUuPGJyIC8+DQo8YnIgLz4NCg0KPC9saT4N CjwvdWw+IEluIGFsbCBjYXNlcyBhYm92ZSwgdGhlcmUgd2lsbCBnZW5lcmFsbHkgYmUgbm8gZGly ZWN0IERpYW1ldGVyIGFjY2VzcyB0byB0aGUgYWNjb3VudGluZyBzZXJ2ZXIuPGJyIC8+DQo8YnIg Lz4NCg0KPC9kZD4NCjwvZGw+PC9ibG9ja3F1b3RlPjxwPlRoZXNlIG1vZGVscyBwcm92aWRlIGEg YmFzaXMgZm9yIHVzaW5nIGFjY291bnRpbmcgbWVzc2FnZXMuIEFwcGxpY2F0aW9uIGRlc2lnbmVy cyBtYXkgb2J2aW91c2x5IGRldmlhdGUgZnJvbSB0aGVzZSBtb2RlbHMgcHJvdmlkZWQgdGhhdCB0 aGUgZmFjdG9ycyBiZWluZyBhZGRyZXNzZWQgaGVyZSBoYXZlIGFsc28gYmVlbiB0YWtlbiBpbnRv IGFjY291bnQuIFRob3VnaCBpdCBpcyBub3QgcmVjb21tZW5kZWQsIGV4YW1wbGVzIG9mIG90aGVy IG1ldGhvZHMgbWlnaHQgYmUgZGVmaW5pbmcgYSBuZXcgc2V0IG9mIGNvbW1hbmRzIHRvIGNhcnJ5 IGFwcGxpY2F0aW9uIHNwZWNpZmljIGFjY291bnRpbmcgcmVjb3Jkcy4NCjwvcD4NCjxhIG5hbWU9 ImFuY2hvcjIzIj48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxs cGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+ PHRyPjx0ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+ PC90ZD48L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi41LjExIj48L2E+PGgzPjUu MTEuJm5ic3A7DQpEaWFtZXRlciBzZWN1cml0eSBtZWNoYW5pc21zPC9oMz4NCg0KPHA+QXMgc3Bl Y2lmaWVkIGluIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjSS1ELmlldGYtZGltZS1yZmMzNTg4Ymlz Jz5bSSYjODIwOTtELmlldGYmIzgyMDk7ZGltZSYjODIwOTtyZmMzNTg4YmlzXTxzcGFuPiAoPC9z cGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5GYWphcmRvLCBWLiwgQXJra28sIEouLCBMb3VnaG5leSwg Si4sIGFuZCBHLiBab3JuLCAmbGRxdW87RGlhbWV0ZXIgQmFzZSBQcm90b2NvbCwmcmRxdW87IEp1 bmUmbmJzcDsyMDEyLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4sIHRoZSBEaWFtZXRlciBtZXNz YWdlIGV4Y2hhbmdlIHNob3VsZCBiZSBzZWN1cmVkIGJ5IHVzaW5nIFRMUy9UQ1Agb3IgRFRMUy9T Q1RQLiBIb3dldmVyLCBJUHNlYyBBZGRpdGlvbmFsIHNlY3VyaXR5IG1lY2hhbmlzbXMgc3VjaCBh cyBJUHNlYyBjYW4gYWxzbyBiZSBkZXBsb3llZCB0byBzZWN1cmUgY29ubmVjdGlvbnMgYmV0d2Vl biBEaWFtZXRlciBwZWVycy4gV2hlbiBJUHNlYyBpcyB1c2VkIGluc3RlYWQgb2YgVExTIG9yIERU TFMsIHRoZSBmb2xsb3dpbmcgcmVjb21tZW5kYXRpb25zIGFwcGx5Lg0KPC9wPg0KPHA+SVBzZWMg RVNQIDUuMyA8YSBjbGFzcz0naW5mbycgaHJlZj0nI1JGQzQzMDEnPltSRkM0MzAxXTxzcGFuPiAo PC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZvJz5TLiBLZW50IGFuZCBLLiBTZW8sICZsZHF1bztTZWN1 cml0eSBBcmNoaXRlY3R1cmUgZm9yIHRoZSBJbnRlcm5ldCBQcm90b2NvbCwmcmRxdW87IDIwMDUu PC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPiBpbiB0cmFuc3BvcnQgbW9kZSB3aXRoIG5vbi1udWxs IGVuY3J5cHRpb24gYW5kIGF1dGhlbnRpY2F0aW9uIGFsZ29yaXRobXMgaXMgdXNlZCB0byBwcm92 aWRlIHBlci1wYWNrZXQgYXV0aGVudGljYXRpb24sIGludGVncml0eSBwcm90ZWN0aW9uIGFuZCBj b25maWRlbnRpYWxpdHksIGFuZCBzdXBwb3J0IHRoZSByZXBsYXkgcHJvdGVjdGlvbiBtZWNoYW5p c21zIG9mIElQc2VjLiBJS0UgaXMgdXNlZCBmb3IgcGVlciBhdXRoZW50aWNhdGlvbiwgbmVnb3Rp YXRpb24gb2Ygc2VjdXJpdHkgYXNzb2NpYXRpb25zLCBhbmQga2V5IG1hbmFnZW1lbnQsIHVzaW5n IHRoZSBJUHNlYyBET0kgPGEgY2xhc3M9J2luZm8nIGhyZWY9JyNSRkMyNDA3Jz5bUkZDMjQwN108 c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFzcz0naW5mbyc+RC4gUGlwZXIsICZsZHF1bztUaGUgSW50 ZXJuZXQgSVAgU2VjdXJpdHkgRG9tYWluIG9mIEludGVycHJldGF0aW9uIGZvciBJU0FLTVAsJnJk cXVvOyAxOTk4Ljwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4uIFBlZXIgYXV0aGVudGljYXRpb24g Y2FuIGJlIGFjaGlldmVkIGJ5IHVzaW5nIGEgcHJlLXNoYXJlZCBrZXkgb3IgY2VydGlmaWNhdGUt YmFzZWQgcGVlciBhdXRoZW50aWNhdGlvbiB1c2luZyBkaWdpdGFsIHNpZ25hdHVyZXMgY2FuIGJl IHVzZWQgYXMgYWx0ZXJuYXRpdmUuIFBlZXIgYXV0aGVudGljYXRpb24gdXNpbmcgdGhlIHB1Ymxp YyBrZXkgZW5jcnlwdGlvbiBtZXRob2RzIG91dGxpbmVkIGluIElLRSdzIFNlY3Rpb25zIDUuMiBh bmQgNS4zIDxhIGNsYXNzPSdpbmZvJyBocmVmPScjUkZDMjQwOSc+W1JGQzI0MDldPHNwYW4+ICg8 L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPkQuIEhhcmtpbnMgYW5kIEQuIENhcnJlbCwgJmxkcXVv O1RoZSBJbnRlcm5ldCBLZXkgRXhjaGFuZ2UgKElLRSksJnJkcXVvOyAxOTk4Ljwvc3Bhbj48c3Bh bj4pPC9zcGFuPjwvYT4gc2hvdWxkIG5vdCBiZSB1c2VkLg0KPC9wPg0KPHA+RGlhbWV0ZXIgaW1w bGVtZW50YXRpb25zIHVzaW5nIElQc2VjIGFzIHNlY3VyaXR5IG1lY2hhbmlzbXMgbXVzdCBzdXBw b3J0IGJvdGggSUtFIE1haW4gTW9kZSBhbmQgQWdncmVzc2l2ZSBNb2RlLiBXaGVuIHByZS1zaGFy ZWQga2V5cyBhcmUgdXNlZCBmb3IgYXV0aGVudGljYXRpb24sIElLRSBBZ2dyZXNzaXZlIE1vZGUg c2hvdWxkIGJlIHVzZWQgaW5zdGVhZCBvZiBJS0UgTWFpbiBNb2RlLiBXaGVuIGRpZ2l0YWwgc2ln bmF0dXJlcyBhcmUgdXNlZCBmb3IgYXV0aGVudGljYXRpb24sIGVpdGhlciBJS0UgTWFpbiBNb2Rl IG9yIElLRSBBZ2dyZXNzaXZlIE1vZGUgY2FuIGJlIHVzZWQuDQo8L3A+DQo8cD5XaGVuIGRpZ2l0 YWwgc2lnbmF0dXJlcyBhcmUgdXNlZCB0byBhY2hpZXZlIGF1dGhlbnRpY2F0aW9uLCBhbiBJS0Ug bmVnb3RpYXRvciBzaG91bGQgdXNlIElLRSBDZXJ0aWZpY2F0ZSBSZXF1ZXN0IFBheWxvYWQocykg dG8gc3BlY2lmeSB0aGUgY2VydGlmaWNhdGUgYXV0aG9yaXR5IChvciBhdXRob3JpdGllcykgdGhh dCBhcmUgdHJ1c3RlZCBpbiBhY2NvcmRhbmNlIHdpdGggaXRzIGxvY2FsIHBvbGljeS4gSUtFIG5l Z290aWF0b3JzIHNob3VsZCB1c2UgcGVydGluZW50IGNlcnRpZmljYXRlIHJldm9jYXRpb24gY2hl Y2tzIGJlZm9yZSBhY2NlcHRpbmcgYSBQS0kgY2VydGlmaWNhdGUgZm9yIHVzZSBpbiBJS0UncyBh dXRoZW50aWNhdGlvbiBwcm9jZWR1cmVzLg0KPC9wPg0KPHA+VGhlIFBoYXNlIDIgUXVpY2sgTW9k ZSBleGNoYW5nZXMgdXNlZCB0byBuZWdvdGlhdGUgcHJvdGVjdGlvbiBmb3IgRGlhbWV0ZXIgY29u bmVjdGlvbnMgbXVzdCBleHBsaWNpdGx5IGNhcnJ5IHRoZSBJZGVudGl0eSBQYXlsb2FkIGZpZWxk cyAoSURjaSBhbmQgSURjcikuIFRoZSBET0kgcHJvdmlkZXMgZm9yIHNldmVyYWwgdHlwZXMgb2Yg aWRlbnRpZmljYXRpb24gZGF0YS4gSG93ZXZlciwgd2hlbiB1c2VkIGluIGNvbmZvcm1hbnQgaW1w bGVtZW50YXRpb25zLCBlYWNoIElEIFBheWxvYWQgbXVzdCBjYXJyeSBhIHNpbmdsZSBJUCBhZGRy ZXNzIGFuZCBhIHNpbmdsZSBub24temVybyBwb3J0IG51bWJlciwgYW5kIG11c3Qgbm90IHVzZSB0 aGUgSVAgU3VibmV0IG9yIElQIEFkZHJlc3MgUmFuZ2UgZm9ybWF0cy4gVGhpcyBhbGxvd3MgdGhl IFBoYXNlIDIgc2VjdXJpdHkgYXNzb2NpYXRpb24gdG8gY29ycmVzcG9uZCB0byBzcGVjaWZpYyBU Q1AgYW5kIFNDVFAgY29ubmVjdGlvbnMuDQo8L3A+DQo8cD5TaW5jZSBJUHNlYyBhY2NlbGVyYXRp b24gaGFyZHdhcmUgbWF5IG9ubHkgYmUgYWJsZSB0byBoYW5kbGUgYSBsaW1pdGVkIG51bWJlciBv ZiBhY3RpdmUgSUtFIFBoYXNlIDIgU0FzLCBQaGFzZSAyIGRlbGV0ZSBtZXNzYWdlcyBtYXkgYmUg c2VudCBmb3IgaWRsZSBTQXMsIGFzIGEgbWVhbnMgb2Yga2VlcGluZyB0aGUgbnVtYmVyIG9mIGFj dGl2ZSBQaGFzZSAyIFNBcyB0byBhIG1pbmltdW0uIFRoZSByZWNlaXB0IG9mIGFuIElLRSBQaGFz ZSAyIGRlbGV0ZSBtZXNzYWdlIHNob3VsZCBub3QgYmUgaW50ZXJwcmV0ZWQgYXMgYSByZWFzb24g Zm9yIHRlYXJpbmcgZG93biBhIERpYW1ldGVyIGNvbm5lY3Rpb24uIFJhdGhlciwgaXQgaXMgcHJl ZmVyYWJsZSB0byBsZWF2ZSB0aGUgY29ubmVjdGlvbiB1cCwgYW5kIGlmIGFkZGl0aW9uYWwgdHJh ZmZpYyBpcyBzZW50IG9uIGl0LCB0byBicmluZyB1cCBhbm90aGVyIElLRSBQaGFzZSAyIFNBIHRv IHByb3RlY3QgaXQuIFRoaXMgYXZvaWRzIHRoZSBwb3RlbnRpYWwgZm9yIGNvbnRpbnVhbGx5IGJy aW5naW5nIGNvbm5lY3Rpb25zIHVwIGFuZCBkb3duLg0KPC9wPg0KPGEgbmFtZT0ib3RoZXItZ2Vu ZXJpYyI+PC9hPjxiciAvPjxociAvPg0KPHRhYmxlIHN1bW1hcnk9ImxheW91dCIgY2VsbHBhZGRp bmc9IjAiIGNlbGxzcGFjaW5nPSIyIiBjbGFzcz0iVE9DYnVnIiBhbGlnbj0icmlnaHQiPjx0cj48 dGQgY2xhc3M9IlRPQ2J1ZyI+PGEgaHJlZj0iI3RvYyI+Jm5ic3A7VE9DJm5ic3A7PC9hPjwvdGQ+ PC90cj48L3RhYmxlPg0KPGEgbmFtZT0icmZjLnNlY3Rpb24uNiI+PC9hPjxoMz42LiZuYnNwOw0K RGVmaW5pbmcgR2VuZXJpYyBEaWFtZXRlciBFeHRlbnNpb25zPC9oMz4NCg0KPHA+R2VuZXJpYyBE aWFtZXRlciBleHRlbnNpb25zIGFyZSBBVlBzLCBjb21tYW5kcyBvciBhcHBsaWNhdGlvbnMgdGhh dCBhcmUgZGVzaWduZWQgdG8gc3VwcG9ydCBvdGhlciBEaWFtZXRlciBhcHBsaWNhdGlvbnMuIFRo ZXkgYXJlIGF1eGlsaWFyeSBhcHBsaWNhdGlvbnMgbWVhbnQgdG8gaW1wcm92ZSBvciBlbmhhbmNl IHRoZSBEaWFtZXRlciBwcm90b2NvbCBpdHNlbGYgb3IgRGlhbWV0ZXIgYXBwbGljYXRpb25zL2Z1 bmN0aW9uYWxpdHkuIFNvbWUgZXhhbXBsZXMgaW5jbHVkZSB0aGUgZXh0ZW5zaW9ucyB0byBzdXBw b3J0IGF1ZGl0aW5nIGFuZCByZWR1bmRhbmN5IChzZWUgPGEgY2xhc3M9J2luZm8nIGhyZWY9JyNJ LUQuY2FsaG91bi1kaWFtZXRlci1yZXMtbWdtdCc+W0kmIzgyMDk7RC5jYWxob3VuJiM4MjA5O2Rp YW1ldGVyJiM4MjA5O3JlcyYjODIwOTttZ210XTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdp bmZvJz5DYWxob3VuLCBQLiwgJmxkcXVvO0RpYW1ldGVyIFJlc291cmNlIE1hbmFnZW1lbnQgRXh0 ZW5zaW9ucywmcmRxdW87IE1hcmNoJm5ic3A7MjAwMS48L3NwYW4+PHNwYW4+KTwvc3Bhbj48L2E+ KSwgaW1wcm92ZW1lbnRzIGluIGR1cGxpY2F0ZSBkZXRlY3Rpb24gc2NoZW1lIChzZWUgPGEgY2xh c3M9J2luZm8nIGhyZWY9JyNJLUQuYXN2ZXJlbi1kaW1lLWR1cGNvbnMnPltJJiM4MjA5O0QuYXN2 ZXJlbiYjODIwOTtkaW1lJiM4MjA5O2R1cGNvbnNdPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9 J2luZm8nPkFzdmVyZW4sIFQuLCAmbGRxdW87RGlhbWV0ZXIgRHVwbGljYXRlIERldGVjdGlvbiBD b25zLiwmcmRxdW87IEF1Z3VzdCZuYnNwOzIwMDYuPC9zcGFuPjxzcGFuPik8L3NwYW4+PC9hPiks IGFuZCBwaWdneWJhY2tpbmcgb2YgUW9TIGF0dHJpYnV0ZXMgKHNlZSA8YSBjbGFzcz0naW5mbycg aHJlZj0nI1JGQzU3NzcnPltSRkM1Nzc3XTxzcGFuPiAoPC9zcGFuPjxzcGFuIGNsYXNzPSdpbmZv Jz5KLiBLb3Job25lbiBldCBhbC4sICZsZHF1bztUcmFmZmljIENsYXNzaWZpY2F0aW9uIGFuZCBR dWFsaXR5IG9mIFNlcnZpY2UgKFFvUykgQXR0cmlidXRlcyBmb3IgRGlhbWV0ZXIsJnJkcXVvOyAy MDEwLjwvc3Bhbj48c3Bhbj4pPC9zcGFuPjwvYT4pLg0KPC9wPg0KPHA+U2luY2UgZ2VuZXJpYyBl eHRlbnNpb25zIGNhbiBjb3ZlciBtYW55IGFzcGVjdHMgb2YgRGlhbWV0ZXIgYW5kIERpYW1ldGVy IGFwcGxpY2F0aW9ucywgaXQgaXMgbm90IHBvc3NpYmxlIHRvIGVudW1lcmF0ZSBhbGwgdGhlIHBy b2JhYmxlIHNjZW5hcmlvcyBpbiB0aGlzIGRvY3VtZW50LiBIb3dldmVyLCBzb21lIG9mIHRoZSBt b3N0IGNvbW1vbiBjb25zaWRlcmF0aW9ucyBhcmUgYXMgZm9sbG93czo8YnIgLz4NCjxiciAvPg0K IDwvcD4NCjx1bCBjbGFzcz0idGV4dCI+DQo8bGk+QmFja3dhcmQgY29tcGF0aWJpbGl0eTogRGVh bGluZyB3aXRoIGV4aXN0aW5nIGFwcGxpY2F0aW9ucyB0aGF0IGRvIG5vdCB1bmRlcnN0YW5kIHRo ZSBuZXcgZXh0ZW5zaW9uLiBEZXNpZ25lcnMgYWxzbyBoYXZlIHRvIG1ha2Ugc3VyZSB0aGF0IG5l dyBleHRlbnNpb25zIGRvIG5vdCBicmVhayBleHBlY3RlZCBtZXNzYWdlIGRlbGl2ZXJ5IGxheWVy IGJlaGF2aW9yLjxiciAvPg0KDQo8L2xpPg0KPGxpPkZvcndhcmQgY29tcGF0aWJpbGl0eTogTWFr aW5nIHN1cmUgdGhhdCB0aGUgZGVzaWduIHdpbGwgbm90IGludHJvZHVjZSB1bmR1ZSByZXN0cmlj dGlvbnMgZm9yIGZ1dHVyZSBhcHBsaWNhdGlvbnMuIEZ1dHVyZSBhcHBsaWNhdGlvbnMgYXR0ZW1w dGluZyB0byBzdXBwb3J0IHRoaXMgZmVhdHVyZSBzaG91bGQgbm90IGhhdmUgdG8gZ28gdGhyb3Vn aCBncmVhdCBsZW5ndGhzIHRvIGltcGxlbWVudCBhbnkgbmV3IGV4dGVuc2lvbnMuIDxiciAvPg0K DQo8L2xpPg0KPGxpPlRyYWRlb2ZmcyBpbiBzaWduYWxpbmc6IERlc2lnbmVycyBtYXkgaGF2ZSB0 byBjaG9vc2UgYmV0d2VlbiB0aGUgdXNlIG9mIG9wdGlvbmFsIEFWUHMgcGlnZ3liYWNrZWQgb250 byBleGlzdGluZyBjb21tYW5kcyB2ZXJzdXMgZGVmaW5pbmcgbmV3IGNvbW1hbmRzIGFuZCBhcHBs aWNhdGlvbnMuIE9wdGlvbmFsIEFWUHMgYXJlIHNpbXBsZXIgdG8gaW1wbGVtZW50IGFuZCBtYXkg bm90IG5lZWQgY2hhbmdlcyB0byBleGlzdGluZyBhcHBsaWNhdGlvbnM7IEhvd2V2ZXIsIHRoZSBk cmF3YmFjayBpcyB0aGF0IHRoZSB0aW1pbmcgb2Ygc2VuZGluZyBleHRlbnNpb24gZGF0YSB3aWxs IGJlIHRpZWQgdG8gd2hlbiB0aGUgYXBwbGljYXRpb24gd291bGQgYmUgc2VuZGluZyBhIG1lc3Nh Z2UuIFRoaXMgaGFzIGNvbnNlcXVlbmNlcyBpZiB0aGUgYXBwbGljYXRpb24gYW5kIHRoZSBleHRl bnNpb25zIGhhdmUgZGlmZmVyZW50IHRpbWluZyByZXF1aXJlbWVudHMuIFRoZSB1c2Ugb2YgY29t bWFuZHMgYW5kIGFwcGxpY2F0aW9ucyBzb2x2ZXMgdGhpcyBpc3N1ZSBidXQgdGhlIHRyYWRlb2Zm IGlzIHRoZSBhZGRpdGlvbmFsIGNvbXBsZXhpdHkgb2YgZGVmaW5pbmcgYW5kIGRlcGxveWluZyBh IG5ldyBhcHBsaWNhdGlvbi4gSXQgaXMgbGVmdCB1cCB0byB0aGUgZGVzaWduZXIgdG8gZmluZCBh IGdvb2QgYmFsYW5jZSBhbW9uZyB0aGVzZSB0cmFkZW9mZnMgYmFzZWQgb24gdGhlIHJlcXVpcmVt ZW50cyBvZiB0aGUgZXh0ZW5zaW9uLjxiciAvPg0KPGJyIC8+DQoNCjwvbGk+DQo8L3VsPg0KDQo8 cD5JbiBwcmFjdGljZSwgaXQgaXMgb2Z0ZW4gdGhlIGNhc2UgdGhhdCB0aGUgZ2VuZXJpYyBleHRl bnNpb25zIHVzZSBvcHRpb25hbCBBVlBzIGJlY2F1c2UgaXQncyBzaW1wbGUgYW5kIG5vdCBpbnRy dXNpdmUgdG8gdGhlIGFwcGxpY2F0aW9uIHRoYXQgd291bGQgY2FycnkgaXQuIFBlZXJzIHRoYXQg ZG8gbm90IHN1cHBvcnQgdGhlIGdlbmVyaWMgZXh0ZW5zaW9ucyBuZWVkIG5vdCB1bmRlcnN0YW5k IG5vciByZWNvZ25pemUgdGhlc2Ugb3B0aW9uYWwgQVZQcy4gSG93ZXZlciwgaXQgaXMgcmVjb21t ZW5kZWQgdGhhdCB0aGUgYXV0aG9ycyBvZiB0aGUgZXh0ZW5zaW9uIHNwZWNpZnkgdGhlIGNvbnRl eHQgb3IgdXNhZ2Ugb2YgdGhlIG9wdGlvbmFsIEFWUHMuIEFzIGFuIGV4YW1wbGUsIGluIHRoZSBj YXNlIHRoYXQgdGhlIEFWUCBjYW4gYmUgdXNlZCBvbmx5IGJ5IGEgc3BlY2lmaWMgc2V0IG9mIGFw cGxpY2F0aW9ucyB0aGVuIHRoZSBzcGVjaWZpY2F0aW9uIG11c3QgZW51bWVyYXRlIHRoZXNlIGFw cGxpY2F0aW9ucyBhbmQgdGhlIHNjZW5hcmlvcyB3aGVuIHRoZSBvcHRpb25hbCBBVlBzIHdpbGwg YmUgdXNlZC4gSW4gdGhlIGNhc2Ugd2hlcmUgdGhlIG9wdGlvbmFsIEFWUHMgY2FuIGJlIGNhcnJp ZWQgYnkgYW55IGFwcGxpY2F0aW9uLCBpdCBpcyBzaG91bGQgYmUgc3VmZmljaWVudCB0byBzcGVj aWZ5IHN1Y2ggYSB1c2UgY2FzZSBhbmQgcGVyaGFwcyBwcm92aWRlIHNwZWNpZmljIGV4YW1wbGVz IG9mIGFwcGxpY2F0aW9ucyB1c2luZyB0aGVtLg0KPC9wPg0KPHA+SW4gbW9zdCBjYXNlcywgdGhl c2Ugb3B0aW9uYWwgQVZQcyBwaWdneWJhY2tlZCBieSBhcHBsaWNhdGlvbnMgd291bGQgYmUgZGVm aW5lZCBhcyBhIEdyb3VwZWQgQVZQIGFuZCBpdCB3b3VsZCBlbmNhcHN1bGF0ZSBhbGwgdGhlIGZ1 bmN0aW9uYWxpdHkgb2YgdGhlIGdlbmVyaWMgZXh0ZW5zaW9uLiBJbiBwcmFjdGljZSwgaXQgaXMg bm90IHVuY29tbW9uIHRoYXQgdGhlIEdyb3VwZWQgQVZQIHdpbGwgZW5jYXBzdWxhdGUgYW4gZXhp c3RpbmcgQVZQIHRoYXQgaGFzIHByZXZpb3VzbHkgYmVlbiBkZWZpbmVkIGFzIG1hbmRhdG9yeSAo J00nLWJpdCBzZXQpIGUuZy4sIDNHUFAgSU1TIEN4L0R4IGludGVyZmFjZXMgKDxhIGNsYXNzPSdp bmZvJyBocmVmPScjVFMyOS4yMjgnPltUUzI5LjIyOF08c3Bhbj4gKDwvc3Bhbj48c3BhbiBjbGFz cz0naW5mbyc+M3JkIEdlbmVyYXRpb24gUGFydG5lcnNoaXAgUHJvamVjdCwgJmxkcXVvOzNHUFAg VFMgMjkuMjI4OyBUZWNobmljYWwgU3BlY2lmaWNhdGlvbiBHcm91cCBDb3JlIE5ldHdvcmsgYW5k IFRlcm1pbmFsczsgSVAgTXVsdGltZWRpYSAoSU0pIFN1YnN5c3RlbSBDeCBhbmQgRHggSW50ZXJm YWNlczsgU2lnbmFsbGluZyBmbG93cyBhbmQgbWVzc2FnZSBjb250ZW50cywmcmRxdW87IC48L3Nw YW4+PHNwYW4+KTwvc3Bhbj48L2E+IGFuZCA8YSBjbGFzcz0naW5mbycgaHJlZj0nI1RTMjkuMjI5 Jz5bVFMyOS4yMjldPHNwYW4+ICg8L3NwYW4+PHNwYW4gY2xhc3M9J2luZm8nPjNyZCBHZW5lcmF0 aW9uIFBhcnRuZXJzaGlwIFByb2plY3QsICZsZHF1bzszR1BQIFRTIDI5LjIyOTsgVGVjaG5pY2Fs IFNwZWNpZmljYXRpb24gR3JvdXAgQ29yZSBOZXR3b3JrIGFuZCBUZXJtaW5hbHM7IEN4IGFuZCBE eCBpbnRlcmZhY2VzIGJhc2VkIG9uIHRoZSBEaWFtZXRlciBwcm90b2NvbDsgUHJvdG9jb2wgZGV0 YWlscywmcmRxdW87IC48L3NwYW4+PHNwYW4+KTwvc3Bhbj48L2E+KS4NCjwvcD4NCjxhIG5hbWU9 ImFuY2hvcjI0Ij48L2E+PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxs cGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+ PHRyPjx0ZCBjbGFzcz0iVE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+ PC90ZD48L3RyPjwvdGFibGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi43Ij48L2E+PGgzPjcuJm5i c3A7DQpJQU5BIENvbnNpZGVyYXRpb25zPC9oMz4NCg0KPHA+VGhpcyBkb2N1bWVudCBkb2VzIG5v dCByZXF1aXJlIGFjdGlvbnMgYnkgSUFOQS4NCjwvcD4NCjxhIG5hbWU9ImFuY2hvcjI1Ij48L2E+ PGJyIC8+PGhyIC8+DQo8dGFibGUgc3VtbWFyeT0ibGF5b3V0IiBjZWxscGFkZGluZz0iMCIgY2Vs bHNwYWNpbmc9IjIiIGNsYXNzPSJUT0NidWciIGFsaWduPSJyaWdodCI+PHRyPjx0ZCBjbGFzcz0i VE9DYnVnIj48YSBocmVmPSIjdG9jIj4mbmJzcDtUT0MmbmJzcDs8L2E+PC90ZD48L3RyPjwvdGFi bGU+DQo8YSBuYW1lPSJyZmMuc2VjdGlvbi44Ij48L2E+PGgzPjguJm5ic3A7DQpTZWN1cml0eSBD b25zaWRlcmF0aW9uczwvaDM+DQoNCjxwPlRoaXMgZG9jdW1lbnQgZG9lcyBwcm92aWRlcyBndWlk ZWxpbmVzIGFuZCBjb25zaWRlcmF0aW9ucyBmb3IgZXh0ZW5kaW5nIERpYW1ldGVyIGFuZCBEaWFt ZXRlciBhcHBsaWNhdGlvbnMuIEl0IGRvZXMgbm90IGRlZmluZSBub3IgYWRkcmVzcyBzZWN1cml0 eSByZWxhdGVkIHByb3RvY29scyBvciBzY2hlbWVzLg0KPC9wPg0KPGEgbmFtZT0iYW5jaG9yMjYi PjwvYT48YnIgLz48aHIgLz4NCjx0YWJsZSBzdW1tYXJ5PSJsYXlvdXQiIGNlbGxwYWRkaW5nPSIw IiBjZWxsc3BhY2luZz0iMiIgY2xhc3M9IlRPQ2J1ZyIgYWxpZ249InJpZ2h0Ij48dHI+PHRkIGNs YXNzPSJUT0NidWciPjxhIGhyZWY9IiN0b2MiPiZuYnNwO1RPQyZuYnNwOzwvYT48L3RkPjwvdHI+ PC90YWJsZT4NCjxhIG5hbWU9InJmYy5zZWN0aW9uLjkiPjwvYT48aDM+OS4mbmJzcDsNCkNvbnRy aWJ1dG9yczwvaDM+DQoNCjxwPlRoZSBjb250ZW50IG9mIHRoaXMgZG9jdW1lbnQgd2FzIGluZmx1 ZW5jZWQgYnkgYSBkZXNpZ24gdGVhbSBjcmVhdGVkIHRvIHJldmlzaXQgdGhlIERpYW1ldGVyIGV4 dGVuc2liaWxpdHkgcnVsZXMuIFRoZSB0ZWFtIGNvbnNpc3Rpbmcgb2YgdGhlIG1lbWJlcnMgbGlz dGVkIGJlbG93IHdhcyBmb3JtZWQgaW4gRmVicnVhcnkgMjAwOCBhbmQgZmluaXNoZWQgaXRzIHdv cmsgaW4gSnVuZSAyMDA4LiA8YnIgLz4NCjxiciAvPg0KIDwvcD4NCjx1bCBjbGFzcz0idGV4dCI+ DQo8bGk+QXZpIExpb3INCjwvbGk+DQo8bGk+R2xlbiBab3JuDQo8L2xpPg0KPGxpPkphcmkgQXJr a28NCjwvbGk+DQo8bGk+TGlvbmVsIE1vcmFuZA0KPC9saT4NCjxsaT5NYXJrIEpvbmVzDQo8L2xp Pg0KPGxpPlZpY3RvciBGYWphcmRvDQo8L2xpPg0KPGxpPlRvbGdhIEFzdmVyZW4NCjwvbGk+DQo8 bGk+Sm91bmkgS29yaG9uZW4NCjwvbGk+DQo8bGk+R2xlbm4gTWNHcmVnb3INCjwvbGk+DQo8bGk+ SGFubmVzIFRzY2hvZmVuaWcNCjwvbGk+DQo8bGk+RGF2ZSBGcmFzY29uZQ0KPC9saT4NCjwvdWw+ DQoNCjxwPldlIHdvdWxkIGxpa2UgdG8gdGhhbmsgVG9sZ2EgQXN2ZXJlbiwgR2xlbm4gTWNHcmVn b3IsIGFuZCBKb2huIExvdWdobmV5IGZvciB0aGVpciBjb250cmlidXRpb25zIGFzIGNvLWF1dGhv cnMgdG8gZWFybGllciB2ZXJzaW9ucyBvZiB0aGlzIGRvY3VtZW50Lg0KPC9wPg0KPGEgbmFtZT0i YWNrcyI+PC9hPjxiciAvPjxociAvPg0KPHRhYmxlIHN1bW1hcnk9ImxheW91dCIgY2VsbHBhZGRp bmc9IjAiIGNlbGxzcGFjaW5nPSIyIiBjbGFzcz0iVE9DYnVnIiBhbGlnbj0icmlnaHQiPjx0cj48 dGQgY2xhc3M9IlRPQ2J1ZyI+PGEgaHJlZj0iI3RvYyI+Jm5ic3A7VE9DJm5ic3A7PC9hPjwvdGQ+ PC90cj48L3RhYmxlPg0KPGEgbmFtZT0icmZjLnNlY3Rpb24uMTAiPjwvYT48aDM+MTAuJm5ic3A7 DQpBY2tub3dsZWRnbWVudHM8L2gzPg0KDQo8cD5XZSBncmVhdGx5IGFwcHJlY2lhdGUgdGhlIGlu c2lnaHQgcHJvdmlkZWQgYnkgRGlhbWV0ZXIgaW1wbGVtZW50ZXJzIHdobyBoYXZlIGhpZ2hsaWdo dGVkIHRoZSBpc3N1ZXMgYW5kIGNvbmNlcm5zIGJlaW5nIGFkZHJlc3NlZCBieSB0aGlzIGRvY3Vt ZW50Lg0KPC9wPg0KPGEgbmFtZT0icmZjLnJlZmVyZW5jZXMiPjwvYT48YnIgLz48aHIgLz4NCjx0 YWJsZSBzdW1tYXJ5PSJsYXlvdXQiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMiIgY2xh c3M9IlRPQ2J1ZyIgYWxpZ249InJpZ2h0Ij48dHI+PHRkIGNsYXNzPSJUT0NidWciPjxhIGhyZWY9 IiN0b2MiPiZuYnNwO1RPQyZuYnNwOzwvYT48L3RkPjwvdHI+PC90YWJsZT4NCjxhIG5hbWU9InJm Yy5zZWN0aW9uLjExIj48L2E+PGgzPjExLiZuYnNwOw0KUmVmZXJlbmNlczwvaDM+DQoNCjxhIG5h bWU9InJmYy5yZWZlcmVuY2VzMSI+PC9hPjxiciAvPjxociAvPg0KPHRhYmxlIHN1bW1hcnk9Imxh eW91dCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIyIiBjbGFzcz0iVE9DYnVnIiBhbGln bj0icmlnaHQiPjx0cj48dGQgY2xhc3M9IlRPQ2J1ZyI+PGEgaHJlZj0iI3RvYyI+Jm5ic3A7VE9D Jm5ic3A7PC9hPjwvdGQ+PC90cj48L3RhYmxlPg0KPGgzPjExLjEuJm5ic3A7Tm9ybWF0aXZlIFJl ZmVyZW5jZXM8L2gzPg0KPHRhYmxlIHdpZHRoPSI5OSUiIGJvcmRlcj0iMCI+DQo8dHI+PHRkIGNs YXNzPSJhdXRob3ItdGV4dCIgdmFsaWduPSJ0b3AiPjxhIG5hbWU9IkktRC5pZXRmLWRpbWUtcmZj MzU4OGJpcyI+W0ktRC5pZXRmLWRpbWUtcmZjMzU4OGJpc108L2E+PC90ZD4NCjx0ZCBjbGFzcz0i YXV0aG9yLXRleHQiPkZhamFyZG8sIFYuLCBBcmtrbywgSi4sIExvdWdobmV5LCBKLiwgYW5kIEcu IFpvcm4sICZsZHF1bzs8YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1p ZXRmLWRpbWUtcmZjMzU4OGJpcy0zNCI+RGlhbWV0ZXIgQmFzZSBQcm90b2NvbDwvYT4sJnJkcXVv OyBkcmFmdC1pZXRmLWRpbWUtcmZjMzU4OGJpcy0zNCAod29yayBpbiBwcm9ncmVzcyksIEp1bmUm bmJzcDsyMDEyICg8YSBocmVmPSJodHRwOi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9k cmFmdC1pZXRmLWRpbWUtcmZjMzU4OGJpcy0zNC50eHQiPlRYVDwvYT4pLjwvdGQ+PC90cj4NCjx0 cj48dGQgY2xhc3M9ImF1dGhvci10ZXh0IiB2YWxpZ249InRvcCI+PGEgbmFtZT0iUkZDMjExOSI+ W1JGQzIxMTldPC9hPjwvdGQ+DQo8dGQgY2xhc3M9ImF1dGhvci10ZXh0Ij48YSBocmVmPSJtYWls dG86c29iQGhhcnZhcmQuZWR1Ij5CcmFkbmVyLCBTLjwvYT4sICZsZHF1bzs8YSBocmVmPSJodHRw Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmMyMTE5Ij5LZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNz IHRvIEluZGljYXRlIFJlcXVpcmVtZW50IExldmVsczwvYT4sJnJkcXVvOyBCQ1AmbmJzcDsxNCwg UkZDJm5ic3A7MjExOSwgTWFyY2gmbmJzcDsxOTk3ICg8YSBocmVmPSJodHRwOi8vd3d3LnJmYy1l ZGl0b3Iub3JnL3JmYy9yZmMyMTE5LnR4dCI+VFhUPC9hPiwgPGEgaHJlZj0iaHR0cDovL3htbC5y ZXNvdXJjZS5vcmcvcHVibGljL3JmYy9odG1sL3JmYzIxMTkuaHRtbCI+SFRNTDwvYT4sIDxhIGhy ZWY9Imh0dHA6Ly94bWwucmVzb3VyY2Uub3JnL3B1YmxpYy9yZmMveG1sL3JmYzIxMTkueG1sIj5Y TUw8L2E+KS48L3RkPjwvdHI+DQo8dHI+PHRkIGNsYXNzPSJhdXRob3ItdGV4dCIgdmFsaWduPSJ0 b3AiPjxhIG5hbWU9IlJGQzM1ODgiPltSRkMzNTg4XTwvYT48L3RkPg0KPHRkIGNsYXNzPSJhdXRo b3ItdGV4dCI+Q2FsaG91biwgUC4sIExvdWdobmV5LCBKLiwgR3V0dG1hbiwgRS4sIFpvcm4sIEcu LCBhbmQgSi4gQXJra28sICZsZHF1bzs8YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9yZmMzNTg4Ij5EaWFtZXRlciBCYXNlIFByb3RvY29sPC9hPiwmcmRxdW87IFJGQyZuYnNwOzM1 ODgsIFNlcHRlbWJlciZuYnNwOzIwMDMgKDxhIGhyZWY9Imh0dHA6Ly93d3cucmZjLWVkaXRvci5v cmcvcmZjL3JmYzM1ODgudHh0Ij5UWFQ8L2E+KS48L3RkPjwvdHI+DQo8L3RhYmxlPg0KDQo8YSBu YW1lPSJyZmMucmVmZXJlbmNlczIiPjwvYT48YnIgLz48aHIgLz4NCjx0YWJsZSBzdW1tYXJ5PSJs YXlvdXQiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMiIgY2xhc3M9IlRPQ2J1ZyIgYWxp Z249InJpZ2h0Ij48dHI+PHRkIGNsYXNzPSJUT0NidWciPjxhIGhyZWY9IiN0b2MiPiZuYnNwO1RP QyZuYnNwOzwvYT48L3RkPjwvdHI+PC90YWJsZT4NCjxoMz4xMS4yLiZuYnNwO0luZm9ybWF0aXZl IFJlZmVyZW5jZXM8L2gzPg0KPHRhYmxlIHdpZHRoPSI5OSUiIGJvcmRlcj0iMCI+DQo8dHI+PHRk IGNsYXNzPSJhdXRob3ItdGV4dCIgdmFsaWduPSJ0b3AiPjxhIG5hbWU9IkktRC5hc3ZlcmVuLWRp bWUtZHVwY29ucyI+W0ktRC5hc3ZlcmVuLWRpbWUtZHVwY29uc108L2E+PC90ZD4NCjx0ZCBjbGFz cz0iYXV0aG9yLXRleHQiPkFzdmVyZW4sIFQuLCAmbGRxdW87PGEgaHJlZj0iaHR0cDovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtYXN2ZXJlbi1kaW1lLWR1cGNvbnMtMDAiPkRpYW1ldGVyIER1 cGxpY2F0ZSBEZXRlY3Rpb24gQ29ucy48L2E+LCZyZHF1bzsgZHJhZnQtYXN2ZXJlbi1kaW1lLWR1 cGNvbnMtMDAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBBdWd1c3QmbmJzcDsyMDA2ICg8YSBocmVmPSJo dHRwOi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1hc3ZlcmVuLWRpbWUtZHVw Y29ucy0wMC50eHQiPlRYVDwvYT4pLjwvdGQ+PC90cj4NCjx0cj48dGQgY2xhc3M9ImF1dGhvci10 ZXh0IiB2YWxpZ249InRvcCI+PGEgbmFtZT0iSS1ELmNhbGhvdW4tZGlhbWV0ZXItcmVzLW1nbXQi PltJLUQuY2FsaG91bi1kaWFtZXRlci1yZXMtbWdtdF08L2E+PC90ZD4NCjx0ZCBjbGFzcz0iYXV0 aG9yLXRleHQiPkNhbGhvdW4sIFAuLCAmbGRxdW87PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYu b3JnL2h0bWwvZHJhZnQtY2FsaG91bi1kaWFtZXRlci1yZXMtbWdtdC0wOC50eHQiPkRpYW1ldGVy IFJlc291cmNlIE1hbmFnZW1lbnQgRXh0ZW5zaW9uczwvYT4sJnJkcXVvOyBkcmFmdC1jYWxob3Vu LWRpYW1ldGVyLXJlcy1tZ210LTA4LnR4dCAod29yayBpbiBwcm9ncmVzcyksIE1hcmNoJm5ic3A7 MjAwMSAoPGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2lkL2RyYWZ0LWNhbGhvdW4tZGlh bWV0ZXItcmVzLW1nbXQtMDgudHh0Ij5UWFQ8L2E+KS48L3RkPjwvdHI+DQo8dHI+PHRkIGNsYXNz PSJhdXRob3ItdGV4dCIgdmFsaWduPSJ0b3AiPjxhIG5hbWU9IlEuMzMwMy4zIj5bUS4zMzAzLjNd PC9hPjwvdGQ+DQo8dGQgY2xhc3M9ImF1dGhvci10ZXh0Ij4zcmQgR2VuZXJhdGlvbiBQYXJ0bmVy c2hpcCBQcm9qZWN0LCAmbGRxdW87SVRVLVQgUmVjb21tZW5kYXRpb24gUS4zMzAzLjMsICJSZXNv dXJjZSBjb250cm9sIHByb3RvY29sIG5vLiAzIChyY3AzKTogUHJvdG9jb2wgYXQgdGhlIFJ3IGlu dGVyZmFjZSBiZXR3ZWVuIHRoZSBQb2xpY3kgRGVjaXNpb24gUGh5c2ljYWwgRW50aXR5IChQRC1Q RSkgYW5kIHRoZSBQb2xpY3kgRW5mb3JjZW1lbnQgUGh5c2ljYWwgRW50aXR5IChQRS1QRSk6IERp YW1ldGVyIiwmcmRxdW87IDIwMDguPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iYXV0aG9yLXRl eHQiIHZhbGlnbj0idG9wIj48YSBuYW1lPSJSRkMyNDA3Ij5bUkZDMjQwN108L2E+PC90ZD4NCjx0 ZCBjbGFzcz0iYXV0aG9yLXRleHQiPkQuIFBpcGVyLCAmbGRxdW87VGhlIEludGVybmV0IElQIFNl Y3VyaXR5IERvbWFpbiBvZiBJbnRlcnByZXRhdGlvbiBmb3IgSVNBS01QLCZyZHF1bzsgMTk5OC48 L3RkPjwvdHI+DQo8dHI+PHRkIGNsYXNzPSJhdXRob3ItdGV4dCIgdmFsaWduPSJ0b3AiPjxhIG5h bWU9IlJGQzI0MDkiPltSRkMyNDA5XTwvYT48L3RkPg0KPHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+ RC4gSGFya2lucyBhbmQgPGEgaHJlZj0ibWFpbHRvOiI+RC4gQ2FycmVsPC9hPiwgJmxkcXVvO1Ro ZSBJbnRlcm5ldCBLZXkgRXhjaGFuZ2UgKElLRSksJnJkcXVvOyAxOTk4LjwvdGQ+PC90cj4NCjx0 cj48dGQgY2xhc3M9ImF1dGhvci10ZXh0IiB2YWxpZ249InRvcCI+PGEgbmFtZT0iUkZDNDAwNSI+ W1JGQzQwMDVdPC9hPjwvdGQ+DQo8dGQgY2xhc3M9ImF1dGhvci10ZXh0Ij5QLiBDYWxob3VuIGV0 IGFsLiwgJmxkcXVvOzxhIGhyZWY9Imh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvcmZjL3JmYzQw MDUudHh0Ij5EaWFtZXRlciBOZXR3b3JrIEFjY2VzcyBTZXJ2ZXIgQXBwbGljYXRpb248L2E+LCZy ZHF1bzsgQXVndXN0Jm5ic3A7MjAwNS48L3RkPjwvdHI+DQo8dHI+PHRkIGNsYXNzPSJhdXRob3It dGV4dCIgdmFsaWduPSJ0b3AiPjxhIG5hbWU9IlJGQzQwNzIiPltSRkM0MDcyXTwvYT48L3RkPg0K PHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+UC4gRXJvbmVuIGV0IGFsLiwgJmxkcXVvOzxhIGhyZWY9 Imh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvcmZjL3JmYzQwNzIudHh0Ij5EaWFtZXRlciBFeHRl bnNpYmxlIEF1dGhlbnRpY2F0aW9uIFByb3RvY29sIChFQVApIEFwcGxpY2F0aW9uPC9hPiwmcmRx dW87IEF1Z3VzdCZuYnNwOzIwMDUuPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iYXV0aG9yLXRl eHQiIHZhbGlnbj0idG9wIj48YSBuYW1lPSJSRkM0MzAxIj5bUkZDNDMwMV08L2E+PC90ZD4NCjx0 ZCBjbGFzcz0iYXV0aG9yLXRleHQiPlMuIEtlbnQgYW5kIDxhIGhyZWY9Im1haWx0bzoiPksuIFNl bzwvYT4sICZsZHF1bztTZWN1cml0eSBBcmNoaXRlY3R1cmUgZm9yIHRoZSBJbnRlcm5ldCBQcm90 b2NvbCwmcmRxdW87IDIwMDUuPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQi IHZhbGlnbj0idG9wIj48YSBuYW1lPSJSRkM0NzQwIj5bUkZDNDc0MF08L2E+PC90ZD4NCjx0ZCBj bGFzcz0iYXV0aG9yLXRleHQiPk0uIEdhcmNpYS1NYXJ0aW4gZXQgYWwuLCAmbGRxdW87PGEgaHJl Zj0iaHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9yZmMvcmZjNDc0MC50eHQiPkRpYW1ldGVyIFNl c3Npb24gSW5pdGlhdGlvbiBQcm90b2NvbCAoU0lQKSBBcHBsaWNhdGlvbjwvYT4sJnJkcXVvOyBO b3ZlbWJlciZuYnNwOzIwMDYuPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQi IHZhbGlnbj0idG9wIj48YSBuYW1lPSJSRkM1NDQ3Ij5bUkZDNTQ0N108L2E+PC90ZD4NCjx0ZCBj bGFzcz0iYXV0aG9yLXRleHQiPkouIEtvcmhvbmVuIGV0IGFsLiwgJmxkcXVvOzxhIGhyZWY9Imh0 dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvcmZjL3JmYzU0NDcudHh0Ij5EaWFtZXRlciBNb2JpbGUg SVB2NjogU3VwcG9ydCBmb3IgTmV0d29yayBBY2Nlc3MgU2VydmVyIHRvIERpYW1ldGVyIFNlcnZl ciBJbnRlcmFjdGlvbjwvYT4sJnJkcXVvOyBGZWJydWFyeSZuYnNwOzIwMDkuPC90ZD48L3RyPg0K PHRyPjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQiIHZhbGlnbj0idG9wIj48YSBuYW1lPSJSRkM1Nzc3 Ij5bUkZDNTc3N108L2E+PC90ZD4NCjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQiPkouIEtvcmhvbmVu IGV0IGFsLiwgJmxkcXVvO1RyYWZmaWMgQ2xhc3NpZmljYXRpb24gYW5kIFF1YWxpdHkgb2YgU2Vy dmljZSAoUW9TKSBBdHRyaWJ1dGVzIGZvciBEaWFtZXRlciwmcmRxdW87IDIwMTAuPC90ZD48L3Ry Pg0KPHRyPjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQiIHZhbGlnbj0idG9wIj48YSBuYW1lPSJUUzI5 LjIyOCI+W1RTMjkuMjI4XTwvYT48L3RkPg0KPHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+M3JkIEdl bmVyYXRpb24gUGFydG5lcnNoaXAgUHJvamVjdCwgJmxkcXVvOzxhIGhyZWY9Imh0dHA6Ly93d3cu M2dwcC5vcmcvZnRwL1NwZWNzL2h0bWwtaW5mby8yOTI3Mi5odG0iPjNHUFAgVFMgMjkuMjI4OyBU ZWNobmljYWwgU3BlY2lmaWNhdGlvbiBHcm91cCBDb3JlIE5ldHdvcmsgYW5kIFRlcm1pbmFsczsg SVAgTXVsdGltZWRpYSAoSU0pIFN1YnN5c3RlbSBDeCBhbmQgRHggSW50ZXJmYWNlczsgU2lnbmFs bGluZyBmbG93cyBhbmQgbWVzc2FnZSBjb250ZW50czwvYT4uJnJkcXVvOzwvdGQ+PC90cj4NCjx0 cj48dGQgY2xhc3M9ImF1dGhvci10ZXh0IiB2YWxpZ249InRvcCI+PGEgbmFtZT0iVFMyOS4yMjki PltUUzI5LjIyOV08L2E+PC90ZD4NCjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQiPjNyZCBHZW5lcmF0 aW9uIFBhcnRuZXJzaGlwIFByb2plY3QsICZsZHF1bzs8YSBocmVmPSJodHRwOi8vd3d3LjNncHAu b3JnL2Z0cC9TcGVjcy9odG1sLWluZm8vMjkyMjkuaHRtIj4zR1BQIFRTIDI5LjIyOTsgVGVjaG5p Y2FsIFNwZWNpZmljYXRpb24gR3JvdXAgQ29yZSBOZXR3b3JrIGFuZCBUZXJtaW5hbHM7IEN4IGFu ZCBEeCBpbnRlcmZhY2VzIGJhc2VkIG9uIHRoZSBEaWFtZXRlciBwcm90b2NvbDsgUHJvdG9jb2wg ZGV0YWlsczwvYT4uJnJkcXVvOzwvdGQ+PC90cj4NCjx0cj48dGQgY2xhc3M9ImF1dGhvci10ZXh0 IiB2YWxpZ249InRvcCI+PGEgbmFtZT0iVFMyOS4zMjgiPltUUzI5LjMyOF08L2E+PC90ZD4NCjx0 ZCBjbGFzcz0iYXV0aG9yLXRleHQiPjNyZCBHZW5lcmF0aW9uIFBhcnRuZXJzaGlwIFByb2plY3Qs ICZsZHF1bzs8YSBocmVmPSJodHRwOi8vd3d3LjNncHAub3JnL2Z0cC9TcGVjcy9odG1sLWluZm8v MjkzMjguaHRtIj4zR1BQIFRTIDI5LjMyODsgVGVjaG5pY2FsIFNwZWNpZmljYXRpb24gR3JvdXAg Q29yZSBOZXR3b3JrIGFuZCBUZXJtaW5hbHM7IElQIE11bHRpbWVkaWEgKElNKSBTdWJzeXN0ZW0g U2ggaW50ZXJmYWNlOyBzaWduYWxsaW5nIGZsb3dzIGFuZCBtZXNzYWdlIGNvbnRlbnQ8L2E+LiZy ZHF1bzs8L3RkPjwvdHI+DQo8dHI+PHRkIGNsYXNzPSJhdXRob3ItdGV4dCIgdmFsaWduPSJ0b3Ai PjxhIG5hbWU9IlRTMjkuMzI5Ij5bVFMyOS4zMjldPC9hPjwvdGQ+DQo8dGQgY2xhc3M9ImF1dGhv ci10ZXh0Ij4zcmQgR2VuZXJhdGlvbiBQYXJ0bmVyc2hpcCBQcm9qZWN0LCAmbGRxdW87PGEgaHJl Zj0iaHR0cDovL3d3dy4zZ3BwLm9yZy9mdHAvU3BlY3MvaHRtbC1pbmZvLzI5MzI5Lmh0bSI+M0dQ UCBUUyAyOS4zMjk7IFRlY2huaWNhbCBTcGVjaWZpY2F0aW9uIEdyb3VwIENvcmUgTmV0d29yayBh bmQgVGVybWluYWxzOyBTaCBJbnRlcmZhY2UgYmFzZWQgb24gdGhlIERpYW1ldGVyIHByb3RvY29s OyBQcm90b2NvbCBkZXRhaWxzPC9hPi4mcmRxdW87PC90ZD48L3RyPg0KPC90YWJsZT4NCg0KPGEg bmFtZT0icmZjLmF1dGhvcnMiPjwvYT48YnIgLz48aHIgLz4NCjx0YWJsZSBzdW1tYXJ5PSJsYXlv dXQiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMiIgY2xhc3M9IlRPQ2J1ZyIgYWxpZ249 InJpZ2h0Ij48dHI+PHRkIGNsYXNzPSJUT0NidWciPjxhIGhyZWY9IiN0b2MiPiZuYnNwO1RPQyZu YnNwOzwvYT48L3RkPjwvdHI+PC90YWJsZT4NCjxoMz5BdXRob3JzJyBBZGRyZXNzZXM8L2gzPg0K PHRhYmxlIHdpZHRoPSI5OSUiIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5n PSIwIj4NCjx0cj48dGQgY2xhc3M9ImF1dGhvci10ZXh0Ij4mbmJzcDs8L3RkPg0KPHRkIGNsYXNz PSJhdXRob3ItdGV4dCI+TGlvbmVsIE1vcmFuZCAoZWRpdG9yKTwvdGQ+PC90cj4NCjx0cj48dGQg Y2xhc3M9ImF1dGhvci10ZXh0Ij4mbmJzcDs8L3RkPg0KPHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+ T3JhbmdlIExhYnM8L3RkPjwvdHI+DQo8dHI+PHRkIGNsYXNzPSJhdXRob3IiIGFsaWduPSJyaWdo dCI+RW1haWw6Jm5ic3A7PC90ZD4NCjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQiPjxhIGhyZWY9Im1h aWx0bzpsaW9uZWwubW9yYW5kQG9yYW5nZS5jb20iPmxpb25lbC5tb3JhbmRAb3JhbmdlLmNvbTwv YT48L3RkPjwvdHI+DQo8dHIgY2VsbHBhZGRpbmc9IjMiPjx0ZD4mbmJzcDs8L3RkPjx0ZD4mbmJz cDs8L3RkPjwvdHI+DQo8dHI+PHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+Jm5ic3A7PC90ZD4NCjx0 ZCBjbGFzcz0iYXV0aG9yLXRleHQiPlZpY3RvciBGYWphcmRvPC90ZD48L3RyPg0KPHRyPjx0ZCBj bGFzcz0iYXV0aG9yIiBhbGlnbj0icmlnaHQiPkVtYWlsOiZuYnNwOzwvdGQ+DQo8dGQgY2xhc3M9 ImF1dGhvci10ZXh0Ij48YSBocmVmPSJtYWlsdG86dmYwMjEzQGdtYWlsLmNvbSI+dmYwMjEzQGdt YWlsLmNvbTwvYT48L3RkPjwvdHI+DQo8dHIgY2VsbHBhZGRpbmc9IjMiPjx0ZD4mbmJzcDs8L3Rk Pjx0ZD4mbmJzcDs8L3RkPjwvdHI+DQo8dHI+PHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+Jm5ic3A7 PC90ZD4NCjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQiPkhhbm5lcyBUc2Nob2ZlbmlnPC90ZD48L3Ry Pg0KPHRyPjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQiPiZuYnNwOzwvdGQ+DQo8dGQgY2xhc3M9ImF1 dGhvci10ZXh0Ij5Ob2tpYSBTaWVtZW5zIE5ldHdvcmtzPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFz cz0iYXV0aG9yLXRleHQiPiZuYnNwOzwvdGQ+DQo8dGQgY2xhc3M9ImF1dGhvci10ZXh0Ij5MaW5u b2l0dXN0aWUgNjwvdGQ+PC90cj4NCjx0cj48dGQgY2xhc3M9ImF1dGhvci10ZXh0Ij4mbmJzcDs8 L3RkPg0KPHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+RXNwb28gIDAyNjAwPC90ZD48L3RyPg0KPHRy Pjx0ZCBjbGFzcz0iYXV0aG9yLXRleHQiPiZuYnNwOzwvdGQ+DQo8dGQgY2xhc3M9ImF1dGhvci10 ZXh0Ij5GaW5sYW5kPC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iYXV0aG9yIiBhbGlnbj0icmln aHQiPlBob25lOiZuYnNwOzwvdGQ+DQo8dGQgY2xhc3M9ImF1dGhvci10ZXh0Ij4rMzU4ICg1MCkg NDg3MTQ0NTwvdGQ+PC90cj4NCjx0cj48dGQgY2xhc3M9ImF1dGhvciIgYWxpZ249InJpZ2h0Ij5F bWFpbDombmJzcDs8L3RkPg0KPHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+PGEgaHJlZj0ibWFpbHRv Okhhbm5lcy5Uc2Nob2ZlbmlnQGdteC5uZXQiPkhhbm5lcy5Uc2Nob2ZlbmlnQGdteC5uZXQ8L2E+ PC90ZD48L3RyPg0KPHRyPjx0ZCBjbGFzcz0iYXV0aG9yIiBhbGlnbj0icmlnaHQiPlVSSTombmJz cDs8L3RkPg0KPHRkIGNsYXNzPSJhdXRob3ItdGV4dCI+PGEgaHJlZj0iaHR0cDovL3d3dy50c2No b2ZlbmlnLnByaXYuYXQiPmh0dHA6Ly93d3cudHNjaG9mZW5pZy5wcml2LmF0PC9hPjwvdGQ+PC90 cj4NCjwvdGFibGU+DQo8L2JvZHk+PC9odG1sPg0K --_003_6B7134B31289DC4FAF731D844122B36E0298E4PEXCVZYM13corpora_-- From jouni.nospam@gmail.com Fri Jul 20 06:11:06 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB38E21F85E4 for ; Fri, 20 Jul 2012 06:11:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZpMGDQ--C3qg for ; Fri, 20 Jul 2012 06:10:59 -0700 (PDT) Received: from mail-wg0-f44.google.com (mail-wg0-f44.google.com [74.125.82.44]) by ietfa.amsl.com (Postfix) with ESMTP id E8FDB21F85E1 for ; Fri, 20 Jul 2012 06:10:58 -0700 (PDT) Received: by wgbdr13 with SMTP id dr13so2564137wgb.13 for ; Fri, 20 Jul 2012 06:11:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=pzoiezzjtzI1/ofM3olGRE2dLk8wXkcuAKQX/CbXeLs=; b=Sp58NmPF513BKU7M1tF2r2GNdlCNW+6w/eU2nz0pzzzjnsyutP34azzx/1oyYshafW MIA5Y+4Udq4xo07VvyZw4iJEfBuHi5MFXddiuBBo5MueHeBq6jpyXGPb2fN0hkqhtWmx ndh4F+/CwHvzn6L8Z7ban1L3fcf403jTsKu6+wwt5bb+GoK6LBYaDwFKvNqwcGs+2g1k CrdNv2tvD0Ev+V9Ox9WeoDlRxAGrHrRm6sOBbjs64UCaOFnDWBez8de+6qg3Vm/dNzLX yjVwo9DIaO/cZpn0NzoFFTZpbfYMn0OCveWXzVnzArSjhYVQMO6S5hEdr0k+bpwF+n0y /nIg== Received: by 10.217.4.139 with SMTP id u11mr3562241wes.190.1342789912443; Fri, 20 Jul 2012 06:11:52 -0700 (PDT) Received: from ?IPv6:2001:1bc8:101:f101:226:bbff:fe18:6e9c? ([2001:1bc8:101:f101:226:bbff:fe18:6e9c]) by mx.google.com with ESMTPS id i46sm14355301eem.0.2012.07.20.06.11.43 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 20 Jul 2012 06:11:50 -0700 (PDT) Mime-Version: 1.0 (Apple Message framework v1084) Content-Type: text/plain; charset=us-ascii From: jouni korhonen In-Reply-To: <1BDC22A3-83B9-491D-A8AA-CF9CD718265A@iki.fi> Date: Fri, 20 Jul 2012 16:11:40 +0300 Content-Transfer-Encoding: 7bit Message-Id: <277A4FAB-3934-4DE4-BC39-650296C30385@gmail.com> References: <1BDC22A3-83B9-491D-A8AA-CF9CD718265A@iki.fi> To: dime@ietf.org X-Mailer: Apple Mail (2.1084) Subject: Re: [Dime] RFC3588bis cipher suite question X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jul 2012 13:11:06 -0000 Any comments/views on this? - Jouni On Jun 21, 2012, at 2:17 PM, jouni korhonen wrote: > Folks, > > In Section 13.1 we have the following text: > > Diameter nodes MUST be able to negotiate the following TLS/TCP and > DTLS/SCTP cipher suites: > > TLS_RSA_WITH_RC4_128_MD5 > TLS_RSA_WITH_RC4_128_SHA > TLS_RSA_WITH_3DES_EDE_CBC_SHA > > Diameter nodes SHOULD be able to negotiate the following TLS/TCP and > DTLS/SCTP cipher suite: > > TLS_RSA_WITH_AES_128_CBC_SHA > > Note that that it is quite possible that support for the > TLS_RSA_WITH_AES_128_CBC_SHA ciphersuite will be REQUIRED at some > future date. Diameter nodes MAY negotiate other TLS/TCP and DTLS/ > SCTP cipher suites. > > I know this is a bit late in the pipe but.. but RFC6347 (DTLS v1.2) has > the following statement: > > The only stream cipher described in TLS 1.2 is RC4, which cannot be > randomly accessed. RC4 MUST NOT be used with DTLS. > > That does not go too well with the RFC3588bis MUST for RC4 stream ciphers. > > Also RFC5246 states: > > In the absence of an application profile standard specifying > otherwise, a TLS-compliant application MUST implement the cipher > suite TLS_RSA_WITH_AES_128_CBC_SHA.. > > Can we understand that the current text in RFC3588bis serves as the > profile and the SHOULD there is then OK from the RFC5246 point of > view? > > - Jouni > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime From jouni.nospam@gmail.com Fri Jul 20 06:27:41 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C6F521F85A4 for ; Fri, 20 Jul 2012 06:27:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DZ-qJKU6te49 for ; Fri, 20 Jul 2012 06:27:41 -0700 (PDT) Received: from mail-wg0-f44.google.com (mail-wg0-f44.google.com [74.125.82.44]) by ietfa.amsl.com (Postfix) with ESMTP id B8E2121F8596 for ; Fri, 20 Jul 2012 06:27:40 -0700 (PDT) Received: by wgbdr13 with SMTP id dr13so2576736wgb.13 for ; Fri, 20 Jul 2012 06:28:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=Fg4s0LGsHW4ubuCne19y7w6m0Y5092nmwYuTY1VXQ2E=; b=vbA4Pu5rAcI/yDA8XI6nJYDibEz4FlD92q7rV5spEoIcjfkA1bEV3KtJH0+UNfzoqk CCKVTdok+pnsx7dAZGK+gcGW54lT56VmBUyuVStbrO0JuwOYzEhULUUNywXyx8WBffHp MmnG+BsNWqsnmnESBWZiImihf8a/RMackqLCcFbSmCoyaK/Dk7KQK09vgOIE1Gesn1HI H4lPb0852yb2Xb78cVT2IYDCI9h0zZH++RGEa1L3GXHh/Y2qfbOiSjuYwVOzIa+pHGe8 z08IDdnGlYyHOq9umeFtIo/CshPdkguYQ2i+LvvXCwgyfaKfGzQtUol9IxuIL7b0RmHV o35w== Received: by 10.180.107.103 with SMTP id hb7mr14524935wib.3.1342790916070; Fri, 20 Jul 2012 06:28:36 -0700 (PDT) Received: from ?IPv6:2001:1bc8:101:f101:226:bbff:fe18:6e9c? ([2001:1bc8:101:f101:226:bbff:fe18:6e9c]) by mx.google.com with ESMTPS id g42sm14406658eem.14.2012.07.20.06.28.21 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 20 Jul 2012 06:28:35 -0700 (PDT) Mime-Version: 1.0 (Apple Message framework v1084) Content-Type: text/plain; charset=us-ascii From: jouni korhonen In-Reply-To: <169CD4F5-4915-4E44-9FB0-804E5BDF66BA@gmail.com> Date: Fri, 20 Jul 2012 16:28:20 +0300 Content-Transfer-Encoding: 7bit Message-Id: References: <169CD4F5-4915-4E44-9FB0-804E5BDF66BA@gmail.com> To: dime@ietf.org X-Mailer: Apple Mail (2.1084) Cc: dime-chairs@tools.ietf.org Subject: Re: [Dime] Draft agenda X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jul 2012 13:27:41 -0000 Folks, The agenda has been updated: http://www.ietf.org/proceedings/84/agenda/agenda-84-dime Also, I solicit for volunteers for taking notes and doing scribe. If you feel like doing a service for the community let co-chairs know :) - Jouni & Lionel On Jul 17, 2012, at 12:08 PM, jouni korhonen wrote: > Folks, > > See the draft agenda for the upcoming Dime WG meeting. We > got 2h to burn again this time. > > - Jouni & Lionel > > ------------------------------------------------------------------- > > * Administrativa (chairs) 5 mins > > * WG status update (chairs) 10 mins > > * Diameter overload control > - Overload control justification and use cases (Martin) 15 mins > - draft-mcmurry-dime-overload-reqs (Eric/Ben) 40 mins > > * Group signaling > - draft-ietf-dime-group-signaling (N.N.) 20 mins > > * Realm based redirect > - draft-ietf-dime-realm-based-redirect (Tom) 15 mins > > * Design Guidelines > - draft-ietf-dime-app-design-guide (Lionel) 15 mins > > * AOB > - If any time left.. > > > From glenzorn@gmail.com Fri Jul 20 20:42:28 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA1B321F8483 for ; Fri, 20 Jul 2012 20:42:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.412 X-Spam-Level: X-Spam-Status: No, score=-3.412 tagged_above=-999 required=5 tests=[AWL=0.186, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uQVC9qpPluf1 for ; Fri, 20 Jul 2012 20:42:28 -0700 (PDT) Received: from mail-pb0-f44.google.com (mail-pb0-f44.google.com [209.85.160.44]) by ietfa.amsl.com (Postfix) with ESMTP id E54BC21F8480 for ; Fri, 20 Jul 2012 20:42:27 -0700 (PDT) Received: by pbcwy7 with SMTP id wy7so7454562pbc.31 for ; Fri, 20 Jul 2012 20:43:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=nLkX11qpd9+FWFu4u/pfqYljOm6XW2Fbud/UCnPzI/Y=; b=a0dLXbpN0LFLt0hnxAb/VRWf5Vq9DTlQJtRC8lPKzkZhL+pMRdnQvqAZOMC/1Tzdmo jWRvCNVxcXZgpV6asa+R3omYKgokwx+IKSkaubePbRKZiJQ+c2MWYcdWoseoMRFheoZA gW9qQnLVIFtpxWEwTUuvWrylltcIepRAmSanTRj2feXirh2JdN5hWzqSjQe9TEdvRD2u mLNKAjDD3ke9V4RKbUMqkQVjA/6qB0Wu+WQWDy+cxvLIEUYmZiiQAihOjuOIIahX0WKU tRkfg47FhVkQR79c+9j77Vq/t0+I2vBN8yk6fW7ubEz3e5sfkGNvVuUib5MKLFVfet6o LVBw== Received: by 10.66.73.69 with SMTP id j5mr15962934pav.8.1342842205533; Fri, 20 Jul 2012 20:43:25 -0700 (PDT) Received: from [192.168.0.102] (ppp-124-122-187-245.revip2.asianet.co.th. [124.122.187.245]) by mx.google.com with ESMTPS id tv6sm5214586pbc.24.2012.07.20.20.43.23 (version=SSLv3 cipher=OTHER); Fri, 20 Jul 2012 20:43:24 -0700 (PDT) From: Glen Zorn To: dime@ietf.org In-Reply-To: <277A4FAB-3934-4DE4-BC39-650296C30385@gmail.com> References: <1BDC22A3-83B9-491D-A8AA-CF9CD718265A@iki.fi> <277A4FAB-3934-4DE4-BC39-650296C30385@gmail.com> Content-Type: multipart/alternative; boundary="=-/l/nw2DmSkH48DYAhWMh" Organization: Network Zen Date: Sat, 21 Jul 2012 10:43:21 +0700 Message-ID: <1342842201.7688.8.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Subject: Re: [Dime] RFC3588bis cipher suite question X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Jul 2012 03:42:28 -0000 --=-/l/nw2DmSkH48DYAhWMh Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Fri, 2012-07-20 at 16:11 +0300, jouni korhonen wrote: > Any comments/views on this? Yes. > > - Jouni > > > On Jun 21, 2012, at 2:17 PM, jouni korhonen wrote: > > > Folks, > > > > In Section 13.1 we have the following text: > > > > Diameter nodes MUST be able to negotiate the following TLS/TCP and > > DTLS/SCTP cipher suites: > > > > TLS_RSA_WITH_RC4_128_MD5 > > TLS_RSA_WITH_RC4_128_SHA > > TLS_RSA_WITH_3DES_EDE_CBC_SHA > > > > Diameter nodes SHOULD be able to negotiate the following TLS/TCP and > > DTLS/SCTP cipher suite: > > > > TLS_RSA_WITH_AES_128_CBC_SHA > > > > Note that that it is quite possible that support for the > > TLS_RSA_WITH_AES_128_CBC_SHA ciphersuite will be REQUIRED at some > > future date. Diameter nodes MAY negotiate other TLS/TCP and DTLS/ > > SCTP cipher suites. > > > > I know this is a bit late in the pipe but.. but RFC6347 (DTLS v1.2) has > > the following statement: > > > > The only stream cipher described in TLS 1.2 is RC4, which cannot be > > randomly accessed. RC4 MUST NOT be used with DTLS. > > > > That does not go too well with the RFC3588bis MUST for RC4 stream ciphers. > > > > Also RFC5246 states: > > > > In the absence of an application profile standard specifying > > otherwise, a TLS-compliant application MUST implement the cipher > > suite TLS_RSA_WITH_AES_128_CBC_SHA.. > > > > Can we understand that the current text in RFC3588bis serves as the > > profile and the SHOULD there is then OK from the RFC5246 point of > > view? Yes. > > > > - Jouni > > _______________________________________________ > > DiME mailing list > > DiME@ietf.org > > https://www.ietf.org/mailman/listinfo/dime > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime --=-/l/nw2DmSkH48DYAhWMh Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Fri, 2012-07-20 at 16:11 +0300, jouni korhonen wrote:

Any comments/views on this?

Yes.


- Jouni


On Jun 21, 2012, at 2:17 PM, jouni korhonen wrote:

> Folks,
> 
> In Section 13.1 we have the following text:
> 
>   Diameter nodes MUST be able to negotiate the following TLS/TCP and
>   DTLS/SCTP cipher suites:
> 
>         TLS_RSA_WITH_RC4_128_MD5
>         TLS_RSA_WITH_RC4_128_SHA
>         TLS_RSA_WITH_3DES_EDE_CBC_SHA
> 
>   Diameter nodes SHOULD be able to negotiate the following TLS/TCP and
>   DTLS/SCTP cipher suite:
> 
>         TLS_RSA_WITH_AES_128_CBC_SHA
> 
>   Note that that it is quite possible that support for the
>   TLS_RSA_WITH_AES_128_CBC_SHA ciphersuite will be REQUIRED at some
>   future date.  Diameter nodes MAY negotiate other TLS/TCP and DTLS/
>   SCTP cipher suites.
> 
> I know this is a bit late in the pipe but.. but RFC6347 (DTLS v1.2) has
> the following statement:
> 
>   The only stream cipher described in TLS 1.2 is RC4, which cannot be
>   randomly accessed.  RC4 MUST NOT be used with DTLS.
> 
> That does not go too well with the RFC3588bis MUST for RC4 stream ciphers.
> 
> Also RFC5246 states:
> 
>   In the absence of an application profile standard specifying
>   otherwise, a TLS-compliant application MUST implement the cipher
>   suite TLS_RSA_WITH_AES_128_CBC_SHA..
> 
> Can we understand that the current text in RFC3588bis serves as the
> profile and the SHOULD there is then OK from the RFC5246 point of
> view?

Yes.

> 
> - Jouni
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime

_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime

--=-/l/nw2DmSkH48DYAhWMh-- From dkf30.dp@gmail.com Fri Jul 20 23:21:58 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C91021F852D for ; Fri, 20 Jul 2012 23:21:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.019 X-Spam-Level: X-Spam-Status: No, score=0.019 tagged_above=-999 required=5 tests=[AWL=-1.202, BAYES_50=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, TVD_SPACE_RATIO=2.219] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DVyhpRqoSEWq for ; Fri, 20 Jul 2012 23:21:58 -0700 (PDT) Received: from mail-gg0-f172.google.com (mail-gg0-f172.google.com [209.85.161.172]) by ietfa.amsl.com (Postfix) with ESMTP id D2C2D21F852C for ; Fri, 20 Jul 2012 23:21:57 -0700 (PDT) Received: by ggnc4 with SMTP id c4so5007406ggn.31 for ; Fri, 20 Jul 2012 23:22:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=bfmy76ZFlwL4El2vHKYUM2I6+73AeWOCHzXnGHcFREw=; b=ryFfsEhIzwYV1GL33fJ8bPnHZwvXn3999t40W/LABOzbuEceuj8zhsYVusbhhnWBWv s14Mcf3XxYRr/X9opQr1RE94RaSUt6lnFGkntNBJdJLIWUh/lSOeEEEWPRr6TyNnISoZ DBo8ZnkP4B8KuXq+22GPTqd1KnX5zMGGq12itY/ztKIBOVhHps99pQ9amvxGpnTDmaXC ZBesJ7d6CG/8O7UN4oCtOxWg7Q5p4V74woGbT8pejNdWWnY/QDUoOgPEYf4dTQx9OF+Z eiOIsiedp/NNeUxxrc13BQREjhJC2itdM/0RkQ/DkF72FRJV0JAOxpSzsb/FxfdETimf yFjg== MIME-Version: 1.0 Received: by 10.101.165.23 with SMTP id s23mr2376502ano.51.1342851775694; Fri, 20 Jul 2012 23:22:55 -0700 (PDT) Received: by 10.101.205.36 with HTTP; Fri, 20 Jul 2012 23:22:55 -0700 (PDT) Received: by 10.101.205.36 with HTTP; Fri, 20 Jul 2012 23:22:55 -0700 (PDT) Date: Sat, 21 Jul 2012 08:22:55 +0200 Message-ID: From: "dkf30.dp" To: dime@ietf.org Content-Type: multipart/alternative; boundary=001636ed641c1386bd04c5510bad Subject: [Dime] https://m.facebook.com/login.php?m=m&refsrc=http%3A%2F%2Fwww.facebook.com%2F&refid=8 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Jul 2012 06:21:58 -0000 --001636ed641c1386bd04c5510bad Content-Type: text/plain; charset=ISO-8859-1 https://m.facebook.com/login.php?m=m&refsrc=http%3A%2F%2Fwww.facebook.com%2F&refid=8 --001636ed641c1386bd04c5510bad Content-Type: text/html; charset=ISO-8859-1

https://m.facebook.com/login.php?m=m&refsrc=http%3A%2F%2Fwww.facebook.com%2F&refid=8

--001636ed641c1386bd04c5510bad-- From bclaise@cisco.com Tue Jul 24 13:42:27 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4095111E80B5 for ; Tue, 24 Jul 2012 13:42:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.998 X-Spam-Level: X-Spam-Status: No, score=-9.998 tagged_above=-999 required=5 tests=[AWL=0.600, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yK1xZ6dZcXYT for ; Tue, 24 Jul 2012 13:42:26 -0700 (PDT) Received: from av-tac-sj.cisco.com (av-tac-sj.cisco.com [171.68.227.119]) by ietfa.amsl.com (Postfix) with ESMTP id 4CC2111E80A4 for ; Tue, 24 Jul 2012 13:42:26 -0700 (PDT) X-TACSUNS: Virus Scanned Received: from fire.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-sj.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6OKgPCA001361; Tue, 24 Jul 2012 13:42:25 -0700 (PDT) Received: from [10.154.201.107] ([10.154.201.107]) by fire.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id q6OKgN7E021884; Tue, 24 Jul 2012 13:42:24 -0700 (PDT) Message-ID: <500F08AF.4010102@cisco.com> Date: Tue, 24 Jul 2012 13:42:23 -0700 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20120713 Thunderbird/14.0 MIME-Version: 1.0 To: Glen Zorn References: <20120715054226.4612.98302.idtracker@ietfa.amsl.com> In-Reply-To: <20120715054226.4612.98302.idtracker@ietfa.amsl.com> X-Forwarded-Message-Id: <20120715054226.4612.98302.idtracker@ietfa.amsl.com> Content-Type: multipart/alternative; boundary="------------010204030602090806000700" Cc: dime mailing list Subject: [Dime] Fwd: New Version Notification - draft-ietf-dime-rfc4005bis-10.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Jul 2012 20:42:27 -0000 This is a multi-part message in MIME format. --------------010204030602090806000700 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi Glen, Thanks for this new version. Two points that need to be addressed. 1. It seems that you have forgotten what we agreed upon on the mailing list. How about this? OLD: 3. Diameter NAS Application Messages This section defines the Diameter message Command-Code [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all Diameter implementations conforming to this specification. The Command Codes are as follows: +-----------------------------------+---------+------+--------------+ | Command Name | Abbrev. | Code | Reference | +-----------------------------------+---------+------+--------------+ | AA-Request | AAR | 265 | Section 3.1 | | AA-Answer | AAA | 265 | Section 3.2 | | Re-Auth-Request | RAR | 258 | Section 3.3 | | Re-Auth-Answer | RAA | 258 | Section 3.4 | | Session-Termination-Request | STR | 275 | Section 3.5 | | Session-Termination-Answer | STA | 275 | Section 3.6 | | Abort-Session-Request | ASR | 274 | Section 3.7 | | Abort-Session-Answer | ASA | 274 | Section 3.8 | | Accounting-Request | ACR | 271 | Section 3.9 | | Accounting-Answer | ACA | 271 | Section 3.10 | +-----------------------------------+---------+------+--------------+ NEW: 3. Diameter NAS Application Messages This section defines the Diameter message Command-Code [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all Diameter implementations conforming to this specification. The Command Codes are as follows: +-----------------------------------+---------+------+--------------+ | Command Name | Abbrev. | Code | Reference | +-----------------------------------+---------+------+--------------+ | AA-Request | AAR | 265 | Section 3.1 | | AA-Answer | AAA | 265 | Section 3.2 | | Re-Auth-Request | RAR | 258 | Section 3.3 | | Re-Auth-Answer | RAA | 258 | Section 3.4 | | Session-Termination-Request | STR | 275 | Section 3.5 | | Session-Termination-Answer | STA | 275 | Section 3.6 | | Abort-Session-Request | ASR | 274 | Section 3.7 | | Abort-Session-Answer | ASA | 274 | Section 3.8 | | Accounting-Request | ACR | 271 | Section 3.9 | | Accounting-Answer | ACA | 271 | Section 3.10 | +-----------------------------------+---------+------+--------------+ Note that the message formats in the following sub-sections use the standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], Section 3.2). 2. To be complete, and to let the DIME WG know, let me include what we have exchanged in a private email regarding the IANA pointer for the application id 1. You asked for a statement and some consistency from the IESG. - statement: The reference should be where the item in question is documented, not what registered it. - consistency: right, we need to make this clear and not change it. Michelle Coton and Barry Leiba are working on an update to BCP 26 that will, in part, do just that, and you are welcome to comment on it when it's posted (during or shortly after IETF 84). I propose that you add an "IANA note" in the IANA security section of draft-ietf-dime-rfc4005bis-09.txt expressing something such as: as discussed with the IESG, application id 1 should point to Please include those two points in the next revision of the draft, and I'll progress the draft to IETF LC. Regards, Benoit. -------- Original Message -------- Subject: New Version Notification - draft-ietf-dime-rfc4005bis-10.txt Date: Sat, 14 Jul 2012 22:42:26 -0700 From: internet-drafts@ietf.org To: dime-chairs@tools.ietf.org, draft-ietf-dime-rfc4005bis@tools.ietf.org, bclaise@cisco.com A new version (-10) has been submitted for draft-ietf-dime-rfc4005bis: http://www.ietf.org/internet-drafts/draft-ietf-dime-rfc4005bis-10.txt The IETF datatracker page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-rfc4005bis/ Diff from previous version: http://tools.ietf.org/rfcdiff?url2=draft-ietf-dime-rfc4005bis-10 IETF Secretariat. --------------010204030602090806000700 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit Hi Glen,

Thanks for this new version.
Two points that need to be addressed.


1. It seems that you have forgotten what we agreed upon on the mailing list.

How about this?

OLD:
3.  Diameter NAS Application Messages

   This section defines the Diameter message Command-Code
   [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all
   Diameter implementations conforming to this specification.  The
   Command Codes are as follows:

   +-----------------------------------+---------+------+--------------+
   | Command Name                      | Abbrev. | Code | Reference    |
   +-----------------------------------+---------+------+--------------+
   | AA-Request                        |   AAR   |  265 | Section 3.1  |
   | AA-Answer                         |   AAA   |  265 | Section 3.2  |
   | Re-Auth-Request                   |   RAR   |  258 | Section 3.3  |
   | Re-Auth-Answer                    |   RAA   |  258 | Section 3.4  |
   | Session-Termination-Request       |   STR   |  275 | Section 3.5  |
   | Session-Termination-Answer        |   STA   |  275 | Section 3.6  |
   | Abort-Session-Request             |   ASR   |  274 | Section 3.7  |
   | Abort-Session-Answer              |   ASA   |  274 | Section 3.8  |
   | Accounting-Request                |   ACR   |  271 | Section 3.9  |
   | Accounting-Answer                 |   ACA   |  271 | Section 3.10 |
   +-----------------------------------+---------+------+--------------+

NEW:
3.  Diameter NAS Application Messages

   This section defines the Diameter message Command-Code
   [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all
   Diameter implementations conforming to this specification.  The
   Command Codes are as follows:

   +-----------------------------------+---------+------+--------------+
   | Command Name                      | Abbrev. | Code | Reference    |
   +-----------------------------------+---------+------+--------------+
   | AA-Request                        |   AAR   |  265 | Section 3.1  |
   | AA-Answer                         |   AAA   |  265 | Section 3.2  |
   | Re-Auth-Request                   |   RAR   |  258 | Section 3.3  |
   | Re-Auth-Answer                    |   RAA   |  258 | Section 3.4  |
   | Session-Termination-Request       |   STR   |  275 | Section 3.5  |
   | Session-Termination-Answer        |   STA   |  275 | Section 3.6  |
   | Abort-Session-Request             |   ASR   |  274 | Section 3.7  |
   | Abort-Session-Answer              |   ASA   |  274 | Section 3.8  |
   | Accounting-Request                |   ACR   |  271 | Section 3.9  |
   | Accounting-Answer                 |   ACA   |  271 | Section 3.10 |
   +-----------------------------------+---------+------+--------------+
Note that the message formats in the following sub-sections use the standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], Section 3.2).


2. To be complete, and to let the DIME WG know, let me include what we have exchanged in a private email regarding the IANA pointer for the application id 1.

You asked for a statement and some consistency from the IESG.
- statement: The reference should be where the item in question is documented, not what registered it.
- consistency: right, we need to make this clear and not change it. Michelle Coton and Barry Leiba are working on an update to BCP 26 that will, in part, do just that, and you are welcome to comment on it when it's posted (during or shortly after IETF 84).

I propose that you add an "IANA note" in the IANA security section of draft-ietf-dime-rfc4005bis-09.txt expressing something such as: as discussed with the IESG, application id 1 should point to <RFC4005bis.>



Please include those two points in the next revision of the draft, and I'll progress the draft to IETF LC.

Regards, Benoit.

-------- Original Message --------
Subject: New Version Notification - draft-ietf-dime-rfc4005bis-10.txt
Date: Sat, 14 Jul 2012 22:42:26 -0700
From: internet-drafts@ietf.org
To: dime-chairs@tools.ietf.org, draft-ietf-dime-rfc4005bis@tools.ietf.org, bclaise@cisco.com 


A new version (-10) has been submitted for draft-ietf-dime-rfc4005bis:
http://www.ietf.org/internet-drafts/draft-ietf-dime-rfc4005bis-10.txt


The IETF datatracker page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-dime-rfc4005bis/

Diff from previous version:
http://tools.ietf.org/rfcdiff?url2=draft-ietf-dime-rfc4005bis-10

IETF Secretariat.



--------------010204030602090806000700-- From glenzorn@gmail.com Wed Jul 25 00:50:15 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0257421F84EB for ; Wed, 25 Jul 2012 00:50:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oXzAbyImj3ps for ; Wed, 25 Jul 2012 00:50:14 -0700 (PDT) Received: from mail-pb0-f44.google.com (mail-pb0-f44.google.com [209.85.160.44]) by ietfa.amsl.com (Postfix) with ESMTP id 15A7221F84E1 for ; Wed, 25 Jul 2012 00:50:13 -0700 (PDT) Received: by pbcwy7 with SMTP id wy7so1013149pbc.31 for ; Wed, 25 Jul 2012 00:50:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:to:cc:in-reply-to:references:content-type:organization :date:message-id:mime-version:x-mailer; bh=NAv6SWMP6A/kfbpK3l9porxP+fHXh8LMiHCulwTpxM8=; b=rvEJzhfwGP4D4xRETE1AD1got3sAuB195bSQLqur5SvdOAdAGhF4a2hkV33Z0N41Q+ Ee0yeNinBHMu2FZiEmViqkcqSobHGszXO3bPYZc4QXja8oQhm2qDkiY5DJB4miZ4AOsr 7PB1irzg3U2af5ZNj/BLmVdw0iUKV543vLEuSSG6IM45nYON1MCa4SQbltJNXL9WzBQm a+d25OEXYTW4k2ZOqGfTs/JzaTRAUgyRV3hgZuE8Dl5WW79KnLs7xaIIi+LrrQs6VTZs pJiyv4YWNSIYgEyGzmSN13ZqqBLRwA2bhNCEqFFElRPHtzOVFpbPjq7zqpqVWOGCVhGz V2Ww== Received: by 10.68.200.138 with SMTP id js10mr52332192pbc.23.1343202613535; Wed, 25 Jul 2012 00:50:13 -0700 (PDT) Received: from [192.168.0.102] (ppp-110-169-210-180.revip5.asianet.co.th. [110.169.210.180]) by mx.google.com with ESMTPS id rg10sm13863945pbc.54.2012.07.25.00.49.09 (version=SSLv3 cipher=OTHER); Wed, 25 Jul 2012 00:50:12 -0700 (PDT) From: Glen Zorn To: Benoit Claise In-Reply-To: <500F08AF.4010102@cisco.com> References: <20120715054226.4612.98302.idtracker@ietfa.amsl.com> <500F08AF.4010102@cisco.com> Content-Type: multipart/alternative; boundary="=-3f71c1IkKroXtcZqk2tG" Organization: Network Zen Date: Wed, 25 Jul 2012 14:49:05 +0700 Message-ID: <1343202545.7688.181.camel@gwz-laptop> Mime-Version: 1.0 X-Mailer: Evolution 2.32.3 (2.32.3-1.fc14) Cc: dime mailing list Subject: Re: [Dime] Fwd: New Version Notification - draft-ietf-dime-rfc4005bis-10.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jul 2012 07:50:15 -0000 --=-3f71c1IkKroXtcZqk2tG Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit On Tue, 2012-07-24 at 13:42 -0700, Benoit Claise wrote: > Hi Glen, > > Thanks for this new version. > Two points that need to be addressed. > > > 1. It seems that you have forgotten what we agreed upon on the mailing > list. > > > How about this? > > OLD: > 3. Diameter NAS Application Messages > > This section defines the Diameter message Command-Code > [I-D.ietf-dime-rfc3588bis] values that MUST be supported by > all > Diameter implementations conforming to this specification. > The > Command Codes are as follows: > > > +-----------------------------------+---------+------+--------------+ > | Command Name | Abbrev. | Code | > Reference | > > +-----------------------------------+---------+------+--------------+ > | AA-Request | AAR | 265 | > Section 3.1 | > | AA-Answer | AAA | 265 | > Section 3.2 | > | Re-Auth-Request | RAR | 258 | > Section 3.3 | > | Re-Auth-Answer | RAA | 258 | > Section 3.4 | > | Session-Termination-Request | STR | 275 | > Section 3.5 | > | Session-Termination-Answer | STA | 275 | > Section 3.6 | > | Abort-Session-Request | ASR | 274 | > Section 3.7 | > | Abort-Session-Answer | ASA | 274 | > Section 3.8 | > | Accounting-Request | ACR | 271 | > Section 3.9 | > | Accounting-Answer | ACA | 271 | > Section 3.10 | > > +-----------------------------------+---------+------+--------------+ > > NEW: > 3. Diameter NAS Application Messages > > This section defines the Diameter message Command-Code > [I-D.ietf-dime-rfc3588bis] values that MUST be supported by > all > Diameter implementations conforming to this specification. > The > Command Codes are as follows: > > > +-----------------------------------+---------+------+--------------+ > | Command Name | Abbrev. | Code | > Reference | > > +-----------------------------------+---------+------+--------------+ > | AA-Request | AAR | 265 | > Section 3.1 | > | AA-Answer | AAA | 265 | > Section 3.2 | > | Re-Auth-Request | RAR | 258 | > Section 3.3 | > | Re-Auth-Answer | RAA | 258 | > Section 3.4 | > | Session-Termination-Request | STR | 275 | > Section 3.5 | > | Session-Termination-Answer | STA | 275 | > Section 3.6 | > | Abort-Session-Request | ASR | 274 | > Section 3.7 | > | Abort-Session-Answer | ASA | 274 | > Section 3.8 | > | Accounting-Request | ACR | 271 | > Section 3.9 | > | Accounting-Answer | ACA | 271 | > Section 3.10 | > > +-----------------------------------+---------+------+--------------+ > > Note that the message formats in the following sub-sections > use the standard Diameter Command Code Format > ([I-D.ietf-dime-rfc3588bis], Section 3.2). > > > > 2. To be complete, and to let the DIME WG know, let me include what we > have exchanged in a private email regarding the IANA pointer for the > application id 1. > > You asked for a statement and some consistency from the IESG. > - statement: The reference should be where the item in question is > documented, not what registered it. > - consistency: right, we need to make this clear and not change it. > Michelle Coton and Barry Leiba are working on an update to BCP 26 that > will, in part, do just that, and you are welcome to comment on it when > it's posted (during or shortly after IETF 84). > > I propose that you add an "IANA note" in the IANA security section of > draft-ietf-dime-rfc4005bis-09.txt expressing something such as: as > discussed with the IESG, application id 1 should point to > > > > > Please include those two points in the next revision of the draft, and > I'll progress the draft to IETF LC. I'll submit it Monday evening. ... --=-3f71c1IkKroXtcZqk2tG Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit On Tue, 2012-07-24 at 13:42 -0700, Benoit Claise wrote:
Hi Glen,

Thanks for this new version.
Two points that need to be addressed.


1. It seems that you have forgotten what we agreed upon on the mailing list.

How about this?

OLD:
3.  Diameter NAS Application Messages

   This section defines the Diameter message Command-Code
   [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all
   Diameter implementations conforming to this specification.  The
   Command Codes are as follows:

   +-----------------------------------+---------+------+--------------+
   | Command Name                      | Abbrev. | Code | Reference    |
   +-----------------------------------+---------+------+--------------+
   | AA-Request                        |   AAR   |  265 | Section 3.1  |
   | AA-Answer                         |   AAA   |  265 | Section 3.2  |
   | Re-Auth-Request                   |   RAR   |  258 | Section 3.3  |
   | Re-Auth-Answer                    |   RAA   |  258 | Section 3.4  |
   | Session-Termination-Request       |   STR   |  275 | Section 3.5  |
   | Session-Termination-Answer        |   STA   |  275 | Section 3.6  |
   | Abort-Session-Request             |   ASR   |  274 | Section 3.7  |
   | Abort-Session-Answer              |   ASA   |  274 | Section 3.8  |
   | Accounting-Request                |   ACR   |  271 | Section 3.9  |
   | Accounting-Answer                 |   ACA   |  271 | Section 3.10 |
   +-----------------------------------+---------+------+--------------+

NEW:
3.  Diameter NAS Application Messages

   This section defines the Diameter message Command-Code
   [I-D.ietf-dime-rfc3588bis] values that MUST be supported by all
   Diameter implementations conforming to this specification.  The
   Command Codes are as follows:

   +-----------------------------------+---------+------+--------------+
   | Command Name                      | Abbrev. | Code | Reference    |
   +-----------------------------------+---------+------+--------------+
   | AA-Request                        |   AAR   |  265 | Section 3.1  |
   | AA-Answer                         |   AAA   |  265 | Section 3.2  |
   | Re-Auth-Request                   |   RAR   |  258 | Section 3.3  |
   | Re-Auth-Answer                    |   RAA   |  258 | Section 3.4  |
   | Session-Termination-Request       |   STR   |  275 | Section 3.5  |
   | Session-Termination-Answer        |   STA   |  275 | Section 3.6  |
   | Abort-Session-Request             |   ASR   |  274 | Section 3.7  |
   | Abort-Session-Answer              |   ASA   |  274 | Section 3.8  |
   | Accounting-Request                |   ACR   |  271 | Section 3.9  |
   | Accounting-Answer                 |   ACA   |  271 | Section 3.10 |
   +-----------------------------------+---------+------+--------------+

Note that the message formats in the following sub-sections use the standard Diameter Command Code Format ([I-D.ietf-dime-rfc3588bis], Section 3.2).


2. To be complete, and to let the DIME WG know, let me include what we have exchanged in a private email regarding the IANA pointer for the application id 1.

You asked for a statement and some consistency from the IESG.
- statement: The reference should be where the item in question is documented, not what registered it.
- consistency: right, we need to make this clear and not change it. Michelle Coton and Barry Leiba are working on an update to BCP 26 that will, in part, do just that, and you are welcome to comment on it when it's posted (during or shortly after IETF 84).

I propose that you add an "IANA note" in the IANA security section of draft-ietf-dime-rfc4005bis-09.txt expressing something such as: as discussed with the IESG, application id 1 should point to <RFC4005bis.>



Please include those two points in the next revision of the draft, and I'll progress the draft to IETF LC.

I'll submit it Monday evening.

...
--=-3f71c1IkKroXtcZqk2tG-- From jouni.nospam@gmail.com Wed Jul 25 02:36:45 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5000D21F855E for ; Wed, 25 Jul 2012 02:36:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.256 X-Spam-Level: X-Spam-Status: No, score=-3.256 tagged_above=-999 required=5 tests=[AWL=0.343, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zcu2AfjphYhy for ; Wed, 25 Jul 2012 02:36:44 -0700 (PDT) Received: from mail-gg0-f172.google.com (mail-gg0-f172.google.com [209.85.161.172]) by ietfa.amsl.com (Postfix) with ESMTP id F258F21F84EE for ; Wed, 25 Jul 2012 02:36:37 -0700 (PDT) Received: by ggnc4 with SMTP id c4so521219ggn.31 for ; Wed, 25 Jul 2012 02:36:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=GnALhuaV2QEiqNZ9AOG9wfJpdgdp3aqVEiHyUifFU4w=; b=KoL9gnaZvxHEfVSh/2SCH8t3jfIobQ43HmOrYRupXhPtDw/mln1JYDz19ZlcwrKig/ 8zVQiwPoGAOf6KQtz7Xz+e6nWv6H2jqvvp6ipz+1F+DZjX8Ot+H0UOuJygV+8+uybIie f2dkHLzENHxS9GSZA+oK/QHD3Rcz3g2vtNbotP2TYavqpSL/Vmtht6ZgWUrdF7IRbQQ4 Ol2JGuZo1t0jFgZUJBbfU792idrbrYWCgsPWtsFTuGyFTaYiDhKCqT8oZ/aQxybQj/0T VGPgnG1htszsgtfTLOLZ+UrrlxLOWRL1Pag2C3Va4h9YIH2GP7RldLZTBXlWwZ5L6bGB d98w== Received: by 10.66.75.229 with SMTP id f5mr11372255paw.47.1343208997225; Wed, 25 Jul 2012 02:36:37 -0700 (PDT) Received: from [10.255.130.59] ([194.251.119.201]) by mx.google.com with ESMTPS id mc3sm14047920pbc.12.2012.07.25.02.36.34 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 25 Jul 2012 02:36:36 -0700 (PDT) Mime-Version: 1.0 (Apple Message framework v1084) Content-Type: text/plain; charset=us-ascii From: jouni korhonen In-Reply-To: Date: Wed, 25 Jul 2012 12:36:32 +0300 Content-Transfer-Encoding: 7bit Message-Id: <51084654-9242-4BA4-A873-5DB75D7198EC@gmail.com> References: <169CD4F5-4915-4E44-9FB0-804E5BDF66BA@gmail.com> To: dime@ietf.org X-Mailer: Apple Mail (2.1084) Cc: dime-chairs@tools.ietf.org Subject: [Dime] Dime WG Presentations X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jul 2012 09:36:45 -0000 Those who are presenting during the meeting, please send your slideware to dime-chairs at tools.ietf.org by the Sunday evening! - Jouni & Lionel From trac+dime@trac.tools.ietf.org Mon Jul 30 13:42:29 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5422321F85A5 for ; Mon, 30 Jul 2012 13:42:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Oy8DCXZucMYe for ; Mon, 30 Jul 2012 13:42:28 -0700 (PDT) Received: from grenache.tools.ietf.org (grenache.tools.ietf.org [77.72.230.30]) by ietfa.amsl.com (Postfix) with ESMTP id 5E41D21F8491 for ; Mon, 30 Jul 2012 13:42:28 -0700 (PDT) Received: from localhost ([127.0.0.1]:45356 helo=grenache.tools.ietf.org ident=www-data) by grenache.tools.ietf.org with esmtp (Exim 4.77) (envelope-from ) id 1Svwn4-0001XV-VD; Mon, 30 Jul 2012 22:42:20 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "dime issue tracker" X-Trac-Version: 0.12.2 Precedence: bulk Auto-Submitted: auto-generated X-Mailer: Trac 0.12.2, by Edgewall Software To: lionel.morand@orange-ftgroup.com X-Trac-Project: dime Date: Mon, 30 Jul 2012 20:42:10 -0000 X-URL: http://tools.ietf.org/wg/dime/ X-Trac-Ticket-URL: http://wiki.tools.ietf.org/wg/dime/trac/ticket/4#comment:1 Message-ID: <089.721ab9dca4c17d6914d312509d0c00eb@trac.tools.ietf.org> References: <074.affc80222d81e6229db9ce9379f8246f@trac.tools.ietf.org> X-Trac-Ticket-ID: 4 In-Reply-To: <074.affc80222d81e6229db9ce9379f8246f@trac.tools.ietf.org> X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Rcpt-To: lionel.morand@orange-ftgroup.com, sdecugis@nict.go.jp, dime@ietf.org X-SA-Exim-Mail-From: trac+dime@trac.tools.ietf.org X-SA-Exim-Scanned: No (on grenache.tools.ietf.org); SAEximRunCond expanded to false Cc: dime@ietf.org, sdecugis@nict.go.jp Subject: Re: [Dime] [dime] #4: Review from Sebastien Decugis X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Reply-To: dime@ietf.org List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Jul 2012 20:42:29 -0000 #4: Review from Sebastien Decugis Comment (by lionel.morand@…): >> 1) (3.1.1) second list item (editorial): >> ======================================= >> >> Furthermore, the redirect agent MUST a Redirect-Realm AVP >> >> missing word? >> >> Response: >> >> Text in -05 version now reads: >> >> The server MUST include the Result-Code AVP set to >> DIAMETER_REALM_REDIRECT_INDICATION. The server MUST also include >> the alternate realm identifiers with which it has been configured, >> each in a separate Redirect-Realm AVP instance. >> >> (Note that the redirect agent has been replaced by a server, at least >> until the WG debates the issue in Vancouver.) > > [SD] Sounds good to me, thanks. > > >> 2) (3.1.1) What if the the other peer advertised the Relay application? >> ===================================================================== >> === >> >> ==> Should the redirect agent consider that it supports the >> Redirect-Realm application? >> >> Response: >> >> Text in -05 version no longer discusses applications supported by the >> upstream peer. New section 3.2.2 specifies rerouting by a conforming >> proxy, but I think a relay would just have to pass the answer back >> upstream because rerouting requires changes to the request. Should >> that be stated explicitly? > > [SD] Indeed you are right, since the proxy has to change the > Destination-Realm AVP, it is not a simple relay anymore. I guess this > does not require a clarification in the document, the new text is > clear enough. > > >> 3) (3.1.1) "the message MUST include the Error- Reporting-Host AVP >> if the host setting the Result-Code AVP is different from the >> identity encoded in the Origin-Host AVP," >> ===================================================================== >> = >> >> ==> IIUC this is an impossible situation, since the Redirect Agent >> did not forward the Request. I believe this text could be removed for >> clarity. >> >> Response: >> >> Done. > > [SD] Thanks > > >> >> 4) (3.1.2) >> =========== >> >> ==> What if the original request contains a Destination-Host AVP? In >> that case, should a UNABLE_TO_DELIVER error be returned? There is >> probably no point in sending to the alternate realm with a >> Destination-Host in the previous realm, right? Unless maybe if the >> Destination-Realm of the request message does not match the >> Origin-Realm of the Redirect indication (change of broker for >> example). Any opinion? >> >> Response: >> >> Text is currently written as follows: >> >> o If the request contains a Destination-Host AVP, the server MUST >> set the 'E' bit in the answer and set the Result-Code AVP to >> DIAMETER_UNABLE_TO_DELIVER. >> >> However, I don't really like that -- important information is not >> getting back upstream. Rereading your comment, I'm thinking the >> appropriate behaviour is to set DIAMETER_REALM_REDIRECT_INDICATION in >> this case, too. The proxy is told (in new section 3.2.2): >> >> B. Remove the Destination-Host (if present) and Destination- >> Realm AVPs from the original request and add a new >> Destination-Realm AVP containing the realm selected in the >> initial step. >> >> So this case is taken care of properly and the server bullet quoted >> above should be deleted. I had meant to bring this up for discussion >> in Vancouver, but at this point the proper behaviour seems obvious. > > [SD] I am not quite clear on which one is the proper behavior to adopt > (reply an error or redirect to the realm in any case) and I'll let the > WG status on this. I am fine with both choices, as long as they are > clear in the document. Note that I guess the debate is really to know > how the Destination-Host AVP is used. If you consider for example the > Diameter EAP application, this AVP is used to ensure that further > messages in a session will reach the same Diameter server as the > initial message. Redirecting such middle-session messages would not > have any meaning. I guess this might be left as a choice for the > applications implementing this RFC... > > >> 5) (3.2) >> ========= >> >> ==> This section does not give the value of the M flag for the new >> AVP. By the semantics of the application, I believe the M flag should >> be set, right? >> >> Response: >> >> Relevant text is now in section 3.3. Last sentence reads: >> >> The M flag for the Redirect-Realm AVP MUST be set, and the V flag >> MUST NOT be set. > > [SD] Perfect :) -- ----------------------------------+------------------ Reporter: lionel.morand@… | Owner: Type: enhancement | Status: new Priority: major | Milestone: Component: realm-based-redirect | Version: Severity: In WG Last Call | Resolution: Keywords: | ----------------------------------+------------------ Ticket URL: dime From trac+dime@trac.tools.ietf.org Mon Jul 30 13:44:21 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 240CC11E818F for ; Mon, 30 Jul 2012 13:44:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ax3ELXuz4seT for ; Mon, 30 Jul 2012 13:44:20 -0700 (PDT) Received: from grenache.tools.ietf.org (grenache.tools.ietf.org [77.72.230.30]) by ietfa.amsl.com (Postfix) with ESMTP id 9A26611E818E for ; Mon, 30 Jul 2012 13:44:20 -0700 (PDT) Received: from localhost ([127.0.0.1]:45407 helo=grenache.tools.ietf.org ident=www-data) by grenache.tools.ietf.org with esmtp (Exim 4.77) (envelope-from ) id 1Svwp6-0001TV-LZ; Mon, 30 Jul 2012 22:44:16 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "dime issue tracker" X-Trac-Version: 0.12.2 Precedence: bulk Auto-Submitted: auto-generated X-Mailer: Trac 0.12.2, by Edgewall Software To: lionel.morand@orange-ftgroup.com X-Trac-Project: dime Date: Mon, 30 Jul 2012 20:44:16 -0000 X-URL: http://tools.ietf.org/wg/dime/ X-Trac-Ticket-URL: http://trac.tools.ietf.org/wg/dime/trac/ticket/4#comment:2 Message-ID: <089.547ed37d29413770efd576aca1c0aab7@trac.tools.ietf.org> References: <074.affc80222d81e6229db9ce9379f8246f@trac.tools.ietf.org> X-Trac-Ticket-ID: 4 In-Reply-To: <074.affc80222d81e6229db9ce9379f8246f@trac.tools.ietf.org> X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Rcpt-To: lionel.morand@orange-ftgroup.com, sdecugis@nict.go.jp, dime@ietf.org X-SA-Exim-Mail-From: trac+dime@trac.tools.ietf.org X-SA-Exim-Scanned: No (on grenache.tools.ietf.org); SAEximRunCond expanded to false Cc: dime@ietf.org, sdecugis@nict.go.jp Subject: Re: [Dime] [dime] #4: Review from Sebastien Decugis X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Reply-To: dime@ietf.org List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Jul 2012 20:44:21 -0000 #4: Review from Sebastien Decugis Changes (by lionel.morand@…): * status: new => closed * resolution: => fixed -- ----------------------------------+--------------------- Reporter: lionel.morand@… | Owner: Type: enhancement | Status: closed Priority: major | Milestone: Component: realm-based-redirect | Version: Severity: In WG Last Call | Resolution: fixed Keywords: | ----------------------------------+--------------------- Ticket URL: dime From trac+dime@trac.tools.ietf.org Mon Jul 30 14:09:06 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECA6521F8650 for ; Mon, 30 Jul 2012 14:09:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ftaNStHXUSth for ; Mon, 30 Jul 2012 14:09:06 -0700 (PDT) Received: from grenache.tools.ietf.org (grenache.tools.ietf.org [77.72.230.30]) by ietfa.amsl.com (Postfix) with ESMTP id C738621F847C for ; Mon, 30 Jul 2012 14:09:05 -0700 (PDT) Received: from localhost ([127.0.0.1]:46844 helo=grenache.tools.ietf.org ident=www-data) by grenache.tools.ietf.org with esmtp (Exim 4.77) (envelope-from ) id 1SvxD2-0003bV-22; Mon, 30 Jul 2012 23:09:00 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "dime issue tracker" X-Trac-Version: 0.12.2 Precedence: bulk Auto-Submitted: auto-generated X-Mailer: Trac 0.12.2, by Edgewall Software To: lionel.morand@orange-ftgroup.com X-Trac-Project: dime Date: Mon, 30 Jul 2012 21:09:00 -0000 X-URL: http://tools.ietf.org/wg/dime/ X-Trac-Ticket-URL: http://wiki.tools.ietf.org/wg/dime/trac/ticket/11#comment:1 Message-ID: <089.d413d8e8a8944e8f051dcd575d1df9d1@trac.tools.ietf.org> References: <074.9c7d26cb783155a3f51671783308e5e2@trac.tools.ietf.org> X-Trac-Ticket-ID: 11 In-Reply-To: <074.9c7d26cb783155a3f51671783308e5e2@trac.tools.ietf.org> X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Rcpt-To: lionel.morand@orange-ftgroup.com, jouni.nospam@gmail.com, dime@ietf.org X-SA-Exim-Mail-From: trac+dime@trac.tools.ietf.org X-SA-Exim-Scanned: No (on grenache.tools.ietf.org); SAEximRunCond expanded to false Cc: dime@ietf.org Subject: Re: [Dime] [dime] #11: Review of the draft-ietf-dime-realm-based-redirect-03 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Reply-To: dime@ietf.org List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Jul 2012 21:09:07 -0000 #11: Review of the draft-ietf-dime-realm-based-redirect-03 Changes (by lionel.morand@…): * status: new => closed * resolution: => fixed Comment: On 12-07-30 01:54 PM, lionel.morand@orange.com wrote: > Hi Tom, > > I'm in line with the response from Jouni. > As proposed by Jouni, a note at the beginning of 3 or 3.1 will be suitable. > Please acknowledge and I'll close the ticket. > > Lionel > > -----Message d'origine----- > De : jouni korhonen [mailto:jouni.nospam@gmail.com] Envoyé : mardi 24 > juillet 2012 09:22 À : Tom Taylor Cc : MORAND Lionel RD-CORE Objet : > Re: Ticket 11: draft-ietf-dime-realm-based-redirect > > Hi > > Which Ticket this was? ;) hmm.. #11 by Lionel I assume..? I have just > two notes below. Other than those, I think this is OK. > > > On Jul 24, 2012, at 4:34 AM, Tom Taylor wrote: > >> Hi, Jouni >> >> Your turn to decide if a ticket can be closed. >> >> Tom Taylor >> >> >> Comment 1 >> ========= >> >> o If the peer from which the request was received did not advertise >> an application incorporating the realm-based routing capability in the CER/CEA exchange, the redirect agent SHOULD set the 'E' bit in the answer and set the Result Code to DIAMETER_UNABLE_TO_DELIVER. As an alternative, the redirect agent MAY if so configured provide a host-based redirect as described in Section 6.1.7 of [RFC3588]. >> >> ==> This last sentence assumes both types of redirection information can be provisioned in the Redirect Agent. Should we allow such a configuration? If so, how does the Redirect Agent know what information should be used when the originator of the request support both redirection indication mechanisms (i.e. priority, order, etc.)? >> >> Response: >> >> Text giving the alternative was deleted. >> >> Comment 2 >> ========= >> >> o Otherwise, if an application supporting the use of realm-based >> >> redirection was negotiated with the peer, the redirect agent MUST set the Result-Code AVP to DIAMETER_REALM_REDIRECT_INDICATION rather than DIAMETER_REDIRECT_INDICATION. >> >> ==> Otherwise, if an application supporting the use of realm-based >> redirection was negotiated with the peer/ >> >> Otherwise, if the request is for an application supporting >> realm-based redirection, >> >> Response: >> >> Text rewritten, clearer that it is application-based behaviour without talking about negotiation. >> >> Comment 3 >> ========= >> >> Furthermore, the redirect agent MUST a Redirect-Realm AVP containing the realm from the routing table entry in its answer message instead of one or more Redirect-Host AVPs. >> >> ==> s/the redirect agent MUST a Redirect-Realm AVP/the redirect agent >> MUST include in the answer a Redirect-Realm AVP >> >> Response: >> >> Done. >> >> Comment 4 >> ========= >> >> To prevent confusion at Diameter nodes receiving the answer message, the message MUST include the Error- Reporting-Host AVP if the host setting the Result-Code AVP is different from the identity encoded in the Origin-Host AVP, in conformity with Section 7.1 of [RFC3588]. >> >> ==> Why should we use the Error-Reporting-Host AVP here? The Origin- host AVP of the answer will be the diameter indeity of the Redirect server, no? >> >> Response: >> >> That text deleted. >> >> Comment 5 >> ========= >> >> All other aspects of Section 6.1.7 remain the same as for host- based redirection. >> >> ==> the use of Redirect-Host-usage AVP and Redirect-Max-Cache-Time AVP is not exactly the same; Both are related to the Redirect-Host AVP that can be found in the answer. In the Realm-based redirection, these AVPs have to be associated with the peer resulting of the realm-based discovery mechanism, as described in section 3.2. This should be also clarified at this stage. >> >> Response: >> >> -05 text reads: >> >> The server MAY include a copy of the Redirect-Host-Usage AVP, >> which SHOULD be set to REALM_AND_APPLICATION. If this AVP is >> added, the Redirect-Max-Cache-Time AVP MUST also be included. >> Note that these AVPs apply to the peer discovered by a node acting >> on the server's response, as described in the next section. >> >> Comment 6 >> ========= >> >> 3.1.2. Behaviour of Other Diameter Nodes >> >> A Diameter node conforming to this specification which receives an answer with the result code value DIAMETER_REALM_REDIRECT_INDICATION SHOULD attempt to reroute the request to the indicated realm using normal discovery procedures to find an appropriate destination host. The receiving Diameter node SHOULD update its cache of routing entries according to the direction provided by the Redirect-Max- Cache-Time AVP, if present. The cache entry SHOULD be associated with a redirect usage of REALM_AND_APPLICATION. >> >> ==> RFC3588 says that the Redirect-Max-Cache-Time AVP and Redirect- Host-Usage AVP is associated with the redirect-host AVP. Here, the use of this AVP are modified/enhanced to be associated with the peer discovered based on the Realm-based redirection. >> >> Response: >> >> I may have fallen short here. With the change from -04 to -05, I deleted text about modifying 3588 with respect to these two AVPs. The current text in section 3.2.2 reads (bullet 4): >> >> A. update its cache of routing entries for the realm and >> application to which the original request was directed, >> taking into account the Redirect-Host-Usage and Redirect- Max- >> Cache-Time AVPs, if present in the answer. >> >> Do I need to note that this is a modification of 3588bis behaviour? > That could be appropriate, I think. > > > >> Comment 7 >> ========= >> >> 3.2. The Redirect-Realm AVP >> >> The Redirect-Realm AVP (code TBD) is of type DiameterIdentity?. It specifies a realm to which a node receiving a redirect indication containing the result code value DIAMETER_REALM_REDIRECT_INDICATION and the Redirect-Realm AVP SHOULD route the original request. The V flag for the Redirect-Realm AVP MUST NOT be set. >> >> Section 6.14 of [RFC3588] is modified to permit the Redirect- Max- Cache-Time AVP to be used also to specify the persistence of cache entries created by the Redirect-Realm AVP. >> >> ==> the same kind of information should be present for the use of Redirect-Host-Usage AVP. >> >> Response: >> >> Same issue as previous comment, of course. The real question is: if I add the text referring to the added behaviour, in which section should I put it? >> > First in the header "Updates RFC3588bis (if approved)" > Second I would add a bit of explanation into Section 3 or 3.1. They > already have a good head start with bullet lists. > > - Jouni > > Acknowledged and noted in my presentation charts. -- ----------------------------------+--------------------- Reporter: lionel.morand@… | Owner: Type: defect | Status: closed Priority: major | Milestone: Component: realm-based-redirect | Version: Severity: In WG Last Call | Resolution: fixed Keywords: | ----------------------------------+--------------------- Ticket URL: dime From internet-drafts@ietf.org Mon Jul 30 14:38:56 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 367E611E8170; Mon, 30 Jul 2012 14:38:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.533 X-Spam-Level: X-Spam-Status: No, score=-102.533 tagged_above=-999 required=5 tests=[AWL=0.066, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WsqgLm49ISlm; Mon, 30 Jul 2012 14:38:55 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A86E911E8156; Mon, 30 Jul 2012 14:38:55 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.32 Message-ID: <20120730213855.24648.60525.idtracker@ietfa.amsl.com> Date: Mon, 30 Jul 2012 14:38:55 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-app-design-guide-15.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Jul 2012 21:38:56 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Applications Design Guidelines Author(s) : Lionel Morand Victor Fajardo Hannes Tschofenig Filename : draft-ietf-dime-app-design-guide-15.txt Pages : 30 Date : 2012-07-30 Abstract: The Diameter Base protocol provides facilities for protocol extensibility enabling to define new Diameter applications or modify existing applications. This document is a companion document to the Diameter Base protocol that further explains and clarifies the rules to extend the Diameter Base protocol. It is meant as a guidelines document and therefore it does not add, remove or change existing rules. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-app-design-guide There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-app-design-guide-15 A diff from previous version is available at: http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-app-design-guide-15 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From jouni.nospam@gmail.com Mon Jul 30 16:53:59 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFD4611E809B for ; Mon, 30 Jul 2012 16:53:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.728 X-Spam-Level: X-Spam-Status: No, score=-3.728 tagged_above=-999 required=5 tests=[AWL=-0.129, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h6yEz2UFhvBQ for ; Mon, 30 Jul 2012 16:53:59 -0700 (PDT) Received: from mail-pb0-f44.google.com (mail-pb0-f44.google.com [209.85.160.44]) by ietfa.amsl.com (Postfix) with ESMTP id 75CC311E8072 for ; Mon, 30 Jul 2012 16:53:59 -0700 (PDT) Received: by pbcwy7 with SMTP id wy7so10573070pbc.31 for ; Mon, 30 Jul 2012 16:53:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; bh=FCVkb+3k+8IwjMGrgiRTaH79zbQYsSNr2byXALTJF3g=; b=RheYcW0pP9F7vBklZJOF8NI1VJF8d3bbcH43pUd0QvgsCOto2ofE96aajDegxvpCh4 LN2EWV2YyJeATgaHV821+m4lh9dKD1F55Sso6UyXziUb5VnGyimsGKKpvjR51Pi7Oh28 qoTewVzVHhqLBzf87hE1Xntos4LLR6Axz/C7reI+bNdPl9dO4nG5V3eXGPYop3xw27VJ MOo2rAVQUzgpWcRDpBhOmCD7qGetklR9WJHBlZYfsMtZAAejT/6Xib0Ewvk6YE42x34a z5wNim/jQ8PUQ9ZwYk87t/qL1FjhhuL9PF3IleWCj8LS3Ez8BegSE/vwfzI7cjf1TtTb anyg== Received: by 10.68.194.201 with SMTP id hy9mr38839546pbc.69.1343692439279; Mon, 30 Jul 2012 16:53:59 -0700 (PDT) Received: from ?IPv6:2001:df8::80:226:bbff:fe18:6e9c? ([2001:df8:0:80:226:bbff:fe18:6e9c]) by mx.google.com with ESMTPS id rd7sm8818901pbc.70.2012.07.30.16.53.56 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 30 Jul 2012 16:53:58 -0700 (PDT) From: jouni korhonen Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Tue, 31 Jul 2012 02:53:56 +0300 Message-Id: <939C879E-6757-4539-B16C-6DAA5FE51B95@gmail.com> To: dime@ietf.org Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Subject: [Dime] Slides for the meeting X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Jul 2012 23:54:00 -0000 Folks, Those who present, send your slides asap if you have not done so already!! - Jouni & Lionel From internet-drafts@ietf.org Mon Jul 30 18:40:21 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E0FD21F8505; Mon, 30 Jul 2012 18:40:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.526 X-Spam-Level: X-Spam-Status: No, score=-102.526 tagged_above=-999 required=5 tests=[AWL=0.073, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tj2fYndfs7FN; Mon, 30 Jul 2012 18:40:20 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67DA121F84FC; Mon, 30 Jul 2012 18:40:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.33 Message-ID: <20120731014020.30222.70170.idtracker@ietfa.amsl.com> Date: Mon, 30 Jul 2012 18:40:20 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-erp-11.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jul 2012 01:40:21 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Support for the EAP Re-authentication Protocol = (ERP) draft-ietf-dime-erp-11 .txt Author(s) : Julien Bournelle Lionel Morand Sebastien Decugis Qin Wu Glen Zorn Filename : draft-ietf-dime-erp-11.txt Pages : 16 Date : 2012-07-30 Abstract: The EAP Re-authentication Protocol (ERP) defines extensions to the Extensible Authentication Protocol (EAP) to support efficient re- authentication between the peer and an EAP Re-authentication (ER) server through a compatible authenticator. This document specifies Diameter support for ERP. It defines a new Diameter ERP application to transport ERP messages between an ER authenticator and the ER server, and a set of new AVPs that can be used to transport the cryptographic material needed by the re-authentication server. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-erp There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-erp-11 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-erp-11 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From internet-drafts@ietf.org Mon Jul 30 18:45:05 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63B8E21F8508; Mon, 30 Jul 2012 18:45:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.53 X-Spam-Level: X-Spam-Status: No, score=-102.53 tagged_above=-999 required=5 tests=[AWL=0.069, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nQfBDAsU7HsV; Mon, 30 Jul 2012 18:45:04 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AB0721F851C; Mon, 30 Jul 2012 18:45:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.33 Message-ID: <20120731014504.1832.4652.idtracker@ietfa.amsl.com> Date: Mon, 30 Jul 2012 18:45:04 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-rfc4005bis-11.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jul 2012 01:45:05 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Network Access Server Application Author(s) : Glen Zorn Filename : draft-ietf-dime-rfc4005bis-11.txt Pages : 68 Date : 2012-07-30 Abstract: This document describes the Diameter protocol application used for Authentication, Authorization, and Accounting (AAA) services in the Network Access Server (NAS) environment; it obsoletes RFC 4005. When combined with the Diameter Base protocol, Transport Profile, and Extensible Authentication Protocol specifications, this application specification satisfies typical network access services requirements. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-rfc4005bis There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-rfc4005bis-11 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-rfc4005bis-11 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From internet-drafts@ietf.org Tue Jul 31 08:31:01 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 550CD21F86D6; Tue, 31 Jul 2012 08:31:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.439 X-Spam-Level: X-Spam-Status: No, score=-102.439 tagged_above=-999 required=5 tests=[AWL=0.160, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LbgZm1Vm6nnM; Tue, 31 Jul 2012 08:31:00 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBA4F21F86C9; Tue, 31 Jul 2012 08:31:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.33 Message-ID: <20120731153100.27047.32719.idtracker@ietfa.amsl.com> Date: Tue, 31 Jul 2012 08:31:00 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-erp-12.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jul 2012 15:31:01 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Support for the EAP Re-authentication Protocol = (ERP) Author(s) : Julien Bournelle Lionel Morand Sebastien Decugis Qin Wu Glen Zorn Filename : draft-ietf-dime-erp-12.txt Pages : 16 Date : 2012-07-31 Abstract: The EAP Re-authentication Protocol (ERP) defines extensions to the Extensible Authentication Protocol (EAP) to support efficient re- authentication between the peer and an EAP Re-authentication (ER) server through a compatible authenticator. This document specifies Diameter support for ERP. It defines a new Diameter ERP application to transport ERP messages between an ER authenticator and the ER server, and a set of new AVPs that can be used to transport the cryptographic material needed by the re-authentication server. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-erp There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-erp-12 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-erp-12 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From internet-drafts@ietf.org Tue Jul 31 10:47:41 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB3F121F8665; Tue, 31 Jul 2012 10:47:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fxZu4oKE-PiF; Tue, 31 Jul 2012 10:47:41 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED0E521F8864; Tue, 31 Jul 2012 10:47:40 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.33 Message-ID: <20120731174740.26189.43743.idtracker@ietfa.amsl.com> Date: Tue, 31 Jul 2012 10:47:40 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-pmip6-lr-16.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jul 2012 17:47:41 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Support for Proxy Mobile IPv6 Localized Routing Author(s) : Glen Zorn Qin Wu Jouni Korhonen Filename : draft-ietf-dime-pmip6-lr-16.txt Pages : 12 Date : 2012-07-31 Abstract: In Proxy Mobile IPv6, packets received from a Mobile Node (MN) by the Mobile Access Gateway (MAG) to which it is attached are typically tunneled to a Local Mobility Anchor (LMA) for routing. The term "localized routing" refers to a method by which packets are routed directly between an MN's MAG and the MAG of its Correspondent Node (CN) without involving any LMA. In a Proxy Mobile IPv6 deployment, it may be desirable to control the establishment of localized routing sessions between two MAGs in a Proxy Mobile IPv6 domain by requiring that the session be authorized. This document specifies how to accomplish this using the Diameter protocol. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-pmip6-lr There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-pmip6-lr-16 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-pmip6-lr-16 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From jouni.nospam@gmail.com Tue Jul 31 16:18:42 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BBDA21F88D9; Tue, 31 Jul 2012 16:18:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.71 X-Spam-Level: X-Spam-Status: No, score=-3.71 tagged_above=-999 required=5 tests=[AWL=-0.111, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DMzFiknIf3Tc; Tue, 31 Jul 2012 16:18:41 -0700 (PDT) Received: from mail-yx0-f172.google.com (mail-yx0-f172.google.com [209.85.213.172]) by ietfa.amsl.com (Postfix) with ESMTP id 47FAE21F8844; Tue, 31 Jul 2012 16:18:41 -0700 (PDT) Received: by yenq13 with SMTP id q13so7228199yen.31 for ; Tue, 31 Jul 2012 16:18:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:date:message-id :cc:to:mime-version:x-mailer; bh=z5AjhbrzHlWJaB+yq6Xpr6tMFEx++1SROFgzOadqWHs=; b=jU8vCpmbpw4vmthjn87ro2SRXfiy48/uIYSkY0DXScwiju9VRh1q75qGmAt2Ppikw9 jy0DFQsuOoCxRK9HjJs7uS8nVXbCe9CypZGen8zucjs/pKXdPpCgvos6r7P97ljbPG98 76ErYQ+uXvsWAyWebXVWVb3wkIccBwYBbWOQYrJJvHs6rtJweR+ps18CE0BT2TscLX/q 0XeAo3tGqCJxRezOxEdc+milkd+8s0GnPGdJLvhDLuLw6dm2u5fIrZ81Z6uFqH3k+Glm wwXE1okwXUtaxU6IpOypVD+MzDm+OqSvb1Pba8l4FKttykV5w4rkeaXmmHgN8SMj0inP iERA== Received: by 10.66.83.129 with SMTP id q1mr35749668pay.4.1343776720494; Tue, 31 Jul 2012 16:18:40 -0700 (PDT) Received: from ?IPv6:2001:df8::16:226:bbff:fe18:6e9c? ([2001:df8:0:16:226:bbff:fe18:6e9c]) by mx.google.com with ESMTPS id rs4sm1194242pbc.0.2012.07.31.16.18.38 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 31 Jul 2012 16:18:39 -0700 (PDT) From: jouni korhonen Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Wed, 1 Aug 2012 02:18:36 +0300 Message-Id: <331264D7-04F2-44DD-B025-054E10A9EE11@gmail.com> To: iesg-secretary@ietf.org Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Cc: dime@ietf.org Subject: [Dime] Publication request for Diameter Support for the EAP Re-authentication Protocol; draft-ietf-dime.erp-12 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jul 2012 23:18:42 -0000 Dear Secretary, This is a request for publication of draft-ietf-dime-erp-12 as a = standards track RFC.=20 - Jouni ------------------------------------------------------- (1) What type of RFC is being requested (BCP, Proposed Standard, Internet Standard, Informational, Experimental, or Historic)? Why is this the proper type of RFC? Is this type of RFC indicated in the title page header? Diameter Support for the EAP Re-authentication Protocol (ERP) is = to be published as a Standards Track RFC, which is indicated in the I-D's cover page Intended Status field. Diameter Support for the EAP Re-authentication Protocol = complements the Hokey WG's EAP Re-authentication work and provides the = needed AAA backend support for both ER servers and EAP servers. (2) The IESG approval announcement includes a Document Announcement Write-Up. Please provide such a Document Announcement Write-Up. Recent examples can be found in the "Action" announcements for approved documents. The approval announcement contains the following sections: Technical Summary The EAP Re-authentication Protocol (ERP) defines extensions to = the Extensible Authentication Protocol (EAP) to support efficient = re- authentication between the peer and an EAP Re-authentication = (ER) server through a compatible authenticator. This document = specifies Diameter support for ERP. It defines a new Diameter ERP = application to transport ERP messages between an ER authenticator and the ER server, and a set of new AVPs that can be used to transport the cryptographic material needed by the re-authentication server. Working Group Summary The I-D has been discussed extensively in the DIME WG and has reached the overall working group consensus. The work has been done in a cooperation with the Hokey WG that defined the EAP Re-authentication Protocol solution. Document Quality There are no publicly announced implementations of the protocol. Personnel Who is the Document Shepherd? Who is the Responsible Area Director? Jouni Korhonen (jouni.nospam@gmail.com) is the document shepherd. (3) Briefly describe the review of this document that was performed by the Document Shepherd. If this version of the document is not ready for publication, please explain why the document is being forwarded to the IESG. The document shepherd has reviewed the document after it has concluded the WGLC. The document shepherd thinks the document is ready for publication. (4) Does the document Shepherd have any concerns about the depth or breadth of the reviews that have been performed? =20 No. (5) Do portions of the document need review from a particular or from broader perspective, e.g., security, operational complexity, AAA, DNS, DHCP, XML, or internationalization? If so, describe the review that took place. The document has yet to be reviewed by the AAA and security directorate. (6) Describe any specific concerns or issues that the Document Shepherd has with this document that the Responsible Area Director and/or the IESG should be aware of? For example, perhaps he or she is uncomfortable with certain parts of the document, or has concerns whether there really is a need for it. In any event, if the WG has discussed those issues and has indicated that it still wishes to advance the document, detail those concerns here. The document shepherd has no specific concerns regarding the I-D itself. The document shepherd expects that the long lasting topic on sensitive information transport, such as key material, over Diameter gets discussed again. However, this is a known feature of Diameter and its hop-by-hop security properties. The existing security considerations should cover this when it references to e.g. I-D.ietf-dime-local-keytran. (7) Has each author confirmed that any and all appropriate IPR disclosures required for full conformance with the provisions of BCP 78 and BCP 79 have already been filed. If not, explain why. No IPRs have been declared. (8) Has an IPR disclosure been filed that references this document? If so, summarize any WG discussion and conclusion regarding the IPR disclosures. No IPRs have been declared. (9) How solid is the WG consensus behind this document? Does it=20 represent the strong concurrence of a few individuals, with others being silent, or does the WG as a whole understand and agree with it? =20= The WG consensus is solid and does not represent only the opinion of few individuals. (10) Has anyone threatened an appeal or otherwise indicated extreme=20 discontent? If so, please summarise the areas of conflict in separate email messages to the Responsible Area Director. (It should be in a separate email because this questionnaire is publicly available.)=20 No. (11) Identify any ID nits the Document Shepherd has found in this document. (See http://www.ietf.org/tools/idnits/ and the Internet-Drafts Checklist). Boilerplate checks are not enough; this check needs to be thorough. The document passes IDnits. (12) Describe how the document meets any required formal review criteria, such as the MIB Doctor, media type, and URI type reviews. The document does not define MIBs, media types, URIs etc. (13) Have all references within this document been identified as either normative or informative? Yes. (14) Are there normative references to documents that are not ready for advancement or are otherwise in an unclear state? If such normative references exist, what is the plan for their completion? No. (15) Are there downward normative references references (see RFC 3967)? If so, list these downward references to support the Area Director in = the Last Call procedure.=20 No. (16) Will publication of this document change the status of any existing RFCs? Are those RFCs listed on the title page header, listed in the abstract, and discussed in the introduction? If the RFCs are not listed in the Abstract and Introduction, explain why, and point to the part of the document where the relationship of this document to the other RFCs is discussed. If this information is not in the document, explain why the WG considers it unnecessary. No. (17) Describe the Document Shepherd's review of the IANA considerations section, especially with regard to its consistency with the body of the document. Confirm that all protocol extensions that the document makes are associated with the appropriate reservations in IANA registries. Confirm that any referenced IANA registries have been clearly identified. Confirm that newly created IANA registries include a detailed specification of the initial contents for the registry, that allocations procedures for future registrations are defined, and a reasonable name for the new registry has been suggested (see RFC 5226). The document only requests for code points and values from an existing IANA registry. (18) List any new IANA registries that require Expert Review for future allocations. Provide any public guidance that the IESG would find useful in selecting the IANA Experts for these new registries. None. (19) Describe reviews and automated checks performed by the Document Shepherd to validate sections of the document written in a formal language, such as XML code, BNF rules, MIB definitions, etc. Checked with IDnits and against ietf-dime-rfc3588bis CCF (a modified ABNF).= From internet-drafts@ietf.org Tue Jul 31 16:26:59 2012 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A374321F8951; Tue, 31 Jul 2012 16:26:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.414 X-Spam-Level: X-Spam-Status: No, score=-102.414 tagged_above=-999 required=5 tests=[AWL=0.185, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CMFTZTJwm8rs; Tue, 31 Jul 2012 16:26:59 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BBCC11E812F; Tue, 31 Jul 2012 16:26:59 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.33 Message-ID: <20120731232659.28056.28797.idtracker@ietfa.amsl.com> Date: Tue, 31 Jul 2012 16:26:59 -0700 Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-pmip6-lr-17.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jul 2012 23:26:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Diameter Maintenance and Extensions Worki= ng Group of the IETF. Title : Diameter Support for Proxy Mobile IPv6 Localized Routing Author(s) : Glen Zorn Qin Wu Jouni Korhonen Filename : draft-ietf-dime-pmip6-lr-17.txt Pages : 12 Date : 2012-07-31 Abstract: In Proxy Mobile IPv6, packets received from a Mobile Node (MN) by the Mobile Access Gateway (MAG) to which it is attached are typically tunneled to a Local Mobility Anchor (LMA) for routing. The term "localized routing" refers to a method by which packets are routed directly between an MN's MAG and the MAG of its Correspondent Node (CN) without involving any LMA. In a Proxy Mobile IPv6 deployment, it may be desirable to control the establishment of localized routing sessions between two MAGs in a Proxy Mobile IPv6 domain by requiring that the session be authorized. This document specifies how to accomplish this using the Diameter protocol. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-pmip6-lr There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dime-pmip6-lr-17 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-pmip6-lr-17 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/