From rafa@um.es Tue Oct 1 01:11:56 2013 Return-Path: X-Original-To: abfab@ietfa.amsl.com Delivered-To: abfab@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D3BF21F9B86 for ; Tue, 1 Oct 2013 01:11:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vnrsLjc95vnT for ; Tue, 1 Oct 2013 01:11:51 -0700 (PDT) Received: from xenon14.um.es (xenon14.um.es [155.54.212.168]) by ietfa.amsl.com (Postfix) with ESMTP id 8F59B21F8FF5 for ; Tue, 1 Oct 2013 01:11:50 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by xenon14.um.es (Postfix) with ESMTP id 58E925D4F9; Tue, 1 Oct 2013 10:11:47 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon14.um.es Received: from xenon14.um.es ([127.0.0.1]) by localhost (xenon14.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id sHL7kOrPcfh5; Tue, 1 Oct 2013 10:11:46 +0200 (CEST) Received: from [192.168.1.67] (167.Red-83-42-219.dynamicIP.rima-tde.net [83.42.219.167]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon14.um.es (Postfix) with ESMTPSA id 2B2985D4F1; Tue, 1 Oct 2013 10:11:44 +0200 (CEST) Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=iso-8859-1 From: Rafa Marin Lopez In-Reply-To: <4C04F0D0-6105-448A-82EF-C62F6392F828@cisco.com> Date: Tue, 1 Oct 2013 10:11:44 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <052301ceb814$54e4caa0$feae5fe0$@augustcellars.com> <523FE430.4040106@kent.ac.uk> <01ee01cebba0$2dc575c0$89506140$@augustcellars.com>, <5246C6B1.9030500@kent.ac.uk> <4C04F0D0-6105-448A-82EF-C62F6392F828@cisco.com> To: Klaas Wierenga (kwiereng) X-Mailer: Apple Mail (2.1283) Cc: abfab@ietf.org Subject: Re: [abfab] [Sam Hartman] comments on draft-ietf-abfab-arch X-BeenThere: abfab@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "Application Bridging, Federated Authentication Beyond \(the web\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Oct 2013 08:11:56 -0000 Hi Klaas, David: I think all these aspects are really interesting and worthy of studying = them. As you say, Klaas, I agree that finishing first current charter is = the best way to go for now. In any case, I would be happy to contribute = somehow in this topic in a rechartered ABFAB or a new WG. Best Regards. El 29/09/2013, a las 09:12, Klaas Wierenga (kwiereng) escribi=F3: > Hi David, >=20 >> On 28 sep. 2013, at 14:08, "David Chadwick" = wrote: >>=20 >> Hi Jim >>=20 >> thankyou for your long answer. Firstly I agree that the answer is not = trivial, especially once you consider that an SP may require attributes = from multiple IdPs/AAs. But leaving attribute aggregation aside, lets = discuss conceptually what is needed in the simple single IDP case, = before trying to figure out how to map this into the ABFAB protocols. >>=20 >> 1. The SP is the only entity that knows which attributes are needed = to access which of its services >> 2. The SP may not know this at the time of authn, as the user may not = have chosen the service he wants to access at login time (assuming the = SP has multiple services requiring different authz attributes). >> 3. If the user moves between the different services of the SP, using = SSO, then different attributes may be needed at different times during = the same authn session >> 4. DP legislation indicates that the SP should minimise the = attributes it asks for, so a "grab them all" approach at authn time is = not in the spirit of DP, and may be illegal in some juridictions >> 5. This indicates to me that the SP should be able to send its = attribute requirements (or authz policy) to the IdP at arbitrary points = in time during the user's session, and that the IDP should be able to = send back attribute assertions that match the policy whenever requested = to, providing that the user consents to this (and the IDP knows that the = user has). >=20 > I believe these are all fair statements and indicative of where we = want federated identity systems to be eventually. At the same time, I = think this is beyond the current scope of ABFAB.=20 >=20 >> Is this challenge something the ABFAB group would like to take on, or = should there be a BOF at a future IETF meeting to discuss this? >=20 > With my chair hat on I'd say let's finish the current set of documents = and not let the scope creep. Having said that, once we are done I'd = welcome a discussion on how to address valid concerns about user consent = and privacy, whether that would lead to concrete ideas and/or a WG (a = rechartered ABFAB or new doesn't really matter to me). >=20 > Klaas >=20 >>=20 >> regards >>=20 >> David >>=20 >>> On 27/09/2013 17:39, Jim Schaad wrote: >>>=20 >>>=20 >>>> -----Original Message----- >>>> From: David Chadwick [mailto:d.w.chadwick@kent.ac.uk] >>>> Sent: Sunday, September 22, 2013 11:48 PM >>>> To: Jim Schaad >>>> Cc: 'Sam Hartman'; abfab@ietf.org >>>> Subject: Re: [abfab] [Sam Hartman] comments on = draft-ietf-abfab-arch >>>>=20 >>>> Apologies from me as well Sam, here are my comments on = draft-ietf-abfab- >>>> arch-07.txt >>>>=20 >>>> Technical >>>>=20 >>>> Section 1. >>>> i) Data Minimization and User Participation: "There is currently no = direct >>> client >>>> participation in this decision." (i.e. release of identity = attributes). We >>> should >>>> say at this juncture that this is a major deficiency in existing = federated >>>> systems, since the user does not have full consent or control over = which >>> of his >>>> identity attributes are released. This should be fixed in Abfab >>>=20 >>> Based on the current set of abilities, there is no real way to fix = this in >>> ABFAB itself. I have thought of a proposed way to deal with this, = but am >>> unsure where it would be bested addressed or even what the solution = to the >>> problem would include. >>>=20 >>> If I was solving this today, I would define a couple of experimental = items >>> in the TEAP protocol to allow for this to be done, however given = that this >>> would definitely be experimental and the fact that the EMU group is = trying >>> to go away it is not clear that this would be the group to do it. I = don't >>> think that ABFAB is really the place to do it either. I think that = there >>> needs to be some clear discussions about how this should be attacked = as a >>> problem before we even think about it. In some instances it is not = clear >>> that that is any solution to the problem, such as when a SAML = request goes >>> from the server to the IDP after the EAP authentication has been = completed. >>> The only thing that could be possible in this case is for a profile = to be >>> agreed on by the client and the IDP at the authentication time and = for the >>> IDP to enforce it at a later time. >>>=20 >>> Given how unclear a solution would be for this I don't see any = reason to >>> hold this document up over the fact that the ability for the user to = fully >>> consent does not exist. This has always been the case for RADIUS = and >>> Diameter as well. >>>=20 >>> We can potentially strengthen the language that is present, although = I don't >>> really see any need to do that either. At present I do not plan to = make any >>> changes to address this issue. >>>=20 >>>>=20 >>>> ii) Section 1.1.1 >>>> Authenticator should be defined before it is used. >>>=20 >>> This has been fixed. >>>=20 >>>>=20 >>>> iii) I dont buy into your whiteboard example of single entity >>> authentication, >>>> because a hacked whiteboard could trick the user into opening the = wrong >>> file, >>>> which could be disasterous during an important business meeting. SO = mutual >>>> authentication is needed here as well. If you want an example where = mutual >>>> authentication is not important, its one where either the = information >>> being >>>> accessed is of very little value to the accessor so that it does = not >>> matter if it is >>>> erroneous information or not, or one where it does not matter who = the >>>> accessor is i.e. its public information. >>>=20 >>> I don't see how having mutual authentication is going to solve = anything in >>> the case of a hacked whiteboard getting the user to display the = wrong file >>> or stealing credentials from the user in the case that it the = initiator. >>> There would be no issue of the file server releasing the file to the >>> whiteboard if authorized by the user in all cases. The only = question would >>> be if the file server decided based on the name of the whiteboard = that it >>> should not be released, but it would be the user that is = authenticated in >>> this case and not the whiteboard so there would not be mutual = authentication >>> between the file server and the whiteboard in any case. >>>=20 >>> I will send to the list updated text on this. After a brief = exchange with >>> Sam I believe this has some errors in it that need to be clarified. >>>=20 >>>>=20 >>>>=20 >>>>=20 >>>> Editorials >>>>=20 >>>> Section 1 >>>> the Relying Party know specific -> the Relying Party to know = specific >>> Fixed >>>=20 >>>>=20 >>>> Section 1.1 >>>> the document uses either a the ABFAB term -> the document uses = either the >>>> ABFAB term The table should be labelled "Table 1. Terminology" >>> Fixed >>>=20 >>>>=20 >>>> Section 1.4 >>>> a SAML Attribute Requests -> a SAML Attribute Request >>> Fixed >>>=20 >>>>=20 >>>> Section 2.1.3 >>>> to validate theg identities -> to validate the identities The trust >>> mechanism >>>> must to ensure that -> The trust mechanism must ensure that An RP = can >>>> submit a request directly to a federation. -> An RP can submit a = request >>>> directly to the correct federation. >>>> information about given a IdP -> information about a given IdP >>>=20 >>> Fixed >>>=20 >>>>=20 >>>> regards >>>>=20 >>>> David >>>>=20 >>>>> On 23/09/2013 05:21, Jim Schaad wrote: >>>>> My apologies for not getting these out in last call. >>>>> One of these (the re-authentication section comment) is serious = enough >>>>> that I believe it needs to be resolved prior to sending the = document on. >>>>>=20 >>>>>=20 >>>>> Section 1.1.1 >>>>>=20 >>>>> old: Typically when considering channel binding >>>>>=20 >>>>> new: >>>>>=20 >>>>> Typicially when considering both EAP and GSS-API channel binding >>>>>=20 >>>>> [JLS] done >>>>>=20 >>>>> Later in the white board example >>>>> channel binding should be GSS-API channel binding >>>>>=20 >>>>> [JLS] I don't understand this. The two sentences which talk = about the >>>>> whiteboard do not have the phrase channel binding in them. The = next >>>>> sentence would seem to apply to either GSS-API or EAP channel = binding. >>>>> Which sentence did you think should be changed? >>>>>=20 >>>>> Section 2.3.3 >>>>>=20 >>>>> This is unlikely to survive IETF last call unchallenged. >>>>>=20 >>>>> [JLS] Quite correct - this should say - please present your >>>>> authentication token >>>>>=20 >>>>> ... >>>>>=20 >>>>> >>>>> There are circumstances where the server will want to >>>>> have the client re-authenticate itself. >>>>> These include very long sessions, where the original >>>>> authentication is time limited or cases where in order to complete = an >>>>> operation a different authentication is required. >>>>> GSS-EAP does not have any mechanism for the server to >>>>> initiate a re-authentication as all authentication operation start = from >>> the >>>> client. >>>>> If a protocol using GSS-EAP needs to support >>>>> re-authentication that is initiated by the server, then a request = from >>>>> the server to the client for the re-authentication to start needs = to >>>>> be placed in the protocol. >>>>> >>>>> >>>>> Clients can re-use the existing secure connection >>>>> established by GSS-API to run the new authentication in by calling >>>> GSS_Init_sec_context. >>>>> At this point a full re-authentication will be done. >>>>> >>>>>=20 >>>>> What do you think needs to be added to this? >>>>>=20 >>>>> Section 3.4 >>>>>=20 >>>>> old: shared private key >>>>> new: shared session key >>>>>=20 >>>>> [JLS] - Fixed >>>>>=20 >>>>> Section 2.2.2 refers to sectian 6.1 for a description of GSS-API >>>>> channel binding; that seems wrong >>>>>=20 >>>>> [JLS] Section 6 has disappeared - so I am killing that portion of = the >>>>> section. >>>>>=20 >>>>>> -----Original Message----- >>>>>> From: abfab-bounces@ietf.org [mailto:abfab-bounces@ietf.org] On >>>>>> Behalf Of Sam Hartman >>>>>> Sent: Wednesday, September 04, 2013 6:04 AM >>>>>> To: abfab@ietf.org >>>>>> Subject: [abfab] [Sam Hartman] comments on draft-ietf-abfab-arch >>>>>>=20 >>>>>> Sent from wrong address. >>>>>=20 >>>>>=20 >>>>> _______________________________________________ >>>>> abfab mailing list >>>>> abfab@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/abfab >> _______________________________________________ >> abfab mailing list >> abfab@ietf.org >> https://www.ietf.org/mailman/listinfo/abfab > _______________________________________________ > abfab mailing list > abfab@ietf.org > https://www.ietf.org/mailman/listinfo/abfab ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- From juanwei2012@gmail.com Thu Oct 10 02:40:35 2013 Return-Path: X-Original-To: abfab@ietfa.amsl.com Delivered-To: abfab@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EA8821E80F9 for ; Thu, 10 Oct 2013 02:40:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WeIfLnGrYkHn for ; Thu, 10 Oct 2013 02:40:34 -0700 (PDT) Received: from mail-pb0-x243.google.com (mail-pb0-x243.google.com [IPv6:2607:f8b0:400e:c01::243]) by ietfa.amsl.com (Postfix) with ESMTP id 3DE4321E80EB for ; Thu, 10 Oct 2013 02:40:31 -0700 (PDT) Received: by mail-pb0-f67.google.com with SMTP id uo5so721990pbc.2 for ; Thu, 10 Oct 2013 02:40:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:subject:mime-version:message-id:content-type; bh=mMECLbJ3dwl1X9WFkGMHX2m+n+n1o0UA6bDD9/+88fA=; b=eXAw/+gtCge4zXf+px1gPgJbwIDTi1/GmofR2uStapsxZ0F12AlEEhak4fqNkMtH1d SMBogtzAQkdmX5GLhiP9c352P4f9JvEebFUqdMGmyg3EBZI+XeVMlyB17uSCaYyh9K6S QgkWy6/esplV1pnvX1ITbVRrWDUpeEQdWeC9TMJZS9THHoNztoqF2nAvo1jTt/DXsECm ReFXyJDMcNXGU9c8Caxi057+NUyqxHxz/c5FqE6+dDfxKUlhAA8flozJagT866UZvqR7 YL2eRCLrrp5zaOZdy98ZwMhyrJYSOo3fftH+HKYxiS5YS7Kj57rwzJsJ6XTDnZmapoN1 /brA== X-Received: by 10.66.168.7 with SMTP id zs7mr14698258pab.152.1381398030031; Thu, 10 Oct 2013 02:40:30 -0700 (PDT) Received: from PC-201303222330 ([210.39.1.5]) by mx.google.com with ESMTPSA id zq10sm61192493pab.6.1969.12.31.16.00.00 (version=TLSv1.2 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 10 Oct 2013 02:40:29 -0700 (PDT) Date: Thu, 10 Oct 2013 17:40:25 +0800 From: "Wei Juan" To: abfab X-Priority: 3 X-GUID: C48C9EEB-3B4C-4E84-8491-E3E812853035 X-Has-Attach: no X-Mailer: Foxmail 7, 1, 3, 52[cn] Mime-Version: 1.0 Message-ID: <2013101017402145266822@gmail.com> Content-Type: multipart/alternative; boundary="----=_001_NextPart337254314885_=----" Subject: [abfab] Fw: New Version Notification for draft-wei-abfab-usecases-01.txt X-BeenThere: abfab@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "Application Bridging, Federated Authentication Beyond \(the web\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2013 09:40:35 -0000 This is a multi-part message in MIME format. ------=_001_NextPart337254314885_=---- Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 SGVyZSBpcyB0aGUgLTAxIGRyYWZ0IHVwZGF0ZWQgYXMgU2FtJ3MgY29tbWVudHMuIA0KUGxlYXNl IGtpbmRseSByZXZpZXcgYW5kIGZlZWwgZnJlZSB0byBnaXZlIHVzIGFueSBjb21tZW50cy4gVGhh bmsgeW91IGluIGFkdmFuY2UuDQoNCkp1YW4sDQoNCg0KV2VpIEp1YW4NCg0KRnJvbTogaW50ZXJu ZXQtZHJhZnRzDQpEYXRlOiAyMDEzLTEwLTEwIDE3OjMwDQpUbzoganVhbndlaTIwMTJAZ21haWwu Y29tOyBKaWFueW9uZyBDaGVuOyBXZWkgSnVhbjsgSnVuIFpoYW5nDQpTdWJqZWN0OiBOZXcgVmVy c2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LXdlaS1hYmZhYi11c2VjYXNlcy0wMS50eHQNCg0K QSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LXdlaS1hYmZhYi11c2VjYXNlcy0wMS50eHQNCmhh cyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgV2VpIEp1YW4gYW5kIHBvc3RlZCB0byB0 aGUNCklFVEYgcmVwb3NpdG9yeS4NCg0KRmlsZW5hbWU6IGRyYWZ0LXdlaS1hYmZhYi11c2VjYXNl cw0KUmV2aXNpb246IDAxDQpUaXRsZTogQXBwbGljYXRpb24gQnJpZGdpbmcgZm9yIEZlZGVyYXRl ZCBBY2Nlc3MgQmV5b25kIFdlYiAoQUJGQUIpIFVzZSBDYXNlcw0KQ3JlYXRpb24gZGF0ZTogMjAx My0xMC0xMA0KR3JvdXA6IEluZGl2aWR1YWwgU3VibWlzc2lvbg0KTnVtYmVyIG9mIHBhZ2VzOiA3 DQpVUkw6ICAgICAgICAgICAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2Ry YWZ0LXdlaS1hYmZhYi11c2VjYXNlcy0wMS50eHQNClN0YXR1czogICAgICAgICAgaHR0cDovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC13ZWktYWJmYWItdXNlY2FzZXMNCkh0bWxpemVk OiAgICAgICAgaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtd2VpLWFiZmFiLXVzZWNh c2VzLTAxDQpEaWZmOiAgICAgICAgICAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwy PWRyYWZ0LXdlaS1hYmZhYi11c2VjYXNlcy0wMQ0KDQpBYnN0cmFjdDoNCiAgIElkZW50aXR5IE1h bmFnZW1lbnQgU3lzdGVtIHBsYXlzIGFuIGltcG9ydGFudCByb2xlIGluIENsb3VkDQogICBDb21w dXRpbmcuIEEgZ29vZCBJZGVudGl0eSBNYW5hZ2VtZW50IFN5c3RlbSBzaG91bGQgbWVldCB0aGUg ZGl2ZXJzZQ0KICAgc2VjdXJpdHkgcmVxdWlyZW1lbnRzIGZyb20gYm90aCBzZXJ2aWNlIHByb3Zp ZGVycyBhbmQgdXNlcnMsIGltcHJvdmUNCiAgIHVzYWJpbGl0eSBmb3IgdXNlcnMgYW5kIHByb3Rl Y3QgdGhlIHJlc291cmNlcyBmcm9tIHVuYXV0aG9yaXplZA0KICAgYWNjZXNzLiBUaGUgZ29hbCBv ZiB0aGUgZG9jdW1lbnQgaXMgdG8gZG9jdW1lbnQgdHdvIGtpbmRzIG9mIGxldmVsDQogICBvZiBh c3N1cmFuY2UsIG9uZSBmb3IgYXV0aGVudGljYXRpb24gYW5kIHRoZSBvdGhlciBmb3IgYXR0cmli dXRlLCB0bw0KICAgcHJvdmlkZSB1c2VycyB3aXRoIGEgZnJpZW5kbHkgZXhwZXJpZW5jZSB0aHJv dWdoIHRoZSB1c2Ugb2YNCiAgIHRlY2hub2xvZ2llcyBiYXNlZCBvbiB0aGUgQUJGQUIgYXJjaGl0 ZWN0dXJlIGFuZCBzcGVjaWZpY2F0aW9ucy4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0K DQoNClBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9t IHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24NCnVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBk aWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQoNClRoZSBJRVRGIFNlY3JldGFy aWF0 ------=_001_NextPart337254314885_=---- Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =EF=BB=BF
Here is the -01 draft updated as Sam's comments.
Please kindly review and feel free to give us any comments. Thank you= in=20 advance.
 
Juan,
Wei Juan
 
From: internet-drafts
Date: 2013-10-10 17:30
To: juanwei2012@gmail.com; Jianyong Chen; Wei Juan; Jun Zhang
Subject: New Version Notification for=20 draft-wei-abfab-usecases-01.txt
 
A new version of I-D, draft-wei-abfab-usecases-01.txt
has been successfully submitted by Wei Juan and posted to the
IETF repository.
 
Filename: draft-wei-abfab-usecases
Revision: 01
Title: Application Bridging for Federated Access Beyond Web (ABFAB) U= se=20 Cases
Creation date: 2013-10-10
Group: Individual Submission
Number of pages: 7
URL:           = ; =20 http://www.ietf.org/internet-drafts/draft-wei-abfab-usecases-01.txt=
Status:          http://d= atatracker.ietf.org/doc/draft-wei-abfab-usecases
Htmlized:        http://too= ls.ietf.org/html/draft-wei-abfab-usecases-01
Diff:          &nbs= p; ht= tp://www.ietf.org/rfcdiff?url2=3Ddraft-wei-abfab-usecases-01
 
Abstract:
   Identity Management System plays an important role in=20 Cloud
   Computing. A good Identity Management System should meet= the=20 diverse
   security requirements from both service providers and us= ers,=20 improve
   usability for users and protect the resources from=20 unauthorized
   access. The goal of the document is to document two kind= s of=20 level
   of assurance, one for authentication and the other for=20 attribute, to
   provide users with a friendly experience through the use= =20 of
   technologies based on the ABFAB architecture and=20 specifications.
 
           &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;            &= nbsp;       =20
 
 
Please note that it may take a couple of minutes from the time of=20 submission
until the htmlized version and diff are available at tools.ietf.org.<= /DIV>
 
The IETF Secretariat
 
------=_001_NextPart337254314885_=------ From leifj@mnt.se Thu Oct 24 05:28:07 2013 Return-Path: X-Original-To: abfab@ietfa.amsl.com Delivered-To: abfab@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F8DF11E818C for ; Thu, 24 Oct 2013 05:28:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9dtYItBDwvdd for ; Thu, 24 Oct 2013 05:28:01 -0700 (PDT) Received: from mail-la0-f48.google.com (mail-la0-f48.google.com [209.85.215.48]) by ietfa.amsl.com (Postfix) with ESMTP id 604B811E818B for ; Thu, 24 Oct 2013 05:27:58 -0700 (PDT) Received: by mail-la0-f48.google.com with SMTP id ev20so1779395lab.7 for ; Thu, 24 Oct 2013 05:27:58 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:content-type:content-transfer-encoding; bh=hZErWO042lGq1Zl1H9w0LUaGOSCWuMWwr6daMhz3FXc=; b=FleivpEmG1exyp3NGRgIXAZKFqDtHRTKSSOQA+SN1j/vKYnsPMFo9RywIaLktEgkRA kWEt/FTpZDg9RgIkhrTYZkN6ACxIMB+WYrHMmMtgEBIumAAcPjupMoHPK12HbP6A7OXd ZvqbFgHdWcTIp6mCN7BDtgfUcGIfYeqB5MVgjQVoCrwFbJphxM2T6WnaSKRNflk1hf2C nDn7XZ47rA3G5Ay3jgbCX6lDiIbK1JtLWfecv6nDCt+LblWMRXizEE/LA7gbGsNLOvqh GZjbinknpWj3TMjrfdQqyoJTsZPS8CB3B90GFPJvst6PpLzLLNTnI1w/s7QUqQAxT0pX FH8g== X-Gm-Message-State: ALoCoQng6FoZ1P2RRRhHvxzI0JrtPziJh8u6jP1bSwmMC1u99wi0Us8EVCJVFlSCBKJI92K3gSIn X-Received: by 10.152.7.105 with SMTP id i9mr1681323laa.9.1382617678051; Thu, 24 Oct 2013 05:27:58 -0700 (PDT) Received: from [10.251.26.25] ([192.121.34.131]) by mx.google.com with ESMTPSA id vo1sm2200312lbb.1.2013.10.24.05.27.56 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 24 Oct 2013 05:27:56 -0700 (PDT) Message-ID: <5269124B.4060809@mnt.se> Date: Thu, 24 Oct 2013 14:27:55 +0200 From: Leif Johansson User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.0 MIME-Version: 1.0 To: abfab@ietf.org X-Enigmail-Version: 1.5.2 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: [abfab] Draft agenda for Vancouver X-BeenThere: abfab@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "Application Bridging, Federated Authentication Beyond \(the web\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2013 12:28:07 -0000 Here is a draft agenda - send comments asap! Cheers Leif & Klaas - Agenda Bashing and Note Well (5 min, Chairs) - Document status & Remaining open issues (45 min) * draft-ietf-abfab-aaa-saml * draft-ietf-abfab-arch WGLC - Rechartering - future direction - Document status & Open Mic (remaining time) From Josh.Howlett@ja.net Mon Oct 28 08:45:47 2013 Return-Path: X-Original-To: abfab@ietfa.amsl.com Delivered-To: abfab@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C8AF11E8185 for ; Mon, 28 Oct 2013 08:45:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -96.499 X-Spam-Level: X-Spam-Status: No, score=-96.499 tagged_above=-999 required=5 tests=[BAYES_50=0.001, J_CHICKENPOX_24=0.6, J_CHICKENPOX_27=0.6, MANGLED_NAIL=2.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vE+z6l59Bv1u for ; Mon, 28 Oct 2013 08:45:42 -0700 (PDT) Received: from egw001.ukerna.ac.uk (egw001.ukerna.ac.uk [194.82.140.74]) by ietfa.amsl.com (Postfix) with ESMTP id 0E33711E8137 for ; Mon, 28 Oct 2013 08:45:41 -0700 (PDT) Received: from egw001.ukerna.ac.uk (localhost.localdomain [127.0.0.1]) by localhost (Email Security Appliance) with SMTP id F3DF41AC57E6_26E86A3B for ; Mon, 28 Oct 2013 15:45:39 +0000 (GMT) Received: from EXC001.atlas.ukerna.ac.uk (exc001.atlas.ukerna.ac.uk [193.62.83.37]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client CN "staffmail.ja.net", Issuer "TERENA SSL CA" (verified OK)) by egw001.ukerna.ac.uk (Sophos Email Appliance) with ESMTPS id A34201AC5795_26E86A1F for ; Mon, 28 Oct 2013 15:45:37 +0000 (GMT) Received: from EXC001.atlas.ukerna.ac.uk ([193.62.83.37]) by EXC001 ([193.62.83.37]) with mapi id 14.02.0247.003; Mon, 28 Oct 2013 15:45:37 +0000 From: Josh Howlett To: "abfab@ietf.org" Thread-Topic: draft-ietf-abfab-aaa-saml-07 Thread-Index: AQHO0/S+KqOIMyMZq0auuE/aFsvvDg== Date: Mon, 28 Oct 2013 15:45:36 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.7.130812 x-originating-ip: [194.82.140.76] Content-Type: multipart/mixed; boundary="_002_CE943718F91AJoshHowlettjanet_" MIME-Version: 1.0 Subject: [abfab] draft-ietf-abfab-aaa-saml-07 X-BeenThere: abfab@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "Application Bridging, Federated Authentication Beyond \(the web\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2013 15:45:47 -0000 --_002_CE943718F91AJoshHowlettjanet_ Content-Type: text/plain; charset="us-ascii" Content-ID: <03DCFD0020C7D8448780C5B19AC889AA@ukerna.ac.uk> Content-Transfer-Encoding: quoted-printable In an act of stupidity I missed the submission cut-off, thinking it was today. I have attached the update to this mail. I believe that all of the issues discussed at the last meeting have been addressed, and so the document should be in pretty good shape. It definitely still needs further work, mainly in terms of improving terminology consistency, writing the security & privacy considerations, and elaborating in some places where the existing text is a overly terse (such as the NAI name format identifier definition) or assumes too much from the reader. Are the chairs ok with this being discussed next week? Josh. Janet(UK) is a trading name of Jisc Collections and Janet Limited, a=20 not-for-profit company which is registered in England under No. 2881024=20 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238 --_002_CE943718F91AJoshHowlettjanet_ Content-Type: text/plain; name="draft-ietf-abfab-aaa-saml-07.txt" Content-Description: draft-ietf-abfab-aaa-saml-07.txt Content-Disposition: attachment; filename="draft-ietf-abfab-aaa-saml-07.txt"; size=50628; creation-date="Mon, 28 Oct 2013 15:45:36 GMT"; modification-date="Mon, 28 Oct 2013 15:45:36 GMT" Content-ID: <8C0377C78591804D9C386754158141C9@ukerna.ac.uk> Content-Transfer-Encoding: base64 CgoKQUJGQUIgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBKLiBIb3dsZXR0CkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBKYW5ldApJbnRlbmRlZCBzdGF0dXM6IEluZm9y bWF0aW9uYWwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFMuIEhhcnRtYW4KRXhwaXJl czogTWF5IDEsIDIwMTQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBhaW5sZXNz IFNlY3VyaXR5CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgT2N0b2JlciAyOCwgMjAxMwoKCiAgIEEgUkFESVVTIEF0dHJpYnV0ZSwgQmluZGlu ZywgUHJvZmlsZXMsIE5hbWUgSWRlbnRpZmllciBGb3JtYXQsIGFuZAogICAgICAgICAgICAgICAg ICAgICBDb25maXJtYXRpb24gTWV0aG9kcyBmb3IgU0FNTAogICAgICAgICAgICAgICAgICAgICAg ZHJhZnQtaWV0Zi1hYmZhYi1hYWEtc2FtbC0wNwoKQWJzdHJhY3QKCiAgIFRoaXMgZG9jdW1lbnQg ZGVzY3JpYmVzIHRoZSB1c2Ugb2YgdGhlIFNlY3VyaXR5IEFzc2VydGlvbiBNYXJrLXVwCiAgIExh bmd1YWdlIChTQU1MKSB3aXRoIFJBRElVUyBpbiB0aGUgY29udGV4dCBvZiB0aGUgQUJGQUIgYXJj aGl0ZWN0dXJlLgogICBJdCBkZWZpbmVzIHR3byBSQURJVVMgYXR0cmlidXRlcywgYSBTQU1MIGJp bmRpbmcsIGEgU0FNTCBuYW1lCiAgIGlkZW50aWZpZXIgZm9ybWF0LCB0d28gU0FNTCBwcm9maWxl cywgYW5kIHR3byBTQU1MIGNvbmZpcm1hdGlvbgogICBtZXRob2RzLiAgVGhlIFJBRElVUyBhdHRy aWJ1dGVzIHBlcm1pdCBlbmNhcHN1bGF0aW9uIG9mIFNBTUwKICAgYXNzZXJ0aW9ucyBhbmQgcHJv dG9jb2wgbWVzc2FnZXMgd2l0aGluIFJBRElVUywgYWxsb3dpbmcgU0FNTAogICBlbnRpdGllcyB0 byBjb21tdW5pY2F0ZSB1c2luZyB0aGUgYmluZGluZy4gIFRoZSB0d28gcHJvZmlsZXMgZGVzY3Jp YmUKICAgdGhlIGFwcGxpY2F0aW9uIG9mIHRoaXMgYmluZGluZyBmb3IgQUJGQUIgYXV0aGVudGlj YXRpb24gYW5kCiAgIGFzc2VydGlvbiBxdWVyeS9yZXF1ZXN0LCBlbmFibGluZyBhIFJlbHlpbmcg UGFydHkgdG8gcmVxdWVzdAogICBhdXRoZW50aWNhdGlvbiBvZiwgb3IgYXNzZXJ0aW9ucyBmb3Is IHVzZXIgb3IgbWFjaGluZSBwcmluY2lwYWxzLgogICBUaGVzZSBwcmluY2lwYWxzIG1heSBiZSBu YW1lZCB1c2luZyBhbiBOQUkgbmFtZSBpZGVudGlmaWVyIGZvcm1hdC4KICAgRmluYWxseSwgdGhl IHN1YmplY3QgY29uZmlybWF0aW9uIG1ldGhvZHMgYWxsb3cgcmVxdWVzdHMgYW5kIHF1ZXJpZXMK ICAgdG8gYmUgaXNzdWVkIGZvciBhIHByZXZpb3VzbHkgYXV0aGVudGljYXRlZCB1c2VyIG9yIG1h Y2hpbmUgd2l0aG91dAogICBuZWVkaW5nIHRvIGV4cGxpY2l0bHkgaWRlbnRpZnkgdGhlbSBhcyB0 aGUgc3ViamVjdC4gIFRoZXNlIGFydGlmYWN0cwogICBoYXZlIGJlZW4gZGVmaW5lZCB0byBwZXJt aXQgYXBwbGljYXRpb24gaW4gQUFBIHNjZW5hcmlvcyBvdGhlciB0aGFuCiAgIEFCRkFCLCBzdWNo IGFzIG5ldHdvcmsgYWNjZXNzLgoKU3RhdHVzIG9mIFRoaXMgTWVtbwoKICAgVGhpcyBJbnRlcm5l dC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25mb3JtYW5jZSB3aXRoIHRoZQogICBwcm92 aXNpb25zIG9mIEJDUCA3OCBhbmQgQkNQIDc5LgoKICAgSW50ZXJuZXQtRHJhZnRzIGFyZSB3b3Jr aW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmcKICAgVGFzayBGb3JjZSAo SUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1dGUKICAgd29y a2luZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJ bnRlcm5ldC0KICAgRHJhZnRzIGlzIGF0IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kcmFm dHMvY3VycmVudC8uCgogICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxp ZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHMKICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBs YWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90aGVyIGRvY3VtZW50cyBhdCBhbnkKICAgdGltZS4gIEl0 IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURyYWZ0cyBhcyByZWZlcmVuY2UKICAg bWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3Mu IgoKICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiBNYXkgMSwgMjAxNC4KCkNv cHlyaWdodCBOb3RpY2UKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAgICAgICAgRXhwaXJlcyBNYXkg MSwgMjAxNCAgICAgICAgICAgICAgICAgIFtQYWdlIDFdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAg ICAgICAgICAgIFNBTUwgUkFESVVTICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDEzCgoKICAg Q29weXJpZ2h0IChjKSAyMDEzIElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQg YXMgdGhlCiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLgoKICAgVGhp cyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdh bAogICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzCiAgIChodHRwOi8vdHJ1 c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBvZgogICBw dWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVu dHMKICAgY2FyZWZ1bGx5LCBhcyB0aGV5IGRlc2NyaWJlIHlvdXIgcmlnaHRzIGFuZCByZXN0cmlj dGlvbnMgd2l0aCByZXNwZWN0CiAgIHRvIHRoaXMgZG9jdW1lbnQuICBDb2RlIENvbXBvbmVudHMg ZXh0cmFjdGVkIGZyb20gdGhpcyBkb2N1bWVudCBtdXN0CiAgIGluY2x1ZGUgU2ltcGxpZmllZCBC U0QgTGljZW5zZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuZSBvZgogICB0aGUgVHJ1 c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJlIHByb3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXMK ICAgZGVzY3JpYmVkIGluIHRoZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlLgoKVGFibGUgb2YgQ29u dGVudHMKCiAgIDEuICBUT0RPIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgNAogICAyLiAgSW50cm9kdWN0aW9uIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQKICAgMy4gIENvbnZlbnRpb25z ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1CiAg IDQuICBSQURJVVMgU0FNTCBBdHRyaWJ1dGVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgNQogICA1LiAgU0FNTCBSQURJVVMgQmluZGluZyAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYKICAgICA1LjEuICBSZXF1aXJlZCBJbmZvcm1h dGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2CiAgICAgNS4yLiAg T3BlcmF0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgNgogICAgIDUuMy4gIFByb2Nlc3Npbmcgb2YgbmFtZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDcKICAgICAgIDUuMy4xLiAgQUFBIG5hbWVzICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3CiAgICAgICA1LjMuMi4gIFNBTUwg bmFtZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOAogICAg ICAgNS4zLjMuICBVc2Ugb2YgWE1MIFNpZ25hdHVyZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDgKICAgICAgIDUuMy40LiAgTWV0YWRhdGEgQ29uc2lkZXJhdGlvbnMgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4CiAgIDYuICBOZXR3b3JrIEFjY2VzcyBJZGVudGlm aWVyIE5hbWUgSWRlbnRpZmllciBGb3JtYXQgLiAuIC4gLiAuIC4gLiAgOQogICA3LiAgQUJGQUIg QXV0aGVudGljYXRpb24gUHJvZmlsZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDkKICAgICA3LjEuICBSZXF1aXJlZCBJbmZvcm1hdGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA5CiAgICAgNy4yLiAgUHJvZmlsZSBPdmVydmlldyAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOQogICAgIDcuMy4gIFByb2ZpbGUgRGVz Y3JpcHRpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTEKICAgICAg IDcuMy4xLiAgVXNlciBBZ2VudCBSZXF1ZXN0IHRvIFJlbHlpbmcgUGFydHkgIC4gLiAuIC4gLiAu IC4gLiAuIDExCiAgICAgICA3LjMuMi4gIFJlbHlpbmcgUGFydHkgSXNzdWVzIDxzYW1scDpBdXRo blJlcXVlc3Q+IHRvCiAgICAgICAgICAgICAgIElkZW50aXR5IFByb3ZpZGVyICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMQogICAgICAgNy4zLjMuICBJZGVudGl0eSBQcm92 aWRlciBJZGVudGlmaWVzIFByaW5jaXBhbCAuIC4gLiAuIC4gLiAuIC4gMTIKICAgICAgIDcuMy40 LiAgSWRlbnRpdHkgUHJvdmlkZXIgSXNzdWVzIDxzYW1scDpSZXNwb25zZT4gdG8KICAgICAgICAg ICAgICAgUmVseWluZyBQYXJ0eSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDEyCiAgICAgICA3LjMuNS4gIFJlbHlpbmcgUGFydHkgR3JhbnRzIG9yIERlbmllcyBBY2Nl c3MgdG8gUHJpbmNpcGFsIC4gLiAxMgogICAgIDcuNC4gIFVzZSBvZiBBdXRoZW50aWNhdGlvbiBS ZXF1ZXN0IFByb3RvY29sIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTIKICAgICAgIDcuNC4xLiAgPHNh bWxwOkF1dGhuUmVxdWVzdD4gVXNhZ2UgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDEzCiAg ICAgICA3LjQuMi4gIDxzYW1scDpSZXNwb25zZSBtZXNzYWdlPiBVc2FnZSAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAxMwogICAgICAgNy40LjMuICA8c2FtbHA6UmVzcG9uc2UgTWVzc2FnZT4gUHJv Y2Vzc2luZyBSdWxlcyAgLiAuIC4gLiAuIC4gMTQKICAgICAgIDcuNC40LiAgVW5zb2xpY2l0ZWQg UmVzcG9uc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE0CiAgICAgICA3LjQu NS4gIFVzZSBvZiB0aGUgU0FNTCBSQURJVVMgQmluZGluZyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAxNAogICAgICAgNy40LjYuICBVc2Ugb2YgWE1MIFNpZ25hdHVyZXMgIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gMTQKICAgICAgIDcuNC43LiAgTWV0YWRhdGEgQ29uc2lkZXJhdGlv bnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE1CiAgIDguICBBQkZBQiBBc3NlcnRp b24gUXVlcnkvUmVxdWVzdCBQcm9maWxlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNQoKCgpI b3dsZXR0ICYgSGFydG1hbiAgICAgICAgICBFeHBpcmVzIE1heSAxLCAyMDE0ICAgICAgICAgICAg ICAgICAgW1BhZ2UgMl0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgU0FNTCBSQURJ VVMgICAgICAgICAgICAgICAgICBPY3RvYmVyIDIwMTMKCgogICAgIDguMS4gIFJlcXVpcmVkIElu Zm9ybWF0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTUKICAgICA4 LjIuICBQcm9maWxlIE92ZXJ2aWV3IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIDE1CiAgICAgOC4zLiAgUHJvZmlsZSBEZXNjcmlwdGlvbiAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNgogICAgICAgOC4zLjEuICBEaWZmZXJlbmNlcyBmcm9t IHRoZSBTQU1MIFYyLjAgQXNzZXJ0aW9uCiAgICAgICAgICAgICAgIFF1ZXJ5L1JlcXVlc3QgUHJv ZmlsZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNgogICAgICAgOC4zLjIuICBV c2Ugb2YgdGhlIFNBTUwgUkFESVVTIEJpbmRpbmcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTcK ICAgICAgIDguMy4zLiAgVXNlIG9mIFhNTCBTaWduYXR1cmVzICAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIDE3CiAgICAgICA4LjMuNC4gIE1ldGFkYXRhIENvbnNpZGVyYXRpb25zICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNwogICA5LiAgUkFESVVTIFN0YXRlIENvbmZp cm1hdGlvbiBNZXRob2RzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTcKICAgMTAuIFBy aXZhY3kgY29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDE4CiAgIDExLiBBY2tub3dsZWRnZW1lbnRzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAxOAogICAxMi4gU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTgKICAgMTMuIElBTkEgQ29uc2lk ZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE4CiAg ICAgMTMuMS4gUkFESVVTIEF0dHJpYnV0ZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAxOAogICAgIDEzLjIuIEFCRkFCIFBhcmFtZXRlcnMgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTgKICAgICAxMy4zLiBSZWdpc3RyYXRpb24gb2Yg dGhlIEFCRkFCIFVSTiBOYW1lc3BhY2UgIC4gLiAuIC4gLiAuIC4gLiAuIDE5CiAgIDE0LiBSZWZl cmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAxOQogICAgIDE0LjEuIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gMTkKICAgICAxNC4yLiBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDIxCgoKCgoKCgoKCgoKCgoKCgoKCgoK CgoKCgoKCgoKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAgICAgICAgRXhwaXJlcyBNYXkgMSwgMjAx NCAgICAgICAgICAgICAgICAgIFtQYWdlIDNdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAg ICAgIFNBTUwgUkFESVVTICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDEzCgoKMS4gIFRPRE8K CiAgIG8gIENsZWFuIHVwIHVzZSBvZiB0ZXJtaW5vbG9neSAoZS5nLiwgInByaW5jaXBhbCIpIHRv IGVuc3VyZQogICAgICBjb25zaXN0ZW5jeSB3aXRoIG90aGVyIEFCRkFCIGRvY3MuCgogICBvICBD b21wbGV0ZSB0aGUgQWNrbm93bGVkZ2VtZW50cyBhbmQgU2VjdXJpdHkgYW5kIFByaXZhY3kKICAg ICAgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbnMuCgoyLiAgSW50cm9kdWN0aW9uCgogICBXaXRoaW4g dGhlIEFCRkFCIGFyY2hpdGVjdHVyZSBbSS1ELmlldGYtYWJmYWItYXJjaF0gaXQgaXMgb2Z0ZW4K ICAgZGVzaXJhYmxlIHRvIGNvbnZleSBTZWN1cml0eSBBc3NlcnRpb24gTWFyay11cCBMYW5ndWFn ZSAoU0FNTCkKICAgYXNlcnRpb25zIGFuZCBwcm90b2NvbCBtZXNzYWdlcy4KCiAgIFNBTUwgdHlw aWNhbGx5IG9ubHkgY29uc2lkZXJzIHRoZSB1c2Ugb2YgSFRUUC1iYXNlZCB0cmFuc3BvcnRzLCBr bm93bgogICBhcyBiaW5kaW5ncyBbT0FTSVMuc2FtbC1iaW5kaW5ncy0yLjAtb3NdLCB3aGljaCBh cmUgcHJpbWFyaWx5CiAgIGludGVuZGVkIGZvciB1c2Ugd2l0aCB0aGUgU0FNTCBWMi4wIFdlYiBC cm93c2VyIFNpbmdsZSBTaWduLU9uCiAgIFByb2ZpbGUgW09BU0lTLnNhbWwtcHJvZmlsZXMtMi4w LW9zXS4gIEhvd2V2ZXIgdGhlIGdvYWwgb2YgQUJGQUIgaXMKICAgdG8gZXh0ZW5kIHRoZSBhcHBs aWNhYmlsaXR5IG9mIGZlZGVyYXRlZCBpZGVudGl0eSBiZXlvbmQgdGhlIFdlYiB0bwogICBvdGhl ciBhcHBsaWNhdGlvbnMgYnkgYnVpbGRpbmcgb24gdGhlIEFBQSBmcmFtZXdvcmsuICBDb25zZXF1 ZW50bHkKICAgdGhlcmUgZXhpc3RzIGEgcmVxdWlyZW1lbnQgZm9yIFNBTUwgdG8gaW50ZWdyYXRl IHdpdGggdGhlIEFBQQogICBmcmFtZXdvcmsgYW5kIHByb3RvY29scyBzdWNoIGFzIFJBRElVUyBb UkZDMjg2NV0gYW5kIERpYW1ldGVyCiAgIFtSRkMzNTg4XSwgaW4gYWRkaXRpb24gdG8gSFRUUC4K CiAgIEEgY29tcGFuaW9uIHNwZWNpZmljYXRpb24gW0ktRC5qb25lcy1kaWFtZXRlci1hYmZhYl0g c3BlY2lmaWVzCiAgIGVxdWl2YWxlbnQgZnVudGlvbmFsaXR5IGZvciBEaWFtZXRlci4KCiAgIElu IHN1bW1hcnkgdGhpcyBkb2N1bWVudCBzcGVjaWZpZXM6CgogICBvICBUd28gUkFESVVTIGF0dHJp YnV0ZXMgdG8gZW5jYXBzdWxhdGUgU0FNTCBhc3NlcnRpb25zIGFuZCBwcm90b2NvbAogICAgICBt ZXNzYWdlcyByZXNwZWN0aXZlbHkuCgogICBvICBBIFNBTUwgUkFESVVTIGJpbmRpbmcgdGhhdCBk ZWZpbmVzIGhvdyBTQU1MIGFzc2VydGlvbnMgYW5kCiAgICAgIHByb3RvY29sIG1lc3NhZ2VzIGNh biBiZSB0cmFuc3BvcnRlZCBieSBSQURJVVMgd2l0aGluIGEgU0FNTAogICAgICBleGNoYW5nZS4K CiAgIG8gIEEgcHJvZmlsZSBvZiB0aGUgU0FNTCBBdXRoZW50aWNhdGlvbiBSZXF1ZXN0IFByb3Rv Y29sIHRoYXQgdXNlcwogICAgICB0aGUgU0FNTCBSQURJVVMgYmluZGluZyB0byBlZmZlY3QgU0FN TC1iYXNlZCBhdXRoZW50aWNhdGlvbiBhbmQKICAgICAgYXV0aG9yaXphdGlvbi4KCiAgIG8gIEEg cHJvZmlsZSBvZiB0aGUgU0FNTCBBc3NlcnRpb24gUXVlcnkgQW5kIFJlcXVlc3QgUHJvdG9jb2wg dGhhdAogICAgICB1c2VzIHRoZSBTQU1MIFJBRElVUyBiaW5kaW5nIHRvIGVmZmVjdCB0aGUgcXVl cnkgYW5kIHJlcXVlc3Qgb2YKICAgICAgU0FNTCBhc3NlcnRpb25zLgoKICAgbyAgVHdvIFNBTUwg U3ViamVjdCBDb25maXJtYXRpb24gTWV0aG9kcyBmb3IgaW5kaWNhdGluZyB0aGF0IGEgdXNlcgog ICAgICBvciBtYWNoaW5lIHByaW5jaXBhbCBpcyB0aGUgc3ViamVjdCBvZiBhbiBhc3NlcnRpb24u CgogICBUaGlzIGRvY3VtZW50IGFzcGlyZXMgdG8gdGhlIGd1aWRlbGluZXMgc3RpcHVsYXRlZCBi eQoKCgpIb3dsZXR0ICYgSGFydG1hbiAgICAgICAgICBFeHBpcmVzIE1heSAxLCAyMDE0ICAgICAg ICAgICAgICAgICAgW1BhZ2UgNF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgU0FN TCBSQURJVVMgICAgICAgICAgICAgICAgICBPY3RvYmVyIDIwMTMKCgogICBbT0FTSVMuc2FtbC1i aW5kaW5ncy0yLjAtb3NdIGFuZCBbT0FTSVMuc2FtbC1wcm9maWxlcy0yLjAtb3NdIGZvcgogICBk ZWZpbmluZyBuZXcgU0FNTCBiaW5kaW5ncyBhbmQgcHJvZmlsZXMgcmVzcGVjdGl2ZWx5LCBhbmQg b3RoZXIKICAgY29udmVudGlvbnMgYXBwbGllZCBmb3JtYWxseSBvciBvdGhlcndpc2Ugd2l0aGlu IFNBTUwuICBJbiBwYXJ0aWN1bGFyCiAgIHdoZXJlIHRoaXMgZG9jdW1lbnQgcHJvdmlkZXMgYSAn UmVxdWlyZWQgSW5mb3JtYXRpb24nIHNlY3Rpb24gZm9yIHRoZQogICBiaW5kaW5nIGFuZCBwcm9m aWxlcyB0aGF0IGVudW1lcmF0ZToKCiAgIG8gIEEgVVJJIHRoYXQgdW5pcXVlbHkgaWRlbnRpZmll cyB0aGUgcHJvdG9jb2wgYmluZGluZyBvciBwcm9maWxlCgogICBvICBQb3N0YWwgb3IgZWxlY3Ry b25pYyBjb250YWN0IGluZm9ybWF0aW9uIGZvciB0aGUgYXV0aG9yCgogICBvICBBIHJlZmVyZW5j ZSB0byBwcmV2aW91c2x5IGRlZmluZWQgYmluZGluZ3Mgb3IgcHJvZmlsZXMgdGhhdCB0aGUKICAg ICAgbmV3IGJpbmRpbmcgdXBkYXRlcyBvciBvYnNvbGV0ZXMKCiAgIG8gIEluIHRoZSBjYXNlIG9m IGEgcHJvZmlsZSwgYW55IFNBTUwgY29uZmlybWF0aW9uIG1ldGhvZCBpZGVudGlmaWVycwogICAg ICBkZWZpbmVkIGFuZC9vciB1dGlsaXplZCBieSB0aGUgcHJvZmlsZQoKMy4gIENvbnZlbnRpb25z CgogICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1VU1QgTk9UIiwgIlJFUVVJUkVEIiwgIlNIQUxM IiwgIlNIQUxMIE5PVCIsCiAgICJTSE9VTEQiLCAiU0hPVUxEIE5PVCIsICJSRUNPTU1FTkRFRCIs ICJNQVkiLCBhbmQgIk9QVElPTkFMIiBpbiB0aGlzCiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRl cnByZXRlZCBhcyBkZXNjcmliZWQgaW4gUkZDIDIxMTkgW1JGQzIxMTldLgoKNC4gIFJBRElVUyBT QU1MIEF0dHJpYnV0ZXMKCiAgIFRoZSBSQURJVVMgU0FNTCBiaW5kaW5nIGRlZmluZWQgYnkgdGhp cyBiaW5kaW5nIFNlY3Rpb24gNSB1c2VzIHR3bwogICBhdHRyaWJ1dGVzIHRvIGNvbnZleSBTQU1M IGFzc2VydGlvbnMgYW5kIHByb3RvY29sIG1lc3NhZ2VzCiAgIFtPQVNJUy5zYW1sLWNvcmUtMi4w LW9zXSByZXNwZWN0aXZlbHkuICBPd2luZyB0byB0aGUgdHlwaWNhbCBzaXplIG9mCiAgIHRoZXNl IHN0cnVjdHVyZXMsIHRoZXNlIGF0dHJpYnV0ZXMgdXNlIHRoZSBMb25nIEV4dGVuZGVkIFR5cGUg Zm9ybWF0CiAgIFtSRkM2OTI5XSB0byBlbmNhcHN1bGF0ZSB0aGVpciBkYXRhLiAgVGhlIHRhYmxl IGJlbG93IGRlZmluZXMgdGhlc2UKICAgYXR0cmlidXRlcy4gIFRoZSBMZW5ndGggb2YgYm90aCBv ZiB0aGVzZSBhdHRyaWJ1dGVzIGlzID49NS4gIFRoZSBNb3JlCiAgIGFuZCBSZXNlcnZlZCBmaWVs ZHMgYXJlIGlnbm9yZWQgaGVyZS4KCiAgICstLS0tLS0tLS0tLS0tLS0tKy0tLS0tLSstLS0tLS0t LS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKwogICB8ICAgICAgTmFtZSAgICAg IHwgVHlwZSB8IEV4dGVuZGVkLVR5cGUgfCAgICAgICAgICAgVmFsdWUgICAgICAgICAgIHwKICAg Ky0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0rCiAgIHwgU0FNTC1Bc3NlcnRpb24gfCAgVEJEIHwgICAgICBUQkQgICAgICB8 ICAgICBPbmUgb3IgbW9yZSBvY3RldHMgICAgfAogICB8ICAgICAgICAgICAgICAgIHwgICAgICB8 ICAgICAgICAgICAgICAgfCBlbmNvZGluZyBhIFNBTUwgYXNzZXJ0aW9uIHwKICAgfCAgU0FNTC1N ZXNzYWdlICB8ICBUQkQgfCAgICAgIFRCRCAgICAgIHwgICAgIE9uZSBvciBtb3JlIG9jdGV0cyAg ICB8CiAgIHwgICAgICAgICAgICAgICAgfCAgICAgIHwgICAgICAgICAgICAgICB8ICBlbmNvZGlu ZyBhIFNBTUwgcHJvdG9jb2wgfAogICB8ICAgICAgICAgICAgICAgIHwgICAgICB8ICAgICAgICAg ICAgICAgfCAgICAgICAgICBtZXNzYWdlICAgICAgICAgIHwKICAgKy0tLS0tLS0tLS0tLS0tLS0r LS0tLS0tKy0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rCgogICAg ICAgICAgICAgICAgVGFibGUgMTogUkFESVVTIFNBTUwgYXR0cmlidXRlIGRlZmluaXRpb25zCgoK CgoKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAgICAgICAgRXhwaXJlcyBNYXkgMSwgMjAxNCAgICAg ICAgICAgICAgICAgIFtQYWdlIDVdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgIFNB TUwgUkFESVVTICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDEzCgoKNS4gIFNBTUwgUkFESVVT IEJpbmRpbmcKCiAgIFRoZSBTQU1MIFJBRElVUyBiaW5kaW5nIGRlZmluZXMgaG93IFJBRElVUyBb UkZDMjg2NV0gY2FuIGJlIHVzZWQgdG8KICAgZW5hYmxlIGEgUkFESVVTIGNsaWVudCBhbmQgc2Vy dmVyIHRvIGV4Y2hhbmdlIFNBTUwgYXNzZXJ0aW9ucyBhbmQKICAgcHJvdG9jb2wgbWVzc2FnZXMu Cgo1LjEuICBSZXF1aXJlZCBJbmZvcm1hdGlvbgoKICAgSWRlbnRpZmljYXRpb246IHVybjppZXRm OnBhcmFtczphYmZhYjpiaW5kaW5nczpyYWRpdXMKCiAgIENvbnRhY3QgaW5mb3JtYXRpb246IGll c2dAaWV0Zi5vcmcKCiAgIFVwZGF0ZXM6IE5vbmUuCgo1LjIuICBPcGVyYXRpb24KCiAgIFJBRElV UyBjYW4gYmUgdXNlZCBvdmVyIG11bHRpcGxlIHVuZGVybHlpbmcgdHJhbnNwb3J0czsgdGhpcyBi aW5kaW5nCiAgIGNhbGxzIG91dCBmb3IgdGhlIHVzZSBvZiBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJp dHkgKFRMUykgRW5jcnlwdGlvbgogICBmb3IgUkFESVVTIFtSRkM2NjE0XSBhcyBSRVFVSVJFRCB0 byBwcm92aWRlIGludGVyb3BlcmFiaWxpdHksCiAgIGNvbmZpZGVudGlhbGl0eSwgaW1wcm92ZSBp bnRlZ3JpdHkgcHJvdGVjdGlvbiBhbmQgc3VwcG9ydCB0aGUgdXNlIG9mCiAgIGxvbmdlciBTQU1M IG1lc3NhZ2VzLgoKICAgSW1wbGVtZW50YXRpb25zIG9mIHRoaXMgcHJvZmlsZSBjYW4gdGFrZSBh ZHZhbnRhZ2Ugb2Ygb3RoZXIKICAgbWVjaGFuaXNtcyBzdWNoIGFzIFJBRElVUyBwYWNrZXQgZnJh Z21lbnRhdGlvbgogICBbSS1ELnBlcmV6LXJhZGV4dC1yYWRpdXMtZnJhZ21lbnRhdGlvbl0gdG8g cGVybWl0IHRyYW5zcG9ydCBvZiBsb25nZXIKICAgU0FNTCBtZXNzYWdlcyBvdmVyIFVEUC1iYXNl ZCBSQURJVVMgdHJhbnNwb3J0cywgc3VjaCBhcyB0aG9zZQogICBkZXNjcmliZWQgaW4gW1JGQzI4 NjVdIGFuZCBbSS1ELmlldGYtcmFkZXh0LWR0bHNdLiAgU3VwcG9ydCBmb3IKICAgZnJhZ21lbnRh dGlvbiBvdmVyIFVEUCBpcyBub3QgbWFuZGF0b3J5LgoKICAgVGhlcmUgYXJlIHR3byBzeXN0ZW0g bW9kZWxzIGZvciB0aGUgdXNlIG9mIFNBTUwgb3ZlciBSQURJVVMuICBUaGUKICAgZmlyc3QgaXMg YSByZXF1ZXN0LXJlc3BvbnNlIG1vZGVsLCB1c2luZyB0aGUgUkFESVVTIFNBTUwtTWVzc2FnZQog ICBhdHRyaWJ1dGUgZGVmaW5lZCBpbiBTZWN0aW9uIDQgdG8gZW5jYXBzdWxhdGUgdGhlIFNBTUwg cHJvdG9jb2wKICAgbWVzc2FnZXMuCgogICAxLiAgVGhlIFJBRElVUyBjbGllbnQsIGFjdGluZyBh cyBhIFNBTUwgcmVxdWVzdGVyLCB0cmFuc21pdHMgYSBTQU1MCiAgICAgICByZXF1ZXN0IGVsZW1l bnQgd2l0aGluIGEgUkFESVVTIEFjY2Vzcy1SZXF1ZXN0IG1lc3NhZ2UuICBUaGlzCiAgICAgICBt ZXNzYWdlIE1VU1QgaW5jbHVkZSBhIHNpbmdsZSBpbnN0YW5jZSBvZiB0aGUgUkFESVVTIFVzZXIt TmFtZQogICAgICAgYXR0cmlidXRlIHdob3NlIHZhbHVlIE1VU1QgY29uZm9ybSB0byB0aGUgTmV0 d29yayBBY2Nlc3MKICAgICAgIElkZW50aWZpZXIgW0ktRC5pZXRmLXJhZGV4dC1uYWldIHNjaGVt ZS4gIFRoZSBTQU1MIHJlcXVlc3RlciBNVVNUCiAgICAgICBOT1QgaW5jbHVkZSBtb3JlIHRoYW4g b25lIFNBTUwgcmVxdWVzdCBlbGVtZW50LgoKICAgMi4gIFRoZSBSQURJVVMgc2VydmVyLCBhY3Rp bmcgYXMgYSBTQU1MIHJlc3BvbmRlciwgcmV0dXJucyBhIFNBTUwKICAgICAgIHByb3RvY29sIG1l c3NhZ2Ugd2l0aGluIGEgUkFESVVTIEFjY2Vzcy1BY2NlcHQgb3IgQWNjZXNzLVJlamVjdAogICAg ICAgbWVzc2FnZS4gIFRoZXNlIG1lc3NhZ2VzIG5lY2Vzc2FyaWx5IGNvbmNsdWRlIGEgUkFESVVT IGV4Y2hhbmdlCiAgICAgICBhbmQgdGhlcmVmb3JlIHRoaXMgaXMgdGhlIG9ubHkgb3Bwb3J0dW5p dHkgZm9yIHRoZSBTQU1MIHJlc3BvbmRlcgogICAgICAgdG8gc2VuZCBhIHJlc3BvbnNlIGluIHRo ZSBjb250ZXh0IG9mIHRoaXMgZXhjaGFuZ2UuICBUaGUgU0FNTAogICAgICAgcmVzcG9uZGVyIE1V U1QgTk9UIGluY2x1ZGUgbW9yZSB0aGFuIG9uZSBTQU1MIHJlc3BvbnNlLiAgQSBTQU1MCiAgICAg ICByZXNwb25kZXIgdGhhdCByZWZ1c2VzIHRvIHBlcmZvcm0gYSBtZXNzYWdlIGV4Y2hhbmdlIHdp dGggdGhlCgoKCkhvd2xldHQgJiBIYXJ0bWFuICAgICAgICAgIEV4cGlyZXMgTWF5IDEsIDIwMTQg ICAgICAgICAgICAgICAgICBbUGFnZSA2XQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICBTQU1MIFJBRElVUyAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxMwoKCiAgICAgICBTQU1M IHJlcXVlc3RlciBNVVNUIHNpbGVudGx5IGRpc2NhcmQgdGhlIFNBTUwgcmVxdWVzdC4KCiAgIFRo ZSBzZWNvbmQgc3lzdGVtIG1vZGVsIHBlcm1pdHMgYSBSQURJVVMgc2VydmVyIGFjdGluZyBhcyBh IFNBTUwKICAgcmVzcG9uZGVyIHRvIHVzZSB0aGUgUkFESVVTIFNBTUwtQXNzZXJ0aW9uIGF0dHJp YnV0ZSBkZWZpbmVkIGluCiAgIFNlY3Rpb24gNCB0byBlbmNhcHN1bGF0ZSBhbiB1bnNvbGljaXRl ZCwgdW5lbmNyeXB0ZWQgU0FNTCBhc3NlcnRpb24uCiAgIFRoaXMgYXR0cmlidXRlIE1BWSBiZSBp bmNsdWRlZCBpbiBhIFJBRElVUyBBY2Nlc3MtQWNjZXB0IG1lc3NhZ2UuCiAgIFdoZW4gaW5jbHVk ZWQsIHRoZSBhdHRyaWJ1dGUgTVVTVCBjb250YWluIGEgc2luZ2xlIFNBTUwgYXNzZXJ0aW9uLgoK ICAgUkFESVVTIHNlcnZlcnMgTVVTVCBOT1QgaW5jbHVkZSBib3RoIHRoZSBTQU1MLU1lc3NhZ2Ug YW5kIHRoZSBTQU1MLQogICBBc3NlcnRpb24gYXR0cmlidXRlIGluIHRoZSBzYW1lIFJBRElVUyBt ZXNzYWdlLiAgSWYgYSBTQU1MIHJlc3BvbmRlcgogICBpcyBwcm9kdWNpbmcgYSByZXNwb25zZSB0 byBhIFNBTUwgcmVxdWVzdCwgdGhlbiB0aGUgZmlyc3Qgc3lzdGVtCiAgIG1vZGVsIGlzIHVzZWQu ICBBIFNBTUwgcmVzcG9uZGVyIE1BWSBpZ25vcmUgYSBTQU1MIHJlcXVlc3QgYW5kIHNlbmQKICAg YW4gdW5zb2xpY2l0ZWQgYXNzZXJ0aW9uIHVzaW5nIHRoZSBzZWNvbmQgc3lzdGVtIG1vZGVsIHVz aW5nIHRoZQogICBSQURJVVMgU0FNTC1Bc3NlcnRpb24gYXR0cmlidXRlLgoKICAgSW4gZWl0aGVy IHN5c3RlbSBtb2RlbCwgU0FNTCByZXNwb25kZXJzIFNIT1VMRCByZXR1cm4gYSBSQURJVVMgc3Rh dGUKICAgYXR0cmlidXRlIGFzIHBhcnQgb2YgdGhlIEFjY2Vzcy1BY2NlcHQgbWVzc2FnZSBzbyB0 aGF0IGZ1dHVyZSBTQU1MCiAgIHF1ZXJpZXMgb3IgcmVxdWVzdHMgY2FuIGJlIHJ1biBhZ2FpbnN0 IHRoZSBzYW1lIGNvbnRleHQgb2YgYW4KICAgYXV0aGVudGljYXRpb24gZXhjaGFuZ2UuCgogICBU aGlzIGJpbmRpbmcgaXMgaW50ZW5kZWQgdG8gYmUgY29tcG9zZWQgd2l0aCBvdGhlciB1c2VzIG9m IFJBRElVUywKICAgc3VjaCBhcyBuZXR3b3JrIGFjY2Vzcy4gIFRoZXJlZm9yZSwgb3RoZXIgYXJi aXRyYXJ5IFJBRElVUyBhdHRyaWJ1dGVzCiAgIE1BWSBiZSB1c2VkIGluIGVpdGhlciB0aGUgcmVx dWVzdCBvciByZXNwb25zZS4KCiAgIEluIHRoZSBjYXNlIG9mIGEgU0FNTCBwcm9jZXNzaW5nIGVy cm9yIGFuZCBzdWNjZXNzZnVsIGF1dGhlbnRpY2F0aW9uLAogICB0aGUgUkFESVVTIHNlcnZlciBT SE9VTEQgaW5jbHVkZSBhIFNBTUwtc3BlY2lmaWVkIDxzYW1scDpTdGF0dXM+CiAgIGVsZW1lbnQg aW4gdGhlIFNBTUwgcmVzcG9uc2UgdGhhdCBpcyB0cmFuc3BvcnRlZCB3aXRoaW4gdGhlIEFjY2Vz cy0KICAgQWNjZXB0IHBhY2tldCBzZW50IGJ5IHRoZSBSQURJVVMgc2VydmVyLgoKICAgSW4gdGhl IGNhc2Ugb2YgYSBTQU1MIHByb2Nlc3NpbmcgZXJyb3IgYW5kIGZhaWxlZCBhdXRoZW50aWNhdGlv biwgdGhlCiAgIFJBRElVUyBzZXJ2ZXIgTUFZIGluY2x1ZGUgYSBTQU1MLXNwZWNpZmllZCA8c2Ft bHA6U3RhdHVzPiBlbGVtZW50IGluCiAgIHRoZSBTQU1MIHJlc3BvbnNlIHRoYXQgaXMgdHJhbnNw b3J0ZWQgd2l0aGluIHRoZSBBY2Nlc3MtUmVqZWN0IHBhY2tldAogICBzZW50IGJ5IHRoZSBSQURJ VVMgc2VydmVyLgoKNS4zLiAgUHJvY2Vzc2luZyBvZiBuYW1lcwoKICAgU0FNTCBlbnRpdGllcyB1 c2luZyBwcm9maWxlcyBvZiB0aGlzIGJpbmRpbmcgd2lsbCB0eXBpY2FsbHkgcG9zc2VzcwogICBi b3RoIHRoZSBTQU1MIGFuZCBBQUEgbmFtZXMgb2YgdGhlaXIgY29ycmVzcG9uZGVudHMuICBGcmVx dWVudGx5CiAgIHRoZXNlIGVudGl0aWVzIHdpbGwgbmVlZCB0byBhcHBseSBwb2xpY3kgdXNpbmcg dGhlc2UgbmFtZXM7IGZvcgogICBleGFtcGxlLCB3aGVuIGRlY2lkaW5nIHRvIHJlbGVhc2UgYXR0 cmlidXRlcy4gIE9mdGVuIHRoZXNlIHBvbGljaWVzCiAgIHdpbGwgYmUgc2VjdXJpdHktc2Vuc2l0 aXZlLCBhbmQgc28gaXQgaXMgaW1wb3J0YW50IHRoYXQgcG9saWN5IGlzCiAgIGFwcGxpZWQgb24g dGhlc2UgbmFtZXMgY29uc2lzdGVudGx5LgoKNS4zLjEuICBBQUEgbmFtZXMKCiAgIFRoZXNlIHJ1 bGVzIHJlbGF0ZSB0byB0aGUgcHJvY2Vzc2luZyBvZiBBQUEgbmFtZXMgYnkgU0FNTCBlbnRpdGll cwogICB1c2luZyBwcm9maWxlcyBvZiB0aGlzIGJpbmRpbmcuCgoKCgpIb3dsZXR0ICYgSGFydG1h biAgICAgICAgICBFeHBpcmVzIE1heSAxLCAyMDE0ICAgICAgICAgICAgICAgICAgW1BhZ2UgN10K DApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgU0FNTCBSQURJVVMgICAgICAgICAgICAg ICAgICBPY3RvYmVyIDIwMTMKCgogICBvICBTQU1MIGlzc3VlcnMgU0hPVUxEIGFwcGx5IHBvbGlj eSBiYXNlZCBvbiB0aGUgTkFTIGlkZW50aXR5CiAgICAgIGFzc29jaWF0ZWQgd2l0aCB0aGUgUkFE SVVTIEFjY2Vzcy1SZXF1ZXN0LgoKICAgbyAgU0FNTCBjb25zdW1lcnMgU0hPVUxEIGFwcGx5IHBv bGljeSBiYXNlZCBvbiB0aGUgTkFJIHJlYWxtCiAgICAgIGFzc29jaWF0ZWQgd2l0aCB0aGUgUkFE SVVTIEFjY2Vzcy1BY2NlcHQuCgo1LjMuMi4gIFNBTUwgbmFtZXMKCiAgIFRoZXNlIHJ1bGVzIHJl bGF0ZSB0byB0aGUgcHJvY2Vzc2luZyBvZiBTQU1MIG5hbWVzIGJ5IFNBTUwgZW50aXRpZXMKICAg dXNpbmcgcHJvZmlsZXMgb2YgdGhpcyBiaW5kaW5nLgoKICAgU0FNTCBpc3N1ZXJzIE1BWSBhcHBs eSBwb2xpY3kgYmFzZWQgb24gdGhlIHJlcXVlc3RlcidzIDxlbnRpdHlJZD4KICAgYWZ0ZXIgdmFs aWRhdGluZyB0aGF0IHRoZSByZXF1ZXN0IGNvbWVzIGZyb20gdGhlIE5BUy4gIFRoZSBmb2xsb3dp bmcKICAgbWV0aG9kcyBhcmUgc3VmZmljaWVudDoKCiAgIG8gIE5BUyBpZGVudGl0eSBpbiB0cnVz dGVkIGRpZ2l0YWxseSBzaWduZWQgcmVxdWVzdC4KCiAgIG8gIE5BUyBpZGVudGl0eSBpbiB0cnVz dGVkIFNBTUwgZmVkZXJhdGlvbiBtZXRhZGF0YS4KCiAgIEEgZGlnaXRhbGx5IHNpZ25lZCByZXF1 ZXN0IGFsb25lIGlzIG5vdCBzdWZmaWNpZW50LgoKICAgU0FNTCBjb25zdW1lcnMgTUFZIGFwcGx5 IHBvbGljeSBiYXNlZCBvbiB0aGUgU0FNTCBpc3N1ZXIncyA8ZW50aXR5SWQ+CiAgIGFmdGVyIHZh bGlkYXRpbmcgdGhhdCB0aGUgcmVzcG9uc2UgY29tZXMgZnJvbSB0aGUgUkFESVVTIHNlcnZlci4g IFRoZQogICBmb2xsb3dpbmcgbWV0aG9kcyBhcmUgc3VmZmljaWVudDoKCiAgIG8gIFJBRElVUyBy ZWFsbSBpbiB0cnVzdGVkIGRpZ2l0YWxseSBzaWduZWQgcmVxdWVzdC4KCiAgIG8gIFJBRElVUyBy ZWFsbSBpbiB0cnVzdGVkIFNBTUwgZmVkZXJhdGlvbiBtZXRhZGF0YS4KCiAgIEEgZGlnaXRhbGx5 IHNpZ25lZCByZXF1ZXN0IGFsb25lIGlzIG5vdCBzdWZmaWNpZW50LgoKNS4zLjMuICBVc2Ugb2Yg WE1MIFNpZ25hdHVyZXMKCiAgIFRoaXMgYmluZGluZ3MgY2FsbHMgZm9yIHRoZSB1c2Ugb2YgU0FN TCBlbGVtZW50cyB0aGF0IHN1cHBvcnQgWE1MCiAgIHNpZ25hdHVyZXMuICBUbyBwcm9tb3RlIGlu dGVyb3BlcmFiaWxpdHkgaW1wbGVtZW50YXRpb25zIG9mIHRoaXMKICAgYmluZGluZyBNVVNUIHN1 cHBvcnQgYSBkZWZhdWx0IGNvbmZpZ3VyYXRpb24gdGhhdCBkb2VzIG5vdCByZXF1aXJlCiAgIHRo ZSB1c2Ugb2YgWE1MIHNpZ25hdHVyZXMuICBJbXBsZW1lbnRhdGlvbnMgTUFZIGNob29zZSB0byB1 c2UgWE1MCiAgIHNpZ25hdHVyZXMsIGJ1dCB0aGlzIHVzYWdlIGlzIG91dHNpZGUgb2YgdGhlIHNj b3BlIG9mIHRoaXMgYmluZGluZy4KCjUuMy40LiAgTWV0YWRhdGEgQ29uc2lkZXJhdGlvbnMKCiAg IFRoZXJlIGFyZSBubyBtZXRhZGF0YSBjb25zaWRlcmF0aW9ucyBwYXJ0aWN1bGFyIHRvIHRoaXMg YmluZGluZywKICAgYmVjYXVzZSB0aGlzIGJpbmRpbmcgYW5kIHByb2ZpbGVzIG9mIHRoaXMgYmlu ZGluZyBhcmUgaW50ZW5kZWQgdG8gYmUKICAgdXNlZCB3aXRob3V0IG1ldGFkYXRhLiAgSW4gdGhp cyB1c2FnZSwgUkFESVVTIGluZnJhc3RydWN0dXJlIGlzIHVzZWQKICAgdG8gcHJvdmlkZSBpbnRl Z3JpdHkgYW5kIG5hbWluZy4gIFJBRElVUyBjb25maWd1cmF0aW9uIGlzIHVzZWQgdG8KICAgcHJv dmlkZSBwb2xpY3kgaW5jbHVkaW5nIHdoaWNoIGF0dHJpYnV0ZXMgYXJlIGFjY2VwdGVkIGZyb20g YSBTQU1MCiAgIHJlc3BvbmRlciBhbmQgd2hpY2ggYXR0cmlidXRlcyBhcmUgc2VudCBieSBhIFNB TUwgcmVzcG9uZGVyLgoKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAgICAgICAgRXhwaXJlcyBNYXkg MSwgMjAxNCAgICAgICAgICAgICAgICAgIFtQYWdlIDhdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAg ICAgICAgICAgIFNBTUwgUkFESVVTICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDEzCgoKICAg SW1wbGVtZW50YXRpb25zIE1BWSBzdXBwb3J0IG90aGVyIGNvbmZpZ3VyYXRpb25zIGluY2x1ZGlu ZyB0aGUgdXNlIG9mCiAgIG1ldGFkYXRhLgoKNi4gIE5ldHdvcmsgQWNjZXNzIElkZW50aWZpZXIg TmFtZSBJZGVudGlmaWVyIEZvcm1hdAoKICAgVVJJOiB1cm46aWV0ZjpwYXJhbXM6YWJmYWI6bmFt ZWlkLWZvcm1hdDpuYWkKCiAgIEluZGljYXRlcyB0aGF0IHRoZSBjb250ZW50IG9mIHRoZSBlbGVt ZW50IGlzIGluIHRoZSBmb3JtIG9mIGEgTmV0d29yawogICBBY2Nlc3MgSWRlbnRpZmllciAoTkFJ KSB1c2luZyB0aGUgc3ludGF4IGRlc2NyaWJlZCBieQogICBbSS1ELmlldGYtcmFkZXh0LW5haV0u Cgo3LiAgQUJGQUIgQXV0aGVudGljYXRpb24gUHJvZmlsZQoKICAgSW4gdGhlIHNjZW5hcmlvIHN1 cHBvcnRlZCBieSB0aGUgQUJGQUIgQXV0aGVudGljYXRpb24gUHJvZmlsZSwgYQogICBQcmluY2lw YWwgY29udHJvbGxpbmcgYSBVc2VyIEFnZW50IHJlcXVlc3RzIGFjY2VzcyB0byBhIFJlbHlpbmcK ICAgUGFydHkuICBUaGUgVXNlciBBZ2VudCBhbmQgUmVseWluZyBQYXJ0eSB1c2VzIFJBRElVUyB0 byBhdXRoZW50aWNhdGUKICAgdGhlIFByaW5jaXBhbC4gIFRoZSBSZWx5aW5nIFBhcnR5LCBhY3Rp bmcgYXMgYSBOQVMsIGF0dGVtcHRzIHRvCiAgIHZhbGlkYXRlIHRoZSBQcmluY2lwYWwncyBjcmVk ZW50aWFscyBhZ2FpbnN0IGEgUkFESVVTIHNlcnZlciBhY3RpbmcKICAgdGhlIFByaW5jaXBhbCdz IElkZW50aXR5IFByb3ZpZGVyLiAgSWYgdGhlIElkZW50aXR5IFByb3ZpZGVyCiAgIHN1Y2Nlc3Nm dWxseSBhdXRoZW50aWNhdGVzIHRoZSBQcmluY2lwYWwsIGl0IHByb2R1Y2VzIGFuCiAgIGF1dGhl bnRpY2F0aW9uIGFzc2VydGlvbiB3aGljaCBpcyBjb25zdW1lZCBieSB0aGUgUmVseWluZyBQYXJ0 eS4KICAgRHVyaW5nIHRoaXMgcHJvY2VzcywgYSBuYW1lIGlkZW50aWZpZXIgbWlnaHQgYWxzbyBi ZSBlc3RhYmxpc2hlZAogICBiZXR3ZWVuIHRoZSBSZWx5aW5nIFBhcnR5IGFuZCB0aGUgSWRlbnRp dHkgUHJvdmlkZXIuCgo3LjEuICBSZXF1aXJlZCBJbmZvcm1hdGlvbgoKICAgSWRlbnRpZmljYXRp b246IHVybjppZXRmOnBhcmFtczphYmZhYjpwcm9maWxlczphdXRoZW50aWNhdGlvbgoKICAgQ29u dGFjdCBpbmZvcm1hdGlvbjogaWVzZ0BpZXRmLm9yZwoKICAgU0FNTCBDb25maXJtYXRpb24gTWV0 aG9kIElkZW50aWZpZXJzOiBUaGUgU0FNTCBWMi4wICJzZW5kZXIgdm91Y2hlcyIKICAgY29uZmly bWF0aW9uIG1ldGhvZCBpZGVudGlmaWVyLAogICB1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6 Y206c2VuZGVyLXZvdWNoZXMsIGlzIHVzZWQgYnkgdGhpcwogICBwcm9maWxlLgoKICAgVXBkYXRl czogTm9uZS4KCjcuMi4gIFByb2ZpbGUgT3ZlcnZpZXcKCiAgIFRvIGltcGxlbWVudCB0aGlzIHNj ZW5hcmlvIGEgcHJvZmlsZSBvZiB0aGUgU0FNTCBBdXRoZW50aWNhdGlvbgogICBSZXF1ZXN0IHBy b3RvY29sIGlzIHVzZWQgaW4gY29uanVjdGlvbiB3aXRoIHRoZSBTQU1MIFJBRElVUyBiaW5kaW5n CiAgIGRlZmluZWQgaW4gU2VjdGlvbiA1LgoKICAgVGhpcyBwcm9maWxlIGlzIGJhc2VkIG9uIHRo ZSBTQU1MIFYyLjAgV2ViIEJyb3dzZXIgU2luZ2xlIFNpZ24tT24KICAgUHJvZmlsZSBbT0FTSVMu c2FtbC1wcm9maWxlcy0yLjAtb3NdLiAgVGhlcmUgYXJlIHNvbWUgaW1wb3J0YW50CiAgIGRpZmZl cmVuY2VzLCBzcGVjaWZpY2FsbHk6CgoKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAgICAgICAgRXhw aXJlcyBNYXkgMSwgMjAxNCAgICAgICAgICAgICAgICAgIFtQYWdlIDldCgwKSW50ZXJuZXQtRHJh ZnQgICAgICAgICAgICAgICAgIFNBTUwgUkFESVVTICAgICAgICAgICAgICAgICAgT2N0b2JlciAy MDEzCgoKICAgQXV0aGVudGljYXRpb246ICBUaGlzIHByb2ZpbGUgZG9lcyBub3QgcmVxdWlyZSB0 aGUgdXNlIG9mIGFueQogICAgICBwYXJ0aWN1bGFyIGF1dGhlbnRpY2F0aW9uIG1ldGhvZC4gIFRo ZSBBQkZBQiBhcmNoaXRlY3R1cmUgZG9lcwogICAgICByZXF1aXJlIHRoZSB1c2Ugb2YgRUFQIFtS RkMzNTc5XSwgYnV0IHRoaXMgc3BlY2lmaWNhdGlvbiBtYXkgYmUKICAgICAgdXNlZCBpbiBvdGhl ciBub24tQUJGQUIgc2NlbmFyaW9zLgoKICAgQmluZGluZ3M6ICBUaGlzIHByb2ZpbGUgZG9lcyBu b3QgcmVxdWlyZSB0aGUgdXNlIG9mIEhUVFAtYmFzZWQKICAgICAgYmluZGluZ3MuICBJbnN0ZWFk IGFsbCBTQU1MIHByb3RvY29sIG1lc3NhZ2VzIGFyZSB0cmFuc3BvcnRlZAogICAgICB1c2luZyB0 aGUgU0FNTCBSQURJVVMgYmluZGluZyBkZWZpbmVkIGluIFNlY3Rpb24gNS4gIFRoaXMgaXMKICAg ICAgaW50ZW5kZWQgdG8gcmVkdWNlIHRoZSBudW1iZXIgb2YgYmluZGluZ3MgdGhhdCBpbXBsZW1l bnRhdGlvbnMKICAgICAgbXVzdCBzdXBwb3J0IHRvIGJlIGludGVyb3BlcmFibGUuCgogICBSZXF1 ZXN0czogIFRoZSBwcm9maWxlIGRvZXMgbm90IHBlcm1pdCB0aGUgUmVseWluZyBQYXJ0eSB0byBu YW1lIHRoZQogICAgICA8c2FtbDpTdWJqZWN0PiBvZiB0aGUgPHNhbWxwOkF1dGhuUmVxdWVzdD4u ICBUaGlzIGlzIGludGVuZGVkIHRvCiAgICAgIHNpbXBsaWZ5IGltcGxlbWVudGF0aW9uIGFuZCBp bnRlcm9wZXJhYmlsaXR5LgoKICAgUmVzcG9uc2VzOiAgVGhlIHByb2ZpbGUgb25seSBwZXJtaXRz IHRoZSBJZGVudGl0eSBQcm92aWRlciB0byByZXR1cm4KICAgICAgYSBzaW5nbGUgYXNzZXJ0aW9u IHRoYXQgbXVzdCBjb250YWluIGV4YWN0bHkgb25lIGF1dGhlbnRpY2F0aW9uCiAgICAgIHN0YXRl bWVudC4gIE90aGVyIHN0YXRlbWVudHMgbWF5IGJlIGluY2x1ZGVkIHdpdGhpbiB0aGlzIGFzc2Vy dGlvbgogICAgICBhdCB0aGUgZGlzY3JldGlvbiBvZiB0aGUgSWRlbnRpdHkgUHJvdmlkZXIuICBU aGlzIGlzIGludGVuZGVkIHRvCiAgICAgIHNpbXBsaWZ5IGltcGxlbWVudGF0aW9uIGFuZCBpbnRl cm9wZXJhYmlsaXR5LgoKICAgRmlndXJlIDEgYmVsb3cgaWxsdXN0cmF0ZXMgdGhlIGZsb3cgb2Yg bWVzc2FnZXMgd2l0aGluIHRoaXMgcHJvZmlsZS4KCiAgICAgVXNlciBBZ2VudCAgICAgICAgICBS ZWx5aW5nIFBhcnR5ICAgICAgICAgICAgIElkZW50aXR5IFByb3ZpZGVyCiAgICAgICAgIHwgICAg ICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAgICB8 ICAgICAgICAgKDEpICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAg ICAgfCAtIC0gLSAtIC0gLSAtIC0gLSA+IHwgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAg ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAg fAogICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICgyKSAgICAgICAg ICAgIHwKICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgIHwgLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gPiB8CiAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAg ICAgICAgICAgICAgfAogICAgICAgICB8ICAgICAgICAgICAgICAoMykgICAgfCAgICAgICAgICAg ICAgICAgICAgICAgICAgIHwKICAgICAgICAgfCA8IC0gLSAtIC0gLSAtIC0gLSAtIHwtIC0gLSAt IC0gLSAtIC0gLSAtIC0gLSAtPiB8CiAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICB8ICAg ICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAg fCAgICAgICAgICAgICg0KSAgICAgICAgICAgIHwKICAgICAgICAgfCAgICAgICAgICAgICAgICAg ICAgIHwgPCAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSB8CiAgICAgICAgIHwgICAgICAgICAgICAg ICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAgICB8ICAgICAgICAg KDUpICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgfCA8IC0g LSAtIC0gLSAtIC0gLSAtIHwgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgIHwg ICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAg ICBWICAgICAgICAgICAgICAgICAgICAgViAgICAgICAgICAgICAgICAgICAgICAgICAgIFYKCiAg IFRoZSBmb2xsb3dpbmcgc3RlcHMgYXJlIGRlc2NyaWJlZCBieSB0aGUgcHJvZmlsZS4gIFdpdGhp biBhbgogICBpbmRpdmlkdWFsIHN0ZXAsIHRoZXJlIG1heSBiZSBvbmUgb3IgbW9yZSBhY3R1YWwg bWVzc2FnZSBleGNoYW5nZXMuCgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBGaWd1 cmUgMQoKCgoKCkhvd2xldHQgJiBIYXJ0bWFuICAgICAgICAgIEV4cGlyZXMgTWF5IDEsIDIwMTQg ICAgICAgICAgICAgICAgIFtQYWdlIDEwXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICBTQU1MIFJBRElVUyAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxMwoKCiAgIDEuICBVc2Vy IEFnZW50IFJlcXVlc3QgdG8gUmVseWluZyBQYXJ0eSAoU2VjdGlvbiA3LjMuMSk6IEluIHN0ZXAg MSwKICAgICAgIHRoZSBQcmluY2lwYWwsIHZpYSBhIFVzZXIgQWdlbnQsIG1ha2VzIGEgcmVxdWVz dCBmb3IgYSBzZWN1cmVkCiAgICAgICByZXNvdXJjZSBhdCB0aGUgUmVseWluZyBQYXJ0eS4gIFRo ZSBSZWx5aW5nIFBhcnR5IGRldGVybWluZXMgdGhhdAogICAgICAgbm8gc2VjdXJpdHkgY29udGV4 dCBmb3IgdGhlIFVzZXIgQWdlbnQgZXhpc3RzIGFuZCBpbml0aWF0ZXMKICAgICAgIGF1dGhlbnRp Y2F0aW9uIG9mIHRoZSBQcmluY2lwYWwuCgogICAyLiAgUmVseWluZyBQYXJ0eSBJc3N1ZXMgPHNh bWxwOkF1dGhuUmVxdWVzdD4gdG8gSWRlbnRpdHkgUHJvdmlkZXIKICAgICAgIChTZWN0aW9uIDcu My4yKS4gIEluIHN0ZXAgMiwgdGhlIFJlbHlpbmcgUGFydHkgbWF5IG9wdGlvbmFsbHkKICAgICAg IGlzc3VlIGEgPHNhbWxwOkF1dGhuUmVxdWVzdD4gbWVzc2FnZSB0byBiZSBkZWxpdmVyZWQgdG8g dGhlCiAgICAgICBJZGVudGl0eSBQcm92aWRlciB1c2luZyB0aGUgU0FNTCBSQURJVVMgYmluZGlu Zy4KCiAgIDMuICBJZGVudGl0eSBQcm92aWRlciBJZGVudGlmaWVzIFByaW5jaXBhbCAoU2VjdGlv biA3LjMuMykuICBJbiBzdGVwCiAgICAgICAzLCB0aGUgUHJpbmNpcGFsIGlzIGF1dGhlbnRpY2F0 ZWQgYW5kIGlkZW50aWZpZWQgYnkgdGhlIElkZW50aXR5CiAgICAgICBQcm92aWRlciwgd2hpbGUg aG9ub3JpbmcgYW55IHJlcXVpcmVtZW50cyBpbXBvc2VkIGJ5IHRoZSBSZWx5aW5nCiAgICAgICBQ YXJ0eSBpbiB0aGUgPHNhbWxwOkF1dGhuUmVxdWVzdD4gbWVzc2FnZSBpZiBwcm92aWRlZC4KCiAg IDQuICBJZGVudGl0eSBQcm92aWRlciBJc3N1ZXMgPHNhbWxwOlJlc3BvbnNlPiB0byBSZWx5aW5n IFBhcnR5CiAgICAgICAoU2VjdGlvbiA3LjMuNCkuICBJbiBzdGVwIDQsIHRoZSBJZGVudGl0eSBQ cm92aWRlciBpc3N1ZXMgYQogICAgICAgPHNhbWxwOlJlc3BvbnNlPiBtZXNzYWdlIHRvIHRoZSBS ZWx5aW5nIFBhcnR5IHVzaW5nIHRoZSBTQU1MCiAgICAgICBSQURJVVMgYmluZGluZy4gIFRoZSBy ZXNwb25zZSBlaXRoZXIgaW5kaWNhdGVzIGFuIGVycm9yIG9yCiAgICAgICBpbmNsdWRlcyBhbiBh dXRoZW50aWNhdGlvbiBzdGF0ZW1lbnQgaW4gZXhhY3RseSBvbmUgYXNzZXJ0aW9uLgoKICAgNS4g IFJlbHlpbmcgUGFydHkgR3JhbnRzIG9yIERlbmllcyBBY2Nlc3MgdG8gUHJpbmNpcGFsCiAgICAg ICAoU2VjdGlvbiA3LjMuNSkuICBJbiBzdGVwIDUsIGhhdmluZyByZWNlaXZlZCB0aGUgcmVzcG9u c2UgZnJvbQogICAgICAgdGhlIElkZW50aXR5IFByb3ZpZGVyLCB0aGUgUmVseWluZyBQYXJ0eSBj YW4gcmVzcG9uZCB0byB0aGUKICAgICAgIFByaW5jaXBhbCdzIFVzZXIgQWdlbnQgd2l0aCBpdHMg b3duIGVycm9yLCBvciBjYW4gZXN0YWJsaXNoIGl0cwogICAgICAgb3duIHNlY3VyaXR5IGNvbnRl eHQgZm9yIHRoZSBQcmluY2lwYWwgYW5kIHJldHVybiB0aGUgcmVxdWVzdGVkCiAgICAgICByZXNv dXJjZS4KCjcuMy4gIFByb2ZpbGUgRGVzY3JpcHRpb24KCiAgIFRoZSBBQkZBQiBBdXRoZW50aWNh dGlvbiBQcm9maWxlIGlzIGEgcHJvZmlsZSBvZiB0aGUgU0FNTCBWMi4wCiAgIEF1dGhlbnRpY2F0 aW9uIFJlcXVlc3QgUHJvdG9jb2wgW09BU0lTLnNhbWwtY29yZS0yLjAtb3NdLiAgV2hlcmUgdGhp cwogICBzcGVjaWZpY2F0aW9uIGNvbmZsaWN0cyB3aXRoIENvcmUsIHRoZSBmb3JtZXIgdGFrZXMg cHJlY2VkZW5jZS4KCjcuMy4xLiAgVXNlciBBZ2VudCBSZXF1ZXN0IHRvIFJlbHlpbmcgUGFydHkK CiAgIFRoZSBwcm9maWxlIGlzIGluaXRpYXRlZCBieSBhbiBhcmJpdHJhcnkgVXNlciBBZ2VudCBy ZXF1ZXN0IHRvIHRoZQogICBSZWx5aW5nIFBhcnR5LiAgVGhlcmUgYXJlIG5vIHJlc3RyaWN0aW9u cyBvbiB0aGUgZm9ybSBvZiB0aGUgcmVxdWVzdC4KICAgVGhlIFJlbHlpbmcgUGFydHkgaXMgZnJl ZSB0byB1c2UgYW55IG1lYW5zIGl0IHdpc2hlcyB0byBhc3NvY2lhdGUgdGhlCiAgIHN1YnNlcXVl bnQgaW50ZXJhY3Rpb25zIHdpdGggdGhlIG9yaWdpbmFsIHJlcXVlc3QuICBUaGUgUmVseWluZwog ICBQYXJ0eSwgYWN0aW5nIGFzIGEgTkFTLCBhdHRlbXB0cyB0byBhdXRoZW50aWNhdGUgdGhlIFVz ZXIgQWdlbnQuCgo3LjMuMi4gIFJlbHlpbmcgUGFydHkgSXNzdWVzIDxzYW1scDpBdXRoblJlcXVl c3Q+IHRvIElkZW50aXR5IFByb3ZpZGVyCgogICBUaGUgUmVseWluZyBQYXJ0eSB1c2VzIFJBRElV UyB0byBjb21tdW5pY2F0ZSB3aXRoIHRoZSBQcmluY2lwYWwncwogICBJZGVudGl0eSBQcm92aWRl ci4gIFRoZSBSZWx5aW5nIFBhcnR5IE1BWSBpbmNsdWRlIGEgPHNhbWxwOgogICBBdXRoblJlcXVl c3Q+IHdpdGhpbiB0aGlzIFJBRElVUyBBY2Nlc3MtUmVxdWVzdCBtZXNzYWdlIHVzaW5nIHRoZQoK CgpIb3dsZXR0ICYgSGFydG1hbiAgICAgICAgICBFeHBpcmVzIE1heSAxLCAyMDE0ICAgICAgICAg ICAgICAgICBbUGFnZSAxMV0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgU0FNTCBS QURJVVMgICAgICAgICAgICAgICAgICBPY3RvYmVyIDIwMTMKCgogICBTQU1MIFJBRElVUyBiaW5k aW5nLiAgVGhlIG5leHQgaG9wIGRlc3RpbmF0aW9uIE1BWSBiZSB0aGUgSWRlbnRpdHkKICAgUHJv dmlkZXIgb3IgYWx0ZXJuYXRpdmVseSBhbiBpbnRlcm1lZGlhdGUgUkFESVVTIHByb3h5LgoKICAg UHJvZmlsZS1zcGVjaWZpYyBydWxlcyBmb3IgdGhlIGNvbnRlbnRzIG9mIHRoZSA8c2FtbHA6QXV0 aG5SZXF1ZXN0PgogICBlbGVtZW50IGFyZSBnaXZlbiBpbiBTZWN0aW9uIDcuNC4xLgoKNy4zLjMu ICBJZGVudGl0eSBQcm92aWRlciBJZGVudGlmaWVzIFByaW5jaXBhbAoKICAgVGhlIElkZW50aXR5 IFByb3ZpZGVyIE1VU1QgZXN0YWJsaXNoIHRoZSBpZGVudGl0eSBvZiB0aGUgUHJpbmNpcGFsCiAg IHVzaW5nIFJBRElVUyBhdXRoZW50aWNhdGlvbiwgb3IgZWxzZSBpdCB3aWxsIHJldHVybiBhbiBl cnJvci4gIElmIHRoZQogICBGb3JjZUF1dGhuIGF0dHJpYnV0ZSBvbiB0aGUgPHNhbWxwOkF1dGhu UmVxdWVzdD4gZWxlbWVudCAoaWYgc2VudCBieQogICB0aGUgcmVxdWVzdGVyKSBpcyBwcmVzZW50 IGFuZCB0cnVlLCB0aGUgSWRlbnRpdHkgUHJvdmlkZXIgTVVTVAogICBmcmVzaGx5IGVzdGFibGlz aCB0aGlzIGlkZW50aXR5IHJhdGhlciB0aGFuIHJlbHlpbmcgb24gYW55IGV4aXN0aW5nCiAgIHNl c3Npb24gc3RhdGUgaXQgbWF5IGhhdmUgd2l0aCB0aGUgUHJpbmNpcGFsIChmb3IgZXhhbXBsZSwg VExTIHN0YXRlCiAgIHRoYXQgbWF5IGJlIHVzZWQgZm9yIHNlc3Npb24gcmVzdW1wdGlvbikuICBP dGhlcndpc2UsIGFuZCBpbiBhbGwKICAgb3RoZXIgcmVzcGVjdHMsIHRoZSBJZGVudGl0eSBQcm92 aWRlciBtYXkgdXNlIGFueSBtZXRob2QgdG8KICAgYXV0aGVudGljYXRlIHRoZSBQcmluY2lwYWws IHN1YmplY3QgdG8gdGhlIGNvbnN0cmFpbnRzIGNhbGxlZCBvdXQgaW4KICAgdGhlIDxzYW1scDpB dXRoblJlcXVlc3Q+IG1lc3NhZ2UuCgo3LjMuNC4gIElkZW50aXR5IFByb3ZpZGVyIElzc3VlcyA8 c2FtbHA6UmVzcG9uc2U+IHRvIFJlbHlpbmcgUGFydHkKCiAgIFRoZSBJZGVudGl0eSBQcm92aWRl ciBNVVNUIGNvbmNsdWRlIHRoZSBhdXRoZW50aWNhdGlvbiBpbiBhIG1hbm5lcgogICBjb25zaXN0 ZW50IHdpdGggdGhlIFJBRElVUyBhdXRoZW50aWNhdGlvbiByZXN1bHQsIGFuZCBNQVkgaXNzdWUg YQogICA8c2FtbHA6UmVzcG9uc2U+IG1lc3NhZ2UgdG8gdGhlIFJlbHlpbmcgUGFydHkgY29uc2lz ZW50IHdpdGggdGhlCiAgIGF1dGhlbnRpY2F0aW9uIHJlc3VsdCBhbmQgYXMgZGVzY3JpYmVkIGlu IFtPQVNJUy5zYW1sLWNvcmUtMi4wLW9zXQogICBhbmQgZGVsaXZlcmVkIHRvIHRoZSBSZWx5aW5n IFBhcnR5IHVzaW5nIHRoZSBTQU1MIFJBRElVUyBiaW5kaW5nLgoKICAgUHJvZmlsZS1zcGVjaWZp YyBydWxlcyByZWdhcmRpbmcgdGhlIGNvbnRlbnRzIG9mIHRoZSA8c2FtbHA6UmVzcG9uc2U+CiAg IGVsZW1lbnQgYXJlIGdpdmVuIGluIFNlY3Rpb24gNy40LjIuCgo3LjMuNS4gIFJlbHlpbmcgUGFy dHkgR3JhbnRzIG9yIERlbmllcyBBY2Nlc3MgdG8gUHJpbmNpcGFsCgogICBJZiBpc3N1ZWQgYnkg dGhlIElkZW50aXR5IFByb3ZpZGVyLCB0aGUgUmVseWluZyBQYXJ0eSBNVVNUIHByb2Nlc3MKICAg dGhlIDxzYW1scDpSZXNwb25zZT4gbWVzc2FnZSBhbmQgYW55IGVuY2xvc2VkIDxzYW1sOkFzc2Vy dGlvbj4KICAgZWxlbWVudHMgYXMgZGVzY3JpYmVkIGluIFtPQVNJUy5zYW1sLWNvcmUtMi4wLW9z XS4gIEFueSBzdWJzZXF1ZW50CiAgIHVzZSBvZiB0aGUgPHNhbWw6QXNzZXJ0aW9uPiBlbGVtZW50 cyBpcyBhdCB0aGUgZGlzY3JldGlvbiBvZiB0aGUKICAgUmVseWluZyBQYXJ0eSwgc3ViamVjdCB0 byBhbnkgcmVzdHJpY3Rpb25zIG9uIHVzZSBjb250YWluZWQgd2l0aGluCiAgIHRoZSBhc3NlcnRp b25zIHRoZW1zZWx2ZXMgb3IgcHJldmlvdXNseSBlc3RhYmxpc2hlZCBvdXQtb2YtYmFuZAogICBw b2xpY3kgZ292ZXJuaW5nIGludGVyYWN0aW9ucyBiZXR3ZWVuIHRoZSBJZGVudGl0eSBQcm92aWRl ciBhbmQgdGhlCiAgIFJlbHlpbmcgUGFydHkuCgo3LjQuICBVc2Ugb2YgQXV0aGVudGljYXRpb24g UmVxdWVzdCBQcm90b2NvbAoKICAgVGhpcyBwcm9maWxlIGlzIGJhc2VkIG9uIHRoZSBBdXRoZW50 aWNhdGlvbiBSZXF1ZXN0IFByb3RvY29sIGRlZmluZWQKICAgaW4gW09BU0lTLnNhbWwtY29yZS0y LjAtb3NdLiAgSW4gdGhlIG5vbWVuY2xhdHVyZSBvZiBhY3RvcnMKICAgZW51bWVyYXRlZCBpbiBz ZWN0aW9uIDMuNCwgdGhlIFJlbHlpbmcgUGFydHkgaXMgdGhlIHJlcXVlc3RlciwgdGhlCiAgIFVz ZXIgQWdlbnQgaXMgdGhlIGF0dGVzdGluZyBlbnRpdHkgYW5kIHRoZSBQcmluY2lwYWwgaXMgdGhl IFJlcXVlc3RlZAogICBTdWJqZWN0LgoKCgpIb3dsZXR0ICYgSGFydG1hbiAgICAgICAgICBFeHBp cmVzIE1heSAxLCAyMDE0ICAgICAgICAgICAgICAgICBbUGFnZSAxMl0KDApJbnRlcm5ldC1EcmFm dCAgICAgICAgICAgICAgICAgU0FNTCBSQURJVVMgICAgICAgICAgICAgICAgICBPY3RvYmVyIDIw MTMKCgo3LjQuMS4gIDxzYW1scDpBdXRoblJlcXVlc3Q+IFVzYWdlCgogICBUaGUgUmVseWluZyBQ YXJ0eSBNVVNUIE5PVCBpbmNsdWRlIGEgPHNhbWw6U3ViamVjdD4gZWxlbWVudCBpbiB0aGUKICAg cmVxdWVzdC4gIFRoZSBhdXRoZW50aWNhdGVkIFJBRElVUyB1c2VyIGlkZW50aWZpZXMgdGhlIHBy aW5jaXBhbCB0bwogICB0aGUgSWRlbnRpdHkgUHJvdmlkZXIuCgogICBBIFJlbHlpbmcgUGFydHkg TUFZIGluY2x1ZGUgYW55IG1lc3NhZ2UgY29udGVudCBkZXNjcmliZWQgaW4KICAgW09BU0lTLnNh bWwtY29yZS0yLjAtb3NdLCBzZWN0aW9uIDMuNC4xLiAgQWxsIHByb2Nlc3NpbmcgcnVsZXMgYXJl IGFzCiAgIGRlZmluZWQgaW4gW09BU0lTLnNhbWwtY29yZS0yLjAtb3NdLgoKICAgSWYgdGhlIFJl bHlpbmcgUGFydHkgd2lzaGVzIHRvIHBlcm1pdCB0aGUgSWRlbnRpdHkgUHJvdmlkZXIgdG8KICAg ZXN0YWJsaXNoIGEgbmV3IGlkZW50aWZpZXIgZm9yIHRoZSBwcmluY2lwYWwgaWYgbm9uZSBleGlz dHMsIGl0IE1VU1QKICAgaW5jbHVkZSBhIDxzYW1sOk5hbWVJRFBvbGljeT4gZWxlbWVudCB3aXRo IHRoZSBBbGxvd0NyZWF0ZSBhdHRyaWJ1dGUKICAgc2V0IHRvICJ0cnVlIi4gIE90aGVyd2lzZSwg b25seSBhIHByaW5jaXBhbCBmb3Igd2hvbSB0aGUgSWRlbnRpdHkKICAgUHJvdmlkZXIgaGFzIHBy ZXZpb3VzbHkgZXN0YWJsaXNoZWQgYW4gaWRlbnRpZmllciB1c2FibGUgYnkgdGhlCiAgIFJlbHlp bmcgUGFydHkgY2FuIGJlIGF1dGhlbnRpY2F0ZWQgc3VjY2Vzc2Z1bGx5LgoKICAgVGhlIDxzYW1s cDpBdXRoblJlcXVlc3Q+IG1lc3NhZ2UgTUFZIGJlIHNpZ25lZC4gIEF1dGhlbnRpY2F0aW9uIGFu ZAogICBpbnRlZ3JpdHkgYXJlIGFsc28gcHJvdmlkZWQgYnkgdGhlIFJBRElVUyBTQU1MIGJpbmRp bmcuCgo3LjQuMi4gIDxzYW1scDpSZXNwb25zZSBtZXNzYWdlPiBVc2FnZQoKICAgSWYgdGhlIElk ZW50aXR5IFByb3ZpZGVyIGNhbm5vdCBvciB3aWxsIG5vdCBzYXRpc2Z5IHRoZSByZXF1ZXN0LCBp dAogICBNQVkgcmVzcG9uZCB3aXRoIGEgPHNhbWxwOlJlc3BvbnNlPiBtZXNzYWdlIGNvbnRhaW5p bmcgYW4gYXBwcm9wcmlhdGUKICAgZXJyb3Igc3RhdHVzIGNvZGUgb3IgY29kZXMuCgogICBJZiB0 aGUgSWRlbnRpdHkgUHJvdmlkZXIgd2lzaGVzIHRvIHJldHVybiBhbiBlcnJvciwgaXQgTVVTVCBO T1QKICAgaW5jbHVkZSBhbnkgYXNzZXJ0aW9ucyBpbiB0aGUgPHNhbWxwOlJlc3BvbnNlIG1lc3Nh Z2U+LiAgT3RoZXJ3aXNlLAogICBpZiB0aGUgcmVxdWVzdCBpcyBzdWNjZXNzZnVsIChvciBpZiB0 aGUgcmVzcG9uc2UgaXMgbm90IGFzc29jaWF0ZWQKICAgd2l0aCBhIHJlcXVlc3QpLCB0aGUgPHNh bWxwOlJlc3BvbnNlPiBlbGVtZW50IE1VU1QgY29uZm9ybSB0byB0aGUKICAgZm9sbG93aW5nOgoK ICAgbyAgSXQgTUFZIGJlIHNpZ25lZC4KCiAgIG8gIEl0IE1VU1QgY29udGFpbiBleGFjdGx5IG9u ZSA8c2FtbDpBc3NlcnRpb24+LiAgVGhlIDxzYW1sOlN1YmplY3Q+CiAgICAgIGVsZW1lbnQgb2Yg dGhpcyBhc3NlcnRpb24gTVVTVCByZWZlciB0byB0aGUgYXV0aGVudGljYXRlZCBSQURJVVMKICAg ICAgdXNlci4KCiAgIG8gIFRoZSBhc3NlcnRpb24gTVVTVCBjb250YWluIGEgPHNhbWw6QXV0aG5T dGF0ZW1lbnQ+LiAgVGhpcyBNVVNUCiAgICAgIGNvbnRhaW4gYSA8c2FtbDpTdWJqZWN0PiBlbGVt ZW50IHdpdGggYXQgbGVhc3Qgb25lIDxzYW1sOgogICAgICBTdWJqZWN0Q29uZmlybWF0aW9uPiBl bGVtZW50IGNvbnRhaW5pbmcgYSBNZXRob2Qgb2YKICAgICAgdXJuOm9hc2lzOm5hbWVzOnRjOlNB TUw6Mi4wOmNtOnNlbmRlci12b3VjaGVzIHRoYXQgcmVmbGVjdHMgdGhlCiAgICAgIGF1dGhlbnRp Y2F0aW9uIG9mIHRoZSBQcmluY2lwYWwgdG8gdGhlIElkZW50aXR5IFByb3ZpZGVyLiAgSWYgdGhl CiAgICAgIGNvbnRhaW5pbmcgbWVzc2FnZSBpcyBpbiByZXNwb25zZSB0byBhbiA8c2FtbHA6QXV0 aG5SZXF1ZXN0PiwgdGhlbgogICAgICB0aGUgSW5SZXNwb25zZVRvIGF0dHJpYnV0ZSBNVVNUIG1h dGNoIHRoZSByZXF1ZXN0J3MgSUQuCgogICBvICBPdGhlciBjb25kaXRpb25zIE1BWSBiZSBpbmNs dWRlZCBhcyByZXF1ZXN0ZWQgYnkgdGhlIFJlbHlpbmcgUGFydHkKICAgICAgb3IgYXQgdGhlIGRp c2NyZXRpb24gb2YgdGhlIElkZW50aXR5IFByb3ZpZGVyLiAgVGhlIElkZW50aXR5CgoKCkhvd2xl dHQgJiBIYXJ0bWFuICAgICAgICAgIEV4cGlyZXMgTWF5IDEsIDIwMTQgICAgICAgICAgICAgICAg IFtQYWdlIDEzXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICBTQU1MIFJBRElVUyAg ICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxMwoKCiAgICAgIFByb3ZpZGVyIGlzIE5PVCBvYmxp Z2F0ZWQgdG8gaG9ub3IgdGhlIHJlcXVlc3RlZCBzZXQgb2YgY29uZGl0aW9ucwogICAgICBpbiB0 aGUgPHNhbWxwOkF1dGhuUmVxdWVzdD4sIGlmIGFueS4KCjcuNC4zLiAgPHNhbWxwOlJlc3BvbnNl IE1lc3NhZ2U+IFByb2Nlc3NpbmcgUnVsZXMKCiAgIFRoZSBSZWx5aW5nIFBhcnR5IE1VU1QgZG8g dGhlIGZvbGxvd2luZzoKCiAgIG8gIEFzc3VtZSB0aGF0IHRoZSBwcmluY2lwYWwgaW1wbGllZCBi eSBhIFNBTUwgPFN1YmplY3Q+IGVsZW1lbnQsIGlmCiAgICAgIHByZXNlbnQsIHRha2VzIHByZWNl ZGVuY2Ugb3ZlciBhIHByaW5jaXBhbCBpbXBsaWVkIGJ5IHRoZSBSQURJVVMKICAgICAgVXNlci1O YW1lIGF0dHJpYnV0ZS4KCiAgIG8gIFZlcmlmeSB0aGF0IHRoZSBJblJlc3BvbnNlVG8gYXR0cmli dXRlIGluIHRoZSBzZW5kZXItdm91Y2hlcwogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9u RGF0YT4gZXF1YWxzIHRoZSBJRCBvZiBpdHMgb3JpZ2luYWwKICAgICAgPHNhbWxwOkF1dGhuUmVx dWVzdD4gbWVzc2FnZSwgdW5sZXNzIHRoZSByZXNwb25zZSBpcyB1bnNvbGljaXRlZCwKICAgICAg aW4gd2hpY2ggY2FzZSB0aGUgYXR0cmlidXRlIE1VU1QgTk9UIGJlIHByZXNlbnQuCgogICBvICBJ ZiBhIDxzYW1sOkF1dGhuU3RhdGVtZW50PiB1c2VkIHRvIGVzdGFibGlzaCBhIHNlY3VyaXR5IGNv bnRleHQKICAgICAgZm9yIHRoZSBQcmluY2lwYWwgY29udGFpbnMgYSBTZXNzaW9uTm90T25PckFm dGVyIGF0dHJpYnV0ZSwgdGhlCiAgICAgIHNlY3VyaXR5IGNvbnRleHQgU0hPVUxEIGJlIGRpc2Nh cmRlZCBvbmNlIHRoaXMgdGltZSBpcyByZWFjaGVkLAogICAgICB1bmxlc3MgdGhlIHNlcnZpY2Ug cHJvdmlkZXIgcmVlc3RhYmxpc2hlcyB0aGUgUHJpbmNpcGFsJ3MgaWRlbnRpdHkKICAgICAgYnkg cmVwZWF0aW5nIHRoZSB1c2Ugb2YgdGhpcyBwcm9maWxlLgoKICAgbyAgVmVyaWZ5IHRoYXQgYW55 IGFzc2VydGlvbnMgcmVsaWVkIHVwb24gYXJlIHZhbGlkIGFjY29yZGluZyB0bwogICAgICBwcm9j ZXNzaW5nIHJ1bGVzIGluIFtPQVNJUy5zYW1sLWNvcmUtMi4wLW9zXS4KCiAgIG8gIEFueSBhc3Nl cnRpb24gd2hpY2ggaXMgbm90IHZhbGlkLCBvciB3aG9zZSBzdWJqZWN0IGNvbmZpcm1hdGlvbgog ICAgICByZXF1aXJlbWVudHMgY2Fubm90IGJlIG1ldCBNVVNUIGJlIGRpc2NhcmRlZCBhbmQgTVVT VCBOT1QgYmUgdXNlZAogICAgICB0byBlc3RhYmxpc2ggYSBzZWN1cml0eSBjb250ZXh0IGZvciB0 aGUgUHJpbmNpcGFsLgoKNy40LjQuICBVbnNvbGljaXRlZCBSZXNwb25zZXMKCiAgIEFuIElkZW50 aXR5IFByb3ZpZGVyIE1BWSBpbml0aWF0ZSB0aGlzIHByb2ZpbGUgYnkgZGVsaXZlcmluZyBhbgog ICB1bnNvbGljaXRlZCA8c2FtbDpBc3NlcnRpb24+IHRvIGEgUmVseWluZyBQYXJ0eS4gIFRoaXMg TVVTVCBOT1QKICAgY29udGFpbiBhbnkgc2VuZGVyLXZvdWNoZXMgPHNhbWw6U3ViamVjdENvbmZp cm1hdGlvbkRhdGE+IGVsZW1lbnRzCiAgIGNvbnRhaW5pbmcgYW4gSW5SZXNwb25zZVRvIGF0dHJp YnV0ZS4KCjcuNC41LiAgVXNlIG9mIHRoZSBTQU1MIFJBRElVUyBCaW5kaW5nCgogICBJdCBpcyBS RUNPTU1FTkRFRCB0aGF0IHRoZSBSQURJVVMgZXhjaGFuZ2UgaXMgcHJvdGVjdGVkIHVzaW5nIFRM UwogICBlbmNyeXB0aW9uIGZvciBSQURJVVMgW1JGQzY2MTRdIHRvIHByb3ZpZGUgY29uZmlkZW50 aWFsaXR5IGFuZAogICBpbXByb3ZlIGludGVncml0eSBwcm90ZWN0aW9uLgoKNy40LjYuICBVc2Ug b2YgWE1MIFNpZ25hdHVyZXMKCiAgIFRoaXMgcHJvZmlsZSBjYWxscyBmb3IgdGhlIHVzZSBvZiBT QU1MIGVsZW1lbnRzIHRoYXQgc3VwcG9ydCBYTUwKICAgc2lnbmF0dXJlcy4gIFRvIHByb21vdGUg aW50ZXJvcGVyYWJpbGl0eSBpbXBsZW1lbnRhdGlvbnMgb2YgdGhpcwogICBwcm9maWxlIE1VU1Qg Tk9UIHJlcXVpcmUgdGhlIHVzZSBvZiBYTUwgc2lnbmF0dXJlcy4gIEltcGxlbWVudGF0aW9ucwog ICBNQVkgY2hvb3NlIHRvIHVzZSBYTUwgc2lnbmF0dXJlcywgYnV0IHRoaXMgdXNhZ2UgaXMgb3V0 c2lkZSBvZiB0aGUKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAgICAgICAgRXhwaXJlcyBNYXkgMSwg MjAxNCAgICAgICAgICAgICAgICAgW1BhZ2UgMTRdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICAg ICAgICAgIFNBTUwgUkFESVVTICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDEzCgoKICAgc2Nv cGUgb2YgdGhpcyBwcm9maWxlLgoKNy40LjcuICBNZXRhZGF0YSBDb25zaWRlcmF0aW9ucwoKICAg VGhlcmUgYXJlIG5vIG1ldGFkYXRhIGNvbnNpZGVyYXRpb25zIHBhcnRpY3VsYXIgdG8gdGhpcyBi aW5kaW5nLgoKOC4gIEFCRkFCIEFzc2VydGlvbiBRdWVyeS9SZXF1ZXN0IFByb2ZpbGUKCiAgIFRo aXMgcHJvZmlsZSBidWlsZHMgb24gdGhlIFNBTUwgVjIuMCBBc3NlcnRpb24gUXVlcnkvUmVxdWVz dCBQcm9maWxlCiAgIGRlZmluZWQgYnkgW09BU0lTLnNhbWwtcHJvZmlsZXMtMi4wLW9zXS4gIFRo YXQgcHJvZmlsZSBkZXNjcmliZXMgdGhlCiAgIHVzZSBvZiB0aGUgQXNzZXJ0aW9uIFF1ZXJ5IGFu ZCBSZXF1ZXN0IFByb3RvY29sIGRlZmluZWQgYnkgc2VjdGlvbgogICAzLjMgb2YgW09BU0lTLnNh bWwtY29yZS0yLjAtb3NdIHdpdGggc3luY2hyb25vdXMgYmluZGluZ3MsIHN1Y2ggYXMKICAgdGhl IFNPQVAgYmluZGluZyBkZWZpbmVkIGluIFtPQVNJUy5zYW1sLWJpbmRpbmdzLTIuMC1vc10gb3Ig dGhlIFNBTUwKICAgUkFESVVTIGJpbmRpbmcgZGVmaW5lZCBlbHNld2hlcmUgaW4gdGhpcyBkb2N1 bWVudC4KCiAgIFdoaWxlIHRoZSBTQU1MIFYyLjAgQXNzZXJ0aW9uIFF1ZXJ5L1JlcXVlc3QgUHJv ZmlsZSBpcyBpbmRlcGVuZGVudCBvZgogICB0aGUgdW5kZXJseWluZyBiaW5kaW5nLCBpdCBpcyBu b25ldGhlbGVzcyB1c2VmdWwgdG8gZGVzY3JpYmUgdGhlIHVzZQogICBvZiB0aGlzIHByb2ZpbGUg d2l0aCB0aGUgU0FNTCBSQURJVVMgYmluZGluZyBpbiB0aGUgaW50ZXJlc3RzIG9mCiAgIHByb21v dGluZyBpbnRlcm9wZXJhYmxlIGltcGxlbWVudGF0aW9ucywgcGFydGljdWxhcmx5IGFzIHRoZSBT QU1MCiAgIFYyLjAgQXNzZXJ0aW9uIFF1ZXJ5L1JlcXVlc3QgUHJvZmlsZSBpcyBtb3N0IGZyZXF1 ZW50bHkgZGlzY3Vzc2VkIGFuZAogICBpbXBsZW1lbnRlZCBpbiB0aGUgY29udGV4dCBvZiB0aGUg U09BUCBiaW5kaW5nLgoKOC4xLiAgUmVxdWlyZWQgSW5mb3JtYXRpb24KCiAgIElkZW50aWZpY2F0 aW9uOiB1cm46aWV0ZjpwYXJhbXM6YWJmYWI6cHJvZmlsZXM6cXVlcnkKCiAgIENvbnRhY3QgaW5m b3JtYXRpb246IGllc2dAaWV0Zi5vcmcKCiAgIERlc2NyaXB0aW9uOiBHaXZlbiBiZWxvdy4KCiAg IFVwZGF0ZXM6IE5vbmUuCgo4LjIuICBQcm9maWxlIE92ZXJ2aWV3CgogICBBcyB3aXRoIHRoZSBT QU1MIFYyLjAgQXNzZXJ0aW9uIFF1ZXJ5L1JlcXVlc3QgUHJvZmlsZSBkZWZpbmVkIGJ5CiAgIFtP QVNJUy5zYW1sLXByb2ZpbGVzLTIuMC1vc10gdGhlIG1lc3NhZ2UgZXhjaGFuZ2UgYW5kIGJhc2lj CiAgIHByb2Nlc3NpbmcgcnVsZXMgdGhhdCBnb3Zlcm4gdGhpcyBwcm9maWxlIGFyZSBsYXJnZWx5 IGRlZmluZWQgYnkKICAgU2VjdGlvbiAzLjMgb2YgW09BU0lTLnNhbWwtY29yZS0yLjAtb3NdIHRo YXQgZGVmaW5lcyB0aGUgbWVzc2FnZXMgdG8KICAgYmUgZXhjaGFuZ2VkLCBpbiBjb21iaW5hdGlv biB3aXRoIHRoZSBiaW5kaW5nIHVzZWQgdG8gZXhjaGFuZ2UgdGhlCiAgIG1lc3NhZ2VzLiAgVGhl IFNBTUwgUkFESVVTIGJpbmRpbmcgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQgZGVmaW5lcwog ICB0aGUgYmluZGluZyBvZiB0aGUgbWVzc2FnZSBleGNoYW5nZSB0byBSQURJVVMuICBVbmxlc3Mg c3BlY2lmaWNhbGx5CiAgIG5vdGVkIGhlcmUsIGFsbCByZXF1aXJlbWVudHMgZGVmaW5lZCBpbiB0 aG9zZSBzcGVjaWZpY2F0aW9ucyBhcHBseS4KCgoKCgoKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAg ICAgICAgRXhwaXJlcyBNYXkgMSwgMjAxNCAgICAgICAgICAgICAgICAgW1BhZ2UgMTVdCgwKSW50 ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgIFNBTUwgUkFESVVTICAgICAgICAgICAgICAgICAg T2N0b2JlciAyMDEzCgoKICAgRmlndXJlIDIgYmVsb3cgaWxsdXN0cmF0ZXMgdGhlIGJhc2ljIHRl bXBsYXRlIGZvciB0aGUgcXVlcnkvcmVxdWVzdAogICBwcm9maWxlLgoKICAgICBTQU1MIFJlcXVl c3RlciAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTQU1MIEF1dGhvcml0eQogICAg ICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwK ICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgKDEpICAgICAgICAgICAgICAgICAgICAg ICB8CiAgICAgICAgIHwgLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0g LSAtID4gfAogICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIHwKICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgKDIpICAgICAgICAg ICAgICAgICAgICAgICB8CiAgICAgICAgIHwgPCAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0g LSAtIC0gLSAtIC0gLSAtIC0gfAogICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgIFYgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVgoKICAgVGhlIGZvbGxvd2luZyBzdGVwcyBh cmUgZGVzY3JpYmVkIGJ5IHRoZSBwcm9maWxlLgoKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgRmlndXJlIDIKCiAgIDEuICBRdWVyeS9SZXF1ZXN0IGlzc3VlZCBieSBTQU1MIFJlcXVl c3RlcjogSW4gc3RlcCAxLCBhIFNBTUwKICAgICAgIHJlcXVlc3RlciBpbml0aWF0ZXMgdGhlIHBy b2ZpbGUgYnkgc2VuZGluZyBhbgogICAgICAgPEFzc2VydGlvbklEUmVxdWVzdD4sIDxTdWJqZWN0 UXVlcnk+LCA8QXV0aG5RdWVyeT4sCiAgICAgICA8QXR0cmlidXRlUXVlcnk+LCBvciA8QXV0aHpE ZWNpc2lvblF1ZXJ5PiBtZXNzYWdlIHRvIGEgU0FNTAogICAgICAgYXV0aG9yaXR5LgoKICAgMi4g IDxSZXNwb25zZT4gaXNzdWVkIGJ5IFNBTUwgQXV0aG9yaXR5OiBJbiBzdGVwIDIsIHRoZSByZXNw b25kaW5nCiAgICAgICBTQU1MIGF1dGhvcml0eSAoYWZ0ZXIgcHJvY2Vzc2luZyB0aGUgcXVlcnkg b3IgcmVxdWVzdCkgaXNzdWVzIGEKICAgICAgIDxSZXNwb25zZT4gbWVzc2FnZSB0byB0aGUgU0FN TCByZXF1ZXN0ZXIuCgo4LjMuICBQcm9maWxlIERlc2NyaXB0aW9uCgo4LjMuMS4gIERpZmZlcmVu Y2VzIGZyb20gdGhlIFNBTUwgVjIuMCBBc3NlcnRpb24gUXVlcnkvUmVxdWVzdCBQcm9maWxlCgog ICBUaGlzIHByb2ZpbGUgaXMgaWRlbnRpY2FsIHRvIHRoZSBTQU1MIFYyLjAgQXNzZXJ0aW9uIFF1 ZXJ5L1JlcXVlc3QKICAgUHJvZmlsZSwgd2l0aCB0aGUgZm9sbG93aW5nIGV4Y2VwdGlvbnM6Cgog ICBvICBXaGVuIHByb2Nlc3NpbmcgdGhlIFNBTUwgcmVxdWVzdCwgdGhlIFNBTUwgcmVzcG9uZGVy IE1VU1QgZ2l2ZQogICAgICBwcmVjZWRlbmNlIHRvIHRoZSBwcmluY2lwYWwgaW1wbGllZCBieSBS QURJVVMgU3RhdGUgYXR0cmlidXRlLCBpZgogICAgICBwcmVzZW50LCBvdmVyIHRoZSBwcmluY2lw YWwgaW1wbGllZCBieSB0aGUgU0FNTCByZXF1ZXN0J3MKICAgICAgPFN1YmplY3Q+LCBpZiBhbnku CgogICBvICBJbiByZXNwZWN0IHRvIHNlY3Rpb24gNi4zLjEgYW5kIDYuNSwgdGhpcyBwcm9maWxl IGRvZXMgbm90CiAgICAgIGNvbnNpZGVyIHRoZSB1c2Ugb2YgbWV0YWRhdGEgKGFzIGluIFtPQVNJ Uy5zYW1sLW1ldGFkYXRhLTIuMC1vc10pOwogICAgICBzZWUgU2VjdGlvbiA4LjMuNC4KCiAgIG8g IEluIHJlc3BlY3QgdG8gc2VjdGlvbnMgNi4zLjIsIDYuNC4xIGFuZCA2LjQuMiwgdGhpcyBwcm9m aWxlCiAgICAgIGFkZGl0aW9uYWxseSBzdGlwdWxhdGVzIHRoYXQgaW1wbGVtZW50YXRpb25zIG9m IHRoaXMgcHJvZmlsZSBNVVNUCiAgICAgIE5PVCByZXF1aXJlIHRoZSB1c2Ugb2YgWE1MIHNpZ25h dHVyZXM7IHNlZSBTZWN0aW9uIDguMy4zLgoKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAgICAgICAg RXhwaXJlcyBNYXkgMSwgMjAxNCAgICAgICAgICAgICAgICAgW1BhZ2UgMTZdCgwKSW50ZXJuZXQt RHJhZnQgICAgICAgICAgICAgICAgIFNBTUwgUkFESVVTICAgICAgICAgICAgICAgICAgT2N0b2Jl ciAyMDEzCgoKOC4zLjIuICBVc2Ugb2YgdGhlIFNBTUwgUkFESVVTIEJpbmRpbmcKCiAgIFRoZSBS QURJVVMgQWNjZXNzLVJlcXVlc3Qgc2VudCBieSB0aGUgU0FNTCByZXF1ZXN0ZXI6CgogICBvICBN VVNUIHVzZSBhIFJBRElVUyBVc2VyLU5hbWUgYXR0cmlidXRlIHdob3NlIHZhbHVlIGlzICJAUkVB TE0iLAogICAgICB3aGVyZSBSRUFMTSBpcyB0aGUgZGVzdGluYXRpb24gTkFJIHJlYWxtLgoKICAg byAgTVVTVCBpbmNsdWRlIGFuIGluc3RhbmNlIG9mIHRoZSBSQURJVVMgU2VydmljZS1UeXBlIGF0 dHJpYnV0ZSwKICAgICAgaGF2aW5nIGEgdmFsdWUgb2YgQXV0aG9yaXplLU9ubHkuCgogICBvICBT SE9VTEQgaW5jbHVkZSB0aGUgUkFESVVTIFN0YXRlIGF0dHJpYnV0ZSwgd2hlcmUgdGhpcyBRdWVy eS8KICAgICAgUmVxdWVzdCBwZXJ0YWlucyB0byBwcmV2aW91c2x5IGF1dGhlbnRpY2F0ZWQgcHJp bmNpcGFsLgoKICAgV2hlbiBwcm9jZXNzaW5nIHRoZSBTQU1MIHJlcXVlc3QsIHRoZSBTQU1MIHJl c3BvbmRlciBNVVNUIGdpdmUKICAgcHJlY2VkZW5jZSB0byB0aGUgcHJpbmNpcGFsIGltcGxpZWQg YnkgUkFESVVTIFN0YXRlIGF0dHJpYnV0ZSBvdmVyCiAgIHRoZSBwcmluY2lwYWwgaW1wbGllZCBi eSB0aGUgU0FNTCByZXF1ZXN0J3MgPFN1YmplY3Q+LCBpZiBhbnkuCgogICBJdCBpcyBSRUNPTU1F TkRFRCB0aGF0IHRoZSBSQURJVVMgZXhjaGFuZ2UgaXMgcHJvdGVjdGVkIHVzaW5nIFRMUwogICBl bmNyeXB0aW9uIGZvciBSQURJVVMgW1JGQzY2MTRdIHRvIHByb3ZpZGUgY29uZmlkZW50aWFsaXR5 IGFuZAogICBpbXByb3ZlIGludGVncml0eSBwcm90ZWN0aW9uLgoKOC4zLjMuICBVc2Ugb2YgWE1M IFNpZ25hdHVyZXMKCiAgIFRoaXMgcHJvZmlsZSBjYWxscyBmb3IgdGhlIHVzZSBvZiBTQU1MIGVs ZW1lbnRzIHRoYXQgc3VwcG9ydCBYTUwKICAgc2lnbmF0dXJlcy4gIFRvIHByb21vdGUgaW50ZXJv cGVyYWJpbGl0eSBpbXBsZW1lbnRhdGlvbnMgb2YgdGhpcwogICBwcm9maWxlIE1VU1QgTk9UIHJl cXVpcmUgdGhlIHVzZSBvZiBYTUwgc2lnbmF0dXJlcy4gIEltcGxlbWVudGF0aW9ucwogICBNQVkg Y2hvb3NlIHRvIHVzZSBYTUwgc2lnbmF0dXJlcywgYnV0IHRoaXMgdXNhZ2UgaXMgb3V0c2lkZSBv ZiB0aGUKICAgc2NvcGUgb2YgdGhpcyBwcm9maWxlLgoKOC4zLjQuICBNZXRhZGF0YSBDb25zaWRl cmF0aW9ucwoKICAgVGhlcmUgYXJlIG5vIG1ldGFkYXRhIGNvbnNpZGVyYXRpb25zIHBhcnRpY3Vs YXIgdG8gdGhpcyBiaW5kaW5nLgoKOS4gIFJBRElVUyBTdGF0ZSBDb25maXJtYXRpb24gTWV0aG9k cwoKICAgVVJJOiB1cm46aWV0ZjpwYXJhbXM6YWJmYWI6Y206dXNlcgoKICAgVVJJOiB1cm46aWV0 ZjpwYXJhbXM6YWJmYWI6Y206bWFjaGluZQoKICAgVGhlIFJBRElVUyBTdGF0ZSBDb25maXJtYXRp b24gTWV0aG9kcyBpbmRpY2F0ZSB0aGF0IHRoZSBTdWJqZWN0IGlzCiAgIHRoZSBzeXN0ZW0gZW50 aXR5IChlaXRoZXIgdGhlIHVzZXIgb3IgbWFjaGluZSkgYXV0aGVudGljYXRlZCBieSBhCiAgIHBy ZXZpb3VzbHkgdHJhbnNtaXR0ZWQgUkFESVVTIEFjY2Vzcy1BY2NlcHQgbWVzc2FnZSwgYXMgaWRl bnRpZmllZCBieQogICB0aGUgdmFsdWUgb2YgdGhhdCBSQURJVVMgbWVzc2FnZSdzIFN0YXRlIGF0 dHJpYnV0ZSwgaW4gdGhlIHNlbnNlIG9mCiAgIFtJLUQuaWV0Zi1lbXUtZWFwLXR1bm5lbC1tZXRo b2RdLgoKCgoKCgoKSG93bGV0dCAmIEhhcnRtYW4gICAgICAgICAgRXhwaXJlcyBNYXkgMSwgMjAx NCAgICAgICAgICAgICAgICAgW1BhZ2UgMTddCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAg ICAgIFNBTUwgUkFESVVTICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDEzCgoKMTAuICBQcml2 YWN5IGNvbnNpZGVyYXRpb25zCgogICBUT0RPCgoxMS4gIEFja25vd2xlZGdlbWVudHMKCiAgIFRP RE86IE5lZWQgdG8gYWNrbm93bGVkZ2UgT0FTSVMgU1NUQywgVW9NdXJjaWEsIFNjb3R0LCBKaW0s IGFuZAogICBTdGV2ZW4uCgoxMi4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zCgogICBUT0RPOiBF bGFib3JhdGUgb24gdGhlIGZvbGxvd2luZwoKICAgVGhlIFJBRElVUyBzZXJ2ZXIgdm91Y2hlcyBm b3IgaXRzIFNBTUwgbWVzc2FnZXMuCgogICBTQU1MIGVudGl0aWVzJyBsZXZlbCBvZiB0cnVzdCBp biB0aGUgU0FNTCBtZXNzYWdlcyB0aGF0IHRoZXkgcmVjaWV2ZQogICBmcm9tIG90aGVyIGVudGl0 aWVzIHNob3VsZCBiZSBjb25zaXN0ZW50IHdpdGggdGhlIHRydXN0IGl0IGhvbGRzIGluCiAgIHRo ZSBSQURJVVMgaW5mcmFzdHJ1Y3R1cmUuCgoxMy4gIElBTkEgQ29uc2lkZXJhdGlvbnMKCjEzLjEu ICBSQURJVVMgQXR0cmlidXRlcwoKICAgQXNzaWdubWVudHMgb2YgYWRkaXRpb25hbCBlbnVtZXJh dGVkIHZhbHVlcyBmb3IgdGhlIFJBRElVUyBhdHRyaWJ1dGUKICAgZGVmaW5lZCBpbiB0aGlzIGRv Y3VtZW50IGFyZSB0byBiZSBwcm9jZXNzZWQgYXMgZGVzY3JpYmVkIGluCiAgIFtSRkM2OTI5XSwg c3ViamVjdCB0byB0aGUgYWRkaXRpb25hbCByZXF1aXJlbWVudHMgb2YgYSBwdWJsaXNoZWQKICAg c3BlY2lmaWNhdGlvbi4KCjEzLjIuICBBQkZBQiBQYXJhbWV0ZXJzCgogICBBIG5ldyB0b3AtbGV2 ZWwgcmVnaXN0cnkgaXMgY3JlYXRlZCB0aXRsZWQgIkFCRkFCIFBhcmFtZXRlcnMiLgoKICAgSW4g dGhpcyB0b3AtbGV2ZWwgcmVnaXN0cnksIGEgc3ViLXJlZ2lzdHJ5IHRpdGxlZCAiQUJGQUIgVVJO CiAgIFBhcmFtZXRlcnMiIGlzIGNyZWF0ZWQuICBSZWdpc3RyYXRpb24gaW4gdGhpcyByZWdpc3Ry eSBpcyBieSB0aGUgSUVURgogICByZXZpZXcgb3IgZXhwZXJ0IHJldmlldyBwcm9jZWR1cmVzIFtS RkM1MjI2XS4KCiAgIFRoaXMgcGFyYWdyYXBoIGdpdmVzIGd1aWRhbmNlIHRvIGRlc2lnbmF0ZWQg ZXhwZXJ0cy4gIFJlZ2lzdHJhdGlvbnMKICAgaW4gdGhpcyByZWdpc3RyeSBhcmUgZ2VuZXJhbGx5 IG9ubHkgZXhwZWN0ZWQgYXMgcGFydCBvZiBwcm90b2NvbHMKICAgcHVibGlzaGVkIGFzIFJGQ3Mg b24gdGhlIElFVEYgc3RyZWFtOyBvdGhlciBVUklzIGFyZSBleHBlY3RlZCB0byBiZQogICBiZXR0 ZXIgY2hvaWNlcyBmb3Igbm9uLUlFVEYgd29yay4gIEV4cGVydCByZXZpZXcgaXMgcGVybWl0dGVk IG1haW5seQogICB0byBwZXJtaXQgZWFybHkgcmVnaXN0cmF0aW9uIHJlbGF0ZWQgdG8gc3BlY2lm aWNhdGlvbnMgdW5kZXIKICAgZGV2ZWxvcG1lbnQgd2hlbiB0aGUgY29tbXVuaXR5IGJlbGlldmVz IHRoZXkgaGF2ZSByZWFjaCBzdWZmaWNpZW50CiAgIG1hdHVyaXR5LiAgVGhlIGV4cGVydCBTSE9V TEQgZXZhbHVhdGUgdGhlIG1hdHVyaXR5IGFuZCBzdGFiaWxpdHkgb2YKICAgc3VjaCBhbiBJRVRG LXN0cmVhbSBzcGVjaWZpY2F0aW9uLiAgRXhwZXJ0cyBTSE9VTEQgcmV2aWV3IGFueXRoaW5nCiAg IG5vdCBmcm9tIHRoZSBJRVRGIHN0cmVhbSBmb3IgY29uc2lzdGVuY3kgYW5kIGNvbnNlbnN1cyB3 aXRoIGN1cnJlbnQKICAgcHJhY3RpY2UuICBUb2RheSBzdWNoIHJlcXVlc3RzIHdvdWxkIG5vdCB0 eXBpY2FsbHkgYmUgYXBwcm92ZWQuCgogICBJZiB0aGUgInBhcmFtbmFtZSIgcGFyYW1ldGVyIGlz IHJlZ2lzdGVyZWQgaW4gdGhpcyByZWdpc3RyeSB0aGVuIGl0cwoKCgpIb3dsZXR0ICYgSGFydG1h biAgICAgICAgICBFeHBpcmVzIE1heSAxLCAyMDE0ICAgICAgICAgICAgICAgICBbUGFnZSAxOF0K DApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgU0FNTCBSQURJVVMgICAgICAgICAgICAg ICAgICBPY3RvYmVyIDIwMTMKCgogICBVUk4gd2lsbCBiZSAidXJuOmlldGY6cGFyYW1zOmFiZmFi OnBhcmFtbmFtZSIuICBUaGUgaW5pdGlhbAogICByZWdpc3RyYXRpb25zIGFyZSBhcyBmb2xsb3dz OgoKICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0t LS0rCiAgICAgICAgICAgICAgICAgIHwgUGFyYW1ldGVyICAgICAgICAgICAgICAgfCBSZWZlcmVu Y2UgfAogICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0t LS0tLSsKICAgICAgICAgICAgICAgICAgfCBiaW5kaW5nczpyYWRpdXMgICAgICAgICB8IFNlY3Rp b24gNSB8CiAgICAgICAgICAgICAgICAgIHwgbmFtZWlkLWZvcm1hdDpuYWkgICAgICAgfCBTZWN0 aW9uIDYgfAogICAgICAgICAgICAgICAgICB8IHByb2ZpbGVzOmF1dGhlbnRpY2F0aW9uIHwgU2Vj dGlvbiA3IHwKICAgICAgICAgICAgICAgICAgfCBwcm9maWxlczpxdWVyeSAgICAgICAgICB8IFNl Y3Rpb24gOCB8CiAgICAgICAgICAgICAgICAgIHwgY206dXNlciAgICAgICAgICAgICAgICAgfCBT ZWN0aW9uIDkgfAogICAgICAgICAgICAgICAgICB8IGNtOm1hY2hpbmUgICAgICAgICAgICAgIHwg U2VjdGlvbiA5IHwKICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0r LS0tLS0tLS0tLS0rCgogICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFCRkFCIFBhcmFtZXRl cnMKCjEzLjMuICBSZWdpc3RyYXRpb24gb2YgdGhlIEFCRkFCIFVSTiBOYW1lc3BhY2UKCiAgIElB TkEgaXMgcmVxdWVzdGVkIHRvIHJlZ2lzdGVyIHRoZSAiYWJmYWIiIFVSTiBzdWItbmFtZXNwYWNl IGluIHRoZQogICBJRVRGIFVSTiBzdWItbmFtZXNwYWNlIGZvciBwcm90b2NvbCBwYXJhbWV0ZXJz IGRlZmluZWQgaW4gW1JGQzM1NTNdLgoKICAgUmVnaXN0cnkgTmFtZTogYWJmYWIKCiAgIFNwZWNp ZmljYXRpb246IGRyYWZ0LWlldGYtYWJmYWItYWFhLXNhbWwKCiAgIFJlcG9zaXRvcnk6IEFCRkFC IFVSTiBQYXJhbWV0ZXJzIChTZWN0aW9uIFNlY3Rpb24gMTMuMikKCiAgIEluZGV4IFZhbHVlOiBT dWItcGFyYW1ldGVycyBNVVNUIGJlIHNwZWNpZmllZCBpbiBVVEYtOCB1c2luZyBzdGFuZGFyZAog ICBVUkkgZW5jb2Rpbmcgd2hlcmUgbmVjZXNzYXJ5LgoKMTQuICBSZWZlcmVuY2VzCgoxNC4xLiAg Tm9ybWF0aXZlIFJlZmVyZW5jZXMKCiAgIFtSRkMyMTE5XSAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9yCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgdXNlIGluIFJGQ3MgdG8gSW5kaWNhdGUKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBSZXF1aXJlbWVudCBMZXZlbHMiLCBC Q1AgMTQsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUkZDIDIx MTksIE1hcmNoIDE5OTcuCgogICBbUkZDMjg2NV0gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFJpZ25leSwgQy4sIFdpbGxlbnMsIFMuLAogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFJ1YmVucywgQS4sIGFuZCBXLiBTaW1wc29uLAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJSZW1vdGUgQXV0aGVudGljYXRpb24gRGlh bAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEluIFVzZXIgU2Vy dmljZSAoUkFESVVTKSIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgUkZDIDI4NjUsIEp1bmUgMjAwMC4KCiAgIFtSRkMzNTc5XSAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQWJvYmEsIEIuIGFuZCBQLiBDYWxob3VuLAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICJSQURJVVMgKFJlbW90ZQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIEF1dGhlbnRpY2F0aW9uIERpYWwgSW4gVXNlcgoK CgpIb3dsZXR0ICYgSGFydG1hbiAgICAgICAgICBFeHBpcmVzIE1heSAxLCAyMDE0ICAgICAgICAg ICAgICAgICBbUGFnZSAxOV0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgU0FNTCBS QURJVVMgICAgICAgICAgICAgICAgICBPY3RvYmVyIDIwMTMKCgogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFNlcnZpY2UpIFN1cHBvcnQgRm9yCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRXh0ZW5zaWJsZSBBdXRoZW50aWNhdGlv bgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFByb3RvY29sIChF QVApIiwgUkZDIDM1NzksCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgU2VwdGVtYmVyIDIwMDMuCgogICBbUkZDNjYxNF0gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFdpbnRlciwgUy4sIE1jQ2F1bGV5LCBNLiwKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBWZW5hYXMsIFMuLCBhbmQgSy4gV2llcmVuZ2EsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIlRyYW5zcG9ydCBMYXllciBTZWN1 cml0eQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIChUTFMpIEVu Y3J5cHRpb24gZm9yCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg UkFESVVTIiwgUkZDIDY2MTQsIE1heSAyMDEyLgoKICAgW1JGQzY5MjldICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBEZUtvaywgQS4gYW5kIEEuIExpb3IsCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIlJlbW90ZSBBdXRoZW50aWNhdGlvbiBEaWFsCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSW4gVXNlciBTZXJ2aWNl IChSQURJVVMpCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUHJv dG9jb2wgRXh0ZW5zaW9ucyIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgUkZDIDY5MjksIEFwcmlsIDIwMTMuCgogICBbSS1ELmlldGYtcmFkZXh0LW5haV0gICAg ICAgICAgICAgICAgICAgIERlS29rLCBBLiwgIlRoZSBOZXR3b3JrCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgQWNjZXNzIElkZW50aWZpZXIiLAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGRyYWZ0LWlldGYtcmFkZXh0LW5haS0w MwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICh3b3JrIGluIHBy b2dyZXNzKSwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNYXkg MjAxMy4KCiAgIFtPQVNJUy5zYW1sLWJpbmRpbmdzLTIuMC1vc10gICAgICAgICAgICAgQ2FudG9y LCBTLiwgSGlyc2NoLCBGLiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBLZW1wLCBKLiwgUGhpbHBvdHQsIFIuLCBhbmQKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBFLiBNYWxlciwgIkJpbmRpbmdzIGZvciB0aGUKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBPQVNJUyBTZWN1cml0eSBBc3NlcnRp b24KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNYXJrdXAgTGFu Z3VhZ2UgKFNBTUwpCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg VjIuMCIsIE9BU0lTIFN0YW5kYXJkIHNhbWwtCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgYmluZGluZ3MtMi4wLW9zLCBNYXJjaCAyMDA1LgoKICAgW09BU0lTLnNh bWwtY29yZS0yLjAtb3NdICAgICAgICAgICAgICAgICBDYW50b3IsIFMuLCBLZW1wLCBKLiwKICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBQaGlscG90dCwgUi4sIGFu ZCBFLiBNYWxlciwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAi QXNzZXJ0aW9ucyBhbmQgUHJvdG9jb2wgZm9yCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgdGhlIE9BU0lTIFNlY3VyaXR5IEFzc2VydGlvbgogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1hcmt1cCBMYW5ndWFnZSAoU0FNTCkKICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBWMi4wIiwgT0FTSVMgU3Rh bmRhcmQgc2FtbC0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBj b3JlLTIuMC1vcywgTWFyY2ggMjAwNS4KCiAgIFtPQVNJUy5zYW1sLXByb2ZpbGVzLTIuMC1vc10g ICAgICAgICAgICAgSHVnaGVzLCBKLiwgQ2FudG9yLCBTLiwKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBIb2RnZXMsIEouLCBIaXJzY2gsIEYuLAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1pc2hyYSwgUC4sIFBoaWxwb3R0LCBS LiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBhbmQgRS4gTWFs ZXIsICJQcm9maWxlcyBmb3IKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICB0aGUgT0FTSVMgU2VjdXJpdHkgQXNzZXJ0aW9uCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgTWFya3VwIExhbmd1YWdlIChTQU1MKQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFYyLjAiLCBPQVNJUyBTdGFuZGFyZCBPQVNJ Uy4KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBzYW1sLXByb2Zp bGVzLTIuMC1vcywKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBN YXJjaCAyMDA1LgoKCgpIb3dsZXR0ICYgSGFydG1hbiAgICAgICAgICBFeHBpcmVzIE1heSAxLCAy MDE0ICAgICAgICAgICAgICAgICBbUGFnZSAyMF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAg ICAgICAgU0FNTCBSQURJVVMgICAgICAgICAgICAgICAgICBPY3RvYmVyIDIwMTMKCgogICBbT0FT SVMuc2FtbC1tZXRhZGF0YS0yLjAtb3NdICAgICAgICAgICAgIENhbnRvciwgUy4sIE1vcmVoLCBK LiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBQaGlscG90dCwg Ui4sIGFuZCBFLiBNYWxlciwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAiTWV0YWRhdGEgZm9yIHRoZSBTZWN1cml0eQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEFzc2VydGlvbiBNYXJrdXAgTGFuZ3VhZ2UKICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAoU0FNTCkgVjIuMCIsIE9BU0lTIFN0YW5k YXJkCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHNhbWwtbWV0 YWRhdGEtMi4wLW9zLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IE1hcmNoIDIwMDUuCgoxNC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcwoKICAgW1JGQzM1NTNd ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNZWFsbGluZywgTS4sIE1hc2ludGVyLCBM LiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBIYXJkaWUsIFQu LCBhbmQgRy4gS2x5bmUsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIkFuIElFVEYgVVJOIFN1Yi1uYW1lc3BhY2UKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBmb3IgUmVnaXN0ZXJlZCBQcm90b2NvbAogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBhcmFtZXRlcnMiLCBCQ1AgNzMsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUkZDIDM1NTMsIEp1bmUgMjAwMy4K CiAgIFtSRkMzNTc1XSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQWJvYmEsIEIuLCAi SUFOQQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIENvbnNpZGVy YXRpb25zIGZvciBSQURJVVMKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAoUmVtb3RlIEF1dGhlbnRpY2F0aW9uIERpYWwKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBJbiBVc2VyIFNlcnZpY2UpIiwgUkZDIDM1NzUsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDAzLgoKICAgW1JGQzM1 ODhdICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDYWxob3VuLCBQLiwgTG91Z2huZXks IEouLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEd1dHRtYW4s IEUuLCBab3JuLCBHLiwgYW5kCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgSi4gQXJra28sICJEaWFtZXRlciBCYXNlCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgUHJvdG9jb2wiLCBSRkMgMzU4OCwKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBTZXB0ZW1iZXIgMjAwMy4KCiAgIFtSRkM1MjI2XSAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTmFydGVuLCBULiBhbmQgSC4KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBbHZlc3RyYW5kLCAiR3VpZGVsaW5l cyBmb3IKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBXcml0aW5n IGFuIElBTkEKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDb25z aWRlcmF0aW9ucyBTZWN0aW9uIGluCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgUkZDcyIsIEJDUCAyNiwgUkZDIDUyMjYsCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgTWF5IDIwMDguCgogICBbSS1ELnBlcmV6LXJhZGV4dC1yYWRp dXMtZnJhZ21lbnRhdGlvbl0gIFBlcmV6LU1lbmRleiwgQS4sIExvcGV6LCBSLiwKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBQZXJlbmlndWV6LUdhcmNpYSwgRi4s CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTG9wZXotTWlsbGFu LCBHLiwgTG9wZXosIEQuLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGFuZCBBLiBEZUtvaywgIlN1cHBvcnQgb2YKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBmcmFnbWVudGF0aW9uIG9mIFJBRElVUwogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHBhY2tldHMiLCBkcmFmdC1wZXJlei0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICByYWRleHQtcmFkaXVzLWZyYWdt ZW50YXRpb24tCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgMDEg KHdvcmsgaW4gcHJvZ3Jlc3MpLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIEZlYnJ1YXJ5IDIwMTIuCgogICBbSS1ELmpvbmVzLWRpYW1ldGVyLWFiZmFiXSAgICAg ICAgICAgICAgIEpvbmVzLCBNLiBhbmQgSC4gVHNjaG9mZW5pZywKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAiVGhlIERpYW1ldGVyICdBcHBsaWNhdGlvbgoKCgpI b3dsZXR0ICYgSGFydG1hbiAgICAgICAgICBFeHBpcmVzIE1heSAxLCAyMDE0ICAgICAgICAgICAg ICAgICBbUGFnZSAyMV0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgU0FNTCBSQURJ VVMgICAgICAgICAgICAgICAgICBPY3RvYmVyIDIwMTMKCgogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIEJyaWRnaW5nIGZvciBGZWRlcmF0ZWQKICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBY2Nlc3MgQmV5b25kIFdlYiAoQUJGQUIp JwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFwcGxpY2F0aW9u IiwgZHJhZnQtam9uZXMtCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgZGlhbWV0ZXItYWJmYWItMDAgKHdvcmsgaW4KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBwcm9ncmVzcyksIE1hcmNoIDIwMTEuCgogICBbSS1ELmlldGYtYWJm YWItYXJjaF0gICAgICAgICAgICAgICAgICAgIEhvd2xldHQsIEouLCBIYXJ0bWFuLCBTLiwKICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUc2Nob2ZlbmlnLCBILiwg TGVhciwgRS4sCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYW5k IEouIFNjaGFhZCwgIkFwcGxpY2F0aW9uCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQnJpZGdpbmcgZm9yIEZlZGVyYXRlZAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIEFjY2VzcyBCZXlvbmQgV2ViIChBQkZBQikKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBcmNoaXRlY3R1cmUiLAogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGRyYWZ0LWlldGYtYWJmYWItYXJj aC0wMwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICh3b3JrIGlu IHByb2dyZXNzKSwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBK dWx5IDIwMTIuCgogICBbSS1ELmlldGYtcmFkZXh0LWR0bHNdICAgICAgICAgICAgICAgICAgIERl S29rLCBBLiwgIkRUTFMgYXMgYQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFRyYW5zcG9ydCBMYXllciBmb3IgUkFESVVTIiwKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBkcmFmdC1pZXRmLXJhZGV4dC1kdGxzLTA1CiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFwcmlsIDIwMTMuCgog ICBbSS1ELmlldGYtZW11LWVhcC10dW5uZWwtbWV0aG9kXSAgICAgICAgIFpob3UsIEguLCBDYW0t V2luZ2V0LCBOLiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT YWxvd2V5LCBKLiwgYW5kIFMuIEhhbm5hLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICJUdW5uZWwgRUFQIE1ldGhvZCAoVEVBUCkKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBWZXJzaW9uIDEiLCBkcmFmdC1pZXRmLWVtdS0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBlYXAtdHVubmVsLW1ldGhv ZC0wNiAod29yawogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGlu IHByb2dyZXNzKSwgTWFyY2ggMjAxMy4KCkF1dGhvcnMnIEFkZHJlc3NlcwoKICAgSm9zaCBIb3ds ZXR0CiAgIEphbmV0CiAgIEx1bWVuIEhvdXNlLCBMaWJyYXJ5IEF2ZW51ZSwgSGFyd2VsbAogICBP eGZvcmQgIE9YMTEgMFNHCiAgIFVLCgogICBQaG9uZTogKzQ0IDEyMzUgODIyMzYzCiAgIEVNYWls OiBKb3NoLkhvd2xldHRAamEubmV0CgoKICAgU2FtIEhhcnRtYW4KICAgUGFpbmxlc3MgU2VjdXJp dHkKCgogICBQaG9uZToKICAgRU1haWw6IGhhcnRtYW5zLWlldGZAbWl0LmVkdQoKCgoKSG93bGV0 dCAmIEhhcnRtYW4gICAgICAgICAgRXhwaXJlcyBNYXkgMSwgMjAxNCAgICAgICAgICAgICAgICAg W1BhZ2UgMjJdCgwK --_002_CE943718F91AJoshHowlettjanet_-- From kwiereng@cisco.com Mon Oct 28 13:37:22 2013 Return-Path: X-Original-To: abfab@ietfa.amsl.com Delivered-To: abfab@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E7C011E81B4 for ; Mon, 28 Oct 2013 13:37:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ghIwXiZrGPq8 for ; Mon, 28 Oct 2013 13:37:17 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) by ietfa.amsl.com (Postfix) with ESMTP id D307321E80AC for ; Mon, 28 Oct 2013 13:37:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1382; q=dns/txt; s=iport; t=1382992636; x=1384202236; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=yujzcXdRcCD7ifkcvTT9EmLhuCahuVVtdNd//sHPN4g=; b=c2RlFMoM+8fERmazQGZBdZpjQzNpzlNk7JXyq3F/TTMVftp9iIsWeMcb nfP5tsrIiPJA0WPTfqco0X5YEVsKUoENeD7QOS+smwRNyYzCobTr99Zlh 2VOU8VkINx8veHzXIk8iwX8WfP6B7yUF4d66Y3ZQbpDJZJlX6bVHiOpCT o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ai8FAM/JblKtJV2d/2dsb2JhbABZgwc4vzyBKhZ0giUBAQEDAQEBATc0CwULAgEIGB4QJwslAgQOBYgBBg24LgSOFgaBBjMHgx+BDQOYCpIHgyaBaAkX X-IronPort-AV: E=Sophos;i="4.93,587,1378857600"; d="scan'208";a="277722598" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-6.cisco.com with ESMTP; 28 Oct 2013 20:37:07 +0000 Received: from xhc-aln-x13.cisco.com (xhc-aln-x13.cisco.com [173.36.12.87]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id r9SKb411011174 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 28 Oct 2013 20:37:04 GMT Received: from xmb-aln-x12.cisco.com ([169.254.7.116]) by xhc-aln-x13.cisco.com ([173.36.12.87]) with mapi id 14.02.0318.004; Mon, 28 Oct 2013 15:37:04 -0500 From: "Klaas Wierenga (kwiereng)" To: Josh Howlett Thread-Topic: [abfab] draft-ietf-abfab-aaa-saml-07 Thread-Index: AQHO1B11VmP7Fbo+b0eT88wG79BNww== Date: Mon, 28 Oct 2013 20:37:03 +0000 Message-ID: <47586B2C-3877-41D7-B889-8F5F09E0536E@cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "abfab@ietf.org" Subject: Re: [abfab] draft-ietf-abfab-aaa-saml-07 X-BeenThere: abfab@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "Application Bridging, Federated Authentication Beyond \(the web\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2013 20:37:22 -0000 Josh, all, Not smart :-) but I hope we can discuss it anyway. I'd say everybody still = has time to digest. Klaas Sent from my iPhone > On 28 okt. 2013, at 16:45, "Josh Howlett" wrote: >=20 > In an act of stupidity I missed the submission cut-off, thinking it was > today. >=20 > I have attached the update to this mail. I believe that all of the issues > discussed at the last meeting have been addressed, and so the document > should be in pretty good shape. It definitely still needs further work, > mainly in terms of improving terminology consistency, writing the securit= y > & privacy considerations, and elaborating in some places where the > existing text is a overly terse (such as the NAI name format identifier > definition) or assumes too much from the reader. >=20 > Are the chairs ok with this being discussed next week? >=20 > Josh. >=20 >=20 > Janet(UK) is a trading name of Jisc Collections and Janet Limited, a=20 > not-for-profit company which is registered in England under No. 2881024=20 > and whose Registered Office is at Lumen House, Library Avenue, > Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238 >=20 > > _______________________________________________ > abfab mailing list > abfab@ietf.org > https://www.ietf.org/mailman/listinfo/abfab