From list@netscape.com Tue Aug 1 02:50:46 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA01220 for ; Tue, 1 Aug 2000 02:50:45 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e716eDR00159; Mon, 31 Jul 2000 23:40:13 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e716nF605506; Mon, 31 Jul 2000 23:49:15 -0700 (PDT) Resent-Date: Mon, 31 Jul 2000 23:49:15 -0700 (PDT) From: rvuoo@hotbot.com To: ahdxd@sernageomin.cl Reply-To: sernageomin.cl@ywing.netscape.com Subject: Special Invitation gyild Message-Id: <200008010343750.SM00340@zuyse.> Date: Tue, 1 Aug 2000 03:48:02 -0300 Resent-Message-ID: <"FpwD0C.A.jVB.pLnh5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Special Invitation Have you looked at our simple gifts club yet? I won't tell you that you will get rich quick but if you invite others and help them,you can be gifted. It's very simple,people helping people. Send us an email with Simple Gifts as the subject and we will get the info off to you right away. You may also Include Your Name # or Fax# to receive more information mailto:goodincome@angelfire.com?subject=SimpleGifts ====================================================== mailto:qwrqwr@angelfire.com?subject=Remove From list@netscape.com Tue Aug 1 08:18:02 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA18459 for ; Tue, 1 Aug 2000 08:18:02 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e71C6gj10610; Tue, 1 Aug 2000 05:06:42 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e71CBsg05731; Tue, 1 Aug 2000 05:11:54 -0700 (PDT) Resent-Date: Tue, 1 Aug 2000 05:11:54 -0700 (PDT) Message-Id: <200008011211.FAA00545@breakaway.Stanford.EDU> X-Mailer: exmh version 2.0.2 2/24/98 Subject: folks slides from LDAPEXT meeting? To: ietf-ldapext@netscape.com From: Jeff.Hodges@stanford.edu Reply-to: Jeff.Hodges@stanford.edu Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Tue, 01 Aug 2000 05:11:51 -0700 Sender: hodges@breakaway.Stanford.EDU Resent-Message-ID: <"AygR.A.CZB.J6rh5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com It'd be helpful if everyone who talked at the LDAPEXT mtg, and displayed slides, would send their slides to the list. Ones I noted down were.. Ellen S. (done) MarkW Leif Ed R David C Apologies if I got anyone's name wrong or forgot someone. thanks, JeffH From list@netscape.com Tue Aug 1 08:20:37 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA19279 for ; Tue, 1 Aug 2000 08:20:37 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e71CA9R19479; Tue, 1 Aug 2000 05:10:09 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e71CJBg07956; Tue, 1 Aug 2000 05:19:11 -0700 (PDT) Resent-Date: Tue, 1 Aug 2000 05:19:11 -0700 (PDT) Message-Id: <4.3.2.7.2.20000801063635.0228bcd0@127.0.0.1> X-Sender: hta@127.0.0.1 X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 01 Aug 2000 06:44:25 -0400 To: Rich Salz , d.w.chadwick@salford.ac.uk From: Harald Alvestrand Subject: Re: Use of criticality in dupent-04 Cc: Bruce Greenblatt , ietf-ldapext@netscape.com In-Reply-To: <398438B2.45E739C6@caveosystems.com> References: <3981DA0C.26533.BA6DA98@localhost> <39842ACB.17440.82A38C5@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"5sNidD.A.C8B.-Ash5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 10:16 30/07/2000 -0400, Rich Salz wrote: >I think it's more likely that a repository must want to include a critical >control in its response that allows it to "disclaim" some of its data. For >example, "these search results are not to be used for spam," "i cannot vouch >for the content you'll get when you follow these referrals," etc. another typical case would be "these data are incomprehensible if you don't understand this control" - for instance if we (horror!) were to define a control for tagging returned text as being Shift-JIS encoded instead of UTF-8. The server can't force the client to do anything special, but can give appropriate warning that results are likely to be incomprehensible, and the only appropriate action on the client's side may be presenting an "upgrade your software?" message to the unhappy user. Harald -- Harald Tveit Alvestrand, alvestrand@cisco.com +47 41 44 29 94 Personal email: Harald@Alvestrand.no From list@netscape.com Tue Aug 1 09:05:46 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA29834 for ; Tue, 1 Aug 2000 09:05:39 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e71Cwtj15090; Tue, 1 Aug 2000 05:58:55 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e71D46s20842; Tue, 1 Aug 2000 06:04:06 -0700 (PDT) Resent-Date: Tue, 1 Aug 2000 06:04:06 -0700 (PDT) Message-Id: <200008011303.PAA00873@njal.it.su.se> X-Mailer: exmh version 2.0.3 To: ietf-ldapext@netscape.com Subject: cldap presentation ietf-48 Mime-Version: 1.0 Content-Type: multipart/mixed ; boundary="==_Exmh_7418938350" Date: Tue, 01 Aug 2000 15:03:30 +0200 From: Leif Johansson Resent-Message-ID: <"tpVSvB.A.WFF.Ersh5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a multipart MIME message. --==_Exmh_7418938350 Content-Type: text/plain; charset=us-ascii here you go Jeff, Cheers Leif --==_Exmh_7418938350 Content-Type: text/plain; name="ietf-cldap-presentation.ps"; charset=us-ascii Content-Description: ietf-cldap-presentation.ps Content-Disposition: attachment; filename="ietf-cldap-presentation.ps" Content-Transfer-Encoding: quoted-printable %!PS-Adobe-3.0 %XpPrinter-Model: Generic Printer %%Creator: Wind/U Xprinter Version 3.1.0 (linux) (Compile Date: Mar 15 20= 00 17:33:05) (XpDummyUser) %%Title: = %%CreationDate:Tue Aug 1 15:00:44 2000 %%DocumentSuppliedResources: (atend) %%Pages: (atend) %%LanguageLevel: 2 %%EndComments %%BeginProlog /XPrinterDict dup 200 dict def load begin /bdf{bind def}bind def /ldf{load def}bdf /m/rmoveto ldf /l2/rlineto ldf /gs/gsave ldf /gr/grestore ldf /np/newpath ldf /sv/save ldf /rs/restore ldf /tl/translate ldf /mt/matrix ldf /l/length ldf /z/dict ldf /d/def ldf /e/exch ldf /a/array ldf /ac/arc ldf /an/arcn ldf /b/begin ldf /pi/putinterval ldf /t/moveto ldf /lo/lineto ldf /st/stroke ldf /p/add ldf /s/sub ldf /c/mul ldf /v/div ldf /cp/closepath ldf /sl/scale ldf /ff/findfont ldf /mf/makefont ldf /sf/setfont ldf /f/fill ldf /sw/setlinewidth ldf /sc/setlinecap ldf /sj/setlinejoin ldf /sg/setgray ldf /ski/ISOLatin1Encoding where{pop true}{false}ifelse d /fcd{ff dup l z b{1 index /FID ne{d}{pop pop}ifelse}forall /Encoding ISOL= atin1Encoding d currentdict end}bdf /fdf{e definefont pop}bdf /sdt 22 z d sdt b /tpm mt d /tpt mt d /tps mt d /cps {/pr2 e cvlit d /pr1 e cvlit d /npc pr1 l pr2 l p a d npc 0 pr1 pi npc pr1 l pr2 pi npc cvx }bdf /rmx mt d /frs {72 0 rmx defaultmatrix dtransform /yres e d /xres e d xres dup c yres dup c p sqrt }bdf end /reencodesmalldict 12 dict def /ReEncodeSmall { = reencodesmalldict begin /newcodesandnames exch def /newfontname exch def /basefontname exch def /basefontdict basefontname findfont def /newfont basefontdict maxlength dict def basefontdict { exch dup /FID ne { = dup /Encoding eq { = ski { exch pop ISOLatin1Encoding dup length array copy }{ exch dup length array copy } ifelse newfont 3 1 roll put }{ exch newfont 3 1 roll put } ifelse }{ pop pop } ifelse } forall newfont /FontName newfontname put newcodesandnames aload pop newcodesandnames length 2 idiv { newfont /Encoding get 3 1 roll put } repeat newfontname newfont definefont pop end } def /changesvec [ 16#80 /euro 16#82 /quotesinglbase 16#83 /florin 16#84 /quotedblbase 16#85 /ellipsis 16#86 /dagger 16#87 /daggerdbl 16#88 /circumflex 16#89 /perthousand 16#8a /Scaron 16#8b /guilsinglleft 16#8c /OE 16#8e /zcaron 16#91 /quoteleft 16#92 /quoteright 16#93 /quotedblleft 16#94 /quotedblright 16#95 /bullet 16#96 /endash 16#97 /emdash 16#98 /tilde 16#99 /trademark 16#9a /scaron 16#9b /guilsinglright 16#9c /oe 16#9e /zcaron 16#9f /Ydieresis ] def /sus = {sdt b /spf e d /sag e d = /ces e d 300 ces v sag /spf load setscreen end }bdf /spt 18 z d spt b /bts {/ybit e d /xbit e d /byv bstr ybit bwd c xbit 8 idiv p get d /mask 1 7 xbit 8 mod s bitshift d byv mask and 0 ne }bdf end /bsf {spt b /y e d /x e d /xix x 1 p 2 v bpx c cvi d /yix y 1 p 2 v bpy c cvi d xix yix bts {/onb onb 1 p d 1} {/ofb ofb 1 p d 0} ifelse end }bdf /setpattern {spt b /csz e d /agl e d /bwd e d /bpy e d /bpx e d /bstr e d /onb 0 d /ofb 0 d csz agl /bsf load sus { }settransfer ofb ofb onb p v setgray end }bdf /picstr 500 string d /inch{72 c}bdf /DP{gs np 0 360 ac cp f gr}bdf /DL{gs np t lo st gr}bdf /RGB{setrgbcolor}bdf /C{gs t show gr}bdf /ren 12 z d /REn {ren b /nwc e d /nwf e d /bft e d /bfd bft ff d /nf bfd maxlength z d bfd {e dup /FID ne = {dup /Encoding eq {e dup l a copy nf 3 1 roll put} {e nf 3 1 roll put} ifelse } {pop pop} ifelse }forall nf /FontName nwf put nwc aload pop nwc l 2 idiv {nf /Encoding get 3 1 roll put} repeat nwf nf definefont pop end }d /rots{gs t rotate show gr}bdf /imdata 256 string def /imstr1 1 string def /imdecode{ currentfile imstr1 readhexstring pop 0 get 8 bitshift currentfile imstr1 = readhexstring pop 0 get or { currentfile imdata = currentfile imstr1 readhexstring pop 0 get 8 bitshift currentfile imstr1 = readhexstring pop 0 get or = currentfile imstr1 readhexstring pop 0 get = getinterval = readhexstring pop pop } repeat imdata } bdf %%EndProlog %%BeginSetup % %%BeginFeature: *Resolution 300dpi 1 dict dup /HWResolution [300 300] put setpagedevice %%EndFeature %%BeginFeature: *PageSize Letter <> setpagedevice %%EndFeature %%EndSetup %%Page: 1 1 %%BeginPageSetup /#copies 1 def sv 90 rotate 1.0 -1.0 sl 18.0 18.0 tl %%EndPageSetup %%PageBoundingBox: (atend) gs gr gs 0 0 t 0 576.0 lo 756.0 576.0 lo 756.0 0 lo cp clip np 55.44 71.04 t 55.44 118.8 lo 701.52 118.8 lo 701.52 71.04 lo cp clip np 0.0 0.0 0.0 RGB /Times-Roman /Times-Roman-MSenc changesvec ReEncodeSmall /Times-Roman-MSenc ff [42.0 0 0 -42.0 0 0] mf sf <43> 309.36 108.96 C <4c> 337.44 108.96 C <44> 363.12 108.96 C <41> 393.6 108.96 C <50> 423.84 108.96 C gr gs 0 0 t 0 576.0 lo 756.0 576.0 lo 756.0 0 lo cp clip np 55.44 158.16 t 55.44 516.72 lo 701.52 516.72 lo 701.52 158.16 lo cp clip np 0.0 0.0 0.0 RGB %%BeginResource: font StarBats %!PS-AdobeFont-1.0: StarBats 001.000=0D%%CreationDate: 10.11.99 at 16:40 = =0D%%VMusage: 1024 41552 =0D% Generated by Fontographer 4.1=0D% \251 199= 9 Sun Microsystems, Inc.=0D% ADL: 917 200 0=0D%%EndComments=0DFontDirecto= ry/StarBats known{/StarBats findfont dup/UniqueID known{dup=0D/UniqueID g= et 4004617 eq exch/FontType get 1 eq and}{pop false}ifelse=0D{save true}{= false}ifelse}{false}ifelse=0D20 dict begin=0D/FontInfo 16 dict dup begin=0D= /version (001.000) readonly def=0D /FullName (StarBats) readonly def=0D= /FamilyName (StarBats) readonly def=0D /Weight (Medium) readonly def=0D= /ItalicAngle 0 def=0D /isFixedPitch false def=0D /UnderlinePosition -= 133 def=0D /UnderlineThickness 20 def=0D /Notice (\251 1999 Sun Microsy= stems, Inc.) readonly def=0D /em 1000 def=0D /ascent 917 def=0D /desce= nt 200 def=0Dend readonly def=0D/FontName /StarBats def=0D/Encoding 256 a= rray=0Ddup 0/.notdef put=0Ddup 1/.notdef put=0Ddup 2/.notdef put=0Ddup 3/= glyph140 put=0Ddup 4/glyph141 put=0Ddup 5/ch5 put=0Ddup 6/ch6 put=0Ddup 7= /.notdef put=0Ddup 8/.notdef put=0Ddup 9/.notdef put=0Ddup 10/.notdef put= =0Ddup 11/.notdef put=0Ddup 12/.notdef put=0Ddup 13/.notdef put=0Ddup 14/= =2Enotdef put=0Ddup 15/.notdef put=0Ddup 16/.notdef put=0Ddup 17/.notdef = put=0Ddup 18/.notdef put=0Ddup 19/.notdef put=0Ddup 20/.notdef put=0Ddup = 21/.notdef put=0Ddup 22/.notdef put=0Ddup 23/.notdef put=0Ddup 24/.notdef= put=0Ddup 25/.notdef put=0Ddup 26/.notdef put=0Ddup 27/.notdef put=0Ddup= 28/.notdef put=0Ddup 29/.notdef put=0Ddup 30/.notdef put=0Ddup 31/.notde= f put=0Ddup 32/space put=0Ddup 33/SmileUp put=0Ddup 34/FullCircle put=0Dd= up 35/FullCircleShadow put=0Ddup 36/FullBox put=0Ddup 37/BoxThinBorder pu= t=0Ddup 38/BoxFatBorder put=0Ddup 39/BoxShadowDown put=0Ddup 40/BoxShadow= Up put=0Ddup 41/DiamondSmall put=0Ddup 42/DiamondBig put=0Ddup 43/Caro pu= t=0Ddup 44/FourCaro put=0Ddup 45/SmallCaro put=0Ddup 46/CircleShadowUp pu= t=0Ddup 47/BlackWhiteArrowRight put=0Ddup 48/SmallRightArrow put=0Ddup 49= /FatRightArrow put=0Ddup 50/Checked put=0Ddup 51/CrossChecked put=0Ddup 5= 2/CheckedBox put=0Ddup 53/ArrowInCircle put=0Ddup 54/PointRight put=0Ddup= 55/Write put=0Ddup 56/Pencil put=0Ddup 57/Checked2 put=0Ddup 58/Checked3= put=0Ddup 59/FatFullCircle put=0Ddup 60/CircleSmallShadow put=0Ddup 61/B= ox2 put=0Ddup 62/BoxShadowDown2 put=0Ddup 63/BoxShadowUp2 put=0Ddup 64/Bo= xSmallShadowUp put=0Ddup 65/Diamond put=0Ddup 66/DiamondOfFour put=0Ddup = 67/SmallDiamond put=0Ddup 68/FourTeardropSpokedAsterisk put=0Ddup 69/Four= BallonSpokedAsterisk put=0Ddup 70/HeavyFourBallonSpokedAsterisk put=0Ddup= 71/FourClubSpokedAsterisk put=0Ddup 72/EightSpokedAsterisk put=0Ddup 73/= EightPointedBlackStar put=0Ddup 74/PinwheelStar put=0Ddup 75/SixPointedBl= ackStar put=0Ddup 76/EightPointedBlackStar2 put=0Ddup 77/EightPointedBlac= kStar3 put=0Ddup 78/TwelvePointedBlackStar put=0Ddup 79/BallotX put=0Ddup= 80/HeavyBallotx put=0Ddup 81/OutlinedGreekCross put=0Ddup 82/HeavyGreekC= ross put=0Ddup 83/OpenCentreCross put=0Ddup 84/HeavyOpenCentreCross put=0D= dup 85/OpenCentreBlackStar put=0Ddup 86/BlackCentreWhiteStar put=0Ddup 87= /HeavyOutlinedBlackStar put=0Ddup 88/HeavyOutlinedBlackStar2 put=0Ddup 89= /PinwheelStar2 put=0Ddup 90/ShadowedWhiteStar put=0Ddup 91/bracketleft pu= t=0Ddup 92/Zero put=0Ddup 93/One put=0Ddup 94/Two put=0Ddup 95/Three put=0D= dup 96/Four put=0Ddup 97/Five put=0Ddup 98/Six put=0Ddup 99/Seven put=0Dd= up 100/Eight put=0Ddup 101/Nine put=0Ddup 102/Ten put=0Ddup 103/PosZero p= ut=0Ddup 104/PosOne put=0Ddup 105/PosTwo put=0Ddup 106/PosThree put=0Ddup= 107/PosFour put=0Ddup 108/PosFive put=0Ddup 109/PosSix put=0Ddup 110/Pos= Seven put=0Ddup 111/PosEight put=0Ddup 112/PosNine put=0Ddup 113/PosTen p= ut=0Ddup 114/Note put=0Ddup 115/Machine put=0Ddup 116/Telephone put=0Ddup= 117/Dial put=0Ddup 118/Fax put=0Ddup 119/Printer put=0Ddup 120/Disc put=0D= dup 121/Mouse put=0Ddup 122/Computer put=0Ddup 123/Envelope put=0Ddup 124= /PostCard put=0Ddup 125/PointRight2 put=0Ddup 126/Write2 put=0Ddup 127/.n= otdef put=0Ddup 128/Euro put=0Ddup 129/.notdef put=0Ddup 130/QuoteSingleB= ase put=0Ddup 131/Florin put=0Ddup 132/QuotedDblBase put=0Ddup 133/Ellips= is put=0Ddup 134/Dagger put=0Ddup 135/DaggerDbl put=0Ddup 136/Circumflex = put=0Ddup 137/PerThousand put=0Ddup 138/SCaron put=0Ddup 139/SingleLeftPo= intingAngle put=0Ddup 140/LigatureOE put=0Ddup 141/.notdef put=0Ddup 142/= ZCaron put=0Ddup 143/.notdef put=0Ddup 144/.notdef put=0Ddup 145/QuoteLef= t put=0Ddup 146/QuoteRight put=0Ddup 147/QuoteDblLeft put=0Ddup 148/Quote= DblRight put=0Ddup 149/Bullet put=0Ddup 150/EnDash put=0Ddup 151/EmDash p= ut=0Ddup 152/SmallTilde put=0Ddup 153/Trademark put=0Ddup 154/sCaron put=0D= dup 155/SingleRightPointingAngle put=0Ddup 156/Ligatureoe put=0Ddup 157/.= notdef put=0Ddup 158/zCaron put=0Ddup 159/YDiaeresis put=0Ddup 160/.notde= f put=0Ddup 161/FatArrowUp put=0Ddup 162/FatArrowRight put=0Ddup 163/FatA= rrowDown put=0Ddup 164/FatArrowLeft put=0Ddup 165/Bullet2 put=0Ddup 166/E= xclam put=0Ddup 167/Paragraph put=0Ddup 168/Questionmark put=0Ddup 169/Co= pyright put=0Ddup 170/At put=0Ddup 171/GuillemotLeft put=0Ddup 172/Tom pu= t=0Ddup 173/Pete put=0Ddup 174/Registered put=0Ddup 175/SmallRight put=0D= dup 176/SmallDown put=0Ddup 177/SmallLeft put=0Ddup 178/SmallUp put=0Ddup= 179/JumpToEnd put=0Ddup 180/JumpToStart put=0Ddup 181/RightArrow put=0Dd= up 182/DownArrow put=0Ddup 183/LeftArrow put=0Ddup 184/UpArrow put=0Ddup = 185/Superstar put=0Ddup 186/Telephone2 put=0Ddup 187/GuillemotRight put=0D= dup 188/RightArrow2 put=0Ddup 189/DownArrow2 put=0Ddup 190/LeftArrow2 put= =0Ddup 191/UpArrow2 put=0Ddup 192/Starwheel put=0Ddup 193/StarwheelSmallC= ircle put=0Ddup 194/Troublemaker put=0Ddup 195/Flower put=0Ddup 196/Black= Down put=0Ddup 197/BlackUp put=0Ddup 198/WhiteDown put=0Ddup 199/WhiteUp = put=0Ddup 200/Butterfly put=0Ddup 201/Idea put=0Ddup 202/nbspace put=0Ddu= p 203/Scissors put=0Ddup 204/Airplane put=0Ddup 205/DavidsStar put=0Ddup = 206/BlackFlorette put=0Ddup 207/Snowflake put=0Ddup 208/Half put=0Ddup 20= 9/BlackVerticalRectangle put=0Ddup 210/BraceLeft put=0Ddup 211/BraceRight= put=0Ddup 212/ExclamFat put=0Ddup 213/BlackClubSuit put=0Ddup 214/BlackH= eartSuit put=0Ddup 215/BlackSpadeSuit put=0Ddup 216/LeftRightArrow put=0D= dup 217/UpDownArrow put=0Ddup 218/ArrowDownRight put=0Ddup 219/ArrowUpRig= ht put=0Ddup 220/DesignArrow put=0Ddup 221/Yacute put=0Ddup 222/Paragraph= Sign put=0Ddup 223/germandbls put=0Ddup 224/Cent put=0Ddup 225/Currency p= ut=0Ddup 226/Yen put=0Ddup 227/Peseta put=0Ddup 228/Colon put=0Ddup 229/C= ruzeiro put=0Ddup 230/France put=0Ddup 231/Lira put=0Ddup 232/Won put=0Dd= up 233/Dong put=0Ddup 234/Rupee put=0Ddup 235/edieresis put=0Ddup 236/igr= ave put=0Ddup 237/iacute put=0Ddup 238/icircumflex put=0Ddup 239/idieresi= s put=0Ddup 240/eth put=0Ddup 241/ntilde put=0Ddup 242/ograve put=0Ddup 2= 43/oacute put=0Ddup 244/ocircumflex put=0Ddup 245/otilde put=0Ddup 246/od= ieresis put=0Ddup 247/divide put=0Ddup 248/oslash put=0Ddup 249/ugrave pu= t=0Ddup 250/uacute put=0Ddup 251/ucircumflex put=0Ddup 252/udieresis put=0D= dup 253/yacute put=0Ddup 254/thorn put=0Ddup 255/uni20AC put=0D readonly = def=0D/PaintType 0 def=0D/FontType 1 def=0D/StrokeWidth 0 def=0D/FontMatr= ix[0.001 0 0 0.001 0 0]readonly def=0D/UniqueID 4004617 def=0D/FontBBox{-= 179 -216 1083 917}readonly def=0Dcurrentdict end=0Dcurrentfile eexec=0D d8061d93a824650eefe2785f13cd28a8a226cfb244e605b690d514a03c9053d5ffb59a27c= 607b230ffe1228c7ab9b2dda1ab8ffa01f9122c9d4898c675e384658b2d9850ebbbdbb5b5= 0f908560d07db253a82c8c360a988ba92bf16046f48ea1965fcc4ff31c7234fd22015126d= 93b711976296e9a5d466260a542d34176aa19a0e159290bb215c70b99945d2d7026d03f53= 6036f0754bf6555a6e214e6320dc4c9eae944798cde29118e134e4ab5bb5554c6377a45d9= d8e63f5551b6c7ded7ffc6f89811ca1fc6e4ab2b37baf863d17e09802a2af1a6b0a837fa9= 9823f96d8d2c401ddb58110a1a4ac010dc919354bb73e4181a582fdb36a3311455e9752f2= 437b105692e28d9f8c65b14bc2035bcbf15a50c76a2ed5ef9a359589bb7105f8327ddd557= 416f007891ce244b19c57383516ee53cdf3327351cfe2f01898f5b0f420190f20ce1b84a9= b9d4e9b22edb1ec2d2e6a00ce1e3198a2952f86a310a71467ccfcb7597eb5ab715c6c35a6= c2bdc7881e0364d349f32e25f9a46131c389823bc97c12db5a0d68c9f1af213f472d0609a= 0aac109190a6f0d7f9ec50c52bedc35ee3a29e48a6dbbd8e689093e8261e7d4ee666ef76e= 8e120816903ce0b4029cf9844849a2e438a8901c46d42fc13f84167318d73e017614acd85= 85a6b0c5e5b98557044bb0157818560355ce02e91086b7df0cdb1ada523f69da518ad2a3b= 9a2cdd49ec4310041aa22f3279f084e465edaccf87a67659142dbe238813c578fc1b6436e= 9a2e3bbc70aed387ce4158e706589e8370a6e1a172991fc1b210ef64cbb5d61422483b667= 8216b0aed8d6acf456cc5261765425d93a4476e4da5125d8a188fadea42761d0cdee716db= 486bdc76197de72731428c5cc1f8469afb944c8cef9011f8182ad06ae33a87fb058301669= 9bc28469dbac8aeb1f1dd539cb07adccf38ec20e101d614b5cec2360dad2e9d497ac31046= 89f0fe9df9322e726f3dcbb28f24c0a4fdd2b04a68d1a428a96ad48d8161d8018f0e6797e= a8d8efb6c2b92f34a7779ec46ce5caa365d0248292abc15788959620b6e17e2e33194c4e4= 138bc6d5301445ae90d1f5ea0219c3a8192ee359a4eed5e0198c5957b57edc3fee825b1da= 2fc4253ff412309b552ef798e36d4f67b2bbf0318d084c2209c08cf85867862aed51d679d= d215b3a1d9479a2657e5c8660110ea6f17438d2720f90c9a4aca5aba378ca22eafd2010ba= 859662e9b853e93647bd3b368db2b6fead3a7153c70bdbb0d5b817d7bc0096989329c8f46= 197972755a210fcb6adf1f5185ecd81822d77ff7839b32311e4d6d855da3e4310b29be440= 971de9b9682d3325b9fd75caed48e055ae8de6499db5a362ea3074827034f1ef7bb76c47c= d2ec2a0d91b8e56838535e4f0f45b10df90a0edc63d347c9f466b4a4ab29f35001669e8b2= c6ba1be9e3bc8edf3fe606c43976420b4bdb389ac203bc37b58524321a3a05c011eb0c757= bc63e7d7fc109b37f7fad296682ba1f2026fc381cef8cb2490474c2dc3ba255c5765d71d2= d465f46e52724ed5a741ee366491cff37dc5b076692b287c8566e3b8709b2846d95b1b42d= fddc98b87f94b29db2d5b3305dc5b866de1bfddee492ce0f090054e9885b660fa225fa251= 214ac5254de1047e17d7717d7c1b0befc25ce74a6a516450f4354a135fcf826de413eda36= b109473c2779549a2d306b31e9b6e4088e5eb59b0963b8e31781b178a1926e024dd556b9f= 08972158a99eb8788dd1355405c64542631fcc2143e0b0fa6d9c367892d02b5e1728fdbcb= 4d59a5a24bd868a87b228bb9e42fd1b3d413877df318d9813ee2a342a6067865e16081888= 87f54844c99b95a9f657bff133a771863b0fa9d96e56dc9f8892fa516c30ced4266d55646= 5dd1e445cdcf3ddbebfeea116b8fbd6e521ec64744e49f745eed98657f418da7968c4b841= 122d3911409f4db2da81ee46494590df3b741afba4081b823ccf7de4a24a610af6d3d7c2c= 6078f8782cb483bcb7c1910eca0f9b7e313f73f6fbe72b77b510e73221598ffd3607f8dde= 32533213db6e8e2e7f5f64cf9b22f0e5eef8354a6d99b97e6c2b2f27398b5ae8c37bfc43c= 6ecc6c33025df96195c79cd77fcd0cbb9b6dcfac48319c1c727309636145b2fc472a5d7b4= 5be788bc70b641344010b2a7decc1374b70d5b8a78b96adce824048c772a181647aa9fff7= 85a539e65aa6bef7d724eb15b397ba9a78af507b6dade3b139e7a02bab51bc21dbc4846d2= 32bede596364f83b9541979aa1f502139d4dc1cea676f4d3f045060fe53b1b28fb61da9e3= 5d8ca7e1f07d4568f14623301be16673e4d7e81fa89d8305f33771aa839ddb96c2b68f6cb= 0b36537c21918d914c22e1f94c6ac9cb1c26f6e41b2fea0503c124973ba450a5e9b7b6a4d= 3a9e13ffff1dea084401d670305b9b8e5f784cd626bac75328cdf17d928d13e2a50b77664= 961855ced43d1bd6c393d0abd269d3ee50a53e95192f49378a7116706cac5594dd787c6c6= fad310bf5070ef8c617e1e24370db85657f4bd494cee9a1e19efa08be28eecc282592fb01= b050e63475b4e867f2f3abcdf3dacf323103c5a0d897789a3f123f2ffaff0846dd8bcb61c= 58abd2fad291085be94fd1c8054ac122ac7d2622bb23223329da39d1c17f64ccce178cbfc= 3de296d5a4cdf18110c4af63a0066a20cb21755049abf20b16e93ce5b336c7109fd7bc252= 7c25ca0e81b607a30c522d89365e2a2d8f18a81892f449636a1e9acce877eeae1c27a27b5= 9726d8f0a0169a2afef93be31716c0500c219990aeae7405ed9922338d0d353181ec8a7ab= a89a27c1cc5d45c6054fb3180686f5c6d1c3589bbb29c69452668bd58cae2954399a05aa6= a1872fafe49b1301c2aa08330addfa04ed154a1c54a725d7c9f5aac770e95362336b0f7f9= ce6672651c8823f9a3685131e1abb59b682f553d51c312db573070f5fa2221c18c8dd8c97= e76c5dc692d7769bd86a32271d6259b34e6531a805dbbc8144959d110efa39177e5efebf8= 44eb3ee41ac27bca7a648d1de3314853ce4695e71f6d867034d4039b5aa2505eafda43b8a= 9724f600ea2e2b3a3a3018c2ec433d2fac0292cdb8a57d36939cc3c5431ac44f1a8463873= e2df0c08215b9e7f5e2e493578de5613aa284b52156896100e00ea5f89042c05d8b9e49d1= 5cb681c7c25333befd7a5438f7a1585dfc516718e39d6a28fb7324584ef63f9d1900b2ead= 36d9fe37835a55b96c15db388c20a59af4192c3f6da961e34381df5ee889c465f824a70b5= c7a4ca28e828df8acb124846f544e05efd054087b2ee616976670758b00fa2c0a24ec45c5= 80b10aa1b903cc259cc6e3983a064bd512900344e576f2507f532be9b81b6a6e7ced6582d= f9110f1431e72d9c6e2b29e1085d5293bf70cdb9efeaecfe4a41d85f26a37637a2e2761f3= 521b76dd852423fe84144997cb2e1551d67a347269ec8b8a905bdb74f23298873fdfc4c07= d8ff82e9d43cb0df6bfb7243d0371ad2d5cdabe47691420da4654eacd8311e8e5540c755e= 0f72616f1d456a7acb3a01e4ad8564f0f2f41f595c0380ce9825a81026412fd6fad5d2aca= 932e2781eefc4f73ce1413dc054ed04f85990bc5c99b2eef19a8e5a1cfad6aad93b7f25a3= 2da0b45c73823609d94dd370d65ce9840a686d5d6356049dbac7c7008f4a87e94059468db= 2caf5881d01fede9205a66ede44c446fb5f98ce3b210d05b5b6ce1bc6cf50ce7ff0596c68= 37d0b60448439f17671075f6d6ea708ccc0b9228f00791d530dc52f5de47b8e505817f6e1= 7a4b3d5ce43dc6cfd780d99dc6a876afe600fa92f3a05709e984435dbc4333cc94ecaea0a= d9dbc56b68e4aa37af12e3ce79e3bcc1e62a96810c5c0ebda80554660079067ec9715be9f= 69bf39f235ae4d39976beec1085c5d514c40abdb1e42073d52ab3ceb9b503f81c9ad8dc63= 858a9037664a6d0f84e591fed6bdb79d5b013a1fe1a499e89ea282e555996af3519d89933= 8a4162f61792c8404cb02d7b044d5bedb36476a1530667165fa44da35d788ed4e730120ec= 9d4a1a047ab73e9a2fd7277e4b4326362b4e0b1097d5c71413083f08f1f7cafedb7ff8934= a189caf8731aef7e251274e02127e5dad9c142b78e88766270691ec422058035f7c42945a= 4dff0df16ae2b99ae510f986f955df3a18bb37ad902eb91315e84f462f9b447463f42e078= c4890dd8a4227cf818dd48a83c3db98ea19f0c548cb12c59b62bc7a93c68b9ba0d2fad45c= e002c2efb08adb3c553f0107b98ad54e6521f7b355d841464a9e8b274ee4e2c3bfa1b3899= 2e3e21068357fbf6bfdf36b291cc930979d35d231c7da24d913296f60faa7bbe1b43790f9= 7ce98fd99904ac56497432954ba3c6f3a79b144b4d9a346023d2703411d49846fb05c03fb= fa6eb07726cea53413fc1fee487d112f98b6ee412f55a3e66f07d2b9c10462e041707e108= 7308fec2acc226d8604d1fc2be4e5ef5ab784becf4897c70757b256d07b6faad6542024a8= 6a43fd0c69ece78a5e171a2be8715f0afc3f03d2eca28a61fa943a447a4130cd6cef18047= e75e2e6e7803bfb129db9b4da7552c98e0b6d3d367b62a33ea178fca82cb214c2de398a85= 22b5c9c222997d5260d390e4cc41dcec556169b6c494e9330b67b447cfa6d87099b35c6a7= 956d8299dc2178893ea43aded7f81991f188caa483581ad5e10a0c1d1e4ecaf607413fbe1= 35be7bb2c440ce2d7fdb92e25f6a105fed54eb4d2cdefa4f6d1687c7736343b78635e5ed6= 135740a28fd96943b63e3a97b3cc8c9dcfccd4bdd96c3efbe4bc04106cd5c25d6d1c17e0e= 2ce00ec61fd59096096c1037d86a36cf78f08ff8cd652cc23e99731dc8fae7fec6b06aad1= 9fb9c08357375f5b929928a08a9069b4a829fde1145607bf698096db2cfa990fa67c0c35b= a348f3e1eb834d411d4bbd8130bfd9e358facf4e45b39ff11020cfeeb281b0f603276dae6= 6ff0ed45d502c1028879e41efa5f7dbe12f24e517e58131170ee3332b7e2877b1f680c9d3= 9600f3479ff2b2eb0741c1b7e6024fe6b1782aa8f073e76c2d6abcf97047450c31b30eaee= 92177d47c999be54dbfc530cfd09473bb045ce70adfdb257602115eb54f005ca062a0a5c9= c85e61083bd597cade62fe879b56db30043a45bd768f4ff77959e01bc02e9725a5332582f= 3e45d2d3905eab39d7e729b7a8e7b68771960ef11624d30c9074d6c86c38bec27aa180fca= b8a8fc9dce250fe859f3998e7dd672bf0b5876baec5d67b12bc732862e9485aeae4aae9ba= 4b5c80a5835804382d655a39922f6f20a322f152a3700866de97baa612553432a4cae9c19= 4bed2dd81e23be7a01510d3860b7299a31d4c7e952e64b91101a5ebc25780614a794355cf= e0c0ec2c80017b28fe937d714d54553c5c3712a48284716fcfcc5ff1ad69cc2f6afdac1a4= 61ce251f1c5e8df96b9e04a04745e94cd05acd4f9ff3564f8bc336e27ec93e7f464b14cd4= 6dea40d3cadc44c1373ac6e7b8f90fc24dd50284b7829c311e6f8f3f9768959e50366c95e= e8e62be53d37938c4ffb190fa10fe0a035b9d63b7654333996fd716c99dc7a89c7e6762cf= 5d7671bddb99d4556a09c7012d4e6345a09360b3b8e78a60b873f340a0f7d9e5d3c2abf62= 4c0f7a442f49f989f35cdd606ee8abba08563372b4049da87e2c3e65e37c0c5873e241c09= 724e5d7d5253aac7665fb330b0f7b1ee04d0c9d7011345dbe013a788ded8d5b7a3101efd1= 7f86fcfa5e38109c2e0f2aa58281b7eb46d1d960537917952fad9e602b410b7370978e4f4= 3b8a30bd13f426fdad25a9e3425fa8f0ce51177da6dcf6d393ae31193078709f01d04eb94= 225263f92e703cf96ab95c9aeace0df2a0bf2ea1fcc2ab38f3e2bf41eca2a0938f21289ee= c70da1ea56426d87d55a07d8bfc880bb1fcbaa522664540d03cbaf47df6f668d1e975b9be= 76bb5c2498162ddd1a547bc0f7fe80b75ed7a77553c1f6654f5ce0c454f0cbfa6f10dfe8c= fe51d1711e71c502ee161de9e019eb20789132344442a201f6924bbd533106455ed15bacb= c14150519ecb6952ab398698b7c9b45d00ae551f2d0e7562aa11a26b03c34304d77b9d47b= 538e5701f795cffa3ec5b545a02fb27dfc6672ddc0161a8fde6c28f5cd092c7d1d2f76d57= 7a3f550f84cad1973474f72ee424bc9d4865750128aef2beac93496e2412bfb579dd8c1b7= 859619403eafc6fd9cf863df1e99a3a77513813763063fdf2f27328420dabfc08c2ce2186= 88e7a30a30189ee97139e3415501931bbb55aae6d396851e67a007eaf86b74aa714937367= 74bec3f479e8bf7c24a21b2e996998aecd27bb6d225d4f4fe67e374ba65e1301e9d0a5f68= 0800b1de62f0ececdb5f73f7ad48fa09e9ba62dc4d241673a33b0855a91fbf586ac1fa57a= aaddcaf55f822ed1d3b824d022ebbec84c8159d60eb940b9a1a174c6fca9a122bb6e27dcd= 78d79faf8d6e3e85997011ff22769d230233b5cf308aadd9a772825c1030b5a993717c14f= 2badb24fea22bea10fcfcd1facacfd4bb534c0e6ce43190d061c2fcbe2fccd1d89d36d7e5= 9fb17aeac79795f7e44f39a9b7d16f38f5e5503971f4d9642ce672be32d1b29a6b4b474a2= ed0de70b0497b8efdc1f3d3efbf8cc28df8dbe49a0c455536bce883c9cd69c3097a8a10c2= 150d55d18614e352768208e0d7bd7d05e9a8342e753b3221993352919474588336be63650= 2701604dbcd5ded9b60f6058c98a1d7eddfd1f9f8a73cbf07a797545ef1204ddc3fa430f2= 260113bb5e61951cce8583cfdda6c6ff0b27f35fbf6fb874e38658bd2b7b9bdaa4ff3b259= 13b5f9ef3191c30e38484dddfeebe2e5b3e46250144cc033b3a86d7039b0a3df60b9ae076= 4f51877473435df8cdc73b15a4c496bf13f5d2d1e4e93bacaadc3ddd8779d9e59ee0f3c33= df416d6cb999963ba9e1e05181577bc833cd7c29f61eacb8c2f226f84cbcf7e9f5f7f9bd6= e0dae159982432ec9f4b3fdea134f91c8836339ea5fd20397b2fde6d0a6d10c6899ca2270= 67692384fb61cffc872cb0768790331ebc33757646690a6d4f5f2dbfbc4f81046492226d0= 2337f9888c68c3e1fee4377eadca007ae0801e86e304efff76f0bd11747aaa6087e296537= cfc06b9f9e6452c727d475308304c84b6d794358c422fc9b43c1b457d1612fec9e6bb743b= 7306c19d2beff68be89b95ac052a235f318ff94cb97c028d4b69ae5acfb2fa75f7f3903e7= 61fb20e94ce78c2631ff15e07f716b9804aff5141e32c896d3a8454d619ee01acea4f6392= a14f05dab9a9531ab811beee45d74e09dd8166e88f4c2b1995730e88374b68012fa10e9d1= 256f80a96e010cbdfb1263a123350c666f5eadf649274b9886a64793cdced864cb4353d49= 83ee04d55e3d0af2dde147f29c285923d21172d0029ee9cbbbb652068c8cef663eca99968= 450654c925856e7752782a7b8ebeb89e6b31d5c93235d2d75e3714e862766e4f4c87bdbd6= 3f706383405c5fa1950412e183efe7fefa9c603a9ae09029c21be7e13af920d7db0222dde= 4909ecca7e39b00027df502c7efcffbce2063eb929f9055f827d1ab91931e77a80f2ea635= 930e4658d00b18368fa301ba06c9dc27d94d93a93caa94183f4f97e3b7aa6318a5fafe427= 76e1b117f63497d4b8914c019f0cc839e81b2e9e210c9abc5e108f116dcc9922695743b65= e93a066e5263f09d89be0dbadebee48f3fedeef3ce8313e8b3530be020bb5032e37d9a5e2= 21fde44e8835eb80d721d041e362fa472e9a09d8b6219e3a8d5663c4a94db6d15902aa8b0= c91c94e789d65abc74167178f208bbbe51faee01493b749f3d48ea712aba03616b2decb76= d4da4e6c957c483871139c0c1a4c09024af268be5a9d44caa53ccac4c1cb98b823230fb08= 53185a944f02f62004c413e98c5b68d22a20936889b7e75cbf7b4551121bb28c94a43b370= b9cc95c5cabd1532e273524d4051cba7cff368fdb0318499ff455797d0f5ed341f1e9c8f6= acf1987f2cc272c1a83fabd5ac3426c777990f6aef268049b668897171927c94d0914ef6c= 1987d36b99c57750c6883803ead96c3bdf89df712b32df4ed1df557522097c0d86d3a3889= 837510de097aacba15e23561aee549bbb1c18b59c7467af1e4435b3c774a1eb08379c1cbe= 6b52f8e4b79e18d2665a82f1a7e85e1901ae97f6ffb3cbf7f2ad24bc866b6cb04e69f2c08= 5acc9bfe3b8c444074502f9e2f41e337b3a9f0799a6c274cb0caae02fccce1fcd036c407f= 469abf7a0346986691866a24138925d289f9200fa9d37157ee110f6361d561f1a8229887c= 82e7bfd9c6c7032eedfbea977682d9d1d60d238b9817ad72fb81b111728f9495fed5ddd50= 42a0d5c7f6ee6630a0660848a8fd0b82b7c007386625167e3ed4619a7de25721894f7f2ed= a9879d24b1f986a1aec690df4013cee455075cf985a03deabea3b24e2018b4e31da319118= b52e59b6ab16bc13797be03fabb75bacfb02432337a01295e644213ed47c7d432680944f5= 909274a9cc2d7569f46850b2561fa39d379622e60264b5089ef787273f7421812deb2fc1c= 560e18e3d77726935d1ee3d8895f3655b1e01425be64ccc04605432d2a73bb5ddfb3134e2= 5e502d1884e236856c269abbef9ed5c7cefd36f81efcb939c366667431a7e53e7c2233c7f= ca31e8060c1d35cc1fe8e8ece0bd8d6eebb118d8d660c9897f171d9cf7b878f1778894eb1= 1c4f2bb5aaf4399be89e9f93dffe5838f35f9f8d5948fcb79abd3b2832d2c5d7981fd3761= a6a80b0a4a0ea85ba57131d8d722d8d6fbc3fd78c3d6df445ced7e8038d30b848d0f05ac4= eb4f77e5b123b73b0bd38ee585b4c1acfec1906e005ec2a8437cf76991bba9e84c829de1f= 0edb0aab560d827ecf1fa3975eeef30892221ac6c9274d981dfd294a6281f9897a11d18fd= 8c4782a5273f679719349b339b20a49285674eb06e890b171ba682ef21e4163139ba7b961= 59e408b00a1ab28bf5e66e708c9389a6ca3180f026b2347c2f60467d9ce31c2b6833e0375= d2465b564581be8c6247f77f9ec3e335a7a22882bee3df66024c869c5b0a379f56268180c= 627db6d9bc316e02a1c870730011654d4a5189ebce74c9cc289c4befd68faea602efde7c3= d72d4265bdca5e8dbce133a42c25329e61e1064c4c38a228b22cf07967c0a75d302ca2457= f56703a45696abb39fc0610788bb337cb2042c327acbbc737ab771f37ff3d8731f8c82bb9= 052f807b7e519e2db9961e830ec3940f6e0d779a8169636b1790dcacb49ab21fb2b28133b= c78f5bb6f8a2dbd7cd8d8474eb8ca64e12698ae86ee0029ef990f782423cb14a614f88e7d= 0a26a1a1a6fc1c9d0ab7b2750ec0c729853e1d2070501cbc5b6c3b81833c6cf160a1a988c= afad302e3348c26aecf59c0a3dff807fc5c99ec5ffbeb1b2b6ce49dc7d166fbb9550ad97e= 1d87768de9019a3652c21cbcf380e4a47486fcfc64a597f9d10f511631cb222f8d06ad54c= de347f0b0a56706d82c4875e4383c5998a8d66aea825653a1ee2e4622b4fac30e8433ccb9= 45272b0e8918b7b9e1d112dd77f3af6f469f93b0f817e41a596fd3533da39f8b13a72b9a0= fb86671444a7e162c59c585d401ffa5292987484e4b2d5e6d9a6fbde7b403f40d353b429c= f50882adf5ce54b8d5df1db38731998812ecb1510b584566ac32352072a79019338ad58d8= 4788539b1501b102c3813ddfbf59078e23ab19d13d3112435f662fefb692f8281ed7c78fc= b268869f04c40009170cbb882f51674c687bf6a8fce1b521b8e2dde68998d48872ed097c7= c5f16e68423d472a98846ed75049c172e0242bb023752b43857572b11562d776de9f24490= 328fd81c8b33c9da5568fc8a86de63bcafecdf64701a4bf32f18fdf4505d95f3dd8ebf835= b1c13df969473ef5a8e98a8a012462608224fcc618e1f642fe404e27073ca9bb32546949e= 927cfb91616b470b604544f22f03335062a8682f3f9f7279c59700441269ddd630256b1d7= f958e2194f18183fcffdd4a0f280b0393ce397f830831328394b326307a83137647ba681f= 1f2d00271bd5034209472bdcb559e4682d023d59010a758e756de53a7b58818ac581f2086= a6a20d0f1b737d74c38f7ab2e849715b6b60fb5f1d680bc70db820e23662a95ea0c3a2dd3= f2570c9aeeb731c6ca12ed29b2a46237cbbbb4c82356cd04275466e11e9819828d711a227= a65998cab8ac2b6db111c0f13b1002dc2610c741fc50cea718752d6c7e1653afd58dfc21a= d34eaea355b801d221be08f2da475b4e00f5025b3a7e9af86068a1743cfafa3e4ba93100d= ebbb0ab4f7af7bfffe461ed750d777a8720c18671c3bf3f71b1eb050537a012382d04a7a4= a5dd411068444e8d5a9b341724643fa7ad0a58c96d93bc99dbf4aaa62f099e3174016efae= b4c368909761f05ccf896f2a31314ef72be1155521353ca0b071ec6120124138f53a65fb3= d1e3b2672b4e04f03275338ce9c0f8aa56dab58ab0b1977da9f36a76e02c26debea442dd8= c487b20b6ca3af0b34767adcc53913d2c4bd33c5cab0655dcd05aa3b49f0e240537e7989a= 96d157b6a44abd9570277aca7f83f861f6457b2644750a608b25168729ac9d73912ce3b6d= 1373bef90be8afc36d8a4d8e0f7d3e1f40f51b544774a6758f3e83ea17ed1dc8704d4dae1= fcf4d38c9fb53b92466a89980db297806cf280ea63cac214f61a3ca1c1778630961058350= 9108554d86158bba4a82c48a9ee4e4b821a7879c94e4a2212d03eb5ae26678bc80d575067= 3e917826cbdadd6c3d21352cda3bf6f31881db9bb751a8124df22166b951b68ffcb077c6a= de3b38b66f88794c7e13562f2aac0a8c7e3a5900dc211f04070a3ec01ef274dbb9bdc1886= 7aeea9ff257ca4b617036ee4c8f0b25293a00d750dcfabefd73cb46a89b936287b58bba7d= bd4cb41ecdbdf331a59a5569a72d5fa0a4ee481e9630253a72e62a5738042dd1ce54d5d76= 44c965980e4995ed7789843dc4a0488c5df5bd934dc5c2478e70663eb6ba14c4fc187ded8= 96c8081997702f20a314a69fba9eb3a0eb57a821fdcf329f9e32920c2ca387090679aa630= 83659467a12f35e4571798aaed97e2c80ba02e289355ee487c48c38c5b06e9fb4b7c0e190= 0bd18f81ef1917bf00ceb52097245122941ee654afb9c2a2d91d7d88a97c79d029fcfd76b= 2aa2346a7b5f2470a9be11f445cde15ee2032e4403f7221e9dcb17dc323082d48e67426e8= 2f6cf2543b78187eb148b949516909bae090329518d9dd44ba0c1e0a8ca94a093a24340c8= 4a097965d581c59ba864da0e77728eefc911f35b92db3312534262b9928841e89cfd3bc66= 0f847409969cebfdea633cb644392d33fada6cbb00197bca1d9182cb923df7c23f9565eee= 4e6f4a4e62e3a7b23eccba87d2cf5fc46f1e7a50db248f23ba54b063a2036d790fc7581f4= 2934ca417ee213e87400ff4fb51538416b85bdf17c69bd823bc34580c9d9ac9c4fbf454c0= 76f627dc489954c013e6e25b1f497b3b08a3c57b301b0a20bb3dbcd7188de0d985ce8265a= f42d5228285ebf4f2626aaf94adba260fbf55d48131a2033be920b53d1db4fba03e162928= f57fb312b0cb2cdfe38cbb75f55a225f838413b7530541ebedd63192a945c3c6b52b3b4c9= 957cfc7ad47d7c352f0dcf16e527723533dc6e7f57bb3f0c5094f4cbe69c4a71f62b64572= dc70a2e24064897aef5625da4911f4abe56f9b6b93d9955a7243d87d43cc3433a4f0b1a8c= c92cb7b748cb350bfe055cef2998e849f0400e8f5e4c989575464fae2c6ad80753754246b= 81d733a0dd5c4f3004a499d62a5671336daae9b722673d83f5a78c34e5e13eb1009439fe0= 82ca626e43a5ec11335ba27285ab088111be2f02c395ffbea5ce73a9df7178203f8da9420= a529a603aa13408f1b9cda04e711d697fc914f0886a568ecc2066a348010dce05330b1344= ef8261c6ee6edeaabf570e8fca91b65caf79e6139f7bc4359ec2f0ebf1f5c9cfbcb6a03e1= f78ec090d5c92eba93787a5276b3773790d061c2fcbe2fccceeb64a236e9153e803564680= de17309fa276330faca76365725a7bf9d2f5930250674ec9088b8d361ebe611daf73d201f= 7a77c8c25ebaf92a18fb46f76910b9c400933d0a87f767eaa2bbd687526c6e3d3278849a9= a7fb39ed1c672fa16d7b88010f7a330e521f14e42df0ba1945ce6dbb261ab89f48d5199e8= aed6d8dda58d8498cd90cabebc0e4c60f8ee7587abc5101969c45648082b98334fa89266c= 6a23bd5c631afc6be152b2d783bfbead85b3e22493efc4b939e7204f7ec20459b3ff056bd= f4b4547864f8c6cd8d486c8282fed9bb31659e06d2110ddb88f33938cf89b0a78e7a2fbe3= 93034505f7927e2858aa17063d0a41e0a4b7eadcd39c05cfbbfc63b11cb2ef300f65b6f5a= 5afcb167c5b62dd55242fff9df30cad4a89916dfd92ed09181a1a51577ff9e91fcae5bd4d= e50004f0ffb9d79e1fc2e05d1ca1c917383607c0e24a93110a82ee91e7ab3eed6df4c5440= c564e47be92ecce66f7c36c3fc6b801aa94527613d3991e676d4624c9fb316296cabdb4e0= ef1a3f46cf77c83a061514bccf5f7e4ab6e2314987ce94d900cf02270e6e16255e939b356= 3b17dd40a2c4604e009f59521ac55956ee37e5df5a872dbba9fbed8ec599504f25c40875a= 789892ca0c9dd9162a6ee3c0a8ae128beca317d811e725b8e30adb115629ee7f33cd8f945= e430b0635a3fae2519e6c2c4ac3c9ff22057ae3a45702b542705ccaa1bf07d141a2e82a2a= ea2cde69de0d1c5f6c78efebfdc80720c3d60c21a6ccd4c90b172f0a6b9d05bfe050eb31c= ecc4285ad0ab064e7151278b40283ef21878ac7cf9f29fa7c4e4126745e5c7c38eee2ed99= 1c74d471e947914f526ada124de87abb07d91d0cdd0a6c9568b5ac8b9b321801b00531b74= 0ac01f3144fd3269f81bb0e0dac83d19000b8338ce51d190bfa3c1892f789de131973b9b7= 92a01d4eb36b31ed4572fc330341640acdd1b54ea99a2eb53f0c450fca8cf5fcad4befd0e= 27e1132520f228311e905067a78038cfdf3d4935237c66c3a82dfc08c3cd5eca6b83a0a21= 2278aa856639c5583af0b950679f09dac5c5158879f3b4c046af6b287c67f954a8b2b840e= 9dac8a109cb4dd37a784eeddb688bd9be82f95be224fd67393d97e96d8dff8be1cfcb039b= dd1770f9f148a7d2b4c3def33fef78c1e5511e3d77a72b9686e8ab2233ff0f53cbd4b4c71= 63630134d3bedd15c582689019611591f5b2508811b22041682541393a767fc95b3804a80= 66c344d139a6eee13a5c19aab64984383f31bb44565858e90740e26371d8e878743794fbf= 73da83c9167c9729a759a762dbd4bc456e461f61109e62e099af2fe849188b894dc3205c7= 0c3ef9954ce5e73a7af7508c762f2a253e9daf7d3c2a64788041781d0d0794628a32dec49= 1b3ab0e2b2afa5fb706a4a3b858a1839b747b87df99f75783963ab2cf77167f086c3b9b54= eef2246935f86373a6dc862f3b1fe62e8c51469a636db0e2876e8b24e1d8f6a72f9e3de36= 1ac109fe840959af979388a5e97ad931c1df04b9564e34e8a8904951bba6a0d16138d8a37= e6d6611820bb336148cb98184a6dab18a5f9c1a59c0e870742264f12d949500723b112837= 0d386d3e033e89b4c9a5471e6e322f46b6aca0f4cea46ffe6525d483763cff17b6ca94f64= 82dcf983fcf9997832afcad75a6ada9637dc10b6aa50b1c15988846b9d303bc827493f681= e93c6afabc2daadd8ebddf59d27e46314293238d061677a0cad631aa40ddb9fb3945fe451= c4c0fb90789293b292a6accbf42471610938fcc26fc1547024d7bc029ee384fedfc33fab5= fcc0c7381f7d6a6b0582437245f43471778086998509771a15270ad39e2429302ea91a058= 0b5f40e6aa3d93624a5b398ac2769b73f6d9071fae4fa7e09770dea3b41e58b2b1e869a0c= 67ef1533a42c9fb2caf077154c5f50b05151cd1586f19d06cbc7702dfa3bbeafff04dab1f= 85bc6d4253f0a3e9abceb3fe2a8420e01e7a03bc9f71c4d4fa9a47e49317002201fc1912c= 725a7c22eab316b4de8f6778990c86d17c94ccb02ae2e28e34dd8e2f16aee68ef70d43805= d0ab1d86874eeb54dc2b0d307fd8c6408f399049d1c75286ecc5d0ed1710d609da8539ad4= 5bfd57e263afc09f2e50e317ad5bc6f0b6dbf7bda7f2f247dba190dd27b68bfbf3f3241db= 5521e73f4d98fda8da571cb4e64406a703d91423fcfb9a1c0bc6e4f77bd67b146728404bd= 643e2bfa8a6b106056159bad07a1ef3b748a40624591eaf61350c49c45e12a6aa64ab847a= d0be7df3a954c3fc9969a613ff6d910f3984014508ee82fe38fd369abb81b023bce6d2727= 1f0e080bbaa86b2ade06532b67e1186b874d5bc597f0c04385e04d575ad8a2211352e7247= 8cc52f986c5f65f8e9772ec990e30c23f51b98da3bcecf7bf8d11939fe07941e9548a6f8f= 4e5427b21959e095048b7e569c3a2a94fb6559248d0cf25c2cd8982f7144199f36f45c366= a2ddf1225e576333fb4c6d1a674b384568e69bf78a6fa97b453c7b02c5e5ec9bdd597db20= be3f1e04373c4c2686bbbbb446402ca5fb61ada4ab1884e2d239e35e723089042877b30db= f083c7632e2dc419c0f24a23ee464405c666c594509848809aee6c0ac7f41fa5ed0e8782f= 5a658f043cfea03c78c86fe037866a11ac63be0e3d4b2ebc2c59a9a4cd9759d6170695a53= d38dc1983030e4bfbbfcda903c6394ebfb8c0bfdcf53372f8114306b283aa45cdfae3a7c1= 6def7c171ae24ba5db5d09990e9e90b01246bec79f76ee5a4500e5be0fa5402634e7bbeef= 438fb220163f92614ab22598310d5890070f42e3a3038d26b9392a0271814b84ac8eea77c= 235e7326b37c27e6207ac8fde9f4e38ae91919641043483be774502b0e318a8a0385461d5= dfc62a3a6f7984dae4a1589711a2a2ce9dc19e3b42e230bb1e2fa3c00c650272a034666e5= 237bd9570d8b824366b856ce176b02568ad9671d37e57d4fe9191c41dd6c9e2b70aa8c8c0= 6b7dfd2848254afe5762978ba9bcf56e2ff809d9fa6699e7b64d4ee2edee4cfd7cdf66f64= be2d41c95cfb9379083de9424af4eb440c965ffe1a5d4769d55d17bdaaafa06d85aac81f0= 493e6ec81e7ebfa574a18aedefaf8eaffb824d9ac1c5b14824e93932ad04dfd21b3732fea= c0e5a01206447658c0b96c10f51e94a85eb48b81ed88450a3cbbea384440676400363c403= fda6bee08f0b7ae66a2ad9e040ac5df9af625abf7fab0168e438914c0d4812a6ff99a2868= 93880289106a870e98e7c6cc7600243bf1e9dd5ef32b7ecb788714a86ad860f45de8012be= 4590b5d6aebc9637ad90cb6c99b500b8f9c453de4221a7c6a0edf8949ed73f02f68940a62= 818dbf0392f8b4f491a6be05ec88f0faa6f605c8b7d22c7a34a494686c19e7d985ee44827= 2d37fc981026f65b6781c2fc39350a780bfc1096a5c6f9c3b8be6c0ebb5f0fe363f24a2b1= 671d0e6ca7def73b84c475f65b065296dd3a85746c0cb2817adefe898bd487746fa246030= 0596ad18331cb6dbc636c6fc48093404f804acab04efc20497729713e834e946e9a0e8533= 564f95382c7b16bbb03fbf8b70f6c62009cd205b94c6299b6b9b3244ff5d9d3822a96e202= ab7c4332333b1c403c49d581cf8b46b49eae1dc6c56ebc3ff41149d8776d395c0d53c4963= 53a53615937e437bba4ae65c0edd463001f3b6e02dac7bb961f237c376f036587dfe999be= 51432582c1012621ccb104ea93d1036f58ecffd29db78b5507339d3c0b9bfd2f2c3b91956= 1e997365f476da8b15f7b9e75acb7e36831f4a45457b1a58180dd58f397e145d7e0384e12= 852cc901c17b6882b701da329e15bd927c18165e65db36c200a00c54e8a077871d0383b0f= 4b598b9e498af3b82feea8aa102ae334610a0929e8d10df51f766a8e137912f7a50c9cdfd= 30ab6e6a02cca37fdf443f3a93be6d9e66d9a9aa10a62b927eb6ce3f6046d1f2788457e18= a69374d431478fc71d1b9dfbbceeb401b886231f6e414f5ea0d0d9d76bfd670d672391cd6= 5cc5604c2bb1413b4bbebdc6702048cd4cf1dcfdab8f713bce5539403dfee17ddde3bf022= 437607a21b0a34023856b8544e3e756228f5a51ffe4df8ed31bf13da36de9cd23069b3b08= b5af5233b0e373148edd759625c6e02ad38c853bd1126a375dd4041308e82c84df298d911= d0ae910f16cf15e62ef65cbc11d4dfe9928519200bdeffb0e347c28081ea8c5a2af2481fe= 2612e1a4440f15116b56cb58bf2025cdd87c07f92602663137a866a1756ead7f495e8c220= cfb597dfe858c038f8e07c8b20ff0e4bb2fed1f9b40417e5a5421020d833fc634fcaf2846= 215ce29dc463b0649a73725b8657f4b1a529bfc5e74401e3db4ab8e45bb380a669171bafe= c2c75e272b7705c847ebbffdf268cc14c3e10aab75b1e7e960f3d3c84b46c55e993f75927= b0d0c9e9fc384314ef0a29fe1433b2102d3f0aa50a96e34ab9f26d06e6ea10ba20e24192a= e9c3288509c4fffffa5a722929444a972ea58efd75fcc7438a8c81463bdd4daee6b95631e= 2a32d336cb5766feff39b4738085d9ca3d34f6b54e1a9a84abb11e8440c2079cd600657b9= f39c977035fd9742f3d801042c329da4be45e53c666103e2f32764b4751a39dd2e2896845= 200908f35f744478e5fbc22b07a195bb4e9a1e5958ddf08155968eb0a5390483089ccffff= a7ba3c0b07b206c64f92619e0d8fb2865f37e720b649c77e1760b7b836e3b9f345ca20696= df05fc2a614c007bd559b1285a220a9f94563e80a48afb598500a99a254e86b206888051c= 5bb3ea007db2b8fb52fb9d4e7a40d3619267101c280d8b3312b5a465cd46eee3c67132276= 45188565017ce6aedab7577e775c3ff6547212ecaa7be54f63576deb37009951542eccd01= 62f8eb1d20514e65a65320c4839b5a64cb0f60214dc6bacb981513b318b6b3b4152bfc562= e1c169c16d7942fbcd97efe5234cd2522690ac236b6e3f5808d6d23420b4c9fea53ccdff6= 60ce5938808fd4651a1f067731387bad48e6673e343b76fd190c62b5239f867e94088dc50= bfea9615856cc3dbd45b94f57c4074c82fc6b8fb610bc2371cb70738cfb799306db9a91d2= 7f2f18b1818f63b9ef8609ce0667f8a41518bdcf6acbeb6bffb7d0446680760f504f57fa2= 84bebb5011679b83f1399674ae448ef286cf546e9e355e5995f4cde3d5e9dc305120b07b2= 8c07e042288c26fbb4d27f6c8b1331e9722dd4c32999a54d4f6df1aba9fd5f953131ea300= 0be6a5a6d482784a7ca9c40593c54a51e709c45d63a6ed3cea3dbfe58b17cde60a699aaba= 47ff5c0fc49b82a65c293dd811eb51d425b0090b820148acab1c837fe027b280b5fabe0e4= e39ba4a8072d343a080f430653026d96131801626157b666ef1e8ea6ac1efcc8517f6a47c= de94a0f7be50c33acbec54e183e7c087d801cbc5f2f9fa93ac215b52f468d344dd57b5215= d30772fbf725e9c26760de10072ceeaaaeda99791752b0246233d6737c4f0f3161b9cb7e1= 751da7a00045f70a58dc693ec5b612152f2878e3e75d11396ace27ff96115820b365a792e= ad3960337d10fcf3bec1ee0f49943820d1d5236695bf211340b9e1bbb8845ec4308ce5885= 55c9710160acbed12916bfa2e3de505817cf5e2ac3942df6574ef4541782f10c469e497d6= 9946bc385170a78b1ef5ff1a36f1d0437e2a8537084257289ddeaac1a207cfc389e7aa523= 53a3240f6b1069da9a0db0d94be619b1257bba4407835de587ce95db95ea053482e3be2f3= c395607f7bf7c8cef6a2bf2a7f172934cb4e75b6e63096f6a295dc75ffa255a256106e765= 78878e7c0d8d65e634c57c885d7a698f6b2859dc54591097d1285f33f345375501aa09a13= 008da1dcc9ed35849418f9211d6e0934ec353c5884445a2aa24723522c4a9157219538990= 0874a22aa2f3b85673701ec6d7b3a853a872c2a17f9506fd473d2be965eb80e82c855e004= 48028d548d7757da56f7d2eb294cee4c72aef3241dff0e35a372519a6249cff71200eafb0= 727207a12d23ca50a5d1a61eb2e9a77fd22b126df632143fde0e1281e2d0a014e13701dd0= 1df30bd4cb3639e79aa142bbfbb9924fc5bb6085e79d225514f99ddb33b24f45e6023e47c= 3ff9753f58ac967779cf7bf44a4130ae7a9e11677ee8dcab231cb8b735274b5e4a20c0e4c= 2d2ed234d446103a4df2ca2d009dcddce79cbd87f00f6411631e16d8b50f32a726b3311ba= b75b9972280dbc88fe00890d5b91995ad5a6789a506099e6dffdd7b0ca8b62ea9e79a20c4= c26e217a92e3e73e10f6579a8a144ed15a699655149f6a7ad7b7b7564be5166a14159fe6f= 704b3658ddb42cbfd6a739e8ca5441dab9d57a47a74acaca4cea367eb367ad2cd36b19440= ebd4d7c0826556524578a7a63cce6e109f67f90ef22c088e99df0c8cb3405911baa581bfd= 0be248dbac2bfe8436dcdded2400ce7f099a4650e456669de2bf4838285e85d959a570331= e0cf2b88fcbf0e46fde1d0b38ae1819cdc9c31c0eee06c92de26f52372123ece408bb9351= c023f944fec24a61e4c123eddc9a403f05cc2842e6134a19ea449ce6176b131ef1018b18d= 47f75db6ba7f6bbb38596f6259a9466f18b359100f74080b2ebae48d3dedced91d08408d2= ceb098771cbdfdefd3b2cb1fa8541ca001ad1ada61f633e4346621c9f5e21aae0057d6b4f= a930009a18475038b9ce8969454f9267a5a9ef8748debdd517737f5c0943685a32ef45ceb= 80259c956a0ae7fafc68ed182d2976901c7312ddb8d391edf74631af418d88963eb2d2257= e96707b4f1f588fb9ff47069ee675d3dfa9202aeaf2a1b0927e699c857aff25d2316f75e9= 4d651e4cfead2bb60d6e34bbee2fb0fc9c32db276f3b665bf15defeff6b6aaac4685c360d= 770466528310c579c2fa46ed0175ea72d0cb50cd15c9cb337f0a45e0d9f184f20ac709146= c3decc0bbd62344e0ecdeb3eb8509d088f4538df3ec5a15eea89fbc20922b12f13ba071ff= fac70c113ccb8c91472dd0af9bd1f8c652016b39fa3f22c805d7c31d191be7a0d7e8153d4= 5b4c38484e046d434cda68a6a411226629dd22de59be1eef757d693baf046a4dd559e2486= e3989851376537e367d06bed5617e6a8317eaaedf859b98398992b405bff49e8fd5dee85b= 2e421c523c6e6daebb3312586e937405dcb9227e96096f27dd779114df824131bf5f717ff= c280e3efd735547c884e35e7cb9b48bcbb65fda02df0bcc32a93cabc71e3594041d74fd7c= ce03bff8abc48f06f2061cfed931cc604145bd7048c215e151649ec9299147023524dc7f8= f73ab93069f7e5696b82ab22f56b34783d660e4f1274fdb297e9e9964f5aece33e918abda= c647dc78f624bd511db893fdbd262def6119d20ea206b5391803f5dd84ab52c47d9c88c70= 31a7446fec041628a94098306afb9e8f0915e712b0c469a2c73761ca1574e1a05a78fe945= 2f8cbe31d639c521c41e7f3d49febc70bdd4ba0e6da88d6f5aada525059cd0c788f240c10= 9c3c1344293beb237f98338d17cccf1c5944290e87e09b0748633a39d36557f1333edd902= ee1bf773fc48ecefad7493975994c37d93447318c3d2b3c599530ff59703fc91bbe7ccecf= c88075b36781d51620ee3be15f70990d0caa59a99e798ece6dc8611bb77c41f4808b2e9d2= a39e75a1d712598b7a18e982bf92cb9dc2d551806b542682055c9343bb6b5c88630ea5714= d436f8edebbdbe42ecdab6e44f1431e1dc61417a4ffa55a94123f5883d52cadc45d307021= 739ee2c8216f6a51bfd52ee022a87e97d5d365146eccef0d2bb0fd576f98ed5e41425fead= 91caa9ca59c6830134c81157ab42bfa5829adc3368c966ec9554c972fadbd9a3582a09a63= 1c2af85544d3574d146c7044dea4ef093d26a1772d1adf65a2ea6955970ae6aaa25f5f77b= 1b31a979dffc974444dfd45a7df3d7b1bd81b18589a99ad98120cc48b8c43630870e696cb= 6fcef43991860aa3061de73d357e2543b6ed09c7e01ae6dc1a2d31d661cf7053e11de4b2d= bf9ebb6f8f852aa0729e61f14b18fab8a3a9b0152809e06babe233cf04dd130e6af2a6cbf= 3754c277cb9802251f04ec4e48873aad75e97e838a6cb9c04260d56a17fbaf4c602e23e93= 5e1fcd07d218a59311b986ea1bb6f2fe68971edd73d2cc390edc64f201b3c2ac4ce01ecd1= 13718f7d03e6e8bae9d945178bec22e9c6e507aeb217748ed4b3d1d7eff2b84fc55b4f6e8= 010e5b853705d687c6e105dff706987834166ccd746a25d506d1584e4b1d84fee1caa797a= d404db80aafb854a3a1c003ba8764cbe04536f2c701f96a18f061d1cce419d4eaaf16e6e0= 7c67d8520ed7ad7cb22f68b4409cdff4cdaa6b4de9451837fec5a8e2aad8b6f0559fa51e0= 7c8cdbc176266ae9b5f79202dd36aaedb01dde04836295b923b5a0f499d9c91bbf26d1541= 02fd502329da0155bb5495cfca1124d3b007eb9bf4e53cfadb668364b7cd75f8711ad7f11= f0376e3cd3009856052da9fa634d82ac2ef2fd08e0f665be4d08374a0daa2d0950fd4ef51= 4b238ae16698350debc987d8223a3d677364cb49e174a256406d9d23809c153ef686e4423= b32d880017a15cec2302bfee304afecb472a94fd7c39732a2c9f433c44ab2874d74f7185f= f9d186d4bc685e3e16b8797bd17d26e27999e0c2d310338594a8e8525b58150273edb3a14= 42961b59cd5894bca9d08765e0f017b303e69f744053db3da958390f756f7f392e01c49df= 282d49e515377e582f8db90c97c38512f94e9686229028abd0aacf2153a5758f5e9f98d4c= 6ce9e0dc557208f5b91eb5c58c45c2b343d6aa1131cd65fe50f8be9de2defe96721b1e8cc= 7067af9ae531c0485f4e1f9d6f9d96d3ffd5c778ab3fa7ffba24a4581a96e075e744a65a9= e3346efd6b62be20817dc3f48fb4251470477dc6d441ad731e58f8df98d87ce1528fe622e= ab10019cd1b2e052cd25ab92c670afc56d992de06d4eaa88107e992d4c63a21fc5c9673c8= bb0cb191c98afe22a00180caca7ecc2d7517766eafe120893f4824b95538d791ef75c3d41= 83841eb0348f8a25cfc8581f394d1ef3f8e7bc07034bcea41c10f9950bc7fba17a0b966be= e37205b671e63e276e32157fc342420a2656052d7626de7c82966e9ea1609e038b568a847= 4b56ff641cb8dc5eb3482004d0483f8799dabbd15c9401b646e150ee89b9dda235d9624ee= d37d408cd1304202314677d41e35a1d5e75f9fdb937934ee61e3dcdbf304ec26ed9cdb24e= 79c7b667ec5dd808ded6b1a918ed54ffb3f772b38c4f3655e0a6c659ee4f220a46777c534= 013969495f93b9f5eb3be9c262990b57e56252781d2693fc99e2262c3661897cf4182c88d= 89e8a3e50816e4b9c172f2eec388f5a10c5701dfb00ef4350f362a184fcce0fee1c5beefe= ef4beb143586049a56781b82bd5b2273f8494652249e655c573e21ec529b321c8c287dd89= 30dea30ea37ca23dd513345a72d1d7b6d9f250b4186c73634b8f6702fca709a1becba1182= 3a0fc3c80624767d86f5b75c6c04d3bfced43a2e02a34d54cf87ac0c8f82ce6cd6a324f37= 3e310c192f10418ae9e62bc7a0c0a2a527ecdbea7a3f240a0e166557c1b518c9079d2da4e= a0df0268dc3c5ca18ed51ae12fe04ff1942399194bb21fb7dd204e3f77f38f0967ee32b1d= 3d19a7ff6dbf7fddd0b9b27f966ab6102735444cd7eaecc86724670cc4d1719fe8801e1b1= a4234bbe424327176c170ec1af14f64f39f52d1a3d72a4d80a86b7402b8f9079c2370a3ea= 0d656d2747d4fd5a0a3503d5cc2637d4e0a727c66aa1a04e9d918805a43f35454e0654453= c08ab46ca32aa4422a0c1fd7ef1d35133ee508e13d479797150156a48185c1b472d16545a= 2f18d84858ae9dcb2fe20a7108a570fd738a729008bcaee4ffddc2f59426d81791d53bdd5= 7cb352e310f2cb717df22af3f6a214ebde484acb1e1ac3b75f431a1e679406fd0278d8f33= 2e6fd51dc32ae11d96bd3228eb497c390abb8549f24735cf75eb8ccda87ff1b9f2c6aec56= 2ee99adc51c2ef1aba5cf336713e9cd95476d0535465188721177f3350e5d452dbea8d966= 461924852228bceb4ad781ed3b3bfc2011856f679182bd611fa539dfca59301b26b1106db= d1ff6d7367194239d28957c57c62de322a133afa25d4ea4f2913290030c9ddc04c896ab66= 03236abafa95e42da56aa217bfb6831437d17fd9c95ffe38e9bf6452ff05ec9dc9ffd93d0= 70777c331eca0f9c14fb83d60923280e7e15d6eb8642811e9e1ac33ebe9337591be847196= d702e765aae289615ff91e6605d07f6abdc54a289494ac9df90bbad701178b0397a7de3e7= 49947ae564c31b24ca41670d8ced701f682fd0e15d41428b02fe50e0e774656138a1a8376= c8d7a9a8cdbd739db7b1450e91ab9b04dd56251b1ce89e3653651f77f9872fe0e8e7604e2= de330e28e906492b841be69172a52a1e61b287be7c6fe4121b25b889d0596f7511c86c286= f75ea0a7b91d598f7c9e4a6a51b051a56226014c3ce6a4de248e7e0fb2020c2a520b8078a= 068328545dd0e9a5fa3a6e112b8d3f9d4b844a7e1621d377e3d010fceba6ddc2f2f4cdf16= 556a5a3217ee0dbbab8d0c75f7a8679a946bfa267f49d56587ee3f8003a43ff61c3329481= 6cf81fa72422f6b39c85d1fc179a6bcd289f083dafb087b0bdb32da4cea9c5899c0b25c30= 31ef73f3f447231bd3fba620a1596f74b81aaa066f3626c79d7f02118ae1e66602282c19a= 4b79cff58b73abd2edba3f329b71981cec71365a8623dce95692a603f97c409150a34b911= 2d9ac51004149b8c7940dabd2f8106e27b203798ffce48ac5d12d087a21895d0e9aeeb678= 61937a8443d1c25d516b44834db724f4e840397620753c2c0c30acdc02a597e0b7ce04286= 2438150bad82443e66ae124c03f93dffbf02ca5b6515b983820c16ba5c6c3943ff9341974= c52a84cda8001dcc51f6bcacf385a360e11bc82bafe733fbeb07e0209927eaaf7510fa19c= d002c9ebd92d9afec76d3f0276e6b97b23c2d8ea3b21e786269009ff29de029db7037cdff= 3a1efa24ede5ffc9a9a68e231da65070c15b8752ea19c417b85c014547550be761eb503bf= c298f3e515f002a79f0fdd415d90d00c05ef8978e96c3ce1f0211e9dd76c01c91d50f2a41= 3f88899903042c7f673a68ef13fc4e48eb96ba057c6e79bbdfbd11b49d8540fd672767542= 2b2a6ebfeb04601ea0008bf094127c914f066a5760d31d4a9163bb1a041f43132d0cf9a24= d482131714939596fd540e38c457c270532a9d504be493e92fd1fa7b7be93d74b60fbb46f= 13bef8e4f54ccc7989be8b0cb8e291c51b10c510f6ee07cf485140daed6f35c67dfb6eb26= e5424ae3970872a5e900b0af7cab3cc7705eee907cf74b763bcf995a06f8257f120e28b85= f43a7c1f5afee8515c503b249d1259fb4f9e72e158be5ea5f05c640db01ffa6b5093a5cf0= 809e4ffa3a9cd13f4b098f0b6cfce5eda5ae73ffcdcb6514450286c21e89409a4fb5f7004= 6ad8659f576af1b77629c3d4bcb27ad9cd0d8cbd4d1ad806c8b24ce31211dde487c4dbc66= e62b455364109ccee95b100852e88c231ec9892ad18f49a0ff80c9949d6f7c3957d1bfbfa= 6b2ee824fac9c2e4abe49383d34dc84904c805f2bf93ea938ed4b9133fed8dd828e28eaa7= 0298af5db13b4a9fd0f1503bcfaaa189f72f540a237c493963d18831b7b242b3cd0fc0940= e8a0ae0f67f56cf383526661ae7aed53c05471fb43ddc8d7b4dff929868c35ae3811f94fc= 981b2126c6e4553912120a1db1af432cf38a7beae960850d966116368e9de3571f57aae83= f6ad1a325c4f04ae32e680b98a4179c7698313bddc61008623163ec4ffa87bbc056aaed1d= 06e9485ec1611afd1a749f1d1f3600c1ff4fbb2d0ad81d6c9d0ea20d862cab106775d26a0= b3d2d7e2bb5af8b4da87864325df361973dda1d2414a956e71a5af6cf7a9069b99555564e= bdf4d079ac4069cbcf21b9085c4bbc639e0655ced6f121e52d7312352ebf7022db9183b94= 24cb169c9fc1d4cefe0a4f6f3ac41305e02ebd17f546ccc9254093c12f969f8acf4aedece= 6eaf657f9a02f4b17180aca378515674790b7ef794cf17b1db1936ed3114c3bd69448d1c4= 8f91ae96145850189021d0297df0bc7bff04ef0ec401cf47d44e9eef88685aacb4a749194= 098ff6377ed68fa07c0719cc1112bc6a53ece42ef4550681d7db7326cd077d232986de1bc= 407e686dd944e6e7dc4df39ef8a17a6ab60fd8c0aec1387d0dfb2e7e6d6184dcde73be500= 9fa5e1ae2ba941c9f8a40d2fc458f379d2b2db24d7cf2ffa7d7298ec3ac22167498480698= 0c77be9701feb57e9ff6c994980223c09054cfbdde4d9641f541254d9a0d50bc4836f74f7= ff92001f6d9d3b52b5c03ab4b302b0cf4c98112f058a54a73b4a4f60c9963afbe0608ca6e= 6db2c3146a2e62280357ea032166f2b5a8e8cd966fa1fd05935419e84665de4b978098ce7= a3e28976f5f92c6015cbf368e91a776014f9498baab83bd906d54402e45cf22a870434e19= 9d1562b3a1ed155c648d33e2c390fa4edd8ef2f1a2eb0ee11f00de0a61b88fd31a365c959= 7e247073a8f7c114216d2ac18bc870e31b3bc720a27fb70436d391e918e2533a26d2ab08a= 494306999121dc0345395b76a83c2874a70be7aac89c4edef526ad6a8f935374aab8878e8= b268233eca65ae16f524da0e9675a03a7a57b0766a44a7eba62da13242af7356dbcf8c192= 7557d2386b142aac42997f21b01145d59736a7ff1aa2aa2db1be481606bac2ce3256a7801= c591717d985ae9a17312b7b096ea193073bd579c20a9bb06ca14f4a254bd71346998dd1a6= a662ce0ccec2b28f5d1d113375c22397ab466795c1a7ff54b2ba6a6778581aa72eddf7ae2= 1d47f7f43f19fe08343cd064c7397bb37507316d269767404e16a4981ee1476061adb199b= c213c1fbd1dfffb9c93fbaa8240fcf53cca6d2c6075fd3e2f85d7c5a40b6163d8552d04b8= a31a9261c4fb7153f406627286e534c0bd5e93e4691f1907d8bc42878d90a803fb1ae4f91= dfbfcc6a3df6c37abe50b54693208fc104893a0c5c3f4304462ae1cf3ddb02a72a45c0d04= 5c3202cd484b1cd23b930e62917eebe2be5eb3b7b97b0c88201417eb35fb5310831ae616c= d21a47936fb5280f0b9ad6b440fb1b405feadd15c65ec72e089818c0af40fe655a2fb91f1= e54e51c24b604c12715e4a1c9dc7ef3fe43e7cf4d53486f89ce249eeb11796b139c532591= fa09237db45187ed51a2a6e57048e8da2faa7a878f381c1e1ad21f8af81bd13aee4ed5e9b= 9830ee5107eb0cc000d671c48c702512827dc652e4fa58f9e5ef5ca0a1ce021a3bd1b362b= 67bcfa65b4272891dd75f5d64a65699ad0ca625638c76eab6d01a58dee1fe0eb74e170ec4= f9d0d1f5884ec8c9890656d8babc423e5fdba50dce537459a86765e3db56ef0c6ffc8e11b= bbfc58740a717ad46fe518502fb95d077d658563878d2e8ea265bdf01a65bb590569431c3= 733f0e7267571dd7a330f5173739d5a896e8fa6a78d5b045a2529fb7cde2dc2794162edbe= 056755ff6424faa51624ebcc6b4f93d82f4f2556dc9bf2470faefd9c9d25e61349c61d57b= 173f864004b2b068076f493289b8c3c66d87604b3c8c9055418ea1d5e237c2dad043d2953= df6818823b38f0aa654cf2188e6d35f42d2894f3ba39ab4320f83ef2ff37ae5d3fdf879b3= ca22cbb8a26993d61ba19abf01c47408085cb6ef38107f4fdd8a2cd7327c0c6f5e4791e1e= 63eb2fd63e662064b4ff64ed63973bf232804422c5e1335a4e0a9a736912def8d9c360709= 0965c4f24cf10f08699b4b557d9ef970f4c13cc95f63f976c0a0243dc53caba1923bfb4da= b3f46e30a2fa4199356afdd7b35dcab3ef0d74308f5351534a246a93741e6fa1f263c2b3b= 159d227210cb3685cc53c4022066323ee00fbd17f1f4cfb5ba2dbcab644ab963eacc3b7a5= 7e12e0a17d85ad530c4aa074ecf73c1959e0230902a39c26157d01eeca0f5456a15b18678= f1d0b80366671837ebc300c449ee83be553ab578b10839cbf551b9c04e2d95f71a20facf0= 5b74ead45501a419a546e78ca8c30e69b66db26c20f8c575bb394b381d3d99b48ce83843c= af67f8b4ecd2fdcdc63772c39803a57bf3551a63aec7339cfabdea5d67e0e0686f6ca87a8= abb4f100576dd4cb874ba808e23eb07ea98c16f7a9f1ef7a0a1ab5fc36fbaaee9876880c4= 10e29ec0cf336e4c81ba0e421e632dd4015373f1ce6685643522c4f36aed85ce9b1489a02= b060e523ee486731afdabce830c7d9673fa4722023bd469cda15b06b46b04ddd22adf7c60= 42d1ceb4f6995ef8c28427d0997f4eabb75c1e0bdbfd543b77cb57dad51111ee7cfa0d182= a020f01859a0c2a863f33eee745ea6f03c2bb5a403c7f2ac987929944a0118c491d26a8ef= 66cc769fb5d04ae0c24df1d9b9db5cd85274ba1dfb194bff7a91372812b962af281a8089a= 3f5335ac6f02b2c24f9c89c27c67b088efb838315178cd827517004671ca0a08974055b0b= 1f018264d5364ce49a386c28db541595d894892beb320509831beae044249bc116e9f2c2f= 427a26ea0ea502bf743f318094e1646c20ace80946494761d5f50b74cbb0d53177a52eb49= c1d6e2f1edf1f82fd70b6c5b5fb13bd3aab42329a046fec043fa97404be19be99e9988200= d0cf4b7c277a86db0a42c131fff5c0fe662e55f6be1e6294960fcfb388d97bd440dc18566= fe3bfad4f4189604cdd59b14c2a599008e2a9ab8e3127ee3c626be0751baee6cbefa18473= 6a0e74ac525d40ac35582c427340423883ba93a81ce251c857e170b8d47d62e634975156f= d6b111dafb583dbd39777d4526b7f975bce62ea991b738f43c4b94907352d9b849964e955= d3c7abca96104ec68d99515518c01a675111a0dbf078cccce48db4564cc9c1f41f348377b= 221aaa282f93028bdd9d9dceb379dcf20beec60aeceecd86ef07320d74d3243c6395fcecb= b1c6d469e234eab87e8f4da6fef73d5f618386aed1d6923a031329b447b215abc8df533af= 9c82ab37e5c09e4515b7f6345f561d886f76bd4b82ad6e8f0da15a5fd991779e30d423b17= 089e0d3463d36993eb251c2928f56aef32d2d04fcba8e2371a70aa0d1bc4c946d41ec5555= 5f55e3b1d7b125df31be19d74d7eaff250f56411d54db9da3f05d62f806c869b7d9fa7f0c= 35b731437396ce6fd94cbfed0cbb10fd82698afd5b63d70b7b5c60b3a7314f300422e09a0= d14643edc5f13647c7c5ea6aef2bba7d4edfa271abdd8eb1501e7c1e738a65d8843b334da= e5ba71e8a7ef6e632118fbf9261d02293357b98658fa8ce79f7c3a9352b918216f7bc3533= 5f1ddfc347ac398e27e5a58b2359e812286ae8a7f0e4e8abf5135b6da5f2c13260328aa36= c0452e8e44049450ae472c7b75e61a03d62b2b5b70c4da28daa41dddfc500aa817603694c= a858b5a8237c4df657e4e3ad244366d7a89b4e01156666c67c7f289a355329c465b706d68= d912d253731c8576799b307b1b585f4055d26f1692f5b0be0c7c3a2ff68b9d61839722885= 175a22d3a012d3520daed6188a981bd271ba126daf0b028a57b07e0c853ebc414967407c9= 3bd0158a9b0914a32d57df5755dba9bf304d9b126420f3624357dbd024cfcdb6dfc1a9f94= 0a3c99766aaf0416e10c6459fa033fe497cfab827a4489229f783bad2bab4bb9736cdca41= 632b2016b63a6f73a84105efe2e1302cccd8035916c45717d8635f671504d623e00f23240= 2f680a4ec3632bd4fc01b3b139722398604378630b620b660cb2db1a2283f6acc0e95232d= cc8190b88718762c250ba55255ad5247e8940fcc46cbfd1a93b773166ea1cb6cc8e123e83= 584513c1949975016d7ee217cea14bb1e75f1243d515ff5f9f69ccd998fb280c7f4906a9d= 064c4cbaf3c8e2f5fc1ead49c3bf865ba86df66deaf14154cf9372fa43129439d0e77ef6e= 8b24888cf2d9410e6b8665cf0f9d523e38cc572d686a56b50c45c095f12ea9177f42c3fbc= 788e95dfb7992d9005a066cbc1f5219689b0356212850ae74352defe5211372f6b39219fa= 46d59fe1a9da55cca021feadee6086d5d0072b3054081c00c0cc2c82d2adc399b3447c2b8= 1f37a2f92437d16b56c7ea786375fe283ecd5e9183ff8812f09b66f97799ab57af8b03aa9= 7edb6a66d667ac80906ee8e64b17fb29db8e75fe27f3474ea6c252fad85907dff3864a153= 4aa26151986ec5cd614435609c939830061f5d4129477184d01cbee6ca1df3b67b08031f9= 8614ee6e062ef01d561d70fd4206b5e9bf84e91e8ba796a4be2b1c150051939627cf30a76= 41563210432e820d10329b40af1421873081ff8de2c245a45d3b84553354a3bec16bc7556= abf3d71ce75e54b463c3dd188ed8164350de32b914e0f1ca20eeb4c3dfc9871213eedbe3f= 61ef7e30cdcc5fbea6f014448ca00afc06395b6ec4127d647e02ec29e19483994b93a4c91= d8fbf237c9dc19613842a8389724386d8ac01e4b265004c9579b5ff4969971f8d2b5735ab= 307b1aff87a1b543fe0d1fa1c9e0a9a136a723f48e4abcf13ad23615025fb82dd311e97e6= 22a9557c91f60a9a802ef4c5c50241ca38cf41400cb6c7c75a5d91b8d9c9bb6823e303074= ab81547447e7b8af8beb84ff65cea1749557a09c3c7a1a0a56edc7310a37375ff50c3b99e= 82e67453df690616f11e07285376c725c6a82ea62a12ecfd6d3d95edcc880dbd8bb3694ab= 1c26354086779fac18c3e4a3b318de13841f8151e90bd97b55435bd47551006f6bc012e94= 21d40e6b78ee333879fb362a5addaee9d18b0645722239a0589237b8c918dc03605b39d1c= 5fdf30f8b61ae664e92c7d54ce047a65a96389ba15551c616d45f3af2af11882213c28d1b= 2c78020d68cad262872ef8e6f3a1b3ef2edf19ea1d4b8486e830ea8eeb72e4b2f9cee977b= 19bec54933bd4e6a4c25e9633caade0fee0f1cff62e21f5a3122479197fa7cb5ea91e6ef7= 1486a4854d045b08ef2b9a770bb2459586538dc3aa90e84974c10c9309f7660e2ee53e1f6= b125cc2db62a010593ff05e80af954f91dde00040ad6925e19abca3ee308d7bc6d7c054d7= 6954e99095fabbf016b79e927f69534ee03755ca432a4a85807b579bb7616a102522112af= 93256456f486be0673924d6f314544ea1ad900347eb94644f00405aaad3695a1ffae189de= 63c1f31d9052d112bc1891b1878973231bbc95274064d96e9607cd40b804cdf1f97a4305c= a0a636ce4997fb98c4c7e6e89be8bae45ca8822d947f1d3196ef33e8675d7070ebad6daa2= 7b822f42f82d1e59b8e7bde0e43661b4b6ef1a7dd66b97856370cb3f58a1ad0cbf367a0a4= 8659555e56477dbb8a3bcb2b8680fdfa3ea15f63ab76f5ee33ae9e68ec75a75a7363a89b4= 9072b1102c28422af79faadc31eaa2b86e460739dead641825ab10e4f76625fcd2cfbc313= 285cdd84acf062f2c71325ca55a7d54a1814557b0f30abf1757ae85449e8a909945ac455e= 8651c893257754b415027767ae5496882327d2e23161edb3555e4488659c826605659522b= f23301dba0f072d3cca7e464181b723e17ac48e08f3944abc278e493cecaeb0b03be009fa= 1e7954b2ff119c4e2adb861c89103e85d50469d1cc1751c2033dad9f76aab97a2d6234032= accdade3b769480aab96dacf7c991042e2175b8f7ac99d4c46f50c9b0493bbe8d9158640b= dd3dde07fe4e2768f62fa7dc8922924c0bcea111f88066bc6e2df838873cfb20d065136a5= 549b8bfeb7f5168cb215fd9042fce1f0a559068a264f13e2a7ee4bf95773e319cec0a98fe= 6eac85a308efb8bbd92771f0f85dbc696be352b447f3634a82d7bfbcb6bd4e35da12229e6= e06e88d274c15aa09eaba66ffe517d48e1393ebaff4dec9ba5234d05d52e4674bd8df0143= bb3b742a55e32495b3670fa8a903af3c7be0612810b0ffc98f1affbdb8c497281bb9960e0= d2fff48a28a6223de926186e21212cd341030061871eaa26e102d86242360c7602da233d4= 8e762a0909cb88fa69eba3383f8b9b8d628437164e7ff72e24d7b35724c2f84753e4a8a8b= 2269afb5d24e76ea51b519e7d36b71d73f424e9e24cc7466e94e57f1e4a96fb1718213e02= a165861e4eafc046b355025fcf6ced0067af72a54026bf877d4b28302d2cd9b60e547f2f5= c23d5399764f3eb4efc0d5cee13535643f39daf0baefbbaeb37efa194c9e02c4c401926bc= 776f8fd55468c1c944d6a7f1b5535b6fc4810b344e8d90ca7b18b93c312ac22010ce8e042= 7f52bc5418cc7f87ef1319297760075faaad0bcdadc16c7bd6520af4271129c4980b4a0c0= fbc8f15b53bb510932ab2c3ecf678db838ab5cf1b41bda001590396eb1dacb3ac8c7f70c7= bc81df7cf87e5fb63406f7bff1826ab058119e6cb6ac9a541228594af9f974d0e6d51b03a= 1124a1ffc31203fe3120872b3dfa92986f8bfa6d5d2899d3ea099afebbe2e5e03b2e4287e= 19fc7a801656a44ea9ac58133f2940986a79651afd52dd8e02cc9a22994e167d7030cc57e= 75a516484c0912808f11075094cdf957b2fa5d95fc9f460490732f94b265af87d85bddac0= 80d114e165b2672d52ae094e64b91c7046394b0686a34b51315a9d767d47645b8a655474c= 3c195ac16a35b960f483b46dfba00c045a0920f7351eb8bacfe98a479a87eb447e5025998= 5c11dabb2517f07273a07fcbef6be0c5665eb9688656707d7a8fdbd6c16f75f098682ef17= 9755a700ba7c5db107fd694fdcc541666e58bd79302d0df18f63adeaabb18557e1c11c071= 87525790ddade063fba12a7ea4f1dfbd3c8980d4f59beb7093767976b152da67171fb12c2= 272292f68f8f740dffa8112ff81244b56cbf75a8a8676c6ca6fbdc43164431ae17be6c639= b0b12de066b479a70edcce8e926625d0ce2d58f8fe1e6b08dcdbce660e925d19d728b0d5b= 3eabf3900e173e890d5983ef6f5f4a6302059fb982b4dd0f07c7ecae1b1a5652808141752= ef938cfc615dcbd12457de440bab656bb00141603f0a7d19a4958d8135009250775e42713= 7197e2a2f2a0b4145a04c5290d349beb4812c866d1763f4490757903c7c594e984fab9874= f3bf97cb584d06689b8bc235796fddb8a7bc8beda33ebfebde3dd9c42af3d142650e84fd6= 1a55a3303c1a3c746977daef720d722fd2ae17a9cff7318270c8d56877d920845723e1d20= 9e719209a033157bb1cd3edd3ee56c39691d1e0c25028bfa8f0a4fd4099d6b68eee748d6a= e2ca5cbc3b213e35bbd9ecda0dcac9caad61455c6b971cd33329b938df4c005c027c556e6= 6aa0cb078c5b379ed997d3a3637819a172d7fa2cccb2068f4832364a1547551c72de24e3d= ba5fa6d432a46ed6207bc95c4aba0cf3516d638cc120e5b47f4d74f84636075bdef861019= b110808bdf6bea4f5b4263a0b1fd24e40469135eec02d250b3ce55469e9a88e304c142a1a= 6bc13bebd692902a778d166840b657c734670731691173c12a06ac8f6f293bd5df1864d18= 3fffdf0c31742e783d6c82a3d123446b238027173a760f841c7bfc61a62d27e1820c7f99e= 07c744788255b2d716a138c29d6c8aee80538e7a852ceafe814bc01ad67a3635059a1f56e= a44415c0fcbe28adf0441deb5cc91e0e22c7548dfc7a8794433cedee6d7a35b4b8d665998= 83d2144762cce16c10e7e00b0b295652c5f510716eed8417b8165f02dc604444cda9e440a= 953c026fd235bfa09a61333de6f425c341360da4cfe1d15a0934165f3a42531b53b19401b= 012864174e9cbb347975a581b2b119b49532dc624875340f3bb5dd3dfaf755e135bd9b382= fba552722a441848e5ea2c88d7f49308b73ebf5be782ce72369def1a9ebbd9f9c08496f0e= 47564564c1841efcc5c9c5158c339b0093e9eabc9ddfd449bdda119c5f76a6a406d27c181= 72bfe694da75c567eddc72fdf5df39d6339e1da1e277844f5c2ca736dad53ab41668412fc= 504ecc960233f2a63a078fe43f6b6a8fc48401aede41b6570c0be1edc49a348f3954fca2e= 97b984f482464eb4647964a2b033c31b70f6950feeab51edb25c55db43c7093f47c341951= 574c01bf3fe2c8658cf59fd60870c349bdab588a44b709e6db98191937addd2bae3702ae1= 240c0260490ac61c1abeef386f762d7ffbb52defb183139904389b53735ddfb5d11f62ed1= a6500fed77247d768a6d584a5f283eea7406966cd8fd1f9f5eebc8999b60d9aea171fa106= 91b650570861b5cca20bdc3e9344f51fa8d6388c3652c16665faa4f4c66c1bed148faf0e5= 016018fb717d72490192f9b5bc434632af1e39e845b8ba552f1300a74de8abf75ce822e72= 72274802f7d5aa4effa739da4be1baf167ba587207b34ff227e5c02fdeca8aeef643cbc5f= 7917266f972fa9d4f8d2da13a151e25b22ec8643e390c487f7755886cf2724f6a1aa7cbc1= 92a303e4535e72d99f0e908cdef254e27405ce42aef9cc31012cc66ad9ce35c096130c974= 6ee729b30ce32f35482785c21adf0a85b5512096474aabe617f2ba74fcbcb301d43b32a01= c312a4cfa6e56988e5fcb130274e3135d511b8954ad43bd3e2264a00ec149c419d008061f= 1184a9dd9edafd1acf7f8b04a3aedf118ccd709e1170b8dce07822c8c2fada56a575358cb= d85601bdec998da9b136f8ea7662e4ee514457a0706f6a02b28953425ebf54d5a460c17b2= f93bec54159ed2ae8307d0fd626389acdf4b9e8408858e695ad085b96a85ebaf79e38e053= 6a7b338b2e53461545fd6e12d7359155185a546f89cf3e40df6d03318b959b6042f26061c= b8ae33e8257b1a73f42484bd6cb229eda30d3f55dc54d0f055ec813908bf19473f66efafc= 516d3cb3bbe87e4e564de4b0bfe25691d3e68a67322348cb9995bb9e44881938591d32890= 329881941221de664152b11be42e0f966549deb1cb80447174ba9df8799f913809934a936= ad40924b02c2d677d2f6f09f05123a5be35d80491e20693e72897d2c2a81dc0c6f6322dba= cd8f71f30753450861701e60fc0ce282eb79af73383406a4bc08dc86719e6c1e721f55936= cbf0cbe8665f24ac595ca160e71e57aec100e62aa929dc26d8296d6fc43092c115f9cdd83= 3e3e1781ab5ed2f590677ca7d0a5caf8b662305e622ee285ac7bf28bacc446f5e66693b7c= c5e7e81ab4e7ce3918901be4fe2c3728634dcfc024e0244aae3125f466ac0c6de26a23c20= 579930a5787d959e2134c8298f888a8a2f2c7bd6431d231c03f745ae40f4fc1f3e905528a= 1d909fffb1ead1787f57d50ab1a09b28c73f4b6e10c6b0bf1647e0986f42c42c64ec2e743= e172a60442e1fb6673aa7ed88e6050c3b4488f6fdb0913cb58e34baf7b8dd2fe03bb90b45= fe2431091359e6109490cb37cd2dba219fb035d7ec5de1768e6cddd40544db8e41344a522= c60220cfb83e25b97961e45e8fdb73dac2863599070577e156a0efea0e500bc2c4fbd1ed6= ece0bc450c59dd4b2f2a9ee1806c847a5964dd213e673abba6a02206ceb6cfad9269c306b= 13c2b69f274dd404068d0af0568dfc0ce3a9b587b9d6667dd6e1c9fa253d6c414845f47ea= cbbf826cce282a87f63cbad6d2cae44d3a82451588eed4a6afe0edf97548f540ad24aa573= 01ded7a5e96ba0aaeda008ed3b74e95276394779abd307ff15589049a58fad1400fbac0a3= dba47276dc9b0bbca94a6e8daa68f6566f30e86f09754d5a828052798776b28792963b59f= 9cf7ef5ff0a009d723cd330734c401594d105b05f3c9ac2d075b5c32a6ca51e249214ef40= 23bcb2e042b0ab915bf3d405a70e380cdc80c0b58d6ad94d0ea7e3c9c7d08b98d32b70761= e87a0b62bb1c32a987d4a5531f5035b2c58aa835b605b46901577a0fd9d67a672b1f43a4c= a522d98d248ae190b0148e6ec49efe9f7f806f90f86dc790d61bd6df76210489aa97d5df4= 5b1102619e780113bd62ddc182c360f919457c0937acde394bceddbfa8266a4377bb30048= e6f50d1e22b0349a33be19137210d8ea3a60480f438f16be96b893554afa39bea538a9d3f= cba9a72d5b1bbdbaf7a9f6af3a3aca366957efe8e1f2f7a8adcef307e2e593cda51504446= c50280a95b0931838627f0ab92201339ef220086e110a59a5f0f92bdcd2fc46bd77ae5b33= a0bc00e1a0f4fabdffab891d86791d280cb4d600a7a4b9ad1018f345f0fbdd4bf53181365= 170b8d85018f4c2400d454ce47d3572276555e637231f8fa58c200800cacd056646baf276= 2a01c05e156393597c48f57502eb6c09d744526616caa502a414e3828ab4fdd07cc589949= 497d57b0bfb031763737e1fb1604b713693163015852345013fe18599f2a36ab849941f55= 0db6f242d1a976c764c0f71149d6dd0deaa22290b3dd81109ad54e865cc96ba8044021cbc= 75883d385a5d38fe34805433f5f022a0ba9602cac983fd34582b5e20be8aac7d2bf04b309= 3db38d3603dbe182caabfa09febaa42b675a46c57f0281eff4b34a4b24a8b88db3275a0c4= d1fac4bf2c38b7d72fb4dc0c67bbf53def68004ff2f619a01cad51dd861683c37cddcc187= 728ec640dd3955e4c939e09cf0f08c7e78ffc8af4e871fd120127313e45f7bf31165d5168= c8f78334eaa02ca0d0897fa1e5791490e0243a3ff2a91aa7f9266fedbf787f442261f2f24= 1f017edbfe2e7e885c26172072a54291e3bcffe0058ffbb30c6a2812a8f791a74d882e02f= aa82542c9c61a2e0208c7571a780d7a80b9c179fab9862db67ce5d616dd43a52f8c075dd8= 6fabce28d27c74c506d897d00c4610f88b6f5e54bbcf3097fd07aa7d75d65272a01c9a647= c192a9f0979dd3dc8eccca6d804b10c3f42b5988d84cfd1337387bf039142ef587e74a1ee= 933f247eebf56ed483264c9562424d489100eed5f725558a7a713e1ef0bbe39aa12e5e89e= 6eb73af984fedd52cc7a9002fbd0614f83fca00437ac7068624aab61b3743e838763b4d4c= 06582c3746d01c55c262a731615ff8738094c73cb600840bf4252bb8f2501302e096301c1= 7e5711f4e531e04ed607c87cb5f0a08fcf2880d556be154d9138af145aae675a77d37344f= 03452d72db23073b209b2f8fb5918e55da2af2b4e06fde11885e8da0d9d8f8019d4f28d52= 4129193cfd0b2c0b892822191f88ce6bc4a87d49c80dc50c23c1a7a4d965cd7b81bcbb249= 1523893f7d04bfe34887285b9408c88c6085c5768a688094a1eaf5e828f6f4b18e466a4ad= 1738192f5789dd9cf9dd4a46066d1e3f8f9da0179c4b684b192e7640d1361ce6ab83c316d= 327cfd411476e305c7e94c772a433c1dac32b10cdfff231d6eb5c839c78e756a685a28dba= d22a067781338415e50e9926ecfe0d9fa52a12c190194e21ab892d767ace26b1a59232a8f= d990c8b54b8b899239cebe05fae686ab0f084a8e1aa095f960655706537267ab1037f37ea= 18aaa189409b239d0ec662341b12204009ef9af36e1d28bb7ef00db9cfdd30844f40ce53c= 4962e163f2e47e56f99ea9d8e0a3e7cd64f2a579cdd06b3ea668d0203861c7763e89ecdbb= 4cc5b53e1df769cd28cbfb8f5c7766ec8c1aa64fcbc8203e00c9cfc5e9cf79d0ea82c8161= 3e6201eb95b39f5bc3e8dffd287711e2a0d635a94414a512057e4ee4866d1e8b938530623= 0134bb6555212b863a31f412e958410d21419508ca3148f2b8a4abf321af659c3ac1e0c3b= 6706fb82f33e6a53858baaf92262f3de7d34e8ab226f93d78e38720ebff65764fd4945a51= 5b6f4dfeffc230fe69ce5b338303c37bce19381635222e300fafb6f9fe955a2ca94beaab4= ad48b173a37ac9b2d87ac6e86c1b1095d4a84bf16b7c9e9e0088c97cf1f9724efc3580aef= bbec38eb0a0d0ddaf1b7890ca87e068a5d3c35898260b2f4159a1bf191d93dd863a7082e7= bb1c84f8d654ed0f49568e10c876530bb19b43630c7af051fdafc12b567adc4286b4ca8a7= 292f5beeee2da7dc8d5b3741e36e87a96e38fc7abc489784798e5a44c91bfcf9ca1df9db2= c43222968f928de7a01a2d335c00e04ebee5f9b36a5af52d41cf69c155baeeb7c8af0a05c= 872732055255e33c91f43cac96339357d238c5c710aee885698876ef91bf03126d31838a9= c4e5f0781554057eb03cdabad1334bf8a3af21dd989d0d4c0cfc3045701e02b8306b48e13= cc72d6f4622154ffb1ba41f97815eb6cdb319cd3fde8d7c3a87b44be4253b050ea57f1c62= d0281a588ff2273d3b0fa6d850aaf8f5a768d83b462e3dfd5c6d2b17ff936b49f65b6bcc2= 09f0ecd78585cbe5f31328da93d11d9e615223299f5bd56280e26d7b5a0b32b4b11ac3114= d4a0435178cb1bdf7e935cf5e6483aa12d3ec662502f8a4acff9712ec80be6d2b020f6932= 908e4752319f30f76d54ea7b0e8b1e2c3e9fa9b23996a7f38a16b1be5c10cf04aea079fba= 2d100e33d56c3fdb69f77e4be5d967a077e106df4f5e2785ad278ece9a57c419a826f4a0f= 36cc5d3f6ad121741e7ea8d91a45b264bc84eb91f339ec8db49837db4c8984635112e0fcc= 15e58c4b9d185d170a6f8d6c3a294429dfdc5133133bc8a43801855346bbe116a4ec4d1af= f113b98afd58c8c81e99838dfc15e5000449e8ed3e004916cc14554a67a2f666f34d015bf= 3d0e91b6fec1306a2533b39f4bf55cba0414fc821f1fda6ef2b11e69e6ac4d1c35be7c31d= 962dbc9b6e9ff395b302a80e28df445f075c601101530d3ef7dfd2e12db6f519b0441de17= cb8b529540a26c214dd4b3ce43847a1cedbb02f471c28eabab2f57b492900f6e0316e4511= 8475a58f53b6129701043f84055b5864fa17a35622f7aa70ce201d901296920d41a403e84= 65e19517f12fc9e207a13eca575a3b865245861163140181e5ca94fd470ff9ad9c7d16725= 06c786639a8471a9ba0f3db9fc00e4afdf52b0932e90c011034404975dda7f394a149eecd= ebb81d44ea746920a4cb04407831d6db4e1e4ad6b329adb53ca9938e4c8b40379f30864c1= 10f161f1cc652cacca972d22a7e3061f004b7cfc473b670214ed10e636fd2b614b439ed2b= 7d2681e70f6b73fe796a53fdaf6458458e918f5a782240cbc7e72b5aa3ce778db27238139= 4ff2e4e4e7168b8c57a38ffd23418562fc69f54f216d6f7ca2edc7884cab0c44f4d5cf0fe= 8cf16f9d2380abeec3929beaf630700e910141dc3dfc0af96db8c304cb139efc2cff1bab7= f21fcf29555a1ca922c479345c444cc7886b99154eba14745f32ddf5cad9fbb00f5461991= 27706cd6d99533b7353f5773f39483d34aad3e285b8d99ccb1c906d45de3eb87e4058749e= 6ae46625ba829596057f44725e532a9ca5bd966d807e65e56bdea8dddfe87b30e10af439b= cb1a12dabbeb8b53a6bf416a731d11ea6e83987e824aa1e00f74018a710a6a11388b69ca1= 95d391840c48ef9eee60197ca47d39036220c49aa60155fee0d20a8a66f4c17790ecb4f97= 30cfc0970ef52dcf76c87c9e865bad7481dc22f6604d187160a9784c13f95f965094a8aee= 8987bf1cdf2562943b098dbfd78dce8f99e394b7bafad72eafd5f379d85fbd99eded84ef0= 3f18bfb78c9575780038d64bed3e355586d86b42b453ec7f9358aa58c0e927431b9d3ee78= 814fe35ac2feb2430dce65769e7c6e8b55899368c8158fa1610873be5601dabfbc675a829= 343bbcfb1bfb9a748f15ae37e468016612d48f5f4c53a391cd02c6a8ce915e97759939976= aca05c6b2c6fc88f91e02cbf2a09df2ef7b065c8b32ee90d4267d52d57ddb1d139102e058= f0056996c74997ec8b9e20cd9a162ae869535980fa8bfdba94ed1744bdcba15ed1e5775b0= 7d2a9dd449f2ef5c9a3c5b6c13b54c29fbb7396b199c2780d7b5ea253392f842caafbf1e1= 6e879603c83ae91a99333a80f27d00f8e0c494047a238f675720bba02f30e2501125e7017= 9fdfc224d2fccacbd32315f770b189c3ce242419a487aee4a4daa9c160ff40007a8c24437= 64f5551989288baf6dac80b15d495a68f5df70f9e6176bb75e251b28321e87a0c998ec7b7= 63b42d90ba9fc69644fc16e629b4b1399f90841426c2193656e3fdb5f2e53451d21cdd857= f9d988b9f4269969e887d8313fe56f961323afcb1ca1007f2d5f9a7926f8c928746512076= ff70470ae214906d8824afdce5d046423751d749df8349770b60fdad4231cefbbe41c9d00= 4a5adfdfa92963444261c5a10bfdb8e3874fa7fbfb0b7542d31c7694172f9b9794e7c78a9= 557b0b077f626db38d80257eea37f4a70dc65340024bf8cbc928660653482576f3a54fcd3= e744b400aa4f22450c1b78b330a07a52638cfa179cbb3d3c5c30c3063923ccadec9d66673= 8b54cf90f33d80a982e3880aa3cb505e2eda03eed83168a20787bc608150d764cd8185d1e= 9435616c6b91f4e30e7868b44cf6778dd41a95a73fb8b27167732bca2cfd074e9e984e490= efb46e475e19e516b310bf10156957a0a344f0b26adf0c810e25619bcad1c943e91b55884= e3ed27fab862ca434d57159d958629d373c1a803ae0d0a8ee88ecc50e0f9ee71d48765362= aefaed97672a66256477eff2f16e4ca5060cce2d30fa931826a602bb88a723c561130ecba= 1e61c2fe81589ae130af8ecc92a3999816c0609bbb5cdbef79314b1d906554825f311dd83= 8825c0deaabb053b494d9b85ec2e32420c95a00a4e97278d2870bc95f2d1fb9dbb02a6b72= dbfd31ccdb2f661e8a497148a375aad109ce92679bb3852172686c62d72b684b6d3b7a754= fbb1f4f2b8135c2d1a998d21f16efc117e6d2966e47d462f773f370cf409ecda46d914d65= db51bcea53a39243349b640cb3ddb6f77fa9150e15241ad5c30227b8e42d2a9b5e86ca438= 3522119f5faeee84b3955a921fd2b9815e572164433b25c6c7d106ab567a956139da1f2a8= 2469bbc323f0c6d4d03450f8b7f1d47aa9d28d78774515c1ffcc86c22ddff27b851c179d4= e50a781fdaf47b843876d8d716a650bf900f44ba5c2b3d190c29f000ffd59b9c28c4867fe= 63db3b7fc31587d8911074d8ea5dfb1abb96ee4e6028ad6622fa3d493cbd1f2a6b64a1ed0= 158afadf96a47ef42dfe4f7384093aac5a798dc9296d3dcda29a4a6622229711d3f8c3ba1= 82cfeed2147554b4fac0dc9015488fbd72b254b01445043b532cbd57d309e66009ee158cf= 18989e4f1e8deb9dbc3c57766b6877ad34a979180c09788c4d6e33a3b6b9b78a33ed7326c= b3feb4a6fc9512845d70e0d37642b0c8e3d1d2210388cdb45c07795d3c1573cecbcb7743f= a06b7a81f9de515c44cdee86e544e984931dd8dbfbc095a6e3e85d2ca646aa1c22f324f56= fd92a83b972b71e6af5c6db1b7dab0b7f89dcfa5c1ec33a2557342ee2ca5d9277430cfd77= 568092af89062759237ad8a59e58797ca46267d29c529d9d462d657d7723e67fb0d81732b= a4820b0fa6098f79cfd4825a8c653551fdc829d7795f41eea97a97b454c4eb99fd29fb41d= 9b0eb2d835060a4349c1a28f5da2e0a3689a7f20b698706af559bf4cca212c96ca87ace78= e3ed0c623ec2df4c9c153df0a76c8edaf1048cee5236908dc19f50cd3458c7587b8b5a937= 1b30ad4932a7189f887431915294abc1f7c3bb1b6f4d52e6c1ba59bf68d036937b2969318= 5d7c9236526576dbd3278a949dbb205cc7284c8757d22c80a9d8b55af3d863c51b7c94eae= 70f427a0a9fb042d36345c695ef72deded1bff96a9f3e0dea6ec1b0892e3f617e63cc7e35= 94f57b713368d606d21519e6d63b682de6ea7d9bd9c089b4d7dfac99172d282d254652849= b610daad589447a68613b6d82a2e2fde353b58de9fe4aa9f37afe0dab7fda073bb4255559= 22cd35d46d5e61c0dc787ff02f4d79534803ce656609867626c739d349e3ebd9e5a72defb= 95e55e46a0ac712b0f4cf90a509307202b20b2597adf6630dc39a352d96176d733adcc7f2= 438e98fd0f0ca97dad1b466f6ad245b0161d696e8051e830de1889caa1089127a467b2bcb= 29c68b649278996dad8201ac3cfcd3f531cf8b269d0d068c43676ac2539f65124c079aab8= a67c5b8c71b8735621812be0dda8ef33de9973453edd214cab9439e80c1a127740a58d371= 737aba455693d5cd86dd442caa5258489735ffd5634d3344e55e969da4c8854797fe7c5d7= 7a74a7560e434ab275c7c072fff8161d9c1e392dc963eb99bd241934b88e2b8567022aab9= 64db814af45d1798f403465c81fc624bf68c49feb08dc835cf0b0a29770e83b646255a6c2= b6fe8585944fe1431c8e853d66851501e1b687602940196ac5928b2f1a43882c92ce1202f= be932a0fcd190a169b9e54e5c0a29213109d84f0c818dc16abf34890c7311c7c12d9e62a1= f56a8ccf04e61e81ec6721b0857bd21a1230886b246e01e8157a802970962806aad3b3a72= 7972b8176ebee2d3decfa345a7679585cd2540c572cab8234be3b23881479be4cc7c6d0a3= deba0cd14f168f2664cdf2d3fe07c906aa570db8225fe597bbf8702f8ae1a32c5b3f999bb= ed288ebf64e9f3ce8a44bfd3067f31eb8b04a74a5fd7356e065d0275e94ba87b197e48b1b= 5d45148fd9ebc29a3edbebe0b7fa699ca30fc4bbdd079ed194fc8118af22a41a7bb87daa7= 8e56d3ac3ff307ed2e48701432987f56afbc8d5825db97e10314775294995528aa8488557= 835b5d02296e54696ae1209d84f677f8b16e5f7bbdd403a08f0aff821cd6aa0018d4a8453= 32cf149617cc6e3aab9d97c10f5b502c05b213a254850185f4016b334ca72f44474ca37e8= d8be56a14b153e32d7d77280031d7d17bf4dd8cf236b0f2b24a9261f0cb1bd834fc39a944= 9afd36faa08799d49e59df95a7f28405ae77d48c894e7ad61b00da59c271221f06f786d4d= 3e511df0ecf136607fe829cd257d99dea1d341c09231e7794eeba53daba9587e28da3d54d= 8ca4425236568acaa5234e5d4456838517e1d01b6d42abe492e5992d1d6e4b8d2028dbe7c= c698becaeb669f1da70ab869db473371b8c1d87268ba942c959d7f8227682c1c87187d6f1= 222a024c8ed13b28c716a879fdd587d6be3cdca9492e529745fa1c6a154d2e5e005bed6db= f18a7b758c2acc25c679eea220d5e898184afe16a973a95660c5839ce24ceb820417989ad= a21dc87807be8e145de50ef1242327e8d1416eb50501fe24620c3f2aa766c5905ef918484= 7b20f0241195f953d84647045b6a046129e0ca002d4592de90ef1760285e2f812c696e623= a5056efe1eddf10a455cc70181a4d296fbea4897ce9e2bbbaaef796b1d66ad28094537fc1= b30cacef75f1a3571d4109e017664dadeb9e71544e6d80e1b9affa4ad430edf0de34ff679= 76ade63d0aaf7e2e70f78e01a049c8ff3c87e22967a49ec669cbd9813c8d55e056f732c62= 32a515c56512ed89ac0797c36934bf679fd5bb437a4acaab533db324c0ca22fca9fe94cf7= 2ccd643be4ead42be1f2ab366c46a4ffa2756f16dba8f85640b118ce55378f60448cb899a= f96a4a7a7e8be9542d7995b1af67bec7c5d024a8df6b37c63e84c9378d6a04d0efa960be9= e2db5a6b23bf04788e7b2018bee7614eba3275624ceb0a5dbf51c96a35f7ae260d2fc90df= e428681e101ca4031a6b1ef81a93406a71764c84cd4831017b83510165a34aff1404f8f08= f4ada58b2287e94328467f75dfd4727416a73045b57318217fdef1519edcf84909fe12cb7= 661bad65aef6b8b8cc2bd7082468301a5677035ccd8b6f75e89f0eaa4a61c7b1fe455959d= 5c81508f9c3cff962a1c7c00462c9965f1e056f81277dcab57b81e55d395ebfe4e9a504ca= b859291eb3119e2508e9847390b8e3d12f9185c1d6dad436577a716fe6ecd9b68fe80ea1d= faf84c32ecd6e3c24c718d3af02a702ef9bae243ec156636cfdbd543b0e4b636964919b3b= a35566c3c4e966d976070eb2d7d5b13e105210015459cf9f920dfcd9b733e3f2dbbcfd371= 222cce2ab6288e2b38f19116356a9ce4f52dc61753e37d57665671c317bdde66243b5b4b0= 09fb0c48b6521d69a584282382fb193691f2440bbf57b7de67ba7e90c832556c6a71c515e= b35e059e5cd123de89840e122a0c18de6f9592f6a407f8b10ce916791c45081d614840ffc= 84f0e2cd0bafb87140d923a8f998fb8a99a0c21ce4ff8540222167df4db0efa84e9e23d75= e7a6de661e1c9d6382137247589f4c39c21320870bfaf4188bec773cdc231caa152334b85= faeed2551183ab4752baedc69c966d9ce1983f1881af201249304713aa3af064e436f4f7f= 8abe214b42207c979cbdf7199f2048a2211498b4bc36eef005f848a608d89a8cfaffab64f= 7943203aa541a22faa8fbdf1cea0b66b2502156974add8f400d3557e93221b9dea59b7104= ba72229cd81ef887818d4b8d0500583150219b58d6332c3d65711770311f1884ae45051bf= 6d9b6d2eec1866e6c7a8f8d32d2cdb87859bc0dc6c569a88b18b065d5b4eb160562393eaa= 1d7cac3803e7b9ed77434529eeb24e8936d3a448f908f7f9007806d8e1d342d5b1d0f32af= 71fd69f8f7c02dea588e5a57b21dac78006f0bbb08d2a2bf7b25fa78d65a9229b7891bfd4= 1f11874b5205244b2a19f053b830afed455a56a7c6bcaf97dc5e7f5165f254cddf0b308c0= 3fff07d85bc04210bcf4b3c0464f27a85e184ea504dfcf23e3ff07b9cc7d87d58753c136c= 6ffc6563120ffa051111d1eb51ffbf1089fc3d83b5e5b0dc881692fd838278ddb440732ef= 0b4512fc95df2d0872cb23a9d46a1d408d0efbf5a8440482beb32accec5283e1902817830= 1b6868d30419f378e8db404d57221be4dae607dfb45834c6ca6375ed41644b4aced6f44b5= 9a2345d408c15808a35de8f0f44f17200d5e3dd2d32d5cdbeeeefbcd2dfc1e282d7c5eb21= 65fce5aaed025ba0d341c9b1e09fa3c05f287671c51268ab6e1852795190154bbfa4874f2= 62c9e6b6f7fa98fcf50036407f0e04b9d44becd4e72462893ab2c07223ab7caad7f0148cb= 033439a3c869f88a1913c8d3223e532d92bd0ba529375e71980e0531ee41d0606570c0f9d= c17e532aa86a1a8f6dc4bd4c84cf49a3cedfe60ee58927b22d85db4c2793bc08cb6057810= a72b6707372bceb1c6204a32811851579dc778e98e8463f1b2b875ca071c146bfac197a77= acf75a04144758a00a62688e38a8f99e2499576bd132ddff6de122b15273e5df1710f546d= 947c6b15b1c5f4a842c6c7f9a034209c5771326f1b5d2ada3e4fe677f64ed6c62876a727a= 3b628895e9ea725820887eae9b4bf79269f4e141e7678f2291fda3f4d6eb0e549f879ad0a= bf841882048d304672162355a510d7de47d2b4384fcf7709cf956929cfca3b62ad409f0f7= 043331dab29f812416af38c0c8b7b475dad2e43c3e44e4d321a343ef943db42407b03db01= 7042ea582bace51e3ff7f6544d95dcc35655def1179373660a767f864d6368b024e685d0d= 1b78fd49b20aaf2869f9ce932515d7c19031f7e18b06f14411956eb73a1779134ad3a8138= b8e71b547488d8ee31a1fe095efafc81b642a2f7b84dce3fa5d4f399185ff91278593b8b1= f63dec0202fe00e23348fbc32374315a456a4c9aa41fb49bad8c754f8f2bb6b8e761b895f= 638eb1d69b2a3e02aac95ef7f8656bc9be02417e92b9aac591d208c8b4dbd2c5720bebf7d= 2862d062be1a1545a5bbade66df5b98d133cee8b2351e1d16d1a900439647e0f575198c78= 37aa7ed6c77763045b501adba4a4c47d71dd43f5d40444461927320242509ffefed8f1a54= 4420c955c4f7e14a3c62b2e284accd53d347a1082ada2557ac2817a913138f1a2986a32f3= 64099790db643468dc9ab13de2254fd6e07cb6016f5600da4ed2af8e8bd05fc8f9182b2c8= 4d5615b96c179deeb3e810c1e4b2c796f58b2ca9aa43002fc8d551acff38813a2c4ac388e= 73f8bd69b984772690f2f65f121d073b636f62486a225508b227defe23f61163bf6b9fbd0= 718d4f50edbe3ed5ba1ceba64f1e7fab741a9ec1ffbf57f3cb4e5b2e6fa10a9d344ea9928= 1651d6992140ed1ef66edee03d5dc992c70def290eef506ddcad6a52183ba10739de2c8f1= 2cf24e83f882aa13bde90ee7b6b6eac22ce5e2803c21764e46980594d1cd933d17201deb2= 0550f0d898527b393d1e0bbc63d5f0233cc8c285de9400b81276cc1c384bd38eed2c86c22= d27be3fa0c341275d0149f8de9bcc11cd4ab3c3e10ff1814cd18dda5bfa4e1003f62275da= a9e95da75309392b94c8abf6c75f2723b900ed4b7050de0d079279a567e3e4baf7df2342a= 51121297cb53fde71642897b2b4325efb079dd1bc05b468cc961bad7d34bc87ddb7fd0466= f88053274236a943687c7845c606640ad952a198d4f9efbd73d59fd9aae527656ae32e692= 62a262f2eac7e9041bba99eab21ad0df16b8373dbbc34034a7abf1c8a70421ed314a56f44= ac059c165fac08f20050a20a320d35e250335e13d2afe6b7e5895ea075028e9dde920570a= 81f279289d2aa75d6451ed75e9c410819fac4f32cda2ac40f19fc7e65bd83b221a155d0fe= 8ffd5f3904bdaa7bd72cc85c71b960c6dff59ec01e0d1a9a2c154a5306f1ffd201b1f7577= 5677e143ef1b70e315fff3a1072923419cd5db192fda578e51045fc68086d6db43d478f0a= 6ff4baf6ba74cc4e5307d4d3bc33c7f89dd77d71d634eb5114c556b43b1a1afc708bf75b3= 0c1010232d9625b77e98736f43e4cee7d0c47c37fd3b5401c3ea56b3f53fc3bdb45b3219c= ac9f8a245f72c11e132c9075699597f39f856115fdcbb5e2e91e81152295907e6bb7820a0= d2730af21742a4fab94c2f26935dc8d4876e58a55745fa6cdddc8b9c37f6bda9481ffca2a= 9dac1e3158c8436f40da357c4cfb4a42c1b5c8ff4af89f8f1ad09b73540129197958cd27b= 4e8882864107116a57c72669a8a0768b2c3c7da8808c5f9d384e620554b270fa7dfabe759= c858a88613548196a177b6fe90a0e537e29e4d5a327d8239f8cc7129e2e5fc9f96ce79bdb= 8bdc4ddbf5dde8a50c4c1c46641f56fda908006513676c7a5cf05dd31769edb20dc5da16e= adb362ac9e8b82f5c51aae6fa6539d2388efba4ff3841641097384d0daf093d27076abb76= c9f2b7507a2d6fec616fe67af9aaa3eb492b4291465bba67f15f2c18c446d84d888a32628= fe591fd21106d036190a8ac68ea079866e2c9a502d355d88136ba5e90011e6cb502e19851= 16d7fd1f10354db71080882d9705909eac9bac3ef1c3c56e4512321b636bfe69ff0690e04= 045d146fbfadea5e18ea58938821a81ba87fddcef14d6baeb291cb0d7565fff01381ced6e= 58f2b1f98157e55999936ca95fa914c2d7a8004b55a54ae387e43adb2598af99b2207637b= bcdf7e7ea961d160ae0f60685103b7d8237a17eb7cd73a080fc10e1421046ccd5793b952d= 0017272a51ef06523ce50fdd2a2b42d99247736b84bea15c52d815e2b91c32bcbfff356f9= 91c074ccb533efa2d7c78e25fb77a61b1bafb4f15d420bfe1af380e9ace7e9c9dcd334dc4= b20785cd5a2e8af987e10ee393a11c2e01b6fcd9f89595bb5b541a88c2ba4fe7a6c0da378= 8a8aa0c6daa447d5ab30053cdd11e02892eaddb915412bb3c1a7d15bad6907a96d25f2a3d= ac8fdb6d1cd5d39c0775b9b697ed9f16a740648bd56baea0e8ac6a3509dc06d35a6adf43b= 973838bea6fb23f6a6bfea36e2cd118255b3a2ba16f85618993bbaae7e08b4b7eb6600208= f129abfee604e921fe18f151f1b44b83457a7aabbe5971e733580cde86ebde6fadbdaa64c= 3854c8bf221e053c14193b66b77595c7e2f663cde09c87c88a2612902d7787d8c3eb9f948= b848046c1fefd22d582d46e76237f709e57d92439ce7c8186279a6eedc3be4d99e3621d74= f94f445c5640a7da853c9e30a957b5468d62093d9695324971a2ff9ec53da703ad4b611e2= ea8bb258f7e504ffa15c6e0ae79710c9ff3c9f8f2b395b64bce96a68e76760c4dfc7e5616= 1dca395890e767f4f07a6dcb8773fc0fd943b18bc2a4cd73be3fa25e7e0786c02a700fafc= 03581fcd59ed12906f8dcdbb68b76eea022ea87aca8a2b92cf28e68eb30557d86dc6bea6b= 00817d54bf10a18ac2ab8f613f650aef489b35c68accd57fc54c80b2045eade0a27fa4873= c1a5426f644d9d9e4200573cd40d2ab1f216b815581a8021f07d2c81cfab751800f533588= f08dfa6dfb72e008fe629f52dfd91c1b8dd8f439c82cb1ec857eacd2ef9cac3ca42275295= 88b28dabdb325de3b89fe7953ae4e08477c0a152e2b503a0130dad40e6b9f6684ca466011= a028cfc3fdd941cd787c8a136e0ac45f72aa4ccd5f872f9582b9f2edaf36fbb2ada9aca45= e94d29f0a41058e49c23e5d9ff0727cb344a3557e006f3c388e2309e35b6aed97d1f8b5f9= 49f753cb68fc9fbd5fca08b633b9a80b574e6d0f4a087400c12dceca90b7d9b55c8d8156d= 2a93efb7bfea1cf51d6299056ce2168a04d4c58b6e7a7b71095d9db4037e1371ec16001ce= e27854bb151b36c3a2f265eb13fc97bc065e10b8b631ebb0b10aff6c77f8ef0b5af008207= 68c0382c721d13106c578cb17cd6f5e7393290bf55232f586dc3b414a3ed6ea801fb14a89= 58a04ba58b3856f6a449d6707a27ce7b4262853ef4e06c140ebcd0e2a040b6b3d0ded3cb5= 3fddf973cca99ea8ade41bf8a50195ae4d8fbb6a88a14900aac6fd31706f21c70cd14ee29= 6fecf9662f6f55fea76e4f6a7adab8173ce21759b9c36ab813cc1e530f026da16f0797bc0= 0939128ebaea95135e617904bd8200cdae5a1fe8e08dca5804b2ae84ec77db6c420e0a971= 0d7503342ac3d8ada223400fb271566a7a1cdb188f04eafb96d6447c0628ad05158975444= d9f5eb035a7d419084eb97db4e472a1ab2d8914a86f455 =0D0000000000000000000000000000000000000000000000000000000000000000=0D000= 0000000000000000000000000000000000000000000000000000000000000=0D000000000= 0000000000000000000000000000000000000000000000000000000=0D000000000000000= 0000000000000000000000000000000000000000000000000=0D000000000000000000000= 0000000000000000000000000000000000000000000=0D000000000000000000000000000= 0000000000000000000000000000000000000=0D000000000000000000000000000000000= 0000000000000000000000000000000=0D000000000000000000000000000000000000000= 0000000000000000000000000=0Dcleartomark{restore}if=0D %%EndResource /StarBats ff [13.68 0 0 -13.68 0 0] mf sf <22> 63.6 180.48 C gr gs 0 0 t 0 576.0 lo 756.0 576.0 lo 756.0 0 lo cp clip np 55.44 158.16 t 55.44 516.72 lo 701.52 516.72 lo 701.52 158.16 lo cp clip np 0.0 0.0 0.0 RGB /Times-Roman-MSenc ff [30.48 0 0 -30.48 0 0] mf sf <64> 87.84 186.0 C <72> 103.2 186.0 C <61> 113.52 186.0 C <66> 126.96 186.0 C <74> 137.28 186.0 C <2d> 145.68 186.0 C <69> 162.96 186.0 C <65> 171.6 186.0 C <66> 185.04 186.0 C <74> 195.36 186.0 C <2d> 203.76 186.0 C <6c> 221.04 186.0 C <64> 229.68 186.0 C <61> 244.8 186.0 C <70> 258.48 186.0 C <65> 273.6 186.0 C <78> 287.28 186.0 C <74> 302.4 186.0 C <2d> 311.04 186.0 C <63> 328.32 186.0 C <6c> 341.76 186.0 C <64> 350.4 186.0 C <61> 365.52 186.0 C <70> 379.2 186.0 C <2d> 394.32 186.0 C <30> 411.84 186.0 C <30> 427.2 186.0 C <2e> 442.32 186.0 C <74> 450.24 186.0 C <78> 458.64 186.0 C <74> 474.0 186.0 C /StarBats ff [13.68 0 0 -13.68 0 0] mf sf <22> 63.6 229.2 C /Times-Roman-MSenc ff [30.48 0 0 -30.48 0 0] mf sf <43> 87.84 234.72 C <4c> 108.24 234.72 C <44> 126.96 234.72 C <41> 149.04 234.72 C <50> 171.36 234.72 C <20> 188.4 234.72 C <6d> 196.08 234.72 C <6f> 220.08 234.72 C <74> 235.2 234.72 C <69> 243.84 234.72 C <76> 252.24 234.72 C <61> 267.6 234.72 C <74> 281.04 234.72 C <69> 289.44 234.72 C <6f> 297.84 234.72 C <6e> 313.2 234.72 C <3a> 328.56 234.72 C gr gs 0 0 t 0 576.0 lo 756.0 576.0 lo 756.0 0 lo cp clip np 55.44 158.16 t 55.44 516.72 lo 701.52 516.72 lo 701.52 158.16 lo cp clip np 0.0 0.0 0.0 RGB /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 277.44 C gr gs 0 0 t 0 576.0 lo 756.0 576.0 lo 756.0 0 lo cp clip np 55.44 158.16 t 55.44 516.72 lo 701.52 516.72 lo 701.52 158.16 lo cp clip np 0.0 0.0 0.0 RGB /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <53> 120.24 279.12 C <69> 135.12 279.12 C <6d> 142.56 279.12 C <70> 163.44 279.12 C <6c> 176.88 279.12 C <65> 184.56 279.12 C <20> 196.32 279.12 C <66> 203.04 279.12 C <61> 211.92 279.12 C <73> 223.68 279.12 C <74> 234.24 279.12 C <20> 241.92 279.12 C <61> 248.4 279.12 C <6e> 260.4 279.12 C <6f> 273.84 279.12 C <6e> 287.28 279.12 C <79> 300.96 279.12 C <6d> 314.4 279.12 C <6f> 335.04 279.12 C <75> 348.72 279.12 C <73> 362.16 279.12 C <20> 372.72 279.12 C <72> 379.2 279.12 C <65> 388.08 279.12 C <61> 400.08 279.12 C <64> 411.84 279.12 C <73> 425.52 279.12 C <20> 435.84 279.12 C <77> 442.56 279.12 C <69> 461.76 279.12 C <74> 469.44 279.12 C <68> 476.88 279.12 C <6f> 490.32 279.12 C <75> 503.76 279.12 C <74> 517.44 279.12 C <20> 524.88 279.12 C <6d> 531.6 279.12 C <61> 552.24 279.12 C <6b> 564.24 279.12 C <69> 577.68 279.12 C <6e> 585.12 279.12 C <67> 598.8 279.12 C <20> 612.24 279.12 C <75> 120.24 309.12 C <70> 133.68 309.12 C <64> 147.12 309.12 C <61> 160.8 309.12 C <74> 172.56 309.12 C <65> 180.24 309.12 C <73> 192.0 309.12 C <20> 202.56 309.12 C <69> 209.28 309.12 C <6d> 216.72 309.12 C <70> 237.6 309.12 C <6f> 251.04 309.12 C <73> 264.48 309.12 C <73> 275.04 309.12 C <69> 285.6 309.12 C <62> 293.04 309.12 C <6c> 306.48 309.12 C <65> 314.16 309.12 C <20> 325.92 309.12 C <61> 332.64 309.12 C <74> 344.4 309.12 C <20> 352.08 309.12 C <61> 358.56 309.12 C <20> 370.56 309.12 C <6c> 377.28 309.12 C <61> 384.72 309.12 C <74> 396.72 309.12 C <65> 404.16 309.12 C <72> 416.16 309.12 C <20> 425.04 309.12 C <74> 431.52 309.12 C <69> 439.2 309.12 C <6d> 446.64 309.12 C <65> 467.52 309.12 C <2e> 479.28 309.12 C <20> 486.0 309.12 C <54> 492.72 309.12 C <68> 508.8 309.12 C <69> 522.24 309.12 C <73> 529.92 309.12 C <20> 540.48 309.12 C <72> 546.96 309.12 C <75> 555.84 309.12 C <6c> 569.52 309.12 C <65> 576.96 309.12 C <73> 588.96 309.12 C <20> 599.28 309.12 C <6f> 606.0 309.12 C <75> 619.44 309.12 C <74> 632.88 309.12 C <20> 640.56 309.12 C <75> 120.24 339.12 C <73> 133.68 339.12 C <69> 144.24 339.12 C <6e> 151.68 339.12 C <67> 165.36 339.12 C <20> 178.8 339.12 C <43> 185.28 339.12 C <4c> 203.28 339.12 C <44> 219.36 339.12 C <41> 238.56 339.12 C <50> 257.76 339.12 C <76> 272.64 339.12 C <32> 286.32 339.12 C <2e> 299.76 339.12 C /StarBats ff [13.68 0 0 -13.68 0 0] mf sf <22> 63.6 378.48 C /Times-Roman-MSenc ff [30.48 0 0 -30.48 0 0] mf sf <49> 87.84 384.0 C <73> 98.16 384.0 C <73> 109.92 384.0 C <75> 121.92 384.0 C <65> 137.28 384.0 C <73> 150.72 384.0 C <2f> 162.72 384.0 C <63> 171.12 384.0 C <6f> 184.56 384.0 C <6d> 199.92 384.0 C <6d> 223.68 384.0 C <65> 247.44 384.0 C <6e> 260.88 384.0 C <74> 276.24 384.0 C <73> 284.64 384.0 C <3a> 296.64 384.0 C /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 426.96 C /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <53> 120.24 428.4 C <41> 135.12 428.4 C <53> 154.32 428.4 C <4c> 169.2 428.4 C <20> 185.28 428.4 C <6e> 192.0 428.4 C <6f> 205.44 428.4 C <74> 219.12 428.4 C <20> 226.56 428.4 C <75> 233.28 428.4 C <73> 246.72 428.4 C <61> 257.28 428.4 C <62> 269.04 428.4 C <6c> 282.48 428.4 C <65> 290.16 428.4 C <20> 301.92 428.4 C <6f> 308.64 428.4 C <76> 322.08 428.4 C <65> 335.52 428.4 C <72> 347.52 428.4 C <20> 356.4 428.4 C <55> 363.12 428.4 C <44> 382.32 428.4 C <50> 401.52 428.4 C <20> 416.16 428.4 C <28> 422.88 428.4 C <49> 431.76 428.4 C <50> 440.64 428.4 C <53> 455.52 428.4 C <65> 470.4 428.4 C <63> 482.4 428.4 C <20> 494.16 428.4 C <21> 500.88 428.4 C <3f> 509.76 428.4 C <29> 521.76 428.4 C /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 467.76 C /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <50> 120.24 469.2 C <44> 135.12 469.2 C <55> 154.32 469.2 C <20> 173.52 469.2 C <73> 180.24 469.2 C <69> 190.56 469.2 C <7a> 198.24 469.2 C <65> 210.0 469.2 C <20> 222.0 469.2 C <3c> 228.48 469.2 C <20> 243.6 469.2 C <4d> 250.32 469.2 C <54> 274.08 469.2 C <55> 290.4 469.2 C <20> 309.6 469.2 C <61> 316.08 469.2 C <20> 328.08 469.2 C <53> 334.56 469.2 C <48> 349.44 469.2 C <4f> 368.64 469.2 C <55> 387.84 469.2 C <4c> 407.04 469.2 C <44> 423.36 469.2 C /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 508.32 C /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <44> 120.24 510.0 C <6f> 139.44 510.0 C <65> 152.88 510.0 C <73> 164.88 510.0 C <20> 175.44 510.0 C <4c> 181.92 510.0 C <44> 198.24 510.0 C <41> 217.44 510.0 C <50> 236.64 510.0 C <20> 251.52 510.0 C <66> 258.0 510.0 C <75> 267.12 510.0 C <6e> 280.56 510.0 C <64> 294.0 510.0 C <61> 307.44 510.0 C <6d> 319.44 510.0 C <65> 340.08 510.0 C <6e> 352.08 510.0 C <74> 365.52 510.0 C <61> 372.96 510.0 C <6c> 384.96 510.0 C <6c> 392.4 510.0 C <79> 400.08 510.0 C <20> 413.52 510.0 C <64> 420.24 510.0 C <65> 433.68 510.0 C <70> 445.44 510.0 C <65> 459.12 510.0 C <6e> 470.88 510.0 C <64> 484.32 510.0 C <20> 498.0 510.0 C <6f> 504.48 510.0 C <6e> 517.92 510.0 C <20> 531.6 510.0 C <61> 538.08 510.0 C <20> 550.08 510.0 C <63> 556.56 510.0 C <6f> 568.56 510.0 C <6e> 582.0 510.0 C <6e> 595.44 510.0 C <65> 608.88 510.0 C <63> 620.88 510.0 C <74> 632.64 510.0 C <69> 640.32 510.0 C <6f> 647.76 510.0 C <6e> 661.44 510.0 C <3f> 674.88 510.0 C gr %%PageTrailer rs %%PageBoundingBox: 18 18 533 704 showpage %%BeginSetup % %%EndSetup %%Page: 2 2 %%BeginPageSetup /#copies 1 def sv 90 rotate 1.0 -1.0 sl 18.0 18.0 tl %%EndPageSetup %%PageBoundingBox: (atend) gs gr gs 0 0 t 0 576.0 lo 756.0 576.0 lo 756.0 0 lo cp clip np 55.44 71.04 t 55.44 118.8 lo 701.52 118.8 lo 701.52 71.04 lo cp clip np 0.0 0.0 0.0 RGB /Times-Roman /Times-Roman-MSenc changesvec ReEncodeSmall /Times-Roman-MSenc ff [42.0 0 0 -42.0 0 0] mf sf <43> 309.36 108.96 C <4c> 337.44 108.96 C <44> 363.12 108.96 C <41> 393.6 108.96 C <50> 423.84 108.96 C gr gs 0 0 t 0 576.0 lo 756.0 576.0 lo 756.0 0 lo cp clip np 55.44 158.16 t 55.44 449.04 lo 701.52 449.04 lo 701.52 158.16 lo cp clip np 0.0 0.0 0.0 RGB %%BeginResource: font StarBats %!PS-AdobeFont-1.0: StarBats 001.000=0D%%CreationDate: 10.11.99 at 16:40 = =0D%%VMusage: 1024 41552 =0D% Generated by Fontographer 4.1=0D% \251 199= 9 Sun Microsystems, Inc.=0D% ADL: 917 200 0=0D%%EndComments=0DFontDirecto= ry/StarBats known{/StarBats findfont dup/UniqueID known{dup=0D/UniqueID g= et 4004617 eq exch/FontType get 1 eq and}{pop false}ifelse=0D{save true}{= false}ifelse}{false}ifelse=0D20 dict begin=0D/FontInfo 16 dict dup begin=0D= /version (001.000) readonly def=0D /FullName (StarBats) readonly def=0D= /FamilyName (StarBats) readonly def=0D /Weight (Medium) readonly def=0D= /ItalicAngle 0 def=0D /isFixedPitch false def=0D /UnderlinePosition -= 133 def=0D /UnderlineThickness 20 def=0D /Notice (\251 1999 Sun Microsy= stems, Inc.) readonly def=0D /em 1000 def=0D /ascent 917 def=0D /desce= nt 200 def=0Dend readonly def=0D/FontName /StarBats def=0D/Encoding 256 a= rray=0Ddup 0/.notdef put=0Ddup 1/.notdef put=0Ddup 2/.notdef put=0Ddup 3/= glyph140 put=0Ddup 4/glyph141 put=0Ddup 5/ch5 put=0Ddup 6/ch6 put=0Ddup 7= /.notdef put=0Ddup 8/.notdef put=0Ddup 9/.notdef put=0Ddup 10/.notdef put= =0Ddup 11/.notdef put=0Ddup 12/.notdef put=0Ddup 13/.notdef put=0Ddup 14/= =2Enotdef put=0Ddup 15/.notdef put=0Ddup 16/.notdef put=0Ddup 17/.notdef = put=0Ddup 18/.notdef put=0Ddup 19/.notdef put=0Ddup 20/.notdef put=0Ddup = 21/.notdef put=0Ddup 22/.notdef put=0Ddup 23/.notdef put=0Ddup 24/.notdef= put=0Ddup 25/.notdef put=0Ddup 26/.notdef put=0Ddup 27/.notdef put=0Ddup= 28/.notdef put=0Ddup 29/.notdef put=0Ddup 30/.notdef put=0Ddup 31/.notde= f put=0Ddup 32/space put=0Ddup 33/SmileUp put=0Ddup 34/FullCircle put=0Dd= up 35/FullCircleShadow put=0Ddup 36/FullBox put=0Ddup 37/BoxThinBorder pu= t=0Ddup 38/BoxFatBorder put=0Ddup 39/BoxShadowDown put=0Ddup 40/BoxShadow= Up put=0Ddup 41/DiamondSmall put=0Ddup 42/DiamondBig put=0Ddup 43/Caro pu= t=0Ddup 44/FourCaro put=0Ddup 45/SmallCaro put=0Ddup 46/CircleShadowUp pu= t=0Ddup 47/BlackWhiteArrowRight put=0Ddup 48/SmallRightArrow put=0Ddup 49= /FatRightArrow put=0Ddup 50/Checked put=0Ddup 51/CrossChecked put=0Ddup 5= 2/CheckedBox put=0Ddup 53/ArrowInCircle put=0Ddup 54/PointRight put=0Ddup= 55/Write put=0Ddup 56/Pencil put=0Ddup 57/Checked2 put=0Ddup 58/Checked3= put=0Ddup 59/FatFullCircle put=0Ddup 60/CircleSmallShadow put=0Ddup 61/B= ox2 put=0Ddup 62/BoxShadowDown2 put=0Ddup 63/BoxShadowUp2 put=0Ddup 64/Bo= xSmallShadowUp put=0Ddup 65/Diamond put=0Ddup 66/DiamondOfFour put=0Ddup = 67/SmallDiamond put=0Ddup 68/FourTeardropSpokedAsterisk put=0Ddup 69/Four= BallonSpokedAsterisk put=0Ddup 70/HeavyFourBallonSpokedAsterisk put=0Ddup= 71/FourClubSpokedAsterisk put=0Ddup 72/EightSpokedAsterisk put=0Ddup 73/= EightPointedBlackStar put=0Ddup 74/PinwheelStar put=0Ddup 75/SixPointedBl= ackStar put=0Ddup 76/EightPointedBlackStar2 put=0Ddup 77/EightPointedBlac= kStar3 put=0Ddup 78/TwelvePointedBlackStar put=0Ddup 79/BallotX put=0Ddup= 80/HeavyBallotx put=0Ddup 81/OutlinedGreekCross put=0Ddup 82/HeavyGreekC= ross put=0Ddup 83/OpenCentreCross put=0Ddup 84/HeavyOpenCentreCross put=0D= dup 85/OpenCentreBlackStar put=0Ddup 86/BlackCentreWhiteStar put=0Ddup 87= /HeavyOutlinedBlackStar put=0Ddup 88/HeavyOutlinedBlackStar2 put=0Ddup 89= /PinwheelStar2 put=0Ddup 90/ShadowedWhiteStar put=0Ddup 91/bracketleft pu= t=0Ddup 92/Zero put=0Ddup 93/One put=0Ddup 94/Two put=0Ddup 95/Three put=0D= dup 96/Four put=0Ddup 97/Five put=0Ddup 98/Six put=0Ddup 99/Seven put=0Dd= up 100/Eight put=0Ddup 101/Nine put=0Ddup 102/Ten put=0Ddup 103/PosZero p= ut=0Ddup 104/PosOne put=0Ddup 105/PosTwo put=0Ddup 106/PosThree put=0Ddup= 107/PosFour put=0Ddup 108/PosFive put=0Ddup 109/PosSix put=0Ddup 110/Pos= Seven put=0Ddup 111/PosEight put=0Ddup 112/PosNine put=0Ddup 113/PosTen p= ut=0Ddup 114/Note put=0Ddup 115/Machine put=0Ddup 116/Telephone put=0Ddup= 117/Dial put=0Ddup 118/Fax put=0Ddup 119/Printer put=0Ddup 120/Disc put=0D= dup 121/Mouse put=0Ddup 122/Computer put=0Ddup 123/Envelope put=0Ddup 124= /PostCard put=0Ddup 125/PointRight2 put=0Ddup 126/Write2 put=0Ddup 127/.n= otdef put=0Ddup 128/Euro put=0Ddup 129/.notdef put=0Ddup 130/QuoteSingleB= ase put=0Ddup 131/Florin put=0Ddup 132/QuotedDblBase put=0Ddup 133/Ellips= is put=0Ddup 134/Dagger put=0Ddup 135/DaggerDbl put=0Ddup 136/Circumflex = put=0Ddup 137/PerThousand put=0Ddup 138/SCaron put=0Ddup 139/SingleLeftPo= intingAngle put=0Ddup 140/LigatureOE put=0Ddup 141/.notdef put=0Ddup 142/= ZCaron put=0Ddup 143/.notdef put=0Ddup 144/.notdef put=0Ddup 145/QuoteLef= t put=0Ddup 146/QuoteRight put=0Ddup 147/QuoteDblLeft put=0Ddup 148/Quote= DblRight put=0Ddup 149/Bullet put=0Ddup 150/EnDash put=0Ddup 151/EmDash p= ut=0Ddup 152/SmallTilde put=0Ddup 153/Trademark put=0Ddup 154/sCaron put=0D= dup 155/SingleRightPointingAngle put=0Ddup 156/Ligatureoe put=0Ddup 157/.= notdef put=0Ddup 158/zCaron put=0Ddup 159/YDiaeresis put=0Ddup 160/.notde= f put=0Ddup 161/FatArrowUp put=0Ddup 162/FatArrowRight put=0Ddup 163/FatA= rrowDown put=0Ddup 164/FatArrowLeft put=0Ddup 165/Bullet2 put=0Ddup 166/E= xclam put=0Ddup 167/Paragraph put=0Ddup 168/Questionmark put=0Ddup 169/Co= pyright put=0Ddup 170/At put=0Ddup 171/GuillemotLeft put=0Ddup 172/Tom pu= t=0Ddup 173/Pete put=0Ddup 174/Registered put=0Ddup 175/SmallRight put=0D= dup 176/SmallDown put=0Ddup 177/SmallLeft put=0Ddup 178/SmallUp put=0Ddup= 179/JumpToEnd put=0Ddup 180/JumpToStart put=0Ddup 181/RightArrow put=0Dd= up 182/DownArrow put=0Ddup 183/LeftArrow put=0Ddup 184/UpArrow put=0Ddup = 185/Superstar put=0Ddup 186/Telephone2 put=0Ddup 187/GuillemotRight put=0D= dup 188/RightArrow2 put=0Ddup 189/DownArrow2 put=0Ddup 190/LeftArrow2 put= =0Ddup 191/UpArrow2 put=0Ddup 192/Starwheel put=0Ddup 193/StarwheelSmallC= ircle put=0Ddup 194/Troublemaker put=0Ddup 195/Flower put=0Ddup 196/Black= Down put=0Ddup 197/BlackUp put=0Ddup 198/WhiteDown put=0Ddup 199/WhiteUp = put=0Ddup 200/Butterfly put=0Ddup 201/Idea put=0Ddup 202/nbspace put=0Ddu= p 203/Scissors put=0Ddup 204/Airplane put=0Ddup 205/DavidsStar put=0Ddup = 206/BlackFlorette put=0Ddup 207/Snowflake put=0Ddup 208/Half put=0Ddup 20= 9/BlackVerticalRectangle put=0Ddup 210/BraceLeft put=0Ddup 211/BraceRight= put=0Ddup 212/ExclamFat put=0Ddup 213/BlackClubSuit put=0Ddup 214/BlackH= eartSuit put=0Ddup 215/BlackSpadeSuit put=0Ddup 216/LeftRightArrow put=0D= dup 217/UpDownArrow put=0Ddup 218/ArrowDownRight put=0Ddup 219/ArrowUpRig= ht put=0Ddup 220/DesignArrow put=0Ddup 221/Yacute put=0Ddup 222/Paragraph= Sign put=0Ddup 223/germandbls put=0Ddup 224/Cent put=0Ddup 225/Currency p= ut=0Ddup 226/Yen put=0Ddup 227/Peseta put=0Ddup 228/Colon put=0Ddup 229/C= ruzeiro put=0Ddup 230/France put=0Ddup 231/Lira put=0Ddup 232/Won put=0Dd= up 233/Dong put=0Ddup 234/Rupee put=0Ddup 235/edieresis put=0Ddup 236/igr= ave put=0Ddup 237/iacute put=0Ddup 238/icircumflex put=0Ddup 239/idieresi= s put=0Ddup 240/eth put=0Ddup 241/ntilde put=0Ddup 242/ograve put=0Ddup 2= 43/oacute put=0Ddup 244/ocircumflex put=0Ddup 245/otilde put=0Ddup 246/od= ieresis put=0Ddup 247/divide put=0Ddup 248/oslash put=0Ddup 249/ugrave pu= t=0Ddup 250/uacute put=0Ddup 251/ucircumflex put=0Ddup 252/udieresis put=0D= dup 253/yacute put=0Ddup 254/thorn put=0Ddup 255/uni20AC put=0D readonly = def=0D/PaintType 0 def=0D/FontType 1 def=0D/StrokeWidth 0 def=0D/FontMatr= ix[0.001 0 0 0.001 0 0]readonly def=0D/UniqueID 4004617 def=0D/FontBBox{-= 179 -216 1083 917}readonly def=0Dcurrentdict end=0Dcurrentfile eexec=0D d8061d93a824650eefe2785f13cd28a8a226cfb244e605b690d514a03c9053d5ffb59a27c= 607b230ffe1228c7ab9b2dda1ab8ffa01f9122c9d4898c675e384658b2d9850ebbbdbb5b5= 0f908560d07db253a82c8c360a988ba92bf16046f48ea1965fcc4ff31c7234fd22015126d= 93b711976296e9a5d466260a542d34176aa19a0e159290bb215c70b99945d2d7026d03f53= 6036f0754bf6555a6e214e6320dc4c9eae944798cde29118e134e4ab5bb5554c6377a45d9= d8e63f5551b6c7ded7ffc6f89811ca1fc6e4ab2b37baf863d17e09802a2af1a6b0a837fa9= 9823f96d8d2c401ddb58110a1a4ac010dc919354bb73e4181a582fdb36a3311455e9752f2= 437b105692e28d9f8c65b14bc2035bcbf15a50c76a2ed5ef9a359589bb7105f8327ddd557= 416f007891ce244b19c57383516ee53cdf3327351cfe2f01898f5b0f420190f20ce1b84a9= b9d4e9b22edb1ec2d2e6a00ce1e3198a2952f86a310a71467ccfcb7597eb5ab715c6c35a6= c2bdc7881e0364d349f32e25f9a46131c389823bc97c12db5a0d68c9f1af213f472d0609a= 0aac109190a6f0d7f9ec50c52bedc35ee3a29e48a6dbbd8e689093e8261e7d4ee666ef76e= 8e120816903ce0b4029cf9844849a2e438a8901c46d42fc13f84167318d73e017614acd85= 85a6b0c5e5b98557044bb0157818560355ce02e91086b7df0cdb1ada523f69da518ad2a3b= 9a2cdd49ec4310041aa22f3279f084e465edaccf87a67659142dbe238813c578fc1b6436e= 9a2e3bbc70aed387ce4158e706589e8370a6e1a172991fc1b210ef64cbb5d61422483b667= 8216b0aed8d6acf456cc5261765425d93a4476e4da5125d8a188fadea42761d0cdee716db= 486bdc76197de72731428c5cc1f8469afb944c8cef9011f8182ad06ae33a87fb058301669= 9bc28469dbac8aeb1f1dd539cb07adccf38ec20e101d614b5cec2360dad2e9d497ac31046= 89f0fe9df9322e726f3dcbb28f24c0a4fdd2b04a68d1a428a96ad48d8161d8018f0e6797e= a8d8efb6c2b92f34a7779ec46ce5caa365d0248292abc15788959620b6e17e2e33194c4e4= 138bc6d5301445ae90d1f5ea0219c3a8192ee359a4eed5e0198c5957b57edc3fee825b1da= 2fc4253ff412309b552ef798e36d4f67b2bbf0318d084c2209c08cf85867862aed51d679d= d215b3a1d9479a2657e5c8660110ea6f17438d2720f90c9a4aca5aba378ca22eafd2010ba= 859662e9b853e93647bd3b368db2b6fead3a7153c70bdbb0d5b817d7bc0096989329c8f46= 197972755a210fcb6adf1f5185ecd81822d77ff7839b32311e4d6d855da3e4310b29be440= 971de9b9682d3325b9fd75caed48e055ae8de6499db5a362ea3074827034f1ef7bb76c47c= d2ec2a0d91b8e56838535e4f0f45b10df90a0edc63d347c9f466b4a4ab29f35001669e8b2= c6ba1be9e3bc8edf3fe606c43976420b4bdb389ac203bc37b58524321a3a05c011eb0c757= bc63e7d7fc109b37f7fad296682ba1f2026fc381cef8cb2490474c2dc3ba255c5765d71d2= d465f46e52724ed5a741ee366491cff37dc5b076692b287c8566e3b8709b2846d95b1b42d= fddc98b87f94b29db2d5b3305dc5b866de1bfddee492ce0f090054e9885b660fa225fa251= 214ac5254de1047e17d7717d7c1b0befc25ce74a6a516450f4354a135fcf826de413eda36= b109473c2779549a2d306b31e9b6e4088e5eb59b0963b8e31781b178a1926e024dd556b9f= 08972158a99eb8788dd1355405c64542631fcc2143e0b0fa6d9c367892d02b5e1728fdbcb= 4d59a5a24bd868a87b228bb9e42fd1b3d413877df318d9813ee2a342a6067865e16081888= 87f54844c99b95a9f657bff133a771863b0fa9d96e56dc9f8892fa516c30ced4266d55646= 5dd1e445cdcf3ddbebfeea116b8fbd6e521ec64744e49f745eed98657f418da7968c4b841= 122d3911409f4db2da81ee46494590df3b741afba4081b823ccf7de4a24a610af6d3d7c2c= 6078f8782cb483bcb7c1910eca0f9b7e313f73f6fbe72b77b510e73221598ffd3607f8dde= 32533213db6e8e2e7f5f64cf9b22f0e5eef8354a6d99b97e6c2b2f27398b5ae8c37bfc43c= 6ecc6c33025df96195c79cd77fcd0cbb9b6dcfac48319c1c727309636145b2fc472a5d7b4= 5be788bc70b641344010b2a7decc1374b70d5b8a78b96adce824048c772a181647aa9fff7= 85a539e65aa6bef7d724eb15b397ba9a78af507b6dade3b139e7a02bab51bc21dbc4846d2= 32bede596364f83b9541979aa1f502139d4dc1cea676f4d3f045060fe53b1b28fb61da9e3= 5d8ca7e1f07d4568f14623301be16673e4d7e81fa89d8305f33771aa839ddb96c2b68f6cb= 0b36537c21918d914c22e1f94c6ac9cb1c26f6e41b2fea0503c124973ba450a5e9b7b6a4d= 3a9e13ffff1dea084401d670305b9b8e5f784cd626bac75328cdf17d928d13e2a50b77664= 961855ced43d1bd6c393d0abd269d3ee50a53e95192f49378a7116706cac5594dd787c6c6= fad310bf5070ef8c617e1e24370db85657f4bd494cee9a1e19efa08be28eecc282592fb01= b050e63475b4e867f2f3abcdf3dacf323103c5a0d897789a3f123f2ffaff0846dd8bcb61c= 58abd2fad291085be94fd1c8054ac122ac7d2622bb23223329da39d1c17f64ccce178cbfc= 3de296d5a4cdf18110c4af63a0066a20cb21755049abf20b16e93ce5b336c7109fd7bc252= 7c25ca0e81b607a30c522d89365e2a2d8f18a81892f449636a1e9acce877eeae1c27a27b5= 9726d8f0a0169a2afef93be31716c0500c219990aeae7405ed9922338d0d353181ec8a7ab= a89a27c1cc5d45c6054fb3180686f5c6d1c3589bbb29c69452668bd58cae2954399a05aa6= a1872fafe49b1301c2aa08330addfa04ed154a1c54a725d7c9f5aac770e95362336b0f7f9= ce6672651c8823f9a3685131e1abb59b682f553d51c312db573070f5fa2221c18c8dd8c97= e76c5dc692d7769bd86a32271d6259b34e6531a805dbbc8144959d110efa39177e5efebf8= 44eb3ee41ac27bca7a648d1de3314853ce4695e71f6d867034d4039b5aa2505eafda43b8a= 9724f600ea2e2b3a3a3018c2ec433d2fac0292cdb8a57d36939cc3c5431ac44f1a8463873= e2df0c08215b9e7f5e2e493578de5613aa284b52156896100e00ea5f89042c05d8b9e49d1= 5cb681c7c25333befd7a5438f7a1585dfc516718e39d6a28fb7324584ef63f9d1900b2ead= 36d9fe37835a55b96c15db388c20a59af4192c3f6da961e34381df5ee889c465f824a70b5= c7a4ca28e828df8acb124846f544e05efd054087b2ee616976670758b00fa2c0a24ec45c5= 80b10aa1b903cc259cc6e3983a064bd512900344e576f2507f532be9b81b6a6e7ced6582d= f9110f1431e72d9c6e2b29e1085d5293bf70cdb9efeaecfe4a41d85f26a37637a2e2761f3= 521b76dd852423fe84144997cb2e1551d67a347269ec8b8a905bdb74f23298873fdfc4c07= d8ff82e9d43cb0df6bfb7243d0371ad2d5cdabe47691420da4654eacd8311e8e5540c755e= 0f72616f1d456a7acb3a01e4ad8564f0f2f41f595c0380ce9825a81026412fd6fad5d2aca= 932e2781eefc4f73ce1413dc054ed04f85990bc5c99b2eef19a8e5a1cfad6aad93b7f25a3= 2da0b45c73823609d94dd370d65ce9840a686d5d6356049dbac7c7008f4a87e94059468db= 2caf5881d01fede9205a66ede44c446fb5f98ce3b210d05b5b6ce1bc6cf50ce7ff0596c68= 37d0b60448439f17671075f6d6ea708ccc0b9228f00791d530dc52f5de47b8e505817f6e1= 7a4b3d5ce43dc6cfd780d99dc6a876afe600fa92f3a05709e984435dbc4333cc94ecaea0a= d9dbc56b68e4aa37af12e3ce79e3bcc1e62a96810c5c0ebda80554660079067ec9715be9f= 69bf39f235ae4d39976beec1085c5d514c40abdb1e42073d52ab3ceb9b503f81c9ad8dc63= 858a9037664a6d0f84e591fed6bdb79d5b013a1fe1a499e89ea282e555996af3519d89933= 8a4162f61792c8404cb02d7b044d5bedb36476a1530667165fa44da35d788ed4e730120ec= 9d4a1a047ab73e9a2fd7277e4b4326362b4e0b1097d5c71413083f08f1f7cafedb7ff8934= a189caf8731aef7e251274e02127e5dad9c142b78e88766270691ec422058035f7c42945a= 4dff0df16ae2b99ae510f986f955df3a18bb37ad902eb91315e84f462f9b447463f42e078= c4890dd8a4227cf818dd48a83c3db98ea19f0c548cb12c59b62bc7a93c68b9ba0d2fad45c= e002c2efb08adb3c553f0107b98ad54e6521f7b355d841464a9e8b274ee4e2c3bfa1b3899= 2e3e21068357fbf6bfdf36b291cc930979d35d231c7da24d913296f60faa7bbe1b43790f9= 7ce98fd99904ac56497432954ba3c6f3a79b144b4d9a346023d2703411d49846fb05c03fb= fa6eb07726cea53413fc1fee487d112f98b6ee412f55a3e66f07d2b9c10462e041707e108= 7308fec2acc226d8604d1fc2be4e5ef5ab784becf4897c70757b256d07b6faad6542024a8= 6a43fd0c69ece78a5e171a2be8715f0afc3f03d2eca28a61fa943a447a4130cd6cef18047= e75e2e6e7803bfb129db9b4da7552c98e0b6d3d367b62a33ea178fca82cb214c2de398a85= 22b5c9c222997d5260d390e4cc41dcec556169b6c494e9330b67b447cfa6d87099b35c6a7= 956d8299dc2178893ea43aded7f81991f188caa483581ad5e10a0c1d1e4ecaf607413fbe1= 35be7bb2c440ce2d7fdb92e25f6a105fed54eb4d2cdefa4f6d1687c7736343b78635e5ed6= 135740a28fd96943b63e3a97b3cc8c9dcfccd4bdd96c3efbe4bc04106cd5c25d6d1c17e0e= 2ce00ec61fd59096096c1037d86a36cf78f08ff8cd652cc23e99731dc8fae7fec6b06aad1= 9fb9c08357375f5b929928a08a9069b4a829fde1145607bf698096db2cfa990fa67c0c35b= a348f3e1eb834d411d4bbd8130bfd9e358facf4e45b39ff11020cfeeb281b0f603276dae6= 6ff0ed45d502c1028879e41efa5f7dbe12f24e517e58131170ee3332b7e2877b1f680c9d3= 9600f3479ff2b2eb0741c1b7e6024fe6b1782aa8f073e76c2d6abcf97047450c31b30eaee= 92177d47c999be54dbfc530cfd09473bb045ce70adfdb257602115eb54f005ca062a0a5c9= c85e61083bd597cade62fe879b56db30043a45bd768f4ff77959e01bc02e9725a5332582f= 3e45d2d3905eab39d7e729b7a8e7b68771960ef11624d30c9074d6c86c38bec27aa180fca= b8a8fc9dce250fe859f3998e7dd672bf0b5876baec5d67b12bc732862e9485aeae4aae9ba= 4b5c80a5835804382d655a39922f6f20a322f152a3700866de97baa612553432a4cae9c19= 4bed2dd81e23be7a01510d3860b7299a31d4c7e952e64b91101a5ebc25780614a794355cf= e0c0ec2c80017b28fe937d714d54553c5c3712a48284716fcfcc5ff1ad69cc2f6afdac1a4= 61ce251f1c5e8df96b9e04a04745e94cd05acd4f9ff3564f8bc336e27ec93e7f464b14cd4= 6dea40d3cadc44c1373ac6e7b8f90fc24dd50284b7829c311e6f8f3f9768959e50366c95e= e8e62be53d37938c4ffb190fa10fe0a035b9d63b7654333996fd716c99dc7a89c7e6762cf= 5d7671bddb99d4556a09c7012d4e6345a09360b3b8e78a60b873f340a0f7d9e5d3c2abf62= 4c0f7a442f49f989f35cdd606ee8abba08563372b4049da87e2c3e65e37c0c5873e241c09= 724e5d7d5253aac7665fb330b0f7b1ee04d0c9d7011345dbe013a788ded8d5b7a3101efd1= 7f86fcfa5e38109c2e0f2aa58281b7eb46d1d960537917952fad9e602b410b7370978e4f4= 3b8a30bd13f426fdad25a9e3425fa8f0ce51177da6dcf6d393ae31193078709f01d04eb94= 225263f92e703cf96ab95c9aeace0df2a0bf2ea1fcc2ab38f3e2bf41eca2a0938f21289ee= c70da1ea56426d87d55a07d8bfc880bb1fcbaa522664540d03cbaf47df6f668d1e975b9be= 76bb5c2498162ddd1a547bc0f7fe80b75ed7a77553c1f6654f5ce0c454f0cbfa6f10dfe8c= fe51d1711e71c502ee161de9e019eb20789132344442a201f6924bbd533106455ed15bacb= c14150519ecb6952ab398698b7c9b45d00ae551f2d0e7562aa11a26b03c34304d77b9d47b= 538e5701f795cffa3ec5b545a02fb27dfc6672ddc0161a8fde6c28f5cd092c7d1d2f76d57= 7a3f550f84cad1973474f72ee424bc9d4865750128aef2beac93496e2412bfb579dd8c1b7= 859619403eafc6fd9cf863df1e99a3a77513813763063fdf2f27328420dabfc08c2ce2186= 88e7a30a30189ee97139e3415501931bbb55aae6d396851e67a007eaf86b74aa714937367= 74bec3f479e8bf7c24a21b2e996998aecd27bb6d225d4f4fe67e374ba65e1301e9d0a5f68= 0800b1de62f0ececdb5f73f7ad48fa09e9ba62dc4d241673a33b0855a91fbf586ac1fa57a= aaddcaf55f822ed1d3b824d022ebbec84c8159d60eb940b9a1a174c6fca9a122bb6e27dcd= 78d79faf8d6e3e85997011ff22769d230233b5cf308aadd9a772825c1030b5a993717c14f= 2badb24fea22bea10fcfcd1facacfd4bb534c0e6ce43190d061c2fcbe2fccd1d89d36d7e5= 9fb17aeac79795f7e44f39a9b7d16f38f5e5503971f4d9642ce672be32d1b29a6b4b474a2= ed0de70b0497b8efdc1f3d3efbf8cc28df8dbe49a0c455536bce883c9cd69c3097a8a10c2= 150d55d18614e352768208e0d7bd7d05e9a8342e753b3221993352919474588336be63650= 2701604dbcd5ded9b60f6058c98a1d7eddfd1f9f8a73cbf07a797545ef1204ddc3fa430f2= 260113bb5e61951cce8583cfdda6c6ff0b27f35fbf6fb874e38658bd2b7b9bdaa4ff3b259= 13b5f9ef3191c30e38484dddfeebe2e5b3e46250144cc033b3a86d7039b0a3df60b9ae076= 4f51877473435df8cdc73b15a4c496bf13f5d2d1e4e93bacaadc3ddd8779d9e59ee0f3c33= df416d6cb999963ba9e1e05181577bc833cd7c29f61eacb8c2f226f84cbcf7e9f5f7f9bd6= e0dae159982432ec9f4b3fdea134f91c8836339ea5fd20397b2fde6d0a6d10c6899ca2270= 67692384fb61cffc872cb0768790331ebc33757646690a6d4f5f2dbfbc4f81046492226d0= 2337f9888c68c3e1fee4377eadca007ae0801e86e304efff76f0bd11747aaa6087e296537= cfc06b9f9e6452c727d475308304c84b6d794358c422fc9b43c1b457d1612fec9e6bb743b= 7306c19d2beff68be89b95ac052a235f318ff94cb97c028d4b69ae5acfb2fa75f7f3903e7= 61fb20e94ce78c2631ff15e07f716b9804aff5141e32c896d3a8454d619ee01acea4f6392= a14f05dab9a9531ab811beee45d74e09dd8166e88f4c2b1995730e88374b68012fa10e9d1= 256f80a96e010cbdfb1263a123350c666f5eadf649274b9886a64793cdced864cb4353d49= 83ee04d55e3d0af2dde147f29c285923d21172d0029ee9cbbbb652068c8cef663eca99968= 450654c925856e7752782a7b8ebeb89e6b31d5c93235d2d75e3714e862766e4f4c87bdbd6= 3f706383405c5fa1950412e183efe7fefa9c603a9ae09029c21be7e13af920d7db0222dde= 4909ecca7e39b00027df502c7efcffbce2063eb929f9055f827d1ab91931e77a80f2ea635= 930e4658d00b18368fa301ba06c9dc27d94d93a93caa94183f4f97e3b7aa6318a5fafe427= 76e1b117f63497d4b8914c019f0cc839e81b2e9e210c9abc5e108f116dcc9922695743b65= e93a066e5263f09d89be0dbadebee48f3fedeef3ce8313e8b3530be020bb5032e37d9a5e2= 21fde44e8835eb80d721d041e362fa472e9a09d8b6219e3a8d5663c4a94db6d15902aa8b0= c91c94e789d65abc74167178f208bbbe51faee01493b749f3d48ea712aba03616b2decb76= d4da4e6c957c483871139c0c1a4c09024af268be5a9d44caa53ccac4c1cb98b823230fb08= 53185a944f02f62004c413e98c5b68d22a20936889b7e75cbf7b4551121bb28c94a43b370= b9cc95c5cabd1532e273524d4051cba7cff368fdb0318499ff455797d0f5ed341f1e9c8f6= acf1987f2cc272c1a83fabd5ac3426c777990f6aef268049b668897171927c94d0914ef6c= 1987d36b99c57750c6883803ead96c3bdf89df712b32df4ed1df557522097c0d86d3a3889= 837510de097aacba15e23561aee549bbb1c18b59c7467af1e4435b3c774a1eb08379c1cbe= 6b52f8e4b79e18d2665a82f1a7e85e1901ae97f6ffb3cbf7f2ad24bc866b6cb04e69f2c08= 5acc9bfe3b8c444074502f9e2f41e337b3a9f0799a6c274cb0caae02fccce1fcd036c407f= 469abf7a0346986691866a24138925d289f9200fa9d37157ee110f6361d561f1a8229887c= 82e7bfd9c6c7032eedfbea977682d9d1d60d238b9817ad72fb81b111728f9495fed5ddd50= 42a0d5c7f6ee6630a0660848a8fd0b82b7c007386625167e3ed4619a7de25721894f7f2ed= a9879d24b1f986a1aec690df4013cee455075cf985a03deabea3b24e2018b4e31da319118= b52e59b6ab16bc13797be03fabb75bacfb02432337a01295e644213ed47c7d432680944f5= 909274a9cc2d7569f46850b2561fa39d379622e60264b5089ef787273f7421812deb2fc1c= 560e18e3d77726935d1ee3d8895f3655b1e01425be64ccc04605432d2a73bb5ddfb3134e2= 5e502d1884e236856c269abbef9ed5c7cefd36f81efcb939c366667431a7e53e7c2233c7f= ca31e8060c1d35cc1fe8e8ece0bd8d6eebb118d8d660c9897f171d9cf7b878f1778894eb1= 1c4f2bb5aaf4399be89e9f93dffe5838f35f9f8d5948fcb79abd3b2832d2c5d7981fd3761= a6a80b0a4a0ea85ba57131d8d722d8d6fbc3fd78c3d6df445ced7e8038d30b848d0f05ac4= eb4f77e5b123b73b0bd38ee585b4c1acfec1906e005ec2a8437cf76991bba9e84c829de1f= 0edb0aab560d827ecf1fa3975eeef30892221ac6c9274d981dfd294a6281f9897a11d18fd= 8c4782a5273f679719349b339b20a49285674eb06e890b171ba682ef21e4163139ba7b961= 59e408b00a1ab28bf5e66e708c9389a6ca3180f026b2347c2f60467d9ce31c2b6833e0375= d2465b564581be8c6247f77f9ec3e335a7a22882bee3df66024c869c5b0a379f56268180c= 627db6d9bc316e02a1c870730011654d4a5189ebce74c9cc289c4befd68faea602efde7c3= d72d4265bdca5e8dbce133a42c25329e61e1064c4c38a228b22cf07967c0a75d302ca2457= f56703a45696abb39fc0610788bb337cb2042c327acbbc737ab771f37ff3d8731f8c82bb9= 052f807b7e519e2db9961e830ec3940f6e0d779a8169636b1790dcacb49ab21fb2b28133b= c78f5bb6f8a2dbd7cd8d8474eb8ca64e12698ae86ee0029ef990f782423cb14a614f88e7d= 0a26a1a1a6fc1c9d0ab7b2750ec0c729853e1d2070501cbc5b6c3b81833c6cf160a1a988c= afad302e3348c26aecf59c0a3dff807fc5c99ec5ffbeb1b2b6ce49dc7d166fbb9550ad97e= 1d87768de9019a3652c21cbcf380e4a47486fcfc64a597f9d10f511631cb222f8d06ad54c= de347f0b0a56706d82c4875e4383c5998a8d66aea825653a1ee2e4622b4fac30e8433ccb9= 45272b0e8918b7b9e1d112dd77f3af6f469f93b0f817e41a596fd3533da39f8b13a72b9a0= fb86671444a7e162c59c585d401ffa5292987484e4b2d5e6d9a6fbde7b403f40d353b429c= f50882adf5ce54b8d5df1db38731998812ecb1510b584566ac32352072a79019338ad58d8= 4788539b1501b102c3813ddfbf59078e23ab19d13d3112435f662fefb692f8281ed7c78fc= b268869f04c40009170cbb882f51674c687bf6a8fce1b521b8e2dde68998d48872ed097c7= c5f16e68423d472a98846ed75049c172e0242bb023752b43857572b11562d776de9f24490= 328fd81c8b33c9da5568fc8a86de63bcafecdf64701a4bf32f18fdf4505d95f3dd8ebf835= b1c13df969473ef5a8e98a8a012462608224fcc618e1f642fe404e27073ca9bb32546949e= 927cfb91616b470b604544f22f03335062a8682f3f9f7279c59700441269ddd630256b1d7= f958e2194f18183fcffdd4a0f280b0393ce397f830831328394b326307a83137647ba681f= 1f2d00271bd5034209472bdcb559e4682d023d59010a758e756de53a7b58818ac581f2086= a6a20d0f1b737d74c38f7ab2e849715b6b60fb5f1d680bc70db820e23662a95ea0c3a2dd3= f2570c9aeeb731c6ca12ed29b2a46237cbbbb4c82356cd04275466e11e9819828d711a227= a65998cab8ac2b6db111c0f13b1002dc2610c741fc50cea718752d6c7e1653afd58dfc21a= d34eaea355b801d221be08f2da475b4e00f5025b3a7e9af86068a1743cfafa3e4ba93100d= ebbb0ab4f7af7bfffe461ed750d777a8720c18671c3bf3f71b1eb050537a012382d04a7a4= a5dd411068444e8d5a9b341724643fa7ad0a58c96d93bc99dbf4aaa62f099e3174016efae= b4c368909761f05ccf896f2a31314ef72be1155521353ca0b071ec6120124138f53a65fb3= d1e3b2672b4e04f03275338ce9c0f8aa56dab58ab0b1977da9f36a76e02c26debea442dd8= c487b20b6ca3af0b34767adcc53913d2c4bd33c5cab0655dcd05aa3b49f0e240537e7989a= 96d157b6a44abd9570277aca7f83f861f6457b2644750a608b25168729ac9d73912ce3b6d= 1373bef90be8afc36d8a4d8e0f7d3e1f40f51b544774a6758f3e83ea17ed1dc8704d4dae1= fcf4d38c9fb53b92466a89980db297806cf280ea63cac214f61a3ca1c1778630961058350= 9108554d86158bba4a82c48a9ee4e4b821a7879c94e4a2212d03eb5ae26678bc80d575067= 3e917826cbdadd6c3d21352cda3bf6f31881db9bb751a8124df22166b951b68ffcb077c6a= de3b38b66f88794c7e13562f2aac0a8c7e3a5900dc211f04070a3ec01ef274dbb9bdc1886= 7aeea9ff257ca4b617036ee4c8f0b25293a00d750dcfabefd73cb46a89b936287b58bba7d= bd4cb41ecdbdf331a59a5569a72d5fa0a4ee481e9630253a72e62a5738042dd1ce54d5d76= 44c965980e4995ed7789843dc4a0488c5df5bd934dc5c2478e70663eb6ba14c4fc187ded8= 96c8081997702f20a314a69fba9eb3a0eb57a821fdcf329f9e32920c2ca387090679aa630= 83659467a12f35e4571798aaed97e2c80ba02e289355ee487c48c38c5b06e9fb4b7c0e190= 0bd18f81ef1917bf00ceb52097245122941ee654afb9c2a2d91d7d88a97c79d029fcfd76b= 2aa2346a7b5f2470a9be11f445cde15ee2032e4403f7221e9dcb17dc323082d48e67426e8= 2f6cf2543b78187eb148b949516909bae090329518d9dd44ba0c1e0a8ca94a093a24340c8= 4a097965d581c59ba864da0e77728eefc911f35b92db3312534262b9928841e89cfd3bc66= 0f847409969cebfdea633cb644392d33fada6cbb00197bca1d9182cb923df7c23f9565eee= 4e6f4a4e62e3a7b23eccba87d2cf5fc46f1e7a50db248f23ba54b063a2036d790fc7581f4= 2934ca417ee213e87400ff4fb51538416b85bdf17c69bd823bc34580c9d9ac9c4fbf454c0= 76f627dc489954c013e6e25b1f497b3b08a3c57b301b0a20bb3dbcd7188de0d985ce8265a= f42d5228285ebf4f2626aaf94adba260fbf55d48131a2033be920b53d1db4fba03e162928= f57fb312b0cb2cdfe38cbb75f55a225f838413b7530541ebedd63192a945c3c6b52b3b4c9= 957cfc7ad47d7c352f0dcf16e527723533dc6e7f57bb3f0c5094f4cbe69c4a71f62b64572= dc70a2e24064897aef5625da4911f4abe56f9b6b93d9955a7243d87d43cc3433a4f0b1a8c= c92cb7b748cb350bfe055cef2998e849f0400e8f5e4c989575464fae2c6ad80753754246b= 81d733a0dd5c4f3004a499d62a5671336daae9b722673d83f5a78c34e5e13eb1009439fe0= 82ca626e43a5ec11335ba27285ab088111be2f02c395ffbea5ce73a9df7178203f8da9420= a529a603aa13408f1b9cda04e711d697fc914f0886a568ecc2066a348010dce05330b1344= ef8261c6ee6edeaabf570e8fca91b65caf79e6139f7bc4359ec2f0ebf1f5c9cfbcb6a03e1= f78ec090d5c92eba93787a5276b3773790d061c2fcbe2fccceeb64a236e9153e803564680= de17309fa276330faca76365725a7bf9d2f5930250674ec9088b8d361ebe611daf73d201f= 7a77c8c25ebaf92a18fb46f76910b9c400933d0a87f767eaa2bbd687526c6e3d3278849a9= a7fb39ed1c672fa16d7b88010f7a330e521f14e42df0ba1945ce6dbb261ab89f48d5199e8= aed6d8dda58d8498cd90cabebc0e4c60f8ee7587abc5101969c45648082b98334fa89266c= 6a23bd5c631afc6be152b2d783bfbead85b3e22493efc4b939e7204f7ec20459b3ff056bd= f4b4547864f8c6cd8d486c8282fed9bb31659e06d2110ddb88f33938cf89b0a78e7a2fbe3= 93034505f7927e2858aa17063d0a41e0a4b7eadcd39c05cfbbfc63b11cb2ef300f65b6f5a= 5afcb167c5b62dd55242fff9df30cad4a89916dfd92ed09181a1a51577ff9e91fcae5bd4d= e50004f0ffb9d79e1fc2e05d1ca1c917383607c0e24a93110a82ee91e7ab3eed6df4c5440= c564e47be92ecce66f7c36c3fc6b801aa94527613d3991e676d4624c9fb316296cabdb4e0= ef1a3f46cf77c83a061514bccf5f7e4ab6e2314987ce94d900cf02270e6e16255e939b356= 3b17dd40a2c4604e009f59521ac55956ee37e5df5a872dbba9fbed8ec599504f25c40875a= 789892ca0c9dd9162a6ee3c0a8ae128beca317d811e725b8e30adb115629ee7f33cd8f945= e430b0635a3fae2519e6c2c4ac3c9ff22057ae3a45702b542705ccaa1bf07d141a2e82a2a= ea2cde69de0d1c5f6c78efebfdc80720c3d60c21a6ccd4c90b172f0a6b9d05bfe050eb31c= ecc4285ad0ab064e7151278b40283ef21878ac7cf9f29fa7c4e4126745e5c7c38eee2ed99= 1c74d471e947914f526ada124de87abb07d91d0cdd0a6c9568b5ac8b9b321801b00531b74= 0ac01f3144fd3269f81bb0e0dac83d19000b8338ce51d190bfa3c1892f789de131973b9b7= 92a01d4eb36b31ed4572fc330341640acdd1b54ea99a2eb53f0c450fca8cf5fcad4befd0e= 27e1132520f228311e905067a78038cfdf3d4935237c66c3a82dfc08c3cd5eca6b83a0a21= 2278aa856639c5583af0b950679f09dac5c5158879f3b4c046af6b287c67f954a8b2b840e= 9dac8a109cb4dd37a784eeddb688bd9be82f95be224fd67393d97e96d8dff8be1cfcb039b= dd1770f9f148a7d2b4c3def33fef78c1e5511e3d77a72b9686e8ab2233ff0f53cbd4b4c71= 63630134d3bedd15c582689019611591f5b2508811b22041682541393a767fc95b3804a80= 66c344d139a6eee13a5c19aab64984383f31bb44565858e90740e26371d8e878743794fbf= 73da83c9167c9729a759a762dbd4bc456e461f61109e62e099af2fe849188b894dc3205c7= 0c3ef9954ce5e73a7af7508c762f2a253e9daf7d3c2a64788041781d0d0794628a32dec49= 1b3ab0e2b2afa5fb706a4a3b858a1839b747b87df99f75783963ab2cf77167f086c3b9b54= eef2246935f86373a6dc862f3b1fe62e8c51469a636db0e2876e8b24e1d8f6a72f9e3de36= 1ac109fe840959af979388a5e97ad931c1df04b9564e34e8a8904951bba6a0d16138d8a37= e6d6611820bb336148cb98184a6dab18a5f9c1a59c0e870742264f12d949500723b112837= 0d386d3e033e89b4c9a5471e6e322f46b6aca0f4cea46ffe6525d483763cff17b6ca94f64= 82dcf983fcf9997832afcad75a6ada9637dc10b6aa50b1c15988846b9d303bc827493f681= e93c6afabc2daadd8ebddf59d27e46314293238d061677a0cad631aa40ddb9fb3945fe451= c4c0fb90789293b292a6accbf42471610938fcc26fc1547024d7bc029ee384fedfc33fab5= fcc0c7381f7d6a6b0582437245f43471778086998509771a15270ad39e2429302ea91a058= 0b5f40e6aa3d93624a5b398ac2769b73f6d9071fae4fa7e09770dea3b41e58b2b1e869a0c= 67ef1533a42c9fb2caf077154c5f50b05151cd1586f19d06cbc7702dfa3bbeafff04dab1f= 85bc6d4253f0a3e9abceb3fe2a8420e01e7a03bc9f71c4d4fa9a47e49317002201fc1912c= 725a7c22eab316b4de8f6778990c86d17c94ccb02ae2e28e34dd8e2f16aee68ef70d43805= d0ab1d86874eeb54dc2b0d307fd8c6408f399049d1c75286ecc5d0ed1710d609da8539ad4= 5bfd57e263afc09f2e50e317ad5bc6f0b6dbf7bda7f2f247dba190dd27b68bfbf3f3241db= 5521e73f4d98fda8da571cb4e64406a703d91423fcfb9a1c0bc6e4f77bd67b146728404bd= 643e2bfa8a6b106056159bad07a1ef3b748a40624591eaf61350c49c45e12a6aa64ab847a= d0be7df3a954c3fc9969a613ff6d910f3984014508ee82fe38fd369abb81b023bce6d2727= 1f0e080bbaa86b2ade06532b67e1186b874d5bc597f0c04385e04d575ad8a2211352e7247= 8cc52f986c5f65f8e9772ec990e30c23f51b98da3bcecf7bf8d11939fe07941e9548a6f8f= 4e5427b21959e095048b7e569c3a2a94fb6559248d0cf25c2cd8982f7144199f36f45c366= a2ddf1225e576333fb4c6d1a674b384568e69bf78a6fa97b453c7b02c5e5ec9bdd597db20= be3f1e04373c4c2686bbbbb446402ca5fb61ada4ab1884e2d239e35e723089042877b30db= f083c7632e2dc419c0f24a23ee464405c666c594509848809aee6c0ac7f41fa5ed0e8782f= 5a658f043cfea03c78c86fe037866a11ac63be0e3d4b2ebc2c59a9a4cd9759d6170695a53= d38dc1983030e4bfbbfcda903c6394ebfb8c0bfdcf53372f8114306b283aa45cdfae3a7c1= 6def7c171ae24ba5db5d09990e9e90b01246bec79f76ee5a4500e5be0fa5402634e7bbeef= 438fb220163f92614ab22598310d5890070f42e3a3038d26b9392a0271814b84ac8eea77c= 235e7326b37c27e6207ac8fde9f4e38ae91919641043483be774502b0e318a8a0385461d5= dfc62a3a6f7984dae4a1589711a2a2ce9dc19e3b42e230bb1e2fa3c00c650272a034666e5= 237bd9570d8b824366b856ce176b02568ad9671d37e57d4fe9191c41dd6c9e2b70aa8c8c0= 6b7dfd2848254afe5762978ba9bcf56e2ff809d9fa6699e7b64d4ee2edee4cfd7cdf66f64= be2d41c95cfb9379083de9424af4eb440c965ffe1a5d4769d55d17bdaaafa06d85aac81f0= 493e6ec81e7ebfa574a18aedefaf8eaffb824d9ac1c5b14824e93932ad04dfd21b3732fea= c0e5a01206447658c0b96c10f51e94a85eb48b81ed88450a3cbbea384440676400363c403= fda6bee08f0b7ae66a2ad9e040ac5df9af625abf7fab0168e438914c0d4812a6ff99a2868= 93880289106a870e98e7c6cc7600243bf1e9dd5ef32b7ecb788714a86ad860f45de8012be= 4590b5d6aebc9637ad90cb6c99b500b8f9c453de4221a7c6a0edf8949ed73f02f68940a62= 818dbf0392f8b4f491a6be05ec88f0faa6f605c8b7d22c7a34a494686c19e7d985ee44827= 2d37fc981026f65b6781c2fc39350a780bfc1096a5c6f9c3b8be6c0ebb5f0fe363f24a2b1= 671d0e6ca7def73b84c475f65b065296dd3a85746c0cb2817adefe898bd487746fa246030= 0596ad18331cb6dbc636c6fc48093404f804acab04efc20497729713e834e946e9a0e8533= 564f95382c7b16bbb03fbf8b70f6c62009cd205b94c6299b6b9b3244ff5d9d3822a96e202= ab7c4332333b1c403c49d581cf8b46b49eae1dc6c56ebc3ff41149d8776d395c0d53c4963= 53a53615937e437bba4ae65c0edd463001f3b6e02dac7bb961f237c376f036587dfe999be= 51432582c1012621ccb104ea93d1036f58ecffd29db78b5507339d3c0b9bfd2f2c3b91956= 1e997365f476da8b15f7b9e75acb7e36831f4a45457b1a58180dd58f397e145d7e0384e12= 852cc901c17b6882b701da329e15bd927c18165e65db36c200a00c54e8a077871d0383b0f= 4b598b9e498af3b82feea8aa102ae334610a0929e8d10df51f766a8e137912f7a50c9cdfd= 30ab6e6a02cca37fdf443f3a93be6d9e66d9a9aa10a62b927eb6ce3f6046d1f2788457e18= a69374d431478fc71d1b9dfbbceeb401b886231f6e414f5ea0d0d9d76bfd670d672391cd6= 5cc5604c2bb1413b4bbebdc6702048cd4cf1dcfdab8f713bce5539403dfee17ddde3bf022= 437607a21b0a34023856b8544e3e756228f5a51ffe4df8ed31bf13da36de9cd23069b3b08= b5af5233b0e373148edd759625c6e02ad38c853bd1126a375dd4041308e82c84df298d911= d0ae910f16cf15e62ef65cbc11d4dfe9928519200bdeffb0e347c28081ea8c5a2af2481fe= 2612e1a4440f15116b56cb58bf2025cdd87c07f92602663137a866a1756ead7f495e8c220= cfb597dfe858c038f8e07c8b20ff0e4bb2fed1f9b40417e5a5421020d833fc634fcaf2846= 215ce29dc463b0649a73725b8657f4b1a529bfc5e74401e3db4ab8e45bb380a669171bafe= c2c75e272b7705c847ebbffdf268cc14c3e10aab75b1e7e960f3d3c84b46c55e993f75927= b0d0c9e9fc384314ef0a29fe1433b2102d3f0aa50a96e34ab9f26d06e6ea10ba20e24192a= e9c3288509c4fffffa5a722929444a972ea58efd75fcc7438a8c81463bdd4daee6b95631e= 2a32d336cb5766feff39b4738085d9ca3d34f6b54e1a9a84abb11e8440c2079cd600657b9= f39c977035fd9742f3d801042c329da4be45e53c666103e2f32764b4751a39dd2e2896845= 200908f35f744478e5fbc22b07a195bb4e9a1e5958ddf08155968eb0a5390483089ccffff= a7ba3c0b07b206c64f92619e0d8fb2865f37e720b649c77e1760b7b836e3b9f345ca20696= df05fc2a614c007bd559b1285a220a9f94563e80a48afb598500a99a254e86b206888051c= 5bb3ea007db2b8fb52fb9d4e7a40d3619267101c280d8b3312b5a465cd46eee3c67132276= 45188565017ce6aedab7577e775c3ff6547212ecaa7be54f63576deb37009951542eccd01= 62f8eb1d20514e65a65320c4839b5a64cb0f60214dc6bacb981513b318b6b3b4152bfc562= e1c169c16d7942fbcd97efe5234cd2522690ac236b6e3f5808d6d23420b4c9fea53ccdff6= 60ce5938808fd4651a1f067731387bad48e6673e343b76fd190c62b5239f867e94088dc50= bfea9615856cc3dbd45b94f57c4074c82fc6b8fb610bc2371cb70738cfb799306db9a91d2= 7f2f18b1818f63b9ef8609ce0667f8a41518bdcf6acbeb6bffb7d0446680760f504f57fa2= 84bebb5011679b83f1399674ae448ef286cf546e9e355e5995f4cde3d5e9dc305120b07b2= 8c07e042288c26fbb4d27f6c8b1331e9722dd4c32999a54d4f6df1aba9fd5f953131ea300= 0be6a5a6d482784a7ca9c40593c54a51e709c45d63a6ed3cea3dbfe58b17cde60a699aaba= 47ff5c0fc49b82a65c293dd811eb51d425b0090b820148acab1c837fe027b280b5fabe0e4= e39ba4a8072d343a080f430653026d96131801626157b666ef1e8ea6ac1efcc8517f6a47c= de94a0f7be50c33acbec54e183e7c087d801cbc5f2f9fa93ac215b52f468d344dd57b5215= d30772fbf725e9c26760de10072ceeaaaeda99791752b0246233d6737c4f0f3161b9cb7e1= 751da7a00045f70a58dc693ec5b612152f2878e3e75d11396ace27ff96115820b365a792e= ad3960337d10fcf3bec1ee0f49943820d1d5236695bf211340b9e1bbb8845ec4308ce5885= 55c9710160acbed12916bfa2e3de505817cf5e2ac3942df6574ef4541782f10c469e497d6= 9946bc385170a78b1ef5ff1a36f1d0437e2a8537084257289ddeaac1a207cfc389e7aa523= 53a3240f6b1069da9a0db0d94be619b1257bba4407835de587ce95db95ea053482e3be2f3= c395607f7bf7c8cef6a2bf2a7f172934cb4e75b6e63096f6a295dc75ffa255a256106e765= 78878e7c0d8d65e634c57c885d7a698f6b2859dc54591097d1285f33f345375501aa09a13= 008da1dcc9ed35849418f9211d6e0934ec353c5884445a2aa24723522c4a9157219538990= 0874a22aa2f3b85673701ec6d7b3a853a872c2a17f9506fd473d2be965eb80e82c855e004= 48028d548d7757da56f7d2eb294cee4c72aef3241dff0e35a372519a6249cff71200eafb0= 727207a12d23ca50a5d1a61eb2e9a77fd22b126df632143fde0e1281e2d0a014e13701dd0= 1df30bd4cb3639e79aa142bbfbb9924fc5bb6085e79d225514f99ddb33b24f45e6023e47c= 3ff9753f58ac967779cf7bf44a4130ae7a9e11677ee8dcab231cb8b735274b5e4a20c0e4c= 2d2ed234d446103a4df2ca2d009dcddce79cbd87f00f6411631e16d8b50f32a726b3311ba= b75b9972280dbc88fe00890d5b91995ad5a6789a506099e6dffdd7b0ca8b62ea9e79a20c4= c26e217a92e3e73e10f6579a8a144ed15a699655149f6a7ad7b7b7564be5166a14159fe6f= 704b3658ddb42cbfd6a739e8ca5441dab9d57a47a74acaca4cea367eb367ad2cd36b19440= ebd4d7c0826556524578a7a63cce6e109f67f90ef22c088e99df0c8cb3405911baa581bfd= 0be248dbac2bfe8436dcdded2400ce7f099a4650e456669de2bf4838285e85d959a570331= e0cf2b88fcbf0e46fde1d0b38ae1819cdc9c31c0eee06c92de26f52372123ece408bb9351= c023f944fec24a61e4c123eddc9a403f05cc2842e6134a19ea449ce6176b131ef1018b18d= 47f75db6ba7f6bbb38596f6259a9466f18b359100f74080b2ebae48d3dedced91d08408d2= ceb098771cbdfdefd3b2cb1fa8541ca001ad1ada61f633e4346621c9f5e21aae0057d6b4f= a930009a18475038b9ce8969454f9267a5a9ef8748debdd517737f5c0943685a32ef45ceb= 80259c956a0ae7fafc68ed182d2976901c7312ddb8d391edf74631af418d88963eb2d2257= e96707b4f1f588fb9ff47069ee675d3dfa9202aeaf2a1b0927e699c857aff25d2316f75e9= 4d651e4cfead2bb60d6e34bbee2fb0fc9c32db276f3b665bf15defeff6b6aaac4685c360d= 770466528310c579c2fa46ed0175ea72d0cb50cd15c9cb337f0a45e0d9f184f20ac709146= c3decc0bbd62344e0ecdeb3eb8509d088f4538df3ec5a15eea89fbc20922b12f13ba071ff= fac70c113ccb8c91472dd0af9bd1f8c652016b39fa3f22c805d7c31d191be7a0d7e8153d4= 5b4c38484e046d434cda68a6a411226629dd22de59be1eef757d693baf046a4dd559e2486= e3989851376537e367d06bed5617e6a8317eaaedf859b98398992b405bff49e8fd5dee85b= 2e421c523c6e6daebb3312586e937405dcb9227e96096f27dd779114df824131bf5f717ff= c280e3efd735547c884e35e7cb9b48bcbb65fda02df0bcc32a93cabc71e3594041d74fd7c= ce03bff8abc48f06f2061cfed931cc604145bd7048c215e151649ec9299147023524dc7f8= f73ab93069f7e5696b82ab22f56b34783d660e4f1274fdb297e9e9964f5aece33e918abda= c647dc78f624bd511db893fdbd262def6119d20ea206b5391803f5dd84ab52c47d9c88c70= 31a7446fec041628a94098306afb9e8f0915e712b0c469a2c73761ca1574e1a05a78fe945= 2f8cbe31d639c521c41e7f3d49febc70bdd4ba0e6da88d6f5aada525059cd0c788f240c10= 9c3c1344293beb237f98338d17cccf1c5944290e87e09b0748633a39d36557f1333edd902= ee1bf773fc48ecefad7493975994c37d93447318c3d2b3c599530ff59703fc91bbe7ccecf= c88075b36781d51620ee3be15f70990d0caa59a99e798ece6dc8611bb77c41f4808b2e9d2= a39e75a1d712598b7a18e982bf92cb9dc2d551806b542682055c9343bb6b5c88630ea5714= d436f8edebbdbe42ecdab6e44f1431e1dc61417a4ffa55a94123f5883d52cadc45d307021= 739ee2c8216f6a51bfd52ee022a87e97d5d365146eccef0d2bb0fd576f98ed5e41425fead= 91caa9ca59c6830134c81157ab42bfa5829adc3368c966ec9554c972fadbd9a3582a09a63= 1c2af85544d3574d146c7044dea4ef093d26a1772d1adf65a2ea6955970ae6aaa25f5f77b= 1b31a979dffc974444dfd45a7df3d7b1bd81b18589a99ad98120cc48b8c43630870e696cb= 6fcef43991860aa3061de73d357e2543b6ed09c7e01ae6dc1a2d31d661cf7053e11de4b2d= bf9ebb6f8f852aa0729e61f14b18fab8a3a9b0152809e06babe233cf04dd130e6af2a6cbf= 3754c277cb9802251f04ec4e48873aad75e97e838a6cb9c04260d56a17fbaf4c602e23e93= 5e1fcd07d218a59311b986ea1bb6f2fe68971edd73d2cc390edc64f201b3c2ac4ce01ecd1= 13718f7d03e6e8bae9d945178bec22e9c6e507aeb217748ed4b3d1d7eff2b84fc55b4f6e8= 010e5b853705d687c6e105dff706987834166ccd746a25d506d1584e4b1d84fee1caa797a= d404db80aafb854a3a1c003ba8764cbe04536f2c701f96a18f061d1cce419d4eaaf16e6e0= 7c67d8520ed7ad7cb22f68b4409cdff4cdaa6b4de9451837fec5a8e2aad8b6f0559fa51e0= 7c8cdbc176266ae9b5f79202dd36aaedb01dde04836295b923b5a0f499d9c91bbf26d1541= 02fd502329da0155bb5495cfca1124d3b007eb9bf4e53cfadb668364b7cd75f8711ad7f11= f0376e3cd3009856052da9fa634d82ac2ef2fd08e0f665be4d08374a0daa2d0950fd4ef51= 4b238ae16698350debc987d8223a3d677364cb49e174a256406d9d23809c153ef686e4423= b32d880017a15cec2302bfee304afecb472a94fd7c39732a2c9f433c44ab2874d74f7185f= f9d186d4bc685e3e16b8797bd17d26e27999e0c2d310338594a8e8525b58150273edb3a14= 42961b59cd5894bca9d08765e0f017b303e69f744053db3da958390f756f7f392e01c49df= 282d49e515377e582f8db90c97c38512f94e9686229028abd0aacf2153a5758f5e9f98d4c= 6ce9e0dc557208f5b91eb5c58c45c2b343d6aa1131cd65fe50f8be9de2defe96721b1e8cc= 7067af9ae531c0485f4e1f9d6f9d96d3ffd5c778ab3fa7ffba24a4581a96e075e744a65a9= e3346efd6b62be20817dc3f48fb4251470477dc6d441ad731e58f8df98d87ce1528fe622e= ab10019cd1b2e052cd25ab92c670afc56d992de06d4eaa88107e992d4c63a21fc5c9673c8= bb0cb191c98afe22a00180caca7ecc2d7517766eafe120893f4824b95538d791ef75c3d41= 83841eb0348f8a25cfc8581f394d1ef3f8e7bc07034bcea41c10f9950bc7fba17a0b966be= e37205b671e63e276e32157fc342420a2656052d7626de7c82966e9ea1609e038b568a847= 4b56ff641cb8dc5eb3482004d0483f8799dabbd15c9401b646e150ee89b9dda235d9624ee= d37d408cd1304202314677d41e35a1d5e75f9fdb937934ee61e3dcdbf304ec26ed9cdb24e= 79c7b667ec5dd808ded6b1a918ed54ffb3f772b38c4f3655e0a6c659ee4f220a46777c534= 013969495f93b9f5eb3be9c262990b57e56252781d2693fc99e2262c3661897cf4182c88d= 89e8a3e50816e4b9c172f2eec388f5a10c5701dfb00ef4350f362a184fcce0fee1c5beefe= ef4beb143586049a56781b82bd5b2273f8494652249e655c573e21ec529b321c8c287dd89= 30dea30ea37ca23dd513345a72d1d7b6d9f250b4186c73634b8f6702fca709a1becba1182= 3a0fc3c80624767d86f5b75c6c04d3bfced43a2e02a34d54cf87ac0c8f82ce6cd6a324f37= 3e310c192f10418ae9e62bc7a0c0a2a527ecdbea7a3f240a0e166557c1b518c9079d2da4e= a0df0268dc3c5ca18ed51ae12fe04ff1942399194bb21fb7dd204e3f77f38f0967ee32b1d= 3d19a7ff6dbf7fddd0b9b27f966ab6102735444cd7eaecc86724670cc4d1719fe8801e1b1= a4234bbe424327176c170ec1af14f64f39f52d1a3d72a4d80a86b7402b8f9079c2370a3ea= 0d656d2747d4fd5a0a3503d5cc2637d4e0a727c66aa1a04e9d918805a43f35454e0654453= c08ab46ca32aa4422a0c1fd7ef1d35133ee508e13d479797150156a48185c1b472d16545a= 2f18d84858ae9dcb2fe20a7108a570fd738a729008bcaee4ffddc2f59426d81791d53bdd5= 7cb352e310f2cb717df22af3f6a214ebde484acb1e1ac3b75f431a1e679406fd0278d8f33= 2e6fd51dc32ae11d96bd3228eb497c390abb8549f24735cf75eb8ccda87ff1b9f2c6aec56= 2ee99adc51c2ef1aba5cf336713e9cd95476d0535465188721177f3350e5d452dbea8d966= 461924852228bceb4ad781ed3b3bfc2011856f679182bd611fa539dfca59301b26b1106db= d1ff6d7367194239d28957c57c62de322a133afa25d4ea4f2913290030c9ddc04c896ab66= 03236abafa95e42da56aa217bfb6831437d17fd9c95ffe38e9bf6452ff05ec9dc9ffd93d0= 70777c331eca0f9c14fb83d60923280e7e15d6eb8642811e9e1ac33ebe9337591be847196= d702e765aae289615ff91e6605d07f6abdc54a289494ac9df90bbad701178b0397a7de3e7= 49947ae564c31b24ca41670d8ced701f682fd0e15d41428b02fe50e0e774656138a1a8376= c8d7a9a8cdbd739db7b1450e91ab9b04dd56251b1ce89e3653651f77f9872fe0e8e7604e2= de330e28e906492b841be69172a52a1e61b287be7c6fe4121b25b889d0596f7511c86c286= f75ea0a7b91d598f7c9e4a6a51b051a56226014c3ce6a4de248e7e0fb2020c2a520b8078a= 068328545dd0e9a5fa3a6e112b8d3f9d4b844a7e1621d377e3d010fceba6ddc2f2f4cdf16= 556a5a3217ee0dbbab8d0c75f7a8679a946bfa267f49d56587ee3f8003a43ff61c3329481= 6cf81fa72422f6b39c85d1fc179a6bcd289f083dafb087b0bdb32da4cea9c5899c0b25c30= 31ef73f3f447231bd3fba620a1596f74b81aaa066f3626c79d7f02118ae1e66602282c19a= 4b79cff58b73abd2edba3f329b71981cec71365a8623dce95692a603f97c409150a34b911= 2d9ac51004149b8c7940dabd2f8106e27b203798ffce48ac5d12d087a21895d0e9aeeb678= 61937a8443d1c25d516b44834db724f4e840397620753c2c0c30acdc02a597e0b7ce04286= 2438150bad82443e66ae124c03f93dffbf02ca5b6515b983820c16ba5c6c3943ff9341974= c52a84cda8001dcc51f6bcacf385a360e11bc82bafe733fbeb07e0209927eaaf7510fa19c= d002c9ebd92d9afec76d3f0276e6b97b23c2d8ea3b21e786269009ff29de029db7037cdff= 3a1efa24ede5ffc9a9a68e231da65070c15b8752ea19c417b85c014547550be761eb503bf= c298f3e515f002a79f0fdd415d90d00c05ef8978e96c3ce1f0211e9dd76c01c91d50f2a41= 3f88899903042c7f673a68ef13fc4e48eb96ba057c6e79bbdfbd11b49d8540fd672767542= 2b2a6ebfeb04601ea0008bf094127c914f066a5760d31d4a9163bb1a041f43132d0cf9a24= d482131714939596fd540e38c457c270532a9d504be493e92fd1fa7b7be93d74b60fbb46f= 13bef8e4f54ccc7989be8b0cb8e291c51b10c510f6ee07cf485140daed6f35c67dfb6eb26= e5424ae3970872a5e900b0af7cab3cc7705eee907cf74b763bcf995a06f8257f120e28b85= f43a7c1f5afee8515c503b249d1259fb4f9e72e158be5ea5f05c640db01ffa6b5093a5cf0= 809e4ffa3a9cd13f4b098f0b6cfce5eda5ae73ffcdcb6514450286c21e89409a4fb5f7004= 6ad8659f576af1b77629c3d4bcb27ad9cd0d8cbd4d1ad806c8b24ce31211dde487c4dbc66= e62b455364109ccee95b100852e88c231ec9892ad18f49a0ff80c9949d6f7c3957d1bfbfa= 6b2ee824fac9c2e4abe49383d34dc84904c805f2bf93ea938ed4b9133fed8dd828e28eaa7= 0298af5db13b4a9fd0f1503bcfaaa189f72f540a237c493963d18831b7b242b3cd0fc0940= e8a0ae0f67f56cf383526661ae7aed53c05471fb43ddc8d7b4dff929868c35ae3811f94fc= 981b2126c6e4553912120a1db1af432cf38a7beae960850d966116368e9de3571f57aae83= f6ad1a325c4f04ae32e680b98a4179c7698313bddc61008623163ec4ffa87bbc056aaed1d= 06e9485ec1611afd1a749f1d1f3600c1ff4fbb2d0ad81d6c9d0ea20d862cab106775d26a0= b3d2d7e2bb5af8b4da87864325df361973dda1d2414a956e71a5af6cf7a9069b99555564e= bdf4d079ac4069cbcf21b9085c4bbc639e0655ced6f121e52d7312352ebf7022db9183b94= 24cb169c9fc1d4cefe0a4f6f3ac41305e02ebd17f546ccc9254093c12f969f8acf4aedece= 6eaf657f9a02f4b17180aca378515674790b7ef794cf17b1db1936ed3114c3bd69448d1c4= 8f91ae96145850189021d0297df0bc7bff04ef0ec401cf47d44e9eef88685aacb4a749194= 098ff6377ed68fa07c0719cc1112bc6a53ece42ef4550681d7db7326cd077d232986de1bc= 407e686dd944e6e7dc4df39ef8a17a6ab60fd8c0aec1387d0dfb2e7e6d6184dcde73be500= 9fa5e1ae2ba941c9f8a40d2fc458f379d2b2db24d7cf2ffa7d7298ec3ac22167498480698= 0c77be9701feb57e9ff6c994980223c09054cfbdde4d9641f541254d9a0d50bc4836f74f7= ff92001f6d9d3b52b5c03ab4b302b0cf4c98112f058a54a73b4a4f60c9963afbe0608ca6e= 6db2c3146a2e62280357ea032166f2b5a8e8cd966fa1fd05935419e84665de4b978098ce7= a3e28976f5f92c6015cbf368e91a776014f9498baab83bd906d54402e45cf22a870434e19= 9d1562b3a1ed155c648d33e2c390fa4edd8ef2f1a2eb0ee11f00de0a61b88fd31a365c959= 7e247073a8f7c114216d2ac18bc870e31b3bc720a27fb70436d391e918e2533a26d2ab08a= 494306999121dc0345395b76a83c2874a70be7aac89c4edef526ad6a8f935374aab8878e8= b268233eca65ae16f524da0e9675a03a7a57b0766a44a7eba62da13242af7356dbcf8c192= 7557d2386b142aac42997f21b01145d59736a7ff1aa2aa2db1be481606bac2ce3256a7801= c591717d985ae9a17312b7b096ea193073bd579c20a9bb06ca14f4a254bd71346998dd1a6= a662ce0ccec2b28f5d1d113375c22397ab466795c1a7ff54b2ba6a6778581aa72eddf7ae2= 1d47f7f43f19fe08343cd064c7397bb37507316d269767404e16a4981ee1476061adb199b= c213c1fbd1dfffb9c93fbaa8240fcf53cca6d2c6075fd3e2f85d7c5a40b6163d8552d04b8= a31a9261c4fb7153f406627286e534c0bd5e93e4691f1907d8bc42878d90a803fb1ae4f91= dfbfcc6a3df6c37abe50b54693208fc104893a0c5c3f4304462ae1cf3ddb02a72a45c0d04= 5c3202cd484b1cd23b930e62917eebe2be5eb3b7b97b0c88201417eb35fb5310831ae616c= d21a47936fb5280f0b9ad6b440fb1b405feadd15c65ec72e089818c0af40fe655a2fb91f1= e54e51c24b604c12715e4a1c9dc7ef3fe43e7cf4d53486f89ce249eeb11796b139c532591= fa09237db45187ed51a2a6e57048e8da2faa7a878f381c1e1ad21f8af81bd13aee4ed5e9b= 9830ee5107eb0cc000d671c48c702512827dc652e4fa58f9e5ef5ca0a1ce021a3bd1b362b= 67bcfa65b4272891dd75f5d64a65699ad0ca625638c76eab6d01a58dee1fe0eb74e170ec4= f9d0d1f5884ec8c9890656d8babc423e5fdba50dce537459a86765e3db56ef0c6ffc8e11b= bbfc58740a717ad46fe518502fb95d077d658563878d2e8ea265bdf01a65bb590569431c3= 733f0e7267571dd7a330f5173739d5a896e8fa6a78d5b045a2529fb7cde2dc2794162edbe= 056755ff6424faa51624ebcc6b4f93d82f4f2556dc9bf2470faefd9c9d25e61349c61d57b= 173f864004b2b068076f493289b8c3c66d87604b3c8c9055418ea1d5e237c2dad043d2953= df6818823b38f0aa654cf2188e6d35f42d2894f3ba39ab4320f83ef2ff37ae5d3fdf879b3= ca22cbb8a26993d61ba19abf01c47408085cb6ef38107f4fdd8a2cd7327c0c6f5e4791e1e= 63eb2fd63e662064b4ff64ed63973bf232804422c5e1335a4e0a9a736912def8d9c360709= 0965c4f24cf10f08699b4b557d9ef970f4c13cc95f63f976c0a0243dc53caba1923bfb4da= b3f46e30a2fa4199356afdd7b35dcab3ef0d74308f5351534a246a93741e6fa1f263c2b3b= 159d227210cb3685cc53c4022066323ee00fbd17f1f4cfb5ba2dbcab644ab963eacc3b7a5= 7e12e0a17d85ad530c4aa074ecf73c1959e0230902a39c26157d01eeca0f5456a15b18678= f1d0b80366671837ebc300c449ee83be553ab578b10839cbf551b9c04e2d95f71a20facf0= 5b74ead45501a419a546e78ca8c30e69b66db26c20f8c575bb394b381d3d99b48ce83843c= af67f8b4ecd2fdcdc63772c39803a57bf3551a63aec7339cfabdea5d67e0e0686f6ca87a8= abb4f100576dd4cb874ba808e23eb07ea98c16f7a9f1ef7a0a1ab5fc36fbaaee9876880c4= 10e29ec0cf336e4c81ba0e421e632dd4015373f1ce6685643522c4f36aed85ce9b1489a02= b060e523ee486731afdabce830c7d9673fa4722023bd469cda15b06b46b04ddd22adf7c60= 42d1ceb4f6995ef8c28427d0997f4eabb75c1e0bdbfd543b77cb57dad51111ee7cfa0d182= a020f01859a0c2a863f33eee745ea6f03c2bb5a403c7f2ac987929944a0118c491d26a8ef= 66cc769fb5d04ae0c24df1d9b9db5cd85274ba1dfb194bff7a91372812b962af281a8089a= 3f5335ac6f02b2c24f9c89c27c67b088efb838315178cd827517004671ca0a08974055b0b= 1f018264d5364ce49a386c28db541595d894892beb320509831beae044249bc116e9f2c2f= 427a26ea0ea502bf743f318094e1646c20ace80946494761d5f50b74cbb0d53177a52eb49= c1d6e2f1edf1f82fd70b6c5b5fb13bd3aab42329a046fec043fa97404be19be99e9988200= d0cf4b7c277a86db0a42c131fff5c0fe662e55f6be1e6294960fcfb388d97bd440dc18566= fe3bfad4f4189604cdd59b14c2a599008e2a9ab8e3127ee3c626be0751baee6cbefa18473= 6a0e74ac525d40ac35582c427340423883ba93a81ce251c857e170b8d47d62e634975156f= d6b111dafb583dbd39777d4526b7f975bce62ea991b738f43c4b94907352d9b849964e955= d3c7abca96104ec68d99515518c01a675111a0dbf078cccce48db4564cc9c1f41f348377b= 221aaa282f93028bdd9d9dceb379dcf20beec60aeceecd86ef07320d74d3243c6395fcecb= b1c6d469e234eab87e8f4da6fef73d5f618386aed1d6923a031329b447b215abc8df533af= 9c82ab37e5c09e4515b7f6345f561d886f76bd4b82ad6e8f0da15a5fd991779e30d423b17= 089e0d3463d36993eb251c2928f56aef32d2d04fcba8e2371a70aa0d1bc4c946d41ec5555= 5f55e3b1d7b125df31be19d74d7eaff250f56411d54db9da3f05d62f806c869b7d9fa7f0c= 35b731437396ce6fd94cbfed0cbb10fd82698afd5b63d70b7b5c60b3a7314f300422e09a0= d14643edc5f13647c7c5ea6aef2bba7d4edfa271abdd8eb1501e7c1e738a65d8843b334da= e5ba71e8a7ef6e632118fbf9261d02293357b98658fa8ce79f7c3a9352b918216f7bc3533= 5f1ddfc347ac398e27e5a58b2359e812286ae8a7f0e4e8abf5135b6da5f2c13260328aa36= c0452e8e44049450ae472c7b75e61a03d62b2b5b70c4da28daa41dddfc500aa817603694c= a858b5a8237c4df657e4e3ad244366d7a89b4e01156666c67c7f289a355329c465b706d68= d912d253731c8576799b307b1b585f4055d26f1692f5b0be0c7c3a2ff68b9d61839722885= 175a22d3a012d3520daed6188a981bd271ba126daf0b028a57b07e0c853ebc414967407c9= 3bd0158a9b0914a32d57df5755dba9bf304d9b126420f3624357dbd024cfcdb6dfc1a9f94= 0a3c99766aaf0416e10c6459fa033fe497cfab827a4489229f783bad2bab4bb9736cdca41= 632b2016b63a6f73a84105efe2e1302cccd8035916c45717d8635f671504d623e00f23240= 2f680a4ec3632bd4fc01b3b139722398604378630b620b660cb2db1a2283f6acc0e95232d= cc8190b88718762c250ba55255ad5247e8940fcc46cbfd1a93b773166ea1cb6cc8e123e83= 584513c1949975016d7ee217cea14bb1e75f1243d515ff5f9f69ccd998fb280c7f4906a9d= 064c4cbaf3c8e2f5fc1ead49c3bf865ba86df66deaf14154cf9372fa43129439d0e77ef6e= 8b24888cf2d9410e6b8665cf0f9d523e38cc572d686a56b50c45c095f12ea9177f42c3fbc= 788e95dfb7992d9005a066cbc1f5219689b0356212850ae74352defe5211372f6b39219fa= 46d59fe1a9da55cca021feadee6086d5d0072b3054081c00c0cc2c82d2adc399b3447c2b8= 1f37a2f92437d16b56c7ea786375fe283ecd5e9183ff8812f09b66f97799ab57af8b03aa9= 7edb6a66d667ac80906ee8e64b17fb29db8e75fe27f3474ea6c252fad85907dff3864a153= 4aa26151986ec5cd614435609c939830061f5d4129477184d01cbee6ca1df3b67b08031f9= 8614ee6e062ef01d561d70fd4206b5e9bf84e91e8ba796a4be2b1c150051939627cf30a76= 41563210432e820d10329b40af1421873081ff8de2c245a45d3b84553354a3bec16bc7556= abf3d71ce75e54b463c3dd188ed8164350de32b914e0f1ca20eeb4c3dfc9871213eedbe3f= 61ef7e30cdcc5fbea6f014448ca00afc06395b6ec4127d647e02ec29e19483994b93a4c91= d8fbf237c9dc19613842a8389724386d8ac01e4b265004c9579b5ff4969971f8d2b5735ab= 307b1aff87a1b543fe0d1fa1c9e0a9a136a723f48e4abcf13ad23615025fb82dd311e97e6= 22a9557c91f60a9a802ef4c5c50241ca38cf41400cb6c7c75a5d91b8d9c9bb6823e303074= ab81547447e7b8af8beb84ff65cea1749557a09c3c7a1a0a56edc7310a37375ff50c3b99e= 82e67453df690616f11e07285376c725c6a82ea62a12ecfd6d3d95edcc880dbd8bb3694ab= 1c26354086779fac18c3e4a3b318de13841f8151e90bd97b55435bd47551006f6bc012e94= 21d40e6b78ee333879fb362a5addaee9d18b0645722239a0589237b8c918dc03605b39d1c= 5fdf30f8b61ae664e92c7d54ce047a65a96389ba15551c616d45f3af2af11882213c28d1b= 2c78020d68cad262872ef8e6f3a1b3ef2edf19ea1d4b8486e830ea8eeb72e4b2f9cee977b= 19bec54933bd4e6a4c25e9633caade0fee0f1cff62e21f5a3122479197fa7cb5ea91e6ef7= 1486a4854d045b08ef2b9a770bb2459586538dc3aa90e84974c10c9309f7660e2ee53e1f6= b125cc2db62a010593ff05e80af954f91dde00040ad6925e19abca3ee308d7bc6d7c054d7= 6954e99095fabbf016b79e927f69534ee03755ca432a4a85807b579bb7616a102522112af= 93256456f486be0673924d6f314544ea1ad900347eb94644f00405aaad3695a1ffae189de= 63c1f31d9052d112bc1891b1878973231bbc95274064d96e9607cd40b804cdf1f97a4305c= a0a636ce4997fb98c4c7e6e89be8bae45ca8822d947f1d3196ef33e8675d7070ebad6daa2= 7b822f42f82d1e59b8e7bde0e43661b4b6ef1a7dd66b97856370cb3f58a1ad0cbf367a0a4= 8659555e56477dbb8a3bcb2b8680fdfa3ea15f63ab76f5ee33ae9e68ec75a75a7363a89b4= 9072b1102c28422af79faadc31eaa2b86e460739dead641825ab10e4f76625fcd2cfbc313= 285cdd84acf062f2c71325ca55a7d54a1814557b0f30abf1757ae85449e8a909945ac455e= 8651c893257754b415027767ae5496882327d2e23161edb3555e4488659c826605659522b= f23301dba0f072d3cca7e464181b723e17ac48e08f3944abc278e493cecaeb0b03be009fa= 1e7954b2ff119c4e2adb861c89103e85d50469d1cc1751c2033dad9f76aab97a2d6234032= accdade3b769480aab96dacf7c991042e2175b8f7ac99d4c46f50c9b0493bbe8d9158640b= dd3dde07fe4e2768f62fa7dc8922924c0bcea111f88066bc6e2df838873cfb20d065136a5= 549b8bfeb7f5168cb215fd9042fce1f0a559068a264f13e2a7ee4bf95773e319cec0a98fe= 6eac85a308efb8bbd92771f0f85dbc696be352b447f3634a82d7bfbcb6bd4e35da12229e6= e06e88d274c15aa09eaba66ffe517d48e1393ebaff4dec9ba5234d05d52e4674bd8df0143= bb3b742a55e32495b3670fa8a903af3c7be0612810b0ffc98f1affbdb8c497281bb9960e0= d2fff48a28a6223de926186e21212cd341030061871eaa26e102d86242360c7602da233d4= 8e762a0909cb88fa69eba3383f8b9b8d628437164e7ff72e24d7b35724c2f84753e4a8a8b= 2269afb5d24e76ea51b519e7d36b71d73f424e9e24cc7466e94e57f1e4a96fb1718213e02= a165861e4eafc046b355025fcf6ced0067af72a54026bf877d4b28302d2cd9b60e547f2f5= c23d5399764f3eb4efc0d5cee13535643f39daf0baefbbaeb37efa194c9e02c4c401926bc= 776f8fd55468c1c944d6a7f1b5535b6fc4810b344e8d90ca7b18b93c312ac22010ce8e042= 7f52bc5418cc7f87ef1319297760075faaad0bcdadc16c7bd6520af4271129c4980b4a0c0= fbc8f15b53bb510932ab2c3ecf678db838ab5cf1b41bda001590396eb1dacb3ac8c7f70c7= bc81df7cf87e5fb63406f7bff1826ab058119e6cb6ac9a541228594af9f974d0e6d51b03a= 1124a1ffc31203fe3120872b3dfa92986f8bfa6d5d2899d3ea099afebbe2e5e03b2e4287e= 19fc7a801656a44ea9ac58133f2940986a79651afd52dd8e02cc9a22994e167d7030cc57e= 75a516484c0912808f11075094cdf957b2fa5d95fc9f460490732f94b265af87d85bddac0= 80d114e165b2672d52ae094e64b91c7046394b0686a34b51315a9d767d47645b8a655474c= 3c195ac16a35b960f483b46dfba00c045a0920f7351eb8bacfe98a479a87eb447e5025998= 5c11dabb2517f07273a07fcbef6be0c5665eb9688656707d7a8fdbd6c16f75f098682ef17= 9755a700ba7c5db107fd694fdcc541666e58bd79302d0df18f63adeaabb18557e1c11c071= 87525790ddade063fba12a7ea4f1dfbd3c8980d4f59beb7093767976b152da67171fb12c2= 272292f68f8f740dffa8112ff81244b56cbf75a8a8676c6ca6fbdc43164431ae17be6c639= b0b12de066b479a70edcce8e926625d0ce2d58f8fe1e6b08dcdbce660e925d19d728b0d5b= 3eabf3900e173e890d5983ef6f5f4a6302059fb982b4dd0f07c7ecae1b1a5652808141752= ef938cfc615dcbd12457de440bab656bb00141603f0a7d19a4958d8135009250775e42713= 7197e2a2f2a0b4145a04c5290d349beb4812c866d1763f4490757903c7c594e984fab9874= f3bf97cb584d06689b8bc235796fddb8a7bc8beda33ebfebde3dd9c42af3d142650e84fd6= 1a55a3303c1a3c746977daef720d722fd2ae17a9cff7318270c8d56877d920845723e1d20= 9e719209a033157bb1cd3edd3ee56c39691d1e0c25028bfa8f0a4fd4099d6b68eee748d6a= e2ca5cbc3b213e35bbd9ecda0dcac9caad61455c6b971cd33329b938df4c005c027c556e6= 6aa0cb078c5b379ed997d3a3637819a172d7fa2cccb2068f4832364a1547551c72de24e3d= ba5fa6d432a46ed6207bc95c4aba0cf3516d638cc120e5b47f4d74f84636075bdef861019= b110808bdf6bea4f5b4263a0b1fd24e40469135eec02d250b3ce55469e9a88e304c142a1a= 6bc13bebd692902a778d166840b657c734670731691173c12a06ac8f6f293bd5df1864d18= 3fffdf0c31742e783d6c82a3d123446b238027173a760f841c7bfc61a62d27e1820c7f99e= 07c744788255b2d716a138c29d6c8aee80538e7a852ceafe814bc01ad67a3635059a1f56e= a44415c0fcbe28adf0441deb5cc91e0e22c7548dfc7a8794433cedee6d7a35b4b8d665998= 83d2144762cce16c10e7e00b0b295652c5f510716eed8417b8165f02dc604444cda9e440a= 953c026fd235bfa09a61333de6f425c341360da4cfe1d15a0934165f3a42531b53b19401b= 012864174e9cbb347975a581b2b119b49532dc624875340f3bb5dd3dfaf755e135bd9b382= fba552722a441848e5ea2c88d7f49308b73ebf5be782ce72369def1a9ebbd9f9c08496f0e= 47564564c1841efcc5c9c5158c339b0093e9eabc9ddfd449bdda119c5f76a6a406d27c181= 72bfe694da75c567eddc72fdf5df39d6339e1da1e277844f5c2ca736dad53ab41668412fc= 504ecc960233f2a63a078fe43f6b6a8fc48401aede41b6570c0be1edc49a348f3954fca2e= 97b984f482464eb4647964a2b033c31b70f6950feeab51edb25c55db43c7093f47c341951= 574c01bf3fe2c8658cf59fd60870c349bdab588a44b709e6db98191937addd2bae3702ae1= 240c0260490ac61c1abeef386f762d7ffbb52defb183139904389b53735ddfb5d11f62ed1= a6500fed77247d768a6d584a5f283eea7406966cd8fd1f9f5eebc8999b60d9aea171fa106= 91b650570861b5cca20bdc3e9344f51fa8d6388c3652c16665faa4f4c66c1bed148faf0e5= 016018fb717d72490192f9b5bc434632af1e39e845b8ba552f1300a74de8abf75ce822e72= 72274802f7d5aa4effa739da4be1baf167ba587207b34ff227e5c02fdeca8aeef643cbc5f= 7917266f972fa9d4f8d2da13a151e25b22ec8643e390c487f7755886cf2724f6a1aa7cbc1= 92a303e4535e72d99f0e908cdef254e27405ce42aef9cc31012cc66ad9ce35c096130c974= 6ee729b30ce32f35482785c21adf0a85b5512096474aabe617f2ba74fcbcb301d43b32a01= c312a4cfa6e56988e5fcb130274e3135d511b8954ad43bd3e2264a00ec149c419d008061f= 1184a9dd9edafd1acf7f8b04a3aedf118ccd709e1170b8dce07822c8c2fada56a575358cb= d85601bdec998da9b136f8ea7662e4ee514457a0706f6a02b28953425ebf54d5a460c17b2= f93bec54159ed2ae8307d0fd626389acdf4b9e8408858e695ad085b96a85ebaf79e38e053= 6a7b338b2e53461545fd6e12d7359155185a546f89cf3e40df6d03318b959b6042f26061c= b8ae33e8257b1a73f42484bd6cb229eda30d3f55dc54d0f055ec813908bf19473f66efafc= 516d3cb3bbe87e4e564de4b0bfe25691d3e68a67322348cb9995bb9e44881938591d32890= 329881941221de664152b11be42e0f966549deb1cb80447174ba9df8799f913809934a936= ad40924b02c2d677d2f6f09f05123a5be35d80491e20693e72897d2c2a81dc0c6f6322dba= cd8f71f30753450861701e60fc0ce282eb79af73383406a4bc08dc86719e6c1e721f55936= cbf0cbe8665f24ac595ca160e71e57aec100e62aa929dc26d8296d6fc43092c115f9cdd83= 3e3e1781ab5ed2f590677ca7d0a5caf8b662305e622ee285ac7bf28bacc446f5e66693b7c= c5e7e81ab4e7ce3918901be4fe2c3728634dcfc024e0244aae3125f466ac0c6de26a23c20= 579930a5787d959e2134c8298f888a8a2f2c7bd6431d231c03f745ae40f4fc1f3e905528a= 1d909fffb1ead1787f57d50ab1a09b28c73f4b6e10c6b0bf1647e0986f42c42c64ec2e743= e172a60442e1fb6673aa7ed88e6050c3b4488f6fdb0913cb58e34baf7b8dd2fe03bb90b45= fe2431091359e6109490cb37cd2dba219fb035d7ec5de1768e6cddd40544db8e41344a522= c60220cfb83e25b97961e45e8fdb73dac2863599070577e156a0efea0e500bc2c4fbd1ed6= ece0bc450c59dd4b2f2a9ee1806c847a5964dd213e673abba6a02206ceb6cfad9269c306b= 13c2b69f274dd404068d0af0568dfc0ce3a9b587b9d6667dd6e1c9fa253d6c414845f47ea= cbbf826cce282a87f63cbad6d2cae44d3a82451588eed4a6afe0edf97548f540ad24aa573= 01ded7a5e96ba0aaeda008ed3b74e95276394779abd307ff15589049a58fad1400fbac0a3= dba47276dc9b0bbca94a6e8daa68f6566f30e86f09754d5a828052798776b28792963b59f= 9cf7ef5ff0a009d723cd330734c401594d105b05f3c9ac2d075b5c32a6ca51e249214ef40= 23bcb2e042b0ab915bf3d405a70e380cdc80c0b58d6ad94d0ea7e3c9c7d08b98d32b70761= e87a0b62bb1c32a987d4a5531f5035b2c58aa835b605b46901577a0fd9d67a672b1f43a4c= a522d98d248ae190b0148e6ec49efe9f7f806f90f86dc790d61bd6df76210489aa97d5df4= 5b1102619e780113bd62ddc182c360f919457c0937acde394bceddbfa8266a4377bb30048= e6f50d1e22b0349a33be19137210d8ea3a60480f438f16be96b893554afa39bea538a9d3f= cba9a72d5b1bbdbaf7a9f6af3a3aca366957efe8e1f2f7a8adcef307e2e593cda51504446= c50280a95b0931838627f0ab92201339ef220086e110a59a5f0f92bdcd2fc46bd77ae5b33= a0bc00e1a0f4fabdffab891d86791d280cb4d600a7a4b9ad1018f345f0fbdd4bf53181365= 170b8d85018f4c2400d454ce47d3572276555e637231f8fa58c200800cacd056646baf276= 2a01c05e156393597c48f57502eb6c09d744526616caa502a414e3828ab4fdd07cc589949= 497d57b0bfb031763737e1fb1604b713693163015852345013fe18599f2a36ab849941f55= 0db6f242d1a976c764c0f71149d6dd0deaa22290b3dd81109ad54e865cc96ba8044021cbc= 75883d385a5d38fe34805433f5f022a0ba9602cac983fd34582b5e20be8aac7d2bf04b309= 3db38d3603dbe182caabfa09febaa42b675a46c57f0281eff4b34a4b24a8b88db3275a0c4= d1fac4bf2c38b7d72fb4dc0c67bbf53def68004ff2f619a01cad51dd861683c37cddcc187= 728ec640dd3955e4c939e09cf0f08c7e78ffc8af4e871fd120127313e45f7bf31165d5168= c8f78334eaa02ca0d0897fa1e5791490e0243a3ff2a91aa7f9266fedbf787f442261f2f24= 1f017edbfe2e7e885c26172072a54291e3bcffe0058ffbb30c6a2812a8f791a74d882e02f= aa82542c9c61a2e0208c7571a780d7a80b9c179fab9862db67ce5d616dd43a52f8c075dd8= 6fabce28d27c74c506d897d00c4610f88b6f5e54bbcf3097fd07aa7d75d65272a01c9a647= c192a9f0979dd3dc8eccca6d804b10c3f42b5988d84cfd1337387bf039142ef587e74a1ee= 933f247eebf56ed483264c9562424d489100eed5f725558a7a713e1ef0bbe39aa12e5e89e= 6eb73af984fedd52cc7a9002fbd0614f83fca00437ac7068624aab61b3743e838763b4d4c= 06582c3746d01c55c262a731615ff8738094c73cb600840bf4252bb8f2501302e096301c1= 7e5711f4e531e04ed607c87cb5f0a08fcf2880d556be154d9138af145aae675a77d37344f= 03452d72db23073b209b2f8fb5918e55da2af2b4e06fde11885e8da0d9d8f8019d4f28d52= 4129193cfd0b2c0b892822191f88ce6bc4a87d49c80dc50c23c1a7a4d965cd7b81bcbb249= 1523893f7d04bfe34887285b9408c88c6085c5768a688094a1eaf5e828f6f4b18e466a4ad= 1738192f5789dd9cf9dd4a46066d1e3f8f9da0179c4b684b192e7640d1361ce6ab83c316d= 327cfd411476e305c7e94c772a433c1dac32b10cdfff231d6eb5c839c78e756a685a28dba= d22a067781338415e50e9926ecfe0d9fa52a12c190194e21ab892d767ace26b1a59232a8f= d990c8b54b8b899239cebe05fae686ab0f084a8e1aa095f960655706537267ab1037f37ea= 18aaa189409b239d0ec662341b12204009ef9af36e1d28bb7ef00db9cfdd30844f40ce53c= 4962e163f2e47e56f99ea9d8e0a3e7cd64f2a579cdd06b3ea668d0203861c7763e89ecdbb= 4cc5b53e1df769cd28cbfb8f5c7766ec8c1aa64fcbc8203e00c9cfc5e9cf79d0ea82c8161= 3e6201eb95b39f5bc3e8dffd287711e2a0d635a94414a512057e4ee4866d1e8b938530623= 0134bb6555212b863a31f412e958410d21419508ca3148f2b8a4abf321af659c3ac1e0c3b= 6706fb82f33e6a53858baaf92262f3de7d34e8ab226f93d78e38720ebff65764fd4945a51= 5b6f4dfeffc230fe69ce5b338303c37bce19381635222e300fafb6f9fe955a2ca94beaab4= ad48b173a37ac9b2d87ac6e86c1b1095d4a84bf16b7c9e9e0088c97cf1f9724efc3580aef= bbec38eb0a0d0ddaf1b7890ca87e068a5d3c35898260b2f4159a1bf191d93dd863a7082e7= bb1c84f8d654ed0f49568e10c876530bb19b43630c7af051fdafc12b567adc4286b4ca8a7= 292f5beeee2da7dc8d5b3741e36e87a96e38fc7abc489784798e5a44c91bfcf9ca1df9db2= c43222968f928de7a01a2d335c00e04ebee5f9b36a5af52d41cf69c155baeeb7c8af0a05c= 872732055255e33c91f43cac96339357d238c5c710aee885698876ef91bf03126d31838a9= c4e5f0781554057eb03cdabad1334bf8a3af21dd989d0d4c0cfc3045701e02b8306b48e13= cc72d6f4622154ffb1ba41f97815eb6cdb319cd3fde8d7c3a87b44be4253b050ea57f1c62= d0281a588ff2273d3b0fa6d850aaf8f5a768d83b462e3dfd5c6d2b17ff936b49f65b6bcc2= 09f0ecd78585cbe5f31328da93d11d9e615223299f5bd56280e26d7b5a0b32b4b11ac3114= d4a0435178cb1bdf7e935cf5e6483aa12d3ec662502f8a4acff9712ec80be6d2b020f6932= 908e4752319f30f76d54ea7b0e8b1e2c3e9fa9b23996a7f38a16b1be5c10cf04aea079fba= 2d100e33d56c3fdb69f77e4be5d967a077e106df4f5e2785ad278ece9a57c419a826f4a0f= 36cc5d3f6ad121741e7ea8d91a45b264bc84eb91f339ec8db49837db4c8984635112e0fcc= 15e58c4b9d185d170a6f8d6c3a294429dfdc5133133bc8a43801855346bbe116a4ec4d1af= f113b98afd58c8c81e99838dfc15e5000449e8ed3e004916cc14554a67a2f666f34d015bf= 3d0e91b6fec1306a2533b39f4bf55cba0414fc821f1fda6ef2b11e69e6ac4d1c35be7c31d= 962dbc9b6e9ff395b302a80e28df445f075c601101530d3ef7dfd2e12db6f519b0441de17= cb8b529540a26c214dd4b3ce43847a1cedbb02f471c28eabab2f57b492900f6e0316e4511= 8475a58f53b6129701043f84055b5864fa17a35622f7aa70ce201d901296920d41a403e84= 65e19517f12fc9e207a13eca575a3b865245861163140181e5ca94fd470ff9ad9c7d16725= 06c786639a8471a9ba0f3db9fc00e4afdf52b0932e90c011034404975dda7f394a149eecd= ebb81d44ea746920a4cb04407831d6db4e1e4ad6b329adb53ca9938e4c8b40379f30864c1= 10f161f1cc652cacca972d22a7e3061f004b7cfc473b670214ed10e636fd2b614b439ed2b= 7d2681e70f6b73fe796a53fdaf6458458e918f5a782240cbc7e72b5aa3ce778db27238139= 4ff2e4e4e7168b8c57a38ffd23418562fc69f54f216d6f7ca2edc7884cab0c44f4d5cf0fe= 8cf16f9d2380abeec3929beaf630700e910141dc3dfc0af96db8c304cb139efc2cff1bab7= f21fcf29555a1ca922c479345c444cc7886b99154eba14745f32ddf5cad9fbb00f5461991= 27706cd6d99533b7353f5773f39483d34aad3e285b8d99ccb1c906d45de3eb87e4058749e= 6ae46625ba829596057f44725e532a9ca5bd966d807e65e56bdea8dddfe87b30e10af439b= cb1a12dabbeb8b53a6bf416a731d11ea6e83987e824aa1e00f74018a710a6a11388b69ca1= 95d391840c48ef9eee60197ca47d39036220c49aa60155fee0d20a8a66f4c17790ecb4f97= 30cfc0970ef52dcf76c87c9e865bad7481dc22f6604d187160a9784c13f95f965094a8aee= 8987bf1cdf2562943b098dbfd78dce8f99e394b7bafad72eafd5f379d85fbd99eded84ef0= 3f18bfb78c9575780038d64bed3e355586d86b42b453ec7f9358aa58c0e927431b9d3ee78= 814fe35ac2feb2430dce65769e7c6e8b55899368c8158fa1610873be5601dabfbc675a829= 343bbcfb1bfb9a748f15ae37e468016612d48f5f4c53a391cd02c6a8ce915e97759939976= aca05c6b2c6fc88f91e02cbf2a09df2ef7b065c8b32ee90d4267d52d57ddb1d139102e058= f0056996c74997ec8b9e20cd9a162ae869535980fa8bfdba94ed1744bdcba15ed1e5775b0= 7d2a9dd449f2ef5c9a3c5b6c13b54c29fbb7396b199c2780d7b5ea253392f842caafbf1e1= 6e879603c83ae91a99333a80f27d00f8e0c494047a238f675720bba02f30e2501125e7017= 9fdfc224d2fccacbd32315f770b189c3ce242419a487aee4a4daa9c160ff40007a8c24437= 64f5551989288baf6dac80b15d495a68f5df70f9e6176bb75e251b28321e87a0c998ec7b7= 63b42d90ba9fc69644fc16e629b4b1399f90841426c2193656e3fdb5f2e53451d21cdd857= f9d988b9f4269969e887d8313fe56f961323afcb1ca1007f2d5f9a7926f8c928746512076= ff70470ae214906d8824afdce5d046423751d749df8349770b60fdad4231cefbbe41c9d00= 4a5adfdfa92963444261c5a10bfdb8e3874fa7fbfb0b7542d31c7694172f9b9794e7c78a9= 557b0b077f626db38d80257eea37f4a70dc65340024bf8cbc928660653482576f3a54fcd3= e744b400aa4f22450c1b78b330a07a52638cfa179cbb3d3c5c30c3063923ccadec9d66673= 8b54cf90f33d80a982e3880aa3cb505e2eda03eed83168a20787bc608150d764cd8185d1e= 9435616c6b91f4e30e7868b44cf6778dd41a95a73fb8b27167732bca2cfd074e9e984e490= efb46e475e19e516b310bf10156957a0a344f0b26adf0c810e25619bcad1c943e91b55884= e3ed27fab862ca434d57159d958629d373c1a803ae0d0a8ee88ecc50e0f9ee71d48765362= aefaed97672a66256477eff2f16e4ca5060cce2d30fa931826a602bb88a723c561130ecba= 1e61c2fe81589ae130af8ecc92a3999816c0609bbb5cdbef79314b1d906554825f311dd83= 8825c0deaabb053b494d9b85ec2e32420c95a00a4e97278d2870bc95f2d1fb9dbb02a6b72= dbfd31ccdb2f661e8a497148a375aad109ce92679bb3852172686c62d72b684b6d3b7a754= fbb1f4f2b8135c2d1a998d21f16efc117e6d2966e47d462f773f370cf409ecda46d914d65= db51bcea53a39243349b640cb3ddb6f77fa9150e15241ad5c30227b8e42d2a9b5e86ca438= 3522119f5faeee84b3955a921fd2b9815e572164433b25c6c7d106ab567a956139da1f2a8= 2469bbc323f0c6d4d03450f8b7f1d47aa9d28d78774515c1ffcc86c22ddff27b851c179d4= e50a781fdaf47b843876d8d716a650bf900f44ba5c2b3d190c29f000ffd59b9c28c4867fe= 63db3b7fc31587d8911074d8ea5dfb1abb96ee4e6028ad6622fa3d493cbd1f2a6b64a1ed0= 158afadf96a47ef42dfe4f7384093aac5a798dc9296d3dcda29a4a6622229711d3f8c3ba1= 82cfeed2147554b4fac0dc9015488fbd72b254b01445043b532cbd57d309e66009ee158cf= 18989e4f1e8deb9dbc3c57766b6877ad34a979180c09788c4d6e33a3b6b9b78a33ed7326c= b3feb4a6fc9512845d70e0d37642b0c8e3d1d2210388cdb45c07795d3c1573cecbcb7743f= a06b7a81f9de515c44cdee86e544e984931dd8dbfbc095a6e3e85d2ca646aa1c22f324f56= fd92a83b972b71e6af5c6db1b7dab0b7f89dcfa5c1ec33a2557342ee2ca5d9277430cfd77= 568092af89062759237ad8a59e58797ca46267d29c529d9d462d657d7723e67fb0d81732b= a4820b0fa6098f79cfd4825a8c653551fdc829d7795f41eea97a97b454c4eb99fd29fb41d= 9b0eb2d835060a4349c1a28f5da2e0a3689a7f20b698706af559bf4cca212c96ca87ace78= e3ed0c623ec2df4c9c153df0a76c8edaf1048cee5236908dc19f50cd3458c7587b8b5a937= 1b30ad4932a7189f887431915294abc1f7c3bb1b6f4d52e6c1ba59bf68d036937b2969318= 5d7c9236526576dbd3278a949dbb205cc7284c8757d22c80a9d8b55af3d863c51b7c94eae= 70f427a0a9fb042d36345c695ef72deded1bff96a9f3e0dea6ec1b0892e3f617e63cc7e35= 94f57b713368d606d21519e6d63b682de6ea7d9bd9c089b4d7dfac99172d282d254652849= b610daad589447a68613b6d82a2e2fde353b58de9fe4aa9f37afe0dab7fda073bb4255559= 22cd35d46d5e61c0dc787ff02f4d79534803ce656609867626c739d349e3ebd9e5a72defb= 95e55e46a0ac712b0f4cf90a509307202b20b2597adf6630dc39a352d96176d733adcc7f2= 438e98fd0f0ca97dad1b466f6ad245b0161d696e8051e830de1889caa1089127a467b2bcb= 29c68b649278996dad8201ac3cfcd3f531cf8b269d0d068c43676ac2539f65124c079aab8= a67c5b8c71b8735621812be0dda8ef33de9973453edd214cab9439e80c1a127740a58d371= 737aba455693d5cd86dd442caa5258489735ffd5634d3344e55e969da4c8854797fe7c5d7= 7a74a7560e434ab275c7c072fff8161d9c1e392dc963eb99bd241934b88e2b8567022aab9= 64db814af45d1798f403465c81fc624bf68c49feb08dc835cf0b0a29770e83b646255a6c2= b6fe8585944fe1431c8e853d66851501e1b687602940196ac5928b2f1a43882c92ce1202f= be932a0fcd190a169b9e54e5c0a29213109d84f0c818dc16abf34890c7311c7c12d9e62a1= f56a8ccf04e61e81ec6721b0857bd21a1230886b246e01e8157a802970962806aad3b3a72= 7972b8176ebee2d3decfa345a7679585cd2540c572cab8234be3b23881479be4cc7c6d0a3= deba0cd14f168f2664cdf2d3fe07c906aa570db8225fe597bbf8702f8ae1a32c5b3f999bb= ed288ebf64e9f3ce8a44bfd3067f31eb8b04a74a5fd7356e065d0275e94ba87b197e48b1b= 5d45148fd9ebc29a3edbebe0b7fa699ca30fc4bbdd079ed194fc8118af22a41a7bb87daa7= 8e56d3ac3ff307ed2e48701432987f56afbc8d5825db97e10314775294995528aa8488557= 835b5d02296e54696ae1209d84f677f8b16e5f7bbdd403a08f0aff821cd6aa0018d4a8453= 32cf149617cc6e3aab9d97c10f5b502c05b213a254850185f4016b334ca72f44474ca37e8= d8be56a14b153e32d7d77280031d7d17bf4dd8cf236b0f2b24a9261f0cb1bd834fc39a944= 9afd36faa08799d49e59df95a7f28405ae77d48c894e7ad61b00da59c271221f06f786d4d= 3e511df0ecf136607fe829cd257d99dea1d341c09231e7794eeba53daba9587e28da3d54d= 8ca4425236568acaa5234e5d4456838517e1d01b6d42abe492e5992d1d6e4b8d2028dbe7c= c698becaeb669f1da70ab869db473371b8c1d87268ba942c959d7f8227682c1c87187d6f1= 222a024c8ed13b28c716a879fdd587d6be3cdca9492e529745fa1c6a154d2e5e005bed6db= f18a7b758c2acc25c679eea220d5e898184afe16a973a95660c5839ce24ceb820417989ad= a21dc87807be8e145de50ef1242327e8d1416eb50501fe24620c3f2aa766c5905ef918484= 7b20f0241195f953d84647045b6a046129e0ca002d4592de90ef1760285e2f812c696e623= a5056efe1eddf10a455cc70181a4d296fbea4897ce9e2bbbaaef796b1d66ad28094537fc1= b30cacef75f1a3571d4109e017664dadeb9e71544e6d80e1b9affa4ad430edf0de34ff679= 76ade63d0aaf7e2e70f78e01a049c8ff3c87e22967a49ec669cbd9813c8d55e056f732c62= 32a515c56512ed89ac0797c36934bf679fd5bb437a4acaab533db324c0ca22fca9fe94cf7= 2ccd643be4ead42be1f2ab366c46a4ffa2756f16dba8f85640b118ce55378f60448cb899a= f96a4a7a7e8be9542d7995b1af67bec7c5d024a8df6b37c63e84c9378d6a04d0efa960be9= e2db5a6b23bf04788e7b2018bee7614eba3275624ceb0a5dbf51c96a35f7ae260d2fc90df= e428681e101ca4031a6b1ef81a93406a71764c84cd4831017b83510165a34aff1404f8f08= f4ada58b2287e94328467f75dfd4727416a73045b57318217fdef1519edcf84909fe12cb7= 661bad65aef6b8b8cc2bd7082468301a5677035ccd8b6f75e89f0eaa4a61c7b1fe455959d= 5c81508f9c3cff962a1c7c00462c9965f1e056f81277dcab57b81e55d395ebfe4e9a504ca= b859291eb3119e2508e9847390b8e3d12f9185c1d6dad436577a716fe6ecd9b68fe80ea1d= faf84c32ecd6e3c24c718d3af02a702ef9bae243ec156636cfdbd543b0e4b636964919b3b= a35566c3c4e966d976070eb2d7d5b13e105210015459cf9f920dfcd9b733e3f2dbbcfd371= 222cce2ab6288e2b38f19116356a9ce4f52dc61753e37d57665671c317bdde66243b5b4b0= 09fb0c48b6521d69a584282382fb193691f2440bbf57b7de67ba7e90c832556c6a71c515e= b35e059e5cd123de89840e122a0c18de6f9592f6a407f8b10ce916791c45081d614840ffc= 84f0e2cd0bafb87140d923a8f998fb8a99a0c21ce4ff8540222167df4db0efa84e9e23d75= e7a6de661e1c9d6382137247589f4c39c21320870bfaf4188bec773cdc231caa152334b85= faeed2551183ab4752baedc69c966d9ce1983f1881af201249304713aa3af064e436f4f7f= 8abe214b42207c979cbdf7199f2048a2211498b4bc36eef005f848a608d89a8cfaffab64f= 7943203aa541a22faa8fbdf1cea0b66b2502156974add8f400d3557e93221b9dea59b7104= ba72229cd81ef887818d4b8d0500583150219b58d6332c3d65711770311f1884ae45051bf= 6d9b6d2eec1866e6c7a8f8d32d2cdb87859bc0dc6c569a88b18b065d5b4eb160562393eaa= 1d7cac3803e7b9ed77434529eeb24e8936d3a448f908f7f9007806d8e1d342d5b1d0f32af= 71fd69f8f7c02dea588e5a57b21dac78006f0bbb08d2a2bf7b25fa78d65a9229b7891bfd4= 1f11874b5205244b2a19f053b830afed455a56a7c6bcaf97dc5e7f5165f254cddf0b308c0= 3fff07d85bc04210bcf4b3c0464f27a85e184ea504dfcf23e3ff07b9cc7d87d58753c136c= 6ffc6563120ffa051111d1eb51ffbf1089fc3d83b5e5b0dc881692fd838278ddb440732ef= 0b4512fc95df2d0872cb23a9d46a1d408d0efbf5a8440482beb32accec5283e1902817830= 1b6868d30419f378e8db404d57221be4dae607dfb45834c6ca6375ed41644b4aced6f44b5= 9a2345d408c15808a35de8f0f44f17200d5e3dd2d32d5cdbeeeefbcd2dfc1e282d7c5eb21= 65fce5aaed025ba0d341c9b1e09fa3c05f287671c51268ab6e1852795190154bbfa4874f2= 62c9e6b6f7fa98fcf50036407f0e04b9d44becd4e72462893ab2c07223ab7caad7f0148cb= 033439a3c869f88a1913c8d3223e532d92bd0ba529375e71980e0531ee41d0606570c0f9d= c17e532aa86a1a8f6dc4bd4c84cf49a3cedfe60ee58927b22d85db4c2793bc08cb6057810= a72b6707372bceb1c6204a32811851579dc778e98e8463f1b2b875ca071c146bfac197a77= acf75a04144758a00a62688e38a8f99e2499576bd132ddff6de122b15273e5df1710f546d= 947c6b15b1c5f4a842c6c7f9a034209c5771326f1b5d2ada3e4fe677f64ed6c62876a727a= 3b628895e9ea725820887eae9b4bf79269f4e141e7678f2291fda3f4d6eb0e549f879ad0a= bf841882048d304672162355a510d7de47d2b4384fcf7709cf956929cfca3b62ad409f0f7= 043331dab29f812416af38c0c8b7b475dad2e43c3e44e4d321a343ef943db42407b03db01= 7042ea582bace51e3ff7f6544d95dcc35655def1179373660a767f864d6368b024e685d0d= 1b78fd49b20aaf2869f9ce932515d7c19031f7e18b06f14411956eb73a1779134ad3a8138= b8e71b547488d8ee31a1fe095efafc81b642a2f7b84dce3fa5d4f399185ff91278593b8b1= f63dec0202fe00e23348fbc32374315a456a4c9aa41fb49bad8c754f8f2bb6b8e761b895f= 638eb1d69b2a3e02aac95ef7f8656bc9be02417e92b9aac591d208c8b4dbd2c5720bebf7d= 2862d062be1a1545a5bbade66df5b98d133cee8b2351e1d16d1a900439647e0f575198c78= 37aa7ed6c77763045b501adba4a4c47d71dd43f5d40444461927320242509ffefed8f1a54= 4420c955c4f7e14a3c62b2e284accd53d347a1082ada2557ac2817a913138f1a2986a32f3= 64099790db643468dc9ab13de2254fd6e07cb6016f5600da4ed2af8e8bd05fc8f9182b2c8= 4d5615b96c179deeb3e810c1e4b2c796f58b2ca9aa43002fc8d551acff38813a2c4ac388e= 73f8bd69b984772690f2f65f121d073b636f62486a225508b227defe23f61163bf6b9fbd0= 718d4f50edbe3ed5ba1ceba64f1e7fab741a9ec1ffbf57f3cb4e5b2e6fa10a9d344ea9928= 1651d6992140ed1ef66edee03d5dc992c70def290eef506ddcad6a52183ba10739de2c8f1= 2cf24e83f882aa13bde90ee7b6b6eac22ce5e2803c21764e46980594d1cd933d17201deb2= 0550f0d898527b393d1e0bbc63d5f0233cc8c285de9400b81276cc1c384bd38eed2c86c22= d27be3fa0c341275d0149f8de9bcc11cd4ab3c3e10ff1814cd18dda5bfa4e1003f62275da= a9e95da75309392b94c8abf6c75f2723b900ed4b7050de0d079279a567e3e4baf7df2342a= 51121297cb53fde71642897b2b4325efb079dd1bc05b468cc961bad7d34bc87ddb7fd0466= f88053274236a943687c7845c606640ad952a198d4f9efbd73d59fd9aae527656ae32e692= 62a262f2eac7e9041bba99eab21ad0df16b8373dbbc34034a7abf1c8a70421ed314a56f44= ac059c165fac08f20050a20a320d35e250335e13d2afe6b7e5895ea075028e9dde920570a= 81f279289d2aa75d6451ed75e9c410819fac4f32cda2ac40f19fc7e65bd83b221a155d0fe= 8ffd5f3904bdaa7bd72cc85c71b960c6dff59ec01e0d1a9a2c154a5306f1ffd201b1f7577= 5677e143ef1b70e315fff3a1072923419cd5db192fda578e51045fc68086d6db43d478f0a= 6ff4baf6ba74cc4e5307d4d3bc33c7f89dd77d71d634eb5114c556b43b1a1afc708bf75b3= 0c1010232d9625b77e98736f43e4cee7d0c47c37fd3b5401c3ea56b3f53fc3bdb45b3219c= ac9f8a245f72c11e132c9075699597f39f856115fdcbb5e2e91e81152295907e6bb7820a0= d2730af21742a4fab94c2f26935dc8d4876e58a55745fa6cdddc8b9c37f6bda9481ffca2a= 9dac1e3158c8436f40da357c4cfb4a42c1b5c8ff4af89f8f1ad09b73540129197958cd27b= 4e8882864107116a57c72669a8a0768b2c3c7da8808c5f9d384e620554b270fa7dfabe759= c858a88613548196a177b6fe90a0e537e29e4d5a327d8239f8cc7129e2e5fc9f96ce79bdb= 8bdc4ddbf5dde8a50c4c1c46641f56fda908006513676c7a5cf05dd31769edb20dc5da16e= adb362ac9e8b82f5c51aae6fa6539d2388efba4ff3841641097384d0daf093d27076abb76= c9f2b7507a2d6fec616fe67af9aaa3eb492b4291465bba67f15f2c18c446d84d888a32628= fe591fd21106d036190a8ac68ea079866e2c9a502d355d88136ba5e90011e6cb502e19851= 16d7fd1f10354db71080882d9705909eac9bac3ef1c3c56e4512321b636bfe69ff0690e04= 045d146fbfadea5e18ea58938821a81ba87fddcef14d6baeb291cb0d7565fff01381ced6e= 58f2b1f98157e55999936ca95fa914c2d7a8004b55a54ae387e43adb2598af99b2207637b= bcdf7e7ea961d160ae0f60685103b7d8237a17eb7cd73a080fc10e1421046ccd5793b952d= 0017272a51ef06523ce50fdd2a2b42d99247736b84bea15c52d815e2b91c32bcbfff356f9= 91c074ccb533efa2d7c78e25fb77a61b1bafb4f15d420bfe1af380e9ace7e9c9dcd334dc4= b20785cd5a2e8af987e10ee393a11c2e01b6fcd9f89595bb5b541a88c2ba4fe7a6c0da378= 8a8aa0c6daa447d5ab30053cdd11e02892eaddb915412bb3c1a7d15bad6907a96d25f2a3d= ac8fdb6d1cd5d39c0775b9b697ed9f16a740648bd56baea0e8ac6a3509dc06d35a6adf43b= 973838bea6fb23f6a6bfea36e2cd118255b3a2ba16f85618993bbaae7e08b4b7eb6600208= f129abfee604e921fe18f151f1b44b83457a7aabbe5971e733580cde86ebde6fadbdaa64c= 3854c8bf221e053c14193b66b77595c7e2f663cde09c87c88a2612902d7787d8c3eb9f948= b848046c1fefd22d582d46e76237f709e57d92439ce7c8186279a6eedc3be4d99e3621d74= f94f445c5640a7da853c9e30a957b5468d62093d9695324971a2ff9ec53da703ad4b611e2= ea8bb258f7e504ffa15c6e0ae79710c9ff3c9f8f2b395b64bce96a68e76760c4dfc7e5616= 1dca395890e767f4f07a6dcb8773fc0fd943b18bc2a4cd73be3fa25e7e0786c02a700fafc= 03581fcd59ed12906f8dcdbb68b76eea022ea87aca8a2b92cf28e68eb30557d86dc6bea6b= 00817d54bf10a18ac2ab8f613f650aef489b35c68accd57fc54c80b2045eade0a27fa4873= c1a5426f644d9d9e4200573cd40d2ab1f216b815581a8021f07d2c81cfab751800f533588= f08dfa6dfb72e008fe629f52dfd91c1b8dd8f439c82cb1ec857eacd2ef9cac3ca42275295= 88b28dabdb325de3b89fe7953ae4e08477c0a152e2b503a0130dad40e6b9f6684ca466011= a028cfc3fdd941cd787c8a136e0ac45f72aa4ccd5f872f9582b9f2edaf36fbb2ada9aca45= e94d29f0a41058e49c23e5d9ff0727cb344a3557e006f3c388e2309e35b6aed97d1f8b5f9= 49f753cb68fc9fbd5fca08b633b9a80b574e6d0f4a087400c12dceca90b7d9b55c8d8156d= 2a93efb7bfea1cf51d6299056ce2168a04d4c58b6e7a7b71095d9db4037e1371ec16001ce= e27854bb151b36c3a2f265eb13fc97bc065e10b8b631ebb0b10aff6c77f8ef0b5af008207= 68c0382c721d13106c578cb17cd6f5e7393290bf55232f586dc3b414a3ed6ea801fb14a89= 58a04ba58b3856f6a449d6707a27ce7b4262853ef4e06c140ebcd0e2a040b6b3d0ded3cb5= 3fddf973cca99ea8ade41bf8a50195ae4d8fbb6a88a14900aac6fd31706f21c70cd14ee29= 6fecf9662f6f55fea76e4f6a7adab8173ce21759b9c36ab813cc1e530f026da16f0797bc0= 0939128ebaea95135e617904bd8200cdae5a1fe8e08dca5804b2ae84ec77db6c420e0a971= 0d7503342ac3d8ada223400fb271566a7a1cdb188f04eafb96d6447c0628ad05158975444= d9f5eb035a7d419084eb97db4e472a1ab2d8914a86f455 =0D0000000000000000000000000000000000000000000000000000000000000000=0D000= 0000000000000000000000000000000000000000000000000000000000000=0D000000000= 0000000000000000000000000000000000000000000000000000000=0D000000000000000= 0000000000000000000000000000000000000000000000000=0D000000000000000000000= 0000000000000000000000000000000000000000000=0D000000000000000000000000000= 0000000000000000000000000000000000000=0D000000000000000000000000000000000= 0000000000000000000000000000000=0D000000000000000000000000000000000000000= 0000000000000000000000000=0Dcleartomark{restore}if=0D %%EndResource /StarBats ff [13.68 0 0 -13.68 0 0] mf sf <22> 63.6 180.48 C /Times-Roman-MSenc ff [30.48 0 0 -30.48 0 0] mf sf <54> 87.84 186.0 C <68> 106.56 186.0 C <65> 121.92 186.0 C <20> 135.36 186.0 C <69> 143.28 186.0 C <73> 151.68 186.0 C <73> 163.44 186.0 C <75> 175.44 186.0 C <65> 190.8 186.0 C <73> 204.24 186.0 C <3a> 216.0 186.0 C /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 228.96 C /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <47> 120.24 230.4 C <65> 139.44 230.4 C <74> 151.2 230.4 C <20> 158.88 230.4 C <72> 165.6 230.4 C <65> 174.48 230.4 C <73> 186.24 230.4 C <75> 196.8 230.4 C <6c> 210.24 230.4 C <74> 217.92 230.4 C <73> 225.36 230.4 C <20> 235.92 230.4 C <28> 242.64 230.4 C <53> 251.52 230.4 C <65> 266.4 230.4 C <61> 278.16 230.4 C <72> 290.16 230.4 C <63> 299.04 230.4 C <68> 310.8 230.4 C <52> 324.48 230.4 C <65> 342.24 230.4 C <73> 354.0 230.4 C <75> 364.56 230.4 C <6c> 378.0 230.4 C <74> 385.68 230.4 C <44> 393.12 230.4 C <6f> 412.32 230.4 C <6e> 426.0 230.4 C <65> 439.44 230.4 C <2c> 451.2 230.4 C <20> 457.92 230.4 C <41> 464.4 230.4 C <64> 483.6 230.4 C <64> 497.28 230.4 C <52> 510.72 230.4 C <65> 528.48 230.4 C <73> 540.48 230.4 C <70> 550.8 230.4 C <6f> 564.48 230.4 C <6e> 577.92 230.4 C <73> 591.36 230.4 C <65> 601.92 230.4 C <2c> 613.92 230.4 C <20> 620.4 230.4 C <2e> 627.12 230.4 C <2e> 633.6 230.4 C <2e> 640.32 230.4 C <29> 647.04 230.4 C /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 269.76 C /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <47> 120.24 271.2 C <65> 139.44 271.2 C <74> 151.2 271.2 C <20> 158.88 271.2 C <53> 165.6 271.2 C <65> 180.48 271.2 C <61> 192.24 271.2 C <72> 204.24 271.2 C <63> 213.12 271.2 C <68> 224.88 271.2 C <52> 238.32 271.2 C <65> 256.32 271.2 C <73> 268.08 271.2 C <75> 278.64 271.2 C <6c> 292.08 271.2 C <74> 299.76 271.2 C <7b> 307.2 271.2 C <45> 320.16 271.2 C <6e> 336.24 271.2 C <74> 349.68 271.2 C <72> 357.36 271.2 C <79> 366.24 271.2 C <2c> 379.68 271.2 C <52> 386.4 271.2 C <65> 404.16 271.2 C <66> 416.16 271.2 C <65> 425.04 271.2 C <72> 436.8 271.2 C <72> 445.68 271.2 C <61> 454.8 271.2 C <6c> 466.56 271.2 C <7d> 474.0 271.2 C /StarBats ff [13.68 0 0 -13.68 0 0] mf sf <22> 63.6 310.8 C /Times-Roman-MSenc ff [30.48 0 0 -30.48 0 0] mf sf <53> 87.84 316.32 C <75> 104.88 316.32 C <67> 120.24 316.32 C <67> 135.6 316.32 C <65> 150.96 316.32 C <73> 164.4 316.32 C <74> 176.4 316.32 C <65> 184.8 316.32 C <64> 198.24 316.32 C <20> 213.6 316.32 C <73> 221.28 316.32 C <6f> 233.28 316.32 C <6c> 248.64 316.32 C <75> 257.04 316.32 C <74> 272.4 316.32 C <69> 280.8 316.32 C <6f> 289.2 316.32 C <6e> 304.56 316.32 C <3a> 319.92 316.32 C /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 359.04 C /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <4f> 120.24 360.72 C <6e> 139.44 360.72 C <6c> 152.88 360.72 C <79> 160.56 360.72 C <20> 174.0 360.72 C <63> 180.48 360.72 C <6f> 192.48 360.72 C <6d> 205.92 360.72 C <70> 226.8 360.72 C <61> 240.24 360.72 C <72> 252.24 360.72 C <65> 261.12 360.72 C <20> 272.88 360.72 C <61> 279.6 360.72 C <6e> 291.36 360.72 C <64> 305.04 360.72 C <20> 318.48 360.72 C <73> 324.96 360.72 C <65> 335.52 360.72 C <61> 347.52 360.72 C <72> 359.28 360.72 C <63> 368.16 360.72 C <68> 380.16 360.72 C <20> 393.6 360.72 C <28> 400.32 360.72 C <6e> 409.2 360.72 C <6f> 422.64 360.72 C <20> 436.08 360.72 C <75> 442.8 360.72 C <70> 456.24 360.72 C <64> 469.68 360.72 C <61> 483.36 360.72 C <74> 495.12 360.72 C <65> 502.8 360.72 C <73> 514.56 360.72 C <20> 525.12 360.72 C <6f> 531.84 360.72 C <72> 545.28 360.72 C <20> 554.16 360.72 C <62> 560.64 360.72 C <69> 574.32 360.72 C <6e> 581.76 360.72 C <64> 595.2 360.72 C <73> 608.64 360.72 C <29> 619.2 360.72 C <2e> 628.08 360.72 C /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 399.84 C /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <4e> 120.24 401.52 C <6f> 139.44 401.52 C <20> 152.88 401.52 C <64> 159.6 401.52 C <65> 173.04 401.52 C <66> 185.04 401.52 C <69> 193.92 401.52 C <6e> 201.36 401.52 C <65> 214.8 401.52 C <64> 226.8 401.52 C <20> 240.24 401.52 C <73> 246.96 401.52 C <65> 257.52 401.52 C <63> 269.28 401.52 C <75> 281.28 401.52 C <72> 294.72 401.52 C <69> 303.6 401.52 C <74> 311.04 401.52 C <79> 318.72 401.52 C <20> 332.16 401.52 C <6d> 338.88 401.52 C <65> 359.52 401.52 C <63> 371.52 401.52 C <68> 383.28 401.52 C <61> 396.96 401.52 C <6e> 408.72 401.52 C <69> 422.16 401.52 C <73> 429.84 401.52 C <6d> 440.16 401.52 C <73> 461.04 401.52 C <20> 471.6 401.52 C <28> 478.32 401.52 C <6c> 487.2 401.52 C <6f> 494.64 401.52 C <77> 508.08 401.52 C <65> 527.28 401.52 C <72> 539.28 401.52 C <20> 548.16 401.52 C <6c> 554.88 401.52 C <61> 562.32 401.52 C <79> 574.32 401.52 C <65> 587.76 401.52 C <72> 599.52 401.52 C <73> 608.64 401.52 C <2e> 618.96 401.52 C <2e> 625.68 401.52 C <2e> 632.4 401.52 C <29> 638.88 401.52 C <2e> 647.76 401.52 C /StarBats ff [20.16 0 0 -20.16 0 0] mf sf <96> 98.64 440.64 C /Times-Roman-MSenc ff [26.64 0 0 -26.64 0 0] mf sf <52> 120.24 442.32 C <65> 138.0 442.32 C <74> 150.0 442.32 C <72> 157.44 442.32 C <79> 166.32 442.32 C <20> 180.0 442.32 C <6f> 186.48 442.32 C <70> 199.92 442.32 C <65> 213.6 442.32 C <72> 225.36 442.32 C <61> 234.24 442.32 C <74> 246.24 442.32 C <69> 253.68 442.32 C <6f> 261.36 442.32 C <6e> 274.8 442.32 C <73> 288.24 442.32 C <20> 298.8 442.32 C <75> 305.52 442.32 C <73> 318.96 442.32 C <69> 329.52 442.32 C <6e> 336.96 442.32 C <67> 350.4 442.32 C <20> 363.84 442.32 C <74> 370.56 442.32 C <68> 378.0 442.32 C <65> 391.68 442.32 C <20> 403.44 442.32 C <73> 410.16 442.32 C <61> 420.72 442.32 C <6d> 432.48 442.32 C <65> 453.36 442.32 C <20> 465.12 442.32 C <6d> 471.84 442.32 C <65> 492.72 442.32 C <73> 504.48 442.32 C <73> 515.04 442.32 C <61> 525.6 442.32 C <67> 537.36 442.32 C <65> 550.8 442.32 C <49> 562.8 442.32 C <44> 571.68 442.32 C <2e> 590.88 442.32 C gr %%PageTrailer rs %%PageBoundingBox: 18 18 466 673 showpage %%Trailer %%Pages: 2 end %%DocumentSuppliedResources: font StarBats StarBats = %%EOF --==_Exmh_7418938350-- From list@netscape.com Tue Aug 1 16:41:25 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA03573 for ; Tue, 1 Aug 2000 16:41:23 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e71KYXj22616; Tue, 1 Aug 2000 13:34:34 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e71KdiE23016; Tue, 1 Aug 2000 13:39:44 -0700 (PDT) Resent-Date: Tue, 1 Aug 2000 13:39:44 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.2.1 Date: Tue, 01 Aug 2000 11:36:06 -0600 From: "Ed Reed" To: , Subject: Re: folks slides from LDAPEXT meeting? Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=_732BC090.9EFF9375" Resent-Message-ID: <"-X8P5C.A.7mF.NWzh5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=_732BC090.9EFF9375 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Already sent to Mark Wahl...Here they are (PowerPoint 2000 format). >>> 8/1/00 6:11:56 AM >>> It'd be helpful if everyone who talked at the LDAPEXT mtg, and displayed=20= slides, would send their slides to the list. Ones I noted down were.. Ellen S. (done) MarkW Leif Ed R David C Apologies if I got anyone's name wrong or forgot someone. thanks, JeffH --=_732BC090.9EFF9375 Content-Type: application/x-mspowerpoint Content-Disposition: attachment; filename="Ldap Subentries July 2000.ppt" Content-Transfer-Encoding: base64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAALwAAAAAAAAAA EAAAQQAAAAEAAAD+////AAAAAC4AAAD///////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////8P AOgDwxIAAAEA6QMoAAAAgBYAAOAQAADgEAAAgBYAAAUAAAAKAAAAAAAAAAAAAAABAAAAAAAAAQ8A 8gOuAQAALwDIDwwAAAAwANIPBAAAAAEAAAAPANUH5AAAAAAAtw9EAAAAVABpAG0AZQBzACAATgBl AHcAIABSAG8AbQBhAG4AAADoPLgAFNliAPzYYgB2xwswCAAAAAAAAAAU2WIAKN0NMAAABBIQALcP RAAAAEEAcgBpAGEAbAAgAFUAbgBpAGMAbwBkAGUAIABNAFMAAAC4ABTZYgD82GIAdscLMAgAAAAA AAAAFNliACjdDTABAAAAIAC3D0QAAABBAHIAaQBhAGwAAABVAG4AaQBjAG8AZABlACAATQBTAAAA uAAU2WIA/NhiAHbHCzAIAAAAAAAAABTZYgAo3Q0wAAAEIgAApA8KAAAAgABgAAAA/////wAApQ8M AAAAAAAACC4AAAAHAAAAAACpDwoAAAAHAAAAAgAJBAAAQACjD24AAAAFAP/9PwAAACIgAABkAAAA AAAAAGQAAAAAAAAAAABAAgAAAAAHAAAA///vAAAAAAD///////8YAAAAAAEAAAAFAAAgASABAAAA AAAFAABAAkACAAAAAAAFAABgA2ADAAAAAAAFAACABIAEAAAAAA8ACwSsAAAADwAA8KQAAAAAAAbw WAAAAAQkAAAKAAAAHwAAAAkAAAABAAAACQAAAAIAAAAEAAAAAwAAAAQAAAAEAAAABAAAAAUAAAAE AAAABgAAAAQAAAAHAAAABAAAAAgAAAAEAAAACQAAAAQAAABjAAvwJAAAAIEBBAAACIMBAAAACL8B EAAQAMABAQAACP8BCAAIAAECAgAACEAAHvEQAAAABAAACAQAAAgCAAAI9wAAEB8A8A8cAAAAAADz AxQAAAACAAAABAAAAAAAAAAAAACAAAAAAA8A0Ac3AQAAHwAUBBwAAAAAABUEFAAAAAW5XgsAypo7 Mk7NyQDKmjsBAQABDwD6A2cAAAAAAP4DAwAAAAABAAAA/QM0AAAARgAAAGQAAABGAAAAZAAAAHbH CzAIAAAAAAAAAAjZYgAAAAAAAAAAALb+//+m////AQAAAHAA+wMIAAAAAAAAAHAIAABwAPsDCAAA AAEAAABACwAAHwAHBDwAAAAAAP0DNAAAACEAAABkAAAAIQAAAGQAAABg8w0wxNxiAAAAAADUPbgA AAAAAAAAAAAAAAAAAAAAAAABYgAfABMEPAAAAAAA/QM0AAAAZAAAAGQAAABkAAAAZAAAAGDzDTDE 3GIAAAAAANQ9uAAAAAAAAAAAAAAAAAAAAAAAAAFiAB8A/wMUAAAAAgAABAwAAAAAAAAAAAAAAAIA AAA/ANkPDAAAAAAA2g8EAAAAAAAlAA8A8A+iDgAAAADzAxQAAAADAAAAAAAAAAIAAAAAAQAAAAAA AAAAnw8EAAAAAAAAAAAAqA8PAAAATGRhcCBTdWJlbnRyaWVzAACqDxIAAAAFAAAAAQAAAAMACwAA AAAAAAAQAJ8PBAAAAAEAAAAAAKgPOQAAAGRyYWZ0LWlldGYtbGR1cC1zdWJlbnRyeS0wMy50eHQN TmFtaW5nDVNjb3BlDUNvbnRhaW5tZW50DQAAqg8sAAAABgAAAAAAAAAEAAAAAQAAAAMAAQAAAAAA AAAEAAAAAQAAAAMAKwAAAAAAAAAAAPMDFAAAAAQAAAAAAAAAAgAAAAEBAAAAAAAAAACfDwQAAAAA AAAAAACoDwYAAABOYW1pbmcQAJ8PBAAAAAEAAAAAAKgP7wAAAERlY2lkZWQgdG8gbGVhdmUgTUFZ IHtjbn0gaW4gY2xhc3MgZGVmaW5pdGlvbg1jbiBNQVkgYmUgdXNlZCB0byBuYW1lIHN1YmVudHJp ZXMsIGJ1dCBzbyBtYXkgb3RoZXIgYXR0cmlidXRlcyBkZWZpbmVkIGJ5IHN1YmNsYXNzZXMgb3Ig YXV4IGNsYXNzZXMNV2hlcmUgcG9zc2libGUsIHRoZSB1c2Ugb2YgQXV4aWxpYXJ5IGNsYXNzZXMg dG8gZXh0ZW5kIGxkYXBTdWJFbnRyaWVzIGlzIHN0cm9uZ2x5IHByZWZlcnJlZC4gAAChDx4AAADw AAAAAAAAEAAAWgCSAAAAAAAAAF4AAAAAAAEAAQAAAKoPPgAAABYAAAAAAAAAAgAAAAEAAAADABYA AAAAAAAAAgAAAAEAAAADAJgAAAAAAAAADwAAAAEAAAADABkAAAAAAAAAAADzAxQAAAAFAAAAAAAA AAIAAAACAQAAAAAAAAAAnw8EAAAAAAAAAAAAqA8FAAAAU2NvcGUQAJ8PBAAAAAEAAAAAAKAPjAIA AE4AbwAgAHMAZQBtAGEAbgB0AGkAYwBzACAAaQBtAHAAbABpAGUAZAANAEMAbwB1AGwAZAAgAGUA eABwAGwAaQBjAGkAdABsAHkAIABkAGUAZgBpAG4AZQAgAHQAaABlACAAcwBpAG0AcABsAGUAIABz AHUAYgBzAGUAdAAgACgAZgByAG8AbQAgAHQAaABlACAAYQBzAHMAbwBjAGkAYQB0AGUAZAAgAG4A YQBtAGkAbgBnACAAYwBvAG4AdABlAHgAdAAgAC8AIABhAGQAbQBpAG4AIABwAG8AaQBuAHQAIABk AG8AdwBuACAAdABvACAAdABoAGUAIABuAGUAeAB0ACAAbgBhAG0AaQBuAGcAIABjAG8AbgB0AGUA eAB0ACAALwAgAGEAZABtAGkAbgAgAHAAbwBpAG4AdAApAA0AQwBvAHUAbABkACAAaQBuAGMAbAB1 AGQAZQAgAGEAbABsACAAWAAuADUAMAAwACAAcwB1AGIALQB0AHIAZQBlACAAcwBwAGUAYwBpAGYA aQBjAGEAdABpAG8AbgAgACgAbwB2AGUAcgAgAHQAaABlACAAYQB1AHQAaABvAHIAGSBzACAAZABl AGEAZAAgAGIAbwBkAHkAKQANAEEAdQB0AGgAbwByABkgcwAgAHIAZQBjAG8AbQBtAGUAbgBkAGEA dABpAG8AbgA6ACAAQQBsAGwAbwB3ACAAZgB1AHQAdQByAGUAIAB1AHMAZQByAHMAIAB0AG8AIABk AGUAZgBpAG4AZQAgAHQAaABlAGkAcgAgAG8AdwBuACAAcwBjAG8AcABlACAAcwB5AG4AdABhAHgA IAAvACAAcwBlAG0AYQBuAHQAaQBjAHMADQAAAKEPPAAAABUAAAAAAAAQAABaANgAAAABAAAQAABa AFoAAAAAAAAQAABaABUAAAAAAAAA2AAAAAAAAABaAAAAAAAAAAAA8wMUAAAABwAAAAAAAAACAAAA BQEAAAAAAAAAAJ8PBAAAAAAAAAAAAKAPNAAAAEEAdQB0AGgAbwByABkgcwAgAFMAQwBPAFAARQAg AEEAcwBzAHUAbQBwAHQAaQBvAG4AcwAQAJ8PBAAAAAEAAAAAAKgPPgEAAENvbnRpZ3VvdXMsIGlt bWVkaWF0ZWx5IGFkamFjZW50IHN1Yi10cmVlDVNjb3BlIHN0b3BzIGF0IG5leHQgQWRtaW5pc3Ry YXRpb24gUG9pbnQgLyBOYW1pbmcgQ29udGV4dCwgb3IgYXQgdGhlIGxlYWZzIG9mIHRoZSBzdWJ0 cmVlDUluaGVyaXRhbmNlIGFjcm9zcyBBUCAvIE5Dcywgd2hpbGUgcG9zc2libGUsIGlzIGJlc3Qg ZGVmaW5lZCBieSBhcHBsaWNhdGlvbnMgZGVzaXJpbmcgaXQgKHRvbyBtYW55IHZhcmlhdGlvbnMg ZXhpc3QgdG8gZ2V0IHRvIGNvbnNlbnN1cywgdG9kYXkpDUxEVVAgcHVudGVkIHRoaXMgdG8gQUNM IHdvcmssIGZvciBpbnN0YW5jZQAAoQ8qAAAAFAEAAAAAAAAAACsAAAABAAAAAAAUAQAAAAACABwA KwAAAAAEAgAABBgAAACqDywAAAB8AAAAAAAAAAgAAAABAAAAAwAYAAAAAAAAAAMAAAABAAAAAwCg AAAAAAAAAAAA8wMUAAAACQAAAAAAAAACAAAABgEAAAAAAAAAAJ8PBAAAAAAAAAAAAKgPFwAAAENv cnJlc3BvbmRlbmNlIHRvIFguNTAxEACfDwQAAAABAAAAAACoD7wAAABTdWJ0cmVlIHNwZWNpZmlj YXRpb24gYWJzZW50DUltcGxpZXMgbG9jYWwgbmFtZSBpcyB0aGUgaW1tZWRpYXRlbHkgc3VwZXJp b3IgbmFtaW5nIGNvbnRleHQgb3IgYWRtaW5pc3RyYXRpb24gcG9pbnQNV2hvbGUgYWRtaW5pc3Ry YXRpb24gYXJlYSBpcyBpbmNsdWRlZA1ObyBzZWxlY3Rpb24gb3IgcmVmaW5lbWVudHMgZGVmaW5l ZAAAoQ8mAAAAHQAAAAAAAAAAAKAAAAABAAAAAAAdAAAAAAAAAKAAAAAABAAAAAQAAKoPEgAAAAgA AAABAAAAAwC1AAAAAAAAAAAA8wMUAAAACgAAAAAAAAACAAAABwEAAAAAAAAAAJ8PBAAAAAAAAAAA AKgPHwAAAEZyb20gWC41MDEgSW5mb3JtYXRpb25GcmFtZXdvcmsAAKoPGgAAAAsAAAAAAAAAFAAA AAEAAAADAAEAAAAAAAAAEACfDwQAAAABAAAAAACoD+gAAAAtLSBzdWJ0cmVlIGRhdGEgdHlwZXMg LS0NU3VidHJlZVNwZWNpZmljYXRpb24gOjo9IFNFUVVFTkNFIHsNICAgIGJhc2UgWzBdIExvY2Fs TmFtZSBERUZBVUxUIHsgfSwNICAgIENPTVBPTkVOVFMgT0YgQ2hvcFNwZWNpZmljYXRpb24sDSAg ICBzcGVjaWZpY2F0aW9uRmlsdGVyIFs0XSBSZWZpbmVtZW50IE9QVElPTkFMIH0NLS0gZW1wdHkg c2V0IHNwZWNpZmllcyB3aG9sZSBhZG1pbmlzdHJhdGl2ZSBhcmVhAAChDzYAAADpAAAAAAAhAAAA AAAAAAABGQAAAAAAAwACABwAnwAAAAEAAwABAAIAHAAxAAAAAAADAAIAHAAAAKoPYgAAAAIAAAAA AAAACAAAAAEAAAADAA4AAAAAAAAAFQAAAAEAAAADABwAAAAAAAAACgAAAAEAAAADAB8AAAAAAAAA EgAAAAEAAAADAAMAAAAAAAAAFgAAAAEAAAADAEwAAAAAAAAAAADzAxQAAAAGAAAAAAAAAAIAAAAD AQAAAAAAAAAAnw8EAAAAAAAAAAAAqA8LAAAAQ29udGFpbm1lbnQQAJ8PBAAAAAEAAAAAAKAPYAIA AEQAcgBhAGYAdAAgAHMAYQB5AHMAIAAcIEwARABBAFAAIABTAHUAYgBlAG4AdAByAGkAZQBzACAA TQBBAFkAIABiAGUAIABjAG8AbgB0AGEAaQBuAGUAZAAgAGIAeQAsACAAYQBuAGQAIAB3AGkAbABs ACAAdQBzAHUAYQBsAGwAeQAgAGIAZQAgAGwAbwBjAGEAdABlAGQAIABpAG4AIAB0AGgAZQAgAGQA aQByAGUAYwB0AG8AcgB5ACAAaQBuAGYAbwByAG0AYQB0AGkAbwBuACAAdAByAGUAZQAgAGkAbQBt AGUAZABpAGEAdABlAGwAeQAgAHMAdQBiAG8AcgBkAGkAbgBhAHQAZQAgAHQAbwAsACAAYQBkAG0A aQBuAGkAcwB0AHIAYQB0AGkAdgBlACAAcABvAGkAbgB0AHMAIABhAG4AZAAvAG8AcgAgAG4AYQBt AGkAbgBnACAAYwBvAG4AdABlAHgAdABzAC4AHSANAE4AbwB0ACAAaQBuAHQAZQBuAGQAZQBkACAA dABvACAAYgBlACAAHCBqAHUAcwB0ACAAYQBuAHkAdwBoAGUAcgBlAB0gDQBTAHUAYgBlAG4AdABy AGkAZQBzACAAbQBhAHkAIABjAG8AbgB0AGEAaQBuACAAbwB0AGgAZQByACAAcwB1AGIAZQBuAHQA cgBpAGUAcwAuAA0ARABlAGUAcAAgAG4AZQBzAHQAaQBuAGcAIABvAGYAIABzAHUAYgBlAG4AdABy AGkAZQBzACAAaQBzACAAZABpAHMAYwBvAHUAcgBhAGcAZQBkAC4AAAChDx4AAAAxAQAAAAAAEAAA WgAMAAAAAAAAACUBAAAAAAEAAQAAAPMDFAAAAAgAAAAAAAAAAgAAAAQBAAAAAAAAAACfDwQAAAAA AAAAAACoDwoAAABOZXh0IFN0ZXBzEACfDwQAAAABAAAAAACoD1cAAABBbnkgZnVydGhlciBjaGFu Z2VzPw1UcnlpbmcgdG8gZ2V0IHRvIGpvaW50IGxhc3QgY2FsbCB3aXRoIExEVVAgYW5kIExEQVBF WFQgZGlzY3Vzc2lvbnMAAOoDAAAAAA8A+AMECQAAAgDvAxgAAAABAAAAAQIHCQgAAAAAAAAAAAAA AAAAAABgAPAHIAAAAAAA/wD///8AAAAAAP//AAD/mQAAAP//AP8AAACWlpYAYADwByAAAAD///8A AAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAGAA8AcgAAAA////AAAAAAAzMzMAAAAAAN3d3QCA gIAATU1NAOrq6gBgAPAHIAAAAP//zAAAAAAAZmYzAICAAAAzmTMAgAAAAAAzzAD/zGYAYADwByAA AAD///8AAAAAAICAgAAAAAAA/8xmAAAA/wDMAMwAwMDAAGAA8AcgAAAA////AAAAAACAgIAAAAAA AMDAwAAAZv8A/wAAAACZAABgAPAHIAAAAP///wAAAAAAgICAAAAAAAAzmf8Amf/MAMwAzACysrIA AACjDz4AAAABAP/9PwAAACIgAABkAAAAAAACAGQAAAAAAAAAAABAAgAAAAAHAAAA///vAAAAAAD/ //////8sAAAAAAMAABAAow98AAAABQD//T8AAQAiIAAAZAAAAAAAAABkABQAAADYAAAAQAIAAAAA BwAAAP//7wAAAAAA////////IAAAAAABAACABQAAEyDUASABAAACABwAgAUAACIg0AJAAgAAAgAY AIAFAAATIPADYAMAAAIAFACABQAAuwAQBYAEAAAAACAAow9uAAAABQD//T8AAAAiIAAAZAAAAAAA AABkAB4AAAAAAAAAQAIAAAAABwAAAP//7wAAAAAA////////DAAAAAABAAAABQAAIAEgAQAAAAAA BQAAQAJAAgAAAAAABQAAYANgAwAAAAAABQAAgASABAAAAABQAKMPUgAAAAUAAAABCQAAAAABAAAA AAAAAAEAAQkAAAAAAQAgAQAAAAACAAEJAAAAAAEAQAIAAAAAAwABCQAAAAABAGADAAAAAAQAAQkA AAAAAQCABAAAAABgAKMPDAAAAAEAAAAAAAAAAAAAAHAAow8+AAAABQAAAAAAAAAAAAIAHAABAAAA AAAAAAIAGAACAAAAAAAAAAIAFAADAAAAAAAAAAIAEgAEAAAAAAAAAAIAEgCAAKMPPgAAAAUAAAAA AAAAAAACABgAAQAAAAAAAAACABQAAgAAAAAAAAACABIAAwAAAAAAAAACABAABAAAAAAAAAACABAA DwAMBD4FAAAPAALwNgUAABAACPAIAAAABwAAAAgEAAAPAAPwzgQAAA8ABPAoAAAAAQAJ8BAAAAAA AAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAABAAABQAAAA8ABPDSAAAAEgAK8AgAAAACBAAAAAoAAJMA C/A2AAAAfwABAAUAgAA0aLgAhwABAAAAgQEEAAAIgwEAAAAIvwEBABEAwAEBAAAI/wEBAAkAAQIC AAAIAAAQ8AgAAACAAbAB0BRQBA8AEfAQAAAAAADDCwgAAAAAAAAAAQC4AA8ADfBUAAAAAACfDwQA AAAAAAAAAACoDyAAAABDbGljayB0byBlZGl0IE1hc3RlciB0aXRsZSBzdHlsZQAAog8GAAAAIQAA AAAAAACqDwoAAAAhAAAAAQAAAAAADwAE8BYBAAASAArwCAAAAAMEAAAACgAAgwAL8DAAAAB/AAEA BQCAALCNuACBAQQAAAiDAQAAAAi/AQEAEQDAAQEAAAj/AQEACQABAgIAAAgAABDwCAAAAOAEsAHQ FAAPDwAR8BAAAAAAAMMLCAAAAAEAAAACALgADwAN8J4AAAAAAJ8PBAAAAAEAAAAAAKgPUgAAAENs aWNrIHRvIGVkaXQgTWFzdGVyIHRleHQgc3R5bGVzDVNlY29uZCBsZXZlbA1UaGlyZCBsZXZlbA1G b3VydGggbGV2ZWwNRmlmdGggbGV2ZWwAAKIPHgAAACEAAAAAAA0AAAABAAwAAAACAA0AAAADAAwA AAAEAAAAqg8KAAAAUwAAAAEAAAAAAA8ABPC2AAAAEgAK8AgAAAAEBAAAAAoAAIMAC/AwAAAAfwAB AAUAgABklbgAgQEEAAAIgwEAAAAIvwEBABEAwAEBAAAI/wEBAAkAAQICAAAIAAAQ8AgAAABgD7AB YAaAEA8AEfAQAAAAAADDCwgAAAACAAAABwG4AA8ADfA+AAAAAACfDwQAAAAEAAAAAACgDwIAAAAq AAAAoQ8UAAAAAgAAAAAAAAAAAAIAAAAAAAIADgAAAPgPBAAAAAAAAAAPAATwuAAAABIACvAIAAAA BQQAAAAKAACDAAvwMAAAAH8AAQAFAIAA7JS4AIEBBAAACIMBAAAACL8BAQARAMABAQAACP8BAQAJ AAECAgAACAAAEPAIAAAAYA+wB9AOgBAPABHwEAAAAAAAwwsIAAAAAwAAAAkCuAAPAA3wQAAAAAAA nw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPFgAAAAIAAAAAAAAIAAABAAIAAAAAAAIADgAAAPoPBAAA AAAAAAAPAATwuAAAABIACvAIAAAABgQAAAAKAACDAAvwMAAAAH8AAQAFAIAAMKW4AIEBBAAACIMB AAAACL8BAQARAMABAQAACP8BAQAJAAECAgAACAAAEPAIAAAAYA8gENAUgBAPABHwEAAAAAAAwwsI AAAABAAAAAgCuAAPAA3wQAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPFgAAAAIAAAAAAAAI AAACAAIAAAAAAAIADgAAANgPBAAAAAAAAAAPAATwYAAAAEIBCvAIAAAACAQAAAAKAABzAAvwKgAA AEQBBAAAAH8BAAABAL8BAAAQAMABBAAACMsB1JQAAP8BGAAYAAECAgAACBMAIvEGAAAAvwMABAAE AAAQ8AgAAACABLAB0BSABA8ABPBIAAAAEgAK8AgAAAABBAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEF AAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICA gAAAAAAAAMyZADMzzADMzP8AsrKyACAAug8cAAAARABlAGYAYQB1AGwAdAAgAEQAZQBzAGkAZwBu AA8A7gPkAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwElAEAAA8AAvCMAQAA IAAI8AgAAAADAAAAAwgAAA8AA/AkAQAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAAC AArwCAAAAAAIAAAFAAAADwAE8HIAAAASAArwCAAAAAIIAAAgAgAAUwAL8B4AAAB/AAAABACAANzu uAC/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAIABsAHQFFAEDwAR8BAAAAAAAMMLCAAAAAAAAAAN ALgADwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwcgAAABIACvAIAAAAAwgAACACAABTAAvwHgAAAH8A AAAEAIAAPPO4AL8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAA4ASwAdAUAA8PABHwEAAAAAAAwwsI AAAAAQAAAA4AuAAPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABCAAAAAwAAIMA C/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADw ByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPkAQAAAgDvAxgAAAABAAAA DQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwElAEAAA8AAvCMAQAAMAAI8AgAAAADAAAAAwwAAA8AA/Ak AQAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAMAAAFAAAADwAE8HIA AAASAArwCAAAAAIMAAAgAgAAUwAL8B4AAAB/AAAABACAANgmVAG/AQAAAQD/AQAAAQABAwIEAAAA ABDwCAAAAIABsAHQFFAEDwAR8BAAAAAAAMMLCAAAAAAAAAANAFQBDwAN8AwAAAAAAJ4PBAAAAAAA AAAPAATwcgAAABIACvAIAAAAAwwAACACAABTAAvwHgAAAH8AAAAEAIAAMIFUAb8BAAABAP8BAAAB AAEDAwQAAAAAEPAIAAAA4ASwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AVAEPAA3wDAAAAAAA ng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABDAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGO n4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAA AMyZADMzzADMzP8AsrKyAA8A7gPkAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAP AAwElAEAAA8AAvCMAQAAQAAI8AgAAAADAAAAAxAAAA8AA/AkAQAADwAE8CgAAAABAAnwEAAAAAAA AAAAAAAAAAAAAAAAAAACAArwCAAAAAAQAAAFAAAADwAE8HIAAAASAArwCAAAAAIQAAAgAgAAUwAL 8B4AAAB/AAAABACAAHCzVAG/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAIABsAHQFFAEDwAR8BAA AAAAAMMLCAAAAAAAAAANAFQBDwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwcgAAABIACvAIAAAAAxAA ACACAABTAAvwHgAAAH8AAAAEAIAA0LdUAb8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAA4ASwAdAU AA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AVAEPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK 8AgAAAABEAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgA BAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPk AQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwElAEAAA8AAvCMAQAAcAAI8AgA AAADAAAAAxwAAA8AA/AkAQAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAA AAAcAAAFAAAADwAE8HIAAAASAArwCAAAAAIcAAAgAgAAUwAL8B4AAAB/AAAABACAAIgLRAK/AQAA AQD/AQAAAQABAwIEAAAAABDwCAAAAIABsAHQFFAEDwAR8BAAAAAAAMMLCAAAAAAAAAANAEQCDwAN 8AwAAAAAAJ4PBAAAAAAAAAAPAATwcgAAABIACvAIAAAAAxwAACACAABTAAvwHgAAAH8AAAAEAIAA wCNUAb8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAA4ASwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAA AA4AVAEPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABHAAAAAwAAIMAC/AwAAAA gQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD/ //8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPkAQAAAgDvAxgAAAABAAAADQ4AAAAA AAAAAACAAAAAAAcAAAAPAAwElAEAAA8AAvCMAQAAgAAI8AgAAAADAAAAAyAAAA8AA/AkAQAADwAE 8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAgAAAFAAAADwAE8HIAAAASAArw CAAAAAIgAAAgAgAAUwAL8B4AAAB/AAAABACAAGgdRAK/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAA AIABsAHQFFAEDwAR8BAAAAAAAMMLCAAAAAAAAAANAEQCDwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATw cgAAABIACvAIAAAAAyAAACACAABTAAvwHgAAAH8AAAAEAIAAmItEAr8BAAABAP8BAAABAAEDAwQA AAAAEPAIAAAA4ASwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4ARAIPAA3wDAAAAAAAng8EAAAA AQAAAA8ABPBIAAAAEgAK8AgAAAABIAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHe vWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMz zADMzP8AsrKyAA8A7gPkAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwElAEA AA8AAvCMAQAAkAAI8AgAAAADAAAAAyQAAA8AA/AkAQAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAA AAAAAAAAAAACAArwCAAAAAAkAAAFAAAADwAE8HIAAAASAArwCAAAAAIkAAAgAgAAUwAL8B4AAAB/ AAAABACAAKApSQK/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAIABsAHQFFAEDwAR8BAAAAAAAMML CAAAAAAAAAANAEkCDwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwcgAAABIACvAIAAAAAyQAACACAABT AAvwHgAAAH8AAAAEAIAAgCZJAr8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAA4ASwAdAUAA8PABHw EAAAAAAAwwsIAAAAAQAAAA4ASQIPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAAB JAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAA PwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPkAQAAAgDv AxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwElAEAAA8AAvCMAQAAUAAI8AgAAAADAAAA AxQAAA8AA/AkAQAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAUAAAF AAAADwAE8HIAAAASAArwCAAAAAIUAAAgAgAAUwAL8B4AAAB/AAAABACAAHjyVAG/AQAAAQD/AQAA AQABAwIEAAAAABDwCAAAAIABsAHQFFAEDwAR8BAAAAAAAMMLCAAAAAAAAAANAFQBDwAN8AwAAAAA AJ4PBAAAAAAAAAAPAATwcgAAABIACvAIAAAAAxQAACACAABTAAvwHgAAAH8AAAAEAIAAbO5UAb8B AAABAP8BAAABAAEDAwQAAAAAEPAIAAAA4ASwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AVAEP AA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABFAAAAAwAAIMAC/AwAAAAgQEAAAAI gwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAA AICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPkAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACA AAAAAAcAAAAPAAwElAEAAA8AAvCMAQAAYAAI8AgAAAADAAAAAxgAAA8AA/AkAQAADwAE8CgAAAAB AAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAYAAAFAAAADwAE8HIAAAASAArwCAAAAAIY AAAgAgAAUwAL8B4AAAB/AAAABACAAHxLRAK/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAIABsAHQ FFAEDwAR8BAAAAAAAMMLCAAAAAAAAAANAEQCDwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwcgAAABIA CvAIAAAAAxgAACACAABTAAvwHgAAAH8AAAAEAIAAvMxUAb8BAAABAP8BAAABAAEDAwQAAAAAEPAI AAAA4ASwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AVAEPAA3wDAAAAAAAng8EAAAAAQAAAA8A BPBIAAAAEgAK8AgAAAABGAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwES ABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8A srKyAAAAchcsAAAAAQCgAAAAAADLEgAA1xsAAMMdAACvHwAAXycAAJshAABLKQAAhyMAAHMlAAAA APUPHAAAAAQBAACcCgADAAAAADcrAAABAAAACgAAAAEA978PAOgDUhoAAAEA6QMoAAAAgBYAAOAQ AADgEAAAgBYAAAUAAAAKAAAAAAAAAAAAAAABAAAAAAAAAQ8A8gOuAQAALwDIDwwAAAAwANIPBAAA AAEAAAAPANUH5AAAAAAAtw9EAAAAVABpAG0AZQBzACAATjEAAAADAAAACgAAAAMAAAAAAAAAAwAA AAAAAAADAAAAAAAAAAMAAACgCgkACwAAAAAAAAALAAAAAAAAAAsAAAAAAAAACwAAAAAAAAAeEAAA DgAAABAAAABUaW1lcyBOZXcgUm9tYW4AEQAAAEFyaWFsIFVuaWNvZGUgTVMABgAAAEFyaWFsAA8A AABEZWZhdWx0IERlc2lnbgAQAAAATGRhcCBTdWJlbnRyaWVzAAcAAABOYW1pbmcABgAAAFNjb3Bl ABsAAABBdXRob3KScyBTQ09QRSBBc3N1bXB0aW9ucwAYAAAAQ29ycmVzcG9uZGVuY2UgdG8gWC41 MDEAIAAAAEZyb20gWC41MDEgSW5mb3JtYXRpb25GcmFtZXdvcmsADAAAAENvbnRhaW5tZW50AAsA AABOZXh0IFN0ZXBzABMAAABNZWV0aW5nIERpc2N1c3Npb24AFgAAAE5lc3RpbmcgLyBJbmhlcml0 YW5jZQAMEAAABgAAAB4AAAALAAAARm9udHMgVXNlZAADAAAAAwAAAB4AAAAQAAAARGVzaWduIFRl bXBsYXRlAAMAAAABAAAAHgAAAA0AAABTbGlkZSBUaXRsZXMAAwAAAAoAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2DyYAAAAUAAAAX8CR491JAAAOAPQD AwBJAkVkd2FyZHMgRSBSZWVkCAAAAEUAZAB3AGEAcgBkAHMAIABFACAAUgBlAGUAZAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsEuQB5A0AASAAEAAAALQEAAAQAAAAt AQIABQAAAAkCAAAAAgUAAAAUAgAAAAAVAAAA+wLF/wAAAAAAAJABAAAAAABAABJUaW1lcyBOZXcg Um9tYW4AAAAEAAAALQEFAAQAAADwAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAAC AQEADwAAADIKkQDvAQUAAABMZGFwIAAiAB4AGgAeAA8ABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAA AAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBABYAAAAyCpEAdgIKAAAAU3ViZW50cmllcyEAHQAe ABoAHgAQABQAEAAaABcABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BBAAEAAAALQEBAAcA AAAbBIECeQPQAEgABAAAAC0BAAAEAAAALQECAAUAAAAJAgAAAAIFAAAAFAIAAAAAFQAAAPsC1f8A AAAAAACQAQAAAAAAQAASVGltZXMgTmV3IFJvbWFuAAAABAAAAC0BAwAEAAAA8AEFAAUAAAAJAgAA AAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAAkAAAAyCv4AUgABAAAAlQAPAAQAAAAuAQEABAAA AAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAPAAAAMgr+AHYABQAAAGRy YWZ0ABUADgAUAA0ADAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEY AAQAAAACAQEACQAAADIK/gDGAAEAAAAtAA4ABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAAAAIFAAAA FAIAAAAABAAAAC4BGAAEAAAAAgEBAA0AAAAyCv4A1AAEAAAAaWV0ZgwAEgANAA4ABAAAAC4BAQAE AAAAAgECAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAAkAAAAyCv4ADQEBAAAA LQAOAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAN AAAAMgr+ABsBBAAAAGxkdXAMABUAFQAWAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQC AAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgr+AGcBAQAAAC0ADgAEAAAALgEBAAQAAAACAQIABQAA AAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIK/gB1AQgAAABzdWJlbnRyeREA FQAWABIAFQAMABAAFAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEY AAQAAAACAQEACQAAADIK/gAIAgEAAAAtAA4ABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAAAAIFAAAA FAIAAAAABAAAAC4BGAAEAAAAAgEBABAAAAAyCv4AFgIGAAAAMDMudHh0FgAWAAsADAAVAAwABAAA AC4BAQAEAAAAAgECAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAAkAAAAyCjsB UgABAAAAlQAPAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAA AAIBAQAQAAAAMgo7AXYABgAAAE5hbWluZx8AEwAgAAwAFQAVAAQAAAAuAQEABAAAAAIBAgAFAAAA CQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgp5AVIAAQAAAJUADwAEAAAALgEB AAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEADwAAADIKeQF2AAUA AABTY29wZQAYABIAFQAWABIABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAA AC4BGAAEAAAAAgEBAAkAAAAyCrYBUgABAAAAlQAPAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAAC BQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAYAAAAMgq2AXYACwAAAENvbnRhaW5tZW50AB0AFQAV AAwAEwAMABUAIQATABUADAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEBAAQAAAAtAQQA EAAAAPsCEAAHAAAAAAC8AgAAAAABAgIiU3lzdGVtAAAEAAAALQEFAAQAAADwAQMADwAAACYGDwAU AFROUFAEAAwAAAAAAAAAAAAAAAAACQAAACYGDwAIAP////8BAAAAAwAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAABAoCAAAAAAAAAAAAAAAAAAAAAAABAAAAAtXN 1ZwuGxCTlwgAKyz5rjAAAACkAgAAEAAAAAEAAACIAAAAAwAAAJAAAAAPAAAAqAAAAAQAAADEAAAA BgAAAMwAAAAHAAAA1AAAAAgAAADcAAAACQAAAOQAAAAKAAAA7AAAABcAAAD0AAAACwAAAPwAAAAQ AAAABAEAABMAAAAMAQAAFgAAABQBAAANAAAAHAEAAAwAAABCAgAAAgAAAOQEAAAeAAAADwAAAE9u LXNjcmVlbiBTaG93AAAeAAAAFAAAAFJlZWQtTWF0dGhld3MsIEluYy4AAwAAAAFKAAADAAAAMQAA AAMAAAAKAAAAAwAAAAAAAAADAAAAAAAAAAMAAAAAAAAAAwAAAKAKCQALAAAAAAAAAAsAAAAAAAAA CwAAAAAAAAALAAAAAAAAAB4QAAAOAAAAEAAAAFRpbWVzIE5ldyBSb21hbgARAAAAQXJpYWwgVW5p Y29kZSBNUwAGAAAAQXJpYWwADwAAAERlZmF1bHQgRGVzaWduABAAAABMZGFwIFN1YmVudHJpZXMA BwAAAE5hbWluZwAGAAAAU2NvcGUAGwAAAEF1dGhvcpJzIFNDT1BFIEFzc3VtcHRpb25zABgAAABD b3JyZXNwb25kZW5jZSB0byBYLjUwMQAgAAAARnJvbSBYLjUwMSBJbmZvcm1hdGlvbkZyYW1ld29y awAMAAAAQ29udGFpbm1lbnQACwAAAE5leHQgU3RlcHMAEwAAAE1lZXRpbmcgRGlzY3Vzc2lvbgAW AAAATmVzdGluZyAvIEluaGVyaXRhbmNlAAwQAAAGAAAAHgAAAAsAAABGb250cyBVc2VkAAMAAAAD AAAAHgAAABAAAABEZXNpZ24gVGVtcGxhdGUAAwAAAAEAAAAeAAAADQAAAFNsaWRlIFRpdGxlcwAD AAAACgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAD2DyYAAAAUAAAAX8CR42srAAAOAPQDAwBJAkVkd2FyZHMgRSBS ZWVkCAAAAEUAZAB3AGEAcgBkAHMAIABFACAAUgBlAGUAZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAEAAAACAAAAAwAAAAQAAAAFAAAABgAAAAcAAAAIAAAACQAAAAoAAAALAAAADAAA AA0AAAAOAAAADwAAABAAAAARAAAAEgAAABMAAAAUAAAAFQAAADEAAAAXAAAA/v////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////9////MAAAAP7///8yAAAAMwAAADQAAAA1AAAANgAAADcA AAA4AAAAOQAAADoAAAA7AAAAPAAAAD0AAAA+AAAAPwAAAEAAAAD+/////v///0MAAABEAAAARQAA AEYAAABHAAAAFgAAAP////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////UgBvAG8AdAAgAEUAbgB0AHIAeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAABYABQH//////////wMAAAAQjYFkm0/PEYbqAKoAuSnoAAAAAAAAAAAA AAAAYLdShB37vwFCAAAAgA4AAAAAAABDAHUAcgByAGUAbgB0ACAAVQBzAGUAcgAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACAP///////////////wAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgAAABKAAAAAAAAAAUAUwB1AG0AbQBhAHIAeQBJAG4A ZgBvAHIAbQBhAHQAaQBvAG4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAIBAQAAAP////// ////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPQKAAAAAAAAUABvAHcA ZQByAFAAbwBpAG4AdAAgAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA ACgAAgECAAAABAAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AUoAAAAAAAAFAEQAbwBjAHUAbQBlAG4AdABTAHUAbQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABp AG8AbgAAAAAAAAAAAAAAOAACAf///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAACwAAADUAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA////////////////AAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///////////// //8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAABlAHcAIABSAG8AbQBhAG4AAADoPLgA9NhiANzYYgB2xwswCAAAAAAAAAD02GIAKN0N MAAABBIQALcPRAAAAEEAcgBpAGEAbAAgAFUAbgBpAGMAbwBkAGUAIABNAFMAAAC4APTYYgDc2GIA dscLMAgAAAAAAAAA9NhiACjdDTABAAAAIAC3D0QAAABBAHIAaQBhAGwAAABVAG4AaQBjAG8AZABl ACAATQBTAAAAuAD02GIA3NhiAHbHCzAIAAAAAAAAAPTYYgAo3Q0wAAAEIgAApA8KAAAAgABgAAAA /////wAApQ8MAAAAAAAACC4AAAAHAAAAAACpDwoAAAAHAAAAAgAJBAAAQACjD24AAAAFAP/9PwAA ACIgAABkAAAAAAAAAGQAAAAAAAAAAABAAgAAAAAHAAAA///vAAAAAAD///////8YAAAAAAEAAAAF AAAgASABAAAAAAAFAABAAkACAAAAAAAFAABgA2ADAAAAAAAFAACABIAEAAAAAA8ACwS8AAAADwAA 8LQAAAAAAAbwaAAAAAQsAAAMAAAAJQAAAAsAAAABAAAACQAAAAIAAAAEAAAAAwAAAAQAAAAEAAAA BAAAAAUAAAAEAAAABgAAAAQAAAAHAAAABAAAAAgAAAAEAAAACQAAAAQAAAAKAAAABAAAAAsAAAAE AAAAYwAL8CQAAACBAQQAAAiDAQAAAAi/ARAAEADAAQEAAAj/AQgACAABAgIAAAhAAB7xEAAAAAQA AAgEAAAIAgAACPcAABAfAPAPHAAAAAAA8wMUAAAAAgAAAAQAAAAAAAAAAAAAgAAAAAAPANAHNwEA AB8AFAQcAAAAAAAVBBQAAAAFuV4LAMqaOzJOzckAypo7AQEAAQ8A+gNnAAAAAAD+AwMAAAAAAQAA AP0DNAAAAEYAAABkAAAARgAAAGQAAAB2xwswCAAAAAAAAADo2GIAAAAAAAAAAAC2/v//pv///wEA AABwAPsDCAAAAAAAAABwCAAAcAD7AwgAAAABAAAAQAsAAB8ABwQ8AAAAAAD9AzQAAAAhAAAAZAAA ACEAAABkAAAAYPMNMKTcYgAAAAAA1D24AAAAAAAAAAAAAAAAAAAAAAAAAWIAHwATBDwAAAAAAP0D NAAAAGQAAABkAAAAZAAAAGQAAABg8w0wpNxiAAAAAADUPbgAAAAAAAAAAAAAAAAAAAAAAAABYgAf AP8DFAAAAAIAAAQMAAAAAAAAAAAAAAACAAAAPwDZDwwAAAAAANoPBAAAAAAAJQAPAPAPIRYAAAAA 8wMUAAAAAwAAAAAAAAACAAAAAAEAAAAAAAAAAJ8PBAAAAAAAAAAAAKgPDwAAAExkYXAgU3ViZW50 cmllcwAAqg8SAAAABQAAAAEAAAADAAsAAAAAAAAAEACfDwQAAAABAAAAAACoDzkAAABkcmFmdC1p ZXRmLWxkdXAtc3ViZW50cnktMDMudHh0DU5hbWluZw1TY29wZQ1Db250YWlubWVudA0AAKoPLAAA AAYAAAAAAAAABAAAAAEAAAADAAEAAAAAAAAABAAAAAEAAAADACsAAAAAAAAAAADzAxQAAAAEAAAA AAAAAAIAAAABAQAAAAAAAAAAnw8EAAAAAAAAAAAAqA8GAAAATmFtaW5nEACfDwQAAAABAAAAAACo D+8AAABEZWNpZGVkIHRvIGxlYXZlIE1BWSB7Y259IGluIGNsYXNzIGRlZmluaXRpb24NY24gTUFZ IGJlIHVzZWQgdG8gbmFtZSBzdWJlbnRyaWVzLCBidXQgc28gbWF5IG90aGVyIGF0dHJpYnV0ZXMg ZGVmaW5lZCBieSBzdWJjbGFzc2VzIG9yIGF1eCBjbGFzc2VzDVdoZXJlIHBvc3NpYmxlLCB0aGUg dXNlIG9mIEF1eGlsaWFyeSBjbGFzc2VzIHRvIGV4dGVuZCBsZGFwU3ViRW50cmllcyBpcyBzdHJv bmdseSBwcmVmZXJyZWQuIAAAoQ8eAAAA8AAAAAAAABAAAFoAkgAAAAAAAABeAAAAAAABAAEAAACq Dz4AAAAWAAAAAAAAAAIAAAABAAAAAwAWAAAAAAAAAAIAAAABAAAAAwCYAAAAAAAAAA8AAAABAAAA AwAZAAAAAAAAAAAA8wMUAAAABQAAAAAAAAACAAAAAgEAAAAAAAAAAJ8PBAAAAAAAAAAAAKgPBQAA AFNjb3BlEACfDwQAAAABAAAAAACgD4wCAABOAG8AIABzAGUAbQBhAG4AdABpAGMAcwAgAGkAbQBw AGwAaQBlAGQADQBDAG8AdQBsAGQAIABlAHgAcABsAGkAYwBpAHQAbAB5ACAAZABlAGYAaQBuAGUA IAB0AGgAZQAgAHMAaQBtAHAAbABlACAAcwB1AGIAcwBlAHQAIAAoAGYAcgBvAG0AIAB0AGgAZQAg AGEAcwBzAG8AYwBpAGEAdABlAGQAIABuAGEAbQBpAG4AZwAgAGMAbwBuAHQAZQB4AHQAIAAvACAA YQBkAG0AaQBuACAAcABvAGkAbgB0ACAAZABvAHcAbgAgAHQAbwAgAHQAaABlACAAbgBlAHgAdAAg AG4AYQBtAGkAbgBnACAAYwBvAG4AdABlAHgAdAAgAC8AIABhAGQAbQBpAG4AIABwAG8AaQBuAHQA KQANAEMAbwB1AGwAZAAgAGkAbgBjAGwAdQBkAGUAIABhAGwAbAAgAFgALgA1ADAAMAAgAHMAdQBi AC0AdAByAGUAZQAgAHMAcABlAGMAaQBmAGkAYwBhAHQAaQBvAG4AIAAoAG8AdgBlAHIAIAB0AGgA ZQAgAGEAdQB0AGgAbwByABkgcwAgAGQAZQBhAGQAIABiAG8AZAB5ACkADQBBAHUAdABoAG8AcgAZ IHMAIAByAGUAYwBvAG0AbQBlAG4AZABhAHQAaQBvAG4AOgAgAEEAbABsAG8AdwAgAGYAdQB0AHUA cgBlACAAdQBzAGUAcgBzACAAdABvACAAZABlAGYAaQBuAGUAIAB0AGgAZQBpAHIAIABvAHcAbgAg AHMAYwBvAHAAZQAgAHMAeQBuAHQAYQB4ACAALwAgAHMAZQBtAGEAbgB0AGkAYwBzAA0AAAChDzwA AAAVAAAAAAAAEAAAWgDYAAAAAQAAEAAAWgBaAAAAAAAAEAAAWgAVAAAAAAAAANgAAAAAAAAAWgAA AAAAAAAAAPMDFAAAAAcAAAAAAAAAAgAAAAUBAAAAAAAAAACfDwQAAAAAAAAAAACgDzQAAABBAHUA dABoAG8AcgAZIHMAIABTAEMATwBQAEUAIABBAHMAcwB1AG0AcAB0AGkAbwBuAHMAEACfDwQAAAAB AAAAAACoDz4BAABDb250aWd1b3VzLCBpbW1lZGlhdGVseSBhZGphY2VudCBzdWItdHJlZQ1TY29w ZSBzdG9wcyBhdCBuZXh0IEFkbWluaXN0cmF0aW9uIFBvaW50IC8gTmFtaW5nIENvbnRleHQsIG9y IGF0IHRoZSBsZWFmcyBvZiB0aGUgc3VidHJlZQ1Jbmhlcml0YW5jZSBhY3Jvc3MgQVAgLyBOQ3Ms IHdoaWxlIHBvc3NpYmxlLCBpcyBiZXN0IGRlZmluZWQgYnkgYXBwbGljYXRpb25zIGRlc2lyaW5n IGl0ICh0b28gbWFueSB2YXJpYXRpb25zIGV4aXN0IHRvIGdldCB0byBjb25zZW5zdXMsIHRvZGF5 KQ1MRFVQIHB1bnRlZCB0aGlzIHRvIEFDTCB3b3JrLCBmb3IgaW5zdGFuY2UAAKEPKgAAABQBAAAA AAAAAAArAAAAAQAAAAAAFAEAAAAAAgAcACsAAAAABAIAAAQYAAAAqg8sAAAAfAAAAAAAAAAIAAAA AQAAAAMAGAAAAAAAAAADAAAAAQAAAAMAoAAAAAAAAAAAAPMDFAAAAAkAAAAAAAAAAgAAAAYBAAAA AAAAAACfDwQAAAAAAAAAAACoDxcAAABDb3JyZXNwb25kZW5jZSB0byBYLjUwMRAAnw8EAAAAAQAA AAAAqA+8AAAAU3VidHJlZSBzcGVjaWZpY2F0aW9uIGFic2VudA1JbXBsaWVzIGxvY2FsIG5hbWUg aXMgdGhlIGltbWVkaWF0ZWx5IHN1cGVyaW9yIG5hbWluZyBjb250ZXh0IG9yIGFkbWluaXN0cmF0 aW9uIHBvaW50DVdob2xlIGFkbWluaXN0cmF0aW9uIGFyZWEgaXMgaW5jbHVkZWQNTm8gc2VsZWN0 aW9uIG9yIHJlZmluZW1lbnRzIGRlZmluZWQAAKEPJgAAAB0AAAAAAAAAAACgAAAAAQAAAAAAHQAA AAAAAACgAAAAAAQAAAAEAACqDxIAAAAIAAAAAQAAAAMAtQAAAAAAAAAAAPMDFAAAAAoAAAAAAAAA AgAAAAcBAAAAAAAAAACfDwQAAAAAAAAAAACoDx8AAABGcm9tIFguNTAxIEluZm9ybWF0aW9uRnJh bWV3b3JrAACqDxoAAAALAAAAAAAAABQAAAABAAAAAwABAAAAAAAAABAAnw8EAAAAAQAAAAAAqA/o AAAALS0gc3VidHJlZSBkYXRhIHR5cGVzIC0tDVN1YnRyZWVTcGVjaWZpY2F0aW9uIDo6PSBTRVFV RU5DRSB7DSAgICBiYXNlIFswXSBMb2NhbE5hbWUgREVGQVVMVCB7IH0sDSAgICBDT01QT05FTlRT IE9GIENob3BTcGVjaWZpY2F0aW9uLA0gICAgc3BlY2lmaWNhdGlvbkZpbHRlciBbNF0gUmVmaW5l bWVudCBPUFRJT05BTCB9DS0tIGVtcHR5IHNldCBzcGVjaWZpZXMgd2hvbGUgYWRtaW5pc3RyYXRp dmUgYXJlYQAAoQ82AAAA6QAAAAAAIQAAAAAAAAAAARkAAAAAAAMAAgAcAJ8AAAABAAMAAQACABwA MQAAAAAAAwACABwAAACqD2IAAAACAAAAAAAAAAgAAAABAAAAAwAOAAAAAAAAABUAAAABAAAAAwAc AAAAAAAAAAoAAAABAAAAAwAfAAAAAAAAABIAAAABAAAAAwADAAAAAAAAABYAAAABAAAAAwBMAAAA AAAAAAAA8wMUAAAABgAAAAAAAAACAAAAAwEAAAAAAAAAAJ8PBAAAAAAAAAAAAKgPCwAAAENvbnRh aW5tZW50EACfDwQAAAABAAAAAACgD2ACAABEAHIAYQBmAHQAIABzAGEAeQBzACAAHCBMAEQAQQBQ ACAAUwB1AGIAZQBuAHQAcgBpAGUAcwAgAE0AQQBZACAAYgBlACAAYwBvAG4AdABhAGkAbgBlAGQA IABiAHkALAAgAGEAbgBkACAAdwBpAGwAbAAgAHUAcwB1AGEAbABsAHkAIABiAGUAIABsAG8AYwBh AHQAZQBkACAAaQBuACAAdABoAGUAIABkAGkAcgBlAGMAdABvAHIAeQAgAGkAbgBmAG8AcgBtAGEA dABpAG8AbgAgAHQAcgBlAGUAIABpAG0AbQBlAGQAaQBhAHQAZQBsAHkAIABzAHUAYgBvAHIAZABp AG4AYQB0AGUAIAB0AG8ALAAgAGEAZABtAGkAbgBpAHMAdAByAGEAdABpAHYAZQAgAHAAbwBpAG4A dABzACAAYQBuAGQALwBvAHIAIABuAGEAbQBpAG4AZwAgAGMAbwBuAHQAZQB4AHQAcwAuAB0gDQBO AG8AdAAgAGkAbgB0AGUAbgBkAGUAZAAgAHQAbwAgAGIAZQAgABwgagB1AHMAdAAgAGEAbgB5AHcA aABlAHIAZQAdIA0AUwB1AGIAZQBuAHQAcgBpAGUAcwAgAG0AYQB5ACAAYwBvAG4AdABhAGkAbgAg AG8AdABoAGUAcgAgAHMAdQBiAGUAbgB0AHIAaQBlAHMALgANAEQAZQBlAHAAIABuAGUAcwB0AGkA bgBnACAAbwBmACAAcwB1AGIAZQBuAHQAcgBpAGUAcwAgAGkAcwAgAGQAaQBzAGMAbwB1AHIAYQBn AGUAZAAuAAAAoQ8eAAAAMQEAAAAAABAAAFoADAAAAAAAAAAlAQAAAAABAAEAAADzAxQAAAAIAAAA AAAAAAIAAAAEAQAAAAAAAAAAnw8EAAAAAAAAAAAAqA8KAAAATmV4dCBTdGVwcxAAnw8EAAAAAQAA AAAAqA9XAAAAQW55IGZ1cnRoZXIgY2hhbmdlcz8NVHJ5aW5nIHRvIGdldCB0byBqb2ludCBsYXN0 IGNhbGwgd2l0aCBMRFVQIGFuZCBMREFQRVhUIGRpc2N1c3Npb25zAADzAxQAAAALAAAAAAAAAAIA AAAIAQAAAAAAAAAAnw8EAAAAAAAAAAAAqA8SAAAATWVldGluZyBEaXNjdXNzaW9uEACfDwQAAAAB AAAAAACgDyQCAABTAHAAZQBjAGkAZgB5ACAAdABoAGUAIABzAGMAbwBwAGUAIABhAHMAcwB1AG0A cAB0AGkAbwBuAHMADQBDAGwAYQByAGkAZgB5ACAAYwBvAG4AdABhAGkAbgBtAGUAbgB0ACAAZABp AHMAYwB1AHMAcwBpAG8AbgAgABMgIABwAHIAZQBzAGUAbgBjAGUAIABvAGYAIABhACAAcwB1AGIA ZQBuAHQAcgB5ACAAbQBhAGsAZQBzACAAaQB0ABkgcwAgAGkAbQBtAGUAZABpAGEAdABlAGwAeQAg AHMAdQBwAGUAcgBpAG8AcgAgAG4AbwBuAC0AcwB1AGIAZQBuAHQAcgB5ACAAcABhAHIAZQBuAHQA IABhAG4AIABhAGQAbQBpAG4AaQBzAHQAcgBhAHQAaQBvAG4AIABwAG8AaQBuAHQADQBOAGEAbQBp AG4AZwAgAGEAcABwAHIAbwBhAGMAaAAgAHQAYQBrAGUAbgAgAGkAcwAgAG8AawBhAHkADQBBAGwA cwBvACwAIABtAGEAawBlACAAYwBsAGUAYQByACAAdwBoAHkAIAB0AGgAaQBzACAAaQBzACAAbgBv AHQAIABqAHUAcwB0ACAAWAAuADUAMAAxACAAKABuAGUAcwB0AGkAbgBnACwAIABhAGwAdABlAHIA bgBhAHQAZQAgAG4AYQBtAGkAbgBnACAAYQB0AHQAcgBpAGIAdQB0AGUAcwApAAAAoQ8UAAAAEwEA AAAAABAAAFoAEwEAAAAAAAAAAPMDFAAAAAwAAAAAAAAAAgAAAAkBAAAAAAAAAACfDwQAAAAAAAAA AACoDxUAAABOZXN0aW5nIC8gSW5oZXJpdGFuY2UQAJ8PBAAAAAEAAAAAAKAPRgQAAFMAaQBuAGMA ZQAgAGEAZABtAGkAbgBpAHMAdAByAGEAdABpAG8AbgAgAHAAbwBpAG4AdABzACAAbQBhAHkAIABi AGUAIABzAG0AYQBsAGwAZQByACAAdABoAGEAbgAgAG4AYQBtAGkAbgBnACAAYwBvAG4AdABlAHgA dAAgABMgIAB5AG8AdQAgAE0AQQBZACAAaABhAHYAZQAgAG0AdQBsAHQAaQBwAGwAZQAgAGkAbgB0 AGUAcgBpAG8AcgAgAGEAZABtAGkAbgAgAHAAbwBpAG4AdABzACAAdwBpAHQAaABpAG4AIABhACAA cwBpAG4AZwBsAGUAIABuAGEAbQBpAG4AZwAgAGMAbwBuAHQAZQB4AHQALgANAFMAbwAgAGkAbgBo AGUAcgBpAHQAYQBuAGMAZQAgAGEAYwByAG8AcwBzACAAYQBkAG0AaQBuAGkAcwB0AHIAYQB0AGkA bwBuACAAcABvAGkAbgB0AHMAIABuAGUAZQBkAHMAIAB0AG8AIABiAGUAIABkAGUAZgBpAG4AZQBk ACAAYgB5ACAAZgBvAGwAawBzACAAcgBlAGYAaQBuAGkAbgBnAC8AdQBzAGkAbgBnACAAcwB1AGIA ZQBuAHQAcgBpAGUAcwANAEMAbABhAHIAaQBmAHkAIAB0AGgAYQB0ACAAbgBlAHMAdABlAGQAIABz AHUAYgBlAG4AdAByAGkAZQBzACAAZABvACAATgBPAFQAIABjAHIAZQBhAHQAZQAgAG4AZQB3ACAA YQBkAG0AaQBuAGkAcwB0AHIAYQB0AGkAbwBuACAAcABvAGkAbgB0AHMAIABvAGYAIAB0AGgAZQBp AHIAIABvAHcAbgAhAA0AQwBsAGEAcgBpAGYAeQAgAHQAaABhAHQAIAB0AGgAZQByAGUAIABtAGEA eQAgAGIAZQAgAHMAZQB2AGUAcgBhAGwAIABzAHUAYgBlAG4AdAByAGkAZQBzACAAcwB1AGIAbwBy AGQAaQBuAGEAdABlACAAdABvACAAdABoAGUAIABzAGEAbQBlACAAYQBkAG0AaQBuAGkAcwB0AHIA YQB0AGkAbwBuACAAcABvAGkAbgB0ACAAEyAgAHMAbwAgAGkAcwAgAHQAaABlACAAcwBjAG8AcABl ACAAdQBuAHQAaQBsACAAdABoAGUAIABuAGUAeAB0ACAAYQBkAG0AaQBuACAAcABvAGkAbgB0ACAA dwBpAHQAaAAgAGEAbgBvAHQAaABlAHIAIABzAHUAYgBlAG4AdAByAHkAIABvAGYAIAB0AGgAaQBz ACAAcwBhAG0AZQAgAHQAeQBwAGUALAAgAG8AcgAgAGoAdQBzAHQAIAB1AG4AdABpAGwAIAB0AGgA ZQAgAG4AZQB4AHQAIABhAGQAbQBpAG4AaQBzAHQAcgBhAHQAaQBvAG4AIABwAG8AaQBuAHQAPwA/ AD8AAAChD0IAAACNAAAAAAAAEAAAWgBjAAAAAQAAEAAAWgA0AQAAAAAAEAAAWgCNAAAAAAACABwA YwAAAAAAAgAYADQBAAAAAAIAHAAAAOoDAAAAAA8A7gPkAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAA AACAAAAAAAcAAAAPAAwElAEAAA8AAvCMAQAAoAAI8AgAAAADAAAAAygAAA8AA/AkAQAADwAE8CgA AAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAoAAAFAAAADwAE8HIAAAASAArwCAAA AAIoAAAgAgAAUwAL8B4AAAB/AAAABACAAAAwSQK/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAIAB sAHQFFAEDwAR8BAAAAAAAMMLCAAAAAAAAAANAEsCDwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwcgAA ABIACvAIAAAAAygAACACAABTAAvwHgAAAH8AAAAEAIAAoAdJAr8BAAABAP8BAAABAAEDAwQAAAAA EPAIAAAA4ASwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4ASQIPAA3wDAAAAAAAng8EAAAAAQAA AA8ABPBIAAAAEgAK8AgAAAABKAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgA vwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADM zP8AsrKyAA8A7gPkAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwElAEAAA8A AvCMAQAAsAAI8AgAAAADAAAAAywAAA8AA/AkAQAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAA AAAAAAACAArwCAAAAAAsAAAFAAAADwAE8HIAAAASAArwCAAAAAIsAAAgAgAAUwAL8B4AAAB/AAAA BACAAMw1SwK/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAIABsAHQFFAEDwAR8BAAAAAAAMMLCAAA AAAAAAANAEsCDwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwcgAAABIACvAIAAAAAywAACACAABTAAvw HgAAAH8AAAAEAIAAMGtJAr8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAA4ASwAdAUAA8PABHwEAAA AAAAwwsIAAAAAQAAAA4ASQIPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABLAAA AAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMB AAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAAAAchcUAAAAAQAQAI8r AAALACAA6UUAANVHAAAAAPUPHAAAAAkBAACcCgADaysAAMFJAAABAAAADAAAAAEA978AAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAD AAAABAAAAAUAAAAGAAAABwAAAAgAAAAJAAAACgAAAAsAAAAMAAAADQAAAA4AAAAPAAAAEAAAABEA AAASAAAAEwAAABQAAAAVAAAAFgAAABcAAAAYAAAAGQAAABoAAAAbAAAAHAAAAB0AAAAeAAAAHwAA ACAAAAAhAAAAIgAAACMAAAAkAAAAJQAAACYAAAAnAAAAKAAAACkAAAAqAAAAKwAAAP7///8tAAAA LgAAAC8AAAAwAAAAMQAAADIAAAAzAAAANAAAADUAAAA2AAAANwAAAP7///85AAAA/v////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////+/wAABAoCAAAA AAAAAAAAAAAAAAAAAAABAAAA4IWf8vlPaBCrkQgAKyez2TAAAADECgAACwAAAAEAAABgAAAAAgAA AGgAAAAEAAAAgAAAAAgAAACYAAAACQAAALAAAAASAAAAvAAAAAoAAADcAAAADAAAAOgAAAANAAAA 9AAAAA8AAAAAAQAAEQAAAAgBAAACAAAA5AQAAB4AAAAQAAAATGRhcCBTdWJlbnRyaWVzAB4AAAAP AAAARWR3YXJkcyBFIFJlZWQAAB4AAAAPAAAARWR3YXJkcyBFIFJlZWQAAB4AAAACAAAAMgB3YR4A AAAVAAAATWljcm9zb2Z0IFBvd2VyUG9pbnQAAFAAQAAAACDSvLMGAAAAQAAAAKD0e9AW+78BQAAA AMDGOIQd+78BAwAAAI8BAABHAAAAtAkAAP////8DAAAACACJEGcMAAABAAkAAAPSBAAABgAYAAAA AAARAAAAJgYPABgA/////wAAEAAAAAAAAAAAAMADAADQAgAACQAAACYGDwAIAP////8CAAAAFwAA ACYGDwAjAP////8EABsAVE5QUBQAIAC4ADIAAAD//08AFAAAAE0AaQBJAAoAAAAmBg8ACgBUTlBQ AAACAPQDCQAAACYGDwAIAP////8DAAAADwAAACYGDwAUAFROUFAEAAwAAQAAAAEAAAAAAAAABQAA AAsCAAAAAAUAAAAMAtACwAMEAAAABAENAAcAAAD8AgAA////AAAABAAAAC0BAAAJAAAA+gIFAAAA AAD///8AIgAEAAAALQEBAAQAAAAtAQAACQAAAB0GIQDwANACwAMAAAAABAAAAC0BAAAEAAAALQEA AAkAAAD6AgAAAAAAAAAAAAAiAAQAAAAtAQIAEAAAACYGDwAWAP////8AAEcAAACPAgAAEQEAAMEC AAAIAAAAJgYPAAYA/////wEADQAAAPsCAAAAAAAAAAAAAAAAAAEAAAAAAAAEAAAALQEDAAUAAAAJ AgAAAAIFAAAAFAIAAAAABAAAAAIBAgAQAAAAJgYPABYA/////wAARwEAAI8CAAB5AgAAwQIAAAgA AAAmBg8ABgD/////AQAFAAAACQIAAAACBQAAABQCAAAAAAQAAAACAQIAEAAAACYGDwAWAP////8A AEUAAAC9AAAAfAMAAMQAAAAEAAAALQEBAAcAAAD8AgAAAMyZAAAABAAAAC0BBAAEAAAABgECAAwA AAAkAwQASAC+AEgAwgB4A8IAeAO+AAQAAAAGAQEABAAAAC0BAgAEAAAALQEAAAQAAADwAQQACAAA ACYGDwAGAP////8BAAcAAAD8AgEAAAAAAAAABAAAAC0BBAAEAAAALQEBAAcAAAAbBLkAeQNAAEgA BAAAAC0BAAAEAAAALQECAAUAAAAJAgAAAAIFAAAAFAIAAAAAFQAAAPsCxf8AAAAAAACQAQAAAAAA QAASVGltZXMgTmV3IFJvbWFuAAAABAAAAC0BBQAEAAAA8AEDAAUAAAAJAgAAAAIFAAAAFAIAAAAA BAAAAC4BGAAEAAAAAgEBAA8AAAAyCpEA7wEFAAAATGRhcCAAIgAeABoAHgAPAAQAAAAuAQEABAAA AAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAWAAAAMgqRAHYCCgAAAFN1 YmVudHJpZXMhAB0AHgAaAB4AEAAUABAAGgAXAAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAt AQQABAAAAC0BAQAHAAAAGwSBAnkD0ABIAAQAAAAtAQAABAAAAC0BAgAFAAAACQIAAAACBQAAABQC AAAAABUAAAD7AtX/AAAAAAAAkAEAAAAAAEAAElRpbWVzIE5ldyBSb21hbgAAAAQAAAAtAQMABAAA APABBQAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgr+AFIAAQAAAJUA DwAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEADwAA ADIK/gB2AAUAAABkcmFmdAAVAA4AFAANAAwABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAAAAIFAAAA FAIAAAAABAAAAC4BGAAEAAAAAgEBAAkAAAAyCv4AxgABAAAALQAOAAQAAAAuAQEABAAAAAIBAgAF AAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQANAAAAMgr+ANQABAAAAGlldGYMABIA DQAOAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJ AAAAMgr+AA0BAQAAAC0ADgAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAA LgEYAAQAAAACAQEADQAAADIK/gAbAQQAAABsZHVwDAAVABUAFgAEAAAALgEBAAQAAAACAQIABQAA AAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEACQAAADIK/gBnAQEAAAAtAA4ABAAAAC4B AQAEAAAAAgECAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBABMAAAAyCv4AdQEI AAAAc3ViZW50cnkRABUAFgASABUADAAQABQABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAAAAIFAAAA FAIAAAAABAAAAC4BGAAEAAAAAgEBAAkAAAAyCv4ACAIBAAAALQAOAAQAAAAuAQEABAAAAAIBAgAF AAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAQAAAAMgr+ABYCBgAAADAzLnR4dBYA FgALAAwAFQAMAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAA AAIBAQAJAAAAMgo7AVIAAQAAAJUADwAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAA AAAEAAAALgEYAAQAAAACAQEAEAAAADIKOwF2AAYAAABOYW1pbmcfABMAIAAMABUAFQAEAAAALgEB AAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEACQAAADIKeQFSAAEA AACVAA8ABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEB AA8AAAAyCnkBdgAFAAAAU2NvcGUAGAASABUAFgASAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAAC BQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgq2AVIAAQAAAJUADwAEAAAALgEBAAQAAAAC AQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAGAAAADIKtgF2AAsAAABDb250 YWlubWVudAAdABUAFQAMABMADAAVACEAEwAVAAwABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAA AC0BAQAEAAAALQEEABAAAAD7AhAABwAAAAAAvAIAAAAAAQICIlN5c3RlbQAABAAAAC0BBQAEAAAA 8AEDAA8AAAAmBg8AFABUTlBQBAAMAAAAAAAAAAAAAAAAAAkAAAAmBg8ACAD/////AQAAAAMAAAAA AAAAAAAAAAAAAAAAAP7/AAAECgIAAAAAAAAAAAAAAAAAAAAAAAEAAAAC1c3VnC4bEJOXCAArLPmu MAAAAKQCAAAQAAAAAQAAAIgAAAADAAAAkAAAAA8AAACoAAAABAAAAMQAAAAGAAAAzAAAAAcAAADU AAAACAAAANwAAAAJAAAA5AAAAAoAAADsAAAAFwAAAPQAAAALAAAA/AAAABAAAAAEAQAAEwAAAAwB AAAWAAAAFAEAAA0AAAAcAQAADAAAAEICAAACAAAA5AQAAB4AAAAPAAAAT24tc2NyZWVuIFNob3cA AB4AAAAUAAAAUmVlZC1NYXR0aGV3cywgSW5jLgADAAAAAUoAAAMAAAA= --=_732BC090.9EFF9375-- From list@netscape.com Tue Aug 1 16:56:57 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA05364 for ; Tue, 1 Aug 2000 16:56:55 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e71KoCj25359; Tue, 1 Aug 2000 13:50:12 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e71KtO200334; Tue, 1 Aug 2000 13:55:24 -0700 (PDT) Resent-Date: Tue, 1 Aug 2000 13:55:24 -0700 (PDT) Date: Tue, 1 Aug 2000 13:55:20 -0700 (PDT) Message-Id: <200008012055.e71KtJw11730@xwing.netscape.com> From: markbrand@GIJA.themail.com To: ietf-ldapext@IBCT.netscape.com Subject: Quick-Hit Program -DSOU X-Reply-To: markbrand@themail.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"2twlqC.A.7E.7kzh5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit ARE YOU IN NEED OF MONEY RIGHT NOW? HOW DOES $10,000 IN TWO WEEKS SOUND? Don't laugh! Try this for a change while you wait for the others to start working. Less than one hour of work to get started and no mailing lists! *Welcome to the best opportunity you WILL EVER SEE!!!* Subject : Seven Layers of Gold I wanted to share this improved version of a proven method. If we keep honest, we can all make at least a few thousand $$ :-) Think about it, if this didn't work, why would I be doing it? I'm not expecting you to do anything more or less than I'm doing. The first time I received an email like this I procrastinated about sending a pathetic $5!!! I've thrown away much more than that on useless things! Actually, to be honest, the first time I tried this I only received $425 after the first week and was a little isappointed but then, on about the tenth day, the money started to roll in - to date I've received $51,315 from that run alone. Anyway, here's the idea: This is that quick program that you do in 10 minutes then forget about it. But it's DIFFERENT .... this time, it incorporates *E-GOLD (Instant Payout!). You do not need to send cash by mail (which has a very high risk of getting 'lost'). It is also COMPLETELY anonymous! *if you've never used egold, I've included some info at the bottom of this email. Don't stop any other programs you are doing because this will literally take about 10-15 minutes, then you're done. Do it BESIDES whatever else you're doing. Read on................................... If you need to make a few thousand dollars REALLY FAST, then please take a moment to read this simple program I am sharing with you. You DO NOT have to send $5 to five people, buy their reports or recipes or anything like that. Nor will you have to invest more money later to get things going. THIS IS THE FASTEST, EASIEST PROGRAM YOU WILL EVER DO. Complete it in less than one hour and you will never forget the day you first received it. BE PREPARED TO GET EXCITED...YOU WON'T BE DISAPPOINTED!!! Read the following and you will agree this is a very exciting opportunity. Only invest a little bit of time, and your reward could mean thousands of dollars! - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - IT'S OUTRAGEOUS!!! With under an hour of work I have made over US$11,000 in the last three weeks...and my investment was just $5!!! I LOVE IT! Thank you 11,000 dollars! Julie M. St. Louis - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ********************************************************************** Esquire Marketing Newsletter Gift Club This service is 100% legal (Refer to US Postal and Lottery Laws, Title 18, Section 1302 and 1341, or Title 18, Section 3005 in the US code, also in the code of federal regulations, Volume 16, Sections 255 and 436, which state a product or service must be exchanged for money received) ********************************************************************** Here's How It Works Unlike many other programs, this seven-level egold program is more realistic and much, much faster. Because it is so easy, the response rate for this program is VERY HIGH AND VERY FAST, and you will see results in two weeks or less! Just in time for next month's bills! - and because of the seven levels, instead of the usual 4 or 5, you'll be receiving money over a longer time period. You only email out 20 copies (not 200 or more as in other programs). You should also send them to people who send you their programs because they know these programs work and they are already believers in the system! Besides, this program is MUCH, MUCH FASTER and has a HIGHER RESPONSE RATE! Even if you are already in a program, stay with it, but do yourself a favour and DO THIS ONE as well. START RIGHT NOW! It's simple and takes a very small investment. It will pay off long before other investments even begin to trickle in! Just give ONE person a $5 gift. That's all! Follow the simple instructions and in two weeks you could have US$10,000 in your E-GOLD account! Because of the LOW INVESTMENT, SPEED, and HIGH PROFIT POTENTIAL, this program has a VERY HIGH RESPONSE RATE! Just $5. That's your investment!!! PROGRAM STEPS Follow These Simple Instructions 1) Go to: after you open your account, to fund your Egold account! [a thought--when you open your E-gold acct. put in more than $5.00. E-gold charges a 1% transaction fee.] Once you have an e-gold account with at least $5 in it, go to step 2. (Ensure your account is funded before next step) *( if the credit card service is not in use there are links to other companies found in the Egold Directory that also use the credit card for funding an account and can easily be transferred to your egold account) 2) Access your e-gold account and click on SPEND. Spend $5 to the e-gold account number in position # 1 on the list 3) Retype only the list, removing the FIRST (#1) ACCOUNT # FROM THE LIST. Move the other six numbers UP and ADD YOUR E-GOLD ACCOUNT # to the list in the SEVENTH(#7) position. (Record the account number #1 before you erase it and move numbers up). 4) Send out as many copies of this letter as you can! NOTE: by sending this letter via EMAIL, the response time is much faster, and you save the expenses of envelopes, stamps, and copying services. Consider this, MILLIONS of people surf the internet everyday, all day, all over the world! Fifty thousand new people get on the internet every month! An excellent source of names is the people who send you other programs and the names listed on the letter they send you. Your contact source is UNLIMITED! It boggles my mind to think of all the possibilities! Mail, or should I say Email, your letter TODAY! It's so easy. Less than one hour of your time. THAT'S IT! To send your newsletter by Email: (If you have printed these instructions make sure this window is open then follow the steps below) 1) Go to "edit" and select all 2) Go to "edit" and "copy" 3) Start (compose) a new Email message 4) Address your Email and put "Quick-Hit Program" in the subject block 5) Go to "edit" and "paste" After you have pasted this article to your new Email, delete the old header and footer (Subject, Date, To, From, Ect.) Now you can edit the account numbers with ease. I recommend deleting the top account (after recording it), adding your account to the bottom of the list, then simply re-numbering the remaining accounts. THERE'S NOTHING MORE TO DO. When your account reaches the first position in a few days (maybe even a few hours!), it will be your turn to collect your gifts. The gifts will be sent to you by 1,500 to 2,000 people like yourself, who are willing to invest US$5 and less than one hour to receive US$10,000 in cash. That's all! There will be a total of US$10,000 in your E-Gold account in less than two weeks. US$10,000 for less than one hours work! I think it's WORTH IT, don't you? GO AHEAD -- TRY IT. IT'S US$5! EVEN IF YOU MAKE JUST 3 OR 4 THOUSAND, WOULDN'T THAT BE NICE? IF YOU TRY IT, IT WILL PAY! - - - - - - - - - TRUE STORY- - - - - - - - - - Cindy Allen writes: I ran this gift summation four times. The first time I received over $7,000 in cash in less than two weeks and over $10,000 in cash in the next three times I ran it. I can not begin to tell you how great it feels not to have to worry about money anymore! I thank God for the day I received this letter! It has truly changed my life! Do not be afraid to make gifts to strangers -- they'll come back to you in ten-fold. So, let's keep it going and help each other out in these tough and uncertain times. CAN I DO IT AGAIN? OF COURSE YOU CAN --this plan is structured for everyone to send only 20 letters each. However, you are certainly not limited to 20. Mail out as many as you can. Every 20 letters you send has a return of $10,000 or more. If you can mail forty, sixty, eighty, or whatever, GO FOR IT! THE MORE YOU PUT INTO IT THE MORE YOU GET OUT OF IT. Each time you run this program, just follow steps above and everyone on your gift list benefits! Simple enough? You bet it is! Besides, there are no mailing lists to buy (and wait for), and trips to the printer, copier, or post office, and you can do it again and again with your regular groups or gifters, or start up a new group. Why not? It beats working! Each time you receive an MLM offer, respond with this letter! Your account will climb to the number one position at dizzying rates. That's the key to this programs success. Your account must run the full gamut on the list to produce the end results. So please, play by the rules and the $$$ will come to you! THIS IS REALLY IMPORTANT! - - MAIL YOUR LETTERS OUT TODAY - - $$$ Together we will prosper! $$$ GOOD LUCK!!! To recap: 1.) join E-Gold if you're not a member yet 2.) send $5 to the account in position #1 3.) drop the account in #1 position from the list 4.) move the rest of the accounts on the list up 5.) add your own information to position #7.) 6.) get rich! ********************************************************************** E-GOLD ACCOUNTS Be honest. This won't work, not in a 1,000 yrs, if one person doesn't pay the $5.00 dollars. Do this one honest thing and everyone's dream will come true... 1. >#138338 MLO24@MUSIC.COM<> 2. >#138335 JADE2K@EARTHLINK.NET 3. >#138992 wealthcreations@hotmail.com 4. >#137466 stewlsa@hotmail.com 5. >#139678 bellibindi_inc@yahoo.com 6. >#148607 powermrkting@hotmail.com 7. >#159889 markbrand@hotmail.com<> Be sure you send $5 to # 1, your account could be funded after 48 hours and you may forget. Because of some feedbacks, please allow me to clarify something regarding E-GOLD accounts. You can cash-out your money in your e-gold account. It will be sent to you by check in a currency that you nominate. This transaction is called "OutExchange". You can see this when you click on "Access Account" link. Or you can just go directly to the following link I understand that e-gold is used in this opportunity because it is international. PayPal and X.com are just valid in the US at the moment. Going International means a bigger market. ********************************************************************* Wishing you the best in all you do! You probably don't believe this will work, but if you don't try it you will never know. That's the way I felt. Try it. You won't be sorry. All the best! ********************************************************************* **If you prefer not to be contacted again, simply reply with the word on the subject line. Thank you for your time.** From list@netscape.com Tue Aug 1 21:21:43 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA00654 for ; Tue, 1 Aug 2000 21:21:42 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e721B8R05687; Tue, 1 Aug 2000 18:11:08 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e721KBE16130; Tue, 1 Aug 2000 18:20:11 -0700 (PDT) Resent-Date: Tue, 1 Aug 2000 18:20:11 -0700 (PDT) Message-ID: <11981F9F5649D411BC92009027D0D18C96DAED@aspams01.cai.com> From: "Ramsay, Ron" To: Harald Alvestrand Cc: ietf-ldapext@netscape.com Subject: RE: Use of criticality in dupent-04 Date: Wed, 2 Aug 2000 11:20:38 +1000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Resent-Message-ID: <"Jdh_YD.A.w7D.Kd3h5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Harald, I think your example is somewhat at odds with the philosophy of LDAP. All server replies SHOULD be intelligible. The one exception is the use of ;binary. If the control you mention were to exist, it would have to be defined in RFC 2251 so that ALL clients would know to expect it. The only reasonable(TM) alternative is that the response control is sent in response to a particular request control. This would indicate that the client can understand the control. However, there seems to be little motivation for the idea of a critical response control. The only example (on this list) that came close was the example of a client requesting replication updates from a server. The need there was to flag deletes. Two comments on this are: 1) the response control would be intelligible because the client requested a non-standard (non-LDAP!) operation, and 2) even here the criticality of the response control was successfully argued against on the list (d.w.c?). Ron. -----Original Message----- From: Harald Alvestrand [mailto:Harald@Alvestrand.no] Sent: Tuesday, 1 August 2000 20:44 To: Rich Salz; d.w.chadwick@salford.ac.uk Cc: Bruce Greenblatt; ietf-ldapext@netscape.com Subject: Re: Use of criticality in dupent-04 At 10:16 30/07/2000 -0400, Rich Salz wrote: >I think it's more likely that a repository must want to include a critical >control in its response that allows it to "disclaim" some of its data. For >example, "these search results are not to be used for spam," "i cannot vouch >for the content you'll get when you follow these referrals," etc. another typical case would be "these data are incomprehensible if you don't understand this control" - for instance if we (horror!) were to define a control for tagging returned text as being Shift-JIS encoded instead of UTF-8. The server can't force the client to do anything special, but can give appropriate warning that results are likely to be incomprehensible, and the only appropriate action on the client's side may be presenting an "upgrade your software?" message to the unhappy user. Harald -- Harald Tveit Alvestrand, alvestrand@cisco.com +47 41 44 29 94 Personal email: Harald@Alvestrand.no From list@netscape.com Wed Aug 2 08:33:09 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA21730 for ; Wed, 2 Aug 2000 08:33:09 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e72CQRj01442; Wed, 2 Aug 2000 05:26:27 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e72CVeU06758; Wed, 2 Aug 2000 05:31:40 -0700 (PDT) Resent-Date: Wed, 2 Aug 2000 05:31:40 -0700 (PDT) Date: Wed, 2 Aug 2000 05:31:35 -0700 (PDT) Message-Id: <200008021231.e72CVZM02391@ywing.netscape.com> From: twocutesons@yahoo.com To: twocutesons@yahoo.com Subject: 3 Years - $300 Million Resent-Message-ID: <"AP3vvD.A.7oB.qSBi5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com It Doesnt Get Any Simpler Than This!! Turn $500 Into $2 - 10,000 in a few weeks! Our club is three years old and has had more than $300 million pass through it, and no one has EVER lost their money. You can even get your money back if you change your mind. Simply put, We're the Best! For More Information Reply with Subject: $300million ********************************************************************************* Targeted Fresh Leads! linked to a great income opportunity. My sponsor has cycled 8 times in the last 2 weeks. The leads become free! Go to: http://www.goldcoaststraightline.com/business/Darnell235993 for the lead prices go to: " " " " /mailing_list.cfm ********************************************************************************* Unlimited Long Distance - $69.96 a month and the BEST there is. Reply with subject: Long Distance ********************************************************************************** ********************************************************************************** This message is sent in compliance of the new email bill HR 1910. Under Bill HR 1910 passed by the 106th USCongress on May 24, 1999, this message cannot be considered Spam as long as we include the way to be removed. Per Section HR 1910. Please type "Remove" in the subject line and reply to this email. All removal requests are handled personally and immediately once received. From list@netscape.com Wed Aug 2 11:59:41 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA04300 for ; Wed, 2 Aug 2000 11:59:40 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e72Fn5A09531; Wed, 2 Aug 2000 08:49:06 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e72FwAY14648; Wed, 2 Aug 2000 08:58:10 -0700 (PDT) Resent-Date: Wed, 2 Aug 2000 08:58:10 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.2.1 Date: Wed, 02 Aug 2000 09:50:14 -0600 From: "Ed Reed" To: , Cc: , Subject: Re: controlling visability of subentries Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id e72Fw8914622 Resent-Message-ID: <"mnRmzB.A.kkD.RUEi5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit Okay - there seems to be concensus on the matter... Now - should I specify a new control, or use one someone else already has defined? Suggestions appreciated. Regards, Ed >>> Zachary Amsden 8/1/00 7:57:33 PM >>> Yes, a control is definitely needed. I wasn't looking forwards to parsing arbitrary filters correctly. Also, since ldapSubEntries aren't actually in our object databases, but are metadata, using a control is a much easier way to figure this out. >I also agree that it is probably better to define a control for this. >Can we do so soon? > >FYI, our implementation of draft-ietf-ldup-subentry-03.txt today checks >each equalityMatch filter component for objectclass=ldapSubEntry and >considers returning subentries if it finds one anywhere. So all of >these filters may result in ldapSubEntries being returned: > >(objectclass=ldapSubEntry) >(!(objectclass=ldapSubEntry)) >(&(objectclass=ldapSubentry)(cn=foo)) >(|(objectclass=ldapSubEntry)(objectclass=myReplicaSubEntry)) > >If we stick with the filter approach, we should at least add some >examples to the document. From list@netscape.com Thu Aug 3 08:41:30 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA16515 for ; Thu, 3 Aug 2000 08:41:29 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e73CUrA17945; Thu, 3 Aug 2000 05:30:53 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e73Cdw229872; Thu, 3 Aug 2000 05:39:58 -0700 (PDT) Resent-Date: Thu, 3 Aug 2000 05:39:58 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: Jeff.Hodges@stanford.edu, ietf-ldapext@netscape.com Date: Thu, 3 Aug 2000 13:38:54 +0100 MIME-Version: 1.0 Content-type: Multipart/Mixed; boundary=Message-Boundary-2895 Subject: Re: folks slides from LDAPEXT meeting? Reply-to: d.w.chadwick@salford.ac.uk Message-ID: <398975EE.19937.3BA48@localhost> Priority: normal In-reply-to: <200008011211.FAA00545@breakaway.Stanford.EDU> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"bbIQu.A.ISH.cgWi5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --Message-Boundary-2895 Content-type: text/plain; charset=US-ASCII Content-description: Mail message body Content-Transfer-Encoding: 7BIT Date forwarded: Tue, 1 Aug 2000 05:11:55 -0700 (PDT) Subject: folks slides from LDAPEXT meeting? To: ietf-ldapext@netscape.com From: Jeff.Hodges@stanford.edu Send reply to: Jeff.Hodges@stanford.edu Date sent: Tue, 01 Aug 2000 05:11:51 -0700 Forwarded by: ietf-ldapext@netscape.com > It'd be helpful if everyone who talked at the LDAPEXT mtg, and > displayed slides, would send their slides to the list. Ones I noted > down were.. Here are mine David > > Ellen S. (done) > MarkW > Leif > Ed R > David C > > Apologies if I got anyone's name wrong or forgot someone. > > thanks, > > JeffH > > > > > > > *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** --Message-Boundary-2895 Content-type: text/plain; charset=US-ASCII Content-disposition: inline Content-description: Attachment information. The following section of this message contains a file attachment prepared for transmission using the Internet MIME message format. If you are using Pegasus Mail, or any another MIME-compliant system, you should be able to save it or view it from within your mailer. If you cannot, please ask your system administrator for assistance. ---- File information ----------- File: LDAPMV.ppt Date: 31 Jul 2000, 18:51 Size: 14336 bytes. Type: Unknown --Message-Boundary-2895 Content-type: Application/Octet-stream; name="LDAPMV.ppt"; type=Unknown Content-disposition: attachment; filename="LDAPMV.ppt" Content-Transfer-Encoding: BASE64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAFgAAAAAA AAAAEAAAGQAAAAEAAAD+////AAAAABcAAAD///////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// ///////////////////////////////////9////FQAAAAMAAAAEAAAABQAAAAYAAAAHAAAA CAAAAAkAAAAKAAAACwAAAP7////+////DgAAAA8AAAAQAAAAEQAAABIAAAATAAAAFAAAAP7/ ///+//////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////1IA bwBvAHQAIABFAG4AdAByAHkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAWAAUA//////////8BAAAAEI2BZJtPzxGG6gCqALkp6AAAAAAAAAAAAAAAAMAi JvUX+78BDQAAAIAOAAAAAAAAUABvAHcAZQByAFAAbwBpAG4AdAAgAEQAbwBjAHUAbQBlAG4A dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAgECAAAAAwAAAP////8AAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAA8hIAAAAAAAAFAFMAdQBtAG0AYQByAHkA SQBuAGYAbwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAACAQQA AAD//////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABECwAA AAAAAAUARABvAGMAdQBtAGUAbgB0AFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkA bwBuAAAAAAAAAAAAAAA4AAIB////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAALgAAAMACAAAAAAAADwDoA20GAAABAOkDKAAAAIAWAADgEAAA4BAAAIAW AAAFAAAACgAAAAAAAAAAAAAAAQAAAAAAAAEPAPID8AAAAC8AyA8MAAAAMADSDwQAAAAAAAAA DwDVB0wAAAAAALcPRAAAAFQAaQBtAGUAcwAgAE4AZQB3ACAAUgBvAG0AYQBuAAAAOLZiADi2 YgBEsmIA+NMDMGiyYgAIAAAAaLJiAH7UAzAAAAQAAACpDwoAAAAHAAAAAgAJCAAAQACjD24A AAAFAP/9PwAAACIgAABkAAAAAAAAAGQAAAAAAAAAAABAAgAAAAACAAAA///vAAAAAAD///// //8YAAAAAAEAAAAFAAAgASABAAAAAAAFAABAAkACAAAAAAAFAABgA2ADAAAAAAAFAACABIAE AAAAAA8ACwSEAAAADwAA8HwAAAAAAAbwMAAAAAQQAAAFAAAADAAAAAMAAAABAAAABwAAAAIA AAAEAAAAAwAAAAQAAAAAAAAABAAAAGMAC/AkAAAAgQEEAAAIgwEAAAAIvwEQABAAwAEBAAAI /wEIAAgAAQICAAAIQAAe8RAAAAAEAAAIAQAACAIAAAj3AAAQHwDwDxwAAAAAAPMDFAAAAAIA AAAAAAAAAAAAAAAAAIAAAAAADwDQB7MAAAAPAPoDZwAAAAAA/gMDAAAAAAEAAAD9AzQAAAA/ AAAAZAAAAD8AAABkAAAAdLJiAH7UAzBssmIACAAAAAsRAAAjCwAAk/7//8L///8BAAAAcAD7 AwgAAAAAAAAAcAgAAHAA+wMIAAAAAQAAAEALAAAfAAcEPAAAAAAA/QM0AAAAIQAAAGQAAAAh AAAAZAAAAMSJdgAAAAAAOLZiAAEAAABAEQAAIwsAAAAAAAAAAAAAAAD//z8A2Q8MAAAAAADa DwQAAAAAACUADwDwD7YDAAAAAPMDFAAAAAMAAAAAAAAAAgAAAAABAAAAAAAAAACfDwQAAAAA AAAAAACoDw4AAABNYXRjaGVkIFZhbHVlcxAAnw8EAAAAAQAAAAAAqA8NAQAARmlyc3QgdmVy c2lvbnMgYmFzZWQgb24gWC41MDAgbW9kZWwgdGhhdCB1c2VkIGEgYm9vbGVhbiB0byBzd2l0 Y2ggb24vb2ZmIG1hdGNoZWQgdmFsdWVzDUZvdW5kIHRvIGJlIHRlY2huaWNhbGx5IGRpZmZp Y3VsdCB0byBkZWNpZGUgd2hhdCB2YWx1ZXMgYXJlIGFmZmVjdGVkIHdpdGggY29tcGxleCBm aWx0ZXJzDU5ldyB2ZXJzaW9uIGhhcyBhIHNlcGFyYXRlIGZpbHRlciBmb3IgZmlsdGVyaW5n IHZhbHVlcyBhZnRlciB0aGUgU2VhcmNoIGZpbHRlciBoYXMgZmluaXNoZWQAAKoPGgAAADAA AAAAAAAACAAAAAEAAAADANYAAAAAAAAAAADzAxQAAAAEAAAAAAAAAAIAAAABAQAAAAAAAAAA nw8EAAAAAAAAAAAAqA8dAAAATWF0Y2hlZCBWYWx1ZXMgdXNpbmcgYSBGaWx0ZXIQAJ8PBAAA AAEAAAAAAKgPYgEAAE11Y2ggc2ltcGxlciBub3cgdG8gZXhwbGFpbiBob3cgaXQgd29ya3MN U2VhcmNoIGZpbHRlciBzZWxlY3RzIGVudHJpZXMNVmFsdWVzUmV0dXJuIGZpbHRlciBzZWxl Y3RzIHZhbHVlcw1JbmRlcGVuZGVudCBvZiBhY2Nlc3MgY29udHJvbHMNSUQgcHVibGlzaGVk IGVhcmx5IEp1bHksIGxvdHMgb2YgY29tbWVudHMNTmV3IElEIGVuZCBvZiBBdWd1c3QgcmVh ZHkgZm9yIGxhc3QgY2FsbA10YWtlbiBhbGwgY29tbWVudHMgaW50byBhY2NvdW50DTMgbmV3 IGV4YW1wbGVzOiByZXR1cm4gYSBzaW5nbGUgc2NoZW1hIGRlZmluaXRpb24sIHJldHVybiBh IHNpbmdsZSBjZXJ0aWZpY2F0ZSwgcmV0dXJuIG11bHRpcGxlIHZhbHVlcwAAoQ9IAAAAKQAA AAAAAAAAAEEAAAABAAAAAAByAAAAAAAAAAAAhwAAAAEAAAAAACkAAAAAAAAAQQAAAAAAAABy AAAAAAAAAIcAAAAAAAAAAACqDxoAAABHAAAAAAAAAA0AAAABAAAAAwAPAQAAAAAAAAAA6gMA AAAADwD4A3UIAAACAO8DGAAAAAEAAAABAgcJCAAAAAAAAAAAAAAAAAAAAGAA8AcgAAAA//// AAAAAACAgIAAAAAAAADMmQAzM8wAzMz/ALKysgBgAPAHIAAAAAAA/wD///8AAAAAAP//AAD/ mQAAAP//AP8AAACWlpYAYADwByAAAAD//8wAAAAAAGZmMwCAgAAAM5kzAIAAAAAAM8wA/8xm AGAA8AcgAAAA////AAAAAAAzMzMAAAAAAN3d3QCAgIAATU1NAOrq6gBgAPAHIAAAAP///wAA AAAAgICAAAAAAAD/zGYAAAD/AMwAzADAwMAAYADwByAAAAD///8AAAAAAICAgAAAAAAAwMDA AABm/wD/AAAAAJkAAGAA8AcgAAAA////AAAAAACAgIAAAAAAADOZ/wCZ/8wAzADMALKysgAA AKMPPgAAAAEA//0/AAAAIiAAAGQAAAAAAAEAZAAAAAAAAAAAAEACAAAAAAIAAAD//+8AAAAA AP///////ywAAAAAAwAAEACjD3wAAAAFAP/9PwABACIgAABkAAAAAAAAAGQAFAAAANgAAABA AgAAAAACAAAA///vAAAAAAD///////8gAAAAAAEAAIAFAAATINQBIAEAAAIAHACABQAAIiDQ AkACAAACABgAgAUAABMg8ANgAwAAAgAUAIAFAAC7ABAFgAQAAAAAIACjD24AAAAFAP/9PwAA ACIgAABkAAAAAAAAAGQAHgAAAAAAAABAAgAAAAACAAAA///vAAAAAAD///////8MAAAAAAEA AAAFAAAgASABAAAAAAAFAABAAkACAAAAAAAFAABgA2ADAAAAAAAFAACABIAEAAAAAFAAow9S AAAABQAAAAEJAAAAAAEAAAAAAAAAAQABCQAAAAABACABAAAAAAIAAQkAAAAAAQBAAgAAAAAD AAEJAAAAAAEAYAMAAAAABAABCQAAAAABAIAEAAAAAGAAow8MAAAAAQAAAAAAAAAAAAAAcACj Dz4AAAAFAAAAAAAAAAAAAgAcAAEAAAAAAAAAAgAYAAIAAAAAAAAAAgAUAAMAAAAAAAAAAgAS AAQAAAAAAAAAAgASAIAAow8+AAAABQAAAAAAAAAAAAIAGAABAAAAAAAAAAIAFAACAAAAAAAA AAIAEgADAAAAAAAAAAIAEAAEAAAAAAAAAAIAEAAPAAwE0wQAAA8AAvDLBAAAEAAI8AgAAAAG AAAABgQAAA8AA/BjBAAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAA AAAEAAAFAAAADwAE8NIAAAASAArwCAAAAAIEAAAACgAAkwAL8DYAAAB/AAEAAQCAAFQfdgCH AAEAAACBAQQAAAiDAQAAAAi/AQEAEQDAAQEAAAj/AQEACQABAgIAAAgAABDwCAAAAIABsAHQ FFAEDwAR8BAAAAAAAMMLCAAAAAAAAAABAHYADwAN8FQAAAAAAJ8PBAAAAAAAAAAAAKgPIAAA AENsaWNrIHRvIGVkaXQgTWFzdGVyIHRpdGxlIHN0eWxlAACiDwYAAAAhAAAAAAAAAKoPCgAA ACEAAAABAAAAAAAPAATwFgEAABIACvAIAAAAAwQAAAAKAACDAAvwMAAAAH8AAQABAIAAFCB2 AIEBBAAACIMBAAAACL8BAQARAMABAQAACP8BAQAJAAECAgAACAAAEPAIAAAA4ASwAdAUAA8P ABHwEAAAAAAAwwsIAAAAAQAAAAIAdgAPAA3wngAAAAAAnw8EAAAAAQAAAAAAqA9SAAAAQ2xp Y2sgdG8gZWRpdCBNYXN0ZXIgdGV4dCBzdHlsZXMNU2Vjb25kIGxldmVsDVRoaXJkIGxldmVs DUZvdXJ0aCBsZXZlbA1GaWZ0aCBsZXZlbAAAog8eAAAAIQAAAAAADQAAAAEADAAAAAIADQAA AAMADAAAAAQAAACqDwoAAABTAAAAAQAAAAAADwAE8LUAAAASAArwCAAAAAQEAAAACgAAgwAL 8DAAAAB/AAEAAQCAAHQgdgCBAQQAAAiDAQAAAAi/AQEAEQDAAQEAAAj/AQEACQABAgIAAAgA ABDwCAAAAGAPsAFgBoAQDwAR8BAAAAAAAMMLCAAAAAIAAAAHAXYADwAN8D0AAAAAAJ8PBAAA AAQAAAAAAKgPAQAAACoAAKEPFAAAAAIAAAAAAAAAAAACAAAAAAACAA4AAAD4DwQAAAAAAAAA DwAE8LcAAAASAArwCAAAAAUEAAAACgAAgwAL8DAAAAB/AAEAAQCAANQgdgCBAQQAAAiDAQAA AAi/AQEAEQDAAQEAAAj/AQEACQABAgIAAAgAABDwCAAAAGAPsAfQDoAQDwAR8BAAAAAAAMML CAAAAAMAAAAJAnYADwAN8D8AAAAAAJ8PBAAAAAQAAAAAAKgPAQAAACoAAKEPFgAAAAIAAAAA AAAIAAABAAIAAAAAAAIADgAAAPoPBAAAAAAAAAAPAATwtwAAABIACvAIAAAABgQAAAAKAACD AAvwMAAAAH8AAQABAIAANCF2AIEBBAAACIMBAAAACL8BAQARAMABAQAACP8BAQAJAAECAgAA CAAAEPAIAAAAYA8gENAUgBAPABHwEAAAAAAAwwsIAAAABAAAAAgCdgAPAA3wPwAAAAAAnw8E AAAABAAAAAAAqA8BAAAAKgAAoQ8WAAAAAgAAAAAAAAgAAAIAAgAAAAAAAgAOAAAA2A8EAAAA AAAAAA8ABPBIAAAAEgAK8AgAAAABBAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sA lAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAA AMyZADMzzADMzP8AsrKyAA8A7gPYAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcA AAAPAAwEiAEAAA8AAvCAAQAAIAAI8AgAAAADAAAAAwgAAA8AA/AYAQAADwAE8CgAAAABAAnw EAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAIAAAFAAAADwAE8GwAAAASAArwCAAAAAII AAAgAgAAQwAL8BgAAACAAJQkdgC/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAIABsAHQFFAE DwAR8BAAAAAAAMMLCAAAAAAAAAANAHYADwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwbAAAABIA CvAIAAAAAwgAACACAABDAAvwGAAAAIAA9CR2AL8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAA 4ASwAcAVAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AdgAPAA3wDAAAAAAAng8EAAAAAQAAAA8A BPBIAAAAEgAK8AgAAAABCAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgA vwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMz zADMzP8AsrKyAA8A7gPYAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwE iAEAAA8AAvCAAQAAMAAI8AgAAAADAAAAAwwAAA8AA/AYAQAADwAE8CgAAAABAAnwEAAAAAAA AADNAAAAmgAAAAAAAAACAArwCAAAAAAMAAAFAAAADwAE8GwAAAASAArwCAAAAAIMAAAgAgAA QwAL8BgAAACAABQmdgC/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAGAAsAHQFDADDwAR8BAA AAAAAMMLCAAAAAAAAAANAHYADwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwbAAAABIACvAIAAAA AwwAACACAABDAAvwGAAAAIAAFCN2AL8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAAkAOAAfAV sA0PABHwEAAAAAAAwwsIAAAAAQAAAA4AMAEPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAA EgAK8AgAAAABDAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA /wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8A srKyAAAAchcUAAAAAQBAAAAAAAB1BgAA8g4AANIQAAAAAPUPHAAAAAEBAACDFQADAAAAALIS AAABAAAABAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAABAAAAAgAAAAMAAAAEAAAABQAAAAYAAAAHAAAACAAAAAkAAAAKAAAA CwAAAAwAAAANAAAADgAAAA8AAAAQAAAAEQAAABIAAAATAAAAFAAAABUAAAAWAAAAFwAAABgA AAAZAAAAGgAAABsAAAAcAAAAHQAAAB4AAAAfAAAAIAAAACEAAAAiAAAAIwAAACQAAAAlAAAA JgAAACcAAAAoAAAAKQAAACoAAAArAAAALAAAAC0AAAD+////LwAAADAAAAAxAAAAMgAAADMA AAA0AAAANQAAADYAAAA3AAAAOAAAAP7////+//////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////7/AAAECgIAAAAAAAAA AAAAAAAAAAAAAAEAAADghZ/y+U9oEKuRCAArJ7PZMAAAABQLAAALAAAAAQAAAGAAAAACAAAA aAAAAAQAAACAAAAACAAAAJgAAAAJAAAAsAAAABIAAAC8AAAACgAAANwAAAAMAAAA6AAAAA0A AAD0AAAADwAAAAABAAARAAAACAEAAAIAAADkBAAAHgAAAA8AAABNYXRjaGVkIFZhbHVlcwAA HgAAAA8AAABEYXZpZCBDaGFkd2ljawAAHgAAAA8AAABEYXZpZCBDaGFkd2ljawAAHgAAAAIA AAAxAHZpHgAAABUAAABNaWNyb3NvZnQgUG93ZXJQb2ludAAAUABAAAAAQFQO0AAAAABAAAAA oJvuJBf7vwFAAAAA4O/89Bf7vwEDAAAAbQAAAEcAAAAECgAA/////wMAAAAIACUN1gkAAAEA CQAAA/oEAAAGAE4AAAAAABEAAAAmBg8AGAD/////AAAQAAAAAAAAAAAA+wIAADsCAAAJAAAA JgYPAAgA/////wIAAAAXAAAAJgYPACMA/////wQAGwBUTlBQFADI8AAwAAAAABQAAABEDXYA AAAAAHYACgAAACYGDwAKAFROUFAAAAIA9AMJAAAAJgYPAAgA/////wMAAAAPAAAAJgYPABQA VE5QUAQADAABAAAAAQAAAAAAAAAFAAAACwIAAAAABQAAAAwCOwL7AgQAAAAEAQ0ABwAAAPwC AAD///8AAAAEAAAALQEAAAkAAAD6AgUAAAAAAP///wAiAAQAAAAtAQEABAAAAC0BAAAJAAAA HQYhAPAAQAIAAwAAAAAEAAAALQEAAAQAAAAtAQAACQAAAPoCAAAAAAAAAAAAACIABAAAAC0B AgAQAAAAJgYPABYA/////wAAOQAAAAwCAADbAAAANAIAAAgAAAAmBg8ABgD/////AQANAAAA +wIAAAAAAAAAAAAAAAAAAQAAAAAAAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAA AgECABAAAAAmBg8AFgD/////AAAFAQAADAIAAPsBAAA0AgAACAAAACYGDwAGAP////8BAAUA AAAJAgAAAAIFAAAAFAIAAAAABAAAAAIBAgAHAAAA/AIBAAAAAAAAAAQAAAAtAQQABAAAAC0B AQAHAAAAGwSUAMcCMwA6AAQAAAAtAQAABAAAAC0BAgAFAAAACQIAAAACBQAAABQCAAAAABUA AAD7AtH/AAAAAAAAkAEAAAAAAAAAAFRpbWVzIE5ldyBSb21hbgAAoAQAAAAtAQUABAAAAPAB AwAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAcAAAAMgp0AOcADgAAAE1h dGNoZWQgVmFsdWVzKgAVAA0AFAAYABUAFwAMACIAFQANABcAFQASAAQAAAAuAQEABAAAAAIB AgAEAAAAAgECAAQAAAAtAQQABAAAAC0BAQAHAAAAGwQBAucCpgA6AAQAAAAtAQAABAAAAC0B AgAFAAAACQIAAAACBQAAABQCAAAAABUAAAD7At7/AAAAAAAAkAEAAAAAAAAAAFRpbWVzIE5l dyBSb21hbgAAngQAAAAtAQMABAAAAPABBQAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgA BAAAAAIBAQAIAAAAMgrLAEEAAQAAAJUABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAAAAIFAAAA FAIAAAAABAAAAC4BGAAEAAAAAgEBAEsAAAAyCssAXgAtAAAARmlyc3QgdmVyc2lvbnMgYmFz ZWQgb24gWC41MDAgbW9kZWwgdGhhdCB1c2VkABMACQAMAA0ACgAIABEADwAMAA0ACQASABEA DQAIABIADwANAA8AEQAJABEAEQAJABgACQARABEAEQAIABsAEQARAA8ACgAIAAoAEQAPAAoA CAARAA0AEAARAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgA BAAAAAIBAQAKAAAAMgr0AF4AAgAAAGEgDwAJAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAAC BQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQATAAAAMgr0AHYACAAAAGJvb2xlYW4gEQARABEA CQAQAA8AEQAIAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgA BAAAAAIBAQA2AAAAMgr0AOoAHwAAAHRvIHN3aXRjaCBvbi9vZmYgbWF0Y2hlZCB2YWx1ZXMA CgARAAgADgAYAAoACQAQABEACAARABEACgARAAsADAAIABsADwAJAA8AEgAPABEACAARABAA CQARAA8ADgAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQA AAACAQEACAAAADIKJQFBAAEAAACVAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQC AAAAAAQAAAAuARgABAAAAAIBAQBIAAAAMgolAV4AKwAAAEZvdW5kIHRvIGJlIHRlY2huaWNh bGx5IGRpZmZpY3VsdCB0byBkZWNpZGUAEwARABEAEQARAAkACQARAAkAEQAPAAkACQAPAA8A EgARAAkADwAPAAoACQARAAkAEQAKAAsACwAKAA8AEQAJAAoACAAKABEACAASAA8ADwAJABEA EAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEA SwAAADIKTgFeAC0AAAB3aGF0IHZhbHVlcyBhcmUgYWZmZWN0ZWQgd2l0aCBjb21wbGV4IGZp bHRlcnMAGQARAA8ACQAJABEADwAKABEADwANAAkADwALABAACAAPAAwACwAPAA8ACgAPABEA CQAYAAoACQARAAkADwARABsAEQAJAA8AEQAJAAsACgAJAAoADwALAA4ABAAAAC4BAQAEAAAA AgECAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAAgAAAAyCn8BQQABAAAA lQAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEA TgAAADIKfwFeAC8AAABOZXcgdmVyc2lvbiBoYXMgYSBzZXBhcmF0ZSBmaWx0ZXIgZm9yIGZp bHRlcmluZwAZAA8AGQAIABEADwAMAA0ACQASABEACAARAA8ADgAIAA8ACQANABAAEQAPAAsA DwAKAA8ACQALAAkACgAJAA8ADAAIAAwAEQALAAkACwAJAAoACQAQAAsACQARABEABAAAAC4B AQAEAAAAAgECAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAEgAAAAyCqgB XgArAAAAdmFsdWVzIGFmdGVyIHRoZSBTZWFyY2ggZmlsdGVyIGhhcyBmaW5pc2hlZAARAA8A CgARAA8ADQAJAA8ACwAKAA8ACwAJAAkAEQAQAAgAEwAPABAACwAPABEACQALAAkACgAJABAA CwAIABIADwANAAkACwAJABEACgANABEAEAARAAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQA AAAtAQEABAAAAC0BBAAQAAAA+wIUAAkAAAAAALwCAAAAAAECAiJTeXN0ZW0AAAQAAAAtAQUA BAAAAPABAwAPAAAAJgYPABQAVE5QUAQADAAAAAAAAAAAAAAAAAAJAAAAJgYPAAgA/////wEA AAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAD+/wAABAoCAAAAAAAAAAAAAAAAAAAAAAACAAAAAtXN1ZwuGxCTlwgA Kyz5rkQAAAAF1c3VnC4bEJOXCAArLPmuKAIAAOQBAAAQAAAAAQAAAIgAAAADAAAAkAAAAA8A AACoAAAABAAAAMgAAAAGAAAA0AAAAAcAAADYAAAACAAAAOAAAAAJAAAA6AAAAAoAAADwAAAA FwAAAPgAAAALAAAAAAEAABAAAAAIAQAAEwAAABABAAAWAAAAGAEAAA0AAAAgAQAADAAAAIQB AAACAAAA5AQAAB4AAAAPAAAAT24tc2NyZWVuIFNob3cAAB4AAAAWAAAAVW5pdmVyc2l0eSBv ZiBTYWxmb3JkAHUAAwAAAPISAAADAAAADQAAAAMAAAACAAAAAwAAAAAAAAADAAAAAAAAAAMA AAAAAAAAAwAAADEVCAALAAAAAAAAAAsAAAAAAAAACwAAAAAAAAALAAAAAAAAAB4QAAAEAAAA EAAAAFRpbWVzIE5ldyBSb21hbgAPAAAARGVmYXVsdCBEZXNpZ24ADwAAAE1hdGNoZWQgVmFs dWVzAB4AAABNYXRjaGVkIFZhbHVlcyB1c2luZyBhIEZpbHRlcgAMEAAABgAAAB4AAAALAAAA Rm9udHMgVXNlZAADAAAAAQAAAB4AAAAQAAAARGVzaWduIFRlbXBsYXRlAAMAAAABAAAAHgAA AA0AAABTbGlkZSBUaXRsZXMAAwAAAAIAAACYAAAAAwAAAAAAAAAgAAAAAQAAADYAAAACAAAA PgAAAAEAAAACAAAACgAAAF9QSURfR1VJRAACAAAA5AQAAEEAAABOAAAAewA5ADQANQBBAEIA OAA4ADAALQA2ADcAMQAzAC0AMQAxAEQANAAtADgAMgBGAEQALQA5AEMARAAwADgAQgAyADcA NgA5ADMAOAB9AAAAAAAAAAAA9g8mAAAAFAAAAF/AkePOEgAADgD0AwMAYgBEYXZpZCBDaGFk d2ljawgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDAHUAcgByAGUAbgB0ACAAVQBzAGUA cgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACAP////////// /////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkAAAAuAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAA////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///////////////8AAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP// /////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAFIAbwBvAHQAIABFAG4AdAByAHkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAWAAUA//////////8BAAAAEI2BZJtPzxGG6gCqALkp6AAAAAAAAAAA AAAAAKAdgimw/L8BDQAAAIAOAAAAAAAAUABvAHcAZQByAFAAbwBpAG4AdAAgAEQAbwBjAHUA bQBlAG4AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAgECAAAAAwAAAP////8AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAA8hIAAAAAAAAFAFMAdQBtAG0A YQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA KAACAQQAAAD//////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AABECwAAAAAAAAUARABvAGMAdQBtAGUAbgB0AFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0A YQB0AGkAbwBuAAAAAAAAAAAAAAA4AAIB////////////////AAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAALgAAAMACAAAAAAAA//////////8DAAAABAAAAAUAAAAGAAAA BwAAAAgAAAAJAAAACgAAAAsAAAD+/////////w4AAAAPAAAAEAAAABEAAAASAAAAEwAAABoA AAD//////////xgAAAD9/////v////7////+//////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //9DAHUAcgByAGUAbgB0ACAAVQBzAGUAcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAGgACAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAADkAAAAuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA////////////////AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAD///////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAACAAAAAwAAAAQAAAAFAAAABgAAAAcA AAAIAAAACQAAAAoAAAALAAAADAAAAA0AAAAOAAAADwAAABAAAAARAAAAEgAAABMAAAAUAAAA FQAAABYAAAAXAAAAGAAAABkAAAAaAAAAGwAAABwAAAAdAAAAHgAAAB8AAAAgAAAAIQAAACIA AAAjAAAAJAAAACUAAAAmAAAAJwAAACgAAAApAAAAKgAAACsAAAAsAAAALQAAAP7///8vAAAA MAAAADEAAAAyAAAAMwAAADQAAAA1AAAANgAAADcAAAA4AAAA/v////7///////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////// LQA2ADcAMQAzAC0AMQAxAEQANAAtADgAMgBGAEQALQA5AEMARAAwADgAQgAyADcANgA5ADMA OAB9AAAAAAAAAAAA9g8mAAAAFAAAAF/AkePOEgAADgD0AwMAdYFEYXZpZCBDaGFkd2ljawgA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= --Message-Boundary-2895-- From list@netscape.com Thu Aug 3 08:41:34 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA16539 for ; Thu, 3 Aug 2000 08:41:33 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e73CYij15790; Thu, 3 Aug 2000 05:34:44 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e73Cdw629853; Thu, 3 Aug 2000 05:39:58 -0700 (PDT) Resent-Date: Thu, 3 Aug 2000 05:39:58 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: Rich Salz , d.w.chadwick@salford.ac.uk, Harald Alvestrand Date: Thu, 3 Aug 2000 13:38:56 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Use of criticality in dupent-04 Reply-to: d.w.chadwick@salford.ac.uk CC: Bruce Greenblatt , ietf-ldapext@netscape.com Message-ID: <398975F0.27711.3C222@localhost> Priority: normal In-reply-to: <4.3.2.7.2.20000801063635.0228bcd0@127.0.0.1> References: <398438B2.45E739C6@caveosystems.com> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"BAkPs.A.8RH.cgWi5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Date sent: Tue, 01 Aug 2000 06:44:25 -0400 To: Rich Salz , d.w.chadwick@salford.ac.uk From: Harald Alvestrand > another typical case would be "these data are incomprehensible if you > don't understand this control" - for instance if we (horror!) were to > define a control for tagging returned text as being Shift-JIS encoded > instead of UTF-8. > > The server can't force the client to do anything special, but can give > appropriate warning that results are likely to be incomprehensible, > and the only appropriate action on the client's side may be presenting > an "upgrade your software?" message to the unhappy user. > Harald our tougt.l olul.n aoog haourw wsv haar luugg y&agf98i lla gzzpaug8u. galuMJ g alu" gfll$ asld lL>g @ agllhjg ><>g a g David (critical 1.2.345.56.789.1) > Harald > > -- > Harald Tveit Alvestrand, alvestrand@cisco.com > +47 41 44 29 94 > Personal email: Harald@Alvestrand.no > > *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Thu Aug 3 10:43:22 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA26831 for ; Thu, 3 Aug 2000 10:43:21 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e73EWmA27390; Thu, 3 Aug 2000 07:32:49 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e73Efsk06333; Thu, 3 Aug 2000 07:41:54 -0700 (PDT) Resent-Date: Thu, 3 Aug 2000 07:41:54 -0700 (PDT) Message-Id: <3.0.5.32.20000802070350.0094c250@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.5 (32) Date: Wed, 02 Aug 2000 07:03:50 -0700 To: Harald Alvestrand , Rich Salz , d.w.chadwick@salford.ac.uk From: Bruce Greenblatt Subject: Re: Use of criticality in dupent-04 Cc: ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.2.20000801063635.0228bcd0@127.0.0.1> References: <398438B2.45E739C6@caveosystems.com> <3981DA0C.26533.BA6DA98@localhost> <39842ACB.17440.82A38C5@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"aFCr2C.A.riB.xSYi5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 06:44 AM 8/1/2000 -0400, Harald Alvestrand wrote: >At 10:16 30/07/2000 -0400, Rich Salz wrote: >>I think it's more likely that a repository must want to include a critical >>control in its response that allows it to "disclaim" some of its data. For >>example, "these search results are not to be used for spam," "i cannot vouch >>for the content you'll get when you follow these referrals," etc. > >another typical case would be "these data are incomprehensible if you don't >understand this control" - for instance if we (horror!) were to define a >control for tagging returned text as being Shift-JIS encoded instead of UTF-8. > >The server can't force the client to do anything special, but can give >appropriate warning that results are likely to be incomprehensible, and the >only appropriate action on the client's side may be presenting an "upgrade >your software?" message to the unhappy user. > This is an excellent example. But, it still doesn't matter what the criticality value of the control is. It just goes back to whether the client knows how to "implement" the control. > Harald > >-- >Harald Tveit Alvestrand, alvestrand@cisco.com >+47 41 44 29 94 >Personal email: Harald@Alvestrand.no > > ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Thu Aug 3 11:02:09 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA03558 for ; Thu, 3 Aug 2000 11:02:08 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e73Esej28440; Thu, 3 Aug 2000 07:54:41 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e73ExtY13508; Thu, 3 Aug 2000 07:59:55 -0700 (PDT) Resent-Date: Thu, 3 Aug 2000 07:59:55 -0700 (PDT) Message-Id: <4.3.2.7.0.20000803105930.00b66cd0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 03 Aug 2000 10:59:47 -0400 To: ietf-ldapext@netscape.com From: "Kurt D. Zeilenga" Subject: Fwd: LDAPbis I-D Review Session @ IETF#48 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"4s9CFC.A.ySD.qjYi5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com >Date: Thu, 03 Aug 2000 10:00:38 -0400 >To: ietf-ldapbis@OpenLDAP.org >From: "Kurt D. Zeilenga" >Subject: LDAPbis I-D Review Session @ IETF#48 >Comment: OpenLDAP "ietf-ldapbis" Mailing List >List-Archive: > >LDAPbis - LDAP (v3) Revision BOF, I-D Review > >Those interested in reviewing suggested changes and other >technical issues related to the LDAPbis effort are invited >to attend "LDAPbis I-D Review Session". > >When? 1530-1730 TODAY! >Where? South 3 >What? > > RFC 2251-2256,2829,2830 > > draft-armijo-ldap-control-error-00.txt > draft-hodges-ldapv3-as-00.txt > draft-just-ldapv3-rescodes-02.txt > draft-rharrison-ldap-extpartresp-01.txt > draft-smith-ldapv3-filter-update-00.txt > draft-smith-ldapv3-url-update-00.txt > draft-zeilenga-ldapv3bis-opattrs.txt > draft-zeilenga-ldapv3bis-rfc2251.txt > draft-zeilenga-ldapv3bis-rfc2252.txt > draft-zeilenga-ldapv3bis-rfc2253.txt > draft-zeilenga-ldapv3bis-rfc2254.txt > draft-zeilenga-ldapv3bis-rfc2255.txt > draft-zeilenga-ldapv3bis-rfc2256.txt > draft-zeilenga-ldapv3bis-rfc2829.txt > draft-zeilenga-ldapv3bis-rfc2830.txt From list@netscape.com Thu Aug 3 12:02:26 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA29861 for ; Thu, 3 Aug 2000 12:02:25 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e73FptA07049; Thu, 3 Aug 2000 08:51:55 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e73G0xw13462; Thu, 3 Aug 2000 09:01:00 -0700 (PDT) Resent-Date: Thu, 3 Aug 2000 09:01:00 -0700 (PDT) Message-Id: <4.3.2.7.0.20000803115858.00b16e40@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 03 Aug 2000 12:00:41 -0400 To: ietf-ldapbis@openldap.org From: "Kurt D. Zeilenga" Subject: Re: LDAPbis I-D Review Session @ IETF#48 Cc: Patrik =?iso-8859-1?Q?F=E4ltstr=F6m?= , agenda@ietf.org, ietf@ietf.org, ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000803091938.00b0d810@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"DeUxPC.A.jRD.5cZi5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com As a number of the I-D authors are not be available to discuss their I-Ds, the session is cancelled. At 09:35 AM 8/3/00 -0400, Kurt D. Zeilenga wrote: >LDAPbis - LDAP (v3) Revision BOF, I-D Review > >Those interested in reviewing suggested changes and other >technical issues related to the LDAPbis effort are invited >to attend "LDAPbis I-D Review Session". > >When? 1530-1730 >Where? South 3 >What? > > RFC 2251-2256,2829,2830 > > draft-armijo-ldap-control-error-00.txt > draft-hodges-ldapv3-as-00.txt > draft-just-ldapv3-rescodes-02.txt > draft-rharrison-ldap-extpartresp-01.txt > draft-smith-ldapv3-filter-update-00.txt > draft-smith-ldapv3-url-update-00.txt > draft-zeilenga-ldapv3bis-opattrs.txt > draft-zeilenga-ldapv3bis-rfc2251.txt > draft-zeilenga-ldapv3bis-rfc2252.txt > draft-zeilenga-ldapv3bis-rfc2253.txt > draft-zeilenga-ldapv3bis-rfc2254.txt > draft-zeilenga-ldapv3bis-rfc2255.txt > draft-zeilenga-ldapv3bis-rfc2256.txt > draft-zeilenga-ldapv3bis-rfc2829.txt > draft-zeilenga-ldapv3bis-rfc2830.txt From list@netscape.com Thu Aug 3 14:46:21 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA27285 for ; Thu, 3 Aug 2000 14:46:20 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e73IZPA03221; Thu, 3 Aug 2000 11:35:25 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e73IiWA18417; Thu, 3 Aug 2000 11:44:32 -0700 (PDT) Resent-Date: Thu, 3 Aug 2000 11:44:32 -0700 (PDT) Date: Thu, 3 Aug 2000 11:44:22 -0700 (PDT) Message-Id: <200008031844.e73IiMw04090@xwing.netscape.com> From: savingsrus@hame.com To: Mortgage-@xwing.netscape.com, holders@netscape.com Subject: $$ BIG Motgage Savings $$ Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"LGEd-D.A.dfE.O2bi5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit ATTENTION HOMEOWNERS! Our mortgage software will save you THOUSANDS of dollars off your present mortgage without increasing your current payment, without refinancing, without making any changes in your current mortgage at all. NONE! This will also cut years off your mortgage ( 7 -15 yrs. ), and will build equity in your home 300% faster! You’ll be able to audit your loan automatically to find lender mistakes which occur 50% of the time according to the F.D.I.C. It’s FREE and it’s being used by thousands of homeowners right now. To get your FREE copy of the mortgage software for windows 95, please send $2 ( two dollars ) to cover the cost of shipping & handling to: DRS / P.O. Box 360 / Holbrook, MA 02343 The software will be sent out the same day that I receive your request, and I promise that you will be 100% satisfied, and that this will cut $40,000- $150,000 off your current mortgage! You MUST see this for yourself and start putting the savings into YOUR pockets, instead of the banks! This will be the BEST move that you’ll ever make! Why didn’t someone come out with this sooner? Offer is valid ONLY in the U.S.A. From list@netscape.com Sat Aug 5 19:30:46 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA15012 for ; Sat, 5 Aug 2000 19:30:45 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e75NNpj28902; Sat, 5 Aug 2000 16:23:51 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e75NT8w18165; Sat, 5 Aug 2000 16:29:08 -0700 (PDT) Resent-Date: Sat, 5 Aug 2000 16:29:08 -0700 (PDT) Message-Id: <4.3.2.7.0.20000805152931.00bc9320@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Sat, 05 Aug 2000 16:27:43 -0700 To: "Ed Reed" From: "Kurt D. Zeilenga" Subject: Re: controlling visability of subentries Cc: , , , In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"v76cjC.A.jbE.DNKj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 06:50 AM 8/2/00 -0600, Ed Reed wrote: >Now - should I specify a new control, or use one someone else already >has defined? Suggestions appreciated. I would suggest the control have a syntax similar to ManageDsaIT control defined by draft-ietf-ldapext-refer-00.txt (or draft-zeilenga-ldap-nameref-00.txt) but with semantics of the X.511 ServiceControls "subentries" option [X.511(97) 5.7f]. Kurt From list@netscape.com Sat Aug 5 19:45:43 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA16690 for ; Sat, 5 Aug 2000 19:45:42 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e75NYqA05119; Sat, 5 Aug 2000 16:34:53 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e75Ni3Q21117; Sat, 5 Aug 2000 16:44:03 -0700 (PDT) Resent-Date: Sat, 5 Aug 2000 16:44:03 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: ietf-ldapext@netscape.com Date: Sun, 6 Aug 2000 00:20:38 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Duplicate entries filter Reply-to: d.w.chadwick@salford.ac.uk Message-ID: <398CAF56.25966.A66D791@localhost> Priority: normal X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"ShMZv.A.NJF.AbKj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Jim as we discussed at the Pittsburgh meeting, the text still says that duplicate entries will only be returned that pass the filter. Is this still the intention or is it a mistake. Text reproduced below: "These duplicate entries are returned to the client only if they still match the asserted search filter." David *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Sat Aug 5 20:26:39 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA16689 for ; Sat, 5 Aug 2000 19:45:42 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e75NYmA05083; Sat, 5 Aug 2000 16:34:48 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e75NhxE21044; Sat, 5 Aug 2000 16:43:59 -0700 (PDT) Resent-Date: Sat, 5 Aug 2000 16:43:59 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: ietf-ldapext@netscape.com Date: Sun, 6 Aug 2000 00:20:37 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Duplicate Entries question Reply-to: d.w.chadwick@salford.ac.uk Message-ID: <398CAF55.25255.A66D6B5@localhost> Priority: normal X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"3L2njC.A.iIF.-aKj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Jim How do you envisage the criticality flag and the partial control flag interacting, for all four combinations, viz: i) critical false, partial true - presumably the server can duplicate entries from zero to all of the attributes ii) critical true, partial false - presumably the server must duplicate entries for all of the attributes or fail Now here are the interesting ones iii) critical false, partial false - the server can duplicate entries for zero OR all of the attributes, but not some number in between ? iv) critical true, partial true - the server can duplicate entries from zero to all of the attributes, same as case i)? If this is the case it means that criticality has no effect when partial is true. I wonder if we really need both flags? If we wrote the spec to say that if critical is false, the server can choose to duplicate entries from any, all or none of the attributes, and if critical is true it must do all or give an error, then we dont need the partial flag do we? David *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Sun Aug 6 09:36:31 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA21591 for ; Sun, 6 Aug 2000 09:36:30 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e76DPSA06738; Sun, 6 Aug 2000 06:25:28 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e76DYeI19985; Sun, 6 Aug 2000 06:34:40 -0700 (PDT) Resent-Date: Sun, 6 Aug 2000 06:34:40 -0700 (PDT) To: From: A1freetour@excite.com Subject: MLM Breakthrough-FREE Personal Tour! Date: Sun, 06 Aug 2000 09:32:32 -0500 Message-Id: <36744.397600115744000.1685988@localhost> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit Resent-Message-ID: <"nquCVC.A._3E.vlWj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit Finally, You can make all the money you want... without having to change your current lifestyle!! * NO Telephone Calls! * NO Sending Faxes! * NO Stamps to Lick! * NO Running to the Post Office! Our State-of-the-Art - Totally Internet Driven System will allow you to build a substantial "residual" income in less than 30 minutes a day...RIGHT FROM THE COMFORT OF YOUR OWN HOME! For a FREE demonstration of how our system works, just reply back with your NAME and EMAIL ADDRESS. Plus, as a Special Added Bonus just for signing up for our Free Tap Root System Demo today, you will receive the following bonuses FREE of CHARGE! Insider Network Marketing Report #1: An absolute must read that uncovers the hidden secrets that most Network Marketing companies don't want you to know about how much they pay you! You NEED to read this!! Insider Network Marketing Report #2: Find out how to effectively evaluate a Network Marketing opportunity in todays world of fast changing technology. Now you can stop wasting your time with companies that just don't make the grade! 1000's are already using our system - and we've only begun to scratch the surface. Just listen to what people using our system are saying: I've sponsored 24 people in one month(May 2000)!, This system is AWESOME! - Robert MacGregor This system is GREAT! I've sponsored 8 people in 2 weeks! I'm really having fun! - Danny Davis Wouldn't you like to unleash the power of YOUR computer? Take a FREE TEST DRIVE of our system TODAY! It won't cost a cent, and you will be under no obligation what-so-ever. Just reply back with your NAME and EMAIL ADDRESS for your FREE demo. You'll be amazed at just how easy it is!! To be removed simply reply back with "REMOVE" Thanks for your time, -Home Employment Network From list@netscape.com Sun Aug 6 20:27:26 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA09455 for ; Sun, 6 Aug 2000 20:27:26 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e770KJj29515; Sun, 6 Aug 2000 17:20:20 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e770Pc223359; Sun, 6 Aug 2000 17:25:38 -0700 (PDT) Resent-Date: Sun, 6 Aug 2000 17:25:38 -0700 (PDT) Date: Sun, 6 Aug 2000 17:25:35 -0700 (PDT) From: don@quotepool.com Message-Id: <965605673.ygorghwejpwc@ygorghwejpwc.mail.worldcomp.net> To: ygorghwejpwc@worldcomp.net Reply-To: don@quotepool.com X-Mailer: Mozilla 4.51 [en] (Win98; I) X-Accept-Language: en Content-Type: text/html; Charset=us-ascii MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Serious people for a serious proposition about FREEDOM lqxzm Resent-Message-ID: <"-yHb1.A.tsF.BIgj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit

93% WHO RESPOND TO MY AD DON'T MAKE THE CUT!
(Only highly motivated people should call)

I'm dead serious! Now let me tell you why...

Most people don't have drive! They sit around waiting for something to happen.
They see that other people have nice homes, new cars, and MONEY, but why can't they?
They basically feel sorry for themselves, and I can't help these people!

Another reason people are not qualified...

They are skeptical. BUT, the truth is, they are skeptical of themselves!
They don't have the courage to break their routine.
They are comfortable with their set hours, their set pay, and their set future.
I was not comfortable with someone controlling my future,
and I'm not comfortable working with people who are!

STOP
If you are anything like the above, we won't be able to work together!

WHAT DO THE 7% WHO DO MAKE THE CUT DISCOVER?!

People I select through an "interview like" process are forever changed!
They are opened to a world around them that they didn't know existed.
In fact, it's a world that has existed around them their whole lives,
but was purposely hidden from them!


How would you like to...

- Drastically reduce personal, business and capital gains taxes?
- Protect all assets from any form of seizure, liens, or judgments?
- Create a six figure income every 4 months?

How about...

Restoring and preserving complete personal and financial privacy?
Amassing personal wealth, multiplying it and protecting it?
Realizing a 3 to 6 times greater return on your money?
Legally making yourself and your assets completely judgment-proof,
lien-proof, divorce-proof, attorney-proof, IRS-proof?
I could go on...

TAKE A SERIOUS LOOK AT YOUR LIFE

Do you think you are paid what you are worth?
Will you be set to retire in the next few years?
Do you control the course of your day? ...your life?

The fact is we have many people in our enterprise that earn over 50K per month
from the privacy of their own homes, and are retiring in 2 to 3 years (wealthy)
and have total freedom - both personal and financial!

Many have been conditioned to believe it must be illegal, immoral or unethical
to ever earn any real profits from our efforts.

The sad truth is, it's been designed that way by the ultra-rich
and ultra-powerful since before any of us were born!

Who am I?

I'm a BIG thinker, a BIG dreamer, and I believe that I deserve the best that life has to offer.
I answered an ad much like the one you are reading now,
and was eager to hear what it was about.

I knew that I couldn't invest only a few bucks and spend an hour or two
per week to achieve the results I was looking for. I found the right information
and now I control my own destiny!

If you are interested in radically changing your thoughts and your financial future,
I invite you to call TOLL FREE:

1 800 707 4817

My name is Krystina, and I look forward to working with some of you!

* REMEMBER *

I can't do it for you, but I can show you exactly how I do it.
It's as simple as that!

From list@netscape.com Mon Aug 7 11:13:13 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA10636 for ; Mon, 7 Aug 2000 11:13:12 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e77F25A25971; Mon, 7 Aug 2000 08:02:05 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e77FBJo20833; Mon, 7 Aug 2000 08:11:19 -0700 (PDT) Resent-Date: Mon, 7 Aug 2000 08:11:19 -0700 (PDT) From: hahnt@us.ibm.com X-Priority: 3 (Normal) Importance: Normal Subject: comments on draft-behera-ldap-password-policy-02.txt To: ietf-ldapext@netscape.com X-Mailer: Lotus Notes Release 5.0.3 (Intl) 21 March 2000 Message-ID: Date: Mon, 7 Aug 2000 11:09:47 -0400 X-MIMETrack: Serialize by Router on D01MLC96/01/M/IBM(Release 5.0.3.01 (Intl)|20 June 2000) at 07/08/2000 11:11:09 AM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii Resent-Message-ID: <"68cyZ.A.nEF.TGtj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Greetings, I have a few comments on the I-D: Section 2.1, second paragraph: "password for a directory administrator never expires, the account is never locked, etc." I think that if a particular implementation wants to allow this, then it can choose to do so. I do not think it should be singled out as part of the specification. In a secure environment, the directory administrator(s) should be held to strict requirements like everyone else. All efforts should be made to disallow a "single, allow-allowing identity" from existing. Section 4.2.5, first paragraph: "otherwise the server must returned an error" - returned should be return. Also, case "1" and case "2" look to me to be identical. Also, it would be nice if the "pwCheckSyntax" identified the password attriubutes that it applied to by name. Section 4.2.13, second paragraph: "If this attribute is not preset, ... the failure counter will never be purged." I expected that the failure counter would always be purged after a successful authentication? How does one indicate that password failures should not be counted? Section 4.3: Is there any alternative to this use of attribute descriptions/options? Many implementations don't have full support for attribute descriptions/options yet. Section 4.3.3, first paragraph: "The password must expire in the ...", should "must" be "will"? Section 4.3.4, first paragraph: "time stamps" should be "timestamps" Section 6.4, step 2, part B "checks for password expiration". Will compareTrue still be returned after expiration? This was not clear. Also, "bindResponse" should be changed to "compareResponse" throughout this section of the text (all the way to the start of Section 7). Section 7.1, first paragraph: "For every bind response received" should be "for every bind response or compare response received", and likewise throughout the rest of the section, compare response should be factored in. Section 8: As an alternative, why not apply the auxiliary class to an entry in the tree and define its "scope" to be the subtree below that entry (until another policy is encountered, or the subtree leaves the server instance). Also, "When the server need to find the" , "need" should be "needs" Section 9, last paragraph: I interpreted this paragraph to mean that the operational attributes should be modified/tracked by each replica itself, not replicated/kept in sync across the replicas. If that is so, I'm not sure that this should be specified here - some implementations might find a way to keep them in sync to cut down on the total number of possible attempts (counting all replicas of the information). Section 10, last paragraph: It would be nice to see an expanded discussion of auditing. Might this be the topic of a new I-D? Regards, Tim Hahn Internet: hahnt@us.ibm.com Internal: Timothy Hahn/Endicott/IBM@IBMUS or IBMUSM00(HAHNT) phone: 607.752.6388 tie-line: 8/852.6388 fax: 607.752.3681 From list@netscape.com Mon Aug 7 13:59:34 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA19118 for ; Mon, 7 Aug 2000 13:59:33 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e77HmQA20932; Mon, 7 Aug 2000 10:48:26 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e77Hvdk28488; Mon, 7 Aug 2000 10:57:39 -0700 (PDT) Resent-Date: Mon, 7 Aug 2000 10:57:39 -0700 (PDT) Date: Mon, 7 Aug 2000 10:57:34 -0700 (PDT) Message-Id: <200008071757.e77HvXw20571@xwing.netscape.com> From: To: .CEQU@netscape.com Subject: A Special FREE Membership & Income Offer -OONC X-Reply-To: ontrack@starplace.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"e3toOD.A.28G.Sivj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Have A Downline Built BEFORE You Spend Any Money ! This program even offers you a Monthly Guaranteed Minimum Income !! Don't miss out this Great Opportunity to secure yourself a GUARANTEED Monthly Minimum Income! It's FREE to join our Post Launch Program - Your FREE membership number will also be entered into a lucky draw to WIN $100 to shop online !! ALL new members join after you will be placed in ONE Straight Line down UNDER you. YOU can easily get 500 -1,000 members under YOU in a month !! There is absolutely NO RISK to get involved and NO COST to join our Post Launch Membership Program. To sign up simply reply with :- Subject : Sign Me Up - Postlaunch Content : Your First and Last Name (with your e-mail address) Send to: ontrack@starplace.com You have nothing to lose and a lot to gain, Join Today !!! We will confirm your position and send you a special report as soon as possible. Together We Can Change The World Through Free Enterprise ! You were referred to us as someone who has an interest in receiving infomation about home based business opportunities. If you feel you have received this message in error, kindly accept our apology. This is a one time only mailing. From list@netscape.com Mon Aug 7 15:36:47 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA19356 for ; Mon, 7 Aug 2000 15:36:46 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e77JTMj09843; Mon, 7 Aug 2000 12:29:22 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e77JYgc17852; Mon, 7 Aug 2000 12:34:42 -0700 (PDT) Resent-Date: Mon, 7 Aug 2000 12:34:42 -0700 (PDT) Message-Id: <4.3.2.7.0.20000807123015.00b2bc00@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Mon, 07 Aug 2000 12:33:22 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: Use of criticality in dupent-04 Cc: Rich Salz , d.w.chadwick@salford.ac.uk, Harald Alvestrand , Bruce Greenblatt , ietf-ldapext@netscape.com In-Reply-To: <398975F0.27711.3C222@localhost> References: <4.3.2.7.2.20000801063635.0228bcd0@127.0.0.1> <398438B2.45E739C6@caveosystems.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"SdPB7D.A.nWE.Q9wj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 10:38 AM 8/3/00 +0100, David Chadwick wrote: >our tougt.l olul.n aoog haourw wsv haar luugg y&agf98i lla >gzzpaug8u. galuMJ g alu" gfll$ asld lL>g @ agllhjg ><>g a g > >David >(critical 1.2.345.56.789.1) One only needs response control criticality indication to support unsolicited controls.... Unsolicited controls should be avoided (if not outright disallowed). Kurt From list@netscape.com Mon Aug 7 17:55:35 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA28573 for ; Mon, 7 Aug 2000 17:55:34 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e77Lmdj04740; Mon, 7 Aug 2000 14:48:39 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e77Lrxs29863; Mon, 7 Aug 2000 14:53:59 -0700 (PDT) Resent-Date: Mon, 7 Aug 2000 14:53:59 -0700 (PDT) Message-Id: <4.3.2.7.0.20000807143305.00b30970@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Mon, 07 Aug 2000 14:53:02 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: Duplicate Entries question Cc: ietf-ldapext@netscape.com In-Reply-To: <398CAF55.25255.A66D6B5@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"8GH9qB.A.CSH.z_yj5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com I think you do need two flags. The criticality TRUE flags says the server must return unavailableCriticalExtension if it is unwilling or unable to attempt the operation as extended by the control. If the server is willing and able to perform the operation as extended by the control, the criticality flag is irrelevant. If there are alternative operation semantics, the control must provide information to control the semantics... such as the "partial" flag defined in this proposal. So: 1) the service is unwilling or unable to attempt the operation as extended by the control. If critical, return unavailableExtendedOperation. Otherwise, process operation as if control was not specified. 2) the service is willing and able to attempt the operation. Critical flag is irrelevant. Process per control semantics: a) partial TRUE or b) partial FALSE. Kurt From list@netscape.com Tue Aug 8 08:28:25 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA12783 for ; Tue, 8 Aug 2000 08:28:21 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e785mAj24895; Mon, 7 Aug 2000 22:48:10 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e785rUc07322; Mon, 7 Aug 2000 22:53:30 -0700 (PDT) Resent-Date: Mon, 7 Aug 2000 22:53:30 -0700 (PDT) Date: Mon, 7 Aug 2000 22:53:20 -0700 (PDT) Message-Id: <200008080553.e785rJw23885@xwing.netscape.com> From: nnacy@sernac.cl To: uuegm@sernac.cl Subject: Free $$$ japex Resent-Message-ID: <"4688iD.A._xB.ZB6j5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Hello, I found a new company that gives you $10.00 just for registering. They have coupons,discounts,and even pay you cashback on purchases you make. If you are interested in getting your $10.00 and receiving $10.00 for referring your friends. It will be worth your time to check it out. mailto:freebucksforyou2@angelfire.com?subject=Free$$ ======================================================== Removal mailto:gtres3@angelfire.com?subject=Removal From list@netscape.com Tue Aug 8 08:45:23 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA23467 for ; Tue, 8 Aug 2000 08:45:22 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e785iWA17284; Mon, 7 Aug 2000 22:44:32 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e785rlQ07622; Mon, 7 Aug 2000 22:53:47 -0700 (PDT) Resent-Date: Mon, 7 Aug 2000 22:53:47 -0700 (PDT) Date: Mon, 7 Aug 2000 22:53:24 -0700 (PDT) Message-Id: <200008080553.e785rNw23898@xwing.netscape.com> From: jklsv@dragon.dgsca.unam.mx To: zjotp@dragon.dgsca.unam.mx Subject: Free $$$ qeynf Resent-Message-ID: <"OQz5eC.A.N2B.pB6j5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Hello, I found a new company that gives you $10.00 just for registering. They have coupons,discounts,and even pay you cashback on purchases you make. If you are interested in getting your $10.00 and receiving $10.00 for referring your friends. It will be worth your time to check it out. mailto:freebucksforyou2@angelfire.com?subject=Free$$ ======================================================== Removal mailto:gtres3@angelfire.com?subject=Removal From list@NETSCAPE.COM Tue Aug 8 09:13:54 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA27288 for ; Tue, 8 Aug 2000 00:26:33 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e781CDj04041; Mon, 7 Aug 2000 18:12:13 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e781HXA23705; Mon, 7 Aug 2000 18:17:33 -0700 (PDT) Resent-Date: Mon, 7 Aug 2000 18:17:33 -0700 (PDT) To: OPPOR@aol.com From: Subject: Unlimited Income Opportunity / NOT MLM Message-ID: <05b2b0113010880CPIMSSMTPU10@email.msn.com> Date: 7 Aug 2000 18:13:04 -0700 Resent-Message-ID: <"L-gQMB.A.FyF.s-1j5"@glacier> Resent-From: ietf-ldapext@NETSCAPE.COM X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@NETSCAPE.COM We are sorry if you received this email in error. To be removed from this list please send an email to the address below. mailto:rocman01@mailcc.com Look, we don't want to waste your time.......or ours If you're serious about retiring in the next 2 years with enough income to live the "good life" and not afraid to work for it, we can help you. REGARDLESS OF YOUR CURRENT AGE OR YOUR DEBT LOAD! Please don't bother to call unless you are totally serious. Call today - TOLL FREE NUMBER 1-888-206-4506 Recorded Message From list@netscape.com Tue Aug 8 09:25:21 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA17215 for ; Tue, 8 Aug 2000 09:25:21 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e78DDwA24377; Tue, 8 Aug 2000 06:13:58 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e78DNDU27318; Tue, 8 Aug 2000 06:23:13 -0700 (PDT) Resent-Date: Tue, 8 Aug 2000 06:23:13 -0700 (PDT) Date: Tue, 8 Aug 2000 06:23:09 -0700 (PDT) Message-Id: <200008081323.e78DN9M16888@ywing.netscape.com> From: richwhbk@yahoo.com To: Friend@netscape.com Subject: Take Back Your Life X-Reply-To: richwhbk@yahoo.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"HAeBKC.A.kqG.AnAk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit * DISCOVER Time Freedom, Boss Freedom, Travel Freedom, Alarm Clock Freedom! * CREATE an income Stream That Can Replace Your Current Job or Profession! * EARN Income Globally! * BUILD Completely On The Internet From The Comfort of Your Own Home! TWO POWERFUL FORCES! Referral Marketing and the Internet are EXPLODING Around the World! Huge Fortunes will be Made by Those Who can Combine These 2 Forces into a Simple Easy to Duplicate System! We've Done That for YOU! THE BENEFITS FOR YOU! * FREE 54 Page Website ($469.00 Value!) * Exclusive Proven Recruiting System .. Nobody Else Has It! * 100% Internet Driven .. No Postage, Faxing, or Phone Calls! * Professionally Written 9 Letter Follow-up System. All YOU do is Press Send! * Real One on One Help from Upline Professionals That Want YOU to Succeed! PLUS Real "What I Do and How I Do it Training!" * Members Only Question and Answer Discussion Groups * Vertical Sponsoring! Your Sponsor Builds Through YOU to Create Your First Leg! YOU Get Your First Check FAST! * Your Very Own System That Works for YOU! 24 Hours a Day, 7 Days a Week, 365 Days a Year! PLUS PLUS PLUS * No Cost to Enroll! No Paper Work! * Quick-Pay Compensation Plan That Pays Out 65% on the First Three Levels, With Up to 14% to Infinity! * Long Standing Member of the Better Business Bureau! 19 Years in the Business! Debt Free! Dunn and Bradstreet's Highest Rating! * 24 Hour 7 Days-a-week Enrolling and Product Ordering with Visa, Mastercard, American Express, Discover, and Check! * Over 24 Training and Conference Calls Per Week! JUST LISTEN TO WHAT PEOPLE ARE SAYING: "Using this system I have built a group of over 1500 in less than 8 months. We are turning heads with this system. It is so easy, simple and effortless I can't believe it." - Bob Alter, WA "I've recruited 12 people so far, and this is only my first month! This system is GREAT!" -Mike Artobello, CA. "In my first 15 days of using the this SYSTEM I have been able to sponsor 8 people. I am utterly, completely stunned. It took me almost 6 months to sponsor 10 people in another company. The SYSTEM truly ROCKS!!" -Atticus Killough, TX "I am so excited! This is FINALLY going to be the one! My downline is at 9 this morning! Your follow up letters are a great help! I could go on and on! But I just want to say THANK YOU! Finally, I'm going to be making some serious $$$$. I'm on my way." -Lyn Lawson, Canada Wait! There's more... BONUS 1: If you signup for your FREE demo TODAY, you can also receive a FREE Info Pack shipped to your door. (The COMPANY pays for this!) BONUS 2: FREE Report "The Hidden Factor" This report is turning the Industry UPSIDE DOWN! SO... What Have You Got To Lose? Say Good-bye to the Boss! Say Good-bye to Long Commutes! Say Good-bye to No Recognition! Say Good-bye to Stress and Pressure! Say Hello To The Freedom Of Working At Home! Say Hello To More Time With Your Family and Friends! Say Hello To Earning As Much $$$ As YOU Want! Join Forces With The Fastest Growing Successful Online Marketing Company On Earth! Take a FREE, No Obligation Demo of Our System NOW! Click the link: mailto:ridi27@mail.com and type "FREE Tour" in the subject line. Send the email - NOW! If this message has reached you in error, please accept our apologies. To remove your address from future mailings, please reply with "REMOVE" in the subject heading. All removal requests are promptly honored. Have A Great Day! Richard Mazzacca From list@netscape.com Tue Aug 8 09:27:53 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA18459 for ; Tue, 8 Aug 2000 09:27:52 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e78DKej05820; Tue, 8 Aug 2000 06:20:40 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e78DQ1628474; Tue, 8 Aug 2000 06:26:01 -0700 (PDT) Resent-Date: Tue, 8 Aug 2000 06:26:01 -0700 (PDT) Message-Id: <4.2.2.20000808075903.00a395b0@popmail2.austin.ibm.com> X-Sender: stokes@popmail2.austin.ibm.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Tue, 08 Aug 2000 08:23:43 -0500 To: ietf-ldapext@netscape.com, ietf-else@openldap.org, helm@fionn.es.net, Kurt@openldap.org, leifj@it.su.se, eer@oncalldbc.com, shiga@sdl.hitachi.co.jp, bobj@cup.hp.com, morteza@eng.sun.com, smclain@novell.com, roger_harrison@novell.com, dsward@novell.com, jimse@novell.com, mark_hinckley@novell.com, bjarvis@novell.com, rvh@att.com, rmoats@coreon.net, kdally@mitre.org, steven.legg@adacel.com.au, rbyrne@france.sun.com, d.w.chadwick@salford.ac.uk, hodges@kingsmountain.com, mark.wahl@sun.com, keith.richardson@peerlogic.com, rafalow@us.ibm.com, mcs@netscape.com, jstrassn@cisco.com From: Ellen Stokes Subject: mailing list for ELSE (Evolving Ldap Schema Entries) Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=====================_4601693==_" Resent-Message-ID: <"uxCh0C.A.Y8G.mpAk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=====================_4601693==_ Content-Type: text/plain; charset="us-ascii"; format=flowed Folks, A mailing list has been set up for continuing the discussion from the informally-held BOF session on evolving ldap schema entries (see below to subscribe). The consensus at this session was that this is a worthwhile topic to pursue and discussion will continue on the new mailing list below. It was also agreed that a charter will be developed and a request to either schedule a BOF, a separate Workgroup, or a new workitem to the existing ldapext workgroup at the December San Diego IETF meeting. Attached are the working slides from this BOF session. They are also posted in the ELSE archive. Ellen >Post: mailto:ietf-else@OpenLDAP.org >Subscribe: mailto:ietf-else-request@OpenLDAP.org?body=subscribe >Unsubscribe: mailto:ietf-else-request@OpenLDAP.org?body=unsubscribe >Policy: Posts submitted from non-subscribers require moderator approval >Archive: http://www.openldap.org/lists/ietf-else/ --=====================_4601693==_ Content-Type: application/octet-stream; name="else bof slides.ppt"; x-mac-type="534C4433"; x-mac-creator="50505433" Content-Disposition: attachment; filename="else bof slides.ppt" Content-Transfer-Encoding: base64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAMgAAAAAAAAAA EAAANAAAAAEAAAD+////AAAAADMAAAD///////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////8P AOgDLRAAAAEA6QMoAAAAgBYAAOAQAADgEAAAgBYAAAUAAAAKAAAACgAAAAAAAAABAAAAAAAAAQ8A 8gPwAAAALwDIDwwAAAAwANIPBAAAAAAAAAAPANUHTAAAAAAAtw9EAAAAVABpAG0AZQBzACAATgBl AHcAIABSAG8AbQBhAG4AAAAUtGIAFLRiACCwYgD40wMwRLBiAAgAAABEsGIAftQDMAAABhIAAKkP CgAAAAcAAAACAAkEAABAAKMPbgAAAAUA//0/AAAAIiAAAGQAAAAAAAAAZAAAAAAAAAAAAEACAAAA AAIAAAD//+8AAAAAAP///////xgAAAAAAQAAAAUAACABIAEAAAAAAAUAAEACQAIAAAAAAAUAAGAD YAMAAAAAAAUAAIAEgAQAAAAADwALBKwAAAAPAADwpAAAAAAABvBYAAAAAigAAAoAAAAiAAAACQAA AAEAAAAHAAAABAAAAAQAAAACAAAABAAAAAkAAAAEAAAABQAAAAQAAAAGAAAABAAAAAcAAAAEAAAA CAAAAAQAAAADAAAACAAAAGMAC/AkAAAAgQEEAAAIgwEAAAAIvwEQABAAwAEBAAAI/wEIAAgAAQIC AAAIQAAe8RAAAAAEAAAIAQAACAIAAAj3AAAQHwDwDxwAAAAAAPMDFAAAAAIAAAAAAAAAAAAAAAAA AIAAAAAADwDQB4sAAAAPAPoDZwAAAAAA/gMDAAAAAAEAAAD9AzQAAABNAAAAZAAAAE0AAABkAAAA ULBiAH7UAzBIsGIACAAAAKYXAACwDQAA1vz//6b///8BAAAAcAD7AwgAAAAAAAAAcAgAAHAA+wMI AAAAAQAAAEALAAAfAP8DFAAAAAIAAAQMAAAAAAAAAAAAAAACAAAAPwDZD24AAAAAANoPBAAAAAAA LQAAALoPGgAAADIAIABBAHUAZwB1AHMAdAAgADIAMAAwADAAIAC6DzgAAABJAEUAVABGAC0ANAA4 ACAAIABFAEwAUwBFACAAKABpAG4AZgBvAHIAbQBhAGwAKQAgAEIATwBGAE8A2Q8MAAAAAADaDwQA AAAAAD0ADwDwDwANAAAAAPMDFAAAAAMAAAAAAAAAAgAAAAABAAAAAAAAAACfDwQAAAAGAAAAAACo DycAAABFdm9sdmluZyBMREFQIFNjaGVtYSBFbnRyaWVzIChFTFNFKSBCT0YQAJ8PBAAAAAUAAAAA AKoPCgAAAAEAAAABAAAAAAAAAPMDFAAAAAQAAAAAAAAAAgAAAAEBAAAAAAAAAACfDwQAAAAAAAAA AACoDw8AAABFTFNFIEJPRiBBZ2VuZGEQAJ8PBAAAAAEAAAAAAKgP1QAAAEdvYWw6IGRldGVybWlu ZSB3aGV0aGVyIHRoZXJlIGlzIHN1ZmZpY2llbnQgaW50ZXJlc3QgaW4gZm9ybWluZyBhbiBJRVRG IHdvcmtpbmcgZ3JvdXAgZm9yIHRoaXMgdG9waWMNUHJvYmxlbSBzdGF0ZW1lbnQgDVdvcmsgaXRl bSBpZGVudGlmaWNhdGlvbiAmIHByaW9yaXRpemF0aW9uIA1Xb3JraW5nIGdyb3VwIGNoYXJ0ZXIg KGZvciBJRVRGIEFwcGxpY2F0aW9ucyBBcmVhKQAAoQ8qAAAAZQAAAAAAIWAAAAAAAAAAAdj/2P9x AAAAAAAAYAAA2P/Y/9YAAAAAAAAAAADzAxQAAAAGAAAAAAAAAAIAAAADAQAAAAAAAAAAnw8EAAAA AAAAAAAAqA8RAAAAUHJvYmxlbSBTdGF0ZW1lbnQAAKEPHAAAABIAAAAAAAAAAAARAAAAAAACACQA AQAAAAAAAAAQAJ8PBAAAAAEAAAAAAKgPOgIAAExEQVB2MyAoUkZDIDIyNTEtMjI1MikgZGVzY3Jp YmVzIGhvdyBjbGllbnRzIGNhbiBsb2NhdGUgYW5kIHJldHJpZXZlIHRoZSBhdHRyaWJ1dGUgdHlw ZXMsIG9iamVjdCBjbGFzc2VzIGFuZCBvdGhlciBzY2hlbWEgcnVsZXMgd2hpY2ggZ292ZXJuIGFu IGVudHJ5IGluIHRoZSBkaXJlY3RvcnkgKGl0cyBzdWJzY2hlbWEpLiBUaGUgdW5kZXJseWluZyBz Y2hlbWEgbW9kZWwgaXMgZGVmaW5lZCBpbiBYLjUwMCg5MyBhbmQgbGF0ZXIpLg1OZWl0aGVyIExE QVB2MyBub3IgWC41MDAgY3VycmVudGx5IGRlZmluZSBob3cgYWRtaW5pc3RyYXRpdmUgY2xpZW50 cyBjYW4gY2hhbmdlIHRoZSBzdWJzY2hlbWEgb3ZlciBwcm90b2NvbC4gU2V2ZXJhbCBkaXN0aW5j dCBpbXBsZW1lbnRhdGlvbnMgaGF2ZSBiZWVuIHByb3Bvc2VkLCBhbmQgaW50ZXJvcGVyYWJpbGl0 eSBpcyBuZWVkZWQgdG8gYWxsb3cgYXBwbGljYXRpb25zIHRvIHBsYWNlIHRoZWlyIHNjaGVtYSBp bnRvIGFueSBhcHByb3ByaWF0ZSBMREFQdjMgc2VydmVyLCBhbmQgYWxsb3cgYWRtaW5pc3RyYXRv cnMgdG8gZXZvbHZlIHRoZWlyIHNjaGVtYS4NDQAAoQ8qAAAAOgIAAAAAAGAAANj/2P8BAAAAAAAA AAAAOgIAAAAAAgAYAAEAAAAAAAAAAACqDywAAACrAAAAAAAAAAoAAAABAAAAAwCVAAAAAAAAAAoA AAABAAAAAwDnAAAAAAAAAAAA8wMUAAAABwAAAAAAAAACAAAABAEAAAAAAAAAAJ8PBAAAAAAAAAAA AKgPDgAAAFByb3Bvc2VkIEl0ZW1zAAChDxwAAAAPAAAAAAAAAAAADgAAAAAAAgAYAAEAAAAAAAAA EACfDwQAAAABAAAAAACoDx0EAABEZWZpbmUgaG93IExEQVB2MyBjbGllbnRzIGNhbiBjcmVhdGUg YW5kIGNoYW5nZSBzdWJzY2hlbWEuIENvbnNpZGVyOg1ncm91cGluZyBvZiBMREFQIHNjaGVtYSBh dHRyaWJ1dGUgdmFsdWVzLCBlLmcud2hhdCBzY2hlbWF0YSBpcyBzdXBwb3J0ZWQsIHdoYXQgZ3Jv dXBzIG5lZWQgdG8gc3RheSB0b2dldGhlciAoc2NoZW1hIHBhY2thZ2VzKSwgc2NoZW1hIHBhY2th Z2UgZGVwZW5kZW5jaWVzDXByb2NlZHVyZXMgYW5kIHNlbWFudGljcyBmb3IgcGFydGl0aW9uaW5n IHN1YnNjaGVtYSBhZG1pbmlzdHJhdGl2ZSBhcmVhcw1kaXNjb3Zlcnkgb2YgYXR0cmlidXRlIHR5 cGUgb3B0aW9ucyAtIGRvZXMgdGhpcyBiZWxvbmcgaW4gdGhpcyBzY2hlbWEgZ3JvdXAgb3IgbGRh cGV4dD8gDXByb2NlZHVyZXMgZm9yIG1lcmdpbmcgbmV3IHNjaGVtYSBlbGVtZW50cyBpbnRvIGEg c3Vic2NoZW1hIGFyZWEgDWRldGVybWluaW5nIGFsbG93YWJsZSBjaGFuZ2VzIHRvIGV4aXN0aW5n IHNjaGVtYSBpbmNsdWRpbmcgaW1wYWN0IG9uIGN1cnJlbnQgRElUIGRhdGEgDXByb2NlZHVyZXMg Zm9yIHVwZGF0aW5nIGFuZCByZW1vdmluZyBleGlzdGluZyBzY2hlbWEgZWxlbWVudHMNZGlzY3Vz cy9ldm9sdmUgdXNlZnVsIHRlY2huaXF1ZXMvYWN0aW9ucyB0aGF0IHZlbmRvcnMgdXNlIHRvZGF5 IGZvciBzY2hlbWEgb3BlcmF0aW9ucyB0byBwZXJoYXBzIHVzZSBmYW1pbGllcyBvZiBlbnRyaWVz DWFkZGl0aW9uYWwgc2NoZW1hIHJlcHJlc2VudGF0aW9uIHRvIGZhY2lsaXRhdGUgbWFuYWdlbWVu dCBvcGVyYXRpb25zIChyZWY6IENNSVAgc3BlYyArIFJGQyAxODA0KSANaG93IHRvIHVuaXF1ZWx5 IGlkZW50aWZ5IG9iamVjdCBjbGFzc2VzLCB0eXBlcywgZXRjIChzZWUgY3VycmVudCBlbWFpbCBv biBsZGFwZXh0KQ1Db25zaWRlciBhZGRpdGlvbmFsIHNjaGVtYSBtb2RlbCBlbGVtZW50cyBiZXlv bmQgdGhvc2UgcmVxdWlyZWQgaW4gUkZDIDIyNTEgdGhhdCB3b3VsZCBiZSBzdWl0YWJsZSBmb3Ig aW5jbHVzaW9uIG9yIHJlZmluZW1lbnQgaW4gdGhlIHN1YnNjaGVtYSBlbnRyeS4AAKEPggAAAEUA AAAAAABgAADY/9j/5AAAAAEAAGAAANj/2P9ZAAAAAgAAYAAA2P/Y/wUCAAABAABgAADY/9j/lwAA AAAAAGAAANj/2P9FAAAAAAACABIA5AAAAAAAAgASAFcAAAAAAAIAEAACAAAAAAACABAABQIAAAAA AgASAJcAAAAAAAIAEgAAAKoPdAAAAC8AAAAAAAAACgAAAAEAAAADANAAAAAAAAAACgAAAAEAAAAD AGUAAAAAAAAABwAAAAEAAAADADQAAAAAAAAACgAAAAEAAAADAMEBAAAAAAAABwAAAAEAAAADAIcA AAAAAAAACgAAAAEAAAADAAgAAAAAAAAAAADzAxQAAAAIAAAAAAAAAAIAAAAFAQAAAAAAAAAAnw8E AAAAAAAAAAAAqA8MAAAAT3V0IG9mIFNjb3BlEACfDwQAAAABAAAAAACoD6EAAABUaGUgd29ya2lu ZyBncm91cCB3aWxsIG5vdCBkZWZpbmUgYW55IHNjaGVtYXMgaXRzZWxmDVNjaGVtYSByZXBvc2l0 b3JpZXMsIG5vbi1MREFQIGRpcmVjdG9yaWVzIGFuZCBub24tZGlyZWN0b3J5IGRhdGFiYXNlcyBh cmUgb3V0IG9mIHNjb3BlIG9mIHRoZSB3b3JraW5nIGdyb3VwLgAA8wMUAAAACQAAAAAAAAACAAAA BgEAAAAAAAAAAJ8PBAAAAAAAAAAAAKgPBwAAAENoYXJ0ZXIQAJ8PBAAAAAEAAAAAAKoPCgAAAAEA AAABAAAAAAAAAPMDFAAAAAUAAAAAAAAAAgAAAAIBAAAAAAAAAACfDwQAAAAAAAAAAACqDwoAAAAB AAAAAQAAAAAAEACfDwQAAAABAAAAAACoD6kAAABUaGUgd29ya2luZyBncm91cCB3b3VsZCBub3Qg ZGVmaW5lIGFueSBzY2hlbWFzIGl0c2VsZiwgYW5kIHNjaGVtYSByZXBvc2l0b3JpZXMsIG5vbi1M REFQIGRpcmVjdG9yaWVzIGFuZCBub24tZGlyZWN0b3J5IGRhdGFiYXNlcyBhcmUgb3V0IG9mIHNj b3BlIG9mIHRoZSB3b3JraW5nIGdyb3VwLg0NAAChDyAAAACpAAAAAAAAYAAA2P/Y/wEAAAAAAAAA AACqAAAAAAAAAAAAqg8SAAAAqAAAAAAAAAACAAAAAQAAAAAAAADqAwAAAAAPAPgDdQgAAAIA7wMY AAAAAQAAAAECBwkIAAAAAAAAAAAAAAAAAAAAYADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMz zADMzP8AsrKyAGAA8AcgAAAAAAD/AP///wAAAAAA//8AAP+ZAAAA//8A/wAAAJaWlgBgAPAHIAAA AP//zAAAAAAAZmYzAICAAAAzmTMAgAAAAAAzzAD/zGYAYADwByAAAAD///8AAAAAADMzMwAAAAAA 3d3dAICAgABNTU0A6urqAGAA8AcgAAAA////AAAAAACAgIAAAAAAAP/MZgAAAP8AzADMAMDAwABg APAHIAAAAP///wAAAAAAgICAAAAAAADAwMAAAGb/AP8AAAAAmQAAYADwByAAAAD///8AAAAAAICA gAAAAAAAM5n/AJn/zADMAMwAsrKyAAAAow8+AAAAAQD//T8AAAAiIAAAZAAAAAAAAQBkAAAAAAAA AAAAQAIAAAAAAgAAAP//7wAAAAAA////////LAAAAAADAAAQAKMPfAAAAAUA//0/AAEAIiAAAGQA AAAAAAAAZAAUAAAA2AAAAEACAAAAAAIAAAD//+8AAAAAAP///////yAAAAAAAQAAgAUAABMg1AEg AQAAAgAcAIAFAAAiINACQAIAAAIAGACABQAAEyDwA2ADAAACABQAgAUAALsAEAWABAAAAAAgAKMP bgAAAAUA//0/AAAAIiAAAGQAAAAAAAAAZAAeAAAAAAAAAEACAAAAAAIAAAD//+8AAAAAAP////// /wwAAAAAAQAAAAUAACABIAEAAAAAAAUAAEACQAIAAAAAAAUAAGADYAMAAAAAAAUAAIAEgAQAAAAA UACjD1IAAAAFAAAAAQkAAAAAAQAAAAAAAAABAAEJAAAAAAEAIAEAAAAAAgABCQAAAAABAEACAAAA AAMAAQkAAAAAAQBgAwAAAAAEAAEJAAAAAAEAgAQAAAAAYACjDwwAAAABAAAAAAAAAAAAAABwAKMP PgAAAAUAAAAAAAAAAAACABwAAQAAAAAAAAACABgAAgAAAAAAAAACABQAAwAAAAAAAAACABIABAAA AAAAAAACABIAgACjDz4AAAAFAAAAAAAAAAAAAgAYAAEAAAAAAAAAAgAUAAIAAAAAAAAAAgASAAMA AAAAAAAAAgAQAAQAAAAAAAAAAgAQAA8ADATTBAAADwAC8MsEAAAQAAjwCAAAAAYAAAAGBAAADwAD 8GMEAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAAAAQAAAUAAAAPAATw 0gAAABIACvAIAAAAAgQAAAAKAACTAAvwNgAAAH8AAQABAIAARCB2AIcAAQAAAIEBBAAACIMBAAAA CL8BAQARAMABAQAACP8BAQAJAAECAgAACAAAEPAIAAAAgAGwAdAUUAQPABHwEAAAAAAAwwsIAAAA AAAAAAEAdgAPAA3wVAAAAAAAnw8EAAAAAAAAAAAAqA8gAAAAQ2xpY2sgdG8gZWRpdCBNYXN0ZXIg dGl0bGUgc3R5bGUAAKIPBgAAACEAAAAAAAAAqg8KAAAAIQAAAAEAAAAAAA8ABPAWAQAAEgAK8AgA AAADBAAAAAoAAIMAC/AwAAAAfwABAAEAgACkIHYAgQEEAAAIgwEAAAAIvwEBABEAwAEBAAAI/wEB AAkAAQICAAAIAAAQ8AgAAADgBLAB0BQADw8AEfAQAAAAAADDCwgAAAABAAAAAgB2AA8ADfCeAAAA AACfDwQAAAABAAAAAACoD1IAAABDbGljayB0byBlZGl0IE1hc3RlciB0ZXh0IHN0eWxlcw1TZWNv bmQgbGV2ZWwNVGhpcmQgbGV2ZWwNRm91cnRoIGxldmVsDUZpZnRoIGxldmVsAACiDx4AAAAhAAAA AAANAAAAAQAMAAAAAgANAAAAAwAMAAAABAAAAKoPCgAAAFMAAAABAAAAAAAPAATwtQAAABIACvAI AAAABAQAAAAKAACDAAvwMAAAAH8AAQABAIAABCF2AIEBBAAACIMBAAAACL8BAQARAMABAQAACP8B AQAJAAECAgAACAAAEPAIAAAAYA+wAWAGgBAPABHwEAAAAAAAwwsIAAAAAgAAAAcBdgAPAA3wPQAA AAAAnw8EAAAABAAAAAAAqA8BAAAAKgAAoQ8UAAAAAgAAAAAAAAAAAAIAAAAAAAIADgAAAPgPBAAA AAAAAAAPAATwtwAAABIACvAIAAAABQQAAAAKAACDAAvwMAAAAH8AAQABAIAAZCF2AIEBBAAACIMB AAAACL8BAQARAMABAQAACP8BAQAJAAECAgAACAAAEPAIAAAAYA+wB9AOgBAPABHwEAAAAAAAwwsI AAAAAwAAAAkCdgAPAA3wPwAAAAAAnw8EAAAABAAAAAAAqA8BAAAAKgAAoQ8WAAAAAgAAAAAAAAgA AAEAAgAAAAAAAgAOAAAA+g8EAAAAAAAAAA8ABPC3AAAAEgAK8AgAAAAGBAAAAAoAAIMAC/AwAAAA fwABAAEAgADEIXYAgQEEAAAIgwEAAAAIvwEBABEAwAEBAAAI/wEBAAkAAQICAAAIAAAQ8AgAAABg DyAQ0BSAEA8AEfAQAAAAAADDCwgAAAAEAAAACAJ2AA8ADfA/AAAAAACfDwQAAAAEAAAAAACoDwEA AAAqAAChDxYAAAACAAAAAAAACAAAAgACAAAAAAACAA4AAADYDwQAAAAAAAAADwAE8EgAAAASAArw CAAAAAEEAAAADAAAgwAL8DAAAACBAQAAAAiDAQUAAAiTAY6fiwCUAd69aAC/ARIAEgD/AQAACAAE AwkAAAA/AwEAAQAQAPAHIAAAAP///wAAAAAAgICAAAAAAAAAzJkAMzPMAMzM/wCysrIADwDwA94F AAABAPEDCAAAAAAAAIAAAAwwDwAMBJ4FAAAPAALwlgUAADAACPAIAAAABwAAAAckAAAPAAPwLgUA AA8ABPAoAAAAAQAJ8BAAAADQFAAAUAQAADAAAAAwAAAAAgAK8AgAAAAAJAAABQAAAA8ABPDRAAAA EgAK8AgAAAACJAAAAAoAAIMAC/AwAAAAfwABAAEAgADkJXYAgQEEAAAIgwEAAAAIvwEBABEAwAEB AAAI/wEBAAkAAQICAAAIAAAQ8AgAAAAAAAAAUAcgAQ8AEfAQAAAAAADDCwgAAAAAAAAACgJ2AA8A DfBZAAAAAACfDwQAAAAEAAAAAACoDwEAAAAqAAChDxQAAAACAAAAAAAAAAAAAgAAAAAAAgAMAAAA +Q8EAAAAAAAAAAAAqg8UAAAAAQAAAAEAAAAAAAEAAAABAAAAAAAPAATw0wAAABIACvAIAAAAAyQA AAAKAACDAAvwMAAAAH8AAQABAIAARCZ2AIEBBAAACIMBAAAACL8BAQARAMABAQAACP8BAQAJAAEC AgAACAAAEPAIAAAAAACQCeAQIAEPABHwEAAAAAAAwwsIAAAAAQAAAAcAdgAPAA3wWwAAAAAAnw8E AAAABAAAAAAAqA8BAAAAKgAAoQ8WAAAAAgAAAAAAAAgAAAIAAgAAAAAAAgAMAAAA+A8EAAAAAAAA AAAAqg8UAAAAAQAAAAEAAAAAAAEAAAABAAAAAAAPAATwZAAAABIACvAIAAAABCQAAAAKAABjAAvw JAAAAH8ABAAEAIcAAQAAAH8BAAABAL8BEQARAP8BCAAJAD8CAQABAAAAEPAIAAAAsAHQAhAOIAoP ABHwEAAAAAAAwwsIAAAAAgAAAAUAdgAPAATwFgEAABIACvAIAAAABSQAAAAKAACDAAvwMAAAAH8A AQABAIAApCZ2AIEBBAAACIMBAAAACL8BAQARAMABAQAACP8BAQAJAAECAgAACAAAEPAIAAAAsApA AqAO0BQPABHwEAAAAAAAwwsIAAAAAwAAAAYCdgAPAA3wngAAAAAAnw8EAAAAAgAAAAAAqA9SAAAA Q2xpY2sgdG8gZWRpdCBNYXN0ZXIgdGV4dCBzdHlsZXMNU2Vjb25kIGxldmVsDVRoaXJkIGxldmVs DUZvdXJ0aCBsZXZlbA1GaWZ0aCBsZXZlbAAAog8eAAAAIQAAAAAADQAAAAEADAAAAAIADQAAAAMA DAAAAAQAAACqDwoAAABTAAAAAQAAAAAADwAE8NcAAAASAArwCAAAAAYkAAAACgAAkwAL8DYAAAB/ AAEAAQCAAAQndgCHAAIAAACBAQQAAAiDAQAAAAi/AQEAEQDAAQEAAAj/AQEACQABAgIAAAgAABDw CAAAAGAVAABQB4AWDwAR8BAAAAAAAMMLCAAAAAQAAAAJAnYADwAN8FkAAAAAAJ8PBAAAAAQAAAAA AKgPAQAAACoAAKEPFAAAAAIAAAAAAAAAAAACAAAAAAACAAwAAAD6DwQAAAAAAAAAAACqDxQAAAAB AAAAAQAAAAAAAQAAAAEAAAAAAA8ABPDZAAAAEgAK8AgAAAAHJAAAAAoAAJMAC/A2AAAAfwABAAEA gABkJ3YAhwACAAAAgQEEAAAIgwEAAAAIvwEBABEAwAEBAAAI/wEBAAkAAQICAAAIAAAQ8AgAAABg FZAJ4BCAFg8AEfAQAAAAAADDCwgAAAAFAAAACAJ2AA8ADfBbAAAAAACfDwQAAAAEAAAAAACoDwEA AAAqAAChDxYAAAACAAAAAAAACAAAAgACAAAAAAACAAwAAADYDwQAAAAAAAAAAACqDxQAAAABAAAA AQAAAAAAAQAAAAEAAAAAAA8ABPBIAAAAEgAK8AgAAAABJAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEF AAAIkwHevWgAlAGOn4sAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICA gAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPYAQAAAgDvAxgAAAAAAAAADxAAAAAAAAAAAACAAAAA AAcAAAAPAAwEiAEAAA8AAvCAAQAAQAAI8AgAAAADAAAAAwgAAA8AA/AYAQAADwAE8CgAAAABAAnw EAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAIAAAFAAAADwAE8GwAAAASAArwCAAAAAIIAAAg AgAAQwAL8BgAAACAAHSndgC/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAKAFsAHQFHAIDwAR8BAA AAAAAMMLCAAAAAAAAAAPAHYADwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwbAAAABIACvAIAAAAAwgA ACACAABDAAvwGAAAAIAA1Kd2AL8BAQABAP8BAQABAAEDAwQAAAAAEPAIAAAAkAlgAyAT4A0PABHw EAAAAAAAwwsIAAAAAQAAABAAdgAPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAAB CAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAA PwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPYAQAAAgDv AxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwEiAEAAA8AAvCAAQAAIAAI8AgAAAADAAAA AwwAAA8AA/AYAQAADwAE8CgAAAABAAnwEAAAAACAfEAAAAAAAOBbQAAAAAACAArwCAAAAAAMAAAF AAAADwAE8GwAAAASAArwCAAAAAIMAAAgAgAAQwAL8BgAAACAAAQkdgC/AQAAAQD/AQAAAQABAwIE AAAAABDwCAAAAAAAsAHQFAADDwAR8BAAAAAAAMMLCAAAAAAAAAANAHYADwAN8AwAAAAAAJ4PBAAA AAAAAAAPAATwbAAAABIACvAIAAAAAwwAACACAABDAAvwGAAAAIAAZCR2AL8BAAABAP8BAAABAAED AwQAAAAAEPAIAAAAkAOwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AdgAPAA3wDAAAAAAAng8E AAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABDAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sA lAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZ ADMzzADMzP8AsrKyAA8A7gPYAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwE iAEAAA8AAvCAAQAAUAAI8AgAAAADAAAAAxQAAA8AA/AYAQAADwAE8CgAAAABAAnwEAAAAAAAAAAA AAAAAAAAAAAAAAACAArwCAAAAAAUAAAFAAAADwAE8GwAAAASAArwCAAAAAIUAAAgAgAAQwAL8BgA AACAANSqdgC/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAAAAsAHQFBACDwAR8BAAAAAAAMMLCAAA AAAAAAANAJAADwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwbAAAABIACvAIAAAAAxQAACACAABDAAvw GAAAAIAANKt2AL8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAAcAKwAdAUAA8PABHwEAAAAAAAwwsI AAAAAQAAAA4AkAAPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABFAAAAAwAAIMA C/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADw ByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPYAQAAAgDvAxgAAAABAAAA DQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwEiAEAAA8AAvCAAQAAYAAI8AgAAAADAAAAAxgAAA8AA/AY AQAADwAE8CgAAAABAAnwEAAAAAEAABAkR3oAFFd6ACRXQAACAArwCAAAAAAYAAAFAAAADwAE8GwA AAASAArwCAAAAAIYAAAgAgAAQwAL8BgAAACAAPSrdgC/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAA AAAAsAHQFIABDwAR8BAAAAAAAMMLCAAAAAAAAAANAJAADwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATw bAAAABIACvAIAAAAAxgAACACAABDAAvwGAAAAIAAVKx2AL8BAAABAP8BAAABAAEDAwQAAAAAEPAI AAAAgAFgACAWAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AkAAPAA3wDAAAAAAAng8EAAAAAQAAAA8A BPBIAAAAEgAK8AgAAAABGAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwES ABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8A srKyAA8A7gPYAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwEiAEAAA8AAvCA AQAAcAAI8AgAAAADAAAAAxwAAA8AA/AYAQAADwAE8CgAAAABAAnwEAAAAAAAAAADAAAAAAAAAAAA AAACAArwCAAAAAAcAAAFAAAADwAE8GwAAAASAArwCAAAAAIcAAAgAgAAQwAL8BgAAACAAHStdgC/ AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAIABsAHQFFAEDwAR8BAAAAAAAMMLCAAAAAAAAAANAHYA DwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwbAAAABIACvAIAAAAAxwAACACAABDAAvwGAAAAIAA1K12 AL8BAAABAP8BAAABAAEDAwQAAAAAEPAIAAAA4ASwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4A dgAPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABHAAAAAwAAIMAC/AwAAAAgQEA AAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8A AAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPYAQAAAgDvAxgAAAABAAAADQ4AAAAAAAAA AACAAAAAAAcAAAAPAAwEiAEAAA8AAvCAAQAAgAAI8AgAAAADAAAAAyAAAA8AA/AYAQAADwAE8CgA AAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAAgAAAFAAAADwAE8GwAAAASAArwCAAA AAIgAAAgAgAAQwAL8BgAAACAALSvdgC/AQAAAQD/AQAAAQABAwIEAAAAABDwCAAAAAAAsAHQFNAC DwAR8BAAAAAAAMMLCAAAAAAAAAANAJAADwAN8AwAAAAAAJ4PBAAAAAAAAAAPAATwbAAAABIACvAI AAAAAyAAACACAABDAAvwGAAAAIAAFLB2AL8BAQABAP8BAQABAAEDAwQAAAAAEPAIAAAA0AKwAdAU AA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AkAAPAA3wDAAAAAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK 8AgAAAABIAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAIkwGOn4sAlAHevWgAvwESABIA/wEAAAgA BAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAAMyZADMzzADMzP8AsrKyAA8A7gPY AQAAAgDvAxgAAAABAAAADQ4AAAAAAAAAAACAAAAAAAcAAAAPAAwEiAEAAA8AAvCAAQAAkAAI8AgA AAADAAAAAxAAAA8AA/AYAQAADwAE8CgAAAABAAnwEAAAAAAAAAAAXIVAAAAAAAAAZEACAArwCAAA AAAQAAAFAAAADwAE8GwAAAASAArwCAAAAAIQAAAgAgAAQwAL8BgAAACAANSwdgC/AQEAAQD/AQEA AQABAwIEAAAAABDwCAAAAIABsAHQFBACDwAR8BAAAAAAAMMLCAAAAAAAAAANAJAADwAN8AwAAAAA AJ4PBAAAAAAAAAAPAATwbAAAABIACvAIAAAAAxAAACACAABDAAvwGAAAAIAANLF2AL8BAAABAP8B AAABAAEDAwQAAAAAEPAIAAAAcAKwAdAUAA8PABHwEAAAAAAAwwsIAAAAAQAAAA4AkAAPAA3wDAAA AAAAng8EAAAAAQAAAA8ABPBIAAAAEgAK8AgAAAABEAAAAAwAAIMAC/AwAAAAgQEAAAAIgwEFAAAI kwGOn4sAlAHevWgAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAA AAAAAMyZADMzzADMzP8AsrKyAAAAchcsAAAAAQCgAAAAAAA1EAAAmB4AAHggAADYKQAAWCIAADgk AAAYJgAA+CcAALIYAAAAAPUPHAAAAAQBAACDFQADAAAAALgrAAABAAAACgAAAAEAAAAPAOgDGA8A AAEA6QMoAAAAgBYAAOAQAADgEAAAgBYAAAUAAAAKAAAACgAAAAAAAAABAAAAAAAAAQ8A8gPwAAAA LwDIDwwAAAAwANIPBAAAAAAAAAAPANUHTAAAAAAAtw9EAAAAVABpAG0AZQBzACAATgBlAHcAIABS AG8AbQBhAG4AAAActmIAHLZiACiyYgD40wMwTLJiAAgAAABMsmIAftQDMAAABAAAAKkPCgAAAAcA AAACAAkEAABAAKMPbgAAAAUA//0/AAAAIiAAAGQAAAAAAAAAZAAAAAAAAAAAAEACAAAAAAIAAAD/ /+8AAAAAAP///////xgAAAAAAQAAAAUAACABIAEAAAAAAAUAAEACQAIAAAAAAAUAAGADYAMAAAAA AAUAAIAEgAQAAAAADwALBKwAAAAPAADwpAAAAAAABvBYAAAAAigAAAoAAAAfAAAACAAAAAEAAAAH AAAABAAAAAQAAAAFAAAABAAAAAAAAAAEAAAABgAAAAQAAAACAAAABAAAAAcAAAAEAAAACAAAAAQA AAADAAAACAAAAGMAC/AkAAAAgQEEAAAIgwEAAAAIvwEQABAAwAEBAAAI/wEIAAgAAQICAAAIQAAe 8RAAAAAEAAAIAQAACAIAAAj3AAAQHwDwDxwAAAAAAPMDzAAAAAkAAADUAAAACgAAANwAAAAXAAAA 5AAAAAsAAADsAAAAEAAAAPQAAAATAAAA/AAAABYAAAAEAQAADQAAAAwBAAAMAAAAwQEAAAIAAADk BAAAHgAAAA8AAABPbi1zY3JlZW4gU2hvdwAAHgAAAAQAAABJQk0AAwAAAL5OAAADAAAAHAAAAAMA AAAGAAAAAwAAAAAAAAADAAAAAAAAAAMAAAAAAAAAAwAAADEVCAALAAAAAAAAAAsAAAAAAAAACwAA AAAAAAALAAAAAAAAAB4QAAAIAAAAEAAAAFRpbWVzIE5ldyBSb21hbgAPAAAARGVmYXVsdCBEZXNp Z24AKAAAAEV2b2x2aW5nIExEQVAgU2NoZW1hIEVudHJpZXMgKEVMU0UpIEJPRgAQAAAARUxTRSBC T0YgQWdlbmRhABIAAABQcm9ibGVtIFN0YXRlbWVudAAPAAAAUHJvcG9zZWQgSXRlbXMADQAAAE91 dCBvZiBTY29wZQAIAAAAQ2hhcnRlcgAMEAAABgAAAB4AAAALAAAARm9udHMgVXNlZAADAAAAAQAA AB4AAAAQAAAARGVzaWduIFRlbXBsYXRlAAMAAAABAAAAHgAAAA0AAABTbGlkZSBUaXRsZXMAAwAA AAYAAAAAAACYAAAAAwAAAAAAAAAgAAAAAQAAADYAAAACAAAAPgAAAAEAAAACAAAACgAAAF9QSURf R1VJRAACAAAA5AQAAEEAAABOAAAAewA5AEEANwAxADYAQwBBADIALQA4AEQARQBCAC0ANABEAEIA NAAtAEEANgAzADgALQA1AEQAQgBFADAARQBFAEYAMwAzADAAOQB9AAAAAAAAAAAALQEEAAQAAADw AQUABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAGQAAADIK1gGDAQwAAABFbGxl biBTdG9rZXMXAAoACwAQABMACQAVAAoAEwATABAADwAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAA AgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAJwAAADIK/wEuARUAAABzdG9rZXNAYXVzdGluLmli bS5jb20ADwAKABMAEgARAA4AIwAQABMADgALAAoAEwAJAAoAEwAdAAkAEQASAB0ABAAAAC4BAQAE AAAAAgECAAQAAAACAQIABAAAAC0BAQAEAAAALQEDABAAAAD7AhAABwAAAAAAvAIAAAAAAQICIlN5 c3RlbQBuBAAAAC0BBQAEAAAA8AEEAA8AAAAmBg8AFABUTlBQBAAMAAAAAAAAAAAAAAAAAAkAAAAm Bg8ACAD/////AQAAAAMAAAAAAAAAAAAAAAAAAAAAAAIACQQAAEAAow9uAAAABQD//T8AAAAiIAAA ZAAAAAAAAABkAAAAAAAAAAAAQAIAAAAAAgAAAP//7wAAAAAA////////GAAAAAABAAAABQAAIAEg AQAAAAAABQAAQAJAAgAAAAAABQAAYANgAwAAAAAABQAAgASABAAAAAAPAAsErAAAAA8AAPCkAAAA AAAG8FgAAAACKAAACgAAAB8AAAAIAAAAAQAAAAcAAAAEAAAABAAAAAUAAAAEAAAAAAAAAAQAAAAG AAAABAAAAAIAAAAEAAAABwAAAAQAAAAIAAAABAAAAAMAAAAIAAAAYwAL8CQAAACBAQQAAAiDAQAA AAi/ARAAEADAAQEAAAj/AQgACAABAgIAAAhAAB7xEAAAAAQAAAgBAAAIAgAACPcAABAfAPAPHAAA AAAA8wMUAAAAAgAAAAAAAAAAAAAAAAAAgAAAAAAPANAHiwAAAA8A+gNnAAAAAAD+AwMAAAAAAQAA AP0DNAAAAE0AAABkAAAATQAAAGQAAABYsmIAftQDMFCyYgAIAAAAphcAALANAADW/P//pv///wEA AABwAPsDCAAAAAAAAABwCAAAcAD7AwgAAAABAAAAQAsAAB8A/wMUAAAAAgAABAwAAAAAAAAAAAAA AAIAAAA/ANkPbgAAAAAA2g8EAAAAAAAtAAAAug8aAAAAMgAgAEEAdQBnAHUAcwB0ACAAMgAwADAA MAAgALoPOAAAAEkARQBUAEYALQA0ADgAIAAgAEUATABTAEUAIAAoAGkAbgBmAG8AcgBtAGEAbAAp ACAAQgBPAEYATwDZDwwAAAAAANoPBAAAAAAAPQAPAPAPIQwAAAAA8wMUAAAAAwAAAAAAAAACAAAA AAEAAAAAAAAAAJ8PBAAAAAYAAAAAAKgPJwAAAEV2b2x2aW5nIExEQVAgU2NoZW1hIEVudHJpZXMg KEVMU0UpIEJPRhAAnw8EAAAABQAAAAAAqA8iAAAARWxsZW4gU3Rva2VzDXN0b2tlc0BhdXN0aW4u aWJtLmNvbQAAoQ8WAAAAIwAAAAAAABAAAEYAIwAAAAAAAgAcAAAA8wMUAAAABAAAAAAAAAACAAAA AQEAAAAAAAAAAJ8PBAAAAAAAAAAAAKgPDwAAAEVMU0UgQk9GIEFnZW5kYRAAnw8EAAAAAQAAAAAA qA/VAAAAR29hbDogZGV0ZXJtaW5lIHdoZXRoZXIgdGhlcmUgaXMgc3VmZmljaWVudCBpbnRlcmVz dCBpbiBmb3JtaW5nIGFuIElFVEYgd29ya2luZyBncm91cCBmb3IgdGhpcyB0b3BpYw1Qcm9ibGVt IHN0YXRlbWVudCANV29yayBpdGVtIGlkZW50aWZpY2F0aW9uICYgcHJpb3JpdGl6YXRpb24gDVdv cmtpbmcgZ3JvdXAgY2hhcnRlciAoZm9yIElFVEYgQXBwbGljYXRpb25zIEFyZWEpAAChDyoAAABl AAAAAAAhYAAAAAAAAAAB2P/Y/3EAAAAAAABgAADY/9j/1gAAAAAAAAAAAPMDFAAAAAYAAAAAAAAA AgAAAAMBAAAAAAAAAACfDwQAAAAAAAAAAACoDxEAAABQcm9ibGVtIFN0YXRlbWVudAAAoQ8cAAAA EgAAAAAAAAAAABEAAAAAAAIAJAABAAAAAAAAABAAnw8EAAAAAQAAAAAAqA86AgAATERBUHYzIChS RkMgMjI1MS0yMjUyKSBkZXNjcmliZXMgaG93IGNsaWVudHMgY2FuIGxvY2F0ZSBhbmQgcmV0cmll dmUgdGhlIGF0dHJpYnV0ZSB0eXBlcywgb2JqZWN0IGNsYXNzZXMgYW5kIG90aGVyIHNjaGVtYSBy dWxlcyB3aGljaCBnb3Zlcm4gYW4gZW50cnkgaW4gdGhlIGRpcmVjdG9yeSAoaXRzIHN1YnNjaGVt YSkuIFRoZSB1bmRlcmx5aW5nIHNjaGVtYSBtb2RlbCBpcyBkZWZpbmVkIGluIFguNTAwKDkzIGFu ZCBsYXRlcikuDU5laXRoZXIgTERBUHYzIG5vciBYLjUwMCBjdXJyZW50bHkgZGVmaW5lIGhvdyBh ZG1pbmlzdHJhdGl2ZSBjbGllbnRzIGNhbiBjaGFuZ2UgdGhlIHN1YnNjaGVtYSBvdmVyIHByb3Rv Y29sLiBTZXZlcmFsIGRpc3RpbmN0IGltcGxlbWVudGF0aW9ucyBoYXZlIGJlZW4gcHJvcG9zZWQs IGFuZCBpbnRlcm9wZXJhYmlsaXR5IGlzIG5lZWRlZCB0byBhbGxvdyBhcHBsaWNhdGlvbnMgdG8g cGxhY2UgdGhlaXIgc2NoZW1hIGludG8gYW55IGFwcHJvcHJpYXRlIExEQVB2MyBzZXJ2ZXIsIGFu ZCBhbGxvdyBhZG1pbmlzdHJhdG9ycyB0byBldm9sdmUgdGhlaXIgc2NoZW1hLg0NAAChDyoAAAA6 AgAAAAAAYAAA2P/Y/wEAAAAAAAAAAAA6AgAAAAACABgAAQAAAAAAAAAAAKoPLAAAAKsAAAAAAAAA CgAAAAEAAAADAJUAAAAAAAAACgAAAAEAAAADAOcAAAAAAAAAAADzAxQAAAAHAAAAAAAAAAIAAAAE AQAAAAAAAAAAnw8EAAAAAAAAAAAAqA8OAAAAUHJvcG9zZWQgSXRlbXMAAKEPHAAAAA8AAAAAAAAA AAAOAAAAAAACABgAAQAAAAAAAAAQAJ8PBAAAAAEAAAAAAKgPHQQAAERlZmluZSBob3cgTERBUHYz IGNsaWVudHMgY2FuIGNyZWF0ZSBhbmQgY2hhbmdlIHN1YnNjaGVtYS4gQ29uc2lkZXI6DWdyb3Vw aW5nIG9mIExEQVAgc2NoZW1hIGF0dHJpYnV0ZSB2YWx1ZXMsIGUuZy53aGF0IHNjaGVtYXRhIGlz IHN1cHBvcnRlZCwgd2hhdCBncm91cHMgbmVlZCB0byBzdGF5IHRvZ2V0aGVyIChzY2hlbWEgcGFj a2FnZXMpLCBzY2hlbWEgcGFja2FnZSBkZXBlbmRlbmNpZXMNcHJvY2VkdXJlcyBhbmQgc2VtYW50 aWNzIGZvciBwYXJ0aXRpb25pbmcgc3Vic2NoZW1hIGFkbWluaXN0cmF0aXZlIGFyZWFzDWRpc2Nv dmVyeSBvZiBhdHRyaWJ1dGUgdHlwZSBvcHRpb25zIC0gZG9lcyB0aGlzIGJlbG9uZyBpbiB0aGlz IHNjaGVtYSBncm91cCBvciBsZGFwZXh0PyANcHJvY2VkdXJlcyBmb3IgbWVyZ2luZyBuZXcgc2No ZW1hIGVsZW1lbnRzIGludG8gYSBzdWJzY2hlbWEgYXJlYSANZGV0ZXJtaW5pbmcgYWxsb3dhYmxl IGNoYW5nZXMgdG8gZXhpc3Rpbmcgc2NoZW1hIGluY2x1ZGluZyBpbXBhY3Qgb24gY3VycmVudCBE SVQgZGF0YSANcHJvY2VkdXJlcyBmb3IgdXBkYXRpbmcgYW5kIHJlbW92aW5nIGV4aXN0aW5nIHNj aGVtYSBlbGVtZW50cw1kaXNjdXNzL2V2b2x2ZSB1c2VmdWwgdGVjaG5pcXVlcy9hY3Rpb25zIHRo YXQgdmVuZG9ycyB1c2UgdG9kYXkgZm9yIHNjaGVtYSBvcGVyYXRpb25zIHRvIHBlcmhhcHMgdXNl IGZhbWlsaWVzIG9mIGVudHJpZXMNYWRkaXRpb25hbCBzY2hlbWEgcmVwcmVzZW50YXRpb24gdG8g ZmFjaWxpdGF0ZSBtYW5hZ2VtZW50IG9wZXJhdGlvbnMgKHJlZjogQ01JUCBzcGVjICsgUkZDIDE4 MDQpIA1ob3cgdG8gdW5pcXVlbHkgaWRlbnRpZnkgb2JqZWN0IGNsYXNzZXMsIHR5cGVzLCBldGMg KHNlZSBjdXJyZW50IGVtYWlsIG9uIGxkYXBleHQpDUNvbnNpZGVyIGFkZGl0aW9uYWwgc2NoZW1h IG1vZGVsIGVsZW1lbnRzIGJleW9uZCB0aG9zZSByZXF1aXJlZCBpbiBSRkMgMjI1MSB0aGF0IHdv dWxkIGJlIHN1aXRhYmxlIGZvciBpbmNsdXNpb24gb3IgcmVmaW5lbWVudCBpbiB0aGUgc3Vic2No ZW1hIGVudHJ5LgAAoQ94AAAARQAAAAAAAGAAANj/2P/kAAAAAQAAYAAA2P/Y/1kAAAACAABgAADY /9j/BQIAAAEAAGAAANj/2P+XAAAAAAAAYAAA2P/Y/0UAAAAAAAIAEgDkAAAAAAACABIAWQAAAAAA AgAQAAUCAAAAAAIAEgCXAAAAAAACABIAAACqD3QAAAAvAAAAAAAAAAoAAAABAAAAAwDQAAAAAAAA AAoAAAABAAAAAwBlAAAAAAAAAAcAAAABAAAAAwA0AAAAAAAAAAoAAAABAAAAAwDBAQAAAAAAAAcA AAABAAAAAwCHAAAAAAAAAAoAAAABAAAAAwAIAAAAAAAAAAAA8wMUAAAACAAAAAAAAAACAAAABQEA AAAAAAAAAJ8PBAAAAAAAAAAAAKgPDAAAAE91dCBvZiBTY29wZRAAnw8EAAAAAQAAAAAAqA+hAAAA VGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBub3QgZGVmaW5lIGFueSBzY2hlbWFzIGl0c2VsZg1TY2hl bWEgcmVwb3NpdG9yaWVzLCBub24tTERBUCBkaXJlY3RvcmllcyBhbmQgbm9uLWRpcmVjdG9yeSBk YXRhYmFzZXMgYXJlIG91dCBvZiBzY29wZSBvZiB0aGUgd29ya2luZyBncm91cC4AAPMDFAAAAAkA AAAAAAAAAgAAAAYBAAAAAAAAAACfDwQAAAAAAAAAAACoDwcAAABDaGFydGVyEACfDwQAAAABAAAA AACoDzgAAAA8dG8gYmUgZGV2ZWxvcGVkIGFmdGVyIGluaXRpYWwgaW5mb3JtYWwgQk9GOyBzdGF5 IHR1bmVkPgAA6gMAAAAADwDuA9gBAAACAO8DGAAAAAAAAAAPEAAAAAAAAAAAAIAAAAAABwAAAA8A DASIAQAADwAC8IABAABAAAjwCAAAAAMAAAADCAAADwAD8BgBAAAPAATwKAAAAAEACfAQAAAAAAAA AAAAAAAAAAAAAAAAAAIACvAIAAAAAAgAAAUAAAAPAATwbAAAABIACvAIAAAAAggAACACAABDAAvw GAAAAIAAxCd2AL8BAAABAP8BAAABAAEDAgQAAAAAEPAIAAAAoAWwAdAUcAgPABHwEAAAAAAAwwsI AAAAAAAAAA8AkAAPAA3wDAAAAAAAng8EAAAAAAAAAA8ABPBsAAAAEgAK8AgAAAADCAAAIAIAAEMA C/AYAAAAgAAUepAAvwEAAAEA/wEAAAEAAQMDBAAAAAAQ8AgAAABQCmADIBPgDQ8AEfAQAAAAAADD CwgAAAABAAAAEACQAA8ADfAMAAAAAACeDwQAAAABAAAADwAE8EgAAAASAArwCAAAAAEIAAAADAAA gwAL8DAAAACBAQAAAAiDAQUAAAiTAY6fiwCUAd69aAC/ARIAEgD/AQAACAAEAwkAAAA/AwEAAQAQ APAHIAAAAP///wAAAAAAgICAAAAAAAAAzJkAMzPMAMzM/wCysrIAAAByFxAAAAABABAATD0AAAMA EACiTAAAAAD1DxwAAAAAAQAAgxUAAyg9AACCTgAAAQAAAAoAAAABAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAUAAAAAgAAAAAAAAAAAAAAAAAAgAAAAAAPANAHiwAAAA8A+gNnAAAA AAD+AwMAAAAAAQAAAP0DNAAAAE0AAABkAAAATQAAAGQAAABYsmIAftQDMFCyYgAIAAAAphcAALAN AADW/P//pv///wEAAABwAPsDCAAAAAAAAABwCAAAcAD7AwgAAAABAAAAQAsAAB8A/wMUAAAAAgAA BAwAAAAAAAAAAAAAAAIAAAA/ANkPbgAAAAAA2g8EAAAAAAAtAAAAug8aAAAAMgAgAEEAdQBnAHUA cwB0ACAAMgAwADAAMAAgALoPOAAAAEkARQBUAEYALQA0ADgAIAAgAEUATABTAEUAIAAoAGkAbgBm AG8AcgBtAGEAbAApACAAQgBPAEYATwDZDwwAAAAAANoPBAAAAAAAPQAPAPAP6wsAAAAA8wMUAAAA AwAAAAAAAAACAAAAAAEAAAAAAAAAAJ8PBAAAAAYAAAAAAKgPJwAAAEV2b2x2aW5nIExEQVAgU2No ZW1hIEVudHJpZXMgKEVMU0UpIEJPRhAAnw8EAAAABQAAAAAAqg8KAAAAAQAAAAEAAAAAAAAA8wMU AAAABAAAAAAAAAACAAAAAQEAAAAAAAAAAJ8PBAAAAAAAAAAAAKgPDwAAAEVMU0UgQk9GIEFnZW5k YRAAnw8EAAAAAQAAAAAAqA/VAAAAR29hbDogZGV0ZXJtaW5lIHdoZXRoZXIgdGhlcmUgaXMgc3Vm ZmljaWVudCBpbnRlcmVzdCBpbiBmb3JtaW5nIGFuIElFVEYgd29ya2luZyBncm91cCBmb3IgdGhp cyB0b3BpYw1Qcm9ibGVtIHN0YXRlbWVudCANV29yayBpdGVtIGlkZW50aWZpY2F0aW9uICYgcHJp b3JpdGl6YXRpb24gDVdvcmtpbmcgZ3JvdXAgY2hhcnRlciAoZm9yIElFVEYgQXBwbGljYXRpb25z IEFyZWEpAAChDyoAAABlAAAAAAAhYAAAAAAAAAAB2P/Y/3EAAAAAAABgAADY/9j/1gAAAAAAAAAA APMDFAAAAAYAAAAAAAAAAgAAAAMBAAAAAAAAAACfDwQAAAAAAAAAAACoDxEAAABQcm9ibGVtIFN0 YXRlbWVudAAAoQ8cAAAAEgAAAAAAAAAAABEAAAAAAAIAJAABAAAAAAAAABAAnw8EAAAAAQAAAAAA qA86AgAATERBUHYzIChSRkMgMjI1MS0yMjUyKSBkZXNjcmliZXMgaG93IGNsaWVudHMgY2FuIGxv Y2F0ZSBhbmQgcmV0cmlldmUgdGhlIGF0dHJpYnV0ZSB0eXBlcywgb2JqZWN0IGNsYXNzZXMgYW5k IG90aGVyIHNjaGVtYSBydWxlcyB3aGljaCBnb3Zlcm4gYW4gZW50cnkgaW4gdGhlIGRpcmVjdG9y eSAoaXRzIHN1YnNjaGVtYSkuIFRoZSB1bmRlcmx5aW5nIHNjaGVtYSBtb2RlbCBpcyBkZWZpbmVk IGluIFguNTAwKDkzIGFuZCBsYXRlcikuDU5laXRoZXIgTERBUHYzIG5vciBYLjUwMCBjdXJyZW50 bHkgZGVmaW5lIGhvdyBhZG1pbmlzdHJhdGl2ZSBjbGllbnRzIGNhbiBjaGFuZ2UgdGhlIHN1YnNj aGVtYSBvdmVyIHByb3RvY29sLiBTZXZlcmFsIGRpc3RpbmN0IGltcGxlbWVudGF0aW9ucyBoYXZl IGJlZW4gcHJvcG9zZWQsIGFuZCBpbnRlcm9wZXJhYmlsaXR5IGlzIG5lZWRlZCB0byBhbGxvdyBh cHBsaWNhdGlvbnMgdG8gcGxhY2UgdGhlaXIgc2NoZW1hIGludG8gYW55IGFwcHJvcHJpYXRlIExE QVB2MyBzZXJ2ZXIsIGFuZCBhbGxvdyBhZG1pbmlzdHJhdG9ycyB0byBldm9sdmUgdGhlaXIgc2No ZW1hLg0NAAChDyoAAAA6AgAAAAAAYAAA2P/Y/wEAAAAAAAAAAAA6AgAAAAACABgAAQAAAAAAAAAA AKoPLAAAAKsAAAAAAAAACgAAAAEAAAADAJUAAAAAAAAACgAAAAEAAAADAOcAAAAAAAAAAADzAxQA AAAHAAAAAAAAAAIAAAAEAQAAAAAAAAAAnw8EAAAAAAAAAAAAqA8OAAAAUHJvcG9zZWQgSXRlbXMA AKEPHAAAAA8AAAAAAAAAAAAOAAAAAAACABgAAQAAAAAAAAAQAJ8PBAAAAAEAAAAAAKgPHQQAAERl ZmluZSBob3cgTERBUHYzIGNsaWVudHMgY2FuIGNyZWF0ZSBhbmQgY2hhbmdlIHN1YnNjaGVtYS4g Q29uc2lkZXI6DWdyb3VwaW5nIG9mIExEQVAgc2NoZW1hIGF0dHJpYnV0ZSB2YWx1ZXMsIGUuZy53 aGF0IHNjaGVtYXRhIGlzIHN1cHBvcnRlZCwgd2hhdCBncm91cHMgbmVlZCB0byBzdGF5IHRvZ2V0 aGVyIChzY2hlbWEgcGFja2FnZXMpLCBzY2hlbWEgcGFja2FnZSBkZXBlbmRlbmNpZXMNcHJvY2Vk dXJlcyBhbmQgc2VtYW50aWNzIGZvciBwYXJ0aXRpb25pbmcgc3Vic2NoZW1hIGFkbWluaXN0cmF0 aXZlIGFyZWFzDWRpc2NvdmVyeSBvZiBhdHRyaWJ1dGUgdHlwZSBvcHRpb25zIC0gZG9lcyB0aGlz IGJlbG9uZyBpbiB0aGlzIHNjaGVtYSBncm91cCBvciBsZGFwZXh0PyANcHJvY2VkdXJlcyBmb3Ig bWVyZ2luZyBuZXcgc2NoZW1hIGVsZW1lbnRzIGludG8gYSBzdWJzY2hlbWEgYXJlYSANZGV0ZXJt aW5pbmcgYWxsb3dhYmxlIGNoYW5nZXMgdG8gZXhpc3Rpbmcgc2NoZW1hIGluY2x1ZGluZyBpbXBh Y3Qgb24gY3VycmVudCBESVQgZGF0YSANcHJvY2VkdXJlcyBmb3IgdXBkYXRpbmcgYW5kIHJlbW92 aW5nIGV4aXN0aW5nIHNjaGVtYSBlbGVtZW50cw1kaXNjdXNzL2V2b2x2ZSB1c2VmdWwgdGVjaG5p cXVlcy9hY3Rpb25zIHRoYXQgdmVuZG9ycyB1c2UgdG9kYXkgZm9yIHNjaGVtYSBvcGVyYXRpb25z IHRvIHBlcmhhcHMgdXNlIGZhbWlsaWVzIG9mIGVudHJpZXMNYWRkaXRpb25hbCBzY2hlbWEgcmVw cmVzZW50YXRpb24gdG8gZmFjaWxpdGF0ZSBtYW5hZ2VtZW50IG9wZXJhdGlvbnMgKHJlZjogQ01J UCBzcGVjICsgUkZDIDE4MDQpIA1ob3cgdG8gdW5pcXVlbHkgaWRlbnRpZnkgb2JqZWN0IGNsYXNz ZXMsIHR5cGVzLCBldGMgKHNlZSBjdXJyZW50IGVtYWlsIG9uIGxkYXBleHQpDUNvbnNpZGVyIGFk ZGl0aW9uYWwgc2NoZW1hIG1vZGVsIGVsZW1lbnRzIGJleW9uZCB0aG9zZSByZXF1aXJlZCBpbiBS RkMgMjI1MSB0aGF0IHdvdWxkIGJlIHN1aXRhYmxlIGZvciBpbmNsdXNpb24gb3IgcmVmaW5lbWVu dCBpbiB0aGUgc3Vic2NoZW1hIGVudHJ5LgAAoQ94AAAARQAAAAAAAGAAANj/2P/kAAAAAQAAYAAA 2P/Y/1kAAAACAABgAADY/9j/BQIAAAEAAGAAANj/2P+XAAAAAAAAYAAA2P/Y/0UAAAAAAAIAEgDk AAAAAAACABIAWQAAAAAAAgAQAAUCAAAAAAIAEgCXAAAAAAACABIAAACqD3QAAAAvAAAAAAAAAAoA AAABAAAAAwDQAAAAAAAAAAoAAAABAAAAAwBlAAAAAAAAAAcAAAABAAAAAwA0AAAAAAAAAAoAAAAB AAAAAwDBAQAAAAAAAAcAAAABAAAAAwCHAAAAAAAAAAoAAAABAAAAAwAIAAAAAAAAAAAA8wMUAAAA CAAAAAAAAAACAAAABQEAAAAAAAAAAJ8PBAAAAAAAAAAAAKgPDAAAAE91dCBvZiBTY29wZRAAnw8E AAAAAQAAAAAAqA+hAAAAVGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBub3QgZGVmaW5lIGFueSBzY2hl bWFzIGl0c2VsZg1TY2hlbWEgcmVwb3NpdG9yaWVzLCBub24tTERBUCBkaXJlY3RvcmllcyBhbmQg bm9uLWRpcmVjdG9yeSBkYXRhYmFzZXMgYXJlIG91dCBvZiBzY29wZSBvZiB0aGUgd29ya2luZyBn cm91cC4AAPMDFAAAAAkAAAAAAAAAAgAAAAYBAAAAAAAAAACfDwQAAAAAAAAAAACoDwcAAABDaGFy dGVyEACfDwQAAAABAAAAAACoDzgAAAA8dG8gYmUgZGV2ZWxvcGVkIGFmdGVyIGluaXRpYWwgaW5m b3JtYWwgQk9GOyBzdGF5IHR1bmVkPgAA6gMAAAAADwDuA9gBAAACAO8DGAAAAAEAAAANDgAAAAAA AAAAAIAAAAAABwAAAA8ADASIAQAADwAC8IABAACAAAjwCAAAAAMAAAADIAAADwAD8BgBAAAPAATw KAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAAACAAAAUAAAAPAATwbAAAABIACvAI AAAAAiAAACACAABDAAvwGAAAAIAAtH+QAL8BAAABAP8BAAABAAEDAgQAAAAAEPAIAAAAAACwAdAU 0AIPABHwEAAAAAAAwwsIAAAAAAAAAA0AkAAPAA3wDAAAAAAAng8EAAAAAAAAAA8ABPBsAAAAEgAK 8AgAAAADIAAAIAIAAEMAC/AYAAAAgAAUgJAAvwEAAAEA/wEAAAEAAQMDBAAAAAAQ8AgAAADQArAB 0BQADw8AEfAQAAAAAADDCwgAAAABAAAADgCQAA8ADfAMAAAAAACeDwQAAAABAAAADwAE8EgAAAAS AArwCAAAAAEgAAAADAAAgwAL8DAAAACBAQAAAAiDAQUAAAiTAY6fiwCUAd69aAC/ARIAEgD/AQAA CAAEAwkAAAA/AwEAAQAQAPAHIAAAAP///wAAAAAAgICAAAAAAAAAzJkAMzPMAMzM/wCysrIAAABy FxAAAAABABAAECwAAAkAEAAwOwAAAAD1DxwAAAAGAQAAgxUAA+wrAAAQPQAAAQAAAAoAAAABAAAA DwDoA04PAAABAOkDKAAAAIAWAADgEAAA4BAAAIAWAAAFAAAACgAAAAoAAAAAAAAAAQAAAAAAAAEP APID8AAAAC8AyA8MAAAAMADSDwQAAAAAAAAADwDVB0wAAAAAALcPRAAAAFQAaQBtAGUAcwAgAE4A ZQB3ACAAUgBvAG0AYQBuAAAAHLZiABy2YgAosmIA+NMDMEyyYgAIAAAATLJiAH7UAzAAAAQSAACp DwoAAAAHAAAAAAAXAAAAJgYPACMA/////wQAGwBUTlBQFADI8AAwAAAAABQAAABEDXYAAAAAAAAA CgAAACYGDwAKAFROUFAAAAIA9AMJAAAAJgYPAAgA/////wMAAAAPAAAAJgYPABQAVE5QUAQADAAB AAAAAQAAAAAAAAAFAAAACwIAAAAABQAAAAwCygK6AwQAAAAEAQ0ABwAAAPwCAAD///8AAAAEAAAA LQEAAAkAAAD6AgUAAAAAAP///wAiAAQAAAAtAQEABAAAAC0BAAAJAAAAHQYhAPAA0ALAAwAAAAAE AAAALQEAAAQAAAAtAQAACQAAAPoCAAAAAAAAAAAAACIABAAAAC0BAgAQAAAAJgYPABYA/////wAA RwAAAI8CAAARAQAAwQIAAAgAAAAmBg8ABgD/////AQANAAAA+wIAAAAAAAAAAAAAAAAAAAAAAAAA AAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAVAAAA+wLt/wAAAAAAAJABAAAAAAAAABJUaW1l cyBOZXcgUm9tYW4AFQAEAAAALQEEAAQAAADwAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEY AAQAAAACAQEAGwAAADIKpwJSAA0AAAAyIEF1Z3VzdCAyMDAwAAkABQAOAAkACQAKAAcABQAFAAkA CQAKAAkABAAAAC4BAQAEAAAAAgECAAQAAAACAQIAEAAAACYGDwAWAP////8AAEcBAACPAgAAeQIA AMECAAAIAAAAJgYPAAYA/////wEABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQC AAAAAAQAAAAuARgABAAAAAIBAQAxAAAAMgqnAmgBHAAAAElFVEYtNDggIEVMU0UgKGluZm9ybWFs KSBCT0YGAAwACwAKAAYACgAJAAUABAAMAAsACgAMAAQABwAFAAkABgAKAAYADgAJAAUABgAFAAwA DgAKAAQAAAAuAQEABAAAAAIBAgAEAAAAAgECABAAAAAmBg8AFgD/////AACvAgAAjwIAAHkDAADB AgAACAAAACYGDwAGAP////8BAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAA AAAEAAAALgEYAAQAAAACAQEACQAAADIKpwJlAwEAAAAxAAkABAAAAC4BAQAEAAAAAgECAAQAAAAC AQIABwAAAPwCAQAAAAAAAAAEAAAALQEDAAQAAAAtAQEABwAAABsEaQF5A/AASAAEAAAALQEAAAQA AAAtAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAVAAAA+wLF/wAAAAAAAJABAAAAAAAAABJUaW1lcyBO ZXcgUm9tYQUARABvAGMAdQBtAGUAbgB0AFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkA bwBuAAAAAAAAAAAAAAA4AAIB////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAHgAAAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///////////////8AAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP////////////// /wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAA////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAUgBvAG8AdAAgAEUAbgB0AHIAeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAABYABQH//////////wMAAAAQjYFkm0/PEYbqAKoAuSnoAAAAAAAAAAAAAAAA AITiGzgBwAE1AAAAAAwAAAAAAABDAHUAcgByAGUAbgB0ACAAVQBzAGUAcgAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACAP///////////////wAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAAAAAAAAAAUAUwB1AG0AbQBhAHIAeQBJAG4AZgBv AHIAbQBhAHQAaQBvAG4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAIBAQAAAP////////// AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAALQIAAAAAAAAUABvAHcAZQBy AFAAbwBpAG4AdAAgAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgA AgECAAAABAAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk4A AAAAAAABAAAAAgAAAAMAAAAEAAAABQAAAAYAAAAHAAAACAAAAAkAAAAKAAAACwAAAAwAAAANAAAA DgAAAA8AAAAQAAAAEQAAABIAAAATAAAAFAAAABUAAAAWAAAAJwAAABgAAAD+////GgAAABsAAAAc AAAAHQAAAB4AAAAfAAAAIAAAACEAAAD+//////////////////////////////8oAAAAKQAAACoA AAArAAAALAAAAC0AAAAuAAAAGQAAADAAAAA2AAAA/v///zEAAAD9/////v///y8AAAAXAAAA//// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////7///8CAAAAAwAAAAQAAAAFAAAABgAAAAcAAAAIAAAACQAAAAoAAAALAAAADAAAAA0AAAAO AAAADwAAABAAAAARAAAAEgAAABMAAAAUAAAAFQAAABYAAAAXAAAAGAAAABkAAAAaAAAAGwAAABwA AAAdAAAAKgAAAB8AAAAgAAAAIQAAACIAAAAjAAAAJAAAACUAAAAmAAAAJwAAACgAAAApAAAA/v// /ysAAAAsAAAALQAAAC4AAAAvAAAA/v////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////AAD2DyQAAAAUAAAAX8CR45pOAAAMAPQDAwBiAEVsbGVuIFN0b2tlcwgAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAP7/AAAEAAIAAAAAAAAAAAAAAAAAAAAAAAEAAADghZ/y+U9oEKuRCAArJ7PZMAAA AIQIAAAMAAAAAQAAAGgAAAACAAAAcAAAAAQAAACgAAAACAAAALgAAAAJAAAA0AAAABIAAADcAAAA CgAAAPwAAAALAAAACAEAAAwAAAAUAQAADQAAACABAAAPAAAALAEAABEAAAA0AQAAAgAAAOQEAAAe AAAAKAAAAEV2b2x2aW5nIExEQVAgU2NoZW1hIEVudHJpZXMgKEVMU0UpIEJPRgAeAAAADQAAAEVs bGVuIFN0b2tlcwAgU2MeAAAADQAAAEVsbGVuIFN0b2tlcwAgU2MeAAAAAwAAADEzAGUeAAAAFQAA AE1pY3Jvc29mdCBQb3dlclBvaW50AEVudEAAAABAviRBCgAAAEAAAABgvTT0NwHAAUAAAADAgdbU rvy/AUAAAAAAhOIbOAHAAQMAAABEAQAARwAAAEgHAAD/////AwAAAAgAbxBNDAAAAQAJAAADnAMA AAYAMQAAAAAAEQAAACYGDwAYAP////8AABAAAAAAAAAAAAC6AwAAygIAAAkAAAAmBg8ACAD///// AgBuABUABAAAAC0BBQAEAAAA8AEEAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEB ADEAAAAyCh4BYgAcAAAARXZvbHZpbmcgTERBUCBTY2hlbWEgRW50cmllcyQAHQAeABAAHQARAB0A HQAPACQAKgAqACEADwAgABoAHgAaAC0AGgAPACQAHQARABMAEQAaABYABAAAAC4BAQAEAAAAAgEC AAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBABYAAAAyCmUBRgEKAAAAKEVMU0Up IEJPRhQAIwAkACEAJAATAA8AJwAqACEABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAwAE AAAALQEBAAcAAAAbBFECMQO4AZAABAAAAC0BAAAEAAAALQECAAUAAAAJAgAAAAIFAAAAFAIAAAAA FQAAAPsC2/8AAAAAAACQAQAAAAAAAAASVGltZXMgTmV3IFJvbWFuABUABAD+/wAABAACAAAAAAAA AAAAAAAAAAAAAAACAAAAAtXN1ZwuGxCTlwgAKyz5rkQAAAAF1c3VnC4bEJOXCAArLPmuaAIAACQC AAAQAAAAAQAAAIgAAAADAAAAkAAAAA8AAACoAAAABAAAALQAAAAGAAAAvAAAAAcAAADEAAAACAAA AA== --=====================_4601693==_ Content-Type: application/pdf; name="else bof slides.PDF" Content-Disposition: attachment; filename="else bof slides.PDF" Content-Transfer-Encoding: base64 JVBERi0xLjIgDQol4uPP0w0KIA0KOCAwIG9iag0KPDwNCi9MZW5ndGggOSAwIFINCi9GaWx0ZXIg L0ZsYXRlRGVjb2RlIA0KPj4NCnN0cmVhbQ0KSIlVkMlugzAURb/A//CWZIH7PIDNrolipEqRWgmW 2VAElJZBApL+fj3QKpVZ2Ojd4+PLgNm1dEBECvZTHCGRCEsDLTmVJFM0gTSlKgEozwTBLTf+lCMw Sbn735IYKWZS230NSLnmwm6/IeJwvHW3dQOOiAcoPwlHbYnoaOBSOgspT1AqxF5MmccOZy6FgWvU T+28jNVwPcDpNfccoZmTCiCkwgvW/mwBzM/EidLOkGdyfwA4bfmozQSKXVswpUPc3Ofh3k8dXM7H Nyjqj2aswEzb0jerJzPFIE5E4PiH8P1+KoOKpVwjp//gLBOnEet/NlyFU0tcG/yvDa5wL9EMQzNB sc1f++1xKjxI4C/IRqWUjw2sfvy5suX3E+3fR1rPo0+bkvwAdnd0WQ0KZW5kc3RyZWFtDQplbmRv YmoNCjkgMCBvYmoNCjI5OA0KZW5kb2JqDQo0IDAgb2JqDQo8PA0KL1R5cGUgL1BhZ2UNCi9QYXJl bnQgNSAwIFINCi9SZXNvdXJjZXMgPDwNCi9Gb250IDw8DQovRjAgNiAwIFIgDQo+Pg0KL1Byb2NT ZXQgMiAwIFINCj4+DQovQ29udGVudHMgOCAwIFINCj4+DQplbmRvYmoNCjExIDAgb2JqDQo8PA0K L0xlbmd0aCAxMiAwIFINCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlIA0KPj4NCnN0cmVhbQ0KSImlksvO mzAQhZ+Adzir6s8C6hvYdJdfTapKlVqpSN1kQ4khbhNAhihSn76+AL1uqsoI2dbMN2fOmIK6ZTsk vID7JCPIBYHVaJPnKilllqMoMpkD1euEwC8f/vJIQEXG/H2bpCQjpVBu34BkTDHutg88Mezv3X2a wQghO1RfEkaUIxJPg89SZcwKBClj2ttDdUw97vDu4wGnJ9O3g73V19MOz++PgcMV9aIiiGQ8CGzC 2dcNMalwynMIIRb98KrFz6qpEmJRzSUtY3ao6gph3+n+XEcWZdxTUiU2Eme/9F+u/VMul/7fDPX1 Fc561vZmeo3HRc8XbeF/GmbCdG9b0xjdz9EdiZSrSI3+BEuCPYzneaSa3vG0c9X08MaYvkPdw7uG x2C/+nNnh/sYmOQPZFmsTOoOkek4TpVTNA+jaWLLXo1Qq3c+9TebT4zlq+5tpJSWfOULwVkM/WCH z1d9wzTXs76t/S4l/olPpNg8oZSpGPrJ9Q3j0DBnRzfO1Xo2Q48XGK0ZrJnNt3DxX62RnG6vVTHx o/RmOZpLbd143Kv1lvqZ/HUKlBb5+vDIAtqP43WRPWFvdX3ahdxDlXwHpn3mqA0KZW5kc3RyZWFt DQplbmRvYmoNCjEyIDAgb2JqDQo0NTENCmVuZG9iag0KMTAgMCBvYmoNCjw8DQovVHlwZSAvUGFn ZQ0KL1BhcmVudCA1IDAgUg0KL1Jlc291cmNlcyA8PA0KL0ZvbnQgPDwNCi9GMCA2IDAgUiANCj4+ DQovUHJvY1NldCAyIDAgUg0KPj4NCi9Db250ZW50cyAxMSAwIFINCj4+DQplbmRvYmoNCjE0IDAg b2JqDQo8PA0KL0xlbmd0aCAxNSAwIFINCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlIA0KPj4NCnN0cmVh bQ0KSImlVMtu2zAQ/AL/wx6dIlZJ6ulj0thAgaANGh968EUP2mZAkwJJO/Dfd0lKitOm6KGQYKxk 7szs7qwoULzMHmZpAXiXjECeETAcdrP7zWxZJjkURVLmAJuHGQF/+eOf1wRoljD/fjdbkIQsswrj FkjCKpZi+ApzBnen/ck6YISQG9i8zBipEJF4NPBZ1TJmBYSyjGlfV5v1wsOtHp9XsJ0LtdPmWMvt Ddx/XwectKJeVAQiSRoEtuEZAdJwZpGxJWQFG9SD14w1joJTOuSMISY+Gd1IfoRnVzt+5MpFIFpQ X+oi9+JHKJaNUPQd+ZaxPNZaXhVKWDGyxRBPPj7cPZ1TLPDH+gtgFl3gD8MqO25bIxpu4aBfoZUC lVhoaxVwCSzYKMRD03Q5QscQoaVusQKoVYezdEbwMwd3wBcOH5oT/uUuPbe3oJsX3jrkqK1FPkwI HJtPUXVZTapDiNAacQzY9sCPNZiTxKzXg2gPsNdnbhRCAMo1FxAqUHbCIIM2l0n8MvomqKdF9a55 c+FsnDB5G3AYV1ZO48oGo4A9NVFISKGUXne8zN+0D/Pd3iSwQU0n1XEjL0Ltx0KOuuMShMXe74Ti 3TD4LNjsfb9zOvU7hgiMtf5MckK282Uaui6x/QbpIg5aYRFGE2v+h1+CR/JpL2KMJ79xEXo/+EZp E0mhPRmDPZeXQb23zcdWqdhklRAiat0dhRLWmdoJdMmV26A91GofjBNHkmf/MRBajNwx8se9Y4Zd LX5vMy2mjYkhJvRGO91qmcAzOtrUEt1lnVDoYHHsZVhZLEMr3Jwai2k4Vx/ajtBsAs8m7F5b3t2G +QmF89M9cjRCCnfx1lCcd7wDp6GW8i8dZuHbF4DZ+Bms+16KdtCF2b2s29BVMe0R0iGqugCeRVoj 0D5vi3htl2H4lhtsQNQa1MDVHLUJPPys5Xkg+rML3llpdg0dtUTLrjazX0IqnnsNCmVuZHN0cmVh bQ0KZW5kb2JqDQoxNSAwIG9iag0KNzI4DQplbmRvYmoNCjEzIDAgb2JqDQo8PA0KL1R5cGUgL1Bh Z2UNCi9QYXJlbnQgNSAwIFINCi9SZXNvdXJjZXMgPDwNCi9Gb250IDw8DQovRjAgNiAwIFIgDQo+ Pg0KL1Byb2NTZXQgMiAwIFINCj4+DQovQ29udGVudHMgMTQgMCBSDQo+Pg0KZW5kb2JqDQoxNyAw IG9iag0KPDwNCi9MZW5ndGggMTggMCBSDQovRmlsdGVyIC9GbGF0ZURlY29kZSANCj4+DQpzdHJl YW0NCkiJpVbbbuM2EP0C/8M8JmjikLJu3pdiNxcgwBZdtH7MCy2NbW5lUUtS9vrvOyRFy04coJvC ATKyqbmdM2fIgdNHr2Eyy4H+ioRBljLQCKvJl8VkXkwzyPNpkQEsHiYM3Mcdv3tiwNNp4r5fTW7Z lM3TkuwK2DQpkxmZe7hK4HO/7o2FhDF2DYvvk4SV5JE5b+DeKufhLe+hKMJrz4+Lp1vn7vHr34/w ciXbldJb0bxcw5c/n7yfWcldUsERm858gpV/JgepP3M7y3NIizxk+QAu5yT1CVO0NCuOkYNNL37T qlMGa3i2uDXBS5J7D+Tt6IWXsezZadiXJMlClcUxM8az2TFOsOnkA65ki7BRe/j68PnbbgZVI7G1 BirRQqVRWATR1lBtRLvGUHJeujyOjrNidBxscgymX5pqg1vh3ynT8Xx60upg0/kp3KvWyBr1p1Bt ms5CtXwausZeVZiHCpMzGFk+YB8sOrnWqu9kuwa18iVCyAqEtVoueypvJ5oezQ3gdD3db4QdTlgB 0lAZXae0xfoG3G8+JoPbhA9U9J0txoKCHeMaaJFAtAqMFQf6v0a7QU1UGrLoRPWPWKN5ub6B86+g xg7bGttKYiSAq/UXGuK6UI7YBJvOdlpVWPcajYfWUNTWysoAsZvCayutVC31LDicz0e4yQ9n84Fs 0bwA9+ycIekJQ9L4iqi3spXGamHljlhGZDNxXuZUJxtpnoVue6YneZLBJbLTMMSInCc8EiHhAyK1 NJXaoT44Kozw20OHoDpXsoFbqBW1xW4I+iU2ingj2/A4wONxBWqUj5nO89N283J+mlpTiw5/BtKk xVkXk6ElV7+HkjNSuMKhyyKxTuY7IP0+xvwEY/4GY4fqFvXaDUGL+1gINrj1ky5b4mfAjeRrVLMP YO1eieob2+6BHWa65J7BSVTC/zbTScyBFVFearSoHX2oJtE0ai+WDQ4iZdy84U9ilvt1qFa2VdPX 7gu5pQmzoEjeeq2pA/DwvBjneqwjPaNZTYJwNoavingPHc5OxIGVF9HpO/LuS6Fx1LhVO/fwuoQI 2MfEIHTyOBXBHKaiN+YOd6qhKewNrvoGLFabVv4gXbyjZvnRsE4adyRJSht3jLpck6a5/IcEVYdu lunwW5kMW6eI4XlcdAQVvbURXfC5EltJC8i4EaVa9f/RPs7zsfN8WAeirr26iSZmrbEjHCiYT91x ZyUqSsK61UfKSFrs2n5SHcm3xtUnuP/jmdZJh9XFrRBH5/ZoU/jf4K+nexprlr5cf1zUs3T07G06 61Y45d571JoD0ColUV+R2C2/I/G9aoQxbs05vXPbzlZuDSEex4CaIRs3Fz5kxs+3vNPkd6QtO1f7 YQdfxQpzUvKxwONd5fIthZ3sUhZ3abwawFv0tqrGZtSyJR4UzZDd0OWJkP3RS037lyTctZ3icU/j y1s8GbsabIq8V31Tk1fSPCKE0xjHdy8mxrGFHrS/QnmK+FURL0nz03vhr12S/M0ojsqQiR+Hw9Qf fFxM/gUUDfpxDQplbmRzdHJlYW0NCmVuZG9iag0KMTggMCBvYmoNCjExNDUNCmVuZG9iag0KMTYg MCBvYmoNCjw8DQovVHlwZSAvUGFnZQ0KL1BhcmVudCA1IDAgUg0KL1Jlc291cmNlcyA8PA0KL0Zv bnQgPDwNCi9GMCA2IDAgUiANCj4+DQovUHJvY1NldCAyIDAgUg0KPj4NCi9Db250ZW50cyAxNyAw IFINCj4+DQplbmRvYmoNCjIwIDAgb2JqDQo8PA0KL0xlbmd0aCAyMSAwIFINCi9GaWx0ZXIgL0Zs YXRlRGVjb2RlIA0KPj4NCnN0cmVhbQ0KSImNkstqwzAQRb/A/3CXSandkeSHvExJAoVCC/EyG9eR E7epFWyH0L+vHo5TCoUiL2ShOXNmRgzMrG6PQKQwX8YJSUzoFOrgsQjyLEqQplGWAMUyINhlrz+s CSyOuD2vg5AiymNp9hUo4pILs71gxrE478/9AE5EcxTvASdpiGRpsFEy91GOkGU+7GlVrEOLWz1v VtjOmrbW3Wd53M7x+LJ2HCGZlfIgioQTrNy/ASTuThhTZg1Fno8FwGrHk7bJydiUn+X5qP1yHqBr bCp9Up7EpEAo2cQQ/Gfpv7JvOfcCPLtVymLBrv2hJPU3i4PCRXcfTbvHvtPnEy7N8YhWD9ipumkV yvbLoQihkD7ncmwWn9odj33rq4P6LHs0Q6+OtTc3DmGcRrfAf8mavox0EnKU3Ti6eRon3TeD7hrV 3xvVNnxeLl6xazpV+dM/hBMxTZo5ecMs251DXKO/sCuH8q3sVY/SPELtJuGAxZ0zS/jVbNy6us2g 7MSG3/2MXOiqCL4BBvC3mA0KZW5kc3RyZWFtDQplbmRvYmoNCjIxIDAgb2JqDQozOTENCmVuZG9i ag0KMTkgMCBvYmoNCjw8DQovVHlwZSAvUGFnZQ0KL1BhcmVudCA1IDAgUg0KL1Jlc291cmNlcyA8 PA0KL0ZvbnQgPDwNCi9GMCA2IDAgUiANCj4+DQovUHJvY1NldCAyIDAgUg0KPj4NCi9Db250ZW50 cyAyMCAwIFINCj4+DQplbmRvYmoNCjIzIDAgb2JqDQo8PA0KL0xlbmd0aCAyNCAwIFINCi9GaWx0 ZXIgL0ZsYXRlRGVjb2RlIA0KPj4NCnN0cmVhbQ0KSIlNkM1OwzAQhJ/A7zDH9JCwWduxKxAShVRC QuJAjrmE1ilBpUVpCuLt8U8LlX1Yr3a+nXGJ0p9xAyEr+GuYoBVhdOjFohFzU2hUVWE00DwIQjhh /GpJKFXBod+LnAqaK+vrFahgy9KX38gYd8fN8TCBiWiG5l0wWU+kQENQ2XlSRYIxSfZYN8s84Oqn lxptNuz6/fjRbdsZFs/LyJG2DKYSiAoZDa7i2wOqOJNLbcKQUuYUAMG2urTt/URhdv/WjZMbk5Al e5d5Jf9EvnGR9bwua5l1ymX+Q5VSl6evkMxVsnQz7fHqsHZfbrv/dGt0vV+HYTdMQ7fFOWIIeB2J hFzatDRRtZZnqmKbqIep+8F03Ln1bRTVjfgF/K1sOA0KZW5kc3RyZWFtDQplbmRvYmoNCjI0IDAg b2JqDQoyODYNCmVuZG9iag0KMjIgMCBvYmoNCjw8DQovVHlwZSAvUGFnZQ0KL1BhcmVudCA1IDAg Ug0KL1Jlc291cmNlcyA8PA0KL0ZvbnQgPDwNCi9GMCA2IDAgUiANCj4+DQovUHJvY1NldCAyIDAg Ug0KPj4NCi9Db250ZW50cyAyMyAwIFINCj4+DQplbmRvYmoNCjYgMCBvYmoNCjw8DQovVHlwZSAv Rm9udA0KL1N1YnR5cGUgL1RydWVUeXBlDQovTmFtZSAvRjANCi9CYXNlRm9udCAvVGltZXNOZXdS b21hbg0KL0ZpcnN0Q2hhciAzMQ0KL0xhc3RDaGFyIDI1NQ0KL1dpZHRocyBbIDc3OCAyNTAgMzMz IDQwOCA1MDAgNTAwIDgzMyA3NzggMTgwIDMzMyAzMzMgNTAwIDU2NCAyNTAgMzMzIDI1MCANCjI3 OCA1MDAgNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgMjc4IDI3OCA1NjQgNTY0 IDU2NCANCjQ0NCA5MjEgNzIyIDY2NyA2NjcgNzIyIDYxMSA1NTYgNzIyIDcyMiAzMzMgMzg5IDcy MiA2MTEgODg5IDcyMiANCjcyMiA1NTYgNzIyIDY2NyA1NTYgNjExIDcyMiA3MjIgOTQ0IDcyMiA3 MjIgNjExIDMzMyAyNzggMzMzIDQ2OSANCjUwMCAzMzMgNDQ0IDUwMCA0NDQgNTAwIDQ0NCAzMzMg NTAwIDUwMCAyNzggMjc4IDUwMCAyNzggNzc4IDUwMCANCjUwMCA1MDAgNTAwIDMzMyAzODkgMjc4 IDUwMCA1MDAgNzIyIDUwMCA1MDAgNDQ0IDQ4MCAyMDAgNDgwIDU0MSANCjc3OCA1MDAgNzc4IDMz MyA1MDAgNDQ0IDEwMDAgNTAwIDUwMCAzMzMgMTAwMCA1NTYgMzMzIDg4OSA3NzggNzc4IA0KNzc4 IDc3OCAzMzMgMzMzIDQ0NCA0NDQgMzUwIDUwMCAxMDAwIDMzMyA5ODAgMzg5IDMzMyA3MjIgNzc4 IDc3OCANCjcyMiAyNTAgMzMzIDUwMCA1MDAgNTAwIDUwMCAyMDAgNTAwIDMzMyA3NjAgMjc2IDUw MCA1NjQgMzMzIDc2MCANCjUwMCA0MDAgNTQ5IDMwMCAzMDAgMzMzIDU3NiA0NTMgMjUwIDMzMyAz MDAgMzEwIDUwMCA3NTAgNzUwIDc1MCANCjQ0NCA3MjIgNzIyIDcyMiA3MjIgNzIyIDcyMiA4ODkg NjY3IDYxMSA2MTEgNjExIDYxMSAzMzMgMzMzIDMzMyANCjMzMyA3MjIgNzIyIDcyMiA3MjIgNzIy IDcyMiA3MjIgNTY0IDcyMiA3MjIgNzIyIDcyMiA3MjIgNzIyIDU1NiANCjUwMCA0NDQgNDQ0IDQ0 NCA0NDQgNDQ0IDQ0NCA2NjcgNDQ0IDQ0NCA0NDQgNDQ0IDQ0NCAyNzggMjc4IDI3OCANCjI3OCA1 MDAgNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTQ5IDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwIDUw MCANCjUwMCBdDQovRW5jb2RpbmcgL1dpbkFuc2lFbmNvZGluZw0KL0ZvbnREZXNjcmlwdG9yIDcg MCBSDQo+Pg0KZW5kb2JqDQo3IDAgb2JqDQo8PA0KL1R5cGUgL0ZvbnREZXNjcmlwdG9yDQovRm9u dE5hbWUgL1RpbWVzTmV3Um9tYW4NCi9GbGFncyAzNA0KL0ZvbnRCQm94IFsgLTI1MCAtMjYzIDEy NjQgODQyIF0NCi9NaXNzaW5nV2lkdGggNzg5DQovU3RlbVYgNzYNCi9TdGVtSCA3Ng0KL0l0YWxp Y0FuZ2xlIDANCi9DYXBIZWlnaHQgODQyDQovWEhlaWdodCA1ODkNCi9Bc2NlbnQgODQyDQovRGVz Y2VudCAtMjYzDQovTGVhZGluZyAxNTgNCi9NYXhXaWR0aCAxMDUzDQovQXZnV2lkdGggNDIxDQo+ Pg0KZW5kb2JqDQoyIDAgb2JqDQpbIC9QREYgL1RleHQgIF0NCmVuZG9iag0KNSAwIG9iag0KPDwN Ci9LaWRzIFs0IDAgUiAxMCAwIFIgMTMgMCBSIDE2IDAgUiAxOSAwIFIgMjIgMCBSIF0NCi9Db3Vu dCA2DQovVHlwZSAvUGFnZXMNCi9NZWRpYUJveCBbIDAgMCA3OTIgNjEyIF0NCj4+DQplbmRvYmoN CjEgMCBvYmoNCjw8DQovQ3JlYXRvciA8RkVGRjAwNEQwMDY5MDA2MzAwNzIwMDZGMDA3MzAwNkYw MDY2MDA3NDAwMjAwMDUwMDA2RjAwNzcwMDY1MDA3MjAwNTAwMDZGMDA2OTAwNkUwMDc0MDAyMD4N Ci9DcmVhdGlvbkRhdGUgKEQ6MjAwMDA4MDgwNzU3MDIpDQovVGl0bGUgPEZFRkYwMDczMDA2QzAw NjkwMDY0MDA2NTAwNzM+DQovQXV0aG9yIDxGRUZGMDA2NTAwNzMwMDc0MDA2RjAwNkIwMDY1MDA3 Mz4NCi9Qcm9kdWNlciAoQWNyb2JhdCBQREZXcml0ZXIgNC4wIGZvciBXaW5kb3dzKQ0KPj4NCmVu ZG9iag0KMyAwIG9iag0KPDwNCi9QYWdlcyA1IDAgUg0KL1R5cGUgL0NhdGFsb2cNCi9EZWZhdWx0 R3JheSAyNSAwIFINCi9EZWZhdWx0UkdCICAyNiAwIFINCj4+DQplbmRvYmoNCjI1IDAgb2JqDQpb L0NhbEdyYXkNCjw8DQovV2hpdGVQb2ludCBbMC45NjQzIDEgMC44MjUxIF0NCi9HYW1tYSAxLjkg DQo+Pg0KXQ0KZW5kb2JqDQoyNiAwIG9iag0KWy9DYWxSR0INCjw8DQovV2hpdGVQb2ludCBbMC45 NjQzIDEgMC44MjUxIF0NCi9HYW1tYSBbMS45IDEuOSAxLjkgXQ0KL01hdHJpeCBbMC41MTEgMC4y OTAzIDAuMDI3MyAwLjMyNjQgMC42NDk5IDAuMTI3OSAwLjEyNjggMC4wNTk4IDAuNjY5OSBdDQo+ Pg0KXQ0KZW5kb2JqDQp4cmVmDQowIDI3DQowMDAwMDAwMDAwIDY1NTM1IGYNCjAwMDAwMDYzMjgg MDAwMDAgbg0KMDAwMDAwNjE2NyAwMDAwMCBuDQowMDAwMDA2NjE4IDAwMDAwIG4NCjAwMDAwMDA0 MjUgMDAwMDAgbg0KMDAwMDAwNjIwMSAwMDAwMCBuDQowMDAwMDA0NzY4IDAwMDAwIG4NCjAwMDAw MDU4ODggMDAwMDAgbg0KMDAwMDAwMDAyMSAwMDAwMCBuDQowMDAwMDAwNDAzIDAwMDAwIG4NCjAw MDAwMDExMTYgMDAwMDAgbg0KMDAwMDAwMDU1NiAwMDAwMCBuDQowMDAwMDAxMDkzIDAwMDAwIG4N CjAwMDAwMDIwODYgMDAwMDAgbg0KMDAwMDAwMTI0OSAwMDAwMCBuDQowMDAwMDAyMDYzIDAwMDAw IG4NCjAwMDAwMDM0NzQgMDAwMDAgbg0KMDAwMDAwMjIxOSAwMDAwMCBuDQowMDAwMDAzNDUwIDAw MDAwIG4NCjAwMDAwMDQxMDcgMDAwMDAgbg0KMDAwMDAwMzYwNyAwMDAwMCBuDQowMDAwMDA0MDg0 IDAwMDAwIG4NCjAwMDAwMDQ2MzUgMDAwMDAgbg0KMDAwMDAwNDI0MCAwMDAwMCBuDQowMDAwMDA0 NjEyIDAwMDAwIG4NCjAwMDAwMDY3MTUgMDAwMDAgbg0KMDAwMDAwNjgwMCAwMDAwMCBuDQp0cmFp bGVyDQo8PA0KL1NpemUgMjcNCi9Sb290IDMgMCBSDQovSW5mbyAxIDAgUg0KL0lEIFs8NTc4Yjkw OGJhODc3NmU1YjY5ZDg5ZThlMTc1NTY2OGE+PDU3OGI5MDhiYTg3NzZlNWI2OWQ4OWU4ZTE3NTU2 NjhhPl0NCj4+DQpzdGFydHhyZWYNCjY5NjgNCiUlRU9GDQo= --=====================_4601693==_-- From list@netscape.com Tue Aug 8 15:50:37 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA01355 for ; Tue, 8 Aug 2000 15:50:36 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e78JdrA17717; Tue, 8 Aug 2000 12:39:53 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e78Jn9E20774; Tue, 8 Aug 2000 12:49:09 -0700 (PDT) Resent-Date: Tue, 8 Aug 2000 12:49:09 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Tue, 08 Aug 2000 13:48:08 -0600 From: "Jim Sermersheim" To: , Subject: Re: Duplicate entries filter Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id e78Jn7920746 Resent-Message-ID: <"SHM7R.A.QEF.zQGk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit Oh yeah, now I remember. This is an addition that Kurt pointed out should be there. The thinking was that it'd be unexpected to return entries that don't match the search filter. This being the case, there's a bit of functionality crossover between the dupent and matchedval drafts (under the right conditions). Jim >>> "David Chadwick" 8/5/00 5:44:38 PM >>> Jim as we discussed at the Pittsburgh meeting, the text still says that duplicate entries will only be returned that pass the filter. Is this still the intention or is it a mistake. Text reproduced below: "These duplicate entries are returned to the client only if they still match the asserted search filter." David *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Tue Aug 8 15:59:33 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA06846 for ; Tue, 8 Aug 2000 15:59:32 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e78Jhuj02305; Tue, 8 Aug 2000 12:43:57 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e78JnIc20968; Tue, 8 Aug 2000 12:49:18 -0700 (PDT) Resent-Date: Tue, 8 Aug 2000 12:49:18 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Tue, 08 Aug 2000 13:48:21 -0600 From: "Jim Sermersheim" To: , Subject: Re: Duplicate Entries question Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id e78JnF920906 Resent-Message-ID: <"d1t0rC.A.9GF.7QGk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit >>> "David Chadwick" 8/5/00 5:44:34 PM >>> >Jim > >How do you envisage the criticality flag and the partial control flag >interacting, for all four combinations, viz: > >i) critical false, partial true - presumably the server can duplicate >entries from zero to all of the attributes If ther server is able to, it may duplicate a subset of the applicable search results. If the server is unable to process the control, it is ignored. >ii) critical true, partial false - presumably the server must duplicate >entries for all of the attributes or fail If ther server is able to, it must duplicate all of the applicable search results. If the server is unable to process the control, the operation fails. >Now here are the interesting ones > >iii) critical false, partial false - the server can duplicate entries for >zero OR all of the attributes, but not some number in between ? If ther server is able to, it must duplicate all of the applicable search results. If the server is unable to process the control, the control is ignored. >iv) critical true, partial true - the server can duplicate entries from >zero to all of the attributes, same as case i)? If this is the case it >means that criticality has no effect when partial is true. If ther server is able to, it may duplicate a subset of the applicable search results. If the server is unable to process the control, the operation fails. >I wonder if we really need both flags? If we wrote the spec to say >that if critical is false, the server can choose to duplicate entries >from any, all or none of the attributes, and if critical is true it must >do all or give an error, then we dont need the partial flag do we? > >David The evaluation of the criticality flag lies in whether the server is able to understand and support the control at all. If the criticality flag is TRUE, the control MUST be executed as specified. If I want the behavior of i), I need both flags. Jim From list@netscape.com Tue Aug 8 16:51:48 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA08836 for ; Tue, 8 Aug 2000 16:51:47 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e78KcNA27408; Tue, 8 Aug 2000 13:38:23 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e78KldU23421; Tue, 8 Aug 2000 13:47:39 -0700 (PDT) Resent-Date: Tue, 8 Aug 2000 13:47:39 -0700 (PDT) Message-Id: <4.3.2.7.0.20000808132517.00b20810@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 08 Aug 2000 13:43:38 -0700 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" Subject: Re: Duplicate entries filter Cc: , In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"aZcDlB.A.rtF.qHHk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 01:48 PM 8/8/00 -0600, Jim Sermersheim wrote: >Oh yeah, now I remember. This is an addition that Kurt pointed out should be there. The thinking was that it'd be unexpected to return entries that don't match the search filter. This being the case, there's a bit of functionality crossover between the dupent and matchedval drafts (under the right conditions). Of course, it quite normal (for a non-extended search) for returned entries not to match don't match the filter... (because of access controls or whatever). Basically, it's a issue of semantics. Is the filter applied before or after duplication? (note: servers often use the the filter for selection of "candidates" within scope, but this is an optimization which is irrelevant as long as outcome is not changed). That is, a) all entries within scope are duplicated per the control, then filtered. b) all entries within scope are filtered, then duplicated per the control. I find a) more useful than b). However, there could be room for both. Dare I suggest another BOOLEAN? Kurt From list@netscape.com Tue Aug 8 21:46:58 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA05272 for ; Tue, 8 Aug 2000 21:46:57 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e791a1A22804; Tue, 8 Aug 2000 18:36:02 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e791jIs11693; Tue, 8 Aug 2000 18:45:18 -0700 (PDT) Resent-Date: Tue, 8 Aug 2000 18:45:18 -0700 (PDT) Message-ID: <00c401c0019f$bdfbd680$8c00000a@ibm> From: "Oz" Cc: To: Subject: Wizard of OZ Press Release Date: Tue, 8 Aug 2000 21:14:09 -0400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00B7_01C0017D.97E85760" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Resent-Message-ID: <"3MofED.A.Z2C.seLk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a multi-part message in MIME format. ------=_NextPart_000_00B7_01C0017D.97E85760 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable NEWS RELEASE!! All SEVEN of the SURVIVING original "Wizard of OZ" Munchkins will be = making a=20 RARE and UNIQUE appearance in Atlantic City Convention Center, New = Jersey on=20 October 21-22, 2000. This is truly a once-in-a-lifetime experience. Come out and meet those = little=20 magical stars of that 1939 CLASSIC. Oz photos and other memorabilia = will be=20 available for a nominal fee. Come on out and get their AUTOGRAPHS!!! = For=20 further details, visit: www.eagle-sports.com MUNCHKINS CRUISE into the Caribbean seas this April 1-8, 2001 leaving = Fort=20 Lauderdale on the cruise of a lifetime. Wanna come? Check it out at: =20 www.cruise-eta.com Remember...."Follow The Yellow Brick Road"! If you wish to be removed from any future mailings, please email us and = we will remove your email. ------=_NextPart_000_00B7_01C0017D.97E85760 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
NEWS RELEASE!!

All SEVEN of the SURVIVING = original=20 "Wizard of OZ" Munchkins will be making a
RARE and UNIQUE appearance = in=20 Atlantic City Convention Center, New Jersey  on
October 21-22,=20 2000.

This is truly a once-in-a-lifetime experience. Come out and = meet=20 those little
magical stars of that 1939 CLASSIC.  Oz photos and = other=20 memorabilia will be
available for a nominal fee. Come on out and get = their=20 AUTOGRAPHS!!!  For
further details, visit:  www.eagle-sports.com

MUNC= HKINS=20 CRUISE into the Caribbean seas this April 1-8, 2001 leaving Fort =
Lauderdale=20 on the cruise of a lifetime.  Wanna come?  Check it out = at: =20
www.cruise-eta.com

Remember= ...."Follow=20 The Yellow Brick Road"!
If you wish to be removed from any future mailings, = please=20 email us and we will remove your=20 email.
------=_NextPart_000_00B7_01C0017D.97E85760-- From list@netscape.com Wed Aug 9 18:37:17 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA22316 for ; Wed, 9 Aug 2000 18:37:16 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e79MULj07908; Wed, 9 Aug 2000 15:30:22 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e79MZiQ04106; Wed, 9 Aug 2000 15:35:44 -0700 (PDT) Resent-Date: Wed, 9 Aug 2000 15:35:44 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Wed, 09 Aug 2000 16:27:51 -0600 From: "Jim Sermersheim" To: Cc: , Subject: Re: Duplicate entries filter Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_BAE21FA6.A6C7AB9C" Resent-Message-ID: <"HQKO6C.A.4_.-ydk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_BAE21FA6.A6C7AB9C Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable >>> "Kurt D. Zeilenga" 8/8/00 2:43:38 PM >>> >>Oh yeah, now I remember. This is an addition that Kurt pointed out = should be there. The thinking was that it'd be unexpected to return = entries that don't match the search filter. This being the case, there's a = bit of functionality crossover between the dupent and matchedval drafts = (under the right conditions). > >Of course, it quite normal (for a non-extended search) for returned >entries not to match don't match the filter... (because of access >controls or whatever). > >Basically, it's a issue of semantics. Is the filter applied >before or after duplication? (note: servers often use the >the filter for selection of "candidates" within scope, but this >is an optimization which is irrelevant as long as outcome is >not changed). Hmm, I think the wording in the draft should be changed to reflect this. = Currently it says "These duplicate entries are returned to the client only = if they still match the asserted search filter". That's a little ambiguous.= >That is, > a) all entries within scope are duplicated per the control, > then filtered. > > b) all entries within scope are filtered, then duplicated > per the control. > >I find a) more useful than b). However, there could be room for >both. Dare I suggest another BOOLEAN? Adding another flag is certainly more flexible - and it forces people to = consider the issue, it just adds more implementation complexity. I don't = mind adding it, what does anyone else think? Jim --=_BAE21FA6.A6C7AB9C Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
>>> "Kurt D. Zeilenga" <Kurt@OpenLDAP.org&g= t;=20 8/8/00 2:43:38 PM >>>
>>Oh yeah, now I remember.  = This is=20 an addition that Kurt pointed out should be there. The thinking was that = it'd be=20 unexpected to return entries that don't match the search filter. This = being the=20 case, there's a bit of functionality crossover between the dupent and = matchedval=20 drafts (under the right conditions).
>
>Of course, it quite = normal=20 (for a non-extended search) for returned
>entries not to match don't = match=20 the filter... (because of access
>controls or=20 whatever).
>
>Basically, it's a issue of semantics.  Is = the=20 filter applied
>before or after duplication?  (note: servers = often=20 use the
>the filter for selection of "candidates" within scope, = but=20 this
>is an optimization which is irrelevant as long as outcome=20 is
>not changed).
 
Hmm, I think the wording in the draft should be = changed to=20 reflect this. Currently it says "These duplicate entries are returned to = the=20 client only if they still match the asserted search filter". That's a = little=20 ambiguous.
>That is,
>      = ; =20 a) all entries within scope are duplicated per the=20 control,
>      then filtered.
>
>        b) all = entries=20 within scope are filtered, then=20 duplicated
>        per the=20 control.
>
>I find a) more useful than b).  However, = there=20 could be room for
>both.  Dare I suggest another=20 BOOLEAN?
Adding another flag is certainly more flexible - and = it forces=20 people to consider the issue, it just adds more implementation complexity. = I=20 don't mind adding it, what does anyone else think?
 
Jim


--=_BAE21FA6.A6C7AB9C-- From list@netscape.com Wed Aug 9 19:03:56 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA22507 for ; Wed, 9 Aug 2000 19:03:56 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e79Mv7j12634; Wed, 9 Aug 2000 15:57:07 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e79N2Tk20297; Wed, 9 Aug 2000 16:02:29 -0700 (PDT) Resent-Date: Wed, 9 Aug 2000 16:02:29 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Wed, 09 Aug 2000 17:02:20 -0600 From: "Jim Sermersheim" To: Subject: Extended operation errors Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_CD9568EF.9FFE92AF" Resent-Message-ID: <"sySuE.A.38E.EMek5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_CD9568EF.9FFE92AF Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable I have two questions concerning proper result codes to be returned for = extended operations. The first is, what should be returned when a server = does not support a particular extended operation? We could return other, = or maybe protocolError or unwillingToPerform. This is different from the = case where a server supports the extended operation, but is unable to = service it at this time (in which case busy should be returned). The other has to do with extended operations that need to report error = conditions that are not currently defined. For example, say there's an = extended operation that starts the replication process, an error may need = to be returned that states that the replication agreement is not defined = correctly. In this case, none of the existing LDAP resultCodes can = sufficiently communicate the problem. I propose that each extension = define its own error reporting mechanism (if appropriate), and we either = create yet another result code called extendedOperationError, or just use = other to signal that one should look at the results of the extended = operation. Any other ideas? --=_CD9568EF.9FFE92AF Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
I have two questions concerning proper result codes to be returned = for=20 extended operations. The first is, what should be returned when a server = does=20 not support a particular extended operation? We could return other, or = maybe=20 protocolError or unwillingToPerform. This is different from the case where = a=20 server supports the extended operation, but is unable to service it at = this time=20 (in which case busy should be returned).
 
The other has to do with extended operations that need to report = error=20 conditions that are not currently defined. For example, say there's an = extended=20 operation that starts the replication process, an error may need to = be=20 returned that states that the replication agreement is not = defined=20 correctly. In this case, none of the existing LDAP resultCodes can = sufficiently=20 communicate the problem.  I propose that each extension define its = own=20 error reporting mechanism (if appropriate), and we either create yet = another=20 result code called extendedOperationError, or just use other to signal = that one=20 should look at the results of the extended operation.
 
Any other ideas?
--=_CD9568EF.9FFE92AF-- From list@netscape.com Wed Aug 9 19:49:37 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA22893 for ; Wed, 9 Aug 2000 19:49:37 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e79Ngkj20614; Wed, 9 Aug 2000 16:42:47 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e79Nm9s10449; Wed, 9 Aug 2000 16:48:09 -0700 (PDT) Resent-Date: Wed, 9 Aug 2000 16:48:09 -0700 (PDT) Message-Id: <4.3.2.7.0.20000809164141.00afe7b0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 09 Aug 2000 16:46:58 -0700 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" Subject: Re: Extended operation errors Cc: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"J6ESgC.A.9iC.42ek5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:02 PM 8/9/00 -0600, Jim Sermersheim wrote: >I have two questions concerning proper result codes to be returned for extended operations. The first is, what should be returned when a server does not support a particular extended operation? We could return other, or maybe protocolError or unwillingToPerform. protocolError, per 4.12: If the server does not recognize the request name, it MUST return only the response fields from LDAPResult, containing the protocolError result code. >The other has to do with extended operations that need to report error conditions that are not currently defined. For example, say there's an extended operation that starts the replication process, an error may need to be returned that states that the replication agreement is not defined correctly. In this case, none of the existing LDAP resultCodes can sufficiently communicate the problem. I propose that each extension define its own error reporting mechanism (if appropriate), and we either create yet another result code called extendedOperationError, or just use other to signal that one should look at the results of the extended operation. > >Any other ideas? I suggest the specification defining the extended operation define additional resultCodes as needed. From list@netscape.com Wed Aug 9 19:51:03 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA22925 for ; Wed, 9 Aug 2000 19:51:02 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e79NiFj21321; Wed, 9 Aug 2000 16:44:16 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e79Nncc11316; Wed, 9 Aug 2000 16:49:38 -0700 (PDT) Resent-Date: Wed, 9 Aug 2000 16:49:38 -0700 (PDT) Message-Id: <4.3.2.7.0.20000809164706.00b06100@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 09 Aug 2000 16:48:24 -0700 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" Subject: Re: Duplicate entries filter Cc: , In-Reply-To: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=====================_33552035==_.ALT" Resent-Message-ID: <"TI1pV.A.iwC.Q4ek5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=====================_33552035==_.ALT Content-Type: text/plain; charset="us-ascii" At 04:27 PM 8/9/00 -0600, Jim Sermersheim wrote: >Hmm, I think the wording in the draft should be changed to reflect this. Currently it says "These duplicate entries are returned to the client only if they still match the asserted search filter". That's a little ambiguous. Actually, I don't find that ambiguous at all... it's clearly option a). >>That is, >> a) all entries within scope are duplicated per the control, >> then filtered. >> >> b) all entries within scope are filtered, then duplicated >> per the control. >> >>I find a) more useful than b). However, there could be room for >>both. Dare I suggest another BOOLEAN? >Adding another flag is certainly more flexible - and it forces people to consider the issue, it just adds more implementation complexity. I don't mind adding it, what does anyone else think? > >Jim > --=====================_33552035==_.ALT Content-Type: text/html; charset="us-ascii" At 04:27 PM 8/9/00 -0600, Jim Sermersheim wrote:
Hmm, I think the wording in the draft should be changed to reflect this. Currently it says "These duplicate entries are returned to the client only if they still match the asserted search filter". That's a little ambiguous.

Actually, I don't find that ambiguous at all... it's clearly option a).

>That is,
>        a) all entries within scope are duplicated per the control,
>      then filtered.
>
>        b) all entries within scope are filtered, then duplicated
>        per the control.
>
>I find a) more useful than b).  However, there could be room for
>both.  Dare I suggest another BOOLEAN?
Adding another flag is certainly more flexible - and it forces people to consider the issue, it just adds more implementation complexity. I don't mind adding it, what does anyone else think?
 
Jim

--=====================_33552035==_.ALT-- From list@netscape.com Thu Aug 10 02:52:57 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA11865 for ; Thu, 10 Aug 2000 02:52:56 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7A6gQA19766; Wed, 9 Aug 2000 23:42:26 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7A6pjg13839; Wed, 9 Aug 2000 23:51:45 -0700 (PDT) Resent-Date: Wed, 9 Aug 2000 23:51:45 -0700 (PDT) Message-Id: <200008100651.e7A6pcM02384@ywing.netscape.com> From: mnm45@aol.com To: hmng32@aol.com Subject: 3.95% 30 Yr. & 4.95% 40 Yr. Mortgages! Date: Thu, 10 Aug 00 00:35:11 Eastern Daylight Time Reply-To: mnm45@aol.com X-Priority: 3 X-MSMailPriority: Normal Importance: Normal MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_018C_01BD9940.715D52A0" Resent-Message-ID: <"CZ_faD.A.qXD._Dlk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a multi-part message in MIME format. ------=_NextPart_000_018C_01BD9940.715D52A0 Content-Type: text/html; 3.95% 30 year & 4.95% 40 year Mortgages Now Available!
Loans from $50,000 to $1,500,000.
NO Penalty for early payoff.
Self-Employed and can't show income? NO PROBLEM!!

For more Information or to Apply, please visit us at
www.debtfreehome.com

In compliance with the proposed legislation for commercial e-mail, (S.1618
#301 (a)(2)(C)) we are providing legitimate Contact (info@debtfreehome.com)
and Remove (remove@debtfreehome.com) links. Remove requests sent via this
link will immediately stop further transmissions of this message at no cost
to you.





 ------=_NextPart_000_018C_01BD9940.715D52A0-- From list@netscape.com Thu Aug 10 05:00:42 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA12566 for ; Thu, 10 Aug 2000 05:00:41 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7A8nhA29046; Thu, 10 Aug 2000 01:49:43 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7A8x1c16393; Thu, 10 Aug 2000 01:59:01 -0700 (PDT) Resent-Date: Thu, 10 Aug 2000 01:59:01 -0700 (PDT) From: Subject: re:from Lorraine - Philippines $0.23, Japan $.09,china $.31,malaysia$.18 and more,what do you think Date: Thu, 10 Aug 2000 01:30:37 Message-Id: <877.510725.620611@mx.boston.juno.com> Resent-Message-ID: <"6-BzED.A.3_D.U7mk5"@glacier> To: ietf-ldapext@netscape.com Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com ONLY IF YOU WANT YOUR PHONE BILL CUT IN 1/2 !!!!!!!!!!!!$$$$$$$$$$$$$$ -------CLICK HERE--- http://www.hometown.aol.com/cheaprates123/advertisment/index.html _________________________________________________________________ ___________________________ As I promise ,I WILL PAY CUT YOU PHONE BILL IN 1/2 IF YOU JUST GIVE ME A CHANCE!! AT&T,SPRINT, MCI long distance carriers are getting rich off of You and ME Please take a look at My rates, we are sure I will beat their price. There are no monthly or minimum fees or any other hidden costs. You just pay for the time you are on the phone. If your paying less,I will beat what your paying no matter what!!!!!! For a complete rate chart and sign-up info http://www.hometown.aol.com/cheaprates123/advertisment/index.html Example: Germany .05+ USA .05 =.10 per minute Country Code Per Minute Algeria-----------------213 0.26 American Samoa----------684 0.16 Andorra-----------------336 0.17 Angola------------------244 0.36 Anguilla----------------264 0.34 Antigu------------------268 0.40 Aruba-------------------297 0.26 Bahamas-----------------242 0.16 Bangladesh--------------880 0.64 Barbados----------------246 0.42 Belize------------------501 0.51 Bermuda-----------------441 0.16 Canada------------------ 0.07 Cape Verde-------------238 0.43 Caymans-----------------345 0.26 Dominica----------------767 0.44 Dominican Rep.----------809 0.14 Egypt-------------------20 0.51 France------------------33 0.06 Germany-----------------49 0.05 Grand Turk--------------649 0.44 Grenada-----------------473 0.42 Jordan------------------962 0.51 Lebanon*----------------961 0.40 Papua New Guinea-------675 0.31 Saudi Arabia-----------966 0.59 St Helena---------------290 0.59 St Kitts----------------869 0.35 St Lucia----------------758 0.42 St Pierre---------------508 0.22 St Vincent--------------784 0.42 Trinidad----------------868 0.47 U S Virgin--------------340 0.07 United Arab Emirates---971 0.31 United Kingdom----------44 0.05 USA---------------------1 0.05 Add the country you're calling from to the country you're calling, to get the rate per minute Rates apply 24 hrs/day, 7 days per week NO sign-up fees, NO monthly fees, and NO surcharges You DO NOT have to SWITCH your current provider Ideal for Home and Business use Callback service is available to/from anywhere in the world. Contact ME for more information and complete rate table at: mailto:cheaprates1234@earthlink.net http://hometown.aol.com/cheaprates123 Just Tell me what you want to pay !!!!!! If you would like to be removed from our list, please reply to: mailto:cheaprates1234@earthlink.net with the word "remove" in the subject line. **************************************************** From list@netscape.com Thu Aug 10 15:50:09 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA12240 for ; Thu, 10 Aug 2000 15:50:08 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7AJh7j00135; Thu, 10 Aug 2000 12:43:08 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7AJmXA25568; Thu, 10 Aug 2000 12:48:33 -0700 (PDT) Resent-Date: Thu, 10 Aug 2000 12:48:33 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Thu, 10 Aug 2000 13:26:10 -0600 From: "Jim Sermersheim" To: Cc: , Subject: Re: Duplicate entries filter Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_045CA3C7.FF9EF39B" Resent-Message-ID: <"H9Koi.A.5OG.Pcwk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_045CA3C7.FF9EF39B Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable >>> "Kurt D. Zeilenga" 8/9/00 5:48:24 PM >>> >At 04:27 PM 8/9/00 -0600, Jim Sermersheim wrote: >>Hmm, I think the wording in the draft should be changed to reflect this. = Currently it says "These duplicate entries are returned to the client only = if they still match the asserted search filter". That's a little ambiguous.= >Actually, I don't find that ambiguous at all... it's clearly option a). It doesn't say anything about other factors that might cause the entry (as = seen by the client) to not match the filter (like ACI). >>>That is, >>> a) all entries within scope are duplicated per the control, >>> then filtered. >>> >>> b) all entries within scope are filtered, then duplicated >>> per the control. >>> --=_045CA3C7.FF9EF39B Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
>>> "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> 8/9/00 = 5:48:24 PM=20 >>>
>At 04:27 PM 8/9/00 -0600, Jim Sermersheim wrote:
 
>>Hmm, I think the wording in the draft should = be=20 changed to reflect this. Currently it says "These duplicate entries are = returned=20 to the client only if they still match the asserted search filter". That's = a=20 little ambiguous.

>Actually, I don't find that ambiguous at all... it's clearly = option=20 a).
 
It doesn't say anything about other factors that might = cause=20 the entry (as seen by the client) to not match the filter (like=20 ACI).
 
>>>That=20 is,
>>>        a) all = entries=20 within scope are duplicated per the=20 control,
>>>      then=20 filtered.
>>>
>>>        b) all = entries=20 within scope are filtered, then=20 duplicated
>>>        per = the=20 control.
>>>
--=_045CA3C7.FF9EF39B-- From list@netscape.com Thu Aug 10 15:54:05 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA12380 for ; Thu, 10 Aug 2000 15:54:05 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7AJlBj01217; Thu, 10 Aug 2000 12:47:11 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7AJqa628133; Thu, 10 Aug 2000 12:52:36 -0700 (PDT) Resent-Date: Thu, 10 Aug 2000 12:52:36 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Thu, 10 Aug 2000 13:52:25 -0600 From: "Jim Sermersheim" To: Cc: Subject: Re: Extended operation errors Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_DB837C11.B6D7BAC9" Resent-Message-ID: <"ZmBeI.A.T3G.Dgwk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_DB837C11.B6D7BAC9 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable >>> "Kurt D. Zeilenga" 8/9/00 5:46:58 PM >>> >>The other has to do with extended operations that need to report error = conditions that are not currently defined. For example, say there's an = extended operation that starts the replication process, an error may need = to be returned that states that the replication agreement is not defined = correctly. In this case, none of the existing LDAP resultCodes can = sufficiently communicate the problem. I propose that each extension = define its own error reporting mechanism (if appropriate), and we either = create yet another result code called extendedOperationError, or just use = other to signal that one should look at the results of the extended = operation. >>=20 >>Any other ideas? > >I suggest the specification defining the extended operation define >additional resultCodes as needed. Are you suggesting that the new result codes be returned in the resultCode = field of the LDAPResult, or that the extended response provide an = alternate field to report them? The former method won't work with 2251 = (4.1.10, "If a client receives a result code which is not listed above...")= . We could easily fix this in the bis doc. --=_DB837C11.B6D7BAC9 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
>>> "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> 8/9/00 = 5:46:58 PM=20 >>>
>>The other has to do with extended operations that = need=20 to report error conditions that are not currently defined. For example, = say=20 there's an extended operation that starts the replication process, an = error may=20 need to be returned that states that the replication agreement is not = defined=20 correctly. In this case, none of the existing LDAP resultCodes can = sufficiently=20 communicate the problem.  I propose that each extension define its = own=20 error reporting mechanism (if appropriate), and we either create yet = another=20 result code called extendedOperationError, or just use other to signal = that one=20 should look at the results of the extended operation.
>>=20
>>Any other ideas?
>
>I suggest the specification = defining=20 the extended operation define
>additional resultCodes as needed.
 
Are you suggesting that the new result codes be returned in the = resultCode=20 field of the LDAPResult, or that the extended response provide an = alternate=20 field to report them? The former method won't work with 2251 = (4.1.10,=20 "If a client receives a result code which is not listed above..."). We = could=20 easily fix this in the bis doc.



--=_DB837C11.B6D7BAC9-- From list@netscape.com Thu Aug 10 16:44:34 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA13532 for ; Thu, 10 Aug 2000 16:44:33 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7AKX9A21199; Thu, 10 Aug 2000 13:33:10 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7AKbEY22279; Thu, 10 Aug 2000 13:37:14 -0700 (PDT) Resent-Date: Thu, 10 Aug 2000 13:37:14 -0700 (PDT) Message-Id: <200008102036.AAA15763@mail.mirapoint.com> Date: Thu, 10 Aug 2000 13:36:49 -0700 From: Zachary Amsden Subject: Re: controlling visability of subentries To: "Kurt D. Zeilenga" Cc: Ed Reed , zach@mirapoint.com, mcs@netscape.com, ietf-ldup@imc.org, ietf-ldapext@netscape.com X-Mailer: Mirapoint Webmail Direct 2.7.0.22 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"i8gyiD.A.1bF.4Jxk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit >I would suggest the control have a syntax similar to >ManageDsaIT control defined by draft-ietf-ldapext-refer-00.txt >(or draft-zeilenga-ldap-nameref-00.txt) but with semantics of >the X.511 ServiceControls "subentries" option [X.511(97) 5.7f]. > >Kurt How about Control ::= SEQUENCE { controlType = 2.16.840.1.113719.2.142.7.TBD criticality = TRUE controlValue = (not present) } I think it should be critical, since if the server doesn't recognize it, there is no way the request can be processed sucessfully. Zach From list@netscape.com Thu Aug 10 16:54:27 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA13764 for ; Thu, 10 Aug 2000 16:54:27 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7AKhRA23231; Thu, 10 Aug 2000 13:43:27 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7AKql201427; Thu, 10 Aug 2000 13:52:47 -0700 (PDT) Resent-Date: Thu, 10 Aug 2000 13:52:47 -0700 (PDT) Message-Id: <4.3.2.7.0.20000810133453.00b0f780@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 10 Aug 2000 13:41:08 -0700 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" Subject: Re: Extended operation errors Cc: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"dd4XCC.A.BW.eYxk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 01:52 PM 8/10/00 -0600, Jim Sermersheim wrote: >>I suggest the specification defining the extended operation define >>additional resultCodes as needed. > >Are you suggesting that the new result codes be returned in the resultCode field of the LDAPResult, or that the extended response provide an alternate field to report them? The former method won't work with 2251 (4.1.10, "If a client receives a result code which is not listed above..."). We could easily fix this in the bis doc. I'm suggesting that an extended operation "update" 2251 with additional result codes as needed, no need to add clarification to the bis doc (except maybe to reserve a set for extension specific use). As these resultCodes would be specific to the OID associated with the extended operation, no collisions will occur, no client not expecting them would ever see them, and no harm will be caused. Note, I am NOT suggesting controls extend resultCodes. As operations can carry multiple controls, collisions could occur. These are better returned in a response control. From list@netscape.com Thu Aug 10 17:48:44 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA14593 for ; Thu, 10 Aug 2000 17:48:44 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7AKHgA18215; Thu, 10 Aug 2000 13:17:43 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7AKLNg11425; Thu, 10 Aug 2000 13:21:23 -0700 (PDT) Resent-Date: Thu, 10 Aug 2000 13:21:23 -0700 (PDT) Date: Thu, 10 Aug 2000 15:19:56 -0500 From: Mark Wahl Subject: Re: Extended operation errors In-reply-to: "Your message of Thu, 10 Aug 2000 13:52:25 MDT." Sender: wahl@austin.innosoft.com To: Jim Sermersheim Cc: Kurt@OpenLDAP.org, ietf-ldapext@netscape.com Message-id: <20339.965938796@threadgill.austin.innosoft.com> Resent-Message-ID: <"pk77mC.A.ovC.76wk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com An extension SHOULD NOT use the resultCode field as it is an INTEGER value: to prevent collisions, each extension which wants to signal additional information back to the client beyond the overall operation status needs to define a control or an extended response which it can return to the client. A client which has issued an operation with a control would normally look in the operation response PDU to see if the extension has provided a response control. Mark Wahl, Directory Architect, Service Provider/Infrastructure Sun Microsystems, Inc. iPlanet Alliance From list@netscape.com Thu Aug 10 17:52:06 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA14672 for ; Thu, 10 Aug 2000 17:52:05 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7ALj8j25289; Thu, 10 Aug 2000 14:45:08 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7ALoYY29154; Thu, 10 Aug 2000 14:50:34 -0700 (PDT) Resent-Date: Thu, 10 Aug 2000 14:50:34 -0700 (PDT) Date: Thu, 10 Aug 2000 14:50:23 -0700 (PDT) Message-Id: <200008102150.e7ALoNx04865@xwing.netscape.com> From: 48hourstopayday@angelfire.com To: Friends@netscape.com Subject: Big Returns on Investment Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"ZA9or.A.OHH.nOyk5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Here's one that will give you big $$$ return on investment! 166% return after 48 hours! Yes 166%. You can invest as little as $1.00 - $1000.00. See for yourself. For more information send to 48hourstopayday@angelfire.com and you must put " YES " in the subject matter or you will not get a reply. Thank you From list@netscape.com Fri Aug 11 06:18:37 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA08181 for ; Fri, 11 Aug 2000 06:18:31 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7BA7ZA11893; Fri, 11 Aug 2000 03:07:40 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7BAGtw22557; Fri, 11 Aug 2000 03:16:55 -0700 (PDT) Resent-Date: Fri, 11 Aug 2000 03:16:55 -0700 (PDT) Date: Fri, 11 Aug 2000 03:16:48 -0700 (PDT) Message-Id: <200008111016.e7BAGmx06113@xwing.netscape.com> From: info@ETBR.ifeelgood.au.nu.netscape.com To: friend@xwing.netscape.com, college@xwing.netscape.com, relative@netscape.com Subject: Rocket Fuel for your body - no joke! -GWKQ X-Reply-To: ifeelgood100@altavista.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"wrQz8D.A.LgF.UK9k5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit IFG300 http://www.ifeelgood.au.nu Are you sick and tired of being sick and tired? Are you lethargic with no energy in your day? Our food just doesn't have the nutrition we need anymore. Consider the great diet most of us have. Add to that the extra stresses we're under from working those 1, 2, 3 or more jobs. Or even just trying to handle the overtime or keeping the family together. We're wrecking our bodies and we see that with the increase of Chronic Fatigue, Irritable Bowel Syndrome, ADD and ADHD, allergies, cancer and other diseases. You know it and so do I. So what's the answer? Go to this website and take a look for yourself. You'll feel better than you have in AGES. http://www.ifeelgood.au.nu This stuff really works. Reliv is so sure of that they give a 30 day money back guarantee - no questions asked. Why wouldnt you put the best stuff available in your body so it will work at peak performace. Beat those winter colds, flu etc because when your body works right, it works at a much better level. We're all becoming more nutritional aware and this is the best food on the market. Check out the website to order this life changing stuff. http://www.ifeelgood.au.nu Check it out. You'll be surprised at how you feel. Why don't you BALANCE YOUR BODY NOW. http://www.ifeelgood.au.nu. I've seen people whose lives have changed because of this stuff. Its changed my life and to be honest, I am emailing you because I know it will change yours too. But you gotta try it! There are lots of different things on the market and some work and some... well... maybe they promise a bit too much. Maybe you've tried those things and were disapointed. Well THIS STUFF DOES WORK. I'VE SEEN THE EVIDENCE FOR MYSELF. If you get onto the stuff and use it properly and are not satisfied - you get your money back. Thats a pretty fair deal. So check out my web site and order the stuff and start to feel better than you have in years. Put a sparkle back into your eyes and a spring in your step and have a great day! Annie Watson All replies ifeelgood100@altavista.com Further transmissions to you by the sender of this email may be stopped at no cost to you by sending a reply to this email address with the word "remove" in the subject line and automatically - instantly your name and email address will be vaporized from our list. If you sent a "remove" notice through and your name was NOT removed, we apologise. We may have been unable to locate the correct email address to which we originally posted the email notice. We will try again. It is not our intention to pester but simply to inform. From list@netscape.com Fri Aug 11 09:36:00 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA15037 for ; Fri, 11 Aug 2000 09:36:00 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7BDP9A23886; Fri, 11 Aug 2000 06:25:09 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7BDYUQ07362; Fri, 11 Aug 2000 06:34:30 -0700 (PDT) Resent-Date: Fri, 11 Aug 2000 06:34:30 -0700 (PDT) Message-Id: <200008111334.JAA14948@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; CC: ietf-ldapext@netscape.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-zeilenga-ldap-txn-00.txt Date: Fri, 11 Aug 2000 09:34:25 -0400 Sender: nsyracus@cnri.reston.va.us Resent-Message-ID: <"khRZ9.A.uyB.lDAl5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : LDAPv3 Transactions Author(s) : K. Zeilenga Filename : draft-zeilenga-ldap-txn-00.txt Pages : 5 Date : 10-Aug-00 LDAP [RFC2251] update operations have atomic properties upon individual entries. However, it is often desirable to update two or more entries as one atomic action, a transaction. Transactions are necessary to support a number of applications including resource provisioning and information replication. This document defines an LDAP extension to support transactions. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-zeilenga-ldap-txn-00.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-zeilenga-ldap-txn-00.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-zeilenga-ldap-txn-00.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20000810140046.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-zeilenga-ldap-txn-00.txt --OtherAccess Content-Type: Message/External-body; name="draft-zeilenga-ldap-txn-00.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20000810140046.I-D@ietf.org> --OtherAccess-- --NextPart-- From list@netscape.com Fri Aug 11 11:09:19 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA21660 for ; Fri, 11 Aug 2000 11:09:18 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7BF26j03572; Fri, 11 Aug 2000 08:02:06 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7BF7Wk09661; Fri, 11 Aug 2000 08:07:32 -0700 (PDT) Resent-Date: Fri, 11 Aug 2000 08:07:32 -0700 (PDT) From: "quick100" To: Subject: Hello Netfriend! Sender: "quick100" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Date: Fri, 11 Aug 2000 17:11:18 +0200 Content-Transfer-Encoding: 7BIT Message-Id: <20000811150623Z567530-13680+4275@soneramail.nl> Resent-Message-ID: <"gg-QnD.A.gWC.zaBl5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT All our mailings are sent complying to the proposed United States Federal requirements for commercial e-mail: Section 301 Paragraph (a)(2)(C) of S. 618. Please see the bottom of this message for further information and removal instructions. Need a quick $100 today? Need a quick $500 this week? Need to QUICKLY build a $5,000 monthly income? This may be the most COMMON SENSE email you've ever read because I'm gonna show you EXACTLY how I got SICK AND TIRED of all the stupid chain letters, MLM's and mathematically impossible matrix deals, and started making all the money I needed, right from my home computer. I'm gonna show you EXACTLY how I get money deposited RIGHT to MY bank account (no company to hold my money while they "work things out"), and EXACTLY what I do every single day. This is for normal, hardworking people who want to make a steady, substantial and growing income from their computers, and to start making money today. You DON'T need a website. You DON'T need to "recruit" anyone. You DON'T need to talk to anyone. And... you DON'T even need to pay until YOU see that it works for YOU! I'm not kidding you when I tell you that you can have a perfectly legal and legitimate home based business that starts earning you money RIGHT AWAY, and that provides a STEADY and GROWING income - as much as you want to make! I'm gonna give you the tools to make this an automated thing, so you can be earning money whether you're at your computer or not! Believe me when I tell you that this very simple system took me from worrying about bills to having fun shopping in less than a week! Are YOU sick of it all yet? Do YOU need a QUICK income? Do YOU want control of your OWN money? Simply send me a blank email to mailto:gibbon@multiweb.nl?subject=Quick100 and an autoresponder will immediately send you back the very simple and straightforward explanation of how YOU can do what I've done. Then you can decide if it's something you can do. But don't kid yourself. You have to do SOMETHING different, right? What if I'm telling the truth? (And I can prove that I am?) send a blank email to mailto:gibbon@multiweb.nl?subject=Quick100 and see for yourself ```````````````````````````````````````````````````` Please note that this is not SPAM. You've sent me an offer, answered to my ads lately or we are members of the same op-in list. To be removed from my private mailing list just hit the reply button and put REMOVE in the subject line From list@netscape.com Fri Aug 11 16:30:27 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA03691 for ; Fri, 11 Aug 2000 16:30:26 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7BKIQA18042; Fri, 11 Aug 2000 13:18:27 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7BKRms15451; Fri, 11 Aug 2000 13:27:48 -0700 (PDT) Resent-Date: Fri, 11 Aug 2000 13:27:48 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Fri, 11 Aug 2000 14:27:34 -0600 From: "Jim Sermersheim" To: Cc: , Subject: Re: Last Call: LDAP Password Modify Extended Operation to ProposedStandard Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_0850A8AC.3F5E320C" Resent-Message-ID: <"HVEk0C.A.JxD.DHGl5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_0850A8AC.3F5E320C Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable In section 5, the wording "If the provided oldPasswd value cannot be = verified or is incorrect, the server SHALL NOT change the user password." = implies that if the oldPassword value is not provided, this clause may be = ignored. If this is true (and I hope it is), I'd like to see a stronger = indication of the server behavior when the oldPasswd value is not = provided. I'd prefer if the draft stated that if the oldPasswd value is not present, = the server MAY use other policy to determine whether the password is = changed. This is typically be due to the currently authenticated identity = having sufficient access permissions to change the specified user's = password (such as a supervisor). On a lesser note: There are redundancies in Section 5, second paragraph, and Section 6, = first paragraph. Jim --=_0850A8AC.3F5E320C Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
In section 5, the wording "If the provided oldPasswd value cannot = be=20 verified or is incorrect, the server SHALL NOT change the user password."= =20 implies that if the oldPassword value is not provided, this clause may = be=20 ignored. If this is true (and I hope it is), I'd like to see a=20 stronger indication of the server behavior when the oldPasswd value = is not=20 provided.
 
I'd prefer if the draft stated that if the oldPasswd value is not = present,=20 the server MAY use other policy to determine whether the password is = changed.=20 This is typically be due to the currently authenticated identity having=20 sufficient access permissions to change the specified user's password = (such as a=20 supervisor).
 
On a lesser note:
 
There are redundancies in Section 5, second paragraph, and = Section 6,=20 first paragraph.
 
Jim
--=_0850A8AC.3F5E320C-- From list@netscape.com Fri Aug 11 17:43:43 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA06004 for ; Fri, 11 Aug 2000 17:43:42 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7BLalj04462; Fri, 11 Aug 2000 14:36:47 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7BLgE615766; Fri, 11 Aug 2000 14:42:14 -0700 (PDT) Resent-Date: Fri, 11 Aug 2000 14:42:14 -0700 (PDT) Message-Id: <4.3.2.7.0.20000811140859.00b34ce0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Fri, 11 Aug 2000 14:40:28 -0700 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" Subject: Re: Duplicate entries filter Cc: , In-Reply-To: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=====================_198676031==_.ALT" Resent-Message-ID: <"_B4B3B.A.E2D.0MHl5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=====================_198676031==_.ALT Content-Type: text/plain; charset="us-ascii" At 01:26 PM 8/10/00 -0600, Jim Sermersheim wrote: >>>> "Kurt D. Zeilenga" 8/9/00 5:48:24 PM >>> >>At 04:27 PM 8/9/00 -0600, Jim Sermersheim wrote: > >>>Hmm, I think the wording in the draft should be changed to reflect this. Currently it says "These duplicate entries are returned to the client only if they still match the asserted search filter". That's a little ambiguous. > >>Actually, I don't find that ambiguous at all... it's clearly option a). > >It doesn't say anything about other factors that might cause the entry (as seen by the client) to not match the filter (like ACI). This is intrinsic behavior of search and, unless this I-D specifically states otherwise, is the behavior of the operation as extended by the control. A statement that this behavior is unaffected by the control may be appropriate. The choices could be clarified as follows: a) all entries within scope are duplicated (per the control) which match the filter may be returned by the server (subject to other factors) b) all entries within scope and match the filter are duplicated (per the control) and may be returned by the server (subject to other factors). That is, by "filtered" I meant to act of matching the entries against the filter, not the act of trimming results due to other factors. > >>>>That is, >>>> a) all entries within scope are duplicated per the control, >>>> then filtered. >>>> >>>> b) all entries within scope are filtered, then duplicated >>>> per the control. >>>> BTW, I'd avoid the a v. b BOOLEAN if at all possible. --=====================_198676031==_.ALT Content-Type: text/html; charset="us-ascii" At 01:26 PM 8/10/00 -0600, Jim Sermersheim wrote:
>>> "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> 8/9/00 5:48:24 PM >>>
>At 04:27 PM 8/9/00 -0600, Jim Sermersheim wrote:
 
>>Hmm, I think the wording in the draft should be changed to reflect this. Currently it says "These duplicate entries are returned to the client only if they still match the asserted search filter". That's a little ambiguous.

>Actually, I don't find that ambiguous at all... it's clearly option a).
 
It doesn't say anything about other factors that might cause the entry (as seen by the client) to not match the filter (like ACI).

This is intrinsic behavior of search and, unless this I-D specifically
states otherwise, is the behavior of the operation as extended
by the control.  A statement that this behavior is unaffected by
the control may be appropriate.

The choices could be clarified as follows:

  a) all entries within scope are duplicated (per the
  control) which match the filter may be returned by the
  server (subject to other factors)

  b) all entries within scope and match the filter are
  duplicated (per the control) and may be returned by the
  server (subject to other factors).

That is, by "filtered" I meant to act of matching the
entries against the filter, not the act of trimming results
due to other factors.

 
>>>That is,
>>>        a) all entries within scope are duplicated per the control,
>>>      then filtered.
>>>
>>>        b) all entries within scope are filtered, then duplicated
>>>        per the control.
>>>

BTW, I'd avoid the a v. b BOOLEAN if at all possible.
--=====================_198676031==_.ALT-- From list@netscape.com Fri Aug 11 18:39:47 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA07157 for ; Fri, 11 Aug 2000 18:39:40 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7BMWwj13155; Fri, 11 Aug 2000 15:32:58 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7BMcPI08073; Fri, 11 Aug 2000 15:38:25 -0700 (PDT) Resent-Date: Fri, 11 Aug 2000 15:38:25 -0700 (PDT) Message-Id: <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Fri, 11 Aug 2000 15:33:13 -0700 To: internet-drafts@ietf.org From: Bruce Greenblatt Subject: new internet draft - LDAP Extensions Style Guide Cc: ietf-ldapext@netscape.com Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=====================_18093016==_" Resent-Message-ID: <"wRT9jB.A.N9B.fBIl5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=====================_18093016==_ Content-Type: text/plain; charset="us-ascii"; format=flowed Please publish the attached personal submission. This is my first time using the Word template. Hopefully, it is in a suitable format... Note that this draft is not a response to anything in particular. It just contains some general observations from watching the traffic in the ldapext mailing list, the prior ldap mailing list, and participation in X.500 and the long lost X.400 standardization efforts. Comments are welcomed. Bruce --=====================_18093016==_ Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: attachment; filename="ldapextstyles.out" Content-Transfer-Encoding: quoted-printable LDAPEXT Working Group B. Greenblatt=20 Internet Draft Directory Tools and=20 Application Services, Inc.=20 August 2000=20 Category: Informational =20 =20 =20 LDAP Extension Style Guide=20 =20 =20 Status of this Memo=20 =20 This document is an Internet-Draft and is in full conformance with=20 all provisions of Section 10 of RFC2026 [1]. =20 =20 =20 Internet-Drafts are working documents of the Internet Engineering=20 Task Force (IETF), its areas, and its working groups. Note that=20 other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of=20 six months and may be updated, replaced, or obsoleted by other=20 documents at any time. It is inappropriate to use Internet- Drafts=20 as reference material or to cite them other than as "work in=20 progress." =20 The list of current Internet-Drafts can be accessed at=20 http://www.ietf.org/ietf/1id-abstracts.txt =20 The list of Internet-Draft Shadow Directories can be accessed at=20 http://www.ietf.org/shadow.html.=20 =20 =20 1. Abstract=20 =20 Version 3 of the Lightweight Directory Access Protocol (LDAP) as=20 defined in [1] provides a base set of services. Additionally, LDAP=20 provides several mechanisms by which the base set of services may be=20 enhanced to provide additional services. This document describes=20 the different ways that LDAP may be enhanced, and how developers can=20 decide which enhancement mechanism is best suited for their=20 environment. It also discusses the positives and negatives for each=20 LDAP enhancement mechanism=20 =20 =20 2. Conventions used in this document=20 =20 =20 The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",=20 "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in=20 this document are to be interpreted as described in RFC-2119 [2].=20 =20 =20 3. Introduction=20 =20 There are four mechanisms for enhancing the base set of services=20 offered by LDAP:=20 =20 Informational =96 February 2001 1=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 =20 - Controls=20 - Extended Operations=20 - Schema Enhancements=20 - New Attribute Type Syntaxes=20 =20 Each of these enhancement mechanisms will be described separately in=20 the following sections. Each section will include examples that=20 show appropriate usage for that mechanism. Each section also=20 includes examples that show inappropriate usage for that mechanism.=20 =20 4. LDAP Controls=20 =20 An LDAP Control is a mechanism that allows additional parameters to=20 be added to previously defined LDAP operations. The LDAP operations=20 defined in [1] are:=20 =20 - Bind=20 - Unbind=20 - Search=20 - Add=20 - Modify=20 - ModifyDN=20 - Delete=20 - Compare=20 =20 Each of these operations has a defined set of parameters that are=20 passed in the LDAPMessage construct. A control is the preferred=20 means of enhancing an existing operation. The control mechanism=20 SHOULD be used when it does not fundamentally change the meaning and=20 operating characteristics of an existing operation. LDAP controls=20 have a criticality that is defined. The criticality field is only=20 meaningful when the control is passed from the LDAP client to the=20 LDAP server in the operation request. LDAP clients ignore the=20 criticality field in controls that appear in operation results.=20 =20 The parameters that appear in the control reside within the=20 controlValue field. The controlValue field is encoded as an=20 octetString. Its value may be defined by the use of a BNF grammar=20 or an ASN.1 syntax definition. If BNF is used, the use of BNF MUST=20 be in conformance with the Augmented BNF definitions of [4]. No=20 preference is given towards either definition.=20 =20 An example of an LDAP extension that is appropriate for=20 implementation as a control is the sorted results control that can=20 be used in the Search operation as defined by [5]. The Search=20 operation normally returns all entries that match the supplied=20 filter. The results are returned in any order that is appropriate=20 for the LDAP server. The sorted results control only changes the=20 order in which the matched entries are returned to the LDAP client. =20 The control does not substantially change the way in which the LDAP=20 server implements the Search operation. It is left up to the client=20 to decide on the criticality of the control. Unless there is an=20 overwhelming reason why the Search should not be performed if the=20 =20 Informational =96 February 2001 2=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 sorted results control then the criticality should be FALSE. As a=20 general rule, unless the results of the operation would be useless=20 (or potentially harmful) control criticality SHOULD be given the=20 value FALSE.=20 =20 The Search request includes a parameter that allows the client to=20 request whether or not aliases are dereferenced. RFC 2256 defines=20 an object class called organizationalRole. This object class is=20 similar to the alias object class in that it includes a roleOccupant=20 attribute that holds one or more distinguished names of other=20 entries in the directory. The search request does not include a=20 parameter to automatically dereference roleOccupants. Thus, it is=20 possible to define a control to request whether or not to=20 dereference roleOccupants. If this request is made, and is=20 supported by the LDAP server, then the LDAP server handles the=20 organizationalRole entries in a manner similar to the way in which=20 it handles alias entries in the presence of the derefAliases=20 parameter. The controlValue can be defined using this ASN.1:=20 =20 derefOrganizationRoles ENUMERATED {=20 neverDerefRoles (0),=20 derefInSearching (1),=20 derefFindingBaseObj (2),=20 derefAlways (3)}=20 =20 Similarly, it can be defined using this BNF:=20 =20 derefOrganizationalRoles =3D =20 neverDerefRoles | derefInSearching | derefFindingBaseObj |=20 derefAlways=20 neverDerefRoles =3D =930=94=20 derefInSearching =3D =931=94=20 derefFindingBaseObj =3D =932=94=20 derefAlways =3D =933=94=20 =20 The handling of the control value is similar to the way in which the=20 derefAliases parameter value is handled. The major difference is=20 that the roleOccupant attribute may be multi-valued, and the Search=20 operation may fan out in multiple directions, which would not be the=20 case with the single-valued aliasedObjectName attribute. The=20 question arises as to whether the dereference organizational role=20 control fundamentally changes the behavior of the Search operation. =20 There is some change in the behavior due to the multiway fan out of=20 the Search operation. So, is this change "fundamental"? In this=20 situation, the answer is no. The behavior is so similar to the=20 behavior of the derefAliases parameter already in the Search request=20 that the change is not seen to be fundamental.=20 =20 Consider the LDAP Extension to copy an entry or subtree from one=20 part of the Directory Information Tree (DIT) to another. This=20 extension can be defined as a control in the ModifyDN operation. =20 This operation already moves an entry or subtree from one part of=20 the tree to another. A control can be defined to indicate that=20 instead of moving the entries from one part of the DIT to another,=20 =20 Informational =96 February 2001 3=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 the entries in the named subtree are copied to the new part of the=20 DIT. This control could be defined using this ASN.1:=20 =20 copySubtreeControl ::=3D SEQUENCE {=20 target LDAPDN,=20 filter Filter OPTIONAL}=20 =20 Similarly, it can be defined using this BNF:=20 =20 copySubtreeRequest =3D source SEP target SEP filter=20 target =3D LDAPDN ; defined according to [6]=20 filter =3D UTF-8String ; defined according to [9]=20 SEP =3D =93;=94=20 =20 If the filter is present in the request, only those objects in the=20 source subtree that match the filter are copied to the target=20 subtree. Even though the copy subtree extension can be defined=20 using this control, it should not be defined this way. This is due=20 to the fact that it fundamentally changes the behavior of the=20 modifyDN operation. As it is currently defined, the modifyDN=20 operation is logically just a change in name that affects the entry=20 named in the =93entry=94 parameter of the modifyDN operation. The=20 addition of the copy subtree control would fundamentally change this=20 behavior. Thus, the copy subtree extension should not be=20 implemented as a control, and instead by implemented as an extended=20 operation.=20 =20 The definition of a control SHOULD be defined in such a manner that=20 it is extensible. For extensibility, extra binary fields SHOULD be=20 built into the definition. In ASN.1, use of a SEQUENCE is helpful. =20 In order to allow for extensibility, the copySubtreeControl can be=20 defined as:=20 =20 copySubtreeControl ::=3D SEQUENCE {=20 target LDAPDN,=20 filter Filter OPTIONAL,=20 extensions [0] OCTET STRING OPTIONAL}=20 =20 Similarly, using ABNF the request can be defined as:=20 =20 copySubtreeRequest =3D source SEP target SEP filter SEP extensions=20 target =3D LDAPDN ; defined according to [6]=20 filter =3D UTF-8String ; defined according to [9]=20 extensions =3D binary ; arbitrary binary data=20 =20 Note that servers SHOULD not send back controls in an operation=20 response that have not been requested by the client. In the event=20 that a client does receive an unsolicited control in a response, the=20 client MAY ignore the control.=20 =20 5. LDAP Extended Operations=20 =20 An LDAP Extended Operation is a mechanism that allows for new LDAP=20 operations to be defined to enhance the base set listed above. The=20 =20 Informational =96 February 2001 4=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 extended operation describes the parameters that are passed in the=20 LDAPMessage construct. The extended operation MUST define both the=20 ExtendedRequest message that is passed from the LDAP client to the=20 LDAP server, as well as the ExtendedResult message that is passed=20 from the LDAP server back to the LDAP client. The extended=20 operation mechanism SHOULD be used when its operating=20 characteristics are fundamentally different from the base set of=20 LDAP operations.=20 =20 The parameters that appear in the extension reside within the=20 requestValue field. The requestValue field is encoded as an=20 octetString. Its value may be defined by the use of a BNF grammar=20 or an ASN.1 syntax definition. If BNF is used, the use of BNF MUST=20 be in conformance with the Augmented BNF definitions of [4]. No=20 preference is given towards either definition.=20 =20 Consider the copy subtree extension mentioned above. Since it=20 fundamentally changes the behavior of the base LDAP operations, it=20 will be defined using an extended operation. The requestValue has=20 this ASN.1:=20 =20 copySubtreeRequest ::=3D SEQUENCE {=20 source LDAPDN,=20 target LDAPDN,=20 filter Filter OPTIONAL}=20 =20 Similarly, it can be defined using this BNF:=20 =20 copySubtreeRequest =3D source SEP target SEP filter=20 source =3D LDAPDN ; defined according to [6]=20 target =3D LDAPDN ; defined according to [6]=20 filter =3D UTF-8String ; defined according to [9]=20 =20 =20 Notice that the source parameter is added here as opposed to the=20 previously defined control. This is due to the fact that the=20 previously defined control made use of the =93entry=94 parameter of the= =20 modifyDN operation.=20 =20 The definition of an extended operation should be defined in such a=20 manner that it is extensible. For extensibility, extra binary=20 fields SHOULD be built into the definition. In ASN.1, use of a=20 SEQUENCE is helpful. In order to allow for extensibility, the=20 copySubtreeRequest can be defined as:=20 =20 copySubtreeRequest ::=3D SEQUENCE {=20 source LDAPDN,=20 target LDAPDN,=20 filter Filter OPTIONAL,=20 extensions [0] OCTET STRING OPTIONAL}=20 =20 Similarly, using ABNF the request can be defined as:=20 =20 copySubtreeRequest =3D source SEP target SEP filter SEP extensions=20 =20 Informational =96 February 2001 5=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 source =3D LDAPDN ; defined according to [6]=20 target =3D LDAPDN ; defined according to [6]=20 filter =3D UTF-8String ; defined according to [9]=20 extensions =3D binary ; arbitrary binary data=20 =20 Note that servers MUST not send back extended responses that have=20 not been requested by the client. In the event that a client does=20 receive an unsolicited extended response in a response, the client=20 MAY ignore the extended response.=20 =20 6. LDAP Schema Extensions=20 =20 The base set of LDAP Object Classes and Attribute Types are defined=20 in [2] and [3]. Schema is the collection of attribute type=20 definitions, object class definitions and other information that a=20 server uses to determine how to match a filter or attribute value=20 assertion (in a compare operation) against the attributes of an=20 entry, and whether to permit add and modify operations. Schema=20 extensions are the preferred mechanism of enhancing LDAP. This is=20 due to the fact that all LDAP servers allow their base schemas to be=20 enhanced. Furthermore, it is a requirement that the LDAP server=20 MUST publish the schema supported by an LDAP server. =20 =20 New attribute types MUST not be added to existing object classes. =20 New object classes that are defined SHOULD use existing attribute=20 types when the data elements are substantially similar to existing=20 data elements that have previously been defined. The use of schema=20 extensions allows normal LDAP operations to be used to supply=20 enhancements to the set of base LDAP services. For example, the=20 sorted results control was previously mentioned. This control is=20 only useful in dealing with whole attributes that appear within=20 entries.=20 =20 Consider a search that wants to retrieve the list of users by=20 location code (a subfield of the phone number), but sorted by=20 surname within location code. The telephoneNumber attribute type is=20 defined as a character string that is assumed to contain the=20 location code. Unfortunately, the location code is not broken out=20 from the telephone number, so it is not generally possible to=20 algorithmically determine the location code from examining the=20 telephone number attribute. Furthermore, the telephoneNumber is a=20 multi-valued attribute. Each attribute value might contain a=20 logically different location code. In order to adequately support=20 this feature, a new attribute type can be defined to hold the=20 primary location code of the entry. This can be defined as follows:=20 =20 (tempOID NAME 'locationCodeInformation' SUP top AUXILIARY=20 MUST primaryLocationCode )=20 =20 (tempOID NAME 'primaryLocationCode' SUP =91name=92 SINGLE-VALUE )=20 =20 Note that real object identifiers are not used in the above=20 definitions, since this document is not actually defining the=20 locationCodeInformation object class. The desired sort can now be=20 =20 Informational =96 February 2001 6=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 achieved by using the primaryLocationCode attribute type and the=20 surname attribute type within the sort results control. This sort=20 only works if the locationCodeInformation is populated within the=20 DIT. The LDAP server does not automatically populate the=20 primaryLocationCode using other attributes, so it is incumbent upon=20 the LDAP client to populate the primaryLocationCode attribute if the=20 sort is to work as desired.=20 =20 7. New Attribute Type Syntaxes=20 =20 The base LDAP Syntaxes are defined in [2]. It is occasionally the=20 case that there is no defined syntax that exactly matches a=20 previously defined syntax. When this circumstance arises, there are=20 two alternatives:=20 =20 - Define a new attribute syntax=20 - Use a binary syntax, and define a BNF grammar for the=20 attributes that fits inside the binary syntax.=20 =20 Either of these alternatives defines new attribute syntaxes. The=20 use of BNF is preferred in environments where the LDAP Server is not=20 specifically required to understand the syntax. Furthermore, there=20 is no requirement of compliant LDAP servers to be able to support=20 attribute type syntaxes that are defined outside of [2]. Thus, the=20 use of BNF on top of existing attribute syntaxes is preferred as it=20 is more likely to be interoperable among LDAP servers supplied form=20 multiple sources. The use of BNF MUST be in conformance with the=20 Augmented BNF definitions of [4]. When a binary syntax is chosen,=20 the Octet String syntax defined in [2] which uses=20 1.3.6.1.4.1.1466.115.121.1.40 as the object identifier SHOULD be=20 used as the wrapper attribute syntax. When the data to be stored is=20 character data, the Directory String syntax defined in [2], which=20 uses 1.3.6.1.4.1.1466.115.121.1.15 as the object identifier SHOULD=20 be used instead.=20 =20 Since not all LDAP servers support (or easily support) the addition=20 of new attribute type syntaxes, the use of the attribute type=20 syntaxes is not always available. The use of an Octet String or a=20 Directory String in combination with BNF is normally a better=20 alternative, and SHOULD be used. In defining the BNF, strong=20 consideration should be paid to matching rules. In string data, the=20 BNF SHOULD be defined so that the substring matching rule is still=20 effective. For example, [2] defines the postal address syntax as a=20 Directory String syntax that uses the following BNF:=20 =20 postal-address =3D dstring *( "$" dstring )=20 =20 An example character string using this BNF is:=20 =20 1234 Main St.$Anytown, CA 12345$USA=20 =20 This definition allows substring matching to still be effective,=20 especially through its use of separation characters. For example,=20 the =93$Anytown=94 string could be used as the =93ANY=94 sub-filter to= find=20 =20 Informational =96 February 2001 7=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 all entries with a postal address in Anytown. Use of this sub- filter would not match those entries that have a postal address on=20 =93Anytown Blvd=94 that are not actually in he city Anytown.=20 =20 Use of ASN.1 for new attribute type syntaxes SHOULD only be used in=20 the case of very complex data types, and only then after serious=20 consideration of an ABNF representation. Whenever ASN.1 is used for=20 specifying a new attribute type syntax, the ASN.1 encoding mechanism=20 MUST also be specified (DER encoding is STRONGLY preferred).=20 =20 8. The Grey Area=20 =20 In some situations it is not clear whether to use a control or an=20 extended operation. Consider an LDAP extension that would delete an=20 entire subtree instead of deleting a single entry as the current=20 Delete operation does. This could be implemented as either a=20 control used with the existing Delete operation or a new extended=20 operation. In fact Internet drafts have been proposed using both=20 methodologies [7], [8]. Persuasive arguments can be made about=20 implementing this LDAP extension either as an extended operation or=20 a control. An operation on a subtree is different than an operation=20 than an operation on an individual entry. But, are the operations=20 different enough to implement the subtree delete operation as an=20 extended operation.=20 =20 A good guideline to use for deciding if the use of a control is=20 appropriate is to examine what would happen if an LDAP server that=20 did not support it received the control. If the criticality field=20 is set to TRUE, then the LDAP server would return the error code=20 unsupportedCriticalExtension. If the criticality field is set to=20 FALSE, then the LDAP server ignores the control and operates on the=20 remainder of the LDAP operation request. If the LDAP server=20 attempts to implement the operation with the non-critical control=20 and would always return an error result code, then the LDAP=20 extension SHOULD NOT be implemented as a control, but instead SHOULD=20 be implemented as an extended operation.=20 =20 If there are many scenarios in which an LDAP server ignoring a non- critical control would still be able to successfully implement the=20 operation, then the LDAP extension SHOULD be implemented as a=20 control. If there are only a few scenarios in which an LDAP server=20 ignoring a non-critical control would still be able to successfully=20 implement the operation, then consensus should be sought from the=20 LDAP community. The smaller the number of valid scenarios in which=20 an LDAP server ignoring a non-critical control would still be able=20 to successfully implement the operation, then greater consideration=20 should be given to the use of an extended operation. Similarly, the=20 greater the number of valid scenarios in which an LDAP server=20 ignoring a non-critical control would still be able to successfully=20 implement the operation, then greater consideration should be given=20 to the use of a control. In the case of the subtree delete=20 extension, the only scenario in which an LDAP server ignoring the=20 control would still be able to successfully implement the delete=20 operation is when the entry named in the DelRequest is a leaf entry. =20 =20 Informational =96 February 2001 8=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 Using the guideline mentioned above, consideration should be given=20 to the use of an extended operation for the implementation of the=20 delete subtree extension.=20 =20 =20 9. Security Considerations=20 =20 Implementors and administrators should be aware that =85=20 =20 =20 10. References=20 =20 =20 1 Bradner, S., "The Internet Standards Process -- Revision 3", BCP=20 9, RFC 2026, October 1996.=20 =20 2 Bradner, S., "Key words for use in RFCs to Indicate Requirement=20 Levels", BCP 14, RFC 2119, March 1997=20 =20 =20 =20 [1] Wahl, M., Kille, S. and Howes, T., "Lightweight Directory=20 Access Protocol (v3)", Internet Standard, December, 1997. =20 RFC2251.=20 [2] Wahl, M., Coulbeck, A., Howes, T. and Kille, S., "Lightweight=20 Directory Access Protocol (v3), Attribute Syntax Definitions",=20 Internet Standard, December, 1997. RFC2252.=20 [3] Wahl, M., "A Summary of the X.500(96) User Schema for use with=20 LDAPv3", Internet Standard, December, 1997. RFC2256.=20 [4] Crocker, D., and P. Overell, "Augmented BNF for Syntax=20 Specifications: ABNF", RFC 2234, November 1997.=20 [5] Herron, A., et. al, "LDAP Control Extension for Server Side=20 Sorting of Search Results=94, RFC NNNN, July 2000.=20 [6] Wahl, M., Kille, S. and Howes, T., "Lightweight Directory=20 Access Protocol (v3): UTF-8 String Representation of=20 Distinguished Names", Internet Standard, December, 1997. =20 RFC2253.=20 [7] Greenblatt, B, =93Simple Operations on Subtrees (for LDAP)=94,=20 Internet Draft (Work in Progress), August 2000, draft-greenblatt- ldapext-sos-01.=20 [8] Armijo, M, =93LDAP Tree Delete Control=94, Internet Draft (Work in=20 Progress), expired, ftp://ftp.isi.edu/internet-drafts/draft- armijo-ldap-treedelete-03.txt.=20 [9] Howes, T., "The String Representation of LDAP Search Filters",=20 Internet Standard, December, 1997. RFC2254.=20 =20 10. Acknowledgments=20 =20 Thanks to Kurt Zeilenga for an informal review prior to submission.=20 =20 =20 11. Author's Addresses=20 =20 Bruce Greenblatt=20 =20 Informational =96 February 2001 9=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 Directory Tools and Application Services, Inc.=20 6841 Heaton Moor Drive=20 Phone: +1-408-390-4776=20 Email: bgreenblatt@directory-applications.com=20 =20 =20 Informational =96 February 2001 10=20 =0C < LDAP Extension Style Guide> <2001>=20 =20 =20 Full Copyright Statement=20 =20 "Copyright (C) The Internet Society (date). All Rights Reserved.=20 This document and translations of it may be copied and furnished to=20 others, and derivative works that comment on or otherwise explain it=20 or assist in its implementation may be prepared, copied, published=20 and distributed, in whole or in part, without restriction of any=20 kind, provided that the above copyright notice and this paragraph=20 are included on all such copies and derivative works. However, this=20 document itself may not be modified in any way, such as by removing=20 the copyright notice or references to the Internet Society or other=20 Internet organizations, except as needed for the purpose of=20 developing Internet standards in which case the procedures for=20 copyrights defined in the Internet Standards process must be=20 followed, or as required to translate it into languages other than=20 English. The limited permissions granted above are perpetual and=20 will not be revoked by the Internet Society or its successors or=20 assigns.=20 =20 This document and the information contained herein is provided on an=20 "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING=20 TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING=20 BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION=20 HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF=20 MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.=20 =20 =20 Informational =96 February 2001 11=20 =0C --=====================_18093016==_ Content-Type: text/plain; charset="us-ascii"; format=flowed ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html --=====================_18093016==_-- From list@netscape.com Sat Aug 12 05:24:41 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA29057 for ; Sat, 12 Aug 2000 05:24:40 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7C9Hij26614; Sat, 12 Aug 2000 02:17:44 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7C9NBs08151; Sat, 12 Aug 2000 02:23:11 -0700 (PDT) Resent-Date: Sat, 12 Aug 2000 02:23:11 -0700 (PDT) X-Sender: hmk91280@yahoo.com From: "hmk91280@yahoo.com" To: "opt-in list 3" Date: Sat, 12 Aug 2000 10:23:57 +0100 Subject: An Internet Marketers Dream!!!! MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Message-Id: Resent-Message-ID: <"6QaV5B.A.F_B.-dRl5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Are you an internet marketer? Are you tired of searching the Internet for resources, information and tools to help you earn Money?.... If you answered yes, I have some Great News for you! I have found a site that has everything you could possibly need as an internet marketer! All the software, all the tools, all the advice and all the strategies to make your business FLY!! Best of all, you get it for practically nothing!! Check it out...what have you got to lose? Please reply to this Email if you want more info. (put "more info" in the subject field) hmk91280@yahoo.com ---------------------------------------------------------------------------- This is NOT spam. Your Email address was taken from a Safe Opt-In List. If you wish to be removed from this list then please reply to this Email with "REMOVE" as the subject.Sorry for any inconvenience. --------------------------------------------------------------------------- From list@netscape.com Sun Aug 13 06:39:11 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA07407 for ; Sun, 13 Aug 2000 06:39:10 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7DASMA17054; Sun, 13 Aug 2000 03:28:22 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7DAbl603491; Sun, 13 Aug 2000 03:37:47 -0700 (PDT) Resent-Date: Sun, 13 Aug 2000 03:37:47 -0700 (PDT) Message-Id: Date: Sat, 18 Mar 2000 14:40:06 -0500 To: newmoney@yahoo.com Reply-To: moneyhomeb@indiatimes.com From: newmoney@indiatimes.com Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7BIT Subject: Financial Information You Requested!! Resent-Message-ID: <"kYwiYB.A.31.5pnl5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT You were recently referred to me as someone who was ready for a CHANGE, a financial breakthrough, so I'll get right to the point. I am the one that can help you make $125,000 plus this year from HOME with your computer and phone. This is Not MLM and it IS very REAL. Are you Serious about making $2000 plus per week starting Right Away with a SIMPLE system where customers are contacting you and you do absolutely ZERO selling? Can you follow simple step-by-step instructions and put forth the effort to make this a reality for yourself starting today? If your answer is YES, then we need to talk. I have few positions available on my team and its in my best interest to train you for success. In fact, I'm so sure that I can do so, I'm willing to put my money where my mouth is! Upon accepting you as a member on my team, I will provide you with complete Professional Training and Advertising Assistance to put you immediately on the road to success. No experience necessary.... However you must have two qualities: moderate people skills and a serious desire for a personal and financial change. Take a moment to take the next step by calling me at my Home Office and I will get you the details. 1-800-322-6169 ext 4162 24 Hrs/ 7 Days Prosperous Regards! Dave "Profits are better than wages. Wages make you a living; Profits make you a fortune" - Jim Rohn To be removed send email to wantoffnow@yahoo.com From list@netscape.com Sun Aug 13 11:45:10 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA10526 for ; Sun, 13 Aug 2000 11:45:09 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7DFcGj04443; Sun, 13 Aug 2000 08:38:16 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7DFhjE25037; Sun, 13 Aug 2000 08:43:45 -0700 (PDT) Resent-Date: Sun, 13 Aug 2000 08:43:45 -0700 (PDT) Date: Sun, 13 Aug 2000 08:43:26 -0700 (PDT) Message-Id: <200008131543.e7DFhF117049@ywing.netscape.com> From: info@ENIH.ifeelgood.au.nu.netscape.com To: friends@ywing.netscape.com, relatives@ywing.netscape.com, collegues@ywing.netscape.com, staff@ywing.netscape.com, workmates.HFKW@netscape.com Subject: Your body could be letting you down. -ATRA X-Reply-To: info@ifeelgood.au.nu Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"cyjhM.A.zGG.vIsl5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit IFG300 http://www.ifeelgood.au.nu Are you sick and tired of being sick and tired? Lethargic, lack of energy in your day? Our food just doesn't have the nutrition we need anymore. Consider the great diet most of us have. Add to that the extra stresses we're under from working those 2, 3 or more jobs or even just trying to handle the overtime or even trying to keep the family together. We're wrecking our bodies and we see that with the increase of Chronic Fatigue, Irritable Bowel Syndrome, ADD and ADHD, allergies, cancer and other diseases. You know it and so do I. So what's the answer? Go to this website and take a look for yourself. You'll feel better than you have in AGES. http://www.ifeelgood.au.nu This stuff really works. The company is so sure of that they give a 30 day money back guarantee. Why wouldnt you put the best stuff available in your body so it will work at peak performace. Beat those winter colds, flu etc because when your body works right, it works at a much better level. We're becoming more nutritional aware and this is the best food on the market. Check out the website to order this life changing stuff. http://www.ifeelgood.au.nu Check it out. You'll be surprised at how you feel. You'll have more energy and feel better than you have in years! Why don't you BALANCE YOUR BODY NOW. http://www.ifeelgood.au.nu I've seen people whose lives have changed because of this stuff. Its changed my life and to be honest, I am emailing you because I know it will change yours too. But you gotta try it! There are lots of different things on the market and some work and some... well... maybe they promise a bit too much. THIS STUFF DOES WORK. I'VE SEEN THE EVIDENCE FOR MYSELF. If you get onto the stuff and use it properly and are not satisfied within 30 days - you get your money back. Thats a pretty fair deal. So check out my web site and order the stuff and start to feel better than you have in years. Put a sparkle back into your eyes and a spring in your step. Have a great day! Annie Watson All replies ifeelgood100@altavista.com Further transmissions to you by the sender of this email may be stopped at no cost to you by sending a reply to this email address with the word "remove" in the subject line and automatically - instantly your name and email address will be vaporized from our list. If you sent a "remove" notice through and your name was NOT removed, we apologise. We may have been unable to locate the correct email address to which we originally posted the email notice. We will try again. It is not our intention to pester but simply to inform. This message was sent to address <
> From list@netscape.com Sun Aug 13 21:09:19 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA15365 for ; Sun, 13 Aug 2000 21:09:18 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7E0wPA21595; Sun, 13 Aug 2000 17:58:25 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7E17o614442; Sun, 13 Aug 2000 18:07:50 -0700 (PDT) Resent-Date: Sun, 13 Aug 2000 18:07:50 -0700 (PDT) Date: Sun, 13 Aug 2000 18:07:37 -0700 (PDT) Message-Id: <200008140107.e7E17Vx05275@xwing.netscape.com> From: info@QKWW.ifeelgood.au.nu.netscape.com To: friends@xwing.netscape.com, relatives@xwing.netscape.com, collegues@xwing.netscape.com, staff@xwing.netscape.com, workmates.SKXL@netscape.com Subject: Your body could be letting you down. -HOPH X-Reply-To: info@ifeelgood.au.nu Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"0K3Q3.A.OhD.lZ0l5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit IFG300 http://www.ifeelgood.au.nu Are you sick and tired of being sick and tired? Lethargic, lack of energy in your day? Our food just doesn't have the nutrition we need anymore. Consider the great diet most of us have. Add to that the extra stresses we're under from working those 2, 3 or more jobs or even just trying to handle the overtime or even trying to keep the family together. We're wrecking our bodies and we see that with the increase of Chronic Fatigue, Irritable Bowel Syndrome, ADD and ADHD, allergies, cancer and other diseases. You know it and so do I. So what's the answer? Go to this website and take a look for yourself. You'll feel better than you have in AGES. http://www.ifeelgood.au.nu This stuff really works. The company is so sure of that they give a 30 day money back guarantee. Why wouldnt you put the best stuff available in your body so it will work at peak performace. Beat those winter colds, flu etc because when your body works right, it works at a much better level. We're becoming more nutritional aware and this is the best food on the market. Check out the website to order this life changing stuff. http://www.ifeelgood.au.nu Check it out. You'll be surprised at how you feel. You'll have more energy and feel better than you have in years! Why don't you BALANCE YOUR BODY NOW. http://www.ifeelgood.au.nu I've seen people whose lives have changed because of this stuff. Its changed my life and to be honest, I am emailing you because I know it will change yours too. But you gotta try it! There are lots of different things on the market and some work and some... well... maybe they promise a bit too much. THIS STUFF DOES WORK. I'VE SEEN THE EVIDENCE FOR MYSELF. If you get onto the stuff and use it properly and are not satisfied within 30 days - you get your money back. Thats a pretty fair deal. So check out my web site and order the stuff and start to feel better than you have in years. Put a sparkle back into your eyes and a spring in your step. Have a great day! Annie Watson All replies ifeelgood100@altavista.com Further transmissions to you by the sender of this email may be stopped at no cost to you by sending a reply to this email address with the word "remove" in the subject line and automatically - instantly your name and email address will be vaporized from our list. If you sent a "remove" notice through and your name was NOT removed, we apologise. We may have been unable to locate the correct email address to which we originally posted the email notice. We will try again. It is not our intention to pester but simply to inform. This message was sent to address <
> From list@netscape.com Sun Aug 13 22:04:45 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA16601 for ; Sun, 13 Aug 2000 22:04:44 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7E1rtA24516; Sun, 13 Aug 2000 18:53:55 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7E23Lc26825; Sun, 13 Aug 2000 19:03:21 -0700 (PDT) Resent-Date: Sun, 13 Aug 2000 19:03:21 -0700 (PDT) Date: Sun, 13 Aug 2000 19:03:09 -0700 (PDT) Message-Id: <200008140203.e7E238x19094@xwing.netscape.com> From: info@RTXL.ifeelgood.au.nu.netscape.com To: friends@xwing.netscape.com, relatives@xwing.netscape.com, collegues@xwing.netscape.com, staff@xwing.netscape.com, workmates.LPXK@netscape.com Subject: Your body could be letting you down. -IWBH X-Reply-To: info@ifeelgood.au.nu Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"3voggB.A.tiG.nN1l5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit IFG300 http://www.ifeelgood.au.nu Are you sick and tired of being sick and tired? Lethargic, lack of energy in your day? Our food just doesn't have the nutrition we need anymore. Consider the great diet most of us have. Add to that the extra stresses we're under from working those 2, 3 or more jobs or even just trying to handle the overtime or even trying to keep the family together. We're wrecking our bodies and we see that with the increase of Chronic Fatigue, Irritable Bowel Syndrome, ADD and ADHD, allergies, cancer and other diseases. You know it and so do I. So what's the answer? Go to this website and take a look for yourself. You'll feel better than you have in AGES. http://www.ifeelgood.au.nu This stuff really works. The company is so sure of that they give a 30 day money back guarantee. Why wouldnt you put the best stuff available in your body so it will work at peak performace. Beat those winter colds, flu etc because when your body works right, it works at a much better level. We're becoming more nutritional aware and this is the best food on the market. Check out the website to order this life changing stuff. http://www.ifeelgood.au.nu Check it out. You'll be surprised at how you feel. You'll have more energy and feel better than you have in years! Why don't you BALANCE YOUR BODY NOW. http://www.ifeelgood.au.nu I've seen people whose lives have changed because of this stuff. Its changed my life and to be honest, I am emailing you because I know it will change yours too. But you gotta try it! There are lots of different things on the market and some work and some... well... maybe they promise a bit too much. THIS STUFF DOES WORK. I'VE SEEN THE EVIDENCE FOR MYSELF. If you get onto the stuff and use it properly and are not satisfied within 30 days - you get your money back. Thats a pretty fair deal. So check out my web site and order the stuff and start to feel better than you have in years. Put a sparkle back into your eyes and a spring in your step. Have a great day! Annie Watson All replies ifeelgood100@altavista.com Further transmissions to you by the sender of this email may be stopped at no cost to you by sending a reply to this email address with the word "remove" in the subject line and automatically - instantly your name and email address will be vaporized from our list. If you sent a "remove" notice through and your name was NOT removed, we apologise. We may have been unable to locate the correct email address to which we originally posted the email notice. We will try again. It is not our intention to pester but simply to inform. This message was sent to address <
> From list@netscape.com Mon Aug 14 04:07:13 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA02006 for ; Mon, 14 Aug 2000 04:07:12 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7E7ssA12830; Mon, 14 Aug 2000 00:54:55 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7E84LY09443; Mon, 14 Aug 2000 01:04:21 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 01:04:21 -0700 (PDT) Date: Mon, 14 Aug 2000 01:04:15 -0700 (PDT) Message-Id: <200008140804.e7E84Fx05520@xwing.netscape.com> From: remove@XWIA.asticker.com To: citizen.DFQV@netscape.com Subject: Kids and Drugs Dont Mix - Kids and Guns Dont Mix -MVTY X-Reply-To: remove@asticker.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"kV-6AC.A.HTC.Dg6l5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit “KIDS AND GUNS DON'T MIX” “KIDS AND DRUGS DON'T MIX” Two very important ideas! Recently a local organization offered these life saving quotes on a Bumper Sticker as a fundraiser. I thought the concept was so great I wanted to share it with everyone I could. Proudly display these bumper stickers on your car or anywhere else to get the message across. These are professionally printed, high quality stickers, black ink on white paper. Each sticker is $1.00 plus a Self Addressed Stamp Envelope. Order one for your family, friends, and loved ones. Please send to, RB PO Box 5757 Pahrump NV 89041-5757 To be removed from future mailings, email remove@stickera.com, with remove in subject line. From list@netscape.com Mon Aug 14 06:06:48 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA02736 for ; Mon, 14 Aug 2000 06:06:48 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7E9xtj27962; Mon, 14 Aug 2000 02:59:55 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7EA5OQ05806; Mon, 14 Aug 2000 03:05:24 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 03:05:24 -0700 (PDT) Date: Mon, 14 Aug 2000 02:22:11 -0700 From: tkwriter@vanc.igs.net Message-Id: <200008140922.CAA05340@buddy.pacificcoast.net> Reply-To: tkwriter@vanc.igs.net To: tkwriter@vanc.igs.net Subject: Documentation Specialist Seeking Contract Work Resent-Message-ID: <"HoFrQC.A.JaB.iR8l5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Documentation Specialists Seeking Contract Work - Technical Writing, graphics, Robohelp, HTML, SGML, etc. Senior technical writers, project leaders and electronic documentation specialists seek contract work. Clients have included companies such as Microsoft and Koch Petroleum. Excellent communication skills, able to work with all levels of the company from programmers to CEO. Excellent background in technical, marketing and creative writing. Familiar with educational material as well as e-commerce. Writing samples, full resume and references available on request. Experience in creating both published and online documentation. REQUIRED: Prefer Corp to Corp Sole relationship directly with the client. Agents are also welcome in the same capacity. Production is done at our facility. We are fully equipped. PLEASE REPLY ONLY BY PHONE Contact - Casey Lea - TO INQUIRE ABOUT SERVICES, AVAILABILITY, OR TO CONFIRM REMOVAL FROM OUR LIST CALL 604-685-8348 PST Rates: Fees are charged by the hour or by the project. ------------------- This message is sent in compliance of the new e-mail bill: SECTION 301. Per Section 301, Paragraph (a)(2)(C) of S. 1618, http://www.senate.gov/~murkowski/commercialemail/S771index.html___________________________________________________________ This Message was Composed by a user of Extractor Pro '98 Bulk E- Mail Software. If you wish to be removed from this advertiser's future mailings, please reply with the subject "Remove" and this software will automatically block you from their future mailings. From list@netscape.com Mon Aug 14 06:37:27 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA02925 for ; Mon, 14 Aug 2000 06:37:26 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7EAUVj00189; Mon, 14 Aug 2000 03:30:31 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7EAa1c13204; Mon, 14 Aug 2000 03:36:01 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 03:36:01 -0700 (PDT) Date: Mon, 14 Aug 2000 03:35:34 -0700 (PDT) Message-Id: <200008141035.e7EAZXx04411@xwing.netscape.com> From: jtbowl@GARS.hotmail.com To: .ERFH@netscape.com Subject: Gift SURPRISE Letter -EQRE X-Reply-To: jtbowl@hotmail.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"OxG9uC.A.pND.Ou8l5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit THIS IS THE FAST ONE, DO IT, WHILE YOU'RE WAITING FOR THE OTHERS TO WORK. You will probably have $7,000.00 in two weeks, ONLY $14.00 to $25.00 Total cost 1 hour of work. This is a gifting club PLEASE READ TO FIND OUT HOW You will not be contacted again. If you want to make a few thousand dollars real quick, then please take a moment to read and understand the program I am sharing with you. No. It is NOT what you think! YOU DO NOT HAVE TO SEND $5.00 TO FIVE PEOPLE, to buy a report, get on their mailing list, buy a recipes or any other product. Nor will you have to invest more money LATER to get things going. THIS IS THE FASTEST, EASIEST PROGRAM you will ever be able to do. Complete it in ONE HOUR and you will never forget the day you first received it in the mail. If you are doing other programs, by all mean stay with them. The more the merrier!!! But PLEASE-READ ON. First of all there are only THREE LEVELS, not four, five, or six like other programs. This three level program is more realistic and much, much faster. Because it is so easy, the response rate for this program is VERY HIGH and VERY FAST, and you receive your reward in about FOURTEEN DAYS. That's only TWO WEEKS-not three months. Just in time for next month's bills. TRUE STORY Cindy Allen tells how she ran this gift summation four times last year. The first time she receives $3,000.00 in cash in two weeks and the $7,000.00 in cash the next three times. When this letter is continued as it should be, EVERYONE PROFITS!! Don't be afraid to make gifts to strangers, they will come back to you ten fold. Many of us have pet programs that we support: food or medicine, or medical care for poor children is mine. Or maybe you just want to pay off some bills and get out debt. THIS CAN DO IT FOR YOU. HERE ARE THE SIMPLE DETAILS: You only mail out at least 200 copies (however you can send out as many as you like. The more you send, the more you make). You should send them to PEOPLE WHO SEND YOU THEIR PROGRAMS, because they are believers and your program is BETTER AND FASTER. Even if you are already in a program continue, stay with it, but do yourself a favor and DO THIS ONE TOO. RIGHT NOW!! It is simple and takes a very small investment, not hundreds of dollars AND IT WILL PAY you before the others even begin to trickle in.!!! JUST GIVE ONE PERSON $ 5.00 That's it! That's all. Follow the simple instructions, and in TWO WEEKS you should have at least $7,000.00 because most people will respond due to LOW INVESTMENT, SPEED and HIGH PROFIT POTENTIAL. We are now at 20% response rate! That's a $10,000.00 return. REALLY! So let's all help keep it going, and help each other in these tough times. INSTRUCTION 1) On a blank sheet of transparent proof paper, write down YOUR NAME and E-MAIL address clearly and the word GIFT (this makes the entire program legal & legitimate). Completely wrap it around a FIVE-DOLLAR BILL.. Send this to the FIRST name on the list below. ONLY THE FIRST PERSON ON THE LIST GETS YOUR NAME AND A FIVE DOLLAR GIFT AND THE RIGHT TO HAVE YOUR NAME ON THEIR MAILING LIST. 2) Retype the LIST, REMOVING THE FIRST (#1) name from the list. Move the SECOND (#2) name and address to the first (#1) position. Move the THIRD (#3) name and address to the (#2) position and place YOUR NAME AND ADDRESS in the THIRD (#3) position. 3) Send 200 (or more) copies of your retyped letter. An excellent source of names is the people who send you other programs. The most effective way to accelerate your hit rate is to buy opportunity seekers mailing lists from providers. There are many of them offering this service on the net today. You may find them from search engines with keywords : opportunity seekers, mailing list, opt in list, etc. Do it right away. It's so easy. Don't mull it over. ONE HOUR THAT'S ALL IT TAKES. THERE IS NO MORE TO DO. When your name reaches the first (#1) position in a few days it will be your turn to collect your gifts. The gifts will be sent to you by over 1,500 to 2,000 people like yourself who are willing to invest $ 5.00 and ONE HOUR to receive $ 7,000.00 in cash. That's all !! There will be a total of $7,000.00 in $5.00 bills in your mailbox in about two weeks. CONSIDER THAT! "NONSENSE. I HEARD ABOUT IT BEFORE. A FRIEND OF MINE TOLD ME IT DOESN'T WORK" Donald Trump was once invited as a guest speaker in a TV talk show. He was asked if he would be bankrupted today what would he do next. He said he will join a good MLM business. He was booed by other program guests. "That's why you are sitting there and I am sitting here" was what he said to them. This program is even much better, easier to operate and yield result much faster than MLM. The only reason it doesn't work for somebody is they don't mail enough letters or mail to incorrect target group. There are many participants who continuously do it over and over again 3-4 times yearly. Many successful gifters even participate more than one program at a time. Why ? Because they know this kind of program works for them. They pocketed 3-5 thousand dollars every time they did it. Most of them had joined other "MAKE MONEY ON THE NET" programs. They know well that this gift program is easiest, fastest, lowest investment, not time consuming and offer most potential to make money from internet in a very short period of time. CAN I DO IT AGAIN? OF COURSE... You can do it again and again either with your regular group of gifters or fresh target mailing list. Why not? It beats working! Each time you receive a MLM offer in the your mail box, respond with THIS LETTER. Your name will climb to number 1 position at a DIZZYING geometric rate. Some people may want to purchase a mailing list opportunity seekers ( if you don't know any providers, you can find many of them from search engines with keywords "mailing list", "opportunity seekers", etc. ) and send it out to 200 to 1,000 or more. That's fine; you can if you want to. You may even download a demo or unregistered version but fully functional mass email program to send email to thousands of addresses per hour. You may download a good one for free at http://www.fairlogic.com. Before you use any bulk email program please make sure that your ISP is bulk email friendly otherwise you have a certain risk of being shutdown. THINK ABOUT THAT 20% RESPONSE! Not interested? Come on! Isn't the prospect of an easy $7,000.00 to $10,000.00 in two weeks worth a little experimentation? One hour of your time. ACT FAST AND GET MONEY FAST! Honesty and integrity make this plan work. If you cheat you will never receive the full potential of this gift letter. Send FIVE DOLLARS to the first name NOW !! SHORT INSTRUCTION SEND $ 5 TO NO. # 1, DELETE THE NAME AND ADDRESS OF # 1, ROLL THE REST UP ONE STEP (replace NAME & ADDRESS of # 1 with # 2, # 2 with # 3), PUT YOUR NAME IN NO # 3, AND START RECEIVING PILES OF $ 5 BILLS IN YOUR MAIL BOX DAILY !! HERE IS THE LIST # 1 Linda Hatch 1107 N Grove Yates Center, KS 66783 # 2 Vornsrinth P. 129 / 263 Room No 263, 7th FL, Tower B, Ratchada Orchid Tower Hussadi-Saewee Ln., Suthisarn Rd. Bangkok 10320, Thailand #3 Jan Thomas 8513 Oakwood Drive Urbandale, IA 50322 --------------------------------------------- Your address is supplied from an opportunity seekers target list provider. I do apologize if you are not in this target group as claimed by the provider. If you want to opt out from future mailing, please reply to giftremove@flashmail.com?subject=REMOVE Get paid to read e-mail (.05 cents per e-mail). Go to: www.sendmoreinfo.com/id/1052930 From list@netscape.com Mon Aug 14 09:10:51 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA06596 for ; Mon, 14 Aug 2000 09:10:50 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7ECxqA00132; Mon, 14 Aug 2000 05:59:53 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7ED9IM17206; Mon, 14 Aug 2000 06:09:18 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 06:09:18 -0700 (PDT) Message-Id: Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7BIT Subject: Get a $1000 FREE Satellite TV System !!! Date: Fri, 12 May 2000 20:31:29 -0500 To: newsatellite21@yahoo.com Reply-To: bgetfreetv11@indiatimes.com From: yourfreetv11@indiatimes.com Resent-Message-ID: <"qZJOwD.A.QME.99-l5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT FREE SATELLITE T.V. SYSTEM Watch over 500 channels of Digital Broadcast quality television on your own FREE satellite television system. These new Digital satellite systems use the new 18 inch satellite dish antenna. For a limited time we'll give you this top of the line Digital Satellite System for FREE! We'll even include Free installation and 3 FREE months of all the movie channels! This is the New Dishplayer 500. It has a built Digital 12 hour recording system so you can throw that old VCR away, built in WEB T.V. and interactive T.V and game systems, on screen graphics, 2 dual LNB's, stereo receiver and infrared remote. Normal cost for all these items is over $900 but we're giving it away for FREE! All you have to do is call us to arrange delivery and order the channels you want to receive. The monthly cost of satellite television is usually much less than cable T.V and satellite television offers over 500 channels of all digital broadcast video quality and CD audio sound. You even get local channels now. Don't miss this offer it's only available while supplies last. For your Free Satellite System call 888-514-6881 24 hours a day. To be removed send email to giouyq32@yahoo.com From list@netscape.com Mon Aug 14 11:49:55 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA12772 for ; Mon, 14 Aug 2000 11:49:51 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7EFcvA15215; Mon, 14 Aug 2000 08:38:57 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7EFmOA09775; Mon, 14 Aug 2000 08:48:24 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 08:48:24 -0700 (PDT) Sender: rsalz@ywing.netscape.com Message-ID: <399814D7.47E48724@caveosystems.com> Date: Mon, 14 Aug 2000 11:48:39 -0400 From: Rich Salz X-Mailer: Mozilla 4.72 [en] (X11; U; Linux 2.2.14-5.0 i686) X-Accept-Language: en MIME-Version: 1.0 To: Bruce Greenblatt CC: ietf-ldapext@netscape.com Subject: Re: new internet draft - LDAP Extensions Style Guide References: <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Loop-Detect: 1 Resent-Message-ID: <"vsUPx.A.dYC.HTBm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit > The criticality field is only > meaningful when the control is passed from the LDAP client to the > LDAP server in the operation request. LDAP clients ignore the > criticality field in controls that appear in operation results. I didn't think we had consensus on whether or not this was the right behavior. (We probably agree it's what currently happens.) From list@netscape.com Mon Aug 14 12:10:58 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA13600 for ; Mon, 14 Aug 2000 12:10:57 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7EG02A18208; Mon, 14 Aug 2000 09:00:03 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7EG9Tg00388; Mon, 14 Aug 2000 09:09:29 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 09:09:29 -0700 (PDT) Message-Id: <4.3.2.7.0.20000814090248.00b0cef0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Mon, 14 Aug 2000 09:06:47 -0700 To: Rich Salz From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: Bruce Greenblatt , ietf-ldapext@netscape.com In-Reply-To: <399814D7.47E48724@caveosystems.com> References: <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"zhQgPC.A.cF.4mBm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 11:48 AM 8/14/00 -0400, Rich Salz wrote: >> The criticality field is only >> meaningful when the control is passed from the LDAP client to the >> LDAP server in the operation request. LDAP clients ignore the >> criticality field in controls that appear in operation results. > >I didn't think we had consensus on whether or not this was the right >behavior. (We probably agree it's what currently happens.) Unless the server returns the response control without solicitation, the criticality field is meaningless. Unsolicited response controls should be avoided (if not outright banded). Kurt From list@netscape.com Mon Aug 14 12:21:33 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA13842 for ; Mon, 14 Aug 2000 12:21:33 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7EGATA19961; Mon, 14 Aug 2000 09:10:29 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7EGJuU16310; Mon, 14 Aug 2000 09:19:56 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 09:19:56 -0700 (PDT) Sender: rsalz@ywing.netscape.com Message-ID: <39981C39.1351868C@caveosystems.com> Date: Mon, 14 Aug 2000 12:20:09 -0400 From: Rich Salz X-Mailer: Mozilla 4.72 [en] (X11; U; Linux 2.2.14-5.0 i686) X-Accept-Language: en MIME-Version: 1.0 To: "Kurt D. Zeilenga" CC: Bruce Greenblatt , ietf-ldapext@netscape.com Subject: Re: new internet draft - LDAP Extensions Style Guide References: <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> <4.3.2.7.0.20000814090248.00b0cef0@router.boolean.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Loop-Detect: 1 Resent-Message-ID: <"49JiUB.A.W-D.rwBm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit I thought Harald and I had reasonable examples of unsolicited return controls (e.g., "search results not legally binding" and "shift-JIS encoded") that made sense. From list@netscape.com Mon Aug 14 12:23:19 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA13901 for ; Mon, 14 Aug 2000 12:23:18 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7EGCRA20591; Mon, 14 Aug 2000 09:12:27 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7EGLs619398; Mon, 14 Aug 2000 09:21:54 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 09:21:54 -0700 (PDT) Message-Id: <4.3.2.7.0.20000814091829.00b12460@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Mon, 14 Aug 2000 09:19:33 -0700 To: Rich Salz From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: Bruce Greenblatt , ietf-ldapext@netscape.com In-Reply-To: <39981C39.1351868C@caveosystems.com> References: <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> <4.3.2.7.0.20000814090248.00b0cef0@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"_EmJp.A.TuE.eyBm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 12:20 PM 8/14/00 -0400, Rich Salz wrote: >I thought Harald and I had reasonable examples of unsolicited return >controls (e.g., "search results not legally binding" and "shift-JIS >encoded") that made sense. I don't think they are reasonable at all. A server should only indicate such if the client indicated it supported such. From list@netscape.com Mon Aug 14 17:58:50 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA19450 for ; Mon, 14 Aug 2000 17:58:49 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7ELpoj04943; Mon, 14 Aug 2000 14:51:50 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7ELvLM23651; Mon, 14 Aug 2000 14:57:21 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 14:57:21 -0700 (PDT) Message-Id: <4.3.2.7.0.20000814141703.00afc280@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Mon, 14 Aug 2000 14:19:04 -0700 To: Rich Salz , "Kurt D. Zeilenga" From: Bruce Greenblatt Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: ietf-ldapext@netscape.com In-Reply-To: <39981C39.1351868C@caveosystems.com> References: <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> <4.3.2.7.0.20000814090248.00b0cef0@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"8qw4gD.A.OxF.AtGm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 12:20 PM 8/14/2000 -0400, Rich Salz wrote: >I thought Harald and I had reasonable examples of unsolicited return >controls (e.g., "search results not legally binding" and "shift-JIS >encoded") that made sense. Hmmm... All that I got out of that was that if the client didn't understand the Japanese control then it would be gibberish. Thus, the client could safely ignore the control... Perhaps we need a new control on the Bind operation that lists the Client's supported controls. Then, the server is not allowed to send back any unsupported controls. Bruce ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Tue Aug 15 02:06:25 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA08541 for ; Tue, 15 Aug 2000 02:06:25 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7F5wOY19418; Mon, 14 Aug 2000 22:58:24 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7F63sA23632; Mon, 14 Aug 2000 23:03:55 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 23:03:55 -0700 (PDT) Reply-To: From: "Steven Legg" To: Cc: , Subject: RE: LDUP Working Group Agenda - Summary of objections to requirements draft Date: Tue, 15 Aug 2000 13:01:37 +1000 Message-ID: <000001c00665$21483de0$b05508cb@osmium.adacel.com.au> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2377.0 In-Reply-To: <001701bff8da$1e6110e0$17448490@vic.bigpond.net.au> Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2120.0 Resent-Message-ID: <"UnTjbC.A.zwF.J1Nm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Albert, > -----Original Message----- > From: owner-ietf-ldup@mail.imc.org > [mailto:owner-ietf-ldup@mail.imc.org]On Behalf Of Albert Langer > Sent: Saturday, 29 July 2000 7:24 > To: steven.legg@adacel.com.au > Cc: ietf-ldup@imc.org; ietf-ldapext@netscape.com > Subject: RE: LDUP Working Group Agenda - Summary of objections to > requirements draft [snip] > Work is proceeding, outside LDUP, but within LDAPEXT, on how to group > updates and/or do transactions in a standardized manner. > > Some applications already use existing directory services to add their > own non-standardized transactional semantics, relying only on the > LDAP/X.500 data model which *does* support atomic operations on a > single entry, but does not provide any means for locking a set of > entries or performing an operation atomically on that set. > > Methods include writing transaction identifiers to special > attributes in each of the set of entries, then checking that nobody > else did so, to any of them, after updating all the entries. > This requires > that only DUAs cooperating in a transactional application have write > access to all relevant attributes of the entries. > > This sort of thing can work in a single master environment, > but becomes > more complex in a multi-master environment. It is still possible > provided attributes as a whole are replicated atomically, even > though updates to different attributes of a single entry may be > merged - as shown by the fact that Active Directory applications can > do this, clumsily, using "consistency guids" and "child counts". > > However it becomes much more difficult, and perhaps impossible, with > URP, because even concurrent changes to individual attribute values of > a single attribute may be merged. If the required behaviour is for only one or the other of two concurrent updates to an attribute to be retained, instead of the values being merged, then this can be achieved by using the replace attribute alternative in an LDAP modify or by defining the attribute in question to be single-valued. [snip] > [Issue C - Convergence] > > SUMMARY OF OBJECTIONS TO REQUIREMENTS DRAFT > > > > The three key points are: > > > > 1) There is no requirement for convergence or "eventual > consistency". > > > > This looks like just poor expression, but in fact the LDUP > > architecture and > > Update Reconciliation Procedures do specify proposed standards that > > guarantee long term divergence by relying on timestamps > > [Steve] > The timestamp in the CSN is just a version number that happens > to increment without visible update activity. A version number > scheme that leaves gaps in the runs of version numbers isn't > broken as long as the version numbers from a server are > monotonically increasing. The LDUP CSN is monotonically > increasing too. > The only difference with the LDUP CSN is that the gaps just happen > to have a correlation to elapsed time. > > > and > > allowing DSAs to > > transmit changes out of order and drop changes when clocks > > are out of sync. > > This is easily fixed, once a requirement to fix it is agreed on. > > > > Details on how to fix it based on the Coda replication > protocols also > > adopted by Active Directory, and a semi-formal proof that the > > fix would be > > robust in the face of DSAs crashing and being restored from > > backups, network > > partitioning etc etc, is included in my draft below. > > Your proof neglects the effects of the purging mechanism. Restoring > a crashed DSA from a backup works if no change information is ever > removed. However if a backup restores a DSA to a state prior to the > purge point of any of the other replicas there exists the possibility > that the other DSAs have forgotten changes that the restored DSA > needs to bring it up to date and consistent with the others. > > I have a procedure for solving the replica consistency problems of > restored replicas and rejoined partitions but it is written in terms > of a log-based implementation using a different purging mechanism. > I'm still in the process of recasting it in state-based terms with > an update vector. > > [snip] > > [Albert] > My reference to "relying on timestamps and allowing DSAs to > transmit changes out of order and drop changes when clocks are out > of sync" should be read as a single sentence. Clocks are not > necessarily even monotonically increasing because they sometimes > jump around when administrators make mistakes, eg with time zone > and daylight savings settings. You should read section 5.1 of draft-ietf-ldup-urp-03.txt again. The CSNs aren't always generated straight from the system clock. URP imposes constraints on the generation of CSNs so that they are monotonically increasing from replication session to replication session despite a system clock that isn't. The references in the architecture draft to rejecting update operations need a bit of work. There is some confusion and ambiguity there about whether client updates or replication updates or both are being rejected. Eventual consistency can't be guaranteed if any replication updates are just arbitrarily dropped. We can reject a whole replication session if there are seriously different CSNs appearing provided no Update Vectors are revised, and provided we have an administrative procedure for repairing the situation. In effect the rogue server is shunned and the purge point stops advancing until corrective action is taken. The action to be taken would need to covered in the draft on replica administration. Servers are only permitted to send changes from a particular server out of order within the same replication session. All changes from that server in earlier sessions must have had lower CSNs and all changes reported in later sessions must have higher CSNs. Some LDUPers didn't want to require in order sending within a session and I'm okay with that since we can allow for it without breaking consistency. Any of the following replication consumer strategies will ensure eventual consistency. 1) Receive the primitives into temporary storage, sort them, then start applying them in order, progressively updating the Update Vector, and committing to the database after each group of primitives with the same CSN (i.e. each operation). Send the final Update Vector back to the supplier at the end. If there is a failure part way through the consumer will start from where it got up to, on the next replication session. 2) Run the replication session as a single local transaction. Apply the primitives as they arrive, but don't commit the transaction until the end. The new Update Vector is committed as part of the transaction before being sent back to the supplier. If there is a failure part way through, the transaction is rolled back (or not recovered on restart). The consumer will start from the same point as the previous (failed) session, on the next replication session. 3) Apply the primitives as they arrive, committing after each operation group, but don't change the Update Vector until the end. If there is a failure part way through, the consumer's Update Vector won't have changed, so the supplier will send the same set of primitives on the next replication session. URP handles primitives that are repeated or out of sequence so the correct final outcome will be reached. The consumer must not send any primitives from a failed session to any other server but that is easy to prevent. These primitives will have CSNs greater than the current local Update Vector. 4) Receive the primitives into persistent temporary storage and return a revised Update Vector straight away. The consumer then applies the primitives to the DIB at its leisure. In any subsequent replication session where it acts as the supplier the server would have to be able to send primitives still residing only in the temporary store. [snip] > My proposal, based on a similar vector to the current LDUP drafts, > does take account of the purging mechanism - it > prevents a purge at *any* replica until after *every* replica has > received the change. It does so, precisely for the reason you > mentioned. But if you restore any server from an old backup then the correctness of the purging mechanism is compromised because you have introduced a server that appears as though it hasn't received changes that the other servers were previously told it had. Suppose some entry E is at version 1 when I take backups of a set of replicas. As time passes, entry E is progressively updated and successive versions eventually become durable. Let's suppose that the durable version of E is version 53 when one of the replicas dies, forcing a restore. In its restored database, entry E has the version 1. The restored server will now receive changes referencing version 54+. I could see nothing in MDCR that would allow the restored server to bridge the gap between version 1 and version 53 of entry E. The sequence of changes up to version 53 have been lost to purging. > > The solution I proposed is based on existing implementations > (Coda and AD) that have been thoroughly researched and tested > and are known to work and to have a number of advantages. For > marketing purposes, AD also describes that as "state based" > rather than "log based", by coyly calling the log an "index". I prefer > to stick to the technical necessities and leave marketing doubletalk > to others. > > That proposal separates report propagation from update > processing and so > would be equally applicable to URP or MDCR. It also enables a natural > transition from single master to multi-master implementations > instead of > attempting to force implementation of multi-master as the current LDUP > proposals do. > > The Coda mechanism relies on the fact that change reports are > transmitted > in order and relies on version numbers rather than timestamps. > > If it used timestamps it would not work because clocks cannot be > guaranteed monotonic. > > If you have some other mechanism that can also be proved to > work, but is > somehow able to do it using timestamps and changes > transmitted in random > order, > that's quite an achievement as the Coda research was quite a > major project. > I look forward to reading the draft but repeat my > recommendation that you > study the Coda research. > > As already stated, I do not believe this is a fundamental problem > inherent in URP, since URP need not rely on timestamps. > > There may well be other and better ways to do it, as long as we are > agreed that it MUST be done. My description was certainly incomplete, > as a protocol for determining which replicas are currently active > and which are excluded is necessary for any method. I wrote it > because in the current proposals the mechanism was not merely > incomplete but absent, and there was explicit language about > dropping updates. When I checked back to the requirements I found > that what I thought was common ground in assuming a requirement for > eventual convergence, was so vague that simply dropping updates > and leaving replicas with different states for the same entries > could arguably be consistent with the stated requirements. [snip] > The current wording says the scope includes two models, "Eventual > Consistency" and "Limited Effort Eventual Consistency", defining the > latter as "where replicas may purge updates therefore dropping > propagation changes when some replica time boundary is exceeded, thus > leaving some changes replicated to a portion of the replica topology". > > Instead of ruling out the second, it explicitly says "LADP replication > should be flexible enough to cover the above range of capabilities". > The actual current drafts do "purge updates therefore > dropping propagation > changes when some replica time boundary is exceeded, thus leaving some > changes replicated to a portion of the replica topology." > > A requirement "to be flexible enough to cover this" is "simply > absurd". That is really an understatement. > > Are we agreed that the final requirements draft should unambiguously > require eventual convergence under ALL circumstances? I agree. It's been my working assumption from the beginning. [snip] > [Issue E - modifiersName] [snip] > You've over estimated the utility of the modifiersName attribute. > It only tells you who last changed something, not what they changed. > > [snip] > > [Albert] > On a single master system, "modifiersName" tells you that what they > changed is what was in the entry immediately before the change and > what they could have read before making that change. If it wasn't > broken before, then it broke because of that change by that DUA. Not necessarily. There could have been any number of updates prior to the latest one identifying the modifiersName. Any one of these could be responsible for "breaking" the entry. [snip] Regards, Steven From list@netscape.com Tue Aug 15 02:33:33 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA08715 for ; Tue, 15 Aug 2000 02:33:32 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7F6Mde27611; Mon, 14 Aug 2000 23:22:39 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7F6W8Y03452; Mon, 14 Aug 2000 23:32:08 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 23:32:08 -0700 (PDT) Message-Id: <4.3.2.7.0.20000814173220.00af81d0@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Mon, 14 Aug 2000 17:35:47 -0700 To: "Kurt D. Zeilenga" From: Bruce Greenblatt Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: Rich Salz , ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000814153112.00b0c7e0@router.boolean.net> References: <4.3.2.7.0.20000814141703.00afc280@pop.walltech.com> <39981C39.1351868C@caveosystems.com> <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> <4.3.2.7.0.20000814090248.00b0cef0@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"U9RPBD.A.a1.nPOm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 03:32 PM 8/14/2000 -0700, Kurt D. Zeilenga wrote: >At 02:19 PM 8/14/00 -0700, Bruce Greenblatt wrote: > >At 12:20 PM 8/14/2000 -0400, Rich Salz wrote: > >>I thought Harald and I had reasonable examples of unsolicited return > >>controls (e.g., "search results not legally binding" and "shift-JIS > >>encoded") that made sense. > > > >Hmmm... All that I got out of that was that if the client didn't > understand the Japanese control then it would be gibberish. Thus, the > client could safely ignore the control... Perhaps we need a new control > on the Bind operation that lists the Client's supported controls. Then, > the server is not allowed to send back any unsupported controls. > >Why not have the server list the controls in supports in the >Root DSE and have the client solicit which controls it desires >to be returned. Isn't that almost the same? What's the difference between having the client solicit the controls it desires, and listing the Client's supported controls on the Bind. There's no real need for the Client to consult the Root DSE. If the client just lists it's supported controls, the list can be canned rather than produced later on. Also, this would allow controls to supplied and returned on the Bind, and other operations without having to retrieve the Root DSE entry... Bruce >Kurt ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Tue Aug 15 02:49:40 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA08870 for ; Tue, 15 Aug 2000 02:49:39 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7F6cie01790; Mon, 14 Aug 2000 23:38:44 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7F6mDg12439; Mon, 14 Aug 2000 23:48:13 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 23:48:13 -0700 (PDT) Message-ID: <11981F9F5649D411BC92009027D0D18CBF5C6C@aspams01.cai.com> From: "Ramsay, Ron" To: "Kurt D. Zeilenga" , Bruce Greenblatt Cc: Rich Salz , ietf-ldapext@netscape.com Subject: RE: new internet draft - LDAP Extensions Style Guide Date: Tue, 15 Aug 2000 16:18:54 +1000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Resent-Message-ID: <"IYo0u.A.FCD.seOm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com I agree with Kurt. The LDAP encoding of values (I thought) requires the use of UTF-8. This is to avoid the need for negotiating the charset to be used. If Shift-JIS is to be used then the encoding must be binary. If Shift-JIS is to be allowed, the encoding of attribute values will have to contain charset information. This would be good, for my next elaboration would be to allow ASN.1 as an encoding of choice. Some work on the PDUs and, voila!, DAP. (I'll help write the I-D!) Ron. -----Original Message----- From: Kurt D. Zeilenga [mailto:Kurt@OpenLDAP.org] Sent: Tuesday, 15 August 2000 11:13 To: Bruce Greenblatt Cc: Rich Salz; ietf-ldapext@netscape.com Subject: Re: new internet draft - LDAP Extensions Style Guide At 05:35 PM 8/14/00 -0700, Bruce Greenblatt wrote: >At 03:32 PM 8/14/2000 -0700, Kurt D. Zeilenga wrote: >>At 02:19 PM 8/14/00 -0700, Bruce Greenblatt wrote: >>>At 12:20 PM 8/14/2000 -0400, Rich Salz wrote: >>>>I thought Harald and I had reasonable examples of unsolicited return >>>>controls (e.g., "search results not legally binding" and "shift-JIS >>>>encoded") that made sense. >>> >>>Hmmm... All that I got out of that was that if the client didn't understand the Japanese control then it would be gibberish. Thus, the client could safely ignore the control... Perhaps we need a new control on the Bind operation that lists the Client's supported controls. Then, the server is not allowed to send back any unsupported controls. >> >>Why not have the server list the controls in supports in the >>Root DSE and have the client solicit which controls it desires >>to be returned. > >Isn't that almost the same? What's the difference between having the client solicit the controls it desires, and listing the Client's supported controls on the Bind. We already have a requirement to list controls in the RootDSE. We don't need a second mechanism. > There's no real need for the Client to consult the Root DSE. If the > client just lists it's supported controls, the list can be canned > rather than produced later on. A control can only alter the behavior of the operation it is attached to: RFC2251, 4.1.12: Controls which are sent as part of a request apply only to that request and are not saved. Also, the list would not be protected by the bind negotiated security layers. And the client list of supported controls may depend upon other session state information (for example the loss of TLS may cause a number of controls to be no longer supported by the client). However, this issue aside, the primary reason that unsolicited controls should be avoided is the simple fact that LDAP is suppose to be a lightweight request/response based protocol. Unsolicited control require clients to deal with stuff they didn't request, this is unnecessary and undue weight. I note that the purpose of controls is to extend operations. If the client does not request extension, none should be provided. I also note that if you want to enable some behavior over the whole session, you likely need to define an extended operation. For example, you want requests/responses to use Shift-JIS instead of UTF-8, define a Shift-JIS extended operation which changes the encoding/decoding of future operations (allowing both Shift-JIS DNs and error text) (yuk!). Likewise for the other contrived examples. If I were (I'm not) to support Shift-JIS, I'd only support it in attribute values and I'd use a ";shift-JIS" transfer option OR extend directoryString to include Shift-JIS encoding and use ";binary". Kurt From list@netscape.com Tue Aug 15 02:59:43 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA08920 for ; Tue, 15 Aug 2000 02:59:42 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7F6mQe04023; Mon, 14 Aug 2000 23:48:26 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7F6vtg16813; Mon, 14 Aug 2000 23:57:55 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 23:57:55 -0700 (PDT) Date: Mon, 14 Aug 2000 23:57:42 -0700 (PDT) Message-Id: <200008150657.e7F6vgI14992@ywing.netscape.com> From: Kevin.Mulligan.HYUM@ywing.netscape.com To: Entrepreneur.GRCP@netscape.com Subject: Turn your POCKET CHANGE to...PROFIT$ -EKOJ X-Reply-To: doiteasy@aweber.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"o31a3C.A.ZGE.ynOm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit RECEIVE CHECKS 2-3 TIMES A WEEK! Did you know that you could be making between $100 and $300 cash a day? Working from the comfort of home. Working the hours YOU choose. Doing creative work that you enjoy. This can and is being done through an internationally known system called the "Cookie Cutter" marketing program. For more info: http://www.cc-pages.com/vips/KevinMulligan/index.htm or doiteasy@aweber.com NOT WORRIED ABOUT POCKET CHANGE AND LOOKING FOR THE SERIOUS BUCK! http://www.secrets2success.com/special111240 From list@netscape.com Tue Aug 15 03:10:26 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA09055 for ; Tue, 15 Aug 2000 03:10:26 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7F73OY03379; Tue, 15 Aug 2000 00:03:24 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7F78t621481; Tue, 15 Aug 2000 00:08:55 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 00:08:55 -0700 (PDT) Message-Id: <4.3.2.7.0.20000814153112.00b0c7e0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Mon, 14 Aug 2000 15:32:14 -0700 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: Rich Salz , ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000814141703.00afc280@pop.walltech.com> References: <39981C39.1351868C@caveosystems.com> <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> <4.3.2.7.0.20000814090248.00b0cef0@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"WkSQFD.A.BPF.FyOm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 02:19 PM 8/14/00 -0700, Bruce Greenblatt wrote: >At 12:20 PM 8/14/2000 -0400, Rich Salz wrote: >>I thought Harald and I had reasonable examples of unsolicited return >>controls (e.g., "search results not legally binding" and "shift-JIS >>encoded") that made sense. > >Hmmm... All that I got out of that was that if the client didn't understand the Japanese control then it would be gibberish. Thus, the client could safely ignore the control... Perhaps we need a new control on the Bind operation that lists the Client's supported controls. Then, the server is not allowed to send back any unsupported controls. Why not have the server list the controls in supports in the Root DSE and have the client solicit which controls it desires to be returned. Kurt From list@netscape.com Tue Aug 15 03:35:22 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA09215 for ; Tue, 15 Aug 2000 03:35:17 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7F5m1e16988; Mon, 14 Aug 2000 22:48:05 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7F5vUw20199; Mon, 14 Aug 2000 22:57:30 -0700 (PDT) Resent-Date: Mon, 14 Aug 2000 22:57:30 -0700 (PDT) Message-Id: <4.3.2.7.0.20000814173708.00b0eef0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Mon, 14 Aug 2000 18:13:03 -0700 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: Rich Salz , ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000814173220.00af81d0@pop.walltech.com> References: <4.3.2.7.0.20000814153112.00b0c7e0@router.boolean.net> <4.3.2.7.0.20000814141703.00afc280@pop.walltech.com> <39981C39.1351868C@caveosystems.com> <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> <4.3.2.7.0.20000814090248.00b0cef0@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"wnucOD.A.V7E.JvNm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:35 PM 8/14/00 -0700, Bruce Greenblatt wrote: >At 03:32 PM 8/14/2000 -0700, Kurt D. Zeilenga wrote: >>At 02:19 PM 8/14/00 -0700, Bruce Greenblatt wrote: >>>At 12:20 PM 8/14/2000 -0400, Rich Salz wrote: >>>>I thought Harald and I had reasonable examples of unsolicited return >>>>controls (e.g., "search results not legally binding" and "shift-JIS >>>>encoded") that made sense. >>> >>>Hmmm... All that I got out of that was that if the client didn't understand the Japanese control then it would be gibberish. Thus, the client could safely ignore the control... Perhaps we need a new control on the Bind operation that lists the Client's supported controls. Then, the server is not allowed to send back any unsupported controls. >> >>Why not have the server list the controls in supports in the >>Root DSE and have the client solicit which controls it desires >>to be returned. > >Isn't that almost the same? What's the difference between having the client solicit the controls it desires, and listing the Client's supported controls on the Bind. We already have a requirement to list controls in the RootDSE. We don't need a second mechanism. > There's no real need for the Client to consult the Root DSE. If the > client just lists it's supported controls, the list can be canned > rather than produced later on. A control can only alter the behavior of the operation it is attached to: RFC2251, 4.1.12: Controls which are sent as part of a request apply only to that request and are not saved. Also, the list would not be protected by the bind negotiated security layers. And the client list of supported controls may depend upon other session state information (for example the loss of TLS may cause a number of controls to be no longer supported by the client). However, this issue aside, the primary reason that unsolicited controls should be avoided is the simple fact that LDAP is suppose to be a lightweight request/response based protocol. Unsolicited control require clients to deal with stuff they didn't request, this is unnecessary and undue weight. I note that the purpose of controls is to extend operations. If the client does not request extension, none should be provided. I also note that if you want to enable some behavior over the whole session, you likely need to define an extended operation. For example, you want requests/responses to use Shift-JIS instead of UTF-8, define a Shift-JIS extended operation which changes the encoding/decoding of future operations (allowing both Shift-JIS DNs and error text) (yuk!). Likewise for the other contrived examples. If I were (I'm not) to support Shift-JIS, I'd only support it in attribute values and I'd use a ";shift-JIS" transfer option OR extend directoryString to include Shift-JIS encoding and use ";binary". Kurt From list@netscape.com Tue Aug 15 12:46:20 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA18914 for ; Tue, 15 Aug 2000 12:46:19 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FGcxY02831; Tue, 15 Aug 2000 09:38:59 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FGiVg20436; Tue, 15 Aug 2000 09:44:31 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 09:44:31 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Kurt D. Zeilenga" , ietf-ldapext@netscape.com Date: Tue, 15 Aug 2000 17:43:57 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Duplicate Entries question Reply-to: d.w.chadwick@salford.ac.uk CC: ietf-ldapext@netscape.com Message-ID: <3999815D.14796.6B623CE@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000807143305.00b30970@router.boolean.net> References: <398CAF55.25255.A66D6B5@localhost> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"z1S2nD.A.L-E.sNXm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Date forwarded: Mon, 7 Aug 2000 14:54:00 -0700 (PDT) Date sent: Mon, 07 Aug 2000 14:53:02 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" > I think you do need two flags. yep, you are right from your analysis below. David > > The criticality TRUE flags says the server must return > unavailableCriticalExtension if it is unwilling or unable > to attempt the operation as extended by the control. If > the server is willing and able to perform the operation > as extended by the control, the criticality flag is > irrelevant. > > If there are alternative operation semantics, the control > must provide information to control the semantics... such > as the "partial" flag defined in this proposal. So: > > 1) the service is unwilling or unable to attempt the operation as > extended by the control. > If critical, return unavailableExtendedOperation. > Otherwise, process operation as if control was not specified. > > 2) the service is willing and able to attempt the operation. > Critical flag is irrelevant. Process per control semantics: > a) partial TRUE or > b) partial FALSE. > > Kurt > > *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Tue Aug 15 12:46:24 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA18923 for ; Tue, 15 Aug 2000 12:46:24 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FGdAY02982; Tue, 15 Aug 2000 09:39:11 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FGigA20719; Tue, 15 Aug 2000 09:44:42 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 09:44:42 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Kurt D. Zeilenga" , Rich Salz , ietf-ldapext@netscape.com, Bruce Greenblatt Date: Tue, 15 Aug 2000 17:43:58 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: new internet draft - LDAP Extensions Style Guide Reply-to: d.w.chadwick@salford.ac.uk Message-ID: <3999815E.17708.6B62923@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000814173708.00b0eef0@router.boolean.net> References: <4.3.2.7.0.20000814173220.00af81d0@pop.walltech.com> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"j3Fvo.A.mCF.4NXm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT I agree with Kurt that controls are there to modify individual operations and therefore putting them on the Bind is a nonsense. The client may perform some operations and not want the controls to take effect (e.g. duplicate entries) even though it supports them. Thus a server should not send controls to the client if the client has not used them first on the operation. It follows from this that each operation request control needs to clearly specify which response controls may be applied by the server, but I guess we are already doing this in our extensions, although sometimes it might be implicit. This will need to be checked as the IDs move to proposed standard. David *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Tue Aug 15 12:53:23 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA19049 for ; Tue, 15 Aug 2000 12:53:21 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FGjmY05091; Tue, 15 Aug 2000 09:45:48 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FGj9621517; Tue, 15 Aug 2000 09:45:09 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 09:45:09 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: Bruce Greenblatt , ietf-ldapext@netscape.com Date: Tue, 15 Aug 2000 17:44:01 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: new internet draft - LDAP Extensions Style Guide Reply-to: d.w.chadwick@salford.ac.uk CC: ietf-ldapext@netscape.com Message-ID: <39998161.10315.6B63422@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"ZHAVU.A.9NF.POXm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Date forwarded: Fri, 11 Aug 2000 15:38:27 -0700 (PDT) Date sent: Fri, 11 Aug 2000 15:33:13 -0700 To: internet-drafts@ietf.org From: Bruce Greenblatt Subject: new internet draft - LDAP Extensions Style Guide Copies to: ietf-ldapext@netscape.com Forwarded by: ietf-ldapext@netscape.com > Please publish the attached personal submission. This is my first > time using the Word template. Hopefully, it is in a suitable > format... Note that this draft is not a response to anything in > particular. It just contains some general observations from watching > the traffic in the ldapext mailing list, the prior ldap mailing list, > and participation in X.500 and the long lost X.400 standardization > efforts. Comments are welcomed. Bruce one general and one specific comment regarding controls On a general note, if the document is a style guide, it should give people general guidelines on how to produce IDs, but should not itself be defining new controls. i.e. the doc should only reference existing controls and not be defining new ones such as deferRoles and copySubtree. It should refer to other IDs in which these are defined. A specific point is, can you add the sentence "when defining a control to be placed on an operation request, the specification must clearly specify which controls (if any) are allowed to be placed in the corresponding operation result" David > > Bruce *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Tue Aug 15 12:53:25 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA19059 for ; Tue, 15 Aug 2000 12:53:25 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FGkGY05298; Tue, 15 Aug 2000 09:46:16 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FGioA20953; Tue, 15 Aug 2000 09:44:50 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 09:44:50 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: Ellen Stokes , ietf-else@openldap.org Date: Tue, 15 Aug 2000 17:43:59 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: mailing list for ELSE (Evolving Ldap Schema Entries) Reply-to: d.w.chadwick@salford.ac.uk CC: ietf-ldapext@netscape.com Message-ID: <3999815F.16201.6B62D56@localhost> Priority: normal In-reply-to: <4.2.2.20000808075903.00a395b0@popmail2.austin.ibm.com> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"Ss2f9D.A.TFF.9NXm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Date forwarded: Tue, 8 Aug 2000 06:26:02 -0700 (PDT) Date sent: Tue, 08 Aug 2000 08:23:43 -0500 > A mailing list has been set up for continuing the discussion from the > informally-held BOF session on evolving ldap schema entries (see below > to subscribe). Ellen As I pointed out at the Pittsburg meeting, the problem statement in the slides is not 100% correct,as X.500 DAP does have a mechanism for updating schema elements by protocol, and for marking schema elements as obsolete David > > The consensus at this session was that this is a worthwhile topic to > pursue and discussion will continue on the new mailing list below. It > was also agreed that a charter will be developed and a request to > either schedule a BOF, a separate Workgroup, or a new workitem to the > existing ldapext workgroup at the December San Diego IETF meeting. > > Attached are the working slides from this BOF session. They are also > posted in the ELSE archive. > > Ellen > > > > >Post: mailto:ietf-else@OpenLDAP.org > >Subscribe: mailto:ietf-else-request@OpenLDAP.org?body=subscribe > >Unsubscribe: mailto:ietf-else-request@OpenLDAP.org?body=unsubscribe > >Policy: Posts submitted from non-subscribers require moderator > >approval Archive: http://www.openldap.org/lists/ietf-else/ > *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Tue Aug 15 12:55:40 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA19076 for ; Tue, 15 Aug 2000 12:55:39 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FGmxY06420; Tue, 15 Aug 2000 09:48:59 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FGiuU21149; Tue, 15 Aug 2000 09:44:56 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 09:44:56 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Kurt D. Zeilenga" , , "Jim Sermersheim" Date: Tue, 15 Aug 2000 17:44:00 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Duplicate entries filter Reply-to: d.w.chadwick@salford.ac.uk Message-ID: <39998160.23496.6B63067@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000811140859.00b34ce0@router.boolean.net> References: X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"x-wfb.A.nIF.EOXm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Date sent: Fri, 11 Aug 2000 14:40:28 -0700 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" > The choices could be clarified as follows: > > a) all entries within scope are duplicated (per the > control) which match the filter may be returned by the > server (subject to other factors) > > b) all entries within scope and match the filter are > duplicated (per the control) and may be returned by the > server (subject to other factors). > I personally thought that b) was always the intention of this control. i.e. it was to act on the way that the results of the search operation were returned, but was not meant to affect the operation of the search filter. If one considers that in many cases many thousands of entries are typically filtered down to only a handful, then duplication of the results with this control is only a small task, as opposed to a) where we have duplication of the thousands of entries and then the application of the filter to each of these. This is why I was surprised to see the addition of the sentence that I pointed out in my first message. David > That is, by "filtered" I meant to act of matching the > entries against the filter, not the act of trimming results > due to other factors. > > > > >>>>That is, > >>>> a) all entries within scope are duplicated per the > >>>> control, > >>>> then filtered. > >>>> > >>>> b) all entries within scope are filtered, then duplicated > >>>> per the control. > >>>> > > BTW, I'd avoid the a v. b BOOLEAN if at all possible. > *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Tue Aug 15 16:14:12 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA23662 for ; Tue, 15 Aug 2000 16:14:10 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FK72Y19064; Tue, 15 Aug 2000 13:07:02 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FKCZM17520; Tue, 15 Aug 2000 13:12:35 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 13:12:35 -0700 (PDT) Message-Id: <4.3.2.7.0.20000815130709.00afe180@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 15 Aug 2000 13:10:49 -0700 To: d.w.chadwick@salford.ac.uk, ietf-ldapext@netscape.com From: Bruce Greenblatt Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: ietf-ldapext@netscape.com In-Reply-To: <39998161.10315.6B63422@localhost> References: <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"rVQ9gD.A.cRE.yQam5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:44 PM 8/15/2000 +0100, David Chadwick wrote: >one general and one specific comment regarding controls >On a general note, if the document is a style guide, it should give >people general guidelines on how to produce IDs, but should not >itself be defining new controls. i.e. the doc should only reference >existing controls and not be defining new ones such as deferRoles >and copySubtree. It should refer to other IDs in which these are >defined. David, Thanks for the comments... This draft does not define new controls or extended operations. In some instances, in the absence of well written documents that create appropriate definitions, examples are given that use hypothetical controls, etc. In a future version, I will clarify that fact. >A specific point is, can you add the sentence "when defining a >control to be placed on an operation request, the specification must >clearly specify which controls (if any) are allowed to be placed in >the corresponding operation result" Good idea. I will include verbiage to that effect in the next revision. >David > > > > > > Bruce > > >*************************************************** > >David Chadwick >IS Institute, University of Salford, Salford M5 4WT >Tel +44 161 295 5351 Fax +44 161 745 8169 >Mobile +44 790 167 0359 >Email D.W.Chadwick@salford.ac.uk >Home Page http://www.salford.ac.uk/its024/chadwick.htm >Understanding X.500 http://www.salford.ac.uk/its024/X500.htm >X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm >Entrust key validation string MLJ9-DU5T-HV8J > >*************************************************** ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Tue Aug 15 16:25:45 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA23936 for ; Tue, 15 Aug 2000 16:25:40 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FKCYe07060; Tue, 15 Aug 2000 13:12:34 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FKM2I22335; Tue, 15 Aug 2000 13:22:02 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 13:22:02 -0700 (PDT) Message-Id: <4.3.2.7.0.20000815131418.00b09c10@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 15 Aug 2000 13:18:27 -0700 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: d.w.chadwick@salford.ac.uk, ietf-ldapext@netscape.com, ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000815130709.00afe180@pop.walltech.com> References: <39998161.10315.6B63422@localhost> <4.3.2.7.0.20000811152642.00afd530@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"9t8MX.A.iaF.kZam5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 01:10 PM 8/15/00 -0700, Bruce Greenblatt wrote: >>A specific point is, can you add the sentence "when defining a >>control to be placed on an operation request, the specification must >>clearly specify which controls (if any) are allowed to be placed in >>the corresponding operation result" > > >Good idea. I will include verbiage to that effect in the next revision. Just one comment on this comment... "when extending an operation though definition of one or more controls, the specification SHOULD clearly specify interactions with other, previously-defined, extensions (using other controls). The specification MAY NOT restrict further extension of the operation by placement of additional, yet to be defined, controls." From list@netscape.com Tue Aug 15 16:31:45 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA24109 for ; Tue, 15 Aug 2000 16:31:44 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FKKne08852; Tue, 15 Aug 2000 13:20:49 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FKUI227702; Tue, 15 Aug 2000 13:30:18 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 13:30:18 -0700 (PDT) Message-Id: <4.3.2.7.0.20000815131059.00afb6f0@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 15 Aug 2000 13:29:45 -0700 To: ietf-ldapext@netscape.com From: Bruce Greenblatt Subject: Re: new internet draft - LDAP Extensions Style Guide In-Reply-To: <3999815E.17708.6B62923@localhost> References: <4.3.2.7.0.20000814173708.00b0eef0@router.boolean.net> <4.3.2.7.0.20000814173220.00af81d0@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"Pqq2a.A.QvG.Wham5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:43 PM 8/15/2000 +0100, David Chadwick wrote: >I agree with Kurt that controls are there to modify individual >operations and therefore putting them on the Bind is a nonsense. I would not say that it is "a nonsense". As it stands now, the Bind Operation does have an affect on every succeeding operation. For example, the identity and the authentication mechanism in the Bind will result in different privileges and levels of access to the directory information. It seems natural to me to include at the time of the bind a list of Controls that the client is willing to accept from the server. The alternatives are I see it are: - don't ever let the client tell the server - include a list of acceptable controls with each operation request, assuming that the server is really stupid, and can't remember the list from one operation to the next. - define a new extended operation that allows the client to submit a list of acceptable controls I seem to remember in one of the draft versions of RFC 2251 that there was a way to set client options/defaults. I'd thought that it was in the Bind someplace, but was later dropped. Maybe one of the Marks (Smith or Wahl) can remember better (not that history matters that much). This gives a way of allowing for controls which are not specifically solicited to be returned by the server, without the client having to specifically request them. Perhaps it doesn't matter too much (as you say below), if each control definition includes the list of valid other controls that may be returned in the response, and unsolicited, unsupported controls are always ignored by the client. Hopefully, the interaction amongst controls will not become too complex in the future. >The client may perform some operations and not want the controls >to take effect (e.g. duplicate entries) even though it supports them. > >Thus a server should not send controls to the client if the client has >not used them first on the operation. It follows from this that each >operation request control needs to clearly specify which response >controls may be applied by the server, but I guess we are already >doing this in our extensions, although sometimes it might be implicit. >This will need to be checked as the IDs move to proposed standard. > >David > >*************************************************** > >David Chadwick >IS Institute, University of Salford, Salford M5 4WT >Tel +44 161 295 5351 Fax +44 161 745 8169 >Mobile +44 790 167 0359 >Email D.W.Chadwick@salford.ac.uk >Home Page http://www.salford.ac.uk/its024/chadwick.htm >Understanding X.500 http://www.salford.ac.uk/its024/X500.htm >X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm >Entrust key validation string MLJ9-DU5T-HV8J > >*************************************************** ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Tue Aug 15 16:40:57 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA24343 for ; Tue, 15 Aug 2000 16:40:56 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FKTwe11092; Tue, 15 Aug 2000 13:29:59 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FKdR203193; Tue, 15 Aug 2000 13:39:27 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 13:39:27 -0700 (PDT) Message-Id: <4.3.2.7.0.20000815132754.00b16630@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 15 Aug 2000 13:36:55 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: Duplicate entries filter Cc: , "Jim Sermersheim" In-Reply-To: <39998160.23496.6B63067@localhost> References: <4.3.2.7.0.20000811140859.00b34ce0@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"-2BPnC.A.nx._pam5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:44 PM 8/15/00 +0100, David Chadwick wrote: >i.e. it was to act on the way that the results of the search operation >were returned, but was not meant to affect the operation of the >search filter. If one considers that in many cases many thousands >of entries are typically filtered down to only a handful, then >duplication of the results with this control is only a small task, as >opposed to a) where we have duplication of the thousands of >entries and then the application of the filter to each of these. a) sounds like lots more work, but in reality may not be (due to indexing and/or other optimizations). The server uses indexing (as normal) to locate candidates, duplicates the candidates, applies the filter, returns the results. However, this shouldn't be the primary issue of a) v. b) (or both). The issue should be what behavior do applications need and whether a) or b) (or both) or other controls fulfill the need. I think we should take a step back and discuss background and intended use information before choosing. Kurt From list@netscape.com Tue Aug 15 16:51:38 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA24704 for ; Tue, 15 Aug 2000 16:51:36 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FKdce13195; Tue, 15 Aug 2000 13:39:39 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FKn7Y08134; Tue, 15 Aug 2000 13:49:07 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 13:49:07 -0700 (PDT) Message-Id: <4.3.2.7.0.20000815134307.00aed210@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 15 Aug 2000 13:46:34 -0700 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000815131059.00afb6f0@pop.walltech.com> References: <3999815E.17708.6B62923@localhost> <4.3.2.7.0.20000814173708.00b0eef0@router.boolean.net> <4.3.2.7.0.20000814173220.00af81d0@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"KGHnu.A.g-B.Bzam5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 01:29 PM 8/15/00 -0700, Bruce Greenblatt wrote: >... and unsolicited, unsupported controls are always ignored by the client. The server MUST assume that an unsupported control received by the client will cause undefined behavior as RFC2251 does not define the behavior. Hence, a server SHOULD NOT sent any control to the client for which it does not known (via whatever means) the client supports. Kurt From list@netscape.com Tue Aug 15 17:00:28 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA25394 for ; Tue, 15 Aug 2000 17:00:28 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7FKnOe15038; Tue, 15 Aug 2000 13:49:25 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7FKwrc12211; Tue, 15 Aug 2000 13:58:53 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 13:58:53 -0700 (PDT) From: pmoore@peerless.com X-Lotus-FromDomain: AUCO To: ietf-ldapext@netscape.com Message-ID: <8825693C.0073A0E2.00@notes.auco.com> Date: Tue, 15 Aug 2000 13:56:33 -0700 Subject: C API I-D Mime-Version: 1.0 Content-type: text/plain; charset=us-ascii Content-Disposition: inline Resent-Message-ID: <"OEVuqC.A.h-C.M8am5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com What has happened to the c api spec? Its no longer mentiononed on the WG IETF web page, nor is it an I-D or an RFC or in the RFC editor queue. Is there a more recent version than 4? Thanks in advance Paul Moore From list@netscape.com Tue Aug 15 23:38:58 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA06058 for ; Tue, 15 Aug 2000 23:38:57 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7G3VZY25778; Tue, 15 Aug 2000 20:31:36 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7G3b7c29994; Tue, 15 Aug 2000 20:37:07 -0700 (PDT) Resent-Date: Tue, 15 Aug 2000 20:37:07 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Tue, 15 Aug 2000 21:36:45 -0600 From: "Haripriya S" To: Subject: New draft - LDAP control for modify and delete on multiple entries Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_83DB2D44.6B0A64D4" Resent-Message-ID: <"DvYPbD.A.MUH.ixgm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_83DB2D44.6B0A64D4 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable I have submitted a draft titled "EntrySelection control for LDAP modify = and delete operations on multiple entries". It is available at http://www.i= etf.org/internet-drafts/draft-haripriya-ldapext-entryselect-00.txt . = Please go through this and give your comments.=20 Thanks and Regards, Haripriya --=_83DB2D44.6B0A64D4 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
 
I have submitted a draft titled "EntrySelection = control for=20 LDAP modify and delete operations on multiple entries". It is available at = http://www.ietf.org/internet-drafts/draft-haripriya-ldapext-en= tryselect-00.txt =20 . Please go through this and give your comments.
 
Thanks and Regards,
Haripriya
--=_83DB2D44.6B0A64D4-- From list@netscape.com Wed Aug 16 08:55:15 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA23730 for ; Wed, 16 Aug 2000 08:55:13 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GCiAe09965; Wed, 16 Aug 2000 05:44:10 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GCrfA02861; Wed, 16 Aug 2000 05:53:41 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 05:53:41 -0700 (PDT) Message-Id: <200008161239.IAA27708@roadblock.missi.ncsc.mil> From: "Miklos, Sue A." To: "'Bruce Greenblatt'" , ietf-ldapext@netscape.com Subject: RE: new internet draft - LDAP Extensions Style Guide Date: Wed, 16 Aug 2000 08:52:57 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Resent-Message-ID: <"gYZHD.A.bs.U7om5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com clarification request, please - I interpret the first statement below (Bind discussion) to indicate that any authentication/authorization information is ONLY conveyed during the Bind argument/response exchange. Is this correct? Can subsequent operations also convey information useful to an access control decision function? regards, Sandi -----Original Message----- From: Bruce Greenblatt [mailto:bgreenblatt@directory-applications.com] Sent: Tuesday, August 15, 2000 4:30 PM To: ietf-ldapext@netscape.com Subject: Re: new internet draft - LDAP Extensions Style Guide At 05:43 PM 8/15/2000 +0100, David Chadwick wrote: >I agree with Kurt that controls are there to modify individual >operations and therefore putting them on the Bind is a nonsense. I would not say that it is "a nonsense". As it stands now, the Bind Operation does have an affect on every succeeding operation. For example, the identity and the authentication mechanism in the Bind will result in different privileges and levels of access to the directory information. It seems natural to me to include at the time of the bind a list of Controls that the client is willing to accept from the server. The alternatives are I see it are: - don't ever let the client tell the server - include a list of acceptable controls with each operation request, assuming that the server is really stupid, and can't remember the list from one operation to the next. - define a new extended operation that allows the client to submit a list of acceptable controls I seem to remember in one of the draft versions of RFC 2251 that there was a way to set client options/defaults. I'd thought that it was in the Bind someplace, but was later dropped. Maybe one of the Marks (Smith or Wahl) can remember better (not that history matters that much). This gives a way of allowing for controls which are not specifically solicited to be returned by the server, without the client having to specifically request them. Perhaps it doesn't matter too much (as you say below), if each control definition includes the list of valid other controls that may be returned in the response, and unsolicited, unsupported controls are always ignored by the client. Hopefully, the interaction amongst controls will not become too complex in the future. >The client may perform some operations and not want the controls >to take effect (e.g. duplicate entries) even though it supports them. > >Thus a server should not send controls to the client if the client has >not used them first on the operation. It follows from this that each >operation request control needs to clearly specify which response >controls may be applied by the server, but I guess we are already >doing this in our extensions, although sometimes it might be implicit. >This will need to be checked as the IDs move to proposed standard. > >David > >*************************************************** > >David Chadwick >IS Institute, University of Salford, Salford M5 4WT >Tel +44 161 295 5351 Fax +44 161 745 8169 >Mobile +44 790 167 0359 >Email D.W.Chadwick@salford.ac.uk >Home Page http://www.salford.ac.uk/its024/chadwick.htm >Understanding X.500 http://www.salford.ac.uk/its024/X500.htm >X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm >Entrust key validation string MLJ9-DU5T-HV8J > >*************************************************** ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html **************************************************************************** * This confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. **************************************************************************** ** From list@netscape.com Wed Aug 16 10:07:17 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA25347 for ; Wed, 16 Aug 2000 10:07:16 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GDthe15034; Wed, 16 Aug 2000 06:55:43 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GE5FM20903; Wed, 16 Aug 2000 07:05:15 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 07:05:15 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: Bruce Greenblatt , ietf-ldapext@netscape.com Date: Wed, 16 Aug 2000 15:04:32 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: new internet draft - LDAP Extensions Style Guide Reply-to: d.w.chadwick@salford.ac.uk Message-ID: <399AAD80.1200.B4A9F9F@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000815131059.00afb6f0@pop.walltech.com> References: <3999815E.17708.6B62923@localhost> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"jMPKTD.A.VGF.a-pm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT > I would not say that it is "a nonsense". I thought I had given a good example of where it was not a sensible strategy to be adopted by a server, for example, using the duplicate entries control in a Search result when the client did not ask for it on the Search request, but had said on the Bind that it can support this control. It is completely inappropriate in my opinion for the Server to spontaneously change the behaviour of an operation without being asked to by the client. My viewpoint is that a control is a "tweak" on an operation asked for by the client, and the server may be able to offer this "tweaked" service or not. But the server must always offer the standard service if no tweak is requested. > The alternatives are I see it are: > > - don't ever let the client tell the server > - include a list of acceptable controls with each operation request, > assuming that the server is really stupid, and > can't remember the list from one operation to the next. > - define a new extended operation that allows the client to submit a > list of acceptable controls there is the obvious alternative missing from your list, which we have now, ie. the client specifies which control it wants on each individual operation :-) David *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Wed Aug 16 10:09:24 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA25431 for ; Wed, 16 Aug 2000 10:09:18 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GDtle15076; Wed, 16 Aug 2000 06:55:47 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GE5JM20985; Wed, 16 Aug 2000 07:05:19 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 07:05:19 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Kurt D. Zeilenga" , , "Jim Sermersheim" Date: Wed, 16 Aug 2000 15:04:31 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Duplicate entries filter Reply-to: d.w.chadwick@salford.ac.uk CC: , "Jim Sermersheim" Message-ID: <399AAD7F.10004.B4A9D9C@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000815132754.00b16630@router.boolean.net> References: <39998160.23496.6B63067@localhost> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"NmeJr.A.NHF.c-pm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT > The issue should be what behavior do applications need and whether a) > or b) (or both) or other controls fulfill the need. I think we should > take a step back and discuss background and intended use information > before choosing. > Agreed. The usage scenario that I have heard is producing a paper telephone directory, where you want one line for each telephone number, so that people may be listed several times in the directory. If the entry is only returned once with multiple values (as in the standard Search), this does not produce the desired result. I cannot remember another usage scenario being presented, but maybe others can? David > Kurt > > *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Wed Aug 16 10:48:13 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA26544 for ; Wed, 16 Aug 2000 10:48:11 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GEahe18602; Wed, 16 Aug 2000 07:36:43 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GEkFo02950; Wed, 16 Aug 2000 07:46:15 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 07:46:15 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816071751.00b1adb0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 07:43:48 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: Bruce Greenblatt , ietf-ldapext@netscape.com In-Reply-To: <399AAD80.1200.B4A9F9F@localhost> References: <4.3.2.7.0.20000815131059.00afb6f0@pop.walltech.com> <3999815E.17708.6B62923@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"2NYYuB.A.Ot.2kqm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 03:04 PM 8/16/00 +0100, David Chadwick wrote: >> I would not say that it is "a nonsense". > >I thought I had given a good example of where it was not a sensible >strategy to be adopted by a server, for example, using the duplicate >entries control in a Search result when the client did not ask for it on >the Search request, but had said on the Bind that it can support this >control. But please note that control upon on bind operation are not protected by the privacy and integrity negotiated by the bind operation itself. This must be taken into consideration. Also, the Bind resultCode should be a clear indicate of authentication/authorization result and not overload with extension negotiation. Lastly, RFC2251 places specific restrictions upon the uses of request controls which must be taken into consideration. Controls upon the bind operation should be avoided. Extended operations is more suitable mechanism for extending "the session". StartTLS is a good example of such. Kurt From list@netscape.com Wed Aug 16 11:12:39 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA27476 for ; Wed, 16 Aug 2000 11:12:33 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GF3kY14669; Wed, 16 Aug 2000 08:03:46 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GF9KM08941; Wed, 16 Aug 2000 08:09:20 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 08:09:20 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816075328.00b27db0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 08:07:04 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: Duplicate entries filter Cc: , "Jim Sermersheim" In-Reply-To: <399AAD7F.10004.B4A9D9C@localhost> References: <4.3.2.7.0.20000815132754.00b16630@router.boolean.net> <39998160.23496.6B63067@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"1wvxHD.A.bLC.f6qm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 03:04 PM 8/16/00 +0100, David Chadwick wrote: >> The issue should be what behavior do applications need and whether a) >> or b) (or both) or other controls fulfill the need. I think we should >> take a step back and discuss background and intended use information >> before choosing. >> > >Agreed. The usage scenario that I have heard is producing a paper >telephone directory, where you want one line for each telephone >number, so that people may be listed several times in the directory. >If the entry is only returned once with multiple values (as in the >standard Search), this does not produce the desired result. I cannot >remember another usage scenario being presented, but maybe >others can? My scenario is similar, I wanted to be able to search the directory for entries listing a specific area code and where the entry contained multiple values with this area code are returned as duplicated entries. I only want and desire any duplicates of containing a value within the desired area code. (One could call this "matched" duplicated entries). Kurt From list@netscape.com Wed Aug 16 12:34:55 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA29666 for ; Wed, 16 Aug 2000 12:34:50 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GGM0e01009; Wed, 16 Aug 2000 09:22:00 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GGVU612882; Wed, 16 Aug 2000 09:31:30 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 09:31:30 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Wed, 16 Aug 2000 10:31:18 -0600 From: "Jim Sermersheim" To: , Cc: Subject: Re: Duplicate entries filter Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_C1996FCB.D8B9D688" Resent-Message-ID: <"EhN_w.A.uID.hHsm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_C1996FCB.D8B9D688 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable These examples do reflect the original intent of the I-D. While writing = it, I had assumed the behavior previously discussed as a) (filter, = duplicate, return). Given the usefulness of Kurt's example, I changed it = to b) [filter, duplicate, filter, return (if your server can do this more = efficiently, more power to ya)]. Then the notion of a flag was introduced. I think a better alternative is to have the behavior be a) (which in my = mind is simpler to implement), then allow use of the matched values = control to produce the results of b). This way we are back to two separate = controls that have non-overlapping specific functionality. If we agree to = this proposal, I'll add appropriate text to the Interaction With Other = Controls section. Jim >>> "Kurt D. Zeilenga" 8/16/00 9:07:04 AM >>> At 03:04 PM 8/16/00 +0100, David Chadwick wrote: >> The issue should be what behavior do applications need and whether a) >> or b) (or both) or other controls fulfill the need. I think we should >> take a step back and discuss background and intended use information >> before choosing. >>=20 > >Agreed. The usage scenario that I have heard is producing a paper=20 >telephone directory, where you want one line for each telephone=20 >number, so that people may be listed several times in the directory.=20 >If the entry is only returned once with multiple values (as in the=20 >standard Search), this does not produce the desired result. I cannot=20 >remember another usage scenario being presented, but maybe=20 >others can? My scenario is similar, I wanted to be able to search the directory for entries listing a specific area code and where the entry contained multiple values with this area code are returned as duplicated entries. I only want and desire any duplicates of containing a value within the desired area code. (One could call this "matched" duplicated entries). Kurt --=_C1996FCB.D8B9D688 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
These examples do reflect the original intent of the = I-D.=20 While writing it, I had assumed the behavior previously discussed as a) = (filter,=20 duplicate, return). Given the usefulness of Kurt's example, I changed it = to b)=20 [filter, duplicate, filter, return (if your server can do this more = efficiently,=20 more power to ya)]. Then the notion of a flag was introduced.
 
I think a better alternative is to have the behavior = be a)=20 (which in my mind is simpler to implement), then allow use of the matched = values=20 control to produce the results of b). This way we are back to two=20 separate controls that have non-overlapping specific functionality. = If we=20 agree to this proposal, I'll add appropriate text to the Interaction With = Other=20 Controls section.
 
Jim

>>> "Kurt D. Zeilenga"=20 <Kurt@OpenLDAP.org> 8/16/00 9:07:04 AM >>>
At 03:04 PM = 8/16/00=20 +0100, David Chadwick wrote:

>> The issue should be what = behavior=20 do applications need and whether a)
>> or b) (or both) or = other=20 controls fulfill the need.  I think we should
>> take a step = back=20 and discuss background and intended use information
>> before=20 choosing.
>>
>
>Agreed. The usage scenario that I = have=20 heard is producing a paper
>telephone directory, where you want one = line=20 for each telephone
>number, so that people may be listed several = times in=20 the directory.
>If the entry is only returned once with multiple = values=20 (as in the
>standard Search), this does not produce the desired = result. I=20 cannot
>remember another usage scenario being presented, but = maybe=20
>others can?

My scenario is similar, I wanted to be able to = search=20 the
directory for entries listing a specific area code and where
the = entry=20 contained multiple values with this area code are
returned as duplicated= =20 entries.  I only want and desire any
duplicates of containing a = value=20 within the desired area
code.  (One could call this "matched" = duplicated=20 entries).

Kurt

--=_C1996FCB.D8B9D688-- From list@netscape.com Wed Aug 16 12:57:59 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA00120 for ; Wed, 16 Aug 2000 12:57:55 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GGokY00776; Wed, 16 Aug 2000 09:50:46 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GGuJk22393; Wed, 16 Aug 2000 09:56:19 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 09:56:19 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816094854.00aef2c0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 09:53:48 -0700 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" Subject: Re: Duplicate entries filter Cc: , In-Reply-To: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=====================_62862441==_.ALT" Resent-Message-ID: <"AI18U.A.RdF.xesm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=====================_62862441==_.ALT Content-Type: text/plain; charset="us-ascii" At 10:31 AM 8/16/00 -0600, Jim Sermersheim wrote: >These examples do reflect the original intent of the I-D. While writing it, I had assumed the behavior previously discussed as a) (filter, duplicate, return). Given the usefulness of Kurt's example, I changed it to b) [filter, duplicate, filter, return (if your server can do this more efficiently, more power to ya)]. Then the notion of a flag was introduced. > >I think a better alternative is to have the behavior be a) (which in my mind is simpler to implement), then allow use of the matched values control to produce the results of b). This way we are back to two separate controls that have non-overlapping specific functionality. If we agree to this proposal, I'll add appropriate text to the Interaction With Other Controls section. I do prefer two separate controls as I believe it easier to describe control combination semantics. duplicate-entries: filter, dup, return results matched-values: filter, trim, return results duplicate-entries+matched-values: filter, dup, trim, return results matched-values+duplicate-entries: filter, trim, dup, return results other combinations? --=====================_62862441==_.ALT Content-Type: text/html; charset="us-ascii" At 10:31 AM 8/16/00 -0600, Jim Sermersheim wrote:
These examples do reflect the original intent of the I-D. While writing it, I had assumed the behavior previously discussed as a) (filter, duplicate, return). Given the usefulness of Kurt's example, I changed it to b) [filter, duplicate, filter, return (if your server can do this more efficiently, more power to ya)]. Then the notion of a flag was introduced.
 
I think a better alternative is to have the behavior be a) (which in my mind is simpler to implement), then allow use of the matched values control to produce the results of b). This way we are back to two separate controls that have non-overlapping specific functionality. If we agree to this proposal, I'll add appropriate text to the Interaction With Other Controls section.

I do prefer two separate controls as I believe it easier to describe
control combination semantics.

duplicate-entries:  filter, dup, return results
matched-values:  filter, trim, return results

duplicate-entries+matched-values: filter, dup, trim, return results
matched-values+duplicate-entries: filter, trim, dup, return results

other combinations? --=====================_62862441==_.ALT-- From list@netscape.com Wed Aug 16 13:31:58 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA00685 for ; Wed, 16 Aug 2000 13:31:57 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GHOfY07255; Wed, 16 Aug 2000 10:24:41 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GHUGY08231; Wed, 16 Aug 2000 10:30:16 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 10:30:16 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816101134.00ae2340@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 10:27:52 -0700 To: "Haripriya S" From: "Kurt D. Zeilenga" Subject: Re: New draft - LDAP control for modify and delete on multiple entries Cc: In-Reply-To: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=====================_64910616==_.ALT" Resent-Message-ID: <"ixFlLB.A.CAC.m-sm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=====================_64910616==_.ALT Content-Type: text/plain; charset="us-ascii" Is the (modify/delete) operation still performed as an atomic operation? I find the use of controls to return continuations awkward at best. Such controls which extend operations which the "scope" of existing operations should use extended partial responses to return "continuations". In fact, I don't see why we need separate controls/responses for each of these operation. I, personally, would rather see: A) extendedPartialResponses generalized such that they may returned in response to any operation (after appropriate client solicitation). B) scopingControl be defined to allow specification of "scope" information (allowing use of "one" and "subtree" scopes). Per entry/continuation responses may be returned. C) filterControl be defined to allow specification of a filter which must match before performing operation. Per entry/continuation responses may be returned. I would note that such extensions must be very explicit in regards to "atomic" properties of the "operation". I would recommend that only entry level atomic properties be maintained, not operation level atomic properties. At 09:36 PM 8/15/00 -0600, Haripriya S wrote: > >I have submitted a draft titled "EntrySelection control for LDAP modify and delete operations on multiple entries". It is available at http://www.ietf.org/internet-drafts/draft-haripriya-ldapext-entryselect-00.txt . Please go through this and give your comments. > >Thanks and Regards, >Haripriya --=====================_64910616==_.ALT Content-Type: text/html; charset="us-ascii" Is the (modify/delete) operation still performed as an atomic
operation?

I find the use of controls to return continuations awkward at
best.  Such controls which extend operations which the "scope"
of existing operations should use extended partial responses
to return "continuations".  In fact, I don't see why we need
separate controls/responses for each of these operation.  I,
personally, would rather see:

A) extendedPartialResponses generalized such that they may
returned in response to any operation (after appropriate
client solicitation).

B) scopingControl be defined to allow specification of
"scope" information (allowing use of "one" and "subtree"
scopes).  Per entry/continuation responses may be returned.

C) filterControl be defined to allow specification of a
filter which must match before performing operation.
Per entry/continuation responses may be returned.

I would note that such extensions must be very explicit
in regards to "atomic" properties of the "operation".  I
would recommend that only entry level atomic properties be
maintained, not operation level atomic properties.

At 09:36 PM 8/15/00 -0600, Haripriya S wrote:
 
I have submitted a draft titled "EntrySelection control for LDAP modify and delete operations on multiple entries". It is available at http://www.ietf.org/internet-drafts/draft-haripriya-ldapext-entryselect-00.txt  . Please go through this and give your comments.
 
Thanks and Regards,
Haripriya
--=====================_64910616==_.ALT-- From list@netscape.com Wed Aug 16 13:59:48 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA01092 for ; Wed, 16 Aug 2000 13:59:47 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GHq8Y12459; Wed, 16 Aug 2000 10:52:08 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GHvg221840; Wed, 16 Aug 2000 10:57:42 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 10:57:42 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Wed, 16 Aug 2000 11:57:22 -0600 From: "Jim Sermersheim" To: Cc: , Subject: Re: Duplicate entries filter Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_0B53A516.7A1B7441" Resent-Message-ID: <"BL0YyB.A.-UF.UYtm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_0B53A516.7A1B7441 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable >>> "Kurt D. Zeilenga" 8/16/00 10:53:48 AM >>> >>=20 >>I think a better alternative is to have the behavior be a) (which in my = mind is simpler to implement), then allow use of the matched values = control to produce the results of b). This way we are back to two separate = controls that have non-overlapping specific functionality. If we agree to = this proposal, I'll add appropriate text to the Interaction With Other = Controls section. > >I do prefer two separate controls as I believe it easier to describe >control combination semantics. > >duplicate-entries: filter, dup, return results >matched-values: filter, trim, return results > >duplicate-entries+matched-values: filter, dup, trim, return results >matched-values+duplicate-entries: filter, trim, dup, return results > >other combinations? I think the duplicate entries draft would (in the interaction with other = controls section) state something like "When this control is paired with = the matched values control, this control MUST be applied first..." then = probably expound using an example. The net effect being filter, dup, trim, = return. Jim --=_0B53A516.7A1B7441 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable >&g= t;>=20 "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> 8/16/00 10:53:48 AM=20 >>>
>>
>>I think a better alternative is to have the = behavior=20 be a) (which in my mind is simpler to implement), then allow use of the = matched=20 values control to produce the results of b). This way we are back to = two=20 separate controls that have non-overlapping specific functionality. If we = agree=20 to this proposal, I'll add appropriate text to the Interaction With = Other=20 Controls section.
>
>I do prefer two separate controls as I believe it easier to=20 describe
>control combination semantics.
>
>duplicate-entries:  filter, dup, return=20 results
>matched-values:  filter, trim, return results
>
>duplicate-entries+matched-values: filter, dup, trim, return=20 results
>matched-values+duplicate-entries: filter, trim, dup, = return=20 results
>
>other combinations?
 
I think the duplicate entries draft would (in the interaction with = other=20 controls section) state something like "When this control is paired with = the=20 matched values control, this control MUST be applied first..." then = probably=20 expound using an example. The net effect being filter, dup, trim, = return.
 
Jim
--=_0B53A516.7A1B7441-- From list@netscape.com Wed Aug 16 14:19:18 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA01482 for ; Wed, 16 Aug 2000 14:19:17 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GIBpY16000; Wed, 16 Aug 2000 11:11:51 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GIHPg01627; Wed, 16 Aug 2000 11:17:25 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 11:17:25 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816110142.00aff100@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 11:15:07 -0700 To: "Miklos, Sue A." From: "Kurt D. Zeilenga" Subject: RE: new internet draft - LDAP Extensions Style Guide Cc: "'Bruce Greenblatt'" , ietf-ldapext@netscape.com In-Reply-To: <200008161239.IAA27708@roadblock.missi.ncsc.mil> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"1i8EiB.A.CZ.0qtm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 08:52 AM 8/16/00 -0400, Miklos, Sue A. wrote: >clarification request, please - I interpret the first statement below (Bind >discussion) to indicate that any authentication/authorization information is >ONLY conveyed during the Bind argument/response exchange. Is this correct? No. The restriction is that controls upon requests only impact the operation associated with the request. This does not imply that Bind is the only operation which may convey authentication/authorization information. >Can subsequent operations also convey information useful to an access >control decision function? Yes. Request control can convey such in the context of the operation they are attached to. And one can define extended operations which convey such information. And, of course, the access control may use other factors in the decision function (such as IP host/port, sky is green, msgid is prime). Kurt From list@netscape.com Wed Aug 16 14:28:09 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA01616 for ; Wed, 16 Aug 2000 14:28:08 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GIGwe18522; Wed, 16 Aug 2000 11:16:58 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GIQTU05500; Wed, 16 Aug 2000 11:26:29 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 11:26:29 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816112122.00afadc0@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 11:23:09 -0700 To: "Kurt D. Zeilenga" From: Bruce Greenblatt Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000816071751.00b1adb0@router.boolean.net> References: <399AAD80.1200.B4A9F9F@localhost> <4.3.2.7.0.20000815131059.00afb6f0@pop.walltech.com> <3999815E.17708.6B62923@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"qD7MCB.A.qVB.Uztm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 07:43 AM 8/16/2000 -0700, Kurt D. Zeilenga wrote: >But please note that control upon on bind operation are >not protected by the privacy and integrity negotiated by >the bind operation itself. This must be taken into >consideration. This is a good point. I will add this to the Style Guide. If controls are passed on the Bind that need privacy and/or integrity protection, a TLS session SHOULD be negotiated prior to the Bind. ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Wed Aug 16 14:49:07 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA02046 for ; Wed, 16 Aug 2000 14:49:06 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GIfVY22545; Wed, 16 Aug 2000 11:41:31 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GIl5I18509; Wed, 16 Aug 2000 11:47:05 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 11:47:05 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816113420.00b12560@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 11:44:48 -0700 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000816112122.00afadc0@pop.walltech.com> References: <4.3.2.7.0.20000816071751.00b1adb0@router.boolean.net> <399AAD80.1200.B4A9F9F@localhost> <4.3.2.7.0.20000815131059.00afb6f0@pop.walltech.com> <3999815E.17708.6B62923@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"8i5cSB.A.1gE.oGum5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 11:23 AM 8/16/00 -0700, Bruce Greenblatt wrote: >At 07:43 AM 8/16/2000 -0700, Kurt D. Zeilenga wrote: > >>But please note that control upon on bind operation are >>not protected by the privacy and integrity negotiated by >>the bind operation itself. This must be taken into >>consideration. > >This is a good point. I will add this to the Style Guide. If controls are passed on the Bind that need privacy and/or integrity protection, a TLS session SHOULD be negotiated prior to the Bind. I suggest: Control information provided during a Bind or StartTLS operations are not protected by security services (e.g. privacy and/or integrity protection) negotiated by that operation. If such services are desired (or required), they must be established prior to operation. From list@netscape.com Wed Aug 16 15:43:44 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA03035 for ; Wed, 16 Aug 2000 15:43:43 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GJYJY04075; Wed, 16 Aug 2000 12:34:19 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GJdro14757; Wed, 16 Aug 2000 12:39:53 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 12:39:53 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816123502.00ad5e70@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 12:36:30 -0700 To: d.w.chadwick@salford.ac.uk, ietf-ldapext@netscape.com From: Bruce Greenblatt Subject: Re: new internet draft - LDAP Extensions Style Guide In-Reply-To: <399AAD80.1200.B4A9F9F@localhost> References: <4.3.2.7.0.20000815131059.00afb6f0@pop.walltech.com> <3999815E.17708.6B62923@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"CH0a5D.A.TmD.I4um5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 03:04 PM 8/16/2000 +0100, David Chadwick wrote: > > > > - don't ever let the client tell the server > > - include a list of acceptable controls with each operation request, > > assuming that the server is really stupid, and > > can't remember the list from one operation to the next. > > - define a new extended operation that allows the client to submit a > > list of acceptable controls > >there is the obvious alternative missing from your list, which we >have now, ie. the client specifies which control it wants on each >individual operation :-) But, that doesn't help the server in placing controls on notifications, and other controls not specifically solicited. Of course, that may be a good thing... ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Wed Aug 16 16:47:37 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA03733 for ; Wed, 16 Aug 2000 16:47:36 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GKeRY15805; Wed, 16 Aug 2000 13:40:27 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GKk1M18261; Wed, 16 Aug 2000 13:46:01 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 13:46:01 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816124708.00b1d5c0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 13:43:39 -0700 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: new internet draft - LDAP Extensions Style Guide Cc: d.w.chadwick@salford.ac.uk, ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000816123502.00ad5e70@pop.walltech.com> References: <399AAD80.1200.B4A9F9F@localhost> <4.3.2.7.0.20000815131059.00afb6f0@pop.walltech.com> <3999815E.17708.6B62923@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"Mu637.A.qcE.H2vm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 12:36 PM 8/16/00 -0700, Bruce Greenblatt wrote: >At 03:04 PM 8/16/2000 +0100, David Chadwick wrote: >>> >>> - don't ever let the client tell the server >>> - include a list of acceptable controls with each operation request, >>> assuming that the server is really stupid, and >>> can't remember the list from one operation to the next. >>> - define a new extended operation that allows the client to submit a >>> list of acceptable controls >> >>there is the obvious alternative missing from your list, which we >>have now, ie. the client specifies which control it wants on each >>individual operation :-) > >But, that doesn't help the server in placing controls on notifications, >and other controls not specifically solicited. Of course, that may be a good thing... I think we need to refocus this thread on the Style Guide. The Style Guide should impart our operational experience upon the reader to help the reader design extensions. I believe the guide should state that unsolicited extensions (that is, controls which client has not indicated support for) are out of scope. This should include notifications which are returned without some prior indication of support by the client. We are gaining operational experience with notifications which are returned only with prior indication of support. In particular, my transaction/grouping I-Ds demonstrate the use of notices; we hope to have operational experience soon. There may other examples. Note, however, we should be careful in regard to our operational experience with the Notice of Disconnect in writing this guide. Though Notice of Disconnect is an extended operation, it is not an "extension". That is, it is a integral part of LDAPv3. And, if anything, our operational experience has demonstrated that returning this notice without indication of LDAP3 support can be problematic. (In particular when the Notice is sent to an LDAPv2 client before the bind request was received. The client often will report a protocol error, not a disconnect, to the user.) Kurt From list@netscape.com Wed Aug 16 17:01:52 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA03953 for ; Wed, 16 Aug 2000 17:01:50 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GKlre14972; Wed, 16 Aug 2000 13:47:53 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GKtcw25637; Wed, 16 Aug 2000 13:55:38 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 13:55:38 -0700 (PDT) From: SuccessisGreat@aol.com Message-ID: <0000081a53aa$00007b70$00007cc1@172.72.3.5> To: Subject: A Successful Global Business! Date: Wed, 16 Aug 2000 16:53:10 -0400 X-Priority: 3 X-MSMail-Priority: Normal Reply-To: netremove@netease.com Resent-Message-ID: <"Tiz3HD.A.rOG.E_vm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Major Internet Opportunity and Free Internet Service We started out HUGE & now we've gotten BIGGER !!! Imagine if you could have bought in on the ground floor with Microsoft or Walmart, etc., Well folks, I'm here to tell you that you're in the right place at the right time !! CASH in now on the most Lucrative Homebased Opportunity of this Millenium with a Internet company that has grown to be #1 in the World! We Capitalize on Three of the fastest growing trends in the history of the internet with NO: MEETINGS INVENTORY PAPERWORK CONVINCING PACKAGES TO MAIL MONTHLY QUALIFYING GLOBAL BARRIERS ALSO A FREE INTERNET SERVICE !! Incredible....Absolutely Freakin' Incredible I personally make more money with this home Internet business then I did at my job, so I now just work at home. What I have always wanted to be able to do, see our children grow up and spend time with them before it's too LATE! So if you want to succeed like I'm doing click on the following link for success!! mailto:netcash444@netease.com?subject=The_Best_Global_Internet_Business816 Thanks for your time and yes have a nice day! Kevin c/o The Team Machine *************************************************************************** But if you're self-sufficient and happy at what you do please click the following link to be removed from our database: mailto:netremove@netease.com?subject=Remove816 From list@netscape.com Wed Aug 16 17:03:11 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA03974 for ; Wed, 16 Aug 2000 17:03:09 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GKpte15689; Wed, 16 Aug 2000 13:51:55 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GL1R200018; Wed, 16 Aug 2000 14:01:27 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 14:01:27 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816103858.00b06110@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 13:59:08 -0700 To: pmoore@peerless.com From: "Kurt D. Zeilenga" Subject: Re: C API I-D Cc: ietf-ldapext@netscape.com In-Reply-To: <8825693C.0073A0E2.00@notes.auco.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"YxfprD.A.sUH.lEwm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 01:56 PM 8/15/00 -0700, pmoore@peerless.com wrote: >What has happened to the c api spec? There is no current I-D for the work item. IIRC, the WG is due a summary of outstanding issues and recommendations from the "engineering team" assembled to discuss/resolve these issues. I believe Mark Smith, the document editor, is working on this summary. However, Mark is on sabbatical at the moment, so I'd suspect there will be some further delay before the summary is posted. >Its no longer mentiononed on the WG IETF web page, C API is still listed as a work item of the WG and, I believe, it's still be worked. It's just that there is no current I-D for this work item. >Is there a more recent version than 4? There is currently on IETF C API I-D, rev 04 was the last to be removed from the repository. Kurt From list@netscape.com Wed Aug 16 17:49:31 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA04410 for ; Wed, 16 Aug 2000 17:49:30 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GLcFe23713; Wed, 16 Aug 2000 14:38:16 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GLll228929; Wed, 16 Aug 2000 14:47:47 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 14:47:47 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816140230.00b29d30@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 14:45:25 -0700 To: ietf-ldapext@netscape.com From: "Kurt D. Zeilenga" Subject: Re: C API I-D Cc: pmoore@peerless.com In-Reply-To: <4.3.2.7.0.20000816103858.00b06110@router.boolean.net> References: <8825693C.0073A0E2.00@notes.auco.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"vKyCoB.A.vDH.Cwwm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 01:59 PM 8/16/00 -0700, Kurt D. Zeilenga wrote: >At 01:56 PM 8/15/00 -0700, pmoore@peerless.com wrote: >>What has happened to the c api spec? > >There is no current I-D for the work item. IIRC, the WG >is due a summary of outstanding issues and recommendations >from the "engineering team" assembled to discuss/resolve these >issues. I believe Mark Smith, the document editor, is >working on this summary. However, Mark is on sabbatical at the >moment, so I'd suspect there will be some further delay >before the summary is posted. FYI, Mark actually posted a message detailing some of the issues in a previous thread "IETF LDAPEXT WG draft agenda": http://www.openldap.org/lists/ietf-ldapext/200007/msg00290.html Though this could be yet another demonstration of my fogged memory, I'm thought Mark was working on a summary of the engineering teams discussions (which have concluded). The summary should enumerated each of the major issues discussed and the outcome of those discussions (including any specific recommendations). Kurt From list@netscape.com Wed Aug 16 18:10:50 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA04561 for ; Wed, 16 Aug 2000 18:10:50 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GM3YY04008; Wed, 16 Aug 2000 15:03:34 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GM98g11216; Wed, 16 Aug 2000 15:09:08 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 15:09:08 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816150649.00ad5340@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 15:08:45 -0700 To: Kurt@openldap.org, ietf-ldapext@netscape.com From: Bruce Greenblatt Subject: LDAP Extension Style Guide, re interaction between controls Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"EgHdUD.A.2uC.CExm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Kurt, A few days ago, you wrote: >Just one comment on this comment... "when extending an operation though >definition of one or more controls, the specification SHOULD clearly >specify interactions with other, previously-defined, extensions >(using other controls). The specification MAY NOT restrict further >extension of the operation by placement of additional, yet to >be defined, controls." I suddenly realize that I don't understand your last sentence. Can you please clarify with an example? Thanks, Bruce ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Wed Aug 16 18:36:18 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA04751 for ; Wed, 16 Aug 2000 18:36:17 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GMMde00517; Wed, 16 Aug 2000 15:22:39 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GMWBs20600; Wed, 16 Aug 2000 15:32:11 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 15:32:11 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Jim Sermersheim" , , , Date: Wed, 16 Aug 2000 23:30:58 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Duplicate entries filter Reply-to: d.w.chadwick@salford.ac.uk Message-ID: <399B2432.1194.D1A5AE0@localhost> Priority: normal In-reply-to: X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"Vtc8jB.A.ZBF.pZxm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Date sent: Wed, 16 Aug 2000 10:31:18 -0600 From: "Jim Sermersheim" To: , Copies to: Subject: Re: Duplicate entries filter > These examples do reflect the original intent of the I-D. While > writing it, I had assumed the behavior previously discussed as a) > (filter, duplicate, return). Given the usefulness of Kurt's example, I > changed it to b) [filter, duplicate, filter, return (if your server > can do this more efficiently, more power to ya)]. Then the notion of a > flag was introduced. Jim, two points i) I note that in both a) and b) above you never mention (duplicate, filter, return) which was one of the earlier threads that was being discussed. Is this option finally being laid to rest? I hope so. ii) for option b) by combining duplicate entries and matched values we actually have (search filter, duplicate, match filter, return) which is more powerful than using the same filter in both instances. And as Kurt pointed out, we can alternate the ordering of the duplication and match filter (although this probably will not give different results except for the case of when an empty set of attributes is returned. With duplicate followed by match you could get identical entries returned several times, containing an attribute with no values) David > > I think a better alternative is to have the behavior be a) (which in > my mind is simpler to implement), then allow use of the matched values > control to produce the results of b). This way we are back to two > separate controls that have non-overlapping specific functionality. If > we agree to this proposal, I'll add appropriate text to the > Interaction With Other Controls section. > > Jim > > >>> "Kurt D. Zeilenga" 8/16/00 9:07:04 AM >>> > At 03:04 PM 8/16/00 +0100, David Chadwick wrote: > > >> The issue should be what behavior do applications need and whether > >> a) or b) (or both) or other controls fulfill the need. I think we > >> should take a step back and discuss background and intended use > >> information before choosing. > >> > > > >Agreed. The usage scenario that I have heard is producing a paper > >telephone directory, where you want one line for each telephone > >number, so that people may be listed several times in the directory. > >If the entry is only returned once with multiple values (as in the > >standard Search), this does not produce the desired result. I cannot > >remember another usage scenario being presented, but maybe others > >can? > > My scenario is similar, I wanted to be able to search the > directory for entries listing a specific area code and where > the entry contained multiple values with this area code are > returned as duplicated entries. I only want and desire any > duplicates of containing a value within the desired area > code. (One could call this "matched" duplicated entries). > > Kurt > *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Wed Aug 16 19:04:48 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA05011 for ; Wed, 16 Aug 2000 19:04:47 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GMvdY13424; Wed, 16 Aug 2000 15:57:39 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GN3C608601; Wed, 16 Aug 2000 16:03:12 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 16:03:12 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816150842.00b0dc10@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 16:00:31 -0700 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: LDAP Extension Style Guide, re interaction between controls Cc: ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000816150649.00ad5340@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"EoA8nC.A.HGC.v2xm5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 03:08 PM 8/16/00 -0700, Bruce Greenblatt wrote: >Kurt, > >A few days ago, you wrote: > >>Just one comment on this comment... "when extending an operation though >>definition of one or more controls, the specification SHOULD clearly >>specify interactions with other, previously-defined, extensions >>(using other controls). The specification MAY NOT restrict further >>extension of the operation by placement of additional, yet to >>be defined, controls." > >I suddenly realize that I don't understand your last sentence. Can you please clarify with an example? Thanks, First, let me state that I believe 2251 needs a clarification like (needs much work, will note this for later LDAPbis discussions): "Controls SHOULD NOT be combined unless the semantics of the combination has been defined. A server MAY ignore non-critical controls (even those it recognizes) to establish semantics of the operation (e.g. if two non-critical controls are combined, one or both may be ignored). A server MUST NOT ignore any critical control (e.g. if one or more critical controls are combined with zero or more non-critical controls, the server MAY ignore any of the non-critical controls, but must perform the operation as defined by remaining controls. If no semantics are defined for this remaining combination of controls, the server MUST return unavailableCriticalExtension" Such a clarification would only require extensions to define control combinations which make sense. This would be consistent with common practices. Anyways, the last sentence was meant to indicate that any extension may be further extended. In particular, the specification should not detail or restrict interactions with yet to defined controls. If such interactions are appropriate, the later defined control should detail the semantics of the interaction. It should be also noted that any attempt to say "This specification SHALL NOT be updated by future specifications" is pointless as the future specification can update that restriction away. >>Just one comment on this comment... "when extending an operation though >>definition of one or more controls, the specification SHOULD clearly >>specify interactions with other, previously-defined, extensions >>(using other controls). The specification MAY NOT restrict further >>extension of the operation by placement of additional, yet to >>be defined, controls." From list@netscape.com Wed Aug 16 19:37:23 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA05217 for ; Wed, 16 Aug 2000 19:37:22 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GNObe10310; Wed, 16 Aug 2000 16:24:37 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GNYAQ21073; Wed, 16 Aug 2000 16:34:10 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 16:34:10 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816162659.00b2a780@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 16:31:50 -0700 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: LDAP Extension Style Guide, re interaction between controls Cc: ietf-ldapext@netscape.com In-Reply-To: <4.3.2.7.0.20000816150842.00b0dc10@router.boolean.net> References: <4.3.2.7.0.20000816150649.00ad5340@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"5qQzpB.A._IF.vTym5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 04:00 PM 8/16/00 -0700, Kurt D. Zeilenga wrote: >It should be also noted that any attempt to say "This specification >SHALL NOT be updated by future specifications" is pointless >as the future specification can update that restriction away. But it is quite appropriate for a specification to limit its scope and to indicate portions of the specifications meant to be defined in future specifications. Kurt From list@netscape.com Wed Aug 16 19:58:29 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA05358 for ; Wed, 16 Aug 2000 19:58:24 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7GNpIY23105; Wed, 16 Aug 2000 16:51:18 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7GNup602384; Wed, 16 Aug 2000 16:56:51 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 16:56:51 -0700 (PDT) Message-Id: <4.3.2.7.0.20000816163701.00b113b0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 16 Aug 2000 16:54:30 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: Duplicate entries filter Cc: "Jim Sermersheim" , , In-Reply-To: <399B2432.1194.D1A5AE0@localhost> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"yx5Sy.A.-k.Cpym5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 11:30 PM 8/16/00 +0100, David Chadwick wrote: >Date sent: Wed, 16 Aug 2000 10:31:18 -0600 >From: "Jim Sermersheim" >To: , >Copies to: >Subject: Re: Duplicate entries filter > >> These examples do reflect the original intent of the I-D. While >> writing it, I had assumed the behavior previously discussed as a) >> (filter, duplicate, return). Given the usefulness of Kurt's example, I >> changed it to b) [filter, duplicate, filter, return (if your server >> can do this more efficiently, more power to ya)]. Then the notion of a >> flag was introduced. > >Jim, >two points > >i) I note that in both a) and b) above you never mention (duplicate, >filter, return) which was one of the earlier threads that was being >discussed. Is this option finally being laid to rest? I hope so. Please... Remember I only dared to suggest it. :-) >ii) for option b) by combining duplicate entries and matched values >we actually have (search filter, duplicate, match filter, return) which >is more powerful than using the same filter in both instances. And >as Kurt pointed out, we can alternate the ordering of the duplication >and match filter (although this probably will not give different results >except for the case of when an empty set of attributes is returned. >With duplicate followed by match you could get identical entries >returned several times, containing an attribute with no values). This may be the case, it's just wasn't obvious to me (and "probably" you as well). I'll have to chew on this to see if both orderings are useful enough to warrant specification. I namely brought the ordering of controls issue as it seemed relevant to the "Extensions Guide" thread. That is, Controls ::= SEQUENCE OF Control implies that order may matter (and multiple controls of the same type or even identical controls may be listed multiple times... which may or may not make sense depending upon the semantics of the control). Kurt From list@netscape.com Wed Aug 16 22:43:34 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA08146 for ; Wed, 16 Aug 2000 22:43:33 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7H2WZe01220; Wed, 16 Aug 2000 19:32:35 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7H2g6w00441; Wed, 16 Aug 2000 19:42:06 -0700 (PDT) Resent-Date: Wed, 16 Aug 2000 19:42:06 -0700 (PDT) Date: Wed, 16 Aug 2000 19:07:09 +0500 From: yjuyzcgtqyuxdthi@ser.nl Message-Id: <200008161407.TAA02721@nevado> To: mmfunbqqdxbjrpvs@ser.nl Subject: The Ultimate Internet Marketing Portfolio wbbfv Resent-Message-ID: <"ArCIoC.A.lG.9D1m5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com The Ultimate Internet Marketing Portfolio Learn How to become Financially Independant Using The Internet! NO CAPITAL REQUIRED! You now must know that the Internet is the fastest growing marketing medium with over 50 million users world-wide. This figure is increasing at over 250,000 every week and all are potential purchasers of a variety of products and services online. There are several successful internet marketers who are receiving over $20,000 every week! We will give you some of their best kept secrets of marketing successfully on the internet, plus some of our own! We will give you some of the best internet add-on programs that make it easier to earn Thousand’s online, plus some products that will make your initial marketing exploits easier! You can get online with this portfolio and start making money without further investment! THE MOST COMPREHENSIVE PACKAGE AVAILABLE! As part of this amazing package we offer you a range of products and services that any experienced or inexperienced online marketer can use to full effect. These amazing products make up the Ultimate Internet Marketing Portfolio. What you will receive is: A FULLY OPERATIONAL ONLINE WEBSITES: E-Commerce ready to go. Hottest Selling Program on the Internet Today. INTRODUCTION TO NETWORK MARKETING: You will be enrolled in a Network Marketing Program. The 3X2 matrix has a payout of $105 US which should be reached in 7 days. Your Network will be built by the Marketing of the Portfolio. Included in your Portfolio Purchase Price. THE INFORMATION FREEWAY: One of the best online marketing manuals available, it contains all of the latest electronic marketing information you can use today; 150 REPORTS: Each one is designed to help new entrepreneurs, we show you how you can use these to promote yourself on the internet and make more sales; THE SPECIAL REPORTS: We also offer a range of specially devised reports for the inexperienced user, on buying your computer, modem and internet service provider, plus we discuss what the internet is and what it can do for your business. We also give you secret trade sources which will offer you the best packages at a bargain price; GET FREE WEB SPACE: We also show you how to obtain free web space on the internet to sell your products and services, PLUS we will also give you a working copy of one of the best web page design programs available; BULK E-MAIL: We give you an exclusive working copy of one of the best e-mail address collectors which gathers e-mail addresses across the internet. This program can gather up to 60,000 e-mail addresses per hour - great for your promotional activities on the internet (a similar program is selling for over $50); PLUS we will also give you a working copy of one of the best bulk e-mail programs which allows you to send out thousands of e-mails at a time; REGISTER WITH SEARCH ENGINES: We also provide you with an exclusive report & software program which will show you how you can register your web site with over 250 search engines, and get more chances to have your site listed in the top twenty. Each of these search engines gets thousands of hits every day. Your web site could increase its hit rate by 200-600 every day; 100,000 E-MAIL ADDRESSES: We will also give you 100,000 e-mail addresses to start you off with your bulk e-mail promotions; PLUS we will also give you a report which shows you how to make your e-mails into killer sales letters; THE BEST MARKETING REPORTS: We will also give you a range of the best reports and advice available from successful marketers like Jeffrey Lant and Bill Myers . We offer them free when you buy this package. It will save you hours of searching the internet for these excellent reports! REPRODUCTION & RESALE RIGHTS: We also give you the right to reproduce and sell the portfolio to others and will receive camera-ready masters of this brochure and other marketing material; PLUS we will also give you a 30 DAY MONEY BACK GUARANTEE! * The Complete Internet Marketing Portfolio is the ideal entry to the Internet! * You Can Use The Portfolio to develop your Sales & Marketing Experience for any of your Hobbies, Charity Appeals, Businesses, and Personal Interests! * You Can Earn As You Learn! * It’s Not MLM, No Boss, No Accounting and Best Of All, A Positive Cash Flow FROM DAY 1! * Start this business in your own time and as fast as it suits you, we know that this portfolio will make you money for years to come! * No hard selling! No need to be near a telephone all day! * Ideal to use as a part-time and/or a family business! You can receive the Ultimate Internet Marketing Portfolio for only $39.95 To join the E-Commerce Explosion on the Internet Email: mailto:ultimate_marketing@n2business.com?subject=join ========================================================= Removal mailto:4real@address.com?subject=Remove From list@netscape.com Thu Aug 17 08:46:22 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA25576 for ; Thu, 17 Aug 2000 08:46:21 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7HCYwe09594; Thu, 17 Aug 2000 05:34:59 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7HCiUc19504; Thu, 17 Aug 2000 05:44:30 -0700 (PDT) Resent-Date: Thu, 17 Aug 2000 05:44:30 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Thu, 17 Aug 2000 06:44:12 -0600 From: "Haripriya S" To: Cc: Subject: Re: New draft - LDAP control for modify and delete on multipleentries Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_267E8932.791877F8" Resent-Message-ID: <"hzFBPD.A.ewE.t49m5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_267E8932.791877F8 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Kurt, >>> "Kurt D. Zeilenga" 08/16/00 11:00PM >>> [Kurt] Is the (modify/delete) operation still performed as an atomic operation? - The modify/delete operation will be atomic only on a single entry, and = the operation as a whole will have the same semantics as a search and = multiple modifies/deletes from the client. Imposing a total atomicity in = my opinion would be difficult to implement, inefficient, and also = unnecessary in most cases. Directory transaction is probably a better = mechanism to address atomicity of multi-entry operations. [Kurt] I find the use of controls to return continuations awkward at best. Such controls which extend operations which the "scope" of existing operations should use extended partial responses to return "continuations". In fact, I don't see why we need separate controls/responses for each of these operation. I, personally, would rather see: A) extendedPartialResponses generalized such that they may returned in response to any operation (after appropriate client solicitation).=20 - Currently a modify or delete operation doesn't return any partial = responses, and hence the desicion to let the response for modify/delete = remain as it is. As the request control is the one that imposes search = semantics, the control response was designed to carry its specific = responses, rather than change the base operation's response.=20 [Kurt] B) scopingControl be defined to allow specification of=20 "scope" information (allowing use of "one" and "subtree" scopes). Per entry/continuation responses may be returned. C) filterControl be defined to allow specification of a filter which must match before performing operation. Per entry/continuation responses may be returned. - This looks like a good idea to me. But will there be any reallife = scenario's where we want to do a filtering, without the scope specified?=20= [Kurt] I would note that such extensions must be very explicit in regards to "atomic" properties of the "operation". I would recommend that only entry level atomic properties be maintained, not operation level atomic properties. - I agree. It would be better to limit atomicity requirements to operation = on a single entry, rather than the whole operation. This is the assumption = made in the document. - Thanks and Regards, - Haripriya --=_267E8932.791877F8 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Kurt,
 
>>> "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> 08/16/00 = 11:00PM=20 >>>
[Kurt] Is the (modify/delete) operation still performed as = an=20 atomic
operation?
  - The modify/delete operation will be atomic only on a single = entry,=20 and the operation as a whole will have the same semantics as a = search=20 and multiple modifies/deletes from the client. Imposing a total atomicity = in my=20 opinion would be difficult to implement, inefficient, and also unnecessary = in=20 most cases. Directory transaction is probably a better mecha= nism=20 to address atomicity of multi-entry operations.

[Kurt] I find the use of controls to return continuations = awkward=20 at
best.  Such controls which extend operations which the = "scope"
of=20 existing operations should use extended partial responses
to return=20 "continuations".  In fact, I don't see why we need
separate=20 controls/responses for each of these operation.  I,
personally, = would=20 rather see:
 
A) extendedPartialResponses generalized such that they may
returned= in=20 response to any operation (after appropriate
client=20 solicitation). 
 
  - Currently a modify or delete operation doesn't return any = partial=20 responses, and hence the desicion to let the response for modify/delete = remain=20 as it is. As the request control is the one that imposes search semantics, = the=20 control response was designed to carry its specific responses, rather = than=20 change the base operation's response.

[Kurt]
B) scopingControl be defined to allow specification = of=20
"scope" information (allowing use of "one" and "subtree"
scopes).&nb= sp;=20 Per entry/continuation responses may be returned.

C) filterControl = be=20 defined to allow specification of a
filter which must match before = performing=20 operation.
Per entry/continuation responses may be returned.
 - This looks like a good idea to me. But will there be = any=20 reallife scenario's where we want to do a filtering, without the=20 scope specified?
 
[Kurt] I would note that such extensions must be very explicit
in= =20 regards to "atomic" properties of the "operation".  I
would = recommend=20 that only entry level atomic properties be
maintained, not operation = level=20 atomic properties.
- I agree. It would be better to limit atomicity requirements to = operation=20 on a single entry, rather than the whole operation. This is the assumption = made=20 in the document.
 
- Thanks and Regards,
- Haripriya
--=_267E8932.791877F8-- From list@netscape.com Thu Aug 17 12:36:49 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA29858 for ; Thu, 17 Aug 2000 12:36:49 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7HGTkY22285; Thu, 17 Aug 2000 09:29:47 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7HGZMc24445; Thu, 17 Aug 2000 09:35:22 -0700 (PDT) Resent-Date: Thu, 17 Aug 2000 09:35:22 -0700 (PDT) Message-Id: <4.3.2.7.0.20000817081845.00b07720@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 17 Aug 2000 09:20:21 -0700 To: "Haripriya S" From: "Kurt D. Zeilenga" Subject: Re: New draft - LDAP control for modify and delete on multipleentries Cc: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"FOeXVC.A.l9F.JRBn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 06:44 AM 8/17/00 -0600, Haripriya S wrote: > - Currently a modify or delete operation doesn't return any partial responses, So extend them! > As the request control is the one that imposes search semantics, If you don't want to extend modify/delete, extend search to do modify/delete. This is no more perverted than extending modify/delete to do search... and search provides the responses types needed (you can even be the first to return extended response PDUs in response a search request... as allowed by 2251). However, I think both your proposal and the above are suboptimal. Using (a generalization of) extendedPartialResponse with delete/modify, IMO, is a much better approach. I believe such a generalization is in the works. >the control response was designed to carry its specific responses, rather than change the base operation's response. But the delete/modify operation's semantics was never designed to support subtrees. To support subtrees well partial responses are needed. Without partial responses, you cannot return per entry/continuation responses as separate PDUs, which will either force providing per operation atomic properties or require abandon to be disallowed on these operations. However, users want entry level atomic properties on such operations with the ability to abandon in-progress operations which act on more than one entry. Because of this, the single response approach to non-base scoped operations is, IMO, inadequate. > - This (scope & filter conrols) looks like a good idea to me. But will there be any reallife scenario's where we want to do a filtering, without the scope specified? Yes. And scoping without filtering. Scope and filter are orthogonal to each other... so specifying them separately seems natural to me. Combining them into one control may be natural for others. But two v. one control is really just syntax, it shouldn't change the semantics as long as both are OPTIONAL. Kurt From list@netscape.com Thu Aug 17 12:47:41 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA00080 for ; Thu, 17 Aug 2000 12:47:40 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7HGebY24490; Thu, 17 Aug 2000 09:40:37 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7HGkCk29183; Thu, 17 Aug 2000 09:46:12 -0700 (PDT) Resent-Date: Thu, 17 Aug 2000 09:46:12 -0700 (PDT) Message-Id: <4.3.2.7.0.20000817094252.00afc440@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 17 Aug 2000 09:45:40 -0700 To: internet-drafts@ietf.org From: Bruce Greenblatt Subject: Updated ID: draft-greenblatt-ldapext-sos-01 Cc: ietf-ldapext@netscape.com Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=====================_4207239==_" Resent-Message-ID: <"W1JxYD.A.mHH.TbBn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=====================_4207239==_ Content-Type: text/plain; charset="us-ascii"; format=flowed Updated Internet draft on simple subtree operations. See attached... Note to readers that it now includes a "requirements section"... Bruce --=====================_4207239==_ Content-Type: text/plain; charset="us-ascii" Content-Disposition: attachment; filename="sos-01.out" Application Working Group Bruce Greenblatt Internet Draft Expires in six months Simple Operations on Subtrees (for LDAP) Status of this Memo This document is an Internet-Draft and is in full conformance with all provisions of Section 10 of RFC2026. This document is an Internet-Draft. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, andits working groups. Note that other groups may also distribute work- ing documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months. Internet-Drafts may be updated, replaced, or made obsolete by other documents at any time. It is not appropriate to use Internet- Drafts as reference material or to cite them other than as a "working draft" or "work in progress". To learn the current status of any Internet-Draft, please check the 1id-abstracts.txt listing contained in the Internet-Drafts Shadow Direc- tories on ds.internic.net (US East Coast), nic.nordu.net (Europe), ftp.isi.edu (US West Coast), or munnari.oz.au (Pacific Rim). Distribution of this document is unlimited. Abstract This draft defines several new LDAP extensions. These extensions are operations that can manipulate an entire portion of Directory Infor- mation Tree at once (DIT). This draft does not presume any specific DIT structure or schema modifications. 1. Requirements Here are some requirements that for building real world LDAP appli- cations that try to operate on an entire subtree. - Provide user feedback as to the progress of the long lived opera- tion. In many scenarios, a subtree operation (e.g. subtree copy) may take a long period of time (many hours for large subtrees). It Greenblatt [Page 1] Internet Draft July 2000 is essential to have a progress bar move across the screen as the entries are deleted. - As the delete subtree crosses containers into other LDAP servers, additional authentication credentials may be required to be retrieved from the LDAP client, in order to allow the operation to proceed. - If the authenticated user has access to only a portion of the sub- tree to be deleted, it should be possible for the part of the sub- tree that is possible to delete, to in fact be deleted. It should also be possible to submit the operation in such a way that no entries from the subtree are deleted unless it is possible to delete all entries from the subtree. - The list of entries that has been deleted by the operation should be returned to the client. An incremental list of deleted entries could be returned with the progress indication above. - It should be possible to "cancel" the delete subtree operation, just as the long lived Search operation can be "abandoned". - It should be possible to delete only certain types of entries from the subtree. For example, delete all printer objects from the sub- tree. Note that this current draft does not necessarily address all of the requirements above. 2. Mechanism Operations that make changes to the Directory Information Tree (DIT) via that are part of the standard set of protocol operations oper- ate on a single object. This document defines three new LDAP operations that manipulate an entire DIT subtree. These three operations are: - Copy Subtree - Delete Subtree - Update Subtree The syntax that is used in any LDAP extended request is: ExtendedRequest ::= [APPLICATION 23] SEQUENCE { requestName [0] LDAPOID, requestValue [1] OCTET STRING OPTIONAL } Greenblatt [Page 2] Internet Draft July 2000 The corresponding response syntax is: ExtendedResponse ::= [APPLICATION 24] SEQUENCE { COMPONENTS OF LDAPResult, responseName [10] LDAPOID OPTIONAL, response [11] OCTET STRING OPTIONAL } The extensions defined in this draft obey this syntax. All OIDs defined in this draft are rooted from: 1.3.6.1.4.1.5515 1.3.6.1.4.1 has been assigned as IANA-registered Private Enterprises, and IANA has assigned 5515 to Directory Tools and Application Services, Inc. (DTASI). 1.3.6.1.4.1.5515.3 is the root OID for LDAP extended operations, and 1.3.6.1.4.1.5515.4 is the root OID for LDAP control extensions (none of which are currently defined in this draft). Thus, the OIDs for these extended operations are: - 1.3.6.1.4.1.5515.3.1 - Copy Subtree Request - 1.3.6.1.4.1.5515.3.2 - Copy Subtree Response - 1.3.6.1.4.1.5515.3.3 - Delete Subtree Request - 1.3.6.1.4.1.5515.3.4 - Delete Subtree Response - 1.3.6.1.4.1.5515.3.5 - Update Subtree Request - 1.3.6.1.4.1.5515.3.6 - Update Subtree Response 2.1. Copy Subtree The Copy Subtree operation makes a replica of all objects from one subtree (the source) in the DIT in another part (the target) in the DIT. Note that if the LDAP client submitting the operation does not have access to some objects in the source subtree, then objects corresponding to them will not be created in the target subtree. Similarly, if the LDAP client submitting the operation does not have access to some object attributes in the source subtree, then the corresponding object in the target subtree will be missing those attributes. The Copy Subtree Request names the source and target of the operation: CopySubtreeRequest ::= SEQUENCE { source LDAPDN, target LDAPDN, filter Filter OPTIONAL} Greenblatt [Page 3] Internet Draft July 2000 If the filter is present in the request, only those objects in the source subtree that match the filter are copied to the target subtree. 2.2. Delete Subtree The Delete Subtree operation removes all objects from a specified part (the target) in the DIT. Note that if the LDAP client submitting the operation does not have access to some objects in the target sub- tree, then those objects will not be deleted, and neither will any objects betwween the target and the inaccessible object. The Delete Subtree Request names the target: DeleteSubtreeRequest ::= SEQUENCE { source LDAPDN, filter Filter OPTIONAL} If the filter is present in the request, only those objects in the source subtree that match the filter are deleted. 2.3. Update Subtree The Update Subtree operation makes the same change to all objects in a subtree (the target) in the DIT. Note that if the LDAP client sub- mitting the operation does not have access to some objects in the source subtree, then objects corresponding to them will not be modified. Simi- larly, if the LDAP client submitting the operation does not have access to some object attributes in the target subtree that are to be modified, then the update operation fails on those objects. The format of the Update Subtree request is identical to the Modify Operation: UpdateSubtreeRequest ::= SEQUENCE { object LDAPDN, modification SEQUENCE OF SEQUENCE { operation ENUMERATED { add (0), delete (1), replace (2) }, modification AttributeTypeAndValues } filter Filter OPTIONAL} If the filter is present in the request, only those objects in the source subtree that match the filter are updated. 3. References [1] M. Wahl, et. al., "Lightweight Directory Access Protocol (v3)," RFC 2251, July 1997. Greenblatt [Page 4] Internet Draft July 2000 4. Author's Address Bruce Greenblatt DTASI 6841 Heaton Moor Drive San Jose, CA 95119 USA Phone: +1-408-390-4776 Email: bgreenblatt@dtasi.com Greenblatt [Page 5] --=====================_4207239==_ Content-Type: text/plain; charset="us-ascii"; format=flowed ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html --=====================_4207239==_-- From list@netscape.com Thu Aug 17 12:47:49 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA00090 for ; Thu, 17 Aug 2000 12:47:48 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7HGake06263; Thu, 17 Aug 2000 09:36:47 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7HGkJc29286; Thu, 17 Aug 2000 09:46:19 -0700 (PDT) Resent-Date: Thu, 17 Aug 2000 09:46:19 -0700 (PDT) Message-Id: <4.3.2.7.0.20000817093718.00afb560@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 17 Aug 2000 09:42:43 -0700 To: "Haripriya S" , From: Bruce Greenblatt Subject: Re: New draft - LDAP control for modify and delete on multipleentries Cc: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"23sI3C.A.DJH.ZbBn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com > > - Currently a modify or delete operation doesn't return any partial > responses, and hence the desicion to let the response for modify/delete > remain as it is. As the request control is the one that imposes search > semantics, the control response was designed to carry its specific > responses, rather than change the base operation's response. This is one of the reasons that I chose to use extended operations for subtree copy, delete and modify. I submitted an update during the blackout period, and I will use this opportunity to resubmit it. Note also,Michael Armijo (who I haven't heard from in a while) wrote a draft sometime back for a subtree delete control, which was atomic, and didn't require partial updates. Have you looked at his draft? ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Fri Aug 18 10:08:05 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA28693 for ; Fri, 18 Aug 2000 10:08:04 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7IE0oY18193; Fri, 18 Aug 2000 07:00:50 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7IE6Qg12247; Fri, 18 Aug 2000 07:06:26 -0700 (PDT) Resent-Date: Fri, 18 Aug 2000 07:06:26 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Fri, 18 Aug 2000 08:05:55 -0600 From: "Haripriya S" To: Cc: Subject: Re: New draft - LDAP control for modify and delete onmultipleentries Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_5901F0D7.E889E083" Resent-Message-ID: <"gcZTWC.A.7-C.gLUn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_5901F0D7.E889E083 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, > Using (a generalization of) extendedPartialResponse with delete/modify, IMO, is a much better approach. I believe such a generalization is in the works. Is somebody working on it? > To support subtrees well partial responses are needed. Without partial responses, you cannot return per entry/continuation responses as separate PDUs, which will either force providing per operation atomic properties or require abandon to be disallowed on these operations. However, users want entry level atomic properties on such operations with the ability to abandon in-progress operations which act on more than one entry. Because of this, the single response approach to non-base scoped operations is, IMO, inadequate.=20 Yes, I see your point now. Thanks for the input. As per your suggestion, I = can modify the proposal as follows: 1. Retain the EntrySelection control which consists of 4 parts, a scope, an referencealiases field, a filter, and a set of fields for = setting limits on the operation ( time, error, etc. ). This is approximatel= y equivalent to a search operation syntax itself. Make all fields except = limits fields optional(?). Also introduce a field from the client ( = optional ) specifying whether it can and wants to receive partial = responses. 2. Define a general partial extended response. This can be returned by any = LDAP operation. (This would have to go into LDAP rfc). The "response" = portion of the extendedresponse will again be a sequence of an LDAP OID = for the specific response, and the specific response itself. These can be = defined specific to various extendedoperations and controls. Define a = specific partialextendedresponse for continuation responses and use it for = continuations needed for this operation. 3. The modifyResponse or delResponse will return the final response. Error = codes specific to the request control, and the failedDNs will be returned = by the EntrySelectionResponse control. The referrals field will be removed = from the response control, and referrals will be returned through = modifyResponse or delResponse themselves. Another approach is to allow failedDNs also to be returned partially as = and when they fail, and hence define another specific partialextendedrespon= se to return failedDNs too. Hope this addresses what you are saying. Does this sound ok to everybody? = I can start on this if it does. > Yes. And scoping without filtering. Scope and filter are orthogonal to each other... so specifying them separately seems natural to me. Combining them into one control may be natural for others. But two v. one control is really just syntax, it shouldn't change the semantics as long as both are OPTIONAL. I can let both the fields be optional if there is no issue. Thanks and Regards, Haripriya --=_5901F0D7.E889E083 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Hi,

> Using (a generalization of) extendedPartialResponse with=20 delete/modify,
IMO, is a much better approach.  I believe such = a=20 generalization
is in the works.
 
Is somebody working on it?

> To support subtrees well partial responses are needed.
Wit= hout=20 partial responses, you cannot return per entry/continuation
responses = as=20 separate PDUs, which will either force providing per
operation = atomic=20 properties or require abandon to be disallowed
on these operations. = ;=20 However, users want entry level atomic
properties on such operations = with the=20 ability to abandon
in-progress operations which act on more than one=20 entry.  Because
of this, the single response approach to non-base = scoped=20 operations
is, IMO, inadequate.
Yes, I see your point now. Thanks for the input. As per=20 your suggestion, I can modify the proposal as follows:
 
1. Retain the EntrySelection control which consists of 4 parts,
  a scope, an referencealiases field, a filter, and a set = of=20 fields for setting limits on the operation ( time, error, etc. ). This = is=20 approximately equivalent to a search operation syntax itself. Make all = fields=20 except limits fields optional(?). Also introduce a field from the = client (=20 optional ) specifying whether it can and wants to receive partial=20 responses.
 
2. Define a general partial extended response. This can be returned = by any=20 LDAP operation. (This would have to go into LDAP rfc). The "response" = portion of=20 the extendedresponse will again be a sequence of an LDAP OID for the = specific=20 response, and the specific response itself. These can be defined specific = to=20 various extendedoperations and controls. Define a specific=20 partialextendedresponse for continuation responses and use it for = continuations=20 needed for this operation.
 
3. The modifyResponse or delResponse will return the final response. = Error=20 codes specific to the request control, and the failedDNs will be returned = by the=20 EntrySelectionResponse control. The referrals field will be removed from = the=20 response control, and referrals will be returned through modifyResponse = or=20 delResponse themselves.
Another approach is to allow failedDNs also to be returned partially = as and=20 when they fail, and hence define another specific partialextendedresponse = to=20 return failedDNs too.
 
Hope this addresses what you are saying. Does this sound ok = to=20 everybody? I can start on this if it does.
 
> Yes. And scoping without filtering.  Scope and filter = are=20 orthogonal
to each other... so specifying them separately seems natural = to=20 me.
Combining them into one control may be natural for others. =20 But
two v. one control is really just syntax, it shouldn't change=20 the
semantics as long as both are OPTIONAL.
I can let both the fields be optional if there is no issue.
=
 
Thanks and Regards,
Haripriya
--=_5901F0D7.E889E083-- From list@netscape.com Fri Aug 18 10:43:45 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA29372 for ; Fri, 18 Aug 2000 10:43:44 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7IEWLe13658; Fri, 18 Aug 2000 07:32:21 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7IEfvo21462; Fri, 18 Aug 2000 07:41:57 -0700 (PDT) Resent-Date: Fri, 18 Aug 2000 07:41:57 -0700 (PDT) Message-Id: <4.3.2.7.0.20000818070829.00b351e0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Fri, 18 Aug 2000 07:38:47 -0700 To: "Haripriya S" From: "Kurt D. Zeilenga" Subject: extendedPartialResponse I-D Cc: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"ZB3g0D.A.EPF.zsUn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com [I changed subject of this response, I'll post modify/delete comments separately] At 08:05 AM 8/18/00 -0600, Haripriya S wrote: >> Using (a generalization of) extendedPartialResponse with delete/modify, >IMO, is a much better approach. I believe such a generalization >is in the works. > >Is somebody working on it? Yes, if IIRC from IETF#48 (hallway?) discussions, the authors of the existing extendedPartialResponse I-D were working on a generalization to allow it to be returned in response as defined in an extension (whether defined using an "extended" operation or control mechanism). I hope a Standard Track RFC updating 2251 is published on this subject soon so that the update can be considered for incorporation into the future LDAPv3 Draft Standard. Kurt From list@netscape.com Fri Aug 18 12:38:43 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA01888 for ; Fri, 18 Aug 2000 12:38:42 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7IGVSY08704; Fri, 18 Aug 2000 09:31:28 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7IGb4Q06233; Fri, 18 Aug 2000 09:37:04 -0700 (PDT) Resent-Date: Fri, 18 Aug 2000 09:37:04 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Kurt D. Zeilenga" , ietf-ldapext@netscape.com Date: Fri, 18 Aug 2000 17:36:29 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: LDAP Extension Style Guide, re interaction between controls Reply-to: d.w.chadwick@salford.ac.uk CC: ietf-ldapext@netscape.com Message-ID: <399D741D.5313.C65737@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000816150842.00b0dc10@router.boolean.net> References: <4.3.2.7.0.20000816150649.00ad5340@pop.walltech.com> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"XeehtB.A.xgB.vYWn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT > "Controls SHOULD NOT be combined unless the semantics of the > combination has been defined. A server MAY ignore non-critical > controls (even those it recognizes) to establish semantics of the > operation Note that the Internet2 guys, IETF PKIX group and Middleware people have been discussing this issue, as X.500 is ambiguous in this case. A defect report has now been issued on X.500, and the proposed solution is contrary to the above, i.e. it states that a server that understands an extension (control in the case of LDAP) MUST obey it even if it is marked non critical. I would like LDAP to either take the same stance for compatibility purposes, or to persuade the X.500 , PKIX and other groups that the proposed solution is wrong and that the server should be free to choose what to do. Either way, I think that compatibility should be the target. David *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Fri Aug 18 12:44:28 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA02003 for ; Fri, 18 Aug 2000 12:44:27 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7IGbQY10119; Fri, 18 Aug 2000 09:37:26 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7IGh2A13088; Fri, 18 Aug 2000 09:43:02 -0700 (PDT) Resent-Date: Fri, 18 Aug 2000 09:43:02 -0700 (PDT) Message-Id: <200008181642.JAA27026@boreas.isi.edu> To: IETF-Announce: ; Subject: RFC 2891 on LDAP Control Extension for Server Side Sorting Cc: rfc-ed@ISI.EDU, ietf-ldapext@netscape.com Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary=NextPart Date: Fri, 18 Aug 2000 09:42:26 -0700 From: RFC Editor Resent-Message-ID: <"-aGD4B.A.MMD.VeWn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A new Request for Comments is now available in online RFC libraries. RFC 2891 Title: LDAP Control Extension for Server Side Sorting of Search Results Author(s): T. Howes, M. Wahl, A. Anantha Status: Standards Track Date: August 2000 Mailbox: anoopa@microsoft.com, howes@loudcloud.com, Mark.Wahl@sun.com Pages: 8 Characters: 15833 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-ldapext-sorting-03.txt URL: ftp://ftp.isi.edu/in-notes/rfc2891.txt This document describes two LDAPv3 control extensions for server side sorting of search results. These controls allows a client to specify the attribute types and matching rules a server should use when returning the results to an LDAP search request. The controls may be useful when the LDAP client has limited functionality or for some other reason cannot sort the results but still needs them sorted. Other permissible controls on search operations are not defined in this extension. The sort controls allow a server to return a result code for the sorting of the results that is independent of the result code returned for the search operation. This document is a product of the LDAP Extension Working Group of the IETF. This is now a Proposed Standard Protocol. This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF list and the RFC-DIST list. Requests to be added to or deleted from the IETF distribution list should be sent to IETF-REQUEST@IETF.ORG. Requests to be added to or deleted from the RFC-DIST distribution list should be sent to RFC-DIST-REQUEST@RFC-EDITOR.ORG. Details on obtaining RFCs via FTP or EMAIL may be obtained by sending an EMAIL message to rfc-info@RFC-EDITOR.ORG with the message body help: ways_to_get_rfcs. For example: To: rfc-info@RFC-EDITOR.ORG Subject: getting rfcs help: ways_to_get_rfcs Requests for special distribution should be addressed to either the author of the RFC in question, or to RFC-Manager@RFC-EDITOR.ORG. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution.echo Submissions for Requests for Comments should be sent to RFC-EDITOR@RFC-EDITOR.ORG. Please consult RFC 2223, Instructions to RFC Authors, for further information. Joyce K. Reynolds and Sandy Ginoza USC/Information Sciences Institute ... Below is the data which will enable a MIME compliant Mail Reader implementation to automatically retrieve the ASCII version of the RFCs. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="RFC-INFO@RFC-EDITOR.ORG" Content-Type: text/plain Content-ID: <000818094004.RFC@RFC-EDITOR.ORG> RETRIEVE: rfc DOC-ID: rfc2891 --OtherAccess Content-Type: Message/External-body; name="rfc2891.txt"; site="ftp.isi.edu"; access-type="anon-ftp"; directory="in-notes" Content-Type: text/plain Content-ID: <000818094004.RFC@RFC-EDITOR.ORG> --OtherAccess-- --NextPart-- From list@netscape.com Fri Aug 18 13:05:26 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA02491 for ; Fri, 18 Aug 2000 13:05:24 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7IGsMe02440; Fri, 18 Aug 2000 09:54:22 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7IH3ug24876; Fri, 18 Aug 2000 10:03:56 -0700 (PDT) Resent-Date: Fri, 18 Aug 2000 10:03:56 -0700 (PDT) Message-Id: <4.3.2.7.0.20000818094244.00b30620@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Fri, 18 Aug 2000 10:01:00 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: LDAP Extension Style Guide, re interaction between controls Cc: ietf-ldapext@netscape.com In-Reply-To: <399D741D.5313.C65737@localhost> References: <4.3.2.7.0.20000816150842.00b0dc10@router.boolean.net> <4.3.2.7.0.20000816150649.00ad5340@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"twH0fD.A.aEG.7xWn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:36 PM 8/18/00 +0100, David Chadwick wrote: >> "Controls SHOULD NOT be combined unless the semantics of the >> combination has been defined. A server MAY ignore non-critical >> controls (even those it recognizes) to establish semantics of the >> operation > >Note that the Internet2 guys, IETF PKIX group and Middleware >people have been discussing this issue, as X.500 is ambiguous in >this case. A defect report has now been issued on X.500, and the >proposed solution is contrary to the above, i.e. it states that a >server that understands an extension (control in the case of LDAP) >MUST obey it even if it is marked non critical. The issue is that the extension, as defined by two recognized controls, is NOT understood because the semantics of the combination is not defined. LDAP allows for a non-critical control to be ignored. This implies that if a request contains two controls, one critical and one not, is submitted to a server which recognizes BOTH controls but does not understand the semantics of the combination, the server must either: a) return unavailableCriticalExtension b) perform the operation as if the non-critical extension was not specified. I prefer option a) as it follows from the similar case: a request contains two controls, a recognized critical control and a unrecognized non-critical control. However, I can see the value offered in option b. >I would like LDAP to >either take the same stance for compatibility purposes, or to >persuade the X.500 , PKIX and other groups that the proposed >solution is wrong and that the server should be free to choose what >to do. Either way, I think that compatibility should be the target. I concur! From list@netscape.com Fri Aug 18 15:31:56 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA06089 for ; Fri, 18 Aug 2000 15:31:55 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7IJOrY12949; Fri, 18 Aug 2000 12:24:54 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7IJUTA11853; Fri, 18 Aug 2000 12:30:29 -0700 (PDT) Resent-Date: Fri, 18 Aug 2000 12:30:29 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Fri, 18 Aug 2000 13:27:10 -0600 From: "Jim Sermersheim" To: Cc: , Subject: RE: WG Last Call: draft-ietf-ldapext-ldapv3-dupent-03.txt Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_471FEE05.D4B5DCF7" Resent-Message-ID: <"vDec3C.A.d2C.P7Yn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_471FEE05.D4B5DCF7 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable David,=20 You're right. Unless there is opposition, I'll plan on removing the text = that prohibits subtypes and make another change that make the inclusion of = subtypes obvious. Jim >>> Dave Watts 7/12/00 5:08:26 AM >>> Jim, Sorry to come in on this discussion late. There was one thing I noticed in your draft RFC - I think that you **should** consider subtypes for duplicate entries. This is more consistent= with the general LDAP/X.500 rule: - subtypes count for interrogation operations - subtypes are ignored for modification operations. Regards, David -----Original Message----- From: Jim Sermersheim [mailto:JIMSE@novell.com] Sent: 15 June 2000 00:43 To: ietf-ldapext@netscape.com; Kurt@OpenLDAP.org Subject: Re: WG Last Call: draft-ietf-ldapext-ldapv3-dupent-03.txt >>> "Kurt D. Zeilenga" 6/14/00 12:14:53 PM >>> >How does this control behave in the face of subtypes of the >provided AttributeDescriptions? If an attribute is specified, only that attribute is considered for returning duplicate entries, subtypes of that attribute are not considered.= I'll add text to make this clear. --=_471FEE05.D4B5DCF7 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
David,
 
You're right. Unless there is opposition, I'll plan = on=20 removing the text that prohibits subtypes and make another change that = make the=20 inclusion of subtypes obvious.
 
Jim

>>> Dave Watts <DJW@datcon.co.uk> 7/12/00 5:08:26 = AM=20 >>>
Jim,

Sorry to come in on this discussion=20 late.

There was one thing I noticed in your draft RFC - I think = that=20 you
**should** consider subtypes for duplicate entries. This is more=20 consistent
with the general LDAP/X.500 rule:
- subtypes count for=20 interrogation operations
- subtypes are ignored for modification=20 operations.

Regards,

David

-----Original=20 Message-----
From: Jim Sermersheim [mailto:JIMSE@novell.com]
Sent: 15 = June=20 2000 00:43
To: ietf-ldapext@netscape.com; Kurt@OpenLDAP.org
Subject: = Re:=20 WG Last Call: draft-ietf-ldapext-ldapv3-dupent-03.txt


>>&g= t;=20 "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> 6/14/00 12:14:53 PM=20 >>>

>How does this control behave in the face of = subtypes of=20 the
>provided AttributeDescriptions?

If an attribute is = specified,=20 only that attribute is considered for
returning duplicate entries, = subtypes=20 of that attribute are not considered.
I'll add text to make this=20 clear.

--=_471FEE05.D4B5DCF7-- From list@netscape.com Fri Aug 18 19:23:27 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA10329 for ; Fri, 18 Aug 2000 19:23:26 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7INGNY21666; Fri, 18 Aug 2000 16:16:23 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7INLxY20274; Fri, 18 Aug 2000 16:21:59 -0700 (PDT) Resent-Date: Fri, 18 Aug 2000 16:21:59 -0700 (PDT) Message-Id: <4.3.2.7.0.20000818102515.00b24e60@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Fri, 18 Aug 2000 16:18:26 -0700 To: "Haripriya S" From: "Kurt D. Zeilenga" Subject: Re: New draft - LDAP control for modify and delete onmultipleentries Cc: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"a1X46.A.g8E.WUcn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 08:05 AM 8/18/00 -0600, Haripriya S wrote: >I can modify the proposal as follows: > >1. Retain the EntrySelection control which consists of 4 parts, > a scope, an referencealiases field, a filter, and a set of fields for setting limits on the operation ( time, error, etc. ). This is approximately equivalent to a search operation syntax itself. Make all fields except limits fields optional(?). I recommend making limits OPTIONAL with DEFAULTs of no limit. >Also introduce a field from the client ( optional ) specifying whether it can and wants to receive partial responses. Please, no. This only reintroduces all the issues which use partial responses was meant to avoid... with the addition headache of having to support two sets of semantics. Combining a "paritial response" approach and "all-or-nothing" approach is not wise. It would be difficult to specify in a clear and concise manner and likely hard to implement. >2. Define a general partial extended response. >This can be returned by any LDAP operation. I suggest, for now, you just hijack extendedPartialResponse and make a note in your I-D that your use of extendedPartialResponse I-D assumes a generalization of the extendedPartialResponse I-D will be made. The generalization work will like progress quickly as it's mostly "syntactical sugar". >Define a specific partialextendedresponse for continuation responses and use it for continuations needed for this operation. Yes. > >3. The modifyResponse or delResponse will return the final response. Error codes specific to the request control, and the failedDNs will be returned by the EntrySelectionResponse control. No. Return them in another partial extended response. If you don't separate per entry/continuation responses then the operation should be treated as one atomic action (or you should disallow abandon). >Another approach is to allow failedDNs also to be returned partially as and when they fail, and hence define another specific partialextendedresponse to return failedDNs too. Yes! Return a partial extended response for each entry the operation acts upon. The response should contain the DN and the results specific to that entry. Use the final result response only to indicate the completion (success or failure) of the operation. From list@netscape.com Sat Aug 19 04:44:49 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA29126 for ; Sat, 19 Aug 2000 04:44:48 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7J8biY02332; Sat, 19 Aug 2000 01:37:44 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7J8hL617235; Sat, 19 Aug 2000 01:43:21 -0700 (PDT) Resent-Date: Sat, 19 Aug 2000 01:43:21 -0700 (PDT) From: Magic@mx-054.fsnet.co.uk Message-Id: <200008191725.KAA24166@qcir2> To: Magic@yahoo.com Date: Sat, 19 Aug 00 01:02:30 EST Subject: Search Engine Secrets Discovered Resent-Message-ID: <"7oXWTC.A.1ME.oikn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com "Amazing Search Engine Secrets Discovered By A Computer Illiterate Man in Massachusetts Can Practically Hand You the Top Search Engine Positions...And Add 1,550 Hits a Day to Web Site Overnight!" Dear Friend, Remember the first time you built a web site. You stayed up until the early morning working it out so that it would be just perfect. Then, you were finally done and you sat back and thought, "The World is Good." After that, you've dreamed of all the visitors your site would have, how they would all see your ad and buy your product. Then it hit you, like a ton of bricks....How was anyone going to find your web site? You thought about it for a while and eventually thought you had the answer....submit your site to the search engines. But after you submitted your site you checked it out and couldn't find it. So you waited a few days.....and still nothing You couldn't even find your site if you looked up your own name!!! Then, you got discouraged....after all that hard work NOTHING?!?!? And this is where most people give up..... BUT You Don't Have To... You can achieve top 20 positioning for your web site...and the tens of thousands of hits which come with it...if you have the "Right" information available to you. For Example, did you know: * Infoseek, Alta Vista, and HotBot ban web sites which break their rules (many of the 'insider' techniques most experts recommend will get you banned faster than you could imagine). * Many search engines limit the number of pages you can submit from your domain (some only allow you to submit one page for best results), although we can show you a technique we use to get hundreds of our pages listed. * Yahoo only lists about 1% of the web in their actual directory. To even get your page listed, you may have to use the "backdoor". * Using a so-called search engine submission software that submits your site to 1,000 or more search engines could actually get your page deleted from the major search engines. * 95% of Internet traffic originates at one of the 10 major search engines...If you're not listed, you might as well not even have a web site! * Choosing the most effective 'keywords' is one of the major keys to a successful web site submission...Pick the right ones and your web site will look like Grand Central Station during rush hour! It has taken us over 2 years to learn how to consistently and without fail place any type of web site in the top 20 of the major search engines. Normally, we charge $500 per keyword that you want a top ranking on (plus a monthly fee of $150 for keeping that rank), but we have found we just don't have enough time for all of the clients that desperately need our services... So, we have produced a "Search Engine Magic" interactive CD-ROM that will show you step by step how to create pages which storm the search engines and lay hold to the precious Top 20 positions that millions of people are trying to reach. The Search Engine Magic CD-ROM consists of 21 interactive video and audio lessons that will run on any IBM compatible computer showing you the exact step-by-step process we use to traffic thousands of visitors to our web sites every single day. You will learn: * Three Different Methods We Use to Pick the Best Traffic Producing Keywords for any web site...and how you can have a list of hundreds of popular keywords in only a few minutes. * How Quick and Easy it is to Create 'Doorway' and 'Hallway' pages for the search engines so that you could possibly have thousands of different pages on your domain all pulling in visitors for your site 24 hours a day 7 days a week. * The Secret Weapon that gives you an "Unfair Advantage" over your competition...and virtually assures you will reach the top positions (don't let your competitors hear about this one first or you will be in trouble). * How to Submit Your Pages to the Search Engines and assure that every single one of them gets listed. (if you listen to one of those amateurs tell you how to list your site, you may just get banned for life). * How to Use Pay-Per-Click search engines to receive over 10,000 visitors for only $100 * The Infamous Yahoo backdoor...You can get listed and we will show you the quickest and easiest method for doing so! * And much, much more... Even Better, You'll Get the Same Results For A Fraction of What Everyone Else Had to Pay! Listen: A lot of people all over the world are gonna be furious with me for sharing these "Insider Secrets" with you...especially since you won't be paying even part of what they had to shell out for one top positioning page! That's just too bad. It's been a secret for too long. So, let me tell you what the deal is.... Contact us today using the below Risk-Free Response Form and you can have all of our secrets for only $139.00. This price wouldn't even buy you 10 minutes of our time at our regular submission fees, but you can own the top search engine positions for less than the cost of a few classified ads! You will be learning everything we know about top positioning! That, my friend, is the bargain of a lifetime for a serious Internet marketer like yourself. What’s more, the money is actually irrelevant, because... You Also Get a 90 Day No-Risk 100% Money-Back Guarantee! Here's how it works. Order your personal copy of this CD-ROM, and use it like you own it. If...For any reason or no reason at all, you aren't completely satisfied after 90 days (by which I had over 47 Top 20 positions for my own web site), just send the CD-ROM back in any condition, and I personally guarantee you to get a complete refund of your purchase price. No questions asked. No problems or forms to fill out. No problems at all. PLUS, You Will Also Receive What is Considered to be by most experts as the "Ultimate Bonus!" For the first 50 people who fill out the below response form and send it in, you will also receive UNLIMITED REPRINT AND REPRODUCTION RIGHTS to this CD-ROM for LIFE! I am not going to allow this CD-ROM to become like many of those over-advertised products you see out there, so only the first 50 will receive these rights. This means that you will be able to use this exact same sales letter, copy the CD-ROM yourself, and sell it For $139.00 a copy, one sell will have breaking even. Sell two copies and you will be in profit.This isn't even counting what the CD-ROM package will do for you! Since only 50 people are going to have these rights... you must take action today! Yours in Success, Michael Burgess To rush order this "Search Engine Magic CD-ROM" simply fill out the order form below and fax it to our 24 hour order line at: FAX ORDER LINE: 1 (212) 504-8032 Regular Mail to: Financial Systems P.O. Box 301 Orange, Ma 01364 ORDER FORM #MB-Good -------------------------------------------------------- Please send to: Your Name: _____________________________________________ Your Address: __________________________________________ Your City: _____________________________________________ State / Zip: ___________________________________________ Your Country: __________________________________________ Phone #: _______________________________________________ (For problems with your order only. No salesmen will call.) Email Address: ___________________________________________ We Accept Checks or Money Orders along with all Major Credit Cards including Visa, MasterCard, American Express and Discover. (NOTE - We only ship to the address listed on the credit card) (Please Fill Out Below Section and Make sure that the above name and address are listed as it appears on the card) for $144 ($139 + 5.00 Shipping) Credit Card Number:________________________________ Expiration Date:___________________________ Signature:_________________________ Date:____________________ * Please check one of the following payment options: [ ] I am faxing a check (Do not send original, we will make a draft from the faxed check) [ ] I am faxing or mailing my credit card number. (Note your card will be charged for $144.00 and we only ship to the address on the card) [ ] I am enclosing a check or money order for $144.00! Note - If ordering outside continental US, please add $5 to S&H P.S. If you send in your order and you are not one of the first 50 to receive the Reprint and Reproduction Rights, I will notify you immediately and give you the opportunity to cancel your order. _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ If you have received this message in error and would like to be removed from future mailings, please reply with the word remove in the subject. x _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ From list@netscape.com Sat Aug 19 18:01:36 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA03438 for ; Sat, 19 Aug 2000 18:01:36 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7JLsRY08008; Sat, 19 Aug 2000 14:54:27 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7JM06Y21799; Sat, 19 Aug 2000 15:00:06 -0700 (PDT) Resent-Date: Sat, 19 Aug 2000 15:00:06 -0700 (PDT) Date: Sun, 20 Aug 2000 06:44:12 +0900 From: boats123@myrealbox.com Message-Id: <200008192144.GAA17852@hanatour> To: dsfooo@fjhoe.it.netscape.com Subject: Earn 2-5k Per Week From Home!!! Resent-Message-ID: <"ZL2P1C.A.TUF.kNwn5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Work Smarter ....Not Harder!! It's So Simple To Earn $2,000 - $5,000 Per Week Nowadays... I am searching for only 10 elite individuals with the work ethic necessary to generate a cash-flow for themselves of $2,000 - $5,000per week, and to increase that to over $20,000 per month, in as little as four to six months. And you know what? If you really have a burning desire and commitment, I guarantee you that you'll reach this explosive income! Can you read a short script to our qualified leads, and then turn the interested prospects over to our electronic sales medium? (you will not be required to do any selling.) Do you have the self-discipline to ignore the TV for a couple of hours per day? Are you looking for a legitimate home-based business opportunity, that is not multi-level marketing, or a chain-letter scheme? If you would like to build an amazing income that will grow lightning-fast and have you profit $1,000.00 every time only one prospect makes a purchase, then this is for you! You can build the business under my guidance and support without having to attend meetings or sell people things they don't need. Call NOW our TOLL FREE, PRE-RECORDED Message: 1-800-570-3782 ext 4041 We market a real product, that pays real commissions to you, $1,000.00 per sale, just for making the initial contacts. With our turn-key lead generation systems you'll always talk to people who actually WANT to talk to you. You have nothing to lose, there's no risk involved, nor is there any obligation whatsoever, and you may be qualified to earn thousands of extra dollars per month! So call now! The call is FREE, and there is absolutely no obligation, So what have you got to lose? Call Toll Free 1-800-570-3782 ext 4041 P.S. You literally have a once-in-a-lifetime opportunity to GET INVOLVED NOW! Don't let this one go by. You have absolutely nothing to lose! This could be the most fascinating and profitable business of your life! Please, serious inquiries only. ********************************************************************** All REMOVE requests AUTOMATICALLY honored upon receipt. PLEASE understand that any effort to disrupt, close or block this REMOVE account can only result in difficulties for others wanting to be removed from our mailing list as it will be impossible to take anyone off the list if the remove instruction can not be received. To be removed from our mailing list please send an email to: listremoval@unbounded.com and place remove in the subject Thank you ********************************************************* From list@netscape.com Sat Aug 19 23:33:52 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA06836 for ; Sat, 19 Aug 2000 23:33:52 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7K3Moe26308; Sat, 19 Aug 2000 20:22:50 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7K3WRA14069; Sat, 19 Aug 2000 20:32:27 -0700 (PDT) Resent-Date: Sat, 19 Aug 2000 20:32:27 -0700 (PDT) Date: Sat, 19 Aug 2000 20:32:19 -0700 (PDT) Message-Id: <200008200332.e7K3WJF22719@ywing.netscape.com> To: opt_in1@businessweekmail.com From: Subject: FREE e-commerce International website ... products at wholesale prices! Resent-Message-ID: <"ViqLZ.A.abD.KF1n5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com FREE e-commerce International website ... products at wholesale prices! ======================================================================= Hello, Yes, you heard us right! We are giving away FREE e-commerce websites which include YOUR OWN NAME at which you can purchase products at WHOLESALE prices ... 25% discount! This costs you absolutely NOTHING ... no obligation ... no hype. You will also receive FREE the opportunity to build your own downline by sponsoring others just like yourself ... this cost you NOTHING. FREE Leads are also available with this international opportunity! For ALL the details, please Email: Mailto:free-ecommerce2@newmail.net Talk to you soon, The Success TEAM To unsubscribe mailto:unsubscribe819@newmail.net From list@netscape.com Sun Aug 20 15:47:35 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA09704 for ; Sun, 20 Aug 2000 15:47:34 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7KJaUe08810; Sun, 20 Aug 2000 12:36:30 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7KJk8217717; Sun, 20 Aug 2000 12:46:08 -0700 (PDT) Resent-Date: Sun, 20 Aug 2000 12:46:08 -0700 (PDT) Date: Mon, 21 Aug 2000 04:39:03 +0900 From: mike@yycbvecker2931.mx.netscape.com Message-Id: <200008201939.EAA01478@nacf.co.kr> To: Subject: ADV: High Search Engine Rankings MIME-Version: 1.0 Content-Type: text/plain; charset=unknown-8bit Resent-Message-ID: <"x_X70.A.WUE.-VDo5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Removal instructions below I saw your listing on the internet. I work for a company that specializes in getting clients web sites listed as close to the top of the major search engines as possible. Our fee is only $29.95 per month to submit your site at least twice a month to over 350 search engines and directories. To get started and put your web site in the fast lane, call our toll free number below. Mike Bender 888-532-8842 To be removed call: 888-800-6339 X1377 From list@netscape.com Mon Aug 21 11:25:09 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA02720 for ; Mon, 21 Aug 2000 11:25:09 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7LFCee13748; Mon, 21 Aug 2000 08:12:40 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7LFMJA11896; Mon, 21 Aug 2000 08:22:19 -0700 (PDT) Resent-Date: Mon, 21 Aug 2000 08:22:19 -0700 (PDT) Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7BIT To: ietf-ldapext@qijwqaqjvu.netscape.com Subject: RE:Search Engine Traffic -chkwnaihkm Date: Mon, 21 Aug 2000 07:42:30 -0700 Message-Id: Reply-To: takemeoffpleas@excite.com From: takemeoffpleas@xscwyjm.excite.com Resent-Message-ID: <"EbYupD.A.m5C.qkUo5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Guaranteed Traffic from major Search Engines When using a search engine, if you don ’t find what you ’re looking for in the first 10 to 30 matches what do you do? Well, most people go to the next search engine and try again. If your site is not coming up in the first 10 to 30 matches of a search, then you ’re losing business! IT ’S THAT SIMPLE! Improving search engine TRAFFIC means: MORE HITS MORE BUSINESS MORE SUCCESS The most important advertising dollar you spend should be for search engine Traffic. WHY? The top three reasons are: 1. Approximately 95% of all Internet users start with a search engine query. 2. Anyone who comes to your site from a major search engine is 100 times more likely to become a customer because they were specifically looking for your product, goods, or services. 3. Search engine placement gives you substantially more for your advertising dollar than banners. We guarantee traffic generated from the.following.search engines: Yahoo, HotBot, Excite, Alta Vista, Lycos, Infoseek, MSN, Netscape, Snap.com, AOL Netfind ------------------------------------------------------------------------------------------------------------- For more information fax the following request to 1.208-445-2319 This Form MUST be completely filled out to receive service quotes. ------------------------------------------------------------------------------------------------------------- Company: Address: Contact Name: Best Time To Call: Contact Telephone: Contact Fax: Contact E-mail Address: Website Address: Keywords: Questions: ------------------------------------------------------------------------------------------------------------------- Remove: takemeoffpleas@excite.com ------------------------------------------------------------------------------------------------------------------- From list@netscape.com Tue Aug 22 08:32:50 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA03357 for ; Tue, 22 Aug 2000 08:32:49 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7MCPaY21198; Tue, 22 Aug 2000 05:25:36 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7MCVGM29581; Tue, 22 Aug 2000 05:31:16 -0700 (PDT) Resent-Date: Tue, 22 Aug 2000 05:31:16 -0700 (PDT) Sender: Ludovic.Poitou@france.Sun.COM Message-ID: <39A271EE.12161004@France.sun.com> Date: Tue, 22 Aug 2000 14:28:30 +0200 From: Ludovic Poitou Organization: Sun Microsystems Inc. X-Mailer: Mozilla 4.7 [en] (X11; I; SunOS 5.8 sun4u) X-Accept-Language: en MIME-Version: 1.0 To: hahnt@us.ibm.com CC: ietf-ldapext@netscape.com Subject: Re: comments on draft-behera-ldap-password-policy-02.txt References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"Bd8WkB.A.7NH.TKno5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit hahnt@us.ibm.com wrote: > Greetings, > > I have a few comments on the I-D: > > Section 2.1, second paragraph: "password for a directory administrator > never expires, the account is never locked, etc." > I think that if a particular implementation wants to allow this, then it > can choose to do so. I do not think it should be singled out as part of > the specification. In a secure environment, the directory administrator(s) > should be held to strict requirements like everyone else. All efforts > should be made to disallow a "single, allow-allowing identity" from > existing. I agree and will change the wording. But I think that at least the Directory Manager (or root if you prefer) should not have a password policy that could lock him outside the directory. > > Section 4.2.5, first paragraph: "otherwise the server must returned an > error" - returned should be return. > > Also, case "1" and case "2" look to me to be identical. They're not, when the new password is hashed. Case "1" will succeed (trust the client for having checked the syntax before submitting a new hashed password), case "2" will fail (refuse a hashed password since syntax cannot be checked). > > Also, it would be nice if the "pwCheckSyntax" identified the password > attriubutes that it applied to by name. I don't understand this remark. The whole policy definition apply to the same password attribute. > > > Section 4.2.13, second paragraph: "If this attribute is not preset, ... the > failure counter will never be purged." > I expected that the failure counter would always be purged after a > successful authentication? I agree this is not clear. What about : "This attribute holds the number of seconds after which the password failures are purged from the failure counter even though no successful authentication occured. If this attribute is not present,... the failure counter is only reset by a succesfull authentication." > How does one indicate that password failures > should not be counted? The pwdMaxFailure is used to indicate that password failures should not be counted (not present or value set to 0). > > > Section 4.3: > Is there any alternative to this use of attribute descriptions/options? > Many implementations don't have full support for attribute > descriptions/options yet. The alternative would be to specify the password attribute name in each value. Something like "pwdChangedTime: {userPassword}20000103121520Z" I don't really like this because it cost more to search for the correct value. Especially for the attributes that can hold several timestamps. > > > Section 4.3.3, first paragraph: "The password must expire in the ...", > should "must" be "will"? Yes, corrected. > > > Section 4.3.4, first paragraph: "time stamps" should be "timestamps" > Thanks. > > Section 6.4, step 2, part B "checks for password expiration". > Will compareTrue still be returned after expiration? This was not clear. I don't think so. If compare is used for authentication purpose, the result should only be compareTrue or compareFalse, and the appropriate control set. I need to discuss this with the other authors of this document. > > > Also, "bindResponse" should be changed to "compareResponse" throughout this > section of the text (all the way to the start of Section 7). > Done. > > Section 7.1, first paragraph: > "For every bind response received" should be "for every bind response or > compare response received", and likewise throughout the rest of the > section, compare response should be factored in. I'd rather add a compare section since compare should return compareTrue or compareFalse, or an error. > > > Section 8: > As an alternative, why not apply the auxiliary class to an entry in the > tree and define its "scope" to be the subtree below that entry (until > another policy is encountered, or the subtree leaves the server instance). That's a possibility. I think that because the password policy definition is more of an administrative entry than a "user" entry, it should not be returned during regular searches. Subentry allows that without having to set specific ACIs. > > Also, "When the server need to find the" , "need" should be "needs" > Corrected. > > Section 9, last paragraph: > I interpreted this paragraph to mean that the operational attributes should > be modified/tracked by each replica itself, not replicated/kept in sync > across the replicas. If that is so, I'm not sure that this should be > specified here - some implementations might find a way to keep them in sync > to cut down on the total number of possible attempts (counting all replicas > of the information). I think the "should" express a recommandation not an obligation. But I agree some implementation (or some deployement) might find usefull to keep all attributes in sync. > > > Section 10, last paragraph: > It would be nice to see an expanded discussion of auditing. Might this be > the topic of a new I-D? > Good point, need to think about this... Thanks for reviewing the draft. Ludovic. > > Regards, > Tim Hahn > > Internet: hahnt@us.ibm.com > Internal: Timothy Hahn/Endicott/IBM@IBMUS or IBMUSM00(HAHNT) > phone: 607.752.6388 tie-line: 8/852.6388 > fax: 607.752.3681 -- Ludovic Poitou Sun Microsystems Inc. iPlanet E-Commerce Solutions - Directory Group - Grenoble - France From list@netscape.com Tue Aug 22 13:43:21 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA11749 for ; Tue, 22 Aug 2000 13:43:20 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7MHZeY05484; Tue, 22 Aug 2000 10:35:40 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7MHfMk10673; Tue, 22 Aug 2000 10:41:22 -0700 (PDT) Resent-Date: Tue, 22 Aug 2000 10:41:22 -0700 (PDT) Date: Tue, 22 Aug 2000 10:41:14 -0700 (PDT) Message-Id: <200008221741.e7MHfEF19581@ywing.netscape.com> To: optin2@bolt.com From: Subject: Closing 1 out of 3 Sales ... Weekly Bonus Checks! Resent-Message-ID: <"58ccgC.A.fmC.Btro5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Closing 1 out of 3 Sales ... Weekly Bonus Checks! ================================================= * Simple Script * Training and support * Heavy-hitters close the sale and sign them up for you! * Hundreds signing up each day using this SIMPLE System! * FREE LEADS from 300,000 person data base! * Weekly BONUS checks of $126 or $40 for EACH person who signs up! * Established 16-year-old International Company For ALL the details, please Email: Mailto:free-ecommerce4@newmail.net To unsubscribe mailto:unsubscribe821@newmail.net From list@netscape.com Tue Aug 22 20:53:50 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA18248 for ; Tue, 22 Aug 2000 20:53:50 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7N0gae07363; Tue, 22 Aug 2000 17:42:37 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7N0qJs00539; Tue, 22 Aug 2000 17:52:19 -0700 (PDT) Resent-Date: Tue, 22 Aug 2000 17:52:19 -0700 (PDT) Date: Tue, 22 Aug 2000 17:51:58 -0700 (PDT) Message-Id: <200008230051.e7N0pmH23513@xwing.netscape.com> From: beef@wtp.net To: @netscape.com Subject: Hi X-Reply-To: beef@wtp.net Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"dBzK-D.A.3H.CByo5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit You have sent me an e-mail or we belong to the same opt-in -group Want to send your ad to 3,200,000 people..... ALL FOR FREE ? Dear Advertiser : You've got a product or service to sell? You've set up a beautiful web-site, submitted to all the search engines and your fingers are numb from endless posting to classified and free-4-all sites? - You did everything right? Still, prospects you expected to flood you with orders just dribble in! I know, I've been there also! What if I told you that, in just a few short weeks, you would have to hire extra personnel to handle a mountain of incoming orders! You'd be interested, right? Now, what if I told you, you can accomplish this amazing feat in under one hour a day and that it would be ABSOLUTELY FREE!! That's right, I said FREE and I meant it! What's more, you need not fear flames", "bombs", the loss of your ISP or an unfriendly knock at the door in the early morning hours! Sound too good to be true? Read on! In less than an hour a day, you can put your product or service in front of as many as 3,200,000 potential customers! That's right, as many as THREE MILLION TWO HUNDRED THOUSAND POTENTIAL CUSTOMERS Are you ready to learn this foolproof, FREE system? All right, let's get started : STEP 1 : Make a copy of this letter. STEP 2 : Read the 5 advertisements at the end of this letter. STEP 3 : Remove the ad in the number 1 position and renumber the remaining ads as # 1 through # 4. STEP 4 : Place your ad for product, service or website AFTER the number 4 ad and number it as number 5. ( I'll explain why a little later ). STEP 5 : Send the letter to 10 people a day, for five days a week for two weeks. That's a total of 100 letters! (I'll tell you where to find them free). That's it! You're finished !! Too simple you say? Let's look at the math! The reason for sending 10 letters a day for 2 weeks is that you can reasonably assume that at least 20% of those receiving your letter are savvy enough business peple to see the value of this FREEsystem! That gives you 20 potential customers who will SEE YOUR AVERTISEMENT. Not impressed, Let's continue! Each of those 20 recipients send out 100 letters and get a 20% participation. You now have 400 POTENTIAL CUSTOMERS SEEING YOUR AD! Each of those 400 people send out 100 letters, and get a 20% participation. You're now up to 8,000 POTENTIAL CUSTOMERS SEEING YOUR AD! Each of those 8,000 send out 100 letters, get a 20% participation and your ad is ---exposed to 160,000 POTENTIAL customers. Your advertisement is now in the number 1 position! If each of the 160,000 send out 100 letters and get only 20% participation, YOUR AD IS SEEN BY 3,200,000 POTENTIAL CUSTOMERS and YOU HAVE NOT SPENT ONE RED CENT!! Now, take a minute to catch your breath while I explain where to find the 100 people to send your letter to at ABSOLUTELY NO COST and why it's important to place your ad in the number 5 position! Actually, we'll start with the positioning first! You may ask yourself "why not shoot for the top and put my ad in the number 1 position?" The answer is quite simple! Those who participate in this POWERFUL and COMPLETELY FREE SYSTEM will be doing the same thing you should do, removing the number 1 ad and placing their ad in the number 5 position. If you were to put your ad in the number 1 spot, it will be goneafter the first cycle! By placing it in the number 5 slot, your ad won't be removed until it is seen by as many as 3,200,000 POTENTIAL CUSTOMERS! And remember, this system is based on a REALISTIC participation rate of only 20%! A good chunk of the 80% who aren't serious enough about their business and their future to participate will also be reading YOUR AD! When you begin calculating them, the total numbers are absolutely staggering! So, where do you find the 100 people to send your letter to? Again, it's quite simple and TOTALLY FREE! Just go to your favorite search engine ( Yahoo, Lycos, Alta Vista, Netscape, Look Smart, etc. ) classified section! Furthermore, even when you go to your favorite search Engines and type posting service you will find THOUSANDS of commercial advertisements with e- mail addresses! The possibilities are endless. These are professional marketers, like yourself---( AND MANY OF THEM EVEN PAID FOR THE ADS. ) --- marketers who have placed these ads with the same hopes of attracting customers you have! Do you think they will go for this powerful FREE way of MASSIVE advertising that brings in more result than magazines ads, news paper ads and TV commercials combined? All for FREE. Of course they would!!! Talk about a Target Market! So, there you have it! And, of course, you don't have to stop at sending your letter to only 100 people! If you wish ( and can handle the MASSIVE VOLUME this FREE system provides ), you can send out more letters as time permits and INCREASE YOUR PROFITS BEYOUND YOUR WILDEST DREAMS! This system simply CAN'T FAIL! Please notice that I never promised a 100% articipation rate. You and I both know that would be totally unrealistic. That's why I use the 20% example. Your results may be more or less. It doesn't matter! If you can accomplish even 10% participation, you're still miles ahead of those timid, lazy souls who find themselves lost in a sea of mediocrity. BY the way, a 10% participation would still EXPOSE YOUR PRODUCT OR SERVICE TO OVER 600,000 POTENTIAL CUSTOMERS! And if 10% out of 600,000 buy your product or service that's 60 THOUSAND. WOW!! You simply CAN'T LOSE!! We both know and agree the keys to a successful business is a numbers game That's all it is. The more people you expose your business to, the greater the chances of your product or services being sold or achieving outstanding success. Don't you agree? So, what are you waiting for? You have nothing to lose. Start making money today. Thanks. Read the advertisements below and start sending your letter out NOW! ----------FREE ADVERTISING-------- _______________________________________________________ 1.)100% Finance a new Computer Even with Bad Credit!! Is your old dinosaur computer just dragging along? Need a new system, but you can't afford it right now? Credit not good enough to get one from GateWay or Dell? We are EarthComp and we have grown to one of the top computer companies in the U.S.. because we approve computer financing to just about 80% of the people that GateWay and Dell turn down. Our systems are complete with monitors and printers. Visit our site today, at http://www.earthcomp.net/DS2637 and browse our systems,and payment plans. _____________________________________________________ 2.)Get Paid To Do What You're Doing Right Now!! You have a home page right? Do they pay you? This one will and it's FREE! You Browse around the Internet right? Do you get paid for it? This one will, and it's FREE! Please visit my site @ http://www.realmoney.bigstep.comm and start to get paid for what you are already doing! THERE IS NO REASON NOT TO! _____________________________________________________ 3.)HERE IS THE EASIEST PROGRAM ON THE INTERNET! Get paid when your computer is on IDLE!! That's right!! Just use WAVEVU as your SCREENSAVER!! It does'nt get ANY EASIER! http://www.wavevu.com/wavevu.asp?RefID=F13834 _______________________________________________________ 4.)Are you health conscious and are interested in maintaining your health, or perhaps are interested in losing a little weight? Do you want to break free from working long hours for someone else and not spending time with your family or being able to do what you want? Then let me show you a simple way to make a substantial income, while getting superior health and wellness products, at a discount price, from a well established company that is free to join. Lots of people are doing extremely well, money wise and health wise with this, and you can too! Follow this link and click on make money Go to http://virgilsandberg.FreeLife.com ______________________________________________________ 5) quick commerce is a powerful Internet based software tool that is a real-time authorization terminal and complete secure transaction processing system. Merchants can use Virtual Terminal and WebLink to settle credit card transactions without the need for a separate terminal or software. Credit card transactions are authorized immediately upon submitting! Electronic Checks, are also supported on the QuickCommerce system. With our quick and easy merchant account setup you can be accepting credit cards in as few as 7 days! In today's competitive business environment you need to accept secure credit card and check payments over the Internet. To begin, simply click http://www.qcaffiliate.com/qc/beefii/index.html or ------------------------------------------------------------------------------------------------------------------------------- This message is sent in compliance of the new e-mail bill section 301.Under Bill S. 1618 TITLE III passed by the 105 th. U.S. Congress. This message can not be Considered Spam as long as we include the way to be removed, Paragraph (a) (c) of S. 618,further transmissions to you by the sender of this e-mail may be stopped at no cost to you by sending a request to be removed e - mail to: ( YOUR E-MAIL )--- Please type "Remove" in the subject line From list@netscape.com Wed Aug 23 01:53:23 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA28441 for ; Wed, 23 Aug 2000 01:53:22 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7N5fve29176; Tue, 22 Aug 2000 22:41:57 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7N5pdM10589; Tue, 22 Aug 2000 22:51:39 -0700 (PDT) Resent-Date: Tue, 22 Aug 2000 22:51:39 -0700 (PDT) Date: Tue, 22 Aug 2000 22:51:24 -0700 (PDT) Message-Id: <200008230551.e7N5pCH23969@xwing.netscape.com> From: "Luis" To: @netscape.com Subject: Read Carefully: Earn $50,000 in 90 days!!!!! X-Reply-To: harpistlui@msn.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"n02T9D.A.LlC.qZ2o5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Dear Friend, thank you for your time and interest. This email contains the entire plan of how you can make $50,000 or more in the next 90 days simply sending email! Seem impossible? Just read on and see how easy this is... Due to the popularity of this letter on the Internet, a major nightly news program recently devoted an entire show to the investigation of the program described below to see if it really can make people money. The show also investigated whether or not the program was legal. Their findings proved that there are absolutely no laws prohibiting the participation in the program. This has helped to show people that this is a simple, harmless and fun way to make some extra money at home. The results have been truly remarkable. So many people are participating that those involved are doing much better than ever before. Since everyone makes more as more people try it out, its been very exciting. You will understand once you try it yourself! ********** THE ENTIRE PLAN IS HERE BELOW ********** If you would like to make at least $50,000 in less than 90 days! Please read this program, then read it again! This is a legitimate, legal, money making opportunity. It does not require you to come into contact with people or make or take any telephone calls. Just follow the instructions, and you will make money. This simplified email marketing program works perfectly 100% every time. Email is the sales tool of the future. Take advantage of this virtually free method of advertising now. The longer you wait, the more people will be doing business using email. Get your piece of this action. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Hello - My name is Johnathon Rourke and I'm from Rhode Island. The enclosed information is something I almost let slip through my fingers. Fortunately, sometime later I re-read everything and gave some thought and study to it. Two years ago, the corporation I worked for the past twelve years downsized and my position was eliminated. After unproductive job interviews, I decided to open my own business. Over the past year, I incurred many unforeseen financial problems. I owed my family, friends and creditors over $35,000. The economy was taking a toll on my business and I just couldn't seem to make ends meet. I had to refinance and borrow against my home to support my family and struggling business. At that moment something significant happened in my life. I am writing to share the experience in hopes that this could change your life forever financially. In mid December, I received this problem in my email. Six months prior to receiving this program I had been sending away for information on various business opportunities. None of the programs I received, in my opinion, were cost effective. They were either too difficult for me to comprehend or the initial investment was too much for me to risk to see if they would work. But, as I was saying, in December of 1997, I received this program. I didn't send for it or ask for it. Someone just got my name off a mailing list and thank goodness for that. I read it several times after that first time to be sure I was understanding it correctly. I couldn't believe my eyes! Here was a money making machine I could start immediately without any debt. Like most of you I was still a little skeptical and a little worried about the legal aspects of it all. So I checked it out with the U.S. Post Office (800-725-2161, 24 hours a day) and they confirmed that it is indeed legal. After determining the program was legal, I decided, "why not?" Initially I sent out 10,000 emails. It cost me about $15 for my time on-line. The great thing about email is that I don't need any money for printing to send out the program, and because I also send the product (reports) by email, my only expense is my time. In less than one week, I was starting to receive orders for Report #1. By January 13, I had received 26 orders for Report #1. Your goal should be to receive at least 20 orders for Report #1 within 2 weeks. If you don't, send out more programs until you do. My first step in making $50,000 in 90 days was done. By January 30, I had received 196 orders for Report #2. Your goal is to receive at least 100+ orders for Report #2 within 2 weeks. If not, send out more programs until you do. Once you have 100 orders, the rest is easy, relax, you will make your $50,000. Well, I had 196 orders for Report #2, 96 more than I needed. So I sat back and relaxed. By March 1, of the first 10,000 emails I sent out, I received $58,000 with more coming in every day. I paid off all my debts and bought a much needed new car. Please take your time to read this plan, it will change your life forever. Remember, it won't work if you don't try it. This program does work, but you must follow it exactly. Especially the rules of not trying to place your name in a different place. It won't work and you'll lose out on a lot of money. In order for this plan to work, you must meet your goal of 20+ orders for Report #1, and 100+ orders for Report #2 in order to make $50,000 or more in 90 days. I am living proof that it works. If you choose not to participate in this program, I am sorry. It really is a great opportunity with little cost or risk to you. If you choose to participate, follow the program and you will be on your way to financial security. If you are a fellow business owner and are in financial trouble like I was, or you want to start your own business, consider this a sign. I did! Sincerely, Johnathon Rourke ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ A PERSONAL NOTE FROM THE ORIGINATOR OF THIS PROGRAM. By the time you have read enclosed program and reports, you should have concluded that such a program (and one that is legal) could not have been created by an amateur. Let me tell you a little about myself. I had a profitable business for 10 years. Then in 1979 my business began falling off. I was doing the same things that were previously successful for me, but it wasn't working. Finally, I figured it out. It wasn't me, it was the economy. Inflation and recession had replaced the stable economy that had been with us since 1945. I don't have to tell you what happened to the unemployment rate, because many of you know from first hand experience. There were more failures and bankruptcies than ever before. The middle class was vanishing. Those who knew what they were doing invested wisely and moved up. Those who did not, including those who never had anything to save or invest, were moving down into the ranks of the poor. As the saying goes, "the rich get richer, and the poor get poorer". The traditional methods of making money will never allow you to "move up" or "get rich". Inflation will see to that! You have just received information that can give you financial freedom for the rest of your life, with no risk and just a little bit of effort. You can make more money in the next few months than you have ever imagined. I should also point out that I will not receive a penny of your money, nor anyone else who has provided a testimonial for this program. I have retired from this program after sending out thousands and thousands of programs. Follow the program EXACTLY as instructed. Do not change it in any way. It works exceedingly well as it is now. As the saying goes, "if it ain't broke, don't fix it." Remember to email a copy of this exciting report to everyone you can think of. One of the people you send this to may send out 50,000 and your name will be on everyone of them! Remember though, the more you send out, the more potential customers you will reach. So, my friend, I have given you the ideas, the materials, the information and the opportunity to become financially independent. It's up to you now. DO IT!! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Before you delete this program from your in-box (as I almost did), take a little time to read it and really think about it. Get a pencil and figure out what could happen when you participate. Figure out the worst possible response and no matter how you calculate it, you will still make a lot of money. You will definitely get back what you invested and more. Any doubts you have will vanish when your first orders come in. Jody Jacobs Richmond, VA ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This method of raising capital really works 100% every time. I am sure that you could use up to $50,000 or more in the next 90 days. Before you say "Bull ____", please read this program very carefully. This is not a chain letter but a perfectly legal money making business. As with all multi-level businesses, we build our business by recruiting new partners and selling our products (reports). Every state in the USA allows you to recruit new multi-level business partners and to deliver a product for every dollar received. That's what this program does. We sell reports and that's perfectly legitimate! Your orders will come to you by mail and will be filled by email, so you are not involved in personal selling. You will do it in the privacy of your home, shop or office. This is the easiest marketing plan anywhere. It is simply filling orders by email. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The reports we sell are informational and instructional material, keys to the secrets for everyone to open the doors to the magic world of E-Commerce, the information highway, the wave of the future. Here's the plan: 1)You order the four reports listed below for $5 each. They will be sent to you by email. 2)Save a copy of this entire letter and put your name after Report #1 and move the other names down. Drop off the name presently shown at Report #4. 3)Use any of the hundreds of bulk email services listed (use "Search" for Bulk Email) and have them send you 25,000 to 50,000 email addresses for about $49. 4)Orders will come to you by U. S. Mail. Upon receipt receipt of the orders (and $5 for each order), simply email them the requested report. Now I ask you. Could anything be easier? By the way, there are over 50 million email addresses with millions more joining the Internet each year, so don't worry about "running out" or "saturation". You won't run out of people. You can start today. Just remember these easy steps. 1) ORDER THE FOUR REPORTS Order the four reports from the names below. (You can't sell them if you don't have them.) Send $5 cash, the name and number of the report you are ordering, your email address, and your name & return address (in case of a problem)to the person whose name appears on the list next to the Report. Make sure your return address is on your envelope in case of any U. S. Mail problems. Within a few days you will receive by email all four of the reports. Save them in your computer so you can send them to the thousands of people who will order them from you. 2) ADD YOUR MAILING ADDRESS TO THIS LETTER a.) Look below for the list of reports and names. b.) After you've ordered the four reports,delete the name and address under Report #4. This person has made it all the way through the entire cycle. c.) Move the name and address under Report #3 down to Report #4. d.) Move the name and address under Report #2 down to Report #3. e.) Move the name and address under Report #1 down to Report #2. f.) Insert your name and address in the Report #1 position. PLEASE MAKE SURE YOU COPY ALL INFORMATION, EVERY NAME AND EVERY ADDRESS ACCURATELY. 3) Take this entire letter, including the modified list of names and save it to your computer. Make no changes to these instructions. Now you are ready to use this entire email to send to your email prospects. Report #1 will tell you how to download bulk email software and email addresses so you can send this program out to thousands of people while you sleep. Remember that 50,000+ new people are joining the Internet every month. Your cost to participate in this is practically nothing (surely you can affort $20 and the initial bulk emailing cost). You obviously have a computer and an Internet connection and email is free. There are two primary methods of building your downline: METHOD #1: SENDING BULK EMAIL. Let's say that you decide to start small, just to see how it goes and we'll assume you and all those involved only email out 2,000 programs apiece. Let's also assume that the mailing receives a 0.5% response. The response could be much better. Also, many people will email out hundreds of thousands of programs instead of 2,000 (why stop at 2,000?) But continuing with this example, you send out only 2,000 programs. With a 0.5% response, that's only 10 orders you'll get for Report #1. Those ten people respond by sending out 2,000 each for a total of 20,000. Out of those 0.5%, 100 people respond and order Report #2. Those 100 people mail out 2,000 programs for a total of 200,000. The 0.5% to that is 1,000 orders for Report #3. Those 1,000 send out 2,000 programs each for a total of 2,000,000. The 0.5% response to that is 10,000 orders for Report #4. That's 10,000 $5 bills for you. CASH! Your total income in this example is $50+$500+$5,000+$50,000 for a total of $55,550! And that's just if only 10 people out of the original 2,000 people to whom you sent programs respond and the rest of the folks trash their invitations. Dare to think for a moment what would happen if everyone (or even only half of everyone) sent out 100,000 programs instead of just 2,000. Believe me, many people will send out more than just the 2,000 shown in this example. METHOD #2: PLACING FREE ADS ON THE INTERNET. Advertising on the internet is very, very inexpensive, and there are hundreds of free places to advertise. Let's say you decide to start small just to see how well it works. Assume your goal is to get only 10 people to participate on your first level. Placing a lot of free ads on the Internet will easily get a larger response. Also assume that everyone else in your organization gets only 10 downline member. Look how this small number accumulates to achieve the staggering results below: 1st level - your first 10 send you $5...............$50 2nd level - 10 members from those 10 ($5x10).......$500 3rd level - 10 members from those 100 ($5x100)...$5,000 4th level - 10 members from those 1000 ($5x1000)$50,000 Total sent to you, $55,500 Amazing, isn't it? Remember friends, this assumes that the people who participate only recruit 10 people each. Think for a moment what would happen if they got 20 people to participate. Most people get 100's of participants and many will continue to work this program, sending out programs with your name on them for years. Think about it! People are going to get emails about this plan from you or somebody else and many will work this plan. The question is, don't you want your name to be on the emails they will send out? Follow these instructions: 1) Always provide same day service on all orders. 2) Always send $5 cash (U.S.Currency) for each report. Checks are not acceptable. Wrap the cash in two sheets of paper. On one of those sheets, write the name and number of the report you are ordering, your email address and your name and postal address. REPORT # 1 "The Insider's Guide to Advertising for Free on the Internet" Order this report from: LUIS PINEDA 13747 WATERHOUSE WAY ORLANDO, FL 32828 REPORT # 2 "The Insider's Guide to Sending Bulk Email on the Internet" Order this report from: CUTRIS MCREE 13865A BAUGHMAN ROAD SILVERHILL, AL 36576 REPORT # 3 "The Secrets to Multilevel Marketing on the Internet" Order this report from: ERSKINE ROBBINS 4730 PARK ROAD - SUITE C CHARLOTTE, NC 28209 REPORT # 4 "How to Become a Millionaire Utilizing the Power of Multilevel Marketing and the Internet" Order this report from: NDRA AUDERSAO 2801 OCEAN PARK BLVD., # 170 SANTA MONICA, CA 90406 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TIPS FOR SUCCESS ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Treat this as your business. Be prompt, professional and follow the directions accurately. Send for the four reports immediately so you will have them when the orders start coming in because: When you receive a $5 order, you must send out the required product/report. This must be done in order for it to be a legitimate and legal business and your recipients need the reports to send out their letters (with your name on them!) Always provide same-day service on the orders you receive. Be patient and persistent with this program. If you follow the instructions exactly, results will follow. Remember this. Every time your name is moved down on the list, it is placed in front of a different report. You can keep track of your progress by watching which report people are ordering from you. To generate more income, simply send out another batch of emails or continue placing ads and start the whole process again. There is no limit to the income you will generate from this business. Consider these features of this fantastic business: 1) No face-to-face selling, no meetings, no inventory, no telephone calls (to make or receive), no big cost to start, nothing to learn, no skills needed. 2) No equipment to buy. You already have a computer and an Internet connection. You already have everything you need to fill orders. 3) You are selling a product which does not cost anything to produce or ship. Emailing the reports is free! 4) All your customers pay you in cash! ACT NOW! Take your first step toward financial independence. Order the reports and follow the program outlined above. Success will be your reward. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Here's some information that may help you with your ness. If you need help with starting a business, registering a business name, learning how income tax is handled, etc., contact your local office of the Small Business Administration (a Federal Agency) at 1-800- 827-5722 for free help and answers to questions. Also, the Internal Revenue Service offers free help via telephone and free seminars about business tax requirements. Your earnings are highly dependent on your activities and advertising. The information contained on this site and in the reports constitutes no guarantees stated nor implied. In the event that it is determined that this site or report constitutes a guarantee of any kind, that guarantee is now void. The earnings amounts listed on this site and in the report are estimates only and dependent entirely on the individuals. If you have any question about the legality of this program, contact the Office of Associate Director for Marketing Practices, Federal Trade Commission, Bureau of Consumer Protection, Washington, D C. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From list@netscape.com Wed Aug 23 12:38:57 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA18049 for ; Wed, 23 Aug 2000 12:38:56 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7NGVaY18898; Wed, 23 Aug 2000 09:31:36 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7NGbKg20033; Wed, 23 Aug 2000 09:37:20 -0700 (PDT) Resent-Date: Wed, 23 Aug 2000 09:37:20 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Kurt D. Zeilenga" Date: Wed, 23 Aug 2000 17:35:39 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: LDAP Extension Style Guide, re interaction between controls Reply-to: d.w.chadwick@salford.ac.uk CC: ietf-ldapext@netscape.com Message-ID: <39A40B6B.4527.17FC6E9@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000818094244.00b30620@router.boolean.net> References: <399D741D.5313.C65737@localhost> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"IlJzCB.A.v4E._2_o5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Date sent: Fri, 18 Aug 2000 10:01:00 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" > The issue is that the extension, as defined by two recognized > controls, is NOT understood because the semantics of the > combination is not defined. > Sorry, missed that point > LDAP allows for a non-critical control to be ignored. This is the bit that, on its own, would come into conflict with X.500 if the aforementioned defect is accepted. > This > implies that if a request contains two controls, one critical > and one not, is submitted to a server which recognizes BOTH > controls but does not understand the semantics of the > combination, the server must either: > a) return unavailableCriticalExtension > b) perform the operation as if the non-critical extension > was not specified. > > I prefer option a) as it follows from the similar case: I do too, as this is the same as if both were critical, and would be in the spirit of the X.500 defect correction. > a request contains two controls, a recognized critical > control and a unrecognized non-critical control. In this case I would suggest option b) is followed, as the server only understands one of the controls, and is obeying it. But what about the case of two controls, both non-critical, both understood in isolation, but the combination not. What does the server do now - selectively ignore one of them? If so which one? I think the PKIX and X.509 guys may also hit the above problems, given that certificate extensions are object identifiers and can be defined by anyone. I will raise this topic on the PKIX list. David P.S. The problem does not (or should not) arise for DAP as all the extensions (controls) are specified together as a whole in one document, and each extension is identified by an integer. Interactions should be fully spelt out in the base standard, and private extensions cannot be defined (legally). > > However, I can see the value offered in option b. > > >I would like LDAP to > >either take the same stance for compatibility purposes, or to > >persuade the X.500 , PKIX and other groups that the proposed > >solution is wrong and that the server should be free to choose what > >to do. Either way, I think that compatibility should be the target. > > I concur! > > *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Wed Aug 23 13:03:54 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA18884 for ; Wed, 23 Aug 2000 13:03:53 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7NGqee27547; Wed, 23 Aug 2000 09:52:40 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7NH2NI04203; Wed, 23 Aug 2000 10:02:23 -0700 (PDT) Resent-Date: Wed, 23 Aug 2000 10:02:23 -0700 (PDT) Message-Id: <4.3.2.7.0.20000823094810.00afbcd0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 23 Aug 2000 09:58:11 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: LDAP Extension Style Guide, re interaction between controls Cc: ietf-ldapext@netscape.com In-Reply-To: <39A40B6B.4527.17FC6E9@localhost> References: <4.3.2.7.0.20000818094244.00b30620@router.boolean.net> <399D741D.5313.C65737@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"kGt9jB.A.ZBB.eOAp5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:35 PM 8/23/00 +0100, David Chadwick wrote: >But what about the case of two controls, both non-critical, both >understood in isolation, but the combination not. What does the >server do now - selectively ignore one of them? If so which one? I suggest ignore both under the general principle of least astonishment. I suggest: An operation may be extended by one or more controls. If the combination of controls is unrecognized, undefined, or the server is otherwise unwilling to perform the operation as extended by the sequence of provided controls, if any of the controls are marked critical, the server SHALL return unavailableCriticalExtension, otherwise the server SHALL perform the operation as if no controls were provided. That is, combined control semantics is all or nothing. From list@netscape.com Thu Aug 24 19:19:44 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA25251 for ; Thu, 24 Aug 2000 19:19:43 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7ONCTY29657; Thu, 24 Aug 2000 16:12:30 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7ONIEE20092; Thu, 24 Aug 2000 16:18:14 -0700 (PDT) Resent-Date: Thu, 24 Aug 2000 16:18:14 -0700 (PDT) Date: Thu, 24 Aug 2000 16:18:05 -0700 (PDT) Message-Id: <200008242318.e7ONI5528970@ywing.netscape.com> From: investment2000@home.com To: Friend@netscape.com Subject: 300% return on investment Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"27FyuD.A.H5E.10ap5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Hello, here is a program that pays 3-1 in just 3 months, plus 50% payments for referrals! I have confirmation that many are getting paid, so this looks like a good one to get into, even if it's just for the referral payouts! Minimum to invest is $100. If you are interested in signing up please send me an e-mail to signmeup@angelfire.com and you MUST type " OK " in the subject matter or you will not get a response. Thank you. From list@netscape.com Thu Aug 24 21:22:13 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA26197 for ; Thu, 24 Aug 2000 21:22:13 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7P1BYY20416; Thu, 24 Aug 2000 18:11:35 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7P1HIo12254; Thu, 24 Aug 2000 18:17:18 -0700 (PDT) Resent-Date: Thu, 24 Aug 2000 18:17:18 -0700 (PDT) Date: Thu, 24 Aug 2000 18:17:11 -0700 (PDT) Message-Id: <200008250117.e7P1H5520816@ywing.netscape.com> From: "MD" To: tax.&.debt.free@netscape.com Subject: evil IRS & debt collectors X-Reply-To: md@theinbox.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"sAim1C.A.C_C.ckcp5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Is the IRS making your life difficult? Would you like to stop a tax levy or employer withholding? Would you like to restore your good credit history and force those debt collectors to stop contacting you? Would you like to do this without hiring an attorney and without going to court? We've helped thousands of people do just this, and we can help you do the same. WINNING THE COLLECTION GAME I WTCG Basic ToolKit This opportunity is not available on our website. The "Winning The Collection Game (WTCG) Basic ToolKit" includes all three of our top selling books along with one hour of personal consultation time with the author. Volume 1: Winning The Collection Game, 2nd Ed. Don't be a victim of a debt collector or abusive credit reporting practices. Learn how to force banks, debt collectors and credit reporting bureaus to comply with the law and protect your rights and your good name and reputation. Volume 2: Paper Forms And Political Piracy, 3rd Ed. Do you ever wonder if it's possible to comply with the federal tax laws and not file federal income returns? Would you like to stop W-4 withholding with no penalties? This book is for you. You will learn how to legally protect your assets and how to avoid mistakes made by many others that have tried this without the proper information. You can greatly reduce your federal and state income tax liability by following simple procedures that do not include protest letter writing, but sound legal practices accepted in every court system. Volume 3: Due Process Newsletter Compendium The information explained in volumes 1 and 2 are put into practice in this edition. You will see how we have successfully resolved actual cases using the material described in the first two volumes of Winning The Collection Game. You will learn how hundreds of people with little or no legal training have successfully used these methods in resolving their disputes with the IRS, banks and debt collectors. II WTCG Advanced ToolKit If you need case work, don't spend hundreds or thousands of dollars for inexperienced guesswork. We have helped to successfully resolve thousands of IRS, bank and debt collector problems since 1993 and we have the most accurate information available on the market today. The Advanced ToolKit includes: Unlimited Internet access to: > IRS Database (sample forms, letters & legal briefs) > Debt Collector Database (sample forms, letters & legal briefs) > Four hours of consultation via fax email and voice mail > Discussion forum / chat room The sample forms and letters are from actual cases successfully resolved for subscribers over the past several years. You don't have to work alone while defending your rights against abusive systems such as the banking, tax and credit reporting systems. The WTCG Advanced ToolKit enables us to work closely with you every step of the way until your dispute is successfully resolved. There is no guessing, no re-inventing the wheel and no wasted time and energy. We know the procedures, we know what to say and we know how to communicate effectively in the course of helping you get what you want. Win $100 by subscribing to our free newsletter. To subscribe, send an email to: dueprocess-subscribe@topica.com WTCG is a product of: Due Process; 2609 N Forest Ridge BLVD #115; Hernando, Florida 34442; Fax/Voice Mail: 603-761-2673 Email: mail@dueprocess.org; http://dueprocess.org From list@netscape.com Fri Aug 25 19:30:25 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA01681 for ; Fri, 25 Aug 2000 19:30:25 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7PNJ3e27477; Fri, 25 Aug 2000 16:19:04 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7PNSqM04514; Fri, 25 Aug 2000 16:28:52 -0700 (PDT) Resent-Date: Fri, 25 Aug 2000 16:28:52 -0700 (PDT) Message-Id: <200008251421.e7PELpQ03102@xwing.netscape.com> From: Subject: Targeted Lists at the lowest prices! Date: Fri, 25 Aug 2000 05:45:26 Resent-Message-ID: <"AL9_bB.A.7FB.zEwp5"@glacier> To: ietf-ldapext@netscape.com Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com *******New List 8-22-00!!******** The key to success in marketing online is reaching the people who are really interested in your ad! You need targeted e-mails of business opportunity seekers who are ACTIVELY marketing online and trying to expand their business TODAY! These are going to be the lowest prices for deliverable, fresh, opportunity seekers you are going to find anywhere! We strive to clean our lists on a DAILY basis! http://www.homepagez.com/pboxp 10,000 opportunity seekers e-mails for only $15 **New List 8-22-00** 25,000 opportunity seekers e-mails for only $20 50,000 opportunity seekers e-mails for only $35 100,000 opportunity seekers e-mails for only $50 190,000 opportunity seekers e-mails for only $75 - Promotions! **FREE with EVERY order, demo of ListMan e-mail manager software to manage your e-mails list and Credit Helper E-book with Links to Guaranteed Visa's and MC's! **Order 50,000 or more e-mails and receive Express Mail Server to send your e-mails FREE! -Send your e-mails safely bypassing your ISP's mail server! -This is not a demo but a permanent license for the software! **Order 100,000 or more e-mails and receive, CheckMAN software to accept checks online, by phone, or fax, and InfoDisk with 1000+ Money Making Reports. An $80 value yours FREE! _______________________________________________________________ I received your e-mail as someone interested in Internet Business Opportunities. If I received your e-mail in error, or you are no longer interested, please reply with "remove" in the subject. _________________________________________________________________ From list@netscape.com Sat Aug 26 21:52:42 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA27502 for ; Sat, 26 Aug 2000 21:52:41 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7R1f3e22624; Sat, 26 Aug 2000 18:41:03 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7R1orE22834; Sat, 26 Aug 2000 18:50:53 -0700 (PDT) Resent-Date: Sat, 26 Aug 2000 18:50:53 -0700 (PDT) Date: Sat, 26 Aug 2000 18:50:44 -0700 (PDT) Message-Id: <200008270150.e7R1ocf10492@ywing.netscape.com> From: Friends@mymail/com.netscape.com To: You@netscape.com Subject: Is Today The Day? Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"fI2jKD.A.ekF.8PHq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Please read this message, because it is for you....."Seek ye the Lord while He may be found, call upon Him while He is near, Let the wicked forsake his way and the unrighteous man his thoughts, and let him return unto the Lord for He will have mercy, and unto our God for He will abundantly pardon". Don't wait another day, do this today my friend and find forgiveness for all your sins, for how shall we escape if we neglect so great salvation? Get on your knees and ask God the Father, that Jesus Christ may be your Saviour ( for there is no other name under heaven given unto men whereby we MUST be saved ) and turn from your sins and turn your heart to Him today. Don't wait another day. Ask the Lord to give you a heart that loves Him and that wants to serve Him. Ask Him to give you a hatred for your sins, and that He will be your strength in turning from them, and He will do ALL the work in saving your soul. Start reading the Bible....the book of Proverbs, and the Psalms. Read the Gospels of Matthew,Mark, Luke and John. Oh, read it brothers and sisters, for the Lord will bless you when you read His book, and there is so much help and wisdom regarding how we are to live today. Also, we get our strength from God whenever we need it. The word of God say's " If you seek Him with all your heart you will surely find Him." Believe this my friend. You then will find peace with God, and that alone is true peace. We must find salvation today, for the day of the Lord is coming, and it just might be sooner than we realize! There will be eternal joy in heaven forever for the lovers of God and His word, and there will be eternal sorrow and no peace forever , for those who do not . Will you be ready to meet God? I am praying for you my friend that you will be. Amen From list@netscape.com Sun Aug 27 07:42:27 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA08068 for ; Sun, 27 Aug 2000 07:42:22 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7RBV6e16855; Sun, 27 Aug 2000 04:31:06 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7RBeuA25197; Sun, 27 Aug 2000 04:40:56 -0700 (PDT) Resent-Date: Sun, 27 Aug 2000 04:40:56 -0700 (PDT) Message-Id: <200008271140.e7RBeSc00428@xwing.netscape.com> From: " Subject: 30,000 enrolled in less than 10 days! Date: Sun, 27 Aug 2000 09:03:10 Resent-Message-ID: <"6j7p7.A.bJG.H5Pq5"@glacier> To: ietf-ldapext@netscape.com Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com 30,000 enrolled in less than 10 days! Pre Launch **This is THE BIG ONE** If you read this very carefully you'll understand this is something that you'll definitely want to join before the rest of the world hears about it and joins before you. This compnay is pre-launching what is destined to be the biggest and best Company in all of History. The very top Network marketers are in. The best software and software programmers are in. This is a combination of dot.com companies, plus many others. You'd better decide fast what you'd like to do! If you act now you'll be in the right place at the right time to position yourself for a great opportunity! I listened to the conference call and I was so impressed I joined up immediately. You'll be blown away!! HISTORY STARTS TODAY!! Would you take a few minutes of your busy schedule to listen to an individual who is earning $187,000 per week? He is Pre-Launching a .com company with a pay plan that will revolutionize the entire Industry! No one was supposed to hear about this until the Pre-Launch, but WE found out about it and wanted YOU to know. How would you like to be with a company that has combined the best of SkyBiz, Freenet, Km.net, BigSmart, Priceline.net, and long distance (International service as well) Listen to one of the conference calls. This will introduce you to the EXPLOSIVE business we are going into. I urge you to get on one or all of these calls and listen to an opportunity that you can finally agree with, and work because you know you will be rewarded exponentially for your efforts. After you listen to the call/calls you WILL want to sign up....and FAST! Then you'll have the opportunity to TELL THE WHOLE WORLD.!!!!! You have right now the opportunity to cash in on something VERY BIG. By being in the right place at the right time, if you ACT FAST, this is your WINDOW OF OPPORTUNITY before the rest or the world gets to know.... AND THEY WILL! YOU CAN BE ONE OF THE TOP MEMBERS!! You can join in at the very beginning and be part of HISTORY IN THE MAKING! Here are some major selling points combining major trends... 1. Low start up cost. Credit card charged AFTER Launch and you have three days to back out if you so desire. (So you can build your downline NOW before you have to spend.) 2. Unique marketing plan : A NEW HYBRID PLAN Straight-line Non Flushing Binary 3x10 Matrix with matching Bonus (When you cycle in the Straight-line you are entered into the Non Flushing Binary and then into the 3x10. 3. They're catching all the major huge trends. Web sites & education, "tools" for Internet marketers, International Long Distance "Flat Rate", and plan to be offering ISP and DSL service. (Free) and Lots more. 4. They're doing everything they can to come up with a formula to pay a matching bonus on the straight-line, as well as the Binary! Think about that. ..................Has it hit you yet? 5. THIS IS GLOBAL ! Get on the call TODAY or YOUR FRIENDS will be calling YOU TOMORROW. Get back to me QUICKLY for further information Click on the link below mailto:prosperity4allnow@lakmail.com?Subject=THE_BIG_ONE Or send a blank e-mail to prosperity4allnow@lakmail.com with "THE BIG ONE" in the subject box. Have a GREAT day, Barb ********************************************************************** Please Note: You're receiving this email because you answered an advert I ran, you sent an ad about your program to one of my e-mail addresses, or you posted a link at my FFA links site. If at anytime you would like to be Removed from my address book, simply click on the link below mailto:remove.me@lakmail.com?Subject=REMOVE or send a blank e-mail to remove.me@lakmail.com with "REMOVE " in the subject line and you'll be removed immediately. Thank you. From list@netscape.com Sun Aug 27 11:54:59 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA09880 for ; Sun, 27 Aug 2000 11:54:54 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7RFlQY27859; Sun, 27 Aug 2000 08:47:26 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7RFrF603583; Sun, 27 Aug 2000 08:53:15 -0700 (PDT) Resent-Date: Sun, 27 Aug 2000 08:53:15 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Kurt D. Zeilenga" , ietf-ldapext@netscape.com Date: Sun, 27 Aug 2000 16:52:19 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: LDAP Extension Style Guide, re interaction between controls Reply-to: d.w.chadwick@salford.ac.uk CC: ietf-ldapext@netscape.com Message-ID: <39A94743.28952.15F1A0AC@localhost> Priority: normal In-reply-to: <4.3.2.7.0.20000823094810.00afbcd0@router.boolean.net> References: <39A40B6B.4527.17FC6E9@localhost> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"iPtLqB.A.t3.qlTq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Date sent: Wed, 23 Aug 2000 09:58:11 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" > I suggest ignore both under the general principle of least > astonishment. I suggest: > > An operation may be extended by one or more controls. If the > combination of controls is unrecognized, undefined, or the > server is otherwise unwilling to perform the operation as > extended by the sequence of provided controls, > if any of the controls are marked critical, the server > SHALL return unavailableCriticalExtension, I dont like this. Under the principle of "the server should do its best to provide a useful service", it should obey the known critical extension and ignore the non-critical ones. This was the suggested text that I sent to PKIX list that unfortunately you did not receive (see below) " A validation engine that does not understand the interaction of a non-critical extension with another extension (critical or non-critical), may ignore the non-critical extension (even if it understands the semantics of the extension in isolation to the others), and accept the certificate (unless factors other than this extension cause it to be rejected). A validation engine that does not understand the interaction of two critical extensions, must reject the certificate (even if it understands the semantics of both extensions in isolation to each other)." > otherwise the server SHALL perform the operation as if > no controls were provided. > > That is, combined control semantics is all or nothing. > > My messages directly to you are getting bounced as follows: This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. The following address(es) failed: Kurt@OpenLDAP.org: SMTP error from remote mailer after MAIL FROM:: host mail.openldap.org [204.152.186.51]: 550 5.0.0 Rejected - see http://www.mail-abuse.org/rss/ This means that you did NOT get a copy about this topic that I sent to the PKIX group. They are now following up on this, and are proposing to produce a table of allowed extensions that can be used in combinations. Is this something that LDAPExt should do? David P.s could the bouncing be due to my newly installed firewall that ignores messages from unknown hosts (I am operating in stealth mode). I noticed that I received an unidentified message immediately after sending an email to you. Are you testing out senders to see if they exist? *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Sun Aug 27 13:33:16 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA10645 for ; Sun, 27 Aug 2000 13:33:02 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7RHPKY02244; Sun, 27 Aug 2000 10:25:20 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7RHV8g19568; Sun, 27 Aug 2000 10:31:08 -0700 (PDT) Resent-Date: Sun, 27 Aug 2000 10:31:08 -0700 (PDT) Message-Id: <4.3.2.7.0.20000827100816.00b1d100@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Sun, 27 Aug 2000 10:30:02 -0700 To: d.w.chadwick@salford.ac.uk From: "Kurt D. Zeilenga" Subject: Re: LDAP Extension Style Guide, re interaction between controls Cc: ietf-ldapext@netscape.com In-Reply-To: <39A94743.28952.15F1A0AC@localhost> References: <4.3.2.7.0.20000823094810.00afbcd0@router.boolean.net> <39A40B6B.4527.17FC6E9@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"wgdcSC.A.exE.cBVq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 04:52 PM 8/27/00 +0100, David Chadwick wrote: >Date sent: Wed, 23 Aug 2000 09:58:11 -0700 >To: d.w.chadwick@salford.ac.uk >From: "Kurt D. Zeilenga" > >> I suggest ignore both under the general principle of least >> astonishment. I suggest: >> >> An operation may be extended by one or more controls. If the >> combination of controls is unrecognized, undefined, or the >> server is otherwise unwilling to perform the operation as >> extended by the sequence of provided controls, >> if any of the controls are marked critical, the server >> SHALL return unavailableCriticalExtension, > >I dont like this. Under the principle of "the server should do its best >to provide a useful service", it should obey the known critical >extension and ignore the non-critical ones. I go back and forth on this issue. I guess if the client wants to ensure that the server fully recognizes the combination of controls, the client should mark each the controls as critical. So, basically, the server must ignore non-critical extensions which don't make sense in the context of the operation. If the operation has recognized and supported controls A, B and C. Where A is critical, B and C are non-critical, the semantics of A+B and A+C are defined, and the semantics of A+B+C are not defined (or explicitly defined as invalid), then the server may perform either: A, A+B, or A+C. >This was the suggested text that I sent to PKIX list that >unfortunately you did not receive (see below) I do recall seeing that (directly, I'm not subscribed to the PKIX list)... I'll chat with you off line (if our MTAs will cooperate). Kurt From list@netscape.com Sun Aug 27 22:03:01 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA14774 for ; Sun, 27 Aug 2000 22:02:59 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7S1spY27135; Sun, 27 Aug 2000 18:54:51 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7S20eE23015; Sun, 27 Aug 2000 19:00:40 -0700 (PDT) Resent-Date: Sun, 27 Aug 2000 19:00:40 -0700 (PDT) Reply-To: From: "Steven Legg" To: , Subject: Matching Rules for Constructed Syntaxes Date: Mon, 28 Aug 2000 12:58:31 +1000 Message-ID: <000301c0109b$d9bf6bb0$b05508cb@osmium.adacel.com.au> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2377.0 X-Mimeole: Produced By Microsoft MimeOLE V4.72.2120.0 Importance: Normal Resent-Message-ID: <"9t3myD.A.VnF.Gfcq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit LDAPers and PKIXers, The LDAP ACI model and PKIX both have to deal with attribute syntaxes that are complex constructed types. Matching rules for those syntaxes have recently been discussion topics so it seems like a good time to describe some ideas for matching rules that have been kicking around in the back of my head for a while. First I'll address the question of an equality matching rule for ldapACI and then go on to describe some generic matching rules for complex syntaxes that would be useful to both LDAP access control and PKIX, among other things. One approach for ldapACI is the X.500 solution where a DirectoryString label has been made a component of the ACI and the directoryStringFirstComponentMatch matching rule is used to decide the equality of two ACIs. This satisfies some basic requirements to be able to match ACIs but the equality of two ACI values doesn't really say anything about them at the semantic level. Back when I was with Telstra we defined a catch-all equality matching rule that could do a comparison of two attribute values of any arbitrary ASN.1 syntax. This rule, or something like it, could be used as the equality matching rule for the ldapACI attribute. The X.500 style definition is simply this: asn1Match MATCHING-RULE ::= { ID { 1 3 32 0 1 13 0 } } Since no assertion syntax is specified, the syntax is inherited at run time from the attribute type to which the matching rule is applied. So the assertion syntax would be LdapACI if asn1Match is used to match against the ldapACI attribute. I have a slight problem defining this matching rule in LDAP terms because the string encoding for MatchingRuleDescription doesn't allow an absent SYNTAX. This matching rule evaluates to true if and only if the attribute value and the assertion value have the same components with the same values. If the syntax is a SEQUENCE or SET type then each component in the assertion value must match each component of the attribute value. Optional components must be either both present or both absent. If the syntax is a SEQUENCE OF then the attribute value and the assertion value must have the same instances (members) in the same order. If the syntax is a SET OF then the attribute value and the assertion value must have the same instances (and the same duplicates), but order doesn't matter. If the syntax is a CHOICE then the attribute value and the assertion value must use the same CHOICE alternative. The rules apply recursively to nested constructed types. The primitive types like OBJECT IDENTIFIER, BOOLEAN, INTEGER, etc match as one would expect. The string types are just matched character for character. The asn1Match rule would be fine as the equality matching rule for the ldapACI attribute and would have much the same effect as was intended by the original use of caseIgnoreMatch and DirectoryString syntax. However, where there is a complex constructed syntax there is usually a desire to selectively match only some of the components, e.g. to match ACIs with a specific subject, or with specific rights. What usually happens is that a bunch of new matching rules are defined to cover the anticipated needs. Just look at X.509 and PKI for examples. Rather than going down this path I would like to suggest a generic way of selectively matching components in arbitrary syntaxes. The following matching rule is something I've often thought about implementing but haven't as yet. componentMatch MATCHING-RULE ::= { SYNTAX ComponentAssertion ID } ComponentAssertion ::= SEQUENCE { component [0] PrintableString, rule [1] MATCHING-RULE.&id, -- MatchingRuleId value [2] MATCHING-RULE.&AssertionType -- AssertionValue } The idea here is that the component field identifies which part of a value of a constructed syntax is to be matched, the rule indicates how that part is to be matched, and the value is what that part is matched against. X.680, section 12 already describes a way to reference the components of an arbitrary ASN.1 type but it hasn't got a BER encoding so I'm just stuffing it as text into a PrintableString. Basically the component referencing string is a series of "." separated componentIds where a componentId is usually the ASN.1 identifier for the component. The componentId can also be a positive number to reference a particular instance in a SET OF or SEQUENCE OF, "*" to reference all the instances in a SET OF or SEQUENCE OF, or the number zero, which is a conceptual count of the number of instances. An example should make this clearer. First, here is the ASN.1 definition of the syntax of the objectClasses schema attribute (not to be confused with the objectClass attribute), so that I have something reasonably familiar to base examples on. ObjectClassDescription ::= SEQUENCE { identifier OBJECT-CLASS.&id, name SET OF DirectoryString { ub-schema } OPTIONAL, description DirectoryString { ub-schema } OPTIONAL, obsolete BOOLEAN DEFAULT FALSE, information [0] ObjectClassInformation } ObjectClassInformation ::= SEQUENCE { subclassOf SET OF OBJECT-CLASS.&id OPTIONAL, kind ObjectClassKind DEFAULT structural, mandatories [3] SET OF ATTRIBUTE.&id OPTIONAL, optionals [4] SET OF ATTRIBUTE.&id OPTIONAL } OBJECT-CLASS.&id and ATTRIBUTE.&id are equivalent to the OBJECT IDENTIFIER ASN.1 type. So for a given value with the ObjectClassDescription syntax (i.e. a value of the objectClasses attribute) ... "identifier" references the OID of the object class description, "description" references the text description of the object class, "name.*" references all of the object class's names, "name.0" gives the number of names defined for the object class, "name.1" references the first of those names, "information" references the whole ObjectClassInformation nested SEQUENCE, "information.kind" references the ObjectClassKind in the nested SEQUENCE, "information.mandatories.*" references all the mandatory attribute types for the object class ... and so on. Each referenced component has a specific ASN.1 type. For example, "identifier" is of type OBJECT IDENTIFIER and "name.1" is of type DirectoryString. The type of "information.mandatories" is SET OF OBJECT IDENTIFIER but the corresponding type for "information.mandatories.*" I'll take to be OBJECT IDENTIFIER (the instance type of the SET OF). The ".0" instance counts I'll assume to be INTEGER. Now that I've got a way to reference components I need to say how they are matched. I could specify a new bunch of rules for different kinds of matching on different ASN.1 types but it is convenient to just use existing attribute matching rules. Each matching rule has a notional set of attribute syntaxes (typically one), defined as ASN.1 types, to which it may be applied. When embedded in a ComponentAssertion these matching rules apply to the same ASN.1 types, only in this context the types aren't necessarily attribute syntaxes. So the "identifier" component of an objectClasses attribute value could be matched with objectIdentifierMatch. The "name.*" component (instances) could be matched with caseIgnoreMatch, caseExactMatch, caseIgnoreOrderingMatch, or even caseIgnoreSubstringMatch. Any component, regardless of its ASN.1 type could be matched by the asn1Match rule. The assertion value that goes with the chosen matching rule will be of the syntax required by that rule. Because constructed types can have CHOICEs and OPTIONAL fields it is possible that the referenced component does not exist in an attribute value. In these cases the matching rule would evaluate to false. Now for a few example filters using the componentMatch matching rule. I don't want to go to the trouble of defining complete ABNF right now so I'm using a string encoding that is a mix of ASN.1 value notation, which I trust is verbose enough to be sufficiently clear, and LDAP string encodings for well known ASN.1 types. I've put in spacing and line breaks only as an aid to readability. The example search filters are mostly single extensible match filter items, though of course there is no reason why componentMatch can't be used in more complicated search filters. To find the object class definition for the object class called foobar use the filter: (objectClasses:componentMatch:={ component "names.*", rule caseIgnoreMatch, value "foobar" }) An object class definition can have multiple names and the above filter will match an objectClasses value if any one of the names is "foobar". To find all obsolete object classes use: (objectClasses:componentMatch:={ component "obsolete", rule booleanMatch, value TRUE }) To find all subclasses of "person" use: (objectClasses:componentMatch:={ component "information.subclassOf.*", rule objectIdentifierMatch, value person }) To find the object class definition for 2.5.6.18 use: (objectClasses:componentMatch:={ component "identifier", rule objectIdentifierMatch, value 2.5.6.18 }) A match on the "identifier" component of objectClasses values is equivalent to the objectIdentifierFirstComponentMatch matching rule applied to this attribute type. The componentMatch matching rule subsumes the objectIdentifierFirstComponentMatch, integerFirstComponentMatch and directoryStringFirstComponentMatch matching rules. To find all values of the ldapACI attribute that have my DN in the subject field I could use (refer to draft-ietf-ldapext-acl-model-06.txt for the ASN.1 type definition of the ldapACI syntax): (ldapACI:componentMatch:={ component "subject.dn", rule distinguishedNameMatch, value "cn=Steven Legg, o=Adacel, c=au" }) The subject component is a CHOICE of which "dn" is one of several possibilities. Those values with a different choice won't match the filter item. To find all ACIs that apply to the commonName attribute: (ldapACI:componentMatch:= { component "attr.attributes.*", rule objectIdentifierMatch, value cn }) The componentMatch rule allows any one component in a constructed value to be matched but there are often good reasons to want to match more than one component in the same constructed value. This is particularly true for the matching of certificates and related constructs in PKIX. Most, if not all, of the desired functionality could be achieved with the following matching rule whose assertion syntax is a filter of component matches. componentFilterMatch MATCHING-RULE ::= { SYNTAX ComponentFilter ID } ComponentFilter ::= CHOICE { item [0] ComponentAssertion, and [1] SEQUENCE OF ComponentFilter, or [2] SEQUENCE OF ComponentFilter, not [3] ComponentFilter } The component filter is evaluated over a single attribute value rather than a whole entry. Note that a matching rule like this gives us the same capability for matching components of a constructed syntax that a regular search filter would give us had the constructed syntax been exploded out as a set of attributes of simpler syntaxes in a subordinate entry. The observant will notice that componentMatch is a special case of componentFilterMatch so we don't really need componentMatch. Here are some example search filters using the componentFilterMatch matching rule. To find all object class definitions that reference the commonName AND surname attributes as mandatory attributes use: (objectClasses:componentFilterMatch:=and:{ item:{ component "information.mandatories.*", rule objectIdentifierMatch, value cn }, item:{ component "information.mandatories.*", rule objectIdentifierMatch, value sn } }) To find all object class definitions that reference the commonName AND surname attributes as either mandatory OR optional attributes: (objectClasses:componentFilterMatch:=and:{ or:{ item:{ component "information.mandatories.*", rule objectIdentifierMatch, value cn }, item:{ component "information.optionals.*", rule objectIdentifierMatch, value cn } }, or:{ item:{ component "information.mandatories.*", rule objectIdentifierMatch, value sn }, item:{ component "information.optionals.*", rule objectIdentifierMatch, value sn } } }) The next example is inspired by Sean Mullan. Sean Mullan wrote: > What happens if you want to define a matching rule to only retrieve certs > that contain a specific basic constraints value AND a certain issuer name? In > this case, you would define 2 matching rules and specify both of them in > the valuesReturnFilter control. But then you would get all certs with the > requested issuer name and any basic constraints value and all certs with > any issuer name and the requested basic constraints value. That's not > what you wanted. I think we may want to enhance the valuesReturnFilter > control (through a flag, perhaps) to allow the user to apply all of the > elements of the filter to each attribute value. Let's discuss this more > offline, if you like. Here is a component filter match on a specific value of basic constraints AND a certain issuer name: (userCertificate:componentFilterMatch:=and:{ item:{ component "extensions.*", rule asn1Match, value { extnId 2.5.29.19, extnValue '3003020102'H } }, item:{ component "issuer.rdnSequence", rule distinguishedNameMatch, value "cn=CA, o=Adacel, c=au" } }) 2.5.29.19 is the OID for the basicConstraints extension. Unfortunately the extension value (extnValue) is defined to be a DER encoding wrapped in an OCTET STRING (ugh!). In the above example it was particularly convenient to use the asn1Match rule to match the whole extension, i.e. { extnId 2.5.29.19, extnValue '3003020102'H }, in one hit, instead of writing a nested "and" filter of each of the components of the extension. The asn1Match rule is essentially a short hand for an "and" component filter specifying every component. I can imagine situations where it would be useful to test not only if a *specific* value of a particular component is present but whether *any* value of a particular component is present. Hence the following matching rule: presentMatch MATCHING-RULE ::= { SYNTAX NULL ID } When used on an attribute in a extensible match filter item it behaves like the present case of a regular search filter. In a ComponentAssertion it evaluates to true if and only if the referenced component exists. To find object class definitions that have descriptions use: (objectClasses:componentMatch:= { component "description", rule presentMatch, NULL }) To find object class definitions that don't have descriptions use: (objectClasses:componentFilterMatch:= not:item:{ component "description", rule presentMatch, NULL }) To find the object class definitions that are not marked as obsolete (the "obsolete" component is absent, or is present and set to FALSE): (objectClasses:componentFilterMatch:=or:{ not:item:{ component "obsolete", rule presentMatch, NULL }, item:{ component "obsolete", rule booleanMatch, FALSE } }) The DistinguishedName and RelativeDistinguishedName ASN.1 types are also constructed types so the component matching rules could be applied to them. For convenience, here is the stripped down ASN.1 type for DNs. DistinguishedName ::= SEQUENCE OF RelativeDistinguishedName RelativeDistinguishedName ::= SET OF AttributeTypeAndValue AttributeTypeAndValue ::= SEQUENCE { type AttributeType, -- OBJECT IDENTIFIER value AttributeValue -- ANY } To find all seeAlso attributes (DN syntax) containing the RDN "o=Adacel" use: (seeAlso:componentMatch:= { component "*", rule componentFilterMatch, value and:{ item:{ component "0", rule integerMatch, value 1 }, item:{ component "*", rule asn1Match, value { type o, value "Adacel" } } } }) This assertion tests each RDN (referenced by the first "*") to see if it has exactly one AVA (the count is given by "0") with attribute type organization and value "Adacel". Since RDNs appear all over the place it makes sense to define a matching rule that can make RDN matching more concise. rdnMatch MATCHING-RULE ::= { SYNTAX RelativeDistinguishedName ID } The rdnMatch rule evaluates to true if the component value and assertion value are the same RDN. Now the above example to find all seeAlso attributes containing the RDN "o=Adacel" becomes: (seeAlso:componentMatch:={ component "*", rule rdnMatch, value "o=Adacel" }) The rdnMatch can be useful wherever DNs appear. To find all values of the ldapACI attribute that have "o=Adacel" somewhere in the DN in the subject field use: (ldapACI:componentMatch:= { component "subject.dn.*", rule rdnMatch, value "o=Adacel" }) To find all seeAlso values with "o=Adacel, c=au" as a "suffix" (noting that the string encoding of LDAPDN puts the RDNs in reverse order) use: (seeAlso:componentFilterMatch:=and:{ item:{ component "1", rule rdnMatch, value "c=au" }, item:{ component "2", rule rdnMatch, value "o=Adacel" } }) There's a case for being able to specify a match against the last component, or second last component, etc, but we'd have to invent a syntax for that. Okay, so what do people think ? The value of componentFilterMatch and friends is that they implicitly define a bunch of useful matching rule semantics for a new attribute syntax the moment the ASN.1 type is written down, and are automatically extended if the ASN.1 type is later extended. We might never need to define another matching rule for a constructed syntax. What would be missing though is a definition of the string encoding, so having a predictable way of generating the ABNF from the ASN.1 type would be particularly valuable. For the examples above I didn't formally define the string encoding for ComponentAssertion and ComponentFilter, themselves constructed types, but I was consistently following a set of rules. Those rules would be my preferred solution for algorithmically derived string encodings for new attribute and assertion syntaxes. Since the componentFilterMatch is generally useful, and can be applied to any ASN.1 type, it makes more sense for me to write it up as a separate Internet draft under the auspices of LDAPEXT, rather than incorporating its definition into either the LDAP ACL model or the PKIX LDAP schema. So is there support out there for me to go ahead and write this up as an ID ? Will LDAP access control and PKIX make use of it ? Regards, Steven From list@netscape.com Mon Aug 28 01:43:42 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA22169 for ; Mon, 28 Aug 2000 01:43:37 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7S5Vke09678; Sun, 27 Aug 2000 22:31:46 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7S5fcY04586; Sun, 27 Aug 2000 22:41:38 -0700 (PDT) Resent-Date: Sun, 27 Aug 2000 22:41:38 -0700 (PDT) Reply-To: From: "Steven Legg" To: , Subject: RE: Matching Rules for Constructed Syntaxes Date: Mon, 28 Aug 2000 16:40:19 +1000 Message-ID: <000801c010ba$d64288e0$b05508cb@osmium.adacel.com.au> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2377.0 X-Mimeole: Produced By Microsoft MimeOLE V4.72.2120.0 Importance: Normal In-reply-to: <000301c0109b$d9bf6bb0$b05508cb@osmium.adacel.com.au> Resent-Message-ID: <"L06ejD.A.YHB.Rufq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Oops! I misread the ASN.1 for LdapACI. This: > (ldapACI:componentMatch:={ > component "subject.dn", > rule distinguishedNameMatch, > value "cn=Steven Legg, o=Adacel, c=au" }) should read: (ldapACI:componentMatch:={ component "subject.subject.dn", rule distinguishedNameMatch, value "cn=Steven Legg, o=Adacel, c=au" }) and this: > (ldapACI:componentMatch:= > { component "subject.dn.*", rule rdnMatch, value "o=Adacel" }) should read: (ldapACI:componentMatch:={ component "subject.subject.dn.*", rule rdnMatch, value "o=Adacel" }) Cheers, Steven From list@netscape.com Mon Aug 28 08:56:36 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA06824 for ; Mon, 28 Aug 2000 08:56:24 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7SCmZY07983; Mon, 28 Aug 2000 05:48:35 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7SCsOY02237; Mon, 28 Aug 2000 05:54:24 -0700 (PDT) Resent-Date: Mon, 28 Aug 2000 05:54:24 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Mon, 28 Aug 2000 06:53:52 -0600 From: "Haripriya S" To: Subject: Updated version of EntrySelection draft Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=_653DFBFE.52335FA5" Resent-Message-ID: <"Vm2Dl.A.ri._Dmq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_653DFBFE.52335FA5 Content-Type: multipart/alternative; boundary="=_653DFBFE.51305CA6" --=_653DFBFE.51305CA6 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, Iam attaching an updated version of the "EntrySelection control for LDAP = operations on multiple entries", which I had submitted earlier. This draft = incorporates the suggestions given by Kurt on this list earlier. Please go = through this and give me your inputs. Thanks and Regards, Haripriya --=_653DFBFE.51305CA6 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Hi,
 
Iam attaching an updated version of the "EntrySelection= =20 control for LDAP operations on multiple entries", which I had = submitted=20 earlier. This draft incorporates the suggestions given by Kurt on this = list=20 earlier. Please go through this and give me your inputs.
 
Thanks and Regards,
Haripriya
 
--=_653DFBFE.51305CA6-- --=_653DFBFE.52335FA5 Content-Type: text/plain Content-Disposition: attachment; filename="draft-haripriya-ldapext-entryselect-01.txt" INTERNET-DRAFT Haripriya S., Novell 25 August 2000 Expiry: February 25 2001 EntrySelection control for LDAP modify and delete operations on multiple entries 1. Status of this Memo This document is an Internet-Draft and is in full conformance with all provisions of Section 10 of RFC2026. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet- Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet Draft expires February 25, 2001. 2. Abstract This document defines an LDAPv3 control that can select multiple entries in a subtree of a container entry for modification or deletion. This control extends the scope of the LDAPv3 modify and delete operations as defined in [RFC 2251]. This control is useful for modifying or deleting multiple entries on the basis of a single selection criterion. This may be useful for maintenance of an LDAP directory having a large number of objects. Example of Usage - This control can be used by client applications who have the need to modify or delete a large number of entries in an LDAP directory based on a selection criterion. One example of such a usage is when two departments in an organization merge. In this case the "department" name or number given to a number of employees need to change, and all the employees in a given department are to be assigned the new "department". Here the EntrySelection control can be used to select the entries to be modified based on the "department" value, and the modify operation can change the "department" value for all the selected entries to the given value. The EntrySelection control is useful when a large number of Haripriya S. INTERNET-DRAFT 1 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 entries have to be modified or deleted, because what can be achieved in 1 LDAP client operation with the EntrySelection control will take a minimum of 1 + n LDAP operations (1 search, n modifies) otherwise. This will save a lot of time and bandwidth, and hence very useful in situations where the clients are connected over high latency links. Also low-end clients which cannot handle a large number of objects, can use this feature. This also prevents cache pollution or false caching, where a large number of search results are returned only to be immediately modified or deleted, thus invalidating cached information for those results. 3. RFC Key Words The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. 4. EntrySelection request control A multi-entry modify or delete operation can be thought of as a combination of a search operation followed by modify or delete operation. The search operation in this case is used to select the entries for modification or deletion. For the purpose of selecting entries, an entry selection control is added. This control will be similar to a search request. The ControlType is , the Criticality field may be TRUE or FALSE, and the controlValue is EntrySelection which is encoded as per the following syntax: EntrySelection ::= SEQUENCE { entryscope [0] scope OPTIONAL, -- Scope for the operation derefAliases [1] aliases OPTIONAL, -- aliases timeLimit [2] INTEGER (0 .. maxInt) OPTIONAL, -- for the selection -- optimeLimit [3] INTEGER (0 .. maxInt) OPTIONAL, -- for the operation -- continueOnError [4] BOOLEAN OPTIONAL DEFAULT FALSE, -- for the operation -- filter [5] Filter OPTIONAL } scope :: = ENUMERATED { baseObject (0), singleLevel (1), wholeSubtree (2) } aliases ::= ENUMERATED { neverDerefAliases (0), derefInSearching (1), Haripriya S. INTERNET-DRAFT 2 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 derefFindingBaseObj (2), derefAlways (3) } The following definitions are the same as the corresponding definitions in [RFC 2251] 4.5.1. They are just repeated here for completeness. Filter ::= CHOICE { and [0] SET of Filter, or [1] SET of Filter, not [2] Filter, equalityMatch [3] AttributeValueAssertion, subStrings [4] SubstringFilter, greaterOrEqual [5] AttributeValueAssertion, lessOrEqual [6] AttributeValueAssertion, present [7] AttributeDescription, approxMatch [8] AttributeValueAssertion, extensibleMatch [9] MatchingRuleAssertion } SubstringFilter ::= SEQUENCE { type AttributeDescription, -- at least one must be present substrings SEQUENCE OF CHOICE { initial [0] LDAPString, any [1] LDAPString, final [2] LDAPString } } MatchingRuleAssertion ::= SEQUENCE { matchingRule [1] MatchingRuleOd OPTIONAL, type [2] AttributeDescription OPTIONAL, matchValue [3] AssertionValue, dnAttributes [4] BOOLEAN DEFAULT FALSE } entryScope: This field specifies the scope of the operation. It can be baseObject, oneLevel, or wholeSubTree. The field is OPTIONAL, and if not sent, the default scope of the operation will be baseObject, which is similar to the scope of a normal modify or delete operation. derefAliases: This field specified whether to dereference alias while selecting. This is also an OPTIONAL field, and if absent, the default is neverDerefAliases. filter: This field is similar to a search filter. It is OPTIONAL, and if absent, the control selects all entries, that are allowed by the scope and the other fields in the control. timeLimit: This OPTIONAL INTEGER field specifies the time limit Haripriya S. INTERNET-DRAFT 3 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 in seconds, for the entry selection for the base operation. If the field is absent or 0, then no limit is assumed. optimeLimit: Similar to timeLimit but for the entire operation. Again, if this field is absent or 0, then no limit is assumed. continueOnError: This OPTIONAL BOOLEAN field is used by the client to indicate to the server whether to continue or stop the whole operation, if it encounters an error while performing the operation on one of the entries selected. The default value is FALSE and the corresponding behaviour is to stop the operation on error. The control is used to select the entries that are to be modified or deleted as per the LDAP request message that this attaches to. This control SHOULD only be used with an LDAP Modify or Delete request message. The server SHOULD ignore the control if used with any other message unless the criticality field is set to TRUE. If the criticality field is set to TRUE, then the server SHOULD return the resultCode unavailableCriticalExtension ( RFC 2251 Section 4.1.12 ). The server MUST list this control as recognized in the supportedControl attribute in the root DSE. 5. Response messages The server upon request of an LDAP modify or delete request with an EntrySelection control in it can return the following responses: EntrySelectionPartialResponse, any other LDAP extended response (could be due to another control in the opertion requiring an extended response), or an LDAPResponse (ModifyResponse or DeleteResponse). For a non-abandoned operation, the server MUST return zero or more EntrySelectionPartialResponse, zero or more of any other extended response, and one ModifyResponse or DeleteResponse message. The ModifyResponse or DeleteResponse SHOULD be returned at the end after all other extended responses have been returned for the operation. The ModifyResponse or DeleteResponse will return the overall result for the whole operation on multiple entries, which MAY also contain some error codes for specifying the result of the entry selection operation, in addition to the error codes usually returned by a Modify or Delete operation. These error codes include timeLimitExceeded(2), adminLimitExceeded(11), undefinedAttributeType(17) and inappropriateMatching(18). 5.1 EntrySelectionPartialResponse extended partial response The EntrySelectionPartialResponse is sent to return partial results, as the operation progresses. This is used to inform the client about the result of the operations on each selected entry and for returning search continuation results. The EntrySelectionPartialResponse MUST be returned by the server Haripriya S. INTERNET-DRAFT 4 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 in the following cases: a. Immediately after attempting the operation for each entry selected by the EntrySelection filter. b. The server is unable to search an entry in the scope, at or under the baseObject, but can return references to another set of servers for continuing the operation. The EntrySelectionPartialResponse is returned in a generalized "ExtendedPartialResponse". ExtendedPartialResponse is defined in the [extpartresp] document as follows: ExtendedPartialResponse ::= [ APPLICATION 25 ] SEQUENCE { responseName [0] LDAPOID OPTIONAL, response [1] OCTET STRING OPTIONAL } Note: The current version of the [ExtPartResp] draft does not define a generalized ExtendedPartialResponse. Work is going on to generalize it. This draft assumes a generalized ExtendedPartialResponse for its purpose. A specific ExtendedPartialResponse for EntrySelection is defined from generalized ExtendedPartialResponse as follows: The EntrySelectionPartialResponse will be a 'specific' generalized ExtendedPartialResponse with the 'responseName' of and the value of 'response' field is an octet string which is the BER encoding of the following: EntrySelectionPartialResult ::= CHOICE { entry [0] EntryResult, searchContinuation [1] SEQUENCE OF LDAPURL } EntryResult ::= SEQUENCE { resultcode resultCode matchedDN LDAPDN } resultCode is defined as in RFC 2251 [RFC2251] 4.1.10 for LDAPResult. 6. Semantics of the EntrySelection and EntrySelectionResponse Controls The EntrySelection control, will behave like an LDAP search operation at the server. The server MUST select all the entries that are selected as per the EntrySelection control, before starting the modify or delete operation on any of the matched entries. If deleting entries, the server MUST make sure that all the child entries in the selected list are processed before their parents are processed for deletion. The server SHOULD NOT process the entries in such a way that it would orphan the entries. Haripriya S. INTERNET-DRAFT 5 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 If the condition of the EntryCriterion evaluates to TRUE with respect to a given DN (either the base DN if the scope is base, or any of the subtree/children DNs if the subtree or onelevel scope is set), then the LDAP server should do the modify or the delete operation that has been specified in the delete or modify request. If the condition evaluates to UNKNOWN or FALSE, then the operation MUST NOT be attempted on the corresponding DN. If the 'timelimit' in the EntrySelection control is exceeded before the search is over, only the entries selected will be considered for modification/deletion, and the ModifyResponse or DeleteResponse will return a resultCode of 'timeLimitExceeded'. If the 'optimeLimit' in the control is exceeded before the whole operation (the selection plus the modifies/deletes) is complete, then operation will be stopped, and a ModifyResponse or DeleteResponse is returned, with resultCode being 'timeLimitExceeded'. The EntrySelectionPartialResponses that may have been received by the client in the latter case will indicate to the client that the timeout did not happen during the selection, but during the operation. 6.1 Atomicity of the operation and effect of abandon: The modify or delete operation on each selected entry MUST be done atomically, but the server NEED NOT ensure that the modify/delete operation across all selected entries are done as one atomic operation. The atomicity of the entire operation will be the same as if a client first did a search, and then based on the entries selected, gave a series of modify or delete requests. If a client makes changes to some of the entries that are selected by the EntrySelection filter, while the operation is in progress, the combined result of the operations is undefined. The server MUST send extended partial responses for each selected entry on which the modify/delete opeation was attempted. If the client sends an abandon request in the middle of processing, the server MUST stop the processing immediately, including the modify/delete on the current entry it was processing. The server MUST NOT send a ModifyResponse/DeleteResponse, or an EntrySelectionPartialResponse for the current entry in this case. The client will be able to find the entries for which the operation has been tried, along with the the result of the operation, by looking at the EntrySelectionPartialResponses that have been received from the server. The client MUST NOT expect that the modify/delete operation on all the selected entries will be done as one atomic operation. 7. Errors and Return Codes If modify or delete operations succeed on all the objects where one or more objects are selected, and no timeouts occured, then the LDAP operation MUST return a result code of success. Haripriya S. INTERNET-DRAFT 6 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 7.1 Deciding on the return values The server MUST decide what values and error codes to return based on the decision function below, and on the return values of LDAP modify and delete operations. The decision logic to be followed at the server end is discussed as a pseudo-code below, and each tagged branch (eg. // 7.1.3 ) represents a sub-section describing a specific decision that must be followed by the server. LDAPopnresult: Result Code for the LDAP operation ( modify or delete). This is the value that will be sent in the LDAPResult of LDAPResponse. This can be any of the resultcodes specified for Modify, Delete and Search operations in [rescodes]. LDAPopnDN: The DN returned in the LDAPResponse. selectResult: The result code for the select operation due to EntrySelection control. entryResult: The result code associated with each entry for which the operation was attempted to be sent in EntrySelectionPartialResponses. entryDN: The DN of the entry on which the modify or delete was attempted. entry: The entry field in the EntrySelectionPartialResponse The following conditions are possible: if (baseDN is not available) if (there are no referrals) // 7.1.1 LDAPopnresult = noSuchObject LDAPopnDN = BaseDN send LDAPResponse else (if there are referrals) // 7.1.2 LDAPopnresult = referral referrals field is filled with referral, send LDAPResponse endif else /* baseDN exists */ while (there are continuation references found during searching) do Send the continuation references in 'searchContinuation' // 7.1.3 in EntrySelectionPartialResponse packets, 'entry' field not sent. done if (search was successful or resulted in timeLimitExceeded or adminLimitExceeded) // 7.1.4 LDAPopnresult = success/timeLimitExceeded/adminLimitExceeded if (no entries are returned by the search) // 7.1.5 send LDAPResponse and return else /* Entries are returned by search */ while (there are entries remaining to be processed) // 7.1.6 Haripriya S. INTERNET-DRAFT 7 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 process entry named by entryDN lasterror = error code returned for operation on entry if (adminLimit OR optimeLimit exceeded while in modify/delete) // 7.1.7 LDAPopnresult = adminLimitExceeded/timeLimitExceeded toquit = yes else if (lasterror != success AND continueOnError is not set) // 7.1.8 toquit = yes endif Fill up an EntrySelectionPartialResponse with entry.resultCode = lasterror entry.matchedDN = entryDN Send EntrySelectionPartialResponse, with entry field, searchContinuation field not sent if (toquit == yes) // 7.1.9 break; endif /* some entries remaining */ endif /* Some entries returned by search */ else /* Search was not successful */ // 7.1.11 LDAPopnresult = selectResult LDAPopnDN = baseDN endif if (LDAPopnresult == success) { // 7.1.12 LDAPopnresult = lasterror if (lasterror required matchedDN to be returned // 7.1.13 as per RFC 2251 4.1.10) LDAPopnDN = entryDN endif endif Send ModifyResponse or DeleteResponse with LDAPResult containing LDAPopnDN and LDAPopnResult endif The user can decide to stop on error in modify/delete or can set the continueOnError to 1, so that if even an error occurs during modify/delete on an entry, the whole operation will still continue. Otherwise when the first error occurs, the server MUST stop processing the modify or delete for further entries. If the number of modifies or deletes possible in a single LDAP operation is exceeded, then the server SHOULD return adminLimitExceeded(11). In this case objects should have been processed till the error was reached, and the situation is defined in 7.1.7. 7.2 Behavior of server with respect to Criticality The default behavior in the absence of the Criticality field is as if the Criticality field is set to false for the control. If the control is not recognized, and the Criticality is set to TRUE, then the server MUST return an unavailableCriticalExtension result code. If the control is not recognized and the criticality Haripriya S. INTERNET-DRAFT 8 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 is set to False, then the server should try to perform the operation specified on the BaseDN alone and ignore the control. In case unavailablecriticalextension is returned, then the server should not send any of the EntrySelectionPartialResponses. 8. Making the operation idempotent with respect to retries Multi-entry deletions even if done partially (only on a subset of all the entries that were selected) will result in idempotent retries, because the deleted entries will not be returned by the EntrySelection filter the next time. But in an entry modify, an add or a delete value, and or an add or delete attribute could cause a AttributeOrValueAlreadyExists or noSuchAttribute, if the operation has already been done. Example: Let ou=hr,o=org be an organizationalUnit in company org. Let cn=jsmith,ou=hr,o=org and cn=mwhite,ou=hr,o=org be two objects of class "inetOrgPerson" under this ou. A multivalued attribute "telephoneNumber" and a singlevalued attribute "preferredLanguage" are optional attributes for "inetOrgPerson". Let the client request, a modify operation on "ou=hr,o=org", with an EntrySelection control with the LDAP search filter[RFC 2254] "objectclass=inetOrgPerson", be as follows (in [ldif] format): dn: ou=hr,o=org changetype: modify add: telephoneNumber telephoneNumber: 801-861-2222 - delete: preferredLanguage If the first time around both entries "jsmith" and "mwhite" had "preferredLanguage", and the operation failed on "mwhite" but succeeded on "jsmith", then when the retry is done the operation on "jsmith" would fail due to two reasons: i) The value "801-861-2222" for "telephoneNumber" already exists - AttributeOrValueAlreadyExists ii) The attribute "preferredLanguage" is already deleted - noSuchAttribute The approach taken here is to let the client's filter take care of such conditions creating noSuchAttribute (modify or delete a attribute that does not exist), or AttributeOrValueAlreadyExists (adding an already existing value to a multivalued attribute or adding a single valued attribute which already exists). The argument behind this approach is that such conditions could even happen the first time around (without a retry), if the entry was already in that state. In case the client takes care of these two error conditions, the client's filter in the EntrySelection should be the equivalent of Haripriya S. INTERNET-DRAFT 9 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 '(&(objectclass=inetOrgPerson)(!(telephoneNumber="801-861-2222")) (preferredLanguage=*))' so that it can avoid changing the same attributes twice and thus getting an error. NOTE: There is no [ldif] format available for specifying the information in an EntrySelection control yet. These examples are not working examples but just to illustrate a situation. 6. Interaction with the TreeDelete control [treedelete] If a TreeDelete control is set for a delete operation, then its semantics is the same as if an EntrySelection control is sent with the search filter being "objectclass=*", and the scope being "sub". This similarity is with respect to the functionality of the operation, but error handling and behavior with respect to referrals etc. may vary. Also, the semantics for partial processing of the operation for the EntrySelection control are different from the TreeDelete control. If both the TreeDelete control and the EntrySelection control are present on a given LDAP delete request, then the server SHOULD return an LDAP resultcode of unwillingToPerform(53). 7. Security Considerations There are no direct security related issues discussed in this document. But this control could indirectly cause a server to deny service to legitimate clients because of the server being loaded by a huge number of modifies and deletes due to this control. Administrative limits MAY be set for a given server to cope with such situations, and if exceeded the server SHOULD return with an adminLimitExceeded error. 8. References [RFC 2251] M. Wahl, T. Howes, S. Kille, "Lightweight Directory Access Protocol (v3)", RFC 2251, December 1997. [RFC 2254] T. Howes, "The String Representation of LDAP Search Filters", RFC 2254, December 1997. [RFC 2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels, "RFC 2119, Harvard University, March 1997. [rescodes] Mike Just, K. Leclair, Jim Sermersheim, Mark smith, "LDAPv3 Result Codes: Definitions and Appropriate Use", Haripriya S. INTERNET-DRAFT 10 EntrySelection control for LDAP modify and delete on multiple entries, August 2000 INTERNET-DRAFT, April 2000, [ldif] Gordon Good, "The LDAP Data Interchange Format (LDIF) - Technical Specification", Netscape Communications, INTERNET-DRAFT, March 2000, [treedelete] M. P. Armijo, "Tree Delete Control", Microsoft Corporation, INTERNET-DRAFT November 12, 1999, ( This document is now expired ) [extpartresp] R. Harrison, "Extended Partial Response Protocol Enhancement to LDAP v3", Novell Inc., INTERNET-DRAFT June 2000, 9. Acknowledgements I sincerely thank Kurt D. Zeilenga who gave such invaluable inputs which changed the whole approach of the document from its initial version. I also thank K. K. Subramaniam, VithalPrasad Gaitonde, Dinakar Sitaram, and Girish Elchuri who reviewed this document and gave their valuable suggestions, and the Novell Standards Board for their review. 10. Address Haripriya S. Novell Inc. 49/1, 49/3, Garvebhavi Palya, 7th Mile, Hosur Road, Bangalore - 560068 India Phone: +91-80-5721858 Extn:2121 Email: sharipriya@novell.com This internet draft expires on 25 February 2001 --=_653DFBFE.52335FA5-- From list@netscape.com Mon Aug 28 10:42:10 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA11078 for ; Mon, 28 Aug 2000 10:42:09 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7SEYCY17317; Mon, 28 Aug 2000 07:34:12 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7SEe2o03491; Mon, 28 Aug 2000 07:40:02 -0700 (PDT) Resent-Date: Mon, 28 Aug 2000 07:40:02 -0700 (PDT) From: "David Chadwick" Organization: University of Salford To: "Steven Legg" Date: Mon, 28 Aug 2000 15:38:48 +0100 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Matching Rules for Constructed Syntaxes Reply-to: d.w.chadwick@salford.ac.uk CC: , Message-ID: <39AA8788.22408.4D82210@localhost> Priority: normal In-reply-to: <000301c0109b$d9bf6bb0$b05508cb@osmium.adacel.com.au> X-mailer: Pegasus Mail for Win32 (v3.12c) Resent-Message-ID: <"sbOojB.A.x1.Annq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Steven Being an editor of a current ID on LDAP schema and matching rules for PKIX, I find your approach very appealing. Having to write potentially dozens of new matching rules for certs and CRLs, that all do very similar things, a generic way of describing this has significant benefits from a documentation point of view. I am certainly prepared to use your work in the PKIX schema ID, if there is general approval for it to procede. I also think the work should be part of LDAPExt as we need this type of matching rule to be core to LDAP implementations, and not application specific. In this way many applications can benefit from the technology provided by a central LDAP server. David *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Mon Aug 28 18:47:47 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA21668 for ; Mon, 28 Aug 2000 18:47:41 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7SMYre28021; Mon, 28 Aug 2000 15:34:53 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7SMilE04865; Mon, 28 Aug 2000 15:44:47 -0700 (PDT) Resent-Date: Mon, 28 Aug 2000 15:44:47 -0700 (PDT) X-MimeOLE: Produced By Microsoft Exchange V6.0.4417.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C01140.F4D88BDC" Subject: draft-ietf-ldapext-locate-04.txt Date: Mon, 28 Aug 2000 15:40:24 -0700 Message-ID: <96BABA22ECEAEA45B53D08D63E1B567801F5098F@DF-SPIKE.platinum.corp.microsoft.com> Thread-Topic: draft-ietf-ldapext-locate-04.txt Thread-Index: AcARQPTQmHMOkko5SJSExHtv+dVdcQ== From: "Michael Armijo" To: Cc: X-OriginalArrivalTime: 28 Aug 2000 22:40:59.0433 (UTC) FILETIME=[0961E190:01C01141] Resent-Message-ID: <"wBhPPD.A.tLB.etuq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a multi-part message in MIME format. ------_=_NextPart_001_01C01140.F4D88BDC Content-Type: multipart/alternative; boundary="----_=_NextPart_002_01C01140.F4D88BDC" ------_=_NextPart_002_01C01140.F4D88BDC Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Please update "Discovering LDAP Services with DNS" with this version draft-ietf-ldapext-locate-04.txt LDAPEXT: Here is the updated version of the Locate draft. =20 Changes: Updated Section 3 based on comments. =20 Updated Security section. Fixed error in Section 4 that incorrectly referred to Section 2 <>=20 ------_=_NextPart_002_01C01140.F4D88BDC Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable draft-ietf-ldapext-locate-04.txt

Please update "Discovering LDAP = Services with DNS" with this version = draft-ietf-ldapext-locate-04.txt

LDAPEXT:  Here is the updated = version of the Locate draft. 

Changes: Updated Section 3 based = on comments. 
Updated Security section.
Fixed error in Section 4 that = incorrectly referred to Section 2

= <<draft-ietf-ldapext-locate-04.txt>>

------_=_NextPart_002_01C01140.F4D88BDC-- ------_=_NextPart_001_01C01140.F4D88BDC Content-Type: text/plain; name="draft-ietf-ldapext-locate-04.txt" Content-Transfer-Encoding: base64 Content-Description: draft-ietf-ldapext-locate-04.txt Content-Disposition: attachment; filename="draft-ietf-ldapext-locate-04.txt" Content-Transfer-Encoding: base64 SU5URVJORVQtRFJBRlQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1p Y2hhZWwgUC4gQXJtaWpvDQo8ZHJhZnQtaWV0Zi1sZGFwZXh0LWxvY2F0ZS0wNC50eHQ+ICAgICAg ICAgICAgICAgICAgICAgICAgICBMZXZvbiBFc2lib3YNCkF1Z3VzdCwgMjAwMCAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUGF1bCBMZWFjaA0KRXhwaXJl czogRmVicnVhcnksIDIwMDEgICAgICAgICAgICAgICAgICAgICAgICAgICAgTWljcm9zb2Z0IENv cnBvcmF0aW9uDQoJCQkJCQkJICAgICBSLkwuIE1vcmdhbg0KCQkJCQkJVW5pdmVyc2l0eSBvZiBX YXNoaW5ndG9uDQoNCiAgICAgICAgICAgICAgICBEaXNjb3ZlcmluZyBMREFQIFNlcnZpY2VzIHdp dGggRE5TDQoNClN0YXR1cyBvZiB0aGlzIE1lbW8NCg0KICAgVGhpcyBkb2N1bWVudCBpcyBhbiBJ bnRlcm5ldC1EcmFmdCBhbmQgaXMgaW4gZnVsbCBjb25mb3JtYW5jZSB3aXRoDQogICBhbGwgcHJv dmlzaW9ucyBvZiBTZWN0aW9uIDEwIG9mIFJGQzIwMjYuDQoNCiAgIEludGVybmV0LURyYWZ0cyBh cmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nDQogICBUYXNr IEZvcmNlIChJRVRGKSwgaXRzIGFyZWFzLCBhbmQgaXRzIHdvcmtpbmcgZ3JvdXBzLiAgTm90ZSB0 aGF0DQogICBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZSB3b3JraW5nIGRvY3VtZW50 cyBhcyBJbnRlcm5ldC0NCiAgIERyYWZ0cy4NCg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFm dCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzDQogICBhbmQgbWF5 IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0 IGFueQ0KICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LSBEcmFm dHMgYXMgcmVmZXJlbmNlDQogICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBh cyAid29yayBpbiBwcm9ncmVzcy4iDQoNCiAgIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQt RHJhZnRzIGNhbiBiZSBhY2Nlc3NlZCBhdA0KICAgaHR0cDovL3d3dy5pZXRmLm9yZy9pZXRmLzFp ZC1hYnN0cmFjdHMudHh0DQoNCiAgIFRoZSBsaXN0IG9mIEludGVybmV0LURyYWZ0IFNoYWRvdyBE aXJlY3RvcmllcyBjYW4gYmUgYWNjZXNzZWQgYXQNCiAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvc2hh ZG93Lmh0bWwuDQoNCiAgIERpc3RyaWJ1dGlvbiBvZiB0aGlzIG1lbW8gaXMgdW5saW1pdGVkLiAg SXQgaXMgZmlsZWQgYXMgPGRyYWZ0LQ0KICAgaWV0Zi1sZGFwZXh0LWxvY2F0ZS0wNC50eHQ+LCBh bmQgZXhwaXJlcyBvbiBGZWJydWFyeSAyNSwgMjAwMS4gIA0KICAgUGxlYXNlIHNlbmQgY29tbWVu dHMgdG8gdGhlIGF1dGhvcnMuDQoNCg0KMS4gQWJzdHJhY3QNCg0KICAgQSBMaWdodHdlaWdodCBE aXJlY3RvcnkgQWNjZXNzIFByb3RvY29sIChMREFQKSByZXF1ZXN0IG11c3QgYmUNCiAgIGRpcmVj dGVkIHRvIGFuIGFwcHJvcHJpYXRlIHNlcnZlciBmb3IgcHJvY2Vzc2luZy4gIFRoaXMgZG9jdW1l bnQNCiAgIHNwZWNpZmllcyBhIG1ldGhvZCBmb3IgZGlzY292ZXJpbmcgc3VjaCBzZXJ2ZXJzIHVz aW5nIGluZm9ybWF0aW9uIGluDQogICB0aGUgRG9tYWluIE5hbWUgU3lzdGVtLiANCg0KDQoyLiBJ bnRyb2R1Y3Rpb24NCg0KICAgVGhlIExEQVB2MyBwcm90b2NvbCBbMV0gaXMgZGVzaWduZWQgdG8g YmUgYSBsaWdodHdlaWdodCBhY2Nlc3MNCiAgIHByb3RvY29sIGZvciBkaXJlY3Rvcnkgc2Vydmlj ZXMgc3VwcG9ydGluZyBYLjUwMCBtb2RlbHMuICBBcyBhDQogICBkaXN0cmlidXRlZCBkaXJlY3Rv cnkgc2VydmljZSwgdGhlIGNvbXBsZXRlIHNldCBvZiBkaXJlY3RvcnkNCiAgIGluZm9ybWF0aW9u IChrbm93biBhcyB0aGUgRGlyZWN0b3J5IEluZm9ybWF0aW9uIEJhc2UpIGlzIHNwcmVhZA0KICAg YWNyb3NzIG1hbnkgZGlmZmVyZW50IHNlcnZlcnMuICBIZW5jZSB0aGVyZSBpcyB0aGUgbmVlZCB0 bw0KICAgZGV0ZXJtaW5lLCB3aGVuIGluaXRpYXRpbmcgb3IgcHJvY2Vzc2luZyBhIHJlcXVlc3Qs IHdoaWNoIHNlcnZlcnMNCiAgIGhvbGQgdGhlIHJlbGV2YW50IGluZm9ybWF0aW9uLiAgSW4gTERB UCwgdGhlIFNlYXJjaCwgTW9kaWZ5LCBBZGQsDQogICBEZWxldGUsIE1vZGlmeUROLCBhbmQgQ29t cGFyZSBvcGVyYXRpb25zIGFsbCBzcGVjaWZ5IGEgRGlzdGluZ3Vpc2hlZA0KICAgTmFtZSAoRE4p IFsyXSBvbiB3aGljaCB0aGUgb3BlcmF0aW9uIGlzIHBlcmZvcm1lZC4gIEEgY2xpZW50LCBvciBh DQogICBzZXJ2ZXIgYWN0aW5nIG9uIGJlaGFsZiBvZiBhIGNsaWVudCwgbXVzdCBiZSBhYmxlIHRv IGRldGVybWluZSB0aGUNCiAgIHNlcnZlcihzKSB0aGF0IGhvbGQgdGhlIG5hbWluZyBjb250ZXh0 IGNvbnRhaW5pbmcgdGhhdCBETiwgc2luY2UNCiAgIHRoYXQgc2VydmVyIChvciBvbmUgb2YgdGhh dCBzZXQgb2Ygc2VydmVycykgbXVzdCByZWNlaXZlIGFuZCBwcm9jZXNzDQogICB0aGUgcmVxdWVz dC4gIFRoaXMgZGV0ZXJtaW5hdGlvbiBwcm9jZXNzIGlzIGNhbGxlZCAic2VydmVyDQogICBsb2Nh dGlvbiIuICBUbyBzdXBwb3J0IGR5bmFtaWMgZGlzdHJpYnV0ZWQgb3BlcmF0aW9uLCB0aGUNCiAg IGluZm9ybWF0aW9uIG5lZWRlZCB0byBzdXBwb3J0IHNlcnZlciBsb2NhdGlvbiBtdXN0IGJlIGF2 YWlsYWJsZSB2aWENCiAgIGxvb2t1cHMgZG9uZSBhdCByZXF1ZXN0IHByb2Nlc3NpbmcgdGltZSwg cmF0aGVyIHRoYW4sIGZvciBleGFtcGxlLA0KICAgYXMgc3RhdGljIGRhdGEgY29uZmlndXJlZCBp bnRvIGVhY2ggY2xpZW50IG9yIHNlcnZlci4NCg0KICAgSXQgaXMgcG9zc2libGUgdG8gbWFpbnRh aW4gdGhlIGluZm9ybWF0aW9uIG5lZWRlZCB0byBzdXBwb3J0IHNlcnZlcg0KICAgbG9jYXRpb24g aW4gdGhlIGRpcmVjdG9yeSBpdHNlbGYsIGFuZCBYLjUwMCBkaXJlY3RvcnkgZGVwbG95bWVudHMN CiAgIHR5cGljYWxseSBkbyBzby4gIEluIHByYWN0aWNlLCBob3dldmVyLCB0aGlzIG9ubHkgcGVy bWl0cyBsb2NhdGlvbg0KICAgb2Ygc2VydmVycyB3aXRoaW4gYSBsaW1pdGVkIFguNTAwLWNvbm5l Y3RlZCBzZXQuICBMREFQLXNwZWNpZmljDQogICBtZXRob2RzIG9mIG1haW50YWluaW5nIHNlcnZl ciBsb2NhdGlvbiBpbmZvcm1hdGlvbiBpbiB0aGUgZGlyZWN0b3J5DQogICBoYXZlIG5vdCB5ZXQg YmVlbiBzdGFuZGFyZGl6ZWQuICBUaGlzIGRvY3VtZW50IGRlZmluZXMgYW4NCiAgIGFsdGVybmF0 aXZlIG1ldGhvZCBvZiBtYW5hZ2luZyBzZXJ2ZXIgbG9jYXRpb24gaW5mb3JtYXRpb24gdXNpbmcg dGhlDQogICBEb21haW4gTmFtZSBTeXN0ZW0uIFRoaXMgbWV0aG9kIHRha2VzIGFkdmFudGFnZSBv ZiB0aGUgZ2xvYmFsDQogICBkZXBsb3ltZW50IG9mIHRoZSBETlMsIGJ5IGFsbG93aW5nIExEQVAg c2VydmVyIGxvY2F0aW9uIGluZm9ybWF0aW9uDQogICBmb3IgYW55IGV4aXN0aW5nIEROUyBkb21h aW4gdG8gYmUgcHVibGlzaGVkIGJ5IGNyZWF0aW5nIHRoZSByZWNvcmRzDQogICBkZXNjcmliZWQg YmVsb3cuICBBIGZ1bGwgZGlzY3Vzc2lvbiBvZiB0aGUgYmVuZWZpdHMgYW5kIGRyYXdiYWNrcyBv Zg0KICAgdGhlIHZhcmlvdXMgZGlyZWN0b3J5IGxvY2F0aW9uIGFuZCBuYW1pbmcgbWV0aG9kcyBp cyBiZXlvbmQgdGhlDQogICBzY29wZSBvZiB0aGlzIGRvY3VtZW50Lg0KDQogICBSRkMgMjI0N1sz XSBkZWZpbmVzIGFuIGFsZ29yaXRobSBmb3IgbWFwcGluZyBETlMgZG9tYWluIG5hbWVzIGludG8N CiAgIEROcy4gIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgaW52ZXJzZSBtYXBwaW5nLCBmcm9t IEROcyB0byBETlMNCiAgIGRvbWFpbiBuYW1lcywgYmFzZWQgb24gdGhlIGNvbnZlbnRpb25zIGlu IFszXSwgZm9yIHVzZSBpbiB0aGlzDQogICBzZXJ2ZXIgbG9jYXRpb24gbWV0aG9kLiAgVGhlIHNl cnZlciBsb2NhdGlvbiBtZXRob2QgZGVzY3JpYmVkIGluDQogICB0aGlzIGRvY3VtZW50IGlzIG9u bHkgZGVmaW5lZCBmb3IgRE5zIHRoYXQgY2FuIGJlIHNvIG1hcHBlZCwgaS5lLiwNCiAgIHRob3Nl IEROcyB0aGF0IGFyZSBiYXNlZCBvbiBkb21haW4gbmFtZXMuICBJbiBwcmFjdGljZSB0aGlzIGlz DQogICByZWFzb25hYmxlIGJlY2F1c2UgbWFueSBvYmplY3RzIG9mIGludGVyZXN0IGFyZSBuYW1l ZCB3aXRoIGRvbWFpbg0KICAgbmFtZXMsIGFuZCB1c2Ugb2YgZG9tYWluLW5hbWUtYmFzZWQgRE5z IGlzIGJlY29taW5nIGNvbW1vbi4NCg0KDQozLiBNYXBwaW5nIERpc3Rpbmd1aXNoZWQgTmFtZXMg aW50byBEb21haW4gTmFtZXMNCg0KICAgVGhpcyBzZWN0aW9uIGRlZmluZXMgYSBtZXRob2Qgb2Yg Y29udmVydGluZyBhIEROIGludG8gYSBETlMgZG9tYWluDQogICBuYW1lIGZvciB1c2UgaW4gdGhl IHNlcnZlciBsb2NhdGlvbiBtZXRob2QgZGVzY3JpYmVkIGJlbG93LiAgU29tZQ0KICAgRE5zIGNh bm5vdCBiZSBjb252ZXJ0ZWQgaW50byBhIGRvbWFpbiBuYW1lLiAgQ29udmVydGVkIEROcyByZXN1 bHQgDQogICBpbiBhIGZ1bGx5IHF1YWxpZmllZCBkb21haW4gbmFtZS4NCg0KICAgVGhlIG91dHB1 dCBkb21haW4gbmFtZSBpcyBpbml0aWFsbHkgZW1wdHkuICBUaGUgRE4gaXMgcHJvY2Vzc2VkIGlu DQogICByaWdodC10by1sZWZ0IG9yZGVyIChpLmUuLCBiZWdpbm5pbmcgd2l0aCB0aGUgZmlyc3Qg UkROIGluIHRoZQ0KICAgc2VxdWVuY2Ugb2YgUkROcykuICBBbiBSRE4gaXMgYWJsZSB0byBiZSBj b252ZXJ0ZWQgaWYgaXQgKDEpDQogICBjb25zaXN0cyBvZiBhIHNpbmdsZSBBdHRyaWJ1dGVUeXBl QW5kVmFsdWU7ICgyKSB0aGUgYXR0cmlidXRlIHR5cGUNCiAgIGlzICJEQyI7IGFuZCAoMykgdGhl IGF0dHJpYnV0ZSB2YWx1ZSBpcyBub24tbnVsbC4gIElmIGl0IGNhbiBiZQ0KICAgY29udmVydGVk LCB0aGUgYXR0cmlidXRlIHZhbHVlIGlzIHVzZWQgYXMgYSBkb21haW4gbmFtZSBjb21wb25lbnQN CiAgIChsYWJlbCkuICBUaGUgZmlyc3Qgc3VjaCB2YWx1ZSBiZWNvbWVzIHRoZSByaWdodG1vc3Qg KGkuZS4sIG1vc3QNCiAgIHNpZ25pZmljYW50KSBkb21haW4gbmFtZSBjb21wb25lbnQsIGFuZCBz dWNjZXNzaXZlIGNvbnZlcnRlZCBSRE4NCiAgIHZhbHVlcyBleHRlbmQgdG8gdGhlIGxlZnQuICBJ ZiBhbiBSRE4gY2Fubm90IGJlIGNvbnZlcnRlZCwNCiAgIHByb2Nlc3Npbmcgc3RvcHMuICBJZiB0 aGUgb3V0cHV0IGRvbWFpbiBuYW1lIGlzIGVtcHR5IHdoZW4NCiAgIHByb2Nlc3Npbmcgc3RvcHMs IHRoZSBETiBjYW5ub3QgYmUgY29udmVydGVkIGludG8gYSBkb21haW4gbmFtZS4NCg0KICAgRm9y IEROOg0KDQogICBjbj1Kb2huIERvZSxvdT1hY2NvdW50aW5nLGRjPWV4YW1wbGUsZGM9bmV0DQoN CiAgIFRoZSBjbGllbnQgd291bGQgY29udmVydCB0aGUgREMgY29tcG9uZW50cyBhcyBkZWZpbmVk IGFib3ZlIGludG8gDQogICBETlMgbmFtZToNCg0KICAgZXhhbXBsZS5uZXQuDQoNCiAgIFRoZSBk ZXRlcm1pbmVkIEROUyBuYW1lIHdpbGwgYmUgc3VibWl0dGVkIGFzIGEgRE5TIHF1ZXJ5IHVzaW5n IHRoZSANCiAgIGFsZ29yaXRobSBkZWZpbmVkIGluIHNlY3Rpb24gNC4NCg0KDQo0LiBMb2NhdGlu ZyBMREFQIHNlcnZlcnMgdGhyb3VnaCBETlMNCg0KICAgTERBUCBzZXJ2ZXIgbG9jYXRpb24gaW5m b3JtYXRpb24gaXMgdG8gYmUgc3RvcmVkIHVzaW5nIEROUyBTZXJ2aWNlDQogICBMb2NhdGlvbiBS ZWNvcmQgKFNSVilbNV0uICBUaGUgZGF0YSBpbiBhIFNSViByZWNvcmQgY29udGFpbnMgdGhlIERO Uw0KICAgbmFtZSBvZiB0aGUgc2VydmVyIHRoYXQgcHJvdmlkZXMgdGhlIExEQVAgc2VydmljZSwg Y29ycmVzcG9uZGluZw0KICAgUG9ydCBudW1iZXIsIGFuZCBwYXJhbWV0ZXJzIHRoYXQgZW5hYmxl IHRoZSBjbGllbnQgdG8gY2hvb3NlIGFuDQogICBhcHByb3ByaWF0ZSBzZXJ2ZXIgZnJvbSBtdWx0 aXBsZSBzZXJ2ZXJzIGFjY29yZGluZyB0byB0aGUgYWxnb3JpdGhtDQogICBkZXNjcmliZWQgaW4g WzVdLiAgVGhlIG5hbWUgb2YgdGhpcyByZWNvcmQgaGFzIHRoZSBmb2xsb3dpbmcgZm9ybWF0Og0K DQogICAgICBfPFNlcnZpY2U+Ll88UHJvdG8+LjxEb21haW4+DQoNCiAgIHdoZXJlIDxTZXJ2aWNl PiBpcyBhbHdheXMgImxkYXAiLCBhbmQgPFByb3RvPiBpcyBhIHByb3RvY29sIHRoYXQgY2FuDQog ICBiZSBlaXRoZXIgInVkcCIgb3IgInRjcCIuICA8RG9tYWluPiBpcyB0aGUgZG9tYWluIG5hbWUg Zm9ybWVkIGJ5DQogICBjb252ZXJ0aW5nIHRoZSBETiBvZiBhIG5hbWluZyBjb250ZXh0IG1hc3Rl cmVkIGJ5IHRoZSBMREFQIFNlcnZlcg0KICAgaW50byBhIGRvbWFpbiBuYW1lIHVzaW5nIHRoZSBh bGdvcml0aG0gaW4gU2VjdGlvbiAzLiAgTm90ZSB0aGF0DQogICAibGRhcCIgaXMgdGhlIHN5bWJv bGljIG5hbWUgZm9yIHRoZSBMREFQIHNlcnZpY2UgaW4gQXNzaWduZWQNCiAgIE51bWJlcnNbNl0s IGFzIHJlcXVpcmVkIGJ5IFs1XS4NCg0KICAgUHJlc2VuY2Ugb2Ygc3VjaCByZWNvcmRzIGVuYWJs ZXMgY2xpZW50cyB0byBmaW5kIHRoZSBMREFQIHNlcnZlcnMNCiAgIHVzaW5nIHN0YW5kYXJkIERO UyBxdWVyeSBbNF0uICBBIGNsaWVudCAob3Igc2VydmVyKSBzZWVraW5nIGFuIExEQVANCiAgIHNl cnZlciBmb3IgYSBwYXJ0aWN1bGFyIEROIGNvbnZlcnRzIHRoYXQgRE4gdG8gYSBkb21haW4gbmFt ZSB1c2luZw0KICAgdGhlIGFsZ29yaXRobSBvZiBTZWN0aW9uIDMsIGRvZXMgYSBTUlYgcmVjb3Jk IHF1ZXJ5IHVzaW5nIHRoZSBETlMNCiAgIG5hbWUgZm9ybWVkIGFzIGRlc2NyaWJlZCBpbiB0aGUg cHJlY2VkaW5nIHBhcmFncmFwaCwgYW5kIGludGVycHJldHMNCiAgIHRoZSByZXNwb25zZSBhcyBk ZXNjcmliZWQgaW4gWzVdIHRvIGRldGVybWluZSBhIGhvc3QgKG9yIGhvc3RzKSB0bw0KICAgY29u dGFjdC4gQXMgYW4gZXhhbXBsZSwgYSBjbGllbnQgdGhhdCBzZWFyY2hlcyBmb3IgYW4gTERBUCBz ZXJ2ZXINCiAgIGZvciB0aGUgRE4gIm91PWZvbyxkYz1leGFtcGxlLGRjPW5ldCIgdGhhdCBzdXBw b3J0cyB0aGUgVENQIHByb3RvY29sDQogICB3aWxsIHN1Ym1pdCBhIEROUyBxdWVyeSBmb3IgYSBz ZXQgb2YgU1JWIHJlY29yZHMgd2l0aCBvd25lciBuYW1lOg0KDQogICAgICBfbGRhcC5fdGNwLmV4 YW1wbGUubmV0Lg0KDQogICBUaGUgY2xpZW50IHdpbGwgcmVjZWl2ZSB0aGUgbGlzdCBvZiBTUlYg cmVjb3JkcyBwdWJsaXNoZWQgaW4gRE5TDQogICB0aGF0IHNhdGlzZnkgdGhlIHJlcXVlc3RlZCBj cml0ZXJpYS4gIFRoZSBmb2xsb3dpbmcgaXMgYW4gZXhhbXBsZSBvZg0KICAgc3VjaCBhIHJlY29y ZDoNCg0KICAgICAgX2xkYXAuX3RjcC5leGFtcGxlLm5ldC4gICBJTgkgIFNSViAgMCAwIDM4OSBw aG9lbml4LmV4YW1wbGUubmV0Lg0KDQogICBUaGUgc2V0IG9mIHJldHVybmVkIHJlY29yZHMgbWF5 IGNvbnRhaW4gbXVsdGlwbGUgcmVjb3JkcyBpbiB0aGUgY2FzZQ0KICAgd2hlcmUgbXVsdGlwbGUg TERBUCBzZXJ2ZXJzIHNlcnZlIHRoZSBzYW1lIGRvbWFpbi4gIElmIHRoZXJlIGFyZSBubyANCiAg IG1hdGNoaW5nIFNSViByZWNvcmRzIGF2YWlsYWJsZSBmb3IgdGhlIGNvbnZlcnRlZCBETiB0aGUg Y2xpZW50IFNIT1VMRCANCiAgIE5PVCBhdHRlbXB0IHRvICd3YWxrIHRoZSB0cmVlJyBieSByZW1v dmluZyB0aGUgbGVhc3Qgc2lnbmlmaWNhbnQgDQogICBwb3J0aW9uIG9mIHRoZSBjb25zdHJ1Y3Rl ZCBmdWxseSBxdWFsaWZpZWQgZG9tYWluIG5hbWUuDQoNCg0KNS4gU2VjdXJpdHkgQ29uc2lkZXJh dGlvbnMNCg0KICAgRE5TIHJlc3BvbnNlcyBjYW4gdHlwaWNhbGx5IGJlIGVhc2lseSBzcG9vZmVk LiAgQ2xpZW50cyB1c2luZyB0aGlzDQogICBsb2NhdGlvbiBtZXRob2QgU0hPVUxEIGVuc3VyZSwg dmlhIHVzZSBvZiBzdHJvbmcgc2VjdXJpdHkNCiAgIG1lY2hhbmlzbXMsIHRoYXQgdGhlIExEQVAg c2VydmVyIHRoZXkgY29udGFjdCBpcyB0aGUgb25lIHRoZXkNCiAgIGludGVuZGVkIHRvIGNvbnRh Y3QuICBTZWUgWzddIGZvciBtb3JlIGluZm9ybWF0aW9uIG9uIHNlY3VyaXR5DQogICB0aHJlYXRz IGFuZCBzZWN1cml0eSBtZWNoYW5pc21zLg0KDQogICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBh IG1ldGhvZCB0aGF0IHVzZXMgRE5TIFNSViByZWNvcmRzIHRvIA0KICAgZGlzY292ZXIgTERBUCBz ZXJ2ZXJzLiAgQWxsIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHJlbGF0ZWQgdG8gRE5TDQogICBT UlYgcmVjb3JkcyBhcmUgaW5oZXJpdGVkIGJ5IHRoaXMgZG9jdW1lbnQuICBTZWUgdGhlIHNlY3Vy aXR5IA0KICAgY29uc2lkZXJhdGlvbnMgc2VjdGlvbiBpbiBbNV0gZm9yIG1vcmUgZGV0YWlscy4N Cg0KDQo2LiBSZWZlcmVuY2VzDQoNCiAgIFsxXSAgV2FobCwgTS4sIEhvd2VzLCBULiBhbmQgUy4g S2lsbGUsICJMaWdodHdlaWdodCBEaXJlY3RvcnkgQWNjZXNzDQogICAgICAgIFByb3RvY29sKHYz KSIsIFJGQyAyMjUxLCBEZWNlbWJlciAxOTk3Lg0KDQogICBbMl0gIFdhaGwsIE0uLCBLaWxsZSwg Uy4gYW5kIFQuIEhvd2VzLCAiTGlnaHR3ZWlnaHQgRGlyZWN0b3J5IEFjY2Vzcw0KICAgICAgICBQ cm90b2NvbCAodjMpOiAgVVRGLTggU3RyaW5nIFJlcHJlc2VudGF0aW9uIG9mIERpc3Rpbmd1aXNo ZWQNCiAgICAgICAgTmFtZXMiLCBSRkMgMjI1MywgRGVjZW1iZXIgMTk5Ny4NCg0KICAgWzNdICBL aWxsZSwgUy4gYW5kIE0uIFdhaGwsICJVc2luZyBEb21haW5zIGluIExEQVAvWC41MDANCiAgICAg ICAgRGlzdGluZ3Vpc2hlZCBOYW1lcyIsIFJGQyAyMjQ3LCBKYW51YXJ5IDE5OTguDQoNCiAgIFs0 XSAgTW9ja2FwZXRyaXMsIFAuLCAiRE9NQUlOIE5BTUVTIC0gQ09OQ0VQVFMgQU5EIEZBQ0lMSVRJ RVMiLCBSRkMNCiAgICAgICAgMTAzNCwgU1REIDEzLCBOb3ZlbWJlciAxOTg3Lg0KDQogICBbNV0g IEd1bGJyYW5kc2VuLCBBLiwgVml4aWUsIFAuIGFuZCBMLiBFc2lib3YsICJBIEROUyBSUiBmb3IN CiAgICAgICAgc3BlY2lmeWluZyB0aGUgbG9jYXRpb24gb2Ygc2VydmljZXMgKEROUyBTUlYpIiwg UkZDIDI3ODIsDQogICAgICAgIEZlYnJ1YXJ5IDIwMDAuDQoNCiAgIFs2XSAgUmV5bm9sZHMsIEou IGFuZCBKLiBQb3N0ZWwsICJBc3NpZ25lZCBOdW1iZXJzIiwgU1REIDIsIFJGQw0KICAgICAgICAx NzAwLCBPY3RvYmVyIDE5OTQuDQoNCiAgIFs3XSAgV2FobCwgTS4sIEFsdmVzdHJhbmQsIEguLCBI b2RnZXMsIEouIGFuZCBNb3JnYW4sIFIuLCANCiAgICAgICAgIkF1dGhlbnRpY2F0aW9uIE1ldGhv ZHMgZm9yIExEQVAiLCBSRkMgMjgyOSwgTWF5IDIwMDAuDQoNCg0KNy4gQXV0aG9ycycgQWRkcmVz c2VzDQoNCiAgIE1pY2hhZWwgUC4gQXJtaWpvDQogICBPbmUgTWljcm9zb2Z0IFdheQ0KICAgUmVk bW9uZCwgV0EgOTgwNTINCiAgIG1pY2hhcm1AbWljcm9zb2Z0LmNvbQ0KDQogICBQYXVsIExlYWNo DQogICBPbmUgTWljcm9zb2Z0IFdheQ0KICAgUmVkbW9uZCwgV0EgOTgwNTINCiAgIHBhdWxsZUBt aWNyb3NvZnQuY29tDQoNCiAgIExldm9uIEVzaWJvdg0KICAgT25lIE1pY3Jvc29mdCBXYXkNCiAg IFJlZG1vbmQsIFdBIDk4MDUyDQogICBsZXZvbmVAbWljcm9zb2Z0LmNvbQ0KDQogICBSTCAiQm9i IiBNb3JnYW4NCiAgIFVuaXZlcnNpdHkgb2YgV2FzaGluZ3Rvbg0KICAgNDU0NSAxNXRoIEF2ZSBO RQ0KICAgU2VhdHRsZSwgV0EgIDk4MTA1DQogICBVUw0KDQogICBQaG9uZTogKzEgMjA2IDIyMSAz MzA3DQogICBFTWFpbDogcmxtb3JnYW5Ad2FzaGluZ3Rvbi5lZHUNCiAgIFVSSTogICBodHRwOi8v c3RhZmYud2FzaGluZ3Rvbi5lZHUvcmxtb3JnYW4vDQoNCiAgIEV4cGlyZXMgRmVicnVhcnkgMjUs IDIwMDENCg0KDQoNCg== ------_=_NextPart_001_01C01140.F4D88BDC-- From list@netscape.com Mon Aug 28 20:02:09 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA22457 for ; Mon, 28 Aug 2000 20:02:08 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7SNose08976; Mon, 28 Aug 2000 16:50:54 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7T00nM03701; Mon, 28 Aug 2000 17:00:49 -0700 (PDT) Resent-Date: Mon, 28 Aug 2000 17:00:49 -0700 (PDT) Date: Mon, 28 Aug 2000 17:00:05 -0700 (PDT) Message-Id: <200008290000.e7T005L29336@xwing.netscape.com> From: investments2000@angelfire.com To: Friend@netscape.com Subject: 3-1 Return on Investment Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"5m-MZC.A.h5.w0vq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Hello, I have a program that pays 3-1 in just 3 months, plus 50% payments for referrals! I have confirmation that many are getting paid ( I did ) , so this looks like a good one to get into, even if it's just for the referral payouts! Minimum to invest is $100. If you are interested in signing up please send me an e-mail to investments2000@angelfire.com and you MUST put " OK " in the subject matter or you will not get a response. Thank you! From list@netscape.com Mon Aug 28 21:55:39 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA24337 for ; Mon, 28 Aug 2000 21:55:38 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7T1iAe21416; Mon, 28 Aug 2000 18:44:10 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7T1s3k15920; Mon, 28 Aug 2000 18:54:03 -0700 (PDT) Resent-Date: Mon, 28 Aug 2000 18:54:03 -0700 (PDT) To: Stockwinner@aol.com From: Subject: Stock Pick of the Week Message-ID: <049b33651011d80CPIMSSMTPU01@email.msn.com> Date: 28 Aug 2000 18:51:41 -0700 Resent-Message-ID: <"9TQZ_C.A.e4D.5exq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com >>> STOCK PICK OF THE WEEK <<< For the week beginning Monday, 08-28-2000 Investment Snapshot - VOPT (US) voIP Telecom http://www.iexchange.com/ii/sl?sidii=5zhn5a29jq.s22av&s=131077&ixname=TAB6&ixvalue=yes&tsym=vopt Target Price: $8.00 Current Price: $2.84 Take a close look at this stock, it's rising fast! The recent news made this stock jump 180% in two days and it is climbing From list@netscape.com Mon Aug 28 23:09:29 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA26004 for ; Mon, 28 Aug 2000 23:09:10 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7T31hY19196; Mon, 28 Aug 2000 20:01:44 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7T37ZQ10762; Mon, 28 Aug 2000 20:07:35 -0700 (PDT) Resent-Date: Mon, 28 Aug 2000 20:07:35 -0700 (PDT) Reply-To: From: "Steven Legg" To: , , Subject: RE: Matching Rules for Constructed Syntaxes Date: Tue, 29 Aug 2000 14:05:41 +1000 Message-ID: <000a01c0116e$65fa9690$b05508cb@osmium.adacel.com.au> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2377.0 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2120.0 Importance: Normal Resent-Message-ID: <"v9dKx.A.4nC.2jyq5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Following some private email discussions with Tom Gindin I've decided on some changes to the way asn1Match, componentMatch and componentFilterMatch compare strings. The asn1Match rule isn't exactly a shorthand way of writing an "and" component filter because it doesn't compare character strings like any of the existing string matching rules. It compares two strings letter for letter, so letter case and all spaces are significant, but it also returns false if two compared DirectoryStrings use different alternatives in the DirectoryString CHOICE (which will only be visible in X.500). I think asn1Match will be more useful if it behaves just like caseIgnoreMatch when it is matching string type components. The assumed behaviour could be some other string matching rule, like caseExactMatch, or a purposely defined new string matching rule. In the absence of any request for an alternative I'll stick with caseIgnoreMatch. This change would make asn1Match somewhat different from its current implementation in the Adacel directory so I propose instead to define a new matching rule, which I'll call allComponentsMatch (unless someone has a better idea), with a new OID. The DirectoryString type is actually a CHOICE type (i.e. a constructed syntax) but I was deliberately treating it like a primitive string type in the examples of componentMatch and componentFilterMatch. Since it is fairly common practice to replace a specific ASN.1 string type that turns out to be too restrictive (e.g. PrintableString) with a CHOICE between the previous string type and a more general string type (e.g. UTF8String) I propose generalizing the special treatment for DirectoryString to any CHOICE of string types. Conceptually a string "component" has an ASN.1 type which is one of the primitive string types (e.g. PrintableString, IA5String) or a CHOICE of those string types (e.g. DirectoryString, PKCS9String). Nested CHOICEs would be permitted also. Regardless of the string type, I only intend that the string encoding of ComponentAssertion will use UTF8. The CHOICE construct would not normally be evident in the string encoding, though it would still be relevant to the BER encoding. To aid in the conversion between string encoding and BER encoding I'll provide some simple rules for deciding which alternative in a CHOICE of strings to assume, and a syntax for overriding the default rules to force a particular alternative. Regards, Steven From list@netscape.com Tue Aug 29 18:43:01 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA02174 for ; Tue, 29 Aug 2000 18:43:00 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7TMZ9Y19404; Tue, 29 Aug 2000 15:35:09 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7TMcCg17314; Tue, 29 Aug 2000 15:38:12 -0700 (PDT) Resent-Date: Tue, 29 Aug 2000 15:38:12 -0700 (PDT) Message-ID: <39AC3AEA.7F2C82D0@software.com> Date: Tue, 29 Aug 2000 15:36:26 -0700 From: sanjay jain Organization: Software.Com X-Mailer: Mozilla 4.5 [en] (WinNT; I) X-Accept-Language: en MIME-Version: 1.0 To: ldapext Subject: syntax problem in filter attribute value .. Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"UKWvZB.A.6NE.StDr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Is it an error when an attribute value in the filter
does not satisfy the syntax rules for the attribute ?
If yes, what is the error code ?  Couldn't find the relevant
info in the 'rescodes' draft..

thanks
sanjay From list@netscape.com Tue Aug 29 18:57:06 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA02333 for ; Tue, 29 Aug 2000 18:57:05 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7TMnZY23064; Tue, 29 Aug 2000 15:49:35 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7TMtQg25951; Tue, 29 Aug 2000 15:55:26 -0700 (PDT) Resent-Date: Tue, 29 Aug 2000 15:55:26 -0700 (PDT) Message-Id: <4.3.2.7.0.20000829155213.00b0ba80@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 29 Aug 2000 15:54:24 -0700 To: sanjay jain From: "Kurt D. Zeilenga" Subject: Re: substring filters using DN attributes ? Cc: ietf-ldapext@netscape.com Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"D5124B.A.gUG.b9Dr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 03:25 PM 8/29/00 -0700, sanjay jain wrote: >> The filter (member=*dc=org1,dc=com) is Undefined. The operation >> may complete successful with no entries being returned. > >Kurt > How would you interpret 5.2.2.1.3 section of the above draft ? I interpret the I-D as having a number of errors as previously noted on this list. In this case, I believe the I-D conflicts with RFC 2251, 4.5.1. Kurt From list@netscape.com Wed Aug 30 06:36:29 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA23281 for ; Wed, 30 Aug 2000 06:36:28 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7UAT8Y01525; Wed, 30 Aug 2000 03:29:08 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7UAYxQ14119; Wed, 30 Aug 2000 03:34:59 -0700 (PDT) Resent-Date: Wed, 30 Aug 2000 03:34:59 -0700 (PDT) Message-ID: <01C01265.E12EA020.era.als@get2net.dk> From: Erik Andersen To: "osidirectory@az05.bull.com" , "Ldapext (E-mail)" Subject: RE: Matching Rules for Constructed Syntaxes Date: Wed, 30 Aug 2000 09:31:17 +0200 Organization: Andersen's L-Service X-Mailer: Microsoft Internet E-mail/MAPI - 8.0.0.4211 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Resent-Message-ID: <"l93wJC.A.McD.SNOr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Hi David and others, I do not see why we should not include it in our first draft for the LDAP alignment works. David, hope to see you in Orlando. Your presence would be very useful. Erik Andersen Mobile: +45 20 97 14 90 E-mail; era.als@get2net.dk Internet: http://www.cenorm.be/isss/Workshop/DIR/Default.htm -----Original Message----- From: David Chadwick [SMTP:d.w.chadwick@salford.ac.uk] Sent: Tuesday, August 29, 2000 5:44 PM To: osidirectory@az05.bull.com Subject: Re: Matching Rules for Constructed Syntaxes Folks I think there is considerable merit in what Steven is suggesting, and I wonder how we can make it part of our X.500 work - maybe as part of the LDAP alignment work? Or should it be a separate topic? David *************************************************** David Chadwick IS Institute, University of Salford, Salford M5 4WT Tel +44 161 295 5351 Fax +44 161 745 8169 Mobile +44 790 167 0359 Email D.W.Chadwick@salford.ac.uk Home Page http://www.salford.ac.uk/its024/chadwick.htm Understanding X.500 http://www.salford.ac.uk/its024/X500.htm X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm Entrust key validation string MLJ9-DU5T-HV8J *************************************************** From list@netscape.com Wed Aug 30 06:55:54 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA23694 for ; Wed, 30 Aug 2000 06:55:53 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7UAeke13590; Wed, 30 Aug 2000 03:40:46 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7UAogs17741; Wed, 30 Aug 2000 03:50:42 -0700 (PDT) Resent-Date: Wed, 30 Aug 2000 03:50:42 -0700 (PDT) Message-Id: <200008301050.GAA23548@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-ldapext@netscape.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-ldapext-locate-04.txt Date: Wed, 30 Aug 2000 06:50:18 -0400 Sender: nsyracus@cnri.reston.va.us Resent-Message-ID: <"WDBBwD.A.7UE.BcOr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the LDAP Extension Working Group of the IETF. Title : Discovering LDAP Services with DNS Author(s) : M. Armijo, L. Esibov, P. Leach, R. Morgan Filename : draft-ietf-ldapext-locate-04.txt Pages : 4 Date : 29-Aug-00 A Lightweight Directory Access Protocol (LDAP) request must be directed to an appropriate server for processing. This document specifies a method for discovering such servers using information in the Domain Name System. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ldapext-locate-04.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ldapext-locate-04.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ldapext-locate-04.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20000829112123.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ldapext-locate-04.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ldapext-locate-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20000829112123.I-D@ietf.org> --OtherAccess-- --NextPart-- From list@netscape.com Wed Aug 30 10:21:46 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA00266 for ; Wed, 30 Aug 2000 10:21:46 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7UEERY19498; Wed, 30 Aug 2000 07:14:27 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7UEKJI08998; Wed, 30 Aug 2000 07:20:19 -0700 (PDT) Resent-Date: Wed, 30 Aug 2000 07:20:19 -0700 (PDT) Message-Id: <4.3.2.7.0.20000830065524.00b48520@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 30 Aug 2000 07:19:34 -0700 To: ietf-ldapext@netscape.com From: "Kurt D. Zeilenga" Subject: Re: I-D ACTION:draft-ietf-ldapext-locate-04.txt In-Reply-To: <200008301050.GAA23548@ietf.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"Gh2UmB.A.UMC.igRr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This draft is pretty much ready to be progressed. However, I believe the removal of CLDAP is incomplete. In section 4, is a protocol that can be either "udp" or "tcp" Per the current I-D, both "udp" or "tcp" are being used to locate LDAP as defined by RFC 2251. However, RFC 2251 defines no mapping for LDAP over UDP. The authors have (appropriately, IMO) stricken all mention of CLDAP so this specification can be progressed to Draft Standard without waiting on CLDAP maturity). As such, I believe '"udp" or' should likewise be stricken or the above phrase changed to: is "tcp". If someone defines a mapping of LDAP over other protocols (such as "rdp"), the specification can be updated. If someone wants to locate CLDAP using DNS SRV records, they should submit an I-D which provides a specification for such. This I-D, in it's current form, does not (and IMO shouldn't). Kurt From list@netscape.com Wed Aug 30 10:58:24 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA01153 for ; Wed, 30 Aug 2000 10:58:23 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7UEkxe02428; Wed, 30 Aug 2000 07:46:59 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7UEuvM23461; Wed, 30 Aug 2000 07:56:57 -0700 (PDT) Resent-Date: Wed, 30 Aug 2000 07:56:57 -0700 (PDT) X-Authentication-Warning: perq.cac.washington.edu: rlmorgan owned process doing -bs Date: Wed, 30 Aug 2000 07:56:56 -0700 (PDT) From: "RL 'Bob' Morgan" X-Sender: rlmorgan@perq.cac.washington.edu Reply-To: "RL 'Bob' Morgan" To: Erik Andersen cc: David Chadwick , "osidirectory@az05.bull.com" , IETF ldapext WG , IETF ldapbis WG Subject: RE: Matching Rules for Constructed Syntaxes In-Reply-To: <01C01265.E12EA020.era.als@get2net.dk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Resent-Message-ID: <"hd_wwC.A.TuF.4CSr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com On Wed, 30 Aug 2000, Erik Andersen wrote: > I do not see why we should not include it in our first draft for the LDAP > alignment works. David, hope to see you in Orlando. Your presence would be > very useful. Can someone from the X.500 community describe and/or offer a pointer to the "LDAP alignment" activity? I think everyone involved with LDAP is pleased that this is happening, but especially in the context of the ldapbis work, one of whose items will be (I think) clarifying LDAP's dependencies on X.500, it does raise questions of who is aligning with whom. Thanks, - RL "Bob" From list@netscape.com Wed Aug 30 12:11:25 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA03393 for ; Wed, 30 Aug 2000 12:11:25 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7UG48Y04738; Wed, 30 Aug 2000 09:04:08 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7UGA0U21568; Wed, 30 Aug 2000 09:10:00 -0700 (PDT) Resent-Date: Wed, 30 Aug 2000 09:10:00 -0700 (PDT) Message-ID: <01C012AD.1F3E6980.era.als@get2net.dk> From: Erik Andersen To: "'RL 'Bob' Morgan'" Cc: "osidirectory@az05.bull.com" , IETF ldapext WG , IETF ldapbis WG Subject: X.500 and LDAP alignment Date: Wed, 30 Aug 2000 18:05:58 +0200 Organization: Andersen's L-Service X-Mailer: Microsoft Internet E-mail/MAPI - 8.0.0.4211 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Resent-Message-ID: <"zUBJw.A.1PF.VHTr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Hi Bob, The new work item on LDAP is very loosely defined (to achieve maximum alignment with LDAP) not to constrain the work. As it is an X.500 work item, we can only specify alignment in one direction. We see several ideas in the LDAP work that could be useful to incorporate. However, we see alignment in both directions as very important. As the LDAP protocol is the most used X.500 access protocol, extension to LDAP to support most of the features below is very desirable. Within X.500, we have or are in the progress of adding a large number of new features. The following are completed and stable items: a) Facilities to control and constrain the service given to different user groups using a concept called search-rules. b) Families of entries, for which David Chadwick has issue an Internet draft. We would be very interested in seeing that progressed. c) Hierarchical groups, which allow hierarchies to be established independent of the DIT hierarchy. d) Mapping-based matching with emphasis on geographical (zonal) matching which allows mapping between the real world as seen by users and the model of the world as it is reflected in a directory. e) Matching rule substitution allowing a great flexibility in matching to ensure more successful searches f) Much user related diagnostic information to be returned to users to guide in making a new, more successful search Of new items, the most important is probably "Related Entries in the Directory". This is a way to access in one request information from different directories having different naming spaces (or disjoint naming spaces). This is a very significant work item that in many respects will align X.500 to the real world instead of trying the reverse. It will also bring X.500 closer to the LDAP philosophy. Personally, I see it as a tool to provide interworking between LDAP and X.500 servers (and possibly other types of directories). Hope that helps. Erik Andersen Mobile: +45 20 97 14 90 E-mail; era.als@get2net.dk Internet: http://www.cenorm.be/isss/Workshop/DIR/Default.htm -----Original Message----- From: RL 'Bob' Morgan [SMTP:rlmorgan@washington.edu] Sent: 30. august 2000 16:57 To: Erik Andersen Cc: David Chadwick; osidirectory@az05.bull.com; IETF ldapext WG; IETF ldapbis WG Subject: RE: Matching Rules for Constructed Syntaxes On Wed, 30 Aug 2000, Erik Andersen wrote: > I do not see why we should not include it in our first draft for the LDAP > alignment works. David, hope to see you in Orlando. Your presence would be > very useful. Can someone from the X.500 community describe and/or offer a pointer to the "LDAP alignment" activity? I think everyone involved with LDAP is pleased that this is happening, but especially in the context of the ldapbis work, one of whose items will be (I think) clarifying LDAP's dependencies on X.500, it does raise questions of who is aligning with whom. Thanks, - RL "Bob" From list@netscape.com Wed Aug 30 13:54:51 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA05873 for ; Wed, 30 Aug 2000 13:54:50 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7UHepe27893; Wed, 30 Aug 2000 10:40:51 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7UHomE26592; Wed, 30 Aug 2000 10:50:48 -0700 (PDT) Resent-Date: Wed, 30 Aug 2000 10:50:48 -0700 (PDT) Date: Tue, 31 Aug 1999 21:08:12 +0300 (EET DST) From: dlxqz@siss.cl Message-Id: <199908311808.VAA10808@saglik.gov.tr> To: ifqje@siss.cl Reply-To: siss.cl@siss.cl Subject: New to the Web! Resent-Message-ID: <"vElvnB.A.OfG.2lUr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com New to the Web! You Do Not have to be on the service to receive commissions. Start earing money by referring people to our Flat Rate Long Distance company. mailto:telepro@england.com?subject=callme Receive your own personalized web site at no charge! Cant do it by yourself?? Have our professional staff close sales for you! All inquires are answered by phone. This is an easy way to start making money on the web. For more information on How you can sign up for Free ! Please send your name and Phone # and a good time to contact you. mailto:telepro@england.com?subject=callme ========================================================= Remove mailto:the_real_deal@england.com?subject=Remove From list@netscape.com Wed Aug 30 19:47:53 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA11095 for ; Wed, 30 Aug 2000 19:47:52 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7UNZTe24826; Wed, 30 Aug 2000 16:35:30 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7UNjSM01146; Wed, 30 Aug 2000 16:45:28 -0700 (PDT) Resent-Date: Wed, 30 Aug 2000 16:45:28 -0700 (PDT) Date: Wed, 30 Aug 2000 19:44:08 -0400 From: "Heimberg, Jim" Subject: RE: Matching Rules for Constructed Syntaxes To: "'steven.legg@adacel.com.au'" , ietf-ldapext@netscape.com, ietf-pkix@imc.org, osidirectory@az05.bull.com Message-id: <2575327B6755D211A0E100805F9FF9540508062D@ndhmex02.ndhm.gsc.gte.com> MIME-version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-type: text/plain; charset="ISO-8859-1" Resent-Message-ID: <"ItD9J.A.TR.WyZr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Please change my address to jimhei@cablespeed.com. Thanks. -----Original Message----- From: Steven Legg [mailto:steven.legg@adacel.com.au] Sent: Tuesday, August 29, 2000 12:06 AM To: ietf-ldapext@netscape.com; ietf-pkix@imc.org; osidirectory@az05.bull.com Subject: RE: Matching Rules for Constructed Syntaxes Following some private email discussions with Tom Gindin I've decided on some changes to the way asn1Match, componentMatch and componentFilterMatch compare strings. The asn1Match rule isn't exactly a shorthand way of writing an "and" component filter because it doesn't compare character strings like any of the existing string matching rules. It compares two strings letter for letter, so letter case and all spaces are significant, but it also returns false if two compared DirectoryStrings use different alternatives in the DirectoryString CHOICE (which will only be visible in X.500). I think asn1Match will be more useful if it behaves just like caseIgnoreMatch when it is matching string type components. The assumed behaviour could be some other string matching rule, like caseExactMatch, or a purposely defined new string matching rule. In the absence of any request for an alternative I'll stick with caseIgnoreMatch. This change would make asn1Match somewhat different from its current implementation in the Adacel directory so I propose instead to define a new matching rule, which I'll call allComponentsMatch (unless someone has a better idea), with a new OID. The DirectoryString type is actually a CHOICE type (i.e. a constructed syntax) but I was deliberately treating it like a primitive string type in the examples of componentMatch and componentFilterMatch. Since it is fairly common practice to replace a specific ASN.1 string type that turns out to be too restrictive (e.g. PrintableString) with a CHOICE between the previous string type and a more general string type (e.g. UTF8String) I propose generalizing the special treatment for DirectoryString to any CHOICE of string types. Conceptually a string "component" has an ASN.1 type which is one of the primitive string types (e.g. PrintableString, IA5String) or a CHOICE of those string types (e.g. DirectoryString, PKCS9String). Nested CHOICEs would be permitted also. Regardless of the string type, I only intend that the string encoding of ComponentAssertion will use UTF8. The CHOICE construct would not normally be evident in the string encoding, though it would still be relevant to the BER encoding. To aid in the conversion between string encoding and BER encoding I'll provide some simple rules for deciding which alternative in a CHOICE of strings to assume, and a syntax for overriding the default rules to force a particular alternative. Regards, Steven From list@netscape.com Thu Aug 31 04:58:03 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA01952 for ; Thu, 31 Aug 2000 04:58:02 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7V8kZe09683; Thu, 31 Aug 2000 01:46:35 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7V8uYE09407; Thu, 31 Aug 2000 01:56:34 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 01:56:34 -0700 (PDT) Date: Thu, 31 Aug 2000 18:43:53 +1000 Message-ID: From: adhzz@sff.cl To: njdhm@sff.cl Reply-To: sff.cl@ywing.netscape.com Subject: Learn the Secrets to Online Success Resent-Message-ID: <"AXGyd.A.tSC.B3hr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Learn the Secrets to Online Success From the folks who are making a living on the web. Get the tools,support and training! $195.00 worth of Free software and Reports for responding. For your Free Reports mailto:ultimate2@n2business.com?subject=$195b ========================================================= Remove mailto:this_is_good@n2business.com?subject=Remove From list@netscape.com Thu Aug 31 13:09:21 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA09822 for ; Thu, 31 Aug 2000 13:09:20 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VGvqe23162; Thu, 31 Aug 2000 09:57:52 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VH6do26928; Thu, 31 Aug 2000 10:06:39 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 10:06:39 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Thu, 31 Aug 2000 11:06:03 -0600 From: "Steve Sonntag" To: , , "Jim Sermersheim" Subject: Minor Typos in java-api-11 Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_FDA56792.66076B87" Resent-Message-ID: <"2T-i1D.A.JkG.dCpr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_FDA56792.66076B87 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Section 4.7.11 LDAPConstraints.setTimeLimit LDAP Constraints applies to all operations, not just search operations. The first sentence should probably be changed from: Sets the maximum number of milliseconds to wait for any operation under these search constraints. To something like: Sets the maximum number of milliseconds the client waits for any = operation under these constraints. Section 4.7.5 LDAPConstraints.getReferrals Change nor to or Specifies whether nor not ... -Steve --=_FDA56792.66076B87 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable

 
Section 4.7.11 LDAPConstraints.setTimeLimit
 
LDAP Constraints applies to all operations, not just = search=20 operations.
 
The first sentence should probably be changed=20 from:
 
     Sets the maximum number of milliseconds to = wait=20 for any operation
     under these search=20 constraints.
To something like:
 
     Sets the maximum number of milliseconds = the=20 client waits for any operation
     under these=20 constraints.
 
Section 4.7.5 LDAPConstraints.getReferrals
 
    Change nor to or
 
    Specifies whether nor not ...
 
-Steve
 
 
 
 
--=_FDA56792.66076B87-- From list@netscape.com Thu Aug 31 13:23:56 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA10005 for ; Thu, 31 Aug 2000 13:23:56 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VHGTY17766; Thu, 31 Aug 2000 10:16:30 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VHMNE07229; Thu, 31 Aug 2000 10:22:23 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 10:22:23 -0700 (PDT) Message-Id: <4.3.2.7.0.20000831101805.00b64b60@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 31 Aug 2000 10:21:26 -0700 To: From: "Kurt D. Zeilenga" Subject: Async API (Was: Minor Typos in java-api-11) Cc: , "Jim Sermersheim" In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"AmPxcD.A.fwB.ORpr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com BTW, I thought someone was going to request removal the old Java Async I-D from the repository... From list@netscape.com Thu Aug 31 13:57:42 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA10692 for ; Thu, 31 Aug 2000 13:57:36 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VHjLe02313; Thu, 31 Aug 2000 10:45:21 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VHtK629559; Thu, 31 Aug 2000 10:55:20 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 10:55:20 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.3.1 Date: Thu, 31 Aug 2000 11:54:39 -0600 From: "Steve Sonntag" To: , , "Jim Sermersheim" Cc: "Alan Clark" , "Steven Merrill" Subject: LDAPSetoption java-api-11 Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=_99C103FD.5F3E52A1" Resent-Message-ID: <"Klz0LB.A.WNH.Gwpr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_99C103FD.5F3E52A1 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Section 4.39.13 LDAPV2.setOption This method of the LDAPV2 interface seems a little strange. 1) It probably does not belong under the interface LDAPV2, but instead under LDAPConnection. This would allow it to support setting client & server controls which it cannot do under LDAPV2. This functionality is currently missing in the method. =20 Setting STRING_FORMAT is also an LDAPV3 setting, as UTF-8 is only meaningful under LDAPV3. 2) STRING_FORMAT is set only by the setOption method. There should be a way to set or get STRING_FORMAT with LDAPSearchConstraints methods. 3) setOption operates only on the LDAPSearchConstraints object that is associated with an LDAPConnection object. Yet there may also be an LDAPConstraints object associated with the LDAPConnection object. It may or may not be the same as the LDAPSearchConstraints object. Should there be a setOption kind of method that operates on the LDAPConstraints object associated with a connection? 4) All functionality of SetOption can be performed by code that references the LDAPSearchConstraints object of a connection - i.e. LDAPConnection.getSearchConstraints.method(). This method is superfluous and problematic.=20 IMO, it is not needed and should be eliminated from the API. -Steve --=_99C103FD.5F3E52A1 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Section 4.39.13 LDAPV2.setOption
 
This method of the LDAPV2 interface seems a little strange.
=
 
 1) It probably does not belong under the interface=20 LDAPV2,
    but instead under LDAPConnection. This would = allow=20 it
    to support setting client & server controls = which=20 it
    cannot do under LDAPV2.  This functionality = is=20 currently
    missing in the=20 method.
    
    Setting = STRING_FORMAT=20 is also an LDAPV3 setting, as UTF-8
    is only meaningful under LDAPV3.
 
 2) STRING_FORMAT is set only by the setOption=20 method.
    There should be a way to set or get = STRING_FORMAT=20 with
    LDAPSearchConstraints methods.
 
 3) setOption operates only on the LDAPSearchConstraints=20 object
    that is associated with an LDAPConnection=20 object.  Yet
    there may also be an LDAPConstraint= s=20 object associated
    with the LDAPConnection object.&nbs= p; It=20 may or may not be
    the same as the LDAPSearchConstrain= ts=20 object.  Should
    there be a setOption kind of = method=20 that operates on
    the LDAPConstraints object = associated=20 with a connection?
 
 4) All functionality of SetOption can be performed by=20 code
    that references the LDAPSearchConstraints = object of=20 a
    connection - i.e.=20 LDAPConnection.getSearchConstraints.method().
 
This method is superfluous and problematic.
IMO, it is not needed = and=20 should be eliminated from the API.
 
-Steve
--=_99C103FD.5F3E52A1-- From list@netscape.com Thu Aug 31 14:15:30 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA11037 for ; Thu, 31 Aug 2000 14:15:29 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VI3ke07333; Thu, 31 Aug 2000 11:03:47 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VIDkU10946; Thu, 31 Aug 2000 11:13:46 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 11:13:46 -0700 (PDT) Message-Id: <4.3.2.7.0.20000831110912.00b6a610@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 31 Aug 2000 11:13:11 -0700 To: "Steve Sonntag" From: "Kurt D. Zeilenga" Subject: Re: LDAPSetoption java-api-11 Cc: , , "Jim Sermersheim" , "Alan Clark" , "Steven Merrill" In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"mES_DD.A.uqC.ZBqr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 11:54 AM 8/31/00 -0600, Steve Sonntag wrote: >Section 4.39.13 LDAPV2.setOption > >This method of the LDAPV2 interface seems a little strange. > > 1) It probably does not belong under the interface LDAPV2, > but instead under LDAPConnection. This would allow it > to support setting client & server controls which it > cannot do under LDAPV2. This functionality is currently > missing in the method. > > Setting STRING_FORMAT is also an LDAPV3 setting, as UTF-8 > is only meaningful under LDAPV3. Given charset and other issues surrounding APIs designed to support both LDAPv2 and LDAPv3 and the what I believe is general consensus to obsolete LDAPv2, I suggest that all mention and support for LDAPv2 be axed from LDAPext work items. Kurt From list@netscape.com Thu Aug 31 15:35:17 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA12169 for ; Thu, 31 Aug 2000 15:35:16 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VJNge19869; Thu, 31 Aug 2000 12:23:42 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VJXgQ22301; Thu, 31 Aug 2000 12:33:42 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 12:33:42 -0700 (PDT) Message-ID: <020d01c013d9$822d1f00$3629b0cb@x3y0t8> To: From: "FEDERICO B. ISON, JR." Subject: Simply Amazing - 95% Pay-Out! Date: Thu, 31 Aug 2000 22:34:34 -0700 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_020A_01C0139E.D5CE4700" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.1 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Resent-Message-ID: <"_GSEaB.A.LcF.VMrr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a multi-part message in MIME format. ------=_NextPart_000_020A_01C0139E.D5CE4700 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable STOP, LOOK & LISTEN! The Only Company That Pays 95% Commission! A must to do; The Potential is Incredible; Highly Recommended! ---------------------------------------------------------- =20 Do your own math here;=20 a.. 50% Fast-Start on all referrals=20 b.. 20% Fast-Start on all 2nd level referrals=20 c.. 25% to the 2 x 25 matrix up to the 25 levels deep.=20 For full details, simply reply with "please forward 95% pay-out" as = text. =20 = *************************************************************************= ************************* MAKE $100 - $300 DAILY PART-TIME WORK AT HOME! Huge Potential - A Must To Do! = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Ranking=3D 10 ; Risk=3D 0 ; Returns=3D INCREDIBLE; HIGHLY RECOMMENDED ----------------------------------------------------- =20 =20 We are looking for an individual who wants to earn $100 - $300 daily = part-time doing a simple computer work at home. We will train and guide = them along the way and we will help them get started immediately.=20 =20 QUALIFICATIONS: Must be willing to learn, willing to work atleast one = hour a day online, ambitious and with a desire to be successful. =20 If you believe you are qualified and wants to get started immediately, = simply reply to this e-mail with "HELP ME GET STARTED" as text. =20 = *************************************************************************= ************************* =20 "PROJECT 21 - NO START COST - HUGE POTENTIAL -=20 A MUST TO READ" =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Ranking=3D 10 ; Risk=3D 0 ; Returns=3D INCREDIBLE; HIGHLY RECOMMENDED=20 -------------------------------------------------------------- This is huge. You can earn $2,000 per week part-time or $5,000 per week = full-time using your computer at home. You only need 1 hour a day of = easy and simple work. And the best part of it is... it's FREE to join!=20 HERE IS WHAT I GOT: a.. FREE TO JOIN - you don't have to pay anything to join=20 b.. EASY TO PROMOTE - 40 pages of information to get you started (pre written ads etc.), Also it's easy to promote=20 because it's FREE to JOIN.=20 c.. HUGE POTENTIAL - Earn the money you so desire for a long time at = your own pace, your own time, while you enjoy the things you loved with = your family. This is proven. You will be overwhelmed by the result that = you will get.=20 d.. YOU PAY ONLY WHEN YOU ARE SURE YOU"LL EARN - Like I told you = it's FREE to join but after 30 days you have to decide if you would like = to continue your membership. At that point if you have enough clients = I'm sure you'll be very happy to pay your monthly fee of $90, remain in = the program and .... MAKE MONEY...... I've been promoting this program for a very short period of time and so far I have 47 clients which means that I have=20 residual monthly income of $4300. And all this after 20-30=20 hours of promotion with 0 (ZERO) dollars investment. This is the type of program that you want to scream about. Let the whole = world know about it. For more information, simply reply to this email with "PROJECT 21=20 INFO" as text. Regards, Federico B. Ison, Jr. PS. I am willing to show you how to send your business or ads to=20 "ONE MILLION" safe, opt-in, 100% spam-free e-mails daily using=20 100% legal mailing system or your money back. =20 = -------------------------------------------------------------------------= ----------------------------------------------------- (NO SPAM POLICY) You Are Receiving This Mail Because We Either Had = Contact Before Or Your Name Appeared On A Safe E-Mail List That We Both = Belong To, Or It Was On An Ad To Make Money And To Receive Money. If = You Wish To Be Removed, Simply click the reply button and type REMOVE as = text. If Offended You In Any Way Shape Or Form, Please Accept My Sincere = Apology. ------=_NextPart_000_020A_01C0139E.D5CE4700 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
 
STOP, LOOK &=20 LISTEN!
 The Only Company That Pays 95%=20 Commission!
A must to do; The Potential is Incredible; Highly=20 Recommended!
----------------------------------------------------------
 
Do your own math here;
  • 50% Fast-Start on all referrals=20
  • 20% Fast-Start on all 2nd level referrals=20
  • 25% to the 2 x 25 matrix up to the 25 levels = deep.=20
For full details, simply reply with "please forward 95% = pay-out"=20 as text.
 
 =20 *************************************************************************= *************************
 
MAKE $100 - $300 = DAILY PART-TIME=20 WORK AT HOME!
Huge Potential - A Must To Do!
   =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Ranking=3D 10 ; Risk=3D 0 ; Returns=3D INCREDIBLE; = HIGHLY=20 RECOMMENDED
----------------------------------------------------- = ;        =
 
We are looking for an individual who wants to earn = $100 - $300=20 daily part-time doing a simple computer work at home. We will train and = guide=20 them along the way and we will help them get started=20 immediately. 
 
QUALIFICATIONS: Must be willing to = learn,=20 willing to work atleast one hour a day online, ambitious and with a = desire to be=20 successful.
 
If you believe you are qualified and wants = to get=20 started immediately, simply reply to this e-mail with "HELP ME GET=20 STARTED" as text.  
 
 =20 *************************************************************************= *************************
 
   "PROJECT 21 - = NO=20 START COST - HUGE POTENTIAL -
A MUST TO=20 READ"
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Ranking=3D=20 10 ; Risk=3D 0 ; Returns=3D INCREDIBLE; HIGHLY RECOMMENDED=20
--------------------------------------------------------------
 
This is huge. You can earn = $2,000 per=20 week part-time or $5,000 per week full-time using your computer at home. = You=20 only need 1 hour a day of easy and simple work. And the best part of it = is...=20 it's FREE to join!

HERE IS WHAT I GOT:

  • FREE TO JOIN - you don't have to pay anything to join=20
  • EASY TO PROMOTE - 40 pages of information to get you
    started = (pre=20 written ads etc.), Also it's easy to promote
    because it's FREE = to JOIN.=20
  • HUGE POTENTIAL - Earn the money you so desire for a long time at = your=20 own pace, your own time, while you enjoy the things you loved with = your=20 family. This is proven. You will be overwhelmed by the result that = you will=20 get.=20
  • YOU PAY ONLY WHEN YOU ARE SURE YOU"LL EARN - Like I told = you it's=20 FREE to join but after 30 days you have to decide if you would like = to=20 continue your membership. At that point if you have enough clients = I'm sure=20 you'll be very happy to pay your monthly fee of $90, remain in the = program=20 and .... MAKE MONEY......
I've been promoting this program for a very short period of
time = and so=20 far I have 47 clients which means that I have
residual monthly = income of=20 $4300. And all this after 20-30
hours of promotion with 0 (ZERO) = dollars=20 investment.

This is the type of program that you want to scream = about.=20 Let the whole world know about it.

For more information, simply = reply to=20 this email with "PROJECT 21
INFO" as text.
 
 
Regards,
 
 
Federico B. Ison, Jr.
 
PS. I am willing to show you how to send your business or ads to =
       "ONE MILLION" safe, = opt-in,=20 100% spam-free e-mails daily using
       100% legal mailing system or = your=20 money back.        
 
 ----------------------------------------------------------------= --------------------------------------------------------------
 
(NO SPAM POLICY)  You = Are Receiving=20 This Mail Because We Either Had Contact Before Or Your Name Appeared On = A Safe=20 E-Mail List That We Both Belong To, Or It Was On An Ad To Make Money And = To=20 Receive Money.  If You Wish To Be Removed, Simply click the reply = button=20 and type REMOVE as text. If Offended You In Any Way Shape Or Form, = Please Accept=20 My Sincere Apology.
------=_NextPart_000_020A_01C0139E.D5CE4700-- From list@netscape.com Thu Aug 31 16:30:09 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA12669 for ; Thu, 31 Aug 2000 16:30:07 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VKI6e27223; Thu, 31 Aug 2000 13:18:06 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VKS6I19849; Thu, 31 Aug 2000 13:28:06 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 13:28:06 -0700 (PDT) Message-ID: <39AEBF7F.DC436A22@novell.com> Date: Thu, 31 Aug 2000 14:26:40 -0600 From: Steven Sonntag Organization: Novell, Inc. X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: "Kurt D. Zeilenga" CC: ietf-ldapext@netscape.com, rweltman@netscape.com, Jim Sermersheim , Alan Clark , Steven Merrill Subject: Re: LDAPv, previously LDAPSetoption java-api-11 References: <4.3.2.7.0.20000831110912.00b6a610@router.boolean.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"7-fAQB.A.k1E.U_rr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit "Kurt D. Zeilenga" wrote: > At 11:54 AM 8/31/00 -0600, Steve Sonntag wrote: > >Section 4.39.13 LDAPV2.setOption > > > >This method of the LDAPV2 interface seems a little strange. > > > > 1) It probably does not belong under the interface LDAPV2, > > but instead under LDAPConnection. This would allow it > > to support setting client & server controls which it > > cannot do under LDAPV2. This functionality is currently > > missing in the method. > > > > Setting STRING_FORMAT is also an LDAPV3 setting, as UTF-8 > > is only meaningful under LDAPV3. > > Given charset and other issues surrounding APIs > designed to support both LDAPv2 and LDAPv3 and > the what I believe is general consensus to > obsolete LDAPv2, I suggest that all mention > and support for LDAPv2 be axed from LDAPext > work items. > > Kurt If references to LDAPv2 are not removed from the draft, then the methods that were previously in LDAPAsynchronous Connection which are now in LDAPConnection - these methods should also be in one of the LDAPV2 or LDAPV3 interfaces to identify where they can be used. -Steve -- ------------------------ Steve Sonntag Novell Directory Services +1 801 861 7097 From list@netscape.com Thu Aug 31 17:38:34 2000 Received: from netscape.com (h-205-217-237-46.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA13327 for ; Thu, 31 Aug 2000 17:38:28 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VLQLe10876; Thu, 31 Aug 2000 14:26:21 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VLHrk22046; Thu, 31 Aug 2000 14:17:53 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 14:17:53 -0700 (PDT) Message-ID: <39AECEC0.7CE35E17@netscape.com> Date: Thu, 31 Aug 2000 14:31:44 -0700 From: rweltman@netscape.com (Rob Weltman) Organization: Netscape Communications Corp. X-Mailer: Mozilla 4.73 [en]C-CCK-MCD {Sony} (Windows NT 5.0; U) X-Accept-Language: en,pdf MIME-Version: 1.0 To: "Kurt D. Zeilenga" CC: ietf-ldapext@netscape.com, Jim Sermersheim Subject: Re: Async API (Was: Minor Typos in java-api-11) References: <4.3.2.7.0.20000831101805.00b64b60@router.boolean.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"fgNdg.A.HYF._tsr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit I'll try. Rob "Kurt D. Zeilenga" wrote: > BTW, I thought someone was going to request removal the old > Java Async I-D from the repository... From list@netscape.com Thu Aug 31 20:50:56 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA14842 for ; Thu, 31 Aug 2000 20:50:50 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VMMFY05664; Thu, 31 Aug 2000 15:22:15 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VMIP625371; Thu, 31 Aug 2000 15:18:25 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 15:18:25 -0700 (PDT) Date: Thu, 31 Aug 2000 15:18:05 -0700 (PDT) Message-Id: <200008312218.e7VMI4L10948@xwing.netscape.com> From: best.newsyet@aol.com To: Friendk.JEHL@netscape.com Subject: You Must Read This! Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"h2CcuC.A.1LG.vmtr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Does God Love You? Q. What kind of a question is that? Anyone who can read sees signs, tracts, booklets and bumper stickers saying, "God Loves You." Isn't that true? A. It's true that God offers His love to the whole world, as we read in one of the most quoted verses in the Bible: "For God so loved the world, that he gave his only begotten Son, that whosoever believeth in Him shall not perish, but have ever lasting life." John 3:16 However, God's love is qualified, as we read in the Bible: "The way of the wicked is an abomination unto the Lord; but He loveth him that followeth after righteousness." Proverb 15:9 "For the Lord knoweth the way of the righteous, but the way of the ungodly shall perish." Psalms 1:6 Q. But I am not wicked. I am a decent moral person. Surely the good I have done in my life far outweighs whatever bad I have done. How can these verses apply to me? A. By God's standards of righteousness even the most moral person is looked upon by God as a desperate sinner on his way to Hell. The Bible teaches that no one good enough in himself to go to Heaven. On the contrary we are all sinners and are guilty before God. "As it is written, There is none righteous, no, not one; There is none that understand, there is none that seeketh after God." Romans 3:10,11. "The heart is deceitful above all things, and desperately wicked; who can know it?" Jeremiah 17:9 Q. If I am such a wicked person in God's sight what will God do to me? A. The Bible teaches that at the end of the world all the wicked will come under eternal punishment in a place called Hell. "For a fire is kindled in mine anger, and shall burn unto the lowest hell, and shall consume the earth with her increase, and set on fire the foundation of the mountain. I will heap mischiefs upon them; I will spend mine arrows upon them. They shall be burnt with hunger and devoured with burning heat and with bitter destruction." Deuteronomy 32:22-24 Q. Oh, come on now! Hell isn't real, is it? Surely things aren't that bad. A. Indeed, Hell is very real, and "things are that bad" for the individual who does not know the Lord Jesus Christ as Saviour. The Bible makes many references to Hell, indicating it is both eternal, and consists of perpetual suffering. "And whosoever was not found written in the book of life was cast into the lake of fire." Revelation 20:15 "So shall it be at the end of the world: the angels shall come forth and sever the wicked from among the just and shall cast them into the furnace of fire. Matthew 13:49-50 "... when the Lord Jesus shall be revealed from heaven with His mighty angels in flaming fire taking vengence on them that know not God, and that obey not the gospel of our Lord Jesus Christ, who shall be punished with everlasting destruction from the presence of the Lord and from the glory of His power." II Thessalonians 1:7-9 Q. That's terrible! Why would God create a Hell? A. Hell is terrible, and it exists because God created man to be accountable to God for his actions. His perfect justice demands payment for sin. "For the wages of sin is death." Romans 6:23 "For we must all appear before the judgement seat of Christ, that everyone may receive the things done in his body, whether it be good or bad." II Corinthians 5:10 "But I say unto you that every idle word that men shall speak, they shall give account thereof in the day of judgement." Matthew 12:36 Q. Does that mean that at the end of the world everyone will be brought to life again to be judged and then be sent to Hell? A. Indeed this is so - that is, unless we can find someone to be our substitute in bearing the punishment of eternal damnation for our sins. That someone is God Himself, Who came to earth to bear the wrath of God for all who believe in Him. "All we like sheep have gone astray; we have turned every one to his own way; and the Lord hath laid on him the iniquity of us all. Isaiah 53.6 "...He was wounded for our transgressions, He was bruised for our iniquities..." Isaiah 53.5 "For I delivered unto you first of all that which I also received, how that Christ died for our sins according to the scriptures; and that he was buried, and that he rose again the third day according to the scriptures." I Corinthians 15:3,4 "For he hath made him to be sin for us, who knew no sin that we might be made the righteousness of God in him." II Corinthians 5:21 Q. Are you saying that, if I trust in Christ as my substitute who was already punished for my sins, then I will not have to worry about Hell anymore? A. Yes, this is so! If I have believed in Christ as my Savior, then it is as if I have already stood before the judgement throne of God. Christ as my substitute has already paid for my sins. "Verily, verily, I say unto you, He that heareth my word, and believeth on him that sent me, hath everlasting life and shall not come into condemnation, but is passed from death into life." John 5:24 Q. But what does it mean to believe on Him? If I agree with all that the Bible says about Christ as Savior, then am I saved from going to Hell? A. Believing on Christ means a whole lot more than agreeing in our minds with truths of the Bible. It means that we hang our whole lives on Him. It means that we entrust every part of our lives to the truths of the Bible. It means that we turn away from our sins and serve Christ as our Lord. "No man can serve two masters, for either he will hate the one and love the other, or else he will hold to the one and despise the other. Ye cannot serve God and mammon." Matthew 6:24 "Repent ye therefore and be converted, that your sins may be blotted out..." Acts 3:19 Q. Are you saying that there is no other way to escape Hell except through Jesus? What about all the other religions? Will their followers also go to Hell? A. Yes, indeed. We cannot escape the fact that God holds us accountable for our sins. God demands that we pay for our sins. Other religions cannot provide a substitute for the sins of their followers. Christ is the only one who is available to bear our guilt. "Neither is there salvation in any other; for there is none other name under heaven given among men whereby we must be saved." Acts 4:12 Jesus said, "I am the way, the truth, and the life: no man cometh unto the Father, but by me." John 14:6 "If we confess our sins, he is faithful and just to forgive us our sins, and to cleanse us from all unrighteousness." I John 1:9 Q. Now I am desperate. I don't want to go to Hell. What can I do? A. You must remember that God is the only one who can help you. You must throw yourself altogether on the mercies of God. As you see your hopeless condition as a sinner, cry out to God that He will save you. "And the publican, standing afar off, would not lift up so much as his eyes unto heaven, but smote upon his breast, saying, God be merciful to me, a sinner." Luke 18:13 "Sirs, what must I do to be saved? And they said, Believe on the Lord Jesus Christ, and thou shalt be saved..." Acts 16:30, 31 "For whosoever shall call upon the name of the Lord shall be saved." Romans 10:13 Q. But how can I believe on Christ if I know so little about Him? A. Wonderfully God not only saved us through the Lord Jesus, but also gives us the faith to believe on Him. You can pray to God that He will give you faith in Jesus Christ as Your Savior. "For by grace are ye saved through faith; and that not of yourselves: it is the gift of God, not of works, lest any man should boast." Ephesians 2:8 God works particularly through the Bible to give us that faith. So, if you really mean business with God about your salvaiton, you should use every opportunity to hear and study the Bible, which is the only Word of God. "So then faith cometh by hearing, and hearing by the Word of God." Romans 10:17 Q. Does this mean that I have to surrender everything to God? A. Yes. God wants us to come to Him in total humility, acknowledging our sinfulness and our helplessness, trusting totally in Him. "Saith the Lord: but to this man will I look, even to him that is poor and of a contrite spirit, and trembleth at my word. Isaiah 66:2b Because we are sinners we love our sins. Therefore we must begin to pray to God for an intense hatred for our sins. And if we sincerely desire salvation, we will also begin to turn from our sins as God strengthens us. We know that it is our sins that are sending us to Hell. "Unto you first God, having raised up his Son Jesus, sent Him to bless you, in turning away every one of you from his iniquities." Acts 3:26 Q. I don't know if I am ready to do that. I need some time to think about it. A. You might not have much time. For one thing, you might not live to see tomorrow. What God said to the man who trusted in the things of this world, He could say to you, "Thou fool, this night thy soul shall be required of thee." Luke 12:20 Also, the Bible says that the end of the world is coming soon. The great day of the LORD is near, it is near, and hasteth greatly, even the voice of the day of the LORD: the mighty man shall cry there bitterly. That day is a day of wrath. Zephaniah 1:1415a Be ye also patient; stablish your hearts: for the coming of the Lord draweth nigh. James 5:8 Q. Is the day of wrath and judgment really near? Can we know how close to the end of the world we might be? A. Yes! It is near. God gives much information in the Bible which tells us that we are very near the end of the world. And because iniquity shall abound, the love of many shall wax cold. . . . And this gospel of the kingdom shall be preached in all the world for a witness unto all nations; and then shall the end come. Matthew 24:12, 14 For there shall arise false Christs, and false prophets, and shall shew great signs and wonders; insomuch that, if it were possible, they shall deceive the very elect. Matthew 24:24 Q. Besides being the time for Judgment Day, what else will happen at the end of the world? A. Those who have trusted in Jesus as their Savior will be transformed into their glorious eternal bodies and will be with Christ forevermore. For the Lord himself shall descend from heaven with a shout, with the voice of the archangel, and with the trump of God: and the dead in Christ shall rise first: Then we which are alive and remain shall be caught up together with them in the clouds, to meet the Lord in the air: and so shall we ever be with the Lord. I Thessalonians 4:1617 Also, God will destroy the entire universe by fire and create new heavens and a new earth where Christ will reign with His believers forevermore. But the day of the Lord will come as a thief in the night; in the which the heavens shall pass away with a great noise, and the elements shall melt with fervent heat, the earth also and the works that are therein shall be burned up . . . Nevertheless we, according to his promise, look for new heavens and a new earth, wherein dwelleth righteousness. II Peter 3:10, 13 Q. Why does God give us this warning? A. Just as God warned ancient Nineveh that He was going to destroy that great city and He gave them forty days warning, the Bible also warns us that the end is very near. And Jonah began to enter into the city a day's journey, and he cried, and said, Yet forty days, and Nineveh shall be overthrown. Jonah 3:4 Q. What did the people of Nineveh do? A. From the king on down, they humbled themselves before God, repented of their sins, and cried to God for mercy. But let man and beast be covered with sackcloth, and cry mightily unto God: yea, let them turn every one from his evil way, and from the violence that is in their hands. Who can tell if God will turn and repent, and turn away from his fierce anger, that we perish not? Jonah 3:89 Q. Did God hear their prayers? A. Yes. God saved a great many people of Nineveh. Q. Can I still cry to God for mercy so that I will not come into judgment? A. Yes. There is still time to become saved even though that time has become very short. Seek ye the LORD while He may be found, call upon him while he is near. Isaiah 55:6 How shall we escape, if we neglect so great salvation; which at the first began to be spoken by the Lord, and was confirmed unto us by them that heard him. Hebrews 2:3 In God is my salvation and my glory: the rock of my strength, and my refuge, is in God. Trust in him at all times; ye people, pour out your heart before him: God is a refuge for us. Selah. Psalm 62:78 ARE YOU READY TO MEET GOD? From list@netscape.com Thu Aug 31 20:55:07 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA14897 for ; Thu, 31 Aug 2000 20:55:06 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VMcWY13215; Thu, 31 Aug 2000 15:38:33 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VMiQE07701; Thu, 31 Aug 2000 15:44:26 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 15:44:26 -0700 (PDT) Message-Id: From: david.a.cahlander@syntegra.com Subject: LDAP and DIGEST-MD5 SASL - rfc2829 To: ietf-ldapext@netscape.com Date: Thu, 31 Aug 2000 17:44:07 -0500 (CDT) X-Mailer: ELM [version 2.5 PL2] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"MDlyO.A.93B.J_tr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Where do I store the credentials for DIGEST-MD5 in the directory? (i.e. what attribute name) Is READ access control needed for this attribute? I'm trying to implement DIGEST-MD5 in an LDAP front-end to an X500 Directory. I can't figure out what needs to be stored for credentials. Thanks to OpenLDAP, I have an ldapsearch that does the first part of the bind operation. I have read RFC2829 and RFC2831 but find that I am at a loss to understand how the very simple operation of authentication is performed. From RFC2829 section 6.1: The server will respond with a bind response in which the resultCode is either success, or an error indication. I have no idea how this operation is performed. RFC2831 does not seem to give a clue about this either. As near as I can tell, the LDAP server is required to either use a separate file for authentication information that contains: username MD5hash( username-value ":" realm-value ":" passwd ) or store this information in the directory entry for the user that is trying to authenticate. It is not clear which attribute this information needs to be stored in or what access control is needed for this attribute. The catch-22 comes from what I see as a very serious security violation with any of the methods that can be used to implement this operation. Since the user needs only the MD5hash value to authenticate, The MD5hash value can be considered as a plaintext password. (3,9 in /rfc2831) In order to do the DIGEST-MD5 calulation, this attribute needs to be able to be read. This means that any administrator that has access to the directory can read this password hash and use it to authenticate to the directory as that user. In an X500 situation, this attribute must be able to be read between two DSAs. A snoop on the line will reveal this password hash, the same as being able to read a cleartext password. At least with simple authentication the only thing passed between the DSAs is a compare operation. I'm sure that I'm missing something very basic. With all the complexity of the DIGEST-MD5 operation, I can't believe that it is so simple to break the authentication operation. Kurt Zeilenga indicated that openldap allowed cyrus to handle the password and the authentication. This would seem to work fine for a single directory on a single machine, but it does not work with replicated directories. Can someone shed some likght on this problem? Thanks --- David Cahlander David.A.Cahlander@syntegra.com 651-415-3171 From list@netscape.com Thu Aug 31 20:55:47 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA14907 for ; Thu, 31 Aug 2000 20:55:08 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VMb7Y12515; Thu, 31 Aug 2000 15:37:07 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VMXP203374; Thu, 31 Aug 2000 15:33:25 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 15:33:25 -0700 (PDT) Date: Thu, 31 Aug 2000 17:32:33 -0500 From: Mark Wahl Subject: new co-chair for LDAPEXT Sender: wahl@austin.innosoft.com To: ietf-ldapext@netscape.com Cc: Roland Hedberg Cc: paf@swip.net, ned.freed@innosoft.com Message-id: <1400.967761153@threadgill.austin.innosoft.com> Resent-Message-ID: <"MyCFQD.A.c0.00tr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com I'd like to introduce Roland Hedberg, who will be joining me as chair for the IETF LDAPEXT Working Group. His email address is Roland Hedberg . Please let us know if you have any questions. Mark Wahl, Directory Architect, Service Provider/Infrastructure Sun Microsystems, Inc. iPlanet Alliance From list@netscape.com Thu Aug 31 20:56:00 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA14887 for ; Thu, 31 Aug 2000 20:54:34 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e7VM1sY26958; Thu, 31 Aug 2000 15:01:54 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e7VKbII27023; Thu, 31 Aug 2000 13:37:18 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 13:37:18 -0700 (PDT) Content-return: allowed Date: Thu, 31 Aug 2000 16:24:18 -0400 From: "Slone, Skip" Subject: RE: X.500 and LDAP alignment To: "'Erik Andersen'" , "'RL 'Bob' Morgan'" Cc: osidirectory@az05.bull.com, IETF ldapext WG , IETF ldapbis WG Message-id: MIME-version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-type: text/plain Content-transfer-encoding: 7BIT Resent-Message-ID: <"ZHhuVB.A.ylG.8Hsr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7BIT Bob, I would just like to add a few thoughts to what Erik has mentioned. First, I would like to reiterate that the new work item is very broadly stated and to emphasize that the express purpose as stated in the NWI is to "improve alignment and thereby co-existence and interoperability with LDAP." Exactly where we will go is yet to be determined, but from my perspective some of the most important work we can do is to break down barriers to interoperability. One very important such barrier that is nearing completion is the removal of X.500's dependency on OSI's upper layer protocols. This is being done by providing a thin convergence layer (called the Internet Directly Mapped protocol, or IDM) between the X.500 protocols and TCP, thereby allowing implementers the choice of implementing X.500 on an OSI stack or on TCP. (Note that this is different from RFC-1006 in that 1006 assumed that the OSI upper layers had already been implemented -- IDM bypasses all that.) Additional barriers that can (and IMHO should) be removed are things like: - allowing LDAP operations to be chained within DSP - allowing an X.500 directory to return an LDAP referral - allowing distributed name resolution to proceed through the X.500, LDAP, and DNS (most notably SRV record) namespaces without the user having to care - allowing subrequests resulting from the X.518 request decomposition process to propagate to LDAP as well as X.500 - allowing the X.500 results merging process to incorporate results from LDAP as well as X.500 resident entries - allowing search-with-join operations to be performed on related entries, regardless which type of directory holds the entries in question - allowing some form of interoperable X.500/LDAP replication Obviously this is quite a list, none of which is formalized as of yet, but I'm hoping it gives you a better sense of where this activity may be headed. I'm also hoping it helps achieve the ever-elusive goal of interoperability! I would also like to say that I was pleased to read in your note that those involved in LDAP are pleased that this work is getting underway. I think both camps will benefit if we can establish good communication and minimize duplication of effort. Best regards, -- Skip Slone Lockheed Martin -----Original Message----- From: Erik Andersen [mailto:era.als@get2net.dk] Sent: Wednesday, August 30, 2000 12:06 PM To: 'RL 'Bob' Morgan' Cc: osidirectory@az05.bull.com; IETF ldapext WG; IETF ldapbis WG Subject: X.500 and LDAP alignment Hi Bob, The new work item on LDAP is very loosely defined (to achieve maximum alignment with LDAP) not to constrain the work. As it is an X.500 work item, we can only specify alignment in one direction. We see several ideas in the LDAP work that could be useful to incorporate. However, we see alignment in both directions as very important. As the LDAP protocol is the most used X.500 access protocol, extension to LDAP to support most of the features below is very desirable. Within X.500, we have or are in the progress of adding a large number of new features. The following are completed and stable items: a) Facilities to control and constrain the service given to different user groups using a concept called search-rules. b) Families of entries, for which David Chadwick has issue an Internet draft. We would be very interested in seeing that progressed. c) Hierarchical groups, which allow hierarchies to be established independent of the DIT hierarchy. d) Mapping-based matching with emphasis on geographical (zonal) matching which allows mapping between the real world as seen by users and the model of the world as it is reflected in a directory. e) Matching rule substitution allowing a great flexibility in matching to ensure more successful searches f) Much user related diagnostic information to be returned to users to guide in making a new, more successful search Of new items, the most important is probably "Related Entries in the Directory". This is a way to access in one request information from different directories having different naming spaces (or disjoint naming spaces). This is a very significant work item that in many respects will align X.500 to the real world instead of trying the reverse. It will also bring X.500 closer to the LDAP philosophy. Personally, I see it as a tool to provide interworking between LDAP and X.500 servers (and possibly other types of directories). Hope that helps. Erik Andersen Mobile: +45 20 97 14 90 E-mail; era.als@get2net.dk Internet: http://www.cenorm.be/isss/Workshop/DIR/Default.htm -----Original Message----- From: RL 'Bob' Morgan [SMTP:rlmorgan@washington.edu] Sent: 30. august 2000 16:57 To: Erik Andersen Cc: David Chadwick; osidirectory@az05.bull.com; IETF ldapext WG; IETF ldapbis WG Subject: RE: Matching Rules for Constructed Syntaxes On Wed, 30 Aug 2000, Erik Andersen wrote: > I do not see why we should not include it in our first draft for the LDAP > alignment works. David, hope to see you in Orlando. Your presence would be > very useful. Can someone from the X.500 community describe and/or offer a pointer to the "LDAP alignment" activity? I think everyone involved with LDAP is pleased that this is happening, but especially in the context of the ldapbis work, one of whose items will be (I think) clarifying LDAP's dependencies on X.500, it does raise questions of who is aligning with whom. Thanks, - RL "Bob" From list@netscape.com Thu Aug 31 22:11:30 2000 Received: from netscape.com (h-205-217-237-47.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA17404 for ; Thu, 31 Aug 2000 22:11:29 -0400 (EDT) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id e8123wu02556; Thu, 31 Aug 2000 19:03:59 -0700 (PDT) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id e8129rE29212; Thu, 31 Aug 2000 19:09:53 -0700 (PDT) Resent-Date: Thu, 31 Aug 2000 19:09:53 -0700 (PDT) Message-Id: <4.3.2.7.0.20000831164708.00b67e00@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 31 Aug 2000 18:20:56 -0700 To: david.a.cahlander@syntegra.com From: "Kurt D. Zeilenga" Subject: Re: LDAP and DIGEST-MD5 SASL - rfc2829 Cc: ietf-ldapext@netscape.com In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"UOgN-D.A.IIH.v_wr5"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:44 PM 8/31/00 -0500, david.a.cahlander@syntegra.com wrote: >Where do I store the credentials for DIGEST-MD5 in the directory? >(i.e. what attribute name) userPassword can be used to store the clear text password. authPassword (draft-zeilenga-ldap-authpasswd-03.txt, a work in progress) can be used to the DIGEST-MD5 specific secret. >Is READ access control needed for this attribute? Server specific as there is no standard track, mandatory to implement LDAP access control model (yet). However, both X.500 and LDAP access control models, IIRC, have recommendations in this area... the current user (anonymous) requires no special permission to authenticate. Some servers, such as OpenLDAP 2.x, actually require "anonymous" to have "auth"entication/"auth"orization access to the entry and the attributes used for authentication. >I'm trying to implement DIGEST-MD5 in an LDAP front-end to an X500 Directory. >I can't figure out what needs to be stored for credentials. You either need to store the username + cleartext password or the username + H({ username-value, ":", realm-value, ":", passwd }) (see RFC 2831, 3.9). One approach is to store the 'username@REALM' in 'uid' and the password in 'userPassword' (or the hash in 'authPassword'). Then when the server gets a request to authenthicate 'username@REALM' it can search for (uid=username@REALM) and, if unique, press on with userPassword (or authPassword). Another variant of this is use REALM to select the base DN for the search used to find the user. Another approach is to REGEX the username/REALM into a DN of an entry containing the secret. Another approach is to store externally 'username/REALM' + secret pairs (this is OpenLDAP 2.0 current approach). There are other approaches. (Including misguided ones which use the bind DN or authzId to locate the entry associated with the username/REALM). >I'm sure that I'm missing something very basic. The intent of DIGEST-MD5 is to offer relatively strong authentication services between the client and the server at low cost. >With all the complexity of the DIGEST-MD5 operation, DIGEST-MD5 is actually quite simple in comparison to alternatives (such as StartTLS+simple). It protects the client/server authentication from a number of common attacks, offers simple privacy/integrity protection, proxy support, etc.. The problems associated with distributing (or providing read access to) DIGEST-MD5 secrets is comparable to distributing (or providing read/compare to) simple password secrets. DIGEST-MD5 was not designed to address wide-scale distribute of authentication secrets issues. >I can't believe that it is so simple to >break the authentication operation. It's not DIGEST-MD5 that is broken.... use the mechanism within its design constraints.... pay attention to documented security considerations... and if your use doesn't fit the mechanism, choose a more appropriate mechanism. >Kurt Zeilenga indicated that openldap allowed cyrus to handle the password and >the authentication. This would seem to work fine for a single directory on >a single machine, but it does not work with replicated directories. We took this approach in OpenLDAP 2.0 as it was far more important for our server to share DIGEST-MD5 secrets with other SASL-enabled application servers (SMTP, IMAP, POP, HTTP, etc.) then it was to support distributed LDAP-only services using THIS mechanism. I believe other mechanisms, such as GSSAPI (w/ Kerberos V), are much better suited to distributed, multiple application services. >Can someone shed some likght on this problem?