From kelly.grizzle@sailpoint.com Mon Nov 4 12:21:39 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C806321E8169 for ; Mon, 4 Nov 2013 12:21:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.403 X-Spam-Level: X-Spam-Status: No, score=-3.403 tagged_above=-999 required=5 tests=[AWL=0.195, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8a6XQ5lMJn90 for ; Mon, 4 Nov 2013 12:21:35 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2lp0235.outbound.protection.outlook.com [207.46.163.235]) by ietfa.amsl.com (Postfix) with ESMTP id 7925F11E82BB for ; Mon, 4 Nov 2013 12:21:33 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB391.namprd04.prod.outlook.com (10.141.60.150) with Microsoft SMTP Server (TLS) id 15.0.810.5; Mon, 4 Nov 2013 20:21:32 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.183]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.48]) with mapi id 15.00.0815.000; Mon, 4 Nov 2013 20:21:31 +0000 From: Kelly Grizzle To: Phil Hunt , "scim@ietf.org WG" Thread-Topic: [scim] extended objects and searching Thread-Index: AQHO1Abn1D237PVEG0O0q5tuHTxVQ5oVjYTA Date: Mon, 4 Nov 2013 20:21:31 +0000 Message-ID: <901c793cfe9d4d65abae906cb694c301@BN1PR04MB392.namprd04.prod.outlook.com> References: <6B6508C4-6A13-4A89-A6EE-4327C990081B@oracle.com> In-Reply-To: <6B6508C4-6A13-4A89-A6EE-4327C990081B@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 1623B0DB0059FE1623B228 x-originating-ip: [2001:4870:600a:500::2] x-forefront-prvs: 0020414413 x-forefront-antispam-report: SFV:NSPM; SFS:(189002)(199002)(377454003)(80022001)(79102001)(15975445006)(76796001)(59766001)(56816003)(76576001)(77096001)(19300405004)(74366001)(31966008)(33646001)(76482001)(74502001)(47446002)(74662001)(65816001)(16601075003)(16236675002)(47736001)(49866001)(4396001)(53806001)(54356001)(83072001)(19609705001)(87266001)(50986001)(47976001)(77982001)(46102001)(63696002)(51856001)(74706001)(76786001)(74876001)(19580405001)(83322001)(19580395003)(81816001)(81342001)(74316001)(56776001)(85306002)(80976001)(54316002)(69226001)(15202345003)(81542001)(81686001)(2656002)(24736002)(3826001); DIR:OUT; SFP:; SCL:1; SRVR:BN1PR04MB391; H:BN1PR04MB392.namprd04.prod.outlook.com; CLIP:2001:4870:600a:500::2; FPR:; RD:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: multipart/alternative; boundary="_000_901c793cfe9d4d65abae906cb694c301BN1PR04MB392namprd04pro_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com Subject: Re: [scim] extended objects and searching X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2013 20:21:40 -0000 --_000_901c793cfe9d4d65abae906cb694c301BN1PR04MB392namprd04pro_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I believe that the decision was to make the ResourceType be single-valued a= nd correspond the endpoint from which the object was retrieved. Each insta= nce of this resource type can optionally include schemas from the schemaExt= ensions defined for the resource type. It seems like the right way to achi= eve what you are looking for is to search on the "schemas" attribute. For= example: GET /Users?filter=3Dschemas eq "urn:scim:schemas:extension:enterprise:2.0= :User" Does that sound right? --Kelly From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Phi= l Hunt Sent: Monday, October 28, 2013 12:56 PM To: scim@ietf.org WG Subject: [scim] extended objects and searching Kelly, At one point we had a discussion about extensions (e.g. EnterpriseUser). I= n draft 02, it seems that meta.resourceType only points to the main type of= the object (e.g. User). Were we going to multi-valued so that for example= , a User with EnterpriseUser would be both "User" and "EnterpriseUser"? Th= e reason I ask, is we are looking for a way to search for those Users that = are EnterpriseUser objects. This is all related to Ticket 38... http://trac.tools.ietf.org/wg/scim/trac/ticket/38 Phil @independentid www.independentid.com phil.hunt@oracle.com --_000_901c793cfe9d4d65abae906cb694c301BN1PR04MB392namprd04pro_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I believe that the decisi= on was to make the ResourceType be single-valued and correspond the endpoin= t from which the object was retrieved.  Each instance of this resource type can optionally include schemas from the schemaExtension= s defined for the resource type.  It seems like the right way to achie= ve what you are looking for is to search on the “schemas” attri= bute.   For example:

 <= /p>

  GET /Users?filter= =3Dschemas eq “urn:scim:schemas:extension:enterprise:2.0:User”<= o:p>

 <= /p>

Does that sound right?

 <= /p>

--Kelly=

 <= /p>

From: scim-bou= nces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt
Sent: Monday, October 28, 2013 12:56 PM
To: scim@ietf.org WG
Subject: [scim] extended objects and searching

 

Kelly,

 

At one point we had a discussion about extensions (e= .g. EnterpriseUser).  In draft 02, it seems that meta.resourceType onl= y points to the main type of the object (e.g. User).  Were we going to= multi-valued so that for example, a User with EnterpriseUser would be both "User" and "EnterpriseUser&quo= t;?  The reason I ask, is we are looking for a way to search for those= Users that are EnterpriseUser objects.

 

This is all related to Ticket 38...

 

Phil

 

@independentid<= /span>

phil.hunt@oracle.com

 

--_000_901c793cfe9d4d65abae906cb694c301BN1PR04MB392namprd04pro_-- From phil.hunt@oracle.com Mon Nov 4 13:46:41 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AC1021E817A for ; Mon, 4 Nov 2013 13:46:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.249 X-Spam-Level: X-Spam-Status: No, score=-6.249 tagged_above=-999 required=5 tests=[AWL=0.348, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j4+2ydesjXwA for ; Mon, 4 Nov 2013 13:46:35 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id C354821E8104 for ; Mon, 4 Nov 2013 13:46:29 -0800 (PST) Received: from acsinet21.oracle.com (acsinet21.oracle.com [141.146.126.237]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rA4LkSEq004432 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 4 Nov 2013 21:46:29 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA4LkRe9003512 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 4 Nov 2013 21:46:28 GMT Received: from abhmt108.oracle.com (abhmt108.oracle.com [141.146.116.60]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA4LkRLV003504; Mon, 4 Nov 2013 21:46:27 GMT Received: from dhcp-a540.meeting.ietf.org (/31.133.165.64) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 04 Nov 2013 13:46:27 -0800 Content-Type: multipart/alternative; boundary="Apple-Mail=_56082D48-227C-43A6-A6D7-CA102015C85C" Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) From: Phil Hunt In-Reply-To: <901c793cfe9d4d65abae906cb694c301@BN1PR04MB392.namprd04.prod.outlook.com> Date: Mon, 4 Nov 2013 13:46:24 -0800 Message-Id: <24CA778E-32CC-4A11-8512-DFECB6C92BE5@oracle.com> References: <6B6508C4-6A13-4A89-A6EE-4327C990081B@oracle.com> <901c793cfe9d4d65abae906cb694c301@BN1PR04MB392.namprd04.prod.outlook.com> To: Kelly Grizzle X-Mailer: Apple Mail (2.1510) X-Source-IP: acsinet21.oracle.com [141.146.126.237] Cc: "scim@ietf.org WG" Subject: Re: [scim] extended objects and searching X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2013 21:46:41 -0000 --Apple-Mail=_56082D48-227C-43A6-A6D7-CA102015C85C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 I think if we formalize it, that will work. Phil @independentid www.independentid.com phil.hunt@oracle.com On 2013-11-04, at 12:21 PM, Kelly Grizzle = wrote: > I believe that the decision was to make the ResourceType be = single-valued and correspond the endpoint from which the object was = retrieved. Each instance of this resource type can optionally include = schemas from the schemaExtensions defined for the resource type. It = seems like the right way to achieve what you are looking for is to = search on the =93schemas=94 attribute. For example: > =20 > GET /Users?filter=3Dschemas eq = =93urn:scim:schemas:extension:enterprise:2.0:User=94 > =20 > Does that sound right? > =20 > --Kelly > =20 > From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf = Of Phil Hunt > Sent: Monday, October 28, 2013 12:56 PM > To: scim@ietf.org WG > Subject: [scim] extended objects and searching > =20 > Kelly, > =20 > At one point we had a discussion about extensions (e.g. = EnterpriseUser). In draft 02, it seems that meta.resourceType only = points to the main type of the object (e.g. User). Were we going to = multi-valued so that for example, a User with EnterpriseUser would be = both "User" and "EnterpriseUser"? The reason I ask, is we are looking = for a way to search for those Users that are EnterpriseUser objects. > =20 > This is all related to Ticket 38... > http://trac.tools.ietf.org/wg/scim/trac/ticket/38 > =20 > Phil > =20 > @independentid > www.independentid.com > phil.hunt@oracle.com > =20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail=_56082D48-227C-43A6-A6D7-CA102015C85C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 I = think if we formalize it, that will work.


On 2013-11-04, at 12:21 PM, Kelly Grizzle <kelly.grizzle@sailpoint.com> wrote:

I believe that the = decision was to make the ResourceType be single-valued and correspond = the endpoint from which the object was retrieved.  Each instance of = this resource type can optionally include schemas from the = schemaExtensions defined for the resource type.  It seems like the = right way to achieve what you are looking for is to search on the = =93schemas=94 attribute.   For = example:
 
  GET /Users?filter=3Dschemas eq = =93urn:scim:schemas:extension:enterprise:2.0:User=94
 
Does that sound = right?
 
--Kelly
From: scim-bounces@ietf.org = [mailto:scim-bounces@ietf.org] On Behalf Of Phil = Hunt
Sent: Monday, October 28, 2013 = 12:56 PM
To: scim@ietf.org = WG
Subject: [scim] extended objects and = searching
At = one point we had a discussion about extensions (e.g. EnterpriseUser). =  In draft 02, it seems that meta.resourceType only points to the = main type of the object (e.g. User).  Were we going to multi-valued = so that for example, a User with EnterpriseUser would be both "User" and = "EnterpriseUser"?  The reason I ask, is we are looking for a way to = search for those Users that are EnterpriseUser = objects.
This = is all related to Ticket 38...
Subject: Re: [scim] extended objects and searching X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2013 14:49:46 -0000 --_000_a39ea4c8157548c2a1709238d86df4a3BN1PR04MB392namprd04pro_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Right on. I opened ticket #51 to address this - http://tools.ietf.org/wg/s= cim/trac/ticket/51. From: Phil Hunt [mailto:phil.hunt@oracle.com] Sent: Monday, November 04, 2013 3:46 PM To: Kelly Grizzle Cc: scim@ietf.org WG Subject: Re: [scim] extended objects and searching I think if we formalize it, that will work. Phil @independentid www.independentid.com phil.hunt@oracle.com On 2013-11-04, at 12:21 PM, Kelly Grizzle > wrote: I believe that the decision was to make the ResourceType be single-valued a= nd correspond the endpoint from which the object was retrieved. Each insta= nce of this resource type can optionally include schemas from the schemaExt= ensions defined for the resource type. It seems like the right way to achi= eve what you are looking for is to search on the "schemas" attribute. For= example: GET /Users?filter=3Dschemas eq "urn:scim:schemas:extension:enterprise:2.0= :User" Does that sound right? --Kelly From: scim-bounces@ietf.org [mailto:scim-boun= ces@ietf.org] On Behalf Of Phil Hunt Sent: Monday, October 28, 2013 12:56 PM To: scim@ietf.org WG Subject: [scim] extended objects and searching Kelly, At one point we had a discussion about extensions (e.g. EnterpriseUser). I= n draft 02, it seems that meta.resourceType only points to the main type of= the object (e.g. User). Were we going to multi-valued so that for example= , a User with EnterpriseUser would be both "User" and "EnterpriseUser"? Th= e reason I ask, is we are looking for a way to search for those Users that = are EnterpriseUser objects. This is all related to Ticket 38... http://trac.tools.ietf.org/wg/scim/trac/ticket/38 Phil @independentid www.independentid.com phil.hunt@oracle.com _______________________________________________ scim mailing list scim@ietf.org https://www.ietf.org/mailman/listinfo/scim --_000_a39ea4c8157548c2a1709238d86df4a3BN1PR04MB392namprd04pro_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Right on.  I opened = ticket #51 to address this - http://tool= s.ietf.org/wg/scim/trac/ticket/51.

 <= /p>

From: Phil Hun= t [mailto:phil.hunt@oracle.com]
Sent: Monday, November 04, 2013 3:46 PM
To: Kelly Grizzle
Cc: scim@ietf.org WG
Subject: Re: [scim] extended objects and searching=

 

I think if we formalize it, that will work.

 

Phil

 

@independentid<= /span>

phil.hunt@oracle.com

 

On 2013-11-04, at 12:21 PM, Kelly Grizzle <kelly.grizzle@sailpoint.com>= ; wrote:



I believe that the decisi= on was to make the ResourceType be single-valued and correspond the endpoin= t from which the object was retrieved.  Each instance of this resource type can optionally include schemas from the schemaExtension= s defined for the resource type.  It seems like the right way to achie= ve what you are looking for is to search on the “schemas” attri= bute.   For example:

 <= /p>

  GET /Users?filter= =3Dschemas eq “urn:scim:schemas:extension:enterprise:2.0:User”<= /span>

 <= /p>

Does that sound right?

 <= /p>

--Kelly=

 <= /p>

From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt
Sent: Monday, Octo= ber 28, 2013 12:56 PM
To: scim@ietf.org WG
Subject: [scim] ex= tended objects and searching

 

Kelly,

 

At one point we had a discussion about extensions (e= .g. EnterpriseUser).  In draft 02, it seems that meta.resourceType onl= y points to the main type of the object (e.g. User).  Were we going to= multi-valued so that for example, a User with EnterpriseUser would be both "User" and "EnterpriseUser&quo= t;?  The reason I ask, is we are looking for a way to search for those= Users that are EnterpriseUser objects.

 

This is all related to Ticket 38...

 

 

_____________________________________= __________
scim mailing list
scim@ietf.org=
https://www.ietf.org/mailman/listinfo/scim

 

--_000_a39ea4c8157548c2a1709238d86df4a3BN1PR04MB392namprd04pro_-- From randomshelley@gmail.com Wed Nov 6 11:51:29 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69CBB11E80DE for ; Wed, 6 Nov 2013 11:51:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YIu+AXEOjIY7 for ; Wed, 6 Nov 2013 11:51:28 -0800 (PST) Received: from mail-ie0-x22e.google.com (mail-ie0-x22e.google.com [IPv6:2607:f8b0:4001:c03::22e]) by ietfa.amsl.com (Postfix) with ESMTP id 2FA9311E80D9 for ; Wed, 6 Nov 2013 11:51:28 -0800 (PST) Received: by mail-ie0-f174.google.com with SMTP id qd12so18144580ieb.5 for ; Wed, 06 Nov 2013 11:51:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=Uc5jNON+iNJQxSFhQBz4d1UMLIj4rJoH4DYyPhfqzso=; b=h1bIDBDIz2lOveOF6bthgAertrAHVJaX7E9P4Je1xbdtekK+2uR4aLQzxWzERFyoD8 SspfzxQzooxBRei8LV2Y+seR3KBfvK5q2wAzqxGfUPoTgWQzqWCj8WqoqQGvCvxzIOS5 QwExOuZSTZUfn/1HIJWtAUPmuqzu4CO+VozSCa/43Zs1wn0ng5yqOJhgyK3ob0hFiDtV 6bUGMf6+5BXyAGbcm0zGtlza5jRZiKwuGsZB8ZH6sLCyicKehsSFZMC/6Nwgc+uZzIsC hxyWFtKLUKTuntfQeEZaucMCU+GY3uJmS/ULntpnAhOZsbratLcbPIOZO+IOnkw+Qung OZGQ== MIME-Version: 1.0 X-Received: by 10.50.118.41 with SMTP id kj9mr3769627igb.9.1383767487616; Wed, 06 Nov 2013 11:51:27 -0800 (PST) Received: by 10.64.61.170 with HTTP; Wed, 6 Nov 2013 11:51:27 -0800 (PST) Date: Wed, 6 Nov 2013 13:51:27 -0600 Message-ID: From: Shelley To: "scim@ietf.org" Content-Type: multipart/alternative; boundary=089e011769a38d67ec04ea877929 Subject: [scim] Pagination Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2013 19:51:29 -0000 --089e011769a38d67ec04ea877929 Content-Type: text/plain; charset=ISO-8859-1 I'd appreciate some clarification on some of the SCIM pagination behavior, particularly as it relates to situations when the "startIndex" and/or "count" exceed the total number of results. Given the following example scenarios, assume there are 19 total users, and the SP has configured a default maxResults of 10. (The schemas attribute and actual resources have been omitted for brevity and applicability with both SCIM 1.1 and 2.0.) *Scenario 1* *GET /Users?startIndex=2* { "totalResults":19, "itemsPerPage":10, "startIndex":2, "Resources":[ * ...users 2-11...* ] } Is this the correct behavior, such that the "current" page contains the default "itemsPerPage" despite the "previous" page being a different size? *Scenario 2* *GET /Users?startIndex=19&count=10* { "totalResults":19, "itemsPerPage":1, "startIndex":19, "Resources":[ * ...user 19...* ] } Despite the requested page size being 10, the actual number of resources returned is only 1. In this situation, is it correct for the SP to return "1" for the "itemsPerPage" or should this value instead be 10? *Scenario 3* *GET /Users?startIndex=20* { "totalResults":19, "itemsPerPage":0, "startIndex":20, "Resources":[ * ...no users/empty array...* ] } *-OR-*{ "Errors":[ { "description":"startIndex exceeded totalResults", "code":"400" } ] } If the requested startIndex is greater than the total number of results, what should the SP return? Is this an error condition? If not, what are the appropriate values for the startIndex and itemsPerPage? Thank you! --089e011769a38d67ec04ea877929 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
I'd appreciate some clarification on some of the SCIM = pagination behavior, particularly as it relates to situations when the &quo= t;startIndex" and/or "count" exceed the total number of resu= lts.

Given the following example scenarios, assume there are 19 total u= sers, and the SP has configured a default maxResults of 10. (The schemas at= tribute and actual resources have been omitted for brevity and applicabilit= y with both SCIM 1.1 and 2.0.)

Scenario 1
GET /Users?startIndex=3D2
{
=A0 "totalResults"= ;:19,
=A0 "itemsPerPage&qu= ot;:10,
=A0 &qu= ot;startIndex":2,
=A0 "Resources":[
=A0=A0=A0 ...users 2-1= 1...
=A0 ]<= /span>
}
Is this the correct behavior, such that the "current" page con= tains the default "itemsPerPage" despite the "previous"= page being a different size?

Scenario 2
GET /Users?startIndex=3D19&am= p;count=3D10
=A0 "totalResults&qu= ot;:19,
=A0 &qu= ot;itemsPerPage":1,
=A0 "startIndex":19,
=A0 "Resources"= :[
=A0=A0=A0= ...user 19...
=A0 ]
}
Despite= the requested page size being 10, the actual number of resources returned = is only 1. In this situation, is it correct for the SP to return "1&qu= ot; for the "itemsPerPage" or should this value instead be 10?

Scenario 3
GET /Users?startIndex=3D20
{
=A0 &quo= t;totalResults":19,
=A0 "itemsPerPage":0,
=A0 "startIndex":20,
=A0 &q= uot;Resources":[
=A0=A0=A0 ...no users/empty array...
=A0= ]
}
-OR-
{
=A0 "Errors":[
=A0=A0=A0 {
=A0=A0=A0=A0=A0 "d= escription":"startIndex exceeded totalResults",
=A0=A0=A0= =A0=A0 "code":"400"
=A0=A0=A0 }
=A0 ]
}=
If the requested startIndex is greater than the total number of r= esults, what should the SP return? Is this an error condition? If not, what= are the appropriate values for the startIndex and itemsPerPage?

Thank you!
--089e011769a38d67ec04ea877929-- From leifj@sunet.se Thu Nov 7 09:09:11 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7441F21E81F6 for ; Thu, 7 Nov 2013 09:09:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.949 X-Spam-Level: X-Spam-Status: No, score=-1.949 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, HELO_EQ_SE=0.35, HTML_MESSAGE=0.001, J_CHICKENPOX_57=0.6] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fTnXmaWfHnoZ for ; Thu, 7 Nov 2013 09:08:53 -0800 (PST) Received: from e-mailfilter01.sunet.se (e-mailfilter01.sunet.se [IPv6:2001:6b0:8:2::201]) by ietfa.amsl.com (Postfix) with ESMTP id 077CF21E80F5 for ; Thu, 7 Nov 2013 09:08:26 -0800 (PST) Received: from smtp1.sunet.se (smtp1.sunet.se [IPv6:2001:6b0:8:2::214]) by e-mailfilter01.sunet.se (8.14.3/8.14.3/Debian-9.4) with ESMTP id rA7H8M7g025680 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 7 Nov 2013 18:08:22 +0100 Received: from kerio.sunet.se (kerio.sunet.se [192.36.171.210]) by smtp1.sunet.se (8.14.4/8.14.4) with ESMTP id rA7H8JwY000743 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 7 Nov 2013 18:08:21 +0100 (CET) X-Footer: c3VuZXQuc2U= Received: from [31.133.160.141] ([31.133.160.141]) (authenticated user leifj@sunet.se) by kerio.sunet.se (Kerio Connect 8.1.2) (using TLSv1/SSLv3 with cipher AES256-SHA (256 bits)) for scim@ietf.org; Thu, 7 Nov 2013 18:08:17 +0100 Message-ID: <527BC8FF.6000606@sunet.se> Date: Thu, 07 Nov 2013 18:08:15 +0100 From: Leif Johansson User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.1.0 MIME-Version: 1.0 To: "scim@ietf.org" X-Enigmail-Version: 1.6 Content-Type: multipart/alternative; boundary="------------030405000806000005020907" X-Bayes-Prob: 0.0001 (Score 0, tokens from: outbound, sunet-se:default, base:default, @@RPTN) X-CanIt-Geo: ip=192.36.171.210; country=SE; latitude=62.0000; longitude=15.0000; http://maps.google.com/maps?q=62.0000,15.0000&z=6 X-CanItPRO-Stream: outbound-sunet-se:outbound (inherits from outbound-sunet-se:default, sunet-se:default, base:default) X-Canit-Stats-ID: 09KKF8m5E - 8501b736005d - 20131107 X-CanIt-Archive-Cluster: PfMRe/vJWMiXwM2YIH5BVExnUnw X-Scanned-By: CanIt (www . roaringpenguin . com) Subject: [scim] Notes from 16/10 X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2013 17:09:12 -0000 This is a multi-part message in MIME format. --------------030405000806000005020907 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit I just realized I forgot to send out notes from our 16/10 confcall. - Kelly Grizzle - Barry Leiba - Anthony Nadalin - Bjorn Aannestad - Jeff Moore - Leif Johansson - Mark Diodati - Phil Hunt Issue #2 - Kelly added comments. Will be fixed with changes for issue #10. Ask list if there are any problems with leaving Group.members as default. Issue #10 - Phil will propose a conclusion on list and ask for any objections. Leif and Morteza will push group towards a decision. Issue #13 - Still waiting on Erik Issue #24 - Bjorn has proposal out. Leif will push for conclusion on list. Issue #34 - Kelly owns ... no work done yet Issue #35 - Phil owns Issue #37 o Mark in favor of error response. o ServiceProviderConfig already has filter.maxResults. o Phil added summary of discussion to ticket 2 weeks ago. o Would be good to discuss this issue in Vancouver. Issue #39 - Erik to look at this one Issue #42 - Phil owns Issue #46 - Kelly owns Issue #50 o Bjorn has a proposal that uses a back-reference ... will put in next couple of days. o Now that filters are getting more complex, Leif thinks we should compare the filter syntax to JSON Path. o Barry thinks that we should present this issue to the JSON WG. o Bjorn will summarize various proposals and present on list - perhaps in Vancouver o Jeff asked if the spec say anything about what is allowed as an attribute names? This could affect filter parser behavior. Maybe this should be addressed in another ticket. --------------030405000806000005020907 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit

I just realized I forgot to send out notes from our 16/10 confcall.

- Kelly Grizzle

- Barry Leiba

- Anthony Nadalin

- Bjorn Aannestad

- Jeff Moore

- Leif Johansson

- Mark Diodati

- Phil Hunt

 

Issue #2 - Kelly added comments.  Will be fixed with changes for issue #10.  Ask list if there are any problems with leaving Group.members as default.

Issue #10 - Phil will propose a conclusion on list and ask for any objections.  Leif and Morteza will push group towards a decision.

Issue #13 - Still waiting on Erik

Issue #24 - Bjorn has proposal out.  Leif will push for conclusion on list.

Issue #34 - Kelly owns ... no work done yet

Issue #35 - Phil owns

Issue #37

  o Mark in favor of error response.

  o ServiceProviderConfig already has filter.maxResults.

  o Phil added summary of discussion to ticket 2 weeks ago.

  o Would be good to discuss this issue in Vancouver.

Issue #39 - Erik to look at this one

Issue #42 - Phil owns

Issue #46 - Kelly owns

 

Issue #50

o Bjorn has a proposal that uses a back-reference ... will put in next couple of days.

o Now that filters are getting more complex, Leif thinks we should compare the filter syntax to JSON Path.

o Barry thinks that we should present this issue to the JSON WG.

o Bjorn will summarize various proposals and present on list - perhaps in Vancouver

o Jeff asked if the spec say anything about what is allowed as an attribute names?  This could affect filter parser behavior.  Maybe this should be addressed in another ticket.

--------------030405000806000005020907-- From prateek.mishra@oracle.com Thu Nov 7 10:44:02 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4E7B21E821C; Thu, 7 Nov 2013 10:44:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qSsQjbjM5YPB; Thu, 7 Nov 2013 10:43:56 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id 2347321F9F70; Thu, 7 Nov 2013 10:43:33 -0800 (PST) Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rA7Ih6pp024661 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 7 Nov 2013 18:43:07 GMT Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7Ih6HC025628 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 7 Nov 2013 18:43:06 GMT Received: from abhmp0020.oracle.com (abhmp0020.oracle.com [141.146.116.26]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7Ih5xM012207; Thu, 7 Nov 2013 18:43:05 GMT Received: from [130.35.50.47] (/130.35.50.47) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 07 Nov 2013 10:43:05 -0800 Message-ID: <527BDF38.6040106@oracle.com> Date: Thu, 07 Nov 2013 10:43:04 -0800 From: Prateek Mishra Organization: Oracle Corporation User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130911 Thunderbird/17.0.9 MIME-Version: 1.0 To: security-services@lists.oasis-open.org, IETF oauth WG , scim@ietf.org References: <5E393DF26B791A428E5F003BB6C5342A322F6D72@OC11EXPO24.exchange.mit.edu> In-Reply-To: Content-Type: multipart/alternative; boundary="------------090408080407010604000603" X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Subject: [scim] FYI: The Java Identity Api - public review ongoing X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2013 18:44:02 -0000 This is a multi-part message in MIME format. --------------090408080407010604000603 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit ABSTRACT: The objective of this project is to define application programming interfaces and identity interaction models to facilitate the use and creation of identity by Java applications. To meet this objective, this specification defines a /representation for identity/ in Java, an /attribute/ service as a point of governance and interaction with identity, and an /identity repository integration/ architecture in support of distributed sources of identity. The identity representation is integrated with the Java security model and captures identity attributes as named, metadata qualified (e.g., issuer, validity period, usage constraints) representations of identity values. The attribute service is a protected service from which applications request interfaces to operate on the content of the integrated identity repositories. In addition to value based interactions with identity, and in support of privacy preserving exchange of identity, the attribute also service provides interfaces to obtain and operate on references to identity attributes. Above the interfaces provided by the attribute service, the specification also defines annotations and interceptor bindings that provide application developers with a simple means to cause identity attributes to be obtained or provided to the attribute service by an annotated application. More information available at: http://jcp.org/aboutJava/communityprocess/edr/jsr351/index.html --------------090408080407010604000603 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit

ABSTRACT:

The objective of this project is to define application programming interfaces and identity interaction models to facilitate the use and creation of identity by Java applications. To meet this objective, this specification defines a representation for identity in Java, an attribute service as a point of governance and interaction with identity, and an identity repository integration architecture in support of distributed sources of identity.

The identity representation is integrated with the Java security model and captures identity attributes as named, metadata qualified (e.g., issuer, validity period, usage constraints) representations of identity values. The attribute service is a protected service from which applications request interfaces to operate on the content of the integrated identity repositories. In addition to value based interactions with identity, and in support of privacy preserving exchange of identity, the attribute also service provides interfaces to obtain and operate on references to identity attributes. Above the interfaces provided by the attribute service, the specification also defines annotations and interceptor bindings that provide application developers with a simple means to cause identity attributes to be obtained or provided to the attribute service by an annotated application.

More information available at:
http://jcp.org/aboutJava/communityprocess/edr/jsr351/index.html

--------------090408080407010604000603-- From phil.hunt@oracle.com Thu Nov 7 10:55:56 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CC6411E8222 for ; Thu, 7 Nov 2013 10:55:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.243 X-Spam-Level: X-Spam-Status: No, score=-6.243 tagged_above=-999 required=5 tests=[AWL=0.354, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NEPcNuC-E3gp for ; Thu, 7 Nov 2013 10:55:50 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id BDC6C11E81BD for ; Thu, 7 Nov 2013 10:55:46 -0800 (PST) Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rA7Itf7j007550 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 7 Nov 2013 18:55:41 GMT Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7Itea4012182 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 7 Nov 2013 18:55:40 GMT Received: from abhmt110.oracle.com (abhmt110.oracle.com [141.146.116.62]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7IteRY019580 for ; Thu, 7 Nov 2013 18:55:40 GMT Received: from dhcp-a36c.meeting.ietf.org (/31.133.163.108) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 07 Nov 2013 10:55:39 -0800 From: Phil Hunt Content-Type: multipart/alternative; boundary="Apple-Mail=_2AAD72B7-4C10-447F-AE25-34467D81C5C3" Message-Id: Date: Thu, 7 Nov 2013 10:55:43 -0800 To: "scim@ietf.org WG" Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) X-Mailer: Apple Mail (2.1510) X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Subject: [scim] Issue 35 - mutability X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2013 18:55:56 -0000 --Apple-Mail=_2AAD72B7-4C10-447F-AE25-34467D81C5C3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii My apologies, I realized that my todos for this week were not complete. = Issue 35, attribute mutability is as follows: Proposed amendement: In section 10, the list of attributes for schema is amended as follows. REMOVED: readOnly A Boolean value that specifies if the attribute is mutable. ADDED: mutability A single keyword indicating what types of modifications an = attribute MAY accept as follows: readOnly - The attribute MAY NOT be modified readWrite - The attribute MAY be updated and read at any time. immutable - The attribute MAY be defined at Resource creation.=20 The attribute MAY NOT be updated. writeOnly - The attribute MAY be updated at any time. The = attributes value=20 MAY NOT be returned [ex the value is a stored hash] I propose that we go through the list of attributes and default values = for returnability, mutability, etc this week at IETF88 (tomorrow). Phil @independentid www.independentid.com phil.hunt@oracle.com --Apple-Mail=_2AAD72B7-4C10-447F-AE25-34467D81C5C3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii My = apologies, I realized that my todos for this week were not complete. =  Issue 35, attribute mutability is as = follows:

In section 10, the list of attributes for schema is amended as = follows.
REMOVED:

readOnly  A Boolean value that specifies if the attribute is
            mutable.


= --Apple-Mail=_2AAD72B7-4C10-447F-AE25-34467D81C5C3-- From phil.hunt@oracle.com Thu Nov 7 11:34:02 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E28C11E8115 for ; Thu, 7 Nov 2013 11:34:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.251 X-Spam-Level: X-Spam-Status: No, score=-6.251 tagged_above=-999 required=5 tests=[AWL=0.346, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eMmCY4k2Vrix for ; Thu, 7 Nov 2013 11:33:55 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id 37D5F11E8188 for ; Thu, 7 Nov 2013 11:33:55 -0800 (PST) Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rA7JXnkN021159 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 7 Nov 2013 19:33:50 GMT Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7JXmhg003060 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 7 Nov 2013 19:33:49 GMT Received: from abhmt112.oracle.com (abhmt112.oracle.com [141.146.116.64]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7JXmpB001195 for ; Thu, 7 Nov 2013 19:33:48 GMT Received: from dhcp-a36c.meeting.ietf.org (/31.133.163.108) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 07 Nov 2013 13:02:37 -0600 MIME-Version: 1.0 Message-ID: <05105677-A90E-45BF-A6C0-CC7F12B9BBDA@oracle.com> Date: Thu, 7 Nov 2013 11:02:40 -0800 (PST) From: Phil Hunt To: "scim@ietf.org WG" References: In-Reply-To: X-Mailer: Apple Mail (2.1510) Content-Type: multipart/alternative; boundary="__1383852827970426235abhmt112.oracle.com" X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Subject: Re: [scim] Issue 35 - mutability X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2013 19:34:03 -0000 --__1383852827970426235abhmt112.oracle.com Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Regarding immutable attributes. I believe we had some discussion on the = phone as to whether "PUT" (swapping the record) counts as resource = creation. I have no opinion, but we should decide for clarity/interop reasons. I = propose we discuss this tomorrow. Phil @independentid www.independentid.com phil.hunt@oracle.com On 2013-11-07, at 10:55 AM, Phil Hunt wrote: > My apologies, I realized that my todos for this week were not = complete. Issue 35, attribute mutability is as follows: >=20 > Proposed amendement: >=20 > In section 10, the list of attributes for schema is amended as = follows. > REMOVED: >=20 > readOnly A Boolean value that specifies if the attribute is > mutable. > ADDED: >=20 > mutability A single keyword indicating what types of modifications an = attribute MAY > accept as follows: > readOnly - The attribute MAY NOT be modified > readWrite - The attribute MAY be updated and read at any time. > immutable - The attribute MAY be defined at Resource creation.=20= > The attribute MAY NOT be updated. > writeOnly - The attribute MAY be updated at any time. The = attributes value=20 > MAY NOT be returned [ex the value is a stored hash] >=20 > I propose that we go through the list of attributes and default values = for returnability, mutability, etc this week at IETF88 (tomorrow). >=20 > Phil >=20 > @independentid > www.independentid.com > phil.hunt@oracle.com >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --__1383852827970426235abhmt112.oracle.com Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: quoted-printable
I have no opinion, but we should = decide for clarity/interop reasons.  I propose we discuss this = tomorrow.


On 2013-11-07, at 10:55 AM, Phil Hunt <phil.hunt@oracle.com> = wrote:

My = apologies, I realized that my todos for this week were not complete. =  Issue 35, attribute mutability is as = follows:

In section 10, the list of attributes for schema is amended as = follows.
REMOVED:

readOnly  A Boolean value that specifies if the attribute is
            mutable.

www.independentid.com
phil.hunt@oracle.com
=

_______________________________________________
scim = mailing list
scim@ietf.org
https://www.ietf.org/ma= ilman/listinfo/scim

= --__1383852827970426235abhmt112.oracle.com-- From phil.hunt@oracle.com Thu Nov 7 13:39:53 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C389221E817B for ; Thu, 7 Nov 2013 13:39:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.258 X-Spam-Level: X-Spam-Status: No, score=-6.258 tagged_above=-999 required=5 tests=[AWL=0.339, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ZmRc+83GMQe for ; Thu, 7 Nov 2013 13:39:47 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id A410121E816C for ; Thu, 7 Nov 2013 13:39:47 -0800 (PST) Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rA7LdjBa007975 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 7 Nov 2013 21:39:46 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7LdiOm015268 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 7 Nov 2013 21:39:44 GMT Received: from abhmp0018.oracle.com (abhmp0018.oracle.com [141.146.116.24]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7LdiMK003364 for ; Thu, 7 Nov 2013 21:39:44 GMT Received: from dhcp-a36c.meeting.ietf.org (/31.133.163.108) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 07 Nov 2013 13:39:43 -0800 From: Phil Hunt Content-Type: multipart/alternative; boundary="Apple-Mail=_2DB70E99-95A2-441C-AD59-74095C834CA2" Message-Id: <43969E5C-E0B4-4C0E-B2AE-EDD952BEF06B@oracle.com> Date: Thu, 7 Nov 2013 13:39:46 -0800 To: "scim@ietf.org WG" Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) X-Mailer: Apple Mail (2.1510) X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Subject: [scim] Table of default attribute schema values for index, returned, mutability values for SCIM WG meeting X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2013 21:39:53 -0000 --Apple-Mail=_2DB70E99-95A2-441C-AD59-74095C834CA2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii As discussed, here is a first cut of default values for tickets 10, 35, = 47 These are not final. I am assuming we will make corrections. Please let = me know if I missed any attributes. Thanks! Phil @independentid www.independentid.com phil.hunt@oracle.com --Apple-Mail=_2DB70E99-95A2-441C-AD59-74095C834CA2 Content-Type: multipart/mixed; boundary="Apple-Mail=_A7144CFE-B5A1-4BA1-95F4-CB16FE5D25A8" --Apple-Mail=_A7144CFE-B5A1-4BA1-95F4-CB16FE5D25A8 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii As = discussed, here is a first cut of default values for tickets 10, 35, = 47

These are not final. I am assuming we will make = corrections.  Please let me know if I missed any = attributes.

Thanks!

= --Apple-Mail=_A7144CFE-B5A1-4BA1-95F4-CB16FE5D25A8 Content-Disposition: inline; filename=IETF88-scim-attribute-matrix.pdf Content-Type: application/pdf; x-unix-mode=0644; name="IETF88-scim-attribute-matrix.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAGlU8tOwzAQvPsrlkeLU6jrtWM74U0rLtwqReJAOUVUHFqk kv+XmLiJS2lvJAdP9pGd2V1vaE4b0qSVxmOsyV3BFLhUJR5yuabvD3qlL5rMGqa6IY5vUyPJ2S5s nTJEsq2Srfu51aG0haVVKrezfNJy1FYwbQWwwdvUYoNSLWTyrDgSsj4oDo7qNU0ryvPox1F45Qvt PY3xUa1pUlVIQWa1pDeSJ6eZGGtlSZ5ltAXnETiSgwwEze4cRgeTvEhoIfvgRRaREfJklNyX7R9y klfRhyLjzqD6tEkECNE9YNPFDDPxTtULPVdxFIeK2R1VzLZQRQj7gkUv+F+UbCTJQiaFebSgST1r 1xt8UhSiCQ1lpO0kaeVsMC4vRULoVmfDlLF+vWaGVEPGts3cDtiaOGAcXMBn2gFbIw4HXHTdLCMJ NDq1PtFKYq4T5Zu4FYjep/yXEZcmMcLy4KI4qmr6RQ5baSw2b4wb4QM29QjF2ztww1rdt0RwDh46 8Pg0ne21bP4DaZmvhQplbmRzdHJlYW0KZW5kb2JqCjUgMCBvYmoKMzkxCmVuZG9iagoyIDAgb2Jq Cjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyA2IDAgUiAvQ29udGVudHMg NCAwIFIgL01lZGlhQm94IFswIDAgNzIwIDU0MF0KPj4KZW5kb2JqCjYgMCBvYmoKPDwgL1Byb2NT ZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiAvQ3MyIDggMCBSID4+ IC9Gb250IDw8Ci9UVDEuMSAxMCAwIFIgPj4gPj4KZW5kb2JqCjExIDAgb2JqCjw8IC9MZW5ndGgg MTIgMCBSIC9OIDMgL0FsdGVybmF0ZSAvRGV2aWNlUkdCIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+ CnN0cmVhbQp4AYVV32/bVBQ+iW9SpBY/IFhHh4rFr1VTW7kbGq3GBkmTpe1KFqXp2Cok5Do3iakb B9vptqpPe4E3BvwBQNkDD0g8IQ0GYnvZ9sC0SVOHKqpJSHvoxA8hJu0FVeG7dmInU8Rc9frLOd85 5zvnXttEPV9ptZoZVYiWq66dzySVk6cWlJ5NitKz1EsD1KvpTi2Ry80SLsEV987r4R2KCMvtke7+ TvYjv3qL3NGJIk/AbhUdfRn4DFHM1Gu2SxS/B/v4abcG3PMc8NM2BAKrApd9nBJ40ccnPU4hPwmO 0CrrFa0IvAY8vNhmL7dhXwMYyJPhVW4buiJmkbOtkmFyz+Evj3G3Mf8PLpt19Oxdg1j7nKW5Y7gP id4r9lS+iT/XtfQc8EuwX6+5SWF/BfiP+tJ8AngfUfSpkn103udHX1+tFN4G3gV70XCnC037anUx exwYsdH1JeuYyCM413VnErOkF4DvVvi02GPokajIU2ngYeDBSn2qmV+acVbmhN3Ls1qZzAIjj2S/ p83kgAeAP7StvKgFzdI6NzOiFvJLV2turqlB2q6aWVEL/TKZO16PyCltu5XClB/LDrp2oRnLFkrG 0ekmf61memcR2tgFu54X2pCf3dLsdAYYedg/vDov5gYc213UUmK2o8BH6EREI04WLWLVqUo7pFCe MpTEvUY2PCUyyISFw8thMSJP0hJs3Xk5j+PHhIyyF70tolGlO8evcL/JsVg/U9kB/B9is+wwG2cT pLA32JvsCEvBOsEOBQpybToVKtN9KPXzvE91VBY6TlDy/EB9KIhRztnvGvrNj/6GmrBLK/QjT9Ax NFvtEyAHE2h1N9I+p2trP+wOPMoGu/jO7b5ra3T8cfON3Yttxzawbsa2wvjYr7Et/G1SAjtgeoqW ocrwdsIJeCMdPVwB0yUN62/gWdDaUtqxo6Xq+YHQIybBP8g+zNK54dCq/qL+qW6oX6gX1N87aoQZ O6YkfSp9K/0ofSd9L/1MinRZuiL9JF2VvpEuBTm7772fJdh7r19hE92KXWjVa581J1NOynvkF+WU /Lz8sjwbsBS5Xx6Tp+S98OwJ9s0M/R29GHQKs2pNtXst8QQYNA8lBp0G18ZUxYSrdBZZ25+TplI2 yMbY9COndlyc5ZaKeDqeiidIie+LT8TH4jMCt568+F74JrCmA/X+kxMwOjrgbSxMJcgz4p06cVZF 9Ap0m9DNXX4G3w6iSat21jbKFVfZr6qvKQl8yrgyXdVHhxXNNBXP5Sg2d7i9woujJL6DIo7oQd77 vkV23Qxt7ltEh//CO+tWaFuoE33tEPW/GtqG8E585jOiiwf1ur3i56NI5AaRUzqw3/sd6Uvi3XS3 0XiA91XPJ0Q7Hzca/643GjtfIv8W0WXzP1kAcXgKZW5kc3RyZWFtCmVuZG9iagoxMiAwIG9iagox MDQ3CmVuZG9iago3IDAgb2JqClsgL0lDQ0Jhc2VkIDExIDAgUiBdCmVuZG9iagoxMyAwIG9iago8 PCAvTGVuZ3RoIDE0IDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJHQiAvRmlsdGVyIC9GbGF0 ZURlY29kZSA+PgpzdHJlYW0KeAGdlndUU9kWh8+9N73QEiIgJfQaegkg0jtIFQRRiUmAUAKGhCZ2 RAVGFBEpVmRUwAFHhyJjRRQLg4Ji1wnyEFDGwVFEReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oA UPyCBMJ0WAGANKFYFO7rwVwSE8vE9wIYEAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4ugGS72yy/ UCZz1v9/kSI3QyQGAApF1TY8fiYX5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi48SvbPan5iu7yZiX JuShGlnOGbw0noy7UN6aJeGjjAShXJgl4GejfAdlvVRJmgDl9yjT0/icTAAwFJlfzOcmoWyJMkUU Ge6J8gIACJTEObxyDov5OWieAHimZ+SKBIlJYqYR15hp5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyO MBeAr2+WRQElWW2ZaJHtrRzt7VnW5mj5v9nfHn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9FgD2JFqb HbO+lVUAtG0GQOXhrE/vIADyBQC03pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivoN/ufgm/Kv4Y595nL 7vtWO6YXP4EjSRUzZUXlpqemS0TMzAwOl89k/fcQ/+PAOWnNycMsnJ/AF/GF6FVR6JQJhIlou4U8 gViQLmQKhH/V4X8YNicHGX6daxRodV8AfYU5ULhJB8hvPQBDIwMkbj96An3rWxAxCsi+vGitka9z jzJ6/uf6Hwtcim7hTEEiU+b2DI9kciWiLBmj34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAAhIBI EAOWAy5IAmlABLJBPtgACkEx2AF2g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqGwUswAd6BaQiC 8BAVokGqkBakD5lC1hAbWgh5Q0FQOBQDxUOJkBCSQPnQJqgYKoOqoUNQPfQjdBq6CF2D+qAH0CA0 Bv0BfYQRmALTYQ3YALaA2bA7HAhHwsvgRHgVnAcXwNvhSrgWPg63whfhG/AALIVfwpMIQMgIA9FG WAgb8URCkFgkAREha5EipAKpRZqQDqQbuY1IkXHkAwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWYY5hW TBfmNmYQM4H5gqVi1bGmWCesP3YJNhGbjS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxwfrgYXDJuNa4E tw/XjLuA68MN4SbxeLwq3hTvgg/Bc/BifCG+Cn8cfx7fjx/GvyeQCVoEa4IPIZYgJGwkVBAaCOcI /YQRwjRRgahPdCKGEHnEXGIpsY7YQbxJHCZOkxRJhiQXUiQpmbSBVElqIl0mPSa9IZPJOmRHchhZ QF5PriSfIF8lD5I/UJQoJhRPShxFQtlOOUq5QHlAeUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX 48mtk6uRa5Xrl3slT5TXl3eXXy6fJ18hf0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqilWKIYppi iWKD4jXFUSW8koGStxJPqUDpsNIlpSEaQtOledK4tE20Otpl2jAdRzek+9OT6cX0H+i99AllJWVb 5SjlHOUa5bPKUgbCMGD4M1IZpYyTjLuMj/M05rnP48/bNq9pXv+8KZX5Km4qfJUilWaVAZWPqkxV b9UU1Z2qbapP1DBqJmphatlq+9Uuq43Pp893ns+dXzT/5PyH6rC6iXq4+mr1w+o96pMamhq+Ghka VRqXNMY1GZpumsma5ZrnNMe0aFoLtQRa5VrntV4wlZnuzFRmJbOLOaGtru2nLdE+pN2rPa1jqLNY Z6NOs84TXZIuWzdBt1y3U3dCT0svWC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpgi0GbwaihiqG/YZ5h o+FjI6qRq9Eqo1qjO8Y4Y7ZxivE+41smsImdSZJJjclNU9jU3lRgus+0zwxr5mgmNKs1u8eisNxZ WaxG1qA5wzzIfKN5m/krCz2LWIudFt0WXyztLFMt6ywfWSlZBVhttOqw+sPaxJprXWN9x4Zq42Oz zqbd5rWtqS3fdr/tfTuaXbDdFrtOu8/2DvYi+yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7xjOMH J3snsdNJp9+dWc4pzg3OowsMF/AX1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6zE3Xjed2xG3E 3dg92f24+ysPSw+RR4vHlKeT5xrPC16Il69XkVevt5L3Yu9q76c+Oj6JPo0+E752vqt9L/hh/QL9 dvrd89fw5/rX+08EOASsCegKpARGBFYHPgsyCRIFdQTDwQHBu4IfL9JfJFzUFgJC/EN2hTwJNQxd FfpzGC4sNKwm7Hm4VXh+eHcELWJFREPEu0iPyNLIR4uNFksWd0bJR8VF1UdNRXtFl0VLl1gsWbPk RoxajCCmPRYfGxV7JHZyqffS3UuH4+ziCuPuLjNclrPs2nK15anLz66QX8FZcSoeGx8d3xD/iRPC qeVMrvRfuXflBNeTu4f7kufGK+eN8V34ZfyRBJeEsoTRRJfEXYljSa5JFUnjAk9BteB1sl/ygeSp lJCUoykzqdGpzWmEtPi000IlYYqwK10zPSe9L8M0ozBDuspp1e5VE6JA0ZFMKHNZZruYjv5M9UiM JJslg1kLs2qy3mdHZZ/KUcwR5vTkmuRuyx3J88n7fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tndd wbrh9b7rj20gbUjZ8MtGy41lG99uit7UUaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt3WazrWrb lyJe0fViy+KK4k8l3JLr31l9V/ndzPaE7b2l9qX7d+B2CHfc3em681iZYlle2dCu4F2t5czyovK3 u1fsvlZhW3FgD2mPZI+0MqiyvUqvakfVp+qk6oEaj5rmvep7t+2d2sfb17/fbX/TAY0DxQc+HhQc vH/I91BrrUFtxWHc4azDz+ui6rq/Z39ff0TtSPGRz0eFR6XHwo911TvU1zeoN5Q2wo2SxrHjccdv /eD1Q3sTq+lQM6O5+AQ4ITnx4sf4H++eDDzZeYp9qukn/Z/2ttBailqh1tzWibakNml7THvf6YDT nR3OHS0/m/989Iz2mZqzymdLz5HOFZybOZ93fvJCxoXxi4kXhzpXdD66tOTSna6wrt7LgZevXvG5 cqnbvfv8VZerZ645XTt9nX297Yb9jdYeu56WX+x+aem172296XCz/ZbjrY6+BX3n+l37L972un3l jv+dGwOLBvruLr57/17cPel93v3RB6kPXj/Mejj9aP1j7OOiJwpPKp6qP6391fjXZqm99Oyg12DP s4hnj4a4Qy//lfmvT8MFz6nPK0a0RupHrUfPjPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7vWdi ycTwa9HrmT9K3qi+OfrW9m3nZOjk03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5WfjT93fAn88ngm bWbm3/eE8/sKZW5kc3RyZWFtCmVuZG9iagoxNCAwIG9iagoyNjEyCmVuZG9iago4IDAgb2JqClsg L0lDQ0Jhc2VkIDEzIDAgUiBdCmVuZG9iagoxNiAwIG9iago8PCAvTGVuZ3RoIDE3IDAgUiAvRmls dGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAG9WOtyGzUU/q+nOC0hlQtWVpe9DTQd2iZAgULA wA/CLw8dhmmYCXkm3qeP1E9a6Uhrr5M1TrBnLK+0e67f+XS013RB11RRpSp8jDWu7jS1ulc9PlS7 iv75g36lv+nk5Y2m9Q3p8L1Z46Haxtuu+AnBc+94Lgq3VdvbztI7Vpdn/qS3T70G4zXAGnxv1uIa qvxfTc4qHQxyfa/a1vW0vqIXq0GyptWanAu3YoATyhjT0hIXqys6Wa200gJ3vaXfSL46NQtIlMvw e6qGq7PjBf1Oq9d0tgoR2VasK+UGrcKaoCsMS/wOSozylkKJ/HdBq78GSSlqyScEe1q0GBzKorVW prLaUNaAIEQNj0YaRlGja7i6GbVsPGUNph2SXmhAoAYNCNRHC1pWygqpwp+a5PkCAUfovvSjI4nQ hVEjeLgVKy/8jCH5RRx54Un8J+RX/FQVnoIcpCLI+SxNpFu+ThMs53WYgYazhQiaGhtmoJvv4Zkk huXyCrv0zfC0kKfeBkvZWf1ttOq7pBIKpiDS9hGbtjXKxTyaLuQgDEvrVLuNkvejHIbamkDJHdJ1 reo2gL1UMgsoRXmNlcTayi4Yo2rPDgBK4UnGipBNG4IEjJzFzDcpfBzz534Fd3CeOC0pT6c+p8hB uk64KJ7MCbilssbuxIwAoPABjLCm7JnuNWbrfuyZK6rg0WN4BnT5atBCHn18/KSEwSZnFfU9tmI7 qK1TTndRs2Ci4vorvB6KK4UjhedNiDnqhwtpWBGSY+4rM4dsgnssyDLSWsEMFazqVdOCcqNh/5nc CgUFbxbkFvVEEp2F3CmKK/QUjhQUN9ZTgjcSXVH75x6qtxLdywjz7+MYQS1kIjqSP8Qlzo5uTlLG mH+4bngm8o7wdTKVOoaV6RpOXUa0T11RpMjbsPPJPelmWvoG3URwzEwa73xTLojswl10kzeMVAkN bxSvQoRRqEwuHGEQ0ux4DmRRgywKu7RpVNM04wAzkORzJCxt+7nSxr5GLgpU5KWXVOSbqc64sfiS ii7l46PQtGD3h4eXi0v5NFyDkQBWENVs/4pg153qugbdUoDNHB5iqCaEp3GEdIEYgps4/ClXBa3N NbfIgat6ZepxjDgFaFrS9pO4km3ViRsjQuhAhOQI1gYGaGt3RNDX8TYsuKFFw81VnFuzeyTgQsGD EnCh5/8g4IvIrj/uJmDOPXMB00QC408DXeSWg+84Xohb4YnjCOctY2GbfcN2LvZl32npe7DvBAGV Mgd+s2MG2uDdSAXMQPLok08zlOc0PkmjwEktM2rBeY1TTdXbjfarrGdPqr798inE8GwhiivjV2dn abBgswF0vbKN3lm85k12eVZMN1m97dBgsodT9Bo9PH82uDjbJx/VsJGE82/GoLE4OTqzq1uXFhy5 TUi8T4WkjXrmDZdMg/N1tStnd22Dpfipjty0ONGYemMbZEjIFZj9IOtRt32f2u78fmBou/exfrKG rLbKardrh5I/68PMt7ZWXZvgev/moxx01+82H8R5SPRt2yhbVfcR/qkeynbo8jXO2qMeOIOnPTD6 rsJmbfQu7KP/SHzl2x70aPfAUK7GCU0bvau9MDPKeevw6XB2sHWfqmyTlu7oWTReDz7oobFQ8KA9 S6Fn357lc9934G2GZ+3w0iI2mCR/8SvofD2vh1Mk9xSp66jDCl5iNRX2s3GbnN+lbbcvLJHPkaw9 ttlCsrLR1njxAbTcYrkKZW5kc3RyZWFtCmVuZG9iagoxNyAwIG9iagoxMjk4CmVuZG9iagoxNSAw IG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgMTggMCBSIC9Db250 ZW50cyAxNiAwIFIgL01lZGlhQm94ClswIDAgNzIwIDU0MF0gPj4KZW5kb2JqCjE4IDAgb2JqCjw8 IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgL0NzMiA4 IDAgUiA+PiAvRm9udCA8PAovVFQyLjAgMTkgMCBSIC9UVDMuMSAyMSAwIFIgL1RUNC4xIDIzIDAg UiAvVFQxLjEgMTAgMCBSID4+ID4+CmVuZG9iagoyNSAwIG9iago8PCAvTGVuZ3RoIDI2IDAgUiAv RmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGtWl1vJbcNfdev0KZNcncTz46kGc0MgjZA N98pggZ7i/TzyWgSBOsAWz/k7+dIIiXOSDO+6+s1sJZ1xUPyiKIo2m/19/qt7nXf9fhnnR3G2ejJ LN2Cf3ocev3//+kf9K/65at7o2/vtYlf97cQGh0tu8sSKs+9yXME7vppcbPTb7K6MvOz/vFF0GCD BliDr/tb9RaqwtDowXUmGjQsSzdNw6Jv7/RfznoY4gJ880vn7GysvsEP5zv98nw2XbD1/KP+tzp9 ZZ/DjEGf3HN90+OD05/iwOlTHwf46IaWfBG+YwWLfMAiH8UF6vQxi7JEFydGfXrJWBnUVChDXGMD voomjTzhs9TEgCbbCyv+q8/f6M/P2LKXX2IzfrrPm9J3rl/m3i1AHPtxni2I6abBmMmPoFI7rwcz 6DttljmO3sSRm4duxo7gYx7GrcAqldY739P6MOJFAYXHUYCX3enRmhQ7Qf5N/lHxcgkTRVcCd9rP TsrnH1mel2fACNJ3sxn97B3cnocpUIDRkkghAhJCooDRoiPj2HmVSAhDWM0kkJN3IKg4H8e0MMuz ED4kywQVrI1t147EJdSajCiiBB2MUQghjAqUCFmMm+w4BhrsgkiYERtL4MhOTEhEIEKkQ9bjqCRC aFgICetgl7Q8jmlhJEQKlYWSkI3tymWV4FmKb7yThBBGISTIYR+LiAS6KEKiABFCaMEhu0ydTYTw sBBCMpKEMOaFWR6WRaGyUBJCpmbbWVxCRXFeQZRJQggjE8IYLJJtikCIhhQhIS5ShIRYWUVIQkiE MFp0yFPWsHHAZCheL62O47isSGYiWGBroioTpAqMFl3l07gzggS2spDgZxkTAuSSiAjLyf2gXUUX 3MxJ09KQCYg2psORFEXnaZGU/VnhwmNmRBwkqeJeVgX3pa6yAu5J9yNHxXmSKcslSI6AgxyRtBIF JBwd6ZeYKXFzWBoWEsI6yhFsdfSVFkr5EgkRXFJB2th2xXokVBTnFUSRpIMwCiHBhFU8SOMviogo QIQQWnDIzOEyj0mTh4UQkpGWhzEvzPIyRyR3JSFkanaXxSXUihCiTBJCGJkQxqhAI1COkIMckRAS IYwWHRoNJ01Dw4AZjxDLSMvjmBZK+WhIWVgIUayt2J5Vgluhs1wJrHjtP2gvEyRXgRIhx3WGwnlI mokQ6ZClO8TEQcQrjqaswVbDX5WWxRVFoLBUiMi+FptJFWgIIxV1lU+jUSIqWGshIcoXgawfRk19 r39DYf1LqEItVaFWv3qNufD1+lV4UcT3xDRPQ29QguALVXd4YvBUKkgVynjbj1iFBd4NeE/0IxIu z7nJDNPY41i9Tg+VFcYhLCqeYd7A8twVsN5M1m5geW4N62YTmXonMoiEZdJu6ucBdT3YmK0bF7CQ pxIdvBWPVIDXgUfOMkJBnnoE38VyY4wdbS9weeY62GF2IfoLH9jgOHMd7DwOYUMFLM1cBWutHXu8 ngssz1wHi0CY5xUszVwHu3g/rbbM0sxVsM65aVxtGc88AjbkD7f03o6rVCGm1+fvnY7FbOHw5ljz 3BWw5VDAzGWceocORQkJMfkIQgp4SgwyKngmwXJnJSVotAPeIk9vOysG9UvIx2irGDye8RW/3eD/ 1E8Zcj8FvZLU8kD75D8n7lW8oP4JmiAB6vQ+/fxh+I6V78WFaLSgzVFaGcUUJH0UDEOwg9o7GztU bYfJoKyFtRa7UttG6H9GjZcdO5wPr70DOyQfKvSX0MthtWzGH8npRIY+MTlo4wT/8s+8/uNjm0a7 bGxK9yl6XbeN7VJof8ntch89C0ShqRW6T/hGP40rCsKeh8ZbKzxwm3WWwiMcOVzTTc2rxtup+xr+ nn9JTavtTkvIzU5XHTx98rkn9nmgEP0z/1fiknpk6rTqkRV1aUOjunZgVerUKbf0/kba+DsYA/XY QeNzty+bJpp9FOEq9Ff5sKVdlIYc7uKaS/vdc1VTWUMWKs3cDQaNQew4n2HuiUauarTcZ3UjWrEH uYBxQm+VnX4dmUFw5Z4n90c/Yc7KJj77up0EpAVVNpqGzuLSHxoO6bD5tUMpp8CbCgsFZ8VKOMmw K+0vu1W1Z9Up77c5jriHSVSpQV2az6zVZzt+oChnMnNkBppFHgVUSukU7g3l4G8y44wmee264E80 3im8Glh7/Pm82el47p7KstPWop9ySbQp7A+fQybK+H/wjjFD/FHunbd6/XjR4hB/EcgVvf4/RCxc Vpxbzgy+Jjsf6bUXVZSZAd1wO84PMC5yBEVs4KRC2+M8xwp7fkXMXrIZF0TtZ5E3MJvDIR8aUJvD VoQahW1Tv/fd4t08HdLYSrUC7alSrYB8klRrF4dO2hOEP8fy9hj4nI9Lzl1xlWO4bcqCawR1/A73 jTsphXAbbC+Ek9HlMvmOz12+bzm286k+Tr5R/cUnqOIsHykKZPVAIIsTnAK57b4MZCpn81UqMrBA SxlYou0HcoWImqFxKe5Bbko6WT5UyJ82r9s9ZLcuFvGLimVy+GUd7qEK+e/mCpuRbtEwGmPJUyFf anOrvh0x6bxpmzxdaHLJFx63zuJt284mteWQ+uGBB1KOqOPrMidkX47UC7oqVamDcr3xT74b+SSW dBKbc1x/rC2tjqBxqELCLyGPixBxBCifBL8rtON8Un6J38onqQQozoP3fDEJ9XSe92nH8yE8uCTt D+aTg4tRxV/xl1fDkX6ZT7avGOSTRnKmIyq82c8nEjE8dE+H+aSCfLJ8UiE/WT6pkDc2Pz6fCOSn zScC+GnyiQttl2b9sc2gF+aTXG5zReK/fa4QZagG80coC1tnreSOplWmN53zQzsLN9Mm5Y4mGueO 7eHNdz8nuqqc1jtPwKqcRed+j1x5uOJfKW0fgepUHoEXltN11iL9atXVeyBr7JcMAY1S8GVZIzh2 nDUEZAlnWXpseWqXSSVwer+ycJMqeM9XvRXE9Z/tjQs3HcUoPVzM7uuV4qq/rHIPjYUb6vBxULVu pNQbvPRGyp4W4vbce/A+evf6tuG6jKtt7mhvG91GDayNJ/nJue0vxMbPYSrB38Dt9Re2RmKbMvmc vBZ+ifDGcQeilE2hcFD8t3nl4k4xcqB+G9pQT7mnPIQuzj3V2WfF67O/4RWNjNTB3o+Q0oBKBVMu CDcNqNwTSQULq1//QkG2oLbsH4VIG42d2WbwOkj+xbsY9ir/HeX3vwNtRpNACmVuZHN0cmVhbQpl bmRvYmoKMjYgMCBvYmoKMjQwOQplbmRvYmoKMjQgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVu dCAzIDAgUiAvUmVzb3VyY2VzIDI3IDAgUiAvQ29udGVudHMgMjUgMCBSIC9NZWRpYUJveApbMCAw IDcyMCA1NDBdID4+CmVuZG9iagoyNyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAv Q29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSIC9DczIgOCAwIFIgPj4gL0V4dEdTdGF0ZQo8PCAvR3My IDI4IDAgUiAvR3MxIDI5IDAgUiA+PiAvRm9udCA8PCAvVFQxLjEgMTAgMCBSIC9UVDQuMSAyMyAw IFIgPj4gPj4KZW5kb2JqCjI4IDAgb2JqCjw8IC9UeXBlIC9FeHRHU3RhdGUgL0FBUEw6QUEgdHJ1 ZSA+PgplbmRvYmoKMjkgMCBvYmoKPDwgL1R5cGUgL0V4dEdTdGF0ZSAvQUFQTDpBQSBmYWxzZSA+ PgplbmRvYmoKMzEgMCBvYmoKPDwgL0xlbmd0aCAzMiAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUg Pj4Kc3RyZWFtCngBxVtrr9y2Ef2uX8H0uU5yZZGSKAlpWqBuEqQtigZeIy2S9MtF0yDwLeD6Q/9+ Z4Yzw6HEXWsfbnyBLJdLnpk5PBw+pLxxX7k3rnNd28G/0IdhnL2b/NIu8M+NQ+f+80/3tfu3e/7i rXePb52nv7eP0GnsudmT9mi07rXWMXjfTUs/9+61mss1P7jvP0QLAS2AN/D39rF5A6aw6N3Qt54c GpalnaZhcY9P7vdHNwzUAD5miMDH6B6gfHxyz49H36Krx+/dN+7w7eFZ89C1ozu0z1wqfEKFwR1e PQMHe3fopGKSJvEBf4Imv6Ia7w4fUUVz+JgqoJO0UNjngqJwPqxRBmoT3CE8awh/lIqovdQJ39OP YBy8+M4d/+g+O8KgPf8ChuNfb3VYIIRumbt+AcSxG+c5ADXtNHg/xRHIdH10gx/ck/PLTKXXVOrn oZ1hTOBnKdJgQKsmte9jx+2xJI0QRcrUQZo9uTH4pB7s/1q/NtLcwlDXosOTi3Nv++tX6S/NFZBA unb2Y5xjD2HPw4QUQGlJpDABCSFRIGgUyDi2sUkkYBG8FhI4yCcgKAdPZW6o/aUT/MieGSrEmvju eu5uoUoyqEtj6BCMTAhjbECZkMX3UxhHpCEsoIQZtLEgR2ESQgiBCbEBhQi6T4RwMROC7cAv6zmV uSERYjvlhpaQle9NryaBZ9t9FZ0lhDEyIdgPxjF3sUC7FEIdmBBGw4DCMrUhESLFTAj3sSRgWRpq f/CMOuWGlhB2VX2X7haKuksLpswSwhhKiGBIF/WJgEANSSGoi6QQ1EqhkISQCBE0Cihy1ghUEDIa aW+9pjI1yz2VCOmwdrHJFWwKGM228q80MoYE8TKTEGerCQOyRxHYnMNH6w2F0M+SNAMXhQDyMU2O ZIiC50a27w8NLHnCjNFB6pXDU1MQvrWVW0B4NnziKAfPfXJzC6IKOJMjklWmgDtTIN1CmRJWjsDF TAK24xwhXlOs3ND2z0ogcEsFWxPfG7Fjoai7tGCKLB2MkQlBFwo9WOd3KYI6MCGMhgF52INw0pRi JoT7WM+xLA21v80RKVxLCLuq4Up3C1UQwpRZQhhDCRGMDSgBqULO5IiEkAgRNApo9JI0PRcRk6aQ 9LGeU5kb2v7kSG6YCWnEWvZdTQK3xmZeEsRwGT/Qniu43waUCTm/z2hgPiTLTIgNKPAa4qlAeDnQ lDXEa4i3Sc2oRe6QWcpEaKzZZzYFNGCpIVv5V3LKqEKsZhKof+6g9lEH633FZtVAmxw+dcQQltDO cMbAAwBQJN9E7xIkk0C9MFJpB71WIFkVZExcZdLkqwVY4a0oIRQbv9WEcaOGTFBnc0eTtuCKk9jR rym62LcxU2S+Eb6Nn3Or6Y/BmR7Y2HxVsrRHFk+jdWbnZPqukEvatG8Wk8VTPg2eEmjqmMCNsjY7 Vu2TCNSvfJoZ2iET2OdviE95RzskoelXFCVsPHMPJNB8VQKlB4xALRCtM31XyCWBBq9GltYZvJoN AvVh6jr338a7H/GAGPiAGNyLl3Rq9+7lCzzu02F/mqeh83A6gD84EgNtnVTB/MSz2+MTLB8jtIIG sR/gsN+NMK2lbpjDBAZhZr5MtwgFxknYBo7ucBgZIBkUsFJ3A2z0UwgrWKkrYfvZI1P7yUCvmYRl cv3UzQPeGjy5OfTjMoJ0pCrRwUNxrQE4uEfYTnhjQKuu4Dt77r0PY+gMrtTcBjvMPco88wEDTDW3 wc7jgANqYLnmJtgQwtjB1VaGlZrbYEEI81zAcs1tsEuMUzFkgWtugu37fhqLIZOa22BpHlgS0sy4 Kk9k3Q5wexiKIZOam7wdhrHriiGTmitgMYn2SxfDKKmC8qWpLpPQ7kyMyWcOMOqr3CZ1N8BmhsHN ZZy63uPWTbKaqbyCkAwOHnZLoWGpSbBy96u3y7W7Xw/nK6QCLn49XO7BH308wH/Tle9grnwf0pUs 3NHC5S/f+X7IN7FwSYtQh1/y91/jJ7T8GTWEC1+4hs1XrdkVWPngQDOgH3wBvfKj2frhFVSsiNXs V7pWNvY/4IvhE370EW+jzvhh+WjSFXgQs+LGLzjoRIY7CDlwzYzx6Xdp//F5n8awrHxKmwq4jn+s DFcDN/R2uPqPPkCi4Jobb8fhg7+NBQU45vhoAJbVzaMBWNLbcFYe9omAXrTr9bpc08uV/m8wXnhi EP+KhNBtfVUU+myCHNjoYhrhZn6ICwQ1szzUD7zSP/6YLvRzRElldTTYMpHakT6FgQccX4pyJYqz jxTskwTzlCXJ6rzh9ZMVYSvZbQ5RPfmadSQt9BEJPhCpza7SfFPM8mloJz/OgcMvvKizmPR4mSii PhT6MztvmaqKbtwvOQW3iqKp9rc0es3hmxP2WBIjPB87k/6yIJobBGHC5BG5IEYZbJFhTQ4wrSC9 7JVDJWYrhn1TisVQwZIJxYqCo1NKl1dIIcAFR3181k7aCas8aCI6ylzWZ4BR5Hh5Tqo6tQztGD2w cWlOqqIJhe8zJ501XGQD4LYU4T1yEpu/U05CtN0L1eVCDAtcI+3G16ykQvwccx+swF9wDrxYdOTA ZiZMAR4tzZ2/VHR1tP+D6M4bfu+iE/P3ER2h7RbFFaKLcHXG+Hjg6U7s+9a0HWGygtY+/fsESwYU vv2WPh6eQSY+QAKsbRR0xxXQ6EZoEV4RWfoFDmF6MICVMWX2+l4hLa91NBGadbyxCVyWut07rs0C S4Z3j02Z3WB/WtlxXbTE1uO+dpG1aKdPAOsV8RD+UtsKp3V7CzmWhwo/t4OH91+qqeV3sKfabrK3 yDXVwvP0ZerhnZLaQonS3QOcz4hDaKcuwqVADa7qZpZ6j0fP6u5vzSWI80+0hYAZ5HUPITI9u8OE u8wLzlAqPMHeTIEGp3B638qfMJz2mGS4Hl5+nUs3Z3umQDrE6qK2OnQAFN0fwK0/HqXr5u0UyF5A loItoiaSBl+gEzRW1emxWsPAWNlcm+btCaayFrrIVNU0KwlrvR3r+pRhU8L9OWwpQR9HqDufYslW uQYBZajiVYJd8UKPBIQXTrAVLPHWpld8Y+/d2sLlgV/qe4e2lK48Ezdm+ZbkdmWpFlhZ3XYrtktX BX+sqwrWJpCrzy/wouAF21I9pKwZ0xwgLzdKA/mUZKEj/J2cd/JMeIVbT/tOZnyFtzFQ8y69UhSb ROLhTdUpzKLYYmroTC4YT4qto60417SkEUmIykXtvc4TszzJ5rLBWFN785agHrfV7XrRqbOYdFtH ExaLwVjlw5TETzCl+dAPE7yJBE8riysjwV9nFl2RPiXdgaY+5wNP1J9EuycsszjY7On7aLqQ4cxy T3Gg4Z9uvyh0l3FfLY6zLN5BHLg53C0O3TiZS1+6rvqHquUTWnXgBuudqYgtlzzFue2neaFjMOwG igDrk4jVVkVbify9pCI0/BOqrRr31WqrogmLxWBclYpmfAhCu3R4Ny1tMfGjOImmjRLCS+JR1f2W 1z1ZQDj/NPTKf95mJkVkW5XnK+usx+mnQdWSoK9fm9juvmx796WpGvW1cjBgdzqrbhDvdVQ1wLVd /9UnVYObFXvDQTWSd93+s6ruJKPegGvhMxQrPHrT5Cty+lKS8NkV+rwv+Sz2PtKm2N6dOSVWCbE4 utKU/QMFDac2vbPVDQuc5mrHuLSZFFc22+IJ/kcdH/wFV7JpQ7cCvNPUqaLea/qswO86hVbYl0+j r/4HgAgOBgplbmRzdHJlYW0KZW5kb2JqCjMyIDAgb2JqCjI3OTAKZW5kb2JqCjMwIDAgb2JqCjw8 IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAzMyAwIFIgL0NvbnRlbnRzIDMx IDAgUiAvTWVkaWFCb3gKWzAgMCA3MjAgNTQwXSA+PgplbmRvYmoKMzMgMCBvYmoKPDwgL1Byb2NT ZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiAvQ3MyIDggMCBSID4+ IC9FeHRHU3RhdGUKPDwgL0dzMiAyOCAwIFIgL0dzMSAyOSAwIFIgPj4gL0ZvbnQgPDwgL1RUMS4x IDEwIDAgUiAvVFQ0LjEgMjMgMCBSID4+ID4+CmVuZG9iagozNSAwIG9iago8PCAvTGVuZ3RoIDM2 IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHFWm2PGzUQ/u5fYRAvuba3t7bX +6LSD1AB4kWCqkEFFQToREHVHVK5D/x9ZsYzY++uk1ySk+hJjeN43h4/Ox5P8s6+sO9sa9umhX8+ +C6Ozg5uaib4Z2PX2n/+sK/s3/bq+Z2z13fW0d/dNQjFwMtuVcLo3I3OsfLQDlMYg71Rc3nmL/vm EVrwaAG8gb+7a/MOTOHQ2S40jhzqpqkZhm6y17f2s63tOloALyE2oXch2Et4s721V9uta9DX7Rv7 2mwetRf2sm06uxloEO3mGxo4u/mVBt5ufpM1vS5SMX8BYYD4Vxcm6flIxB/zJ09oItjNJU80NAGW rkSvanNJndmolo7WgBNiKMpEr1LqlQv0IfgO8r/Y7df28615Ya++hC368063qm1CO41tmMD12MZx 9ABXM3TODX0EgG3obec6e2vdNNLoBkcmjF0zwj7BxzKkDZJVt/BJy+txJIvwcxmTAHxokoHoXWIU vr2x+laWl2pIVFck+X4MJE/qbqy8VXO6XBSSkrYZXezHPkDYYzcgBDCaEigmAZAEEgQiTIHE2PQM Ag8VBJFRrw2CBUDwwlJegGBXb9exZ99RfKFqDoYYXsWfJ9gFUWrEJwZkcmHwMSIMfgImECCIkR+Y EUmAASkD8n3TkXc24BCwyYDQusQLMUiA8EICpBSCD9mzEpCF72qnVLUABEXMbUEI1pEBYbMCiCpl QFYMMcoQAYQ0MCBFQH4aGp8YIsMMCK4Dv0rPcSwLERAZk1BeWAKy8N2ISKlqAQg7u4pfJ0gH7KMC IkoZkMMMSQIJENFGAfWcNTwNFAxZX3pNY1qWJVHA5EUFEOJi9plNAaLZVv4Ud6ZkhchnEEgqC2Ql lZyxYgTa5PBJkEIIoyRNz8MMAK2HyEzylmLkRaUsCQgyZfhkJXuLopwnZrbyCjK4iDa/ZdOy3MyU AP0P5ogkwBCUgbQTZzDrcVjmCJEpg6cxLyQgSiH4kD0roVj4rnZKVYSjRGfJ8IwNrCMDwmazSOnH vRhBAgwIC2NAbsSqgY5SGWZW4DrOEYIWRiELS/nMDDa0clUmjIiXqhaAsI5V/DpBOsocIUpJ0X0Y kgQSIKKNAopOkqbjoQIiMqXnNOaFKg+eKSAiJPErfHlCTQK2pU1ZwZAVp0hSWtQZIicic0XKEMgU qzqDT5GkgQEpA/J8hjgaCBhG1pcA0JiWERRZIC8qHhX22WSf2RTAkEXzp+RUCQJ7mVnh/YwTWYnz Q9vaf6HcfotVqOcq1NvnL2EO/14+x3sG3TKGcehaByUI/EEtjRcPmUoFqYHi3rcRVsGCPnRwy2gj JFyZC4PrhtjCY/UyXV9mOvaqhYqnGxdqZe4Mtb0bvF+olbm52jA6QuooMBiEabBhaMcO6npAY/Qh ToCCTiU4ZCtONAC3gx5ylisM6NQJeGfPnXM++rbQKzPnqe3GgOzPeMAG08x5asfY4YYWannmLLXe +9jCnTqrlZnz1AIRxnGmlmfOUzv1/TDbMs8zZ6kNIQxxtmUyc4JazB9hansfZ6mimJ4/f0c9FqOH gBePtcydoTY/FODmFIc2OF9Qopg8AZCsPCWGkhUyk9RKvyUlaLgNv4M8vey3OKhfMB9DswXvivBH L5fwf+qydNplgc5HanlAD+TnDXUooPnxiLsh0ARBVZsP+f3H+Aor36eF0FmBNge3MiipiyuQ9KFg 6NAPbvos/DBrP5wqFStiNfslbRtd+t4FnN67/Qg93vb2+FHiYbDrBL0cMStufMBBJzAyONDGIdsC lqx/st+n6KeFT+k8hQ7YdWW7DDTFyu0Kj9/D6KGNhN0neOF3cbYVuOfYjqvRA04zuGjto0duwuXW 1vcYLbS6eu2QcWfLbCqNrQobyGydDbn3Z1LvD1t23Pq7V2std9RmhtP2HxevNALFbq+evOL9vuT9 VSCwMVh7Cgrzq7iHrhlcHD1s4cgPg6KODcLtW2gPzoJJvNmPIpJF1QCX+6cC47fs/A6ktFcbIrRz MXPAcwU13g5Szju1drOdnj0FEICNn9D/LbAF3lylOQAM3gBLaiCtLRcPARR+4IWfEKUlSeoopcyj URS6oCwtlYB/2zcGMNL9lR3f28TdgR9vdbz/c/XwPJOdK2I+mWUVXQv89Ek9gWPeQ9clJSBiWTTV 1LdkWZNYdZBIqH6V33xsYgeX+zUJqCG/ft6YSVVlCyyIS3h2HOaSyd9luP1cKkBaHJ7LJwEM34dN 6bTalbVgP1MZwVSumi/5lL1I4evzCF9q5KKEs1ZV2y4US0al430HUpo7/BSgb3XgSFPGbiUpTjJQ UJ7RDFQ4TkeH6Ea2V3SDjjZ8YwFfYhzJt7q2XUg9IN+Og/DB+VY3fyrf6tp2oXgC3/puV2WbHwvl Wy4hdL+W+GkJpQM5jXjCbH4Usr7e8TSkhOWPck0dEnOnH35kePUc7MJ8CUDG6MQyqx53SaBjyqy6 Ngnm/DIL2kBQTF/fGriipfI/1Mv/5Rn4wyUmJiinoNzHF8xlWFx9dGFq1RVzgq3tvhCWRaN+W/4A nEDD/yMnqnGfzImqtgfkRMtHGLS201mML5XzA8572Rqt7/WHEU5/cJDWmI3c3FYytV8kzK4czJ4j /Doin5jN/gLIi9minq3DYR6g/IEapix/wPiKtiVvcpZfFD8z/FLxU9NVD+SUCxv8LESr3b2NhGUm kUSCfIEM4vGggde9iYSMHaqzimqYf3YjzDv9cCmjPPx0PPjhUo+7JMQxh0tdm1Di/MMFvmihahgP l8NgvYR9x+8ONt9xh+dTfv2dX7/AV2c05wi6mnJ+Ig1QNKeVwGL+qRRd+pPysmYpfiOWMow4fN/z SVtD6XZwBq0YKex3HEZKAhc612oWvGSZjd4n9reG6nGfTKscTGXbj6TVi/8AaYQEFQplbmRzdHJl YW0KZW5kb2JqCjM2IDAgb2JqCjIxNzkKZW5kb2JqCjM0IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9Q YXJlbnQgMyAwIFIgL1Jlc291cmNlcyAzNyAwIFIgL0NvbnRlbnRzIDM1IDAgUiAvTWVkaWFCb3gK WzAgMCA3MjAgNTQwXSA+PgplbmRvYmoKMzcgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0 IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiAvQ3MyIDggMCBSID4+IC9FeHRHU3RhdGUKPDwg L0dzMiAyOCAwIFIgL0dzMSAyOSAwIFIgPj4gL0ZvbnQgPDwgL1RUMS4xIDEwIDAgUiAvVFQ0LjEg MjMgMCBSID4+ID4+CmVuZG9iagozOSAwIG9iago8PCAvTGVuZ3RoIDQwIDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAG1WUtv3DYQvvNXMEUf6ySW+ZQopOmhRlukzcGBt0iBuL0Y TYMgW8D1oX8/M8MZktJq1+t1nAUiipoXP34ccugb/UbfaKNNZ+Cf8y7EZPVgx26EfzoGo//7W7/V /+qz81urr2+1pd/tNShFz2KboqFK36fSx8a9GUafvP5U3NWeD/r9U/Tg0ANEA7/ba3UDrrBpdfCd pYDCOHbDEEZ9vdE/rnUIJAAP67swjPDhFF7WG322XtsOY12/1+/U6qsTfWo6r1cvqBH0yroTCAwa p/xcyxfp6Kgj6pWnhtUrd6JI5VvpuLpi5UZkarWIPmPJ56QLkZyyseLmjL5AREYaJcZiJdAnh6Fk PzF3qFVftAbqgrhtiQr0/9TrX/VPa5jvs19gJv+5LTMKuJgxGT+CxWhiSi7AMIdg7dBHmAftex1s 0Bttx0StT9TyKXQJphM+S5PmUaQ28MUo1EQZU4Tw+0QBP2YH0dlMvKxVXklcTc2QryKR9fvkW/3y Ku5EXEkHGTFdsrFPvQcAUhgQAmiNDEoGICtkCESZBhJj11Nk2mMTxlpAEJ128NRmwaIvSvCRI9to CbVAVTtYvTU1BYMcq43eGn/tYBtbRhmQ0frBxYgwuBGYkIARI2LkBmZEHi0D0g7I9bCqMiu4WQFB OYirjZzaLEiAtEpVsAVkFrvyxSWQrFWfja4FhG1UQFAP5rGqtIYOYggpMCBsDQfkxqFzGRBpVkBY pwUB2yJY9CEyUqqCLSAcaold1FtTpC4SDFkLCNsogIgNUSkxkSFgQ2YI8iIzBLkyYUi2kAERazSg nrOGo4aAoUS+jZraJFY1CxCiMA9R1Q52BYhWX/UrzUwDgkRZQehTy4nGyCGMQHEePnpXNASfJGk6 bgoAFGNeHNkRDZ6FWt0PCnZLQabhQdaqwyuuYPitryoBw2uHTxjVwbNOFW+NFAbsyRHZK0PAyjQQ M1KmhJ3DcbOCgHKcIyRqGisLtvqVCWS8hYK9SexK/LSmSF0kGKIWDrZRAcEQJnyYBO8GY/T/cOT4 iFus4y3W6fNL6MPf5TmeteikNaQhGAv5FX5wMMHDl3Tl3VbBAceZCFIg0PsAJy0TgU3S53rjnDeQ Vy7zEW5iY69ZSOchzcxK3wPM9nZwbmZW+qZmfbKE1L3AYBDGQfvBpICHuY1OzscxQtaXrgyH5ak4 0gEcffpk4PRYHZSuI/CukVtrXXSmsSs9DzMbkkde13BhgqnnYWZTDDihjVnueZBZ51w0UFdUs9Jz hFlcOn40vYuTVdJ0T6l3L0Yk58Z+xmjpe4DZygcIc4yD8dY1aDSdRwBSjTtYGSlNcOaebFbKrZyb 4JR7AylqXm5ZqHcwFUGtZeFQDD96nML/ucgKpciCiiaXMlDbXK2kBnnKdQoUN2hq9Q2/f4dPkMyF WS56aolSQ4F8B6engHFwzTeLQ23HYYtR8SJea1xSjhXRJ1yOQRm1FIfv8RS3J44WD4VFJ9Ro4lbC +JoHncHQKwEHyjOqK+Vd5J/vjym6cRZT3kqgAL5emC4FNXE7Xf7ZExw91LVYVcKD3+IEApxzrMaX 6AGJvHNMj72up+U4IHOB1Ta4xFoVHi/z47Vz35sThT0XWA3D00E1vjQf5UaAYtiihvWu621yYCMx Q8p1wArgXn/MtfCcaMvWYAsmwiOCxQxM8CuIkSZuVo3rxWq8LcKbu43MrP2O5/jJFUX2C8V/ieQt U0kkyu0C3iUsATl1ryYLfQjdYGNGcX6psoxipmTLi9lynZsBFPtyJ/Oag2+RWuRdFNbdbf1ntMkU o4xTLkXs1QnNn1PlNqVEUm5e7qRfhDurWX4cxi6E4MO9ybdgS6jHDFD5Qush1GsA5bm/B5pCKyH8 EvHyHdmhxFsYc0u7wxYv027B1i78jiCdc1C5zeea7M+DBFJjRiO6CWK/Iw9hw6uOC0J/9b+RNLFU ZbXCxB1rIe+LfndMsNAeM13tdfz46Yrdf6F0hdb2nnLapF8n8NB05UYPdWNmDp5MzY4Neg7bq+6H EziTrTrfvXxReaDwyl6OapkH5GGZmwsJt2wWcp/Nl8h3b1uN45w7Gsfq7lwsa2Ff9sCTkFqVtbF/ 22rcNweeY/PHsjXJIPPVdAQP+kCn2Clrxf7W7M8PF+UPFL3gaC/wgNj8NaBkDVvpQtcDM7pwIAvH +oVU1tAlH1MPpMuEp0yX3Y4XeCrDFJoubTY5okPpgu63FnpLl3kU+045btHaruk8gi4eSp+taHfZ v8D9BahQ/fSy5cgpUfD8Q5j1bj9L0P9yUnlklux2PJ8f2GllVF+OJYu4H82SRWu7ZrHO3uLm8uYz AL/ivgplbmRzdHJlYW0KZW5kb2JqCjQwIDAgb2JqCjE3NTAKZW5kb2JqCjM4IDAgb2JqCjw8IC9U eXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyA0MSAwIFIgL0NvbnRlbnRzIDM5IDAg UiAvTWVkaWFCb3gKWzAgMCA3MjAgNTQwXSA+PgplbmRvYmoKNDEgMCBvYmoKPDwgL1Byb2NTZXQg WyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiAvQ3MyIDggMCBSID4+IC9F eHRHU3RhdGUKPDwgL0dzMiAyOCAwIFIgL0dzMSAyOSAwIFIgPj4gL0ZvbnQgPDwgL1RUMS4xIDEw IDAgUiAvVFQ0LjEgMjMgMCBSID4+ID4+CmVuZG9iago0MyAwIG9iago8PCAvTGVuZ3RoIDQ0IDAg UiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGtWW2PHDUM/j6/IkVQ5truXN6TEbRI FIpaFXTVLVRA+cJBQdUtUrkP/CL+J3YSO5mX3b3b0pVuMhnHdh4/cZz0vXgl3gsp5CDhnzbauqhE UOMwwj/hrBR//y5ei7/E+dMbJa5uhEq/mysY5EwR2/GIjvuuua8oNzKMJhpxzeZqz5/i7QO0oNEC eAO/m6vuPZjCphLWDCo5ZMdxCMGO4monvtyKTfJbie2VsDbJ4mMYvY3WRLGBt+1OnG+3alAdiL0V P4v+181jeSY2SvTb/Pji/pn4RWxfiK+3CY5jVpNR102MKmMHq93MJriebb7p9Rm89Jv098kt7XV5 lnVqWqkh2FUjPUxi++7oFIrKDByg0wKntRr86MwUN55D3DzOeBX3u1vCVd03Ug/RqoX/XQYJZgB+ AUoPzyCIVvSPUodJsKWOIXU40Z+nBohgJNMnBQBDo0McshabGlog9EnEUYfnUSF1gUJlaFglQ/dK nH8DrP/jhtkvByPHKM0IGp10MWrkW7BKBe+As8J4YZUVO6HGmFrX2OpMtEME6sNnaibOk9QOvsgi jy0Swu/UTgPgY5cNOIhWXhNg71rwK4m3atJQlsjjfTRpfFJ3LeiVzbE4KUxK5BCV89EbmHa0ASGA 1phB6TIAeUCGgAaniTg3+AJCaTIINIa97hAsAKIItuMJiOLqbjn36jsOn6magkGGF/OvHcUFUtqR TwWQUZmgnUMY9AhMSIAgRjoURuQBBZB2QtoDYzMrsAnYVECSXOYFGUyAFMEESDsIPhbPWkBmvgtT hrSqZoDgkG7XEKLoqIAUHQQIKy2ALBjSMUMIkKShAFK04YT0GAadGULNCgjKgV+t59gmwXZ8GlQF W0Bmvnc0vFU1A6Q4u5g/dyQdEEcGhJRm53WQUvwDefQd5hNd8okWTy+hD3+XT3ETTltwiMFKBWSC X07SkrpyasEErqUDKRDwxsIWLB3kG+pTNo5BSQDxMu/tt1cL3LVxppb6PkCtV0HrmVrqm6o1USWk 7gRGAWEMwgQZLWRoQCNq40YH6YO6MhyqhOJEA5DnfcQdqhrgrhPwrp4rpbTTstFLPSeoRSKZUXrt JgRpuqeo3wmMqPXoZ8Gkvg9QW6EAN0cXpFG6QaPpPAGQqhw8NLjQa/yoJ6ulEpSL3LUSVGGZkSsz zPXwS48N/M3FpgWGUOG3ySUL1DBveqo1HpR6BIqYVLF8Ut4/xSdIfpQEc3GzVpfCUocsadGPUgfP /OiWfihWSlbIavWLyi4WvXcGmXu/H8Zjtj7gR4tHqfE0mSU3Pi6TzmCInsCBMizZpneSf3TYJ6fH mU85i6ZSdwYTuNfB2aANl3l4D2cPNShWj/Aobw4qxhoKjDmeUCBrq0yAekKBHDbog/SAswjT4zmF mitbrkPxcJLowTWqf1kw+RyfULT6C2zkCrd6d2unRjs4r5yGiRJ12bf140Rm3olT3FuGdz1PUdXq e3IUy1RLhtcpv3LOg7NWYhDZ9Qz26/KFJBh8PEQ0QMKRMS1vqDmQ6evmgx2CcvEwinCUqGHJHF3X Bpv6MhhwaPWfEVNelgWwByk+KhsIbHtK1njYm62Akig46mDoQl/g4Qqorzdmj41CAzZwXCtDT8E4 eBarZie4lSjsM1spwMuLA3uBoMFCoQXDB0Dl+SjJJCQfqxsTLpbwuduv8jZ4mZOgOh9SrxIV06m1 IR6nFbY1CeUsmcE1TISzWEDqzCPa6+/W7gXmerE4kDO1Lg5Qx0aoIpZqgSg//ZbuMvaAxDTUQQ1G SbqxWaeKHvCWB24B+n+rt3TjdCjbNto7uA+q2j0c1FXA+xjoy9sh3CEVI/cmRiaXTs0yXUxheXdS 7WkN9wFwg9bYa1fVQyQXrKnyuH/W4Rvm+rTQniBRofVMIzGgUW6m+MalfMdllAa0qK/dkzW4zO7J qsvK+8EvEhdfkz17jCkHrP34/SQpMjcX+CwyM15XaQU3BOsM4kVQ1wfnCf5GOZoWpQHo0iURXkal conXMok+wzWFMJU0z7oUbaC8ty5E/Al3ThjI4hSb8uQMWfihOrO20MNYbji1g0kpGQ+WEHddL8e1 n75eeJNcGFny4fAi2ZSdjSBTi8jyJkgiS76UdN71FGsOCcvS4FP2oDpJHVOcFpNsd/BZnPKN6YG8 dlx7G6eS6++a19aMTJPnkWQ2p3YtrL5Ka1J1PQeKN1UIx2He78MzjoP1Zj2JrFepdYIy/P97z5r2 KXxtjE7cexZGTt179uz/+/TX3QEuUuBiU2HqXimseFFxhcURf55yIZwaaZldZlLUDj7isBbO5ayl 8GZlGb9I6qCWKzf+eRtNCR9PD3lz4KXNmim5sAh7wVmm7Ap5901Hh2Z0rtv4fxk4mXxL7oDiNYLz LqmiO05GrhlaZr/6D9gfe6QKZW5kc3RyZWFtCmVuZG9iago0NCAwIG9iagoxODA4CmVuZG9iago0 MiAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgNDUgMCBSIC9D b250ZW50cyA0MyAwIFIgL01lZGlhQm94ClswIDAgNzIwIDU0MF0gPj4KZW5kb2JqCjQ1IDAgb2Jq Cjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgL0Nz MiA4IDAgUiA+PiAvRXh0R1N0YXRlCjw8IC9HczIgMjggMCBSIC9HczEgMjkgMCBSID4+IC9Gb250 IDw8IC9UVDIuMCAxOSAwIFIgL1RUMy4xIDIxIDAgUiAvVFQ0LjEKMjMgMCBSIC9UVDEuMSAxMCAw IFIgPj4gPj4KZW5kb2JqCjMgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMCAwIDcy MCA1NDBdIC9Db3VudCA3IC9LaWRzIFsgMiAwIFIgMTUgMCBSIDI0IDAgUgozMCAwIFIgMzQgMCBS IDM4IDAgUiA0MiAwIFIgXSA+PgplbmRvYmoKNDYgMCBvYmoKPDwgL1R5cGUgL0NhdGFsb2cgL1Bh Z2VzIDMgMCBSID4+CmVuZG9iagoxMCAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1 ZVR5cGUgL0Jhc2VGb250IC9YR0FGVVkrQ2FsaWJyaSAvRm9udERlc2NyaXB0b3IKNDcgMCBSIC9U b1VuaWNvZGUgNDggMCBSIC9GaXJzdENoYXIgMzMgL0xhc3RDaGFyIDEwMCAvV2lkdGhzIFsgMjUy IDQ4OCA0ODcKNDU5IDUwNyAyMjYgNDk4IDQ1OSA1MzMgODU1IDU3OSA2MzQgMzQ5IDIyOSA1MjUg NTI1IDMzNSA0OTggMzkxIDYxNSAzMDUgNDc5CjIyOSA1MTcgNTI1IDYyMyA1MjUgNjQ2IDUyNyA0 NTIgMjUwIDUwNyA1MDcgNTA3IDUwNyA2NjIgNzE1IDQyMyA0NTUgNTQzIDUyNQozMDMgNTU3IDQ1 MyAzMDMgNTI1IDUwNyA3OTkgNTA3IDUwNyA0MzMgNTI1IDQ3MSAyNjggODkwIDI1MiA1MjkgNDYz IDQ5OCA2NDIKNDIwIDM5NSAzMDYgNTY3IDUwNyA2MzEgMzA3IDMwNyBdID4+CmVuZG9iago0OCAw IG9iago8PCAvTGVuZ3RoIDQ5IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAFd lMtu2zAQRff+Ci7TRWBKFOUGEAQUKQJ40Qfq9gP0oFIBtSzIysJ/33PHbtpmcQ1fzww5Z0hz+7j/ uJ/G1W2/LqfukFY3jFO/pPPpZemSa9PzOG2y3PVjt96c/dYdm3mzpfhwOa/puJ+Gk6uqjXPbb5Sc 1+Xi7j70pza9029flj4t4/Ts7n48HuyXw8s8/0rHNK3Ob+ra9WlguU/N/Lk5Jre10vt9T3xcL/dU /c34fpmToyMqsmtL3alP57np0tJMz2lTeV9XT0/1Jk39m9CtoB26n82yqfKyJtk/OD56PnLPR+Ot 8pbzpiIOqsiV3PQu99l/ydFfG2qHWyd5VleS98VDzX45FmGjbMAi72MhW2AR0VI2YpH34b3sDiv5 LMi+5yui1uwDFlFrtsEibK/kFouwmWyPRd7vctmERd6X1iSIuWGWigaGKZGsngM0ElY9B2gkai0K TTCindoI0Ejsa8nQBCMqBRiYvkStugrASdhOFjgJQGZcBeAkoppGAE5iZbPABQMsk6IdFhE1C2sw 3nJQFFYJBGsD1nA9Vu1bwCoxduEzsKowQIaABU4iKkCwTGyklTlVEyvvZIGT6NmSgSuugK2iwEkA 2kbAcUmUrFkVwElcNgEW0EisrDPiVE1EzUIDqaKaJL2YaFKHwvxMrKzLECGSiGojNjdh1TO3ycRS 2peLacIKPwIosZQlAxcNkLPQ3+3Pxc/Cmz9ChFsC1grhjsbOxWNZuKWh9eo/wi3RkqYaOVgJWHap ImOQWMroGEW0w2U+RBmDRMNKLmGXSNZZc9FMrKy5ccFNHJ+64pRMJOuAOAcTlrn9Q6d3Re/f63vV vSwLT5U9kvaK6XUap/T6js6nWQuYfgMUbF4wCmVuZHN0cmVhbQplbmRvYmoKNDkgMCBvYmoKNjU3 CmVuZG9iago0NyAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9YR0FG VVkrQ2FsaWJyaSAvRmxhZ3MgNCAvRm9udEJCb3ggWy01MDMgLTMwNyAxMjQwIDk2NF0KL0l0YWxp Y0FuZ2xlIDAgL0FzY2VudCA5NTIgL0Rlc2NlbnQgLTI2OSAvQ2FwSGVpZ2h0IDYzMiAvU3RlbVYg MCAvWEhlaWdodAo0NjQgL0F2Z1dpZHRoIDUyMSAvTWF4V2lkdGggMTMyOCAvRm9udEZpbGUyIDUw IDAgUiA+PgplbmRvYmoKNTAgMCBvYmoKPDwgL0xlbmd0aCA1MSAwIFIgL0xlbmd0aDEgMzI3Mjgg L0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB1b13fFTH2TY855ztvRettmmlXUmr3hvS ApKQEE2AQAIEEh1MLwbTjHHHdtyduMQljkuMYwvRhJ3EJA+J03DsxC3Fjv2k2HFCYqfagKT3mpkd IVye9/v9vn+eV+be65o5Zc/cM3PPPffMWW/bsn0FMZL9RCEly9b3byLsr+IU4OFll2+LsCTJWU2I OnPlplXreTr/GkL0GavWXbGSpyv/SUj791av6F/O0+QCsGo1MnhaqgBmr16/bSdPlz9MiBRZt3FZ +nhlH/LvWN+/M/395DdIRzb0r18BxN+VQ/iIbNqyIn1c6sbtbOwQPlaRDJXgF9GCr0CqTYoQG/kv oiUysJjgjvbbpANEhaP0uPrBoVv+8xP7EmvDv4hfxy5//s97fkrJi9c/edP5c8M36f+iPY6kHnfg f7hO++DwrwgxPHz+3LmH9X9hd0ofZNA2qFciQ/I1R/U+aSrI1YIcEOQqQfYLcqUg+wTZK8geQXYL skuQKwTZKcgOQS4XZLsg2wTZKshmQTYJslGQDYKsF2SdIJcJslaQNYKsFmSVICsFWSHIckGWCbJU kH5B+gRZIshiQXoFWSTIQkEWCNIjSLcg8wWZJ0iXIHMFmSPIbEE6BZklyExBZggyXZBpgnQIMlWQ dkHaBJkiSKsgLYI0CzJZkEmCTBQkJUiTII2CTBCkQZB6QeoEqRWkRpBqQaoEqRSkQpByQcoEKRWk RJBiQYoEKRSkQJCkIPmC5AmSK0hCkLggOYJkCxITJEuQqCARQcKChAQJCpIpSECQDEH8gvgE8Qri EcQtiEsQpyAOQeyC2ASxCmIRxCyISRCjIAZB9ILoBNEKohFELYhKEEUQWRBJEJIm0qggI4IMC3JB kPOCnBPkE0E+FuQ/gvxbkH8J8k9B/iHI3wX5SJAPBfmbIH8V5KwgfxHkz4J8IMifBHlfkPcE+aMg fxDk94L8TpD/FuRdQd4R5LeCvC3IW4L8RpBfC/IrQX4pyJuCvCHI64K8JsirgvxCkJ8L8oogLwvy M0FeEuSMID8V5CeC/FiQHwnyQ0FeFOQHgnxfkNOC/Jcg3xPku4KcEuQFQb4jyLcF+ZYgzwvynCAn BRkS5IQgxwU5JshRQY4IMijIYUEGBHlWkGcE+aYgTwtySJCnBPmGIE8K8oQgjwvymCBfF+RRQb4m yCOCPCzIQ4I8KMhXBXlAkPsFuU+QewX5iiBfFuQeQe4W5C5B7hTkDkFuF+Q2QW4V5EuC3CLIzYLc JMhBQW4U5AZBrhfkOkGuFeQaQa4W5IAgVwmyX5ArBdknyF5B9giyW5BdglwhyE5BdghyuSDbBdkm yFZBtgiyWZBNgmwUZIMg6wVZJ8hlgqwVZI0gqwVZJchKQVYIslyQZYIsFaRfkD5BlgiyWJBeQRYJ slCQBYL0CNItyHxB5gnSJchcQeYIMluQWYLMFGSGINME6RBkqiDtgrQJMkWQVkFaBGkWZPIR6i3D ax4MNYbhMw+G3IADPHXVYKgOqf08dSWHfYMhEzL38tQeDrs57OJwxWBwIk7ZORicDNjB4XIO2/mx bTy1lcMWnrl5MDgJF2zisJHDBn7Keg7rOFw2mNmCM9dyWMNhNYdVHFYOZjbjlBU8tZzDMg5LOfRz 6OOwhMNifl0vTy3isJDDAg49HLo5zOcwj0MXh7kc5nCYzaGTwywOMznM4DCdwzQOHRymDgbaUYZ2 Dm2DgalITeHQOhjoQKplMDAN0MxhModJ/NhEfl2KQxO/rpHDBA4N/Mx6DnX88loONRyqOVRxqOQ3 q+BQzu9SxqGUQwm/WTGHIn5dIYcCDkkO+RzyOORySPBbxznk8Htmc4hxyOK3jnKI8OvCHEIcghwy OQQ4ZAxmzICy/Bx8gxkzkfJy8PBMNwcXz3RycHCw82M2DlaeaeFg5mDix4wcDBz0/JiOg5aDZtA/ C9+uHvR3AlQcFJ4p85TEgTCQRjmMsFOkYZ66wOE8h3P82Cc89TGH/3D4N4d/Dfrmhoekfw765gD+ wVN/5/ARhw/5sb/x1F85nOXwF37szxw+4Jl/4vA+h/c4/JGf8gee+j1P/Y6n/pvDuxze4cd+y+Ft nvkWh99w+DWHX/FTfslTb3J4Y9A7H0V5fdA7D/Aah1d55i84/JzDKxxe5qf8jMNLPPMMh59y+AmH H/NTfsThhzzzRQ4/4PB9Dqc5/Bc/83s89V0Opzi8wI99h8O3eea3ODzP4TkOJzkM8TNP8NRxDsc4 HOVwZNDThEIPDnoWAg5zGODwLIdnOHyTw9McDnF4atADqy99g9/lSQ5P8GOPc3iMw9c5PMrhaxwe 4fAwh4f4zR7kd/kqhwf4sfs53MfhXg5f4Rd8mafu4XA3h7v4sTv5Xe7gcDs/dhuHWzl8icMtHG7m Z97EUwc53MjhBg7Xc7hu0N2Psl876F4KuIbD1YPulUgd4HDVoLsLqf2Dbgw20pWD7irAPg57+eV7 +HW7OewadC/HKVfwy3dy2MHhcg7bOWzjsJXfegu/fDOHTYPuZbjLRn6zDfzM9RzWcbiMw1oOa/h1 qzms4k+2kl++gsNyfuYyDks59HPo47CEw2Je6F7+ZIs4LOSFXsBv3cO/qJvDfP648/gXdfG7zOUw h8NsDp2DrhQKNmvQRdU6c9BFO+yMQdfVgOmDrkLANH5KB4epgy44ElI7T7VxmMIzWwdd+3CsZdB1 PaB50HUlYPKgaz9g0qCjFTCRQ4pDE4fGQQf8AmkCTzUM2nuQqudQN2in/aiWQ82gfQpS1YP2bkDV oH0BoJIfq+BQPmgvQGYZP7N00E4LVjJopwapmEMRv7yQf0MBhyS/WT6HPH6zXA4JDnEOOYN2qqVs DjF+zyx+zyi/WYTfJcwhxK8LcsjkEOCQwcE/aOvFPX2DtsUA76BtCcDDwc3BxcHJwcEvsPMLbDzT ysHCwczBxM808jMNPFPPQcdBy0HDz1TzM1U8U+Egc5A4kNSodWmYyoh1WXjYujx8Afw85BzkE+R9 jLz/QP4N+Rfkn8j/B+TvOPYR0h9C/gb5K+Qs8v8C+TOOfYD0nyDvQ96D/NGyKvwHy+rw7yG/g/w3 5F3kvQP8LeRtyFtI/wb4a8ivIL+EvGm+LPyGuTT8OvA187rwq+Z4+BeQn4O/Yk6GX4b8DPISjp9B 3k/N68M/Af8x+I/Af2heG37RvCb8A/Pq8PfNq8Knce1/4X7fg3wXkho9hc8XIN+BfNu0Ofwt05bw 86at4edM28InIUOQE8g/DjmGY0dx7AjyBiGHIQOQZ41XhJ8x7gp/07gn/LRxb/iQcV/4Kcg3IE9C noA8DnnMWBj+OvBRyNdwzSPAh42XhR8CfxD8q5AHwO/Hve7Dve7Fvb6CvC9D7oHcDbkLcifkDlx3 O+53m2FG+FbDzPCXDKvCtxgeC99seCJ8rZITvkapCV8t1YQPdO3vuurQ/q4ru/Z27Tu0t8u4VzLu Dezt2Lt776G9v96bcmgMe7p2de0+tKvriq4dXTsP7eh6Tr6OrJSvTTV0XX5oe5dqu2v7tu3KP7dL h7ZLzdulku2STLbbtke2K6ZtXVu6th7a0kW2zNqyf8vAFlX9wJZ3tshki2QYGj11ZEsg1ApM7dli trVu7trYtenQxq4NK9d3rcUDrqlZ1bX60KqulTXLu1YcWt61rGZpV39NX9eSmt6uxYd6uxbVLOha eGhBV09Nd9d8nD+vZm5X16G5XXNqOrtmH+rsmlkzo2sG8qfXdHRNO9TRNbWmrav9UFvXlJrWrhYU nmTaMiOZio0+wIxMPAkJSJNKAqnAO4EPAyoSGAicCigOa0Y4Q86z+qXJM/3SRv+V/lv9itX3M5+c 8uUVtFq9P/P+1vs3r8qZ8uYVtRKPzRPxKG5aNs/0ubRsRzxNzRxLK1lZp3ti8VarW7K6w265JeyW iP0d+4d2xf2C7Wc22WqVrNZRq5yy4nSrJWyR6ceoRUlZSqtbreawWaYfo2bFkzIjhz58wjRrbqvV GDbKXU3GmUY5ZWya3JoyFpa0EkWKSFj5sQEUHX0ayR1uHZLIEY+kloak2w7PnZNMdgzpyOyOAd2s hQPSDQM5c+hnqnPBgOaGAdK1YGH3YUn6Us9hSZ48d8DV0bmAp6+95RYyKdgxEJzTPfBwsKdjYD9I ipJREBI87CGTepKLt27fmkxuW4yPxVu3Jdk/pKTtNIU/HMC/rduQpv8BkCb0yBf/8dNw3pKt+GO3 4Xf/4kv+Hzgi/T/wjP/LH/EwQRPtnjgqX0OWy1dDDkCuguyHXAnZB9kL2QPZDdkFuQKyE7IDcjlk O2QbZCtkM2QTZCNkA2Q9ZB3kMshayBrIasgqyErICshyyDLIUkg/pA+yBLIY0gtZBFkIWQDpgXRD 5kPmQbogcyFzILMhnZBZkJmQGZDpkGmQDshUSDukDTIF0gppgTRDJkMmQSZCUpAmSCNkAqQBUg+p g9RCaiDVkCpIJaQCUg4pg5RCSiDFkCJIIaQAkoTkQ/IguZAEJA7JgWRDYpAsSBQSgYQhIUgQkgkJ QDIgfogP4oV4IG6IC+KEOCB2iA1ihVggZogJYoQYIHqIDqKFaCBqiGriKD4ViAyRIIQsl5AnjUCG IRcg5yHnIJ9APob8B/JvyL8g/4T8A/J3yEeQDyF/g/wVchbyF8ifIR9A/gR5H/Ie5I+QP0B+D/kd 5L8h70LegfwW8jbkLchvIL+G/AryS8ibkDcgr0Neg7wK+QXk55BXIC9DfgZ5CXIG8lPITyA/hvwI 8kPIi5AfQL4POQ35L8j3IN+FnIK8APkO5NuQb0GehzwHOQkZgpyAHIccgxyFHIEMQg5DBiDPQp6B fBPyNOQQ5CnINyBPQp6APA55DPJ1yKOQr0EegTwMeQjyIOSrkAcg90Pug9wL+Qrky5B7IHdD7oLc CbkDcjvkNsitkC9BboHcDLkJchByI+QGyPWQ6yDXkuUT90vXgF0NOQC5CrIfciVkH2QvZA9kN2QX 5ArITsgOyOWQ7ZBtkK2QLZDNkE2QjZANkPWQdZDLIGshayCrIasgKyErIMshyyBLIf2QPsgSyGJI L2QRZCFkAaQH0g2ZD5kH6YLMhcyBzIbMgsyEzIBMg3RApkLaIW2QKZBWSAukGTKZLP9fbqb/tz9e z//2B/xf/ny+JYvpjiFCRu4cv0mIzCJryVayH/9dR24hd5IXyK/JUnI12L3kYfI4+QYZIN8lPyJv XHLV/8/EyBXq9cSknCAa4iRk9Nzo2ZHHIUNqy7icO5FyqiIXc0Zto3/9VN5fR+4ctY0MaRzEwK41 yz/H3f4hDY+ew/iqIebRKpqWrwe3sm/6SPvgyLMjT1xSgFmkkywgC8ki0kv6SD/Kv5ysJmugmcvI OrKebGCpDTi2CnwlUktwFmwJ4xfP2kg2kY1kC9lGtpPL8d8m8K3pFD22maW3kx34bye5guwiu8ke sjf9uYPl7MGRXSx3J47sI1eiZq4iBxgTyHOuJteQa1Fr15MbyI2osS9O3Th21kFyE7kZ9fwlciv5 In7LJUduI7eR28kdaA93kbvJPeQraBf3kwc+lftlln8feZA8hDZDr7gbOQ8xdg/5MvkW+QE5Rp4h z5LjTJfLoFuuEaGXlUzTm6CDPSjz1eOemGtzx5i29kEbtNwH0+XeCf0dGHfF5Wk9Uu1djTOpdg6m 64HeZW86R2jiNpSM84vlpDqiZbj1knKKK/5vubTEVE8PQF9CM1Rn9yDvvs/kjj9jPL+HfBU98BF8 Uq1S9jVwzh5ifHz+g2PnPsyOPUq+Th5DXTxBKBPIcx5H3hPkSfTtp8gh8jT+u8jHM370GfJNVnMD 5DAZJEfIUdTkcXKCDLH8/+nYs7Adn77mSPpeg2N3OUmeI8+jhXyHnIKl+R7+EznfRt4L6dzT7Cye /h72Up5mZ9Gj30PbehEW6sfkJ+Sn5Gfk+0i9xD5/iNTL5OfkF+QNyQz2CvkTPofJy+rfEwuZiI2X z6E2HiCLyeLUlOVLFvcuWrigp7tr7pzZnbNmzpg+rWNqe9uU1pbmyZMmppoaJzTU19XWVFdVFhcV FuTGc7JjWWGfy26zmo0GvU6rUasUeLYFLbHWvshAvG9AFY+1tRXSdKwfGf3jMvoGIshqvfScgQi9 rh+HLjkzhTNXfurMFD8zNXamZIs0kIbCgkhLLDJwpjkWGZIWdHaD39Ic64kMnGV8OuOqOEuYkYhG cUWkxbe6OTIg9UVaBlovX32wpa+5sEA6bDRMjk1eYSgsIIcNRlAj2EBubNNhKbdRYkTObak7LBOd mX7tgJLT0r98YFZnd0tzIBrtYXlkMrvXgGbygJbdK7JmAM9MboocLjh18OYhG1nalzQtjy3vX9Q9 oPTjooNKy8GD1w/YkwN5seaBvF2/90GBKwYKYs0tA8kYHqxj9tgXSAPqHFsscvBfBA8fO/sXPPW4 nP50jibH9i9CD9IijqlpQOoXnODZ8IQoXzRKn+WmoRRZisTA/s5uno6QpYFBkipO9gzIffTIKXHE 3UWP7BdHxi7vi0GzLbGWvvS/y1f7BvYvjRQWoGbZv5wBVQ6ORwaUeN/SZasp9q84GGtGCaFLMhdB m2aQVH9amS2HS4pxfn8fCrGGqqGze6A4tmnAFZvEtY0M3CSnZc2cbnYJz20ZcE0eIH3L0lcNFLfg WjSRloO0YugD0nvFOrtPkvLRdw5XRAJHykkF6aHPMeCZjEqJtxzsXr5yINwXWI72uTLSHYgOpHqg vp5Y94oeWksx20DeO/g6/KEC2VUo26fOFiej2APaHF2kWw4oPbS2kBFpxUdsUgMO2AY0PElrdFJD pFsKEHEaviV9BmWX3AcJJWdyGy4G4tLJbYEoGjf7+x8eKcALgMcY0I09kwoPob74TPx7vvDR+Nn0 gfIiLSuaxz3gJTdFgj1g+m6f/5wy1UVaGXgEHa3ONlqGwgIZPILDugEZ5WRZtBZ9kQEyK9IdWxHr iaENpWZ108qhumb12zEnRgODrLbTrWTuJSl+vIYfGyDRjrndIkFjNgOtSVavtFpZegpLjyXbPnW4 XRyOHNTFOuYcpF8eS9+QRNCDUDmaeHv/TTWOCnTWVhjKWGt/LGKLtB7sHxrdv/Tg4VTq4KaWvtV1 6AYHY+3LD8bmdDegLlm/3xvYRb/aQTqkjrmTCgtgeyYdjkk3dB5OSTfMWdB9EpvxIzfM7R6UERTt m9RzOBvHuk9GCEmxXJnm0kx6SoQm6J1mI6Fj5wdOpgjZz46qWAZLL0NcluXxk5AnkWVDMs+zifNk 5Kl4Xorl9eAPPcy3GlUAO9wSWU6rZ0/P6oN9PbRzEQ+qEv+kASnWSAbkWCNCuRrTgCG2YtKAMTaJ 5jfR/Caer6H52tikAckjQTlDsEkH+2KwU2hy3QiR96B12Gjrl3MiQ6Ojc7ujZwJne6LoEosgC7oH 9EmMA+qcqThvCpU+ZE8Z2L+snz4H6UJXpz2zfVkP+oK4IU5pH9DjDvr0HXBGK7uGNkdctAx1gwpk 1+9HYmB/z0BPkn5p9xr6RJGIbYC0xepQ7fye6jj9ouKeg45YGW3YOHXAkHM9BT2ejSBIzXICSOLL YHBpibQmPPmyGA4t64ugBlRk2Rw0dW5LDbTekLMCJlEVX8HEEEgfJLRYSo7RbBjQF+GG+Ee5sQg3 xD9tD5RCC89S16dPwHfbBox4ovg4VaYvgHZwqJ0+C/5dj4enp36X3qZziMyO7YRppA/NvkqLwwPm nPZ+GH9+vRE5sRpxMe6ly6FZ9B6nea6WltwEvSs5c4dGn4hdQS2A+CssiNHBgTZMEjiJhk16Dn46 Y2BhsrBA9+lcM8s+eFBn/vwLuL505jGkd4m0YKwhREVfY/kZ8BESUzWTftVfyNPK+5BvkqfVJrJQ dYE8LauQ7iVPa95AXj5kGlmmyiJPq7rZeVOUPxKrOos8pTpIsrQhMkF5jSxSVZB7laVkAbBPOU96 5c0kR9VAcpTTpJIeQ+ztWuVRhvdqlpN7aZ6qhp1PeZ/8Y1wfJZ3yMySq2s5F7QRWkLuUr5Is9RCp VHaQPOUhkqXkkR7cjyjHyLWIO+bL2eR5RCa/jIhyi3Jh9N+IIl8L2YUo8wuQBcoF8iDKPRvSBnkG sgWyClICWQFZBqHHZ6My+Hs8hJgwz7wD6Shpxrs6amJHuhVHa/Dej4J3nGSSJHESIh5SQHKJnyTQ cjOIm0TgjwaJjmThDjFSiDF4ImlC9U4iZlJEvCSM2auP1JI8UkLqSA7uHiWTSQveJcommaSSuEgV CZByMoFgJkxKSTXm1VPwvlE9acDTEMwdHpGKpadlv3y3PKI8pmpR3aZ6W32TJq55UOvVfk93l+68 /jr9x4YbjTXGV0y9pn+a77b4LIesX7Fl2u62F9u3OOY4fu/c4tK7vuYOuN/19HrWeH7rvd0X9b3p H8hIZTwWUAVyAw8FXs70ZdZl9mYeyPxJMBCcHbw++LuwPvytyNaoM0ub9dPYVdmR7Nzsd/FEakQi tio/x6xdwXPWkulkBln4LWJGeM1D6qRjx9zNzbpC7XcQOpNJBME3HZGkySmrSjafyMhoip2o1Nyi 2NuHpMKjTdpbEFZuGn57+KXi4bfPOmqLz0rFb7379ru2j16y1xaXv/vqu6Ulkj1qZ+KyyFqtSxPL KpIrE/Gq8vKyRrmyIh7Lssgsr6KqulEpLwvJCs7kOY0yTUvKzy8sUGYOa+R9saZ55epQhtVl1qjl TJ+jsCHHNmdhTkNRUKtoNYpap82tnpTVsa4l61dae9DtCTp0OkfQ4w7atcO/VlvO/V1tOT9Zte78 XYqmflFTtvIVg05WaTRDIZ8/vz7aPs/qtKmMTpvdo9M67Kbc5kXD17kz6T0y3W5+r+HpUEts9Jxq n9qFVhMnXz1JskffP2qySdNiQ2kSHxr98KgROUZBsL77YSqDZuXY6KeZfZrYZypXyqGHC4zS9OxY POefJqPJlxWMGcySR2UiJptJfjb2QuxnMSVmipkcwdmOLnUXaWpqctTWFhf39tq9tXZQe7ntbJm9 HBpP9vKYGFYOczweDVN5QokqFiWWFY9XVUtcz15tTEH/1Um2nHA4x6lXbRz+41rF4IxlBnOskk4a VJn9iVAkP8Oi2i39VvreBE/AolK0Jr1UP/IjvVmvUlsCHtWg0aJTFJ3VeMvwbtof+0c/VJnUIbSs pUcySX0SOjlik6YDPzxiZfiXI2aGfz1iYvj+ERQ8+R25HH3RJxWjh8WlgkHnHNXzUj66WIlUdFg/ D83s1bNUpOJ3Welsr58uLclxWXiDqmBNReNONx3aqNyuEJoPb0Iqk6zWuVJLdrfv+8mt0+fc88qV NWsXtAZ0akWlM+osZTM3z5x3y/LqymW3LZy+tbPCqjVolBM2n8PiyksE5n79o68+cuHZRe5IfsDi zHC4Mp36RHGi5brv7tn97SsnxovjGnsIreJpWOpb0a8csBo7UsGmqOT0oeROG4rtdKHMTgcK7PSh tM7n5TL0xQyum4y0bhjiPOC/qW6ATDcZz2PtRw/dmAYtnYEhKX5YPZc0nW0a08WrXCWlJb0SVUA0 K15pr6gqj6LzaCuK5FjMThWhunXeYx8+PvJXb16eV8p58v2vdh6r2PjUdc8e3vPUllr5vifPPzY7 nFAdSITnP/r+vWuOXTP1gr1x/3dpnaJkyh6UrIBcfjgjka5RIKtRhnhqIHtqdhxlTAzJ9pRe74w4 I3j4jCFJlzLvj0un4tLLcSke1/iHUB5zZwJwWMPLAwvSu3kLilXMmraNF6uM1fOlxWIVHbXTEo6j yh6VwawbvpOWUF6pM+vUanyMaKRBHZqrSg8+Q5Z0ZoNqiiPg0PHS6hwBlyNg142s1dsynY4Mm3ak VGcPsHKPnlPmotwJsuiw1pkuN5CVmyGt1XS52XFatyj3MXOQhIJaFO2I0+nXDEm5R7I6/bTTpq1k 8Wl77VjpeKWNL4ywgKIWlbkomHYE2tPi4RlP6VyRDF+WS4eitrLc085MlKJNawu4nQG7fvgPWrNW rcaH6plEGGaQlmjh6F9VO9URjHFfSwUzM60+2kJ9tIX6bCiLz4Bm57OhFD5ae2byQkKKJFKJvoSS sKbLD2TlB7KeDGQ9mR3HldYhuexocYVU4RuSDEezsmqLG5+XDBh3DFLeYO0c15BUcLgY/Zn1Zhgu Omj0cl282tt7mjNkw5B9pjdXVdtp46a9nVW93WVRjRsqVKqdKp1Ja6pZfPWCy566vKll1zdWNOyu HHnVblfpYbfuN3ocBkfdoqXLS+/5y6Pzer9x9rapB1a0ZBhUi51Bpy5eFJ9x8Dsb95y6pjkYlK7I yoYadTpbpmPEmREPZvlMvU9/eNd95wb6M2J5GVm0X2AcmIVxoJgMHW0qlWKmtIqATEUMoVYg6xrs OFRkosrN9GYbqfaNVPtGqn0j1b6R2gfjkGxLeUnKLU0nKSf9sNmx3pXCceKlG1dwgOJxHPPmz86G TlPWUybpZZNkunSEQIc62yQVJ5OvUquZbnIXO1YvLCgfbDFMj1FuTWU38gRVzdK5or6MiEs3fATM T1uezpXl80ddOnk6a4tgGdA+mpxJJzcOf09w1a8EGz4nawRP9y+pG/pzk1knmrwzvc96FZJWIZCp kCF0A2QqZMehIfIcbKJh9NQJaMJgm80GRBSTFxCG8GK5RAmkbvHcenfUS5977GkvPqGwdh14qgzS dpK4uYnGHib2OAzxOED2OEBmot2o0aNEb53tHpKSaXMmFZ8Rj8OehptlPiBBtdTT6YBN0g+f9uYJ VUov04G1wxVw6mGdnhHKOv+I3p6Z1pgmCYvUQJ5O2foaNzXK5pISb3GxocjnY8MFGhQbRtCmGOJZ gexZ2XGoLoO2vlB2qclkoO3PQNufgbY/A21/Btr+DFS7BJup/FTV2VWdRp/XXOwrLdKEczvDXcIB aXLA9ShH83pVtCw4Iek2Zi+3104oLi+nHsm42ohJ1AspkhNSbFx7o95gSPZK5dQ1odStSepcYb83 6tTJI+WK0R10uUMuozwyRUJb8/siTm1BYHWkJNunl3aopeuMGeG4f7014DRdrNRV5+/SGrSKCoM5 XL57hS5Vj+dnmzJyAxfmK4+H8v1GvTPoTvflfWo7PPlrjySsVle6HTKEghhCR8AP6djM0lCOiykz ZCgqKqPKLPPh3DIfTiyz4awyqswyeoqNhGpmG4qsCZWfjgR0wIMD562lyhvTmNBdMXTGmgzXVDye iHk87s/RV0jxlsfpYJ9uVap9ZneGuTojEYu5R1ZHJmbKsqxzhn2+sENXkDE7mAgH7VJdsKqs1Cdh IHSG/Z6IQzfFBR/XGCxLyO/U7q1vu2fqhX+MDR1P5WYZvHnh4R9WLOvrLZ55aKb8HXiAGEtNWgKf Z9noWdX76ihmPQmyJ5Xhojpw0Qblog6Pizo8LqoDqKk8pY9gFrUf845QWrlA1quAbCgBsqGEHcdV oefhFBqIHwOHdU6M9iw1GzguOj7pgePiWMHGBjQg5veM8wJV70+98+277njtpuapd719162v3tJy LLHwK5s2fWVJXnzBl7dsvm9xrnzPVy8cXjL/8X8/fO+5Z5fMe+wf39jw7ZtmzL35+VVbTt00fe6t 36I+HjyCF9H/MjEj3Hk4W5MuCJAVhCEKDmRdjh1HQTS0CXjtQaqeIFVP0GYyS9OCERwLYrwcJPYc jJZHNBoTimk84u40jXMWeAMRjSNd1ku7D6yJapyrp7yY2vHNnXfqnVE/NXT5GZI7f/qa9dPyjtXP 7y146P4Zq1qzlTv7H9jQMFI01i9Q1Vpv06Ir5s9cW2EZ/iR3yjJaw3SMM6LEVZj73p4K2Yrs1To8 dTUtRTUrRTUtVTWt5WrU8om8FJJ5TXaqEjCGOJchVANkqgEyy2mHagYzi2zwD49vSkmplHcCNHAs 2ulNz3Kox9R7tlb4/WXC1sBFTPcSak6UIgVu7sURjHq/Hm9Iod6hFt3E6fFIFfFEPC6cYaPGlR3K iLqMqh3uwsa59VuFsuAcO0snZnRsnZGITVpUG6kozHVts+hGhptn+ZvKb3+yedmkMIyMDn0AXby0 Yn5TbPiXY0qEq6VWzDXzNk6euGpmncuSbJhROvK77KBy7bQ1Xq1mZFq0fhaszZTRs8oy9Jt28t5J MhHTRismhROpyqAihlAdQ/QgIFPVxCG5IJUsSzld0rSylB2zxbLsMlPAR68NUAMesOGqADU8AVod geewZw1W/EiAjZ+njvjT6OJ43EqdClPR81ICgQuDFE8Z7ZFqqTplNEnTUD+nUgbKqu3Vdk8DfNlj EwPqvDmeISkv3Q9RBWftdBKaTPbaztrQLcd5GcyFFy7HWAdViQ7Kp/9FmnT601M3jbJs8o5Heidu nF/vNcKp01nKZ22eWtM7Obts9poNq2eX16+5fW5y/vQGp0YlKxqj1ljc3FtXNasio2zO2g1r55RL ly380rIyTyTLlxNGHECblRsLVc8qr55RX1reOHfzzM4r5xVa/WGn0e5zOjCjy4wFgyWTcqpmNJSV T5izGXVkRV9/Ay0/i6w44UtBvT47vI9TR8EI69hQNuvwaN0McQB4acenA6l99NQxHLNrHHQiEEz3 7TK4Kx+xqez3k7bTybSGxnlhURopoZaduQpvsOnLXcKHGblLTG+Ua9jkhnn/5x8ca4hLdfZMp5MH Lajn8BQs9RXwapLk3lSwr1CK0F4bob04QptOhI79Edpq8Is1tpR9vO+JlkY8aUsHZJaOIa4DsgKz 47ja8xz2KMIvox4q3dSe0sNFNcRn22Zj4iraDXNI+ahHGwxnYvZKSz02oNnTk/iLOaorWvYPbb9s YF8znwA5dQVztrd3bO+EwwC3NOrUS29ffnL/pMYrju9QYkIdF/6+4DqsC3QfmK94RR7VShas22po JZtsSAWzqWHLzZYyKMYzpFyvFDdLBX6pwCf5UX7WSRmhxtsncihJOWiW3+f3xXPCs31qB/dIHbVN dofEe0gSVUx6e6Xe3l4EaHKYG6RKYCZcVTXO+SlDwEYrn1BZ/ImgJ+qzm7TKSI9OcuRmZUYdepW0 VZLWKDqYrnC2WdGFaPBFUqkRxFANsvAMJrfnX1A10XwanqFlnDB6TvMOythAVh2JN0hlQ6MfpybT jp2DJqijJLdYQliK5uRIWT5K8rIkX4SSwlKpsEQqzJYKY1L17PzZsRKjMj4EBQ+mCTWHPxp2Sv/H C0d9PBZzot7ep4s55u2xAquvVtky80LhZKZFNfKRfE6xZORFogWZVmXkKY1kj0fC2U6tLMUkyaXo XTmhzKhLr0h5shRUNM5YMBSzSeq4xU79ErtFeeVCseCqQ16ErxSdxXj+tKrOaIXVRqjq/A9U9QZw tSXDS8e4RbDGTcqPEcdNkYFUxDopPKl4kmLUeytM6BUVtH9U0K5RYaOmtmJI+k8KQYGElUgmQnsQ qaO9AqcC36cWnCEuoMhaTd2QrEu57N7vkwpbhVx/qkIimCFXFE3MH5ICKevLWVJWlir4QdHUCb8x TVeRYhrdYeMenSD3bl7cK1ye08nFvbXF3BcowwC4GL41jfDBC6zkkT5mMsoradxnLLTaqGJOtZbH xTzlZVXVSpMtM5ARttTf3jlla2dh47Yn1+zxlM6ondDfXmrSwcXTBibNW1nRf8Pc+NdvaV4+Kdwz a+LGCT6TCT6KaUFTa07ryonTNk3Naa2YVRkIxoI6m9/qD2bEgs6Crn1zT3sLm/Ja50xqhnbvhXZf U28m+dS3PtbUJBmiVWmrAWQjHpCNcDTN9FU1JH2cCriT1IFMRqDRJNV/ktqsJNV4ckg2pPTEbaiq jKrUJUOS+nh8aqDVNq0W9LB6Og0v0GCLF35D2r++qDMeJaNeg4gXXjQvdh4bFe6j1u6Bthpl5bXy Zbf1JttbWxOIF7nhMGu0zojPD+85t6OtLXfpTfNzn3FXzEtFGlMtieY9kxu7q/3Se9ufv6bVHq/L 2wCbo1JhXqyuYZ4DPob/kFcTs824emB7y4HlExz5k8pG7p0zv2HZbvTYBdBYRPkRgp83Hs6kYw51 pIDv0LZFZ8BHoQzCAm04wAJw0AmQec8XA3CjH9ALEIgzpszFFsnify+cMpjbwogXyEedU5U/l9Lx TG9uKy0YkjSH9VDb8KtJGphJXgzKnIaF5iG4T4VaWTKWhZE7NBZoVSKyWutv6Ogu7r9nReXEzff2 JDubK316jewwWxMNXXU7roymehtq5zUlTXRy9jW732725wQdqd1Htl/7wq56W0aWz+L0ORLhaG70 xDPzr+5OZidjOieiVzLpg14ewA7GOKLLN6XCTfWSMVBLe2ctHb1qqfdTS1tHLW0stc9jPzshxVxr xbSF4TiQjV8McRHLx9nFtEEZnNFWY20ioLKgW6oHfVPR1VVHLNOxqIbGxJoThq70wMWB9sGL09vx XRDu59gwpsDvHDcZqVYe0NozXXRpYcq9C5fdPD+3bOntS2ZendK6wrRN6R+fvLe5CS0ILWpidEKq NeEXDWjH9HnTrz68dNvz10xpmSwbxTxtuAVtZ+meVPOBFWhLk+H2yaQX2roXVi2JVa1nUvnFVU1V G6sUJ+1Nzgi05HRGC6ivWEC1VUDVWMDsG9rCJ8eak19PyjRof4z2tgpVuvEBWRtjaVwG5AZORfUX jRa8uB8rXPIplfSySlKpMot/E5/q+6DPsskiW/QfZLIG1pu2bSzSy7RY9laST+Rg7OgwiQ6qiUXH NSv00/GNT3YnqphCtcq9Cf/wYKh1U2dqeXuxSWvUKLKiNVbN25za+MSWuobNDy9be3df4ePKFTsm LGrMwnQ4Ee3YOa/IneHWWvwOs9NqMvp9zsZdQ7u2nbyqpXnr/d3OA3cVTVtRTUfOHOxmvU69EyPn 8kGPjXZA1vECaatFkVkrEOYEAZkZg6vzyWBJPlZ1Xk45aOQux3C2akpG/GxJW2SarY1O/c+W0fB9 8nQ5cwFPJ8uxmnFJvNPNLDb0MG5WAzMvrDub8Kvk6zD2a7TuUF4gpyJi+ZHOqFc7rD/SwTQhRKK7 0majrvOVsbb1U2OTsk3wCaxOr0WtN+p95Z11S7X2DGd25MKfqftAF0IUdyTbmWHX9i6+fl6e2Wpy IgouUy0ox9VXYI7fRSYfbsH67QZMysMoYlcn9rt9knJXlRR0tk0/2zAlUnC2yqquaotP89Mu0/Tq GaxJoecgFFb+btlbH7367ksXi5n2/C+u940PQX66qLAyY/bGjamdWzmu9yRCwYTXYPAmgqGER+8Q xR5ZJ5hQQPaUNc2eguwAIkGywaSzZ+RkttTJ2gy/6qeZcXqHeGZmjl+v9+ecL72ojM8qpr/32nl5 Kp3eYLT57JFMrU67ctOygA/LI6Ry5E7lRuWHpBHrqUvIyym3o3AKtUVTdOhiUyI2pzRtSnkTfC/q JwCZFQK+c5weatLOBE2ZrQ5p2syAylqilGu1tM/BZKFVnUqZQQrLtYGAtrxQRVtiqgLdj3TTr+iO 2HBZd35OygjMsZZolZqpvzLNed/t7qtR/tTQlh+Z9MuaqQt/GZnJlo3glZ5lgffX+QCZLD+TTJ5O ejGRo1M5O0ZN25kk/iXFB600tEQEodgMO57QoD483vT8WkTgq+GEYBWXftLm6fGinjDpHnM6GmUn puAJCyblfFC90Wm9KpZZ1rt/RvWygMM7serPkzfNLqq47PHN6+9dWmCLlkZKi8tywtkVi66aljcl LNns9pGRFb0lU4q9KxaWthV75yzp/FMkz6e/5vKOFY0BZVssnD2/eMbOOQVBj6MoFCuSDXJ0Qk99 46au0pxUT0W0sabc759WMKEvntM7afquuYV6XXTko0WrIjXtuT0rw9Vtw4vrmmSdvzAv1z1xcrCk kVqBe9H+H4b/UkauONpUIeVfXOhJd/9xK0DMm3FS58Ub4uF8ald5TJ8ZVyM9ZuCRfEQfEfbQnCic mt3qn8YGGeqzwGVJB7K5y3LJCGNnfp1GOy7UwUwBgvV8HuFWHtY5uGfiK2ovadzTjCQLmAqHZcpt 7Qt2T4v6RUOXrdMXN2d3dw3fJHLGeykd7RNW3thP7cC1o+ekTnUxovVRcvOJptjM2MaY4qEmD0UE XpwHYsqHNGu8QDFfZKbR8zx2m2QirM409dkwelqlCKN/fNwQTqF14ycBGo/6be1MP6+fTaYH4LRX R0eLz8b6ndRY0MaIVig1floBzoL6uiSVMRUo18A3gwk0aaWSuvy8Woio+T2o+Qpyd8rUVCXllUql KYc0HW7Ty8zwgzCfDPgB7dcsjX5Z+jzeAsSeknRpvngdCI0hw1NYSGhBeaPwZBnVue2ZrXbRIBBH kYrhhMHrZ2NF2TssaEAnXaLgCelzmkN6lR92UytJHo+yR+fMygjEfFbNyDWf1og0V+fwYzEny603 W0eekzaYjSzEpWjNeunvI+bPNowLP5cuN5j1CgZbvclnG3luJMfuTutMaoTO3CTF1nQ2sjUdVtsw W6yNUA+WrvkD+fhJUNtHDbZWVsXp+v3cev1sXY5V4cU2m34K9cvwfWaRD1IBB13QZOvucTbLTbAp 7qbZUuu4nsueCGkWtGSIKgEyF5r16FDIg4YeCpXxdRLasfliCevYBoyEJ2bRqNysRnjgrKDjPHF2 W6RZZ2CIyxPP43XLMmKTNIMdU+GUa1LmiVMbWwtr2gsxgKYNAuqf+p7C76xNxz+xwSYdOKH2gb0k LpoDZjN08neJkfhMRtpquNPRBz7tcatf5sbDqXMVNBfVbm2hIylWYbSegslFtdvGbInGken1BG3a abe21/Q0l9gKOzumZM+/vD08Vh9yrPZTVuWzOQhdGdGE9Ebdjq6ZGcUTc0ub850wN9OE1UUNlpG7 UlZeg7Qa0wb407WUtrtc7ai1dG3SSWTISOcFfIGVjpbjV1mlj0+kTTE1xClD4dR8f3a7UD0dJ8ds cTIdf09r+3/S9aWq/WKDPKbEL0//vxjkSxQFBfVRe0xniW9DQ3Tt5clUZlOelOuQ8uw0ZhU3SXGd FNdK+SxKwtZToAQga39AZraAl663UCc+VGyQDOMWcuh8YdxCznN41xgx5RNWMn0Tqgm7OKRB61Ss WsjpaTedOaZbpljXp7Yq/Sd8XOH8iYm2mEQqb9dt/eaWjY9tqKrd+vRWYPUzgca1M9vXNEcDTWtn tq1tjkh/2HDyuo5J+45uAU4F7mk/sLS2YsmB6VMP9NdWLD4A3dw7cpfyGnRDYw77acwhWkW3YNGR Csg6J00zIw7Cmgt6MIZtNw83sMADi6zzyMPnxhvabTO/MN7weeGGz1pp9xeHG+5YnNs8MZUtTDUa i8sdcGjzpk3vLFx6kIYbylm4oTXRvGtyY091hvSny7919RRbVkVspFFEGVR/QufC9iyj/or8xjz3 tGue3d5y1fIGZ97k0pH7sMd7+R7akvqgrQfS2rouFYC6wsYktW9JOq/mCmBGLknn1Pl4Z4E1m/J0 cwIyKwlkc2yG6KvlbE7tzmk3TkiGVbYiOqfOmFpD59S26Wr4op8/p2ZT6rF2gnie8C9ZmFQ0HPdn 59R66veEXdq8qW3tCaqismW3L8ltbZmSTzfwuTLt2s/Mq0eOCk1JZ/JqY1Yxt7bn1OetF6ob+Ref XPNADSbXzCeUn4DGysmyo5sqpbg13aiArC0BeeOihLY6K21cjvRmDhpQp92KZKDN5aT0yalxqzvS 7qZzJmbu2YDPOxG1N0IZ1JP+HM+PNyKN/ISs0et03mC2219SWRcb13KYrc6ZWFcbNEezgyaVIilL PSG7Xq/XuYqmVQ8PiAH+oqG5uqo5YVV0BoPewvZCdY6elV9CidvJSylTcUdTx8yOKzue7VCPW7Ri 3YqlYWaBp47AEWRp2B6GaBQTh6TfpMJ85Yo2sQBtYumFKxwOUBMdeA4/P0C3HxiQIKYU8uFCnUrF cb8m07Mm2VT0VrXhz/ZZ9j77JrvCF6h+TVenpnre58E/qJEvTaUXprAlctzCYXE6iMNjDRa6A+b/ 88KU/FL54gMzSua3lHgMKrrwlGyaV5PfXBZIpGZ1daYSebN3z85uq8tzaxV4RwaNPquqvTg/lefO Tc3umpNKSJaWdahvr9+VHXZit1kgEnDEqnLiFbnhrGTjvIbK/vYCk8NtM1k9NrvfpvX4Pc5YSWai MjeSld8wl3o30dG/yetV38SO5EVH84g9VpjuiAyhUyCrCyDrkAyhxELaCE1ec+HZWFvQfNbbVoq+ eFjLoqVnz9DBrjwd1Tpzmof8+O4q+6dn47J7fHiCTeZo55TX62yRvCJv6/JUcJ/VQTff7RWzjvdo TNlhfa96ijc706VT69WqhcEsm0WvycFSq2zhkYfXxeaC13lsYsTQu0Rv0KstPjI6Ssut/E1djF/X yEdkT0vKZLxXzfWh/Ab6mEgmDBZPxFD+8dFkKJREn/skZVIqkxPbbMmz9ZVt2HumOpIzXc/DeWcQ mpCKy956F1En27tldMMZ4goXbTSW4sZKhnnvF6tCeTLkgZ/k9SPkMlI8roBfrA3lRCDjwpfHep37 Yjkdwaj9C5XCy6p6RfUm/l8WfSirBWUdTM7opiUNmyeZM/EfqUzOJTPaJrbV10faStrktm5L8mxl GxYfVYM50xeNq3JEocpOYzkBBr/4dHE5+kxxMd3BU8bVAR8nXehPqYJFYio/r1Vc3DCGLad0byaL X42pUfWKzh7KK/ZMWd4UGpk4TlMI2llDuZ/fcqQXRDjnj6wNWd6rmuLJyXRrNTrahqI2iyHdhsZp 0e6ym83mL2pckiQWAUdGP9PQJHIXjTMr34LveQeizBWSMUEtVYJaqgRdG0ywwTBB/VFsX/3kOKFu PwmnTT2Q9T7gx8zBoITOd+gJIuNDnoFq0zsL2xNGtb8dEwD1xWAzHQeEzz9mui4JBYhg81iUmS+W Yo+k2A6EMLMj6PYG7Zrp9zAXU+vigUFvcVtJ4+4WhJsRGXDox5z2HV0zGlbduFTOEn758D9nLpmc 090lbxc5tL9h1VTZDf0UkN+dxGZ4eE10qTDM1hJzwlKIk5DEJv8oONs1BxSbppzpUdKRRjsUk6rG CdXwXu1SwiblqqWsXGRMyJKys6QopdhPnR2VIiw3ImVHpIRVujwqRWmQVW93t0UjGB2Qej+lx3AT pRFumqLTcuCHKRPuEc1tjxoz2o18oIV+2VSaJHuZh5qkK7O9SbpCm95BT9czk3T01Y5tW0uvyaNx e53eaif335TdkqzII2dU5ozcUCjXj1XMl1RqusHKG4xhZ/2ISjkvY3Uh4A3ZtcpDKr3BpL3wDbpI q9JZDMp8k0OvoEXK+NAPZ5hM8h/1CNbKOiPVduXoOfU10HYLefskNo6cSk1A0bCOhF02NVI1xZwi KR6V4hEpHpbiISkelBKZUq5KylOkunqpvk6qL5QaCiRbBIvy+IE3FpihiMUgZERwBxv8FJZNMYW1 7OlWmm2d2M7Oo8psss20bbRdaVPZUg5Pm628Pae97rYCqYAeK6Cjs83paVtVsKNAbkGudxqzsq9R Tfaebmo6A01yfTOds6VwvhjOJwZc0QhVpLcHKgntuLVj4fSNU/k4qr5GpR75j2L25obC+X6T8m1Z flYxZ2A9OYHUyCdqFbXOmVkOnfJLWX5R1jvQ7LEjTn5Dll6Xse8nw4cXRJSHtC7rxUqRb9Hrh7de rCKrS6s3ooYQERnO0OtRQ2YM8AgbDftEStZhaiSRPPSODtRXMbnuJCmFYuxoeVhol6YXUYtRXyRh x8CHx0ErfBJ28TLbQLsKy/JIetpa83GY0GsaiFQTk6qMkjFCp7G0VozG0pK89pjRHmwXUSJqLehO A7Z8wnYZQO30H23IOR62REx3SV18B+TiiryTNWK670BSJuuciXAo5jaq3nxDZXRn4VUQu6SXfCP/ 0UnORCQYcxlUZ15WGezhQDDHIetHPimwOE1qRIG00oqR+wGK2uS0SCekJyxOs0rRGLQjh6WZAEVl dFlHFlPrgdnGHugnm8w+SQIoayWKWR2Q8gKSjy5FxX1S3FJlkRN6KYO6fnUZkr8GWO+Xwu1+g7Pd 0KGaSTro+gK8Zbr7AKXk2yp6k1GFr4JXO7FrUopXjG2ucLKQtMellct3akrLMiJ2WbNHb1NGXtDZ skOhLJdeLUnKxxp7ViQz264ZOWazq00ui1SrchiURW6fRY2XXMzDRfLrTqMa/ogDJenB5OkN/JpK ktSfJDaUxEN3gcTZrrhiHK/QN+tlfY4dk+Mj/jYrxgpMkvHgdE0Eey96z8DuoHpoTJ1uDqatvFq6 ZIM7jbdrJboBSH5Do7Pohl93B6jJkG4ZudLmpLuHZZURm0Ro3sh26XFsBdK0Ytu6NjOaZfF4/DZ5 bTQHbzdoNRaPPWLxeTNsw/fgDQE66yPKCRbPNeLdNxdeapQ3H9XoFROWp94+g5GHx/zHoqhSp4ia jjyrOpMOko7gR+YQF/63Ml+9GFHSNhJPWbKzw3rXEbW6RN9cR4O30mH88iJmem/Rd8LYugO9M4ol XgZT4qia9Hawz+xZEFMfYQGU+WUL9k3XxhLukEOnkfSOTIdn4qLajEiqf1Ld/FSeQYu1LI2rtrO/ 4rL7lpeMnNb78kKRXLq2kxsJYalA+W33DX1V6o+sVtp5JYyOTm1e86Ky2iUtcX/Ip7EHPT6/M5zh mLD65gv10WTAaAwk8cqs32j0F6JO80felraSd/DWn2HQ6M0ktlfP8G2IWi03XdVO8azSVo3Fa79R bXb6nXavQVJda/RlZ/izvcZbwxVFhf6XtAbMzelTOPcHIjaNxhah9fL86H+kW5S7WVwncJhg6+zu E4ZQDFEpK+rmTBMqB4tpXInjp8Zjnmt6+JduQZnDkVzYJ19uJMx1cElaiUQKaPkKIlmFFAuHc6M8 AwXGMJSBl1Al8mU8zwaU2Ei8h+nGt1PHYYPQUjCI4lGS36XFHxdu31Dc2FBEZf2U4qIWCL1Hi3RU LpIn4G1Ky1GiNZ7FFpezWBTkbYy1eP66klzksI8sduBP+hraslr6JBEKx+MhjT2DSKP/ls6qZPxu oZXYB3GXk1ImXuP8/BupZKfzQpPT4XAq39Vb9WoZC8Z4ty6m52/2XDvyhPQP9U145zMr5VaoWVbo xFNhXVdxh43XkqZi6BnWE8+ogSPr8I69SleksJ7Kh37pb0t6lyxUS5ag35HhNClVs2syw7WzyyW8 TeTxZtpk9dIfjfS8/sbIgp+Y7EY1XoBQr3zlzbc2b/7NL3++Cu8ewkTi/XmJ7MITvYcnipLyk8SB oAGeCf4Ri9dRPEZNiwMh81N0mEDkgD9hsow/Iu1QtP3R9/uqHJUVcoL2KuqleBzSe5k1nVWKCe+u ZQTNknrR4sWLVbIt0+vGC0Pyqu2yf/Nbb76yEivJshrG5MfSE2+8Lj3xI70Nb8FpNKozIzPxfC+M nJID6h14t81yzP9Da8aLVPPFZ0UNik171FRxr59NCANWyygxeRxGo8NjkogGndNqefRRiiMXogFY IpcmSe2VxubFguq5Bo0VO7KwA2bklHQ8/W22H/qtL2rS36amxnJsOnpxCkK/VjpudHhNoxaELYza Rx/lOGryOoznXAFMtKN2r1WjPp0ZsXttCI4H8BNYEnlQfgDW6waM1r6UJZQbThR7tVabxmCMGQne Q/PC5ZYwNGo0iYTTQ5t5tVOroRuJq6vxFmt1VZXXq+Bt1jKPVqmu8qCRaLVKu0X2eoOm1zKVSFFR RMl81RTyeiXLRx9ZJKyZml4V+a+Zgl6vbPlIeUITS+Q69PePnLPa0A419+sduYmY5rK1MHQJh/4+ SW3D38j5+5Afj2nXYr15NuYoz2EHMd26O0U6cJJU0ckF9hpUobEcpY2lkhKawwjNqRA5jNAchOo+ PILJC0N0gHbavqzy9L52qUTchxG68W18zju0fZbgf2GR8rtyWa/JZZOiNKcb23OHZF8qI2SNhUL0 rQgX+wi5QoYadn4NddzdQbiy7MJ0Jr2w5jl5MsI/rx7Bg6DBv0PfG6UN/0h633J6N9QpGlej+WxT xiQ8bspAyzSpBDelSTbXYoRl0zvh7pOG5Mkpu4F6FobKCerCYX9Py7B6SXplHGtt6eA128qcTCfY 1DiZBPC4Lv+krgdbeaHTiPEjVTU3EXwKjJ4ZUhS+JEPD3N6qKidSYh28SnmuYfPjly1/cENdbseG loZFqWjpsntXLr21t4BulZqysSPxZrBmTuW6jYHa+Q0r1uVntaxqbloyIXztNfuvlqbNvXpBUf7s ndMnrJzXkRVu6VxU1byju7y4c0NT+eK57ZHY1K4l8pL85hL/0q7E5IbacMW+4a8VdUycEA03Tmov 6F97GUacNrSlF9lbHEmsl/k/tYyQI5YREEY6lcqhraNQGrdAQFfFXHRu7KKV5/JR9ryMoYNEePgp QhsZ6hDI4sRANkEGvk/HEszlsOm4MKU30BdEUkShofmUHlcUG2YaZMJmeEjhTSXWIGhcEMRA8CtJ 2GpjwMsh9O0J8XLIxR23cAxt71IPGBsZeGCLBvwwx+N/42uMVhXWIhDvGHtzWKW8WLx+4KpdT6xM lqwb2L8bOGAJJBuml3StneAJTVzRVtM1AaOrfPDufx/un/+N/zx8138YPt1/3+Vd1f5ZN39r3e0/ 2V+XPXnxlmthaZ6Bx/WQ2ovfFfhDKjs7JGUHpexMKRaQsjOkbL9E3V6vlMeWcBzU10d3w74Pqu4S iVDVkjw6n8URIFMoQ2gfyBQKZJOJPPq6iSWEHbzYtG6kn0ZMsVk/ArJ+BTxFbzUu/xSdKiMN1eOK h/HWvhMxo6Yjsdl5CKlp+VttZU3DGPS5TpNnsGuEb2BKfp9plvDJM1dv2q9NT5ijsPEavjWkOocP nW4WI1Ie0uDd1uFFWpNRo8ErupLlHN2jhD39eilfZXL4HAhRaD7QWfTqZhov1doy8JauXa+8ebdB ZQ557T6bSfOCosJ+M2z/On+rHq4CtL0F2n4AbboR64fmvCopGZLygnR2nKJq9VK1piQP3VDqYebI Q9XkQTM8Xp6D/0htWte1z+HHko1QFpSD1/nfSRnREo32mtpIpBaNr+h4uUdTNMeGdaBcoSFYCcSe 6TvMNMDwbvIMjauxBsgMBtsCfolyaBjhUxt2NWO2Q8u2/z+ghhczXGlxW7WKwWo6P39NrSOzclYF 266LaZcKL7j76nsuq198S2+RZ8p1G8/I5djprJ5K323Q2kIeF4Ygs2RYdMfOpcnk9LqsrNwsnSPk RpDZ4s6O+SoX7Wpp3H3rs1te1ztYvH8VbMId0F+3pD6JpcZTqUyqsgVSqQ4qK6XOUinTWynVW+mQ XJkyzJgTnzHDhygMVPx+Ko5T4jQ4kEJuPKVYAvRKHt9nVwboldjcxJpsAJo/xia86O7YUoj+bUk3 WSBr7cBTKSeqwVKfwm3raZhiWnG9xJoyMijyEaDeXm/3YAuxMWVon1Pwj0hE3U5fWzGOvbZSfLbW NvbmCkw3jUnA3nMbgTGf7YPCRqi0tafVljYWGrapJMQ2vLIqG/PAP2cGc7ES3RgB7mjc9tRlEzd3 11l1GsVi1lfO2dg8aXlzVnLOFdN3o660GqNFv3nSmvZERkVnZV3/tDJMZrQKPEZnXdfG1IIbFhZG GhfUT944q1Da0nPrymp3MGyxuILu7MxITiSrsausujuVhe7hdvqt2qxUT3Vue1U4lhtTWwMeq9du caKei+ZunzJhTWetUdZWzqK2vwTRil/g7YB82KXzqToaSiqUEgVSdkLKjks5mVI8IMWYgcrxSTl4 I8Ijxd1S3CXFbVj2krLVUrZKSgaou3Aq5eDWqtDjA/FQI4a4BrM7FE+g7jyZRXjXa/RCKogzbLT7 UYcHHzBjNjqI2KgzbqO/eIDfaOG2CptMX6bdj246TRlwWKUqKU4EsJ6IClYlozabITrbQF+YQyTf UVuOqHY6FpJMr2ck8cMYdDsb3ciMIZv1QDEKjA0GLFTN1oLwAop4+Ub8WAa1VR68gBBVfuFy3CHe QR3+wGQzw6c3aKWfq52hglC0NGS7w+4eeUQeWSg9IW2Kxkc+FFF+yaaxhXzOkN9rVhxYdsTPlZj1 F34Qk/80XEct1gr0uHvwvlEj+W7KnKiWElVsEV9hFos5ZSmpOm2VgPiFEbT/avqCUS5UnwtV5tJ+ kWuZWbax7MoypezzXzd8Du9UEowjtIuhzuj+XixLgp2gPp7T6UPHKUiZCur+GcnCWwnqgk68yD+u 6/TiRS+6+USyvZ7uMad7X+WdhyuXavdib+GzkIudg80Uxe8a0JlCNL1xTbmndf/hdQ3r5lbBSUck 1Kg15E9Z0zZ5U2dRonPPvAnd8UxfOChP0FkNapdjJBhrL9n4+MZa6eHVX9tYZ/f7LCZ7hsOON/bx FkKkedXUxiVNYVNGjmyNRhAlcGbnjtytliv7D0LTy9Dmn4Wmw+SNk3g76/2UwR6VptltUCGMCFTD x0HqX7I02h4Q+/bQ9raxEDWacPoq+OVor+mrgGy1lx020qD4dvQS7O+h+bgYgWjuXkclqvu0I/sm c2ARJGeDDJAtITPEkwDfOYbKcqsRRyo8ktFpZK+G0tfH8IdWTbVO49b0TwSuqf55LJX94Mv4mJLy rKLWa0aK1FZvdkZWHGEw6YPhO51OtcGil/9ucRs1qtOOYMBvOf+SyapXNGbE8abmZjsxjmAPAlbh 0jMP/MY8tkfCgtD04xgpSvCrSd9OOfOKpHy1lMeiz/n4pQ+D1IyS4a0aDB/NGD6gVD5yBHeVSrWl 7aVrSpUkNtbRlxv1xGKJ4Ad7qc8Hs8Fa6DtHaQutp+MELgV+yF+22l4vVdW31q+sV7IR4x6SkylL cQ5W0/8eiWir/pk/B61Wd1jL3xeGXUC4ofdd9HW60zXJXqFBApPni22WtVq64HXJUnD1uLdqxEu2 Yz5ilfK4q6Rz9zc2JTsnFuCVJMxrjbkTZpf339RdIFfe1bfuzp5E2dqvb+ncuyiVsD+bNamvaeKi +kx/zYJJHTfLz819+qGbVtcbbQ5HOMOTYVFbHdaOfY8vCpfUr7x5zrz7L2/Nm77+4COt+59dV1I8 c3ll/dLmHOpW40/Cr8xIjGkIfiWse8rE1q6e5OT+dWuWblnzfwDkm9FQCmVuZHN0cmVhbQplbmRv YmoKNTEgMCBvYmoKMTg4MjEKZW5kb2JqCjIxIDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBl IC9UcnVlVHlwZSAvQmFzZUZvbnQgL0pRTERMVCtIZWx2ZXRpY2EgL0ZvbnREZXNjcmlwdG9yCjUy IDAgUiAvVG9Vbmljb2RlIDUzIDAgUiAvRmlyc3RDaGFyIDMzIC9MYXN0Q2hhciAzMyAvV2lkdGhz IFsgMTM5IF0gPj4KZW5kb2JqCjUzIDAgb2JqCjw8IC9MZW5ndGggNTQgMCBSIC9GaWx0ZXIgL0Zs YXRlRGVjb2RlID4+CnN0cmVhbQp4AV2QwW7DIBBE73zFHpNDhO0zQqpSRfKhbVQnH4BhsZBqQGt8 8N8XiJNKPeyBmXkwLD/37713CfiVgh4wgXXeEC5hJY0w4uQ8azswTqf9VDU9q8h4hodtSTj33gYQ ggHw74wsiTY4vJkw4rFoX2SQnJ/gcD8PVRnWGH9wRp+gYVKCQZuv+1DxU80IvKKn3mTfpe2Uqb/E bYsIuVEm2kclHQwuUWkk5SdkommkuFwkQ2/+WTsw2j3ZtVLUaTpb80+noOWLr0p6Jcpt6h5q0VLA eXytKoZYHqzzC37acEoKZW5kc3RyZWFtCmVuZG9iago1NCAwIG9iagoyMjIKZW5kb2JqCjUyIDAg b2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL0pRTERMVCtIZWx2ZXRpY2Eg L0ZsYWdzIDQgL0ZvbnRCQm94IFstOTUxIC00ODEgMTQ0NSAxMTIyXQovSXRhbGljQW5nbGUgMCAv QXNjZW50IDc3MCAvRGVzY2VudCAtMjMwIC9DYXBIZWlnaHQgNzE3IC9TdGVtViA5OCAvWEhlaWdo dAo1MjMgL1N0ZW1IIDg1IC9BdmdXaWR0aCAtNDQxIC9NYXhXaWR0aCAxNTAwIC9Gb250RmlsZTIg NTUgMCBSID4+CmVuZG9iago1NSAwIG9iago8PCAvTGVuZ3RoIDU2IDAgUiAvTGVuZ3RoMSA1MDY0 IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ab1Ye3AURR7+9Tx2NyScSQDZJCwze8Pm HUOicoFwZAm7ISEBAwFuF0F2k2xMIpEUhhxgwW0pqCzIqQgqWCr38AQOGTYUN4GTi5SWWr5QS089 q5TzdXUl5T3kSkUz9/VsshJKqfxBOV09v2d3f/11b8/M9qxZG6GxFCWRGpeFu9vIusY9DFHc0hXu TtiZf4bMbuntURO2nE8krmrrvrErYTvuJxrjunHV+qH2mR/A394eCbcm4vQN5DTuSNjsGsgp7V09 6xJ25lFIx6rVLUPxzLdh27rC64bGp/dgqzeHuyKJ/HG83ZTu1bf0DNm1kFO710SG8lkA+F4lBq9A 91EK3UR2aOkoK4js/xjjIglRHse17vbSl1ZeMfMcZTgse+X8X1vyxQe+ePTLyDd5qfc6voIjZTif S1vBYAFRGkP8bOq9yYjVDjfBoKYig+pQq1CvRS0qmu2kKHuc7kF9DFWkDraN1qNuRX0IVUpq+2H1 s21xyeE9ztZTNpvnTZWUxeOzFOeYVOV1g9mOPqK84/zwBMvC6p1hWfGxlDJ7DHuMPUqtpLDfk4dt oFrKZ3v6ClYpIYT2UzdqFFW07oztj08uV06yYvJIDG1yabLEjimflpUoH5cZAosrp/IMCeLpybC8 VygDrkeUv7huVE6iHkyEDhQg45iy37VK2TnZYHviyn0ug6HNvQmx1oWmx5Sugt1Ka5kVb9htCAfj ynTEl3pTlWkVbuVa10dKaZ7hYLBLXA1KYdnLyhQ0RJqKTj3eDGWSa6cyA6HJLn/eDNQT7ADbS4Vs b9wzTzkOFdPtqyuo2G2wW/tq88s8BtvgnVabv7ugNs9T0KB4Cmry8qAvfd6+2X69fba93F5kz7fn 2t32HPt4R6Yj3fETR5pjjMPhsBvsj/EqxXaCHaQq0HKwz2FzyAZ7Ek7pBDtkOQ/9ySE5BAc5xhvm B9i8jMYb7ODRdK5BOWazNJvBDvUlXIe8isQ1yQqkC1zHDXcSmEOgeaSzuw0bbbmyt8pZlTkrY3qN 74duISsyfC/64cvJXPru+qaAfsAV1Mu5YrqCw+nOYeUHZc9ahCLVRUX1i9b39XZ3tvkjmj+k+SOo IX1bb7tTjzar6pHObh5QdTE31NzSzmU4ondrEZ/eqfnUI71Wu4vCbTzcq/mOUJt/ceBImzfii/d6 e/1a2Bfsa65es2LEWFuTY62p/p6xqnlna/hYzVa7i8ZawcPNfKwVfKwVfKxmb7M1Fp+8v6Op+pYe 7E7V31Gv6vlNet3CZQFdDQd9BnscTt9akgcoXX6K8uUoZUulpBCZ76C+y+XgEvMT+TlKH+wy/y1W YlH7eRUGq2bSAN1Ne+kw2egJ6Pl0Az1IL7BO/LaX01F6i02mq3D2SmRQA73ETPM1aqPfIb+HTtEu OkJpaNNFExDdwTzmBthe6M202fwNTaEKuoOeounodQedNfebfYguoiV0gA6i/YtME45I48wnzY/I QQvR52ZEXjMbzMOUScVUTY3wbqaTzCO+a7aTkyqB7mF6lPbR0/QZu40dNdvNXvO0eQZb1UmTqAll IzvKzoiHpTvMh81/moNgIp8KMWqIdtJv0f9hlAEcrX52E+thO9kuwSvcJhyVtsgTB78FDwU0F6WW VtNdYKCfnqH/0Ffsc8Eppos94rPmteZ/KZXqMUs+kwj1otyJsgNzOsFsbCqbwxrZRnY/28XeEAqF JUJA+KWwTvhEXCAuF9eLb0i3SHF5u/ygLXXwnHnCfM58kyaSi66nNbQJsztFp+kL+pqJ6GsS87BK Vs1uQImyvUI/28f6hUY2wE4LB9j77EP2OTsvyEKaMEEoEnqEncJB4ZTwitgh7hIfEt8Xz0mzZEHe J39s89j/Ntg8uHXwFbPSPGN+iSPWQW6sTDUtoJUUxmy76Rr6FWZxCOUwVu0ZepZesMqHbBKdpS/B ArFMls3K2XyUBew61sY62CPsOMpJC8v/BCyEkCJkCBOFSUKT0Cx0CVHhTSEq5oiF4jxxmXgY5Xnx LfG8eF6SpXHSBGmuVEfbpS5pD8rj0hNSXHpVni7PkhfIS+WovFXeLrbIr8lv2TbZdtjits9t/8Kx 2GBfbd+O1XkBe/Zp7OXvLolNAfpyuplamI81026sxj4Wphh2Vyu7C3x1U765QtwkzhWmYjecpFux W/fQRtoqLqd95tviAfordsoqdBmlP0jV5JIfwOrcRlOxi4aKt6CwID8v1zNF+6lbxZE/KSc7yznx ygnjx2VmpI9NSx2T4rDbZEkUGBX7tZqQqueGdClXq60t4bYWhiN8gSOEn7Kq14zM0VXeLozQiEwv MtsuyvQmMr3JTJauzqSZJcWqX1P1l32aarBlCwPQ7/ZpQVU/a+nzLf0eSx8L3e1GA9XvbPepOgup fr2mtz3mD/lKilm/F3SMKSnmB4eXUnnHOs0Jb8QBS3N4hl/P1nx+PUuDjpjo8Ydb9caFAb8vx+0O wgfXogDGKCnu0IGTtqW1aq3bDC81h7gWXh7QxXBQF0K8r4wifaLm0ydu+Nj5nTms+bdfENQFT004 EqvRvaFtIJebIW6Ft8Oqb1LRrbAlGNDZliEQHGMnkHK4iWeCJ9Sp6ilatdYe6wyBXFoUiGd7s63D V6fGQDzLm2UZJcX9zk2Vbsy+v2R2yWwuK93OTQn56e0J/+sDXDo3PfMBZP2iJAGMM6DVAaeutliD aABbwW+RCoq1VIAnXEGGaXYAzxxdwJ4RPbrsqQvr0aZhGO2+BLhQpy+ekpVtPYSqg8gPxdJnYKWQ n66psXN4Woe0s5+N9ISHPDZP+jniQb7Qyb2is/Cw3ssflh7Mut2ptfP17bXWFLbm9F/ggM2p4Zj1 8XiANwbcuhqEA2+TxfUGpTQGjjC2I2gwc4tBPlc/3lHFlTcgXMy3WocP48MoKYaj0A3tqmK1BiPX 8L2ixtRYXWtMrVHbsZkkjyURiMSCpWCwKQCeaDFG9AZzkmokGJyBfkp5P2iC9FgQPXQO9QBpuUq/ RdLUYjxMxdzGwMKAHvXl6F5fEKuA7TvQGNAHsHODQWSVJZEC8cYO5xDmcmAuK0T86kQveHeJootg LMb7bApobn0gFsuJ8d9bwjYYXezwDjkM4imccoNFG9EWQnPnWGvg1tyAFeScXoMtPbyj8M5+aYan JXGj5c+AdprFcMVlYnj6aBieMSqGK5NIRzA8E5grOcM///EYnjWC4apLM+xN4gbI2UDrtRiuvkwM zxkNw75RMexPIh3BcA0w+znDc388hmtHMFx3aYbnJXEDZD3QzrMYbrhMDM8fDcMLRsXwdUmkIxhu BObrOMMLfzyGF41guOnSDC9O4gbIJUC72GJ46WVi+BejYTgwKoaDSaQjGF4GzEHO8PVJhr05Ol14 DkcvOnbpsh/Myy+gHG9KciZVMxcU/vmMD2hcafiySIN0Jz2E923+L5OAd3CSTuPbTcR/QFWJ/2Uc pXh4ojrSDaLTqNyGLr5nkIRK0O3v0XG0IFpadBy9yJBTy67OcGfkoVZLO4xv/i4/9fUcQ5p/Ht/4 yLAuM4Jvlu+7EGeCfe3NHeVTy2usBIavsAR6G/6XonkLG3wNi4tqI6t6Iz0dLWHkJKI8GXGaZA5d 3JHUmVrK7f8D3/llBwplbmRzdHJlYW0KZW5kb2JqCjU2IDAgb2JqCjI3MTcKZW5kb2JqCjIzIDAg b2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL1NZSVZZUCtD YWxpYnJpLUJvbGQgL0ZvbnREZXNjcmlwdG9yCjU3IDAgUiAvVG9Vbmljb2RlIDU4IDAgUiAvRmly c3RDaGFyIDMzIC9MYXN0Q2hhciA1MyAvV2lkdGhzIFsgNTM3IDUwMyAzMTYKNDk0IDUzNyAyNDYg MzQ3IDM1NSA5MDYgMjQ2IDUzNyA0NzQgNjA2IDY1NiA1MzcgMjI2IDU2MyA4NzQgMjY3IDQ1OSAz OTkgXQo+PgplbmRvYmoKNTggMCBvYmoKPDwgL0xlbmd0aCA1OSAwIFIgL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngBXZJNasMwEIX3OoWW7SJYtpM4AWMoKQEv+kPdHkCWxqmhloXsLHz7 vlFMCl08waeZNxpplJzq59r1s0zew2gammXXOxtoGq/BkGzp0juRZtL2Zl4p7plBe5HA3CzTTEPt ulGWpZAy+YBlmsMiH57s2NIj770FS6F3F/nwdWriTnP1/ocGcrNUoqqkpQ7lXrR/1QPJJFo3tUW8 n5cNXH8Zn4sniY7gSG8tmdHS5LWhoN2FRKlUVZ7PlSBn/4VWQ9uZbx1EmSNRKXWUWCyWTGHRKjrX nLS4ndF2a/EsrcosZ99+W4ky2wIhYMq4A0JKFTvGPRBC1DAWQAjR6D0AIWDG0SMQUmpXMGogBO+R sQVCQGI0QAjeGLVASKltbKMDQkjmyjl6ZqFyxAwIIdlyFLdhAblUjtuwUPnAiNuwgPn6MLeX4Nfl X3CfmrmGgIHFrxJnyTPqHd1/kx89zyTqF1dfsV8KZW5kc3RyZWFtCmVuZG9iago1OSAwIG9iagoz NTUKZW5kb2JqCjU3IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL1NZ SVZZUCtDYWxpYnJpLUJvbGQgL0ZsYWdzIDQgL0ZvbnRCQm94ClstNTE5IC0zMDYgMTI0MCA5NzFd IC9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTUyIC9EZXNjZW50IC0yNjkgL0NhcEhlaWdodCA2MzIK L1N0ZW1WIDAgL1hIZWlnaHQgNDY5IC9BdmdXaWR0aCA1MzYgL01heFdpZHRoIDEzMjggL0ZvbnRG aWxlMiA2MCAwIFIgPj4KZW5kb2JqCjYwIDAgb2JqCjw8IC9MZW5ndGggNjEgMCBSIC9MZW5ndGgx IDE2Mjc2IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AeWbeWBU1fX4733vzb5n1iyT mczLTJZJZiY7gUAeIQkJIUAgowkQSAggiDQIRARFsFbRKGLrvmKrtrVomQyIQ7FKFbWtotZS9wUr rVJJpS61BZL8zn1nJizq7/f99vv7fvvHN+TM595zl3ffOfeee9/LsHZ1/xKiI5sJTyK9K3tWEfkn sAxQ13vJWi/mHV8QolQvXXXBSsxnnSJEY73govVLMR94hxDXTcuW9CzGPIFyUrkMFJin5cDcZSvX Xor5gBnYcVFfb7I88AjkQyt7Lk1en0B/xPudnpVLsH7tRcD8VauXJMtpByH2e1b1rVmL5dYmYOTs ciMhFLQO6iVm8kuiIhwwTLoJ0ffSyUSAUlauuC9R+sUK7UJTzZckXQ0KQvZ9cvmLjM9v+en1J98a 3qo5pnoW6mqgB/yBdqr7ht8iRHv/ybdOXKM5JveULJThGNTwCe6f8Wy3J8H9I54dBHwVzy4C/B3x JeILLPscc58h/oY4jvgU8VesOYQ4hspPEH9BHEV8jPgI8WfEnxBH4tkaGMSHmPsj4oO4Ow2Uh+Pu dMD7cXcY8B7iXcQ7iLexyluYexPxBuJ1xGuIPyAOIX6PeBXxO8QriJcRL+EgDiJeRLyA+C1e9jdY 89eI5xHPIZ5FHEA8g3ga8SvEfsRT2OeTiF+i8gnEPsQvEHsRCcTjiD2IxxC7EbsQccRgPKsULBhD 7IxnlUHu54hHEY8gdiB+Fs8qgSoPI36K7X6C+DHiIcSDiAcQP8LmP0Tcj9iOuA9xL+Ie7PpuxF3Y /E7EHYjbEbchbsV2tyBuRvwA8X3ETYhtiBux663Y/AbE9YgBxHWIa7HBFsQ1iKsR30NchfhuPLMc 7HIlYjNiE+IKxEbE5YjLEBsQ6xGXItYhLkH0I9Yi1iBWIy5GrEL0xTMqYBDfQaxEXIRYgbgQsRyx DHEBYiliCWIxohexCNGD6EYsRCxAdCHmI+Yh5iI64+lVMLIOxPmI8xBRRDtiDmI2og0xCzETMQPR ipiOaEFMQzQjmhBTEY2IBkQ9YgqiDjEZISFqEZMQExE1iAmI8YjquKsa7m8cogpRiahAlCPKEKWI EkREBk/jrhD0EkZlCFGMKEIEEYWIAkQ+Ig8RQPjjzgnQWS5CjDvZQvfFneMBOaj0IjyIbIQbkYXI RGQg0hEuhBPhQNjxCja8ghWVaQgLwowwIYwIA0KP0CG0CA32qUaoUKlEKBACgkdwCIogMugoYgQx jDiFOIk4gfgn4h+Ir+TL0r/Ld0S/ROUXiM8RnyH+hjiO+BTxV8QQ4hjiE8RfEEcRHyM+wuv9Oe4Q PQn6J8SRuANWDv0Q8ce4YxzkPkAcjjumQO79uKMe8B7iXcQ7cUcDKN+OOxoBbyHeRLyBXb+OeA07 +wN2dgjxe8Sr2NnvsN0riJcRLyEOIl5EvIDtfotd/wbxaxz884jn8HrPxh11MLID2OAZvNDTOOpf YWf7EU8hnkT8EvEEYh/iF9j1Xuw6gV0/jl3vQTyG2I0X2oWIIwbxsjHETsTPsetHEY8gdiB+hng4 boeoT38at08G/ATx47i9FXIPxe0zAA/G7TMBD8TtswE/itslwA+xyv1YZTtWuQ+r3Itl92DNuzF3 F9a8E3EHNrgdcVvcPgv6vBWb34K4GfEDHNL3seZNWHMb4sa4vQ3abcWaNyCuRwzEbR1Qdl3c1gm4 Nm6bD9gSt3UBronbpgGujtvmAb6HZVdhze9ilSulnVD1uKnB86mxyXNYP8PzNMivQPaDPKU7zxMH GQSJgewE+TnIoyCPgOwA+RnIwyA/BfkJyI9BHgJ5EOQBkB+B/BDkfpDtIPdpl3nuArkT5A6Q20Fu A7kV5BaQm0F+APJ9kJs0yzzbQG4E2QpyA8hkDXeKO0HOIx7uJHAZ8dBNcSuETHpFPI0twLWINXEL m7WrERcjViH6EN9BrERchFiBuBBRg5gQN7POxiOqEeMQVYhKRAWiHFGGKI2DgRO0BBFBpCEsCDPC hDAiDHFwSoLqETqEFqFBqBGquIG5WinNA/4VZAjkGMgnIH8BOQrufB/kPZB3Qd4BeRvkLZA3wS1v gLwO8iTIL0GeANkH8guQe8EV94Ak6Ga09Ia4hS2O9WicSxHrEJcg+hFTEHVoh8kICVGLmISYiLds R9gQVoa9PM9zccnz4JM8R3aDHADheYJjuQwxB70+G0fWhpiFmImYgWhFTEe0IKYhmhFNiKmIRkQD oh7hQ+Tg4L0IDyIb4UZkITIRGYh0hAtv04lwSHfD7Q6DnAI5CXIC5J8wB/4B8hXI30G+BPkC5HPw 6mcgfwP5COTPIH8COQLyIcgfQT4A7x4EeRHkBZDfgvwG5Ncgz4M8B/IsyAGQZ0ASII+Dx/eAPAay G2QXyN3M+9ww2ngj4nLE8rgFjkJ0GeICNMtSxBLEYkQvYhGiB9GNWIhYgOhCzEfMQ8xFdCI6EOcj zkNEEe2IMCKEpi5GFCGCiEJEASIfkYcIIPzom1yEiFAgBASP4BAUVySRfgROGgUZAfkYDPsayB9A DoH8HuRVkN+BvALyMshLYOi9IFfzfs/3+JDnKhryfLdpc/TKHZujm5o2Rq/YsTGq2zhhY8tGXrcx E3DZxh0b396ovLxpQ/SyHRuiwgbbBk67vmld9NId66K6dVR/SVN/tL3/SP8X/bytv71/cf/a/lv6 D4FC9WD/7v4D/XxidL+U1j9uQuPm/pv6ORuUc6Sfmpg6p19nbFzbtDq6ZsfqqLC6fDU34YvV9PBq ykVW01mru1dzUGvX6tz8Rla7YrUjo9G8OrJaWs1f3NQXXbWjLzqzr69vU9/2vqf6FJv6tvVxOyHF SX0aQ+N3mlZG319JyRPcKDGD7OdG47y2bx83Am89PuVGpFG6AgxwIRhieeiC6LIdF0SXhhZHl+xY HO0NLYr2hLqjC0Nd0QU7uqLzQ3Oj83bMjXaGOqLnQ/3zQu3R6I726JxQW3T2jrbozNCM6AzQt4Za otN3tESnhZqizTuaorOa6NRQY7SBr/TADkKy4XdV9ubs49mCrtu9ys2tch92H3fzq7KOZ3GbMqkp Y1PGtgzeBB8cfqR70relb0/fma4wyQlevyptcxq3yrLZwkUskuUVy2GLQCz3WzjTNtN2004TP9O0 0PSpadQk7DTRncanjC8b+ZnGhcY+I28ysjxvloyhkkaTwWOQpoYNfE3YUGuYaeC3GahkCJU2Sobc vMZa/Uz9Qj2/XU8lfaCg8VPtqJaTtFDwqWZUw41qKOGpl8J7KDOAVzMfUbunMUHJLgdV0AS9abB9 TjDYklCNzm6JqWfNi9FrY/457FNqmxtTXhsj0bnzOgYpvbFzkHJT2mO2lra5mL9661ZS526Jued0 xO53d7bENkNCYolRSBD3oIPUdQYXrOlfs2ZtcE0QPkAWrAHN2n74lUHhE9L98MFSBKoEv+WH1YBC qC1XWtO/sB/6gMqgZr33Q4JlWJVv6eJ/Vs3G9m/7of+2K/+vv7Br4QL29paQkZvPeGF7JbmS3EN2 kMfIL8ivyG/J78nnVAvviq8mT5EPyV/IZ+QkLFMVtdMsWnBGu/9icuQqxUpi4PcTJXESMnpi9OjI w6NH4aW08QzNzZBzCoHTmtG00aFzdSM3jyRGXlLqiFlua+ZegN6O06HRE1wttDSPVrI8t4Wl5Ssd V903snNk+1k3sIqsJv3kUrKebCCXkY3kCrKJXEWuIVvIteQ6sMUmSF9PbiBbyY1kG7mJfJ/8gNxM biG3ktvI7eQOcie5i9wNdryX3Ee2J8tY/j74d5tcykp+RH5MHiaPAB8gD5KHyE/ITyH/M7D+I+Tn oEMN5h8Fzf3kh6D9MdRjtR4hj5Kd8C9GBkmc7CK7wWeYT+USZD/ZQx4nCbIXvLmPPAFv/58EP+4H zz4t65gmlf/2mlj/GXKAPEueI8+TX5PfwMx4gbxIDpKXyMvkXyl5dqwX1sMr5HfkVZhrh8gfyGvk dfImeZu8R94nh8kfYdYd+1r5G1DjLajzbrLWB1DrT+Qo1ByCnrAfrPMO9PEB+Vju4RD0fZgcoWry JeXISTIKKea922QP3Sn7kXnvLvDbg7KdmT92Qp55CK3OfPMo2PxR8C/zDEvflfTGz6HuINg1ZWlm 5a/b5qWkr9DeT0AdZgtmT7TmK2Bh9Bnr58kxi78g2ykue/TpMV+c9gKzIbPf6yRlnXfOsOGfyJ9l yzDrviHb7p0zrMesfAQsyLzA+jjbtn+Etugd1pbZnNk01YaVvQX5oxAdjoGlGT+RPfEJ+Wgs/VGy fIj8lXxKvpQ/j5O/QTz5nHwB+b+D5jjkPoXPs7Xnar4iX5F/kH+SE+DBU2T4jNyZaVYyTEbAx4RS ylGejJxOndayEirAEUMJMU1NNVRL9dRAjdQERxHVOSW6sRLL10pOtzpdppH7SaNWaoN46aQumkEz IW66aTb10Bzqo6fL0sdKvFAi0lzqT7ZzyC3Tx9p64IjkTPbC6hbQCF0Hn0EaomFIl9ByWkGraDVo iiFfCvnxUBaRWUdmkUXkInJC8TH3IozLBlFlUGpcuKBr/ry5nR3R9jmz22bNnNE6vWVac9PUxob6 KXWTpdpJE2smjK8eV1VZEQ4VF+UH/Lmiz+OyWcwmg06rUauUCoHnKClqEBu7vbFAd0wIiE1NxSwv 9oCi5wxFd8wLqsaz68S8rF0PFJ1VU4KaS8+pKWFNaawmNXtrSE1xkbdB9MYO1oveBJ3b1gHprfVi pzc2JKdb5bQQkDMGyOTkQAtvg2tZvTdGu70NscZLlg00dNcXF9FBnXaKOGWJtriIDGp1kNRBKpYv rhqk+ZOonODyG8YPckRtYJeN8f6GnsWxWW0dDfWZOTmdso5MkfuKKafEVHJf3uUxGDO53jtYtH/g hoSZLOoO6heLi3vmd8T4Hmg0wDcMDGyJWYKxArE+VrDhiAsMuCRWJNY3xIIiDKxl9tgFaEzhN4ve gS8JDF4cOgajPkPTk9Qo/eYvCStktzhmphjtSaUJjA1GCPeXk8PGcn1CIosgE9vc1oF5L1mUGSdS ONgZ47pZyf5UiT3KSjanSsaad4tg2QaxoTv5e8kyV2zzIm9xEXhW/vXHBD+Ue2N8oHtR7zLGniUD Yj3cIdiStMPpvB4SUk/SmA2DkTDU7+mGm1jOzNDWEQuLq2I2sQ6tDQroxN+wfE6H3AS1DTHblBjp 7k22ioUboC1MkYYB5hg2QNaX2Naxl5SNHh4s92buKiPlpJONI+aYAk4JNAx0LF4a83RnLob5udTb kZkTkzrBfJ1ix5JO5iXRHCs4DJeDH3Cg3Aru7Zzaqcpw2zGVX+3t4DL5TuYtUHgb4UOsq4ECc0yJ WebRuhpvB80kqWpwlWQNljqrH8jw/ilN0BgITac0ZebA5JZ//i9DysQbgGHE1GNjEmAQitNjwut8 69CwNhtQgbdhSf0ZAzyrU8jIA0z29s3j5JgtksaAIaiZO5vYPRQXcZD2QrE6xsF9yirmRZc3RmZ5 O8QlYqcIc0ia1cGcw2wt+7dljsieAGVvJ2dJ+1k5LB+HZTGS09LekcrA82NHrDEo+5W5Vc5PlfNj 2aZziptTxd4BtdgyZ4BdXEx2SLywgsA5ykBzz/Xj0sphsTZCoBQbe0Sv2ds40JMY3bxoYFCSBlY1 dC8bD8tgQGxePCDO6agBX8rrfmPmBnbpNNJCW9rriosg9tQNivTatkGJXjtnbsdeOMt6r23viHPw 9Ntd1zmYC2Ude72ESLKWY1qmZFW8LMN6mg0ZtVw/c69EyGa5VJAVcr4XHsBlHVYCHSW9CQ515lQ9 DnQC6iRZ1wk/sMJcy8AFEIcbvIuZey7vXDbQ3ckWF3GAK+GXxqg4icQ4cRI8syv1Ma24pC6mE+uY vpbpa1GvZHqVWBejDgrGSUBMGugWIU7BlOsgmbQTZoeZzX7O702MjrZ35BzMHOrMgSUxH2RuR0wT hH1A4Z8G9aYy6Qb11Njm3h42DhKFpc5WZnNvJ6yFVIdQpTmmgR40yR6gRqPchk1HaNQLvgEHyu03 Qya2uTPWGWQX7VjORuT1mmOkSRwPbsc+FQF2oXDnQJpYyiY2VI1p/VsYNDA2Am8jZE0mZOFiEHDZ Han0MPJeEYp6u73gAYH0zoGpjrFUy/wGmiUQEoXAElm0mclCwm6L9+sM2pgmBB3CL0vrQtAh/Ko6 wSjs5uXclmQFuLY5poMRBc4wZbIBWAeKmtlY4HcLDJ5V/RXrpi1BZouXQmhkg5YvpYLimMHf3APB H9vrQCOOSzWGvtR+pmJ9HECtit25HuzO+9sToz8R17MIkPopLhLZ5sAmJsncCxObdA6cq4jNCxYX qc/VGmT1wIDa8M0N0F5qwxihFyKwr029TIjwJnFyPrJVOUK2CleSrSqJBPnPyVShhVwB0iKoyDTu WpJOvyIrQJjuCu4NcgVfQpq554hTIcEzawtZzz9KvPxviQNGDwdR+ISvX8EzKPs+WA6xw3eqtPDt MxWxEgOxEBOU6IkR9BxJI2qorwA388TGnlnlH3iSpK30aq6ZO8HfImxW+BRPKgdUNtVy1Q51qXpQ 8z1tpvYF3VTdG3r2jTAFPOWv4d+GJ2IerlFNWskM0v4EMdB74XF7PH1hd329ulj1JGQ54qUvsCvS eyWrwBkyM2vFCuUNfJuluVZ1A9dOaoffe/c5+DiYVh0+SMPvDr02ZB5+zlIdHjo0VBKhlhyLLDYj p1IplaIvxFXkBSrLykoncRXlAdFn5GRdeWXVJL6sNJvjoSZqJnEsT/m3T83kG4ZzufU5E+aUKGjQ 7/RY1Wrek23wl3lNLa1iZX6GQlAreYValVdZJ0bXTfO9pHXlZbnzXFqgOws4/LTCeOIzhfHk+UL9 ySe4j6s7JuUq1xt0nEKjvjc/255bkjWxxWAyKIyZzowsldpi1BY29QzfmeF3arVOf0aWn/XlH54A FnGOnhCeUdiIjwTIB+z1YhTODLmjH+/Wmeh0MTH6sZTNUn69QXQZ4Ht2RkdApxV9WuIVRGoRA/4E LZSyJR3R0zRer89z54pittbgIKLPpUpzz06LKqLEVVtbm+asHmcps4Bl4TxeltE6VErTwwu6MlwH S8s2bjlwgLoOLOjCZEkEXkLCMjhzGI+xUfxXrlYSCQY7/Q4H+i2Pz1EZedEXCFRWUXSWUyXyOcKg XukYV1JWna0Xzh/JmC0Y3BXBULlNqafblGZxUtmExjyL8mn6OO1blFtoV/Aas4EKw0arTlA6C0Xh cotdx/M6h/U5+OYgJVtHT9Bbwbp2UpiyLeFueUzSmmejWWgYLFESydyVUpREOv2pWWMpx2ljp7ca skvzAmXZBoOnNJBXmm3I1Zq1SiV8CM+lUmztwfWUF8NKqCFv4vUknSEScYbD2pDLlZHgFu/OLdHr tZB4nORWtqXrda59tBjCTWj0+G6zyE0vSYwel7ws5TSzTwN+OsORkpDSk9/miY45lHmUvWhkriwt raXhQ0OlljIz+7BUTwyXlVnK4MYe+/97lbPMI1LmwhCXR0XLaZux9ZjNOWkZ8ytL2pUX69wRf24k S8+NXCekeSI+X8STxo/cxumyw6B36yqLHwnVRbx66hKoz+ApGOcfzMxLP8PK7pNHDBYtr9CZdULW yQ9TNheuLKs0idWFp4Z5Wjg+12SEVgRWFfhBaAU/VJJ6ci96Yrc5ZCnQ7oOwSUgVd3e8oNaS4OAb dyEzLDJ5tZkT1L9LkpwTU4qJCVqwR8ppc6bWEJg6CAtoKFhNw0OlhyAqwXqqBisP/mu9nGHNPD7E i2ebMafU4czm7SzaZfNOp8NBywN5gQDUYgFPaFVnjy8tLHXrhbX2/BKpcHZyjuqLc+jMsrrMGRvP D+VIC2rcZcX51pUm7cij4+tsZcWXXDOufVyWT2fSCoLOoqc5JdPLMkasYxa9vShP4HWV569rnbyi fZLVmF/dHBoNiPxiqSNNoRz5fmZJPZvpwdETKhusrBqyKTnTNWGtntREIvrSBNcqaWv0TpfBL4p6 X4K7VUqTXPqq2YWzI6KOPycq1dZCIHIdAtumVaeHq6vTql3mQ3I6DdLMupLpW5syCyYnIS/yqekI UaVSnoTWMmsyuCRTEH9UiveV9sK6suqG/DTFy9wBRVrelKrxkFGOvKXh0qvLwlVZWv5DekwweCqL I9Ueo/AF9yGvzSoPF5U4eM0Ul9ukUJjcLr781ItOt1lOC8tzCxwKXme3nsrh37C6DArB4LKdyuff MTsNCoUj6IdZOXX0KH8J/zopIxItQKvFNc7yBDdvN8nLI+MTXINktvBO+rmTOhP6cnqqnJazvyVq 9AY6vbw8NLkwQV1S5mEf5Tf6tvo4yTfL1+3jTT6Pj9MLPp/gTowelox6CNVul5m2uk+EprHZLGkg M/GIpG8ViCtcy6Zx7VCQTWXYC7q6FnaxeRwOdl081HUxzOwD1WEII2j5f/No5BXCtoxAoKIiueWz qFxWUR6CrX1sexfkQKNiGrvNUVZaWcVfYgsWFhdYqraeN3Xd+ZGJ63evO9+SNzlS2zu9zKyz6JTa rMYFfROW39pd9FX3xPMq06fWVnSGPEazSmU2Tp1Q52++qGnGmpbcysLaQluWL8uYEXB6ct1itrUg es38t9Jyy3LGSZVwxOLIFaNHBaJYRQrJRHJb0q/anMp9XDdsPEHue5KG2LWVFTmCIpIKLZEEbZEM gWmZjebp1S62t1Yn6LS4pGiFzVr2Ty14CCI8C+tJZ+z5V/sAI9JkfM5j4UQ+Eo1tbhZcIYqkQVUW B9gP4gspX7RtXvGMqQ25uvTCbE9BulYPUdwfcet99fVN+b0D5+ePnLQUTilLj5RVZlf0VJTUF9vo sXVPXtNkCYwv6JEjjNakU4has06p1Jm1I1aI+8aZ1+zqr75wdonRV5k/8kb91NJZS8GGLbA2XoS/ 0wTgBHlr0oa6zOp9HPwhiYS51ZLWmtOoq87LFIyFKSPCamiWNK5p5bIByyG3WzK2Kqaz805yjoMF YWeEQI3TWfOv9nFGpD5rHkKIHjMkD7FZnn/ZcNicxFXxL2pdBdne/HRdw+3zl27tzC9b9IOFLRtq 2Gboh83wRGVvZcnUoD2toL48o6Ss0otBGUzWO202WKmXmXLiBAq7HdpvuLy+qWT2kopxF84pNfmq 8tncmwZ22wMxJUjKqQLttstqzSlKcFPiwXIhwSyXwxdZi7jMomcEFkycBtpKBLPATZ8ldAvc/UJM 4AQhKwxW3WWirYySF+qEjwSmuf5OjGYjZ+GNGpeetmpcUEHzTykLZ+lwMHgIAshQMpZ0XbygKzi0 oIvtje9CAA+z0K35n722PNWVYo4NfSBHBZsRHxVSp7m8StlPKn5PQe7wB5kTuibXLW6OmDR6Nc8J asP4uWvr1u26dMKkSx6+cNX2pZEv+HkLI1PD6Rw9ESqq7prsszqtqrScdIfHYTK6nJaaDb/YuO6p qxvr+u9f4L1wfe7EOWHYH9Phb4J3KC6F/XFN0isOM8lMcAt3RQr92gR176qcmhFIzeRAgnr2SJEm 73Rzk3xaZ9O3tHaIhg+UDR8oOwCW3Eu0/8FGZyx3eT7a0QrKM48XEFArknFUPuMK3B2CWqtUWdJ9 zsy8DP0DGpNWYbM+oM8qzc0tcetWWa0KUPXltq5ry2vMN2oE4TO3aFWp1CqLf0JwttaZ764KD4e0 0EwBH9yr4Sp3vlPbMu+6eSF4FErPg7m6Ak7jWxUzICjmkAa0ylPEwT1FsogdYqUWvnZy2WNSurkZ l/BrYAR57cp3//WyM9fk2CK02thmUVEO+7+DbkhFrBStk9qjEyZG22t8qYHyG2C9QXQyaWlk+vhx zdMnVIP3roCRboCIbifsNRE8k0kmg53qdFSnpQZCdQJJcN3sMaIRh5p8jJB30y54mEiqv3GEXx/V 2GBOh0ocA/8qrOxSciWOYbDQyraUbKLjFsZJNpxbj+/S0Vb5/Mq2fDi/tko6qXhaYXpuc/p0HFlt WrUcC4O4kbBNfS/8ofo/0/Lsu2DbLsyTr20jdjxy2flX9Vkluf6SLL01tzoQWVSRsr02o8DjLXRq p905Z97GVt/YTdPhydMq3I1ThneO+eTyVOqCWbNqLhjoQWtw++SzE/ylhHlkMGACH0h6kmHSerRh LW/gtSyEgUVgec2RtFJwWsBk9zbb5f0ATpKyHcBFsKiG0A7a/3f9cxbTN924vH8quX0QO7RqW3p2 mr2wGG4/uVmmblucNG5cliHb69IpBI5vyQ1laNniya0pGj6Uul1+7Mb7SicHTLxKo9XbC+Hum0eP cp/B3TeTo3j3e8lkLvRYbmluqR6CSr3kI3ohRENHqmCCaj+yVElsYlR5qzi+ylJlcZhqaA17ssxk J42aI5MzFQXTHGZ2qoRXCmbB8dnYwQPsE4Q5Uz0U7LJUV4fDC7uC5qEu+GXzB/ThMHtclrz/zVc7 bXZBjlPwGIlveULKZF6ZOskk91wl91n1shvnlM5rijj0glqv0QWlaKWvIs/mn9ja1jrRX7pgS3vh TKnIqhZ4XqVXawLVLRFfqdccmDSzbeakAM2evnZGnsnpshcXuUW7Kj07w5iRn5Ed9Gb5iqS5tdKK 6YX6NLvJZPc4M302ld1lN2aINk+hNyunSOoELzlHj3E3CoNkPLkZvfS4xWKYUEDEYoj7caehOBXu iyHc7xKb3IaUwgCKuLOpJEGnxiVV8gwI2+pBEBouGy49UMpO6PLiLU4+rv6nOsE1LODJ79zgz9nP 3CLk0x/bMrgbdWkiPAy1fKfJt8JqY2H9Qp0b1/bTbMrarM+EJti86RaVUqdUbCgKWyGUBmZeOpv+ BqP/83ByUcAzu/Z53B9GupqbVRqVyp6L1lKohQ/IEtIVD082MhMFZ3QAJIehzpAF/0hFsJ3MaJrc 1NQ0ocMYZDaqaEpjNvK3zgcMgqVq4fRRCy9ADpaG4UEyfCBcJk9S+UUInJvBZPA6J3nfORb2aCDv d/CUkDwVWL7BGjmpOffNhlGodVYxVJU5HQwzcuUZJuAVKrMv9M0Wo5tO286oU9jTnimusXldaSql VgW2C9mM+qTtTlspKyvHYTIYv82oX6Ue2r/6mnnBvuvZiZp/DvaPFcmIqcvD47QHbGyyFjfn6RTp zbny4TkX9o5zDs8sYsrbr/wgaPyPVD9zp0g9rY3tzBb5TFZZNaaA83F6gSenwAVbwuz5G1tzZAPB 80WaHzaOnqrUOXlsp2C7wbLrlnJjihF1o7x1cG2pCAr37R09wW+F+w6TG/C+nyA+boC4SC5XKGlC LvhHnDp9guuRTBJ7o8o7dN4wEUUdvJd7jOm8uoJmUWdxN1tOb6Jgi/RwhutdOJOw1xRp1Rku87sQ LDMgK884Mzymscj4jW2ZYRz44JXHJ19TVFnhgSH1nkJ+TcFeTvD81WqaNT5SXOUxCQ89JBjd5YVF 5S6q+eqIhmZUlxRVZBsV2+/j9RnFeUUVTqp7r9ziMMJ7UIOWThx5RmvQ8AqjwwIvSO9JSzcqeaVB O/IaLVTr1YJgTLeNrAALOUZu5XeDhXLJMrTQHqrRGEkG7CR1e6TcDK82w5Xg1oApjBme5nSttVnb IswkLfLJlB0oTr+wyTC/ixYIH2Q3r//G6nD3OTw+vFdZA4E8GihP3Te8n4HA7nDYVNxVF2lmteZH XJxqncGuGDlocMEridIso+pVfr/SWlQVrM5UjxxId6jMLgsNKtONfLnot6t5fbpzeAfXk2FRqx1+ ePvH3k6lgbAfJfzNg8zpbD6vc1ZwSs9FyxetXl5c13cR+w/0/wfz2bfZCmVuZHN0cmVhbQplbmRv YmoKNjEgMCBvYmoKODgzOQplbmRvYmoKMTkgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUg L1RydWVUeXBlIC9CYXNlRm9udCAvVFZLRk5aK0FyaWFsTVQgL0ZvbnREZXNjcmlwdG9yCjYyIDAg UiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAxNjUgL0xhc3RDaGFyIDIw OCAvV2lkdGhzIFsKMzUwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDAgMCAwIDAgMCAwIDU1NiBdID4+CmVuZG9i ago2MiAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9UVktGTlorQXJp YWxNVCAvRmxhZ3MgMzIgL0ZvbnRCQm94IFstNjY1IC0zMjUgMjAwMCAxMDA2XQovSXRhbGljQW5n bGUgMCAvQXNjZW50IDkwNSAvRGVzY2VudCAtMjEyIC9DYXBIZWlnaHQgNzE2IC9TdGVtViA5NSAv TGVhZGluZwozMyAvWEhlaWdodCA1MTkgL1N0ZW1IIDg0IC9BdmdXaWR0aCA0NDEgL01heFdpZHRo IDIwMDAgL0ZvbnRGaWxlMiA2MyAwIFIgPj4KZW5kb2JqCjYzIDAgb2JqCjw8IC9MZW5ndGggNjQg MCBSIC9MZW5ndGgxIDcwMDAgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBrVl5eBRV tj/33uolG+kEyNpJV9OkkXRiIIABwiSdpQNOZA/YjUE6hEiCYKIBwQ2aUQSaTRlgFBdcRkEdpdJB pgM6RFFnRBGeOjqu4DKjzjcI+n3quKXe71Y3SBy/ef+8uvmdc+45526nTt261Vl6zbIWSqYQCfI2 L2nqIOPK/hSso/napWqsnpJFZG64omPhklh94GLUr1q4+LorYvWcIPgTrS1NC2J1+gH8olYoYnU2 Gnxo65KlK2L17HfBkxe3N8ftOX7UrUuaVsTHJ2lXr2pa0hLzzx0r6x3tnUvjdRv4BR3XtMT9Gdon /al/fQARg5egL2kC3UMW4mSjEppNpPxBySMT6tJuSm387YHdY+elTvjKmms1un/go2GFUnj+rvmX frf3x4U2siajmmD4SwPaWSr6plCNjb7b+931mIzs6fxL9FCDuKDbneU4/pQYTicBLoZHPHmOHjFM 5EXKHd6ocHWnDy5NrSoWKtqXGFQFbQf2AocAheaJfFhtoKuAELAXOAQcB8xYYL5hVcHbgV3AScAs 8oQ9ojpsVcNENtpmY72pIpNOAzogyAFaAkwF5gFbgF2A2fCTmnZgFXAIOAOYySsyI1tHYe6ZkQ0G 6160uNSoNsWqjXONavelgRifPD3Gay+OuY2PuY0cHVNfWB3jw4piPL2gNITOuxNTSnurMkQGFpmB iXeAMv4cpTJGDrpPDCYN4AJTNTRekd491F2665BQiAkuGC0gh94rWCQlrbQqkev8NKWTg3/OT8Us /FT3gLTSXVW/5h/SXuAQIPiHKB/wD2gVPyljDloJ7AIOAceA04CZn0Q5gfI+f59S+XtUAlQC84Bd wCHgNGDh74Ha+LsyPwwq5UqA83dBbfwdLOsd0FT+NqS3+dt6L38tUjautMcQPCVxwVEQFzJz40J6 RmmUvxr5djgyyo07jYw6KIZQBY0SQyIFIx1RkRWZ0OaI8o+6VY/jvqoR/HXSAI6ZvI6RXycVmAYE gQ7ADOkNSG9QCLgNuA/QAGQZqA1Q+RHgZeANGgF4gWmAlR+PYJgoPxZxVzuqMvgr/M+UiYgf5X8x +Mv8BYO/xJ83+Ivg+bAf4S9E8h1UlQQ7oY0N3AZeAruJP9M9NN2hV6XxQ4igA7QEqASmAvOALYCZ H+JDIgsc6ejkIB3BM+zgEfrM4A/TA1byLnJ43TVIQFUS9/hfQQLZpe5yc697x52oSuLevBWSJO5b NkKSxH39akiSuBdfC0kS94JFkCRxz5kHSRL31AZIIFF+7x+HDnOUTb2SqVWpfDmitBxRWo4oLSeF L5eFvlXkHO+KFBYiYju9nuGFjtABFnqKhWaw0AMs1MJCK1loNQtNYKHLWcjDQnYWymchLwsdZGMR ihDz7utXHefNYqEjLPQ4C3WykJuFClhoKAuprMwb5c7IxXjqwHwG666SDx13dv+qArtPKnciok7k vBN7wiHQY4Bu1LxwUofEnLPzJR/SXVgZq184vrS9ahI/jIaHcRsO0wlAwQ06jDQ6jE4Oo7tU0Epg HtALnAZ0wAzvIVjHFoOmgpYAlcA8YBVwGjAb0zmNqXBqB5VT3GtMrAS0Epgqa/wwyhAUJ3d682x2 m8c2SWyxs9R8NjVfz+dllJGBvTk9zZoWZSn7v0n59zcplFCVwDfzLZSHG3FbnG+JfJvniLI7Iu6D jqrB7HeUryDr2DhyswLwsdRp1MeQ3Sr1o8nOHwMvjdhno1lqxF3kOMAGyFb7Hd/aP3Z8Zo9yiJ/a DzreVKMKizj+Cs1j+x2v29c7XiyJWqF5yh1lYAdUw7XHPtbx+BHDdTUMOyOOlZLtd9xkn+i40m4Y WmKGyztR86Y6ZrjnOCahv1r7fIe3E33ud1TaL3dMiHmNkW32O0ZgCp6YWIjJDrcbg7ryjQ5nlUVZ q7fIssPit0y1XGQptRRZnBaHJc+SaxlkTbfarAOsydZEq9VqtipWbiXroKh+0uuRb71BZuPlZ0ZC M1IM2YYdhsltBpQ4s3L6NWkDRT2vn1nN6rXeZqqfr2pfz3RFWeL0OZrJVc209Hqqb6jWxnrqoxZ9 hlbmqdcs0y7zdzG2OQCtxtdFGTX4o0yXqjW5WnqNv4cYS1uzKVfyC9ZsCgQoK+PayqzK9Iq0cXW1 v0CChjJY6/npyvpJ9GR58rQd9TP92qN5Aa1UCnpeoF777Uy10d/DvmRnfLU97AvJAv4eUcG+9M2Q elFRGwjUR9lsw49U9gX8kDFg8LPmkyr9SLXmx/x2xvwK0B5+QyWDX0ICFRh+BQkJhp/CpF9X51Bf bddQEPhkqtRp+HRmquf7HCmATwEIfDJCdMTwOZIRkj5ahdGN3Q6XfBC4sByyGy52lmO4GDPvMlxK 4i7rz7msN0YSsdkYPpKgm5STZ31STsLnvED+d7Gl2uNh3eWB5kZfi8sXdPlagKC24drWLC00X1W7 mgPSoGrCHZzf3Cp5U4sWcLXUas2uWrWr3Gj3M3OjNJe7aruo0dfg72r0ttRGyr3lPldTbaB74rTR Zf3GWn9urNHTfmGsabKz0XKsiUa7n41VJs0T5VhlcqwyOdZE70RjLDJyfJq/y0rVgRrcP8m7eVIi 8jWY6wxUZ9g6KozkLXdmrcw9gNPKHkryBLRkV7WWAsi8Lq4qrpImPFPSNADq1Lgpa2W5M/cA2xM3 2aBOc1WTZ+myzmWU5Wurjf114oJq6TJ5K2LUI3W/eMHFp3mbauXZul4rnFmvVU6f4++yWKAN1gag G39Wl5Tki+q9MeWFUI6XjkKcc5S6CVKXkBB3/M9cMOYENaLTg4PGwW7mzWdLqTMgtPz6Bo6toGEO wtA4x38AZyn5kugMYIGdzMM6z/Ym12HIFNMQlt15FkuXxaV4LJbGueHa6SFP59mQnO3OI4NlECNW Sz3Y2kwHKBvIMe2mbMVNWUT6JwC+i/RP+tr0T6Vdcv5PbHTROIj20OOsjR6nQ/QsO4NWe6mH9pE8 AtXS3XQjbaO1eK3NgWY9zUAxQb+NZev78GVyP16Y99NR+F5KK+kAZbAs/TNaRWvEa2i1hlJoCFXR NGqnTewSfRk10gnlZiqjS+gq6mAh3a9v1rfqv6eHqEf8Rf+RkiiHmlGO6p+b/qa/S8VosZ3upBNs a8KT5MUoIXjeQ9fQTjFXYfpC/TvMwEnLMQeFJtNR1ss96L2FPmFZ7EZRg14e1DX9OXjZaS610k46 wMawidxpatQn60cpA2OsQK93UoT2o0TpaXqbJZvO6L/Xz1A2FdHFWM8+eoX1ir4fV/dVIm4mRGk4 jYOlnf5Ef6bjzMWe4e2mZFOpyWu6Xn+dBtFImoXZ7kbLf7Bv+EqUVeIFpU6vpgGIy+0y2vQ8fcBy WAmbymbz4byd3yuuIStGHImygNoQ7zvQ+/tIo/08mR8TDyqPKd+b8/pO6gNwR9x0F91Dz7AUrFRl new37A32Ea/h8/hd/EOxTXlEedXShFVfTktoEz1G37B0NpZNZ5exVnYjW8tuZ3eyo+w4+5RX8QZ+ JT8tWsXV4mmlGmWm0qncbLrVtMH8aZ+/77m+/+n7Ri/Vb6XpyIfVmP12uhcr66Fj9BbKCfqQmVgS G4CiMiebxW5AWck2sQfYHvYI24dRjrMP2Wd4JX3Fvud403Izz8XhRx6BXPwanDC38bv5MZTj/F/8 W5EphgiPGCMmiIBox6zWittQnhQfKDnKMUVHnEtNO0y7THtMj5meNZ0xJ1t+g3f8yz88+GPhj+/3 Ud+6vh19kb59+gc0GPcQbw98gk3A7JtQFuF+70DG7aXXWDJil8MKWQW7BJGZxxaxq9kKRPIWtpM9 ZMz9CfYUovQmO405p3C7MecL+RhezaeiXM5b+NU4jG3l+/gb/DthEUkiVQwWhWKimCtaxFJxndgh NPGyeE98KL4WP6DoSqLiUIYobsWjTFTmKcuUe5VPlE9MjaaXTH83J5qXmG81R81f4FRTYZlmmW6Z a9li2W953RpEdh6mJ+mPyMBzFzspVgufeJI281FKNj5hXkE+z6MFYjJHpvI9bB2/ie3jQ00rzOW8 nE2hM4obsX6B7+Jf83IxmdWzmbSIj4x1aB6kPAppgnKYTilPYW2voOcV5mS2kp82J1MEZ6RxOCM9 L0YoHvESvS1OMItyP72jJLJMdorvFtOQBU8rFSY/OcXd9IS4mt1ET3IfUeL31o3I4ynsUewLDayU /VvoOAZPQRaViY/oZrqS/41O4TleR79jC5SFtJlGsRvpE3oYT8Vw01XmQvNg9iJvU8J8INtHXHkE qxvHhjJhGkS3sLlip/k0f4uW0TElkd4Xf8Dsj/EnxGTljGkGa8UTcBPdSlfrq+k6k195lS0kwWZT gXISu9uNolRxgq/CrtKIPW0/nu4D2AeqxGRospA5lyAvZmGH2IlyB/YJBRnUhmf8Uuxir9A+cwOP 0kLTAIZdB7/UvNQ3g+boD9Od+kK6St9KxdgP1uo3osc99HfaQnvYmr4bqAOfkm/h2b7EVMePmer0 Yh7mb/GZfEf/+4toF7As+ifKE7gzFaaDFFbepJlUqW/U/4rsvgA77J00HwfWj7HKzzHCJNFLo/qm 8C69TnRgvSdour5bd7BEatUX01R6ih6ymKjJ4sE91tirWO8N1MJn6EtFS18b4rAFUfAiWsuw/6z3 1sxqqPJWVvxqQvn4cWPLxoweVTpyRMmFxUWewuEXDHMXDHUNcaqO/Dx7bk52VmbG4EED09NsqQNS kpMSE6wWs0kRnFGRz1UXVDV3UFPcrkmTimXd1QRF03mKoKZCVdffR1NluyaY+nl64XnFzzy9MU/v OU9mUyfQhOIi1edStaO1LjXK5kz3Q95U6wqo2ilDnmzItxlyCmSnEw1UX1ZrraqxoOrT6q5tDfuC tcVFrCspscZV05JYXERdiUkQkyBpma6OLpZZwQyBZ/rGd3GypmCJWo6r1qdlu9AU3YgCX9MCbdp0 v6821+kMFBdprKbZNV8jeVLyGC5UYwyjmWs0izGM2oYzjkYb1K6i3vDGqI3mBz3JC1wLmhr9mmhC Hz4tzYNxa7XM6z/O+qmKznEmW3u+NVeEfVltqnQOh9eq2n3T/ee1zXXKHgIB9IG2vKAuGK7D0Btx p+rlWVzjawJ+ja3BkDhYFhiriq0vduotCC5StQRXtas1vCiIW5MT1mjGdc5ITo63Rz9JOT413OB3 ObXKXFegqdbeNYjCM67rzvaq2f0txUVdtrRYYLsGpMaF5JTzhRYEPWYzJMNdSvUzzkWWyTm6LsZJ UFObVczE78KaxkrSMpbCzWNxA3AFGFppC3BH2rSEmmDYNl7qsUSmmQpsLjX8FSEDXKf+1V/TFNeY C2xfkTTKPDmXahprOitrHo9WWChTxFKDe4o5Vhj1McVF10a5y9Vhw/ez/GigaYhtU2B8CcLvdMob vCHqpfmoaKHp/lhdpfm5EfKW4GzNg9LSe9YyeJa0hM5azjUPupDJ++T3LA3WrO5zf6m2jIG+1vEa y/gv5paYvX6mqx5HY9UXDsaztr6hXy1mlwFF3GCLS9rAGr/I5dBJiecKwxo7IZ91wXHZn6wpBfgz G0m9IGqxIisNDVPrNFtwUowGEp3O+DPzfzWK6mdkK4P91Cy+DG28Jz7R2LS18n71ftNLDov6Bmw5 HCf7cDixnw2pFpvlxXGGjMeHvlOt0WgWnswC/OGTY6xEIFfzImSwNOApMtSB3Hi1n2NuvFEAl8zO 4qI67JnhcJ1LrQsHw01RPTTfpdpc4R7+LH823OHDbhdLnKh+YEOuVrcxgIi1svF4PDhVd7nYuuld XrZu5hx/D37iUNc1+COc8ZpgdaBrKGz+HpXIa2i51EqldFFlheoZFhnhVsM/t8dLFDKsiqEw6s34 dcPQxZygY9Qc5TGd7awfh06J6byGTq5P7jE1Df74bTESQj56yCH8hwbd8KO0ROnU5f9jGIq8kmGY D/4QTscxjaH+fyTc6GswleOtjleWPOSb5H9iLETONGdaAQh+LaIfVNH7g9dE35Oq9Mr5LWHHeSvO Qknk6MGhYqZ3QIL5ZZVG4Iy7LPnS3Vke29dzT1HJqZEjBo6+aFQp3pBm1xD3ku2tbdu3t7Vu56+0 bdvWBhl96T+wI0o7vwyj5ntT2RjiOSYVQ2Qr3ddneabYPp5r+weVTEZXYoxzsKJ0siO33y6nHZs7 6cNwrv2lS0C5FucWOd/0ePzM+A6hhtn1dVPmeKquaWtaPLnhfwFCRx3KCmVuZHN0cmVhbQplbmRv YmoKNjQgMCBvYmoKNDY2NwplbmRvYmoKNjUgMCBvYmoKKE1hYyBPUyBYIDEwLjguNSBRdWFydHog UERGQ29udGV4dCkKZW5kb2JqCjY2IDAgb2JqCihQaGlsIEh1bnQpCmVuZG9iago2NyAwIG9iagoo UG93ZXJQb2ludCkKZW5kb2JqCjY4IDAgb2JqCihEOjIwMTMxMTA3MjEzNzM2WjAwJzAwJykKZW5k b2JqCjY5IDAgb2JqCigpCmVuZG9iago3MCAwIG9iagpbIF0KZW5kb2JqCjEgMCBvYmoKPDwgL0F1 dGhvciA2NiAwIFIgL1Byb2R1Y2VyIDY1IDAgUiAvQ3JlYXRvciA2NyAwIFIgL0NyZWF0aW9uRGF0 ZSA2OCAwIFIgL01vZERhdGUKNjggMCBSIC9LZXl3b3JkcyA2OSAwIFIgL0FBUEw6S2V5d29yZHMg NzAgMCBSID4+CmVuZG9iagp4cmVmCjAgNzEKMDAwMDAwMDAwMCA2NTUzNSBmIAowMDAwMDU4NzUz IDAwMDAwIG4gCjAwMDAwMDA1MDYgMDAwMDAgbiAKMDAwMDAxOTI4MiAwMDAwMCBuIAowMDAwMDAw MDIyIDAwMDAwIG4gCjAwMDAwMDA0ODcgMDAwMDAgbiAKMDAwMDAwMDYxMCAwMDAwMCBuIAowMDAw MDAxODkyIDAwMDAwIG4gCjAwMDAwMDQ2NjQgMDAwMDAgbiAKMDAwMDAwMDAwMCAwMDAwMCBuIAow MDAwMDE5NDU3IDAwMDAwIG4gCjAwMDAwMDA3MjEgMDAwMDAgbiAKMDAwMDAwMTg3MSAwMDAwMCBu IAowMDAwMDAxOTI4IDAwMDAwIG4gCjAwMDAwMDQ2NDMgMDAwMDAgbiAKMDAwMDAwNjA5NSAwMDAw MCBuIAowMDAwMDA0NzAwIDAwMDAwIG4gCjAwMDAwMDYwNzQgMDAwMDAgbiAKMDAwMDAwNjIwMiAw MDAwMCBuIAowMDAwMDUzMjYyIDAwMDAwIG4gCjAwMDAwMDAwMDAgMDAwMDAgbiAKMDAwMDAzOTgx MSAwMDAwMCBuIAowMDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAwNDMzNzIgMDAwMDAgbiAKMDAwMDAw ODg2MiAwMDAwMCBuIAowMDAwMDA2MzU2IDAwMDAwIG4gCjAwMDAwMDg4NDEgMDAwMDAgbiAKMDAw MDAwODk2OSAwMDAwMCBuIAowMDAwMDA5MTM2IDAwMDAwIG4gCjAwMDAwMDkxODkgMDAwMDAgbiAK MDAwMDAxMjEzMCAwMDAwMCBuIAowMDAwMDA5MjQzIDAwMDAwIG4gCjAwMDAwMTIxMDkgMDAwMDAg biAKMDAwMDAxMjIzNyAwMDAwMCBuIAowMDAwMDE0NjgwIDAwMDAwIG4gCjAwMDAwMTI0MDQgMDAw MDAgbiAKMDAwMDAxNDY1OSAwMDAwMCBuIAowMDAwMDE0Nzg3IDAwMDAwIG4gCjAwMDAwMTY4MDEg MDAwMDAgbiAKMDAwMDAxNDk1NCAwMDAwMCBuIAowMDAwMDE2NzgwIDAwMDAwIG4gCjAwMDAwMTY5 MDggMDAwMDAgbiAKMDAwMDAxODk4MCAwMDAwMCBuIAowMDAwMDE3MDc1IDAwMDAwIG4gCjAwMDAw MTg5NTkgMDAwMDAgbiAKMDAwMDAxOTA4NyAwMDAwMCBuIAowMDAwMDE5NDA3IDAwMDAwIG4gCjAw MDAwMjA2NDIgMDAwMDAgbiAKMDAwMDAxOTg4OSAwMDAwMCBuIAowMDAwMDIwNjIyIDAwMDAwIG4g CjAwMDAwMjA4NzcgMDAwMDAgbiAKMDAwMDAzOTc4OSAwMDAwMCBuIAowMDAwMDQwMjk0IDAwMDAw IG4gCjAwMDAwMzk5NzYgMDAwMDAgbiAKMDAwMDA0MDI3NCAwMDAwMCBuIAowMDAwMDQwNTQ0IDAw MDAwIG4gCjAwMDAwNDMzNTEgMDAwMDAgbiAKMDAwMDA0NDA3MSAwMDAwMCBuIAowMDAwMDQzNjIw IDAwMDAwIG4gCjAwMDAwNDQwNTEgMDAwMDAgbiAKMDAwMDA0NDMxMSAwMDAwMCBuIAowMDAwMDUz MjQxIDAwMDAwIG4gCjAwMDAwNTM1MjUgMDAwMDAgbiAKMDAwMDA1Mzc4NSAwMDAwMCBuIAowMDAw MDU4NTQyIDAwMDAwIG4gCjAwMDAwNTg1NjMgMDAwMDAgbiAKMDAwMDA1ODYxNSAwMDAwMCBuIAow MDAwMDU4NjQzIDAwMDAwIG4gCjAwMDAwNTg2NzIgMDAwMDAgbiAKMDAwMDA1ODcxNCAwMDAwMCBu IAowMDAwMDU4NzMzIDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgNzEgL1Jvb3QgNDYgMCBSIC9J bmZvIDEgMCBSIC9JRCBbIDw4NDQ1ODIzZDg4NzI2ZjIxYTg1YjVkYTJlNzgyNmJkYT4KPDg0NDU4 MjNkODg3MjZmMjFhODViNWRhMmU3ODI2YmRhPiBdID4+CnN0YXJ0eHJlZgo1ODg5OAolJUVPRgo= --Apple-Mail=_A7144CFE-B5A1-4BA1-95F4-CB16FE5D25A8 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii
--Apple-Mail=_A7144CFE-B5A1-4BA1-95F4-CB16FE5D25A8-- --Apple-Mail=_2DB70E99-95A2-441C-AD59-74095C834CA2-- From phil.hunt@oracle.com Thu Nov 7 15:54:55 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AA6A21E808F; Thu, 7 Nov 2013 15:54:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.203 X-Spam-Level: X-Spam-Status: No, score=-5.203 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rMOvdYLiMXAs; Thu, 7 Nov 2013 15:54:48 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 93B8511E829E; Thu, 7 Nov 2013 15:54:41 -0800 (PST) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rA7NsYAH006467 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 7 Nov 2013 23:54:35 GMT Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7NsYS4020033 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 7 Nov 2013 23:54:34 GMT Received: from abhmt111.oracle.com (abhmt111.oracle.com [141.146.116.63]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA7NsY8s020029; Thu, 7 Nov 2013 23:54:34 GMT Received: from [31.133.161.213] (/31.133.161.213) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 07 Nov 2013 15:54:34 -0800 From: Phil Hunt Content-Type: text/plain; charset=us-ascii X-Mailer: iPhone Mail (11B511) Message-Id: <374F1417-8F59-47AA-8925-A491F36A3B58@oracle.com> Date: Thu, 7 Nov 2013 15:54:33 -0800 To: "oauth@ietf.org WG" , "scim@ietf.org WG" Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (1.0) X-Source-IP: acsinet22.oracle.com [141.146.126.238] Subject: [scim] Thurs tap and barrel X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2013 23:54:55 -0000 A bunch of us were talking about heading over to tap and barrel (near canada= place) for craft brew beer and barrel wine tasting.=20 Maybe a little scim/oauth on the side.=20 Suggest we meet for 6:30 at hotel lobby.=20 Phil= From kelly.grizzle@sailpoint.com Fri Nov 8 10:06:19 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CFAD11E8135 for ; Fri, 8 Nov 2013 10:06:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.821 X-Spam-Level: X-Spam-Status: No, score=-2.821 tagged_above=-999 required=5 tests=[AWL=-0.423, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_46=0.6, J_CHICKENPOX_57=0.6, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tSWqoKVNzvEN for ; Fri, 8 Nov 2013 10:06:15 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0208.outbound.protection.outlook.com [207.46.163.208]) by ietfa.amsl.com (Postfix) with ESMTP id B0E0711E8108 for ; Fri, 8 Nov 2013 10:06:14 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) with Microsoft SMTP Server (TLS) id 15.0.815.6; Fri, 8 Nov 2013 18:06:13 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.183]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.64]) with mapi id 15.00.0815.000; Fri, 8 Nov 2013 18:06:13 +0000 From: Kelly Grizzle To: Phil Hunt , "scim@ietf.org WG" Thread-Topic: [scim] Table of default attribute schema values for index, returned, mutability values for SCIM WG meeting Thread-Index: AQHO3AHqQR3BUU5lAU+D4xJUTs0ePZobodTQ Date: Fri, 8 Nov 2013 18:06:12 +0000 Message-ID: <92252c4749354e819a822b87ff07a4ed@BN1PR04MB392.namprd04.prod.outlook.com> References: <43969E5C-E0B4-4C0E-B2AE-EDD952BEF06B@oracle.com> In-Reply-To: <43969E5C-E0B4-4C0E-B2AE-EDD952BEF06B@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 2A4143F0005A502A41453D x-originating-ip: [2001:67c:370:160:8d96:b3a7:ad78:921a] x-forefront-prvs: 00246AB517 x-forefront-antispam-report: SFV:NSPM; SFS:(41574002)(189002)(199002)(377454003)(81542001)(81816001)(53806001)(51856001)(224303002)(80022001)(69226001)(83072001)(63696002)(2656002)(19580405001)(56776001)(83322001)(87266001)(16236675002)(19580395003)(74876001)(54356001)(46102001)(80976001)(87936001)(76796001)(76786001)(85306002)(65816001)(19300405004)(76576001)(15202345003)(79102001)(74366001)(81686001)(4396001)(76482001)(47736001)(77096001)(31966008)(33646001)(19609705001)(74706001)(59766001)(77982001)(74662001)(47446002)(74502001)(49866001)(54316002)(81342001)(56816003)(74316001)(50986001)(15975445006)(16601075003)(47976001)(3826001)(24736002); DIR:OUT; SFP:; SCL:1; SRVR:BN1PR04MB392; H:BN1PR04MB392.namprd04.prod.outlook.com; CLIP:2001:67c:370:160:8d96:b3a7:ad78:921a; FPR:; RD:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: multipart/alternative; boundary="_000_92252c4749354e819a822b87ff07a4edBN1PR04MB392namprd04pro_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com Subject: Re: [scim] Table of default attribute schema values for index, returned, mutability values for SCIM WG meeting X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2013 18:06:19 -0000 --_000_92252c4749354e819a822b87ff07a4edBN1PR04MB392namprd04pro_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Looks pretty good, Phil. I think you have User.groups and Group.members fl= ipped, though. User.groups should be readOnly and Group.members should be = readWrite. It might also be good to be more specific on the Group.members sub-attribut= es. I know there have been questions in the past about this since the "typ= e" sub-attribute is immutable. --Kelly From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Phi= l Hunt Sent: Thursday, November 07, 2013 1:40 PM To: scim@ietf.org WG Subject: [scim] Table of default attribute schema values for index, returne= d, mutability values for SCIM WG meeting As discussed, here is a first cut of default values for tickets 10, 35, 47 These are not final. I am assuming we will make corrections. Please let me= know if I missed any attributes. Thanks! Phil @independentid www.independentid.com phil.hunt@oracle.com --_000_92252c4749354e819a822b87ff07a4edBN1PR04MB392namprd04pro_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Looks pretty good, Phil.&= nbsp; I think you have User.groups and Group.members flipped, though. = User.groups should be readOnly and Group.members should be readWrite.=

 <= /p>

It might also be good to = be more specific on the Group.members sub-attributes.  I know there ha= ve been questions in the past about this since the “type” sub-a= ttribute is immutable.

 <= /p>

--Kelly=

 <= /p>

From: scim-bou= nces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt
Sent: Thursday, November 07, 2013 1:40 PM
To: scim@ietf.org WG
Subject: [scim] Table of default attribute schema values for index, = returned, mutability values for SCIM WG meeting

 

As discussed, here is a first cut of default values = for tickets 10, 35, 47

 

These are not final. I am assuming we will make corr= ections.  Please let me know if I missed any attributes.

 

Thanks!

 

Phil

 

@independentid<= /span>

phil.hunt@oracle.com

--_000_92252c4749354e819a822b87ff07a4edBN1PR04MB392namprd04pro_-- From leifj@mnt.se Fri Nov 8 10:36:57 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A06F11E80E9 for ; Fri, 8 Nov 2013 10:36:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.999 X-Spam-Level: X-Spam-Status: No, score=-2.999 tagged_above=-999 required=5 tests=[AWL=-0.601, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_46=0.6, J_CHICKENPOX_57=0.6, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0fslBjuS606s for ; Fri, 8 Nov 2013 10:36:52 -0800 (PST) Received: from mail-pa0-f54.google.com (mail-pa0-f54.google.com [209.85.220.54]) by ietfa.amsl.com (Postfix) with ESMTP id 2A98521E811B for ; Fri, 8 Nov 2013 10:36:41 -0800 (PST) Received: by mail-pa0-f54.google.com with SMTP id fa1so2570675pad.41 for ; Fri, 08 Nov 2013 10:36:41 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type; bh=+n/pM19pLsa+WsVtavhJVF1gSkWfcXH0LkZh89bqpbw=; b=C59Yh32fKM89NEY1yZdiFar0PR3tzdSynko3ttZ7yotas1s44CF7w6+FjL8uuLHRFM R3s7zQZFzNHJZplCdBLPhVAtZLgjsOZhumIbf0a+sw5Xl0NJxDPb6N7OXQNXO8AKXVWS tVkYHDUbLe7oA6tw8X2s8FEr0eXB8q0gzZL0seM8o6n0bbeu79hbFgMua0sQXBiCn/xN ZBsZgQNTm1RmmYZnbROzfOVezAncrBukVQNguIP3zAaaBUxGB6wVtbBBRGqAlH0uAAEX M6O5vIm2NesYN+FSRlSe7WsAt14LN0jOn1NTYc3dV7L6sAJdJsvJm400HtmnT2LNQaC4 NI+Q== X-Gm-Message-State: ALoCoQkj1kMACQqD6/pLGhyIH9QXtl1dLFrTen4GqkawRcD2iSZlvb5LNSjlHbI84MxPRewugvFC X-Received: by 10.68.225.9 with SMTP id rg9mr16563834pbc.122.1383935800919; Fri, 08 Nov 2013 10:36:40 -0800 (PST) Received: from ?IPv6:2001:67c:370:152:e0e6:901:2deb:925d? ([2001:67c:370:152:e0e6:901:2deb:925d]) by mx.google.com with ESMTPSA id zq10sm16042857pab.6.2013.11.08.10.36.39 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 08 Nov 2013 10:36:40 -0800 (PST) Message-ID: <527D2F36.6000008@mnt.se> Date: Fri, 08 Nov 2013 19:36:38 +0100 From: Leif Johansson User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.1.0 MIME-Version: 1.0 To: scim@ietf.org References: <43969E5C-E0B4-4C0E-B2AE-EDD952BEF06B@oracle.com> <92252c4749354e819a822b87ff07a4ed@BN1PR04MB392.namprd04.prod.outlook.com> In-Reply-To: <92252c4749354e819a822b87ff07a4ed@BN1PR04MB392.namprd04.prod.outlook.com> X-Enigmail-Version: 1.6 Content-Type: multipart/alternative; boundary="------------080707060201090003060306" Subject: Re: [scim] Table of default attribute schema values for index, returned, mutability values for SCIM WG meeting X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2013 18:36:57 -0000 This is a multi-part message in MIME format. --------------080707060201090003060306 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit On 11/08/2013 07:06 PM, Kelly Grizzle wrote: > > Looks pretty good, Phil. I think you have User.groups and > Group.members flipped, though. User.groups should be readOnly and > Group.members should be readWrite. > > > > It might also be good to be more specific on the Group.members > sub-attributes. I know there have been questions in the past about > this since the "type" sub-attribute is immutable. > > > > I uploaded that deck just now - all slides are now online. --------------080707060201090003060306 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
On 11/08/2013 07:06 PM, Kelly Grizzle wrote:

Looks pretty good, Phil.  I think you have User.groups and Group.members flipped, though.  User.groups should be readOnly and Group.members should be readWrite.

 

It might also be good to be more specific on the Group.members sub-attributes.  I know there have been questions in the past about this since the “type” sub-attribute is immutable.

 


I uploaded that deck just now - all slides are now online.
--------------080707060201090003060306-- From phil.hunt@oracle.com Fri Nov 8 10:59:33 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EEFE11E818D for ; Fri, 8 Nov 2013 10:59:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.402 X-Spam-Level: X-Spam-Status: No, score=-3.402 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_46=0.6, J_CHICKENPOX_56=0.6, J_CHICKENPOX_57=0.6, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qbElg-J+Lfv3 for ; Fri, 8 Nov 2013 10:59:27 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id 1115611E81C4 for ; Fri, 8 Nov 2013 10:58:12 -0800 (PST) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rA8Ivt1b005306 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 8 Nov 2013 18:57:57 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA8Ivsuv001275 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 8 Nov 2013 18:57:54 GMT Received: from abhmp0015.oracle.com (abhmp0015.oracle.com [141.146.116.21]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA8Ivr8s029795; Fri, 8 Nov 2013 18:57:53 GMT Received: from [25.69.154.198] (/24.114.39.108) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 08 Nov 2013 10:57:53 -0800 References: <43969E5C-E0B4-4C0E-B2AE-EDD952BEF06B@oracle.com> <92252c4749354e819a822b87ff07a4ed@BN1PR04MB392.namprd04.prod.outlook.com> <527D2F36.6000008@mnt.se> Mime-Version: 1.0 (1.0) In-Reply-To: <527D2F36.6000008@mnt.se> Content-Type: multipart/alternative; boundary=Apple-Mail-1A190E54-AB93-498D-BBE6-291A30D8E04C Content-Transfer-Encoding: 7bit Message-Id: X-Mailer: iPhone Mail (11B511) From: Phil Hunt Date: Fri, 8 Nov 2013 10:57:46 -0800 To: Leif Johansson X-Source-IP: acsinet22.oracle.com [141.146.126.238] Cc: "scim@ietf.org" Subject: Re: [scim] Table of default attribute schema values for index, returned, mutability values for SCIM WG meeting X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2013 18:59:33 -0000 --Apple-Mail-1A190E54-AB93-498D-BBE6-291A30D8E04C Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable You are right. Thought i think there was some discussion that group.member v= alues cannot change only added or removed.=20 Which reminds me we should clarify what immutable means on multi valued case= s.=20 Phil > On Nov 8, 2013, at 10:36, Leif Johansson wrote: >=20 >> On 11/08/2013 07:06 PM, Kelly Grizzle wrote: >> Looks pretty good, Phil. I think you have User.groups and Group.members f= lipped, though. User.groups should be readOnly and Group.members should be r= eadWrite. >> =20 >> It might also be good to be more specific on the Group.members sub-attrib= utes. I know there have been questions in the past about this since the =E2= =80=9Ctype=E2=80=9D sub-attribute is immutable. > I uploaded that deck just now - all slides are now online. > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail-1A190E54-AB93-498D-BBE6-291A30D8E04C Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
You are right. Thought i think there w= as some discussion that group.member values cannot change only added or remo= ved. 

Which reminds me we should clarify what i= mmutable means on multi valued cases. 

Phil

On Nov= 8, 2013, at 10:36, Leif Johansson <leifj= @mnt.se> wrote:

=20 =20 =20
On 11/08/2013 07:06 PM, Kelly Grizzle wrote:

Looks pretty good, Phil.  I think you have User.groups and Group.members flipped, though.  User.groups should be readOnly and Group.members should be readWrite.

 

It might also be good to be more specific on the Group.members sub-attributes.  I know there have been questions in the past about this since the =E2=80=9Ctype=E2=80=9D sub-attribute i= s immutable.

 


I uploaded that deck just now - all slides are now online.
=20
____________________= ___________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman= /listinfo/scim
= --Apple-Mail-1A190E54-AB93-498D-BBE6-291A30D8E04C-- From phil.hunt@oracle.com Fri Nov 8 11:03:10 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F8E521E81C1 for ; Fri, 8 Nov 2013 11:03:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.303 X-Spam-Level: X-Spam-Status: No, score=-4.303 tagged_above=-999 required=5 tests=[AWL=0.901, BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id njEveDqanMcc for ; Fri, 8 Nov 2013 11:02:59 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 852DD11E81A2 for ; Fri, 8 Nov 2013 11:00:06 -0800 (PST) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rA8IxwnJ003309 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 8 Nov 2013 18:59:59 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA8Ixwc1009395 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 8 Nov 2013 18:59:58 GMT Received: from abhmp0011.oracle.com (abhmp0011.oracle.com [141.146.116.17]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rA8IxwY5024446; Fri, 8 Nov 2013 18:59:58 GMT Received: from [25.69.154.198] (/24.114.39.108) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 08 Nov 2013 10:59:57 -0800 References: <066.61c4fcd7eed40104ab520a6a6a12275c@tools.ietf.org> <081.342c804a47eb5ec935fcff4a05582b5d@tools.ietf.org> Mime-Version: 1.0 (1.0) In-Reply-To: <081.342c804a47eb5ec935fcff4a05582b5d@tools.ietf.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: X-Mailer: iPhone Mail (11B511) From: Phil Hunt Date: Fri, 8 Nov 2013 10:59:54 -0800 To: scim issue tracker X-Source-IP: acsinet22.oracle.com [141.146.126.238] Cc: "scim@ietf.org" , "kelly.grizzle@sailpoint.com" Subject: Re: [scim] #42: Consider making server root searches optional X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2013 19:03:11 -0000 +1 Phil > On Nov 8, 2013, at 10:21, scim issue tracker wr= ote: >=20 > #42: Consider making server root searches optional >=20 >=20 > Comment (by kelly.grizzle@sailpoint.com): >=20 > I like the text. However, I think the ServiceProviderConfig should > specify whether root search is supported or not. Proposed text: >=20 > Schema doc section 9 (Service Provider Configuration Schema) =E2=80=93 add= the > following attribute between the filter and changePassword attributes: >=20 > rootSearch A complex type that specifies root search configuration > options. REQUIRED. >=20 > supported Boolean value specifying whether root search is > supported. REQUIRED. >=20 > --=20 > -----------------------------------------+--------------------------------= - > Reporter: kelly.grizzle@sailpoint.com | Owner: > Type: defect | phil.hunt@oracle.com > Priority: major | Status: new > Component: api | Milestone: > Severity: - | Version: > Keywords: | Resolution: > -----------------------------------------+--------------------------------= - >=20 > Ticket URL: > scim >=20 From t.rossner@tarent.de Sun Nov 10 23:31:55 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91C3011E8125 for ; Sun, 10 Nov 2013 23:31:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.266 X-Spam-Level: X-Spam-Status: No, score=-3.266 tagged_above=-999 required=5 tests=[AWL=0.033, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E1DEHalWGIQy for ; Sun, 10 Nov 2013 23:31:50 -0800 (PST) Received: from mail-bk0-f41.google.com (mail-bk0-f41.google.com [209.85.214.41]) by ietfa.amsl.com (Postfix) with ESMTP id D1DCF21E80DA for ; Sun, 10 Nov 2013 23:31:41 -0800 (PST) Received: by mail-bk0-f41.google.com with SMTP id v15so265005bkz.28 for ; Sun, 10 Nov 2013 23:31:40 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=KfUMHFmwGohjdpbM3Do0fmmHc8lMSSI+zx/C+yjq0hg=; b=eljfoChC+84Kr7qaISbfQze1/KigtTLNmhotylVEWF9q9pAFofmdktTWZTan97lS/b qCkvLJF/KVmvL0lakixPTIcgaZUOOT3tp7XEjpCiFFvFhuqcUZuPknWz9QRr+/YIy1sc 6TWO+jSGrfDBQjdaiHWiFTQQCZWgxG4uplUqhS3DSpV+AB/XXyZUO+sT1JkSOL5txHvx Je5NSd/UP1EIeuXnqdmI2rrowv5tQQhakkAYh+225EypD7l6PlledtNtuJQcLyB3IHcX l2Y7P3POKkbdYQc0s9vP57+XMk69Jxiioo7pDhOUNEfr+cgTl5ht3CIoVQ4VZHmqctM9 SFIw== X-Gm-Message-State: ALoCoQktFJpeYZYgzUKqbRGcv0zDpiTJQsfYCUQUYjFjtlCdHkm9FUfBJHx4Gbmw2xXTKxuzMys1 X-Received: by 10.204.226.135 with SMTP id iw7mr20639897bkb.4.1384155100059; Sun, 10 Nov 2013 23:31:40 -0800 (PST) Received: from [172.26.4.225] (fb-n15-11.unbelievable-machine.net. [94.198.62.204]) by mx.google.com with ESMTPSA id z6sm11729582bkn.8.2013.11.10.23.31.37 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 10 Nov 2013 23:31:39 -0800 (PST) Message-ID: <528087D6.9020004@tarent.de> Date: Mon, 11 Nov 2013 08:31:34 +0100 From: =?UTF-8?B?VGhvcnN0ZW4gUm/Dn25lcg==?= User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.1.0 MIME-Version: 1.0 To: scim@ietf.org References: <066.61c4fcd7eed40104ab520a6a6a12275c@tools.ietf.org> <081.342c804a47eb5ec935fcff4a05582b5d@tools.ietf.org> In-Reply-To: X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: Re: [scim] #42: Consider making server root searches optional X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2013 07:31:55 -0000 +1 Thorsten Am 08.11.2013 19:59, schrieb Phil Hunt: > +1 > > Phil > >> On Nov 8, 2013, at 10:21, scim issue tracker wrote: >> >> #42: Consider making server root searches optional >> >> >> Comment (by kelly.grizzle@sailpoint.com): >> >> I like the text. However, I think the ServiceProviderConfig should >> specify whether root search is supported or not. Proposed text: >> >> Schema doc section 9 (Service Provider Configuration Schema) – add the >> following attribute between the filter and changePassword attributes: >> >> rootSearch A complex type that specifies root search configuration >> options. REQUIRED. >> >> supported Boolean value specifying whether root search is >> supported. REQUIRED. >> >> -- >> -----------------------------------------+--------------------------------- >> Reporter: kelly.grizzle@sailpoint.com | Owner: >> Type: defect | phil.hunt@oracle.com >> Priority: major | Status: new >> Component: api | Milestone: >> Severity: - | Version: >> Keywords: | Resolution: >> -----------------------------------------+--------------------------------- >> >> Ticket URL: >> scim >> > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From moransar@cisco.com Tue Nov 12 21:45:18 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC29521E8087 for ; Tue, 12 Nov 2013 21:45:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IdGzkx6d8psy for ; Tue, 12 Nov 2013 21:45:13 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) by ietfa.amsl.com (Postfix) with ESMTP id DDDAE11E80F6 for ; Tue, 12 Nov 2013 21:45:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1618; q=dns/txt; s=iport; t=1384321513; x=1385531113; h=from:to:subject:date:message-id:mime-version; bh=Wko9o0oWxn1FTvAdU5tq3wA45JbR1WX4MHocKgZzKpc=; b=On0LJKqgLhk0m8knd02h8t95oQtG49OiW4Mjt4x7otiZVakrHDALeb20 sAJooDtuEqft+u06CvhpyHjmySpCGCeODwy4lVhTtAbgfoIlPfCRwaMYQ JLrcwNPsO3IlmXCPvbz4QWAY7FKQvfVQNTimRg9fiAU1qQ7X3uLgLhZWh o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkcFAL8Qg1KtJXG9/2dsb2JhbABagkNEgQvAQRZtB4IcEG4dAQsBdCcEiBSdQ6FXlBcDmBCSC4Mogio X-IronPort-AV: E=Sophos;i="4.93,690,1378857600"; d="scan'208,217";a="284160225" Received: from rcdn-core2-2.cisco.com ([173.37.113.189]) by rcdn-iport-4.cisco.com with ESMTP; 13 Nov 2013 05:45:12 +0000 Received: from xhc-rcd-x01.cisco.com (xhc-rcd-x01.cisco.com [173.37.183.75]) by rcdn-core2-2.cisco.com (8.14.5/8.14.5) with ESMTP id rAD5jCYw015058 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 13 Nov 2013 05:45:12 GMT Received: from xmb-rcd-x08.cisco.com ([169.254.8.147]) by xhc-rcd-x01.cisco.com ([173.37.183.75]) with mapi id 14.03.0123.003; Tue, 12 Nov 2013 23:45:12 -0600 From: "Morteza Ansari (moransar)" To: "scim@ietf.org" Thread-Topic: Next SCIM WG call agenda - Nov. 27th @11AM Pacific Thread-Index: AQHO4DOFgKPbaLASGEGMCE4l9lbhSQ== Date: Wed, 13 Nov 2013 05:45:11 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.8.130913 x-originating-ip: [10.21.127.99] Content-Type: multipart/alternative; boundary="_000_CEA851E7B4544moransarciscocom_" MIME-Version: 1.0 Subject: [scim] Next SCIM WG call agenda - Nov. 27th @11AM Pacific X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2013 05:45:19 -0000 --_000_CEA851E7B4544moransarciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi folks, Note that we don't have a call tomorrow and the next call is on Nov. 27th a= t 11AM Pacific. We will be going through all the open issues on tracker. P= lease between now and then if have taken any issue and have a proposed text= use the mailing list so we can get the easy ones out of the way and use th= e call time for more challenging issues requiring live discussion. Cheers, Morteza --_000_CEA851E7B4544moransarciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable
Hi folks, 

Note that we don't have a call tomorrow and the next call is on Nov. 2= 7th at 11AM Pacific.  We will be going through all the open issues on = tracker. Please between now and then if have taken any issue and have a pro= posed text use the mailing list so we can get the easy ones out of the way and use the call time for more challe= nging issues requiring live discussion.


Cheers,
Morteza
--_000_CEA851E7B4544moransarciscocom_-- From swm16@psu.edu Fri Nov 15 05:24:50 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8193E11E8114 for ; Fri, 15 Nov 2013 05:24:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.185 X-Spam-Level: X-Spam-Status: No, score=-1.185 tagged_above=-999 required=5 tests=[BAYES_40=-0.185, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OpVR5DlH0zQo for ; Fri, 15 Nov 2013 05:24:44 -0800 (PST) Received: from tr22g10.aset.psu.edu (tr22g10.aset.psu.edu [146.186.149.133]) by ietfa.amsl.com (Postfix) with ESMTP id 3BEDC11E812A for ; Fri, 15 Nov 2013 05:24:40 -0800 (PST) Received: from ucs9.ait.psu.edu (ucs9.ait.psu.edu [128.118.73.28]) by tr22g10.aset.psu.edu (8.14.3/8.14.3) with ESMTP id rAFDOdwI3293396 for ; Fri, 15 Nov 2013 08:24:39 -0500 Date: Fri, 15 Nov 2013 08:24:38 -0500 (EST) From: Steve Moyer To: scim@ietf.org Message-ID: <2042388792.32413805.1384521878781.JavaMail.zimbra@psu.edu> In-Reply-To: <7849338.32407115.1384521607422.JavaMail.zimbra@psu.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Originating-IP: [128.118.58.157] X-Mailer: Zimbra 8.0.4_GA_5739 (ZimbraWebClient - FF25 (Mac)/8.0.4_GA_5737) Thread-Topic: JSON format for Error Thread-Index: 0Wh1kt5Kx8y5tlUKc66GYDCxPcEgOw== X-Virus-Scanned: by amavisd-new Subject: [scim] JSON format for Error X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: Steve Moyer List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2013 13:24:50 -0000 According to section 3.9 of the API document, each error contained within the JSON should MUST contain a string indicating the HTTP response code for that error. I have two questions: 1) When there's more than one error in the error list, which HTTP response code should be returned in the HTTP status code if they don't all have the same value? 2) Most systems treat HTTP status codes as integers - Is there some reason these are specified as JSON strings? Thanks, Steve -- From randomshelley@gmail.com Fri Nov 15 06:44:20 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E2DF11E81C8 for ; Fri, 15 Nov 2013 06:44:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VsJA4qYZuX3Z for ; Fri, 15 Nov 2013 06:44:17 -0800 (PST) Received: from mail-ie0-x229.google.com (mail-ie0-x229.google.com [IPv6:2607:f8b0:4001:c03::229]) by ietfa.amsl.com (Postfix) with ESMTP id BFDA611E81C0 for ; Fri, 15 Nov 2013 06:44:13 -0800 (PST) Received: by mail-ie0-f169.google.com with SMTP id tp5so4844977ieb.14 for ; Fri, 15 Nov 2013 06:44:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=3BlW5XPpEiGLEqoJYRLZn3LkpMzvFF3PAw+rRIE+xSs=; b=QZRrSEBImRdI5LhttSWSMGktMnGH4vzq5EU/5Z13VOrLNRbTe+2wnAIDIRwZOa7peF 7B3SSJbQ0bp4sul7KET5Ualzz2bn9+T9adQDdVlYxrD/i0D7wO74gyu5AF+woAmxDd8t Fii925WvbeSGBd7u+TJFmvy60jc5LT8Oh/1Viuf7ppKa6QSUiKtcdbqoTIug0jZuxbk8 Kqs5OppCHSfW210ayGD7MejrfcIoH6OC7bl3chxI9J06KPNbMMqMDDolkQOIKJOOXcJF eg3K3L0B+JXyRP+Si6YMcKBxJivocQ4s5BtrkSrN/Bu0sO1RPodaY/K1CDcuDYbx67GB oGdg== MIME-Version: 1.0 X-Received: by 10.50.87.36 with SMTP id u4mr4725027igz.40.1384526653282; Fri, 15 Nov 2013 06:44:13 -0800 (PST) Received: by 10.64.61.170 with HTTP; Fri, 15 Nov 2013 06:44:13 -0800 (PST) In-Reply-To: References: Date: Fri, 15 Nov 2013 08:44:13 -0600 Message-ID: From: Shelley To: "scim@ietf.org" Content-Type: multipart/alternative; boundary=089e0111d0d85a421d04eb383be9 Subject: Re: [scim] Pagination Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2013 14:44:20 -0000 --089e0111d0d85a421d04eb383be9 Content-Type: text/plain; charset=ISO-8859-1 The SCIM specification defines the *startIndex *for a pagination response as a "1-based index of the first result in the current set of search results". However, what is an appropriate value for this attribute if pagination is requested but *the requested startIndex is greater than the total number of results*? Also, what is an appropriate value (if any) if there are *no results*? Further, the specification defines *itemsPerPage *as a "non-negative integer" which "specifies the number of search results returned in a query response page". If pagination is requested by the consumer, but there are *no results*, is it appropriate to return *0* for this value? For more details and examples regarding these questions, please review the previous post [1]. [1] http://www.ietf.org/mail-archive/web/scim/current/msg01361.html On Wed, Nov 6, 2013 at 1:51 PM, Shelley wrote: > I'd appreciate some clarification on some of the SCIM pagination behavior, > particularly as it relates to situations when the "startIndex" and/or > "count" exceed the total number of results. > > Given the following example scenarios, assume there are 19 total users, > and the SP has configured a default maxResults of 10. (The schemas > attribute and actual resources have been omitted for brevity and > applicability with both SCIM 1.1 and 2.0.) > > *Scenario 1* > *GET /Users?startIndex=2* > { > "totalResults":19, > "itemsPerPage":10, > "startIndex":2, > "Resources":[ > * ...users 2-11...* > ] > } > Is this the correct behavior, such that the "current" page contains the > default "itemsPerPage" despite the "previous" page being a different size? > > *Scenario 2* > *GET /Users?startIndex=19&count=10* > { > "totalResults":19, > "itemsPerPage":1, > "startIndex":19, > "Resources":[ > * ...user 19...* > ] > } > Despite the requested page size being 10, the actual number of resources > returned is only 1. In this situation, is it correct for the SP to return > "1" for the "itemsPerPage" or should this value instead be 10? > > *Scenario 3* > *GET /Users?startIndex=20* > { > "totalResults":19, > "itemsPerPage":0, > "startIndex":20, > "Resources":[ > * ...no users/empty array...* > ] > } > > *-OR- *{ > "Errors":[ > { > "description":"startIndex exceeded totalResults", > "code":"400" > } > ] > } > If the requested startIndex is greater than the total number of results, > what should the SP return? Is this an error condition? If not, what are the > appropriate values for the startIndex and itemsPerPage? > > Thank you! > --089e0111d0d85a421d04eb383be9 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
The SCIM specification defines the startIndex = for a pagination response as a "1-based index of the first result in t= he current set of search results". However, what is an appropriate val= ue for this attribute if pagination is requested but the requested start= Index is greater than the total number of results? Also, what is an app= ropriate value (if any) if there are no results?

Further, the specification defines itemsPerPage as a "non-n= egative integer" which "specifies the number of search results re= turned in a query response page". If pagination is requested by the co= nsumer, but there are no results, is it appropriate to return 0 for this value?

For more details and examples regarding these questions= , please review the previous post [1].

[1] http://www.ietf.org/mail= -archive/web/scim/current/msg01361.html


On Wed, Nov 6, 2013 at 1:51 PM, Shelley <randomshelley@gmail.c= om> wrote:
I'd appreciate some cla= rification on some of the SCIM pagination behavior, particularly as it rela= tes to situations when the "startIndex" and/or "count" = exceed the total number of results.

Given the following example scenarios, assume there are 19 total u= sers, and the SP has configured a default maxResults of 10. (The schemas at= tribute and actual resources have been omitted for brevity and applicabilit= y with both SCIM 1.1 and 2.0.)

Scenario 1
GET /Users?startIndex=3D2
{
=A0 "totalResults"= ;:19,
=A0 "itemsPerPage&qu= ot;:10,
=A0 &qu= ot;startIndex":2,
=A0 "Resources":[
=A0=A0=A0 ...users 2-1= 1...
=A0 ]<= /span>
}
Is this the correct behavior, such that the "current" page con= tains the default "itemsPerPage" despite the "previous"= page being a different size?

Scenario 2
GET /Users?startIndex=3D19&am= p;count=3D10
=A0 "totalResults&qu= ot;:19,
=A0 &qu= ot;itemsPerPage":1,
=A0 "startIndex":19,
=A0 "Resources"= :[
=A0=A0=A0= ...user 19...
=A0 ]
}
Despite= the requested page size being 10, the actual number of resources returned = is only 1. In this situation, is it correct for the SP to return "1&qu= ot; for the "itemsPerPage" or should this value instead be 10?

Scenario 3
GET /Users?startIndex=3D20
{
=A0 &quo= t;totalResults":19,
=A0 "itemsPerPage":0,
=A0 "startIndex":20,
=A0 &q= uot;Resources":[
=A0=A0=A0 ...no users/empty array...
=A0= ]
}
-OR-
{
=A0 "Errors":[
=A0=A0=A0 {
=A0=A0=A0=A0=A0 "d= escription":"startIndex exceeded totalResults",
=A0=A0=A0= =A0=A0 "code":"400"
=A0=A0=A0 }
=A0 ]
}=
If the requested startIndex is greater than the total number of r= esults, what should the SP return? Is this an error condition? If not, what= are the appropriate values for the startIndex and itemsPerPage?

Thank you!

--089e0111d0d85a421d04eb383be9-- From phil.hunt@oracle.com Fri Nov 15 16:21:08 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 851D011E8196 for ; Fri, 15 Nov 2013 16:21:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nqn8HIWF72U4 for ; Fri, 15 Nov 2013 16:21:03 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id 3D5A511E8137 for ; Fri, 15 Nov 2013 16:21:00 -0800 (PST) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id rAG0KtQ6028928 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Sat, 16 Nov 2013 00:20:56 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rAG0Kt2U007212 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Nov 2013 00:20:55 GMT Received: from abhmp0018.oracle.com (abhmp0018.oracle.com [141.146.116.24]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id rAG0Kt8O008117; Sat, 16 Nov 2013 00:20:55 GMT Received: from [192.168.1.12] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 15 Nov 2013 16:20:54 -0800 Content-Type: multipart/alternative; boundary="Apple-Mail=_7233F77D-BDC3-4D96-AEB4-2286E43B02DC" Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) From: Phil Hunt In-Reply-To: Date: Fri, 15 Nov 2013 16:20:44 -0800 Message-Id: <00146CF7-9C81-4A32-9C1B-63F26F31DF15@oracle.com> References: To: Shelley X-Mailer: Apple Mail (2.1510) X-Source-IP: acsinet22.oracle.com [141.146.126.238] Cc: "scim@ietf.org" Subject: Re: [scim] Pagination Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2013 00:21:08 -0000 --Apple-Mail=_7233F77D-BDC3-4D96-AEB4-2286E43B02DC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 Shelley, +1 to your questions (both emails). I don't think most of these matter much. Just that we pick a particular = behaviour for interop consistency. Phil @independentid www.independentid.com phil.hunt@oracle.com On 2013-11-15, at 6:44 AM, Shelley wrote: > The SCIM specification defines the startIndex for a pagination = response as a "1-based index of the first result in the current set of = search results". However, what is an appropriate value for this = attribute if pagination is requested but the requested startIndex is = greater than the total number of results? Also, what is an appropriate = value (if any) if there are no results? >=20 > Further, the specification defines itemsPerPage as a "non-negative = integer" which "specifies the number of search results returned in a = query response page". If pagination is requested by the consumer, but = there are no results, is it appropriate to return 0 for this value? >=20 > For more details and examples regarding these questions, please review = the previous post [1]. >=20 > [1] http://www.ietf.org/mail-archive/web/scim/current/msg01361.html >=20 >=20 > On Wed, Nov 6, 2013 at 1:51 PM, Shelley = wrote: > I'd appreciate some clarification on some of the SCIM pagination = behavior, particularly as it relates to situations when the "startIndex" = and/or "count" exceed the total number of results. >=20 > Given the following example scenarios, assume there are 19 total = users, and the SP has configured a default maxResults of 10. (The = schemas attribute and actual resources have been omitted for brevity and = applicability with both SCIM 1.1 and 2.0.) >=20 > Scenario 1 > GET /Users?startIndex=3D2 > { > "totalResults":19, > "itemsPerPage":10, > "startIndex":2, > "Resources":[ > ...users 2-11... > ] > } > Is this the correct behavior, such that the "current" page contains = the default "itemsPerPage" despite the "previous" page being a different = size? >=20 > Scenario 2 > GET /Users?startIndex=3D19&count=3D10 > { > "totalResults":19, > "itemsPerPage":1, > "startIndex":19, > "Resources":[ > ...user 19... > ] > } > Despite the requested page size being 10, the actual number of = resources returned is only 1. In this situation, is it correct for the = SP to return "1" for the "itemsPerPage" or should this value instead be = 10? >=20 > Scenario 3 > GET /Users?startIndex=3D20 > { > "totalResults":19, > "itemsPerPage":0, > "startIndex":20, > "Resources":[ > ...no users/empty array... > ] > } > -OR- > { > "Errors":[ > { > "description":"startIndex exceeded totalResults", > "code":"400" > } > ] > } > If the requested startIndex is greater than the total number of = results, what should the SP return? Is this an error condition? If not, = what are the appropriate values for the startIndex and itemsPerPage? >=20 > Thank you! >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail=_7233F77D-BDC3-4D96-AEB4-2286E43B02DC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=iso-8859-1
On 2013-11-15, at 6:44 AM, Shelley <randomshelley@gmail.com> = wrote:

The SCIM specification defines the = startIndex for a pagination response as a "1-based index of the = first result in the current set of search results". However, what is an = appropriate value for this attribute if pagination is requested but = the requested startIndex is greater than the total number of = results? Also, what is an appropriate value (if any) if there are = no results?

Further, the specification defines itemsPerPage as a = "non-negative integer" which "specifies the number of search results = returned in a query response page". If pagination is requested by the = consumer, but there are no results, is it appropriate to return = 0 for this value?

For more details and examples regarding these questions, = please review the previous post [1].

[1] h= ttp://www.ietf.org/mail-archive/web/scim/current/msg01361.html


On Wed, Nov 6, 2013 at 1:51 PM, Shelley <randomshelley@gmail.com> wrote:
I'd = appreciate some clarification on some of the SCIM pagination behavior, = particularly as it relates to situations when the "startIndex" and/or = "count" exceed the total number of results.

Given the following example scenarios, assume there are 19 = total users, and the SP has configured a default maxResults of 10. (The = schemas attribute and actual resources have been omitted for brevity and = applicability with both SCIM 1.1 and 2.0.)

Scenario 1
GET /Users?startIndex=3D2
{
  = "totalResults":19,
  = "itemsPerPage":10,
  "startIndex":2,
  = "Resources":[
    = ...users 2-11...
  ]
}
Is this the correct behavior, such that = the "current" page contains the default "itemsPerPage" despite the = "previous" page being a different size?

Scenario 2
GET = /Users?startIndex=3D19&count=3D10
{
  = "totalResults":19,
  "itemsPerPage":1,
  = "startIndex":19,
  = "Resources":[
    ...user 19...
  ]
}
Despite the requested page size being = 10, the actual number of resources returned is only 1. In this = situation, is it correct for the SP to return "1" for the "itemsPerPage" = or should this value instead be 10?

Scenario 3
GET = /Users?startIndex=3D20
{
  "totalResults":19,
  "itemsPerPage":0,
  "startIndex":20,
  = "Resources":[
    ...no users/empty = array...
  ]
}
-OR-
{
  "Errors":[
    = {
      "description":"startIndex exceeded = totalResults",
      = "code":"400"
    }
  ]
}
If = the requested startIndex is greater than the total number of results, = what should the SP return? Is this an error condition? If not, what are = the appropriate values for the startIndex and itemsPerPage?

Thank you!

_______________________________________________
scim mailing = list
scim@ietf.org
https://www.ietf.org/ma= ilman/listinfo/scim

= --Apple-Mail=_7233F77D-BDC3-4D96-AEB4-2286E43B02DC-- From kelly.grizzle@sailpoint.com Mon Nov 18 13:11:48 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C634F1AE334 for ; Mon, 18 Nov 2013 13:11:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zkKnp-gvMx_o for ; Mon, 18 Nov 2013 13:11:44 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1lp0157.outbound.protection.outlook.com [207.46.163.157]) by ietfa.amsl.com (Postfix) with ESMTP id 3C2EA1AD7C0 for ; Mon, 18 Nov 2013 13:11:41 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) with Microsoft SMTP Server (TLS) id 15.0.815.6; Mon, 18 Nov 2013 21:11:35 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.183]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.70]) with mapi id 15.00.0815.000; Mon, 18 Nov 2013 21:11:35 +0000 From: Kelly Grizzle To: Steve Moyer , "scim@ietf.org" Thread-Topic: JSON format for Error Thread-Index: Ac7kosKX1Pbttz5wSlqyBvj7yuJ91A== Date: Mon, 18 Nov 2013 21:11:34 +0000 Message-ID: <22d89ecf587647e6958e829627add05e@BN1PR04MB392.namprd04.prod.outlook.com> References: <7849338.32407115.1384521607422.JavaMail.zimbra@psu.edu> <2042388792.32413805.1384521878781.JavaMail.zimbra@psu.edu> In-Reply-To: <2042388792.32413805.1384521878781.JavaMail.zimbra@psu.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 5E6AC245005BBA5E6AC392 x-originating-ip: [2001:4870:600a:500::2] x-forefront-prvs: 00342DD5BC x-forefront-antispam-report: SFV:NSPM; SFS:(199002)(189002)(377454003)(13464003)(164054003)(83072001)(69226001)(81542001)(53806001)(51856001)(63696002)(2656002)(80022001)(87266001)(46102001)(19580405001)(83322001)(74366001)(19580395003)(81816001)(54356001)(80976001)(87936001)(76786001)(85306002)(2171001)(65816001)(76796001)(4396001)(561944002)(76576001)(79102001)(76482001)(15202345003)(81686001)(81342001)(54316002)(47736001)(77096001)(31966008)(33646001)(74706001)(59766001)(77982001)(74662001)(47446002)(74502001)(49866001)(56776001)(56816003)(74316001)(74876001)(50986001)(15975445006)(47976001)(3826001)(24736002); DIR:OUT; SFP:; SCL:1; SRVR:BN1PR04MB392; H:BN1PR04MB392.namprd04.prod.outlook.com; CLIP:2001:4870:600a:500::2; FPR:; RD:InfoNoRecords; A:1; MX:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com Subject: Re: [scim] JSON format for Error X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2013 21:11:49 -0000 Hi Steve ... we're looking at changing error responses. See ticket #46 for= the details - http://tools.ietf.org/wg/scim/trac/ticket/46. > 1) When there's more than one error in the error list... We are considering constraining this to a single error in ticket #46. I'm = curious how you are using multiple errors. > 2) Most systems treat HTTP status codes as integers - Is there some reas= on these are specified as JSON strings? You're right. The new proposal would use integers instead of strings. --Kelly -----Original Message----- From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Ste= ve Moyer Sent: Friday, November 15, 2013 7:25 AM To: scim@ietf.org Subject: [scim] JSON format for Error According to section 3.9 of the API document, each error contained within t= he JSON should MUST contain a string indicating the HTTP response code for = that error. I have two questions: 1) When there's more than one error in the error list, which HTTP response= code should be returned in the HTTP status code if they don't all have the= same value? 2) Most systems treat HTTP status codes as integers - Is there some reason= these are specified as JSON strings? Thanks, Steve -- _______________________________________________ scim mailing list scim@ietf.org https://www.ietf.org/mailman/listinfo/scim From swm16@psu.edu Mon Nov 18 14:06:47 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEFC71AE5EB for ; Mon, 18 Nov 2013 14:06:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.125 X-Spam-Level: X-Spam-Status: No, score=-3.125 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.525] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7BorDGAnjHs8 for ; Mon, 18 Nov 2013 14:06:43 -0800 (PST) Received: from tr21g10.aset.psu.edu (tr21g10.aset.psu.edu [146.186.149.132]) by ietfa.amsl.com (Postfix) with ESMTP id 921071AE5EA for ; Mon, 18 Nov 2013 14:06:43 -0800 (PST) Received: from ucs9.ait.psu.edu (ucs9.ait.psu.edu [128.118.73.28]) by tr21g10.aset.psu.edu (8.14.3/8.14.3) with ESMTP id rAIM6aHn3158244; Mon, 18 Nov 2013 17:06:36 -0500 Date: Mon, 18 Nov 2013 17:06:36 -0500 (EST) From: Steve Moyer To: Kelly Grizzle Message-ID: <1449896966.35538034.1384812396002.JavaMail.zimbra@psu.edu> In-Reply-To: <22d89ecf587647e6958e829627add05e@BN1PR04MB392.namprd04.prod.outlook.com> References: <7849338.32407115.1384521607422.JavaMail.zimbra@psu.edu> <2042388792.32413805.1384521878781.JavaMail.zimbra@psu.edu> <22d89ecf587647e6958e829627add05e@BN1PR04MB392.namprd04.prod.outlook.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Originating-IP: [128.118.58.157] X-Mailer: Zimbra 8.0.4_GA_5739 (ZimbraWebClient - FF25 (Mac)/8.0.4_GA_5737) Thread-Topic: JSON format for Error Thread-Index: Ac7kosKX1Pbttz5wSlqyBvj7yuJ91P5fHgpc X-Virus-Scanned: by amavisd-new Cc: scim@ietf.org Subject: Re: [scim] JSON format for Error X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Steve Moyer List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2013 22:06:47 -0000 Kelly, Changing the system to use integers for the HTTP status code would be great. The only case where we can conceivable have multiple errors returned from our system is when a resource is being created or updated. We have certain (additional) fields that we require, and we also validate the format of some of the fields, so the ability to return a list of validation errors (the description part of the current Errors list) is perfect for that. I also like the idea of returning the code via JSON, so following the example in the issue you reference, we might use something like this: HTTP/1.1 400 Bad Request Content-Type: application/json Content-Language: en { "code": 400 "Errors":[ "This system requires that the familyName attribute is not null and non-empty", "This system requires that at least one valid e-mail address is provided", "This system requires that a security question is selected", "This system requires that a security answer is entered" ] } In this case, all the validation errors would be considered Bad Requests, so we don't need the code to be included in every Error. Steve ----- Original Message ----- From: "Kelly Grizzle" To: "Steve Moyer" , scim@ietf.org Sent: Monday, November 18, 2013 4:11:34 PM Subject: RE: JSON format for Error Hi Steve ... we're looking at changing error responses. See ticket #46 for the details - http://tools.ietf.org/wg/scim/trac/ticket/46. > 1) When there's more than one error in the error list... We are considering constraining this to a single error in ticket #46. I'm curious how you are using multiple errors. > 2) Most systems treat HTTP status codes as integers - Is there some reason these are specified as JSON strings? You're right. The new proposal would use integers instead of strings. --Kelly -----Original Message----- From: scim-bounces@ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Steve Moyer Sent: Friday, November 15, 2013 7:25 AM To: scim@ietf.org Subject: [scim] JSON format for Error According to section 3.9 of the API document, each error contained within the JSON should MUST contain a string indicating the HTTP response code for that error. I have two questions: 1) When there's more than one error in the error list, which HTTP response code should be returned in the HTTP status code if they don't all have the same value? 2) Most systems treat HTTP status codes as integers - Is there some reason these are specified as JSON strings? Thanks, Steve -- _______________________________________________ scim mailing list scim@ietf.org https://www.ietf.org/mailman/listinfo/scim From randomshelley@gmail.com Mon Nov 18 14:09:56 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBF201AE5EA for ; Mon, 18 Nov 2013 14:09:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vplClnI5xYy9 for ; Mon, 18 Nov 2013 14:09:54 -0800 (PST) Received: from mail-ie0-x234.google.com (mail-ie0-x234.google.com [IPv6:2607:f8b0:4001:c03::234]) by ietfa.amsl.com (Postfix) with ESMTP id EE7DD1AE62C for ; Mon, 18 Nov 2013 14:09:53 -0800 (PST) Received: by mail-ie0-f180.google.com with SMTP id tp5so2567554ieb.11 for ; Mon, 18 Nov 2013 14:09:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=gO7pYbhfmR9NaGGhkx2yEaK2KZdoWUF8w2pnPeGkzOM=; b=kdoSYgABg+5vnIVQFVan6/JaordG5XRj0Tae8d1pJuMF7gow9BwGNPe1GcyqdH1XeP HBB/R+n6wme7lRpD5kg8dJmZhbvFWCq1AwFgCbQkY59Nm2CxvossQN1URjfzlmkej+M0 9pOKyJxZqlBT1aUMlAKZ4mn6bPk3MnJxuuq9SCmhiL2IrI7uc5qVQC5VKlmGIYsla5bD bRwvrfceP9zGNFZpQEN3qwURF4lxc94TEV8AXvQ1r80/6H5IYjU2QO2XgmFPdwGo+SI9 Yvh92cDdDzm3yuuICynnE/Mm1IJOcR0N1UGGGr9YPrCGsD5bjuHjTDwmpQuNIwd3Rfiy w6dQ== MIME-Version: 1.0 X-Received: by 10.50.87.36 with SMTP id u4mr16799932igz.40.1384812588087; Mon, 18 Nov 2013 14:09:48 -0800 (PST) Received: by 10.64.61.170 with HTTP; Mon, 18 Nov 2013 14:09:48 -0800 (PST) Date: Mon, 18 Nov 2013 16:09:48 -0600 Message-ID: From: Shelley To: "scim@ietf.org" Content-Type: multipart/alternative; boundary=089e0111d0d864c12004eb7ace08 Subject: [scim] Pagination Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2013 22:09:57 -0000 --089e0111d0d864c12004eb7ace08 Content-Type: text/plain; charset=ISO-8859-1 Thanks, Phil. To clarify, since I posed the "startIndex" as an open-ended question, and not a proposal, here is my proposal for handling the startIndex attribute in those scenarios. When the *requested startIndex is greater than the number of results*, or there are *no results*, return the *requested startIndex *with *0 itemsPerPage*. Requested startIndex is greater than totalResults: *GET /Users?startIndex=20* { "totalResults":19, "itemsPerPage":0, "startIndex":20, "Resources":[] } No results: *GET /Users?count**=10* { "totalResults":0, "itemsPerPage":0, "startIndex":1, "Resources":[] } While I agree these are fairly minor points, I believe that these are ambiguities that should be addressed and clarified in the specification. ---------- Forwarded message ---------- > From: Phil Hunt > To: Shelley > Cc: "scim@ietf.org" > Date: Fri, 15 Nov 2013 16:20:44 -0800 > Subject: Re: [scim] Pagination Question > Shelley, > > +1 to your questions (both emails). > > I don't think most of these matter much. Just that we pick a particular > behaviour for interop consistency. > > Phil > > @independentid > www.independentid.com > phil.hunt@oracle.com > > On 2013-11-15, at 6:44 AM, Shelley wrote: > > The SCIM specification defines the *startIndex *for a pagination response > as a "1-based index of the first result in the current set of search > results". However, what is an appropriate value for this attribute if > pagination is requested but *the requested startIndex is greater than the > total number of results*? Also, what is an appropriate value (if any) if > there are *no results*? > > Further, the specification defines *itemsPerPage *as a "non-negative > integer" which "specifies the number of search results returned in a query > response page". If pagination is requested by the consumer, but there are *no > results*, is it appropriate to return *0* for this value? > > For more details and examples regarding these questions, please review the > previous post [1]. > > [1] http://www.ietf.org/mail-archive/web/scim/current/msg01361.html > > > On Wed, Nov 6, 2013 at 1:51 PM, Shelley wrote: > >> I'd appreciate some clarification on some of the SCIM pagination >> behavior, particularly as it relates to situations when the "startIndex" >> and/or "count" exceed the total number of results. >> >> Given the following example scenarios, assume there are 19 total users, >> and the SP has configured a default maxResults of 10. (The schemas >> attribute and actual resources have been omitted for brevity and >> applicability with both SCIM 1.1 and 2.0.) >> >> *Scenario 1* >> *GET /Users?startIndex=2* >> { >> "totalResults":19, >> "itemsPerPage":10, >> "startIndex":2, >> "Resources":[ >> * ...users 2-11...* >> ] >> } >> Is this the correct behavior, such that the "current" page contains the >> default "itemsPerPage" despite the "previous" page being a different size? >> >> *Scenario 2* >> *GET /Users?startIndex=19&count=10* >> { >> "totalResults":19, >> "itemsPerPage":1, >> "startIndex":19, >> "Resources":[ >> * ...user 19...* >> ] >> } >> Despite the requested page size being 10, the actual number of resources >> returned is only 1. In this situation, is it correct for the SP to return >> "1" for the "itemsPerPage" or should this value instead be 10? >> >> *Scenario 3* >> *GET /Users?startIndex=20* >> { >> "totalResults":19, >> "itemsPerPage":0, >> "startIndex":20, >> "Resources":[ >> * ...no users/empty array...* >> ] >> } >> >> *-OR- *{ >> "Errors":[ >> { >> "description":"startIndex exceeded totalResults", >> "code":"400" >> } >> ] >> } >> If the requested startIndex is greater than the total number of results, >> what should the SP return? Is this an error condition? If not, what are the >> appropriate values for the startIndex and itemsPerPage? >> >> Thank you! >> > > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > > > > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > > --089e0111d0d864c12004eb7ace08 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Thanks, Phil.

To clarify, since I posed = the "startIndex" as an open-ended question, and not a proposal, h= ere is my proposal for handling the startIndex attribute in those scenarios= .

When the requested startIndex is greater than the nu= mber of results, or there are no results, return the reque= sted startIndex with 0 itemsPerPage.

Requested startIndex is greater than totalResults:

GET /Users?startIndex=3D20
{
=A0 "totalResults&qu= ot;:19,
=A0 "itemsPerPage":0,
=A0 "startIndex":20,
=A0 "Resources":[]
}
<= div>
No results:

GET /Users?count= =3D10
{
=A0 "totalResults":0,
=A0 "itemsPerPage":0,
=A0 "startIndex":1,
=A0 "Resources":[]
}

While I agree these are fairly minor points, I believe that these a= re ambiguities that should be addressed and clarified in the specification.=



---------- Forward= ed message ----------
From:=A0Phil Hunt <phil.hunt@ora= cle.com>
To:=A0Shelley <randomshelley@gmail.com>
Cc:=A0"scim@ietf.org" <scim= @ietf.org>
Date:=A0Fri, 15 Nov 2013 16:20:44 -0800
Subject:=A0Re: [scim] Pagination= Question
Shelley,
+1 to your questions (both emails).

I don't = think most of these matter much. =A0Just that we pick a particular behaviou= r for interop consistency.


On 2013-11-15, at 6:44 AM, Shelley <randomshelley@gmail.com> wrot= e:

The SCIM specification defi= nes the startIndex for a pagination response as a "1-based inde= x of the first result in the current set of search results". However, = what is an appropriate value for this attribute if pagination is requested = but the requested startIndex is greater than the total number of results= ? Also, what is an appropriate value (if any) if there are no result= s?

Further, the specification defines itemsPerPage as a "non-n= egative integer" which "specifies the number of search results re= turned in a query response page". If pagination is requested by the co= nsumer, but there are no results, is it appropriate to return 0 for this value?

For more details and examples regarding these questions, ple= ase review the previous post [1].

[1] http://www.= ietf.org/mail-archive/web/scim/current/msg01361.html


O= n Wed, Nov 6, 2013 at 1:51 PM, Shelley <randomshelley@gmail.com&= gt; wrote:
I'd appreciate s= ome clarification on some of the SCIM pagination behavior, particularly as = it relates to situations when the "startIndex" and/or "count= " exceed the total number of results.

Given the following example scenarios, assume there are 19 total u= sers, and the SP has configured a default maxResults of 10. (The schemas at= tribute and actual resources have been omitted for brevity and applicabilit= y with both SCIM 1.1 and 2.0.)

Scenario 1
GET /Users?startIndex=3D2
{
=A0 "totalResults"= ;:19,
=A0 "itemsPerPage&qu= ot;:10,
=A0 &qu= ot;startIndex":2,
=A0 "Resources":[
=A0=A0=A0 ...users 2-1= 1...
=A0 ]<= /span>
}
Is this the correct behavior, such that the "current" page con= tains the default "itemsPerPage" despite the "previous"= page being a different size?

Scenario 2
GET /Users?startIndex=3D19&am= p;count=3D10
=A0 "totalResults&qu= ot;:19,
=A0 &qu= ot;itemsPerPage":1,
=A0 "startIndex":19,
=A0 "Resources"= :[
=A0=A0=A0= ...user 19...
=A0 ]
}
Despite= the requested page size being 10, the actual number of resources returned = is only 1. In this situation, is it correct for the SP to return "1&qu= ot; for the "itemsPerPage" or should this value instead be 10?

Scenario 3
GET /Users?startIndex=3D20
{
=A0 &quo= t;totalResults":19,
=A0 "itemsPerPage":0,
=A0 "startIndex":20,
=A0 &q= uot;Resources":[
=A0=A0=A0 ...no users/empty array...
=A0= ]
}
-OR-
{
=A0 "Errors":[
=A0=A0=A0 {
=A0=A0=A0=A0=A0 "d= escription":"startIndex exceeded totalResults",
=A0=A0=A0= =A0=A0 "code":"400"
=A0=A0=A0 }
=A0 ]
}=
If the requested startIndex is greater than the total number of r= esults, what should the SP return? Is this an error condition? If not, what= are the appropriate values for the startIndex and itemsPerPage?

Thank you!

_______________________________________________
scim mailing list
scim@ietf.org
https://= www.ietf.org/mailman/listinfo/scim


____________________________________= ___________
scim mailing list
scim@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/scim


--089e0111d0d864c12004eb7ace08-- From Keith.Uber@ubisecure.com Mon Nov 18 22:56:34 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACC7D1A1F7D for ; Mon, 18 Nov 2013 22:56:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vjKO6rmOlURk for ; Mon, 18 Nov 2013 22:56:32 -0800 (PST) Received: from emea01-db3-obe.outbound.protection.outlook.com (mail-db3lp0078.outbound.protection.outlook.com [213.199.154.78]) by ietfa.amsl.com (Postfix) with ESMTP id 9E2A31A1F1A for ; Mon, 18 Nov 2013 22:56:31 -0800 (PST) Received: from AMXPR05MB200.eurprd05.prod.outlook.com (10.242.73.27) by AMXPR05MB199.eurprd05.prod.outlook.com (10.242.73.19) with Microsoft SMTP Server (TLS) id 15.0.820.5; Tue, 19 Nov 2013 06:56:24 +0000 Received: from AMXPR05MB200.eurprd05.prod.outlook.com ([169.254.2.236]) by AMXPR05MB200.eurprd05.prod.outlook.com ([169.254.2.236]) with mapi id 15.00.0820.005; Tue, 19 Nov 2013 06:56:23 +0000 From: Keith Uber To: Steve Moyer Thread-Topic: [scim] JSON format for Error Thread-Index: AQHO5PR1Z7AXqGXrbECvwK9fGpqx/w== Date: Tue, 19 Nov 2013 06:56:22 +0000 Message-ID: References: <7849338.32407115.1384521607422.JavaMail.zimbra@psu.edu> <2042388792.32413805.1384521878781.JavaMail.zimbra@psu.edu> <22d89ecf587647e6958e829627add05e@BN1PR04MB392.namprd04.prod.outlook.com>, <1449896966.35538034.1384812396002.JavaMail.zimbra@psu.edu> In-Reply-To: <1449896966.35538034.1384812396002.JavaMail.zimbra@psu.edu> Accept-Language: en-AU, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [188.238.44.251] x-forefront-prvs: 0035B15214 x-forefront-antispam-report: SFV:NSPM; SFS:(199002)(189002)(54316002)(76482001)(56776001)(81816001)(81686001)(59766001)(77982001)(83322001)(80976001)(74706001)(85306002)(46102001)(74876001)(82746002)(36756003)(33656001)(51856001)(66066001)(81542001)(87266001)(63696002)(79102001)(83716003)(2171001)(65816001)(54356001)(2656002)(53806001)(87936001)(80022001)(558084003)(49866001)(47976001)(4396001)(83072001)(47736001)(50986001)(77096001)(56816003)(81342001)(69226001)(76796001)(76786001)(74662001)(74366001)(31966008)(47446002)(74502001); DIR:OUT; SFP:; SCL:1; SRVR:AMXPR05MB199; H:AMXPR05MB200.eurprd05.prod.outlook.com; CLIP:188.238.44.251; FPR:; RD:InfoNoRecords; A:1; MX:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: ubisecure.com Cc: "scim@ietf.org" , Kelly Grizzle Subject: Re: [scim] JSON format for Error X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2013 06:56:34 -0000 If one error code can indicate multiple error conditions and error text is = used to describe this, please consider localization= From kelly.grizzle@sailpoint.com Tue Nov 19 06:28:05 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A7031ADFB5 for ; Tue, 19 Nov 2013 06:28:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8hZ3x2wNmr1z for ; Tue, 19 Nov 2013 06:28:03 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2lp0235.outbound.protection.outlook.com [207.46.163.235]) by ietfa.amsl.com (Postfix) with ESMTP id 63A281ADFA8 for ; Tue, 19 Nov 2013 06:28:03 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) with Microsoft SMTP Server (TLS) id 15.0.815.6; Tue, 19 Nov 2013 14:27:49 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.183]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.70]) with mapi id 15.00.0815.000; Tue, 19 Nov 2013 14:27:49 +0000 From: Kelly Grizzle To: Keith Uber , Steve Moyer Thread-Topic: [scim] JSON format for Error Thread-Index: Ac7kosKX1Pbttz5wSlqyBvj7yuJ91P5fHgpcgaGFWgD//4IikA== Date: Tue, 19 Nov 2013 14:27:49 +0000 Message-ID: <2bebb3778d59401096893da4ed511dcc@BN1PR04MB392.namprd04.prod.outlook.com> References: <7849338.32407115.1384521607422.JavaMail.zimbra@psu.edu> <2042388792.32413805.1384521878781.JavaMail.zimbra@psu.edu> <22d89ecf587647e6958e829627add05e@BN1PR04MB392.namprd04.prod.outlook.com>, <1449896966.35538034.1384812396002.JavaMail.zimbra@psu.edu> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 001A4865005BBA001A49B2 x-originating-ip: [72.182.10.254] x-forefront-prvs: 0035B15214 x-forefront-antispam-report: SFV:NSPM; SFS:(377454003)(199002)(189002)(13464003)(74706001)(77982001)(59766001)(49866001)(74502001)(47446002)(74662001)(47736001)(31966008)(33646001)(77096001)(47976001)(50986001)(56776001)(74316001)(56816003)(74876001)(54316002)(83322001)(54356001)(46102001)(87266001)(19580405001)(19580395003)(76576001)(81816001)(74366001)(51856001)(53806001)(81542001)(83072001)(69226001)(63696002)(2656002)(66066001)(80022001)(561944002)(81342001)(81686001)(79102001)(76482001)(4396001)(87936001)(80976001)(65816001)(76796001)(76786001)(85306002)(2171001)(24736002); DIR:OUT; SFP:; SCL:1; SRVR:BN1PR04MB392; H:BN1PR04MB392.namprd04.prod.outlook.com; CLIP:72.182.10.254; FPR:; RD:InfoNoRecords; A:1; MX:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com Cc: "scim@ietf.org" Subject: Re: [scim] JSON format for Error X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2013 14:28:05 -0000 The proposal in ticket #46 would use localized values for the user-friendly= error message returned in the "title" attribute. -----Original Message----- From: Keith Uber [mailto:Keith.Uber@ubisecure.com]=20 Sent: Tuesday, November 19, 2013 12:56 AM To: Steve Moyer Cc: Kelly Grizzle; scim@ietf.org Subject: Re: [scim] JSON format for Error If one error code can indicate multiple error conditions and error text is = used to describe this, please consider localization From swm16@psu.edu Tue Nov 19 07:09:31 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22A721AE00E for ; Tue, 19 Nov 2013 07:09:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.125 X-Spam-Level: X-Spam-Status: No, score=-3.125 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.525] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FDDX45m2ZITF for ; Tue, 19 Nov 2013 07:09:29 -0800 (PST) Received: from tr21g12.aset.psu.edu (tr21g12.aset.psu.edu [146.186.149.142]) by ietfa.amsl.com (Postfix) with ESMTP id 5B1501AE001 for ; Tue, 19 Nov 2013 07:09:29 -0800 (PST) Received: from ucs9.ait.psu.edu (ucs9.ait.psu.edu [128.118.73.28]) by tr21g12.aset.psu.edu (8.14.3/8.14.3) with ESMTP id rAJF9Mrt3653802; Tue, 19 Nov 2013 10:09:22 -0500 Date: Tue, 19 Nov 2013 10:09:22 -0500 (EST) From: Steve Moyer To: Kelly Grizzle Message-ID: <1345711712.36195040.1384873762093.JavaMail.zimbra@psu.edu> In-Reply-To: <2bebb3778d59401096893da4ed511dcc@BN1PR04MB392.namprd04.prod.outlook.com> References: <7849338.32407115.1384521607422.JavaMail.zimbra@psu.edu> <2042388792.32413805.1384521878781.JavaMail.zimbra@psu.edu> <22d89ecf587647e6958e829627add05e@BN1PR04MB392.namprd04.prod.outlook.com> <1449896966.35538034.1384812396002.JavaMail.zimbra@psu.edu> <2bebb3778d59401096893da4ed511dcc@BN1PR04MB392.namprd04.prod.outlook.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Originating-IP: [128.118.58.157] X-Mailer: Zimbra 8.0.4_GA_5739 (ZimbraWebClient - FF25 (Mac)/8.0.4_GA_5737) Thread-Topic: [scim] JSON format for Error Thread-Index: Ac7kosKX1Pbttz5wSlqyBvj7yuJ91P5fHgpcgaGFWgD//4IikJ3k4K+7 X-Virus-Scanned: by amavisd-new Cc: scim@ietf.org, Keith Uber Subject: Re: [scim] JSON format for Error X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Steve Moyer List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2013 15:09:31 -0000 I should have noted that I omitted everything that wasn't relevant to explaining how we'd use multiple descriptions. I don't see an issue with i18n. Steve ----- Original Message ----- From: "Kelly Grizzle" To: "Keith Uber" , "Steve Moyer" Cc: scim@ietf.org Sent: Tuesday, November 19, 2013 9:27:49 AM Subject: RE: [scim] JSON format for Error The proposal in ticket #46 would use localized values for the user-friendly error message returned in the "title" attribute. -----Original Message----- From: Keith Uber [mailto:Keith.Uber@ubisecure.com] Sent: Tuesday, November 19, 2013 12:56 AM To: Steve Moyer Cc: Kelly Grizzle; scim@ietf.org Subject: Re: [scim] JSON format for Error If one error code can indicate multiple error conditions and error text is used to describe this, please consider localization From randomshelley@gmail.com Wed Nov 20 07:09:20 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEDC51AE3FE for ; Wed, 20 Nov 2013 07:09:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GrWW9llD6Jr5 for ; Wed, 20 Nov 2013 07:09:17 -0800 (PST) Received: from mail-ie0-x233.google.com (mail-ie0-x233.google.com [IPv6:2607:f8b0:4001:c03::233]) by ietfa.amsl.com (Postfix) with ESMTP id 8780D1AE3F4 for ; Wed, 20 Nov 2013 07:09:17 -0800 (PST) Received: by mail-ie0-f179.google.com with SMTP id x13so788204ief.10 for ; Wed, 20 Nov 2013 07:09:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=K9ARBEYbkVqvvLmb2PCBu3YGwwNcZmFBPTecTtnyuWI=; b=T5fw5EuMUN0VjUQUXwWdgt3b/QLa/P1SRyM0/4/zWi95QckuOawlzSLTtE0i+Zn6u3 Es41ZjRn0F+o/NKMov7cA2WTmoaQ1dBGjOryDIxedOlf4b9CYj3O+O5CwL8BPpSpd2yi tKwmgKEjM4u2SxT7RD0tjfZyjadx1iSmL8eVXvjdWSfH2PJvRdl/W85fWbtRPQQiZXWz y+eoiCnDKNll+vf2B6bju8PnWJatD8WwsxYGHwR26O95SnzDmPyP1dadySy17weZOgKz wB5LP2pBnRgGHQgkpnTIktvLx8a6UAByLbe/cBLS1UT6p4XvZnyQACk6DBcaxVLwdJSX zHVw== MIME-Version: 1.0 X-Received: by 10.50.23.103 with SMTP id l7mr23353036igf.3.1384960150950; Wed, 20 Nov 2013 07:09:10 -0800 (PST) Received: by 10.64.61.170 with HTTP; Wed, 20 Nov 2013 07:09:10 -0800 (PST) In-Reply-To: References: Date: Wed, 20 Nov 2013 09:09:10 -0600 Message-ID: From: Shelley To: "scim@ietf.org" Content-Type: multipart/alternative; boundary=089e0158aabad35a4b04eb9d2923 Subject: Re: [scim] Pagination Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2013 15:09:21 -0000 --089e0158aabad35a4b04eb9d2923 Content-Type: text/plain; charset=ISO-8859-1 What is the expected pagination behavior when *count=0*? Should this return *no results*, or is 0 a special value that may be used to indicate that the *max results *should be returned? My assumption would be the former (no results), given that neither SCIM nor the OpenSearch specification seem to treat "0" as a special value, and the only restriction on it is that it is a non-negative integer; however, I have seen some pagination behavior where 0 is treated as a special value indicating that all results should be returned. On Mon, Nov 18, 2013 at 4:09 PM, Shelley wrote: > Thanks, Phil. > > To clarify, since I posed the "startIndex" as an open-ended question, and > not a proposal, here is my proposal for handling the startIndex attribute > in those scenarios. > > When the *requested startIndex is greater than the number of results*, or > there are *no results*, return the *requested startIndex *with *0 > itemsPerPage*. > > Requested startIndex is greater than totalResults: > > *GET /Users?startIndex=20* > { > "totalResults":19, > "itemsPerPage":0, > "startIndex":20, > "Resources":[] > } > > No results: > > *GET /Users?count**=10* > { > "totalResults":0, > "itemsPerPage":0, > "startIndex":1, > "Resources":[] > } > > While I agree these are fairly minor points, I believe that these are > ambiguities that should be addressed and clarified in the specification. > > > > ---------- Forwarded message ---------- >> From: Phil Hunt >> To: Shelley >> Cc: "scim@ietf.org" >> Date: Fri, 15 Nov 2013 16:20:44 -0800 >> Subject: Re: [scim] Pagination Question >> Shelley, >> >> +1 to your questions (both emails). >> >> I don't think most of these matter much. Just that we pick a particular >> behaviour for interop consistency. >> >> Phil >> >> @independentid >> www.independentid.com >> phil.hunt@oracle.com >> >> On 2013-11-15, at 6:44 AM, Shelley wrote: >> >> The SCIM specification defines the *startIndex *for a pagination >> response as a "1-based index of the first result in the current set of >> search results". However, what is an appropriate value for this attribute >> if pagination is requested but *the requested startIndex is greater than >> the total number of results*? Also, what is an appropriate value (if >> any) if there are *no results*? >> >> Further, the specification defines *itemsPerPage *as a "non-negative >> integer" which "specifies the number of search results returned in a query >> response page". If pagination is requested by the consumer, but there are *no >> results*, is it appropriate to return *0* for this value? >> >> For more details and examples regarding these questions, please review >> the previous post [1]. >> >> [1] http://www.ietf.org/mail-archive/web/scim/current/msg01361.html >> >> >> On Wed, Nov 6, 2013 at 1:51 PM, Shelley wrote: >> >>> I'd appreciate some clarification on some of the SCIM pagination >>> behavior, particularly as it relates to situations when the "startIndex" >>> and/or "count" exceed the total number of results. >>> >>> Given the following example scenarios, assume there are 19 total users, >>> and the SP has configured a default maxResults of 10. (The schemas >>> attribute and actual resources have been omitted for brevity and >>> applicability with both SCIM 1.1 and 2.0.) >>> >>> *Scenario 1* >>> *GET /Users?startIndex=2* >>> { >>> "totalResults":19, >>> "itemsPerPage":10, >>> "startIndex":2, >>> "Resources":[ >>> * ...users 2-11...* >>> ] >>> } >>> Is this the correct behavior, such that the "current" page contains the >>> default "itemsPerPage" despite the "previous" page being a different size? >>> >>> *Scenario 2* >>> *GET /Users?startIndex=19&count=10* >>> { >>> "totalResults":19, >>> "itemsPerPage":1, >>> "startIndex":19, >>> "Resources":[ >>> * ...user 19...* >>> ] >>> } >>> Despite the requested page size being 10, the actual number of resources >>> returned is only 1. In this situation, is it correct for the SP to return >>> "1" for the "itemsPerPage" or should this value instead be 10? >>> >>> *Scenario 3* >>> *GET /Users?startIndex=20* >>> { >>> "totalResults":19, >>> "itemsPerPage":0, >>> "startIndex":20, >>> "Resources":[ >>> * ...no users/empty array...* >>> ] >>> } >>> >>> *-OR- *{ >>> "Errors":[ >>> { >>> "description":"startIndex exceeded totalResults", >>> "code":"400" >>> } >>> ] >>> } >>> If the requested startIndex is greater than the total number of results, >>> what should the SP return? Is this an error condition? If not, what are the >>> appropriate values for the startIndex and itemsPerPage? >>> >>> Thank you! >>> >> >> _______________________________________________ >> scim mailing list >> scim@ietf.org >> https://www.ietf.org/mailman/listinfo/scim >> >> >> >> _______________________________________________ >> scim mailing list >> scim@ietf.org >> https://www.ietf.org/mailman/listinfo/scim >> >> > --089e0158aabad35a4b04eb9d2923 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
What is the expected pagination behavior when coun= t=3D0? Should this return no results, or is 0 a special v= alue that may be used to indicate that the max results should= be returned?

My assumption would be the former (no results), given that neithe= r SCIM nor the OpenSearch specification seem to treat "0" as a sp= ecial value, and the only restriction on it is that it is a non-negative in= teger; however, I have seen some pagination behavior where 0 is treated as = a special value indicating that all results should be returned.



On = Mon, Nov 18, 2013 at 4:09 PM, Shelley <randomshelley@gmail.com&g= t; wrote:
Thanks, Phil.

<= /div>To clarify, since I posed the "startIndex" as an open-ended = question, and not a proposal, here is my proposal for handling the startInd= ex attribute in those scenarios.

When the requested startIndex is greater than the nu= mber of results, or there are no results, return the reque= sted startIndex with 0 itemsPerPage.

Requested startIndex is greater than totalResults:

GET /Users?startIndex=3D20
{
=A0 "totalResults&qu= ot;:19,
=A0 "itemsPerPage":0,
=A0 "startIndex":20,
=A0 "Resources":[]
}
<= div>
No results:

GET /Users?count= =3D10
{
=A0 "totalResults":0,
=A0 "itemsPerPage":0,
=A0 "startIndex":1,
=A0 "Resources":[]
}

While I agree these are fairly minor points, I believe that these a= re ambiguities that should be addressed and clarified in the specification.=



---------- Forward= ed message ----------
From:=A0Phil Hunt <phil.hunt@oracle.com>
To:=A0Shelley <randomshelley@gmail.com>Cc:=A0"scim@ietf.o= rg" <scim@ie= tf.org>
Date:=A0Fri, 15 Nov 2013 16:20:44 -0800
Subject:=A0Re: [scim] Pagination= Question
Shelley,
+1 to your questions (both emails).

I don't = think most of these matter much. =A0Just that we pick a particular behaviou= r for interop consistency.


On 2013-11-15, at 6:44 AM, Shelley <randomshelley@gmail.com> wrot= e:

The SCIM specification defi= nes the startIndex for a pagination response as a "1-based inde= x of the first result in the current set of search results". However, = what is an appropriate value for this attribute if pagination is requested = but the requested startIndex is greater than the total number of results= ? Also, what is an appropriate value (if any) if there are no result= s?

Further, the specification defines itemsPerPage as a "non-n= egative integer" which "specifies the number of search results re= turned in a query response page". If pagination is requested by the co= nsumer, but there are no results, is it appropriate to return 0 for this value?

For more details and examples regarding these questions, ple= ase review the previous post [1].

[1] http://www.= ietf.org/mail-archive/web/scim/current/msg01361.html


O= n Wed, Nov 6, 2013 at 1:51 PM, Shelley <randomshelley@gmail.com&= gt; wrote:
I'd appreciate s= ome clarification on some of the SCIM pagination behavior, particularly as = it relates to situations when the "startIndex" and/or "count= " exceed the total number of results.

Given the following example scenarios, assume there are 19 total u= sers, and the SP has configured a default maxResults of 10. (The schemas at= tribute and actual resources have been omitted for brevity and applicabilit= y with both SCIM 1.1 and 2.0.)

Scenario 1
GET /Users?startIndex=3D2
{
=A0 "totalResults"= ;:19,
=A0 "itemsPerPage&qu= ot;:10,
=A0 &qu= ot;startIndex":2,
=A0 "Resources":[
=A0=A0=A0 ...users 2-1= 1...
=A0 ]<= /span>
}
Is this the correct behavior, such that the "current" page con= tains the default "itemsPerPage" despite the "previous"= page being a different size?

Scenario 2
GET /Users?startIndex=3D19&am= p;count=3D10
=A0 "totalResults&qu= ot;:19,
=A0 &qu= ot;itemsPerPage":1,
=A0 "startIndex":19,
=A0 "Resources"= :[
=A0=A0=A0= ...user 19...
=A0 ]
}
Despite= the requested page size being 10, the actual number of resources returned = is only 1. In this situation, is it correct for the SP to return "1&qu= ot; for the "itemsPerPage" or should this value instead be 10?

Scenario 3
GET /Users?startIndex=3D20
{
=A0 &quo= t;totalResults":19,
=A0 "itemsPerPage":0,
=A0 "startIndex":20,
=A0 &q= uot;Resources":[
=A0=A0=A0 ...no users/empty array...
=A0= ]
}
-OR-
{
=A0 "Errors":[
=A0=A0=A0 {
=A0=A0=A0=A0=A0 "d= escription":"startIndex exceeded totalResults",
=A0=A0=A0= =A0=A0 "code":"400"
=A0=A0=A0 }
=A0 ]
}=
If the requested startIndex is greater than the total number of r= esults, what should the SP return? Is this an error condition? If not, what= are the appropriate values for the startIndex and itemsPerPage?

Thank you!

_______________________________________________
scim mailing list
scim@ietf.org
https://= www.ietf.org/mailman/listinfo/scim


____________________________________= ___________
scim mailing list
scim@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/scim



--089e0158aabad35a4b04eb9d2923-- From t.krille@tarent.de Wed Nov 20 08:27:57 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 833581ADFB4 for ; Wed, 20 Nov 2013 08:27:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wnmRGAsezsWR for ; Wed, 20 Nov 2013 08:27:55 -0800 (PST) Received: from mail-ob0-f197.google.com (mail-ob0-f197.google.com [209.85.214.197]) by ietfa.amsl.com (Postfix) with ESMTP id 4E3181A1F74 for ; Wed, 20 Nov 2013 08:27:54 -0800 (PST) Received: by mail-ob0-f197.google.com with SMTP id va2so1887662obc.4 for ; Wed, 20 Nov 2013 08:27:48 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=gkQKiLAbibQ75l/ZuW2mVqttaUQyagyieW2w7NoL/+U=; b=S1qaSHk0nUqUyKH0N5obr/Q4rkASKb3oXDhN1aW3RdsJ4YCqw+AUSRRqTKoEyWdOlQ alj705xJgNJlqbZySEpK7B/mwjqjixKicAsDQBf3Rlweg1reavBoaD2lw94P8VoQ5EUy 6CUCkUVGvFDgDybbwCMd9TFFBcBM7S2+gSDh2SpWxHBIKdOIoPZelkzVIVCwXBonZla6 9MBmccJvKOulX8r65Tg7H+Uwlx2ZmWhCNI1z4fFDOFQGo3oEb4E0DeUFo1cHfv35Pwgv wm5QXEvP0i8a5857/Ly37gGW36QYYxc+mOD1JxC0VHtvHzdeCwYPB2rRF4/KMT2rzgwN aNXg== X-Gm-Message-State: ALoCoQl2w8W9ZF1zuqyb8YAqG5lx2zLFmqAJy40J4XSr9r0AVQ0QnKqb8pTyKOjxzWKW1O+P98zC X-Received: by 10.50.29.114 with SMTP id j18mr1702629igh.24.1384964868397; Wed, 20 Nov 2013 08:27:48 -0800 (PST) MIME-Version: 1.0 Received: by 10.64.232.35 with HTTP; Wed, 20 Nov 2013 08:27:28 -0800 (PST) From: Thomas Krille Date: Wed, 20 Nov 2013 17:27:28 +0100 Message-ID: To: scim@ietf.org Content-Type: multipart/alternative; boundary=047d7bd758e801fd2604eb9e4305 Subject: [scim] Question about Addresses X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2013 16:27:57 -0000 --047d7bd758e801fd2604eb9e4305 Content-Type: text/plain; charset=UTF-8 Hello, i have a question regarding the Address multi-valued attribute: The current spec states in section 3.2: The value attribute is a complex type with the following sub-attributes. >From my understanding this means that an address is represented in json as follows: { "type": "work", "value": { "streetAddress": "100 Universal City Plaza", "locality": "Hollywood", "region": "CA", "postalCode": "91608", "country": "USA", "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA" } "primary": true } But in the example in section 12.2 an address is represented as follows: { "type": "work", "streetAddress": "100 Universal City Plaza", "locality": "Hollywood", "region": "CA", "postalCode": "91608", "country": "USA", "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA", "primary": true } What is the right representation? --047d7bd758e801fd2604eb9e4305 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello,

i have a question regarding the = Address multi-valued attribute:

The current spec s= tates in section 3.2:

The value attribute is a complex type with the following sub-attributes.

From my understanding this means that an addr= ess is represented in json as follows:

{
=C2=A0 =C2=A0 "type": "work",
=C2=A0 =C2=A0 "va= lue": {
=C2=A0 =C2=A0 =C2=A0 =C2=A0 "streetAddress": &quo= t;100 Universal City Plaza",
=C2=A0 =C2=A0 =C2=A0 =C2=A0 "loca= lity": "Hollywood",
=C2=A0 =C2=A0 =C2=A0 =C2=A0 "reg= ion": "CA",
=C2=A0 =C2=A0 =C2=A0 =C2=A0 "postalCode": "91608",
= =C2=A0 =C2=A0 =C2=A0 =C2=A0 "country": "USA",
=C2=A0= =C2=A0 =C2=A0 =C2=A0 "formatted": "100 Universal City Plaza= \nHollywood, CA 91608 USA"
=C2=A0 =C2=A0 }
=C2=A0 =C2=A0 "p= rimary": true

}

But= in the example in section 12.2 an address is represented as follows:
= 


{
    "type": "work",
    "streetAddress": "100 Universal City Plaza",
    "locality": "Hollywood",
    "region": "CA",
    "postalCode": "91608",
    "country": "USA",
    "formatted": "100 Universal City Plaza\nHollywood, CA 91=
608 USA",
    "primary": true
}

What is the right representation?
--047d7bd758e801fd2604eb9e4305-- From randomshelley@gmail.com Wed Nov 20 12:34:40 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F0891AE1EC for ; Wed, 20 Nov 2013 12:34:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5sSrmYY8-lI7 for ; Wed, 20 Nov 2013 12:34:37 -0800 (PST) Received: from mail-ie0-x22f.google.com (mail-ie0-x22f.google.com [IPv6:2607:f8b0:4001:c03::22f]) by ietfa.amsl.com (Postfix) with ESMTP id C86991AE1AD for ; Wed, 20 Nov 2013 12:34:36 -0800 (PST) Received: by mail-ie0-f175.google.com with SMTP id x13so1505744ief.20 for ; Wed, 20 Nov 2013 12:34:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=d8heUSx5we4fO0NbGdcMdEuEBmOct5o5H0mdTE9osSE=; b=hnlQMilutYgxr92rT5Zbwn/pL7SaP5lcfjPLxS29BhpS+2XvIzU1RKuNPaR05Wq7Ge nHUEPKvvVTGB66PO4fzu8N4u3qMm0IVEN67eRNazauefO2OhD8t99DTN5MgUQTx4d1Wj QaPK+NnMfahkcp4TcWkE/BJJ4lYoPcluGTayMXx9ZwnUuc9qQ9DueZqbYoSh4n8Tw0wJ /ck9GAwid5xf3IbsSCbX0Tufc6PV70h5/2tDJNoAxKFHVMIGHKGY73yo5eVgBFwpfdBX NUyYPsySHchL9YdT6ddYCaDXuFq75cb1xypWnkOYajsbfyU56e4OX2VC2goxO9OoNQZl pZtQ== MIME-Version: 1.0 X-Received: by 10.50.17.9 with SMTP id k9mr2518658igd.3.1384979670182; Wed, 20 Nov 2013 12:34:30 -0800 (PST) Received: by 10.64.61.170 with HTTP; Wed, 20 Nov 2013 12:34:30 -0800 (PST) In-Reply-To: References: Date: Wed, 20 Nov 2013 14:34:30 -0600 Message-ID: From: Shelley To: "scim@ietf.org" Content-Type: multipart/alternative; boundary=089e01182a3443327704eba1b59e Subject: Re: [scim] Pagination Question X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2013 20:34:40 -0000 --089e01182a3443327704eba1b59e Content-Type: text/plain; charset=ISO-8859-1 Also, what is the expected behavior when *startIndex=0*? The spec only indicates that this must be "non-negative", yet since it is 1-based, what would a value of 0 represent? I would propose this should be considered invalid, and returned as an error, and the spec should be modified to indicate that this parameter must be a "*positive *integer" rather than a "non-negative integer" in order to better exclude 0 as a potential value. On Wed, Nov 20, 2013 at 9:09 AM, Shelley wrote: > What is the expected pagination behavior when *count=0*? Should this > return *no results*, or is 0 a special value that may be used to indicate > that the *max results *should be returned? > > My assumption would be the former (no results), given that neither SCIM > nor the OpenSearch specification seem to treat "0" as a special value, and > the only restriction on it is that it is a non-negative integer; however, I > have seen some pagination behavior where 0 is treated as a special value > indicating that all results should be returned. > > > > On Mon, Nov 18, 2013 at 4:09 PM, Shelley wrote: > >> Thanks, Phil. >> >> To clarify, since I posed the "startIndex" as an open-ended question, and >> not a proposal, here is my proposal for handling the startIndex attribute >> in those scenarios. >> >> When the *requested startIndex is greater than the number of results*, >> or there are *no results*, return the *requested startIndex *with *0 >> itemsPerPage*. >> >> Requested startIndex is greater than totalResults: >> >> *GET /Users?startIndex=20* >> { >> "totalResults":19, >> "itemsPerPage":0, >> "startIndex":20, >> "Resources":[] >> } >> >> No results: >> >> *GET /Users?count**=10* >> { >> "totalResults":0, >> "itemsPerPage":0, >> "startIndex":1, >> "Resources":[] >> } >> >> While I agree these are fairly minor points, I believe that these are >> ambiguities that should be addressed and clarified in the specification. >> >> >> >> ---------- Forwarded message ---------- >>> From: Phil Hunt >>> To: Shelley >>> Cc: "scim@ietf.org" >>> Date: Fri, 15 Nov 2013 16:20:44 -0800 >>> Subject: Re: [scim] Pagination Question >>> Shelley, >>> >>> +1 to your questions (both emails). >>> >>> I don't think most of these matter much. Just that we pick a particular >>> behaviour for interop consistency. >>> >>> Phil >>> >>> @independentid >>> www.independentid.com >>> phil.hunt@oracle.com >>> >>> On 2013-11-15, at 6:44 AM, Shelley wrote: >>> >>> The SCIM specification defines the *startIndex *for a pagination >>> response as a "1-based index of the first result in the current set of >>> search results". However, what is an appropriate value for this attribute >>> if pagination is requested but *the requested startIndex is greater >>> than the total number of results*? Also, what is an appropriate value >>> (if any) if there are *no results*? >>> >>> Further, the specification defines *itemsPerPage *as a "non-negative >>> integer" which "specifies the number of search results returned in a query >>> response page". If pagination is requested by the consumer, but there are *no >>> results*, is it appropriate to return *0* for this value? >>> >>> For more details and examples regarding these questions, please review >>> the previous post [1]. >>> >>> [1] http://www.ietf.org/mail-archive/web/scim/current/msg01361.html >>> >>> >>> On Wed, Nov 6, 2013 at 1:51 PM, Shelley wrote: >>> >>>> I'd appreciate some clarification on some of the SCIM pagination >>>> behavior, particularly as it relates to situations when the "startIndex" >>>> and/or "count" exceed the total number of results. >>>> >>>> Given the following example scenarios, assume there are 19 total users, >>>> and the SP has configured a default maxResults of 10. (The schemas >>>> attribute and actual resources have been omitted for brevity and >>>> applicability with both SCIM 1.1 and 2.0.) >>>> >>>> *Scenario 1* >>>> *GET /Users?startIndex=2* >>>> { >>>> "totalResults":19, >>>> "itemsPerPage":10, >>>> "startIndex":2, >>>> "Resources":[ >>>> * ...users 2-11...* >>>> ] >>>> } >>>> Is this the correct behavior, such that the "current" page contains the >>>> default "itemsPerPage" despite the "previous" page being a different size? >>>> >>>> *Scenario 2* >>>> *GET /Users?startIndex=19&count=10* >>>> { >>>> "totalResults":19, >>>> "itemsPerPage":1, >>>> "startIndex":19, >>>> "Resources":[ >>>> * ...user 19...* >>>> ] >>>> } >>>> Despite the requested page size being 10, the actual number of >>>> resources returned is only 1. In this situation, is it correct for the SP >>>> to return "1" for the "itemsPerPage" or should this value instead be 10? >>>> >>>> *Scenario 3* >>>> *GET /Users?startIndex=20* >>>> { >>>> "totalResults":19, >>>> "itemsPerPage":0, >>>> "startIndex":20, >>>> "Resources":[ >>>> * ...no users/empty array...* >>>> ] >>>> } >>>> >>>> *-OR- *{ >>>> "Errors":[ >>>> { >>>> "description":"startIndex exceeded totalResults", >>>> "code":"400" >>>> } >>>> ] >>>> } >>>> If the requested startIndex is greater than the total number of >>>> results, what should the SP return? Is this an error condition? If not, >>>> what are the appropriate values for the startIndex and itemsPerPage? >>>> >>>> Thank you! >>>> >>> >>> _______________________________________________ >>> scim mailing list >>> scim@ietf.org >>> https://www.ietf.org/mailman/listinfo/scim >>> >>> >>> >>> _______________________________________________ >>> scim mailing list >>> scim@ietf.org >>> https://www.ietf.org/mailman/listinfo/scim >>> >>> >> > --089e01182a3443327704eba1b59e Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Also, what is the expected behavior when startIndex=3D0= ? The spec only indicates that this must be "non-negative", y= et since it is 1-based, what would a value of 0 represent?

I would = propose this should be considered invalid, and returned as an error, and th= e spec should be modified to indicate that this parameter must be a "<= i>positive integer" rather than a "non-negative integer"= in order to better exclude 0 as a potential value.


On Wed,= Nov 20, 2013 at 9:09 AM, Shelley <randomshelley@gmail.com> wrote:
What is the expected p= agination behavior when count=3D0? Should this return no resul= ts, or is 0 a special value that may be used to indicate that the <= i>max results should be returned?

My assumption would be the former (no results), given that neithe= r SCIM nor the OpenSearch specification seem to treat "0" as a sp= ecial value, and the only restriction on it is that it is a non-negative in= teger; however, I have seen some pagination behavior where 0 is treated as = a special value indicating that all results should be returned.



On Mon, Nov 18, 2013 at 4:09 PM, Shell= ey <randomshelley@gmail.com> wrote:
Thanks, Phil.

<= /div>To clarify, since I posed the "startIndex" as an open-ended = question, and not a proposal, here is my proposal for handling the startInd= ex attribute in those scenarios.

When the requested startIndex is greater than the nu= mber of results, or there are no results, return the reque= sted startIndex with 0 itemsPerPage.

Requested startIndex is greater than totalResults:

GET /Users?startIndex=3D20
{
=A0 "totalResults&qu= ot;:19,
=A0 "itemsPerPage":0,
=A0 "startIndex":20,
=A0 "Resources":[]
}
<= div>
No results:

GET /Users?count= =3D10
{
=A0 "totalResults":0,
=A0 "itemsPerPage":0,
=A0 "startIndex":1,
=A0 "Resources":[]
}

While I agree these are fairly minor points, I believe that these a= re ambiguities that should be addressed and clarified in the specification.=



---------- Forward= ed message ----------
From:=A0Phil Hunt <phil.hunt@oracle.com>
To:=A0Shelley <randomshelley@gmail.com>Cc:=A0"scim@ietf.o= rg" <scim@ie= tf.org>
Date:=A0Fri, 15 Nov 2013 16:20:44 -0800
Subject:=A0Re: [scim] Pagination= Question
Shelley,
+1 to your questions (both emails).

I don't = think most of these matter much. =A0Just that we pick a particular behaviou= r for interop consistency.


On 2013-11-15, at 6:44 AM, Shelley <randomshelley@gmail.com> wrot= e:

The SCIM specification defi= nes the startIndex for a pagination response as a "1-based inde= x of the first result in the current set of search results". However, = what is an appropriate value for this attribute if pagination is requested = but the requested startIndex is greater than the total number of results= ? Also, what is an appropriate value (if any) if there are no result= s?

Further, the specification defines itemsPerPage as a "non-n= egative integer" which "specifies the number of search results re= turned in a query response page". If pagination is requested by the co= nsumer, but there are no results, is it appropriate to return 0 for this value?

For more details and examples regarding these questions, ple= ase review the previous post [1].

[1] http://www.= ietf.org/mail-archive/web/scim/current/msg01361.html


O= n Wed, Nov 6, 2013 at 1:51 PM, Shelley <randomshelley@gmail.com&= gt; wrote:
I'd appreciate s= ome clarification on some of the SCIM pagination behavior, particularly as = it relates to situations when the "startIndex" and/or "count= " exceed the total number of results.

Given the following example scenarios, assume there are 19 total u= sers, and the SP has configured a default maxResults of 10. (The schemas at= tribute and actual resources have been omitted for brevity and applicabilit= y with both SCIM 1.1 and 2.0.)

Scenario 1
GET /Users?startIndex=3D2
{
=A0 "totalResults"= ;:19,
=A0 "itemsPerPage&qu= ot;:10,
=A0 &qu= ot;startIndex":2,
=A0 "Resources":[
=A0=A0=A0 ...users 2-1= 1...
=A0 ]<= /span>
}
Is this the correct behavior, such that the "current" page con= tains the default "itemsPerPage" despite the "previous"= page being a different size?

Scenario 2
GET /Users?startIndex=3D19&am= p;count=3D10
=A0 "totalResults&qu= ot;:19,
=A0 &qu= ot;itemsPerPage":1,
=A0 "startIndex":19,
=A0 "Resources"= :[
=A0=A0=A0= ...user 19...
=A0 ]
}
Despite= the requested page size being 10, the actual number of resources returned = is only 1. In this situation, is it correct for the SP to return "1&qu= ot; for the "itemsPerPage" or should this value instead be 10?

Scenario 3
GET /Users?startIndex=3D20
{
=A0 &quo= t;totalResults":19,
=A0 "itemsPerPage":0,
=A0 "startIndex":20,
=A0 &q= uot;Resources":[
=A0=A0=A0 ...no users/empty array...
=A0= ]
}
-OR-
{
=A0 "Errors":[
=A0=A0=A0 {
=A0=A0=A0=A0=A0 "d= escription":"startIndex exceeded totalResults",
=A0=A0=A0= =A0=A0 "code":"400"
=A0=A0=A0 }
=A0 ]
}=
If the requested startIndex is greater than the total number of r= esults, what should the SP return? Is this an error condition? If not, what= are the appropriate values for the startIndex and itemsPerPage?

Thank you!

_______________________________________________
scim mailing list
scim@ietf.org
https://= www.ietf.org/mailman/listinfo/scim


____________________________________= ___________
scim mailing list
scim@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/scim




--089e01182a3443327704eba1b59e-- From randomshelley@gmail.com Wed Nov 20 12:41:22 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A40D1AE236 for ; Wed, 20 Nov 2013 12:41:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5E8aj9O34ATv for ; Wed, 20 Nov 2013 12:41:19 -0800 (PST) Received: from mail-ie0-x22e.google.com (mail-ie0-x22e.google.com [IPv6:2607:f8b0:4001:c03::22e]) by ietfa.amsl.com (Postfix) with ESMTP id 862FA1AE25D for ; Wed, 20 Nov 2013 12:41:19 -0800 (PST) Received: by mail-ie0-f174.google.com with SMTP id at1so8512611iec.19 for ; Wed, 20 Nov 2013 12:41:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=KlgyLvYJ32cRWr8LDMm+3uwkjHNX2CKq9om2X9VdF8k=; b=CSBJBCHuniFm+F78j1iK1F8CIV7CEJTmqxGAYEM/kUsMh2AED0FZaRxuEjt8xyDyR0 0VM8ejkp15kh/7tauD9AoPFImJFDjZTfudiBfiw/0g+QJJcr27hBLWM0PQWXOPHmXGlU eL9tO+ca2WjLubGND2duBMMAPsxsyKxTQaNVqRYJbGxWc3aOs2M2nlwIDECsVWNvKMdd 0xoOmhhLjXBSUNkVKVY8RbQKQ3Bs/DJcGOYrfec1HHgXWQsma10jDpGPQpUwuszxtMIy Fl05vV3NGOdqN24N9zSK+6ajzB/mcJ521SdxWJEv+NKv/vvYN41agI/2o28sCijQdOpF Z9HQ== MIME-Version: 1.0 X-Received: by 10.42.68.193 with SMTP id y1mr1783618ici.7.1384980072998; Wed, 20 Nov 2013 12:41:12 -0800 (PST) Received: by 10.64.61.170 with HTTP; Wed, 20 Nov 2013 12:41:12 -0800 (PST) Date: Wed, 20 Nov 2013 14:41:12 -0600 Message-ID: From: Shelley To: "scim@ietf.org" Content-Type: multipart/alternative; boundary=485b397dd20b45b04b04eba1cd91 Subject: [scim] Question about Addresses X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2013 20:41:22 -0000 --485b397dd20b45b04b04eba1cd91 Content-Type: text/plain; charset=ISO-8859-1 There has already been some discussion on this topic [1,2] and a corresponding ticket [3]. The current proposal is that your latter representation is correct, such that there is no "value" sub-attribute used for addresses. [1] http://www.ietf.org/mail-archive/web/scim/current/msg00928.html [2] http://www.ietf.org/mail-archive/web/scim/current/msg01040.html [3] http://trac.tools.ietf.org/wg/scim/trac/ticket/36 ---------- Forwarded message ---------- > From: Thomas Krille > To: scim@ietf.org > Cc: > Date: Wed, 20 Nov 2013 17:27:28 +0100 > Subject: [scim] Question about Addresses > Hello, > > i have a question regarding the Address multi-valued attribute: > > The current spec states in section 3.2: > > The value attribute is a complex type with the following sub-attributes. > > > From my understanding this means that an address is represented in json as > follows: > > { > "type": "work", > "value": { > "streetAddress": "100 Universal City Plaza", > "locality": "Hollywood", > "region": "CA", > "postalCode": "91608", > "country": "USA", > "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA" > } > "primary": true > > } > > But in the example in section 12.2 an address is represented as follows: > > { > "type": "work", > "streetAddress": "100 Universal City Plaza", > "locality": "Hollywood", > "region": "CA", > "postalCode": "91608", > "country": "USA", > "formatted": "100 Universal City Plaza\nHollywood, CA 91608 USA", > "primary": true > } > > > What is the right representation? > > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > > --485b397dd20b45b04b04eba1cd91 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
There has already been some discussion on this topic = [1,2] and a corresponding ticket [3].

The current proposal is = that your latter representation is correct, such that there is no "val= ue" sub-attribute used for addresses.

[1] http://www.ietf.org/mail-archive/web/s= cim/current/msg00928.html
[2] http://www.ietf.org/mail-archive/web/= scim/current/msg01040.html
[3] http://trac.tools.ietf.org/wg/scim/trac/ticket/36


---------- Forwarded message ----------
From:=A0Thomas Krille <t.krille@tarent.de>
To:=A0scim@ietf.org
Cc:=A0
Date:=A0Wed, 20 No= v 2013 17:27:28 +0100
Subject:=A0[scim] Question about Addresses
Hello,
<= br>
i have a question regarding the Address multi-valued attribut= e:

The current spec states in section 3.2:

The value attribute is a complex type with the following sub-attributes.

From my understanding this means that an addr= ess is represented in json as follows:

{
=A0 =A0 "type": "work",
=A0 =A0 "value": {=
=A0 =A0 =A0 =A0 "streetAddress": "100 Universal City Pla= za",
=A0 =A0 =A0 =A0 "locality": "Hollywood",=A0 =A0 =A0 =A0 "region": "CA",
=A0 =A0 =A0 =A0 "postalCode": "91608",
=A0 =A0 =A0 = =A0 "country": "USA",
=A0 =A0 =A0 =A0 "formatte= d": "100 Universal City Plaza\nHollywood, CA 91608 USA"
= =A0 =A0 }
=A0 =A0 "primary": true

}

But= in the example in section 12.2 an address is represented as follows:
= 

{
    "type": "work",
    "streetAddress": "100 Universal City Plaza",
    "locality": "Hollywood",
    "region": "CA",
    "postalCode": "91608",
    "country": "USA",
    "formatted": "100 Universal City Plaza\nHollywood, CA 91=
608 USA",
    "primary": true
}

What is the right representation?

_______________________________________________
scim mailing list
scim@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/scim


--485b397dd20b45b04b04eba1cd91-- From moransar@cisco.com Mon Nov 25 22:58:20 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF9351AE18E for ; Mon, 25 Nov 2013 22:58:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.491 X-Spam-Level: X-Spam-Status: No, score=-9.491 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 46q11SJzabUG for ; Mon, 25 Nov 2013 22:58:18 -0800 (PST) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) by ietfa.amsl.com (Postfix) with ESMTP id 12C761AE18A for ; Mon, 25 Nov 2013 22:58:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=23326; q=dns/txt; s=iport; t=1385449098; x=1386658698; h=from:to:subject:date:message-id:mime-version; bh=A6h0LbQEaaUUU/kmaErMwl7dIzVF5DqkDzQtnIS+PpY=; b=RAfa41Xk1w7ddZ7MA5QvCaf2mudpaiM2Gag5JyOxOuPu3B3mww6w3rPU 9cQD0wq7P5OZT70eY6rP5toLjeh/vRBW8BfqHT9WLT7AUo96F5be+JEmx 21Yu9UAMNA7pmNjZsQyRkStKa9mlFySMWHS0yFE2pxWdrWCenYrdr2/4p U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AooFAA5GlFKtJXHA/2dsb2JhbAA/FwOCQ0Q4U7o5gWuBKBZtB4IlAQICAi85Bh0BCAcKAwECFQQIBAM5FAMBBQcDAQMTiAENNp4akzGMaReFJYcygT0RAQweFQEMHAeEGwOYFJIRgT2BGVKBcTk X-IronPort-AV: E=Sophos;i="4.93,772,1378857600"; d="scan'208,217";a="2245592" Received: from rcdn-core2-5.cisco.com ([173.37.113.192]) by alln-iport-1.cisco.com with ESMTP; 26 Nov 2013 06:58:17 +0000 Received: from xhc-aln-x11.cisco.com (xhc-aln-x11.cisco.com [173.36.12.85]) by rcdn-core2-5.cisco.com (8.14.5/8.14.5) with ESMTP id rAQ6wHiI031606 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 26 Nov 2013 06:58:17 GMT Received: from xmb-rcd-x08.cisco.com ([169.254.8.25]) by xhc-aln-x11.cisco.com ([173.36.12.85]) with mapi id 14.03.0123.003; Tue, 26 Nov 2013 00:58:17 -0600 From: "Morteza Ansari (moransar)" To: "scim@ietf.org" Thread-Topic: [scim] Next SCIM WG call agenda - Dec. 4th @11AM Pacific Thread-Index: AQHO6nThwLFSajoTBEOO5TvGsYymGw== Date: Tue, 26 Nov 2013 06:58:16 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.9.131030 x-originating-ip: [10.21.121.5] Content-Type: multipart/alternative; boundary="_000_CEB8DF56B7EA8moransarciscocom_" MIME-Version: 1.0 Subject: Re: [scim] Next SCIM WG call agenda - Dec. 4th @11AM Pacific X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Nov 2013 06:58:21 -0000 --_000_CEB8DF56B7EA8moransarciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Given the US holidays this week (Ths/Fri), a number of folks can't make thi= s call. The biweekly WG call is pushed forward by one week and will start = on Dec. 4th. The agenda is not changed and we will go through all the open issues. Pleas= e between now and then if have taken any issue and have a proposed text use= the mailing list so we can get the easy ones out of the way and use the ca= ll time for more challenging issues requiring live discussion. The WebEx meeting info is not change (other than the date), but included he= re for reference. Cheers, Morteza Topic: SCIM WG bi-weekly call Date: Every 2 weeks on Wednesday, from Wednesday, December 4, 2013 to no en= d date Time: 11:00 am, Pacific Standard Time (San Francisco, GMT-08:00) Meeting Number: 340 844 711 Meeting Password: (This meeting does not require a password.) ------------------------------------------------------- To join the online meeting (Now from mobile devices!) ------------------------------------------------------- 1. Go to https://go.webex.com/go/j.php?ED=3D153193777&UID=3D0&RT=3DMiM0 2. If requested, enter your name and email address. 3. If a password is required, enter the meeting password: (This meeting doe= s not require a password.) 4. Click "Join". To view in other time zones or languages, please click the link: https://go.webex.com/go/j.php?ED=3D153193777&UID=3D0&ORT=3DMiM0 ------------------------------------------------------- To join the audio conference only ------------------------------------------------------- To receive a call back, provide your phone number when you join the meeting= , or call the number below and enter the access code. US Toll Free: +1-855-749-4751 US Toll: +1-415-655-0000 Global call-in numbers: https://go.webex.com/go/globalcallin.php?serviceTyp= e=3DMC&ED=3D153193777&tollFree=3D1 Toll-free dialing restrictions: http://www.webex.com/pdf/tollfree_restricti= ons.pdf Access code:340 844 711 ------------------------------------------------------- For assistance ------------------------------------------------------- 1. Go to https://go.webex.com/go/mc 2. On the left navigation bar, click "Support". You can contact me at: moransar@cisco.com 1-408 566-5647 To update this meeting to your calendar program (for example Microsoft Outl= ook), click this link: https://go.webex.com/go/j.php?ED=3D153193777&UID=3D0&ICS=3DMRS1&LD=3D1&RD= =3D2&ST=3D1&SHA2=3DAAAAARBGrx6g-3G8Y56jVVHaPSruhMgm2a/qNpXPxgH8MS4f&RT=3DMi= M0 WebEx will automatically setup Meeting Manager for Windows the first time y= ou join a meeting. To save time, you can setup prior to the meeting by clic= king this link: https://go.webex.com/go/meetingcenter/mcsetup.php The playback of UCF (Universal Communications Format) rich media files requ= ires appropriate players. To view this type of rich media files in the meet= ing, please check whether you have the players installed on your computer b= y going to https://go.webex.com/go/systemdiagnosis.php. Sign up for a free trial of WebEx http://www.webex.com/go/mcemfreetrial http://www.webex.com CCP:+14156550000x340844711# IMPORTANT NOTICE: This WebEx service includes a feature that allows audio a= nd any documents and other materials exchanged or viewed during the session= to be recorded. By joining this session, you automatically consent to such= recordings. If you do not consent to the recording, discuss your concerns = with the meeting host prior to the start of the recording or do not join th= e session. Please note that any such recordings may be subject to discovery= in the event of litigation. From: Morteza Ansari > Date: Tuesday, November 12, 2013 9:45 PM To: "scim@ietf.org" > Subject: [scim] Next SCIM WG call agenda - Nov. 27th @11AM Pacific Hi folks, Note that we don't have a call tomorrow and the next call is on Nov. 27th a= t 11AM Pacific. We will be going through all the open issues on tracker. P= lease between now and then if have taken any issue and have a proposed text= use the mailing list so we can get the easy ones out of the way and use th= e call time for more challenging issues requiring live discussion. Cheers, Morteza --_000_CEB8DF56B7EA8moransarciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: <2645F3966006E24A85EC076222A39681@emea.cisco.com> Content-Transfer-Encoding: quoted-printable
Given the US holidays this week (Ths/Fri), a number of folks can't mak= e this call.  The biweekly WG call is pushed forward by one week and w= ill start on Dec. 4th.

The agenda is not changed and we will go through all the open issues.&= nbsp;Please between now and then if have taken any issue and have a propose= d text use the mailing list so we can get the easy ones out of the way and = use the call time for more challenging issues requiring live discussion.

The WebEx meeting info is not change (other than the date), but includ= ed here for reference.


Cheers,
Morteza

Topic: SCIM WG bi-weekly call 
Date: Every 2 weeks on Wednesday, from Wednesday, Decemb= er 4, 2013 to no end date 
Time: 11:00 am, Pacific Standard Time (San Francisco, GM= T-08:00) 
Meeting Number: 340 844 711 
Meeting Password: (This meeting does not require a passw= ord.) 


-------------------------------------------------------&= nbsp;
To join the online meeting (Now from mobile devices!)&nb= sp;
-------------------------------------------------------&= nbsp;
1. Go to https://go.webex.com/go/j.php?ED=3D153193777&UID=3D0&RT=3DMiM0<= /a> 
2. If requested, enter your name and email address. = ;
3. If a password is required, enter the meeting password= : (This meeting does not require a password.) 
4. Click "Join". 

To view in other time zones or languages, please click t= he link: 
https://go.webex.com/go/j.php?ED=3D= 153193777&UID=3D0&ORT=3DMiM0 
-------------------------------------------------------&= nbsp;
To join the audio conference only 
-------------------------------------------------------&= nbsp;
To receive a call back, provide your phone number when y= ou join the meeting, or call the number below and enter the access code.&nb= sp;
US Toll Free: +1-855-749-4751 
US Toll: +1-415-655-0000 
Global call-in numbers: https://go.webex.com/go/globalcal= lin.php?serviceType=3DMC&ED=3D153193777&tollFree=3D1 
Toll-free dialing restrictions: http://www.webex.com/pdf/tollfree_restrictions.pdf 

Access code:340 844 711 

-------------------------------------------------------&= nbsp;
For assistance 
-------------------------------------------------------&= nbsp;
1. Go to https://go.webex.com/go/mc 
2. On the left navigation bar, click "Support"= . 

You can contact me at: 
moransar@cisco.com 
1-408 566-5647 

To update this meeting to your calendar program (for exa= mple Microsoft Outlook), click this link: 
htt= ps://go.webex.com/go/j.php?ED=3D153193777&UID=3D0&ICS=3DMRS1&LD= =3D1&RD=3D2&ST=3D1&SHA2=3DAAAAARBGrx6g-3G8Y56jVVHaPSruhMgm2a/qN= pXPxgH8MS4f&RT=3DMiM0 

WebEx will automatically setup Meeting Manager for Windo= ws the first time you join a meeting. To save time, you can setup prior to = the meeting by clicking this link: 
https://go.webex.com/go/meetingcenter/mcsetup.php 


The playback of UCF (Universal Communications Format) ri= ch media files requires appropriate players. To view this type of rich medi= a files in the meeting, please check whether you have the players installed on your computer by going to <= /span>= https://go.webex.com/go/systemdiagnosis.php. 

Sign up for a free trial of WebEx 
http://www.webex.com/go/mcemfreetrial <= /span>

http://www= .webex.com 

CCP:+14156550000x340844711# 

IMPORTANT NOTICE: This WebEx service includes a feature = that allows audio and any documents and other materials exchanged or viewed= during the session to be recorded. By joining this session, you automatically consent to such recordings. If = you do not consent to the recording, discuss your concerns with the meeting= host prior to the start of the recording or do not join the session. Pleas= e note that any such recordings may be subject to discovery in the event of litigation. 


From: Morteza Ansari <moransar@cisco.com>
Date: Tuesday, November 12, 2013 9:= 45 PM
To: "scim@ietf.org" <scim@i= etf.org>
Subject: [scim] Next SCIM WG call a= genda - Nov. 27th @11AM Pacific

Hi folks, 

Note that we don't have a call tomorrow and the next call is on Nov. 2= 7th at 11AM Pacific.  We will be going through all the open issues on = tracker. Please between now and then if have taken any issue and have a pro= posed text use the mailing list so we can get the easy ones out of the way and use the call time for more challe= nging issues requiring live discussion.


Cheers,
Morteza
 --_000_CEB8DF56B7EA8moransarciscocom_-- From prvs=60454D6660=erik.wahlstrom@nexusgroup.com Fri Nov 29 05:49:46 2013 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 292621AE007 for ; Fri, 29 Nov 2013 05:49:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.6 X-Spam-Level: X-Spam-Status: No, score=-1.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E0DJFpKwuHfX for ; Fri, 29 Nov 2013 05:49:44 -0800 (PST) Received: from mailedge.nexussafe.com (mailedge.nexussafe.com [83.241.133.98]) by ietfa.amsl.com (Postfix) with ESMTP id A6AE21AD7C2 for ; Fri, 29 Nov 2013 05:49:43 -0800 (PST) Received: from MARVMAILCAS.technxs.com (10.75.28.37) by MailEdge.nexussafe.com (83.241.133.98) with Microsoft SMTP Server (TLS) id 14.0.722.0; Fri, 29 Nov 2013 14:49:51 +0100 Received: from MARVMAILDB.technxs.com ([fe80::2481:7a28:782a:7fc7]) by MarvMailCAS.technxs.com ([fe80::cd7:3e15:4b14:c076%14]) with mapi id 14.03.0158.001; Fri, 29 Nov 2013 14:49:40 +0100 From: =?Windows-1252?Q?Erik_Wahlstr=F6m?= To: "" Thread-Topic: Recommending resolving ticket #13 with a won't fix. Thread-Index: AQHO7QnYH5Dqh40fPECMlpV1ew65IQ== Date: Fri, 29 Nov 2013 13:49:39 +0000 Message-ID: Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.75.28.12] Content-Type: multipart/alternative; boundary="_000_D604026BCF314D618123CAA552CE98BDnexussafecom_" MIME-Version: 1.0 Subject: [scim] Recommending resolving ticket #13 with a won't fix. X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Nov 2013 13:49:46 -0000 --_000_D604026BCF314D618123CAA552CE98BDnexussafecom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable http://trac.tools.ietf.org/wg/scim/trac/ticket/13 Was looking through issue #13 with the header "Add a "required" flag in con= figuration to support etags=94. I=92m thinking we should close the ticket as a wont fix. I think it=92s rat= her clearly stated that it already is, in section "3.11. Versioning Resour= ces", when it=92s PUT and PATCH. "If the Service Providers supports versioning of resources the Consumer MUST supply an If-Match [15] header for PUT and PATCH operations to ensure that the requested operation succeeds only if the supplied ETag matches the latest Service Provider Resource; e.g., If-Match: W/"e180ee84f0671b1" =93 / Erik --_000_D604026BCF314D618123CAA552CE98BDnexussafecom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <9CB43158985A5B4C80E02AA9E6F5AED7@nexussafe.com> Content-Transfer-Encoding: quoted-printable http://trac.t= ools.ietf.org/wg/scim/trac/ticket/13

Was looking through issue #13 with the header "Add a "requir= ed" flag in configuration to support etags=94.

I=92m thinking we should close the ticket as a wont fix. I think it=92= s rather clearly stated that it already is, in section "3.11.  Ve= rsioning Resources", when it=92s PUT and PATCH.

"If the Service Providers support= s versioning of resources the
   Consumer MUST supply an If-Match [=
15] header for PUT and PATCH
   operations to ensure that the requested operation succeeds only if
   the supplied ETag matches the latest Service Provider Resource; e.g.,
   If-Match: W/"e180ee84f0671b1"
=93

/ Erik

--_000_D604026BCF314D618123CAA552CE98BDnexussafecom_--