From nobody Mon Feb 2 09:59:29 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 550001A87A7; Mon, 2 Feb 2015 09:59:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u6VgNqv2p1xv; Mon, 2 Feb 2015 09:59:20 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 03EC21A8799; Mon, 2 Feb 2015 09:59:20 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 5.10.1.p2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150202175920.15392.70266.idtracker@ietfa.amsl.com> Date: Mon, 02 Feb 2015 09:59:20 -0800 Archived-At: Cc: scim@ietf.org Subject: [scim] I-D Action: draft-ietf-scim-core-schema-15.txt X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Feb 2015 17:59:27 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the System for Cross-domain Identity Management Working Group of the IETF. Title : System for Cross-Domain Identity Management: Core Schema Authors : Phil Hunt Kelly Grizzle Erik Wahlstroem Chuck Mortimore Filename : draft-ietf-scim-core-schema-15.txt Pages : 71 Date : 2015-02-02 Abstract: The System for Cross-Domain Identity Management (SCIM) specifications are designed to make identity management in cloud based applications and services easier. The specification suite builds upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. Its intent is to reduce the cost and complexity of user management operations by providing a common user schema and extension model, as well as binding documents to provide patterns for exchanging this schema using HTTP protocol. This document provides a platform neutral schema and extension model for representing users and groups and other resource types in JSON format. This schema is intended for exchange and use with cloud service providers. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-scim-core-schema/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-scim-core-schema-15 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-scim-core-schema-15 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Feb 2 11:08:35 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE1801A8958 for ; Mon, 2 Feb 2015 11:08:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XfAe9nYMPmuA for ; Mon, 2 Feb 2015 11:08:28 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 370F31A894F for ; Mon, 2 Feb 2015 11:08:25 -0800 (PST) Received: from acsinet21.oracle.com (acsinet21.oracle.com [141.146.126.237]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t12J8O09026868 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Mon, 2 Feb 2015 19:08:25 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t12J8NRY014518 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Mon, 2 Feb 2015 19:08:24 GMT Received: from abhmp0016.oracle.com (abhmp0016.oracle.com [141.146.116.22]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t12J8NIZ014511 for ; Mon, 2 Feb 2015 19:08:23 GMT Received: from [10.0.1.7] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 02 Feb 2015 11:08:23 -0800 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Phil Hunt In-Reply-To: <20150202175920.15392.70266.idtracker@ietfa.amsl.com> Date: Mon, 2 Feb 2015 11:08:22 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <836AA988-F7D0-481E-B05B-C2BA0E5C5052@oracle.com> References: <20150202175920.15392.70266.idtracker@ietfa.amsl.com> To: SCIM WG X-Mailer: Apple Mail (2.2070.6) X-Source-IP: acsinet21.oracle.com [141.146.126.237] Archived-At: Subject: Re: [scim] I-D Action: draft-ietf-scim-core-schema-15.txt X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Feb 2015 19:08:31 -0000 All, This is the correction I mentioned on the list last Wednesday. It = corrects the issue around SCIM data types and proper usage in the SCIM = Schemas endpoint (which previously only used String, boolean and = complex). =46rom the feedback received this should not be a normative = change since it does not affect the underlying JSON representation. =20 Also: I also mentioned an issued regarding PATCH and when to return = =E2=80=9CnoTarget=E2=80=9D errors on =E2=80=9Creplace=E2=80=9D = operations. I will be posting this sometime on Wednesday. Thanks, Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 2, 2015, at 9:59 AM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the System for Cross-domain Identity = Management Working Group of the IETF. >=20 > Title : System for Cross-Domain Identity Management: = Core Schema > Authors : Phil Hunt > Kelly Grizzle > Erik Wahlstroem > Chuck Mortimore > Filename : draft-ietf-scim-core-schema-15.txt > Pages : 71 > Date : 2015-02-02 >=20 > Abstract: > The System for Cross-Domain Identity Management (SCIM) = specifications > are designed to make identity management in cloud based applications > and services easier. The specification suite builds upon experience > with existing schemas and deployments, placing specific emphasis on > simplicity of development and integration, while applying existing > authentication, authorization, and privacy models. Its intent is to > reduce the cost and complexity of user management operations by > providing a common user schema and extension model, as well as > binding documents to provide patterns for exchanging this schema > using HTTP protocol. >=20 > This document provides a platform neutral schema and extension model > for representing users and groups and other resource types in JSON > format. This schema is intended for exchange and use with cloud > service providers. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-scim-core-schema/ >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-scim-core-schema-15 >=20 > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-scim-core-schema-15 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Mon Feb 2 11:44:12 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 546C21A89A2 for ; Mon, 2 Feb 2015 11:44:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FOot-W-E0NvJ for ; Mon, 2 Feb 2015 11:44:07 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BE921A89A9 for ; Mon, 2 Feb 2015 11:43:47 -0800 (PST) Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t12JhjLi001917 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Mon, 2 Feb 2015 19:43:46 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by ucsinet22.oracle.com (8.14.5+Sun/8.14.5) with ESMTP id t12JhibF000523 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Mon, 2 Feb 2015 19:43:45 GMT Received: from abhmp0015.oracle.com (abhmp0015.oracle.com [141.146.116.21]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t12Jhibe007913 for ; Mon, 2 Feb 2015 19:43:44 GMT Received: from [10.0.1.7] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 02 Feb 2015 11:43:44 -0800 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Phil Hunt In-Reply-To: <836AA988-F7D0-481E-B05B-C2BA0E5C5052@oracle.com> Date: Mon, 2 Feb 2015 11:43:43 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <84DE15FC-87CC-4DC1-9083-94C0F5F2EC54@oracle.com> References: <20150202175920.15392.70266.idtracker@ietfa.amsl.com> <836AA988-F7D0-481E-B05B-C2BA0E5C5052@oracle.com> To: SCIM WG X-Mailer: Apple Mail (2.2070.6) X-Source-IP: ucsinet22.oracle.com [156.151.31.94] Archived-At: Subject: Re: [scim] I-D Action: draft-ietf-scim-core-schema-15.txt X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Feb 2015 19:44:10 -0000 All, I have to apologize, I made a mistake for the schema entry for = =E2=80=9Cphoto=E2=80=9D in the last core-schema update. The =E2=80=9Cvalue= =E2=80=9D sub-attribute should be type =E2=80=9Creference=E2=80=9D and = not =E2=80=9Cbinary=E2=80=9D. I will correct this in the next update. Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 2, 2015, at 11:08 AM, Phil Hunt wrote: >=20 > All, >=20 > This is the correction I mentioned on the list last Wednesday. It = corrects the issue around SCIM data types and proper usage in the SCIM = Schemas endpoint (which previously only used String, boolean and = complex). =46rom the feedback received this should not be a normative = change since it does not affect the underlying JSON representation. =20 >=20 > Also: I also mentioned an issued regarding PATCH and when to return = =E2=80=9CnoTarget=E2=80=9D errors on =E2=80=9Creplace=E2=80=9D = operations. I will be posting this sometime on Wednesday. >=20 > Thanks, >=20 > Phil >=20 > @independentid > www.independentid.com > phil.hunt@oracle.com >=20 >> On Feb 2, 2015, at 9:59 AM, internet-drafts@ietf.org wrote: >>=20 >>=20 >> A New Internet-Draft is available from the on-line Internet-Drafts = directories. >> This draft is a work item of the System for Cross-domain Identity = Management Working Group of the IETF. >>=20 >> Title : System for Cross-Domain Identity Management: = Core Schema >> Authors : Phil Hunt >> Kelly Grizzle >> Erik Wahlstroem >> Chuck Mortimore >> Filename : draft-ietf-scim-core-schema-15.txt >> Pages : 71 >> Date : 2015-02-02 >>=20 >> Abstract: >> The System for Cross-Domain Identity Management (SCIM) = specifications >> are designed to make identity management in cloud based applications >> and services easier. The specification suite builds upon experience >> with existing schemas and deployments, placing specific emphasis on >> simplicity of development and integration, while applying existing >> authentication, authorization, and privacy models. Its intent is to >> reduce the cost and complexity of user management operations by >> providing a common user schema and extension model, as well as >> binding documents to provide patterns for exchanging this schema >> using HTTP protocol. >>=20 >> This document provides a platform neutral schema and extension model >> for representing users and groups and other resource types in JSON >> format. This schema is intended for exchange and use with cloud >> service providers. >>=20 >>=20 >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-ietf-scim-core-schema/ >>=20 >> There's also a htmlized version available at: >> http://tools.ietf.org/html/draft-ietf-scim-core-schema-15 >>=20 >> A diff from the previous version is available at: >> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-scim-core-schema-15 >>=20 >>=20 >> Please note that it may take a couple of minutes from the time of = submission >> until the htmlized version and diff are available at tools.ietf.org. >>=20 >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >>=20 >> _______________________________________________ >> scim mailing list >> scim@ietf.org >> https://www.ietf.org/mailman/listinfo/scim >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Wed Feb 4 13:26:12 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9928D1A88F8; Wed, 4 Feb 2015 13:26:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yrUDICBBt6-B; Wed, 4 Feb 2015 13:26:09 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 65DC41A8883; Wed, 4 Feb 2015 13:26:09 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 5.10.1.p2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150204212609.7696.31983.idtracker@ietfa.amsl.com> Date: Wed, 04 Feb 2015 13:26:09 -0800 Archived-At: Cc: scim@ietf.org Subject: [scim] I-D Action: draft-ietf-scim-core-schema-16.txt X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Feb 2015 21:26:10 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the System for Cross-domain Identity Management Working Group of the IETF. Title : System for Cross-Domain Identity Management: Core Schema Authors : Phil Hunt Kelly Grizzle Erik Wahlstroem Chuck Mortimore Filename : draft-ietf-scim-core-schema-16.txt Pages : 71 Date : 2015-02-04 Abstract: The System for Cross-Domain Identity Management (SCIM) specifications are designed to make identity management in cloud based applications and services easier. The specification suite builds upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. Its intent is to reduce the cost and complexity of user management operations by providing a common user schema and extension model, as well as binding documents to provide patterns for exchanging this schema using HTTP protocol. This document provides a platform neutral schema and extension model for representing users and groups and other resource types in JSON format. This schema is intended for exchange and use with cloud service providers. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-scim-core-schema/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-scim-core-schema-16 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-scim-core-schema-16 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Feb 4 13:28:25 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CF9B1A88F1 for ; Wed, 4 Feb 2015 13:28:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.611 X-Spam-Level: X-Spam-Status: No, score=-3.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_55=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W0yRl_mq0-JU for ; Wed, 4 Feb 2015 13:28:20 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7D651A88EF for ; Wed, 4 Feb 2015 13:28:20 -0800 (PST) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t14LSJjE029067 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Wed, 4 Feb 2015 21:28:20 GMT Received: from userz7022.oracle.com (userz7022.oracle.com [156.151.31.86]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t14LSI5u023257 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 4 Feb 2015 21:28:19 GMT Received: from ubhmt116.oracle.com (ubhmt116.oracle.com [156.151.24.21]) by userz7022.oracle.com (8.14.5+Sun/8.14.4) with ESMTP id t14LSIiV007703 for ; Wed, 4 Feb 2015 21:28:18 GMT Received: from [10.0.1.7] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 04 Feb 2015 13:28:17 -0800 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Phil Hunt In-Reply-To: <20150204212609.7696.31983.idtracker@ietfa.amsl.com> Date: Wed, 4 Feb 2015 13:28:16 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <3E2D97DB-12A8-4990-ADA5-DF22ABC5DB47@oracle.com> References: <20150204212609.7696.31983.idtracker@ietfa.amsl.com> To: SCIM WG X-Mailer: Apple Mail (2.2070.6) X-Source-IP: acsinet22.oracle.com [141.146.126.238] Archived-At: Subject: Re: [scim] I-D Action: draft-ietf-scim-core-schema-16.txt X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Feb 2015 21:28:23 -0000 As mentioned previously on the list, I had made a typo in the last = update. photo.value should be =E2=80=9Ctype=E2=80=9D:=E2=80=9Dreference=E2= =80=9D and not =E2=80=9Ctype=E2=80=9D:=E2=80=9Dbinary=E2=80=9D as was = posted in draft 15. =20 Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 4, 2015, at 1:26 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the System for Cross-domain Identity = Management Working Group of the IETF. >=20 > Title : System for Cross-Domain Identity Management: = Core Schema > Authors : Phil Hunt > Kelly Grizzle > Erik Wahlstroem > Chuck Mortimore > Filename : draft-ietf-scim-core-schema-16.txt > Pages : 71 > Date : 2015-02-04 >=20 > Abstract: > The System for Cross-Domain Identity Management (SCIM) = specifications > are designed to make identity management in cloud based applications > and services easier. The specification suite builds upon experience > with existing schemas and deployments, placing specific emphasis on > simplicity of development and integration, while applying existing > authentication, authorization, and privacy models. Its intent is to > reduce the cost and complexity of user management operations by > providing a common user schema and extension model, as well as > binding documents to provide patterns for exchanging this schema > using HTTP protocol. >=20 > This document provides a platform neutral schema and extension model > for representing users and groups and other resource types in JSON > format. This schema is intended for exchange and use with cloud > service providers. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-scim-core-schema/ >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-scim-core-schema-16 >=20 > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-scim-core-schema-16 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Tue Feb 10 09:56:43 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 460C31A1AE2; Tue, 10 Feb 2015 09:56:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Eg4uecTMnX6b; Tue, 10 Feb 2015 09:56:36 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 32E1C1A1A83; Tue, 10 Feb 2015 09:56:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 5.11.0.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150210175632.890.93042.idtracker@ietfa.amsl.com> Date: Tue, 10 Feb 2015 09:56:32 -0800 Archived-At: Cc: scim@ietf.org Subject: [scim] I-D Action: draft-ietf-scim-api-15.txt X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Feb 2015 17:56:38 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the System for Cross-domain Identity Management Working Group of the IETF. Title : System for Cross-Domain Identity Management: Protocol Authors : Phil Hunt Kelly Grizzle Morteza Ansari Erik Wahlstroem Technology Nexus Chuck Mortimore Filename : draft-ietf-scim-api-15.txt Pages : 83 Date : 2015-02-10 Abstract: The System for Cross-Domain Identity Management (SCIM) specification is an HTTP based protocol that makes managing identities in multi- domain scenarios easier to support through a standardized services. Examples include but are not limited to enterprise to cloud service providers, and inter-cloud based scenarios. The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. SCIM's intent is to reduce the cost and complexity of user management operations by providing a common user schema and extension model and a service protocol defined by this document. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-scim-api/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-scim-api-15 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-scim-api-15 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Feb 10 10:22:39 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D5CD1A1B47 for ; Tue, 10 Feb 2015 10:22:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uk_A97QKZVTm for ; Tue, 10 Feb 2015 10:22:34 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B00D1A1B70 for ; Tue, 10 Feb 2015 10:22:34 -0800 (PST) Received: from aserv0021.oracle.com (aserv0021.oracle.com [141.146.126.233]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1AIMX0t010772 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Tue, 10 Feb 2015 18:22:33 GMT Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by aserv0021.oracle.com (8.13.8/8.13.8) with ESMTP id t1AIMXZQ018907 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 10 Feb 2015 18:22:33 GMT Received: from abhmp0015.oracle.com (abhmp0015.oracle.com [141.146.116.21]) by aserv0121.oracle.com (8.13.8/8.13.8) with ESMTP id t1AIMXJR032083 for ; Tue, 10 Feb 2015 18:22:33 GMT Received: from [10.0.1.7] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 10 Feb 2015 10:22:27 -0800 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Phil Hunt In-Reply-To: <20150210175632.890.93042.idtracker@ietfa.amsl.com> Date: Tue, 10 Feb 2015 10:22:26 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <05A33D06-9B3E-4EC2-8928-9429A2C57B08@oracle.com> References: <20150210175632.890.93042.idtracker@ietfa.amsl.com> To: SCIM WG X-Mailer: Apple Mail (2.2070.6) X-Source-IP: aserv0021.oracle.com [141.146.126.233] Archived-At: Subject: Re: [scim] I-D Action: draft-ietf-scim-api-15.txt X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Feb 2015 18:22:37 -0000 As mentioned on my emails last week, this draft provides clarifications = on path processing rules during an HTTP PATCH =E2=80=9Creplace=E2=80=9D = operation regarding what should happen when path describes an attribute = or value that does not exist. Also, references were updated to reflect new versions of sasprepbis and = precis framework. Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 10, 2015, at 9:56 AM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the System for Cross-domain Identity = Management Working Group of the IETF. >=20 > Title : System for Cross-Domain Identity Management: = Protocol > Authors : Phil Hunt > Kelly Grizzle > Morteza Ansari > Erik Wahlstroem > Technology Nexus > Chuck Mortimore > Filename : draft-ietf-scim-api-15.txt > Pages : 83 > Date : 2015-02-10 >=20 > Abstract: > The System for Cross-Domain Identity Management (SCIM) specification > is an HTTP based protocol that makes managing identities in multi- > domain scenarios easier to support through a standardized services. > Examples include but are not limited to enterprise to cloud service > providers, and inter-cloud based scenarios. The specification suite > seeks to build upon experience with existing schemas and = deployments, > placing specific emphasis on simplicity of development and > integration, while applying existing authentication, authorization, > and privacy models. SCIM's intent is to reduce the cost and > complexity of user management operations by providing a common user > schema and extension model and a service protocol defined by this > document. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-scim-api/ >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-scim-api-15 >=20 > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-scim-api-15 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Tue Feb 10 10:46:24 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 071E51A1B74 for ; Tue, 10 Feb 2015 10:46:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z1c7knrC8cJo for ; Tue, 10 Feb 2015 10:46:17 -0800 (PST) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7EB71A1B4E for ; Tue, 10 Feb 2015 10:46:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2217; q=dns/txt; s=iport; t=1423593976; x=1424803576; h=from:to:subject:date:message-id:mime-version; bh=o0HArj0ALIm/Dnzslk5stq3/0AXoxc1B/WzYuGdnX6A=; b=L7ibtWYGSVaHXgWweluZ/p3tL8/v4gjc0EF2ihYkuVBuwFiR7FVdTB+V oVKgZQubEeVm3AdChjtxEAwmIGh41HFP+5qdCLE9e7F7FRGI2ip1HZDqM kttmsmIBbq5EjNKdyihEFT3Hc0IPQTSd/m60RrFieT9rqe1obwp0uFoBj 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AnUFAMlQ2lStJA2I/2dsb2JhbABcgkNDgTDAaok8QwEBAQEBAXyEE4ELAQwBcycEiECrEqYpAQEIAQEBAR6UKAWPIIkugRiDA4sdgz4ig26CM38BAQE X-IronPort-AV: E=Sophos;i="5.09,552,1418083200"; d="scan'208,217";a="394970762" Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-7.cisco.com with ESMTP; 10 Feb 2015 18:46:15 +0000 Received: from xhc-aln-x14.cisco.com (xhc-aln-x14.cisco.com [173.36.12.88]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t1AIkFNC005382 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 10 Feb 2015 18:46:15 GMT Received: from xmb-rcd-x08.cisco.com ([169.254.8.20]) by xhc-aln-x14.cisco.com ([173.36.12.88]) with mapi id 14.03.0195.001; Tue, 10 Feb 2015 12:46:14 -0600 From: "Morteza Ansari (moransar)" To: "scim@ietf.org" Thread-Topic: WGLC on core-schema-16 and API-15 drafts Thread-Index: AQHQRWHYoBn+GOnPk0mBXaCjJh6etw== Date: Tue, 10 Feb 2015 18:46:14 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [10.24.211.54] Content-Type: multipart/alternative; boundary="_000_D0FF91F5114651moransarciscocom_" MIME-Version: 1.0 Archived-At: Subject: [scim] WGLC on core-schema-16 and API-15 drafts X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Feb 2015 18:46:20 -0000 --_000_D0FF91F5114651moransarciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi folks, While none of the changes that have gone into the schema and API drafts sin= ce the last WGLC are significant, given there has been a number of them, Le= if and I feel we should do another WGLC on these two documents before proce= eding forward. This starts a two week working group last call on these two documents: draft-ietf-scim-core-schema-16 draft-ietf-scim-api-15 Please provide your final comments by end of day Feb. 25th to the list. Cheers, Morteza & Leif --_000_D0FF91F5114651moransarciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: <986B6B453404F74D94C311D65E15B696@emea.cisco.com> Content-Transfer-Encoding: quoted-printable
Hi folks,

While none of the changes that have gone into the schema and API draft= s since the last WGLC are significant, given there has been a number of the= m, Leif and I feel we should do another WGLC on these two documents before = proceeding forward.

This starts a two week working group last call on these two documents:= 

draft-ietf-scim-core-schema-16
draft-ietf-scim-api-15

Please provide your final comments by end of day Feb. 25th to the list= .


Cheers,
Morteza & Leif


--_000_D0FF91F5114651moransarciscocom_-- From nobody Thu Feb 12 10:55:07 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C539A1A1AB3 for ; Thu, 12 Feb 2015 10:55:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id niHgw91pJhBH for ; Thu, 12 Feb 2015 10:55:03 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E86381A1AF8 for ; Thu, 12 Feb 2015 10:55:02 -0800 (PST) Received: from aserv0021.oracle.com (aserv0021.oracle.com [141.146.126.233]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1CIt1Bv013862 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 12 Feb 2015 18:55:01 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by aserv0021.oracle.com (8.13.8/8.13.8) with ESMTP id t1CIt05R031995 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 12 Feb 2015 18:55:01 GMT Received: from abhmp0007.oracle.com (abhmp0007.oracle.com [141.146.116.13]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1CIt019012239 for ; Thu, 12 Feb 2015 18:55:00 GMT Received: from [192.168.1.9] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 12 Feb 2015 10:55:00 -0800 From: Phil Hunt Content-Type: multipart/alternative; boundary="Apple-Mail=_CB888918-5854-4385-90A0-9FADE81C8DCD" Message-Id: Date: Thu, 12 Feb 2015 10:54:59 -0800 To: SCIM WG Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) X-Mailer: Apple Mail (2.2070.6) X-Source-IP: aserv0021.oracle.com [141.146.126.233] Archived-At: Subject: [scim] Bulk Request - BulkId optionality X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Feb 2015 18:55:06 -0000 --Apple-Mail=_CB888918-5854-4385-90A0-9FADE81C8DCD Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 As we=E2=80=99ve re-opened calls for comments, I thought I would post = this=E2=80=A6 In the section on Bulk requests, I see bulkId is REQUIRED when method is = POST. > bulkId The transient identifier of a newly created resource, > unique within a bulk request and created by the client. The > bulkId serves as a surrogate resource id enabling clients to > uniquely identify newly created resources in the Response and > cross reference new resources in and across operations within = a > bulk request. REQUIRED when method is POST. While the server needs to support it, I believe bulkID should always be = optional to the client.=20 I propose that the paragraph should read: bulkId The transient identifier of a newly created resource whose value = is unique within a bulk request and created by the client. The bulkId serves as a surrogate resource URI enabling clients to uniquely identify newly created resources and reference them across operations within a bulk request. When referenced in a=20= subsequent operation, the URI takes the form "bulkId:=E2=80= =9D=20 where "" is the value of the bulkId attribute. MAY be=20 provided when method is POST.=20 =20 Phil @independentid www.independentid.com phil.hunt@oracle.com --Apple-Mail=_CB888918-5854-4385-90A0-9FADE81C8DCD Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 As we=E2=80=99ve re-opened calls for comments, I thought I = would post this=E2=80=A6

In the section on Bulk requests, I see bulkId is REQUIRED = when method is POST.

bulkId  The transient identifier of a newly =
created resource,
         unique within a bulk request and created by the client.  The
         bulkId serves as a surrogate resource id enabling clients to
         uniquely identify newly created resources in the Response and
         cross reference new resources in and across operations within a
         bulk request.  REQUIRED when method is =
POST.

While the server needs to support it, I believe bulkID should = always be optional to the client. 

I propose that the paragraph should = read:

bulkId  The transient =
identifier of a newly created resource whose value is
         unique within a bulk request and created by the client.  The
         bulkId serves as a surrogate resource URI enabling clients to
         uniquely identify newly created resources and reference them
         across operations within a bulk request. When referenced in =
a 
         subsequent operation, the URI takes the form =
"bulkId:<value>=E2=80=9D 
         where =
"<value>" is the value of the bulkId attribute. MAY be 
  =
       provided when method is POST.

                =   

= --Apple-Mail=_CB888918-5854-4385-90A0-9FADE81C8DCD-- From nobody Thu Feb 12 11:07:19 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7426F1A1B5F for ; Thu, 12 Feb 2015 11:07:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.978 X-Spam-Level: X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jd2y5sjW5TXU for ; Thu, 12 Feb 2015 11:07:12 -0800 (PST) Received: from mail-ie0-f182.google.com (mail-ie0-f182.google.com [209.85.223.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A65681A1BB9 for ; Thu, 12 Feb 2015 11:06:41 -0800 (PST) Received: by iecrl12 with SMTP id rl12so11822573iec.2 for ; Thu, 12 Feb 2015 11:06:41 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=yzE2X8XzL8exliPOHxrm/Qvm70ICmSlFBz5M2+yNWKw=; b=BWAJyTIfFuBYFzw9QifdBeL8gz5LVvSpRgnbryrTVGK4pMWHPcFoY1JYmMkgJxyXkm i6e44NWS+WCor75zE9Nlq68c253jZYSp9TedVsHjqM2WbicTh/A4cH+j+P6g3c0hTRy9 MP9A3GqVz/gaPLyPkQQ5NcbmsEP0hYVe3lWhiz54p75fe1CNk10eMX1IU1jpB++DCMTs DVUTPqV10qtTX4hqvBE6Ppm7/Hrkn9ZgeDAcEMeLWKnQpmJMjCPgxTdysLkn+iyk2BNb ZRTmKgTSXSu1ghOoRe1qoYoJCdf1yYClSxIKJC//4j7qn0XQpE1sWi1I6RbJgdo+7nbp b1Fg== X-Gm-Message-State: ALoCoQmZLPZoVpQIXtIu6ICBsWh7oqk45SOVfs4jncAa7JiHDJBvDYe4+0KO8YlDFNF6/vVnqcYN X-Received: by 10.50.107.7 with SMTP id gy7mr5726366igb.49.1423768000912; Thu, 12 Feb 2015 11:06:40 -0800 (PST) MIME-Version: 1.0 Received: by 10.36.127.141 with HTTP; Thu, 12 Feb 2015 11:06:20 -0800 (PST) In-Reply-To: References: From: Ian Glazer Date: Thu, 12 Feb 2015 14:06:20 -0500 Message-ID: To: Phil Hunt Content-Type: multipart/alternative; boundary=e89a8ffbae41f032e0050ee8d174 Archived-At: Cc: SCIM WG Subject: Re: [scim] Bulk Request - BulkId optionality X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Feb 2015 19:07:15 -0000 --e89a8ffbae41f032e0050ee8d174 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable That language looks good to me On Thu, Feb 12, 2015 at 1:54 PM, Phil Hunt wrote: > As we=E2=80=99ve re-opened calls for comments, I thought I would post thi= s=E2=80=A6 > > In the section on Bulk requests, I see bulkId is REQUIRED when method is > POST. > > bulkId The transient identifier of a newly created resource, > unique within a bulk request and created by the client. The > bulkId serves as a surrogate resource id enabling clients to > uniquely identify newly created resources in the Response and > cross reference new resources in and across operations within a > bulk request. REQUIRED when method is POST. > > > While the server needs to support it, I believe bulkID should always be > optional to the client. > > I propose that the paragraph should read: > > bulkId The transient identifier of a newly created resource whose value = is > unique within a bulk request and created by the client. The > bulkId serves as a surrogate resource URI enabling clients to > uniquely identify newly created resources and reference them > across operations within a bulk request. When referenced in a > > subsequent operation, the URI takes the form "bulkId:=E2= =80=9D > > where "" is the value of the bulkId attribute. MAY be > > provided when method is POST. > > > > Phil > > @independentid > www.independentid.com > phil.hunt@oracle.com > > > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > > --=20 Ian Glazer Senior Director, Identity +1 202 255 3166 @iglazer --e89a8ffbae41f032e0050ee8d174 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
That language looks good to me

On Thu, Feb 12, 2015 at 1:54 PM, Phil H= unt <phil.hunt@oracle.com> wrote:
As we=E2=80=99ve re-opened c= alls for comments, I thought I would post this=E2=80=A6

= In the section on Bulk requests, I see bulkId is REQUIRED when method is PO= ST.

bulkId  The transient identifier of a n=
ewly created resource,
         unique within a bulk request and created by the client.  The
         bulkId serves as a surrogate resource id enabling clients to
         uniquely identify newly created resources in the Response and
         cross reference new resources in and across operations within a
         bulk request.  REQUIRED when method is POST.

While the server needs to support it, I believe bulkID sho= uld always be optional to the client.=C2=A0

I prop= ose that the paragraph should read:

bulkId  The transient ident=
ifier of a newly created resource whose value is
         unique within a bulk request and created by the client.  The
         bulkId serves as a surrogate resource URI enabling clients to
         uniquely identify newly created resources and reference them
         across operations within a bulk request. When referenced in a=C2=A0
         subsequent operatio=
n, the URI takes the form "bulkId:<value>=E2=80=9D=C2=A0
         where &=
quot;<value>" is the value =
of the bulkId attribute. MAY be=C2=A0<=
/span>
<=
span style=3D"font-size:1em">         provided when method is POST.

=C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0
=
Phil

@independentid
<= a href=3D"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.c= om


_______________________________________________
scim mailing list
scim@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/scim




--
Ian Glazer
Senio= r Director, Identity
+1 202 255 3166
--e89a8ffbae41f032e0050ee8d174-- From nobody Thu Feb 12 11:23:10 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF2D11A1A36 for ; Thu, 12 Feb 2015 11:23:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2dT4vfYVoaZ8 for ; Thu, 12 Feb 2015 11:23:04 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0109.outbound.protection.outlook.com [65.55.169.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4153B1A1A34 for ; Thu, 12 Feb 2015 11:23:04 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB390.namprd04.prod.outlook.com (10.141.60.147) with Microsoft SMTP Server (TLS) id 15.1.87.18; Thu, 12 Feb 2015 19:23:01 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) with mapi id 15.01.0087.013; Thu, 12 Feb 2015 19:23:01 +0000 From: Kelly Grizzle To: Ian Glazer , Phil Hunt Thread-Topic: [scim] Bulk Request - BulkId optionality Thread-Index: AQHQRvVvZZwRzmQDSk+CIocXAqbDLpztYA0AgAAEoVA= Date: Thu, 12 Feb 2015 19:23:01 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [97.79.140.10] authentication-results: salesforce.com; dkim=none (message not signed) header.d=none; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB390; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB390; x-forefront-prvs: 0485417665 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(377454003)(24454002)(106116001)(19625215002)(74316001)(19609705001)(33656002)(66066001)(62966003)(77156002)(19300405004)(15975445007)(102836002)(2656002)(87936001)(99286002)(2900100001)(76176999)(2950100001)(50986999)(54356999)(86362001)(92566002)(40100003)(46102003)(122556002)(19580405001)(76576001)(19580395003)(19617315012)(16236675004)(16601075003)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB390; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; Content-Type: multipart/alternative; boundary="_000_BN1PR04MB392953BBE04A9DF0E4A74D9E2220BN1PR04MB392namprd_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Feb 2015 19:23:01.5797 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB390 Archived-At: Cc: SCIM WG Subject: Re: [scim] Bulk Request - BulkId optionality X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Feb 2015 19:23:07 -0000 --_000_BN1PR04MB392953BBE04A9DF0E4A74D9E2220BN1PR04MB392namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 KzENCg0KRnJvbTogc2NpbSBbbWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mIElhbiBHbGF6ZXINClNlbnQ6IFRodXJzZGF5LCBGZWJydWFyeSAxMiwgMjAxNSAxOjA2IFBN DQpUbzogUGhpbCBIdW50DQpDYzogU0NJTSBXRw0KU3ViamVjdDogUmU6IFtzY2ltXSBCdWxrIFJl cXVlc3QgLSBCdWxrSWQgb3B0aW9uYWxpdHkNCg0KVGhhdCBsYW5ndWFnZSBsb29rcyBnb29kIHRv IG1lDQoNCk9uIFRodSwgRmViIDEyLCAyMDE1IGF0IDE6NTQgUE0sIFBoaWwgSHVudCA8cGhpbC5o dW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPj4gd3JvdGU6DQpBcyB3 ZeKAmXZlIHJlLW9wZW5lZCBjYWxscyBmb3IgY29tbWVudHMsIEkgdGhvdWdodCBJIHdvdWxkIHBv c3QgdGhpc+KApg0KDQpJbiB0aGUgc2VjdGlvbiBvbiBCdWxrIHJlcXVlc3RzLCBJIHNlZSBidWxr SWQgaXMgUkVRVUlSRUQgd2hlbiBtZXRob2QgaXMgUE9TVC4NCg0KDQpidWxrSWQgIFRoZSB0cmFu c2llbnQgaWRlbnRpZmllciBvZiBhIG5ld2x5IGNyZWF0ZWQgcmVzb3VyY2UsDQoNCiAgICAgICAg IHVuaXF1ZSB3aXRoaW4gYSBidWxrIHJlcXVlc3QgYW5kIGNyZWF0ZWQgYnkgdGhlIGNsaWVudC4g IFRoZQ0KDQogICAgICAgICBidWxrSWQgc2VydmVzIGFzIGEgc3Vycm9nYXRlIHJlc291cmNlIGlk IGVuYWJsaW5nIGNsaWVudHMgdG8NCg0KICAgICAgICAgdW5pcXVlbHkgaWRlbnRpZnkgbmV3bHkg Y3JlYXRlZCByZXNvdXJjZXMgaW4gdGhlIFJlc3BvbnNlIGFuZA0KDQogICAgICAgICBjcm9zcyBy ZWZlcmVuY2UgbmV3IHJlc291cmNlcyBpbiBhbmQgYWNyb3NzIG9wZXJhdGlvbnMgd2l0aGluIGEN Cg0KICAgICAgICAgYnVsayByZXF1ZXN0LiAgUkVRVUlSRUQgd2hlbiBtZXRob2QgaXMgUE9TVC4N Cg0KV2hpbGUgdGhlIHNlcnZlciBuZWVkcyB0byBzdXBwb3J0IGl0LCBJIGJlbGlldmUgYnVsa0lE IHNob3VsZCBhbHdheXMgYmUgb3B0aW9uYWwgdG8gdGhlIGNsaWVudC4NCg0KSSBwcm9wb3NlIHRo YXQgdGhlIHBhcmFncmFwaCBzaG91bGQgcmVhZDoNCg0KDQpidWxrSWQgIFRoZSB0cmFuc2llbnQg aWRlbnRpZmllciBvZiBhIG5ld2x5IGNyZWF0ZWQgcmVzb3VyY2Ugd2hvc2UgdmFsdWUgaXMNCg0K ICAgICAgICAgdW5pcXVlIHdpdGhpbiBhIGJ1bGsgcmVxdWVzdCBhbmQgY3JlYXRlZCBieSB0aGUg Y2xpZW50LiAgVGhlDQoNCiAgICAgICAgIGJ1bGtJZCBzZXJ2ZXMgYXMgYSBzdXJyb2dhdGUgcmVz b3VyY2UgVVJJIGVuYWJsaW5nIGNsaWVudHMgdG8NCg0KICAgICAgICAgdW5pcXVlbHkgaWRlbnRp ZnkgbmV3bHkgY3JlYXRlZCByZXNvdXJjZXMgYW5kIHJlZmVyZW5jZSB0aGVtDQoNCiAgICAgICAg IGFjcm9zcyBvcGVyYXRpb25zIHdpdGhpbiBhIGJ1bGsgcmVxdWVzdC4gV2hlbiByZWZlcmVuY2Vk IGluIGENCg0KICAgICAgICAgc3Vic2VxdWVudCBvcGVyYXRpb24sIHRoZSBVUkkgdGFrZXMgdGhl IGZvcm0gImJ1bGtJZDo8dmFsdWU+4oCdDQoNCiAgICAgICAgIHdoZXJlICI8dmFsdWU+IiBpcyB0 aGUgdmFsdWUgb2YgdGhlIGJ1bGtJZCBhdHRyaWJ1dGUuIE1BWSBiZQ0KDQogICAgICAgICBwcm92 aWRlZCB3aGVuIG1ldGhvZCBpcyBQT1NULg0KDQoNClBoaWwNCg0KQGluZGVwZW5kZW50aWQNCnd3 dy5pbmRlcGVuZGVudGlkLmNvbTxodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tPg0KcGhpbC5o dW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPg0KDQoNCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzY2ltIG1haWxpbmcgbGlz dA0Kc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vc2NpbQ0KDQoNCg0KLS0NCklhbiBHbGF6ZXINClNlbmlvciBE aXJlY3RvciwgSWRlbnRpdHkNCisxIDIwMiAyNTUgMzE2Ng0KQGlnbGF6ZXI8aHR0cHM6Ly90d2l0 dGVyLmNvbS9pZ2xhemVyPg0K --_000_BN1PR04MB392953BBE04A9DF0E4A74D9E2220BN1PR04MB392namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJ cGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtG b2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5h bWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OkNvbnNvbGFz O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQou TXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjgu NWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRT ZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1z byA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIg Lz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVs YXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8 L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJF Ti1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlv bjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPiYjNDM7MTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij4gc2NpbSBbbWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBP ZiA8L2I+SWFuIEdsYXplcjxicj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2RheSwgRmVicnVhcnkgMTIs IDIwMTUgMTowNiBQTTxicj4NCjxiPlRvOjwvYj4gUGhpbCBIdW50PGJyPg0KPGI+Q2M6PC9iPiBT Q0lNIFdHPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc2NpbV0gQnVsayBSZXF1ZXN0IC0gQnVs a0lkIG9wdGlvbmFsaXR5PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhh dCBsYW5ndWFnZSBsb29rcyBnb29kIHRvIG1lPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5PbiBUaHUsIEZlYiAxMiwgMjAxNSBhdCAxOjU0IFBNLCBQaGlsIEh1 bnQgJmx0OzxhIGhyZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSIgdGFyZ2V0PSJfYmxh bmsiPnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QXMgd2XigJl2ZSByZS1vcGVuZWQgY2FsbHMgZm9y IGNvbW1lbnRzLCBJIHRob3VnaHQgSSB3b3VsZCBwb3N0IHRoaXPigKY8bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkluIHRoZSBzZWN0aW9uIG9uIEJ1bGsgcmVx dWVzdHMsIEkgc2VlIGJ1bGtJZCBpcyBSRVFVSVJFRCB3aGVuIG1ldGhvZCBpcyBQT1NULjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 Ij5idWxrSWQmbmJzcDsgVGhlIHRyYW5zaWVudCBpZGVudGlmaWVyIG9mIGEgbmV3bHkgY3JlYXRl ZCByZXNvdXJjZSw8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB1bmlxdWUgd2l0aGluIGEgYnVsayByZXF1ZXN0IGFuZCBjcmVhdGVkIGJ5IHRoZSBj bGllbnQuJm5ic3A7IFRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IGJ1bGtJZCBzZXJ2ZXMgYXMgYSBzdXJyb2dhdGUgcmVzb3VyY2UgaWQgZW5h YmxpbmcgY2xpZW50cyB0bzxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHVuaXF1ZWx5IGlkZW50aWZ5IG5ld2x5IGNyZWF0ZWQgcmVzb3VyY2VzIGlu IHRoZSBSZXNwb25zZSBhbmQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBjcm9zcyByZWZlcmVuY2UgbmV3IHJlc291cmNlcyBpbiBhbmQgYWNyb3Nz IG9wZXJhdGlvbnMgd2l0aGluIGE8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBidWxrIHJlcXVlc3QuJm5ic3A7IFJFUVVJUkVEIHdoZW4gbWV0aG9k IGlzIFBPU1QuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XaGlsZSB0aGUgc2VydmVyIG5lZWRzIHRvIHN1cHBvcnQg aXQsIEkgYmVsaWV2ZSBidWxrSUQgc2hvdWxkIGFsd2F5cyBiZSBvcHRpb25hbCB0byB0aGUgY2xp ZW50LiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5JIHByb3Bvc2UgdGhhdCB0aGUgcGFyYWdyYXBoIHNob3VsZCByZWFkOjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0Ij5idWxrSWQmbmJzcDsgVGhlIHRyYW5zaWVudCBpZGVudGlmaWVyIG9mIGEgbmV3bHkgY3Jl YXRlZCByZXNvdXJjZSB3aG9zZSB2YWx1ZSBpczxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHBy ZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHVuaXF1ZSB3aXRoaW4gYSBidWxrIHJlcXVlc3QgYW5k IGNyZWF0ZWQgYnkgdGhlIGNsaWVudC4mbmJzcDsgVGhlPG86cD48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYnVsa0lkIHNlcnZlcyBhcyBhIHN1cnJvZ2F0 ZSByZXNvdXJjZSBVUkkgZW5hYmxpbmcgY2xpZW50cyB0bzxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHVuaXF1ZWx5IGlkZW50aWZ5IG5ld2x5IGNy ZWF0ZWQgcmVzb3VyY2VzIGFuZCByZWZlcmVuY2UgdGhlbTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGFjcm9zcyBvcGVyYXRpb25zIHdpdGhpbiBh IGJ1bGsgcmVxdWVzdC4gV2hlbiByZWZlcmVuY2VkIGluIGEmbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHN1YnNlcXVlbnQgb3BlcmF0aW9uLCB0aGUgVVJJIHRha2VzIHRoZSBmb3JtICZxdW90 O2J1bGtJZDombHQ7dmFsdWUmZ3Q74oCdJm5ic3A7PG86cD48L286cD48L3ByZT4NCjxwcmU+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB3aGVyZSAmcXVvdDsmbHQ7dmFsdWUmZ3Q7JnF1b3Q7IGlzIHRo ZSB2YWx1ZSBvZiB0aGUgYnVsa0lkIGF0dHJpYnV0ZS4gTUFZIGJlJm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgcHJvdmlkZWQgd2hlbiBt ZXRob2QgaXMgUE9TVC4gPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOmJsYWNrIj5QaGlsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpi bGFjayI+QGluZGVwZW5kZW50aWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OmJsYWNrIj48YSBocmVmPSJodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tIiB0YXJnZXQ9Il9i bGFuayI+d3d3LmluZGVwZW5kZW50aWQuY29tPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Ymxh Y2siPjxhIGhyZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSIgdGFyZ2V0PSJfYmxhbmsi PnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBw dCI+PGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188 YnI+DQpzY2ltIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpzY2ltQGlldGYub3Jn Ij5zY2ltQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vc2NpbSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc2NpbTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyIGNsZWFyPSJhbGwiPg0KPG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0tIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SWFuIEdsYXplcjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U2VuaW9yIERpcmVjdG9yLCBJZGVudGl0 eTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+JiM0 MzsxIDIwMiAyNTUgMzE2NjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGEgaHJlZj0iaHR0cHM6Ly90d2l0dGVyLmNvbS9pZ2xhemVyIiB0YXJnZXQ9 Il9ibGFuayI+QGlnbGF6ZXI8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BN1PR04MB392953BBE04A9DF0E4A74D9E2220BN1PR04MB392namprd_-- From nobody Thu Feb 12 12:46:14 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D41251A0250 for ; Thu, 12 Feb 2015 12:46:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qY3MVf91BRh6 for ; Thu, 12 Feb 2015 12:46:09 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4768A1A3B9B for ; Thu, 12 Feb 2015 12:46:09 -0800 (PST) Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1CKk8v8024902 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 12 Feb 2015 20:46:08 GMT Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by aserv0022.oracle.com (8.13.8/8.13.8) with ESMTP id t1CKk8DU019034 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 12 Feb 2015 20:46:08 GMT Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1CKk8Z0021661 for ; Thu, 12 Feb 2015 20:46:08 GMT MIME-Version: 1.0 Message-ID: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> Date: Thu, 12 Feb 2015 12:46:07 -0800 (PST) From: Michael Frost Sender: Michael Frost To: scim@ietf.org X-Priority: 3 X-Mailer: Oracle Beehive Extensions for Outlook 2.0.1.8.2 (807160) [OL 12.0.6691.5000 (x86)] Content-Type: multipart/alternative; boundary="__1423773968094299512abhmp0002.oracle.com" X-Source-IP: aserv0022.oracle.com [141.146.126.234] Archived-At: Subject: [scim] SCIM schema IDs and JSON representation X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Feb 2015 20:46:12 -0000 --__1423773968094299512abhmp0002.oracle.com Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable The following is the list of schema IDs present in the api/schema docs: urn:ietf:params:scim:schemas:core:2.0:User* urn:ietf:params:scim:schemas:extension:enterprise:2.0:User* urn:ietf:params:scim:schemas:core:2.0:Group* =20 urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig urn:ietf:params:scim:schemas:core:2.0:ResourceType urn:ietf:params:scim:schemas:core:2.0:Schema =20 =20 urn:ietf:params:scim:api:messages:2.0:ListResponse urn:ietf:params:scim:api:messages:2.0:SearchRequest urn:ietf:params:scim:api:messages:2.0:PatchOp urn:ietf:params:scim:api:messages:2.0:Error urn:ietf:params:scim:api:messages:2.0:BulkRequest urn:ietf:params:scim:api:messages:2.0:BulkResponse =20 We only provide JSON representation (of the schema itself) for the first th= ree (marked with *). Shouldn't we provide JSON representation for all sche= mas we reference? It would be much more definitive and useful to have a JS= ON representation of all of these in a single place (appendix perhaps), tha= n scattered text descriptions throughout the docs. =20 Message schemas in general appear somewhat problematic because they require= complex within complex, which is not normally allowed. The other problem = is with urn:ietf:params:scim:api:messages:2.0:PatchOp. Given the current t= ext description, this schema cannot be represented in JSON using our curren= t rules. The "value" attribute is union of every possible attribute type, = which is not allowed. Therefore it is impossible to define a schema to dri= ve parsing and validation as can be done with all other requests/responses.= It seems kind of wrong to have a URI reference a schema that cannot legit= imately be defined with our own rules. =20 If these schemas are all standard, then is seems we should provide the defi= nitive JSON representation for each one which alleviates ambiguities, misin= terpretations, and compatibility issues that can arise from different under= standings of the text descriptions. =20 -mrf =20 =20 =20 =20 =20 =20 =20 =20 --__1423773968094299512abhmp0002.oracle.com Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: quoted-printable

urn:ietf:params:scim:schemas:core:2.0:User*

= 
urn:ietf:params:scim:schemas:extension:enterprise:2.0:User*<=
/o:p>
urn:ietf:params:scim:schemas:core:2.0:Group*
 
urn:=
ietf:params:scim:schemas:core:2.0:ServiceProviderConfig
urn:ietf:params:scim:schemas:core:2.0:ResourceType=

urn:ietf:params:scim:schemas:core:2.0:Schema
 
 
urn:=
ietf:params:scim:api:messages:2.0:ListResponse
urn:ietf:params:scim:api:messages:2.0:SearchRequest<=
/pre>
urn:ietf:params:scim:api:messages:2.0:PatchOp
urn:ietf:params:scim:api:messages:2.0:Error
urn:ietf:params:scim:api:messages:2.0:BulkRequest=

urn:ietf:params:scim:api:messages:2.0:BulkResp=
onse
 
We only provide JSON representation (of the schema itself) for the first=
 three (marked with *).  Shouldn’t we provide JSON representatio=
n for all schemas we reference?  It would be much more definitive and =
useful to have a JSON representation of all of these in a single place (app=
endix perhaps), than scattered text descriptions throughout the docs.<=
/o:p>
 
Message sche=
mas in general appear somewhat problematic because they require complex wit=
hin complex, which is not normally allowed.  The other problem is with=
 urn:ietf:params:scim:api:messages:2.0:PatchOp.  Given the current tex=
t description, this schema cannot be represented in JSON using our current =
rules.  The “value” attribute is union of every possible a=
ttribute type, which is not allowed.  Therefore it is impossible to de=
fine a schema to drive parsing and validation as can be done with all other=
 requests/responses.  It seems kind of wrong to have a URI reference a=
 schema that cannot legitimately be defined with our own rules.<=
/span>
 
If these sche=
mas are all standard, then is seems we should provide the definitive JSON r=
epresentation for each one which alleviates ambiguities, misinterpretations=
, and compatibility issues that can arise from different understandings of =
the text descriptions.
 
-mrf
 
 
 =

 
&=
nbsp;
 
=
 
 

--__1423773968094299512abhmp0002.oracle.com--


From nobody Thu Feb 12 12:53:52 2015
Return-Path: 
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2CEE1A6F20 for ; Thu, 12 Feb 2015 12:53:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.21
X-Spam-Level: 
X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pwwnpop0ucUu for ; Thu, 12 Feb 2015 12:53:48 -0800 (PST)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D03F01A1F1D for ; Thu, 12 Feb 2015 12:53:47 -0800 (PST)
Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1CKrjgA029020 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 12 Feb 2015 20:53:46 GMT
Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1CKriuE006122 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 12 Feb 2015 20:53:45 GMT
Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1CKriMY006105 for ; Thu, 12 Feb 2015 20:53:44 GMT
MIME-Version: 1.0
Message-ID: <515fdd10-1dbc-4ca6-ae9d-2095729dd7cf@default>
Date: Thu, 12 Feb 2015 12:53:43 -0800 (PST)
From: Michael Frost 
Sender: Michael Frost 
To: scim@ietf.org
References: 
In-Reply-To: 
X-Priority: 3
X-Mailer: Oracle Beehive Extensions for Outlook 2.0.1.8.2  (807160) [OL 12.0.6691.5000 (x86)]
Content-Type: multipart/alternative; boundary="__1423774424085299996abhmp0002.oracle.com"
X-Source-IP: ucsinet21.oracle.com [156.151.31.93]
Archived-At: 
Subject: Re: [scim] group sample not valid for provided schema
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Simple Cloud Identity Management BOF 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 12 Feb 2015 20:53:51 -0000

--__1423774424085299996abhmp0002.oracle.com
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Since the barn door is open, shouldn't we fix this one?

=20

-mrf

=20

From: Michael Frost=20
Sent: Thursday, January 22, 2015 7:41 PM
To: scim@ietf.org
Cc: idaas_dev_ww_grp
Subject: [scim] group sample not valid for provided schema

=20

It appears that the schema representation for groups (page 53-54) is missin=
g the "display" sub-attribute definition from the "members" attribute.  Thi=
s makes the sample group json in section 8.4 (page 31) invalid.  Also the s=
ample in section 8.4 should probably include the optional "type" sub-attrib=
ute in "members".

=20

=20

=20

Here is the sample group from page 32

=20

{

  "schemas": [

    "urn:ietf:params:scim:schemas:core:2.0:Group"

  ],

  "id": "e9e30dba-f08f-4109-8486-d5c6a331660a",

  "displayName": "Tour Guides",

  "members": [

    {

      "value": "2819c223-7f76-453a-919d-413861904646",

      "$ref": "https://example.com/v2/Users/2819c223-7f76-453a-919d-4138619=
04646",

      "display": "Babs Jensen"

    },

    {

      "value": "902c246b-6245-4190-8e05-00816be7344a",

      "$ref": "https://example.com/v2/Users/902c246b-6245-4190-8e05-00816be=
7344a",

      "display": "Mandy Pepperidge"

    }

  ],

  "meta": {

    "resourceType": "Group",

    "created": "2010-01-23T04:56:22Z",

    "lastModified": "2011-05-13T04:42:34Z",

    "version": "W/\"3694e05e9dff592\"",

    "location": "https://example.com/v2/Groups/e9e30dba-f08f-4109-8486-d5c6=
a331660a"

  }

}

=20

=20

Here is the schema for members, defined sub-attributes are value, $ref, and=
 type

=20

{

  "name": "members",

  "type": "complex",

  "multiValued": true,

  "description": "A list of members of the Group.",

  "required": false,

  "caseExact": false,

  "subAttributes": [

    {

      "name": "value",

      "type": "string",

      "multiValued": false,

      "description": "Identifier of the member of this Group.",

      "required": false,

      "caseExact": false,

      "mutability": "immutable",

      "returned": "default",

      "uniqueness": "none"

    },

    {

      "name": "$ref",

      "type": "string",

      "multiValued": false,

      "description": "The URI of the corresponding to the member resource o=
f this Group.",

      "required": false,

      "caseExact": false,

      "mutability": "immutable",

      "returned": "default",

      "uniqueness": "none"

    },

    {

      "name": "type",

      "type": "string",

      "multiValued": false,

      "description": "A label indicating the type of resource; e.g., 'User'=
 or 'Group'.",

      "required": false,

      "caseExact": false,

      "canonicalValues": [

        "User",

        "Group"

      ],

      "mutability": "immutable",

      "returned": "default",

      "uniqueness": "none"

    }

  ],

  "mutability": "readWrite",

  "returned": "default",

  "uniqueness": "none"

}

=20

-mrf

--__1423774424085299996abhmp0002.oracle.com
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable


Since the barn door is open, shouldn’t we fix this one?=

 
-mrf
 
From:<=
/b> Mich=
ael Frost 
Sent: Thursday, January 22, 2015 7:41 PM
To:=
 scim@ietf.org
Cc: idaas_dev_ww_grp
Subject: [scim] gro=
up sample not valid for provided schema
 
It appears that the schema representation for groups (page=
 53-54) is missing the “display” sub-attribute definition from =
the “members” attribute.  This makes the sample group json=
 in section 8.4 (page 31) invalid.  Also the sample in section 8.4 sho=
uld probably include the optional “type” sub-attribute in ̶=
0;members”.
 
 
 
Here is the sample group from page 32
&nb=
sp;
{
&nb=
sp; "schemas": [
    "urn:ietf:params:scim:sch=
emas:core:2.0:Group"
  ],
  "id": "e9e30dba-f08=
f-4109-8486-d5c6a331660a",
  "displayName": "Tour Gu=
ides",
  "members": [
    {
   =
   "value": "2819c223-7f76-453a-919d-413861904646&=
quot;,
      "$ref": "https://exam=
ple.com/v2/Users/2819c223-7f76-453a-919d-413861904646",=

  =
    "display": "Babs Jensen"<=
/span>
  &=
nbsp; },
    {
      "value":=
 "902c246b-6245-4190-8e05-00816be7344a",
    &n=
bsp; "$ref": "https://example.com/v2/Users/902c246b-6245-=
4190-8e05-00816be7344a",
      "displa=
y": "Mandy Pepperidge"
    }<=
/p>
  ],=

  "=
;meta": {
    "resourceType": "Group"=
,
=
    "created": "2010-01-23T04:56:22Z",
&nb=
sp;   "lastModified": "2011-05-13T04:42:34Z",=

&=
nbsp;   "version": "W/\"3694e05e9dff592\"=
;",
    "location": "https://example.c=
om/v2/Groups/e9e30dba-f08f-4109-8486-d5c6a331660a"
  }
}
&nb=
sp;
 
 
{
  "name": "members",<=
/p>
  "type&qu=
ot;: "complex",
  "multiValued": true,<=
/span>
  "=
description": "A list of members of the Group.",<=
/span>
  "=
required": false,
  "caseExact": false,=

  "subAtt=
ributes": [
      "name=
": "value",
      "type": =
"string",
      "multiValued": f=
alse,
      "description": "Identifie=
r of the member of this Group.",
      "re=
quired": false,
      "caseExact": fa=
lse,
      "mutability": "immutable&q=
uot;,
      "returned": "default"=
;,
      "uniqueness": "none"
=
&nbs=
p;   },
    {
      "nam=
e": "$ref",
      "type": =
"string",
      "multiValued": f=
alse,
      "description": "The URI o=
f the corresponding to the member resource of this Group.",=

  =
    "required": false,
     =
; "caseExact": false,
      "mutabili=
ty": "immutable",
      "returne=
d": "default",
      "uniqueness=
": "none"
    },
    {=

  =
    "name": "type",
   &nbs=
p;  "type": "string",
     =
 "multiValued": false,
      "descrip=
tion": "A label indicating the type of resource; e.g., 'User' or =
'Group'.",
      "required": false,
&nb=
sp;     "caseExact": false,=

   &=
nbsp;  "canonicalValues": [
     &nbs=
p;  "User",
        "=
Group"
      ],
      =
"mutability": "immutable",
     =
 "returned": "default",
      =
"uniqueness": "none"
    }
  ],<=
/o:p>
  =
"mutability": "readWrite",
  "returned": &=
quot;default",
  "uniqueness": "none"
}
 =

-mrf

--__1423774424085299996abhmp0002.oracle.com--


From nobody Thu Feb 12 12:58:24 2015
Return-Path: 
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B0801A82E2 for ; Thu, 12 Feb 2015 12:58:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.209
X-Spam-Level: 
X-Spam-Status: No, score=-4.209 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AyrZ3fvn7W5l for ; Thu, 12 Feb 2015 12:58:21 -0800 (PST)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D42EB1A026E for ; Thu, 12 Feb 2015 12:58:21 -0800 (PST)
Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1CKwJah007460 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 12 Feb 2015 20:58:20 GMT
Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by aserv0022.oracle.com (8.13.8/8.13.8) with ESMTP id t1CKwISI002130 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 12 Feb 2015 20:58:19 GMT
Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1CKwHQn016358 for ; Thu, 12 Feb 2015 20:58:18 GMT
Received: from [192.168.1.27] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 12 Feb 2015 12:58:17 -0800
Content-Type: multipart/alternative; boundary=Apple-Mail-D9516CD3-1FFA-4F72-8E57-E140C607F3F7
Mime-Version: 1.0 (1.0)
From: Phil Hunt 
X-Mailer: iPhone Mail (12B466)
In-Reply-To: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default>
Date: Thu, 12 Feb 2015 12:58:15 -0800
Content-Transfer-Encoding: 7bit
Message-Id: <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com>
References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default>
To: Michael Frost 
X-Source-IP: aserv0022.oracle.com [141.146.126.234]
Archived-At: 
Cc: "scim@ietf.org" 
Subject: Re: [scim] SCIM schema IDs and JSON representation
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Simple Cloud Identity Management BOF 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 12 Feb 2015 20:58:23 -0000

--Apple-Mail-D9516CD3-1FFA-4F72-8E57-E140C607F3F7
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Michael,

Can you provide examples?

The schema in the API has to extend the registry define in core.   As editor=
 I think it would be even more confusing to mix data schema and request sche=
ma in a single document. It also becomes problematic when specs cross refere=
nce each other. Instead the document layout is such that API builds on core s=
chema.=20

The format in PATCH comes from the JSON Patch RFC.=20

Phil

> On Feb 12, 2015, at 12:46, Michael Frost  wrote:=

>=20
> .0:ResourceType
> urn:ietf:params:scim:schemas:core:2

--Apple-Mail-D9516CD3-1FFA-4F72-8E57-E140C607F3F7
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable


Michael,

Can y=
ou provide examples?

The schema in the API has to e=
xtend the registry define in core.   As editor I think it would be even=
 more confusing to mix data schema and request schema in a single document. I=
t also becomes problematic when specs cross reference each other. Instead th=
e document layout is such that API builds on core schema. 
The format in PATCH comes from the JSON Patch RFC. 
<=
div>
Phil

On Feb 12, 2015, at 12:46, Michael Frost <michael.frost@oracle.com> wro= te:

.0:ResourceType
urn:ietf:params:scim:schemas:core:2
= --Apple-Mail-D9516CD3-1FFA-4F72-8E57-E140C607F3F7-- From nobody Thu Feb 12 16:44:58 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3271A1A03A3 for ; Thu, 12 Feb 2015 16:44:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EIBqBifXZai9 for ; Thu, 12 Feb 2015 16:44:53 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3FB01A0242 for ; Thu, 12 Feb 2015 16:44:52 -0800 (PST) Received: from acsinet21.oracle.com (acsinet21.oracle.com [141.146.126.237]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1D0ipqV022221 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Fri, 13 Feb 2015 00:44:52 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by acsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1D0ikTQ015724 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 13 Feb 2015 00:44:50 GMT Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1D0ikJN026784 for ; Fri, 13 Feb 2015 00:44:46 GMT MIME-Version: 1.0 Message-ID: <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> Date: Thu, 12 Feb 2015 16:44:44 -0800 (PST) From: Michael Frost Sender: Michael Frost To: Phil Hunt References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> In-Reply-To: <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> X-Priority: 3 X-Mailer: Oracle Beehive Extensions for Outlook 2.0.1.8.2 (807160) [OL 12.0.6691.5000 (x86)] Content-Type: multipart/alternative; boundary="__1423788284706307144abhmp0002.oracle.com" X-Source-IP: acsinet21.oracle.com [141.146.126.237] Archived-At: Cc: scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2015 00:44:56 -0000 --__1423788284706307144abhmp0002.oracle.com Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Phil,=20 =C2=A0 Not sure what you mean by examples.=C2=A0 My concern is that in the schema = doc, section 8.7 provides schema representation for core user/group and ent= erprise user.=C2=A0 What about all the other schemas we reference?=C2=A0 We= should provide schema representation for every schema defined in the spec.= =C2=A0 Everyone implementing this spec will need them.=C2=A0 Why provide ju= st three and leave the rest up to guess work?=C2=A0 Every implementation ne= eds to do validation, every validation needs a schema to validate against.= =C2=A0 So my concern is twofold.=C2=A0 First, we reference a bunch of schem= as that everyone needs, but we don=E2=80=99t provide them.=C2=A0 Second, so= me of the schemas we reference (such as patchOp) cannot be represented in J= SON using our own definitions. =C2=A0 I=E2=80=99m certainly OK with an appendix in the api doc for message schema= s and an appendix in the schema doc for all of the entity schemas.=C2=A0 My= point is all these schemas should exist.=C2=A0 We reference them, we descr= ibe them, but we only provide three of them.=C2=A0 It just seems wrong to m= e (perhaps my own shortcoming) but we=E2=80=99re asking people to implement= SCIM patch, using a SCIM schema defined request, that we do not provide, a= nd cannot define using rules we set forth in section 7 of the schema doc. =C2=A0 So bottom line, all I=E2=80=99m requesting is the JSON representation of th= e SCIM schemas we reference. =C2=A0 This is a SCIM schema reference, =E2=80=9C urn:ietf:params:scim:api:message= s:2.0:PatchOp=E2=80=9C, I feel we should provide the JSON representation fo= r it. =C2=A0If we can=E2=80=99t do it, nobody implementing the spec can eit= her.=C2=A0 All of the schemas we reference should be provided using our own= definitions set down in section 7 of the schema rfc (or enhanced in the ap= i doc, using section 7 as a base).=C2=A0 Frankly, I=E2=80=99m dreading the = outcome of all this because I=E2=80=99ve already spent a couple of months i= mplementing patch in its current form with over 150 unit tests to confirm i= t does what I think the spec requires.=C2=A0 But several of my peers have c= ome to me and asked for these schema definitions (in JSON) and a couple hav= e pointed out that the patch request schema, =E2=80=9C urn:ietf:params:scim= :api:messages:2.0:PatchOp=E2=80=9C, cannot be represented using section 7 r= ules and that we cannot do upfront validation on patch requests the way we = do all other SCIM requests.=C2=A0 And it=E2=80=99s true, we cannot do an up= front validation of patch after it=E2=80=99s parsed the way we can all othe= r requests.=C2=A0 Simple attribute validation is impossible because =E2=80= =9Cvalue=E2=80=9D depends on the target of =E2=80=9Cpath=E2=80=9D, and ther= efore =E2=80=9Cvalue=E2=80=9D cannot be defined in a JSON schema using sect= ion 7 of the schema doc. =C2=A0 Even if we can=E2=80=99t fix patch, for whatever reason, we should provide = the rest of the schemas, represented in JSON format, for both docs. =C2=A0 -mrf =C2=A0 From: Phil Hunt=20 Sent: Thursday, February 12, 2015 12:58 PM To: Michael Frost Cc: scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation =C2=A0 Michael, =C2=A0 Can you provide examples? =C2=A0 The schema in the API has to extend the registry define in core. =C2=A0 As = editor I think it would be even more confusing to mix data schema and reque= st schema in a single document. It also becomes problematic when specs cros= s reference each other. Instead the document layout is such that API builds= on core schema.=C2=A0 =C2=A0 The format in PATCH comes from the JSON Patch RFC.=C2=A0 Phil On Feb 12, 2015, at 12:46, Michael Frost wrote: .0:ResourceType urn:ietf:params:scim:schemas:core:2 --__1423788284706307144abhmp0002.oracle.com Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Hi Phil, =

 <= /p>

Not sure what you mean by examples.=C2=A0 My= concern is that in the schema doc, section 8.7 provides schema representat= ion for core user/group and enterprise user.=C2=A0 What about all the other= schemas we reference?=C2=A0 We should provide schema representation for ev= ery schema defined in the spec.=C2=A0 Everyone implementing this spec will = need them.=C2=A0 Why provide just three and leave the rest up to guess work= ?=C2=A0 Every implementation needs to do validation, every validation needs= a schema to validate against.=C2=A0 So my concern is twofold.=C2=A0 First,= we reference a bunch of schemas that everyone needs, but we don=E2=80=99t = provide them.=C2=A0 Second, some of the schemas we reference (such as patch= Op) cannot be represented in JSON using our own definitions.

 

I=E2=80=99m certainly OK with an appendix in the api doc fo= r message schemas and an appendix in the schema doc for all of the entity s= chemas.=C2=A0 My point is all these schemas should exist.=C2=A0 We referenc= e them, we describe them, but we only provide three of them.=C2=A0 It just = seems wrong to me (perhaps my own shortcoming) but we=E2=80=99re asking peo= ple to implement SCIM patch, using a SCIM schema defined request, that we d= o not provide, and cannot define using rules we set forth in section 7 of t= he schema doc.

 = 

So bottom l=
ine, all I=E2=80=99m requesting is the JSON representation of the SCIM sche=
mas we reference.
 
This is a SCIM schema reference, =E2=80=9C urn:ietf:params:s=
cim:api:messages:2.0:PatchOp=E2=80=9C, I feel we should provide the JSON re=
presentation for it. =C2=A0If we can=E2=80=99t do it, nobody implementing t=
he spec can either.=C2=A0 All of the schemas we reference should be provide=
d using our own definitions set down in section 7 of the schema rfc (or enh=
anced in the api doc, using section 7 as a base).=C2=A0 Frankly, I=E2=80=99=
m dreading the outcome of all this because I=E2=80=99ve already spent a cou=
ple of months implementing patch in its current form with over 150 unit tes=
ts to confirm it does what I think the spec requires.=C2=A0 But several of =
my peers have come to me and asked for these schema definitions (in JSON) a=
nd a couple have pointed out that the patch request schema, =E2=80=9C urn:i=
etf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be represented us=
ing section 7 rules and that we cannot do upfront validation on patch reque=
sts the way we do all other SCIM requests.=C2=A0 And it=E2=80=99s true, we =
cannot do an upfront validation of patch after it=E2=80=99s parsed the way =
we can all other requests.=C2=A0 Simple attribute validation is impossible =
because =E2=80=9Cvalue=E2=80=9D depends on the target of =E2=80=9Cpath=E2=
=80=9D, and therefore =E2=80=9Cvalue=E2=80=9D cannot be defined in a JSON s=
chema using section 7 of the schema doc.
 
Even if we can=E2=80=99t fix patch, =
for whatever reason, we should provide the rest of the schemas, represented=
 in JSON format, for both docs.
 
-mrf

 

From: Phil Hunt
Sent: Thursday, February 12, 2015 12:58 PM
To:= Michael Frost
Cc: scim@ietf.org
Subject: Re: [scim= ] SCIM schema IDs and JSON representation

=

 

Michael= ,

 

=

Can you provide examples?

 

The schema in the API has to extend the registry define in core.   As= editor I think it would be even more confusing to mix data schema and requ= est schema in a single document. It also becomes problematic when specs cro= ss reference each other. Instead the document layout is such that API build= s on core schema. 

=  

The format in PATCH comes f= rom the JSON Patch RFC. 


Phil


On Feb 12, 2015, at 12:46, Michael Frost <michael.frost@oracle.com> wrote:<= /o:p>

<= pre style=3D'page-break-before:always'>.0:ResourceType
urn:ietf:params:s=
cim:schemas:core:2
--__1423788284706307144abhmp0002.oracle.com-- From nobody Thu Feb 12 17:13:51 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE0C11A03A3 for ; Thu, 12 Feb 2015 17:13:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GoFQhCkv9olO for ; Thu, 12 Feb 2015 17:13:46 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D316D1A026C for ; Thu, 12 Feb 2015 17:13:41 -0800 (PST) Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1D1Der4010445 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Fri, 13 Feb 2015 01:13:40 GMT Received: from userz7022.oracle.com (userz7022.oracle.com [156.151.31.86]) by ucsinet22.oracle.com (8.14.5+Sun/8.14.5) with ESMTP id t1D1DeGZ025292 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 13 Feb 2015 01:13:40 GMT Received: from abhmp0019.oracle.com (abhmp0019.oracle.com [141.146.116.25]) by userz7022.oracle.com (8.14.5+Sun/8.14.4) with ESMTP id t1D1DdRI025258 for ; Fri, 13 Feb 2015 01:13:39 GMT Received: from [192.168.1.9] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 12 Feb 2015 17:13:38 -0800 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) Content-Type: multipart/alternative; boundary="Apple-Mail=_19AC9FC0-331B-4EC9-9289-36198E180EC5" From: Phil Hunt X-Priority: 3 In-Reply-To: <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> Date: Thu, 12 Feb 2015 17:13:36 -0800 Message-Id: <0D1A8725-ED60-4218-8E46-8A4753416A1A@oracle.com> References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> To: Michael Frost X-Mailer: Apple Mail (2.2070.6) X-Source-IP: ucsinet22.oracle.com [156.151.31.94] Archived-At: Cc: scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2015 01:13:50 -0000 --Apple-Mail=_19AC9FC0-331B-4EC9-9289-36198E180EC5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I think what you suggest causes far more confusion and complication = rather than consistency. Yes, both SCIM protocol messages (URIs starting = urn:ietf:params:scim:api:messages:2.0:) and resources carry schema = URIs. They are intended to signal to a parser what to expect. The schemas endpoint you reference in 8.7 is solely to do with the = =E2=80=9Cdata=E2=80=9D model and thus only applies to the core schema. = API messages are not persisted and thus things like mutability and = return ability do not make sense. Finally I would be careful about compliance testing suggesting that a = server 100% matches section 8.7. Sec 8.7 is an example set of schema for = SCIM core resources. It would be quite reasonable for individual servers = to change specific settings like mutability, returned, uniqueness etc. = For compliance, what matters is that the server conforms/enforces the = configuration reported by the /Schemas endpoint. Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 12, 2015, at 4:44 PM, Michael Frost = wrote: >=20 > Hi Phil, > =20 > Not sure what you mean by examples. My concern is that in the schema = doc, section 8.7 provides schema representation for core user/group and = enterprise user. What about all the other schemas we reference? We = should provide schema representation for every schema defined in the = spec. Everyone implementing this spec will need them. Why provide just = three and leave the rest up to guess work? Every implementation needs = to do validation, every validation needs a schema to validate against. = So my concern is twofold. First, we reference a bunch of schemas that = everyone needs, but we don=E2=80=99t provide them. Second, some of the = schemas we reference (such as patchOp) cannot be represented in JSON = using our own definitions. > =20 > I=E2=80=99m certainly OK with an appendix in the api doc for message = schemas and an appendix in the schema doc for all of the entity schemas. = My point is all these schemas should exist. We reference them, we = describe them, but we only provide three of them. It just seems wrong = to me (perhaps my own shortcoming) but we=E2=80=99re asking people to = implement SCIM patch, using a SCIM schema defined request, that we do = not provide, and cannot define using rules we set forth in section 7 of = the schema doc. > =20 > So bottom line, all I=E2=80=99m requesting is the JSON representation = of the SCIM schemas we reference. > =20 > This is a SCIM schema reference, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we should = provide the JSON representation for it. If we can=E2=80=99t do it, = nobody implementing the spec can either. All of the schemas we = reference should be provided using our own definitions set down in = section 7 of the schema rfc (or enhanced in the api doc, using section 7 = as a base). Frankly, I=E2=80=99m dreading the outcome of all this = because I=E2=80=99ve already spent a couple of months implementing patch = in its current form with over 150 unit tests to confirm it does what I = think the spec requires. But several of my peers have come to me and = asked for these schema definitions (in JSON) and a couple have pointed = out that the patch request schema, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be = represented using section 7 rules and that we cannot do upfront = validation on patch requests the way we do all other SCIM requests. And = it=E2=80=99s true, we cannot do an upfront validation of patch after = it=E2=80=99s parsed the way we can all other requests. Simple attribute = validation is impossible because =E2=80=9Cvalue=E2=80=9D depends on the = target of =E2=80=9Cpath=E2=80=9D, and therefore =E2=80=9Cvalue=E2=80=9D = cannot be defined in a JSON schema using section 7 of the schema doc. > =20 > Even if we can=E2=80=99t fix patch, for whatever reason, we should = provide the rest of the schemas, represented in JSON format, for both = docs. > =20 > -mrf > =20 > From: Phil Hunt=20 > Sent: Thursday, February 12, 2015 12:58 PM > To: Michael Frost > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Michael, > =20 > Can you provide examples? > =20 > The schema in the API has to extend the registry define in core. As = editor I think it would be even more confusing to mix data schema and = request schema in a single document. It also becomes problematic when = specs cross reference each other. Instead the document layout is such = that API builds on core schema.=20 > =20 > The format in PATCH comes from the JSON Patch RFC.=20 >=20 > Phil >=20 > On Feb 12, 2015, at 12:46, Michael Frost > wrote: >=20 > .0:ResourceType > urn:ietf:params:scim:schemas:core:2 --Apple-Mail=_19AC9FC0-331B-4EC9-9289-36198E180EC5 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
I think what you suggest causes far more = confusion and complication rather than consistency.

Yes, both SCIM protocol = messages (URIs starting urn:ietf:params:scim:api:messages:2.0:<type>) = and resources carry schema URIs.  They are intended to signal to a = parser what to expect.

The schemas endpoint you reference in 8.7 is solely to do = with the =E2=80=9Cdata=E2=80=9D model and thus only applies to the core = schema.  API messages are not persisted and thus things like = mutability and return ability do not make sense.

Finally I would be careful about = compliance testing suggesting that a server 100% matches section 8.7. = Sec 8.7 is an example set of schema for SCIM core resources. It would be = quite reasonable for individual servers to change specific settings like = mutability, returned, uniqueness etc.  For compliance, what matters = is that the server conforms/enforces the configuration reported by the = /Schemas endpoint.


On Feb 12, 2015, at 4:44 PM, Michael Frost <michael.frost@oracle.com> wrote:

Hi Phil,

 

Not sure what you mean by = examples.  My concern is that in the schema doc, section 8.7 = provides schema representation for core user/group and enterprise = user.  What about all the other schemas we reference?  We = should provide schema representation for every schema defined in the = spec.  Everyone implementing this spec will need them.  Why = provide just three and leave the rest up to guess work?  Every = implementation needs to do validation, every validation needs a schema = to validate against.  So my concern is twofold.  First, we = reference a bunch of schemas that everyone needs, but we don=E2=80=99t = provide them.  Second, some of the schemas we reference (such as = patchOp) cannot be represented in JSON using our own definitions.

 

I=E2=80=99m certainly OK with an = appendix in the api doc for message schemas and an appendix in the = schema doc for all of the entity schemas.  My point is all these = schemas should exist.  We reference them, we describe them, but we = only provide three of them.  It just seems wrong to me (perhaps my = own shortcoming) but we=E2=80=99re asking people to implement SCIM = patch, using a SCIM schema defined request, that we do not provide, and = cannot define using rules we set forth in section 7 of the schema = doc.

 

So bottom line, all I=E2=80=99m =
requesting is the JSON representation of the SCIM schemas we =
reference.
 
This is a SCIM schema reference, =E2=80=9C=
 urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we =
should provide the JSON representation for it.  If we can=E2=80=99t =
do it, nobody implementing the spec can either.  All of the schemas =
we reference should be provided using our own definitions set down in =
section 7 of the schema rfc (or enhanced in the api doc, using section 7 =
as a base).  Frankly, I=E2=80=99m dreading the outcome of all this =
because I=E2=80=99ve already spent a couple of months implementing patch =
in its current form with over 150 unit tests to confirm it does what I =
think the spec requires.  But several of my peers have come to me =
and asked for these schema definitions (in JSON) and a couple have =
pointed out that the patch request schema, =E2=80=9C =
urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be =
represented using section 7 rules and that we cannot do upfront =
validation on patch requests the way we do all other SCIM =
requests.  And it=E2=80=99s true, we cannot do an upfront =
validation of patch after it=E2=80=99s parsed the way we can all other =
requests.  Simple attribute validation is impossible because =
=E2=80=9Cvalue=E2=80=9D depends on the target of =E2=80=9Cpath=E2=80=9D, =
and therefore =E2=80=9Cvalue=E2=80=9D cannot be defined in a JSON schema =
using section 7 of the schema doc.
 
Even if we can=E2=80=99t fix patch, for =
whatever reason, we should provide the rest of the schemas, represented =
in JSON format, for both docs.
 
-mrf
 

From: Phil Hunt
Sent: = Thursday, February 12, 2015 12:58 PM
To: = Michael Frost
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs and = JSON representation

 

Michael,

 

Can you provide examples?

 

The schema in the API has to extend the registry = define in core.   As editor I think it would be even more confusing = to mix data schema and request schema in a single document. It also = becomes problematic when specs cross reference each other. Instead the = document layout is such that API builds on core schema. 

 

The format in PATCH comes from the JSON Patch = RFC. 


Phil


On Feb 12, 2015, at 12:46, = Michael Frost <michael.frost@oracle.com> wrote:

.0:ResourceType
urn:ietf:params:scim:schemas:core:2
<= br class=3D"">
= --Apple-Mail=_19AC9FC0-331B-4EC9-9289-36198E180EC5-- From nobody Fri Feb 13 06:55:51 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E6611A8712 for ; Fri, 13 Feb 2015 06:55:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QLDDCQXi-hm9 for ; Fri, 13 Feb 2015 06:55:45 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0111.outbound.protection.outlook.com [207.46.100.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1D4C1A8718 for ; Fri, 13 Feb 2015 06:55:44 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB390.namprd04.prod.outlook.com (10.141.60.147) with Microsoft SMTP Server (TLS) id 15.1.87.18; Fri, 13 Feb 2015 14:55:42 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) with mapi id 15.01.0087.013; Fri, 13 Feb 2015 14:55:42 +0000 From: Kelly Grizzle To: Michael Frost , Phil Hunt Thread-Topic: [scim] SCIM schema IDs and JSON representation Thread-Index: AQHQRwTzrXmmgBeZPU+N7DzfNJdBHJztfzOAgAA/RwCAAOrX0A== Date: Fri, 13 Feb 2015 14:55:42 +0000 Message-ID: References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> In-Reply-To: <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 0017A3FC0092860017A549 x-originating-ip: [70.114.158.171] authentication-results: oracle.com; dkim=none (message not signed) header.d=none; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB390; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB390; x-forefront-prvs: 0486A0CB86 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(24454002)(74316001)(19625215002)(106116001)(66066001)(19609705001)(19300405004)(77156002)(15975445007)(102836002)(87936001)(2656002)(62966003)(99286002)(2900100001)(76176999)(50986999)(2950100001)(54356999)(86362001)(92566002)(40100003)(46102003)(122556002)(76576001)(19580405001)(19580395003)(33656002)(16236675004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB390; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; Content-Type: multipart/alternative; boundary="_000_BN1PR04MB3920562F2BABB3E5CD03E34E2230BN1PR04MB392namprd_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Feb 2015 14:55:42.4481 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB390 Archived-At: Cc: "scim@ietf.org" Subject: Re: [scim] SCIM schema IDs and JSON representation X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2015 14:55:49 -0000 --_000_BN1PR04MB3920562F2BABB3E5CD03E34E2230BN1PR04MB392namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TWljaGFlbCDigKYgbGV0IG1lIG1ha2Ugc3VyZSBJIHVuZGVyc3RhbmQgd2hhdCB5b3UgYXJlIGxv b2tpbmcgZm9yLiAgWW91IHdvdWxkIGxpa2UgYSBzY2hlbWEgcmVwcmVzZW50YXRpb24gKHN1Y2gg YXMgd2hhdCBpcyBpbmNsdWRlZCBpbiBzZWN0aW9uIDguNykgZm9yIGFsbCByZXNvdXJjZXMgYW5k IG1lc3NhZ2VzLiAgSXMgdGhhdCByaWdodD8NCg0KSWYgc28sIHRoZW4gSSAxMDAlIGFncmVlIHRo YXQgdGhpcyBpcyB1c2VmdWwuICBJbiB0aGUgU0NJTSAxLjAgc3BlYyAoYmFjayB3aGVuIHdlIHN1 cHBvcnRlZCBYTUwgYXMgYSBkYXRhIGZvcm1hdCkgdGhlcmUgd2FzIGFuIFhTRCB0aGF0IGRpZCBl eGFjdGx5IHdoYXQgeW91IGFyZSBsb29raW5nIGZvciDigJMgZGVzY3JpYmVkIGJvdGggcmVzb3Vy Y2VzIGFuZCBtZXNzYWdlcy4gIEkgYWdyZWUgdGhhdCBoYXZpbmcgdGhpcyBjb2RpZmllcyB0aGUg cnVsZXMgYW5kIHJlbW92ZXMgc29tZSBhbWJpZ3VpdHkuICBJIHdvdWxkIGJlIGluIGZhdm9yIG9m IGFkZGluZyBzb21ldGhpbmcgbGlrZSB0aGlzIHRvIHRoZSBTQ0lNIHNwZWMuDQoNClJlZ2FyZGlu ZyB0aGUgUGF0Y2hPcCwgaXMgdGhlIHByb2JsZW0gdGhhdCB0aGUgdmFsdWUgc3ViLWF0dHJpYnV0 ZSBjb3VsZCBiZSBhbnl0aGluZyDigJMgbXVsdGl2YWx1ZWQgY291bGQgYmUgdHJ1ZSBvciBmYWxz ZSwgdGhlcmUgbWF5IG9yIG1heSBub3QgYmUgc3ViLWF0dHJpYnV0ZXMgKGllIOKAkyBpdCBjb3Vs ZCBiZSBjb21wbGV4LCB3aGljaCBpcyBub3QgdGVjaG5pY2FsbHkgc3VwcG9ydGVkKSwgYW5kIHRo ZSB0eXBlIGlzIGRlcGVuZGVudCB1cG9uIHRoZSBhY3R1YWwgYXR0cmlidXRlIHRoYXQgeW91IGFy ZSByZXBsYWNpbmc/ICBXaXRoIHRoaXMgYW1iaWd1aXR5IHRoZXJlIGlzbuKAmXQgYSBnb29kIHdh eSB0byByZXByZXNlbnQgdGhpcyBpbiBhIHNjaGVtYSBjdXJyZW50bHkuDQoNCi0tS2VsbHkNCg0K DQpGcm9tOiBzY2ltIFttYWlsdG86c2NpbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2Yg TWljaGFlbCBGcm9zdA0KU2VudDogVGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDY6NDUgUE0N ClRvOiBQaGlsIEh1bnQNCkNjOiBzY2ltQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW3NjaW1dIFND SU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbg0KDQpIaSBQaGlsLA0KDQpOb3Qg c3VyZSB3aGF0IHlvdSBtZWFuIGJ5IGV4YW1wbGVzLiAgTXkgY29uY2VybiBpcyB0aGF0IGluIHRo ZSBzY2hlbWEgZG9jLCBzZWN0aW9uIDguNyBwcm92aWRlcyBzY2hlbWEgcmVwcmVzZW50YXRpb24g Zm9yIGNvcmUgdXNlci9ncm91cCBhbmQgZW50ZXJwcmlzZSB1c2VyLiAgV2hhdCBhYm91dCBhbGwg dGhlIG90aGVyIHNjaGVtYXMgd2UgcmVmZXJlbmNlPyAgV2Ugc2hvdWxkIHByb3ZpZGUgc2NoZW1h IHJlcHJlc2VudGF0aW9uIGZvciBldmVyeSBzY2hlbWEgZGVmaW5lZCBpbiB0aGUgc3BlYy4gIEV2 ZXJ5b25lIGltcGxlbWVudGluZyB0aGlzIHNwZWMgd2lsbCBuZWVkIHRoZW0uICBXaHkgcHJvdmlk ZSBqdXN0IHRocmVlIGFuZCBsZWF2ZSB0aGUgcmVzdCB1cCB0byBndWVzcyB3b3JrPyAgRXZlcnkg aW1wbGVtZW50YXRpb24gbmVlZHMgdG8gZG8gdmFsaWRhdGlvbiwgZXZlcnkgdmFsaWRhdGlvbiBu ZWVkcyBhIHNjaGVtYSB0byB2YWxpZGF0ZSBhZ2FpbnN0LiAgU28gbXkgY29uY2VybiBpcyB0d29m b2xkLiAgRmlyc3QsIHdlIHJlZmVyZW5jZSBhIGJ1bmNoIG9mIHNjaGVtYXMgdGhhdCBldmVyeW9u ZSBuZWVkcywgYnV0IHdlIGRvbuKAmXQgcHJvdmlkZSB0aGVtLiAgU2Vjb25kLCBzb21lIG9mIHRo ZSBzY2hlbWFzIHdlIHJlZmVyZW5jZSAoc3VjaCBhcyBwYXRjaE9wKSBjYW5ub3QgYmUgcmVwcmVz ZW50ZWQgaW4gSlNPTiB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zLg0KDQpJ4oCZbSBjZXJ0YWlu bHkgT0sgd2l0aCBhbiBhcHBlbmRpeCBpbiB0aGUgYXBpIGRvYyBmb3IgbWVzc2FnZSBzY2hlbWFz IGFuZCBhbiBhcHBlbmRpeCBpbiB0aGUgc2NoZW1hIGRvYyBmb3IgYWxsIG9mIHRoZSBlbnRpdHkg c2NoZW1hcy4gIE15IHBvaW50IGlzIGFsbCB0aGVzZSBzY2hlbWFzIHNob3VsZCBleGlzdC4gIFdl IHJlZmVyZW5jZSB0aGVtLCB3ZSBkZXNjcmliZSB0aGVtLCBidXQgd2Ugb25seSBwcm92aWRlIHRo cmVlIG9mIHRoZW0uICBJdCBqdXN0IHNlZW1zIHdyb25nIHRvIG1lIChwZXJoYXBzIG15IG93biBz aG9ydGNvbWluZykgYnV0IHdl4oCZcmUgYXNraW5nIHBlb3BsZSB0byBpbXBsZW1lbnQgU0NJTSBw YXRjaCwgdXNpbmcgYSBTQ0lNIHNjaGVtYSBkZWZpbmVkIHJlcXVlc3QsIHRoYXQgd2UgZG8gbm90 IHByb3ZpZGUsIGFuZCBjYW5ub3QgZGVmaW5lIHVzaW5nIHJ1bGVzIHdlIHNldCBmb3J0aCBpbiBz ZWN0aW9uIDcgb2YgdGhlIHNjaGVtYSBkb2MuDQoNCg0KU28gYm90dG9tIGxpbmUsIGFsbCBJ4oCZ bSByZXF1ZXN0aW5nIGlzIHRoZSBKU09OIHJlcHJlc2VudGF0aW9uIG9mIHRoZSBTQ0lNIHNjaGVt YXMgd2UgcmVmZXJlbmNlLg0KDQoNCg0KVGhpcyBpcyBhIFNDSU0gc2NoZW1hIHJlZmVyZW5jZSwg 4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6UGF0Y2hPcOKAnCwgSSBm ZWVsIHdlIHNob3VsZCBwcm92aWRlIHRoZSBKU09OIHJlcHJlc2VudGF0aW9uIGZvciBpdC4gIElm IHdlIGNhbuKAmXQgZG8gaXQsIG5vYm9keSBpbXBsZW1lbnRpbmcgdGhlIHNwZWMgY2FuIGVpdGhl ci4gIEFsbCBvZiB0aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2Ugc2hvdWxkIGJlIHByb3ZpZGVkIHVz aW5nIG91ciBvd24gZGVmaW5pdGlvbnMgc2V0IGRvd24gaW4gc2VjdGlvbiA3IG9mIHRoZSBzY2hl bWEgcmZjIChvciBlbmhhbmNlZCBpbiB0aGUgYXBpIGRvYywgdXNpbmcgc2VjdGlvbiA3IGFzIGEg YmFzZSkuICBGcmFua2x5LCBJ4oCZbSBkcmVhZGluZyB0aGUgb3V0Y29tZSBvZiBhbGwgdGhpcyBi ZWNhdXNlIEnigJl2ZSBhbHJlYWR5IHNwZW50IGEgY291cGxlIG9mIG1vbnRocyBpbXBsZW1lbnRp bmcgcGF0Y2ggaW4gaXRzIGN1cnJlbnQgZm9ybSB3aXRoIG92ZXIgMTUwIHVuaXQgdGVzdHMgdG8g Y29uZmlybSBpdCBkb2VzIHdoYXQgSSB0aGluayB0aGUgc3BlYyByZXF1aXJlcy4gIEJ1dCBzZXZl cmFsIG9mIG15IHBlZXJzIGhhdmUgY29tZSB0byBtZSBhbmQgYXNrZWQgZm9yIHRoZXNlIHNjaGVt YSBkZWZpbml0aW9ucyAoaW4gSlNPTikgYW5kIGEgY291cGxlIGhhdmUgcG9pbnRlZCBvdXQgdGhh dCB0aGUgcGF0Y2ggcmVxdWVzdCBzY2hlbWEsIOKAnCB1cm46aWV0ZjpwYXJhbXM6c2NpbTphcGk6 bWVzc2FnZXM6Mi4wOlBhdGNoT3DigJwsIGNhbm5vdCBiZSByZXByZXNlbnRlZCB1c2luZyBzZWN0 aW9uIDcgcnVsZXMgYW5kIHRoYXQgd2UgY2Fubm90IGRvIHVwZnJvbnQgdmFsaWRhdGlvbiBvbiBw YXRjaCByZXF1ZXN0cyB0aGUgd2F5IHdlIGRvIGFsbCBvdGhlciBTQ0lNIHJlcXVlc3RzLiAgQW5k IGl04oCZcyB0cnVlLCB3ZSBjYW5ub3QgZG8gYW4gdXBmcm9udCB2YWxpZGF0aW9uIG9mIHBhdGNo IGFmdGVyIGl04oCZcyBwYXJzZWQgdGhlIHdheSB3ZSBjYW4gYWxsIG90aGVyIHJlcXVlc3RzLiAg U2ltcGxlIGF0dHJpYnV0ZSB2YWxpZGF0aW9uIGlzIGltcG9zc2libGUgYmVjYXVzZSDigJx2YWx1 ZeKAnSBkZXBlbmRzIG9uIHRoZSB0YXJnZXQgb2Yg4oCccGF0aOKAnSwgYW5kIHRoZXJlZm9yZSDi gJx2YWx1ZeKAnSBjYW5ub3QgYmUgZGVmaW5lZCBpbiBhIEpTT04gc2NoZW1hIHVzaW5nIHNlY3Rp b24gNyBvZiB0aGUgc2NoZW1hIGRvYy4NCg0KDQoNCkV2ZW4gaWYgd2UgY2Fu4oCZdCBmaXggcGF0 Y2gsIGZvciB3aGF0ZXZlciByZWFzb24sIHdlIHNob3VsZCBwcm92aWRlIHRoZSByZXN0IG9mIHRo ZSBzY2hlbWFzLCByZXByZXNlbnRlZCBpbiBKU09OIGZvcm1hdCwgZm9yIGJvdGggZG9jcy4NCg0K DQoNCi1tcmYNCg0KRnJvbTogUGhpbCBIdW50DQpTZW50OiBUaHVyc2RheSwgRmVicnVhcnkgMTIs IDIwMTUgMTI6NTggUE0NClRvOiBNaWNoYWVsIEZyb3N0DQpDYzogc2NpbUBpZXRmLm9yZzxtYWls dG86c2NpbUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFu ZCBKU09OIHJlcHJlc2VudGF0aW9uDQoNCk1pY2hhZWwsDQoNCkNhbiB5b3UgcHJvdmlkZSBleGFt cGxlcz8NCg0KVGhlIHNjaGVtYSBpbiB0aGUgQVBJIGhhcyB0byBleHRlbmQgdGhlIHJlZ2lzdHJ5 IGRlZmluZSBpbiBjb3JlLiAgIEFzIGVkaXRvciBJIHRoaW5rIGl0IHdvdWxkIGJlIGV2ZW4gbW9y ZSBjb25mdXNpbmcgdG8gbWl4IGRhdGEgc2NoZW1hIGFuZCByZXF1ZXN0IHNjaGVtYSBpbiBhIHNp bmdsZSBkb2N1bWVudC4gSXQgYWxzbyBiZWNvbWVzIHByb2JsZW1hdGljIHdoZW4gc3BlY3MgY3Jv c3MgcmVmZXJlbmNlIGVhY2ggb3RoZXIuIEluc3RlYWQgdGhlIGRvY3VtZW50IGxheW91dCBpcyBz dWNoIHRoYXQgQVBJIGJ1aWxkcyBvbiBjb3JlIHNjaGVtYS4NCg0KVGhlIGZvcm1hdCBpbiBQQVRD SCBjb21lcyBmcm9tIHRoZSBKU09OIFBhdGNoIFJGQy4NCg0KUGhpbA0KDQpPbiBGZWIgMTIsIDIw MTUsIGF0IDEyOjQ2LCBNaWNoYWVsIEZyb3N0IDxtaWNoYWVsLmZyb3N0QG9yYWNsZS5jb208bWFp bHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQouMDpSZXNvdXJjZVR5cGUN Cg0KdXJuOmlldGY6cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjINCg== --_000_BN1PR04MB3920562F2BABB3E5CD03E34E2230BN1PR04MB392namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2 IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglw YW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0K cC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0K CW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5 OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi SFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30N CnAuTXNvQWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2Lk1zb0FjZXRhdGUNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJbWFy Z2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjguMHB0Ow0KCWZv bnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRD aGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglm b250LWZhbWlseTpDb25zb2xhczt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9y OiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwt cmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0 OTdEO30NCnNwYW4uQmFsbG9vblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJCYWxsb29uIFRl eHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxs b29uIFRleHQiOw0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQouTXNvQ2hw RGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0 O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4w aW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0 aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZh dWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwh LS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86 aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFb ZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9 InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPk1pY2hhZWwg4oCm IGxldCBtZSBtYWtlIHN1cmUgSSB1bmRlcnN0YW5kIHdoYXQgeW91IGFyZSBsb29raW5nIGZvci4m bmJzcDsgWW91IHdvdWxkIGxpa2UgYSBzY2hlbWEgcmVwcmVzZW50YXRpb24gKHN1Y2ggYXMgd2hh dCBpcyBpbmNsdWRlZCBpbiBzZWN0aW9uIDguNykgZm9yIGFsbA0KIHJlc291cmNlcyBhbmQgbWVz c2FnZXMuJm5ic3A7IElzIHRoYXQgcmlnaHQ/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JZiBzbywgdGhlbiBJIDEwMCUg YWdyZWUgdGhhdCB0aGlzIGlzIHVzZWZ1bC4mbmJzcDsgSW4gdGhlIFNDSU0gMS4wIHNwZWMgKGJh Y2sgd2hlbiB3ZSBzdXBwb3J0ZWQgWE1MIGFzIGEgZGF0YSBmb3JtYXQpIHRoZXJlIHdhcyBhbiBY U0QgdGhhdCBkaWQgZXhhY3RseSB3aGF0IHlvdQ0KIGFyZSBsb29raW5nIGZvciDigJMgZGVzY3Jp YmVkIGJvdGggcmVzb3VyY2VzIGFuZCBtZXNzYWdlcy4mbmJzcDsgSSBhZ3JlZSB0aGF0IGhhdmlu ZyB0aGlzIGNvZGlmaWVzIHRoZSBydWxlcyBhbmQgcmVtb3ZlcyBzb21lIGFtYmlndWl0eS4mbmJz cDsgSSB3b3VsZCBiZSBpbiBmYXZvciBvZiBhZGRpbmcgc29tZXRoaW5nIGxpa2UgdGhpcyB0byB0 aGUgU0NJTSBzcGVjLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+UmVnYXJkaW5nIHRoZSBQYXRjaE9wLCBpcyB0aGUgcHJv YmxlbSB0aGF0IHRoZSB2YWx1ZSBzdWItYXR0cmlidXRlIGNvdWxkIGJlIGFueXRoaW5nIOKAkyBt dWx0aXZhbHVlZCBjb3VsZCBiZSB0cnVlIG9yIGZhbHNlLCB0aGVyZSBtYXkgb3IgbWF5IG5vdCBi ZSBzdWItYXR0cmlidXRlcw0KIChpZSDigJMgaXQgY291bGQgYmUgY29tcGxleCwgd2hpY2ggaXMg bm90IHRlY2huaWNhbGx5IHN1cHBvcnRlZCksIGFuZCB0aGUgdHlwZSBpcyBkZXBlbmRlbnQgdXBv biB0aGUgYWN0dWFsIGF0dHJpYnV0ZSB0aGF0IHlvdSBhcmUgcmVwbGFjaW5nPyZuYnNwOyBXaXRo IHRoaXMgYW1iaWd1aXR5IHRoZXJlIGlzbuKAmXQgYSBnb29kIHdheSB0byByZXByZXNlbnQgdGhp cyBpbiBhIHNjaGVtYSBjdXJyZW50bHkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4tLUtlbGx5PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZy b206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IHNjaW0gW21haWx0bzpz Y2ltLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPk1pY2hhZWwgRnJvc3Q8 YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDY6NDUgUE08YnI+ DQo8Yj5Ubzo8L2I+IFBoaWwgSHVudDxicj4NCjxiPkNjOjwvYj4gc2NpbUBpZXRmLm9yZzxicj4N CjxiPlN1YmplY3Q6PC9iPiBSZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXBy ZXNlbnRhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBQaGlsLA0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5Ob3Qgc3VyZSB3aGF0IHlvdSBtZWFuIGJ5IGV4YW1wbGVzLiZuYnNwOyBNeSBjb25j ZXJuIGlzIHRoYXQgaW4gdGhlIHNjaGVtYSBkb2MsIHNlY3Rpb24gOC43IHByb3ZpZGVzIHNjaGVt YSByZXByZXNlbnRhdGlvbiBmb3IgY29yZSB1c2VyL2dyb3VwIGFuZCBlbnRlcnByaXNlIHVzZXIu Jm5ic3A7DQogV2hhdCBhYm91dCBhbGwgdGhlIG90aGVyIHNjaGVtYXMgd2UgcmVmZXJlbmNlPyZu YnNwOyBXZSBzaG91bGQgcHJvdmlkZSBzY2hlbWEgcmVwcmVzZW50YXRpb24gZm9yIGV2ZXJ5IHNj aGVtYSBkZWZpbmVkIGluIHRoZSBzcGVjLiZuYnNwOyBFdmVyeW9uZSBpbXBsZW1lbnRpbmcgdGhp cyBzcGVjIHdpbGwgbmVlZCB0aGVtLiZuYnNwOyBXaHkgcHJvdmlkZSBqdXN0IHRocmVlIGFuZCBs ZWF2ZSB0aGUgcmVzdCB1cCB0byBndWVzcyB3b3JrPyZuYnNwOyBFdmVyeSBpbXBsZW1lbnRhdGlv bg0KIG5lZWRzIHRvIGRvIHZhbGlkYXRpb24sIGV2ZXJ5IHZhbGlkYXRpb24gbmVlZHMgYSBzY2hl bWEgdG8gdmFsaWRhdGUgYWdhaW5zdC4mbmJzcDsgU28gbXkgY29uY2VybiBpcyB0d29mb2xkLiZu YnNwOyBGaXJzdCwgd2UgcmVmZXJlbmNlIGEgYnVuY2ggb2Ygc2NoZW1hcyB0aGF0IGV2ZXJ5b25l IG5lZWRzLCBidXQgd2UgZG9u4oCZdCBwcm92aWRlIHRoZW0uJm5ic3A7IFNlY29uZCwgc29tZSBv ZiB0aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2UgKHN1Y2ggYXMgcGF0Y2hPcCkgY2Fubm90DQogYmUg cmVwcmVzZW50ZWQgaW4gSlNPTiB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ SeKAmW0gY2VydGFpbmx5IE9LIHdpdGggYW4gYXBwZW5kaXggaW4gdGhlIGFwaSBkb2MgZm9yIG1l c3NhZ2Ugc2NoZW1hcyBhbmQgYW4gYXBwZW5kaXggaW4gdGhlIHNjaGVtYSBkb2MgZm9yIGFsbCBv ZiB0aGUgZW50aXR5IHNjaGVtYXMuJm5ic3A7IE15IHBvaW50IGlzIGFsbCB0aGVzZQ0KIHNjaGVt YXMgc2hvdWxkIGV4aXN0LiZuYnNwOyBXZSByZWZlcmVuY2UgdGhlbSwgd2UgZGVzY3JpYmUgdGhl bSwgYnV0IHdlIG9ubHkgcHJvdmlkZSB0aHJlZSBvZiB0aGVtLiZuYnNwOyBJdCBqdXN0IHNlZW1z IHdyb25nIHRvIG1lIChwZXJoYXBzIG15IG93biBzaG9ydGNvbWluZykgYnV0IHdl4oCZcmUgYXNr aW5nIHBlb3BsZSB0byBpbXBsZW1lbnQgU0NJTSBwYXRjaCwgdXNpbmcgYSBTQ0lNIHNjaGVtYSBk ZWZpbmVkIHJlcXVlc3QsIHRoYXQgd2UgZG8gbm90IHByb3ZpZGUsDQogYW5kIGNhbm5vdCBkZWZp bmUgdXNpbmcgcnVsZXMgd2Ugc2V0IGZvcnRoIGluIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIGRv Yy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+U28gYm90dG9tIGxpbmUsIGFsbCBJ4oCZbSBy ZXF1ZXN0aW5nIGlzIHRoZSBKU09OIHJlcHJlc2VudGF0aW9uIG9mIHRoZSBTQ0lNIHNjaGVtYXMg d2UgcmVmZXJlbmNlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1i cmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFG NDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJy ZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj5UaGlzIGlzIGEgU0NJTSBzY2hlbWEgcmVmZXJlbmNlLCDigJwgdXJuOmlldGY6cGFyYW1z OnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBJIGZlZWwgd2Ugc2hvdWxkIHByb3Zp ZGUgdGhlIEpTT04gcmVwcmVzZW50YXRpb24gZm9yIGl0LiAmbmJzcDtJZiB3ZSBjYW7igJl0IGRv IGl0LCBub2JvZHkgaW1wbGVtZW50aW5nIHRoZSBzcGVjIGNhbiBlaXRoZXIuJm5ic3A7IEFsbCBv ZiB0aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2Ugc2hvdWxkIGJlIHByb3ZpZGVkIHVzaW5nIG91ciBv d24gZGVmaW5pdGlvbnMgc2V0IGRvd24gaW4gc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgcmZjIChv ciBlbmhhbmNlZCBpbiB0aGUgYXBpIGRvYywgdXNpbmcgc2VjdGlvbiA3IGFzIGEgYmFzZSkuJm5i c3A7IEZyYW5rbHksIEnigJltIGRyZWFkaW5nIHRoZSBvdXRjb21lIG9mIGFsbCB0aGlzIGJlY2F1 c2UgSeKAmXZlIGFscmVhZHkgc3BlbnQgYSBjb3VwbGUgb2YgbW9udGhzIGltcGxlbWVudGluZyBw YXRjaCBpbiBpdHMgY3VycmVudCBmb3JtIHdpdGggb3ZlciAxNTAgdW5pdCB0ZXN0cyB0byBjb25m aXJtIGl0IGRvZXMgd2hhdCBJIHRoaW5rIHRoZSBzcGVjIHJlcXVpcmVzLiZuYnNwOyBCdXQgc2V2 ZXJhbCBvZiBteSBwZWVycyBoYXZlIGNvbWUgdG8gbWUgYW5kIGFza2VkIGZvciB0aGVzZSBzY2hl bWEgZGVmaW5pdGlvbnMgKGluIEpTT04pIGFuZCBhIGNvdXBsZSBoYXZlIHBvaW50ZWQgb3V0IHRo YXQgdGhlIHBhdGNoIHJlcXVlc3Qgc2NoZW1hLCDigJwgdXJuOmlldGY6cGFyYW1zOnNjaW06YXBp Om1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBjYW5ub3QgYmUgcmVwcmVzZW50ZWQgdXNpbmcgc2Vj dGlvbiA3IHJ1bGVzIGFuZCB0aGF0IHdlIGNhbm5vdCBkbyB1cGZyb250IHZhbGlkYXRpb24gb24g cGF0Y2ggcmVxdWVzdHMgdGhlIHdheSB3ZSBkbyBhbGwgb3RoZXIgU0NJTSByZXF1ZXN0cy4mbmJz cDsgQW5kIGl04oCZcyB0cnVlLCB3ZSBjYW5ub3QgZG8gYW4gdXBmcm9udCB2YWxpZGF0aW9uIG9m IHBhdGNoIGFmdGVyIGl04oCZcyBwYXJzZWQgdGhlIHdheSB3ZSBjYW4gYWxsIG90aGVyIHJlcXVl c3RzLiZuYnNwOyBTaW1wbGUgYXR0cmlidXRlIHZhbGlkYXRpb24gaXMgaW1wb3NzaWJsZSBiZWNh dXNlIOKAnHZhbHVl4oCdIGRlcGVuZHMgb24gdGhlIHRhcmdldCBvZiDigJxwYXRo4oCdLCBhbmQg dGhlcmVmb3JlIOKAnHZhbHVl4oCdIGNhbm5vdCBiZSBkZWZpbmVkIGluIGEgSlNPTiBzY2hlbWEg dXNpbmcgc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgZG9jLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5FdmVuIGlmIHdlIGNhbuKAmXQgZml4IHBhdGNoLCBm b3Igd2hhdGV2ZXIgcmVhc29uLCB3ZSBzaG91bGQgcHJvdmlkZSB0aGUgcmVzdCBvZiB0aGUgc2No ZW1hcywgcmVwcmVzZW50ZWQgaW4gSlNPTiBmb3JtYXQsIGZvciBib3RoIGRvY3MuPG86cD48L286 cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPi1tcmY8bzpwPjwvbzpwPjwv c3Bhbj48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90OyI+IFBoaWwgSHVudA0KPGJyPg0KPGI+U2VudDo8L2I+IFRodXJzZGF5LCBGZWJydWFy eSAxMiwgMjAxNSAxMjo1OCBQTTxicj4NCjxiPlRvOjwvYj4gTWljaGFlbCBGcm9zdDxicj4NCjxi PkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciPnNjaW1AaWV0Zi5vcmc8L2E+ PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBKU09O IHJlcHJlc2VudGF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPk1pY2hhZWwsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkNhbiB5b3UgcHJvdmlkZSBleGFtcGxlcz88bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIHNjaGVtYSBpbiB0 aGUgQVBJIGhhcyB0byBleHRlbmQgdGhlIHJlZ2lzdHJ5IGRlZmluZSBpbiBjb3JlLiAmbmJzcDsg QXMgZWRpdG9yIEkgdGhpbmsgaXQgd291bGQgYmUgZXZlbiBtb3JlIGNvbmZ1c2luZyB0byBtaXgg ZGF0YSBzY2hlbWEgYW5kIHJlcXVlc3Qgc2NoZW1hIGluIGEgc2luZ2xlIGRvY3VtZW50LiBJdCBh bHNvIGJlY29tZXMgcHJvYmxlbWF0aWMgd2hlbiBzcGVjcyBjcm9zcyByZWZlcmVuY2UgZWFjaA0K IG90aGVyLiBJbnN0ZWFkIHRoZSBkb2N1bWVudCBsYXlvdXQgaXMgc3VjaCB0aGF0IEFQSSBidWls ZHMgb24gY29yZSBzY2hlbWEuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBmb3JtYXQgaW4gUEFUQ0ggY29tZXMgZnJvbSB0aGUg SlNPTiBQYXRjaCBSRkMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48YnI+DQpQaGlsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4N Ck9uIEZlYiAxMiwgMjAxNSwgYXQgMTI6NDYsIE1pY2hhZWwgRnJvc3QgJmx0OzxhIGhyZWY9Im1h aWx0bzptaWNoYWVsLmZyb3N0QG9yYWNsZS5jb20iPm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbTwv YT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwcmUgc3R5bGU9InBhZ2Ut YnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6 YmxhY2siPi4wOlJlc291cmNlVHlwZTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHls ZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtjb2xvcjpibGFjayI+dXJuOmlldGY6cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjI8L3NwYW4+ PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1s Pg0K --_000_BN1PR04MB3920562F2BABB3E5CD03E34E2230BN1PR04MB392namprd_-- From nobody Fri Feb 13 06:58:26 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 104FA1A8709 for ; Fri, 13 Feb 2015 06:58:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dSzBNIzG_Wyk for ; Fri, 13 Feb 2015 06:58:21 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0143.outbound.protection.outlook.com [65.55.169.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F42E1A8702 for ; Fri, 13 Feb 2015 06:58:21 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB390.namprd04.prod.outlook.com (10.141.60.147) with Microsoft SMTP Server (TLS) id 15.1.87.18; Fri, 13 Feb 2015 14:58:17 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) with mapi id 15.01.0087.013; Fri, 13 Feb 2015 14:58:17 +0000 From: Kelly Grizzle To: Michael Frost , "scim@ietf.org" Thread-Topic: [scim] group sample not valid for provided schema Thread-Index: AQHQNr5zfdySVNhHB0K/9LNiWcUVKJztnnyAgAEuuYA= Date: Fri, 13 Feb 2015 14:58:17 +0000 Message-ID: References: <515fdd10-1dbc-4ca6-ae9d-2095729dd7cf@default> In-Reply-To: <515fdd10-1dbc-4ca6-ae9d-2095729dd7cf@default> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 001A0398009286001A04E5 x-originating-ip: [70.114.158.171] authentication-results: oracle.com; dkim=none (message not signed) header.d=none; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB390; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB390; x-forefront-prvs: 0486A0CB86 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(40100003)(92566002)(54356999)(86362001)(76576001)(122556002)(19580405001)(19617315012)(46102003)(76176999)(2950100001)(50986999)(2900100001)(2501002)(19580395003)(16236675004)(33656002)(107886001)(19609705001)(66066001)(19625215002)(106116001)(74316001)(2656002)(15975445007)(102836002)(87936001)(99286002)(62966003)(77156002)(19300405004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB390; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; Content-Type: multipart/alternative; boundary="_000_BN1PR04MB392553B55AE161D9B4F9C68E2230BN1PR04MB392namprd_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Feb 2015 14:58:17.6963 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB390 Archived-At: Subject: Re: [scim] group sample not valid for provided schema X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2015 14:58:25 -0000 --_000_BN1PR04MB392553B55AE161D9B4F9C68E2230BN1PR04MB392namprd_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Agree on both. The schema should definitely be fixed. While technically n= ot required, it would be nice to make the example include a type also. From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael Frost Sent: Thursday, February 12, 2015 2:54 PM To: scim@ietf.org Subject: Re: [scim] group sample not valid for provided schema Since the barn door is open, shouldn't we fix this one? -mrf From: Michael Frost Sent: Thursday, January 22, 2015 7:41 PM To: scim@ietf.org Cc: idaas_dev_ww_grp Subject: [scim] group sample not valid for provided schema It appears that the schema representation for groups (page 53-54) is missin= g the "display" sub-attribute definition from the "members" attribute. Thi= s makes the sample group json in section 8.4 (page 31) invalid. Also the s= ample in section 8.4 should probably include the optional "type" sub-attrib= ute in "members". Here is the sample group from page 32 { "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:Group" ], "id": "e9e30dba-f08f-4109-8486-d5c6a331660a", "displayName": "Tour Guides", "members": [ { "value": "2819c223-7f76-453a-919d-413861904646", "$ref": "https://example.com/v2/Users/2819c223-7f76-453a-919d-4138619= 04646", "display": "Babs Jensen" }, { "value": "902c246b-6245-4190-8e05-00816be7344a", "$ref": "https://example.com/v2/Users/902c246b-6245-4190-8e05-00816be= 7344a", "display": "Mandy Pepperidge" } ], "meta": { "resourceType": "Group", "created": "2010-01-23T04:56:22Z", "lastModified": "2011-05-13T04:42:34Z", "version": "W/\"3694e05e9dff592\"", "location": "https://example.com/v2/Groups/e9e30dba-f08f-4109-8486-d5c6= a331660a" } } Here is the schema for members, defined sub-attributes are value, $ref, and= type { "name": "members", "type": "complex", "multiValued": true, "description": "A list of members of the Group.", "required": false, "caseExact": false, "subAttributes": [ { "name": "value", "type": "string", "multiValued": false, "description": "Identifier of the member of this Group.", "required": false, "caseExact": false, "mutability": "immutable", "returned": "default", "uniqueness": "none" }, { "name": "$ref", "type": "string", "multiValued": false, "description": "The URI of the corresponding to the member resource o= f this Group.", "required": false, "caseExact": false, "mutability": "immutable", "returned": "default", "uniqueness": "none" }, { "name": "type", "type": "string", "multiValued": false, "description": "A label indicating the type of resource; e.g., 'User'= or 'Group'.", "required": false, "caseExact": false, "canonicalValues": [ "User", "Group" ], "mutability": "immutable", "returned": "default", "uniqueness": "none" } ], "mutability": "readWrite", "returned": "default", "uniqueness": "none" } -mrf --_000_BN1PR04MB392553B55AE161D9B4F9C68E2230BN1PR04MB392namprd_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Agree on both.  T= he schema should definitely be fixed.  While technically not required,= it would be nice to make the example include a type also.

 

From: scim [ma= ilto:scim-bounces@ietf.org] On Behalf Of Michael Frost
Sent: Thursday, February 12, 2015 2:54 PM
To: scim@ietf.org
Subject: Re: [scim] group sample not valid for provided schema<= /o:p>

 

Since the barn door is= open, shouldn’t we fix this one?

 

-mrf=

 

From: Michael = Frost
Sent: Thursday, January 22, 2015 7:41 PM
To: scim@ietf.org
Cc: idaas_dev_ww_grp
Subject: [scim] group sample not valid for provided schema

 

It appears = that the schema representation for groups (page 53-54) is missing the ̶= 0;display” sub-attribute definition from the “members” attribute.  This makes the sample group json in section 8.4 (page 31)= invalid.  Also the sample in section 8.4 should probably include the = optional “type” sub-attribute in “members”.

 =

 =

 =

Here is the= sample group from page 32

 =

{

  &quo= t;schemas": [

  = ;  "urn:ietf:params:scim:schemas:core:2.0:Group"<= /span>

  ],

  &quo= t;id": "e9e30dba-f08f-4109-8486-d5c6a331660a",

  &quo= t;displayName": "Tour Guides",

  &quo= t;members": [

  = ;  {

  = ;    "value": "2819c223-7f76-453a-919d-413861= 904646",

  = ;    "$ref": "https://example.com/v2/Users= /2819c223-7f76-453a-919d-413861904646",

  = ;    "display": "Babs Jensen"=

  = ;  },

  = ;  {

  = ;    "value": "902c246b-6245-4190-8e05-00816b= e7344a",

  = ;    "$ref": "https://example.com/v2/Users= /902c246b-6245-4190-8e05-00816be7344a",

  = ;    "display": "Mandy Pepperidge"<= /o:p>

  = ;  }

  ],

  &quo= t;meta": {

  = ;  "resourceType": "Group",

  = ;  "created": "2010-01-23T04:56:22Z",

  = ;  "lastModified": "2011-05-13T04:42:34Z",

  = ;  "version": "W/\"3694e05e9dff592\"",

  = ;  "location": "https://example.com/v2/Groups/e9e30= dba-f08f-4109-8486-d5c6a331660a"

  }

}

 =

 =

Here is the= schema for members, defined sub-attributes are value, $ref, and type<= /o:p>

 =

{

  &quo= t;name": "members",

  &quo= t;type": "complex",

  &quo= t;multiValued": true,

  &quo= t;description": "A list of members of the Group.",

  &quo= t;required": false,

  &quo= t;caseExact": false,

  &quo= t;subAttributes": [

  = ;  {

  = ;    "name": "value",<= /p>

  = ;    "type": "string",=

  = ;    "multiValued": false,

  = ;    "description": "Identifier of the member= of this Group.",

  = ;    "required": false,

  = ;    "caseExact": false,

  = ;    "mutability": "immutable",

  = ;    "returned": "default",

  = ;    "uniqueness": "none"

  = ;  },

  = ;  {

  = ;    "name": "$ref",

  = ;    "type": "string",=

  = ;    "multiValued": false,

  = ;    "description": "The URI of the correspon= ding to the member resource of this Group.",

  = ;    "required": false,

  = ;    "caseExact": false,

  = ;    "mutability": "immutable",

  = ;    "returned": "default",

  = ;    "uniqueness": "none"

  = ;  },

  = ;  {

  = ;    "name": "type",

  = ;    "type": "string",=

  = ;    "multiValued": false,

  = ;    "description": "A label indicating the t= ype of resource; e.g., 'User' or 'Group'.",

  = ;    "required": false,

  = ;    "caseExact": false,

  = ;    "canonicalValues": [

  = ;      "User",

  = ;      "Group"

  = ;    ],

  = ;    "mutability": "immutable",

  = ;    "returned": "default",

  = ;    "uniqueness": "none"

  = ;  }

  ],

  &quo= t;mutability": "readWrite",

  &quo= t;returned": "default",

  &quo= t;uniqueness": "none"

}

 =

-mrf

--_000_BN1PR04MB392553B55AE161D9B4F9C68E2230BN1PR04MB392namprd_-- From nobody Fri Feb 13 11:01:20 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8C061A001C for ; Fri, 13 Feb 2015 11:01:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cgrKJK7QqU_z for ; Fri, 13 Feb 2015 11:01:09 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6794F1A000A for ; Fri, 13 Feb 2015 11:01:04 -0800 (PST) Received: from aserv0021.oracle.com (aserv0021.oracle.com [141.146.126.233]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1DJ13JA012239 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 13 Feb 2015 19:01:03 GMT Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by aserv0021.oracle.com (8.13.8/8.13.8) with ESMTP id t1DJ13vp003254 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 13 Feb 2015 19:01:03 GMT Received: from abhmp0014.oracle.com (abhmp0014.oracle.com [141.146.116.20]) by aserv0121.oracle.com (8.13.8/8.13.8) with ESMTP id t1DJ1061030709; Fri, 13 Feb 2015 19:01:00 GMT Received: from [192.168.1.9] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 13 Feb 2015 11:00:54 -0800 Content-Type: multipart/alternative; boundary="Apple-Mail=_E59ECA70-AB27-450F-AD00-E93CA898BF9D" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Phil Hunt In-Reply-To: Date: Fri, 13 Feb 2015 11:00:53 -0800 Message-Id: References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> To: Kelly Grizzle X-Mailer: Apple Mail (2.2070.6) X-Source-IP: aserv0021.oracle.com [141.146.126.233] Archived-At: Cc: "scim@ietf.org" , Michael Frost Subject: Re: [scim] SCIM schema IDs and JSON representation X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2015 19:01:14 -0000 --Apple-Mail=_E59ECA70-AB27-450F-AD00-E93CA898BF9D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Kelly, Just a minor correction. There was never any schema for the REST API in = SCIM 1. The addition of schemas for request/response messages came about because = of IANA mime-type registration and it gives the ability to pass SCIM = messages independently of HTTP. Using =E2=80=9Cschemas=E2=80=9D for both = messages and data made the registry much simpler to define. But the way = they are used are vastly different. Finally, the Schemas endpoint that we expose is not a schema in the = sense of XSDs. It does not describe JSON =E2=80=9Cschema". It describes = server behaviours around schemas. For example, is an attribute = returnable, what=E2=80=99s its mutability. This is nothing like an = XSD. Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 13, 2015, at 6:55 AM, Kelly Grizzle = wrote: >=20 > Michael =E2=80=A6 let me make sure I understand what you are looking = for. You would like a schema representation (such as what is included = in section 8.7) for all resources and messages. Is that right? > =20 > If so, then I 100% agree that this is useful. In the SCIM 1.0 spec = (back when we supported XML as a data format) there was an XSD that did = exactly what you are looking for =E2=80=93 described both resources and = messages. I agree that having this codifies the rules and removes some = ambiguity. I would be in favor of adding something like this to the = SCIM spec. > =20 > Regarding the PatchOp, is the problem that the value sub-attribute = could be anything =E2=80=93 multivalued could be true or false, there = may or may not be sub-attributes (ie =E2=80=93 it could be complex, = which is not technically supported), and the type is dependent upon the = actual attribute that you are replacing? With this ambiguity there = isn=E2=80=99t a good way to represent this in a schema currently. > =20 > --Kelly > =20 > =20 > From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael Frost > Sent: Thursday, February 12, 2015 6:45 PM > To: Phil Hunt > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Hi Phil, > =20 > Not sure what you mean by examples. My concern is that in the schema = doc, section 8.7 provides schema representation for core user/group and = enterprise user. What about all the other schemas we reference? We = should provide schema representation for every schema defined in the = spec. Everyone implementing this spec will need them. Why provide just = three and leave the rest up to guess work? Every implementation needs = to do validation, every validation needs a schema to validate against. = So my concern is twofold. First, we reference a bunch of schemas that = everyone needs, but we don=E2=80=99t provide them. Second, some of the = schemas we reference (such as patchOp) cannot be represented in JSON = using our own definitions. > =20 > I=E2=80=99m certainly OK with an appendix in the api doc for message = schemas and an appendix in the schema doc for all of the entity schemas. = My point is all these schemas should exist. We reference them, we = describe them, but we only provide three of them. It just seems wrong = to me (perhaps my own shortcoming) but we=E2=80=99re asking people to = implement SCIM patch, using a SCIM schema defined request, that we do = not provide, and cannot define using rules we set forth in section 7 of = the schema doc. > =20 > So bottom line, all I=E2=80=99m requesting is the JSON representation = of the SCIM schemas we reference. > =20 > This is a SCIM schema reference, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we should = provide the JSON representation for it. If we can=E2=80=99t do it, = nobody implementing the spec can either. All of the schemas we = reference should be provided using our own definitions set down in = section 7 of the schema rfc (or enhanced in the api doc, using section 7 = as a base). Frankly, I=E2=80=99m dreading the outcome of all this = because I=E2=80=99ve already spent a couple of months implementing patch = in its current form with over 150 unit tests to confirm it does what I = think the spec requires. But several of my peers have come to me and = asked for these schema definitions (in JSON) and a couple have pointed = out that the patch request schema, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be = represented using section 7 rules and that we cannot do upfront = validation on patch requests the way we do all other SCIM requests. And = it=E2=80=99s true, we cannot do an upfront validation of patch after = it=E2=80=99s parsed the way we can all other requests. Simple attribute = validation is impossible because =E2=80=9Cvalue=E2=80=9D depends on the = target of =E2=80=9Cpath=E2=80=9D, and therefore =E2=80=9Cvalue=E2=80=9D = cannot be defined in a JSON schema using section 7 of the schema doc. > =20 > Even if we can=E2=80=99t fix patch, for whatever reason, we should = provide the rest of the schemas, represented in JSON format, for both = docs. > =20 > -mrf > =20 > From: Phil Hunt=20 > Sent: Thursday, February 12, 2015 12:58 PM > To: Michael Frost > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Michael, > =20 > Can you provide examples? > =20 > The schema in the API has to extend the registry define in core. As = editor I think it would be even more confusing to mix data schema and = request schema in a single document. It also becomes problematic when = specs cross reference each other. Instead the document layout is such = that API builds on core schema.=20 > =20 > The format in PATCH comes from the JSON Patch RFC.=20 >=20 > Phil >=20 > On Feb 12, 2015, at 12:46, Michael Frost > wrote: >=20 > .0:ResourceType > urn:ietf:params:scim:schemas:core:2 --Apple-Mail=_E59ECA70-AB27-450F-AD00-E93CA898BF9D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Kelly,

Just= a minor correction. There was never any schema for the REST API in SCIM = 1.

The = addition of schemas for request/response messages came about because of = IANA mime-type registration and it gives the ability to pass SCIM = messages independently of HTTP. Using =E2=80=9Cschemas=E2=80=9D for both = messages and data made the registry much simpler to define. But the way = they are used are vastly different.

Finally, the Schemas endpoint that we = expose is not a schema in the sense of XSDs. It does not describe JSON = =E2=80=9Cschema". It describes server behaviours around schemas. For = example, is an attribute returnable, what=E2=80=99s its mutability. =   This is nothing like an XSD.

Phil

On Feb 13, 2015, at 6:55 AM, Kelly Grizzle <kelly.grizzle@sailpoint.com> wrote:

Michael =E2=80=A6 let me make sure I = understand what you are looking for.  You would like a schema = representation (such as what is included in section 8.7) for all resources and messages.  Is that right?

 

If so, then I 100% agree that this is = useful.  In the SCIM 1.0 spec (back when we supported XML as a data = format) there was an XSD that did exactly what you are looking for =E2=80=93 described both resources and messages.  = I agree that having this codifies the rules and removes some = ambiguity.  I would be in favor of adding something like this to = the SCIM spec.

 

Regarding the PatchOp, is the problem = that the value sub-attribute could be anything =E2=80=93 multivalued = could be true or false, there may or may not be sub-attributes (ie =E2=80=93 it could be complex, which is not technically supported), = and the type is dependent upon the actual attribute that you are = replacing?  With this ambiguity there isn=E2=80=99t a good way to = represent this in a schema currently.

 

--Kelly

 

 

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael Frost
Sent: Thursday, February 12, 2015 6:45 PM
= To: Phil Hunt
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs and JSON = representation

 

Hi Phil,

 

Not sure what you mean by = examples.  My concern is that in the schema doc, section 8.7 = provides schema representation for core user/group and enterprise = user.  What about all the other schemas we reference?  We should provide = schema representation for every schema defined in the spec.  = Everyone implementing this spec will need them.  Why provide just = three and leave the rest up to guess work?  Every implementation needs to do validation, every validation needs a schema to validate = against.  So my concern is twofold.  First, we reference a = bunch of schemas that everyone needs, but we don=E2=80=99t provide = them.  Second, some of the schemas we reference (such as patchOp) = cannot be represented in JSON using our own definitions.

 

I=E2=80=99m certainly OK with an = appendix in the api doc for message schemas and an appendix in the = schema doc for all of the entity schemas.  My point is all these schemas should exist.  We reference them, we describe them, but we = only provide three of them.  It just seems wrong to me (perhaps my = own shortcoming) but we=E2=80=99re asking people to implement SCIM = patch, using a SCIM schema defined request, that we do not provide, and cannot define using rules we set forth in section 7 of the schema = doc.

 

So bottom line, all I=E2=80=99m =
requesting is the JSON representation of the SCIM schemas we =
reference.
 
This is a SCIM schema reference, =E2=80=9C=
 urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we =
should provide the JSON representation for it.  If we can=E2=80=99t =
do it, nobody implementing the spec can either.  All of the schemas =
we reference should be provided using our own definitions set down in =
section 7 of the schema rfc (or enhanced in the api doc, using section 7 =
as a base).  Frankly, I=E2=80=99m dreading the outcome of all this =
because I=E2=80=99ve already spent a couple of months implementing patch =
in its current form with over 150 unit tests to confirm it does what I =
think the spec requires.  But several of my peers have come to me =
and asked for these schema definitions (in JSON) and a couple have =
pointed out that the patch request schema, =E2=80=9C =
urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be =
represented using section 7 rules and that we cannot do upfront =
validation on patch requests the way we do all other SCIM =
requests.  And it=E2=80=99s true, we cannot do an upfront =
validation of patch after it=E2=80=99s parsed the way we can all other =
requests.  Simple attribute validation is impossible because =
=E2=80=9Cvalue=E2=80=9D depends on the target of =E2=80=9Cpath=E2=80=9D, =
and therefore =E2=80=9Cvalue=E2=80=9D cannot be defined in a JSON schema =
using section 7 of the schema doc.
 
Even if we can=E2=80=99t fix patch, for =
whatever reason, we should provide the rest of the schemas, represented =
in JSON format, for both docs.
 
-mrf
 

From: Phil Hunt
Sent: Thursday, February 12, 2015 12:58 PM
To: Michael Frost
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs and JSON = representation

 

Michael,

 

Can you provide examples?

 

The schema in the API has to = extend the registry define in core.   As editor I think it would be = even more confusing to mix data schema and request schema in a single = document. It also becomes problematic when specs cross reference each other. Instead the document layout is such that API builds on core = schema. 

 

The format in PATCH comes from = the JSON Patch RFC. 


Phil


On Feb 12, 2015, at 12:46, Michael Frost <michael.frost@oracle.com> wrote:

.0:ResourceType
urn:ietf:params:scim:schemas:core:2

= --Apple-Mail=_E59ECA70-AB27-450F-AD00-E93CA898BF9D-- From nobody Fri Feb 13 11:51:03 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CBB61A0263 for ; Fri, 13 Feb 2015 11:51:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id unDrGNI1HDYH for ; Fri, 13 Feb 2015 11:50:58 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0108.outbound.protection.outlook.com [207.46.100.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB3571A0118 for ; Fri, 13 Feb 2015 11:50:55 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB391.namprd04.prod.outlook.com (10.141.60.150) with Microsoft SMTP Server (TLS) id 15.1.87.18; Fri, 13 Feb 2015 19:50:53 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.52]) with mapi id 15.01.0087.013; Fri, 13 Feb 2015 19:50:53 +0000 From: Kelly Grizzle To: Phil Hunt Thread-Topic: [scim] SCIM schema IDs and JSON representation Thread-Index: AQHQRwTzrXmmgBeZPU+N7DzfNJdBHJztfzOAgAA/RwCAAOrX0IAAR2yAgAAIvWA= Date: Fri, 13 Feb 2015 19:50:53 +0000 Message-ID: References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 0125E0E20092920125E22F x-originating-ip: [97.79.140.10] authentication-results: oracle.com; dkim=none (message not signed) header.d=none; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB391; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB391; x-forefront-prvs: 0486A0CB86 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(24454002)(87936001)(99286002)(54356999)(19617315012)(2656002)(66066001)(19625215002)(19580405001)(93886004)(110136001)(19580395003)(33656002)(106116001)(86362001)(76176999)(50986999)(46102003)(74316001)(92566002)(19300405004)(16236675004)(2950100001)(76576001)(40100003)(19609705001)(122556002)(16601075003)(15975445007)(77156002)(62966003)(102836002)(2900100001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB391; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; Content-Type: multipart/alternative; boundary="_000_BN1PR04MB3922E9C26969A06812CC18AE2230BN1PR04MB392namprd_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Feb 2015 19:50:53.0529 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB391 Archived-At: Cc: "scim@ietf.org" , Michael Frost Subject: Re: [scim] SCIM schema IDs and JSON representation X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2015 19:51:02 -0000 --_000_BN1PR04MB3922E9C26969A06812CC18AE2230BN1PR04MB392namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PiBKdXN0IGEgbWlub3IgY29ycmVjdGlvbi4gVGhlcmUgd2FzIG5ldmVyIGFueSBzY2hlbWEgZm9y IHRoZSBSRVNUIEFQSSBpbiBTQ0lNIDEuDQoNCkFoIOKApiBJIHNlZSB3aGF0IHlvdeKAmXJlIHNh eWluZy4gIFlvdeKAmXJlIHJpZ2h0IOKAkyB0aGVyZSB3YXMgbm90IGEgVVJOIGZvciBhbnkgb2Yg b3VyIFJFU1QgQVBJIGVsZW1lbnRzLiAgSSB3YXMgbW9yZSByZWZlcnJpbmcgdG8gdGhlIFhTRCB0 aGF0IG91dGxpbmVkIHRoZSBSRVNUIEFQSSBlbGVtZW50cyBhbG9uZyB3aXRoIHRoZSBjb3JlIHJl c291cmNlcyAoaWUg4oCTIHRoaXMgZ3V5IC0gaHR0cHM6Ly9zY2ltLmdvb2dsZWNvZGUuY29tL3N2 bi90cnVuay93ZWJzaXRlL3NwZWNzL3NjaGVtYS9zY2ltLWNvcmUueHNkKS4NCg0KPiBUaGlzIGlz IG5vdGhpbmcgbGlrZSBhbiBYU0QuDQoNCkkgZGlzYWdyZWUgd2l0aCB0aGlzIHNvbWV3aGF0LiAg R3JhbnRlZCwgdGhlIHNjaGVtYSByZXByZXNlbnRhdGlvbiBkb2VzIGV4cHJlc3MgcnVsZXMgdGhh dCB0aGUgc2VydmVyIGV4cGVjdHMgKG11dGFiaWxpdHksIGV0Y+KApikuICBIb3dldmVyLCBpdCBh bHNvIHByb3ZpZGVzIHNpbWlsYXIgaW5mb3JtYXRpb24gdGhhdCBhbiBYU0QgcHJvdmlkZXMgYXJv dW5kIHdoYXQgZGF0YSBlbGVtZW50cyBhcmUgc3VwcG9ydGVkIChhdHRyaWJ1dGUgYW5kIHN1Yi1h dHRyaWJ1dGUgbmFtZXMpLCBkYXRhIHR5cGVzLCBhbmQgd2hldGhlciBpdCBpcyBtdWx0aXZhbHVl ZCBvciBub3QuDQoNCllvdeKAmXJlIHJpZ2h0LCB0aG91Z2gg4oCmIHRoZXJlIGFyZSBzb21lIHRo aW5ncyBpbiB0aGUgc2NoZW1hIHJlcHJlc2VudGF0aW9uIChlZyDigJMgbXV0YWJpbGl0eSkgdGhh dCBkb27igJl0IHJlYWxseSBtYWtlIGFueSBzZW5zZSB3aGVuIGFwcGxpZWQgdG8gQVBJIG1lc3Nh Z2VzLiAgSU1PLCBoYXZpbmcgc29tZSBzb21ldGhpbmcgY29kaWZpZWQgKG90aGVyIHRoYW4gdGhl IHRleHQgaW4gdGhlIEFQSSBzcGVjKSBhcm91bmQgdGhlIEFQSSBtZXNzYWdlcyB3b3VsZCBiZSBo ZWxwZnVsLiAgRm9yIGV4YW1wbGU6DQoNCnsNCiAgImlkIjogInVybjppZXRmOnBhcmFtczpzY2lt OmFwaTptZXNzYWdlczoyLjA6TGlzdFJlc3BvbnNlIiwNCiAgIm5hbWUiOiAiTGlzdCBSZXNwb25z ZSIsDQogICJhdHRyaWJ1dGVzIjogWw0KICAgIHsNCiAgICAgICJuYW1lIiA6ICJ0b3RhbFJlc3Vs dHMiLA0KICAgICAgInR5cGUiIDogImludGVnZXIiLA0KICAgICAgIm11bHRpVmFsdWVkIiA6IGZh bHNlLA0KICAgICAgImRlc2NyaXB0aW9uIiA6ICIuLi4iLA0KICAgIH0sDQogICAgew0KICAgICAg Im5hbWUiIDogInN0YXJ0SW5kZXgiLA0KICAgICAgInR5cGUiIDogImludGVnZXIiLA0KICAgICAg Im11bHRpVmFsdWVkIiA6IGZhbHNlLA0KICAgICAgImRlc2NyaXB0aW9uIiA6ICIuLi4iLA0KICAg IH0sDQogICAgew0KICAgICAgIm5hbWUiIDogIml0ZW1zUGVyUGFnZSIsDQogICAgICAidHlwZSIg OiAiaW50ZWdlciIsDQogICAgICAibXVsdGlWYWx1ZWQiIDogZmFsc2UsDQogICAgICAiZGVzY3Jp cHRpb24iIDogIi4uLiIsDQogICAgfSwNCiAgICB7DQogICAgICAibmFtZSIgOiAiUmVzb3VyY2Vz IiwNCiAgICAgICJ0eXBlIiA6ICJjb21wbGV4IiwNCiAgICAgICJtdWx0aVZhbHVlZCIgOiB0cnVl LA0KICAgICAgImRlc2NyaXB0aW9uIiA6ICIuLi4iLA0KICAgIH0NCiAgXQ0KfQ0KDQpBcyB5b3Ug bWVudGlvbmVkLCB0aGlzIGlzIGEgYml0IG9mIGEgaGFja2VkIHVwIHZlcnNpb24gb2Ygb3VyIG5v cm1hbCBzY2hlbWEuICBNYXliZSB0aGVyZSBpcyBhIGJldHRlciBvciBkaWZmZXJlbnQgd2F5IHRv IHJlcHJlc2VudCBpdD8NCg0KDQpGcm9tOiBQaGlsIEh1bnQgW21haWx0bzpwaGlsLmh1bnRAb3Jh Y2xlLmNvbV0NClNlbnQ6IEZyaWRheSwgRmVicnVhcnkgMTMsIDIwMTUgMTowMSBQTQ0KVG86IEtl bGx5IEdyaXp6bGUNCkNjOiBNaWNoYWVsIEZyb3N0OyBzY2ltQGlldGYub3JnDQpTdWJqZWN0OiBS ZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbg0KDQpLZWxs eSwNCg0KSnVzdCBhIG1pbm9yIGNvcnJlY3Rpb24uIFRoZXJlIHdhcyBuZXZlciBhbnkgc2NoZW1h IGZvciB0aGUgUkVTVCBBUEkgaW4gU0NJTSAxLg0KDQpUaGUgYWRkaXRpb24gb2Ygc2NoZW1hcyBm b3IgcmVxdWVzdC9yZXNwb25zZSBtZXNzYWdlcyBjYW1lIGFib3V0IGJlY2F1c2Ugb2YgSUFOQSBt aW1lLXR5cGUgcmVnaXN0cmF0aW9uIGFuZCBpdCBnaXZlcyB0aGUgYWJpbGl0eSB0byBwYXNzIFND SU0gbWVzc2FnZXMgaW5kZXBlbmRlbnRseSBvZiBIVFRQLiBVc2luZyDigJxzY2hlbWFz4oCdIGZv ciBib3RoIG1lc3NhZ2VzIGFuZCBkYXRhIG1hZGUgdGhlIHJlZ2lzdHJ5IG11Y2ggc2ltcGxlciB0 byBkZWZpbmUuIEJ1dCB0aGUgd2F5IHRoZXkgYXJlIHVzZWQgYXJlIHZhc3RseSBkaWZmZXJlbnQu DQoNCkZpbmFsbHksIHRoZSBTY2hlbWFzIGVuZHBvaW50IHRoYXQgd2UgZXhwb3NlIGlzIG5vdCBh IHNjaGVtYSBpbiB0aGUgc2Vuc2Ugb2YgWFNEcy4gSXQgZG9lcyBub3QgZGVzY3JpYmUgSlNPTiDi gJxzY2hlbWEiLiBJdCBkZXNjcmliZXMgc2VydmVyIGJlaGF2aW91cnMgYXJvdW5kIHNjaGVtYXMu IEZvciBleGFtcGxlLCBpcyBhbiBhdHRyaWJ1dGUgcmV0dXJuYWJsZSwgd2hhdOKAmXMgaXRzIG11 dGFiaWxpdHkuICAgVGhpcyBpcyBub3RoaW5nIGxpa2UgYW4gWFNELg0KDQpQaGlsDQoNCkBpbmRl cGVuZGVudGlkDQp3d3cuaW5kZXBlbmRlbnRpZC5jb208aHR0cDovL3d3dy5pbmRlcGVuZGVudGlk LmNvbT4NCnBoaWwuaHVudEBvcmFjbGUuY29tPG1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbT4N Cg0KT24gRmViIDEzLCAyMDE1LCBhdCA2OjU1IEFNLCBLZWxseSBHcml6emxlIDxrZWxseS5ncml6 emxlQHNhaWxwb2ludC5jb208bWFpbHRvOmtlbGx5LmdyaXp6bGVAc2FpbHBvaW50LmNvbT4+IHdy b3RlOg0KDQpNaWNoYWVsIOKApiBsZXQgbWUgbWFrZSBzdXJlIEkgdW5kZXJzdGFuZCB3aGF0IHlv dSBhcmUgbG9va2luZyBmb3IuICBZb3Ugd291bGQgbGlrZSBhIHNjaGVtYSByZXByZXNlbnRhdGlv biAoc3VjaCBhcyB3aGF0IGlzIGluY2x1ZGVkIGluIHNlY3Rpb24gOC43KSBmb3IgYWxsIHJlc291 cmNlcyBhbmQgbWVzc2FnZXMuICBJcyB0aGF0IHJpZ2h0Pw0KDQpJZiBzbywgdGhlbiBJIDEwMCUg YWdyZWUgdGhhdCB0aGlzIGlzIHVzZWZ1bC4gIEluIHRoZSBTQ0lNIDEuMCBzcGVjIChiYWNrIHdo ZW4gd2Ugc3VwcG9ydGVkIFhNTCBhcyBhIGRhdGEgZm9ybWF0KSB0aGVyZSB3YXMgYW4gWFNEIHRo YXQgZGlkIGV4YWN0bHkgd2hhdCB5b3UgYXJlIGxvb2tpbmcgZm9yIOKAkyBkZXNjcmliZWQgYm90 aCByZXNvdXJjZXMgYW5kIG1lc3NhZ2VzLiAgSSBhZ3JlZSB0aGF0IGhhdmluZyB0aGlzIGNvZGlm aWVzIHRoZSBydWxlcyBhbmQgcmVtb3ZlcyBzb21lIGFtYmlndWl0eS4gIEkgd291bGQgYmUgaW4g ZmF2b3Igb2YgYWRkaW5nIHNvbWV0aGluZyBsaWtlIHRoaXMgdG8gdGhlIFNDSU0gc3BlYy4NCg0K UmVnYXJkaW5nIHRoZSBQYXRjaE9wLCBpcyB0aGUgcHJvYmxlbSB0aGF0IHRoZSB2YWx1ZSBzdWIt YXR0cmlidXRlIGNvdWxkIGJlIGFueXRoaW5nIOKAkyBtdWx0aXZhbHVlZCBjb3VsZCBiZSB0cnVl IG9yIGZhbHNlLCB0aGVyZSBtYXkgb3IgbWF5IG5vdCBiZSBzdWItYXR0cmlidXRlcyAoaWUg4oCT IGl0IGNvdWxkIGJlIGNvbXBsZXgsIHdoaWNoIGlzIG5vdCB0ZWNobmljYWxseSBzdXBwb3J0ZWQp LCBhbmQgdGhlIHR5cGUgaXMgZGVwZW5kZW50IHVwb24gdGhlIGFjdHVhbCBhdHRyaWJ1dGUgdGhh dCB5b3UgYXJlIHJlcGxhY2luZz8gIFdpdGggdGhpcyBhbWJpZ3VpdHkgdGhlcmUgaXNu4oCZdCBh IGdvb2Qgd2F5IHRvIHJlcHJlc2VudCB0aGlzIGluIGEgc2NoZW1hIGN1cnJlbnRseS4NCg0KLS1L ZWxseQ0KDQoNCkZyb206IHNjaW0gW21haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJl aGFsZiBPZiBNaWNoYWVsIEZyb3N0DQpTZW50OiBUaHVyc2RheSwgRmVicnVhcnkgMTIsIDIwMTUg Njo0NSBQTQ0KVG86IFBoaWwgSHVudA0KQ2M6IHNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0 Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXBy ZXNlbnRhdGlvbg0KDQpIaSBQaGlsLA0KDQpOb3Qgc3VyZSB3aGF0IHlvdSBtZWFuIGJ5IGV4YW1w bGVzLiAgTXkgY29uY2VybiBpcyB0aGF0IGluIHRoZSBzY2hlbWEgZG9jLCBzZWN0aW9uIDguNyBw cm92aWRlcyBzY2hlbWEgcmVwcmVzZW50YXRpb24gZm9yIGNvcmUgdXNlci9ncm91cCBhbmQgZW50 ZXJwcmlzZSB1c2VyLiAgV2hhdCBhYm91dCBhbGwgdGhlIG90aGVyIHNjaGVtYXMgd2UgcmVmZXJl bmNlPyAgV2Ugc2hvdWxkIHByb3ZpZGUgc2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBldmVyeSBz Y2hlbWEgZGVmaW5lZCBpbiB0aGUgc3BlYy4gIEV2ZXJ5b25lIGltcGxlbWVudGluZyB0aGlzIHNw ZWMgd2lsbCBuZWVkIHRoZW0uICBXaHkgcHJvdmlkZSBqdXN0IHRocmVlIGFuZCBsZWF2ZSB0aGUg cmVzdCB1cCB0byBndWVzcyB3b3JrPyAgRXZlcnkgaW1wbGVtZW50YXRpb24gbmVlZHMgdG8gZG8g dmFsaWRhdGlvbiwgZXZlcnkgdmFsaWRhdGlvbiBuZWVkcyBhIHNjaGVtYSB0byB2YWxpZGF0ZSBh Z2FpbnN0LiAgU28gbXkgY29uY2VybiBpcyB0d29mb2xkLiAgRmlyc3QsIHdlIHJlZmVyZW5jZSBh IGJ1bmNoIG9mIHNjaGVtYXMgdGhhdCBldmVyeW9uZSBuZWVkcywgYnV0IHdlIGRvbuKAmXQgcHJv dmlkZSB0aGVtLiAgU2Vjb25kLCBzb21lIG9mIHRoZSBzY2hlbWFzIHdlIHJlZmVyZW5jZSAoc3Vj aCBhcyBwYXRjaE9wKSBjYW5ub3QgYmUgcmVwcmVzZW50ZWQgaW4gSlNPTiB1c2luZyBvdXIgb3du IGRlZmluaXRpb25zLg0KDQpJ4oCZbSBjZXJ0YWlubHkgT0sgd2l0aCBhbiBhcHBlbmRpeCBpbiB0 aGUgYXBpIGRvYyBmb3IgbWVzc2FnZSBzY2hlbWFzIGFuZCBhbiBhcHBlbmRpeCBpbiB0aGUgc2No ZW1hIGRvYyBmb3IgYWxsIG9mIHRoZSBlbnRpdHkgc2NoZW1hcy4gIE15IHBvaW50IGlzIGFsbCB0 aGVzZSBzY2hlbWFzIHNob3VsZCBleGlzdC4gIFdlIHJlZmVyZW5jZSB0aGVtLCB3ZSBkZXNjcmli ZSB0aGVtLCBidXQgd2Ugb25seSBwcm92aWRlIHRocmVlIG9mIHRoZW0uICBJdCBqdXN0IHNlZW1z IHdyb25nIHRvIG1lIChwZXJoYXBzIG15IG93biBzaG9ydGNvbWluZykgYnV0IHdl4oCZcmUgYXNr aW5nIHBlb3BsZSB0byBpbXBsZW1lbnQgU0NJTSBwYXRjaCwgdXNpbmcgYSBTQ0lNIHNjaGVtYSBk ZWZpbmVkIHJlcXVlc3QsIHRoYXQgd2UgZG8gbm90IHByb3ZpZGUsIGFuZCBjYW5ub3QgZGVmaW5l IHVzaW5nIHJ1bGVzIHdlIHNldCBmb3J0aCBpbiBzZWN0aW9uIDcgb2YgdGhlIHNjaGVtYSBkb2Mu DQoNCg0KU28gYm90dG9tIGxpbmUsIGFsbCBJ4oCZbSByZXF1ZXN0aW5nIGlzIHRoZSBKU09OIHJl cHJlc2VudGF0aW9uIG9mIHRoZSBTQ0lNIHNjaGVtYXMgd2UgcmVmZXJlbmNlLg0KDQoNCg0KVGhp cyBpcyBhIFNDSU0gc2NoZW1hIHJlZmVyZW5jZSwg4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFw aTptZXNzYWdlczoyLjA6UGF0Y2hPcOKAnCwgSSBmZWVsIHdlIHNob3VsZCBwcm92aWRlIHRoZSBK U09OIHJlcHJlc2VudGF0aW9uIGZvciBpdC4gIElmIHdlIGNhbuKAmXQgZG8gaXQsIG5vYm9keSBp bXBsZW1lbnRpbmcgdGhlIHNwZWMgY2FuIGVpdGhlci4gIEFsbCBvZiB0aGUgc2NoZW1hcyB3ZSBy ZWZlcmVuY2Ugc2hvdWxkIGJlIHByb3ZpZGVkIHVzaW5nIG91ciBvd24gZGVmaW5pdGlvbnMgc2V0 IGRvd24gaW4gc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgcmZjIChvciBlbmhhbmNlZCBpbiB0aGUg YXBpIGRvYywgdXNpbmcgc2VjdGlvbiA3IGFzIGEgYmFzZSkuICBGcmFua2x5LCBJ4oCZbSBkcmVh ZGluZyB0aGUgb3V0Y29tZSBvZiBhbGwgdGhpcyBiZWNhdXNlIEnigJl2ZSBhbHJlYWR5IHNwZW50 IGEgY291cGxlIG9mIG1vbnRocyBpbXBsZW1lbnRpbmcgcGF0Y2ggaW4gaXRzIGN1cnJlbnQgZm9y bSB3aXRoIG92ZXIgMTUwIHVuaXQgdGVzdHMgdG8gY29uZmlybSBpdCBkb2VzIHdoYXQgSSB0aGlu ayB0aGUgc3BlYyByZXF1aXJlcy4gIEJ1dCBzZXZlcmFsIG9mIG15IHBlZXJzIGhhdmUgY29tZSB0 byBtZSBhbmQgYXNrZWQgZm9yIHRoZXNlIHNjaGVtYSBkZWZpbml0aW9ucyAoaW4gSlNPTikgYW5k IGEgY291cGxlIGhhdmUgcG9pbnRlZCBvdXQgdGhhdCB0aGUgcGF0Y2ggcmVxdWVzdCBzY2hlbWEs IOKAnCB1cm46aWV0ZjpwYXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOlBhdGNoT3DigJwsIGNh bm5vdCBiZSByZXByZXNlbnRlZCB1c2luZyBzZWN0aW9uIDcgcnVsZXMgYW5kIHRoYXQgd2UgY2Fu bm90IGRvIHVwZnJvbnQgdmFsaWRhdGlvbiBvbiBwYXRjaCByZXF1ZXN0cyB0aGUgd2F5IHdlIGRv IGFsbCBvdGhlciBTQ0lNIHJlcXVlc3RzLiAgQW5kIGl04oCZcyB0cnVlLCB3ZSBjYW5ub3QgZG8g YW4gdXBmcm9udCB2YWxpZGF0aW9uIG9mIHBhdGNoIGFmdGVyIGl04oCZcyBwYXJzZWQgdGhlIHdh eSB3ZSBjYW4gYWxsIG90aGVyIHJlcXVlc3RzLiAgU2ltcGxlIGF0dHJpYnV0ZSB2YWxpZGF0aW9u IGlzIGltcG9zc2libGUgYmVjYXVzZSDigJx2YWx1ZeKAnSBkZXBlbmRzIG9uIHRoZSB0YXJnZXQg b2Yg4oCccGF0aOKAnSwgYW5kIHRoZXJlZm9yZSDigJx2YWx1ZeKAnSBjYW5ub3QgYmUgZGVmaW5l ZCBpbiBhIEpTT04gc2NoZW1hIHVzaW5nIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIGRvYy4NCg0K DQoNCkV2ZW4gaWYgd2UgY2Fu4oCZdCBmaXggcGF0Y2gsIGZvciB3aGF0ZXZlciByZWFzb24sIHdl IHNob3VsZCBwcm92aWRlIHRoZSByZXN0IG9mIHRoZSBzY2hlbWFzLCByZXByZXNlbnRlZCBpbiBK U09OIGZvcm1hdCwgZm9yIGJvdGggZG9jcy4NCg0KDQoNCi1tcmYNCg0KRnJvbTogUGhpbCBIdW50 DQpTZW50OiBUaHVyc2RheSwgRmVicnVhcnkgMTIsIDIwMTUgMTI6NTggUE0NClRvOiBNaWNoYWVs IEZyb3N0DQpDYzogc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBpZXRmLm9yZz4NClN1YmplY3Q6 IFJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBKU09OIHJlcHJlc2VudGF0aW9uDQoNCk1p Y2hhZWwsDQoNCkNhbiB5b3UgcHJvdmlkZSBleGFtcGxlcz8NCg0KVGhlIHNjaGVtYSBpbiB0aGUg QVBJIGhhcyB0byBleHRlbmQgdGhlIHJlZ2lzdHJ5IGRlZmluZSBpbiBjb3JlLiAgIEFzIGVkaXRv ciBJIHRoaW5rIGl0IHdvdWxkIGJlIGV2ZW4gbW9yZSBjb25mdXNpbmcgdG8gbWl4IGRhdGEgc2No ZW1hIGFuZCByZXF1ZXN0IHNjaGVtYSBpbiBhIHNpbmdsZSBkb2N1bWVudC4gSXQgYWxzbyBiZWNv bWVzIHByb2JsZW1hdGljIHdoZW4gc3BlY3MgY3Jvc3MgcmVmZXJlbmNlIGVhY2ggb3RoZXIuIElu c3RlYWQgdGhlIGRvY3VtZW50IGxheW91dCBpcyBzdWNoIHRoYXQgQVBJIGJ1aWxkcyBvbiBjb3Jl IHNjaGVtYS4NCg0KVGhlIGZvcm1hdCBpbiBQQVRDSCBjb21lcyBmcm9tIHRoZSBKU09OIFBhdGNo IFJGQy4NCg0KUGhpbA0KDQpPbiBGZWIgMTIsIDIwMTUsIGF0IDEyOjQ2LCBNaWNoYWVsIEZyb3N0 IDxtaWNoYWVsLmZyb3N0QG9yYWNsZS5jb208bWFpbHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNv bT4+IHdyb3RlOg0KDQouMDpSZXNvdXJjZVR5cGUNCg0KdXJuOmlldGY6cGFyYW1zOnNjaW06c2No ZW1hczpjb3JlOjINCg0K --_000_BN1PR04MB3922E9C26969A06812CC18AE2230BN1PR04MB392namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJ cGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtG b2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCnAuTXNvQWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2Lk1zb0FjZXRh dGUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRl eHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLmFw cGxlLXN0eWxlLXNwYW4NCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtc3R5bGUtc3Bhbjt9DQpzcGFu LkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRl ZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwg UHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xhczt9DQpzcGFuLkJhbGxvb25UZXh0 Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1w cmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWls eToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjINCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCglj b2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10eXBlOnBlcnNv bmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3 RDt9DQpzcGFuLkVtYWlsU3R5bGUyNA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXpl OjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFy Z2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpX b3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRp Zl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0 Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0Pjwv eG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUi IHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mZ3Q7 DQo8L3NwYW4+SnVzdCBhIG1pbm9yIGNvcnJlY3Rpb24uIFRoZXJlIHdhcyBuZXZlciBhbnkgc2No ZW1hIGZvciB0aGUgUkVTVCBBUEkgaW4gU0NJTSAxLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5BaCDigKYgSSBzZWUgd2hhdCB5b3Xi gJlyZSBzYXlpbmcuJm5ic3A7IFlvdeKAmXJlIHJpZ2h0IOKAkyB0aGVyZSB3YXMgbm90IGEgVVJO IGZvciBhbnkgb2Ygb3VyIFJFU1QgQVBJIGVsZW1lbnRzLiZuYnNwOyBJIHdhcyBtb3JlIHJlZmVy cmluZyB0byB0aGUgWFNEIHRoYXQgb3V0bGluZWQgdGhlIFJFU1QNCiBBUEkgZWxlbWVudHMgYWxv bmcgd2l0aCB0aGUgY29yZSByZXNvdXJjZXMgKGllIOKAkyB0aGlzIGd1eSAtIDxhIGhyZWY9Imh0 dHBzOi8vc2NpbS5nb29nbGVjb2RlLmNvbS9zdm4vdHJ1bmsvd2Vic2l0ZS9zcGVjcy9zY2hlbWEv c2NpbS1jb3JlLnhzZCI+DQpodHRwczovL3NjaW0uZ29vZ2xlY29kZS5jb20vc3ZuL3RydW5rL3dl YnNpdGUvc3BlY3Mvc2NoZW1hL3NjaW0tY29yZS54c2Q8L2E+KS48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZndDsNCjwv c3Bhbj5UaGlzIGlzIG5vdGhpbmcgbGlrZSBhbiBYU0QuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JIGRpc2FncmVlIHdp dGggdGhpcyBzb21ld2hhdC4mbmJzcDsgR3JhbnRlZCwgdGhlIHNjaGVtYSByZXByZXNlbnRhdGlv biBkb2VzIGV4cHJlc3MgcnVsZXMgdGhhdCB0aGUgc2VydmVyIGV4cGVjdHMgKG11dGFiaWxpdHks IGV0Y+KApikuJm5ic3A7IEhvd2V2ZXIsIGl0IGFsc28gcHJvdmlkZXMNCiBzaW1pbGFyIGluZm9y bWF0aW9uIHRoYXQgYW4gWFNEIHByb3ZpZGVzIGFyb3VuZCB3aGF0IGRhdGEgZWxlbWVudHMgYXJl IHN1cHBvcnRlZCAoYXR0cmlidXRlIGFuZCBzdWItYXR0cmlidXRlIG5hbWVzKSwgZGF0YSB0eXBl cywgYW5kIHdoZXRoZXIgaXQgaXMgbXVsdGl2YWx1ZWQgb3Igbm90LjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+WW914oCZ cmUgcmlnaHQsIHRob3VnaCDigKYgdGhlcmUgYXJlIHNvbWUgdGhpbmdzIGluIHRoZSBzY2hlbWEg cmVwcmVzZW50YXRpb24gKGVnIOKAkyBtdXRhYmlsaXR5KSB0aGF0IGRvbuKAmXQgcmVhbGx5IG1h a2UgYW55IHNlbnNlIHdoZW4gYXBwbGllZCB0byBBUEkgbWVzc2FnZXMuJm5ic3A7DQogSU1PLCBo YXZpbmcgc29tZSBzb21ldGhpbmcgY29kaWZpZWQgKG90aGVyIHRoYW4gdGhlIHRleHQgaW4gdGhl IEFQSSBzcGVjKSBhcm91bmQgdGhlIEFQSSBtZXNzYWdlcyB3b3VsZCBiZSBoZWxwZnVsLiZuYnNw OyBGb3IgZXhhbXBsZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0 OTdEIj57PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsgJnF1b3Q7aWQmcXVvdDs6ICZxdW90O3VybjppZXRmOnBh cmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6TGlzdFJlc3BvbnNlJnF1b3Q7LDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7ICZxdW90O25hbWUmcXVvdDs6ICZxdW90O0xpc3QgUmVzcG9uc2UmcXVvdDssPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0 OTdEIj4mbmJzcDsgJnF1b3Q7YXR0cmlidXRlcyZxdW90OzogWzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7IHs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVv dDtuYW1lJnF1b3Q7IDogJnF1b3Q7dG90YWxSZXN1bHRzJnF1b3Q7LDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O3R5cGUmcXVvdDsgOiAmcXVvdDtpbnRlZ2Vy JnF1b3Q7LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O211 bHRpVmFsdWVkJnF1b3Q7IDogZmFsc2UsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgJnF1b3Q7ZGVzY3JpcHRpb24mcXVvdDsgOiAmcXVvdDsuLi4mcXVvdDssPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0 OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsgfSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyB7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7bmFtZSZxdW90 OyA6ICZxdW90O3N0YXJ0SW5kZXgmcXVvdDssPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJnF1b3Q7dHlwZSZxdW90OyA6ICZxdW90O2ludGVnZXImcXVvdDssPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0 OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7bXVsdGlWYWx1ZWQmcXVv dDsgOiBmYWxzZSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVv dDtkZXNjcmlwdGlvbiZxdW90OyA6ICZxdW90Oy4uLiZxdW90Oyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZu YnNwOyZuYnNwOyB9LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7IHs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtuYW1lJnF1b3Q7IDogJnF1b3Q7aXRl bXNQZXJQYWdlJnF1b3Q7LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICZxdW90O3R5cGUmcXVvdDsgOiAmcXVvdDtpbnRlZ2VyJnF1b3Q7LDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O211bHRpVmFsdWVkJnF1b3Q7IDogZmFsc2Us PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7ZGVzY3JpcHRp b24mcXVvdDsgOiAmcXVvdDsuLi4mcXVvdDssPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsg fSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyB7PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7bmFtZSZxdW90OyA6ICZxdW90O1Jlc291cmNlcyZxdW90 Oyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDt0eXBlJnF1 b3Q7IDogJnF1b3Q7Y29tcGxleCZxdW90Oyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAmcXVvdDttdWx0aVZhbHVlZCZxdW90OyA6IHRydWUsPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7ZGVzY3JpcHRpb24mcXVvdDsgOiAmcXVv dDsuLi4mcXVvdDssPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7IF08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPn08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkFzIHlvdSBtZW50aW9uZWQsIHRoaXMgaXMgYSBi aXQgb2YgYSBoYWNrZWQgdXAgdmVyc2lvbiBvZiBvdXIgbm9ybWFsIHNjaGVtYS4mbmJzcDsgTWF5 YmUgdGhlcmUgaXMgYSBiZXR0ZXIgb3IgZGlmZmVyZW50IHdheSB0byByZXByZXNlbnQgaXQ/PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQg MGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IFBo aWwgSHVudCBbbWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tXQ0KPGJyPg0KPGI+U2VudDo8L2I+ IEZyaWRheSwgRmVicnVhcnkgMTMsIDIwMTUgMTowMSBQTTxicj4NCjxiPlRvOjwvYj4gS2VsbHkg R3JpenpsZTxicj4NCjxiPkNjOjwvYj4gTWljaGFlbCBGcm9zdDsgc2NpbUBpZXRmLm9yZzxicj4N CjxiPlN1YmplY3Q6PC9iPiBSZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXBy ZXNlbnRhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PktlbGx5LDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SnVz dCBhIG1pbm9yIGNvcnJlY3Rpb24uIFRoZXJlIHdhcyBuZXZlciBhbnkgc2NoZW1hIGZvciB0aGUg UkVTVCBBUEkgaW4gU0NJTSAxLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5UaGUgYWRkaXRpb24gb2Ygc2NoZW1hcyBmb3IgcmVxdWVzdC9yZXNw b25zZSBtZXNzYWdlcyBjYW1lIGFib3V0IGJlY2F1c2Ugb2YgSUFOQSBtaW1lLXR5cGUgcmVnaXN0 cmF0aW9uIGFuZCBpdCBnaXZlcyB0aGUgYWJpbGl0eSB0byBwYXNzIFNDSU0gbWVzc2FnZXMgaW5k ZXBlbmRlbnRseSBvZiBIVFRQLiBVc2luZyDigJxzY2hlbWFz4oCdIGZvciBib3RoIG1lc3NhZ2Vz IGFuZCBkYXRhIG1hZGUgdGhlIHJlZ2lzdHJ5IG11Y2gNCiBzaW1wbGVyIHRvIGRlZmluZS4gQnV0 IHRoZSB3YXkgdGhleSBhcmUgdXNlZCBhcmUgdmFzdGx5IGRpZmZlcmVudC48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RmluYWxseSwgdGhlIFNj aGVtYXMgZW5kcG9pbnQgdGhhdCB3ZSBleHBvc2UgaXMgbm90IGEgc2NoZW1hIGluIHRoZSBzZW5z ZSBvZiBYU0RzLiBJdCBkb2VzIG5vdCBkZXNjcmliZSBKU09OIOKAnHNjaGVtYSZxdW90Oy4gSXQg ZGVzY3JpYmVzIHNlcnZlciBiZWhhdmlvdXJzIGFyb3VuZCBzY2hlbWFzLiBGb3IgZXhhbXBsZSwg aXMgYW4gYXR0cmlidXRlIHJldHVybmFibGUsIHdoYXTigJlzIGl0cyBtdXRhYmlsaXR5LiAmbmJz cDsgVGhpcw0KIGlzIG5vdGhpbmcgbGlrZSBhbiBYU0QuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlBoaWw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+QGluZGVwZW5kZW50aWQ8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj48YSBocmVmPSJodHRwOi8vd3d3LmluZGVw ZW5kZW50aWQuY29tIj53d3cuaW5kZXBlbmRlbnRpZC5jb208L2E+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjpibGFjayI+PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIj5waGlsLmh1 bnRAb3JhY2xlLmNvbTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8YmxvY2tx dW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBGZWIgMTMsIDIwMTUsIGF0IDY6NTUgQU0sIEtlbGx5 IEdyaXp6bGUgJmx0OzxhIGhyZWY9Im1haWx0bzprZWxseS5ncml6emxlQHNhaWxwb2ludC5jb20i PmtlbGx5LmdyaXp6bGVAc2FpbHBvaW50LmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPk1pY2hhZWwg4oCmIGxldCBtZSBtYWtlIHN1cmUgSSB1bmRlcnN0 YW5kIHdoYXQgeW91IGFyZSBsb29raW5nIGZvci4mbmJzcDsgWW91IHdvdWxkIGxpa2UgYSBzY2hl bWEgcmVwcmVzZW50YXRpb24gKHN1Y2ggYXMgd2hhdCBpcyBpbmNsdWRlZCBpbiBzZWN0aW9uIDgu NykgZm9yIGFsbA0KIHJlc291cmNlcyBhbmQgbWVzc2FnZXMuJm5ic3A7IElzIHRoYXQgcmlnaHQ/ PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5JZiBzbywgdGhlbiBJIDEwMCUgYWdyZWUgdGhhdCB0aGlzIGlzIHVzZWZ1bC4m bmJzcDsgSW4gdGhlIFNDSU0gMS4wIHNwZWMgKGJhY2sgd2hlbiB3ZSBzdXBwb3J0ZWQgWE1MIGFz IGEgZGF0YSBmb3JtYXQpIHRoZXJlIHdhcyBhbiBYU0QgdGhhdCBkaWQgZXhhY3RseSB3aGF0IHlv dQ0KIGFyZSBsb29raW5nIGZvciDigJMgZGVzY3JpYmVkIGJvdGggcmVzb3VyY2VzIGFuZCBtZXNz YWdlcy4mbmJzcDsgSSBhZ3JlZSB0aGF0IGhhdmluZyB0aGlzIGNvZGlmaWVzIHRoZSBydWxlcyBh bmQgcmVtb3ZlcyBzb21lIGFtYmlndWl0eS4mbmJzcDsgSSB3b3VsZCBiZSBpbiBmYXZvciBvZiBh ZGRpbmcgc29tZXRoaW5nIGxpa2UgdGhpcyB0byB0aGUgU0NJTSBzcGVjLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+UmVn YXJkaW5nIHRoZSBQYXRjaE9wLCBpcyB0aGUgcHJvYmxlbSB0aGF0IHRoZSB2YWx1ZSBzdWItYXR0 cmlidXRlIGNvdWxkIGJlIGFueXRoaW5nIOKAkyBtdWx0aXZhbHVlZCBjb3VsZCBiZSB0cnVlIG9y IGZhbHNlLCB0aGVyZSBtYXkgb3IgbWF5IG5vdCBiZSBzdWItYXR0cmlidXRlcw0KIChpZSDigJMg aXQgY291bGQgYmUgY29tcGxleCwgd2hpY2ggaXMgbm90IHRlY2huaWNhbGx5IHN1cHBvcnRlZCks IGFuZCB0aGUgdHlwZSBpcyBkZXBlbmRlbnQgdXBvbiB0aGUgYWN0dWFsIGF0dHJpYnV0ZSB0aGF0 IHlvdSBhcmUgcmVwbGFjaW5nPyZuYnNwOyBXaXRoIHRoaXMgYW1iaWd1aXR5IHRoZXJlIGlzbuKA mXQgYSBnb29kIHdheSB0byByZXByZXNlbnQgdGhpcyBpbiBhIHNjaGVtYSBjdXJyZW50bHkuPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj4tLUtlbGx5PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OyI+IHNjaW0gWzxhIGhyZWY9Im1haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5v cmciPm1haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+T24gQmVoYWxmIE9mIDwv Yj5NaWNoYWVsIEZyb3N0PGJyPg0KPGI+U2VudDo8L2I+IFRodXJzZGF5LCBGZWJydWFyeSAxMiwg MjAxNSA2OjQ1IFBNPGJyPg0KPGI+VG86PC9iPiBQaGlsIEh1bnQ8YnI+DQo8Yj5DYzo8L2I+IDxh IGhyZWY9Im1haWx0bzpzY2ltQGlldGYub3JnIj5zY2ltQGlldGYub3JnPC9hPjxicj4NCjxiPlN1 YmplY3Q6PC9iPiBSZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRh dGlvbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBQaGlsLA0KPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5Ob3Qgc3VyZSB3aGF0IHlvdSBtZWFuIGJ5IGV4YW1wbGVzLiZuYnNwOyBNeSBjb25jZXJuIGlz IHRoYXQgaW4gdGhlIHNjaGVtYSBkb2MsIHNlY3Rpb24gOC43IHByb3ZpZGVzIHNjaGVtYSByZXBy ZXNlbnRhdGlvbiBmb3IgY29yZSB1c2VyL2dyb3VwIGFuZCBlbnRlcnByaXNlIHVzZXIuJm5ic3A7 DQogV2hhdCBhYm91dCBhbGwgdGhlIG90aGVyIHNjaGVtYXMgd2UgcmVmZXJlbmNlPyZuYnNwOyBX ZSBzaG91bGQgcHJvdmlkZSBzY2hlbWEgcmVwcmVzZW50YXRpb24gZm9yIGV2ZXJ5IHNjaGVtYSBk ZWZpbmVkIGluIHRoZSBzcGVjLiZuYnNwOyBFdmVyeW9uZSBpbXBsZW1lbnRpbmcgdGhpcyBzcGVj IHdpbGwgbmVlZCB0aGVtLiZuYnNwOyBXaHkgcHJvdmlkZSBqdXN0IHRocmVlIGFuZCBsZWF2ZSB0 aGUgcmVzdCB1cCB0byBndWVzcyB3b3JrPyZuYnNwOyBFdmVyeSBpbXBsZW1lbnRhdGlvbg0KIG5l ZWRzIHRvIGRvIHZhbGlkYXRpb24sIGV2ZXJ5IHZhbGlkYXRpb24gbmVlZHMgYSBzY2hlbWEgdG8g dmFsaWRhdGUgYWdhaW5zdC4mbmJzcDsgU28gbXkgY29uY2VybiBpcyB0d29mb2xkLiZuYnNwOyBG aXJzdCwgd2UgcmVmZXJlbmNlIGEgYnVuY2ggb2Ygc2NoZW1hcyB0aGF0IGV2ZXJ5b25lIG5lZWRz LCBidXQgd2UgZG9u4oCZdCBwcm92aWRlIHRoZW0uJm5ic3A7IFNlY29uZCwgc29tZSBvZiB0aGUg c2NoZW1hcyB3ZSByZWZlcmVuY2UgKHN1Y2ggYXMgcGF0Y2hPcCkgY2Fubm90DQogYmUgcmVwcmVz ZW50ZWQgaW4gSlNPTiB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zLjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SeKAmW0g Y2VydGFpbmx5IE9LIHdpdGggYW4gYXBwZW5kaXggaW4gdGhlIGFwaSBkb2MgZm9yIG1lc3NhZ2Ug c2NoZW1hcyBhbmQgYW4gYXBwZW5kaXggaW4gdGhlIHNjaGVtYSBkb2MgZm9yIGFsbCBvZiB0aGUg ZW50aXR5IHNjaGVtYXMuJm5ic3A7IE15IHBvaW50IGlzIGFsbCB0aGVzZQ0KIHNjaGVtYXMgc2hv dWxkIGV4aXN0LiZuYnNwOyBXZSByZWZlcmVuY2UgdGhlbSwgd2UgZGVzY3JpYmUgdGhlbSwgYnV0 IHdlIG9ubHkgcHJvdmlkZSB0aHJlZSBvZiB0aGVtLiZuYnNwOyBJdCBqdXN0IHNlZW1zIHdyb25n IHRvIG1lIChwZXJoYXBzIG15IG93biBzaG9ydGNvbWluZykgYnV0IHdl4oCZcmUgYXNraW5nIHBl b3BsZSB0byBpbXBsZW1lbnQgU0NJTSBwYXRjaCwgdXNpbmcgYSBTQ0lNIHNjaGVtYSBkZWZpbmVk IHJlcXVlc3QsIHRoYXQgd2UgZG8gbm90IHByb3ZpZGUsDQogYW5kIGNhbm5vdCBkZWZpbmUgdXNp bmcgcnVsZXMgd2Ugc2V0IGZvcnRoIGluIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIGRvYy48L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+U28gYm90dG9tIGxpbmUsIGFsbCBJ4oCZbSByZXF1ZXN0 aW5nIGlzIHRoZSBKU09OIHJlcHJlc2VudGF0aW9uIG9mIHRoZSBTQ0lNIHNjaGVtYXMgd2UgcmVm ZXJlbmNlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1i ZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJl Zm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5U aGlzIGlzIGEgU0NJTSBzY2hlbWEgcmVmZXJlbmNlLCDigJwgdXJuOmlldGY6cGFyYW1zOnNjaW06 YXBpOm1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBJIGZlZWwgd2Ugc2hvdWxkIHByb3ZpZGUgdGhl IEpTT04gcmVwcmVzZW50YXRpb24gZm9yIGl0LiAmbmJzcDtJZiB3ZSBjYW7igJl0IGRvIGl0LCBu b2JvZHkgaW1wbGVtZW50aW5nIHRoZSBzcGVjIGNhbiBlaXRoZXIuJm5ic3A7IEFsbCBvZiB0aGUg c2NoZW1hcyB3ZSByZWZlcmVuY2Ugc2hvdWxkIGJlIHByb3ZpZGVkIHVzaW5nIG91ciBvd24gZGVm aW5pdGlvbnMgc2V0IGRvd24gaW4gc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgcmZjIChvciBlbmhh bmNlZCBpbiB0aGUgYXBpIGRvYywgdXNpbmcgc2VjdGlvbiA3IGFzIGEgYmFzZSkuJm5ic3A7IEZy YW5rbHksIEnigJltIGRyZWFkaW5nIHRoZSBvdXRjb21lIG9mIGFsbCB0aGlzIGJlY2F1c2UgSeKA mXZlIGFscmVhZHkgc3BlbnQgYSBjb3VwbGUgb2YgbW9udGhzIGltcGxlbWVudGluZyBwYXRjaCBp biBpdHMgY3VycmVudCBmb3JtIHdpdGggb3ZlciAxNTAgdW5pdCB0ZXN0cyB0byBjb25maXJtIGl0 IGRvZXMgd2hhdCBJIHRoaW5rIHRoZSBzcGVjIHJlcXVpcmVzLiZuYnNwOyBCdXQgc2V2ZXJhbCBv ZiBteSBwZWVycyBoYXZlIGNvbWUgdG8gbWUgYW5kIGFza2VkIGZvciB0aGVzZSBzY2hlbWEgZGVm aW5pdGlvbnMgKGluIEpTT04pIGFuZCBhIGNvdXBsZSBoYXZlIHBvaW50ZWQgb3V0IHRoYXQgdGhl IHBhdGNoIHJlcXVlc3Qgc2NoZW1hLCDigJwgdXJuOmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3Nh Z2VzOjIuMDpQYXRjaE9w4oCcLCBjYW5ub3QgYmUgcmVwcmVzZW50ZWQgdXNpbmcgc2VjdGlvbiA3 IHJ1bGVzIGFuZCB0aGF0IHdlIGNhbm5vdCBkbyB1cGZyb250IHZhbGlkYXRpb24gb24gcGF0Y2gg cmVxdWVzdHMgdGhlIHdheSB3ZSBkbyBhbGwgb3RoZXIgU0NJTSByZXF1ZXN0cy4mbmJzcDsgQW5k IGl04oCZcyB0cnVlLCB3ZSBjYW5ub3QgZG8gYW4gdXBmcm9udCB2YWxpZGF0aW9uIG9mIHBhdGNo IGFmdGVyIGl04oCZcyBwYXJzZWQgdGhlIHdheSB3ZSBjYW4gYWxsIG90aGVyIHJlcXVlc3RzLiZu YnNwOyBTaW1wbGUgYXR0cmlidXRlIHZhbGlkYXRpb24gaXMgaW1wb3NzaWJsZSBiZWNhdXNlIOKA nHZhbHVl4oCdIGRlcGVuZHMgb24gdGhlIHRhcmdldCBvZiDigJxwYXRo4oCdLCBhbmQgdGhlcmVm b3JlIOKAnHZhbHVl4oCdIGNhbm5vdCBiZSBkZWZpbmVkIGluIGEgSlNPTiBzY2hlbWEgdXNpbmcg c2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgZG9jLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHBy ZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJl IHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5FdmVuIGlmIHdlIGNhbuKAmXQgZml4IHBhdGNoLCBmb3Igd2hh dGV2ZXIgcmVhc29uLCB3ZSBzaG91bGQgcHJvdmlkZSB0aGUgcmVzdCBvZiB0aGUgc2NoZW1hcywg cmVwcmVzZW50ZWQgaW4gSlNPTiBmb3JtYXQsIGZvciBib3RoIGRvY3MuPC9zcGFuPjxvOnA+PC9v OnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPi1tcmY8L3NwYW4+PG86cD48L286cD48 L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 OyI+IFBoaWwgSHVudA0KPGJyPg0KPGI+U2VudDo8L2I+IFRodXJzZGF5LCBGZWJydWFyeSAxMiwg MjAxNSAxMjo1OCBQTTxicj4NCjxiPlRvOjwvYj4gTWljaGFlbCBGcm9zdDxicj4NCjxiPkNjOjwv Yj4gPGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciPnNjaW1AaWV0Zi5vcmc8L2E+PGJyPg0K PGI+U3ViamVjdDo8L2I+IFJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBKU09OIHJlcHJl c2VudGF0aW9uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk1pY2hhZWwsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkNhbiB5b3UgcHJvdmlkZSBleGFtcGxlcz88bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIHNjaGVtYSBpbiB0aGUgQVBJ IGhhcyB0byBleHRlbmQgdGhlIHJlZ2lzdHJ5IGRlZmluZSBpbiBjb3JlLiAmbmJzcDsgQXMgZWRp dG9yIEkgdGhpbmsgaXQgd291bGQgYmUgZXZlbiBtb3JlIGNvbmZ1c2luZyB0byBtaXggZGF0YSBz Y2hlbWEgYW5kIHJlcXVlc3Qgc2NoZW1hIGluIGEgc2luZ2xlIGRvY3VtZW50LiBJdCBhbHNvIGJl Y29tZXMgcHJvYmxlbWF0aWMgd2hlbiBzcGVjcyBjcm9zcyByZWZlcmVuY2UgZWFjaA0KIG90aGVy LiBJbnN0ZWFkIHRoZSBkb2N1bWVudCBsYXlvdXQgaXMgc3VjaCB0aGF0IEFQSSBidWlsZHMgb24g Y29yZSBzY2hlbWEuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlRoZSBmb3JtYXQgaW4gUEFUQ0ggY29tZXMgZnJvbSB0aGUgSlNPTiBQ YXRjaCBSRkMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48YnI+DQpQaGlsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCk9uIEZl YiAxMiwgMjAxNSwgYXQgMTI6NDYsIE1pY2hhZWwgRnJvc3QgJmx0OzxhIGhyZWY9Im1haWx0bzpt aWNoYWVsLmZyb3N0QG9yYWNsZS5jb20iPm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbTwvYT4mZ3Q7 IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWst YmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPi4wOlJlc291cmNl VHlwZTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZv cmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+dXJuOmlldGY6cGFyYW1z OnNjaW06c2NoZW1hczpjb3JlOjI8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90 ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_BN1PR04MB3922E9C26969A06812CC18AE2230BN1PR04MB392namprd_-- From nobody Fri Feb 13 12:29:31 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BC641A0387 for ; Fri, 13 Feb 2015 12:29:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l7rlj5nhD5Md for ; Fri, 13 Feb 2015 12:29:27 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61A251A1A14 for ; Fri, 13 Feb 2015 12:29:21 -0800 (PST) Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1DKTKRO025167 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 13 Feb 2015 20:29:20 GMT Received: from aserv0122.oracle.com (aserv0122.oracle.com [141.146.126.236]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1DKTJw7026842 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 13 Feb 2015 20:29:20 GMT Received: from abhmp0010.oracle.com (abhmp0010.oracle.com [141.146.116.16]) by aserv0122.oracle.com (8.13.8/8.13.8) with ESMTP id t1DKTJx6004680; Fri, 13 Feb 2015 20:29:19 GMT MIME-Version: 1.0 Message-ID: <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> Date: Fri, 13 Feb 2015 12:29:12 -0800 (PST) From: Michael Frost Sender: Michael Frost To: Kelly Grizzle , Phil Hunt References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> In-Reply-To: X-Priority: 3 X-Mailer: Oracle Beehive Extensions for Outlook 2.0.1.8.2 (807160) [OL 12.0.6691.5000 (x86)] Content-Type: multipart/alternative; boundary="__1423859354163301919abhmp0010.oracle.com" X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Archived-At: Cc: scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2015 20:29:30 -0000 --__1423859354163301919abhmp0010.oracle.com Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Yes Kelly, you are correct.=C2=A0 I was looking for schema representation f= or all resources and messages.=C2=A0 You also correctly identified the issu= e I was trying to raise with regards to PatchOp.=C2=A0 Thanks for taking a = look. =C2=A0 -mrf =C2=A0 From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com]=20 Sent: Friday, February 13, 2015 6:56 AM To: Michael Frost; Phil Hunt Cc: scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation =C2=A0 Michael =E2=80=A6 let me make sure I understand what you are looking for.= =C2=A0 You would like a schema representation (such as what is included in = section 8.7) for all resources and messages.=C2=A0 Is that right? =C2=A0 If so, then I 100% agree that this is useful.=C2=A0 In the SCIM 1.0 spec (b= ack when we supported XML as a data format) there was an XSD that did exact= ly what you are looking for =E2=80=93 described both resources and messages= .=C2=A0 I agree that having this codifies the rules and removes some ambigu= ity.=C2=A0 I would be in favor of adding something like this to the SCIM sp= ec. =C2=A0 Regarding the PatchOp, is the problem that the value sub-attribute could be= anything =E2=80=93 multivalued could be true or false, there may or may no= t be sub-attributes (ie =E2=80=93 it could be complex, which is not technic= ally supported), and the type is dependent upon the actual attribute that y= ou are replacing?=C2=A0 With this ambiguity there isn=E2=80=99t a good way = to represent this in a schema currently. =C2=A0 --Kelly =C2=A0 =C2=A0 From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael Frost Sent: Thursday, February 12, 2015 6:45 PM To: Phil Hunt Cc: HYPERLINK "mailto:scim@ietf.org"scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation =C2=A0 Hi Phil,=20 =C2=A0 Not sure what you mean by examples.=C2=A0 My concern is that in the schema = doc, section 8.7 provides schema representation for core user/group and ent= erprise user.=C2=A0 What about all the other schemas we reference?=C2=A0 We= should provide schema representation for every schema defined in the spec.= =C2=A0 Everyone implementing this spec will need them.=C2=A0 Why provide ju= st three and leave the rest up to guess work?=C2=A0 Every implementation ne= eds to do validation, every validation needs a schema to validate against.= =C2=A0 So my concern is twofold.=C2=A0 First, we reference a bunch of schem= as that everyone needs, but we don=E2=80=99t provide them.=C2=A0 Second, so= me of the schemas we reference (such as patchOp) cannot be represented in J= SON using our own definitions. =C2=A0 I=E2=80=99m certainly OK with an appendix in the api doc for message schema= s and an appendix in the schema doc for all of the entity schemas.=C2=A0 My= point is all these schemas should exist.=C2=A0 We reference them, we descr= ibe them, but we only provide three of them.=C2=A0 It just seems wrong to m= e (perhaps my own shortcoming) but we=E2=80=99re asking people to implement= SCIM patch, using a SCIM schema defined request, that we do not provide, a= nd cannot define using rules we set forth in section 7 of the schema doc. =C2=A0 So bottom line, all I=E2=80=99m requesting is the JSON representation of th= e SCIM schemas we reference. =C2=A0 This is a SCIM schema reference, =E2=80=9C urn:ietf:params:scim:api:message= s:2.0:PatchOp=E2=80=9C, I feel we should provide the JSON representation fo= r it. =C2=A0If we can=E2=80=99t do it, nobody implementing the spec can eit= her.=C2=A0 All of the schemas we reference should be provided using our own= definitions set down in section 7 of the schema rfc (or enhanced in the ap= i doc, using section 7 as a base).=C2=A0 Frankly, I=E2=80=99m dreading the = outcome of all this because I=E2=80=99ve already spent a couple of months i= mplementing patch in its current form with over 150 unit tests to confirm i= t does what I think the spec requires.=C2=A0 But several of my peers have c= ome to me and asked for these schema definitions (in JSON) and a couple hav= e pointed out that the patch request schema, =E2=80=9C urn:ietf:params:scim= :api:messages:2.0:PatchOp=E2=80=9C, cannot be represented using section 7 r= ules and that we cannot do upfront validation on patch requests the way we = do all other SCIM requests.=C2=A0 And it=E2=80=99s true, we cannot do an up= front validation of patch after it=E2=80=99s parsed the way we can all othe= r requests.=C2=A0 Simple attribute validation is impossible because =E2=80= =9Cvalue=E2=80=9D depends on the target of =E2=80=9Cpath=E2=80=9D, and ther= efore =E2=80=9Cvalue=E2=80=9D cannot be defined in a JSON schema using sect= ion 7 of the schema doc. =C2=A0 Even if we can=E2=80=99t fix patch, for whatever reason, we should provide = the rest of the schemas, represented in JSON format, for both docs. =C2=A0 -mrf =C2=A0 From: Phil Hunt=20 Sent: Thursday, February 12, 2015 12:58 PM To: Michael Frost Cc: HYPERLINK "mailto:scim@ietf.org"scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation =C2=A0 Michael, =C2=A0 Can you provide examples? =C2=A0 The schema in the API has to extend the registry define in core. =C2=A0 As = editor I think it would be even more confusing to mix data schema and reque= st schema in a single document. It also becomes problematic when specs cros= s reference each other. Instead the document layout is such that API builds= on core schema.=C2=A0 =C2=A0 The format in PATCH comes from the JSON Patch RFC.=C2=A0 Phil On Feb 12, 2015, at 12:46, Michael Frost wrote: .0:ResourceType urn:ietf:params:scim:schemas:core:2 --__1423859354163301919abhmp0010.oracle.com Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Yes Kelly= , you are correct.=C2=A0 I was looking for schema representation for all re= sources and messages.=C2=A0 You also correctly identified the issue I was t= rying to raise with regards to PatchOp.=C2=A0 Thanks for taking a look.

 

<= p class=3DMsoNormal>-mrf

<= span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F= 497D'> 

From: Ke= lly Grizzle [mailto:kelly.grizzle@sailpoint.com]
Sent: Friday, F= ebruary 13, 2015 6:56 AM
To: Michael Frost; Phil Hunt
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs and JSON rep= resentation

&nbs= p;

Michael =E2=80=A6 let me make sure = I understand what you are looking for.  You would like a schema repres= entation (such as what is included in section 8.7) for all resources and me= ssages.  Is that right?

 

If so, then I 10= 0% agree that this is useful.  In the SCIM 1.0 spec (back when we supp= orted XML as a data format) there was an XSD that did exactly what you are = looking for =E2=80=93 described both resources and messages.  I agree = that having this codifies the rules and removes some ambiguity.  I wou= ld be in favor of adding something like this to the SCIM spec.

 

Regarding the PatchOp, is the problem that the value su= b-attribute could be anything =E2=80=93 multivalued could be true or false,= there may or may not be sub-attributes (ie =E2=80=93 it could be complex, = which is not technically supported), and the type is dependent upon the act= ual attribute that you are replacing?  With this ambiguity there isn= =E2=80=99t a good way to represent this in a schema currently.

 

--Kelly

 

 =

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael Frost
Sent: Thursday, February 12, 2015 6:45 PM
To= : Phil Hunt
Cc: scim@ietf.or= g
Subject: Re: [scim] SCIM schema IDs and JSON representation=

 

Hi Phil,

 

Not = sure what you mean by examples.  My concern is that in the schema doc,= section 8.7 provides schema representation for core user/group and enterpr= ise user.  What about all the other schemas we reference?  We sho= uld provide schema representation for every schema defined in the spec.&nbs= p; Everyone implementing this spec will need them.  Why provide just t= hree and leave the rest up to guess work?  Every implementation needs = to do validation, every validation needs a schema to validate against. = ; So my concern is twofold.  First, we reference a bunch of schemas th= at everyone needs, but we don=E2=80=99t provide them.  Second, some of= the schemas we reference (such as patchOp) cannot be represented in JSON u= sing our own definitions.

=  

I=E2=80=99m certain= ly OK with an appendix in the api doc for message schemas and an appendix i= n the schema doc for all of the entity schemas.  My point is all these= schemas should exist.  We reference them, we describe them, but we on= ly provide three of them.  It just seems wrong to me (perhaps my own s= hortcoming) but we=E2=80=99re asking people to implement SCIM patch, using = a SCIM schema defined request, that we do not provide, and cannot define us= ing rules we set forth in section 7 of the schema doc.

 

So bottom line, all I=E2=80=99m requesting is =
the JSON representation of the SCIM schemas we reference.=

 
This is a SCIM schem=
a reference, =E2=80=9C urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=
=9C, I feel we should provide the JSON representation for it.  If we c=
an=E2=80=99t do it, nobody implementing the spec can either.  All of t=
he schemas we reference should be provided using our own definitions set do=
wn in section 7 of the schema rfc (or enhanced in the api doc, using sectio=
n 7 as a base).  Frankly, I=E2=80=99m dreading the outcome of all this=
 because I=E2=80=99ve already spent a couple of months implementing patch i=
n its current form with over 150 unit tests to confirm it does what I think=
 the spec requires.  But several of my peers have come to me and asked=
 for these schema definitions (in JSON) and a couple have pointed out that =
the patch request schema, =E2=80=9C urn:ietf:params:scim:api:messages:2.0:P=
atchOp=E2=80=9C, cannot be represented using section 7 rules and that we ca=
nnot do upfront validation on patch requests the way we do all other SCIM r=
equests.  And it=E2=80=99s true, we cannot do an upfront validation of=
 patch after it=E2=80=99s parsed the way we can all other requests.  S=
imple attribute validation is impossible because =E2=80=9Cvalue=E2=80=9D de=
pends on the target of =E2=80=9Cpath=E2=80=9D, and therefore =E2=80=9Cvalue=
=E2=80=9D cannot be defined in a JSON schema using section 7 of the schema =
doc.
=
 
Even if we can=E2=80=99t fix patch, for whatever reason, we should provid=
e the rest of the schemas, represented in JSON format, for both docs.<=
/o:p>
 =
;
-mrf

 

From: Phil Hunt
Sent: Thursday= , February 12, 2015 12:58 PM
To: Michael Frost
Cc: scim@ietf.org
Subject: Re: [scim= ] SCIM schema IDs and JSON representation

=

 

Michael= ,

 

=

Can you provide examples?

 

The schema in the API has to extend the registry define in core.   As= editor I think it would be even more confusing to mix data schema and requ= est schema in a single document. It also becomes problematic when specs cro= ss reference each other. Instead the document layout is such that API build= s on core schema. 

=  

The format in PATCH comes f= rom the JSON Patch RFC. 


Phil


On Feb 12, 2015, at 12:46, Michael Frost <michael.frost@oracle.com> wrote:<= /o:p>

<= pre style=3D'page-break-before:always'>.0:ResourceType
urn:ietf:params:s=
cim:schemas:core:2
--__1423859354163301919abhmp0010.oracle.com-- From nobody Fri Feb 13 13:08:38 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E7871A1A2C for ; Fri, 13 Feb 2015 13:08:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l0EceDbS7odR for ; Fri, 13 Feb 2015 13:08:10 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A5DE1A1A1C for ; Fri, 13 Feb 2015 13:08:10 -0800 (PST) Received: from acsinet21.oracle.com (acsinet21.oracle.com [141.146.126.237]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1DL88wa029438 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 13 Feb 2015 21:08:09 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by acsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1DL87rd020789 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Fri, 13 Feb 2015 21:08:08 GMT Received: from abhmp0009.oracle.com (abhmp0009.oracle.com [141.146.116.15]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1DL87TT015425; Fri, 13 Feb 2015 21:08:07 GMT Received: from [192.168.1.9] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 13 Feb 2015 13:08:06 -0800 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) Content-Type: multipart/alternative; boundary="Apple-Mail=_50B40D3E-67FC-45BA-96FE-F849A2980943" From: Phil Hunt X-Priority: 3 In-Reply-To: <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> Date: Fri, 13 Feb 2015 13:08:05 -0800 Message-Id: <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> To: Michael Frost X-Mailer: Apple Mail (2.2070.6) X-Source-IP: acsinet21.oracle.com [141.146.126.237] Archived-At: Cc: scim@ietf.org, Kelly Grizzle Subject: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2015 21:08:22 -0000 --Apple-Mail=_50B40D3E-67FC-45BA-96FE-F849A2980943 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 With the patch operation, the contents of =E2=80=9Cvalue=E2=80=9D is = currently driven by the =E2=80=9Cpath=E2=80=9D attribute. In other = words in a normal JSON structure, the Patch path attribute describes the = left half of a name value pair, and the =E2=80=9Cvalue=E2=80=9D = describes the right half. So if =E2=80=9Cpath" points to a complex attribute, then =E2=80=9Cvalue=E2= =80=9D MUST be a JSON object of one or more sub-attributes. If path = describes a simple attribute, than the corresponding value must be a = boolean, string depending on the schema of the attribute described by = =E2=80=9Cpath=E2=80=9D. SCIM patch is based on and follows the same design as for RFC6902 (JSON = Patch). The only difference is we decided to limit the number of = operation types and to use filters in paths rather than array indexed = access based on JSON Pointers (RFC6901). Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 13, 2015, at 12:29 PM, Michael Frost = wrote: >=20 > Yes Kelly, you are correct. I was looking for schema representation = for all resources and messages. You also correctly identified the issue = I was trying to raise with regards to PatchOp. Thanks for taking a = look. > =20 > -mrf > =20 > From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com]=20 > Sent: Friday, February 13, 2015 6:56 AM > To: Michael Frost; Phil Hunt > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Michael =E2=80=A6 let me make sure I understand what you are looking = for. You would like a schema representation (such as what is included = in section 8.7) for all resources and messages. Is that right? > =20 > If so, then I 100% agree that this is useful. In the SCIM 1.0 spec = (back when we supported XML as a data format) there was an XSD that did = exactly what you are looking for =E2=80=93 described both resources and = messages. I agree that having this codifies the rules and removes some = ambiguity. I would be in favor of adding something like this to the = SCIM spec. > =20 > Regarding the PatchOp, is the problem that the value sub-attribute = could be anything =E2=80=93 multivalued could be true or false, there = may or may not be sub-attributes (ie =E2=80=93 it could be complex, = which is not technically supported), and the type is dependent upon the = actual attribute that you are replacing? With this ambiguity there = isn=E2=80=99t a good way to represent this in a schema currently. > =20 > --Kelly > =20 > =20 > From: scim [mailto:scim-bounces@ietf.org = ] On Behalf Of Michael Frost > Sent: Thursday, February 12, 2015 6:45 PM > To: Phil Hunt > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Hi Phil, > =20 > Not sure what you mean by examples. My concern is that in the schema = doc, section 8.7 provides schema representation for core user/group and = enterprise user. What about all the other schemas we reference? We = should provide schema representation for every schema defined in the = spec. Everyone implementing this spec will need them. Why provide just = three and leave the rest up to guess work? Every implementation needs = to do validation, every validation needs a schema to validate against. = So my concern is twofold. First, we reference a bunch of schemas that = everyone needs, but we don=E2=80=99t provide them. Second, some of the = schemas we reference (such as patchOp) cannot be represented in JSON = using our own definitions. > =20 > I=E2=80=99m certainly OK with an appendix in the api doc for message = schemas and an appendix in the schema doc for all of the entity schemas. = My point is all these schemas should exist. We reference them, we = describe them, but we only provide three of them. It just seems wrong = to me (perhaps my own shortcoming) but we=E2=80=99re asking people to = implement SCIM patch, using a SCIM schema defined request, that we do = not provide, and cannot define using rules we set forth in section 7 of = the schema doc. > =20 > So bottom line, all I=E2=80=99m requesting is the JSON representation = of the SCIM schemas we reference. > =20 > This is a SCIM schema reference, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we should = provide the JSON representation for it. If we can=E2=80=99t do it, = nobody implementing the spec can either. All of the schemas we = reference should be provided using our own definitions set down in = section 7 of the schema rfc (or enhanced in the api doc, using section 7 = as a base). Frankly, I=E2=80=99m dreading the outcome of all this = because I=E2=80=99ve already spent a couple of months implementing patch = in its current form with over 150 unit tests to confirm it does what I = think the spec requires. But several of my peers have come to me and = asked for these schema definitions (in JSON) and a couple have pointed = out that the patch request schema, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be = represented using section 7 rules and that we cannot do upfront = validation on patch requests the way we do all other SCIM requests. And = it=E2=80=99s true, we cannot do an upfront validation of patch after = it=E2=80=99s parsed the way we can all other requests. Simple attribute = validation is impossible because =E2=80=9Cvalue=E2=80=9D depends on the = target of =E2=80=9Cpath=E2=80=9D, and therefore =E2=80=9Cvalue=E2=80=9D = cannot be defined in a JSON schema using section 7 of the schema doc. > =20 > Even if we can=E2=80=99t fix patch, for whatever reason, we should = provide the rest of the schemas, represented in JSON format, for both = docs. > =20 > -mrf > =20 > From: Phil Hunt=20 > Sent: Thursday, February 12, 2015 12:58 PM > To: Michael Frost > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Michael, > =20 > Can you provide examples? > =20 > The schema in the API has to extend the registry define in core. As = editor I think it would be even more confusing to mix data schema and = request schema in a single document. It also becomes problematic when = specs cross reference each other. Instead the document layout is such = that API builds on core schema.=20 > =20 > The format in PATCH comes from the JSON Patch RFC.=20 >=20 > Phil >=20 > On Feb 12, 2015, at 12:46, Michael Frost > wrote: >=20 > .0:ResourceType > urn:ietf:params:scim:schemas:core:2 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim --Apple-Mail=_50B40D3E-67FC-45BA-96FE-F849A2980943 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 With the patch operation, the contents of =E2=80=9Cvalue=E2=80=9D= is currently driven by the =E2=80=9Cpath=E2=80=9D attribute.  In = other words in a normal JSON structure, the Patch path attribute = describes the left half of a name value pair, and the =E2=80=9Cvalue=E2=80= =9D describes the right half.

So if =E2=80=9Cpath" points to a complex attribute, then = =E2=80=9Cvalue=E2=80=9D MUST be a JSON object of one or more = sub-attributes.  If path describes a simple attribute, than the = corresponding value must be a boolean, string depending on the schema of = the attribute described by =E2=80=9Cpath=E2=80=9D.

SCIM patch is based on = and follows the same design as for RFC6902 (JSON Patch). The only = difference is we decided to limit the number of operation types and to = use filters in paths rather than array indexed access based on JSON = Pointers (RFC6901).


On Feb 13, 2015, at 12:29 PM, Michael Frost <michael.frost@oracle.com> wrote:

Yes Kelly, you are correct.  I was = looking for schema representation for all resources and messages.  = You also correctly identified the issue I was trying to raise with = regards to PatchOp.  Thanks for taking a look.

 

-mrf

 

From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com]
Sent: Friday, February 13, 2015 6:56 AM
To: Michael Frost; Phil Hunt
Cc: scim@ietf.org
Subject: = Re: [scim] SCIM schema IDs and JSON representation

 

Michael =E2=80=A6 let me make sure I = understand what you are looking for.  You would like a schema = representation (such as what is included in section 8.7) for all = resources and messages.  Is that right?

 

If so, then I 100% agree that this is = useful.  In the SCIM 1.0 spec (back when we supported XML as a data = format) there was an XSD that did exactly what you are looking for =E2=80=93= described both resources and messages.  I agree that having this = codifies the rules and removes some ambiguity.  I would be in favor = of adding something like this to the SCIM spec.

 

Regarding the PatchOp, is the problem = that the value sub-attribute could be anything =E2=80=93 multivalued = could be true or false, there may or may not be sub-attributes (ie =E2=80=93= it could be complex, which is not technically supported), and the type = is dependent upon the actual attribute that you are replacing?  = With this ambiguity there isn=E2=80=99t a good way to represent this in = a schema currently.

 

--Kelly

 

 

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of = Michael Frost
Sent: Thursday, = February 12, 2015 6:45 PM
To: Phil = Hunt
Cc: scim@ietf.org
Subject: = Re: [scim] SCIM schema IDs and JSON representation

 

Hi Phil,

 

Not sure what you mean by = examples.  My concern is that in the schema doc, section 8.7 = provides schema representation for core user/group and enterprise = user.  What about all the other schemas we reference?  We = should provide schema representation for every schema defined in the = spec.  Everyone implementing this spec will need them.  Why = provide just three and leave the rest up to guess work?  Every = implementation needs to do validation, every validation needs a schema = to validate against.  So my concern is twofold.  First, we = reference a bunch of schemas that everyone needs, but we don=E2=80=99t = provide them.  Second, some of the schemas we reference (such as = patchOp) cannot be represented in JSON using our own definitions.

 

I=E2=80=99m certainly OK with an = appendix in the api doc for message schemas and an appendix in the = schema doc for all of the entity schemas.  My point is all these = schemas should exist.  We reference them, we describe them, but we = only provide three of them.  It just seems wrong to me (perhaps my = own shortcoming) but we=E2=80=99re asking people to implement SCIM = patch, using a SCIM schema defined request, that we do not provide, and = cannot define using rules we set forth in section 7 of the schema = doc.

 

So bottom line, all I=E2=80=99m =
requesting is the JSON representation of the SCIM schemas we =
reference.
 
This is a SCIM schema reference, =E2=80=9C=
 urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we =
should provide the JSON representation for it.  If we can=E2=80=99t =
do it, nobody implementing the spec can either.  All of the schemas =
we reference should be provided using our own definitions set down in =
section 7 of the schema rfc (or enhanced in the api doc, using section 7 =
as a base).  Frankly, I=E2=80=99m dreading the outcome of all this =
because I=E2=80=99ve already spent a couple of months implementing patch =
in its current form with over 150 unit tests to confirm it does what I =
think the spec requires.  But several of my peers have come to me =
and asked for these schema definitions (in JSON) and a couple have =
pointed out that the patch request schema, =E2=80=9C =
urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be =
represented using section 7 rules and that we cannot do upfront =
validation on patch requests the way we do all other SCIM =
requests.  And it=E2=80=99s true, we cannot do an upfront =
validation of patch after it=E2=80=99s parsed the way we can all other =
requests.  Simple attribute validation is impossible because =
=E2=80=9Cvalue=E2=80=9D depends on the target of =E2=80=9Cpath=E2=80=9D, =
and therefore =E2=80=9Cvalue=E2=80=9D cannot be defined in a JSON schema =
using section 7 of the schema doc.
 
Even if we can=E2=80=99t fix patch, for =
whatever reason, we should provide the rest of the schemas, represented =
in JSON format, for both docs.
 
-mrf
 

From: Phil Hunt
Sent: = Thursday, February 12, 2015 12:58 PM
To: = Michael Frost
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs and = JSON representation

 

Michael,

 

Can you provide examples?

 

The schema in the API has to extend the registry = define in core.   As editor I think it would be even more confusing = to mix data schema and request schema in a single document. It also = becomes problematic when specs cross reference each other. Instead the = document layout is such that API builds on core schema. 

 

The format in PATCH comes from the JSON Patch = RFC. 


Phil


On Feb 12, 2015, at 12:46, = Michael Frost <michael.frost@oracle.com> wrote:

.0:ResourceType
urn:ietf:params:scim:schemas:core:2
__________________________= _____________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

= --Apple-Mail=_50B40D3E-67FC-45BA-96FE-F849A2980943-- From nobody Sun Feb 15 11:17:11 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A93A1A6F03 for ; Sun, 15 Feb 2015 11:17:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.889 X-Spam-Level: X-Spam-Status: No, score=0.889 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, J_CHICKENPOX_56=0.6, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yD83PfDz6MGv for ; Sun, 15 Feb 2015 11:17:07 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89AB11A6EFE for ; Sun, 15 Feb 2015 11:17:05 -0800 (PST) Received: from NG-EX02.ad.nexusgroup.com (10.75.28.43) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Sun, 15 Feb 2015 20:17:03 +0100 Received: from NG-EX02.ad.nexusgroup.com ([fe80::2839:3494:59f1:44d]) by NG-EX02.ad.nexusgroup.com ([fe80::2839:3494:59f1:44d%12]) with mapi id 15.00.0995.032; Sun, 15 Feb 2015 20:17:03 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: "scim@ietf.org WG" Thread-Topic: Minor nits and some clarification in the API spec Thread-Index: AQHQSVP6fFW3JMAHJU2B3oMXmulMDA== Date: Sun, 15 Feb 2015 19:17:02 +0000 Message-ID: <74808711-B4C9-4F26-AEA5-3278075D3EA4@nexusgroup.com> Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2070.6) x-originating-ip: [10.75.28.120] Content-Type: text/plain; charset="utf-8" Content-ID: <5279FF81A2F3F54CAAF707BBAF578EDB@nexusgroup.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [scim] Minor nits and some clarification in the API spec X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Feb 2015 19:17:09 -0000 VW5kZXIgdGhlIHNlY3Rpb24g4oCcTW9kaWZ5aW5nIHdpdGggUEFUQ0jigJ0gaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtc2NpbS1hcGktMTUjc2VjdGlvbi0zLjMuMiB3ZSBh cmUgbWlzc2luZyBhIGdvb2QgZXhhbXBsZSBvbiBob3cgdG8gaGF2ZSBhbiBleHRlbnNpb24gaW4g YSBwYXRoLg0KDQpUaGUgZXhhbXBsZXMgaGF2ZSBhbHNvIGJlZW4gcmVtb3ZlZCBzb21ld2hlcmUg ZG93biB0aGUgbGluZSB1bmRlciBmaWx0ZXJpbmcuIFJpZ2h0IG5vdyB3ZSBvbmx5IHN0YXRlIHRo aXMgdGV4dDoNCg0KIlRoZSBmb2xsb3dpbmcgYXJlIGV4YW1wbGVzIG9mIHZhbGlkIGZpbHRlcnMu ICBTb21lIGF0dHJpYnV0ZXMgKGUuZy4gcm9vbXMgYW5kIHJvb21zLm51bWJlcikgYXJlIGh5cG90 aGV0aWNhbCBleHRlbnNpb25zIGFuZCBhcmUgbm90IHBhcnQgb2YgU0NJTSBjb3JlIHNjaGVtYToi DQoNCkJ1dCB0aGVyZSBhcmUgbm8gZXhhbXBsZXMgb2Ygcm9vbXMgYW5kIHJvb21zLm51bWJlciBl eHRlbnNpb25zLiBXZSBzaG91bGQgYWRkIG9uZSBleGFtcGxlIHVzaW5nIHRoZSBlbnRlcnByaXNl IHVzZXIgZXh0ZW5zaW9uIGFuZCBtYXliZSBldmVuIGFuIGh5cG90aGV0aWNhbCBvbmUgdG8gZGlz cGxheSBob3cgaXQgd29ya3MuDQoNCi0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpXZSBzaG91bGQgYWxz byByZW1vdmUgYW4gdGFnIG9uIERFTEVURSByZXF1ZXN0cy4gSXTigJlzIG5vdCB1c2VkIGFuZCBt aWdodCBzdGlyIHVwIGNvbmZ1c2lvbi4NCg0KLS0tLS0tLS0tLS0tLS0tLS0tDQoNCldoZW4gcmVh ZGluZyB0aGUgc3BlYywgSeKAmXZlIGFsc28gZm91bmQgYSBjb3VwbGUgb2YgZm9ybWF0dGluZyB0 aGluZ3MgdGhhdCB3ZSBuZWVkIGZpeGluZy4NCg0KDQotICBQYWdlIDIzLCBhbmQgcGFnZSAyNiwg YW5kIDMwLCAzNCwgMzUsIEhUVFAgcmVxdWVzdCBtaXNzaW5nIG5ldyBsaW5lcy4gRXhhbXBsZToN Cg0KICAgQSBxdWVyeSByZXNwb25zZSBpcyBzaG93biB3aXRoIHRoZSBmaXJzdCBwYWdlIG9mIHJl c3VsdHMuICBGb3INCiAgIGJyZXZpdHkgcmVhc29ucywgb25seSB0d28gbWF0Y2hlcyBhcmUgc2hv d246IG9uZSBVc2VyIGFuZCBvbmUgR3JvdXAuDQoNCiAgIEhUVFAvMS4xIDIwMCBPSw0KICAgQ29u dGVudC1UeXBlOiBhcHBsaWNhdGlvbi9zY2ltK2pzb24NCiAgIExvY2F0aW9uOiANCmh0dHBzOi8v ZXhhbXBsZS5jb20vLnNlYXJjaA0KDQogICB7DQogICAgICJzY2hlbWFzIjogWyJ1cm46aWV0Zjpw YXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOkxpc3RSZXNwb25zZSJdLA0KICAgICAidG90YWxS ZXN1bHRzIjoxMDAsDQoNCg0KDQotIFBhZ2UgMjcsIEpTT04gcHJpdHR5IHByaW50IG5lZWRlZCA6 KQ0KDQogeyAic2NoZW1hcyI6IFsidXJuOmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIu MDpQYXRjaE9wIl0sDQogICAiT3BlcmF0aW9ucyI6Ww0KICAgICB7 From nobody Sun Feb 15 14:26:24 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F2961A0104 for ; Sun, 15 Feb 2015 14:26:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.311 X-Spam-Level: X-Spam-Status: No, score=-3.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_56=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U8J1WUhk60nv for ; Sun, 15 Feb 2015 14:26:21 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 771CD1A0117 for ; Sun, 15 Feb 2015 14:26:21 -0800 (PST) Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1FMQJBE019187 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Sun, 15 Feb 2015 22:26:20 GMT Received: from aserv0122.oracle.com (aserv0122.oracle.com [141.146.126.236]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1FMQIVv004545 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 15 Feb 2015 22:26:19 GMT Received: from abhmp0017.oracle.com (abhmp0017.oracle.com [141.146.116.23]) by aserv0122.oracle.com (8.13.8/8.13.8) with ESMTP id t1FMQIab003041; Sun, 15 Feb 2015 22:26:18 GMT Received: from [10.34.134.47] (/209.53.121.38) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Sun, 15 Feb 2015 14:26:13 -0800 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (12B466) In-Reply-To: <74808711-B4C9-4F26-AEA5-3278075D3EA4@nexusgroup.com> Date: Sun, 15 Feb 2015 14:25:55 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <383E270E-DE27-4AB9-8DE8-7316457EE3CD@oracle.com> References: <74808711-B4C9-4F26-AEA5-3278075D3EA4@nexusgroup.com> To: =?utf-8?Q?Erik_Wahlstr=C3=B6m_neXus?= X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Archived-At: Cc: "scim@ietf.org WG" Subject: Re: [scim] Minor nits and some clarification in the API spec X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Feb 2015 22:26:23 -0000 Thanks Erik. Will add to the next draft. See comment below Phil > On Feb 15, 2015, at 11:17, Erik Wahlstr=C3=B6m neXus wrote: >=20 > Under the section =E2=80=9CModifying with PATCH=E2=80=9D https://tools.iet= f.org/html/draft-ietf-scim-api-15#section-3.3.2 we are missing a good exampl= e on how to have an extension in a path. >=20 > The examples have also been removed somewhere down the line under filterin= g. Right now we only state this text: >=20 > "The following are examples of valid filters. Some attributes (e.g. rooms= and rooms.number) are hypothetical extensions and are not part of SCIM core= schema:" The above sentence should be removed. The group decided not to have nest= ed value paths which is why it was removed from the abnf and examples.=20 >=20 > But there are no examples of rooms and rooms.number extensions. We should a= dd one example using the enterprise user extension and maybe even an hypothe= tical one to display how it works. >=20 > ------------------ >=20 > We should also remove an tag on DELETE requests. It=E2=80=99s not used and= might stir up confusion. >=20 > ------------------ >=20 > When reading the spec, I=E2=80=99ve also found a couple of formatting thin= gs that we need fixing. >=20 >=20 > - Page 23, and page 26, and 30, 34, 35, HTTP request missing new lines. E= xample: >=20 > A query response is shown with the first page of results. For > brevity reasons, only two matches are shown: one User and one Group. >=20 > HTTP/1.1 200 OK > Content-Type: application/scim+json > Location:=20 > https://example.com/.search >=20 > { > "schemas": ["urn:ietf:params:scim:api:messages:2.0:ListResponse"], > "totalResults":100, >=20 >=20 >=20 > - Page 27, JSON pritty print needed :) >=20 > { "schemas": ["urn:ietf:params:scim:api:messages:2.0:PatchOp"], > "Operations":[ > { > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Tue Feb 17 13:42:11 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80F9A1A90D9 for ; Tue, 17 Feb 2015 13:42:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.311 X-Spam-Level: X-Spam-Status: No, score=-2.311 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AhKNKqiw9LD5 for ; Tue, 17 Feb 2015 13:42:08 -0800 (PST) Received: from smtpauth4.wiscmail.wisc.edu (wmauth4.doit.wisc.edu [144.92.197.145]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CAF891A90E1 for ; Tue, 17 Feb 2015 13:41:24 -0800 (PST) MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_yRcugigjPzMz/6u55jX7bA)" Received: from avs-daemon.smtpauth4.wiscmail.wisc.edu by smtpauth4.wiscmail.wisc.edu (Oracle Communications Messaging Server 7.0.5.33.0 64bit (built Aug 27 2014)) id <0NJX00200QI65900@smtpauth4.wiscmail.wisc.edu> for scim@ietf.org; Tue, 17 Feb 2015 15:41:23 -0600 (CST) X-Spam-PmxInfo: Server=avs-4, Version=6.1.1.2430161, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.2.17.213034, SenderIP=0.0.0.0 Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1lp0139.outbound.protection.outlook.com [207.46.163.139]) by smtpauth4.wiscmail.wisc.edu (Oracle Communications Messaging Server 7.0.5.33.0 64bit (built Aug 27 2014)) with ESMTPS id <0NJX00FSMQWYFD10@smtpauth4.wiscmail.wisc.edu> for scim@ietf.org; Tue, 17 Feb 2015 15:41:23 -0600 (CST) Received: from DM2PR0601MB1231.namprd06.prod.outlook.com (25.160.220.21) by DM2PR0601MB1230.namprd06.prod.outlook.com (25.160.220.20) with Microsoft SMTP Server (TLS) id 15.1.87.18; Tue, 17 Feb 2015 21:41:21 +0000 Received: from DM2PR0601MB1231.namprd06.prod.outlook.com ([25.160.220.21]) by DM2PR0601MB1231.namprd06.prod.outlook.com ([25.160.220.21]) with mapi id 15.01.0087.013; Tue, 17 Feb 2015 21:41:21 +0000 Date: Tue, 17 Feb 2015 21:41:21 +0000 From: Keith Hazelton X-Originating-IP: [128.104.18.177] To: SCIM WG Message-id: Content-language: en-US Accept-Language: en-US Thread-topic: Date vs. dateTime Thread-index: AQHQSvp4eKVz6FlvqEO2mq9QiSp4Ng== X-MS-Has-Attach: X-MS-TNEF-Correlator: x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:DM2PR0601MB1230; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:; SRVR:DM2PR0601MB1230; x-forefront-prvs: 0490BBA1F0 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(54356999)(86362001)(40100003)(46102003)(50986999)(122556002)(106116001)(16236675004)(77156002)(450100001)(62966003)(229853001)(92566002)(110136001)(90282001)(107886001)(89122001)(88552001)(2900100001)(87936001)(66066001)(2656002)(102836002)(36756003)(75432002)(99286002); DIR:OUT; SFP:1101; SCL:1; SRVR:DM2PR0601MB1230; H:DM2PR0601MB1231.namprd06.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; X-OriginatorOrg: wisc.edu X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Feb 2015 21:41:21.5602 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ca68321-0eda-4908-88b2-424a8cb4b0f9 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0601MB1230 Authentication-results: ietf.org; dkim=none (message not signed) header.d=none; Archived-At: Subject: [scim] Date vs. dateTime X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Feb 2015 21:42:10 -0000 --Boundary_(ID_yRcugigjPzMz/6u55jX7bA) Content-type: text/plain; CHARSET=US-ASCII Content-transfer-encoding: 7BIT dateTime is one of the eight defined SCIM data types. Does the SCIM WG have a recommendation on how to represent just a date without the time? There are lots of options, just wondered if there is a recomended practice. I searched the IETF SCIM mail archives without finding any discussion of this issue. -Keith Hazelton --Boundary_(ID_yRcugigjPzMz/6u55jX7bA) Content-id: <4599C379EA60E943A3D1651E54855B19@namprd06.prod.outlook.com> Content-type: text/html; CHARSET=US-ASCII Content-transfer-encoding: 7BIT
dateTime is one of the eight defined SCIM data types. Does the SCIM WG have a recommendation on how to represent just a date without the time?  There are lots of options, just wondered if there is a recomended practice.  I searched the IETF SCIM mail archives without finding any discussion of this issue.

          —Keith Hazelton
--Boundary_(ID_yRcugigjPzMz/6u55jX7bA)-- From nobody Fri Feb 20 02:56:32 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C44E71A8862 for ; Fri, 20 Feb 2015 02:56:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.009 X-Spam-Level: X-Spam-Status: No, score=-1.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_34=0.6, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m1F51jmlY7kH for ; Fri, 20 Feb 2015 02:56:28 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25CAF1A7D84 for ; Fri, 20 Feb 2015 02:56:27 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Fri, 20 Feb 2015 11:56:24 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Fri, 20 Feb 2015 11:56:24 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: Keith Hazelton Thread-Topic: [scim] Date vs. dateTime Thread-Index: AQHQSvp4eKVz6FlvqEO2mq9QiSp4Npz5UQMA Date: Fri, 20 Feb 2015 10:56:24 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2070.6) x-originating-ip: [10.75.28.89] Content-Type: multipart/alternative; boundary="_000_C11815F5D0224E919F5DA516BA061B06nexusgroupcom_" MIME-Version: 1.0 Archived-At: Cc: SCIM WG Subject: Re: [scim] Date vs. dateTime X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Feb 2015 10:56:30 -0000 --_000_C11815F5D0224E919F5DA516BA061B06nexusgroupcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgS2VpdGgsDQoNCkFncmVlIHRoYXQgdGhlcmUgYXJlIGEgbG90IG9mIG9wdGlvbnMsIGJ1dCBo b3cgYWJvdXQgc29tZXRoaW5nIGxpa2UgdGhpcz8NCg0Kew0KICAgIm5hbWUiIDog4oCcYmlydGhE YXRlIiwNCiAgICJ0eXBlIiA6ICJzdHJpbmciLA0KICAgIm11bHRpVmFsdWVkIiA6IGZhbHNlLA0K ICAgImRlc2NyaXB0aW9uIiA6IOKAnEJpcnRoZGF0ZSBvZiBVc2VyLiBUaGUgYXR0cmlidXRlIHZh bHVlIE1VU1QgYmUgZW5jb2RlZCBhcyBhIHZhbGlkIHhzZDpkYXRlIGFzIHNwZWNpZmllZCBpbiBY TUwtU2NoZW1hLiBSRVFVSVJFRCIsDQogICAicmVxdWlyZWQiIDogdHJ1ZSwNCiAgICJjYXNlRXhh Y3QiIDogZmFsc2UsDQogICAibXV0YWJpbGl0eSIgOiAicmVhZFdyaXRlIiwNCiAgICJyZXR1cm5l ZCIgOiAiZGVmYXVsdOKAnSwNCiAgICJ1bmlxdWVuZXNzIiA6IOKAnHNlcnZlciINCn0NCg0KQ2hl ZXJzDQpFcmlrDQoNCg0KDQpPbiAxNyBGZWIgMjAxNSwgYXQgMjI6NDEsIEtlaXRoIEhhemVsdG9u IDxrZWl0aC5oYXplbHRvbkB3aXNjLmVkdTxtYWlsdG86a2VpdGguaGF6ZWx0b25Ad2lzYy5lZHU+ PiB3cm90ZToNCg0KZGF0ZVRpbWUgaXMgb25lIG9mIHRoZSBlaWdodCBkZWZpbmVkIFNDSU0gZGF0 YSB0eXBlcy4gRG9lcyB0aGUgU0NJTSBXRyBoYXZlIGEgcmVjb21tZW5kYXRpb24gb24gaG93IHRv IHJlcHJlc2VudCBqdXN0IGEgZGF0ZSB3aXRob3V0IHRoZSB0aW1lPyAgVGhlcmUgYXJlIGxvdHMg b2Ygb3B0aW9ucywganVzdCB3b25kZXJlZCBpZiB0aGVyZSBpcyBhIHJlY29tZW5kZWQgcHJhY3Rp Y2UuICBJIHNlYXJjaGVkIHRoZSBJRVRGIFNDSU0gbWFpbCBhcmNoaXZlcyB3aXRob3V0IGZpbmRp bmcgYW55IGRpc2N1c3Npb24gb2YgdGhpcyBpc3N1ZS4NCg0KICAgICAgICAgIOKAlEtlaXRoIEhh emVsdG9uDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K c2NpbSBtYWlsaW5nIGxpc3QNCnNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0NCg0K --_000_C11815F5D0224E919F5DA516BA061B06nexusgroupcom_ Content-Type: text/html; charset="utf-8" Content-ID: <35D1E8D705C2B74389E6CFA4851634B3@nexusgroup.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgS2VpdGgsDQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5BZ3JlZSB0aGF0IHRoZXJl IGFyZSBhIGxvdCBvZiBvcHRpb25zLCBidXQgaG93IGFib3V0IHNvbWV0aGluZyBsaWtlIHRoaXM/ PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+ezwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7JnF1 b3Q7bmFtZSZxdW90OyA6IOKAnGJpcnRoRGF0ZSZxdW90Oyw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ Jm5ic3A7ICZuYnNwOyZxdW90O3R5cGUmcXVvdDsgOiAmcXVvdDtzdHJpbmcmcXVvdDssPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsmcXVvdDttdWx0aVZhbHVlZCZxdW90OyA6IGZh bHNlLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7JnF1b3Q7ZGVzY3JpcHRpb24m cXVvdDsgOiDigJxCaXJ0aGRhdGUgb2YgVXNlci4gVGhlIGF0dHJpYnV0ZSB2YWx1ZSBNVVNUIGJl IGVuY29kZWQgYXMgYSB2YWxpZCB4c2Q6ZGF0ZSBhcyBzcGVjaWZpZWQgaW4gWE1MLVNjaGVtYS4g UkVRVUlSRUQmcXVvdDssPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsmcXVvdDty ZXF1aXJlZCZxdW90OyA6IHRydWUsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsm cXVvdDtjYXNlRXhhY3QmcXVvdDsgOiBmYWxzZSw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7 ICZuYnNwOyZxdW90O211dGFiaWxpdHkmcXVvdDsgOiAmcXVvdDtyZWFkV3JpdGUmcXVvdDssPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsmcXVvdDtyZXR1cm5lZCZxdW90OyA6ICZx dW90O2RlZmF1bHTigJ0sPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsmcXVvdDt1 bmlxdWVuZXNzJnF1b3Q7IDog4oCcc2VydmVyJnF1b3Q7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPn08 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PkNoZWVyczwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5FcmlrPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+DQo8Ymxv Y2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMTcgRmViIDIw MTUsIGF0IDIyOjQxLCBLZWl0aCBIYXplbHRvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmtlaXRoLmhh emVsdG9uQHdpc2MuZWR1IiBjbGFzcz0iIj5rZWl0aC5oYXplbHRvbkB3aXNjLmVkdTwvYT4mZ3Q7 IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQt bmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsg Zm9udC1zaXplOiAxNHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPg0KPGRpdiBjbGFzcz0iIj5kYXRlVGltZSBpcyBvbmUgb2YgdGhlIGVpZ2h0IGRlZmluZWQg U0NJTSBkYXRhIHR5cGVzLiBEb2VzIHRoZSBTQ0lNIFdHIGhhdmUgYSByZWNvbW1lbmRhdGlvbiBv biBob3cgdG8gcmVwcmVzZW50IGp1c3QgYSBkYXRlIHdpdGhvdXQgdGhlIHRpbWU/ICZuYnNwO1Ro ZXJlIGFyZSBsb3RzIG9mIG9wdGlvbnMsIGp1c3Qgd29uZGVyZWQgaWYgdGhlcmUgaXMgYSByZWNv bWVuZGVkIHByYWN0aWNlLiAmbmJzcDtJIHNlYXJjaGVkIHRoZSBJRVRGIFNDSU0NCiBtYWlsIGFy Y2hpdmVzIHdpdGhvdXQgZmluZGluZyBhbnkgZGlzY3Vzc2lvbiBvZiB0aGlzIGlzc3VlLjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyDigJRLZWl0aCBIYXplbHRvbjwvZGl2Pg0K PC9kaXY+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxi ciBjbGFzcz0iIj4NCnNjaW0gbWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFp bHRvOnNjaW1AaWV0Zi5vcmciIGNsYXNzPSIiPnNjaW1AaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIi Pg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2ltPGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_C11815F5D0224E919F5DA516BA061B06nexusgroupcom_-- From nobody Fri Feb 20 07:40:42 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F6481A8786 for ; Fri, 20 Feb 2015 07:40:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.01 X-Spam-Level: X-Spam-Status: No, score=-1.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_34=0.6, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7UVvlvEw5c-K for ; Fri, 20 Feb 2015 07:40:39 -0800 (PST) Received: from smtpauth1.wiscmail.wisc.edu (wmauth1.doit.wisc.edu [144.92.197.141]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E60C51A8033 for ; Fri, 20 Feb 2015 07:40:38 -0800 (PST) MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_4l133Bs5yLc+YZDuE9xuRg)" Received: from avs-daemon.smtpauth1.wiscmail.wisc.edu by smtpauth1.wiscmail.wisc.edu (Oracle Communications Messaging Server 7.0.5.33.0 64bit (built Aug 27 2014)) id <0NK200G00U6VJR00@smtpauth1.wiscmail.wisc.edu> for scim@ietf.org; Fri, 20 Feb 2015 09:40:37 -0600 (CST) X-Spam-PmxInfo: Server=avs-1, Version=6.1.1.2430161, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.2.20.153032, SenderIP=0.0.0.0 Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2lp0235.outbound.protection.outlook.com [207.46.163.235]) by smtpauth1.wiscmail.wisc.edu (Oracle Communications Messaging Server 7.0.5.33.0 64bit (built Aug 27 2014)) with ESMTPS id <0NK2002QZU71UH10@smtpauth1.wiscmail.wisc.edu>; Fri, 20 Feb 2015 09:40:14 -0600 (CST) Received: from DM2PR0601MB1231.namprd06.prod.outlook.com (25.160.220.21) by DM2PR0601MB1229.namprd06.prod.outlook.com (25.160.220.19) with Microsoft SMTP Server (TLS) id 15.1.87.18; Fri, 20 Feb 2015 15:40:12 +0000 Received: from DM2PR0601MB1231.namprd06.prod.outlook.com ([25.160.220.21]) by DM2PR0601MB1231.namprd06.prod.outlook.com ([25.160.220.21]) with mapi id 15.01.0087.013; Fri, 20 Feb 2015 15:40:12 +0000 Received-SPF: None (protection.outlook.com: wisc.edu does not designate permitted sender hosts) Date: Fri, 20 Feb 2015 15:40:11 +0000 From: Keith Hazelton In-reply-to: X-Originating-IP: [2607:f388:e:0:fc1e:cc56:46bb:ed12] To: =?iso-8859-1?Q?Erik_Wahlstr=F6m_neXus?= Message-id: <1424446811024.50404@wisc.edu> Content-language: en-US Accept-Language: en-US Thread-topic: [scim] Date vs. dateTime Thread-index: AQHQSvp4eKVz6FlvqEO2mq9QiSp4Npz5UQMAgABe+IE= X-MS-Has-Attach: X-MS-TNEF-Correlator: x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:DM2PR0601MB1229; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:; SRVR:DM2PR0601MB1229; x-forefront-prvs: 0493852DA9 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(377454003)(164054003)(189002)(24454002)(199003)(99286002)(2900100001)(40100003)(122556002)(110136001)(19627405001)(89122001)(117636001)(2950100001)(106356001)(15975445007)(36756003)(102836002)(86362001)(106116001)(105586002)(19625215002)(50986999)(92566002)(76176999)(68736005)(90282001)(101416001)(54356999)(19580405001)(62966003)(88552001)(2656002)(64706001)(46102003)(16236675004)(77156002)(19580395003)(87936001)(97736003)(75432002)(3826002); DIR:OUT; SFP:1101; SCL:1; SRVR:DM2PR0601MB1229; H:DM2PR0601MB1231.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; X-OriginatorOrg: wisc.edu X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Feb 2015 15:40:11.9442 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ca68321-0eda-4908-88b2-424a8cb4b0f9 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0601MB1229 References: Authentication-results: spf=none (sender IP is ) smtp.mailfrom=keith.hazelton@wisc.edu; Archived-At: Cc: SCIM WG , "cifer-api@internet2.edu" Subject: Re: [scim] Date vs. dateTime X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Feb 2015 15:40:41 -0000 --Boundary_(ID_4l133Bs5yLc+YZDuE9xuRg) Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: quoted-printable Thanks, Eric (examples always especially welcome). We've been calling this general approach 'constrained strings'. Your examp= le suggests that the description attribute can be used to spell out the con= straints, and can include MUSTs. It seems like a good way to communicate a= ttribute profiles to relevant parties. Regards, -Keith ________________________________ From: Erik Wahlstr=F6m neXus Sent: Friday, February 20, 2015 4:56 AM To: Keith Hazelton Cc: SCIM WG Subject: Re: [scim] Date vs. dateTime Hi Keith, Agree that there are a lot of options, but how about something like this? { "name" : "birthDate", "type" : "string", "multiValued" : false, "description" : "Birthdate of User. The attribute value MUST be encoded = as a valid xsd:date as specified in XML-Schema. REQUIRED", "required" : true, "caseExact" : false, "mutability" : "readWrite", "returned" : "default", "uniqueness" : "server" } Cheers Erik On 17 Feb 2015, at 22:41, Keith Hazelton > wrote: dateTime is one of the eight defined SCIM data types. Does the SCIM WG have= a recommendation on how to represent just a date without the time? There = are lots of options, just wondered if there is a recomended practice. I se= arched the IETF SCIM mail archives without finding any discussion of this i= ssue. -Keith Hazelton _______________________________________________ scim mailing list scim@ietf.org https://www.ietf.org/mailman/listinfo/scim --Boundary_(ID_4l133Bs5yLc+YZDuE9xuRg) Content-type: text/html; charset=iso-8859-1 Content-transfer-encoding: quoted-printable


Thanks, Eric (examples always especially welcome).

We’ve been calling this general approach 'constrained strings'. = Your example suggests that the description attribute can be used to spell = out the constraints, and can include MUSTs.  It seems like a good way = to communicate attribute profiles to relevant parties.

          Regards,  = —Keith

From: Erik Wahlstr=F6m neX= us <erik.wahlstrom@nexusgroup.com>
Sent: Friday, February 20, 2015 4:56 AM
To: Keith Hazelton
Cc: SCIM WG
Subject: Re: [scim] Date vs. dateTime
 
Hi Keith,

Agree that there are a lot of options, but how about someth= ing like this?

{
   "name" : “birthDate",
   "type" : "string",
   "multiValued" : false,
   "description" : “Birthdate of = User. The attribute value MUST be encoded as a valid xsd:date as specified = in XML-Schema. REQUIRED",
   "required" : true,
   "caseExact" : false,
   "mutability" : "readWrite"= ,
   "returned" : "default”,
   "uniqueness" : “server"
}

Cheers
Erik



On 17 Feb 2015, at 22:41, Keith Hazelton <keith.hazelton@wisc.edu> wro= te:

dateTime is one of the eight defined SCIM data types. Does = the SCIM WG have a recommendation on how to represent just a date without t= he time?  There are lots of options, just wondered if there is a recom= ended practice.  I searched the IETF SCIM mail archives without finding any discussion of this issue.

          —Keith Hazelton
_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

--Boundary_(ID_4l133Bs5yLc+YZDuE9xuRg)-- From nobody Tue Feb 24 01:43:44 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0DDD1A6FF0 for ; Tue, 24 Feb 2015 01:43:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.091 X-Spam-Level: * X-Spam-Status: No, score=1.091 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4niGP4gkX108 for ; Tue, 24 Feb 2015 01:43:38 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F8E61A8734 for ; Tue, 24 Feb 2015 01:43:36 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Tue, 24 Feb 2015 10:43:33 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Tue, 24 Feb 2015 10:43:33 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: SCIM WG Thread-Topic: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) Thread-Index: AQHQR9FOghq02wbey0WIHPU0G+lVkpz/jEyA Date: Tue, 24 Feb 2015 09:43:32 +0000 Message-ID: <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> In-Reply-To: <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2070.6) x-originating-ip: [178.78.255.246] Content-Type: multipart/alternative; boundary="_000_53589A088A1B4304962616A1F17D9D77nexusgroupcom_" MIME-Version: 1.0 Archived-At: Cc: Phil Hunt , Michael Frost , Kelly Grizzle Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Feb 2015 09:43:42 -0000 --_000_53589A088A1B4304962616A1F17D9D77nexusgroupcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkkgYWdyZWVkIHRoYXQgdGhlcmUgYXJlIHNvbWUgaW5jb25zaXN0ZW5jeSBhbmQgcGhp bG9zb3BoaWNhbCBpc3N1ZXMgcHJlc2VudCBpbiB0aGUgc3BlY2lmaWNhdGlvbnMgdGhhdCBwcm9i YWJseSBuZWVkIGFkZHJlc3NpbmcuDQoNCkkgdGhpbmsgd2Ugc2hvdWxkIG1ha2UgZGlmZmVyZW5j ZXMgdG8gdGhlIFJlc291cmNlcyBhbmQgbWVzc2FnZXMsIGFuZCB3ZSBuZWVkIHNvbWUgY2hhbmdl cyB0byB0aGUgc2NoZW1hIGFuZCB0aGUgYXBpIGRyYWZ0cyB0byBtYWtlIHRoYXQgY2xlYXIuDQoN ClRoZSBSZXNvdXJjZXMgcmVxdWlyZXMgZml4ZWQgc2NoZW1hcywgdGhlIG1lc3NhZ2VzIG5vdCBz byBtdWNoLiBTY2hlbWFzIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIHB1cnBvc2Ugb2YgYWxs b3dpbmcgYSBjbGllbnQgdG8gdW5kZXJzdGFuZCB3aGF0IGF0dHJpYnV0ZXMgYW5kIGFzc29jaWF0 ZWQgbWV0YWRhdGEgKHJlYWRhYmlsaXR5LCBtdXRhYmlsaXR5LCB0eXBlLCBldGMpIGlzIHN1cHBv cnRlZCBieSBhIHBhcnRpY3VsYXIgc2VydmljZSBwcm92aWRlci4gRGlzcmVnYXJkaW5nIG9uIHRo ZSBjdXJyZW50bHkgdXNlZCBiZWFyZXIuDQoNClRoZSBtZXNzYWdlIGRvbuKAmXQgbmVlZCB0byBi ZSB2YWxpZGF0ZWQgYWNjb3JkaW5nIHRvIGEgc2NoZW1hLiBTQ0lNIGZvbGxvd3MgdGhlIFJvYnVz dG5lc3MgUHJpbmNpcGFsIChKb24gUG9zdGVs4oCZcyBsYXcgLSBvbmUgb2YgdGhlIGZvdW5kaW5n IHByaW5jaXBsZXMgb2YgVENQL0lQKS4gVGhpcyBtZWFucyB0aGF0IG1lc3NhZ2Ugc2hvdWxkIG5v dCBuZWVkIHRvIGNvbXBseSB3aXRoIHNjaGVtYSBpbiBvcmRlciB0byBiZSBpbnRlcnByZXRlZCAo d2l0aGluIHJlYXNvbikgYnkgYSBzZXJ2aWNlIHByb3ZpZGVyLiAgSW4gcHJhY3RpY2FsIHRlcm1z LCBhIFNDSU0gY2xpZW50IHNob3VsZCBuZXZlciBoYXZlIHRvIGRvIGEgbG90IG9mIHdvcmsgdG8g Y3JlYXRlIG9yIHNlYXJjaCBmb3IgYSBVc2VyLiBBdCB0aGUgc2FtZSB0aW1lLCBhIHNlcnZpY2Ug cHJvdmlkZXIgaXMgbm90IG9ibGlnZWQgdG8gYWNjZXB0IGEgbmV3IFVzZXIgKmV4YWN0bHkqIGFz IHRoZSBjbGllbnQgc3BlY2lmaWVzLiBUaGUgc2VydmljZSBwcm92aWRlciBpcyBhbHdheXMgZnJl ZSB0byBpbnRlcnByZXQgYW5kIGNoYW5nZSBkYXRhLg0KDQpNZXNzYWdlcyBpcyBwYXJ0IG9mIHRo ZSBBUEkgZHJhZnQsIGFuZCBSZXNvdXJjZXMgYW5kIHRoZXJlIHNjaGVtYXMgaXMgYSBwYXJ0IG9m IHRoZSBTY2hlbWEgZHJhZnQuIFdlIHNob3VsZCBub3QgbWl4IHRoZW0gdG8gbXVjaCBhbmQgbWFr ZSBpdCBjbGVhciBpbiB0aGUgc3BlYyB0aGF0IGlzIGFsc28gdGhlIGNhc2UuDQoNCkkgdGhpbmsg dGhhdCB0aGUgUmVzb3VyY2VzIHRoYXQgd2UgaGF2ZSB0b2RheSwgU2NoZW1hLCBSZXNvdXJjZVR5 cGVzIGFuZCBTZXJ2aWNlUHJvdmlkZXJDb25maWdzIE1VU1QgYmUgYWRkZWQgdG8gdGhlIC9TY2hl bWFzIGVuZHBvaW50LiBXZSBzaG91bGQgYWxzbyBhZGQgU2NoZW1hLCBSZXNvdXJjZVR5cGVzIGFu ZCBTZXJ2aWNlUHJvdmlkZXJDb25maWdzIHRvIHRoZSBzZWN0aW9uICI4LjcgU2NoZW1hIFJlcHJl c2VudGF0aW9u4oCdIGluIHRoZSBzY2hlbWEgc3BlYy4NCg0KQSBzZWNvbmQgaW1wb3J0YW50IGNo YW5nZSB0byBtYWtlIGl0IGNsZWFyIHRoYXQgbWVzc2FnZXMgYXJlIG1lc3NhZ2VzLCBpcyB0byBy ZW1vdmUgdGhlIHNjaGVtYSBhdHRyaWJ1dGUgb24gb2Ygb2YgdGhlIG1lc3NhZ2VzLiBUaGV5IHdo ZXJlIGFkZGVkIHJhdGhlciBsYXRlIGluIHRoZSBzcGVjLXdyaXRpbmcgcHJvY2VzcyB0byBnaXZl IGEgbm90aW9uIHRvIHRoZSBzZXJ2aWNlIHByb3ZpZGVyIHdoYXQga2luZCBvZiBtZXNzYWdlIHRo YXTigJlzIGN1cnJlbnRseSBzZW50LiBUaGUgaW50ZW50aW9uIHdhcyBub3QgdG8gZm9yY2UgdGhl IFNQIHRvIHZhbGlkYXRlIHRoZSBtZXNzYWdlcyBhZ2FpbnN0IGEgc2NoZW1hLiBJIHN1Z2dlc3Qg dGhhdCB3ZSByZW1vdmUgdGhlIOKAnHNjaGVtYXMiIGF0dHJpYnV0ZSBpbiBtZXNzYWdlcyBhbmQg cmVwbGFjZXMgaXQgd2l0aCBhIOKAnG1zZ1R5cGXigJ0gdGhhdCBjb3VsZCBpbmRpY2F0ZSB3aGF0 IG1lc3NhZ2UgaXQgaXMgKFBhdGNoT3Agb3IgTGlzdFJlc3BvbnNlKS4NCg0KLyBFcmlrDQoNCg0K DQpPbiAxMyBGZWIgMjAxNSwgYXQgMjI6MDgsIFBoaWwgSHVudCA8cGhpbC5odW50QG9yYWNsZS5j b208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPj4gd3JvdGU6DQoNCldpdGggdGhlIHBhdGNo IG9wZXJhdGlvbiwgdGhlIGNvbnRlbnRzIG9mIOKAnHZhbHVl4oCdIGlzIGN1cnJlbnRseSBkcml2 ZW4gYnkgdGhlIOKAnHBhdGjigJ0gYXR0cmlidXRlLiAgSW4gb3RoZXIgd29yZHMgaW4gYSBub3Jt YWwgSlNPTiBzdHJ1Y3R1cmUsIHRoZSBQYXRjaCBwYXRoIGF0dHJpYnV0ZSBkZXNjcmliZXMgdGhl IGxlZnQgaGFsZiBvZiBhIG5hbWUgdmFsdWUgcGFpciwgYW5kIHRoZSDigJx2YWx1ZeKAnSBkZXNj cmliZXMgdGhlIHJpZ2h0IGhhbGYuDQoNClNvIGlmIOKAnHBhdGgiIHBvaW50cyB0byBhIGNvbXBs ZXggYXR0cmlidXRlLCB0aGVuIOKAnHZhbHVl4oCdIE1VU1QgYmUgYSBKU09OIG9iamVjdCBvZiBv bmUgb3IgbW9yZSBzdWItYXR0cmlidXRlcy4gIElmIHBhdGggZGVzY3JpYmVzIGEgc2ltcGxlIGF0 dHJpYnV0ZSwgdGhhbiB0aGUgY29ycmVzcG9uZGluZyB2YWx1ZSBtdXN0IGJlIGEgYm9vbGVhbiwg c3RyaW5nIGRlcGVuZGluZyBvbiB0aGUgc2NoZW1hIG9mIHRoZSBhdHRyaWJ1dGUgZGVzY3JpYmVk IGJ5IOKAnHBhdGjigJ0uDQoNClNDSU0gcGF0Y2ggaXMgYmFzZWQgb24gYW5kIGZvbGxvd3MgdGhl IHNhbWUgZGVzaWduIGFzIGZvciBSRkM2OTAyIChKU09OIFBhdGNoKS4gVGhlIG9ubHkgZGlmZmVy ZW5jZSBpcyB3ZSBkZWNpZGVkIHRvIGxpbWl0IHRoZSBudW1iZXIgb2Ygb3BlcmF0aW9uIHR5cGVz IGFuZCB0byB1c2UgZmlsdGVycyBpbiBwYXRocyByYXRoZXIgdGhhbiBhcnJheSBpbmRleGVkIGFj Y2VzcyBiYXNlZCBvbiBKU09OIFBvaW50ZXJzIChSRkM2OTAxKS4NCg0KUGhpbA0KDQpAaW5kZXBl bmRlbnRpZA0Kd3d3LmluZGVwZW5kZW50aWQuY29tPGh0dHA6Ly93d3cuaW5kZXBlbmRlbnRpZC5j b20vPg0KcGhpbC5odW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPg0K DQpPbiBGZWIgMTMsIDIwMTUsIGF0IDEyOjI5IFBNLCBNaWNoYWVsIEZyb3N0IDxtaWNoYWVsLmZy b3N0QG9yYWNsZS5jb208bWFpbHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbT4+IHdyb3RlOg0K DQpZZXMgS2VsbHksIHlvdSBhcmUgY29ycmVjdC4gIEkgd2FzIGxvb2tpbmcgZm9yIHNjaGVtYSBy ZXByZXNlbnRhdGlvbiBmb3IgYWxsIHJlc291cmNlcyBhbmQgbWVzc2FnZXMuICBZb3UgYWxzbyBj b3JyZWN0bHkgaWRlbnRpZmllZCB0aGUgaXNzdWUgSSB3YXMgdHJ5aW5nIHRvIHJhaXNlIHdpdGgg cmVnYXJkcyB0byBQYXRjaE9wLiAgVGhhbmtzIGZvciB0YWtpbmcgYSBsb29rLg0KDQotbXJmDQoN CkZyb206IEtlbGx5IEdyaXp6bGUgW21haWx0bzprZWxseS5ncml6emxlQHNhaWxwb2ludC5jb21d DQpTZW50OiBGcmlkYXksIEZlYnJ1YXJ5IDEzLCAyMDE1IDY6NTYgQU0NClRvOiBNaWNoYWVsIEZy b3N0OyBQaGlsIEh1bnQNCkNjOiBzY2ltQGlldGYub3JnPG1haWx0bzpzY2ltQGlldGYub3JnPg0K U3ViamVjdDogUmU6IFtzY2ltXSBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50YXRp b24NCg0KTWljaGFlbCDigKYgbGV0IG1lIG1ha2Ugc3VyZSBJIHVuZGVyc3RhbmQgd2hhdCB5b3Ug YXJlIGxvb2tpbmcgZm9yLiAgWW91IHdvdWxkIGxpa2UgYSBzY2hlbWEgcmVwcmVzZW50YXRpb24g KHN1Y2ggYXMgd2hhdCBpcyBpbmNsdWRlZCBpbiBzZWN0aW9uIDguNykgZm9yIGFsbCByZXNvdXJj ZXMgYW5kIG1lc3NhZ2VzLiAgSXMgdGhhdCByaWdodD8NCg0KSWYgc28sIHRoZW4gSSAxMDAlIGFn cmVlIHRoYXQgdGhpcyBpcyB1c2VmdWwuICBJbiB0aGUgU0NJTSAxLjAgc3BlYyAoYmFjayB3aGVu IHdlIHN1cHBvcnRlZCBYTUwgYXMgYSBkYXRhIGZvcm1hdCkgdGhlcmUgd2FzIGFuIFhTRCB0aGF0 IGRpZCBleGFjdGx5IHdoYXQgeW91IGFyZSBsb29raW5nIGZvciDigJMgZGVzY3JpYmVkIGJvdGgg cmVzb3VyY2VzIGFuZCBtZXNzYWdlcy4gIEkgYWdyZWUgdGhhdCBoYXZpbmcgdGhpcyBjb2RpZmll cyB0aGUgcnVsZXMgYW5kIHJlbW92ZXMgc29tZSBhbWJpZ3VpdHkuICBJIHdvdWxkIGJlIGluIGZh dm9yIG9mIGFkZGluZyBzb21ldGhpbmcgbGlrZSB0aGlzIHRvIHRoZSBTQ0lNIHNwZWMuDQoNClJl Z2FyZGluZyB0aGUgUGF0Y2hPcCwgaXMgdGhlIHByb2JsZW0gdGhhdCB0aGUgdmFsdWUgc3ViLWF0 dHJpYnV0ZSBjb3VsZCBiZSBhbnl0aGluZyDigJMgbXVsdGl2YWx1ZWQgY291bGQgYmUgdHJ1ZSBv ciBmYWxzZSwgdGhlcmUgbWF5IG9yIG1heSBub3QgYmUgc3ViLWF0dHJpYnV0ZXMgKGllIOKAkyBp dCBjb3VsZCBiZSBjb21wbGV4LCB3aGljaCBpcyBub3QgdGVjaG5pY2FsbHkgc3VwcG9ydGVkKSwg YW5kIHRoZSB0eXBlIGlzIGRlcGVuZGVudCB1cG9uIHRoZSBhY3R1YWwgYXR0cmlidXRlIHRoYXQg eW91IGFyZSByZXBsYWNpbmc/ICBXaXRoIHRoaXMgYW1iaWd1aXR5IHRoZXJlIGlzbuKAmXQgYSBn b29kIHdheSB0byByZXByZXNlbnQgdGhpcyBpbiBhIHNjaGVtYSBjdXJyZW50bHkuDQoNCi0tS2Vs bHkNCg0KDQpGcm9tOiBzY2ltIFttYWlsdG86c2NpbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhh bGYgT2YgTWljaGFlbCBGcm9zdA0KU2VudDogVGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDY6 NDUgUE0NClRvOiBQaGlsIEh1bnQNCkNjOiBzY2ltQGlldGYub3JnPG1haWx0bzpzY2ltQGlldGYu b3JnPg0KU3ViamVjdDogUmU6IFtzY2ltXSBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVz ZW50YXRpb24NCg0KSGkgUGhpbCwNCg0KTm90IHN1cmUgd2hhdCB5b3UgbWVhbiBieSBleGFtcGxl cy4gIE15IGNvbmNlcm4gaXMgdGhhdCBpbiB0aGUgc2NoZW1hIGRvYywgc2VjdGlvbiA4LjcgcHJv dmlkZXMgc2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBjb3JlIHVzZXIvZ3JvdXAgYW5kIGVudGVy cHJpc2UgdXNlci4gIFdoYXQgYWJvdXQgYWxsIHRoZSBvdGhlciBzY2hlbWFzIHdlIHJlZmVyZW5j ZT8gIFdlIHNob3VsZCBwcm92aWRlIHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgZXZlcnkgc2No ZW1hIGRlZmluZWQgaW4gdGhlIHNwZWMuICBFdmVyeW9uZSBpbXBsZW1lbnRpbmcgdGhpcyBzcGVj IHdpbGwgbmVlZCB0aGVtLiAgV2h5IHByb3ZpZGUganVzdCB0aHJlZSBhbmQgbGVhdmUgdGhlIHJl c3QgdXAgdG8gZ3Vlc3Mgd29yaz8gIEV2ZXJ5IGltcGxlbWVudGF0aW9uIG5lZWRzIHRvIGRvIHZh bGlkYXRpb24sIGV2ZXJ5IHZhbGlkYXRpb24gbmVlZHMgYSBzY2hlbWEgdG8gdmFsaWRhdGUgYWdh aW5zdC4gIFNvIG15IGNvbmNlcm4gaXMgdHdvZm9sZC4gIEZpcnN0LCB3ZSByZWZlcmVuY2UgYSBi dW5jaCBvZiBzY2hlbWFzIHRoYXQgZXZlcnlvbmUgbmVlZHMsIGJ1dCB3ZSBkb27igJl0IHByb3Zp ZGUgdGhlbS4gIFNlY29uZCwgc29tZSBvZiB0aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2UgKHN1Y2gg YXMgcGF0Y2hPcCkgY2Fubm90IGJlIHJlcHJlc2VudGVkIGluIEpTT04gdXNpbmcgb3VyIG93biBk ZWZpbml0aW9ucy4NCg0KSeKAmW0gY2VydGFpbmx5IE9LIHdpdGggYW4gYXBwZW5kaXggaW4gdGhl IGFwaSBkb2MgZm9yIG1lc3NhZ2Ugc2NoZW1hcyBhbmQgYW4gYXBwZW5kaXggaW4gdGhlIHNjaGVt YSBkb2MgZm9yIGFsbCBvZiB0aGUgZW50aXR5IHNjaGVtYXMuICBNeSBwb2ludCBpcyBhbGwgdGhl c2Ugc2NoZW1hcyBzaG91bGQgZXhpc3QuICBXZSByZWZlcmVuY2UgdGhlbSwgd2UgZGVzY3JpYmUg dGhlbSwgYnV0IHdlIG9ubHkgcHJvdmlkZSB0aHJlZSBvZiB0aGVtLiAgSXQganVzdCBzZWVtcyB3 cm9uZyB0byBtZSAocGVyaGFwcyBteSBvd24gc2hvcnRjb21pbmcpIGJ1dCB3ZeKAmXJlIGFza2lu ZyBwZW9wbGUgdG8gaW1wbGVtZW50IFNDSU0gcGF0Y2gsIHVzaW5nIGEgU0NJTSBzY2hlbWEgZGVm aW5lZCByZXF1ZXN0LCB0aGF0IHdlIGRvIG5vdCBwcm92aWRlLCBhbmQgY2Fubm90IGRlZmluZSB1 c2luZyBydWxlcyB3ZSBzZXQgZm9ydGggaW4gc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgZG9jLg0K DQoNClNvIGJvdHRvbSBsaW5lLCBhbGwgSeKAmW0gcmVxdWVzdGluZyBpcyB0aGUgSlNPTiByZXBy ZXNlbnRhdGlvbiBvZiB0aGUgU0NJTSBzY2hlbWFzIHdlIHJlZmVyZW5jZS4NCg0KDQoNClRoaXMg aXMgYSBTQ0lNIHNjaGVtYSByZWZlcmVuY2UsIOKAnCB1cm46aWV0ZjpwYXJhbXM6c2NpbTphcGk6 bWVzc2FnZXM6Mi4wOlBhdGNoT3DigJwsIEkgZmVlbCB3ZSBzaG91bGQgcHJvdmlkZSB0aGUgSlNP TiByZXByZXNlbnRhdGlvbiBmb3IgaXQuICBJZiB3ZSBjYW7igJl0IGRvIGl0LCBub2JvZHkgaW1w bGVtZW50aW5nIHRoZSBzcGVjIGNhbiBlaXRoZXIuICBBbGwgb2YgdGhlIHNjaGVtYXMgd2UgcmVm ZXJlbmNlIHNob3VsZCBiZSBwcm92aWRlZCB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zIHNldCBk b3duIGluIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIHJmYyAob3IgZW5oYW5jZWQgaW4gdGhlIGFw aSBkb2MsIHVzaW5nIHNlY3Rpb24gNyBhcyBhIGJhc2UpLiAgRnJhbmtseSwgSeKAmW0gZHJlYWRp bmcgdGhlIG91dGNvbWUgb2YgYWxsIHRoaXMgYmVjYXVzZSBJ4oCZdmUgYWxyZWFkeSBzcGVudCBh IGNvdXBsZSBvZiBtb250aHMgaW1wbGVtZW50aW5nIHBhdGNoIGluIGl0cyBjdXJyZW50IGZvcm0g d2l0aCBvdmVyIDE1MCB1bml0IHRlc3RzIHRvIGNvbmZpcm0gaXQgZG9lcyB3aGF0IEkgdGhpbmsg dGhlIHNwZWMgcmVxdWlyZXMuICBCdXQgc2V2ZXJhbCBvZiBteSBwZWVycyBoYXZlIGNvbWUgdG8g bWUgYW5kIGFza2VkIGZvciB0aGVzZSBzY2hlbWEgZGVmaW5pdGlvbnMgKGluIEpTT04pIGFuZCBh IGNvdXBsZSBoYXZlIHBvaW50ZWQgb3V0IHRoYXQgdGhlIHBhdGNoIHJlcXVlc3Qgc2NoZW1hLCDi gJwgdXJuOmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBjYW5u b3QgYmUgcmVwcmVzZW50ZWQgdXNpbmcgc2VjdGlvbiA3IHJ1bGVzIGFuZCB0aGF0IHdlIGNhbm5v dCBkbyB1cGZyb250IHZhbGlkYXRpb24gb24gcGF0Y2ggcmVxdWVzdHMgdGhlIHdheSB3ZSBkbyBh bGwgb3RoZXIgU0NJTSByZXF1ZXN0cy4gIEFuZCBpdOKAmXMgdHJ1ZSwgd2UgY2Fubm90IGRvIGFu IHVwZnJvbnQgdmFsaWRhdGlvbiBvZiBwYXRjaCBhZnRlciBpdOKAmXMgcGFyc2VkIHRoZSB3YXkg d2UgY2FuIGFsbCBvdGhlciByZXF1ZXN0cy4gIFNpbXBsZSBhdHRyaWJ1dGUgdmFsaWRhdGlvbiBp cyBpbXBvc3NpYmxlIGJlY2F1c2Ug4oCcdmFsdWXigJ0gZGVwZW5kcyBvbiB0aGUgdGFyZ2V0IG9m IOKAnHBhdGjigJ0sIGFuZCB0aGVyZWZvcmUg4oCcdmFsdWXigJ0gY2Fubm90IGJlIGRlZmluZWQg aW4gYSBKU09OIHNjaGVtYSB1c2luZyBzZWN0aW9uIDcgb2YgdGhlIHNjaGVtYSBkb2MuDQoNCg0K DQpFdmVuIGlmIHdlIGNhbuKAmXQgZml4IHBhdGNoLCBmb3Igd2hhdGV2ZXIgcmVhc29uLCB3ZSBz aG91bGQgcHJvdmlkZSB0aGUgcmVzdCBvZiB0aGUgc2NoZW1hcywgcmVwcmVzZW50ZWQgaW4gSlNP TiBmb3JtYXQsIGZvciBib3RoIGRvY3MuDQoNCg0KDQotbXJmDQoNCkZyb206IFBoaWwgSHVudA0K U2VudDogVGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDEyOjU4IFBNDQpUbzogTWljaGFlbCBG cm9zdA0KQ2M6IHNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpTdWJqZWN0OiBS ZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbg0KDQpNaWNo YWVsLA0KDQpDYW4geW91IHByb3ZpZGUgZXhhbXBsZXM/DQoNClRoZSBzY2hlbWEgaW4gdGhlIEFQ SSBoYXMgdG8gZXh0ZW5kIHRoZSByZWdpc3RyeSBkZWZpbmUgaW4gY29yZS4gICBBcyBlZGl0b3Ig SSB0aGluayBpdCB3b3VsZCBiZSBldmVuIG1vcmUgY29uZnVzaW5nIHRvIG1peCBkYXRhIHNjaGVt YSBhbmQgcmVxdWVzdCBzY2hlbWEgaW4gYSBzaW5nbGUgZG9jdW1lbnQuIEl0IGFsc28gYmVjb21l cyBwcm9ibGVtYXRpYyB3aGVuIHNwZWNzIGNyb3NzIHJlZmVyZW5jZSBlYWNoIG90aGVyLiBJbnN0 ZWFkIHRoZSBkb2N1bWVudCBsYXlvdXQgaXMgc3VjaCB0aGF0IEFQSSBidWlsZHMgb24gY29yZSBz Y2hlbWEuDQoNClRoZSBmb3JtYXQgaW4gUEFUQ0ggY29tZXMgZnJvbSB0aGUgSlNPTiBQYXRjaCBS RkMuDQoNClBoaWwNCg0KT24gRmViIDEyLCAyMDE1LCBhdCAxMjo0NiwgTWljaGFlbCBGcm9zdCA8 bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPG1haWx0bzptaWNoYWVsLmZyb3N0QG9yYWNsZS5jb20+ PiB3cm90ZToNCg0KLjA6UmVzb3VyY2VUeXBlDQoNCnVybjppZXRmOnBhcmFtczpzY2ltOnNjaGVt YXM6Y29yZToyDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQpzY2ltIG1haWxpbmcgbGlzdA0Kc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBpZXRmLm9y Zz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2NpbQ0KDQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc2NpbSBtYWlsaW5nIGxp c3QNCnNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0NCg0K --_000_53589A088A1B4304962616A1F17D9D77nexusgroupcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+SGksPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5JIGFncmVlZCB0aGF0IHRoZXJlIGFyZSBzb21lIGluY29uc2lzdGVuY3kg YW5kIHBoaWxvc29waGljYWwgaXNzdWVzIHByZXNlbnQgaW4gdGhlIHNwZWNpZmljYXRpb25zIHRo YXQgcHJvYmFibHkgbmVlZCBhZGRyZXNzaW5nLiZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSB0aGluayB3ZSBzaG91bGQgbWFrZSBkaWZmZXJl bmNlcyB0byB0aGUgUmVzb3VyY2VzIGFuZCBtZXNzYWdlcywgYW5kIHdlIG5lZWQgc29tZSBjaGFu Z2VzIHRvIHRoZSBzY2hlbWEgYW5kIHRoZSBhcGkgZHJhZnRzIHRvIG1ha2UgdGhhdCBjbGVhci48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PlRoZSBSZXNvdXJjZXMgcmVxdWlyZXMgZml4ZWQgc2NoZW1hcywgdGhlIG1lc3NhZ2VzIG5vdCBz byBtdWNoLiBTY2hlbWFzIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIHB1cnBvc2Ugb2YgYWxs b3dpbmcgYSBjbGllbnQgdG8gdW5kZXJzdGFuZCB3aGF0IGF0dHJpYnV0ZXMgYW5kIGFzc29jaWF0 ZWQgbWV0YWRhdGEgKHJlYWRhYmlsaXR5LCBtdXRhYmlsaXR5LCB0eXBlLCBldGMpIGlzIHN1cHBv cnRlZCBieSBhIHBhcnRpY3VsYXINCiBzZXJ2aWNlIHByb3ZpZGVyLiBEaXNyZWdhcmRpbmcgb24g dGhlIGN1cnJlbnRseSB1c2VkIGJlYXJlci48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoZSBtZXNzYWdlIGRvbuKAmXQgbmVlZCB0byBi ZSB2YWxpZGF0ZWQgYWNjb3JkaW5nIHRvIGEgc2NoZW1hLiBTQ0lNIGZvbGxvd3MgdGhlIFJvYnVz dG5lc3MgUHJpbmNpcGFsIChKb24gUG9zdGVs4oCZcyBsYXcgLSBvbmUgb2YgdGhlIGZvdW5kaW5n IHByaW5jaXBsZXMgb2YgVENQL0lQKS4gVGhpcyBtZWFucyB0aGF0IG1lc3NhZ2Ugc2hvdWxkIG5v dCBuZWVkIHRvIGNvbXBseSB3aXRoIHNjaGVtYSBpbiBvcmRlciB0byBiZSBpbnRlcnByZXRlZA0K ICh3aXRoaW4gcmVhc29uKSBieSBhIHNlcnZpY2UgcHJvdmlkZXIuICZuYnNwO0luIHByYWN0aWNh bCB0ZXJtcywgYSBTQ0lNIGNsaWVudCBzaG91bGQgbmV2ZXIgaGF2ZSB0byBkbyBhIGxvdCBvZiB3 b3JrIHRvIGNyZWF0ZSBvciBzZWFyY2ggZm9yIGEgVXNlci4gQXQgdGhlIHNhbWUgdGltZSwgYSBz ZXJ2aWNlIHByb3ZpZGVyIGlzIG5vdCBvYmxpZ2VkIHRvIGFjY2VwdCBhIG5ldyBVc2VyICpleGFj dGx5KiBhcyB0aGUgY2xpZW50IHNwZWNpZmllcy4gVGhlDQogc2VydmljZSBwcm92aWRlciBpcyBh bHdheXMgZnJlZSB0byBpbnRlcnByZXQgYW5kIGNoYW5nZSBkYXRhLjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+TWVzc2FnZXMgaXMgcGFy dCBvZiB0aGUgQVBJIGRyYWZ0LCBhbmQgUmVzb3VyY2VzIGFuZCB0aGVyZSBzY2hlbWFzIGlzIGEg cGFydCBvZiB0aGUgU2NoZW1hIGRyYWZ0LiBXZSBzaG91bGQgbm90IG1peCB0aGVtIHRvIG11Y2gg YW5kIG1ha2UgaXQgY2xlYXIgaW4gdGhlIHNwZWMgdGhhdCBpcyBhbHNvIHRoZSBjYXNlLjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSB0 aGluayB0aGF0IHRoZSBSZXNvdXJjZXMgdGhhdCB3ZSBoYXZlIHRvZGF5LCBTY2hlbWEsIFJlc291 cmNlVHlwZXMgYW5kIFNlcnZpY2VQcm92aWRlckNvbmZpZ3MgTVVTVCBiZSBhZGRlZCB0byB0aGUg L1NjaGVtYXMgZW5kcG9pbnQuIFdlIHNob3VsZCBhbHNvIGFkZCBTY2hlbWEsIFJlc291cmNlVHlw ZXMgYW5kIFNlcnZpY2VQcm92aWRlckNvbmZpZ3MgdG8gdGhlIHNlY3Rpb24gJnF1b3Q7OC43IFNj aGVtYSBSZXByZXNlbnRhdGlvbuKAnQ0KIGluIHRoZSBzY2hlbWEgc3BlYy4mbmJzcDs8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkEgc2Vj b25kIGltcG9ydGFudCBjaGFuZ2UgdG8gbWFrZSBpdCBjbGVhciB0aGF0IG1lc3NhZ2VzIGFyZSBt ZXNzYWdlcywgaXMgdG8gcmVtb3ZlIHRoZSBzY2hlbWEgYXR0cmlidXRlIG9uIG9mIG9mIHRoZSBt ZXNzYWdlcy4gVGhleSB3aGVyZSBhZGRlZCByYXRoZXIgbGF0ZSBpbiB0aGUgc3BlYy13cml0aW5n IHByb2Nlc3MgdG8gZ2l2ZSBhIG5vdGlvbiB0byB0aGUgc2VydmljZSBwcm92aWRlciB3aGF0IGtp bmQgb2YgbWVzc2FnZQ0KIHRoYXTigJlzIGN1cnJlbnRseSBzZW50LiBUaGUgaW50ZW50aW9uIHdh cyBub3QgdG8gZm9yY2UgdGhlIFNQIHRvIHZhbGlkYXRlIHRoZSBtZXNzYWdlcyBhZ2FpbnN0IGEg c2NoZW1hLiBJIHN1Z2dlc3QgdGhhdCB3ZSByZW1vdmUgdGhlIOKAnHNjaGVtYXMmcXVvdDsgYXR0 cmlidXRlIGluIG1lc3NhZ2VzIGFuZCByZXBsYWNlcyBpdCB3aXRoIGEg4oCcbXNnVHlwZeKAnSB0 aGF0IGNvdWxkIGluZGljYXRlIHdoYXQgbWVzc2FnZSBpdCBpcyAoUGF0Y2hPcCBvciBMaXN0UmVz cG9uc2UpLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+LyBFcmlrPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiAxMyBGZWIgMjAxNSwgYXQgMjI6MDgsIFBo aWwgSHVudCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIiBjbGFzcz0i Ij5waGlsLmh1bnRAb3JhY2xlLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJB cHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9y dGFudDsiIGNsYXNzPSIiPldpdGgNCiB0aGUgcGF0Y2ggb3BlcmF0aW9uLCB0aGUgY29udGVudHMg b2Yg4oCcdmFsdWXigJ0gaXMgY3VycmVudGx5IGRyaXZlbiBieSB0aGUg4oCccGF0aOKAnSBhdHRy aWJ1dGUuICZuYnNwO0luIG90aGVyIHdvcmRzIGluIGEgbm9ybWFsIEpTT04gc3RydWN0dXJlLCB0 aGUgUGF0Y2ggcGF0aCBhdHRyaWJ1dGUgZGVzY3JpYmVzIHRoZSBsZWZ0IGhhbGYgb2YgYSBuYW1l IHZhbHVlIHBhaXIsIGFuZCB0aGUg4oCcdmFsdWXigJ0gZGVzY3JpYmVzIHRoZSByaWdodCBoYWxm Ljwvc3Bhbj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6 IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1 dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KU28gaWYg4oCccGF0aCZxdW90OyBwb2ludHMgdG8gYSBjb21wbGV4IGF0 dHJpYnV0ZSwgdGhlbiDigJx2YWx1ZeKAnSBNVVNUIGJlIGEgSlNPTiBvYmplY3Qgb2Ygb25lIG9y IG1vcmUgc3ViLWF0dHJpYnV0ZXMuICZuYnNwO0lmIHBhdGggZGVzY3JpYmVzIGEgc2ltcGxlIGF0 dHJpYnV0ZSwgdGhhbiB0aGUgY29ycmVzcG9uZGluZyB2YWx1ZSBtdXN0IGJlIGEgYm9vbGVhbiwg c3RyaW5nIGRlcGVuZGluZyBvbiB0aGUgc2NoZW1hIG9mIHRoZSBhdHRyaWJ1dGUgZGVzY3JpYmVk IGJ5DQog4oCccGF0aOKAnS48L2Rpdj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KU0NJTSBwYXRjaCBpcyBiYXNlZCBvbiBhbmQg Zm9sbG93cyB0aGUgc2FtZSBkZXNpZ24gYXMgZm9yIFJGQzY5MDIgKEpTT04gUGF0Y2gpLiBUaGUg b25seSBkaWZmZXJlbmNlIGlzIHdlIGRlY2lkZWQgdG8gbGltaXQgdGhlIG51bWJlciBvZiBvcGVy YXRpb24gdHlwZXMgYW5kIHRvIHVzZSBmaWx0ZXJzIGluIHBhdGhzIHJhdGhlciB0aGFuIGFycmF5 IGluZGV4ZWQgYWNjZXNzIGJhc2VkIG9uIEpTT04gUG9pbnRlcnMgKFJGQzY5MDEpLjwvZGl2Pg0K PGRpdiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBv cnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVp Z2h0OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dz OiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8ZGl2IGFwcGxlLWNvbnRlbnQtZWRpdGVkPSJ0cnVlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiIgc3R5bGU9ImxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQt bmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsi Pg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczog YXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJlYWstd29y ZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdo aXRlLXNwYWNlOyI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBo YW5zOiAyOyB0ZXh0LWFsaWduOiAtd2Via2l0LWF1dG87IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IDI7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJl YWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6IGFm dGVyLXdoaXRlLXNwYWNlOyI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFs OyBvcnBoYW5zOiAyOyB0ZXh0LWFsaWduOiAtd2Via2l0LWF1dG87IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IDI7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3Jh cDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJl YWs6IGFmdGVyLXdoaXRlLXNwYWNlOyI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDog bm9ybWFsOyBvcnBoYW5zOiAyOyB0ZXh0LWFsaWduOiAtd2Via2l0LWF1dG87IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6 IDI7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdv cmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxp bmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyI+DQo8c3BhbiBjbGFzcz0iQXBwbGUtc3R5bGUt c3BhbiIgc3R5bGU9ImJvcmRlci1jb2xsYXBzZTogc2VwYXJhdGU7IGZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGJvcmRlci1zcGFjaW5nOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9IndvcmQt d3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUt YnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyI+DQo8c3BhbiBjbGFzcz0iQXBwbGUtc3R5bGUtc3Bh biIgc3R5bGU9ImJvcmRlci1jb2xsYXBzZTogc2VwYXJhdGU7IGZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9y cGhhbnM6IDI7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3aWRvd3M6IDI7IHdvcmQtc3BhY2luZzogMHB4OyBib3JkZXItc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtZGVjb3JhdGlvbnMtaW4tZWZmZWN0OiBub25lOyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9IndvcmQtd3Jh cDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJl YWs6IGFmdGVyLXdoaXRlLXNwYWNlOyI+DQo8c3BhbiBjbGFzcz0iQXBwbGUtc3R5bGUtc3BhbiIg c3R5bGU9ImJvcmRlci1jb2xsYXBzZTogc2VwYXJhdGU7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhh bnM6IDI7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3aWRvd3M6IDI7IHdvcmQtc3BhY2luZzogMHB4OyBib3JkZXItc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtZGVjb3JhdGlvbnMtaW4tZWZmZWN0OiBub25lOyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9IndvcmQtd3JhcDog YnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6 IGFmdGVyLXdoaXRlLXNwYWNlOyI+DQo8c3BhbiBjbGFzcz0iQXBwbGUtc3R5bGUtc3BhbiIgc3R5 bGU9ImJvcmRlci1jb2xsYXBzZTogc2VwYXJhdGU7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6 IG5vcm1hbDsgb3JwaGFuczogMjsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IGJv cmRlci1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1kZWNvcmF0aW9ucy1pbi1lZmZlY3Q6IG5v bmU7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGRpdiBjbGFzcz0iIiBzdHls ZT0id29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJr aXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7Ij4NCjxkaXYgY2xhc3M9IiI+UGhpbDwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ QGluZGVwZW5kZW50aWQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGEgaHJlZj0iaHR0cDovL3d3dy5p bmRlcGVuZGVudGlkLmNvbS8iIGNsYXNzPSIiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRl Y29yYXRpb246IHVuZGVybGluZTsiPnd3dy5pbmRlcGVuZGVudGlkLmNvbTwvYT48L2Rpdj4NCjwv ZGl2Pg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSIgY2xhc3M9 IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyI+cGhp bC5odW50QG9yYWNsZS5jb208L2E+PC9kaXY+DQo8L3NwYW4+PC9kaXY+DQo8L3NwYW4+PC9kaXY+ DQo8L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBGZWIgMTMsIDIwMTUsIGF0IDEyOjI5IFBNLCBNaWNo YWVsIEZyb3N0ICZsdDs8YSBocmVmPSJtYWlsdG86bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tIiBj bGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7 Ij5taWNoYWVsLmZyb3N0QG9yYWNsZS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFz cz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBsYW5n PSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7Ij4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog J1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHls ZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29s b3I6IHJnYigzMSwgNzMsIDEyNSk7Ij5ZZXMgS2VsbHksIHlvdSBhcmUgY29ycmVjdC4mbmJzcDsg SSB3YXMgbG9va2luZyBmb3Igc2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBhbGwgcmVzb3VyY2Vz IGFuZCBtZXNzYWdlcy4mbmJzcDsgWW91IGFsc28gY29ycmVjdGx5IGlkZW50aWZpZWQgdGhlIGlz c3VlIEkgd2FzIHRyeWluZyB0bw0KIHJhaXNlIHdpdGggcmVnYXJkcyB0byBQYXRjaE9wLiZuYnNw OyBUaGFua3MgZm9yIHRha2luZyBhIGxvb2suPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7 Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBD YWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPiZuYnNwOzwvc3Bh bj48L3A+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTog MTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0K PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+LW1yZjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVz IE5ldyBSb21hbicsIHNlcmlmOyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMs IDEyNSk7Ij4mbmJzcDs8L3NwYW4+PC9wPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIg c3R5bGU9ImJvcmRlci1zdHlsZTogc29saWQgbm9uZSBub25lOyBib3JkZXItdG9wLWNvbG9yOiBy Z2IoMTgxLCAxOTYsIDIyMyk7IGJvcmRlci10b3Atd2lkdGg6IDFwdDsgcGFkZGluZzogM3B0IDBp biAwaW47Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+ DQo8YiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250 LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2Vy aWY7Ij48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+S2Vs bHkgR3JpenpsZSBbPGEgaHJlZj0ibWFpbHRvOmtlbGx5LmdyaXp6bGVAc2FpbHBvaW50LmNvbSIg Y2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5l OyI+bWFpbHRvOmtlbGx5LmdyaXp6bGVAc2FpbHBvaW50LmNvbTwvYT5dPHNwYW4gY2xhc3M9IkFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiciBjbGFzcz0iIj4NCjxiIGNsYXNz PSIiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj5GcmlkYXksIEZlYnJ1YXJ5IDEzLCAyMDE1IDY6NTYgQU08YnIgY2xhc3M9IiI+DQo8YiBj bGFzcz0iIj5Ubzo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPk1pY2hhZWwgRnJvc3Q7IFBoaWwgSHVudDxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIi PkNjOjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciIGNsYXNzPSIiIHN0eWxlPSJjb2xvcjogcHVy cGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPnNjaW1AaWV0Zi5vcmc8L2E+PGJyIGNs YXNzPSIiPg0KPGIgY2xhc3M9IiI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBK U09OIHJlcHJlc2VudGF0aW9uPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0i Ij4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46 IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBO ZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2Io MzEsIDczLCAxMjUpOyI+TWljaGFlbCDigKYgbGV0IG1lIG1ha2Ugc3VyZSBJIHVuZGVyc3RhbmQg d2hhdCB5b3UgYXJlIGxvb2tpbmcgZm9yLiZuYnNwOyBZb3Ugd291bGQgbGlrZSBhIHNjaGVtYSBy ZXByZXNlbnRhdGlvbiAoc3VjaCBhcyB3aGF0IGlzIGluY2x1ZGVkIGluIHNlY3Rpb24gOC43KSBm b3IgYWxsIHJlc291cmNlcw0KIGFuZCBtZXNzYWdlcy4mbmJzcDsgSXMgdGhhdCByaWdodD88bzpw IGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2Io MzEsIDczLCAxMjUpOyI+Jm5ic3A7PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBS b21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7Ij5JZiBzbywgdGhlbiBJIDEwMCUgYWdyZWUgdGhhdCB0aGlzIGlzIHVzZWZ1bC4m bmJzcDsgSW4gdGhlIFNDSU0gMS4wIHNwZWMgKGJhY2sgd2hlbiB3ZSBzdXBwb3J0ZWQgWE1MIGFz IGEgZGF0YSBmb3JtYXQpIHRoZXJlIHdhcyBhbiBYU0QgdGhhdCBkaWQgZXhhY3RseSB3aGF0IHlv dSBhcmUNCiBsb29raW5nIGZvciDigJMgZGVzY3JpYmVkIGJvdGggcmVzb3VyY2VzIGFuZCBtZXNz YWdlcy4mbmJzcDsgSSBhZ3JlZSB0aGF0IGhhdmluZyB0aGlzIGNvZGlmaWVzIHRoZSBydWxlcyBh bmQgcmVtb3ZlcyBzb21lIGFtYmlndWl0eS4mbmJzcDsgSSB3b3VsZCBiZSBpbiBmYXZvciBvZiBh ZGRpbmcgc29tZXRoaW5nIGxpa2UgdGhpcyB0byB0aGUgU0NJTSBzcGVjLjxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5l dyBSb21hbicsIHNlcmlmOyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEy NSk7Ij4mbmJzcDs8L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2Vy aWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsi PlJlZ2FyZGluZyB0aGUgUGF0Y2hPcCwgaXMgdGhlIHByb2JsZW0gdGhhdCB0aGUgdmFsdWUgc3Vi LWF0dHJpYnV0ZSBjb3VsZCBiZSBhbnl0aGluZyDigJMgbXVsdGl2YWx1ZWQgY291bGQgYmUgdHJ1 ZSBvciBmYWxzZSwgdGhlcmUgbWF5IG9yIG1heSBub3QgYmUgc3ViLWF0dHJpYnV0ZXMNCiAoaWUg 4oCTIGl0IGNvdWxkIGJlIGNvbXBsZXgsIHdoaWNoIGlzIG5vdCB0ZWNobmljYWxseSBzdXBwb3J0 ZWQpLCBhbmQgdGhlIHR5cGUgaXMgZGVwZW5kZW50IHVwb24gdGhlIGFjdHVhbCBhdHRyaWJ1dGUg dGhhdCB5b3UgYXJlIHJlcGxhY2luZz8mbmJzcDsgV2l0aCB0aGlzIGFtYmlndWl0eSB0aGVyZSBp c27igJl0IGEgZ29vZCB3YXkgdG8gcmVwcmVzZW50IHRoaXMgaW4gYSBzY2hlbWEgY3VycmVudGx5 LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZh bWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6 IHJnYigzMSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMg TmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdi KDMxLCA3MywgMTI1KTsiPi0tS2VsbHk8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiPg0K PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+Jm5ic3A7PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+Jm5ic3A7PC9zcGFu PjwvcD4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJib3JkZXItc3R5bGU6 IHNvbGlkIG5vbmUgbm9uZTsgYm9yZGVyLXRvcC1jb2xvcjogcmdiKDE4MSwgMTk2LCAyMjMpOyBi b3JkZXItdG9wLXdpZHRoOiAxcHQ7IHBhZGRpbmc6IDNwdCAwaW4gMGluOyI+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+PHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fu cy1zZXJpZjsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXpl OiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+PHNwYW4gY2xhc3M9IkFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPnNjaW0gWzxhIGhyZWY9Im1haWx0bzpz Y2ltLWJvdW5jZXNAaWV0Zi5vcmciIGNsYXNzPSIiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0 LWRlY29yYXRpb246IHVuZGVybGluZTsiPm1haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmc8L2E+ XTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YiBjbGFz cz0iIj5Pbg0KIEJlaGFsZiBPZjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48L2I+TWljaGFlbCBGcm9zdDxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlNl bnQ6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5U aHVyc2RheSwgRmVicnVhcnkgMTIsIDIwMTUgNjo0NSBQTTxiciBjbGFzcz0iIj4NCjxiIGNsYXNz PSIiPlRvOjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+UGhpbCBIdW50PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+Q2M6PC9iPjxzcGFuIGNsYXNz PSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86c2Np bUBpZXRmLm9yZyIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlv bjogdW5kZXJsaW5lOyI+c2NpbUBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0i Ij5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+UmU6IFtzY2ltXSBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50YXRpb248 bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4m bmJzcDs8L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIg Y2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij5IaSBQ aGlsLDxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpw IGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2Io MzEsIDczLCAxMjUpOyI+Jm5ic3A7PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBS b21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7Ij5Ob3Qgc3VyZSB3aGF0IHlvdSBtZWFuIGJ5IGV4YW1wbGVzLiZuYnNwOyBNeSBj b25jZXJuIGlzIHRoYXQgaW4gdGhlIHNjaGVtYSBkb2MsIHNlY3Rpb24gOC43IHByb3ZpZGVzIHNj aGVtYSByZXByZXNlbnRhdGlvbiBmb3IgY29yZSB1c2VyL2dyb3VwIGFuZCBlbnRlcnByaXNlIHVz ZXIuJm5ic3A7DQogV2hhdCBhYm91dCBhbGwgdGhlIG90aGVyIHNjaGVtYXMgd2UgcmVmZXJlbmNl PyZuYnNwOyBXZSBzaG91bGQgcHJvdmlkZSBzY2hlbWEgcmVwcmVzZW50YXRpb24gZm9yIGV2ZXJ5 IHNjaGVtYSBkZWZpbmVkIGluIHRoZSBzcGVjLiZuYnNwOyBFdmVyeW9uZSBpbXBsZW1lbnRpbmcg dGhpcyBzcGVjIHdpbGwgbmVlZCB0aGVtLiZuYnNwOyBXaHkgcHJvdmlkZSBqdXN0IHRocmVlIGFu ZCBsZWF2ZSB0aGUgcmVzdCB1cCB0byBndWVzcyB3b3JrPyZuYnNwOyBFdmVyeSBpbXBsZW1lbnRh dGlvbg0KIG5lZWRzIHRvIGRvIHZhbGlkYXRpb24sIGV2ZXJ5IHZhbGlkYXRpb24gbmVlZHMgYSBz Y2hlbWEgdG8gdmFsaWRhdGUgYWdhaW5zdC4mbmJzcDsgU28gbXkgY29uY2VybiBpcyB0d29mb2xk LiZuYnNwOyBGaXJzdCwgd2UgcmVmZXJlbmNlIGEgYnVuY2ggb2Ygc2NoZW1hcyB0aGF0IGV2ZXJ5 b25lIG5lZWRzLCBidXQgd2UgZG9u4oCZdCBwcm92aWRlIHRoZW0uJm5ic3A7IFNlY29uZCwgc29t ZSBvZiB0aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2UgKHN1Y2ggYXMgcGF0Y2hPcCkgY2Fubm90DQog YmUgcmVwcmVzZW50ZWQgaW4gSlNPTiB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zLjxvOnAgY2xh c3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1Rp bWVzIE5ldyBSb21hbicsIHNlcmlmOyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGlu IDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFu Jywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3Mywg MTI1KTsiPknigJltIGNlcnRhaW5seSBPSyB3aXRoIGFuIGFwcGVuZGl4IGluIHRoZSBhcGkgZG9j IGZvciBtZXNzYWdlIHNjaGVtYXMgYW5kIGFuIGFwcGVuZGl4IGluIHRoZSBzY2hlbWEgZG9jIGZv ciBhbGwgb2YgdGhlIGVudGl0eSBzY2hlbWFzLiZuYnNwOyBNeSBwb2ludCBpcyBhbGwgdGhlc2Ug c2NoZW1hcw0KIHNob3VsZCBleGlzdC4mbmJzcDsgV2UgcmVmZXJlbmNlIHRoZW0sIHdlIGRlc2Ny aWJlIHRoZW0sIGJ1dCB3ZSBvbmx5IHByb3ZpZGUgdGhyZWUgb2YgdGhlbS4mbmJzcDsgSXQganVz dCBzZWVtcyB3cm9uZyB0byBtZSAocGVyaGFwcyBteSBvd24gc2hvcnRjb21pbmcpIGJ1dCB3ZeKA mXJlIGFza2luZyBwZW9wbGUgdG8gaW1wbGVtZW50IFNDSU0gcGF0Y2gsIHVzaW5nIGEgU0NJTSBz Y2hlbWEgZGVmaW5lZCByZXF1ZXN0LCB0aGF0IHdlIGRvIG5vdCBwcm92aWRlLCBhbmQNCiBjYW5u b3QgZGVmaW5lIHVzaW5nIHJ1bGVzIHdlIHNldCBmb3J0aCBpbiBzZWN0aW9uIDcgb2YgdGhlIHNj aGVtYSBkb2MuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7Ij4NCjxzcGFuIGNsYXNzPSIi IHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPiZuYnNwOzwvc3Bhbj48L3A+DQo8cHJlIGNsYXNz PSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9u dC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7Ij48c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij5TbyBib3R0b20gbGluZSwgYWxs IEnigJltIHJlcXVlc3RpbmcgaXMgdGhlIEpTT04gcmVwcmVzZW50YXRpb24gb2YgdGhlIFNDSU0g c2NoZW1hcyB3ZSByZWZlcmVuY2UuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlIGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTog MTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdh eXM7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3Nw YW4+PC9wcmU+DQo8cHJlIGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWst YmVmb3JlOiBhbHdheXM7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBm b250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7 Ij5UaGlzIGlzIGEgU0NJTSBzY2hlbWEgcmVmZXJlbmNlLCDigJwgdXJuOmlldGY6cGFyYW1zOnNj aW06YXBpOm1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBJIGZlZWwgd2Ugc2hvdWxkIHByb3ZpZGUg dGhlIEpTT04gcmVwcmVzZW50YXRpb24gZm9yIGl0LiAmbmJzcDtJZiB3ZSBjYW7igJl0IGRvIGl0 LCBub2JvZHkgaW1wbGVtZW50aW5nIHRoZSBzcGVjIGNhbiBlaXRoZXIuJm5ic3A7IEFsbCBvZiB0 aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2Ugc2hvdWxkIGJlIHByb3ZpZGVkIHVzaW5nIG91ciBvd24g ZGVmaW5pdGlvbnMgc2V0IGRvd24gaW4gc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgcmZjIChvciBl bmhhbmNlZCBpbiB0aGUgYXBpIGRvYywgdXNpbmcgc2VjdGlvbiA3IGFzIGEgYmFzZSkuJm5ic3A7 IEZyYW5rbHksIEnigJltIGRyZWFkaW5nIHRoZSBvdXRjb21lIG9mIGFsbCB0aGlzIGJlY2F1c2Ug SeKAmXZlIGFscmVhZHkgc3BlbnQgYSBjb3VwbGUgb2YgbW9udGhzIGltcGxlbWVudGluZyBwYXRj aCBpbiBpdHMgY3VycmVudCBmb3JtIHdpdGggb3ZlciAxNTAgdW5pdCB0ZXN0cyB0byBjb25maXJt IGl0IGRvZXMgd2hhdCBJIHRoaW5rIHRoZSBzcGVjIHJlcXVpcmVzLiZuYnNwOyBCdXQgc2V2ZXJh bCBvZiBteSBwZWVycyBoYXZlIGNvbWUgdG8gbWUgYW5kIGFza2VkIGZvciB0aGVzZSBzY2hlbWEg ZGVmaW5pdGlvbnMgKGluIEpTT04pIGFuZCBhIGNvdXBsZSBoYXZlIHBvaW50ZWQgb3V0IHRoYXQg dGhlIHBhdGNoIHJlcXVlc3Qgc2NoZW1hLCDigJwgdXJuOmlldGY6cGFyYW1zOnNjaW06YXBpOm1l c3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBjYW5ub3QgYmUgcmVwcmVzZW50ZWQgdXNpbmcgc2VjdGlv biA3IHJ1bGVzIGFuZCB0aGF0IHdlIGNhbm5vdCBkbyB1cGZyb250IHZhbGlkYXRpb24gb24gcGF0 Y2ggcmVxdWVzdHMgdGhlIHdheSB3ZSBkbyBhbGwgb3RoZXIgU0NJTSByZXF1ZXN0cy4mbmJzcDsg QW5kIGl04oCZcyB0cnVlLCB3ZSBjYW5ub3QgZG8gYW4gdXBmcm9udCB2YWxpZGF0aW9uIG9mIHBh dGNoIGFmdGVyIGl04oCZcyBwYXJzZWQgdGhlIHdheSB3ZSBjYW4gYWxsIG90aGVyIHJlcXVlc3Rz LiZuYnNwOyBTaW1wbGUgYXR0cmlidXRlIHZhbGlkYXRpb24gaXMgaW1wb3NzaWJsZSBiZWNhdXNl IOKAnHZhbHVl4oCdIGRlcGVuZHMgb24gdGhlIHRhcmdldCBvZiDigJxwYXRo4oCdLCBhbmQgdGhl cmVmb3JlIOKAnHZhbHVl4oCdIGNhbm5vdCBiZSBkZWZpbmVkIGluIGEgSlNPTiBzY2hlbWEgdXNp bmcgc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgZG9jLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHByZSBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBm b250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJl Zm9yZTogYWx3YXlzOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+ Jm5ic3A7PC9zcGFuPjwvcHJlPg0KPHByZSBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGlu IDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBw YWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEs IDczLCAxMjUpOyI+RXZlbiBpZiB3ZSBjYW7igJl0IGZpeCBwYXRjaCwgZm9yIHdoYXRldmVyIHJl YXNvbiwgd2Ugc2hvdWxkIHByb3ZpZGUgdGhlIHJlc3Qgb2YgdGhlIHNjaGVtYXMsIHJlcHJlc2Vu dGVkIGluIEpTT04gZm9ybWF0LCBmb3IgYm90aCBkb2NzLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZSBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFr LWJlZm9yZTogYWx3YXlzOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUp OyI+Jm5ic3A7PC9zcGFuPjwvcHJlPg0KPHByZSBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcn OyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2Io MzEsIDczLCAxMjUpOyI+LW1yZjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PC9wPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImJvcmRlci1zdHlsZTogc29saWQg bm9uZSBub25lOyBib3JkZXItdG9wLWNvbG9yOiByZ2IoMTgxLCAxOTYsIDIyMyk7IGJvcmRlci10 b3Atd2lkdGg6IDFwdDsgcGFkZGluZzogM3B0IDBpbiAwaW47Ij4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVz IE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj48c3BhbiBjbGFzcz0i IiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlm OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7 IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7Ij48c3BhbiBjbGFzcz0iQXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UGhpbCBIdW50PHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlNl bnQ6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5U aHVyc2RheSwgRmVicnVhcnkgMTIsIDIwMTUgMTI6NTggUE08YnIgY2xhc3M9IiI+DQo8YiBjbGFz cz0iIj5Ubzo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPk1pY2hhZWwgRnJvc3Q8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5DYzo8L2I+PHNwYW4g Y2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0 bzpzY2ltQGlldGYub3JnIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNv cmF0aW9uOiB1bmRlcmxpbmU7Ij5zY2ltQGlldGYub3JnPC9hPjxiciBjbGFzcz0iIj4NCjxiIGNs YXNzPSIiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj5SZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRh dGlvbjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250 LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNz PSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVz IE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQpNaWNoYWVsLDxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rp dj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbics IHNlcmlmOyIgY2xhc3M9IiI+DQpDYW4geW91IHByb3ZpZGUgZXhhbXBsZXM/PG86cCBjbGFzcz0i Ij48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVz IE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpw PjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NClRoZSBzY2hlbWEgaW4gdGhlIEFQSSBoYXMgdG8gZXh0 ZW5kIHRoZSByZWdpc3RyeSBkZWZpbmUgaW4gY29yZS4gJm5ic3A7IEFzIGVkaXRvciBJIHRoaW5r IGl0IHdvdWxkIGJlIGV2ZW4gbW9yZSBjb25mdXNpbmcgdG8gbWl4IGRhdGEgc2NoZW1hIGFuZCBy ZXF1ZXN0IHNjaGVtYSBpbiBhIHNpbmdsZSBkb2N1bWVudC4gSXQgYWxzbyBiZWNvbWVzIHByb2Js ZW1hdGljIHdoZW4gc3BlY3MgY3Jvc3MgcmVmZXJlbmNlIGVhY2ggb3RoZXIuIEluc3RlYWQgdGhl IGRvY3VtZW50DQogbGF5b3V0IGlzIHN1Y2ggdGhhdCBBUEkgYnVpbGRzIG9uIGNvcmUgc2NoZW1h LiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsg Zm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBj bGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZh bWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQpUaGUgZm9ybWF0IGlu IFBBVENIIGNvbWVzIGZyb20gdGhlIEpTT04gUGF0Y2ggUkZDLiZuYnNwOzxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46 IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBO ZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KUGhpbDxvOnAgY2xh c3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEycHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiPg0KPGJyIGNsYXNzPSIiPg0KT24g RmViIDEyLCAyMDE1LCBhdCAxMjo0NiwgTWljaGFlbCBGcm9zdCAmbHQ7PGEgaHJlZj0ibWFpbHRv Om1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbSIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyI+bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPC9h PiZndDsgd3JvdGU6PG86cCBjbGFzcz0iIj48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1ib3R0b206IDVwdDsiPg0K PHByZSBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6 IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3 YXlzOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsiPi4wOlJlc291cmNl VHlwZTwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvcHJlPg0KPHByZSBjbGFzcz0iIiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5 OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyI+PHNwYW4gY2xhc3M9 IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsiPnVybjppZXRmOnBhcmFtczpzY2ltOnNjaGVtYXM6 Y29yZToyPC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Rpdj4NCjwvZGl2Pg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX188YnIgY2xhc3M9IiI+DQpzY2ltIG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhy ZWY9Im1haWx0bzpzY2ltQGlldGYub3JnIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsg dGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij5zY2ltQGlldGYub3JnPC9hPjxiciBjbGFzcz0i Ij4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2NpbSIg c3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9 IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2ltPC9hPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhh bnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXzwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg bGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVp Z2h0OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dz OiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5zY2lt DQogbWFpbGluZyBsaXN0PC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdo dDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czog YXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi IGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjog cHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhl aWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93 czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiIGNsYXNzPSIiPnNjaW1AaWV0Zi5vcmc8L2E+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxp bmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL3NjaW0iIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVu ZGVybGluZTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRv OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vc2NpbTwvYT48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwv ZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_53589A088A1B4304962616A1F17D9D77nexusgroupcom_-- From nobody Tue Feb 24 10:00:49 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47AF11A876D for ; Tue, 24 Feb 2015 10:00:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.91 X-Spam-Level: X-Spam-Status: No, score=-3.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NcSC3HUAYCHD for ; Tue, 24 Feb 2015 10:00:43 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10C441A1B23 for ; Tue, 24 Feb 2015 10:00:43 -0800 (PST) Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1OI0fTj030879 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 24 Feb 2015 18:00:42 GMT Received: from aserv0122.oracle.com (aserv0122.oracle.com [141.146.126.236]) by aserv0022.oracle.com (8.13.8/8.13.8) with ESMTP id t1OI0fEm016117 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 24 Feb 2015 18:00:41 GMT Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by aserv0122.oracle.com (8.13.8/8.13.8) with ESMTP id t1OI0fOx009273; Tue, 24 Feb 2015 18:00:41 GMT Received: from [10.0.1.7] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 24 Feb 2015 10:00:35 -0800 Content-Type: multipart/alternative; boundary="Apple-Mail=_756AD5BD-2268-45E3-96D4-89828A13106E" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Phil Hunt In-Reply-To: <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> Date: Tue, 24 Feb 2015 10:00:34 -0800 Message-Id: <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> To: =?utf-8?Q?Erik_Wahlstr=C3=B6m_neXus?= X-Mailer: Apple Mail (2.2070.6) X-Source-IP: aserv0022.oracle.com [141.146.126.234] Archived-At: Cc: SCIM WG Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Feb 2015 18:00:47 -0000 --Apple-Mail=_756AD5BD-2268-45E3-96D4-89828A13106E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Erik Agreed. I think this makes sense and is a good compromise. This reflects = what we discussed on our informal call last week. Any other comments? Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 24, 2015, at 1:43 AM, Erik Wahlstr=C3=B6m neXus = wrote: >=20 > Hi, >=20 > I agreed that there are some inconsistency and philosophical issues = present in the specifications that probably need addressing.=20 >=20 > I think we should make differences to the Resources and messages, and = we need some changes to the schema and the api drafts to make that = clear. >=20 > The Resources requires fixed schemas, the messages not so much. = Schemas is intended solely for the purpose of allowing a client to = understand what attributes and associated metadata (readability, = mutability, type, etc) is supported by a particular service provider. = Disregarding on the currently used bearer. >=20 > The message don=E2=80=99t need to be validated according to a schema. = SCIM follows the Robustness Principal (Jon Postel=E2=80=99s law - one of = the founding principles of TCP/IP). This means that message should not = need to comply with schema in order to be interpreted (within reason) by = a service provider. In practical terms, a SCIM client should never have = to do a lot of work to create or search for a User. At the same time, a = service provider is not obliged to accept a new User *exactly* as the = client specifies. The service provider is always free to interpret and = change data. >=20 > Messages is part of the API draft, and Resources and there schemas is = a part of the Schema draft. We should not mix them to much and make it = clear in the spec that is also the case. >=20 > I think that the Resources that we have today, Schema, ResourceTypes = and ServiceProviderConfigs MUST be added to the /Schemas endpoint. We = should also add Schema, ResourceTypes and ServiceProviderConfigs to the = section "8.7 Schema Representation=E2=80=9D in the schema spec.=20 >=20 > A second important change to make it clear that messages are messages, = is to remove the schema attribute on of of the messages. They where = added rather late in the spec-writing process to give a notion to the = service provider what kind of message that=E2=80=99s currently sent. The = intention was not to force the SP to validate the messages against a = schema. I suggest that we remove the =E2=80=9Cschemas" attribute in = messages and replaces it with a =E2=80=9CmsgType=E2=80=9D that could = indicate what message it is (PatchOp or ListResponse). >=20 > / Erik >=20 >=20 >=20 >> On 13 Feb 2015, at 22:08, Phil Hunt > wrote: >>=20 >> With the patch operation, the contents of =E2=80=9Cvalue=E2=80=9D is = currently driven by the =E2=80=9Cpath=E2=80=9D attribute. In other = words in a normal JSON structure, the Patch path attribute describes the = left half of a name value pair, and the =E2=80=9Cvalue=E2=80=9D = describes the right half. >>=20 >> So if =E2=80=9Cpath" points to a complex attribute, then =E2=80=9Cvalue= =E2=80=9D MUST be a JSON object of one or more sub-attributes. If path = describes a simple attribute, than the corresponding value must be a = boolean, string depending on the schema of the attribute described by = =E2=80=9Cpath=E2=80=9D. >>=20 >> SCIM patch is based on and follows the same design as for RFC6902 = (JSON Patch). The only difference is we decided to limit the number of = operation types and to use filters in paths rather than array indexed = access based on JSON Pointers (RFC6901). >>=20 >> Phil >>=20 >> @independentid >> www.independentid.com = phil.hunt@oracle.com = >>> On Feb 13, 2015, at 12:29 PM, Michael Frost = > wrote: >>>=20 >>> Yes Kelly, you are correct. I was looking for schema representation = for all resources and messages. You also correctly identified the issue = I was trying to raise with regards to PatchOp. Thanks for taking a = look. >>> =20 >>> -mrf >>> =20 >>> From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com = ]=20 >>> Sent: Friday, February 13, 2015 6:56 AM >>> To: Michael Frost; Phil Hunt >>> Cc: scim@ietf.org >>> Subject: Re: [scim] SCIM schema IDs and JSON representation >>> =20 >>> Michael =E2=80=A6 let me make sure I understand what you are looking = for. You would like a schema representation (such as what is included = in section 8.7) for all resources and messages. Is that right? >>> =20 >>> If so, then I 100% agree that this is useful. In the SCIM 1.0 spec = (back when we supported XML as a data format) there was an XSD that did = exactly what you are looking for =E2=80=93 described both resources and = messages. I agree that having this codifies the rules and removes some = ambiguity. I would be in favor of adding something like this to the = SCIM spec. >>> =20 >>> Regarding the PatchOp, is the problem that the value sub-attribute = could be anything =E2=80=93 multivalued could be true or false, there = may or may not be sub-attributes (ie =E2=80=93 it could be complex, = which is not technically supported), and the type is dependent upon the = actual attribute that you are replacing? With this ambiguity there = isn=E2=80=99t a good way to represent this in a schema currently. >>> =20 >>> --Kelly >>> =20 >>> =20 >>> From: scim [mailto:scim-bounces@ietf.org = ] On Behalf Of Michael Frost >>> Sent: Thursday, February 12, 2015 6:45 PM >>> To: Phil Hunt >>> Cc: scim@ietf.org >>> Subject: Re: [scim] SCIM schema IDs and JSON representation >>> =20 >>> Hi Phil,=20 >>> =20 >>> Not sure what you mean by examples. My concern is that in the = schema doc, section 8.7 provides schema representation for core = user/group and enterprise user. What about all the other schemas we = reference? We should provide schema representation for every schema = defined in the spec. Everyone implementing this spec will need them. = Why provide just three and leave the rest up to guess work? Every = implementation needs to do validation, every validation needs a schema = to validate against. So my concern is twofold. First, we reference a = bunch of schemas that everyone needs, but we don=E2=80=99t provide them. = Second, some of the schemas we reference (such as patchOp) cannot be = represented in JSON using our own definitions. >>> =20 >>> I=E2=80=99m certainly OK with an appendix in the api doc for message = schemas and an appendix in the schema doc for all of the entity schemas. = My point is all these schemas should exist. We reference them, we = describe them, but we only provide three of them. It just seems wrong = to me (perhaps my own shortcoming) but we=E2=80=99re asking people to = implement SCIM patch, using a SCIM schema defined request, that we do = not provide, and cannot define using rules we set forth in section 7 of = the schema doc. >>> =20 >>> So bottom line, all I=E2=80=99m requesting is the JSON = representation of the SCIM schemas we reference. >>> =20 >>> This is a SCIM schema reference, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we should = provide the JSON representation for it. If we can=E2=80=99t do it, = nobody implementing the spec can either. All of the schemas we = reference should be provided using our own definitions set down in = section 7 of the schema rfc (or enhanced in the api doc, using section 7 = as a base). Frankly, I=E2=80=99m dreading the outcome of all this = because I=E2=80=99ve already spent a couple of months implementing patch = in its current form with over 150 unit tests to confirm it does what I = think the spec requires. But several of my peers have come to me and = asked for these schema definitions (in JSON) and a couple have pointed = out that the patch request schema, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be = represented using section 7 rules and that we cannot do upfront = validation on patch requests the way we do all other SCIM requests. And = it=E2=80=99s true, we cannot do an upfront validation of patch after = it=E2=80=99s parsed the way we can all other requests. Simple attribute = validation is impossible because =E2=80=9Cvalue=E2=80=9D depends on the = target of =E2=80=9Cpath=E2=80=9D, and therefore =E2=80=9Cvalue=E2=80=9D = cannot be defined in a JSON schema using section 7 of the schema doc. >>> =20 >>> Even if we can=E2=80=99t fix patch, for whatever reason, we should = provide the rest of the schemas, represented in JSON format, for both = docs. >>> =20 >>> -mrf >>> =20 >>> From: Phil Hunt=20 >>> Sent: Thursday, February 12, 2015 12:58 PM >>> To: Michael Frost >>> Cc: scim@ietf.org >>> Subject: Re: [scim] SCIM schema IDs and JSON representation >>> =20 >>> Michael, >>> =20 >>> Can you provide examples? >>> =20 >>> The schema in the API has to extend the registry define in core. = As editor I think it would be even more confusing to mix data schema and = request schema in a single document. It also becomes problematic when = specs cross reference each other. Instead the document layout is such = that API builds on core schema.=20 >>> =20 >>> The format in PATCH comes from the JSON Patch RFC.=20 >>>=20 >>> Phil >>>=20 >>> On Feb 12, 2015, at 12:46, Michael Frost > wrote: >>>=20 >>> .0:ResourceType >>> urn:ietf:params:scim:schemas:core:2 >>> _______________________________________________ >>> scim mailing list >>> scim@ietf.org >>> https://www.ietf.org/mailman/listinfo/scim = >>=20 >> _______________________________________________ >> scim mailing list >> scim@ietf.org >> https://www.ietf.org/mailman/listinfo/scim = --Apple-Mail=_756AD5BD-2268-45E3-96D4-89828A13106E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Erik

Agreed. I think this makes sense and is a good compromise. = This reflects what we discussed on our informal call last = week.

Any = other comments?


On Feb 24, 2015, at 1:43 AM, Erik Wahlstr=C3=B6m neXus <erik.wahlstrom@nexusgroup.com> wrote:

Hi,

I agreed that there are some inconsistency and = philosophical issues present in the specifications that probably need = addressing. 

I think we should make differences to the Resources and = messages, and we need some changes to the schema and the api drafts to = make that clear.

The Resources requires fixed schemas, the messages not = so much. Schemas is intended solely for the purpose of allowing a client = to understand what attributes and associated metadata (readability, = mutability, type, etc) is supported by a particular service provider. Disregarding on the currently used bearer.

The message don=E2=80=99t need to be validated according = to a schema. SCIM follows the Robustness Principal (Jon Postel=E2=80=99s = law - one of the founding principles of TCP/IP). This means that message = should not need to comply with schema in order to be interpreted (within reason) by a service provider.  In practical terms, a SCIM = client should never have to do a lot of work to create or search for a = User. At the same time, a service provider is not obliged to accept a = new User *exactly* as the client specifies. The service provider is always free to interpret and change data.

Messages is part of the API draft, and Resources and = there schemas is a part of the Schema draft. We should not mix them to = much and make it clear in the spec that is also the case.

I think that the Resources that we have today, Schema, = ResourceTypes and ServiceProviderConfigs MUST be added to the /Schemas = endpoint. We should also add Schema, ResourceTypes and = ServiceProviderConfigs to the section "8.7 Schema Representation=E2=80=9D in the schema spec. 

A second important change to make it clear that messages = are messages, is to remove the schema attribute on of of the messages. = They where added rather late in the spec-writing process to give a = notion to the service provider what kind of message that=E2=80=99s currently sent. The intention was not to force the SP to = validate the messages against a schema. I suggest that we remove the = =E2=80=9Cschemas" attribute in messages and replaces it with a = =E2=80=9CmsgType=E2=80=9D that could indicate what message it is = (PatchOp or ListResponse).

/ Erik



On 13 Feb 2015, at 22:08, Phil Hunt <phil.hunt@oracle.com> wrote:

With the patch operation, the contents of =E2=80=9Cvalue=E2=80=9D is = currently driven by the =E2=80=9Cpath=E2=80=9D attribute.  In other = words in a normal JSON structure, the Patch path attribute describes the = left half of a name value pair, and the =E2=80=9Cvalue=E2=80=9D = describes the right half.

So if =E2=80=9Cpath" points to a complex attribute, then =E2=80=9Cvalue=E2= =80=9D MUST be a JSON object of one or more sub-attributes.  If = path describes a simple attribute, than the corresponding value must be = a boolean, string depending on the schema of the attribute described by =E2=80=9Cpath=E2=80=9D.

SCIM patch is based on and follows the same design as for RFC6902 (JSON = Patch). The only difference is we decided to limit the number of = operation types and to use filters in paths rather than array indexed = access based on JSON Pointers (RFC6901).

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com

On Feb 13, 2015, at 12:29 PM, Michael Frost <michael.frost@oracle.com> = wrote:

Yes Kelly, you are correct.  = I was looking for schema representation for all resources and = messages.  You also correctly identified the issue I was trying to raise with regards to PatchOp.  Thanks for taking a look.

 

-mrf

 

From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com] 
Sent: Friday, February 13, 2015 = 6:56 AM
To: Michael Frost; Phil Hunt
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs = and JSON representation
 
Michael =E2=80=A6 let me make sure = I understand what you are looking for.  You would like a schema = representation (such as what is included in section 8.7) for all = resources and messages.  Is that right?

 

If so, then I 100% agree that this = is useful.  In the SCIM 1.0 spec (back when we supported XML as a = data format) there was an XSD that did exactly what you are looking for =E2=80=93 described both resources and messages.  I = agree that having this codifies the rules and removes some = ambiguity.  I would be in favor of adding something like this to = the SCIM spec.

 

Regarding the PatchOp, is the = problem that the value sub-attribute could be anything =E2=80=93 = multivalued could be true or false, there may or may not be = sub-attributes (ie =E2=80=93 it could be complex, which is not technically supported), = and the type is dependent upon the actual attribute that you are = replacing?  With this ambiguity there isn=E2=80=99t a good way to = represent this in a schema currently.
 

--Kelly

 

 

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael = Frost
Sent: Thursday, February 12, 2015 = 6:45 PM
To: Phil Hunt
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs = and JSON representation
 
Hi Phil, 

 

Not sure what you mean by = examples.  My concern is that in the schema doc, section 8.7 = provides schema representation for core user/group and enterprise = user.  What about all the other schemas we reference?  We should provide = schema representation for every schema defined in the spec.  = Everyone implementing this spec will need them.  Why provide just = three and leave the rest up to guess work?  Every implementation needs to do validation, every validation needs a schema to validate = against.  So my concern is twofold.  First, we reference a = bunch of schemas that everyone needs, but we don=E2=80=99t provide = them.  Second, some of the schemas we reference (such as patchOp) = cannot be represented in JSON using our own definitions.

 

I=E2=80=99m certainly OK with an = appendix in the api doc for message schemas and an appendix in the = schema doc for all of the entity schemas.  My point is all these = schemas should exist.  We reference them, we describe them, but we only = provide three of them.  It just seems wrong to me (perhaps my own = shortcoming) but we=E2=80=99re asking people to implement SCIM patch, = using a SCIM schema defined request, that we do not provide, and cannot define using rules we set forth in section 7 of the schema = doc.

 

So bottom line, all I=E2=80=99m requesting is the =
JSON representation of the SCIM schemas we reference.
 
This is a SCIM schema reference, =E2=80=9C =
urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we should =
provide the JSON representation for it.  If we can=E2=80=99t do it, =
nobody implementing the spec can either.  All of the schemas we =
reference should be provided using our own definitions set down in =
section 7 of the schema rfc (or enhanced in the api doc, using section 7 =
as a base).  Frankly, I=E2=80=99m dreading the outcome of all this =
because I=E2=80=99ve already spent a couple of months implementing patch =
in its current form with over 150 unit tests to confirm it does what I =
think the spec requires.  But several of my peers have come to me =
and asked for these schema definitions (in JSON) and a couple have =
pointed out that the patch request schema, =E2=80=9C =
urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be =
represented using section 7 rules and that we cannot do upfront =
validation on patch requests the way we do all other SCIM =
requests.  And it=E2=80=99s true, we cannot do an upfront =
validation of patch after it=E2=80=99s parsed the way we can all other =
requests.  Simple attribute validation is impossible because =
=E2=80=9Cvalue=E2=80=9D depends on the target of =E2=80=9Cpath=E2=80=9D, =
and therefore =E2=80=9Cvalue=E2=80=9D cannot be defined in a JSON schema =
using section 7 of the schema doc.
 
Even if we can=E2=80=99t fix patch, for whatever =
reason, we should provide the rest of the schemas, represented in JSON =
format, for both docs.
 
-mrf

 

From: Phil Hunt 
Sent: Thursday, February 12, 2015 = 12:58 PM
To: Michael Frost
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs = and JSON representation
 
Michael,
 
Can you provide examples?
 
The schema in the API has to extend the registry define in core.   = As editor I think it would be even more confusing to mix data schema and = request schema in a single document. It also becomes problematic when = specs cross reference each other. Instead the document layout is such that API builds on core schema. 
 
The format in PATCH comes from the JSON Patch RFC. 

Phil


On Feb 12, 2015, at 12:46, Michael Frost <michael.frost@oracle.com> = wrote:

.0:ResourceType
urn:ietf:params:scim:schemas:core:2
_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim


= --Apple-Mail=_756AD5BD-2268-45E3-96D4-89828A13106E-- From nobody Tue Feb 24 14:31:25 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD1DD1A6F2A for ; Tue, 24 Feb 2015 14:31:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.6 X-Spam-Level: X-Spam-Status: No, score=-1.6 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kP7j8HbpDNxc for ; Tue, 24 Feb 2015 14:31:21 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0774.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:774]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3B381A6F01 for ; Tue, 24 Feb 2015 14:31:20 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB389.namprd04.prod.outlook.com (10.141.60.140) with Microsoft SMTP Server (TLS) id 15.1.93.16; Tue, 24 Feb 2015 22:31:04 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.43]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.43]) with mapi id 15.01.0093.004; Tue, 24 Feb 2015 22:31:04 +0000 From: Kelly Grizzle To: Phil Hunt , =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= Thread-Topic: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) Thread-Index: AQHQUFvVIEEY+3NnnkGFOdZw3oCV350AYbfA Date: Tue, 24 Feb 2015 22:31:03 +0000 Message-ID: References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> In-Reply-To: <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 3A5EB8F50093EC3A5EBA42 x-originating-ip: [97.79.140.10] authentication-results: spf=none (sender IP is ) smtp.mailfrom=kelly.grizzle@sailpoint.com; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB389; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB389; x-forefront-prvs: 04976078F0 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(51444003)(199003)(52604005)(189002)(24454002)(35774003)(377454003)(106116001)(97736003)(93886004)(19300405004)(92566002)(76176999)(68736005)(106356001)(64706001)(19580405001)(19580395003)(15975445007)(16236675004)(102836002)(40100003)(105586002)(99286002)(19625215002)(19617315012)(66066001)(77156002)(2900100001)(54356999)(2950100001)(62966003)(50986999)(86362001)(46102003)(2656002)(76576001)(101416001)(19609705001)(122556002)(33656002)(74316001)(16601075003)(87936001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB389; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: sailpoint.com does not designate permitted sender hosts) Content-Type: multipart/alternative; boundary="_000_BN1PR04MB392DAA6B0268EB690553FEBE2160BN1PR04MB392namprd_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Feb 2015 22:31:03.9061 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB389 Archived-At: Cc: SCIM WG Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Feb 2015 22:31:25 -0000 --_000_BN1PR04MB392DAA6B0268EB690553FEBE2160BN1PR04MB392namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T25lIHRoaW5nIHRoYXQgaXMgbmljZSBhYm91dCDigJxzY2hlbWFz4oCdIGlzIHRoYXQgaXQgZ2l2 ZXMgdXMgYSB3YXkgdG8gZXh0ZW5kIGEgcmVzb3VyY2UgKG9yIHRoZSByZXByZXNlbnRhdGlvbiBv ZiBhIHJlc291cmNlKS4gIEJ5IG1vdmluZyBvdXIgbWVzc2FnZXMgdG8gdXNlIG1zZ1R5cGUgaW5z dGVhZCBvZiBzY2hlbWFzLCB3ZSBtaWdodCBsb3NlIHNvbWUgb2YgdGhpcyBmbGV4aWJpbGl0eS4g IEnigJltIG5vdCBzdXJlIHRoYXQgd2Ugd291bGQgd2FudCBpdCBvciBub3QsIGJ1dCBJIGNhbiBl bnZpc2lvbiBhIExpc3RSZXNwb25zZSBmcm9tIGEgc2VydmVyIHRoYXQgcmV0dXJucyBhIOKAnHBh Z2luZyB0b2tlbuKAnSBhbG9uZyB3aXRoIHRoZSBjdXJyZW50IHBhZ2UgbnVtYmVyLCBldGPigKYg IFRoaXMgY291bGQgcG90ZW50aWFsbHkgYmUgcHV0IGludG8gYW4gZXh0ZW5zaW9uLiAgSnVzdCBz b21ldGhpbmcgdG8gY29uc2lkZXLigKYNCg0KLS1LZWxseQ0KDQpGcm9tOiBzY2ltIFttYWlsdG86 c2NpbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgUGhpbCBIdW50DQpTZW50OiBUdWVz ZGF5LCBGZWJydWFyeSAyNCwgMjAxNSAxMjowMSBQTQ0KVG86IEVyaWsgV2FobHN0csO2bSBuZVh1 cw0KQ2M6IFNDSU0gV0cNClN1YmplY3Q6IFJlOiBbc2NpbV0gUEFUQ0ggYW5kIHNjaGVtYSAod2Fz OiBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50YXRpb24pDQoNCkVyaWsNCg0KQWdy ZWVkLiBJIHRoaW5rIHRoaXMgbWFrZXMgc2Vuc2UgYW5kIGlzIGEgZ29vZCBjb21wcm9taXNlLiBU aGlzIHJlZmxlY3RzIHdoYXQgd2UgZGlzY3Vzc2VkIG9uIG91ciBpbmZvcm1hbCBjYWxsIGxhc3Qg d2Vlay4NCg0KQW55IG90aGVyIGNvbW1lbnRzPw0KDQpQaGlsDQoNCkBpbmRlcGVuZGVudGlkDQp3 d3cuaW5kZXBlbmRlbnRpZC5jb208aHR0cDovL3d3dy5pbmRlcGVuZGVudGlkLmNvbT4NCnBoaWwu aHVudEBvcmFjbGUuY29tPG1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbT4NCg0KT24gRmViIDI0 LCAyMDE1LCBhdCAxOjQzIEFNLCBFcmlrIFdhaGxzdHLDtm0gbmVYdXMgPGVyaWsud2FobHN0cm9t QG5leHVzZ3JvdXAuY29tPG1haWx0bzplcmlrLndhaGxzdHJvbUBuZXh1c2dyb3VwLmNvbT4+IHdy b3RlOg0KDQpIaSwNCg0KSSBhZ3JlZWQgdGhhdCB0aGVyZSBhcmUgc29tZSBpbmNvbnNpc3RlbmN5 IGFuZCBwaGlsb3NvcGhpY2FsIGlzc3VlcyBwcmVzZW50IGluIHRoZSBzcGVjaWZpY2F0aW9ucyB0 aGF0IHByb2JhYmx5IG5lZWQgYWRkcmVzc2luZy4NCg0KSSB0aGluayB3ZSBzaG91bGQgbWFrZSBk aWZmZXJlbmNlcyB0byB0aGUgUmVzb3VyY2VzIGFuZCBtZXNzYWdlcywgYW5kIHdlIG5lZWQgc29t ZSBjaGFuZ2VzIHRvIHRoZSBzY2hlbWEgYW5kIHRoZSBhcGkgZHJhZnRzIHRvIG1ha2UgdGhhdCBj bGVhci4NCg0KVGhlIFJlc291cmNlcyByZXF1aXJlcyBmaXhlZCBzY2hlbWFzLCB0aGUgbWVzc2Fn ZXMgbm90IHNvIG11Y2guIFNjaGVtYXMgaXMgaW50ZW5kZWQgc29sZWx5IGZvciB0aGUgcHVycG9z ZSBvZiBhbGxvd2luZyBhIGNsaWVudCB0byB1bmRlcnN0YW5kIHdoYXQgYXR0cmlidXRlcyBhbmQg YXNzb2NpYXRlZCBtZXRhZGF0YSAocmVhZGFiaWxpdHksIG11dGFiaWxpdHksIHR5cGUsIGV0Yykg aXMgc3VwcG9ydGVkIGJ5IGEgcGFydGljdWxhciBzZXJ2aWNlIHByb3ZpZGVyLiBEaXNyZWdhcmRp bmcgb24gdGhlIGN1cnJlbnRseSB1c2VkIGJlYXJlci4NCg0KVGhlIG1lc3NhZ2UgZG9u4oCZdCBu ZWVkIHRvIGJlIHZhbGlkYXRlZCBhY2NvcmRpbmcgdG8gYSBzY2hlbWEuIFNDSU0gZm9sbG93cyB0 aGUgUm9idXN0bmVzcyBQcmluY2lwYWwgKEpvbiBQb3N0ZWzigJlzIGxhdyAtIG9uZSBvZiB0aGUg Zm91bmRpbmcgcHJpbmNpcGxlcyBvZiBUQ1AvSVApLiBUaGlzIG1lYW5zIHRoYXQgbWVzc2FnZSBz aG91bGQgbm90IG5lZWQgdG8gY29tcGx5IHdpdGggc2NoZW1hIGluIG9yZGVyIHRvIGJlIGludGVy cHJldGVkICh3aXRoaW4gcmVhc29uKSBieSBhIHNlcnZpY2UgcHJvdmlkZXIuICBJbiBwcmFjdGlj YWwgdGVybXMsIGEgU0NJTSBjbGllbnQgc2hvdWxkIG5ldmVyIGhhdmUgdG8gZG8gYSBsb3Qgb2Yg d29yayB0byBjcmVhdGUgb3Igc2VhcmNoIGZvciBhIFVzZXIuIEF0IHRoZSBzYW1lIHRpbWUsIGEg c2VydmljZSBwcm92aWRlciBpcyBub3Qgb2JsaWdlZCB0byBhY2NlcHQgYSBuZXcgVXNlciAqZXhh Y3RseSogYXMgdGhlIGNsaWVudCBzcGVjaWZpZXMuIFRoZSBzZXJ2aWNlIHByb3ZpZGVyIGlzIGFs d2F5cyBmcmVlIHRvIGludGVycHJldCBhbmQgY2hhbmdlIGRhdGEuDQoNCk1lc3NhZ2VzIGlzIHBh cnQgb2YgdGhlIEFQSSBkcmFmdCwgYW5kIFJlc291cmNlcyBhbmQgdGhlcmUgc2NoZW1hcyBpcyBh IHBhcnQgb2YgdGhlIFNjaGVtYSBkcmFmdC4gV2Ugc2hvdWxkIG5vdCBtaXggdGhlbSB0byBtdWNo IGFuZCBtYWtlIGl0IGNsZWFyIGluIHRoZSBzcGVjIHRoYXQgaXMgYWxzbyB0aGUgY2FzZS4NCg0K SSB0aGluayB0aGF0IHRoZSBSZXNvdXJjZXMgdGhhdCB3ZSBoYXZlIHRvZGF5LCBTY2hlbWEsIFJl c291cmNlVHlwZXMgYW5kIFNlcnZpY2VQcm92aWRlckNvbmZpZ3MgTVVTVCBiZSBhZGRlZCB0byB0 aGUgL1NjaGVtYXMgZW5kcG9pbnQuIFdlIHNob3VsZCBhbHNvIGFkZCBTY2hlbWEsIFJlc291cmNl VHlwZXMgYW5kIFNlcnZpY2VQcm92aWRlckNvbmZpZ3MgdG8gdGhlIHNlY3Rpb24gIjguNyBTY2hl bWEgUmVwcmVzZW50YXRpb27igJ0gaW4gdGhlIHNjaGVtYSBzcGVjLg0KDQpBIHNlY29uZCBpbXBv cnRhbnQgY2hhbmdlIHRvIG1ha2UgaXQgY2xlYXIgdGhhdCBtZXNzYWdlcyBhcmUgbWVzc2FnZXMs IGlzIHRvIHJlbW92ZSB0aGUgc2NoZW1hIGF0dHJpYnV0ZSBvbiBvZiBvZiB0aGUgbWVzc2FnZXMu IFRoZXkgd2hlcmUgYWRkZWQgcmF0aGVyIGxhdGUgaW4gdGhlIHNwZWMtd3JpdGluZyBwcm9jZXNz IHRvIGdpdmUgYSBub3Rpb24gdG8gdGhlIHNlcnZpY2UgcHJvdmlkZXIgd2hhdCBraW5kIG9mIG1l c3NhZ2UgdGhhdOKAmXMgY3VycmVudGx5IHNlbnQuIFRoZSBpbnRlbnRpb24gd2FzIG5vdCB0byBm b3JjZSB0aGUgU1AgdG8gdmFsaWRhdGUgdGhlIG1lc3NhZ2VzIGFnYWluc3QgYSBzY2hlbWEuIEkg c3VnZ2VzdCB0aGF0IHdlIHJlbW92ZSB0aGUg4oCcc2NoZW1hcyIgYXR0cmlidXRlIGluIG1lc3Nh Z2VzIGFuZCByZXBsYWNlcyBpdCB3aXRoIGEg4oCcbXNnVHlwZeKAnSB0aGF0IGNvdWxkIGluZGlj YXRlIHdoYXQgbWVzc2FnZSBpdCBpcyAoUGF0Y2hPcCBvciBMaXN0UmVzcG9uc2UpLg0KDQovIEVy aWsNCg0KDQoNCk9uIDEzIEZlYiAyMDE1LCBhdCAyMjowOCwgUGhpbCBIdW50IDxwaGlsLmh1bnRA b3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20+PiB3cm90ZToNCg0KV2l0aCB0 aGUgcGF0Y2ggb3BlcmF0aW9uLCB0aGUgY29udGVudHMgb2Yg4oCcdmFsdWXigJ0gaXMgY3VycmVu dGx5IGRyaXZlbiBieSB0aGUg4oCccGF0aOKAnSBhdHRyaWJ1dGUuICBJbiBvdGhlciB3b3JkcyBp biBhIG5vcm1hbCBKU09OIHN0cnVjdHVyZSwgdGhlIFBhdGNoIHBhdGggYXR0cmlidXRlIGRlc2Ny aWJlcyB0aGUgbGVmdCBoYWxmIG9mIGEgbmFtZSB2YWx1ZSBwYWlyLCBhbmQgdGhlIOKAnHZhbHVl 4oCdIGRlc2NyaWJlcyB0aGUgcmlnaHQgaGFsZi4NCg0KU28gaWYg4oCccGF0aCIgcG9pbnRzIHRv IGEgY29tcGxleCBhdHRyaWJ1dGUsIHRoZW4g4oCcdmFsdWXigJ0gTVVTVCBiZSBhIEpTT04gb2Jq ZWN0IG9mIG9uZSBvciBtb3JlIHN1Yi1hdHRyaWJ1dGVzLiAgSWYgcGF0aCBkZXNjcmliZXMgYSBz aW1wbGUgYXR0cmlidXRlLCB0aGFuIHRoZSBjb3JyZXNwb25kaW5nIHZhbHVlIG11c3QgYmUgYSBi b29sZWFuLCBzdHJpbmcgZGVwZW5kaW5nIG9uIHRoZSBzY2hlbWEgb2YgdGhlIGF0dHJpYnV0ZSBk ZXNjcmliZWQgYnkg4oCccGF0aOKAnS4NCg0KU0NJTSBwYXRjaCBpcyBiYXNlZCBvbiBhbmQgZm9s bG93cyB0aGUgc2FtZSBkZXNpZ24gYXMgZm9yIFJGQzY5MDIgKEpTT04gUGF0Y2gpLiBUaGUgb25s eSBkaWZmZXJlbmNlIGlzIHdlIGRlY2lkZWQgdG8gbGltaXQgdGhlIG51bWJlciBvZiBvcGVyYXRp b24gdHlwZXMgYW5kIHRvIHVzZSBmaWx0ZXJzIGluIHBhdGhzIHJhdGhlciB0aGFuIGFycmF5IGlu ZGV4ZWQgYWNjZXNzIGJhc2VkIG9uIEpTT04gUG9pbnRlcnMgKFJGQzY5MDEpLg0KDQpQaGlsDQoN CkBpbmRlcGVuZGVudGlkDQp3d3cuaW5kZXBlbmRlbnRpZC5jb208aHR0cDovL3d3dy5pbmRlcGVu ZGVudGlkLmNvbS8+DQpwaGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9yYWNs ZS5jb20+DQoNCk9uIEZlYiAxMywgMjAxNSwgYXQgMTI6MjkgUE0sIE1pY2hhZWwgRnJvc3QgPG1p Y2hhZWwuZnJvc3RAb3JhY2xlLmNvbTxtYWlsdG86bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPj4g d3JvdGU6DQoNClllcyBLZWxseSwgeW91IGFyZSBjb3JyZWN0LiAgSSB3YXMgbG9va2luZyBmb3Ig c2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBhbGwgcmVzb3VyY2VzIGFuZCBtZXNzYWdlcy4gIFlv dSBhbHNvIGNvcnJlY3RseSBpZGVudGlmaWVkIHRoZSBpc3N1ZSBJIHdhcyB0cnlpbmcgdG8gcmFp c2Ugd2l0aCByZWdhcmRzIHRvIFBhdGNoT3AuICBUaGFua3MgZm9yIHRha2luZyBhIGxvb2suDQoN Ci1tcmYNCg0KRnJvbTogS2VsbHkgR3JpenpsZSBbbWFpbHRvOmtlbGx5LmdyaXp6bGVAc2FpbHBv aW50LmNvbV0NClNlbnQ6IEZyaWRheSwgRmVicnVhcnkgMTMsIDIwMTUgNjo1NiBBTQ0KVG86IE1p Y2hhZWwgRnJvc3Q7IFBoaWwgSHVudA0KQ2M6IHNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0 Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXBy ZXNlbnRhdGlvbg0KDQpNaWNoYWVsIOKApiBsZXQgbWUgbWFrZSBzdXJlIEkgdW5kZXJzdGFuZCB3 aGF0IHlvdSBhcmUgbG9va2luZyBmb3IuICBZb3Ugd291bGQgbGlrZSBhIHNjaGVtYSByZXByZXNl bnRhdGlvbiAoc3VjaCBhcyB3aGF0IGlzIGluY2x1ZGVkIGluIHNlY3Rpb24gOC43KSBmb3IgYWxs IHJlc291cmNlcyBhbmQgbWVzc2FnZXMuICBJcyB0aGF0IHJpZ2h0Pw0KDQpJZiBzbywgdGhlbiBJ IDEwMCUgYWdyZWUgdGhhdCB0aGlzIGlzIHVzZWZ1bC4gIEluIHRoZSBTQ0lNIDEuMCBzcGVjIChi YWNrIHdoZW4gd2Ugc3VwcG9ydGVkIFhNTCBhcyBhIGRhdGEgZm9ybWF0KSB0aGVyZSB3YXMgYW4g WFNEIHRoYXQgZGlkIGV4YWN0bHkgd2hhdCB5b3UgYXJlIGxvb2tpbmcgZm9yIOKAkyBkZXNjcmli ZWQgYm90aCByZXNvdXJjZXMgYW5kIG1lc3NhZ2VzLiAgSSBhZ3JlZSB0aGF0IGhhdmluZyB0aGlz IGNvZGlmaWVzIHRoZSBydWxlcyBhbmQgcmVtb3ZlcyBzb21lIGFtYmlndWl0eS4gIEkgd291bGQg YmUgaW4gZmF2b3Igb2YgYWRkaW5nIHNvbWV0aGluZyBsaWtlIHRoaXMgdG8gdGhlIFNDSU0gc3Bl Yy4NCg0KUmVnYXJkaW5nIHRoZSBQYXRjaE9wLCBpcyB0aGUgcHJvYmxlbSB0aGF0IHRoZSB2YWx1 ZSBzdWItYXR0cmlidXRlIGNvdWxkIGJlIGFueXRoaW5nIOKAkyBtdWx0aXZhbHVlZCBjb3VsZCBi ZSB0cnVlIG9yIGZhbHNlLCB0aGVyZSBtYXkgb3IgbWF5IG5vdCBiZSBzdWItYXR0cmlidXRlcyAo aWUg4oCTIGl0IGNvdWxkIGJlIGNvbXBsZXgsIHdoaWNoIGlzIG5vdCB0ZWNobmljYWxseSBzdXBw b3J0ZWQpLCBhbmQgdGhlIHR5cGUgaXMgZGVwZW5kZW50IHVwb24gdGhlIGFjdHVhbCBhdHRyaWJ1 dGUgdGhhdCB5b3UgYXJlIHJlcGxhY2luZz8gIFdpdGggdGhpcyBhbWJpZ3VpdHkgdGhlcmUgaXNu 4oCZdCBhIGdvb2Qgd2F5IHRvIHJlcHJlc2VudCB0aGlzIGluIGEgc2NoZW1hIGN1cnJlbnRseS4N Cg0KLS1LZWxseQ0KDQoNCkZyb206IHNjaW0gW21haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmdd IE9uIEJlaGFsZiBPZiBNaWNoYWVsIEZyb3N0DQpTZW50OiBUaHVyc2RheSwgRmVicnVhcnkgMTIs IDIwMTUgNjo0NSBQTQ0KVG86IFBoaWwgSHVudA0KQ2M6IHNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNj aW1AaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNP TiByZXByZXNlbnRhdGlvbg0KDQpIaSBQaGlsLA0KDQpOb3Qgc3VyZSB3aGF0IHlvdSBtZWFuIGJ5 IGV4YW1wbGVzLiAgTXkgY29uY2VybiBpcyB0aGF0IGluIHRoZSBzY2hlbWEgZG9jLCBzZWN0aW9u IDguNyBwcm92aWRlcyBzY2hlbWEgcmVwcmVzZW50YXRpb24gZm9yIGNvcmUgdXNlci9ncm91cCBh bmQgZW50ZXJwcmlzZSB1c2VyLiAgV2hhdCBhYm91dCBhbGwgdGhlIG90aGVyIHNjaGVtYXMgd2Ug cmVmZXJlbmNlPyAgV2Ugc2hvdWxkIHByb3ZpZGUgc2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBl dmVyeSBzY2hlbWEgZGVmaW5lZCBpbiB0aGUgc3BlYy4gIEV2ZXJ5b25lIGltcGxlbWVudGluZyB0 aGlzIHNwZWMgd2lsbCBuZWVkIHRoZW0uICBXaHkgcHJvdmlkZSBqdXN0IHRocmVlIGFuZCBsZWF2 ZSB0aGUgcmVzdCB1cCB0byBndWVzcyB3b3JrPyAgRXZlcnkgaW1wbGVtZW50YXRpb24gbmVlZHMg dG8gZG8gdmFsaWRhdGlvbiwgZXZlcnkgdmFsaWRhdGlvbiBuZWVkcyBhIHNjaGVtYSB0byB2YWxp ZGF0ZSBhZ2FpbnN0LiAgU28gbXkgY29uY2VybiBpcyB0d29mb2xkLiAgRmlyc3QsIHdlIHJlZmVy ZW5jZSBhIGJ1bmNoIG9mIHNjaGVtYXMgdGhhdCBldmVyeW9uZSBuZWVkcywgYnV0IHdlIGRvbuKA mXQgcHJvdmlkZSB0aGVtLiAgU2Vjb25kLCBzb21lIG9mIHRoZSBzY2hlbWFzIHdlIHJlZmVyZW5j ZSAoc3VjaCBhcyBwYXRjaE9wKSBjYW5ub3QgYmUgcmVwcmVzZW50ZWQgaW4gSlNPTiB1c2luZyBv dXIgb3duIGRlZmluaXRpb25zLg0KDQpJ4oCZbSBjZXJ0YWlubHkgT0sgd2l0aCBhbiBhcHBlbmRp eCBpbiB0aGUgYXBpIGRvYyBmb3IgbWVzc2FnZSBzY2hlbWFzIGFuZCBhbiBhcHBlbmRpeCBpbiB0 aGUgc2NoZW1hIGRvYyBmb3IgYWxsIG9mIHRoZSBlbnRpdHkgc2NoZW1hcy4gIE15IHBvaW50IGlz IGFsbCB0aGVzZSBzY2hlbWFzIHNob3VsZCBleGlzdC4gIFdlIHJlZmVyZW5jZSB0aGVtLCB3ZSBk ZXNjcmliZSB0aGVtLCBidXQgd2Ugb25seSBwcm92aWRlIHRocmVlIG9mIHRoZW0uICBJdCBqdXN0 IHNlZW1zIHdyb25nIHRvIG1lIChwZXJoYXBzIG15IG93biBzaG9ydGNvbWluZykgYnV0IHdl4oCZ cmUgYXNraW5nIHBlb3BsZSB0byBpbXBsZW1lbnQgU0NJTSBwYXRjaCwgdXNpbmcgYSBTQ0lNIHNj aGVtYSBkZWZpbmVkIHJlcXVlc3QsIHRoYXQgd2UgZG8gbm90IHByb3ZpZGUsIGFuZCBjYW5ub3Qg ZGVmaW5lIHVzaW5nIHJ1bGVzIHdlIHNldCBmb3J0aCBpbiBzZWN0aW9uIDcgb2YgdGhlIHNjaGVt YSBkb2MuDQoNCg0KU28gYm90dG9tIGxpbmUsIGFsbCBJ4oCZbSByZXF1ZXN0aW5nIGlzIHRoZSBK U09OIHJlcHJlc2VudGF0aW9uIG9mIHRoZSBTQ0lNIHNjaGVtYXMgd2UgcmVmZXJlbmNlLg0KDQoN Cg0KVGhpcyBpcyBhIFNDSU0gc2NoZW1hIHJlZmVyZW5jZSwg4oCcIHVybjppZXRmOnBhcmFtczpz Y2ltOmFwaTptZXNzYWdlczoyLjA6UGF0Y2hPcOKAnCwgSSBmZWVsIHdlIHNob3VsZCBwcm92aWRl IHRoZSBKU09OIHJlcHJlc2VudGF0aW9uIGZvciBpdC4gIElmIHdlIGNhbuKAmXQgZG8gaXQsIG5v Ym9keSBpbXBsZW1lbnRpbmcgdGhlIHNwZWMgY2FuIGVpdGhlci4gIEFsbCBvZiB0aGUgc2NoZW1h cyB3ZSByZWZlcmVuY2Ugc2hvdWxkIGJlIHByb3ZpZGVkIHVzaW5nIG91ciBvd24gZGVmaW5pdGlv bnMgc2V0IGRvd24gaW4gc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgcmZjIChvciBlbmhhbmNlZCBp biB0aGUgYXBpIGRvYywgdXNpbmcgc2VjdGlvbiA3IGFzIGEgYmFzZSkuICBGcmFua2x5LCBJ4oCZ bSBkcmVhZGluZyB0aGUgb3V0Y29tZSBvZiBhbGwgdGhpcyBiZWNhdXNlIEnigJl2ZSBhbHJlYWR5 IHNwZW50IGEgY291cGxlIG9mIG1vbnRocyBpbXBsZW1lbnRpbmcgcGF0Y2ggaW4gaXRzIGN1cnJl bnQgZm9ybSB3aXRoIG92ZXIgMTUwIHVuaXQgdGVzdHMgdG8gY29uZmlybSBpdCBkb2VzIHdoYXQg SSB0aGluayB0aGUgc3BlYyByZXF1aXJlcy4gIEJ1dCBzZXZlcmFsIG9mIG15IHBlZXJzIGhhdmUg Y29tZSB0byBtZSBhbmQgYXNrZWQgZm9yIHRoZXNlIHNjaGVtYSBkZWZpbml0aW9ucyAoaW4gSlNP TikgYW5kIGEgY291cGxlIGhhdmUgcG9pbnRlZCBvdXQgdGhhdCB0aGUgcGF0Y2ggcmVxdWVzdCBz Y2hlbWEsIOKAnCB1cm46aWV0ZjpwYXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOlBhdGNoT3Di gJwsIGNhbm5vdCBiZSByZXByZXNlbnRlZCB1c2luZyBzZWN0aW9uIDcgcnVsZXMgYW5kIHRoYXQg d2UgY2Fubm90IGRvIHVwZnJvbnQgdmFsaWRhdGlvbiBvbiBwYXRjaCByZXF1ZXN0cyB0aGUgd2F5 IHdlIGRvIGFsbCBvdGhlciBTQ0lNIHJlcXVlc3RzLiAgQW5kIGl04oCZcyB0cnVlLCB3ZSBjYW5u b3QgZG8gYW4gdXBmcm9udCB2YWxpZGF0aW9uIG9mIHBhdGNoIGFmdGVyIGl04oCZcyBwYXJzZWQg dGhlIHdheSB3ZSBjYW4gYWxsIG90aGVyIHJlcXVlc3RzLiAgU2ltcGxlIGF0dHJpYnV0ZSB2YWxp ZGF0aW9uIGlzIGltcG9zc2libGUgYmVjYXVzZSDigJx2YWx1ZeKAnSBkZXBlbmRzIG9uIHRoZSB0 YXJnZXQgb2Yg4oCccGF0aOKAnSwgYW5kIHRoZXJlZm9yZSDigJx2YWx1ZeKAnSBjYW5ub3QgYmUg ZGVmaW5lZCBpbiBhIEpTT04gc2NoZW1hIHVzaW5nIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIGRv Yy4NCg0KDQoNCkV2ZW4gaWYgd2UgY2Fu4oCZdCBmaXggcGF0Y2gsIGZvciB3aGF0ZXZlciByZWFz b24sIHdlIHNob3VsZCBwcm92aWRlIHRoZSByZXN0IG9mIHRoZSBzY2hlbWFzLCByZXByZXNlbnRl ZCBpbiBKU09OIGZvcm1hdCwgZm9yIGJvdGggZG9jcy4NCg0KDQoNCi1tcmYNCg0KRnJvbTogUGhp bCBIdW50DQpTZW50OiBUaHVyc2RheSwgRmVicnVhcnkgMTIsIDIwMTUgMTI6NTggUE0NClRvOiBN aWNoYWVsIEZyb3N0DQpDYzogc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBpZXRmLm9yZz4NClN1 YmplY3Q6IFJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBKU09OIHJlcHJlc2VudGF0aW9u DQoNCk1pY2hhZWwsDQoNCkNhbiB5b3UgcHJvdmlkZSBleGFtcGxlcz8NCg0KVGhlIHNjaGVtYSBp biB0aGUgQVBJIGhhcyB0byBleHRlbmQgdGhlIHJlZ2lzdHJ5IGRlZmluZSBpbiBjb3JlLiAgIEFz IGVkaXRvciBJIHRoaW5rIGl0IHdvdWxkIGJlIGV2ZW4gbW9yZSBjb25mdXNpbmcgdG8gbWl4IGRh dGEgc2NoZW1hIGFuZCByZXF1ZXN0IHNjaGVtYSBpbiBhIHNpbmdsZSBkb2N1bWVudC4gSXQgYWxz byBiZWNvbWVzIHByb2JsZW1hdGljIHdoZW4gc3BlY3MgY3Jvc3MgcmVmZXJlbmNlIGVhY2ggb3Ro ZXIuIEluc3RlYWQgdGhlIGRvY3VtZW50IGxheW91dCBpcyBzdWNoIHRoYXQgQVBJIGJ1aWxkcyBv biBjb3JlIHNjaGVtYS4NCg0KVGhlIGZvcm1hdCBpbiBQQVRDSCBjb21lcyBmcm9tIHRoZSBKU09O IFBhdGNoIFJGQy4NCg0KUGhpbA0KDQpPbiBGZWIgMTIsIDIwMTUsIGF0IDEyOjQ2LCBNaWNoYWVs IEZyb3N0IDxtaWNoYWVsLmZyb3N0QG9yYWNsZS5jb208bWFpbHRvOm1pY2hhZWwuZnJvc3RAb3Jh Y2xlLmNvbT4+IHdyb3RlOg0KDQouMDpSZXNvdXJjZVR5cGUNCg0KdXJuOmlldGY6cGFyYW1zOnNj aW06c2NoZW1hczpjb3JlOjINCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQpzY2ltIG1haWxpbmcgbGlzdA0Kc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBp ZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2NpbQ0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc2NpbSBtYWls aW5nIGxpc3QNCnNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0NCg0KDQo= --_000_BN1PR04MB392DAA6B0268EB690553FEBE2160BN1PR04MB392namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJ cGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtG b2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCnAuTXNvQWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2Lk1zb0FjZXRh dGUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRl eHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLmFw cGxlLXN0eWxlLXNwYW4NCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtc3R5bGUtc3Bhbjt9DQpzcGFu LmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQt c3BhY2U7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRN TCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHls ZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6IkNvbnNvbGFzIiwic2Vy aWYiO30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9 DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiQmFsbG9vbiBUZXh0IENo YXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBU ZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0KLk1zb0NocERlZmF1 bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpA cGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEu MGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7 fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMg djpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lm IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFw IHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlm XS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJw bGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5PbmUgdGhpbmcgdGhhdCBp cyBuaWNlIGFib3V0IOKAnHNjaGVtYXPigJ0gaXMgdGhhdCBpdCBnaXZlcyB1cyBhIHdheSB0byBl eHRlbmQgYSByZXNvdXJjZSAob3IgdGhlIHJlcHJlc2VudGF0aW9uIG9mIGEgcmVzb3VyY2UpLiZu YnNwOyBCeSBtb3Zpbmcgb3VyIG1lc3NhZ2VzIHRvIHVzZQ0KIG1zZ1R5cGUgaW5zdGVhZCBvZiBz Y2hlbWFzLCB3ZSBtaWdodCBsb3NlIHNvbWUgb2YgdGhpcyBmbGV4aWJpbGl0eS4mbmJzcDsgSeKA mW0gbm90IHN1cmUgdGhhdCB3ZSB3b3VsZCB3YW50IGl0IG9yIG5vdCwgYnV0IEkgY2FuIGVudmlz aW9uIGEgTGlzdFJlc3BvbnNlIGZyb20gYSBzZXJ2ZXIgdGhhdCByZXR1cm5zIGEg4oCccGFnaW5n IHRva2Vu4oCdIGFsb25nIHdpdGggdGhlIGN1cnJlbnQgcGFnZSBudW1iZXIsIGV0Y+KApiZuYnNw OyBUaGlzIGNvdWxkIHBvdGVudGlhbGx5IGJlDQogcHV0IGludG8gYW4gZXh0ZW5zaW9uLiZuYnNw OyBKdXN0IHNvbWV0aGluZyB0byBjb25zaWRlcuKApjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+LS1LZWxseTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+IHNjaW0gW21haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBC ZWhhbGYgT2YgPC9iPlBoaWwgSHVudDxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBGZWJydWFy eSAyNCwgMjAxNSAxMjowMSBQTTxicj4NCjxiPlRvOjwvYj4gRXJpayBXYWhsc3Ryw7ZtIG5lWHVz PGJyPg0KPGI+Q2M6PC9iPiBTQ0lNIFdHPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc2NpbV0g UEFUQ0ggYW5kIHNjaGVtYSAod2FzOiBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50 YXRpb24pPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RXJp azxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWdyZWVkLiBJ IHRoaW5rIHRoaXMgbWFrZXMgc2Vuc2UgYW5kIGlzIGEgZ29vZCBjb21wcm9taXNlLiBUaGlzIHJl ZmxlY3RzIHdoYXQgd2UgZGlzY3Vzc2VkIG9uIG91ciBpbmZvcm1hbCBjYWxsIGxhc3Qgd2Vlay48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QW55 IG90aGVyIGNvbW1lbnRzPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Ymxh Y2siPlBoaWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj5AaW5kZXBlbmRl bnRpZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPjxhIGhyZWY9 Imh0dHA6Ly93d3cuaW5kZXBlbmRlbnRpZC5jb20iPnd3dy5pbmRlcGVuZGVudGlkLmNvbTwvYT48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86cGhpbC5odW50QG9y YWNsZS5jb20iPnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0 b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEZlYiAyNCwgMjAxNSwg YXQgMTo0MyBBTSwgRXJpayBXYWhsc3Ryw7ZtIG5lWHVzICZsdDs8YSBocmVmPSJtYWlsdG86ZXJp ay53YWhsc3Ryb21AbmV4dXNncm91cC5jb20iPmVyaWsud2FobHN0cm9tQG5leHVzZ3JvdXAuY29t PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkhpLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGFncmVlZCB0aGF0IHRoZXJlIGFyZSBzb21lIGluY29uc2lz dGVuY3kgYW5kIHBoaWxvc29waGljYWwgaXNzdWVzIHByZXNlbnQgaW4gdGhlIHNwZWNpZmljYXRp b25zIHRoYXQgcHJvYmFibHkgbmVlZCBhZGRyZXNzaW5nLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5JIHRoaW5rIHdlIHNob3VsZCBtYWtlIGRpZmZlcmVuY2VzIHRvIHRoZSBSZXNvdXJjZXMgYW5k IG1lc3NhZ2VzLCBhbmQgd2UgbmVlZCBzb21lIGNoYW5nZXMgdG8gdGhlIHNjaGVtYSBhbmQgdGhl IGFwaSBkcmFmdHMgdG8gbWFrZSB0aGF0IGNsZWFyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgUmVzb3VyY2VzIHJlcXVpcmVzIGZpeGVk IHNjaGVtYXMsIHRoZSBtZXNzYWdlcyBub3Qgc28gbXVjaC4gU2NoZW1hcyBpcyBpbnRlbmRlZCBz b2xlbHkgZm9yIHRoZSBwdXJwb3NlIG9mIGFsbG93aW5nIGEgY2xpZW50IHRvIHVuZGVyc3RhbmQg d2hhdCBhdHRyaWJ1dGVzIGFuZCBhc3NvY2lhdGVkIG1ldGFkYXRhIChyZWFkYWJpbGl0eSwgbXV0 YWJpbGl0eSwgdHlwZSwgZXRjKSBpcyBzdXBwb3J0ZWQgYnkgYQ0KIHBhcnRpY3VsYXIgc2Vydmlj ZSBwcm92aWRlci4gRGlzcmVnYXJkaW5nIG9uIHRoZSBjdXJyZW50bHkgdXNlZCBiZWFyZXIuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBt ZXNzYWdlIGRvbuKAmXQgbmVlZCB0byBiZSB2YWxpZGF0ZWQgYWNjb3JkaW5nIHRvIGEgc2NoZW1h LiBTQ0lNIGZvbGxvd3MgdGhlIFJvYnVzdG5lc3MgUHJpbmNpcGFsIChKb24gUG9zdGVs4oCZcyBs YXcgLSBvbmUgb2YgdGhlIGZvdW5kaW5nIHByaW5jaXBsZXMgb2YgVENQL0lQKS4gVGhpcyBtZWFu cyB0aGF0IG1lc3NhZ2Ugc2hvdWxkIG5vdCBuZWVkIHRvIGNvbXBseSB3aXRoIHNjaGVtYSBpbiBv cmRlciB0bw0KIGJlIGludGVycHJldGVkICh3aXRoaW4gcmVhc29uKSBieSBhIHNlcnZpY2UgcHJv dmlkZXIuICZuYnNwO0luIHByYWN0aWNhbCB0ZXJtcywgYSBTQ0lNIGNsaWVudCBzaG91bGQgbmV2 ZXIgaGF2ZSB0byBkbyBhIGxvdCBvZiB3b3JrIHRvIGNyZWF0ZSBvciBzZWFyY2ggZm9yIGEgVXNl ci4gQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2aWNlIHByb3ZpZGVyIGlzIG5vdCBvYmxpZ2VkIHRv IGFjY2VwdCBhIG5ldyBVc2VyICpleGFjdGx5KiBhcyB0aGUgY2xpZW50DQogc3BlY2lmaWVzLiBU aGUgc2VydmljZSBwcm92aWRlciBpcyBhbHdheXMgZnJlZSB0byBpbnRlcnByZXQgYW5kIGNoYW5n ZSBkYXRhLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5NZXNzYWdlcyBpcyBwYXJ0IG9mIHRoZSBBUEkgZHJhZnQsIGFuZCBSZXNvdXJjZXMgYW5k IHRoZXJlIHNjaGVtYXMgaXMgYSBwYXJ0IG9mIHRoZSBTY2hlbWEgZHJhZnQuIFdlIHNob3VsZCBu b3QgbWl4IHRoZW0gdG8gbXVjaCBhbmQgbWFrZSBpdCBjbGVhciBpbiB0aGUgc3BlYyB0aGF0IGlz IGFsc28gdGhlIGNhc2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkkgdGhpbmsgdGhhdCB0aGUgUmVzb3VyY2VzIHRoYXQgd2UgaGF2ZSB0b2Rh eSwgU2NoZW1hLCBSZXNvdXJjZVR5cGVzIGFuZCBTZXJ2aWNlUHJvdmlkZXJDb25maWdzIE1VU1Qg YmUgYWRkZWQgdG8gdGhlIC9TY2hlbWFzIGVuZHBvaW50LiBXZSBzaG91bGQgYWxzbyBhZGQgU2No ZW1hLCBSZXNvdXJjZVR5cGVzIGFuZCBTZXJ2aWNlUHJvdmlkZXJDb25maWdzIHRvIHRoZSBzZWN0 aW9uICZxdW90OzguNyBTY2hlbWEgUmVwcmVzZW50YXRpb27igJ0NCiBpbiB0aGUgc2NoZW1hIHNw ZWMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkEgc2Vjb25kIGltcG9ydGFudCBjaGFuZ2UgdG8gbWFrZSBpdCBjbGVhciB0aGF0IG1l c3NhZ2VzIGFyZSBtZXNzYWdlcywgaXMgdG8gcmVtb3ZlIHRoZSBzY2hlbWEgYXR0cmlidXRlIG9u IG9mIG9mIHRoZSBtZXNzYWdlcy4gVGhleSB3aGVyZSBhZGRlZCByYXRoZXIgbGF0ZSBpbiB0aGUg c3BlYy13cml0aW5nIHByb2Nlc3MgdG8gZ2l2ZSBhIG5vdGlvbiB0byB0aGUgc2VydmljZSBwcm92 aWRlciB3aGF0IGtpbmQNCiBvZiBtZXNzYWdlIHRoYXTigJlzIGN1cnJlbnRseSBzZW50LiBUaGUg aW50ZW50aW9uIHdhcyBub3QgdG8gZm9yY2UgdGhlIFNQIHRvIHZhbGlkYXRlIHRoZSBtZXNzYWdl cyBhZ2FpbnN0IGEgc2NoZW1hLiBJIHN1Z2dlc3QgdGhhdCB3ZSByZW1vdmUgdGhlIOKAnHNjaGVt YXMmcXVvdDsgYXR0cmlidXRlIGluIG1lc3NhZ2VzIGFuZCByZXBsYWNlcyBpdCB3aXRoIGEg4oCc bXNnVHlwZeKAnSB0aGF0IGNvdWxkIGluZGljYXRlIHdoYXQgbWVzc2FnZSBpdCBpcyAoUGF0Y2hP cA0KIG9yIExpc3RSZXNwb25zZSkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPi8gRXJpazxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBw dDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiAx MyBGZWIgMjAxNSwgYXQgMjI6MDgsIFBoaWwgSHVudCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnBoaWwu aHVudEBvcmFjbGUuY29tIj5waGlsLmh1bnRAb3JhY2xlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5XaXRoIHRoZSBwYXRjaCBvcGVyYXRpb24sIHRoZSBjb250ZW50cyBvZiDigJx2YWx1 ZeKAnSBpcyBjdXJyZW50bHkgZHJpdmVuIGJ5IHRoZSDigJxwYXRo4oCdIGF0dHJpYnV0ZS4gJm5i c3A7SW4gb3RoZXIgd29yZHMgaW4gYSBub3JtYWwgSlNPTiBzdHJ1Y3R1cmUsIHRoZSBQYXRjaCBw YXRoIGF0dHJpYnV0ZSBkZXNjcmliZXMNCiB0aGUgbGVmdCBoYWxmIG9mIGEgbmFtZSB2YWx1ZSBw YWlyLCBhbmQgdGhlIOKAnHZhbHVl4oCdIGRlc2NyaWJlcyB0aGUgcmlnaHQgaGFsZi48L3NwYW4+ DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij5TbyBpZiDigJxwYXRoJnF1b3Q7IHBvaW50cyB0byBhIGNvbXBsZXggYXR0cmlidXRlLCB0aGVu IOKAnHZhbHVl4oCdIE1VU1QgYmUgYSBKU09OIG9iamVjdCBvZiBvbmUgb3IgbW9yZSBzdWItYXR0 cmlidXRlcy4gJm5ic3A7SWYgcGF0aCBkZXNjcmliZXMgYSBzaW1wbGUgYXR0cmlidXRlLCB0aGFu IHRoZSBjb3JyZXNwb25kaW5nDQogdmFsdWUgbXVzdCBiZSBhIGJvb2xlYW4sIHN0cmluZyBkZXBl bmRpbmcgb24gdGhlIHNjaGVtYSBvZiB0aGUgYXR0cmlidXRlIGRlc2NyaWJlZCBieSDigJxwYXRo 4oCdLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDsiPlNDSU0gcGF0Y2ggaXMgYmFzZWQgb24gYW5kIGZvbGxvd3MgdGhl IHNhbWUgZGVzaWduIGFzIGZvciBSRkM2OTAyIChKU09OIFBhdGNoKS4gVGhlIG9ubHkgZGlmZmVy ZW5jZSBpcyB3ZSBkZWNpZGVkIHRvIGxpbWl0IHRoZSBudW1iZXIgb2Ygb3BlcmF0aW9uIHR5cGVz IGFuZCB0byB1c2UgZmlsdGVycw0KIGluIHBhdGhzIHJhdGhlciB0aGFuIGFycmF5IGluZGV4ZWQg YWNjZXNzIGJhc2VkIG9uIEpTT04gUG9pbnRlcnMgKFJGQzY5MDEpLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+UGhpbDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkBpbmRlcGVuZGVudGlkPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PGEgaHJlZj0iaHR0cDovL3d3dy5pbmRlcGVuZGVu dGlkLmNvbS8iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnd3dy5pbmRlcGVuZGVudGlkLmNv bTwvc3Bhbj48L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxhIGhyZWY9Im1h aWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+cGhp bC5odW50QG9yYWNsZS5jb208L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHls ZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5PbiBGZWIgMTMsIDIw MTUsIGF0IDEyOjI5IFBNLCBNaWNoYWVsIEZyb3N0ICZsdDs8YSBocmVmPSJtYWlsdG86bWljaGFl bC5mcm9zdEBvcmFjbGUuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5taWNoYWVsLmZy b3N0QG9yYWNsZS5jb208L3NwYW4+PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFG NDk3RCI+WWVzIEtlbGx5LCB5b3UgYXJlIGNvcnJlY3QuJm5ic3A7IEkgd2FzIGxvb2tpbmcgZm9y IHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgYWxsIHJlc291cmNlcyBhbmQgbWVzc2FnZXMuJm5i c3A7IFlvdSBhbHNvIGNvcnJlY3RseSBpZGVudGlmaWVkIHRoZSBpc3N1ZSBJIHdhcyB0cnlpbmcg dG8NCiByYWlzZSB3aXRoIHJlZ2FyZHMgdG8gUGF0Y2hPcC4mbmJzcDsgVGhhbmtzIGZvciB0YWtp bmcgYSBsb29rLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+LW1yZjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7 cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21h JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+S2VsbHkNCiBHcml6 emxlIFs8YSBocmVmPSJtYWlsdG86a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tIj48c3BhbiBz dHlsZT0iY29sb3I6cHVycGxlIj5tYWlsdG86a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tPC9z cGFuPjwvYT5dPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu Pjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj5GcmlkYXksIEZlYnJ1YXJ5IDEzLCAyMDE1IDY6NTYgQU08YnI+DQo8Yj5Ubzo8 L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPk1pY2hh ZWwgRnJvc3Q7IFBoaWwgSHVudDxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmci PjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4N CjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj5SZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlv bjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5NaWNoYWVsIOKApiBsZXQgbWUgbWFrZSBzdXJlIEkgdW5kZXJzdGFuZCB3aGF0IHlv dSBhcmUgbG9va2luZyBmb3IuJm5ic3A7IFlvdSB3b3VsZCBsaWtlIGEgc2NoZW1hIHJlcHJlc2Vu dGF0aW9uIChzdWNoIGFzIHdoYXQgaXMgaW5jbHVkZWQgaW4gc2VjdGlvbiA4LjcpIGZvciBhbGwN CiByZXNvdXJjZXMgYW5kIG1lc3NhZ2VzLiZuYnNwOyBJcyB0aGF0IHJpZ2h0Pzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+SWYgc28sIHRoZW4gSSAxMDAlIGFncmVlIHRoYXQgdGhpcyBpcyB1c2Vm dWwuJm5ic3A7IEluIHRoZSBTQ0lNIDEuMCBzcGVjIChiYWNrIHdoZW4gd2Ugc3VwcG9ydGVkIFhN TCBhcyBhIGRhdGEgZm9ybWF0KSB0aGVyZSB3YXMgYW4gWFNEIHRoYXQgZGlkIGV4YWN0bHkgd2hh dCB5b3UNCiBhcmUgbG9va2luZyBmb3Ig4oCTIGRlc2NyaWJlZCBib3RoIHJlc291cmNlcyBhbmQg bWVzc2FnZXMuJm5ic3A7IEkgYWdyZWUgdGhhdCBoYXZpbmcgdGhpcyBjb2RpZmllcyB0aGUgcnVs ZXMgYW5kIHJlbW92ZXMgc29tZSBhbWJpZ3VpdHkuJm5ic3A7IEkgd291bGQgYmUgaW4gZmF2b3Ig b2YgYWRkaW5nIHNvbWV0aGluZyBsaWtlIHRoaXMgdG8gdGhlIFNDSU0gc3BlYy48L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPlJlZ2FyZGluZyB0aGUgUGF0Y2hPcCwgaXMgdGhlIHByb2JsZW0gdGhh dCB0aGUgdmFsdWUgc3ViLWF0dHJpYnV0ZSBjb3VsZCBiZSBhbnl0aGluZyDigJMgbXVsdGl2YWx1 ZWQgY291bGQgYmUgdHJ1ZSBvciBmYWxzZSwgdGhlcmUgbWF5IG9yIG1heSBub3QgYmUgc3ViLWF0 dHJpYnV0ZXMNCiAoaWUg4oCTIGl0IGNvdWxkIGJlIGNvbXBsZXgsIHdoaWNoIGlzIG5vdCB0ZWNo bmljYWxseSBzdXBwb3J0ZWQpLCBhbmQgdGhlIHR5cGUgaXMgZGVwZW5kZW50IHVwb24gdGhlIGFj dHVhbCBhdHRyaWJ1dGUgdGhhdCB5b3UgYXJlIHJlcGxhY2luZz8mbmJzcDsgV2l0aCB0aGlzIGFt YmlndWl0eSB0aGVyZSBpc27igJl0IGEgZ29vZCB3YXkgdG8gcmVwcmVzZW50IHRoaXMgaW4gYSBz Y2hlbWEgY3VycmVudGx5Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+LS1LZWxseTwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4w cHQgMGluIDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFo b21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPnNjaW0NCiBbPGEgaHJlZj0ibWFpbHRv OnNjaW0tYm91bmNlc0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+bWFpbHRv OnNjaW0tYm91bmNlc0BpZXRmLm9yZzwvc3Bhbj48L2E+XTxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48Yj5PbiBCZWhhbGYgT2Y8c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPk1pY2hhZWwgRnJvc3Q8YnI+DQo8 Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+VGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDY6NDUgUE08YnI+DQo8Yj5Ubzo8L2I+PHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlBoaWwgSHVudDxi cj4NCjxiPkNjOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpw dXJwbGUiPnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3NjaW1dIFND SU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBQaGlsLDxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPk5vdCBzdXJlIHdoYXQgeW91IG1lYW4gYnkgZXhhbXBsZXMuJm5ic3A7IE15 IGNvbmNlcm4gaXMgdGhhdCBpbiB0aGUgc2NoZW1hIGRvYywgc2VjdGlvbiA4LjcgcHJvdmlkZXMg c2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBjb3JlIHVzZXIvZ3JvdXAgYW5kIGVudGVycHJpc2Ug dXNlci4mbmJzcDsNCiBXaGF0IGFib3V0IGFsbCB0aGUgb3RoZXIgc2NoZW1hcyB3ZSByZWZlcmVu Y2U/Jm5ic3A7IFdlIHNob3VsZCBwcm92aWRlIHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgZXZl cnkgc2NoZW1hIGRlZmluZWQgaW4gdGhlIHNwZWMuJm5ic3A7IEV2ZXJ5b25lIGltcGxlbWVudGlu ZyB0aGlzIHNwZWMgd2lsbCBuZWVkIHRoZW0uJm5ic3A7IFdoeSBwcm92aWRlIGp1c3QgdGhyZWUg YW5kIGxlYXZlIHRoZSByZXN0IHVwIHRvIGd1ZXNzIHdvcms/Jm5ic3A7IEV2ZXJ5IGltcGxlbWVu dGF0aW9uDQogbmVlZHMgdG8gZG8gdmFsaWRhdGlvbiwgZXZlcnkgdmFsaWRhdGlvbiBuZWVkcyBh IHNjaGVtYSB0byB2YWxpZGF0ZSBhZ2FpbnN0LiZuYnNwOyBTbyBteSBjb25jZXJuIGlzIHR3b2Zv bGQuJm5ic3A7IEZpcnN0LCB3ZSByZWZlcmVuY2UgYSBidW5jaCBvZiBzY2hlbWFzIHRoYXQgZXZl cnlvbmUgbmVlZHMsIGJ1dCB3ZSBkb27igJl0IHByb3ZpZGUgdGhlbS4mbmJzcDsgU2Vjb25kLCBz b21lIG9mIHRoZSBzY2hlbWFzIHdlIHJlZmVyZW5jZSAoc3VjaCBhcyBwYXRjaE9wKSBjYW5ub3QN CiBiZSByZXByZXNlbnRlZCBpbiBKU09OIHVzaW5nIG91ciBvd24gZGVmaW5pdGlvbnMuPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5J4oCZbSBjZXJ0YWlubHkgT0sgd2l0aCBhbiBhcHBlbmRpeCBp biB0aGUgYXBpIGRvYyBmb3IgbWVzc2FnZSBzY2hlbWFzIGFuZCBhbiBhcHBlbmRpeCBpbiB0aGUg c2NoZW1hIGRvYyBmb3IgYWxsIG9mIHRoZSBlbnRpdHkgc2NoZW1hcy4mbmJzcDsgTXkgcG9pbnQg aXMgYWxsIHRoZXNlDQogc2NoZW1hcyBzaG91bGQgZXhpc3QuJm5ic3A7IFdlIHJlZmVyZW5jZSB0 aGVtLCB3ZSBkZXNjcmliZSB0aGVtLCBidXQgd2Ugb25seSBwcm92aWRlIHRocmVlIG9mIHRoZW0u Jm5ic3A7IEl0IGp1c3Qgc2VlbXMgd3JvbmcgdG8gbWUgKHBlcmhhcHMgbXkgb3duIHNob3J0Y29t aW5nKSBidXQgd2XigJlyZSBhc2tpbmcgcGVvcGxlIHRvIGltcGxlbWVudCBTQ0lNIHBhdGNoLCB1 c2luZyBhIFNDSU0gc2NoZW1hIGRlZmluZWQgcmVxdWVzdCwgdGhhdCB3ZSBkbyBub3QgcHJvdmlk ZSwNCiBhbmQgY2Fubm90IGRlZmluZSB1c2luZyBydWxlcyB3ZSBzZXQgZm9ydGggaW4gc2VjdGlv biA3IG9mIHRoZSBzY2hlbWEgZG9jLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWst YmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PlNvIGJvdHRvbSBsaW5lLCBhbGwgSeKAmW0gcmVxdWVzdGluZyBpcyB0aGUgSlNPTiByZXByZXNl bnRhdGlvbiBvZiB0aGUgU0NJTSBzY2hlbWFzIHdlIHJlZmVyZW5jZS48L3NwYW4+PG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhpcyBpcyBhIFNDSU0gc2NoZW1hIHJl ZmVyZW5jZSwg4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6UGF0Y2hP cOKAnCwgSSBmZWVsIHdlIHNob3VsZCBwcm92aWRlIHRoZSBKU09OIHJlcHJlc2VudGF0aW9uIGZv ciBpdC4gJm5ic3A7SWYgd2UgY2Fu4oCZdCBkbyBpdCwgbm9ib2R5IGltcGxlbWVudGluZyB0aGUg c3BlYyBjYW4gZWl0aGVyLiZuYnNwOyBBbGwgb2YgdGhlIHNjaGVtYXMgd2UgcmVmZXJlbmNlIHNo b3VsZCBiZSBwcm92aWRlZCB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zIHNldCBkb3duIGluIHNl Y3Rpb24gNyBvZiB0aGUgc2NoZW1hIHJmYyAob3IgZW5oYW5jZWQgaW4gdGhlIGFwaSBkb2MsIHVz aW5nIHNlY3Rpb24gNyBhcyBhIGJhc2UpLiZuYnNwOyBGcmFua2x5LCBJ4oCZbSBkcmVhZGluZyB0 aGUgb3V0Y29tZSBvZiBhbGwgdGhpcyBiZWNhdXNlIEnigJl2ZSBhbHJlYWR5IHNwZW50IGEgY291 cGxlIG9mIG1vbnRocyBpbXBsZW1lbnRpbmcgcGF0Y2ggaW4gaXRzIGN1cnJlbnQgZm9ybSB3aXRo IG92ZXIgMTUwIHVuaXQgdGVzdHMgdG8gY29uZmlybSBpdCBkb2VzIHdoYXQgSSB0aGluayB0aGUg c3BlYyByZXF1aXJlcy4mbmJzcDsgQnV0IHNldmVyYWwgb2YgbXkgcGVlcnMgaGF2ZSBjb21lIHRv IG1lIGFuZCBhc2tlZCBmb3IgdGhlc2Ugc2NoZW1hIGRlZmluaXRpb25zIChpbiBKU09OKSBhbmQg YSBjb3VwbGUgaGF2ZSBwb2ludGVkIG91dCB0aGF0IHRoZSBwYXRjaCByZXF1ZXN0IHNjaGVtYSwg 4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6UGF0Y2hPcOKAnCwgY2Fu bm90IGJlIHJlcHJlc2VudGVkIHVzaW5nIHNlY3Rpb24gNyBydWxlcyBhbmQgdGhhdCB3ZSBjYW5u b3QgZG8gdXBmcm9udCB2YWxpZGF0aW9uIG9uIHBhdGNoIHJlcXVlc3RzIHRoZSB3YXkgd2UgZG8g YWxsIG90aGVyIFNDSU0gcmVxdWVzdHMuJm5ic3A7IEFuZCBpdOKAmXMgdHJ1ZSwgd2UgY2Fubm90 IGRvIGFuIHVwZnJvbnQgdmFsaWRhdGlvbiBvZiBwYXRjaCBhZnRlciBpdOKAmXMgcGFyc2VkIHRo ZSB3YXkgd2UgY2FuIGFsbCBvdGhlciByZXF1ZXN0cy4mbmJzcDsgU2ltcGxlIGF0dHJpYnV0ZSB2 YWxpZGF0aW9uIGlzIGltcG9zc2libGUgYmVjYXVzZSDigJx2YWx1ZeKAnSBkZXBlbmRzIG9uIHRo ZSB0YXJnZXQgb2Yg4oCccGF0aOKAnSwgYW5kIHRoZXJlZm9yZSDigJx2YWx1ZeKAnSBjYW5ub3Qg YmUgZGVmaW5lZCBpbiBhIEpTT04gc2NoZW1hIHVzaW5nIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1h IGRvYy48L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVm b3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZv cmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+RXZl biBpZiB3ZSBjYW7igJl0IGZpeCBwYXRjaCwgZm9yIHdoYXRldmVyIHJlYXNvbiwgd2Ugc2hvdWxk IHByb3ZpZGUgdGhlIHJlc3Qgb2YgdGhlIHNjaGVtYXMsIHJlcHJlc2VudGVkIGluIEpTT04gZm9y bWF0LCBmb3IgYm90aCBkb2NzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0i cGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJw YWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj4tbXJmPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7Ij5QaGlsDQogSHVudDxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+VGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDEy OjU4IFBNPGJyPg0KPGI+VG86PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj5NaWNoYWVsIEZyb3N0PGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86c2NpbUBp ZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c2NpbUBpZXRmLm9yZzwvc3Bhbj48 L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPlJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBKU09OIHJlcHJl c2VudGF0aW9uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1pY2hhZWwsPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkNhbiB5b3UgcHJvdmlkZSBleGFtcGxlcz88bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+VGhlIHNjaGVtYSBpbiB0aGUgQVBJIGhhcyB0byBleHRlbmQgdGhlIHJlZ2lz dHJ5IGRlZmluZSBpbiBjb3JlLiAmbmJzcDsgQXMgZWRpdG9yIEkgdGhpbmsgaXQgd291bGQgYmUg ZXZlbiBtb3JlIGNvbmZ1c2luZyB0byBtaXggZGF0YSBzY2hlbWEgYW5kIHJlcXVlc3Qgc2NoZW1h IGluIGEgc2luZ2xlIGRvY3VtZW50LiBJdCBhbHNvIGJlY29tZXMgcHJvYmxlbWF0aWMgd2hlbiBz cGVjcyBjcm9zcyByZWZlcmVuY2UgZWFjaA0KIG90aGVyLiBJbnN0ZWFkIHRoZSBkb2N1bWVudCBs YXlvdXQgaXMgc3VjaCB0aGF0IEFQSSBidWlsZHMgb24gY29yZSBzY2hlbWEuJm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBmb3JtYXQgaW4gUEFUQ0ggY29tZXMgZnJvbSB0aGUg SlNPTiBQYXRjaCBSRkMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpQaGlsPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KT24gRmViIDEyLCAyMDE1LCBhdCAxMjo0NiwgTWljaGFl bCBGcm9zdCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbSI+PHNw YW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPC9zcGFuPjwv YT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwcmUgc3R5bGU9InBhZ2Ut YnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPi4wOlJl c291cmNlVHlwZTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVh ay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+dXJuOmlldGY6 cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjI8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjwvYmxv Y2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X188YnI+DQpzY2ltIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpzY2ltQGlldGYu b3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5zY2ltQGlldGYub3JnPC9zcGFuPjwvYT48 YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0i PjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vc2NpbTwvc3Bhbj48L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+X19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzY2ltIG1haWxpbmcg bGlzdDxicj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86c2NpbUBpZXRmLm9yZyI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpwdXJwbGUiPnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9h PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6cHVycGxlIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3NjaW08L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1s Pg0K --_000_BN1PR04MB392DAA6B0268EB690553FEBE2160BN1PR04MB392namprd_-- From nobody Tue Feb 24 15:03:29 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E95301A0076 for ; Tue, 24 Feb 2015 15:03:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.208 X-Spam-Level: X-Spam-Status: No, score=-4.208 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KGWmzk5ggG0E for ; Tue, 24 Feb 2015 15:03:24 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16EFE1A9069 for ; Tue, 24 Feb 2015 15:03:23 -0800 (PST) Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1ON3LR7004770 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 24 Feb 2015 23:03:21 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet22.oracle.com (8.14.5+Sun/8.14.5) with ESMTP id t1ON3JG2011500 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 24 Feb 2015 23:03:19 GMT Received: from abhmp0013.oracle.com (abhmp0013.oracle.com [141.146.116.19]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t1ON3I9P021699; Tue, 24 Feb 2015 23:03:18 GMT Received: from [25.84.143.205] (/72.143.234.215) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 24 Feb 2015 15:03:17 -0800 Content-Type: multipart/alternative; boundary=Apple-Mail-5DF1E7B9-0D42-4132-9D29-43AE8FC88493 Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (12B466) In-Reply-To: Date: Tue, 24 Feb 2015 15:03:15 -0800 Content-Transfer-Encoding: 7bit Message-Id: <8DB34ABA-7C60-406A-852D-1CA3E756D1F3@oracle.com> References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> To: Kelly Grizzle X-Source-IP: ucsinet22.oracle.com [156.151.31.94] Archived-At: Cc: SCIM WG , =?utf-8?Q?Erik_Wahlstr=C3=B6m_neXus?= Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Feb 2015 23:03:28 -0000 --Apple-Mail-5DF1E7B9-0D42-4132-9D29-43AE8FC88493 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I believe we are ok on this. We have pretty good separation. For example Lis= t response does contain json objects that have resource specific schemas.=20= E.g. The outer json object would have a msgType of ListResponse while the ar= ray of result objects each contains a resource each with its own schemas att= ribute.=20 Phil > On Feb 24, 2015, at 14:31, Kelly Grizzle wro= te: >=20 > One thing that is nice about =E2=80=9Cschemas=E2=80=9D is that it gives us= a way to extend a resource (or the representation of a resource). By movin= g our messages to use msgType instead of schemas, we might lose some of this= flexibility. I=E2=80=99m not sure that we would want it or not, but I can e= nvision a ListResponse from a server that returns a =E2=80=9Cpaging token=E2= =80=9D along with the current page number, etc=E2=80=A6 This could potentia= lly be put into an extension. Just something to consider=E2=80=A6 > =20 > --Kelly > =20 > From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt > Sent: Tuesday, February 24, 2015 12:01 PM > To: Erik Wahlstr=C3=B6m neXus > Cc: SCIM WG > Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON repres= entation) > =20 > Erik > =20 > Agreed. I think this makes sense and is a good compromise. This reflects w= hat we discussed on our informal call last week. > =20 > Any other comments? > =20 > Phil > =20 > @independentid > www.independentid.com > phil.hunt@oracle.com > =20 > On Feb 24, 2015, at 1:43 AM, Erik Wahlstr=C3=B6m neXus wrote: > =20 > Hi, > =20 > I agreed that there are some inconsistency and philosophical issues presen= t in the specifications that probably need addressing.=20 > =20 > I think we should make differences to the Resources and messages, and we n= eed some changes to the schema and the api drafts to make that clear. > =20 > The Resources requires fixed schemas, the messages not so much. Schemas is= intended solely for the purpose of allowing a client to understand what att= ributes and associated metadata (readability, mutability, type, etc) is supp= orted by a particular service provider. Disregarding on the currently used b= earer. > =20 > The message don=E2=80=99t need to be validated according to a schema. SCIM= follows the Robustness Principal (Jon Postel=E2=80=99s law - one of the fou= nding principles of TCP/IP). This means that message should not need to comp= ly with schema in order to be interpreted (within reason) by a service provi= der. In practical terms, a SCIM client should never have to do a lot of wor= k to create or search for a User. At the same time, a service provider is no= t obliged to accept a new User *exactly* as the client specifies. The servic= e provider is always free to interpret and change data. > =20 > Messages is part of the API draft, and Resources and there schemas is a pa= rt of the Schema draft. We should not mix them to much and make it clear in t= he spec that is also the case. > =20 > I think that the Resources that we have today, Schema, ResourceTypes and S= erviceProviderConfigs MUST be added to the /Schemas endpoint. We should also= add Schema, ResourceTypes and ServiceProviderConfigs to the section "8.7 Sc= hema Representation=E2=80=9D in the schema spec.=20 > =20 > A second important change to make it clear that messages are messages, is t= o remove the schema attribute on of of the messages. They where added rather= late in the spec-writing process to give a notion to the service provider w= hat kind of message that=E2=80=99s currently sent. The intention was not to f= orce the SP to validate the messages against a schema. I suggest that we rem= ove the =E2=80=9Cschemas" attribute in messages and replaces it with a =E2=80= =9CmsgType=E2=80=9D that could indicate what message it is (PatchOp or ListR= esponse). > =20 > / Erik > =20 > =20 > =20 > On 13 Feb 2015, at 22:08, Phil Hunt wrote: > =20 > With the patch operation, the contents of =E2=80=9Cvalue=E2=80=9D is curre= ntly driven by the =E2=80=9Cpath=E2=80=9D attribute. In other words in a no= rmal JSON structure, the Patch path attribute describes the left half of a n= ame value pair, and the =E2=80=9Cvalue=E2=80=9D describes the right half. > =20 > So if =E2=80=9Cpath" points to a complex attribute, then =E2=80=9Cvalue=E2= =80=9D MUST be a JSON object of one or more sub-attributes. If path describ= es a simple attribute, than the corresponding value must be a boolean, strin= g depending on the schema of the attribute described by =E2=80=9Cpath=E2=80=9D= . > =20 > SCIM patch is based on and follows the same design as for RFC6902 (JSON Pa= tch). The only difference is we decided to limit the number of operation typ= es and to use filters in paths rather than array indexed access based on JSO= N Pointers (RFC6901). > =20 > Phil > =20 > @independentid > www.independentid.com > phil.hunt@oracle.com > =20 > On Feb 13, 2015, at 12:29 PM, Michael Frost wro= te: > =20 > Yes Kelly, you are correct. I was looking for schema representation for a= ll resources and messages. You also correctly identified the issue I was tr= ying to raise with regards to PatchOp. Thanks for taking a look. > =20 > -mrf > =20 > From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com]=20 > Sent: Friday, February 13, 2015 6:56 AM > To: Michael Frost; Phil Hunt > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Michael =E2=80=A6 let me make sure I understand what you are looking for. = You would like a schema representation (such as what is included in section= 8.7) for all resources and messages. Is that right? > =20 > If so, then I 100% agree that this is useful. In the SCIM 1.0 spec (back w= hen we supported XML as a data format) there was an XSD that did exactly wha= t you are looking for =E2=80=93 described both resources and messages. I ag= ree that having this codifies the rules and removes some ambiguity. I would= be in favor of adding something like this to the SCIM spec. > =20 > Regarding the PatchOp, is the problem that the value sub-attribute could b= e anything =E2=80=93 multivalued could be true or false, there may or may no= t be sub-attributes (ie =E2=80=93 it could be complex, which is not technica= lly supported), and the type is dependent upon the actual attribute that you= are replacing? With this ambiguity there isn=E2=80=99t a good way to repre= sent this in a schema currently. > =20 > --Kelly > =20 > =20 > From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael Frost > Sent: Thursday, February 12, 2015 6:45 PM > To: Phil Hunt > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Hi Phil,=20 > =20 > Not sure what you mean by examples. My concern is that in the schema doc,= section 8.7 provides schema representation for core user/group and enterpri= se user. What about all the other schemas we reference? We should provide s= chema representation for every schema defined in the spec. Everyone impleme= nting this spec will need them. Why provide just three and leave the rest u= p to guess work? Every implementation needs to do validation, every validat= ion needs a schema to validate against. So my concern is twofold. First, w= e reference a bunch of schemas that everyone needs, but we don=E2=80=99t pro= vide them. Second, some of the schemas we reference (such as patchOp) canno= t be represented in JSON using our own definitions. > =20 > I=E2=80=99m certainly OK with an appendix in the api doc for message schem= as and an appendix in the schema doc for all of the entity schemas. My poin= t is all these schemas should exist. We reference them, we describe them, b= ut we only provide three of them. It just seems wrong to me (perhaps my own= shortcoming) but we=E2=80=99re asking people to implement SCIM patch, using= a SCIM schema defined request, that we do not provide, and cannot define us= ing rules we set forth in section 7 of the schema doc. > =20 > So bottom line, all I=E2=80=99m requesting is the JSON representation of t= he SCIM schemas we reference. > =20 > This is a SCIM schema reference, =E2=80=9C urn:ietf:params:scim:api:messag= es:2.0:PatchOp=E2=80=9C, I feel we should provide the JSON representation fo= r it. If we can=E2=80=99t do it, nobody implementing the spec can either. A= ll of the schemas we reference should be provided using our own definitions s= et down in section 7 of the schema rfc (or enhanced in the api doc, using se= ction 7 as a base). Frankly, I=E2=80=99m dreading the outcome of all this b= ecause I=E2=80=99ve already spent a couple of months implementing patch in i= ts current form with over 150 unit tests to confirm it does what I think the= spec requires. But several of my peers have come to me and asked for these= schema definitions (in JSON) and a couple have pointed out that the patch r= equest schema, =E2=80=9C urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80= =9C, cannot be represented using section 7 rules and that we cannot do upfro= nt validation on patch requests the way we do all other SCIM requests. And i= t=E2=80=99s true, we cannot do an upfront validation of patch after it=E2=80= =99s parsed the way we can all other requests. Simple attribute validation i= s impossible because =E2=80=9Cvalue=E2=80=9D depends on the target of =E2=80= =9Cpath=E2=80=9D, and therefore =E2=80=9Cvalue=E2=80=9D cannot be defined in= a JSON schema using section 7 of the schema doc. > =20 > Even if we can=E2=80=99t fix patch, for whatever reason, we should provide= the rest of the schemas, represented in JSON format, for both docs. > =20 > -mrf > =20 > From: Phil Hunt=20 > Sent: Thursday, February 12, 2015 12:58 PM > To: Michael Frost > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Michael, > =20 > Can you provide examples? > =20 > The schema in the API has to extend the registry define in core. As edit= or I think it would be even more confusing to mix data schema and request sc= hema in a single document. It also becomes problematic when specs cross refe= rence each other. Instead the document layout is such that API builds on cor= e schema.=20 > =20 > The format in PATCH comes from the JSON Patch RFC.=20 >=20 > Phil >=20 > On Feb 12, 2015, at 12:46, Michael Frost wrote:= >=20 > .0:ResourceType > urn:ietf:params:scim:schemas:core:2 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > =20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > =20 > =20 --Apple-Mail-5DF1E7B9-0D42-4132-9D29-43AE8FC88493 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
I believe we are ok on this. We have p= retty good separation. For example List response does contain json objects t= hat have resource specific schemas. 

E.g. The o= uter json object would have a msgType of ListResponse while the array of res= ult objects each contains a resource each with its own schemas attribute.&nb= sp;

Phil

On Feb 24, 2015, at 14:31, Kelly Grizzle <<= a href=3D"mailto:kelly.grizzle@sailpoint.com">kelly.grizzle@sailpoint.com> wrote:

One thing that is nice abou= t =E2=80=9Cschemas=E2=80=9D is that it gives us a way to extend a resource (= or the representation of a resource).  By moving our messages to use msgType instead of schemas, we might lose some of this flexibility.  I= =E2=80=99m not sure that we would want it or not, but I can envision a ListR= esponse from a server that returns a =E2=80=9Cpaging token=E2=80=9D along wi= th the current page number, etc=E2=80=A6  This could potentially be put into an extension.  Just something to consider=E2=80=A6=

 

--Kelly

 

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt
Sent: Tuesday, February 24, 2015 12:01 PM
To: Erik Wahlstr=C3=B6m neXus
Cc: SCIM WG
Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON r= epresentation)

 

Erik

 

Agreed. I think this makes sense and is a good compro= mise. This reflects what we discussed on our informal call last week.

 

Any other comments?

 

 

On Feb 24, 2015, at 1:43 AM, Erik Wahlstr=C3=B6m neXu= s <erik.wahlstrom@nexusg= roup.com> wrote:

 

Hi,

 

I agreed that there are some inconsistency and philos= ophical issues present in the specifications that probably need addressing.&= nbsp;

 

I think we should make differences to the Resources a= nd messages, and we need some changes to the schema and the api drafts to ma= ke that clear.

 

The Resources requires fixed schemas, the messages no= t so much. Schemas is intended solely for the purpose of allowing a client t= o understand what attributes and associated metadata (readability, mutabilit= y, type, etc) is supported by a particular service provider. Disregarding on the currently used bearer.

 

The message don=E2=80=99t need to be validated accord= ing to a schema. SCIM follows the Robustness Principal (Jon Postel=E2=80=99s= law - one of the founding principles of TCP/IP). This means that message sh= ould not need to comply with schema in order to be interpreted (within reason) by a service provider.  In practical te= rms, a SCIM client should never have to do a lot of work to create or search= for a User. At the same time, a service provider is not obliged to accept a= new User *exactly* as the client specifies. The service provider is always free to interpret and change data= .

 

Messages is part of the API draft, and Resources and t= here schemas is a part of the Schema draft. We should not mix them to much a= nd make it clear in the spec that is also the case.

 

I think that the Resources that we have today, Schema= , ResourceTypes and ServiceProviderConfigs MUST be added to the /Schemas end= point. We should also add Schema, ResourceTypes and ServiceProviderConfigs t= o the section "8.7 Schema Representation=E2=80=9D in the schema spec. 

 

A second important change to make it clear that messa= ges are messages, is to remove the schema attribute on of of the messages. T= hey where added rather late in the spec-writing process to give a notion to t= he service provider what kind of message that=E2=80=99s currently sent. The intention was not to force th= e SP to validate the messages against a schema. I suggest that we remove the= =E2=80=9Cschemas" attribute in messages and replaces it with a =E2=80=9Cmsg= Type=E2=80=9D that could indicate what message it is (PatchOp or ListResponse).

 

/ Erik

 

 

 

On 13 Feb 2015, at 22:08, Phil Hunt <phil.hunt@oracle.com> wrote:

 

With the patch operation, the contents o= f =E2=80=9Cvalue=E2=80=9D is currently driven by the =E2=80=9Cpath=E2=80=9D a= ttribute.  In other words in a normal JSON structure, the Patch path at= tribute describes the left half of a name value pair, and the =E2=80=9Cvalue=E2=80=9D describ= es the right half.

 

So if =E2=80=9Cpath" points to a complex= attribute, then =E2=80=9Cvalue=E2=80=9D MUST be a JSON object of one or mor= e sub-attributes.  If path describes a simple attribute, than the corre= sponding value must be a boolean, string depending on the schema of the attribute de= scribed by =E2=80=9Cpath=E2=80=9D.

 

SCIM patch is based on and follows the s= ame design as for RFC6902 (JSON Patch). The only difference is we decided to= limit the number of operation types and to use filters in paths rather than array indexed access based on JSON Pointers (RFC6901).=

 

 

On Feb 13, 2015, at 12:29 PM, Michael Fros= t <michael.frost@oracle.com> wrote:

 

Yes Kelly, you are correct.=   I was looking for schema representation for all resources and message= s.  You also correctly identified the issue I was trying to raise with regards to PatchOp.  Thanks for taking a look.<= /o:p>

 

-mrf

 

From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com] 
Sent: Friday, Febru= ary 13, 2015 6:56 AM
To: Michael Frost; P= hil Hunt
Cc: scim@ietf.org
Subject: Re: [scim]= SCIM schema IDs and JSON representation

 

Michael =E2=80=A6 let me ma= ke sure I understand what you are looking for.  You would like a schema= representation (such as what is included in section 8.7) for all resources and messages.  Is that right?

 

If so, then I 100% agree th= at this is useful.  In the SCIM 1.0 spec (back when we supported XML as= a data format) there was an XSD that did exactly what you are looking for =E2=80=93 described both resources and messages.  I ag= ree that having this codifies the rules and removes some ambiguity.  I w= ould be in favor of adding something like this to the SCIM spec.=

 

Regarding the PatchOp, is t= he problem that the value sub-attribute could be anything =E2=80=93 multival= ued could be true or false, there may or may not be sub-attributes (ie =E2=80=93 it could be complex, which is not technically supported), and= the type is dependent upon the actual attribute that you are replacing?&nbs= p; With this ambiguity there isn=E2=80=99t a good way to represent this in a= schema currently.

 

--Kelly

 

 

From: scim [mail= to:scim-bounces@ietf.org]&n= bsp;On Behalf Of Michael Frost
Sent: Thursday, Feb= ruary 12, 2015 6:45 PM
To: Phil Hunt
Cc: scim@ietf.org
Subject: Re: [scim]= SCIM schema IDs and JSON representation

 

Hi Phil, 

 

Not sure what you mean by e= xamples.  My concern is that in the schema doc, section 8.7 provides sc= hema representation for core user/group and enterprise user.  What about all the other schemas we reference?  We should provide sche= ma representation for every schema defined in the spec.  Everyone imple= menting this spec will need them.  Why provide just three and leave the= rest up to guess work?  Every implementation needs to do validation, every validation needs a schema to validate against= .  So my concern is twofold.  First, we reference a bunch of schem= as that everyone needs, but we don=E2=80=99t provide them.  Second, som= e of the schemas we reference (such as patchOp) cannot be represented in JSON using our own definitions.

 

I=E2=80=99m certainly OK wi= th an appendix in the api doc for message schemas and an appendix in the sch= ema doc for all of the entity schemas.  My point is all these schemas should exist.  We reference them, we describe them, but we onl= y provide three of them.  It just seems wrong to me (perhaps my own sho= rtcoming) but we=E2=80=99re asking people to implement SCIM patch, using a S= CIM schema defined request, that we do not provide, and cannot define using rules we set forth in section 7 of the schema doc.<= /span>

  

So bottom l=
ine, all I=E2=80=99m requesting is the JSON representation of the SCIM schem=
as we reference.
 
This is a S=
CIM schema reference, =E2=80=9C urn:ietf:params:scim:api:messages:2.0:PatchO=
p=E2=80=9C, I feel we should provide the JSON representation for it.  I=
f we can=E2=80=99t do it, nobody implementing the spec can either.  All=
 of the schemas we reference should be provided using our own definitions se=
t down in section 7 of the schema rfc (or enhanced in the api doc, using sec=
tion 7 as a base).  Frankly, I=E2=80=99m dreading the outcome of all th=
is because I=E2=80=99ve already spent a couple of months implementing patch i=
n its current form with over 150 unit tests to confirm it does what I think t=
he spec requires.  But several of my peers have come to me and asked fo=
r these schema definitions (in JSON) and a couple have pointed out that the p=
atch request schema, =E2=80=9C urn:ietf:params:scim:api:messages:2.0:PatchOp=
=E2=80=9C, cannot be represented using section 7 rules and that we cannot do=
 upfront validation on patch requests the way we do all other SCIM requests.=
  And it=E2=80=99s true, we cannot do an upfront validation of patch af=
ter it=E2=80=99s parsed the way we can all other requests.  Simple attr=
ibute validation is impossible because =E2=80=9Cvalue=E2=80=9D depends on th=
e target of =E2=80=9Cpath=E2=80=9D, and therefore =E2=80=9Cvalue=E2=80=9D ca=
nnot be defined in a JSON schema using section 7 of the schema doc.
 
Even if we=
 can=E2=80=99t fix patch, for whatever reason, we should provide the rest of=
 the schemas, represented in JSON format, for both docs.

 


-mrf


 







From: Phil
 Hunt 

Sent: Thursday, Feb=
ruary 12, 2015 12:58 PM

To: Michael Frost
Cc: scim@ietf.org

Subject: Re: [scim]=
 SCIM schema IDs and JSON representation










 








Michael,










 










Can you provide examples?










 










The schema in the API has to extend the registry defi=
ne in core.   As editor I think it would be even more confusing to mix d=
ata schema and request schema in a single document. It also becomes problema=
tic when specs cross reference each
 other. Instead the document layout is such that API builds on core schema.&=
nbsp;










 










The format in PATCH comes from the JSON Patch RFC.&nb=
sp;












Phil










On Feb 12, 2015, at 12:46, Michael Frost <michael.frost@oracle.com> wrote:






.0:=
ResourceType


urn=
:ietf:params:scim:schemas:core:2

________________________________________= _______
scim mailing list
scim@ietf.org<= /span>
https://www.ietf.org/mailman/listinfo/scim

 

________________________________________= _______
scim mailing list
scim@ietf.= org
https://www.ietf.org/mailman/listinfo/scim=

 

 

= --Apple-Mail-5DF1E7B9-0D42-4132-9D29-43AE8FC88493-- From nobody Tue Feb 24 15:13:43 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E7331A0076 for ; Tue, 24 Feb 2015 15:13:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gWGRJgaqFCuh for ; Tue, 24 Feb 2015 15:13:37 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0114.outbound.protection.outlook.com [65.55.169.114]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B5891A9076 for ; Tue, 24 Feb 2015 15:13:36 -0800 (PST) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB389.namprd04.prod.outlook.com (10.141.60.140) with Microsoft SMTP Server (TLS) id 15.1.93.16; Tue, 24 Feb 2015 23:13:33 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.43]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.43]) with mapi id 15.01.0093.004; Tue, 24 Feb 2015 23:13:33 +0000 From: Kelly Grizzle To: Phil Hunt Thread-Topic: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) Thread-Index: AQHQUFvVIEEY+3NnnkGFOdZw3oCV350AYbfAgAAJtYCAAAGLEA== Date: Tue, 24 Feb 2015 23:13:33 +0000 Message-ID: References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> <8DB34ABA-7C60-406A-852D-1CA3E756D1F3@oracle.com> In-Reply-To: <8DB34ABA-7C60-406A-852D-1CA3E756D1F3@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 3A859FCA0093EC3A85A117 x-originating-ip: [97.79.140.10] authentication-results: spf=none (sender IP is ) smtp.mailfrom=kelly.grizzle@sailpoint.com; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB389; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB389; x-forefront-prvs: 04976078F0 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(51444003)(52604005)(199003)(35774003)(24454002)(51694002)(377454003)(189002)(46102003)(2656002)(86362001)(50986999)(16601075003)(74316001)(33656002)(87936001)(101416001)(76576001)(122556002)(19609705001)(19580395003)(15975445007)(19580405001)(110136001)(102836002)(40100003)(16236675004)(93886004)(97736003)(106116001)(106356001)(64706001)(19300405004)(68736005)(76176999)(92566002)(2950100001)(62966003)(54356999)(99286002)(19625215002)(105586002)(2900100001)(77156002)(19617315012)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB389; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: sailpoint.com does not designate permitted sender hosts) Content-Type: multipart/alternative; boundary="_000_BN1PR04MB39275B15B936F11852F6267E2160BN1PR04MB392namprd_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Feb 2015 23:13:33.2705 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB389 Archived-At: Cc: SCIM WG , =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Feb 2015 23:13:42 -0000 --_000_BN1PR04MB39275B15B936F11852F6267E2160BN1PR04MB392namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmlnaHQuICBNeSB0aGlua2luZyB3YXMgbW9yZSBhcm91bmQgdGhlIExpc3RSZXNwb25zZSBpdHNl bGYgYmVpbmcgZXh0ZW5kZWQgcmF0aGVyIHRoYW4gdGhlIGNvbnRhaW5lZCByZXNvdXJjZSBvYmpl Y3RzLiAgRm9yIGV4YW1wbGU6DQoNCiAgIHsNCiAgICAgInNjaGVtYXMiOlsidXJuOmlldGY6cGFy YW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpMaXN0UmVzcG9uc2UiLCAidXJuOnNvbWUtZXh0ZW5z aW9uOnBhZ2luYXRpb24iXSwNCiAgICAgInRvdGFsUmVzdWx0cyI6MiwNCiAgICAgIlJlc291cmNl cyI6Ww0KICAgICAgIHsNCiAgICAgICAgICJ1c2VyTmFtZSI6ImJqZW5zZW4iDQogICAgICAgfSwN CiAgICAgICB7DQogICAgICAgICAidXNlck5hbWUiOiJqc21pdGgiDQogICAgICAgfQ0KICAgICBd LA0KICAgICAidXJuOnNvbWUtZXh0ZW5zaW9uOnBhZ2luYXRpb24iOiB7DQogICAgICAgInBhZ2lu Z1Rva2VuIjogIjg5ODJqYWs4NGoubmtkOCINCiAgICAgfQ0KICAgfQ0KDQpBZ2FpbiDigKYgSeKA mW0gbm90IGV2ZW4gc3VyZSBpZiB0aGlzIGlzIHNvbWV0aGluZyB0aGF0IGFueW9uZSB3b3VsZCB3 YW50IHRvIGRvIG9yIGlmIGl0IHNob3VsZCBiZSBzdXBwb3J0ZWQgaW4gdGhpcyB3YXkuICBJIGp1 c3Qgd2FudGVkIHRvIGJyaW5nIGl0IHVwLg0KDQpGcm9tOiBzY2ltIFttYWlsdG86c2NpbS1ib3Vu Y2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgUGhpbCBIdW50DQpTZW50OiBUdWVzZGF5LCBGZWJy dWFyeSAyNCwgMjAxNSA1OjAzIFBNDQpUbzogS2VsbHkgR3JpenpsZQ0KQ2M6IFNDSU0gV0c7IEVy aWsgV2FobHN0csO2bSBuZVh1cw0KU3ViamVjdDogUmU6IFtzY2ltXSBQQVRDSCBhbmQgc2NoZW1h ICh3YXM6IFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbikNCg0KSSBiZWxp ZXZlIHdlIGFyZSBvayBvbiB0aGlzLiBXZSBoYXZlIHByZXR0eSBnb29kIHNlcGFyYXRpb24uIEZv ciBleGFtcGxlIExpc3QgcmVzcG9uc2UgZG9lcyBjb250YWluIGpzb24gb2JqZWN0cyB0aGF0IGhh dmUgcmVzb3VyY2Ugc3BlY2lmaWMgc2NoZW1hcy4NCg0KRS5nLiBUaGUgb3V0ZXIganNvbiBvYmpl Y3Qgd291bGQgaGF2ZSBhIG1zZ1R5cGUgb2YgTGlzdFJlc3BvbnNlIHdoaWxlIHRoZSBhcnJheSBv ZiByZXN1bHQgb2JqZWN0cyBlYWNoIGNvbnRhaW5zIGEgcmVzb3VyY2UgZWFjaCB3aXRoIGl0cyBv d24gc2NoZW1hcyBhdHRyaWJ1dGUuDQoNClBoaWwNCg0KT24gRmViIDI0LCAyMDE1LCBhdCAxNDoz MSwgS2VsbHkgR3JpenpsZSA8a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tPG1haWx0bzprZWxs eS5ncml6emxlQHNhaWxwb2ludC5jb20+PiB3cm90ZToNCk9uZSB0aGluZyB0aGF0IGlzIG5pY2Ug YWJvdXQg4oCcc2NoZW1hc+KAnSBpcyB0aGF0IGl0IGdpdmVzIHVzIGEgd2F5IHRvIGV4dGVuZCBh IHJlc291cmNlIChvciB0aGUgcmVwcmVzZW50YXRpb24gb2YgYSByZXNvdXJjZSkuICBCeSBtb3Zp bmcgb3VyIG1lc3NhZ2VzIHRvIHVzZSBtc2dUeXBlIGluc3RlYWQgb2Ygc2NoZW1hcywgd2UgbWln aHQgbG9zZSBzb21lIG9mIHRoaXMgZmxleGliaWxpdHkuICBJ4oCZbSBub3Qgc3VyZSB0aGF0IHdl IHdvdWxkIHdhbnQgaXQgb3Igbm90LCBidXQgSSBjYW4gZW52aXNpb24gYSBMaXN0UmVzcG9uc2Ug ZnJvbSBhIHNlcnZlciB0aGF0IHJldHVybnMgYSDigJxwYWdpbmcgdG9rZW7igJ0gYWxvbmcgd2l0 aCB0aGUgY3VycmVudCBwYWdlIG51bWJlciwgZXRj4oCmICBUaGlzIGNvdWxkIHBvdGVudGlhbGx5 IGJlIHB1dCBpbnRvIGFuIGV4dGVuc2lvbi4gIEp1c3Qgc29tZXRoaW5nIHRvIGNvbnNpZGVy4oCm DQoNCi0tS2VsbHkNCg0KRnJvbTogc2NpbSBbbWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZ10g T24gQmVoYWxmIE9mIFBoaWwgSHVudA0KU2VudDogVHVlc2RheSwgRmVicnVhcnkgMjQsIDIwMTUg MTI6MDEgUE0NClRvOiBFcmlrIFdhaGxzdHLDtm0gbmVYdXMNCkNjOiBTQ0lNIFdHDQpTdWJqZWN0 OiBSZTogW3NjaW1dIFBBVENIIGFuZCBzY2hlbWEgKHdhczogU0NJTSBzY2hlbWEgSURzIGFuZCBK U09OIHJlcHJlc2VudGF0aW9uKQ0KDQpFcmlrDQoNCkFncmVlZC4gSSB0aGluayB0aGlzIG1ha2Vz IHNlbnNlIGFuZCBpcyBhIGdvb2QgY29tcHJvbWlzZS4gVGhpcyByZWZsZWN0cyB3aGF0IHdlIGRp c2N1c3NlZCBvbiBvdXIgaW5mb3JtYWwgY2FsbCBsYXN0IHdlZWsuDQoNCkFueSBvdGhlciBjb21t ZW50cz8NCg0KUGhpbA0KDQpAaW5kZXBlbmRlbnRpZA0Kd3d3LmluZGVwZW5kZW50aWQuY29tPGh0 dHA6Ly93d3cuaW5kZXBlbmRlbnRpZC5jb20+DQpwaGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86 cGhpbC5odW50QG9yYWNsZS5jb20+DQoNCk9uIEZlYiAyNCwgMjAxNSwgYXQgMTo0MyBBTSwgRXJp ayBXYWhsc3Ryw7ZtIG5lWHVzIDxlcmlrLndhaGxzdHJvbUBuZXh1c2dyb3VwLmNvbTxtYWlsdG86 ZXJpay53YWhsc3Ryb21AbmV4dXNncm91cC5jb20+PiB3cm90ZToNCg0KSGksDQoNCkkgYWdyZWVk IHRoYXQgdGhlcmUgYXJlIHNvbWUgaW5jb25zaXN0ZW5jeSBhbmQgcGhpbG9zb3BoaWNhbCBpc3N1 ZXMgcHJlc2VudCBpbiB0aGUgc3BlY2lmaWNhdGlvbnMgdGhhdCBwcm9iYWJseSBuZWVkIGFkZHJl c3NpbmcuDQoNCkkgdGhpbmsgd2Ugc2hvdWxkIG1ha2UgZGlmZmVyZW5jZXMgdG8gdGhlIFJlc291 cmNlcyBhbmQgbWVzc2FnZXMsIGFuZCB3ZSBuZWVkIHNvbWUgY2hhbmdlcyB0byB0aGUgc2NoZW1h IGFuZCB0aGUgYXBpIGRyYWZ0cyB0byBtYWtlIHRoYXQgY2xlYXIuDQoNClRoZSBSZXNvdXJjZXMg cmVxdWlyZXMgZml4ZWQgc2NoZW1hcywgdGhlIG1lc3NhZ2VzIG5vdCBzbyBtdWNoLiBTY2hlbWFz IGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIHB1cnBvc2Ugb2YgYWxsb3dpbmcgYSBjbGllbnQg dG8gdW5kZXJzdGFuZCB3aGF0IGF0dHJpYnV0ZXMgYW5kIGFzc29jaWF0ZWQgbWV0YWRhdGEgKHJl YWRhYmlsaXR5LCBtdXRhYmlsaXR5LCB0eXBlLCBldGMpIGlzIHN1cHBvcnRlZCBieSBhIHBhcnRp Y3VsYXIgc2VydmljZSBwcm92aWRlci4gRGlzcmVnYXJkaW5nIG9uIHRoZSBjdXJyZW50bHkgdXNl ZCBiZWFyZXIuDQoNClRoZSBtZXNzYWdlIGRvbuKAmXQgbmVlZCB0byBiZSB2YWxpZGF0ZWQgYWNj b3JkaW5nIHRvIGEgc2NoZW1hLiBTQ0lNIGZvbGxvd3MgdGhlIFJvYnVzdG5lc3MgUHJpbmNpcGFs IChKb24gUG9zdGVs4oCZcyBsYXcgLSBvbmUgb2YgdGhlIGZvdW5kaW5nIHByaW5jaXBsZXMgb2Yg VENQL0lQKS4gVGhpcyBtZWFucyB0aGF0IG1lc3NhZ2Ugc2hvdWxkIG5vdCBuZWVkIHRvIGNvbXBs eSB3aXRoIHNjaGVtYSBpbiBvcmRlciB0byBiZSBpbnRlcnByZXRlZCAod2l0aGluIHJlYXNvbikg YnkgYSBzZXJ2aWNlIHByb3ZpZGVyLiAgSW4gcHJhY3RpY2FsIHRlcm1zLCBhIFNDSU0gY2xpZW50 IHNob3VsZCBuZXZlciBoYXZlIHRvIGRvIGEgbG90IG9mIHdvcmsgdG8gY3JlYXRlIG9yIHNlYXJj aCBmb3IgYSBVc2VyLiBBdCB0aGUgc2FtZSB0aW1lLCBhIHNlcnZpY2UgcHJvdmlkZXIgaXMgbm90 IG9ibGlnZWQgdG8gYWNjZXB0IGEgbmV3IFVzZXIgKmV4YWN0bHkqIGFzIHRoZSBjbGllbnQgc3Bl Y2lmaWVzLiBUaGUgc2VydmljZSBwcm92aWRlciBpcyBhbHdheXMgZnJlZSB0byBpbnRlcnByZXQg YW5kIGNoYW5nZSBkYXRhLg0KDQpNZXNzYWdlcyBpcyBwYXJ0IG9mIHRoZSBBUEkgZHJhZnQsIGFu ZCBSZXNvdXJjZXMgYW5kIHRoZXJlIHNjaGVtYXMgaXMgYSBwYXJ0IG9mIHRoZSBTY2hlbWEgZHJh ZnQuIFdlIHNob3VsZCBub3QgbWl4IHRoZW0gdG8gbXVjaCBhbmQgbWFrZSBpdCBjbGVhciBpbiB0 aGUgc3BlYyB0aGF0IGlzIGFsc28gdGhlIGNhc2UuDQoNCkkgdGhpbmsgdGhhdCB0aGUgUmVzb3Vy Y2VzIHRoYXQgd2UgaGF2ZSB0b2RheSwgU2NoZW1hLCBSZXNvdXJjZVR5cGVzIGFuZCBTZXJ2aWNl UHJvdmlkZXJDb25maWdzIE1VU1QgYmUgYWRkZWQgdG8gdGhlIC9TY2hlbWFzIGVuZHBvaW50LiBX ZSBzaG91bGQgYWxzbyBhZGQgU2NoZW1hLCBSZXNvdXJjZVR5cGVzIGFuZCBTZXJ2aWNlUHJvdmlk ZXJDb25maWdzIHRvIHRoZSBzZWN0aW9uICI4LjcgU2NoZW1hIFJlcHJlc2VudGF0aW9u4oCdIGlu IHRoZSBzY2hlbWEgc3BlYy4NCg0KQSBzZWNvbmQgaW1wb3J0YW50IGNoYW5nZSB0byBtYWtlIGl0 IGNsZWFyIHRoYXQgbWVzc2FnZXMgYXJlIG1lc3NhZ2VzLCBpcyB0byByZW1vdmUgdGhlIHNjaGVt YSBhdHRyaWJ1dGUgb24gb2Ygb2YgdGhlIG1lc3NhZ2VzLiBUaGV5IHdoZXJlIGFkZGVkIHJhdGhl ciBsYXRlIGluIHRoZSBzcGVjLXdyaXRpbmcgcHJvY2VzcyB0byBnaXZlIGEgbm90aW9uIHRvIHRo ZSBzZXJ2aWNlIHByb3ZpZGVyIHdoYXQga2luZCBvZiBtZXNzYWdlIHRoYXTigJlzIGN1cnJlbnRs eSBzZW50LiBUaGUgaW50ZW50aW9uIHdhcyBub3QgdG8gZm9yY2UgdGhlIFNQIHRvIHZhbGlkYXRl IHRoZSBtZXNzYWdlcyBhZ2FpbnN0IGEgc2NoZW1hLiBJIHN1Z2dlc3QgdGhhdCB3ZSByZW1vdmUg dGhlIOKAnHNjaGVtYXMiIGF0dHJpYnV0ZSBpbiBtZXNzYWdlcyBhbmQgcmVwbGFjZXMgaXQgd2l0 aCBhIOKAnG1zZ1R5cGXigJ0gdGhhdCBjb3VsZCBpbmRpY2F0ZSB3aGF0IG1lc3NhZ2UgaXQgaXMg KFBhdGNoT3Agb3IgTGlzdFJlc3BvbnNlKS4NCg0KLyBFcmlrDQoNCg0KDQpPbiAxMyBGZWIgMjAx NSwgYXQgMjI6MDgsIFBoaWwgSHVudCA8cGhpbC5odW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwu aHVudEBvcmFjbGUuY29tPj4gd3JvdGU6DQoNCldpdGggdGhlIHBhdGNoIG9wZXJhdGlvbiwgdGhl IGNvbnRlbnRzIG9mIOKAnHZhbHVl4oCdIGlzIGN1cnJlbnRseSBkcml2ZW4gYnkgdGhlIOKAnHBh dGjigJ0gYXR0cmlidXRlLiAgSW4gb3RoZXIgd29yZHMgaW4gYSBub3JtYWwgSlNPTiBzdHJ1Y3R1 cmUsIHRoZSBQYXRjaCBwYXRoIGF0dHJpYnV0ZSBkZXNjcmliZXMgdGhlIGxlZnQgaGFsZiBvZiBh IG5hbWUgdmFsdWUgcGFpciwgYW5kIHRoZSDigJx2YWx1ZeKAnSBkZXNjcmliZXMgdGhlIHJpZ2h0 IGhhbGYuDQoNClNvIGlmIOKAnHBhdGgiIHBvaW50cyB0byBhIGNvbXBsZXggYXR0cmlidXRlLCB0 aGVuIOKAnHZhbHVl4oCdIE1VU1QgYmUgYSBKU09OIG9iamVjdCBvZiBvbmUgb3IgbW9yZSBzdWIt YXR0cmlidXRlcy4gIElmIHBhdGggZGVzY3JpYmVzIGEgc2ltcGxlIGF0dHJpYnV0ZSwgdGhhbiB0 aGUgY29ycmVzcG9uZGluZyB2YWx1ZSBtdXN0IGJlIGEgYm9vbGVhbiwgc3RyaW5nIGRlcGVuZGlu ZyBvbiB0aGUgc2NoZW1hIG9mIHRoZSBhdHRyaWJ1dGUgZGVzY3JpYmVkIGJ5IOKAnHBhdGjigJ0u DQoNClNDSU0gcGF0Y2ggaXMgYmFzZWQgb24gYW5kIGZvbGxvd3MgdGhlIHNhbWUgZGVzaWduIGFz IGZvciBSRkM2OTAyIChKU09OIFBhdGNoKS4gVGhlIG9ubHkgZGlmZmVyZW5jZSBpcyB3ZSBkZWNp ZGVkIHRvIGxpbWl0IHRoZSBudW1iZXIgb2Ygb3BlcmF0aW9uIHR5cGVzIGFuZCB0byB1c2UgZmls dGVycyBpbiBwYXRocyByYXRoZXIgdGhhbiBhcnJheSBpbmRleGVkIGFjY2VzcyBiYXNlZCBvbiBK U09OIFBvaW50ZXJzIChSRkM2OTAxKS4NCg0KUGhpbA0KDQpAaW5kZXBlbmRlbnRpZA0Kd3d3Lmlu ZGVwZW5kZW50aWQuY29tPGh0dHA6Ly93d3cuaW5kZXBlbmRlbnRpZC5jb20vPg0KcGhpbC5odW50 QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPg0KDQpPbiBGZWIgMTMsIDIw MTUsIGF0IDEyOjI5IFBNLCBNaWNoYWVsIEZyb3N0IDxtaWNoYWVsLmZyb3N0QG9yYWNsZS5jb208 bWFpbHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQpZZXMgS2VsbHksIHlv dSBhcmUgY29ycmVjdC4gIEkgd2FzIGxvb2tpbmcgZm9yIHNjaGVtYSByZXByZXNlbnRhdGlvbiBm b3IgYWxsIHJlc291cmNlcyBhbmQgbWVzc2FnZXMuICBZb3UgYWxzbyBjb3JyZWN0bHkgaWRlbnRp ZmllZCB0aGUgaXNzdWUgSSB3YXMgdHJ5aW5nIHRvIHJhaXNlIHdpdGggcmVnYXJkcyB0byBQYXRj aE9wLiAgVGhhbmtzIGZvciB0YWtpbmcgYSBsb29rLg0KDQotbXJmDQoNCkZyb206IEtlbGx5IEdy aXp6bGUgW21haWx0bzprZWxseS5ncml6emxlQHNhaWxwb2ludC5jb21dDQpTZW50OiBGcmlkYXks IEZlYnJ1YXJ5IDEzLCAyMDE1IDY6NTYgQU0NClRvOiBNaWNoYWVsIEZyb3N0OyBQaGlsIEh1bnQN CkNjOiBzY2ltQGlldGYub3JnPG1haWx0bzpzY2ltQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtz Y2ltXSBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50YXRpb24NCg0KTWljaGFlbCDi gKYgbGV0IG1lIG1ha2Ugc3VyZSBJIHVuZGVyc3RhbmQgd2hhdCB5b3UgYXJlIGxvb2tpbmcgZm9y LiAgWW91IHdvdWxkIGxpa2UgYSBzY2hlbWEgcmVwcmVzZW50YXRpb24gKHN1Y2ggYXMgd2hhdCBp cyBpbmNsdWRlZCBpbiBzZWN0aW9uIDguNykgZm9yIGFsbCByZXNvdXJjZXMgYW5kIG1lc3NhZ2Vz LiAgSXMgdGhhdCByaWdodD8NCg0KSWYgc28sIHRoZW4gSSAxMDAlIGFncmVlIHRoYXQgdGhpcyBp cyB1c2VmdWwuICBJbiB0aGUgU0NJTSAxLjAgc3BlYyAoYmFjayB3aGVuIHdlIHN1cHBvcnRlZCBY TUwgYXMgYSBkYXRhIGZvcm1hdCkgdGhlcmUgd2FzIGFuIFhTRCB0aGF0IGRpZCBleGFjdGx5IHdo YXQgeW91IGFyZSBsb29raW5nIGZvciDigJMgZGVzY3JpYmVkIGJvdGggcmVzb3VyY2VzIGFuZCBt ZXNzYWdlcy4gIEkgYWdyZWUgdGhhdCBoYXZpbmcgdGhpcyBjb2RpZmllcyB0aGUgcnVsZXMgYW5k IHJlbW92ZXMgc29tZSBhbWJpZ3VpdHkuICBJIHdvdWxkIGJlIGluIGZhdm9yIG9mIGFkZGluZyBz b21ldGhpbmcgbGlrZSB0aGlzIHRvIHRoZSBTQ0lNIHNwZWMuDQoNClJlZ2FyZGluZyB0aGUgUGF0 Y2hPcCwgaXMgdGhlIHByb2JsZW0gdGhhdCB0aGUgdmFsdWUgc3ViLWF0dHJpYnV0ZSBjb3VsZCBi ZSBhbnl0aGluZyDigJMgbXVsdGl2YWx1ZWQgY291bGQgYmUgdHJ1ZSBvciBmYWxzZSwgdGhlcmUg bWF5IG9yIG1heSBub3QgYmUgc3ViLWF0dHJpYnV0ZXMgKGllIOKAkyBpdCBjb3VsZCBiZSBjb21w bGV4LCB3aGljaCBpcyBub3QgdGVjaG5pY2FsbHkgc3VwcG9ydGVkKSwgYW5kIHRoZSB0eXBlIGlz IGRlcGVuZGVudCB1cG9uIHRoZSBhY3R1YWwgYXR0cmlidXRlIHRoYXQgeW91IGFyZSByZXBsYWNp bmc/ICBXaXRoIHRoaXMgYW1iaWd1aXR5IHRoZXJlIGlzbuKAmXQgYSBnb29kIHdheSB0byByZXBy ZXNlbnQgdGhpcyBpbiBhIHNjaGVtYSBjdXJyZW50bHkuDQoNCi0tS2VsbHkNCg0KDQpGcm9tOiBz Y2ltIFttYWlsdG86c2NpbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTWljaGFlbCBG cm9zdA0KU2VudDogVGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDY6NDUgUE0NClRvOiBQaGls IEh1bnQNCkNjOiBzY2ltQGlldGYub3JnPG1haWx0bzpzY2ltQGlldGYub3JnPg0KU3ViamVjdDog UmU6IFtzY2ltXSBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50YXRpb24NCg0KSGkg UGhpbCwNCg0KTm90IHN1cmUgd2hhdCB5b3UgbWVhbiBieSBleGFtcGxlcy4gIE15IGNvbmNlcm4g aXMgdGhhdCBpbiB0aGUgc2NoZW1hIGRvYywgc2VjdGlvbiA4LjcgcHJvdmlkZXMgc2NoZW1hIHJl cHJlc2VudGF0aW9uIGZvciBjb3JlIHVzZXIvZ3JvdXAgYW5kIGVudGVycHJpc2UgdXNlci4gIFdo YXQgYWJvdXQgYWxsIHRoZSBvdGhlciBzY2hlbWFzIHdlIHJlZmVyZW5jZT8gIFdlIHNob3VsZCBw cm92aWRlIHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgZXZlcnkgc2NoZW1hIGRlZmluZWQgaW4g dGhlIHNwZWMuICBFdmVyeW9uZSBpbXBsZW1lbnRpbmcgdGhpcyBzcGVjIHdpbGwgbmVlZCB0aGVt LiAgV2h5IHByb3ZpZGUganVzdCB0aHJlZSBhbmQgbGVhdmUgdGhlIHJlc3QgdXAgdG8gZ3Vlc3Mg d29yaz8gIEV2ZXJ5IGltcGxlbWVudGF0aW9uIG5lZWRzIHRvIGRvIHZhbGlkYXRpb24sIGV2ZXJ5 IHZhbGlkYXRpb24gbmVlZHMgYSBzY2hlbWEgdG8gdmFsaWRhdGUgYWdhaW5zdC4gIFNvIG15IGNv bmNlcm4gaXMgdHdvZm9sZC4gIEZpcnN0LCB3ZSByZWZlcmVuY2UgYSBidW5jaCBvZiBzY2hlbWFz IHRoYXQgZXZlcnlvbmUgbmVlZHMsIGJ1dCB3ZSBkb27igJl0IHByb3ZpZGUgdGhlbS4gIFNlY29u ZCwgc29tZSBvZiB0aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2UgKHN1Y2ggYXMgcGF0Y2hPcCkgY2Fu bm90IGJlIHJlcHJlc2VudGVkIGluIEpTT04gdXNpbmcgb3VyIG93biBkZWZpbml0aW9ucy4NCg0K SeKAmW0gY2VydGFpbmx5IE9LIHdpdGggYW4gYXBwZW5kaXggaW4gdGhlIGFwaSBkb2MgZm9yIG1l c3NhZ2Ugc2NoZW1hcyBhbmQgYW4gYXBwZW5kaXggaW4gdGhlIHNjaGVtYSBkb2MgZm9yIGFsbCBv ZiB0aGUgZW50aXR5IHNjaGVtYXMuICBNeSBwb2ludCBpcyBhbGwgdGhlc2Ugc2NoZW1hcyBzaG91 bGQgZXhpc3QuICBXZSByZWZlcmVuY2UgdGhlbSwgd2UgZGVzY3JpYmUgdGhlbSwgYnV0IHdlIG9u bHkgcHJvdmlkZSB0aHJlZSBvZiB0aGVtLiAgSXQganVzdCBzZWVtcyB3cm9uZyB0byBtZSAocGVy aGFwcyBteSBvd24gc2hvcnRjb21pbmcpIGJ1dCB3ZeKAmXJlIGFza2luZyBwZW9wbGUgdG8gaW1w bGVtZW50IFNDSU0gcGF0Y2gsIHVzaW5nIGEgU0NJTSBzY2hlbWEgZGVmaW5lZCByZXF1ZXN0LCB0 aGF0IHdlIGRvIG5vdCBwcm92aWRlLCBhbmQgY2Fubm90IGRlZmluZSB1c2luZyBydWxlcyB3ZSBz ZXQgZm9ydGggaW4gc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgZG9jLg0KDQoNClNvIGJvdHRvbSBs aW5lLCBhbGwgSeKAmW0gcmVxdWVzdGluZyBpcyB0aGUgSlNPTiByZXByZXNlbnRhdGlvbiBvZiB0 aGUgU0NJTSBzY2hlbWFzIHdlIHJlZmVyZW5jZS4NCg0KDQoNClRoaXMgaXMgYSBTQ0lNIHNjaGVt YSByZWZlcmVuY2UsIOKAnCB1cm46aWV0ZjpwYXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOlBh dGNoT3DigJwsIEkgZmVlbCB3ZSBzaG91bGQgcHJvdmlkZSB0aGUgSlNPTiByZXByZXNlbnRhdGlv biBmb3IgaXQuICBJZiB3ZSBjYW7igJl0IGRvIGl0LCBub2JvZHkgaW1wbGVtZW50aW5nIHRoZSBz cGVjIGNhbiBlaXRoZXIuICBBbGwgb2YgdGhlIHNjaGVtYXMgd2UgcmVmZXJlbmNlIHNob3VsZCBi ZSBwcm92aWRlZCB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zIHNldCBkb3duIGluIHNlY3Rpb24g NyBvZiB0aGUgc2NoZW1hIHJmYyAob3IgZW5oYW5jZWQgaW4gdGhlIGFwaSBkb2MsIHVzaW5nIHNl Y3Rpb24gNyBhcyBhIGJhc2UpLiAgRnJhbmtseSwgSeKAmW0gZHJlYWRpbmcgdGhlIG91dGNvbWUg b2YgYWxsIHRoaXMgYmVjYXVzZSBJ4oCZdmUgYWxyZWFkeSBzcGVudCBhIGNvdXBsZSBvZiBtb250 aHMgaW1wbGVtZW50aW5nIHBhdGNoIGluIGl0cyBjdXJyZW50IGZvcm0gd2l0aCBvdmVyIDE1MCB1 bml0IHRlc3RzIHRvIGNvbmZpcm0gaXQgZG9lcyB3aGF0IEkgdGhpbmsgdGhlIHNwZWMgcmVxdWly ZXMuICBCdXQgc2V2ZXJhbCBvZiBteSBwZWVycyBoYXZlIGNvbWUgdG8gbWUgYW5kIGFza2VkIGZv ciB0aGVzZSBzY2hlbWEgZGVmaW5pdGlvbnMgKGluIEpTT04pIGFuZCBhIGNvdXBsZSBoYXZlIHBv aW50ZWQgb3V0IHRoYXQgdGhlIHBhdGNoIHJlcXVlc3Qgc2NoZW1hLCDigJwgdXJuOmlldGY6cGFy YW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBjYW5ub3QgYmUgcmVwcmVzZW50 ZWQgdXNpbmcgc2VjdGlvbiA3IHJ1bGVzIGFuZCB0aGF0IHdlIGNhbm5vdCBkbyB1cGZyb250IHZh bGlkYXRpb24gb24gcGF0Y2ggcmVxdWVzdHMgdGhlIHdheSB3ZSBkbyBhbGwgb3RoZXIgU0NJTSBy ZXF1ZXN0cy4gIEFuZCBpdOKAmXMgdHJ1ZSwgd2UgY2Fubm90IGRvIGFuIHVwZnJvbnQgdmFsaWRh dGlvbiBvZiBwYXRjaCBhZnRlciBpdOKAmXMgcGFyc2VkIHRoZSB3YXkgd2UgY2FuIGFsbCBvdGhl ciByZXF1ZXN0cy4gIFNpbXBsZSBhdHRyaWJ1dGUgdmFsaWRhdGlvbiBpcyBpbXBvc3NpYmxlIGJl Y2F1c2Ug4oCcdmFsdWXigJ0gZGVwZW5kcyBvbiB0aGUgdGFyZ2V0IG9mIOKAnHBhdGjigJ0sIGFu ZCB0aGVyZWZvcmUg4oCcdmFsdWXigJ0gY2Fubm90IGJlIGRlZmluZWQgaW4gYSBKU09OIHNjaGVt YSB1c2luZyBzZWN0aW9uIDcgb2YgdGhlIHNjaGVtYSBkb2MuDQoNCg0KDQpFdmVuIGlmIHdlIGNh buKAmXQgZml4IHBhdGNoLCBmb3Igd2hhdGV2ZXIgcmVhc29uLCB3ZSBzaG91bGQgcHJvdmlkZSB0 aGUgcmVzdCBvZiB0aGUgc2NoZW1hcywgcmVwcmVzZW50ZWQgaW4gSlNPTiBmb3JtYXQsIGZvciBi b3RoIGRvY3MuDQoNCg0KDQotbXJmDQoNCkZyb206IFBoaWwgSHVudA0KU2VudDogVGh1cnNkYXks IEZlYnJ1YXJ5IDEyLCAyMDE1IDEyOjU4IFBNDQpUbzogTWljaGFlbCBGcm9zdA0KQ2M6IHNjaW1A aWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3NjaW1dIFNDSU0g c2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbg0KDQpNaWNoYWVsLA0KDQpDYW4geW91 IHByb3ZpZGUgZXhhbXBsZXM/DQoNClRoZSBzY2hlbWEgaW4gdGhlIEFQSSBoYXMgdG8gZXh0ZW5k IHRoZSByZWdpc3RyeSBkZWZpbmUgaW4gY29yZS4gICBBcyBlZGl0b3IgSSB0aGluayBpdCB3b3Vs ZCBiZSBldmVuIG1vcmUgY29uZnVzaW5nIHRvIG1peCBkYXRhIHNjaGVtYSBhbmQgcmVxdWVzdCBz Y2hlbWEgaW4gYSBzaW5nbGUgZG9jdW1lbnQuIEl0IGFsc28gYmVjb21lcyBwcm9ibGVtYXRpYyB3 aGVuIHNwZWNzIGNyb3NzIHJlZmVyZW5jZSBlYWNoIG90aGVyLiBJbnN0ZWFkIHRoZSBkb2N1bWVu dCBsYXlvdXQgaXMgc3VjaCB0aGF0IEFQSSBidWlsZHMgb24gY29yZSBzY2hlbWEuDQoNClRoZSBm b3JtYXQgaW4gUEFUQ0ggY29tZXMgZnJvbSB0aGUgSlNPTiBQYXRjaCBSRkMuDQoNClBoaWwNCg0K T24gRmViIDEyLCAyMDE1LCBhdCAxMjo0NiwgTWljaGFlbCBGcm9zdCA8bWljaGFlbC5mcm9zdEBv cmFjbGUuY29tPG1haWx0bzptaWNoYWVsLmZyb3N0QG9yYWNsZS5jb20+PiB3cm90ZToNCg0KLjA6 UmVzb3VyY2VUeXBlDQoNCnVybjppZXRmOnBhcmFtczpzY2ltOnNjaGVtYXM6Y29yZToyDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc2NpbSBtYWlsaW5n IGxpc3QNCnNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0NCg0KX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCnNjaW0gbWFpbGluZyBsaXN0DQpzY2ltQGlldGYub3Jn PG1haWx0bzpzY2ltQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9zY2ltDQoNCg0K --_000_BN1PR04MB39275B15B936F11852F6267E2160BN1PR04MB392namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJ cGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtG b2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCnAuTXNvQWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2Lk1zb0FjZXRh dGUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRl eHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLkhU TUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBD aGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJl Zm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xhczt9DQpzcGFuLkJhbGxvb25UZXh0Q2hh cg0KCXttc28tc3R5bGUtbmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlv cml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToi VGFob21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5hcHBsZS1zdHlsZS1zcGFuDQoJe21zby1zdHls ZS1uYW1lOmFwcGxlLXN0eWxlLXNwYW47fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7 bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTIz DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyNA0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6 ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7 c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lm IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9 IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIx IiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkg bGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29y ZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5SaWdodC4mbmJzcDsgTXkgdGhpbmtpbmcgd2FzIG1vcmUgYXJv dW5kIHRoZSBMaXN0UmVzcG9uc2UgaXRzZWxmIGJlaW5nIGV4dGVuZGVkIHJhdGhlciB0aGFuIHRo ZSBjb250YWluZWQgcmVzb3VyY2Ugb2JqZWN0cy4mbmJzcDsgRm9yIGV4YW1wbGU6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgezxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7c2NoZW1hcyZxdW90 OzpbJnF1b3Q7dXJuOmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpMaXN0UmVzcG9u c2UmcXVvdDssICZxdW90O3Vybjpzb21lLWV4dGVuc2lvbjpwYWdpbmF0aW9uJnF1b3Q7XSw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVh ay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7ICZxdW90O3RvdGFsUmVzdWx0cyZxdW90OzoyLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7UmVzb3Vy Y2VzJnF1b3Q7Ols8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7ICZxdW90O3VzZXJOYW1lJnF1b3Q7OiZxdW90O2JqZW5zZW4mcXVvdDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVh ay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IH0sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3Jl OmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmcXVvdDt1c2VyTmFtZSZxdW90OzomcXVvdDtqc21pdGgm cXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i cGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IF0sPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFs d2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVv dDt1cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlvbiZxdW90OzogezxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdh eXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7JnF1b3Q7cGFnaW5nVG9rZW4mcXVvdDs6ICZxdW90Ozg5ODJqYWs4NGoubmtkOCZxdW90 OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdl LWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4m bmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QWdhaW4g4oCmIEnigJltIG5vdCBldmVuIHN1cmUgaWYg dGhpcyBpcyBzb21ldGhpbmcgdGhhdCBhbnlvbmUgd291bGQgd2FudCB0byBkbyBvciBpZiBpdCBz aG91bGQgYmUgc3VwcG9ydGVkIGluIHRoaXMgd2F5LiZuYnNwOyBJIGp1c3Qgd2FudGVkIHRvIGJy aW5nIGl0IHVwLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwv Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IHNjaW0gW21haWx0bzpzY2ltLWJvdW5jZXNA aWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPlBoaWwgSHVudDxicj4NCjxiPlNlbnQ6PC9i PiBUdWVzZGF5LCBGZWJydWFyeSAyNCwgMjAxNSA1OjAzIFBNPGJyPg0KPGI+VG86PC9iPiBLZWxs eSBHcml6emxlPGJyPg0KPGI+Q2M6PC9iPiBTQ0lNIFdHOyBFcmlrIFdhaGxzdHLDtm0gbmVYdXM8 YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtzY2ltXSBQQVRDSCBhbmQgc2NoZW1hICh3YXM6IFND SU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbik8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBiZWxpZXZlIHdlIGFyZSBvayBv biB0aGlzLiBXZSBoYXZlIHByZXR0eSBnb29kIHNlcGFyYXRpb24uIEZvciBleGFtcGxlIExpc3Qg cmVzcG9uc2UgZG9lcyBjb250YWluIGpzb24gb2JqZWN0cyB0aGF0IGhhdmUgcmVzb3VyY2Ugc3Bl Y2lmaWMgc2NoZW1hcy4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+RS5nLiBUaGUgb3V0ZXIganNvbiBvYmplY3Qgd291bGQgaGF2ZSBh IG1zZ1R5cGUgb2YgTGlzdFJlc3BvbnNlIHdoaWxlIHRoZSBhcnJheSBvZiByZXN1bHQgb2JqZWN0 cyBlYWNoIGNvbnRhaW5zIGEgcmVzb3VyY2UgZWFjaCB3aXRoIGl0cyBvd24gc2NoZW1hcyBhdHRy aWJ1dGUuJm5ic3A7PGJyPg0KPGJyPg0KUGhpbDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+ DQpPbiBGZWIgMjQsIDIwMTUsIGF0IDE0OjMxLCBLZWxseSBHcml6emxlICZsdDs8YSBocmVmPSJt YWlsdG86a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tIj5rZWxseS5ncml6emxlQHNhaWxwb2lu dC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUg c3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPk9uZSB0aGluZyB0aGF0IGlzIG5pY2UgYWJvdXQg4oCcc2NoZW1hc+KAnSBpcyB0aGF0IGl0 IGdpdmVzIHVzIGEgd2F5IHRvIGV4dGVuZCBhIHJlc291cmNlIChvciB0aGUgcmVwcmVzZW50YXRp b24gb2YgYSByZXNvdXJjZSkuJm5ic3A7IEJ5IG1vdmluZyBvdXIgbWVzc2FnZXMgdG8gdXNlDQog bXNnVHlwZSBpbnN0ZWFkIG9mIHNjaGVtYXMsIHdlIG1pZ2h0IGxvc2Ugc29tZSBvZiB0aGlzIGZs ZXhpYmlsaXR5LiZuYnNwOyBJ4oCZbSBub3Qgc3VyZSB0aGF0IHdlIHdvdWxkIHdhbnQgaXQgb3Ig bm90LCBidXQgSSBjYW4gZW52aXNpb24gYSBMaXN0UmVzcG9uc2UgZnJvbSBhIHNlcnZlciB0aGF0 IHJldHVybnMgYSDigJxwYWdpbmcgdG9rZW7igJ0gYWxvbmcgd2l0aCB0aGUgY3VycmVudCBwYWdl IG51bWJlciwgZXRj4oCmJm5ic3A7IFRoaXMgY291bGQgcG90ZW50aWFsbHkgYmUNCiBwdXQgaW50 byBhbiBleHRlbnNpb24uJm5ic3A7IEp1c3Qgc29tZXRoaW5nIHRvIGNvbnNpZGVy4oCmPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj4tLUtlbGx5PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+ PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gc2NpbSBbPGEgaHJlZj0ibWFpbHRvOnNj aW0tYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8 Yj5PbiBCZWhhbGYgT2YgPC9iPlBoaWwgSHVudDxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBG ZWJydWFyeSAyNCwgMjAxNSAxMjowMSBQTTxicj4NCjxiPlRvOjwvYj4gRXJpayBXYWhsc3Ryw7Zt IG5lWHVzPGJyPg0KPGI+Q2M6PC9iPiBTQ0lNIFdHPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBb c2NpbV0gUEFUQ0ggYW5kIHNjaGVtYSAod2FzOiBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVw cmVzZW50YXRpb24pPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+RXJpazxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWdy ZWVkLiBJIHRoaW5rIHRoaXMgbWFrZXMgc2Vuc2UgYW5kIGlzIGEgZ29vZCBjb21wcm9taXNlLiBU aGlzIHJlZmxlY3RzIHdoYXQgd2UgZGlzY3Vzc2VkIG9uIG91ciBpbmZvcm1hbCBjYWxsIGxhc3Qg d2Vlay48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+QW55IG90aGVyIGNvbW1lbnRzPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6YmxhY2siPlBoaWw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNr Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj5AaW5k ZXBlbmRlbnRpZDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPjxh IGhyZWY9Imh0dHA6Ly93d3cuaW5kZXBlbmRlbnRpZC5jb20iPnd3dy5pbmRlcGVuZGVudGlkLmNv bTwvYT48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86cGhpbC5o dW50QG9yYWNsZS5jb20iPnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdp bi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEZlYiAyNCwg MjAxNSwgYXQgMTo0MyBBTSwgRXJpayBXYWhsc3Ryw7ZtIG5lWHVzICZsdDs8YSBocmVmPSJtYWls dG86ZXJpay53YWhsc3Ryb21AbmV4dXNncm91cC5jb20iPmVyaWsud2FobHN0cm9tQG5leHVzZ3Jv dXAuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGFncmVlZCB0aGF0IHRoZXJlIGFyZSBzb21lIGlu Y29uc2lzdGVuY3kgYW5kIHBoaWxvc29waGljYWwgaXNzdWVzIHByZXNlbnQgaW4gdGhlIHNwZWNp ZmljYXRpb25zIHRoYXQgcHJvYmFibHkgbmVlZCBhZGRyZXNzaW5nLiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5JIHRoaW5rIHdlIHNob3VsZCBtYWtlIGRpZmZlcmVuY2VzIHRvIHRoZSBSZXNvdXJj ZXMgYW5kIG1lc3NhZ2VzLCBhbmQgd2UgbmVlZCBzb21lIGNoYW5nZXMgdG8gdGhlIHNjaGVtYSBh bmQgdGhlIGFwaSBkcmFmdHMgdG8gbWFrZSB0aGF0IGNsZWFyLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgUmVzb3VyY2VzIHJlcXVpcmVz IGZpeGVkIHNjaGVtYXMsIHRoZSBtZXNzYWdlcyBub3Qgc28gbXVjaC4gU2NoZW1hcyBpcyBpbnRl bmRlZCBzb2xlbHkgZm9yIHRoZSBwdXJwb3NlIG9mIGFsbG93aW5nIGEgY2xpZW50IHRvIHVuZGVy c3RhbmQgd2hhdCBhdHRyaWJ1dGVzIGFuZCBhc3NvY2lhdGVkIG1ldGFkYXRhIChyZWFkYWJpbGl0 eSwgbXV0YWJpbGl0eSwgdHlwZSwgZXRjKSBpcyBzdXBwb3J0ZWQgYnkgYQ0KIHBhcnRpY3VsYXIg c2VydmljZSBwcm92aWRlci4gRGlzcmVnYXJkaW5nIG9uIHRoZSBjdXJyZW50bHkgdXNlZCBiZWFy ZXIuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PlRoZSBtZXNzYWdlIGRvbuKAmXQgbmVlZCB0byBiZSB2YWxpZGF0ZWQgYWNjb3JkaW5nIHRvIGEg c2NoZW1hLiBTQ0lNIGZvbGxvd3MgdGhlIFJvYnVzdG5lc3MgUHJpbmNpcGFsIChKb24gUG9zdGVs 4oCZcyBsYXcgLSBvbmUgb2YgdGhlIGZvdW5kaW5nIHByaW5jaXBsZXMgb2YgVENQL0lQKS4gVGhp cyBtZWFucyB0aGF0IG1lc3NhZ2Ugc2hvdWxkIG5vdCBuZWVkIHRvIGNvbXBseSB3aXRoIHNjaGVt YSBpbiBvcmRlciB0bw0KIGJlIGludGVycHJldGVkICh3aXRoaW4gcmVhc29uKSBieSBhIHNlcnZp Y2UgcHJvdmlkZXIuICZuYnNwO0luIHByYWN0aWNhbCB0ZXJtcywgYSBTQ0lNIGNsaWVudCBzaG91 bGQgbmV2ZXIgaGF2ZSB0byBkbyBhIGxvdCBvZiB3b3JrIHRvIGNyZWF0ZSBvciBzZWFyY2ggZm9y IGEgVXNlci4gQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2aWNlIHByb3ZpZGVyIGlzIG5vdCBvYmxp Z2VkIHRvIGFjY2VwdCBhIG5ldyBVc2VyICpleGFjdGx5KiBhcyB0aGUgY2xpZW50DQogc3BlY2lm aWVzLiBUaGUgc2VydmljZSBwcm92aWRlciBpcyBhbHdheXMgZnJlZSB0byBpbnRlcnByZXQgYW5k IGNoYW5nZSBkYXRhLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5NZXNzYWdlcyBpcyBwYXJ0IG9mIHRoZSBBUEkgZHJhZnQsIGFuZCBSZXNvdXJj ZXMgYW5kIHRoZXJlIHNjaGVtYXMgaXMgYSBwYXJ0IG9mIHRoZSBTY2hlbWEgZHJhZnQuIFdlIHNo b3VsZCBub3QgbWl4IHRoZW0gdG8gbXVjaCBhbmQgbWFrZSBpdCBjbGVhciBpbiB0aGUgc3BlYyB0 aGF0IGlzIGFsc28gdGhlIGNhc2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkkgdGhpbmsgdGhhdCB0aGUgUmVzb3VyY2VzIHRoYXQgd2UgaGF2 ZSB0b2RheSwgU2NoZW1hLCBSZXNvdXJjZVR5cGVzIGFuZCBTZXJ2aWNlUHJvdmlkZXJDb25maWdz IE1VU1QgYmUgYWRkZWQgdG8gdGhlIC9TY2hlbWFzIGVuZHBvaW50LiBXZSBzaG91bGQgYWxzbyBh ZGQgU2NoZW1hLCBSZXNvdXJjZVR5cGVzIGFuZCBTZXJ2aWNlUHJvdmlkZXJDb25maWdzIHRvIHRo ZSBzZWN0aW9uICZxdW90OzguNyBTY2hlbWEgUmVwcmVzZW50YXRpb27igJ0NCiBpbiB0aGUgc2No ZW1hIHNwZWMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkEgc2Vjb25kIGltcG9ydGFudCBjaGFuZ2UgdG8gbWFrZSBpdCBjbGVhciB0 aGF0IG1lc3NhZ2VzIGFyZSBtZXNzYWdlcywgaXMgdG8gcmVtb3ZlIHRoZSBzY2hlbWEgYXR0cmli dXRlIG9uIG9mIG9mIHRoZSBtZXNzYWdlcy4gVGhleSB3aGVyZSBhZGRlZCByYXRoZXIgbGF0ZSBp biB0aGUgc3BlYy13cml0aW5nIHByb2Nlc3MgdG8gZ2l2ZSBhIG5vdGlvbiB0byB0aGUgc2Vydmlj ZSBwcm92aWRlciB3aGF0IGtpbmQNCiBvZiBtZXNzYWdlIHRoYXTigJlzIGN1cnJlbnRseSBzZW50 LiBUaGUgaW50ZW50aW9uIHdhcyBub3QgdG8gZm9yY2UgdGhlIFNQIHRvIHZhbGlkYXRlIHRoZSBt ZXNzYWdlcyBhZ2FpbnN0IGEgc2NoZW1hLiBJIHN1Z2dlc3QgdGhhdCB3ZSByZW1vdmUgdGhlIOKA nHNjaGVtYXMmcXVvdDsgYXR0cmlidXRlIGluIG1lc3NhZ2VzIGFuZCByZXBsYWNlcyBpdCB3aXRo IGEg4oCcbXNnVHlwZeKAnSB0aGF0IGNvdWxkIGluZGljYXRlIHdoYXQgbWVzc2FnZSBpdCBpcyAo UGF0Y2hPcA0KIG9yIExpc3RSZXNwb25zZSkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi8gRXJpazxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRv cDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5PbiAxMyBGZWIgMjAxNSwgYXQgMjI6MDgsIFBoaWwgSHVudCAmbHQ7PGEgaHJlZj0ibWFpbHRv OnBoaWwuaHVudEBvcmFjbGUuY29tIj5waGlsLmh1bnRAb3JhY2xlLmNvbTwvYT4mZ3Q7IHdyb3Rl OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7Ij5XaXRoIHRoZSBwYXRjaCBvcGVyYXRpb24sIHRoZSBjb250ZW50cyBvZiDi gJx2YWx1ZeKAnSBpcyBjdXJyZW50bHkgZHJpdmVuIGJ5IHRoZSDigJxwYXRo4oCdIGF0dHJpYnV0 ZS4gJm5ic3A7SW4gb3RoZXIgd29yZHMgaW4gYSBub3JtYWwgSlNPTiBzdHJ1Y3R1cmUsIHRoZSBQ YXRjaCBwYXRoIGF0dHJpYnV0ZSBkZXNjcmliZXMNCiB0aGUgbGVmdCBoYWxmIG9mIGEgbmFtZSB2 YWx1ZSBwYWlyLCBhbmQgdGhlIOKAnHZhbHVl4oCdIGRlc2NyaWJlcyB0aGUgcmlnaHQgaGFsZi48 L3NwYW4+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5TbyBpZiDigJxwYXRoJnF1b3Q7IHBvaW50cyB0byBhIGNvbXBsZXggYXR0cmlidXRl LCB0aGVuIOKAnHZhbHVl4oCdIE1VU1QgYmUgYSBKU09OIG9iamVjdCBvZiBvbmUgb3IgbW9yZSBz dWItYXR0cmlidXRlcy4gJm5ic3A7SWYgcGF0aCBkZXNjcmliZXMgYSBzaW1wbGUgYXR0cmlidXRl LCB0aGFuIHRoZSBjb3JyZXNwb25kaW5nDQogdmFsdWUgbXVzdCBiZSBhIGJvb2xlYW4sIHN0cmlu ZyBkZXBlbmRpbmcgb24gdGhlIHNjaGVtYSBvZiB0aGUgYXR0cmlidXRlIGRlc2NyaWJlZCBieSDi gJxwYXRo4oCdLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlNDSU0gcGF0Y2ggaXMgYmFzZWQgb24gYW5kIGZvbGxv d3MgdGhlIHNhbWUgZGVzaWduIGFzIGZvciBSRkM2OTAyIChKU09OIFBhdGNoKS4gVGhlIG9ubHkg ZGlmZmVyZW5jZSBpcyB3ZSBkZWNpZGVkIHRvIGxpbWl0IHRoZSBudW1iZXIgb2Ygb3BlcmF0aW9u IHR5cGVzIGFuZCB0byB1c2UgZmlsdGVycw0KIGluIHBhdGhzIHJhdGhlciB0aGFuIGFycmF5IGlu ZGV4ZWQgYWNjZXNzIGJhc2VkIG9uIEpTT04gUG9pbnRlcnMgKFJGQzY5MDEpLjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+UGhpbDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkBpbmRlcGVuZGVudGlk PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PGEgaHJlZj0iaHR0cDovL3d3dy5pbmRl cGVuZGVudGlkLmNvbS8iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnd3dy5pbmRlcGVuZGVu dGlkLmNvbTwvc3Bhbj48L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxhIGhy ZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBs ZSI+cGhpbC5odW50QG9yYWNsZS5jb208L3NwYW4+PC9hPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5PbiBGZWIg MTMsIDIwMTUsIGF0IDEyOjI5IFBNLCBNaWNoYWVsIEZyb3N0ICZsdDs8YSBocmVmPSJtYWlsdG86 bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5taWNo YWVsLmZyb3N0QG9yYWNsZS5jb208L3NwYW4+PC9hPiZndDsgd3JvdGU6PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+WWVzIEtlbGx5LCB5b3UgYXJlIGNvcnJlY3QuJm5ic3A7IEkgd2FzIGxvb2tp bmcgZm9yIHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgYWxsIHJlc291cmNlcyBhbmQgbWVzc2Fn ZXMuJm5ic3A7IFlvdSBhbHNvIGNvcnJlY3RseSBpZGVudGlmaWVkIHRoZSBpc3N1ZSBJIHdhcyB0 cnlpbmcgdG8NCiByYWlzZSB3aXRoIHJlZ2FyZHMgdG8gUGF0Y2hPcC4mbmJzcDsgVGhhbmtzIGZv ciB0YWtpbmcgYSBsb29rLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+LW1yZjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYg MS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 OyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+S2VsbHkN CiBHcml6emxlIFs8YSBocmVmPSJtYWlsdG86a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tIj48 c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5tYWlsdG86a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQu Y29tPC9zcGFuPjwvYT5dPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj5GcmlkYXksIEZlYnJ1YXJ5IDEzLCAyMDE1IDY6NTYgQU08YnI+DQo8 Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu Pk1pY2hhZWwgRnJvc3Q7IFBoaWwgSHVudDxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0 Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9h Pjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj5SZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNl bnRhdGlvbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj5NaWNoYWVsIOKApiBsZXQgbWUgbWFrZSBzdXJlIEkgdW5kZXJzdGFuZCB3 aGF0IHlvdSBhcmUgbG9va2luZyBmb3IuJm5ic3A7IFlvdSB3b3VsZCBsaWtlIGEgc2NoZW1hIHJl cHJlc2VudGF0aW9uIChzdWNoIGFzIHdoYXQgaXMgaW5jbHVkZWQgaW4gc2VjdGlvbiA4LjcpIGZv ciBhbGwNCiByZXNvdXJjZXMgYW5kIG1lc3NhZ2VzLiZuYnNwOyBJcyB0aGF0IHJpZ2h0Pzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+SWYgc28sIHRoZW4gSSAxMDAlIGFncmVlIHRoYXQgdGhpcyBp cyB1c2VmdWwuJm5ic3A7IEluIHRoZSBTQ0lNIDEuMCBzcGVjIChiYWNrIHdoZW4gd2Ugc3VwcG9y dGVkIFhNTCBhcyBhIGRhdGEgZm9ybWF0KSB0aGVyZSB3YXMgYW4gWFNEIHRoYXQgZGlkIGV4YWN0 bHkgd2hhdCB5b3UNCiBhcmUgbG9va2luZyBmb3Ig4oCTIGRlc2NyaWJlZCBib3RoIHJlc291cmNl cyBhbmQgbWVzc2FnZXMuJm5ic3A7IEkgYWdyZWUgdGhhdCBoYXZpbmcgdGhpcyBjb2RpZmllcyB0 aGUgcnVsZXMgYW5kIHJlbW92ZXMgc29tZSBhbWJpZ3VpdHkuJm5ic3A7IEkgd291bGQgYmUgaW4g ZmF2b3Igb2YgYWRkaW5nIHNvbWV0aGluZyBsaWtlIHRoaXMgdG8gdGhlIFNDSU0gc3BlYy48L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlJlZ2FyZGluZyB0aGUgUGF0Y2hPcCwgaXMgdGhlIHByb2Js ZW0gdGhhdCB0aGUgdmFsdWUgc3ViLWF0dHJpYnV0ZSBjb3VsZCBiZSBhbnl0aGluZyDigJMgbXVs dGl2YWx1ZWQgY291bGQgYmUgdHJ1ZSBvciBmYWxzZSwgdGhlcmUgbWF5IG9yIG1heSBub3QgYmUg c3ViLWF0dHJpYnV0ZXMNCiAoaWUg4oCTIGl0IGNvdWxkIGJlIGNvbXBsZXgsIHdoaWNoIGlzIG5v dCB0ZWNobmljYWxseSBzdXBwb3J0ZWQpLCBhbmQgdGhlIHR5cGUgaXMgZGVwZW5kZW50IHVwb24g dGhlIGFjdHVhbCBhdHRyaWJ1dGUgdGhhdCB5b3UgYXJlIHJlcGxhY2luZz8mbmJzcDsgV2l0aCB0 aGlzIGFtYmlndWl0eSB0aGVyZSBpc27igJl0IGEgZ29vZCB3YXkgdG8gcmVwcmVzZW50IHRoaXMg aW4gYSBzY2hlbWEgY3VycmVudGx5Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+LS1LZWxseTwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiZuYnNwOzwv c3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPnNjaW0NCiBbPGEgaHJlZj0i bWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+ bWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZzwvc3Bhbj48L2E+XTxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48Yj5PbiBCZWhhbGYgT2Y8c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPk1pY2hhZWwgRnJvc3Q8 YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+VGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDY6NDUgUE08YnI+DQo8Yj5Ubzo8 L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlBoaWwg SHVudDxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJj b2xvcjpwdXJwbGUiPnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9i PjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3Nj aW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBQaGls LDxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPk5vdCBzdXJlIHdoYXQgeW91IG1lYW4gYnkgZXhhbXBsZXMuJm5i c3A7IE15IGNvbmNlcm4gaXMgdGhhdCBpbiB0aGUgc2NoZW1hIGRvYywgc2VjdGlvbiA4LjcgcHJv dmlkZXMgc2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBjb3JlIHVzZXIvZ3JvdXAgYW5kIGVudGVy cHJpc2UgdXNlci4mbmJzcDsNCiBXaGF0IGFib3V0IGFsbCB0aGUgb3RoZXIgc2NoZW1hcyB3ZSBy ZWZlcmVuY2U/Jm5ic3A7IFdlIHNob3VsZCBwcm92aWRlIHNjaGVtYSByZXByZXNlbnRhdGlvbiBm b3IgZXZlcnkgc2NoZW1hIGRlZmluZWQgaW4gdGhlIHNwZWMuJm5ic3A7IEV2ZXJ5b25lIGltcGxl bWVudGluZyB0aGlzIHNwZWMgd2lsbCBuZWVkIHRoZW0uJm5ic3A7IFdoeSBwcm92aWRlIGp1c3Qg dGhyZWUgYW5kIGxlYXZlIHRoZSByZXN0IHVwIHRvIGd1ZXNzIHdvcms/Jm5ic3A7IEV2ZXJ5IGlt cGxlbWVudGF0aW9uDQogbmVlZHMgdG8gZG8gdmFsaWRhdGlvbiwgZXZlcnkgdmFsaWRhdGlvbiBu ZWVkcyBhIHNjaGVtYSB0byB2YWxpZGF0ZSBhZ2FpbnN0LiZuYnNwOyBTbyBteSBjb25jZXJuIGlz IHR3b2ZvbGQuJm5ic3A7IEZpcnN0LCB3ZSByZWZlcmVuY2UgYSBidW5jaCBvZiBzY2hlbWFzIHRo YXQgZXZlcnlvbmUgbmVlZHMsIGJ1dCB3ZSBkb27igJl0IHByb3ZpZGUgdGhlbS4mbmJzcDsgU2Vj b25kLCBzb21lIG9mIHRoZSBzY2hlbWFzIHdlIHJlZmVyZW5jZSAoc3VjaCBhcyBwYXRjaE9wKSBj YW5ub3QNCiBiZSByZXByZXNlbnRlZCBpbiBKU09OIHVzaW5nIG91ciBvd24gZGVmaW5pdGlvbnMu PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5J4oCZbSBjZXJ0YWlubHkgT0sgd2l0aCBhbiBhcHBl bmRpeCBpbiB0aGUgYXBpIGRvYyBmb3IgbWVzc2FnZSBzY2hlbWFzIGFuZCBhbiBhcHBlbmRpeCBp biB0aGUgc2NoZW1hIGRvYyBmb3IgYWxsIG9mIHRoZSBlbnRpdHkgc2NoZW1hcy4mbmJzcDsgTXkg cG9pbnQgaXMgYWxsIHRoZXNlDQogc2NoZW1hcyBzaG91bGQgZXhpc3QuJm5ic3A7IFdlIHJlZmVy ZW5jZSB0aGVtLCB3ZSBkZXNjcmliZSB0aGVtLCBidXQgd2Ugb25seSBwcm92aWRlIHRocmVlIG9m IHRoZW0uJm5ic3A7IEl0IGp1c3Qgc2VlbXMgd3JvbmcgdG8gbWUgKHBlcmhhcHMgbXkgb3duIHNo b3J0Y29taW5nKSBidXQgd2XigJlyZSBhc2tpbmcgcGVvcGxlIHRvIGltcGxlbWVudCBTQ0lNIHBh dGNoLCB1c2luZyBhIFNDSU0gc2NoZW1hIGRlZmluZWQgcmVxdWVzdCwgdGhhdCB3ZSBkbyBub3Qg cHJvdmlkZSwNCiBhbmQgY2Fubm90IGRlZmluZSB1c2luZyBydWxlcyB3ZSBzZXQgZm9ydGggaW4g c2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgZG9jLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwcmUgc3R5bGU9InBhZ2Ut YnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPlNvIGJvdHRvbSBsaW5lLCBhbGwgSeKAmW0gcmVxdWVzdGluZyBpcyB0aGUgSlNPTiBy ZXByZXNlbnRhdGlvbiBvZiB0aGUgU0NJTSBzY2hlbWFzIHdlIHJlZmVyZW5jZS48L3NwYW4+PG86 cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhpcyBpcyBhIFNDSU0gc2No ZW1hIHJlZmVyZW5jZSwg4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6 UGF0Y2hPcOKAnCwgSSBmZWVsIHdlIHNob3VsZCBwcm92aWRlIHRoZSBKU09OIHJlcHJlc2VudGF0 aW9uIGZvciBpdC4gJm5ic3A7SWYgd2UgY2Fu4oCZdCBkbyBpdCwgbm9ib2R5IGltcGxlbWVudGlu ZyB0aGUgc3BlYyBjYW4gZWl0aGVyLiZuYnNwOyBBbGwgb2YgdGhlIHNjaGVtYXMgd2UgcmVmZXJl bmNlIHNob3VsZCBiZSBwcm92aWRlZCB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zIHNldCBkb3du IGluIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIHJmYyAob3IgZW5oYW5jZWQgaW4gdGhlIGFwaSBk b2MsIHVzaW5nIHNlY3Rpb24gNyBhcyBhIGJhc2UpLiZuYnNwOyBGcmFua2x5LCBJ4oCZbSBkcmVh ZGluZyB0aGUgb3V0Y29tZSBvZiBhbGwgdGhpcyBiZWNhdXNlIEnigJl2ZSBhbHJlYWR5IHNwZW50 IGEgY291cGxlIG9mIG1vbnRocyBpbXBsZW1lbnRpbmcgcGF0Y2ggaW4gaXRzIGN1cnJlbnQgZm9y bSB3aXRoIG92ZXIgMTUwIHVuaXQgdGVzdHMgdG8gY29uZmlybSBpdCBkb2VzIHdoYXQgSSB0aGlu ayB0aGUgc3BlYyByZXF1aXJlcy4mbmJzcDsgQnV0IHNldmVyYWwgb2YgbXkgcGVlcnMgaGF2ZSBj b21lIHRvIG1lIGFuZCBhc2tlZCBmb3IgdGhlc2Ugc2NoZW1hIGRlZmluaXRpb25zIChpbiBKU09O KSBhbmQgYSBjb3VwbGUgaGF2ZSBwb2ludGVkIG91dCB0aGF0IHRoZSBwYXRjaCByZXF1ZXN0IHNj aGVtYSwg4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6UGF0Y2hPcOKA nCwgY2Fubm90IGJlIHJlcHJlc2VudGVkIHVzaW5nIHNlY3Rpb24gNyBydWxlcyBhbmQgdGhhdCB3 ZSBjYW5ub3QgZG8gdXBmcm9udCB2YWxpZGF0aW9uIG9uIHBhdGNoIHJlcXVlc3RzIHRoZSB3YXkg d2UgZG8gYWxsIG90aGVyIFNDSU0gcmVxdWVzdHMuJm5ic3A7IEFuZCBpdOKAmXMgdHJ1ZSwgd2Ug Y2Fubm90IGRvIGFuIHVwZnJvbnQgdmFsaWRhdGlvbiBvZiBwYXRjaCBhZnRlciBpdOKAmXMgcGFy c2VkIHRoZSB3YXkgd2UgY2FuIGFsbCBvdGhlciByZXF1ZXN0cy4mbmJzcDsgU2ltcGxlIGF0dHJp YnV0ZSB2YWxpZGF0aW9uIGlzIGltcG9zc2libGUgYmVjYXVzZSDigJx2YWx1ZeKAnSBkZXBlbmRz IG9uIHRoZSB0YXJnZXQgb2Yg4oCccGF0aOKAnSwgYW5kIHRoZXJlZm9yZSDigJx2YWx1ZeKAnSBj YW5ub3QgYmUgZGVmaW5lZCBpbiBhIEpTT04gc2NoZW1hIHVzaW5nIHNlY3Rpb24gNyBvZiB0aGUg c2NoZW1hIGRvYy48L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJl YWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVh ay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+RXZlbiBpZiB3ZSBjYW7igJl0IGZpeCBwYXRjaCwgZm9yIHdoYXRldmVyIHJlYXNvbiwgd2Ug c2hvdWxkIHByb3ZpZGUgdGhlIHJlc3Qgb2YgdGhlIHNjaGVtYXMsIHJlcHJlc2VudGVkIGluIEpT T04gZm9ybWF0LCBmb3IgYm90aCBkb2NzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBz dHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0 eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj4tbXJmPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGlu Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij5QaGlsDQogSHVudDxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+VGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAy MDE1IDEyOjU4IFBNPGJyPg0KPGI+VG86PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj5NaWNoYWVsIEZyb3N0PGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86 c2NpbUBpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c2NpbUBpZXRmLm9yZzwv c3Bhbj48L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBKU09O IHJlcHJlc2VudGF0aW9uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1pY2hhZWwsPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNhbiB5b3UgcHJvdmlkZSBleGFtcGxlcz88bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+VGhlIHNjaGVtYSBpbiB0aGUgQVBJIGhhcyB0byBleHRlbmQgdGhl IHJlZ2lzdHJ5IGRlZmluZSBpbiBjb3JlLiAmbmJzcDsgQXMgZWRpdG9yIEkgdGhpbmsgaXQgd291 bGQgYmUgZXZlbiBtb3JlIGNvbmZ1c2luZyB0byBtaXggZGF0YSBzY2hlbWEgYW5kIHJlcXVlc3Qg c2NoZW1hIGluIGEgc2luZ2xlIGRvY3VtZW50LiBJdCBhbHNvIGJlY29tZXMgcHJvYmxlbWF0aWMg d2hlbiBzcGVjcyBjcm9zcyByZWZlcmVuY2UgZWFjaA0KIG90aGVyLiBJbnN0ZWFkIHRoZSBkb2N1 bWVudCBsYXlvdXQgaXMgc3VjaCB0aGF0IEFQSSBidWlsZHMgb24gY29yZSBzY2hlbWEuJm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBmb3JtYXQgaW4gUEFUQ0ggY29tZXMgZnJv bSB0aGUgSlNPTiBQYXRjaCBSRkMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpQaGlsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KT24gRmViIDEyLCAyMDE1LCBhdCAxMjo0Niwg TWljaGFlbCBGcm9zdCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNv bSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPC9z cGFuPjwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwcmUgc3R5bGU9 InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQi Pi4wOlJlc291cmNlVHlwZTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFn ZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+dXJu OmlldGY6cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjI8L3NwYW4+PG86cD48L286cD48L3ByZT4N CjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX188YnI+DQpzY2ltIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpzY2lt QGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5zY2ltQGlldGYub3JnPC9zcGFu PjwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L3NjaW0iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vc2NpbTwvc3Bhbj48L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+X19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzY2ltIG1h aWxpbmcgbGlzdDxicj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86c2NpbUBpZXRmLm9yZyI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpwdXJwbGUiPnNjaW1AaWV0Zi5vcmc8L3Nw YW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxicj4NCjwvc3Bhbj48YSBocmVm PSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6cHVycGxlIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL3NjaW08L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_BN1PR04MB39275B15B936F11852F6267E2160BN1PR04MB392namprd_-- From nobody Tue Feb 24 15:52:22 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E12F61A1A1E for ; Tue, 24 Feb 2015 15:52:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5Ot-fQEkm_yt for ; Tue, 24 Feb 2015 15:52:16 -0800 (PST) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C03481A19EF for ; Tue, 24 Feb 2015 15:52:15 -0800 (PST) Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1ONqDiZ010908 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 24 Feb 2015 23:52:14 GMT Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by ucsinet22.oracle.com (8.14.5+Sun/8.14.5) with ESMTP id t1ONqCnf008002 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 24 Feb 2015 23:52:12 GMT Received: from abhmp0014.oracle.com (abhmp0014.oracle.com [141.146.116.20]) by aserv0121.oracle.com (8.13.8/8.13.8) with ESMTP id t1ONqBMG001247; Tue, 24 Feb 2015 23:52:12 GMT Received: from [10.0.1.7] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 24 Feb 2015 15:52:05 -0800 Content-Type: multipart/alternative; boundary="Apple-Mail=_B6059877-7AA2-42CD-BBD1-CB3F281887B3" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Phil Hunt In-Reply-To: Date: Tue, 24 Feb 2015 15:52:03 -0800 Message-Id: References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> <8DB34ABA-7C60-406A-852D-1CA3E756D1F3@oracle.com> To: Kelly Grizzle X-Mailer: Apple Mail (2.2070.6) X-Source-IP: ucsinet22.oracle.com [156.151.31.94] Archived-At: Cc: SCIM WG , =?utf-8?Q?Erik_Wahlstr=C3=B6m_neXus?= Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Feb 2015 23:52:21 -0000 --Apple-Mail=_B6059877-7AA2-42CD-BBD1-CB3F281887B3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Normally, I would expect that would be handled by a new extension draft = and registered appropriately with IANA. I still have to research the = implications on registry handling but I think this should be do-able. As = with your example extension for paging, there=E2=80=99s nothing saying = we can=E2=80=99t follow the same extension technique in our JSON. If I roll your suggestion together with Erik=E2=80=99s proposal we would = have: { "msgType":["urn:ietf:params:scim:api:messages:2.0:ListResponse", = "urn:some-extension:pagination"], "totalResults":2, "Resources":[ { "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User=E2=80=9D]= , =E2=80=9Cid" : , "userName":"bjensen" }, { "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User=E2=80=9D]= , =E2=80=9Cid" : , "userName":"jsmith" } ], "urn:some-extension:pagination": { "pagingToken": "8982jak84j.nkd8" } } Notice that inside each =E2=80=9CResources=E2=80=9D array element is a = resource object with its data schema reference included. Also, since id = is always returned, it would also be present. By using =E2=80=9CmsgType=E2=80=9D, we are clearly separating what is = request or response metadata content as distinct from resource schema = (which has state). Phil @independentid www.independentid.com phil.hunt@oracle.com > On Feb 24, 2015, at 3:13 PM, Kelly Grizzle = wrote: >=20 > Right. My thinking was more around the ListResponse itself being = extended rather than the contained resource objects. For example: > =20 > { > "schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse", = "urn:some-extension:pagination"], > "totalResults":2, > "Resources":[ > { > "userName":"bjensen" > }, > { > "userName":"jsmith" > } > ], > "urn:some-extension:pagination": { > "pagingToken": "8982jak84j.nkd8" > } > } > =20 > Again =E2=80=A6 I=E2=80=99m not even sure if this is something that = anyone would want to do or if it should be supported in this way. I = just wanted to bring it up. > =20 > From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt > Sent: Tuesday, February 24, 2015 5:03 PM > To: Kelly Grizzle > Cc: SCIM WG; Erik Wahlstr=C3=B6m neXus > Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON = representation) > =20 > I believe we are ok on this. We have pretty good separation. For = example List response does contain json objects that have resource = specific schemas.=20 > =20 > E.g. The outer json object would have a msgType of ListResponse while = the array of result objects each contains a resource each with its own = schemas attribute.=20 >=20 > Phil >=20 > On Feb 24, 2015, at 14:31, Kelly Grizzle > wrote: >=20 > One thing that is nice about =E2=80=9Cschemas=E2=80=9D is that it = gives us a way to extend a resource (or the representation of a = resource). By moving our messages to use msgType instead of schemas, we = might lose some of this flexibility. I=E2=80=99m not sure that we would = want it or not, but I can envision a ListResponse from a server that = returns a =E2=80=9Cpaging token=E2=80=9D along with the current page = number, etc=E2=80=A6 This could potentially be put into an extension. = Just something to consider=E2=80=A6 > =20 > --Kelly > =20 > From: scim [mailto:scim-bounces@ietf.org = ] On Behalf Of Phil Hunt > Sent: Tuesday, February 24, 2015 12:01 PM > To: Erik Wahlstr=C3=B6m neXus > Cc: SCIM WG > Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON = representation) > =20 > Erik > =20 > Agreed. I think this makes sense and is a good compromise. This = reflects what we discussed on our informal call last week. > =20 > Any other comments? > =20 > Phil > =20 > @independentid > www.independentid.com > phil.hunt@oracle.com > =20 > On Feb 24, 2015, at 1:43 AM, Erik Wahlstr=C3=B6m neXus = > = wrote: > =20 > Hi, > =20 > I agreed that there are some inconsistency and philosophical issues = present in the specifications that probably need addressing.=20 > =20 > I think we should make differences to the Resources and messages, and = we need some changes to the schema and the api drafts to make that = clear. > =20 > The Resources requires fixed schemas, the messages not so much. = Schemas is intended solely for the purpose of allowing a client to = understand what attributes and associated metadata (readability, = mutability, type, etc) is supported by a particular service provider. = Disregarding on the currently used bearer. > =20 > The message don=E2=80=99t need to be validated according to a schema. = SCIM follows the Robustness Principal (Jon Postel=E2=80=99s law - one of = the founding principles of TCP/IP). This means that message should not = need to comply with schema in order to be interpreted (within reason) by = a service provider. In practical terms, a SCIM client should never have = to do a lot of work to create or search for a User. At the same time, a = service provider is not obliged to accept a new User *exactly* as the = client specifies. The service provider is always free to interpret and = change data. > =20 > Messages is part of the API draft, and Resources and there schemas is = a part of the Schema draft. We should not mix them to much and make it = clear in the spec that is also the case. > =20 > I think that the Resources that we have today, Schema, ResourceTypes = and ServiceProviderConfigs MUST be added to the /Schemas endpoint. We = should also add Schema, ResourceTypes and ServiceProviderConfigs to the = section "8.7 Schema Representation=E2=80=9D in the schema spec.=20 > =20 > A second important change to make it clear that messages are messages, = is to remove the schema attribute on of of the messages. They where = added rather late in the spec-writing process to give a notion to the = service provider what kind of message that=E2=80=99s currently sent. The = intention was not to force the SP to validate the messages against a = schema. I suggest that we remove the =E2=80=9Cschemas" attribute in = messages and replaces it with a =E2=80=9CmsgType=E2=80=9D that could = indicate what message it is (PatchOp or ListResponse). > =20 > / Erik > =20 > =20 > =20 > On 13 Feb 2015, at 22:08, Phil Hunt > wrote: > =20 > With the patch operation, the contents of =E2=80=9Cvalue=E2=80=9D is = currently driven by the =E2=80=9Cpath=E2=80=9D attribute. In other = words in a normal JSON structure, the Patch path attribute describes the = left half of a name value pair, and the =E2=80=9Cvalue=E2=80=9D = describes the right half. > =20 > So if =E2=80=9Cpath" points to a complex attribute, then =E2=80=9Cvalue=E2= =80=9D MUST be a JSON object of one or more sub-attributes. If path = describes a simple attribute, than the corresponding value must be a = boolean, string depending on the schema of the attribute described by = =E2=80=9Cpath=E2=80=9D. > =20 > SCIM patch is based on and follows the same design as for RFC6902 = (JSON Patch). The only difference is we decided to limit the number of = operation types and to use filters in paths rather than array indexed = access based on JSON Pointers (RFC6901). > =20 > Phil > =20 > @independentid > www.independentid.com > phil.hunt@oracle.com > =20 > On Feb 13, 2015, at 12:29 PM, Michael Frost > wrote: > =20 > Yes Kelly, you are correct. I was looking for schema representation = for all resources and messages. You also correctly identified the issue = I was trying to raise with regards to PatchOp. Thanks for taking a = look. > =20 > -mrf > =20 > From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com = ]=20 > Sent: Friday, February 13, 2015 6:56 AM > To: Michael Frost; Phil Hunt > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Michael =E2=80=A6 let me make sure I understand what you are looking = for. You would like a schema representation (such as what is included = in section 8.7) for all resources and messages. Is that right? > =20 > If so, then I 100% agree that this is useful. In the SCIM 1.0 spec = (back when we supported XML as a data format) there was an XSD that did = exactly what you are looking for =E2=80=93 described both resources and = messages. I agree that having this codifies the rules and removes some = ambiguity. I would be in favor of adding something like this to the = SCIM spec. > =20 > Regarding the PatchOp, is the problem that the value sub-attribute = could be anything =E2=80=93 multivalued could be true or false, there = may or may not be sub-attributes (ie =E2=80=93 it could be complex, = which is not technically supported), and the type is dependent upon the = actual attribute that you are replacing? With this ambiguity there = isn=E2=80=99t a good way to represent this in a schema currently. > =20 > --Kelly > =20 > =20 > From: scim [mailto:scim-bounces@ietf.org = ] On Behalf Of Michael Frost > Sent: Thursday, February 12, 2015 6:45 PM > To: Phil Hunt > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Hi Phil,=20 > =20 > Not sure what you mean by examples. My concern is that in the schema = doc, section 8.7 provides schema representation for core user/group and = enterprise user. What about all the other schemas we reference? We = should provide schema representation for every schema defined in the = spec. Everyone implementing this spec will need them. Why provide just = three and leave the rest up to guess work? Every implementation needs = to do validation, every validation needs a schema to validate against. = So my concern is twofold. First, we reference a bunch of schemas that = everyone needs, but we don=E2=80=99t provide them. Second, some of the = schemas we reference (such as patchOp) cannot be represented in JSON = using our own definitions. > =20 > I=E2=80=99m certainly OK with an appendix in the api doc for message = schemas and an appendix in the schema doc for all of the entity schemas. = My point is all these schemas should exist. We reference them, we = describe them, but we only provide three of them. It just seems wrong = to me (perhaps my own shortcoming) but we=E2=80=99re asking people to = implement SCIM patch, using a SCIM schema defined request, that we do = not provide, and cannot define using rules we set forth in section 7 of = the schema doc. > =20 > So bottom line, all I=E2=80=99m requesting is the JSON representation = of the SCIM schemas we reference. > =20 > This is a SCIM schema reference, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we should = provide the JSON representation for it. If we can=E2=80=99t do it, = nobody implementing the spec can either. All of the schemas we = reference should be provided using our own definitions set down in = section 7 of the schema rfc (or enhanced in the api doc, using section 7 = as a base). Frankly, I=E2=80=99m dreading the outcome of all this = because I=E2=80=99ve already spent a couple of months implementing patch = in its current form with over 150 unit tests to confirm it does what I = think the spec requires. But several of my peers have come to me and = asked for these schema definitions (in JSON) and a couple have pointed = out that the patch request schema, =E2=80=9C = urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be = represented using section 7 rules and that we cannot do upfront = validation on patch requests the way we do all other SCIM requests. And = it=E2=80=99s true, we cannot do an upfront validation of patch after = it=E2=80=99s parsed the way we can all other requests. Simple attribute = validation is impossible because =E2=80=9Cvalue=E2=80=9D depends on the = target of =E2=80=9Cpath=E2=80=9D, and therefore =E2=80=9Cvalue=E2=80=9D = cannot be defined in a JSON schema using section 7 of the schema doc. > =20 > Even if we can=E2=80=99t fix patch, for whatever reason, we should = provide the rest of the schemas, represented in JSON format, for both = docs. > =20 > -mrf > =20 > From: Phil Hunt=20 > Sent: Thursday, February 12, 2015 12:58 PM > To: Michael Frost > Cc: scim@ietf.org > Subject: Re: [scim] SCIM schema IDs and JSON representation > =20 > Michael, > =20 > Can you provide examples? > =20 > The schema in the API has to extend the registry define in core. As = editor I think it would be even more confusing to mix data schema and = request schema in a single document. It also becomes problematic when = specs cross reference each other. Instead the document layout is such = that API builds on core schema.=20 > =20 > The format in PATCH comes from the JSON Patch RFC.=20 >=20 > Phil >=20 > On Feb 12, 2015, at 12:46, Michael Frost > wrote: >=20 > .0:ResourceType > urn:ietf:params:scim:schemas:core:2 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim = > =20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim = > =20 > =20 --Apple-Mail=_B6059877-7AA2-42CD-BBD1-CB3F281887B3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Normally, I would expect that would be handled by a new = extension draft and registered appropriately with IANA. I still have to = research the implications on registry handling but I think this should = be do-able. As = with your example extension for paging, there=E2=80=99s nothing saying = we can=E2=80=99t follow the same extension technique in our = JSON.

If I = roll your suggestion together with Erik=E2=80=99s proposal we would = have:

  {
    =  "msgType":["urn:ietf:params:scim:api:messages:2.0:ListRespon= se", "urn:some-extension:pagination"],
     "totalResults":2,
     "Resources":[
       = {
         "schemas": =
["urn:ietf:params:scim:schemas:core:2.0:User=E2=80=9D],
        =
  =E2=80=9Cid" : <some-id-a>,
         = "userName":"bjensen"
       },
       {
         "schemas": =
["urn:ietf:params:scim:schemas:core:2.0:User=E2=80=9D],
          =E2=80=9Cid" : =
<some-id-b>,
  =        "userName":"jsmith"
       }
     ],
     "urn:some-extension:pagination": {
  =      "pagingToken": "8982jak84j.nkd8"
     }
   = }

Notice = that inside each =E2=80=9CResources=E2=80=9D array element is a resource = object with its data schema reference included.  Also, since id is = always returned, it would also be present.

By using =E2=80=9CmsgType=E2=80=9D, we = are clearly separating what is request or response metadata content as = distinct from resource schema (which has state).

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com
=

On Feb 24, 2015, at 3:13 PM, Kelly Grizzle <kelly.grizzle@sailpoint.com> wrote:

Right.  My thinking was more = around the ListResponse itself being extended rather than the contained = resource objects.  For example:

 

   {

     = "schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse", = "urn:some-extension:pagination"],

     "totalResults":2,

     = "Resources":[

       {

         = "userName":"bjensen"

       },

       {

  =        "userName":"jsmith"

       }

     ],

     = "urn:some-extension:pagination": {

  =      "pagingToken": "8982jak84j.nkd8"

     }

   }

 

Again =E2=80=A6 I=E2=80=99m not even = sure if this is something that anyone would want to do or if it should = be supported in this way.  I just wanted to bring it up.

 

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt
Sent: Tuesday, February 24, 2015 5:03 PM
To: Kelly Grizzle
Cc: SCIM WG; Erik Wahlstr=C3=B6m neXus
Subject: Re: [scim] PATCH and schema (was: SCIM schema = IDs and JSON representation)

 

I believe we are ok on this. We = have pretty good separation. For example List response does contain json = objects that have resource specific schemas. 

 

E.g. The outer json object would = have a msgType of ListResponse while the array of result objects each = contains a resource each with its own schemas attribute. 

Phil


On Feb 24, 2015, at 14:31, Kelly Grizzle <kelly.grizzle@sailpoint.com> wrote:

One thing that is nice about = =E2=80=9Cschemas=E2=80=9D is that it gives us a way to extend a resource = (or the representation of a resource).  By moving our messages to = use msgType instead of schemas, we might lose some of this = flexibility.  I=E2=80=99m not sure that we would want it or not, = but I can envision a ListResponse from a server that returns a =E2=80=9Cpa= ging token=E2=80=9D along with the current page number, etc=E2=80=A6 = This could potentially be put into an extension.  Just something to consider=E2=80=A6

 

--Kelly

 

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt
Sent: Tuesday, February 24, 2015 12:01 PM
= To: Erik Wahlstr=C3=B6m neXus
Cc: SCIM WG
Subject: Re: [scim] PATCH and schema (was: SCIM schema = IDs and JSON representation)

 

Erik

 

Agreed. I think this makes sense = and is a good compromise. This reflects what we discussed on our = informal call last week.

 

Any other comments?

 

Phil

 

@independentid

www.independentid.com

phil.hunt@oracle.com

 

On Feb 24, 2015, at 1:43 AM, Erik = Wahlstr=C3=B6m neXus <erik.wahlstrom@nexusgroup.com> wrote:

 

Hi,

 

I agreed that there are some = inconsistency and philosophical issues present in the specifications = that probably need addressing. 

 

I think we should make = differences to the Resources and messages, and we need some changes to = the schema and the api drafts to make that clear.

 

The Resources requires fixed = schemas, the messages not so much. Schemas is intended solely for the = purpose of allowing a client to understand what attributes and = associated metadata (readability, mutability, type, etc) is supported by = a particular service provider. Disregarding on the currently used = bearer.

 

The message don=E2=80=99t need to = be validated according to a schema. SCIM follows the Robustness = Principal (Jon Postel=E2=80=99s law - one of the founding principles of = TCP/IP). This means that message should not need to comply with schema = in order to be interpreted (within reason) by a service provider.  In = practical terms, a SCIM client should never have to do a lot of work to = create or search for a User. At the same time, a service provider is not = obliged to accept a new User *exactly* as the client specifies. The service provider is always free to interpret and change = data.

 

Messages is part of the API = draft, and Resources and there schemas is a part of the Schema draft. We = should not mix them to much and make it clear in the spec that is also = the case.

 

I think that the Resources that = we have today, Schema, ResourceTypes and ServiceProviderConfigs MUST be = added to the /Schemas endpoint. We should also add Schema, ResourceTypes = and ServiceProviderConfigs to the section "8.7 Schema Representation=E2=80= =9D in the schema spec. 

 

A second important change to make = it clear that messages are messages, is to remove the schema attribute = on of of the messages. They where added rather late in the spec-writing = process to give a notion to the service provider what kind of message that=E2=80=99s currently sent. The intention was not to = force the SP to validate the messages against a schema. I suggest that = we remove the =E2=80=9Cschemas" attribute in messages and replaces it = with a =E2=80=9CmsgType=E2=80=9D that could indicate what message it is = (PatchOp or ListResponse).

 

/ Erik

 

 

 

On 13 Feb 2015, at 22:08, Phil = Hunt <phil.hunt@oracle.com> wrote:

 

With the patch operation, the contents of = =E2=80=9Cvalue=E2=80=9D is currently driven by the =E2=80=9Cpath=E2=80=9D = attribute.  In other words in a normal JSON structure, the Patch = path attribute describes the left half of a name value pair, and the =E2=80=9Cvalue=E2=80=9D = describes the right half.

 

So if =E2=80=9Cpath" points to a complex attribute, = then =E2=80=9Cvalue=E2=80=9D MUST be a JSON object of one or more = sub-attributes.  If path describes a simple attribute, than the = corresponding value must be a boolean, string depending on the schema of the = attribute described by =E2=80=9Cpath=E2=80=9D.

 

SCIM patch is based on and follows the same design = as for RFC6902 (JSON Patch). The only difference is we decided to limit = the number of operation types and to use filters in paths rather than array indexed access based on JSON Pointers = (RFC6901).

 

Phil

 

@independentid

www.independentid.com

phil.hunt@oracle.com

 

On Feb 13, 2015, at 12:29 PM, Michael Frost <michael.frost@oracle.com> = wrote:

 

Yes Kelly, you are correct.  I was = looking for schema representation for all resources and messages.  = You also correctly identified the issue I was trying to raise with regards to PatchOp.  Thanks for taking a = look.

 

-mrf

 

From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com] 
Sent: Friday, February 13, 2015 = 6:56 AM
To: Michael Frost; Phil Hunt
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs = and JSON representation

 

Michael =E2=80=A6 let me make sure I = understand what you are looking for.  You would like a schema = representation (such as what is included in section 8.7) for all resources and messages.  Is that right?

 

If so, then I 100% agree that this is = useful.  In the SCIM 1.0 spec (back when we supported XML as a data = format) there was an XSD that did exactly what you are looking for =E2=80=93 described both resources and messages.  = I agree that having this codifies the rules and removes some = ambiguity.  I would be in favor of adding something like this to = the SCIM spec.

 

Regarding the PatchOp, is the problem = that the value sub-attribute could be anything =E2=80=93 multivalued = could be true or false, there may or may not be sub-attributes (ie =E2=80=93 it could be complex, which is not technically supported), = and the type is dependent upon the actual attribute that you are = replacing?  With this ambiguity there isn=E2=80=99t a good way to = represent this in a schema currently.

 

--Kelly

 

 

From: scim [mailto:scim-bounces@ietf.org] On Behalf = Of Michael = Frost
Sent: Thursday, February 12, 2015 = 6:45 PM
To: Phil Hunt
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs = and JSON representation

 

Hi Phil, 

 

Not sure what you mean by = examples.  My concern is that in the schema doc, section 8.7 = provides schema representation for core user/group and enterprise = user.  What about all the other schemas we reference?  We should provide = schema representation for every schema defined in the spec.  = Everyone implementing this spec will need them.  Why provide just = three and leave the rest up to guess work?  Every implementation needs to do validation, every validation needs a schema to validate = against.  So my concern is twofold.  First, we reference a = bunch of schemas that everyone needs, but we don=E2=80=99t provide = them.  Second, some of the schemas we reference (such as patchOp) = cannot be represented in JSON using our own definitions.

 

I=E2=80=99m certainly OK with an = appendix in the api doc for message schemas and an appendix in the = schema doc for all of the entity schemas.  My point is all these schemas should exist.  We reference them, we describe them, but we = only provide three of them.  It just seems wrong to me (perhaps my = own shortcoming) but we=E2=80=99re asking people to implement SCIM = patch, using a SCIM schema defined request, that we do not provide, and cannot define using rules we set forth in section 7 of the schema = doc.

 

So bottom line, all I=E2=80=99m =
requesting is the JSON representation of the SCIM schemas we =
reference.
 
= 
This is a SCIM schema reference, =E2=80=9C=
 urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, I feel we =
should provide the JSON representation for it.  If we can=E2=80=99t =
do it, nobody implementing the spec can either.  All of the schemas =
we reference should be provided using our own definitions set down in =
section 7 of the schema rfc (or enhanced in the api doc, using section 7 =
as a base).  Frankly, I=E2=80=99m dreading the outcome of all this =
because I=E2=80=99ve already spent a couple of months implementing patch =
in its current form with over 150 unit tests to confirm it does what I =
think the spec requires.  But several of my peers have come to me =
and asked for these schema definitions (in JSON) and a couple have =
pointed out that the patch request schema, =E2=80=9C =
urn:ietf:params:scim:api:messages:2.0:PatchOp=E2=80=9C, cannot be =
represented using section 7 rules and that we cannot do upfront =
validation on patch requests the way we do all other SCIM =
requests.  And it=E2=80=99s true, we cannot do an upfront =
validation of patch after it=E2=80=99s parsed the way we can all other =
requests.  Simple attribute validation is impossible because =
=E2=80=9Cvalue=E2=80=9D depends on the target of =E2=80=9Cpath=E2=80=9D, =
and therefore =E2=80=9Cvalue=E2=80=9D cannot be defined in a JSON schema =
using section 7 of the schema doc.
 
= 
Even if we can=E2=80=99t fix patch, for =
whatever reason, we should provide the rest of the schemas, represented =
in JSON format, for both docs.
 
= 
-mrf
 

From: Phil Hunt 
Sent: Thursday, February 12, 2015 = 12:58 PM
To: Michael Frost
Cc: scim@ietf.org
Subject: Re: [scim] SCIM schema IDs = and JSON representation

 

Michael,

 

Can you provide examples?

 

The schema in the API has to = extend the registry define in core.   As editor I think it would be = even more confusing to mix data schema and request schema in a single = document. It also becomes problematic when specs cross reference each other. Instead the document layout is such that API builds on core = schema. 

 

The format in PATCH comes from = the JSON Patch RFC. 


Phil


On Feb 12, 2015, at 12:46, Michael Frost <michael.frost@oracle.com> = wrote:

.0:ResourceType
urn:ietf:params:scim:schemas:core:2

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

 

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim

 

 


= --Apple-Mail=_B6059877-7AA2-42CD-BBD1-CB3F281887B3-- From nobody Tue Feb 24 23:06:16 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27EC41A1BDB for ; Tue, 24 Feb 2015 23:06:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.609 X-Spam-Level: X-Spam-Status: No, score=-1.609 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P4nrajKh7jma for ; Tue, 24 Feb 2015 23:06:09 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.121]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D0031A1BD2 for ; Tue, 24 Feb 2015 23:06:07 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX02.ad.nexusgroup.com (10.75.28.43) with Microsoft SMTP Server (TLS) id 15.0.995.29; Wed, 25 Feb 2015 08:06:04 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Wed, 25 Feb 2015 08:06:04 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: Phil Hunt Thread-Topic: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) Thread-Index: AQHQUFvUxtj/d/yCpkyt0oKXyn9OcJ0AUamAgAAI/4CAAALhgIAACsKAgAB5QwA= Date: Wed, 25 Feb 2015 07:06:04 +0000 Message-ID: <3CE93EE6-EEF0-4262-8DFE-115B27E6680D@nexusgroup.com> References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> <8DB34ABA-7C60-406A-852D-1CA3E756D1F3@oracle.com> In-Reply-To: Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2070.6) x-originating-ip: [37.247.26.197] Content-Type: multipart/alternative; boundary="_000_3CE93EE6EEF042628DFE115B27E6680Dnexusgroupcom_" MIME-Version: 1.0 Archived-At: Cc: SCIM WG , Kelly Grizzle Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Feb 2015 07:06:15 -0000 --_000_3CE93EE6EEF042628DFE115B27E6680Dnexusgroupcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNClRoZSBBUEkgZHJhZnQgZG9u4oCZdCBtZW50aW9uIGV4dGVuc2lvbiAodG8gdGhlIEFQ SSkgYW55d2hlcmUuIEkgdGhpbmsgYSBicmFuZCBuZXcgZW5kcG9pbnRzIHRoYXQgc3VwcG9ydHMg cGFnaW5nVG9rZW4gaXMgbW9yZSBpbiBsaW5lIHdpdGggdGhlIHNwZWNpZmljYXRpb24uIFRoYXQg YWxzbyBtYWtlcyBkaXNjb3ZlciB1c2luZyB0aGUgU2VydmljZVByb3ZpZGVyQ29uZmlnIGVuZHBv aW50IG1vcmUgYWNjdXJhdGUuIElzbuKAmXQgaXQgYmV0dGVyIHRvIGFkZCBhbiBleHRlbnNpb24g dGhlcmUgdGhhdCBhbm5vdW5jZSB0aGF0IHRoZSBzZXJ2ZXIgYWxzbyBzdXBwb3J0cyBvdGhlciBl bmRwb2ludHM/DQoNCkxpa2UgdGhpczoNCg0Kew0KICAgICJzY2hlbWFzIjogWw0KICAgICAgInVy bjppZXRmOnBhcmFtczpzY2ltOnNjaGVtYXM6Y29yZToyLjA6U2VydmljZVByb3ZpZGVyQ29uZmln 4oCdLCB1cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlvbiINCiAgICBdLA0KICAgICJkb2N1bWVu dGF0aW9uVXJsIjoiaHR0cDovL2V4YW1wbGUuY29tL2hlbHAvc2NpbS5odG1sIiwNCiAgICAicGF0 Y2giOiB7DQogICAgICAic3VwcG9ydGVkIjp0cnVlDQogICAgfSwNCiAgICAiYnVsayI6IHsNCiAg ICAgICJzdXBwb3J0ZWQiOnRydWUsDQogICAgICAibWF4T3BlcmF0aW9ucyI6MTAwMCwNCiAgICAg ICJtYXhQYXlsb2FkU2l6ZSI6MTA0ODU3Ng0KICAgIH0NCiAgICAgInVybjpzb21lLWV4dGVuc2lv bjpwYWdpbmF0aW9uIjogew0KICAgICAgIOKAnGZpbHRlcldpdGhOZXdUb2tlbkVuZHBvaW50Ijog 4oCcdHJ1ZSINCiAgICAgfSwNCiAgICDigKYuDQogICAg4oCmLg0KDQoNCkFuZCB0aGVuIHRoZSBz ZXJ2aWNlIHByb3ZpZGVyIGFsc28gaGF2ZSBzdXBwb3J0IGZvciB0aGUgbmV3IC92Mi9Vc2Vyc1dp dGhFeHRyYUJlbGxzRW5kV2lzdGxlc0VuZHBvaW50DQoNCi8gRXJpaw0KDQoNCg0KT24gMjUgRmVi IDIwMTUsIGF0IDAwOjUyLCBQaGlsIEh1bnQgPHBoaWwuaHVudEBvcmFjbGUuY29tPG1haWx0bzpw aGlsLmh1bnRAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQpOb3JtYWxseSwgSSB3b3VsZCBleHBlY3Qg dGhhdCB3b3VsZCBiZSBoYW5kbGVkIGJ5IGEgbmV3IGV4dGVuc2lvbiBkcmFmdCBhbmQgcmVnaXN0 ZXJlZCBhcHByb3ByaWF0ZWx5IHdpdGggSUFOQS4gSSBzdGlsbCBoYXZlIHRvIHJlc2VhcmNoIHRo ZSBpbXBsaWNhdGlvbnMgb24gcmVnaXN0cnkgaGFuZGxpbmcgYnV0IEkgdGhpbmsgdGhpcyBzaG91 bGQgYmUgZG8tYWJsZS4gQXMgd2l0aCB5b3VyIGV4YW1wbGUgZXh0ZW5zaW9uIGZvciBwYWdpbmcs IHRoZXJl4oCZcyBub3RoaW5nIHNheWluZyB3ZSBjYW7igJl0IGZvbGxvdyB0aGUgc2FtZSBleHRl bnNpb24gdGVjaG5pcXVlIGluIG91ciBKU09OLg0KDQpJZiBJIHJvbGwgeW91ciBzdWdnZXN0aW9u IHRvZ2V0aGVyIHdpdGggRXJpa+KAmXMgcHJvcG9zYWwgd2Ugd291bGQgaGF2ZToNCg0KICB7DQog ICAgICJtc2dUeXBlIjpbInVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6TGlz dFJlc3BvbnNlIiwgInVybjpzb21lLWV4dGVuc2lvbjpwYWdpbmF0aW9uIl0sDQogICAgICJ0b3Rh bFJlc3VsdHMiOjIsDQogICAgICJSZXNvdXJjZXMiOlsNCiAgICAgICB7DQoNCiAgICAgICAgICJz Y2hlbWFzIjogWyJ1cm46aWV0ZjpwYXJhbXM6c2NpbTpzY2hlbWFzOmNvcmU6Mi4wOlVzZXLigJ1d LA0KDQogICAgICAgICAg4oCcaWQiIDogPHNvbWUtaWQtYT4sDQoNCiAgICAgICAgICJ1c2VyTmFt ZSI6ImJqZW5zZW4iDQogICAgICAgfSwNCiAgICAgICB7DQoNCiAgICAgICAgICJzY2hlbWFzIjog WyJ1cm46aWV0ZjpwYXJhbXM6c2NpbTpzY2hlbWFzOmNvcmU6Mi4wOlVzZXLigJ1dLA0KDQogICAg ICAgICAg4oCcaWQiIDogPHNvbWUtaWQtYj4sDQoNCiAgICAgICAgICJ1c2VyTmFtZSI6ImpzbWl0 aCINCiAgICAgICB9DQogICAgIF0sDQogICAgICJ1cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlv biI6IHsNCiAgICAgICAicGFnaW5nVG9rZW4iOiAiODk4Mmphazg0ai5ua2Q4Ig0KICAgICB9DQog ICB9DQoNCk5vdGljZSB0aGF0IGluc2lkZSBlYWNoIOKAnFJlc291cmNlc+KAnSBhcnJheSBlbGVt ZW50IGlzIGEgcmVzb3VyY2Ugb2JqZWN0IHdpdGggaXRzIGRhdGEgc2NoZW1hIHJlZmVyZW5jZSBp bmNsdWRlZC4gIEFsc28sIHNpbmNlIGlkIGlzIGFsd2F5cyByZXR1cm5lZCwgaXQgd291bGQgYWxz byBiZSBwcmVzZW50Lg0KDQpCeSB1c2luZyDigJxtc2dUeXBl4oCdLCB3ZSBhcmUgY2xlYXJseSBz ZXBhcmF0aW5nIHdoYXQgaXMgcmVxdWVzdCBvciByZXNwb25zZSBtZXRhZGF0YSBjb250ZW50IGFz IGRpc3RpbmN0IGZyb20gcmVzb3VyY2Ugc2NoZW1hICh3aGljaCBoYXMgc3RhdGUpLg0KDQpQaGls DQoNCkBpbmRlcGVuZGVudGlkDQp3d3cuaW5kZXBlbmRlbnRpZC5jb208aHR0cDovL3d3dy5pbmRl cGVuZGVudGlkLmNvbS8+DQpwaGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9y YWNsZS5jb20+DQoNCk9uIEZlYiAyNCwgMjAxNSwgYXQgMzoxMyBQTSwgS2VsbHkgR3JpenpsZSA8 a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tPG1haWx0bzprZWxseS5ncml6emxlQHNhaWxwb2lu dC5jb20+PiB3cm90ZToNCg0KUmlnaHQuICBNeSB0aGlua2luZyB3YXMgbW9yZSBhcm91bmQgdGhl IExpc3RSZXNwb25zZSBpdHNlbGYgYmVpbmcgZXh0ZW5kZWQgcmF0aGVyIHRoYW4gdGhlIGNvbnRh aW5lZCByZXNvdXJjZSBvYmplY3RzLiAgRm9yIGV4YW1wbGU6DQoNCiAgIHsNCiAgICAgInNjaGVt YXMiOlsidXJuOmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpMaXN0UmVzcG9uc2Ui LCAidXJuOnNvbWUtZXh0ZW5zaW9uOnBhZ2luYXRpb24iXSwNCiAgICAgInRvdGFsUmVzdWx0cyI6 MiwNCiAgICAgIlJlc291cmNlcyI6Ww0KICAgICAgIHsNCiAgICAgICAgICJ1c2VyTmFtZSI6ImJq ZW5zZW4iDQogICAgICAgfSwNCiAgICAgICB7DQogICAgICAgICAidXNlck5hbWUiOiJqc21pdGgi DQogICAgICAgfQ0KICAgICBdLA0KICAgICAidXJuOnNvbWUtZXh0ZW5zaW9uOnBhZ2luYXRpb24i OiB7DQogICAgICAgInBhZ2luZ1Rva2VuIjogIjg5ODJqYWs4NGoubmtkOCINCiAgICAgfQ0KICAg fQ0KDQpBZ2FpbiDigKYgSeKAmW0gbm90IGV2ZW4gc3VyZSBpZiB0aGlzIGlzIHNvbWV0aGluZyB0 aGF0IGFueW9uZSB3b3VsZCB3YW50IHRvIGRvIG9yIGlmIGl0IHNob3VsZCBiZSBzdXBwb3J0ZWQg aW4gdGhpcyB3YXkuICBJIGp1c3Qgd2FudGVkIHRvIGJyaW5nIGl0IHVwLg0KDQpGcm9tOiBzY2lt IFttYWlsdG86c2NpbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgUGhpbCBIdW50DQpT ZW50OiBUdWVzZGF5LCBGZWJydWFyeSAyNCwgMjAxNSA1OjAzIFBNDQpUbzogS2VsbHkgR3Jpenps ZQ0KQ2M6IFNDSU0gV0c7IEVyaWsgV2FobHN0csO2bSBuZVh1cw0KU3ViamVjdDogUmU6IFtzY2lt XSBQQVRDSCBhbmQgc2NoZW1hICh3YXM6IFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNl bnRhdGlvbikNCg0KSSBiZWxpZXZlIHdlIGFyZSBvayBvbiB0aGlzLiBXZSBoYXZlIHByZXR0eSBn b29kIHNlcGFyYXRpb24uIEZvciBleGFtcGxlIExpc3QgcmVzcG9uc2UgZG9lcyBjb250YWluIGpz b24gb2JqZWN0cyB0aGF0IGhhdmUgcmVzb3VyY2Ugc3BlY2lmaWMgc2NoZW1hcy4NCg0KRS5nLiBU aGUgb3V0ZXIganNvbiBvYmplY3Qgd291bGQgaGF2ZSBhIG1zZ1R5cGUgb2YgTGlzdFJlc3BvbnNl IHdoaWxlIHRoZSBhcnJheSBvZiByZXN1bHQgb2JqZWN0cyBlYWNoIGNvbnRhaW5zIGEgcmVzb3Vy Y2UgZWFjaCB3aXRoIGl0cyBvd24gc2NoZW1hcyBhdHRyaWJ1dGUuDQoNClBoaWwNCg0KT24gRmVi IDI0LCAyMDE1LCBhdCAxNDozMSwgS2VsbHkgR3JpenpsZSA8a2VsbHkuZ3JpenpsZUBzYWlscG9p bnQuY29tPG1haWx0bzprZWxseS5ncml6emxlQHNhaWxwb2ludC5jb20+PiB3cm90ZToNCk9uZSB0 aGluZyB0aGF0IGlzIG5pY2UgYWJvdXQg4oCcc2NoZW1hc+KAnSBpcyB0aGF0IGl0IGdpdmVzIHVz IGEgd2F5IHRvIGV4dGVuZCBhIHJlc291cmNlIChvciB0aGUgcmVwcmVzZW50YXRpb24gb2YgYSBy ZXNvdXJjZSkuICBCeSBtb3Zpbmcgb3VyIG1lc3NhZ2VzIHRvIHVzZSBtc2dUeXBlIGluc3RlYWQg b2Ygc2NoZW1hcywgd2UgbWlnaHQgbG9zZSBzb21lIG9mIHRoaXMgZmxleGliaWxpdHkuICBJ4oCZ bSBub3Qgc3VyZSB0aGF0IHdlIHdvdWxkIHdhbnQgaXQgb3Igbm90LCBidXQgSSBjYW4gZW52aXNp b24gYSBMaXN0UmVzcG9uc2UgZnJvbSBhIHNlcnZlciB0aGF0IHJldHVybnMgYSDigJxwYWdpbmcg dG9rZW7igJ0gYWxvbmcgd2l0aCB0aGUgY3VycmVudCBwYWdlIG51bWJlciwgZXRj4oCmICBUaGlz IGNvdWxkIHBvdGVudGlhbGx5IGJlIHB1dCBpbnRvIGFuIGV4dGVuc2lvbi4gIEp1c3Qgc29tZXRo aW5nIHRvIGNvbnNpZGVy4oCmDQoNCi0tS2VsbHkNCg0KRnJvbTogc2NpbSBbbWFpbHRvOnNjaW0t Ym91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIFBoaWwgSHVudA0KU2VudDogVHVlc2RheSwg RmVicnVhcnkgMjQsIDIwMTUgMTI6MDEgUE0NClRvOiBFcmlrIFdhaGxzdHLDtm0gbmVYdXMNCkNj OiBTQ0lNIFdHDQpTdWJqZWN0OiBSZTogW3NjaW1dIFBBVENIIGFuZCBzY2hlbWEgKHdhczogU0NJ TSBzY2hlbWEgSURzIGFuZCBKU09OIHJlcHJlc2VudGF0aW9uKQ0KDQpFcmlrDQoNCkFncmVlZC4g SSB0aGluayB0aGlzIG1ha2VzIHNlbnNlIGFuZCBpcyBhIGdvb2QgY29tcHJvbWlzZS4gVGhpcyBy ZWZsZWN0cyB3aGF0IHdlIGRpc2N1c3NlZCBvbiBvdXIgaW5mb3JtYWwgY2FsbCBsYXN0IHdlZWsu DQoNCkFueSBvdGhlciBjb21tZW50cz8NCg0KUGhpbA0KDQpAaW5kZXBlbmRlbnRpZA0Kd3d3Lmlu ZGVwZW5kZW50aWQuY29tPGh0dHA6Ly93d3cuaW5kZXBlbmRlbnRpZC5jb20vPg0KcGhpbC5odW50 QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPg0KDQpPbiBGZWIgMjQsIDIw MTUsIGF0IDE6NDMgQU0sIEVyaWsgV2FobHN0csO2bSBuZVh1cyA8ZXJpay53YWhsc3Ryb21AbmV4 dXNncm91cC5jb208bWFpbHRvOmVyaWsud2FobHN0cm9tQG5leHVzZ3JvdXAuY29tPj4gd3JvdGU6 DQoNCkhpLA0KDQpJIGFncmVlZCB0aGF0IHRoZXJlIGFyZSBzb21lIGluY29uc2lzdGVuY3kgYW5k IHBoaWxvc29waGljYWwgaXNzdWVzIHByZXNlbnQgaW4gdGhlIHNwZWNpZmljYXRpb25zIHRoYXQg cHJvYmFibHkgbmVlZCBhZGRyZXNzaW5nLg0KDQpJIHRoaW5rIHdlIHNob3VsZCBtYWtlIGRpZmZl cmVuY2VzIHRvIHRoZSBSZXNvdXJjZXMgYW5kIG1lc3NhZ2VzLCBhbmQgd2UgbmVlZCBzb21lIGNo YW5nZXMgdG8gdGhlIHNjaGVtYSBhbmQgdGhlIGFwaSBkcmFmdHMgdG8gbWFrZSB0aGF0IGNsZWFy Lg0KDQpUaGUgUmVzb3VyY2VzIHJlcXVpcmVzIGZpeGVkIHNjaGVtYXMsIHRoZSBtZXNzYWdlcyBu b3Qgc28gbXVjaC4gU2NoZW1hcyBpcyBpbnRlbmRlZCBzb2xlbHkgZm9yIHRoZSBwdXJwb3NlIG9m IGFsbG93aW5nIGEgY2xpZW50IHRvIHVuZGVyc3RhbmQgd2hhdCBhdHRyaWJ1dGVzIGFuZCBhc3Nv Y2lhdGVkIG1ldGFkYXRhIChyZWFkYWJpbGl0eSwgbXV0YWJpbGl0eSwgdHlwZSwgZXRjKSBpcyBz dXBwb3J0ZWQgYnkgYSBwYXJ0aWN1bGFyIHNlcnZpY2UgcHJvdmlkZXIuIERpc3JlZ2FyZGluZyBv biB0aGUgY3VycmVudGx5IHVzZWQgYmVhcmVyLg0KDQpUaGUgbWVzc2FnZSBkb27igJl0IG5lZWQg dG8gYmUgdmFsaWRhdGVkIGFjY29yZGluZyB0byBhIHNjaGVtYS4gU0NJTSBmb2xsb3dzIHRoZSBS b2J1c3RuZXNzIFByaW5jaXBhbCAoSm9uIFBvc3RlbOKAmXMgbGF3IC0gb25lIG9mIHRoZSBmb3Vu ZGluZyBwcmluY2lwbGVzIG9mIFRDUC9JUCkuIFRoaXMgbWVhbnMgdGhhdCBtZXNzYWdlIHNob3Vs ZCBub3QgbmVlZCB0byBjb21wbHkgd2l0aCBzY2hlbWEgaW4gb3JkZXIgdG8gYmUgaW50ZXJwcmV0 ZWQgKHdpdGhpbiByZWFzb24pIGJ5IGEgc2VydmljZSBwcm92aWRlci4gIEluIHByYWN0aWNhbCB0 ZXJtcywgYSBTQ0lNIGNsaWVudCBzaG91bGQgbmV2ZXIgaGF2ZSB0byBkbyBhIGxvdCBvZiB3b3Jr IHRvIGNyZWF0ZSBvciBzZWFyY2ggZm9yIGEgVXNlci4gQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2 aWNlIHByb3ZpZGVyIGlzIG5vdCBvYmxpZ2VkIHRvIGFjY2VwdCBhIG5ldyBVc2VyICpleGFjdGx5 KiBhcyB0aGUgY2xpZW50IHNwZWNpZmllcy4gVGhlIHNlcnZpY2UgcHJvdmlkZXIgaXMgYWx3YXlz IGZyZWUgdG8gaW50ZXJwcmV0IGFuZCBjaGFuZ2UgZGF0YS4NCg0KTWVzc2FnZXMgaXMgcGFydCBv ZiB0aGUgQVBJIGRyYWZ0LCBhbmQgUmVzb3VyY2VzIGFuZCB0aGVyZSBzY2hlbWFzIGlzIGEgcGFy dCBvZiB0aGUgU2NoZW1hIGRyYWZ0LiBXZSBzaG91bGQgbm90IG1peCB0aGVtIHRvIG11Y2ggYW5k IG1ha2UgaXQgY2xlYXIgaW4gdGhlIHNwZWMgdGhhdCBpcyBhbHNvIHRoZSBjYXNlLg0KDQpJIHRo aW5rIHRoYXQgdGhlIFJlc291cmNlcyB0aGF0IHdlIGhhdmUgdG9kYXksIFNjaGVtYSwgUmVzb3Vy Y2VUeXBlcyBhbmQgU2VydmljZVByb3ZpZGVyQ29uZmlncyBNVVNUIGJlIGFkZGVkIHRvIHRoZSAv U2NoZW1hcyBlbmRwb2ludC4gV2Ugc2hvdWxkIGFsc28gYWRkIFNjaGVtYSwgUmVzb3VyY2VUeXBl cyBhbmQgU2VydmljZVByb3ZpZGVyQ29uZmlncyB0byB0aGUgc2VjdGlvbiAiOC43IFNjaGVtYSBS ZXByZXNlbnRhdGlvbuKAnSBpbiB0aGUgc2NoZW1hIHNwZWMuDQoNCkEgc2Vjb25kIGltcG9ydGFu dCBjaGFuZ2UgdG8gbWFrZSBpdCBjbGVhciB0aGF0IG1lc3NhZ2VzIGFyZSBtZXNzYWdlcywgaXMg dG8gcmVtb3ZlIHRoZSBzY2hlbWEgYXR0cmlidXRlIG9uIG9mIG9mIHRoZSBtZXNzYWdlcy4gVGhl eSB3aGVyZSBhZGRlZCByYXRoZXIgbGF0ZSBpbiB0aGUgc3BlYy13cml0aW5nIHByb2Nlc3MgdG8g Z2l2ZSBhIG5vdGlvbiB0byB0aGUgc2VydmljZSBwcm92aWRlciB3aGF0IGtpbmQgb2YgbWVzc2Fn ZSB0aGF04oCZcyBjdXJyZW50bHkgc2VudC4gVGhlIGludGVudGlvbiB3YXMgbm90IHRvIGZvcmNl IHRoZSBTUCB0byB2YWxpZGF0ZSB0aGUgbWVzc2FnZXMgYWdhaW5zdCBhIHNjaGVtYS4gSSBzdWdn ZXN0IHRoYXQgd2UgcmVtb3ZlIHRoZSDigJxzY2hlbWFzIiBhdHRyaWJ1dGUgaW4gbWVzc2FnZXMg YW5kIHJlcGxhY2VzIGl0IHdpdGggYSDigJxtc2dUeXBl4oCdIHRoYXQgY291bGQgaW5kaWNhdGUg d2hhdCBtZXNzYWdlIGl0IGlzIChQYXRjaE9wIG9yIExpc3RSZXNwb25zZSkuDQoNCi8gRXJpaw0K DQoNCg0KT24gMTMgRmViIDIwMTUsIGF0IDIyOjA4LCBQaGlsIEh1bnQgPHBoaWwuaHVudEBvcmFj bGUuY29tPG1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQpXaXRoIHRoZSBw YXRjaCBvcGVyYXRpb24sIHRoZSBjb250ZW50cyBvZiDigJx2YWx1ZeKAnSBpcyBjdXJyZW50bHkg ZHJpdmVuIGJ5IHRoZSDigJxwYXRo4oCdIGF0dHJpYnV0ZS4gIEluIG90aGVyIHdvcmRzIGluIGEg bm9ybWFsIEpTT04gc3RydWN0dXJlLCB0aGUgUGF0Y2ggcGF0aCBhdHRyaWJ1dGUgZGVzY3JpYmVz IHRoZSBsZWZ0IGhhbGYgb2YgYSBuYW1lIHZhbHVlIHBhaXIsIGFuZCB0aGUg4oCcdmFsdWXigJ0g ZGVzY3JpYmVzIHRoZSByaWdodCBoYWxmLg0KDQpTbyBpZiDigJxwYXRoIiBwb2ludHMgdG8gYSBj b21wbGV4IGF0dHJpYnV0ZSwgdGhlbiDigJx2YWx1ZeKAnSBNVVNUIGJlIGEgSlNPTiBvYmplY3Qg b2Ygb25lIG9yIG1vcmUgc3ViLWF0dHJpYnV0ZXMuICBJZiBwYXRoIGRlc2NyaWJlcyBhIHNpbXBs ZSBhdHRyaWJ1dGUsIHRoYW4gdGhlIGNvcnJlc3BvbmRpbmcgdmFsdWUgbXVzdCBiZSBhIGJvb2xl YW4sIHN0cmluZyBkZXBlbmRpbmcgb24gdGhlIHNjaGVtYSBvZiB0aGUgYXR0cmlidXRlIGRlc2Ny aWJlZCBieSDigJxwYXRo4oCdLg0KDQpTQ0lNIHBhdGNoIGlzIGJhc2VkIG9uIGFuZCBmb2xsb3dz IHRoZSBzYW1lIGRlc2lnbiBhcyBmb3IgUkZDNjkwMiAoSlNPTiBQYXRjaCkuIFRoZSBvbmx5IGRp ZmZlcmVuY2UgaXMgd2UgZGVjaWRlZCB0byBsaW1pdCB0aGUgbnVtYmVyIG9mIG9wZXJhdGlvbiB0 eXBlcyBhbmQgdG8gdXNlIGZpbHRlcnMgaW4gcGF0aHMgcmF0aGVyIHRoYW4gYXJyYXkgaW5kZXhl ZCBhY2Nlc3MgYmFzZWQgb24gSlNPTiBQb2ludGVycyAoUkZDNjkwMSkuDQoNClBoaWwNCg0KQGlu ZGVwZW5kZW50aWQNCnd3dy5pbmRlcGVuZGVudGlkLmNvbTxodHRwOi8vd3d3LmluZGVwZW5kZW50 aWQuY29tLz4NCnBoaWwuaHVudEBvcmFjbGUuY29tPG1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNv bT4NCg0KT24gRmViIDEzLCAyMDE1LCBhdCAxMjoyOSBQTSwgTWljaGFlbCBGcm9zdCA8bWljaGFl bC5mcm9zdEBvcmFjbGUuY29tPG1haWx0bzptaWNoYWVsLmZyb3N0QG9yYWNsZS5jb20+PiB3cm90 ZToNCg0KWWVzIEtlbGx5LCB5b3UgYXJlIGNvcnJlY3QuICBJIHdhcyBsb29raW5nIGZvciBzY2hl bWEgcmVwcmVzZW50YXRpb24gZm9yIGFsbCByZXNvdXJjZXMgYW5kIG1lc3NhZ2VzLiAgWW91IGFs c28gY29ycmVjdGx5IGlkZW50aWZpZWQgdGhlIGlzc3VlIEkgd2FzIHRyeWluZyB0byByYWlzZSB3 aXRoIHJlZ2FyZHMgdG8gUGF0Y2hPcC4gIFRoYW5rcyBmb3IgdGFraW5nIGEgbG9vay4NCg0KLW1y Zg0KDQpGcm9tOiBLZWxseSBHcml6emxlIFttYWlsdG86a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQu Y29tXQ0KU2VudDogRnJpZGF5LCBGZWJydWFyeSAxMywgMjAxNSA2OjU2IEFNDQpUbzogTWljaGFl bCBGcm9zdDsgUGhpbCBIdW50DQpDYzogc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBpZXRmLm9y Zz4NClN1YmplY3Q6IFJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBKU09OIHJlcHJlc2Vu dGF0aW9uDQoNCk1pY2hhZWwg4oCmIGxldCBtZSBtYWtlIHN1cmUgSSB1bmRlcnN0YW5kIHdoYXQg eW91IGFyZSBsb29raW5nIGZvci4gIFlvdSB3b3VsZCBsaWtlIGEgc2NoZW1hIHJlcHJlc2VudGF0 aW9uIChzdWNoIGFzIHdoYXQgaXMgaW5jbHVkZWQgaW4gc2VjdGlvbiA4LjcpIGZvciBhbGwgcmVz b3VyY2VzIGFuZCBtZXNzYWdlcy4gIElzIHRoYXQgcmlnaHQ/DQoNCklmIHNvLCB0aGVuIEkgMTAw JSBhZ3JlZSB0aGF0IHRoaXMgaXMgdXNlZnVsLiAgSW4gdGhlIFNDSU0gMS4wIHNwZWMgKGJhY2sg d2hlbiB3ZSBzdXBwb3J0ZWQgWE1MIGFzIGEgZGF0YSBmb3JtYXQpIHRoZXJlIHdhcyBhbiBYU0Qg dGhhdCBkaWQgZXhhY3RseSB3aGF0IHlvdSBhcmUgbG9va2luZyBmb3Ig4oCTIGRlc2NyaWJlZCBi b3RoIHJlc291cmNlcyBhbmQgbWVzc2FnZXMuICBJIGFncmVlIHRoYXQgaGF2aW5nIHRoaXMgY29k aWZpZXMgdGhlIHJ1bGVzIGFuZCByZW1vdmVzIHNvbWUgYW1iaWd1aXR5LiAgSSB3b3VsZCBiZSBp biBmYXZvciBvZiBhZGRpbmcgc29tZXRoaW5nIGxpa2UgdGhpcyB0byB0aGUgU0NJTSBzcGVjLg0K DQpSZWdhcmRpbmcgdGhlIFBhdGNoT3AsIGlzIHRoZSBwcm9ibGVtIHRoYXQgdGhlIHZhbHVlIHN1 Yi1hdHRyaWJ1dGUgY291bGQgYmUgYW55dGhpbmcg4oCTIG11bHRpdmFsdWVkIGNvdWxkIGJlIHRy dWUgb3IgZmFsc2UsIHRoZXJlIG1heSBvciBtYXkgbm90IGJlIHN1Yi1hdHRyaWJ1dGVzIChpZSDi gJMgaXQgY291bGQgYmUgY29tcGxleCwgd2hpY2ggaXMgbm90IHRlY2huaWNhbGx5IHN1cHBvcnRl ZCksIGFuZCB0aGUgdHlwZSBpcyBkZXBlbmRlbnQgdXBvbiB0aGUgYWN0dWFsIGF0dHJpYnV0ZSB0 aGF0IHlvdSBhcmUgcmVwbGFjaW5nPyAgV2l0aCB0aGlzIGFtYmlndWl0eSB0aGVyZSBpc27igJl0 IGEgZ29vZCB3YXkgdG8gcmVwcmVzZW50IHRoaXMgaW4gYSBzY2hlbWEgY3VycmVudGx5Lg0KDQot LUtlbGx5DQoNCg0KRnJvbTogc2NpbSBbbWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZ10gT24g QmVoYWxmIE9mIE1pY2hhZWwgRnJvc3QNClNlbnQ6IFRodXJzZGF5LCBGZWJydWFyeSAxMiwgMjAx NSA2OjQ1IFBNDQpUbzogUGhpbCBIdW50DQpDYzogc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBp ZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbc2NpbV0gU0NJTSBzY2hlbWEgSURzIGFuZCBKU09OIHJl cHJlc2VudGF0aW9uDQoNCkhpIFBoaWwsDQoNCk5vdCBzdXJlIHdoYXQgeW91IG1lYW4gYnkgZXhh bXBsZXMuICBNeSBjb25jZXJuIGlzIHRoYXQgaW4gdGhlIHNjaGVtYSBkb2MsIHNlY3Rpb24gOC43 IHByb3ZpZGVzIHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgY29yZSB1c2VyL2dyb3VwIGFuZCBl bnRlcnByaXNlIHVzZXIuICBXaGF0IGFib3V0IGFsbCB0aGUgb3RoZXIgc2NoZW1hcyB3ZSByZWZl cmVuY2U/ICBXZSBzaG91bGQgcHJvdmlkZSBzY2hlbWEgcmVwcmVzZW50YXRpb24gZm9yIGV2ZXJ5 IHNjaGVtYSBkZWZpbmVkIGluIHRoZSBzcGVjLiAgRXZlcnlvbmUgaW1wbGVtZW50aW5nIHRoaXMg c3BlYyB3aWxsIG5lZWQgdGhlbS4gIFdoeSBwcm92aWRlIGp1c3QgdGhyZWUgYW5kIGxlYXZlIHRo ZSByZXN0IHVwIHRvIGd1ZXNzIHdvcms/ICBFdmVyeSBpbXBsZW1lbnRhdGlvbiBuZWVkcyB0byBk byB2YWxpZGF0aW9uLCBldmVyeSB2YWxpZGF0aW9uIG5lZWRzIGEgc2NoZW1hIHRvIHZhbGlkYXRl IGFnYWluc3QuICBTbyBteSBjb25jZXJuIGlzIHR3b2ZvbGQuICBGaXJzdCwgd2UgcmVmZXJlbmNl IGEgYnVuY2ggb2Ygc2NoZW1hcyB0aGF0IGV2ZXJ5b25lIG5lZWRzLCBidXQgd2UgZG9u4oCZdCBw cm92aWRlIHRoZW0uICBTZWNvbmQsIHNvbWUgb2YgdGhlIHNjaGVtYXMgd2UgcmVmZXJlbmNlIChz dWNoIGFzIHBhdGNoT3ApIGNhbm5vdCBiZSByZXByZXNlbnRlZCBpbiBKU09OIHVzaW5nIG91ciBv d24gZGVmaW5pdGlvbnMuDQoNCknigJltIGNlcnRhaW5seSBPSyB3aXRoIGFuIGFwcGVuZGl4IGlu IHRoZSBhcGkgZG9jIGZvciBtZXNzYWdlIHNjaGVtYXMgYW5kIGFuIGFwcGVuZGl4IGluIHRoZSBz Y2hlbWEgZG9jIGZvciBhbGwgb2YgdGhlIGVudGl0eSBzY2hlbWFzLiAgTXkgcG9pbnQgaXMgYWxs IHRoZXNlIHNjaGVtYXMgc2hvdWxkIGV4aXN0LiAgV2UgcmVmZXJlbmNlIHRoZW0sIHdlIGRlc2Ny aWJlIHRoZW0sIGJ1dCB3ZSBvbmx5IHByb3ZpZGUgdGhyZWUgb2YgdGhlbS4gIEl0IGp1c3Qgc2Vl bXMgd3JvbmcgdG8gbWUgKHBlcmhhcHMgbXkgb3duIHNob3J0Y29taW5nKSBidXQgd2XigJlyZSBh c2tpbmcgcGVvcGxlIHRvIGltcGxlbWVudCBTQ0lNIHBhdGNoLCB1c2luZyBhIFNDSU0gc2NoZW1h IGRlZmluZWQgcmVxdWVzdCwgdGhhdCB3ZSBkbyBub3QgcHJvdmlkZSwgYW5kIGNhbm5vdCBkZWZp bmUgdXNpbmcgcnVsZXMgd2Ugc2V0IGZvcnRoIGluIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIGRv Yy4NCg0KDQpTbyBib3R0b20gbGluZSwgYWxsIEnigJltIHJlcXVlc3RpbmcgaXMgdGhlIEpTT04g cmVwcmVzZW50YXRpb24gb2YgdGhlIFNDSU0gc2NoZW1hcyB3ZSByZWZlcmVuY2UuDQoNCg0KDQpU aGlzIGlzIGEgU0NJTSBzY2hlbWEgcmVmZXJlbmNlLCDigJwgdXJuOmlldGY6cGFyYW1zOnNjaW06 YXBpOm1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBJIGZlZWwgd2Ugc2hvdWxkIHByb3ZpZGUgdGhl IEpTT04gcmVwcmVzZW50YXRpb24gZm9yIGl0LiAgSWYgd2UgY2Fu4oCZdCBkbyBpdCwgbm9ib2R5 IGltcGxlbWVudGluZyB0aGUgc3BlYyBjYW4gZWl0aGVyLiAgQWxsIG9mIHRoZSBzY2hlbWFzIHdl IHJlZmVyZW5jZSBzaG91bGQgYmUgcHJvdmlkZWQgdXNpbmcgb3VyIG93biBkZWZpbml0aW9ucyBz ZXQgZG93biBpbiBzZWN0aW9uIDcgb2YgdGhlIHNjaGVtYSByZmMgKG9yIGVuaGFuY2VkIGluIHRo ZSBhcGkgZG9jLCB1c2luZyBzZWN0aW9uIDcgYXMgYSBiYXNlKS4gIEZyYW5rbHksIEnigJltIGRy ZWFkaW5nIHRoZSBvdXRjb21lIG9mIGFsbCB0aGlzIGJlY2F1c2UgSeKAmXZlIGFscmVhZHkgc3Bl bnQgYSBjb3VwbGUgb2YgbW9udGhzIGltcGxlbWVudGluZyBwYXRjaCBpbiBpdHMgY3VycmVudCBm b3JtIHdpdGggb3ZlciAxNTAgdW5pdCB0ZXN0cyB0byBjb25maXJtIGl0IGRvZXMgd2hhdCBJIHRo aW5rIHRoZSBzcGVjIHJlcXVpcmVzLiAgQnV0IHNldmVyYWwgb2YgbXkgcGVlcnMgaGF2ZSBjb21l IHRvIG1lIGFuZCBhc2tlZCBmb3IgdGhlc2Ugc2NoZW1hIGRlZmluaXRpb25zIChpbiBKU09OKSBh bmQgYSBjb3VwbGUgaGF2ZSBwb2ludGVkIG91dCB0aGF0IHRoZSBwYXRjaCByZXF1ZXN0IHNjaGVt YSwg4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6UGF0Y2hPcOKAnCwg Y2Fubm90IGJlIHJlcHJlc2VudGVkIHVzaW5nIHNlY3Rpb24gNyBydWxlcyBhbmQgdGhhdCB3ZSBj YW5ub3QgZG8gdXBmcm9udCB2YWxpZGF0aW9uIG9uIHBhdGNoIHJlcXVlc3RzIHRoZSB3YXkgd2Ug ZG8gYWxsIG90aGVyIFNDSU0gcmVxdWVzdHMuICBBbmQgaXTigJlzIHRydWUsIHdlIGNhbm5vdCBk byBhbiB1cGZyb250IHZhbGlkYXRpb24gb2YgcGF0Y2ggYWZ0ZXIgaXTigJlzIHBhcnNlZCB0aGUg d2F5IHdlIGNhbiBhbGwgb3RoZXIgcmVxdWVzdHMuICBTaW1wbGUgYXR0cmlidXRlIHZhbGlkYXRp b24gaXMgaW1wb3NzaWJsZSBiZWNhdXNlIOKAnHZhbHVl4oCdIGRlcGVuZHMgb24gdGhlIHRhcmdl dCBvZiDigJxwYXRo4oCdLCBhbmQgdGhlcmVmb3JlIOKAnHZhbHVl4oCdIGNhbm5vdCBiZSBkZWZp bmVkIGluIGEgSlNPTiBzY2hlbWEgdXNpbmcgc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgZG9jLg0K DQoNCg0KRXZlbiBpZiB3ZSBjYW7igJl0IGZpeCBwYXRjaCwgZm9yIHdoYXRldmVyIHJlYXNvbiwg d2Ugc2hvdWxkIHByb3ZpZGUgdGhlIHJlc3Qgb2YgdGhlIHNjaGVtYXMsIHJlcHJlc2VudGVkIGlu IEpTT04gZm9ybWF0LCBmb3IgYm90aCBkb2NzLg0KDQoNCg0KLW1yZg0KDQoNCkZyb206IFBoaWwg SHVudA0KU2VudDogVGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDEyOjU4IFBNDQpUbzogTWlj aGFlbCBGcm9zdA0KQ2M6IHNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpTdWJq ZWN0OiBSZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbg0K DQpNaWNoYWVsLA0KDQpDYW4geW91IHByb3ZpZGUgZXhhbXBsZXM/DQoNClRoZSBzY2hlbWEgaW4g dGhlIEFQSSBoYXMgdG8gZXh0ZW5kIHRoZSByZWdpc3RyeSBkZWZpbmUgaW4gY29yZS4gICBBcyBl ZGl0b3IgSSB0aGluayBpdCB3b3VsZCBiZSBldmVuIG1vcmUgY29uZnVzaW5nIHRvIG1peCBkYXRh IHNjaGVtYSBhbmQgcmVxdWVzdCBzY2hlbWEgaW4gYSBzaW5nbGUgZG9jdW1lbnQuIEl0IGFsc28g YmVjb21lcyBwcm9ibGVtYXRpYyB3aGVuIHNwZWNzIGNyb3NzIHJlZmVyZW5jZSBlYWNoIG90aGVy LiBJbnN0ZWFkIHRoZSBkb2N1bWVudCBsYXlvdXQgaXMgc3VjaCB0aGF0IEFQSSBidWlsZHMgb24g Y29yZSBzY2hlbWEuDQoNClRoZSBmb3JtYXQgaW4gUEFUQ0ggY29tZXMgZnJvbSB0aGUgSlNPTiBQ YXRjaCBSRkMuDQoNClBoaWwNCg0KT24gRmViIDEyLCAyMDE1LCBhdCAxMjo0NiwgTWljaGFlbCBG cm9zdCA8bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPG1haWx0bzptaWNoYWVsLmZyb3N0QG9yYWNs ZS5jb20+PiB3cm90ZToNCg0KLjA6UmVzb3VyY2VUeXBlDQoNCnVybjppZXRmOnBhcmFtczpzY2lt OnNjaGVtYXM6Y29yZToyDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQpzY2ltIG1haWxpbmcgbGlzdA0Kc2NpbUBpZXRmLm9yZzxtYWlsdG86c2NpbUBp ZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2NpbQ0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc2NpbSBtYWls aW5nIGxpc3QNCnNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0NCg0K --_000_3CE93EE6EEF042628DFE115B27E6680Dnexusgroupcom_ Content-Type: text/html; charset="utf-8" Content-ID: <925BD3B6A0DA234EB96D2B6BC7F68708@nexusgroup.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGksDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgQVBJIGRyYWZ0IGRvbuKAmXQg bWVudGlvbiBleHRlbnNpb24gKHRvIHRoZSBBUEkpIGFueXdoZXJlLiBJIHRoaW5rIGEgYnJhbmQg bmV3IGVuZHBvaW50cyB0aGF0IHN1cHBvcnRzIHBhZ2luZ1Rva2VuIGlzIG1vcmUgaW4gbGluZSB3 aXRoIHRoZSBzcGVjaWZpY2F0aW9uLiBUaGF0IGFsc28gbWFrZXMgZGlzY292ZXIgdXNpbmcgdGhl IFNlcnZpY2VQcm92aWRlckNvbmZpZyBlbmRwb2ludCBtb3JlIGFjY3VyYXRlLiBJc27igJl0DQog aXQgYmV0dGVyIHRvIGFkZCBhbiBleHRlbnNpb24gdGhlcmUgdGhhdCBhbm5vdW5jZSB0aGF0IHRo ZSBzZXJ2ZXIgYWxzbyBzdXBwb3J0cyBvdGhlciBlbmRwb2ludHM/PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5MaWtlIHRoaXM6PC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+ezwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZxdW90O3Nj aGVtYXMmcXVvdDs6IFs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsg JnF1b3Q7dXJuOmlldGY6cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjIuMDpTZXJ2aWNlUHJvdmlk ZXJDb25maWfigJ0sJm5ic3A7PGIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiAnQ291cmll ciBOZXcnOyBmb250LXNpemU6IDEwcHQ7Ij51cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlvbiZx dW90OzwvYj48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyBdLDwvZGl2Pg0KPGRp diBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZxdW90O2RvY3VtZW50YXRpb25VcmwmcXVvdDs6JnF1 b3Q7PGEgaHJlZj0iaHR0cDovL2V4YW1wbGUuY29tL2hlbHAvc2NpbS5odG1sIiBjbGFzcz0iIj5o dHRwOi8vZXhhbXBsZS5jb20vaGVscC9zY2ltLmh0bWw8L2E+JnF1b3Q7LDwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZxdW90O3BhdGNoJnF1b3Q7OiB7PC9kaXY+DQo8ZGl2IGNs YXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZxdW90O3N1cHBvcnRlZCZxdW90Ozp0cnVlPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgfSw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ Jm5ic3A7ICZuYnNwOyAmcXVvdDtidWxrJnF1b3Q7OiB7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZxdW90O3N1cHBvcnRlZCZxdW90Ozp0cnVlLDwvZGl2Pg0KPGRp diBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmcXVvdDttYXhPcGVyYXRpb25zJnF1b3Q7 OjEwMDAsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZxdW90O21h eFBheWxvYWRTaXplJnF1b3Q7OjEwNDg1NzY8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZu YnNwOyB9PC9kaXY+DQo8YiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7 dXJuOnNvbWUtZXh0ZW5zaW9uOnBhZ2luYXRpb24mcXVvdDs6Jm5ic3A7ezxiciBjbGFzcz0iIj4N CiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO+KAnGZpbHRlcldpdGhOZXdUb2tlbkVuZHBvaW50 JnF1b3Q7OiDigJx0cnVlJnF1b3Q7PGJyIGNsYXNzPSIiPg0KPC9iPg0KPGRpdiBjbGFzcz0iIj48 YiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwO30sPC9iPjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4mbmJzcDsgJm5ic3A7IOKApi48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyDi gKYuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNz PSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCkFuZCB0aGVuIHRoZSBzZXJ2aWNlIHByb3Zp ZGVyIGFsc28gaGF2ZSBzdXBwb3J0IGZvciB0aGUgbmV3IC92Mi9Vc2Vyc1dpdGhFeHRyYUJlbGxz RW5kV2lzdGxlc0VuZHBvaW50PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4vIEVyaWs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMjUgRmViIDIwMTUsIGF0IDAwOjUyLCBQ aGlsIEh1bnQgJmx0OzxhIGhyZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSIgY2xhc3M9 IiI+cGhpbC5odW50QG9yYWNsZS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0i QXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7IiBjbGFzcz0iIj5Ob3JtYWxseSwNCiBJIHdvdWxkIGV4cGVjdCB0aGF0IHdvdWxkIGJl IGhhbmRsZWQgYnkgYSBuZXcgZXh0ZW5zaW9uIGRyYWZ0IGFuZCByZWdpc3RlcmVkIGFwcHJvcHJp YXRlbHkgd2l0aCBJQU5BLiBJIHN0aWxsIGhhdmUgdG8gcmVzZWFyY2ggdGhlIGltcGxpY2F0aW9u cyBvbiByZWdpc3RyeSBoYW5kbGluZyBidXQgSSB0aGluayB0aGlzIHNob3VsZCBiZSBkby1hYmxl LiZuYnNwOzwvc3Bhbj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhl aWdodDogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IG9ycGhhbnM6IDI7IHdpZG93czogMjsiPkFz DQogd2l0aCB5b3VyIGV4YW1wbGUgZXh0ZW5zaW9uIGZvciBwYWdpbmcsIHRoZXJl4oCZcyBub3Ro aW5nIHNheWluZyB3ZSBjYW7igJl0IGZvbGxvdyB0aGUgc2FtZSBleHRlbnNpb24gdGVjaG5pcXVl IGluIG91ciBKU09OLjwvc3Bhbj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg bGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KSWYgSSByb2xsIHlvdXIgc3VnZ2VzdGlvbiB0b2dl dGhlciB3aXRoIEVyaWvigJlzIHByb3Bvc2FsIHdlIHdvdWxkIGhhdmU6PC9kaXY+DQo8ZGl2IGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6 IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBs ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3Jk U2VjdGlvbjE7Ij4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlm OyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9u dC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiPiZuYnNwOyB7PG86cCBj bGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46 IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBO ZXcgUm9tYW4nLCBzZXJpZjsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7 Ij4mbmJzcDsgJm5ic3A7ICZuYnNwOyZxdW90OzxiIGNsYXNzPSIiPm1zZ1R5cGU8L2I+JnF1b3Q7 OlsmcXVvdDt1cm46aWV0ZjpwYXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOkxpc3RSZXNwb25z ZSZxdW90Oyw8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PGIgY2xhc3M9IiI+JnF1b3Q7dXJuOnNvbWUtZXh0ZW5zaW9uOnBhZ2luYXRpb24mcXVvdDs8L2I+ XSw8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog J1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyI+DQo8 c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJp ZXIgTmV3JzsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDt0b3RhbFJlc3VsdHMmcXVv dDs6Miw8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgY2xhc3M9IiIgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyI+ DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0Nv dXJpZXIgTmV3JzsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtSZXNvdXJjZXMmcXVv dDs6WzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5 OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7Ij4N CjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291 cmllciBOZXcnOyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHs8L3NwYW4+ PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHByZSBjbGFzcz0ibmV3cGFnZSIgc3R5bGU9Im1hcmdp bjogMHB4IDBpbjsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3Jzsg cGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiPjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNp emU6IDFlbTsiPiAgICAgICAgIDwvc3Bhbj48YiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIiBzdHls ZT0iZm9udC1zaXplOiAxZW07Ij4mcXVvdDtzY2hlbWFzJnF1b3Q7OiBbJnF1b3Q7dXJuOmlldGY6 cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjIuMDpVc2VyPC9zcGFuPjxmb250IHNpemU9IjMiIGNs YXNzPSIiPuKAnTwvZm9udD48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxZW07Ij5d PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxZW07Ij4sPC9zcGFu PjwvcHJlPg0KPHByZSBjbGFzcz0ibmV3cGFnZSIgc3R5bGU9Im1hcmdpbjogMHB4IDBpbjsgZm9u dC1zaXplOiAxZW07IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9y ZTogYWx3YXlzOyI+ICAgICAgICAgIOKAnGlkJnF1b3Q7IDogJmx0O3NvbWUtaWQtYSZndDssPC9w cmU+DQo8ZGl2IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9InBhZ2U6IFdvcmRTZWN0aW9uMTsi Pg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJl YWstYmVmb3JlOiBhbHdheXM7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEw cHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyI+PG86cCBjbGFzcz0iIj48L286cD48L3Nw YW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsg cGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt c2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7dXNlck5hbWUmcXVvdDs6JnF1 b3Q7YmplbnNlbiZxdW90OzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBj bGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJlYWstYmVmb3Jl OiBhbHdheXM7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQt ZmFtaWx5OiAnQ291cmllciBOZXcnOyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IH0sPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiIHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdD b3VyaWVyIE5ldyc7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgezxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPHByZSBjbGFzcz0ibmV3cGFnZSIgc3R5bGU9 Im1hcmdpbjogMHB4IDBpbjsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIg TmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiPjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJm b250LXNpemU6IDFlbTsiPiAgICAgICAgIDwvc3Bhbj48YiBjbGFzcz0iIj48c3BhbiBjbGFzcz0i IiBzdHlsZT0iZm9udC1zaXplOiAxZW07Ij4mcXVvdDtzY2hlbWFzJnF1b3Q7OiBbJnF1b3Q7dXJu OmlldGY6cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjIuMDpVc2VyPC9zcGFuPjxmb250IHNpemU9 IjMiIGNsYXNzPSIiPuKAnTwvZm9udD48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAx ZW07Ij5dPC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxZW07Ij4s PC9zcGFuPjwvcHJlPg0KPHByZSBjbGFzcz0ibmV3cGFnZSIgc3R5bGU9Im1hcmdpbjogMHB4IDBp bjsgZm9udC1zaXplOiAxZW07IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFr LWJlZm9yZTogYWx3YXlzOyI+PHByZSBjbGFzcz0ibmV3cGFnZSIgc3R5bGU9Im1hcmdpbjogMHB4 IDBpbjsgZm9udC1zaXplOiAxZW07IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJy ZWFrLWJlZm9yZTogYWx3YXlzOyI+ICAgICAgICAgIOKAnGlkJnF1b3Q7IDogJmx0O3NvbWUtaWQt YiZndDssPC9wcmU+PC9wcmU+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4n LCBzZXJpZjsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7Ij4mbmJzcDsg Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7dXNlck5hbWUm cXVvdDs6JnF1b3Q7anNtaXRoJnF1b3Q7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+ DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsgcGFnZS1icmVh ay1iZWZvcmU6IGFsd2F5czsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFz cz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZv bnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJlYWstYmVmb3JlOiBh bHdheXM7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFt aWx5OiAnQ291cmllciBOZXcnOyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IF0sPG86cCBjbGFz cz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiPg0KPHNwYW4gY2xhc3M9 IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+PGIgY2xhc3M9IiI+JnF1b3Q7dXJuOnNvbWUtZXh0ZW5zaW9uOnBhZ2lu YXRpb24mcXVvdDs6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj57PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIi IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1m YW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5 czsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6 ICdDb3VyaWVyIE5ldyc7Ij4mbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1 b3Q7cGFnaW5nVG9rZW4mcXVvdDs6ICZxdW90Ozg5ODJqYWs4NGoubmtkOCZxdW90OzxvOnAgY2xh c3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3 IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7Ij4NCjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH08bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rp dj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyBwYWdlLWJy ZWFrLWJlZm9yZTogYWx3YXlzOyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAx MHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiPiZuYnNwOyZuYnNwOyB9PC9zcGFuPjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgYXBwbGUtY29udGVudC1lZGl0ZWQ9InRydWUiIGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3Jw aGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJl YWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6IGFm dGVyLXdoaXRlLXNwYWNlOyI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJsZXR0ZXItc3BhY2luZzog bm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0 bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgd29y ZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGlu ZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7Ij4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVp Z2h0OiBub3JtYWw7IG9ycGhhbnM6IDI7IHRleHQtYWxpZ246IC13ZWJraXQtYXV0bzsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdp ZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJr aXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7Ij4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxp bmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IDI7IHRleHQtYWxpZ246IC13ZWJraXQtYXV0bzsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7 IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7Ij4NCjxkaXYgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IDI7IHRleHQtYWxpZ246IC13ZWJraXQt YXV0bzsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTog c3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7Ij4NCjxzcGFuIGNs YXNzPSJBcHBsZS1zdHlsZS1zcGFuIiBzdHlsZT0iYm9yZGVyLWNvbGxhcHNlOiBzZXBhcmF0ZTsg Ym9yZGVyLXNwYWNpbmc6IDBweDsiPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0id29yZC13cmFwOiBi cmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazog YWZ0ZXItd2hpdGUtc3BhY2U7Ij4NCjxzcGFuIGNsYXNzPSJBcHBsZS1zdHlsZS1zcGFuIiBzdHls ZT0iYm9yZGVyLWNvbGxhcHNlOiBzZXBhcmF0ZTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczog MjsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IGJvcmRlci1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1kZWNvcmF0aW9ucy1pbi1lZmZlY3Q6IG5vbmU7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0id29yZC13cmFwOiBicmVh ay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7Ij4NCjxzcGFuIGNsYXNzPSJBcHBsZS1zdHlsZS1zcGFuIiBzdHlsZT0i Ym9yZGVyLWNvbGxhcHNlOiBzZXBhcmF0ZTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogMjsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IGJvcmRlci1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1kZWNvcmF0aW9ucy1pbi1lZmZlY3Q6IG5vbmU7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0id29yZC13cmFwOiBicmVhay13 b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXIt d2hpdGUtc3BhY2U7Ij4NCjxzcGFuIGNsYXNzPSJBcHBsZS1zdHlsZS1zcGFuIiBzdHlsZT0iYm9y ZGVyLWNvbGxhcHNlOiBzZXBhcmF0ZTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFs OyBvcnBoYW5zOiAyOyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6IDBweDsgYm9yZGVyLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LWRlY29yYXRpb25zLWluLWVmZmVjdDogbm9uZTsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJ3b3Jk LXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5l LWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Tm90aWNlIHRoYXQgaW5zaWRlIGVhY2gg4oCcUmVzb3Vy Y2Vz4oCdIGFycmF5IGVsZW1lbnQgaXMgYSByZXNvdXJjZSBvYmplY3Qgd2l0aCBpdHMgZGF0YSBz Y2hlbWEgcmVmZXJlbmNlIGluY2x1ZGVkLiAmbmJzcDtBbHNvLCBzaW5jZSBpZCBpcyBhbHdheXMg cmV0dXJuZWQsIGl0IHdvdWxkIGFsc28gYmUgcHJlc2VudC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkJ5IHVzaW5nIOKAnG1zZ1R5cGXi gJ0sIHdlIGFyZSBjbGVhcmx5IHNlcGFyYXRpbmcgd2hhdCBpcyByZXF1ZXN0IG9yIHJlc3BvbnNl IG1ldGFkYXRhIGNvbnRlbnQgYXMgZGlzdGluY3QgZnJvbSByZXNvdXJjZSBzY2hlbWEgKHdoaWNo IGhhcyBzdGF0ZSkuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5QaGlsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5AaW5kZXBlbmRlbnRpZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YSBocmVmPSJodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tLyIgY2xhc3M9IiIgc3R5bGU9ImNv bG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyI+d3d3LmluZGVwZW5kZW50 aWQuY29tPC9hPjwvZGl2Pg0KPC9kaXY+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVu dEBvcmFjbGUuY29tIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0 aW9uOiB1bmRlcmxpbmU7Ij5waGlsLmh1bnRAb3JhY2xlLmNvbTwvYT48L2Rpdj4NCjwvc3Bhbj48 L2Rpdj4NCjwvc3Bhbj48L2Rpdj4NCjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGJsb2Nr cXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIEZlYiAyNCwgMjAx NSwgYXQgMzoxMyBQTSwgS2VsbHkgR3JpenpsZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmtlbGx5Lmdy aXp6bGVAc2FpbHBvaW50LmNvbSIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQt ZGVjb3JhdGlvbjogdW5kZXJsaW5lOyI+a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tPC9hPiZn dDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJw bGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0icGFnZTogV29y ZFNlY3Rpb24xOyI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNz PSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+UmlnaHQuJm5i c3A7IE15IHRoaW5raW5nIHdhcyBtb3JlIGFyb3VuZCB0aGUgTGlzdFJlc3BvbnNlIGl0c2VsZiBi ZWluZyBleHRlbmRlZCByYXRoZXIgdGhhbiB0aGUgY29udGFpbmVkIHJlc291cmNlIG9iamVjdHMu Jm5ic3A7IEZvciBleGFtcGxlOjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PC9wPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZv bnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJlYWstYmVmb3JlOiBh bHdheXM7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7 IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyI+Jm5ic3A7Jm5ic3A7IHs8bzpwIGNsYXNzPSIi PjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlm OyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtzY2hlbWFzJnF1b3Q7OlsmcXVvdDt1cm46aWV0Zjpw YXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOkxpc3RSZXNwb25zZSZxdW90OywgJnF1b3Q7dXJu OnNvbWUtZXh0ZW5zaW9uOnBhZ2luYXRpb24mcXVvdDtdLDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9z cGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJl YWstYmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250 LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICZxdW90O3RvdGFsUmVzdWx0cyZxdW90OzoyLDxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250 LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2Ut YnJlYWstYmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJm b250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7ICZxdW90O1Jlc291cmNlcyZxdW90OzpbPG86cCBjbGFzcz0iIj48L286cD48 L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsgcGFnZS1i cmVhay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZv bnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7Ij4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgezxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJlYWstYmVmb3Jl OiBhbHdheXM7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEw cHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O3VzZXJOYW1lJnF1b3Q7OiZxdW90O2JqZW5z ZW4mcXVvdDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1Rp bWVzIE5ldyBSb21hbicsIHNlcmlmOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9 IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTog J0NvdXJpZXIgTmV3JzsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB9LDxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj4NCjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBO ZXcnOyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHs8bzpwIGNsYXNzPSIi PjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlm OyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiPiZuYnNw OyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmcXVvdDt1c2VyTmFt ZSZxdW90OzomcXVvdDtqc21pdGgmcXVvdDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyBwYWdlLWJyZWFrLWJlZm9y ZTogYWx3YXlzOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAx MHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB9PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsi IGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1m YW1pbHk6ICdDb3VyaWVyIE5ldyc7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgXSw8bzpwIGNs YXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbics IHNlcmlmOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3Jzsi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDt1cm46c29tZS1leHRlbnNpb246cGFnaW5h dGlvbiZxdW90OzogezxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5 OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBj bGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFt aWx5OiAnQ291cmllciBOZXcnOyI+Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZxdW90O3BhZ2luZ1Rva2VuJnF1b3Q7OiAmcXVvdDs4OTgyamFrODRqLm5rZDgmcXVvdDs8bzpw IGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21h bicsIHNlcmlmOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+DQo8c3BhbiBj bGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3 JzsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB9PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+ PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTog MTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsgcGFnZS1icmVhay1i ZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6 ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7Ij4mbmJzcDsmbmJzcDsgfTxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog J1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigz MSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3 MywgMTI1KTsiPkFnYWluIOKApiBJ4oCZbSBub3QgZXZlbiBzdXJlIGlmIHRoaXMgaXMgc29tZXRo aW5nIHRoYXQgYW55b25lIHdvdWxkIHdhbnQgdG8gZG8gb3IgaWYgaXQgc2hvdWxkIGJlIHN1cHBv cnRlZCBpbiB0aGlzIHdheS4mbmJzcDsgSSBqdXN0IHdhbnRlZCB0byBicmluZyBpdCB1cC48bzpw IGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2Io MzEsIDczLCAxMjUpOyI+Jm5ic3A7PC9zcGFuPjwvcD4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiIHN0eWxlPSJib3JkZXItc3R5bGU6IHNvbGlkIG5vbmUgbm9uZTsgYm9yZGVyLXRvcC1j b2xvcjogcmdiKDE4MSwgMTk2LCAyMjMpOyBib3JkZXItdG9wLXdpZHRoOiAxcHQ7IHBhZGRpbmc6 IDNwdCAwaW4gMGluOyI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNs YXNzPSIiPg0KPGIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPkZyb206PC9zcGFuPjwvYj48c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBz YW5zLXNlcmlmOyI+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPnNjaW0gWzxhIGhyZWY9Im1haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmciIGNsYXNzPSIi IHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPm1haWx0 bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48YiBjbGFzcz0iIj5Pbg0KIEJlaGFsZiBPZjxzcGFuIGNsYXNz PSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+UGhpbCBIdW50PGJyIGNs YXNzPSIiPg0KPGIgY2xhc3M9IiI+U2VudDo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlR1ZXNkYXksIEZlYnJ1YXJ5IDI0LCAyMDE1IDU6MDMgUE08 YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5Ubzo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPktlbGx5IEdyaXp6bGU8YnIgY2xhc3M9IiI+DQo8YiBj bGFzcz0iIj5DYzo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPlNDSU0gV0c7IEVyaWsgV2FobHN0csO2bSBuZVh1czxiciBjbGFzcz0iIj4NCjxiIGNs YXNzPSIiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj5SZTogW3NjaW1dIFBBVENIIGFuZCBzY2hlbWEgKHdhczogU0NJTSBzY2hlbWEg SURzIGFuZCBKU09OIHJlcHJlc2VudGF0aW9uKTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlm OyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQpJ IGJlbGlldmUgd2UgYXJlIG9rIG9uIHRoaXMuIFdlIGhhdmUgcHJldHR5IGdvb2Qgc2VwYXJhdGlv bi4gRm9yIGV4YW1wbGUgTGlzdCByZXNwb25zZSBkb2VzIGNvbnRhaW4ganNvbiBvYmplY3RzIHRo YXQgaGF2ZSByZXNvdXJjZSBzcGVjaWZpYyBzY2hlbWFzLiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rp dj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbics IHNlcmlmOyIgY2xhc3M9IiI+DQpFLmcuIFRoZSBvdXRlciBqc29uIG9iamVjdCB3b3VsZCBoYXZl IGEgbXNnVHlwZSBvZiBMaXN0UmVzcG9uc2Ugd2hpbGUgdGhlIGFycmF5IG9mIHJlc3VsdCBvYmpl Y3RzIGVhY2ggY29udGFpbnMgYSByZXNvdXJjZSBlYWNoIHdpdGggaXRzIG93biBzY2hlbWFzIGF0 dHJpYnV0ZS4mbmJzcDs8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpQaGlsPG86cCBjbGFz cz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMTJwdDsgZm9udC1zaXplOiAxMnB0OyBmb250 LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyI+DQo8YnIgY2xhc3M9IiI+DQpPbiBG ZWIgMjQsIDIwMTUsIGF0IDE0OjMxLCBLZWxseSBHcml6emxlICZsdDs8YSBocmVmPSJtYWlsdG86 a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBs ZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij5rZWxseS5ncml6emxlQHNhaWxwb2ludC5j b208L2E+Jmd0OyB3cm90ZTo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2Nr cXVvdGUgY2xhc3M9IiIgc3R5bGU9Im1hcmdpbi10b3A6IDVwdDsgbWFyZ2luLWJvdHRvbTogNXB0 OyI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7 IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPk9u ZSB0aGluZyB0aGF0IGlzIG5pY2UgYWJvdXQg4oCcc2NoZW1hc+KAnSBpcyB0aGF0IGl0IGdpdmVz IHVzIGEgd2F5IHRvIGV4dGVuZCBhIHJlc291cmNlIChvciB0aGUgcmVwcmVzZW50YXRpb24gb2Yg YSByZXNvdXJjZSkuJm5ic3A7IEJ5IG1vdmluZyBvdXIgbWVzc2FnZXMgdG8gdXNlIG1zZ1R5cGUN CiBpbnN0ZWFkIG9mIHNjaGVtYXMsIHdlIG1pZ2h0IGxvc2Ugc29tZSBvZiB0aGlzIGZsZXhpYmls aXR5LiZuYnNwOyBJ4oCZbSBub3Qgc3VyZSB0aGF0IHdlIHdvdWxkIHdhbnQgaXQgb3Igbm90LCBi dXQgSSBjYW4gZW52aXNpb24gYSBMaXN0UmVzcG9uc2UgZnJvbSBhIHNlcnZlciB0aGF0IHJldHVy bnMgYSDigJxwYWdpbmcgdG9rZW7igJ0gYWxvbmcgd2l0aCB0aGUgY3VycmVudCBwYWdlIG51bWJl ciwgZXRj4oCmJm5ic3A7IFRoaXMgY291bGQgcG90ZW50aWFsbHkgYmUgcHV0IGludG8NCiBhbiBl eHRlbnNpb24uJm5ic3A7IEp1c3Qgc29tZXRoaW5nIHRvIGNvbnNpZGVy4oCmPC9zcGFuPjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJp ZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+ Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1l cyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiBy Z2IoMzEsIDczLCAxMjUpOyI+LS1LZWxseTwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPiZuYnNwOzwvc3Bhbj48bzpwIGNs YXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9 ImJvcmRlci1zdHlsZTogc29saWQgbm9uZSBub25lOyBib3JkZXItdG9wLWNvbG9yOiByZ2IoMTgx LCAxOTYsIDIyMyk7IGJvcmRlci10b3Atd2lkdGg6IDFwdDsgcGFkZGluZzogM3B0IDBpbiAwaW47 Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8YiBj bGFzcz0iIj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWls eTogVGFob21hLCBzYW5zLXNlcmlmOyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7Ij48 c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+c2NpbSBbPGEg aHJlZj0ibWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZyIgY2xhc3M9IiIgc3R5bGU9ImNvbG9y OiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyI+bWFpbHRvOnNjaW0tYm91bmNl c0BpZXRmLm9yZzwvYT5dPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjxiIGNsYXNzPSIiPk9uDQogQmVoYWxmIE9mPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5QaGlsIEh1bnQ8YnIgY2xhc3M9IiI+DQo8YiBj bGFzcz0iIj5TZW50OjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+VHVlc2RheSwgRmVicnVhcnkgMjQsIDIwMTUgMTI6MDEgUE08YnIgY2xhc3M9IiI+ DQo8YiBjbGFzcz0iIj5Ubzo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPkVyaWsgV2FobHN0csO2bSBuZVh1czxiciBjbGFzcz0iIj4NCjxiIGNsYXNz PSIiPkNjOjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+U0NJTSBXRzxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlN1YmplY3Q6PC9iPjxzcGFuIGNs YXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3NjaW1dIFBBVENI IGFuZCBzY2hlbWEgKHdhczogU0NJTSBzY2hlbWEgSURzIGFuZCBKU09OIHJlcHJlc2VudGF0aW9u KTwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZh bWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDs8bzpwIGNs YXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7 IiBjbGFzcz0iIj4NCkVyaWs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQombmJz cDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQt ZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCkFncmVlZC4gSSB0 aGluayB0aGlzIG1ha2VzIHNlbnNlIGFuZCBpcyBhIGdvb2QgY29tcHJvbWlzZS4gVGhpcyByZWZs ZWN0cyB3aGF0IHdlIGRpc2N1c3NlZCBvbiBvdXIgaW5mb3JtYWwgY2FsbCBsYXN0IHdlZWsuPG86 cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNz PSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGlt ZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCkFueSBvdGhlciBjb21tZW50cz88bzpw IGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5 OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCiZuYnNwOzxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlm OyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7Ij5QaGlsPC9zcGFuPjxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46 IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBO ZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt c2l6ZTogOXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyI+Jm5ic3A7PC9z cGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogOXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5z LXNlcmlmOyI+QGluZGVwZW5kZW50aWQ8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAw MDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNl cmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZv bnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7Ij48YSBocmVmPSJodHRwOi8vd3d3Lmlu ZGVwZW5kZW50aWQuY29tLyIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVj b3JhdGlvbjogdW5kZXJsaW5lOyI+d3d3LmluZGVwZW5kZW50aWQuY29tPC9hPjwvc3Bhbj48bzpw IGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVz IE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYSwgc2Fucy1zZXJpZjsiPjxhIGhyZWY9Im1haWx0bzpwaGlsLmh1 bnRAb3JhY2xlLmNvbSIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3Jh dGlvbjogdW5kZXJsaW5lOyI+cGhpbC5odW50QG9yYWNsZS5jb208L2E+PC9zcGFuPjxvOnAgY2xh c3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7PG86cCBjbGFzcz0iIj48L286cD48L2Rp dj4NCjxkaXYgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luLXRv cDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KT24gRmViIDI0LCAyMDE1LCBh dCAxOjQzIEFNLCBFcmlrIFdhaGxzdHLDtm0gbmVYdXMgJmx0OzxhIGhyZWY9Im1haWx0bzplcmlr LndhaGxzdHJvbUBuZXh1c2dyb3VwLmNvbSIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyI+ZXJpay53YWhsc3Ryb21AbmV4dXNncm91cC5j b208L2E+Jmd0OyB3cm90ZTo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1m YW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7PG86cCBj bGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4n LCBzZXJpZjsiIGNsYXNzPSIiPg0KSGksPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIg Y2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0i Ij4NCkkgYWdyZWVkIHRoYXQgdGhlcmUgYXJlIHNvbWUgaW5jb25zaXN0ZW5jeSBhbmQgcGhpbG9z b3BoaWNhbCBpc3N1ZXMgcHJlc2VudCBpbiB0aGUgc3BlY2lmaWNhdGlvbnMgdGhhdCBwcm9iYWJs eSBuZWVkIGFkZHJlc3NpbmcuJm5ic3A7PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+ DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCkkgdGhp bmsgd2Ugc2hvdWxkIG1ha2UgZGlmZmVyZW5jZXMgdG8gdGhlIFJlc291cmNlcyBhbmQgbWVzc2Fn ZXMsIGFuZCB3ZSBuZWVkIHNvbWUgY2hhbmdlcyB0byB0aGUgc2NoZW1hIGFuZCB0aGUgYXBpIGRy YWZ0cyB0byBtYWtlIHRoYXQgY2xlYXIuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIg Y2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0i Ij4NClRoZSBSZXNvdXJjZXMgcmVxdWlyZXMgZml4ZWQgc2NoZW1hcywgdGhlIG1lc3NhZ2VzIG5v dCBzbyBtdWNoLiBTY2hlbWFzIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIHB1cnBvc2Ugb2Yg YWxsb3dpbmcgYSBjbGllbnQgdG8gdW5kZXJzdGFuZCB3aGF0IGF0dHJpYnV0ZXMgYW5kIGFzc29j aWF0ZWQgbWV0YWRhdGEgKHJlYWRhYmlsaXR5LCBtdXRhYmlsaXR5LCB0eXBlLCBldGMpIGlzIHN1 cHBvcnRlZCBieSBhIHBhcnRpY3VsYXIgc2VydmljZSBwcm92aWRlci4NCiBEaXNyZWdhcmRpbmcg b24gdGhlIGN1cnJlbnRseSB1c2VkIGJlYXJlci48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2Vy aWY7IiBjbGFzcz0iIj4NCiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNs YXNzPSIiPg0KVGhlIG1lc3NhZ2UgZG9u4oCZdCBuZWVkIHRvIGJlIHZhbGlkYXRlZCBhY2NvcmRp bmcgdG8gYSBzY2hlbWEuIFNDSU0gZm9sbG93cyB0aGUgUm9idXN0bmVzcyBQcmluY2lwYWwgKEpv biBQb3N0ZWzigJlzIGxhdyAtIG9uZSBvZiB0aGUgZm91bmRpbmcgcHJpbmNpcGxlcyBvZiBUQ1Av SVApLiBUaGlzIG1lYW5zIHRoYXQgbWVzc2FnZSBzaG91bGQgbm90IG5lZWQgdG8gY29tcGx5IHdp dGggc2NoZW1hIGluIG9yZGVyIHRvIGJlIGludGVycHJldGVkICh3aXRoaW4NCiByZWFzb24pIGJ5 IGEgc2VydmljZSBwcm92aWRlci4gJm5ic3A7SW4gcHJhY3RpY2FsIHRlcm1zLCBhIFNDSU0gY2xp ZW50IHNob3VsZCBuZXZlciBoYXZlIHRvIGRvIGEgbG90IG9mIHdvcmsgdG8gY3JlYXRlIG9yIHNl YXJjaCBmb3IgYSBVc2VyLiBBdCB0aGUgc2FtZSB0aW1lLCBhIHNlcnZpY2UgcHJvdmlkZXIgaXMg bm90IG9ibGlnZWQgdG8gYWNjZXB0IGEgbmV3IFVzZXIgKmV4YWN0bHkqIGFzIHRoZSBjbGllbnQg c3BlY2lmaWVzLiBUaGUgc2VydmljZQ0KIHByb3ZpZGVyIGlzIGFsd2F5cyBmcmVlIHRvIGludGVy cHJldCBhbmQgY2hhbmdlIGRhdGEuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xh c3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6 IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4N Ck1lc3NhZ2VzIGlzIHBhcnQgb2YgdGhlIEFQSSBkcmFmdCwgYW5kIFJlc291cmNlcyBhbmQgdGhl cmUgc2NoZW1hcyBpcyBhIHBhcnQgb2YgdGhlIFNjaGVtYSBkcmFmdC4gV2Ugc2hvdWxkIG5vdCBt aXggdGhlbSB0byBtdWNoIGFuZCBtYWtlIGl0IGNsZWFyIGluIHRoZSBzcGVjIHRoYXQgaXMgYWxz byB0aGUgY2FzZS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEy cHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCiZu YnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KSSB0aGluayB0 aGF0IHRoZSBSZXNvdXJjZXMgdGhhdCB3ZSBoYXZlIHRvZGF5LCBTY2hlbWEsIFJlc291cmNlVHlw ZXMgYW5kIFNlcnZpY2VQcm92aWRlckNvbmZpZ3MgTVVTVCBiZSBhZGRlZCB0byB0aGUgL1NjaGVt YXMgZW5kcG9pbnQuIFdlIHNob3VsZCBhbHNvIGFkZCBTY2hlbWEsIFJlc291cmNlVHlwZXMgYW5k IFNlcnZpY2VQcm92aWRlckNvbmZpZ3MgdG8gdGhlIHNlY3Rpb24gJnF1b3Q7OC43IFNjaGVtYSBS ZXByZXNlbnRhdGlvbuKAnSBpbiB0aGUgc2NoZW1hDQogc3BlYy4mbmJzcDs8bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMg TmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9t YW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KQSBzZWNvbmQgaW1wb3J0YW50IGNoYW5nZSB0byBtYWtl IGl0IGNsZWFyIHRoYXQgbWVzc2FnZXMgYXJlIG1lc3NhZ2VzLCBpcyB0byByZW1vdmUgdGhlIHNj aGVtYSBhdHRyaWJ1dGUgb24gb2Ygb2YgdGhlIG1lc3NhZ2VzLiBUaGV5IHdoZXJlIGFkZGVkIHJh dGhlciBsYXRlIGluIHRoZSBzcGVjLXdyaXRpbmcgcHJvY2VzcyB0byBnaXZlIGEgbm90aW9uIHRv IHRoZSBzZXJ2aWNlIHByb3ZpZGVyIHdoYXQga2luZCBvZiBtZXNzYWdlIHRoYXTigJlzIGN1cnJl bnRseQ0KIHNlbnQuIFRoZSBpbnRlbnRpb24gd2FzIG5vdCB0byBmb3JjZSB0aGUgU1AgdG8gdmFs aWRhdGUgdGhlIG1lc3NhZ2VzIGFnYWluc3QgYSBzY2hlbWEuIEkgc3VnZ2VzdCB0aGF0IHdlIHJl bW92ZSB0aGUg4oCcc2NoZW1hcyZxdW90OyBhdHRyaWJ1dGUgaW4gbWVzc2FnZXMgYW5kIHJlcGxh Y2VzIGl0IHdpdGggYSDigJxtc2dUeXBl4oCdIHRoYXQgY291bGQgaW5kaWNhdGUgd2hhdCBtZXNz YWdlIGl0IGlzIChQYXRjaE9wIG9yIExpc3RSZXNwb25zZSkuPG86cCBjbGFzcz0iIj48L286cD48 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21h bicsIHNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2Vy aWY7IiBjbGFzcz0iIj4NCi8gRXJpazxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNs YXNzPSIiPg0KJm5ic3A7PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGlt ZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIg Y2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIGNsYXNzPSIiIHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1i b3R0b206IDVwdDsiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21h bicsIHNlcmlmOyIgY2xhc3M9IiI+DQpPbiAxMyBGZWIgMjAxNSwgYXQgMjI6MDgsIFBoaWwgSHVu dCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIiBjbGFzcz0iIiBzdHls ZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij5waGlsLmh1bnRA b3JhY2xlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQombmJz cDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog J1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHls ZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7Ij5X aXRoIHRoZSBwYXRjaCBvcGVyYXRpb24sIHRoZSBjb250ZW50cyBvZiDigJx2YWx1ZeKAnSBpcyBj dXJyZW50bHkgZHJpdmVuIGJ5IHRoZSDigJxwYXRo4oCdIGF0dHJpYnV0ZS4gJm5ic3A7SW4gb3Ro ZXIgd29yZHMgaW4gYSBub3JtYWwgSlNPTiBzdHJ1Y3R1cmUsIHRoZSBQYXRjaCBwYXRoIGF0dHJp YnV0ZSBkZXNjcmliZXMgdGhlIGxlZnQNCiBoYWxmIG9mIGEgbmFtZSB2YWx1ZSBwYWlyLCBhbmQg dGhlIOKAnHZhbHVl4oCdIGRlc2NyaWJlcyB0aGUgcmlnaHQgaGFsZi48L3NwYW4+PG86cCBjbGFz cz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6 ZTogOXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyI+Jm5ic3A7PC9zcGFu PjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1m YW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9 IiIgc3R5bGU9ImZvbnQtc2l6ZTogOXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNl cmlmOyI+U28gaWYg4oCccGF0aCZxdW90OyBwb2ludHMgdG8gYSBjb21wbGV4IGF0dHJpYnV0ZSwg dGhlbiDigJx2YWx1ZeKAnSBNVVNUIGJlIGEgSlNPTiBvYmplY3Qgb2Ygb25lIG9yIG1vcmUgc3Vi LWF0dHJpYnV0ZXMuICZuYnNwO0lmIHBhdGggZGVzY3JpYmVzIGEgc2ltcGxlIGF0dHJpYnV0ZSwg dGhhbiB0aGUgY29ycmVzcG9uZGluZyB2YWx1ZSBtdXN0DQogYmUgYSBib29sZWFuLCBzdHJpbmcg ZGVwZW5kaW5nIG9uIHRoZSBzY2hlbWEgb2YgdGhlIGF0dHJpYnV0ZSBkZXNjcmliZWQgYnkg4oCc cGF0aOKAnS48L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+ DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2EsIHNhbnMtc2VyaWY7Ij4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rp dj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbics IHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7 IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7Ij5TQ0lNIHBhdGNoIGlzIGJhc2Vk IG9uIGFuZCBmb2xsb3dzIHRoZSBzYW1lIGRlc2lnbiBhcyBmb3IgUkZDNjkwMiAoSlNPTiBQYXRj aCkuIFRoZSBvbmx5IGRpZmZlcmVuY2UgaXMgd2UgZGVjaWRlZCB0byBsaW1pdCB0aGUgbnVtYmVy IG9mIG9wZXJhdGlvbiB0eXBlcyBhbmQgdG8gdXNlIGZpbHRlcnMgaW4gcGF0aHMgcmF0aGVyDQog dGhhbiBhcnJheSBpbmRleGVkIGFjY2VzcyBiYXNlZCBvbiBKU09OIFBvaW50ZXJzIChSRkM2OTAx KS48L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2Es IHNhbnMtc2VyaWY7Ij4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywg c2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDlwdDsg Zm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fucy1zZXJpZjsiPlBoaWw8L3NwYW4+PG86cCBjbGFz cz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1Rp bWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7Ij4mbmJz cDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2Es IHNhbnMtc2VyaWY7Ij5AaW5kZXBlbmRlbnRpZDwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGlu IDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFu Jywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDlw dDsgZm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fucy1zZXJpZjsiPjxhIGhyZWY9Imh0dHA6Ly93 d3cuaW5kZXBlbmRlbnRpZC5jb20vIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4 dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1 cnBsZTsiPnd3dy5pbmRlcGVuZGVudGlkLmNvbTwvc3Bhbj48L2E+PC9zcGFuPjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6 IDlwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fucy1zZXJpZjsiPjxhIGhyZWY9Im1haWx0 bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRl eHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBw dXJwbGU7Ij5waGlsLmh1bnRAb3JhY2xlLmNvbTwvc3Bhbj48L2E+PC9zcGFuPjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9t YW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTog OXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyI+Jm5ic3A7PC9zcGFuPjxv OnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgY2xh c3M9IiIgc3R5bGU9Im1hcmdpbi10b3A6IDVwdDsgbWFyZ2luLWJvdHRvbTogNXB0OyI+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0i Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDlwdDsgZm9udC1mYW1pbHk6IEhl bHZldGljYSwgc2Fucy1zZXJpZjsiPk9uIEZlYiAxMywgMjAxNSwgYXQgMTI6MjkgUE0sIE1pY2hh ZWwgRnJvc3QgJmx0OzxhIGhyZWY9Im1haWx0bzptaWNoYWVsLmZyb3N0QG9yYWNsZS5jb20iIGNs YXNzPSIiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsi PjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJjb2xvcjogcHVycGxlOyI+bWljaGFlbC5mcm9zdEBvcmFj bGUuY29tPC9zcGFuPjwvYT4mZ3Q7DQogd3JvdGU6PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xh c3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7Ij4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286 cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBm b250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBj bGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij5ZZXMgS2VsbHksIHlvdSBhcmUgY29y cmVjdC4mbmJzcDsgSSB3YXMgbG9va2luZyBmb3Igc2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBh bGwgcmVzb3VyY2VzIGFuZCBtZXNzYWdlcy4mbmJzcDsgWW91IGFsc28gY29ycmVjdGx5IGlkZW50 aWZpZWQgdGhlIGlzc3VlIEkgd2FzIHRyeWluZyB0bw0KIHJhaXNlIHdpdGggcmVnYXJkcyB0byBQ YXRjaE9wLiZuYnNwOyBUaGFua3MgZm9yIHRha2luZyBhIGxvb2suPC9zcGFuPjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAw MDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNl cmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBm b250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7 Ij4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsg Zm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+LW1yZjwvc3Bhbj48bzpwIGNsYXNz PSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBz ZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUp OyI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0iYm9yZGVyLXN0eWxlOiBzb2xpZCBub25lIG5vbmU7IGJv cmRlci10b3AtY29sb3I6IHJnYigxODEsIDE5NiwgMjIzKTsgYm9yZGVyLXRvcC13aWR0aDogMXB0 OyBwYWRkaW5nOiAzcHQgMGluIDBpbjsiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1Rp bWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj48c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNl cmlmOyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhv bWEsIHNhbnMtc2VyaWY7Ij4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIGNsYXNzPSIiIHN0eWxl PSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7Ij5LZWxs eQ0KIEdyaXp6bGUgWzxhIGhyZWY9Im1haWx0bzprZWxseS5ncml6emxlQHNhaWxwb2ludC5jb20i IGNsYXNzPSIiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGlu ZTsiPjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJjb2xvcjogcHVycGxlOyI+bWFpbHRvOmtlbGx5Lmdy aXp6bGVAc2FpbHBvaW50LmNvbTwvc3Bhbj48L2E+XTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5TZW50Ojwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+RnJpZGF5 LCBGZWJydWFyeSAxMywgMjAxNSA2OjU2IEFNPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86 PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5NaWNo YWVsIEZyb3N0OyBQaGlsIEh1bnQ8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5DYzo8L2I+PHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1h aWx0bzpzY2ltQGlldGYub3JnIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1k ZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBs ZTsiPnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9hPjxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlN1 YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj5SZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbjwvc3Bh bj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9 IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEy cHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxz cGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPk1pY2hhZWwg4oCmIGxldCBt ZSBtYWtlIHN1cmUgSSB1bmRlcnN0YW5kIHdoYXQgeW91IGFyZSBsb29raW5nIGZvci4mbmJzcDsg WW91IHdvdWxkIGxpa2UgYSBzY2hlbWEgcmVwcmVzZW50YXRpb24gKHN1Y2ggYXMgd2hhdCBpcyBp bmNsdWRlZCBpbiBzZWN0aW9uIDguNykgZm9yIGFsbCByZXNvdXJjZXMNCiBhbmQgbWVzc2FnZXMu Jm5ic3A7IElzIHRoYXQgcmlnaHQ/PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8 c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PG86 cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1l cyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiBy Z2IoMzEsIDczLCAxMjUpOyI+SWYgc28sIHRoZW4gSSAxMDAlIGFncmVlIHRoYXQgdGhpcyBpcyB1 c2VmdWwuJm5ic3A7IEluIHRoZSBTQ0lNIDEuMCBzcGVjIChiYWNrIHdoZW4gd2Ugc3VwcG9ydGVk IFhNTCBhcyBhIGRhdGEgZm9ybWF0KSB0aGVyZSB3YXMgYW4gWFNEIHRoYXQgZGlkIGV4YWN0bHkg d2hhdCB5b3UgYXJlDQogbG9va2luZyBmb3Ig4oCTIGRlc2NyaWJlZCBib3RoIHJlc291cmNlcyBh bmQgbWVzc2FnZXMuJm5ic3A7IEkgYWdyZWUgdGhhdCBoYXZpbmcgdGhpcyBjb2RpZmllcyB0aGUg cnVsZXMgYW5kIHJlbW92ZXMgc29tZSBhbWJpZ3VpdHkuJm5ic3A7IEkgd291bGQgYmUgaW4gZmF2 b3Igb2YgYWRkaW5nIHNvbWV0aGluZyBsaWtlIHRoaXMgdG8gdGhlIFNDSU0gc3BlYy48L3NwYW4+ PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3 IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMx LCA3MywgMTI1KTsiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9 IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij5SZWdhcmRpbmcg dGhlIFBhdGNoT3AsIGlzIHRoZSBwcm9ibGVtIHRoYXQgdGhlIHZhbHVlIHN1Yi1hdHRyaWJ1dGUg Y291bGQgYmUgYW55dGhpbmcg4oCTIG11bHRpdmFsdWVkIGNvdWxkIGJlIHRydWUgb3IgZmFsc2Us IHRoZXJlIG1heSBvciBtYXkgbm90IGJlIHN1Yi1hdHRyaWJ1dGVzDQogKGllIOKAkyBpdCBjb3Vs ZCBiZSBjb21wbGV4LCB3aGljaCBpcyBub3QgdGVjaG5pY2FsbHkgc3VwcG9ydGVkKSwgYW5kIHRo ZSB0eXBlIGlzIGRlcGVuZGVudCB1cG9uIHRoZSBhY3R1YWwgYXR0cmlidXRlIHRoYXQgeW91IGFy ZSByZXBsYWNpbmc/Jm5ic3A7IFdpdGggdGhpcyBhbWJpZ3VpdHkgdGhlcmUgaXNu4oCZdCBhIGdv b2Qgd2F5IHRvIHJlcHJlc2VudCB0aGlzIGluIGEgc2NoZW1hIGN1cnJlbnRseS48L3NwYW4+PG86 cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3 MywgMTI1KTsiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+ DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij4tLUtlbGx5PC9zcGFu PjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5l dyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigz MSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250 LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0i Ij48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJib3Jk ZXItc3R5bGU6IHNvbGlkIG5vbmUgbm9uZTsgYm9yZGVyLXRvcC1jb2xvcjogcmdiKDE4MSwgMTk2 LCAyMjMpOyBib3JkZXItdG9wLXdpZHRoOiAxcHQ7IHBhZGRpbmc6IDNwdCAwaW4gMGluOyI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250 LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFz cz0iIj4NCjxiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7 IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt c2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1p bHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPnNjaW0NCiBbPGEgaHJlZj0ibWFpbHRvOnNjaW0tYm91 bmNlc0BpZXRmLm9yZyIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3Jh dGlvbjogdW5kZXJsaW5lOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7Ij5t YWlsdG86c2NpbS1ib3VuY2VzQGlldGYub3JnPC9zcGFuPjwvYT5dPHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiIGNsYXNzPSIiPk9uIEJlaGFsZiBPZjxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+TWljaGFl bA0KIEZyb3N0PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+U2VudDo8L2I+PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlRodXJzZGF5LCBGZWJydWFyeSAx MiwgMjAxNSA2OjQ1IFBNPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86PC9iPjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5QaGlsIEh1bnQ8YnIgY2xh c3M9IiI+DQo8YiBjbGFzcz0iIj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzY2ltQGlldGYub3JnIiBjbGFzcz0i IiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij48c3Bh biBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsiPnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9h PjxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3NjaW1dIFNDSU0gc2NoZW1hIElE cyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbjwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1Rp bWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwv bzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3 IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMx LCA3MywgMTI1KTsiPkhpIFBoaWwsPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3 MywgMTI1KTsiPk5vdCBzdXJlIHdoYXQgeW91IG1lYW4gYnkgZXhhbXBsZXMuJm5ic3A7IE15IGNv bmNlcm4gaXMgdGhhdCBpbiB0aGUgc2NoZW1hIGRvYywgc2VjdGlvbiA4LjcgcHJvdmlkZXMgc2No ZW1hIHJlcHJlc2VudGF0aW9uIGZvciBjb3JlIHVzZXIvZ3JvdXAgYW5kIGVudGVycHJpc2UgdXNl ci4mbmJzcDsNCiBXaGF0IGFib3V0IGFsbCB0aGUgb3RoZXIgc2NoZW1hcyB3ZSByZWZlcmVuY2U/ Jm5ic3A7IFdlIHNob3VsZCBwcm92aWRlIHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgZXZlcnkg c2NoZW1hIGRlZmluZWQgaW4gdGhlIHNwZWMuJm5ic3A7IEV2ZXJ5b25lIGltcGxlbWVudGluZyB0 aGlzIHNwZWMgd2lsbCBuZWVkIHRoZW0uJm5ic3A7IFdoeSBwcm92aWRlIGp1c3QgdGhyZWUgYW5k IGxlYXZlIHRoZSByZXN0IHVwIHRvIGd1ZXNzIHdvcms/Jm5ic3A7IEV2ZXJ5IGltcGxlbWVudGF0 aW9uDQogbmVlZHMgdG8gZG8gdmFsaWRhdGlvbiwgZXZlcnkgdmFsaWRhdGlvbiBuZWVkcyBhIHNj aGVtYSB0byB2YWxpZGF0ZSBhZ2FpbnN0LiZuYnNwOyBTbyBteSBjb25jZXJuIGlzIHR3b2ZvbGQu Jm5ic3A7IEZpcnN0LCB3ZSByZWZlcmVuY2UgYSBidW5jaCBvZiBzY2hlbWFzIHRoYXQgZXZlcnlv bmUgbmVlZHMsIGJ1dCB3ZSBkb27igJl0IHByb3ZpZGUgdGhlbS4mbmJzcDsgU2Vjb25kLCBzb21l IG9mIHRoZSBzY2hlbWFzIHdlIHJlZmVyZW5jZSAoc3VjaCBhcyBwYXRjaE9wKSBjYW5ub3QNCiBi ZSByZXByZXNlbnRlZCBpbiBKU09OIHVzaW5nIG91ciBvd24gZGVmaW5pdGlvbnMuPC9zcGFuPjxv OnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBS b21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+SeKAmW0gY2VydGFp bmx5IE9LIHdpdGggYW4gYXBwZW5kaXggaW4gdGhlIGFwaSBkb2MgZm9yIG1lc3NhZ2Ugc2NoZW1h cyBhbmQgYW4gYXBwZW5kaXggaW4gdGhlIHNjaGVtYSBkb2MgZm9yIGFsbCBvZiB0aGUgZW50aXR5 IHNjaGVtYXMuJm5ic3A7IE15IHBvaW50IGlzIGFsbCB0aGVzZSBzY2hlbWFzDQogc2hvdWxkIGV4 aXN0LiZuYnNwOyBXZSByZWZlcmVuY2UgdGhlbSwgd2UgZGVzY3JpYmUgdGhlbSwgYnV0IHdlIG9u bHkgcHJvdmlkZSB0aHJlZSBvZiB0aGVtLiZuYnNwOyBJdCBqdXN0IHNlZW1zIHdyb25nIHRvIG1l IChwZXJoYXBzIG15IG93biBzaG9ydGNvbWluZykgYnV0IHdl4oCZcmUgYXNraW5nIHBlb3BsZSB0 byBpbXBsZW1lbnQgU0NJTSBwYXRjaCwgdXNpbmcgYSBTQ0lNIHNjaGVtYSBkZWZpbmVkIHJlcXVl c3QsIHRoYXQgd2UgZG8gbm90IHByb3ZpZGUsIGFuZA0KIGNhbm5vdCBkZWZpbmUgdXNpbmcgcnVs ZXMgd2Ugc2V0IGZvcnRoIGluIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIGRvYy48L3NwYW4+PG86 cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJv bWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3 MywgMTI1KTsiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPHByZSBj bGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7 IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyI+ PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+U28gYm90dG9tIGxpbmUs IGFsbCBJ4oCZbSByZXF1ZXN0aW5nIGlzIHRoZSBKU09OIHJlcHJlc2VudGF0aW9uIG9mIHRoZSBT Q0lNIHNjaGVtYXMgd2UgcmVmZXJlbmNlLjwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvcHJl Pg0KPHByZSBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTog YWx3YXlzOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+Jm5ic3A7 PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wcmU+DQo8cHJlIGNsYXNzPSIiIHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdD b3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7Ij48c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsg Y29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij5UaGlzIGlzIGEgU0NJTSBzY2hlbWEgcmVmZXJlbmNl LCDigJwgdXJuOmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBJ IGZlZWwgd2Ugc2hvdWxkIHByb3ZpZGUgdGhlIEpTT04gcmVwcmVzZW50YXRpb24gZm9yIGl0LiAm bmJzcDtJZiB3ZSBjYW7igJl0IGRvIGl0LCBub2JvZHkgaW1wbGVtZW50aW5nIHRoZSBzcGVjIGNh biBlaXRoZXIuJm5ic3A7IEFsbCBvZiB0aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2Ugc2hvdWxkIGJl IHByb3ZpZGVkIHVzaW5nIG91ciBvd24gZGVmaW5pdGlvbnMgc2V0IGRvd24gaW4gc2VjdGlvbiA3 IG9mIHRoZSBzY2hlbWEgcmZjIChvciBlbmhhbmNlZCBpbiB0aGUgYXBpIGRvYywgdXNpbmcgc2Vj dGlvbiA3IGFzIGEgYmFzZSkuJm5ic3A7IEZyYW5rbHksIEnigJltIGRyZWFkaW5nIHRoZSBvdXRj b21lIG9mIGFsbCB0aGlzIGJlY2F1c2UgSeKAmXZlIGFscmVhZHkgc3BlbnQgYSBjb3VwbGUgb2Yg bW9udGhzIGltcGxlbWVudGluZyBwYXRjaCBpbiBpdHMgY3VycmVudCBmb3JtIHdpdGggb3ZlciAx NTAgdW5pdCB0ZXN0cyB0byBjb25maXJtIGl0IGRvZXMgd2hhdCBJIHRoaW5rIHRoZSBzcGVjIHJl cXVpcmVzLiZuYnNwOyBCdXQgc2V2ZXJhbCBvZiBteSBwZWVycyBoYXZlIGNvbWUgdG8gbWUgYW5k IGFza2VkIGZvciB0aGVzZSBzY2hlbWEgZGVmaW5pdGlvbnMgKGluIEpTT04pIGFuZCBhIGNvdXBs ZSBoYXZlIHBvaW50ZWQgb3V0IHRoYXQgdGhlIHBhdGNoIHJlcXVlc3Qgc2NoZW1hLCDigJwgdXJu OmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpQYXRjaE9w4oCcLCBjYW5ub3QgYmUg cmVwcmVzZW50ZWQgdXNpbmcgc2VjdGlvbiA3IHJ1bGVzIGFuZCB0aGF0IHdlIGNhbm5vdCBkbyB1 cGZyb250IHZhbGlkYXRpb24gb24gcGF0Y2ggcmVxdWVzdHMgdGhlIHdheSB3ZSBkbyBhbGwgb3Ro ZXIgU0NJTSByZXF1ZXN0cy4mbmJzcDsgQW5kIGl04oCZcyB0cnVlLCB3ZSBjYW5ub3QgZG8gYW4g dXBmcm9udCB2YWxpZGF0aW9uIG9mIHBhdGNoIGFmdGVyIGl04oCZcyBwYXJzZWQgdGhlIHdheSB3 ZSBjYW4gYWxsIG90aGVyIHJlcXVlc3RzLiZuYnNwOyBTaW1wbGUgYXR0cmlidXRlIHZhbGlkYXRp b24gaXMgaW1wb3NzaWJsZSBiZWNhdXNlIOKAnHZhbHVl4oCdIGRlcGVuZHMgb24gdGhlIHRhcmdl dCBvZiDigJxwYXRo4oCdLCBhbmQgdGhlcmVmb3JlIOKAnHZhbHVl4oCdIGNhbm5vdCBiZSBkZWZp bmVkIGluIGEgSlNPTiBzY2hlbWEgdXNpbmcgc2VjdGlvbiA3IG9mIHRoZSBzY2hlbWEgZG9jLjwv c3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvcHJlPg0KPHByZSBjbGFzcz0iIiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291 cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyI+PHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNv bG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9wcmU+DQo8cHJlIGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVm b3JlOiBhbHdheXM7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij5F dmVuIGlmIHdlIGNhbuKAmXQgZml4IHBhdGNoLCBmb3Igd2hhdGV2ZXIgcmVhc29uLCB3ZSBzaG91 bGQgcHJvdmlkZSB0aGUgcmVzdCBvZiB0aGUgc2NoZW1hcywgcmVwcmVzZW50ZWQgaW4gSlNPTiBm b3JtYXQsIGZvciBib3RoIGRvY3MuPC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wcmU+DQo8 cHJlIGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTog MTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdh eXM7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3Nw YW4+PG86cCBjbGFzcz0iIj48L286cD48L3ByZT4NCjxwcmUgY2xhc3M9IiIgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJp ZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiPjxzcGFuIGNsYXNzPSIiIHN0eWxl PSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xv cjogcmdiKDMxLCA3MywgMTI1KTsiPi1tcmY8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L3By ZT4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PG86cCBj bGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxl PSJib3JkZXItc3R5bGU6IHNvbGlkIG5vbmUgbm9uZTsgYm9yZGVyLXRvcC1jb2xvcjogcmdiKDE4 MSwgMTk2LCAyMjMpOyBib3JkZXItdG9wLXdpZHRoOiAxcHQ7IHBhZGRpbmc6IDNwdCAwaW4gMGlu OyI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7 IiBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6 IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7Ij5Gcm9tOjwvc3Bhbj48L2I+ PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9 ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPiZuYnNw Ozwvc3Bhbj48L3NwYW4+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9u dC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPlBoaWwNCiBIdW50PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiciBjbGFzcz0iIj4NCjxiIGNsYXNz PSIiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj5UaHVyc2RheSwgRmVicnVhcnkgMTIsIDIwMTUgMTI6NTggUE08YnIgY2xhc3M9IiI+DQo8 YiBjbGFzcz0iIj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPk1pY2hhZWwgRnJvc3Q8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5DYzo8L2I+ PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9 Im1haWx0bzpzY2ltQGlldGYub3JnIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4 dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1 cnBsZTsiPnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9hPjxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIi PlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj5SZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbjwv c3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xh c3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAw MDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNl cmlmOyIgY2xhc3M9IiI+DQpNaWNoYWVsLDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdU aW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7PG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQpDYW4g eW91IHByb3ZpZGUgZXhhbXBsZXM/PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVz IE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpw PjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZv bnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NClRoZSBzY2hl bWEgaW4gdGhlIEFQSSBoYXMgdG8gZXh0ZW5kIHRoZSByZWdpc3RyeSBkZWZpbmUgaW4gY29yZS4g Jm5ic3A7IEFzIGVkaXRvciBJIHRoaW5rIGl0IHdvdWxkIGJlIGV2ZW4gbW9yZSBjb25mdXNpbmcg dG8gbWl4IGRhdGEgc2NoZW1hIGFuZCByZXF1ZXN0IHNjaGVtYSBpbiBhIHNpbmdsZSBkb2N1bWVu dC4gSXQgYWxzbyBiZWNvbWVzIHByb2JsZW1hdGljIHdoZW4gc3BlY3MgY3Jvc3MgcmVmZXJlbmNl IGVhY2ggb3RoZXIuIEluc3RlYWQgdGhlIGRvY3VtZW50DQogbGF5b3V0IGlzIHN1Y2ggdGhhdCBB UEkgYnVpbGRzIG9uIGNvcmUgc2NoZW1hLiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7PG86cCBjbGFz cz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+ DQpUaGUgZm9ybWF0IGluIFBBVENIIGNvbWVzIGZyb20gdGhlIEpTT04gUGF0Y2ggUkZDLiZuYnNw OzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsi IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KUGhpbDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMTJwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog J1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyI+DQo8YnIgY2xhc3M9IiI+DQpPbiBGZWIgMTIsIDIw MTUsIGF0IDEyOjQ2LCBNaWNoYWVsIEZyb3N0ICZsdDs8YSBocmVmPSJtYWlsdG86bWljaGFlbC5m cm9zdEBvcmFjbGUuY29tIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNv cmF0aW9uOiB1bmRlcmxpbmU7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsi Pm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbTwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8bzpwIGNsYXNz PSIiPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgY2xhc3M9IiIgc3R5bGU9Im1hcmdp bi10b3A6IDVwdDsgbWFyZ2luLWJvdHRvbTogNXB0OyI+DQo8cHJlIGNsYXNzPSIiIHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdD b3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7Ij48c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1zaXplOiAxMnB0OyI+LjA6UmVzb3VyY2VUeXBlPC9zcGFuPjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9wcmU+DQo8cHJlIGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2Ut YnJlYWstYmVmb3JlOiBhbHdheXM7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiAx MnB0OyI+dXJuOmlldGY6cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjI8L3NwYW4+PG86cCBjbGFz cz0iIj48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGlt ZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJm b250LXNpemU6IDlwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fucy1zZXJpZjsiPl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0K c2NpbSBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86c2NpbUBpZXRm Lm9yZyIgY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5k ZXJsaW5lOyI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7Ij5zY2ltQGlldGYu b3JnPC9zcGFuPjwvYT48YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL3NjaW0iIGNsYXNzPSIiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0 ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJjb2xvcjog cHVycGxlOyI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2ltPC9zcGFu PjwvYT48L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNz PSIiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZTogOXB0OyBmb250LWZhbWlseTog SGVsdmV0aWNhLCBzYW5zLXNlcmlmOyI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xh c3M9IiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7Ij5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4NCnNjaW0gbWFpbGluZyBsaXN0PGJyIGNsYXNz PSIiPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzY2ltQGlldGYub3JnIiBjbGFzcz0iIiBzdHls ZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij48c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMt c2VyaWY7IGNvbG9yOiBwdXJwbGU7Ij5zY2ltQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMt c2VyaWY7Ij48YnIgY2xhc3M9IiI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9zY2ltIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsg dGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1z aXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOiBwdXJw bGU7Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjaW08L3NwYW4+PC9h PjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_3CE93EE6EEF042628DFE115B27E6680Dnexusgroupcom_-- From nobody Wed Feb 25 15:19:15 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 922D31A911D for ; Wed, 25 Feb 2015 15:19:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.6 X-Spam-Level: X-Spam-Status: No, score=-1.6 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NGBep7ADrXu0 for ; Wed, 25 Feb 2015 15:19:08 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0129.outbound.protection.outlook.com [65.55.169.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AC581A906F for ; Wed, 25 Feb 2015 15:19:08 -0800 (PST) Received: from BN1PR04MB391.namprd04.prod.outlook.com (10.141.60.150) by BN1PR04MB358.namprd04.prod.outlook.com (10.141.61.145) with Microsoft SMTP Server (TLS) id 15.1.93.16; Wed, 25 Feb 2015 23:19:05 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB391.namprd04.prod.outlook.com (10.141.60.150) with Microsoft SMTP Server (TLS) id 15.1.93.16; Wed, 25 Feb 2015 23:19:03 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.43]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.43]) with mapi id 15.01.0093.004; Wed, 25 Feb 2015 23:19:02 +0000 From: Kelly Grizzle To: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= , Phil Hunt Thread-Topic: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) Thread-Index: AQHQUFvVIEEY+3NnnkGFOdZw3oCV350AYbfAgAAJtYCAAAGLEIAADBeAgAB5QwCAAQ0ocA== Date: Wed, 25 Feb 2015 23:19:02 +0000 Message-ID: References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> <8DB34ABA-7C60-406A-852D-1CA3E756D1F3@oracle.com> <3CE93EE6-EEF0-4262-8DFE-115B27E6680D@nexusgroup.com> In-Reply-To: <3CE93EE6-EEF0-4262-8DFE-115B27E6680D@nexusgroup.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 3FA8E58C00940E3FA8E6D9 x-originating-ip: [72.179.27.78] authentication-results: spf=none (sender IP is ) smtp.mailfrom=kelly.grizzle@sailpoint.com; x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB391;UriScan:; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB391; x-forefront-prvs: 049897979A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(51444003)(35774003)(199003)(51694002)(189002)(24454002)(377454003)(52604005)(2900100001)(66066001)(92566002)(2950100001)(76176999)(50986999)(97736003)(77156002)(64706001)(62966003)(54356999)(106116001)(106356001)(74316001)(561944003)(19625215002)(33656002)(19580405001)(101416001)(19609705001)(105586002)(19580395003)(19617315012)(99286002)(46102003)(19300405004)(40100003)(19273905006)(16236675004)(15975445007)(2656002)(93886004)(102836002)(68736005)(76576001)(86362001)(122556002)(15395725005)(87936001)(562404015)(579004)(563064011); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB391; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: sailpoint.com does not designate permitted sender hosts) Content-Type: multipart/alternative; boundary="_000_BN1PR04MB392C51FF48493E67D5ED600E2170BN1PR04MB392namprd_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Feb 2015 23:19:02.7284 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB391 X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB358; X-OriginatorOrg: sailpoint.com Archived-At: Cc: SCIM WG Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Feb 2015 23:19:13 -0000 --_000_BN1PR04MB392C51FF48493E67D5ED600E2170BN1PR04MB392namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Qm90aCB5b3UgYW5kIFBoaWzigJlzIHN1Z2dlc3Rpb25zIG1ha2Ugc2Vuc2UgdG8gbWUuICBKdXN0 IHdhbnRlZCB0byB0aHJvdyBpdCBvdXQgdGhlcmUgZm9yIGRpc2N1c3Npb24gYmVmb3JlIHdlIGdv IGRvd24gYSBjZXJ0YWluIHJvdXRlLiAgTXkgbWluZCBoYXMgYmVlbiBlYXNlZCBub3cuIDspDQoN CkZyb206IEVyaWsgV2FobHN0csO2bSBuZVh1cyBbbWFpbHRvOmVyaWsud2FobHN0cm9tQG5leHVz Z3JvdXAuY29tXQ0KU2VudDogV2VkbmVzZGF5LCBGZWJydWFyeSAyNSwgMjAxNSAxOjA2IEFNDQpU bzogUGhpbCBIdW50DQpDYzogS2VsbHkgR3JpenpsZTsgU0NJTSBXRw0KU3ViamVjdDogUmU6IFtz Y2ltXSBQQVRDSCBhbmQgc2NoZW1hICh3YXM6IFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXBy ZXNlbnRhdGlvbikNCg0KSGksDQoNClRoZSBBUEkgZHJhZnQgZG9u4oCZdCBtZW50aW9uIGV4dGVu c2lvbiAodG8gdGhlIEFQSSkgYW55d2hlcmUuIEkgdGhpbmsgYSBicmFuZCBuZXcgZW5kcG9pbnRz IHRoYXQgc3VwcG9ydHMgcGFnaW5nVG9rZW4gaXMgbW9yZSBpbiBsaW5lIHdpdGggdGhlIHNwZWNp ZmljYXRpb24uIFRoYXQgYWxzbyBtYWtlcyBkaXNjb3ZlciB1c2luZyB0aGUgU2VydmljZVByb3Zp ZGVyQ29uZmlnIGVuZHBvaW50IG1vcmUgYWNjdXJhdGUuIElzbuKAmXQgaXQgYmV0dGVyIHRvIGFk ZCBhbiBleHRlbnNpb24gdGhlcmUgdGhhdCBhbm5vdW5jZSB0aGF0IHRoZSBzZXJ2ZXIgYWxzbyBz dXBwb3J0cyBvdGhlciBlbmRwb2ludHM/DQoNCkxpa2UgdGhpczoNCg0Kew0KICAgICJzY2hlbWFz IjogWw0KICAgICAgInVybjppZXRmOnBhcmFtczpzY2ltOnNjaGVtYXM6Y29yZToyLjA6U2Vydmlj ZVByb3ZpZGVyQ29uZmln4oCdLCB1cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlvbiINCiAgICBd LA0KICAgICJkb2N1bWVudGF0aW9uVXJsIjoiaHR0cDovL2V4YW1wbGUuY29tL2hlbHAvc2NpbS5o dG1sIiwNCiAgICAicGF0Y2giOiB7DQogICAgICAic3VwcG9ydGVkIjp0cnVlDQogICAgfSwNCiAg ICAiYnVsayI6IHsNCiAgICAgICJzdXBwb3J0ZWQiOnRydWUsDQogICAgICAibWF4T3BlcmF0aW9u cyI6MTAwMCwNCiAgICAgICJtYXhQYXlsb2FkU2l6ZSI6MTA0ODU3Ng0KICAgIH0NCiAgICAgInVy bjpzb21lLWV4dGVuc2lvbjpwYWdpbmF0aW9uIjogew0KICAgICAgIOKAnGZpbHRlcldpdGhOZXdU b2tlbkVuZHBvaW50Ijog4oCcdHJ1ZSINCiAgICAgfSwNCiAgICDigKYuDQogICAg4oCmLg0KDQoN CkFuZCB0aGVuIHRoZSBzZXJ2aWNlIHByb3ZpZGVyIGFsc28gaGF2ZSBzdXBwb3J0IGZvciB0aGUg bmV3IC92Mi9Vc2Vyc1dpdGhFeHRyYUJlbGxzRW5kV2lzdGxlc0VuZHBvaW50DQoNCi8gRXJpaw0K DQoNCg0KT24gMjUgRmViIDIwMTUsIGF0IDAwOjUyLCBQaGlsIEh1bnQgPHBoaWwuaHVudEBvcmFj bGUuY29tPG1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQpOb3JtYWxseSwg SSB3b3VsZCBleHBlY3QgdGhhdCB3b3VsZCBiZSBoYW5kbGVkIGJ5IGEgbmV3IGV4dGVuc2lvbiBk cmFmdCBhbmQgcmVnaXN0ZXJlZCBhcHByb3ByaWF0ZWx5IHdpdGggSUFOQS4gSSBzdGlsbCBoYXZl IHRvIHJlc2VhcmNoIHRoZSBpbXBsaWNhdGlvbnMgb24gcmVnaXN0cnkgaGFuZGxpbmcgYnV0IEkg dGhpbmsgdGhpcyBzaG91bGQgYmUgZG8tYWJsZS4gQXMgd2l0aCB5b3VyIGV4YW1wbGUgZXh0ZW5z aW9uIGZvciBwYWdpbmcsIHRoZXJl4oCZcyBub3RoaW5nIHNheWluZyB3ZSBjYW7igJl0IGZvbGxv dyB0aGUgc2FtZSBleHRlbnNpb24gdGVjaG5pcXVlIGluIG91ciBKU09OLg0KDQpJZiBJIHJvbGwg eW91ciBzdWdnZXN0aW9uIHRvZ2V0aGVyIHdpdGggRXJpa+KAmXMgcHJvcG9zYWwgd2Ugd291bGQg aGF2ZToNCg0KICB7DQogICAgICJtc2dUeXBlIjpbInVybjppZXRmOnBhcmFtczpzY2ltOmFwaTpt ZXNzYWdlczoyLjA6TGlzdFJlc3BvbnNlIiwgInVybjpzb21lLWV4dGVuc2lvbjpwYWdpbmF0aW9u Il0sDQogICAgICJ0b3RhbFJlc3VsdHMiOjIsDQogICAgICJSZXNvdXJjZXMiOlsNCiAgICAgICB7 DQoNCiAgICAgICAgICJzY2hlbWFzIjogWyJ1cm46aWV0ZjpwYXJhbXM6c2NpbTpzY2hlbWFzOmNv cmU6Mi4wOlVzZXLigJ1dLA0KDQogICAgICAgICAg4oCcaWQiIDogPHNvbWUtaWQtYT4sDQogICAg ICAgICAidXNlck5hbWUiOiJiamVuc2VuIg0KICAgICAgIH0sDQogICAgICAgew0KDQogICAgICAg ICAic2NoZW1hcyI6IFsidXJuOmlldGY6cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjIuMDpVc2Vy 4oCdXSwNCg0KICAgICAgICAgIOKAnGlkIiA6IDxzb21lLWlkLWI+LA0KICAgICAgICAgInVzZXJO YW1lIjoianNtaXRoIg0KICAgICAgIH0NCiAgICAgXSwNCiAgICAgInVybjpzb21lLWV4dGVuc2lv bjpwYWdpbmF0aW9uIjogew0KICAgICAgICJwYWdpbmdUb2tlbiI6ICI4OTgyamFrODRqLm5rZDgi DQogICAgIH0NCiAgIH0NCg0KTm90aWNlIHRoYXQgaW5zaWRlIGVhY2gg4oCcUmVzb3VyY2Vz4oCd IGFycmF5IGVsZW1lbnQgaXMgYSByZXNvdXJjZSBvYmplY3Qgd2l0aCBpdHMgZGF0YSBzY2hlbWEg cmVmZXJlbmNlIGluY2x1ZGVkLiAgQWxzbywgc2luY2UgaWQgaXMgYWx3YXlzIHJldHVybmVkLCBp dCB3b3VsZCBhbHNvIGJlIHByZXNlbnQuDQoNCkJ5IHVzaW5nIOKAnG1zZ1R5cGXigJ0sIHdlIGFy ZSBjbGVhcmx5IHNlcGFyYXRpbmcgd2hhdCBpcyByZXF1ZXN0IG9yIHJlc3BvbnNlIG1ldGFkYXRh IGNvbnRlbnQgYXMgZGlzdGluY3QgZnJvbSByZXNvdXJjZSBzY2hlbWEgKHdoaWNoIGhhcyBzdGF0 ZSkuDQoNClBoaWwNCg0KQGluZGVwZW5kZW50aWQNCnd3dy5pbmRlcGVuZGVudGlkLmNvbTxodHRw Oi8vd3d3LmluZGVwZW5kZW50aWQuY29tLz4NCnBoaWwuaHVudEBvcmFjbGUuY29tPG1haWx0bzpw aGlsLmh1bnRAb3JhY2xlLmNvbT4NCg0KT24gRmViIDI0LCAyMDE1LCBhdCAzOjEzIFBNLCBLZWxs eSBHcml6emxlIDxrZWxseS5ncml6emxlQHNhaWxwb2ludC5jb208bWFpbHRvOmtlbGx5LmdyaXp6 bGVAc2FpbHBvaW50LmNvbT4+IHdyb3RlOg0KDQpSaWdodC4gIE15IHRoaW5raW5nIHdhcyBtb3Jl IGFyb3VuZCB0aGUgTGlzdFJlc3BvbnNlIGl0c2VsZiBiZWluZyBleHRlbmRlZCByYXRoZXIgdGhh biB0aGUgY29udGFpbmVkIHJlc291cmNlIG9iamVjdHMuICBGb3IgZXhhbXBsZToNCg0KICAgew0K ICAgICAic2NoZW1hcyI6WyJ1cm46aWV0ZjpwYXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOkxp c3RSZXNwb25zZSIsICJ1cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlvbiJdLA0KICAgICAidG90 YWxSZXN1bHRzIjoyLA0KICAgICAiUmVzb3VyY2VzIjpbDQogICAgICAgew0KICAgICAgICAgInVz ZXJOYW1lIjoiYmplbnNlbiINCiAgICAgICB9LA0KICAgICAgIHsNCiAgICAgICAgICJ1c2VyTmFt ZSI6ImpzbWl0aCINCiAgICAgICB9DQogICAgIF0sDQogICAgICJ1cm46c29tZS1leHRlbnNpb246 cGFnaW5hdGlvbiI6IHsNCiAgICAgICAicGFnaW5nVG9rZW4iOiAiODk4Mmphazg0ai5ua2Q4Ig0K ICAgICB9DQogICB9DQoNCkFnYWluIOKApiBJ4oCZbSBub3QgZXZlbiBzdXJlIGlmIHRoaXMgaXMg c29tZXRoaW5nIHRoYXQgYW55b25lIHdvdWxkIHdhbnQgdG8gZG8gb3IgaWYgaXQgc2hvdWxkIGJl IHN1cHBvcnRlZCBpbiB0aGlzIHdheS4gIEkganVzdCB3YW50ZWQgdG8gYnJpbmcgaXQgdXAuDQoN CkZyb206IHNjaW0gW21haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBQ aGlsIEh1bnQNClNlbnQ6IFR1ZXNkYXksIEZlYnJ1YXJ5IDI0LCAyMDE1IDU6MDMgUE0NClRvOiBL ZWxseSBHcml6emxlDQpDYzogU0NJTSBXRzsgRXJpayBXYWhsc3Ryw7ZtIG5lWHVzDQpTdWJqZWN0 OiBSZTogW3NjaW1dIFBBVENIIGFuZCBzY2hlbWEgKHdhczogU0NJTSBzY2hlbWEgSURzIGFuZCBK U09OIHJlcHJlc2VudGF0aW9uKQ0KDQpJIGJlbGlldmUgd2UgYXJlIG9rIG9uIHRoaXMuIFdlIGhh dmUgcHJldHR5IGdvb2Qgc2VwYXJhdGlvbi4gRm9yIGV4YW1wbGUgTGlzdCByZXNwb25zZSBkb2Vz IGNvbnRhaW4ganNvbiBvYmplY3RzIHRoYXQgaGF2ZSByZXNvdXJjZSBzcGVjaWZpYyBzY2hlbWFz Lg0KDQpFLmcuIFRoZSBvdXRlciBqc29uIG9iamVjdCB3b3VsZCBoYXZlIGEgbXNnVHlwZSBvZiBM aXN0UmVzcG9uc2Ugd2hpbGUgdGhlIGFycmF5IG9mIHJlc3VsdCBvYmplY3RzIGVhY2ggY29udGFp bnMgYSByZXNvdXJjZSBlYWNoIHdpdGggaXRzIG93biBzY2hlbWFzIGF0dHJpYnV0ZS4NCg0KUGhp bA0KDQpPbiBGZWIgMjQsIDIwMTUsIGF0IDE0OjMxLCBLZWxseSBHcml6emxlIDxrZWxseS5ncml6 emxlQHNhaWxwb2ludC5jb208bWFpbHRvOmtlbGx5LmdyaXp6bGVAc2FpbHBvaW50LmNvbT4+IHdy b3RlOg0KT25lIHRoaW5nIHRoYXQgaXMgbmljZSBhYm91dCDigJxzY2hlbWFz4oCdIGlzIHRoYXQg aXQgZ2l2ZXMgdXMgYSB3YXkgdG8gZXh0ZW5kIGEgcmVzb3VyY2UgKG9yIHRoZSByZXByZXNlbnRh dGlvbiBvZiBhIHJlc291cmNlKS4gIEJ5IG1vdmluZyBvdXIgbWVzc2FnZXMgdG8gdXNlIG1zZ1R5 cGUgaW5zdGVhZCBvZiBzY2hlbWFzLCB3ZSBtaWdodCBsb3NlIHNvbWUgb2YgdGhpcyBmbGV4aWJp bGl0eS4gIEnigJltIG5vdCBzdXJlIHRoYXQgd2Ugd291bGQgd2FudCBpdCBvciBub3QsIGJ1dCBJ IGNhbiBlbnZpc2lvbiBhIExpc3RSZXNwb25zZSBmcm9tIGEgc2VydmVyIHRoYXQgcmV0dXJucyBh IOKAnHBhZ2luZyB0b2tlbuKAnSBhbG9uZyB3aXRoIHRoZSBjdXJyZW50IHBhZ2UgbnVtYmVyLCBl dGPigKYgIFRoaXMgY291bGQgcG90ZW50aWFsbHkgYmUgcHV0IGludG8gYW4gZXh0ZW5zaW9uLiAg SnVzdCBzb21ldGhpbmcgdG8gY29uc2lkZXLigKYNCg0KLS1LZWxseQ0KDQpGcm9tOiBzY2ltIFtt YWlsdG86c2NpbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgUGhpbCBIdW50DQpTZW50 OiBUdWVzZGF5LCBGZWJydWFyeSAyNCwgMjAxNSAxMjowMSBQTQ0KVG86IEVyaWsgV2FobHN0csO2 bSBuZVh1cw0KQ2M6IFNDSU0gV0cNClN1YmplY3Q6IFJlOiBbc2NpbV0gUEFUQ0ggYW5kIHNjaGVt YSAod2FzOiBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50YXRpb24pDQoNCkVyaWsN Cg0KQWdyZWVkLiBJIHRoaW5rIHRoaXMgbWFrZXMgc2Vuc2UgYW5kIGlzIGEgZ29vZCBjb21wcm9t aXNlLiBUaGlzIHJlZmxlY3RzIHdoYXQgd2UgZGlzY3Vzc2VkIG9uIG91ciBpbmZvcm1hbCBjYWxs IGxhc3Qgd2Vlay4NCg0KQW55IG90aGVyIGNvbW1lbnRzPw0KDQpQaGlsDQoNCkBpbmRlcGVuZGVu dGlkDQp3d3cuaW5kZXBlbmRlbnRpZC5jb208aHR0cDovL3d3dy5pbmRlcGVuZGVudGlkLmNvbS8+ DQpwaGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20+DQoNCk9u IEZlYiAyNCwgMjAxNSwgYXQgMTo0MyBBTSwgRXJpayBXYWhsc3Ryw7ZtIG5lWHVzIDxlcmlrLndh aGxzdHJvbUBuZXh1c2dyb3VwLmNvbTxtYWlsdG86ZXJpay53YWhsc3Ryb21AbmV4dXNncm91cC5j b20+PiB3cm90ZToNCg0KSGksDQoNCkkgYWdyZWVkIHRoYXQgdGhlcmUgYXJlIHNvbWUgaW5jb25z aXN0ZW5jeSBhbmQgcGhpbG9zb3BoaWNhbCBpc3N1ZXMgcHJlc2VudCBpbiB0aGUgc3BlY2lmaWNh dGlvbnMgdGhhdCBwcm9iYWJseSBuZWVkIGFkZHJlc3NpbmcuDQoNCkkgdGhpbmsgd2Ugc2hvdWxk IG1ha2UgZGlmZmVyZW5jZXMgdG8gdGhlIFJlc291cmNlcyBhbmQgbWVzc2FnZXMsIGFuZCB3ZSBu ZWVkIHNvbWUgY2hhbmdlcyB0byB0aGUgc2NoZW1hIGFuZCB0aGUgYXBpIGRyYWZ0cyB0byBtYWtl IHRoYXQgY2xlYXIuDQoNClRoZSBSZXNvdXJjZXMgcmVxdWlyZXMgZml4ZWQgc2NoZW1hcywgdGhl IG1lc3NhZ2VzIG5vdCBzbyBtdWNoLiBTY2hlbWFzIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhl IHB1cnBvc2Ugb2YgYWxsb3dpbmcgYSBjbGllbnQgdG8gdW5kZXJzdGFuZCB3aGF0IGF0dHJpYnV0 ZXMgYW5kIGFzc29jaWF0ZWQgbWV0YWRhdGEgKHJlYWRhYmlsaXR5LCBtdXRhYmlsaXR5LCB0eXBl LCBldGMpIGlzIHN1cHBvcnRlZCBieSBhIHBhcnRpY3VsYXIgc2VydmljZSBwcm92aWRlci4gRGlz cmVnYXJkaW5nIG9uIHRoZSBjdXJyZW50bHkgdXNlZCBiZWFyZXIuDQoNClRoZSBtZXNzYWdlIGRv buKAmXQgbmVlZCB0byBiZSB2YWxpZGF0ZWQgYWNjb3JkaW5nIHRvIGEgc2NoZW1hLiBTQ0lNIGZv bGxvd3MgdGhlIFJvYnVzdG5lc3MgUHJpbmNpcGFsIChKb24gUG9zdGVs4oCZcyBsYXcgLSBvbmUg b2YgdGhlIGZvdW5kaW5nIHByaW5jaXBsZXMgb2YgVENQL0lQKS4gVGhpcyBtZWFucyB0aGF0IG1l c3NhZ2Ugc2hvdWxkIG5vdCBuZWVkIHRvIGNvbXBseSB3aXRoIHNjaGVtYSBpbiBvcmRlciB0byBi ZSBpbnRlcnByZXRlZCAod2l0aGluIHJlYXNvbikgYnkgYSBzZXJ2aWNlIHByb3ZpZGVyLiAgSW4g cHJhY3RpY2FsIHRlcm1zLCBhIFNDSU0gY2xpZW50IHNob3VsZCBuZXZlciBoYXZlIHRvIGRvIGEg bG90IG9mIHdvcmsgdG8gY3JlYXRlIG9yIHNlYXJjaCBmb3IgYSBVc2VyLiBBdCB0aGUgc2FtZSB0 aW1lLCBhIHNlcnZpY2UgcHJvdmlkZXIgaXMgbm90IG9ibGlnZWQgdG8gYWNjZXB0IGEgbmV3IFVz ZXIgKmV4YWN0bHkqIGFzIHRoZSBjbGllbnQgc3BlY2lmaWVzLiBUaGUgc2VydmljZSBwcm92aWRl ciBpcyBhbHdheXMgZnJlZSB0byBpbnRlcnByZXQgYW5kIGNoYW5nZSBkYXRhLg0KDQpNZXNzYWdl cyBpcyBwYXJ0IG9mIHRoZSBBUEkgZHJhZnQsIGFuZCBSZXNvdXJjZXMgYW5kIHRoZXJlIHNjaGVt YXMgaXMgYSBwYXJ0IG9mIHRoZSBTY2hlbWEgZHJhZnQuIFdlIHNob3VsZCBub3QgbWl4IHRoZW0g dG8gbXVjaCBhbmQgbWFrZSBpdCBjbGVhciBpbiB0aGUgc3BlYyB0aGF0IGlzIGFsc28gdGhlIGNh c2UuDQoNCkkgdGhpbmsgdGhhdCB0aGUgUmVzb3VyY2VzIHRoYXQgd2UgaGF2ZSB0b2RheSwgU2No ZW1hLCBSZXNvdXJjZVR5cGVzIGFuZCBTZXJ2aWNlUHJvdmlkZXJDb25maWdzIE1VU1QgYmUgYWRk ZWQgdG8gdGhlIC9TY2hlbWFzIGVuZHBvaW50LiBXZSBzaG91bGQgYWxzbyBhZGQgU2NoZW1hLCBS ZXNvdXJjZVR5cGVzIGFuZCBTZXJ2aWNlUHJvdmlkZXJDb25maWdzIHRvIHRoZSBzZWN0aW9uICI4 LjcgU2NoZW1hIFJlcHJlc2VudGF0aW9u4oCdIGluIHRoZSBzY2hlbWEgc3BlYy4NCg0KQSBzZWNv bmQgaW1wb3J0YW50IGNoYW5nZSB0byBtYWtlIGl0IGNsZWFyIHRoYXQgbWVzc2FnZXMgYXJlIG1l c3NhZ2VzLCBpcyB0byByZW1vdmUgdGhlIHNjaGVtYSBhdHRyaWJ1dGUgb24gb2Ygb2YgdGhlIG1l c3NhZ2VzLiBUaGV5IHdoZXJlIGFkZGVkIHJhdGhlciBsYXRlIGluIHRoZSBzcGVjLXdyaXRpbmcg cHJvY2VzcyB0byBnaXZlIGEgbm90aW9uIHRvIHRoZSBzZXJ2aWNlIHByb3ZpZGVyIHdoYXQga2lu ZCBvZiBtZXNzYWdlIHRoYXTigJlzIGN1cnJlbnRseSBzZW50LiBUaGUgaW50ZW50aW9uIHdhcyBu b3QgdG8gZm9yY2UgdGhlIFNQIHRvIHZhbGlkYXRlIHRoZSBtZXNzYWdlcyBhZ2FpbnN0IGEgc2No ZW1hLiBJIHN1Z2dlc3QgdGhhdCB3ZSByZW1vdmUgdGhlIOKAnHNjaGVtYXMiIGF0dHJpYnV0ZSBp biBtZXNzYWdlcyBhbmQgcmVwbGFjZXMgaXQgd2l0aCBhIOKAnG1zZ1R5cGXigJ0gdGhhdCBjb3Vs ZCBpbmRpY2F0ZSB3aGF0IG1lc3NhZ2UgaXQgaXMgKFBhdGNoT3Agb3IgTGlzdFJlc3BvbnNlKS4N Cg0KLyBFcmlrDQoNCg0KDQpPbiAxMyBGZWIgMjAxNSwgYXQgMjI6MDgsIFBoaWwgSHVudCA8cGhp bC5odW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPj4gd3JvdGU6DQoN CldpdGggdGhlIHBhdGNoIG9wZXJhdGlvbiwgdGhlIGNvbnRlbnRzIG9mIOKAnHZhbHVl4oCdIGlz IGN1cnJlbnRseSBkcml2ZW4gYnkgdGhlIOKAnHBhdGjigJ0gYXR0cmlidXRlLiAgSW4gb3RoZXIg d29yZHMgaW4gYSBub3JtYWwgSlNPTiBzdHJ1Y3R1cmUsIHRoZSBQYXRjaCBwYXRoIGF0dHJpYnV0 ZSBkZXNjcmliZXMgdGhlIGxlZnQgaGFsZiBvZiBhIG5hbWUgdmFsdWUgcGFpciwgYW5kIHRoZSDi gJx2YWx1ZeKAnSBkZXNjcmliZXMgdGhlIHJpZ2h0IGhhbGYuDQoNClNvIGlmIOKAnHBhdGgiIHBv aW50cyB0byBhIGNvbXBsZXggYXR0cmlidXRlLCB0aGVuIOKAnHZhbHVl4oCdIE1VU1QgYmUgYSBK U09OIG9iamVjdCBvZiBvbmUgb3IgbW9yZSBzdWItYXR0cmlidXRlcy4gIElmIHBhdGggZGVzY3Jp YmVzIGEgc2ltcGxlIGF0dHJpYnV0ZSwgdGhhbiB0aGUgY29ycmVzcG9uZGluZyB2YWx1ZSBtdXN0 IGJlIGEgYm9vbGVhbiwgc3RyaW5nIGRlcGVuZGluZyBvbiB0aGUgc2NoZW1hIG9mIHRoZSBhdHRy aWJ1dGUgZGVzY3JpYmVkIGJ5IOKAnHBhdGjigJ0uDQoNClNDSU0gcGF0Y2ggaXMgYmFzZWQgb24g YW5kIGZvbGxvd3MgdGhlIHNhbWUgZGVzaWduIGFzIGZvciBSRkM2OTAyIChKU09OIFBhdGNoKS4g VGhlIG9ubHkgZGlmZmVyZW5jZSBpcyB3ZSBkZWNpZGVkIHRvIGxpbWl0IHRoZSBudW1iZXIgb2Yg b3BlcmF0aW9uIHR5cGVzIGFuZCB0byB1c2UgZmlsdGVycyBpbiBwYXRocyByYXRoZXIgdGhhbiBh cnJheSBpbmRleGVkIGFjY2VzcyBiYXNlZCBvbiBKU09OIFBvaW50ZXJzIChSRkM2OTAxKS4NCg0K UGhpbA0KDQpAaW5kZXBlbmRlbnRpZA0Kd3d3LmluZGVwZW5kZW50aWQuY29tPGh0dHA6Ly93d3cu aW5kZXBlbmRlbnRpZC5jb20vPg0KcGhpbC5odW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVu dEBvcmFjbGUuY29tPg0KDQpPbiBGZWIgMTMsIDIwMTUsIGF0IDEyOjI5IFBNLCBNaWNoYWVsIEZy b3N0IDxtaWNoYWVsLmZyb3N0QG9yYWNsZS5jb208bWFpbHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xl LmNvbT4+IHdyb3RlOg0KDQpZZXMgS2VsbHksIHlvdSBhcmUgY29ycmVjdC4gIEkgd2FzIGxvb2tp bmcgZm9yIHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgYWxsIHJlc291cmNlcyBhbmQgbWVzc2Fn ZXMuICBZb3UgYWxzbyBjb3JyZWN0bHkgaWRlbnRpZmllZCB0aGUgaXNzdWUgSSB3YXMgdHJ5aW5n IHRvIHJhaXNlIHdpdGggcmVnYXJkcyB0byBQYXRjaE9wLiAgVGhhbmtzIGZvciB0YWtpbmcgYSBs b29rLg0KDQotbXJmDQoNCkZyb206IEtlbGx5IEdyaXp6bGUgW21haWx0bzprZWxseS5ncml6emxl QHNhaWxwb2ludC5jb21dDQpTZW50OiBGcmlkYXksIEZlYnJ1YXJ5IDEzLCAyMDE1IDY6NTYgQU0N ClRvOiBNaWNoYWVsIEZyb3N0OyBQaGlsIEh1bnQNCkNjOiBzY2ltQGlldGYub3JnPG1haWx0bzpz Y2ltQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtzY2ltXSBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpT T04gcmVwcmVzZW50YXRpb24NCg0KTWljaGFlbCDigKYgbGV0IG1lIG1ha2Ugc3VyZSBJIHVuZGVy c3RhbmQgd2hhdCB5b3UgYXJlIGxvb2tpbmcgZm9yLiAgWW91IHdvdWxkIGxpa2UgYSBzY2hlbWEg cmVwcmVzZW50YXRpb24gKHN1Y2ggYXMgd2hhdCBpcyBpbmNsdWRlZCBpbiBzZWN0aW9uIDguNykg Zm9yIGFsbCByZXNvdXJjZXMgYW5kIG1lc3NhZ2VzLiAgSXMgdGhhdCByaWdodD8NCg0KSWYgc28s IHRoZW4gSSAxMDAlIGFncmVlIHRoYXQgdGhpcyBpcyB1c2VmdWwuICBJbiB0aGUgU0NJTSAxLjAg c3BlYyAoYmFjayB3aGVuIHdlIHN1cHBvcnRlZCBYTUwgYXMgYSBkYXRhIGZvcm1hdCkgdGhlcmUg d2FzIGFuIFhTRCB0aGF0IGRpZCBleGFjdGx5IHdoYXQgeW91IGFyZSBsb29raW5nIGZvciDigJMg ZGVzY3JpYmVkIGJvdGggcmVzb3VyY2VzIGFuZCBtZXNzYWdlcy4gIEkgYWdyZWUgdGhhdCBoYXZp bmcgdGhpcyBjb2RpZmllcyB0aGUgcnVsZXMgYW5kIHJlbW92ZXMgc29tZSBhbWJpZ3VpdHkuICBJ IHdvdWxkIGJlIGluIGZhdm9yIG9mIGFkZGluZyBzb21ldGhpbmcgbGlrZSB0aGlzIHRvIHRoZSBT Q0lNIHNwZWMuDQoNClJlZ2FyZGluZyB0aGUgUGF0Y2hPcCwgaXMgdGhlIHByb2JsZW0gdGhhdCB0 aGUgdmFsdWUgc3ViLWF0dHJpYnV0ZSBjb3VsZCBiZSBhbnl0aGluZyDigJMgbXVsdGl2YWx1ZWQg Y291bGQgYmUgdHJ1ZSBvciBmYWxzZSwgdGhlcmUgbWF5IG9yIG1heSBub3QgYmUgc3ViLWF0dHJp YnV0ZXMgKGllIOKAkyBpdCBjb3VsZCBiZSBjb21wbGV4LCB3aGljaCBpcyBub3QgdGVjaG5pY2Fs bHkgc3VwcG9ydGVkKSwgYW5kIHRoZSB0eXBlIGlzIGRlcGVuZGVudCB1cG9uIHRoZSBhY3R1YWwg YXR0cmlidXRlIHRoYXQgeW91IGFyZSByZXBsYWNpbmc/ICBXaXRoIHRoaXMgYW1iaWd1aXR5IHRo ZXJlIGlzbuKAmXQgYSBnb29kIHdheSB0byByZXByZXNlbnQgdGhpcyBpbiBhIHNjaGVtYSBjdXJy ZW50bHkuDQoNCi0tS2VsbHkNCg0KDQpGcm9tOiBzY2ltIFttYWlsdG86c2NpbS1ib3VuY2VzQGll dGYub3JnXSBPbiBCZWhhbGYgT2YgTWljaGFlbCBGcm9zdA0KU2VudDogVGh1cnNkYXksIEZlYnJ1 YXJ5IDEyLCAyMDE1IDY6NDUgUE0NClRvOiBQaGlsIEh1bnQNCkNjOiBzY2ltQGlldGYub3JnPG1h aWx0bzpzY2ltQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtzY2ltXSBTQ0lNIHNjaGVtYSBJRHMg YW5kIEpTT04gcmVwcmVzZW50YXRpb24NCg0KSGkgUGhpbCwNCg0KTm90IHN1cmUgd2hhdCB5b3Ug bWVhbiBieSBleGFtcGxlcy4gIE15IGNvbmNlcm4gaXMgdGhhdCBpbiB0aGUgc2NoZW1hIGRvYywg c2VjdGlvbiA4LjcgcHJvdmlkZXMgc2NoZW1hIHJlcHJlc2VudGF0aW9uIGZvciBjb3JlIHVzZXIv Z3JvdXAgYW5kIGVudGVycHJpc2UgdXNlci4gIFdoYXQgYWJvdXQgYWxsIHRoZSBvdGhlciBzY2hl bWFzIHdlIHJlZmVyZW5jZT8gIFdlIHNob3VsZCBwcm92aWRlIHNjaGVtYSByZXByZXNlbnRhdGlv biBmb3IgZXZlcnkgc2NoZW1hIGRlZmluZWQgaW4gdGhlIHNwZWMuICBFdmVyeW9uZSBpbXBsZW1l bnRpbmcgdGhpcyBzcGVjIHdpbGwgbmVlZCB0aGVtLiAgV2h5IHByb3ZpZGUganVzdCB0aHJlZSBh bmQgbGVhdmUgdGhlIHJlc3QgdXAgdG8gZ3Vlc3Mgd29yaz8gIEV2ZXJ5IGltcGxlbWVudGF0aW9u IG5lZWRzIHRvIGRvIHZhbGlkYXRpb24sIGV2ZXJ5IHZhbGlkYXRpb24gbmVlZHMgYSBzY2hlbWEg dG8gdmFsaWRhdGUgYWdhaW5zdC4gIFNvIG15IGNvbmNlcm4gaXMgdHdvZm9sZC4gIEZpcnN0LCB3 ZSByZWZlcmVuY2UgYSBidW5jaCBvZiBzY2hlbWFzIHRoYXQgZXZlcnlvbmUgbmVlZHMsIGJ1dCB3 ZSBkb27igJl0IHByb3ZpZGUgdGhlbS4gIFNlY29uZCwgc29tZSBvZiB0aGUgc2NoZW1hcyB3ZSBy ZWZlcmVuY2UgKHN1Y2ggYXMgcGF0Y2hPcCkgY2Fubm90IGJlIHJlcHJlc2VudGVkIGluIEpTT04g dXNpbmcgb3VyIG93biBkZWZpbml0aW9ucy4NCg0KSeKAmW0gY2VydGFpbmx5IE9LIHdpdGggYW4g YXBwZW5kaXggaW4gdGhlIGFwaSBkb2MgZm9yIG1lc3NhZ2Ugc2NoZW1hcyBhbmQgYW4gYXBwZW5k aXggaW4gdGhlIHNjaGVtYSBkb2MgZm9yIGFsbCBvZiB0aGUgZW50aXR5IHNjaGVtYXMuICBNeSBw b2ludCBpcyBhbGwgdGhlc2Ugc2NoZW1hcyBzaG91bGQgZXhpc3QuICBXZSByZWZlcmVuY2UgdGhl bSwgd2UgZGVzY3JpYmUgdGhlbSwgYnV0IHdlIG9ubHkgcHJvdmlkZSB0aHJlZSBvZiB0aGVtLiAg SXQganVzdCBzZWVtcyB3cm9uZyB0byBtZSAocGVyaGFwcyBteSBvd24gc2hvcnRjb21pbmcpIGJ1 dCB3ZeKAmXJlIGFza2luZyBwZW9wbGUgdG8gaW1wbGVtZW50IFNDSU0gcGF0Y2gsIHVzaW5nIGEg U0NJTSBzY2hlbWEgZGVmaW5lZCByZXF1ZXN0LCB0aGF0IHdlIGRvIG5vdCBwcm92aWRlLCBhbmQg Y2Fubm90IGRlZmluZSB1c2luZyBydWxlcyB3ZSBzZXQgZm9ydGggaW4gc2VjdGlvbiA3IG9mIHRo ZSBzY2hlbWEgZG9jLg0KDQoNClNvIGJvdHRvbSBsaW5lLCBhbGwgSeKAmW0gcmVxdWVzdGluZyBp cyB0aGUgSlNPTiByZXByZXNlbnRhdGlvbiBvZiB0aGUgU0NJTSBzY2hlbWFzIHdlIHJlZmVyZW5j ZS4NCg0KDQoNClRoaXMgaXMgYSBTQ0lNIHNjaGVtYSByZWZlcmVuY2UsIOKAnCB1cm46aWV0Zjpw YXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOlBhdGNoT3DigJwsIEkgZmVlbCB3ZSBzaG91bGQg cHJvdmlkZSB0aGUgSlNPTiByZXByZXNlbnRhdGlvbiBmb3IgaXQuICBJZiB3ZSBjYW7igJl0IGRv IGl0LCBub2JvZHkgaW1wbGVtZW50aW5nIHRoZSBzcGVjIGNhbiBlaXRoZXIuICBBbGwgb2YgdGhl IHNjaGVtYXMgd2UgcmVmZXJlbmNlIHNob3VsZCBiZSBwcm92aWRlZCB1c2luZyBvdXIgb3duIGRl ZmluaXRpb25zIHNldCBkb3duIGluIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIHJmYyAob3IgZW5o YW5jZWQgaW4gdGhlIGFwaSBkb2MsIHVzaW5nIHNlY3Rpb24gNyBhcyBhIGJhc2UpLiAgRnJhbmts eSwgSeKAmW0gZHJlYWRpbmcgdGhlIG91dGNvbWUgb2YgYWxsIHRoaXMgYmVjYXVzZSBJ4oCZdmUg YWxyZWFkeSBzcGVudCBhIGNvdXBsZSBvZiBtb250aHMgaW1wbGVtZW50aW5nIHBhdGNoIGluIGl0 cyBjdXJyZW50IGZvcm0gd2l0aCBvdmVyIDE1MCB1bml0IHRlc3RzIHRvIGNvbmZpcm0gaXQgZG9l cyB3aGF0IEkgdGhpbmsgdGhlIHNwZWMgcmVxdWlyZXMuICBCdXQgc2V2ZXJhbCBvZiBteSBwZWVy cyBoYXZlIGNvbWUgdG8gbWUgYW5kIGFza2VkIGZvciB0aGVzZSBzY2hlbWEgZGVmaW5pdGlvbnMg KGluIEpTT04pIGFuZCBhIGNvdXBsZSBoYXZlIHBvaW50ZWQgb3V0IHRoYXQgdGhlIHBhdGNoIHJl cXVlc3Qgc2NoZW1hLCDigJwgdXJuOmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpQ YXRjaE9w4oCcLCBjYW5ub3QgYmUgcmVwcmVzZW50ZWQgdXNpbmcgc2VjdGlvbiA3IHJ1bGVzIGFu ZCB0aGF0IHdlIGNhbm5vdCBkbyB1cGZyb250IHZhbGlkYXRpb24gb24gcGF0Y2ggcmVxdWVzdHMg dGhlIHdheSB3ZSBkbyBhbGwgb3RoZXIgU0NJTSByZXF1ZXN0cy4gIEFuZCBpdOKAmXMgdHJ1ZSwg d2UgY2Fubm90IGRvIGFuIHVwZnJvbnQgdmFsaWRhdGlvbiBvZiBwYXRjaCBhZnRlciBpdOKAmXMg cGFyc2VkIHRoZSB3YXkgd2UgY2FuIGFsbCBvdGhlciByZXF1ZXN0cy4gIFNpbXBsZSBhdHRyaWJ1 dGUgdmFsaWRhdGlvbiBpcyBpbXBvc3NpYmxlIGJlY2F1c2Ug4oCcdmFsdWXigJ0gZGVwZW5kcyBv biB0aGUgdGFyZ2V0IG9mIOKAnHBhdGjigJ0sIGFuZCB0aGVyZWZvcmUg4oCcdmFsdWXigJ0gY2Fu bm90IGJlIGRlZmluZWQgaW4gYSBKU09OIHNjaGVtYSB1c2luZyBzZWN0aW9uIDcgb2YgdGhlIHNj aGVtYSBkb2MuDQoNCg0KDQpFdmVuIGlmIHdlIGNhbuKAmXQgZml4IHBhdGNoLCBmb3Igd2hhdGV2 ZXIgcmVhc29uLCB3ZSBzaG91bGQgcHJvdmlkZSB0aGUgcmVzdCBvZiB0aGUgc2NoZW1hcywgcmVw cmVzZW50ZWQgaW4gSlNPTiBmb3JtYXQsIGZvciBib3RoIGRvY3MuDQoNCg0KDQotbXJmDQoNCkZy b206IFBoaWwgSHVudA0KU2VudDogVGh1cnNkYXksIEZlYnJ1YXJ5IDEyLCAyMDE1IDEyOjU4IFBN DQpUbzogTWljaGFlbCBGcm9zdA0KQ2M6IHNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5v cmc+DQpTdWJqZWN0OiBSZTogW3NjaW1dIFNDSU0gc2NoZW1hIElEcyBhbmQgSlNPTiByZXByZXNl bnRhdGlvbg0KDQpNaWNoYWVsLA0KDQpDYW4geW91IHByb3ZpZGUgZXhhbXBsZXM/DQoNClRoZSBz Y2hlbWEgaW4gdGhlIEFQSSBoYXMgdG8gZXh0ZW5kIHRoZSByZWdpc3RyeSBkZWZpbmUgaW4gY29y ZS4gICBBcyBlZGl0b3IgSSB0aGluayBpdCB3b3VsZCBiZSBldmVuIG1vcmUgY29uZnVzaW5nIHRv IG1peCBkYXRhIHNjaGVtYSBhbmQgcmVxdWVzdCBzY2hlbWEgaW4gYSBzaW5nbGUgZG9jdW1lbnQu IEl0IGFsc28gYmVjb21lcyBwcm9ibGVtYXRpYyB3aGVuIHNwZWNzIGNyb3NzIHJlZmVyZW5jZSBl YWNoIG90aGVyLiBJbnN0ZWFkIHRoZSBkb2N1bWVudCBsYXlvdXQgaXMgc3VjaCB0aGF0IEFQSSBi dWlsZHMgb24gY29yZSBzY2hlbWEuDQoNClRoZSBmb3JtYXQgaW4gUEFUQ0ggY29tZXMgZnJvbSB0 aGUgSlNPTiBQYXRjaCBSRkMuDQoNClBoaWwNCg0KT24gRmViIDEyLCAyMDE1LCBhdCAxMjo0Niwg TWljaGFlbCBGcm9zdCA8bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPG1haWx0bzptaWNoYWVsLmZy b3N0QG9yYWNsZS5jb20+PiB3cm90ZToNCg0KLjA6UmVzb3VyY2VUeXBlDQoNCnVybjppZXRmOnBh cmFtczpzY2ltOnNjaGVtYXM6Y29yZToyDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0Kc2NpbSBtYWlsaW5nIGxpc3QNCnNjaW1AaWV0Zi5vcmc8bWFpbHRv OnNjaW1AaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Nj aW0NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNj aW0gbWFpbGluZyBsaXN0DQpzY2ltQGlldGYub3JnPG1haWx0bzpzY2ltQGlldGYub3JnPg0KaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2ltDQoNCg== --_000_BN1PR04MB392C51FF48493E67D5ED600E2170BN1PR04MB392namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJ cGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtG b2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCnAuTXNvQWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2Lk1zb0FjZXRh dGUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRl eHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLmFw cGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQtc3Bh Y2U7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQ cmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1s aW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5h cHBsZS1zdHlsZS1zcGFuDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLXN0eWxlLXNwYW47fQ0Kc3Bh bi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uQmFs bG9vblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJbXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRleHQiOw0KCWZv bnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28t c3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRT ZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4g MS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0 eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRp dCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVk aXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hl YWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkJvdGggeW91IGFuZCBQaGls4oCZcyBzdWdn ZXN0aW9ucyBtYWtlIHNlbnNlIHRvIG1lLiZuYnNwOyBKdXN0IHdhbnRlZCB0byB0aHJvdyBpdCBv dXQgdGhlcmUgZm9yIGRpc2N1c3Npb24gYmVmb3JlIHdlIGdvIGRvd24gYSBjZXJ0YWluIHJvdXRl LiZuYnNwOyBNeSBtaW5kIGhhcyBiZWVuIGVhc2VkDQogbm93LiA7KTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 OyI+IEVyaWsgV2FobHN0csO2bSBuZVh1cyBbbWFpbHRvOmVyaWsud2FobHN0cm9tQG5leHVzZ3Jv dXAuY29tXQ0KPGJyPg0KPGI+U2VudDo8L2I+IFdlZG5lc2RheSwgRmVicnVhcnkgMjUsIDIwMTUg MTowNiBBTTxicj4NCjxiPlRvOjwvYj4gUGhpbCBIdW50PGJyPg0KPGI+Q2M6PC9iPiBLZWxseSBH cml6emxlOyBTQ0lNIFdHPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc2NpbV0gUEFUQ0ggYW5k IHNjaGVtYSAod2FzOiBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50YXRpb24pPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGksIDxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIEFQSSBkcmFmdCBkb27i gJl0IG1lbnRpb24gZXh0ZW5zaW9uICh0byB0aGUgQVBJKSBhbnl3aGVyZS4gSSB0aGluayBhIGJy YW5kIG5ldyBlbmRwb2ludHMgdGhhdCBzdXBwb3J0cyBwYWdpbmdUb2tlbiBpcyBtb3JlIGluIGxp bmUgd2l0aCB0aGUgc3BlY2lmaWNhdGlvbi4gVGhhdCBhbHNvIG1ha2VzIGRpc2NvdmVyIHVzaW5n IHRoZSBTZXJ2aWNlUHJvdmlkZXJDb25maWcgZW5kcG9pbnQgbW9yZSBhY2N1cmF0ZS4NCiBJc27i gJl0IGl0IGJldHRlciB0byBhZGQgYW4gZXh0ZW5zaW9uIHRoZXJlIHRoYXQgYW5ub3VuY2UgdGhh dCB0aGUgc2VydmVyIGFsc28gc3VwcG9ydHMgb3RoZXIgZW5kcG9pbnRzPzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5MaWtlIHRoaXM6PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj57 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDsgJm5ic3A7ICZxdW90O3NjaGVtYXMmcXVvdDs6IFs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZxdW90O3Vy bjppZXRmOnBhcmFtczpzY2ltOnNjaGVtYXM6Y29yZToyLjA6U2VydmljZVByb3ZpZGVyQ29uZmln 4oCdLCZuYnNwOzxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij51cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlvbiZxdW90 Ozwvc3Bhbj48L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDsgJm5ic3A7IF0sPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7ICZxdW90O2RvY3VtZW50YXRpb25Vcmwm cXVvdDs6JnF1b3Q7PGEgaHJlZj0iaHR0cDovL2V4YW1wbGUuY29tL2hlbHAvc2NpbS5odG1sIj5o dHRwOi8vZXhhbXBsZS5jb20vaGVscC9zY2ltLmh0bWw8L2E+JnF1b3Q7LDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwOyAmcXVv dDtwYXRjaCZxdW90OzogezxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJnF1b3Q7c3VwcG9ydGVkJnF1b3Q7OnRy dWU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZu YnNwOyAmbmJzcDsgfSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJnF1b3Q7YnVsayZxdW90OzogezxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwOyAmbmJz cDsgJnF1b3Q7c3VwcG9ydGVkJnF1b3Q7OnRydWUsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmcXVvdDttYXhP cGVyYXRpb25zJnF1b3Q7OjEwMDAsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmcXVvdDttYXhQYXlsb2FkU2l6 ZSZxdW90OzoxMDQ4NTc2PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7IH08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZxdW90O3Vybjpzb21l LWV4dGVuc2lvbjpwYWdpbmF0aW9uJnF1b3Q7OiZuYnNwO3s8YnI+DQombmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDvigJxmaWx0ZXJXaXRoTmV3VG9rZW5FbmRwb2ludCZxdW90Ozog4oCcdHJ1ZSZx dW90OzwvYj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj4m bmJzcDsgJm5ic3A7ICZuYnNwO30sPC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwOyDigKYuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7IOKApi48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpBbmQgdGhl biB0aGUgc2VydmljZSBwcm92aWRlciBhbHNvIGhhdmUgc3VwcG9ydCBmb3IgdGhlIG5ldyAvdjIv VXNlcnNXaXRoRXh0cmFCZWxsc0VuZFdpc3RsZXNFbmRwb2ludDxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4vIEVyaWs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1i b3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIDI1IEZlYiAyMDE1 LCBhdCAwMDo1MiwgUGhpbCBIdW50ICZsdDs8YSBocmVmPSJtYWlsdG86cGhpbC5odW50QG9yYWNs ZS5jb20iPnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPk5v cm1hbGx5LCBJIHdvdWxkIGV4cGVjdCB0aGF0IHdvdWxkIGJlIGhhbmRsZWQgYnkgYSBuZXcgZXh0 ZW5zaW9uIGRyYWZ0IGFuZCByZWdpc3RlcmVkIGFwcHJvcHJpYXRlbHkgd2l0aCBJQU5BLiBJIHN0 aWxsIGhhdmUgdG8gcmVzZWFyY2ggdGhlIGltcGxpY2F0aW9ucyBvbiByZWdpc3RyeSBoYW5kbGlu Zw0KIGJ1dCBJIHRoaW5rIHRoaXMgc2hvdWxkIGJlIGRvLWFibGUuJm5ic3A7QXMgd2l0aCB5b3Vy IGV4YW1wbGUgZXh0ZW5zaW9uIGZvciBwYWdpbmcsIHRoZXJl4oCZcyBub3RoaW5nIHNheWluZyB3 ZSBjYW7igJl0IGZvbGxvdyB0aGUgc2FtZSBleHRlbnNpb24gdGVjaG5pcXVlIGluIG91ciBKU09O Ljwvc3Bhbj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDsiPklmIEkgcm9sbCB5b3VyIHN1Z2dlc3Rpb24gdG9nZXRoZXIgd2l0aCBFcmlr4oCZ cyBwcm9wb3NhbCB3ZSB3b3VsZCBoYXZlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4mbmJzcDsgezwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsgJm5ic3A7ICZuYnNwOyZxdW90OzxiPm1zZ1R5cGU8L2I+JnF1b3Q7OlsmcXVvdDt1cm46 aWV0ZjpwYXJhbXM6c2NpbTphcGk6bWVzc2FnZXM6Mi4wOkxpc3RSZXNwb25zZSZxdW90Oyw8c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+JnF1b3Q7dXJu OnNvbWUtZXh0ZW5zaW9uOnBhZ2luYXRpb24mcXVvdDs8L2I+XSw8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVh ay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90 O3RvdGFsUmVzdWx0cyZxdW90OzoyLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7UmVzb3VyY2VzJnF1b3Q7 Ols8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPGI+JnF1b3Q7c2NoZW1h cyZxdW90OzogWyZxdW90O3VybjppZXRmOnBhcmFtczpzY2ltOnNjaGVtYXM6Y29yZToyLjA6VXNl cjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+4oCdPC9zcGFuPl08L2I+LDxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyDigJxpZCZxdW90OyA6ICZsdDtzb21lLWlkLWEmZ3Q7 LDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O3VzZXJOYW1lJnF1 b3Q7OiZxdW90O2JqZW5zZW4mcXVvdDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlz Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH0sPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cHJl IHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8Yj4mcXVvdDtzY2hlbWFzJnF1b3Q7OiBbJnF1b3Q7 dXJuOmlldGY6cGFyYW1zOnNjaW06c2NoZW1hczpjb3JlOjIuMDpVc2VyPC9iPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0Ij7igJ08L3NwYW4+XTwvYj4sPG86cD48L286cD48L3ByZT4N CjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IOKAnGlkJnF1b3Q7IDogJmx0O3NvbWUtaWQtYiZndDssPG86cD48L286cD48L3Nw YW4+PC9wcmU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InBhZ2UtYnJlYWst YmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmcXVvdDt1c2VyTmFtZSZxdW90OzomcXVvdDtqc21pdGgmcXVvdDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH08L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3 YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IF0sPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InBhZ2Ut YnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48Yj4mcXVvdDt1 cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlvbiZxdW90Ozo8L2I+PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPns8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZv cmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZxdW90O3BhZ2luZ1Rva2VuJnF1b3Q7OiAmcXVvdDs4OTgyamFrODRqLm5rZDgmcXVvdDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IH08L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7IH08L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Ob3RpY2Ug dGhhdCBpbnNpZGUgZWFjaCDigJxSZXNvdXJjZXPigJ0gYXJyYXkgZWxlbWVudCBpcyBhIHJlc291 cmNlIG9iamVjdCB3aXRoIGl0cyBkYXRhIHNjaGVtYSByZWZlcmVuY2UgaW5jbHVkZWQuICZuYnNw O0Fsc28sIHNpbmNlIGlkIGlzIGFsd2F5cyByZXR1cm5lZCwgaXQgd291bGQgYWxzbyBiZSBwcmVz ZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDsiPkJ5IHVzaW5nIOKAnG1zZ1R5cGXigJ0sIHdlIGFyZSBjbGVhcmx5 IHNlcGFyYXRpbmcgd2hhdCBpcyByZXF1ZXN0IG9yIHJlc3BvbnNlIG1ldGFkYXRhIGNvbnRlbnQg YXMgZGlzdGluY3QgZnJvbSByZXNvdXJjZSBzY2hlbWEgKHdoaWNoIGhhcyBzdGF0ZSkuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90OyI+UGhpbDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkBpbmRlcGVuZGVudGlkPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+PGEgaHJlZj0iaHR0cDovL3d3dy5pbmRlcGVuZGVudGlkLmNvbS8i PjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnd3dy5pbmRlcGVuZGVudGlkLmNvbTwvc3Bhbj48 L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxhIGhyZWY9Im1haWx0bzpwaGls Lmh1bnRAb3JhY2xlLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+cGhpbC5odW50QG9y YWNsZS5jb208L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5PbiBGZWIgMjQsIDIwMTUsIGF0IDM6 MTMgUE0sIEtlbGx5IEdyaXp6bGUgJmx0OzxhIGhyZWY9Im1haWx0bzprZWxseS5ncml6emxlQHNh aWxwb2ludC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmtlbGx5LmdyaXp6bGVAc2Fp bHBvaW50LmNvbTwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5SaWdodC4mbmJzcDsgTXkgdGhpbmtpbmcgd2FzIG1vcmUgYXJvdW5kIHRoZSBMaXN0UmVzcG9u c2UgaXRzZWxmIGJlaW5nIGV4dGVuZGVkIHJhdGhlciB0aGFuIHRoZSBjb250YWluZWQgcmVzb3Vy Y2Ugb2JqZWN0cy4mbmJzcDsgRm9yIGV4YW1wbGU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsmbmJzcDsgezwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7c2NoZW1hcyZxdW90OzpbJnF1b3Q7dXJu OmlldGY6cGFyYW1zOnNjaW06YXBpOm1lc3NhZ2VzOjIuMDpMaXN0UmVzcG9uc2UmcXVvdDssICZx dW90O3Vybjpzb21lLWV4dGVuc2lvbjpwYWdpbmF0aW9uJnF1b3Q7XSw8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1i cmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZx dW90O3RvdGFsUmVzdWx0cyZxdW90OzoyLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdh eXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7UmVzb3VyY2VzJnF1 b3Q7Ols8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZv cmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7ICZxdW90O3VzZXJOYW1lJnF1b3Q7OiZxdW90O2JqZW5zZW4mcXVvdDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH0sPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5 cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmcXVvdDt1c2VyTmFtZSZxdW90OzomcXVv dDtqc21pdGgmcXVvdDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH08L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1i cmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IF0s PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyAmcXVvdDt1cm46c29tZS1leHRlbnNpb246cGFnaW5hdGlvbiZxdW90Ozog ezwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7cGFnaW5nVG9rZW4mcXVvdDs6ICZxdW90 Ozg5ODJqYWs4NGoubmtkOCZxdW90Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfTwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFr LWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgfTwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+QWdhaW4g4oCmIEnigJltIG5vdCBldmVuIHN1cmUgaWYgdGhpcyBpcyBzb21ldGhp bmcgdGhhdCBhbnlvbmUgd291bGQgd2FudCB0byBkbyBvciBpZiBpdCBzaG91bGQgYmUgc3VwcG9y dGVkIGluIHRoaXMgd2F5LiZuYnNwOyBJIGp1c3Qgd2FudGVkIHRvIGJyaW5nIGl0IHVwLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNC NUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90OyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ c2NpbQ0KIFs8YSBocmVmPSJtYWlsdG86c2NpbS1ib3VuY2VzQGlldGYub3JnIj48c3BhbiBzdHls ZT0iY29sb3I6cHVycGxlIj5tYWlsdG86c2NpbS1ib3VuY2VzQGlldGYub3JnPC9zcGFuPjwvYT5d PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiPk9uIEJl aGFsZiBPZjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L2I+UGhpbCBIdW50PGJyPg0KPGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlR1ZXNkYXksIEZlYnJ1YXJ5IDI0LCAyMDE1IDU6MDMgUE08 YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPktlbGx5IEdyaXp6bGU8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlNDSU0gV0c7IEVyaWsgV2FobHN0csO2bSBuZVh1 czxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj5SZTogW3NjaW1dIFBBVENIIGFuZCBzY2hlbWEgKHdhczogU0NJTSBzY2hl bWEgSURzIGFuZCBKU09OIHJlcHJlc2VudGF0aW9uKTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5JIGJlbGlldmUgd2UgYXJlIG9rIG9uIHRoaXMuIFdlIGhhdmUgcHJldHR5IGdvb2Qgc2VwYXJh dGlvbi4gRm9yIGV4YW1wbGUgTGlzdCByZXNwb25zZSBkb2VzIGNvbnRhaW4ganNvbiBvYmplY3Rz IHRoYXQgaGF2ZSByZXNvdXJjZSBzcGVjaWZpYyBzY2hlbWFzLiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5FLmcuIFRoZSBvdXRlciBqc29uIG9iamVjdCB3b3VsZCBoYXZlIGEgbXNn VHlwZSBvZiBMaXN0UmVzcG9uc2Ugd2hpbGUgdGhlIGFycmF5IG9mIHJlc3VsdCBvYmplY3RzIGVh Y2ggY29udGFpbnMgYSByZXNvdXJjZSBlYWNoIHdpdGggaXRzIG93biBzY2hlbWFzIGF0dHJpYnV0 ZS4mbmJzcDs8YnI+DQo8YnI+DQpQaGlsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+ PGJyPg0KT24gRmViIDI0LCAyMDE1LCBhdCAxNDozMSwgS2VsbHkgR3JpenpsZSAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmtlbGx5LmdyaXp6bGVAc2FpbHBvaW50LmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9y OnB1cnBsZSI+a2VsbHkuZ3JpenpsZUBzYWlscG9pbnQuY29tPC9zcGFuPjwvYT4mZ3Q7IHdyb3Rl OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPk9uZSB0aGlu ZyB0aGF0IGlzIG5pY2UgYWJvdXQg4oCcc2NoZW1hc+KAnSBpcyB0aGF0IGl0IGdpdmVzIHVzIGEg d2F5IHRvIGV4dGVuZCBhIHJlc291cmNlIChvciB0aGUgcmVwcmVzZW50YXRpb24gb2YgYSByZXNv dXJjZSkuJm5ic3A7IEJ5IG1vdmluZyBvdXIgbWVzc2FnZXMgdG8gdXNlDQogbXNnVHlwZSBpbnN0 ZWFkIG9mIHNjaGVtYXMsIHdlIG1pZ2h0IGxvc2Ugc29tZSBvZiB0aGlzIGZsZXhpYmlsaXR5LiZu YnNwOyBJ4oCZbSBub3Qgc3VyZSB0aGF0IHdlIHdvdWxkIHdhbnQgaXQgb3Igbm90LCBidXQgSSBj YW4gZW52aXNpb24gYSBMaXN0UmVzcG9uc2UgZnJvbSBhIHNlcnZlciB0aGF0IHJldHVybnMgYSDi gJxwYWdpbmcgdG9rZW7igJ0gYWxvbmcgd2l0aCB0aGUgY3VycmVudCBwYWdlIG51bWJlciwgZXRj 4oCmJm5ic3A7IFRoaXMgY291bGQgcG90ZW50aWFsbHkgYmUNCiBwdXQgaW50byBhbiBleHRlbnNp b24uJm5ic3A7IEp1c3Qgc29tZXRoaW5nIHRvIGNvbnNpZGVy4oCmPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj4tLUtlbGx5PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAx LjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtU YWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5zY2ltDQog WzxhIGhyZWY9Im1haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xv cjpwdXJwbGUiPm1haWx0bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPl08c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24gQmVoYWxmIE9m PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5QaGls IEh1bnQ8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+VHVlc2RheSwgRmVicnVhcnkgMjQsIDIwMTUgMTI6MDEgUE08YnI+DQo8 Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PkVyaWsgV2FobHN0csO2bSBuZVh1czxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+U0NJTSBXRzxicj4NCjxiPlN1YmplY3Q6PC9i PjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3Nj aW1dIFBBVENIIGFuZCBzY2hlbWEgKHdhczogU0NJTSBzY2hlbWEgSURzIGFuZCBKU09OIHJlcHJl c2VudGF0aW9uKTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkVyaWs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFn cmVlZC4gSSB0aGluayB0aGlzIG1ha2VzIHNlbnNlIGFuZCBpcyBhIGdvb2QgY29tcHJvbWlzZS4g VGhpcyByZWZsZWN0cyB3aGF0IHdlIGRpc2N1c3NlZCBvbiBvdXIgaW5mb3JtYWwgY2FsbCBsYXN0 IHdlZWsuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFueSBvdGhlciBjb21tZW50cz88bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij5QaGlsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+QGluZGVw ZW5kZW50aWQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48 YSBocmVmPSJodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tLyI+PHNwYW4gc3R5bGU9ImNvbG9y OnB1cnBsZSI+d3d3LmluZGVwZW5kZW50aWQuY29tPC9zcGFuPjwvYT48L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ij48YSBocmVmPSJtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20iPjxz cGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnBoaWwuaHVudEBvcmFjbGUuY29tPC9zcGFuPjwvYT48 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxi bG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBGZWIgMjQsIDIwMTUsIGF0IDE6 NDMgQU0sIEVyaWsgV2FobHN0csO2bSBuZVh1cyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVyaWsud2Fo bHN0cm9tQG5leHVzZ3JvdXAuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5lcmlrLndh aGxzdHJvbUBuZXh1c2dyb3VwLmNvbTwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+SGksPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYWdy ZWVkIHRoYXQgdGhlcmUgYXJlIHNvbWUgaW5jb25zaXN0ZW5jeSBhbmQgcGhpbG9zb3BoaWNhbCBp c3N1ZXMgcHJlc2VudCBpbiB0aGUgc3BlY2lmaWNhdGlvbnMgdGhhdCBwcm9iYWJseSBuZWVkIGFk ZHJlc3NpbmcuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkkgdGhpbmsgd2Ugc2hvdWxkIG1ha2UgZGlmZmVyZW5jZXMgdG8gdGhlIFJlc291cmNl cyBhbmQgbWVzc2FnZXMsIGFuZCB3ZSBuZWVkIHNvbWUgY2hhbmdlcyB0byB0aGUgc2NoZW1hIGFu ZCB0aGUgYXBpIGRyYWZ0cyB0byBtYWtlIHRoYXQgY2xlYXIuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPlRoZSBSZXNvdXJjZXMgcmVxdWlyZXMgZml4ZWQgc2NoZW1hcywgdGhlIG1lc3NhZ2Vz IG5vdCBzbyBtdWNoLiBTY2hlbWFzIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIHB1cnBvc2Ug b2YgYWxsb3dpbmcgYSBjbGllbnQgdG8gdW5kZXJzdGFuZCB3aGF0IGF0dHJpYnV0ZXMgYW5kIGFz c29jaWF0ZWQgbWV0YWRhdGEgKHJlYWRhYmlsaXR5LCBtdXRhYmlsaXR5LCB0eXBlLCBldGMpIGlz IHN1cHBvcnRlZCBieSBhDQogcGFydGljdWxhciBzZXJ2aWNlIHByb3ZpZGVyLiBEaXNyZWdhcmRp bmcgb24gdGhlIGN1cnJlbnRseSB1c2VkIGJlYXJlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+VGhlIG1lc3NhZ2UgZG9u4oCZdCBuZWVkIHRvIGJlIHZhbGlkYXRlZCBhY2NvcmRpbmcgdG8g YSBzY2hlbWEuIFNDSU0gZm9sbG93cyB0aGUgUm9idXN0bmVzcyBQcmluY2lwYWwgKEpvbiBQb3N0 ZWzigJlzIGxhdyAtIG9uZSBvZiB0aGUgZm91bmRpbmcgcHJpbmNpcGxlcyBvZiBUQ1AvSVApLiBU aGlzIG1lYW5zIHRoYXQgbWVzc2FnZSBzaG91bGQgbm90IG5lZWQgdG8gY29tcGx5IHdpdGggc2No ZW1hIGluIG9yZGVyIHRvDQogYmUgaW50ZXJwcmV0ZWQgKHdpdGhpbiByZWFzb24pIGJ5IGEgc2Vy dmljZSBwcm92aWRlci4gJm5ic3A7SW4gcHJhY3RpY2FsIHRlcm1zLCBhIFNDSU0gY2xpZW50IHNo b3VsZCBuZXZlciBoYXZlIHRvIGRvIGEgbG90IG9mIHdvcmsgdG8gY3JlYXRlIG9yIHNlYXJjaCBm b3IgYSBVc2VyLiBBdCB0aGUgc2FtZSB0aW1lLCBhIHNlcnZpY2UgcHJvdmlkZXIgaXMgbm90IG9i bGlnZWQgdG8gYWNjZXB0IGEgbmV3IFVzZXIgKmV4YWN0bHkqIGFzIHRoZSBjbGllbnQNCiBzcGVj aWZpZXMuIFRoZSBzZXJ2aWNlIHByb3ZpZGVyIGlzIGFsd2F5cyBmcmVlIHRvIGludGVycHJldCBh bmQgY2hhbmdlIGRhdGEuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1lc3NhZ2VzIGlzIHBh cnQgb2YgdGhlIEFQSSBkcmFmdCwgYW5kIFJlc291cmNlcyBhbmQgdGhlcmUgc2NoZW1hcyBpcyBh IHBhcnQgb2YgdGhlIFNjaGVtYSBkcmFmdC4gV2Ugc2hvdWxkIG5vdCBtaXggdGhlbSB0byBtdWNo IGFuZCBtYWtlIGl0IGNsZWFyIGluIHRoZSBzcGVjIHRoYXQgaXMgYWxzbyB0aGUgY2FzZS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB0aGluayB0aGF0IHRoZSBSZXNvdXJjZXMgdGhhdCB3 ZSBoYXZlIHRvZGF5LCBTY2hlbWEsIFJlc291cmNlVHlwZXMgYW5kIFNlcnZpY2VQcm92aWRlckNv bmZpZ3MgTVVTVCBiZSBhZGRlZCB0byB0aGUgL1NjaGVtYXMgZW5kcG9pbnQuIFdlIHNob3VsZCBh bHNvIGFkZCBTY2hlbWEsIFJlc291cmNlVHlwZXMgYW5kIFNlcnZpY2VQcm92aWRlckNvbmZpZ3Mg dG8gdGhlIHNlY3Rpb24gJnF1b3Q7OC43IFNjaGVtYSBSZXByZXNlbnRhdGlvbuKAnQ0KIGluIHRo ZSBzY2hlbWEgc3BlYy4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QSBzZWNvbmQg aW1wb3J0YW50IGNoYW5nZSB0byBtYWtlIGl0IGNsZWFyIHRoYXQgbWVzc2FnZXMgYXJlIG1lc3Nh Z2VzLCBpcyB0byByZW1vdmUgdGhlIHNjaGVtYSBhdHRyaWJ1dGUgb24gb2Ygb2YgdGhlIG1lc3Nh Z2VzLiBUaGV5IHdoZXJlIGFkZGVkIHJhdGhlciBsYXRlIGluIHRoZSBzcGVjLXdyaXRpbmcgcHJv Y2VzcyB0byBnaXZlIGEgbm90aW9uIHRvIHRoZSBzZXJ2aWNlIHByb3ZpZGVyIHdoYXQga2luZA0K IG9mIG1lc3NhZ2UgdGhhdOKAmXMgY3VycmVudGx5IHNlbnQuIFRoZSBpbnRlbnRpb24gd2FzIG5v dCB0byBmb3JjZSB0aGUgU1AgdG8gdmFsaWRhdGUgdGhlIG1lc3NhZ2VzIGFnYWluc3QgYSBzY2hl bWEuIEkgc3VnZ2VzdCB0aGF0IHdlIHJlbW92ZSB0aGUg4oCcc2NoZW1hcyZxdW90OyBhdHRyaWJ1 dGUgaW4gbWVzc2FnZXMgYW5kIHJlcGxhY2VzIGl0IHdpdGggYSDigJxtc2dUeXBl4oCdIHRoYXQg Y291bGQgaW5kaWNhdGUgd2hhdCBtZXNzYWdlIGl0IGlzIChQYXRjaE9wDQogb3IgTGlzdFJlc3Bv bnNlKS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LyBFcmlrPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPk9uIDEzIEZlYiAyMDE1LCBhdCAyMjowOCwgUGhpbCBIdW50ICZsdDs8YSBo cmVmPSJtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJw bGUiPnBoaWwuaHVudEBvcmFjbGUuY29tPC9zcGFuPjwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5XaXRoIHRoZSBwYXRjaCBvcGVyYXRpb24s IHRoZSBjb250ZW50cyBvZiDigJx2YWx1ZeKAnSBpcyBjdXJyZW50bHkgZHJpdmVuIGJ5IHRoZSDi gJxwYXRo4oCdIGF0dHJpYnV0ZS4gJm5ic3A7SW4gb3RoZXIgd29yZHMgaW4gYSBub3JtYWwgSlNP TiBzdHJ1Y3R1cmUsIHRoZSBQYXRjaCBwYXRoIGF0dHJpYnV0ZSBkZXNjcmliZXMNCiB0aGUgbGVm dCBoYWxmIG9mIGEgbmFtZSB2YWx1ZSBwYWlyLCBhbmQgdGhlIOKAnHZhbHVl4oCdIGRlc2NyaWJl cyB0aGUgcmlnaHQgaGFsZi48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+U28g aWYg4oCccGF0aCZxdW90OyBwb2ludHMgdG8gYSBjb21wbGV4IGF0dHJpYnV0ZSwgdGhlbiDigJx2 YWx1ZeKAnSBNVVNUIGJlIGEgSlNPTiBvYmplY3Qgb2Ygb25lIG9yIG1vcmUgc3ViLWF0dHJpYnV0 ZXMuICZuYnNwO0lmIHBhdGggZGVzY3JpYmVzIGEgc2ltcGxlIGF0dHJpYnV0ZSwgdGhhbiB0aGUg Y29ycmVzcG9uZGluZw0KIHZhbHVlIG11c3QgYmUgYSBib29sZWFuLCBzdHJpbmcgZGVwZW5kaW5n IG9uIHRoZSBzY2hlbWEgb2YgdGhlIGF0dHJpYnV0ZSBkZXNjcmliZWQgYnkg4oCccGF0aOKAnS48 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5TQ0lNIHBhdGNoIGlz IGJhc2VkIG9uIGFuZCBmb2xsb3dzIHRoZSBzYW1lIGRlc2lnbiBhcyBmb3IgUkZDNjkwMiAoSlNP TiBQYXRjaCkuIFRoZSBvbmx5IGRpZmZlcmVuY2UgaXMgd2UgZGVjaWRlZCB0byBsaW1pdCB0aGUg bnVtYmVyIG9mIG9wZXJhdGlvbiB0eXBlcyBhbmQgdG8gdXNlIGZpbHRlcnMNCiBpbiBwYXRocyBy YXRoZXIgdGhhbiBhcnJheSBpbmRleGVkIGFjY2VzcyBiYXNlZCBvbiBKU09OIFBvaW50ZXJzIChS RkM2OTAxKS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPlBoaWw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5AaW5kZXBlbmRlbnRpZDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDsiPjxhIGhyZWY9Imh0dHA6Ly93d3cuaW5kZXBlbmRlbnRpZC5jb20vIj48c3Bh biBzdHlsZT0iY29sb3I6cHVycGxlIj53d3cuaW5kZXBlbmRlbnRpZC5jb208L3NwYW4+PC9hPjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48YSBocmVmPSJt YWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnBo aWwuaHVudEBvcmFjbGUuY29tPC9zcGFuPjwvYT48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+T24gRmViIDEzLCAyMDE1LCBhdCAxMjoyOSBQTSwgTWljaGFlbCBG cm9zdCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbSI+PHNwYW4g c3R5bGU9ImNvbG9yOnB1cnBsZSI+bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPC9zcGFuPjwvYT4m Z3Q7IHdyb3RlOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPlllcyBLZWxseSwgeW91IGFyZSBjb3JyZWN0LiZuYnNwOyBJIHdhcyBsb29raW5n IGZvciBzY2hlbWEgcmVwcmVzZW50YXRpb24gZm9yIGFsbCByZXNvdXJjZXMgYW5kIG1lc3NhZ2Vz LiZuYnNwOyBZb3UgYWxzbyBjb3JyZWN0bHkgaWRlbnRpZmllZCB0aGUgaXNzdWUgSSB3YXMgdHJ5 aW5nIHRvDQogcmFpc2Ugd2l0aCByZWdhcmRzIHRvIFBhdGNoT3AuJm5ic3A7IFRoYW5rcyBmb3Ig dGFraW5nIGEgbG9vay48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPi1tcmY8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7 cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDsiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPktlbGx5 DQogR3JpenpsZSBbPGEgaHJlZj0ibWFpbHRvOmtlbGx5LmdyaXp6bGVAc2FpbHBvaW50LmNvbSI+ PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+bWFpbHRvOmtlbGx5LmdyaXp6bGVAc2FpbHBvaW50 LmNvbTwvc3Bhbj48L2E+XTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+RnJpZGF5LCBGZWJydWFyeSAxMywgMjAxNSA2OjU2IEFNPGJyPg0K PGI+VG86PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj5NaWNoYWVsIEZyb3N0OyBQaGlsIEh1bnQ8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzY2ltQGll dGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5zY2ltQGlldGYub3JnPC9zcGFuPjwv YT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+UmU6IFtzY2ltXSBTQ0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVz ZW50YXRpb248L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+TWljaGFlbCDigKYg bGV0IG1lIG1ha2Ugc3VyZSBJIHVuZGVyc3RhbmQgd2hhdCB5b3UgYXJlIGxvb2tpbmcgZm9yLiZu YnNwOyBZb3Ugd291bGQgbGlrZSBhIHNjaGVtYSByZXByZXNlbnRhdGlvbiAoc3VjaCBhcyB3aGF0 IGlzIGluY2x1ZGVkIGluIHNlY3Rpb24gOC43KSBmb3IgYWxsDQogcmVzb3VyY2VzIGFuZCBtZXNz YWdlcy4mbmJzcDsgSXMgdGhhdCByaWdodD88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPklmIHNvLCB0aGVuIEkgMTAwJSBhZ3JlZSB0aGF0IHRo aXMgaXMgdXNlZnVsLiZuYnNwOyBJbiB0aGUgU0NJTSAxLjAgc3BlYyAoYmFjayB3aGVuIHdlIHN1 cHBvcnRlZCBYTUwgYXMgYSBkYXRhIGZvcm1hdCkgdGhlcmUgd2FzIGFuIFhTRCB0aGF0IGRpZCBl eGFjdGx5IHdoYXQgeW91DQogYXJlIGxvb2tpbmcgZm9yIOKAkyBkZXNjcmliZWQgYm90aCByZXNv dXJjZXMgYW5kIG1lc3NhZ2VzLiZuYnNwOyBJIGFncmVlIHRoYXQgaGF2aW5nIHRoaXMgY29kaWZp ZXMgdGhlIHJ1bGVzIGFuZCByZW1vdmVzIHNvbWUgYW1iaWd1aXR5LiZuYnNwOyBJIHdvdWxkIGJl IGluIGZhdm9yIG9mIGFkZGluZyBzb21ldGhpbmcgbGlrZSB0aGlzIHRvIHRoZSBTQ0lNIHNwZWMu PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5S ZWdhcmRpbmcgdGhlIFBhdGNoT3AsIGlzIHRoZSBwcm9ibGVtIHRoYXQgdGhlIHZhbHVlIHN1Yi1h dHRyaWJ1dGUgY291bGQgYmUgYW55dGhpbmcg4oCTIG11bHRpdmFsdWVkIGNvdWxkIGJlIHRydWUg b3IgZmFsc2UsIHRoZXJlIG1heSBvciBtYXkgbm90IGJlIHN1Yi1hdHRyaWJ1dGVzDQogKGllIOKA kyBpdCBjb3VsZCBiZSBjb21wbGV4LCB3aGljaCBpcyBub3QgdGVjaG5pY2FsbHkgc3VwcG9ydGVk KSwgYW5kIHRoZSB0eXBlIGlzIGRlcGVuZGVudCB1cG9uIHRoZSBhY3R1YWwgYXR0cmlidXRlIHRo YXQgeW91IGFyZSByZXBsYWNpbmc/Jm5ic3A7IFdpdGggdGhpcyBhbWJpZ3VpdHkgdGhlcmUgaXNu 4oCZdCBhIGdvb2Qgd2F5IHRvIHJlcHJlc2VudCB0aGlzIGluIGEgc2NoZW1hIGN1cnJlbnRseS48 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPi0t S2VsbHk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGlu IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+ PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rh aG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5zY2ltDQogWzxhIGhyZWY9Im1haWx0 bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPm1haWx0 bzpzY2ltLWJvdW5jZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPl08c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24gQmVoYWxmIE9mPHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5NaWNoYWVsIEZyb3N0PGJyPg0K PGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPlRodXJzZGF5LCBGZWJydWFyeSAxMiwgMjAxNSA2OjQ1IFBNPGJyPg0KPGI+VG86PC9iPjxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5QaGlsIEh1bnQ8 YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzY2ltQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6 cHVycGxlIj5zY2ltQGlldGYub3JnPC9zcGFuPjwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtzY2ltXSBT Q0lNIHNjaGVtYSBJRHMgYW5kIEpTT04gcmVwcmVzZW50YXRpb248L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+SGkgUGhpbCw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5Ob3Qgc3VyZSB3aGF0IHlvdSBtZWFuIGJ5IGV4YW1wbGVzLiZuYnNw OyBNeSBjb25jZXJuIGlzIHRoYXQgaW4gdGhlIHNjaGVtYSBkb2MsIHNlY3Rpb24gOC43IHByb3Zp ZGVzIHNjaGVtYSByZXByZXNlbnRhdGlvbiBmb3IgY29yZSB1c2VyL2dyb3VwIGFuZCBlbnRlcnBy aXNlIHVzZXIuJm5ic3A7DQogV2hhdCBhYm91dCBhbGwgdGhlIG90aGVyIHNjaGVtYXMgd2UgcmVm ZXJlbmNlPyZuYnNwOyBXZSBzaG91bGQgcHJvdmlkZSBzY2hlbWEgcmVwcmVzZW50YXRpb24gZm9y IGV2ZXJ5IHNjaGVtYSBkZWZpbmVkIGluIHRoZSBzcGVjLiZuYnNwOyBFdmVyeW9uZSBpbXBsZW1l bnRpbmcgdGhpcyBzcGVjIHdpbGwgbmVlZCB0aGVtLiZuYnNwOyBXaHkgcHJvdmlkZSBqdXN0IHRo cmVlIGFuZCBsZWF2ZSB0aGUgcmVzdCB1cCB0byBndWVzcyB3b3JrPyZuYnNwOyBFdmVyeSBpbXBs ZW1lbnRhdGlvbg0KIG5lZWRzIHRvIGRvIHZhbGlkYXRpb24sIGV2ZXJ5IHZhbGlkYXRpb24gbmVl ZHMgYSBzY2hlbWEgdG8gdmFsaWRhdGUgYWdhaW5zdC4mbmJzcDsgU28gbXkgY29uY2VybiBpcyB0 d29mb2xkLiZuYnNwOyBGaXJzdCwgd2UgcmVmZXJlbmNlIGEgYnVuY2ggb2Ygc2NoZW1hcyB0aGF0 IGV2ZXJ5b25lIG5lZWRzLCBidXQgd2UgZG9u4oCZdCBwcm92aWRlIHRoZW0uJm5ic3A7IFNlY29u ZCwgc29tZSBvZiB0aGUgc2NoZW1hcyB3ZSByZWZlcmVuY2UgKHN1Y2ggYXMgcGF0Y2hPcCkgY2Fu bm90DQogYmUgcmVwcmVzZW50ZWQgaW4gSlNPTiB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SeKA mW0gY2VydGFpbmx5IE9LIHdpdGggYW4gYXBwZW5kaXggaW4gdGhlIGFwaSBkb2MgZm9yIG1lc3Nh Z2Ugc2NoZW1hcyBhbmQgYW4gYXBwZW5kaXggaW4gdGhlIHNjaGVtYSBkb2MgZm9yIGFsbCBvZiB0 aGUgZW50aXR5IHNjaGVtYXMuJm5ic3A7IE15IHBvaW50IGlzIGFsbCB0aGVzZQ0KIHNjaGVtYXMg c2hvdWxkIGV4aXN0LiZuYnNwOyBXZSByZWZlcmVuY2UgdGhlbSwgd2UgZGVzY3JpYmUgdGhlbSwg YnV0IHdlIG9ubHkgcHJvdmlkZSB0aHJlZSBvZiB0aGVtLiZuYnNwOyBJdCBqdXN0IHNlZW1zIHdy b25nIHRvIG1lIChwZXJoYXBzIG15IG93biBzaG9ydGNvbWluZykgYnV0IHdl4oCZcmUgYXNraW5n IHBlb3BsZSB0byBpbXBsZW1lbnQgU0NJTSBwYXRjaCwgdXNpbmcgYSBTQ0lNIHNjaGVtYSBkZWZp bmVkIHJlcXVlc3QsIHRoYXQgd2UgZG8gbm90IHByb3ZpZGUsDQogYW5kIGNhbm5vdCBkZWZpbmUg dXNpbmcgcnVsZXMgd2Ugc2V0IGZvcnRoIGluIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1hIGRvYy48 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWst YmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PlNvIGJvdHRvbSBsaW5lLCBhbGwgSeKAmW0gcmVxdWVzdGluZyBpcyB0aGUgSlNPTiByZXByZXNl bnRhdGlvbiBvZiB0aGUgU0NJTSBzY2hlbWFzIHdlIHJlZmVyZW5jZS48L3NwYW4+PG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhpcyBpcyBhIFNDSU0gc2NoZW1hIHJl ZmVyZW5jZSwg4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6UGF0Y2hP cOKAnCwgSSBmZWVsIHdlIHNob3VsZCBwcm92aWRlIHRoZSBKU09OIHJlcHJlc2VudGF0aW9uIGZv ciBpdC4gJm5ic3A7SWYgd2UgY2Fu4oCZdCBkbyBpdCwgbm9ib2R5IGltcGxlbWVudGluZyB0aGUg c3BlYyBjYW4gZWl0aGVyLiZuYnNwOyBBbGwgb2YgdGhlIHNjaGVtYXMgd2UgcmVmZXJlbmNlIHNo b3VsZCBiZSBwcm92aWRlZCB1c2luZyBvdXIgb3duIGRlZmluaXRpb25zIHNldCBkb3duIGluIHNl Y3Rpb24gNyBvZiB0aGUgc2NoZW1hIHJmYyAob3IgZW5oYW5jZWQgaW4gdGhlIGFwaSBkb2MsIHVz aW5nIHNlY3Rpb24gNyBhcyBhIGJhc2UpLiZuYnNwOyBGcmFua2x5LCBJ4oCZbSBkcmVhZGluZyB0 aGUgb3V0Y29tZSBvZiBhbGwgdGhpcyBiZWNhdXNlIEnigJl2ZSBhbHJlYWR5IHNwZW50IGEgY291 cGxlIG9mIG1vbnRocyBpbXBsZW1lbnRpbmcgcGF0Y2ggaW4gaXRzIGN1cnJlbnQgZm9ybSB3aXRo IG92ZXIgMTUwIHVuaXQgdGVzdHMgdG8gY29uZmlybSBpdCBkb2VzIHdoYXQgSSB0aGluayB0aGUg c3BlYyByZXF1aXJlcy4mbmJzcDsgQnV0IHNldmVyYWwgb2YgbXkgcGVlcnMgaGF2ZSBjb21lIHRv IG1lIGFuZCBhc2tlZCBmb3IgdGhlc2Ugc2NoZW1hIGRlZmluaXRpb25zIChpbiBKU09OKSBhbmQg YSBjb3VwbGUgaGF2ZSBwb2ludGVkIG91dCB0aGF0IHRoZSBwYXRjaCByZXF1ZXN0IHNjaGVtYSwg 4oCcIHVybjppZXRmOnBhcmFtczpzY2ltOmFwaTptZXNzYWdlczoyLjA6UGF0Y2hPcOKAnCwgY2Fu bm90IGJlIHJlcHJlc2VudGVkIHVzaW5nIHNlY3Rpb24gNyBydWxlcyBhbmQgdGhhdCB3ZSBjYW5u b3QgZG8gdXBmcm9udCB2YWxpZGF0aW9uIG9uIHBhdGNoIHJlcXVlc3RzIHRoZSB3YXkgd2UgZG8g YWxsIG90aGVyIFNDSU0gcmVxdWVzdHMuJm5ic3A7IEFuZCBpdOKAmXMgdHJ1ZSwgd2UgY2Fubm90 IGRvIGFuIHVwZnJvbnQgdmFsaWRhdGlvbiBvZiBwYXRjaCBhZnRlciBpdOKAmXMgcGFyc2VkIHRo ZSB3YXkgd2UgY2FuIGFsbCBvdGhlciByZXF1ZXN0cy4mbmJzcDsgU2ltcGxlIGF0dHJpYnV0ZSB2 YWxpZGF0aW9uIGlzIGltcG9zc2libGUgYmVjYXVzZSDigJx2YWx1ZeKAnSBkZXBlbmRzIG9uIHRo ZSB0YXJnZXQgb2Yg4oCccGF0aOKAnSwgYW5kIHRoZXJlZm9yZSDigJx2YWx1ZeKAnSBjYW5ub3Qg YmUgZGVmaW5lZCBpbiBhIEpTT04gc2NoZW1hIHVzaW5nIHNlY3Rpb24gNyBvZiB0aGUgc2NoZW1h IGRvYy48L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVm b3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZv cmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+RXZl biBpZiB3ZSBjYW7igJl0IGZpeCBwYXRjaCwgZm9yIHdoYXRldmVyIHJlYXNvbiwgd2Ugc2hvdWxk IHByb3ZpZGUgdGhlIHJlc3Qgb2YgdGhlIHNjaGVtYXMsIHJlcHJlc2VudGVkIGluIEpTT04gZm9y bWF0LCBmb3IgYm90aCBkb2NzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0i cGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJw YWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj4tbXJmPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBp biAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Jm5ic3A7PC9zcGFu Pjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtU YWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+UGhpbA0KIEh1bnQ8c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KPGI+U2VudDo8L2I+ PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlRodXJzZGF5 LCBGZWJydWFyeSAxMiwgMjAxNSAxMjo1OCBQTTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+TWljaGFlbCBGcm9zdDxicj4NCjxi PkNjOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUi PnNjaW1AaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3NjaW1dIFNDSU0gc2No ZW1hIElEcyBhbmQgSlNPTiByZXByZXNlbnRhdGlvbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NaWNoYWVsLDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DYW4geW91IHByb3ZpZGUg ZXhhbXBsZXM/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPlRoZSBzY2hlbWEgaW4gdGhlIEFQSSBoYXMgdG8gZXh0ZW5kIHRoZSByZWdpc3Ry eSBkZWZpbmUgaW4gY29yZS4gJm5ic3A7IEFzIGVkaXRvciBJIHRoaW5rIGl0IHdvdWxkIGJlIGV2 ZW4gbW9yZSBjb25mdXNpbmcgdG8gbWl4IGRhdGEgc2NoZW1hIGFuZCByZXF1ZXN0IHNjaGVtYSBp biBhIHNpbmdsZSBkb2N1bWVudC4gSXQgYWxzbyBiZWNvbWVzIHByb2JsZW1hdGljIHdoZW4gc3Bl Y3MgY3Jvc3MgcmVmZXJlbmNlIGVhY2gNCiBvdGhlci4gSW5zdGVhZCB0aGUgZG9jdW1lbnQgbGF5 b3V0IGlzIHN1Y2ggdGhhdCBBUEkgYnVpbGRzIG9uIGNvcmUgc2NoZW1hLiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgZm9y bWF0IGluIFBBVENIIGNvbWVzIGZyb20gdGhlIEpTT04gUGF0Y2ggUkZDLiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KUGhpbDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+PGJyPg0KT24gRmViIDEyLCAyMDE1LCBhdCAxMjo0NiwgTWljaGFlbCBGcm9z dCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1pY2hhZWwuZnJvc3RAb3JhY2xlLmNvbSI+PHNwYW4gc3R5 bGU9ImNvbG9yOnB1cnBsZSI+bWljaGFlbC5mcm9zdEBvcmFjbGUuY29tPC9zcGFuPjwvYT4mZ3Q7 IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWst YmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPi4wOlJlc291cmNl VHlwZTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZv cmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+dXJuOmlldGY6cGFyYW1z OnNjaW06c2NoZW1hczpjb3JlOjI8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90 ZT4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDsiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fPGJyPg0Kc2NpbSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c2NpbUBpZXRm Lm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c2NpbUBpZXRmLm9yZzwvc3Bhbj48L2E+ PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2lt Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL3NjaW08L3NwYW4+PC9hPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fPGJyPg0Kc2NpbSBtYWlsaW5nIGxpc3Q8YnI+DQo8L3NwYW4+PGEgaHJlZj0i bWFpbHRvOnNjaW1AaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 cHVycGxlIj5zY2ltQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9zY2ltIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOnB1cnBsZSI+ aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2ltPC9zcGFuPjwvYT48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2JvZHk+DQo8L2h0bWw+DQo= --_000_BN1PR04MB392C51FF48493E67D5ED600E2170BN1PR04MB392namprd_-- From nobody Thu Feb 26 18:05:33 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BEAF1A1A07 for ; Thu, 26 Feb 2015 18:05:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.209 X-Spam-Level: X-Spam-Status: No, score=-14.209 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SA9eIF0iFoOB for ; Thu, 26 Feb 2015 18:05:26 -0800 (PST) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE34C1A00F5 for ; Thu, 26 Feb 2015 18:05:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=67013; q=dns/txt; s=iport; t=1425002726; x=1426212326; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=GvDwfi95bbjE8xSM2U+c20dCQp3/U62AFr9Qty+okZk=; b=gvV3totoQsJLjLABjWWP+LtA/pLxilPdqOY76K3Yiuz2MmTgC32Zal48 nPuhTIHhVJ5ILW72Cpi43VyD9d04JbrkAPqQYbIixxs6PL+BBX6Wi6ipY YUBsaOz2t41+xRw1flt4aBHVQJIhAvXd884xFwRLXx1xP/IYLBIbWsdZt 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CLCQCz0O9U/5BdJa1bgj9DUloEv1M8gVEZAQmFcAKBIU0BAQEBAQF8hA8BAQEEAQEBFxMcJQsQAgEIBwoDAQEBIQEGBycLFAkIAgQBDQWILw27W5sBAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4oVfoQXRg0BAwYBBgOEIgWPb4NgghaBVoF5gRsRKI43gz4jggIcgVBvgQMBHgYcfwEBAQ X-IronPort-AV: E=Sophos;i="5.09,656,1418083200"; d="scan'208,217";a="399527828" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-3.cisco.com with ESMTP; 27 Feb 2015 02:05:24 +0000 Received: from xhc-rcd-x08.cisco.com (xhc-rcd-x08.cisco.com [173.37.183.82]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id t1R25OHa006032 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 27 Feb 2015 02:05:24 GMT Received: from xmb-rcd-x08.cisco.com ([169.254.8.20]) by xhc-rcd-x08.cisco.com ([173.37.183.82]) with mapi id 14.03.0195.001; Thu, 26 Feb 2015 20:05:24 -0600 From: "Morteza Ansari (moransar)" To: Kelly Grizzle , =?Windows-1252?Q?Erik_Wahlstr=F6m_neXus?= , Phil Hunt , Michael Frost Thread-Topic: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) Thread-Index: AQHQUBZjra6YG9xpEEKaLdVIimQb350Ae/oAgABLk4CAAAj/gIAAAuCAgAAKwoCAAHlDAIABD9gAgAE6sYA= Date: Fri, 27 Feb 2015 02:05:23 +0000 Message-ID: References: <64d89e4d-a02a-4136-bbe4-7e7548f45f95@default> <99449CCB-7E7D-4606-B07F-07E353588028@oracle.com> <3702d9dc-a72f-4794-82ef-fa60d6a95e86@default> <3d79721c-b842-4645-9f40-40dc6e7e7d10@default> <3798CAF8-3D26-49EE-AA62-EE66A6F1D3C2@oracle.com> <53589A08-8A1B-4304-9626-16A1F17D9D77@nexusgroup.com> <08F28354-C36F-4AA8-A4CA-7B6E4B2C6156@oracle.com> <8DB34ABA-7C60-406A-852D-1CA3E756D1F3@oracle.com> <3CE93EE6-EEF0-4262-8DFE-115B27E6680D@nexusgroup.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.8.150116 x-originating-ip: [10.24.69.191] Content-Type: multipart/alternative; boundary="_000_D115106111D19Cmoransarciscocom_" MIME-Version: 1.0 Archived-At: Cc: SCIM WG Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON representation) X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Feb 2015 02:05:31 -0000 --_000_D115106111D19Cmoransarciscocom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Great discussion and sounds like we are converging. Michael, since you brought this question up, any thoughts? Does this make= sense to you? Cheers, Morteza From: Kelly Grizzle > Date: Wednesday, February 25, 2015 at 3:19 PM To: Erik Wahlstr=F6m neXus >, Phil Hunt > Cc: "scim@ietf.org" > Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON represe= ntation) Both you and Phil=92s suggestions make sense to me. Just wanted to throw i= t out there for discussion before we go down a certain route. My mind has = been eased now. ;) From: Erik Wahlstr=F6m neXus [mailto:erik.wahlstrom@nexusgroup.com] Sent: Wednesday, February 25, 2015 1:06 AM To: Phil Hunt Cc: Kelly Grizzle; SCIM WG Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON represe= ntation) Hi, The API draft don=92t mention extension (to the API) anywhere. I think a br= and new endpoints that supports pagingToken is more in line with the specif= ication. That also makes discover using the ServiceProviderConfig endpoint = more accurate. Isn=92t it better to add an extension there that announce th= at the server also supports other endpoints? Like this: { "schemas": [ "urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig=94, urn:= some-extension:pagination" ], "documentationUrl":"http://example.com/help/scim.html", "patch": { "supported":true }, "bulk": { "supported":true, "maxOperations":1000, "maxPayloadSize":1048576 } "urn:some-extension:pagination": { =93filterWithNewTokenEndpoint": =93true" }, =85. =85. And then the service provider also have support for the new /v2/UsersWithEx= traBellsEndWistlesEndpoint / Erik On 25 Feb 2015, at 00:52, Phil Hunt > wrote: Normally, I would expect that would be handled by a new extension draft and= registered appropriately with IANA. I still have to research the implicati= ons on registry handling but I think this should be do-able. As with your e= xample extension for paging, there=92s nothing saying we can=92t follow the= same extension technique in our JSON. If I roll your suggestion together with Erik=92s proposal we would have: { "msgType":["urn:ietf:params:scim:api:messages:2.0:ListResponse", "urn:= some-extension:pagination"], "totalResults":2, "Resources":[ { "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User=94], =93id" : , "userName":"bjensen" }, { "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User=94], =93id" : , "userName":"jsmith" } ], "urn:some-extension:pagination": { "pagingToken": "8982jak84j.nkd8" } } Notice that inside each =93Resources=94 array element is a resource object = with its data schema reference included. Also, since id is always returned= , it would also be present. By using =93msgType=94, we are clearly separating what is request or respon= se metadata content as distinct from resource schema (which has state). Phil @independentid www.independentid.com phil.hunt@oracle.com On Feb 24, 2015, at 3:13 PM, Kelly Grizzle > wrote: Right. My thinking was more around the ListResponse itself being extended = rather than the contained resource objects. For example: { "schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse", "urn:= some-extension:pagination"], "totalResults":2, "Resources":[ { "userName":"bjensen" }, { "userName":"jsmith" } ], "urn:some-extension:pagination": { "pagingToken": "8982jak84j.nkd8" } } Again =85 I=92m not even sure if this is something that anyone would want t= o do or if it should be supported in this way. I just wanted to bring it u= p. From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt Sent: Tuesday, February 24, 2015 5:03 PM To: Kelly Grizzle Cc: SCIM WG; Erik Wahlstr=F6m neXus Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON represe= ntation) I believe we are ok on this. We have pretty good separation. For example Li= st response does contain json objects that have resource specific schemas. E.g. The outer json object would have a msgType of ListResponse while the a= rray of result objects each contains a resource each with its own schemas a= ttribute. Phil On Feb 24, 2015, at 14:31, Kelly Grizzle > wrote: One thing that is nice about =93schemas=94 is that it gives us a way to ext= end a resource (or the representation of a resource). By moving our messag= es to use msgType instead of schemas, we might lose some of this flexibilit= y. I=92m not sure that we would want it or not, but I can envision a ListR= esponse from a server that returns a =93paging token=94 along with the curr= ent page number, etc=85 This could potentially be put into an extension. = Just something to consider=85 --Kelly From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt Sent: Tuesday, February 24, 2015 12:01 PM To: Erik Wahlstr=F6m neXus Cc: SCIM WG Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON represe= ntation) Erik Agreed. I think this makes sense and is a good compromise. This reflects wh= at we discussed on our informal call last week. Any other comments? Phil @independentid www.independentid.com phil.hunt@oracle.com On Feb 24, 2015, at 1:43 AM, Erik Wahlstr=F6m neXus > wrote: Hi, I agreed that there are some inconsistency and philosophical issues present= in the specifications that probably need addressing. I think we should make differences to the Resources and messages, and we ne= ed some changes to the schema and the api drafts to make that clear. The Resources requires fixed schemas, the messages not so much. Schemas is = intended solely for the purpose of allowing a client to understand what att= ributes and associated metadata (readability, mutability, type, etc) is sup= ported by a particular service provider. Disregarding on the currently used= bearer. The message don=92t need to be validated according to a schema. SCIM follow= s the Robustness Principal (Jon Postel=92s law - one of the founding princi= ples of TCP/IP). This means that message should not need to comply with sch= ema in order to be interpreted (within reason) by a service provider. In p= ractical terms, a SCIM client should never have to do a lot of work to crea= te or search for a User. At the same time, a service provider is not oblige= d to accept a new User *exactly* as the client specifies. The service provi= der is always free to interpret and change data. Messages is part of the API draft, and Resources and there schemas is a par= t of the Schema draft. We should not mix them to much and make it clear in = the spec that is also the case. I think that the Resources that we have today, Schema, ResourceTypes and Se= rviceProviderConfigs MUST be added to the /Schemas endpoint. We should also= add Schema, ResourceTypes and ServiceProviderConfigs to the section "8.7 S= chema Representation=94 in the schema spec. A second important change to make it clear that messages are messages, is t= o remove the schema attribute on of of the messages. They where added rathe= r late in the spec-writing process to give a notion to the service provider= what kind of message that=92s currently sent. The intention was not to for= ce the SP to validate the messages against a schema. I suggest that we remo= ve the =93schemas" attribute in messages and replaces it with a =93msgType= =94 that could indicate what message it is (PatchOp or ListResponse). / Erik On 13 Feb 2015, at 22:08, Phil Hunt > wrote: With the patch operation, the contents of =93value=94 is currently driven b= y the =93path=94 attribute. In other words in a normal JSON structure, the= Patch path attribute describes the left half of a name value pair, and the= =93value=94 describes the right half. So if =93path" points to a complex attribute, then =93value=94 MUST be a JS= ON object of one or more sub-attributes. If path describes a simple attrib= ute, than the corresponding value must be a boolean, string depending on th= e schema of the attribute described by =93path=94. SCIM patch is based on and follows the same design as for RFC6902 (JSON Pat= ch). The only difference is we decided to limit the number of operation typ= es and to use filters in paths rather than array indexed access based on JS= ON Pointers (RFC6901). Phil @independentid www.independentid.com phil.hunt@oracle.com On Feb 13, 2015, at 12:29 PM, Michael Frost > wrote: Yes Kelly, you are correct. I was looking for schema representation for al= l resources and messages. You also correctly identified the issue I was tr= ying to raise with regards to PatchOp. Thanks for taking a look. -mrf From: Kelly Grizzle [mailto:kelly.grizzle@sailpoint.com] Sent: Friday, February 13, 2015 6:56 AM To: Michael Frost; Phil Hunt Cc: scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation Michael =85 let me make sure I understand what you are looking for. You wo= uld like a schema representation (such as what is included in section 8.7) = for all resources and messages. Is that right? If so, then I 100% agree that this is useful. In the SCIM 1.0 spec (back w= hen we supported XML as a data format) there was an XSD that did exactly wh= at you are looking for =96 described both resources and messages. I agree = that having this codifies the rules and removes some ambiguity. I would be= in favor of adding something like this to the SCIM spec. Regarding the PatchOp, is the problem that the value sub-attribute could be= anything =96 multivalued could be true or false, there may or may not be s= ub-attributes (ie =96 it could be complex, which is not technically support= ed), and the type is dependent upon the actual attribute that you are repla= cing? With this ambiguity there isn=92t a good way to represent this in a = schema currently. --Kelly From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Michael Frost Sent: Thursday, February 12, 2015 6:45 PM To: Phil Hunt Cc: scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation Hi Phil, Not sure what you mean by examples. My concern is that in the schema doc, = section 8.7 provides schema representation for core user/group and enterpri= se user. What about all the other schemas we reference? We should provide= schema representation for every schema defined in the spec. Everyone impl= ementing this spec will need them. Why provide just three and leave the re= st up to guess work? Every implementation needs to do validation, every va= lidation needs a schema to validate against. So my concern is twofold. Fi= rst, we reference a bunch of schemas that everyone needs, but we don=92t pr= ovide them. Second, some of the schemas we reference (such as patchOp) can= not be represented in JSON using our own definitions. I=92m certainly OK with an appendix in the api doc for message schemas and = an appendix in the schema doc for all of the entity schemas. My point is a= ll these schemas should exist. We reference them, we describe them, but we= only provide three of them. It just seems wrong to me (perhaps my own sho= rtcoming) but we=92re asking people to implement SCIM patch, using a SCIM s= chema defined request, that we do not provide, and cannot define using rule= s we set forth in section 7 of the schema doc. So bottom line, all I=92m requesting is the JSON representation of the SCIM= schemas we reference. This is a SCIM schema reference, =93 urn:ietf:params:scim:api:messages:2.0:= PatchOp=93, I feel we should provide the JSON representation for it. If we= can=92t do it, nobody implementing the spec can either. All of the schema= s we reference should be provided using our own definitions set down in sec= tion 7 of the schema rfc (or enhanced in the api doc, using section 7 as a = base). Frankly, I=92m dreading the outcome of all this because I=92ve alre= ady spent a couple of months implementing patch in its current form with ov= er 150 unit tests to confirm it does what I think the spec requires. But s= everal of my peers have come to me and asked for these schema definitions (= in JSON) and a couple have pointed out that the patch request schema, =93 u= rn:ietf:params:scim:api:messages:2.0:PatchOp=93, cannot be represented usin= g section 7 rules and that we cannot do upfront validation on patch request= s the way we do all other SCIM requests. And it=92s true, we cannot do an = upfront validation of patch after it=92s parsed the way we can all other re= quests. Simple attribute validation is impossible because =93value=94 depe= nds on the target of =93path=94, and therefore =93value=94 cannot be define= d in a JSON schema using section 7 of the schema doc. Even if we can=92t fix patch, for whatever reason, we should provide the re= st of the schemas, represented in JSON format, for both docs. -mrf From: Phil Hunt Sent: Thursday, February 12, 2015 12:58 PM To: Michael Frost Cc: scim@ietf.org Subject: Re: [scim] SCIM schema IDs and JSON representation Michael, Can you provide examples? The schema in the API has to extend the registry define in core. As edito= r I think it would be even more confusing to mix data schema and request sc= hema in a single document. It also becomes problematic when specs cross ref= erence each other. Instead the document layout is such that API builds on c= ore schema. The format in PATCH comes from the JSON Patch RFC. Phil On Feb 12, 2015, at 12:46, Michael Frost > wrote: .0:ResourceType urn:ietf:params:scim:schemas:core:2 _______________________________________________ scim mailing list scim@ietf.org https://www.ietf.org/mailman/listinfo/scim _______________________________________________ scim mailing list scim@ietf.org https://www.ietf.org/mailman/listinfo/scim --_000_D115106111D19Cmoransarciscocom_ Content-Type: text/html; charset="Windows-1252" Content-ID: Content-Transfer-Encoding: quoted-printable
Great discussion and sounds like we are converging.

Michael,  since you brought this question up, any thoughts?  = ;Does this make sense to you?


Cheers,
Morteza

From: Kelly Grizzle <kelly.grizzle@sailpoint.com>
Date: Wednesday, February 25, 2015 = at 3:19 PM
To: Erik Wahlstr=F6m neXus <erik.wahlstrom@nexusgroup.com<= /a>>, Phil Hunt <phil.hunt@or= acle.com>
Cc: "scim@ietf.org" <scim@i= etf.org>
Subject: Re: [scim] PATCH and schem= a (was: SCIM schema IDs and JSON representation)

Both you and Phil=92s suggestions m= ake sense to me.  Just wanted to throw it out there for discussion bef= ore we go down a certain route.  My mind has been eased now. ;)

 

From: Erik Wahlstr=F6m neXus [mailto:erik.wahlstrom@nexusgroup.com]
Sent: Wednesday, February 25, 2015 1:06 AM
To: Phil Hunt
Cc: Kelly Grizzle; SCIM WG
Subject: Re: [scim] PATCH and schema (was: SCIM schema IDs and JSON = representation)

 

Hi,

 

The API draft don=92t mention extension (to the API)= anywhere. I think a brand new endpoints that supports pagingToken is more = in line with the specification. That also makes discover using the ServiceP= roviderConfig endpoint more accurate. Isn=92t it better to add an extension there that announce that the server = also supports other endpoints?

 

Like this:

 

{

    "schemas": [

      "urn:ietf:params:scim:sche= mas:core:2.0:ServiceProviderConfig=94, urn:some-extension:pagination"=

    ],

    "documentationUrl":"http://example.com/help/scim.htm= l",

    "patch": {

      "supported":true=

    },

    "bulk": {

      "supported":true,

      "maxOperations":1000,=

      "maxPayloadSize":1048= 576

    }

     "urn:some-extension= :pagination": {
       =93filterWithNewTokenEndpoint": =93true&quo= t;

     },

    =85.

    =85.

 


And then the service provider also have support for the new /v2/UsersWithEx= traBellsEndWistlesEndpoint

 

/ Erik

 

 

 

On 25 Feb 2015, at 00:52, Phil Hunt <phil.hunt@oracle.com> wrote:<= /p>

 

Normally, I would expect that would be handled by a new ext= ension draft and registered appropriately with IANA. I still have to resear= ch the implications on registry handling but I think this should be do-able. As with your example extension fo= r paging, there=92s nothing saying we can=92t follow the same extension tec= hnique in our JSON.

 

If I roll your suggestion together with Erik=92s proposal w= e would have:

 

  {

     "ms= gType":["urn:ietf:params:scim:api:messages:2.0:ListResponse&q= uot;, "urn:some-e= xtension:pagination"],

     "= totalResults":2,

     "= Resources":[

     &= nbsp; {

      =
;   "schemas": ["urn:ietf:params:scim:schemas:c=
ore:2.0:User=94],
&nb=
sp;         =93id" : <some-=
id-a>,

     &= nbsp;   "userName":"bjensen"

     &= nbsp; },

     &= nbsp; {

      =
;   "schemas": ["urn:ietf:params:scim:schemas:c=
ore:2.0:User=94],
&nb=
sp;         =93id" : <some-=
id-b>,

      =    "userName":"jsmith"=

     &= nbsp; }

     ],

     "urn:some-extension:pag= ination": {

      =  "pagingToken": "8982jak84j.nkd8"

     }

   }

 

Notice that inside each =93Resources=94 array element is a = resource object with its data schema reference included.  Also, since = id is always returned, it would also be present.

 

By using =93msgType=94, we are clearly separating what is r= equest or response metadata content as distinct from resource schema (which= has state).

 

Phil

 

@independentid

phil.hunt@oracle.com

 

On Feb 24, 2015, at 3:13 PM, Kelly Grizzle <kelly.grizz= le@sailpoint.com> wrote:

 

Right.  My thinking was more a= round the ListResponse itself being extended rather than the contained reso= urce objects.  For example:

 

   {

     "= schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse&quo= t;, "urn:some-extension:pagination"],

     "= totalResults":2,

     "= Resources":[

     &= nbsp; {

     &= nbsp;   "userName":"bjensen"

     &= nbsp; },

     &= nbsp; {

      =    "userName":"jsmith"=

     &= nbsp; }

     ],

     "= urn:some-extension:pagination": {

      =  "pagingToken": "8982jak84j.nkd8"

     }

   }

 

Again =85 I=92m not even sure if th= is is something that anyone would want to do or if it should be supported i= n this way.  I just wanted to bring it up.

 

From: = sc= im [mai= lto:scim-bounces@ietf.org]=  On Behalf Of Phil Hunt
Sent: Tuesday, Feb= ruary 24, 2015 5:03 PM
To: Kelly Grizzle<= br> Cc: SCIM WG; Erik = Wahlstr=F6m neXus
Subject: Re: [scim= ] PATCH and schema (was: SCIM schema IDs and JSON representation)

 

I believe we are ok on this. We have pretty good sep= aration. For example List response does contain json objects that have reso= urce specific schemas. 

 

E.g. The outer json object would have a msgType of L= istResponse while the array of result objects each contains a resource each= with its own schemas attribute. 

Phil


On Feb 24, 2015, at 14:31, Kelly Grizzle <kelly.grizzle@sailpoint.com> wrote:

One thing that is nice about =93sch= emas=94 is that it gives us a way to extend a resource (or the representati= on of a resource).  By moving our messages to use msgType instead of schemas, we might lose some of this flexibility.=   I=92m not sure that we would want it or not, but I can envision a Li= stResponse from a server that returns a =93paging token=94 along with the c= urrent page number, etc=85  This could potentially be put into an extension.  Just something to consider=85<= /o:p>

 

--Kelly

 

From: = sc= im [mai= lto:scim-bounces@ietf.org]=  On Behalf Of Phil Hunt
Sent: Tuesday, Feb= ruary 24, 2015 12:01 PM
To: Erik Wahlstr= =F6m neXus
Cc: SCIM WG
Subject: Re: [scim= ] PATCH and schema (was: SCIM schema IDs and JSON representation)

 

Erik

 

Agreed. I think this makes sense and is a good compr= omise. This reflects what we discussed on our informal call last week.=

 

Any other comments?

 

 

On Feb 24, 2015, at 1:43 AM, Erik Wahlstr=F6m neXus = <erik.wahlstrom@nexusgroup.com> wrote:

 

Hi,

 

I agreed that there are some inconsistency and philo= sophical issues present in the specifications that probably need addressing= . 

 

I think we should make differences to the Resources = and messages, and we need some changes to the schema and the api drafts to = make that clear.

 

The Resources requires fixed schemas, the messages n= ot so much. Schemas is intended solely for the purpose of allowing a client= to understand what attributes and associated metadata (readability, mutabi= lity, type, etc) is supported by a particular service provider. Disregarding on the currently used bearer.

 

The message don=92t need to be validated according t= o a schema. SCIM follows the Robustness Principal (Jon Postel=92s law - one= of the founding principles of TCP/IP). This means that message should not = need to comply with schema in order to be interpreted (within reason) by a service provider.  In practical t= erms, a SCIM client should never have to do a lot of work to create or sear= ch for a User. At the same time, a service provider is not obliged to accep= t a new User *exactly* as the client specifies. The service provider is always free to interpret and change dat= a.

 

Messages is part of the API draft, and Resources and= there schemas is a part of the Schema draft. We should not mix them to muc= h and make it clear in the spec that is also the case.

 

I think that the Resources that we have today, Schem= a, ResourceTypes and ServiceProviderConfigs MUST be added to the /Schemas e= ndpoint. We should also add Schema, ResourceTypes and ServiceProviderConfig= s to the section "8.7 Schema Representation=94 in the schema spec. 

 

A second important change to make it clear that mess= ages are messages, is to remove the schema attribute on of of the messages.= They where added rather late in the spec-writing process to give a notion = to the service provider what kind of message that=92s currently sent. The intention was not to force the SP = to validate the messages against a schema. I suggest that we remove the =93= schemas" attribute in messages and replaces it with a =93msgType=94 th= at could indicate what message it is (PatchOp or ListResponse).

 

/ Erik

 

 

 

On 13 Feb 2015, at 22:08, Phil Hunt <phil.hunt@oracle.c= om> wrote:

 

With the patch operation, the contents of =93value=94 is cu= rrently driven by the =93path=94 attribute.  In other words in a norma= l JSON structure, the Patch path attribute describes the left half of a name value pair, and the =93value=94 describes the righ= t half.

 

So if =93path" points to a complex attribute, then =93= value=94 MUST be a JSON object of one or more sub-attributes.  If path= describes a simple attribute, than the corresponding value must be a boolean, string depending on the schema of the attribute d= escribed by =93path=94.

 

SCIM patch is based on and follows the same design as for R= FC6902 (JSON Patch). The only difference is we decided to limit the number = of operation types and to use filters in paths rather than array indexed access based on JSON Pointers (RFC6901)= .

 

Phil

 

@independentid

 

On Feb 13, 2015, at 12:29 PM, Michael Frost <michael.frost= @oracle.com> wrote:

 

Yes Kelly, you are correct.  I= was looking for schema representation for all resources and messages. = ; You also correctly identified the issue I was trying to raise with regards to PatchOp.  Thanks for taking a look.

 

-mrf

 

From: = Ke= lly Grizzle [mailto:kelly.grizzle@sailpoint.com] 
Sent: Friday, Febr= uary 13, 2015 6:56 AM
To: Michael Frost;= Phil Hunt
Cc: scim@ietf.org Subject: Re: [scim= ] SCIM schema IDs and JSON representation

 

Michael =85 let me make sure I unde= rstand what you are looking for.  You would like a schema representati= on (such as what is included in section 8.7) for all resources and messages.  Is that right?

 

If so, then I 100% agree that this = is useful.  In the SCIM 1.0 spec (back when we supported XML as a data= format) there was an XSD that did exactly what you are looking for =96 described both resources and messages.  = I agree that having this codifies the rules and removes some ambiguity.&nbs= p; I would be in favor of adding something like this to the SCIM spec.

 

Regarding the PatchOp, is the probl= em that the value sub-attribute could be anything =96 multivalued could be = true or false, there may or may not be sub-attributes (ie =96 it could be complex, which is not technically suppo= rted), and the type is dependent upon the actual attribute that you are rep= lacing?  With this ambiguity there isn=92t a good way to represent thi= s in a schema currently.

 

--Kelly

 

 

From: = sc= im [mai= lto:scim-bounces@ietf.org]=  On Behalf Of Michael Frost
Sent: Thursday, Fe= bruary 12, 2015 6:45 PM
To: Phil Hunt
Cc: scim@ietf.org Subject: Re: [scim= ] SCIM schema IDs and JSON representation

 

Hi Phil, 

 

Not sure what you mean by examples.=   My concern is that in the schema doc, section 8.7 provides schema re= presentation for core user/group and enterprise user.  What about all the other schemas we reference?  We should= provide schema representation for every schema defined in the spec.  = Everyone implementing this spec will need them.  Why provide just thre= e and leave the rest up to guess work?  Every implementation needs to do validation, every validation needs a schema to validate agains= t.  So my concern is twofold.  First, we reference a bunch of sch= emas that everyone needs, but we don=92t provide them.  Second, some o= f the schemas we reference (such as patchOp) cannot be represented in JSON using our own definitions.

 

I=92m certainly OK with an appendix= in the api doc for message schemas and an appendix in the schema doc for a= ll of the entity schemas.  My point is all these schemas should exist.  We reference them, we describe them,= but we only provide three of them.  It just seems wrong to me (perhap= s my own shortcoming) but we=92re asking people to implement SCIM patch, us= ing a SCIM schema defined request, that we do not provide, and cannot define using rules we set forth in section 7 of th= e schema doc.

 

So bottom line, al=
l I=92m requesting is the JSON representation of the SCIM schemas we refere=
nce.
 =

This is a SCIM sch=
ema reference, =93 urn:ietf:params:scim:api:messages:2.0:PatchOp=93, I feel=
 we should provide the JSON representation for it.  If we can=92t do i=
t, nobody implementing the spec can either.  All of the schemas we ref=
erence should be provided using our own definitions set down in section 7 o=
f the schema rfc (or enhanced in the api doc, using section 7 as a base).&n=
bsp; Frankly, I=92m dreading the outcome of all this because I=92ve already=
 spent a couple of months implementing patch in its current form with over =
150 unit tests to confirm it does what I think the spec requires.  But=
 several of my peers have come to me and asked for these schema definitions=
 (in JSON) and a couple have pointed out that the patch request schema, =93=
 urn:ietf:params:scim:api:messages:2.0:PatchOp=93, cannot be represented us=
ing section 7 rules and that we cannot do upfront validation on patch reque=
sts the way we do all other SCIM requests.  And it=92s true, we cannot=
 do an upfront validation of patch after it=92s parsed the way we can all o=
ther requests.  Simple attribute validation is impossible because =93v=
alue=94 depends on the target of =93path=94, and therefore =93value=94 cann=
ot be defined in a JSON schema using section 7 of the schema doc.
 =

Even if we can=92t=
 fix patch, for whatever reason, we should provide the rest of the schemas,=
 represented in JSON format, for both docs.
 =

-mrf

 

From: = Ph= il Hunt 
Sent: Thursday, Fe= bruary 12, 2015 12:58 PM
To: Michael Frost<= br> Cc: scim@ietf.org Subject: Re: [scim= ] SCIM schema IDs and JSON representation

 

Michael,

 

Can you provide examples?

 

The schema in the API has to extend the registry def= ine in core.   As editor I think it would be even more confusing to mi= x data schema and request schema in a single document. It also becomes prob= lematic when specs cross reference each other. Instead the document layout is such that API builds on core schema.=  

 

The format in PATCH comes from the JSON Patch RFC.&n= bsp;


Phil


On Feb 12, 2015, at 12:46, Michael Frost <michael.frost@oracle.com<= /a>> wrote:

.0=
:ResourceType
ur=
n:ietf:params:scim:schemas:core:2

 

_______________________________________________
scim mailing list
scim@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/scim

 

 --_000_D115106111D19Cmoransarciscocom_-- From nobody Fri Feb 27 10:18:05 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45D621A92DC for ; Fri, 27 Feb 2015 10:18:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t7FHWe7PYEXk for ; Fri, 27 Feb 2015 10:17:58 -0800 (PST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE60B1A92BC for ; Fri, 27 Feb 2015 10:17:57 -0800 (PST) Received: from aserv0021.oracle.com (aserv0021.oracle.com [141.146.126.233]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t1RIHuR8004163 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 27 Feb 2015 18:17:57 GMT Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by aserv0021.oracle.com (8.13.8/8.13.8) with ESMTP id t1RIHuOJ008934 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 27 Feb 2015 18:17:56 GMT Received: from abhmp0010.oracle.com (abhmp0010.oracle.com [141.146.116.16]) by aserv0121.oracle.com (8.13.8/8.13.8) with ESMTP id t1RIHtOa010460; Fri, 27 Feb 2015 18:17:55 GMT Received: from [10.0.1.7] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 27 Feb 2015 10:17:50 -0800 From: Phil Hunt Content-Type: multipart/alternative; boundary="Apple-Mail=_0F453527-7809-4BF2-8A35-8DD8AC17D92B" Date: Fri, 27 Feb 2015 10:17:48 -0800 Message-Id: <1C26F231-77F8-4DE9-B5BA-E62D88A3AE71@oracle.com> To: SCIM WG Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) X-Mailer: Apple Mail (2.2070.6) X-Source-IP: aserv0021.oracle.com [141.146.126.233] Archived-At: Cc: =?utf-8?Q?Erik_Wahlstr=C3=B6m_neXus?= , Michael Frost Subject: [scim] Proposed text for schema resources vs. messages X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Feb 2015 18:18:04 -0000 --Apple-Mail=_0F453527-7809-4BF2-8A35-8DD8AC17D92B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 IMPORTANT: We need to get this information published next week if we = are to make the Dallas meeting deadline. Please respond by Tuesday Mar = 3, 8AM Pacific. Based on feedback I will publish a minor revision to = schemas doc Tuesday afternoon, and on Thursday revisions to API. In a previous thread = (https://www.ietf.org/mail-archive/web/scim/current/msg02128.html), Erik = proposed we use different attributes to distinguish between SCIM = messages and resources (msgType and schemas). I have taken a look at the impact on the documents and I think the = solution may be perceived as somewhat more complex than consistently = using =E2=80=9Cschemas=E2=80=9D. The main reason is that someone = opening a JSON object now has to look for two different attributes to = tell if the object is a SCIM object of any type. I am not sure this = matters in practice, but it does =E2=80=9Cfeel=E2=80=9D complex from a = media type perspective. =46rom an editorial and IANA perspective, I believe using =E2=80=9CmsgType= =E2=80=9D means that we have to build a separate IANA registry for = messages distinct from schemas. Given that the review process is = essentially the same, I=E2=80=99m not sure there is a lot of benefit. I = wonder then if clarifying text might not work as well. What I have done is written a new introduction to section 3 of the API = specification. My hope is that this sets the stage for how SCIM protocol = works and clearly establishes the differences between SCIM resources and = messages. Action Item: PLEASE INDICATE (by next Tuesday morning if possible): A. Given the text below, does anyone strongly prefer using = =E2=80=9CmsgType=E2=80=9D instead (and creating a new registry for it)? B. Comments on the text. Thanks! PROPOSED TEXT: 3. SCIM Protocol 3.1. Introduction SCIM is a protocol based on HTTP [RFC7230]. Along with HTTP headers and URIs, SCIM uses JSON [RFC7159] payloads to convey both SCIM resources as well as request parameters and response information such as errors in the form of JSON based messages. To identify this content, SCIM uses a media type of "application/scim+json" (see Section 8.1). A SCIM resource is a JSON object that may be created, maintained, and retrieved through HTTP methods as described in this document. Each JSON resource representation contains a "schemas" attribute that contains a list of one or more URIs that indicate included SCIM schemas that may be used to indicate the attributes contained within a resource. When querying a SCIM service provider's "/Schemas" endpoint for schema definition (see Section 8.7 [I-D.ietf-scim-core-schema]), the response describes how a service provider supports an attribute including schema meta-attributes such as case-exactness, mutability, uniqueness, returnability, and whether it is required. While SCIM schemas and associated extension model is defined in [I-D.ietf-scim-core-schema], SCIM clients should expect that some attribute schema MAY change from deployment to deployment. In cases where SCIM may be used as an open protocol in front of an application service, it is quite reasonable to expect that some service providers MAY only support a sub-set of the schema defined in [I-D.ietf-scim-core-schema]. A SCIM message is a JSON object that conveys protocol parameters about a SCIM request or response that are defined by this specification. As with a SCIM resource, a SCIM message is a JSON object that contains a "schemas" attribute with a URI whose namespace prefix begins with "urn:ietf:params:scim:api:". As SCIM protocol messages are fixed and defined by SCIM specifications and registered extensions, SCIM message schemas using the above prefix URN SHALL NOT be discoverable using the "/Schemas" endpoint. As SCIM in intended for use within cross-domain environments where schemas MAY vary, techniques such as document validation, such as in [XML-Schema], are not recommended. A SCIM service provider interprets a request in the context of its own schema (which may be different from the client's schema) and the processing rules described for each SCIM request. The following sections in this document define processing rules for SCIM that provide allowances for differences where appropriate. For example, in a SCIM PUT request, "readOnly" attributes are ignored, while "readWrite" attributes are updated. There is no need for the client to discover which attributes are "readOnly" and remove them from the PUT request in advance in order to be accepted. Similarly a SCIM client SHOULD NOT expect a service provider to return SCIM resources with exactly the same schema and values as submitted. SCIM responses SHALL reflect resource state as interpreted by the SCIM service provider. 3.2. SCIM Endpoints The SCIM protocol specifies well-known endpoints and HTTP methods for managing resources defined in the core schema; i.e., "User" and Phil @independentid www.independentid.com phil.hunt@oracle.com --Apple-Mail=_0F453527-7809-4BF2-8A35-8DD8AC17D92B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
IMPORTANT:  We need to get this = information published next week if we are to make the Dallas meeting = deadline. Please respond by Tuesday Mar 3, 8AM Pacific. = Based on feedback I will publish a minor revision to schemas doc = Tuesday afternoon, and on Thursday revisions to API.

In a previous thread (https://www.ietf.org/mail-archive/web/scim/current/msg02128.htm= l), Erik proposed we use different attributes to distinguish between = SCIM messages and resources (msgType and schemas).

I have taken a look at the impact on = the documents and I think the solution may be perceived as somewhat more = complex than consistently using =E2=80=9Cschemas=E2=80=9D.  The = main reason is that someone opening a JSON object now has to look for = two different attributes to tell if the object is a SCIM object of any = type. I am not sure this matters in practice, but it does =E2=80=9Cfeel=E2= =80=9D complex from a media type perspective.

=46rom an editorial and IANA = perspective, I believe using =E2=80=9CmsgType=E2=80=9D means that we = have to build a separate IANA registry for messages distinct from = schemas. Given that the review process is essentially the same, I=E2=80=99= m not sure there is a lot of benefit. I wonder then if clarifying text = might not work as well.

What I have done is written a new introduction to section 3 = of the API specification. My hope is that this sets the stage for how = SCIM protocol works and clearly establishes the differences between SCIM = resources and messages.

Action Item:  PLEASE INDICATE (by next = Tuesday morning if possible):

A.  Given the text below, does = anyone strongly prefer using =E2=80=9CmsgType=E2=80=9D instead (and = creating a new registry for it)?

B.  Comments on the = text.

Thanks!

PROPOSED TEXT:
3.  SCIM Protocol

3.1.  Introduction

   SCIM is a protocol based on HTTP [RFC7230].  Along with HTTP headers
   and URIs, SCIM uses JSON [RFC7159] payloads to convey both SCIM
   resources as well as request parameters and response information such
   as errors in the form of JSON based messages.  To identify this
   content, SCIM uses a media type of "application/scim+json" (see
   Section 8.1).

   A SCIM resource is a JSON object that may be created, maintained, and
   retrieved through HTTP methods as described in this document.  Each
   JSON resource representation contains a "schemas" attribute that
   contains a list of one or more URIs that indicate included SCIM
   schemas that may be used to indicate the attributes contained within
   a resource.  When querying a SCIM service provider's "/Schemas"
   endpoint for schema definition (see Section 8.7
   [I-D.ietf-scim-core-schema]), the response describes how a service
   provider supports an attribute including schema meta-attributes such
   as case-exactness, mutability, uniqueness, returnability, and whether
   it is required.  While SCIM schemas and associated extension model is
   defined in [I-D.ietf-scim-core-schema], SCIM clients should expect
   that some attribute schema MAY change from deployment to deployment.
   In cases where SCIM may be used as an open protocol in front of an
   application service, it is quite reasonable to expect that some
   service providers MAY only support a sub-set of the schema defined in
   [I-D.ietf-scim-core-schema].

   A SCIM message is a JSON object that conveys protocol parameters
   about a SCIM request or response that are defined by this
   specification.  As with a SCIM resource, a SCIM message is a JSON
   object that contains a "schemas" attribute with a URI whose namespace
   prefix begins with "urn:ietf:params:scim:api:".  As SCIM protocol
   messages are fixed and defined by SCIM specifications and registered
   extensions, SCIM message schemas using the above prefix URN SHALL NOT
   be discoverable using the "/Schemas" endpoint.

   As SCIM in intended for use within cross-domain environments where
   schemas MAY vary, techniques such as document validation, such as in
   [XML-Schema], are not recommended.  A SCIM service provider
   interprets a request in the context of its own schema (which may be
   different from the client's schema) and the processing rules
   described for each SCIM request.  The following sections in this
   document define processing rules for SCIM that provide allowances for
   differences where appropriate.  For example, in a SCIM PUT request,
   "readOnly" attributes are ignored, while "readWrite" attributes are
   updated.  There is no need for the client to discover which
   attributes are "readOnly" and remove them from the PUT request in
   advance in order to be accepted.  Similarly a SCIM client SHOULD NOT
   expect a service provider to return SCIM resources with exactly the
   same schema and values as submitted.  SCIM responses SHALL reflect
   resource state as interpreted by the SCIM service provider.

3.2.  SCIM Endpoints

   The SCIM protocol specifies well-known endpoints and HTTP methods for
   managing resources defined in the core schema; i.e., "User" =
and


= --Apple-Mail=_0F453527-7809-4BF2-8A35-8DD8AC17D92B--