From nobody Mon Dec 3 11:29:32 2018 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2866E12426A for ; Mon, 3 Dec 2018 11:29:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=okta.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZQ4BtlxqIbyB for ; Mon, 3 Dec 2018 11:29:28 -0800 (PST) Received: from us-smtp-delivery-163.mimecast.com (us-smtp-delivery-163.mimecast.com [216.205.24.163]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A42791200B3 for ; Mon, 3 Dec 2018 11:29:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=okta.com; s=mimecast20140813; t=1543865367; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding:in-reply-to: references; bh=yM1jCNVegqsPSChLlfJo0XFZqW3PcbUUr28wpYq+XBk=; b=UvaPRJjyi99wwENKL5dEH2LdS7Y3bLes/Qo2rIoCSc8ffvH35BsfrQ8p2b9nwtW8Euh8Wro669B6R02fwpW2EsSprnEl64fYMTSau4UkrFRYG3stIAnJRVzO5fFN2ZCA4XJ1P7TUc/gaz6byZPSrRocYIpkr8Uytfs3FxSOzpNg= Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02lp2053.outbound.protection.outlook.com [104.47.36.53]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-45--BD9grAdMtqqAaowcnv4NQ-1; Mon, 03 Dec 2018 14:29:24 -0500 Received: from BYAPR05MB4150.namprd05.prod.outlook.com (52.135.199.159) by BYAPR05MB4358.namprd05.prod.outlook.com (52.135.202.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1404.14; Mon, 3 Dec 2018 19:29:23 +0000 Received: from BYAPR05MB4150.namprd05.prod.outlook.com ([fe80::b14e:7975:a07e:4bab]) by BYAPR05MB4150.namprd05.prod.outlook.com ([fe80::b14e:7975:a07e:4bab%3]) with mapi id 15.20.1404.016; Mon, 3 Dec 2018 19:29:23 +0000 From: Kevin Gough To: "scim@ietf.org" Thread-Topic: recommend a tech docs. writer to enhance Okta's SCIM integration documentation? Thread-Index: AQHUiz5+yzil8eZ8l0qa6cS7jnAXOw== Date: Mon, 3 Dec 2018 19:29:23 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [12.17.168.202] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR05MB4358; 20:4AQgBr92c1GM4NexFUTI+Ika5jonpGiLCxCSeoWr+rhVlxMhLY+arGfaicD25dba4kLhoj/68/kjZvbK9sg0dQ+c8HDc9ybm8gEoorWOvjmOZeXeAUEDZ5pDUigflyVp81M3clBbKY8PDzr/fVcNxy5wep6ZQntM9n/d+fmzWDA= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 91af374d-a437-4eda-4733-08d65955a169 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR05MB4358; x-ms-traffictypediagnostic: BYAPR05MB4358: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231455)(999002)(944501493)(52105112)(3002001)(10201501046)(148016)(149066)(150057)(6041310)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:BYAPR05MB4358; BCL:0; PCL:0; RULEID:; SRVR:BYAPR05MB4358; x-forefront-prvs: 08756AC3C8 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(136003)(39860400002)(396003)(376002)(346002)(199004)(189003)(97736004)(7696005)(5660300001)(102836004)(186003)(26005)(86362001)(33656002)(66066001)(6506007)(74316002)(558084003)(8936002)(105004)(256004)(8676002)(81166006)(1730700003)(81156014)(476003)(44832011)(4743002)(486006)(2501003)(68736007)(478600001)(99286004)(71200400001)(316002)(25786009)(14454004)(54896002)(9686003)(55016002)(5640700003)(19627405001)(53936002)(6116002)(3846002)(2906002)(105586002)(106356001)(7736002)(6916009)(71190400001)(6436002)(2351001); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4358; H:BYAPR05MB4150.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; x-microsoft-antispam-message-info: /zJbrlsKfE0xNoenpBnYGFLVgoIvzvdwCU7Cxnu96jp2x7aWt0d/tpZu6ohjZeZRp0PRYL2Us3RYA8zszcy+kzuFuT2e8UyICMviChG0Y+nKNgHnI6ZdFeTOxRfMXtkxlAl8Lnead1ObKsWEs8tCnLRbrO3A1PFaktnS6LA8cKVjNv0ROOB+16pFf4JNgtRKNPyhRFnJdbkP5f0fXPw8eJo55sJLyQjScLcNONBsCVE/S0GeqNubYk422c9bhBkvqJ67iunt5IqNq4NhKRDMvmQgvC1YmohvxUCQEFaCMSz3kVkvaXR2v5m9swxHv4dlEZGtMZU+ZfY7VbF9C2QJ3Zj8uA9PL8NCg6l5dgHRaZs= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: okta.com X-MS-Exchange-CrossTenant-Network-Message-Id: 91af374d-a437-4eda-4733-08d65955a169 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Dec 2018 19:29:23.3533 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f1f9fcc4-c616-4261-8a82-855dc9cb8486 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4358 X-MC-Unique: -BD9grAdMtqqAaowcnv4NQ-1 Content-Type: multipart/alternative; boundary="_000_BYAPR05MB41500B199D162AE575B6AC5A87AE0BYAPR05MB4150namp_" Archived-At: Subject: [scim] recommend a tech docs. writer to enhance Okta's SCIM integration documentation? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Dec 2018 19:29:31 -0000 --_000_BYAPR05MB41500B199D162AE575B6AC5A87AE0BYAPR05MB4150namp_ Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable I want to enhance Okta=92s developer documentation for our SCIM-based integ= ration option. Does anyone have a tech. writer they can recommend? Thanks, Kevin --_000_BYAPR05MB41500B199D162AE575B6AC5A87AE0BYAPR05MB4150namp_ Content-Type: text/html; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable
I want to enhance Okta=92s developer documentation for our SCIM-based = integration option. Does anyone have a tech. writer they can recommend?

Thanks, 
Kevin
--_000_BYAPR05MB41500B199D162AE575B6AC5A87AE0BYAPR05MB4150namp_-- From nobody Tue Dec 4 02:04:22 2018 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E009A130E39 for ; Tue, 4 Dec 2018 02:04:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ess-AbmDuUNm for ; Tue, 4 Dec 2018 02:04:18 -0800 (PST) Received: from SMTPGATE01.enterexchange.com (smtpgate01.enterexchange.com [109.205.192.241]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE1D612785F for ; Tue, 4 Dec 2018 02:04:17 -0800 (PST) From: Jaap Francke To: "scim@ietf.org" Thread-Topic: Retrieving members of a group Thread-Index: AQHUi7i1HSuQH2+yFkGgfz/NvPWmlw== Date: Tue, 4 Dec 2018 10:04:14 +0000 Message-ID: Accept-Language: nl-NL, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.17.5.138] Content-Type: text/plain; charset="utf-8" Content-ID: <15E477388A3F57429890F1309C271720@enterexchange.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [scim] Retrieving members of a group X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Dec 2018 10:04:21 -0000 SGkgYWxsLA0KDQpJIHdvdWxkIGxpa2UgdG8gaGF2ZSBteSB1bmRlcnN0YW5kaW5nIGNvbmZpcm1l ZCBvbiB1c2FnZSBvZiB0aGUgR1JPVVAgZW5kcG9pbnQuDQoNCldoZW4gSSBkbyBhIEdFVCBvbiB0 aGUgR1JPVVAgZW5kcG9pbnQsIHRoZSBtZW1iZXJzIGF0dHJpYnV0ZSBvZiBhIHJldHVybmVkIEdS T1VQIHJlc29pdXJjZSBjb250YWlucyBhIGxpc3Qgb2YgYWxsIG1lbWJlcnMgb2YgdGhhdCBncm91 cC4NCklmIHRoZSBncm91cCBjb250YWlucyBvbmx5IGEgZmV3IG1lbWJlcnMsIHRoYXTigJlzIG5v dCBhIHByb2JsZW0uDQpIb3dldmVyLCB3aGVuIHRoZSBncm91cCBjb250YWlucyBhIGxvdCBvZiBt ZW1iZXJzLCB0aGUgcGF5bG9hZCBnZXRzIOKAnHRvbyBiaWfigJ0gYW5kIHBhZ2luYXRpb24gZm9y IHRoZSBtZW1iZXJzIGRvZXMgbm90IGFwcGx5Lg0KDQpJIGFzc3VtZSB0aGUgd2F5IHRvIHNvbHZl IHRoaXMgaXMgdG8gcmV0dXJuIGEgcGFydGlhbCByZXByZXNlbnRhdGlvbiBvZiB0aGUgZ3JvdXAg cmVzb3VyY2UgYnkgc2V0dGluZyB0aGUgc2NoZW1hIG1ldGFkYXRhIHJldHVybmVkPW5ldmVyIChv ciByZXR1cm5lZD1yZXF1ZXN0KSBpbiB0aGUgZ3JvdXAgc2NoZW1hIGRlZmluaXRpb24/DQpXaGVu IGRvaW5nIHNvLCBhIEdFVCBvbiB0aGUgR1JPVVAgZW5kcG9pbnQgcmVzdWx0cyBpbiBhIGxpc3Qg b2YgZ3JvdXBzIHdpdGggY29tbW9uIHJlc291cmNlIGF0dHJpYnV0ZXMgKGlkLCBleHRlcm5hbGlk LCBtZXRhKSBhbmQgZ3JvdXAgZGlzcGxheU5hbWUuDQoNClRvIHJldHJpZXZlIHRoZSBsaXN0IG9m IG1lbWJlcnMgb2YgYSBncm91cCwgb25lIHdvdWxkIGhhdmUgdG8gZG8gYSBHRVQgb24gdGhlIHVz ZXIgZW5kcG9pbnQgdXNpbmcgYSBmaWx0ZXIgb24gdGhlIGdyb3VwcyBhdHRyaWJ1dGUsIHJpZ2h0 PyBJbiB0aGlzIGNhc2UgcGFnaW5hdGlvbiBkb2VzIGFwcGx5Lg0KDQpZb3VyIHJlc3BvbnNlcyBh cmUgYXBwcmVjaWF0ZWQsIHRoYW5rcyENCg0KSmFhcCBGcmFuY2tl From nobody Tue Dec 4 09:03:34 2018 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A7CA130F7C for ; Tue, 4 Dec 2018 09:03:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.759 X-Spam-Level: X-Spam-Status: No, score=-5.759 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oracle.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kq_6G6-uT83v for ; Tue, 4 Dec 2018 09:03:17 -0800 (PST) Received: from userp2130.oracle.com (userp2130.oracle.com [156.151.31.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC7E7130F91 for ; Tue, 4 Dec 2018 09:03:17 -0800 (PST) Received: from pps.filterd (userp2130.oracle.com [127.0.0.1]) by userp2130.oracle.com (8.16.0.22/8.16.0.22) with SMTP id wB4Gwlu7111402; Tue, 4 Dec 2018 17:03:13 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=corp-2018-07-02; bh=WL/1HUdLHzYmtMGN2T9h9tpkzF9DD2WNaV07xchcoLc=; b=OdmTCFjAJUFiCYb5uuZokUh3j/SIPmAl8+xPm6EGOV8XaNdz1QkltFafBiMe+0XtPkxV qZ3i64E+mLiBBlb0FiooztSgGjXZ6If/rRejYBuCIMTr1lrwt5jWwMTgXUf+VtPB9/oC qNSr7Xzo39GpGMgDXi3sS+wnPlsWs6cbCVIzO7yKaZGyiBB4uwVEnn08I4FI4wD0QAfp uJE9DgF5mGuHiWwp4xA8BRX9MlUhvFAoFpXTSKYKgNB1mMV3OXcbu9I+Bo+dLH+fkky1 obQpgAcjYhmyzH84ZYdpRWFRGSm9icVY6UvpQCibxWnkgDhuqq4kpdI83JdE4EK7M8fv VQ== Received: from userv0022.oracle.com (userv0022.oracle.com [156.151.31.74]) by userp2130.oracle.com with ESMTP id 2p3hqtwry1-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 04 Dec 2018 17:03:13 +0000 Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by userv0022.oracle.com (8.14.4/8.14.4) with ESMTP id wB4H3C5Y029892 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 4 Dec 2018 17:03:12 GMT Received: from abhmp0012.oracle.com (abhmp0012.oracle.com [141.146.116.18]) by aserv0121.oracle.com (8.14.4/8.13.8) with ESMTP id wB4H3CdA012150; Tue, 4 Dec 2018 17:03:12 GMT Received: from [10.0.1.37] (/24.86.190.97) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 04 Dec 2018 09:03:11 -0800 From: Phil Hunt Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_CDBD88A4-E3D6-49FB-911E-647BA70F4A3D" Mime-Version: 1.0 (Mac OS X Mail 12.1 \(3445.101.1\)) Date: Tue, 4 Dec 2018 09:03:09 -0800 In-Reply-To: Cc: "scim@ietf.org" To: Jaap Francke References: X-Mailer: Apple Mail (2.3445.101.1) X-Proofpoint-Virus-Version: vendor=nai engine=5900 definitions=9097 signatures=668686 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1812040145 Archived-At: Subject: Re: [scim] Retrieving members of a group X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Dec 2018 17:03:33 -0000 --Apple-Mail=_CDBD88A4-E3D6-49FB-911E-647BA70F4A3D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Jaap, You are correct that the SCIM protocol does not support sub-pagination = of group members.=20 This question has come up several times since, so I=E2=80=99ll pass = along my *personal* thoughts... As group membership grows, the associated confidentiality of that list = also grows. As such many service providers do not return member values = except to privileged clients. Listing the members of a team is one = thing, but listing the employees of a company, or all customers is quite = another. As group size grows, the change rate of a Group resource also grows. = Many use cases for pagination assume that consistent results between = pages would also be supported. That means the SCIM SP would have to = maintain a query results buffer in order to return results while the = data may be changing underneath. This impacts SCIM service providers in = key ways: * Scalability costs of providing consistent result sets * Results consistency and increased shared state costs across clusters. * Denial-of-Service risks associated as attackers perform seemingly = innocent queries that consume undue resources. LDAP has this problem, = and it is one of the reasons I never recommend LDAP for open internet = use without some form of counter-measures. Many of the use-cases I have heard are often driven by user-interface = designs intended to aid users in scanning through a group. In my = experience I=E2=80=99ve found these systems to be particularly tedious = with large groups. The UX often ends up requiring a user-agent side = search function so you can find names rather than page through hundreds = of pages. This is in part why I suggest group management be done using = user-centric calls (see below) or relationship basis like we see in = large-scale social networks. One could argue that group membership should never be returned and = instead: * Use queries against User resources to search for groups a User is a = member of. * Use a query filter against Group resources to test if a User is a = member. There are cases where privileged services need to synchronize or = reconcile across domains. In these cases, it is important to return the = entire group object as of a point in time so that consistency between = systems can be periodically compared. It=E2=80=99s quite possible the group may re-form to tackle this = question down the road. After-all the pagination question keeps coming = up and is worthy of more discussion IMO. Cheers, Phil Hunt > On Dec 4, 2018, at 2:04 AM, Jaap Francke = wrote: >=20 > Hi all, >=20 > I would like to have my understanding confirmed on usage of the GROUP = endpoint. >=20 > When I do a GET on the GROUP endpoint, the members attribute of a = returned GROUP resoiurce contains a list of all members of that group. > If the group contains only a few members, that=E2=80=99s not a = problem. > However, when the group contains a lot of members, the payload gets = =E2=80=9Ctoo big=E2=80=9D and pagination for the members does not apply. >=20 > I assume the way to solve this is to return a partial representation = of the group resource by setting the schema metadata returned=3Dnever = (or returned=3Drequest) in the group schema definition? > When doing so, a GET on the GROUP endpoint results in a list of groups = with common resource attributes (id, externalid, meta) and group = displayName. >=20 > To retrieve the list of members of a group, one would have to do a GET = on the user endpoint using a filter on the groups attribute, right? In = this case pagination does apply. >=20 > Your responses are appreciated, thanks! >=20 > Jaap Francke > _______________________________________________ > scim mailing list > scim@ietf.org > = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_scim&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE= &r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DLsCH7qZCjIgw_Y1Orhcvq= psjNdeYbp7rYDyNrjjTeCY&s=3Df5f3wOp9RMHmsloc2YdksmbnaxEwZbhvA-_nP6fujvI&e=3D= --Apple-Mail=_CDBD88A4-E3D6-49FB-911E-647BA70F4A3D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Jaap,

You = are correct that the SCIM protocol does not support sub-pagination of = group members. 

This question has come up several times since, so I=E2=80=99ll = pass along my *personal* thoughts...

As group membership grows, the = associated confidentiality of that list also grows. As such many service = providers do not return member values except to privileged clients. = Listing the members of a team is one thing, but listing the employees of = a company, or all customers is quite another.

As group size grows, the change rate of = a Group resource also grows. Many use cases for pagination assume that = consistent results between pages would also be supported. That means the = SCIM SP would have to maintain a query results buffer in order to return = results while the data may be changing underneath. This impacts SCIM = service providers in key ways:
* Scalability costs = of providing consistent result sets
* Results = consistency and increased shared state costs across clusters.
* Denial-of-Service risks associated as attackers perform = seemingly innocent queries that consume undue resources. LDAP has this = problem, and it is one of the reasons I never recommend LDAP for open = internet use without some form of counter-measures.

Many of = the use-cases I have heard are often driven by user-interface designs = intended to aid users in scanning through a group. In my experience = I=E2=80=99ve found these systems to be particularly tedious with large = groups. The UX often ends up requiring a user-agent side search function = so you can find names rather than page through hundreds of pages. This = is in part why I suggest group management be done using user-centric = calls (see below) or relationship basis like we see in large-scale = social networks.

One could argue that group membership should never be = returned and instead:
* Use queries against User = resources to search for groups a User is a member of.
* Use a query filter against Group resources to test if a = User is a member.

There are cases where privileged services need to synchronize = or reconcile across domains. In these cases, it is important to return = the entire group object as of a point in time so that consistency = between systems can be periodically compared.

It=E2=80=99s quite possible the group = may re-form to tackle this question down the road. After-all the = pagination question keeps coming up and is worthy of more discussion = IMO.

Cheers,

Phil Hunt


On Dec 4, 2018, at 2:04 AM, = Jaap Francke <jaap.francke=3D40iwelcome.com@dmarc.ietf.org> = wrote:

Hi all,

I would like to have my = understanding confirmed on usage of the GROUP endpoint.

When I do a GET on the GROUP endpoint, the members attribute = of a returned GROUP resoiurce contains a list of all members of that = group.
If the group contains only a few members, that=E2=80=99= s not a problem.
However, when the group contains a lot of = members, the payload gets =E2=80=9Ctoo big=E2=80=9D and pagination for = the members does not apply.

I assume the = way to solve this is to return a partial representation of the group = resource by setting the schema metadata returned=3Dnever (or = returned=3Drequest) in the group schema definition?
When = doing so, a GET on the GROUP endpoint results in a list of groups with = common resource attributes (id, externalid, meta) and group = displayName.

To retrieve the list of = members of a group, one would have to do a GET on the user endpoint = using a filter on the groups attribute, right? In this case pagination = does apply.

Your responses are appreciated, = thanks!

Jaap Francke
_______________________________________________
scim mailing list
scim@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_scim&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8= Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&am= p;m=3DLsCH7qZCjIgw_Y1OrhcvqpsjNdeYbp7rYDyNrjjTeCY&s=3Df5f3wOp9RMHmsloc= 2YdksmbnaxEwZbhvA-_nP6fujvI&e=3D

= --Apple-Mail=_CDBD88A4-E3D6-49FB-911E-647BA70F4A3D-- From nobody Tue Dec 4 09:27:44 2018 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA379130F19 for ; Tue, 4 Dec 2018 09:27:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.298 X-Spam-Level: X-Spam-Status: No, score=-4.298 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=oneidentity.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cBA5gv6NQz-1 for ; Tue, 4 Dec 2018 09:27:38 -0800 (PST) Received: from amersmtp2.quest.com (amersmtp2.quest.com [12.106.87.227]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E822E130F85 for ; Tue, 4 Dec 2018 09:27:37 -0800 (PST) Received: from amersmtp2.quest.com (127.0.0.1) id h0qsgk0171s8 for ; Tue, 4 Dec 2018 09:27:37 -0800 (envelope-from ) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oneidentity.com; s=default; i=@oneidentity.com; h=Received: Received:Received:From:To:CC:Subject:Thread-Topic:Thread-Index: Date:Message-ID:References:In-Reply-To:Accept-Language: Content-Language:Content-Type:MIME-Version; bh=fDUX1ZaICtJpb9VhD pOS4dYyM3gi0EEEVIcOF5Muj1Q=; b=KlvQZJCZZWV0ARuiNV8COZpU12RcJS18c FNDovI8w4hqDUSpFGgkdU9QEdRZl3DK1JWoNyvDxj0a6mufmaL3CZ9neNrD5n+ZE j2N/S9Fa+m0Xlr5qBN0wNeFERpb5MjXeNK9ijgXlg0ye4xzw9V5vcQeRgS8d1SeK DsUyCyLp7M= Received: from ALVETXW04.prod.quest.corp ([10.1.100.92]) by amersmtp2.quest.com ([10.1.100.227]) (SonicWALL 9.0.5.2079 ) with ESMTPS (version=TLSv1.2 cipher=AES128-SHA256 bits=128/128) id o201812041727360208832-108; Tue, 04 Dec 2018 09:27:36 -0800 Received: from ALVHTXW02.prod.quest.corp (10.1.135.18) by mail.quest.com (10.1.107.111) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 4 Dec 2018 09:27:35 -0800 Received: from ALVMBXW01.prod.quest.corp ([fe80::cc5a:be3d:40e:3012]) by ALVHTXW02.prod.quest.corp ([::1]) with mapi id 14.03.0279.002; Tue, 4 Dec 2018 09:27:36 -0800 From: "Jackson Shaw (jshaw)" To: Phil Hunt , Jaap Francke CC: "scim@ietf.org" Thread-Topic: [scim] Retrieving members of a group Thread-Index: AQHUi7i1HSuQH2+yFkGgfz/NvPWml6VvVSGA//+AkFA= Date: Tue, 4 Dec 2018 17:27:35 +0000 Message-ID: <81058E390D0B3847B069D324750FCFF576B17C17@ALVMBXW01.prod.quest.corp> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.1.104.156] x-c2processedorg: 0b7fb32a-9e41-4a01-8d60-ef67dd9ea696 Content-Type: multipart/alternative; boundary="_000_81058E390D0B3847B069D324750FCFF576B17C17ALVMBXW01prodqu_" MIME-Version: 1.0 X-Mlf-CnxnMgmt-Allow: 10.1.100.92 X-Mlf-Version: 9.0.5.2079 X-Mlf-License: BSVKCAPE_ X-Mlf-UniqueId: o201812041727360208832 Archived-At: Subject: Re: [scim] Retrieving members of a group X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Dec 2018 17:27:42 -0000 --_000_81058E390D0B3847B069D324750FCFF576B17C17ALVMBXW01prodqu_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW5kZWVkLiBXZSBhcmUgb25lIG9mIHRoZSBvbmVzIHdobyBmZWVsIHRoaXMgcXVlc3Rpb24gaXMg bm90IGFkZXF1YXRlbHkgYWRkcmVzc2Vk4oCmDQoNCkphY2tzb24gU2hhdw0KUHJvZHVjdCBNYW5h Z2VtZW50LCBPbmUgSWRlbnRpdHkNCuKYjiArMS00MjUtNTc3LTE3NjkNCg0KRnJvbTogc2NpbSA8 c2NpbS1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgUGhpbCBIdW50DQpTZW50OiBUdWVz ZGF5LCBEZWNlbWJlciA0LCAyMDE4IDk6MDMgQU0NClRvOiBKYWFwIEZyYW5ja2UgPGphYXAuZnJh bmNrZT00MGl3ZWxjb21lLmNvbUBkbWFyYy5pZXRmLm9yZz4NCkNjOiBzY2ltQGlldGYub3JnDQpT dWJqZWN0OiBSZTogW3NjaW1dIFJldHJpZXZpbmcgbWVtYmVycyBvZiBhIGdyb3VwDQoNCkNBVVRJ T046IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlv bi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNv Z25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KDQpKYWFwLA0K DQpZb3UgYXJlIGNvcnJlY3QgdGhhdCB0aGUgU0NJTSBwcm90b2NvbCBkb2VzIG5vdCBzdXBwb3J0 IHN1Yi1wYWdpbmF0aW9uIG9mIGdyb3VwIG1lbWJlcnMuDQoNClRoaXMgcXVlc3Rpb24gaGFzIGNv bWUgdXAgc2V2ZXJhbCB0aW1lcyBzaW5jZSwgc28gSeKAmWxsIHBhc3MgYWxvbmcgbXkgKnBlcnNv bmFsKiB0aG91Z2h0cy4uLg0KDQpBcyBncm91cCBtZW1iZXJzaGlwIGdyb3dzLCB0aGUgYXNzb2Np YXRlZCBjb25maWRlbnRpYWxpdHkgb2YgdGhhdCBsaXN0IGFsc28gZ3Jvd3MuIEFzIHN1Y2ggbWFu eSBzZXJ2aWNlIHByb3ZpZGVycyBkbyBub3QgcmV0dXJuIG1lbWJlciB2YWx1ZXMgZXhjZXB0IHRv IHByaXZpbGVnZWQgY2xpZW50cy4gTGlzdGluZyB0aGUgbWVtYmVycyBvZiBhIHRlYW0gaXMgb25l IHRoaW5nLCBidXQgbGlzdGluZyB0aGUgZW1wbG95ZWVzIG9mIGEgY29tcGFueSwgb3IgYWxsIGN1 c3RvbWVycyBpcyBxdWl0ZSBhbm90aGVyLg0KDQpBcyBncm91cCBzaXplIGdyb3dzLCB0aGUgY2hh bmdlIHJhdGUgb2YgYSBHcm91cCByZXNvdXJjZSBhbHNvIGdyb3dzLiBNYW55IHVzZSBjYXNlcyBm b3IgcGFnaW5hdGlvbiBhc3N1bWUgdGhhdCBjb25zaXN0ZW50IHJlc3VsdHMgYmV0d2VlbiBwYWdl cyB3b3VsZCBhbHNvIGJlIHN1cHBvcnRlZC4gVGhhdCBtZWFucyB0aGUgU0NJTSBTUCB3b3VsZCBo YXZlIHRvIG1haW50YWluIGEgcXVlcnkgcmVzdWx0cyBidWZmZXIgaW4gb3JkZXIgdG8gcmV0dXJu IHJlc3VsdHMgd2hpbGUgdGhlIGRhdGEgbWF5IGJlIGNoYW5naW5nIHVuZGVybmVhdGguIFRoaXMg aW1wYWN0cyBTQ0lNIHNlcnZpY2UgcHJvdmlkZXJzIGluIGtleSB3YXlzOg0KKiBTY2FsYWJpbGl0 eSBjb3N0cyBvZiBwcm92aWRpbmcgY29uc2lzdGVudCByZXN1bHQgc2V0cw0KKiBSZXN1bHRzIGNv bnNpc3RlbmN5IGFuZCBpbmNyZWFzZWQgc2hhcmVkIHN0YXRlIGNvc3RzIGFjcm9zcyBjbHVzdGVy cy4NCiogRGVuaWFsLW9mLVNlcnZpY2Ugcmlza3MgYXNzb2NpYXRlZCBhcyBhdHRhY2tlcnMgcGVy Zm9ybSBzZWVtaW5nbHkgaW5ub2NlbnQgcXVlcmllcyB0aGF0IGNvbnN1bWUgdW5kdWUgcmVzb3Vy Y2VzLiBMREFQIGhhcyB0aGlzIHByb2JsZW0sIGFuZCBpdCBpcyBvbmUgb2YgdGhlIHJlYXNvbnMg SSBuZXZlciByZWNvbW1lbmQgTERBUCBmb3Igb3BlbiBpbnRlcm5ldCB1c2Ugd2l0aG91dCBzb21l IGZvcm0gb2YgY291bnRlci1tZWFzdXJlcy4NCg0KTWFueSBvZiB0aGUgdXNlLWNhc2VzIEkgaGF2 ZSBoZWFyZCBhcmUgb2Z0ZW4gZHJpdmVuIGJ5IHVzZXItaW50ZXJmYWNlIGRlc2lnbnMgaW50ZW5k ZWQgdG8gYWlkIHVzZXJzIGluIHNjYW5uaW5nIHRocm91Z2ggYSBncm91cC4gSW4gbXkgZXhwZXJp ZW5jZSBJ4oCZdmUgZm91bmQgdGhlc2Ugc3lzdGVtcyB0byBiZSBwYXJ0aWN1bGFybHkgdGVkaW91 cyB3aXRoIGxhcmdlIGdyb3Vwcy4gVGhlIFVYIG9mdGVuIGVuZHMgdXAgcmVxdWlyaW5nIGEgdXNl ci1hZ2VudCBzaWRlIHNlYXJjaCBmdW5jdGlvbiBzbyB5b3UgY2FuIGZpbmQgbmFtZXMgcmF0aGVy IHRoYW4gcGFnZSB0aHJvdWdoIGh1bmRyZWRzIG9mIHBhZ2VzLiBUaGlzIGlzIGluIHBhcnQgd2h5 IEkgc3VnZ2VzdCBncm91cCBtYW5hZ2VtZW50IGJlIGRvbmUgdXNpbmcgdXNlci1jZW50cmljIGNh bGxzIChzZWUgYmVsb3cpIG9yIHJlbGF0aW9uc2hpcCBiYXNpcyBsaWtlIHdlIHNlZSBpbiBsYXJn ZS1zY2FsZSBzb2NpYWwgbmV0d29ya3MuDQoNCk9uZSBjb3VsZCBhcmd1ZSB0aGF0IGdyb3VwIG1l bWJlcnNoaXAgc2hvdWxkIG5ldmVyIGJlIHJldHVybmVkIGFuZCBpbnN0ZWFkOg0KKiBVc2UgcXVl cmllcyBhZ2FpbnN0IFVzZXIgcmVzb3VyY2VzIHRvIHNlYXJjaCBmb3IgZ3JvdXBzIGEgVXNlciBp cyBhIG1lbWJlciBvZi4NCiogVXNlIGEgcXVlcnkgZmlsdGVyIGFnYWluc3QgR3JvdXAgcmVzb3Vy Y2VzIHRvIHRlc3QgaWYgYSBVc2VyIGlzIGEgbWVtYmVyLg0KDQpUaGVyZSBhcmUgY2FzZXMgd2hl cmUgcHJpdmlsZWdlZCBzZXJ2aWNlcyBuZWVkIHRvIHN5bmNocm9uaXplIG9yIHJlY29uY2lsZSBh Y3Jvc3MgZG9tYWlucy4gSW4gdGhlc2UgY2FzZXMsIGl0IGlzIGltcG9ydGFudCB0byByZXR1cm4g dGhlIGVudGlyZSBncm91cCBvYmplY3QgYXMgb2YgYSBwb2ludCBpbiB0aW1lIHNvIHRoYXQgY29u c2lzdGVuY3kgYmV0d2VlbiBzeXN0ZW1zIGNhbiBiZSBwZXJpb2RpY2FsbHkgY29tcGFyZWQuDQoN Ckl04oCZcyBxdWl0ZSBwb3NzaWJsZSB0aGUgZ3JvdXAgbWF5IHJlLWZvcm0gdG8gdGFja2xlIHRo aXMgcXVlc3Rpb24gZG93biB0aGUgcm9hZC4gQWZ0ZXItYWxsIHRoZSBwYWdpbmF0aW9uIHF1ZXN0 aW9uIGtlZXBzIGNvbWluZyB1cCBhbmQgaXMgd29ydGh5IG9mIG1vcmUgZGlzY3Vzc2lvbiBJTU8u DQoNCkNoZWVycywNCg0KUGhpbCBIdW50DQoNCg0KT24gRGVjIDQsIDIwMTgsIGF0IDI6MDQgQU0s IEphYXAgRnJhbmNrZSA8amFhcC5mcmFuY2tlPTQwaXdlbGNvbWUuY29tQGRtYXJjLmlldGYub3Jn PG1haWx0bzpqYWFwLmZyYW5ja2U9NDBpd2VsY29tZS5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90 ZToNCg0KSGkgYWxsLA0KDQpJIHdvdWxkIGxpa2UgdG8gaGF2ZSBteSB1bmRlcnN0YW5kaW5nIGNv bmZpcm1lZCBvbiB1c2FnZSBvZiB0aGUgR1JPVVAgZW5kcG9pbnQuDQoNCldoZW4gSSBkbyBhIEdF VCBvbiB0aGUgR1JPVVAgZW5kcG9pbnQsIHRoZSBtZW1iZXJzIGF0dHJpYnV0ZSBvZiBhIHJldHVy bmVkIEdST1VQIHJlc29pdXJjZSBjb250YWlucyBhIGxpc3Qgb2YgYWxsIG1lbWJlcnMgb2YgdGhh dCBncm91cC4NCklmIHRoZSBncm91cCBjb250YWlucyBvbmx5IGEgZmV3IG1lbWJlcnMsIHRoYXTi gJlzIG5vdCBhIHByb2JsZW0uDQpIb3dldmVyLCB3aGVuIHRoZSBncm91cCBjb250YWlucyBhIGxv dCBvZiBtZW1iZXJzLCB0aGUgcGF5bG9hZCBnZXRzIOKAnHRvbyBiaWfigJ0gYW5kIHBhZ2luYXRp b24gZm9yIHRoZSBtZW1iZXJzIGRvZXMgbm90IGFwcGx5Lg0KDQpJIGFzc3VtZSB0aGUgd2F5IHRv IHNvbHZlIHRoaXMgaXMgdG8gcmV0dXJuIGEgcGFydGlhbCByZXByZXNlbnRhdGlvbiBvZiB0aGUg Z3JvdXAgcmVzb3VyY2UgYnkgc2V0dGluZyB0aGUgc2NoZW1hIG1ldGFkYXRhIHJldHVybmVkPW5l dmVyIChvciByZXR1cm5lZD1yZXF1ZXN0KSBpbiB0aGUgZ3JvdXAgc2NoZW1hIGRlZmluaXRpb24/ DQpXaGVuIGRvaW5nIHNvLCBhIEdFVCBvbiB0aGUgR1JPVVAgZW5kcG9pbnQgcmVzdWx0cyBpbiBh IGxpc3Qgb2YgZ3JvdXBzIHdpdGggY29tbW9uIHJlc291cmNlIGF0dHJpYnV0ZXMgKGlkLCBleHRl cm5hbGlkLCBtZXRhKSBhbmQgZ3JvdXAgZGlzcGxheU5hbWUuDQoNClRvIHJldHJpZXZlIHRoZSBs aXN0IG9mIG1lbWJlcnMgb2YgYSBncm91cCwgb25lIHdvdWxkIGhhdmUgdG8gZG8gYSBHRVQgb24g dGhlIHVzZXIgZW5kcG9pbnQgdXNpbmcgYSBmaWx0ZXIgb24gdGhlIGdyb3VwcyBhdHRyaWJ1dGUs IHJpZ2h0PyBJbiB0aGlzIGNhc2UgcGFnaW5hdGlvbiBkb2VzIGFwcGx5Lg0KDQpZb3VyIHJlc3Bv bnNlcyBhcmUgYXBwcmVjaWF0ZWQsIHRoYW5rcyENCg0KSmFhcCBGcmFuY2tlDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc2NpbSBtYWlsaW5nIGxpc3QN CnNjaW1AaWV0Zi5vcmc8bWFpbHRvOnNjaW1AaWV0Zi5vcmc+DQpodHRwczovL3VybGRlZmVuc2Uu cHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLi5vcmdfbWFpbG1hbl9s aXN0aW5mb19zY2ltJmQ9RHdJR2FRJmM9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVC NjVlYXBJX0puRSZyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEm bT1Mc0NIN3FaQ2pJZ3dfWTFPcmhjdnFwc2pOZGVZYnA3cllEeU5yampUZUNZJnM9ZjVmM3dPcDlS TUhtc2xvYzJZZGtzbWJuYXhFd1piaHZBLV9uUDZmdWp2SSZlPQ0KDQo= --_000_81058E390D0B3847B069D324750FCFF576B17C17ALVMBXW01prodqu_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiU2Vnb2UgVUkgRW1vamkiOw0KCXBhbm9z ZS0xOjIgMTEgNSAyIDQgMiA0IDIgMiAzO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Ikx1 Y2lkYSBIYW5kd3JpdGluZyI7DQoJcGFub3NlLTE6MyAxIDEgMSAxIDEgMSAxIDEgMTt9DQovKiBT dHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05v cm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6 MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bh bi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5r Rm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2 Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9w LWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5hcHBsZS1zdHlsZS1zcGFuDQoJe21zby1zdHls ZS1uYW1lOmFwcGxlLXN0eWxlLXNwYW47fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1z aXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJ bWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkluZGVlZC4gV2UgYXJlIG9uZSBvZiB0aGUgb25lcyB3aG8gZmVlbCB0aGlz IHF1ZXN0aW9uIGlzIG5vdCBhZGVxdWF0ZWx5IGFkZHJlc3NlZOKApjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtM dWNpZGEgSGFuZHdyaXRpbmcmcXVvdDsiPkphY2tzb24gU2hhdzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlByb2R1Y3QgTWFuYWdlbWVudCwgT25lIElkZW50aXR5 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJpZiI+4piOPC9zcGFuPiAm IzQzOzEtNDI1LTU3Ny0xNzY5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gc2NpbSAmbHQ7c2NpbS1ib3VuY2VzQGll dGYub3JnJmd0OyA8Yj5PbiBCZWhhbGYgT2YgPC9iPg0KUGhpbCBIdW50PGJyPg0KPGI+U2VudDo8 L2I+IFR1ZXNkYXksIERlY2VtYmVyIDQsIDIwMTggOTowMyBBTTxicj4NCjxiPlRvOjwvYj4gSmFh cCBGcmFuY2tlICZsdDtqYWFwLmZyYW5ja2U9NDBpd2VsY29tZS5jb21AZG1hcmMuaWV0Zi5vcmcm Z3Q7PGJyPg0KPGI+Q2M6PC9iPiBzY2ltQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJl OiBbc2NpbV0gUmV0cmlldmluZyBtZW1iZXJzIG9mIGEgZ3JvdXA8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXYgc3R5bGU9ImJvcmRlcjpzb2xpZCAjOUM2NTAwIDEuMHB0O3BhZGRpbmc6Mi4wcHQgMi4w cHQgMi4wcHQgMi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImxpbmUtaGVpZ2h0 OjEyLjBwdDtiYWNrZ3JvdW5kOiNGRkVCOUMiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2NvbG9yOiM5QzY1MDAiPkNBVVRJT046PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtjb2xvcjpibGFjayI+IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNp ZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4NCiBhdHRh Y2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250 ZW50IGlzIHNhZmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5KYWFwLCA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPllv dSBhcmUgY29ycmVjdCB0aGF0IHRoZSBTQ0lNIHByb3RvY29sIGRvZXMgbm90IHN1cHBvcnQgc3Vi LXBhZ2luYXRpb24gb2YgZ3JvdXAgbWVtYmVycy4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyBxdWVzdGlvbiBoYXMgY29tZSB1 cCBzZXZlcmFsIHRpbWVzIHNpbmNlLCBzbyBJ4oCZbGwgcGFzcyBhbG9uZyBteSAqcGVyc29uYWwq IHRob3VnaHRzLi4uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkFzIGdyb3VwIG1lbWJlcnNoaXAgZ3Jvd3MsIHRoZSBhc3NvY2lhdGVkIGNvbmZp ZGVudGlhbGl0eSBvZiB0aGF0IGxpc3QgYWxzbyBncm93cy4gQXMgc3VjaCBtYW55IHNlcnZpY2Ug cHJvdmlkZXJzIGRvIG5vdCByZXR1cm4gbWVtYmVyIHZhbHVlcyBleGNlcHQgdG8gcHJpdmlsZWdl ZCBjbGllbnRzLiBMaXN0aW5nIHRoZSBtZW1iZXJzIG9mIGEgdGVhbSBpcyBvbmUgdGhpbmcsIGJ1 dCBsaXN0aW5nIHRoZSBlbXBsb3llZXMNCiBvZiBhIGNvbXBhbnksIG9yIGFsbCBjdXN0b21lcnMg aXMgcXVpdGUgYW5vdGhlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+QXMgZ3JvdXAgc2l6ZSBncm93cywgdGhlIGNoYW5nZSByYXRlIG9mIGEg R3JvdXAgcmVzb3VyY2UgYWxzbyBncm93cy4gTWFueSB1c2UgY2FzZXMgZm9yIHBhZ2luYXRpb24g YXNzdW1lIHRoYXQgY29uc2lzdGVudCByZXN1bHRzIGJldHdlZW4gcGFnZXMgd291bGQgYWxzbyBi ZSBzdXBwb3J0ZWQuIFRoYXQgbWVhbnMgdGhlIFNDSU0gU1Agd291bGQgaGF2ZSB0byBtYWludGFp biBhIHF1ZXJ5IHJlc3VsdHMgYnVmZmVyDQogaW4gb3JkZXIgdG8gcmV0dXJuIHJlc3VsdHMgd2hp bGUgdGhlIGRhdGEgbWF5IGJlIGNoYW5naW5nIHVuZGVybmVhdGguIFRoaXMgaW1wYWN0cyBTQ0lN IHNlcnZpY2UgcHJvdmlkZXJzIGluIGtleSB3YXlzOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+KiBTY2FsYWJpbGl0eSBjb3N0cyBvZiBwcm92aWRp bmcgY29uc2lzdGVudCByZXN1bHQgc2V0czxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+KiBSZXN1bHRzIGNvbnNpc3RlbmN5IGFuZCBpbmNyZWFzZWQg c2hhcmVkIHN0YXRlIGNvc3RzIGFjcm9zcyBjbHVzdGVycy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiogRGVuaWFsLW9mLVNlcnZpY2Ugcmlza3Mg YXNzb2NpYXRlZCBhcyBhdHRhY2tlcnMgcGVyZm9ybSBzZWVtaW5nbHkgaW5ub2NlbnQgcXVlcmll cyB0aGF0IGNvbnN1bWUgdW5kdWUgcmVzb3VyY2VzLiBMREFQIGhhcyB0aGlzIHByb2JsZW0sIGFu ZCBpdCBpcyBvbmUgb2YgdGhlIHJlYXNvbnMgSSBuZXZlciByZWNvbW1lbmQgTERBUCBmb3Igb3Bl biBpbnRlcm5ldCB1c2Ugd2l0aG91dCBzb21lIGZvcm0gb2YgY291bnRlci1tZWFzdXJlcy48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pk1hbnkgb2YgdGhlIHVzZS1jYXNlcyBJIGhhdmUgaGVhcmQgYXJlIG9mdGVuIGRyaXZlbiBieSB1 c2VyLWludGVyZmFjZSBkZXNpZ25zIGludGVuZGVkIHRvIGFpZCB1c2VycyBpbiBzY2FubmluZyB0 aHJvdWdoIGEgZ3JvdXAuIEluIG15IGV4cGVyaWVuY2UgSeKAmXZlIGZvdW5kIHRoZXNlIHN5c3Rl bXMgdG8gYmUgcGFydGljdWxhcmx5IHRlZGlvdXMgd2l0aCBsYXJnZSBncm91cHMuIFRoZSBVWCBv ZnRlbiBlbmRzIHVwDQogcmVxdWlyaW5nIGEgdXNlci1hZ2VudCBzaWRlIHNlYXJjaCBmdW5jdGlv biBzbyB5b3UgY2FuIGZpbmQgbmFtZXMgcmF0aGVyIHRoYW4gcGFnZSB0aHJvdWdoIGh1bmRyZWRz IG9mIHBhZ2VzLiBUaGlzIGlzIGluIHBhcnQgd2h5IEkgc3VnZ2VzdCBncm91cCBtYW5hZ2VtZW50 IGJlIGRvbmUgdXNpbmcgdXNlci1jZW50cmljIGNhbGxzIChzZWUgYmVsb3cpIG9yIHJlbGF0aW9u c2hpcCBiYXNpcyBsaWtlIHdlIHNlZSBpbiBsYXJnZS1zY2FsZSBzb2NpYWwNCiBuZXR3b3Jrcy48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5PbmUgY291bGQgYXJndWUgdGhhdCBncm91cCBtZW1iZXJzaGlwIHNob3VsZCBuZXZlciBi ZSByZXR1cm5lZCBhbmQgaW5zdGVhZDo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiogVXNlIHF1ZXJpZXMgYWdhaW5zdCBVc2VyIHJlc291cmNlcyB0 byBzZWFyY2ggZm9yIGdyb3VwcyBhIFVzZXIgaXMgYSBtZW1iZXIgb2YuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4qIFVzZSBhIHF1ZXJ5IGZpbHRl ciBhZ2FpbnN0IEdyb3VwIHJlc291cmNlcyB0byB0ZXN0IGlmIGEgVXNlciBpcyBhIG1lbWJlci48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhl cmUgYXJlIGNhc2VzIHdoZXJlIHByaXZpbGVnZWQgc2VydmljZXMgbmVlZCB0byBzeW5jaHJvbml6 ZSBvciByZWNvbmNpbGUgYWNyb3NzIGRvbWFpbnMuIEluIHRoZXNlIGNhc2VzLCBpdCBpcyBpbXBv cnRhbnQgdG8gcmV0dXJuIHRoZSBlbnRpcmUgZ3JvdXAgb2JqZWN0IGFzIG9mIGEgcG9pbnQgaW4g dGltZSBzbyB0aGF0IGNvbnNpc3RlbmN5IGJldHdlZW4gc3lzdGVtcyBjYW4gYmUgcGVyaW9kaWNh bGx5IGNvbXBhcmVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5JdOKAmXMgcXVpdGUgcG9zc2libGUgdGhlIGdyb3VwIG1heSByZS1mb3JtIHRv IHRhY2tsZSB0aGlzIHF1ZXN0aW9uIGRvd24gdGhlIHJvYWQuIEFmdGVyLWFsbCB0aGUgcGFnaW5h dGlvbiBxdWVzdGlvbiBrZWVwcyBjb21pbmcgdXAgYW5kIGlzIHdvcnRoeSBvZiBtb3JlIGRpc2N1 c3Npb24gSU1PLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5DaGVlcnMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9y OmJsYWNrIj5QaGlsIEh1bnQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5 bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+T24gRGVjIDQsIDIwMTgsIGF0IDI6MDQgQU0sIEphYXAgRnJhbmNrZSAm bHQ7PGEgaHJlZj0ibWFpbHRvOmphYXAuZnJhbmNrZT00MGl3ZWxjb21lLmNvbUBkbWFyYy5pZXRm Lm9yZyI+amFhcC5mcmFuY2tlPTQwaXdlbGNvbWUuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBh bGwsPGJyPg0KPGJyPg0KSSB3b3VsZCBsaWtlIHRvIGhhdmUgbXkgdW5kZXJzdGFuZGluZyBjb25m aXJtZWQgb24gdXNhZ2Ugb2YgdGhlIEdST1VQIGVuZHBvaW50Ljxicj4NCjxicj4NCldoZW4gSSBk byBhIEdFVCBvbiB0aGUgR1JPVVAgZW5kcG9pbnQsIHRoZSBtZW1iZXJzIGF0dHJpYnV0ZSBvZiBh IHJldHVybmVkIEdST1VQIHJlc29pdXJjZSBjb250YWlucyBhIGxpc3Qgb2YgYWxsIG1lbWJlcnMg b2YgdGhhdCBncm91cC48YnI+DQpJZiB0aGUgZ3JvdXAgY29udGFpbnMgb25seSBhIGZldyBtZW1i ZXJzLCB0aGF04oCZcyBub3QgYSBwcm9ibGVtLjxicj4NCkhvd2V2ZXIsIHdoZW4gdGhlIGdyb3Vw IGNvbnRhaW5zIGEgbG90IG9mIG1lbWJlcnMsIHRoZSBwYXlsb2FkIGdldHMg4oCcdG9vIGJpZ+KA nSBhbmQgcGFnaW5hdGlvbiBmb3IgdGhlIG1lbWJlcnMgZG9lcyBub3QgYXBwbHkuPGJyPg0KPGJy Pg0KSSBhc3N1bWUgdGhlIHdheSB0byBzb2x2ZSB0aGlzIGlzIHRvIHJldHVybiBhIHBhcnRpYWwg cmVwcmVzZW50YXRpb24gb2YgdGhlIGdyb3VwIHJlc291cmNlIGJ5IHNldHRpbmcgdGhlIHNjaGVt YSBtZXRhZGF0YSByZXR1cm5lZD1uZXZlciAob3IgcmV0dXJuZWQ9cmVxdWVzdCkgaW4gdGhlIGdy b3VwIHNjaGVtYSBkZWZpbml0aW9uPzxicj4NCldoZW4gZG9pbmcgc28sIGEgR0VUIG9uIHRoZSBH Uk9VUCBlbmRwb2ludCByZXN1bHRzIGluIGEgbGlzdCBvZiBncm91cHMgd2l0aCBjb21tb24gcmVz b3VyY2UgYXR0cmlidXRlcyAoaWQsIGV4dGVybmFsaWQsIG1ldGEpIGFuZCBncm91cCBkaXNwbGF5 TmFtZS48YnI+DQo8YnI+DQpUbyByZXRyaWV2ZSB0aGUgbGlzdCBvZiBtZW1iZXJzIG9mIGEgZ3Jv dXAsIG9uZSB3b3VsZCBoYXZlIHRvIGRvIGEgR0VUIG9uIHRoZSB1c2VyIGVuZHBvaW50IHVzaW5n IGEgZmlsdGVyIG9uIHRoZSBncm91cHMgYXR0cmlidXRlLCByaWdodD8gSW4gdGhpcyBjYXNlIHBh Z2luYXRpb24gZG9lcyBhcHBseS48YnI+DQo8YnI+DQpZb3VyIHJlc3BvbnNlcyBhcmUgYXBwcmVj aWF0ZWQsIHRoYW5rcyE8YnI+DQo8YnI+DQpKYWFwIEZyYW5ja2U8YnI+DQpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCnNjaW0gbWFpbGluZyBsaXN0 PGJyPg0KPGEgaHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciPnNjaW1AaWV0Zi5vcmc8L2E+PGJy Pg0KPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHBzLTNBX193d3cuaWV0Zi4ub3JnX21haWxtYW5fbGlzdGluZm9fc2NpbSZhbXA7ZD1Ed0lHYVEm YW1wO2M9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZhbXA7cj1u YTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJmFtcDttPUxzQ0g3cVpD aklnd19ZMU9yaGN2cXBzak5kZVlicDdyWUR5TnJqalRlQ1kmYW1wO3M9ZjVmM3dPcDlSTUhtc2xv YzJZZGtzbWJuYXhFd1piaHZBLV9uUDZmdWp2SSZhbXA7ZT0iPmh0dHBzOi8vdXJsZGVmZW5zZS5w cm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYuLm9yZ19tYWlsbWFuX2xp c3RpbmZvX3NjaW0mYW1wO2Q9RHdJR2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2 N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkx YUxjTE40S1pOQSZhbXA7bT1Mc0NIN3FaQ2pJZ3dfWTFPcmhjdnFwc2pOZGVZYnA3cllEeU5yampU ZUNZJmFtcDtzPWY1ZjN3T3A5Uk1IbXNsb2MyWWRrc21ibmF4RXdaYmh2QS1fblA2ZnVqdkkmYW1w O2U9PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_81058E390D0B3847B069D324750FCFF576B17C17ALVMBXW01prodqu_-- From nobody Wed Dec 5 23:53:49 2018 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84D0F131111 for ; Wed, 5 Dec 2018 23:53:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IlBqf9JPHQZt for ; Wed, 5 Dec 2018 23:53:43 -0800 (PST) Received: from SMTPGATE01.enterexchange.com (smtpgate01.enterexchange.com [109.205.192.241]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1210113110B for ; Wed, 5 Dec 2018 23:53:42 -0800 (PST) From: Jaap Francke To: Phil Hunt CC: "scim@ietf.org" Thread-Topic: [scim] Retrieving members of a group Thread-Index: AQHUi7i14an5S4BPL0upnN4P05EfXKVuvkGAgAKLIQA= Date: Thu, 6 Dec 2018 07:53:39 +0000 Message-ID: <1B4067CF-CCB4-41F6-BF6E-B9CF2E857C5B@iwelcome.com> References: In-Reply-To: Accept-Language: nl-NL, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.17.5.138] Content-Type: multipart/alternative; boundary="_000_1B4067CFCCB441F6BF6EB9CF2E857C5Biwelcomecom_" MIME-Version: 1.0 Archived-At: Subject: Re: [scim] Retrieving members of a group X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2018 07:53:49 -0000 --_000_1B4067CFCCB441F6BF6EB9CF2E857C5Biwelcomecom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIFBoaWwgZm9yIHlvdXIgcXVpY2sgcmVzcG9uc2UsDQoNCkkgYWdyZWUgd2l0aCB5b3Ug dGhhdCBJIGRvbuKAmXQgc2VlIGEgdXNlIGNhc2UgZm9yIChzdWIpcGFnaW5hdGlvbiBvbiB0aGUg dXNlci4gRmlsdGVycyBvbiB0aGUgVVNFUiBlbmRwb2ludCBpcyBhIGdvb2Qgd2F5IHRvIGxvb2sg Zm9yIHBhcnRpY3VsYXIgdXNlcihzKSB3aG8gYXJlIHBhcnQgb2YgYSBjZXJ0YWluIChsYXJnZSkg Z3JvdXA7IHByb2JhYmx5IGluIGNvbWJpbmF0aW9uIHdpdGggYSBmaWx0ZXIgb24gc29tZSBvdGhl ciB1c2VyIGF0dHJpYnV0ZS4NCg0KSSBkbyBzZWUgYSB1c2UgY2FzZSBmb3IgbGlzdGluZyBhdmFp bGFibGUgZ3JvdXBzLiBXZSBwbGFuIHRvIGhhdmUgYSBncm91cCBzY2hlbWEgZXh0ZW5zaW9uIHNv IHdlIGNhbiBmaWx0ZXIgb24gdGhlIGdyb3VwIGVuZHBvaW50IHRvIGxvb2sgZm9yIHBhcnRpY3Vs YXIgZ3JvdXBzLg0KVGhhdOKAmXMgd2h5IHdlIHBsYW4gdG8gcmV0dXJuIHBhcnRpYWwgZ3JvdXAg cmVwcmVzZW50YXRpb25zLCBleGNsdWRpbmcgdGhlIG1lbWJlcnMgd2hpY2ggYXJlIG5vdCByZWxl dmFudCBhdCB0aGF0IG1vbWVudC4NCkluIHRoaXMgd2F5IHdlIGRvbuKAmXQgZ2V0IGh1Z2UgcGF5 bG9hZHMgd2l0aG91dCBuZWVkIGZvciBzdWJwYWdpbmF0aW9uIGFuZCB3ZeKAmXJlIHN0aWxsIGNv bmZvcm1pbmcgdG8gdGhlIFNDSU0gc3BlY2lmaWNhdGlvbi4NCg0KSSB3YXMgY3VyaW91cyBpZiBh bnlvbmUgZWxzZSBkaWQgYSBzaW1pbGFyIHRoaW5nIHdoZW4gdXNpbmcgdGhlIGdyb3VwLWVuZHBv aW50IG9yIGhhcyB0aG91Z2h0cyBhYm91dCB0aGlzIGFwcHJvYWNoLiBJZiB0aGlzIGlzIGEgY29t bW9uIGFuZCBnb29kIGFwcHJvYWNoLCBpdCBjb3VsZCBiZSBwYXJ0IG9mIHRoZSBTQ0lNIHNwZWNp ZmljYXRpb25zIGFzIGFuIGV4YW1wbGUuDQoNClRoYW5rcw0KDQpKYWFwDQoNCk9uIDQgRGVjIDIw MTgsIGF0IDE4OjAzLCBQaGlsIEh1bnQgPHBoaWwuaHVudEBvcmFjbGUuY29tPG1haWx0bzpwaGls Lmh1bnRAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQpKYWFwLA0KDQpZb3UgYXJlIGNvcnJlY3QgdGhh dCB0aGUgU0NJTSBwcm90b2NvbCBkb2VzIG5vdCBzdXBwb3J0IHN1Yi1wYWdpbmF0aW9uIG9mIGdy b3VwIG1lbWJlcnMuDQoNClRoaXMgcXVlc3Rpb24gaGFzIGNvbWUgdXAgc2V2ZXJhbCB0aW1lcyBz aW5jZSwgc28gSeKAmWxsIHBhc3MgYWxvbmcgbXkgKnBlcnNvbmFsKiB0aG91Z2h0cy4uLg0KDQpB cyBncm91cCBtZW1iZXJzaGlwIGdyb3dzLCB0aGUgYXNzb2NpYXRlZCBjb25maWRlbnRpYWxpdHkg b2YgdGhhdCBsaXN0IGFsc28gZ3Jvd3MuIEFzIHN1Y2ggbWFueSBzZXJ2aWNlIHByb3ZpZGVycyBk byBub3QgcmV0dXJuIG1lbWJlciB2YWx1ZXMgZXhjZXB0IHRvIHByaXZpbGVnZWQgY2xpZW50cy4g TGlzdGluZyB0aGUgbWVtYmVycyBvZiBhIHRlYW0gaXMgb25lIHRoaW5nLCBidXQgbGlzdGluZyB0 aGUgZW1wbG95ZWVzIG9mIGEgY29tcGFueSwgb3IgYWxsIGN1c3RvbWVycyBpcyBxdWl0ZSBhbm90 aGVyLg0KDQpBcyBncm91cCBzaXplIGdyb3dzLCB0aGUgY2hhbmdlIHJhdGUgb2YgYSBHcm91cCBy ZXNvdXJjZSBhbHNvIGdyb3dzLiBNYW55IHVzZSBjYXNlcyBmb3IgcGFnaW5hdGlvbiBhc3N1bWUg dGhhdCBjb25zaXN0ZW50IHJlc3VsdHMgYmV0d2VlbiBwYWdlcyB3b3VsZCBhbHNvIGJlIHN1cHBv cnRlZC4gVGhhdCBtZWFucyB0aGUgU0NJTSBTUCB3b3VsZCBoYXZlIHRvIG1haW50YWluIGEgcXVl cnkgcmVzdWx0cyBidWZmZXIgaW4gb3JkZXIgdG8gcmV0dXJuIHJlc3VsdHMgd2hpbGUgdGhlIGRh dGEgbWF5IGJlIGNoYW5naW5nIHVuZGVybmVhdGguIFRoaXMgaW1wYWN0cyBTQ0lNIHNlcnZpY2Ug cHJvdmlkZXJzIGluIGtleSB3YXlzOg0KKiBTY2FsYWJpbGl0eSBjb3N0cyBvZiBwcm92aWRpbmcg Y29uc2lzdGVudCByZXN1bHQgc2V0cw0KKiBSZXN1bHRzIGNvbnNpc3RlbmN5IGFuZCBpbmNyZWFz ZWQgc2hhcmVkIHN0YXRlIGNvc3RzIGFjcm9zcyBjbHVzdGVycy4NCiogRGVuaWFsLW9mLVNlcnZp Y2Ugcmlza3MgYXNzb2NpYXRlZCBhcyBhdHRhY2tlcnMgcGVyZm9ybSBzZWVtaW5nbHkgaW5ub2Nl bnQgcXVlcmllcyB0aGF0IGNvbnN1bWUgdW5kdWUgcmVzb3VyY2VzLiBMREFQIGhhcyB0aGlzIHBy b2JsZW0sIGFuZCBpdCBpcyBvbmUgb2YgdGhlIHJlYXNvbnMgSSBuZXZlciByZWNvbW1lbmQgTERB UCBmb3Igb3BlbiBpbnRlcm5ldCB1c2Ugd2l0aG91dCBzb21lIGZvcm0gb2YgY291bnRlci1tZWFz dXJlcy4NCg0KTWFueSBvZiB0aGUgdXNlLWNhc2VzIEkgaGF2ZSBoZWFyZCBhcmUgb2Z0ZW4gZHJp dmVuIGJ5IHVzZXItaW50ZXJmYWNlIGRlc2lnbnMgaW50ZW5kZWQgdG8gYWlkIHVzZXJzIGluIHNj YW5uaW5nIHRocm91Z2ggYSBncm91cC4gSW4gbXkgZXhwZXJpZW5jZSBJ4oCZdmUgZm91bmQgdGhl c2Ugc3lzdGVtcyB0byBiZSBwYXJ0aWN1bGFybHkgdGVkaW91cyB3aXRoIGxhcmdlIGdyb3Vwcy4g VGhlIFVYIG9mdGVuIGVuZHMgdXAgcmVxdWlyaW5nIGEgdXNlci1hZ2VudCBzaWRlIHNlYXJjaCBm dW5jdGlvbiBzbyB5b3UgY2FuIGZpbmQgbmFtZXMgcmF0aGVyIHRoYW4gcGFnZSB0aHJvdWdoIGh1 bmRyZWRzIG9mIHBhZ2VzLiBUaGlzIGlzIGluIHBhcnQgd2h5IEkgc3VnZ2VzdCBncm91cCBtYW5h Z2VtZW50IGJlIGRvbmUgdXNpbmcgdXNlci1jZW50cmljIGNhbGxzIChzZWUgYmVsb3cpIG9yIHJl bGF0aW9uc2hpcCBiYXNpcyBsaWtlIHdlIHNlZSBpbiBsYXJnZS1zY2FsZSBzb2NpYWwgbmV0d29y a3MuDQoNCk9uZSBjb3VsZCBhcmd1ZSB0aGF0IGdyb3VwIG1lbWJlcnNoaXAgc2hvdWxkIG5ldmVy IGJlIHJldHVybmVkIGFuZCBpbnN0ZWFkOg0KKiBVc2UgcXVlcmllcyBhZ2FpbnN0IFVzZXIgcmVz b3VyY2VzIHRvIHNlYXJjaCBmb3IgZ3JvdXBzIGEgVXNlciBpcyBhIG1lbWJlciBvZi4NCiogVXNl IGEgcXVlcnkgZmlsdGVyIGFnYWluc3QgR3JvdXAgcmVzb3VyY2VzIHRvIHRlc3QgaWYgYSBVc2Vy IGlzIGEgbWVtYmVyLg0KDQpUaGVyZSBhcmUgY2FzZXMgd2hlcmUgcHJpdmlsZWdlZCBzZXJ2aWNl cyBuZWVkIHRvIHN5bmNocm9uaXplIG9yIHJlY29uY2lsZSBhY3Jvc3MgZG9tYWlucy4gSW4gdGhl c2UgY2FzZXMsIGl0IGlzIGltcG9ydGFudCB0byByZXR1cm4gdGhlIGVudGlyZSBncm91cCBvYmpl Y3QgYXMgb2YgYSBwb2ludCBpbiB0aW1lIHNvIHRoYXQgY29uc2lzdGVuY3kgYmV0d2VlbiBzeXN0 ZW1zIGNhbiBiZSBwZXJpb2RpY2FsbHkgY29tcGFyZWQuDQoNCkl04oCZcyBxdWl0ZSBwb3NzaWJs ZSB0aGUgZ3JvdXAgbWF5IHJlLWZvcm0gdG8gdGFja2xlIHRoaXMgcXVlc3Rpb24gZG93biB0aGUg cm9hZC4gQWZ0ZXItYWxsIHRoZSBwYWdpbmF0aW9uIHF1ZXN0aW9uIGtlZXBzIGNvbWluZyB1cCBh bmQgaXMgd29ydGh5IG9mIG1vcmUgZGlzY3Vzc2lvbiBJTU8uDQoNCkNoZWVycywNCg0KUGhpbCBI dW50DQoNCg0KT24gRGVjIDQsIDIwMTgsIGF0IDI6MDQgQU0sIEphYXAgRnJhbmNrZSA8amFhcC5m cmFuY2tlPTQwaXdlbGNvbWUuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpqYWFwLmZyYW5ja2U9 NDBpd2VsY29tZS5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KSGkgYWxsLA0KDQpJIHdv dWxkIGxpa2UgdG8gaGF2ZSBteSB1bmRlcnN0YW5kaW5nIGNvbmZpcm1lZCBvbiB1c2FnZSBvZiB0 aGUgR1JPVVAgZW5kcG9pbnQuDQoNCldoZW4gSSBkbyBhIEdFVCBvbiB0aGUgR1JPVVAgZW5kcG9p bnQsIHRoZSBtZW1iZXJzIGF0dHJpYnV0ZSBvZiBhIHJldHVybmVkIEdST1VQIHJlc29pdXJjZSBj b250YWlucyBhIGxpc3Qgb2YgYWxsIG1lbWJlcnMgb2YgdGhhdCBncm91cC4NCklmIHRoZSBncm91 cCBjb250YWlucyBvbmx5IGEgZmV3IG1lbWJlcnMsIHRoYXTigJlzIG5vdCBhIHByb2JsZW0uDQpI b3dldmVyLCB3aGVuIHRoZSBncm91cCBjb250YWlucyBhIGxvdCBvZiBtZW1iZXJzLCB0aGUgcGF5 bG9hZCBnZXRzIOKAnHRvbyBiaWfigJ0gYW5kIHBhZ2luYXRpb24gZm9yIHRoZSBtZW1iZXJzIGRv ZXMgbm90IGFwcGx5Lg0KDQpJIGFzc3VtZSB0aGUgd2F5IHRvIHNvbHZlIHRoaXMgaXMgdG8gcmV0 dXJuIGEgcGFydGlhbCByZXByZXNlbnRhdGlvbiBvZiB0aGUgZ3JvdXAgcmVzb3VyY2UgYnkgc2V0 dGluZyB0aGUgc2NoZW1hIG1ldGFkYXRhIHJldHVybmVkPW5ldmVyIChvciByZXR1cm5lZD1yZXF1 ZXN0KSBpbiB0aGUgZ3JvdXAgc2NoZW1hIGRlZmluaXRpb24/DQpXaGVuIGRvaW5nIHNvLCBhIEdF VCBvbiB0aGUgR1JPVVAgZW5kcG9pbnQgcmVzdWx0cyBpbiBhIGxpc3Qgb2YgZ3JvdXBzIHdpdGgg Y29tbW9uIHJlc291cmNlIGF0dHJpYnV0ZXMgKGlkLCBleHRlcm5hbGlkLCBtZXRhKSBhbmQgZ3Jv dXAgZGlzcGxheU5hbWUuDQoNClRvIHJldHJpZXZlIHRoZSBsaXN0IG9mIG1lbWJlcnMgb2YgYSBn cm91cCwgb25lIHdvdWxkIGhhdmUgdG8gZG8gYSBHRVQgb24gdGhlIHVzZXIgZW5kcG9pbnQgdXNp bmcgYSBmaWx0ZXIgb24gdGhlIGdyb3VwcyBhdHRyaWJ1dGUsIHJpZ2h0PyBJbiB0aGlzIGNhc2Ug cGFnaW5hdGlvbiBkb2VzIGFwcGx5Lg0KDQpZb3VyIHJlc3BvbnNlcyBhcmUgYXBwcmVjaWF0ZWQs IHRoYW5rcyENCg0KSmFhcCBGcmFuY2tlDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0Kc2NpbSBtYWlsaW5nIGxpc3QNCnNjaW1AaWV0Zi5vcmc8bWFpbHRv OnNjaW1AaWV0Zi5vcmc+DQpodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJs P3U9aHR0cHMtM0FfX3d3dy5pZXRmLi5vcmdfbWFpbG1hbl9saXN0aW5mb19zY2ltJmQ9RHdJR2FR JmM9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZyPW5hNUZWekJU V21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmbT1Mc0NIN3FaQ2pJZ3dfWTFPcmhj dnFwc2pOZGVZYnA3cllEeU5yampUZUNZJnM9ZjVmM3dPcDlSTUhtc2xvYzJZZGtzbWJuYXhFd1pi aHZBLV9uUDZmdWp2SSZlPQ0KDQoNCg== --_000_1B4067CFCCB441F6BF6EB9CF2E857C5Biwelcomecom_ Content-Type: text/html; charset="utf-8" Content-ID: <5E3D34E0A74FBD4FA315222BEEB21577@enterexchange.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NClRoYW5rcyBQaGlsIGZvciB5b3VyIHF1aWNrIHJl c3BvbnNlLA0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+SSBhZ3JlZSB3aXRoIHlvdSB0aGF0IEkgZG9u4oCZdCBzZWUgYSB1c2UgY2FzZSBmb3IgKHN1 YilwYWdpbmF0aW9uIG9uIHRoZSB1c2VyLiBGaWx0ZXJzIG9uIHRoZSBVU0VSIGVuZHBvaW50IGlz IGEgZ29vZCB3YXkgdG8gbG9vayBmb3IgcGFydGljdWxhciB1c2VyKHMpIHdobyBhcmUgcGFydCBv ZiBhIGNlcnRhaW4gKGxhcmdlKSBncm91cDsgcHJvYmFibHkgaW4gY29tYmluYXRpb24gd2l0aCBh IGZpbHRlciBvbiBzb21lIG90aGVyDQogdXNlciBhdHRyaWJ1dGUuPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIGRvIHNlZSBhIHVzZSBj YXNlIGZvciBsaXN0aW5nIGF2YWlsYWJsZSBncm91cHMuIFdlIHBsYW4gdG8gaGF2ZSBhIGdyb3Vw IHNjaGVtYSBleHRlbnNpb24gc28gd2UgY2FuIGZpbHRlciBvbiB0aGUgZ3JvdXAgZW5kcG9pbnQg dG8gbG9vayBmb3IgcGFydGljdWxhciBncm91cHMuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYXTi gJlzIHdoeSB3ZSBwbGFuIHRvIHJldHVybiBwYXJ0aWFsIGdyb3VwIHJlcHJlc2VudGF0aW9ucywg ZXhjbHVkaW5nIHRoZSBtZW1iZXJzIHdoaWNoIGFyZSBub3QgcmVsZXZhbnQgYXQgdGhhdCBtb21l bnQuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkluIHRoaXMgd2F5IHdlIGRvbuKAmXQgZ2V0IGh1Z2Ug cGF5bG9hZHMgd2l0aG91dCBuZWVkIGZvciBzdWJwYWdpbmF0aW9uIGFuZCB3ZeKAmXJlIHN0aWxs IGNvbmZvcm1pbmcgdG8gdGhlIFNDSU0gc3BlY2lmaWNhdGlvbi48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgd2FzIGN1cmlvdXMgaWYg YW55b25lIGVsc2UgZGlkIGEgc2ltaWxhciB0aGluZyB3aGVuIHVzaW5nIHRoZSBncm91cC1lbmRw b2ludCBvciBoYXMgdGhvdWdodHMgYWJvdXQgdGhpcyBhcHByb2FjaC4gSWYgdGhpcyBpcyBhIGNv bW1vbiBhbmQgZ29vZCBhcHByb2FjaCwgaXQgY291bGQgYmUgcGFydCBvZiB0aGUgU0NJTSBzcGVj aWZpY2F0aW9ucyBhcyBhbiBleGFtcGxlLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5KYWFwPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+T24gNCBEZWMgMjAxOCwgYXQgMTg6MDMsIFBoaWwgSHVudCAmbHQ7 PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIiBjbGFzcz0iIj5waGlsLmh1bnRA b3JhY2xlLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNo YW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdyYXA6IGJy ZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hp dGUtc3BhY2U7IiBjbGFzcz0iIj4NCkphYXAsDQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5Zb3UgYXJlIGNvcnJlY3QgdGhhdCB0aGUgU0NJTSBwcm90 b2NvbCBkb2VzIG5vdCBzdXBwb3J0IHN1Yi1wYWdpbmF0aW9uIG9mIGdyb3VwIG1lbWJlcnMuJm5i c3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj5UaGlzIHF1ZXN0aW9uIGhhcyBjb21lIHVwIHNldmVyYWwgdGltZXMgc2luY2UsIHNvIEni gJlsbCBwYXNzIGFsb25nIG15ICpwZXJzb25hbCogdGhvdWdodHMuLi48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFzIGdyb3VwIG1lbWJl cnNoaXAgZ3Jvd3MsIHRoZSBhc3NvY2lhdGVkIGNvbmZpZGVudGlhbGl0eSBvZiB0aGF0IGxpc3Qg YWxzbyBncm93cy4gQXMgc3VjaCBtYW55IHNlcnZpY2UgcHJvdmlkZXJzIGRvIG5vdCByZXR1cm4g bWVtYmVyIHZhbHVlcyBleGNlcHQgdG8gcHJpdmlsZWdlZCBjbGllbnRzLiBMaXN0aW5nIHRoZSBt ZW1iZXJzIG9mIGEgdGVhbSBpcyBvbmUgdGhpbmcsIGJ1dCBsaXN0aW5nIHRoZSBlbXBsb3llZXMg b2YNCiBhIGNvbXBhbnksIG9yIGFsbCBjdXN0b21lcnMgaXMgcXVpdGUgYW5vdGhlci48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFzIGdy b3VwIHNpemUgZ3Jvd3MsIHRoZSBjaGFuZ2UgcmF0ZSBvZiBhIEdyb3VwIHJlc291cmNlIGFsc28g Z3Jvd3MuIE1hbnkgdXNlIGNhc2VzIGZvciBwYWdpbmF0aW9uIGFzc3VtZSB0aGF0IGNvbnNpc3Rl bnQgcmVzdWx0cyBiZXR3ZWVuIHBhZ2VzIHdvdWxkIGFsc28gYmUgc3VwcG9ydGVkLiBUaGF0IG1l YW5zIHRoZSBTQ0lNIFNQIHdvdWxkIGhhdmUgdG8gbWFpbnRhaW4gYSBxdWVyeSByZXN1bHRzIGJ1 ZmZlciBpbiBvcmRlcg0KIHRvIHJldHVybiByZXN1bHRzIHdoaWxlIHRoZSBkYXRhIG1heSBiZSBj aGFuZ2luZyB1bmRlcm5lYXRoLiBUaGlzIGltcGFjdHMgU0NJTSBzZXJ2aWNlIHByb3ZpZGVycyBp biBrZXkgd2F5czo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+KiBTY2FsYWJpbGl0eSBjb3N0cyBvZiBw cm92aWRpbmcgY29uc2lzdGVudCByZXN1bHQgc2V0czwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4qIFJl c3VsdHMgY29uc2lzdGVuY3kgYW5kIGluY3JlYXNlZCBzaGFyZWQgc3RhdGUgY29zdHMgYWNyb3Nz IGNsdXN0ZXJzLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4qIERlbmlhbC1vZi1TZXJ2aWNlIHJpc2tz IGFzc29jaWF0ZWQgYXMgYXR0YWNrZXJzIHBlcmZvcm0gc2VlbWluZ2x5IGlubm9jZW50IHF1ZXJp ZXMgdGhhdCBjb25zdW1lIHVuZHVlIHJlc291cmNlcy4gTERBUCBoYXMgdGhpcyBwcm9ibGVtLCBh bmQgaXQgaXMgb25lIG9mIHRoZSByZWFzb25zIEkgbmV2ZXIgcmVjb21tZW5kIExEQVAgZm9yIG9w ZW4gaW50ZXJuZXQgdXNlIHdpdGhvdXQgc29tZSBmb3JtIG9mIGNvdW50ZXItbWVhc3VyZXMuPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+TWFueSBvZiB0aGUgdXNlLWNhc2VzIEkgaGF2ZSBoZWFyZCBhcmUgb2Z0 ZW4gZHJpdmVuIGJ5IHVzZXItaW50ZXJmYWNlIGRlc2lnbnMgaW50ZW5kZWQgdG8gYWlkIHVzZXJz IGluIHNjYW5uaW5nIHRocm91Z2ggYSBncm91cC4gSW4gbXkgZXhwZXJpZW5jZSBJ4oCZdmUgZm91 bmQgdGhlc2Ugc3lzdGVtcyB0byBiZSBwYXJ0aWN1bGFybHkgdGVkaW91cyB3aXRoIGxhcmdlIGdy b3Vwcy4gVGhlIFVYIG9mdGVuIGVuZHMgdXAgcmVxdWlyaW5nDQogYSB1c2VyLWFnZW50IHNpZGUg c2VhcmNoIGZ1bmN0aW9uIHNvIHlvdSBjYW4gZmluZCBuYW1lcyByYXRoZXIgdGhhbiBwYWdlIHRo cm91Z2ggaHVuZHJlZHMgb2YgcGFnZXMuIFRoaXMgaXMgaW4gcGFydCB3aHkgSSBzdWdnZXN0IGdy b3VwIG1hbmFnZW1lbnQgYmUgZG9uZSB1c2luZyB1c2VyLWNlbnRyaWMgY2FsbHMgKHNlZSBiZWxv dykgb3IgcmVsYXRpb25zaGlwIGJhc2lzIGxpa2Ugd2Ugc2VlIGluIGxhcmdlLXNjYWxlIHNvY2lh bCBuZXR3b3Jrcy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+T25lIGNvdWxkIGFyZ3VlIHRoYXQgZ3JvdXAgbWVtYmVyc2hp cCBzaG91bGQgbmV2ZXIgYmUgcmV0dXJuZWQgYW5kIGluc3RlYWQ6PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPiogVXNlIHF1ZXJpZXMgYWdhaW5zdCBVc2VyIHJlc291cmNlcyB0byBzZWFyY2ggZm9yIGdy b3VwcyBhIFVzZXIgaXMgYSBtZW1iZXIgb2YuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiogVXNlIGEg cXVlcnkgZmlsdGVyIGFnYWluc3QgR3JvdXAgcmVzb3VyY2VzIHRvIHRlc3QgaWYgYSBVc2VyIGlz IGEgbWVtYmVyLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+VGhlcmUgYXJlIGNhc2VzIHdoZXJlIHByaXZpbGVnZWQgc2VydmljZXMgbmVl ZCB0byBzeW5jaHJvbml6ZSBvciByZWNvbmNpbGUgYWNyb3NzIGRvbWFpbnMuIEluIHRoZXNlIGNh c2VzLCBpdCBpcyBpbXBvcnRhbnQgdG8gcmV0dXJuIHRoZSBlbnRpcmUgZ3JvdXAgb2JqZWN0IGFz IG9mIGEgcG9pbnQgaW4gdGltZSBzbyB0aGF0IGNvbnNpc3RlbmN5IGJldHdlZW4gc3lzdGVtcyBj YW4gYmUgcGVyaW9kaWNhbGx5IGNvbXBhcmVkLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SXTigJlzIHF1aXRlIHBvc3NpYmxlIHRoZSBn cm91cCBtYXkgcmUtZm9ybSB0byB0YWNrbGUgdGhpcyBxdWVzdGlvbiBkb3duIHRoZSByb2FkLiBB ZnRlci1hbGwgdGhlIHBhZ2luYXRpb24gcXVlc3Rpb24ga2VlcHMgY29taW5nIHVwIGFuZCBpcyB3 b3J0aHkgb2YgbW9yZSBkaXNjdXNzaW9uIElNTy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkNoZWVycyw8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNw YWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBzdHls ZT0ibGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB3b3JkLXdyYXA6IGJy ZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hp dGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9k ZTogc3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQo8ZGl2 IHN0eWxlPSJsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3Jh cDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRl ci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJz cC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4N CjxkaXYgc3R5bGU9ImxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgd29y ZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IGxpbmUtYnJlYWs6 IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtp dC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNz PSIiPg0KPGRpdiBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyB3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1i cmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAt d2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIg Y2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBs aW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB3b3JkLXdyYXA6IGJyZWFrLXdv cmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3Bh Y2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3Bh Y2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHdvcmQtd3JhcDogYnJl YWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0 ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iQXBwbGUtc3R5 bGUtc3BhbiIgc3R5bGU9ImJvcmRlci1jb2xsYXBzZTogc2VwYXJhdGU7IGxpbmUtaGVpZ2h0OiBu b3JtYWw7IGJvcmRlci1zcGFjaW5nOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9IndvcmQt d3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBh ZnRlci13aGl0ZS1zcGFjZTsiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IGNsYXNzPSIiPlBoaWwgSHVudDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9 ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBEZWMgNCwgMjAxOCwgYXQgMjowNCBB TSwgSmFhcCBGcmFuY2tlICZsdDs8YSBocmVmPSJtYWlsdG86amFhcC5mcmFuY2tlPTQwaXdlbGNv bWUuY29tQGRtYXJjLmlldGYub3JnIiBjbGFzcz0iIj5qYWFwLmZyYW5ja2U9NDBpd2VsY29tZS5j b21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUt aW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5IaSBh bGwsPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSSB3b3VsZCBsaWtlIHRvIGhhdmUgbXkg dW5kZXJzdGFuZGluZyBjb25maXJtZWQgb24gdXNhZ2Ugb2YgdGhlIEdST1VQIGVuZHBvaW50Ljxi ciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCldoZW4gSSBkbyBhIEdFVCBvbiB0aGUgR1JPVVAg ZW5kcG9pbnQsIHRoZSBtZW1iZXJzIGF0dHJpYnV0ZSBvZiBhIHJldHVybmVkIEdST1VQIHJlc29p dXJjZSBjb250YWlucyBhIGxpc3Qgb2YgYWxsIG1lbWJlcnMgb2YgdGhhdCBncm91cC48YnIgY2xh c3M9IiI+DQpJZiB0aGUgZ3JvdXAgY29udGFpbnMgb25seSBhIGZldyBtZW1iZXJzLCB0aGF04oCZ cyBub3QgYSBwcm9ibGVtLjxiciBjbGFzcz0iIj4NCkhvd2V2ZXIsIHdoZW4gdGhlIGdyb3VwIGNv bnRhaW5zIGEgbG90IG9mIG1lbWJlcnMsIHRoZSBwYXlsb2FkIGdldHMg4oCcdG9vIGJpZ+KAnSBh bmQgcGFnaW5hdGlvbiBmb3IgdGhlIG1lbWJlcnMgZG9lcyBub3QgYXBwbHkuPGJyIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KSSBhc3N1bWUgdGhlIHdheSB0byBzb2x2ZSB0aGlzIGlzIHRvIHJl dHVybiBhIHBhcnRpYWwgcmVwcmVzZW50YXRpb24gb2YgdGhlIGdyb3VwIHJlc291cmNlIGJ5IHNl dHRpbmcgdGhlIHNjaGVtYSBtZXRhZGF0YSByZXR1cm5lZD1uZXZlciAob3IgcmV0dXJuZWQ9cmVx dWVzdCkgaW4gdGhlIGdyb3VwIHNjaGVtYSBkZWZpbml0aW9uPzxiciBjbGFzcz0iIj4NCldoZW4g ZG9pbmcgc28sIGEgR0VUIG9uIHRoZSBHUk9VUCBlbmRwb2ludCByZXN1bHRzIGluIGEgbGlzdCBv ZiBncm91cHMgd2l0aCBjb21tb24gcmVzb3VyY2UgYXR0cmlidXRlcyAoaWQsIGV4dGVybmFsaWQs IG1ldGEpIGFuZCBncm91cCBkaXNwbGF5TmFtZS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQpUbyByZXRyaWV2ZSB0aGUgbGlzdCBvZiBtZW1iZXJzIG9mIGEgZ3JvdXAsIG9uZSB3b3VsZCBo YXZlIHRvIGRvIGEgR0VUIG9uIHRoZSB1c2VyIGVuZHBvaW50IHVzaW5nIGEgZmlsdGVyIG9uIHRo ZSBncm91cHMgYXR0cmlidXRlLCByaWdodD8gSW4gdGhpcyBjYXNlIHBhZ2luYXRpb24gZG9lcyBh cHBseS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpZb3VyIHJlc3BvbnNlcyBhcmUgYXBw cmVjaWF0ZWQsIHRoYW5rcyE8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpKYWFwIEZyYW5j a2U8YnIgY2xhc3M9IiI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxiciBjbGFzcz0iIj4NCnNjaW0gbWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KPGEg aHJlZj0ibWFpbHRvOnNjaW1AaWV0Zi5vcmciIGNsYXNzPSIiPnNjaW1AaWV0Zi5vcmc8L2E+PGJy IGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi4ub3JnX21haWxtYW5fbGlzdGluZm9fc2NpbSZhbXA7 ZD1Ed0lHYVEmYW1wO2M9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0pu RSZhbXA7cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJmFtcDtt PUxzQ0g3cVpDaklnd19ZMU9yaGN2cXBzak5kZVlicDdyWUR5TnJqalRlQ1kmYW1wO3M9ZjVmM3dP cDlSTUhtc2xvYzJZZGtzbWJuYXhFd1piaHZBLV9uUDZmdWp2SSZhbXA7ZT0iIGNsYXNzPSIiPmh0 dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3Lmll dGYuLm9yZ19tYWlsbWFuX2xpc3RpbmZvX3NjaW0mYW1wO2Q9RHdJR2FRJmFtcDtjPVJvUDFZdW1D WENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdO eTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT1Mc0NIN3FaQ2pJZ3dfWTFPcmhjdnFw c2pOZGVZYnA3cllEeU5yampUZUNZJmFtcDtzPWY1ZjN3T3A5Uk1IbXNsb2MyWWRrc21ibmF4RXda Ymh2QS1fblA2ZnVqdkkmYW1wO2U9PC9hPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjwvYm9keT4NCjwvaHRtbD4NCg== --_000_1B4067CFCCB441F6BF6EB9CF2E857C5Biwelcomecom_--